real_escape_string($arg_email); $result = $db->query("SELECT jid, password FROM xmpp_user WHERE jid LIKE ? AND active='y' AND server_id=?", $dbmail, $isp_server_id); result_false($result->num_rows != 1); $user = $result->fetch_object(); // check for domain autologin api key $domain_key = 'f47kmm5Yh5hJzSws2KTS'; checkAuth($argv[1], $argv[2], $arg_password, $user->password, $domain_key); }catch(Exception $ex){ echo 0; exit(); } function result_false($cond = true){ if(!$cond) return; echo 0; exit(); } function result_true(){ echo 1; exit(); } function checkAuth($user, $domain, $pw_arg, $pw_db, $domain_key){ if(crypt($pw_arg, $pw_db) == $pw_db) result_true(); if($domain_key){ $datetime = new DateTime(); $datetime->setTimezone(new DateTimeZone("UTC")); for($t = $datetime->getTimestamp(); $t >= $datetime->getTimestamp()-30; $t--){ $pw_api = md5($domain.'@'.$domain_key.'@'.$user.'@'.$t); if($pw_api == $pw_arg) result_true(); } } result_false(); } ?>