okay in my pos script for login i need it to verify at the end if admin = yes and if yes set cookie saying admin...

my login script so far. works with regular users. not for admins

PHP Code:

<?php
// login form script
require 'config.php';


//if calling pages into an index file place this section at the start of your index
if (isset($_POST['userid']) && isset($_POST['password']))
{
  // if the user has just tried to log in
  $query = "select * from users "
           ."where username='$_POST[userid]' "
           ." and password='$_POST[password]' ";
  $result = mysql_query($query, $dbh);
  $row = mysql_fetch_assoc($result);
  if (mysql_num_rows($result) >0)  {
    // if they are in the database register the user id
    //below are the session variables add/remove or modify these as you wish
    $valid_user = $_POST['userid'];
    $_COOKIE['valid_user'] == $valid_user;
    setcookie ("valid_user", "$valid_user", time()+60*60*24*365, "/");
    
     }
}
mysql_query($query, $dbh);
if (admin == yes) {
$_COOKIE['admin'] == "admin";
setcookie ("admin", "admin", time()+60*60*24*365, "/");
}
?>
<a href="member.php">Click Here to Continue</a>

this is the script for checking the user name agianst the db for access

if (isset($_POST['userid']) && isset($_POST['password'])){
$query = "select * from users "
."where username='$_POST[userid]' "
." and password='$_POST[password]' ";
$result = mysql_query($query, $dbh);
$row = mysql_fetch_assoc($result);
if (mysql_num_rows($result) >0) {
$valid_user = $_POST['userid'];
$_COOKIE['valid_user'] == $valid_user;
setcookie ("valid_user", "$valid_user", time()+60*60*24*365, "/");
}
}

// you havent constructed a conditional that works with the fetch_assoc() properly

$dbAdmin = $row['insert your access column name'];
if ($dbAdmin == 'admin') {
$_COOKIE['admin'] == "admin";
setcookie ("admin", "admin", time()+60*60*24*365, "/");
}

thanks will try this script when i get home around 3:00

how would i write the fetch_assoc(); to work properly???? i got the main part of the script from hotscripts.com then modified it to work with the cookies and mysql database for my perposes

okay after some screwing around with it i got it to do what i wanted it to do...


Thanks