FM / function

/home/wespack/public_html/gekcopak.net/admin/function/

/home/wespack/public_html/gekcopak.net/admin/function

Name	Size	Mode	Actions
phpmailer/	-	0755	rm
add_chinese_content.php	4336	0644	edit dl rm
add_english_content.php	4252	0644	edit dl rm
add_japanese_content.php	4327	0644	edit dl rm
config.php	251	0644	edit dl rm
enquiry.php	2157	0644	edit dl rm
error_log	3381454	0644	edit dl rm
get_admin_lg.php	4237	0644	edit dl rm
get_cat.php	688	0644	edit dl rm
get_cat_det.php	1168	0644	edit dl rm
get_comp.php	1871	0644	edit dl rm
get_grp_list.php	4345	0644	edit dl rm
get_inv.php	878	0644	edit dl rm
get_lg.php	6652	0644	edit dl rm
get_lgnew.php	7018	0644	edit dl rm
get_pjk_list.php	1853	0644	edit dl rm
get_prd.php	1241	0644	edit dl rm
get_prddetail.php	1502	0644	edit dl rm
get_prd_lts.php	875	0644	edit dl rm
get_sales.php	3266	0644	edit dl rm
get_udetail.php	1676	0644	edit dl rm
get_usr_list.php	4021	0644	edit dl rm
login.php	2549	0644	edit dl rm
logout.php	89	0644	edit dl rm
push-ios.php	2036	0644	edit dl rm
pushnotification.php	1923	0644	edit dl rm
pushnotification_promo.php	1456	0644	edit dl rm
regPushUser.php	1008	0644	edit dl rm
reg_push.php	1709	0644	edit dl rm
reg_pushid.php	1006	0644	edit dl rm
reg_u.php	4413	0644	edit dl rm
rem_user.php	1113	0644	edit dl rm
rest_api.php	1469	0644	edit dl rm
route_mail.php	8350	0644	edit dl rm
test.php	1390	0644	edit dl rm
u_img.php	895	0644	edit dl rm
verify_u.php	3124	0644	edit dl rm

Edit: /home/wespack/public_html/gekcopak.net/admin/function/login.php (2549B)

<?PHP
//ob_start();
session_start(); // ready to go!
// server should keep session data for AT LEAST 1 hour
ini_set('session.gc_maxlifetime', 18000);

// each client should remember their session id for EXACTLY 1 hour
session_set_cookie_params(18000);

include "config.php";

$email=$_POST['email'];
	 $password=md5($_POST['password']);

//check record exist or not
	$check_record="SELECT * FROM user WHERE email='$email' AND password='$password' AND status='1'";
	 $run_check=mysqli_query($con,$check_record);
	$count=mysqli_num_rows($run_check);
	 if($count<1)
	 { 
		$chk_appuser=mysqli_query($con,"SELECT 
		app_uid
		, firstname
		, lastname
		, email
		, company_name
		, password
		, group_id
		, datetime
		, status
		, image 
		FROM 
		app_user
			WHERE 
			email='$email' 
			AND 
			password='$password' 
		");
		$count_usr=mysqli_num_rows($chk_appuser);
		if($count_usr > 0){
			$fetchUsr=mysqli_fetch_array($chk_appuser);
			$user_id=$fetchUsr['app_uid'];
			$email=$fetchUsr['email'];
			$first_name=$fetchUsr['firstname'];
			$last_name=$fetchUsr['lastname'];
			$picture=$fetchUsr['image'];
			$status=$fetchUsr['status'];
			$now = time();
	     
	     
			 $_SESSION['email']=$email;
			 $_SESSION['user_id']=$user_id;
			 $_SESSION['first_name']=$first_name;
			 $_SESSION['last_name']=$last_name;
			 /* $_SESSION['last_name']=$picture; */
			 $_SESSION['gender']='1';
			 $_SESSION['access_level']='3';
			 
			 if($status==1){
				header("Location:../program/sales-tracking.php"); exit();
			 }else{
				header("Location:../program/login.php?ng"); exit();
			 }
			 
		}else{
			header("Location:../program/login.php?err"); exit();
		}
	}
	 else
	 {
		 //query data from user table
		$record="SELECT * FROM user WHERE email='$email' AND status='1'";
		 $start_record=mysqli_query($con,$record);
		 $fetch_record=mysqli_fetch_array($start_record);
		 $user_id=$fetch_record['user_id'];
		 $email=$fetch_record['email'];
		 $first_name=$fetch_record['first_name'];
		 $last_name=$fetch_record['last_name'];
		 $picture=$fetch_record['picture'];
		  $gender=$fetch_record['gender'];
		 $access_level=$fetch_record['access_level'];
		
	  
	     $now = time();
	     
	     
		 $_SESSION['email']=$email;
		 $_SESSION['user_id']=$user_id;
		 $_SESSION['first_name']=$first_name;
		 $_SESSION['last_name']=$last_name;
		 /* $_SESSION['last_name']=$picture; */
		 $_SESSION['gender']=$gender;
		 $_SESSION['access_level']=$access_level;
		
			header("Location:../program/index.php");
		 exit();
	 }
	 //ob_end_flush();
?>

0){ $fetchUsr=mysqli_fetch_array($chk_appuser); $user_id=$fetchUsr['app_uid']; $email=$fetchUsr['email']; $first_name=$fetchUsr['firstname']; $last_name=$fetchUsr['lastname']; $picture=$fetchUsr['image']; $status=$fetchUsr['status']; $now = time(); $_SESSION['email']=$email; $_SESSION['user_id']=$user_id; $_SESSION['first_name']=$first_name; $_SESSION['last_name']=$last_name; /* $_SESSION['last_name']=$picture; */ $_SESSION['gender']='1'; $_SESSION['access_level']='3'; if($status==1){ header("Location:../program/sales-tracking.php"); exit(); }else{ header("Location:../program/login.php?ng"); exit(); } }else{ header("Location:../program/login.php?err"); exit(); } } else { //query data from user table $record="SELECT * FROM user WHERE email='$email' AND status='1'"; $start_record=mysqli_query($con,$record); $fetch_record=mysqli_fetch_array($start_record); $user_id=$fetch_record['user_id']; $email=$fetch_record['email']; $first_name=$fetch_record['first_name']; $last_name=$fetch_record['last_name']; $picture=$fetch_record['picture']; $gender=$fetch_record['gender']; $access_level=$fetch_record['access_level']; $now = time(); $_SESSION['email']=$email; $_SESSION['user_id']=$user_id; $_SESSION['first_name']=$first_name; $_SESSION['last_name']=$last_name; /* $_SESSION['last_name']=$picture; */ $_SESSION['gender']=$gender; $_SESSION['access_level']=$access_level; header("Location:../program/index.php"); exit(); } //ob_end_flush(); ?>