204 lines
8.0 KiB
PHP
204 lines
8.0 KiB
PHP
<?php
|
|
session_start();
|
|
include("servers.php");
|
|
include("common.php");
|
|
include("crosserver.php");
|
|
include("config.php");
|
|
|
|
$eml_err = NULL;
|
|
|
|
if(isset($_POST["RESENDEMAIL"], $_POST["USER"], $_POST["PASS"])){
|
|
$username = $_POST["USER"];
|
|
$password = $_POST["PASS"];
|
|
if(!user_exists($username))
|
|
goto improper_auth;
|
|
|
|
$id = get_userid($username);
|
|
//TODO: $eml_err = "Email account has been banned.";
|
|
if(check_password($id, $password)){
|
|
if(!preg_match('/^[A-Za-z0-9_.+-]*\@[A-Za-z0-9_.+-]*\.[A-Za-z0-9_.+-]{1,4}$/',$_POST["RESENDEMAIL"])){
|
|
$eml_err = "Email does not appear to be a valid format.";
|
|
|
|
goto email_error;
|
|
}
|
|
send_activation_email($_POST["RESENDEMAIL"], $username, $password);
|
|
include("web/header.php");
|
|
echo("<TABLE cellpadding=10><TR><TD><B>Your activation email has been re-sent to ".htmlspecialchars($_POST["RESENDEMAIL"])."</B><BR>Look for the email from ".htmlspecialchars($from_email)." with your activation code!<BR>You cannot login until you CLICK the link with your code in the email.<BR> Be sure to check your Spam email box in case it goes there.<BR><BR><A HREF=/>Go Back to Main Page</A><BR><BR></TD></TR></TABLE>");
|
|
include("web/footer.php");
|
|
exit();
|
|
}
|
|
|
|
improper_auth:
|
|
echo("Improper Account info.");
|
|
exit();
|
|
}
|
|
if(isset($_POST["USER"], $_POST["PASS"]))
|
|
{
|
|
$username = $_POST["USER"];
|
|
$password = $_POST["PASS"];
|
|
if(!user_exists($username))
|
|
goto auth_failed;
|
|
$id = get_userid($username);
|
|
if(check_password($id, $password))
|
|
{
|
|
|
|
if($email_activation === true) {
|
|
if(!get_email_activation_status($id)){
|
|
email_error:
|
|
include("web/header.php");
|
|
if($eml_err !== NULL){
|
|
echo("<FONT COLOR=660000><B>Errors in Sending Activation Email:</B><BR>".htmlspecialchars($eml_err, ENT_QUOTES)."<BR></FONT><HR>");
|
|
}
|
|
echo('<B>You still need to click the Activation link that was emailed to you at '.htmlspecialchars(get_email($id), ENT_QUOTES).'.</B><BR>Please check your spam mailbox just in case. The email will be from '.htmlspecialchars($from_email, ENT_QUOTES).'.<BR>If you would like to resend the authentication email somewhere else: <FORM METHOD=POST>EMAIL:<INPUT TYPE=text size=30 NAME=RESENDEMAIL><INPUT TYPE=HIDDEN NAME=USER VALUE='.htmlspecialchars(get_username($id), ENT_QUOTES).'><INPUT TYPE=HIDDEN NAME=PASS VALUE='.htmlspecialchars($password, ENT_QUOTES).' ><INPUT TYPE=SUBMIT VALUE=RESEND>');
|
|
include('web/footer.php');
|
|
exit();
|
|
}
|
|
}
|
|
$_SESSION['LOGGED_IN'] = "YES";
|
|
$_SESSION['PLAYER_ID'] = $id;
|
|
$_SESSION["EMAIL"] = get_email($id);
|
|
$_SESSION['USERNAME'] = get_username($id);
|
|
$_SESSION['SEX'] = get_sex($id);
|
|
$_SESSION['ADMIN'] = get_admin($id) ? "YES" : "NO";
|
|
$_SESSION['MOD'] = get_mod($id) ? "YES" : "NO";
|
|
$_SESSION['PASSWORD_HASH'] = get_password_hash($id);
|
|
$_SESSION['SALT'] = get_salt($id);
|
|
if($_SESSION['ADMIN'] == 'YES')
|
|
$_SESSION['MOD'] = 'YES';
|
|
}
|
|
else
|
|
{
|
|
auth_failed:
|
|
include("web/header.php");
|
|
echo('<TABLE CELLPADDING=10 WIDTH=100%><TR><TD><HR><B>Username or Password is not valid. Please try again. <BR>Note: Upon too many attempts the account will be temporarily blocked from your IP.</B><BR><BR>If you have not logged on yet, make sure you have clicked the activation link in the email that was sent to you.<BR><BR>click <A HREF=/web/forgotpass.php>HERE</A> to Have your password emailed to you.<HR></TD></TR></TABLE>');
|
|
include('web/footer.php');
|
|
exit();
|
|
}
|
|
}
|
|
|
|
|
|
if(!is_logged_in())
|
|
{
|
|
include("web/header.php");
|
|
echo("
|
|
<B>Username or Password is not valid or your account has timed out. Please Log in again.</B><BR><BR></TD></TR></TABLE>");
|
|
$_SESSION['LOGGED_IN'] = "NO";
|
|
include("web/footer.php");
|
|
exit();
|
|
}
|
|
|
|
|
|
if(isset($_GET['CONNECT']))
|
|
{
|
|
$server_id = $_GET['CONNECT'];
|
|
$server = getServerById($server_id);
|
|
|
|
if($server !== null)
|
|
{
|
|
$playerId = $_SESSION['PLAYER_ID'];
|
|
|
|
$hmac = GenHmacMessage((string)$playerId, "CrossSiteLogin");
|
|
$redirectUrl = $server['site'];
|
|
|
|
if(!endsWith($redirectUrl, '/'))
|
|
$redirectUrl .= '/';
|
|
|
|
$redirectUrl .= 'account.php?SLID='.(string)$playerId.'&C='.base64_url_encode(hex2bin($hmac));
|
|
set_LastOn($playerId, $server_id);
|
|
header("Location: ".$redirectUrl);
|
|
exit();
|
|
}
|
|
}
|
|
include("web/header.php");
|
|
|
|
$player_id = $_SESSION['PLAYER_ID'];
|
|
$lastOnServer = get_LastOn($player_id);
|
|
$moveToFront = getServerById($lastOnServer);
|
|
|
|
if($moveToFront !== null){
|
|
for($i = 0; $i < count($server_list); $i++){
|
|
if($server_list[$i]['id'] == $lastOnServer)
|
|
unset($server_list[$i]);
|
|
}
|
|
array_unshift($server_list, $moveToFront);
|
|
}
|
|
|
|
if(!userExistAny($player_id))
|
|
echo('<BR><B>We have a <A HREF=//'.$_SERVER['HTTP_HOST'].'/beginnerguide/>Beginner Guide</A> online to help new players learn how to play.</B><BR>');
|
|
?><BR><B><FONT SIZE=+1>Horse Isle Server List</FONT></B><BR>Each server is completely independent and has identical game content. Money/horses/subscriptions are all tied to a particular server.
|
|
Normally you will only play on one server. <B>Playing on any server uses up playtime on all servers</B>, so you do not gain any free time. Reasons for playing on more than one include joining a friend, or in case your normal server is down.
|
|
Multiple servers are required since there is a max capacity of around 150 players online per server.<BR><B>Please note, a profile on any individual server will be permanently deleted after 183 days (6 months) of not logging into the game on that specific server or your subscription expiring, whichever is later.</b><TABLE CELLPADDING=5 CELLSPACING=0 BORDER=0 BGCOLOR=FFFFFF><TR><TD COLSPAN=5><?php # <BR><FONT COLOR=550000><B>You have 8 rule violation points against your account. [ <A HREF=/web/rulesbroken.php>REVIEW VIOLATIONS</A> ]</B></FONT><BR> ?></TD></TR><TR><TD COLSPAN=2><B>GAME SERVERS</B> (all identical please only join 1 or 2)</TD><TD><B>PROFILE</B> (not current)</TD><TD><B>ONLINE</B></TD><TD><B>LOGIN</B></TD></TR></TD></TR><TR><TD COLSPAN=5><HR></TD></TR>
|
|
<?php
|
|
|
|
|
|
for($i = 0; $i < count($server_list); $i++)
|
|
{
|
|
$server = $server_list[$i];
|
|
$icon = $server['icon'];
|
|
$url = $server['site'];
|
|
$desc = $server['desc'];
|
|
$id = $server['id'];
|
|
$database = $server['database'];
|
|
|
|
$domain = parse_url($url, PHP_URL_HOST);
|
|
$join = '';
|
|
$num_on = getNoSubbedPlayersOnlineInServer($database);
|
|
|
|
$pExist = userid_exists($database, $player_id);
|
|
if(!$pExist)
|
|
$join = '<A HREF=joinserver.php?SERVER='.$id.'>[JOIN]</A>';
|
|
else
|
|
$join = '<A HREF=?CONNECT='.$id.'>[LOG IN]</A>';
|
|
|
|
|
|
echo('<TR><TD><IMG SRC=/web/servericons/'.$icon.'></TD><TD><B>');
|
|
if($lastOnServer === $id)
|
|
echo('<FONT COLOR=GREEN>You were on this server last time:</FONT><BR>');
|
|
echo('SERVER: '.strtoupper($domain).'</B><BR>'.$desc.'</BR></TD>');
|
|
if(!$pExist)
|
|
{
|
|
echo('<TD>no existing profile</TD>');
|
|
}
|
|
else
|
|
{
|
|
$newUser = !getUserExistInExt($database, $player_id);
|
|
|
|
if(!$newUser){
|
|
$loginDate = getUserLoginDate($database, $player_id);
|
|
$questPoints = getUserQuestPoints($database, $player_id);
|
|
$totalLogins = getUserTotalLogins($database, $player_id);
|
|
$subbed = getUserSubbed($database, $player_id);
|
|
}
|
|
else
|
|
{
|
|
$loginDate = time();
|
|
$questPoints = 0;
|
|
$totalLogins = 0;
|
|
$subbed = false;
|
|
}
|
|
|
|
echo('<TD>');
|
|
if($subbed)
|
|
echo('<FONT COLOR=GREEN><B>ACTIVE SUBSCRIPTION</B></FONT>');
|
|
else
|
|
echo('<B>Not Subscribed</B>');
|
|
|
|
$lastOn = 0.00;
|
|
$current_time = time();
|
|
$difference = $current_time - $loginDate;
|
|
$lastOn = $difference/86400;
|
|
|
|
|
|
echo('<BR>Quest Points: '.$questPoints.' pts<BR>');
|
|
echo('Times Online: '.$totalLogins.'<BR>');
|
|
echo('Last On: '.number_format((float)$lastOn, 2, '.', '').' days ago<BR>');
|
|
echo('</TD>');
|
|
}
|
|
echo('<TD><B>'.$num_on.'<BR>players<BR>online<BR>now</B></TD><TD><B>'.$join.'</B></TD></TR><TR><TD COLSPAN=5><HR></TD></TR>');
|
|
}
|
|
|
|
?>
|
|
</TABLE><BR>Account Settings: <A HREF=/web/accountchange.php>CHANGE MY PASSWORD</A><BR>Refer other players and earn Game Credit!: <A HREF=/web/referral.php>REFERRAL PROGRAM</A><BR>
|
|
<?php
|
|
include("web/footer.php");
|
|
?>
|