Файл: gamele.ru/core2.php
Строк: 71
<?php
session_start();
include($_SERVER["DOCUMENT_ROOT"]."/includes/config.inc.php");
include( DROOT . "/includes/functions.php");
$pers = GetUser();
if(!preg_match("/{$HTTP_HOST}/",getenv('HTTP_REFERER')) or $pers['pcid']!=md5($pers['id'].$pers['pass'].$pers['Autch_time'].getIP().$_SERVER['HTTP_USER_AGENT'].$pers['block'])){
if($pers['block']!=''){
exit("<script>top.location = '/index.php?act=logout';</script>");
}else{
exit("<script>top.frames['main_top'].location = '/main.php?useaction=error-page';</script>");
}
}
/* Go To Old Core */
if($_GET['go'] == 'inf'){
$_SESSION['secur'] = $_SESSION['vcodes'];
header("Location: /main.php?get=0&vcode=".$_GET['vcode']);
}
if($_GET['go'] == 'inv'){
$_SESSION['secur'] = $_SESSION['vcodes'];
header("Location: /main.php?get=1&vcode=".$_GET['vcode']);
}
/* Go To Old Core */
if(isset($_POST['post_id']) and in_array($_POST['vcode'],$_SESSION['vcodes'])){include( DROOT . "/includes/post_id.php");}
if(isset($_GET['get_id']) and in_array($_GET['vcode'],$_SESSION['vcodes'])){include( DROOT . "/includes/get_id.php");}
unset($_SESSION['vcodes']);
if(isset($_GET['useaction'])){
switch($_GET['useaction']){
case'addon-action':
exit(include("includes/addons/addon-action.php"));
break;
case'clan-action':
if($pers['clan_id']!='none'){
exit(include("includes/addons/clan-action.php"));
}
break;
case'admin-action':
if(accesses($pers['id'],'uid')){
exit(include("includes/addons/admin-action.php"));
}
break;
}
}
switch($pers['useaction']){
case'0':
header("Location: /main.php");
break;
case'1':
header("Location: /main.php");
break;
case'3':
$location = mysql_fetch_array(mysql_query("SELECT * FROM `locations` WHERE `id`='".$pers['loc']."'"));
include( DROOT . "/includes/locations/".$location['folder']."/".$location['inc']);
break;
}
?>