added new auth-check security feature

[NeonServV5.git] / src / main.c

diff --git a/src/main.c b/src/main.c
index e8d366aa0d7141696c51b302cc900f2b961fa3c2..17980b445762e5b2b9634d94bc2c4f2d93e98c98 100644 (file)
--- a/src/main.c
+++ b/src/main.c
@@ -43,6 +43,7 @@ static int running, hard_restart;
 static int statistics_requested_lusers = 0;
 int statistics_enabled;
 TIMEQ_CALLBACK(main_statistics);
+TIMEQ_CALLBACK(main_checkauths);
 #ifdef HAVE_THREADS
 int running_threads;
 pthread_mutex_t cache_sync;
@@ -165,6 +166,8 @@ main:
     if(!update_minutes) update_minutes = 2;
     timeq_add(update_minutes * 60 + 10, main_statistics, NULL);
     
+    timeq_add(90, main_checkauths, NULL);
+    
     int worker_threads = get_int_field("General.worker_threads");
     if(!worker_threads) worker_threads = 1;
     
@@ -262,6 +265,82 @@ void reload_config() {
     loadConfig("neonserv.conf");
 }
 
+static int getCurrentSecondsOfDay() {
+    time_t now = time(0);
+    struct tm *timeofday = localtime(&now);
+    int seconds = 0;
+    seconds += timeofday->tm_hour * 3600;
+    seconds += timeofday->tm_min * 60;
+    seconds += timeofday->tm_sec;
+    return seconds;
+}
+
+static AUTHLOOKUP_CALLBACK(main_checkauths_callback) {
+    //check if registered is still valid
+    MYSQL_RES *res;
+    MYSQL_ROW row;
+    printf_mysql_query("SELECT `user_id`, `user_registered` FROM `users` WHERE `user_user` = '%s'", escape_string(auth));
+    res = mysql_use();
+    if ((row = mysql_fetch_row(res)) != NULL) {
+        if(!exists || (strcmp(row[1], "0") && registered != atoi(row[1]))) {
+            //User is no longer valid! Delete it...
+            deleteUser(atoi(row[0]));
+            char *alertchan = get_string_field("General.CheckAuths.alertchan");
+            if(alertchan) {
+                struct ChanNode *alertchan_chan = getChanByName(alertchan);
+                struct ClientSocket *alertclient;
+                if(alertchan_chan && (alertclient = getChannelBot(alertchan_chan, 0)) != NULL) {
+                    putsock(alertclient, "PRIVMSG %s :Deleted User %s", alertchan_chan->name, auth);
+                }
+            }
+        } else if(exists && !strcmp(row[1], "0")) {
+            printf_mysql_query("UPDATE `users` SET `user_registered` = '%lu', `user_lastcheck` = UNIX_TIMESTAMP() WHERE `user_id` = '%s'", (unsigned long) registered, row[0]);
+        } else {
+            printf_mysql_query("UPDATE `users` SET `user_lastcheck` = UNIX_TIMESTAMP() WHERE `user_id` = '%s'", row[0]);
+        }
+    }
+}
+
+TIMEQ_CALLBACK(main_checkauths) {
+    int next_call = 600;
+    if(get_int_field("General.CheckAuths.enabled")) {
+        int check_start_time = get_int_field("General.CheckAuths.start_time") * 3600;
+        int duration = get_int_field("General.CheckAuths.duration") * 60;
+        int now = getCurrentSecondsOfDay();
+        if(now < check_start_time && check_start_time+duration >= 86400) {
+            check_start_time -= 86400;
+        }
+        if(now >= check_start_time && now < (check_start_time + duration)) {
+            next_call = get_int_field("General.CheckAuths.interval");
+            //get the "longest-unchecked-user"
+            MYSQL_RES *res;
+            MYSQL_ROW row;
+            int lastcheck;
+            time_t unixtime = time(0);
+            int min_unckecked = get_int_field("General.CheckAuths.min_unckecked");
+            printf_mysql_query("SELECT `user_user`, `user_lastcheck` FROM `users` ORDER BY `user_lastcheck` ASC LIMIT 1");
+            res = mysql_use();
+            if ((row = mysql_fetch_row(res)) != NULL) {
+                lastcheck = atoi(row[1]);
+                if(!lastcheck || unixtime - lastcheck >= min_unckecked) {
+                    lookup_authname(row[0], main_checkauths_callback, NULL);
+                } else 
+                    next_call = 300;
+            }
+        } else {
+            int pending;
+            if(now > check_start_time)
+                pending = 86400 - now + check_start_time;
+            else
+                pending = check_start_time - now;
+            if(pending < 600)
+                next_call = pending;
+        }
+        
+    }
+    timeq_add(next_call, main_checkauths, NULL);
+}
+
 TIMEQ_CALLBACK(main_statistics) {
     int update_minutes = get_int_field("statistics.frequency");
     if(!update_minutes) update_minutes = 2;