Check user throughout page

x3roXL

I have a page called admin.php and inside it, it makes it where you can go to admin.php?page=Submit and admin.php?page=Edit. I want both pages to be locked to everybody but the users, but only Submit does it. Here is my code for admin.php:

<?
include("dbconnect.php");


$username = $_POST["username"];
$password = $_POST["password"];
$email = $_POST["email"];

$result = MYSQL_QUERY("SELECT * from users WHERE username='$username'and 

password='$password'and email='$email'")
   or die ("Name and password not found or not matched");

$worked = mysql_fetch_array($result);

$username = $worked[username];
$password = $worked[password];
$email = $_POST["email"];



if($worked){

if($page == "Submit")
{ 


echo "

test

";
}

elseif($page == "Edit")
{ 

echo "testing.";

}
}


?>

How do I get it to check the user with $page == "Edit" too?

halojoy

I can see no difference, if is Submit or Edit.
Everything that is checked is checked for both cases.
So this should work, like it is.

But where does $page come from?
Maybe you should have:

$page = $_GET['page'];

instead of $email = POST 2 times

x3roXL

You'd think so, but it doesn't:
http://coa.valesk-interactive.com/r4w6aw46a/admin.php?page=Edit
http://coa.valesk-interactive.com/r4w6aw46a/admin.php?page=Submit

x3roXL

ok, submit isn't working either. They're both visiable to people not logged in.

halojoy

But where does $page come from?
Maybe you should have:

$page = $_GET['page'];

instead of $email = POST 2 times!!!

x3roXL

Originally posted by halojoy
But where does $page come from?
Maybe you should have:
$page = $_GET['page'];
instead of $email = POST 2 times!!! [/B]

$page isn't really coming from anywhere.

And that didn't work.

halojoy

Originally posted by x3roXL
$page isn't really coming from anywhere.
And that didn't work.

Well, if you have no value for $page,
how can you test if it is Submit or Edit ?????????

you can make some temporary check what variables values are;
insert like: ( only for testing )
echo "worked= " . $worked ."<br>";
echo "page= " . $page ."<br>";