· 5 years ago · Mar 18, 2020, 07:58 PM
1<?php
2//Настройка
3$secret_key = "08c1f8b7714f28e7022fb7078e406dbf";//Секретный ключ (32 знака)
4$security_ip = false;//Проверка по ip
5$ip = "127.0.0.1";//IP лаунчсервера
6//Иницилизация
7header("Content-Type: text/plain; charset=UTF-8");
8@error_reporting(E_ALL ^ E_WARNING ^ E_DEPRECATED ^ E_NOTICE);
9@ini_set('error_reporting', E_ALL ^ E_WARNING ^ E_DEPRECATED ^ E_NOTICE);
10@ini_set('display_errors', true);
11 include_once '../lib/mimbol/index.php';
12 if($_GET['pass'] == md5($secret_key)){
13 if(isset($_GET["login"])){
14 if(isset($_GET['login']) && isset($_GET['password'])) {
15 $username = $_GET['login'];
16 $password = md5($_GET['password']);
17 $query = query('SELECT * FROM usertbl WHERE username = :username', ['username' => $username]);
18 if ($query === false){
19 //("/index.php");
20 die('Неверный пароль или пользователь!');
21 }
22 $dbusername = $query['username'];
23 $dbpassword = $query['password'];
24 if($username == $dbusername && $password == $dbpassword){
25 if($query['loginpop'] > 2 && time() - $query['logintime'] < 300)
26 die('Неверный пароль или пользователь!');
27 if($query['loginpop'] > 2 && time() - $query['logintime'] > 300)
28 query("UPDATE `usertbl` SET `loginpop` = 0 WHERE `username` = :username", ['username' => $username]);
29 $ip = $_SERVER['REMOTE_ADDR'];
30 query("UPDATE `usertbl` SET `ip` = '$ip' WHERE `username` = '$username'", []);
31 $q = query("SELECT `name` FROM banlist WHERE name = :username", ['username' => $dbusername]);
32 if($q['name'] == ""){
33 echo('OK:');
34 die($dbusername);
35 //('/index.php');
36 }else{
37 die("Сожалеем, вы забанены на нашем проекте.");
38 //('/index.php');
39 }
40 } else {
41 if($query['loginpop'] > 2 && time() - $query['logintime'] < 300){
42 die('Много неверных попыток!');
43 $time = time();
44 query("UPDATE `usertbl` SET `logintime` = '$time' WHERE `username` = '$username'", []);
45 }
46 $time = time();
47 if(time() - $query['logintime'] > 600)
48 $pop = 0;
49 else
50 $pop = $query['loginpop'] + 1;
51 query("UPDATE `usertbl` SET `loginpop` = '$pop' WHERE `username` = '$username'", []);
52 query("UPDATE `usertbl` SET `logintime` = '$time' WHERE `username` = '$username'", []);
53 die('Неверный пароль или пользователь!');
54 }
55 } else {
56 die ("Не все поля введенны!");
57 }
58 }else{
59 die ("Не все поля введенны!");
60 }
61 }else{
62 die("ОК:hacker228");
63 }