如何获取与登录用户条件匹配的 MySql 数据？

Question

I have the PHP code that will fetch all users listed in the database but I only need the results to list users that have same matching company name as the logged in user. The logged in user can add, edit and delete users of the same company name, in the database the field is labeled "company".

Here is my code to fetch all users but I need to change so the code only fetches the same "company" as the logged in user.

    <?php
                include_once 'connection.php';
                $result = mysqli_query($conn,"SELECT * FROM user_registration");
                ?>

                <?php
                if (mysqli_num_rows($result) > 0) {
                ?>
                  <table class='table table-bordered table-striped'>
                  
                  <tr>
                    <td>First</td>
                    <td>Last</td>
                    <td>Email ID</td>
                    <td>Password</td>
                     <td>Action</td>
                  </tr>
                <?php
                $i=0;
                while($row = mysqli_fetch_array($result)) {
                ?>
                <tr>
                    <td><?php echo $row["first"]; ?></td>
                    <td><?php echo $row["last"]; ?></td>
                     <td><?php echo $row["email"]; ?></td>
                    <td><?php echo ($row["password"])?($row["password"]):('N/A'); ?></td>
                    <td><a href="update.php?id=<?php echo $row["id"]; ?>" title='Update Record'><span class='glyphicon glyphicon-pencil'></span></a>
                    <a href="delete.php?id=<?php echo $row["id"]; ?>" title='Delete Record'><i class='material-icons'><span class='glyphicon glyphicon-trash'></span></a>
                    </td>
                </tr>
                <?php

Answer 1

first you should save the logged-in user data some where. you can make session in your login page after user logged-in. so do somthing like this in login page:

   include_once 'connection.php';
   session_start();
  if(isset($_POST['username']) && isset($_POST['password'])){
         $query = mysqli_query($conn,"SELECT * FROM `YOUR-USER-TABLE` WHERE `username` = '$username' AND `password` = '$passowrd");
        if($row = mysqli_fetch_array($query)){
        $_SESSION['user'] = array(
        "ID" => $row['id'],
        "firstname" => $row['firstname'],
        "lastname" => $row['lasrname'],
        "email" => $row['email'],
        "company" => $row['company']
        );

        }
            
  } else{
      //return user to login page
        exit();
  }
  

then you can use this code:

    include_once 'connection.php';
    session_start();
    $users = array();
    if(isset($_SESSION['user'])){
      $company = $_SESSION['user']['company'];
      $query = mysqli_query($conn,"SELECT * FROM `user_registration` WHERE `company` = '$company'");
    while ($row = mysqli_fetch_array($query)){
        $user= array(
               // get users data for example:
                "ID" => $row['id']
                "firstname" => $row['first'],
                "lastname" => $row['last'],
                "email" => $row['email'],
    //you can get every thing you need. it is not need to get password here

                );
    array_push($users, $user);
    }

    }
    else{
    //do everything that you do with no logged in user in this page
    }

now you can use users array in foreach loop and make your list. I hope it make it clear for you. if there is something unclear please add comment.