<?php
define('IN_ZHIXIAO', true);
header("Content-type:text/html;charset=utf-8");
include("Config/conn_1.php");
include("Config/function.php");
include("Config/verifycode.php");
include("Config/setting.php");
include("Config/pv.php");
if ($glo_denglu_1 == 0) {
    ;
    echo '	<div style="margin-top:150px;text-align:center;font-size:25px;"><img src="Resource/images/images/wzzzwhz_img.jpg"></div>';
    exit();
}
session_start();
if ($action == "login") {
    $hint = '';
    $sql = "select * from {$db_prefix}setting1 where 1";
    $set = $db->get_one($sql);
    $today = date("w", time());
    if ($today == 0) {
        $fweek = $set['fweek_6'];
        $tweek = $set['tweek_6'];
    } else {
        $today = $today - 1;
        $fweek = $set['fweek_' . $today];
        $tweek = $set['tweek_' . $today];
    }
    $thish = date("H", time());
    if ($thish >= $fweek && $thish < $tweek) {
        $glo_denglu_1 = 1;
    } else {
        $glo_denglu_1 = 0;
    }
    if ($glo_denglu_1 == 0) {
        $prompt = $set['prompt'];
        echo "<script>alert('" . $prompt . "');history.back();</script>";
        exit();
        echo '  <div style="margin-top:150px;text-align:center;font-size:25px;"><img src="./Resource/images/images/wzzzwhz_img.jpg"></div>';
        exit();
    }
    if (trim($username) == '')
        $hint .= "请输入用户名/手机号\\n";

    if (trim($password) == '')
        $hint .= "请输入密码\\n";
    if ($hint != "") {
        echo "<script>alert('" . $hint . "');history.back();</script>";
        exit();
    }

    $check_ary = array(" ", "'", "or", "OR", "and", "AND", "%", "union", "UNION", "join", "JOIN", ";", "\%", "{", "}", "\$", "=", "/", "\\", "|", "||");
    $username = str_replace($check_ary, "", $username);

    $sql_lgn = "select * from {$db_prefix}users where (username='" . $username . "' or mobile='" . $username . "') and pwd='" . mymd5($password, "EN") . "' and state=1";
    $rs_lgn = $db->get_one($sql_lgn);
    if (empty($rs_lgn["id"]))
        $hint .= "登录失败\\n";
    if ($glo_verification == 0) {
        if (strtolower($verifycode) != strtolower($_SESSION["code_2"]))
            $hint .= "验证码错误\\n";
    }
    if ($hint != "") {
        echo "<script>alert('" . $hint . "');history.back();</script>";
        exit();
    }

    $last_logtime = $rs_lgn["logintime"];
    $last_ip = $rs_lgn["ip"];

    $_SESSION["glo_userid"] = $rs_lgn["id"];
    $_SESSION["glo_username"] = $rs_lgn["username"];
    $_SESSION["glo_realname"] = $rs_lgn["realname"];
    $_SESSION["glo_usersecpwd"] = '';

    $_SESSION["lognum"] = $rs_lgn["lognum"];
    $_SESSION["price_s"] = $rs_lgn["price_s"];
    $_SESSION["j_price"] = $rs_lgn["j_price"];
    $_SESSION["last_logtime"] = $last_logtime;
    $_SESSION["last_ip"] = $last_ip;
    $_SESSION["logip"] = getip();
    $db->query("update {$db_prefix}users set logintime='" . time() . "',lognum=lognum+1,last_logtime = '$last_logtime',ip='" . getip() . "',last_ip = '$last_ip' where id='" . $rs_lgn['id'] . "'");
    $log_adminid = $_SESSION["glo_userid"];
    $log_admin = $_SESSION["glo_username"];
    $log_type = 10;
    $log_addtime = time();
    $log_ip = getip();
    $log_memo = "会员" . $_SESSION["glo_username"] . "登陆前台";
    setlogstype($log_adminid, $log_admin, $log_type, $log_addtime, $log_ip, $log_memo);
    generateIPList($_SESSION["glo_username"], $_SESSION["glo_realname"], $log_ip);
    //header("location:".__PATH__."user/main.php");exit();
    header("location:" . __PATH__ . "home/main.php");
    exit();
};
echo ''
?>