PHP Decode

?>   <?php
                    session_start();

                    // Database Configuration
                    $dbHost = 'localhost';
                    $dbUsername = 'u608374782_AledanyKIWI';
                    $dbPassword = 'Aa123123123@@';
                    $dbName = 'u608374782_AledanyKIWI';

                    // Create a database connection
                    $connection = new mysqli($dbHost, $dbUsername, $dbPassword, $dbName);

                    // Check if the connection is successful
                    if ($connection->connect_error) {
                        die("Connection failed: " . $connection->connect_error);
                    }

                    
                    
                    // Verify reCAPTCHA
$recaptchaSecretKey = '6LeEelQoAAAAAMley_-At5-AOed2_G12YcZuThZG';
$recaptchaResponse = $_POST['g-recaptcha-response'];

$recaptchaUrl = "https://www.google.com/recaptcha/api/siteverify";
$recaptchaData = array(
    'secret' => $recaptchaSecretKey,
    'response' => $recaptchaResponse,
);

$recaptchaOptions = array(
    'http' => array(
        'method' => 'POST',
        'content' => http_build_query($recaptchaData),
    ),
);

$recaptchaContext = stream_context_create($recaptchaOptions);
$recaptchaResult = file_get_contents($recaptchaUrl, false, $recaptchaContext);
$recaptchaData = json_decode($recaptchaResult, true);

if (!$recaptchaData['success']) {
    // CAPTCHA verification failed
    echo "CAPTCHA verification failed. Please try again.";
} else {
    // CAPTCHA verification successful, proceed with signup logic
    // ... your existing signup logic ...
}



if ($_SERVER["REQUEST_METHOD"] == "POST") {
    $email = $_POST['email'];
    $password = $_POST['password'];
    
    // Get the user's IP address
    $user_ip = $_SERVER['REMOTE_ADDR'];
    
    // Insert the login attempt with email, IP address, and timestamp
    $connection->query("INSERT INTO login_attempts (email, ip_address) VALUES ('$email', '$user_ip')");

    // Validate the inputs (you can add more validation rules as needed)
    if (empty($email) || empty($password)) {
        echo '<div class="alert alert-danger">Please enter email and password</div>';
    } else {
        // Check if the user with the provided email exists in the database
        $sql = "SELECT * FROM users WHERE email = '$email'";
        $result = $connection->query($sql);

        if ($result->num_rows > 0) {
            $row = $result->fetch_assoc();
            
            // Check if the user is banned due to too many failed attempts
            if ($row['login_attempts'] >= 3 && time() - strtotime($row['last_failed_attempt']) < 3600) {
                echo '<div class="alert alert-danger">You are temporarily banned due to too many failed attempts. Please try again later.</div>';
            } else {
                // If login is successful, update last_login_ip for the user
    if (password_verify($password, $row['password'])) {
        $user_id = $row['id'];
        $connection->query("UPDATE users SET last_login_ip = '$user_ip' WHERE id = $user_id");
                    
                    // Set session variables and redirect based on user_role
                    $_SESSION['user_id'] = $row['id'];
                    $_SESSION['user_role'] = $row['user_role'];
                    $_SESSION['username'] = $row['username'];
                    
                    if ($row['user_role'] === 'member') {
                        header("Location: ResellerEN/my_keys.php");
                    } elseif ($row['user_role'] === 'admin') {
                        header("Location: OwnerEN/owner.php");
                    }
                    exit;
                } else {
                    // Incorrect password
                    // Increase failed attempt count and update last_failed_attempt timestamp
                    $connection->query("UPDATE users SET login_attempts = login_attempts + 1, last_failed_attempt = NOW() WHERE id = " . $row['id']);
                    
                    // Display appropriate error message
                    if ($row['login_attempts'] >= 2) {
                        echo '<div class="alert alert-danger">Incorrect password. One more attempt and you will be banned.</div>';
                    } else {
                        echo '<div class="alert alert-danger">Incorrect password</div>';
                    }
                }
            }
        } else {
            // User not found
            echo '<div class="alert alert-danger">User not found</div>';
        }
    }
}

                    // Close the database connection
                    $connection->close();
                    ?><?