admin_or_user.php

酒店管理系统

<?
if (!isset($_SESSION)) {
  session_start();
}

// *** Restrict Access To Page: Grant or deny access to this page
function isAuthorized($strUsers, $strGroups, $UserName, $UserGroup) 
{ 
  // For security, start by assuming the visitor is NOT authorized. 
  $isValid = False; 

  // When a visitor has logged into this site, the Session variable MM_Username set equal to their username. 
  // Therefore, we know that a user is NOT logged in if that Session variable is blank. 
  if (!empty($UserName)) { 
    // Besides being logged in, you may restrict access to only certain users based on an ID established when they login. 
    // Parse the strings into arrays. 
    $arrUsers = Explode(",", $strUsers); 
    $arrGroups = Explode(",", $strGroups); 
    if (in_array($UserName, $arrUsers)) { 
      $isValid = true; 
    } 
    // Or, you may restrict access to only certain users based on their username. 
    if (in_array($UserGroup, $arrGroups)) { 
      $isValid = true; 
    } 
   // if (($strUsers == "") && false) { 
     // $isValid = true; 
   // } 
  } 
  return $isValid; 
}

function isadmin()
  { $admin = "admin";
    $isadmin=(isset($_SESSION['MM_Username'])&&isAuthorized("",$admin, $_SESSION['MM_Username'], $_SESSION['MM_Userlevel']));
    return $isadmin;
   }

function isuser()
  {  $user="user";
    $isuser=(isset($_SESSION['MM_Username'])&&isAuthorized("",$user, $_SESSION['MM_Username'], $_SESSION['MM_Userlevel']));
    return $isuser;
   }



?>