From 44f478107f2124ea08959bfeb192356dbb89b71c Mon Sep 17 00:00:00 2001
From: Lan Hui <lanhui@zjnu.edu.cn>
Date: Mon, 21 Aug 2023 19:34:34 +0800
Subject: [PATCH] Admin.php: Admin user can see all courses.

---
 Admin.php | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/Admin.php b/Admin.php
index 19566e7..9fd3f00 100644
--- a/Admin.php
+++ b/Admin.php
@@ -173,7 +173,11 @@ if ($_SESSION['user_type'] != "Lecturer" && $_SESSION['user_type'] != "Admin") {
 
 		    <?php
 		    $user_id = $_SESSION['user_id'];
-		    $result = mysqli_query($con, "SELECT `Course_ID`, `Course_Name`, `Academic_Year`, `Faculty`, `TA_User_ID`, `Course_Code`, `Full_Name` FROM courses_table INNER JOIN users_table ON users_table.User_ID=courses_table.Lecturer_User_ID WHERE User_ID=$user_id ORDER BY Academic_Year DESC;");
+		    if ($_SESSION['user_type'] == 'Lecturer') {
+			$result = mysqli_query($con, "SELECT `Course_ID`, `Course_Name`, `Academic_Year`, `Faculty`, `TA_User_ID`, `Course_Code`, `Full_Name` FROM courses_table INNER JOIN users_table ON users_table.User_ID=courses_table.Lecturer_User_ID WHERE User_ID=$user_id ORDER BY Academic_Year DESC;");
+		    } else if ($_SESSION['user_type'] == 'Admin') {
+			$result = mysqli_query($con, "SELECT `Course_ID`, `Course_Name`, `Academic_Year`, `Faculty`, `TA_User_ID`, `Course_Code`, `Full_Name` FROM courses_table INNER JOIN users_table ON users_table.User_ID=courses_table.Lecturer_User_ID ORDER BY Academic_Year DESC;");
+		    }
 		    if (mysqli_num_rows($result) != 0) {
 			$counter = 0;
 			while ($row = mysqli_fetch_assoc($result)) {