apprentice self-registration completed
[brisk.git] / web / index_wr.php
index 6c33baf..1d0b61e 100644 (file)
@@ -2,7 +2,10 @@
 /*
  *  brisk - index_wr.php
  *
- *  Copyright (C) 2006 matteo.nastasi@milug.org
+ *  Copyright (C) 2006-2015 Matteo Nastasi
+ *                          mailto: nastasi@alternativeoutput.it
+ *                                  matteo.nastasi@milug.org
+ *                          web: http://www.alternativeoutput.it
  *
  * This program is free software; you can redistribute it and/or modify
  * it under the terms of the GNU General Public License as published by
  * not, write to the Free Software Foundation, Inc, 59 Temple Place -
  * Suite 330, Boston, MA 02111-1307, USA.
  *
- * $Id$
- *
  */
 
-require_once("brisk.phh");
-if (DEBUGGING == "local" && $_SERVER['REMOTE_ADDR'] != '127.0.0.1') {
-  echo "Debugging time!";
-  exit;
-}
-
-log_load($sess, "LOAD: index_wr.php");
-
-/*
- *  MAIN
- */
-log_wr($sess, 'COMM: '.$mesg);
-
-$sem = lock_data();
-$bri = &load_data();
-if (($user = &$bri->get_user($sess, &$idx)) == FALSE) {
-  echo "Get User Error";
-  log_wr($sess, "Get User Error");
-  unlock_data($sem);
-  exit;
-}
-$argz = explode('|', $mesg);
-
-if ($argz[0] == 'shutdown') {
-  log_auth($user_cur->sess, "Shutdown session.");
-  $tmp_sess = $user->sess;
-  $user->sess = "";
-  step_unproxy($tmp_sess);
-  $user->name = "";
-  $user->the_end = FALSE;
-  
-  log_rd2($user->sess, "AUTO LOGOUT.");
-  if ($user->subst == 'sitdown' || $user->stat == 'table')
-    $bri->room_wakeup(&$user);
-  else if ($user->subst == 'standup')
-    $bri->room_outstandup(&$user);
-  else
-    log_rd2($sess, "SHUTDOWN FROM WHAT ???");
-}
-/******************
- *                *
- *   STAT: room   *
- *                *
- ******************/
-else if ($user->stat == 'room') {
-  $user->laccwr = time();
-
-  if ($argz[0] == 'help') {
-    $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
-    $user->comm[$user->step % COMM_N] .=  show_notify(str_replace("\n", " ", $G_room_help), 0, "torna ai tavoli", 600, 500);
-
-    log_wr($sess, $user->comm[$user->step % COMM_N]);
-    $user->step_inc();
-    
-  }
-  else if ($argz[0] == 'about') {
-    $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
-    $user->comm[$user->step % COMM_N] .=  show_notify(str_replace("\n", " ", $G_room_about), 0, "torna ai tavoli", 400, 200);
-
-    log_wr($sess, $user->comm[$user->step % COMM_N]);
-    $user->step_inc();
-    
-  }
-  else if ($argz[0] == 'chatt') {
-    $bri->chatt_send(&$user,$mesg);
-  }
-  /**********************
-   *                    *
-   *   SUBST: standup   *
-   *                    *
-   **********************/
-  else if ($user->subst == 'standup') {
-   
-    if ($argz[0] == 'sitdown') {
-      if ($user->the_end == TRUE) {
-       log_wr($sess, "INFO:SKIP:argz == sitdown && the_end == TRUE => ignore request.");
-       unlock_data($sem);
-       exit;
-      }
-      /* TODO: refact to a function */
-      if ($user->bantime > $user->laccwr) {
-       $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
-       $user->comm[$user->step % COMM_N] .= show_notify("<br>Ti sei alzato da un tavolo senza il consenso degli altri giocatori. Dovrai aspettare ancora ".secstoword($user->bantime - $user->laccwr)." prima di poterti sedere nuovamente.", 2000, "Torna in piedi.", 400, 100);
-       
-       $user->step_inc();
-       save_data($bri);
-       unlock_data($sem);
-       exit;
-      }
-    
-      // Take parameters
-      $table_idx = $argz[1];
-      $table = &$bri->table[$table_idx];
-    
-      if ($table->player_n == PLAYERS_N) {
-       log_wr($sess, "WARN:FSM: Sitdown unreachable, table full.");
-       unlock_data($sem);
-       exit;
-      } 
-
-      // set new status
-      $user->subst = "sitdown";
-      $user->table = $table_idx;
-      $user->table_pos = $table->user_add($idx);
-      
-      if ($table->player_n == PLAYERS_N) {
-       // Start game for this table.
-       log_wr($sess, "Start game!");
-       
-       $table->init(&$bri->user);
-       $table->game_init(&$bri->user);
-       $curtime = time();
-       
-       for ($i = 0 ; $i < $table->player_n ; $i++) {
-         $user_cur = &$bri->user[$table->player[$i]];
-         log_wr($sess, "Pre if!");
-         
-         $ret = "";
-         $ret .= sprintf('gst.st_loc++; gst.st=%d; the_end=true; window.onunload = null ; document.location.assign("table.php");|', $user_cur->step+1);
-         
-         $user_cur->comm[$user_cur->step % COMM_N] = $ret;
-         $user_cur->trans_step = $user_cur->step + 1;
-         log_wr($sess, "TRANS ATTIVATO");
-         
-
-         $user_cur->stat_set('table');
-         $user_cur->subst = 'asta';
-         $user_cur->laccwr = $curtime;
-         $user_cur->step_inc();
-         
-         $user_cur->comm[$user_cur->step % COMM_N] = show_table(&$bri,&$user_cur,$user_cur->step+1,TRUE, FALSE);
-         $user_cur->step_inc();
-       }
-      }
-      
-      $bri->room_sitdown(&$user, $table_idx);
-    }
-    else if ($argz[0] == 'logout') {
-      $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
-      $user->comm[$user->step % COMM_N] .= sprintf('postact_logout();');
-      $user->the_end = TRUE;
-      $user->step_inc();
-    }
-  }
-  /**********************
-   *                    *
-   *   SUBST: sitdown   *
-   *                    *
-   **********************/
-  else if ($user->subst == 'sitdown') {
-    if ($argz[0] == 'wakeup') {
-      $bri->room_wakeup(&$user);      
-    }
-    else if ($argz[0] == 'logout') {
-      $bri->room_wakeup(&$user);      
-      $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
-      $user->comm[$user->step % COMM_N] .= sprintf('postact_logout();');
-      $user->the_end = TRUE;
-      $user->step_inc();
-    }
-  }
-}
-/*********************
- *                   *
- *    STAT: table    *
- *                   *
- *********************/
-else if ($user->stat == 'table') {
-  $user->laccwr = time();
-  $table = &$bri->table[$user->table];
-
-  if ($argz[0] == 'tableinfo') {
-    log_wr($sess, "PER DI TABLEINFO");
-    $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
-    $user->comm[$user->step % COMM_N] .= show_table_info(&$bri, &$table, $user->table_pos);
-    log_wr($sess, $user->comm[$user->step % COMM_N]);
-    $user->step_inc();
-  }
-  else if ($argz[0] == 'chatt') {
-    $bri->chatt_send(&$user,$mesg);
-  }
-  else if ($argz[0] == 'logout') {
-    $remcalc = $argz[1];
-
-    if ($user->exitislock == TRUE) {
-      $remcalc++;
-      $user->exitislock = FALSE;
+$mlang_indwr = array( 'unknownerr'    => array( 'it' => 'errore sconosciuto',
+                                                'en' => 'unknown error'),
+                      'btn_backtotab' => array( 'it' => 'Torna ai tavoli.',
+                                                'en' => 'Back to tables.' ),
+                      'warrrepl'  => array( 'it' => '<br>Il nominativo &egrave; stato inoltrato all\'amministratore.<br><br>Nell\'arco di pochi giorni verr&agrave;<br><br>notificata al garantito l\'avvenuta registrazione.',
+                                            'en' => '<br>The subscription was forwarded to the administrator.<br><br>In a few days we will notify<br><br>your friend the occurred registration.'),
+                      'btn_close' => array( 'it' => 'chiudi',
+                                            'en' => 'close' ),
+                      'commerr' => array( 'it' => '<b>E\' occorso un errore durante il salvataggio, riprova o contatta l\'amministratore.</b>',
+                                          'en' => '<b>An error was occurred during the saving, try again or contact the administrator.</b>'),
+                      'coerrdb' => array( 'it' => '<b>Il database è temporaneamente irraggiungibile, riprova più tardi o contatta l\'amministratore.</b>',
+                                          'en' => '<b>The database is temporarly unavailable, retry to later or conctact the administrator.</b>'),
+                      'warrmust' => array( 'it' => '<b>Per autenticare qualcuno devi a tua volta essere autenticato e certificato.</b>',
+                                           'en' => 'To authenticate somebody you have to be authenticated and certified yourown'),
+                      'mesgrepl' => array( 'it' => '<br><br>Il messaggio &egrave; stato inoltrato all\'amministratore.',
+                                           'en' => '<br><br>The message was forwarded to the administrator'),
+                      'mesgmust' => array( 'it' => '<b>Per mandare messaggi all\'amministratore devi essere autenticato.</b>',
+                                           'en' => 'To send a message to the administrator you have to be authenticated'),
+                      'shutmsg'  => array( 'it' => '<b>Il server sta per essere riavviato, non possono avere inizio nuove partite.</b>',
+                                           'en' => '<b>The server is going to be rebooted, new games are not allowed.</b>'),
+                      'mustauth' => array( 'it' => '<b>Il tavolo a cui volevi sederti richiede autentifica.</b>',
+                                           'en' => '<b>The table where you want to sit require authentication</b>'),
+                      'mustcert' => array( 'it' => '<b>Il tavolo a cui volevi sederti richiede autentifica e certificazione.</b>',
+                                           'en' => '<b>The table where you want to sit require authentication and certification</b>'),
+                      'tabwait'=> array( 'it' => '<b>Il tavolo si &egrave; appena liberato, ci si potr&agrave; sedere tra %d secondi.',
+                                           'en' => '<b>The table is only just opened, you will sit down in %d seconds.'),
+                      'mustfirst'=> array( 'it' => '<b>Il tuo utente può sedersi al tavolo solo per primo.</b>',
+                                           'en' => '<b>Your can sit down as first user only.' ),
+                      'pollmust' => array( 'it' => '<b>Per partecipare al sondaggio devi essere autenticato.</b>',
+                                           'en' => '<b>To vote for the poll you have to be authenticated</b>'),
+                      'pollnone' => array( 'it' => '<br><br>Al momento non è attivo alcun sondaggio.',
+                                           'en' => '<br><br>At this moment no polls are active.'),
+                      'pollchoo' => array( 'it' => '<br><br>Non hai espresso nessuna preferenza.',
+                                           'en' => '<br><br>You don\'t choose any preference, do it'),
+                      'pollagai' => array( 'it' => '<br>Per questo sondaggio hai già votato.<br><br>Non si può esprimere la propria preferenza più di una volta.',
+                                           'en' => '<br>You just express your preference about this poll.<br><br>You cannot do it again.'),
+                      'pollrec'  => array ('it' => '<br><br>Il tuo voto è stato registrato.',
+                                           'en' => '<br><br>Your vote had be stored.'),
+                      'badwake_a'=> array( 'it' => '<br>Ti sei alzato da un tavolo senza il consenso degli altri giocatori.<br><br>Dovrai aspettare ancora ',
+                                           'en' => '<br>You stand up without the permission of the other players.<br><br>You will wait '),
+                      'badwake_b'=> array( 'it' => ' prima di poterti sedere nuovamente.',
+                                           'en' => ' before you can sit down again.'),
+                      'btn_stays'=> array( 'it' => 'resta in piedi.',
+                                           'en' => 'stay standing.'),
+                      'badsit_a' => array( 'it' => '<br>Tu o qualcuno col tuo stesso indirizzo IP si è alzato da un tavolo senza il consenso degli altri giocatori.<br><br>Dovrai aspettare ancora ',
+                                           'en' => '<br>You or someone with your same IP address is standing up from a table without the permission of the other players <br><br>You will wait '),
+                      'badsit_b' => array( 'it' => ' prima di poterti sedere nuovamente.<br><br>Se non sei stato tu ad alzarti e possiedi un login con password, autenticandoti con quello, potrai accedere.',
+                                           'en' => ' before you can sit down again. If you don\'t leave the table and you have a login with a password, authenticating with this one you will access'),
+                      'nu_netguard' => array('it' => "Di recente è già arrivata una richiesta da un indirizzo IP simile al tuo, riprova tra qualche tempo.",
+                                             'en' => "EN di recente è già arrivata una richiesta da un indirizzo IP simile al tuo, riprova tra qualche tempo."),
+                      'nu_unkerr' => array('it' => "Si è verificato un errore inatteso, contattare l'amministratore.",
+                                           'en' => "EN Si è verificato un errore inatteso, contattare l'amministratore."),
+                      'nu_loginau' => array('it' => "login già in uso",
+                                            'en' => "login already in use"),
+                      'nu_emailau' => array('it' => "email già utilizzata",
+                                            'en' => "email already in use"),
+                      'nu_msubj' => array( 'it' => 'Brisk: verifica email',
+                                           'en' => 'Brisk: email verification'),
+                      // %s(guar) %s(login) %s(baseurl) %d(code) %s(hash)
+                      'nu_mtext' => array( 'it' =>
+'Ciao, sono l\' amministratore del sito di Brisk.
+
+L\' utente \'%s\' ha garantito per te col nickname \'%s\',
+vai al link: <%s>
+per confermare il tuo indirizzo di posta elettronica.
+
+Ciò è necessario per ottenere la password.
+
+Saluti e buone partite, mop.',
+                                           'en' => 'EN mtext [%s] [%s] [%s]'),
+                      'nu_mhtml' => array( 'it' => 'Ciao, sono l\' amministratore del sito di Brisk.<br><br>
+L\' utente \'%s\' ha garantito per te col nickname \'%s\',<br>
+<a href="%s">clicca qui</a> per confermare il tuo indirizzo di posta elettronica.<br><br>
+Ciò è necessario per ottenere la password.<br><br>
+Saluti e buone partite, mop.<br>',
+                                           'en' => 'EN mhtml [%s] [%s] [%s]'),
+
+                      'ap_mtext' => array( 'it' =>
+'Ciao, sono l\' amministratore del sito di Brisk.
+
+Ti sei registrato col nickname \'%s\',
+vai al link: <%s>
+per confermare il tuo indirizzo di posta elettronica.
+
+Ciò è necessario per ottenere la password.
+
+Saluti e buone partite, mop.',
+                                           'en' => 'EN mtext [%s] [%s]'),
+
+                      'ap_mhtml' => array( 'it' => 'Ciao, sono l\' amministratore del sito di Brisk.<br><br>
+Ti sei registrato col nickname \'%s\',<br>
+<a href="%s">clicca qui</a> per confermare il tuo indirizzo di posta elettronica.<br><br>
+Ciò è necessario per ottenere la password.<br><br>
+Saluti e buone partite, mop.<br>',
+                                           'en' => 'EN mhtml [%s] [%s]'),
+                      );
+
+define('LICMGR_CHO_ACCEPT', 0);
+define('LICMGR_CHO_REFUSE', 1);
+define('LICMGR_CHO_AFTER',  2);
+
+function index_wr_main(&$brisk, $remote_addr_full, $get, $post, $cookie)
+{
+    GLOBAL $G_domain, $G_webbase, $G_mail_seed;
+    GLOBAL $G_shutdown, $G_alarm_passwd, $G_ban_list, $G_black_list, $G_lang, $G_room_help, $G_room_about;
+    GLOBAL $G_room_passwdhowto, $mlang_indwr;
+    GLOBAL $G_tos_vers;
+
+    log_load("index_wr.php");
+    $remote_addr = addrtoipv4($remote_addr_full);
+    $remote_ip = ip2int($remote_addr);
+
+    if (($mesg = gpcs_var('mesg', $get, $post, $cookie)) === FALSE)
+        unset($mesg);
+
+    if (($cl_step = gpcs_var('stp', $get, NULL, NULL)) === FALSE)
+        $cl_step = -2;
+
+    if (($sess = gpcs_var('sess', $get, $post, $cookie)) === FALSE)
+        $sess = "";
+
+
+    if (DEBUGGING == "local" && $remote_addr != '127.0.0.1') {
+        echo "Debugging time!";
+        return (FALSE);
     }
 
-    $logout_cont = TRUE;
-    if ($remcalc >= 3) {
-      $lockcalc = $table->exitlock_calc(&$bri->user, $user->table_pos);
-      if ($lockcalc < 3) {
-       $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
-       $user->comm[$user->step % COMM_N] .= $table->exitlock_show(&$bri->user, $user->table_pos);
-       $user->comm[$user->step % COMM_N] .=  show_notify("<br>I dati presenti sul server non erano allineati con quelli inviati dal tuo browser, adesso lo sono. Riprova ora.", 2000, "Torna alla partita.", 400, 100);
-       
-       log_wr($sess, $user->comm[$user->step % COMM_N]);
-       $user->step_inc();
-       $logout_cont = FALSE;
-      }
+    /*
+     *  MAIN
+     */
+    $is_spawn = FALSE;
+
+    log_wr(0, 'index_wr.php: COMM: '.xcapemesg($mesg));
+    log_wr('COMM: '.xcapemesg($mesg));
+
+    $curtime = time();
+    $dt = date("H:i ", $curtime);
+
+    if (($user = $brisk->get_user($sess, &$idx)) == FALSE) {
+        $argz = explode('|', xcapemesg($mesg));
+
+        if ($argz[0] == 'getchallenge') {
+            if (isset($get['cli_name']))
+                $cli_name = $get['cli_name'];
+            if (($a_sem = Challenges::lock_data(TRUE)) != FALSE) {
+                log_main("chal lock data success");
+
+                if (($chals = &Challenges::load_data()) != FALSE) {
+
+                    $token =  uniqid("");
+                    // echo '2|'.$argz[1].'|'.$token.'|'.$remote_addr.'|'.$curtime.'|';
+                    // exit;
+
+                    if (($login_new = validate_name(urldecode($cli_name))) != FALSE) {
+                        if ($chals->add($login_new, $token, $remote_addr, $curtime) != FALSE) {
+                            log_send("SUCCESS: token:".$token);
+                            echo '0|'.$token;
+                        }
+                        else {
+                            log_send("getchallenge FAILED");
+                            echo '1|';
+                        }
+                    }
+                    else {
+                        log_send("getchallenge FAILED");
+                        echo '1|';
+                    }
+                    if ($chals->ismod()) {
+                        Challenges::save_data(&$chals);
+                    }
+                }
+
+
+                Challenges::unlock_data($a_sem);
+            }
+            else {
+                echo "CHALLENGE LOCK FAILED\n";
+                return FALSE;
+            }
+        }
+        else if ($argz[0] == 'auth') {
+            printf("challenge|ok");
+        }
+        else if ($argz[0] == 'help') {
+            /* MLANG: "torna ai tavoli" */
+            echo show_notify(str_replace("\n", " ", $G_room_help[$G_lang]), 0, $mlang_indwr['btn_close'][$G_lang], 600, 500);
+        }
+        else if ($argz[0] == 'about') {
+            echo show_notify(str_replace("\n", " ", $G_room_about[$G_lang]), 0, $mlang_indwr['btn_close'][$G_lang], 400, 230);
+        }
+        else if ($argz[0] == 'passwdhowto') {
+            echo show_notify(str_replace("\n", " ", $G_room_passwdhowto[$G_lang]), 0, $mlang_indwr['btn_close'][$G_lang], 400, 200);
+        }
+        else if ($argz[0] == 'roadmap') {
+            echo show_notify(str_replace("\n", " ", $G_room_roadmap[$G_lang]), 0, $mlang_indwr['btn_close'][$G_lang], 400, 200);
+        }
+        else if ($argz[0] == 'placing') {
+            require_once("briskin5/Obj/briskin5.phh");
+            require_once("briskin5/Obj/placing.phh");
+
+            echo show_notify(str_replace("\n", " ", placings_show(FALSE)), 0, $mlang_indwr['btn_close'][$G_lang], 800, 600);
+        }
+        else if ($argz[0] == 'whysupport') {
+            echo show_notify(str_replace("\n", " ", $G_room_whysupport[$G_lang]), 0, $mlang_indwr['btn_close'][$G_lng], 400, 200);
+        }
+        else if ($argz[0] == 'apprentice') {
+            if (($cli_name = gpcs_var('cli_name', $get, $post, $cookie)) === FALSE)
+                $cli_name = "";
+
+            if (($cli_email = gpcs_var('cli_email', $get, $post, $cookie)) === FALSE)
+                $cli_email = "";
+
+            $mesg_to_user = "";
+
+            // check existence of username or email
+            $is_trans = FALSE;
+            do {
+                if (($bdb = BriskDB::create()) == FALSE)
+                    break;
+
+                // check IP address as previous requirer
+                if ($bdb->selfreg_check($remote_ip) == FALSE) {
+                    $mesg_to_user = $mlang_indwr['nu_netguard'][$G_lang];
+                    break;
+                }
+
+                $cli_name = urldecode($cli_name);
+                $cli_email = urldecode($cli_email);
+
+                // check for already used fields
+                if (($idret = $bdb->check_record_by_login_or_email($cli_name, $cli_email)) != 0) {
+                    $mesg_to_user = ($idret == 1 ?  $mlang_indwr['nu_loginau'][$G_lang] :
+                                     ($idret == 2 ? $mlang_indwr['nu_emailau'][$G_lang] :
+                                      $mlang_indwr['unknownerr'][$G_lang]));
+                    break;
+                }
+
+                $bdb->transaction('BEGIN');
+                $is_trans = TRUE;
+                //   insert the new user disabled with reason NU_MAILED
+                // FIXME: move 'no-guaran' user into configuration file
+                if (($usr_obj = $bdb->user_add($cli_name, 'THE_PASS', $cli_email,
+                                               USER_FLAG_TY_DISABLE | USER_FLAG_TY_APPR,
+                                               USER_DIS_REA_NU_MAILED, 10103)) == FALSE) {
+                    fprintf(STDERR, "ERROR: user_add FAILED\n");
+                    break;
+                }
+
+                if (($mail_code = $bdb->mail_reserve_code()) == FALSE) {
+                    fprintf(STDERR, "ERROR: mail reserve code FAILED\n");
+                    break;
+                }
+                $hash = md5($curtime . $G_alarm_passwd . $cli_name . $cli_email);
+
+                $confirm_page = sprintf("http://%s/%s/mailmgr.php?f_act=checkmail&f_code=%d&f_hash=%s",
+                                        $G_domain, $G_webbase, $mail_code, $hash);
+                $subj = $mlang_indwr['nu_msubj'][$G_lang];
+                $body_txt = sprintf($mlang_indwr['ap_mtext'][$G_lang],
+                                    $cli_name, $confirm_page);
+                $body_htm = sprintf($mlang_indwr['ap_mhtml'][$G_lang],
+                                    $cli_name, $confirm_page);
+
+                $mail_item = new MailDBItem($mail_code, $usr_obj->code, MAIL_TYP_CHECK,
+                                            $curtime, $subj, $body_txt, $body_htm, $hash);
+
+                // save the mail
+                if ($mail_item->store($bdb) == FALSE) {
+                    // store mail error
+                    fprintf(STDERR, "ERROR: store mail FAILED\n");
+                    break;
+                }
+
+                // check IP address as previous requirer
+                if ($bdb->selfreg_set($remote_ip) == FALSE) {
+                    $mesg_to_user = $mlang_indwr['nu_unkerr'][$G_lang];
+                    break;
+                }
+
+                if (brisk_mail($cli_email, $subj, $body_txt, $body_htm) == FALSE) {
+                    // mail error
+                    fprintf(STDERR, "ERROR: mail send FAILED\n");
+                    break;
+                }
+
+                $bdb->transaction('COMMIT');
+                fprintf(STDERR, "REMOTE: %d\n", $remote_ip);
+                echo "1";
+                return TRUE;
+            } while(FALSE);
+            $bdb->transaction('ROLLBACK');
+            echo "$mesg_to_user";
+            return FALSE;
+        }
+        else {
+            log_wr("Get User Error");
+            echo "Get User Error:" + $argz[0];
+            return FALSE;
+        }
+        return TRUE;
+    } // end if (($user = $brisk->get_user($sess, ... == FALSE) {
+
+    $brisk->sess_cur_set($user->sess);
+    $argz = explode('|', xcapemesg($mesg));
+
+    log_wr('POSTSPLIT: '.$argz[0]);
+
+    // LACC UPDATED
+    $user->lacc = $curtime;
+    if ($user->cl_step < $cl_step) {
+        log_step(sprintf("%s|%s|%d|%d|%d|%d", $user->sess, $user->name, $user->step, $user->cl_step, $cl_step, $user->step - $user->cl_step));
+        $user->cl_step = $cl_step;
     }
-    else 
-      $user->bantime = $user->laccwr + BAN_TIME;
-    
-    if ($logout_cont == TRUE) {
-      $bri->room_wakeup(&$user);
+
+    if ( ( ! $user->is_auth() ) &&
+        $brisk->ban_check($user->ip)) {
+        // TODO: find a way to add a nonblocking sleep(5) here
+        return (FALSE);
     }
-  }
-  else if ($argz[0] == 'exitlock') {
-    $user->exitislock = ($user->exitislock == TRUE ? FALSE : TRUE);
-    for ($ct = 0, $i = 0 ; $i < PLAYERS_N ; $i++) {    
-      $user_cur[$i] = &$bri->user[$table->player[$i]];
-      if ($user_cur[$i]->exitislock == FALSE)
-       $ct++;
+
+    if ($argz[0] == 'ping') {
+        log_wr("PING RECEIVED");
     }
-    for ($i = 0 ; $i < PLAYERS_N ; $i++) {
-      $ret = sprintf('gst.st = %d;', $user_cur[$i]->step+1);
-      $ret .= sprintf('exitlock_show(%d, %s);', $ct, 
-                    ($user_cur[$i]->exitislock ? 'true' : 'false'));
-      $user_cur[$i]->comm[$user_cur[$i]->step % COMM_N] = $ret;
-      log_wr($sess, $user_cur[$i]->comm[$user_cur[$i]->step % COMM_N]);
-      $user_cur[$i]->step_inc();
+    else if ($argz[0] == 'prefs') {
+        if ($argz[1] == 'save') {
+            if (!isset($post['prefs'])) {
+                return FALSE;
+            }
+
+            if (($prefs = Client_prefs::from_json($post['prefs'])) == FALSE) {
+                $prefs = Client_prefs::from_user($user);
+            }
+            $prefs->store($user, TRUE);
+        }
+        else { // reset case as default
+            $prefs = Client_prefs::from_user($user);
+        }
+        $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
+        $user->comm[$user->step % COMM_N] .=  sprintf('prefs_load(\'%s\', true, %s);', json_encode($prefs),
+                                                      'false');
+        $user->step_inc();
+
+        if ($argz[1] == 'save') {
+            if ($user->stat == 'room' && $user->subst == 'standup') {
+                $brisk->standup_update($user);
+            }
+            else if ($user->stat == 'room' && $user->subst == 'sitdown') {
+                log_main("chatt_send pre table update");
+                $brisk->table_update($user);
+                log_main("chatt_send post table update");
+            }
+        }
+        echo "1";
+        return TRUE;
     }
-  }
-  else if ($user->subst == 'asta') {
-    if ($argz[0] == 'lascio' && $user->handpt <= 2) {
-      $index_cur = $table->gstart % PLAYERS_N;
-    
-      log_wr($sess, sprintf("GIOCO FINITO !!!"));
-    
-      $table->mult *= 2; 
-      $table->old_reason = sprintf("Ha lasciato %s perche` aveva al massimo 2 punti.", $user->name);
-
-      $table->game_next();
-      $table->game_init(&$bri->user);
-    
-      for ($i = 0 ; $i < PLAYERS_N ; $i++) {   
-       $user_cur = &$bri->user[$table->player[$i]];
-
-       $ret = sprintf('gst.st = %d;', $user_cur->step+1);
-       $ret .= show_table(&$bri,&$user_cur,$user_cur->step+1, TRUE, TRUE);
-       $user_cur->comm[$user_cur->step % COMM_N] = $ret;
-       $user_cur->step_inc();      
-      }
+    else if ($argz[0] == 'shutdown') {
+        log_auth($user->sess, "Shutdown session.");
+
+        $user->the_end = TRUE;
+
+        log_rd2("AUTO LOGOUT.");
+        if ($user->subst == 'sitdown' || $user->stat == 'table')
+            $brisk->room_wakeup($user);
+        else if ($user->subst == 'standup')
+            $brisk->room_outstandup(&$user);
+        else {
+            log_rd2("SHUTDOWN FROM WHAT ???");
+        }
     }
-    else if ($argz[0] == 'asta') {
-      $again = TRUE;
-    
-      $index_cur = $table->gstart % PLAYERS_N;
-      if ($user->table_pos == $index_cur &&
-         $table->asta_pla[$index_cur]) {
-       $a_card = $argz[1];
-       $a_pnt  = $argz[2];
-      
-       log_wr($sess, "CI SIAMO  a_card ".$a_card."  asta_card ".$table->asta_card);
-      
-       // Abbandono dell'asta
-       if ($a_card <= -1) {
-         log_wr($sess, "Abbandona l'asta.");
-         $table->asta_pla[$index_cur] = FALSE;
-         $user->asta_card  = -1;
-         $table->asta_pla_n--;
-         $again = FALSE;
-       }
-       else if ($a_card <= 9) {
-         if ($a_card >= 0 && $a_card < 9 && $a_card > $table->asta_card)
-           $again = FALSE;
-         else if ($a_card == 9 && $a_pnt > ($table->asta_pnt >= 61 ? $table->asta_pnt : 60) && $a_pnt <= 120)
-           $again = FALSE;
-         
-
-         if ($again == FALSE) {
-           log_wr($sess, "NUOVI ORZI.");
-           $user->asta_card  = $a_card;
-           $table->asta_card = $a_card;
-           if ($a_card == 9) {
-             $user->asta_pnt   = $a_pnt;
-             $table->asta_pnt  = $a_pnt;
-           }
-         }
-       }
-      
-      
-      
-       if ($again) { // Qualcosa non andato bene, rifare
-         $ret = sprintf('gst.st = %d; asta_pnt_set(%d);', $user->step+1, 
-                         ($table->asta_pnt > 60 ? $table->asta_pnt + 1 : 61) );
-         $user->comm[$user->step % COMM_N] = $ret;
-         $user->step_inc();
-
-         log_wr($sess, "Ripetere.");
-       }
-       else {
-         /* next step */
-         $showst = "show_astat("; 
-         for ($i = 0 ; $i < PLAYERS_N ; $i++) {
-           $user_cur = &$bri->user[$table->player[$i]];
-           $showst .= sprintf("%s%d", ($i == 0 ? "" : ", "), 
-                              ($user_cur->asta_card < 9 ? $user_cur->asta_card : $user_cur->asta_pnt));
-         }
-         if (PLAYERS_N == 3)
-           $showst .= ",-2,-2";
-         $showst .= ");";
-
-         $maxcard = -2;
-         for ($i = 0 ; $i < PLAYERS_N ; $i++) {
-           $user_cur = &$bri->user[$table->player[$i]];
-           if ($maxcard < $user_cur->asta_card)
-             $maxcard = $user_cur->asta_card;
-         }
-
-         if (($table->asta_pla_n > ($maxcard > -1 ? 1 : 0)) &&
-             !($table->asta_card == 9 && $table->asta_pnt == 120)) {
-           log_wr($sess,"ALLOPPA QUI");
-           for ($i = 1 ; $i < PLAYERS_N ; $i++) {
-             $index_next = ($table->gstart + $i) % PLAYERS_N;
-             if ($table->asta_pla[$index_next]) {
-               log_wr($sess,"GSTART 1");
-               $table->gstart += $i;
-               break;
-             }
-           }
-         
-         
-           for ($i = 0 ; $i < PLAYERS_N ; $i++) {
-             $user_cur = &$bri->user[$table->player[$i]];
-             $ret = sprintf('gst.st = %d; %s', $user_cur->step+1, $showst);
-             if ($user_cur->table_pos == ($table->gstart % PLAYERS_N)) 
-               $ret .= sprintf('dispose_asta(%d,%d, %s); remark_on();', 
-                               $table->asta_card + 1, $table->asta_pnt+1, ($user_cur->handpt <= 2 ? "true" : "false"));
-             else
-               $ret .= sprintf('dispose_asta(%d,%d, %s); remark_off();',
-                               $table->asta_card + 1, -($table->asta_pnt+1), ($user_cur->handpt <= 2 ? "true" : "false"));
-             $user_cur->comm[$user_cur->step % COMM_N] = $ret;
-             $user_cur->step_inc();
-           }
-         }
-         else if ($table->asta_pla_n == 0) {
-           log_wr($sess, "PASSANO TUTTI!");
-
-           log_wr($sess, sprintf("GIOCO FINITO !!!"));
-         
-           $table->old_reason = "Hanno passato tutti.";
-           $table->mult *= 2; 
-
-           $table->game_next();
-           $table->game_init(&$bri->user);
-         
-           for ($i = 0 ; $i < PLAYERS_N ; $i++) {      
-             $user_cur = &$bri->user[$table->player[$i]];
-
-             $ret = sprintf('gst.st = %d;', $user_cur->step+1);
-             $ret .= show_table(&$bri,&$user_cur,$user_cur->step+1, TRUE, TRUE);
-             $user_cur->comm[$user_cur->step % COMM_N] = $ret;
-             $user_cur->step_inc();        
-           }
-         }
-         else {
-           log_wr($sess, "FINITA !");
-           // if a_pnt == 120 supergame ! else abbandono
-           if ($a_pnt == 120 || $user->asta_card != -1) {
-             $chooser = $index_cur;
-             for ($i = 1 ; $i < PLAYERS_N ; $i++) 
-               if ($i != $chooser)
-                 $table->asta_pla[$i] = FALSE;
-           }
-           else {
-             //"gst.st = ".($user->step+1)."; dispose_asta(".($table->asta_card + 1).",".-($table->asta_pnt).", true); remark_off();";
-             $user->comm[$user->step % COMM_N] = sprintf( "gst.st = %d; dispose_asta(%d, %d, false); remark_off();", $user->step+1, $table->asta_card + 1,-($table->asta_pnt));
-             $user->step_inc();
-             for ($i = 1 ; $i < PLAYERS_N ; $i++) {
-               $chooser = ($table->gstart + $i) % PLAYERS_N;
-               if ($table->asta_pla[$chooser]) {
-                 break;
-               }
-             }
-           }
-           $table->asta_win = $chooser;
-
-           for ($i = 0 ; $i < PLAYERS_N ; $i++) {
-             $user_cur = &$bri->user[$table->player[$i]];
-             $ret = sprintf('gst.st = %d; %s', $user_cur->step+1, $showst);
-
-             if ($i == $chooser) {
-               $ret .= "choose_seed(". $table->asta_card."); \$(\"asta\").style.visibility = \"hidden\"; remark_on();";
-             }
-             else {
-               $ret .= "remark_off();";
-             }
-
-             $user_cur->comm[$user_cur->step % COMM_N] = $ret;
-             $user_cur->step_inc();        
-           }
-         }
-       }
-      }
-      else {
-       log_wr($sess, "NON CI SIAMO");
-      }
+    else if ($argz[0] == 'warranty') {
+        if (($cli_name = gpcs_var('cli_name', $get, $post, $cookie)) === FALSE)
+            $cli_name = "";
+
+        if (($cli_email = gpcs_var('cli_email', $get, $post, $cookie)) === FALSE)
+            $cli_email = "";
+
+        $mesg_to_user = "";
+
+        log_wr("INFO:SKIP:argz == warranty name: [".$cli_name."] CERT: ".$user->is_cert());
+        if ($user->is_cert()) {
+            if (0 == 1) {
+                if (($wa_lock = Warrant::lock_data(TRUE)) != FALSE) {
+                    if (($fp = @fopen(LEGAL_PATH."/warrant.txt", 'a')) != FALSE) {
+                        /* Unix time | session | nickname | IP | where was | mesg */
+                        fwrite($fp, sprintf("%ld|%s|%s|%s|\n", $curtime, xcapelt($user->name), xcapelt(urldecode($cli_name)), xcapelt(urldecode($cli_email))));
+                        fclose($fp);
+                    }
+                    Warrant::unlock_data($wa_lock);
+                    $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
+                    /* MLANG: "<br>Il nominativo &egrave; stato inoltrato all\'amministratore.<br><br>Nell\'arco di pochi giorni vi verr&agrave;<br><br>notificata l\'avvenuta registrazione." */
+                    $user->comm[$user->step % COMM_N] .=  show_notify($mlang_indwr['warrrepl'][$G_lang], 0, $mlang_indwr['btn_close'][$G_lang], 400, 150);
+                    $user->step_inc();
+                    echo "1";
+                }
+                else {
+                    /* MLANG: "<b>E\' occorso un errore durante il salvataggio, riprova o contatta l\'amministratore.</b>" */
+                    $mesg_to_user = nickserv_msg($dt, $mlang_indwr['commerr'][$G_lang]);
+                }
+            } // 0 == 1
+            else {
+                // check existence of username or email
+                $is_trans = FALSE;
+                do {
+                    if (($bdb = BriskDB::create()) == FALSE)
+                        break;
+
+                    $cli_name = urldecode($cli_name);
+                    $cli_email = urldecode($cli_email);
+
+                    // check for already used fields
+                    if (($idret = $bdb->check_record_by_login_or_email($cli_name, $cli_email)) != 0) {
+                        $mesg_to_user = nickserv_msg($dt, ($idret == 1 ?  $mlang_indwr['nu_loginau'][$G_lang] :
+                                                           ($idret == 2 ? $mlang_indwr['nu_emailau'][$G_lang]
+                                                            : $mlang_indwr['unknownerr'][$G_lang])));
+                        break;
+                    }
+                    $bdb->transaction('BEGIN');
+                    $is_trans = TRUE;
+                    //   insert the new user disabled with reason NU_MAILED
+                    if (($usr_obj = $bdb->user_add($cli_name, 'THE_PASS', $cli_email,
+                                                   USER_FLAG_TY_DISABLE | USER_FLAG_TY_NORM,
+                                                   USER_DIS_REA_NU_MAILED, $user->code)) == FALSE) {
+                        fprintf(STDERR, "ERROR: user_add FAILED\n");
+                        break;
+                    }
+                    if (($mail_code = $bdb->mail_reserve_code()) == FALSE) {
+                        fprintf(STDERR, "ERROR: mail reserve code FAILED\n");
+                        break;
+                    }
+                    $hash = md5($curtime . $G_alarm_passwd . $cli_name . $cli_email);
+
+                    $confirm_page = sprintf("http://%s/%s/mailmgr.php?f_act=checkmail&f_code=%d&f_hash=%s",
+                                            $G_domain, $G_webbase, $mail_code, $hash);
+                    $subj = $mlang_indwr['nu_msubj'][$G_lang];
+                    $body_txt = sprintf($mlang_indwr['nu_mtext'][$G_lang],
+                                        $user->name, $cli_name, $confirm_page);
+                    $body_htm = sprintf($mlang_indwr['nu_mhtml'][$G_lang],
+                                        $user->name, $cli_name, $confirm_page);
+
+                    $mail_item = new MailDBItem($mail_code, $usr_obj->code, MAIL_TYP_CHECK,
+                                                $curtime, $subj, $body_txt, $body_htm, $hash);
+
+                    if (brisk_mail($cli_email, $subj, $body_txt, $body_htm) == FALSE) {
+                        // mail error
+                        fprintf(STDERR, "ERROR: mail send FAILED\n");
+                        break;
+                    }
+                    // save the mail
+                    if ($mail_item->store($bdb) == FALSE) {
+                        // store mail error
+                        fprintf(STDERR, "ERROR: store mail FAILED\n");
+                        break;
+                    }
+                    $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
+                    /* MLANG: "<br>Il nominativo &egrave; stato inoltrato all\'amministratore.<br><br>Nell\'arco di pochi giorni vi verr&agrave;<br><br>notificata l\'avvenuta registrazione." */
+                    $user->comm[$user->step % COMM_N] .=  show_notify($mlang_indwr['warrrepl'][$G_lang], 0, $mlang_indwr['btn_close'][$G_lang], 400, 150);
+                    $user->step_inc();
+                    echo "1";
+                    $bdb->transaction('COMMIT');
+                } while(FALSE);
+                $bdb->transaction('ROLLBACK');
+            }
+
+        }
+        else {
+            /* MLANG: "<b>Per autenticare qualcuno devi a tua volta essere autenticato.</b>" */
+            $mesg_to_user = nickserv_msg($dt, $mlang_indwr['warrmust'][$G_lang]);
+        }
+
+        if ($mesg_to_user != "") {
+            $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
+
+            $user->comm[$user->step % COMM_N] .= $mesg_to_user;
+            $user->step_inc();
+        }
     }
-    /*  asta::choose */
-    else if ($argz[0] == 'choose') {
-      if ($table->asta_win > -1 && 
-         $user->table_pos == $table->asta_win) {
-       $a_brisco = $argz[1];
-       if ($a_brisco >= 0 && $a_brisco < 40) {
-         $table->briscola = $a_brisco;
-         $table->friend   = $table->card[$a_brisco]->owner;
-         log_wr($sess,"GSTART 2");
-         $table->gstart = ($table->mazzo+1) % PLAYERS_N;
-         log_wr($sess, "Setta la briscola a ".$a_brisco);
-
-         $chooser = $table->asta_win;
-         $user_chooser = &$bri->user[$table->player[$chooser]];
-         for ($i = 0 ; $i < PLAYERS_N ; $i++) {
-           $user_cur = &$bri->user[$table->player[$i]];
-           $user_cur->subst = 'game';
-           $ret = sprintf('gst.st = %d; subst = "game";', $user_cur->step+1);
-         
-
-           /* bg of caller cell */
-           $ret .= briscola_show($bri, $table, $user_cur);
-
-           /* first gamer */
-           if ($i == ($table->gstart % PLAYERS_N))
-             $ret .= "is_my_time = true; remark_on();";
-           else
-             $ret .= "is_my_time = false; remark_off();";
-
-           $user_cur->comm[$user_cur->step % COMM_N] = $ret;
-           $user_cur->step_inc();          
-         }
-         /*
-            TUTTE LE VARIABILI DI STATO PER PASSARE A GIOCARE E LE
-            VAR PER PASSARE ALLA FASE DI GIOCO
-         */
-       
-       }
-      }
+    else if ($argz[0] == 'mesgtoadm') {
+        if (($cli_subj = gpcs_var('cli_subj', $get, $post, $cookie)) === FALSE)
+            $cli_subj = "";
+
+        if (($cli_mesg = gpcs_var('cli_mesg', $get, $post, $cookie)) === FALSE)
+            $cli_mesg = "";
+
+        $mesg_to_user = "";
+
+        log_wr("INFO:SKIP:argz == mesgtoadm name: [".$user->name."] AUTH: ".$user->is_auth());
+        if ($user->is_auth()) {
+            if (($wa_lock = Warrant::lock_data(TRUE)) != FALSE) {
+                if (($bdb = BriskDB::create()) != FALSE) {
+                    $bdb->users_load();
+
+                    if (($ema = $bdb->getmail($user->name)) != FALSE) {
+                        //  mail("nastasi",
+                        mail("brisk@alternativeoutput.it", urldecode($cli_subj), urldecode($cli_mesg), sprintf("From: %s <%s>", $user->name, $ema));
+                    }
+
+                    if (($fp = @fopen(LEGAL_PATH."/messages.txt", 'a')) != FALSE) {
+                        /* Unix time | session | nickname | IP | where was | mesg */
+                        fwrite($fp, sprintf("%ld|%s|%s|%s\n", $curtime, $user->name,
+                                            xcapelt(urldecode($cli_subj)), xcapelt(urldecode($cli_mesg))));
+                        fclose($fp);
+                    }
+                    Warrant::unlock_data($wa_lock);
+                    $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
+                    /* MLANG: "" */
+                    $user->comm[$user->step % COMM_N] .=  show_notify($mlang_indwr['mesgrepl'][$G_lang], 0, $mlang_indwr['btn_close'][$G_lang], 400, 110);
+                    $user->step_inc();
+                    echo "1";
+                }
+                else {
+                    /* MLANG: "<b>Il database è temporaneamente irraggiungibile, riprova più tardi o contatta l\'amministratore.</b>" */
+                    $mesg_to_user = nickserv_msg($dt, $mlang_indwr['coerrdb'][$G_lang]);
+                    $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
+                }
+            }
+            else {
+                /* MLANG: "<b>E\' occorso un errore durante il salvataggio, riprova o contatta l\'amministratore.</b>" */
+                $mesg_to_user = nickserv_msg($dt, $mlang_indwr['commerr'][$G_lang]);
+            }
+
+        }
+        else {
+            /* MLANG: "<b>Per autenticare qualcuno devi a tua volta essere autenticato.</b>" */
+            $mesg_to_user = nickserv_msg($dt, $mlang_indwr['mesgmust'][$G_lang]);
+        }
+
+        if ($mesg_to_user != "") {
+            $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
+
+            $user->comm[$user->step % COMM_N] .= $mesg_to_user;
+            $user->step_inc();
+        }
     }
-  }
-  else if ($user->subst == 'game') {
-    log_wr($sess, "state: table::game".$argz[0]);
-
-    if ($argz[0] == 'play') {
-      $a_play = $argz[1];
-      $a_x =    $argz[2];
-      $a_y =    $argz[3];
-
-      if (strpos($a_x, "px") != FALSE)
-       $a_x = substr($a_x,0,-2);
-      if (strpos($a_y, "px") != FALSE)
-       $a_y = substr($a_y,0,-2);
-
-      $loggo = sprintf("A_play %s, table_pos %d == %d, mazzo %d, gstart %d, card_stat %d, card_own %d",
-                      $a_play, $user->table_pos, ($table->gstart % PLAYERS_N),
-                      $table->mazzo, $table->gstart,
-                      $table->card[$a_play]->stat, $table->card[$a_play]->owner);
-      log_wr($sess, "CIC".$loggo);
-                         
-      /* se era il suo turno e la carta era sua ed era in mano */
-      if ($a_play >=0 && $a_play < 40 &&
-         ($user->table_pos == (($table->gstart + $table->turn) % PLAYERS_N)) &&
-         $table->card[$a_play]->stat == 'hand' &&
-         $table->card[$a_play]->owner == $user->table_pos) {
-       log_wr($sess, sprintf("User: %s Play: %d",$user->name, $a_play));
-
-       /* Change the card status. */
-       $table->card[$a_play]->play($a_x, $a_y);
-
-       /*
-        *  !!!! TURN INCREMENTED BEFORE !!!!
-        */
-       $turn_cur = ($table->gstart + $table->turn) % PLAYERS_N;
-       $table->turn++;
-
-       $card_play = sprintf("card_play(%d,%d,%d,%d);|",
-                            $user->table_pos, $a_play, $a_x, $a_y);
-       if (($table->turn % PLAYERS_N) != 0) {     /* manche not finished */
-         $turn_nex = ($table->gstart + $table->turn) % PLAYERS_N;
-
-         $player_cur = "remark_off();";
-         $player_nex = $card_play . "is_my_time = true; remark_on();";
-         $player_oth = $card_play;
-       }
-       else if ($table->turn <= (PLAYERS_N * 8)) { /* manche finished */
-         $winner = calculate_winner($table);
-         log_wr($sess,"GSTART 3");
-         $table->gstart = $winner;
-         $turn_nex = ($table->gstart + $table->turn) % PLAYERS_N;
-
-         log_wr($sess, sprintf("The winner is: [%d] [%s]", $winner, $bri->user[$table->player[$winner]]->name));
-         $card_take = sprintf("sleep(gst,2000);|cards_take(%d);|cards_hidetake($d);",
-                              $winner, $winner);
-         $player_cur = "remark_off();" . $card_take . "|"; 
-         if ($turn_cur != $turn_nex)
-           $player_nex = $card_play . $card_take . "|";
-         else
-           $player_nex = "";
-         if ($table->turn < (PLAYERS_N * 8))  /* game NOT finished */
-           $player_nex .= "is_my_time = true; remark_on();";
-         $player_oth = $card_play . $card_take;
-       }
-
-       log_wr($sess, sprintf("Turn Cur %d Turn Nex %d",$turn_cur, $turn_nex));
-       for ($i = 0 ; $i < PLAYERS_N ; $i++) {  
-         $user_cur = &$bri->user[$table->player[$i]];
-
-         $ret = sprintf('gst.st = %d; ', $user_cur->step+1);
-
-       
-         if ($i == $turn_cur) {
-           $ret .= $player_cur;          
-         }
-         if ($i == $turn_nex) {
-           $ret .= $player_nex;          
-         }
-         if ($i != $turn_cur && $i != $turn_nex) {
-           $ret .= $player_oth;
-         }
-
-         $retar[$i] = $ret;
-       }
 
 
 
+    else if ($argz[0] == 'poll') {
+        GLOBAL $G_with_poll, $G_poll_name;
+        if (($cli_choose = gpcs_var('cli_choose', $get, $post, $cookie)) === FALSE)
+            $cli_choose = "";
+
+        if (($cli_poll_name = gpcs_var('cli_poll_name', $get, $post, $cookie)) === FALSE)
+            $cli_poll_name = "";
+
+        $poll_lock = FALSE;
+        $mesg_to_user = "";
+
+        $fp = FALSE;
+        $echont = "0";
+
+  /*
+          DONE - autorizzato ?
+          DONE - ci sono poll attivi ?
+          - verifica che il poll_name del client sia uguale a quello sul server
+          DONE - lock
+          DONE - apro file r+ con fallback in w+
+          DONE - vedo se ha già votato
+          DONE - se si: messaggio di voto già dato
+          se no: accetto il voto e lo segno; messaggio
+          chiudo file
+  */
+
+        $dobreak = FALSE;
+        do {
+            log_wr("INFO:SKIP:argz == poll name: [".$cli_poll_name."] AUTH: ".$user->is_auth());
+            if ( ! $user->is_auth() ) {
+                // MLANG: <b>Per partecipare al sondaggio devi essere autenticato.</b>
+                $mesg_to_user = nickserv_msg($dt, $mlang_indwr['pollmust'][$G_lang]);
+                log_wr("break1");
+                break;
+            }
+
+            if ($G_with_poll == FALSE && $G_poll_name != FALSE && $G_poll_name != "") {
+                $mesg_to_user = show_notify($mlang_indwr['pollnone'][$G_lang], 0, $mlang_indwr['btn_close'][$G_lang], 400, 110);
+                log_wr("break2");
+                break;
+            }
+
+            if ($cli_choose == "" || !isset($cli_choose)) {
+                $mesg_to_user = show_notify($mlang_indwr['pollchoo'][$G_lang], 0, $mlang_indwr['btn_close'][$G_lang], 400, 110);
+                log_wr("break2.5");
+                break;
+            }
+
+            if (($poll_lock = Poll::lock_data(TRUE)) == FALSE) {
+                /* MLANG: "<b>E\' occorso un errore durante il salvataggio, riprova o contatta l\'amministratore.</b>" */
+                $mesg_to_user = nickserv_msg($dt, $mlang_indwr['commerr'][$G_lang]);
+                log_wr("break3");
+                break;
+            }
+
+            if (($fp = @fopen(LEGAL_PATH."/".$G_poll_name.".txt", 'r+')) == FALSE)
+                $fp = @fopen(LEGAL_PATH."/".$G_poll_name.".txt", 'w+');
+
+            if ($fp == FALSE) {
+                $mesg_to_user = nickserv_msg($dt, $mlang_indwr['commerr'][$G_lang]);
+                log_wr("break4");
+                break;
+            }
+
+            log_wr("poll: cp");
+            fseek($fp, 0);
+
+            log_wr("poll: cp2");
+            while (!feof($fp)) {
+                log_wr("poll: cp3");
+                $bf = fgets($fp, 4096);
+                log_wr("poll: cp3.1");
+                $arli = csplitter($bf, '|');
+                if (count($arli) == 0)
+                    break;
+                log_wr("poll: cp3.2");
+                if (strcasecmp($arli[1], $user->name) == 0) {
+                    $mesg_to_user = show_notify($mlang_indwr['pollagai'][$G_lang], 0, $mlang_indwr['btn_close'][$G_lang], 400, 110);
+                    $dobreak = TRUE;
+                    break;
+                }
+            }
+            log_wr("poll: cp4");
+
+            if ($dobreak) {
+                log_wr("break5");
+                break;
+            }
+
+            /* Unix time | nickname | choose */
+            fwrite($fp, sprintf("%ld|%s|%s\n", $curtime, xcapelt($user->name), xcapelt(urldecode($cli_choose))));
+            fflush($fp);
+            $mesg_to_user =  show_notify($mlang_indwr['pollrec'][$G_lang], 0, $mlang_indwr['btn_close'][$G_lang], 400, 110);
+            $echont = "1";
+            log_wr("poll: cp5");
+        } while (0);
+
+        if ($fp != FALSE)
+            fclose($fp);
+
+        if ($poll_lock != FALSE)
+            Poll::unlock_data($poll_lock);
+
+        if ($mesg_to_user != "") {
+            $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
+
+            $user->comm[$user->step % COMM_N] .= $mesg_to_user;
+            $user->step_inc();
+        }
+
+        echo "$echont";
+    }
 
-       if ($table->turn == (PLAYERS_N * 8)) { /* game finished */
-         log_wr($sess, sprintf("GIOCO FINITO !!!"));
-
-         /* ************************************************ */
-         /*    PRIMA LA PARTE PER LO SHOW DI CHI HA VINTO    */
-         /* ************************************************ */
-         calculate_points(&$table);
-
-         $table->game_next();
-         $table->game_init(&$bri->user);
-         
-         for ($i = 0 ; $i < PLAYERS_N ; $i++) {
-           $user_cur = &$bri->user[$table->player[$i]];
-           $retar[$i] .= show_table(&$bri,&$user_cur,$user_cur->step+1,TRUE, TRUE);
-         }
-       }
-
-
-       for ($i = 0 ; $i < PLAYERS_N ; $i++) {  
-         $user_cur = &$bri->user[$table->player[$i]];
+    /******************
+     *                *
+     *   STAT: room   *
+     *                *
+     ******************/
+    else if ($user->stat == 'room') {
+        $user->laccwr = time();
+
+        if ($argz[0] == 'help') {
+            $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
+            $user->comm[$user->step % COMM_N] .=  show_notify(str_replace("\n", " ", $G_room_help[$G_lang]), 0, $mlang_indwr['btn_backtotab'][$G_lang], 600, 500);
+
+            log_wr($user->comm[$user->step % COMM_N]);
+            $user->step_inc();
+
+        }
+        else if ($argz[0] == 'passwdhowto') {
+            $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
+            $user->comm[$user->step % COMM_N] .=  show_notify(str_replace("\n", " ", $G_room_passwdhowto[$G_lang]), 0, $mlang_indwr['btn_backtotab'][$G_lang], 600, 500);
+
+            log_wr($user->comm[$user->step % COMM_N]);
+            $user->step_inc();
+
+        }
+        else if ($argz[0] == 'splash') {
+            GLOBAL $G_with_splash, $G_splash_content, $G_splash_interval, $G_splash_idx;
+            GLOBAL $G_splash_w, $G_splash_h, $G_splash_timeout;
+            $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
+
+            $user->comm[$user->step % COMM_N] .=  show_notify_ex(str_replace("\n", " ", $G_splash_content[$G_lang]), 0, $mlang_indwr['btn_backtotab'][$G_lang], $G_splash_w, $G_splash_h, true, 0);
+
+            log_wr($user->comm[$user->step % COMM_N]);
+            $user->step_inc();
+        }
+        else if ($argz[0] == 'about') {
+            $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
+            $user->comm[$user->step % COMM_N] .=  show_notify(str_replace("\n", " ", $G_room_about[$G_lang]), 0, $mlang_indwr['btn_backtotab'][$G_lang], 400, 200);
+
+            log_wr($user->comm[$user->step % COMM_N]);
+            $user->step_inc();
+
+        }
+        else if ($argz[0] == 'placing') {
+            require_once("briskin5/Obj/briskin5.phh");
+            require_once("briskin5/Obj/placing.phh");
+
+            $user->comm[$user->step % COMM_N] =  "gst.st = ".($user->step+1)."; ";
+            $user->comm[$user->step % COMM_N] .= show_notify_ex(str_replace("\n", " ", placings_show($user)), 0, $mlang_indwr['btn_backtotab'][$G_lang], 800, 600, TRUE, 0);
+
+            log_wr($user->comm[$user->step % COMM_N]);
+            $user->step_inc();
+        }
+        else if ($argz[0] == 'roadmap') {
+            $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
+            $user->comm[$user->step % COMM_N] .=  show_notify(str_replace("\n", " ", $G_room_roadmap[$G_lang]), 0, $mlang_indwr['btn_backtotab'][$G_lang], 400, 200);
+
+            log_wr($user->comm[$user->step % COMM_N]);
+            $user->step_inc();
+
+        }
+        else if ($argz[0] == 'whysupport') {
+            $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
+            $user->comm[$user->step % COMM_N] .=  show_notify(str_replace("\n", " ", $G_room_whysupport[$G_lang]), 0, $mlang_indwr['btn_backtotab'][$G_lang], 400, 200);
+
+            log_wr($user->comm[$user->step % COMM_N]);
+            $user->step_inc();
+
+        }
+        else if ($argz[0] == 'chatt') {
+            $brisk->chatt_send(&$user, xcapemesg($mesg));
+        }
+        else if ($argz[0] == 'tosmgr') {
+            // check IF is authnticated user, both terms of service versions matches
+            if ($user->is_auth() && count($argz) == 5) {
+                $f_type = $argz[1];      $f_code = $argz[2];
+                $f_tos_curr = $argz[3]; $f_tos_vers = $argz[4];
+
+                if ("$f_tos_curr" == $user->rec->tos_vers_get()  &&
+                    "$f_tos_vers" == "$G_tos_vers") {
+                    if ("$f_type" == "soft" || "$f_type" == "hard") {
+                        $res = 100;
+                        switch ($f_code) {
+                        case LICMGR_CHO_ACCEPT:
+                            $user->rec->tos_vers_set($G_tos_vers);
+                            $res = $user->tos_store();
+                            break;
+                        case LICMGR_CHO_REFUSE:
+                            $user->flags_set(USER_FLAG_TY_DISABLE, USER_FLAG_TY_ALL);
+                            $user->rec->disa_reas_set(USER_DIS_REA_LICENCE);
+                            $res = $user->state_store();
+
+                            $user->comm[$user->step % COMM_N] = $user->blocking_error(TRUE);
+                            $user->the_end = TRUE;
+                            $user->step_inc();
+                            break;
+                        }
+                    }
+                }
+            }
+        }
+        /**********************
+         *                    *
+         *   SUBST: standup   *
+         *                    *
+         **********************/
+        else if ($user->subst == 'standup') {
+            if ($argz[0] == 'sitdown') {
+                log_wr("SITDOWN command");
+
+                if ($user->the_end == TRUE) {
+                    log_wr("INFO:SKIP:argz == sitdown && ->the_end == TRUE => ignore request.");
+                    return FALSE;
+                }
+
+                // Take parameters
+                $table_idx = (int)$argz[1];
+                $table = &$brisk->table[$table_idx];
+
+                $not_allowed_msg = "";
+                if ($G_shutdown) {
+                        $not_allowed_msg = nickserv_msg($dt, $mlang_indwr['shutmsg'][$G_lang]);
+                }
+                else if ($table->wakeup_time > $curtime) {
+                    $not_allowed_msg = nickserv_msg($dt, sprintf($mlang_indwr['tabwait'][$G_lang],
+                                                                 $table->wakeup_time - $curtime));
+                }
+                else if ($table->auth_type == TABLE_AUTH_TY_CERT && ( ! $user->is_cert() ) ) {
+                    $not_allowed_msg = nickserv_msg($dt, $mlang_indwr['mustcert'][$G_lang]);
+                }
+                else if ($table->auth_type == TABLE_AUTH_TY_AUTH && ( ! $user->is_auth() ) ) {
+                    $not_allowed_msg = nickserv_msg($dt, $mlang_indwr['mustauth'][$G_lang]);
+                }
+                else if ($user->flags & USER_FLAG_TY_FIRONLY && $table->player_n > 0) {
+                    $not_allowed_msg = nickserv_msg($dt, $mlang_indwr['mustfirst'][$G_lang]);
+                }
+                if ($not_allowed_msg != "") {
+                    $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ".$not_allowed_msg;
+                    $user->step_inc();
+                    return TRUE;
+                }
+
+                /* TODO: refact to a function */
+                // if ($user->bantime > $user->laccwr) {
+                require_once("Obj/hardban.phh");
+
+                if (($bantime = Hardbans::check(($user->is_auth() ? $user->name : FALSE),
+                                                $user->ip, $user->sess)) != -1) {
+                    $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
+                    /* MLANG: "<br>Ti sei alzato da un tavolo senza il consenso degli altri giocatori. <br><br>Dovrai aspettare ancora ".secstoword($user->bantime - $user->laccwr)." prima di poterti sedere nuovamente.", "resta in piedi.", "<br>Tu o qualcuno col tuo stesso indirizzo IP si è alzato da un tavolo senza il consenso degli altri giocatori.<br><br>Dovrai aspettare ancora ".secstoword($bantime - $user->laccwr)." prima di poterti sedere nuovamente.<br><br>Se non sei stato tu ad alzarti e possiedi un login con password, autenticandoti con quello, potrai accedere." */
+                    if ($user->is_auth()) {
+                        $user->comm[$user->step % COMM_N] .= show_notify($mlang_indwr['badwake_a'][$G_lang].secstoword($bantime - $user->laccwr).$mlang_indwr['badwake_b'][$G_lang], 2000, $mlang_indwr['btn_stays'][$G_lang], 400, 140);
+                    }
+                    else {
+                        $user->comm[$user->step % COMM_N] .= show_notify($mlang_indwr['badsit_a'][$G_lang].secstoword($bantime - $user->laccwr).$mlang_indwr['badsit_a'][$G_lang], 2000, $mlang_indwr['btn_stays'][$G_lang], 400, 180);
+                    }
+                    $user->step_inc();
+                    return TRUE;
+                }
+
+                if ($table->player_n == PLAYERS_N) {
+                    log_wr("WARN:FSM: Sitdown unreachable, table full.");
+                    return FALSE;
+                }
+
+                // set new status
+                $user->subst = "sitdown";
+                $user->table = $table_idx;
+                $user->table_pos = $table->user_add($idx);
+
+                log_wr("MOP before");
+
+                if ($table->player_n == PLAYERS_N) {
+                    require_once("briskin5/Obj/briskin5.phh");
+                    log_wr("MOP inall");
+
+                    // Start game for this table.
+                    log_wr("Start game!");
        
-         $user_cur->comm[$user_cur->step % COMM_N] = $retar[$i];
-         $user_cur->step_inc();            
-       }
-
-       log_wr($sess, sprintf("TURN: %d",$table->turn));
-       /* Have played all the players ? */
-       /* NO:  switch the focus and enable the next player to play. */
-      
-       /* YES: calculate who win and go to the next turn. */
-      }
+                    //
+                    //  START THE SPAWN HERE!!!!
+                    //
+
+                    // Create new spawned table
+                    // $bin5_sem = Bin5::lock_data(TRUE, $table_idx);
+                    $table_token = uniqid("");
+                    $brisk->table[$table_idx]->table_token = $table_token;
+                    $brisk->table[$table_idx]->table_start = $curtime;
+
+                    $plist = "$table_token|$user->table|$table->player_n";
+                    for ($i = 0 ; $i < $table->player_n ; $i++) {
+                        $plist .= '|'.$brisk->user[$table->player[$i]]->sess;
+                    }
+                    log_legal($curtime, $user->ip, $user, "STAT:CREATE_GAME", $plist);
+
+                    log_wr("pre new Bin5");
+                    if (($bin5 = new Bin5($brisk, $table_idx, $table_token, $get, $post, $cookie)) == FALSE)
+                        log_wr("bri create: FALSE");
+                    else
+                        log_wr("bri create: ".serialize($bin5));
+
+                    log_wr("pre init table");
+                    // init table
+                    $bin5_table = $bin5->table[0];
+                    $bin5_table->init($bin5->user);
+                    $bin5_table->game_init($bin5->user);
+                    //
+                    // Init spawned users.
+                    //
+                    //  MULTIGAME: here init of selected game instead of hardcabled briskin5 init (look subst status)
+                    //
+                    log_wr("game_init after");
+                    for ($i = 0 ; $i < $table->player_n ; $i++) {
+                        $bin5_user_cur = $bin5->user[$i];
+                        $user_cur = $brisk->user[$table->player[$i]];
+
+                        $bin5_user_cur->laccwr = $curtime;
+                        $bin5_user_cur->trans_step = $user_cur->step + 1;
+                        $bin5_user_cur->comm[$bin5_user_cur->step % COMM_N] = "";
+                        $bin5_user_cur->step_inc();
+                        $bin5_user_cur->comm[$bin5_user_cur->step % COMM_N] = show_table(&$bin5,&$bin5_user_cur,$bin5_user_cur->step+1,TRUE,FALSE);
+                        $bin5_user_cur->step_inc();
+
+                        log_wr("TRY PRESAVE: ".$bin5_user_cur->step." TRANS STEP: ".$bin5_user_cur->trans_step);
+
+                        log_wr("Pre if!");
+
+                        //          ARRAY_POP DISABLED
+                        //         // CHECK
+                        while (array_pop($user_cur->comm) != NULL);
+
+                        $user_cur->trans_step = $user_cur->step + 1;
+                        $user_cur->comm[$user_cur->step % COMM_N] = sprintf('gst.st_loc++; gst.st=%d; createCookie("table_idx", %d, 24*365, cookiepath); createCookie("table_token", "%s", 24*365, cookiepath); createCookie("lang", "%s", 24*365, cookiepath); xstm.stop(); window.onunload = null ; window.onbeforeunload = null ; document.location.assign("briskin5/index.php");|', $user_cur->step+1, $table_idx, $table_token, $G_lang);
+                        log_wr("TRANS ATTIVATO");
+
+                        $user_cur->stat_set('table');
+                        $user_cur->subst = 'asta';
+                        $user_cur->laccwr = $curtime;
+                        $user_cur->step_inc();
+                    }
+                    log_wr("presave bri");
+                    $brisk->match_add($table_idx, $bin5);
+                    log_wr("postsave bri");
+                }
+                // change room
+                $brisk->room_sitdown($user, $table_idx);
+
+                log_wr("MOP finish");
+            }
+            else if ($argz[0] == 'logout') {
+                $brisk->ghost_sess->push($curtime, $user->sess, GHOST_SESS_REAS_LOUT);
+                $user->the_end = TRUE;
+
+                if ($user->subst == 'sitdown') {
+                    log_load("ROOM WAKEUP");
+                    $brisk->room_wakeup($user);
+                }
+                else if ($user->subst == 'standup')
+                    $brisk->room_outstandup($user);
+                else
+                    log_rd2("LOGOUT FROM WHAT ???");
+            }
+        }
+        /**********************
+         *                    *
+         *   SUBST: sitdown   *
+         *                    *
+         **********************/
+        else if ($user->subst == 'sitdown') {
+            if ($user->the_end == TRUE) {
+                log_wr("INFO:SKIP:argz == sitdown && ->the_end == TRUE => ignore request.");
+                return FALSE;
+            }
+
+            if ($argz[0] == 'wakeup') {
+                $brisk->room_wakeup($user);
+            }
+            else if ($argz[0] == 'logout') {
+                $brisk->ghost_sess->push($curtime, $user->sess, GHOST_SESS_REAS_LOUT);
+                $user->the_end = TRUE;
+
+                $brisk->room_wakeup($user);
+            }
+        }
     }
-    else
-      log_wr($sess, "NOSENSE");
-  }
-}
-log_wr($sess, "before save data");
-save_data($bri);
 
-unlock_data($sem);
-exit;
+    return (FALSE);
+}
 ?>