| Current Path : /proc/self/root/home/bolconlineco/public_html/ |
| Current File : //proc/self/root/home/bolconlineco/public_html/login.php |
<?php
ob_start();
session_start();
include('includes/connection/func.inc.php');
function updateLastLogin($user,$dateTime,$ip)
{
$sql1 = 'update student set last_login_dateTime=\''.$dateTime.'\',last_login_ip=\''.$ip.'\' where email=\''.$user.'\'';
mysql_query($sql1) or die(mysql_error());
}
if(isset($_POST['submit']))
{
$usernamee = mysql_real_escape_string(strip_tags($_POST['username']));
$userPass = md5(mysql_real_escape_string(strip_tags($_POST['userpass'])));
$sql = "select * from admin where username='$usernamee' and userPass='$userPass'";
$query = mysql_query($sql) or die(mysql_error());
if(mysql_num_rows($query) > 0)
{
$ResultSet = mysql_fetch_array($query);
$username = $ResultSet['username'];
$role = $ResultSet['role'];
$_SESSION['username'] = $username;
if($ResultSet['role' ] == 1)
{
$_SESSION['adminname'] = $username;
$_SESSION['adminrole'] = $role;
$datatime = date('Y-m-d H:i:s');
$ip = $_SERVER['REMOTE_ADDR'];
//$query1="insert into tbl_logs values ('','$username','$datatime','','$ip')";
//mysql_query($query1) or die(mysql_error());
header("location:admin/dashbord.php");
exit();
}
else if($ResultSet['role'] == 2)
{
$cordActive=mysql_query("select CoStatus from programe_co where email='$username'") or die(mysql_error());
$coResult=mysql_fetch_array($cordActive);
if($coResult['CoStatus'] == 1)
{
$_SESSION['coordinator'] = $username;
$_SESSION['coordinatorrole'] = $role;
header("location:coordinator/dashboard.php");
exit();
} else {
//$msg="your Account has been blocked contact your site Administrator";
header("location:index.php?blo");
exit();
}
}
else if($ResultSet['role' ]== 3)
{
$_SESSION['tutor'] = $username;
$_SESSION['tutorrole'] = $role;
header("location:tutor/dashbord.php");
exit();
}
else if($ResultSet['role'] == 4)
{
//exit();
$_SESSION['studentname'] = $username;
$_SESSION['studentrole'] = $role;
$sql="select rollno,studentstatus from student where email='$username'";
$result = mysql_query($sql) or die(mysql_error());
$fetch = mysql_fetch_array($result);
$login_status = $fetch['studentstatus'];
$login_sql = mysql_query("SELECT login FROM status WHERE StatusId='$login_status'");
$login_row = mysql_fetch_array($login_sql);
$studentstatus = $login_row['login'];
if($studentstatus == 1) {
$_SESSION['rollno'] = $fetch['rollno'];
$datatime = date('Y-m-d H:i:s');
$ip = $_SERVER['REMOTE_ADDR'];
updateLastLogin($username,$datatime,$ip);
$query1 = "insert into tbl_logs (username, detetime, ip) VALUES ('$username',NOW(),'$ip')";
mysql_query($query1) or die(mysql_error());
header("location:student/dashbord.php");
exit();
} else {
header("location:index.php?blo");
exit();
}
}
}
else
{
$msg="Enter your Correct Credentials";
header("location:index.php?msg=$msg");
}
}
?>