php script to redirect each user after login

Question

I have set up a php script that will redirect users to a particular webpage/ php page after logging in. But I want to direct each user to a different page.

For example each customer that logs on has their own and unique homepage.

If have this section in my checklogin.php and I am assuming it is something to do with this. I have only recently started learning php. Thank you.

<?php
    session_start();
    $username = mysql_real_escape_string($_POST['username']);
    $password = mysql_real_escape_string($_POST['password']);
    mysql_connect("localhost", "root","root") or die(mysql_error()); //Connect to server
    mysql_select_db("first_db") or die("Cannot connect to database"); //Connect to database
    $query = mysql_query("SELECT * from users WHERE username='$username'"); //Query the users table if there are matching rows equal to $username
    $exists = mysql_num_rows($query); //Checks if username exists
    $table_users = "";
    $table_password = "";
    if($exists > 0) //IF there are no returning rows or no existing username
    {
        while($row = mysql_fetch_assoc($query)) //display all rows from query
        {
            $table_users = $row['username']; // the first username row is passed on to $table_users, and so on until the query is finished
            $table_password = $row['password']; // the first password row is passed on to $table_users, and so on until the query is finished
        }
        if(($username == $table_users) && ($password == $table_password)) // checks if there are any matching fields
        {
                if($password == $table_password)
                {
                    $_SESSION['user'] = $username; //set the username in a session. This serves as a global variable
                    header("location: home.php"); // redirects the user to the authenticated home page
                }

        }
        else
        {
            Print '<script>alert("Incorrect Password!");</script>'; //Prompts the user
            Print '<script>window.location.assign("login.php");</script>'; // redirects to login.php
        }
    }
    else
    {
        Print '<script>alert("Incorrect Username!");</script>'; //Prompts the user
        Print '<script>window.location.assign("login.php");</script>'; // redirects to login.php
    }
?>

Answer 1

You can add a column on your database: "level" and doing some IF's you can redirect them to the page that you want.

EDIT:

Edit your code where you have:

 if($password == $table_password)
                {
                    $_SESSION['user'] = $username; //set the username in a session. This serves as a global variable
                    header("location: home.php"); // redirects the user to the authenticated home page
                }

Change to:

 if($password == $table_password)
                {
                    $_SESSION['user'] = $username; //set the username in a session. This serves as a global variable
                    header("location: home.php?user=".$username); // redirects the user to the authenticated home page
                }

And on home.php write:

<?php

$username = $_GET['user'];

echo "I'm on page home with user:" , $username;

?>

Now you can do whatever you want, you have an dynamic webpage, you can "play" with database create new columns and query on home.php using WHERE username=$username

Answer 2

I assume you have information about them in the database that you want to show.

Now you can just direct them to the url with a unique ID of the account(that should also be stored in the database) e.g: index.php?id=$account_id,

Get the ID from the url(somewhat like: $_GET['id']) and run a query e.g: select * from profile where id=$id

NOTE{

I am using the variable $id here instead of $_GET['id'] because of the possible mysql injection.

}

After that you show the accounts profile information on the page and because of the &id=$account_id(where $account_id is the ID of the person logged in), it's their own page.

EDIT:

To redirect them to their own page you have to get the ID from the database with a query:

select id from accounts where username = $username;

This works if the username is unique.

You can get the id in a seperate variable yourself.

After that you can use the ID to direct them to their own page like this:

header("location: home.php?id=".$id);

EDIT2:(Based on the comments)

    while($row = mysql_fetch_assoc($query)) //display all rows from query
    {
        $table_users = $row['username']; // the first username row is passed on to $table_users, and so on until the query is finished
        $table_password = $row['password']; // the first password row is passed on to $table_users, and so on until the query is finished
        $table_id = $row['id'];

    }
    if(($username == $table_users) && ($password == $table_password)) // checks if there are any matching fields
    {
            if($password == $table_password)
            {
                $_SESSION['user'] = $username; //set the username in a session. This serves as a global variable
                header("location: home.php?id=".$table_id); // redirects the user to the authenticated home page
            }

    }

This will redirect you to home.php everytime. The only difference is, the ?id= part is different for every user. Now on home.php:"

$id=$_GET['id'];
//Some mysql injection prevention.
$query = mysql_query("SELECT * from profile WHERE id='$id'");

This means you should store the profile preferences of every user in the database and get it out again at the home page.

Answer 3

If you want to dynamically redirect the user to another webpage, then use javascript. PHP "only" send content of a specific file. You could also just use the same page for all users, but change it's content. The most trivial case I can think of, is remove all content of - say - user.php and load the html from a database, or another file according to the user.

Answer 4

I think you can redirect users to the same page (ThisUserProfile or smth like that), but generate content for this page in dependence of the user`s id. But this means you need to add more information into the table where user's information is stored.