<?php

include('db.php');

$action = $_GET['action'];

$username = $con->real_escape_string($_GET['username']);
$password = $con->real_escape_string(something($_GET['password']))));
$hwid = $con->real_escape_string($_GET['hwid']);
$invite_code = $con->real_escape_string($_GET['invite_code']);
$logged = false;

if(!$action)
{
    echo "Error";
}
else
{
    else if($action == "login3")
    {
        $query = $con->query("SELECT * FROM users WHERE username = '$username' and password = '$password'");
        $cnt = $query->num_rows;

        if($cnt == 1)
        {
            echo "1";
        }
        elseif ($cnt == 0)
        {
            echo "0";
        }
        elseif($cnt == 2)
        {
            echo "2";
        }
        elseif ($cnt == 3)
        {
            echo "3";
        }
        else
        {
            echo "0";
        }
    }
    else if($action == "admin")
    {
        $query = $con->query("SELECT * FROM admin WHERE username = '$username' and password = '$password' and hwid = '$hwid'");
        $cnt = $query->num_rows;

        if($cnt == 1)
        {
            echo "1";
        }
        elseif ($cnt == 0)
        {
            echo "0";
        }
        else
        {
            echo "0";
        }
    }
    else if($action == "hwid")
    {
        $query = $con->query("SELECT * FROM users WHERE username = '$username' and password = '$password' and hwid = '$hwid'");
        $cnt = $query->num_rows;

        if($cnt == 1)
        {
            echo "1";
        }
        elseif ($cnt == 0)
        {
            echo "0";
        }
        else
        {
            echo "0";
        }
    }
    else if($action == "dl")
    {
        $query = $con->query("SELECT * FROM users WHERE username = '$username' and password = '$password' and hwid = '$hwid'");
        $cnt = $query->num_rows;

        if($cnt == 1)
        {
            $logged = true;
        }
        elseif ($cnt == 0)
        {
            $logged = false;
        }
        else
        {
            $logged = false;
        }
        if ($logged)
        {
            $filename = "the acctual dll";
            $mimetype = "mime/type";
            header("Content-Type: ".$mimetype );
            echo readfile($filename);
        }
    }
    else if($action == "create_invite")
    {
        $query = $con->query("SELECT * FROM users WHERE username = '$username' and password = '$password' and hwid = '$hwid'");
        $cnt = $query->num_rows;
        if($cnt == 1)
        {
            $logged = true;
        }
        elseif ($cnt == 0)
        {
            $logged = false;
        }
        else
        {
            $logged = false;
        }
        if ($logged)
        {
            if($query = $con->query("INSERT INTO invites (data) VALUES ('$invite_code')"))
        {
            echo "1";
        }
        else
        {
            echo "0";
        }
        }
    }
    else if($action == "i_won_bullshit_invite_yay")
    {
        $query = $con->query("SELECT * FROM free WHERE hwid = '$hwid'");
        $cnt = $query->num_rows;
        if($cnt > 0)
        {
            $logged = true;
        }
        elseif ($cnt == 0)
        {
            $logged = false;
        }
        else
        {
            $logged = false;
        }
        if ($logged)
        {
            echo "2";
        }
        else
        {
            if($query = $con->query("INSERT INTO free (hwid) VALUES ('$hwid')"))
            {
              if($query = $con->query("INSERT INTO invites (data) VALUES ('$invite_code')"))
              {
              echo "1";
              }
            }

        }
    }
    else if($action == "sadness")
    {

    if($query = $con->query("INSERT INTO free (hwid) VALUES ('$hwid')"))
    {
        echo 1;
    }
    else
    {
        echo 0;
    }

    }
    else if($action == "register")
    {
        $query = $con->query("SELECT * FROM invites WHERE data = '$invite_code'");
        $cnt = $query->num_rows;
        if($cnt == 1)
        {
            $logged = true;
        }
        elseif ($cnt == 0)
        {
            $logged = false;
        }
        else
        {
            $logged = false;
        }

        if ($logged)
        {

            if($query = $con->query("DELETE FROM invites WHERE data = '$invite_code'"))
            {
                if($query = $con->query("INSERT INTO users (username,password,hwid) VALUES ('$username','$password','$hwid')"))
                {
                    echo "1";
                }
            }
        }
        else
        {
            echo "033";
        }
    }

}

?>