| Name | Size | Mode | Actions |
|---|---|---|---|
| db_connect.php | 7824 | 0666 | editdlrm |
| db_connects.php | 292 | 0666 | editdlrm |
| forgetpassword.php | 4105 | 0666 | editdlrm |
| functions.php | 17179 | 0666 | editdlrm |
| functions1.php | 12247 | 0666 | editdlrm |
| logout.php | 722 | 0666 | editdlrm |
| process_login.php | 2203 | 0666 | editdlrm |
| psl-config.php | 2196 | 0666 | editdlrm |
| psl-config 1.php | 2107 | 0666 | editdlrm |
| psl-config3.php | 2107 | 0666 | editdlrm |
| psl-configs.php | 1674 | 0666 | editdlrm |
| register-client.php | 7543 | 0666 | editdlrm |
| register.inc.php | 3390 | 0666 | editdlrm |
| register.php | 27274 | 0666 | editdlrm |
| registerclient.php | 8859 | 0666 | editdlrm |
| requestsubmission.php | 23523 | 0666 | editdlrm |
| reset.php | 3984 | 0666 | editdlrm |
Edit:
prepare("SELECT C_ID
FROM Clients
WHERE Username = ? LIMIT 1")) {
$stmt->bind_param('s', $email); // Bind "$email" to parameter.
$stmt->execute(); // Execute the prepared query.
$stmt->store_result();
// get variables from result.
$stmt->bind_result($user_id);
$stmt->fetch();
if ($stmt->num_rows == 1) {
$_SESSION['UserDB'] = "Clients";
$_SESSION['UID'] = "C_ID";
return true;
}
}
if ($stmt = $mysqli->prepare("SELECT U_ID
FROM Users
WHERE Username = ? LIMIT 1")) {
$stmt->bind_param('s', $email); // Bind "$email" to parameter.
$stmt->execute(); // Execute the prepared query.
$stmt->store_result();
// get variables from result.
$stmt->bind_result($user_id);
$stmt->fetch();
if ($stmt->num_rows == 1) {
$_SESSION['UserDB'] = "User";
$_SESSION['UID'] = "U_ID";
return true;
}
}
if ($stmt = $mysqli->prepare("SELECT Ag_ID
FROM Agent
WHERE Username = ? LIMIT 1")) {
$stmt->bind_param('s', $email); // Bind "$email" to parameter.
$stmt->execute(); // Execute the prepared query.
$stmt->store_result();
// get variables from result.
$stmt->bind_result($user_id);
$stmt->fetch();
if ($stmt->num_rows == 1) {
$_SESSION['UserDB'] = "Agent";
$_SESSION['UID'] = "Ag_ID";
return true;
}
}
if ($stmt = $mysqli->prepare("SELECT M_ID
FROM Master
WHERE Username = ? LIMIT 1")) {
$stmt->bind_param('s', $email); // Bind "$email" to parameter.
$stmt->execute(); // Execute the prepared query.
$stmt->store_result();
// get variables from result.
$stmt->bind_result($user_id);
$stmt->fetch();
if ($stmt->num_rows == 1) {
$_SESSION['UserDB'] = "Master";
$_SESSION['UID'] = "M_ID";
return true;
}
}
if ($stmt = $mysqli->prepare("SELECT ID
FROM Admin
WHERE Username = ? LIMIT 1")) {
$stmt->bind_param('s', $email); // Bind "$email" to parameter.
$stmt->execute(); // Execute the prepared query.
$stmt->store_result();
// get variables from result.
$stmt->bind_result($user_id);
$stmt->fetch();
if ($stmt->num_rows == 1) {
$_SESSION['UserDB'] = "Admin";
$_SESSION['UID'] = "ID";
return true;
}
}
else{
return false;
}
}
function login($email, $password, $mysqli) {
$ip= $_SERVER["REMOTE_ADDR"];
$agent =$_SERVER["HTTP_USER_AGENT"];
$datetime =date("Y/m/d") . ' ' . date('H:i:s') ;
if (checkuser($email, $mysqli)) {
$UserDB = $_SESSION['UserDB'];
$UID = $_SESSION['UID'];
$UA = 1;
// Using prepared statements means that SQL injection is not possible.
$query = "SELECT * FROM $UserDB Where Username = '".$email."' AND User_Access = '".$UA."'";
$result = $mysqli->query($query);
$Managers = $result->fetch_assoc();
$UserAccess = $Managers['User_Access'];
if ($UserAccess == 1) {
if ($stmt = $mysqli->prepare("SELECT $UID, Username, Password, salt
FROM $UserDB
WHERE Username = ? LIMIT 1")) {
$stmt->bind_param('s', $email); // Bind "$email" to parameter.
$stmt->execute(); // Execute the prepared query.
$stmt->store_result();
// get variables from result.
$stmt->bind_result($user_id, $username, $db_password, $salt);
$stmt->fetch();
// hash the password with the unique salt.
$password = hash('sha512', $password . $salt);
if ($stmt->num_rows == 1) {
// If the user exists we check if the account is locked
// from too many login attempts
if (checkbrute($user_id, $mysqli) == true) {
//// Account is locked
//// Send an email to user saying their account is locked
//$to= $email;
//$subject = "Your account is locked!";
//$url = "https://". $_SERVER['SERVER_NAME'] . $_SERVER['REQUEST_URI'];
//$message = '
//
//
///home/techb158/immovalet.ca/report/includes/functions1.php (12247B)
Dear Customer,
//
Your account is locked!
//
Thank you for choosing Planly.com.
//
Support Team
//
//
//
//
//';
//$headers = "MIME-Version: 1.0" . "\r\n";
//$headers .= "Content-type:text/html;charset=iso-8859-1" . "\r\n";
//$headers .= 'From: support