Ultra File Manager

Edit: /home/u523034047/domains/gmcrudrapur.com/public_html/admin/index.php

<?php
include('conn.php');
$msg = "";

if ($_SERVER["REQUEST_METHOD"] == "POST" && isset($_POST['login'])) {
    $email = trim($_POST['Email']);
    $password = md5(trim($_POST['Password'])); // Hash password using MD5

// Use prepared statements to prevent SQL injection
    $stmt = $connection->prepare("SELECT * FROM login WHERE email = ? AND password = ?");
    $stmt->bind_param("ss", $email, $password);
    $stmt->execute();
    $result = $stmt->get_result();

if ($result && $result->num_rows > 0) {
        session_start();
        $_SESSION['username'] = $email;
        header('Location: dashboard.php');
        exit();
    } else {
        $msg = "Invalid email or password.";
    }

$stmt->close();
}
?>
<!DOCTYPE html>
<html lang="en">
<head></head>
<title>Admin</title>

<meta name="viewport" content="width=device-width, initial-scale=1">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="keywords" content="" />
<script type="application/x-javascript"> addEventListener("load", function() { setTimeout(hideURLbar, 0); }, false);
function hideURLbar(){ window.scrollTo(0,1); } </script>


<link href="css/style.css" rel="stylesheet" type="text/css" media="all">

<link href="//fonts.googleapis.com/css?family=Roboto+Slab:100,300,400,700Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900iSlabo+27px&subset=cyrillic,cyrillic-ext,greek,greek-ext,latin-ext,vietnamese" rel="stylesheet">

<body>

<div class="agileheader">    
	<h1>Admin Panel</h1>
</div>

<div class="main-w3l">
<div class="w3layouts-main">
	<h2>Login Now</h2>
	<p style="color:orange;"><?php echo $msg;?></p>
		<form action="" method="post">

<div class="footer-w3l">
	  2017</a>
</div>

</body>
</html>

Ukuran: 2.4 KB