[AHK] Login system

#IfWinActive GTA:SA:MP#NoEnv#UseHook#Persistent#include improv3d.ahk#include API.ahk	if(!imp_table_exist("user")){	imp_create_table("user", "Username, Passwort, Admin, Gesperrt")	}	if(!imp_row_exist("user", "FerienFreak")){	imp_create_row("user", "FerienFreak")	imp_write("user", "FerienFreak", "Passwort", "test123")	imp_write("user", "FerienFreak" ,"Admin", "1")	imp_write("user", "FerienFreak", "Gesperrt", "0")}Gui, 1:Show, x478 y365 h176 w570, LoginGui, 1:Add, Button, x402 y79 w150 h25 +BackgroundTrans gLogin, Login:Gui, 1:Add, Text, x34 y65 w280 h40 +BackgroundTrans cWhite, Benutzername:Gui, 1:Add, Text, x214 y65 w280 h40 +BackgroundTrans cWhite, Passwort:Gui, 1:Add, Edit, x32 y79 w150 h25 +BackgroundTrans vBenutzerGui, 1:Add, Edit, x212 y79 w160 h25 Password +BackgroundTrans vPasswortGui, 1:Add, Text, x32 y129 w280 h40 +BackgroundTrans cWhite, Hier kannst du dich in den Sanitäter und Ärzte Keybinder einloggen`, bitte gib niemand dein Passwort weiter.Gui, 1:Add, Text, x402 y160 w480 h210 +BackgroundTrans cWhite, Sanitäter und Ärzte Keybinder by FerienFreakreturn	Login:Gui, Submit	if(imp_compare("user", username, "password", passwort) && imp_row_exist("user", username))	{		if(imp_compare("user", username, "Gesperrt", "1")){		MsgBox, 16, Login fehlgeschlagen!, Dein Account ist gesperrt! Melde dich beim Support!		ExitApp	}Gui, 2:Add, Text, x402 y160 w480 h210 +BackgroundTrans cWhite, Sanitäter und Ärzte Keybinder by return}else{	MsgBox, 16, Login Fehlgeschlagen, Deine Accountdaten scheinen falsch zusein	return	}

<?php	#version 0.3.2b	error_reporting(0);	/*************************************************************	* Rechte:	true = erlauben | false = verbieten	**************************************************************/	$rights = array(		#MySQL		"read" 					=>	true,		"write" 				=>	true,		"create_row" 			=>	true,		"delete_row" 			=> 	true,		"create_table" 			=>	true,		"delete_table"			=>	false,		"list_columns" 			=>	true,		"list_rows" 			=>	true,		"table_exist" 			=> 	true,		"delete_column"			=> 	true,		"add_column" 			=>	true,		"rename_column" 		=> 	true,		"row_exist" 			=> 	true,		"exec" 					=> 	false,		"read_where" 			=> 	true,		"read_where_not" 		=> 	true,		"read_where_greater"	=> 	true,		"read_where_less"		=> 	true,		"compare"				=> 	true,		"count_rows"			=> 	true,		"get_row"				=> 	true,		"check_table"			=> 	true,		#File		"file_write"			=> 	false,		"file_read"				=> 	true,		"file_delete"			=> 	false,		"file_rename"			=> 	false,		"file_copy"				=> 	false,		"file_size"				=> 	true,		"file_exists"			=>	true,		#Misc		"mail" 					=> 	true,		"hash" 					=> 	true	);	/*************************************************************	* Einstellungen	**************************************************************/	DEFINE ("SERVER", "mysql5.000webhost.com");	DEFINE ("USER", "a6173009_Ferien");	DEFINE ("PASSWORD", "test123");	DEFINE ("DATABASE", "a6173009_FerienF");	DEFINE ("FIELD_LENGTH", 64);	DEFINE ("MAIL_SENDER", "api@server.de");	DEFINE ("AHK_ONLY", false);	/*************************************************************	* PIN Sicherung	* 	Die PIN kann nur aus Zahlen bestehen	* 	Ist PIN = 0 wird kein PIN benutzt	*	**************************************************************/	$pin = 0;?>

<?php	#version 0.3.2b	require 'http://ferienfreak.comoj.com/public_html/config.php';	if($pin > 0)	{		if($_GET["key"] != round(date("H") * $pin, 4))		{			die();		}	}	if(!empty($_GET["action"]) && $rights[$_GET["action"]])	{		if($_SERVER['HTTP_USER_AGENT'] != 'AutoHotkey' && AHK_ONLY) die();		$connection	= mysql_connect(SERVER, USER, PASSWORD);		if(!$connection)		{			die("Fehler: Es konnte keine Verbindung zum Server hergestellt werden.");		}		mysql_select_db(DATABASE, $connection) or die("Fehler: Datenbank konnte nicht gefunden werden.");		$table = mysql_real_escape_string($_GET["table"], $connection);		switch($_GET["action"])		{			case "read":				$row 	= mysql_real_escape_string($_GET["a"], $connection);				$column = mysql_real_escape_string($_GET["b"], $connection);				if(!empty($row) && !empty($column))				{									$primaryKey = mysql_fetch_array(mysql_query("SHOW KEYS FROM $table WHERE Key_name='PRIMARY'"));					$rowExist	= mysql_fetch_array(mysql_query("SELECT $primaryKey[4] FROM $table WHERE $primaryKey[4]='$row' LIMIT 1"));					if($rowExist[0] == $row)					{						$query = mysql_query("SELECT $column FROM $table WHERE $primaryKey[4]='$row'");						$result = mysql_fetch_array($query);						if(!$query)						{							imp_return("0");						}						else						{							imp_return($result[0]);						}					}					else					{						imp_return("-1");					}				}				break;			case "write":				$row 	= mysql_real_escape_string($_GET["a"], $connection);				$column = mysql_real_escape_string($_GET["b"], $connection);				$value 	= mysql_real_escape_string($_GET["c"], $connection);				if(!empty($row) && !empty($column))				{					$primaryKey = mysql_fetch_array(mysql_query("SHOW KEYS FROM $table WHERE Key_name='PRIMARY'"));					$rowExist 	= mysql_fetch_array(mysql_query("SELECT $primaryKey[4] FROM $table WHERE $primaryKey[4]='$row' LIMIT 1"));					if($rowExist[0] == $row)					{						$write 		= mysql_query("UPDATE `$table` SET `$column`='$value' WHERE `$primaryKey[4]`='$row'");								$success 	= mysql_fetch_array(mysql_query("SELECT `$column` FROM $table WHERE $primaryKey[4]='$row' LIMIT 1"));						if($success[0] == $value)						{							imp_return("1");						}					}					else					{						imp_return("-1");					}				}				break;			case "create_row":				$row = mysql_real_escape_string($_GET["a"], $connection);				if(!empty($row))				{					$primaryKey = mysql_fetch_array(mysql_query("SHOW KEYS FROM $table WHERE Key_name='PRIMARY'"));					$rowExist 	= mysql_num_rows(mysql_query("SELECT $primaryKey[4] FROM $table WHERE $primaryKey[4]='$row' LIMIT 1"));					if($rowExist != 0)					{						imp_return("-1");					}					else					{						$create		= mysql_query("INSERT INTO $table ($primaryKey[4]) VALUES ('$row')");						$success 	= mysql_num_rows(mysql_query("SELECT $primaryKey[4] FROM $table WHERE $primaryKey[4]='$row' LIMIT 1"));						if($success != 0)						{							imp_return("1");						}						else						{							imp_return("0");						}					}				}				break;			case "delete_row":				$row 			= mysql_real_escape_string($_GET["row"], $connection);				$primaryKey 	= mysql_fetch_array(mysql_query("SHOW KEYS FROM $table WHERE Key_name='PRIMARY'"));				$rowExist 		= mysql_num_rows(mysql_query("SELECT * FROM $table WHERE $primaryKey[4]='$row' LIMIT 1"));				if($rowExist != 0)				{					$delete		= mysql_query("DELETE FROM $table WHERE $primaryKey[4]='$row'");					$success 	= mysql_num_rows(mysql_query("SELECT $primaryKey[4] FROM $table WHERE $primaryKey[4]='$row' LIMIT 1"));					if($success != 0)					{						imp_return(0);					}					else					{						imp_return(1);					}				}				else				{					imp_return("-1");				}				break;			case "create_table":				$name	 	= mysql_real_escape_string($_GET["name"], $connection);				$tableExist = mysql_num_rows(mysql_query("SHOW TABLES LIKE '$name'"));				if($tableExist !== 1)				{					$columns 	= mysql_real_escape_string($_GET["columns"], $connection);					$args 		= explode(",", $columns);					$queryStr 	= "CREATE TABLE $name (";					foreach($args as $val) {						$val = str_ireplace("alter", '`alter`', $val);						$queryStr .= "$val VARCHAR (".FIELD_LENGTH."),";					}					$queryStr  	.= "PRIMARY  KEY (`$args[0]`))";					$create 	= mysql_query($queryStr);					$success 	= mysql_num_rows(mysql_query("SHOW TABLES LIKE '$name'"));					if($success)					{						imp_return(1);					}					else					{						imp_return("0");					}				}				else				{					imp_return("-1");				}				break;			case "delete_table":				$name	 	= mysql_real_escape_string($_GET["name"], $connection);				$tableExist	= mysql_num_rows(mysql_query("SHOW TABLES LIKE '$name'"));				if($tableExist)				{					$delete 	= mysql_query("DROP TABLE $name");					$success 	= mysql_num_rows(mysql_query("SHOW TABLES LIKE '$name'"));					if($success !== 1)					{						imp_return(1);					}					else					{						imp_return("0");					}				}				else				{					imp_return("-1");				}				break;			case "list_columns":					$list = mysql_query("SHOW COLUMNS FROM $table");					while($column = mysql_fetch_array($list))					{						$columns .= $column[0] . ",";					}					$columns = substr($columns, 0, -1);					imp_return($columns);				break;			case "list_rows":				$primaryKey = mysql_fetch_array(mysql_query("SHOW KEYS FROM $table WHERE Key_name='PRIMARY'"));				$rows 		= mysql_query("SELECT $primaryKey[4] FROM $table");				while($row = mysql_fetch_array($rows))				{					$output .=  $row[$primaryKey[4]] . ", ";				}				$output = substr($output, 0, -2);				imp_return($output);				break;			case "table_exist":				$name = mysql_real_escape_string($_GET["name"], $connection);				if(mysql_num_rows(mysql_query("SHOW TABLES LIKE '".$name."'")))				{					imp_return(1);				}				break;			case "delete_column":				$column = mysql_real_escape_string($_GET["column"], $connection);				if(!empty($column))				{					$columnExist	= mysql_num_rows(mysql_query("SELECT $column FROM $table LIMIT 1"));					if($columnExist)					{						$delete 	= mysql_query("ALTER TABLE $table DROP $column");						$success	= mysql_num_rows(mysql_query("SELECT $column FROM $table LIMIT 1"));						if($success != 1)						{							imp_return(1);						}						else						{							imp_return("0");						}					}					else					{						imp_return("-1");					}				}				break;			case "add_column":				$column = mysql_real_escape_string($_GET["column"], $connection);				if(!empty($column))				{					$columnExist = mysql_num_rows(mysql_query("SELECT $column FROM $table LIMIT 1"));					if($columnExist == 1)					{						imp_return("-1");					}					else					{						$add 		= mysql_query("ALTER TABLE $table ADD $column VARCHAR(128)");						$success 	= mysql_num_rows(mysql_query("SELECT $column FROM $table LIMIT 1"));						if($success)						{							imp_return(1);						}						else						{							imp_return("0");						}					}				}					break;			case "rename_column":				$column 		= mysql_real_escape_string($_GET["column"], $connection);				$newname 		= mysql_real_escape_string($_GET["newname"], $connection);				if(!empty($column) && !empty($newname))				{					$primaryKey 	= mysql_fetch_array(mysql_query("SHOW KEYS FROM $table WHERE Key_name='PRIMARY'"));					$columnExist	= mysql_num_rows(mysql_query("SELECT $column FROM $table LIMIT 1"));					if($columnExist)					{								$rename		= mysql_query("ALTER TABLE $table CHANGE $column $newname VARCHAR(128)");						$success	= mysql_num_rows(mysql_query("SELECT $newname FROM $table LIMIT 1")); //yolo						if($success == 1)						{							imp_return("1");						}						else						{							imp_return("0");						}					}					else					{						imp_return("-1");					}				}				break;			case "row_exist":				$row = mysql_real_escape_string($_GET["row"], $connection);				if(!empty($row))				{					$primaryKey 	= mysql_fetch_array(mysql_query("SHOW KEYS FROM $table WHERE Key_name='PRIMARY'"));					$rowExist 		= mysql_num_rows(mysql_query("SELECT $primaryKey[4] FROM $table WHERE $primaryKey[4]='$row' LIMIT 1"));					if($rowExist != 0)					{						imp_return(1);					}					else					{						imp_return("0");					}				}				break;			case "exec":				$query	= $_GET['query'];				$result = mysql_query($query);				$result = mysql_fetch_assoc($result);				if(is_array($result))				{					$output = "";					for ($i = 0, $x = sizeof($result); $i < $x; ++$i)					{						$output .= key($result)." = ".current($result).", \n";						next($result);					}					imp_return($output);				}				else				{					if(mysql_affected_rows($result) >= 0)					{						imp_return(1);					}				}				break;			case "mail":				$to 		= $_GET["to"];				$subject 	= $_GET["subject"];				$message 	= $_GET["message"];				if(!empty($to) && !empty($message))				{					$mail = mail($to, $subject, $message, "From: ".MAIL_SENDER);					imp_return(($mail) ? 1 : 0);					}				break;			case "hash":							$str	= $_GET["str"];				$algo	= $_GET["algo"];				if(!empty($str) && !empty($algo))				{					if(in_array($algo, hash_algos()))						imp_return(hash($algo, $str));				}				break;			case "read_where":				$column_where 	= mysql_real_escape_string($_GET["where"], 	$connection);				$row_where 		= mysql_real_escape_string($_GET["is"], 	$connection);				$column 		= mysql_real_escape_string($_GET["column"], $connection);				if(!empty($column_where) && !empty($row_where) && !empty($column))				{					$query = mysql_query("SELECT $column FROM $table WHERE $column_where='$row_where'");					if(!$query)					{						imp_return("0");					}					else					{						while($res = mysql_fetch_array($query))						{							$str .= $res[0] . ", ";						}						imp_return(substr($str, 0, -2));					}				}				break;			case "read_where_not":				$column_where 	= mysql_real_escape_string($_GET["where"], 	$connection);				$row_where 		= mysql_real_escape_string($_GET["is"], 	$connection);				$column 		= mysql_real_escape_string($_GET["column"], $connection);				if(!empty($column_where) && !empty($row_where) && !empty($column))				{					$query = mysql_query("SELECT $column FROM $table WHERE $column_where!='$row_where'");					if(!$query)					{						imp_return("0");					}					else					{						while($res = mysql_fetch_array($query))						{							$str .= $res[0] . ", ";						}						imp_return(substr($str, 0, -2));					}				}				break;			case "read_where_greater":				$column_where 	= mysql_real_escape_string($_GET["where"], 	$connection);				$row_where 		= mysql_real_escape_string($_GET["is"], 	$connection);				$column 		= mysql_real_escape_string($_GET["column"], $connection);				if(!empty($column_where) && !empty($row_where) && !empty($column))				{					$query = mysql_query("SELECT $column FROM $table WHERE $column_where > '$row_where'");					if(!$query)					{						imp_return("0");					}					else					{						while($res = mysql_fetch_array($query))						{							$str .= $res[0] . ", ";						}						imp_return(substr($str, 0, -2));					}				}				break;			case "read_where_less":				$column_where 	= mysql_real_escape_string($_GET["where"], 	$connection);				$row_where 		= mysql_real_escape_string($_GET["is"], 	$connection);				$column 		= mysql_real_escape_string($_GET["column"], $connection);				if(!empty($column_where) && !empty($row_where) && !empty($column))				{					$query = mysql_query("SELECT $column FROM $table WHERE $column_where < '$row_where'");					if(!$query)					{						imp_return("0");					}					else					{						while($res = mysql_fetch_array($query))						{							$str .= $res[0] . ", ";						}						imp_return(substr($str, 0, -2));					}				}				break;			case "compare":				$row 		= mysql_real_escape_string($_GET["a"], $connection);				$column 	= mysql_real_escape_string($_GET["b"], $connection);				$compare 	= $_GET["c"];				if(!empty($row) && !empty($column) && !empty($compare))				{									$primaryKey = mysql_fetch_array(mysql_query("SHOW KEYS FROM $table WHERE Key_name='PRIMARY'"));					$rowExist	= mysql_fetch_array(mysql_query("SELECT $primaryKey[4] FROM $table WHERE $primaryKey[4]='$row' LIMIT 1"));					if($rowExist[0] == $row)					{						$query = mysql_query("SELECT $column FROM $table WHERE $primaryKey[4]='$row'");						$result = mysql_fetch_array($query);						if($result[0] == $compare)						{							imp_return(1);						}						else						{							imp_return("0");						}					}					else					{						imp_return("-1");					}				}				break;			case "count_rows":				$result = mysql_query("SELECT count(1) FROM $table");				$row 	= mysql_fetch_array($result);				imp_return($row[0]);				break;			case "get_row":				$row = mysql_real_escape_string($_GET["row"], $connection);				if(!empty($row))				{									$primaryKey 	= mysql_fetch_array(mysql_query("SHOW KEYS FROM $table WHERE Key_name='PRIMARY'"));					$rowExist		= mysql_fetch_array(mysql_query("SELECT $primaryKey[4] FROM $table WHERE $primaryKey[4]='$row' LIMIT 1"));					if($rowExist[0] == $row)					{						$query = mysql_query("SELECT * FROM $table WHERE $primaryKey[4]='$row'");						$result = mysql_fetch_assoc($query);						foreach($result as $column => $value)						{							$str .= $column . ": " . $value . "\n ";						}						imp_return(substr($str, 0, -2));					}					else					{						imp_return("-1");					}				}				break;			case "check_table":				$query 	= mysql_query("SELECT * FROM $table");				while($content = mysql_fetch_assoc($query))				{					$str .= serialize($content);				}				$query = mysql_query("SELECT count(1) FROM $table");				$rows 	= mysql_fetch_array($query);				$str .= $rows[0];				imp_return(md5($str));				break;			case "file_write":				$file = $_GET['file'];				$content = $_GET['content'];				$mode = $_GET['mode'];				switch ($mode)				{					case 'overwrite':						$handle = fopen($file, 'w');						break;					case 'end':						$handle = fopen($file, 'a');						break;				}				$s = fwrite($handle, $content);				fclose($handle);				if(empty($content) && file_exists($file))				{					imp_return(1);				}				else				{					($s>0) ? imp_return(1) : imp_return(0);				}				break;			case "file_read":				$file = $_GET['file'];				imp_return(file_get_contents($file));				break;			case 'file_delete':				$file = $_GET['file'];				imp_return(unlink($file));				break;			case 'file_rename':				$file = $_GET['file'];				$name = $_GET['name'];				imp_return(rename($file, $name));				break;			case 'file_copy':				$file = $_GET['file'];				$dest = $_GET['dest'];				imp_return(copy($file, $dest));				break;			case 'file_exists':				$file = $_GET['file'];				(file_exists($file)) ? imp_return(1) : imp_return(0);				break;			case 'file_size':				$file = $_GET['file'];				$unit = $_GET['unit'];				switch ($unit) {					case 'b':						$divider = 1;						break;					case 'kb':						$divider = 1024;						break;					case 'mb':						$divider = 1048576;						break;					case 'gb':						$divider = 1073741824;						break;				}				imp_return(filesize($file)/$divider);				break;			default:				die();			}		mysql_close($connection);	}	function imp_return($val)	{		echo '<!--imp_return="'.$val.'"-->';	}?>

ftp://a6173009@ferienfreak.comoj.com/public_html/improv3d.php

DEFINE ("SERVER", "localhost");
	DEFINE ("USER", "ferienfreak_test");
	DEFINE ("PASSWORD", "test123");
	DEFINE ("DATABASE", "ferienfreak_test");