Edit File - login-check.php

<?php
session_start();
require '../inc/config.php';

if (empty($_POST['uname']) || empty($_POST['pwd'])) {
    echo "Enter Email / Password and Retry!";
    exit;
}

$uname = mysqli_real_escape_string($con, $_POST['uname']);
$pwd   = $_POST['pwd'];

$sql    = "SELECT id, status, password FROM `customers` WHERE email='$uname' LIMIT 1";
$result = mysqli_query($con, $sql);
if (!$result || mysqli_num_rows($result) === 0) {
    echo "Invalid Email / Password";
    exit;
}
$row = mysqli_fetch_assoc($result);

if (md5($pwd) !== $row['password']) {
    echo "Invalid Email / Password";
    exit;
}
if ($row['status'] == 0) {
    echo "Your account is inactive";
    exit;
}
$_SESSION['loggedin'] = 'true';
$_SESSION['loginType'] = 'customer';
$_SESSION['userID'] = $row['id'];
$_SESSION['last_timestamp'] = time();

$logData = "Customer Logged in";
$uid     = (int)$row['id'];
mysqli_query($con, "INSERT INTO `log` (`log_data`,`user_id`)VALUES ('" . mysqli_real_escape_string($con, $logData) . "', $uid)");

if (!empty($_SESSION['cart']) && is_array($_SESSION['cart'])) {
    foreach ($_SESSION['cart'] as $key => $item) {
        $p = (int)$item['p_id'];
        $qty = (int)$item['qty'];
        $price = (float)$item['price'];

$chk = mysqli_query($con,"SELECT id, qty FROM `cart` WHERE user_id=$uid AND p_id=$p LIMIT 1");
        if ($chk && mysqli_num_rows($chk)) {
            $c = mysqli_fetch_assoc($chk);
            $newQty = $c['qty'] + $qty;
            mysqli_query($con,"UPDATE `cart` SET qty=$newQty, updated_at=NOW() WHERE id=" . (int)$c['id']);
        } else {
            mysqli_query($con,"INSERT INTO `cart`(user_id,p_id,qty,price,created_at,updated_at)
            VALUES($uid, $p, $qty, $price, NOW(), NOW())");
        }
    }
    unset($_SESSION['cart']);
}

if (!empty($_SESSION['wishlist']) && is_array($_SESSION['wishlist'])) {
    $uid = (int)$row['id'];
    foreach ($_SESSION['wishlist'] as $pid) {
        $pid = (int)$pid;
        mysqli_query($con, "INSERT IGNORE INTO `wishlist` (user_id,p_id,created_at) VALUES($uid,$pid,NOW())");
    }
    unset($_SESSION['wishlist']);
}

echo "TRUE";
?>

Kembali