OverLord Shell

<?php
include("db/conn.php");

$email=$_POST['email'];
//echo "SELECT company_id,username,password,active FROM  busdir_mst_company WHERE company_email='".$email."'"; 
if($_POST['role']=='bs'){
$chkr=$connection->query("SELECT company_id,username,password,active,company_email,membership_no,company_mobile FROM  busdir_mst_company WHERE (company_email='".$email."' || membership_no='".$email."' || membership_no='".$email."') and active='y'");
}else if($_POST['role']=='jb'){
	$chkr=$connection->query("SELECT company_id,username,password,active,company_email FROM  busdir_mst_jobprofile WHERE company_email='".$email."'");
} else{
echo "please select role";exit;
}
 $count=$chkr->num_rows;
$chkrow=$chkr->fetch_assoc();  


$chkr->free();

if($count==1){
	if($chkrow['active']=='y'){
		$chkemailsec=$connection_jc->query("SELECT email FROM  otms_mst_contact WHERE memcode='".$chkrow['membership_no']."'");
		$chkmailrow=$chkemailsec->fetch_assoc();  
		$chkemailsec->free();
		//print_r($chkmailrow);exit;
		$newpass=substr(md5(time()),0,12);
		if($_POST['role']=='bs'){
$newpassr=$connection->query("UPDATE busdir_mst_company SET password='".md5($newpass)."' WHERE company_id=".$chkrow['company_id']);
}else if($_POST['role']=='jb'){
	$newpassr=$connection->query("UPDATE busdir_mst_jobprofile SET password='".md5($newpass)."' WHERE company_id=".$chkrow['company_id']);
} else{
echo "please select role";exit;
}
		

		if($newpassr){//now sending email containing new password
		
		
		$MSG="Dear Member,%0AYour Login Details for MACCIA Business Forum :%0AUserName= ".$chkrow['username']."%0APassword= ".$newpass."%0AMACCIA"; 
						
				$msg1=str_replace(" ","+",$MSG);
				
				 $sad="http://mysms.ultraliant.com/http-api.php?username=MACCIASMS&password=swapj2001@ULT&senderid=MACCIA&route=1&number=".$chkrow['company_mobile']."&message=".$msg1.""; 
			@$sa=file_get_contents($sad);
		
		
		$to = $chkrow['company_email'].",".$chkmailrow['email'];
			$subject="MACCIA Business Forum Password Reset";
			//$headers = "From: MACCIA <memnership2@maccia.org.in>\n";
			$headers  = 'From: MACCIA <membership2@maccia.org.in>' . "\r\n" .
											'Reply-To: membership2@maccia.org.in' . "\r\n" .
											'MIME-Version: 1.0' . "\r\n" .
											'Content-type: text/html; charset=iso-8859-1' . "\r\n" .
											'X-Mailer: PHP/' . phpversion();
			$message="Dear Member<br/>Your password has been successfully reset. New password for your Account is as follows:<br><br>------------------------------<br>Username: ".$chkrow['username']."<br>Password: ".$newpass."<br>------------------------------<br><br>Please visit the following link in order to login into your account:<br><a href=\"https://maccia.org.in/businessforum/login\" target=\"_blank\">https://maccia.org.in/businessforum/login</a><br><br>Thank you for registering.<br><br>-------------------------------------------------------<br><b>This is an automated message, please do not reply.</b>";
		$mresponse = mail($to,$subject,$message,$headers);
		
			if($mresponse){
				$error='reset_pass';
				
			}
			else{
				$newpassq=$connection->query("UPDATE busdir_mst_company SET password='".$chkrow['password']."' WHERE company_id=".$chkrow['company_id']);
				$error="reset_failed";
			}	//echo 11111reset_failed1111;exit;
		}
		else $error="reset_failed";
	}
	else $error="user_account_disabled";
}
else $error="invalid_email";
	
	
$connection->close();
header("location:forgotpass.php?msg=".$error);
exit;
?>