tim108

I was just wondering how I get the information from the database to show up on one line rather then a seperate line for each piece of information retreived include 'database_conn.php'; $sql = "SELECT * FROM table ORDER BY id DESC"; $queryresult = mysql_query($sql) or die(mysql_error()); while ($row = mysql_fetch_assoc($queryresult)) { $id = $row['id']; $title = $row['title']; echo "<a href='view.php?idID=$idID'>$title</a>"; } any help would be greatly appreciated!

$query = "SELECT * FROM ecc_users WHERE user_email='$user_email' and user_password='$user_password'"; $result = mysql_query($query, $db); if(mysql_num_rows($result)) { $_SESSION['loggedin'] = 1; } else { header('Location:login.php?error=1'); exit(); } $user_info = mysql_fetch_assoc($result); if ($user_info['user_permissions'] === 1) { $_SESSION['loggedin'] = 1; echo "<script>window.location='admin.php'</script>"; die(); } else { $_SESSION['loggedin'] = 1; echo "<script>window.location='userpage.php'</script>"; die(); } sorry forgot to display the code as code

I understand what you were saying yes, however on that bit you changed having this statement below is saying that if the email and username are correct then take it to the error page if(mysql_num_rows($result)) { header('Location:login.php?error=1'); exit(); } I have edited it slightly but it is now only doing the last section $query = "SELECT * FROM ecc_users WHERE user_email='$user_email' and user_password='$user_password'"; $result = mysql_query($query, $db); if(mysql_num_rows($result)) { $_SESSION['loggedin'] = 1; } else { header('Location:login.php?error=1'); exit(); } $user_info = mysql_fetch_assoc($result); if ($user_info['user_permissions'] === 1) { $_SESSION['loggedin'] = 1; echo "<script>window.location='admin.php'</script>"; die(); } else { $_SESSION['loggedin'] = 1; echo "<script>window.location='userpage.php'</script>"; die(); } to me that looks like in theory it would work?

I have an issue regarding a login section of a website, when a user is registered they are given a user_permission, this is defaulted to 0 for a general user or 1 for an admin. The issue I am having is when the user logs in I want the code to check what that user permission is and if its 0 redirect the user to the userpage, and if its 1 redirect the user to the admin page At the moement whoever logs in is directed towards the user page, any help would be greatly appreciated! $query = "SELECT * FROM ecc_users WHERE user_email='$user_email' and user_password='$user_password'"; $permis = "SELECT user_permissions FROM ecc_users"; $result = mysql_query($query, $db); $result2 = mysql_query($permis, $db); if(mysql_num_rows($result)) { $user_permissions = 0; $_SESSION['loggedin'] = 1; header('Location:userpage.php'); exit(); } elseif($result2){ $user_permissions = 1; echo "<script>window.location='admin.php'</script>"; die(); } else { header('Location:login.php?error=1'); exit(); } this is the code I have for this particular section, I have worked out that there is something within the if statements that must be wrong?

thankyou! you have all helped me fix the issue now cheers guys

that is the code that is bringing up this error message, there are no spacing issues and nothing being outputted? <?php include '../database_conn.php'; session_start(); if(!session_is_registered(username)){ header("location:admin.php"); } ?>

that was a typo yes, thankyou! however after fixing that I know get a series of other error messages, Warning: session_register() [function.session-register]: Cannot send session cookie - headers already sent by Warning: session_register() [function.session-register]: Cannot send session cache limiter - headers already sent Warning: Cannot modify header information - headers already sent Warning: Unknown: Your script possibly relies on a session side-effect which existed until PHP 4.2.3. Please be advised that the session extension does not consider global variables as a source of data, unless register_globals is enabled. You can disable this functionality and this warning by setting session.bug_compat_42 or session.bug_compat_warn to off, respectively. in Unknown on line 0

I do yes, this is the entire script from this page <?php include '../database_conn.php'; // username and password sent from form $username=$_POST['username']; $password=$_POST['password']; // To protect MySQL injection (more detail about MySQL injection) $username = stripslashes($username); $password = stripslashes($password); $username = mysql_real_escape_string($username); $password = mysql_real_escape_string($password); $sql="SELECT * FROM $adminmembers WHERE username='$username' and password='$password'"; $result=mysql_query($sql); // Mysql_num_row is counting table row $count=mysql_num_rows($result); // If result matched $myusername and $mypassword, table row must be 1 row if($count==1){ // Register $myusername, $mypassword and redirect to file "login_success.php" session_register("username"); session_register("password"); header("location:login_success.php"); } else { echo "wrong username or password"; } ?>

$sql="SELECT * FROM $adminmembers WHERE username='$username' and password='$password'"; $result=mysql_query($sql); thats the code I have above what I posted earlier, is that what you were refering to?

mysql_num_rows(): supplied argument is not a valid MySQL result resource PHP, mySQL error message is showed after I type the username and password into my login fields this is the section of code that it is referring to $count=mysql_num_rows($result); // If result matched $myusername and $mypassword, table row must be 1 row if($count==1){ // Register $myusername, $mypassword and redirect to file "login_success.php" session_register("username"); session_register("password"); header("location:login_success.php"); } else { echo "wrong username or password"; } any help would be greatly appreciated Thanks