Проверка за привилегии

T

The_Killer

Registered
Имам този код, който проверява дали усера е админ и ако не е не му показва страницата, обаче искам и обикновенните усери да могат да я виждат. Пробвах да променя еденицата (на този ред $smarty->assign("$status",1); ) на нула и вече не ми показваше че нямам достъп до страницата, но ми излизаше само заглавието, а самата страница надолу не се показваше. Пробвах и да махна самата проверка за това дали усера е админ, но пак същият резултат... Помогнете плс.


Код: 
<?php
require_once './Includes/configs/functions.php';
require_once './Includes/libs/Smarty.class.php';
include_once "./Includes/language/$site_lang.php";

$smarty = new Smarty;

if (isset($_SESSION["logged_in"])){
	$smarty->assign("logged_in",1);
	$smarty->assign("username",$_SESSION["user"]);
	$status = checkPrivs();
	$smarty->assign("$status",1);
	
	if (checkIfAdmin($_SESSION["user"],$_SESSION["pass"]) || checkIfSeller($_SESSION["user"],$_SESSION["pass"])) {
		if (isset($_POST["submit"]) && $_POST["submit"] == ADD_LISTING_FORM_SUBMIT_BUTTON) {
			$_POST = codeClean($_POST);
			$serializedfeature = serialize($_POST["features"]);
			$res = addListing($_POST["ad_title"],$_POST["make"],$_POST["model"],$_POST["vehicle_type"],$_POST["doors"],$_POST["color"],$_POST["mileage"],$_POST["year"],$_POST["listing_condition"],$_POST["engine"],$_POST["trans"],$_POST["drive_train"],$_POST["mpg"],$_POST["price"],$_POST["adddesc"],$serializedfeature,$_POST["vin"],$_POST["stock"],$_POST["state"],$_POST["zip"],$_POST["sellerid"],$_POST["seller"]);
			if ($res == 99) {
				$smarty->assign("success",ADD_LISTING_SUCCESS);
			} else {
				$smarty->assign("error_message",ADD_LISTING_ERROR);
			}
		}

		$smarty->assign("manufacturerslist",getManufacturersList());
		$smarty->assign("featurelist",getFeaturesList());
		$smarty->assign("drivetrainlist",getDriveTrainsList());
		$smarty->assign("typeslist",getTypesList());
		$smarty->assign("userdetails",getUserRecords($_SESSION["user"]));
		$smarty->assign("sellerslist",getSellers());
		$smarty->assign("stateslist",getStatesList());

	} else {
		header("Location, member.php");
		exit();
	}
} else {
	header("Location: login.php");
	exit();
}

$smarty->display('addlisting.tpl');
?>
 
Хайде помагайте, мисля че не искам нещо кой знае колко сложно... Предполагам че бъркам нещо в разположението на скобите за да не ми излиза страницата надолу...
 
Код: 
<?php
require_once './Includes/configs/functions.php';
require_once './Includes/libs/Smarty.class.php';
include_once "./Includes/language/$site_lang.php";

$smarty = new Smarty;

if (isset($_SESSION["logged_in"])){
   $smarty->assign("logged_in",1);
   $smarty->assign("username",$_SESSION["user"]);
   $status = checkPrivs();
   $smarty->assign("$status",1);
   
   if ( checkIfSeller($_SESSION["user"],$_SESSION["pass"])) {
      if (isset($_POST["submit"]) && $_POST["submit"] == ADD_LISTING_FORM_SUBMIT_BUTTON) {
         $_POST = codeClean($_POST);
         $serializedfeature = serialize($_POST["features"]);
         $res = addListing($_POST["ad_title"],$_POST["make"],$_POST["model"],$_POST["vehicle_type"],$_POST["doors"],$_POST["color"],$_POST["mileage"],$_POST["year"],$_POST["listing_condition"],$_POST["engine"],$_POST["trans"],$_POST["drive_train"],$_POST["mpg"],$_POST["price"],$_POST["adddesc"],$serializedfeature,$_POST["vin"],$_POST["stock"],$_POST["state"],$_POST["zip"],$_POST["sellerid"],$_POST["seller"]);
         if ($res == 99) {
            $smarty->assign("success",ADD_LISTING_SUCCESS);
         } else {
            $smarty->assign("error_message",ADD_LISTING_ERROR);
         }
      }

      $smarty->assign("manufacturerslist",getManufacturersList());
      $smarty->assign("featurelist",getFeaturesList());
      $smarty->assign("drivetrainlist",getDriveTrainsList());
      $smarty->assign("typeslist",getTypesList());
      $smarty->assign("userdetails",getUserRecords($_SESSION["user"]));
      $smarty->assign("sellerslist",getSellers());
      $smarty->assign("stateslist",getStatesList());

   } else {
      header("Location, member.php");
      exit();
   }
} else {
   header("Location: login.php");
   exit();
}

$smarty->display('addlisting.tpl');
?>
Така?
 
Код: 
<?php
require_once './Includes/configs/functions.php';
require_once './Includes/libs/Smarty.class.php';
include_once "./Includes/language/$site_lang.php";

$smarty = new Smarty;

if (isset($_SESSION["logged_in"])){
   $smarty->assign("logged_in",1);
   $smarty->assign("username",$_SESSION["user"]);
   $status = checkPrivs();
   $smarty->assign("$status",0);
   
   if ( checkIfSeller($_SESSION["user"],$_SESSION["pass"])) {
      if (isset($_POST["submit"]) && $_POST["submit"] == ADD_LISTING_FORM_SUBMIT_BUTTON) {
         $_POST = codeClean($_POST);
         $serializedfeature = serialize($_POST["features"]);
         $res = addListing($_POST["ad_title"],$_POST["make"],$_POST["model"],$_POST["vehicle_type"],$_POST["doors"],$_POST["color"],$_POST["mileage"],$_POST["year"],$_POST["listing_condition"],$_POST["engine"],$_POST["trans"],$_POST["drive_train"],$_POST["mpg"],$_POST["price"],$_POST["adddesc"],$serializedfeature,$_POST["vin"],$_POST["stock"],$_POST["state"],$_POST["zip"],$_POST["sellerid"],$_POST["seller"]);
         if ($res == 99) {
            $smarty->assign("success",ADD_LISTING_SUCCESS);
         } else {
            $smarty->assign("error_message",ADD_LISTING_ERROR);
         }
      }

      $smarty->assign("manufacturerslist",getManufacturersList());
      $smarty->assign("featurelist",getFeaturesList());
      $smarty->assign("drivetrainlist",getDriveTrainsList());
      $smarty->assign("typeslist",getTypesList());
      $smarty->assign("userdetails",getUserRecords($_SESSION["user"]));
      $smarty->assign("sellerslist",getSellers());
      $smarty->assign("stateslist",getStatesList());

   } else {
      header("Location, member.php");
      exit();
   }
} else {
   header("Location: login.php");
   exit();
}

$smarty->display('addlisting.tpl');
?>
Така?
 
Код: 
<?php
require_once './Includes/configs/functions.php';
require_once './Includes/libs/Smarty.class.php';
include_once "./Includes/language/$site_lang.php";

$smarty = new Smarty;

if (isset($_SESSION["logged_in"])){
   $smarty->assign("logged_in",1);
   $smarty->assign("username",$_SESSION["user"]);
   $status = checkPrivs();
   $smarty->assign("$status",1);
      if (isset($_POST["submit"]) && $_POST["submit"] == ADD_LISTING_FORM_SUBMIT_BUTTON) {
         $_POST = codeClean($_POST);
         $serializedfeature = serialize($_POST["features"]);
         $res = addListing($_POST["ad_title"],$_POST["make"],$_POST["model"],$_POST["vehicle_type"],$_POST["doors"],$_POST["color"],$_POST["mileage"],$_POST["year"],$_POST["listing_condition"],$_POST["engine"],$_POST["trans"],$_POST["drive_train"],$_POST["mpg"],$_POST["price"],$_POST["adddesc"],$serializedfeature,$_POST["vin"],$_POST["stock"],$_POST["state"],$_POST["zip"],$_POST["sellerid"],$_POST["seller"]);
         if ($res == 99) {
            $smarty->assign("success",ADD_LISTING_SUCCESS);
         } else {
            $smarty->assign("error_message",ADD_LISTING_ERROR);
         }
      }

      $smarty->assign("manufacturerslist",getManufacturersList());
      $smarty->assign("featurelist",getFeaturesList());
      $smarty->assign("drivetrainlist",getDriveTrainsList());
      $smarty->assign("typeslist",getTypesList());
      $smarty->assign("userdetails",getUserRecords($_SESSION["user"]));
      $smarty->assign("sellerslist",getSellers());
      $smarty->assign("stateslist",getStatesList());
} else {
   header("Location: login.php");
   exit();
}

$smarty->display('addlisting.tpl');
?>
 
devent каза:
Код: 
<?php
require_once './Includes/configs/functions.php';
require_once './Includes/libs/Smarty.class.php';
include_once "./Includes/language/$site_lang.php";

$smarty = new Smarty;

if (isset($_SESSION["logged_in"])){
   $smarty->assign("logged_in",1);
   $smarty->assign("username",$_SESSION["user"]);
   $status = checkPrivs();
   $smarty->assign("$status",1);
      if (isset($_POST["submit"]) && $_POST["submit"] == ADD_LISTING_FORM_SUBMIT_BUTTON) {
         $_POST = codeClean($_POST);
         $serializedfeature = serialize($_POST["features"]);
         $res = addListing($_POST["ad_title"],$_POST["make"],$_POST["model"],$_POST["vehicle_type"],$_POST["doors"],$_POST["color"],$_POST["mileage"],$_POST["year"],$_POST["listing_condition"],$_POST["engine"],$_POST["trans"],$_POST["drive_train"],$_POST["mpg"],$_POST["price"],$_POST["adddesc"],$serializedfeature,$_POST["vin"],$_POST["stock"],$_POST["state"],$_POST["zip"],$_POST["sellerid"],$_POST["seller"]);
         if ($res == 99) {
            $smarty->assign("success",ADD_LISTING_SUCCESS);
         } else {
            $smarty->assign("error_message",ADD_LISTING_ERROR);
         }
      }

      $smarty->assign("manufacturerslist",getManufacturersList());
      $smarty->assign("featurelist",getFeaturesList());
      $smarty->assign("drivetrainlist",getDriveTrainsList());
      $smarty->assign("typeslist",getTypesList());
      $smarty->assign("userdetails",getUserRecords($_SESSION["user"]));
      $smarty->assign("sellerslist",getSellers());
      $smarty->assign("stateslist",getStatesList());
} else {
   header("Location: login.php");
   exit();
}

$smarty->display('addlisting.tpl');
?>
Увеличете...

Пак се получи същото, както когато аз пробвах - показва ми заглавието, но самата страница надолу не...
 
Трябва да си влезнал или регистриран, за да отговориш тук.

Back
Горе