<?php
$nick = addslashes(htmlentities($_GET['username']));
echo'
simple.memenu.enabled=1
feed.badge_decorations.album=Feed_Badges
image.library.questing.url=http://hredhotel.zapto.org/r63/c_images/Quests/
productdata.load.url=http://hredhotel.zapto.org/r63/gamedata/productdata.txt
logout.url=http://hredhotel.zapto.org/logout.php
viral.furni.post_type=appRequest
image.library.playlist.url=http://hredhotel.zapto.org/r63/c_images/playlist/
billboard.adwarning.left.url=AdWarningsUK/ad_warning_L.png
navigator.default.view=public
latencytest.interval=20000
furnidata.load.url=http://hredhotel.zapto.org/r63/gamedata/furnidata.txt
external.figurepartlist.txt=http://hredhotel.zapto.org/r63/gamedata/figuredata.xml
image.library.url=http://hredhotel.zapto.org/r63/c_images/
external.texts.txt=http://hredhotel.zapto.org/r63/gamedata/external_flash_texts.txt
latencytest.report.delta=100
flash.dynamic.download.name.template=%typeid%.swf
client.hotel_view.image=hotel_view_images_hq/reception.png
billboard.adwarning.right.url=AdWarningsUK/ad_warning_R.png
image.library.catalogue.url=http://hredhotel.zapto.org/r63/c_images/catalogue/
flash.dynamic.download.url=http://hredhotel.zapto.org/r63/dcr/hof_furni/
flash.dynamic.download.samples.template=mp3/sound_machine_sample_%typeid%.mp3
feed.badge_decorations.decoration_id=001
avatareditor.allowclubtryout=1
avatareditor.promohabbos=http://hredhotel.zapto.org/r63/gordon/r63/promo_users.xml
dynamic.download.name.template=hh_furni_xx_%typeid%.cct
private.image.library.url=http://hredhotel.zapto.org/r63/c_images/
logout.disconnect.url=http://hredhotel.zapto.org/client
hotelview.banner.url=http://hredhotel.zapto.org/r63/gamedata/banner.png
latencytest.report.index=3
dynamic.download.samples.template=%typeid%.cct
dynamic.download.url=http://hredhotel.zapto.org/r63/dcr/hof_furni/
client.allow.facebook.like=1
infostand.use.button.enabled=true
friendbar.stream.enabled=false
catalog.drag_and_drop=true
link.format.friendlist.pref=http://hredhotel.zapto.org/profilo/amici
club.membership.extend.vip.promotion.enabled=true
group.badge.url=http://hredhotel.zapto.org/r63/c_images/habbo-imaging/badge.php?badge=%imagerdata%.gif
room.dragging.always_center=0
roomenterad.habblet.enabled=true
questing.showDetailsForNextQuest=true
supersaverads.video.promo.development.mode=true
habboinfotool.url=/user_profile.php?name=
searchParamName=username&database=Stats&searchParamValue=
link.format.credits=http://hredhotel.zapto.org/crediti
friendbar.requests.enabled=true
lagWarningLog.enabled=1
hover.name.enabled=false
client.toolbar.static.enabled=true
questing.useWing=true
questing.startQuestDelayInSeconds=10
client.hotel_view.show_on_startup=1
cfh.usercategories.withnoharasser=101,102,103,104,105,106
catalog.furniture.animation=true
group.homepage.url=http://hredhotel.zapto.org/group_profile.php?id=%groupid%
roominfo.widget.enabled=1
navigator.always_open_after_login=0
client.minimail.embed.enabled=true
interstitial.enabled=false
friend_bar.helper.friend_finding.enabled=true
pixels.enabled=true
supersaverads.video.promo.enabled=false
welcome.screen.enabled=0
link.format.club=http://hredhotel.zapto.org/club.php
club.subscription.disabled=1
toolbar.new_additions.notification.enabled=true
cfh.usercategories.withharasser=101,102,103,104,105,106
client.fatal.error.url=http://hredhotel.zapto.org/client
embed.showInRoomInfo=true
moderatoractionlog.url=hredhotel.zapto.org/user_profile?name=
groupBadgeInfo.enabled=true
friendbar.stream.user.enabled=false
interstitial.interval=120000
purse.widget.currency.shells.enabled=1
interstitial.show.time=5000
roomadmin.url=http://hredhotel.zapto.org/room/
searchParamType=3&searchParamValue=
client.allow.external.links=1
menu.avatar.enabled=true
client.credits.embed.enabled=true
link.format.mail.compose=http://hredhotel.zapto.org/home#mail/compose/%recipientid%
link.format.mail.inbox=http://hredhotel.zapto.org/home#mail/inbox/%random%/
link.catelog.redeem.dialog.readmore.description=http://hredhotel.zapto.org/home.php
link.widget.memenu.settings.character=http://hredhotel.zapto.org/profilo/generale
room.rating.enable=1
navigator.colorlimit.yellow=50
interstitial.max.displays=8
questing.defaultCampaign=room_builder
trax.player.sample.memory.purge.enabled=1
friendbar.notifications.enabled=true
friendbar.stream.liking.enabled=false
menu.own_avatar.enabled=1
navigator.colorlimit.orange=80
link.format.collectibles=http://hredhotel.zapto.org/club.php
link.format.userpage=http://hredhotel.zapto.org/user_profile?id=%ID%
club.membership.extend.basic.promotion.enabled=true
avatar.widget.enabled=1
navigator.default_tab=official
client.logout.enabled=true
friendbar.stream.status.enabled=false
infostand.report.show=1
subscription.reminder.when.days.left=5
navigator.colorlimit.red=92
client.news.embed.enabled=true
purse.widget.enabled=1';
?>
ecco qui
@
Pietro Paolo
--- Aggiornato ---
<?php
include('core.php');
include('includes/session.php');
$ssocheck = mysql_query("select * from users where username = '".$rawname."' and password = '".$rawpass."' limit 1") or die(mysql_error());
$ssocheck2 = mysql_fetch_assoc($ssocheck);
if($ssocheck2['rank'] > "6") {
header("location:staffclient.php");
}
if($_SESSION['registernew'] == true){
require_once 'reg-beta.php';
exit;
}
if($logged_in){
require_once('includes/session.php');
} else {
header("location: clientutils.php?key=loginplease");
exit;
}
if($online !== "online" && $enable_status_image == "1"){
echo "<font color='white'><center><b>".$sitename." is offline</b></center></font>";
exit();
}
if($remote_ip == "hredhotel.zapto.org" || $remote_ip == "hredhotel.zapto.org" && $server_on_localhost == 1){
$ip = "hredhotel.zapto.org";
}
if(isset($_get['roomid']) && $_get['forwardid'] == "2"){
$roomid = $_get['roomid'];
$checksql = mysql_query("select id from rooms where id = '".$roomid."' limit 1");
$roomexists = mysql_num_rows($checksql);
if($roomexists > 0){
$forward = "1";
echo "<!-- forwarding to room ".$roomid." -->";
} else {
$forward = "0";
echo "<!-- room doesn't exist; not forwarding -->";
}
} else {
echo "<!-- no room forward requested, normal loader -->";
$forward = "0";
}
$myticket = GenerateTicket();
mysql_query("UPDATE users SET auth_ticket = '".$myticket."', ip_last = '".$remote_ip."' WHERE id = '".$my_id."' LIMIT 1") or die(mysql_error());
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en" xmlns:og="http://opengraphprotocol.org/schema/" xmlns:fb="http://www.facebook.com/2008/fbml">
<head>
<meta http-equiv="X-UA-Compatible" content="IE=7" />
<title>HRed Hotel: Client</title>
<script type="text/javascript">
var andSoItBegins = (new Date()).getTime();
</script>
<link rel="shortcut icon" href="favicon.ico" type="image/vnd.microsoft.icon" />
<link rel="alternate" type="application/rss+xml" title="Habbo: RSS" href="http://www.habbo.it/articles/rss.xml" />
<script src="flashclient/libs2.js" type="text/javascript"></script>
<script src="flashclient/visual.js" type="text/javascript"></script>
<script src="flashclient/libs.js" type="text/javascript"></script>
<script src="flashclient/common.js" type="text/javascript"></script>
<link rel="stylesheet" href="flashclient/style.css" type="text/css" />
<link rel="stylesheet" href="flashclient/bottons.css" type="text/css" />
<link rel="stylesheet" href="flashclient/boxes.css" type="text/css" />
<link rel="stylesheet" href="flashclient/tooltips.css" type="text/css" />
<link rel="stylesheet" href="flashclient/changepassword.css" type="text/css" />
<script type="text/javascript">
</script>
<script type="text/javascript">
var habboReqPath = "";
var habboStaticFilePath = "http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/252/web-gallery";
var habboImagerUrl = "http://www.habbo.com/habbo-imaging/";
var habboDefaultClientPopupUrl = "http://hredhotel.zapto.org/client.php";
</script>
<link rel="stylesheet" href="flashclient/habboclient.css" type="text/css" />
<link rel="stylesheet" href="flashclient/habboflashclient.css" type="text/css" />
<script src="flashclient/habboflashclient.js" type="text/javascript"></script>
<script type="text/javascript">
if (top == self) {
FlashHabboClient.cacheCheck();
}
var flashvars = {
"client.allow.cross.domain" : "1",
"client.notify.cross.domain" : "0",
"connection.info.host" : "25.59.83.192",
"connection.info.port" : "30000",
"site.url" : "25.59.83.192",
"url.prefix" : "25.59.83.192",
"client.reload.url" : "http:/hredhotel.zapto.org/client.php",
"client.fatal.error.url" : "http://hredhotel.zapto.org/client.php",
"client.connection.failed.url" : "http://hredhotel.zapto.org/client.php",
"external.variables.txt" : "http://hredhotel.zapto.org/r63/gamedata/external_variables.php",
"external.texts.txt" : "http://hredhotel.zapto.org/r63/gamedata/external_flash_texts.txt",
"productdata.load.url" : "http://hredhotel.zapto.org/r63/gamedata/productdata.txt",
"furnidata.load.url" : "http://hredhotel.zapto.org/r63/gamedata/furnidata.txt",
"use.sso.ticket" : "1",
"sso.ticket" : "<?php echo $myticket; ?>",
"processlog.enabled" : "0",
"account_id" : "0",
"client.starting" : "Attendi perfavore! HRed sta caricando.",
"flash.client.url" : "http://hredhotel.zapto.org/r63/dcr/hof_furni/",
"user.hash" : "",
"has.identity" : "1",
"flash.client.origin" : "popup"
};
var params = {
"base" : "http://hredhotel.zapto.org/r63/gordon/r63/",
"allowScriptAccess" : "always",
"menu" : "false"
};
if (!(HabbletLoader.needsFlashKbWorkaround())) {
params["wmode"] = "opaque";
}
FlashExternalInterface.signoutUrl = "http://hredhotel.zapto.org/logout.php";
Questo è il client.php e in un'altro risposta ti metto anche staffclient che sarebbe l'anti scamm
--- Aggiornato ---
<?php
include('datixdlol.php');
include('core.php');
include('includes/session.php');
$ssocheck = mysql_query("select * from users where username = '".$rawname."' and password = '".$rawpass."' limit 1") or die(mysql_error());
if($logged_in){
require_once('includes/session.php');
} else {
header("location: clientutils.php?key=loginplease");
exit;
}
if($online !== "online" && $enable_status_image == "1"){
echo "<font color='white'><center><b>".$sitename." is offline</b></center></font>";
exit();
}
if($online !== "online" && $enable_status_image == "1"){
echo "<font color='white'><center><b>".$sitename." is offline</b></center></font>";
exit();
}
if($remote_ip == "http://hredhotel.zapto.org" || $remote_ip == "http://hredhotel.zapto.org" && $server_on_localhost == 1){
$ip = "http://hredhotel.zapto.org";
}
if(isset($_get['roomid']) && $_get['forwardid'] == "2"){
$roomid = $_get['roomid'];
$checksql = mysql_query("select id from rooms where id = '".$roomid."' limit 1");
$roomexists = mysql_num_rows($checksql);
if($roomexists > 0){
$forward = "1";
echo "<!-- forwarding to room ".$roomid." -->";
} else {
$forward = "0";
echo "<!-- room doesn't exist; not forwarding -->";
}
} else {
echo "<!-- no room forward requested, normal loader -->";
$forward = "0";
}
$myticket = GenerateTicket();
mysql_query("UPDATE users SET auth_ticket = '".$myticket."', ip_last = '".$remote_ip."' WHERE id = '".$my_id."' LIMIT 1") or die(mysql_error());
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en" xmlns:og="http://opengraphprotocol.org/schema/" xmlns:fb="http://www.facebook.com/2008/fbml">
<head>
<meta http-equiv="X-UA-Compatible" content="IE=7" />
<title>HRed Hotel: Staff Client</title>
<script type="text/javascript">
var andSoItBegins = (new Date()).getTime();
</script>
<link rel="shortcut icon" href="favicon.ico" type="image/vnd.microsoft.icon" />
<link rel="alternate" type="application/rss+xml" title="Habbo: RSS" href="http://www.habbo.it/articles/rss.xml" />
<script src="flashclient/libs2.js" type="text/javascript"></script>
<script src="flashclient/visual.js" type="text/javascript"></script>
<script src="flashclient/libs.js" type="text/javascript"></script>
<script src="flashclient/common.js" type="text/javascript"></script>
<link rel="stylesheet" href="flashclient/style.css" type="text/css" />
<link rel="stylesheet" href="flashclient/bottons.css" type="text/css" />
<link rel="stylesheet" href="flashclient/boxes.css" type="text/css" />
<link rel="stylesheet" href="flashclient/tooltips.css" type="text/css" />
<link rel="stylesheet" href="flashclient/changepassword.css" type="text/css" />
<script type="text/javascript">
</script>
<script type="text/javascript">
var habboReqPath = "";
var habboStaticFilePath = "http://images.habbo.com/habboweb/63_1dc60c6d6ea6e089c6893ab4e0541ee0/252/web-gallery";
var habboImagerUrl = "http://www.habbo.com/habbo-imaging/";
var habboDefaultClientPopupUrl = "http://hredhotel.zapto.org/client.php";
</script>
<link rel="stylesheet" href="flashclient/habboclient.css" type="text/css" />
<link rel="stylesheet" href="flashclient/habboflashclient.css" type="text/css" />
<script src="flashclient/habboflashclient.js" type="text/javascript"></script>
<script type="text/javascript">
if (top == self) {
FlashHabboClient.cacheCheck();
}
var flashvars = {
"client.allow.cross.domain" : "1",
"client.notify.cross.domain" : "0",
"connection.info.host" : "25.59.83.192",
"connection.info.port" : "30000",
"site.url" : "25.59.83.192",
"url.prefix" : "25.59.83.192",
"client.reload.url" : "http:/hredhotel.zapto.org/client.php",
"client.fatal.error.url" : "http://hredhotel.zapto.org/client.php",
"client.connection.failed.url" : "http://hredhotel.zapto.org/client.php",
"external.variables.txt" : "http://hredhotel.zapto.org/r63/gamedata/external_variables.php",
"external.texts.txt" : "http://hredhotel.zapto.org/r63/gamedata/external_flash_texts.txt",
"productdata.load.url" : "http://hredhotel.zapto.org/r63/gamedata/productdata.txt",
"furnidata.load.url" : "http://hredhotel.zapto.org/r63/gamedata/furnidata.txt",
"use.sso.ticket" : "1",
"sso.ticket" : "<?php echo $myticket; ?>",
"processlog.enabled" : "0",
"account_id" : "0",
"client.starting" : "Attendi perfavore! HRed sta caricando.",
"flash.client.url" : "http://hredhotel.zapto.org/r63/dcr/hof_furni/",
"user.hash" : "",
"has.identity" : "1",
"flash.client.origin" : "popup"
};
Qui c'è anche clientstaff ..