Show/hide text according to access level

jaikyro

I made a login for my site using dreamweaver's toolset which works like a charm. After a successful login the user is directed to the site's homepage.

Here I'm trying to insert a message that will only display for users with a certain access level. Normal users are assigned the value 'member' in the database table and admins are assigned 'admin'.
On my homepage I inserted the following into my top php code:

<?php
if (isset($_POST['user']))
{
  mysql_select_db($database_cliche, $cliche);
  $loginUsername=$_POST['user'];
  $password=$_POST['password'];
  $output = mysql_query("SELECT niveau FROM User WHERE username = $loginUsername");
  $_SESSION['MM_fldUserAuthorization'] = mysql_result($output);
  $MM_redirectLoginFailed = "denied.php";
  $MM_redirecttoReferrer = false;
?>

And in my html body I attempt to display the message using an if statement:


<body>
<div class="wrap"><img src="main_back1.png" width="800" height="225" /></div>
<div class="navi"></div>
<div class="content">
  <div class="content2">
    <p>hello</p>
    <p><?php  

			if ($_SESSION['MM_fldUserAuthorization'] == 'admin') {
			  echo 'Admin logged in'; 
			}
  		?>
    </p>
  </div>
  <div class="info_bot">| company info |</div>
</div>
<div class="bottom"><?php echo $_SESSION['MM_Username']; ?></div>
</body>
</html>
<?php
mysql_free_result($rs_user);
?>

However im getting an error saying syntax error, unexpected $end ... on line 255, which is the very last line of my html body I show above.

What am I doing wrong?

johanafm

jaikyro;10986758 wrote:

<?php
if (isset($_POST['user']))
{
?>
</html>
<?php
mysql_free_result($rs_user);
?>

Every singel occurance of { must be matched by }. You open your if block at the top of the php script part, but never close it before the end of the file, thus you get an unexpected end error.

jaikyro

Ah right, totally missed that. Thanks. That solved the errror.

Any idea why my echo message wont display?

bradgrafelman

Set error_reporting to E_ALL and enable either display_errors or log_errors (depending upon whether it's the development or production environment, respectively). You've got a warning being generated by this line:

$_SESSION['MM_fldUserAuthorization'] = mysql_result($output);

Once you see the error message, the solution will be clear (see what parameters [man]mysql_result/man expects if it isn't).

jaikyro

So this line is the problem:


  $output = mysql_query("SELECT niveau FROM User WHERE username = $loginUsername");

Its not set for the correct values it seems.

The value from my database table which determines access level is called 'level' and not 'niveau'. Is it a simple matter of replacing one for the other like so:


  $output = mysql_query("SELECT level FROM User WHERE username = $loginUsername");

bradgrafelman

I never said that line was the problem (mostly because it isn't).

What's the error message that the line I pointed to above is generating?

jaikyro

Notice: Undefined index: MM_fldUserAuthorization in .... /home.php on line 244

bradgrafelman

That looks more like an error you might see from your second code snippet, not from the first (which is where the line of code I was referencing above came from).

Read the manual for [man]mysql_result/man - the function requires two parameters while you're only supplying it with one.

jaikyro

So I need to specify the row as the second parameter?

jaikyro

I've spent all day trying to wrap my head around that function, but I cant get it to work.
My brain hurts 😐