多级注册/登录系统

Question

I want to create a multilevel register/login system with 2 types of users: admin and normal users. I have read some articles and tutorials, but I still have some questions. I know that I need to have a table with the following columns: username, password and type (0 - normal user, 1 - admin) and when a user tries to login, he will be redirected to a certain page based on the type.

Now, the process of registration for a normal user is quite straightforward, but my question is, how do you register an admin user?

Do you add a admin user directly in the database using sql? Do you create a special PHP page for this?

Like I said, I have read some tutorials but I didn't found an answer to this question.

Thanks in advance!

Answer 1

It depends on the kind of application / website you are going to code.

If you're planning on building an expanding, modular site, adding admins directly via SQL is not the right way. Then a separate page would be best, that only existing admins or operators (that would require more ranks, but in any bigger sytem, there are more than two ranks anyway) can access.

However, if you just want to test things out, adding those special accounts via SQL requires much less effort than coding a separate page only for this purpose.

Note that user / group privilege management is a critical security part, so make sure to check things on the server (--> input validating).

Added content : Depending on the size of the project and the scalability you want to achieve, you may consider separate tables for the privileges of users / groups, which could be included to your SQL statements using JOINs.