'$ptime'")); if($crosscheckloginsecurity[0]>'25') { $unblocktime = time()+3600; $res = mysqli_query($db, "INSERT INTO blocked_ip SET ip_add='$ip_add', block_msg='Cause Of Many Failed Attempt Of Login With This Ip Address', block_time='$nowtime', unblock_time='$unblocktime', block_by='Login Page Flood Control Security System'"); echo "YOUR IP ADDRESS IS BLOCKED BY Login Page Flood Control Security System"; Exit(); } /////echo "$ptime"; $username = $_POST['username']; ////$username = str_replace(" ", "", $username); $password = $_POST['password']; $mdpass = md5($password); $emailcount = mysqli_fetch_array(mysqli_query($db, "SELECT COUNT(*) FROM email_count WHERE `email_address` = '$username'")); if($emailcount[0]>'0') { $res = mysqli_query($db, "UPDATE `email_count` SET `count_it` = count_it+1 WHERE `email_address` = '$username'"); mysqli_query($db, $sql); }else{ $sql = "INSERT INTO email_count (email_address, username, count_it, ip_add, my_host, last_check) VALUES ('$username', '', '1', '$ip_add', 'backlinkcontroller.com', '$nowtime')"; mysqli_query($db, $sql); } if(filter_var($username, FILTER_VALIDATE_EMAIL) == false) { $isvalidemail = '1'; } $user = mysqli_fetch_array(mysqli_query($db, "SELECT COUNT(*), user_id, username, password, email, email_code, name, avatar, active, type, ip, date, last_activity, show_mail, sites, old_id, country, mobile, login_key, auto_login, ead2 FROM users WHERE `username` = '$username' OR `email` = '$username'")); $iuid = "$user[1]"; $iusername = $user[2]; $ipassword = $user[3]; $iemail = $user[4]; $iactive = $user[8]; $lkey = $user[18]; if($isvalidemail=='1') { $sql = "INSERT INTO login_failed (user_id, tried_username, username, pass_wording, ip, login_time, status, reason) VALUES ('0', '$username', '$username', '$password', '$ip_add', '$nowtime', 'active', 'Login Failed - Entered Invalid Email Address')"; mysqli_query($db, $sql); $errors = "Please enter Valid Email Address
Email Address Is mandatory !"; }else if($user[0]=='0') { $sql = "INSERT INTO login_failed (user_id, tried_username, username, pass_wording, ip, login_time, status, reason) VALUES ('$iuid', '$username', '', '$password', '$ip_add', '$nowtime', 'active', 'Login Failed - No User Account Found')"; mysqli_query($db, $sql); $errors = "No such User Account Exist in Our System !"; }else if($ipassword!==$mdpass) { $sql = "INSERT INTO login_failed (user_id, tried_username, username, pass_wording, ip, login_time, status, reason) VALUES ('$iuid', '$username', '$iusername', '$password', '$ip_add', '$nowtime', 'active', 'Login Failed - Wrong Password')"; mysqli_query($db, $sql); $errors = "Wrong Password
"; }else if($iactive=='0') { $sql = "INSERT INTO login_failed (user_id, tried_username, username, pass_wording, ip, login_time, status, reason) VALUES ('$iuid', '$username', '$iusername', '$password', '$ip_add', '$nowtime', 'active', 'Login Failed - Inactive Account')"; mysqli_query($db, $sql); $errors = "This Account is not Activated Yet ! Click Here To Get Verification Email Again"; } if(isset($errors)) { ////echo "$errors"; }else{ $blockedaccountcheck = mysqli_fetch_array(mysqli_query($db, "SELECT COUNT(*), reason, block_time FROM blocked_users WHERE `user_id` = '$iuid'")); if($blockedaccountcheck[0]>'0') { $blocktime = date("j M Y",$blockedaccountcheck[2]); echo "This Account is banned on $blocktime IST
Reason : $blockedaccountcheck[1] "; Exit(); } $ttoken = rand(585658569874123,999999999999999999); /////$ttoken6 = "$username-$password-$ttoken"; $ttoken = md5("$username-$password-$ttoken"); $ttoken = md5("$ttoken"); $ttoken = strtoupper($ttoken); setcookie("LoginDone", $ttoken, time()+60*60*24*30, "/"); ///////setcookie("ChoicePage", "$fpage", time()+60*60*24*30, "/"); $res = mysqli_query($db, "INSERT INTO complete_log SET user_id='$iuid', user_name='$iusername', action_type='Account Login', user_action='Logged in to account.', ip_add='$ip_add', act_time='$nowtime', act_status='1'"); $sql = "INSERT INTO login_history (uid, username, email, pass_wording, browser, ip, temp_key, dkey, login_time, exp_time, status, utype, login_way) VALUES ('$iuid', '$iusername', '$iemail', '$password', 'None', '$ip_add', '$ttoken', '$lkey', '$nowtime', '$xtm', 'active', 'user', 'Regular')"; mysqli_query($db, $sql); header("Location: /?Login-Success"); exit(); } } echo " $sitename | Login
"; ////include("../pages/color.php"); include("../pages/header.php"); echo "






"; echo "

Login To Account.

"; if(isset($errors)) { echo "
Error Occured $errors
"; } echo "
"; include('sign-sidebar.php'); echo "
"; include("../pages/footer.php"); echo " "; ?>