<?php
include('boxydb.php');
$eusername = mysqli_real_escape_string($con, htmlspecialchars($_GET['g']));
$epassword = mysqli_real_escape_string($con, htmlspecialchars($_GET['w']));
$ekey = mysqli_real_escape_string($con, htmlspecialchars($_GET['r']));
$ehwid = mysqli_real_escape_string($con, htmlspecialchars($_GET['o']));
$ecomputername = mysqli_real_escape_string($con, htmlspecialchars($_GET['k']));

//DECRYPT USERNAME
exec("./ed.out d $eusername",$dusername);
$username = $dusername[0];
//echo "Decrypted username: ".$username;

// DECRYPT PASSWORD
exec("./ed.out d $epassword",$dpassword);
$password = $dpassword[0];
//echo "<br>Decrypted password: ".$password;

// DECRYPT KEY
exec("./ed.out d $ekey",$dkey);
$key = $dkey[0];
//echo "<br>Decrypted Key: ".$key;

// DECRYPT HWID
exec("./ed.out d $ehwid",$dhwid);
$hwid = $dhwid[0];
//echo "<br>Decrypted Key: ".$key;

// DECRYPT COMPUTERNAME
exec("./ed.out d $ecomputername",$dcomputername);
$computername = $dcomputername[0];
//echo "<br>Decrypted Key: ".$key;

// HWID CHECK
$url="http://fanta.club/a/ver.php?COMPUTERNAME=".$computername."&HWID=".$hwid."&BUILDNUMBER=".$username."";
$ver = file_get_contents($url);

if($ver == "L.") {
  exec("./ed.out e FAIL",$final2);
  $final = $final2[0];
  echo $final;
  die();
}

// SUB CHECK
$result = mysqli_query($con, "SELECT * FROM `users` WHERE `username` = '$username'");
while ($row = mysqli_fetch_assoc($result)) {
$subscription = $row["subscription"];
}

$count = mysqli_num_rows($result);
if($count <= 0){
  exec("./ed.out e FAIL",$final2);
  $final = $final2[0];
  echo $final;
  die();
}


// Check if client [[KEY]] matches server [[KEY]]

//exec('g++ skey.cpp -o skey.out -std=c++11',$result);
//print_r($result);
exec("./skey.out $username",$result);
$skey = $result[0];
//echo "<br>";
//echo("Server key is: ".$skey);
//echo("<br>Client key is: ".$key);
if ($key == $skey) {
  $password = md5($password);
  $result = mysqli_query($con, "SELECT * FROM `users` WHERE BINARY `username` = '$username' AND `password` = '$password'") or die(mysqli_error($con));
  $exist = mysqli_num_rows($result);
	if($exist >= 1) {

    exec("./ed.out e GOOD",$final2);
    $final = $final2[0];
    echo $final;
    die();
  }
} else {
  exec("./ed.out e FAIL",$final2);
  $final = $final2[0];
  echo $final;
  die();
}



?>