[arcuivie]

I'm trying to call upon a session ID but it doesn't seem to persist into one of the else clauses. If I set the session id via $username = $_SESSION["username"]; before that specific else clause, I can echo it at the end of the entire script, but if I put it inside that else clause I cannot echo it outside the script. Also, if I put it outside or in the else clause, I can't call upon it inside the else clause.

Here's the entire script:

PHP Code:

<?php

include("dbconnect.php"); 

session_start(); 

if ($_SESSION['logged'] != 1) { 

    header("Location: login.php"); 

    exit(); 

    }else{

         if (!isset($_POST['submit'])) {

?>



html form for POST variables



<?php

    } else {

        $username = $_SESSION["username"];

        $tablename = "_wo";

        $table = $username.$tablename;

        $apt = form($_POST['apt']);

        $reqdate = form($_POST['reqdate']);

        $desc = form($_POST['description']);        

        $sql = 'INSERT INTO `'.$table.'` (apt,reqdate,desc) VALUES (`'.$apt.'`,`'.$reqdate.'`,`'.$desc.'`)';

            if (($apt == "") || ($reqdate == "") || ($desc == "")) { 

                exit("There was a field missing, please correct the form.");

            }

        $q = mysql_query("SELECT * FROM `'.$tablename'` WHERE apt = '$apt'") or die (mysql_error()); 

        $r = mysql_num_rows($q); 

            if ($r > 0) { 

            exit("A work order has already been submitted for this apartment.  If you would like to amend this work order, please go to the work order page and select edit next to the work order.");

        } else {

            mysql_query($sql) or die (mysql_error());     

            mysql_close($db_connect); 

            }

        }

    }

?>

[arcuivie]

Hah, found the solution. I separated the form page and the mysql insert page, and changed the code to:

PHP Code:

<?php
include("dbconnect.php"); 
session_start(); 
if ($_SESSION['logged'] != 1) { 
    header("Location: login.php"); 
    exit(); 
    }else{
         if (!isset($_POST['submit'])) {
         header("Location: index.php");
    } else {
        $username = $_SESSION['username'];
        $tablename = "_wo";
        $table = $username.$tablename;
        $apt = form($_POST['apt']);
        $reqdate = form($_POST['reqdate']);
        $description = form($_POST['description']);  
            if (($apt == "") || ($reqdate == "") || ($description == "")) { 
                exit("There was a field missing, please correct the form.");
                }
        $q = mysql_query("SELECT * FROM `$table` WHERE apt = '$apt'") or die (mysql_error()); 
        $r = mysql_num_rows($q); 
        if ($r > 0) { 
        exit("Duplicate work order.");
        } else {
            mysql_query("INSERT INTO `$table` (apt,description,reqdate) VALUES ('$apt','$description','$reqdate')") or die (mysql_error());
            header ("Location: index.php");  
            mysql_close($db_connect); 
            }
        }
    }
?>