PHP MySQL Admin Level

Question

This is my user table

CREATE TABLE `users` (
  `id` INT(11) NOT NULL AUTO_INCREMENT,
  `firstname` VARCHAR(255) NOT NULL,
  `lastname` VARCHAR(255) NOT NULL,
  `email` VARCHAR(255) NOT NULL,
  `username` VARCHAR(255) NOT NULL,
  `password` VARCHAR(100) NOT NULL,
  `level` ENUM('0','1') NOT NULL DEFAULT '0',
  PRIMARY KEY (`id`)

So lets say I am on index.php

I want that if user level = 1, then he can see a link appear on the page. Other wise if level = 0, he will never see that link.

How can I do that?

I just want to add like if (level =1){ <a href=...><a> }. isnt it something like that? — Johnny
– Johnny, Commented Jun 19, 2015 at 3:45
Yes my index file is got other stuff. its a forum script. categories, topics etc. What I want to do is add a link that goes to users.php where you can see the list of users. users.php works fine. I just want to hide that link from everyone, just the people who have level = 1 can see it, in other words only admins. But I dont have an admin system, I just made a level attribute — Johnny
– Johnny, Commented Jun 19, 2015 at 3:48

ryvasquez · Accepted Answer · 2015-06-19 04:11:49Z

1

I think you want something like this.

in your login module do something like this

session_start();
$_SESSION['level'] = 1; // passed the level from you database.

and in your pages.

session_start();
if (isset($_SESSION['level']) && (int) $_SESSION['level'] === 1) {
    echo '<a>Link for admin</a>';
}

edited Jun 19, 2015 at 4:11

answered Jun 19, 2015 at 4:03

ryvasquez

1588 bronze badges

Sign up to request clarification or add additional context in comments.

7 Comments

Johnny Over a year ago

login module you mean in my login.php?

ryvasquez Over a year ago

what value did you passed to $_SESSION['level']?

Johnny Over a year ago

this is my index.php pastebin.com/bA1tTq5c, and this is my login.php pastebin.com/5k4xsAxs before adding the level stuff. Parts of the code

ryvasquez Over a year ago

one more thing!! I see you still using mysql_query() it's now deprecated and vulnerable to sql injection you should use mysqli or pdo

Johnny Over a year ago

how hard is it to change my whole script to mysqli? is there a converter tool?

|

Kyle Coventry · Accepted Answer · 2015-06-19 03:44:34Z

0

You should use session codes. Set a session code value to the value of level, and depending on that value display the link or not.

answered Jun 19, 2015 at 3:44

Kyle Coventry

5553 silver badges9 bronze badges

3 Comments

Johnny Over a year ago

like this? if(isset($_SESSION['level = 1'])){ echo "Link"; }

Kyle Coventry Over a year ago

@Mista Josh above illustrates the idea fairly well. You need to set level in your database first, and then set the session value based on the level database entry as he does.

Josh Over a year ago

@KyleBooth he mentioned he was unsure how to write the code, by just giving him the theory you are not really answering the question 100% hence my answer (not like it matters now anyway).

Josh · Accepted Answer · 2015-06-19 04:10:24Z

0

You could use $_SESSION. So for example when your user logs in, you can set the session variable for level such as:

When your user logs in:

session_start(); // You must use this at the beginning of every page you use $_SESSION on
// Query here to select your user
$mysqli = new mysqli(HOST_NAME, DB_USER, DB_PASSWORD, DB_NAME);
//$username is the username of the user who is logging in.
$sql = "SELECT * FROM users WHERE username = '$username'";
$mysqli->query($sql);

if ($result && $result->num_rows > 0)
{
    while ($row = $result->fetch_assoc())
    {
        $_SESSION['level'] = $row['level'];
    }
}

On your index.php page (or any other page you want to check the user level):

session_start(); // This is reqd once on any page you use $_SESSION
// Then on your page you can use 
if (!empty($_SESSION['level']) && $_SESSION['level'] == 1)
{
    echo '<a href="">Your Link</a>';
}

answered Jun 19, 2015 at 4:10

Josh

96910 silver badges19 bronze badges

1 Comment

Johnny Over a year ago

this is my index.php pastebin.com/bA1tTq5c, and this is my login.php pastebin.com/5k4xsAxs

Leandro Papasidero · Accepted Answer · 2015-06-19 04:14:18Z

0

<?php
try {
    $dbh = new PDO("mysql:host=localhost;dbname=dbName", 'dbUser', 'dbPassword');

    //Check username and password
    /*** The SQL SELECT statement ***/
    $sth = $dbh->prepare("SELECT level FROM user WHERE username = ? and password = ?");
    $sth->execute(array('[email protected]', '2222')); // these values are passed via SESSION, POST, etc
                                                     //make sure to encrypt password
    $user = $sth->fetch(PDO::FETCH_ASSOC);

    if(!empty($user) && $user['level'] == 1) {
        echo "link";
    }  else {
        echo "no-link";
    }

    /*** close the database connection ***/
    $dbh = null;
} catch (PDOException $e) {
    echo $e->getMessage();
}

answered Jun 19, 2015 at 4:14

Leandro Papasidero

3,7381 gold badge20 silver badges33 bronze badges

Collectives™ on Stack Overflow

PHP MySQL Admin Level

4 Answers 4

7 Comments

3 Comments

1 Comment

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

4 Answers 4

7 Comments

3 Comments

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Related