PHP限制访问网页

Question

I have several folders within my web server. Each folder contains php / html files. In total there is around 40 files.

Using php I can determine the identity of the user who is currently logged in.

Is it possible to allow users to only access specific pages, based on who they are logged in as ?

I was wondering if .htaccess would allow this ? Or if there is a better way ?

I don't really want to start having to create a user / password authentication script.

Thanks

Answer 1

Using sessions, you can create user levels and restrict access to various areas by assigning user levels to SESSION variables. Presumably, since, quote Using php I can determine the identity of the user who is currently logged in., you have the ability to set up session variables. I believe this is known as role based access control - In it's very simplest form

if ($_SESSION['user_level'] == "Administrator") {
# do something
}

This article may help further