<?php
session_start();
include "l/info.php";
ini_set('display_errors',1);
ini_set('display_startup_erros',1);
error_reporting(E_ALL);
ini_set("magic_quotes_runtime", 0);
date_default_timezone_set('Brazil/East');
$servername = "mn20cf.com.mysql";
$username = "mn20cf_com_herox";
$password = "herox762762";
$dbname = "mn20cf_com_herox";
$conn = new mysqli($servername, $username, $password, $dbname);
if ($conn->connect_error) {
    die("Connection failed: " . $conn->connect_error);
}
function anti_injection($sql)
{
$sql = trim($sql);
$sql = strip_tags($sql);
$sql = addslashes($sql);
$sql = utf8_decode($sql);
return $sql;
}
$co = $_COOKIE['info'];
$info = explode("&", $co);
$usuario = $info[0];
if(!$usuario == 'herox'){
 die();
}
if($usuario == ''){
die();
}
if(isset($_SESSION['flood'])){
 if(time() > $_SESSION['flood']){
 session_destroy();
 } else {
 die("antflood");
 }
}
$data = date("d/m/y H:m:s");
$sql = "SELECT * FROM ban WHERE usuario='$usuario'";
$result = $conn->query($sql);
$sql1 = "SELECT * FROM kick WHERE usuario='$usuario'";
$result1 = $conn->query($sql1);
$ranksql = "SELECT * FROM herox WHERE husuario='$usuario'";
$rankresult = $conn->query($ranksql);
$rank = $rankresult->fetch_array();
$rank = $rank['rank'];
if($result->num_rows == 1){
    die("banido");
}
if($result1->num_rows == 1){
    die("kickado");
}
if(isset($_GET['env']) == 'true'){


if(isset($_COOKIE['f'])){
$cookie = $_COOKIE['f'];
if($rank == 1){
setcookie("f", "0", time() + 10);
}
 if($_COOKIE['f'] == 5 && $rank == 0){
 setcookie("f", "6", time() + 1500);
$sql = "INSERT INTO chat_logs values(null,'<font color=red>HeroxBot</font>','O $usuario foi mutado por 25minutos por flood','$data')";
$conn->query($sql);
$_SESSION['flood'] = time() + (30 * 60);
die("antiflod");
}
if($_COOKIE['f'] >= 6 && $rank == 0){
die("antiflod");
}
setcookie("f", $cookie+1, time() + 10);
} else {
setcookie("f", "1", time() + 10);
}
$message = anti_injection($_GET['msg']);
$messagerry = array("project",".tk","habbo-project","http://projectshabbo.br22.net/","http://projectshabbo.br22.net/Scorpion2014","http://projectshabbo.br22.net/Scorpion2014/index.php","barrar","gq","projectshabbo","http://1tapprojects.com","1tapprojects","http://1tapprojects.com/hb/Scorpion2014/","Scorpion2014","goo.gl/bk06VJ","bk06VJ","scorpion","SCORPION","1tap","secdet.com.br","http","www","://","secdet");
$message =  str_replace($messagerry, '<font color=red>bobba</font>', $message);
if($message == ''){
exit();
}
if(strstr($message, ':limpar') && $rank == 1){
$sql2 = "TRUNCATE chat_logs";
$conn->query($sql2);
exit;
}
if(strstr($message, ':ban') && $rank == 1){
$data = date("d/m H:i");
$ex = explode(" ",$message);
$sql2 = "INSERT INTO ban values(null,'$ex[1]','$ex[2]')";
$conn->query($sql2);
$sql = "INSERT INTO chat_logs values(null,'<font color=red>HeroxBot</font>','O $ex[1] foi banido do Herox','$data')";
$conn->query($sql);
exit();
}
if(strstr($message, ':desban') && $rank == 1){
$data = date("d/m H:i");
$ex = explode(" ",$message);
$sql2 = "DELETE FROM ban where usuario='$ex[1]'";
$conn->query($sql2);
$sql2 = "INSERT INTO chat_logs values(null,'<font color=red>HeroxBot</font>','O $ex[1] foi desbanido do Herox','$data')";
$conn->query($sql2);
exit();
}

if(strstr($message, ':kick') && $rank == 1){
$data = date("d/m H:i");
$ex = explode(" ",$message);
$sql1 = "INSERT INTO kick values('$ex[1]')";
$conn->query($sql1);
$sql2 = "INSERT INTO chat_logs values(null,'<font color=red>HeroxBot</font>','O $ex[1] foi kickado do Herox','$data')";
$conn->query($sql2);
exit();
}
if(strstr($message, ':presentes')){
$data = date("d/m H:i");
$a = "SELECT * FROM logs WHERE owner='$usuario'";
$aa = $conn->query($a);
$aaa = $aa->num_rows;
$sql2 = "INSERT INTO chat_logs values(null,'<font color=red>HeroxBot</font>','Olá <b>$usuario</b> vc tem $aaa presentes','$data')";
$conn->query($sql2);
exit();
}
if(strstr($message, ':deletar')){
$data = date("d/m H:i");
$sql2 = "DELETE FROM logs WHERE owner='$usuario'";
$conn->query($sql2);
$sql2 = "INSERT INTO chat_logs values(null,'<font color=red>HeroxBot</font>','<b>$usuario</b> limpou seus presentes','$data')";
$conn->query($sql2);
exit;
}
$sql2 = "INSERT INTO chat_logs values(null,'$usuario','$message','$data')";
$data = date("d/m H:i");
$conn->query($sql2);
} else if(isset($_GET['get']) == 'true'){
if(!isset($_GET['id'])){
    die();
}
$id = $_GET['id'];
$arr = array();
$per = 0;
$sql1 = "SELECT id FROM chat_logs";
$result1 = $conn->query($sql1);
$idc=$result1->num_rows;
$sql = "SELECT * FROM chat_logs WHERE id>'$id' ORDER BY id DESC LIMIT 20";
$result = $conn->query($sql);
if ($result->num_rows > 0) {
    while($row = $result->fetch_array()) {
        $per = 1;
        $arr[] = array(
        'id' => $row['id'],
        'usuario' => $row['usuario'],
        'message' => utf8_encode($row['message']),
        'data' => $row['data']
        );
    }
} else {
    $per = 0;
}
echo json_encode(array('per' => ''.$per.'','id' => $idc,'message' => $arr));
$conn->close();
}
?>