CODEWITHSUNDEEP
phpmysql
Mike
Mike

Reputation: 674

Query MySQL for permissions in PHP

I have a site where a user can have multiple permissions (view, edit, delete, create). Each of these is stored as a tinyint(1) field in the database.

I'm looking for the best (quickest?) way to query MySQL to see if the user has the ability to see this page. Here is a snippet:

$user = mysql_real_escape_string($user);
$resultset = mysql_query("SELECT view FROM testbankAccess WHERE uid LIKE $user");
while($result = mysql_fetch_row($resultset)) {
    if($result[0]=='1') { return true; }
}
return false;

Upvotes: 0

Views: 117

Answers (2)

Johan
Johan

Reputation: 5053

First, it's probably faster comparing uid and $user using = in favor of LIKE.

Then, as you are only interested in the first result, you don't need to loop through them.

$result = mysql_fetch_row($resultset);
return $result[0] == 1;

Upvotes: 2

azram19
azram19

Reputation: 1875

$resultset = mysql_query("SELECT view FROM testbankAccess WHERE uid=$user LIMIT 1");
$result = mysql_fetch_row($resultset)
if($result[0]==1) { return true; }

I suppose it cannot be faster (there's almost nothing happening here) as long as uid is a key in your table.

Upvotes: 0

Related Questions