přesměřování uživatelé podle práva

ob_start();
session_start();
require_once 'connection.php';


$error = false;

if( isset($_POST['prihlas']) ) {
    
    $name = trim($_POST['nazev']);
    $name = strip_tags($name);
    $name = htmlspecialchars($name);

    $pass = trim($_POST['heslo']);
    $pass = strip_tags($pass);
    $pass = htmlspecialchars($pass);
    
    if (!$error) {

        $password = hash('sha256', $pass); // password hashing using SHA256

        $sql="SELECT id, nazev, heslo FROM users";
        $result = $db->query($sql);

        if ($result->num_rows > 0) {
            // output data of each row
            while($count = $result->fetch_assoc()) {


                if( $count['nazev'] == $name && $count['heslo']==$password ) {
                    $_SESSION['nazev'] = $count['nazev'];
                    $_SESSION['aktivace'] = $count['aktivace'];
                    header("Location: login.php");
                } else {
                    $errMSG = "Nesprávny login nebo heslo!";
                }
            }
        }
    }
}

session_start(); 

if($_SESSION['aktivace'] == '2'){
    header("Location: admin/index.php");
} else if ($_SESSION['aktivace'] == '1'){
    header("Location: uzivatele/index.php");
} else {
    header("Location: index.php");
}