<?php

/*
 ____        _     _           _       _
|  _ \      | |   | |         | |     | |
| |_) |_   _| |__ | |__   ___ | | __ _| |__
|  _ <| | | | '_ \| '_ \ / _ \| |/ _` | '_ \
| |_) | |_| | |_) | |_) | (_) | | (_| | |_) |
|____/ \__,_|_.__/|_.__/ \___/|_|\__,_|_.__/

@author l:39s       <l39s@cock.lu>

@title  Bubbolab - Content Management System
@build labStarBETA 1.0.0

*/

ini_set('session.gc_probability', 1);
ini_set('session.gc_divisor', 10000000);
ini_set('session.gc_maxlifetime', 10000000);
session_set_cookie_params(10000000,"/");

session_start();
error_reporting(E_ALL);
error_reporting(0);

header('Content-Type: text/html; charset=utf-8');

# MySQLi
$mysqli->server = "localhost";
$mysqli->username = "root";
$mysqli->password = "lol:39s";
$mysqli->db = "wsdev_bsourcedb";
$mysqli->port = "3306";

$connection = mysqli_connect($mysqli->server,$mysqli->username,$mysqli->password,$mysqli->db,$mysqli->port) or require('mysqlerror.php');
if (mysqli_connect_errno($connection));
//if (isset($_SERVER['HTTP_X_REAL_IP'])) $_SERVER['REMOTE_ADDR'] = $_SERVER['HTTP_X_REAL_IP']; # Cloudflare

# URLs
$CMS->link = 'http://127.0.0.1/';
$CMS->name = 'Bubbolab';
$CMS->assets = 'web/assets';
$CMS->language = 'de_DE';
$CMS->footer = '%gibsnochnich%';

# Hotel Information
$H->name = 'Bubbo';
$H->link = 'http://Bubbo.ws';

# Filtertext /- PW HASHes
function PW_HASH($password){
$password = utf8_decode($password);
$hash_secret = "xCg532%@%gdvf^5DGaa6&*rFTfg^FD4\$OIFThrR_gh(ugf*/";
$string = md5($password.($hash_secret));
return $string;
}

function UF_HASH($password){
$hash_secret = "xCg532%@%gdvf^5DGaa6&*rFTfg^FD4\$OIFThrR_gh(ugf*/";
$string = md5($password.($hash_secret));
return $string;
}

function FilterText($str, $advanced=false) {
if($advanced == true){ return mysqli_real_escape_string($connection, addslashes($str)); }
$str = addslashes(htmlspecialchars($str));
return $str;
}

function HoloText($str, $advanced=false, $bbcode=false) {
if($advanced == true){ return stripslashes($str); }
$str = stripslashes(nl2br(htmlspecialchars($str)));
return $str;
}

# Initialisierung
$ip = $_SERVER['REMOTE_ADDR'];
$remote_ip = $_SERVER['REMOTE_ADDR'];
$date_full = date('d.m.Y H:i:s');
$date_normal = date('d.m.Y');

# Aktive Sessions
if(isset($_SESSION['username'])) {

$rawname = FilterText($_SESSION['username']);
$rawpass = FilterText($_SESSION['password']);

$sql = $connection->query("SELECT * FROM users WHERE username = '".$rawname."' AND password = '".$rawpass."' AND banned != '1' LIMIT 1");

if ($sql->num_rows < 1) {
unset($_SESSION['username'], $_SESSION['password']);
header("location: ".$server->link."/"); exit;
}

$user = $sql->fetch_object();
$sql = $connection->query("SELECT * FROM users WHERE username '$rawname' AND banned = '1'");

if($sql->num_rows > 0) {
unset($_SESSION['username'], $_SESSION['password']);
$_SESSION['error'] = "%banned%";
header("location: ".$server->link."/"); exit;
}


?>