如何登录到PHP的管理员页面

Question

这是我的登录页面，登录后，普通玩家去home.php。但我需要的，如果用户名和密码是与例如该用户一个特殊的球员等于：

然后去adminpage.php

和代码：

<?PHP 
require_once("./include/membersite_config.php"); 

if(isset($_POST['submitted'])) 
{ 
    if($fgmembersite->Login()) 
    { 
     $fgmembersite->RedirectToURL("home.php"); 
    } 
} 
     <!-- Form Code Start --> 
<div id='fg_membersite'> 
<form id='login' action='<?php echo $fgmembersite->GetSelfScript(); ?>' method='post' accept-charset='UTF-8'> 
<fieldset > 
<legend>ورود</legend> 

<input type='hidden' name='submitted' id='submitted' value='1'/> 

<div class='short_explanation' dir="rtl">فیلدهای الزامی *</div> 

<div><span class='error'><?php echo $fgmembersite->GetErrorMessage(); ?></span></div> 
<div class='container' dir="rtl"> 
    <label for='username' >:نام کاربری *</label><br/> 
    <input type='text' name='username' id='username' value='<?php echo $fgmembersite->SafeDisplay('username') ?>' maxlength="50" /><br/> 
    <span id='login_username_errorloc' class='error'></span> 
</div> 
<div class='container' dir="rtl"> 
    <label for='password' >:کلمه عبور *</label><br/> 
    <input type='password' name='password' id='password' maxlength="50" /><br/> 
    <span id='login_password_errorloc' class='error'></span> 
</div> 

<div class='container'> 
    <input type='submit' name='Submit' value='ورود' /> 

</div> 
<!-- 
<div class='short_explanation'><a href='reset-pwd-req.php'>Forgot Password?</a></div> 
</fieldset> --> 
</form> 
<!-- client-side Form Validations: 
Uses the excellent form validation script from JavaScript-coder.com--> 

<script type='text/javascript'> 
// <![CDATA[ 

    var frmvalidator = new Validator("login"); 
    frmvalidator.EnableOnPageErrorDisplay(); 
    frmvalidator.EnableMsgsTogether(); 

    frmvalidator.addValidation("username","req","لطفا نام کاربریتان را وارد نمایید"); 

    frmvalidator.addValidation("password","req","لطفا رمز عبورتان را وارد نمایید"); 

// ]]> 
</script> 
<p dir="rtl"><a href="confirmreg.php">تایید ثبت نام</a></p> 
</div> 
<!-- 
Form Code End (see html-form-guide.com for more info.) 
--> 

这里是我的fg_membersite.php中的函数

function Login() 
{ 

    if(empty($_POST['username'])) 
    { 
     $this->HandleError("UserName is empty!"); 
     return false; 
    } 

    if(empty($_POST['password'])) 
    { 
     $this->HandleError("Password is empty!"); 
     return false; 
    } 

    $username = trim($_POST['username']); 
    $password = trim($_POST['password']); 

    if(!isset($_SESSION)){ session_start(); } 
    if(!$this->CheckLoginInDB($username,$password)) 
    { 
     return false; 
    } 

    $_SESSION[$this->GetLoginSessionVar()] = $username; 

    return true; 
} 

这是用户表（tablesite）

Answer 1

function Login() 
{ 

    if(empty($_POST['username'])) 
    { 
     $this->HandleError("UserName is empty!"); 
     return false; 
    } 

    if(empty($_POST['password'])) 
    { 
     $this->HandleError("Password is empty!"); 
     return false; 
    } 

    $username = trim($_POST['username']); 
    $password = trim($_POST['password']); 

    if(!isset($_SESSION)){ session_start(); } 
    if(!$this->CheckLoginInDB($username,$password)) 
    { 
     return false; 
    } 

    if($username == "special_user_name") 
    // redirect to adminlogin.php 

    $_SESSION[$this->GetLoginSessionVar()] = $username; 

    return true; 
} 

Answer 2

尝试：

if(isset($_POST['submitted'])) 
{ 
    if($fgmembersite->Login()){ 
     if($fgmembersite->UserFullName() == "sajad"){ 
       $fgmembersite->RedirectToURL("adminpage.php"); 
     }else{ 
       $fgmembersite->RedirectToURL("home.php"); 
     } 
    } 
} 

Answer 3

如果你能和不反对这样做，我建议将表添加到数据库是包含各种用户角色和上表中显示为新表的关键字的新字段。通过分配的角色，更容易改变哪些用户可以看到什么内容 - 即：管理员可以看到编辑链接，注册用户可以看到新页面等。

create table `roles` (
    `id` tinyint(3) unsigned not null auto_increment, 
    `role` varchar(16) not null, 
    primary key (`id`) 
) 
collate='utf8mb4_persian_ci' engine=innodb; 

insert into `roles` (`id`, `role`) values 
    (1, 'administrator'), 
    (2, 'special guest'), 
    (3, 'guest'), 
    (4, 'public'); 

alter table `tablesite` 
    add column `role` tinyint unsigned not null default '3' after `id_user`, 
    add index `role` (`role`); 

alter table `tablesite` 
    add constraint `fk_usr_role` foreign key (`role`) references `roles` (`id`) on update cascade on delete cascade;