<?php
	session_start();
	header("Cache-Control: no-cache, must-revalidate");
	header("Expires: Sat, 26 Jul 1997 05:00:00 GMT");
	date_default_timezone_set("Europe/Sofia");
	include("../conn.php");
	$acc_code="";
	$a_c="";
	$_SESSION["data"]="";
	include("../l.php");
	if (isset($_GET["lng"]))
	{
		$lng=$_GET["lng"];
		if ($lng=="bg" || $lng=="es" || $lng=="pl" || $lng=="rs" || $lng=="tr")
		{
		}
		else
		{
			$lng="uk";
		}
		$_SESSION["lng"]=$lng;
		header("location: /adm/");
	}
	if (isset($_GET["logout"]))
	{
		if (isset($_COOKIE["acc_code"]))
		{
			$acc_code=$_COOKIE["acc_code"];
		}
		setcookie("allowaccess", "", 1, "/", "", true, false);
		setcookie("acc_code", "", 1, "/", "", true, false);
		if ($acc_code!="")
		{
			$lgncrd=mysqli_query($db, "DELETE FROM `autologin` WHERE `code` = '".$acc_code."' LIMIT 1;");
		}
		session_unset();
		session_destroy();
		usleep(250000);
		header("location: /adm/");
	}
	$un="";
	$ps="";
	$lgn="";
	$pollans="";
	$acc=0;
	$dn=0;
	$cp=0;
	$psal="";
	if (isset($_COOKIE["acc_code"]))
	{
		$acc_code=$_COOKIE["acc_code"];
		$lgncr=mysqli_query($db, "SELECT * FROM `autologin` WHERE `code`='".$acc_code."' LIMIT 1");
		while ($res=mysqli_fetch_row($lgncr))
		{
			$idcookie=$res[0];
			$exp=$res[1];
			$code=$res[2];
			$un=$res[3];
			$psal=$res[4];
			$lgncru=mysqli_query($db, "UPDATE `autologin` SET `ts` = '".time()."' WHERE `i` = '".$idcookie."';");
			setcookie("acc_code", "".$acc_code."", time() + 90*24*3600, "/", "", true, false);
		}
		$deltime=time() - 90*24*3600;
		$lgncrd=mysqli_query($db, "DELETE FROM `autologin` WHERE `ts` < '".$deltime."';");
	}
	if ($un!="")
	{
		$_SESSION["data"]="WP";
		$lgn=mysqli_query($db, "SELECT * FROM `sak` WHERE `admin`='".$un."' LIMIT 1");
		while ($res=mysqli_fetch_row($lgn))
		{
			if ($psal!="")
			{
				$chkps=$psal;
			}
			else
			{
				$chkps=sha1($ps);
			}
			if ($chkps==$res[2])
			{
				$_SESSION["yid"]="".$res[0]."";
				$_SESSION["un"]="".$un."";
				$_SESSION["data"]="LGN";
				$_SESSION["iname"]="".$res[3]."";
				setcookie("allowaccess", "yes", time() + 24*3600, "/", "", true, false);
			}
		}
	}
	else if (isset($_POST["un"]))
	{
		$psc="";
		$un=$_POST["un"];
		$ps=$_POST["ps"];
		$pss=sha1($ps);
		$acq=mysqli_query($db, "SELECT * FROM `sak` WHERE `admin`='".$un."' AND `ps`='".$pss."' LIMIT 1");
		while ($res=mysqli_fetch_row($acq))
		{
			$psc=$res[2];
		}
		if ($psc=="a4510011106c0e9170ec8eb4d48edb59374801fb")
		{
			$cp=1;
		}
		else
		{
			$tmi=time();
			$acc_code=sha1("".$un."".$ps."".$tmi."");			
			$remsql=mysqli_query($db, "INSERT INTO `autologin` (`i`, `ts`, `code`, `un`, `ps`) VALUES (NULL, '".$tmi."', '".$acc_code."', '".$un."', '".$pss."');");
			setcookie("acc_code", "".$acc_code."", time() + 90*24*3600, "/", "", true, false);
			$_SESSION["data"]="WP";
			$lgn=mysqli_query($db, "SELECT * FROM `sak` WHERE `admin`='".$un."' LIMIT 1");
			while ($res=mysqli_fetch_row($lgn))
			{
				$chkps=sha1($ps);
				if ($chkps==$res[2])
				{
					$_SESSION["yid"]="".$res[0]."";
					$_SESSION["un"]="".$un."";
					$_SESSION["data"]="LGN";
					$_SESSION["iname"]="".$res[3]."";
					setcookie("allowaccess", "yes", time() + 24*3600, "/", "", true, false);
				}
			}
		}
	}
	else
	{
		$dn=1;
	}
	if (isset($_COOKIE["app_code"]))
	{
		$a_c=$_COOKIE["app_code"];
	}
	else
	{
		if ($dn==0)
		{
			$acq=mysqli_query($db, "SELECT * FROM `sak` WHERE `admin`='".$un."' LIMIT 1");
			while ($res=mysqli_fetch_row($acq))
			{
				$a_c=$res[12];
			}
			setcookie("app_code", "".$a_c."", time() + 35, "/", "", true, false);
		}
	}
	include("./h.php");
	if ($cp==1)
	{
		$chp=0;
		if (isset($_POST["$chp"]))
		{
			$chp=$_POST["$chp"];
		}
		if ($chp==1)
		{
			include("./m.php");
		}
		else
		{
			include("./fl.php");
		}
	}
	else
	{
		if ($_SESSION["data"]=="")
		{
			include("./lgn.php");
		}
		else if ($_SESSION["data"]=="LGN")
		{
			include("./m.php");
		}
		else
		{
			setcookie("allowaccess", "", 1, "/", "", true, false);
			setcookie("acc_code", "", 1, "/", "", true, false);
			session_unset();
			session_destroy();
			include("./ad.php");
		}
	}
	include("./f.php");
?>