Untitled

<?php
global $_CONFIG;
// if user is not logged in
if(!isset($_SESSION['user']['id'])) header('Location: '.$_CONFIG['hotel']['url'].'/index');


$getUser = mysql_query("SELECT * FROM users WHERE id = '". $_SESSION['user']['id'] . "' LIMIT 1");
$userInfo = mysql_fetch_array($getUser);
if(!isset($_SESSION['user']['verified']))
{
	if(!empty($userInfo['account_security']))
	{
	require_once('authentication.php');
	}
	else
	{
		$token = 1;
	}
}
else
{
$token = 1;
}
if($token == 1){
?>
<!DOCTYPE html>
<?php
//Staff maintence, only staff can enter
$in_main = false;
if($_SESSION['user']['rank'] < 3 && $in_main){
    die("It's only possible for staff to enter right now");
}
?>
<?php

    if($_SESSION['user']['rank'] >= 3){
        if(!isset($_POST['clientlog'])){
            echo '<form action="client" method="post" >';
            echo '<label>Staff Pin: </label><input type="password" name="clientpin" placeholder="Staff Pin" /><br />';
            echo '<input type="submit" name="clientlog" value="Logga in" />';
            echo '</form>';
            exit();

        }


        if(isset($_POST['clientlog'])){
            $get_userinfo = mysql_query("SELECT ip FROM identity WHERE username = '" . $_SESSION['user']['username'] . "' LIMIT 1");
            $staffUsername = $_SESSION['user']['username'];


$servernameC = "localhost";
                  $usernameC = "root";
             $passwordC = "HabnitehotelA4321";
          $dbnameC = "taundb";


$conn = new mysqli($servernameC, $usernameC, $passwordC, $dbnameC);

if ($conn->connect_error) {
    die("Connection failed: " . $conn->connect_error);
}

$sql = "SELECT pin FROM users WHERE username = '$staffUsername'";
$result = $conn->query($sql);

if ($result->num_rows > 0) {

    while($row = $result->fetch_assoc()) {
       $userpin = $row['pin'];
    }
}


            $userinfo = mysql_fetch_array($get_userinfo);
            if($_POST['clientpin'] != $userpin){
                die('<div style="width: 50%; height: 20px; border: 2px solid red; background: pink; margin: auto; text-align: center; color: red;">INCORRECT PIN!<br />#400</div>');
            }else if(false){
                die('<div style="width: 50%; height: 20px; border: 2px solid red; background: pink; margin: auto; text-align: center; color: red;">You should not be here :D<br />#500</div>');
            }
        }
    }

?>
<html lang="en">
    <head>

        <meta http-equiv="content-type" content="text/html; charset=utf-8">
        <title>{hotelName} - Client</title>

		<link rel="shortcut icon" href="{url}/client/favicon.ico" type="image/vnd.microsoft.icon"/>
		<link rel="stylesheet" type="text/css" href="{url}/app/tpl/skins/{skin}/css/clientstuff.css?v=<?php echo time(); ?>">
		<link rel="shortcut icon" href="https://images.habbo.com/habbo-web/america/en/assets/images/favicon.08c747be.ico">
        		<script type="text/javascript" src="{url}/app/tpl/skins/{skin}/js/swfobject.js?v=<?php echo time(); ?>"></script>
        <script src="{url}/app/tpl/skins/{skin}/js/jquery.min.js"></script>
		<script type="text/javascript">
function toggleFullScreen() {
  if ((document.fullScreenElement && document.fullScreenElement !== null) ||
   (!document.mozFullScreen && !document.webkitIsFullScreen)) {
    if (document.documentElement.requestFullScreen) {
      document.documentElement.requestFullScreen();
    } else if (document.documentElement.mozRequestFullScreen) {
      document.documentElement.mozRequestFullScreen();
    } else if (document.documentElement.webkitRequestFullScreen) {
      document.documentElement.webkitRequestFullScreen(Element.ALLOW_KEYBOARD_INPUT);
    }
  } else {
    if (document.cancelFullScreen) {
      document.cancelFullScreen();
    } else if (document.mozCancelFullScreen) {
      document.mozCancelFullScreen();
    } else if (document.webkitCancelFullScreen) {
      document.webkitCancelFullScreen();
    }
  }
}</script>

        <script type="text/javascript" src="{url}/app/tpl/skins/{skin}/js/swfobject.js?v=<?php echo time(); ?>"></script>
		<link rel="stylesheet" type="text/css" href="{url}/app/tpl/skins/{skin}/css/client.min.css?v=<?php echo time(); ?>">
         <script type="text/javascript">
            var BaseUrl = "{swf_folder}";
            var flashvars =
            {
				"client.starting" : "Vänligen vänta, {hotelname} laddas upp...",
				"client.starting.revolving" : "Vänligen vänta, {hotelname} laddas upp...",
                "client.allow.cross.domain" : "1",
                "client.notify.cross.domain" : "0",
                "connection.info.host" : "5.189.148.183",
                "connection.info.port" : "30000",
                "site.url" : "{url}",
                "url.prefix" : "{url}",
                "client.reload.url" : "{url}/disconnected",
                "client.fatal.error.url" : "{url}/disconnected",
                "client.connection.failed.url" : "{url}/disconnected",
                "external.variables.txt" : "{external_vars}",
                "external.texts.txt" : "{external_texts}",
                "productdata.load.url" : "{product_data}",
                "furnidata.load.url" : "{furni_data}",
                "use.sso.ticket" : "1",
                "sso.ticket" : "{sso}",
                "processlog.enabled" : "1",
                "flash.client.url" : BaseUrl,
                "flash.client.origin" : "popup"
           };
            var params =
            {
                "base" : BaseUrl + "/",
                "allowScriptAccess" : "always",
                "menu" : "false"

	       };

            swfobject.embedSWF(BaseUrl + "/Niteswf.swf", "client", "100%", "100%", "10.0.0", "{swf_base}/expressInstall.swf", flashvars, params, null);
        </script>
    </head>
    <style>
.icon--fullscreen {
    background-image: url({url}/app/tpl/skins/{skin}/images/sprites.png);
    background-position: -511px -58px;
    width: 15px;
    height: 14px;
}
	</style>
	    <body>
    	<div id="fl_but" class="full_screen_but" onclick="fullscreen();"><center><i style="margin-top:7px;" class="fa fa-expand fa-fw"></i></center></div>

        <div id="client">
			<div id="flash-wrapper">
				<div id="flash-container">
					<div id="content" style="width: 400px; margin: 20px auto 0 auto;">
						<div class="client-error">
							<h1 class="client-error__title" translate="client_error_title">Du  behöver flash för att spela!</h1>
							<p translate="client_error_flash">Om du använder en dator behöver du <a href="http://www.adobe.com/go/getflashplayer" target="_blank">tillåta, installera eller uppdatera Flash</a> för att spela. Vänligen <a href="http://www.adobe.com/go/getflashplayer" target="_blank">klicka här för</a> använda Flash! OBS: Om du har blockerat Flash måste du oåteraktivera det!</p>
							<div class="client-error__downloads">
								<a class="client-error__flash" href="http://www.adobe.com/go/getflashplayer" rel="noopener noreferrer" target="_blank"></a>
							</div>
						</div>
					</div>från
				</div>
			</div>
		</div>
    </body>

</html>

<?php
}
?>