limiting access

Hey Ray

On the attached page, just wondering how I do the following:

1. limit access based on $_SESSION['UserGroupID'] = $row_WADAlogins['UserID']
2. If the Password field is changed and updated, how would I show a message like 'password changed successfully'?

Thanks

Jamie

1) You can hand code it:

<?php

if ($_SESSION['UserGroupID'] != $row_WADAlogins['UserID']) {

  header("location: accessDenied.php");

  die();

}

?>

2) You should be able to pass a url parameter or set a session variable when the password is changed and check for it in an IF statement to show a message.

thanks Ray

1) how would I modify it to include Admin or would it be better to do an if else to show depending on the UserGroupID session?

2) do you mean add a session? If so, do I set the trigger to the password column? What would the value be to only trigger if the password has been changed? have attached image for reference

To include or exclude admin you can add an additional check for the admin group session variable to the IF statement.

You might have to do it manually. The trigger would probably be a comparison between the posted password vs the one saved in the database to see if they have changed.

Thanks Ray. what behaviour do I need to be using to set this up in the first instance?

I'm afraid I don't exactly know what you are referring to. What first instance? Please be a little more specific and I can try to provide direction.

sorry, what I meant was which server behaviour should I be using to get a message to show on password change as I am unsure how to make the comparison between the posted password vs the one saved in the database

I think you would do it manually with an IF statement.

if ($Recordset->getColumnVal("UserPassword") != $_POST['PasswordField']) {

  $_SESSION['PasswordChanged'] = true;

}

OK, so have got

<?php if ($row_WADAlogins['UserPassword'] != $_POST['Confirm']) {
  $_SESSION['PasswordChanged'] = true;
} ?>

and

<?php if($_SESSION["PasswordChanged"] = true ){ ?>
<span class="text-element requiredLabel" style="background: green; text-align:center;">Password successfully changed</span>
          <?php } ?>

But the message is showing all the time....

still no joy. message is constantly showing regardless of password change or not