<?php

$sessionID = $_GET["sessionID"];
$actionget = $_GET["action"];
$user = $_GET["user"];
$password = $_GET["password"];

if (empty($sessionID)) die ("ERROR:INVALID_SESSION_ID");

$action = new action;
if ($actionget == "connect")
 $response =  $action->connect($user, $password);
elseif ($actionget == "register")
    $response = $action->register($user, $password);
else
 $response = "ERROR:NO_ACTION";

echo rc4($sessionID, $response);

class action
{
 public $bdd;

 public function action()
 {
  try { $this->bdd = new PDO('mysql:host=localhost;dbname=u518864478_admin', 'u518864478_etaix', 'BddB0cc9'); }
  catch (Exception $ex) { die('ERROR:ERROR_BDD_CONNECTION'); }
 }

 public function connect($user, $pass)
 {
  if (!$this->userExist($user)) return ("ERROR:USER_NOT_FOUND");

  $data = $this->executeQuery("SELECT * FROM Users WHERE User = ?;", array($user));
  if ($data['Password'] != $pass)
   return ("ERROR:INCORRECT_PASSWORD");
  elseif ($data['Banned'] == 1)
      return ("ERROR:USER_BANNED");
  Else
   Return ("OK:") . $data['Premium'];
 }

 public function register($user, $pass)
 {
  if (!empty($data['User'])) return ("ERROR:KEY_ALREADY_USED");
  if ($this->userExist($user)) return ("ERROR:USER_ALREADY_EXIST");

  $this->executeQuery("INSERT INTO Users VALUES ('', ?, ?, '0', '0', ?);", array($user, $pass, getTime()));

  return ("OK:REGISTERED");
 }

 private function userExist($user)
 {
  $data = $this->executeQuery("SELECT * FROM Users WHERE User = ?;", array($user));
  if (empty($data['User']))
   return (false);
  Else
   return (true);
 }

 private function executeQuery($query, $args, $fetch = true)
 {
  $response = $this->bdd->prepare($query);
  $response->execute($args);
  if ($fetch)
  {
   $data = $response->fetch();
   $response->closeCursor();
   return ($data);
  }
  else
   Return ($response);
 }
}

function rc4($key, $str) {
$s = array();
for ($i = 0; $i < 256; $i++) {
$s[$i] = $i;
}

$j = 0;

for ($i = 0; $i < 256; $i++) {
$j = ($j + $s[$i] + ord($key[$i % strlen($key)])) % 256;
$x = $s[$i];
$s[$i] = $s[$j];
$s[$j] = $x;
}

$i = 0;
$j = 0;
$res = '';

for ($y = 0; $y < strlen($str); $y++) {
$i = ($i + 1) % 256;
$j = ($j + $s[$i]) % 256;
$x = $s[$i];
$s[$i] = $s[$j];
$s[$j] = $x;
$res .= $str[$y] ^ chr($s[($s[$i] + $s[$j]) % 256]);
}

return $res;
}

function getTime()
{
 date_default_timezone_get('Europe/Paris');
 return date("Y-m-d h:i:s");
}

?>