<?php
$host="XXXXXXX";
$username="XXXXXXXX";
$password="XXXXXXX";
$db_name="XXXXXXX";
$tbl_name="XXXXXX";

mysql_connect("$host", "$username", "$password")or die("cannot connect");
mysql_select_db("$db_name")or die("cannot select DB");

$myusername=$_POST['myusername'];
#$mypassword=$_POST['mypassword'];

$sql="SELECT password FROM $tbl_name WHERE username='$myusername'";
#and password='$mypassword'";
$result=mysql_query($sql);
$otp=mysql_result($result,0,password);
#echo $otp, "<br/>";



#$otp=($otp+1);
##echo $otp;
#$txt="$otp";
##echo $txt;
#$count=mysql_num_rows($result);

#$sql="SELECT Seed FROM $tbl_name WHERE username='$myusername'";
#$results=mysql_query($sql);
#$currentseed=mysql_result($results,0,seed);
#$seed=$currentseed - 1;
#if($count==1){
#$seed ==<1


#echo $otp, "<br/>";




"<br/>";
"<br/>";

$randnum=mt_rand();

#echo "yo $rand", "<br/>" , "<br/>";

$otp1=$randnum/$otp;
#echo $otp1, "<br/>";

$otp2=pow($otp1,1);
#echo $otp2,"<br/>";



$Hotp=CRYPT('$otp2');
#echo $Hotp, "<br/>";

#$Hotp=crypt('SHA1','$otp2');
##echo $Hotp, "<br/>";


#if (CRYPT_MD5 == 1)
#{
##echo "Standard DES: ".crypt("$otp2")."\n<br />";
#}
#else
#{
##echo "Standard DES not supported.\n<br />";
#}





#pow(0,seed)

#round()


####Cypherblock puzzle####
###Once the One Time Password is created. It is then broken into sections, and one randomly is assigned as the one time password while another piece is used to as part of the session cookie.#######

$test1=substr($Hotp,0,6);
#echo "this string 1 $test1", "<br/>";

$test2=substr($Hotp,6,6);
#echo $test2, "<br/>";

$test3=substr($Hotp,12,6);
#echo $test3, "<br/>";

$test4=substr($Hotp,18,6);
#echo $test4, "<br/>";

$test5=substr($Hotp,24,6);
#echo $test5, "<br/>";

$test6=substr($Hotp,30,6);
#echo $test5, "<br/>";

####Rand####

$rand=rand(1,5);
#echo "rand $rand", "<br/>";

$rand1=rand(1,5);
#echo "rand1 $rand1", "<br/>";

if ("$rand"!="$rand1")
#"no issues", "<br/>";
#else
{
	while ("$rand"=="$rand1")
	{
		$rand1=rand(1,5);
		#echo "fixed $rand1", "<br/>";
	}
}


if ($rand == '1')
{
$USEROTP=($test1);
#echo "USER Key $USEROTP","<br/>";
}
elseif ($rand == '2') {
$USEROTP=($test2);
#echo "USER Key $USEROTP","<br/>";
}
 elseif ($rand == '3') {
 $USEROTP=($test3);
#echo "USER Key $USEROTP","<br/>";
}
  elseif ($rand == '4') {
  $USEROTP=($test4);
#echo "USER Key $USEROTP","<br/>";
}
 else {
  $USEROTP=($test5);
#echo "USER Key $USEROTP","<br/>";
}



if ($rand1 == '1')
{
$cookie=($test1);
#echo "cookie value $cookie","<br/>";
}
elseif ($rand1 == '2') {
$cookie=($test2);
#echo "cookie value $cookie","<br/>";
}
 elseif ($rand1 == '3') {
 $cookie=($test3);
#echo "cookie value $cookie","<br/>";
}
  elseif ($rand1 == '4') {
  $cookie=($test4);
#echo "cookie value $cookie","<br/>";
}
 else {
  $cookie=($test5);
#echo "cookie value $cookie","<br/>";
}




##tempt Cookie#####
#setcookie("user", $username, time()+604800); /* Expires in a week */


####Sending the OTP VIA SMS####

$sql1="SELECT Provider FROM $tbl_name WHERE username='$myusername'";

$var1=mysql_query($sql1);
$provider=mysql_result($var1,0,Provider);

$sql2="SELECT Phonenumber FROM $tbl_name WHERE username='$myusername'";
$var2=mysql_query($sql2);
$phonenumber=mysql_result($var2,0,Phonenumber);

$sql3="SELECT Areacode FROM $tbl_name WHERE username='$myusername'";
$var3=mysql_query($sql3);
$Acode=mysql_result($var3,0,Areacode);

$number=$Acode . $phonenumber;

#echo $provider, "<br/>";
#echo $Acode,$phonenumber, "<br/>";

#echo $number, "<br/>","<br/>";

$subject = "One Time Password";
$message = "Your One Time Password is $USEROTP ";

#mail("$number@txt.bell.ca",$subject,$message,"From: webserver");

####Secure Cookie#####

##temptif

#setcookie("user", $username, $cookie, time()+3600);
##echo $_COOKIE ["user"] ,"<br/>";
 # print_r($_COOKIE);



##echo "Welcome " . $_COOKIE["user"] . "<br />";
#else
# #echo "Welcome guest!<br />";


#if($count==1){
#session_register("myusername");
#session_register("mypassword");
#header("location:login_success.php");
#}
#else {
##echo "Wrong Username or Password";
#}

header("location:OTP_checker.php")
?>