<?php
/**
*
* @ This file is created by http://DeZender.Net
* @ deZender (PHP7 Decoder for ionCube Encoder)
*
* @ Version			:	5.0.1.0
* @ Author			:	DeZender
* @ Release on		:	22.04.2022
* @ Official site	:	http://DeZender.Net
*
*/

function lisansimo_check($license_key, $lisansimo_server, $time)
{
	$stime = time();
	if (!isset($_COOKIE['lisansimo']) || ($time < ($stime - (int) $_COOKIE['lisansimo']))) {
		unset($_COOKIE['lisansimo']);
		setcookie('lisansimo', $stime);
	}
	if (($time == 0) || !isset($_COOKIE['lisansimo']) || (($_COOKIE['lisansimo'] - $stime) == 0)) {
		$lisansimo_ch = curl_init();
		curl_setopt($lisansimo_ch, CURLOPT_URL, $lisansimo_server . 'check');
		curl_setopt($lisansimo_ch, CURLOPT_POST, 1);
		curl_setopt($lisansimo_ch, CURLOPT_POSTFIELDS, http_build_query(['license_key' => $license_key, 'url' => (isset($_SERVER['HTTPS']) && ($_SERVER['HTTPS'] === 'on') ? 'https' : 'http') . ('://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI']), 'server_ip' => $_SERVER['SERVER_ADDR'], 'user_ip' => $_SERVER['REMOTE_ADDR']]));
		curl_setopt($lisansimo_ch, CURLOPT_RETURNTRANSFER, true);
		$lisansimo_result = json_decode(curl_exec($lisansimo_ch));
		curl_close($lisansimo_ch);

		if (!$lisansimo_result->valid) {
			unset($_COOKIE['lisansimo']);
			setcookie('lisansimo', 0);
			echo file_get_contents($lisansimo_server . 'page/warning');
			exit();
		}
	}
}
session_start();
include 'license.php';
lisansimo_check($license_key, 'https://main.stay.web.tr/', 10);
BDR\Route::get('/', function() {
	header('Location: /login');
});
BDR\Route::get('/logout', function() {
	$_SESSION = [];

	if (ini_get('session.use_cookies')) {
		$params = session_get_cookie_params();
		setcookie(session_name(), '', time() - 42000, $params['path'], $params['domain'], $params['secure'], $params['httponly']);
	}

	session_destroy();
	header('Location: /');
	exit();
});
BDR\Route::get('/logs', function() {
	if (!$_SESSION['loggedin']) {
		header('Location: /login');
	}
	else {
		include 'conn.php';
		include 'view/userlogs.view.php';
	}
});
BDR\Route::get('/main', function() {
	if (!$_SESSION['loggedin']) {
		header('Location: /login');
	}
	else {
		include 'conn.php';
		include 'view/user.view.php';
	}
});
BDR\Route::get('/users', function() {
	if (!$_SESSION['loggedin']) {
		header('Location: /login');
	}
	else {
		include 'conn.php';
		$userid = $_SESSION['id'];
		$query = $db->query('SELECT * FROM accounts WHERE id=\'' . $userid . '\'', PDO::FETCH_ASSOC);

		if ($query->rowCount()) {
			foreach ($query as $row) {
				$permission = $row['permission'];
			}
		}

		if ($permission == 5) {
			include 'view/users.view.php';
		}
		else {
			header('Location: /main');
		}
	}
});
BDR\Route::get('/announcements', function() {
	if (!$_SESSION['loggedin']) {
		header('Location: /login');
	}
	else {
		include 'conn.php';
		$userid = $_SESSION['id'];
		$query = $db->query('SELECT * FROM accounts WHERE id=\'' . $userid . '\'', PDO::FETCH_ASSOC);

		if ($query->rowCount()) {
			foreach ($query as $row) {
				$permission = $row['permission'];
			}
		}

		if ($permission == 5) {
			include 'view/announcements.view.php';
		}
		else {
			header('Location: /main');
		}
	}
});
BDR\Route::get('/announcements/new', function() {
	if (!$_SESSION['loggedin']) {
		header('Location: /login');
	}
	else {
		include 'conn.php';
		$userid = $_SESSION['id'];
		$query = $db->query('SELECT * FROM accounts WHERE id=\'' . $userid . '\'', PDO::FETCH_ASSOC);

		if ($query->rowCount()) {
			foreach ($query as $row) {
				$permission = $row['permission'];
			}
		}

		if ($permission == 5) {
			include 'view/announcements-add.view.php';
		}
		else {
			header('Location: /main');
		}
	}
});
BDR\Route::post('/announcements/new', function() {
	if (!$_SESSION['loggedin']) {
		header('Location: /login');
	}
	else {
		include 'conn.php';
		$userid = $_SESSION['id'];
		$query = $db->query('SELECT * FROM accounts WHERE id=\'' . $userid . '\'', PDO::FETCH_ASSOC);

		if ($query->rowCount()) {
			foreach ($query as $row) {
				$permission = $row['permission'];
			}
		}

		if ($permission == 5) {
			$title = $_REQUEST['title'];
			$data = $_REQUEST['data'];
			$public = $_REQUEST['public'];
			$date = date_create();
			$date = date_timestamp_get($date);
			$writer = $userid;
			$result = $db->prepare('INSERT INTO announcements SET title=?, data=?, time=?, writer=?, public=?');
			$result->execute([$title, $data, $date, $writer, $public]);
			header('Location: /announcements');
		}
		else {
			header('Location: /main');
		}
	}
});
BDR\Route::get('/announcements/edit/{id}', function($id) {
	if (!$_SESSION['loggedin']) {
		header('Location: /login');
	}
	else {
		include 'conn.php';
		$userid = $_SESSION['id'];
		$query = $db->query('SELECT * FROM accounts WHERE id=\'' . $userid . '\'', PDO::FETCH_ASSOC);

		if ($query->rowCount()) {
			foreach ($query as $row) {
				$permission = $row['permission'];
			}
		}

		if ($permission == 5) {
			include 'view/announcements-edit.view.php';
		}
		else {
			header('Location: /main');
		}
	}
});
BDR\Route::post('/announcements/edit/{id}', function($id) {
	if (!$_SESSION['loggedin']) {
		header('Location: /login');
................................................................
......................................
..............