Beveiliging

Gestart doorWereldhotel8 nov 201027 reacties148 weergaven

28 berichten · pagina 1 van 2

Wereldhotel

Lid · Topicstarter

Berichten: 542
Reputatie: 0
Punten: 0,00

Lid sinds: 2008
Laatst gezien: 12 jun 2025

8 nov 2010, 15:04

Waarom werkt dit niet?

[COLOR= #0000BB]<?php
$dbres[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"SELECT * FROM `users` WHERE `id`={$_SESSION[uid]}"[/COLOR][COLOR= #007700]);[/COLOR]
[COLOR= #0000BB]$strLoggedIn[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_fetch_object"]mysql_fetch_object[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$dbres[/COLOR][COLOR= #007700]);[/COLOR]
[URL="http://www.php.net/if"]if[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$strLoggedIn[/COLOR][COLOR= #007700]->[/COLOR]rang [COLOR= #007700]==[/COLOR] [COLOR= #DD0000]"admin"[/COLOR] [COLOR= #007700]||[/COLOR] [COLOR= #DD0000]"developer"[/COLOR][COLOR= #007700]) {[/COLOR]
?>

Alleen admin of developer mag op de pagina. Waarom kan een lid er dan ook op?

Josnl

Lid

Berichten: 3.461
Reputatie: 0
Punten: 0,00

Lid sinds: 2009
Laatst gezien: 18 sep 2023

8 nov 2010, 15:06

[COLOR= #0000BB]<?php
$dbres[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"SELECT * FROM `users` WHERE `id`="[/COLOR][COLOR= #007700].[/COLOR][COLOR= #0000BB]$_SESSION[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]uid[/COLOR][COLOR= #007700]].[/COLOR][COLOR= #DD0000]""[/COLOR][COLOR= #007700]);[/COLOR]
[COLOR= #0000BB]$strLoggedIn[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_fetch_object"]mysql_fetch_object[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$dbres[/COLOR][COLOR= #007700]);[/COLOR]
[URL="http://www.php.net/if"]if[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$strLoggedIn[/COLOR][COLOR= #007700]->[/COLOR]rank [COLOR= #007700]==[/COLOR] [COLOR= #DD0000]"admin"[/COLOR] [COLOR= #007700]||[/COLOR] [COLOR= #DD0000]"developer"[/COLOR][COLOR= #007700]) {[/COLOR]
    
    [COLOR= #FF8000]// De rest van je code :)[/COLOR]
    
[COLOR= #007700]}[/COLOR]
?>

Kenzo

Lid

Berichten: 1.314
Reputatie: 0
Punten: 0,00

Lid sinds: 2009
Laatst gezien: 12 jun 2025

8 nov 2010, 15:09

om hem helemaal compleet te maken:

[COLOR= #0000BB]<?php
$dbres[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"SELECT * FROM `users` WHERE `id`="[/COLOR][COLOR= #007700].[/COLOR][COLOR= #0000BB]$_SESSION[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]uid[/COLOR][COLOR= #007700]].[/COLOR][COLOR= #DD0000]""[/COLOR][COLOR= #007700]);[/COLOR]
[COLOR= #0000BB]$strLoggedIn[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_fetch_object"]mysql_fetch_object[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$dbres[/COLOR][COLOR= #007700]);[/COLOR]
[URL="http://www.php.net/if"]if[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$strLoggedIn[/COLOR][COLOR= #007700]->[/COLOR]rank [COLOR= #007700]==[/COLOR] [COLOR= #DD0000]"admin"[/COLOR] [COLOR= #007700]||[/COLOR] [COLOR= #DD0000]"developer"[/COLOR][COLOR= #007700]) {[/COLOR]
    
    [COLOR= #FF8000]// De rest van je code :)[/COLOR]
    
[COLOR= #007700]}[/COLOR]
[URL="http://www.php.net/else"]else[/URL][COLOR= #007700]{[/COLOR]
    [COLOR= #FF8000]// Als de bezoeker geen admin of devoloper is [/COLOR]
[COLOR= #007700]}[/COLOR]
?>

Josnl

Lid

Berichten: 3.461
Reputatie: 0
Punten: 0,00

Lid sinds: 2009
Laatst gezien: 18 sep 2023

8 nov 2010, 15:10

Ja, dat moest er ook nog bij inderdaad

Wereldhotel

Lid · Topicstarter

Berichten: 542
Reputatie: 0
Punten: 0,00

Lid sinds: 2008
Laatst gezien: 12 jun 2025

8 nov 2010, 15:12

Ik kan er nogsteeds op als lid hoor? ;p

Nieuwe Code:

[COLOR= #0000BB]<?[/COLOR]
[URL="http://www.php.net/include"]include[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"config.php"[/COLOR][COLOR= #007700]);[/COLOR]

[URL="http://www.php.net/include"]include[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"upper.php"[/COLOR][COLOR= #007700]);[/COLOR]            
[URL="http://www.php.net/if"]if[/URL][COLOR= #007700]([/COLOR][URL="http://www.php.net/empty"]empty[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$_SESSION[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]uid[/COLOR][COLOR= #007700]])) {[/COLOR]
    [URL="http://www.php.net/echo"]echo[/URL][COLOR= #DD0000]"U bent niet ingelogd"[/COLOR][COLOR= #007700];
}[/COLOR]
[URL="http://www.php.net/else"]else[/URL] [COLOR= #007700]{[/COLOR]
[COLOR= #0000BB]$dbres[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"SELECT * FROM `users` WHERE `id`="[/COLOR][COLOR= #007700].[/COLOR][COLOR= #0000BB]$_SESSION[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]uid[/COLOR][COLOR= #007700]].[/COLOR][COLOR= #DD0000]""[/COLOR][COLOR= #007700]);[/COLOR]
[COLOR= #0000BB]$info[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_fetch_array"]mysql_fetch_array[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$dbres[/COLOR][COLOR= #007700]);[/COLOR]   
[COLOR= #0000BB]$strLoggedIn[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_fetch_object"]mysql_fetch_object[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$dbres[/COLOR][COLOR= #007700]);[/COLOR]
    [URL="http://www.php.net/if"]if[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$strLoggedIn[/COLOR][COLOR= #007700]->[/COLOR]rang [COLOR= #007700]==[/COLOR] [COLOR= #DD0000]"admin"[/COLOR] [COLOR= #007700]||[/COLOR] [COLOR= #DD0000]"developer"[/COLOR][COLOR= #007700]) {[/COLOR]
        [COLOR= #FF8000]//Krijgjeniet >:)    [/COLOR]
    [COLOR= #007700]}[/COLOR] [URL="http://www.php.net/else"]else[/URL] [COLOR= #007700]{[/COLOR]
    [URL="http://www.php.net/echo"]echo[/URL] [COLOR= #DD0000]"U bent geen Admin of Developer!"[/COLOR][COLOR= #007700];
}
}[/COLOR]
[URL="http://www.php.net/include"]include[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"footer.php"[/COLOR][COLOR= #007700]);[/COLOR]
?>

Wereldhotel

Lid · Topicstarter

Berichten: 542
Reputatie: 0
Punten: 0,00

Lid sinds: 2008
Laatst gezien: 12 jun 2025

8 nov 2010, 15:14

Oh fuck, dubbelpost. Delete dit bericht please?

Kenzo

Lid

Berichten: 1.314
Reputatie: 0
Punten: 0,00

Lid sinds: 2009
Laatst gezien: 12 jun 2025

8 nov 2010, 15:17

[COLOR= #0000BB]<?[/COLOR]
[URL="http://www.php.net/include"]include[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"config.php"[/COLOR][COLOR= #007700]);[/COLOR]

[URL="http://www.php.net/include"]include[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"upper.php"[/COLOR][COLOR= #007700]);[/COLOR]            
[URL="http://www.php.net/if"]if[/URL][COLOR= #007700]([/COLOR][URL="http://www.php.net/empty"]empty[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$_SESSION[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]uid[/COLOR][COLOR= #007700]])) {[/COLOR]
    [URL="http://www.php.net/echo"]echo[/URL][COLOR= #DD0000]"U bent niet ingelogd"[/COLOR][COLOR= #007700];
}[/COLOR]
[URL="http://www.php.net/else"]else[/URL] [COLOR= #007700]{[/COLOR]
[COLOR= #0000BB]$dbres[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"SELECT * FROM `users` WHERE `id`="[/COLOR][COLOR= #007700].[/COLOR][COLOR= #0000BB]$_SESSION[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]uid[/COLOR][COLOR= #007700]].[/COLOR][COLOR= #DD0000]""[/COLOR][COLOR= #007700]);[/COLOR]
[COLOR= #0000BB]$info[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_fetch_array"]mysql_fetch_array[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$dbres[/COLOR][COLOR= #007700]);[/COLOR]   
[COLOR= #0000BB]$strLoggedIn[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_fetch_object"]mysql_fetch_object[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$dbres[/COLOR][COLOR= #007700]);[/COLOR]
    [URL="http://www.php.net/if"]if[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$strLoggedIn[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]rang[/COLOR][COLOR= #007700]] ==[/COLOR] [COLOR= #DD0000]"admin"[/COLOR] [COLOR= #007700]||[/COLOR] [COLOR= #DD0000]"developer"[/COLOR][COLOR= #007700]) {[/COLOR]
        [COLOR= #FF8000]//Krijgjeniet >:)    [/COLOR]
    [COLOR= #007700]}[/COLOR] [URL="http://www.php.net/else"]else[/URL] [COLOR= #007700]{[/COLOR]
    [URL="http://www.php.net/echo"]echo[/URL] [COLOR= #DD0000]"U bent geen Admin of Developer!"[/COLOR][COLOR= #007700];
}
}[/COLOR]
[URL="http://www.php.net/include"]include[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"footer.php"[/COLOR][COLOR= #007700]);[/COLOR]
?>

je hebt nu array gebruikt en geen object dus dat pakt hij ->rang niet, maar [rang] wel

Eleky

Lid

Berichten: 3.788
Reputatie: 0
Punten: 0,00

Lid sinds: 2009
Laatst gezien: 12 jun 2025

8 nov 2010, 15:23

Mensen, leer even hoe je Ifs moet gebruiken!

[COLOR= #0000BB]<?[/COLOR]
[URL="http://www.php.net/include"]include[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"config.php"[/COLOR][COLOR= #007700]);[/COLOR]

[URL="http://www.php.net/include"]include[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"upper.php"[/COLOR][COLOR= #007700]);[/COLOR]            
[URL="http://www.php.net/if"]if[/URL][COLOR= #007700]([/COLOR][URL="http://www.php.net/empty"]empty[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$_SESSION[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]uid[/COLOR][COLOR= #007700]])) {[/COLOR]
    [URL="http://www.php.net/echo"]echo[/URL][COLOR= #DD0000]"U bent niet ingelogd"[/COLOR][COLOR= #007700];
}[/COLOR]
[URL="http://www.php.net/else"]else[/URL] [COLOR= #007700]{[/COLOR]
[COLOR= #0000BB]$dbres[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"SELECT * FROM `users` WHERE `id`="[/COLOR][COLOR= #007700].[/COLOR][COLOR= #0000BB]$_SESSION[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]uid[/COLOR][COLOR= #007700]].[/COLOR][COLOR= #DD0000]""[/COLOR][COLOR= #007700]);[/COLOR]
[COLOR= #0000BB]$info[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_fetch_array"]mysql_fetch_array[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$dbres[/COLOR][COLOR= #007700]);[/COLOR]  
[COLOR= #0000BB]$strLoggedIn[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_fetch_object"]mysql_fetch_object[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$dbres[/COLOR][COLOR= #007700]);[/COLOR]
    [URL="http://www.php.net/if"]if[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$strLoggedIn[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]rang[/COLOR][COLOR= #007700]] ==[/COLOR] [COLOR= #DD0000]"admin"[/COLOR] [COLOR= #007700]||[/COLOR] [COLOR= #0000BB]$strLoggedIn[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]rang[/COLOR][COLOR= #007700]] ==[/COLOR] [COLOR= #DD0000]"developer"[/COLOR][COLOR= #007700]) {[/COLOR]
        [COLOR= #FF8000]//Krijgjeniet >:)    [/COLOR]
    [COLOR= #007700]}[/COLOR]
    [URL="http://www.php.net/else"]else[/URL] [COLOR= #007700]{[/COLOR]
        [URL="http://www.php.net/echo"]echo[/URL] [COLOR= #DD0000]"U bent geen Admin of Developer!"[/COLOR][COLOR= #007700];
}
}[/COLOR]
[URL="http://www.php.net/include"]include[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"footer.php"[/COLOR][COLOR= #007700]);[/COLOR]
?>

Kenzo

Lid

Berichten: 1.314
Reputatie: 0
Punten: 0,00

Lid sinds: 2009
Laatst gezien: 12 jun 2025

8 nov 2010, 15:38

@eleky, dat maakt niet uit.
het werkt beide, natuurlijk is het voor de meeste overzichtelijker dan andere maarja.
je zou zelfs dit kunnen doen:

}                    else




{

als je zou willen

Eleky

Lid

Berichten: 3.788
Reputatie: 0
Punten: 0,00

Lid sinds: 2009
Laatst gezien: 12 jun 2025

8 nov 2010, 15:40

#10

Het ging niet om die else......
.....
.....
.....
.....
.....
.....
.....
Beetje jammer dit

Kenzo

Lid

Berichten: 1.314
Reputatie: 0
Punten: 0,00

Lid sinds: 2009
Laatst gezien: 12 jun 2025

8 nov 2010, 16:07

#11

zie ik het dan over het hoofd?

Eleky

Lid

Berichten: 3.788
Reputatie: 0
Punten: 0,00

Lid sinds: 2009
Laatst gezien: 12 jun 2025

8 nov 2010, 16:11

#12

Regel 12 is aangepast

Wereldhotel

Lid · Topicstarter

Berichten: 542
Reputatie: 0
Punten: 0,00

Lid sinds: 2008
Laatst gezien: 12 jun 2025

8 nov 2010, 16:12

#13

Ik zal even kijken

Super hij werkt!

EDIT: Wacht ff, als ik admin ben staat die text er nogsteeds

Kenzo

Lid

Berichten: 1.314
Reputatie: 0
Punten: 0,00

Lid sinds: 2009
Laatst gezien: 12 jun 2025

8 nov 2010, 16:18

#14

neem die van mij, eleky heeft object gebruikt maar gebruikt ook [veld]

doe dit maar:

[COLOR= #0000BB]<?php[/COLOR]
[URL="http://www.php.net/include"]include[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"config.php"[/COLOR][COLOR= #007700]);[/COLOR]

[URL="http://www.php.net/include"]include[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"upper.php"[/COLOR][COLOR= #007700]);[/COLOR]            
[URL="http://www.php.net/if"]if[/URL][COLOR= #007700]([/COLOR][URL="http://www.php.net/empty"]empty[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$_SESSION[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]uid[/COLOR][COLOR= #007700]])) {[/COLOR]
    [URL="http://www.php.net/echo"]echo[/URL][COLOR= #DD0000]"U bent niet ingelogd"[/COLOR][COLOR= #007700];
}[/COLOR]
[URL="http://www.php.net/else"]else[/URL] [COLOR= #007700]{[/COLOR]
[COLOR= #0000BB]$dbres[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"SELECT * FROM `users` WHERE `id`="[/COLOR][COLOR= #007700].[/COLOR][COLOR= #0000BB]$_SESSION[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]uid[/COLOR][COLOR= #007700]].[/COLOR][COLOR= #DD0000]""[/COLOR][COLOR= #007700]);[/COLOR]
[COLOR= #0000BB]$strLoggedIn[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_fetch_array"]mysql_fetch_array[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$dbres[/COLOR][COLOR= #007700]);[/COLOR]
    [URL="http://www.php.net/if"]if[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$strLoggedIn[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]rang[/COLOR][COLOR= #007700]] ==[/COLOR] [COLOR= #DD0000]"admin"[/COLOR] [COLOR= #007700]||[/COLOR] [COLOR= #0000BB]$strLoggedIn[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]rang[/COLOR][COLOR= #007700]] ==[/COLOR] [COLOR= #DD0000]"developer"[/COLOR][COLOR= #007700]) {[/COLOR]
        [URL="http://www.php.net/echo"]echo[/URL] [COLOR= #DD0000]"je bent een admin of developer:)"[/COLOR][COLOR= #007700];   
    }[/COLOR]
    [URL="http://www.php.net/else"]else[/URL] [COLOR= #007700]{[/COLOR]
        [URL="http://www.php.net/echo"]echo[/URL] [COLOR= #DD0000]"U bent geen Admin of Developer!"[/COLOR][COLOR= #007700];
}
}[/COLOR]
[URL="http://www.php.net/include"]include[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"footer.php"[/COLOR][COLOR= #007700]);[/COLOR]
?>

EDIT: waarom gebruik je
$info = mysql_fetch_array($dbres); ??
die komt nergens terug

DUBBEL EDIT: had ff iets fout gedaan

Wereldhotel

Lid · Topicstarter

Berichten: 542
Reputatie: 0
Punten: 0,00

Lid sinds: 2008
Laatst gezien: 12 jun 2025

8 nov 2010, 16:21

#15

Staat nogsteeds dat bericht ipv mijn script

Jouw reactie

Deel je idee, stel een vraag of help een ander verder.