runQuery("SELECT * FROM account WHERE acc_no = '$acc_no'"); $stmt->execute(); $row = $stmt->fetch(PDO::FETCH_ASSOC); $log = $reg_user->runQuery("UPDATE account SET logins = logins + 1 WHERE '$acc_no'"); $status = $row['status']; //3.1.2 If the posted values are equal to the database values, then session will be created for the user. if ($count == 0) { $msg = "

Invalid Bank Credentials!

"; } elseif ($status == 'DISABLED') { $msg = "

Sorry! Your Account Has Been Disabled For Violation of Our Terms!

"; } elseif ($status == 'CLOSED') { $msg = "

Sorry! That Account No Longer Exist!

"; } elseif ($status == 'SUSPEND') { $msg = "

Sorry! This Account is Suspended Contact Customer care!

"; } else { //3.1.3 If the login credentials doesn't match, he will be shown with an error message. $_SESSION['acc_no'] = $acc_no; $_SESSION['acc_no'] = $acc_no; // Redirect user to home.php // header("Location: home.php"); } } //3.1.4 if the user is logged in Greets the user with message if (isset($_SESSION['acc_no'])) { $code = substr(number_format(time() * rand(), 0, '', ''), 0, 6); $sender = "$bank_name"; /* sender id */ $message = "Please enter this code to continue proceed $code"; $stmt = $reg_user->runQuery("SELECT * FROM bank_settings WHERE id = '1'"); $stmt->execute(); $row = $stmt->fetch(PDO::FETCH_ASSOC); $bank_site_name = $row["bank_site_name"]; $bank_site_address = $row["bank_site_address"]; $bank_site_domain = $row["bank_site_domain"]; $message = " [SUBJECT]

Dear Customer,

Please use the One Time Password OTP $code to complete your Login Process

This message is sent to our customer

How do I know this is not a fake email?
An email really coming from us will address you by your registered first and last name or your business name. It will not ask you for sensitive information like your password, bank account or credit card details.

Remember not to click any links in suspicious looking emails.

"; $acc_no = $_SESSION['acc_no']; $queri = " UPDATE account SET tmp_otp = '$code' WHERE acc_no ='$acc_no'"; $resulti = mysqli_query($connection, $queri) or die(mysqli_error($connection)); $subject = "Login Verification"; $stmt = $reg_user->runQuery("SELECT * FROM account WHERE acc_no = '$acc_no'"); $stmt->execute(); $row = $stmt->fetch(PDO::FETCH_ASSOC); if (isset($_SESSION['acc_no']) && $row['phone_verify'] == 1) { header('Location: 2fa.php?=8GvnbdERhFUY9jdkd39YYUdjP'); exit(); } if (isset($_SESSION['acc_no']) && $row['phone_verify'] == 2) { header('Location: kyc_verify.php?=UY9jdkd39KHVC8G54NBCOjwph0enee'); exit(); } else { $reg_user->send_mail($row['email'], $message, $subject); $phone = preg_replace('/[^0-9]/', '', $row['phone']); $mobile_msg = "Dear " . $row['fname'] . ", Please use the One Time Passcode (OTP): " . $code . " to complete your login process"; $reg_user->otp($phone,$mobile_msg); header('Location: otp.php?=UY9jdkd39KHVCNMLJFWSTIOHDFDDWD08F34s'); } } else { } //3.2 When the user visits the page first time, simple login form will be displayed. ?> Account Login | <?php echo $site_title; ?>

Use strong combinations of letters & numbers

Regularly Change Password

Regular interval you can change your password to make your account more secure.

Don't Share Password

Please dont share password with anyone because account security level decrease.

Sorry! This Account is not Activated, Contact Support for Activation.