admin_functions.php

<?php

function validateSession($connection,$username,$password){
  $sql_username =  mysql_entities_fix_string($connection, $username);
  $sql_password =  mysql_entities_fix_string($connection, $password);
  $sql = "SELECT * FROM admin_tbl WHERE username = '$sql_username'";
  $result = $connection->query($sql);
   if (!$result) die($connection->error);
     elseif ($result->num_rows) {
          $row = $result->fetch_array(MYSQLI_NUM);
          $result->close();
          if($password != $row[3])  {
            die("Sorry Some Error occured-User not authorized Please login again <a href=login.php>Click Here to Login</a> ");
          }
        else "";
      }
      else die("Sorry Some Error occured-User not authorized Please login again <a href=login.php>Click Here to Login</a> ");
  }

function validate_Name($field){
     return ($field == "") ? "Malware Name is to be Entered" : "";
  };

  function validate_file($field){
    return ($field == "") ? "File must be chosen" : "";
  };

  function checkTextFile($f)	//function to check if the file is text file or not
  {
  	if($f == null)
  	exit("Enter a valid String to check case ");
  	$pos = strpos($f , '.');
  	if(substr($f, $pos+1) != "txt" ) exit("Please Enter a text file");
  }

//Returns a String of 20 bytes read from the admin inputed file which contains malware.
  function readFileString($file){
    if(!file_exists($file)) exit("The file does not exist please choose a valid file");
  	$fout = fopen($file, "r") or die("Unable to open file!");	//opening the file.
    $line = fread($fout , 20 );
    fclose($fout);
  	if($line == null) exit("the text file does not contain anything");
    return $line;
    }

//Inserts the malware name and the Malware String to the database.
  function insertMalwareToDatabase($connection,$malName,$string) {
      if($malName == "" ) {echo "Malware Name is Empty Cannot be Inserted"; return;}
      if(empty($string)) {echo "Given Malware String is Empty"; return;}
      $malwareString = mysql_entities_fix_string($connection,$string);
      $malwareName = mysql_entities_fix_string($connection, $malName);
      $sql = "INSERT INTO malware_tbl VALUES (NULL , '$malwareName' , '$malwareString')";
      $result = $connection->query($sql);
      if (!$result) die ("Database access failed: " . $connection->error);
      else echo "data is saved";
    }
?>