<? 



include"master_inc.php";



$username_from_cookie = $_COOKIE[$cookiename]; //retrieve contents of cookie 



if($permission_level==''){



$sql="SELECT * FROM users WHERE username='$username_from_cookie'";



}else{



$threshold = $permission_level-1;



$sql="SELECT * FROM users WHERE username='$username_from_cookie' AND permissions>'$threshold'";



}



$result=mysqli_query($db,$sql);



// mysqli_num_row is counting table rows



$count=mysqli_num_rows($result);



// If result matches $myusername and $mypassword, table row must be 1 row



if($count==0){



{



header("location:login.php");



}



}



$query = "SELECT * FROM users WHERE `username`='$username_from_cookie'"; 



$numresults=mysqli_query($db, $query);

$numrows=mysqli_num_rows($numresults); 



// get results

$result = mysqli_query($query) or die("Couldn't execute query");



// now you can display the results returned

while ($row= mysqli_fetch_array($result)) {



$permissions= $row["permissions"];



}



//end Chris Carr Auth Check Header



$username = $username_from_cookie;



?>