Showing this script.. why.?

anyone can help me.

<?php

/*********************************************************************

Handles staff authentication/logins

Peter Rotich

http://www.osticket.com(http://www.osticket.com)

Released under the GNU General Public License WITHOUT ANY WARRANTY.

See LICENSE.TXT for details.

vim: expandtab sw=4 ts=4 sts=4:

$Id: $

**********************************************************************/

require_once('../main.inc.php');

if(!defined('INCLUDE_DIR')) die('Fatal Error. Kwaheri!');

require_once(INCLUDE_DIR.'class.staff.php');

$msg=$_SESSION;

$msg=$msg?$msg:'Authentication Required';

if($_POST && (!empty($_POST) && !empty($_POST))){

//$_SESSION=array(); #Uncomment to disable login strikes.

$msg='Invalid login';

if($_SESSION) {

if((time()-$_SESSION)getStaffLoginTimeout()) {

$msg='Excessive failed login attempts';

$errors='You\'ve reached maximum failed login attempts allowed.';

}else{ //Timeout is over.

//Reset the counter for next round of attempts after the timeout.

$_SESSION=null;

$_SESSION=0;

}

if(!$errors && ($user=new StaffSession($_POST)) && $user->getId() && $user->check_passwd($_POST)){

//update last login.

db_query('UPDATE '.STAFF_TABLE.' SET lastlogin=NOW() WHERE staff_id='.db_input($user->getId()));

//Figure out where the user is headed - destination!

$dest=$_SESSION;

//Now set session crap and lets roll baby!

$_SESSION=array(); //clear.

$_SESSION=$_POST;

$user->refreshSession(); //set the hash.

$_SESSION=$user->getTZoffset();

$_SESSION=$user->observeDaylight();

Sys:(LOG_DEBUG,'Staff login',sprintf("%s logged in ",$user->getUserName(),$_SERVER)); //Debug.

//Redirect to the original destination. (make sure it is not redirecting to login page.)

$dest=($dest && (!strstr($dest,'login.php') && !strstr($dest,'ajax.php')))?$dest:'index.php';

session_write_close();

session_regenerate_id();

@[deleted]("Location: $dest");

require_once('index.php'); //Just incase header is messed up.

exit;

}

//If we get to this point we know the login failed.

$_SESSION+=1;

if(!$errors && $_SESSION>$cfg->getStaffMaxLogins()) {

$msg='Access Denied';

$errors='Forgot your login info? Contact IT Dept.';

$_SESSION=time();

$alert='Excessive login attempts by a staff member?'."\n".

'Username: '.$_POST."\n".'IP: '.$_SERVER."\n".'TIME: '.date('M j, Y, g a T')."\n\n".

'Attempts #'.$_SESSION."\n".'Timeout: '.($cfg->getStaffLoginTimeout()/60)." minutes \n\n";

Sys:(LOG_ALERT,'Excessive login attempts (staff)',$alert,($cfg->alertONLoginError()));

}elseif($_SESSION%2==0){ //Log every other failed login attempt as a warning.

$alert='Username: '.$_POST."\n".'IP: '.$_SERVER.

"\n".'TIME: '.date('M j, Y, g a T')."\n\n".'Attempts #'.$_SESSION;

Sys:(LOG_WARNING,'Failed login attempt (staff)',$alert);

}

define("OSTSCPINC",TRUE); //Make includes happy!

$login_err=($_POST)?true; //error displayed only on post

include_once(INCLUDE_DIR.'staff/login.tpl.php');