bruger authentication
Med lidt hjælp her inde fra fik jeg lavet min user.php fil som tjekker om de er admins eller normale brugere... Smider næste kode i næste kommentar lige for at skille dem ad... user.php ser sådan ud:<?php SESSION_START();
include "connect.php";
if($_GET["doLogin"])
{
$uName = mysql_real_escape_string($_POST["username"]);
$pWord = md5(mysql_real_escape_string($_POST["password"]));
$q = mysql_query("SELECT * FROM users WHERE username='$uName'")or die(mysql_error());
$n = mysql_num_rows($q);
if($n > 0)
{
$r = mysql_fetch_assoc($q);
if($r["password"] == $pWord){
$_SESSION["userid"] = $r["user_id"];
Header("Location: user.php");
}else
{
echo 'Fokert kodeord!';
}
}else
{
echo 'Brugeren findes ikke.';
}
}
if($_SESSION["userid"])
{
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "DTD/xhtml1-transitional.dtd">
<html>
<head>
<title>UCN Bestillingsside</title>
<link href="style/style.css" rel="stylesheet" type="text/css" />
</head>
<body bgcolor="#4d4a37"><div id="main">
<?php
$getUser = mysql_query("SELECT * FROM users WHERE user_id='$_SESSION[userid]'")or die(mysql_error());
$res = mysql_fetch_assoc($getUser);
echo 'Velkommen '.$res["username"].'!<br /><br />Du kan nu bestille mad ved at klikke herunder:<br /> <a href="menubestilling.php">- Bestil mad</a>';
if($res["admin"] == 1)
{
echo '<br /><br />Admin menu:<br />';
echo '<font color="#bab9ad" /><a href="orders.php?list=all"> - Se ordrer</a></font><br />';
echo '<font color="#bab9ad" /><a href="newsadd.php"> - Skriv nyhed</a></font><br />';
echo '<font color="#bab9ad" /><a href="register.php"> - Registrer ny bruger</a></font><br />';
}
?>
</div>
</body>
</html>
<?php
}else
{
echo '
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "DTD/xhtml1-transitional.dtd">
<html>
<head>
<title>UCN Bestillingsside</title>
<link href="style/style.css" rel="stylesheet" type="text/css" />
</head>
<body bgcolor="#4d4a37">
<div id="main">
<form method="POST" action="user.php?doLogin=do">
<table width="100%">
<tr><td>Brugernavn:</td><td> <input type="text" name="username" size="20"> </td></tr>
<tr><td>Password:</td><td> <input type="password" name="password" size="20"> </td></tr>
<tr><td colspan="2" align="center"><input type="submit" value="Login" name="login"></td></tr>
</table>
</form>
</div>
</body>
</html>
';
}
?>
