LittleDemon WebShell

<?php
if ((!isset($_SESSION['gen256']))  ) {
  echo "<script>
        window.open('login.php','_self');
    </script>";  
}

?>

<script src="js/formd.js"></script>

<?php 
if ($_SESSION['gen256']['role']=='0') {

    $output='';

    $output .= ' <h1>Oopps!! <b>You are not allowed to access this page contact the Camp Commandant Or System Admin</h1>';
    // code...
    echo $output;
}else{

?>

<div class="row">
  
    <div class="col-lg-12">
        <div class="panel panel-default">
            <div class="panel-heading">
                Client Registration
            </div>
            <div class="panel-body">
               
                <form method="post" enctype="multipart/form-data">
                <div class="row">
                    <div class="col-lg-6">

     <div class="form-group">
  <label>First Name:</label>
  <input type="text" class="form-control" name="fname" required>
</div>

  <div class="form-group">
  <label>Other Name:</label>
  <input type="text" class="form-control" name="lname" required>
</div>

<div class="form-group">
    <label>Gender:</label>
    
    <select class="form-control" name="gender" required>
    <option value="">Select Gender</option>   
    <option>Male</option>
    <option>Female</option> 
  </select>

</div>




  
</div>


 <div class="col-lg-6">

    <div class="form-group">
    <label>Contact:</label>
    <input type="text" class="form-control" name="tel">
</div>
<div class="form-group">
    <label>Email:</label>
    <input type="email" class="form-control" name="email">
</div>




<div class="form-group">
    <input type="submit" name="record" class="btn btn-sm btn-success" value="Register">
</div>
</div>


  


<!-- Test Code -->




  
</form>

</div>
<!-- </form> -->
</div>
</div>
</div>
</div>


<script src="js/formd.js"></script>







<?php
include "dbconfig/db.php";
if(isset($_POST['record'])){
    
    $fname = strip_tags($_POST['fname']);
    $lname = strip_tags($_POST['lname']);
    $gender = strip_tags($_POST['gender']);
      
      
    $tel=$_POST['tel'];
     $email=$_POST['email'];
     
// Password
     $pasa='@2020';
     $password=$fname.''.$pasa;
     $pass1=sha1($password);
    $pass2=md5($pass1);

    


     $newfilename="default.png";



// $temp = explode(".", $_FILES["profilepic"]["name"]);

// $newfilename = $_SESSION['xntulumexadmin']['fname']."after".round(microtime(true)) . '.' . end($temp);

// move_uploaded_file($_FILES["profilepic"]["tmp_name"], "profile/" . $newfilename);


 


      // $status='pending';
     
     // $nDate=$_POST['nDate'];

    

    



   



    $sql = "INSERT INTO client(firstname,lastname,gender,contact,email,password,profile) VAlUES('$fname','$lname','$gender','$tel','$email','$pass2','$newfilename')";

    
    mysqli_query($conn,$sql);
   

    echo "<script>alert('User Registered')</script>";

 



// $senderr=$_SESSION['gen256']['fname'];
    $senderr="Ritah";

    $msg="Hello $fname your Mwagalwa Service Online Account has been created to access the portal you will go through https://client.mwagalwaservices.com Your credentials are \n Email: $email \n  Password: $password \n   Please Dont share the above information with anyone else \n This Email is sent by an  AI do not Reply\n $senderr ";

    $headers = "From: ritah@mwagalwaservices.com";
    mail($email,"Welcome to Mwagalwa Service Online System",$msg,$headers);
 





}


?>
<?php }; ?>