<?php
$host = "127.0.0.1";            // Mysql host
$user = "root";                         // Mysql username
$pass = "paswd";                        // Mysql password
$characters = "characters"; // Characters database
$auth = "auth";                      // Auth/realm server

mysql_connect($host, $user, $pass) or die('neprisijungta prie duomenu bazes');

function check_for_symbols($string)
{
    $len=strlen($string);
    $allowed_chars="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
    for($i=0;$i<$len;$i++)if(!strstr($allowed_chars,$string[$i]))
        return TRUE;
    return FALSE;
}

function sha_password($user,$pass)
{
    $user = strtoupper($user);
    $pass = strtoupper($pass);
    return SHA1($user.':'.$pass);
}

function paswd_check($user, $paswd)
{
	mysql_selectdb($auth);
	$data = mysql_query("select `sha_pass_hash` from `account` where `id`='$user'");
	$paswd0 = mysql_fetch_array($data, MYSQL_NUM);
	if($paswd0[0] == $paswd)
		return true;
	return false;
}

function check_character($char, $acc_id)
{
	mysql_selectdb($characters);
	$data = mysql_query("select * from characters where user='$N' and `account`='$acc_id'");
	if($data != NULL)
		return true
	return false;
}

function unstuck($character)
{
	$data = mysql_query("select id, race, class from characters where name='$character'");
	$data = mysql_fetch_array($data, MYSQL_NUM);

	//initializing variables
	$map = $posX = $posY = $posZ = $posO = 0;

	switch($data[1])
	{
		case 1:	//Human
		{
			if($data[2] == 6) //6 = death knight
			{$map = 0; $posX = -8914.57f; $posY = -5662.21f; $posZ = 426.028f; $posO = 3.93485;}
			else{$map = 0; $posX = -8914.57f; $posY = -133.909f; $posZ = 80.5378f; $posO = 0; }
		}break;
		case 2:	//Orc
		{
			if($data[2] == 6) //6 = death knight
			{$map = 0; $posX = -8914.57f; $posY = -5662.21f; $posZ = 426.028f; $posO = 3.93485;}
			else{$map = 1; $posX = -618.518f; $posY = -4251.67f; $posZ = 38.718f; $posO = 0;}
		}break;
		case 3:	//Dwarf
		{
			if($data[2] == 6) //6 = death knight
			{$map = 0; $posX = -8914.57f; $posY = -5662.21f; $posZ = 426.028f; $posO = 3.93485;}
			else{$map = 1; $posX = -6230.42f; $posY = 330.232f; $posZ = 383.105f; $posO = 6.17716f;}
		}break;
		case 4:	//Night Elf
		{
			if($data[2] == 6) //6 = death knight
			{$map = 0; $posX = -8914.57f; $posY = -5662.21f; $posZ = 426.028f; $posO = 3.93485;}
			else{$map = 1; $posX = 10311.3f; $posY = 831.463f; $posZ = 1326.41f; $posO = 5.69632f;}
		}break;
		case 5:	//Undead
		{
			if($data[2] == 6) //6 = death knight
			{$map = 0; $posX = -8914.57f; $posY = -5662.21f; $posZ = 426.028f; $posO = 3.93485;}
			else{$map = 0; $posX = 1699.85f; $posY = 1706.56f; $posZ = 135.928f; $posO = 2.70526f;}
		}break;
		case 6:	//Tauren
		{
			if($data[2] == 6) //6 = death knight
			{$map = 0; $posX = -8914.57f; $posY = -5662.21f; $posZ = 426.028f; $posO = 3.93485;}
			else{$map = 1; $posX = -2915.55f; $posY = -257.347f; $posZ = 59.2693f; $posO = 0;}
		}break;
		case 7:	//Gnome
		{
			if($data[2] == 6) //6 = death knight
			{$map = 0; $posX = -8914.57f; $posY = -5662.21f; $posZ = 426.028f; $posO = 3.93485;}
			else{$map = 0; $posX = -4983.42f; $posY = 877.7f; $posZ = 274.31f; $posO = 0;}
		}break;
		case 8:	//Troll
		{
			if($data[2] == 6) //6 = death knight
			{$map = 0; $posX = -8914.57f; $posY = -5662.21f; $posZ = 426.028f; $posO = 3.93485;}
			else{$map = 1; $posX = -1171.45f; $posY = -5263.65f; $posZ = 0.847728f; $posO = 0;}
		}break;
		case 9:	//Goblin
		{
			if($data[2] == 6) //6 = death knight
			{$map = 0; $posX = -8914.57f; $posY = -5662.21f; $posZ = 426.028f; $posO = 3.93485;}
			else{$map = 648; $posX = -8423.78f; $posY = 1363.93f; $posZ = 104.679f; $posO = 1.56294;}
		}break;
		case 10://Blood Elf
		{
			if($data[2] == 6) //6 = death knight
			{$map = 0; $posX = -8914.57f; $posY = -5662.21f; $posZ = 426.028f; $posO = 3.93485;}
			else{$map = 530; $posX = -1171.45f; $posY = -6357.29f; $posZ = 33.4026f; $posO = 5.31605f;}
		}break;
		case 11://Draenei
		{
			if($data[2] == 6) //6 = death knight
			{$map = 0; $posX = -8914.57f; $posY = -5662.21f; $posZ = 426.028f; $posO = 3.93485;}
			else{$map = 530; $posX = -3961.64f; $posY = -13931.2f; $posZ = 100.615f; $posO = 2.08364f;}
		}break;
		case 22://Worgen
		{
			if($data[2] == 6) //6 = death knight
			{$map = 0; $posX = -8914.57f; $posY = -5662.21f; $posZ = 426.028f; $posO = 3.93485;}
			else{$map = 638; $posX = -1443.62f; $posY = 1409.88f; $posZ = 35.5561f; $posO = 3.19265f;}
		}break;
	}

	mysql_query("update `characters` set `map`='$map', `position_x`='$posX', `position_y`='$posY', `position_z`='$posZ', `orientation`='".$data[1]."'";
}

if($_POST['unstuck'])
{
	$username = mysql_real_escape_string(strtoupper($_POST['username']));
	$password = mysql_real_escape_string(strtoupper($_POST['password']));
	$password = sha_password($username, $password);
	$character = mysql_real_escape_string(strtoupper($character));

	if(!check_for_symbols($username) || !check_for_symbols($password) || !check_for_symbols($character))
		die("you can use only mubers and letters");

	mysql_selectdb($auth) or die("cant connect to $auth database");
	$account = mysql_query("select `id` from `account` where `username`='$username'");
	if($account != NULL)
	{
		if(paswd_check($account))
		{
			if(check_character($character, $account))
			{
				$character_id = mysql_query("select id, online from characters where name='$character'");
				$character_id = mysql_fetch_array($character_id, MYSQL_NUM);
				if($character_id[1] != 1)
				{
					unstuck($character_id[0]);
					echo"Your character has been teleported to start zone";
				}else die("Your character should be offline");
			}else die("You have entered wrong character name or this character does not exists");
		}else die("You have entered wrong password or account. retype it again");

	}else die('this account does not exists');
}
else
{
?>
<center>
<form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="POST">
Username:<input type="text" name="username"/><br />
Password:<input type="password" name="password"/><br />
Character Name:<input type="text" name="character"/><br />
<input type="submit" name="unstuck" value="Unstuck!"/>
</form>
</center>
<?php
}
?>