op.php

六和投注系统

<?php 
session_start();
set_time_limit(1800);
include("../inc/conn.php");
include_once($_SESSION["inclanguage"]);
$sql_odate=mysql_query("select * from ptime where now_sign='1'",$conn);  //update open date
$open_time=mysql_result($sql_odate,0,"open_time");
$downdate=mysql_result($sql_odate,0,"dates");
$opendate=substr($open_time,0,10);
$utime=str_replace("-","",$opendate);
mysql_query("update ptime set open_date='$utime' where dates='$downdate'",$conn);
$_SESSION["downdate"]=$downdate;
$_SESSION["opendate"]=$opendate;
if(isset($_POST['login'])&&isset($_POST['pass']))//&&isset($_POST['code']))
{ $user_account=chop($_POST['login']);
  $user=$user_account;
  $user_password=md5(chop($_POST['pass']));
  //$yzcode=$_SESSION["yzcode"];
  char($user_account);
  char($user_password);
  char($yzcode);
  //if(isset($yzcode)&&isset($_POST["code"]))
 // { 
   // if($_POST["code"]==$yzcode)
	//{
	   checkuser($user_account,$user_password);
	   include("pro.php");
	//}else  outscript("alert('".$ps_yzcodereeor."!');history.back(1);");
  //}
}else
{
  outscript("alert('".$ps_pleaseinputallinfo."!');history.back(1);");
}
function vprofit($tbs,$users,$vip)
{ global $conn;
  $sql=mysql_query("select * from $tbs where user_account='$users'",$conn);
  if($vip==1) return @mysql_result($sql,0,"profit");
  if($vip==2) return @mysql_result($sql,0,"all_profit");
}

function checkuser($user_account,$user_password)
{ global $conn,$ps_thisaccountnoexits,$ps_passworderroragian,$ps_youraccountisstop,$ps_youraccountischecking;
$sql=mysql_query("select * from member where user_account='$user_account'",$conn);
 if(mysql_num_rows($sql)==0)
 { 
  outscript("alert('".$ps_thisaccountnoexits."!');history.back(1);"); 
 }else
 {
  $sqls=mysql_query("select * from member where user_account='$user_account' and user_password='$user_password'",$conn);
   if(mysql_num_rows($sqls)==0)
   {
     mysql_query("update member set login_err=login_err+1 where user_account='$user_account'",$conn);
    outscript("alert('".$ps_passworderroragian."!');history.back(1);"); 
   }else
   {
	 $deleted=mysql_result($sqls,0,"deleted");
	 $checks=mysql_result($sqls,0,"checks");
	 if($deleted==1)
	 {
	   outscript("alert('".$ps_youraccountisstop."!');history.back(1)"); 
	 }elseif($checks==1)
	 {
	   outscript("alert('".$ps_youraccountischecking."!');history.back(1)"); 
	 }else
	 {
	   $names=mysql_result($sqls,0,"user_name");
	   $users=mysql_result($sqls,0,"user_account");
	   $agent=mysql_result($sqls,0,"agent");
	   $all_agent=mysql_result($sqls,0,"all_agent");
	   $super_agent=mysql_result($sqls,0,"super_agent");
	   $_SESSION["name"]=$names;
	   $_SESSION["user"]=$users;
	   $_SESSION["type"]=mysql_result($sqls,0,"user_plate");
	   $_SESSION["plate"]=mysql_result($sqls,0,"user_plate");
	   $_SESSION["credit"]=mysql_result($sqls,0,"user_credit");
	   $_SESSION["used"]=mysql_result($sqls,0,"used_credit");
	   $_SESSION["agent"]=$agent;
	   $_SESSION["all_agent"]=$all_agent;
	   $_SESSION["super_agent"]=$super_agent;
	   $_SESSION["m"]=mysql_result($sqls,0,"m");
	   //profit
	   $_SESSION["agent_profit"]=vprofit("agent",$agent,1);
	   $_SESSION["all_agent_profit"]=vprofit("agent",$agent,2);
	   $_SESSION["super_agent_profit"]=vprofit("super_agent",$super_agent,1);
	   mysql_query("update member set online='0' where user_account='$users'",$conn);
	   $sqlf=mysql_query("select * from online where user_account='$users'",$conn);
	   $have=mysql_num_rows($sqlf);
	   $ip=$_SERVER['REMOTE_ADDR'];
	   $tm=date(YmdHis);
	   $cnum=clogin();
	   $_SESSION["usernumber"]=$cnum;
	   mysql_query("update member set login_num=login_num+1,login_time='$tm',ip='$ip',clogin='$cnum' where user_account='$user_account'",$conn);
	   if($have==0) mysql_query("insert into online(user_type,user_name,user_account,ip,login_time,active_time)values('1','$names','$users','$ip','$tm','$tm')",$conn);
	   if($have>0)
	   {
	     $_SESSION["onyes"]=1;
	     mysql_query("insert into onuser(user_account,sign)values('$users','1')",$conn);//no location login
	   }
	 }
   }
 }
}
function clogin()
{
 $name=NULL;
for($i=0;$i<1;$i++)
  {
 for($j=0;$j<20;$j++)
  {
  srand((double)microtime()*1000000);
  $randname=rand(!$j ? 1: 0,9);
  $name.=$randname;
  }
 }
return $name;
}
function char($arr)
{ global $ps_noinputerrorchar;
 $ay="<,>,?,/,\,$,@,',*,!,#,%,^,&,(,),;,~,],[";
 $sa=split(",",$ay);
 for($i=1;$i<count($sa)-1;$i++)
 {
 if(strstr($arr,$sa[$i])) outscript("alert('".$ps_noinputerrorchar."!');history.back(1);");
 }
}
function outscript($arr)
{
  echo "<script language='javascript'>".$arr."</script>";
}
?>