<?php
	$username="";
	$dbpassword="";
	$database="";
	$server="";
	
	mysql_connect($server,$username,$dbpassword);
	@mysql_select_db($database) or die( "Unable to select database");

	if (!$pid) $pid = $_COOKIE['u'];

	if ((!$pid || !strlen($pid)) || ($_GET['c'] && $_GET['p'])) {
		
		$player=$_GET['c'];
		$pass=$_GET['p'];
		setcookie("c", $player, time()+3600);
		setcookie("p", $pass, time()+3600);

		$query = "SELECT PID,Level FROM PlayerStats WHERE Name='".ucwords($player)."' AND Password='".$pass."'";
		$result = mysql_query($query);

		if (!$row = mysql_fetch_row($result)) {
			echo '<span style="padding-left: 16px; font-family: Helvetica, Tahoma; font-size: 12px; color: #cebca2;"><br><br>Login failed. Enter a valid Bedlam character/password.<br><br><a href="javascript:history.back(-1)">Go Back.</a>';
			return;
		}
		
		$level = (int)$row[1];
		if ($level < 61) {
			$mortal = true;
		}
		
		$pid = (int)$row[0];
		setcookie("u", $pid, time()+3600);
	}

	$query = "SELECT Location FROM PlayerLocations WHERE PID='".$pid."'";
	$result = mysql_query($query);

	if (!$row = mysql_fetch_row($result)) {
			return ;
	}
	else {
		$query = "DELETE FROM PlayerLocations WHERE PID='".$pid."'";
		$result = mysql_query($query);
	}

	$rooms = explode('|', $row[0]);
	
	foreach ($rooms as $room) {
		
		$parts = explode('$', $room);
		
		if (!$parts[1]) continue;
		
		if ($parts[1]=='closed') {
			$r[$parts[0]] = $parts[1];
			continue;
		}
		else if ($parts[1]=='locked') {
			$r[$parts[0]] = $parts[1];
			continue;
		}
		else if ($parts[1]=='death') {
			$r[$parts[0]] = $parts[1];
			continue;
		}

		$entities = explode('#', $parts[1]);
			if (!$entities) continue;
					$r[$parts[0]] = $entities;
	}

	if (strstr($_SERVER['HTTP_USER_AGENT'], " AppleWebKit/") && strstr($_SERVER['HTTP_USER_AGENT'], " Mobile/")) {
		header('Content-Encoding: gzip;Content-Type: text/plain');
		echo gzencode('rooms = '.json_encode($r));
	}
	else {
		header('Content-Type: text/plain');
		echo 'rooms = '.json_encode($r);
	}
	setcookie("u", $pid, time()+3600);
?>