Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


 
session_start();
session_destroy();
session_start();
session_regenerate_id();
$sessionid = session_id();
include ("db/db_connect.php");
date_default_timezone_set('Asia/Calcutta'); 
$ipaddress = $_SERVER["REMOTE_ADDR"];
$updatedatetime = date('Y-m-d H:i:s');
$todaydate = date('Y-m-d');

//Variable Declaration
$errmsg = '';
$totalclosingcash = '';

if (isset($_REQUEST["frmflag1"])) { $frmflag1 = $_REQUEST["frmflag1"]; } else { $frmflag1 = ""; }
//$frmflag1 = isset($_POST["frmflag1"]);
if ($frmflag1 == 'frmflag1')
{
	$username = $_POST["username"];
	$password = $_POST["password"];
	
	//$query1 = "select * from master_usercreation where username = '$username' and password = '$password'";
	$query1 = "select * from master_employee where username = '$username' and password = '$password' and status = 'ACTIVE'";
	$exec1 = mysql_query($query1) or die ("Error in Query1".mysql_error());
	$rowcount1 = mysql_num_rows($exec1);
	if ($rowcount1 == 0)
	{
		header ("location:login1.php?st=1");
	}
	else
	{
		$res1 = mysql_fetch_array($exec1);
		$_SESSION["username"] = $username;
		$_SESSION["logintime"] = $updatedatetime;	 
		
		$query2 = "insert into details_login (username, logintime, openingcash, 
		lastupdate, lastupdateipaddress, lastupdateusername, sessionid) 
		value ('$username', '$updatedatetime', '$totalclosingcash', 
		'$updatedatetime', '$ipaddress', '$username', '$sessionid')";
		$exec2 = mysql_query($query2) or die ("Error in Query2".mysql_error());
		
		$query4 = "delete from login_restriction where username = '$username'";
		$exec4 = mysql_query($query4) or die ("Error in Query4".mysql_error());
		
		$query3 = "insert into login_restriction (username, logintime, 
		lastupdate, lastupdateipaddress, lastupdateusername, sessionid) 
		value ('$username', '$updatedatetime', 
		'$updatedatetime', '$ipaddress', '$username', '$sessionid')";
		$exec3 = mysql_query($query3) or die ("Error in Query3".mysql_error());
		
		$query1 = "select count(auto_number) as countanum from login_restriction";
		$exec1 = mysql_query($query1) or die ("Error in Query1".mysql_error());
		$res1 = mysql_fetch_array($exec1);
		$logincount = $res1["countanum"];
		
		$query2 = "select * from master_edition where status = 'ACTIVE'";
		$exec2 = mysql_query($query2) or die ("Error in Query2".mysql_error());
		$res2 = mysql_fetch_array($exec2);
		$res2usercount = $res2["users"];
		
		if ($logincount > $res2usercount)
		{
			//echo 'inside if';
			header ("location:login1restricted1.php");
			exit;
		}
		
		
		//header ("location:mainmenu1.php?st=1");
		header ("location:setactivecompany1.php");
	}

}


if (isset($_REQUEST["st"])) { $st = $_REQUEST["st"]; } else { $st = ""; }
//$st = isset($_REQUEST["st"]);
if ($st == 1)
{
	$errmsg = "Login Failed. Please Try Again With Proper User Id and Password.";
}




© 2023 Quttera Ltd. All rights reserved.