Skip to main content
Participant
December 17, 2007
Question

beginner php session/user access question

  • December 17, 2007
  • 1 reply
  • 356 views
I'm using DreamWeaver MX 2004 (website uses php and mysql) and want users, when they login to view only their content. my sql table that connects to the login form has an id, name and password columns.

a successful login is taken to a page with 3 links (page to update content, view content and add content). I'm think I need to carry the id from the login mysql table and think it goes in the code below. I'm just not sure where. of course, if i'm wrong, please point me in the correct direction.

thanks!

here's my code:

<?php
session_start();
$MM_authorizedUsers = "2";
$MM_donotCheckaccess = "false";

// *** Restrict Access To Page: Grant or deny access to this page
function isAuthorized($strUsers, $strGroups, $UserName, $UserGroup) {
// For security, start by assuming the visitor is NOT authorized.
$isValid = False;

// When a visitor has logged into this site, the Session variable MM_Username set equal to their username.
// Therefore, we know that a user is NOT logged in if that Session variable is blank.
if (!empty($UserName)) {
// Besides being logged in, you may restrict access to only certain users based on an ID established when they login.
// Parse the strings into arrays.
$arrUsers = Explode(",", $strUsers);
$arrGroups = Explode(",", $strGroups);
if (in_array($UserName, $arrUsers)) {
$isValid = true;
}
// Or, you may restrict access to only certain users based on their username.
if (in_array($UserGroup, $arrGroups)) {
$isValid = true;
}
if (($strUsers == "") && false) {
$isValid = true;
}
}
return $isValid;
}

$MM_restrictGoTo = "_login.php";
if (!((isset($_SESSION['MM_Username'])) && (isAuthorized("",$MM_authorizedUsers, $_SESSION['MM_Username'], $_SESSION['MM_UserGroup'])))) {
$MM_qsChar = "?";
$MM_referrer = $_SERVER['PHP_SELF'];
if (strpos($MM_restrictGoTo, "?")) $MM_qsChar = "&";
if (isset($QUERY_STRING) && strlen($QUERY_STRING) > 0)
$MM_referrer .= "?" . $QUERY_STRING;
$MM_restrictGoTo = $MM_restrictGoTo. $MM_qsChar . "accesscheck=" . urlencode($MM_referrer);
header("Location: ". $MM_restrictGoTo);
exit;
}
?>
<?php
mysql_select_db($database_midnightnet, $midnightnet);
$query_Recordset1 = "SELECT * FROM trs_admin";
$Recordset1 = mysql_query($query_Recordset1, $midnightnet) or die(mysql_error());
$row_Recordset1 = mysql_fetch_assoc($Recordset1);
$totalRows_Recordset1 = mysql_num_rows($Recordset1);
?>
This topic has been closed for replies.

1 reply

Inspiring
December 17, 2007
MM_Username is the default session that Dreamweaver users for its login routine. What ever name the user logins in as info@example.com, bob, Iamgreat443 etc is what is carried thru in that session variable. I always make the users use emails personally. If you to go the Binding tab > + > Session Variable type in MM_Username for Name it will create the session variable in your binding window so you can access it the recordset dialogs. You can then filter your user info on that session variable for any database you have ID'd your users in. Hope this helps