session_start();
...
...
...
echo "<table class='newstable' cellspacing='5'>\n";
echo "<tr>\n";
echo "<td class='newsitem'>\n";
echo "<h2 class='hdr2'>Корзина</h2>\n";
$col=0;
$rub=0;
$bask = "SELECT * FROM tbl_users WHERE session ='".session_id()."'";
$res_b = mysql_query($bask) or die(mysql_error());
$number = mysql_num_rows($res_b);
if ($number == 0) {
echo "INSERT INTO tbl_users (id, session) VALUES (NULL, '".session_id()."')";
$into = "INSERT INTO tbl_users (id, session) VALUES (NULL, '".session_id()."')";
mysql_query($into) or die(mysql_error());
} else {
$into = "Select pr.name, pr.kolvo, pr.price, ses.count from tbl_users us, ses_prod ses, tbl_products pr WHERE us.id = ses.user_id AND ses.prod_id =  pr.id AND us.session = '".session_id()."'";
$into_b = mysql_query($into) or die(mysql_error());
$num = mysql_num_rows($into_b);
if ($num != 0) {
while ($row=mysql_fetch_array($into_b)) {
$col=$col+$row[3];
$rub=$rub+$row[2];
}
}
}
echo "В вашей корзине <b>$col</b> товаров на сумму <b>$rub</b> рублей.  <p><a href=''>Оформить заказ</a>\n";
echo "</td>\n";
echo "</tr>\n";
echo "</table>\n";

session_start();
$arr = unserialize($_SESSION['bask']);
if (count($arr)>0)
{
for ($i = 0; $i < count($arr); $i++) {
$col=$col + $arr[$i][2];
$rub=$rub + $arr[$i][3];
}
} else {
$col=0;
$rub=0;
}
echo "В вашей корзине <b>$col</b> товаров на сумму <b>$rub</b> рублей.  <p><a href=''>Оформить заказ</a>\n";

<?
if ( isset($_GET["id"])){
$hostname = "";
$usern = "";
$pass = "";
$dbName = "";
mysql_connect($hostname,$usern,$pass) OR DIE("Не могу создать соединение ");
mysql_select_db($dbName) or die("Не могу подключиться к базе");
$query = "SELECT * FROM tbl_products WHERE id =".$_GET["id"];
$res = mysql_query($query) or die(mysql_error());
$row=mysql_fetch_array($res);
$arr = unserialize($_SESSION['bask']);
$i=count($arr);
$arr[$i][0]=$row[0];
$arr[$i][1]=$row[3]."-".$row[4];
$arr[$i][2]=1;
$arr[$i][3]=$row[6];
$_SESSION['bask'] = serialize($arr);
header('location:'.$_SERVER['HTTP_REFERER']);
} else
{
echo "error";
}
?>