bnmbnmbnhjkhjkhjkhjktyutyutyuytutyutyutyhgjgjghjgjghjguytutyry

halohalo bnmbnmbnhjkhjkhjkhjktyutyutyuytutyutyutyhgjgjghjgjghjguytutyry

<?php 
		include 'dbc.php';
		$err = array();
		foreach($_GET as $key => $value) {
		$get[$key] = filter($value); //get variables are filtered.
		}
		if ($_POST['doLogin']=='Login')
		{
		foreach($_POST as $key => $value) {
		$data[$key] = filter($value); // post variables are filtered
		}
		$user_email = $data['usr_email'];
		$pass = $data['pwd'];
		if (strpos($user_email,'@') === false) {
		$user_cond = "user_name='$user_email'";
		} else {
		$user_cond = "user_email='$user_email'";
		}
		$result = mysqli_query($link,"SELECT `id`,`pwd`,`company_name`,`approved`,`user_level`,`raga_id` FROM users WHERE 
		$user_cond
		AND `banned` = '0'
		") or die (mysqli_error($link,)); 
		$num = mysqli_num_rows($result);
		if ( $num > 0 ) { 
		list($id,$pwd,$full_name,$approved,$user_level,$raga_id) = mysqli_fetch_row($result);
		if(!$approved) {
		$err[] = "Account not activated. Please check your email for activation code";
		}
		if ($pwd === PwdHash($pass,substr($pwd,0,9))) { 
		if(empty($err)){			
		session_start();
		session_regenerate_id (true); //prevent against session fixation attacks.
		$_SESSION['user_id']= $id;  
		$_SESSION['user_name'] = $full_name;
		$_SESSION['user_level'] = $user_level;
		$_SESSION['raga_id'] = $raga_id;
		$_SESSION['HTTP_USER_AGENT'] = md5($_SERVER['HTTP_USER_AGENT']);
		//update the timestamp and key for cookie
		$stamp = time();
		$ckey = GenKey();
		$lastacces = date("M-d-Y H:i:s");
		mysqli_query($link,"update users set `ctime`='$stamp', `ckey` = '$ckey' where id='$id'") or die(mysqli_error($link));
		mysqli_query($link,"update users set `web_portal`='1',`last_access`='$lastacces' where id='$id'") or die(mysql_error($link));
		//set a cookie 
		if(isset($_POST['remember'])){
		setcookie("user_id", $_SESSION['user_id'], time()+60*60*24*COOKIE_TIME_OUT, "/");
		setcookie("raga_id", $_SESSION['raga_id'], time()+60*60*24*COOKIE_TIME_OUT, "/");
		setcookie("user_key", sha1($ckey), time()+60*60*24*COOKIE_TIME_OUT, "/");
		setcookie("user_name",$_SESSION['user_name'], time()+60*60*24*COOKIE_TIME_OUT, "/");
		}
		header("Location: dashboard.php");
		}
		}else
		{
		//$msg = urlencode("Invalid Login. Please try again with correct user email and password. ");
		$err[] = "Invalid Login. Please try again with correct user email and password.";
		//header("Location: login.php?msg=$msg");
		}
		} else {
		$err[] = "Error - Invalid login. No such user exists";
		}		
		if($_POST['remember']=="1"){
		mysqli_query($link,"update users set `value`='1' where id='$id'") or die(mysql_error());
		}
		else if(empty($_POST['remember'])){
		mysqli_query($link,"update users set `value`='0' where id='$id'") or die(mysql_error());
		}
		}  
		
		if ($_POST['doReset']=='Reset')
		{
		$err = array();
		$msg = array();
		foreach($_POST as $key => $value) {
		$data[$key] = filter($value);
		}
		if(!isEmail($data['user_email'])) {
		$err[] = "ERROR - Please enter a valid email"; 
		}
		$user_email = $data['user_email'];
		//check if activ code and user is valid as precaution
		$rs_check = mysqli_query($link,"select id from users where user_email='$user_email'") or die (mysqli_error($link)); 
		$num = mysqli_num_rows($rs_check);
		// Match row found with more than 1 results  - the user is authenticated. 
		if ( $num <= 0 ) { 
		$err[] = "Error - Sorry no such account exists or registered.";
		//header("Location: forgot.php?msg=$msg");
		//exit();
		}
		if(empty($err)) {
		$new_pwd = GenPwd();
		$pwd_reset = PwdHash($new_pwd);
		//$sha1_new = sha1($new);	
		//set update sha1 of new password + salt
		$rs_activ = mysqli_query($link,"update users set pwd='$pwd_reset' WHERE 
		user_email='$user_email'") or die(mysql_error());
		$host  = $_SERVER['HTTP_HOST'];
		$host_upper = strtoupper($host);						 
		//send email
		
		$message = 
		
		"Here are your new password details ...\n
		
		User Email: $user_email \n
		
		Passwd: $new_pwd \n
		
		
		
		Thank You
		
		
		
		Administrator
		
		$host_upper
		
		______________________________________________________
		
		THIS IS AN AUTOMATED RESPONSE. 
		
		***DO NOT RESPOND TO THIS EMAIL****
		
		";
		
		
		
		mail($user_email, "Reset Password", $message,
		
		"From: \"Member Registration\" <auto-reply@$host>\r\n" .
		
		"X-Mailer: PHP/" . phpversion());						 
		$msg[] = "Your account password has been reset and a new password has been sent to your email address please check your inbox and spam.";						 
		}
		}
		?>
    <!DOCTYPE html>
    <html lang="en">
    <head>
    <meta charset="UTF-8">
    <title>Aram Iyarkai</title>
    <meta name="msapplication-TileColor" content="#5bc0de" />
    <meta name="msapplication-TileImage" content="img/metis-tile.png" />
    <link rel="shortcut icon" href="images/faviicon.ico">
    <link rel="stylesheet" href="fonts/font-awesome.css" />
    <link rel="stylesheet" href="fonts/font-awesome.min.css" />
    <link rel="stylesheet" href="css/bootstrap.min.css">
    <link rel="stylesheet" href="css/font-awesome.css" />
    <link rel="stylesheet" href="css/font-awesome.min.css" />
    <link rel="stylesheet" href="css/font-awesome-ie7.css" />
    <link rel="stylesheet" href="css/font-awesome-ie7.min.css" />
    <link rel="stylesheet" href="css/main.min.css">
    <link rel="stylesheet" href="lib/animate.css/animate.min.css">
    </head>
  <body class="login">
    <div class="form-signin">
      <div class="text-center">
        <img src="images/loginlogo.png" alt="Raga Designers Logo">
      </div>
      <hr>
      <div class="tab-content">
        <div id="login" class="tab-pane active">
        
          <form action="login.php" method="post" enctype="multipart/form-data">
            <?php if(!empty($err))  { ?>
            <div class="alert alert-block alert-danger fade in">
            <p style="font-weight:bold ">Message : <?php   foreach ($err as $e) {    echo "$e <br>"; } ?>
            </p>
            </div>
            <?php } ?>  
             <p class="text-muted text-center">
              Enter your username and password
            </p>
            <input type="text" name="usr_email" placeholder="Username" id="txtbox" class="form-control top">
            <input type="password" name="pwd" placeholder="Password" id="txtbox" class="form-control bottom">
            <div class="checkbox">
              <label>
                <input type="checkbox">Remember Me
              </label>
            </div>
            <button class="btn btn-lg btn-primary btn-block"  id="doLogin" name="doLogin" value="Login" type="submit">Login</button>
            
          </form>
        </div>
        <div id="forgot" class="tab-pane">
          <form action="login.php">
            <p class="text-muted text-center">Enter your valid e-mail</p>
            <input type="user_email" placeholder="mail@domain.com" class="form-control">
            <br>
            <button class="btn btn-lg btn-danger btn-block" name="doReset" value="Reset" type="submit">Recover Password</button>
          </form>
        </div>
        <div id="signup" class="tab-pane">
          <form action="index.html">
            <input type="text" placeholder="username" class="form-control top">
            <input type="email" placeholder="mail@domain.com" class="form-control middle">
            <input type="password" placeholder="password" class="form-control middle">
            <input type="password" placeholder="re-password" class="form-control bottom">
            <button class="btn btn-lg btn-success btn-block" type="submit">Register</button>
          </form>
        </div>
      </div>
      <hr>
      <div class="text-center">
        <ul class="list-inline">
          <li> <a class="text-muted" href="#login" data-toggle="tab">Login</a>  </li>
          <li> <a class="text-muted" href="#forgot" data-toggle="tab">Forgot Password</a>  </li>
          <li> <a class="text-muted" href="#signup" data-toggle="tab">Signup</a>  </li>
        </ul>
      </div>
    </div>
    <script src="js/jquery.min.js"></script>
    <script src="js/bootstrap.min.js"></script>
    <script type="text/javascript">
      (function($) {
        $(document).ready(function() {
          $('.list-inline li > a').click(function() {
            var activeForm = $(this).attr('href') + ' > form';
            //console.log(activeForm);
            $(activeForm).addClass('animated fadeIn');
            //set timer to 1 seconds, after that, unload the animate animation
            setTimeout(function() {
              $(activeForm).removeClass('animated fadeIn');
            }, 1000);
          });
        });
      })(jQuery);
    </script>
  </body>
</html>