OverLord Shell

<?php 
session_start();
require_once("db/conn.php");

$company_name=htmlentities($_POST['company_name'],ENT_QUOTES);
$company_address=htmlentities($_POST['company_address'],ENT_QUOTES);
$sasa=$_POST['country_id'];
$cname=$sasa[1];
$sasa1=$_POST['state_id'];
$sname=$sasa1[1];
$sasa2=$_POST['dist_id'];
$dname=$sasa2[1];

if($sasa[0]!='101'){
	$sname_main=$_POST['company_other_state'];
	$dist_main=$_POST['company_other_state'];
}else
{
	$sname_main=$sname;
	$dist_main=$dname;
}

$company_name=htmlentities($_POST['company_name'],ENT_QUOTES);
$company_pinno=$_POST['company_pinno'];
$company_email=$_POST['company_email'];

$company_website=htmlentities($_POST['company_website'],ENT_QUOTES);
$company_ceoname=htmlentities($_POST['company_ceoname'],ENT_QUOTES);

$company_state=$_POST['company_state'];
$company_district=$_POST['company_district'];
$company_mobile=$_POST['company_mobile'];

$passwordsend=substr(md5(time()),3,8);
$password=md5($passwordsend);

$selr=$connection->query("SELECT company_email FROM busdir_mst_company WHERE company_email='".$company_email."'");
if($selr->num_rows!=0)echo "Duplicate Email address";
else{
	$addq="INSERT INTO busdir_mst_company(company_name,username,company_country,company_state,company_district,company_city,company_pinno,company_email,company_mobile,password,createdon)VALUES('".$company_name."','".$company_email."','".$cname."','".$sname_main."','".$dist_main."','".$company_pinno."','".$company_email."','".$company_mobile."','".$password."','".date('Y-m-d H:i:s')."')";

/*$addq="INSERT INTO busdir_mst_company(company_name,company_address,company_country,company_state,company_district,company_pinno,contact_person_name,contact_person_phone,contact_person_email,company_phone,company_mobile,company_fax,company_ceoname,company_email,username,password,company_enquiry_email,company_website,company_logo_path,company_banner_path,createdon) VALUES('$company_name','$company_address','India','$company_state','$company_district','$company_pinno','$contact_person_name','$contact_person_phone','$contact_person_email','$company_phone','$company_mobile','$company_fax','$company_ceoname','$company_email','$company_email','$password','$company_email','$company_website','$target_logo_file','$target_banner_file','".date('Y-m-d H:i:s')."')";*/
	$addr=$connection->query($addq);
	if($addr){
		//moving uploaded images to their paths
		//sending welcome email
		$subject="Jain Business Directory Registration";
		$headers="MIME-Version: 1.0\r\n"."Content-type: text/html; charset=iso-8859-1\r\n"."From: \"Jain Business Directory\" <info@ultraliant.com>\r\n";
		$message="Congratulations, ".$company_name."!!! You have registered at Jain Business Directory !!!<br><br>Please keep this e-mail for your records and keep it confidential. Your account information is as follows:<br><br>------------------------------<br>Username: ".$company_email."<br>Password: ".$passwordsend."<br>------------------------------<br><br>Please visit the following link in order to login into your account:<br><br><a href=\"http://jainbusinessnetwork.com/login.php\" target=\"_blank\">www.jainbusinessnetwork.com/login.php</a><br><br>Thank you for registering.<br><br>-------------------------------------------------------<br><strong>This is an automated message, please do not reply.</strong>";
	@mail($username,$subject,$message,$headers);
		echo "success";
	}
	else echo "An unknown error occured. Please try again.";
}
$selr->free();
$connection->close();
?>