// Load the Global language file

include LOCALE.LOCALESET."global.php";





// Install ScoreSystem power by PHPFusion-SupportClub.de ///////////////

require_once INFUSIONS."scoresystem_panel/scoresystem_main_include.php";

////////////////////////////////////////////////////////////////////////



// Check if users full or partial ip is blacklisted

$sub_ip1 = substr(USER_IP, 0, strlen(USER_IP) - strlen(strrchr(USER_IP, ".")));

$sub_ip2 = substr($sub_ip1, 0, strlen($sub_ip1) - strlen(strrchr($sub_ip1, ".")));



if (dbcount("(*)", DB_BLACKLIST, "blacklist_ip='".USER_IP."' OR blacklist_ip='$sub_ip1' OR blacklist_ip='$sub_ip2'")) {

   redirect("http://www.google.com/");

}



// PHP-Fusion user cookie functions

if (!isset($_COOKIE[COOKIE_PREFIX.'visited'])) {

   $result = dbquery("UPDATE ".DB_SETTINGS." SET counter=counter+1");

   setcookie(COOKIE_PREFIX."visited", "yes", time() + 31536000, "/", "", "0");

}



//check that site or user theme exists

function theme_exists($theme) {

   if (!file_exists(THEMES) || !is_dir(THEMES)) {

      return false;   

   } else if (file_exists(THEMES.$theme."/theme.php") && file_exists(THEMES.$theme."/styles.css")) {

      define("THEME", THEMES.$theme."/");

      return true;

   } else {

      $dh = opendir(THEMES);

      while (false !== ($entry = readdir($dh))) {

         if ($entry != "." && $entry != ".." && is_dir(THEMES.$entry)) {

            if (file_exists(THEMES.$entry."/theme.php") && file_exists(THEMES.$entry."/styles.css")) {

               define("THEME", THEMES.$entry."/");

               return true;

               exit;

            }

         }

      }

      closedir($dh);

      if (!defined("THEME")) {

         return false;

      }

   }

}



if (isset($_POST['login'])) {

   $user_pass = md5($_POST['user_pass']);

   $user_name = preg_replace(array("/\=/","/\#/","/\sOR\s/"), "", stripinput($_POST['user_name']));

   $result = dbquery("SELECT * FROM ".DB_USERS." WHERE user_name='$user_name' AND (user_password='".md5($user_pass)."' OR user_password='$user_pass') LIMIT 1");

   if (dbrows($result)) {

      $data = dbarray($result);

      if ($data['user_password'] == $user_pass) {

         $result = dbquery("UPDATE ".DB_USERS." SET user_password='".md5($user_pass)."' WHERE user_id='".$data['user_id']."'");

      }

      $cookie_value = $data['user_id'].".".$user_pass;

      if ($data['user_status'] == 0) {   

         $cookie_exp = isset($_POST['remember_me']) ? time() + 3600 * 24 * 30 : time() + 3600 * 3;

         header("P3P: CP='NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM'");

         setcookie(COOKIE_PREFIX."user", $cookie_value, $cookie_exp, "/", "", "0");

         redirect(BASEDIR."setuser.php?user=".$data['user_name'], true);

      } elseif ($data['user_status'] == 1) {

         redirect(BASEDIR."setuser.php?error=1", true);

      } elseif ($data['user_status'] == 2) {

         redirect(BASEDIR."setuser.php?error=2", true);

      }

   } else {

      redirect(BASEDIR."setuser.php?error=3");

   }

}



if (isset($_COOKIE[COOKIE_PREFIX.'user'])) {

   $cookie_vars = explode(".", $_COOKIE[COOKIE_PREFIX.'user']);

   $cookie_1 = isnum($cookie_vars['0']) ? $cookie_vars['0'] : "0";

   $cookie_2 = (preg_check("/^[0-9a-z]{32}$/", $cookie_vars['1']) ? $cookie_vars['1'] : "");

   $result = dbquery("SELECT * FROM ".DB_USERS." WHERE user_id='$cookie_1' AND user_password='".md5($cookie_2)."' LIMIT 1");

   unset($cookie_vars,$cookie_1,$cookie_2);

   if (dbrows($result)) {

      $userdata = dbarray($result);

      if ($userdata['user_status'] == 0) {

         if ($userdata['user_theme'] != "Default" && file_exists(THEMES.$userdata['user_theme']."/theme.php") && ($settings['userthemes'] == 1 || $userdata['user_level'] >= 102)) {

            if (!theme_exists($userdata['user_theme'])) {

               echo "<strong>".$settings['sitename']." - ".$locale['global_300'].".</strong><br /><br />\n";

               echo $locale['global_301'];

               die();

            }

         } else {

            if (!theme_exists($settings['theme'])) {

               echo "<strong>".$settings['sitename']." - ".$locale['global_300'].".</strong><br /><br />\n";

               echo $locale['global_301'];

               die();

            }

         }

         if ($userdata['user_offset'] <> 0) {

            $settings['timeoffset'] = $settings['timeoffset'] + $userdata['user_offset'];

         }

         if (!isset($_COOKIE[COOKIE_PREFIX.'lastvisit'])) {

            $result = dbquery("UPDATE ".DB_USERS." SET user_threads='' WHERE user_id='".$userdata['user_id']."'");

            setcookie(COOKIE_PREFIX."lastvisit", $userdata['user_lastvisit'], time() + 3600, "/", "", "0");         

            $lastvisited = $userdata['user_lastvisit'];

         } else {

            $lastvisited = $_COOKIE[COOKIE_PREFIX.'lastvisit'];

         }

         if ($userdata['user_level'] > 101) {

            if (isset($_COOKIE[COOKIE_PREFIX.'admin']) && (!eregi(str_replace("../", "", "/".ADMIN), FUSION_REQUEST) || USER_IP != $userdata['user_ip'])) {

               setcookie(COOKIE_PREFIX."admin", "", time() - 7200, "/", "", "0");

            }

         }

      } else {

         header("P3P: CP='NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM'");

         setcookie(COOKIE_PREFIX."user", "", time() - 7200, "/", "", "0");

         setcookie(COOKIE_PREFIX."lastvisit", "", time() - 7200, "/", "", "0");

         redirect(BASEDIR."index.php", true);

      }

   } else {

      header("P3P: CP='NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM'");

      setcookie(COOKIE_PREFIX."user", "", time() - 7200, "/", "", "0");

      setcookie(COOKIE_PREFIX."lastvisit", "", time() - 7200, "/", "", "0");

      redirect(BASEDIR."index.php", true);

   }

} else {

   if (!theme_exists($settings['theme'])) {

      echo "<strong>".$settings['sitename']." - ".$locale['global_300'].".</strong><br /><br />\n";

      echo $locale['global_301'];

      die();

   }

   $userdata = "";   $userdata['user_level'] = 0; $userdata['user_rights'] = ""; $userdata['user_groups'] = "";

}



// Redirect browser using header or script function

function redirect($location, $script = false) {

   // Install ScoreSystem power by PHPFusion-SupportClub.de ///////////////////

   require_once INFUSIONS."scoresystem_panel/scoresystem_redirect_include.php";

   ////////////////////////////////////////////////////////////////////////////

// Check if users full or partial ip is blacklisted

score_positive("GT");

echo "<strong>".$locale['global_193'].$_GET['user']."</strong><br /><br

/>\n";