<?php
$login_user       = 'username=BOTNAME&password=BOTPASSWORD';
$file_path_rs     = 'rs.txt';
$file_path_token  = 'token.txt';
$current_rs       = file_get_contents($file_path_rs);
$current_token    = file_get_contents($file_path_token);
$groupid = $_GET['groupId'];
$newRoleSetId = $_GET['newRoleSetId'];
$targetUserId = $_GET['targetUserId'];



// [Function] Get ROBLOSECRUITY
function getRS()
{
    global $login_user, $file_path_rs;
    $get_cookies = curl_init('https://www.roblox.com/newlogin');
    curl_setopt_array($get_cookies,
        array(
            CURLOPT_RETURNTRANSFER => true,
            CURLOPT_HEADER => true,
            CURLOPT_POST => true,
            CURLOPT_POSTFIELDS => $login_user
                        //CURLOPT_USERAGENT => "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.6 (KHTML, like Gecko) Chrome/16.0.897.0 Safari/535.6",
                        //CURLOPT_FOLLOWLOCATION => true,
                        //CURLOPT_REFERER => "http://www.roblox.com"
        )
    );
    $rs = (preg_match('/(\.ROBLOSECURITY=.*?);/', curl_exec($get_cookies), $matches) ? $matches[1] : '');
    file_put_contents($file_path_rs, $rs, true);
    curl_close($get_cookies);
    return $rs;
}





// [Function] Change User's Group Rank
function changeRank($rs, $token, $groupid, $userid, $rankid)
{
    global $file_path_token;

     $promote_user = curl_init("http://www.roblox.com/groups/api/change-member-rank?groupId=".$userid."&newRoleSetId=".$rankid."&targetUserId=".$userid);
    curl_setopt_array($promote_user,
        array(
            CURLOPT_RETURNTRANSFER => true,
            CURLOPT_POST => true,
            CURLOPT_HEADER => true,
            CURLOPT_HTTPHEADER => array("Cookie: $rs", "X-CSRF-TOKEN: $token", "Content-Type: application/x-www-form-urlencoded"),
            CURLOPT_POSTFIELDS => "groupId=2769318&newRoleSetId=18662283&targetUserId=109239258",
                        CURLOPT_RETURNTRANSFER => true,
                        CURLOPT_POST => true,
                        CURLOPT_HEADER => true,
                        CURLOPT_HTTPHEADER => array("Cookie: $rs", "X-CSRF-TOKEN: $token")
                     )
    );
    $resp = curl_exec($promote_user);
    $resp_header_size = curl_getinfo($promote_user, CURLINFO_HEADER_SIZE);
    $resp_header = substr($resp, 0, $resp_header_size);
    $resp_body = substr($resp, $resp_header_size);
    if (/*preg_match('/GuestData/', $resp_header)*/false) {//this area is an issue, just call getRS() to keep it up to date
        // RS invalid
echo("RS invalid");
break;
        $resp_body = changeRank( getRS(), $token, $groupid, $userid, $rankid );
    } else if (preg_match('/Token Validation Failed/', $resp_header)) {
        // Token invalid
        $new_token = (preg_match('/X-CSRF-TOKEN: (\S+)/', $resp_header, $matches) ? $matches[1] : '');
        file_put_contents($file_path_token, $new_token, true);
echo("Token invalid");
break;
        $resp_body = changeRank( $rs, $new_token, $groupid, $userid, $rankid );
    }
    curl_close($promote_user);
    return $resp_body;
}
// Change user's group rank and echo results
echo changeRank(getRS(), $current_token, 2769318, 109239258, 18662283);
?>