<?php
    mysql_connect('localhost', 'table', 'pass') or die(mysql_error());
    mysql_select_db('spiider_gate') or die(mysql_error());

    $user = @addslashes($_GET['username']);
    $pass = @addslashes($_GET['password']);
    $update = @addslashes($_GET['a']);
    $upload = @addslashes($_GET['u']);
    $t = @addslashes($_POST['data']);
    $password = md5($pass);
    $ip = $_SERVER['REMOTE_ADDR'];

    $sql = "SELECT Count(*) as Number FROM users WHERE username='" . $user . "' AND password='" . $password . "'";
    $query = mysql_query($sql) or die(mysql_error());

    $sql10 = "SELECT Count(*) as Number FROM ac WHERE username='" . $user . "'";
    $query10 = mysql_query($sql10) or die(mysql_error());

    $result = mysql_fetch_array($query);
    $NumberOfUsers = $result['Number'];

    $result10 = mysql_fetch_array($query10);
    $ac10 = $result10['Number'];

    $sql1 = "SELECT id FROM users WHERE username='" . $user . "' AND password='" . $password . "'";
    $query1 = mysql_query($sql1) or die(mysql_error());

    $result1 = mysql_fetch_array($query1);
    $userid = $result1['id'];
    if ($NumberOfUsers == 1) {

    $sql2= "UPDATE users SET ip='" . $ip ."' WHERE username='" . $user . "'";
    $query2 = mysql_query($sql2) or die(mysql_error());
    }


if ( $upload < 1 )
    {
    if ($NumberOfUsers != 1) {

        /*header('WWW-Authenticate: Basic realm="Login Failed"');
        header('Status: Login Failed');
        /* Special Header for CGI mode */
       /* header('HTTP-Status: Login Failed');

            exit;*/
            echo "Login Failed";
    } else {
    echo "Hi you are now logged!";
    if( $ac10 == 1)
    {
    $s1 = "UPDATE ac SET lastime='".time()."' WHERE username='".$user."'";
    mysql_query($s1) or die(mysql_error());
    }else{
    $s2 = "INSERT INTO ac VALUES('" . $user . "','".time()."')";
    mysql_query($s2) or die(mysql_error());
    }
    }

    } else {
        if($NumberOfUsers == 1 && $update == 1)
        {
            $s3 = "UPDATE ac SET lastime='".time()."' WHERE username='".$user."'";
            mysql_query($s3) or die(mysql_error());
        }
        if ($upload == 1 ) {
if ($NumberOfUsers == 1) {
$now = date("YmdHms");
$nome = $user.$now.".jpg";
$uploaddir = 'upload/'; // Relative Upload Location of data file

if (is_uploaded_file($_FILES['file']['tmp_name'])) {

$uploadfile = $uploaddir . basename($nome);

echo "File ". $_FILES['file']['name'] ." uploaded successfully. ";

if (move_uploaded_file($_FILES['file']['tmp_name'], $uploadfile)) {

echo "File is valid, and was successfully moved. ";

}

else

print_r($_FILES);

}

else {

echo "Upload Failed!!!";

print_r($_FILES);

}}
}

if ($upload == 2)
{

if ($NumberOfUsers == 1) {
$now = date("YmdHms");
$nome = $user.$now.".txt";
$uploaddir = 'upload/'; // Relative Upload Location of data file

if (is_uploaded_file($_FILES['file']['tmp_name'])) {

$uploadfile = $uploaddir . basename($nome);

echo "File ". $_FILES['file']['name'] ." uploaded successfully. ";

if (move_uploaded_file($_FILES['file']['tmp_name'], $uploadfile)) {

echo "File is valid, and was successfully moved. ";

}

else

print_r($_FILES);

}

else {

echo "Upload Failed!!!";

print_r($_FILES);

}}
}
    }
        ?>