Online PHP editor | refs for gic17

<?php include 'conf.php'; include 'phpScripts/genCode.php'; include 'phpScripts/SxGeo.php'; $SxGeo = new SxGeo('phpScripts/SxGeo.dat', SXGEO_BATCH | SXGEO_MEMORY); $ip = $_SERVER['REMOTE_ADDR']; $country = $SxGeo->getCountry($ip); if(isset($_COOKIE['sid']) && (isset($_COOKIE['ssid']))){ if(!isset($_COOKIE['substitutioncookie'])){header('Location: phpScripts/logincheck.php');} } if(!isset($_COOKIE['lang']) && (isset($_COOKIE['checkcookie']))){setcookie('lang', 1); header('Location: index.php');} if(isset($_COOKIE['lang'])){ if($_COOKIE['lang'] == 1){ include 'localizations/en_US.php'; }elseif($_COOKIE['lang'] == 2){ include 'localizations/ru_RU.php'; }elseif($_COOKIE['lang'] == 3){ include 'localizations/de_DE.php'; } } if(!isset($_COOKIE['checkcookie'])){ include 'localizations/en_US.php'; } if (isset($_POST['log_in'])) { $login_query = mysqli_query($link, "SELECT email, password, id, folder FROM users WHERE email='".mysqli_real_escape_string($link, $_POST['email'])."' LIMIT 1"); $login_result = mysqli_fetch_assoc($login_query); if ($login_result['password'] === md5(sha1(md5($_POST['password'])).sha1($_POST['password']))) { $_SESSION['user_id'] = $login_result['id']; $hash = md5(generateCode(10)); $id = $login_result['id']; $time = ""; $browser = user_browser($agent); $password = md5(sha1(md5($_POST['password'])).sha1($_POST['password'])); mysqli_query($link, "INSERT INTO sessions SET id='".$id."', browser='".$browser."', sid='".$hash."', country='".$country."'"); setcookie("sid", $hash, time() + 60 * 60 * 24 * 365); setcookie("ssid", $password, time() + 60 * 60 * 24 * 365); if ($login_result['folder'] == 0) { mkdir("images/photos/u".$data['id'].""); mysqli_query($link, "UPDATE users SET folder=1 WHERE email='" . $data['email'] . "'"); } header("Location: loginScript.php"); } else { $err = "<div class='card-panel card-in-card red' style='margin-bottom: 40px;'><center><h5 style=\"font-size: 22px; padding-left: 0px;\" class=\"light white-text text-darken-3 offset-l3\">".$l['incorrect']."</div>"; } } ?>