<?php
header('Content-Type: text/xml');
echo '<?xml version="1.0"?>';
function browser( $user_agent ){
    $browser  = $_SERVER[ 'HTTP_USER_AGENT' ];
    $browsers = array(
        'ie'      => 'MSIE',
        'chrome'  => 'Chrome',
        'safari'  => 'Safari',
        'opera'   => 'Opera',
        'firefox' => 'Firefox'
    );
    return ( strpos( $browser, $browsers[ $user_agent ] ) !== false );
}if(  browser( 'ie' ) ){
  die( '<login bSuccess="0" sMsg="Wrong browser or Hell Quest detected! - www.ON-CLAX.tk" />' );
}

error_reporting(0);
mysql_select_db("onclax", mysql_connect("localhost", "root", "123"));

if ($_SERVER['REMOTE_ADDR']) { $ip = mysql_real_escape_string($_SERVER['REMOTE_ADDR']);
} else { $ip = mysql_real_escape_string($_SERVER['REMOTE_ADDR']); }

if(isset($_POST['unm'])) {
    $username = mysql_real_escape_string($_POST['unm']);
    $password = mysql_real_escape_string($_POST['pwd']);
		$user_query = mysql_query('SELECT * FROM users WHERE Username="'.$username.'" AND Password="'.$password.'" LIMIT 1');
		$user_info = mysql_fetch_assoc($user_query);
		$user_id = $user_info['id'];
		if(mysql_num_rows($user_query) == 0){
			print '<login bSuccess="0" sMsg="Wrong username or password!"/>';
		} else {
			$upg_date = preg_replace('/\s+/', 'T', $user_info['UpgradeExpire']);
      $upg = ($user_info['UpgradeExpire'] >= 0) ? 1 : 0;

			print '<login bSuccess="1" userid="'.$user_id.'" iAccess="'.$user_info['Access'].'" iUpg="'.$upg.'" iAge="'.$user_info['Age'].'" sToken="'.$password.'" iUpgDays="'.$user_info['UpgradeDays'].'" strEmail="'.$user_info['Email'].'" bCCOnly="0"  dUpgExp="'.$upg_date.'" strCountryCode="EN" unm="'.$username.'" FBID="'.$user_id.'" FBName="'.$username.'">';
			$iplast = mysql_query("UPDATE `users` SET lastloginip='{$ip}' WHERE id='{$user_id}'");
			$last_login = mysql_query("UPDATE `users` SET LastLogin=NOW() WHERE id='{$user_id}'");
			$bankSpace = mysql_query("UPDATE `users` SET BankSlots=0 WHERE id='{$user_id}'");

			if (($user_info['Acces'] >= 40) || ($user_info['Access'] >= 40)) {
				$server_list = mysql_query("SELECT * FROM servers WHERE id>2");
				while ($server = mysql_fetch_assoc($server_list)) {
					$count = mysql_num_rows(mysql_query("SELECT * FROM users WHERE CurrentServer = '".$server['Name']."'"));
					print '<servers sName="'. $server['Name'] .'" sIP="'. $server['IP'] .'" iCount="'. $count .'" iMax="'. $server['Max'] .'" bOnline="'. $server['Online'] .'" iChat="'. $server['Chat'] .'" bUpg="'. $server['Upgrade'] .'" sLang="'. $server['sLang'] .'" iPort="'. $server['iPort'] .'"/>';
				}
			}

			$server_list = mysql_query("SELECT * FROM servers WHERE id<=2");
           	while ($server = mysql_fetch_assoc($server_list)) {
				$count = mysql_num_rows(mysql_query("SELECT * FROM users WHERE CurrentServer = '".$server['Name']."'"));
                print '<servers sName="'. $server['Name'] .'" sIP="'. $server['IP'] .'" iCount="'. $count .'" iMax="'. $server['Max'] .'" bOnline="'. $server['Online'] .'" iChat="'. $server['Chat'] .'" bUpg="'. $server['Upgrade'] .'" sLang="'. $server['sLang'] .'" iPort="'. $server['iPort'] .'"/>';
			}
        echo '</login>';
	}
} else {
	echo '<login bSuccess="0" sMsg="Entrada inválida, contate a equipe do www.ONCLAX.com imediatamente!"/>';
}
?>