Untitled

<?php
session_start();
include 'connection.php';

	if(isset($_POST["username"]) and isset($_POST["password"]))
	{

		$myusername=mysqli_real_escape_string($con,$_POST["username"]);
		$mypassword=mysqli_real_escape_string($con,$_POST["password"]);
		$sql="SELECT * from login WHERE username='$myusername' AND password='$mypassword'";
		$res=mysqli_query($con,$sql);
		if(mysqli_num_rows($res)==1)
		{

	$query=$con->query("SELECT admin FROM login WHERE username='$myusername'");
	$array =array();

	if (mysqli_num_rows($query))
	{
		$rows=mysqli_fetch_array($query);
		$admin=(($rows['admin']));
		if($admin)
		{
			$_SESSION['admin']=true;
			$_SESSION['u-name'] = $myusername;
		 header("location:../happy_card/systemManegerInterface.php");
			exit();
		}
		else
		{
			$_SESSION['u-name'] = $myusername;
			$_SESSION['permission']=true;
		}
	}


		}
		else
		{

			header("Location: home1.php?msg=4");

		}

	}

	mysqli_close($con);
 ?>

<!DOCTYPE html>
<html dir="rtl">
<head>

    <meta charset="utf-8" />
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.1.1/jquery.min.js"></script>
<script>

function open()
{
	 var show = document.createElement("div");
	 show.setAttribute("id", "show");
	 $(document).ready(function() {
    $("li").click(function() {
	 $("#show").text($(this).text());
	}

}
}
</script>
<?php


if(!isset($_SESSION['permission']))
{
    session_destroy();
	echo "<script>window.location.href = '../happy_card/home1.php'</script>";
	exit();
}

if(isset ($_POST['logout']))
{
	session_destroy();
	echo "<script>window.location.href = '../happy_card/home1.php'</script>";
	exit();
}

?>
	<title>HAPPY CARD</title>
<link rel="stylesheet" type="text/css" href="menu.css" />
<meta charset="utf=8">
<link rel="stylesheet" type="text/css" href="dynamicmenu.css" />
<link rel="stylesheet" type="text/css" href="cards.css" />
</head>
<?php
function loop_array($array=array() , $parent_id = 0)
{

	if(!empty($array[$parent_id]))
	{

		echo '<ul class="cssmenu" style="color:#fff ;cursor: pointer;">';
		foreach ($array[$parent_id] as $items)
		{
		echo '<li>';
		echo '<a href=pages.php?pagename='.$items['link'].' >';
		echo $items['name'];
		echo '</a>';
		loop_array($array, $items['id']);
		echo '</li>';
		}
		echo '</ul>';
	}
}
function display_menus()
{
	include 'connection.php';
	$query=$con->query("SELECT * FROM menu");
	$array =array();

	if (mysqli_num_rows($query))
	{
		while($rows=mysqli_fetch_array($query))
		{
			$array[$rows['parent_id']][]=$rows;
		}
	}
	loop_array($array);
}


?>

<body >
	<div class="holder">
			<div class="header">
				<div class="logo">
				</div>
				<?echo "ברוך הבא ".$_SESSION['u-name']."</br>";?>
				<form action=<?php echo $_SERVER["PHP_SELF"];?> method="post" enctype="multipart/form-data">
		<input type="submit" name="logout" value="התנתק" action=<?php echo $_SERVER["PHP_SELF"]?>;>
	</form>
			</div>
			<div class="menu">
				<div id="menu">
				<?php
				display_menus();
				?>
				</div>
			</div>


<?php
function loop_array2($array=array() , $parent_id = 0)
{
	if(!empty($array[$parent_id]))
	{
		echo '<ul class="csscards" style="color:black; cursor: pointer;">';
	foreach ($array[$parent_id] as $items)
		{
		echo "<a href='editor.php?headline=".$items['headline']."&"."content=".$items['content']."'>";
		echo '<li>';
		echo $items['headline'].'<br>'.$items['content'] ;
		echo '</li>';
		echo "</a>";
		loop_array2($array, $items['id']);

		}
		echo '</ul>';
	}

}
function data()
{
	$pagename = $_GET['pagename'];
	include 'connection.php';
	if(isset($pagename))
	{
	$query=$con->query("SELECT * FROM $pagename");
	$array =array();
	if (mysqli_num_rows($query))
	{
		while($rows=mysqli_fetch_array($query))
		{
			$array[$rows['parent_id']][]=$rows;
		}
	}
	loop_array2($array);
}
}


if($_GET['pagename']=='empty' || $_GET['pagename']=='home')
{
	header("refresh:2; url=pages.php");
}
?>
<div class="content">
			<?php  data(); ?>
			<div id="demo">

			</div>
		</div>
	</div>

</body>
</html>