权限管理

<form action="loginchuli.php" method="post">
	<div>用户名：<input type="text" name="uid" /></div>
    <div>密码：<input type="text" name="pwd" /></div>
    <input type="submit" value="登录" />
</form>

登录处理;

<?php
session_start();
$uid = $_POST["uid"];
$pwd = $_POST["pwd"];

include("../DBDA.php");
$db = new DBDA();

$sql = "select count(*) from Users where Uid='{$uid}' and Pwd = '{$pwd}'";

$z = $db->StrQuery($sql);

if($z == 1)
{
	$_SESSION["uid"] = $uid;
	header("location:main.php");
}
else
{
	header("location:login.php");
}

主界面：

<head>
<?php
session_start();

if(empty($_SESSION["uid"]))
{
	header("location:login.php");
	exit;
}
$uid = $_SESSION["uid"];

include("../DBDA.php");
$db = new DBDA();
?>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>无标题文档</title>
<style type="text/css">
*{ margin:0px auto; padding:0px}
#menu{
	100%;
	height:40px;
	}
.cd{
	100px;
	height:40px;
	background-color:#60C;
	color:white;
	font-size:18px;
	text-align:center;
	line-height:40px;
	vertical-align:middle;
	float:left;
	}
.cd:hover{
	
	background-color:#F33;
	cursor:pointer;
	
	}
</style>
</head>

<body>
<br />
<br />
<center><h1>主页面</h1></center>
<br />
<a href="login.php">退出 <?php echo $uid; ?></a>
<br />
<br />
<br />
<div id="menu">
	<div class="cd">权限管理</div>
    
    <?php
	
	//根据用户名找到所对应的角色代号
	$sjs = "select JueSeId from UserInJueSe where UserId ='{$uid}' ";
	
	$ajs = $db->Query($sjs);
	
	//根据角色代号找到对应的功能
	$all = array();//存储该用户所有的功能代号
	
	foreach($ajs as $vjs)
	{
		$sgn = "select RuleId from JueSeWithRules where JueSeId ='{$vjs[0]}'";
		$agn = $db->Query($sgn);
		
		foreach($agn as $vgn)
		{
		    array_push($all,$vgn[0]);	
		}
	}
	
	$all = array_unique($all);
	
	//显示菜单
	foreach($all as $vall)
	{
		$sn = "select Name from Rules where Code = '{$vall}'";
		$name = $db->StrQuery($sn);
		
		echo "<div class='cd'>{$name}</div>";
	}
	
	?>
    
</div>


</body>

添加角色：

<body>
<h1>权限管理</h1>

<div>请选择用户：
	<select id="user">
    	<?php
		include("../DBDA.php");
		$db = new DBDA();
		
		$sql = "select * from Users";
		$attr = $db->Query($sql);
		
		foreach($attr as $v)
		{
			echo "<option value='{$v[0]}'>{$v[2]}</option>";
		}
		
		?>
    </select>
</div>
<br />
<div>
	<div>请选择角色：</div>  
    <br />
    <div>
   	<?php
		$sqljs = "select * from JueSe";
		$attrjs = $db->Query($sqljs);
		
		foreach($attrjs as $v)
		{
			echo "<input class='js' type='checkbox' value='{$v[0]}' /> {$v[1]}  ";
		}
	?>
    </div>  
</div>
<br />
<div>
	<input type="button" value="确定" id="btn" />
</div>
</body>
<script type="text/javascript">
$(document).ready(function(e) {
    
	ShowJueSe();
	
	$("#user").change(function(){
		
		ShowJueSe();
		
		})
		
	function ShowJueSe()
	{
		var uid = $("#user").val();
		$.ajax({
			url:"seljuese.php",
			data:{uid:uid},
			type:"POST",
			dataType:"TEXT",
			success: function(data){
				
				var shuju = data.split("|");
				
				var ck = $(".js");
				ck.prop("checked",false);
				
				for(var i=0;i<ck.length;i++)
				{
					var v = ck.eq(i).val();
					
					if($.inArray(v,shuju)>=0)
					{
						ck.eq(i).prop("checked",true);
					}

				}
				
				}
			
			
			});
		
	}
	
	$("#btn").click(function(){
		
		var uid = $("#user").val();
		
		var ck = $(".js");
		var str = "";
		
		for(var i=0;i<ck.length;i++)
		{
			if(ck.eq(i).prop("checked"))
			{
				str = str+ck.eq(i).val()+"|";
			}
		}
		
		str = str.substr(0,str.length-1);
		
		$.ajax({
			url:"add.php",
			data:{uid:uid,juese:str},
			type:"POST",
			dataType:"TEXT",
			success: function(data){
				
				if(data.trim()=="OK")
				{
					alert("添加成功！");
				}
				else
				{
					alert("添加失败！");
				}
			}
			
			});
		
		
		})
	
});
</script>

<?php
include("../DBDA.php");
$db = new DBDA();

$uid = $_POST["uid"];
$js = $_POST["juese"];

$juse = explode("|",$js);

$bs = true;

//清空该用户具有的所有角色，先清空，再添加
$sqldel = "delete from UserInJueSe where UserId = '{$uid}' ";
if(!$db->Query($sqldel,0))
{
	$bs = $bs && false;
}

//添加角色信息
foreach($juse as $v)
{
	$sql = "insert into UserInJueSe values('','{$uid}','{$v}')";
	if(!$db->Query($sql,0))
	{
		$bs = $bs && false;
	}
}

if($bs)
{
	echo "OK";
}
else
{
	echo "NO";
}

<?php
include("../DBDA.php");
$db = new DBDA();

$uid = $_POST["uid"];

$sql = "select JueSeId from UserInJueSe where UserId = '{$uid}'";

echo $db->StrQuery($sql);