添加注释时显示用户名我的SQL无法记录用户名，只显示当前登录用户

Question

I am having the problem of displaying the username. My SQL cannot record the username who added the comments....only display the current login username...what should I do? I don't want customers to enter their name again when they insert comments....

<?php

if ($_POST) { 
    $name   = mysqli_escape_string($conn, $_POST['name']);
    $supplier   = mysqli_escape_string($conn, $_POST['supplier']);
    $description = mysqli_escape_string($conn, $_POST['description']);
    $remark  = mysqli_escape_string($conn, $_POST['remark']);
    $price     = mysqli_escape_string($conn, $_POST['price']);
    $image    = mysqli_escape_string($conn, $_POST['image']);
    $createdate   = mysqli_escape_string($conn, $_POST['createdate']);  
    $author   = ( isset( $_SESSION["username"] ) ? $_SESSION["username"] : "" );



    $result = mysqli_query($conn, "INSERT INTO products (name, supplier, description, remark, price, image, createdate,author) VALUES('$name', '$supplier', '$description', '$remark', '$price', '$image', '$createdate','$author')");

    if (!$result) {
        exit(mysqli_error($conn)); 
    }

    redirect('comment.php'); } else { ?>

<?php } ?>

SUBMIT.PHP

<?php
    include("common.php");
    logincheck();

    $action = (isset($_GET["action"]) ? $_GET["action"] : "");

    $link = mysql_connect("localhost", "XX", "XX");
    mysql_select_db("XX");

    $name = $_POST["name"];
    $supplier = $_POST["supplier"];
    $description = $_POST["description"];
    $remark = $_POST["remark"];
    $price = $_POST["price"];

    $image = '';
    if ( isset( $_FILES['image']['name'] ) && trim( $_FILES['image']['name'] ) != "" )
    {
        $uploaddir = "Products/";
        $image = $uploaddir . basename($_FILES['image']['name']);

        if ( ! move_uploaded_file( $_FILES['image']['tmp_name'], $image ) ) {
          die('Image cannot be uploaded');
        }
    }

    switch($action) {
        case "insert": 
            $sql = "insert into products (name, supplier, description, remark, price, image, createdate) values ('$name', '$supplier', '$description', '$remark', '$price', '$image', NOW())";
            mysql_query($sql, $link); 
            break;
        case "save": 
            $id = $_POST["id"];
            $image2 = $_POST["image2"];
            if ($image == '')
                $image = $image2;
            $sql = "update products set name='$name', supplier='$supplier', description='$description', remark='$remark', price='$price', image='$image' where id='$id'";
            mysql_query($sql, $link);
            break;
        case "delete": 
            $id = $_GET["id"];
            $sql = "delete from products where id=$id";
            mysql_query($sql, $link);
            break;
    }
Header( "Location: comment.php" );  
?>

Answer 1

You can use put the username in the $_SESSION object once they're logged in. Then you can just echo the username; for example: echo $_SESSION['username'];

Answer 2

This way you can set the session.

<?php
// page1.php

session_start();

echo 'Welcome to page #1';

$_SESSION['favcolor'] = 'green';


?>

You can see the session like this echo $_SESSION['favolor']; and it will show green

see http://php.net/manual/en/function.session-start.php

Answer 3

In your code the $conn is not initialized anywhere. Initialize it like this before trying the query.

$conn = mysqli_connect("localhost", "my_user", "my_password", "world");

Check the php manual for proper usage.

Hope that helps :)

Answer 4

my suggestion is session , when a user logs in, set a user_login session to 1 ,

and user_name session to the user name.

before every comment,check if user is logged in or not,

if he is not get the name from form,

if he is, hide the name input and save the user_name session in the database.

if you have any problem using session comment on this answer, i will explain , if you want

Answer 5

in the first line of your file(even before any spaces or new lines) you must add this:

<?php session_start(); ?>

after the user enters his username and password, you check if they match or not, you have :

$username = mysql_real_escape_string($_POST['username']);
$password = mysql_real_escape_string($_POST['password']);

if username and password matched with username and password stored in database, do this :

$_SESSION['username']=$username;
$_SESSION['log']=1;

and then , about your comment page :

<?php if(!isset($_SESSION['log']) || $_SESSION['log']!=1) { ?>
Enter your name : <input type='text' name='user_name'>
<?php } ?>

now, if user is logged in, he cant enter his name.

i assume your form posts data to post.php , now in post.php you must do this :

<?php
 if($_POST['user_name']) $name = $_POST['username']
else $name = $_SESSION['username']
 ?>

and then, Note: put <?php session_start() ?> in your first line of post.php

after all that, you can insert the comment and name of the user in the database. good luck with that, if my answer helped you, mark my question as accepted.