<?php
header('charset: UTF-8;Content-Length:en-US;');
include_once("connect.php");
if(isset($_GET['user']) && isset($_GET['password']) && isset($_GET['version']))
{
$clientVersion=$_GET['version'];
$realVersion=2;
$login = $_GET['user'];
if ($realVersion != $clientVersion)
die("Bad version");
$login2=mysql_real_escape_string($login);
$mysqlZapros = "SELECT id, playername, password
FROM accounts
WHERE playername ='{$login2}'
LIMIT 1";
$resultMysql = mysql_query($mysqlZapros);
$row = mysql_fetch_assoc($resultMysql);
$realPass = $row[password];
$postPass = $_GET['password'];
$checkPass = '';
if (strlen($realPass) == 32)
{
$checkPass = md5($postPass);
}
else
{
if (strlen($realPass) <= 32)
{
$checkPass = substr(md5($postPass),-31);
}
else
{
if(strpos($realPass,'$SHA$') !== false)
{
$ar = preg_split("/\\$/",$realPass);
$salt = $ar[2];
$checkPass = '$SHA$'.$salt.'$'.hash('sha256',hash('sha256',$postPass).$salt);
}
else
{
$saltPos = (strlen($postPass) >= strlen($realPass) ? strlen($realPass) : strlen($postPass));
$salt = substr($realPass, $saltPos, 12);
$hash = hash('whirlpool', $salt . $postPass);
$checkPass = substr($hash, 0, $saltPos) . $salt . substr($hash, $saltPos);
}
}
}
$loginName = $_GET['user'];
// коннект к др БД
$db_host2 = 'localhost';
$db_port2 = 3306;
$db_user2 = 'test';
$db_pass2 = 'test';
$db_database2 = 'test';
$connect = @mysql_connect($db_host2.':'.$db_port2,$db_user2,$db_pass2) or die('asdf');
mysql_select_db($db_database2,$connect);
if($checkPass == $row[password])
{
$connect = "SELECT username, balance
FROM iconomy
WHERE username ='{$login2}'
LIMIT 1";
$resultMysql2 = mysql_query($connect) or die("1:35b9fd01865fda9d70b157e244cf801c:$loginName:12345:0:");
$row2 = mysql_fetch_assoc($resultMysql2);
$balance = $row2[balance];
echo "1:35b9fd01865fda9d70b157e244cf801c:$loginName:12345:$balance:";
}
else
{
echo "Bad login";
}
}
?>