<?php
/* Dustbowl Clan Tools (www.dustbowl.de)
 * Copyright (C) 2002 Dustbowl Team
 *
 * Contains code from:
 * openCI
 * Copyright (C) 2001 Ariane.
 * Copyright (C) 2001 Engelke Eschner, Florian Lödermann, Frank Ruske
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA
 */

define("DEBUG", FALSE);
if (DEBUG) {
    // turn off caching
   header ("Expires: Mon, 26 Jul 1997 05:00:00 GMT");     // Date in the past
   header ("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT");   // always modified
   header ("Cache-Control: no-cache, must-revalidate");   // HTTP/1.1
   header ("Pragma: no-cache");                           // HTTP/1.0
   //set error reporting to highest level
   error_reporting (E_ALL);
}

if (file_exists("install.php")) {
    echo "Please remove the install.php from your server";
    exit;
} elseif (file_exists("install.html")) {
    echo "Please remove the install.html from your server";
    exit;
} elseif (file_exists("update.php")) {
    echo "Please remove the update.php from your server";
    exit;
} else {
    require_once ("config.php");
    require_once ("functions.php");
    require_once ("template.php");
    require_once ("lib_session.php");
    require_once ("lib_validate.php");

    //connect to database start
    mysql_pconnect($sql["hostname"], $sql["username"], $sql["password"])
        or generate_errorpage("Unable to connect to database");
    mysql_select_db($sql["dbname"])
        or generate_errorpage("Unable to select database");
    //connect to database end

    /*load global language
    $query = "SELECT language FROM $sql_table_settings WHERE id='1'";
    $result = db_query($query);
    $ci_language = mysql_result($result, 0); */

    // lang_UK (British English) is the master language
    require_once("lang/lang_UK.php");

    /*$lang_file = "lang/".$ci_language;
    if (file_exists($lang_file)) {
        include_once($lang_file);
    }  */

    // $Gtxt is used on the login page and to localize eg "newcomment", "pollcomment"
    $Gtxt = $txt;


    //Check login
    If (isset($HTTP_POST_VARS["override"])) {
        setcookie ("ci_user", $HTTP_POST_VARS["newciuser"], time() + 600);
        setcookie ("ci_pass", $HTTP_POST_VARS["newcipass"], time() + 600);
        $cookieciuser = $HTTP_POST_VARS["newciuser"];
        $cookiecipass = $HTTP_POST_VARS["newcipass"];
    } elseif (!isset($HTTP_COOKIE_VARS["ci_user"]) || !isset($HTTP_COOKIE_VARS["ci_pass"])) {
        generate_loginerrorpage(2);
    } else {
        $cookieciuser = $HTTP_COOKIE_VARS["ci_user"];
        $cookiecipass = $HTTP_COOKIE_VARS["ci_pass"];
    }

    $userID = getUserID($cookieciuser, $cookiecipass);

    if ($userID == FALSE) {
        generate_loginerrorpage(1);
    }

    //start session
    if (eregi("^(/.+/)[^/]*$",$HTTP_SERVER_VARS["REQUEST_URI"],$match)) {
       $dir = $match[0];
    } else {
       $dir = "/";
    }

    session_set_cookie_params(0,$dir);
    session_name("dct");
    session_start();

    //load variables start
    $query = "SELECT * FROM $sql_table_members WHERE id='$userID'";
    $result = db_query($query);
    $row = mysql_fetch_array($result);

    // load userdata start
    //don't use these vars anymore!
    //use the array after these vars

    $ci_username  = $row['Nick'];
    $ci_password  = $row['Password'];
    $ci_email     = $row['EMail'];
    $ci_id        = $row['id'];
    $ci_login     = $row['TimeStamp'];
    $ci_loginold  = $row['OldTimeStamp'];
    $ci_rights    = $row['Rights']; //this must be assigned before the first checkRights() call otherwise checkRights will return 0 till assignement
    $ci_forum     = checkRights(ADMIN_FORUM,$ci_rights);
    $ci_tactics   = checkRights(ADMIN_TACTICS,$ci_rights);
    $ci_warplaner = checkRights(ADMIN_WARPLANER,$ci_rights);
    $ci_files     = checkRights(ADMIN_FILES,$ci_rights);
    $ci_poll      = checkRights(ADMIN_POLL,$ci_rights);
    $ci_members   = checkRights(ADMIN_MEMBERS,$ci_rights);
    $ci_news      = checkRights(ADMIN_NEWS,$ci_rights);
    $ci_ranks     = checkRights(ADMIN_RANKS,$ci_rights);
    $ci_rules     = checkRights(ADMIN_RULES,$ci_rights);
    $ci_widdb     = checkRights(ADMIN_WIDDB,$ci_rights);
    $ci_wars      = checkRights(ADMIN_WARS,$ci_rights);
    $ci_posts     = $row['Posts'];
    $ci_language  = $row['language'];


    // use these instead
    session_register("ciUser");

    $ciUser["nick"]      = stripSlashes($row['Nick']);
    $ciUser["password"]  = stripSlashes($row['Password']);
    $ciUser["password"]  = $row['Password'];
    $ciUser["email"]     = $row['EMail'];
    $ciUser["id"]        = $row['id'];
    $ciUser["login"]     = $row['TimeStamp'];
    $ciUser["loginold"]  = $row['OldTimeStamp'];
    $ciUser["rights"]    = $row['Rights']; //this must be assigned before the first checkRights() call otherwise checkRights will return 0 till assignment
    $ciUser["forum"]     = checkRights(ADMIN_FORUM,$ciUser["rights"]);
    $ciUser["tactics"]   = checkRights(ADMIN_TACTICS,$ciUser["rights"]);
    $ciUser["warplaner"] = checkRights(ADMIN_WARPLANER,$ciUser["rights"]);
    $ciUser["files"]     = checkRights(ADMIN_FILES,$ciUser["rights"]);
    $ciUser["poll"]      = checkRights(ADMIN_POLL,$ciUser["rights"]);
    $ciUser["members"]   = checkRights(ADMIN_MEMBERS,$ciUser["rights"]);
    $ciUser["news"]      = checkRights(ADMIN_NEWS,$ciUser["rights"]);
    $ciUser["ranks"]     = checkRights(ADMIN_RANKS,$ciUser["rights"]);
    $ciUser["smileys"]   = checkRights(ADMIN_SMILEYS,$ciUser["rights"]);
    $ciUser["games"]     = checkRights(ADMIN_GAMES,$ciUser["rights"]);
    $ciUser["server"]    = checkRights(ADMIN_SERVER,$ciUser["rights"]);
    $ciUser["rules"]     = checkRights(ADMIN_RULES,$ciUser["rights"]);
    $ciUser["widdb"]     = checkRights(ADMIN_WIDDB,$ciUser["rights"]);
    $ciUser["wars"]      = checkRights(ADMIN_WARS,$ciUser["rights"]);
    $ciUser["posts"]     = $row['Posts'];
    $ciUser["language"]  = $row['language'];

    //load userdata end

    // load user language files start

    $lang_file = "lang/".$ciUser["language"];
    if (file_exists($lang_file)) {
       include($lang_file);
    }

    //load language files end

    //extend autologin by 3 days (3x24x60x60=259200)
    setcookie ("ci_user", $ciUser["nick"], time() + 259200);
    setcookie ("ci_pass", $ciUser["password"], time() + 259200);
    // update timestamp to show others we are still active
    db_query("UPDATE $sql_table_members SET TimeStamp=UNIX_TIMESTAMP(NOW()) where ID='".$ciUser["id"]."'");

    
    //start functions start

    $open = $HTTP_GET_VARS["open"] ? $HTTP_GET_VARS["open"] : "home";
    if (isset($HTTP_GET_VARS["action"])) $action = $HTTP_GET_VARS["action"];

    $sections = array(
                "home",
                "news",
                "warplaner",
                "calendar",
                "war_control",
                "poll",
                "forum",
                "tactics",
                "files",
                "members",
                "server",
                "trains",
                "rules",
                "prefs",
                "copyright",
                "comments",
                "ranks",
                "edit_forum",
                "edit_smileys",
                "edit_games",
                "query_server",
                "edit_server",
                "edit_rules",
                "edit_profile",
                "widdb",
                "wars",
		"update_check");

    if (in_array($open, $sections) == TRUE) {
       include_once("$open.php");
    } elseif ($open == "logout") { //Logout
    // Delete Cookies & destroy session
       session_destroy();
       setcookie ("ci_user");
       setcookie ("ci_pass");

       generate_loginerrorpage(0);

      /* start_page();
       html_head("LOGOUT");
       start_l2();
       start_l3();
       echo ("<H1>".$txt['logged_out']."</H1>");

       stop_page; */
    } else {     //value of open does not exist
       start_page();
       html_head($txt['error']);
       start_l2();
       start_l3();
       echo ("<center>".$txt['error_open']."</center>\n");

       stop_page();
    }
//start functions end
} //end file_exists

?>