// dashboard.php

<?php
 if($adminrang>=5)
  {
    $adminPath = "../pages/admin/";

    if(isset($_GET['a']) && !empty($_GET['a']))
    {
      if(file_exists($adminPath.$_GET['a'].".php"))
      {
        include($adminPath.$_GET['a'].".php");
      }
      else {
        include($adminPath."index.php");
      }
    } else
    {
      include($adminPath."index.php");
    }
  }
  else
  {
    echo'<center><h2><p class="meldung">Sie sind nicht f�r diesen Bereich berechtigt.</p></h2></center>';
  }

//index.php

    $query2 = $db->query('SELECT id FROM user WHERE username="'.$_SESSION["username"].'"');
    while($userinfos = mysqli_fetch_array($query2))
    {
    $adminrang = $userinfos["admin"];
    $mail = $userinfos["mail"];
    }