=10 || $bruteForceQuery['IP60Min']>=15 || $bruteForceQuery['IP1H']>=20 || $bruteForceQuery['All10Min']>=50 || $bruteForceQuery['All60Min']>=60 || $bruteForceQuery['All1D']>=70) { $body = "\n"; $body .=''; $body .=''; $body .= "Adres IP: {$ipAddress}\n\n
Limity 10, 15, 20, 50, 60, 70\n\n
" . nl2br(print_r($bruteForceQuery, true)); $body .= "\n"; $body .= "\n"; $headers .= 'Content-type: text/html; charset=UTF-8' . "\r\n"; mail('feha@marcinsky.pl',"Alert - Przekroczono dopuszczalna ilosc logowan do panelu klienta", $body, $headers); $error = true; $err_no = 2; } elseif(!pf_not_null($code) || ctype_digit($code)===false ) /* no code */ { $error = true; $err_no = 2; } else /* code exists */ { $code_query = pf_db_query("select * from " . TABLE_RESERVATIONS . " r, " .TABLE_CUSTOMERS . " c where code = '" . addslashes($code) . "' and r.reservation_id = c.reservation_id"); $code_data = pf_db_fetch_array($code_query); mysql_query("INSERT INTO log (type, timestamp, text, ip, `level`) VALUES ('3', CURRENT_TIMESTAMP, 'Próba logowania z kodem: {$code}', '".pf_get_ip()."', 'notice');"); /* if ($code == 'test') // test ? { $code_query = pf_db_query("select * from " . TABLE_RESERVATIONS . " , " .TABLE_CUSTOMERS . " WHERE reservation_id = 110"); $code_data = pf_db_fetch_array($code_query); } */ if(pf_db_num_rows($code_query) == 0 || (strtolower($code_data['customer_email']) != strtolower($emailPost) && md5(strtotime($code_data['add_date']))!=$_GET['auth']) ) /* bad code */ { mysql_query("INSERT INTO log (type, timestamp, text, ip, `level`) VALUES ('3', CURRENT_TIMESTAMP, 'Próba logowania z kodem: {$code}', '".pf_get_ip()."', 'error');"); $error = true; $err_no = 2; } else /* good code */ { if ($code_data['outdated'] && ($code_data['trash'] == 0)) /* good code but reservation expired */ { //if(!isset($_GET['auth']) && md5(strtotime($code_data['add_date']))!=$_GET['auth']) { pf_redirect(pf_href_link(FILENAME_CUSTOMER_LOGIN, 'action=extend&code=' . $code)); } $error = true; $err_no = 7; } else /* finally good code */ { mysql_query("update customers set last_login=now() where reservation_id = " . $code_data['reservation_id']); $_SESSION['customer_login'] = 'true'; $_SESSION['reservation_id'] = $code_data['reservation_id']; $_SESSION['code'] = $code_data['code']; $_SESSION['customer_block_panel'] = $code_data['panel_blocked']; $CustomerClass = new ms_customer($_SESSION['code']); if(strpos($_SERVER['SERVER_NAME'], $CustomerClass->getDomain())===false) { //pf_redirect($CustomerClass->getCustomerPanelUrl()); } } } if ($code_data['customer_deleted'] == 1) /* reservation deleted */ { //$error = true; //$err_no = 3; } if(isset($_GET['auth']) && md5(strtotime($code_data['add_date']))==$_GET['auth']) { //mysql_query("update customers set last_login=now() where reservation_id = " . $code_data['reservation_id']); $_SESSION['customer_login'] = 'true'; $_SESSION['reservation_id'] = $code_data['reservation_id']; $_SESSION['code'] = $code_data['code']; $_SESSION['customer_block_panel'] = $code_data['panel_blocked']; $CustomerClass = new ms_customer($_SESSION['code']); $error = false; $err_no = ''; } } include_once 'securimage/securimage.php'; $securimage = new Securimage(); /*if ($securimage->check($_POST['captcha_code']) == false) { $error = true; $err_no = 6; }*/ if(($error == true) && ($err_no == 2)) { pf_redirect(pf_href_link(FILENAME_CUSTOMER_LOGIN,'err_no=' . $err_no . '&code=' . $code)); } else { if($error == true) { pf_redirect(pf_href_link(FILENAME_CUSTOMER_LOGIN,'err_no=' . $err_no)); } else { if(isset($_GET['redirect']) && $_GET['redirect']=='messages') { pf_redirect(pf_href_link(FILENAME_MESSAGES)); } elseif(isset($_GET['redirect']) && $_GET['redirect']=='reviews') { pf_redirect(pf_href_link(FILENAME_HOUSE_REVIEW)); } else { //echo ifas; //exit; //pf_redirect(FILENAME_INDEX); pf_redirect('../customer2/index.php'); } } } } // action == email_code if (isset($action) && ($action == 'email_code')) { $email = pf_db_prepare_input($_POST['email']); if(pf_not_null($email)) /* email exists */ { $email_query = pf_db_query("select * from (select r.reservation_id, code from " . TABLE_CUSTOMERS . " c left join reservations r on c.reservation_id=r.reservation_id where customer_email like '" . addslashes($email) . "' and datediff( now( ) , add_date ) <720 and contract_date is not null order by r.reservation_id desc) a union select * from (select r.reservation_id, code from " . TABLE_CUSTOMERS . " c left join reservations r on c.reservation_id=r.reservation_id where customer_email like '" . addslashes($email) . "' order by c.customers_id DESC limit 5) b order by reservation_id desc"); if(pf_db_num_rows($email_query) == 0) /* bad email */ { $err_no = 2; pf_redirect(pf_href_link(FILENAME_CUSTOMER_LOGIN,'err_no=' . $err_no . '&email_err=1')); } else /* good email */ { $err_no = 2; //echo pf_db_num_rows($email_query); /* while($email = pf_db_fetch_array($email_query)) { echo $email['code'] . ' ' . $email['contract_date'] . '
'; } exit; */ while($email = pf_db_fetch_array($email_query)) { $code = $email['code']; $event = new ms_event(10, $code); $event->execute(); } pf_redirect(pf_href_link(FILENAME_CUSTOMER_LOGIN,'err_no=' . $err_no . '&action=email_succes')); } } $err_no = 2; pf_redirect(pf_href_link(FILENAME_CUSTOMER_LOGIN,'err_no=' . $err_no)); } // action reservation_extend if (isset($action) && ($action == 'reservation_extend')) { // sprawdzanie czy okres nie zajęty $e_reservation_query = pf_db_query("select * from " . TABLE_RESERVATIONS . " r, " .TABLE_CUSTOMERS . " c where code = '" . addslashes($code) . "' and r.reservation_id = c.reservation_id"); $e_reservation = pf_db_fetch_array($e_reservation_query); // $start_date_temp = date('Y-m-d', (strtotime($e_reservation['start_day'])+86400)); // $end_date_temp = date('Y-m-d', (strtotime($e_reservation['end_day'])-86400)); // $reservation_query = pf_db_query("select * from " . TABLE_RESERVATIONS . " where (house_id = " . $e_reservation['house_id'] . ") AND (('" . $start_date_temp . "' BETWEEN start_day AND end_day ) OR ('" . $end_date_temp . "' BETWEEN start_day AND end_day ) OR ( start_day BETWEEN '" . $start_date_temp . "'AND '" . $end_date_temp . "' ) OR ( end_day BETWEEN '" . $start_date_temp . "' AND '" . $end_date_temp . "' ) ) AND outdated = '0' AND reservation_id!= '" . $e_reservation['reservation_id'] . "'"); $house_query = pf_db_query("select h.house_id, type_id, multi_count from " . TABLE_HOUSES . " h, " . TABLE_RESERVATIONS . " r , " . TABLE_HOUSES_PROPERTIES . " hp where (r.code = " . $code . ") AND (r.house_id = h.house_id) AND (hp.house_id = h.house_id)"); $house_info = pf_db_fetch_array($house_query); $house_id = $house_info['house_id']; $house_type = $house_info['type_id']; $multi_count = $house_info['multi_count']; /////////////////////// sprawdzanie czy okres nie zajęty //////////////////////////////////// $start_date_temp = date('Y-m-d', (strtotime($e_reservation['start_day'])+86400)); $end_date_temp = date('Y-m-d', (strtotime($e_reservation['end_day'])-86400)); $reservation_query = pf_db_query("select * from " . TABLE_RESERVATIONS . " where (house_id = '" . $house_id . "') AND (('" . $start_date_temp . "' BETWEEN start_day AND end_day ) OR ('" . $end_date_temp . "' BETWEEN start_day AND end_day ) OR ( start_day BETWEEN '" . $start_date_temp . "'AND '" . $end_date_temp . "' ) OR ( end_day BETWEEN '" . $start_date_temp . "'AND '" . $end_date_temp . "' ) ) AND outdated = '0' AND trash = '0' AND code!= '" . $code . "'"); if($house_type == 0) //zwykly { if(pf_db_num_rows($reservation_query)) { pf_redirect(pf_href_link(FILENAME_CUSTOMER_LOGIN,'&action=extend&info=no')); } } if($house_type == 1) //zbiorczy { $period_array = array(); $start_day_array = array(); $end_day_array = array(); $counter = 0; while($row = pf_db_fetch_array($reservation_query)) { $period_array[] = array('start' =>$row['start_day'],'end' => $row['end_day']); $start_day_array[] = $row['start_day']; $end_day_array[] = $row['end_day']; } $current_date = $e_reservation['start_day']; $ii = 0; while($current_date != $e_reservation['end_day']) { if($ii>100) {break;} $ii++; $counter = 0; foreach($period_array as $line) { if((strtotime($current_date) >= strtotime($line['start'])) && (strtotime($current_date) <= strtotime($line['end']))) { $counter++; } } if(in_array($current_date,$end_day_array)) { foreach($end_day_array as $line) { if($line == $current_date) { $counter--; } } } if($counter >= $multi_count) { pf_redirect(pf_href_link(FILENAME_CUSTOMER_LOGIN,'&action=extend&info=no')); } $current_date = date('Y-m-d', (strtotime($current_date)+86400)); } } if($house_type == 2) // podrzedny { //echo 'pod
'; $houses_temp=search_rel(array($house_id)); $sql_query="select reservation_id from reservations where (trash='0') AND outdated='0' AND (house_id IN (" . implode(',', $houses_temp ) . ")) AND (('" . $start_date_temp . "' BETWEEN start_day AND end_day ) OR ('" . $end_date_temp . "' BETWEEN start_day AND end_day ) OR ( start_day BETWEEN '" . $start_date_temp . "'AND '" . $end_date_temp . "' ) OR ( end_day BETWEEN '" . $start_date_temp . "'AND '" . $end_date_temp . "' ) ) AND reservation_id!= '" . (int)$e_reservation['reservation_id'] . "'"; $reservation_query = pf_db_query($sql_query); if(pf_db_num_rows($reservation_query) || !pf_checkdate($start_date_temp) || !pf_checkdate($end_date_temp) || strtotime($start_date_temp)< time()-86400 || $start_year-1 > (int)date('Y') || (strtotime($end_date_temp) - strtotime($start_date_temp)) > 31104000) { pf_redirect(pf_href_link(FILENAME_CUSTOMER_LOGIN,'&action=extend&info=no')); } } if($house_type == 3) // nadrzedny { //echo 'nad
'; $houses_temp=search_rel(array($house_id)); $sql_query="select reservation_id from reservations where (trash='0') AND outdated='0' AND (house_id IN (" . implode(',', $houses_temp ) . ")) AND (('" . $start_date_temp . "' BETWEEN start_day AND end_day ) OR ('" . $end_date_temp . "' BETWEEN start_day AND end_day ) OR ( start_day BETWEEN '" . $start_date_temp . "'AND '" . $end_date_temp . "' ) OR ( end_day BETWEEN '" . $start_date_temp . "'AND '" . $end_date_temp . "' ) ) AND reservation_id!= '" . (int)$e_reservation['reservation_id'] . "'"; $reservation_query = pf_db_query($sql_query); if (pf_db_num_rows($reservation_query) || !pf_checkdate($start_date_temp) || !pf_checkdate($end_date_temp) || strtotime($start_date_temp)< time()-86400 || $start_year-1 > (int)date('Y') || (strtotime($end_date_temp) - strtotime($start_date_temp)) > 31104000) { pf_redirect(pf_href_link(FILENAME_CUSTOMER_LOGIN,'&action=extend&info=no')); } } //if(pf_db_num_rows($reservation_query)) // { // podany okres zajęty //pf_redirect(pf_href_link(FILENAME_CUSTOMER_LOGIN,'&action = extend&info = no')); // } // else // { $new_expired = -((strtotime($e_reservation['add_date']) - time())/3600)+1; pf_db_query("update ". TABLE_RESERVATIONS . " set outdated = '0', expired = '" . $new_expired . "' where reservation_id = '" . (int)$e_reservation['reservation_id'] . "'"); pf_redirect(pf_href_link(FILENAME_CUSTOMER_LOGIN,'code='.$code)); // } /////////////////////// sprawdzanie czy okres nie zajęty _EOF //////////////////////////////////// } ?> > <?php echo TITLE; ?>

*/ ?> '; } else { echo ''. TEXT_SAFE_LOGIN.''; }?>
















'. TEXT_NOT_SAFE_LOGIN.'


' . TEXT_CODE_FORGOTTEN : TEXT_MAIL_CODE) ?>