title: PHP fetch(get) specific data from specific user when logged in
body: <p>However my problem is that I want the logged in person to see "for example [age,wallet]etc..</p>
  
  <p>I used the login and register script from a website to get me started. They already had the code for name ( When someone logged in it said, Hello, ['username'] )</p>
  
  <p>The url for the tutorial is here: <a href="http://www.wikihow.com/Create-a-Secure-Login-Script-in-PHP-and-MySQL" rel="nofollow">How to Create a Secure Login Script in PHP and MySQL</a></p>
  
  <p>It might not be the safest or best way to create but that is why I am learning.</p>
  
  <p><strong>EDIT:</strong> Just to make my question more understandable:
  I wan't to get data from my database like age for example.
  When I log in I get Hello, Chris. 
  But I want Hello, Chris. Your age is 20 for example.
  I can't seem to get this done no matter what I try.
  Code:</p>
  
  <p><strong>index.php</strong></p>
  
  <pre><code>&lt;?php
      include_once 'includes/db_connect.php';
      include_once 'includes/functions.php';
  
      sec_session_start(); 
  
      ?&gt;
  
      &lt;!DOCTYPE HTML&gt;
      &lt;html lang="en"&gt;
      &lt;head&gt;
      &lt;meta charset="utf-8" /&gt;
      &lt;title&gt;Project 0N3&lt;/title&gt;
      &lt;link rel="stylesheet" href="style/style.css" /&gt;
      &lt;meta name="generator" content="localhost"&gt;
      &lt;/head&gt;
  
      &lt;body&gt;
  
          &lt;div id="wrapper"&gt;
  
  
              &lt;div id="top-panel-right-beta"&gt;
              &lt;a class="two" href="index.php"&gt;Dark Theme | &lt;/a&gt;
              &lt;a class="two" href="light-index.php"&gt;Light Theme[BETA]&lt;/a&gt;
              &lt;/div&gt;
  
              &lt;?php if(login_check($mysqli) == true) : ?&gt;
  
  
              &lt;div class="welcome"&gt;
                &lt;p&gt;Hello, &lt;?php echo htmlentities ($_SESSION['username']); ?&gt;!&lt;/p&gt;
                  &lt;/div&gt;
  
              &lt;div id="waller"&gt;
                  &lt;?php
  
      ?&gt;
                  &lt;p&gt;Your Wallet: &lt;?php echo ($_SESSION['wallet']);?&gt;&lt;/p&gt;
                  &lt;/div&gt;
  
          &lt;div id="home"&gt;
              &lt;div id="top-panel"&gt;
                  &lt;a class="one" href="index.php" &gt;Home | &lt;/a&gt;
                  &lt;a class="one" href="membersarea.php"&gt;Members Area | &lt;/a&gt;
                  &lt;a class="one" href="createaccount.php"&gt; Create a game account | &lt;/a&gt;
                  &lt;a class="one" href="includes/logout.php"&gt;Log Out&lt;/a&gt;
  
                  &lt;/div&gt;
  
  
  
  
              &lt;div id="content"&gt;
  
                  &lt;h1&gt;It is all about Project 0N3&lt;/h1&gt;
                  &lt;p class="alpha"&gt;Alpha 0.0.1&lt;/p&gt;
          &lt;p&gt;Mauris convallis ipsum lorem, id posuere sem semper vitae. Curabitur elementum, nibh a lobortis eleifend, sem diam ultricies massa, non congue risus dui vitae purus. Aliquam ut lectus vitae quam hendrerit volutpat. Sed iaculis vestibulum sapien. Aenean molestie, tortor faucibus condimentum consequat, quam risus ultrices orci, sed sagittis velit magna ultrices purus. Phasellus non odio eget erat pellentesque ullamcorper eget sit amet libero. Cras vel facilisis ipsum. Quisque rutrum viverra consequat. Sed posuere eros in nisi lobortis accumsan quis ac neque. Aliquam at diam rhoncus, accumsan nunc id, fringilla elit. Integer scelerisque leo nec metus accumsan mollis. Curabitur iaculis nibh et turpis gravida pulvinar.
          &lt;/p&gt;
  
                    &lt;div id="footer"&gt;
                  &amp;copy; 2014 Project 0N3. All rights reserved
                  &lt;/div&gt;
                  &lt;/div&gt;
  
  
      &lt;?php  else : ?&gt;
  
  
                 &lt;div id="top-panel-right_2"&gt;
                  &lt;a class="one" href="registeraccount.php"&gt;Register | &lt;/a&gt;
                  &lt;a class="one" href="login.php"&gt;Log in&lt;/a&gt;
                  &lt;/div&gt;
              &lt;div id="content-noacc"&gt;
  
      &lt;h1 class="h1beta"&gt; ALPHA Ver 0.0.1 &lt;/h1&gt;
  
                  &lt;div class="logohuge"&gt;
                      &lt;a href="about.php"&gt;&lt;img src="images/logo01.png" width="" height="" alt="logo01"&gt;&lt;/a&gt;
  
                  &lt;/div&gt;  
                   &lt;/div&gt;         
  
                &lt;div id="footer2"&gt;
                  &amp;copy; 2014 Project 0N3. All rights reserved
                  &lt;/div&gt;
  
  
  
  
      &lt;?php endif; ?&gt;
  
  
          &lt;/div&gt;
  
      &lt;!--    End of div wrapper --&gt;
          &lt;/div&gt;
      &lt;/body&gt;
      &lt;/html&gt;
  </code></pre>
  
  <p><strong>function.php</strong></p>
  
  <pre><code>&lt;?php
      include_once 'psl-config.php';
  
      function sec_session_start() 
      {
          $session_name = 'sec_session_id';   // Set a custom session name
          $secure = 'SECURE';
          // This stops JavaScript being able to access the session id.
          $httponly = true;
          // Forces sessions to only use cookies.
          if (ini_set('session.use_only_cookies', 1) === FALSE) {
              header("Location: ../error.php?err=Could not initiate a safe session (ini_set)");
              exit();
          }
          // Gets current cookies params.
          $cookieParams = session_get_cookie_params();
          session_set_cookie_params($cookieParams["lifetime"],
              $cookieParams["path"], 
              $cookieParams["domain"], 
              $secure,
              $httponly);
          // Sets the session name to the one set above.
          session_name($session_name);
          session_start();            // Start the PHP session 
          session_regenerate_id();    // regenerated the session, delete the old one. 
      }
  
      function login($email, $password, $mysqli, $wallet) {
          // Using prepared statements means that SQL injection is not possible. 
          if ($stmt = $mysqli-&gt;prepare("SELECT id, username, password, salt, wallet 
              FROM members
             WHERE email = ?
              LIMIT 1")) {
              $stmt-&gt;bind_param('s', $email);  // Bind "$email" to parameter.
              $stmt-&gt;execute();    // Execute the prepared query.
              $stmt-&gt;store_result();
  
              // get variables from result.
              $stmt-&gt;bind_result($user_id, $username, $db_password, $salt, $wallet);
              $stmt-&gt;fetch();
  
              // hash the password with the unique salt.
              $password = hash('sha512', $password . $salt);
              if ($stmt-&gt;num_rows == 1) {
                  // If the user exists we check if the account is locked
                  // from too many login attempts 
  
                  if (checkbrute($user_id, $mysqli) == true) {
                      // Account is locked 
                      // Send an email to user saying their account is locked
                      return false;
                  } else {
                      // Check if the password in the database matches
                      // the password the user submitted.
                      if ($db_password == $password) {
                          // Password is correct!
                          // Get the user-agent string of the user.
                          $user_browser = $_SERVER['HTTP_USER_AGENT'];
                          // XSS protection as we might print this value
                          $user_id = preg_replace("/[^0-9]+/", "", $user_id);
                          $_SESSION['user_id'] = $user_id;
                          // XSS protection as we might print this value
                          $username = preg_replace("/[^a-zA-Z0-9_\-]+/", 
                                                                      "", 
                                                                      $username);
                          $_SESSION['username'] = $username;
                          $_SESSION['login_string'] = hash('sha512', 
                                    $password . $user_browser);
                          // Login successful.
                          return true;
                      } else {
                          // Password is not correct
                          // We record this attempt in the database
                          $now = time();
                          $mysqli-&gt;query("INSERT INTO login_attempts(user_id, time)
                                          VALUES ('$user_id', '$now')");
                          return false;
                      }
                  }
              } else {
                  // No user exists.
                  return false;
              }
          }
      }
      function checkbrute($user_id, $mysqli) {
          // Get timestamp of current time 
          $now = time();
  
          // All login attempts are counted from the past 2 hours. 
          $valid_attempts = $now - (2 * 60 * 60);
  
          if ($stmt = $mysqli-&gt;prepare("SELECT time 
                                   FROM login_attempts &lt;code&gt;&lt;pre&gt;
                                   WHERE user_id = ? 
                                  AND time &gt; '$valid_attempts'")) {
              $stmt-&gt;bind_param('i', $user_id);
  
              // Execute the prepared query. 
              $stmt-&gt;execute();
              $stmt-&gt;store_result();
  
              // If there have been more than 5 failed logins 
              if ($stmt-&gt;num_rows &gt; 5) {
                  return true;
              } else {
                  return false;
              }
          }
      }
      function login_check($mysqli) {
          // Check if all session variables are set 
  
          if (isset($_SESSION['user_id'], 
                              $_SESSION['username'],
                              $_SESSION['login_string'])) {
  
              $user_id = $_SESSION['user_id'];
              $login_string = $_SESSION['login_string'];
              $username = $_SESSION['username'];
  
  
              // Get the user-agent string of the user.
              $user_browser = $_SERVER['HTTP_USER_AGENT'];
  
              if ($stmt = $mysqli-&gt;prepare("SELECT password 
                                            FROM members 
                                            WHERE id = ? LIMIT 1")) {
                  // Bind "$user_id" to parameter. 
                  $stmt-&gt;bind_param('i', $user_id);
                  $stmt-&gt;execute();   // Execute the prepared query.
                  $stmt-&gt;store_result();
  
                  if ($stmt-&gt;num_rows == 1) {
                      // If the user exists get variables from result.
                      $stmt-&gt;bind_result($password);
                      $stmt-&gt;fetch();
                      $login_check = hash('sha512', $password . $user_browser);
  
                      if ($login_check == $login_string) {
                          // Logged In!!!! 
                          return true;
                      } else {
                          // Not logged in 
                          return false;
                      }
                  } else {
                      // Not logged in 
                      return false;
                  }
              } else {
                  // Not logged in 
                  return false;
              }
          } else {
              // Not logged in 
              return false;
          }
      }
      function esc_url($url) {
  
          if ('' == $url) {
              return $url;
          }
  
          $url = preg_replace('|[^a-z0-9-~+_.?#=!&amp;;,/:%@$\|*\'()\\x80-\\xff]|i', '', $url);
  
          $strip = array('%0d', '%0a', '%0D', '%0A');
          $url = (string) $url;
  
          $count = 1;
          while ($count) {
              $url = str_replace($strip, '', $url, $count);
          }
  
          $url = str_replace(';//', '://', $url);
  
          $url = htmlentities($url);
  
          $url = str_replace('&amp;amp;', '&amp;#038;', $url);
          $url = str_replace("'", '&amp;#039;', $url);
  
          if ($url[0] !== '/') {
              // We're only interested in relative links from $_SERVER['PHP_SELF']
              return '';
          } else {
              return $url;
          }
      }
  </code></pre>