CyTube/server.js

var path = require("path");
var fs = require("fs");
var express = require("express");
var Config = require("./config");
var Logger = require("./logger");
var Channel = require("./channel");
var User = require("./user");

const VERSION = "2.1.4";

function getIP(req) {
    var raw = req.connection.remoteAddress;
    var forward = req.header("x-forwarded-for");
    if(Server.cfg["trust-x-forward"] && forward) {
        var ip = forward.split(",")[0];
        Logger.syslog.log("REVPROXY " + raw + " => " + ip);
        return ip;
    }
    return raw;
}

function getSocketIP(socket) {
    var raw = socket.handshake.address.address;
    if(Server.cfg["trust-x-forward"]) {
        if(typeof socket.handshake.headers["x-forwarded-for"] == "string") {
            var ip = socket.handshake.headers["x-forwarded-for"]
                .split(",")[0];
            Logger.syslog.log("REVPROXY " + raw + " => " + ip);
            return ip;
        }
    }
    return raw;
}

var Server = {
    channels: [],
    channelLoaded: function (name) {
        for(var i in this.channels) {
            if(this.channels[i].canonical_name == name.toLowerCase())
                return true;
        }
        return false;
    },
    getChannel: function (name) {
        for(var i in this.channels) {
            if(this.channels[i].canonical_name == name.toLowerCase())
                return this.channels[i];
        }

        var c = new Channel(name, this);
        this.channels.push(c);
        return c;
    },
    unloadChannel: function(chan) {
        if(chan.registered)
            chan.saveDump();
        chan.playlist.die();
        chan.logger.close();
        for(var i in this.channels) {
            if(this.channels[i].canonical_name == chan.canonical_name) {
                this.channels.splice(i, 1);
                break;
            }
        }
        chan.name = "";
    },
    stats: null,
    app: null,
    io: null,
    httpserv: null,
    ioserv: null,
    db: null,
    ips: {},
    acp: null,
    httpaccess: null,
    logHTTP: function (req, status) {
        if(status === undefined)
            status = 200;
        var ip = req.connection.remoteAddress;
        var ip2 = false;
        if(this.cfg["trust-x-forward"])
            ip2 = req.header("x-forwarded-for") || req.header("cf-connecting-ip");
        var ipstr = !ip2 ? ip : ip + " (X-Forwarded-For " + ip2 + ")";
        var url = req.url;
        // Remove query
        if(url.indexOf("?") != -1)
            url = url.substring(0, url.lastIndexOf("?"));
        this.httpaccess.log([ipstr, req.method, url, status, req.headers["user-agent"]].join(" "));
    },
    init: function () {
        this.httpaccess = new Logger.Logger("httpaccess.log");
        this.app = express();
        // channel path
        this.app.get("/r/:channel(*)", function (req, res, next) {
            var c = req.params.channel;
            if(!c.match(/^[\w-_]+$/)) {
                res.redirect("/" + c);
            }
            else {
                this.logHTTP(req);
                res.sendfile(__dirname + "/www/channel.html");
            }
        }.bind(this));

        // api path
        this.api = require("./api")(this);
        this.app.get("/api/:apireq(*)", function (req, res, next) {
            this.logHTTP(req);
            this.api.handle(req.url.substring(5), req, res);
        }.bind(this));

        this.app.get("/", function (req, res, next) {
            this.logHTTP(req);
            res.sendfile(__dirname + "/www/index.html");
        }.bind(this));

        // default path
        this.app.get("/:thing(*)", function (req, res, next) {
            var opts = {
                root: __dirname + "/www",
                maxAge: this.cfg["asset-cache-ttl"]
            }
            res.sendfile(req.params.thing, opts, function (err) {
                if(err) {
                    this.logHTTP(req, err.status);
                    // Damn path traversal attacks
                    if(req.params.thing.indexOf("%2e") != -1) {
                        res.send("Don't try that again, I'll ban you");
                        Logger.syslog.log("WARNING: Attempted path "+
                                          "traversal from /" + getIP(req));
                        Logger.syslog.log("URL: " + req.url);
                    }
                    // Something actually went wrong
                    else {
                        // Status codes over 500 are server errors
                        if(err.status >= 500)
                            Logger.errlog.log(err);
                        res.send(err.status);
                    }
                }
                else {
                    this.logHTTP(req);
                }
            }.bind(this));
        }.bind(this));

        // fallback
        this.app.use(function (err, req, res, next) {
            this.logHTTP(req, err.status);
            if(err.status == 404) {
                res.send(404);
            } else {
                next(err);
            }
        }.bind(this));

        // bind servers
        this.httpserv = this.app.listen(Server.cfg["web-port"],
                                        Server.cfg["express-host"]);
        this.ioserv = express().listen(Server.cfg["io-port"],
                                       Server.cfg["express-host"]);

        // init socket.io
        this.io = require("socket.io").listen(this.ioserv);
        this.io.set("log level", 1);
        this.io.sockets.on("connection", function (socket) {
            var ip = getSocketIP(socket);
            socket._ip = ip;
            if(this.db.checkGlobalBan(ip)) {
                Logger.syslog.log("Disconnecting " + ip + " - gbanned");
                socket.emit("kick", {
                    reason: "You're globally banned."
                });
                socket.disconnect(true);
                return;
            }

            socket.on("disconnect", function () {
                this.ips[ip]--;
            }.bind(this));

            if(!(ip in this.ips))
                this.ips[ip] = 0;
            this.ips[ip]++;

            if(this.ips[ip] > Server.cfg["ip-connection-limit"]) {
                socket.emit("kick", {
                    reason: "Too many connections from your IP address"
                });
                socket.disconnect(true);
                return;
            }

            // finally a valid user
            Logger.syslog.log("Accepted socket from /" + socket._ip);
            new User(socket, this);
        }.bind(this));

        // init database
        this.db = require("./database");
        this.db.setup(Server.cfg);
        this.db.init();

        // init ACP
        this.acp = require("./acp")(this);

        // init stats
        this.stats = require("./stats")(this);
    },
    shutdown: function () {
        Logger.syslog.log("Unloading channels");
        for(var i in this.channels) {
            if(this.channels[i].registered) {
                Logger.syslog.log("Saving /r/" + this.channels[i].name);
                this.channels[i].saveDump();
            }
        }
        Logger.syslog.log("Goodbye");
        process.exit(0);
    }
};

Logger.syslog.log("Starting CyTube v" + VERSION);

fs.exists("chanlogs", function (exists) {
    exists || fs.mkdir("chanlogs");
});

fs.exists("chandump", function (exists) {
    exists || fs.mkdir("chandump");
});

Config.load(Server, "cfg.json", function () {
    Server.init();
    if(!Server.cfg["debug"]) {
        process.on("uncaughtException", function (err) {
            Logger.errlog.log("[SEVERE] Uncaught Exception: " + err);
            Logger.errlog.log(err.stack);
        });

        process.on("SIGINT", function () {
            Server.shutdown();
        });
    }
});