登录PHP网站时检查用户是否为管理员

Question

I am trying to create a login form where if you are an admin you will get logged into a different site than if you were a normal user. However, I am not sure how to do so.

In my database I have "admin" column, that is set to 0 by default. If it is 1 it would be an admin.

Here is the login code:

 if (isset($_POST['login_user'])) {
  $username = mysqli_real_escape_string($db, $_POST['username']);
  $password = mysqli_real_escape_string($db, $_POST['password']);

  if (empty($username)) {
    array_push($errors, "Skriv inn et brukernavn");
  }
  if (empty($password)) {
    array_push($errors, "Skriv inn et passord");
  }

  if (count($errors) == 0) {
    $password = md5($password);
    $query = "SELECT * FROM users WHERE username='$username' AND password='$password'";
    $results = mysqli_query($db, $query);
    if (mysqli_num_rows($results) == 1) {
      $_SESSION['username'] = $username;
      $_SESSION['success'] = "Du er nå logget inn";
      header('location: index.php');
    }else {
        array_push($errors, "Feil brukernavn eller passord");
    }
  }
}

I hope you can help me,

Thanks :)

Answer 1

Just add one more condition to check if logged in person is admin or not like below code

if (mysqli_num_rows($results) == 1) 
 {
      $_SESSION['username'] = $username;
      $_SESSION['success'] = "Du er nå logget inn";
      $details = $results->fetch_array(MYSQLI_ASSOC)
      if( $details['admin'] == '1')
      {
         redirect him to admin here
        // header('location: index.php');
      }
      else if($details['admin'] == '0')
      {
         redirect him to normal page
         //header('location: index.php');
      } 
 }