PHP Question

catalinus

I have the following situation: a page and a login form for that page (lets call them login.php and page.php). On the login page, 2 fields: username and password. The user login names and the passwords are stored in one mysql table (members). The access levels are stored in another table (access).

I want that, after login, page.php to display a message like "Welcome (full name) ! You are logged in as (username) with (access level) rights. "

Okay, (username) field is easy to display, through $HTTP_SESSION_VARS["Username"]. What about (fullname) and (access levels) ? I have tried to make an array from a selection with "where members.username = $HTTP_SESSION_VARS["Username"] " in the clause, but it didnt work.

I believe the problem is from that $HTTP_SESSION_VARS["Username"] in the SQL phrase. Maybe i should put in a variable and then make the select. How should i do it, what function should i use?

Appreciate any answer.

TTT

try to use
WHERE blaah = $HTTP_SESSION_VARS[Username]

catalinus

Originally posted by TTT
try to use
WHERE blaah = $HTTP_SESSION_VARS[Username]

Nope, it didnt worked

adamgeorge

What table is your admin level in? a different table? In that case you will have to do a SQL join.

Now, it's hard for someone to give you advice on your query, when you haven't posted your table structures.

but, lets assume you have normal looking user and admin table:

user{
iID
iAdminLevelID
sName
sFullName
sPassword
...etc
}

adminlevel{
iID
sName
...etc
}

so if you want to find out the fullname and Admin level (and assuming up to this point you have authenticated them and that the user name is a unique field in the user table)

then just do a simple query with a join like so:

$sSQL = "select U.sFullName, A.sName from Users U, AdminLevel A where U.sName = '" . $HTTP_SESSION_VARS["Username"] . "' and A.iID = U.iAdminLevel";

$result = mysql_query($sSQL);

etc..

hmm. but it's really going to depend on your table structure. If you don't know how to do simple joins like that, then do some reading on SQL syntax. Stuff like that's not really too hard.

hope that helps,
-Adam 🙂