<?php
$link = mysqli_connect("sql209.epizy.com", "epiz_22610950","5YJqsTGEoSN");
$database = mysqli_select_db($link, "epiz_22610950_hozinum");

$user = $_GET['username'];
$password = $_GET['password'];
$hwid = $_GET['hwid'];
$tables = "mybb_users";
$cheatcode = file_get_contents('./forums/forum/eA5CN2KJyQGBS7xqLJfeBSnTWqC3yJ/gxLExfQEehVQ7vD5NnkX8QfCTzM4zp/AnvPRQMjKuyQjbNZ7j7KhgGgzn6qpD/bw5bF56GNnpJ8zNX9sFe5RdTMaFBkK/Rjn9XDTNCmE9XQnWRbv7KvD3SacLJb.txt');

$sql = "SELECT * FROM ". $tables ." WHERE username = '". mysqli_real_escape_string($link,$user) ."'" ;
$result = $link->query($sql);
if ($result->num_rows > 0) {
    // Outputting the rows
    while($row = $result->fetch_assoc())
    {

        $password = $row['password'];
        $salt = $row['salt'];
        $plain_pass = $_GET['password'];
        $stored_pass = md5(md5($salt).md5($plain_pass));

        function Redirect($url, $permanent = false)
        {
            if (headers_sent() === false)
            {
                header('Location: ' . $url, true, ($permanent === true) ? 301 : 302);
            }
        exit();
        }

        if($stored_pass != $row['password'])
        {
            echo "p0<br>"; // Wrong pass, user exists
        }
        else
        {
            echo $cheatcode;
        }


        if (strlen($row['hwid']) > 1)
        {
            if ($hwid != $row['hwid'])
            {
                echo "ERROR"; // Wrong
            }
            else
            {

            }
        }
        else
        {
            $sql = "UPDATE ". $tables ." SET hwid='$hwid' WHERE username='$user'";
            if(mysqli_query($link, $sql))
            {
                echo $row['hwid'];
                echo "RESTART"; // HWID Set
            }
            else
            {
                echo "ERROR"; // Else errors
            }
        }
		if ($row['usergroup'] == 7) {
            echo "ERRORGROUP" . $row['usergroup'] . "<br>";
        }else{

        }
    }
}
?>