File Manager

✏️ Edit File: /home/coemyoza/sms.coeminna.edu.ng/index.php

<?php session_start();

include 'db/dbc.php';

/********************* LOGIN CHECK *******************************
This code checks and redirect user if already logged in
****************************************************************/

if(isset($_SESSION['uid']) || isset($_COOKIE['uid'])) { header("Location: ".$_SESSION['user_home']); }

/**********************Disable this page if user already logged in*********************************/
	
$err = array();
$msg = array();

//Begining of form processes
if(isset($_POST['register']) == 'Register') {
	
//check duplicate account creation
$rs_duplicate = mysqli_query($link,"select * from default_users where (username = '$_POST[matno]' or email = '$_POST[email]') and (banned = '0')");

//Automatically collects the hostname or domain  like example.com) 
$host  = $_SERVER['HTTP_HOST'];
$host_upper = strtoupper($host);
$ip = $_SERVER['REMOTE_ADDR'];
$path   = rtrim(dirname($_SERVER['PHP_SELF']), '/\\');
	
//Validate required form fields.
if(empty($_POST['sname']) || empty($_POST['fname']) || empty($_POST['matno']) || empty($_POST['email']) || empty($_POST['phone']) || empty($_POST['dtype']) || empty($_POST['pass']) || empty($_POST['cpass'])) {
$err[] = 'Error! Fill all the neccessary fields.';
}

//Validate Email
elseif(!isEmail($_POST['email'])) { 
$err[] = "Sorry! Please enter valid email address."; }

elseif (mysqli_fetch_row($rs_duplicate) > 0) { 
$err[] = 'Oops! Username and/or Email you are trying to use already registered or exist in our knowledge base. You may wish to reset your password or contact system administrator for assistance';
}

// Check User Passwords
elseif (!checkPwd($_POST['pass'],$_POST['cpass']) || strlen($_POST['pass']) < 6) {
$err[] = "Password mismatch. Enter min of 6 characters or more for your new password";
}

// Check the User's number
elseif ($_POST['phone'] && !isPhoneNumber($_POST['phone'])) {
$err[] = "SORRY! Please enter valid contact number.";
}

//elseif (!$resp->is_valid) {
//        $return['msg'] = "ERROR! Invalid reCAPTCHA code. Retry again.";
// 		}
 
//code if no error inpute data
elseif(empty($err)) {
	
	$sha1pass = PwdHash($_POST['pass']); // stores sha1 of password
	//$RandPass = GenPwd(); // generate random password
	//$sha1pass = PwdHash($RandPass); // stores sha1 of password

//generates activation code simple 6 digit number
$act_code = rand(100000,999999);

//insert the records to users table		
$sql_insert = "INSERT into `default_users` (username,password,first_name,last_name,other_name,phone,email,activation_code,document_type,user_ip,date_created)
		VALUES ('$_POST[matno]', '$sha1pass', '$_POST[fname]', '$_POST[sname]','$_POST[oname]', '$_POST[phone]', '$_POST[email]', '$act_code,ct_code', '$_POST[dtype]', '$ip', now())";
		
mysqli_query($link,$sql_insert) or die("Insertion Failed:" . mysqli_error());
$user_id = mysqli_insert_id($link);  
$md5 = md5($user_id);

//select from default_users table
$result = mysqli_query($link,"SELECT `id` FROM `default_users` WHERE `username` = '$_POST[matno]'") or die (mysqli_error()); 
$num = mysqli_num_rows($result);

// Match row found with more than 1 results  - the user is authenticated. 
if ($num > 0) {  list($id) = mysqli_fetch_row($result); }

//update MD5
mysqli_query($link,"update `default_users` set md5 = '$md5', created_by = '$id' where id = '$id'"); 
 
 //send activation mail
$a_link ="https://$host$path/?status=eactivate&email=$email&code=$act_code&/EmailActivation"; 
$Second_link = "https://$host$path/?status=uactivate&code=$act_code&md5=$md5&/EmailActivation";

//$message =
"Hello $_POST[fname], $_POST[lname] \n
Thank you for registering with us. Below are your login details...\n

Username: $_POST[matno]
Email: $_POST[email] \n 
Password: $_POST[pass]\n

Activation Code: $act_code\n

In order to activate your portal account, you need to enter your activation code on $host website via below link.

$a_link \n\n

Alternatively you can click on or copy into the URL below into your browser:

$Second_link \n\n

In case of any difficulty/enquiry, don't hesitate to contact us.

Best regards,

Mobile: +234 80
Email: info@$host
Website: $host_upper
____________________________________________________
THIS IS AN AUTOMATED RESPONSE. 
***DO NOT RESPOND TO THIS EMAIL****
";

// boundary
$boundary = uniqid();

//Header for sender info 
$headers = "From: COEMinna <auto-reply@$host>\r\n"; 
$headers .= "MIME-Version: 1.0\r\n";
$headers .= "Content-Type: multipart/mixed; boundary=\"".$boundary."\"\r\n";

// send email
	@mail($_POST['email'], "Login Details", $message, $headers);

$msg[] = "User's account successfully created. Check your mail '$_POST[email]' for activation and login details.";

//Sleep for 5 seconds.
header("Refresh: 5; url=./?&Account/Login");		
}
	}
?>

<?php include 'head.html'; ?>
<body class="bg-full-screen-image">

<div class="login">
        <div class="login__block login__block--extended">
            <div class="row">
                <div class="col-xl-12">
                    <div class="login__block__inner">
                        <div class="login__block__form">
                 
<?php if(isset($_GET['status']) && ($_GET['status'] == 'reset')) { ?>                      
             	<h4 class="text-uppercase">
              <strong>Forget Password</strong>
            </h4>
            <br>
			<?php
			/******************** ERROR MESSAGES*************************************************
		  	This code is to show error messages 
		  	**************************************************************************/
			//if(!empty($err))  { 
//				 
//				echo "<div class=\"alert-box alert error\">";
//				foreach ($err as $e) { echo "$e"; }
//				echo "</div>";
//			}
//			
//			if(!empty($msg))  { 
//				 
//				echo "<div class=\"alert-box alert-confirmation editor\">";
//				foreach ($msg as $e) { echo "$e"; }
//				echo "</div>";
//			}
//			
//				if(!empty($_GET['info'])) //id sendto address bar
//				{
//					$info = "Invalid Credential. Please try again with correct username and/or password";
//					echo "<div class=\"alert-box alert error\">" . $info . "</div>";
//				}
			/******************************* END ********************************/
		?>

<div id="message2" style="display: none;"></div>
<div id="waiting2" style=" height:auto; display: none;">
  <img src="images/spinner.gif" title="Loader" alt="Loader" align='absbottom' />&nbsp;&nbsp; Checking... please wait!</div>

<form method="post" name="recoverform" id="recoverform" action="./?status=reset&/Account/ForgotPassword">
                <div class="form-group">
                    <label class="form-label" for="Email">Email</label>
      <input class="form-control" placeholder="Email address" type="email" id="email_address" name="useremail" required>
                </div>

<div class="form-actions">
                <input class="btn btn-primary mr-3" name="reset" value="Reset Password" id="recover" type="button" />
                </div>
                <br>
         Have an account <a class="pull-right utils__link--blue utils__link--underlined" href="./?&Account/Login">Login</a>
			</form>
          </div>
          <div class="login__block__sidebar">
            <h4 class="login__block__sidebar__title">
              <strong>A School Management System (SMS)</strong>
                                
                            </h4>
                            
            <div class="login__block__sidebar__item">

</div>
            <div class="login__block__sidebar__place">
              <i class="icmn-location mr-3"></i>
              SMS
            </div>
            
<?php } elseif(($_GET['status'] == 'register')) { ?>           
             <h4 class="text-uppercase">
              <strong>Create Login Details</strong>
            </h4>
            <br>
				<?php
			/******************** ERROR MESSAGES*************************************************
		  	This code is to show error messages 
		  	**************************************************************************/
			if(!empty($err))  { 
				 
				echo "<div class=\"alert-box alert error\">";
				foreach ($err as $e) { echo "$e"; }
				echo "</div>";
			}
			
			if(!empty($msg))  { 
				 
				echo "<div class=\"alert-box alert-confirmation editor\">";
				foreach ($msg as $e) { echo "$e"; }
				echo "</div>";
				}
				if(!empty($_GET['info'])) //id sendto address bar
				{
					$info = "Invalid Login. Please try again with correct username and/or password";
					echo "<div class=\"alert-box alert error\">" . $info . "</div>";
				}
			/******************************* END ********************************/
		?>  
                     <form method="post" name="registerform" id="regform" action="./?status=register&/Account/SignUp">
                                <div class="form-group">
                                    <label class="form-label" for="UserName">Surname</label>
  <input class="form-control" placeholder="Surname" type="text" id="sname" name="sname" required>
                                </div>
                                <div class="form-group">
                                    <label class="form-label" for="UserName">First Name</label>
  <input class="form-control" placeholder="First Name" type="text" id="fname" name="fname" required>
                                </div>
                                <div class="form-group">
                                    <label class="form-label" for="Password">Other Names</label>
       <input class="form-control" placeholder="Other Names (Optional)" type="text" id="oname" name="oname">
                                </div>
                                <div class="form-group">
                                    <label class="form-label" for="username">Matric Number</label>
       <input class="form-control" placeholder="Matric Number" type="text" id="matno" name="matno" required>
       <p id="errDivcheckUsername" class="hide"></p>
					<div class="clear"></div>
                                </div>
                                 <div class="form-group">
                                    <label class="form-label" for="email">Email</label>
       <input class="form-control" placeholder="Email Address" type="email" id="email" name="email" required>
       <p id="errDivcheckEmail" class="hide"></p>
					<div class="clear"></div>
                                </div>
                                
                                <div class="form-group">
                                    <label class="form-label" for="email">Phone</label>
       <input class="form-control" placeholder="Phone Number" type="text" id="phone" name="phone" required>
       <p id="errDivcheckEmail" class="hide"></p>
					<div class="clear"></div>
                                </div>
                                
                                <div class="form-group">
                                    <label class="form-label" for="email">Document Type</label>
       <select name="dtype" class="form-control" required>
         <option selected>--- Select One ---</option>
         <option value="1">Academic Record</option>
         <option value="2">Transcript</option>
       </select>
       <p id="errDivcheckEmail" class="hide"></p>
					<div class="clear"></div>
                                </div>
                                
                                 <div class="form-group">
                                    <label class="form-label" for="Password">Password</label>
       <input class="form-control" placeholder="Password" type="password" id="pass" name="pass" required>
                                </div>
                                <div class="form-group">
                                    <label class="form-label" for="CPassword">Confirm Password</label>
       <input class="form-control" placeholder="Confirm Password" type="password" id="cpass" name="cpass" required>
                                </div>
                                
                               
                              
                                
                                <div class="form-group">
                                    <div class="checkbox">
                                        <label>
       <input type="checkbox" id="agree" name="agree" id="agree" value="1" title="I agree to terms" required/>
                                            I agree with the School <a href="#">Terms &amp; Conditions</a> and <a href="#">Privacy Policy</a>.
                                        </label>
                                    </div>
                                </div>

<div class="form-actions">
					<input class="btn btn-primary mr-3" name="register" value="Register" id="reg" type="submit" />
                    <a href="./?&Account/Login"> <input class="btn btn-secondary" name="back" value="Back" id="back" type="button" /></a>
                                </div>
                              
        
							</form>
                        </div>
                        <div class="login__block__sidebar">
                            
                            <h4 class="login__block__sidebar__title">
                                <strong>School Management Portal</strong>
                                
                            </h4>
                            <div class="login__block__sidebar__item">
                                <p>SMS is an all-encompassing software designed to automate a school’s diverse operations, from student databases, teacher databases, staff, courses, and classes to academic announcements.</p>  
                                 
                            </div>
                            <div class="login__block__sidebar__item">
                                
                            </div>
                            <div class="login__block__sidebar__place">
                                <i class="icmn-location mr-3"></i>
                                SMS
                            </div>

<?php } elseif(($_GET['status'] == 'eactivate')) { ?>  
				<h4 class="text-uppercase">
              <strong>Account Activation</strong>
            </h4>
            <br>

<div id="message3" style="display: none;"></div>
<div id="waiting3" style=" height:auto; display: none;">
  <img src="images/spinner.gif" title="Loader" alt="Loader" align='absbottom' />&nbsp;&nbsp; Activating... please wait!</div>

            <form method="post" name="activateform" id="activateform" action="./?status=eactivate&/Account/EmailActivation">
                <div class="form-group">
                    <label class="form-label" for="Email">Email Address</label>
      <input class="form-control" value="<?php echo $_GET['email']; ?>" placeholder="Enter your registered email address" type="email" id="email" name="email" required>
                </div>
                
                <div class="form-group">
                    <label class="form-label" for="Email">Activation Code</label>
      <input class="form-control" value="<?php echo $_GET['code']; ?>" placeholder="Enter 6 digits activation code sent to your mailbox" type="text" id="acode" name="acode" required>
                </div>

<div class="form-actions">
                <input class="btn btn-primary mr-3" name="activate" value="Activate Account" id="activate" type="button" />
                 <a href="./?&Account/Login">  <input class="btn btn-secondary" name="back" value="Back" id="back" type="button" /></a>
                </div>
                <br>
       
			</form>
          </div>
          <div class="login__block__sidebar">
            <h4 class="login__block__sidebar__title">
              <strong>Account Activation</strong>
                                
                            </h4>
                            
            <div class="login__block__sidebar__item">

</div>
            <div class="login__block__sidebar__place">
              <i class="icmn-location mr-3"></i>
              Activation
            </div>

<?php } elseif(($_GET['status'] == 'uactivate') && isset($_GET['md5'])) { 
$rs_activ = mysqli_query($link,"update default_users set status = '1' where md5 = '$_GET[md5]' and activation_code = '$_GET[code]'"); 
?>  
		<h4 class="text-uppercase">
              <strong>Email Confirmed</strong>
            </h4>
            <br>
           <p><h4>Congratulations!</h4><br>
           Your account has been activated. Click <a href='./?&Account/Login'> here</a> to login.
           </p>
          </div>
          <div class="login__block__sidebar">
            <h4 class="login__block__sidebar__title">
              <strong>Account Activation</strong>
                                
                            </h4>
                            
            <div class="login__block__sidebar__item">

</div>
            <div class="login__block__sidebar__place">
              <i class="icmn-location mr-3"></i>
              Activation
            </div>
                
<?php } else { ?>           
                   <img src="images/banner.png" class="center" style="width:100%" />
				<?php
			/******************** ERROR MESSAGES*************************************************
		  	This code is to show error messages 
		  	**************************************************************************/
			//if(!empty($err))  { 
//				 
//				echo "<div class=\"alert-box alert error\">";
//				foreach ($err as $e) { echo "$e"; }
//				echo "</div>";
//			}
			
			//if(!empty($_GET['msg']))  //id send to address bar
				//{
					//$msg = "Portal account logged out";
					//echo "<div class=\"alert-box alert-confirmation editor\">" . $msg . "</div>";
				//}
				
				//if(!empty($_GET['info'])) //id sendto address bar
//				{
//					$info = "Invalid Login. Please try again with correct username and/or password";
//					echo "<div class=\"alert-box alert error\">" . $info . "</div>";
//				}
			/******************************* END ********************************/
		?>  

<div id="message" style="display: none;"></div>
<div id="waiting" style=" height:auto; display: none;">
  <img src="images/spinner.gif" title="Loader" alt="Loader" align='absbottom' />&nbsp;&nbsp; Authenticating...</div>

                     <form method="post" name="loginform" id="loginform" action="./?&/Account/Login">
                                <div class="form-group">
                                    <label class="form-label" for="UserName">Username</label>
  <input class="form-control" placeholder="Matric No / Staff ID / Email Address" type="text" id="username" name="username" required>
                                </div>
                                <div class="form-group">
                                    <label class="form-label" for="Password">Password</label>
       <input class="form-control password" type="password" placeholder="Password" id="password" name="password" required>
                                </div>
                                <div class="form-group">
                                    <div class="checkbox">
                                        <label>
       <input type="checkbox" id="remember" name="remember" value="1" title="Keep me loged in"/>
                                            Remember me
                                        </label>
                                    </div>
                                </div>
                                <div class="form-actions">
					<input class="btn btn-primary mr-3" name="login" value="Login" id="login" type="submit" />
                 <a href="./?status=reset&/Account/ForgotPassword"> <input class="btn btn-danger" name="register" value="Forgot your password?" id="register" type="button" /></a>
                                </div>
                                <br>
                <p> <a href="./?status=register&/Account/SignUp" title="Click here to sign up"> Sign Up</a> for Transcript/Academic record verification
                            
                              </p>       
                               
							</form>
                        </div>
                        <div class="login__block__sidebar">
                            
                            <h4 class="login__block__sidebar__title">
                                <strong>School Management System (SMS)</strong>
                                
                            </h4>
                            <div class="login__block__sidebar__item">
                                <p>SMS is an all-encompassing software designed to automate a school’s diverse operations, from student databases, teacher databases, staff, courses, and classes to academic announcements. </p>  
                                 
                            </div>
                            <div class="login__block__sidebar__item">
                                
                            </div>
                            <div class="login__block__sidebar__place">
                                <i class="icmn-location mr-3"></i>
                                SMS
                            </div>
               		<?php } ?>
                        </div>
                    </div>
                </div>
            </div>
        </div>
      
    </div>
    
</body>
</html>

Batal

⬅ Naik ke coemyoza 14 item

Nama	Tipe	Ukuran	Diubah	Aksi
📁admins	dir	—	2024-08-05 08:03	📂 Buka
📁css	dir	—	2024-07-31 12:15	📂 Buka
📁db	dir	—	2024-07-31 12:16	📂 Buka
📁fps	dir	—	2024-08-07 10:17	📂 Buka
📁images	dir	—	2024-07-31 12:16	📂 Buka
📁js	dir	—	2024-07-31 12:17	📂 Buka
📁record_verification	dir	—	2024-08-05 08:08	📂 Buka
📁students	dir	—	2024-08-05 07:57	📂 Buka
📁transcript_application	dir	—	2024-08-05 08:37	📂 Buka
📄.htaccess	htaccess	42 B	2026-01-13 23:23	✏️ Edit 👁️ View
🌐head.html	html	1.7 KB	2024-07-31 12:15	✏️ Edit 👁️ View
🐘index.php	php	23.7 KB	2024-07-31 12:15	✏️ Edit 👁️ View
🐘logout.php	php	400 B	2024-07-31 12:15	✏️ Edit 👁️ View
🐘timeout.php	php	409 B	2024-07-31 12:15	✏️ Edit 👁️ View