Page 1 of 1

Comparing $_Get Variable to an array? - Advice needed too...

Posted: Tue Jan 20, 2009 1:20 am
by xpiamchris
Scenario:
A user logs in and has a list of "albums" he can choose from. Once the user clicks on a link to the album, it sends a $_GET # to an editalbum.php page which pulls up the appropriate album page.

To ensure that the user does not go to a page that is not his own, I need to compare the $_GET variable with a query from mysql that shows which albumids belong to that user.

E.g.
User 1 has album ids, 1, 3, 5.
User 2 has album ids 2, 4.

So if User 1 tries to go to the page with $_GET variable equal to 3, he can access the page as it is compared to the values 1,3,5. However, if he tries to get in with $_GET variable equal to 4, he is redirected to a "cannot access" page.

How would you go about doing this?

Thank you in advance.

Re: Comparing $_Get Variable to an array? - Advice needed too...

Posted: Tue Jan 20, 2009 1:53 am
by Apollo
Exactly what is the difficulty? Do you know how to extract (with SQL) the list of albums for the particular user?

Or are you looking for the in_array function?

Re: Comparing $_Get Variable to an array? - Advice needed too...

Posted: Tue Jan 20, 2009 2:23 am
by requinix
And to throw in another idea, it is possible to have multiple conditions in a SQL query. Like a condition that the user ID is X AND the album number is Y.