<?php

function get_client_ip() {
    $ipaddress = '';
    if (getenv('HTTP_CLIENT_IP'))
        $ipaddress = getenv('HTTP_CLIENT_IP');
    else if(getenv('HTTP_X_FORWARDED_FOR'))
        $ipaddress = getenv('HTTP_X_FORWARDED_FOR');
    else if(getenv('HTTP_X_FORWARDED'))
        $ipaddress = getenv('HTTP_X_FORWARDED');
    else if(getenv('HTTP_FORWARDED_FOR'))
        $ipaddress = getenv('HTTP_FORWARDED_FOR');
    else if(getenv('HTTP_FORWARDED'))
       $ipaddress = getenv('HTTP_FORWARDED');
    else if(getenv('REMOTE_ADDR'))
        $ipaddress = getenv('REMOTE_ADDR');
    else
        $ipaddress = 'UNKNOWN';
    return $ipaddress;
}

ini_set('display_errors',1);
ini_set('display_startup_errors',1);
error_reporting(-1);


define( 'IPS_ENFORCE_ACCESS', TRUE ); // Important so it does not redirect to forums
define( 'IPB_THIS_SCRIPT', 'public' );

require_once( '/var/www/initdata.php' );
require_once( IPS_ROOT_PATH . 'sources/base/ipsRegistry.php' );
require_once( IPS_ROOT_PATH . 'sources/base/ipsController.php' );

$ipbRegistry    = ipsRegistry::instance();
$ipbRegistry->init();

$identifier = $_GET['u'];
$pass = $_GET['p'];
$hwid = $_GET['hwid'];
$ip = get_client_ip();


$host = "localhost";
$dbuser = "root";
$dbpass = "VgYwnLFXU8nGk6656HJpcET2";
$connection = mysql_connect($host,$dbuser,$dbpass) or die ("Connection error");
mysql_select_db("log");


//No user / pass / hwid? -> exit
if($hwid == "")
{
	echo "error";
	exit();
}


//Valve ip ranges
$range_low = ip2long("208.64.200.0");
$range_high = ip2long("208.64.203.255");
$ipLong = ip2long($ip);

if($ipLong >= $range_low && $ipLong <= $range_high) {
	echo "error";
	exit();
}



$cleanname = IPSText::parseCleanValue($identifier);

$member = IPSMember::load($cleanname, 'all', 'username');
$dbhwid = $member['hwid'];

//echo "<pre>"; print_r($member);

if(is_null($dbhwid) || strcmp($dbhwid,'reset') == 0) {
	mysql_select_db("iwbz1337ipb");
	$id = $member['member_id'];
	$member['hwid'] = $hwid;
	IPSMember::save( $id, array( 'core' => array( 'hwid' => $hwid ) ) );
	$member = IPSMember::load($identifier, 'all', 'username');
	$dbhwid = $member['hwid'];
}


if(strcmp($dbhwid,$hwid) != 0) {
	echo "error";
	mysql_query("INSERT INTO login(name,access,ipaddress,hwid) VALUES('$identifier','HWID ERROR','$ip','$hwid')");
	exit();
}


//Setting things up for response
$key = 'KEh1Iwu1PPBiegUo25OqzY2z9su5I6IK'; // 32 bytes
$iv  = 'S1qX6c2ScZqEDyFC'; // 16 bytes
$method = 'aes-256-cfb';
date_default_timezone_set("UTC");
$curtime = date('H');

for($count = 0; $count < $hwidLength; $count++) {
	$key[$count] = $dbhwid[$count];
}

$cleanpass = IPSText::parseCleanValue($pass);

if(IPSMember::authenticateMember($member['member_id'],md5($cleanpass))){
	//4 = Admin, 6 = Moderatos, 13 = Trusted,21 = VIP
	if(IPSMember::isInGroup($member['member_id'],15,true) || IPSMember::isInGroup($member['member_id'],6,true) || IPSMember::isInGroup($member['member_id'],4,true) || IPSMember::isInGroup($member['member_id'],21,true) ){
	$curtime .="csgo";
	mysql_query("INSERT INTO login(name,access,ipaddress,hwid) VALUES('$identifier','CS:GO','$ip','$hwid')");
	} else {
	echo "no customer";
	mysql_query("INSERT INTO login(name,access,ipaddress,hwid) VALUES('$identifier','NO CUSTOMER','$ip','$hwid')");
	exit();
	}

} else {
echo "no customer";
	mysql_query("INSERT INTO login(name,access,ipaddress,hwid) VALUES('$identifier','AUTH FAIL','$ip','$hwid')");
exit();
}
$encryptedTime = base64_encode( openssl_encrypt ($curtime, $method, $key, true, $iv));
echo $encryptedTime;
?>