Untitled

<?php
include ('includes/config.php');
global $con;

if (isset($_POST['btn-login'])) {

    // Initialize a session:
    session_start();

    $error = array();   //this aaray will store all error messages


    if (empty($_POST['email'])) {   //if the email supplied is empty
        $error[] = 'You forgot to enter  your Email ';
        $msg_error_email= 'You forgot to enter  your Email';
    } else {

            $Email = mysqli_real_escape_string($con, $_POST['email']);
            $Email = stripslashes($Email);
    }

    if (empty($_POST['password'])) {
        $error[] = 'Please Enter Your Password ';
        $msg_error_pass= 'Please Enter Your Password';
    } else {
        $Password = mysqli_real_escape_string($con, md5($_POST['password']));
        $Password = stripslashes($Password);
    }


       if (empty($error))//if the array is empty , it means no error found
    {


        $query_check_credentials = "SELECT * FROM m_admins WHERE (admin_password='$Password' AND admin_email='$Email') AND admin_auth='ACTIVE'";


        $result_check_credentials = mysqli_query($con, $query_check_credentials) or die (mysqli_error($con));

        //if Query is successfull
        if (mysqli_num_rows($result_check_credentials))
        {

            $_SESSION['admin_email']=$Email;    // Initializing Session

            echo "<script>alert('You Logged in Sucessfully... Thanks!!')</script>";
            echo "<script>window.open('index.php','_self')</script>";


        }else
        {

            $msg_error1= 'Either Your Account is inactive or Email address / Password is Incorrect';

        }

    }


}


?>

<!DOCTYPE html>
<html lang="en">

<head>

    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <meta name="description" content="">
    <meta name="author" content="">

    <title>Demo App | Login</title>

</head>

<body>

    <div class="container">
        <div class="row">
            <div class="col-md-4 col-md-offset-4">
                <div style="margin-top:100px; margin-bottom:-50px;">
                    <?php if(isset($_GET['logout'])) {
                            echo '<div class="alert alert-success">
                                <button class="close" data-dismiss="alert">&times;</button>
                                <strong>Thanks ! </strong> You have successfully loged out.. </div> ';
                            }
                    ?>
                </div>

                <div class="login-panel panel panel-default">
                    <div class="panel-heading">
                        <h3 class="panel-title">Please Sign In</h3>
                    </div>
                    <div class="panel-body">
                        <form action="login.php" method="post" role="form">

                    <!-- ========= Sucess/Error will display here =========== -->

                    <?php if(isset($msg_error1)) {
                    echo '<div class="alert alert-danger">
                    <button class="close" data-dismiss="alert">&times;</button>
                    <strong>Sorry ! </strong>' .$msg_error1. '</div> ';
                    } ?>

                                    <?php if(isset($msg_error_email)) {
                                    echo '<div class="alert alert-warning">
                                    <button class="close" data-dismiss="alert">&times;</button>
                                    <strong>' .$msg_error_email. '</strong></div> ';
                                    } ?>

                            <fieldset>
                                <div class="form-group">
                                    <input class="form-control" placeholder="E-mail" name="email" type="email" autofocus>
                                </div>

                                <?php if(isset($msg_error_pass)) {
                                    echo '<div class="alert alert-warning">
                                    <button class="close" data-dismiss="alert">&times;</button>
                                    <strong>' .$msg_error_pass. '</strong></div> ';
                                } ?>

                                <div class="form-group">
                                    <input class="form-control" placeholder="Password" name="password" type="password" value="">
                                </div>
                                <div class="checkbox">
                                    <label>
                                        <input name="remember" type="checkbox" value="Remember Me">Remember Me
                                    </label>
                                </div>
                                <button type="submit" class="btn btn-lg btn-success btn-block" name="btn-login">Login</button>
                            </fieldset>
                        </form>
                    </div>
                </div>
            </div>
        </div>
    </div>

    <!-- jQuery -->
    <script src="login_files/bower_components/jquery/dist/jquery.min.js"></script>

    <!-- Bootstrap Core JavaScript -->
    <script src="login_files/bower_components/bootstrap/dist/js/bootstrap.min.js"></script>

    <!-- Metis Menu Plugin JavaScript -->
    <script src="login_files/bower_components/metisMenu/dist/metisMenu.min.js"></script>

    <!-- Custom Theme JavaScript -->
    <script src="login_files/dist/js/sb-admin-2.js"></script>

</body>

</html>

<?php
include('includes/config.php');
session_start(); // Use session variable on this page. This function must put on the top of page.

if (!isset($_SESSION['admin_email'])) {
    echo "<script>window.open('login.php','_self')</script>";
}

else
{
    global $con;
    date_default_timezone_set('Asia/Kolkata');

    $date = date('Y-m-d H:i:s');
    $user = $_SESSION['admin_email'];
    $ip = $_SERVER['REMOTE_ADDR'];

    $update_last_login="UPDATE m_admins SET admin_status='ONLINE',admin_last_login='$date',active_ip_address='$ip' WHERE admin_email='$user'";

    $update_last_login = mysqli_query($con, $update_last_login) or die (mysqli_error($con));

?>

<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>Demo App | Welcome </title>
    <meta content='width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no' name='viewport'>
    <meta name="description" content="">
    <meta name="keywords" content="">
      </head>
      <body class="skin-black">


        <div class="user-panel">
            <div class="pull-left info">
            <p>Hello,
                <?php if(isset($_SESSION['admin_email'])){
                echo "".ucfirst($_SESSION['admin_name']);
                }
                ?>
            </p>
            </div>
        </div>


</body>
</html>

<?php
}
?>