Your IP : 216.73.217.87
<?php
session_start();
header("Cache-Control: no-cache, must-revalidate");
header("Expires: Sat, 26 Jul 1997 05:00:00 GMT");
date_default_timezone_set("Europe/Sofia");
if (isset($_GET["logout"]))
{
if (isset($_COOKIE["acc_code"]))
{
$acc_code=$_COOKIE["acc_code"];
}
unset($_COOKIE["acc_code"]);
setcookie("acc_code", "", 1, "/", "", true, false);
if ($acc_code!="")
{
$lgncrd=mysqli_query($db, "DELETE FROM `autologin` WHERE `code`='".$acc_code."' LIMIT 1;");
}
$_SESSION["uname"]="";
$_SESSION["data"]="";
session_unset();
session_destroy();
usleep(250000);
header("location: /");
}
$emb="OK";
$acc_code="";
$email="";
$psw="";
include("./conn.php");
if (isset($_COOKIE["acc_code"]))
{
$acc_code=$_COOKIE["acc_code"];
$lgncr=mysqli_query($db, "SELECT * FROM `autologin` WHERE `code`='".$acc_code."' LIMIT 1");
while ($res=mysqli_fetch_row($lgncr))
{
$idcookie=$res[0];
$exp=$res[1];
$code=$res[2];
$email=$res[3];
$psw=$res[4];
$lgncru=mysqli_query($db, "UPDATE `autologin` SET `ts` = '".time()."' WHERE `i` = '".$idcookie."';");
setcookie("acc_code", "".$acc_code."", time() + 90*24*3600, "/", "", true, false);
}
$deltime=time() - 90*24*3600;
$lgncrd=mysqli_query($db, "DELETE FROM `autologin` WHERE `ts` < '".$deltime."';");
$lgnq=mysqli_query($db, "SELECT * FROM `usrs` WHERE `un`='".$email."' AND `ps`='".$psw."' LIMIT 1;");
$uid="";
while ($lgns=mysqli_fetch_row($lgnq))
{
$uid=$lgns[0];
$_SESSION["uname"]=$lgns[2];
$_SESSION["login"]="logged";
if ($lgns[5]==1)
{
$_SESSION["admin"]=1;
}
}
}
if (isset($_POST["pt"]))
{
$pt=$_POST["pt"];
if ($pt=="login")
{
$remme=$_POST["remme"];
$email=$_POST["email"];
$psw=$_POST["psw"];
$psw=sha1($psw);
$lgnq=mysqli_query($db, "SELECT * FROM `usrs` WHERE `un`='".$email."' AND `ps`='".$psw."' LIMIT 1;");
$uid="";
while ($lgns=mysqli_fetch_row($lgnq))
{
$uid=$lgns[0];
$_SESSION["uname"]=$lgns[2];
$_SESSION["login"]="logged";
if ($lgns[5]==1)
{
$_SESSION["admin"]=1;
}
}
if ($uid!="")
{
$_SESSION["data"]="additem";
$remme=$_POST["remme"];
$email=$_POST["email"];
$psw=$_POST["psw"];
if ($remme==1)
{
$tmi=time();
$acc_code=sha1("".$email."".$psw."".$tmi."");
$psw=sha1($psw);
$remsql=mysqli_query($db, "INSERT INTO `autologin` (`i`, `ts`, `code`, `un`, `ps`) VALUES (NULL, '".$tmi."', '".$acc_code."', '".$email."', '".$psw."');");
setcookie("acc_code", "".$acc_code."", time() + 90*24*3600, "/", "", true, false);
}
}
else
{
$_SESSION["login"]="";
$_SESSION["data"]="loginfail";
}
}
else if ($pt=="subject")
{
$picname=$_POST["picname"];
$subname=$_POST["subname"];
$subj=mysqli_query($db, "INSERT INTO `subjects` (`i`, `name`, `pic`) VALUES (NULL, '".$subname."', '".$picname."');");
if ($subj)
{
$_SESSION["data"]="addsubjectsuccess";
}
else
{
$_SESSION["data"]="addsubjectfail";
}
}
}
else
{
if (isset($_GET["login"]))
{
if ($_SESSION["login"]=="")
{
$_SESSION["data"]="login";
}
else
{
$_SESSION["data"]="";
}
}
else if (isset($_GET["lookup"]))
{
$_SESSION["data"]="lookup";
}
else if (isset($_GET["additem"]))
{
if ($_SESSION["login"]=="")
{
$_SESSION["data"]="";
}
else
{
$_SESSION["data"]="additem";
}
}
else if (isset($_GET["addsubject"]))
{
if ($_SESSION["admin"]==1)
{
$_SESSION["data"]="addsubject";
}
else
{
$_SESSION["data"]="";
}
}
else if (isset($_GET["approvefiles"]))
{
if ($_SESSION["admin"]==1)
{
$_SESSION["data"]="approvefiles";
}
else
{
$_SESSION["data"]="";
}
}
else
{
$_SESSION["data"]="";
}
}
/*
if (isset($_GET["logout"]))
{
if (isset($_COOKIE["acc_code"]))
{
$acc_code=$_COOKIE["acc_code"];
}
setcookie("allowaccess", "", 1, "/", "", true, false);
setcookie("acc_code", "", 1, "/", "", true, false);
if ($acc_code!="")
{
$lgncrd=mysqli_query($db, "DELETE FROM `autologin` WHERE `code` = '".$acc_code."' LIMIT 1;");
}
session_unset();
session_destroy();
usleep(250000);
header("location: /");
}
$un="";
$ps="";
$lgn="";
$pollans="";
$acc=0;
if (isset($_COOKIE["acc_code"]))
{
$acc_code=$_COOKIE["acc_code"];
$lgncr=mysqli_query($db, "SELECT * FROM `autologin` WHERE `code`='".$acc_code."' LIMIT 1");
while ($res=mysqli_fetch_row($lgncr))
{
$idcookie=$res[0];
$exp=$res[1];
$code=$res[2];
$un=$res[3];
$ps=$res[4];
$lgncru=mysqli_query($db, "UPDATE `autologin` SET `ts` = '".time()."' WHERE `i` = '".$idcookie."';");
setcookie("acc_code", "".$acc_code."", time() + 90*24*3600, "/", "", true, false);
}
$deltime=time() - 90*24*3600;
$lgncrd=mysqli_query($db, "DELETE FROM `autologin` WHERE `ts` < '".$deltime."';");
}
if ($un!="")
{
include("./login.php");
}
else if (isset($_POST["un"]))
{
$un=$_POST["un"];
$ps=$_POST["ps"];
$remme=$_POST["remme"];
if ($remme==1)
{
$tmi=time();
$acc_code=sha1("".$un."".$ps."".$tmi."");
$remsql=mysqli_query($db, "INSERT INTO `autologin` (`i`, `ts`, `code`, `un`, `ps`) VALUES (NULL, '".$tmi."', '".$acc_code."', '".$un."', '".$ps."');");
setcookie("acc_code", "".$acc_code."", time() + 90*24*3600, "/", "", true, false);
}
include("./login.php");
}
*/
?><!DOCTYPE HTML>
<html lang="bg">
<head>
<meta charset="utf-8" />
<title>Електронна банка</title>
<link rel="shortcut icon" type="image/png" href="/assets/images/site/logo.png" />
<link rel="shortcut icon" type="image/png" href="https://e.vlevski.eu/assets/images/site/logo.png" />
<meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=no" />
<link rel="stylesheet" href="/assets/css/bootstrap.min.css" />
<link rel="stylesheet" href="/assets/css/datepicker.css" />
<link rel="stylesheet" href="/assets/css/croppie.css" />
<script src="/assets/js/jquery.min.js"></script>
<script src="/assets/js/form.min.js"></script>
<script src="/assets/js/popper.min.js"></script>
<script src="/assets/js/bootstrap.min.js"></script>
<script src="/assets/js/bootstrap-datepicker.js"></script>
<script src="/assets/js/croppie.js"></script>
<script src="/assets/fa/js/all.min.js" defer></script>
<script>
chng=1;
remmed=0;
function remmef()
{
if (remmed==0)
{
remmed=1;
$("#remmei").html("<i class=\"far fa-check-square\"> </i>");
}
else
{
remmed=0;
$("#remmei").html("<i class=\"far fa-square\"> </i>");
}
$("#remme").val(remmed);
}
function chngrem()
{
if (chng==1)
{
$("#rmt").removeClass("fa-check-square");
$("#rmt").addClass("fa-square");
chng=0;
}
else
{
$("#rmt").removeClass("fa-square");
$("#rmt").addClass("fa-check-square");
chng=1;
}
}
</script>
<style>
html, body
{
background-color: #f5f5f5;
font-family: Calibri, Candara, Segoe, "Segoe UI", Optima, Arial, sans-serif;
font-size: 20px;
height: 100%;
margin: 0;
background-color: #BBBBBB;
}
a, div, input, h1, h2, h3, p
{
font-family: Calibri, Candara, Segoe, "Segoe UI", Optima, Arial, sans-serif;
}
a.dropdown-item
{
color: #DDDDDD!important;
}
a.dropdown-item:hover
{
color: #FFFFFF!important;
background-color: transparent!important;
}
.dropdown .dropdown-menu
{
-webkit-transition: all 0.5s;
-moz-transition: all 0.5s;
-ms-transition: all 0.5s;
-o-transition: all 0.5s;
transition: all 0.5s;
max-height: 0;
display: block;
overflow: hidden;
opacity: 0;
}
.dropdown.show .dropdown-menu
{
max-height: 300px;
opacity: 1;
}
.main-header
{
position: relative;
margin-left: 20px;
margin-top: 30px;
}
.main-info
{
position: relative;
margin-left: 0px;
margin-top: 20px;
}
#message
{
height: 0px;
background: #f1f1f1;
color: #000;
position: relative;
padding: 0px;
margin-bottom: 0px;
margin-top: 10px;
overflow: hidden;
max-height: 250px;
transition: height 0.5s ease-out;
}
#message div
{
padding: 10px 35px;
font-size: 18px;
margin: 0;
}
.valid
{
color: green;
}
.valid:before
{
position: relative;
left: -35px;
content: "✔";
}
.invalid
{
color: red;
}
.invalid:before
{
position: relative;
left: -35px;
content: "✖";
}
</style>
</head>
<body oncontextmenu="return false;">
<?php
include("./menus.php");
if ($_SESSION["data"]=="login")
{
include("./login.php");
}
else if ($_SESSION["data"]=="lookup")
{
include("./lookup.php");
}
else if ($_SESSION["data"]=="addsubject")
{
include("./addsubject.php");
}
else if ($_SESSION["data"]=="addsubjectsuccess")
{
include("./addsubjectsuccess.php");
}
else if ($_SESSION["data"]=="addsubjectfail")
{
include("./addsubjectfail.php");
}
else if ($_SESSION["data"]=="approvefiles")
{
include("./approvefiles.php");
}
else if ($_SESSION["data"]=="loginfail")
{
include("./loginfail.php");
}
else if ($_SESSION["data"]=="additem")
{
include("./additem.php");
}
else
{
include("./welcome.php");
}
include("./footer.php");
?>
</body>
</html>