| Server IP : 172.67.187.206 / Your IP : 162.159.115.42 Web Server : Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30 System : Windows NT WIN-ECQAAA40806 6.2 build 9200 (Windows Server 2012 Standard Edition) i586 User : SYSTEM ( 0) PHP Version : 5.6.30 Disable Function : NONE MySQL : ON | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : E:/Inetpub/www/news/move/sfadmin/ |
Upload File : |
<?php session_start();
ob_start();
include('../db.php');?>
<!DOCTYPE HTML>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<link href="style.css" rel="stylesheet" type="text/css">
<!--[if lt IE 9]>
<script src="http://html5shiv.googlecode.com/svn/trunk/html5.js"></script>
<![endif]-->
</head>
<body>
<div id="admin-hedder">
<div id="logo"></div>
</div><!--admin-hedder-->
<div class="admin-login-box">
<?php
$err=isset($_GET['error'])?$_GET['error']:"";
if($err=='error'){?>
<div class="errormsgbox">Wrong Username or Password. Please try again.</div>
<?php }
if(!isset($_SESSION['adminuser'])){
if($_SERVER["REQUEST_METHOD"] == "POST")
{
// username and password sent from Form
$adminuser=$mysqli->escape_string($_POST['adminuser']);
$adminpassword=$mysqli->escape_string($_POST['adminpassword']);
$gpassword=md5($adminpassword); // Encrypted Password
if($sql= $mysqli->query("SELECT id FROM admin WHERE adminuser='$adminuser' and adminpassword='$gpassword'")){
$result = mysqli_fetch_array($sql);
$count=mysqli_num_rows($sql);
// If result matched $username and $password, table row must be 1 row
if($count==1)
{
$_SESSION["adminuser"] = $adminuser;
header("location:index.php");
}
else
{
header("location:login.php?error=error");
}
}
$sql->close();
}
ob_end_flush();
?>
<div class="login_box">
<center><h1>Login to Admin Panel</h1></center>
<form action="login.php" method="post" id="login-form" class="theform">
<label for="adminuser">Username :</label>
<input type="text" name="adminuser"/>
<label for="adminpassword">Password :</label>
<input type="password" name="adminpassword"/>
<input type="submit" id="submit" value="Login to Admin Panel"/>
</form>
</div>
<?php }else{
header("location:index.php");
}
?>
</div><!--admin-login-box-->
<?php include('footer.php');?>