1064 lines
27 KiB
JavaScript
1064 lines
27 KiB
JavaScript
/*
|
|
The MIT License (MIT)
|
|
Copyright (c) 2013 Calvin Montgomery
|
|
|
|
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
|
|
|
|
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
|
|
|
|
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
|
|
*/
|
|
|
|
var mysql = require("mysql-libmysqlclient");
|
|
var Logger = require("./logger");
|
|
var Media = require("./media").Media;
|
|
var bcrypt = require("bcrypt");
|
|
var hashlib = require("node_hash");
|
|
|
|
var db = false;
|
|
var SERVER = "";
|
|
var USER = "";
|
|
var DATABASE = "";
|
|
var PASSWORD = "";
|
|
var CONFIG = {};
|
|
var global_bans = {};
|
|
|
|
function setup(cfg) {
|
|
SERVER = cfg["mysql-server"];
|
|
USER = cfg["mysql-user"];
|
|
DATABASE = cfg["mysql-db"];
|
|
PASSWORD = cfg["mysql-pw"];
|
|
CONFIG = cfg;
|
|
}
|
|
|
|
function getConnection() {
|
|
if(db && db.connectedSync()) {
|
|
return db;
|
|
}
|
|
db = mysql.createConnectionSync();
|
|
db.connectSync(SERVER, USER, PASSWORD, DATABASE);
|
|
if(!db.connectedSync()) {
|
|
Logger.errlog.log("DB connection failed");
|
|
return false;
|
|
}
|
|
if(CONFIG["debug"]) {
|
|
db._querySync = db.querySync;
|
|
db.querySync = function(q) {
|
|
Logger.syslog.log("DEBUG: " + q);
|
|
return this._querySync(q);
|
|
}
|
|
}
|
|
return db;
|
|
}
|
|
|
|
function sqlEscape(obj) {
|
|
if(obj === undefined || obj === null)
|
|
return "NULL";
|
|
|
|
if(typeof obj === "boolean")
|
|
return obj ? "true" : "false";
|
|
|
|
if(typeof obj === "number")
|
|
return obj + "";
|
|
|
|
if(typeof obj === "object")
|
|
return "'object'";
|
|
|
|
if(typeof obj === "string") {
|
|
obj = obj.replace(/[\0\n\r\b\t\\\'\"\x1a]/g, function(s) {
|
|
switch(s) {
|
|
case "\0": return "\\0";
|
|
case "\n": return "\\n";
|
|
case "\r": return "\\r";
|
|
case "\b": return "\\b";
|
|
case "\t": return "\\t";
|
|
case "\x1a": return "\\Z";
|
|
default: return "\\" + s;
|
|
}
|
|
});
|
|
return "'" + obj + "'";
|
|
}
|
|
}
|
|
|
|
function createQuery(template, args) {
|
|
var last = -1;
|
|
while(template.indexOf("?", last) >= 0) {
|
|
var idx = template.indexOf("?", last);
|
|
var arg = args.shift();
|
|
arg = sqlEscape(arg);
|
|
// Stupid workaround because even if I call replace() with a string
|
|
// and not a regex, '$' still holds special meaning
|
|
// this actually replaces '$' with '$$'
|
|
// What the hell, Javascript?
|
|
arg = arg.replace(/\$/g, "$$$$");
|
|
var first = template.substring(0, idx);
|
|
template = first + template.substring(idx).replace("?", arg);
|
|
last = idx + arg.length;
|
|
}
|
|
template = template.replace(/`'/g, "`");
|
|
template = template.replace(/'`/g, "`");
|
|
return template;
|
|
}
|
|
|
|
function init() {
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return false;
|
|
}
|
|
|
|
// Create channel table
|
|
var query = ["CREATE TABLE IF NOT EXISTS `channels` (",
|
|
"`id` INT NOT NULL AUTO_INCREMENT,",
|
|
"`name` VARCHAR(255) NOT NULL,",
|
|
"`owner` VARCHAR(20) NOT NULL,",
|
|
"PRIMARY KEY(`id`))",
|
|
"ENGINE = MyISAM;"].join("");
|
|
var results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to create channels table");
|
|
}
|
|
|
|
// Create registration table
|
|
query = ["CREATE TABLE IF NOT EXISTS `registrations` (",
|
|
"`id` INT NOT NULL AUTO_INCREMENT,",
|
|
"`uname` VARCHAR(20) NOT NULL,",
|
|
"`pw` VARCHAR(64) NOT NULL,",
|
|
"`global_rank` INT NOT NULL,",
|
|
"`session_hash` VARCHAR(64) NOT NULL,",
|
|
"`expire` BIGINT NOT NULL,",
|
|
"`profile_image` VARCHAR(255) NOT NULL,",
|
|
"`profile_text` TEXT NOT NULL,",
|
|
"`email` VARCHAR(255) NOT NULL,",
|
|
"PRIMARY KEY (`id`))",
|
|
"ENGINE = MyISAM;"].join("");
|
|
|
|
results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to create registrations table");
|
|
}
|
|
|
|
// Create global bans table
|
|
query = ["CREATE TABLE IF NOT EXISTS `global_bans` (",
|
|
"`ip` VARCHAR(15) NOT NULL,",
|
|
"`note` VARCHAR(255) NOT NULL,",
|
|
"PRIMARY KEY (`ip`))",
|
|
"ENGINE = MyISAM;"].join("");
|
|
|
|
results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to create global ban table");
|
|
}
|
|
|
|
refreshGlobalBans();
|
|
|
|
// Create password reset table
|
|
query = ["CREATE TABLE IF NOT EXISTS `password_reset` (",
|
|
"`ip` VARCHAR(15) NOT NULL,",
|
|
"`name` VARCHAR(20) NOT NULL,",
|
|
"`hash` VARCHAR(64) NOT NULL,",
|
|
"`email` VARCHAR(255) NOT NULL,",
|
|
"`expire` BIGINT NOT NULL,",
|
|
"PRIMARY KEY (`name`))",
|
|
"ENGINE = MyISAM;"].join("");
|
|
|
|
results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to create password reset table");
|
|
}
|
|
|
|
// Create user playlist table
|
|
query = ["CREATE TABLE IF NOT EXISTS `user_playlists` (",
|
|
"`user` VARCHAR(20) NOT NULL,",
|
|
"`name` VARCHAR(255) NOT NULL,",
|
|
"`contents` MEDIUMTEXT NOT NULL,",
|
|
"`count` INT NOT NULL,",
|
|
"`time` INT NOT NULL,",
|
|
"PRIMARY KEY (`user`, `name`))",
|
|
"ENGINE = MyISAM;"].join("");
|
|
results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to create playlist table");
|
|
}
|
|
|
|
// Create user aliases table
|
|
query = ["CREATE TABLE IF NOT EXISTS `aliases` (",
|
|
"`visit_id` INT NOT NULL AUTO_INCREMENT,",
|
|
"`ip` VARCHAR(15) NOT NULL,",
|
|
"`name` VARCHAR(20) NOT NULL,",
|
|
"`time` BIGINT NOT NULL,",
|
|
"PRIMARY KEY (`visit_id`), INDEX (`ip`))",
|
|
"ENGINE = MyISAM;"].join("");
|
|
results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to create aliases table");
|
|
}
|
|
|
|
// Create action log table
|
|
query = ["CREATE TABLE IF NOT EXISTS `actionlog` (",
|
|
"`ip` VARCHAR(15) NOT NULL,",
|
|
"`name` VARCHAR(20) NOT NULL,",
|
|
"`action` VARCHAR(255) NOT NULL,",
|
|
"`args` TEXT NOT NULL,",
|
|
"`time` BIGINT NOT NULL,",
|
|
"PRIMARY KEY (`ip`, `time`), INDEX (`action`))",
|
|
"ENGINE = MyISAM;"].join("");
|
|
results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to create actionlog table");
|
|
}
|
|
|
|
// Create stats table
|
|
query = ["CREATE TABLE IF NOT EXISTS `stats` (",
|
|
"`time` BIGINT NOT NULL,",
|
|
"`usercount` INT NOT NULL,",
|
|
"`chancount` INT NOT NULL,",
|
|
"`mem` INT NOT NULL,",
|
|
"PRIMARY KEY (`time`))",
|
|
"ENGINE = MyISAM;"].join("");
|
|
results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to create stats table");
|
|
}
|
|
}
|
|
|
|
/* REGION Global Bans */
|
|
|
|
function checkGlobalBan(ip) {
|
|
const re = /(\d+)\.(\d+)\.(\d+)\.(\d+)/;
|
|
var s16 = ip.replace(re, "$1.$2");
|
|
var s24 = ip.replace(re, "$1.$2.$3");
|
|
return (ip in global_bans ||
|
|
s16 in global_bans ||
|
|
s24 in global_bans);
|
|
}
|
|
|
|
function refreshGlobalBans() {
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return;
|
|
}
|
|
|
|
var query = "SELECT * FROM `global_bans` WHERE 1";
|
|
var results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to load global bans");
|
|
}
|
|
else {
|
|
var rows = results.fetchAllSync();
|
|
global_bans = {};
|
|
for(var i = 0; i < rows.length; i++) {
|
|
global_bans[rows[i].ip] = rows[i].note;
|
|
}
|
|
}
|
|
return global_bans;
|
|
}
|
|
|
|
function globalBanIP(ip, reason) {
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return;
|
|
}
|
|
|
|
var query = createQuery(
|
|
"INSERT INTO `global_bans` VALUES (?, ?)",
|
|
[ip, reason]
|
|
);
|
|
return db.querySync(query);
|
|
}
|
|
|
|
function globalUnbanIP(ip) {
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return;
|
|
}
|
|
|
|
var query = createQuery(
|
|
"DELETE FROM `global_bans` WHERE ip=?",
|
|
[ip]
|
|
);
|
|
|
|
return db.querySync(query);
|
|
}
|
|
|
|
/* REGION Channel Registration/Loading */
|
|
|
|
function registerChannel(name, owner) {
|
|
if(!name.match(/^[a-zA-Z0-9-_]+$/)) {
|
|
return false;
|
|
}
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return false;
|
|
}
|
|
|
|
// Library table
|
|
var query = ["CREATE TABLE `?` (",
|
|
"`id` VARCHAR(255) NOT NULL,",
|
|
"`title` VARCHAR(255) NOT NULL,",
|
|
"`seconds` INT NOT NULL,",
|
|
"`type` VARCHAR(2) NOT NULL,",
|
|
"PRIMARY KEY (`id`))",
|
|
"ENGINE = MyISAM;"].join("");
|
|
query = createQuery(query, ["chan_" + name + "_library"]);
|
|
|
|
var results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to create table: chan_"+name+"_library");
|
|
return false;
|
|
}
|
|
|
|
// Rank table
|
|
query = ["CREATE TABLE `?` (",
|
|
"`name` VARCHAR(32) NOT NULL,",
|
|
"`rank` INT NOT NULL,",
|
|
"UNIQUE (`name`))",
|
|
"ENGINE = MyISAM;"].join("");
|
|
query = createQuery(query, ["chan_" + name + "_ranks"]);
|
|
|
|
results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to create table: chan_"+name+"_ranks");
|
|
return false;
|
|
}
|
|
|
|
// Ban table
|
|
query = ["CREATE TABLE `?` (",
|
|
"`ip` VARCHAR(15) NOT NULL,",
|
|
"`name` VARCHAR(32) NOT NULL,",
|
|
"`banner` VARCHAR(32) NOT NULL,",
|
|
"PRIMARY KEY (`ip`))",
|
|
"ENGINE = MyISAM;"].join("");
|
|
query = createQuery(query, ["chan_" + name + "_bans"]);
|
|
|
|
results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to create table: chan_"+name+"_bans");
|
|
return false;
|
|
}
|
|
|
|
// Insert into channel table
|
|
query = createQuery(
|
|
"INSERT INTO `channels` VALUES (NULL, ?, ?)",
|
|
[name, owner]
|
|
);
|
|
|
|
results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to insert into channel table: " + name);
|
|
return false;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
function loadChannel(chan) {
|
|
if(!chan.name.match(/^[a-zA-Z0-9-_]+$/)) {
|
|
return false;
|
|
}
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return false;
|
|
}
|
|
|
|
var query = createQuery(
|
|
"SELECT * FROM `channels` WHERE name=?",
|
|
[chan.name]
|
|
);
|
|
|
|
var results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to query channel table");
|
|
}
|
|
else {
|
|
var rows = results.fetchAllSync();
|
|
if(rows.length == 0) {
|
|
// Unregistered
|
|
Logger.syslog.log("Channel " + chan.name + " is unregistered");
|
|
return;
|
|
}
|
|
// Database is case insensitive
|
|
else if(rows[0].name != chan.name) {
|
|
chan.name = rows[0].name;
|
|
}
|
|
chan.registered = true;
|
|
}
|
|
|
|
// Load channel library
|
|
query = createQuery(
|
|
"SELECT * FROM `?`",
|
|
["chan_" + chan.name + "_library"]
|
|
);
|
|
|
|
results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to load channel library: " + chan.name);
|
|
}
|
|
else {
|
|
var rows = results.fetchAllSync();
|
|
for(var i = 0; i < rows.length; i++) {
|
|
var r = rows[i];
|
|
var m = new Media(r.id, r.title, r.seconds, r.type);
|
|
chan.library[r.id] = m;
|
|
}
|
|
}
|
|
|
|
// Load channel bans
|
|
query = createQuery(
|
|
"SELECT * FROM `?`",
|
|
["chan_" + chan.name + "_bans"]
|
|
);
|
|
|
|
results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to load channel bans: " + chan.name);
|
|
}
|
|
else {
|
|
var rows = results.fetchAllSync();
|
|
for(var i = 0; i < rows.length; i++) {
|
|
var r = rows[i];
|
|
if(r.ip == "*") {
|
|
chan.namebans[r.name] = r.banner;
|
|
}
|
|
else {
|
|
chan.ipbans[r.ip] = [r.name, r.banner];
|
|
}
|
|
}
|
|
}
|
|
|
|
chan.logger.log("*** Loaded channel from database");
|
|
Logger.syslog.log("Loaded channel " + chan.name + " from database");
|
|
}
|
|
|
|
function deleteChannel(name) {
|
|
if(!name.match(/^[a-zA-Z0-9-_]+$/)) {
|
|
return false;
|
|
}
|
|
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return false;
|
|
}
|
|
|
|
var query = "DROP TABLE `chan_?_bans`, `chan_?_ranks`, `chan_?_library`"
|
|
.replace(/\?/g, name);
|
|
|
|
var results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to delete channel tables for " + name);
|
|
return false;
|
|
}
|
|
|
|
query = createQuery(
|
|
"DELETE FROM `channels` WHERE name=?",
|
|
[name]
|
|
);
|
|
|
|
results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to delete row from channel table: " + name);
|
|
return false;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
/* REGION Channel data */
|
|
|
|
function getChannelRank(chan, name) {
|
|
if(!chan.match(/^[a-zA-Z0-9-_]+$/)) {
|
|
return false;
|
|
}
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return 0;
|
|
}
|
|
|
|
var query;
|
|
if(typeof name == "object") {
|
|
var n = "(?";
|
|
for(var i = 1; i < name.length; i++) {
|
|
n += ",?";
|
|
}
|
|
n += ")"
|
|
name.unshift("chan_" + chan + "_ranks");
|
|
query = createQuery(
|
|
"SELECT * FROM `?` WHERE name IN " + n,
|
|
name
|
|
);
|
|
}
|
|
else {
|
|
query = createQuery(
|
|
"SELECT * FROM `?` WHERE name=?",
|
|
["chan_"+chan+"_ranks", name]
|
|
);
|
|
}
|
|
|
|
var results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to lookup chan_"+chan+"_ranks");
|
|
return 0;
|
|
}
|
|
|
|
var rows = results.fetchAllSync();
|
|
if(typeof name == "object") {
|
|
var ranks = [];
|
|
for(var i = 0; i < rows.length; i++) {
|
|
ranks.push(rows[i].rank);
|
|
}
|
|
while(ranks.length < rows.length) {
|
|
ranks.push(0);
|
|
}
|
|
return ranks;
|
|
}
|
|
if(rows.length == 0) {
|
|
return 0;
|
|
}
|
|
|
|
return rows[0].rank;
|
|
}
|
|
|
|
function setChannelRank(chan, name, rank) {
|
|
if(!chan.match(/^[a-zA-Z0-9-_]+$/)) {
|
|
return false;
|
|
}
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return false;
|
|
}
|
|
|
|
var query = createQuery(
|
|
["INSERT INTO `?` ",
|
|
"(`name`, `rank`) ",
|
|
"VALUES ",
|
|
"(?, ?) ",
|
|
"ON DUPLICATE KEY UPDATE ",
|
|
"`rank`=?"].join(""),
|
|
["chan_"+chan+"_ranks", name, rank, rank]
|
|
);
|
|
|
|
return db.querySync(query);
|
|
}
|
|
|
|
function listChannelRanks(chan) {
|
|
if(!chan.match(/^[a-zA-Z0-9-_]+$/)) {
|
|
return [];
|
|
}
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return [];
|
|
}
|
|
|
|
var query = createQuery(
|
|
"SELECT * FROM `?` WHERE 1",
|
|
["chan_"+chan+"_ranks"]
|
|
);
|
|
|
|
var results = db.querySync(query);
|
|
if(!results) {
|
|
return [];
|
|
}
|
|
|
|
return results.fetchAllSync();
|
|
}
|
|
|
|
function addToLibrary(chan, media) {
|
|
if(!chan.match(/^[a-zA-Z0-9-_]+$/)) {
|
|
return false;
|
|
}
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return false;
|
|
}
|
|
|
|
var query = createQuery(
|
|
["INSERT INTO `?` ",
|
|
"(`id`, `title`, `seconds`, `type`) ",
|
|
"VALUES ",
|
|
"(?, ?, ?, ?)"].join(""),
|
|
["chan_"+chan+"_library", media.id, media.title, media.seconds, media.type]
|
|
);
|
|
|
|
return db.querySync(query);
|
|
}
|
|
|
|
function removeFromLibrary(chan, id) {
|
|
if(!chan.match(/^[a-zA-Z0-9-_]+$/)) {
|
|
return false;
|
|
}
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return false;
|
|
}
|
|
|
|
var query = createQuery(
|
|
"DELETE FROM `?` WHERE id=?",
|
|
["chan_"+chan+"_library", id]
|
|
);
|
|
|
|
return db.querySync(query);
|
|
}
|
|
|
|
function channelBan(chan, ip, name, banby) {
|
|
if(!chan.match(/^[a-zA-Z0-9-_]+$/)) {
|
|
return false;
|
|
}
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return false;
|
|
}
|
|
|
|
var query = createQuery(
|
|
["INSERT INTO `?` ",
|
|
"(`ip`, `name`, `banner`) ",
|
|
"VALUES ",
|
|
"(?, ?, ?)"].join(""),
|
|
["chan_"+chan+"_bans", ip, name, banby]
|
|
);
|
|
|
|
return db.querySync(query);
|
|
}
|
|
|
|
function channelUnbanIP(chan, ip) {
|
|
if(!chan.match(/^[a-zA-Z0-9-_]+$/)) {
|
|
return false;
|
|
}
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return false;
|
|
}
|
|
|
|
var query = createQuery(
|
|
"DELETE FROM `?` WHERE `ip`=?",
|
|
["chan_"+chan+"_bans", ip]
|
|
);
|
|
|
|
return db.querySync(query);
|
|
}
|
|
|
|
function channelUnbanName(chan, name) {
|
|
if(!chan.match(/^[a-zA-Z0-9-_]+$/)) {
|
|
return false;
|
|
}
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return false;
|
|
}
|
|
|
|
var query = createQuery(
|
|
"DELETE FROM `?` WHERE `ip`='*' AND `name`=?",
|
|
["chan_"+chan+"_bans", name]
|
|
);
|
|
|
|
return db.querySync(query);
|
|
}
|
|
|
|
/* REGION Users */
|
|
|
|
function getProfile(name) {
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return false;
|
|
}
|
|
|
|
var query = createQuery(
|
|
"SELECT profile_image,profile_text FROM registrations WHERE uname=?",
|
|
[name]
|
|
);
|
|
|
|
var results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to retrieve user profile");
|
|
throw "Database failure. Contact an administrator.";
|
|
}
|
|
|
|
var rows = results.fetchAllSync();
|
|
if(rows.length == 0) {
|
|
throw "User not found";
|
|
}
|
|
|
|
return {
|
|
profile_image: rows[0].profile_image,
|
|
profile_text: rows[0].profile_text
|
|
};
|
|
}
|
|
|
|
function setProfile(name, data) {
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return false;
|
|
}
|
|
|
|
var query = createQuery(
|
|
["UPDATE `registrations` SET ",
|
|
"`profile_image`=?,",
|
|
"`profile_text`=? ",
|
|
"WHERE uname=?"].join(""),
|
|
[data.image, data.text, name]
|
|
);
|
|
|
|
return db.querySync(query);
|
|
}
|
|
|
|
function setUserEmail(name, email) {
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return false;
|
|
}
|
|
|
|
var query = createQuery(
|
|
"UPDATE `registrations` SET `email`=? WHERE `uname`=?",
|
|
[email, name]
|
|
);
|
|
|
|
var results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to set user email");
|
|
return false;
|
|
}
|
|
return true;
|
|
}
|
|
|
|
function genSalt() {
|
|
var chars = "abcdefgihjklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"
|
|
+ "0123456789!@#$%^&*_+=~";
|
|
var salt = [];
|
|
for(var i = 0; i < 32; i++) {
|
|
salt.push(chars[parseInt(Math.random()*chars.length)]);
|
|
}
|
|
return salt.join('');
|
|
}
|
|
|
|
function generatePasswordReset(ip, name, email) {
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return false;
|
|
}
|
|
|
|
var query = createQuery(
|
|
"SELECT `email` FROM `registrations` WHERE `uname`=?",
|
|
[name]
|
|
);
|
|
|
|
var results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to retrieve user email");
|
|
return false;
|
|
}
|
|
|
|
var rows = results.fetchAllSync();
|
|
if(rows.length == 0) {
|
|
throw "Provided username does not exist";
|
|
}
|
|
if(rows[0].email != email) {
|
|
throw "Provided email does not match user's email";
|
|
}
|
|
|
|
// Validation complete, now time to reset it
|
|
var hash = hashlib.sha256(genSalt() + name);
|
|
var exp = Date.now() + 24*60*60*1000;
|
|
query = createQuery(
|
|
["INSERT INTO `password_reset` (",
|
|
"`ip`, `name`, `hash`, `email`, `expire`",
|
|
") VALUES (",
|
|
"?, ?, ?, ?, ?",
|
|
") ON DUPLICATE KEY UPDATE `hash`=?,`expire`=?"].join(""),
|
|
[ip, name, hash, email, exp, hash, exp]
|
|
);
|
|
|
|
results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to insert password reset");
|
|
return false;
|
|
}
|
|
|
|
return hash;
|
|
}
|
|
|
|
function recoverPassword(hash) {
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return false;
|
|
}
|
|
|
|
var query = createQuery(
|
|
"SELECT * FROM password_reset WHERE hash=?",
|
|
[hash]
|
|
);
|
|
|
|
var results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to retrieve from password_reset");
|
|
throw "Database error. Contact an administrator";
|
|
}
|
|
|
|
var rows = results.fetchAllSync();
|
|
if(rows.length == 0) {
|
|
throw "Invalid password reset link";
|
|
}
|
|
|
|
db.querySync(createQuery(
|
|
"DELETE FROM password_reset WHERE hash=?",
|
|
[hash]
|
|
));
|
|
|
|
if(Date.now() > rows[0].expire) {
|
|
throw "Link expired. Password resets are valid for 24 hours";
|
|
}
|
|
|
|
var pw;
|
|
if(!(pw = resetPassword(rows[0].name))) {
|
|
throw "Operation failed. Contact an administrator.";
|
|
}
|
|
|
|
return [rows[0].name, pw];
|
|
}
|
|
|
|
function resetPassword(name) {
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return false;
|
|
}
|
|
|
|
var pw = "";
|
|
for(var i = 0; i < 10; i++) {
|
|
pw += "abcdefghijklmnopqrstuvwxyz"[parseInt(Math.random() * 25)];
|
|
}
|
|
var hash = bcrypt.hashSync(pw, 10);
|
|
var query = createQuery(
|
|
"UPDATE `registrations` SET `pw`=? WHERE `uname`=?",
|
|
[hash, name]
|
|
);
|
|
|
|
var results = db.querySync(query);
|
|
if(!results) {
|
|
return false;
|
|
}
|
|
|
|
return pw;
|
|
}
|
|
|
|
/* REGION User Playlists */
|
|
function getUserPlaylists(user) {
|
|
var db = getConnection();
|
|
if(!db) {
|
|
[];
|
|
}
|
|
|
|
var query = createQuery(
|
|
"SELECT name,count,time FROM user_playlists WHERE user=?",
|
|
[user]
|
|
);
|
|
|
|
var results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to query user playlists");
|
|
return [];
|
|
}
|
|
|
|
return results.fetchAllSync();
|
|
}
|
|
|
|
function loadUserPlaylist(user, name) {
|
|
var db = getConnection();
|
|
if(!db) {
|
|
[];
|
|
}
|
|
|
|
var query = createQuery(
|
|
"SELECT contents FROM user_playlists WHERE user=? AND name=?",
|
|
[user, name]
|
|
);
|
|
|
|
var results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to query playlists");
|
|
return [];
|
|
}
|
|
|
|
var row = results.fetchAllSync()[0];
|
|
var pl;
|
|
try {
|
|
pl = JSON.parse(row.contents);
|
|
}
|
|
catch(e) {
|
|
Logger.errlog.log("! Failed to load playlist "+user+"."+name);
|
|
return [];
|
|
}
|
|
|
|
return pl;
|
|
}
|
|
|
|
function saveUserPlaylist(pl, user, name) {
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return false;
|
|
}
|
|
|
|
// Strip out unnecessary data
|
|
var pl2 = [];
|
|
var time = 0;
|
|
for(var i = 0; i < pl.length; i++) {
|
|
var e = {
|
|
id: pl[i].media.id,
|
|
title: pl[i].media.title,
|
|
seconds: pl[i].media.seconds,
|
|
type: pl[i].media.type
|
|
};
|
|
time += pl[i].media.seconds;
|
|
pl2.push(e);
|
|
}
|
|
var count = pl2.length;
|
|
var plstr = JSON.stringify(pl2);
|
|
|
|
var query = createQuery(
|
|
"INSERT INTO user_playlists VALUES (?, ?, ?, ?, ?)" +
|
|
"ON DUPLICATE KEY UPDATE contents=?,count=?,time=?",
|
|
[user, name, plstr, count, time, plstr, count, time]
|
|
);
|
|
|
|
var results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to insert into playlists");
|
|
return false;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
function deleteUserPlaylist(user, name) {
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return false;
|
|
}
|
|
|
|
var query = createQuery(
|
|
"DELETE FROM user_playlists WHERE user=? AND name=?",
|
|
[user, name]
|
|
);
|
|
|
|
var results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to delete from user_playlists");
|
|
}
|
|
return results;
|
|
}
|
|
|
|
/* User Aliases */
|
|
|
|
function recordVisit(ip, name) {
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return false;
|
|
}
|
|
|
|
var time = Date.now();
|
|
db.querySync(createQuery(
|
|
"DELETE FROM aliases WHERE ip=? AND name=?",
|
|
[ip, name]
|
|
));
|
|
var query = createQuery(
|
|
"INSERT INTO aliases VALUES (NULL, ?, ?, ?)",
|
|
[ip, name, time]
|
|
);
|
|
|
|
var results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to record visit");
|
|
}
|
|
|
|
// Keep most recent 5 records per IP
|
|
results = db.querySync(createQuery(
|
|
["DELETE FROM aliases WHERE ip=? AND visit_id NOT IN (",
|
|
"SELECT visit_id FROM (",
|
|
"SELECT visit_id,time FROM aliases WHERE ip=? ORDER BY time DESC LIMIT 5",
|
|
") foo",
|
|
");"].join(""),
|
|
[ip, ip]
|
|
));
|
|
|
|
return results;
|
|
}
|
|
|
|
function getAliases(ip) {
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return [];
|
|
}
|
|
|
|
var query = createQuery(
|
|
"SELECT name FROM aliases WHERE ip=?",
|
|
[ip]
|
|
);
|
|
|
|
var results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to retrieve aliases");
|
|
return [];
|
|
}
|
|
|
|
var names = [];
|
|
results.fetchAllSync().forEach(function(row) {
|
|
names.push(row.name);
|
|
});
|
|
|
|
return names;
|
|
}
|
|
|
|
function ipForName(name) {
|
|
var db = getConnection();
|
|
if(!db) {
|
|
return [];
|
|
}
|
|
|
|
var query = createQuery(
|
|
"SELECT ip FROM aliases WHERE name=?",
|
|
[name]
|
|
);
|
|
|
|
var results = db.querySync(query);
|
|
if(!results) {
|
|
Logger.errlog.log("! Failed to retrieve IP for name");
|
|
return [];
|
|
}
|
|
|
|
var ips = [];
|
|
results.fetchAllSync().forEach(function(row) {
|
|
ips.push(row.ip);
|
|
});
|
|
|
|
return ips;
|
|
}
|
|
|
|
exports.setup = setup;
|
|
exports.getConnection = getConnection;
|
|
exports.createQuery = createQuery;
|
|
exports.init = init;
|
|
exports.checkGlobalBan = checkGlobalBan;
|
|
exports.refreshGlobalBans = refreshGlobalBans;
|
|
exports.globalBanIP = globalBanIP;
|
|
exports.globalUnbanIP = globalUnbanIP;
|
|
exports.registerChannel = registerChannel;
|
|
exports.loadChannel = loadChannel;
|
|
exports.deleteChannel = deleteChannel;
|
|
exports.getChannelRank = getChannelRank;
|
|
exports.setChannelRank = setChannelRank;
|
|
exports.listChannelRanks = listChannelRanks;
|
|
exports.addToLibrary = addToLibrary;
|
|
exports.removeFromLibrary = removeFromLibrary;
|
|
exports.channelBan = channelBan;
|
|
exports.channelUnbanIP = channelUnbanIP;
|
|
exports.channelUnbanName = channelUnbanName;
|
|
exports.setProfile = setProfile;
|
|
exports.getProfile = getProfile;
|
|
exports.setUserEmail = setUserEmail;
|
|
exports.generatePasswordReset = generatePasswordReset;
|
|
exports.recoverPassword = recoverPassword;
|
|
exports.resetPassword = resetPassword;
|
|
exports.getUserPlaylists = getUserPlaylists;
|
|
exports.loadUserPlaylist = loadUserPlaylist;
|
|
exports.saveUserPlaylist = saveUserPlaylist;
|
|
exports.deleteUserPlaylist = deleteUserPlaylist;
|
|
exports.recordVisit = recordVisit;
|
|
exports.getAliases = getAliases;
|
|
exports.ipForName = ipForName;
|