rendered paste body<?php/** * @author Bob Sacamano * @copyright 2007 */ class priviledge{ $userID; $dbLink; $priviledgeID; $priviledgeName; $priviledgeLevel; public function __construct($userID, $link) { $this->userID = $userID; $this->dbLink = $link; } public function getPriviledges() { $sql = "SELECT prvilegeID, privilegeTypeID, privilegeName FROM soccerweb.priviledges INNER JOIN privileges.privilegeTypeID = privilegeType.privilegeTypeID WHERE priviledges.userID = '" . $this->userID . "' "; if(!$result = mysql_query($sql, $this->dbLink)) { //user has no priviledges set return false; } //Privileges placeholder array $userPrivileges = array(); while($rs = mysql_fetch_assoc($assoc)) { array_push($userPrivileges, $rs); } //You should set $_SESSION['user']['privileges'] to this. $_SESSION['user']['privileges'] = $userPrivileges; //Now, you can persist the privileges across the site. //Return an associative array with all privileges to a specific User return $userPrivileges; } /* wtf...? */ //set the priviledge level for the current user to $level public function setPriviledgeLevel($level) { $privID; $privName; $sql = "SELECT priviledgeTypeID, priviledgeTypeName, FROM soccerweb.priviledge_types WHERE priviledge_types.privilidgeLevel = '" . $level . "' "; if(!$result = mysql_query($sql, $this->dbLink)) { //trying to set a level that doesn't exist return false; } $rs = mysql_fetch_assoc($result); $privID = $rs['priviledgeTypeID']; $privName = $rs['priviledgeTypeName']; //TODO: update InsertDate $sql = "UPDATE soccerweb.priviledges SET priviledges.priviledgeTypeID = '" . $privID . "' WHERE priviledges.userID = '" . $this->userID . "' "; if(!$result = mysql_query($sql, $this->dbLink)) { //failed to update return false; } $this->priviledgeID = $privID; $this->priviledgeLevel = $level; $this->priviledgeName = $privName; return true; } }//end class?>