sqlquery....

[ec]

This is part of an authorisation and I'm trying to get it to work so that only a teacher with a certain level of access can gain access into the system.  does anyone know what's wrong with this coding?  i'm changed it a few times but no luck.  I think it's something to do with the mysql_query

 

<?php

//Start session

session_start();

//SESSION LOGIN LEVEL

$query="SELECT level FROM members WHERE teacherid ='$_SESSION[teacherid]' ";

$result = mysql_query($query);

$desirelevel = 2;

if($result != $desirelevel) {

header("location: access-denied.php");

exit();

}

?>

[p2grace]

Try this:

 

<?php
<?php
   //Start session
   session_start();
   //SESSION LOGIN LEVEL
   $query="SELECT `level` FROM `members` WHERE `teacherid` ='".$_SESSION['teacherid']."'";
   $result = mysql_query($query);
   $desirelevel = 2;
   if($result != $desirelevel) {
      header("location: access-denied.php");
      exit();
   }
?>

[ec]

no...not working

 

this keeps showing up

 

 

 

Warning: mysql_query() [function.mysql-query]: Access denied for user 'ODBC'@'localhost' (using password: NO) in C:\xampp\htdocs\Detention\PHP-Login\auth2.php on line 6

 

Warning: mysql_query() [function.mysql-query]: A link to the server could not be established in C:\xampp\htdocs\Detention\PHP-Login\auth2.php on line 6

 

Warning: Cannot modify header information - headers already sent by (output started at C:\xampp\htdocs\Detention\PHP-Login\auth2.php:6) in C:\xampp\htdocs\Detention\PHP-Login\auth2.php on line 9

[p2grace]

Have you connected to the server yet?

[paul2463]

Warning: mysql_query() [function.mysql-query]: Access denied for user 'ODBC'@'localhost' (using password: NO) in C:\xampp\htdocs\Detention\PHP-Login\auth2.php on line 6

 

means you have got something wrong in your login tot he database, either the username / password/ or database name is incorrect

[ec]

yeah, i definately have

 

there are two auth. checks and this one is working

<?php

//Start session

session_start();

//Check whether the session variable

//SESSION TEACHER ID is present or not

if(!isset($_SESSION['teacherid']) || (trim($_SESSION['teacherid'])=='')) {

header("location: access-denied.php");

exit();

}

?>

[paul2463]

no do you have something like this anywhere in your code

// change your server name here
$server = 'localhost';

// change your database username here
$uname = '***';

//change your database password here
$pass = '****';

// change the name of the database here
$dbase = 'scouting';


$connection = mysql_connect($server,$uname ,$pass );
mysql_select_db($dbase);

[ec]

ok,

 

i've added in the config script but it is now showing up as access denied even though the access level is 2

[paul2463]

try this

<?php
   //Start session
   session_start();
   //SESSION LOGIN LEVEL
   $query="SELECT `level` FROM `members` WHERE `teacherid` ='".$_SESSION['teacherid']."'";
   $result = mysql_query($query);
   $desirelevel = 2;
$row = mysql_fetch_assoc($result);
$levelresult = $row['level'];
   if($levelresult != $desirelevel) {
      header("location: access-denied.php");
      exit();
   }
?>

[ec]

thats it...thanks so much