Question

Im trying to understand how to build a user registration with PHP and MySQL.

I have built a form that the user can fill out and the information is then stored in my table.

error_reporting(E_ALL);
include_once ('connection.php');

// Required field names
$required = array('firstname', 'lastname', 'email', 'password', 'accounttype');

// Loop over field names, make sure each one exists and is not empty
$error = false;
foreach($required as $field) {
  if (empty($_POST[$field])) {
    $error = true;
  }
}

if ($error) {
  echo "All fields are required.";
} else {
    $firstname = $_POST['firstname'];
    $lastname = $_POST['lastname'];
    $email = $_POST['email'];
    $password = md5($_POST['password']);
    $accounttype = $_POST['accounttype'];

    $query = "INSERT INTO users(firstname,lastname,email,password,accounttype) VALUES (:firstname,:lastname,:email,:password,:accounttype)";
      $stmt = $dbh->prepare($query);
      $stmt->bindParam(':firstname', $firstname);
      $stmt->bindParam(':lastname', $lastname);
      $stmt->bindParam(':email', $email);
      $stmt->bindParam(':password', $password);
      $stmt->bindParam(':accounttype', $accounttype);
      $stmt->execute();

    if(!$query){
        echo 'Whoops, something went wrong!';
    } else {
        echo $accounttype;
        if($accounttype == '1'){
            header ('Location: /england/dashboard.php');
            exit;
        }; 
        if($accounttype == '2'){            
            header ('Location: /ireland/dashboard.php');
            exit;
        };
    };
};

When the users completes the form they’re either reidrected to a different page based on their account type.

On those pages I need to somehow check to see if the user is of accounttype ‘X’. So if they land in

header ('Location: /ireland/dashboard.php');

their account type value will be equal to 2, so only people with an account type of 2 can visit the above mentioned.

I’ve read about session variables, but where do I set these?

Answer 1

 session_start(); // this at top of page
 if($accounttype == '1'){
        $_SESSION['accountType'] = 1; // or $accounttype
        header ('Location: /england/dashboard.php');
        exit();
    }; 
    if($accounttype == '2'){ 
        $_SESSION['accountType'] = 2; // or $accounttype         
        header ('Location: /ireland/dashboard.php');
        exit();
    };

In england/dashboard.php

session_start();
if($_SESSION['accountType'] !== 1) header('location: login.php');

In ireland/dashboard.php

session_start();    
if($_SESSION['accountType'] !== 2) header('location: login.php');