creating admin area

[runnerjp]

hey i am going about to creat and admin area... i want the link to only appear if the user with id=1 is on... and can only access the page if the users had the id of 1

 

i use $id = $_SESSION['user_id']; so get id.... how would i got abotu doing this?

[marcus]

if($id == 1){
echo "<a href=\"/admin/index.php\">Admin Index</a>\n";
}

 

// admin/index.php
if($id != 1){
echo "You are not an admin and cannot be here!\n";
}else {
echo "Welcome runnerjp!\n";
}

[runnerjp]

wooow very fast reply haha thanks.. i will try it out

[marcus]

just make sure you have $id defined on the pages that need it

[runnerjp]

ok tried it...first bit works great

 

 

<?php
$id = $_SESSION['user_id'];
if($id != 1){
echo "You are not an admin and cannot be here!\n";
}else {
echo "Welcome runnerjp!\n";
}
?>

 

this bit seems to not reconise that my id is 1

[marcus]

you don't have session_start(); on the top of the file

[runnerjp]

oh boy im always forgetting that 1... ty for a ver quick fix haha

[runnerjp]

sorry can i ask how secure this is... ??

[marcus]

very secure, sessions can't be controlled by the user.

 

 

*1400th post, lol.