Question

<?php 

if (isset($_POST["loginbtn"])){ 
    $euser = $_POST["Emp_Username"]; 
    $epassw = $_POST["Emp_Password"]; 

    $check_user = mysql_query("select * from employee where Emp_Username = '".$euser."'   and Emp_Password= '".$epassw."'"); 

    if ($row=mysql_fetch_assoc($check_user)){ 
     $_SESSION["loggedin"] = "true"; 
     $_SESSION["eid"] = $row["Emp_ID"]; // keeps the member id in a session 
     header("location: profile.php"); // proceeds to the profile page 
    }else{ 
    ?> 
     <script type = "text/javascript"> 
     alert("Invalid Username or Password"); 
     </script> 
    <?php 
    } 
} 
?> 

Answer 1

我想你需要你的代码块内的另一个if条件：

if (isset($_POST["loginbtn"])) { 
    $euser = $_POST["Emp_Username"]; 
    $epassw = $_POST["Emp_Password"]; 
    $check_user = mysql_query("select * from employee where Emp_Username = '".$euser."' > and Emp_Password= '".$epassw."'"); 

    if ($row=mysql_fetch_assoc($check_user)) { 
     $_SESSION["loggedin"] = "true"; 
     $_SESSION["eid"] = $row["Emp_ID"]; // keeps the member id in a session 

     if (in_array($row["position"], array("CEO", "Manager", "...")) { 
      header("location: profile.php"); // proceeds to the profile page 
     } 
    } 
} 
else { ?> alert("Invalid Username or Password");