1#@!#!123s

: / home / diafrica / result.dominicaninstitute.org /
Filename : login4.php
back
<?php session_start();

if(isset($_POST['pas']) && isset($_POST['use'])){

unset($temp);
if(isset($_POST['pas'])){
$_POST['pas']=trim($_POST['pas']);
if(preg_match('/^[a-zA-Z0-9^$.*+\[\]{,}]/u',$_POST['pas'])) $temp=$_POST['pas'];
}
if(!isset($temp)){echo "Sorry! Wrong Data!"; exit();}

$pas = $temp;

unset($temp);
if(isset($_POST['use'])){
$_POST['use']=trim($_POST['use']);
if(preg_match('/^[a-zA-Z0-9^$.*+\[\]{,}]/u',$_POST['use'])) $temp=$_POST['use'];
}
if(!isset($temp)){echo "Sorry! Wrong Data!"; exit();}

$use = $temp;

$_POST['pas'] = "";
$_POST['use'] = "";

include("Connecter/dataconn.php");

$query_rsdirectory = sprintf("select * from programmes where username = '%s' and passwrd = '%s' and archived='No'",
								mysql_real_escape_string($use),
								mysql_real_escape_string($pas));
$result=mysql_query($query_rsdirectory,$csn);
if (!$result){
echo ("<p>Error retrieving data: " . mysql_error() . "</p>");
exit();
}
$row = mysql_fetch_assoc($result);
$num = mysql_num_rows($result);
if ($num != 0){
$acc="examofficeroftheuniversity2015byto";
$yto=$row['sn'];

$_SESSION["yto"] = $row['sn'];
$_SESSION["acc"] = "examofficeroftheuniversity2015byto";
//session_register("acc","yto");
Header("Refresh: 0; url=doff.php");
exit();
} else {
include("officer.php");
}




} else {
include("officer.php");
}
?>