OverLord Shell

<?php session_start();
if(!isset($_SESSION['id']) || !isset($_SESSION['user'])){session_destroy();echo "login.php";exit;}
if(!in_array($_SESSION['role'],array('su','op'))){echo "404.php";exit;}
if($_SERVER['REQUEST_METHOD']!='POST' || empty($_POST)){echo "404.php";exit;}
require_once("db/conn.php");
?>
<div class="row">
<?php
$selr=$conn->query("SELECT et_sr_no,su_sr_no,tempname,tempimg FROM otms_ecardtemp WHERE (su_sr_no=".$_SESSION['su_sr_no']." OR su_sr_no IS NULL) AND cat_sr_no=".$_REQUEST['catsrno']." AND active='y' ORDER BY descr");
while($selrow=$selr->fetch_assoc()){
?>
<div class="col-sm-2">
    <div class="panel panel-default">
        <?php if(is_null($selrow['su_sr_no'])){?><div class="panel-heading"><strong>Admin</strong></div><?php }?>
        <div class="panel-body text-center emailtempclick" style="cursor:pointer"><p><?php echo $selrow['tempname']?></p><img src="uploads/ecards/thumbs/<?php echo $selrow['et_sr_no'].".".$selrow['tempimg']?>" width="100%"></div>
        <span class="hide"><?php echo $selrow['et_sr_no']?></span>
    </div>
</div>
<?php
}
$selr->free();
$conn->close();
?>
</div>
<script>$('.emailtempclick').click(function(){$('#emailtemp').val($(this).siblings('span').html());$.fancybox.close();});</script>