小编Ser*_*rus的帖子

我在数据库表中创建了一个名为"permissions"的列,其值为1表示管理员,2表示常规用户.问题是每当我与普通用户登录时,它都会将我重定向到管理员页面.

<?php
$con=mysql_connect('localhost','root','') or die(mysql_error());
mysql_select_db('user_registration') or die("cannot select DB");


if(isset($_POST["login"])){

    if(!empty($_POST['user']) && !empty($_POST['pass'])) {

        $user = strip_tags($_POST['user']);
        $pass = strip_tags($_POST['pass']);


        $query=mysql_query("SELECT * FROM users WHERE username='".$user."' AND password='".$pass."'");
        $numrows=mysql_num_rows($query);

        $permissions= "SELECT username FROM users WHERE permissions = '1'";
        $result=mysql_query($permissions);


            if($numrows!=0) {
                while($row=mysql_fetch_assoc($query)) {
                    $dbusername=$row['username'];
                    $dbpassword=$row['password'];
                }

                if($user == $dbusername && $pass == $dbpassword) {
                    session_start();
                    $_SESSION['sess_user']=$user;
                        if (mysql_num_rows($result) == 1 ) {
                            header("Location: fullDB.php");
                        } else { 
                            header("Location: member.php");
                        }
                }

            } else {
                echo "Invalid username or password!"; …