EVOLUTION-NINJA

Edit File: user.php

<?php class User extends Controller 
{
	var $title_values=Array('login'=>'Login to proceed','edit'=>'Profile Edit');
	var $login_view='user/login';
	var $login_success_view='overview';
	var $edit_view='user/edit';
 	var $cnt=0;
	function User()
	{
		parent::Controller();
		$this->load->model('prefered_host_model');
		$this->load->model('user_model','',TRUE);
		$this->load->helper(array('text','form','date','url','session','common','error','admin','db','cookie','crypto', 'simplexml_load_url_curl'));
		$this->load->library(array('user_entry','validation','form_validation'));
		
	}
	
	
	
	function index()
	{
		 $this->login();
/*		 $docRoot = getenv("DOCUMENT_ROOT").'/ppvdemon/';
			include($docRoot."install/crypto.php");
*/
	}
	
	/**
	 * prefered_host
	 * 
	 * This method performs the final steps of a prefered host install
	 * This can only be triggered from within the long screen.
	 * 
	 */
	function prefered_host() {

// If there is a licence they need to login
		if ($this->prefered_host_model->check_for_licence()) {
			// if not send to the regular login.
			redirect('user/login');
		}
		
		// Make sure there is user data in the DB
		if ($this->prefered_host_model->check_user()===FALSE) {
			// If they got here it means there was no key AND no user data
			// They need to perform a full install.
    		header('Location: '.$installdir);
		}

$this->form_validation->set_rules('receipt_id', 'Receipt', 'required');
			
		if ($this->form_validation->run() == FALSE)
		{
			// show form.
			$this->load->view('user/prefered_host');
		}
		else
		{
			if($this->prefered_host_model->register($this->input->post('receipt_id'))) {
				// if we succeded...
				redirect('user/login');				
			} else {
				// IF it failed...
				$data['message'] = 'There is a problem with your receipt, please check your email for your receipt number.  If you believe you are receiving this message in error, <a target="_blank" href="'.LIC_SVR_URL.'resetlic.php">click here</a> to reset your license.';
				$this->load->view('user/prefered_host', $data);
			}
		
		}
	}
	
	function login()
	{
		// Make sure there are users installed.
		if ($this->prefered_host_model->check_user()===FALSE) {
			log_message('debug', 'Ther are no users, install needed, redirecting to install.');
			$installdir = dirname($_SERVER['SCRIPT_NAME']).'install/';
    		header('Location: '.$installdir);
		}
		
		// See if this is a prefered host install before any other actions happen.
		if ($this->prefered_host_model->check_for_licence()===FALSE) {
			log_message('debug', 'The usere needs to enter receipt number redirecting to prefered host setup.');
			redirect('user/prefered_host');
		}
		
		$data["header_tags"]="";
		$data["error"]="";
		$data["title"]="";
		$admin_type="";
		if($this->user_entry->is_logged_in())
		{
			$data["title"]="Welcome";
			$this->check_for_updates('ppv_accounts');
			// $this->load->view($this->login_success_view,$data);
			return;
		}
		$this->validation->set_rules($this->get_rules());
		$this->validation->set_fields($this->get_fields(1));
		$this->validation->set_error_delimiters('<div id="error" name="error"><font color=red >', '</font></div>');
		if ($this->validation->run() == FALSE)
		{
			$data["title"]=$this->title_values['login'];
			$this->load->view($this->login_view,$data);
		}
		else
		{
			$user_name=$this->input->post('user_name',true);
			$user_pass=sha1($this->input->post('user_pass',true));
			if ($row=$this->user_model->check($user_name,$user_pass))
			{
				$userid=$row->user_id;
				$license_key=$row->license_key;
				$license_date=$row->license_date;
				#$ent_license_key=$row->ent_license_key;
				#$ent_license_date=$row->ent_license_date;
				$url=base_url();
					
				$license_status=$row->license_status;
					
				/*$c = curl_init('http://galtech.org/ppvdemon/db.php?licence_key='.$license_key.'&field=status');
				 curl_setopt($c, CURLOPT_RETURNTRANSFER, 1);
				 $status = curl_exec($c);
				 curl_close($c);*/
			 // $licence_key = $_GET['licence_key'];
			 $apiURI = LIC_API_URL."?operation=db_query&licence_key=".$license_key ;
			 $xml = simplexml_load_url_curl($apiURI);
			 $cd[0] = (string)$xml->entries->entry->username;
			 $cd[1] = (string)$xml->entries->entry->password;
			 $cd[2] = (string)$xml->entries->entry->eMail;
			 $cd[3] = (string)$xml->entries->entry->security_question_1;
			 $cd[4] = (string)$xml->entries->entry->security_question_2;
			 $cd[5] = (string)$xml->entries->entry->answer_1;
			 $cd[6] = (string)$xml->entries->entry->answer_2;
			 $cd[7] = (string)$xml->entries->entry->status;
			 $cd[8] = (string)$xml->entries->entry->domain;
			 $cd[9] = (string)$xml->entries->entry->licence_key;
			 if($cd[7]!='1')
			 {
			 	$this->session->set_flashdata('cnt_error', 'Licence Disabled');
			 	redirect('user');
			 	return;
			 }
			 	
			 if($license_status=='renew'){
			 		
			 		
			 		
			 	/*			$c = curl_init('http://galtech.org/ppvdemon/db.php?licence_key='.$license_key.'&field=domain');
			 	 curl_setopt($c, CURLOPT_RETURNTRANSFER, 1);
			 	 $domain = curl_exec($c);
			 	 curl_close($c);
			 	 */			$ck=0;
			 	if($cd[7]=='1')
			 	{
			 		if($cd[8]==$url){

$table['license_status'] = 'active';
			 			$this->db->where('user_id',$row->user_id);
			 			$this->db->update('pd_users',$table);

}
			 	}
			 	else
			 	{
			 			
			 		if(!isset($_COOKIE['counter'])){
			 				
			 			setcookie("counter", 1);}
			 			else{
			 					
			 				$ck=$_COOKIE['counter'];
			 				$ck++;
			 				setcookie("counter", $ck);
			 			}
			 				
			 			if(isset($_COOKIE['counter'])){
			 				if($_COOKIE['counter']!=3)
			 				{
			 					redirect('user');
			 					return;
			 						
			 				}
			 					
			 				if($_COOKIE['counter']==3)
			 				{
			 					//echo 1;
			 					setcookie("counter", 1);
			 					$this->session->set_flashdata('cnt_error','Invalid License');
			 					redirect('user');
			 					return;
			 						
			 				}
			 			}
			 	}
			 		
			 }
			 	
			 $userid=$row->user_id;

$qury1="select * from pd_users where user_id='$userid'";
				$res=mysql_query($qury1);
				$re1=mysql_fetch_array($res);
				$log_count=$re1['log_count'];
				$log_count=$log_count+1;
				$chk=$log_count%5;
				//echo $chk;
				if($chk==0)
				{
					$license_status='renew';
					$query2="update pd_users set log_count='$log_count', license_status='renew' where user_id='$userid'";
					mysql_query($query2);
				}

$query3="update pd_users set log_count='$log_count' where user_id='$userid'";
				mysql_query($query3);
					
					
				if($license_key){
						
					$license_date1 = strtotime(date("Y-m-d", strtotime($license_date)) . " +1 month");
					$one_month = date('d-m-Y',$license_date1);
						
					$license_date2 = strtotime(date("Y-m-d", strtotime($one_month)) . " +1 month");
					$two_month = date('d-m-Y',$license_date2);
						
						
					$user_timezone1=$row->user_timezone;
					$new_time_stamp7= GetTime($user_timezone1);
					$new_time_stamp7= strtotime($new_time_stamp7);
					$today1 = date('d-m-Y',$new_time_stamp7);
						
					if(strtotime($today1) < strtotime($one_month)){
							
						/*$c = curl_init('http://galtech.org/ppvdemon/db.php?licence_key='.$ent_license_key.'&domain='.$url);
						 curl_setopt($c, CURLOPT_RETURNTRANSFER, 1);
						 $row1 = curl_exec($c);
						 curl_close($c);*/

if(!$cd[8])
						{
							$this->session->set_flashdata('ent_error','Invalid Enterprise License Key');
							redirect('user');
							return;
						}

}
					else if(strtotime($today1) > strtotime($one_month) && strtotime($today1) < strtotime($two_month)){
							
							
						if($row->thrice_a_week == ''){
							$license_date3 = strtotime(date("Y-m-d", strtotime($today1)) . " +3 days");
							$thrice_a_week = date('d-m-Y',$license_date3);

$table['thrice_a_week'] = $thrice_a_week;
							$this->db->where('user_id',$row->user_id);
							$this->db->update('pd_users',$table);
						}
						else
						$thrice_a_week = $row->thrice_a_week;
							
						$user_timezone=$row->user_timezone;
						$new_time_stamp1= GetTime($user_timezone);
						$new_time_stamp= strtotime($new_time_stamp1);
						$today = date('d-m-Y',$new_time_stamp);
							
						if(strtotime($thrice_a_week) == strtotime($today)){
								
							/*$c = curl_init('http://galtech.org/ppvdemon/db.php?licence_key='.$ent_license_key.'&domain='.$url);
							 curl_setopt($c, CURLOPT_RETURNTRANSFER, 1);
							 $row1 = curl_exec($c);
							 curl_close($c);
							 */

if(!$cd[8])
							{
								$this->session->set_flashdata('ent_error','Invalid Enterprise License Key');
								redirect('user');
								return;
							}

$license_date4 = strtotime(date("Y-m-d", strtotime($thrice_a_week)) . " +3 days");
							$table['thrice_a_week'] = date('d-m-Y',$license_date4);
							$this->db->where('user_id',$row->user_id);
							$this->db->update('pd_users',$table);
								
						}
							
							
							
							
					}
					else if(strtotime($today1) > strtotime($two_month)){

if($row->weekly == ''){
							$license_date8 = strtotime(date("Y-m-d", strtotime($today1)) . " +7 days");
							$weekly = date('d-m-Y',$license_date8);

$table['weekly'] = $weekly;
							$this->db->where('user_id',$row->user_id);
							$this->db->update('pd_users',$table);
						}
						else
						$weekly = $row->weekly;
							
						$user_timezone=$row->user_timezone;
						$new_time_stamp1= GetTime($user_timezone);
						$new_time_stamp= strtotime($new_time_stamp1);
						$today = date('d-m-Y',$new_time_stamp);
							
						if(strtotime($weekly) == strtotime($today)){
								
							/*$c = curl_init('http://galtech.org/ppvdemon/db.php?licence_key='.$ent_license_key.'&domain='.$url);
							 curl_setopt($c, CURLOPT_RETURNTRANSFER, 1);
							 $row1 = curl_exec($c);
							 curl_close($c);*/

if(!$cd[8])
							{
								$this->session->set_flashdata('ent_error','Invalid Enterprise License Key');
								redirect('user');
								return;
							}

$license_date9 = strtotime(date("Y-m-d", strtotime($weekly)) . " +7 days");
							$table['weekly'] = date('d-m-Y',$license_date9);
							$this->db->where('user_id',$row->user_id);
							$this->db->update('pd_users',$table);
								
						}

}
				}
				$this->user_entry->set_user($row->user_id);
				$_SESSION['user_id']=$row->user_id;

$request_url=$this->input->post('REQUEST_URL');
				if($request_url!=''){
					$this->check_for_updates($request_url);
					return;
				}
				$data["title"]="Welcome";
                                $this->check_for_updates('ppv_accounts');
				return;

}
			else
			{

$data["title"]="Login Failed";
				$data["error"]="Invalid user email  or password";
				$this->load->view($this->login_view,$data);
				return;
			}
		}
	}
        function check_for_updates($or_redirect_to) {

$user_id = $_SESSION['user_id'];
            $result = mysql_query('SELECT license_key, user_pass FROM pd_users WHERE user_id = '.$user_id);
            $row = mysql_fetch_assoc($result);
            $version= PPVDEMON_VERSION;
            if ($this->session->userdata('latestversion')) {
                redirect($or_redirect_to);
                return;
            }

$params = array(
                'auth1' => sha1($row['license_key'] . AUTH1_SALT),
                'auth2' => sha1($row['user_pass'] . AUTH2_SALT),
                'domain' => base_url(),
                'currentversion' => $version,
            );
            $updateurl = UPDATES_URL . '?' . http_build_query($params);

$res = simplexml_load_url_curl($updateurl);
            if (count($res->updates)) {
                $latestversion = $res->updates->update[count($res->updates->update)-1]['version'];
                $this->session->set_userdata('latestversion', $latestversion);
                $this->session->sess_write();
                redirect(base_url() . '/updates');
            } else {
                $this->session->set_userdata('latestversion', $version);
                $this->session->sess_write();
                redirect($or_redirect_to);
            }
        }