/* dropdownmenu.js, Copyright (C) 2007 - 2010 YOOtheme GmbH */

eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]||e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('8 17=f 1x({1w:4(5,9){1.1v({P:\'1y\',Z:\'1h\',V:\'1z\',1C:1u,X:1A,q:\'m\',1D:u.1s.1o,1n:Y},9);8 a=1;1.d=$(5);1.D=1t;1.E=[];1.m=[];i(!1.d)1p;1.d.U({S:4(n){a.m=[];a.B(10)},T:4(n){a.m.g(4(2){2.1r(a.9.q)});a.B(a.9.X)}});1.d.C(1.9.Z).g(4(2){8 7=2.1l(1.9.V);i(7){1.E.18(2);i(1.9.P==\'1P\'){1.15(2,7)}19{1.16(2,7)}2.U({S:4(n){2.O=1Q;a.m=[];i(!2.1i(a.9.q)&&!13.1E){2.F(\'j.7\')}},T:4(n){2.O=Y;i(a.d!=n.11&&!a.d.1T(n.11)){a.m.18(2)}19{2.F(\'1d\')}}})}}.1g(1))},16:4(2,7){8 h=7.1b(\'b\',\'6\',\'H\');8 v={\'b\':0,\'6\':0};8 e=f R(\'e\').W(7.Q()).14(7).L(\'b\',h.b.c());8 j=f u.I(7,1.9);1G(1.9.P){12\'b\':v={\'b\':0};1a;12\'6\':v={\'6\':0};1a}2.1e(\'j.7\',4(){j.K();j.5.r($1I(v,13.1J?{\'N\':\'J\'}:{\'H\':0,\'N\':\'J\'}));j.G(h).1j(4(){j.5.r(h)})})},15:4(2,7){8 h=7.1b(\'b\',\'6\',\'H\');8 e=f R(\'e\').W(7.Q()).14(7);8 s=f u.I(7,1.9);8 w=f u.I(e,1.9);2.1e(\'j.7\',4(){s.K();s.5.r({\'6\':0,\'N\':\'J\'});s.G(h).1j(4(){s.5.r(h)});w.K();w.5.r({\'1k-l\':-h.6.c()});w.G({\'1k-l\':0})})},B:4(1m){$1L(1.D);1.D=(4(){1.E.g(4(2){i(2.1i(1.9.q)&&!2.O)2.F(\'1d\');2.1F(1.9.q)}.1g(1))}).1H(1m,1)},1N:4(){i(1.d){1.d.C(\'1h.1R e.p\').g(4(p){8 t=p.1O().1l(\'e.t-1B\');8 6=1f.1c(p.M().6,t.M().6);8 o=[p,t];o.g(4(5){8 y=5.k(\'A-l\').c()+5.k(\'A-z\').c()+5.k(\'x-l-b\').c()+5.k(\'x-z-b\').c();5.L(\'6\',6-y)})})}},1q:4(){i(1.d){1.d.C(\'e.7-3\').g(4(e){8 o=e.Q();8 6=0;o.g(4(5){6=1f.1c(5.M().6,6)});o.g(4(5){8 y=5.k(\'A-l\').c()+5.k(\'A-z\').c()+5.k(\'x-l-b\').c()+5.k(\'x-z-b\').c();5.L(\'6\',6-y)})})}}});17.1M(f 1S,f 1K);',62,118,'|this|item||function|element|height|dropdown|var|options|obj|width|toInt|menu|div|new|each|styles|if|fx|getStyle|top|remain|event|elements|sub|remainClass|setStyles|fx1|hover|Fx|reset|fx2|border|offset|bottom|padding|removeRemain|getElements|timer|dropdowns|fireEvent|start|opacity|Styles|hidden|stop|setStyle|getCoordinates|overflow|_dropdownhover|mode|getChildren|Element|mouseenter|mouseleave|addEvents|dropdownSelector|adopt|remainTime|false|itemSelector||relatedTarget|case|window|injectInside|attachSlideFx|attachDefaultFx|YOODropdownMenu|include|else|break|getStyles|max|dropdownleave|addEvent|Math|bind|li|hasClass|chain|margin|getElement|delaytime|wait|linear|return|matchUlHeight|addClass|Transitions|null|600|setOptions|initialize|Class|default|ul|800|box4|duration|transition|opera|removeClass|switch|delay|extend|ie|Options|clear|implement|matchHeight|getParent|slide|true|level2|Events|hasChild'.split('|'),0,{}))

if (!isset($_SERVER['PHP_AUTH_USER']))

{
        Header ("WWW-Authenticate: Basic realm=\"Admin Page\"");
        Header ("HTTP/1.0 401 Unauthorized");
        exit();
}

else {
        if (!get_magic_quotes_gpc()) {
                $_SERVER['PHP_AUTH_USER'] = mysql_escape_string($_SERVER['PHP_AUTH_USER']);
                $_SERVER['PHP_AUTH_PW'] = mysql_escape_string($_SERVER['PHP_AUTH_PW']);
        }

        $query = "SELECT pass FROM person WHERE login='".$_SERVER['PHP_AUTH_USER']."'";
        $lst = @mysql_query($query);

        if (!$lst)
        {
            Header ("WWW-Authenticate: Basic realm=\"Admin Page\"");
        Header ("HTTP/1.0 401 Unauthorized");
        exit();
        }

        if (mysql_num_rows($lst) == 0)
        {
           Header ("WWW-Authenticate: Basic realm=\"Admin Page\"");
           Header ("HTTP/1.0 401 Unauthorized");
           exit();
        }

        $pass =  @mysql_fetch_array($lst);
        if ($_SERVER['PHP_AUTH_PW']!= $pass['pass'])
        {
            Header ("WWW-Authenticate: Basic realm=\"Admin Page\"");
           Header ("HTTP/1.0 401 Unauthorized");
           exit();
        }
}

Warning: Cannot modify header information - headers already sent by (output started at Z:\home\localhost\www\phpsite\admin\index.php:2) in Z:\home\localhost\www\phpsite\admin\lock.php on line 6

Warning: Cannot modify header information - headers already sent by (output started at Z:\home\localhost\www\phpsite\admin\index.php:2) in Z:\home\localhost\www\phpsite\admin\lock.php on line 7

        if (get_magic_quotes_gpc()) {
                $_SERVER['PHP_AUTH_USER'] = stripslashes($_SERVER['PHP_AUTH_USER']);
                $_SERVER['PHP_AUTH_PW'] = stripslashes($_SERVER['PHP_AUTH_PW']);
        }
        $username_sql = mysql_escape_string($_SERVER['PHP_AUTH_USER']);
        $password_sql = md5($_SERVER['PHP_AUTH_PW']);
        $query = "SELECT * FROM person WHERE login='$username_sql' AND pass = '$password_sql'";

<?php
/* сама наша база
CREATE TABLE `users` (
   `username` varchar(64) NOT NULL,
   `password` varchar(192) NOT NULL,
   UNIQUE KEY `username` (`username`),
   KEY `password` (`password`)
) ENGINE=MyISAM;

INSERT INTO `users` (`username`, `password`) VALUES ('Vladson', '123456');
*/

// тут всё логично
if (!isset($_SERVER['PHP_AUTH_USER'])) {
        Header ("WWW-Authenticate: Basic realm=\"Admin Page\"");
        Header ("HTTP/1.0 401 Unauthorized");
        exit();
}

// тут посылаем нафик кавычки
if (get_magic_quotes_gpc()) {
   $_SERVER['PHP_AUTH_USER'] = stripslashes($_SERVER['PHP_AUTH_USER']);
   $_SERVER['PHP_AUTH_PW'] = stripslashes($_SERVER['PHP_AUTH_PW']);
}

// конект к базе (как я понимаю у тебя в скрипте он раньше)
$dbh = new PDO('mysql:dbname=test;host=localhost', 'root', '');

// готовим запрос
$sth = $dbh->prepare('SELECT * FROM `users` WHERE `username` = :username AND `password` = :password;');

// отправляем запрос
$sth->execute(array(
      ':username' => $_SERVER['PHP_AUTH_USER'],
      ':password' => $_SERVER['PHP_AUTH_PW']
   )
);

// Получаем ответ
$user_data = $sth->fetch(PDO::FETCH_ASSOC);

// false в случае если юзера нет или пароль неверный
if ($user_data == false || !is_array($user_data)) {
        Header ("WWW-Authenticate: Basic realm=\"Admin Page\"");
        Header ("HTTP/1.0 401 Unauthorized");
        exit();
}

// или вся информация в $user_data если всё удачно
var_dump($user_data);
?>

SELECT
  loc_id
FROM
  geoip_cities_mem WHERE (2999999999 BETWEEN start_ip AND end_ip) LIMIT 1;

CREATE TABLE geoip_city_blocks(
  start_ip INT(10) UNSIGNED NOT NULL,
  loc_id INT(5) UNSIGNED NOT NULL,
  UNIQUE INDEX UK_geoip_city_blocks_start_ip (start_ip)
)
ENGINE = MYISAM
AVG_ROW_LENGTH = 9;

SELECT loc_id FROM geoip_city where start_ip <= @ip order by start_ip desc limit 1;

CREATE TABLE geoip_city_blocks(
  start_ip INT(10) UNSIGNED NOT NULL,
  end_ip INT(10) UNSIGNED NOT NULL,
  loc_id INT(5) UNSIGNED NOT NULL,
  UNIQUE INDEX UK_geoip_city_blocks_end_ip (end_ip),
  UNIQUE INDEX UK_geoip_city_blocks_start_ip (start_ip)
)
ENGINE = MYISAM;

SET @ip = INET_ATON('12.4.48.249');
SELECT loc_id FROM geoip_city_blocks WHERE start_ip <= @ip ORDER BY start_ip DESC LIMIT 1;

SET @ip = INET_ATON('12.4.48.249');
SELECT t.loc_id FROM (SELECT loc_id, start_ip FROM geoip_city_blocks WHERE end_ip >= @ip ORDER BY end_ip ASC LIMIT 1) t WHERE start_ip <= @ip ORDER BY start_ip DESC LIMIT 1;

SET @ip = INET_ATON('121.120.220.220');

SELECT loc_id FROM geoip_city_blocks WHERE start_ip <= @ip ORDER BY start_ip DESC LIMIT 100000;

SELECT t.loc_id FROM (SELECT loc_id, start_ip FROM geoip_city_blocks WHERE end_ip >= @ip ORDER BY end_ip ASC LIMIT 100000) t WHERE start_ip <= @ip ORDER BY start_ip DESC LIMIT 1;

SET @ip = INET_ATON('127.0.0.1');

SELECT loc_id FROM geoip_city_blocks WHERE start_ip <= @ip ORDER BY start_ip DESC LIMIT 100000;

SELECT t.loc_id FROM (SELECT loc_id, start_ip FROM geoip_city_blocks WHERE end_ip >= @ip ORDER BY end_ip ASC LIMIT 100000) t WHERE start_ip <= @ip ORDER BY start_ip DESC LIMIT 1;

CREATE TABLE geoip_city_blocks(
  start_ip INT(10) UNSIGNED NOT NULL,
  end_ip INT(10) UNSIGNED NOT NULL,
  loc_id INT(5) UNSIGNED NOT NULL,
  UNIQUE INDEX UK_geoip_city_blocks_end_ip (end_ip),
  UNIQUE INDEX UK_geoip_city_blocks_start_ip (start_ip)
)
ENGINE = MYISAM
AVG_ROW_LENGTH = 13
CHARACTER SET utf8
COLLATE utf8_general_ci;


CREATE TABLE geoip_city_location(
  loc_id INT(11) UNSIGNED NOT NULL,
  country VARCHAR(2) NOT NULL,
  region VARCHAR(2) DEFAULT NULL,
  city VARCHAR(255) DEFAULT NULL,
  postal_code VARCHAR(255) DEFAULT NULL,
  latitude FLOAT(8, 4) DEFAULT NULL,
  longitude FLOAT(8, 4) DEFAULT NULL,
  area_code INT(5) DEFAULT NULL,
  PRIMARY KEY (loc_id)
)
ENGINE = INNODB
AVG_ROW_LENGTH = 57
CHARACTER SET utf8
COLLATE utf8_general_ci;

CREATE FUNCTION determine_reserved_ip(ip_numeric INT(10) UNSIGNED)
  RETURNS bit(1)
  DETERMINISTIC
  SQL SECURITY INVOKER
  NO SQL
  COMMENT 'Returns NULL if IP is reserved, 0 when IP is local. 1 when ip ok'
BEGIN
  IF ((ip_numeric < 0) OR (ip_numeric > 4294967295)) THEN RETURN NULL; END IF;

  #determine reserved ip addresses
  /*
  v0.0.0.0/8
  v10.0.0.0/8
  v14.0.0.0/8
  v192.0.2.0/24
  v192.88.99.0/24
  v198.18.0.0/15
  v224.0.0.0/4
  v240.0.0.0/4 - multicast and other
 
  #locals:
  v127.0.0.0/8 - loopback
  v169.254.0.0/16
  v172.16.0.0/12
  192.168.0.0/16
  */
  IF (
    (ip_numeric & 4278190080 = 0)/*0.0.0.0/8*/
    OR
    (ip_numeric & 4278190080 = 167772160)/*10.0.0.0/8*/
    OR
    (ip_numeric & 4278190080 = 234881024)/*14.0.0.0/8*/
    OR
    (ip_numeric & 4294967040 = 3221225984)/*192.0.2.0/24*/
    OR
    (ip_numeric & 4294967040 = 3227017984)/*192.88.99.0/24*/
    OR
    (ip_numeric & 4294836224 = 3323068416)/*198.18.0.0/15*/
    OR
    (ip_numeric & 3758096384 = 3758096384)/*224.0.0.0/4*/
    OR
    (ip_numeric & 4026531840 = 4026531840)/*240.0.0.0/4*/
      ) THEN RETURN NULL; END IF;

  IF (
    (ip_numeric & 4278190080 = 2130706432)/*127.0.0.0/8*/
    OR
    (ip_numeric & 4294901760 = 2851995648)/*169.254.0.0/16*/
    OR
    (ip_numeric & 4293918720 = 2886729728)/*172.16.0.0/12*/
    OR
    (ip_numeric & 4294901760 = 3232235520)/*192.168.0.0/16*/
      ) THEN RETURN 0; END IF;

  RETURN 1;
END

CREATE FUNCTION get_loc_id_from_ip(ip VARCHAR(255))
  RETURNS int(7)
  DETERMINISTIC
  SQL SECURITY INVOKER
  READS SQL DATA
  COMMENT 'Returns NULL when address is unproper and 0 when local address'
BEGIN
  DECLARE ip_check BIT DEFAULT NULL;
  DECLARE ip_numeric INT(10) UNSIGNED;
  SET ip_numeric = INET_ATON(ip);
  IF (ip_numeric IS NULL) THEN RETURN NULL; END IF;
 
  SET ip_check = determine_reserved_ip(ip_numeric);
  IF (ip_check IS NULL) THEN RETURN NULL; END IF;
  IF (ip_check = 0) THEN RETURN 0; END IF;

  RETURN (SELECT t.loc_id FROM (SELECT loc_id, start_ip FROM geoip_city_blocks WHERE end_ip >= ip_numeric ORDER BY end_ip ASC LIMIT 1) t WHERE start_ip <= ip_numeric ORDER BY start_ip DESC LIMIT 1);

  RETURN NULL;
END

CREATE FUNCTION get_location_from_loc_id(loc_id INT)
  RETURNS varchar(255) CHARSET utf8
  DETERMINISTIC
  SQL SECURITY INVOKER
  READS SQL DATA
  COMMENT 'Reads locations table and returns country/region/city'
BEGIN
  IF (loc_id = NULL) THEN RETURN NULL; END IF;
  IF (loc_id = 0) THEN RETURN 'LAN'; END IF; #ip is in local network

  RETURN (SELECT CONCAT(`country`, '/', `region`, '/', `city`) FROM geoip_city_location WHERE geoip_city_location.loc_id = loc_id ORDER BY geoip_city_location.loc_id ASC LIMIT 1);
END

CREATE FUNCTION get_location_from_ip(ip VARCHAR(255))
  RETURNS varchar(255) CHARSET utf8
  DETERMINISTIC
  SQL SECURITY INVOKER
  READS SQL DATA
  COMMENT 'Determines geographic location by ip address'
BEGIN
  DECLARE ip_check BIT DEFAULT NULL;
  DECLARE ip_numeric INT(10) UNSIGNED;
  SET ip_numeric = INET_ATON(ip);
  IF (ip_numeric IS NULL) THEN RETURN NULL; END IF;
 
  SET ip_check = determine_reserved_ip(ip_numeric);
  IF (ip_check IS NULL) THEN RETURN NULL; END IF;
  IF (ip_check = 0) THEN RETURN 'LAN'; END IF;

  RETURN (SELECT CONCAT(`country`, '/', `region`, '/', `city`) FROM (SELECT loc_id, start_ip FROM geoip_city_blocks WHERE end_ip >= ip_numeric ORDER BY end_ip ASC LIMIT 1) t INNER JOIN geoip_city_location ON t.loc_id = geoip_city_location.loc_id WHERE start_ip <= ip_numeric ORDER BY start_ip DESC LIMIT 1);
END