Member Avatar for vindyauwu

I want to create a single login page for Admin and user.When admin lo it should go to seperate page and when user log it shoult go to seperate page.I want sample code for this.Thanks..

  • 12 Contributors
  • 23 Replies
  • 36K Views
  • 8 Years Discussion Span
  • Latest Post Latest Post by VINITHAPRIYA R

Dani AI

Generated

A single login form is fine; the important part is how you authenticate and route by role. Store a role for each account (for example, admin or user) and, after verifying the password, place only the user id and role in the session. Avoid deprecated mysql_* APIs and MD5; use prepared statements and password_hash/password_verify for security.

Example login handler (login.php) that redirects by role:

<?php
declare(strict_types=1);
session_start();

$pdo = new PDO(
    'mysql:host=localhost;dbname=app;charset=utf8mb4',
    'dbuser',
    'dbpass',
    [PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
     PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC]
);

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $username = trim($_POST['username'] ?? '');
    $password = $_POST['password'] ?? '';

    $stmt = $pdo->prepare('SELECT id, username, pass_hash, role FROM users WHERE username = ? LIMIT 1');
    $stmt->execute([$username]);
    $user = $stmt->fetch();

    if ($user && password_verify($password, $user['pass_hash'])) {
        session_regenerate_id(true);
        $_SESSION['uid'] = $user['id'];
        $_SESSION['role'] = $user['role']; // 'admin' or 'user'
        header('Location: ' . ($user['role'] === 'admin' ? '/admin/dashboard.php' : '/user/home.php'));
        exit;
    }
    header('Location: /login.php?error=1'); // show a generic error
    exit;
}

Protect pages by role:

<?php
session_start();
if (($_SESSION['role'] ?? null) !== 'admin') {
    http_response_code(403);
    exit('Forbidden');
}

Troubleshooting tips: call session_start() before any output; always exit after header(); do not redirect the login processor back to itself on success; fetch a row and read its role rather than trying to infer role from row counts.

References:

Recommended Answers

All 23 Replies

Member Avatar for ckchaudhary

1) In you users table store the user type
2) while checking for loging creadentials against database, if username and password is correct, check the usertype.
3) if admin redirect to admin page, if user, redirect to user page
4) and do store the usertype in session for checking on other pages

Member Avatar for vindyauwu

Do you have any sample code..sorry I am a newbie!!!!

Member Avatar for ckchaudhary

I dont have. You can post your code, whatever you have done till now and then people can tell you the modifications. Chances of someone giving you the entire code tailored to your need are very less.

Edited by ckchaudhary
Member Avatar for vindyauwu 
This is the code.When I call index.php page it goes to newAdmin.php page..Can you help

<?php

// Inialize session
session_start();

// Include database connection settings
include('configg.php');

// Retrieve username and password from database according to user's input
$login = mysql_query("SELECT * FROM user WHERE (UserName = '" . mysql_real_escape_string($_POST['username']) . "') and (Password = '" . mysql_real_escape_string(md5($_POST['password'])) . "')");

// Check username and password match
if (mysql_num_rows($login) == 'admin') {
// Set username session variable
$_SESSION['username'] = $_POST['username'];
// Jump to secured page
header('Location:newAdmin.php');
}
else
if (mysql_num_rows($login) == 'user') {
// Set username session variable
$_SESSION['username'] = $_POST['username'];
// Jump to secured page
header('Location:user.php');
}
else {
// Jump to login page
header('Location: ind.php');
}

?>
<html>

<head>
<title></title>
</head>

<body>

<h3>User Login</h3>

<table border="0">
<form method="POST" action="ind.php">
<tr><td>Username</td><td>:</td><td><input type="text" name="username" size="20"></td></tr>
<tr><td>Password</td><td>:</td><td><input type="password" name="password" size="20"></td></tr>
<tr><td>&nbsp;</td><td>&nbsp;</td><td><input type="submit" value="Login"></td></tr>
</form>
</table>

</body>

</html>
Member Avatar for simplypixie

You aren't getting the data from your query. mysql_num_rows returns exactly what it says, the number of rows returned from a query - therefore it cannot be equal to a strings, only an integer.

Change to:

$query = mysql_fetch_array($login);

// Check username and password match
if ($query['user'] == 'admin') {
// Set username session variable
$_SESSION['username'] = $_POST['username'];
// Jump to secured page
header('Location:newAdmin.php');
}
elseif ($query['user'] == 'user') {
// Set username session variable
$_SESSION['username'] = $_POST['username'];
// Jump to secured page
header('Location:user.php');
}
else {
// Jump to login page
header('Location: ind.php');
}

Where I have used $query['user'] you need to change user to whatever the column name is in your db table that stores the level of user.

Member Avatar for vindyauwu

I did as you said simplypixie it goes to index page but it shows "This page has Redirect loop"..Any solution???????????

Member Avatar for simplypixie

What is the code at the top of your index pages?

Member Avatar for Member #120589

Your login form should be separate to any processing code.

Example - all pages (pseudocode):

session_start
include config.php
include loginswitch.php

DTD, head
body
    navigation menu
    echo $loginhtml
    page content
    footer

The loginswitch.php has the code to determine what's displayed: login form or 'logged in as xxxx' with logout link.

Example:
Suggest that you just store user id and access level in session

if(!isset($_SESSION['id'])){
    $loginhtml = ...(your form)...
}else{
    ...get user details from DB...
    $loginhtml = "<span class=\"logged\">Logged in as $username</span> <a href=\"logout.php\">logout</a>";
}

Your admin pages just need to have something like:

session_start();
if(!isset($_SESSION['id']) || $_SESSION['level'] != 'admin'){
    header('Location: index.php');
}

My 2p.

Member Avatar for andyy121

[off-topic hijack removed]

Edited by Ezzaral because: Do not hijack other people's threads with your own question. Start a new thread.
Member Avatar for JorgeM

,

You may not be aware of general forum accepted practices, but you may want to consider starting your own thread if you need help rather than hijaking someone else's.

Edited by JorgeM
Member Avatar for vindyauwu 
This is my edited code..when I Log as admin it goes to invalid page..Can anyone help???
database details:
            Admin Login                 User Login
UserName:   admin                       user
Password:   admin                       user


This is index.php
<html>
<head>
<title></title>
</head>

<body>

<h3>User Login</h3>

<table border="0">
<form method="POST" action="newcon.php">
<tr><td>Username</td><td>:</td><td><input type="text" name="username" size="20"></td></tr>
<tr><td>Password</td><td>:</td><td><input type="password" name="password" size="20"></td></tr>
<tr><td>&nbsp;</td><td>&nbsp;</td><td><input type="submit" value="Login"></td></tr>
</form>
</table>

</body>

</html>

This is newcon.php

<?php
// Inialize session

// Include database connection settings
include('config.php');

$uname = $_POST['username'];
    $pwd = $_POST['password'];


        //if(isset($_POST[$uname]) || isset($_POST[$pwd]) || isset($_POST[$accessLevel])){
    $login = mysql_query("SELECT * FROM userslogin WHERE (UserName = '" . mysql_real_escape_string($_POST['username']) . "') and (Password = '" . mysql_real_escape_string(md5($_POST['password'])) . "')");



        session_start();
if($accessLevel != false){

        if($accessLevel == "1"){
            $_SESSION['admin'] =$uname;
        }
        else if($accessLevel == "2"){
            $_SESSION['user'] =$uname;
        }

        header("Location: ../apperal_prac/ind.php");
    }else {
        //echo "Invalid Login";
        //$rs = 0;
        header("Location: ../apperal_prac/invalid.php");    
    }


        //}
    ?>

This is ind.php


<?php
// Inialize session
session_start();
// Include database connection settings
include('config.php');

// Retrieve username and password from database according to user's input

session_start();
if(isset($_SESSION['admin']) || isset($_SESSION['user'])){
        if(isset($_SESSION['admin'])){
            $user = $_SESSION['admin'];
            header("Location: ../apperal_prac/admin.php");
        }
        elseif(isset($_SESSION['user'])){
            $user = $_SESSION['user'];
            header("Location: ../apperal_prac/user.php");
        }

    }else{
        header("Location: ../.php");
    }   
?>

This is config.php
<?php
$host="localhost";
$username="root";
$password="";
$db="name";


$login=mysql_connect($host,$username,$password)or die ("error in sql");

mysql_select_db($db) or die("cannot connect to the server");




?>
Member Avatar for Member #120589

session_start should be at the top of the page before any DTD, html or other server output.

Member Avatar for anjalis683 
Login page

<?php

include("config.php");
session_start();
$error = "";

if($_SERVER["REQUEST_METHOD"] == "POST")
{
// username and password sent from form 

$myusername=addslashes($_POST['username']); 
$mypassword=addslashes($_POST['password']); 


$sql="SELECT id FROM admin WHERE username='$myusername' and passcode='$mypassword'";
$result=mysql_query($sql);
$row=mysql_fetch_array($result);
//$active=$row['Active'];
$count=mysql_num_rows($result);
//echo $count;


// If result matched $myusername and $mypassword, table row must be 1 row
if($count==1)
{
session_register("myusername");
$_SESSION['login_user']=$myusername;
     header("location: enquiry.php");
}
else 
{
$error="Your Login Name or Password is invalid";

}
}
?>


<!DOCTYPE html>
<html>
<head>
  <link href="http://ajax.googleapis.com/ajax/libs/jqueryui/1.8/themes/base/jquery-ui.css" rel="stylesheet" type="text/css"/>
  <script src="http://ajax.googleapis.com/ajax/libs/jquery/1.5/jquery.min.js"></script>
  <script src="http://ajax.googleapis.com/ajax/libs/jqueryui/1.8/jquery-ui.min.js"></script>

  <script>
  $(document).ready(function() {
    $("#dialog").dialog();
  });
  </script>
</head>
<body style="font-size:62.5%;">

<div id="dialog" title="LogIn Panel"><form action="login.php" method="post">
<table border="0" cellpadding="0" cellspacing="0">
<tr><th><b>User Name  :</b></th><td><input type="text" name="username" class="box"/></td>
<tr><th><b>Password  :</b></th><td><input type="password" name="password" class="box" /></td>
<tr><td colspan="2" align="center"><br/><input type="submit" value=" Submit "/></td>
<tr><td colspan="2" align="center"><br/><?php echo $error; ?></td>
</table>
</form>

</div>
</body>
</html>

#

Member Avatar for simplypixie

As @diafol has said, session_start() has to be before any other code or output in your page - that also means include files

<?php
session_start();
include("config.php");
Member Avatar for Member #120589

Well, I suppose it doesn't have to be - just as long as you can guarantee that there isn't any output from that file, e.g. error messages etc. Just seems a lot safer to me.

Member Avatar for vindyauwu

I test your code anjalis863.it is going to login page even I enter wrong password and username.

Member Avatar for sultankhan

how can my admin see all user and maonitor them please any one help me

Member Avatar for Member #120589

I think this is a different topic. Search the forum / web for similar topics or start your own thread.

Member Avatar for amit_48

sir i inserted the data in database then many rows fill with the same data how solve this problem tell me ???????

commented: Hijacked 5 year old thread. +0
Member Avatar for amit_48

sir i inserted the data in database then many rows fill with the same data how to solve this problem tell me ???????hey anyone can tell me about this problems 

 <?php
session_start();
$f_name=mysql_real_escape_string($_POST['f_name']);
$l_name=mysql_real_escape_string($_POST['l_name']);
 $email=mysql_real_escape_string($_POST['email']);
$city=mysql_real_escape_string($_POST['city']);
$country=mysql_real_escape_string($_POST['country']);
$phone_number=mysql_real_escape_string($_POST['phone_number']);
$password=mysql_real_escape_string($_POST['s_password']);

mysql_connect('localhost','root','');
mysql_select_db('college');
echo $insert="INSERT INTO college_info(`first_name`,`last_name`,`email`,`city`,`country`,`phone_number`) VALUES('$f_name','$l_name','$email','$city','$country','$phone_number')";
echo $sql=mysql_query($insert);

if($sql)
{
echo'registration successfully';
$_SESSION['sms']='registration successfully';
header('location:dashboard.php');
}
else
{
echo'not successfully';
$_SESSION['sms']='registration not successfully';
header('location:registration.php');
}

?>
Edited by amit_48
commented: You hijacked a 5 year old thread with obsolete, dangerous code. +0
Member Avatar for Imran_22

hi, plz help me. i create single login form. i want to login in this form (user and admin) both in one form. how to register admin and user. and then how data store in database in one table. plz tell me first how i insert data in to data base tell me query or simple code. And then how to select the data in the database(tell me query).

commented: Lazy, entitled. -3
commented: This is a 5 year old thread you hijacked. Start your own thread and show some effort. +0
Member Avatar for JamesCherrill

tell me how i insert data in to data base, how to select the data in the database

There are many many tutorials on the web that cover this very basic information. Nobody here is going to write a new one just for you. Do some research of your own, then come back to Daniweb and start a new topic if you have any sensible questions.

Edited by JamesCherrill
Member Avatar for VINITHAPRIYA R

hii....send full code for user login registration system and also admin login in same login page.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.