<title>WoW-Crysis Changelog</title>
<?php error_reporting(E_ALL ^ E_NOTICE);
/* Script by Lss, and for Lss's use only. */
if (!isset($_SESSION))
{
  session_start();
}
if (!$_SESSION["Gm"]) {
print'<center><form action="" method="post">
Username: <input type="text" name="username"/><br/>
Password: <input type="password" name="password"/><br/>
<input name="redirect" type="hidden" value="./"><br/>
<input type="submit" value="Login"/></form></center>';

$l="crysis_accounts";//Logon Db
$t="accounts";//Accounts Table

$con = mysql_connect("logon.wowcrysis.com", "crysis_admin", "crysis4life") or die(mysql_error());
mysql_select_db("$l", $con) or die(mysql_error());

if (isset($_POST['username'])) {
$user=$_POST['username'];
$pass=$_POST['password'];
$user = stripslashes($user);
$pass = stripslashes($pass);
$user = mysql_real_escape_string($user);
$pass = mysql_real_escape_string($pass);
$user = ucfirst($user);

$result = mysql_query("SELECT * FROM $l.$t WHERE login='$user' and password='$pass' and gm='a' and banned='0'");
$count = mysql_num_rows($result);

$result1 = mysql_query("SELECT * FROM $l.$t WHERE login='$user' and password='$pass' and gm='3' and banned='0'");
$count1 = mysql_num_rows($result1);

$result2 = mysql_query("SELECT * FROM $l.$t WHERE login='$user' and password='$pass' and gm='az' and banned='0'");
$count2 = mysql_num_rows($result2);

if($count == 1){//Allow Users Access To Member Features
    //session_register("MM_Username");
        header("Location: ");
        //Set session data
        $_SESSION["valid_id"] = $obj->id;
        $_SESSION["Gm"] = "$user";
        $_SESSION["valid_time"] = time();
        }
        else if($count1 == 1){//Allow Users Access To Member Features
    //session_register("MM_Username");
        header("Location: ");
        //Set session data
        $_SESSION["valid_id"] = $obj->id;
        $_SESSION["Gm"] = "$user";
        $_SESSION["valid_time"] = time();
        }
        else if($count2 == 1){//Allow Users Access To Member Features
    //session_register("MM_Username");
        header("Location: ");
        //Set session data
        $_SESSION["valid_id"] = $obj->id;
        $_SESSION["Gm"] = "$user";
        $_SESSION["valid_time"] = time();
        }
        else
        {echo"Access Denied!";}

}} else{

//Script Here!
$user_name = "crysis_admin";
    $password = "crysis4life";
    $database = "crysis_website";
    $server = "logon.wowcrysis.com";

$db_handle = mysql_connect($server, $user_name, $password);
$db_found = mysql_select_db($database, $db_handle);

if ($db_found) {

$SQL = "SELECT * FROM paypal_data";
$result = mysql_query($SQL);

while ($db_field = mysql_fetch_assoc($result)) {
print $db_field['id'] . "<BR>Login ID:&nbsp; ";
print $db_field['login'] . "<BR>TxNid:&nbsp;";
print $db_field['txnid'] . "<BR>Ammount:&nbsp;";
print $db_field['amount'] . "<BR>Email:&nbsp;";
print $db_field['who'] . "<BR>When:&nbsp;";
print $db_field['whendon'] . "<BR>Comment:&nbsp;";
print $db_field['comment'] . "<BR><BR><BR>";
}

mysql_close($db_handle);

}
else {
print "Database NOT Found ";
mysql_close($db_handle);
}
//Edit No Further!
print'<br/><br/><form action="" method="post"><input type="submit" name="logout" value="Logout"</form>';
if (isset($_POST['logout'])) {
session_start();
session_unset();
error_reporting(0);

session_destroy();
// Logged out, return home.
Header("Location: ");
}
}?>