web/index_wr.php

   1 <?php
   2 /*
   3  *  brisk - index_wr.php
   4  *
   5  *  Copyright (C) 2006-2014 Matteo Nastasi
   6  *                          mailto: nastasi@alternativeoutput.it
   7  *                                  matteo.nastasi@milug.org
   8  *                          web: http://www.alternativeoutput.it
   9  *
  10  * This program is free software; you can redistribute it and/or modify
  11  * it under the terms of the GNU General Public License as published by
  12  * the Free Software Foundation; either version 2 of the License, or
  13  * (at your option) any later version.
  14  *
  15  * This program is distributed in the hope that it will be useful, but
  16  * WITHOUT ANY WARRANTY; without even the implied warranty of
  17  * MERCHANTABLILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
  18  * General Public License for more details. You should have received a
  19  * copy of the GNU General Public License along with this program; if
  20  * not, write to the Free Software Foundation, Inc, 59 Temple Place -
  21  * Suite 330, Boston, MA 02111-1307, USA.
  22  *
  23  */
  24
  25 $mlang_indwr = array( 'unknownerr'    => array( 'it' => 'errore sconosciuto',
  26                                                 'en' => 'unknown error'),
  27                       'btn_backtotab' => array( 'it' => 'Torna ai tavoli.',
  28                                                 'en' => 'Back to tables.' ),
  29                       'warrrepl'  => array( 'it' => '<br>Il nominativo &egrave; stato inoltrato all\'amministratore.<br><br>Nell\'arco di pochi giorni verr&agrave;<br><br>notificata al garantito l\'avvenuta registrazione.',
  30                                             'en' => '<br>The subscription was forwarded to the administrator.<br><br>In a few days we will notify<br><br>your friend the occurred registration.'),
  31                       'btn_close' => array( 'it' => 'chiudi',
  32                                             'en' => 'close' ),
  33                       'commerr' => array( 'it' => '<b>E\' occorso un errore durante il salvataggio, riprova o contatta l\'amministratore.</b>',
  34                                           'en' => '<b>An error was occurred during the saving, try again or contact the administrator.</b>'),
  35                       'coerrdb' => array( 'it' => '<b>Il database è temporaneamente irraggiungibile, riprova più tardi o contatta l\'amministratore.</b>',
  36                                           'en' => '<b>The database is temporarly unavailable, retry to later or conctact the administrator.</b>'),
  37                       'warrmust' => array( 'it' => '<b>Per autenticare qualcuno devi a tua volta essere autenticato e certificato.</b>',
  38                                            'en' => 'To authenticate somebody you have to be authenticated and certified yourown'),
  39                       'mesgrepl' => array( 'it' => '<br><br>Il messaggio &egrave; stato inoltrato all\'amministratore.',
  40                                            'en' => '<br><br>The message was forwarded to the administrator'),
  41                       'mesgmust' => array( 'it' => '<b>Per mandare messaggi all\'amministratore devi essere autenticato.</b>',
  42                                            'en' => 'To send a message to the administrator you have to be authenticated'),
  43                       'shutmsg'  => array( 'it' => '<b>Il server sta per essere riavviato, non possono avere inizio nuove partite.</b>',
  44                                            'en' => '<b>The server is going to be rebooted, new games are not allowed.</b>'),
  45                       'mustauth' => array( 'it' => '<b>Il tavolo a cui volevi sederti richiede autentifica.</b>',
  46                                            'en' => '<b>The table where you want to sit require authentication</b>'),
  47                       'mustcert' => array( 'it' => '<b>Il tavolo a cui volevi sederti richiede autentifica e certificazione.</b>',
  48                                            'en' => '<b>The table where you want to sit require authentication and certification</b>'),
  49                       'tabwait'=> array( 'it' => '<b>Il tavolo si &egrave; appena liberato, ci si potr&agrave; sedere tra %d secondi.',
  50                                            'en' => '<b>The table is only just opened, you will sit down in %d seconds.'),
  51                       'mustfirst'=> array( 'it' => '<b>Il tuo utente può sedersi al tavolo solo per primo.</b>',
  52                                            'en' => '<b>Your can sit down as first user only.' ),
  53                       'pollmust' => array( 'it' => '<b>Per partecipare al sondaggio devi essere autenticato.</b>',
  54                                            'en' => '<b>To vote for the poll you have to be authenticated</b>'),
  55                       'pollnone' => array( 'it' => '<br><br>Al momento non è attivo alcun sondaggio.',
  56                                            'en' => '<br><br>At this moment no polls are active.'),
  57                       'pollchoo' => array( 'it' => '<br><br>Non hai espresso nessuna preferenza.',
  58                                            'en' => '<br><br>You don\'t choose any preference, do it'),
  59                       'pollagai' => array( 'it' => '<br>Per questo sondaggio hai già votato.<br><br>Non si può esprimere la propria preferenza più di una volta.',
  60                                            'en' => '<br>You just express your preference about this poll.<br><br>You cannot do it again.'),
  61                       'pollrec'  => array ('it' => '<br><br>Il tuo voto è stato registrato.',
  62                                            'en' => '<br><br>Your vote had be stored.'),
  63                       'badwake_a'=> array( 'it' => '<br>Ti sei alzato da un tavolo senza il consenso degli altri giocatori.<br><br>Dovrai aspettare ancora ',
  64                                            'en' => '<br>You stand up without the permission of the other players.<br><br>You will wait '),
  65                       'badwake_b'=> array( 'it' => ' prima di poterti sedere nuovamente.',
  66                                            'en' => ' before you can sit down again.'),
  67                       'btn_stays'=> array( 'it' => 'resta in piedi.',
  68                                            'en' => 'stay standing.'),
  69                       'badsit_a' => array( 'it' => '<br>Tu o qualcuno col tuo stesso indirizzo IP si è alzato da un tavolo senza il consenso degli altri giocatori.<br><br>Dovrai aspettare ancora ',
  70                                            'en' => '<br>You or someone with your same IP address is standing up from a table without the permission of the other players <br><br>You will wait '),
  71                       'badsit_b' => array( 'it' => ' prima di poterti sedere nuovamente.<br><br>Se non sei stato tu ad alzarti e possiedi un login con password, autenticandoti con quello, potrai accedere.',
  72                                            'en' => ' before you can sit down again. If you don\'t leave the table and you have a login with a password, authenticating with this one you will access'),
  73                       'nu_loginau' => array('it' => "login già in uso",
  74                                             'en' => "login already in use"),
  75                       'nu_emailau' => array('it' => "email già utilizzata",
  76                                             'en' => "email already in use"),
  77                       'nu_msubj' => array( 'it' => 'Brisk: verifica email',
  78                                            'en' => 'Brisk: email verification'),
  79                       // %s(guar) %s(login) %s(baseurl) %d(code) %s(hash)
  80                       'nu_mtext' => array( 'it' =>
  81 'Ciao, sono l\' amministratore del sito di Brisk.
  82
  83 L\' utente \'%s\' ha garantito per te col nickname \'%s\',
  84 vai al link: <%s>
  85 per confermare il tuo indirizzo di posta elettronica.
  86
  87 Ciò è necessario per ottenere la password.
  88
  89 Saluti e buone partite, mop.',
  90                                            'en' => 'EN mtext [%s] [%s] [%s]'),
  91                       'nu_mhtml' => array( 'it' => 'Ciao, sono l\' amministratore del sito di Brisk.<br><br>
  92 L\' utente \'%s\' ha garantito per te col nickname \'%s\',<br>
  93 <a href="%s">clicca qui</a> per confermare il tuo indirizzo di posta elettronica.<br><br>
  94 Ciò è necessario per ottenere la password.<br><br>
  95 Saluti e buone partite, mop.<br>',
  96                                            'en' => 'EN mhtml [%s] [%s] [%s]'),
  97
  98                       'ap_mtext' => array( 'it' =>
  99 'Ciao, sono l\' amministratore del sito di Brisk.
 100
 101 Ti sei registrato col nickname \'%s\',
 102 vai al link: <%s>
 103 per confermare il tuo indirizzo di posta elettronica.
 104
 105 Ciò è necessario per ottenere la password.
 106
 107 Saluti e buone partite, mop.',
 108                                            'en' => 'EN mtext [%s] [%s]'),
 109
 110                       'ap_mhtml' => array( 'it' => 'Ciao, sono l\' amministratore del sito di Brisk.<br><br>
 111 Ti sei registrato col nickname \'%s\',<br>
 112 <a href="%s">clicca qui</a> per confermare il tuo indirizzo di posta elettronica.<br><br>
 113 Ciò è necessario per ottenere la password.<br><br>
 114 Saluti e buone partite, mop.<br>',
 115                                            'en' => 'EN mhtml [%s] [%s]'),
 116                       );
 117
 118 define('LICMGR_CHO_ACCEPT', 0);
 119 define('LICMGR_CHO_REFUSE', 1);
 120 define('LICMGR_CHO_AFTER',  2);
 121
 122 function index_wr_main(&$brisk, $remote_addr_full, $get, $post, $cookie)
 123 {
 124     GLOBAL $G_domain, $G_webbase, $G_mail_seed;
 125     GLOBAL $G_shutdown, $G_alarm_passwd, $G_ban_list, $G_black_list, $G_lang, $G_room_help, $G_room_about;
 126     GLOBAL $G_room_passwdhowto, $mlang_indwr;
 127     GLOBAL $G_tos_vers;
 128
 129     log_load("index_wr.php");
 130     $remote_addr = addrtoipv4($remote_addr_full);
 131
 132     if (($mesg = gpcs_var('mesg', $get, $post, $cookie)) === FALSE)
 133         unset($mesg);
 134
 135     if (($cl_step = gpcs_var('stp', $get, NULL, NULL)) === FALSE)
 136         $cl_step = -2;
 137
 138     if (($sess = gpcs_var('sess', $get, $post, $cookie)) === FALSE)
 139         $sess = "";
 140
 141
 142     if (DEBUGGING == "local" && $remote_addr != '127.0.0.1') {
 143         echo "Debugging time!";
 144         return (FALSE);
 145     }
 146
 147     /*
 148      *  MAIN
 149      */
 150     $is_spawn = FALSE;
 151
 152     log_wr(0, 'index_wr.php: COMM: '.xcapemesg($mesg));
 153     log_wr('COMM: '.xcapemesg($mesg));
 154
 155     $curtime = time();
 156     $dt = date("H:i ", $curtime);
 157
 158     if (($user = $brisk->get_user($sess, &$idx)) == FALSE) {
 159         $argz = explode('|', xcapemesg($mesg));
 160
 161         if ($argz[0] == 'getchallenge') {
 162             if (isset($get['cli_name']))
 163                 $cli_name = $get['cli_name'];
 164             if (($a_sem = Challenges::lock_data(TRUE)) != FALSE) {
 165                 log_main("chal lock data success");
 166
 167                 if (($chals = &Challenges::load_data()) != FALSE) {
 168
 169                     $token =  uniqid("");
 170                     // echo '2|'.$argz[1].'|'.$token.'|'.$remote_addr.'|'.$curtime.'|';
 171                     // exit;
 172
 173                     if (($login_new = validate_name(urldecode($cli_name))) != FALSE) {
 174                         if ($chals->add($login_new, $token, $remote_addr, $curtime) != FALSE) {
 175                             log_send("SUCCESS: token:".$token);
 176                             echo '0|'.$token;
 177                         }
 178                         else {
 179                             log_send("getchallenge FAILED");
 180                             echo '1|';
 181                         }
 182                     }
 183                     else {
 184                         log_send("getchallenge FAILED");
 185                         echo '1|';
 186                     }
 187                     if ($chals->ismod()) {
 188                         Challenges::save_data(&$chals);
 189                     }
 190                 }
 191
 192
 193                 Challenges::unlock_data($a_sem);
 194             }
 195             else {
 196                 echo "CHALLENGE LOCK FAILED\n";
 197                 return FALSE;
 198             }
 199         }
 200         else if ($argz[0] == 'auth') {
 201             printf("challenge|ok");
 202         }
 203         else if ($argz[0] == 'help') {
 204             /* MLANG: "torna ai tavoli" */
 205             echo show_notify(str_replace("\n", " ", $G_room_help[$G_lang]), 0, $mlang_indwr['btn_close'][$G_lang], 600, 500);
 206         }
 207         else if ($argz[0] == 'about') {
 208             echo show_notify(str_replace("\n", " ", $G_room_about[$G_lang]), 0, $mlang_indwr['btn_close'][$G_lang], 400, 230);
 209         }
 210         else if ($argz[0] == 'passwdhowto') {
 211             echo show_notify(str_replace("\n", " ", $G_room_passwdhowto[$G_lang]), 0, $mlang_indwr['btn_close'][$G_lang], 400, 200);
 212         }
 213         else if ($argz[0] == 'roadmap') {
 214             echo show_notify(str_replace("\n", " ", $G_room_roadmap[$G_lang]), 0, $mlang_indwr['btn_close'][$G_lang], 400, 200);
 215         }
 216         else if ($argz[0] == 'placing') {
 217             require_once("briskin5/Obj/briskin5.phh");
 218             require_once("briskin5/Obj/placing.phh");
 219
 220             echo show_notify(str_replace("\n", " ", placings_show(FALSE)), 0, $mlang_indwr['btn_close'][$G_lang], 800, 600);
 221         }
 222         else if ($argz[0] == 'whysupport') {
 223             echo show_notify(str_replace("\n", " ", $G_room_whysupport[$G_lang]), 0, $mlang_indwr['btn_close'][$G_lng], 400, 200);
 224         }
 225         else if ($argz[0] == 'apprendice') {
 226             log_step("APPREND");
 227             if (($cli_name = gpcs_var('cli_name', $get, $post, $cookie)) === FALSE)
 228                 $cli_name = "";
 229
 230             if (($cli_email = gpcs_var('cli_email', $get, $post, $cookie)) === FALSE)
 231                 $cli_email = "";
 232
 233             $mesg_to_user = "";
 234
 235             // check existence of username or email
 236             $is_trans = FALSE;
 237             do {
 238                 if (($bdb = BriskDB::create()) == FALSE)
 239                     break;
 240
 241                 log_step("APPREND1");
 242                 // FIXME: CHECK IP AS PREVIOUS REQUIRER
 243
 244                 $cli_name = urldecode($cli_name);
 245                 $cli_email = urldecode($cli_email);
 246
 247                 // check for already used fields
 248                 if (($idret = $bdb->check_record_by_login_or_email($cli_name, $cli_email)) != 0) {
 249                     $mesg_to_user = ($idret == 1 ?  $mlang_indwr['nu_loginau'][$G_lang] :
 250                                      ($idret == 2 ? $mlang_indwr['nu_emailau'][$G_lang] :
 251                                       $mlang_indwr['unknownerr'][$G_lang]));
 252                     break;
 253                 }
 254                 log_step("APPREND2");
 255
 256                 $bdb->transaction('BEGIN');
 257                 $is_trans = TRUE;
 258                 //   insert the new user disabled with reason NU_MAILED
 259                 // FIXME: move 'no-guaran' user into configuration file
 260                 if (($usr_obj = $bdb->user_add($cli_name, 'THE_PASS', $cli_email,
 261                                                USER_FLAG_TY_DISABLE | USER_FLAG_TY_APPR,
 262                                                USER_DIS_REA_NU_MAILED, 10103)) == FALSE) {
 263                     fprintf(STDERR, "ERROR: user_add FAILED\n");
 264                     break;
 265                 }
 266                 log_step("APPREND3");
 267
 268                 if (($mail_code = $bdb->mail_reserve_code()) == FALSE) {
 269                     fprintf(STDERR, "ERROR: mail reserve code FAILED\n");
 270                     break;
 271                 }
 272                 $hash = md5($curtime . $G_alarm_passwd . $cli_name . $cli_email);
 273
 274                 $confirm_page = sprintf("http://%s/%s/mailmgr.php?f_act=checkmail&f_code=%d&f_hash=%s",
 275                                         $G_domain, $G_webbase, $mail_code, $hash);
 276                 $subj = $mlang_indwr['nu_msubj'][$G_lang];
 277                 $body_txt = sprintf($mlang_indwr['ap_mtext'][$G_lang],
 278                                     $cli_name, $confirm_page);
 279                 $body_htm = sprintf($mlang_indwr['ap_mhtml'][$G_lang],
 280                                     $cli_name, $confirm_page);
 281
 282                 $mail_item = new MailDBItem($mail_code, $usr_obj->code, MAIL_TYP_CHECK,
 283                                             $curtime, $subj, $body_txt, $body_htm, $hash);
 284                 log_step("APPREND4");
 285
 286                 if (brisk_mail($cli_email, $subj, $body_txt, $body_htm) == FALSE) {
 287                     // mail error
 288                     fprintf(STDERR, "ERROR: mail send FAILED\n");
 289                     break;
 290                 }
 291                 log_step("APPREND5");
 292
 293                 // save the mail
 294                 if ($mail_item->store($bdb) == FALSE) {
 295                     // store mail error
 296                     fprintf(STDERR, "ERROR: store mail FAILED\n");
 297                     break;
 298                 }
 299                 log_step("APPREND6");
 300
 301                 echo "1";
 302                 $bdb->transaction('COMMIT');
 303                 return TRUE;
 304             } while(FALSE);
 305             $bdb->transaction('ROLLBACK');
 306             echo "$mesg_to_user";
 307             return FALSE;
 308         }
 309         else {
 310             log_wr("Get User Error");
 311             echo "Get User Error:" + $argz[0];
 312             return FALSE;
 313         }
 314         return TRUE;
 315     } // end if (($user = $brisk->get_user($sess, ... == FALSE) {
 316
 317     $brisk->sess_cur_set($user->sess);
 318     $argz = explode('|', xcapemesg($mesg));
 319
 320     log_wr('POSTSPLIT: '.$argz[0]);
 321
 322     // LACC UPDATED
 323     $user->lacc = $curtime;
 324     if ($user->cl_step < $cl_step) {
 325         log_step(sprintf("%s|%s|%d|%d|%d|%d", $user->sess, $user->name, $user->step, $user->cl_step, $cl_step, $user->step - $user->cl_step));
 326         $user->cl_step = $cl_step;
 327     }
 328
 329     if ( ( ! $user->is_auth() ) &&
 330         $brisk->ban_check($user->ip)) {
 331         // TODO: find a way to add a nonblocking sleep(5) here
 332         return (FALSE);
 333     }
 334
 335     if ($argz[0] == 'ping') {
 336         log_wr("PING RECEIVED");
 337     }
 338     else if ($argz[0] == 'prefs') {
 339         if ($argz[1] == 'save') {
 340             if (!isset($post['prefs'])) {
 341                 return FALSE;
 342             }
 343
 344             if (($prefs = Client_prefs::from_json($post['prefs'])) == FALSE) {
 345                 $prefs = Client_prefs::from_user($user);
 346             }
 347             $prefs->store($user, TRUE);
 348         }
 349         else { // reset case as default
 350             $prefs = Client_prefs::from_user($user);
 351         }
 352         $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
 353         $user->comm[$user->step % COMM_N] .=  sprintf('prefs_load(\'%s\', true, %s);', json_encode($prefs),
 354                                                       'false');
 355         $user->step_inc();
 356
 357         if ($argz[1] == 'save') {
 358             if ($user->stat == 'room' && $user->subst == 'standup') {
 359                 $brisk->standup_update($user);
 360             }
 361             else if ($user->stat == 'room' && $user->subst == 'sitdown') {
 362                 log_main("chatt_send pre table update");
 363                 $brisk->table_update($user);
 364                 log_main("chatt_send post table update");
 365             }
 366         }
 367         echo "1";
 368         return TRUE;
 369     }
 370     else if ($argz[0] == 'shutdown') {
 371         log_auth($user->sess, "Shutdown session.");
 372
 373         $user->the_end = TRUE;
 374
 375         log_rd2("AUTO LOGOUT.");
 376         if ($user->subst == 'sitdown' || $user->stat == 'table')
 377             $brisk->room_wakeup($user);
 378         else if ($user->subst == 'standup')
 379             $brisk->room_outstandup(&$user);
 380         else {
 381             log_rd2("SHUTDOWN FROM WHAT ???");
 382         }
 383     }
 384     else if ($argz[0] == 'warranty') {
 385         if (($cli_name = gpcs_var('cli_name', $get, $post, $cookie)) === FALSE)
 386             $cli_name = "";
 387
 388         if (($cli_email = gpcs_var('cli_email', $get, $post, $cookie)) === FALSE)
 389             $cli_email = "";
 390
 391         $mesg_to_user = "";
 392
 393         log_wr("INFO:SKIP:argz == warranty name: [".$cli_name."] CERT: ".$user->is_cert());
 394         if ($user->is_cert()) {
 395             if (0 == 1) {
 396                 if (($wa_lock = Warrant::lock_data(TRUE)) != FALSE) {
 397                     if (($fp = @fopen(LEGAL_PATH."/warrant.txt", 'a')) != FALSE) {
 398                         /* Unix time | session | nickname | IP | where was | mesg */
 399                         fwrite($fp, sprintf("%ld|%s|%s|%s|\n", $curtime, xcapelt($user->name), xcapelt(urldecode($cli_name)), xcapelt(urldecode($cli_email))));
 400                         fclose($fp);
 401                     }
 402                     Warrant::unlock_data($wa_lock);
 403                     $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
 404                     /* MLANG: "<br>Il nominativo &egrave; stato inoltrato all\'amministratore.<br><br>Nell\'arco di pochi giorni vi verr&agrave;<br><br>notificata l\'avvenuta registrazione." */
 405                     $user->comm[$user->step % COMM_N] .=  show_notify($mlang_indwr['warrrepl'][$G_lang], 0, $mlang_indwr['btn_close'][$G_lang], 400, 150);
 406                     $user->step_inc();
 407                     echo "1";
 408                 }
 409                 else {
 410                     /* MLANG: "<b>E\' occorso un errore durante il salvataggio, riprova o contatta l\'amministratore.</b>" */
 411                     $mesg_to_user = nickserv_msg($dt, $mlang_indwr['commerr'][$G_lang]);
 412                 }
 413             } // 0 == 1
 414             else {
 415                 // check existence of username or email
 416                 $is_trans = FALSE;
 417                 do {
 418                     if (($bdb = BriskDB::create()) == FALSE)
 419                         break;
 420
 421                     $cli_name = urldecode($cli_name);
 422                     $cli_email = urldecode($cli_email);
 423
 424                     // check for already used fields
 425                     if (($idret = $bdb->check_record_by_login_or_email($cli_name, $cli_email)) != 0) {
 426                         $mesg_to_user = nickserv_msg($dt, ($idret == 1 ?  $mlang_indwr['nu_loginau'][$G_lang] :
 427                                                            ($idret == 2 ? $mlang_indwr['nu_emailau'][$G_lang]
 428                                                             : $mlang_indwr['unknownerr'][$G_lang])));
 429                         break;
 430                     }
 431                     $bdb->transaction('BEGIN');
 432                     $is_trans = TRUE;
 433                     //   insert the new user disabled with reason NU_MAILED
 434                     if (($usr_obj = $bdb->user_add($cli_name, 'THE_PASS', $cli_email,
 435                                                    USER_FLAG_TY_DISABLE | USER_FLAG_TY_NORM,
 436                                                    USER_DIS_REA_NU_MAILED, $user->code)) == FALSE) {
 437                         fprintf(STDERR, "ERROR: user_add FAILED\n");
 438                         break;
 439                     }
 440                     if (($mail_code = $bdb->mail_reserve_code()) == FALSE) {
 441                         fprintf(STDERR, "ERROR: mail reserve code FAILED\n");
 442                         break;
 443                     }
 444                     $hash = md5($curtime . $G_alarm_passwd . $cli_name . $cli_email);
 445
 446                     $confirm_page = sprintf("http://%s/%s/mailmgr.php?f_act=checkmail&f_code=%d&f_hash=%s",
 447                                             $G_domain, $G_webbase, $mail_code, $hash);
 448                     $subj = $mlang_indwr['nu_msubj'][$G_lang];
 449                     $body_txt = sprintf($mlang_indwr['nu_mtext'][$G_lang],
 450                                         $user->name, $cli_name, $confirm_page);
 451                     $body_htm = sprintf($mlang_indwr['nu_mhtml'][$G_lang],
 452                                         $user->name, $cli_name, $confirm_page);
 453
 454                     $mail_item = new MailDBItem($mail_code, $usr_obj->code, MAIL_TYP_CHECK,
 455                                                 $curtime, $subj, $body_txt, $body_htm, $hash);
 456
 457                     if (brisk_mail($cli_email, $subj, $body_txt, $body_htm) == FALSE) {
 458                         // mail error
 459                         fprintf(STDERR, "ERROR: mail send FAILED\n");
 460                         break;
 461                     }
 462                     // save the mail
 463                     if ($mail_item->store($bdb) == FALSE) {
 464                         // store mail error
 465                         fprintf(STDERR, "ERROR: store mail FAILED\n");
 466                         break;
 467                     }
 468                     $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
 469                     /* MLANG: "<br>Il nominativo &egrave; stato inoltrato all\'amministratore.<br><br>Nell\'arco di pochi giorni vi verr&agrave;<br><br>notificata l\'avvenuta registrazione." */
 470                     $user->comm[$user->step % COMM_N] .=  show_notify($mlang_indwr['warrrepl'][$G_lang], 0, $mlang_indwr['btn_close'][$G_lang], 400, 150);
 471                     $user->step_inc();
 472                     echo "1";
 473                     $bdb->transaction('COMMIT');
 474                 } while(FALSE);
 475                 $bdb->transaction('ROLLBACK');
 476             }
 477
 478         }
 479         else {
 480             /* MLANG: "<b>Per autenticare qualcuno devi a tua volta essere autenticato.</b>" */
 481             $mesg_to_user = nickserv_msg($dt, $mlang_indwr['warrmust'][$G_lang]);
 482         }
 483
 484         if ($mesg_to_user != "") {
 485             $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
 486
 487             $user->comm[$user->step % COMM_N] .= $mesg_to_user;
 488             $user->step_inc();
 489         }
 490     }
 491     else if ($argz[0] == 'mesgtoadm') {
 492         if (($cli_subj = gpcs_var('cli_subj', $get, $post, $cookie)) === FALSE)
 493             $cli_subj = "";
 494
 495         if (($cli_mesg = gpcs_var('cli_mesg', $get, $post, $cookie)) === FALSE)
 496             $cli_mesg = "";
 497
 498         $mesg_to_user = "";
 499
 500         log_wr("INFO:SKIP:argz == mesgtoadm name: [".$user->name."] AUTH: ".$user->is_auth());
 501         if ($user->is_auth()) {
 502             if (($wa_lock = Warrant::lock_data(TRUE)) != FALSE) {
 503                 if (($bdb = BriskDB::create()) != FALSE) {
 504                     $bdb->users_load();
 505
 506                     if (($ema = $bdb->getmail($user->name)) != FALSE) {
 507                         //  mail("nastasi",
 508                         mail("brisk@alternativeoutput.it", urldecode($cli_subj), urldecode($cli_mesg), sprintf("From: %s <%s>", $user->name, $ema));
 509                     }
 510
 511                     if (($fp = @fopen(LEGAL_PATH."/messages.txt", 'a')) != FALSE) {
 512                         /* Unix time | session | nickname | IP | where was | mesg */
 513                         fwrite($fp, sprintf("%ld|%s|%s|%s\n", $curtime, $user->name,
 514                                             xcapelt(urldecode($cli_subj)), xcapelt(urldecode($cli_mesg))));
 515                         fclose($fp);
 516                     }
 517                     Warrant::unlock_data($wa_lock);
 518                     $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
 519                     /* MLANG: "" */
 520                     $user->comm[$user->step % COMM_N] .=  show_notify($mlang_indwr['mesgrepl'][$G_lang], 0, $mlang_indwr['btn_close'][$G_lang], 400, 110);
 521                     $user->step_inc();
 522                     echo "1";
 523                 }
 524                 else {
 525                     /* MLANG: "<b>Il database è temporaneamente irraggiungibile, riprova più tardi o contatta l\'amministratore.</b>" */
 526                     $mesg_to_user = nickserv_msg($dt, $mlang_indwr['coerrdb'][$G_lang]);
 527                     $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
 528                 }
 529             }
 530             else {
 531                 /* MLANG: "<b>E\' occorso un errore durante il salvataggio, riprova o contatta l\'amministratore.</b>" */
 532                 $mesg_to_user = nickserv_msg($dt, $mlang_indwr['commerr'][$G_lang]);
 533             }
 534
 535         }
 536         else {
 537             /* MLANG: "<b>Per autenticare qualcuno devi a tua volta essere autenticato.</b>" */
 538             $mesg_to_user = nickserv_msg($dt, $mlang_indwr['mesgmust'][$G_lang]);
 539         }
 540
 541         if ($mesg_to_user != "") {
 542             $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
 543
 544             $user->comm[$user->step % COMM_N] .= $mesg_to_user;
 545             $user->step_inc();
 546         }
 547     }
 548
 549
 550
 551     else if ($argz[0] == 'poll') {
 552         GLOBAL $G_with_poll, $G_poll_name;
 553         if (($cli_choose = gpcs_var('cli_choose', $get, $post, $cookie)) === FALSE)
 554             $cli_choose = "";
 555
 556         if (($cli_poll_name = gpcs_var('cli_poll_name', $get, $post, $cookie)) === FALSE)
 557             $cli_poll_name = "";
 558
 559         $poll_lock = FALSE;
 560         $mesg_to_user = "";
 561
 562         $fp = FALSE;
 563         $echont = "0";
 564
 565   /*
 566           DONE - autorizzato ?
 567           DONE - ci sono poll attivi ?
 568           - verifica che il poll_name del client sia uguale a quello sul server
 569           DONE - lock
 570           DONE - apro file r+ con fallback in w+
 571           DONE - vedo se ha già votato
 572           DONE - se si: messaggio di voto già dato
 573           se no: accetto il voto e lo segno; messaggio
 574           chiudo file
 575   */
 576
 577         $dobreak = FALSE;
 578         do {
 579             log_wr("INFO:SKIP:argz == poll name: [".$cli_poll_name."] AUTH: ".$user->is_auth());
 580             if ( ! $user->is_auth() ) {
 581                 // MLANG: <b>Per partecipare al sondaggio devi essere autenticato.</b>
 582                 $mesg_to_user = nickserv_msg($dt, $mlang_indwr['pollmust'][$G_lang]);
 583                 log_wr("break1");
 584                 break;
 585             }
 586
 587             if ($G_with_poll == FALSE && $G_poll_name != FALSE && $G_poll_name != "") {
 588                 $mesg_to_user = show_notify($mlang_indwr['pollnone'][$G_lang], 0, $mlang_indwr['btn_close'][$G_lang], 400, 110);
 589                 log_wr("break2");
 590                 break;
 591             }
 592
 593             if ($cli_choose == "" || !isset($cli_choose)) {
 594                 $mesg_to_user = show_notify($mlang_indwr['pollchoo'][$G_lang], 0, $mlang_indwr['btn_close'][$G_lang], 400, 110);
 595                 log_wr("break2.5");
 596                 break;
 597             }
 598
 599             if (($poll_lock = Poll::lock_data(TRUE)) == FALSE) {
 600                 /* MLANG: "<b>E\' occorso un errore durante il salvataggio, riprova o contatta l\'amministratore.</b>" */
 601                 $mesg_to_user = nickserv_msg($dt, $mlang_indwr['commerr'][$G_lang]);
 602                 log_wr("break3");
 603                 break;
 604             }
 605
 606             if (($fp = @fopen(LEGAL_PATH."/".$G_poll_name.".txt", 'r+')) == FALSE)
 607                 $fp = @fopen(LEGAL_PATH."/".$G_poll_name.".txt", 'w+');
 608
 609             if ($fp == FALSE) {
 610                 $mesg_to_user = nickserv_msg($dt, $mlang_indwr['commerr'][$G_lang]);
 611                 log_wr("break4");
 612                 break;
 613             }
 614
 615             log_wr("poll: cp");
 616             fseek($fp, 0);
 617
 618             log_wr("poll: cp2");
 619             while (!feof($fp)) {
 620                 log_wr("poll: cp3");
 621                 $bf = fgets($fp, 4096);
 622                 log_wr("poll: cp3.1");
 623                 $arli = csplitter($bf, '|');
 624                 if (count($arli) == 0)
 625                     break;
 626                 log_wr("poll: cp3.2");
 627                 if (strcasecmp($arli[1], $user->name) == 0) {
 628                     $mesg_to_user = show_notify($mlang_indwr['pollagai'][$G_lang], 0, $mlang_indwr['btn_close'][$G_lang], 400, 110);
 629                     $dobreak = TRUE;
 630                     break;
 631                 }
 632             }
 633             log_wr("poll: cp4");
 634
 635             if ($dobreak) {
 636                 log_wr("break5");
 637                 break;
 638             }
 639
 640             /* Unix time | nickname | choose */
 641             fwrite($fp, sprintf("%ld|%s|%s\n", $curtime, xcapelt($user->name), xcapelt(urldecode($cli_choose))));
 642             fflush($fp);
 643             $mesg_to_user =  show_notify($mlang_indwr['pollrec'][$G_lang], 0, $mlang_indwr['btn_close'][$G_lang], 400, 110);
 644             $echont = "1";
 645             log_wr("poll: cp5");
 646         } while (0);
 647
 648         if ($fp != FALSE)
 649             fclose($fp);
 650
 651         if ($poll_lock != FALSE)
 652             Poll::unlock_data($poll_lock);
 653
 654         if ($mesg_to_user != "") {
 655             $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
 656
 657             $user->comm[$user->step % COMM_N] .= $mesg_to_user;
 658             $user->step_inc();
 659         }
 660
 661         echo "$echont";
 662     }
 663
 664     /******************
 665      *                *
 666      *   STAT: room   *
 667      *                *
 668      ******************/
 669     else if ($user->stat == 'room') {
 670         $user->laccwr = time();
 671
 672         if ($argz[0] == 'help') {
 673             $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
 674             $user->comm[$user->step % COMM_N] .=  show_notify(str_replace("\n", " ", $G_room_help[$G_lang]), 0, $mlang_indwr['btn_backtotab'][$G_lang], 600, 500);
 675
 676             log_wr($user->comm[$user->step % COMM_N]);
 677             $user->step_inc();
 678
 679         }
 680         else if ($argz[0] == 'passwdhowto') {
 681             $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
 682             $user->comm[$user->step % COMM_N] .=  show_notify(str_replace("\n", " ", $G_room_passwdhowto[$G_lang]), 0, $mlang_indwr['btn_backtotab'][$G_lang], 600, 500);
 683
 684             log_wr($user->comm[$user->step % COMM_N]);
 685             $user->step_inc();
 686
 687         }
 688         else if ($argz[0] == 'splash') {
 689             GLOBAL $G_with_splash, $G_splash_content, $G_splash_interval, $G_splash_idx;
 690             GLOBAL $G_splash_w, $G_splash_h, $G_splash_timeout;
 691             $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
 692
 693             $user->comm[$user->step % COMM_N] .=  show_notify_ex(str_replace("\n", " ", $G_splash_content[$G_lang]), 0, $mlang_indwr['btn_backtotab'][$G_lang], $G_splash_w, $G_splash_h, true, 0);
 694
 695             log_wr($user->comm[$user->step % COMM_N]);
 696             $user->step_inc();
 697         }
 698         else if ($argz[0] == 'about') {
 699             $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
 700             $user->comm[$user->step % COMM_N] .=  show_notify(str_replace("\n", " ", $G_room_about[$G_lang]), 0, $mlang_indwr['btn_backtotab'][$G_lang], 400, 200);
 701
 702             log_wr($user->comm[$user->step % COMM_N]);
 703             $user->step_inc();
 704
 705         }
 706         else if ($argz[0] == 'placing') {
 707             require_once("briskin5/Obj/briskin5.phh");
 708             require_once("briskin5/Obj/placing.phh");
 709
 710             $user->comm[$user->step % COMM_N] =  "gst.st = ".($user->step+1)."; ";
 711             $user->comm[$user->step % COMM_N] .= show_notify_ex(str_replace("\n", " ", placings_show($user)), 0, $mlang_indwr['btn_backtotab'][$G_lang], 800, 600, TRUE, 0);
 712
 713             log_wr($user->comm[$user->step % COMM_N]);
 714             $user->step_inc();
 715         }
 716         else if ($argz[0] == 'roadmap') {
 717             $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
 718             $user->comm[$user->step % COMM_N] .=  show_notify(str_replace("\n", " ", $G_room_roadmap[$G_lang]), 0, $mlang_indwr['btn_backtotab'][$G_lang], 400, 200);
 719
 720             log_wr($user->comm[$user->step % COMM_N]);
 721             $user->step_inc();
 722
 723         }
 724         else if ($argz[0] == 'whysupport') {
 725             $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
 726             $user->comm[$user->step % COMM_N] .=  show_notify(str_replace("\n", " ", $G_room_whysupport[$G_lang]), 0, $mlang_indwr['btn_backtotab'][$G_lang], 400, 200);
 727
 728             log_wr($user->comm[$user->step % COMM_N]);
 729             $user->step_inc();
 730
 731         }
 732         else if ($argz[0] == 'chatt') {
 733             $brisk->chatt_send(&$user, xcapemesg($mesg));
 734         }
 735         else if ($argz[0] == 'tosmgr') {
 736             // check IF is authnticated user, both terms of service versions matches
 737             if ($user->is_auth() && count($argz) == 5) {
 738                 $f_type = $argz[1];      $f_code = $argz[2];
 739                 $f_tos_curr = $argz[3]; $f_tos_vers = $argz[4];
 740
 741                 if ("$f_tos_curr" == $user->rec->tos_vers_get()  &&
 742                     "$f_tos_vers" == "$G_tos_vers") {
 743                     if ("$f_type" == "soft" || "$f_type" == "hard") {
 744                         $res = 100;
 745                         switch ($f_code) {
 746                         case LICMGR_CHO_ACCEPT:
 747                             $user->rec->tos_vers_set($G_tos_vers);
 748                             $res = $user->tos_store();
 749                             break;
 750                         case LICMGR_CHO_REFUSE:
 751                             $user->flags_set(USER_FLAG_TY_DISABLE, USER_FLAG_TY_ALL);
 752                             $user->rec->disa_reas_set(USER_DIS_REA_LICENCE);
 753                             $res = $user->state_store();
 754
 755                             $user->comm[$user->step % COMM_N] = $user->blocking_error(TRUE);
 756                             $user->the_end = TRUE;
 757                             $user->step_inc();
 758                             break;
 759                         }
 760                     }
 761                 }
 762             }
 763         }
 764         /**********************
 765          *                    *
 766          *   SUBST: standup   *
 767          *                    *
 768          **********************/
 769         else if ($user->subst == 'standup') {
 770             if ($argz[0] == 'sitdown') {
 771                 log_wr("SITDOWN command");
 772
 773                 if ($user->the_end == TRUE) {
 774                     log_wr("INFO:SKIP:argz == sitdown && ->the_end == TRUE => ignore request.");
 775                     return FALSE;
 776                 }
 777
 778                 // Take parameters
 779                 $table_idx = (int)$argz[1];
 780                 $table = &$brisk->table[$table_idx];
 781
 782                 $not_allowed_msg = "";
 783                 if ($G_shutdown) {
 784                         $not_allowed_msg = nickserv_msg($dt, $mlang_indwr['shutmsg'][$G_lang]);
 785                 }
 786                 else if ($table->wakeup_time > $curtime) {
 787                     $not_allowed_msg = nickserv_msg($dt, sprintf($mlang_indwr['tabwait'][$G_lang],
 788                                                                  $table->wakeup_time - $curtime));
 789                 }
 790                 else if ($table->auth_type == TABLE_AUTH_TY_CERT && ( ! $user->is_cert() ) ) {
 791                     $not_allowed_msg = nickserv_msg($dt, $mlang_indwr['mustcert'][$G_lang]);
 792                 }
 793                 else if ($table->auth_type == TABLE_AUTH_TY_AUTH && ( ! $user->is_auth() ) ) {
 794                     $not_allowed_msg = nickserv_msg($dt, $mlang_indwr['mustauth'][$G_lang]);
 795                 }
 796                 else if ($user->flags & USER_FLAG_TY_FIRONLY && $table->player_n > 0) {
 797                     $not_allowed_msg = nickserv_msg($dt, $mlang_indwr['mustfirst'][$G_lang]);
 798                 }
 799                 if ($not_allowed_msg != "") {
 800                     $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ".$not_allowed_msg;
 801                     $user->step_inc();
 802                     return TRUE;
 803                 }
 804
 805                 /* TODO: refact to a function */
 806                 // if ($user->bantime > $user->laccwr) {
 807                 require_once("Obj/hardban.phh");
 808
 809                 if (($bantime = Hardbans::check(($user->is_auth() ? $user->name : FALSE),
 810                                                 $user->ip, $user->sess)) != -1) {
 811                     $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ";
 812                     /* MLANG: "<br>Ti sei alzato da un tavolo senza il consenso degli altri giocatori. <br><br>Dovrai aspettare ancora ".secstoword($user->bantime - $user->laccwr)." prima di poterti sedere nuovamente.", "resta in piedi.", "<br>Tu o qualcuno col tuo stesso indirizzo IP si è alzato da un tavolo senza il consenso degli altri giocatori.<br><br>Dovrai aspettare ancora ".secstoword($bantime - $user->laccwr)." prima di poterti sedere nuovamente.<br><br>Se non sei stato tu ad alzarti e possiedi un login con password, autenticandoti con quello, potrai accedere." */
 813                     if ($user->is_auth()) {
 814                         $user->comm[$user->step % COMM_N] .= show_notify($mlang_indwr['badwake_a'][$G_lang].secstoword($bantime - $user->laccwr).$mlang_indwr['badwake_b'][$G_lang], 2000, $mlang_indwr['btn_stays'][$G_lang], 400, 140);
 815                     }
 816                     else {
 817                         $user->comm[$user->step % COMM_N] .= show_notify($mlang_indwr['badsit_a'][$G_lang].secstoword($bantime - $user->laccwr).$mlang_indwr['badsit_a'][$G_lang], 2000, $mlang_indwr['btn_stays'][$G_lang], 400, 180);
 818                     }
 819                     $user->step_inc();
 820                     return TRUE;
 821                 }
 822
 823                 if ($table->player_n == PLAYERS_N) {
 824                     log_wr("WARN:FSM: Sitdown unreachable, table full.");
 825                     return FALSE;
 826                 }
 827
 828                 // set new status
 829                 $user->subst = "sitdown";
 830                 $user->table = $table_idx;
 831                 $user->table_pos = $table->user_add($idx);
 832
 833                 log_wr("MOP before");
 834
 835                 if ($table->player_n == PLAYERS_N) {
 836                     require_once("briskin5/Obj/briskin5.phh");
 837                     log_wr("MOP inall");
 838
 839                     // Start game for this table.
 840                     log_wr("Start game!");
 841
 842                     //
 843                     //  START THE SPAWN HERE!!!!
 844                     //
 845
 846                     // Create new spawned table
 847                     // $bin5_sem = Bin5::lock_data(TRUE, $table_idx);
 848                     $table_token = uniqid("");
 849                     $brisk->table[$table_idx]->table_token = $table_token;
 850                     $brisk->table[$table_idx]->table_start = $curtime;
 851
 852                     $plist = "$table_token|$user->table|$table->player_n";
 853                     for ($i = 0 ; $i < $table->player_n ; $i++) {
 854                         $plist .= '|'.$brisk->user[$table->player[$i]]->sess;
 855                     }
 856                     log_legal($curtime, $user->ip, $user, "STAT:CREATE_GAME", $plist);
 857
 858                     log_wr("pre new Bin5");
 859                     if (($bin5 = new Bin5($brisk, $table_idx, $table_token, $get, $post, $cookie)) == FALSE)
 860                         log_wr("bri create: FALSE");
 861                     else
 862                         log_wr("bri create: ".serialize($bin5));
 863
 864                     log_wr("pre init table");
 865                     // init table
 866                     $bin5_table = $bin5->table[0];
 867                     $bin5_table->init($bin5->user);
 868                     $bin5_table->game_init($bin5->user);
 869                     //
 870                     // Init spawned users.
 871                     //
 872                     //  MULTIGAME: here init of selected game instead of hardcabled briskin5 init (look subst status)
 873                     //
 874                     log_wr("game_init after");
 875                     for ($i = 0 ; $i < $table->player_n ; $i++) {
 876                         $bin5_user_cur = $bin5->user[$i];
 877                         $user_cur = $brisk->user[$table->player[$i]];
 878
 879                         $bin5_user_cur->laccwr = $curtime;
 880                         $bin5_user_cur->trans_step = $user_cur->step + 1;
 881                         $bin5_user_cur->comm[$bin5_user_cur->step % COMM_N] = "";
 882                         $bin5_user_cur->step_inc();
 883                         $bin5_user_cur->comm[$bin5_user_cur->step % COMM_N] = show_table(&$bin5,&$bin5_user_cur,$bin5_user_cur->step+1,TRUE,FALSE);
 884                         $bin5_user_cur->step_inc();
 885
 886                         log_wr("TRY PRESAVE: ".$bin5_user_cur->step." TRANS STEP: ".$bin5_user_cur->trans_step);
 887
 888                         log_wr("Pre if!");
 889
 890                         //          ARRAY_POP DISABLED
 891                         //          // CHECK
 892                         while (array_pop($user_cur->comm) != NULL);
 893
 894                         $user_cur->trans_step = $user_cur->step + 1;
 895                         $user_cur->comm[$user_cur->step % COMM_N] = sprintf('gst.st_loc++; gst.st=%d; createCookie("table_idx", %d, 24*365, cookiepath); createCookie("table_token", "%s", 24*365, cookiepath); createCookie("lang", "%s", 24*365, cookiepath); xstm.stop(); window.onunload = null ; window.onbeforeunload = null ; document.location.assign("briskin5/index.php");|', $user_cur->step+1, $table_idx, $table_token, $G_lang);
 896                         log_wr("TRANS ATTIVATO");
 897
 898                         $user_cur->stat_set('table');
 899                         $user_cur->subst = 'asta';
 900                         $user_cur->laccwr = $curtime;
 901                         $user_cur->step_inc();
 902                     }
 903                     log_wr("presave bri");
 904                     $brisk->match_add($table_idx, $bin5);
 905                     log_wr("postsave bri");
 906                 }
 907                 // change room
 908                 $brisk->room_sitdown($user, $table_idx);
 909
 910                 log_wr("MOP finish");
 911             }
 912             else if ($argz[0] == 'logout') {
 913                 $brisk->ghost_sess->push($curtime, $user->sess, GHOST_SESS_REAS_LOUT);
 914                 $user->the_end = TRUE;
 915
 916                 if ($user->subst == 'sitdown') {
 917                     log_load("ROOM WAKEUP");
 918                     $brisk->room_wakeup($user);
 919                 }
 920                 else if ($user->subst == 'standup')
 921                     $brisk->room_outstandup($user);
 922                 else
 923                     log_rd2("LOGOUT FROM WHAT ???");
 924             }
 925         }
 926         /**********************
 927          *                    *
 928          *   SUBST: sitdown   *
 929          *                    *
 930          **********************/
 931         else if ($user->subst == 'sitdown') {
 932             if ($user->the_end == TRUE) {
 933                 log_wr("INFO:SKIP:argz == sitdown && ->the_end == TRUE => ignore request.");
 934                 return FALSE;
 935             }
 936
 937             if ($argz[0] == 'wakeup') {
 938                 $brisk->room_wakeup($user);
 939             }
 940             else if ($argz[0] == 'logout') {
 941                 $brisk->ghost_sess->push($curtime, $user->sess, GHOST_SESS_REAS_LOUT);
 942                 $user->the_end = TRUE;
 943
 944                 $brisk->room_wakeup($user);
 945             }
 946         }
 947     }
 948
 949     return (FALSE);
 950 }
 951 ?>