redirect to page after check database

ud2008

I have created a login page .

In the mysql database I have a table "users" and in that table there is a column called "stichting", for example a record holds NBS in that column.

Now in the code at the login page, it should check after a person logs in what name is put into the "stichting" column, if it is NBS the user should be redirected to a page, if it is something else, say: VMB, and the user has it the column that the user should be redirected to the VMB page instead of the other page.
If nothing is found, the user should get a message that he or she has no access.

Here is the code I have sofar, I tried to login with a username with which I know has VMB in its (stichting) column, but still I get redirected to the other page.

<?php
              $red = mysql_query("SELECT * FROM users where name='".$naam."' AND stichting = 'NBS' LIMIT 1") or die(mysql_error());
              if(mysql_num_rows($red) == "NBS") {
                echo "<a href='contact_nbs28BsY29Lm4'>Ga door naar de volgende pagina</a>";
                }
                elseif(mysql_num_rows($red) == "VMB") {
                  echo "<a href='contact_vmbkYe293NB'>voorbeeld pagina</a><br />";
                  echo "<a href='logout.php'>uitloggen</a><br />";
                  }
                  else{
                    echo "geen toegang";
                    }
          ?>
          <?php

Hope someone can help me.

johanafm

How do you "know" that user has 'VMB' in that column?

SELECT * FROM users where name='".$naam."' AND stichting = 'NBS' LIMIT 1

This query will either get a user who has 'NBS' in that column, or no user at all.

ud2008

Thanks, I know.

The thing the query needs to do, is check if the one who logs in has either NBS or VMB in the column stichting and redirects the user to the page concerning the name in the stichting column.

So I think the query isn't right, can someone help me with this please?

johanafm

/* nonsensical. mysql_num_rows is the number of rows returned.
    it is always a decimal number and as such never contains any letters.
    the expression is always false. */
if(mysql_num_rows($red) == "NBS") {

}

// same here...
elseif(mysql_num_rows($red) == "VMB") {
}

/* If you want users no matter what their stichting value is, then don't tell
    the db to only return results when it is 'NBS' */
$red = mysql_query("SELECT * FROM users where name='".$naam."'") or die(mysql_error());

// I assume name is a field with unique values, so result always contains 0 or 1 rows
if(mysql_num_rows($red) == 1) {
	$row = mysql_fetch_assoc($red);
	if ($row['stichting'] == 'NBS'])
		echo "<a href='contact_nbs28BsY29Lm4'>Ga door naar de volgende pagina</a>";
	else if ($row['stichting'] == 'VMB'])
		echo '...';
}

ud2008

johanafm;10935476 wrote:

// I assume name is a field with unique values, so result always contains 0 or 1 rows

Name is the column of the username (so it contains the usernames).

ud2008

When I try to login, I get the "geen toegang" message.

ud2008

Problem solved.

I changed:

$red = mysql_query("SELECT * FROM users where name='".$naam."' ") or die(mysql_error());

into:

 $red = mysql_query("SELECT * FROM users where name='$_SESSION[suser]' ") or die(mysql_error());

The variable $naam was empty, so when I changed it into $_SESSION[suser] it worked.

$_SESSION[suser] is used earlier in the code, after looking closely it made sence.

Thanks for the replies.