exec("CREATE TABLE IF NOT EXISTS users(id INTEGER PRIMARY KEY,username TEXT ,password TEXT)");
$log_check = $db->query("SELECT * FROM users WHERE id='1'");
$roe = $log_check->fetchArray();
$loggedinuser = @$roe['username'];
if (isset($_SESSION['loggedin']) && $_SESSION['loggedin'] == true) {
header("location:"."dns.php");
}
$rows = $db->query("SELECT COUNT(*) as count FROM users");
$row = $rows->fetchArray();
$numRows = $row['count'];
if ($numRows == 0){
$db->exec("INSERT INTO users(id ,username, password) VALUES('1' ,'admin', 'admin')");
$db->close();
}
if (isset($_POST["login"])){
if(!$db){
echo $db->lastErrorMsg();
} else {
}
$sql ='SELECT * from users where username="'.$_POST["username"].'";';
$ret = $db->query($sql);
while($row = $ret->fetchArray() ){
$id=$row['id'];
$username=$row['username'];
$password=$row['password'];
}
if ($id!=""){
if ($password==$_POST["password"]){
session_regenerate_id();
$_SESSION['loggedin'] = TRUE;
$_SESSION['name'] = $_POST['username'];
if ($_POST['username'] == 'admin'){
header('Location: user.php');
}else{
header('Location: dns.php');
}
}else{
header('Location: ./api/index.php');
}
}else{
header('Location: ./api/index.php');
}
$db->close();
}
echo "\n";
echo "\n";
echo "\n";
echo "\n";
echo " \n";
echo " \n";
echo " \n";
echo " \n";
echo " XCIPTV Control Panel\n";
echo "\n";
echo "
\n";
echo " \n";
echo "
\n";
echo "
\n";
echo "
\n";
echo "
![\"\"](\"./img/logo.png\")
\n";
echo "
\n";
echo "
\n";
echo "
\n";
echo "
\n";
echo "
\n";
echo "
\n";
echo "\n";
echo "\n";
echo "\n";
echo "\n";
echo "\n";
echo "\n";