0 && $iev < 4) $theme = 1;
$theme = MP::getSettingInt('theme', $theme);
$post = (isset($_SERVER['HTTP_USER_AGENT']) && strpos($_SERVER['HTTP_USER_AGENT'], 'Series60/3') === false) || ($iev < 4 && $iev == 0);
$lng = MP::initLocale();
MP::cookie('theme', $theme, time() + (86400 * 365));
function exceptions_error_handler($severity, $message, $filename, $lineno) {
throw new ErrorException($message, 0, $severity, $filename, $lineno);
}
set_error_handler('exceptions_error_handler');
include 'themes.php';
Themes::setTheme($theme);
$revoked = isset($_GET['revoked']);
$logout = false;
$wrong = isset($_GET['wrong']);
$user = null;
$nouser = true;
$phone = null;
if(isset($_GET['phone'])) {
$phone = $_GET['phone'];
} else if(isset($_POST['phone'])) {
$phone = $_POST['phone'];
}
if(isset($_COOKIE['user']))
$user = $_COOKIE['user'];
else if(isset($_SESSION['user']))
$user = $_SESSION['user'];
if(strpos(strval($user), '/') !== false || strpos(strval($user), '.') !== false) {
$user = null;
}
// Check session existance
$nouser = $user == null || empty($user) || strlen($user) < 32 || strlen($user) > 200 || !file_exists(sessionspath.$user.'.madeline');
function removeSession($logout=false) {
global $user;
global $nouser;
global $logout;
$nouser = true;
$logout = true;
MP::delcookie('user');
MP::delcookie('code');
try {
// Remove all session files
if(file_exists(sessionspath.$user.'.madeline')) {
if($logout) {
try {
$MP = MP::getMadelineAPI($user, true);
$MP->logout();
unset($MP);
} catch (Exception) {
}
}
try {
if(PHP_OS_FAMILY === "Linux") {
exec('kill -9 `ps -ef | grep -v grep | grep '.$user.'.madeline | awk \'{print $2}\'`');
}
} catch (Exception) {
}
MP::deleteSessionFile($user);
}
} catch (Exception $e) {
echo $e;
}
}
if((isset($_GET['logout']) || $revoked || $wrong) && !$nouser) {
removeSession(($_GET['logout'] ?? '') == '2');
}
function htmlStart() {
global $lng;
header("Content-Type: text/html; charset=utf-8");
echo ''.MP::x($lng['login']).'';
echo Themes::head();
// определение часового пояса
$iev = MP::getIEVersion();
if($iev == 0 || $iev > 4) {
$dtz = new DateTimeZone(date_default_timezone_get());
$t = new DateTime('now', $dtz);
$tof = $dtz->getOffset($t);
echo '';
}
echo '';
echo Themes::bodyStart();
echo 'MPGram Web
';
}
$MP = null;
if($user != null
&& !$logout
&& !$nouser
) {
// Already logged in
if(isset($_COOKIE['code']) && !empty($_COOKIE['code'])) {
header('Location: chats.php');
die();
} else {
$MP = MP::getMadelineAPI($user, true);
if($MP->getAuthorization() === 3) {
MP::cookie('code', '1', time() + (86400 * 365));
header('Location: chats.php');
die();
}
if($phone === null) {
unset($MP);
removeSession();
}
}
}
if($phone !== null) {
$p = $phone;
if(empty($p) || strlen($p) < 10 || !is_numeric(str_replace('-','',str_replace('+','', $p)))) {
header('Location: login.php?wrong=number');
die();
}
if(!isset($_SESSION['captcha_entered'])) {
if(!isset($_POST['c']) && !isset($_GET['c'])) {
htmlStart();
echo 'CAPTCHA:
';
echo '.')
';
echo '';
echo MP::x(''.$lng['logout'].'');
echo Themes::bodyEnd();
die();
} else {
$c = null;
if(isset($_POST['c'])) {
$c = $_POST['c'];
} else if(isset($_GET['c'])) {
$c = $_GET['c'];
}
$b = isset($_SESSION['captcha']);
if(!$b || strtolower($c) !== $_SESSION['captcha']) {
htmlStart();
if($b) unset($_SESSION['captcha']);
echo 'CAPTCHA:
';
echo '
';
echo '';
if($b) echo ''.MP::x($lng['wrong_captcha']).'';
echo Themes::bodyEnd();
die();
}
$_SESSION['captcha_entered'] = 1;
}
}
if(!isset($user) || $nouser) {
$user = rtrim(strtr(base64_encode(hash('sha384', sha1(md5($phone.rand(0,1000).random_bytes(6))).random_bytes(30), true)), '+/', '-_'), '=');
MP::cookie('user', $user, time() + (86400 * 365));
$MP = MP::getMadelineAPI($user, true);
htmlStart();
} else {
if(isset($_COOKIE['code']) && !empty($_COOKIE['code'])) {
unset($_SESSION['captcha_entered']);
header('Location: chats.php');
die();
} else if(isset($_POST['pass']) || isset($_GET['pass'])) {
$MP = MP::getMadelineAPI($user, true);
try {
$password = null;
if(isset($_POST['pass'])) {
$password = $_POST['pass'];
} else if(isset($_GET['pass'])) {
$password = $_GET['pass'];
}
$MP->complete2faLogin($password);
MP::cookie('code', '1', time() + (86400 * 365));
header('Location: chats.php');
die();
} catch (Exception $e) {
if(strpos($e->getMessage(), 'PASSWORD_HASH_INVALID') !== false) {
htmlStart();
echo MP::x($lng['pass_code']).':
';
echo '';
echo ''.MP::x($lng['password_hash_invalid']).'
';
echo Themes::bodyEnd();
die();
} else if(strpos($e->getMessage(), 'AUTH_RESTART') !== false/* || strpos($e->getMessage(), 'I\'m not waiting') !== false*/) {
} else {
echo '<![CDATA[';
echo $e;
echo ']]>';
die();
}
}
} else if(isset($_POST['code']) || isset($_GET['code'])) {
$code = null;
if(isset($_POST['code'])) {
$code = $_POST['code'];
} else if(isset($_GET['code'])) {
$code = $_GET['code'];
}
if(!empty($code) && is_numeric($code)) {
try {
$MP = MP::getMadelineAPI($user, true);
$a = $MP->completePhoneLogin($code);
$hash = null;
if(isset($a['phone_code_hash'])) {
$hash = $a['phone_code_hash'];
}
if(isset($a['_']) && $a['_'] === 'account.noPassword') {
htmlStart();
echo ''.MP::x($lng['no_pass_code']).'';
echo Themes::bodyEnd();
die();
} else if(isset($a['_']) && $a['_'] === 'account.password') {
htmlStart();
echo MP::x($lng['pass_code']).':
';
echo '';
echo Themes::bodyEnd();
die();
} else if(isset($a['_']) && $a['_'] === 'account.needSignup') {
htmlStart();
echo MP::x($lng['need_signup']);
echo Themes::bodyEnd();
die();
} else {
MP::cookie('code', '1', time() + (86400 * 365));
header('Location: chats.php');
die();
}
} catch (Exception $e) {
htmlStart();
if(strpos($e->getMessage(), 'PHONE_CODE_INVALID') !== false) {
echo MP::x(''.$lng['phone_code_invalid'].'
');
} else if(strpos($e->getMessage(), 'PHONE_CODE_EXPIRED') !== false) {
echo MP::x(''.$lng['phone_code_expired'].'
');
} else if(strpos($e->getMessage(), 'AUTH_RESTART') !== false) {
unset($hash);
} else {
echo MP::x(''.$lng['error'].'
');
echo $e->getMessage();
echo Themes::bodyEnd();
die();
}
}
}
} else {
$MP = MP::getMadelineAPI($user);
htmlStart();
}
}
// ввод кода
if(isset($hash)) {
try {
$MP->auth->resendCode(['phone' => $phone, 'phone_code_hash' => $hash]);
} catch (Exception $e) {
echo $e->getMessage();
echo Themes::bodyEnd();
die();
}
} else {
try {
$MP->phoneLogin($phone);
} catch (Exception $e) {
if(strpos($e->getMessage(), 'PHONE_NUMBER_INVALID') !== false) {
header('Location: login.php?wrong=number');
die();
} else {
echo $e->getMessage();
echo Themes::bodyEnd();
die();
}
}
}
echo MP::x($lng['phone_code']).':
';
echo '';
echo Themes::bodyEnd();
} else {
// ввод телефона
htmlStart();
//if($revoked) {
// echo MP::x('Ваша сессия истекла!
');
//}
echo MP::x($lng['phone_number']).':
';
echo '';
if($wrong) {
echo MP::x(''.$lng['wrong_number_format'].'
');
} else {
// echo MP::x(''.$lng['qr_login'].'');
}
echo '
';
echo Themes::bodyEnd();
}
?>