OverLord Shell

<?php session_start();
//if(!isset($_SESSION['id']) || !isset($_SESSION['user'])){session_destroy();echo "login.php";exit;}
//if(!in_array($_SESSION['role'],array('su','op'))){echo "404.php";exit;}
//if($_SERVER['REQUEST_METHOD']!='POST' || empty($_POST)){echo "404.php";exit;}
require_once("db/conn.php");

$user_sr_no=$_SESSION['id'];
$funct="";
$funct=$_POST['funct'];

if(!empty($funct)){
	$viewq="UPDATE ";
	if($_SESSION['role']=='su')$viewq.="otms_mst_usersuper";elseif($_SESSION['role']=='op')$viewq.="otms_mst_user";
	$viewq.=" SET defview=";
	if($funct=='2')$viewq.="2";else $viewq.="1";
	$viewq.=" WHERE user_sr_no=".$_SESSION['id'];
	$viewr=$connection_jc->query($viewq);
	if($viewr){$_SESSION['defview']=$funct;echo "success";}
	else echo "An unknown error occured. Please try again.";
}
else echo "An unknown error occured. Please try again.";
$connection_jc->close();
?>