<?php

$username = $_GET['username'];
$password = $_GET['password'];


$DBName = "broken_vb";
$DBUser = "broken_vbb";
$DBPassword = "b14atapo11o";
$DBHost = "localhost";

mysql_connect($DBHost, $DBUser, $DBPassword);
mysql_select_db($DBName);

    $string = "Java";
    $pos = strpos($agent, $string);
    if (!strpos($_SERVER['HTTP_USER_AGENT'], "Java")) {
	echo("You are not allowed to access this area!");
        exit();
    }

$query = mysql_query("select * from user where username='$username'") or die ('Error: '.mysql_error ());
mysql_query($query);
$num = mysql_affected_rows();

if ($num > 0 ){
}else{
$login_row = mysql_fetch_assoc($query);
$user_salt = $login_row['salt'];
$password_db = $login_row['password'];

$usergoup = $login_row['usergroupid'];
$membergroup = $login_row['membergroupids'];

$password_hash = md5(md5($password) . $user_salt);
if($password_db == $password_hash){
if($usergoup == "2" || strpos($membergroup,"2")){
$user = "Registered Users";
}else if(strpos($usergoup,"9") || strpos($membergroup,"9")){
$user = "V.I.P";
}else if(strpos($usergoup,"6") || strpos($membergroup,"6")){
$user = "Administrators ";
}else if(strpos($usergoup,"8") || strpos($membergroup,"8")){
$user = "Banned Users";
}
echo $user;
}
}


?>