<?php
session_start();
ob_start();
include_once("inc/configurare.php");
include("inc/func.dark.php");
include("inc/security.php");
error_reporting(0);
auto_unban();
sterge_cont_automat();
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<!--------------------------------------------------------------------------START PROTECTION-------------------------------------------------------------->


<!-- START Anti-SQL Injection -->
<?php
function madSafety($string) {
$string = stripslashes($string);
$string = strip_tags($string);
$string = mysql_real_escape_string($string);
return $string;
}
?>

<?php
$ip = $_SERVER['REMOTE_ADDR'];
$time = date("l dS of F Y h:i:s A");
$fp = fopen ("[WEB]SQL_Injection.txt", "a+");
$sql_inject_1 = array(";","'","%",'"'); #Whoth need replace
$sql_inject_2 = array("", "","","""); #To wont replace
$GET_KEY = array_keys($_GET); #array keys from $_GET
$POST_KEY = array_keys($_POST); #array keys from $_POST
$COOKIE_KEY = array_keys($_COOKIE); #array keys from $_COOKIE
/*begin clear $_GET */
for($i=0;$i<count($GET_KEY);$i++)
{
$real_get[$i] = $_GET[$GET_KEY[$i]];
$_GET[$GET_KEY[$i]] = str_replace($sql_inject_1, $sql_inject_2, HtmlSpecialChars($_GET[$GET_KEY[$i]]));
if($real_get[$i] != $_GET[$GET_KEY[$i]])
{
fwrite ($fp, "IP: $ip\r\n");
fwrite ($fp, "Method: GET\r\n");
fwrite ($fp, "Value: $real_get[$i]\r\n");
fwrite ($fp, "Time: $time\r\n");
fwrite ($fp, "==================================\r\n");
}
}
/*end clear $_GET */
/*begin clear $_POST */
for($i=0;$i<count($POST_KEY);$i++)
{
$real_post[$i] = $_POST[$POST_KEY[$i]];
$_POST[$POST_KEY[$i]] = str_replace($sql_inject_1, $sql_inject_2, HtmlSpecialChars($_POST[$POST_KEY[$i]]));
if($real_post[$i] != $_POST[$POST_KEY[$i]])
{
fwrite ($fp, "IP: $ip\r\n");
fwrite ($fp, "Method: POST\r\n");
fwrite ($fp, "Value: $real_post[$i]\r\n");
fwrite ($fp, "Time: $time\r\n");
fwrite ($fp, "==================================\r\n");
}
}
/*end clear $_POST */
/*begin clear $_COOKIE */
for($i=0;$i<count($COOKIE_KEY);$i++)
{
$real_cookie[$i] = $_COOKIE[$COOKIE_KEY[$i]];
$_COOKIE[$COOKIE_KEY[$i]] = str_replace($sql_inject_1, $sql_inject_2, HtmlSpecialChars($_COOKIE[$COOKIE_KEY[$i]]));
if($real_cookie[$i] != $_COOKIE[$COOKIE_KEY[$i]])
{
fwrite ($fp, "IP: $ip\r\n");
fwrite ($fp, "Method: COOKIE\r\n");
fwrite ($fp, "Value: $real_cookie[$i]\r\n");
fwrite ($fp, "Script: $script\r\n");
fwrite ($fp, "Time: $time\r\n");
fwrite ($fp, "==================================\r\n");
}
}

/*end clear $_COOKIE */
fclose ($fp);
?>


<?PHP
FUNCTION anti_injection( $user, $pass ) {

$banlist = ARRAY (
"insert", "select", "update", "delete", "distinct", "having", "truncate", "replace",
"handler", "like", " as ", "or ", "procedure", "limit", "order by", "group by", "asc", "desc"
);
IF ( EREGI ( "[a-zA-Z0-9]+", $user ) ) {
$user = TRIM ( STR_REPLACE ( $banlist, '', STRTOLOWER ( $user ) ) );
} ELSE {
$user = NULL;
}

IF ( EREGI ( "[a-zA-Z0-9]+", $pass ) ) {
$pass = TRIM ( STR_REPLACE ( $banlist, '', STRTOLOWER ( $userpass ) ) );
} ELSE {
$pass = NULL;
}

$array = ARRAY ( 'user' => $user, 'pass' => $userpass );
IF ( IN_ARRAY ( NULL, $array ) ) {
DIE ( 'Invalid use of login and/or password. Please use a normal method.' );
} ELSE {
RETURN $array;
}
}
?>
<?php

function mysql_safe($query,$params=false) {
if ($params) {
foreach ($params as &$v) { $v = mysql_real_escape_string($v); }
$sql_query = vsprintf( str_replace("?","'%s'",$query), $params );
$sql_query = mysql_query($sql_query);
} else {
$sql_query = mysql_query($query);
}
return ($sql_query);
}
?>

<?php
class secure{ function secureSuperGlobalGET($key)
{
$_GET[$key] = str_ireplace("script", "blocked", $_GET[$key]);
$_GET[$key] = strip_tags($_GET[$key]);
return $_GET[$key];
}


function secureSuperGlobalPOST($key)
{
$_POST[$key] = str_ireplace("script", "blocked", $_POST[$key]);
$_POST[$key] = strip_tags($_POST[$key]);
return $_POST[$key];
}



function secureVar($key){
$key = str_ireplace("script", "blocked", $key);
$key = strip_tags($key);
return $key;
}
}
?>

<!-- END Anti-SQL Injection -->


<!-----------------------------------------------------------------------!>


<!-- Cookie Protect -->

<?php
foreach ($_COOKIE as $key => $value) {
if(get_magic_quotes_gpc()) $_COOKIE[$key]=stripslashes($value);
$_COOKIE[$key] = mysql_real_escape_string($value);
}
?>

<!-- END Cookie Protect -->

<!-- START XSS Protection -->

<?php
/**
* Protejeaza de atacuri xss
* @param type string $str - stringul care trebuie protejat de xss
* @param type string $allowable_tags - tagurile pe care nu le va elimina, exemplu <b>
*/
function strip_xss($str,$allowable_tags=false){
//daca sa setat tag care sa nu fie eliminat
if(!$allowable_tags){
//facem strip_tags fara a elimina tagul(rile) dorit
$rez = strip_tags($str,$allowable_tags);
}
//altfel
else{
//facem strip_tags
$rez = strip_tags($str);
}

//daca se introduce javascript:alert() in input
if(stripos($rez, "javascript:") !== false) {
//eliminam javascript:
$result = str_replace("javascript:","", htmlentities($rez, ENT_QUOTES));

}
//altfel
else {
//tranformama in entitati html, protectia este pusa pentru " onchange="alert(document.cookie); etc
$result = htmlentities($rez, ENT_QUOTES);
}

return $result;
}
?>

<!-- END XSS Protection -->

<!-----------------------------------------------------------------------!>

<!-- START FIREWALL -->

<?php
define('PHP_FIREWALL_REQUEST_URI', strip_tags( $_SERVER['REQUEST_URI'] ) );
define('PHP_FIREWALL_ACTIVATION', true );
if ( is_file( @dirname(__FILE__).'/php-firewall/firewall.php' ) )
include_once( @dirname(__FILE__).'/php-firewall/firewall.php' );
?>

<!-- STOP FIREWALL -->

<!-----------------------------------------------------------------------!>

<script language=Javascript1.2> function ejs_nodroit() {return(false); } document.oncontextmenu = ejs_nodroit; </script>


<!--------------------------------------------------------------------------END PROTECTION-------------------------------------------------------------->



<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<title><?=$titlu?></title>
<link href="css/style.css" rel="stylesheet" type="text/css">

<script type="text/javascript" src="plugins/jquery-1.9.1.min.js"></script>
<script type="text/javascript" src="plugins/unitip.js"></script>
<script type="text/javascript" src="plugins/login.js"></script>
<link href="http://fonts.googleapis.com/css?family= ... 00,400,700" rel="stylesheet" type="text/css">
<link href="images/style.css" rel="stylesheet" type="text/css">
<link href="images/unitip.css" rel="stylesheet" type="text/css">
</head>
<body>
<div id="wrapper">
<div id="head">

<div id="navi">
<ul>
<li><a style="top: 0px;" href="index.php" class="home"><span></span></a></li>
<li><a style="top: 0px;" href="index.php?page=descarcare" class="about"><span></span></a></li>
<li><a style="top: 0px;" href="index.php?page=register" class="nregister"><span></span></a></li>
<li><a style="top: 0px;" href="index.php?page=doneaza" class="files"><span></span></a></li>
<li><a style="top: 2px;" href="index.php?page=rules1" class="ndonate"><span></span></a></li>
<li><a href="#" class="forum"><span></span></a></li>
</ul>
</div><!--navi-->
<a href="index.php?page=rules1" class="lk"><div style="opacity: 0;" class="fake-hover"></div></a>
<a href="#" class="logo"><div style="opacity: 0;" class="fake-hover"></div></a>

<a href="####" class="register"><div style="opacity: 0;" class="fake-hover"></div></a>

<div id="downloads">

<font color="yellow" size="2">Server: </font><img src="/images/online.gif" width="50" height="20"></a>
<br><font color="yellow" size="2">CH1: </font><img src="/images/online.gif" width="50" height="20"></a>
<br><font color="yellow" size="2">Level Maxim 105</font>
<br><font color="yellow" size="2">Drop Yang 30%</font>
<br><font color="yellow" size="2">Drop Obiecte 60%</font>
<br><font color="yellow" size="2">Rata Exp 150%</font>
<br>
<br><a href="http://www.facebook.com/Metin2-Craiova" target="_blank"> <img src="/images/fb.png" width="115" height="60"></a>

</div><!--downloads-->

<a href="index.php?page=doneaza" class="donate"><div style="opacity: 0;" class="fake-hover"></div></a>
<div class="goal">
Donatii lunare 0&euro;
<br>Luna Noiembrie 2014
</div>
<div id="server">
<div id="ack"></div> <?php if(!isset($_SESSION['user']) && !isset($_SESSION['pass'])){
login();
?><form id="myForm" action="index.php" method="POST">
<table border="0" align="center" cellpadding="1" cellspacing="0" >
<tr>
<td width="158"><input name="username" type="text" class="login_field" id="username" OnClick="this.value=''" value="utilizator" autocomplete="off"></td>
</tr>
<tr>
<td><input name="password" type="password" class="login_field" id="password" OnClick="this.value=''" value="password" autocomplete="off"></td>
</tr>
<tr>
<td width="61"><button name="submit" type="submit" class="login_btn" id="submit"></button></td>
</tr>
<tr>
<td> <center> <a href="index.php?page=recuperare-pw" class="login_text">Ai uitat parola ?</a></center> </td>
</tr>

</table>
</form><?php } else{ ?> <table width="200" border="0" align="center" cellpadding="0" cellspacing="0">
<tr>
<td width="196" height="10"></td>
</tr><?php if($_SESSION['admin'] > 0){?>
<tr>
<td class="main_menu"><a HREF="index.php?page=panou-admin">&raquo; Administrare</a></td>
</tr> <?php } ?>
<tr>
<td class="main_menu"><a HREF="index.php?page=panou-user">&raquo; Panou utilizator</a></td>
</tr>
<tr>
<td class="main_menu"><a HREF="index.php?page=caractere">&raquo; Caractere</a></td>
</tr>
<tr>
<td class="main_menu"><a HREF="index.php?page=doneaza">&raquo; Doneaza</a></td>
</tr>
<tr>
<td class="main_menu"><a HREF="index.php?page=schimbare-email">&raquo; Schimba email</a></td>
</tr>
<tr>
<td class="main_menu"><a HREF="index.php?page=schimbare-pw">&raquo; Schimba parola</a></td>
</tr>
<tr>
<td class="main_menu"><a HREF="index.php?page=stergere-cont">&raquo; Anulare cont</a></td>
</tr>
<tr>
<td class="main_menu"><a HREF="index.php?page=iesire">&raquo; Logout</a></td>
</tr>

</table> <Br>

<?php } ?>
</form>
</div>
<div id="pvptop">
<!-- multi top -->
<script type="text/javascript">
$(document).ready(function(){

$('ul.tabsx li').click(function(){
var tab_id = $(this).attr('data-tabx');

$('ul.tabsx li').removeClass('currentx');
$('.tabx-contentx').removeClass('currentx');

$(this).addClass('currentx');
$("#"+tab_id).addClass('currentx');
})

})
</script>
<div class="containerx">
<div align="center">
<ul class="tabsx">
<li class="tabx-link currentx" data-tabx="tabx-3"> <font size="2">CLASAMENT JUCATORI</font> </li>
</ul>
<div id="tabx-3" class="tabx-contentx currentx" >
<table border="0" align="center" cellpadding="0" cellspacing="0" width="100%" >
<tr>
<td colspan="3" height="5"></td>
</tr>
<tr class="top2">
<td><?php include('inc/jucatori.php');?></td>
</tr>

<tr>
<td colspan="3" height="5"></td>
</tr></table>

</div>

</div>
</div>

<br />




<br />
<br>
<div style="font-size:12px">
<div style="margin-left:-42px;" >
<table width="220" border="0" cellspacing="0" cellpadding="0" height="16" style="padding-top:2px; margin-left:0px;" align="center">
<center><font color="green">Online pe server </font> <?php


$exe = mysql_query("SELECT COUNT(*) as count FROM player.player WHERE DATE_SUB(NOW(), INTERVAL 2 MINUTE) < last_play;");

$player_onlin = mysql_fetch_object($exe)->count;

$player_online = $player_onlin + 5;

if ($player_onlin < '3')

echo "<span style=\"color:red\" title=\"Serverul poate fi offline\">$player_onlin</span>";

else

echo "<span style=\"color:red\">$player_online</span>";


?>

<?php
include "modules/online_pe_site.php";
?>

</table> </div>


</div>
</div>
<div id="lk">
<table width="200" border="0" align="center" cellpadding="0" cellspacing="0">

<tr>
<td width="196" height="10"></td>
</tr>

<tr>
<td class="main_menu"><a href="index.php" >Acasa</a></td>
</tr>

<tr>
<td class='main_menu'>
<a href='index.php?page=register'> Inregistrare</a></td>
</tr>

<tr>
<td class='main_menu'>
<a href='index.php?page=jucatori'> Clasament Jucatori</a></td>
</tr>

<tr>
<td class='main_menu'>
<a href='index.php?page=bresle'> Clasament Bresle</a></td>
</tr>

<tr>
<td class='main_menu'>
<a href='index.php?page=descarcare'> Descarca Client</a></td>
</tr>

<tr>
<td class='main_menu'>
<a href='index.php?page=rules1'> Magazin</a></td>
</tr>

<tr>
<td class='main_menu'>
<a href='index.php?page=prezentare'> Prezentare Officiala</a></td>
</tr>

<tr>
<td class='main_menu'>
<a href='index.php?page=evenimente'> Evenimente</a></td>
</tr>

<tr>
<td class='main_menu'>
<a href='index.php?page=chat'> Chat</a></td>
</tr>

</table>
</div>

<div id="lastpost">
<div class="item">
<div class="post"><a href="#" title="">Contact Fondatori:</a></div>
</div>

<div class="item">
<div class="post"><a href="#" title="">[SGA]Steve</a></div>
<div class="post"><a href="#" title="">skyline.bzone [Mess]</a></div>
<div class="post"><a href="#" title="">s0r1n.0nl1ne [Skype]</a></div>
</div>

<div class="item">
<div class="post"><a href="#" title=""></a></div>
</div>

<div class="item">
<div class="post"><a href="#" title="">[SGA]Cosm1n</a></div>
<div class="post"><a href="#" title="">bortoicosmin [Mess]</a></div>
<div class="post"><a href="#" title="">cosm1n1996 [Skype]</a></div>
</div>

</div>

</div><!--head-->
<div id="fcontent">
<div align="center">
<table width="100%" align="center" class="content">
<tr>
<td valign="top">
<div style="font-color:black;">

<table width="100%" border="0" cellspacing="1" cellpadding="1" style="font-color:#000;">
<tr>
</tr>
<tr>
<td valign="top"><?php loadcontent();?>
</td>
</tr>
<tr>
<td style="border-top:1px dotted #946767;;">&nbsp;</td>
</tr>
</table>




</div>
</td>
</tr>
</table>
</div>
</div><!--fcontent-->
</body>
</html>