I need to update the session_id in the database every time a users login to my page. So it saves the active session from the user that is saved in the variable $sesId. I tried this but didn't worked.
<?php
session_start();
// Change this to your connection info.
$DATABASE_HOST = 'localhost';
$DATABASE_USER = 'USer1';
$DATABASE_PASS = 'BBHHJJ';
$DATABASE_NAME = 'database';
$email = $_POST['email'];
$hash = password_hash($password, PASSWORD_DEFAULT);
// Creating a connection
$conn = new mysqli($DATABASE_HOST, $DATABASE_USER, $DATABASE_PASS, $DATABASE_NAME);
// Check connection
if ($conn->connect_error) {
die("Connection failed: " . $conn->connect_error);
}
echo "Connected successfully";
// Prepare our SQL, preparing the SQL statement will prevent SQL injection.
if ($stmt = $conn->prepare('SELECT id, password, Status, linkPersoonlijkplan , PersoonlijkPlan FROM accounts WHERE username =? ')) {
$stmt->bind_param('s', $_POST['username']);
$stmt->execute();
// Store the result so we can check if the account exists in the database.
$stmt->store_result();
echo "check";
}
else{
header("location:inlogF2.php");
}
if ($stmt->num_rows > 0) {
$stmt->bind_result($id, $password, $Status, $linkPersoonlijkplan,$PersoonlijkPlan);
$stmt->fetch();
if (password_verify($_POST['password'], $password)) {
session_regenerate_id();
$_SESSION['loggedin'] = TRUE;
$_SESSION['name'] = $_POST['username'];
$_SESSION['id'] = $id;
$_SESSION['Status'] = $Status;
$_SESSION['pw'] = $password;
$_SESSION['linkPersoonlijkplan'] = $linkPersoonlijkplan;
$_SESSION['Ingelogd'] = "1";
$_SESSION['PersoonlijkPlan'] = $PersoonlijkPlan;
echo 'Welcome ' . $_SESSION['name'] . '!';
$sesId = session_id();
$stmt = $conn->mysqli->prepare("UPDATE accounts SET sessie=? WHERE id=?");
$stmt->bind_param('s', $sesId, $id);
$stmt->execute();
header("location:homepage.php");
} else {
$_SESSION['fout'] = "3";
echo 'Incorrect password!';
header("location:inlogF.php");
}
} else {
header("location:inlogF2.php");
}
$stmt->close();
?>
