Php user authentication to bootstrap page

hi guys

I designed a log in page using php to authenticate to differentiate the user rights. There are 3 types of user - admin, staff, and ground. This users will enter credentials into login form and will enter into home page. As each users are only allowed to access certain content, I will like to show only relevant contents to the users. So from login page (index.php) they will go into home page (home.php).

I used bootstrap to design the home page thus showing 2 rows of 3 columns. The aim for bootstrap is to allow the web application to be responsive so users can login using desktop, tablet or even mobile.

I like to filter the bootstrap columns such as admin can see all 6 columns, staff can see 5 of the columns while ground users can only see 2 of the columns. I am not sure if I can use php to filter the columns out.

Is this possible?

Thanks in advance. Sorry if I posted in wrong section.

 

Of course you can. Depending on how you fetch the user role, you can check against that before outputting anything, for instance. This is pretty much basic user rights handling.

 

Thanks. at least I see a possibility. Do you also know if there any best practice for doing so? or like any tutorial I can read and follow through to achieve that?

 

yaa, it can be done by apply condition on user type(admin,staff,ground) for all three type of user show separate column or apply conditions

 

Well, since I've no idea about how you grant the user role to the logged in user, there isn't really an easy way to say "do it like this". Normally you'd have a user-class, which would contain all the needed attributes for that user (if you're coding OOP) - if not, and you're using a procedural approach, you can still assign the userrole (pulling it from the database) to a variable or defined constant or something similar. Then you can just do something like this:

if ($userrole == 'admin') {
// show admin-stuff
}

PHP:

Normally you'd have levels - so regular user is say assinged the value 9, a moderator is assigned a value 6 and an admin is assigned a value 1 or 2 - then you can do something like this:

if ($userrole >= 6) {
//show something here, for both moderators and admins
}

PHP:

This would be one way

 

Granted, that works for the menu, but unless you're also checking the content-pages for the correct credentials, all that does is prevent a user having direct access to sub-pages - and in this particular case, as I understood it, there's not really a menu involved - it's just showing content based on what access the user have (or, currently, just showing content, if I get the OP's question). Granted, the principle is the same.

 

Thanks Guys. I will try it soon. Anyway if I use the If condition for the different user groups, I will duplicate the codes as many times as the user groups I have right? just that within each duplication, there will be difference in the section to be shown, am I right?

 

As I mentioned, you could do a sliding access grant - if you use numerical values for the roles, and then give access for anyone above (or below) that given limit - that way you can do fewer checks. But yes, you can of course just duplicate the code for each content section, and change the values.

 

yes in this way you can solve your problem,as you thinking to do it, by applying condition on different user

 

While I probably wouldn't be stepping in the steaming pile of developer ineptitude known as bootcrap and tracking it all over a website, I have to wonder just what the blue blazes does logic functionality have to do with presentation?

Rule #1, if you can't make something like login work with just plain HTML as if CSS and JS never even existed, you shouldn't be trying to write a login / user auth.

You might want to do yourself a favor, and find a stick to scrape that off with.

 

I think its more of a ACL now, not really log in or user authentication. I do not mind if someone can share with me what is the best practice for user authentication using PHP.

 

Depends on how fast you want that done. User authentication with PHP can be handled quite fast and efficiently.