multi level access - security

[[email protected]]

Within the database you should have permissions set on the users table. You could easily create specific columns and give them a Y or N depending on the rights.

oh, yes i do understand that but on the display interface i dont want to work it that way. Let me be alittle more specific.

Say i have 2 files general.php and non_generic.php, after the login authentication i wish to display general.php to normal users and non_generic.php for admin, i can achieve this with an if condition and a redirection header, but if i go ahead and type in the url the other file name it gives access to it. I have a session.php file included on top of every page which checks if the user who wants to view the page is logged in or not and there i do try and check if the session id i stored on the login check page still satisfies but it doesnt work.

i hope you can provide me with an elaborated solution