<?PHP
set_magic_quotes_runtime(0);

$server 	= $_SERVER['SERVER_NAME'];
$domain_temp= explode(".",$server);
$domain_name=$domain_temp[count($domain_temp)-3];
if($domain_temp[count($domain_temp)-3]=="www" or $domain_temp[count($domain_temp)-3]==""){$domain_name=$domain_temp[count($domain_temp)-2];}
$domain=$domain_temp[count($domain_temp)-3].".".$domain_temp[count($domain_temp)-2].".".$domain_temp[count($domain_temp)-1];
if($domain_temp[count($domain_temp)-3]=="www" or $domain_temp[count($domain_temp)-3]==""){$domain=$domain_temp[count($domain_temp)-2].".".$domain_temp[count($domain_temp)-1];}

$DDIR              = 'inc';
$DB                = NULL;
$FORWARD_URL       = 'http://'.$server.'/';
$RANDOM            = 'a24d6d85d7d1f71147f5dbfaa045dda2';
$BASE_URL          = 'http://'.$server.'/ranklink';
$HOSTNAME          = 'localhost';
$USERNAME          = 'root';
$PASSWORD          = 'Sai!d51m';
$DATABASE          = str_replace("-","_", $domain_name);
$BASE_URL          = 'http://'.$server.'/ranklink';
$INDEX_URL         = 'http://'.$server.'/ranklink';
$INDEX_FILE        = 'index.php';
$HIT_SESSION       = '240';
$USE_PERSIST       = '0';
$USE_FORWARD_CAT   = '0';
$USE_H_NO_PROXY    = '1';
$USE_H_BANNED_IPS  = '0';
$USE_H_TRACK_IPS   = '1';
$USE_H_CHEAT_TALLY = '0';
$USE_H_CHEAT_LOG   = '0';
$HIT_COOKIE        = '';
$IN_URL            = 'http://'.$server.'/ranklink/in.php';
$USE_H_GATEWAY     = '1';
$USE_H_COOKIES     = '0';
$USE_H_REQ_COOKIE  = '0';


if( !$_REQUEST['id'] )
{
    header("Location: $FORWARD_URL");
    exit;
}


if( $_SERVER['REQUEST_METHOD'] == 'POST' )
{
    giveHit();
}
else
{
    if( $USE_H_GATEWAY )
    {
        displayGateway();
    }
    else
    {
        giveHit();
    }
}


function giveHit()
{
    $time = time();

    // if using gateway and requiring cookie enabled browser, check for gateway cookie
    if( $GLOBALS['USE_H_GATEWAY'] && $GLOBALS['USE_H_REQ_COOKIE'] && !$_COOKIE["gateway_{$_REQUEST['id']}"] )
    {
        handleCheat('No_Cookies');
    }


    // if using cookies to track hits, check for already set hit cookie
    if( $GLOBALS['USE_H_COOKIES'] && $_COOKIE["hit_{$_REQUEST['id']}"] )
    {
        handleCheat('Cookie');
    }

    
    // if not allowing proxies, check for proxy server
    if( $GLOBALS['USE_H_NO_PROXY'] && ($_SERVER['HTTP_VIA'] || $_SERVER['HTTP_X_FORWARDED_FOR']) )
    {
        handleCheat('Proxy');
    }

    
    // check for a valid browser
    if( !$_SERVER['HTTP_USER_AGENT'] )
    {
        handleCheat('Browser');
    }


    // if using gateway, check for valid session
    if( $GLOBALS['USE_H_GATEWAY'] )
    {
        // check for valid referer
        if( !strstr($_SERVER['HTTP_REFERER'], $GLOBALS['IN_URL']) )
        {
            handleCheat('Referrer');
        }


        if( $time - $_REQUEST['time'] >= $GLOBALS['HIT_SESSION'] )
        {
            handleCheat('Exp_Session');
        }

        $session = md5($GLOBALS['RANDOM'] . $_SERVER['REMOTE_ADDR'] . $_REQUEST['time'] . $_REQUEST['id']);

        if( $session != $_REQUEST['ses'] )
        {
            handleCheat('Bad_Session');
        }

        connectDB();

        $result = mysql_query("SELECT * FROM r_Sessions WHERE Session='{$_REQUEST['ses']}'");

        if( mysql_num_rows($result) == 0 )
        {
            handleCheat('Bad_Session');
        }
        else
        {
            mysql_query("DELETE FROM r_Sessions WHERE Session='{$_REQUEST['ses']}'");
        }
    }


    // if using IP log, check for existing IP
    if( $GLOBALS['USE_H_TRACK_IPS'] )
    {
        checkExistingIP();
    }


    if( $GLOBALS['USE_H_COOKIES'] )
    {
        setcookie("hit_{$_REQUEST['id']}", $time, $time + $GLOBALS['HIT_COOKIE']);
    }


    connectDB();

    mysql_query("UPDATE r_Hits SET Current_In=Current_In+1, Total_In=Total_In+1 WHERE Username='{$_REQUEST['id']}'");


    if( $GLOBALS['USE_FORWARD_CAT'] )
    {
        $GLOBALS['FORWARD_URL'] = getForward();
    }

    closeDB();

    header("Location: {$GLOBALS['FORWARD_URL']}");
}


function displayGateway()
{
    $time    = NULL;
    $session = createSession($time);

    // Set cookie so only cookie enabled browsers can send hits
    if( $GLOBALS['USE_H_REQ_COOKIE'] )
    {
        setcookie("gateway_{$_REQUEST['id']}", (int)$time, (int)$time + $GLOBALS['HIT_COOKIE']);
    }

    ?>

<html>
<head>
<title>Enter</title>
<meta http-equiv="Content-Type" content="text/html; charset=Shift_JIS">
<link href="images/ranklink.css" rel="stylesheet" type="text/css">
</head>
<body onLoad="if (self != top) top.location = self.location">
<br>
<br>

<?
$server 	= $_SERVER['SERVER_NAME'];
$domain_temp= explode(".",$server);
$domain_name=$domain_temp[count($domain_temp)-3];
if($domain_temp[count($domain_temp)-3]=="www" or $domain_temp[count($domain_temp)-3]==""){$domain_name=$domain_temp[count($domain_temp)-2];}
$domain=$domain_temp[count($domain_temp)-3].".".$domain_temp[count($domain_temp)-2].".".$domain_temp[count($domain_temp)-1];
if($domain_temp[count($domain_temp)-3]=="www" or $domain_temp[count($domain_temp)-3]==""){$domain=$domain_temp[count($domain_temp)-2].".".$domain_temp[count($domain_temp)-1];}
$rand_gen = ord($domain_name).ord(substr($domain_name,1,1)).ord(substr($domain_name,2,1)).ord(substr($domain_name,-3)).ord(substr($domain_name,-2)).ord(substr($domain_name,-1));
mt_srand(sqrt(sqrt(sqrt($rand_gen))));

$basecolor 	= mt_rand(200000, 999999);
?>


<br>
<TABLE align="center" cellSpacing=0 cellPadding=1 width=400 border=0>
  <TR>
    <TD bgColor=#334d6f>
      <TABLE cellSpacing=0 cellPadding=2 width=398 border=0>
        <TR>
          <TD align=center valign="middle" bgColor="#<? echo $basecolor; ?>"><B><FONT color=#ffffff>年齢認証</FONT></B></TD></TR>
        <tr> 
           <td bgColor=#ecf1f6><div align="center"><font size="2"><br>ここから先はアダルトコンテンツを含むサイトです。<br><br></font></div></td>
        </tr>
	    <tr> 
		    <td bgColor=#ecf1f6> <div align="center"><h4><br>18以上ですので<br></h4></div></td>
		  </tr>
		<tr> 
	    <td bgColor=#ecf1f6 width="50%"> <div align="center"><h3>
        
        <form name="click" action="<?PHP echo $GLOBALS['IN_URL'] ?>" method="POST">
		<input type="hidden" name="ses" value="<?PHP echo $session ?>">
		<input type="hidden" name="id" value="<?PHP echo $_REQUEST['id'] ?>">
		<input type="hidden" name="time" value="<?PHP echo $time ?>">
          <script language="JavaScript">
 <!--
 document.write('<a href="javascript:document.click.submit()">入場</a>');
 //-->
</script>
          <noscript>
          <input type="submit" value="　入場　">
          </noscript>
        </form>
        </h3> </div></td>
  	</tr>
        <TR> 
          <TD align=center valign="middle" bgColor="#<? echo $basecolor; ?>">&nbsp;</TD>
        </TR>
    <tr> 

    </table></td>
    </tr>
</table>

<br>
<br>
</body>
</html>

<?PHP
}


function connectDB()
{
    global $DB;

    if( $DB != NULL )
    {
        return;
    }

    if( $GLOBALS['USE_PERSIST'] )
    {
        $DB = mysql_pconnect($GLOBALS['HOSTNAME'], $GLOBALS['USERNAME'], $GLOBALS['PASSWORD']);
    }
    else
    {
        $DB = mysql_connect($GLOBALS['HOSTNAME'], $GLOBALS['USERNAME'], $GLOBALS['PASSWORD']);
    }

    mysql_select_db($GLOBALS['DATABASE'], $DB);
}


function closeDB()
{
    global $DB;

    if( $DB != NULL )
    {
        mysql_close($DB);
    }
}


function checkExistingIP()
{
    global $DB;

    connectDB();

    $result = mysql_query("SELECT * FROM r_HitIPs WHERE Username='{$_REQUEST['id']}' AND IP_Address='{$_SERVER['REMOTE_ADDR']}'");

    if( mysql_num_rows($result) != 0 )
    {
        handleCheat('IP_Address');
    }
    else
    {
        mysql_query("INSERT INTO r_HitIPs VALUES ( '{$_REQUEST['id']}', '{$_SERVER['REMOTE_ADDR']}' )");
    }
}


function getForward()
{
    global $DB;

    connectDB();

    $result = mysql_query("SELECT Category FROM r_Accounts WHERE Username='{$_REQUEST['id']}'");
    $member = mysql_fetch_array($result);

    $member['Category'] = urlencode($member['Category']);

    return "{$GLOBALS['INDEX_URL']}/{$GLOBALS['INDEX_FILE']}?c={$member['Category']}";
}


function handleCheat($type)
{
    global $DB;

    if( $GLOBALS['USE_H_CHEAT_TALLY'] )
    {
        connectDB();
        mysql_query("UPDATE r_HitCheats SET $type=$type+1 WHERE Username='{$_REQUEST['id']}'");
    }
    

    if( $GLOBALS['USE_H_CHEAT_LOG'] )
    {
        $date = date("H:i m-d-Y");

        $fd = fopen("hcheat.log", "a");
        fwrite($fd, "[ $date ]  [ $type ]  [ {$_REQUEST['id']} ] [ {$_SERVER['REMOTE_ADDR']} ({$_SERVER['HTTP_X_FORWARDED_FOR']}) ]\n");
        fclose($fd);
    }


    if( $GLOBALS['USE_FORWARD_CAT'] )
    {
        $GLOBALS['FORWARD_URL'] = getForward();
    }

    closeDB();

    header("Location: {$GLOBALS['FORWARD_URL']}");
    exit;
}


function createSession(&$highres)
{
    $highres = highResTime();
    $session = md5($GLOBALS['RANDOM'] . $_SERVER['REMOTE_ADDR'] . $highres . $_REQUEST['id']);

    connectDB();

    mysql_query("INSERT INTO r_Sessions VALUES( '$session' )");

    return $session;
}


function highResTime()
{ 
    list($usec, $sec) = explode(' ', microtime()); 
    return ((float)$usec + (float)$sec); 
}


?>