PHP backend for Admin?

Nyoman Bali,

There doesn't seem to be any videos that explain how to create the Admin portion of the site. You can apply the tutorials and knowledge that Team Treehouse offers for creating a PHP site that is database driven to do the following:

1. At a high level, you would want to create a database table that will hold basic information for your users. For example, you may create a mysql database table called "users" with individual fields that hold the username, passwords, first name, last name, email, etc.
   
2. You can either create a field in the "users" table to control certain admin rights. For example, you could create a field called "level" that can be used to store an arbitrary value of your choice to determine certain access on the site.
3. You want to create a form that will post to a php page that that will $_GET the username and password posted in the form, run a query against your database "select username, password from users where username=post variable and password=post variable". There is a video on Team Treehouse that teaches you how to securely pass GET variables into a query. I don't want to write the code on the forum and teach bad practice. If there is a match in the database then you can take what is stored in the "level" field and set it to your session.
4. Example of session. $_SESSION['level'] = "full-admin-rights"; . Through out your code, you will be able to write "If Statements" and conditions that say If($_SESSION['level'] == "full-admin-rights") then show whatever logic you want for those type of users.

If you haven't already, watch these videos: http://teamtreehouse.com/library/using-php-with-mysql

For more info on Sessions: http://www.php.net/manual/en/reserved.variables.session.php

For more info on Securing Variables in a form post to prevent sql injection: http://teamtreehouse.com/library/using-php-with-mysql/filtering-input-for-queries/understanding-sql-injections http://teamtreehouse.com/library/using-php-with-mysql/filtering-input-for-queries/preparing-sql-statements

For more info on securing passwords in your database, you want to encrypt passwords: http://www.php.net/manual/en/faq.passwords.php

Thanks Roselli for your quick respond.

Please consider my proposal. I am as your student, and other students as well, for sure really need those tutorials.