OverLord Shell

<?php 
session_start();
include("db/conn.php");
if(!isset($_SESSION['company_id']) || !isset($_SESSION['company_name'])){session_destroy();echo "login.php";exit;}
if(!in_array($_SESSION['loggedin_user'],array('admin','company'))){echo "404.php";exit;}
if($_SERVER['REQUEST_METHOD']!='POST' || empty($_POST)){echo "404.php";exit;}

$pplan=$_SESSION['plans'];
$splan=$_POST['splan'];
$planamt=$_POST['planamt'];
if($splan=='2a'){
	$plans=2;
} else if($splan=='3a')
{
	$plans=3;
}
/*$a=$_POST['select_plan'];
$b=$plans;
if($a!=$b){*/
if($_SESSION['plans']!=3 && $planamt !=0)
{
$paymode=$_POST['paymode'];

$chqno=$_POST['chqno'];
$bankname=$_POST['bankname'];
$chqdate=$_POST['chqdate'];
if($paymode!=1)
{
	$chqno=NULL;
	$bankname=NULL;
	$chqdate=NULL;
}else
{
	$chqno=$chqno;
	$bankname=$bankname;
	$chqdate=$chqdate;
}

$data = array(
		'plans' =>$plans,
		'companyid' => $_SESSION['company_id'],
		'amount' => $planamt,
		'payment_type' => $paymode,
		'check_no' => $_POST['chqno'],
		'bank_name' => $_POST['bankname'],
		'payment_date' => date('Y-m-d',strtotime($_POST['chqdate'])),			
		'createdon' => date('Y-m-d H:i:s'),
		'createdby' => $_SESSION['company_id'],
		'modifiedon' => date('Y-m-d H:i:s'),
		'modifiedby' => $_SESSION['company_id']
	);
	//print_r($data);
	$insertresult = dbRowInsert('plan_master', $data);
	$insertresultarr = explode("-",$insertresult);
	//echo $insertresultarr[0];
	
	if( $insertresultarr[0]="success" && $plans==''){
		echo   $sql="update busdir_mst_company set plans='".$pplan."',select_plan='".$plans."',token='1',verified='1',approved='1' where company_id=".$_SESSION['company_id'];
		$listl=$connection->query($sql);
		echo "send";	
		/* if($insertresultarr[0]=='success')
		 {
			$_SESSION['plans'] = $plans;
			echo $insertresultarr[0];
		 }*/
		 echo $insertresultarr[0];
	}else{
		 $sql="update busdir_mst_company set plans='".$pplan."',select_plan='".$plans."',token='0',verified='0',approved='0' where company_id=".$_SESSION['company_id'];
		$listl=$connection->query($sql);
		 echo $insertresultarr[0];
			
	}
}else
{
	echo "are";
}
/*}else{
	echo "send";
	
}*/

?>