redirect user to different pages

[tokick4]

Ok I have a question and I know it can be done but I am having a brain block. I have a database with users that are active or not with type of user they are (ie: contractor, architect, engineer, and owner).  What I want to do is when they log in the login checks the database to see if the user name, password, email and active are present that is true.  It presents an error if the users account has been deactivate. What I want to do is if these are all true then go to the area of the web site that is dedicated just for that type of user from the database.

<?php
//log in page
include('init.php');
include'../customer/cust_temp/header.php';
?>
<form action="" method="post">
<p>
    Email: <input type="email" name="login_email" />
    User Name:<input type="text" name="user_name" />
    Password: <input  type="password" name="login_password" />
    <input type="submit" value="Log in"/>
</p>
</form>
<div id="register"><a href="register.php" id="register">Register New User</a></div>
<?php
if(isset($_POST['login_email'], $_POST['user_name'], $_POST['login_password'])){
    $login_email = $_POST['login_email'];
    $user_name = $_POST['user_name'];
    $login_password = $_POST['login_password'];
    $errors = array();
    if (empty ($login_email) || empty ($user_name) || empty($login_password)){
    $errors[] = 'Email, user name and password required';
    }else if (user_active($user_name) === false){
        $errors[] = 'You have\'t activated your account!';
    }else{
     $login = login_check($login_email, $user_name, $login_password);
        if($login === false){
            $errors[] ='Unable to log you in';
            }
    }
    if (!empty ($errors)){
        //loop thru errors and place each into a single error
        foreach ($errors as $error){
            echo $error,'<br />';
            }
    }else{
        //log user in
        $_SESSION['contact_id'] = $login;
        if(user_page($type_of_contact)==1){
            echo '$type_of_contact';
            header ('Location: accountinactive.html');
        }elseif(user_page($type_of_contact)==2){
            header ('Location: test.php');
        }elseif(user_page($type_of_contact)==3){
            header('');
        }else{
            header ('Location: ../customer/index.php');
        exit();
        }
    }
}
include '../customer/cust_temp/footer.php';
?>

This is my function page.

<?php
function logged_in(){
    return isset($_SESSION['contact_id']);
}
function login_check($login_email, $user_name, $login_password){
    $email = mysql_real_escape_string($login_email);
    $user_name = mysql_real_escape_string($user_name);
    $login_query = mysql_query("SELECT COUNT(`contact_id`) as `count` , `contact_id` FROM `contact` WHERE `email`='$email' AND `password`='".md5($login_password)."'");
    return (mysql_result($login_query,0)==1)? mysql_result($login_query, 0, 'contact_id'): false;
} 
function user_data(){
    $args = func_get_args();
    //implode elements of an array to select a specific amount of fields from a query
    $fields = '`'.implode('`,`', $args).'`';
    $query = mysql_query("SELECT $fields FROM `contact` WHERE `contact_id`=".$_SESSION['contact_id']);
    $query_result = mysql_fetch_assoc($query);
    foreach ($args as $field){
        $args[$field] = $query_result[$field];
    }
    return $args;
}    
function user_register($cust_f_name,$cust_m_name,$cust_l_name,$cust_comp_name,$cust_address,$cust_city,$cust_state,$cust_zip,$cust_phone,$cust_fphone,$cust_email,$cust_login,$cust_password){
    $company_name = mysql_real_escape_string($cust_comp_name);
    $first_name = mysql_real_escape_string($cust_f_name);
    $middle_name = mysql_real_escape_string($cust_m_name);
    $last_name = mysql_real_escape_string($cust_l_name);
    $address = mysql_real_escape_string($cust_address);
    $city = mysql_real_escape_string($cust_city);
    $state = mysql_real_escape_string($cust_state);
    $zip = mysql_real_escape_string($cust_zip);
    $business_phone = mysql_real_escape_string($cust_phone);
    $cell_phone = mysql_real_escape_string($cust_fphone);
    $email = mysql_real_escape_string($cust_email);
    $user_name = mysql_real_escape_string($cust_login);
    mysql_query ("INSERT INTO `contact` 
                    VALUES ('','$company_name','$first_name','$middle_name','$last_name','$address',
                    '$city','$state','$zip','$business_phone','','$cell_phone','','$email','0','$user_name',
                    '".md5($cust_password)."','4','','','','','','1',CURRENT_TIMESTAMP)");
        return mysql_insert_id();    
    }
function user_exist ($cust_email){
    $cust_email = mysql_real_escape_string($cust_email);
    $query = mysql_query("SELECT COUNT(`contact_id`)FROM `contact` WHERE `email` = '$cust_email'");
    return (mysql_result($query, 0)== 1) ? true : false;
    }
function user_active($user_name){
    $username = mysql_real_escape_string($user_name);
    $query = mysql_query ("SELECT COUNT(`contact_id`)FROM `contact` WHERE `user_name` = '$username' AND `active`= 1");
    return(mysql_result($query, 0)==1) ? true : false;
    }    
function user_page(){
    $type_of_contact=mysql_real_escape_string($type_of_contact);
    $query=mysql_query("SELECT `idtype_of_contact` FROM `contact` WHERE `contact_id` = ".$_SESSION['contact_id']=1);
    $query_result=mysql_fetch_assoc($query);
    return $query_result;
}
function employee_register($first_name,$middle_name,$last_name,$address,$city,$state,$zip,$home_phone,$cell_phone,
                            $email,$activeRadioBt,$user_name,$password,$access_level) {
    $first_name = mysql_real_escape_string($first_name);
    $middle_name = mysql_real_escape_string($middle_name);
    $last_name = mysql_real_escape_string($last_name);
    $address = mysql_real_escape_string($address);
    $city = mysql_real_escape_string($city);
    $state = mysql_real_escape_string($state);
    $zip = mysql_real_escape_string($zip);
    $home_phone = mysql_real_escape_string($home_phone);
    $cell_phone = mysql_real_escape_string($cell_phone);
    $email = mysql_real_escape_string($email);
    $user_name = mysql_real_escape_string($user_name);
    $access_level = mysql_real_escape_string($access_level);
    mysql_query ("INSERT INTO `contact` 
                    VALUES ('','','$first_name','$middle_name','$last_name','$address',
                    '$city','$state','$zip','','$home_phone','$cell_phone','','$email','$access_level','$user_name',
                    '".md5($password)."','$access_level','','','','','','7',CURRENT_TIMESTAMP)");
        return mysql_insert_id();    
    }
function employee_exist ($email){
    $email = mysql_real_escape_string($email);
    $query = mysql_query("SELECT COUNT(`contact_id`)FROM `contact` WHERE `email` = '$email'");
    return (mysql_result($query, 0)== 1) ? true : false;
    }
?>

If anyone has any suggestion of how to structure this I would be greatly appreicate.

Thanks

Jon

[sudarshan.t]

else{

        //log user in

        $_SESSION['contact_id'] = $login;

        if(user_page($type_of_contact)==1){

            echo '$type_of_contact';

            header ('Location: accountinactive.html');

        }elseif(user_page($type_of_contact)==2){

            header ('Location: test.php');

        }elseif(user_page($type_of_contact)==3){

            header('');

        }else{

            header ('Location: ../customer/index.php');

        exit();

I think you already have it in your code. type_of_contact - is it the architect/ engineer, etc... that you were talking about? If it is, fetch the type of user it is from the data you're validating based on on user login and use the header to take them to the desired page on your site.

[tokick4]

Sudarshan

That is correct it.   How would I accomplish this and where would it be placed.  I think that is part of the problems as well.

[sudarshan.t]

Can you post your file hierarchy and your DB schema for 'users' table here?

[tokick4]