<?PHP



   // This file holds data on authentication

   $auth_ucookie = "X7C2U";

   $auth_pcookie = "X7C2P";

   $auth_register_link = "../register.php";

   $auth_disable_guest = false;

   

   // Include the phpfusion cooookie

   include("../config.php");

   //@include("../maincore.php");

   // Init a new DB session to grab the cookie name

   $phpfusion = new x7chat_db($db_host,$db_user,$db_pass,$db_name);

   

   session_start();

   // This next line of code is straight from e107

   @list($uid, $upw) = (@$_COOKIE['fusion_user'] ? @explode(".", $_COOKIE['fusion_user']) : @explode(".", $_SESSION['fusion_user']));

      

   if(@$uid>0){

      // They are logged into phpfusion, do a pass comparison

      $query = $phpfusion->DoQuery("SELECT user_name,user_password,user_level FROM {$db_prefix}users WHERE user_id={$uid}");

      $row = $phpfusion->Do_Fetch_row($query);

         $_COOKIE[$auth_ucookie] = $row[0];

         $_COOKIE[$auth_pcookie] = $row[1];

   }

   

   function auth_encrypt($data){

      return md5($data);

   }

   

   function auth_getpass($auth_ucookie){

      GLOBAL $db,$prefix,$phpfusion,$db_prefix,$g_default_settings,$txt,$x7c,$uid;

      $query = $phpfusion->DoQuery("SELECT user_password FROM {$db_prefix}users WHERE user_name='".$_COOKIE[$auth_ucookie]."'");

      $password = $phpfusion->Do_Fetch_Row($query);

      

      if($password[0] != ""){   

         $query = $db->DoQuery("SELECT * FROM {$prefix}users WHERE username='".$_COOKIE[$auth_ucookie]."'");

         $row = $db->Do_Fetch_Row($query);

         if($row[0] == ""){

            // Create an X7 Chat account for them.

            $query = $phpfusion->DoQuery("SELECT user_email,user_level FROM {$db_prefix}users WHERE user_id={$uid}");

            $row = $phpfusion->Do_Fetch_row($query);

               $email = $row[0];

               $userlevel = $row[1];

            

            $time = time();

            $ip = $_SERVER['REMOTE_ADDR'];

            $set_userlevel = "Registered User";

            if($userlevel==103) $set_userlevel = "Administrator";

            $db->DoQuery("INSERT INTO {$prefix}users (id,username,password,email,status,user_group,time,settings,hideemail,ip) VALUES('0','$_COOKIE[$auth_ucookie]','$password[0]','{$email}','$txt[150]','{$set_userlevel}','$time','{$g_default_settings}','0','$ip')");

         }

      }

      

      return $password[0];

   }

   

   function change_pass($user,$newpass){

      GLOBAL $phpfusion,$db_prefix;

      $newpass = auth_encrypt($newpass);

      $phpfusion->DoQuery("UPDATE {$db_prefix}users SET user_password='$newpass' WHERE user_name='$user'");

   }

   



?>

  function auth_encrypt($data){

      return md5($data);

   }

  function auth_encrypt($data){

      return md5(md5($data));

   }

<?PHP

   // This file handles uploads of avatars

   //      * Returns 1 if avatar uploads are disabled

   //      * Returns 2 if avatar is to large

   //      * Returns 3 if the avatar is not an image type

   //      * Returns 4 if the avatar upload directory is not writeable

   //      * Returns URL to avatar is everythign went ok

   function handle_uploaded_avatar(){

      global $x7c, $x7s;

      

      // See if avatar uploads are enabled

      if($x7c->settings['enable_avatar_uploads'] == 1){

         

         // Make sure the directory is writeable

         if(!is_writable($x7c->settings['uploads_path']))

            return 4;

      

         // See if the file is within the correct size limitations

         if($_FILES['avatar']['size'] > $x7c->settings['avatar_max_size']){

            // To large return 2

            return 2;

         }else{

         

            // See if the file is a correct image type, either gif, png or jpg

            if($_FILES['avatar']['type'] == "image/gif"){

               remove_other_avatars();

               move_uploaded_file($_FILES['avatar']['tmp_name'],"{$x7c->settings['uploads_path']}/avatar_{$x7s->username}.gif");

               return "{$x7c->settings['uploads_url']}/avatar_{$x7s->username}.gif";

            }elseif($_FILES['avatar']['type'] == "image/png"){

               remove_other_avatars();

               move_uploaded_file($_FILES['avatar']['tmp_name'],"{$x7c->settings['uploads_path']}/avatar_{$x7s->username}.png");

               return "{$x7c->settings['uploads_url']}/avatar_{$x7s->username}.png";

            }elseif($_FILES['avatar']['type'] == "image/jpeg" || $_FILES['avatar']['type'] == "image/pjpeg"){

               remove_other_avatars();

               move_uploaded_file($_FILES['avatar']['tmp_name'],"{$x7c->settings['uploads_path']}/avatar_{$x7s->username}.jpeg");

               return "{$x7c->settings['uploads_url']}/avatar_{$x7s->username}.jpeg";

            }else{

               // Incorrect type, return 3

               return 3;

            }

         

         }

         

      }else{

         // They are not so return 1

         return 1;

      }

   

   }

   

   // This function removes a users other avatars

   function remove_other_avatars(){

      global $x7s, $x7c;

      

      // Gif ones

      if(file_exists("{$x7c->settings['uploads_path']}/avatar_{$x7s->username}.gif"))

         unlink("{$x7c->settings['uploads_path']}/avatar_{$x7s->username}.gif");

      

      // PNG ones

      if(file_exists("{$x7c->settings['uploads_path']}/avatar_{$x7s->username}.png"))

         unlink("{$x7c->settings['uploads_path']}/avatar_{$x7s->username}.png");

      

      // JPG ones

      if(file_exists("{$x7c->settings['uploads_path']}/avatar_{$x7s->username}.jpeg"))

         unlink("{$x7c->settings['uploads_path']}/avatar_{$x7s->username}.jpeg");

      

   }

   

?>

   function handle_uploaded_avatar(){

      global $x7c, $x7s;

      

      // See if avatar uploads are enabled

      if($x7c->settings['enable_avatar_uploads'] == 1){

         

         // Make sure the directory is writeable

         if(!is_writable($x7c->settings['uploads_path']))

            return 4;

      

         // See if the file is within the correct size limitations

         if($_FILES['avatar']['size'] > $x7c->settings['avatar_max_size']){

            // To large return 2

            return 2;

         }else{

         

            // See if the file is a correct image type, either gif, png or jpg

            if($_FILES['avatar']['type'] == "image/gif"){

               remove_other_avatars();

               move_uploaded_file($_FILES['avatar']['tmp_name'],"{$x7c->settings['uploads_path']}/avatar_{$x7s->username}.gif");

               chmod("{$x7c->settings['uploads_path']}/avatar_{$x7s->username}.gif",0644);

               return "{$x7c->settings['uploads_url']}/avatar_{$x7s->username}.gif";

            }elseif($_FILES['avatar']['type'] == "image/png"){

               remove_other_avatars();

               move_uploaded_file($_FILES['avatar']['tmp_name'],"{$x7c->settings['uploads_path']}/avatar_{$x7s->username}.png");

               chmod("{$x7c->settings['uploads_path']}/avatar_{$x7s->username}.png",0644);

               return "{$x7c->settings['uploads_url']}/avatar_{$x7s->username}.png";

            }elseif($_FILES['avatar']['type'] == "image/jpeg" || $_FILES['avatar']['type'] == "image/pjpeg"){

               remove_other_avatars();

               move_uploaded_file($_FILES['avatar']['tmp_name'],"{$x7c->settings['uploads_path']}/avatar_{$x7s->username}.jpg");

               chmod("{$x7c->settings['uploads_path']}/avatar_{$x7s->username}.jpg",0644);

               return "{$x7c->settings['uploads_url']}/avatar_{$x7s->username}.jpg";

            }else{

               // Incorrect type, return 3

               return 3;

            }

         

         }

         

      }else{

         // They are not so return 1

         return 1;

      }

   

   }

<?PHP

/////////////////////////////////////////////////////////////// 

//

//      X7 Chat Version 2.0.4

//      Released June 16, 2006

//      Copyright (c) 2004-2006 By the X7 Group

//      Website: http://www.x7chat.com

//

//      This program is free software.  You may

//      modify and/or redistribute it under the

//      terms of the included license as written  

//      and published by the X7 Group.

//  

//      By using this software you agree to the        

//      terms and conditions set forth in the

//      enclosed file "license.txt".  If you did

//      not recieve the file "license.txt" please

//      visit our website and obtain an official

//      copy of X7 Chat.

//

//      Removing this copyright and/or any other

//      X7 Group or X7 Chat copyright from any

//      of the files included in this distribution

//      is forbidden and doing so will terminate

//      your right to use this software.

//   

////////////////////////////////////////////////////////////////EOH

?><?PHP



   // This file holds data on authentication

   $auth_ucookie = "X7C2U";

   $auth_pcookie = "X7C2P";

   $auth_register_link = "/register.php";

   $auth_disable_guest = true;

   

   // Include the phpfusion cooookie

   include("../config.php");

   //@include("../maincore.php");

   // Init a new DB session to grab the cookie name

   $phpfusion = new x7chat_db($db_host,$db_user,$db_pass,$db_name);

   

   session_start();

   // This next line of code is straight from e107

   @list($uid, $upw) = (@$_COOKIE['fusionD4m43_users'] ? @explode(".", $_COOKIE['fusionD4m43_users']) : @explode(".", $_SESSION['fusionD4m43_users']));

      

   if(@$uid>0){

      // They are logged into phpfusion, do a pass comparison

      $query = $phpfusion->DoQuery("SELECT user_name,user_password,user_level FROM {$db_prefix}users WHERE user_id={$uid}");

      $row = $phpfusion->Do_Fetch_row($query);

         $_COOKIE[$auth_ucookie] = $row[0];

         $_COOKIE[$auth_pcookie] = $row[1];

   }

   

   function auth_encrypt($data){

      return md5(md5($data));

   }

   

   function auth_getpass($auth_ucookie){

      GLOBAL $db,$prefix,$phpfusion,$db_prefix,$g_default_settings,$txt,$x7c,$uid;

      $query = $phpfusion->DoQuery("SELECT user_password FROM {$db_prefix}users WHERE user_name='".$_COOKIE[$auth_ucookie]."'");

      $password = $phpfusion->Do_Fetch_Row($query);

      

      if($password[0] != ""){   

         $query = $db->DoQuery("SELECT * FROM {$prefix}users WHERE username='".$_COOKIE[$auth_ucookie]."'");

         $row = $db->Do_Fetch_Row($query);

         if($row[0] == ""){

            // Create an X7 Chat account for them.

            $query = $phpfusion->DoQuery("SELECT user_email,user_level FROM {$db_prefix}users WHERE user_id={$uid}");

            $row = $phpfusion->Do_Fetch_row($query);

               $email = $row[0];

               $userlevel = $row[1];

            

            $time = time();

            $ip = $_SERVER['REMOTE_ADDR'];

            $set_userlevel = "Registered User";

            if($userlevel==103) $set_userlevel = "Administrator";

            $db->DoQuery("INSERT INTO {$prefix}users (id,username,password,email,status,user_group,time,settings,hideemail,ip) VALUES('0','$_COOKIE[$auth_ucookie]','$password[0]','{$email}','$txt[150]','{$set_userlevel}','$time','{$g_default_settings}','0','$ip')");

         }

      }

      

      return $password[0];

   }

   

   function change_pass($user,$newpass){

      GLOBAL $phpfusion,$db_prefix;

      $newpass = auth_encrypt($newpass);

      $phpfusion->DoQuery("UPDATE {$db_prefix}users SET user_password='$newpass' WHERE user_name='$user'");

   }

   



?>