insecure-php-application-fo.../user.php

47 lines
1.1 KiB
PHP
Raw Normal View History

2019-11-14 08:15:43 +01:00
<?php
require 'includes/common.php';
if (!isset($_SESSION['id'])) {
header('Location: ./');
exit;
}
$con = connect();
$sessionId = $_SESSION['id'];
$getUser = mysqli_query($con, 'SELECT * FROM users WHERE id = ' . $sessionId);
$user = mysqli_fetch_assoc($getUser);
if (empty($user)) {
session_destroy();
header('Location: ./');
exit;
}
?>
<!DOCTYPE html>
<html lang="en">
<head>
<?php require 'includes/head.php'; ?>
</head>
<body>
<div class="container">
<h1>Hello, <?php echo $user['username']; ?></h1>
<?php
if ($user['is_admin'] == 1) {
?>
<div class="alert alert-info">
You are an admin!
</div>
<?php
}
2019-11-14 09:12:39 +01:00
else {
?>
<div class="alert alert-warning">
You suck!
</div>
<?php
}
2019-11-14 08:15:43 +01:00
?>
</div>
</body>
</html>