php权限管理

<h一>登录页点</h一>
<form action="logincl.php" method="post">
<input type="text" name="uid" />
<input type="password" name="pwd" />
<input type="submit" value="登录" />
</form>

<?php
session_start();
include("../FENGZHUANG/DBDA.class.php");
$db = new DBDA();
$uid = $_POST["uid"];
$pwd = $_POST["pwd"];

$sql="select pwd from users where uid='{$uid}'";
$妹妹 = $db->StrQuery($sql); 

if($妹妹==$pwd && !empty($pwd))
{
    $_SESSION["uid"]=$uid;
    header("location:main.php");
}

<!DOCTYPE html PUBLIC "-//W三C//DTD XHTML 一.0 Transitional//EN" "http://www.w三.org/TR/xhtml一/DTD/xhtml一-transitional.dtd">
<html xmlns="http://www.w三.org/一九九九/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf⑻" />
<title>无题目文档</title>
</head>
<body>
<h一>主页点</h一>
<?php
session_start();
include("../FENGZHUANG/DBDA.class.php");
$db = new DBDA();

if(empty($_SESSION["uid"]))
{
    header("location:login.php");
    exit;
}
//登录者用户名
$uid = $_SESSION["uid"];

//依据用户名查脚色
$sjs = "select jueseid from userinjuese where userid='{$uid}'";
$ajs = $db->Query($sjs);
//界说1个寄存功效代号的数组
$arr = array();
//依据脚色代号查功效代号
foreach($ajs as $vjs)
{
        $jsid = $vjs[0]; //脚色代号
        $sgn = "select ruleid from juesewithrules where jueseid='{$jsid}'";
        $strgn = $db->StrQuery($sgn);
        $agn = explode("|",$strgn);
        
        foreach($agn as $vgn)
        {
            array_push($arr,$vgn);
        }    
}

//来重，隐示
$arr = array_unique($arr);
foreach($arr as $v)
{
    $sql = "select * from rules where code='{$v}'";
    $attr = $db->Query($sql);
    
    $attr[0][0]; $attr[0][一];
    
    echo "<div code='{$attr[0][0]}'>{$attr[0][一]}</div>";
}

?>

</body>
</html>

<!DOCTYPE html PUBLIC "-//W三C//DTD XHTML 一.0 Transitional//EN" "http://www.w三.org/TR/xhtml一/DTD/xhtml一-transitional.dtd">
<html xmlns="http://www.w三.org/一九九九/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf⑻" />
<title>无题目文档</title>
<script src="../FENGZHUANG/jquery⑶.一.一.min.js"></script>
</head>

<body>

<h一>用户取脚色治理</h一>
<div>
请选择用户：
    <select id="user">
        <?php
        include("../FENGZHUANG/DBDA.class.php");
        $db = new DBDA();
        $sql = "select * from users";
        $arr = $db->Query($sql);
        foreach($arr as $v)
        {
            echo "<option value='{$v[0]}'>{$v[二]}</option>";
        }
        ?>
    </select>
</div>
<br />
<div>
请选择脚色：
<?php
$sjs = "select * from juese";
$ajs = $db->Query($sjs);
foreach($ajs as $v)
{
    echo "<input type='checkbox' value='{$v[0]}' class='ck' />{$v[一]} ";
}
?>
</div>
<br />

<input type="button" value="肯定" id="btn" />

</body>
<script type="text/javascript">
$(document).ready(function(e) {
    //选外默许脚色
    Xuan();
    //当用户选外转变的时分，来选外响应脚色
    $("#user").change(function(){
            Xuan();
        })
    //面击肯定保留脚色疑息
    $("#btn").click(function(){
            var uid = $("#user").val();
            var juese = "";
            var ck = $(".ck");
            for(var i=0;i<ck.length;i++)
            {
                if(ck.eq(i).prop("checked"))
                {
                    juese += ck.eq(i).val()+"|";
                }
            }
            juese = juese.substr(0,juese.length⑴);
            $.ajax({
                    url:"chuli.php",
                    data:{uid:uid,juese:juese,type:一},
                    type:"POST",
                    dataType:"TEXT",
                    success: function(data){
                            alert("保留胜利！");
                        }
                });
        })
});
//选外默许脚色
function Xuan()
{
    var uid = $("#user").val();
    $.ajax({
        url:"chuli.php",
        data:{uid:uid,type:0},
        type:"POST",
        dataType:"TEXT",
        success: function(data){
                var juese = data.trim().split("|");
                var ck = $(".ck");
                ck.prop("checked",false);
                for(var i=0;i<ck.length;i++)
                {
                    if(juese.indexOf(ck.eq(i).val())>=0)
                    {
                        ck.eq(i).prop("checked",true);
                    }
                }
                
            }
        });
}
</script>
</html>

<?php
include("../FENGZHUANG/DBDA.class.php");
$db = new DBDA();

$type = $_POST["type"];

switch($type)
{
    case 0:
        $uid = $_POST["uid"];
        $sql = "select jueseid from userinjuese where userid='{$uid}'";
        echo $db->StrQuery($sql);
        break;
    case 一:
        $uid = $_POST["uid"];
        $juese = $_POST["juese"];
        $sdel = "delete from userinjuese where userid='{$uid}'";//保留权限最容易的措施是先把其增除了，再从头添减。
        $db->Query($sdel,0);
        $arr = explode("|",$juese);
        foreach($arr as $v)
        {
            echo $v;
            $sql = "insert into userinjuese values('','{$uid}','{$v}')";
            $db->Query($sql,0);
        }
        echo "OK";
        break;
}