StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

POPhp mysql if/else shorthand
primarykey
Id
19850993
data
AcceptedAnswerId
0
AnswerCount
1
ClosedDate
CommentCount
5
CommunityOwnedDate
CreationDate
2013-11-08T03:17:53.987
FavoriteCount
0
LastActivityDate
2013-11-08T03:46:15.213
LastEditDate
LastEditorUserId
0
OwnerUserId
2835402
ParentId
0
PostTypeId
1
Score
0
ViewCount
549
LastEditorDisplayName
text
Body
Can anyone see what is wrong with this shorthand in relation to the problem below? <pre><code>echo "<td>" . ($row['tier']<$_SESSIONS['tier'] ? "ACCESS DENIED" : $row['contents']) . "</td>"; </code></pre> I have two tables in my database: 1.) members (id,username,email,password,salt,tier) <-tier is the user's security clearance level. 2.) opwire (category,contents,date,userid,seclevel) <-opwire stores user submitted data, userid is just a number that references the user who just submitted data to opwire. Seclevel is how high of a security clearance level (tier) a user needs to see that particular line of submitted data. I'm attempting to get the currently logged in user to be granted or restricted access to 'contents' based on their security tier (referencing member's tier vs opwire's seclevel.) I'm also not entirely confident I'm using http://www.wikihow.com/Create-a-Secure-Login-Script-in-PHP-and-MySQL and I usually get the current user with: <pre><code>$userId = $_SESSION['user_id']; </code></pre> The entire table building php is below. Currently users with any tier can incorrectly view any seclevel contents when their tier should be restricting it. <pre><code><?php include_once 'functions.php'; include_once 'db_connect.php'; sec_session_start(); if(login_check($mysqli) == true) { $con=mysqli_connect("localhost","mylogin","mypassword","mysqldatabase"); // Check connection if (mysqli_connect_errno()) { echo "Failed to connect to MySQL: " . mysqli_connect_error(); } function getColor($strOption) { switch ($strOption) { case "Case 1": return "#cbae80"; case "Case 2": return "#e59350"; case "Case 3": return "#b7aaa4"; } } $result = mysqli_query($con,"SELECT opwire.*,members.username FROM opwire LEFT JOIN members on opwire.userid=members.id order by date DESC"); echo "<table border='1'> <tr> <th>Category</th> <th>Contents</th> <th>Date/Time</th> <th>Operative</th> </tr>"; while($row = mysqli_fetch_array($result)) { echo "<tr>"; echo "<td> " . $row['category'] . "</td>"; echo "<td>" . ($row['tier']<$_SESSIONS['tier'] ? "ACCESS DENIED" : $row['contents']) . "</td>"; echo "<td>" . $row['date'] . "</td>"; echo "<td>" . $row['username'] . "</td>"; echo "</tr>"; } echo "</table>"; mysqli_close($con); } else { echo 'Access to this area requires security clearance. '; } ?> </code></pre>
Tags
<php><mysql><security><if-statement><shorthand>
Title
Php mysql if/else shorthand
singulars
PostAcceptedAnswerId
1. This table or related slice is empty.
PostParentId
1. This table or related slice is empty.
PostTypePostTypeId
1. PTQuestion
UserLastEditorUserId
1. This table or related slice is empty.
UserOwnerUserId
1. USsylcat
plurals
PostLinksPostIdRelatedPostId
1. PL
 singulars
 LinkTypeLinkTypeId
 LTLinked
PostLinksRelatedPostIdPostId
1. This table or related slice is empty.
PostsAcceptedAnswerId
1. This table or related slice is empty.
PostsParentIdCreationDate
1. PO
 singulars
 PostTypePostTypeId
 PTAnswer
VotesPostIdCreationDate
1. This table or related slice is empty.
CommentsPostId
1. COstop using ``
 singulars
 PostPostId
 POPhp mysql if/else shorthand
 UserUserId
 This table or related slice is empty.
2. COSo what exactly isn't working? What's the first issue to manifest itself? A cursory looks shows a whole ton of stuff wrong here, so start with one issue at a time.
 singulars
 PostPostId
 POPhp mysql if/else shorthand
 UserUserId
 USpatricksweeney
3. CO($row['tier']<$_SESSIONS['tier']. What is it <$ ? I think, this is problem.
 singulars
 PostPostId
 POPhp mysql if/else shorthand
 UserUserId
 USD3ad L0cK

Querying!

Guidance

A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.