[RESOLVED] Admin control panel

[Obrienray1]

Hey guys I need help with my admin. For example I want everyone who's admin can access the special features.The row in the user table must be set to 1 for you to be admin if not your not admin.

Here is my code:

<?php
include('../inc/config.php');
session_start();
$user = $_SESSION['user']
$get = mysql_query("SELECT * FROM `users` WHERE `username` = '$user'");

while ($row = mysql_fetch_assoc($get))
{
  $admin = $row['admin'];
}

if($admin == 2)
{
  echo 'Welcome back <strong> . $_SESSION['user'] . </strong>! Your access to the Admin Panel has been limited for security reasons.';
  header('Location: dashboard');
  }
else if($admin == 1)
{
  echo 'Welcome back <strong> . $_SESSION['user'] . </strong>! You have full access to the Admin Panel.';
  header('Location: dashboard');
  }
else($admin == 0)
{
  echo 'You are not an administrator. Please contact an administrator to access this panel.';
  header('Location: home');
}
?>

I also get Parse error: syntax error, unexpected T_VARIABLE in C:\xampp\htdocs\housekeeping\admin_login.php on line 5

[samuelcook]

as for your syntax error:
you need a semi-colon at the end of the this statement

$user = $_SESSION['user'] 

You are unable to do a header location once you have an output.
for example in your code:

if($admin == 2)
{
  echo 'Welcome back <strong> . $_SESSION['user'] . </strong>! Your access to the Admin Panel has been limited for security reasons.';
  header('Location: dashboard');
  }

you will receive an error, and it won't use your header redirect because you have already printed something to the page.

It should look something like:

if($admin == 2) {
    header('Location: dashboard');
    exit;
}

Then on your "dashboard" page say "Welcome back ....";

A couple of other things to notice:

echo 'Welcome back <strong> . $_SESSION['user'] . </strong>! Your access to the Admin Panel has been limited for security reasons.';

// should be

echo 'Welcome back <strong> '. $_SESSION['user'] .' </strong>! Your access to the Admin Panel has been limited for security reasons.';

// for correct concatenation

Additionally:

 header('Location: dashboard'); 

Assuming that you are at a URL of something like "mywebsite.com/admin/" this header redirect will send you to "mywebsite.com/admin/dashboard".

The row in the user table must be set to 1 for you to be admin if not your not admin

You are allowing $admin==2 to go to the "dashboard" as well.

[Derokorian]

On line 4 you do not have a semi-colon:

$user = $_SESSION['user'];

[Obrienray1]

I fixed everything now I get an error on line 24.

<?php
include('../inc/config.php');
session_start();
$username = $_SESSION['user'];

$q = mysql_query("SELECT admin FROM users WHERE admin='username'");

while ($row = mysql_fetch_assoc($q))
{
  $admin = $row['admin'];
}

if($admin == 2)
{
  header('Location: dashboard');
  exit();
  }
else if($admin == 1)
{
  header('Location: dashboard');
  exit();
  }
else($admin == 0)
{
	header('Location: home.php');
	exit();
}
?>

Line 24 is the bracket after else($admin == 0) which is the only problem.

[bradgrafelman]

An [man]else[/man] clause can have no condition (otherwise, it should be an else-if statement).