FM / includes

/home/techb158/workloadmatch.com/includes/

/home/techb158/workloadmatch.com/includes

Name	Size	Mode	Actions
config_loader.php	963	0644	edit dl rm
CSRF_Protect.php	2224	0644	edit dl rm
db_connect.php	568	0644	edit dl rm
error.php	485	0644	edit dl rm
firebase_auth.php	6318	0644	edit dl rm
footer.php	617	0644	edit dl rm
forgetpassword.php	10825	0644	edit dl rm
forgetpassword_Bak.php	7448	0644	edit dl rm
functions.php	31330	0644	edit dl rm
geoiploc.php	2520435	0644	edit dl rm
header.php	1804	0644	edit dl rm
hex.php	1050	0644	edit dl rm
hexbin.php	942	0644	edit dl rm
login_page.php	2993	0644	edit dl rm
logout.php	870	0644	edit dl rm
migrate_last_activity.php	1278	0644	edit dl rm
process_login.php	2119	0644	edit dl rm
psl-config-Bak.php	1213	0644	edit dl rm
psl-config.php	1883	0644	edit dl rm
reset.php	6537	0644	edit dl rm

Edit: /home/techb158/workloadmatch.com/includes/process_login.php (2119B)

<?php

include_once 'db_connect.php';
include_once 'functions.php';

//include("geoiploc.php"); // Must include
sec_session_start(); // Our custom secure way of starting a PHP session.

require_once 'CSRF_Protect.php';
$csrf = new CSRF_Protect();
$csrf->verifyRequest();

// recaptcha disabled for local dev
$ip= get_client_ip(); 
$getCountryFromIP= getCountryFromIP($ip, " NamE ");
if($getCountryFromIP == "Canada")
{
	}else{
//header('Location: ../index.php?err=You need permission to perform this action!'.$getCountryFromIP);
	//exit();
}
if (isset($_POST['email'], $_POST['p'])) {
    $email = filter_input(INPUT_POST, 'email', FILTER_SANITIZE_EMAIL);
    $password = $_POST['p']; // The hashed password.
    
    if (login($email, $password, $mysqli) == true) {
       $user_type= $_SESSION['User_type'];
	if($user_type == "teacher_profile")
	{
	if (isset($_SESSION['Send_Re_ID'])) {	
	$Send_Re_ID= $_SESSION['Send_Re_ID'];
	$Send_number_id= $_SESSION['Send_number_id'];
	$Send_Client_ID= $_SESSION['Send_Client_ID'];
	$Send_Broker_ID= $_SESSION['Send_Broker_ID'];
	$Send_Broker_ID_Receiver= $_SESSION['Send_Broker_ID_Receiver'];
	
	header("Location: " . BASE_URL . "/followup");
		exit();
	}else{
		header("Location: " . BASE_URL . "/dashboard");
		exit();
		
	}
	}else if($user_type == "manager_profile")
	{

header("Location: " . BASE_URL . "/dashboard");
        exit();
	}else if($user_type == "master_profile")
	{
	header("Location: " . BASE_URL . "/dashboard");
        exit();
	}else if($user_type == "admin_profile")
	{
	header("Location: " . BASE_URL . "/dashboard");
        exit();
	}else{
	$_SESSION['flash_error'] = 'Unknown user type';
        header('Location: ' . BASE_URL . '/');
        exit();
	}
    } else {
        // Login failed 
	$_SESSION['flash_error'] = 'Error Logging In!';
        header('Location: ' . BASE_URL . '/');
        exit();
    }
} else {
    // The correct POST variables were not sent to this page. 
    header('Location: ' . BASE_URL . '/error?err=Could not process login');
    exit();
}

verifyRequest(); // recaptcha disabled for local dev $ip= get_client_ip(); $getCountryFromIP= getCountryFromIP($ip, " NamE "); if($getCountryFromIP == "Canada") { }else{ //header('Location: ../index.php?err=You need permission to perform this action!'.$getCountryFromIP); //exit(); } if (isset($_POST['email'], $_POST['p'])) { $email = filter_input(INPUT_POST, 'email', FILTER_SANITIZE_EMAIL); $password = $_POST['p']; // The hashed password. if (login($email, $password, $mysqli) == true) { $user_type= $_SESSION['User_type']; if($user_type == "teacher_profile") { if (isset($_SESSION['Send_Re_ID'])) { $Send_Re_ID= $_SESSION['Send_Re_ID']; $Send_number_id= $_SESSION['Send_number_id']; $Send_Client_ID= $_SESSION['Send_Client_ID']; $Send_Broker_ID= $_SESSION['Send_Broker_ID']; $Send_Broker_ID_Receiver= $_SESSION['Send_Broker_ID_Receiver']; header("Location: " . BASE_URL . "/followup"); exit(); }else{ header("Location: " . BASE_URL . "/dashboard"); exit(); } }else if($user_type == "manager_profile") { header("Location: " . BASE_URL . "/dashboard"); exit(); }else if($user_type == "master_profile") { header("Location: " . BASE_URL . "/dashboard"); exit(); }else if($user_type == "admin_profile") { header("Location: " . BASE_URL . "/dashboard"); exit(); }else{ $_SESSION['flash_error'] = 'Unknown user type'; header('Location: ' . BASE_URL . '/'); exit(); } } else { // Login failed $_SESSION['flash_error'] = 'Error Logging In!'; header('Location: ' . BASE_URL . '/'); exit(); } } else { // The correct POST variables were not sent to this page. header('Location: ' . BASE_URL . '/error?err=Could not process login'); exit(); }