CODEWITHSUNDEEP
phphtmlsession
s.zainoun
s.zainoun

Reputation: 11

How to prevent user to access admin page

I have some pages and the user is stored in a session variable. But for the user it is possible to access every page.

creation of variable session

select the table from the data base 

$sql ="SELECT * FROM `pannes` WHERE `pannes`.`idDirecteur` = (
        select `idDirecteur` from `directeurs` where `directeurs`.`nomDirecteur` = '".$userName."'
    ) order by `pannes`.`date` desc,`pannes`.`heur` desc limit $page1,14 "; 
$query = mysql_query($sql);

Upvotes: 1

Views: 1114

Answers (1)

Majid Abbasi
Majid Abbasi

Reputation: 1531

You can create one session for each user and check that session on each page:

Page 1:

<?php if(!isset($_SESSION['user1'])) die('You Dont Have Access'); ?>

Page 2:

<?php if(!isset($_SESSION['user2'])) die('You Dont Have Access'); ?>

Page 3:

<?php if(!isset($_SESSION['user3'])) die('You Dont Have Access'); ?>

And in login page define different session for each user type.

Upvotes: 1

Related Questions