Member Avatar for skp03

I am involved in a development of a website almost the wesite is about to get completed...but i have a create a web page such that in the top left side of the page Admin label will be their after clicking on a Admin(label) the another form will appear front requesting to enter the username and password

After succesfully login the page should be in such a way that as the ecommerce website will be having many products in the same way admin should be able to add products by just pressing a button ADD he can add as many products he wants by just pressing buttons and filing the data like (Adding one product Image and a short information about it) this page containing ADD button should not be visible to a user As the Products successfullly added then it should get dispalyed in user panel....

please help me out with this problem

  • 2 Contributors
  • 1 Reply
  • 276 Views
  • 9 Hours Discussion Span
  • Latest Post Latest Post by Member #949455

Dani AI

Generated

As described, the requirement is an Admin entry point (top-left label -> login) that opens an admin-only product management UI; products added there become visible in the normal user panel while the Add UI remains hidden from regular users. As noted, using an existing e‑commerce platform is often the fastest route, but a compact custom implementation is straightforward if the site is small.

Recommended approach (high level):

  • Prefer server-side role checks, not UI hiding. Only render the Add controls for admin users in templates, and always block admin endpoints on the server.
  • Authentication: store salted hashes (bcrypt/argon2), use secure sessions or tokens, and require HTTPS.
  • Product workflow: admin form uploads an image (validate MIME, size), server stores image with a unique filename (or use object storage), create thumbnails, insert product record into a products table, and mark it published. The user panel queries only published products.
  • Security and robustness: validate all inputs, use prepared statements/ORM, enforce CSRF protection, limit upload types, add rate limiting on login, and log admin actions.

Practical checklist for deployment:

  • If reuse is acceptable: evaluate WooCommerce/Magento/OpenCart/Shopify for ready-made admin UIs.
  • If custom: implement login + role flag, admin-only routes/middleware, secure uploads, product schema, and separate publish status.
  • Test both admin and non-admin flows, test file uploads, and test that direct POSTs to admin endpoints are rejected without proper role.

Minimal examples:

Middleware (Node/Express style)

function requireAdmin(req, res, next) {
  if (req.user && req.user.role === 'admin') return next();
  return res.status(403).json({ error: 'Forbidden' });
}

Simple products table (SQL)

CREATE TABLE products (
  id INT AUTO_INCREMENT PRIMARY KEY,
  title VARCHAR(255) NOT NULL,
  sku VARCHAR(64) UNIQUE,
  price DECIMAL(10,2) NOT NULL,
  image_url VARCHAR(512),
  short_desc TEXT,
  published BOOL DEFAULT FALSE,
  created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
);

Caution: do not rely on hiding the Add button for security. Server-side role checks and proper upload validation are essential.

Member Avatar for Member #949455

After succesfully login the page should be in such a way that as the ecommerce website will be having many products in the same way admin should be able to add products by just pressing a button ADD he can add as many products he wants by just pressing buttons and filing the data like (Adding one product Image and a short information about it) this page containing ADD button should not be visible to a user As the Products successfullly added then it should get dispalyed in user panel....

Most ecommerce platform have that kind of feature. My advice just download any ecommerce platform and take it apart then used the code and modify it to your ecommerce website. You have to understand noone will write this code for you.

Edited by Member #949455 because: grammer
Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.