X-Git-Url: http://mop.ddnsfree.com/gitweb/?p=brisk.git;a=blobdiff_plain;f=web%2Findex_wr.php;h=b266abb662e191bdb1ba6ca33864c4eeee2b184f;hp=9360c4bde84b85178e4182d1023a6171dce6ec14;hb=f95117c9e5506c4cb00e1b5ee02b2e566c837874;hpb=d74b7138ed4d14834b26355a7f5d9350bc96ee44 diff --git a/web/index_wr.php b/web/index_wr.php index 9360c4b..b266abb 100644 --- a/web/index_wr.php +++ b/web/index_wr.php @@ -2,8 +2,8 @@ /* * brisk - index_wr.php * - * Copyright (C) 2006-2012 Matteo Nastasi - * mailto: nastasi@alternativeoutput.it + * Copyright (C) 2006-2015 Matteo Nastasi + * mailto: nastasi@alternativeoutput.it * matteo.nastasi@milug.org * web: http://www.alternativeoutput.it * @@ -22,17 +22,9 @@ * */ -// require_once("Obj/brisk.phh"); -// require_once("Obj/auth.phh"); -// require_once("Obj/proxyscan.phh"); - -// Use of proxies isn't allowed. -// if (is_proxy()) { -// sleep(5); -// exit; -// } - -$mlang_indwr = array( 'btn_backtotab' => array( 'it' => 'Torna ai tavoli.', +$mlang_indwr = array( 'unknownerr' => array( 'it' => 'errore sconosciuto', + 'en' => 'unknown error'), + 'btn_backtotab' => array( 'it' => 'Torna ai tavoli.', 'en' => 'Back to tables.' ), 'warrrepl' => array( 'it' => '
Il nominativo è stato inoltrato all\'amministratore.

Nell\'arco di pochi giorni verrà

notificata al garantito l\'avvenuta registrazione.', 'en' => '
The subscription was forwarded to the administrator.

In a few days we will notify

your friend the occurred registration.'), @@ -42,8 +34,8 @@ $mlang_indwr = array( 'btn_backtotab' => array( 'it' => 'Torna ai tavoli.', 'en' => 'An error was occurred during the saving, try again or contact the administrator.'), 'coerrdb' => array( 'it' => 'Il database è temporaneamente irraggiungibile, riprova più tardi o contatta l\'amministratore.', 'en' => 'The database is temporarly unavailable, retry to later or conctact the administrator.'), - 'warrmust' => array( 'it' => 'Per autenticare qualcuno devi a tua volta essere autenticato.', - 'en' => 'To authenticate somebody you have to be authenticated in your turn'), + 'warrmust' => array( 'it' => 'Per autenticare qualcuno devi a tua volta essere autenticato e certificato.', + 'en' => 'To authenticate somebody you have to be authenticated and certified yourown'), 'mesgrepl' => array( 'it' => '

Il messaggio è stato inoltrato all\'amministratore.', 'en' => '

The message was forwarded to the administrator'), 'mesgmust' => array( 'it' => 'Per mandare messaggi all\'amministratore devi essere autenticato.', @@ -51,11 +43,11 @@ $mlang_indwr = array( 'btn_backtotab' => array( 'it' => 'Torna ai tavoli.', 'shutmsg' => array( 'it' => 'Il server sta per essere riavviato, non possono avere inizio nuove partite.', 'en' => 'The server is going to be rebooted, new games are not allowed.'), 'mustauth' => array( 'it' => 'Il tavolo a cui volevi sederti richiede autentifica.', - 'en' => 'the table where you want to sit require authentication'), - 'tabwait_a'=> array( 'it' => 'Il tavolo si è appena liberato, ci si potrà sedere tra ', - 'en' => 'The table is only just opened, you will sit down in '), // FIXME - 'tabwait_b'=> array( 'it' => ' secondi.', - 'en' => ' seconds.'), + 'en' => 'The table where you want to sit require authentication'), + 'mustcert' => array( 'it' => 'Il tavolo a cui volevi sederti richiede autentifica e certificazione.', + 'en' => 'The table where you want to sit require authentication and certification'), + 'tabwait'=> array( 'it' => 'Il tavolo si è appena liberato, ci si potrà sedere tra %d secondi.', + 'en' => 'The table is only just opened, you will sit down in %d seconds.'), 'mustfirst'=> array( 'it' => 'Il tuo utente può sedersi al tavolo solo per primo.', 'en' => 'Your can sit down as first user only.' ), 'pollmust' => array( 'it' => 'Per partecipare al sondaggio devi essere autenticato.', @@ -63,7 +55,7 @@ $mlang_indwr = array( 'btn_backtotab' => array( 'it' => 'Torna ai tavoli.', 'pollnone' => array( 'it' => '

Al momento non è attivo alcun sondaggio.', 'en' => '

At this moment no polls are active.'), 'pollchoo' => array( 'it' => '

Non hai espresso nessuna preferenza.', - 'en' => '

You don\'t choose any preference, do it'), + 'en' => '

You don\'t choose any preference, do it'), 'pollagai' => array( 'it' => '
Per questo sondaggio hai già votato.

Non si può esprimere la propria preferenza più di una volta.', 'en' => '
You just express your preference about this poll.

You cannot do it again.'), 'pollrec' => array ('it' => '

Il tuo voto è stato registrato.', @@ -75,9 +67,58 @@ $mlang_indwr = array( 'btn_backtotab' => array( 'it' => 'Torna ai tavoli.', 'btn_stays'=> array( 'it' => 'resta in piedi.', 'en' => 'stay standing.'), 'badsit_a' => array( 'it' => '
Tu o qualcuno col tuo stesso indirizzo IP si è alzato da un tavolo senza il consenso degli altri giocatori.

Dovrai aspettare ancora ', - 'en' => '
You or someone with your same IP address is standing up from a table without the permission of the other players

You will wait '), + 'en' => '
You or someone with your same IP address is standing up from a table without the permission of the other players

You will wait '), 'badsit_b' => array( 'it' => ' prima di poterti sedere nuovamente.

Se non sei stato tu ad alzarti e possiedi un login con password, autenticandoti con quello, potrai accedere.', - 'en' => ' before you can sit down again. If you don\'t leave the table and you have a login with a password, authenticating with this one you will access') + 'en' => ' before you can sit down again. If you don\'t leave the table and you have a login with a password, authenticating with this one you will access'), + 'nu_netguard' => array('it' => "Di recente è già arrivata una richiesta da un indirizzo IP simile al tuo, riprova tra qualche tempo.", + 'en' => "EN di recente è già arrivata una richiesta da un indirizzo IP simile al tuo, riprova tra qualche tempo."), + 'nu_unkerr' => array('it' => "Si è verificato un errore inatteso, contattare l'amministratore.", + 'en' => "EN Si è verificato un errore inatteso, contattare l'amministratore."), + 'nu_loginau' => array('it' => "login già in uso", + 'en' => "login already in use"), + 'nu_emailau' => array('it' => "email già utilizzata", + 'en' => "email already in use"), + 'nu_msubj' => array( 'it' => 'Brisk: verifica email', + 'en' => 'Brisk: email verification'), + // %s(guar) %s(login) %s(baseurl) %d(code) %s(hash) + 'nu_mtext' => array( 'it' => +'Ciao, sono l\' amministratore del sito di Brisk. + +L\' utente \'%s\' ha garantito per te col nickname \'%s\', +vai al link: <%s> +per confermare il tuo indirizzo di posta elettronica. + +Ciò è necessario per ottenere la password. + +Saluti e buone partite, mop.', + 'en' => 'EN mtext [%s] [%s] [%s]'), + 'nu_mhtml' => array( 'it' => 'Ciao, sono l\' amministratore del sito di Brisk.

+L\' utente \'%s\' ha garantito per te col nickname \'%s\',
+clicca qui per confermare il tuo indirizzo di posta elettronica.

+Ciò è necessario per ottenere la password.

+Saluti e buone partite, mop.
', + 'en' => 'EN mhtml [%s] [%s] [%s]'), + + 'ap_mtext' => array( 'it' => +'Ciao, sono l\' amministratore del sito di Brisk. + +Ti sei registrato col nickname \'%s\', +vai al link: <%s> +per confermare il tuo indirizzo di posta elettronica. + +Ciò è necessario per ottenere la password. + +Saluti e buone partite, mop.', + 'en' => 'EN mtext [%s] [%s]'), + + 'ap_mhtml' => array( 'it' => 'Ciao, sono l\' amministratore del sito di Brisk.

+Ti sei registrato col nickname \'%s\',
+clicca qui per confermare il tuo indirizzo di posta elettronica.

+Ciò è necessario per ottenere la password.

+Saluti e buone partite, mop.
', + 'en' => 'EN mhtml [%s] [%s]'), + 'info_err' => array( 'it' => 'E\' occorso un errore (%d), riprova più tardi.', + 'en' => 'Some error occurs (%d), retry later.') ); define('LICMGR_CHO_ACCEPT', 0); @@ -86,15 +127,21 @@ define('LICMGR_CHO_AFTER', 2); function index_wr_main(&$brisk, $remote_addr_full, $get, $post, $cookie) { - GLOBAL $G_shutdown, $G_black_list, $G_lang, $G_room_help, $G_room_about, $G_room_passwdhowto, $mlang_indwr; + GLOBAL $G_domain, $G_webbase, $G_mail_seed, $G_notguar_code; + GLOBAL $G_shutdown, $G_alarm_passwd, $G_ban_list, $G_black_list, $G_lang, $G_room_help, $G_room_about; + GLOBAL $G_room_passwdhowto, $mlang_indwr; GLOBAL $G_tos_vers; - $remote_addr = addrtoipv4($remote_addr_full); log_load("index_wr.php"); + $remote_addr = addrtoipv4($remote_addr_full); + $remote_ip = ip2int($remote_addr); - if (($mesg = gpcs_var('mesg', $get, $post, $cookie)) === FALSE) + if (($mesg = gpcs_var('mesg', $get, $post, $cookie)) === FALSE) unset($mesg); + if (($cl_step = gpcs_var('stp', $get, NULL, NULL)) === FALSE) + $cl_step = -2; + if (($sess = gpcs_var('sess', $get, $post, $cookie)) === FALSE) $sess = ""; @@ -107,13 +154,6 @@ function index_wr_main(&$brisk, $remote_addr_full, $get, $post, $cookie) /* * MAIN */ - - /* if the IP is banned, exit without do nothing */ - if (array_search($remote_addr, $G_black_list) !== FALSE) { - // TODO: find a way to add a nonblocking sleep(5) here - return (FALSE); - } - $is_spawn = FALSE; log_wr(0, 'index_wr.php: COMM: '.xcapemesg($mesg)); @@ -128,15 +168,15 @@ function index_wr_main(&$brisk, $remote_addr_full, $get, $post, $cookie) if ($argz[0] == 'getchallenge') { if (isset($get['cli_name'])) $cli_name = $get['cli_name']; - if (($a_sem = Challenges::lock_data(TRUE)) != FALSE) { + if (($a_sem = Challenges::lock_data(TRUE)) != FALSE) { log_main("chal lock data success"); - + if (($chals = &Challenges::load_data()) != FALSE) { - + $token = uniqid(""); // echo '2|'.$argz[1].'|'.$token.'|'.$remote_addr.'|'.$curtime.'|'; // exit; - + if (($login_new = validate_name(urldecode($cli_name))) != FALSE) { if ($chals->add($login_new, $token, $remote_addr, $curtime) != FALSE) { log_send("SUCCESS: token:".$token); @@ -155,8 +195,8 @@ function index_wr_main(&$brisk, $remote_addr_full, $get, $post, $cookie) Challenges::save_data(&$chals); } } - - + + Challenges::unlock_data($a_sem); } else { @@ -183,13 +223,108 @@ function index_wr_main(&$brisk, $remote_addr_full, $get, $post, $cookie) else if ($argz[0] == 'placing') { require_once("briskin5/Obj/briskin5.phh"); require_once("briskin5/Obj/placing.phh"); - + echo show_notify(str_replace("\n", " ", placings_show(FALSE)), 0, $mlang_indwr['btn_close'][$G_lang], 800, 600); } else if ($argz[0] == 'whysupport') { echo show_notify(str_replace("\n", " ", $G_room_whysupport[$G_lang]), 0, $mlang_indwr['btn_close'][$G_lng], 400, 200); } - else { + else if ($argz[0] == 'apprentice') { + if (($cli_name = gpcs_var('cli_name', $get, $post, $cookie)) === FALSE) + $cli_name = ""; + + if (($cli_email = gpcs_var('cli_email', $get, $post, $cookie)) === FALSE) + $cli_email = ""; + + $mesg_to_user = ""; + + // check existence of username or email + $is_trans = FALSE; + do { + if (($bdb = BriskDB::create()) == FALSE) { + $mesg_to_user = "Connessione al database fallita"; + break; + } + + // check IP address as previous requirer + if ($bdb->selfreg_check($remote_ip) == FALSE) { + $mesg_to_user = $mlang_indwr['nu_netguard'][$G_lang]; + break; + } + + $cli_name = urldecode($cli_name); + $cli_email = urldecode($cli_email); + + // check for already used fields + if (($idret = $bdb->check_record_by_login_or_email($cli_name, $cli_email)) != 0) { + $mesg_to_user = ($idret == 1 ? $mlang_indwr['nu_loginau'][$G_lang] : + ($idret == 2 ? $mlang_indwr['nu_emailau'][$G_lang] : + $mlang_indwr['unknownerr'][$G_lang])); + break; + } + + $bdb->transaction('BEGIN'); + $is_trans = TRUE; + // insert the new user disabled with reason NU_MAILED + // FIXME: move 'no-guaran' user into configuration file + if (($usr_obj = $bdb->user_add($cli_name, 'THE_PASS', $cli_email, + USER_FLAG_TY_DISABLE | USER_FLAG_TY_APPR, + USER_DIS_REA_NU_MAILED, $G_notguar_code)) == FALSE) { + fprintf(STDERR, "ERROR: user_add FAILED\n"); + $mesg_to_user = "Fallito inserimento nel database."; + break; + } + + if (($mail_code = $bdb->mail_reserve_code()) == FALSE) { + fprintf(STDERR, "ERROR: mail reserve code FAILED\n"); + $mesg_to_user = "Fallita creazione codice email."; + break; + } + $hash = md5($curtime . $G_alarm_passwd . $cli_name . $cli_email); + + $confirm_page = sprintf("http://%s/%s/mailmgr.php?f_act=checkmail&f_code=%d&f_hash=%s", + $G_domain, $G_webbase, $mail_code, $hash); + $subj = $mlang_indwr['nu_msubj'][$G_lang]; + $body_txt = sprintf($mlang_indwr['ap_mtext'][$G_lang], + $cli_name, $confirm_page); + $body_htm = sprintf($mlang_indwr['ap_mhtml'][$G_lang], + $cli_name, $confirm_page); + + $mail_item = new MailDBItem($mail_code, $usr_obj->code, MAIL_TYP_CHECK, + $curtime, $subj, $body_txt, $body_htm, $hash); + + // save the mail + if ($mail_item->store($bdb) == FALSE) { + // store mail error + fprintf(STDERR, "ERROR: store mail FAILED\n"); + $mesg_to_user = "Fallita procedura di store."; + break; + } + + // check IP address as previous requirer + if ($bdb->selfreg_set($remote_ip) == FALSE) { + $mesg_to_user = $mlang_indwr['nu_unkerr'][$G_lang]; + break; + } + + if (brisk_mail($cli_email, $subj, $body_txt, $body_htm) == FALSE) { + // mail error + fprintf(STDERR, "ERROR: mail send FAILED\n"); + $mesg_to_user = "Fallito invio email."; + break; + } + + $bdb->transaction('COMMIT'); + fprintf(STDERR, "REMOTE: %d\n", $remote_ip); + echo "1"; + return TRUE; + } while(FALSE); + if ($is_trans) + $bdb->transaction('ROLLBACK'); + echo "$mesg_to_user"; + return FALSE; + } + else { log_wr("Get User Error"); echo "Get User Error:" + $argz[0]; return FALSE; @@ -197,14 +332,20 @@ function index_wr_main(&$brisk, $remote_addr_full, $get, $post, $cookie) return TRUE; } // end if (($user = $brisk->get_user($sess, ... == FALSE) { + $brisk->sess_cur_set($user->sess); $argz = explode('|', xcapemesg($mesg)); log_wr('POSTSPLIT: '.$argz[0]); // LACC UPDATED $user->lacc = $curtime; + if ($user->cl_step < $cl_step) { + log_step(sprintf("%s|%s|%d|%d|%d|%d", $user->sess, $user->name, $user->step, $user->cl_step, $cl_step, $user->step - $user->cl_step)); + $user->cl_step = $cl_step; + } - if (array_search($user->ip, $G_black_list) !== FALSE) { + if ( ( ! $user->is_auth() ) && + $brisk->ban_check($user->ip)) { // TODO: find a way to add a nonblocking sleep(5) here return (FALSE); } @@ -212,6 +353,20 @@ function index_wr_main(&$brisk, $remote_addr_full, $get, $post, $cookie) if ($argz[0] == 'ping') { log_wr("PING RECEIVED"); } + else if ($argz[0] == 'info') { + if ($argz[1] == 'save') { + if (!isset($post['info'])) { + return FALSE; + } + if (($ret = $brisk->info_save($user, $post['info'])) == 0) { + echo "1"; + return TRUE; + } + + printf($mlang_indwr['info_err'][$G_lang], $ret); + return FALSE; + } + } else if ($argz[0] == 'prefs') { if ($argz[1] == 'save') { if (!isset($post['prefs'])) { @@ -247,7 +402,7 @@ function index_wr_main(&$brisk, $remote_addr_full, $get, $post, $cookie) else if ($argz[0] == 'shutdown') { log_auth($user->sess, "Shutdown session."); - $user->reset(); + $user->the_end = TRUE; log_rd2("AUTO LOGOUT."); if ($user->subst == 'sitdown' || $user->stat == 'table') @@ -259,70 +414,132 @@ function index_wr_main(&$brisk, $remote_addr_full, $get, $post, $cookie) } } else if ($argz[0] == 'warranty') { - if (($cli_name = gpcs_var('cli_name', $get, $post, $cookie)) === FALSE) + if (($cli_name = gpcs_var('cli_name', $get, $post, $cookie)) === FALSE) $cli_name = ""; - + if (($cli_email = gpcs_var('cli_email', $get, $post, $cookie)) === FALSE) $cli_email = ""; - $mesg_to_user = ""; - - log_wr("INFO:SKIP:argz == warranty name: [".$cli_name."] AUTH: ".($user->flags & USER_FLAG_AUTH)); - if ($user->flags & USER_FLAG_AUTH) { - if (($wa_lock = Warrant::lock_data(TRUE)) != FALSE) { - if (($fp = @fopen(LEGAL_PATH."/warrant.txt", 'a')) != FALSE) { - /* Unix time | session | nickname | IP | where was | mesg */ - fwrite($fp, sprintf("%ld|%s|%s|%s|\n", $curtime, xcapelt($user->name), xcapelt(urldecode($cli_name)), xcapelt(urldecode($cli_email)))); - fclose($fp); + + log_wr("INFO:SKIP:argz == warranty name: [".$cli_name."] CERT: ".$user->is_cert()); + if ($user->is_cert()) { + if (0 == 1) { + if (($wa_lock = Warrant::lock_data(TRUE)) != FALSE) { + if (($fp = @fopen(LEGAL_PATH."/warrant.txt", 'a')) != FALSE) { + /* Unix time | session | nickname | IP | where was | mesg */ + fwrite($fp, sprintf("%ld|%s|%s|%s|\n", $curtime, xcapelt($user->name), xcapelt(urldecode($cli_name)), xcapelt(urldecode($cli_email)))); + fclose($fp); + } + Warrant::unlock_data($wa_lock); + $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; "; + /* MLANG: "
Il nominativo è stato inoltrato all\'amministratore.

Nell\'arco di pochi giorni vi verrà

notificata l\'avvenuta registrazione." */ + $user->comm[$user->step % COMM_N] .= show_notify($mlang_indwr['warrrepl'][$G_lang], 0, $mlang_indwr['btn_close'][$G_lang], 400, 150); + $user->step_inc(); + echo "1"; } - Warrant::unlock_data($wa_lock); - $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; "; - /* MLANG: "
Il nominativo è stato inoltrato all\'amministratore.

Nell\'arco di pochi giorni vi verrà

notificata l\'avvenuta registrazione." */ - $user->comm[$user->step % COMM_N] .= show_notify($mlang_indwr['warrrepl'][$G_lang], 0, $mlang_indwr['btn_close'][$G_lang], 400, 150); - $user->step_inc(); - echo "1"; - } + else { + /* MLANG: "E\' occorso un errore durante il salvataggio, riprova o contatta l\'amministratore." */ + $mesg_to_user = nickserv_msg($dt, $mlang_indwr['commerr'][$G_lang]); + } + } // 0 == 1 else { - /* MLANG: "E\' occorso un errore durante il salvataggio, riprova o contatta l\'amministratore." */ - $mesg_to_user = sprintf('chatt_sub("%s", [2, "%s"],"%s");', $dt, NICKSERV, $mlang_indwr['commerr'][$G_lang]); + // check existence of username or email + $is_trans = FALSE; + do { + if (($bdb = BriskDB::create()) == FALSE) + break; + + $cli_name = urldecode($cli_name); + $cli_email = urldecode($cli_email); + + // check for already used fields + if (($idret = $bdb->check_record_by_login_or_email($cli_name, $cli_email)) != 0) { + $mesg_to_user = nickserv_msg($dt, ($idret == 1 ? $mlang_indwr['nu_loginau'][$G_lang] : + ($idret == 2 ? $mlang_indwr['nu_emailau'][$G_lang] + : $mlang_indwr['unknownerr'][$G_lang]))); + break; + } + $bdb->transaction('BEGIN'); + $is_trans = TRUE; + // insert the new user disabled with reason NU_MAILED + if (($usr_obj = $bdb->user_add($cli_name, 'THE_PASS', $cli_email, + USER_FLAG_TY_DISABLE | USER_FLAG_TY_NORM, + USER_DIS_REA_NU_MAILED, $user->code)) == FALSE) { + fprintf(STDERR, "ERROR: user_add FAILED\n"); + break; + } + if (($mail_code = $bdb->mail_reserve_code()) == FALSE) { + fprintf(STDERR, "ERROR: mail reserve code FAILED\n"); + break; + } + $hash = md5($curtime . $G_alarm_passwd . $cli_name . $cli_email); + + $confirm_page = sprintf("http://%s/%s/mailmgr.php?f_act=checkmail&f_code=%d&f_hash=%s", + $G_domain, $G_webbase, $mail_code, $hash); + $subj = $mlang_indwr['nu_msubj'][$G_lang]; + $body_txt = sprintf($mlang_indwr['nu_mtext'][$G_lang], + $user->name, $cli_name, $confirm_page); + $body_htm = sprintf($mlang_indwr['nu_mhtml'][$G_lang], + $user->name, $cli_name, $confirm_page); + + $mail_item = new MailDBItem($mail_code, $usr_obj->code, MAIL_TYP_CHECK, + $curtime, $subj, $body_txt, $body_htm, $hash); + + if (brisk_mail($cli_email, $subj, $body_txt, $body_htm) == FALSE) { + // mail error + fprintf(STDERR, "ERROR: mail send FAILED\n"); + break; + } + // save the mail + if ($mail_item->store($bdb) == FALSE) { + // store mail error + fprintf(STDERR, "ERROR: store mail FAILED\n"); + break; + } + $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; "; + /* MLANG: "
Il nominativo è stato inoltrato all\'amministratore.

Nell\'arco di pochi giorni vi verrà

notificata l\'avvenuta registrazione." */ + $user->comm[$user->step % COMM_N] .= show_notify($mlang_indwr['warrrepl'][$G_lang], 0, $mlang_indwr['btn_close'][$G_lang], 400, 150); + $user->step_inc(); + echo "1"; + $bdb->transaction('COMMIT'); + } while(FALSE); + $bdb->transaction('ROLLBACK'); } - + } else { /* MLANG: "Per autenticare qualcuno devi a tua volta essere autenticato." */ - $mesg_to_user = sprintf('chatt_sub("%s", [2, "%s"],"%s");', $dt, NICKSERV, $mlang_indwr['warrmust'][$G_lang]); + $mesg_to_user = nickserv_msg($dt, $mlang_indwr['warrmust'][$G_lang]); } - + if ($mesg_to_user != "") { $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; "; - + $user->comm[$user->step % COMM_N] .= $mesg_to_user; $user->step_inc(); } } else if ($argz[0] == 'mesgtoadm') { - if (($cli_subj = gpcs_var('cli_subj', $get, $post, $cookie)) === FALSE) + if (($cli_subj = gpcs_var('cli_subj', $get, $post, $cookie)) === FALSE) $cli_subj = ""; - + if (($cli_mesg = gpcs_var('cli_mesg', $get, $post, $cookie)) === FALSE) $cli_mesg = ""; - - $mesg_to_user = ""; - - log_wr("INFO:SKIP:argz == mesgtoadm name: [".$user->name."] AUTH: ".($user->flags & USER_FLAG_AUTH)); - if ($user->flags & USER_FLAG_AUTH) { + + log_wr("INFO:SKIP:argz == mesgtoadm name: [".$user->name."] AUTH: ".$user->is_auth()); + if ($user->is_auth()) { if (($wa_lock = Warrant::lock_data(TRUE)) != FALSE) { if (($bdb = BriskDB::create()) != FALSE) { $bdb->users_load(); - + if (($ema = $bdb->getmail($user->name)) != FALSE) { // mail("nastasi", mail("brisk@alternativeoutput.it", urldecode($cli_subj), urldecode($cli_mesg), sprintf("From: %s <%s>", $user->name, $ema)); } - + if (($fp = @fopen(LEGAL_PATH."/messages.txt", 'a')) != FALSE) { /* Unix time | session | nickname | IP | where was | mesg */ fwrite($fp, sprintf("%ld|%s|%s|%s\n", $curtime, $user->name, @@ -338,24 +555,24 @@ function index_wr_main(&$brisk, $remote_addr_full, $get, $post, $cookie) } else { /* MLANG: "Il database è temporaneamente irraggiungibile, riprova più tardi o contatta l\'amministratore." */ - $mesg_to_user = sprintf('chatt_sub("%s", [2, "%s"],"%s");', $dt, NICKSERV, $mlang_indwr['coerrdb'][$G_lang]); + $mesg_to_user = nickserv_msg($dt, $mlang_indwr['coerrdb'][$G_lang]); $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; "; } } else { /* MLANG: "E\' occorso un errore durante il salvataggio, riprova o contatta l\'amministratore." */ - $mesg_to_user = sprintf('chatt_sub("%s", [2, "%s"],"%s");', $dt, NICKSERV, $mlang_indwr['commerr'][$G_lang]); + $mesg_to_user = nickserv_msg($dt, $mlang_indwr['commerr'][$G_lang]); } - + } else { /* MLANG: "Per autenticare qualcuno devi a tua volta essere autenticato." */ - $mesg_to_user = sprintf('chatt_sub("%s", [2, "%s"],"%s");', $dt, NICKSERV, $mlang_indwr['mesgmust'][$G_lang]); + $mesg_to_user = nickserv_msg($dt, $mlang_indwr['mesgmust'][$G_lang]); } - + if ($mesg_to_user != "") { $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; "; - + $user->comm[$user->step % COMM_N] .= $mesg_to_user; $user->step_inc(); } @@ -365,15 +582,15 @@ function index_wr_main(&$brisk, $remote_addr_full, $get, $post, $cookie) else if ($argz[0] == 'poll') { GLOBAL $G_with_poll, $G_poll_name; - if (($cli_choose = gpcs_var('cli_choose', $get, $post, $cookie)) === FALSE) + if (($cli_choose = gpcs_var('cli_choose', $get, $post, $cookie)) === FALSE) $cli_choose = ""; - + if (($cli_poll_name = gpcs_var('cli_poll_name', $get, $post, $cookie)) === FALSE) $cli_poll_name = ""; $poll_lock = FALSE; $mesg_to_user = ""; - + $fp = FALSE; $echont = "0"; @@ -391,45 +608,45 @@ function index_wr_main(&$brisk, $remote_addr_full, $get, $post, $cookie) $dobreak = FALSE; do { - log_wr("INFO:SKIP:argz == poll name: [".$cli_poll_name."] AUTH: ".($user->flags & USER_FLAG_AUTH)); - if (($user->flags & USER_FLAG_AUTH) != USER_FLAG_AUTH) { + log_wr("INFO:SKIP:argz == poll name: [".$cli_poll_name."] AUTH: ".$user->is_auth()); + if ( ! $user->is_auth() || $user->is_appr() ) { // MLANG: Per partecipare al sondaggio devi essere autenticato. - $mesg_to_user = sprintf('chatt_sub("%s", [2, "%s"],"%s");', $dt, NICKSERV, $mlang_indwr['pollmust'][$G_lang]); + $mesg_to_user = nickserv_msg($dt, $mlang_indwr['pollmust'][$G_lang]); log_wr("break1"); break; } - + if ($G_with_poll == FALSE && $G_poll_name != FALSE && $G_poll_name != "") { $mesg_to_user = show_notify($mlang_indwr['pollnone'][$G_lang], 0, $mlang_indwr['btn_close'][$G_lang], 400, 110); log_wr("break2"); break; } - + if ($cli_choose == "" || !isset($cli_choose)) { $mesg_to_user = show_notify($mlang_indwr['pollchoo'][$G_lang], 0, $mlang_indwr['btn_close'][$G_lang], 400, 110); log_wr("break2.5"); break; } - + if (($poll_lock = Poll::lock_data(TRUE)) == FALSE) { /* MLANG: "E\' occorso un errore durante il salvataggio, riprova o contatta l\'amministratore." */ - $mesg_to_user = sprintf('chatt_sub("%s", [2, "%s"],"%s");', $dt, NICKSERV, $mlang_indwr['commerr'][$G_lang]); + $mesg_to_user = nickserv_msg($dt, $mlang_indwr['commerr'][$G_lang]); log_wr("break3"); break; } - + if (($fp = @fopen(LEGAL_PATH."/".$G_poll_name.".txt", 'r+')) == FALSE) $fp = @fopen(LEGAL_PATH."/".$G_poll_name.".txt", 'w+'); - + if ($fp == FALSE) { - $mesg_to_user = sprintf('chatt_sub("%s", [2, "%s"],"%s");', $dt, NICKSERV, $mlang_indwr['commerr'][$G_lang]); + $mesg_to_user = nickserv_msg($dt, $mlang_indwr['commerr'][$G_lang]); log_wr("break4"); break; } - + log_wr("poll: cp"); fseek($fp, 0); - + log_wr("poll: cp2"); while (!feof($fp)) { log_wr("poll: cp3"); @@ -446,12 +663,12 @@ function index_wr_main(&$brisk, $remote_addr_full, $get, $post, $cookie) } } log_wr("poll: cp4"); - + if ($dobreak) { log_wr("break5"); break; } - + /* Unix time | nickname | choose */ fwrite($fp, sprintf("%ld|%s|%s\n", $curtime, xcapelt($user->name), xcapelt(urldecode($cli_choose)))); fflush($fp); @@ -459,16 +676,16 @@ function index_wr_main(&$brisk, $remote_addr_full, $get, $post, $cookie) $echont = "1"; log_wr("poll: cp5"); } while (0); - + if ($fp != FALSE) fclose($fp); - + if ($poll_lock != FALSE) Poll::unlock_data($poll_lock); - + if ($mesg_to_user != "") { $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; "; - + $user->comm[$user->step % COMM_N] .= $mesg_to_user; $user->step_inc(); } @@ -513,43 +730,43 @@ function index_wr_main(&$brisk, $remote_addr_full, $get, $post, $cookie) else if ($argz[0] == 'about') { $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; "; $user->comm[$user->step % COMM_N] .= show_notify(str_replace("\n", " ", $G_room_about[$G_lang]), 0, $mlang_indwr['btn_backtotab'][$G_lang], 400, 200); - + log_wr($user->comm[$user->step % COMM_N]); $user->step_inc(); - + } else if ($argz[0] == 'placing') { require_once("briskin5/Obj/briskin5.phh"); require_once("briskin5/Obj/placing.phh"); - + $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; "; $user->comm[$user->step % COMM_N] .= show_notify_ex(str_replace("\n", " ", placings_show($user)), 0, $mlang_indwr['btn_backtotab'][$G_lang], 800, 600, TRUE, 0); - + log_wr($user->comm[$user->step % COMM_N]); $user->step_inc(); } else if ($argz[0] == 'roadmap') { $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; "; $user->comm[$user->step % COMM_N] .= show_notify(str_replace("\n", " ", $G_room_roadmap[$G_lang]), 0, $mlang_indwr['btn_backtotab'][$G_lang], 400, 200); - + log_wr($user->comm[$user->step % COMM_N]); $user->step_inc(); - + } else if ($argz[0] == 'whysupport') { $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; "; $user->comm[$user->step % COMM_N] .= show_notify(str_replace("\n", " ", $G_room_whysupport[$G_lang]), 0, $mlang_indwr['btn_backtotab'][$G_lang], 400, 200); - + log_wr($user->comm[$user->step % COMM_N]); $user->step_inc(); - + } else if ($argz[0] == 'chatt') { $brisk->chatt_send(&$user, xcapemesg($mesg)); } else if ($argz[0] == 'tosmgr') { // check IF is authnticated user, both terms of service versions matches - if ($user->flags & USER_FLAG_AUTH && count($argz) == 5) { + if ($user->is_auth() && count($argz) == 5) { $f_type = $argz[1]; $f_code = $argz[2]; $f_tos_curr = $argz[3]; $f_tos_vers = $argz[4]; @@ -589,45 +806,46 @@ function index_wr_main(&$brisk, $remote_addr_full, $get, $post, $cookie) log_wr("INFO:SKIP:argz == sitdown && ->the_end == TRUE => ignore request."); return FALSE; } - + // Take parameters $table_idx = (int)$argz[1]; $table = &$brisk->table[$table_idx]; - + $not_allowed_msg = ""; if ($G_shutdown) { - $not_allowed_msg = sprintf('chatt_sub("%s", [2, "%s"],"%s");', - $dt, NICKSERV, $mlang_indwr['shutmsg'][$G_lang]); + $not_allowed_msg = nickserv_msg($dt, $mlang_indwr['shutmsg'][$G_lang]); } else if ($table->wakeup_time > $curtime) { - $not_allowed_msg = sprintf('chatt_sub("%s", [2, "%s"],"%s%d%s");', - $dt, NICKSERV, $mlang_indwr['tabwait_a'][$G_lang], - $table->wakeup_time - $curtime, $mlang_indwr['tabwait_b'][$G_lang]); + $not_allowed_msg = nickserv_msg($dt, sprintf($mlang_indwr['tabwait'][$G_lang], + $table->wakeup_time - $curtime)); + } + else if ( $table->auth_type == TABLE_AUTH_TY_CERT && + (!$user->is_cert() || $user->is_appr()) ) { + $not_allowed_msg = nickserv_msg($dt, $mlang_indwr['mustcert'][$G_lang]); } - else if ($table->auth_only && (($user->flags & USER_FLAG_AUTH) == 0)) { - $not_allowed_msg = sprintf('chatt_sub("%s", [2, "%s"],"%s");', - $dt, NICKSERV, $mlang_indwr['mustauth'][$G_lang]); + else if ( $table->auth_type == TABLE_AUTH_TY_AUTH && + (!$user->is_auth() || $user->is_appr()) ) { + $not_allowed_msg = nickserv_msg($dt, $mlang_indwr['mustauth'][$G_lang]); } else if ($user->flags & USER_FLAG_TY_FIRONLY && $table->player_n > 0) { - $not_allowed_msg = sprintf('chatt_sub("%s", [2, "%s"], "%s");', - $dt, NICKSERV, $mlang_indwr['mustfirst'][$G_lang]); + $not_allowed_msg = nickserv_msg($dt, $mlang_indwr['mustfirst'][$G_lang]); } if ($not_allowed_msg != "") { $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; ".$not_allowed_msg; $user->step_inc(); return TRUE; } - + /* TODO: refact to a function */ // if ($user->bantime > $user->laccwr) { require_once("Obj/hardban.phh"); - if (($bantime = Hardbans::check(($user->flags & USER_FLAG_AUTH ? $user->name : FALSE), + if (($bantime = Hardbans::check(($user->is_auth() ? $user->name : FALSE), $user->ip, $user->sess)) != -1) { $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; "; /* MLANG: "
Ti sei alzato da un tavolo senza il consenso degli altri giocatori.

Dovrai aspettare ancora ".secstoword($user->bantime - $user->laccwr)." prima di poterti sedere nuovamente.", "resta in piedi.", "
Tu o qualcuno col tuo stesso indirizzo IP si è alzato da un tavolo senza il consenso degli altri giocatori.

Dovrai aspettare ancora ".secstoword($bantime - $user->laccwr)." prima di poterti sedere nuovamente.

Se non sei stato tu ad alzarti e possiedi un login con password, autenticandoti con quello, potrai accedere." */ - if ($user->flags & USER_FLAG_AUTH) { - $user->comm[$user->step % COMM_N] .= show_notify($mlang_indwr['badwake_a'][$G_lang].secstoword($user->bantime - $user->laccwr).$mlang_indwr['badwake_b'][$G_lang], 2000, $mlang_indwr['btn_stays'][$G_lang], 400, 100); + if ($user->is_auth()) { + $user->comm[$user->step % COMM_N] .= show_notify($mlang_indwr['badwake_a'][$G_lang].secstoword($bantime - $user->laccwr).$mlang_indwr['badwake_b'][$G_lang], 2000, $mlang_indwr['btn_stays'][$G_lang], 400, 140); } else { $user->comm[$user->step % COMM_N] .= show_notify($mlang_indwr['badsit_a'][$G_lang].secstoword($bantime - $user->laccwr).$mlang_indwr['badsit_a'][$G_lang], 2000, $mlang_indwr['btn_stays'][$G_lang], 400, 180); @@ -635,48 +853,48 @@ function index_wr_main(&$brisk, $remote_addr_full, $get, $post, $cookie) $user->step_inc(); return TRUE; } - + if ($table->player_n == PLAYERS_N) { log_wr("WARN:FSM: Sitdown unreachable, table full."); return FALSE; } - + // set new status $user->subst = "sitdown"; $user->table = $table_idx; $user->table_pos = $table->user_add($idx); - + log_wr("MOP before"); - + if ($table->player_n == PLAYERS_N) { require_once("briskin5/Obj/briskin5.phh"); log_wr("MOP inall"); - + // Start game for this table. log_wr("Start game!"); // // START THE SPAWN HERE!!!! // - + // Create new spawned table // $bin5_sem = Bin5::lock_data(TRUE, $table_idx); $table_token = uniqid(""); $brisk->table[$table_idx]->table_token = $table_token; $brisk->table[$table_idx]->table_start = $curtime; - + $plist = "$table_token|$user->table|$table->player_n"; for ($i = 0 ; $i < $table->player_n ; $i++) { $plist .= '|'.$brisk->user[$table->player[$i]]->sess; } log_legal($curtime, $user->ip, $user, "STAT:CREATE_GAME", $plist); - + log_wr("pre new Bin5"); if (($bin5 = new Bin5($brisk, $table_idx, $table_token, $get, $post, $cookie)) == FALSE) log_wr("bri create: FALSE"); else log_wr("bri create: ".serialize($bin5)); - + log_wr("pre init table"); // init table $bin5_table = $bin5->table[0]; @@ -691,26 +909,26 @@ function index_wr_main(&$brisk, $remote_addr_full, $get, $post, $cookie) for ($i = 0 ; $i < $table->player_n ; $i++) { $bin5_user_cur = $bin5->user[$i]; $user_cur = $brisk->user[$table->player[$i]]; - + $bin5_user_cur->laccwr = $curtime; $bin5_user_cur->trans_step = $user_cur->step + 1; $bin5_user_cur->comm[$bin5_user_cur->step % COMM_N] = ""; $bin5_user_cur->step_inc(); - $bin5_user_cur->comm[$bin5_user_cur->step % COMM_N] = show_table(&$bin5,&$bin5_user_cur,$bin5_user_cur->step+1,TRUE, FALSE); + $bin5_user_cur->comm[$bin5_user_cur->step % COMM_N] = show_table(&$bin5,&$bin5_user_cur,$bin5_user_cur->step+1,TRUE,FALSE); $bin5_user_cur->step_inc(); - + log_wr("TRY PRESAVE: ".$bin5_user_cur->step." TRANS STEP: ".$bin5_user_cur->trans_step); - + log_wr("Pre if!"); - + // ARRAY_POP DISABLED // // CHECK while (array_pop($user_cur->comm) != NULL); - + $user_cur->trans_step = $user_cur->step + 1; $user_cur->comm[$user_cur->step % COMM_N] = sprintf('gst.st_loc++; gst.st=%d; createCookie("table_idx", %d, 24*365, cookiepath); createCookie("table_token", "%s", 24*365, cookiepath); createCookie("lang", "%s", 24*365, cookiepath); xstm.stop(); window.onunload = null ; window.onbeforeunload = null ; document.location.assign("briskin5/index.php");|', $user_cur->step+1, $table_idx, $table_token, $G_lang); log_wr("TRANS ATTIVATO"); - + $user_cur->stat_set('table'); $user_cur->subst = 'asta'; $user_cur->laccwr = $curtime; @@ -722,14 +940,21 @@ function index_wr_main(&$brisk, $remote_addr_full, $get, $post, $cookie) } // change room $brisk->room_sitdown($user, $table_idx); - + log_wr("MOP finish"); } else if ($argz[0] == 'logout') { - $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; "; - $user->comm[$user->step % COMM_N] .= 'postact_logout();'; + $brisk->ghost_sess->push($curtime, $user->sess, GHOST_SESS_REAS_LOUT); $user->the_end = TRUE; - $user->step_inc(); + + if ($user->subst == 'sitdown') { + log_load("ROOM WAKEUP"); + $brisk->room_wakeup($user); + } + else if ($user->subst == 'standup') + $brisk->room_outstandup($user); + else + log_rd2("LOGOUT FROM WHAT ???"); } } /********************** @@ -738,24 +963,23 @@ function index_wr_main(&$brisk, $remote_addr_full, $get, $post, $cookie) * * **********************/ else if ($user->subst == 'sitdown') { + if ($user->the_end == TRUE) { + log_wr("INFO:SKIP:argz == sitdown && ->the_end == TRUE => ignore request."); + return FALSE; + } + if ($argz[0] == 'wakeup') { $brisk->room_wakeup($user); } else if ($argz[0] == 'logout') { - $brisk->room_wakeup($user); - $user->comm[$user->step % COMM_N] = "gst.st = ".($user->step+1)."; "; - $user->comm[$user->step % COMM_N] .= 'postact_logout();'; + $brisk->ghost_sess->push($curtime, $user->sess, GHOST_SESS_REAS_LOUT); $user->the_end = TRUE; - $user->step_inc(); + + $brisk->room_wakeup($user); } } } - log_wr("before save data"); - // Brisk::save_data($brisk); - log_wr($user->step, 'index_wr.php: after save_data()'); - -/* Brisk::unlock_data($sem); */ -/* exit; */ + return (FALSE); } ?>