<?php
if ( !isset( $_SESSION ) )
{
session_start( );
}
require_once( "../includes/config.php" );
if ( isset( $_POST['username'], $_POST['password'] ) )
{
$Username = $_POST['username'];
$Password = md5( md5( md5( $_POST['password'] ) ) );
$Query = sprintf( "SELECT * FROM ".$table_prefix.$parsiphp_users." WHERE user_username = '%s' AND user_password = '%s' AND user_vif = '1' ", get_magic_quotes_gpc( ) ? $Username : addslashes( $Username ), get_magic_quotes_gpc( ) ? $Password : addslashes( $Password ) );
$Query_User = mysql_query( $Query, $conn_parsiphp );
$Found = mysql_num_rows( $Query_User );
if ( $Found )
{
$GLOBALS['_SESSION']['MM_Username'] = $Username;
$GLOBALS['_SESSION']['MM_UserGroup'] = mysql_result( $Query_User, 0, "user_access_level" );
$GLOBALS['_SESSION']['MM_UserAlias'] = mysql_result( $Query_User, 0, "user_alias" );
$GLOBALS['_SESSION']['MM_UserP'] = mysql_result( $Query_User, 0, "user_password" );
if ( isset( $_POST['saveforever'] ) && $_POST['saveforever'] == "Yes" )
{
setcookie( "MM_Username", $_SESSION['MM_Username'], time( ) + 59999940, "/" );
setcookie( "MM_UserGroup", $_SESSION['MM_UserGroup'], time( ) + 59999940, "/" );
setcookie( "MM_UserAlias", $_SESSION['MM_UserAlias'], time( ) + 59999940, "/" );
setcookie( "MM_UserP", $_SESSION['MM_UserP'], time( ) + 59999940, "/" );
}
$USQL = sprintf( "UPDATE ".$table_prefix.$parsiphp_settings." SET setting_logintry = '0' " );
if ( !( $result = mysql_query( $USQL, $conn_parsiphp ) ) )
{
exit( mysql_error( ) );
}
echo "<script>document.location=\"Maneger/index.php\";</script>";
require_once( "Maneger/Class.php" );
}
else
{
$USQL = sprintf( "UPDATE ".$table_prefix.$parsiphp_settings." SET setting_logintry=setting_logintry+1 " );
if ( !( $result = mysql_query( $USQL, $conn_parsiphp ) ) )
{
exit( mysql_error( ) );
}
$SQL = sprintf( "SELECT * FROM ".$table_prefix.$parsiphp_settings."" );
if ( !( $Set = mysql_query( $SQL, $conn_parsiphp ) ) )
{
exit( mysql_error( ) );
}
$Set = mysql_fetch_assoc( $Set );
require_once( "Maneger/Class.php" );
if ( $Set['setting_sendlogintry'] == "1" && $Set['setting_logintrynum'] <= $Set['setting_logintry'] )
{
$Body = "<div align='center'><table width='80%' cellpadding='5' cellspacing='0' style='font-family:Tahoma;font-size:11px;line-height:150%;border:1px solid #4E96C6;color:#336699' dir='rtl'><tr><td style='padding:3px' bgcolor='#C1E6FF' align='center'><b>پيام از بخش امنيت سيستم مديريت سايت</b></td></tr><tr><td>با سلام و عرض ادب و احترام<br><br>به استحضار مي رساند كه فردي با شناسه سيستم ".getenv( "REMOTE_ADDR" )." به طور غير مجاز قصد ورود به سيستم را داشت كه اين ايميل جهت اطلاع شما ارسال شد .</td></tr><tr><td style='padding:3px' bgcolor='#C1E6FF' align='center' dir='rtl'><b>".$CopyRight."</b></td></tr></table></div>";
$Headers = "From: Sasan Nobakht <[email protected]>\r\nReply-To: ".$Set['setting_adminmail']."\r\nEmail : ".$Row['setting_adminmail']."\r\nTo : ".$Row['setting_adminmail']."\r\nContent-Type: text/html; charset=UTF-8";
mail( $Set['setting_adminmail'], "Attempt Login By ".getenv( "REMOTE_ADDR" )."", $Body, $Headers );
$USQL = sprintf( "UPDATE ".$table_prefix.$parsiphp_settings." SET setting_logintry = '0' " );
if ( !( $result = mysql_query( $USQL, $conn_parsiphp ) ) )
{
exit( mysql_error( ) );
}
}
echo "<script>document.location=\"index.php?ReTry=true\";</script>";
}
}
else
{
require_once( "Maneger/Class.php" );
}
echo "<html>\r\n<head>\r\n<meta http-equiv=\"Content-Language\" content=\"fa\">\r\n<meta http-equiv=\"Designer\" content=\"Sasan Nobakht\">\r\n<meta http-equiv=\"Web\" content=\"http://www.parsiphp.com\">\r\n<meta http-equiv=\"Content-Type\" content=\"text/html;charset=utf-8\">\r\n<link rel=\"stylesheet\" type=\"text/css\" href=\"../scripts&styles/style.css\">\r\n<script language=javascript src=\"../scripts&styles/Farsi.js\" type=text/javascript></script>\r\n<script language=javascript src=\"../scripts&styles/Resize.js\" type=text/javascript></script>\r\n<script language=javascript src=\"../scripts&styles/Functions.js\" type=text/javascript></script>\r\n<script language=javascript src=\"../scripts&styles/myjava.js\" type=text/javascript></script>\r\n<title>Parsi Php Admin</title>\r\n</head>\r\n\r\n<body onload=\"MDF02(1)\" style=\"margin-top:50\">";
$Fopen = @fopen( "http://www.parsiphp.com/messeges/AD_4.php", "r" );
if ( $Fopen )
{
@include( "http://www.parsiphp.com/messeges/AD_4.php" );
}
echo "\r\n<table border=\"0\" width=\"90%\" cellspacing=\"0\" cellpadding=\"0\" dir=\"rtl\" height=\"95%\" align=\"center\"><tr><td width=\"10\" height=\"21\" valign=\"top\" ><img border=\"0\" src=\"Maneger/images/r_t.gif\"></td><td rowspan=\"3\" style=\"border-top: 1px solid #529ACA; border-bottom: 1px solid #529ACA\" valign=\"top\"><table border=\"0\" width=\"100%\" dir=\"rtl\" cellspacing=\"0\" cellpadding=\"0\"><tr><td height=\"138\" colspan=\"4\"></td></tr><tr><td width=\"10%\"></td><td width=\"22%\" valign=\"top\"><img style=\"FILTER: alpha(opacity=50); moz-opacity: 0.3\" src=\"Maneger/images/warrning_logo.jpg\"></td><td width=\"40%\" valign=\"top\" align=\"left\">\r\n <form action=\"";
echo $_SERVER['PHP_SELF'];
echo "\" method=\"POST\">\r\n <table border=\"0\" cellpadding=\"5\" cellspacing=\"0\" bgcolor=\"#FFFFFF\" style=\"border:1px solid #4E96C6;margin-top:10\" width=\"400\">\r\n\t<tr>\r\n\t\t<td colspan=\"2\" align=\"right\" bgcolor=\"#C1E6FF\"><p align=\"center\"><font color=\"#336699\">";
if ( isset( $_COOKIE['MM_Username'] ) )
{
echo "..:: شما هم اكنون با شناسه زير در سيستم مي باشيد ::..";
}
else
{
echo "..:: لطفا شناسه کاربري و رمز عبور خود را وارد نماييد ::..";
}
echo "</font></p></td>\r\n\t</tr>\r\n\r\n\t<tr>\r\n\t\t<td align=\"right\" width=\"120\" dir=\"rtl\">شناسه كاربري :</td>\r\n\t\t<td align=\"right\" ";
if ( isset( $_COOKIE['MM_Username'] ) )
{
echo "width=\"75%\"";
}
echo " dir=\"rtl\">";
if ( isset( $_COOKIE['MM_Username'] ) )
{
echo $_COOKIE['MM_Username'];
}
else
{
echo "<input type=\"text\" name=\"username\" class=\"user\" dir=\"ltr\">";
}
if ( !isset( $_COOKIE['MM_Username'] ) )
{
echo "</td>\r\n\t</tr>\r\n\r\n\t<tr>\r\n\t\t<td align=\"right\" width=\"120\" dir=\"rtl\">رمز عبور :</td>\r\n\t\t<td align=\"right\" dir=\"rtl\"><input type=\"password\" name=\"password\" class=\"password\" dir=\"ltr\"></td>\r\n\t</tr>\r\n\r\n\r\n\t";
}
if ( !isset( $_COOKIE['MM_Username'] ) )
{
echo "<tr>\r\n\t\t<td></td>\r\n\t\t<td align=\"right\" dir=\"rtl\"><input type=\"checkbox\" name=\"saveforever\" value=\"Yes\">شناسه و رمز عبور را به ياد بسپارم ؟</td>\r\n\t</tr>";
}
echo "\r\n\t<tr>\r\n\t\t";
if ( !isset( $_COOKIE['MM_Username'] ) )
{
echo "<td align=\"right\" width=\"120\" dir=\"rtl\"></td>";
}
echo "\t\t<td ";
if ( isset( $_COOKIE['MM_Username'] ) )
{
echo "align=\"center\" colspan=\"2\"";
}
else
{
echo "align=\"right\" ";
}
echo "dir=\"rtl\">";
if ( isset( $_COOKIE['MM_Username'] ) )
{
echo "<input type=\"button\" value=\"رفتن به صفحه اصلي\" onclick=\"parsiphpform14()\" class=\"btn\"> <input type=\"button\" class=\"btn\" value=\"خروج از سيستم\" onclick=\"parsiphpform15()\">";
}
else
{
echo "<input type=\"submit\" name=\"submit\" class=\"btn\" value=\" ورود \"> <input type=\"button\" class=\"btn\" value=\" خروج \" onclick=\"javascript:self.close()\">";
}
echo "</td>\r\n\t</tr>\r\n\r\n\t";
if ( !isset( $_COOKIE['MM_Username'] ) )
{
echo "<tr>\r\n\t\t<td align=\"right\" width=\"100%\" dir=\"rtl\" colspan=\"2\"><a href=\"Maneger/Send_Password.php\">رمز عبور خود را فراموش كرده ايد ؟</a></td>\r\n\t</tr>";
}
echo "\r\n\t";
if ( $_GET['ReTry'] == "true" )
{
echo "<tr>\r\n\t\t<td align=\"right\" width=\"100%\" dir=\"rtl\" colspan=\"3\"><font color=\"#FF0000\"> پيام : شناسه کاربري يا رمز عبور صحيح نمي باشد .</font></td>\r\n\t</tr>";
}
echo "\r\n\t";
if ( $_GET['SignOut'] == "true" )
{
echo "<tr>\r\n\t\t<td align=\"right\" width=\"100%\" dir=\"rtl\" colspan=\"3\"><font color=\"#FF0000\"> پيام : خروج از بخش مديريت سايت با موفقيت انجام شد .</font></td>\r\n\t</tr>";
}
echo " </table>\r\n </form>\r\n\r\n</td><td width=\"10%\"></td></tr></table></td><td width=\"10\" height=\"21\" valign=\"top\"><img border=\"0\" src=\"Maneger/images/l_t.gif\"></td></tr><tr><td width=\"10\" valign=\"top\"></td><td width=\"10\" valign=\"top\"></td></tr><tr><td width=\"10\" height=\"17\" valign=\"bottom\"><img border=\"0\" src=\"Maneger/images/r_d.gif\"></td><td width=\"10\" height=\"17\" valign=\"bottom\"><img border=\"0\" src=\"Maneger/images/l_d.gif\"></td></tr></table><p style=\"margin-top:-20\" align=\"center\" dir=\"ltr\">";
echo $CopyRight;
echo "</p></td></tr></table></body></html>\r\n";
?>
