diff --git a/App/Controllers/Home.php b/App/Controllers/Home.php index e438258..b5d1635 100644 --- a/App/Controllers/Home.php +++ b/App/Controllers/Home.php @@ -35,10 +35,13 @@ class Home public function register() { if (Session::exists('userid')) { - View::render('Access/registrasi.html', [ - 'token' => Token::generate() - ]); + if (Session::get('privilage') == 1) { + View::render('Access/registrasi.html', [ + 'token' => Token::generate() + ]); + } } else { + Session::flash('info', Session::get('privilage')); Redirect::to('/'); } } diff --git a/App/Models/Access.php b/App/Models/Access.php index 8423172..fd60f5b 100644 --- a/App/Models/Access.php +++ b/App/Models/Access.php @@ -43,7 +43,7 @@ class Access extends \Core\Model try { $db = static::connectDB(); - $sql = "SELECT id, username, full_name, registered_at FROM user WHERE id = ?"; + $sql = "SELECT id, username, full_name, registered_at, privilage FROM user WHERE id = ?"; $query = $db->prepare($sql); @@ -85,7 +85,8 @@ class Access extends \Core\Model \Core\Session::put('userid', $user['id']); \Core\Session::put('username', $user['username']); - \Core\Session::put('name', $user['full_name']); + \Core\Session::put('full_name', $user['full_name']); + \Core\Session::put('privilage', $user['privilage']); $user_now = $user['username']; @@ -112,7 +113,8 @@ class Access extends \Core\Model )) { \Core\Session::delete('userid'); \Core\Session::delete('username'); - \Core\Session::delete('name'); + \Core\Session::delete('full_name'); + \Core\Session::delete('privilage'); return true; }