require_once('../connection/mlsMain.php');
session_start();
$grabShow = $_GET['show'];
$grabT = $_GET['t'];
$grabM = $_GET['m'];
$findUser = $_SESSION['MM_Username'];
if (isset($_SESSION['redirectPage'])) {
$redirectTo = $_SESSION['redirectPage'];
} else {
$redirectTo = "clients/welcome";
}
// Establish Form Actions
$loginFormAction = $_SERVER['PHP_SELF'];
if (isset($_GET['accesscheck'])) {
$_SESSION['PrevUrl'] = $_GET['accesscheck'];
}
$editFormAction = $_SERVER['PHP_SELF'];
if (isset($_SERVER['QUERY_STRING'])) {
$editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
}
// *** Validate request to login to this site.
if (isset($_POST['log_user'])) {
$loginUsername=$_POST['log_user'];
$password=$_POST['log_pass'];
$MM_fldUserAuthorization = "";
$MM_redirectLoginSuccess = "$redirectTo";
$MM_redirectLoginFailed = "features?show=fail";
$MM_redirecttoReferrer = false;
$LoginRS__query=sprintf("SELECT user_email, user_pass FROM user_data WHERE user_email='$loginUsername' AND user_pass=SHA2('$password', 512)");
$LoginRS = mysqli_query($mlsMain, $LoginRS__query) or die(mysqli_error());
$loginFoundUser = mysqli_num_rows($LoginRS);
if ($loginFoundUser) {
$loginStrGroup = "";
if (PHP_VERSION >= 5.1) {session_regenerate_id(true);} else {session_regenerate_id();}
//declare two session variables and assign them
$_SESSION['MM_Username'] = $loginUsername;
$_SESSION['MM_UserGroup'] = $loginStrGroup;
if (isset($_SESSION['PrevUrl']) && false) {
$MM_redirectLoginSuccess = $_SESSION['PrevUrl'];
}
header("Location: " . $MM_redirectLoginSuccess );
}
else {
header("Location: ". $MM_redirectLoginFailed );
}
}
// Add A New User
if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "addForm")) {
$grabFirst = $_POST['user_first'];
$grabLast = $_POST['user_last'];
$grabPhone = $_POST['user_phone'];
$grabEmail = $_POST['user_email'];
$grabPass = $_POST['user_pass'];
$redirectSuccess = "features?show=success";
$redirectExist = "features?show=noReg";
$redirectFailed = "features?show=problem";
// Run Check To Seee If User Exists
$query_rsCheckUser = "SELECT user_id, user_email
FROM user_data
WHERE user_email = '".$grabEmail."'";
$r_CheckUser = mysqli_query($mlsMain, $query_rsCheckUser);
$row_rsCheckUser = mysqli_fetch_array($r_CheckUser, MYSQLI_ASSOC);
$totalRows_rsCheckUser = mysqli_num_rows($r_CheckUser);
if ($totalRows_rsCheckUser > '0') { // Email already exists
header("Location: " . $redirectExist );
} else {
$insertSQL = "INSERT INTO user_data (user_first, user_last, user_phone, user_email, user_pass) VALUES ('$grabFirst', '$grabLast', '$grabPhone', '$grabEmail', SHA2('$grabPass', 512))";
if (mysqli_query($mlsMain, $insertSQL)) {
header("Location: " . $redirectTo );
} else {
header("Location: " . $redirectFailed );
}
}
}
$query_rsUser = "SELECT user_id, user_email
FROM user_data
WHERE user_email = '".$findUser."'";
$r_User = mysqli_query($mlsMain, $query_rsUser);
$row_rsUser = mysqli_fetch_array($r_User, MYSQLI_ASSOC);
$totalRows_rsUser = mysqli_num_rows($r_User);
$getUserId = $row_rsUser['user_id'];
$query_rsSave = "SELECT user_id, mls_id
FROM save_list
WHERE user_id = '".$getUserId."' AND mls_id > '0'";
$r_Save = mysqli_query($mlsMain, $query_rsSave);
$row_rsSave = mysqli_fetch_array($r_Save, MYSQLI_ASSOC);
$totalRows_rsSave = mysqli_num_rows($r_Save);
if ($totalRows_rsUser > '0') {
$insertGoTo = "/clients/welcome";
header(sprintf("Location: %s", $insertGoTo));
}
// send email if user forgot password
if ((isset($_POST["MM_insert2"])) && ($_POST["MM_insert2"] == "reqPassForm")) {
$to = $_POST['req_user'];
$query_rsUser = "SELECT user_id, user_email
FROM user_data
WHERE user_email = '$to'";
$r_User = mysqli_query($mlsMain, $query_rsUser);
$row_rsUser = mysqli_fetch_array($r_User, MYSQLI_ASSOC);
$totalRows_rsUser = mysqli_num_rows($r_User);
$grabId = $row_rsUser['user_id'];
$checkUser = $row_rsUser['user_email'];
$grabUser = $row_rsUser['user_email'];
$grabFrom = "info@solituderealty.com";
$resetLink = "https://solituderealty.com/loginReset?uId=$grabId";
$from = $grabFrom;
$subject = "Password Request";
$body = "
Please click on the link below to reset your password:
Username: $grabUser
Click Here To Reset Your Password
";
$headers = "MIME-Version: 1.0\r\n";
$headers .= "Content-type: text/html; charset=utf-8\r\n";
$headers .= "From: Solitude Realty <" . $from . ">\r\n";
if ($checkUser) {
mail($to, $subject, $body, $headers);
$_SERVER['QUERY_STRING'] = "";
$insertGoTo = "features?show=req";
if (isset($_SERVER['QUERY_STRING'])) {
$insertGoTo .= (strpos($insertGoTo, '?')) ? "&" : "?";
$insertGoTo .= $_SERVER['QUERY_STRING'];
}
header(sprintf("Location: %s", $insertGoTo));
} else {
$_SERVER['QUERY_STRING'] = "";
$insertGoTo = "features?show=notFound";
if (isset($_SERVER['QUERY_STRING'])) {
$insertGoTo .= (strpos($insertGoTo, '?')) ? "&" : "?";
$insertGoTo .= $_SERVER['QUERY_STRING'];
}
header(sprintf("Location: %s", $insertGoTo));
}
}
?>
Solitude Lake Tahoe Real Estate Brokerage | Find Your Solitude
include("includes/header.php"); ?>
Register or Login To Proceed
if ($grabShow == "loginNeeded") { ?>
In Order To Save Listings You Must First Login / Register With Our Website
} else if ($grabShow == "fail") { ?>
Sorry, That Information Is Not Listed With Our Site
Please Click Here To Request Your Password Or Try To Login Again
} else if ($grabShow == "noReg") { ?>
Sorry, That Information Is Already Listed With Our Site
Please Click Here To Request Your Password Or Try To Login
} else if ($grabShow == "problem") { ?>
Sorry, We Had An Error With Your Registration
Please Try To Login Or Call Us At 530-318-0411 To Register
} else if ($grabShow == "req") { ?>
Please Check Your Email. This May Take A Few Minites
Use The Link In Your Email To Reset Your Password
} else if ($grabShow == "success") { ?>
PASSWORD RESET! Please Login To Continue
} else if ($grabShow == "notFound") { ?>
Sorry, We Do Not Have That Email Address Listed With Our Website
Please Register Using The Form Below
} ?>
if ($grabShow == "fail") { ?>
Use the form below to request your password.
Try To Login Again
} else { ?>
} ?>
/* free result set & close connection */
mysqli_free_result($result);
mysqli_close($mlsMain);
?>