Comparing $_Get Variable to an array? - Advice needed too...
Posted: Tue Jan 20, 2009 1:20 am
Scenario:
A user logs in and has a list of "albums" he can choose from. Once the user clicks on a link to the album, it sends a $_GET # to an editalbum.php page which pulls up the appropriate album page.
To ensure that the user does not go to a page that is not his own, I need to compare the $_GET variable with a query from mysql that shows which albumids belong to that user.
E.g.
User 1 has album ids, 1, 3, 5.
User 2 has album ids 2, 4.
So if User 1 tries to go to the page with $_GET variable equal to 3, he can access the page as it is compared to the values 1,3,5. However, if he tries to get in with $_GET variable equal to 4, he is redirected to a "cannot access" page.
How would you go about doing this?
Thank you in advance.
A user logs in and has a list of "albums" he can choose from. Once the user clicks on a link to the album, it sends a $_GET # to an editalbum.php page which pulls up the appropriate album page.
To ensure that the user does not go to a page that is not his own, I need to compare the $_GET variable with a query from mysql that shows which albumids belong to that user.
E.g.
User 1 has album ids, 1, 3, 5.
User 2 has album ids 2, 4.
So if User 1 tries to go to the page with $_GET variable equal to 3, he can access the page as it is compared to the values 1,3,5. However, if he tries to get in with $_GET variable equal to 4, he is redirected to a "cannot access" page.
How would you go about doing this?
Thank you in advance.