| .. | |||||
| .DS_Store | |||||
| calendar.class-en.php | |||||
| calendar.class.php | |||||
| class.cropcanvas.php | |||||
| common.php | |||||
| func.php | |||||
| functions.api.php | |||||
| functions.php | |||||
| index.html | |||||
| thumbnail.class.php |
| Server IP : 172.67.145.202 / Your IP : 172.70.208.146 Web Server : Apache/2.2.15 (CentOS) System : Linux GA 2.6.32-431.1.2.0.1.el6.x86_64 #1 SMP Fri Dec 13 13:06:13 UTC 2013 x86_64 User : apache ( 48) PHP Version : 5.6.38 Disable Function : NONE MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : OFF Directory : /var/www/html/quanly/linh/includes/ |
Upload File : |
<?php
function ba_home(){
global $cf,$tpl,$htmltitle,$htmldes,$keywords;
$nd='';
$t=$tpl['info'];
$sub=cuttemplate($t,"private");
$t=str_replace($sub, "", $t);
if ($_SESSION['user_pm']==''){
$pm='<a href="ajax.php?act=updatepm" class="fancybox fancybox.ajax showx" rel="info">Cập nhật Perfect Money</a>';
} else{
$pm=$_SESSION['user_pm'];
}
if ($_SESSION['user_acc']==''){
$acc='<span style="color:red;">Nạp tiền để nhận Acc bóng</span>';
} else{
$acc=$cf['accuser'].$_SESSION['user_acc'];
}
$t=str_replace(array('<!--email-->','<!--balance-->','<!--pm-->','<!--dep-->','<!--wit-->','<!--accpass-->','<!--acc-->','<!--accbalance-->'),
array($_SESSION['user_email'],$_SESSION['user_balance'],$pm,$_SESSION['user_dep'],$_SESSION['user_wit'],$_SESSION['user_accpass'],$acc,$_SESSION['user_accbalance']),$t);
$db = new Kdb($cf);
$sql="SELECT * FROM news WHERE news_user={$_SESSION['user_id']} LIMIT 1";
$db->query($sql);
$r=$db->rows;
if ($r[0]['news_text']!=''){
$sub=str_replace('{private}',$r[0]['news_text'],$sub);
$t=str_replace('<!--private-->',$sub,$t);
}
$sql="SELECT * FROM news WHERE news_type=0 AND news_status=1 ORDER BY news_id DESC LIMIT 5";
$db->query($sql);
$r=$db->rows;
$nw="";
for ($i=0;$i<count($r);$i++){
$nw.='<a href="ajax.php?act=news&news_id='.$r[$i]['news_id'].'" class="fancybox fancybox.ajax newsx" rel="news">'.$r[$i]['news_title'].'</a><br/>';
}
$t=str_replace('<!--news-->',$nw,$t);
$db->disconnect();
$nd=$t;
return $nd;
}
function ba_register(){
global $cf,$tpl,$htmltitle,$htmldes,$keywords;
$htmltitle="Đăng ký";
$htmldes="Đăng ký. ".$htmldes;
$t=$tpl['register'];
$sub=cuttemplate($t,"form");
$t=str_replace($sub, "", $t);
if (@$_SESSION['user_id']>0){
$t=str_replace('{mess}',_go($cf['siteurl'],0),$tpl['mess']);
} else{
if (@$_POST['s']!=1){
$t=str_replace('<!--form-->',$sub,$t);
} else{
$code=@$_POST['code'];
$email=_s(@$_POST['email']);
$pass=@$_POST['pass'];
$pass2=@$_POST['pass2'];
if ($_SESSION['security_code']!=$code){
$t=str_replace('<!--form-->','<h4 style="color:red">Trả lời sai.</h4> '.$sub,$t);
} else{
if (isValidEmail($email) && $pass!=""){
if ($pass2!=$pass){
$t=str_replace('<!--form-->','<h4 style="color:red">Mật khẩu không giống nhau.</h4> '.$sub,$t);
} else{
$email=strtolower($email);
$db = new Kdb($cf);
$db->connect();
$passx=md5($cf['passpre'].$pass);
$sql="SELECT * FROM users WHERE user_email='$email' LIMIT 1";
$db->query($sql);
$r=$db->rows;
if ($r[0]['user_id']>0){
$t=str_replace('<!--form-->','<h4 style="color:red">Email đã được dùng để đăng ký,<br/> hãy chọn email khác.</h4> '.$sub,$t);
} else{
$sql="INSERT INTO users(user_email,user_pass,user_regdate,user_balance,user_dep,user_wit,user_status,user_refer)
VALUES('$email','$passx',{$cf['time']},0,0,0,1,'{$_SESSION['refer']}')";
$db->query($sql);
$t=str_replace('{mess}','<h4 style="color:green">Bạn đã đăng ký thành công.</h4>'._go($cf['siteurl'].'?act=login',3),$tpl['mess']);
}
$db->disconnect();
}
} else{
$t=str_replace('<!--form-->','<h4 style="color:red">Thiếu hoặc sai thông tin.</h4> '.$sub,$t);
}
}
}
}
$nd=$t;
return $nd;
}
function ba_login(){
global $cf,$tpl,$htmltitle,$htmldes,$keywords;
$htmltitle="Đăng nhập";
$htmldes="Đăng nhập. ".$htmldes;
$t=$tpl['login'];
$sub=cuttemplate($t,"form");
$t=str_replace($sub, "", $t);
if (@$_SESSION['user_id']>0){
$t=str_replace('{mess}','<h4 style="color:green">Bạn đã đăng nhập thành công.</h4>'._go($cf['siteurl'],2),$tpl['mess']);
} else{
if (@$_POST['s']!=1){
$t=str_replace('<!--form-->',$sub,$t);
} else{
$code=@$_POST['code'];
$email=_s(@$_POST['email']);
$pass=@$_POST['pass'];
if ($_SESSION['security_code']!=$code){
$t=str_replace('<!--form-->','<h4 style="color:red">Trả lời sai.</h4> '.$sub,$t);
} else{
if (isValidEmail($email) && $pass!=""){
$email=strtolower($email);
$db = new Kdb($cf);
$db->connect();
$passx=md5($cf['passpre'].$pass);
$sql="SELECT * FROM users WHERE user_email='$email' AND user_pass='$passx' LIMIT 1";
$db->query($sql);
$r=$db->rows;
if ($r[0]['user_id']<1){
$t=str_replace('<!--form-->','<h4 style="color:red">Thông tin đăng nhập sai.</h4> '.$sub,$t);
} elseif($r[0]['user_status']==0){
$t=str_replace('<!--form-->','<h4 style="color:red">Tài khoản của bạn đã chưa kích hoạt.</h4> '.$sub,$t);
} elseif($r[0]['user_status']==2){
$t=str_replace('<!--form-->','<h4 style="color:red">Tài khoản của bạn đã bị khoá.</h4> '.$sub,$t);
} else{
$_SESSION['user_id']=$r[0]['user_id'];
$_SESSION['user_email']=$r[0]['user_email'];
$_SESSION['user_pass']=$r[0]['user_pass'];
$_SESSION['user_acc']=$r[0]['user_acc'];
$_SESSION['user_accpass']=$r[0]['user_accpass'];
$_SESSION['user_accbalance']=$r[0]['user_accbalance'];
$_SESSION['user_balance']=$r[0]['user_balance'];
$_SESSION['user_dep']=$r[0]['user_dep'];
$_SESSION['user_wit']=$r[0]['user_wit'];
$_SESSION['user_pm']=$r[0]['user_pm'];
$_SESSION['user_status']=$r[0]['user_status'];
$_SESSION['user_usepm']=$r[0]['user_usepm'];
$t=str_replace('{mess}','<h4 style="color:green">Bạn đã đăng nhập thành công.</h4>'._go($cf['siteurl'],2),$tpl['mess']);
$sql="UPDATE users SET user_lastlogin={$cf['time']} WHERE user_id={$_SESSION['user_id']} LIMIT 1";
$db->query($sql);
}
$db->disconnect();
} else{
$t=str_replace('<!--form-->','<h4 style="color:red">Thông tin đăng nhập sai.</h4> '.$sub,$t);
}
}
}
}
$nd=$t;
return $nd;
}
function ba_logout(){
global $cf,$tpl,$htmltitle,$htmldes,$keywords;
$htmltitle="Thoát";
$htmldes="Thoát. ".$htmldes;
if (@$_SESSION['user_id']<1){
$nd=str_replace('{mess}',_go($cf['siteurl'],0),$tpl['mess']);
} else{
$nd=str_replace('{mess}','<h4 style="color:green">Bạn đã thoát khỏi hệ thống.</h4>'._go($cf['siteurl'],5),$tpl['mess']);
$_SESSION['user_id']=0;
$_SESSION['user_email']='';
$_SESSION['user_pass']='';
$_SESSION['user_acc']='';
$_SESSION['user_accpass']='';
$_SESSION['user_accbalance']='';
$_SESSION['user_balance']='';
$_SESSION['user_dep']='';
$_SESSION['user_wit']='';
$_SESSION['user_pm']='';
$_SESSION['user_status']='';
$_SESSION['totallose']='';
$_SESSION['totalwin']='';
$_SESSION['user_usepm']='';
}
return $nd;
}
function ba_expried(){
global $cf,$tpl,$htmltitle,$htmldes,$keywords;
$nd='';
if (@$_SESSION['user_id']>0){
$_SESSION['user_id']=0;
$_SESSION['user_email']='';
$_SESSION['user_pass']='';
$_SESSION['user_acc']='';
$_SESSION['user_accpass']='';
$_SESSION['user_accbalance']='';
$_SESSION['user_balance']='';
$_SESSION['user_dep']='';
$_SESSION['user_wit']='';
$_SESSION['user_pm']='';
$_SESSION['user_status']='';
$_SESSION['totallose']='';
$_SESSION['totalwin']='';
$_SESSION['user_usepm']='';
}
return $nd;
}
function ba_withdraw(){
global $cf,$tpl,$htmltitle,$htmldes,$keywords;
$nd='';
if (@$_SESSION['user_id']<1) return _go($cf['siteurl'],0);
$t=$tpl['withdraw'];
$sub=cuttemplate($t, "item");
$t=str_replace($sub,"",$t);
$db = new Kdb($cf);
if (@$_POST['s']==1){
$ok=1;
if (@$_POST['type']=='pm'){
$amount=(float)@$_POST['amountpm'];
if ($_SESSION['user_pm']=='') $ok=0;
}
if (@$_POST['type']=='btc-e'){
$amount=(float)@$_POST['amountbtce'];
}
if ($ok==1){
if ($amount<1){
$t=str_replace("<!--errorpm-->","<h4 style='color:red;'>Số tiền tối thiểu là 1$</h4>",$t);
}elseif($amount>$_SESSION['user_balance']){
$t=str_replace("<!--errorpm-->","<h4 style='color:red;'>Số tiền tối đa là {$_SESSION['user_balance']}$</h4>",$t);
}else{
$fee=round($amount*0.02,2);
if ($_POST['type']=='pm'){
$sql="INSERT INTO wit(wit_time,wit_user,wit_amount,wit_fee,wit_type,wit_status)
VALUES({$cf['time']},{$_SESSION['user_id']},$amount,$fee,0,0)";
}
if ($_POST['type']=='btc-e'){
if ($_SESSION['user_usepm']==0){
$fee=0;
}
$sql="INSERT INTO wit(wit_time,wit_user,wit_amount,wit_fee,wit_type,wit_status)
VALUES({$cf['time']},{$_SESSION['user_id']},$amount,$fee,1,0)";
}
$db->query($sql);
$sql="UPDATE users SET user_balance=ROUND({$_SESSION['user_balance']}-$amount,2), user_wit=ROUND(user_wit+$amount,2)
WHERE user_id={$_SESSION['user_id']}";
$db->query($sql);
$t=str_replace("<!--errorpm-->","<h4 style='color:green;'>Bạn đã yêu cầu rút thành công, xin đợi ít phút.</h4>",$t);
ba_updateinfo();
$db = new Kdb($cf);
}
} else{
$t=str_replace("<!--errorpm-->","<h4 style='color:red;'>Hãy cập nhật tài khoản PM trước khi rút</h4>",$t);
}
}
$t=str_replace("{balance}",$_SESSION['user_balance'],$t);
$sql="SELECT * FROM wit WHERE wit_user={$_SESSION['user_id']} ORDER BY wit_id DESC";
$db->query($sql);
$r=$db->rows;
$it="";
for ($i=0;$i<count($r);$i++){
if ($r[$i]["wit_type"]==0){
$type="PM";
} else{
$type="BTC-E Code";
}
if ($r[$i]["wit_status"]==0){
$status="Đang duyệt";
} elseif($r[$i]["wit_status"]==1){
$status="<span style='color:green;'>Hoàn thành</span>";
} else{
$status="<span style='color:red;'>Đã huỷ</span>";
}
$it.=str_replace(array("{wit_time}","{amount}","{type}","{code}","{batch}","{status}"),
array(date("d/m/Y H:i",$r[$i]["wit_time"]),$r[$i]["wit_amount"],$type,$r[$i]["wit_code"],$r[$i]["wit_batch"],$status),$sub);
}
$t=str_replace("<!--item-->",$it,$t);
$db->disconnect();
$nd=$t;
return $nd;
}
function ba_deposit(){
global $cf,$tpl,$htmltitle,$htmldes,$keywords;
if (@$_SESSION['user_id']<1) return _go($cf['siteurl'],0);
$nd='';
$t=$tpl['deposit'];
$t=str_replace(array('{syspm}','{pmsci}','{user_id}'),array($cf['syspm'],$cf['pmsci'],$_SESSION['user_id']),$t);
$sub=cuttemplate($t, "item");
$t=str_replace($sub,"",$t);
$db = new Kdb($cf);
if (@$_POST['type']=='btc-e'){
$code=_s($_POST['btcecode']);
if (isValidCode($code)==1){
$sql="SELECT dep_id FROM dep WHERE dep_code='$code' LIMIT 1";
$db->query($sql);
$r=$db->rows;
if ($r[0]["dep_id"]<1){
$sql="INSERT INTO dep(dep_time,dep_user,dep_type,dep_code,dep_status)
VALUES({$cf['time']},{$_SESSION['user_id']},1,'$code',0)";
$db->query($sql);
$t=str_replace("<!--message-->","Chúng tôi đang kiểm tra BTC-E Code, bạn sẽ nhận được tiền trong ít phút nếu Code đúng.",$t);
} else{
$t=str_replace("<!--message-->","BTC-E Code đã được sử dụng",$t);
}
} else{
$t=str_replace("<!--message-->","Định dạng BTC-E Code không đúng",$t);
}
}
$sql="SELECT * FROM dep WHERE dep_user={$_SESSION['user_id']} ORDER BY dep_id DESC";
$db->query($sql);
$r=$db->rows;
$it="";
for ($i=0;$i<count($r);$i++){
if ($r[$i]["dep_type"]==0){
$type="PM";
} else{
$type="BTC-E Code";
}
if ($r[$i]["dep_status"]==0){
$status="Đang duyệt";
} elseif($r[$i]["dep_status"]==1){
$status="<span style='color:green;'>Hoàn thành</span>";
} else{
$status="<span style='color:red;'>Đã huỷ</span>";
}
$it.=str_replace(array("{dep_time}","{amount}","{type}","{code}","{batch}","{status}"),
array(date("d/m/Y H:i",$r[$i]["dep_time"]),$r[$i]["dep_amount"],$type,$r[$i]["dep_code"],$r[$i]["dep_batch"],$status),$sub);
}
$t=str_replace("<!--item-->",$it,$t);
$db->disconnect();
$nd=$t;
return $nd;
}
function ba_updateinfo(){
global $cf,$tpl,$htmltitle,$htmldes,$keywords;
$nd='';
if (@$_SESSION['user_id']>0){
$db = new Kdb($cf);
$db->connect();
$sql="SELECT * FROM users WHERE user_id={$_SESSION['user_id']} LIMIT 1";
$db->query($sql);
$r=$db->rows;
if ($r[0]['user_id']>0){
$_SESSION['user_id']=$r[0]['user_id'];
$_SESSION['user_email']=$r[0]['user_email'];
$_SESSION['user_pass']=$r[0]['user_pass'];
$_SESSION['user_acc']=$r[0]['user_acc'];
$_SESSION['user_accpass']=$r[0]['user_accpass'];
$_SESSION['user_accbalance']=$r[0]['user_accbalance'];
$_SESSION['user_balance']=$r[0]['user_balance'];
$_SESSION['user_dep']=$r[0]['user_dep'];
$_SESSION['user_wit']=$r[0]['user_wit'];
$_SESSION['user_pm']=$r[0]['user_pm'];
$_SESSION['user_status']=$r[0]['user_status'];
$_SESSION['user_usepm']=$r[0]['user_usepm'];
}
$db->disconnect();
}
return $nd;
}
function ba_faq(){
global $cf,$tpl,$htmltitle,$htmldes,$keywords;
$nd='';
$t=$tpl['faq'];
$item=cuttemplate($t, 'item');
$t=str_replace($item,'',$t);
$mtime=(int)@filemtime($cf['cache_dir'].'faq.txt');
if (($cf['time']-$mtime)>$cf['sessiontime']){
$db = new Kdb($cf);
$sql="SELECT faq_id,faq_q,faq_a FROM faq ORDER BY faq_order";
$db->query($sql);
$r=$db->rows;
$db->disconnect();
cf($cf['cache_dir'].'faq.txt',json_encode($r),'w');
} else{
$r=json_decode(file_get_contents($cf['cache_dir'].'faq.txt'),TRUE);
}
$it="";
for ($i=0;$i<count($r);$i++){
$it.=str_replace(array('{id}','{q}','{a}'),array($r[$i]['faq_id'],$r[$i]['faq_q'],$r[$i]['faq_a']),$item);
}
$nd=str_replace('<!--item-->',$it,$t);
return $nd;
}
function ba_dailyhit(){
global $cf;
if (!is_dir($cf['cache_dir'].'dailyhit/')){
mkdir($cf['cache_dir'].'dailyhit/');
chmod($cf['cache_dir'].'dailyhit/', 0777);
}
cf($cf['cache_dir']."dailyhit/".date("Y-m-d",time()+25200).".txt","K","a");
$k=filesize($cf['cache_dir']."dailyhit/".date("Y-m-d",time()+25200).".txt");
if ($k<1){$k=1;}
return $k;
}
function ba_whoonline(){
global $cf;
if (!is_dir($cf['cache_dir'].'whoonline/')){
mkdir($cf['cache_dir'].'whoonline/');
chmod($cf['cache_dir'].'whoonline/', 0777);
}
$ndx='Guest';
if (@$_SESSION['user_id']>0){
$ndx=$_SESSION['user_email'];
}
$spiders = array('Googlebot', 'Yammybot', 'Openbot', 'Yahoo', 'Slurp', 'msnbot', 'bingbot',
'ia_archiver', 'Lycos', 'Scooter', 'AltaVista', 'Teoma', 'Gigabot', 'Googlebot-Mobile',
'Baiduspider','Yandex');
foreach ($spiders as $spider){
if (@eregi($spider, $_SERVER['HTTP_USER_AGENT']))
{
$ndx="Bot: [".$spider."]";
}
}
$browser = ba_getBrowser();
$ndx.="|".curPageURL()."|".$cf['refurl']."|".$cf['user_ip']." (".$browser['name']." ".$browser['version']." - ".$browser['platform'].")";
$ndx.="|".date("H:i:s",$cf['time']);
cf($cf['cache_dir']."whoonline/guest-".session_id().".txt",$ndx,"w");
$ol=glob($cf['cache_dir']."whoonline/*.txt");
$g=array();
$k=0;
$j=0;
for ($i=0;$i<count($ol);$i++){
if (file_exists($ol[$i])){
if (time()-filemtime($ol[$i])>180){
unlink($ol[$i]);
} else{
$k++;
}
}
}
return $k;
}
function ba_getBrowser(){
$u_agent = $_SERVER['HTTP_USER_AGENT'];
$bname = 'Unknown';
$platform = 'Unknown';
$version= "";
//First get the platform?
if (preg_match('/linux/i', $u_agent)) {
$platform = 'linux';
}
elseif (preg_match('/macintosh|mac os x/i', $u_agent)) {
$platform = 'mac';
}
elseif (preg_match('/windows|win32/i', $u_agent)) {
$platform = 'windows';
}
// Next get the name of the useragent yes seperately and for good reason
if(preg_match('/MSIE/i',$u_agent) && !preg_match('/Opera/i',$u_agent))
{
$bname = 'Internet Explorer';
$ub = "MSIE";
}
elseif(preg_match('/Firefox/i',$u_agent))
{
$bname = 'Mozilla Firefox';
$ub = "Firefox";
}
elseif(preg_match('/Chrome/i',$u_agent))
{
$bname = 'Google Chrome';
$ub = "Chrome";
}
elseif(preg_match('/Safari/i',$u_agent))
{
$bname = 'Apple Safari';
$ub = "Safari";
}
elseif(preg_match('/Opera/i',$u_agent))
{
$bname = 'Opera';
$ub = "Opera";
}
elseif(preg_match('/Netscape/i',$u_agent))
{
$bname = 'Netscape';
$ub = "Netscape";
}
// finally get the correct version number
$known = array('Version', $ub, 'other');
$pattern = '#(?<browser>' . join('|', $known) .
')[/ ]+(?<version>[0-9.|a-zA-Z.]*)#';
if (!preg_match_all($pattern, $u_agent, $matches)) {
// we have no matching number just continue
}
// see how many we have
$i = count($matches['browser']);
if ($i != 1) {
//we will have two since we are not using 'other' argument yet
//see if version is before or after the name
if (strripos($u_agent,"Version") < strripos($u_agent,$ub)){
$version= $matches['version'][0];
}
else {
$version= $matches['version'][1];
}
}
else {
$version= $matches['version'][0];
}
// check if we have a number
if ($version==null || $version=="") {$version="?";}
return array(
'userAgent' => $u_agent,
'name' => $bname,
'version' => $version,
'platform' => $platform,
'pattern' => $pattern
);
}
function ba_loguseraction(){
global $cf;
if (!is_dir($cf['cache_dir'].'hit/')){
mkdir($cf['cache_dir'].'hit/');
chmod($cf['cache_dir'].'hit/', 0777);
}
if ($cf['user_ip']=='158.69.197.6'){
return '';
}
$hit='-----------------------
'.$cf['user_ip'].'
URL: '.curPageURL().'
';
if (@$_SESSION['user_id']>0){
$hit.='USER: '.$_SESSION['user_email'].'
';
}
$spiders = array('Googlebot', 'Yammybot', 'Openbot', 'Yahoo', 'Slurp', 'msnbot', 'bingbot',
'ia_archiver', 'Lycos', 'Scooter', 'AltaVista', 'Teoma', 'Gigabot', 'Googlebot-Mobile',
'Baiduspider','Yandex');
foreach ($spiders as $spider){
if (@eregi($spider, $_SERVER['HTTP_USER_AGENT']))
{
$hit.="Bot: [".$spider."]
";
}
}
if (count($_GET)>0){
$hit.='GET:
';
foreach ($_GET as $key => $value){
$hit.=$key.'='.$value.'
';
}
}
if (count($_POST)>0){
$hit.='POST:
';
foreach ($_POST as $key => $value){
$hit.=$key.'='.$value.'
';
}
}
cf($cf['cache_dir']."hit/".date("Y-m-d",time()+25200).".txt","$hit","a");
}
function ba_dice(){
global $cf,$tpl,$htmltitle,$htmldes,$keywords;
if (@$_SESSION['user_id']<1) return _go($cf['siteurl'],0);
$nd='';
$_SESSION['userseed']=_randpass(5);
if (@$_SESSION['totallose']<1) $_SESSION['totallose']=0;
if (@$_SESSION['totalwin']<1) $_SESSION['totalwin']=0;
$inx=array('{userseed}','{totalwin}','{totallose}');
$out=array(@$_SESSION['userseed'],$_SESSION['totalwin'],$_SESSION['totallose']);
$nd=str_replace($inx,$out,$tpl['dice']);
return $nd;
}
function ba_(){
global $cf,$tpl,$htmltitle,$htmldes,$keywords;
$nd='';
return $nd;
}
?>| .. | |||||
| .DS_Store | |||||
| calendar.class-en.php | |||||
| calendar.class.php | |||||
| class.cropcanvas.php | |||||
| common.php | |||||
| func.php | |||||
| functions.api.php | |||||
| functions.php | |||||
| index.html | |||||
| thumbnail.class.php |