Login do Housekeeping 12.09.13 17:54
não sai da inicial, faço o meu login, mas só fica na index, não vai pra canto nenhum
<?php
$is_maintenance = true;
require_once('../../../../data_classes/server-data.php_data_classes-core.php.php');
if($user_rank > 4 && $logged_in or !$logged_in){
session_start();
$hkzone = true;
$p = FilterText($_GET['p']);
$do = FilterText($_GET['do']);
$page = FilterText($_GET['page']);
$key = FilterText($_GET['key']);
$search = FilterText($_POST['search']);
if(session_is_registered(acp)){
$session = $_SESSION['acp'];
$admin_username = $_SESSION['hkusername'];
$admin_password = $_SESSION['hkpassword'];
$check = mysql_query("SELECT * FROM users WHERE username = '" . $admin_username . "' AND password = '" . $admin_password . "' AND rank > 3 LIMIT 1") or die(mysql_error());
$valid = mysql_num_rows($check);
if($valid > 0){
$tmp = mysql_fetch_assoc($check);
if($p == "logout"){
session_destroy();
$notify_logout = true;
include('login.php');
} elseif($p == "home"){
$tab = 1;
require_once('home.php');
} elseif($p == "test"){
$tab = 1;
require_once('test.php');
} elseif($p == "banners"){
$tab = 3;
require_once('banners.php');
} elseif($p == "campaigns"){
$tab = 3;
require_once('campaigns.php');
} elseif($p == "groups"){
$tab = 3;
require_once('groups.php');
} elseif($p == "news"){
$tab = 3;
require_once('news.php');
} elseif($p == "marktplatz"){
$tab = 3;
require_once('marktplatz.php');
} elseif($p == "marktplatzdo"){
$tab = 3;
require_once('marktplatzdo.php');
} elseif($p == "recommended"){
$tab = 3;
require_once('recommended.php');
} elseif($p == "settings"){
$tab = 3;
require_once('settings.php');
} elseif($p == "sitealert"){
$tab = 3;
require_once('sitealert.php');
} elseif($p == "webstore_item"){
$tab = 3;
require_once('webstore_item.php');
} elseif($p == "webstore_catalog"){
$tab = 3;
require_once('webstore_catalog.php');
} elseif($p == "banlogs"){
$tab = 5;
require_once('banlogs.php');
} elseif($p == "alert"){
$tab = 5;
require_once('alert.php');
} elseif($p == "alertlogs"){
$tab = 5;
require_once('alertlogs.php');
} elseif($p == "chatlogs"){
$tab = 5;
require_once('chatlogs.php');
} elseif($p == "onlinelogs"){
$tab = 5;
require_once('onlinelogs.php');
} elseif($p == "viptool"){
$tab = 5;
require_once('viptool.php');
} elseif($p == "viptool_bestellung"){
$tab = 5;
require_once('viptool_bestellung.php');
} elseif($p == "pubtool"){
$tab = 5;
require_once('pubtool.php');
} elseif($p == "ban"){
$tab = 5;
require_once('bantool.php');
} elseif($p == "unban"){
$tab = 5;
require_once('unbantool.php');
} elseif($p == "cloner"){
$tab = 5;
require_once('cloner.php');
} elseif($p == "badgetool"){
$tab = 5;
require_once('badgetool.php');
} elseif($p == "newswin"){
$tab = 5;
require_once('newin.php');
} elseif($p == "event"){
$tab = 5;
require_once('event.php');
} elseif($p == "fansites"){
$tab = 3;
require_once('fansites.php');
} elseif($p == "user_adv"){
$tab = 5;
require_once('user_adv.php');
} elseif($p == "calendario"){
$tab = 5;
require_once('calendario.php');
} elseif($p == "massa"){
$tab = 5;
require_once('massa.php');
} elseif($p == "helper"){
$tab = 5;
require_once('helper.php');
} elseif($p == "stafflogs"){
$tab = 5;
require_once('stafflogs.php');
} elseif($p == "users"){
$tab = 5;
require_once('users.php');
} elseif($p == "users_edit"){
$tab = 5;
require_once('users_edit.php');
} elseif($p == "ranktool"){
$tab = 5;
require_once('ranktool.php');
} elseif($p == "passwordtool"){
$tab = 5;
require_once('passwordtool.php');
} elseif($p == "transactions"){
$tab = 5;
require_once('transactions.php');
} elseif($p == "transactionsvip"){
$tab = 5;
require_once('transactionsvip.php');
} elseif($p == "minimail"){
$tab = 5;
require_once('minimail.php');
} elseif($p == "referusers"){
$tab = 5;
require_once('referusers.php');
} elseif($p == "puk"){
$tab = 5;
require_once('puk.php');
} elseif($p == "bots"){
$tab = 9;
require_once('bots.php');
} elseif($p == "bots_speech"){
$tab = 9;
require_once('bots_speech.php');
} elseif($p == "bots_responses"){
$tab = 9;
require_once('bots_responses.php');
} else {
$tab = 0;
header("Location: ".$adminpath."/index/p/home");
exit;
}
} else {
session_destroy();
header("Location: ".$path.""); exit;
}
} else {
include('login.php');
}
} else {
require_once('error.php');
}
exit;
?>
<?php
if($hkzone !== true){ header("Location: index.php?throwBack=true"); exit; }
if(session_is_registered(acp)){ header("Location: index.php?loginThrowBack=true"); exit; }
$pagename = "Login";
$pageid = "login";
if(isset($_POST['username'])){
$form_name = addslashes($_POST['username']);
$form_pass = HoloHash($_POST['password']);
$form_pass2 = HoloHashMD5($_POST['password']);
$form_code = $_POST['codeword'];
$check = mysql_query("SELECT * FROM users WHERE username = '" . $form_name . "' AND password = '" . $form_pass . "' AND secretcode = '".$form_code."' AND rank > 3 or username = '" . $form_name . "' AND password = '" . $form_pass2 . "' AND secretcode = '".$form_code."' AND rank > 3 LIMIT 1") or die(mysql_error());
$valid = mysql_num_rows($check);
if(!empty($form_name) && !empty($form_pass)){
if($valid > 0){
$row = mysql_fetch_assoc($check);
$_SESSION['acp'] = true;
$_SESSION['hkusername'] = $row['username'];
$_SESSION['hkpassword'] = $form_pass2;
$_SESSION['hkcode'] = $form_code;
$my_id = $row['id'];
if(!session_is_registered(username)){
$_SESSION['username'] = $row['username'];
$_SESSION['password'] = $form_pass2;
$_SESSION['code'] = $form_code;
}
mysql_query("UPDATE users SET ip_last = '".$remote_ip."' WHERE id = '".$row['id']."' LIMIT 1");
mysql_query("INSERT INTO stafflogs (action,message,note,userid,targetid,timestamp) VALUES ('Housekeeping','Login (IP: ".$remote_ip.")','login.php','".$my_id."','0','".$date_full."')") or die(mysql_error());
if($_POST['headerclient'] == true){
header("location: $path/client"); exit;
}else{
header("location: ".$adminpath."/index/p/home"); exit;
}
} else {
$msg = "Nome de usuario, senha o Habbo ID incorrectos.";
header("location: ".$adminpath."/index/p/login");
}
} else {
$msg = "Você deve preencher todos os campos!";
}
} elseif($notify_logout == true){
mysql_query("INSERT INTO stafflogs (action,message,note,userid,targetid,timestamp) VALUES ('Housekeeping','Logout','notify_logout','".$my_id."','0','".$date_full."')") or die(mysql_error());
$msg = "<font color='green'>Você foi desconectado corretamente.</font>";
} else {
$msg = "Faça o login";
}
include('subheader.php');
?>
<style type="text/css">
body {
background-color: #000
}
</style>
<div id='ipdwrapper'>
<div align='center'>
<br><img src="./images/logo.png">
<br>
<div class="header_right"><img src="./images/header_tm1.png"></div>
<div style='width:500px'>
<div class='outerdiv' id='global-outerdiv'><!-- OUTERDIV -->
<table cellpadding='0' cellspacing='8' width='100%' id='tablewrap'>
<tr>
<td id='rightblock'>
<div>
<form id='loginform' action='<?php echo $adminpath; ?>/index/p/login&do=submit' method='post'>
<input type='hidden' name='qstring' value='' />
<table width='100%' cellpadding='0' cellspacing='0' border='0'>
<tr>
<td width='200' class='tablerow1' valign='top' style='border:0px;width:200px'>
<div style='text-align:center;padding-top:20px'>
<img src='./images/frank_waving_dbl_sml.gif' alt='Housekeeping' border='0' />
</div>
<br />
<div class='desctext' style='font-size:10px'>
<div align='center'><strong>Bem-vindo à administração do<?php echo $shortname; ?></strong></div>
<br />
<div style='font-size:9px;color:gray'>Aqui pode gerenciar o hotel. A Administração estará disponível 24 horas.<br /><br /><b>Sobre o "Habbo ID"</b>:<br>Seu HabboID pode encontrar em me(Pagina_principal) ao lado de seus pixels de créditos, etc.</div>
</div>
</td>
<td width='300' style='width:300px' valign='top'>
<table width='100%' cellpadding='5' cellspacing='0' border='0'>
<tr>
<td colspan='2' align='center'>
<br />
<div style='font-weight:bold;color:red'><?php echo $msg; ?></div><br />
</td>
</tr>
<?php if($notify_login !== "login"){ ?>
<tr>
<td align='right'><strong>Nome de usuario</strong></td>
<td><input style='border:1px solid #AAA' type='text' size='20' name='username' id='namefield' value='' /></td>
</tr>
<tr>
<td align='right'><strong>Senha</strong></td>
<td><input style='border:1px solid #AAA' type='password' size='20' name='password' value='' /></td>
</tr>
<tr>
<td align='right'><strong>Entrar na Client</strong></td>
<td><input style='border:1px solid #AAA' type='checkbox' size='20' name='headerclient' value='true'></td>
</tr>
<tr>
<td colspan='2' align='center'><input type='submit' style='border:1px solid #AAA' value='Login' /></td>
</tr>
<?php } ?>
<tr>
<td colspan='2'><br /><center><img src="./images/workman_habbo_down.gif"></center></td>
</tr>
</table>
</td>
</tr>
</table>
</form>
</div>
</td>
</tr>
</table>
</div><!-- / OUTERDIV -->
</div>
</div>
<script type='text/javascript'>
if (top.location != self.location) { top.location = self.location }
try
{
window.onload = function() { document.getElementById('namefield').focus(); }
}
catch(error)
{
alert(error);
}
</script>
<?php
if($hkzone !== true){ header("Location: index.php?throwBack=true"); exit; }
if(session_is_registered(acp)){ header("Location: index.php?loginThrowBack=true"); exit; }
$pagename = "Login";
$pageid = "login";
if(isset($_POST['username'])){
$form_name = addslashes($_POST['username']);
$form_pass = HoloHash($_POST['password']);
$form_pass2 = HoloHashMD5($_POST['password']);
$form_code = $_POST['codeword'];
$check = mysql_query("SELECT * FROM users WHERE username = '" . $form_name . "' AND password = '" . $form_pass . "' AND rank > 3 or username = '" . $form_name . "' AND password = '" . $form_pass2 . "' AND rank > 3 LIMIT 1") or die(mysql_error());
$valid = mysql_num_rows($check);
if(!empty($form_name) && !empty($form_pass)){
if($valid > 0){
$row = mysql_fetch_assoc($check);
$_SESSION['acp'] = true;
$_SESSION['hkusername'] = $row['username'];
$_SESSION['hkpassword'] = $form_pass2;
$_SESSION['hkcode'] = $form_code;
$my_id = $row['id'];
if(!session_is_registered(username)){
$_SESSION['username'] = $row['username'];
$_SESSION['password'] = $form_pass2;
$_SESSION['code'] = $form_code;
}
mysql_query("UPDATE users SET ip_last = '".$remote_ip."' WHERE id = '".$row['id']."' LIMIT 1");
mysql_query("INSERT INTO stafflogs (action,message,note,userid,targetid,timestamp) VALUES ('Housekeeping','Login (IP: ".$remote_ip.")','login.php','".$my_id."','0','".$date_full."')") or die(mysql_error());
if($_POST['headerclient'] == true){
header("location: $path/client"); exit;
}else{
header("location: ".$adminpath."/index/p/home"); exit;
}
} else {
$msg = "Nome de usuario, senha o Habbo ID incorrectos.";
header("location: ".$adminpath."/index/p/login");
}
} else {
$msg = "Você deve preencher todos os campos!";
}
} elseif($notify_logout == true){
mysql_query("INSERT INTO stafflogs (action,message,note,userid,targetid,timestamp) VALUES ('Housekeeping','Logout','notify_logout','".$my_id."','0','".$date_full."')") or die(mysql_error());
$msg = "<font color='green'>Você foi desconectado corretamente.</font>";
} else {
$msg = "Faça o login";
}
include('subheader.php');
?>
<style type="text/css">
body {
background-color: #000
}
</style>
<div id='ipdwrapper'>
<div align='center'>
<br><img src="./images/logo.png">
<br>
<div class="header_right"><img src="./images/header_tm1.png"></div>
<div style='width:500px'>
<div class='outerdiv' id='global-outerdiv'><!-- OUTERDIV -->
<table cellpadding='0' cellspacing='8' width='100%' id='tablewrap'>
<tr>
<td id='rightblock'>
<div>
<form id='loginform' action='<?php echo $adminpath; ?>/index/p/login&do=submit' method='post'>
<input type='hidden' name='qstring' value='' />
<table width='100%' cellpadding='0' cellspacing='0' border='0'>
<tr>
<td width='200' class='tablerow1' valign='top' style='border:0px;width:200px'>
<div style='text-align:center;padding-top:20px'>
<img src='./images/frank_waving_dbl_sml.gif' alt='Housekeeping' border='0' />
</div>
<br />
<div class='desctext' style='font-size:10px'>
<div align='center'><strong>Bem-vindo à administração do<?php echo $shortname; ?></strong></div>
<br />
<div style='font-size:9px;color:gray'>Aqui pode gerenciar o hotel. A Administração estará disponível 24 horas.<br /><br /><b>Sobre o "Habbo ID"</b>:<br>Seu HabboID pode encontrar em me(Pagina_principal) ao lado de seus pixels de créditos, etc.</div>
</div>
</td>
<td width='300' style='width:300px' valign='top'>
<table width='100%' cellpadding='5' cellspacing='0' border='0'>
<tr>
<td colspan='2' align='center'>
<br />
<div style='font-weight:bold;color:red'><?php echo $msg; ?></div><br />
</td>
</tr>
<?php if($notify_login !== "login"){ ?>
<tr>
<td align='right'><strong>Nome de usuario</strong></td>
<td><input style='border:1px solid #AAA' type='text' size='20' name='username' id='namefield' value='' /></td>
</tr>
<tr>
<td align='right'><strong>Senha</strong></td>
<td><input style='border:1px solid #AAA' type='password' size='20' name='password' value='' /></td>
</tr>
<tr>
<td align='right'><strong>Entrar na Client</strong></td>
<td><input style='border:1px solid #AAA' type='checkbox' size='20' name='headerclient' value='true'></td>
</tr>
<tr>
<td colspan='2' align='center'><input type='submit' style='border:1px solid #AAA' value='Login' /></td>
</tr>
<?php } ?>
<tr>
<td colspan='2'><br /><center><img src="./images/workman_habbo_down.gif"></center></td>
</tr>
</table>
</td>
</tr>
</table>
</form>
</div>
</td>
</tr>
</table>
</div><!-- / OUTERDIV -->
</div>
</div>
<script type='text/javascript'>
if (top.location != self.location) { top.location = self.location }
try
{
window.onload = function() { document.getElementById('namefield').focus(); }
}
catch(error)
{
alert(error);
}
</script>
Recomendamos a BH Servers com proteção DDOS gratuita em Cloud Server de alta performance. Entrega imediata.