<?php

if(!defined("MCR")){ exit("Hacking Attempt!"); }

class module{
	private $core, $db, $cfg, $user, $lng;

	public function __construct($core){
		$this->core		= $core;
		$this->db		= $core->db;
		$this->cfg		= $core->cfg;
		$this->user		= $core->user;
		$this->lng		= $core->lng_m;

		$bc = array(
			'Статическая страница' => BASE_URL."?mode=stats"
		);

		$this->core->bc = $this->core->gen_bc($bc);
	}

	public function content() {
		if ($_SERVER['REMOTE_ADDR'] != '149.202.89.26') {
			exit('Вас не звали, идите нахуй отсюдава');
		}

		$user = isset($_REQUEST['user']) ? $this->db->safesql($_REQUEST['user']) : '';
		$pass = md5(md5($_REQUEST['pass']));

		if (!empty($user) && !empty($pass)) {
			$query = $this->db->query("SELECT login, password, salt, gid FROM mcr_users WHERE login = '$user' LIMIT 1");
			if ($this->db->num_rows($query) == 0) {
				exit('Пользователь не найден');
			}

			$user = $this->db->fetch_assoc($query);

			if(!$this->user->auth->authentificate($_GET['pass'], $user['password'], $user['salt'])) {
				exit('Неверно введены данные');
			}

			if ($query) {
				if ($user['gid'] == 0) {
					exit('Вы были заблокированы на сайте');
				}
				$name = $user['login'];
				$bans = $this->db->query("SELECT * FROM bans WHERE name = '$name' LIMIT 1");

				$ban = $this->db->fetch_assoc($bans);

				if ($this->db->num_rows($ban) != 0) {
				    $msg = "Вы забанены " . $ban['banner'];

				    if ($ban['expires'] > 0) {
						$msg .= " до " . date("d.m.Y H:i:s", ceil($ban['expires']/1000));
				    }

				    $msg .= "\nПричина: " . $ban['reason'];
				} else {
				    $msg = "OK:$name";
				}
			} else {
        		$msg = "Неверный логин или пароль";
			}
		} else {
		    $msg = "Параметры user и pass являются обязательными!";
		}
		exit($msg);
	}
}