View Confidential Information'; if (!$_SESSION['new-access']) { if (isset($_GET['error']) && $_GET['error'] === true) { echo '

Access Denied.

Invalid username or password.

'; } echo ' '; } else if (isset($_GET['file']) && isset($_SESSION['new-access'])) { echo '

Access Granted.

'; fileRead($_GET['file']); } } function fileRead($file) { $fs = fopen($file, 'r'); $string = fread($fs, filesize($file)); $values = explode('||>><<||', $string); echo ' '; foreach ($values as $v) { list($a, $b) = explode(',', $v); echo ' '; } echo '

Agent	Codename
' . ucfirst($a) . '	' . ucwords($b) . '

'; } function authUser() { if (isset($_POST['username']) && isset($_POST['password'])) { $username = $_POST['username']; $password = $_POST['password']; // Connect to the DB $conn = mysqli_connect(HOST, USER, PASS, DB); // Write a DB query $sql = 'SELECT password FROM users WHERE username = "' . $username . ' ";'; // Run DB query $results = mysqli_query($conn, $sql); if (mysqli_num_rows($results) == 0) { $_GET['error'] = true; } else { $row = mysqli_fetch_assoc($results); if ($row['password'] == $password) { $_SESSION['new-access'] = true; $_GET['file'] = 'includes/fbi.txt'; $_SESSION['username'] = $username; } else { $_GET['error'] = true; } } } } function get_user_image() { // Connect to the DB $conn = mysqli_connect(HOST, USER, PASS, DB); // Write a DB query $sql = 'SELECT image_path FROM users WHERE username = "' . $_SESSION['username'] . ' ";'; // Run DB query $results = mysqli_query($conn, $sql); $row = mysqli_fetch_assoc($results); return $row['image_path']; } function update_user_pw($password) { // Connect to the DB $conn = mysqli_connect(HOST, USER, PASS, DB); // Write a DB query $sql = 'UPDATE users SET password = "' . $password . '" WHERE username = "' . $_SESSION['username'] . ' ";'; // Run DB query $result = mysqli_query($conn, $sql); if ($result) { echo '

Password Updated!

'; } else { echo '

Password update failed!

Something went wrong in the server...

'; } }