Hello,
I need some help with my script. I’m trying to make a database for products to be displayed. Thus far, it works but I wan’t it to not allow non-members to see the price column - only members should be able to see it! I have successfully made it so a non-member cannot see the page intirely but how can I make it so he can only not see the price? Many thanks. Here’s my code (srry for the mess):
//If showprice is 0, I want $price to be “” or its column to disappear!
<?
session_start();
if (!isset($_SESSION[‘user_is_logged_in’]) || $_SESSION[‘user_is_logged_in’] !== true) {
$showprice = 0;
} ?>
<!DOCTYPE HTML PUBLIC “-//W3C//DTD HTML 4.01 Transitional//EN”
“http://www.w3.org/TR/html4/loose.dtd”>
<html>
<head>
<title>Untitled Document</title>
<meta http-equiv=“Content-Type” content=“text/html; charset=iso-8859-1”>
</head>
<body>
<?
//Logging into the database
$dbhost = “localhost”; // Database Server
$dbname = “test”; // Database Name
$dbuname = “***”; // Database User
$dbpass = “***”; // Database Pass
//Selecting the database
function dbconnect()
{
global $dbhost, $dbuname, $dbpass, $dbname;
mysql_connect($dbhost, $dbuname, $dbpass);
@mysql_select_db($dbname) or die (“Unable to select database !”);
}
function query_db($query)
{
dbconnect();
return @mysql_query($query);
}
//The rest
if ($page == del) { //Don’t mind this, I’ll disable deleting stuff later
$mysql_link = mysql_connect($dbhost, $dbuname, $dbpass);
$sql = “DELETE FROM products WHERE id = ‘$del’”;
mysql_db_query($dbname, $sql, $mysql_link);
echo “<font color=$fontcolor size=2 face=verdana><b><center><i><p>Product DELETED</i></center></b></font>”;
}
else {
dbconnect();
$data = query_db(“SELECT * FROM products”);
if (!$data) { echo( mysql_error()); }
else {
ECHO"<P><center><table bgcolor=RED cellspacing=2 cellpading=2><tr><th bgcolor=white>ID</th><th bgcolor=white>NAME</th><th bgcolor=white>PICTURE</th><th bgcolor=white>PRICE</th><th bgcolor=white>CODE</th><th bgcolor=white>DESCRIPTION</th><th bgcolor=white></th><th bgcolor=white></th></tr>";
while ($row = mysql_fetch_array($data)) {
$id = $row["id"];
$name = $row["name"];
$image = $row["image"];
$price = $row["price"];
$code = $row["code"];
$description = $row["description"];
//If user is not logged on
echo "<tr><th bgcolor=white>$id</th><th bgcolor=white>$name</th><th bgcolor=white><img src=$image></th>
<th bgcolor=white>$price</th>
<th bgcolor=white>$code</th><th bgcolor=white>$description</th>
<th bgcolor=white>EDIT</th><th bgcolor=yellow><a href=inserturlhere>DELETE</a></th></tr>";
}
echo"</table></center>";
}}
?>
</body>
</html>