Show Logged in Users?

[JonnyUK]

Hello,

First of all, thank you very much for your script, it was exactly what I was looking for :)

Secondly, is it possible to show me which users are currently logged in?

Thanks,

[Nilpo]

Hi, JonnyUK!

It is possible to add that functionality, but most log in systems leave it out because of the inherent dangers it exposes. Whenever you show logged in users, you give attackers a clear list of which user accounts have active sessions. For that reason, I won't post working code here for others to come along and copy/paste.

If you decide you would like to add this feature, the easiest way is to have your sessions save to a MySQL database. You can do this using PHP's session_set_save_handler function. With the sessions stored in a db table, its easy to loop over each of the records and parse out the logged in user name.

I would suggest having this information only available to logged in users with admin/moderator rights and not for everybody.

[JonnyUK]

Thanks, is it also possible to have user access levels for each page?

[Nilpo]

Sure. You would need to add a field to the database to store the user level. Then on a given page, you would need to check that the user level is above a certain level. You can add a field like this.

ALTER TABLE users ADD userlevel TINYINT(2);

Then at the top of each page you could check against the required userlevel.

if(empty($_SESSION['user']) || $_SESSION['user']['userlevel'] < 1) {

In this case, the required userlevel is 1 or higher.

Also, going back to your first question, please see memberlist.php.