StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

POSetting permissions in PHP
text
Body
copied!<p>I have a table called <code>admin_permissions</code> with the following columns:</p> <ol> <li>sequence</li> <li>page_name</li> <li>level_user</li> <li>level_admin</li> <li>level_support</li> <li>level_accounts</li> </ol> <p>the last 4 columns are the different levels</p> <p>I have this code which checks the permissions:</p> <pre><code>$permission_sql="SELECT * from admin_permissions where page_name = '".$_SERVER["REQUEST_URI"]."' "; $permission_rs=mysql_query($permission_sql,$conn); if(mysql_num_rows($permission_rs) == 0) { echo '<h2 align="center">An Error has occurred!</h2>'; exit(); } else { $permission_result=mysql_fetch_array($permission_rs); if($usertype_user != $permission_result["level_user"] or $usertype_support != $permission_result["level_support"] or $usertype_admin != $permission_result["level_admin"] or $usertype_accounts != $permission_result["level_accounts"]) { echo '<h2 align="center">Access Denied</h2>'; echo '<h2 align="center">Please contact your administrator quoting \'Permission Error\' and number \''.$permission_result["sequence"].'\'</h2>'; exit(); } else { } } </code></pre> <p>the <code>$usertype_</code>... either equal '' or 'yes' and the database results either equal '' or 'yes'</p> <p>the user i am logged in as, has <code>$permission_result["level_admin"]</code> equal to yes so the above if statement should be false but its not, its saying its true</p> <p>how can i get the above code to work</p> <p>*<em>P.S. I am not worried about SQL Injection on this particular code</em></p>

Querying!

Guidance

An individual column

Larger individual text columns get their own page to allow for proper reading.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload