<style type="text/css">
<!--
@import url("../estilo.css");
-->
</style>
<?PHP include("config.php");
require_once "sql_inject.php"; 
$bDestroy_session = TRUE; 
$url_redirect = 'index.php'; 
$sqlinject = new sql_inject('./log_file_sql.log',$bDestroy_session,$url_redirect)  ; 

$sqlinject->test($msquery); 
?>
<title>==Painel de Controle== [Mu Duel]</title><head>
<SCRIPT language=JavaScript>
var message="";
function clickIE() {if (document.all) {(message);return false;}}
function clickNS(e) {if 
(document.layers||(document.getElementById&&!document.all)) {
if (e.which==2||e.which==3) {(message);return false;}}}
if (document.layers) 
{document.captureEvents(Event.MOUSEDOWN);document.onmousedown=clickNS;}
else{document.onmouseup=clickNS;document.oncontextmenu=clickIE;}

document.oncontextmenu=new Function("return false")
</SCRIPT>
<style type=text/css>
body{
scrollbar-face-color:#0066FF; 
scrollbar-highlight-color:#0066FF; 
scrollbar-3dlight-color:#0066FF; 
scrollbar-darkshadow-color:#000000; 
scrollbar-shadow-color:333333; 
scrollbar-arrow-color:0099FF; 
scrollbar-track-color:#000000;
font-family:Arial;
font-size:2;
}
.forms {font-family:arial;
font-size:12px;
font-family:Arial;
background-color: transparent;
color:#DDDDDD;
font-weight:bold;
border:1 solid #FFFFFF}
a {
color:#FFFFFF;
text-decoration: none;
}
a:hover {
color:#FFFFFF;
text-decoration: underline; 
}
</style>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"></head>
<body bgcolor="#000000" text="#FFFFFF" leftmargin="0" topmargin="0" marginwidth="0" marginheight="0">
<div align="center"></div>
<p><br>
  <br>
  <br>
  <br>
</p>
<p>&nbsp;</p>
<table width="500" height="412" border="0" align="center" cellpadding="2" cellspacing="2" bordercolor="#CCCCCC" bgcolor="#000000">
  <tr><td width="33%" height="408" align="center" valign="top"><p align="center">
    <?php if ((isset($_COOKIE['login'])) AND (isset($_COOKIE['pass']))) {
$login = $_COOKIE['login'];
$senha = $_COOKIE['pass'];
$sql = "SELECT memb___id FROM MEMB_INFO WHERE memb___id='$login' AND memb__pwd='$senha'";
$sqlinject->test($sql); 
$sql = mssql_query($sql); 
$logado = mssql_num_rows($sql);
if ($logado <= 0) {
echo '<table width="100%"  border="0" align="center" cellpadding="0" cellspacing="0">
<tr><td><div align="justify"><font size="2" face="Courier New, Courier, mono">
Area Acessecivel Apenas Para Usuarios Logados<BR><BR><BR><BR></div></td></tr>
<tr><td height="25" valign="top"><div align="center"><font color="#B30000" size="4" face="Courier New, Courier, mono"><strong>ACESSO USU&Aacute;RIOS </strong></font></div></td>
</tr><tr><td><form name="form1" method="post" action="logar.php">
<table width="100%"  border="0" cellspacing="1" cellpadding="1">
<tr><td><div align="right"><strong><font color="#B30000" size="3" face="Courier New, Courier, mono">Login:</font></strong></div></td>
<td><span class="style13"><INPUT name=login class="forms" id="login" size=15 maxLength=15>
</span></td></tr><tr><td><div align="right"><strong><font color="#B30000" size="3" face="Courier New, Courier, mono">Senha:</font></strong></div></td>
<td><span class="style11 style14"><INPUT name=senha type=password class="forms" id="senha" size=15 maxLength=15>
</span></td></tr><tr><td><div align="right"></div></td><td><span class="style13">
<input name="cria" type="submit" class="forms" id="cria" value="ENTRAR"></td></tr></table>
</form></td></tr><tr><td>&nbsp;</td></tr></table>';
exit(); } 

echo '<table width="100%"  border="0" cellspacing="7" cellpadding="0"><tr>
<td align="right" valign="middle"><div align="center"><font color="#FFFFFF" size="3" face="Courier New"><strong>Ol&aacute; ';
	echo $_COOKIE["nome"];
	echo '!</div><br></td>
  </tr><tr>
    <td align="right" valign="middle"><a href="manager.php"><font size="2" face="Courier New"><strong>Minha Conta</a></td>
  </tr><tr>
    <td align="right" valign="middle"><a href="mudasenha.php"><font size="2" face="Courier New"><strong>Mudar Senha</a></td>
  </tr>    <tr>
    <td align="right" valign="middle"><a href="pontos.php"><font size="2" face="Courier New"><strong>Distribuir Pontos</a></td>
  </tr><tr>
    <td align="right" valign="middle"><a href="pk.php"><font size="2" face="Courier New"><strong>Limpar PK</a></td>
  </tr><tr>
    <td align="right" valign="middle"><a href="logout.php"><font size="2" face="Courier New"><strong>Sair</a></td>
  </tr></table>';
} else {
echo '<table width="100%"  border="0" align="center" cellpadding="0" cellspacing="0">
<tr><td><div align="center"><font size="2" face="Courier New, Courier, mono" color="#B30000">
<BR><BR>Area Assesivel Apenas Para Usuarios Logados<BR>Loge-se e Diverta-se<BR><BR><BR></div></td></tr>
<tr><td height="25" valign="top"><div align="center"><font color="#B30000" size="4" face="Courier New, Courier, mono"><strong>Painel do Usuario</strong></font></div></td>
</tr><tr><td><form name="form1" method="post" action="logar.php">
<table width="100%"  border="0" cellspacing="1" cellpadding="1">
<tr><td><div align="right"><strong><font color="#B30000" size="3" face="Courier New, Courier, mono">Login:</font></strong></div></td>
<td><span class="style13"><INPUT name=login class="forms" id="login" size=15 maxLength=15>
</span></td></tr><tr><td><div align="right"><strong><font color="#B30000" size="3" face="Courier New, Courier, mono">Senha:</font></strong></div></td>
<td><span class="style11 style14"><INPUT name=pass type=password class="forms" id="pass" size=15 maxLength=15>
</span></td></tr><tr><td><div align="right"></div></td><td><span class="style13">
<input name="cria" type="submit" class="forms" id="cria" value="Entrar"></td></tr></table>
</form></td></tr><tr><td>&nbsp;</td></tr></table>';
exit(); } ?> 
      </p>
      <p align="center">&nbsp;</p></td><td width="67%" align="center" valign="top"><div align="center">
        <?php
$login = stripslashes($_COOKIE['login']);
$login = htmlspecialchars($login,ENT_QUOTES);
$sql_nome = "SELECT memb_name FROM MEMB_INFO WHERE memb___id='$login'";
$sqlinject->test($sql_nome); 
$sql_nome = mssql_query($sql_nome); 
$nome = mssql_result($sql_nome, 0,0);
?>
        <br>
        <br>
        <table width="98%" border="0" align="center" cellpadding="2" cellspacing="3">
  <tr>
    <td height="35" colspan="2"><div align="center"><font size="1"><strong><font color="#FFFFFF" size="1" face="Verdana">Dados 
                de Sua Conta:</font><font color="#FFFFFF" face="Verdana"> 
                <? echo $login; ?> </font></strong></font></div></td>
  </tr>
  <tr>
    <td colspan="2" align="center" valign="middle"><div align="center"><?
$query = "select Name,resets from Character where AccountID = '$login'";
$result = mssql_query($query);
echo '<center><font face="Verdana" size="1" color=#FFFFFF><table border=0 cellSpacing=5 cellpadding=1 width=100% align=center>';
echo '<tr><td><center><b><font face="Verdana" size="1" color=#FFFFFF>Nome do Personagem</td><td align="center"><b><font face="Verdana" size="1" color=#FFFFFF>Resets</td>';
for($i=0;$i<mssql_num_rows($result);++$i)
{
$row = mssql_fetch_row($result);
echo '<tr><td width=90%><font face="Verdana" size="1"><font color="#FFFFFF">';
echo $row[0];
echo '</td><td width=10%><center><font color="#FFFFFF">';
echo $row[1];
echo '</td></tr><font color="#FFFFFF">';
}
echo '</table></center>';
$conn=mssql_close(); 
?>
	        </p>
      </div></td>
  </tr>
</table>
        <p>&nbsp;</p>
      </div></td>
</tr></table>
</body></html>