How to allow ADMIN only access for a specific PHP page?

Question

I have a table ‘users’ in MySQL with a ‘role’ column. I only want admins to access users.php (show all users of the system). How do I do this?

In the users.php file, I have:

f ($_SESSION['role'] != 'admin'){
echo 'acess denied';
exit;
}

I’m getting: Warning: Undefined array key "role" in C:\xampp\htdocs\info2180-project2\users.php on line 4
acess denied

https://code.sololearn.com/wZS49vxskyjK/?ref=app

Answer 1

Using the session is a good idea, but you have to actually set the 'role' key in the session at some point. Most likely a good opportunity to do that, is when the user has just logged in.

https://www.w3schools.com/php/php_sessions.asp