Beiträge von ZerOnex

if ($sql->num_rows > 0) {
        $row = $sql->fetch_object();

        return $row->$string;
    } else {

        return '0';
    }
}

$my->ip = $_SERVER['REMOTE_ADDR'];

if (isset($_SESSION['HP_id']) || isset($_SESSION['HP_username']) || isset($_SESSION['HP_password'])) {
    $HP_id = protect($_SESSION['HP_id']);
    $HP_username = protect($_SESSION['HP_username']);
    $HP_password = protect($_SESSION['HP_password']);

    $usercheck = $mysqli->query("SELECT * FROM users WHERE id = '" . $HP_id . "' AND username = '" . $HP_username . "' AND password = '" . $HP_password . "' AND status = '1' LIMIT 1");

    if ($usercheck->num_rows > 0) {
        $user = $usercheck->fetch_object();

        if ($user->last_taler !== date('d.m.Y')) {
            switch ($user->rank) {
                case '1':
                    $taler = '1000';
                    $lobe = '3';
                    $points = '0';
                    break;

               case '2':
                    if (GetVIPStatus($user->id, 'status') == '1') {
                        switch (GetVIPStatus($user->id, 'paket')) {
                            case '1':
                               // $taler = '2500';
                                $lobe = '10';
                               // $points = '10';
                                break;

                            case '2':
                               // $taler = '5000';
                                $lobe = '20';
                               // $points = '20';
                                break;
                        }
                    }
                    break;

                case '3':
                    $taler = '2500';
                    $lobe = '5';
                    $points = '0';
                    break;

                case '4':
                    $taler = '1000';
                    $lobe = '3';
                    $points = '0';
                    break;


                case '5':
                    $taler = '1000';
                    $lobe = '10';
                    $points = '0';
                    break;


                case '6':
                    $taler = '1000';
                    $lobe = '10000';
                    $points = '0';
                    break;


                case '7':
                        $taler = '10000';
                        $lobe = '10000';
                        $points = '0';
                    break;
            }

            $mysqli->query("UPDATE users SET last_taler = '" . date('d.m.Y') . "' WHERE id = '" . $user->id . "' ");
            $mysqli->query("UPDATE user_stats SET DailyRespectPoints = '" . $lobe . "', DailyPetRespectPoints = '" . $lobe . "' WHERE id = '" . $user->id . "' ");
            //MUS('updatepoints', $user - id);
            //MUS('updatecredits', $user->id);
        }
    //if ($user->last_taler > date('d.m.Y')) {
         //$mysqli->query("UPDATE users SET  last_taler = '" . date('d.m.Y') . "' WHERE id = '" . $user->id . "' ");
    //}
//fehlerende
        
        if ($user->online == '0') {
            $checkroomvists = $mysqli->query("SELECT * FROM user_roomvisits WHERE user_id = '" . $user->id . "' AND exit_timestamp = '0' ");
            if ($checkroomvisits > 0) {
                $mysqli->query("UPDATE user_roomvisits SET exit_timestamp = '" . time() . "' WHERE exit_timestamp = '0' ");
            }
        }

       

        $ban_sql = $mysqli->query("SELECT * FROM bans WHERE value = '" . $user->username . "' OR value = '" . $my->ip . "' ");
        if ($ban_sql->num_rows > 0) {
            getLogout();
        }
    } else {
        getLogout();
    }
} else {
    $user->rank = '0';
    $user->username = 'Gast';
    $user->design = 'standart';
}

function getlogin($id, $username, $password, $bemerkung, $weiterleitung = false) {
    global $mysqli, $my, $path, $cms;
    $id = protect($id);
    $username = protect($username);
    $password = protect($password);
    $bemerkung = protect($bemerkung);

    if ($settings->clientusersave == 'cockie') {
        setcookie("HP_id", $id, time() + (3600 * 24), "/", $cms->pathh, 0);
        setcookie("HP_username", $username, time() + (3600 * 24), "/", $cms->pathh, 0);
        setcookie("HP_password", $password, time() + (3600 * 24), "/", $cms->pathh, 0);
    } else {

        $_SESSION['HP_id'] = $id;
        $_SESSION['HP_username'] = $username;
        $_SESSION['HP_password'] = $password;
    }

    if ($bemerkung !== 'NO') {
        $mysqli->query("INSERT INTO user_logins (user_id, ip, timestamp, bemerkung) VALUES ('" . $id . "', '" . $my->ip . "', '" . time() . "', '" . $bemerkung . "') ");
    }
    return 'true';
}

function ipschutz($ip) {
    global $mysqli, $user;

    $ipx = protect($ip);
    $ip = str_replace(".", "x", $ipx);
    list($ip1, $ip2, $ip3, $ip4) = split("x", $ipx, 4);

    $ip = '*.' . $ip2 . '.' . $ip3 . '.' . $ip4;

    if ($user->rank == '7') {
        return $ipx;
    } else {
        return $ipx;
    }
}

function getLogout() {
    global $cms, $user, $path;


    session_destroy();

    // setcookie("HP_id", '', time() - (3600 * 24), "/", $cms->pathh, 0);
    // setcookie("HP_username", '', time() - (3600 * 24), "/", $cms->pathh, 0);
    // setcookie("HP_password", '', time() - (3600 * 24), "/", $cms->pathh, 0);
    MUS('signout', $user->id);
    header("location: $path/index");
    exit;
}

function UserNameDB($id, $string) {
    global $mysqli;
    $id = protect($id);
    $string = protect($string);

    $sql = $mysqli->query("SELECT * FROM users WHERE username = '" . $id . "' ");

    if ($sql->num_rows > 0) {
        $row = $sql->fetch_object();
        return $row->$string;
    }
}

function UserIDDB($id, $string) {
    global $mysqli;
    $id = protect($id);
    $string = protect($string);

    $sql = $mysqli->query("SELECT * FROM users WHERE id = '" . $id . "' ");

    if ($sql->num_rows > 0) {
        $row = $sql->fetch_object();
        return $row->$string;
    }
}

function aktivitaetenstream($userid, $action, $extradata, $extradata2) {
    global $mysqli;

    $mysqli->query("INSERT INTO hp_aktivitaetenstream (user_id, type, extra_data, extra_data2, timestamp) VALUES ('" . $userid . "', '" . $action . "', '" . $extradata . "', '" . $extradata2 . "', '" . time() . "') ");
    return 'true';
}

function aktivitaetenstreamown($absender, $text, $userid = false) {
    global $mysqli, $user;

    if ($userid !== false) {
        $user->id = $userid;
    }

    $mysqli->query("INSERT INTO hp_aktivitaetenstream_own (user_id, absender_name, text, timestamp) VALUES ('" . $user->id . "', '" . $absender . "', '" . $text . "', '" . time() . "') ");
    return 'true';
}

function bannuser($string, $timee, $value) {
    global $mysqli, $user;
    $string = protect($string);
    $value = protect($value);
    $timee = protect($timee);

    $time = getDays(date('w')) . ', ' . date('d') . '. ' . getMonth(date('m')) . ' ' . date('Y');

    $sql = $mysqli->query("SELECT * FROM bans WHERE value = '" . $string . "' ");
    if ($sql->num_rows < 1) {
        $mysqli->query("INSERT INTO bans (bantype,value,reason,expire,added_by,added_date) VALUES ('user','" . $string . "', '" . $value . "', '" . $timee . "', '" . $user->username . "', '" . $time . "') ");
        $mysqli->query("INSERT INTO banlog (bantype,value,reason,expire,added_by,added_date) VALUES ('user','" . $string . "', '" . $value . "', '" . $timee . "', '" . $user->username . "', '" . $time . "') ");

        $mysqli->query("INSERT INTO hp_modlog (user_id, action, bemerkung, timestamp) VALUES ('" . $user->id . "', 'banned', '" . $string . "', '" . time() . "') ");
        MUS('reloadbans');
    }
}

$page = protect($_GET['page']);

list($page, $GET1, $GET2, $GET3, $GET4, $GET5, $GET6, $GET7) = preg_split("!", $page, 8);
$_GET['page'] = $page;

if ($page == '') {
    $page = 'index';
}

switch ($page) {
    case 'Songquiz':
        header("location: https://docs.google.com/forms/d/1uPWmFLzIPGMsB0puBajocbbTRrlKCpSic6f78Acn0wM/viewform?fbzx=2497719432137038528");
        exit;
        break;
}



if ($user->username == 'Gast') {
}

if(getSettings('wartungsarbeiten') == '1' && $user->rank < 3 && $user->username !== 'Shisha91' && $user->username !== 'Punch' && $GET1 !== 'hasfiojsapf')
{
    $page = 'offline';
}

if ($page == 'premium/buy/Paypal') {
    include('./classes/buy/paypal/paypal.php');
    exit;
}



$get_page = $mysqli->query("SELECT * FROM hp_pages WHERE link = '" . $page . "'");
if ($get_page->num_rows > 0) {
    $page = $get_page->fetch_object();

    if($user->id == '2590' && $user->rank > 5 && $page->dateiname == 'designmanager')
    {
        $page->rank = '6';
    }
    
    if ($page->rank <= $user->rank) {
        if ($user->rank > 0 && $page->rank == '-1') {
            header("location: $path/me");
            exit;
        } else {
            if (file_exists('./_files/' . $page->content . '/_' . $page->dateiname . '.php')) {
                $dateiopen = $page->dateiname;
                $content = $page->content;
                $header = $page->header;
                $footer = $page->footer;
            } else {
                header("location: $path/");
                exit;
            }
        }
    } else {
        header("location: $path/");
        exit;
    }
} else {
    header("location: $path/");
    exit;
}

function hklogs($action, $action_id) {
    global $mysqli, $user;
    $page = protect($_GET['page']);
    $action = protect($action);
    $action_id = protect($action_id);

    $mysqli->query("INSERT INTO hp_hklogs (user_id, user_name, site, action, action_id, timestamp) VALUES ('" . $user->id . "', '" . $user->username . "', '" . $page . "', '" . $action . "', '" . $action_id . "', '" . time() . "')");
}

if ($header == '1') {
    include('./classes/homepage/header.php');
}
if ($user->rank > 4){
if ($content == 'housekeeping') {
    include('./classes/housekeeping/navi.php');
}
}
include('./_files/' . $content . '/_' . $dateiopen . '.php');


if ($footer == '1') {
    include('./classes/homepage/footer.php');
}


$letzte_aktivitat_sql = $mysqli->query("SELECT * FROM user_lastaktivitaet WHERE user_id = '" . $user->id . "' AND user_ip = '" . $my->ip . "' ");

if ($letzte_aktivitat_sql->num_rows > 0) {
    $last_site = $_SERVER["REQUEST_URI"];
    $mysqli->query("UPDATE user_lastaktivitaet SET last_site = '" . $last_site . "', timestamp = '" . time() . "' WHERE user_id = '" . $user->id . "' AND user_ip = '" . $my->ip . "'");
} else {
    $last_site = $_SERVER["REQUEST_URI"];
    $mysqli->query("INSERT INTO user_lastaktivitaet (user_id, user_ip, last_site, timestamp) VALUES ('" . $user->id . "', '" . $my->ip . "', '" . $last_site . "', '" . time() . "') ");
}
?>

<?php
if ($_SERVER['HTTP_X_FORWARDED_PROTO'] !== 'https') {
    $nossl = 'true';
    // header("location: https://habbo.tl/hotel");
    // exit;
}


$ssoc = ClientSSO($user->username);
$mysqli->query("UPDATE users SET auth_ticket = '', auth_ticket = '" . $ssoc . "', ip_last = '', ip_last = '" . $my->ip . "', online = '1', last_loggedin = '" . time() . "' WHERE id = '" . $user->id . "' ");
?>
<!DOCTYPE html>
<script type="text/javascript" id="www-widgetapi-script" src="https://s.ytimg.com/yts/jsbin/www-widgetapi-vflwK39-Z/www-widgetapi.js" async=""></script>
 <meta charset="UTF-8">
 
    <title>Zerox:Wartungsarbeiten</title>
 
    <style type="text/css">