cmd_neonserv_giveowner.c

   1
   2 /*
   3 * argv[0] - nick / *auth
   4 * argv[1] - key
   5 */
   6
   7 #define GIVEOWNER_TIMEOUT 86400 /* 60*60*24 = 86400 */
   8
   9 static USERAUTH_CALLBACK(neonserv_cmd_giveowner_nick_lookup);
  10 static void neonserv_cmd_giveowner_async1(struct ClientSocket *client, struct ClientSocket *textclient, struct UserNode *user, struct ChanNode *chan, char *nick, char *auth, char *key);
  11
  12 struct neonserv_cmd_giveowner_cache {
  13     struct ClientSocket *client, *textclient;
  14     struct UserNode *user;
  15     struct ChanNode *chan;
  16     char *nick;
  17     char *key;
  18 };
  19
  20 static CMD_BIND(neonserv_cmd_giveowner) {
  21     if(getChannelAccess(user, chan, 0) != 500) {
  22         reply(getTextBot(), user, "NS_ACCESS_DENIED");
  23         return;
  24     }
  25     MYSQL_RES *res;
  26     MYSQL_ROW row;
  27     printf_mysql_query("SELECT `channel_lastgiveowner` FROM `channels` WHERE `channel_id` = '%d'", chan->channel_id);
  28     res = mysql_use();
  29     if ((row = mysql_fetch_row(res)) == NULL) return;
  30     if(strcmp(row[0], "0") && (atoi(row[0]) + GIVEOWNER_TIMEOUT) > time(0)) {
  31         char timeBuf[MAXLEN];
  32         reply(getTextBot(), user, "NS_GIVEOWNER_TIMEOUT", timeToStr(user, (GIVEOWNER_TIMEOUT - (time(0) - atoi(row[0]))), 2, timeBuf), chan->name);
  33         return;
  34     }
  35     if(argv[0][0] == '*') {
  36         //we've got an auth
  37         argv[0]++;
  38         neonserv_cmd_giveowner_async1(client, getTextBot(), user, chan, argv[0], argv[0], (argc != 1 ? argv[1] : NULL));
  39     } else {
  40         struct UserNode *cuser = getUserByNick(argv[0]);
  41         if(!cuser) {
  42             cuser = createTempUser(argv[0]);
  43             cuser->flags |= USERFLAG_ISTMPUSER;
  44         }
  45         if(cuser->flags & USERFLAG_ISAUTHED) {
  46             neonserv_cmd_giveowner_async1(client, getTextBot(), user, chan, argv[0], cuser->auth, (argc != 1 ? argv[1] : NULL));
  47         } else {
  48             struct neonserv_cmd_giveowner_cache *cache = malloc(sizeof(*cache));
  49             if (!cache) {
  50                 perror("malloc() failed");
  51                 return;
  52             }
  53             cache->client = client;
  54             cache->textclient = getTextBot();
  55             cache->user = user;
  56             cache->chan = chan;
  57             cache->nick = strdup(argv[0]);
  58             cache->key = (argc != 1 ? strdup(argv[1]) : NULL);
  59             get_userauth(cuser, neonserv_cmd_giveowner_nick_lookup, cache);
  60         }
  61     }
  62 }
  63
  64 static USERAUTH_CALLBACK(neonserv_cmd_giveowner_nick_lookup) {
  65     struct neonserv_cmd_giveowner_cache *cache = data;
  66     if(!user) {
  67         //USER_DOES_NOT_EXIST
  68         reply(cache->textclient, cache->user, "NS_USER_UNKNOWN", cache->nick);
  69     }
  70     else if(!(user->flags & USERFLAG_ISAUTHED)) {
  71         //USER_NOT_AUTHED
  72         reply(cache->textclient, cache->user, "NS_USER_NEED_AUTH", cache->nick);
  73     }
  74     else
  75         neonserv_cmd_giveowner_async1(cache->client, cache->textclient, cache->user, cache->chan, user->nick, user->auth, cache->key);
  76     free(cache->nick);
  77     if(cache->key)
  78         free(cache->key);
  79     free(cache);
  80 }
  81
  82 static void neonserv_cmd_giveowner_async1(struct ClientSocket *client, struct ClientSocket *textclient, struct UserNode *user, struct ChanNode *chan, char *nick, char *auth, char *key) {
  83     //we've got a valid auth now...
  84     if(!stricmp(user->auth, auth)) {
  85         reply(textclient, user, "NS_GIVEOWNER_SELF");
  86         return;
  87     }
  88     MYSQL_RES *res;
  89     MYSQL_ROW row;
  90     int userid;
  91     printf_mysql_query("SELECT `user_id` FROM `users` WHERE `user_user` = '%s'", escape_string(auth));
  92     res = mysql_use();
  93     if ((row = mysql_fetch_row(res)) != NULL) {
  94         userid = atoi(row[0]);
  95         //check if the user is already added
  96         printf_mysql_query("SELECT `chanuser_access`, `chanuser_id` FROM `chanusers` WHERE `chanuser_cid` = '%d' AND `chanuser_uid` = '%d'", chan->channel_id, userid);
  97         res = mysql_use();
  98         if ((row = mysql_fetch_row(res)) != NULL) {
  99             int seed = 0;
 100             char *tmp;
 101             char giveownerkey[16];
 102             for(tmp = user->auth; *tmp; tmp++)
 103                 seed = (seed * 0xEECE66DL ^ ((*tmp << 24) | (*tmp << 16) | (*tmp << 8) | *tmp));
 104             for(tmp = chan->name; *tmp; tmp++)
 105                 seed = (seed * 0xEECE66DL ^ ((*tmp << 24) | (*tmp << 16) | (*tmp << 8) | *tmp));
 106             sprintf(giveownerkey, "%08x", seed);
 107             if(key && !stricmp(giveownerkey, key)) {
 108                 //give ownership
 109                 printf_mysql_query("UPDATE `chanusers` SET `chanuser_access` = '500' WHERE `chanuser_id` = '%s'", row[1]);
 110                 printf_mysql_query("UPDATE `chanusers` SET `chanuser_access` = '499' WHERE `chanuser_cid` = '%d' AND `chanuser_uid` = (SELECT `user_id` FROM `users` WHERE `user_user` = '%s')", chan->channel_id, escape_string(user->auth));
 111                 printf_mysql_query("INSERT INTO `owner_history` (`owner_history_cid`, `owner_history_uid`, `owner_history_time`) VALUE ('%d', '%d', UNIX_TIMESTAMP())", chan->channel_id, userid);
 112                 reply(textclient, user, "NS_GIVEOWNER_DONE", chan->name, auth);
 113             } else {
 114                 reply(textclient, user, "NS_GIVEOWNER_CONFIRM", auth, giveownerkey);
 115             }
 116             return;
 117         }
 118     }
 119     reply(textclient, user, "NS_NOT_ON_USERLIST", nick, chan->name);
 120 }