check user level script (not working

[devangel]

hey guys,

 

im making a check user level script.

 

if $usr['authlevel']>4

echo "adminpanel"

 

i have set my sessions.

 

$_SESSION['SESS_USERID'] = $user['userid'];

$_SESSION['SESS_USERNAME'] = $user['username'];

 

how do i use the sess_userid to retrieve the users details for the users id only.

 

ive tried ::

 

mysql_query("SELECT * FROM users WHERE userid = '$userid'") or die(mysql_error());

$usr = mysql_fetch_array( $data );

 

please someone with guidance, ive been searching for hours. i need to make a if statement to check user level, but i havent managed to retrieve db info via session.

 

 

[schilly]

well you could store the user level in your session when you login then you wouldn't need to query the db.

 

then you can do something like:

if ($_SESSION['authlevel']>4)
echo "adminpanel";

 

[devangel]

how would i be able to save the authlevel in a session

 

ive tried

 

$user = mysql_fetch_assoc($result);

$_SESSION['SESS_USERID'] = $user['userid'];

$_SESSION['SESS_USERNAME'] = $user['username'];

$_SESSION['SESS_AUTHLEVEL'] = $user['authlevel'];

 

how would you define it into a session?

[schilly]

that looks fine to me. make sure your query is actually returning the authlevel column.

[devangel]

my query doesnt look wrong

 

$qry="SELECT * FROM users WHERE username='$username' AND password='".md5($_POST['password'])."' and authlevel>0";

$result=mysql_query($qry);

 

it checks to see if your banned userlevel (0)

 

but yeah i cant figure out why its saying its not defined i used:

 

<?php if ($_SESSION['authlevel']>4)

echo "adminpanel"; ?>

 

and i got

 

Notice: Undefined index: authlevel in

 

on that line.