OverLord Shell

<?php
include("db/conn.php");
$email=filter_var(filter_input(INPUT_POST, 'email', FILTER_SANITIZE_EMAIL), FILTER_VALIDATE_EMAIL);
//echo "SELECT company_id,username,password,active FROM  busdir_mst_company WHERE company_email='".$email."'"; 
if($_POST['role']=='bs'){
$chkr=$connection->query("SELECT company_id,username,password,active FROM  busdir_mst_company WHERE company_email='".$email."'");
}else{
	$chkr=$connection->query("SELECT company_id,username,password,active FROM  busdir_mst_jobprofile WHERE company_email='".$email."'");
}
$count=$chkr->num_rows;
$chkrow=$chkr->fetch_assoc();  

$chkr->free();

if($count==1){
	if($chkrow['active']=='y'){
		$newpass=substr(md5(time()),0,12);
		if($_POST['role']=='bs'){
//echo "UPDATE busdir_mst_company SET password='".md5($newpass)."' WHERE company_id=".$chkrow['company_id'];exit;
		$newpassr=$connection->query("UPDATE busdir_mst_company SET password='".md5($newpass)."' WHERE company_id=".$chkrow['company_id']);
		}else{
			$newpassr=$connection->query("UPDATE busdir_mst_jobprofile SET password='".md5($newpass)."' WHERE company_id=".$chkrow['company_id']);
		}
//var_dump($newpassr);exit;
		if($newpassr){//now sending email containing new password

			$email_subject="Password Reset";
			$headers  =  'From: support@ultraliant.com' . "\r\n"  .
											'Reply-To:' . "\r\n" .
											'MIME-Version: 1.0' . "\r\n" .
											'Content-type: text/html; charset=iso-8859-1' . "\r\n" .
											'X-Mailer: PHP/' . phpversion();
			$email_body = "Hello!!!<br><br>Your password has been successfully reset. New password for your Account is as follows:<br><br>------------------------------<br>Username: ".$chkrow['username']."<br>Password: ".$newpass."<br>------------------------------<br><br>Please visit the following link in order to login into your account:<br><br> <a href=\"http://business.maccia.org.in/login.php\" target=\"_blank\">http://business.maccia.org.in</a><br><br>Thank you for registering.<br><br>-------------------------------------------------------<br><strong>This is an automated message, please do not reply.</strong>";
			$mm=mail($email,$email_subject,$email_body,$headers);
var_dump($mm);exit;
			if($mm){header("location:login.php?msg=register_success");
			
				exit;
			}
			else{
			if($_POST['role']=='bs'){
				$newpassq=$connection->query("UPDATE busdir_mst_company SET password='".$chkrow['password']."' WHERE company_id=".$chkrow['company_id']);
			}else{
				$newpassq=$connection->query("UPDATE busdir_mst_jobprofile SET password='".$chkrow['password']."' WHERE company_id=".$chkrow['company_id']);
			}
				$error=" ";
			}	//echo 111111111;exit;
		}
		else $error="reset_failed";
	}
	else $error="user_account_disabled";
}
else $error="invalid_email";
	
	
$connection->close();
header("location:forgotpass.php?msg=".$error);
exit;
?>