Beiträge von 0xBADC0DED

<?php
require_once("gfunctions.php");
/**
     * Class login
     * handles the user's login and logout process
     */
class Login
{
    /**
     * @var array Collection of error messages
     */
    public $errors = array();
    /**
     * @var array Collection of success / neutral messages
     */
    public $messages = array();
    /**
     * @var object The database connection
     */
    private $db_connection = null;




    /**
     * the function "__construct()" automatically starts whenever an object of this class is created,
     * you know, when you do "$login = new Login();"
     */
    public function __construct()
    {
        // create/read session, absolutely necessary
        //session_start();
        // check the possible login actions:
        // if user tried to log out (happen when user clicks logout button)
        if (isset($_GET["logout"])) {
            $this->doLogout();
        } // login via post data (if user just submitted a login form)
        elseif (isset($_POST["login"])) {
            $this->dologinWithPostData();
        }
    }







    /**
     * perform the logout
     */
    public function doLogout()
    {
        // delete the session of the user
        if (isset($_SESSION['user_name'])) {
            logAction($_SESSION['user_name'], 'Logged Out', 1);
        }
        $_SESSION = array();
        session_destroy();
        // return a little feeedback message
        $this->messages[] = 'You have been logged out';




    }




    /**
     * log in with post data
     */
    private function dologinWithPostData()
    {
        $settings = require('config/settings.php');




        // check login form contents
        if (empty($_POST['user_name'])) {
            $this->errors[] = "Username field was empty.";
        } elseif (empty($_POST['user_password'])) {
            $this->errors[] = "Password field was empty.";
        } elseif (!empty($_POST['user_name']) && !empty($_POST['user_password'])) {




            if (isset($settings['db']['port'])) {
                $this->db_connection = new mysqli(decrypt($settings['db']['host']), decrypt($settings['db']['user']), decrypt($settings['db']['pass']), decrypt($settings['db']['name']), decrypt($settings['db']['port']));
            } else {
                $this->db_connection = new mysqli(decrypt($settings['db']['host']), decrypt($settings['db']['user']), decrypt($settings['db']['pass']), decrypt($settings['db']['name']));
            }




            // change character set to utf8 and check it
            if (!$this->db_connection->set_charset("utf8")) {
                $this->errors[] = $this->db_connection->error;
            }




            // if no connection errors (= working database connection)
            if (!$this->db_connection->connect_errno) {




                // escape the POST stuff
                $user_name = $this->db_connection->real_escape_string($_POST['user_name']);




                // database query, getting all the info of the selected user (allows login via email address in the
                // username field)
                $sql = "SELECT user_name, user_email, user_level, user_profile, permissions, user_password_hash, user_id, playerid, twoFactor, token
                        FROM users
                        WHERE user_name = '" . $user_name . "' OR user_email = '" . $user_name . "';";
                $result_of_login_check = $this->db_connection->query($sql);




                // if this user exists
                if ($result_of_login_check->num_rows == 1) {




                    // get result row (as an object)
                    $result_row = $result_of_login_check->fetch_object();




                    // using PHP 5.5's password_verify() function to check if the provided password fits
                    // the hash of that user's password
                    //var_dump(password_hash($_POST['user_password'], PASSWORD_DEFAULT));
                    if (password_verify($_POST['user_password'], $result_row->user_password_hash)) {
                        if ($result_row->user_level <> 0) {
                            //$verify = json_decode(file_get_contents('http://cyberbyte.org.uk/hooks/cyberworks/messages.php?id=' . $settings['id']));
                            //if (!isset($verify->verify)) {
                                $_SESSION['2factor'] = 0;
                                if (!empty($result_row->twoFactor)) {
                                    if ($settings['2factor']) $_SESSION['2factor'] = 1; else {
                                    $sql = "UPDATE `users` SET `backup`=NULL,`twoFactor`=NULL WHERE `userid` = '" . $result_row->user_id . "';";
                                    $this->db_connection->query($sql);
                                    $this->errors[] = $lang['2factorForceRevoke'];
                                    }
                                }




                                if (isset($_COOKIE['token']) && !empty($result_row->token)) {
                                    if (decrypt($result_row->token) == $_COOKIE['token']) {
                                        $_SESSION['2factor'] = 2;
                                    }
                                }
                                $_SESSION['sudo'] = time();
                                //$_SESSION['message'] = $verify;
                                $_SESSION['user_name'] = $result_row->user_name;
                                $_SESSION['user_level'] = $result_row->user_level;
								$_SESSION['user_password_hash'] = $result_row->user_password_hash;
                                $_SESSION['user_profile'] = $result_row->user_profile;
                                $_SESSION['user_email'] = $result_row->user_email;
                                $_SESSION['playerid'] = $result_row->playerid;
                                $_SESSION['user_id'] = $result_row->user_id;
                                $_SESSION['steamsignon'] = false;
                                $_SESSION['permissions'] = json_decode($result_row->permissions, true);
                                if (isset($result_row->items))$_SESSION['items'] = $result_row->items; else $_SESSION['items'] = $settings['items'];
                                if (isset($_POST['lang'])) {
                                    setcookie('lang', $_POST['lang'], time() + (3600 * 24 * 30));
                                    $_SESSION['lang'] = $_POST['lang'];
                                }
                                $_SESSION['steamsignon'] = false;
                                $_SESSION['user_login_status'] = 1;




                                multiDB();
                                logAction($_SESSION['user_name'], 'Successful Login (' . $_SERVER['REMOTE_ADDR'] . ')', 2);
                            /*} else {
                                if (isset($verify->message)) {
                                    $this->errors[] = $verify->message;
                                } else {
                                    $this->errors[] = "Verifcation Failed";
                                }
                            }*/
                        } else {
                            $this->errors[] = "User is banned.";
                            logAction($_POST['user_name'], 'Login Failed - Banned User (' . $_SERVER['REMOTE_ADDR'] . ')', 3);
                        }
                    } else {
                        $this->errors[] = "Wrong password. Try again.";
                        logAction($_POST['user_name'], 'Login Failed - Wrong Password (' . $_SERVER['REMOTE_ADDR'] . ')', 3);
                    }
                } else {
                    $this->errors[] = "This user does not exist.";
                    logAction($_POST['user_name'], 'Login Failed - Wrong Username (' . $_SERVER['REMOTE_ADDR'] . ')', 3);
                }
            } else {
                $this->errors[] = "Database connection problem.";
            }
        }
    }




    /**
     * simply return the current state of the user's login
     * @return boolean user's login status
     */
    public function isUserLoggedIn()
    {
        if (isset($_SESSION['user_login_status']) AND $_SESSION['user_login_status'] == 1 AND $this->checkUserStatus() == true) {
            return true;
        }
        // default return
        return false;
    }

	private function checkUserStatus()
	{
		$settings = require('config/settings.php');

            if (isset($settings['db']['port'])) {
                $this->db_connection = new mysqli(decrypt($settings['db']['host']), decrypt($settings['db']['user']), decrypt($settings['db']['pass']), decrypt($settings['db']['name']), decrypt($settings['db']['port']));
            } else {
                $this->db_connection = new mysqli(decrypt($settings['db']['host']), decrypt($settings['db']['user']), decrypt($settings['db']['pass']), decrypt($settings['db']['name']));
            }




            // change character set to utf8 and check it
            if (!$this->db_connection->set_charset("utf8")) {
                $this->errors[] = $this->db_connection->error;
            }




            // if no connection errors (= working database connection)
            if (!$this->db_connection->connect_errno) {

			$sql = "SELECT permissions, user_level, user_password_hash FROM users WHERE user_id = ". $_SESSION['user_id']; 
			$userlevel = $this->db_connection->query($sql)->fetch_object()->user_level;
			$permissions = json_decode($this->db_connection->query($sql)->fetch_object()->permissions,true);
			$passwordhash = $this->db_connection->query($sql)->fetch_object()->user_password_hash;




			if($userlevel != $_SESSION['user_level'])
			{
				$this->errors[] = "Userlevel changed.";
			} else if($passwordhash != $_SESSION['user_password_hash'])
			{
				$this->errors[] = "Your password is incorrect.";
			} else if($permissions != $_SESSION['permissions'])
			{
				$this->errors[] = "Your permissions have changed";
			} else {
			return true;
			}
			return false;
			}
	}
}

#include "..\..\script_macros.hpp"
/*
	File: fn_gather.sqf
	Author: Bryan "Tonic" Boardwine




	Description:
	Main functionality for gathering.
*/
if(isNil "life_action_gathering") then {life_action_gathering = false;};
private["_gather","_itemWeight","_diff","_itemName","_resourceZones","_zone","_sum","_dice","_sss","_player"];
_resourceZones = ["apple_1","apple_2","apple_3","apple_4","peaches_1","peaches_2","peaches_3","peaches_4","heroin_1","cocaine_1","weed_1","trauben_1","hopfen_1","froesche_1","chemie_1","uran_1","muscheln_1","kartoffel_1","salat_1","zimt_1","pfeffer_1","paprika_1"];
_zone = "";




if(life_action_inUse) exitWith {}; //Action is in use, exit to prevent spamming.
life_action_inUse = true;
//Find out what zone we're near
{
	if(player distance (getMarkerPos _x) < 30) exitWith {_zone = _x;};
} foreach _resourceZones;




if(EQUAL(_zone,"")) exitWith {life_action_inUse = false;};




//Get the resource that will be gathered from the zone name...
switch(true) do {
	case (_zone in ["apple_1","apple_2","apple_3","apple_4"]): {_gather = ["apple",1];};
	case (_zone in ["peaches_1","peaches_2","peaches_3","peaches_4"]): {_gather = ["peach",1];};
	case (_zone in ["heroin_1"]): {_gather = ["heroin_unprocessed",1];};
	case (_zone in ["cocaine_1"]): {_gather = ["cocaine_unprocessed",1];};
	case (_zone in ["weed_1"]): {_gather = ["cannabis",1];};
	case (_zone in ["trauben_1"]): {_gather = ["trauben",1];};
	case (_zone in ["uran_1"]): {_gather = ["uranium1",1];};
	case (_zone in ["hopfen_1"]): {_gather = ["hopfen",1];};
	case (_zone in ["froesche_1"]): {_gather = ["froesche",1];};
	case (_zone in ["chemie_1"]): {_gather = ["chemie",1];};
	case (_zone in ["gummi_1"]): {_gather = ["gummi",1];};
	case (_zone in ["muschel_1"]): {_gather = ["muscheln",1];};
	case (_zone in ["kartoffel_1"]): {_gather = ["kartoffels",1];};
	case (_zone in ["salat_1"]): {_gather = ["kopfsalat",1];};
	case (_zone in ["zimt_1"]): {_gather = ["zimtstange",1];};
	case (_zone in ["pfeffer_1"]): {_gather = ["pfefferkorn",1];};
	case (_zone in ["paprika_1"]): {_gather = ["paprika1",1];};
	default {""};
};
//gather check??
if(vehicle player != player) exitWith {};
_sss = life_skillLevel remoteExecCall ["TON_fnc_snickers",RSERV];




_diff = [SEL(_gather,0),_sss,life_carryWeight,life_maxWeight] call life_fnc_calWeightDiff;
if(EQUAL(_diff,0)) exitWith {hint localize "STR_NOTF_InvFull"};
life_action_inUse = true;




for "_i" from 0 to 2 do {
	player playMove "AinvPercMstpSnonWnonDnon_Putdown_AmovPercMstpSnonWnonDnon";
	waitUntil{animationState player != "AinvPercMstpSnonWnonDnon_Putdown_AmovPercMstpSnonWnonDnon";};
	sleep 2.5;
};




if(([true,SEL(_gather,0),_diff] call life_fnc_handleInv)) then {
	_itemName = M_CONFIG(getText,"VirtualItems",SEL(_gather,0),"displayName");
	titleText[format[localize "STR_NOTF_Gather_Success",(localize _itemName),_diff],"PLAIN"];
};




_sender = player;
[steamid,life_skillLevel,life_skillExp,10,_sender] remoteExecCall ["TON_fnc_addExp",RSERV];
[format["<t color='#33cc33' size = '.8'>XP verdient...<br /></t><t size='.8'>%1/%2 XP</t>",life_skillExp,life_skillExpLeft],1,-1,4,1,0,789] spawn BIS_fnc_dynamicText;
life_action_inUse = false;

16:33:02 Error in expression <Weight] call life_fnc_calWeightDiff;
if(_diff isEqualTo 0) exitWith {hint locali>
16:33:02   Error position: <_diff isEqualTo 0) exitWith {hint locali>
16:33:02   Error Nicht definierte Variable in Ausdruck: _diff
16:33:02 File mpmissions\__CUR_MP.Altis\core\actions\fn_gather.sqf, line 49
16:33:09 Error in expression <p 2.5;
};




if(([true,(_gather select 0),_diff] call life_fnc_handleInv)) then {
>
16:33:09   Error position: <_diff] call life_fnc_handleInv)) then {
>
16:33:09   Error Nicht definierte Variable in Ausdruck: _diff
16:33:09 File mpmissions\__CUR_MP.Altis\core\actions\fn_gather.sqf, line 58

2016/11/04, 16:33:02 Error in expression <e ["_level","_tosend"];




_level = _this select 0;




switch _level do {
default {_>
2016/11/04, 16:33:02   Error position: <select 0;




switch _level do {
default {_>
2016/11/04, 16:33:02   Error Generic error in expression
2016/11/04, 16:33:02 File life_server\Functions\Skillsystem\fn_snickers.sqf, line 3