<?php
if (isset($_POST["loginbtn"])){
$euser = $_POST["Emp_Username"];
$epassw = $_POST["Emp_Password"];
$check_user = mysql_query("select * from employee where Emp_Username = '".$euser."' and Emp_Password= '".$epassw."'");
if ($row=mysql_fetch_assoc($check_user)){
$_SESSION["loggedin"] = "true";
$_SESSION["eid"] = $row["Emp_ID"]; // keeps the member id in a session
header("location: profile.php"); // proceeds to the profile page
}else{
?>
<script type = "text/javascript">
alert("Invalid Username or Password");
</script>
<?php
}
}
?>
我认为您还需要在块代码中添加另一个if条件：
if (isset($_POST["loginbtn"])) {
$euser = $_POST["Emp_Username"];
$epassw = $_POST["Emp_Password"];
$check_user = mysql_query("select * from employee where Emp_Username = '".$euser."' > and Emp_Password= '".$epassw."'");
if ($row=mysql_fetch_assoc($check_user)) {
$_SESSION["loggedin"] = "true";
$_SESSION["eid"] = $row["Emp_ID"]; // keeps the member id in a session
if (in_array($row["position"], array("CEO", "Manager", "...")) {
header("location: profile.php"); // proceeds to the profile page
}
}
}
else { ?> alert("Invalid Username or Password");
本文收集自互联网，转载请注明来源。
如有侵权，请联系[email protected] 删除。
我来说两句