<?php
// Start a session with a unique name to isolate it for your CRM website
require('security.php');
// Include your database connection
require('connection.inc.php');
// Set session cookie domain for your specific website
ini_set('session.cookie_domain', 'digitalcardwale.com');
// Set error reporting to display errors
error_reporting(E_ALL);
ini_set('display_errors', 1);
// Generate CSRF token if not set
if (empty($_SESSION['csrf_token'])) {
$_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}
// Handle the login process when the form is submitted
if (isset($_POST['submit'])) {
// Check CSRF token
if (!isset($_POST['csrf_token']) || $_POST['csrf_token'] !== $_SESSION['csrf_token']) {
echo "
<script src='https://cdn.jsdelivr.net/npm/sweetalert2@11'></script>
<script>
document.addEventListener('DOMContentLoaded', function() {
Swal.fire({
icon: 'error',
title: 'Security Warning',
text: 'Invalid CSRF token. Please try again.',
});
});
</script>
";
exit();
}
// Sanitize user input
$email = mysqli_real_escape_string($conn, $_POST['email']);
$password = mysqli_real_escape_string($conn, $_POST['password']);
// Query the database to find the user with the provided email
$query = "SELECT * FROM users WHERE email = '$email' AND deleted_at IS NULL";
$result = mysqli_query($conn, $query);
// Check if the user exists
if ($result && mysqli_num_rows($result) > 0) {
$user = mysqli_fetch_assoc($result);
// Verify the password (assuming password is hashed in the database)
if (password_verify($password, $user['password'])) {
// Set session variables after successful login
$_SESSION['user_id'] = $user['user_id'];
$_SESSION['username'] = $user['username'];
$_SESSION['email'] = $user['email'];
$_SESSION['role_id'] = $user['role_id'];
unset($_SESSION['csrf_token']);
// Redirect to the CRM dashboard or homepage
header('Location: dashboard.php'); // Change this to your dashboard URL
exit();
} else {
// Incorrect password
echo "
<script src='https://cdn.jsdelivr.net/npm/sweetalert2@11'></script>
<script>
document.addEventListener('DOMContentLoaded', function() {
Swal.fire({
icon: 'error',
title: 'Oops...',
text: 'Invalid password. Please try again.',
});
});
</script>
";
}
} else {
// User not found
echo "
<script src='https://cdn.jsdelivr.net/npm/sweetalert2@11'></script>
<script>
document.addEventListener('DOMContentLoaded', function() {
Swal.fire({
icon: 'error',
title: 'Oops...',
text: 'No user found with that email address.',
});
});
</script>
";
}
}
?>
<!DOCTYPE html>
<html lang="zxx">
<!-- Mirrored from demo.dashboardpack.com/user-management-html/login.html by HTTrack Website Copier/3.x [XR&CO'2014], Mon, 02 Dec 2024 05:54:52 GMT -->
<head>
<!-- Required meta tags -->
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />
<title>Management Admin</title>
<link rel="icon" href="../assets/img/allnew/logo.png" type="image/png">
<!-- Bootstrap CSS -->
<link rel="stylesheet" href="css/bootstrap1.min.css" />
<!-- themefy CSS -->
<link rel="stylesheet" href="vendors/themefy_icon/themify-icons.css" />
<link rel="stylesheet" href="vendors/font_awesome/css/all.min.css" />
<!-- datatable CSS -->
<!-- scrollabe -->
<link rel="stylesheet" href="vendors/scroll/scrollable.css" />
<!-- menu css -->
<link rel="stylesheet" href="css/metisMenu.css">
<!-- style CSS -->
<link rel="stylesheet" href="css/style1.css" />
<link rel="stylesheet" href="css/colors/default.css" id="colorSkinCSS">
<style>
.main_content{
padding-left: 0px !important;
}
.footer_part{
padding-left: 0px !important;
}
</style>
</head>
<body class="crm_body_bg">
<section class="main_content dashboard_part large_header_bg">
<div class="main_content_iner ">
<div class="container-fluid p-0">
<div class="row justify-content-center">
<div class="col-12">
<div class="dashboard_header mb_50">
<div class="row">
<div class="col-lg-6">
<div class="dashboard_header_title">
<h3>Dashboard</h3>
</div>
</div>
<div class="col-lg-6">
<div class="dashboard_breadcam text-end">
<p><a href="dashboard.php">Dashboard</a> <i class="fas fa-caret-right"></i> login</p>
</div>
</div>
</div>
</div>
</div>
<div class="col-lg-12">
<div class="white_box mb_30">
<div class="row justify-content-center">
<div class="col-lg-6">
<!-- sign_in -->
<div class="modal-content cs_modal">
<div class="modal-header justify-content-center theme_bg_1">
<h5 class="modal-title text_white">Log in</h5>
</div>
<div class="modal-body">
<form method="post" action="">
<?php
if (empty($_SESSION['csrf_token'])) {
$_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}
?>
<input type="hidden" name="csrf_token" value="<?php echo $_SESSION['csrf_token']; ?>">
<div class="">
<input type="text" name="email" class="form-control" placeholder="Enter your email" required>
</div>
<div class="">
<input type="password" name="password" class="form-control" placeholder="Password" required>
</div>
<button name="submit" class="btn_1 full_width text-center">Log in</button >
<!-- <p>Need an account? <a data-toggle="modal" data-target="#sing_up" data-dismiss="modal" href="#"> Sign Up</a></p> -->
<div class="text-center">
<a href="forgot_pass.php" data-toggle="modal" data-target="#forgot_password" data-dismiss="modal" class="pass_forget_btn">Forget Password?</a>
</div>
</form>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<!-- footer part -->
<?php require('footer.inc.php'); ?>
</section>
<!-- main content part end -->
<!-- footer -->
<!-- jquery slim -->
<script src="js/jquery1-3.4.1.min.js"></script>
<!-- popper js -->
<script src="js/popper1.min.js"></script>
<!-- bootstarp js -->
<script src="js/bootstrap1.min.js"></script>
<!-- sidebar menu -->
<script src="js/metisMenu.js"></script>
<!-- scrollabe -->
<script src="vendors/scroll/perfect-scrollbar.min.js"></script>
<script src="vendors/scroll/scrollable-custom.js"></script>
<!-- custom js -->
<script src="js/custom.js"></script>
</body>
<!-- Mirrored from demo.dashboardpack.com/user-management-html/login.html by HTTrack Website Copier/3.x [XR&CO'2014], Mon, 02 Dec 2024 05:54:52 GMT -->
</html>