检查用户是否是管理员PHP


Check if user is admin PHP

我有一个具有以下结构的用户表:

id
用户名
密码
经销商(管理员)

现在我想在登录时检查用户是否是经销商,经销商可以持有0(普通用户)或1(管理员)的值,但我不知道如何做到这一点(我是PHP新手)。

这是登录表单:

    <form action="index.php?action=login" method="post" style="width: 50%;">
        <input type="hidden" name="login" value="true" />
<?php if ( isset( $results['errorMessage'] ) ) { ?>
        <div class="errorMessage"><?php echo $results['errorMessage'] ?></div>
<?php } ?>
        <ul>
          <li>
            <label for="username">Username</label>
            <input type="text" name="username" id="username" placeholder="Uw gebruikersnaam" required autofocus maxlength="20" />
          </li>
          <li>
            <label for="password">Password</label>
            <input type="password" name="password" id="password" placeholder="Uw wachtwoord" required maxlength="20" />
          </li>
        </ul>
        <div class="buttons">
          <input type="submit" name="login" value="Login" />
        </div>
      </form>

这是登录功能:

    function login() {
  $results = array();
  $results['pageTitle'] = "Admin Login | Gemeente Urk";
  $host = "localhost";
  $mysqluser = "root";
  $mysqlpass = "usbw";
  $db = "wagenpark";
  mysql_connect($host, $mysqluser, $mysqlpass);
  mysql_select_db($db);
  if ( isset( $_POST['login'] ) ) {
      $gebruiker = $_POST['username'];
      $wachtwoord = $_POST['password'];
      $sql = "SELECT * FROM users WHERE username='".$gebruiker."' AND password='".$wachtwoord."' LIMIT 1";
      $res = mysql_query($sql) or die (mysql_error());
      if (mysql_num_rows($res) == 1) {
          $_SESSION['username'] = $gebruiker;
          header( "Location: index.php" );
    } else {
      // Login failed: display an error message to the user
      $results['errorMessage'] = "Incorrect username or password. Please try again.";
      require( TEMPLATE_PATH . "/admin/loginForm.php" );
    }
  } else {
    // User has not posted the login form yet: display the form
    require( TEMPLATE_PATH . "/admin/loginForm.php" );
  }
}

已经谢谢了。

如果我理解得对,你有一个MySQL数据库,你可以在那里保存用户名、Id、密码,如果他/她是管理员。本部分:

$res = mysql_query($sql) or die (mysql_error());
if (mysql_num_rows($res) == 1) {
      $_SESSION['username'] = $gebruiker;
      header( "Location: index.php" );

您可以只获取结果的Admin值。它可能看起来是这样的:

$res = mysql_query($sql) or die (mysql_error());
if (mysql_num_rows($res) == 1) {
      $_SESSION['username'] = $gebruiker;
      while($row = mysql_fetch_object($res))
      {
          $admin = $row->Admin;
      }
      if ($admin == 1) {Do something...}
      else {Do something if he is not Admin}
      header( "Location: index.php" );

然后您可以将其保存到$_SESSION中。

我跳起来有帮助,如果它不起作用,请告诉我。