我不能以管理员身份登录


I can't log in as admin

我已经创建了一个登录系统,我可以登录作为管理员,或作为用户(雇主)。如果我以管理员身份登录,在下一页我可以更新、删除或创建一个新的雇主,如果我以雇主身份登录,则没有这些选项。这工作得很好,但是今天当我以admin身份登录时,我没有这个权限,我得到一个消息:你不能创建一个新用户(这是我在else语句中发布的消息)。

这是我的主页。php脚本。任何帮助吗?

<?php
    require_once("connection.php");
    $user_id = $_SESSION['userid'];
    $role = $_SESSION['role'];
    $sql = "SELECT * FROM login";
    $stmt = $conn->query($sql);

    ?>
    <html>
    <head>
        <link rel="stylesheet" href="css/bootstrap.min.css">
        <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css">
    </head>
    <body>
    <nav class="navbar navbar-default">
        <div class="navbar-header">
          <a class="navbar-brand" href="#"><?php echo $role ?></a>
        </div>
        <div class="container">
        <?php if($role == 'admin') { ?>
        <a href="new_emp.php"><button type="button" class="btn btn-default navbar-btn">New Employee</button></a>
      <?php } else { }?>
        <a href="info.php"><button type="button" class="btn btn-default navbar-btn">Employee</button></a>
        <a href="logout.php"><button type="button" class="btn btn-default navbar-btn">Sign Out</button></a>
      </div>
    </nav>
    <div class="box">
        <div class="col-sm-4 col-md-6 col-md-offset-2">
            <table class="table table-hover table-striped table bordered" border="1">
                <thead>
                    <tr>
                        <th style="width:250px">UserName</th>
                        <th style="width:250px">User Password</th>
                        <th style="width:250px">User Role</th>
                        <th>Action</th>
                    </tr>
                </thead>
                <tbody>
                    <?php foreach($stmt as $row){ ?>
                    <tr>
                        <td><?php echo $row['user_name'] ?></td>
                        <td>*******</td>
                        <td><?php echo $row['user_role'] ?></td>
                        <?php if($role == "admin"){ ?>
                        <td>
                            <form action="delete.php" name="deleteForm" method="post">
                                <input type="hidden" name="delete_id" value="<?php echo $row['user_id'] ?>"/>
                                <button type="submit" name="delete_user" class="btn btn-info">Delete</button>
                            </form>
                        </td>
                        <td>
                            <form action="update.php" name="updForm" method="post">
                                <input type="hidden" name="update_id" value="<?php echo $row['user_id'] ?>"/>
                                <button type="submit" name="update_user" class="btn btn-info">Update</button>
                            </form>
                        </td>
                        <?php } ?>
                    </tr>
                    <?php } ?>
                    <?php if($role == "admin"){ ?>
                    <form action="add_user.php" method="POST" name="add_user">
                    <tr>
                        <td><input type="text" name="username" class="form-control"/></td>
                        <td><input type="text" name="password" class="form-control"/></td>
                        <td>
                            <select name="select_role" class="form-control">
                                <option value="admin">Admin</option>
                                <option value="emp">Employee</option>
                            </selet>
                        </td>
                        <td>
                            <button type="submit" name="sub_user" class="btn btn-danger">Add User</button>
                        </td>
                    </tr>
                    <?php } else{ ?>
                    <tr>
                        You can't add a new user!
                    </tr>
                    <?php } ?>
                </form>
                </tbody>
            </table>
        </div>
    </div>
    </body>
    </html>

其中为session_start();函数,因为没有这个函数,你怎么能得到会话变量,所以请先把session_start()放在文件的顶部,然后检查。