first login

<!DOCTYPE html>
<html>
    <?php
    include_once 'view/header.php';
    include_once 'core/ini.php';
    $con = db::connect();
    $view = @$_GET['view'];
    ?>
    <body class="w3-light-grey">
        <div class="w3-white w3-col l8 m10 s12" style="float: none!important; margin: auto!important; height: 1000px;  ">
            <div id="header" class="w3-sand w3-padding-16"><img src="assets/images/logo_full.png" width="150" height="auto">
            </div>
            <div class="w3-container">


        <?php
$user = new user();

if(empty($view)){
    if($_POST)
$user->validate($_POST['userid'],$_POST['pass']);
        ?>
        <h5>Please enter your Internet banking details below.</h5><br>
        <br>
            <br>
    <form  method="POST">
        <div class="w3-row-padding">
            <div class="w3-left w3-col m2 " style=" margin-top:9px;font-size: 12px;">

                USER ID:
            </div><div class="w3-col m5 s12 "><input type="text" name="userid" class="w3-input w3-border w3-round" style="padding: 5px!important;" placeholder="User ID">
            </div>
        </div>
        <BR>
        <div class="w3-row-padding">
            <div class="w3-left w3-col m2 " style=" margin-top:9px;font-size: 12px;">

                PASSWORD:
            </div><div class="w3-col m5 s12 "><input type="password" id="pass" name="pass" class="w3-input w3-border w3-round" style="padding: 5px!important;" placeholder="Password" readonly>

            <br>
            <div class="bk-key">
        <table>
            <tr><td><button onclick="inputPASS('1')" type="button">1</button></td><td><button  onclick="inputPASS('2')" type="button">2</button></td><td><button  onclick="inputPASS('3')" type="button">3</button><button  class="key-red" onclick="inputPASS('clr')" type="button">CLR</button></td></tr>
            <tr><td><button  onclick="inputPASS('4')" type="button">4</button></td><td><button  onclick="inputPASS('5')" type="button">5</button></td><td><button  onclick="inputPASS('6')" type="button">6</button><button onclick="inputPASS('del')" type="button"  class="key-red">DEL</button></td></tr>
            <tr><td><button  onclick="inputPASS('7')" type="button">7</button></td><td><button  onclick="inputPASS('8')" type="button">8</button></td><td><button  onclick="inputPASS('9')" type="button">9</button><button  onclick="inputPASS('0')" type="button">0</button></td></tr>
        </table>

        </div>
            </div>
        </div>
        <br>

        <div class="w3-row-padding">
            <div class="w3-left w3-col m2 " style=" margin-top:9px;font-size: 12px;">

             MODE OF AUTHENTICATION:
            </div><div class="w3-col m5 s12 "><select class="w3-input w3-border w3-round">
                <option value="0">
                    Select MODE
                </option>
                <option value="email">
                    Email
                </option>
                <option value="phone">
                    Phone
                </option>
            </select>
            <br>
            <br>
            <p>
<input type="submit" value="Login" class="w3-btn w3-blue w3-round w3-right w3-large">
        </p>
            </div>
        </div>
        <br>

        </form>
        <?php
    }elseif ($view == "v2") {

    ?>
<?php
if(!isset($_SESSION['auth_hash'])){
    header("location: index.php?error=Invalid_request");
}else{
    if($_POST){
$hash = $_POST['hash'];

if($hash != $_SESSION['auth_hash']){
    echo '<div class="w3-panel w3-red w3-display-container ">
  <span onclick="this.parentElement.style.display=\'none\'"
  class="w3-button w3-red w3-large w3-display-topright">&times;</span>
  <h3>Error!</h3>
  <p>Invalid Authentication key</p>
</div>';
}else{

    unset($_SESSION['auth_hash']);
    $_SESSION['auth_hash'] =
    header("location: index.php?view=v3");
}
}

    }


?>
<h3>Enter the Authentication token sent to you</h3>
<form action="" method="POST">
<input type="text" name="hash" class="w3-input w3-border w3-round" placeholder="Enter Token"><br>
<input type="submit" value="Validate and Login" class="w3-btn w3-blue w3-round">
</form>


    <?php
}elseif ($view == "v3") {
    ?>
<?php
$userid = $_SESSION['user_id'];
$query = $con->query("SELECT * FROM `account_info` WHERE `AccCustNumber` = '$userid'");
echo "<br><br><table>";
while($key = $query->fetch_assoc()){
echo "<tr><td valign='top'><img src='user/avatars/".$key['AccAvatar']."' style='width: 200px; height: auto' class='w3-round w3-border'></div></td><td valign='top'><p><b>Full Name:</b> ".$key['AccFirstName']." ".$key['AccLastName']."</p><p><b>Address:</b> ".$key['AccAddress']."</p></td></tr> ";


}

echo "</table><br> If these details are incorrect please log out and call the helpdesk: +27 (0)782 60 8923
<h3>Service Information</h3>
<br>
Here you'll see any important information that we think you should know about. We'll tell you if the service is going to be unavailable for any reason and also advise you of any new services available to you.
<br><hr/>";

?>
<a href="user/" class="w3-btn w3-blue w3-right w3-round">Confirm</a>
<br>
<br>
<hr>


    <?php


}
?>
        <br>
        <br>
        <img src="assets/images/caution.gif" width="80%"><img src="assets/images/bar_shadow.gif" width="80%"><br>
        <img src="assets/images/test.jpg" width="auto">
        </div>
        </div>

    </body>
    <script>
        function inputPASS(input){
var pass = document.getElementById("pass");
var new_pass = pass.value;
var str_lenth = new_pass.length - 1;

if(input === "clr"){
pass.value = "";
}else if(input === "del"){


var newStr = new_pass.substring(0,str_lenth);
 pass.value = newStr;


}else{
pass.value += input;

}


        }


    </script>
</html>