php - 登录PHP网站时检查用户是否为admin

Question

我正在尝试创建一个登录表单，如果您是管理员，您将登录到与普通用户不同的站点。但是，我不知道该怎么做。

在我的数据库中，我有“admin”列，默认设置为 0。如果为 1，则为管理员。

这是登录代码:

 if (isset($_POST['login_user'])) {
  $username = mysqli_real_escape_string($db, $_POST['username']);
  $password = mysqli_real_escape_string($db, $_POST['password']);

  if (empty($username)) {
    array_push($errors, "Skriv inn et brukernavn");
  }
  if (empty($password)) {
    array_push($errors, "Skriv inn et passord");
  }

  if (count($errors) == 0) {
    $password = md5($password);
    $query = "SELECT * FROM users WHERE username='$username' AND password='$password'";
    $results = mysqli_query($db, $query);
    if (mysqli_num_rows($results) == 1) {
      $_SESSION['username'] = $username;
      $_SESSION['success'] = "Du er nå logget inn";
      header('location: index.php');
    }else {
        array_push($errors, "Feil brukernavn eller passord");
    }
  }
}

希望你能帮助我

谢谢:)

Answer 1

只需添加一个条件来检查登录者是否为管理员，如下面的代码

if (mysqli_num_rows($results) == 1) 
 {
      $_SESSION['username'] = $username;
      $_SESSION['success'] = "Du er nå logget inn";
      $details = $results->fetch_array(MYSQLI_ASSOC)
      if( $details['admin'] == '1')
      {
         redirect him to admin here
        // header('location: index.php');
      }
      else if($details['admin'] == '0')
      {
         redirect him to normal page
         //header('location: index.php');
      } 
 }