API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jan 14th, 2016
100
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 18.06 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. define("IN_HOLOCMS", TRUE);
  3. @session_start();
  4.  
  5. // #########################################################################
  6. // CONEXÃO COM O BANCO DE DADOS
  7. // #########################################################################
  8.  
  9. @require_once('server-data.php_data_classes-config.php.php');
  10. mysql_connect("$MySQLhostname", "$MySQLusername", "$MySQLpassword") or die("Erro em conexão com o MySQL");
  11. mysql_select_db("$MySQLdb") or die("Banco de dados inexistente");
  12. error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED & ~E_WARNING);
  13. error_reporting(0);
  14.  
  15.  
  16. // #########################################################################
  17. // CONFIGURAÇÕES
  18. // #########################################################################
  19.  
  20.  
  21. $cms_name = mysql_fetch_assoc($cms_name = mysql_query("SELECT * FROM cms_settings WHERE variable = 'cms_name'"));
  22. $cms_url = $hotel_url;
  23.  
  24. foreach($_GET As $name=>$value) {
  25. $_GET[$name]=mysql_real_escape_string($value);
  26. }
  27. foreach($_POST as $name => $value) {
  28. $_POST[$name] = mysql_real_escape_string($value);
  29. }
  30.  
  31. $remote_ip = $_SERVER['REMOTE_ADDR'];
  32. $sitename = "".$cms_name['value']."";
  33. $shortname = "".$cms_name['value']."";
  34.  
  35. if(@ini_get('date.timezone') == null && function_exists("date_default_timezone_get")){ @date_default_timezone_set("Europe/Madrid"); }
  36.  
  37. $H = date('H');
  38. $i = date('i');
  39. $s = date('s');
  40. $m = date('m');
  41. $d = date('d');
  42. $Y = date('Y');
  43. $j = date('j');
  44. $n = date('n');
  45. $today = $d;
  46. $month = $m;
  47. $year = $Y;
  48. $getmoney_date = date('d/m/Y',mktime($m,$d,$Y));
  49. $birthday_date = date('d/m', mktime($m,$d));
  50. $date_normal = date('d/m/Y',mktime($m,$d,$Y));
  51. $date_full = date('d/m/Y H:i:s',mktime($H,$i,$s,$m,$d,$Y));
  52. $path = $hotel_url;
  53. $adminpath = mysql_real_escape_string("".$path."/theallseeingeye/hotel/br/housekeeping"); //*Painel de Controle*//
  54. $clientpath = $hotel_url;
  55. $cimagesurl = $cimages_url;
  56. $badgesurl = "/swf/c_images/album1584/";
  57. $hash_secret = "xCg532%@%gdvf^5DGaa6&*rFTfg^FD4\$OIFThrR_gh(ugf*/";
  58.  
  59. @require_once('server-data.php_data_classes-config.php.php'); //*Arquivo de configuração*//
  60. $maintenance = mysql_num_rows($maintenance = mysql_query("SELECT * FROM cms_settings WHERE variable = 'cms_maintenance' AND value = '1'"));
  61.  
  62. $server = mysql_fetch_assoc($server_status = mysql_query("SELECT * FROM server_status"));
  63. $online_count = $server['users_online'];
  64.  
  65. if(isset($_POST) || isset($_GET) || isset($_REQUEST) || isset($_COOKIE)){
  66. foreach($_POST as $key => $p)
  67. {
  68. $_POST[$key] = htmlentities($p);
  69. $_POST[$key] = mysql_real_escape_string($p);
  70. $_POST[$key] = html_entity_decode($p);
  71. }
  72.  
  73. foreach($_GET as $key => $g)
  74. {
  75. $_GET[$key] = mysql_real_escape_string($g);
  76. }
  77. foreach($_COOKIE as $key => $s)
  78. {
  79. $COOKIE[$key] = mysql_real_escape_string($s);
  80. }
  81. foreach($_REQUEST as $key => $k)
  82. {
  83. $_REQUEST[$key] = mysql_real_escape_string($k);
  84. }
  85. }
  86. if(isset($_GET)){
  87.  
  88. foreach($_GET as $key => $f)
  89. {
  90. $_GET[$key] = strip_tags(mysql_real_escape_string(htmlentities($f)));
  91. }
  92. }
  93.  
  94. // #########################################################################
  95. // FUNÇÕES ADICIONAIS NOVAS
  96. // #########################################################################
  97.  
  98. function IsOnline($id){
  99. if($server == '1') {
  100. $num = mysql_num_rows(mysql_query("SELECT * FROM user_online WHERE userid = '".$id."'"));
  101. if($num > 0){
  102. return true;
  103. } else {
  104. return false;
  105. }
  106. }else {
  107. $data = mysql_fetch_assoc(mysql_query("SELECT * FROM users WHERE id = '".$id."' LIMIT 1"));
  108. if($data['online'] == '1') {
  109. return true;
  110. }
  111. else {
  112. return false;
  113. }
  114. }
  115. }
  116.  
  117. // #########################################################################
  118. // ENCRIPTAÇÃO DE SENHA
  119. // #########################################################################
  120.  
  121. function HoloHash($password){
  122. $hash_secret = "xCg532%@%gdvf^5DGaa6&*rFTfg^FD4\$OIFThrR_gh(ugf*/";
  123. $string = sha1($password.($hash_secret));
  124. return $string;
  125. }
  126.  
  127. function HoloHashMD5($password){
  128. $hash_secret = "xCg532%@%gdvf^5DGaa6&*rFTfg^FD4\$OIFThrR_gh(ugf*/";
  129. $string = md5($password.($hash_secret));
  130. return $string;
  131. }
  132.  
  133. function tirartags($palavra){
  134. $palavra = str_replace('innerHTML', '', $palavra);
  135. $palavra = str_replace('alert(', '', $palavra);
  136. $palavra = str_replace('documentElement', '', $palavra);
  137. return $palavra;
  138. }
  139.  
  140. // #########################################################################
  141. // USUÁRIOS BANIDOS
  142. // #########################################################################
  143.  
  144. if(empty($_SESSION['username']) && @$_COOKIE['remember'] == 'remember'){
  145.  
  146. $cname = FilterText($_COOKIE['rusername']);
  147. $cpass_hash = $_COOKIE['rpassword'];
  148.  
  149. $csql = mysql_query("SELECT password,id FROM users WHERE username = '".$cname."' LIMIT 1") or die(mysql_error());
  150. $cnum = mysql_num_rows($csql);
  151.  
  152. if($cnum < 1){
  153. setcookie("remember", "", time()-60*60*24*100, "/"); setcookie("cookpass", "", time()-60*60*24*100, "/");
  154. setcookie("rusername", "", time()-60*60*24*100, "/"); setcookie("cookpass", "", time()-60*60*24*100, "/");
  155. setcookie("rpassword", "", time()-60*60*24*100, "/"); setcookie("cookpass", "", time()-60*60*24*100, "/");
  156. } else {
  157.  
  158. $crow = mysql_fetch_assoc($csql);
  159. $correct_pass = $crow['password'];
  160.  
  161. if($cpass_hash == $correct_pass){
  162. $_SESSION['username'] = $cname;
  163. $_SESSION['password'] = $crow['password'];
  164. $sql3 = mysql_query("UPDATE users SET ip_last = '".$remote_ip."' WHERE username = '".$cname."'");
  165. header("location: me"); exit;
  166. } else {
  167.  
  168. setcookie("remember", "", time()-60*60*24*100, "/"); setcookie("cookpass", "", time()-60*60*24*100, "/");
  169. setcookie("rusername", "", time()-60*60*24*100, "/"); setcookie("cookpass", "", time()-60*60*24*100, "/");
  170. setcookie("rpassword", "", time()-60*60*24*100, "/"); setcookie("cookpass", "", time()-60*60*24*100, "/");
  171. }
  172. }
  173. }
  174.  
  175. // #########################################################################
  176. // IS-EVEN FUNKTION
  177. // #########################################################################
  178.  
  179. function IsEven($intNumber)
  180. {
  181. if($intNumber % 2 == 0){
  182. return true;
  183. } else {
  184. return false;
  185. }
  186. }
  187.  
  188. // #########################################################################
  189. // SMILES EM BBCODE
  190. // #########################################################################
  191. function SearchMotto($mision){
  192. $mision = str_replace("¡", "&iexcl;", $mision);
  193. }
  194. function bbcode_format($str){
  195.  
  196. $str = str_replace(":)", " <img src='./web-gallery/smilies/smile.gif' alt='Smiley' title='Smiley' border='0'> ", $str);
  197. $str = str_replace(";)", " <img src='./web-gallery/smilies/wink.gif' alt='Smiley' title='Smiley' border='0'> ", $str);
  198. $str = str_replace(":P", " <img src='./web-gallery/smilies/tongue.gif' alt='Smiley' title='Smiley' border='0'> ", $str);
  199. $str = str_replace(";P", " <img src='./web-gallery/smilies/winktongue.gif' alt='Smiley' title='Smiley' border='0'> ", $str);
  200. $str = str_replace(":p", " <img src='./web-gallery/smilies/tongue.gif' alt='Smiley' title='Smiley' border='0'> ", $str);
  201. $str = str_replace(";p", " <img src='./web-gallery/smilies/winktongue.gif' alt='Smiley' title='Smiley' border='0'> ", $str);
  202. $str = str_replace("(L)", " <img src='./web-gallery/smilies/heart.gif' alt='Smiley' title='Smiley' border='0'> ", $str);
  203. $str = str_replace("(l)", " <img src='./web-gallery/smilies/heart.gif' alt='Smiley' title='Smiley' border='0'> ", $str);
  204. $str = str_replace(":o", " <img src='./web-gallery/smilies/shocked.gif' alt='Smiley' title='Smiley' border='0'> ", $str);
  205. $str = str_replace(":O", " <img src='./web-gallery/smilies/shocked.gif' alt='Smiley' title='Smiley' border='0'> ", $str);
  206. $str = str_replace("\n", chr(10), $str);
  207.  
  208. $simple_search = array(
  209. '/\[b\](.*?)\[\/b\]/is',
  210. '/\[i\](.*?)\[\/i\]/is',
  211. '/\[u\](.*?)\[\/u\]/is',
  212. '/\[s\](.*?)\[\/s\]/is',
  213. '/\[quote\](.*?)\[\/quote\]/is',
  214. '/\[link\=(.*?)\](.*?)\[\/link\]/is',
  215. '/\[url\=(.*?)\](.*?)\[\/url\]/is',
  216. '/\[color\=(.*?)\](.*?)\[\/color\]/is',
  217. '/\[size=small\](.*?)\[\/size\]/is',
  218. '/\[size=large\](.*?)\[\/size\]/is',
  219. '/\[code\](.*?)\[\/code\]/is',
  220. '/\[Habbo\=(.*?)\](.*?)\[\/Habbo\]/is',
  221. '/\[room\=(.*?)\](.*?)\[\/room\]/is',
  222. '/\[group\=(.*?)\](.*?)\[\/group\]/is'
  223. );
  224.  
  225. $simple_replace = array(
  226. '<strong>$1</strong>',
  227. '<em>$1</em>',
  228. '<u>$1</u>',
  229. '<s>$1</s>',
  230. "<div class='bbcode-quote'>$1</div>",
  231. "<a href='$1'>$2</a>",
  232. "<a href='$1'>$2</a>",
  233. "<font color='$1'>$2</font>",
  234. "<font size='1'>$1</font>",
  235. "<font size='3'>$1</font>",
  236. '<pre>$1</pre>',
  237. "<a href='./user_profile.php?id=$1'>$2</a>",
  238. "<a onclick=\"roomForward(this, '$1', 'private'); return false;\" target=\"client\" href=\"./client.php?forwardId=2&roomId=$1\">$2</a>",
  239. "<a href='./group_profile.php?id=$1'>$2</a>"
  240. );
  241.  
  242. $str = preg_replace ($simple_search, $simple_replace, $str);
  243.  
  244. return $str;
  245. }
  246.  
  247. // #########################################################################
  248. // SSO TICKET PARA BUTERFLYEMULADOR / BUTTERSTORM
  249. // #########################################################################
  250.  
  251. function GenerateTicket(){
  252.  
  253. $data = "ST-";
  254.  
  255. for ($i=1; $i<=6; $i++){
  256. $data = $data . rand(0,9);
  257. }
  258.  
  259. $data = $data . "-";
  260.  
  261. for ($i=1; $i<=20; $i++){
  262. $data = $data . rand(0,9);
  263. }
  264.  
  265. $data = $data . "";
  266. $data = $data . rand(0,5);
  267.  
  268. return $data;
  269. }
  270.  
  271. // #########################################################################
  272.  
  273. if(!empty($_SESSION['username'])){
  274.  
  275. $rawname = $_SESSION['username'];
  276. $rawpass = $_SESSION['password'];
  277.  
  278. $usersql = mysql_query("SELECT * FROM users WHERE username = '".$rawname."' AND password = '".$rawpass."' LIMIT 1");
  279. $myrow = mysql_fetch_assoc($usersql);
  280.  
  281.  
  282. $password_correct = mysql_num_rows($usersql);
  283.  
  284. $my_id = $myrow['id'];
  285. $user_rank = $myrow['rank'];
  286. $user_time = $myrow['time'];
  287. $ban = mysql_query("SELECT * FROM bans WHERE value = '".$myrow['username']."' AND bantype = 'user' or value = '".$remote_ip."' AND bantype = 'ip' LIMIT 1");
  288. $bancheck = mysql_num_rows($ban);
  289.  
  290. if($myrow['ip_reg'] == "0"){
  291. mysql_query("UPDATE users SET ip_reg = '".$remote_ip."' WHERE id = '".$myrow['id']."'");
  292.  
  293. }elseif($password_correct !== 1){
  294.  
  295. session_destroy();
  296. header("location: ".$path."1");
  297. exit;
  298.  
  299. }elseif($bancheck > 0){
  300.  
  301. $bandata = mysql_fetch_assoc($ban);
  302.  
  303. $timestamp = time();
  304. if($bandata['expire'] > $timestamp){
  305. $login_error = "Du bist gebannt! Der Grund für deinen Bann lautet \"".$bandata['reason']."\" und dauert bis ".date('d.m.Y - H:i:s', $bandata['expire'])."";
  306. include('logout.php');
  307. session_destroy(); exit;
  308.  
  309. } else{
  310. mysql_query("DELETE FROM bans WHERE value = '".$name."' AND bantype = 'user' or value = '".$remote_ip."' AND bantype = 'ip' LIMIT 1"); }
  311. }
  312.  
  313. $logged_in = true;
  314. $name = HoloText($myrow['username']);
  315.  
  316. } else {
  317.  
  318. $user_rank = 0;
  319. $name = "No-Name";
  320. $my_id = "No-ID";
  321. $myticket = "ST-No-Name-Habbore-fe";
  322. $logged_in = false;
  323.  
  324. }
  325.  
  326. // #########################################################################
  327. // HC CHECK
  328. // #########################################################################
  329.  
  330. $hc_a = mysql_query("SELECT * FROM user_subscriptions WHERE user_id = '".$my_id."' and timestamp_expire > '".time()."'");
  331. $hc = mysql_num_rows($hc_a);
  332.  
  333. function getHCDays($my_id){
  334.  
  335. $sql = mysql_query("SELECT timestamp_activated,timestamp_expire FROM user_subscriptions WHERE user_id = '".$my_id."' LIMIT 1") or die(mysql_error());
  336.  
  337. if (mysql_num_rows($sql) == 0){
  338. return 0;
  339. }
  340.  
  341. $data = mysql_fetch_assoc($sql);
  342. $diff = $data['timestamp_expire'] - time();
  343.  
  344. if ($diff <= 0){
  345. return 0;
  346. }
  347.  
  348. return ceil($diff / 86400);
  349. }
  350.  
  351. // #########################################################################
  352. // MANUTENÇÃO
  353. // #########################################################################
  354.  
  355. if($user_rank > 8){
  356.  
  357. if(session_is_registered(hkusername) && session_is_registered(hkpassword)){
  358. $rank['iAdmin'] = "1";
  359. } else {
  360. $rank['iAdmin'] = "0";
  361. }
  362.  
  363. } else {
  364. $rank['iAdmin'] = "0";
  365. }
  366.  
  367. if($maintenance == '1' && !$is_maintenance && $rank['iAdmin'] < 1){
  368. header("Location: ".$path."/maintenance");
  369. exit;
  370. } elseif($rank['iAdmin'] == 1 && $config['variable'] == "cms_maintenance" && $config['value'] == '1'){
  371. $notify_maintenance = true;
  372. }
  373.  
  374. // #########################################################################
  375.  
  376. function GetUserBadge($strName){ // supports user IDs also/ supports user IDs also/ supports user IDs also
  377.  
  378. if(is_numeric($strName)){
  379. $check = mysql_query("SELECT id FROM users WHERE id = '".$strName."' AND badge_status = '1' LIMIT 1") or die(mysql_error());
  380. } else {
  381. $check = mysql_query("SELECT id FROM users WHERE username = '".FilterText($strName)."' AND badge_status = '1' LIMIT 1") or die(mysql_error());
  382. }
  383.  
  384. $exists = mysql_num_rows($check);
  385.  
  386. if($exists > 0){
  387. $usrrow = mysql_fetch_assoc($check);
  388. $check = mysql_query("SELECT * FROM user_badges WHERE user_id = '".$usrrow['id']."' AND badge_slot = '1' LIMIT 1") or die(mysql_error());
  389. $hasbadge = mysql_num_rows($check);
  390. if($hasbadge > 0){
  391. $badgerow = mysql_fetch_assoc($check);
  392. return $badgerow['badge_id'];
  393. } else {
  394. return false;
  395. }
  396. } else {
  397. return false;
  398. }
  399. }
  400.  
  401. function GetUserGroup($my_id){
  402. $check = mysql_query("SELECT id_group FROM group_members WHERE id_user = '".$my_id."' AND is_current = '1' LIMIT 1") or die(mysql_error());
  403. $has_fave = mysql_num_rows($check);
  404.  
  405. if($has_fave > 0){
  406.  
  407. $row = mysql_fetch_assoc($check);
  408. $groupid = $row['id_group'];
  409.  
  410. return $groupid;
  411.  
  412. } else {
  413.  
  414. return false;
  415.  
  416. }
  417. }
  418.  
  419. function GetUserGroupBadge($my_id){
  420. $check = mysql_query("SELECT id_group FROM group_members WHERE id_user = '".$my_id."' AND is_current = '1' LIMIT 1") or die(mysql_error());
  421. $has_badge = mysql_num_rows($check);
  422.  
  423. if($has_badge > 0){
  424.  
  425. $row = mysql_fetch_assoc($check);
  426. $groupid = $row['id_group'];
  427.  
  428. $check = mysql_query("SELECT badge FROM group_details WHERE id = '".$groupid."' LIMIT 1") or die(mysql_error());
  429.  
  430. $row = mysql_fetch_assoc($check);
  431. $badge = $row['badge'];
  432.  
  433. return $badge;
  434.  
  435. } else {
  436.  
  437. return false;
  438.  
  439. }
  440. }
  441.  
  442. function IsUserBanned($name){
  443.  
  444. $check = mysql_query("SELECT * FROM bans WHERE value = '".$my_id."' AND bantype = 'user' or value = '".$remote_ip."' AND bantype = 'ip'") or die(mysql_error());
  445. $is_banned = mysql_num_rows($check);
  446.  
  447. if($is_banned > 0){
  448. $bandata = mysql_fetch_assoc($check);
  449. $reason = $bandata['reason'];
  450. $expire = $bandata['expire'];
  451.  
  452. $stamp_now = time();
  453.  
  454. if($stamp_now < $bandata['expire']){
  455. return true;
  456. } else { // ban expired
  457. mysql_query("DELETE FROM bans WHERE value = '".$my_id."' AND bantype = 'user' or value = '".$remote_ip."' AND bantype = 'ip' LIMIT 1") or die(mysql_error());
  458. return false;
  459. }
  460. } else {
  461. return false;
  462. }
  463. }
  464.  
  465. // #########################################################################
  466.  
  467. function mysql_evaluate($query, $default_value="undefined") {
  468. $result = mysql_query($query) or die(mysql_error());
  469.  
  470. if(mysql_num_rows($result) < 1){
  471. return $default_value;
  472. } else {
  473. return mysql_result($result, 0);
  474. }
  475. }
  476.  
  477. // #########################################################################
  478.  
  479. function FilterText($str, $advanced=false) {
  480. if($advanced == true){ return mysql_real_escape_string($str); }
  481. $str = mysql_real_escape_string(htmlspecialchars($str));
  482. return $str;
  483. }
  484.  
  485.  
  486. function HoloText($str, $advanced=false, $bbcode=false) {
  487. if($advanced == true){ return stripslashes($str); }
  488. $str = nl2br(htmlspecialchars($str));
  489. if($bbcode == true){$str = bbcode_format($str); }
  490. return $str;
  491. }
  492.  
  493. // #########################################################################
  494. // BLOQUEI DE PAISES ADSENSE
  495. // #########################################################################
  496.  
  497. $_SERVER['REMOTE_ADDR'] = @$_SERVER["HTTP_CF_CONNECTING_IP"] ? @$_SERVER["HTTP_CF_CONNECTING_IP"] : $_SERVER["REMOTE_ADDR"];
  498.  
  499.  
  500. $paises = array("BR", "PT");
  501. $ips = array("208.115.227.212");
  502.  
  503. if(!in_array($_SERVER["HTTP_CF_IPCOUNTRY"],$paises))
  504. {
  505. if(stristr($_SERVER['HTTP_USER_AGENT'], 'Googlebot')){ $cancel_disable = "true"; }
  506. if(strstr(strtolower($_SERVER['HTTP_USER_AGENT']), "google")){ $cancel_disable = "true"; }
  507. if(stristr($_SERVER['HTTP_USER_AGENT'], 'AdsBot-Google')){ $cancel_disable = "true"; }
  508. if(stristr($_SERVER['HTTP_USER_AGENT'], 'Mediapartners-Google')){ $cancel_disable = "true"; }
  509. if(stristr($_SERVER['HTTP_USER_AGENT'], 'Swiftbot')){ $cancel_disable = "true"; }
  510. if(in_array($_SERVER['REMOTE_ADDR'],$ips)){ $cancel_disable = "true"; }
  511. if(in_array($_SERVER['REMOTE_ADDR'] == '74.86.158.106')){ $cancel_disable = "true"; }
  512. if(in_array($_SERVER['REMOTE_ADDR'] == '74.86.158.107')){ $cancel_disable = "true"; }
  513. if(in_array($_SERVER['REMOTE_ADDR'] == '74.86.158.108')){ $cancel_disable = "true"; }
  514. if(in_array($_SERVER['REMOTE_ADDR'] == '46.137.190.132')){ $cancel_disable = "true"; }
  515. if(in_array($_SERVER['REMOTE_ADDR'] == '122.248.234.23')){ $cancel_disable = "true"; }
  516.  
  517. if($cancel_disable != "true")
  518. {
  519. header("Status: 404 Not Found");
  520. header('HTTP/1.0 404 Not Found');
  521. echo "<h1>404 Not Found</h1>";
  522. echo "The page that you have requested could not be found.";
  523. exit();
  524.  
  525. }
  526. }
  527.  
  528.  
  529.  
  530. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!