--[[
     Panel Logowania by Kurianusz @2016 .
	 Regulamin /Licencja
	 Korzystanie z tego kodu tylko jeĹĽeli posiadasz tzw. copyrights. Zakaz usuwania tej notatki!
	 Pamiętaj że nielegalne korzystanie z kodu podpada pod kodeks karny :> Tak samo jak usunięcie tej notatki!
]]



function sprawdzorganizacje(plr)
local x = exports['pystories-db']:dbGet("SELECT spawn from pystories_organization_list join pystories_organizations on pystories_organizations.code = pystories_organization_list.id WHERE sid=? and not(spawn=?)",getElementData(plr,"player:sid"),"0,0,0")
if x and #x > 0 then
local t = split(x[1].spawn, ",")
	return t
end
return false
end


addEvent("logging:checkAccount", true)
addEventHandler("logging:checkAccount", resourceRoot, function(login,pass)
	local result=exports["pystories-db"]:dbGet("SELECT * FROM pystories_users WHERE login=?", login)
	if result and #result > 0 then
		serial=getPlayerSerial(client)
		if result[1].register_serial~=serial then
			tak=true
				for i,v in ipairs(split(result[1].register_serial,",")) do
				if v==serial then tak=false end
			end
			if tak then
				return triggerClientEvent(client, "logging:result", resourceRoot, false, "Error: Wykryto inny serial logowania konta. Napisz na forum","nope")
			end
		end
		if result[1].login == login and result[1].pass == md5(pass) then
			local query=exports["pystories-db"]:dbSet("UPDATE pystories_users SET pass=? WHERE login=?",teaEncode(pass,"Trujeczka"),login)
			triggerClientEvent(client, "logging:result", resourceRoot, false, "Zaaktualizowano twoj profil! Zaloguj sie ponownie!.","git")
			return
		end
		if result[1].login == login and result[1].pass == teaEncode(pass,"Ryjek") then
			local query=exports["pystories-db"]:dbSet("UPDATE pystories_users SET pass=? WHERE login=?",teaEncode(pass,"Trujeczka"),login)
			triggerClientEvent(client, "logging:result", resourceRoot, false, "Zaaktualizowano twoj profil! Zaloguj sie ponownie!.","git")
			return
		end
		if result[1].login == login and result[1].pass == teaEncode(pass,"Trujeczka") then
			local query=exports["pystories-db"]:dbSet("UPDATE pystories_users SET pass=? WHERE login=?",teaEncode(pass,"jebaniidioci"),login)
			triggerClientEvent(client, "logging:result", resourceRoot, false, "Zaaktualizowano twoj profil! Zaloguj sie ponownie!.","git")
			return
		end
		if result[1].login == login and result[1].pass == teaEncode(pass,"jebaniidioci") then
			for i,player in pairs(getElementsByType("player")) do
				if getElementData(player,"player:sid") == result[1].id then
				triggerClientEvent(client, "logging:result", resourceRoot, false, "KtoĹ› jest zalogowany na to konto!!!!!.","blad")
				return
			end
			end
			if not result[1].login2 == false then
			setPlayerName(client, result[1].login2)
			else
			setPlayerName(client, login)
			end
			setElementData(client, "player:sid", result[1].id)
			exports['pystories-core']:loadPlayerData(client)
			triggerClientEvent(client, "logging:result", resourceRoot, true, "Zalogowałeś się pomyslnie","git")
			triggerEvent("SprawdzDom",root,client)
			setElementData(client,"player:organization:spawn",sprawdzorganizacje(client))
			setElementData(client,"player:logged",true)
			if result[1].register_serial == false then
			local query=exports["pystories-db"]:dbSet("UPDATE pystories_users SET register_serial=? WHERE login=?",getPlayerSerial(client),login)
			end
			local logs=exports["pystories-db"]:dbSet("INSERT INTO pystories_logs_login (name,serial,data) VALUES (?,?,NOW())", string.format(login.."("..result[1].id..")"),getPlayerSerial(client))
		else
			triggerClientEvent(client, "logging:result", resourceRoot, false, "Podane dane są nieprawidłowe.","blad")
		end
	else
		triggerClientEvent(client, "logging:result", resourceRoot, false, "Podany login nie istnieje w bazie.","blad")
	end
end)
local maks_ilosc_kont = 1 -- Maksymalna ilosc kont do rejestracji
addEvent("logging:newAccount", true)
addEventHandler("logging:newAccount", resourceRoot, function(login,pass)
    local login = escapeStrings(login)
    local pass = escapeStrings(pass)
	local result=exports["pystories-db"]:dbGet("SELECT * FROM pystories_users WHERE register_serial=?", getPlayerSerial(client))
	if result and #result >= maks_ilosc_kont then
		triggerClientEvent(client, "logging:result", resourceRoot, false, "Na ten serial zostala utworzona maksymalna ilosc kont.","blad")
	return end
	local result=exports["pystories-db"]:dbGet("SELECT * FROM pystories_users WHERE login=?", login)
	if result and #result > 0 then
		triggerClientEvent(client, "logging:result", resourceRoot, false, "Podany login juĹĽ istnieje w bazie.","blad")
	else
		local query=exports["pystories-db"]:dbSet("INSERT INTO pystories_users (login,pass,register_serial,changedpw) VALUES (?,?,?,??)", login, teaEncode(pass,"jebaniidioci"),getPlayerSerial(client),1)
		if query then
			triggerClientEvent(client, "logging:result", resourceRoot, false, "Pomyślnie zarejestrowałeś(aś) się","git")
			setElementData(client, "player:logged", true)
		end
	end
end)

function escapeStrings(str)
    local String = string.gsub(tostring(str),"'","")
    String = string.gsub(String, '"', "")
    String = string.gsub(String, ';', "")
    String = string.gsub(String, "\\", "")
    String = string.gsub(String, "/*", "")
    String = string.gsub(String, "*/", "")
    String = string.gsub(String, "'", "")
    String = string.gsub(String, "`", "")
    String = string.gsub(String, " ", "")
    String = string.gsub(String, " ", "")
    return String
end