invisio v2.0

require("config/main_function.php");

$secure = "cAh3DrJACzw4RbU";

$connection = connectDB($secure);

if ($connection) {
    $username = mysqli_real_escape_string($connection, $_POST['username']);
	$password = mysqli_real_escape_string($connection, md5($_POST['password']));

echo $sql = "SELECT * FROM tbl_admin WHERE username = '$username';";
    $rs = mysqli_query($connection, $sql) or die($connection->error);
    $row = mysqli_fetch_array($rs);
    /*  1  secure_text , secure_pointer  */
    $secure_text = $row['secure_text'];
    $secure_pointer = $row['secure_pointer'];
    $mypassword = stringInsert($password, $secure_text, $secure_pointer);
    //if ($row['login_status'] == '0') {
    
    if ($mypassword == $row['password']) {
        $key = randomCode(10); // กุญแจ
        $pointer = rand(0, 9);
        // เอา Member_id เข้า Encode ก่อน
        $step_1 = bigsara_encode($row['admin_id'], $key, $pointer); //Login Code
        // เอา Login Code ต่อคำกับ $step 1 
        $login_code = $step_1 . "." . $key;
        $arr['login_code'] = $login_code;
        $arr['menu_access'] = $row['menu_access'];
        $arr['admin_name'] = $row['admin_name'];
        $_SESSION['menu_access'] = $row['menu_access'];
        $_SESSION['login_code'] = $login_code;

?>
        <input type="text" name="admin_id" id="admin_id" value="<?php echo $row['admin_id']; ?>">
        <input type="text" name="menu_access" id="menu_access" value="<?php echo $row['menu_access']; ?>">
        <input type="text" name="admin_name" id="admin_name" value="<?php echo $row['admin_name']; ?>">
        <script>
            $(document).ready(function() {
                localStorage.setItem("admin_id", $("#admin_id").val());
                localStorage.setItem("menu_access", $("#menu_access").val());
                localStorage.setItem("admin_name", $("#admin_name").val());
            });
        </script>
<?php

header("Location: https://efa-member.com/backoffice/index_setting_member");
    } else {
        header("Location: https://efa-member.com/join");
    }
} else {
    header("Location: https://efa-member.com/join");
}