<?php
include( "../configs/class.curl.php" );
if ( $_POST['cpu'] == "update" )
{
    echo getRS( array( "sub" => "getapicpu_v1" ) );
    exit( );
}
include( "../configs/ez_sql.php" );
include( "func.inc.php" );
$row = $db->get_row( "SELECT id,user,pass,salt FROM admin WHERE id=1" );
if ( $_COOKIE['ffAdmin'] != md5( md5( $row->user ).$row->salt ) )
{
    echo $msg;
    header( "Location: index.php" );
}
else
{
    $action = mysql_real_escape_string( $_POST['action'] );
    $userid = isset( $_POST['userid'] ) ? encrypt( mysql_real_escape_string( $_POST['userid'] ) ) : "";
    $pass = isset( $_POST['pass'] ) ? ( encrypt( $_POST['pass'] ) ) : "";
    $id = isset( $_POST['id'] ) ? mysql_real_escape_string( $_POST['id'] ) : "";
    switch ( $action )
    {
        case updateUser :
            if ( !$db->query2( "UPDATE `filefetch` SET `userid` = '{$userid}', `pass` = '{$pass}' WHERE `filefetch`.`id`= '{$id}'" ) )
            {
                echo "<div id=\"failure\">Settings Not saved, because nothing was changed.</div>";
            }
            else
            {
                echo "<div id=\"success\">Username and Password Sucessfully Updated</div>";
            }
            break;
        case addNew :
            $params = array( "sub" => "getaccountdetails_v1", "type" => "prem" );
            $params['login'] = $_POST['userid'];
            $params['password'] = $_POST['pass'];
            $str = getRS( $params );
            if ( $str['accountid'] != NULL )
            {
                $expired = $str['billeduntil'] < $str['servertime'] ? 1 : 0;
                $billeduntil = date( "d M y", $str['billeduntil'] );
                $usageleft = $str['tskb'] / 1000;
                switch ( $usageleft )
                {
                    case 5000 < $usageleft :
                        $bg = "#00CC00";
                        break;
                    case $usageleft < 2000 :
                        $bg = "#FE3F44";
                        break;
                }
                $bg = "orange";
                break;
                $usageleft = $str['tskb'] != null ? number_format( $usageleft, 0 ) : 0;
                $sql = "INSERT INTO `filefetch` (`id` ,`type` ,`userid` ,`pass` , `tskb`,`billeduntil`,`autoextend`,`autorefill`,`rapids`,`expired`) VALUES (NULL , 'rapidshare', '{$userid}', '{$pass}', '{$str['tskb']}','{$str['billeduntil']}', '{$str['autoextend']}', '{$str['autorefill']}', '{$str['rapids']}', '{$expired}')";
            }
            if ( $sql != null && $db->query2( $sql ) )
            {
                $lastInsert = mysql_insert_id( );
                $count = $db->get_var( "SELECT count(*) FROM `filefetch`" );
                $rowNo = $expired == 0 ? $count : "<acronym style=\"border-bottom:0\" title=\"This account has expired\"><img src=\"http://i29.tinypic.com/2mfwxi1.png\"/></acronym>";
                echo "<tr align=center id={$lastInsert}><td>{$rowNo}</td><td>";
                echo $params[login];
                echo "</td><td>";
                echo $params[password];
                echo "</td><td align=center><div style='background-color:{$bg};' class='tsfkb'>{$usageleft} Mb</div></td><td align=center>";
                echo date( "d-m-y", $str[billeduntil] );
                echo "</td><td align=center>";
                echo $str[rapids];
                echo "</td><td><img src='img/icons/status-{$str['autoextend']}.png'/></td><td><img src='img/icons/status-{$str['autorefill']}.png'/></td><td><button class=deleteThis value={$lastInsert}>x</button></td><td><a href=# class=editRow>Edit</a></td></tr>";
            }
            else
            {
                echo "<div id=\"failure\">Please try again later.</div>";
            }
            break;
        case updateAll :
            $results = $db->get_results( "SELECT * FROM `filefetch`" );
            foreach ( $results as $result )
            {
                $userid = decrypt( $result->userid );
                $pass = decrypt( $result->pass );
                $id = $result->id;
                $params = array( "sub" => "getaccountdetails_v1", "type" => "prem" );
                $params['login'] = $userid;
                $params['password'] = $pass;
                $str = getRS( $params );
                if ( $str['accountid'] != NULL )
                {
                    $expired = $str['billeduntil'] < $str['servertime'] ? 1 : 0;
                    if ( $db->query2( "UPDATE `filefetch` SET `tskb` = '{$str['tskb']}', `billeduntil` = '{$str['billeduntil']}', `autoextend` = '{$str['autoextend']}', `autorefill` = '{$str['autorefill']}', `rapids` = '{$str['rapids']}', `expired` = '{$expired}' WHERE `id` ='' LIMIT 1" ) )
                    {
                        $done = 1;
                    }
                }
            }
            if ( $done == 1 )
            {
                echo "<div id=\"success\">Accounts Updated Sucessfully.</div>";
            }
            else
            {
                echo "<div id=\"success\">All accounts Updated, nothing was changed.</div>";
            }
            break;
        case delete :
            if ( $db->query2( "DELETE FROM `filefetch` WHERE `filefetch`.`id` = {$id} LIMIT 1" ) )
            {
                echo "<div id=\"success\">Account Deleted Sucessfully.</div>";
            }
            else
            {
                echo "<div id=\"failure\">Account Could Not be deleted, because nothing was changed.</div>";
            }
            break;
        case DeleteExpired :
            if ( $db->query2( "DELETE FROM `filefetch` WHERE `filefetch`.`expired` = 1" ) )
            {
                echo "<div id=\"success\">Accounts Deleted Sucessfully.</div>";
            }
            else
            {
                echo "<div id=\"failure\">Accounts Could Not be deleted, because nothing was changed.</div>";
            }
            break;
        case settings :
            foreach ( $_POST as $k => $v )
            {
                $$k = mysql_real_escape_string( $v );
            }
            $set = $db->get_row( "SELECT * FROM settings WHERE `id`=1" );
            foreach ( $set as $k => $v )
            {
                $field[] = " `".$k."`= '".$$k."'";
            }
            unset( $field[0] );
            $fields = join( ",", $field );
            if ( $db->query2( "UPDATE `settings` SET {$fields} WHERE (`id`='1') LIMIT 1" ) )
            {
                echo "<div id=\"success\">Settings Saved Successfully.</div>";
            }
            else
            {
                echo "<div id=\"failure\">Settings Could Not be saved, because nothing was changed.</div>";
            }
            break;
    }
    if ( FALSE )
    {
        $field = mysql_real_escape_string( $_POST['field'] );
        $val = mysql_real_escape_string( $_POST['val'] );
        if ( 1 < $id && $field == "file_size_limit" || 1 < $id && $field == "maxdl" )
        {
            $default = $db->get_var( "SELECT {$field} FROM `groups` WHERE `gid` = {$id}" );
            if ( $default != $val )
            {
                $db->query( " ALTER TABLE `users` CHANGE `{$field}` `{$field}` INT(11) NOT NULL DEFAULT '{$val}'" );
                $db->query( "UPDATE `users` SET `{$field}` = {$val} WHERE `{$field}` = {$default}" );
            }
        }
        if ( $db->query2( "UPDATE `groups` SET `{$field}`='{$val}' WHERE (`gid`='{$id}') LIMIT 1" ) )
        {
            echo "<div id=\"success\">Settings Saved Successfully.".$msg."</div>";
        }
        else
        {
            echo "<div id=\"failure\">Settings Not saved, because nothing was changed.</div>";
        }
        break;
    }
    switch ( $action )
    {
        case email :
            foreach ( $_POST as $k => $v )
            {
                $$k = $v;
            }
            if ( $db->query2( "UPDATE `email` SET `from` = '{$from}', `name` = '{$name}', `head` = '{$head}', `foot` = '{$foot}', `siteurl` = '{$siteurl}' WHERE `id` =1" ) )
            {
                echo "<div id=\"success\">Settings Saved Successfully.</div>";
            }
            else
            {
                echo "<div id=\"failure\">Settings Not saved, because nothing was changed.</div>";
            }
            break;
        case users :
            $result = 0;
            foreach ( $_POST as $k => $v )
            {
                if ( is_int( $k ) )
                {
                    $size = $v[2];
                    if ( $db->query2( "UPDATE `users` SET `nodl` = '{$v['0']}', `maxdl` = '{$v['1']}', `file_size_limit` = '{$size}', `activate` = '{$v['3']}' WHERE `id` ={$k} LIMIT 1" ) )
                    {
                        ++$result;
                    }
                }
            }
            if ( 0 < $result )
            {
                echo "<div id=\"success\">Changes Saved Successfully.</div>";
            }
            else
            {
                echo "<div id=\"failure\">Changes Not saved, because nothing was changed.</div>";
            }
            break;
        case deleteUsers :
            foreach ( $_POST['checkbox_id'] as $id )
            {
                $db->query2( "DELETE FROM `users` WHERE `id` = {$id} LIMIT 1" );
            }
            break;
        case addNewUser :
            if ( $_POST['user'] == null || $_POST['pass'] == null || $_POST['email'] == null )
            {
                echo "<div id=\"failure\">All fields are compulsory.</div>";
                exit( );
            }
            $user_email = mysql_real_escape_string( $_POST['user'] );
            $md5user = md5( $_POST['user'] );
            $pass = md5( $_POST['pass'] );
            $salt = rand( 100, 999 );
            $email = $_POST['email'];
            $result = $db->get_row( "SELECT * FROM `users` WHERE `md5user` = '{$md5user}'" );
            $emailcheck = $db->get_row( "SELECT * FROM `users` WHERE `email` = '{$email}'" );
            if ( $emailcheck->email != null )
            {
                echo "<div id=\"failure\">"."An account  has already been registered with this ({$emailcheck->email}) email id."."</div>";
                exit( );
            }
            if ( $result->user != null )
            {
                echo "<div id=\"failure\">"."Username ({$result->user}) has already been taken, Please choose another name."."</div>";
                exit( );
            }
            else
            {
                $time = time( );
                $d = date( "d", $time );
                $m = date( "m", $time );
                $y = date( "y", $time );
                $defaults = $db->get_row( "SELECT * FROM `groups` WHERE `gid` = 2" );
                $nodl = is_numeric( $_POST['nodl'] ) ? $_POST['nodl'] : 0;
                $activate = is_numeric( $_POST['activate'] ) ? $_POST['activate'] : 0;
                $maxdl = is_numeric( $_POST['maxdl'] ) ? $_POST['maxdl'] : $defaults->maxdl;
                $file_size_limit = is_numeric( $_POST['file_size_limit'] ) ? $_POST['file_size_limit'] : $defaults->file_size_limit;
                if ( $db->query2( "INSERT INTO `users` (`user`, `pass`, `salt`, `email`, `gid`, `nodl`, `activate`, `md5user`, `d`, `m`, `y`, `time`, `md5ip`, `maxdl`, `file_size_limit`) VALUES ('{$user_email}', '{$pass}', '{$salt}', '{$email}', '2', , {$activate}, '{$md5user}', '{$d}', '{$m}', '{$y}', '{$time}', 'null', {$maxdl}, {$file_size_limit})" ) )
                {
                    echo "<div id=\"success\">New User added successfully.</div>";
                    echo "<script type=\"text/javascript\">window.location = \"users.php\";</script>";
                }
            }
            break;
        case logout :
            setcookie( "ffAdmin", "NULL", mktime( ) - 150000 );
    }
}
?>