\n"; + } +} diff --git a/config/mail/PHPMailer.php b/config/mail/PHPMailer.php new file mode 100644 index 000000000..e14cdbf57 --- /dev/null +++ b/config/mail/PHPMailer.php @@ -0,0 +1,5126 @@ + + * @author Jim Jagielski (jimjag)
`, appropriate for browser output + * * `error_log` Output to error log as configured in php.ini + * By default PHPMailer will use `echo` if run from a `cli` or `cli-server` SAPI, `html` otherwise. + * Alternatively, you can provide a callable expecting two params: a message string and the debug level: + * + * ```php + * $mail->Debugoutput = function($str, $level) {echo "debug level $level; message: $str";}; + * ``` + * + * Alternatively, you can pass in an instance of a PSR-3 compatible logger, though only `debug` + * level output is used: + * + * ```php + * $mail->Debugoutput = new myPsr3Logger; + * ``` + * + * @see SMTP::$Debugoutput + * + * @var string|callable|\Psr\Log\LoggerInterface + */ + public $Debugoutput = 'echo'; + + /** + * Whether to keep the SMTP connection open after each message. + * If this is set to true then the connection will remain open after a send, + * and closing the connection will require an explicit call to smtpClose(). + * It's a good idea to use this if you are sending multiple messages as it reduces overhead. + * See the mailing list example for how to use it. + * + * @var bool + */ + public $SMTPKeepAlive = false; + + /** + * Whether to split multiple to addresses into multiple messages + * or send them all in one message. + * Only supported in `mail` and `sendmail` transports, not in SMTP. + * + * @var bool + * + * @deprecated 6.0.0 PHPMailer isn't a mailing list manager! + */ + public $SingleTo = false; + + /** + * Storage for addresses when SingleTo is enabled. + * + * @var array + */ + protected $SingleToArray = []; + + /** + * Whether to generate VERP addresses on send. + * Only applicable when sending via SMTP. + * + * @see https://en.wikipedia.org/wiki/Variable_envelope_return_path + * @see http://www.postfix.org/VERP_README.html Postfix VERP info + * + * @var bool + */ + public $do_verp = false; + + /** + * Whether to allow sending messages with an empty body. + * + * @var bool + */ + public $AllowEmpty = false; + + /** + * DKIM selector. + * + * @var string + */ + public $DKIM_selector = ''; + + /** + * DKIM Identity. + * Usually the email address used as the source of the email. + * + * @var string + */ + public $DKIM_identity = ''; + + /** + * DKIM passphrase. + * Used if your key is encrypted. + * + * @var string + */ + public $DKIM_passphrase = ''; + + /** + * DKIM signing domain name. + * + * @example 'example.com' + * + * @var string + */ + public $DKIM_domain = ''; + + /** + * DKIM Copy header field values for diagnostic use. + * + * @var bool + */ + public $DKIM_copyHeaderFields = true; + + /** + * DKIM Extra signing headers. + * + * @example ['List-Unsubscribe', 'List-Help'] + * + * @var array + */ + public $DKIM_extraHeaders = []; + + /** + * DKIM private key file path. + * + * @var string + */ + public $DKIM_private = ''; + + /** + * DKIM private key string. + * + * If set, takes precedence over `$DKIM_private`. + * + * @var string + */ + public $DKIM_private_string = ''; + + /** + * Callback Action function name. + * + * The function that handles the result of the send email action. + * It is called out by send() for each email sent. + * + * Value can be any php callable: http://www.php.net/is_callable + * + * Parameters: + * bool $result result of the send action + * array $to email addresses of the recipients + * array $cc cc email addresses + * array $bcc bcc email addresses + * string $subject the subject + * string $body the email body + * string $from email address of sender + * string $extra extra information of possible use + * "smtp_transaction_id' => last smtp transaction id + * + * @var string + */ + public $action_function = ''; + + /** + * What to put in the X-Mailer header. + * Options: An empty string for PHPMailer default, whitespace/null for none, or a string to use. + * + * @var string|null + */ + public $XMailer = ''; + + /** + * Which validator to use by default when validating email addresses. + * May be a callable to inject your own validator, but there are several built-in validators. + * The default validator uses PHP's FILTER_VALIDATE_EMAIL filter_var option. + * + * @see PHPMailer::validateAddress() + * + * @var string|callable + */ + public static $validator = 'php'; + + /** + * An instance of the SMTP sender class. + * + * @var SMTP + */ + protected $smtp; + + /** + * The array of 'to' names and addresses. + * + * @var array + */ + protected $to = []; + + /** + * The array of 'cc' names and addresses. + * + * @var array + */ + protected $cc = []; + + /** + * The array of 'bcc' names and addresses. + * + * @var array + */ + protected $bcc = []; + + /** + * The array of reply-to names and addresses. + * + * @var array + */ + protected $ReplyTo = []; + + /** + * An array of all kinds of addresses. + * Includes all of $to, $cc, $bcc. + * + * @see PHPMailer::$to + * @see PHPMailer::$cc + * @see PHPMailer::$bcc + * + * @var array + */ + protected $all_recipients = []; + + /** + * An array of names and addresses queued for validation. + * In send(), valid and non duplicate entries are moved to $all_recipients + * and one of $to, $cc, or $bcc. + * This array is used only for addresses with IDN. + * + * @see PHPMailer::$to + * @see PHPMailer::$cc + * @see PHPMailer::$bcc + * @see PHPMailer::$all_recipients + * + * @var array + */ + protected $RecipientsQueue = []; + + /** + * An array of reply-to names and addresses queued for validation. + * In send(), valid and non duplicate entries are moved to $ReplyTo. + * This array is used only for addresses with IDN. + * + * @see PHPMailer::$ReplyTo + * + * @var array + */ + protected $ReplyToQueue = []; + + /** + * The array of attachments. + * + * @var array + */ + protected $attachment = []; + + /** + * The array of custom headers. + * + * @var array + */ + protected $CustomHeader = []; + + /** + * The most recent Message-ID (including angular brackets). + * + * @var string + */ + protected $lastMessageID = ''; + + /** + * The message's MIME type. + * + * @var string + */ + protected $message_type = ''; + + /** + * The array of MIME boundary strings. + * + * @var array + */ + protected $boundary = []; + + /** + * The array of available text strings for the current language. + * + * @var array + */ + protected $language = []; + + /** + * The number of errors encountered. + * + * @var int + */ + protected $error_count = 0; + + /** + * The S/MIME certificate file path. + * + * @var string + */ + protected $sign_cert_file = ''; + + /** + * The S/MIME key file path. + * + * @var string + */ + protected $sign_key_file = ''; + + /** + * The optional S/MIME extra certificates ("CA Chain") file path. + * + * @var string + */ + protected $sign_extracerts_file = ''; + + /** + * The S/MIME password for the key. + * Used only if the key is encrypted. + * + * @var string + */ + protected $sign_key_pass = ''; + + /** + * Whether to throw exceptions for errors. + * + * @var bool + */ + protected $exceptions = false; + + /** + * Unique ID used for message ID and boundaries. + * + * @var string + */ + protected $uniqueid = ''; + + /** + * The PHPMailer Version number. + * + * @var string + */ + const VERSION = '6.7.1'; + + /** + * Error severity: message only, continue processing. + * + * @var int + */ + const STOP_MESSAGE = 0; + + /** + * Error severity: message, likely ok to continue processing. + * + * @var int + */ + const STOP_CONTINUE = 1; + + /** + * Error severity: message, plus full stop, critical error reached. + * + * @var int + */ + const STOP_CRITICAL = 2; + + /** + * The SMTP standard CRLF line break. + * If you want to change line break format, change static::$LE, not this. + */ + const CRLF = "\r\n"; + + /** + * "Folding White Space" a white space string used for line folding. + */ + const FWS = ' '; + + /** + * SMTP RFC standard line ending; Carriage Return, Line Feed. + * + * @var string + */ + protected static $LE = self::CRLF; + + /** + * The maximum line length supported by mail(). + * + * Background: mail() will sometimes corrupt messages + * with headers headers longer than 65 chars, see #818. + * + * @var int + */ + const MAIL_MAX_LINE_LENGTH = 63; + + /** + * The maximum line length allowed by RFC 2822 section 2.1.1. + * + * @var int + */ + const MAX_LINE_LENGTH = 998; + + /** + * The lower maximum line length allowed by RFC 2822 section 2.1.1. + * This length does NOT include the line break + * 76 means that lines will be 77 or 78 chars depending on whether + * the line break format is LF or CRLF; both are valid. + * + * @var int + */ + const STD_LINE_LENGTH = 76; + + /** + * Constructor. + * + * @param bool $exceptions Should we throw external exceptions? + */ + public function __construct($exceptions = null) + { + if (null !== $exceptions) { + $this->exceptions = (bool) $exceptions; + } + //Pick an appropriate debug output format automatically + $this->Debugoutput = (strpos(PHP_SAPI, 'cli') !== false ? 'echo' : 'html'); + } + + /** + * Destructor. + */ + public function __destruct() + { + //Close any open SMTP connection nicely + $this->smtpClose(); + } + + /** + * Call mail() in a safe_mode-aware fashion. + * Also, unless sendmail_path points to sendmail (or something that + * claims to be sendmail), don't pass params (not a perfect fix, + * but it will do). + * + * @param string $to To + * @param string $subject Subject + * @param string $body Message Body + * @param string $header Additional Header(s) + * @param string|null $params Params + * + * @return bool + */ + private function mailPassthru($to, $subject, $body, $header, $params) + { + //Check overloading of mail function to avoid double-encoding + if ((int)ini_get('mbstring.func_overload') & 1) { + $subject = $this->secureHeader($subject); + } else { + $subject = $this->encodeHeader($this->secureHeader($subject)); + } + //Calling mail() with null params breaks + $this->edebug('Sending with mail()'); + $this->edebug('Sendmail path: ' . ini_get('sendmail_path')); + $this->edebug("Envelope sender: {$this->Sender}"); + $this->edebug("To: {$to}"); + $this->edebug("Subject: {$subject}"); + $this->edebug("Headers: {$header}"); + if (!$this->UseSendmailOptions || null === $params) { + $result = @mail($to, $subject, $body, $header); + } else { + $this->edebug("Additional params: {$params}"); + $result = @mail($to, $subject, $body, $header, $params); + } + $this->edebug('Result: ' . ($result ? 'true' : 'false')); + return $result; + } + + /** + * Output debugging info via a user-defined method. + * Only generates output if debug output is enabled. + * + * @see PHPMailer::$Debugoutput + * @see PHPMailer::$SMTPDebug + * + * @param string $str + */ + protected function edebug($str) + { + if ($this->SMTPDebug <= 0) { + return; + } + //Is this a PSR-3 logger? + if ($this->Debugoutput instanceof \Psr\Log\LoggerInterface) { + $this->Debugoutput->debug($str); + + return; + } + //Avoid clash with built-in function names + if (is_callable($this->Debugoutput) && !in_array($this->Debugoutput, ['error_log', 'html', 'echo'])) { + call_user_func($this->Debugoutput, $str, $this->SMTPDebug); + + return; + } + switch ($this->Debugoutput) { + case 'error_log': + //Don't output, just log + /** @noinspection ForgottenDebugOutputInspection */ + error_log($str); + break; + case 'html': + //Cleans up output a bit for a better looking, HTML-safe output + echo htmlentities( + preg_replace('/[\r\n]+/', '', $str), + ENT_QUOTES, + 'UTF-8' + ), "
\n"; + break; + case 'echo': + default: + //Normalize line breaks + $str = preg_replace('/\r\n|\r/m', "\n", $str); + echo gmdate('Y-m-d H:i:s'), + "\t", + //Trim trailing space + trim( + //Indent for readability, except for trailing break + str_replace( + "\n", + "\n \t ", + trim($str) + ) + ), + "\n"; + } + } + + /** + * Sets message type to HTML or plain. + * + * @param bool $isHtml True for HTML mode + */ + public function isHTML($isHtml = true) + { + if ($isHtml) { + $this->ContentType = static::CONTENT_TYPE_TEXT_HTML; + } else { + $this->ContentType = static::CONTENT_TYPE_PLAINTEXT; + } + } + + /** + * Send messages using SMTP. + */ + public function isSMTP() + { + $this->Mailer = 'smtp'; + } + + /** + * Send messages using PHP's mail() function. + */ + public function isMail() + { + $this->Mailer = 'mail'; + } + + /** + * Send messages using $Sendmail. + */ + public function isSendmail() + { + $ini_sendmail_path = ini_get('sendmail_path'); + + if (false === stripos($ini_sendmail_path, 'sendmail')) { + $this->Sendmail = '/usr/sbin/sendmail'; + } else { + $this->Sendmail = $ini_sendmail_path; + } + $this->Mailer = 'sendmail'; + } + + /** + * Send messages using qmail. + */ + public function isQmail() + { + $ini_sendmail_path = ini_get('sendmail_path'); + + if (false === stripos($ini_sendmail_path, 'qmail')) { + $this->Sendmail = '/var/qmail/bin/qmail-inject'; + } else { + $this->Sendmail = $ini_sendmail_path; + } + $this->Mailer = 'qmail'; + } + + /** + * Add a "To" address. + * + * @param string $address The email address to send to + * @param string $name + * + * @throws Exception + * + * @return bool true on success, false if address already used or invalid in some way + */ + public function addAddress($address, $name = '') + { + return $this->addOrEnqueueAnAddress('to', $address, $name); + } + + /** + * Add a "CC" address. + * + * @param string $address The email address to send to + * @param string $name + * + * @throws Exception + * + * @return bool true on success, false if address already used or invalid in some way + */ + public function addCC($address, $name = '') + { + return $this->addOrEnqueueAnAddress('cc', $address, $name); + } + + /** + * Add a "BCC" address. + * + * @param string $address The email address to send to + * @param string $name + * + * @throws Exception + * + * @return bool true on success, false if address already used or invalid in some way + */ + public function addBCC($address, $name = '') + { + return $this->addOrEnqueueAnAddress('bcc', $address, $name); + } + + /** + * Add a "Reply-To" address. + * + * @param string $address The email address to reply to + * @param string $name + * + * @throws Exception + * + * @return bool true on success, false if address already used or invalid in some way + */ + public function addReplyTo($address, $name = '') + { + return $this->addOrEnqueueAnAddress('Reply-To', $address, $name); + } + + /** + * Add an address to one of the recipient arrays or to the ReplyTo array. Because PHPMailer + * can't validate addresses with an IDN without knowing the PHPMailer::$CharSet (that can still + * be modified after calling this function), addition of such addresses is delayed until send(). + * Addresses that have been added already return false, but do not throw exceptions. + * + * @param string $kind One of 'to', 'cc', 'bcc', or 'ReplyTo' + * @param string $address The email address + * @param string $name An optional username associated with the address + * + * @throws Exception + * + * @return bool true on success, false if address already used or invalid in some way + */ + protected function addOrEnqueueAnAddress($kind, $address, $name) + { + $pos = false; + if ($address !== null) { + $address = trim($address); + $pos = strrpos($address, '@'); + } + if (false === $pos) { + //At-sign is missing. + $error_message = sprintf( + '%s (%s): %s', + $this->lang('invalid_address'), + $kind, + $address + ); + $this->setError($error_message); + $this->edebug($error_message); + if ($this->exceptions) { + throw new Exception($error_message); + } + + return false; + } + if ($name !== null && is_string($name)) { + $name = trim(preg_replace('/[\r\n]+/', '', $name)); //Strip breaks and trim + } else { + $name = ''; + } + $params = [$kind, $address, $name]; + //Enqueue addresses with IDN until we know the PHPMailer::$CharSet. + //Domain is assumed to be whatever is after the last @ symbol in the address + if (static::idnSupported() && $this->has8bitChars(substr($address, ++$pos))) { + if ('Reply-To' !== $kind) { + if (!array_key_exists($address, $this->RecipientsQueue)) { + $this->RecipientsQueue[$address] = $params; + + return true; + } + } elseif (!array_key_exists($address, $this->ReplyToQueue)) { + $this->ReplyToQueue[$address] = $params; + + return true; + } + + return false; + } + + //Immediately add standard addresses without IDN. + return call_user_func_array([$this, 'addAnAddress'], $params); + } + + /** + * Set the boundaries to use for delimiting MIME parts. + * If you override this, ensure you set all 3 boundaries to unique values. + * The default boundaries include a "=_" sequence which cannot occur in quoted-printable bodies, + * as suggested by https://www.rfc-editor.org/rfc/rfc2045#section-6.7 + * + * @return void + */ + public function setBoundaries() + { + $this->uniqueid = $this->generateId(); + $this->boundary[1] = 'b1=_' . $this->uniqueid; + $this->boundary[2] = 'b2=_' . $this->uniqueid; + $this->boundary[3] = 'b3=_' . $this->uniqueid; + } + + /** + * Add an address to one of the recipient arrays or to the ReplyTo array. + * Addresses that have been added already return false, but do not throw exceptions. + * + * @param string $kind One of 'to', 'cc', 'bcc', or 'ReplyTo' + * @param string $address The email address to send, resp. to reply to + * @param string $name + * + * @throws Exception + * + * @return bool true on success, false if address already used or invalid in some way + */ + protected function addAnAddress($kind, $address, $name = '') + { + if (!in_array($kind, ['to', 'cc', 'bcc', 'Reply-To'])) { + $error_message = sprintf( + '%s: %s', + $this->lang('Invalid recipient kind'), + $kind + ); + $this->setError($error_message); + $this->edebug($error_message); + if ($this->exceptions) { + throw new Exception($error_message); + } + + return false; + } + if (!static::validateAddress($address)) { + $error_message = sprintf( + '%s (%s): %s', + $this->lang('invalid_address'), + $kind, + $address + ); + $this->setError($error_message); + $this->edebug($error_message); + if ($this->exceptions) { + throw new Exception($error_message); + } + + return false; + } + if ('Reply-To' !== $kind) { + if (!array_key_exists(strtolower($address), $this->all_recipients)) { + $this->{$kind}[] = [$address, $name]; + $this->all_recipients[strtolower($address)] = true; + + return true; + } + } elseif (!array_key_exists(strtolower($address), $this->ReplyTo)) { + $this->ReplyTo[strtolower($address)] = [$address, $name]; + + return true; + } + + return false; + } + + /** + * Parse and validate a string containing one or more RFC822-style comma-separated email addresses + * of the form "display name " into an array of name/address pairs. + * Uses the imap_rfc822_parse_adrlist function if the IMAP extension is available. + * Note that quotes in the name part are removed. + * + * @see http://www.andrew.cmu.edu/user/agreen1/testing/mrbs/web/Mail/RFC822.php A more careful implementation + * + * @param string $addrstr The address list string + * @param bool $useimap Whether to use the IMAP extension to parse the list + * @param string $charset The charset to use when decoding the address list string. + * + * @return array + */ + public static function parseAddresses($addrstr, $useimap = true, $charset = self::CHARSET_ISO88591) + { + $addresses = []; + if ($useimap && function_exists('imap_rfc822_parse_adrlist')) { + //Use this built-in parser if it's available + $list = imap_rfc822_parse_adrlist($addrstr, ''); + // Clear any potential IMAP errors to get rid of notices being thrown at end of script. + imap_errors(); + foreach ($list as $address) { + if ( + '.SYNTAX-ERROR.' !== $address->host && + static::validateAddress($address->mailbox . '@' . $address->host) + ) { + //Decode the name part if it's present and encoded + if ( + property_exists($address, 'personal') && + //Check for a Mbstring constant rather than using extension_loaded, which is sometimes disabled + defined('MB_CASE_UPPER') && + preg_match('/^=\?.*\?=$/s', $address->personal) + ) { + $origCharset = mb_internal_encoding(); + mb_internal_encoding($charset); + //Undo any RFC2047-encoded spaces-as-underscores + $address->personal = str_replace('_', '=20', $address->personal); + //Decode the name + $address->personal = mb_decode_mimeheader($address->personal); + mb_internal_encoding($origCharset); + } + + $addresses[] = [ + 'name' => (property_exists($address, 'personal') ? $address->personal : ''), + 'address' => $address->mailbox . '@' . $address->host, + ]; + } + } + } else { + //Use this simpler parser + $list = explode(',', $addrstr); + foreach ($list as $address) { + $address = trim($address); + //Is there a separate name part? + if (strpos($address, '<') === false) { + //No separate name, just use the whole thing + if (static::validateAddress($address)) { + $addresses[] = [ + 'name' => '', + 'address' => $address, + ]; + } + } else { + list($name, $email) = explode('<', $address); + $email = trim(str_replace('>', '', $email)); + $name = trim($name); + if (static::validateAddress($email)) { + //Check for a Mbstring constant rather than using extension_loaded, which is sometimes disabled + //If this name is encoded, decode it + if (defined('MB_CASE_UPPER') && preg_match('/^=\?.*\?=$/s', $name)) { + $origCharset = mb_internal_encoding(); + mb_internal_encoding($charset); + //Undo any RFC2047-encoded spaces-as-underscores + $name = str_replace('_', '=20', $name); + //Decode the name + $name = mb_decode_mimeheader($name); + mb_internal_encoding($origCharset); + } + $addresses[] = [ + //Remove any surrounding quotes and spaces from the name + 'name' => trim($name, '\'" '), + 'address' => $email, + ]; + } + } + } + } + + return $addresses; + } + + /** + * Set the From and FromName properties. + * + * @param string $address + * @param string $name + * @param bool $auto Whether to also set the Sender address, defaults to true + * + * @throws Exception + * + * @return bool + */ + public function setFrom($address, $name = '', $auto = true) + { + $address = trim((string)$address); + $name = trim(preg_replace('/[\r\n]+/', '', $name)); //Strip breaks and trim + //Don't validate now addresses with IDN. Will be done in send(). + $pos = strrpos($address, '@'); + if ( + (false === $pos) + || ((!$this->has8bitChars(substr($address, ++$pos)) || !static::idnSupported()) + && !static::validateAddress($address)) + ) { + $error_message = sprintf( + '%s (From): %s', + $this->lang('invalid_address'), + $address + ); + $this->setError($error_message); + $this->edebug($error_message); + if ($this->exceptions) { + throw new Exception($error_message); + } + + return false; + } + $this->From = $address; + $this->FromName = $name; + if ($auto && empty($this->Sender)) { + $this->Sender = $address; + } + + return true; + } + + /** + * Return the Message-ID header of the last email. + * Technically this is the value from the last time the headers were created, + * but it's also the message ID of the last sent message except in + * pathological cases. + * + * @return string + */ + public function getLastMessageID() + { + return $this->lastMessageID; + } + + /** + * Check that a string looks like an email address. + * Validation patterns supported: + * * `auto` Pick best pattern automatically; + * * `pcre8` Use the squiloople.com pattern, requires PCRE > 8.0; + * * `pcre` Use old PCRE implementation; + * * `php` Use PHP built-in FILTER_VALIDATE_EMAIL; + * * `html5` Use the pattern given by the HTML5 spec for 'email' type form input elements. + * * `noregex` Don't use a regex: super fast, really dumb. + * Alternatively you may pass in a callable to inject your own validator, for example: + * + * ```php + * PHPMailer::validateAddress('user@example.com', function($address) { + * return (strpos($address, '@') !== false); + * }); + * ``` + * + * You can also set the PHPMailer::$validator static to a callable, allowing built-in methods to use your validator. + * + * @param string $address The email address to check + * @param string|callable $patternselect Which pattern to use + * + * @return bool + */ + public static function validateAddress($address, $patternselect = null) + { + if (null === $patternselect) { + $patternselect = static::$validator; + } + //Don't allow strings as callables, see SECURITY.md and CVE-2021-3603 + if (is_callable($patternselect) && !is_string($patternselect)) { + return call_user_func($patternselect, $address); + } + //Reject line breaks in addresses; it's valid RFC5322, but not RFC5321 + if (strpos($address, "\n") !== false || strpos($address, "\r") !== false) { + return false; + } + switch ($patternselect) { + case 'pcre': //Kept for BC + case 'pcre8': + /* + * A more complex and more permissive version of the RFC5322 regex on which FILTER_VALIDATE_EMAIL + * is based. + * In addition to the addresses allowed by filter_var, also permits: + * * dotless domains: `a@b` + * * comments: `1234 @ local(blah) .machine .example` + * * quoted elements: `'"test blah"@example.org'` + * * numeric TLDs: `a@b.123` + * * unbracketed IPv4 literals: `a@192.168.0.1` + * * IPv6 literals: 'first.last@[IPv6:a1::]' + * Not all of these will necessarily work for sending! + * + * @see http://squiloople.com/2009/12/20/email-address-validation/ + * @copyright 2009-2010 Michael Rushton + * Feel free to use and redistribute this code. But please keep this copyright notice. + */ + return (bool) preg_match( + '/^(?!(?>(?1)"?(?>\\\[ -~]|[^"])"?(?1)){255,})(?!(?>(?1)"?(?>\\\[ -~]|[^"])"?(?1)){65,}@)' . + '((?>(?>(?>((?>(?>(?>\x0D\x0A)?[\t ])+|(?>[\t ]*\x0D\x0A)?[\t ]+)?)(\((?>(?2)' . + '(?>[\x01-\x08\x0B\x0C\x0E-\'*-\[\]-\x7F]|\\\[\x00-\x7F]|(?3)))*(?2)\)))+(?2))|(?2))?)' . + '([!#-\'*+\/-9=?^-~-]+|"(?>(?2)(?>[\x01-\x08\x0B\x0C\x0E-!#-\[\]-\x7F]|\\\[\x00-\x7F]))*' . + '(?2)")(?>(?1)\.(?1)(?4))*(?1)@(?!(?1)[a-z0-9-]{64,})(?1)(?>([a-z0-9](?>[a-z0-9-]*[a-z0-9])?)' . + '(?>(?1)\.(?!(?1)[a-z0-9-]{64,})(?1)(?5)){0,126}|\[(?:(?>IPv6:(?>([a-f0-9]{1,4})(?>:(?6)){7}' . + '|(?!(?:.*[a-f0-9][:\]]){8,})((?6)(?>:(?6)){0,6})?::(?7)?))|(?>(?>IPv6:(?>(?6)(?>:(?6)){5}:' . + '|(?!(?:.*[a-f0-9]:){6,})(?8)?::(?>((?6)(?>:(?6)){0,4}):)?))?(25[0-5]|2[0-4][0-9]|1[0-9]{2}' . + '|[1-9]?[0-9])(?>\.(?9)){3}))\])(?1)$/isD', + $address + ); + case 'html5': + /* + * This is the pattern used in the HTML5 spec for validation of 'email' type form input elements. + * + * @see https://html.spec.whatwg.org/#e-mail-state-(type=email) + */ + return (bool) preg_match( + '/^[a-zA-Z0-9.!#$%&\'*+\/=?^_`{|}~-]+@[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}' . + '[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*$/sD', + $address + ); + case 'php': + default: + return filter_var($address, FILTER_VALIDATE_EMAIL) !== false; + } + } + + /** + * Tells whether IDNs (Internationalized Domain Names) are supported or not. This requires the + * `intl` and `mbstring` PHP extensions. + * + * @return bool `true` if required functions for IDN support are present + */ + public static function idnSupported() + { + return function_exists('idn_to_ascii') && function_exists('mb_convert_encoding'); + } + + /** + * Converts IDN in given email address to its ASCII form, also known as punycode, if possible. + * Important: Address must be passed in same encoding as currently set in PHPMailer::$CharSet. + * This function silently returns unmodified address if: + * - No conversion is necessary (i.e. domain name is not an IDN, or is already in ASCII form) + * - Conversion to punycode is impossible (e.g. required PHP functions are not available) + * or fails for any reason (e.g. domain contains characters not allowed in an IDN). + * + * @see PHPMailer::$CharSet + * + * @param string $address The email address to convert + * + * @return string The encoded address in ASCII form + */ + public function punyencodeAddress($address) + { + //Verify we have required functions, CharSet, and at-sign. + $pos = strrpos($address, '@'); + if ( + !empty($this->CharSet) && + false !== $pos && + static::idnSupported() + ) { + $domain = substr($address, ++$pos); + //Verify CharSet string is a valid one, and domain properly encoded in this CharSet. + if ($this->has8bitChars($domain) && @mb_check_encoding($domain, $this->CharSet)) { + //Convert the domain from whatever charset it's in to UTF-8 + $domain = mb_convert_encoding($domain, self::CHARSET_UTF8, $this->CharSet); + //Ignore IDE complaints about this line - method signature changed in PHP 5.4 + $errorcode = 0; + if (defined('INTL_IDNA_VARIANT_UTS46')) { + //Use the current punycode standard (appeared in PHP 7.2) + $punycode = idn_to_ascii( + $domain, + \IDNA_DEFAULT | \IDNA_USE_STD3_RULES | \IDNA_CHECK_BIDI | + \IDNA_CHECK_CONTEXTJ | \IDNA_NONTRANSITIONAL_TO_ASCII, + \INTL_IDNA_VARIANT_UTS46 + ); + } elseif (defined('INTL_IDNA_VARIANT_2003')) { + //Fall back to this old, deprecated/removed encoding + $punycode = idn_to_ascii($domain, $errorcode, \INTL_IDNA_VARIANT_2003); + } else { + //Fall back to a default we don't know about + $punycode = idn_to_ascii($domain, $errorcode); + } + if (false !== $punycode) { + return substr($address, 0, $pos) . $punycode; + } + } + } + + return $address; + } + + /** + * Create a message and send it. + * Uses the sending method specified by $Mailer. + * + * @throws Exception + * + * @return bool false on error - See the ErrorInfo property for details of the error + */ + public function send() + { + try { + if (!$this->preSend()) { + return false; + } + + return $this->postSend(); + } catch (Exception $exc) { + $this->mailHeader = ''; + $this->setError($exc->getMessage()); + if ($this->exceptions) { + throw $exc; + } + + return false; + } + } + + /** + * Prepare a message for sending. + * + * @throws Exception + * + * @return bool + */ + public function preSend() + { + if ( + 'smtp' === $this->Mailer + || ('mail' === $this->Mailer && (\PHP_VERSION_ID >= 80000 || stripos(PHP_OS, 'WIN') === 0)) + ) { + //SMTP mandates RFC-compliant line endings + //and it's also used with mail() on Windows + static::setLE(self::CRLF); + } else { + //Maintain backward compatibility with legacy Linux command line mailers + static::setLE(PHP_EOL); + } + //Check for buggy PHP versions that add a header with an incorrect line break + if ( + 'mail' === $this->Mailer + && ((\PHP_VERSION_ID >= 70000 && \PHP_VERSION_ID < 70017) + || (\PHP_VERSION_ID >= 70100 && \PHP_VERSION_ID < 70103)) + && ini_get('mail.add_x_header') === '1' + && stripos(PHP_OS, 'WIN') === 0 + ) { + trigger_error($this->lang('buggy_php'), E_USER_WARNING); + } + + try { + $this->error_count = 0; //Reset errors + $this->mailHeader = ''; + + //Dequeue recipient and Reply-To addresses with IDN + foreach (array_merge($this->RecipientsQueue, $this->ReplyToQueue) as $params) { + $params[1] = $this->punyencodeAddress($params[1]); + call_user_func_array([$this, 'addAnAddress'], $params); + } + if (count($this->to) + count($this->cc) + count($this->bcc) < 1) { + throw new Exception($this->lang('provide_address'), self::STOP_CRITICAL); + } + + //Validate From, Sender, and ConfirmReadingTo addresses + foreach (['From', 'Sender', 'ConfirmReadingTo'] as $address_kind) { + $this->{$address_kind} = trim($this->{$address_kind}); + if (empty($this->{$address_kind})) { + continue; + } + $this->{$address_kind} = $this->punyencodeAddress($this->{$address_kind}); + if (!static::validateAddress($this->{$address_kind})) { + $error_message = sprintf( + '%s (%s): %s', + $this->lang('invalid_address'), + $address_kind, + $this->{$address_kind} + ); + $this->setError($error_message); + $this->edebug($error_message); + if ($this->exceptions) { + throw new Exception($error_message); + } + + return false; + } + } + + //Set whether the message is multipart/alternative + if ($this->alternativeExists()) { + $this->ContentType = static::CONTENT_TYPE_MULTIPART_ALTERNATIVE; + } + + $this->setMessageType(); + //Refuse to send an empty message unless we are specifically allowing it + if (!$this->AllowEmpty && empty($this->Body)) { + throw new Exception($this->lang('empty_message'), self::STOP_CRITICAL); + } + + //Trim subject consistently + $this->Subject = trim($this->Subject); + //Create body before headers in case body makes changes to headers (e.g. altering transfer encoding) + $this->MIMEHeader = ''; + $this->MIMEBody = $this->createBody(); + //createBody may have added some headers, so retain them + $tempheaders = $this->MIMEHeader; + $this->MIMEHeader = $this->createHeader(); + $this->MIMEHeader .= $tempheaders; + + //To capture the complete message when using mail(), create + //an extra header list which createHeader() doesn't fold in + if ('mail' === $this->Mailer) { + if (count($this->to) > 0) { + $this->mailHeader .= $this->addrAppend('To', $this->to); + } else { + $this->mailHeader .= $this->headerLine('To', 'undisclosed-recipients:;'); + } + $this->mailHeader .= $this->headerLine( + 'Subject', + $this->encodeHeader($this->secureHeader($this->Subject)) + ); + } + + //Sign with DKIM if enabled + if ( + !empty($this->DKIM_domain) + && !empty($this->DKIM_selector) + && (!empty($this->DKIM_private_string) + || (!empty($this->DKIM_private) + && static::isPermittedPath($this->DKIM_private) + && file_exists($this->DKIM_private) + ) + ) + ) { + $header_dkim = $this->DKIM_Add( + $this->MIMEHeader . $this->mailHeader, + $this->encodeHeader($this->secureHeader($this->Subject)), + $this->MIMEBody + ); + $this->MIMEHeader = static::stripTrailingWSP($this->MIMEHeader) . static::$LE . + static::normalizeBreaks($header_dkim) . static::$LE; + } + + return true; + } catch (Exception $exc) { + $this->setError($exc->getMessage()); + if ($this->exceptions) { + throw $exc; + } + + return false; + } + } + + /** + * Actually send a message via the selected mechanism. + * + * @throws Exception + * + * @return bool + */ + public function postSend() + { + try { + //Choose the mailer and send through it + switch ($this->Mailer) { + case 'sendmail': + case 'qmail': + return $this->sendmailSend($this->MIMEHeader, $this->MIMEBody); + case 'smtp': + return $this->smtpSend($this->MIMEHeader, $this->MIMEBody); + case 'mail': + return $this->mailSend($this->MIMEHeader, $this->MIMEBody); + default: + $sendMethod = $this->Mailer . 'Send'; + if (method_exists($this, $sendMethod)) { + return $this->{$sendMethod}($this->MIMEHeader, $this->MIMEBody); + } + + return $this->mailSend($this->MIMEHeader, $this->MIMEBody); + } + } catch (Exception $exc) { + $this->setError($exc->getMessage()); + $this->edebug($exc->getMessage()); + if ($this->Mailer === 'smtp' && $this->SMTPKeepAlive == true && $this->smtp->connected()) { + $this->smtp->reset(); + } + if ($this->exceptions) { + throw $exc; + } + } + + return false; + } + + /** + * Send mail using the $Sendmail program. + * + * @see PHPMailer::$Sendmail + * + * @param string $header The message headers + * @param string $body The message body + * + * @throws Exception + * + * @return bool + */ + protected function sendmailSend($header, $body) + { + if ($this->Mailer === 'qmail') { + $this->edebug('Sending with qmail'); + } else { + $this->edebug('Sending with sendmail'); + } + $header = static::stripTrailingWSP($header) . static::$LE . static::$LE; + //This sets the SMTP envelope sender which gets turned into a return-path header by the receiver + //A space after `-f` is optional, but there is a long history of its presence + //causing problems, so we don't use one + //Exim docs: http://www.exim.org/exim-html-current/doc/html/spec_html/ch-the_exim_command_line.html + //Sendmail docs: http://www.sendmail.org/~ca/email/man/sendmail.html + //Qmail docs: http://www.qmail.org/man/man8/qmail-inject.html + //Example problem: https://www.drupal.org/node/1057954 + + //PHP 5.6 workaround + $sendmail_from_value = ini_get('sendmail_from'); + if (empty($this->Sender) && !empty($sendmail_from_value)) { + //PHP config has a sender address we can use + $this->Sender = ini_get('sendmail_from'); + } + //CVE-2016-10033, CVE-2016-10045: Don't pass -f if characters will be escaped. + if (!empty($this->Sender) && static::validateAddress($this->Sender) && self::isShellSafe($this->Sender)) { + if ($this->Mailer === 'qmail') { + $sendmailFmt = '%s -f%s'; + } else { + $sendmailFmt = '%s -oi -f%s -t'; + } + } else { + //allow sendmail to choose a default envelope sender. It may + //seem preferable to force it to use the From header as with + //SMTP, but that introduces new problems (see + //
+
');
+?>
\ No newline at end of file
diff --git a/dashboard/account/banPerson.php b/dashboard/account/banPerson.php
new file mode 100644
index 000000000..d5c184aa7
--- /dev/null
+++ b/dashboard/account/banPerson.php
@@ -0,0 +1,144 @@
+title($dl->getLocalizedString("banUserPlace"));
+$dl->printFooter('../');
+if(!$gs->checkPermission($_SESSION["accountID"], "dashboardModTools")) {
+ die($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'mod'));
+}
+if(isset($_POST["person"]) && isset($_POST["personType"]) && isset($_POST["banType"])) {
+ if(!Captcha::validateCaptcha()) {
+ die($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+'.$dl->getLocalizedString("noPermission").'
+ +
+
', 'mod'));
+ }
+ $person = trim(ExploitPatch::rucharclean($_POST["person"]));
+ $personType = ExploitPatch::number($_POST["personType"]);
+ $reason = trim(ExploitPatch::rucharclean($_POST["reason"]));
+ $banType = ExploitPatch::number($_POST["banType"]);
+ $expires = !empty($_POST['expires']) ? (new DateTime($_POST['expires']))->getTimestamp() : 2147483647;
+ $alsoBanIP = $_POST["alsoBanIP"] == 'on' && $personType != 2;
+ $check = $gs->getBan($person, $personType, $banType);
+ $triedToBanYourself = $getIP = false;
+ switch($personType) {
+ case 0:
+ if($_SESSION['accountID'] == $person) $triedToBanYourself = true;
+ elseif($alsoBanIP) {
+ $getIP = $db->prepare('SELECT IP FROM users WHERE extID = :person');
+ $getIP->execute([':person' => $person]);
+ $getIP = $getIP->fetchColumn();
+ }
+ break;
+ case 1:
+ if($gs->getUserID($_SESSION['accountID'], $gs->getAccountName($_SESSION['accountID'])) == $person) $triedToBanYourself = true;
+ elseif($alsoBanIP) {
+ $getIP = $db->prepare('SELECT IP FROM users WHERE userID = :person');
+ $getIP->execute([':person' => $person]);
+ $getIP = $getIP->fetchColumn();
+ }
+ break;
+ case 2:
+ if($gs->IPForBan($gs->getIP()) == $gs->IPForBan($person)) $triedToBanYourself = true;
+ break;
+ }
+ if($triedToBanYourself) die($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'mod'));
+ if($check) die($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'mod'));
+ if(time() >= $expires) die($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'mod'));
+ $gs->banPerson($_SESSION['accountID'], $person, $reason, $banType, $personType, $expires);
+ if($getIP) $gs->banPerson($_SESSION['accountID'], $getIP, $reason, $banType, 2, $expires);
+ $banTypes = ['playerTop', 'creatorTop', 'levelUploading', 'commentBan', 'account'];
+ $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'mod');
+} else {
+$dl->printSong(''.$dl->getLocalizedString("banUserPlace").'
+ +
+
+', 'mod');
+}
+?>
\ No newline at end of file
diff --git a/dashboard/account/changePassword.php b/dashboard/account/changePassword.php
new file mode 100644
index 000000000..282fa26fd
--- /dev/null
+++ b/dashboard/account/changePassword.php
@@ -0,0 +1,140 @@
+title($dl->getLocalizedString("changePassTitle"));
+$dl->printFooter('../');
+if(isset($_SESSION["accountID"]) AND $_SESSION["accountID"] != 0){
+if($_POST["oldpassword"] != "" AND $_POST["newpassword"] != "" AND $_POST["newpassword"] == $_POST["newpassconfirm"]) {
+ if(!Captcha::validateCaptcha()) {
+ $dl->printSong(''.$dl->getLocalizedString("banUserPlace").'
+'.$dl->getLocalizedString("banDesc").'
+ +
+
', 'account');
+ die();
+ }
+ $getAccountData = $db->prepare("SELECT * FROM accounts WHERE accountID = :accountID");
+ $getAccountData->execute([':accountID' => $_SESSION["accountID"]]);
+ $getAccountData = $getAccountData->fetch();
+ $userName = $gs->getAccountName($_SESSION["accountID"]);
+ $oldpass = ExploitPatch::remove($_POST["oldpassword"]);
+ $newpass = ExploitPatch::remove($_POST["newpassword"]);
+ if($oldpass == $newpass){
+ $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'account');
+ die();
+ }
+ $pass = GeneratePass::isValidUsrname($userName, $oldpass);
+ $salt = "";
+if($pass == 1) {
+ $passhash = password_hash($newpass, PASSWORD_DEFAULT);
+ $gjp2 = GeneratePass::GJP2hash($newpass);
+ $auth = $gs->randomString(8);
+ $query = $db->prepare("UPDATE accounts SET password=:password, gjp2 = :gjp, salt=:salt, auth=:auth WHERE userName=:userName");
+ $query->execute([':password' => $passhash, ':userName' => $userName, ':salt' => $salt, ':gjp' => $gjp2, ':auth' => $auth]);
+ $gs->sendLogsAccountChangeWebhook($_SESSION["accountID"], $_SESSION["accountID"], $getAccountData);
+ $_SESSION["accountID"] = 0;
+ setcookie('auth', 'no', 2147483647, '/');
+ $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'account');
+ //decrypting save
+ $query = $db->prepare("SELECT accountID FROM accounts WHERE userName=:userName");
+ $query->execute([':userName' => $userName]);
+ $accountID = $query->fetchColumn();
+ $saveData = file_get_contents("../".$dbPath."data/accounts/$accountID");
+ if(file_exists("../".$dbPath."data/accounts/keys/$accountID")){
+ $protected_key_encoded = file_get_contents("../".$dbPath."data/accounts/keys/$accountID");
+ if($protected_key_encoded != ""){
+ $protected_key = KeyProtectedByPassword::loadFromAsciiSafeString($protected_key_encoded);
+ $user_key = $protected_key->unlockKey($oldpass);
+ try {
+ $saveData = Crypto::decrypt($saveData, $user_key);
+ } catch (Defuse\Crypto\Exception\WrongKeyOrModifiedCiphertextException $ex) {
+ exit("Unable to update save data encryption");
+ }
+ file_put_contents("../".$dbPath."data/accounts/$accountID",$saveData);
+ file_put_contents("../".$dbPath."data/accounts/keys/$accountID","");
+ }
+ }
+}else{
+ $dl->printSong(''.$dl->getLocalizedString("changePassTitle").'
+ +
+
', 'account');
+}
+
+} else {
+ $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'account');
+}} else {
+ $dl->printSong(''.$dl->getLocalizedString("changePassTitle").'
+ +
+
', 'account');
+}
+?>
diff --git a/dashboard/account/changeUsername.php b/dashboard/account/changeUsername.php
new file mode 100644
index 000000000..ef47efbd1
--- /dev/null
+++ b/dashboard/account/changeUsername.php
@@ -0,0 +1,127 @@
+title($dl->getLocalizedString("changeNickTitle"));
+$dl->printFooter('../');
+if(!isset($_SESSION["accountID"]) || $_SESSION["accountID"] == 0) exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'account'));
+if($_POST["oldnickname"] != "" AND $_POST["newnickname"] != "" AND $_POST["password"] != "") {
+ if(!Captcha::validateCaptcha()) {
+ exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'account'));
+ }
+ $userName = $gs->getAccountName($_SESSION["accountID"]);
+ $accID = $_SESSION["accountID"];
+ $getAccountData = $db->prepare("SELECT * FROM accounts WHERE accountID = :accountID");
+ $getAccountData->execute([':accountID' => $accID]);
+ $getAccountData = $getAccountData->fetch();
+ $oldnick = ExploitPatch::charclean($_POST["oldnickname"]);
+ $newnick = str_replace(' ', '', ExploitPatch::charclean($_POST["newnickname"]));
+ if($oldnick != $userName) {
+ exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'account'));
+ }
+ if($userName == $newnick || $oldnick == $newnick) {
+ exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'account'));
+ }
+ $pass = $_POST["password"];
+ $pass = GeneratePass::isValidUsrname($userName, $pass);
+ $salt = "";
+ if($pass == 1) {
+ $query = $db->prepare("SELECT count(*) FROM accounts WHERE userName LIKE :userName");
+ $query->execute([':userName' => $newnick]);
+ $count = $query->fetchColumn();
+ if($count > 0) {
+ exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'account'));
+ }
+ $auth = $gs->randomString(8);
+ $query = $db->prepare("UPDATE accounts SET userName = :userName, salt = :salt, auth = :auth WHERE accountID = :accountid");
+ $query->execute([':userName' => $newnick, ':salt' => $salt, ':accountid' => $accID, ':auth' => $auth]);
+ $gs->sendLogsAccountChangeWebhook($accID, $accID, $getAccountData);
+ if($automaticCron) Cron::fixUsernames($accID, false);
+ $_SESSION["accountID"] = 0;
+ setcookie('auth', 'no', 2147483647, '/');
+ $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'account');
+ } else {
+ $dl->printSong(''.$dl->getLocalizedString("changeNickTitle").'
+ +
+
', 'account');
+ }
+} else {
+ $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'account');
+}
+?>
\ No newline at end of file
diff --git a/dashboard/account/forceChange.php b/dashboard/account/forceChange.php
new file mode 100644
index 000000000..c18937794
--- /dev/null
+++ b/dashboard/account/forceChange.php
@@ -0,0 +1,142 @@
+printFooter('../');
+$acc = $_SESSION["accountID"];
+if(!$gs->checkPermission($acc, 'dashboardForceChangePassNick')) exit($dl->printSong(''.$dl->getLocalizedString("changeNickTitle").'
+ +
+
', 'mod'));
+if($_POST["type"] == 0) {
+ $type = 'Password';
+ $inputtype = '';
+}else {
+ $type = 'Nick';
+ $inputtype = '';
+}
+$dl->title($dl->getLocalizedString("force".$type));
+if(!empty($_POST["userID"]) AND !empty($_POST[$type])) {
+ if(!Captcha::validateCaptcha()) {
+ exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+'.$dl->getLocalizedString("noPermission").'
+ +
+
', 'mod'));
+ }
+ if(!empty($_POST["Nick"])) {
+ $newnick = str_replace(' ', '', ExploitPatch::charclean($_POST["Nick"]));
+ if(!is_numeric($_POST["userID"])) $accID = $gs->getAccountIDFromName($_POST["userID"]);
+ else $accID = ExploitPatch::number($_POST["userID"]);
+ $salt = '';
+ $query = $db->prepare("SELECT count(*) FROM accounts WHERE userName LIKE :userName");
+ $query->execute([':userName' => $newnick]);
+ $count = $query->fetchColumn();
+ if($count > 0) {
+ exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'mod'));
+ }
+ $getAccountData = $db->prepare("SELECT * FROM accounts WHERE accountID = :accountID");
+ $getAccountData->execute([':accountID' => $accID]);
+ $getAccountData = $getAccountData->fetch();
+ $auth = $gs->randomString(8);
+ $query = $db->prepare("UPDATE accounts SET userName = :userName, salt = :salt, auth = :auth WHERE accountID = :accountid");
+ $query->execute([':userName' => $newnick, ':salt' => $salt, ':accountid' => $accID, ':auth' => $auth]);
+ $gs->sendLogsAccountChangeWebhook($accID, $acc, $getAccountData);
+ $discord = $gs->hasDiscord($accID);
+ if($discord) $gs->changeDiscordUsername($discord, $newnick);
+ if($automaticCron) Cron::fixUsernames($_SESSION['accountID'], false);
+ $query = $db->prepare("INSERT INTO modactions (type, value, value2, timestamp, account) VALUES ('26',:userID, :type, :timestamp,:account)");
+ $query->execute([':userID' => $accID, ':timestamp' => time(), ':type' => $type, ':account' => $acc]);
+ exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'mod'));
+ } elseif($type == 'Password') {
+ $newpass = $_POST["Password"];
+ if(is_numeric($_POST["userID"])) {
+ $userName = $gs->getAccountName($_POST["userID"]);
+ $accID = $_POST["userID"];
+ }
+ else {
+ $userName = ExploitPatch::remove($_POST["userID"]);
+ $accID = $gs->getAccountIDFromName($_POST["userID"]);
+ }
+ $salt = '';
+ $passhash = password_hash($newpass, PASSWORD_DEFAULT);
+ $gjp2 = GeneratePass::GJP2hash($newpass);
+ $auth = $gs->randomString(8);
+ $getAccountData = $db->prepare("SELECT * FROM accounts WHERE accountID = :accountID");
+ $getAccountData->execute([':accountID' => $accID]);
+ $getAccountData = $getAccountData->fetch();
+ $query = $db->prepare("UPDATE accounts SET password=:password, gjp2 = :gjp, salt=:salt, auth=:auth WHERE userName=:userName");
+ $query->execute([':password' => $passhash, ':userName' => $userName, ':salt' => $salt, ':gjp' => $gjp2, ':auth' => $auth]);
+ $gs->sendLogsAccountChangeWebhook($accID, $acc, $getAccountData);
+ $accountID = $gs->getAccountIDFromName($userName);
+ $query = $db->prepare("INSERT INTO modactions (type, value, value2, timestamp, account) VALUES ('26',:userID, :type, :timestamp,:account)");
+ $query->execute([':userID' => $accountID, ':timestamp' => time(), ':type' => $type, ':account' => $acc]);
+ $saveData = file_get_contents("../".$dbPath."data/accounts/$accountID");
+ $dl->printSong(''.$dl->getLocalizedString("changeNickTitle").'
+ +
+
', 'mod');
+ }
+} else {
+ $dl->printSong(''.$dl->getLocalizedString("changePassTitle").'
+ +
+
', 'mod');
+}
+?>
\ No newline at end of file
diff --git a/dashboard/account/mods.php b/dashboard/account/mods.php
new file mode 100644
index 000000000..00c6331b6
--- /dev/null
+++ b/dashboard/account/mods.php
@@ -0,0 +1,41 @@
+checkPermission($_SESSION["accountID"], 'dashboardAddMod')) {
+ $priority = $gs->getMaxValuePermission($_SESSION["accountID"], 'priority');
+ $role = ExploitPatch::numbercolon($_GET["role"]);
+ $check = $db->prepare('SELECT priority FROM roles WHERE roleID = :role');
+ $check->execute([':role' => $role]);
+ $check = $check->fetchColumn();
+ $mod = ExploitPatch::number($_GET["acc"]);
+ $mod2 = $gs->getAccountName($mod);
+ if($_SESSION['accountID'] == $mod) die('-1');
+ $query = $db->prepare("SELECT * FROM roleassign WHERE accountID = :mod");
+ $query->execute([':mod' => $mod]);
+ $res = $query->fetch();
+ if($role != "-1") {
+ if($check >= $priority) die("-1");
+ $change = $db->prepare("UPDATE roleassign SET roleID = :r WHERE assignID = :i");
+ $change = $change->execute([':r' => $role, ':i' => $id]);
+ } else {
+ $change = $db->prepare("DELETE FROM roleassign WHERE assignID = :i");
+ $change = $change->execute([':i' => $id]);
+ }
+ if($change) echo "1"; else die("-1");
+ $query = $db->prepare("INSERT INTO modactions (type, value, timestamp, account, value2, value3) VALUES ('24', :value, :timestamp, :account, :value2, :value3)");
+ $query->execute([':value' => $mod2, ':timestamp' => time(), ':account' => $_SESSION["accountID"], ':value2' => $mod, ':value3' => $role]);
+ $gs->sendLogsModChangeWebhook($res['accountID'], $_SESSION['accountID'], $res['assignID'], $res);
+ } else {
+ $pck = $db->prepare("SELECT * FROM roleassign WHERE assignID = :id");
+ $pck->execute([':id' => $id]);
+ $map = $pck->fetch();
+ echo $map["assignID"].' | '.$map["roleID"].' | '.$map["accountID"]." | ".$gs->getAccountName($map["accountID"]);
+ }
+}
+?>
\ No newline at end of file
diff --git a/dashboard/account/unlisted.php b/dashboard/account/unlisted.php
index f04e75d2d..cc4b71d89 100644
--- a/dashboard/account/unlisted.php
+++ b/dashboard/account/unlisted.php
@@ -5,7 +5,7 @@
$dl = new dashboardLib();
require "../../incl/lib/mainLib.php";
$gs = new mainLib();
-include "../../incl/lib/connection.php";
+require "../../incl/lib/connection.php";
if(!isset($_SESSION["accountID"]) OR $_SESSION["accountID"] == 0){
header("Location: ../login/login.php");
exit();
diff --git a/dashboard/api/addSong.php b/dashboard/api/addSong.php
new file mode 100644
index 000000000..29a1a4d2c
--- /dev/null
+++ b/dashboard/api/addSong.php
@@ -0,0 +1,57 @@
+getAccountIDFromName('ObeyGDBot');
+if(!$reuploadID) $reuploadID = 0;
+if(!$download) exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 1, 'message' => 'Please specify song download link.']));
+$songReupload = $gs->songReupload($download, $author, $name, $reuploadID);
+if($songReupload < 0) {
+ $error = mb_substr($songReupload, 0, 2);
+ switch($error) {
+ case '-2':
+ $errorNumber = 2;
+ $errorMessage = 'Your download link is not link.';
+ break;
+ case '-3':
+ $errorNumber = 3;
+ $errorMessage = 'This song was already reuploaded.';
+ break;
+ case '-4':
+ $errorNumber = 4;
+ $errorMessage = 'Your download link is not link to an audio.';
+ break;
+ default:
+ $errorNumber = 0;
+ $errorMessage = 'Unexpected error.';
+ break;
+ }
+ exit(json_encode(['dashboard' => true, 'success' => false, 'error' => $errorNumber, 'message' => $errorMessage]));
+} else {
+ $songInfo = $gs->getSongInfo($songReupload);
+ $song = [
+ 'ID' => $songInfo['ID'],
+ 'author' => $songInfo['authorName'],
+ 'name' => $songInfo['name'],
+ 'size' => $songInfo['size'],
+ 'download' => urldecode($songInfo['download']),
+ 'reuploader' => [
+ 'accountID' => $reuploadID,
+ 'userID' => $gs->getUserID($reuploadID, 'ObeyGDBot'),
+ 'username' => 'ObeyGDBot'
+ ],
+ 'newgrounds' => false,
+ 'customSong' => true
+ ];
+ exit(json_encode(['dashboard' => true, 'success' => true, 'song' => $song]));
+}
+?>
\ No newline at end of file
diff --git a/dashboard/api/getGMD.php b/dashboard/api/getGMD.php
new file mode 100644
index 000000000..fe595bda0
--- /dev/null
+++ b/dashboard/api/getGMD.php
@@ -0,0 +1,32 @@
+ false, 'error' => 0, 'message' => 'Invalid level ID.']));
+$level = $db->prepare('SELECT * FROM levels WHERE levelID = :levelID');
+$level->execute([':levelID' => $levelID]);
+$level = $level->fetch();
+if(!$level) exit(json_encode(['success' => false, 'error' => 1, 'message' => 'Level was not found!']));
+$isPlayerAnAdmin = false;
+if($unlistedLevelsForAdmins) {
+ $checkAdmin = $db->prepare('SELECT isAdmin FROM accounts WHERE accountID = :accountID');
+ $checkAdmin->execute([':accountID' => $accountID]);
+ $checkAdmin = $checkAdmin->fetchColumn();
+ if($checkAdmin) $isPlayerAnAdmin = true;
+}
+if($level["unlisted2"] == 1) if(!($level["extID"] == $accountID || $gs->isFriends($accountID, $level["extID"])) && !$isPlayerAnAdmin) exit(json_encode(['success' => false, 'error' => 1, 'message' => 'Level was not found!']));
+$GMDFile = $gs->getGMDFile($levelID);
+if(!$GMDFile) exit(json_encode(['success' => false, 'error' => 2, 'message' => 'Level data was not found!']));
+exit(json_encode(['success' => true, 'levelName' => $level['levelName'], 'GMD' => base64_encode($GMDFile)]));
+?>
\ No newline at end of file
diff --git a/dashboard/api/getLastFeaturedID.php b/dashboard/api/getLastFeaturedID.php
new file mode 100644
index 000000000..3700aaa6b
--- /dev/null
+++ b/dashboard/api/getLastFeaturedID.php
@@ -0,0 +1,16 @@
+prepare("SELECT starFeatured FROM levels ORDER BY starFeatured DESC LIMIT 1");
+$featuredID->execute();
+$featuredID = $featuredID->fetchColumn();
+
+if (!$featuredID) exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 1, 'message' => 'No featured level found.']));
+
+exit(json_encode(['dashboard' => true, 'success' => true, 'id' => $featuredID]));
+?>
\ No newline at end of file
diff --git a/dashboard/api/login.php b/dashboard/api/login.php
new file mode 100644
index 000000000..81a8e8560
--- /dev/null
+++ b/dashboard/api/login.php
@@ -0,0 +1,76 @@
+ false, 'error' => '-2']));
+ exit(json_encode(['success' => false, 'error' => '-1']));
+ }
+ $accountID = $gs->getAccountIDFromName($userName);
+ if($accountID == 0) exit(json_encode(['success' => false, 'error' => '-3']));
+ $query = $db->prepare("SELECT auth FROM accounts WHERE accountID = :accountID");
+ $query->execute([':accountID' => $accountID]);
+ $auth = $query->fetchColumn();
+ if($auth == 'none') {
+ $auth = $gs->randomString(8);
+ $query = $db->prepare("UPDATE accounts SET auth = :auth WHERE accountID = :accountID");
+ $query->execute([':auth' => $auth, ':accountID' => $accountID]);
+ }
+ $color = $gs->getAccountCommentColor($accountID);
+ $gs->logAction($accountID, 2);
+ $userID = $gs->getUserID($accountID, $userName);
+ $action = $db->prepare("SELECT * FROM users WHERE userID = :userID");
+ $action->execute([':userID' => $userID]);
+ $action = $action->fetch();
+ $iconType = ($action['iconType'] > 8) ? 0 : $action['iconType'];
+ $iconTypeMap = [0 => ['type' => 'cube', 'value' => $action['accIcon']], 1 => ['type' => 'ship', 'value' => $action['accShip']], 2 => ['type' => 'ball', 'value' => $action['accBall']], 3 => ['type' => 'ufo', 'value' => $action['accBird']], 4 => ['type' => 'wave', 'value' => $action['accDart']], 5 => ['type' => 'robot', 'value' => $action['accRobot']], 6 => ['type' => 'spider', 'value' => $action['accSpider']], 7 => ['type' => 'swing', 'value' => $action['accSwing']], 8 => ['type' => 'jetpack', 'value' => $action['accJetpack']]];
+ $iconValue = (isset($iconTypeMap[$iconType]) && $iconTypeMap[$iconType]['value'] > 0) ? $iconTypeMap[$iconType]['value'] : 1;
+ $avatarImg = $iconsRendererServer.'/icon.png?type=' . $iconTypeMap[$iconType]['type'] . '&value=' . $iconValue . '&color1=' . $action['color1'] . '&color2=' . $action['color2'] . ($action['accGlow'] != 0 ? '&glow=' . $action['accGlow'] . '&color3=' . $action['color3'] : '');
+ $clanID = $gs->isPlayerInClan($accountID);
+ if($clanID) {
+ $clan = $gs->getClanInfo($clanID);
+ $clanArray = [
+ 'name' => $clan['clan'],
+ 'color' => $clan['color']
+ ];
+ } else $clanArray = [];
+ exit(json_encode(["success" => true, "user" => $userName, "accountID" => $accountID, "auth" => $auth, "color" => $color, "mainIcon" => $avatarImg, 'clan' => $clanArray]));
+} elseif(isset($_GET["auth"])) {
+ $auth = ExploitPatch::charclean($_GET["auth"]);
+ if(empty($auth)) exit(json_encode(['success' => false, 'error' => '-3']));
+ $check = GeneratePass::isValidToken($auth);
+ if(!is_array($check)) exit(json_encode(['success' => false, 'error' => $check]));
+ else {
+ $gs->logAction($check['accountID'], 2);
+ $action = $db->prepare("SELECT * FROM users WHERE userID = :userID");
+ $action->execute([':userID' => $check['userID']]);
+ $action = $action->fetch();
+ $iconType = ($action['iconType'] > 8) ? 0 : $action['iconType'];
+ $iconTypeMap = [0 => ['type' => 'cube', 'value' => $action['accIcon']], 1 => ['type' => 'ship', 'value' => $action['accShip']], 2 => ['type' => 'ball', 'value' => $action['accBall']], 3 => ['type' => 'ufo', 'value' => $action['accBird']], 4 => ['type' => 'wave', 'value' => $action['accDart']], 5 => ['type' => 'robot', 'value' => $action['accRobot']], 6 => ['type' => 'spider', 'value' => $action['accSpider']], 7 => ['type' => 'swing', 'value' => $action['accSwing']], 8 => ['type' => 'jetpack', 'value' => $action['accJetpack']]];
+ $iconValue = (isset($iconTypeMap[$iconType]) && $iconTypeMap[$iconType]['value'] > 0) ? $iconTypeMap[$iconType]['value'] : 1;
+ $avatarImg = $iconsRendererServer.'/icon.png?type=' . $iconTypeMap[$iconType]['type'] . '&value=' . $iconValue . '&color1=' . $action['color1'] . '&color2=' . $action['color2'] . ($action['accGlow'] != 0 ? '&glow=' . $action['accGlow'] . '&color3=' . $action['color3'] : '');
+ $clanID = $gs->isPlayerInClan($check['accountID']);
+ if($clanID) {
+ $clan = $gs->getClanInfo($clanID);
+ $clanArray = [
+ 'name' => $clan['clan'],
+ 'color' => $clan['color']
+ ];
+ } else $clanArray = [];
+ exit(json_encode(['success' => true, 'accountID' => $check['accountID'], 'userID' => $check['userID'], 'user' => $check["userName"], 'color' => $check['color'], "mainIcon" => $avatarImg, 'clan' => $clanArray]));
+ }
+} else exit(json_encode(['success' => false, 'error' => '0']));
+?>
\ No newline at end of file
diff --git a/dashboard/api/makePost.php b/dashboard/api/makePost.php
new file mode 100644
index 000000000..fb47dc9d0
--- /dev/null
+++ b/dashboard/api/makePost.php
@@ -0,0 +1,51 @@
+ true, 'success' => false, 'error' => 1, 'message' => 'Please supply a valid account credentials.']));
+}
+$body = trim(ExploitPatch::rucharclean($_POST['body']));
+if(empty($body)) {
+ http_response_code(400);
+ exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 2, 'message' => 'Please enter post message.']));
+}
+$userID = $gs->getUserID($accountID);
+$checkBan = $gs->getPersonBan($accountID, $userID, 3);
+if($checkBan) {
+ http_response_code(403);
+ exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 3, 'message' => 'You are banned!', 'reason' => base64_decode($checkBan['reason']), 'expires' => $checkBan['expires']]));
+}
+$query = $db->prepare("SELECT timestamp FROM acccomments WHERE userID = :userID ORDER BY timestamp DESC LIMIT 1");
+$query->execute([':userID' => $userID]);
+$res = $query->fetch();
+$time = time() - 5;
+if($res["timestamp"] > $time) {
+ http_response_code(400);
+ exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 4, 'message' => 'You send posts too fast.']));
+}
+if($enableCommentLengthLimiter && strlen($body) > $maxAccountCommentLength) {
+ http_response_code(400);
+ exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 5, 'message' => 'Your post is too long.']));
+} else {
+ $accountUsername = $gs->getAccountName($accountID);
+ $body = ExploitPatch::url_base64_encode($body);
+ $query = $db->prepare("INSERT INTO acccomments (userID, userName, comment, timestamp) VALUES (:userID, :name, :body, :time)");
+ $query->execute([':userID' => $userID, ':name' => $accountUsername, ':body' => $body, ':time' => time()]);
+ $gs->logAction($accountID, 14, $accountUsername, $body, $db->lastInsertId());
+ Automod::checkAccountPostsSpamming($userID);
+ exit(json_encode(['dashboard' => true, 'success' => true]));
+}
+exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 6, 'message' => 'Unexpected error.']));
+?>
\ No newline at end of file
diff --git a/dashboard/api/profile.php b/dashboard/api/profile.php
new file mode 100644
index 000000000..b88688e15
--- /dev/null
+++ b/dashboard/api/profile.php
@@ -0,0 +1,193 @@
+ false, 'error' => $check]));
+ if(isset($json['accountID'])) $accountID = $json['accountID'];
+ else $accountID = $check['accountID'];
+}
+if(empty($accountID)) exit(json_encode(['success' => false, 'error' => 0, 'message' => 'You didn\'t specify account ID.']));
+$profile = $db->prepare('SELECT * FROM users WHERE extID = :accountID');
+$profile->execute([':accountID' => $accountID]);
+$profile = $profile->fetch();
+if(!$profile) exit(json_encode(['success' => false, 'error' => 1, 'message' => 'Nothing was found.']));
+$clan = $stats = $icons = $bans = $posts = $demonsCount = $starsCount = $platformerCount = $bans = [];
+if($profile['clan']) {
+ $clanInfo = $gs->getClanInfo($profile['clan']);
+ if($clanInfo) {
+ $clan = [
+ 'ID' => (int)$clanInfo['ID'],
+ 'name' => $clanInfo['clan'],
+ 'tag' => $clanInfo['tag'],
+ 'desc' => $clanInfo['desc'],
+ 'owner' => [
+ 'accountID' => (int)$clanInfo['clanOwner'],
+ 'userID' => (int)$gs->getUserID($clanInfo['clanOwner']),
+ 'userName' => $gs->getAccountName($clanInfo['clanOwner'])
+ ],
+ 'color' => $clanInfo['color'],
+ 'isClosed' => $clanInfo['isClosed'] == 1,
+ 'creationDate' => (int)$clanInfo['creationDate']
+ ];
+ }
+}
+if($profile['dinfo']) {
+ $demonsArray = explode(',', $profile['dinfo']);
+ $demonsCount = [
+ 'easy' => [
+ 'classic' => (int)$demonsArray[0],
+ 'platformer' => (int)$demonsArray[5]
+ ],
+ 'medium' => [
+ 'classic' => (int)$demonsArray[1],
+ 'platformer' => (int)$demonsArray[6]
+ ],
+ 'hard' => [
+ 'classic' => (int)$demonsArray[2],
+ 'platformer' => (int)$demonsArray[7]
+ ],
+ 'insane' => [
+ 'classic' => (int)$demonsArray[3],
+ 'platformer' => (int)$demonsArray[8]
+ ],
+ 'extreme' => [
+ 'classic' => (int)$demonsArray[4],
+ 'platformer' => (int)$demonsArray[9]
+ ],
+ 'weekly' => (int)$demonsArray[10],
+ 'gauntlet' => (int)$demonsArray[11]
+ ];
+}
+if($profile['sinfo']) {
+ $starsArray = explode(',', $profile['sinfo']);
+ $starsCount = [
+ 'auto' => (int)$starsArray[0],
+ 'easy' => (int)$starsArray[1],
+ 'normal' => (int)$starsArray[2],
+ 'hard' => (int)$starsArray[3],
+ 'harder' => (int)$starsArray[4],
+ 'extreme' => (int)$starsArray[5],
+ 'daily' => (int)$starsArray[6],
+ 'weekly' => (int)$starsArray[7]
+ ];
+}
+if($profile['pinfo']) {
+ $platformerArray = explode(',', $profile['pinfo']);
+ $platformerCount = [
+ 'auto' => (int)$platformerArray[0],
+ 'easy' => (int)$platformerArray[1],
+ 'normal' => (int)$platformerArray[2],
+ 'hard' => (int)$platformerArray[3],
+ 'harder' => (int)$platformerArray[4],
+ 'extreme' => (int)$platformerArray[5],
+ 'map' => (int)$platformerArray[6]
+ ];
+}
+$stats = [
+ 'stars' => (int)$profile['stars'],
+ 'moons' => (int)$profile['moons'],
+ 'demons' => (int)$profile['demons'],
+ 'diamonds' => (int)$profile['diamonds'],
+ 'goldCoins' => (int)$profile['coins'],
+ 'userCoins' => (int)$profile['userCoins'],
+ 'creatorPoints' => (int)$profile['creatorPoints'],
+ 'demonsCount' => $demonsCount,
+ 'starsCount' => $starsCount,
+ 'platformerCount' => $platformerCount
+];
+$icons = [
+ 'currentIcon' => [
+ 'iconType' => (int)$profile['iconType'],
+ 'iconID' => (int)$profile['icon']
+ ],
+ 'colors' => [
+ 'mainColor' => (int)$profile['color1'],
+ 'secondaryColor' => (int)$profile['color2'],
+ 'glowColor' => (int)$profile['color3']
+ ],
+ 'special' => (int)$profile['special'],
+ 'cube' => (int)$profile['accIcon'],
+ 'ship' => (int)$profile['accShip'],
+ 'ball' => (int)$profile['accBall'],
+ 'wave' => (int)$profile['accDart'],
+ 'robot' => (int)$profile['accRobot'],
+ 'spider' => (int)$profile['accSpider'],
+ 'glow' => $profile['accGlow'] == 1,
+ 'swing' => (int)$profile['accSwing'],
+ 'jetpack' => (int)$profile['accJetpack'],
+ 'explosion' => (int)$profile['accExplosion']
+];
+$allBans = $gs->getAllBansFromPerson($accountID, 0);
+foreach($allBans AS &$ban) {
+ $bans[] = [
+ 'banID' => $ban['banID'],
+ 'moderator' => [
+ 'accountID' => (int)$ban['modID'],
+ 'userID' => (int)$gs->getUserID($ban['modID']),
+ 'userName' => $gs->getAccountName($ban['modID'])
+ ],
+ 'reason' => ExploitPatch::rucharclean(base64_decode($ban['banType'])),
+ 'banType' => $ban['banType'],
+ 'personType' => $ban['personType'],
+ 'expires' => $ban['expires'],
+ 'timestamp' => $ban['timestamp'],
+ ];
+}
+$postComments = $db->prepare('SELECT * FROM acccomments WHERE userID = :userID ORDER BY commentID DESC');
+$postComments->execute([':userID' => $profile['userID']]);
+$postComments = $postComments->fetchAll();
+foreach($postComments AS &$postComment) {
+ $replies = [];
+ $repliesCheck = $db->prepare('SELECT * FROM replies WHERE commentID = :commentID ORDER BY replyID DESC');
+ $repliesCheck->execute([':commentID' => $postComment['commentID']]);
+ $repliesCheck = $repliesCheck->fetchAll();
+ foreach($repliesCheck AS &$reply) {
+ $replies[] = [
+ 'replyID' => (int)$reply['replyID'],
+ 'account' => [
+ 'accountID' => (int)$reply['accountID'],
+ 'userID' => (int)$gs->getUserID($reply['accountID']),
+ 'userName' => $gs->getAccountName($reply['accountID'])
+ ],
+ 'text' => base64_decode($reply['body']),
+ 'timestamp' => (int)$reply['timestamp']
+ ];
+ }
+ $posts[] = [
+ 'commentID' => (int)$postComment['commentID'],
+ 'post' => ExploitPatch::url_base64_decode($postComment['comment']),
+ 'likes' => (int)$postComment['likes'],
+ 'dislikes' => (int)$postComment['dislikes'],
+ 'isSpam' => (int)$postComment['isSpam'],
+ 'timestamp' => (int)$postComment['timestamp'],
+ 'replies' => $replies
+ ];
+}
+exit(json_encode([
+ 'dashboard' => true,
+ 'success' => true,
+ 'profile' => [
+ 'accountID' => (int)$profile['extID'],
+ 'userID' => (int)$profile['userID'],
+ 'userName' => $profile['userName'],
+ 'clan' => $clan,
+ 'dlPoints' => (int)$profile['dlPoints'],
+ 'stats' => $stats,
+ 'icons' => $icons,
+ 'lastPlayed' => (int)$profile['lastPlayed'],
+ 'bans' => $bans,
+ 'posts' => $posts
+ ]
+], JSON_INVALID_UTF8_IGNORE));
+?>
\ No newline at end of file
diff --git a/dashboard/api/rateDemon.php b/dashboard/api/rateDemon.php
new file mode 100644
index 000000000..796680934
--- /dev/null
+++ b/dashboard/api/rateDemon.php
@@ -0,0 +1,81 @@
+ true, 'success' => false, 'error' => 1, 'message' => 'Please supply a valid account credentials.']));
+}
+
+http_response_code(400); // Set the bad request response code now to not repeat it after
+
+$levelID = isset($_POST['level']) ? ExploitPatch::number(urldecode($_POST['level'])) : exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 2, 'message' => 'Please specify a valid level ID.']));
+$demon = isset($_POST['demon']) ? ExploitPatch::number(urldecode($_POST['demon'])) : exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 3, 'message' => 'Please specify a demon difficulty.']));
+
+// Check for valid demon difficulty
+if (!empty($demon) && $demon < 0 || $demon > 5) exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 4, 'message' => 'Please specify a valid demon difficulty.']));
+
+// Check for rate demon permission
+if ($gs->getMaxValuePermission($accountID, "actionRateDemon") == false) {
+ http_response_code(403);
+ exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 5, 'message' => 'You do not have the necessary permission to change the demon difficulty of a level!']));
+}
+
+$query = $db->prepare("SELECT * FROM levels WHERE levelID = :levelID");
+$query->execute([':levelID' => $levelID]);
+$query = $query->fetch();
+
+// Check if the level exists
+if (!$query) {
+ http_response_code(404);
+ exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 6, 'message' => 'This level does not exist!']));
+}
+
+if (!$query['starDemon']) {
+ http_response_code(404);
+ exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 7, 'message' => 'This level is not a Demon level!']));
+}
+
+// Taken from incl/levels/rateGJDemon.php
+switch($demon){
+ case 1:
+ $dmn = 3;
+ $dmnname = "Easy";
+ break;
+ case 2:
+ $dmn = 4;
+ $dmnname = "Medium";
+ break;
+ case 3:
+ $dmn = 0;
+ $dmnname = "Hard";
+ break;
+ case 4:
+ $dmn = 5;
+ $dmnname = "Insane";
+ break;
+ case 5:
+ $dmn = 6;
+ $dmnname = "Extreme";
+ break;
+}
+
+// Change demon difficulty
+$query = $db->prepare("UPDATE levels SET starDemonDiff = :demon WHERE levelID = :levelID");
+$query->execute([':demon' => $dmn, ':levelID' => $levelID]);
+// Insert into mod actions
+$query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('10', :value, :levelID, :timestamp, :id)");
+$query->execute([':value' => $dmnname, ':timestamp' => time(), ':id' => $accountID, ':levelID' => $levelID]);
+
+http_response_code(200); // Set back the response code to 200 before exitting
+exit(json_encode(['dashboard' => true, 'success' => true, 'level' => $levelID]));
+?>
\ No newline at end of file
diff --git a/dashboard/api/rateLevel.php b/dashboard/api/rateLevel.php
new file mode 100644
index 000000000..661fdcaef
--- /dev/null
+++ b/dashboard/api/rateLevel.php
@@ -0,0 +1,196 @@
+ true, 'success' => false, 'error' => 1, 'message' => 'Please supply a valid account credentials.']));
+}
+
+http_response_code(400);
+
+$levelID = isset($_POST['level']) ? ExploitPatch::number(urldecode($_POST['level'])) : exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 2, 'message' => 'Please supply a valid level ID.']));;
+$stars = ExploitPatch::number(urldecode($_POST['stars']));
+$feature = ExploitPatch::number(urldecode($_POST['feature']));
+$featuredID = ExploitPatch::number(urldecode($_POST['featuredID']));
+$coins = ExploitPatch::number(urldecode($_POST['coins']));
+
+// Set Star Auto to 1 if stars is equal to 1
+$starAuto = !empty($stars) && $stars == 1 ? 1 : 0;
+
+// Check for rate permissions
+if($gs->getMaxValuePermission($accountID, "commandRate") == false || $gs->getMaxValuePermission($accountID, "actionRateStars") == false) {
+ http_response_code(403);
+ exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 3, 'message' => 'You do not have the necessary permissions to use this!']));
+}
+
+// Check for feature permission
+if(!empty($feature) && $feature == 1) {
+ if ($gs->getMaxValuePermission($accountID, "commandFeature") == false) {
+ http_response_code(403);
+ exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 4, 'message' => 'You do not have the necessary permission to feature a level!']));
+ }
+}
+
+// Check for epic permission
+if(!empty($feature) && $feature > 1) {
+ if ($gs->getMaxValuePermission($accountID, "commandEpic") == false) {
+ http_response_code(403);
+ exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 5, 'message' => 'You do not have the necessary permission to make a level epic!']));
+ }
+}
+
+// Check for permission to use feature ID parameter
+if(!empty($featuredID) && $featuredID >= 1) {
+ if ($gs->getMaxValuePermission($accountID, "commandFeature") == false) {
+ http_response_code(403);
+ exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 6, 'message' => 'You do not have the necessary permission to set a custom feature ID!']));
+ }
+}
+
+// Check for permission to use coins parameter
+if (!empty($coins) && !$gs->getMaxValuePermission($accountID, "commandVerifycoins")) {
+ http_response_code(403);
+ exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 7, 'message' => 'You do not have the necessary permission to verify the coins of a level!']));
+}
+
+// Check for valid amount of stars
+if (!empty($stars) && $stars < 0 || $stars > 10) exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 8, 'message' => 'Please specify a valid amount of stars.']));
+
+// Check for valid feature state
+if (!empty($feature) && $feature < 0 || $feature > 5) exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 9, 'message' => 'Please specify a valid feature state.']));
+
+// Check for valid coins (false/true)
+if (isset($_POST['coins']) && $coins < 0 || $coins > 1) exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 10, 'message' => 'Please specify a valid true/false boolean for the coins parameter.']));
+
+if (isset($_POST['featuredID']) && $featuredID <= 0) exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 11, 'message' => 'You cannot set a featured ID below 0.']));
+
+$query = $db->prepare("SELECT * FROM levels WHERE levelID = :levelID");
+$query->execute([':levelID' => $levelID]);
+$query = $query->fetch();
+
+// Check if the level exists
+if (!$query) {
+ http_response_code(404);
+ exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 12, 'message' => 'This level does not exist!']));
+}
+
+// Set star auto from database if it cant fetch stars from parameters
+if (empty($stars)) $starAuto = $query["starAuto"];
+
+// Check for coins only update
+if (!isset($_POST['stars']) && !isset($_POST['feature']) && !isset($_POST['featuredID']) && isset($_POST['coins'])) {
+ if ($query["starStars"] > 0) {
+ $gs->verifyCoinsLevel($accountID, $levelID, $coins);
+
+ http_response_code(200);
+ exit(json_encode(['dashboard' => true, 'success' => true, 'level' => $levelID]));
+ } else {
+ http_response_code(404);
+ exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 13, 'message' => 'This level is not star rated!']));
+ }
+}
+
+// Check for feature only update
+if (!isset($_POST['stars']) && isset($_POST['feature']) && !isset($_POST['coins'])) {
+ if ($query["starStars"] != 0) {
+ if (isset($_POST['featuredID'])) {
+ switch($feature) {
+ case 0:
+ $featureState = $featuredID;
+ $epic = 0;
+ break;
+ case 1:
+ case 2:
+ case 3:
+ case 4:
+ $featureState = $featuredID;
+ $epic = $feature - 1;
+ break;
+ }
+ $query = $db->prepare("UPDATE levels SET starFeatured=:feature, starEpic=:epic, rateDate = :timestamp WHERE levelID=:levelID");
+ $query->execute([':feature' => $feature, ':epic' => $epic, ':timestamp' => time(), ':levelID' => $levelID]);
+
+ // Insert action into mod actions
+ $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('2', :value, :levelID, :timestamp, :id)");
+ $query->execute([':value' => $featureState, ':timestamp' => time(), ':id' => $accountID, ':levelID' => $levelID]);
+ } else $gs->featureLevel($accountID, $levelID, $feature);
+
+ http_response_code(200);
+ exit(json_encode(['dashboard' => true, 'success' => true, 'level' => $levelID]));
+ } else {
+ http_response_code(404);
+ exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 14, 'message' => 'This level is not star rated!']));
+ }
+}
+
+// Check for featured ID only update
+if (!isset($_POST['stars']) && !isset($_POST['feature']) && !isset($_POST['coins']) && isset($_POST['featuredID'])) {
+ if ($query["starStars"] > 0 && $query["starFeatured"] > 0) {
+ $query = $db->prepare("UPDATE levels SET starFeatured = :starFeatured, rateDate = :timestamp WHERE levelID = :levelID");
+ $query->execute([':starFeatured' => $featuredID, ':timestamp' => time(), ':levelID' => $levelID]);
+
+ http_response_code(200);
+ exit(json_encode(['dashboard' => true, 'success' => true, 'level' => $levelID]));
+ } else {
+ http_response_code(404);
+ exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 15, 'message' => 'This level is not rated/featured!']));
+ }
+}
+
+// Check if stars has been set before doing any requests here
+if (!isset($_POST['stars'])) exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 16, 'message' => 'Please supply an amount of stars.']));
+
+$difficulty = $gs->getDiffFromStars($stars);
+
+// Solve $feature problems
+if (!isset($_POST['feature'])) {
+ if (isset($_POST['stars']) && $stars == 0) $feature = 0;
+ elseif ($query['starFeatured'] >= 1 && $query['starEpic'] >= 1) $feature = $query['starEpic'];
+ elseif ($query['starFeatured'] >= 1 && $query['starEpic'] == 0) $feature = 1;
+}
+
+// Set coins from database if it cant fetch coins from parameters
+if (!isset($_POST['coins'])) $coins = $query["starCoins"];
+// Set coins to 0 if the level is set to be unrated
+if (isset($_POST['stars']) && $stars == 0 && $query['starStars'] >= 1 && $coins == 0) $coins = 0;
+
+$gs->rateLevel($accountID, $levelID, $stars, $difficulty["diff"], $difficulty["auto"], $difficulty["demon"]);
+// Feature ID check
+if (!empty($featuredID) && !empty($feature) && $featuredID >= 1) {
+ switch($feature) {
+ case 0:
+ $featureState = $featuredID;
+ $epic = 0;
+ break;
+ case 1:
+ case 2:
+ case 3:
+ case 4:
+ $featureState = $featuredID;
+ $epic = $feature - 1;
+ break;
+ }
+ $query = $db->prepare("UPDATE levels SET starFeatured=:feature, starEpic=:epic, rateDate = :timestamp WHERE levelID=:levelID");
+ $query->execute([':feature' => $feature, ':epic' => $epic, ':timestamp' => time(), ':levelID' => $levelID]);
+
+ // Insert action into mod actions
+ $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('2', :value, :levelID, :timestamp, :id)");
+ $query->execute([':value' => $featureState, ':timestamp' => time(), ':id' => $accountID, ':levelID' => $levelID]);
+} else $gs->featureLevel($accountID, $levelID, $feature);
+
+if ($stars <= 0) $gs->verifyCoinsLevel($accountID, $levelID, 0);
+else $gs->verifyCoinsLevel($accountID, $levelID, isset($_POST['coins']) ? $coins : $query["starCoins"]);
+
+http_response_code(200);
+exit(json_encode(['dashboard' => true, 'success' => true, 'level' => $levelID]));
+?>
\ No newline at end of file
diff --git a/dashboard/api/rates.php b/dashboard/api/rates.php
new file mode 100644
index 000000000..b89688c8f
--- /dev/null
+++ b/dashboard/api/rates.php
@@ -0,0 +1,96 @@
+ true, 'success' => false, 'error' => 1, 'message' => 'Please specify your last rate check time.']));
+$rates = $db->prepare("SELECT * FROM levels WHERE rateDate != 0 AND rateDate > :time ORDER BY rateDate DESC");
+$rates->execute([':time' => $time]);
+$rates = $rates->fetchAll();
+if(empty($rates)) exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 2, 'message' => 'Nothing was rated!']));
+foreach($rates as &$rate) {
+ $songInfo = $song = $songName = false;
+ $rate['extID'] = is_numeric($rate['extID']) ? $rate['extID'] : 0;
+ if($rate['songID'] != 0) {
+ $songInfo = $gs->getSongInfo($rate['songID']);
+ if($songInfo) {
+ $song = [
+ 'ID' => $songInfo['ID'],
+ 'author' => $songInfo['authorName'],
+ 'name' => $songInfo['name'],
+ 'size' => $songInfo['size'],
+ 'download' => urldecode($songInfo['download']),
+ 'reuploader' => false,
+ 'newgrounds' => true,
+ 'customSong' => true
+ ];
+ if($songInfo['reuploadID'] != 0) {
+ $accountName = $gs->getAccountName($songInfo['reuploadID']);
+ $song['reuploader'] = [
+ 'accountID' => $songInfo['reuploadID'],
+ 'userID' => $gs->getUserID($songInfo['reuploadID'], $accountName),
+ 'username' => $accountName
+ ];
+ $song['newgrounds'] = false;
+ }
+ } else {
+ $songName = explode(' by ', $gs->getAudioTrack($rate['audioTrack']));
+ $song = [
+ 'audioTrack' => $rate['audioTrack'],
+ 'name' => $songName[0],
+ 'author' => $songName[1],
+ 'customSong' => false
+ ];
+ }
+ } else {
+ $songName = explode(' by ', $gs->getAudioTrack($rate['audioTrack']));
+ $song = [
+ 'audioTrack' => $rate['audioTrack'],
+ 'name' => $songName[0],
+ 'author' => $songName[1],
+ 'customSong' => false
+ ];
+ }
+ $levels[] = [
+ 'ID' => $rate['levelID'],
+ 'name' => $rate['levelName'],
+ 'desc' => ExploitPatch::rucharclean(ExploitPatch::url_base64_decode($rate['levelDesc'])),
+ 'stats' => [
+ 'stars' => $rate['starStars'],
+ 'featured' => ($rate['starFeatured'] == 0 ? false : true),
+ 'isRated' => ($rate['starStars'] == 0 ? false : true),
+ 'isCoinsRated' => ($rate['starCoins'] == 0 ? false : true),
+ 'coins' => $rate['coins'],
+ 'likes' => $rate['likes'] - ($rate['dislikes'] ?? 0),
+ 'downloads' => $rate['downloads'],
+ 'requestedStars' => $rate['requestedStars'],
+ 'epic' => $rate['starEpic']
+ ],
+ 'diffuculty' => [
+ 'number' => $rate['starDifficulty'],
+ 'demonDiff' => $rate['starDemonDiff'],
+ 'name' => $gs->getDifficulty($rate['starDifficulty'], $rate['starAuto'], $rate['starDemon']),
+ 'isDemon' => ($rate['starDemon'] == 0 ? false : true),
+ 'isAuto' => ($rate['starAuto'] == 0 ? false : true)
+ ],
+ 'author' => [
+ 'username' => $rate['userName'],
+ 'accountID' => $rate['extID'],
+ 'userID' => $rate['userID']
+ ],
+ 'timestamps' => [
+ 'uploadDate' => $rate['uploadDate'],
+ 'updateDate' => $rate['updateDate'],
+ 'rateDate' => $rate['rateDate']
+ ],
+ 'song' => $song
+ ];
+}
+exit(json_encode(['dashboard' => true, 'success' => true, 'levels' => $levels]));
+?>
\ No newline at end of file
diff --git a/dashboard/api/replies.php b/dashboard/api/replies.php
new file mode 100644
index 000000000..00afefb2f
--- /dev/null
+++ b/dashboard/api/replies.php
@@ -0,0 +1,86 @@
+ false, 'error' => $check]));
+ if($_POST["delete"] == 1) {
+ $reply = $db->prepare("SELECT * FROM replies WHERE replyID = :id");
+ $reply->execute([':id' => $id]);
+ $reply = $reply->fetch();
+ if($reply["accountID"] == $check['accountID']) {
+ $reply = $db->prepare("DELETE FROM replies WHERE replyID = :id");
+ $reply->execute([':id' => $id]);
+ exit(json_encode(['dashboard' => true, 'success' => true]));
+ } else exit(json_encode(['dashboard' => true, 'success' => false]));
+ }
+ if(empty($_POST["body"])) {
+ $reply = $db->prepare("SELECT * FROM replies WHERE commentID = :id ORDER BY replyID DESC");
+ $reply->execute([':id' => $id]);
+ $reply = $reply->fetchAll();
+ $replies = [];
+ foreach($reply as &$rep) {
+ $body = base64_decode($rep["body"]);
+ if($enableCommentLengthLimiter) $body = substr($body, 0, $maxCommentLength);
+ $username = $gs->getAccountName($rep["accountID"]);
+ $replies[] = [
+ 'replyID' => $rep['replyID'],
+ 'commentID' => $id,
+ 'account' => [
+ 'username' => $username,
+ 'accountID' => $rep["accountID"],
+ 'userID' => $gs->getUserID($rep["accountID"], $username)
+ ],
+ 'body' => $body,
+ 'timestamp' => $rep["timestamp"]
+ ];
+ }
+ exit(json_encode(['dashboard' -> true, 'success' => true, 'replies' => $replies, 'count' => count($replies)]));
+ } else {
+ $userID = $gs->getUserID($check["accountID"], $gs->getAccountName($check["accountID"]));
+ $checkBan = $gs->getPersonBan($check["accountID"], $userID, 3);
+ if(Automod::isAccountsDisabled(1) || $checkBan) exit(json_encode(['dashboard' => true, 'success' => false]));
+ $body = base64_encode(strip_tags(ExploitPatch::rucharclean($_POST["body"])));
+ if($enableCommentLengthLimiter && strlen(base64_decode($body)) > $maxCommentLength) exit("-1");
+ $reply = $db->prepare("INSERT INTO replies (commentID, accountID, body, timestamp) VALUES (:cid, :acc, :body, :time)");
+ if($reply->execute([':cid' => $id, ':acc' => $check['accountID'], ':body' => $body, ':time' => time()])) exit(json_encode(['dashboard' => true, 'success' => true]));
+ else exit(json_encode(['dashboard' => true, 'success' => false]));
+ }
+} else {
+ $reply = $db->prepare("SELECT * FROM replies WHERE commentID = :id ORDER BY replyID DESC");
+ $reply->execute([':id' => $id]);
+ $reply = $reply->fetchAll();
+ $replies = [];
+ foreach($reply as &$rep) {
+ $body = base64_decode($rep["body"]);
+ if($enableCommentLengthLimiter) $body = substr(base64_decode($body), 0, $maxCommentLength);
+ $username = $gs->getAccountName($rep["accountID"]);
+ $replies[] = [
+ 'replyID' => $rep['replyID'],
+ 'commentID' => $id,
+ 'account' => [
+ 'username' => $username,
+ 'accountID' => $rep["accountID"],
+ 'userID' => $gs->getUserID($rep["accountID"], $username)
+ ],
+ 'body' => $body,
+ 'timestamp' => $rep["timestamp"]
+ ];
+ }
+ exit(json_encode(['dashboard' => true, 'success' => true, 'replies' => $replies, 'count' => count($replies)]));
+}
+?>
\ No newline at end of file
diff --git a/dashboard/api/runCron.php b/dashboard/api/runCron.php
new file mode 100644
index 000000000..17a5eea8b
--- /dev/null
+++ b/dashboard/api/runCron.php
@@ -0,0 +1,25 @@
+ true, 'success' => false, 'error' => 1, 'message' => 'Please supply a valid account credentials.']));
+}
+
+$runCron = Cron::doEverything($accountID, true);
+if(!$runCron) {
+ http_response_code(400);
+ exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 2, 'message' => 'Please wait a few minutes before running Cron again.']));
+}
+
+exit(json_encode(['dashboard' => true, 'success' => true]));
+?>
\ No newline at end of file
diff --git a/dashboard/api/searchLevel.php b/dashboard/api/searchLevel.php
new file mode 100644
index 000000000..abc60af9a
--- /dev/null
+++ b/dashboard/api/searchLevel.php
@@ -0,0 +1,94 @@
+ true, 'success' => false, 'error' => 1, 'message' => "Please supply a valid level ID."]));
+$query = $db->prepare("SELECT * FROM levels WHERE levelID = :lvid");
+$query->execute([':lvid' => $levelID]);
+$rate = $query->fetch();
+if(!$rate) exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 2, 'message' => "This level wasn't found."]));
+$songInfo = $song = $songName = false;
+$rate['extID'] = is_numeric($rate['extID']) ? $rate['extID'] : 0;
+if($rate['songID'] != 0) {
+ $songInfo = $gs->getSongInfo($rate['songID']);
+ if($songInfo) {
+ $song = [
+ 'ID' => $songInfo['ID'],
+ 'author' => $songInfo['authorName'],
+ 'name' => $songInfo['name'],
+ 'size' => $songInfo['size'],
+ 'download' => urldecode($songInfo['download']),
+ 'reuploader' => false,
+ 'newgrounds' => true,
+ 'customSong' => true
+ ];
+ if($songInfo['reuploadID'] != 0) {
+ $accountName = $gs->getAccountName($songInfo['reuploadID']);
+ $song['reuploader'] = [
+ 'accountID' => $songInfo['reuploadID'],
+ 'userID' => $gs->getUserID($songInfo['reuploadID'], $accountName),
+ 'username' => $accountName
+ ];
+ $song['newgrounds'] = false;
+ }
+ } else {
+ $songName = explode(' by ', $gs->getAudioTrack($rate['audioTrack']));
+ $song = [
+ 'audioTrack' => $rate['audioTrack'],
+ 'name' => $songName[0],
+ 'author' => $songName[1],
+ 'customSong' => false
+ ];
+ }
+} else {
+ $songName = explode(' by ', $gs->getAudioTrack($rate['audioTrack']));
+ $song = [
+ 'audioTrack' => $rate['audioTrack'],
+ 'name' => $songName[0],
+ 'author' => $songName[1],
+ 'customSong' => false
+ ];
+}
+$level = [
+ 'ID' => $rate['levelID'],
+ 'name' => $rate['levelName'],
+ 'desc' => ExploitPatch::rucharclean(ExploitPatch::url_base64_decode($rate['levelDesc'])),
+ 'stats' => [
+ 'stars' => $rate['starStars'],
+ 'featured' => ($rate['starFeatured'] == 0 ? false : true),
+ 'isRated' => ($rate['starStars'] == 0 ? false : true),
+ 'isCoinsRated' => ($rate['starCoins'] == 0 ? false : true),
+ 'coins' => $rate['coins'],
+ 'likes' => $rate['likes'] - ($rate['dislikes'] ?? 0),
+ 'downloads' => $rate['downloads'],
+ 'requestedStars' => $rate['requestedStars'],
+ 'epic' => $rate['starEpic']
+ ],
+ 'diffuculty' => [
+ 'number' => $rate['starDifficulty'],
+ 'demonDiff' => $rate['starDemonDiff'],
+ 'name' => $gs->getDifficulty($rate['starDifficulty'], $rate['starAuto'], $rate['starDemon']),
+ 'isDemon' => ($rate['starDemon'] == 0 ? false : true),
+ 'isAuto' => ($rate['starAuto'] == 0 ? false : true)
+ ],
+ 'author' => [
+ 'username' => $rate['userName'],
+ 'accountID' => $rate['extID'],
+ 'userID' => $rate['userID']
+ ],
+ 'timestamps' => [
+ 'uploadDate' => $rate['uploadDate'],
+ 'updateDate' => $rate['updateDate'],
+ 'rateDate' => $rate['rateDate']
+ ],
+ 'song' => $song
+];
+exit(json_encode(['dashboard' => true, 'success' => true, 'level' => $level]));
+?>
\ No newline at end of file
diff --git a/dashboard/api/sends.php b/dashboard/api/sends.php
new file mode 100644
index 000000000..0eb7a67c3
--- /dev/null
+++ b/dashboard/api/sends.php
@@ -0,0 +1,50 @@
+ true, 'success' => false, 'error' => 1, 'message' => "Please supply a valid level ID."]));
+}
+
+$query = $db->prepare("SELECT * FROM levels WHERE levelID = :levelID");
+$query->execute([":levelID" => $levelID]);
+$query = $query->fetch();
+
+if(!$query) {
+ http_response_code(404);
+ exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 2, 'message' => "This level wasn't found."]));
+}
+
+$query = $db->prepare("SELECT * FROM suggest WHERE suggestLevelId = :levelID ORDER BY timestamp DESC");
+$query->execute([":levelID" => $levelID]);
+$sendsInfo = $query->fetchAll();
+
+if(!$sendsInfo) {
+ http_response_code(404);
+ exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 3, 'message' => "This level wasn't sent."]));
+}
+
+$sends = [];
+
+foreach ($sendsInfo as $send) {
+ $sends[] = [
+ "modUsername" => $gs->getAccountName($send["suggestBy"]),
+ "modID" => $send["suggestBy"],
+ "stars" => $send["suggestStars"],
+ "featured" => $send["suggestFeatured"],
+ "timestamp" => $send["timestamp"]
+ ];
+}
+
+exit(json_encode(['dashboard' => true, 'success' => true, 'sends' => $sends]));
+?>
\ No newline at end of file
diff --git a/dashboard/api/songs.php b/dashboard/api/songs.php
new file mode 100644
index 000000000..094314343
--- /dev/null
+++ b/dashboard/api/songs.php
@@ -0,0 +1,72 @@
+prepare("SELECT accountID FROM accounts WHERE discordID = :id AND discordLinkReq = 0");
+ $discord->execute([':id' => $ds]);
+ $acc = $discord->fetch();
+ if($acc["accountID"]) {
+ if($search == 'MySongs') $songs = $db->prepare("SELECT * FROM songs WHERE reuploadID = :id AND isDisabled = 0 ORDER BY reuploadTime DESC");
+ else $songs = $db->prepare("SELECT * FROM favsongs INNER JOIN songs on favsongs.songID = songs.ID WHERE favsongs.accountID = :id AND songs.isDisabled = 0 ORDER BY favsongs.ID DESC");
+ $songs->execute([':id' => $acc["accountID"]]);
+ $songs = $songs->fetchAll();
+ if($songs) {
+ foreach($songs as &$song) {
+ $song["download"] = str_replace("http://", 'https://', str_replace("gcsdb/dashboard/", '', $song["download"]));
+ $data[] = ["ID" => $song["ID"], "author" => $song["authorName"], "name" => $song["name"], "download" => $song["download"], "reuploadID" => $song["reuploadID"], "reuploadTime" => $song["reuploadTime"]];
+ }
+ $count = count($data);
+ if($count > 0) {
+ if($count == 1) exit(json_encode(["dashboard" => true, "success" => true, "numeric" => true, $data[0]]));
+ else exit(json_encode(["dashboard" => true, "success" => true, "songs" => $data, "count" => $count, "numeric" => false]));
+ }
+ } else exit(json_encode(["dashboard" => true, "success" => false, "error" => 4]));
+ } else exit(json_encode(["dashboard" => true, "success" => false, "error" => 3]));
+ } else {
+ $explode = explode(" - ", str_replace(" — ", " - ", $search), 2);
+ if(!$explode[1]) {
+ $author = $name = $search;
+ $separator = 'OR';
+ }
+ else {
+ $author = $explode[0];
+ $name = $explode[1];
+ $separator = 'AND';
+ }
+ $songs = $db->prepare("SELECT * FROM songs WHERE (authorName LIKE '%".$author."%' ".$separator." name LIKE '%".$name."%') AND reuploadID > 0 AND isDisabled = 0");
+ $songs->execute();
+ $songs = $songs->fetchAll();
+ foreach($songs as &$song) {
+ $song["download"] = str_replace("http://", 'https://', str_replace("gcsdb/dashboard/", '', $song["download"]));
+ $data[] = ["ID" => $song["ID"], "author" => $song["authorName"], "name" => $song["name"], "download" => $song["download"], "reuploadID" => $song["reuploadID"], "reuploadTime" => $song["reuploadTime"]];
+ }
+ $count = count($data);
+ if($count > 0) {
+ if($count == 1) exit(json_encode(["dashboard" => true, "success" => true, "numeric" => true, "song" => $data[0], 'songs' => $data[0]]));
+ else exit(json_encode(["dashboard" => true, "success" => true, "songs" => $data, "count" => $count, "numeric" => false]));
+ } else exit(json_encode(["dashboard" => true, "success" => false, "error" => 2]));
+ }
+ } else {
+ $songs = $db->prepare("SELECT * FROM songs WHERE ID = :id AND reuploadID > 0 AND isDisabled = 0");
+ $songs->execute([':id' => $search]);
+ $song = $songs->fetch();
+ if($song) {
+ $song["download"] = str_replace("http://", 'https://', str_replace("gcsdb/dashboard/", '', $song["download"]));
+ $oneSong = ["ID" => $song["ID"], "author" => $song["authorName"], "name" => $song["name"], "download" => $song["download"], "reuploadID" => $song["reuploadID"], "reuploadTime" => $song["reuploadTime"]];
+ exit(json_encode(["dashboard" => true, "success" => true, "numeric" => true, "song" => $oneSong, 'songs' => $oneSong]));
+ }
+ else exit(json_encode(["dashboard" => true, "success" => false, "error" => 1]));
+ }
+}
+echo json_encode(["dashboard" => true, "success" => false, 'error' => 0]);
+?>
\ No newline at end of file
diff --git a/dashboard/api/stats.php b/dashboard/api/stats.php
new file mode 100644
index 000000000..98a5c3b42
--- /dev/null
+++ b/dashboard/api/stats.php
@@ -0,0 +1,105 @@
+prepare("SELECT
+ (SELECT COUNT(*) FROM users) AS users,
+ (SELECT COUNT(*) FROM users WHERE lastPlayed > :time - 2592000) AS activeUsers,
+ (SELECT COUNT(*) FROM levels) AS levels,
+ (SELECT COUNT(*) FROM levels WHERE starStars >= 1) AS ratedLevels,
+ (SELECT COUNT(*) FROM levels WHERE starStars >= 1 AND starFeatured >= 1 AND starEpic = 0) AS featuredLevels,
+ (SELECT COUNT(*) FROM levels WHERE starStars >= 1 AND starFeatured >= 1 AND starEpic = 1) AS epicLevels,
+ (SELECT COUNT(*) FROM levels WHERE starStars >= 1 AND starFeatured >= 1 AND starEpic = 2) AS legendaryLevels,
+ (SELECT COUNT(*) FROM levels WHERE starStars >= 1 AND starFeatured >= 1 AND starEpic = 3) AS mythicLevels,
+ (SELECT COUNT(*) FROM dailyfeatures WHERE type = 0) AS dailies,
+ (SELECT COUNT(*) FROM dailyfeatures WHERE type = 1) AS weeklies,
+ (SELECT COUNT(*) FROM gauntlets) AS gauntlets,
+ (SELECT COUNT(*) FROM mappacks) AS mapPacks,
+ (SELECT SUM(downloads) FROM levels) AS downloads,
+ (SELECT SUM(objects) FROM levels) AS objects,
+ (SELECT SUM(likes) FROM levels) AS likes,
+ (SELECT (SELECT COUNT(*) FROM comments) + (SELECT COUNT(*) FROM acccomments)) AS totalComments,
+ (SELECT COUNT(*) FROM comments) AS comments,
+ (SELECT COUNT(*) FROM acccomments) AS posts,
+ (SELECT COUNT(*) FROM replies) AS postReplies,
+ (SELECT SUM(stars) FROM users) AS stars,
+ (SELECT SUM(creatorPoints) FROM users) AS creatorPoints,
+ (SELECT COUNT(*) FROM bans) AS bannedPlayers,
+ (SELECT COUNT(personType) FROM bans WHERE personType = 0) AS accountIDBans,
+ (SELECT COUNT(personType) FROM bans WHERE personType = 1) AS userIDBans,
+ (SELECT COUNT(personType) FROM bans WHERE personType = 2) AS IPBans,
+ (SELECT COUNT(banType) FROM bans WHERE banType = 0) AS leaderboardBans,
+ (SELECT COUNT(banType) FROM bans WHERE banType = 1) AS creatorBans,
+ (SELECT COUNT(banType) FROM bans WHERE banType = 2) AS levelUploadBans,
+ (SELECT COUNT(banType) FROM bans WHERE banType = 3) AS commentBans,
+ (SELECT COUNT(banType) FROM bans WHERE banType = 4) AS accountBans
+");
+$query->execute([':time' => time()]);
+$stats = $query->fetch(PDO::FETCH_ASSOC);
+$stats = [
+ 'users' => [
+ 'total' => (int)$stats['users'],
+ 'active' => (int)$stats['activeUsers']
+ ],
+ 'levels' => [
+ 'total' => (int)$stats['levels'],
+ 'rated' => (int)$stats['ratedLevels'],
+ 'featured' => (int)$stats['featuredLevels'],
+ 'epic' => (int)$stats['epicLevels'],
+ 'legendary' => (int)$stats['legendaryLevels'],
+ 'mythic' => (int)$stats['mythicLevels']
+ ],
+ 'special' => [
+ 'dailies' => (int)$stats['dailies'],
+ 'weeklies' => (int)$stats['weeklies'],
+ 'gauntlets' => (int)$stats['gauntlets'],
+ 'map_packs' => (int)$stats['mapPacks']
+ ],
+ 'downloads' => [
+ 'total' => (int)$stats['downloads'],
+ 'average' => (double)($stats['downloads'] / $stats['levels'])
+ ],
+ 'objects' => [
+ 'total' => (int)$stats['objects'],
+ 'average' => (double)($stats['objects'] / $stats['levels'])
+ ],
+ 'likes' => [
+ 'total' => (int)$stats['likes'],
+ 'average' => (double)($stats['likes'] / $stats['levels'])
+ ],
+ 'comments' => [
+ 'total' => (int)$stats['totalComments'],
+ 'comments' => (int)$stats['comments'],
+ 'posts' => (int)$stats['posts'],
+ 'post_replies' => (int)$stats['postReplies']
+ ],
+ 'gained_stars' => [
+ 'total' => (int)$stats['stars'],
+ 'average' => (double)($stats['stars'] / $stats['users'])
+ ],
+ 'creator_points' => [
+ 'total' => (float)$stats['creatorPoints'],
+ 'average' => (double)($stats['creatorPoints'] / $stats['users'])
+ ],
+ 'bans' => [
+ 'total' => (int)$stats['bannedPlayers'],
+ 'personTypes' => [
+ 'accountIDBans' => (int)$stats['accountIDBans'],
+ 'userIDBans' => (int)$stats['userIDBans'],
+ 'IPBans' => (int)$stats['IPBans']
+ ],
+ 'banTypes' => [
+ 'leaderboardBans' => (int)$stats['leaderboardBans'],
+ 'creatorBans' => (int)$stats['creatorBans'],
+ 'levelUploadBans' => (int)$stats['levelUploadBans'],
+ 'commentBans' => (int)$stats['commentBans'],
+ 'accountBans' => (int)$stats['accountBans']
+ ]
+ ]
+];
+exit(json_encode(['dashboard' => true, 'success' => true, 'stats' => $stats]));
+?>
\ No newline at end of file
diff --git a/dashboard/api/whoRated.php b/dashboard/api/whoRated.php
new file mode 100644
index 000000000..dfb470be2
--- /dev/null
+++ b/dashboard/api/whoRated.php
@@ -0,0 +1,32 @@
+ true, 'success' => false, 'error' => 1, 'message' => "Please supply a valid level ID."]));
+$query = $db->prepare("SELECT * FROM levels WHERE levelID = :lvid");
+$query->execute([':lvid' => $levelID]);
+$levelInfo = $query->fetch();
+if(!$levelInfo) exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 2, 'message' => "This level wasn't found."]));
+$query = $db->prepare("SELECT * FROM modactions WHERE value3 = :lvid AND type = '1'");
+$query->execute([':lvid' => $levelID]);
+$result = $query->fetchAll();
+if($query->rowCount() == 0) exit(json_encode(['dashboard' => true, 'success' => false, 'error' => 3, 'message' => "This level wasn't rated."]));
+foreach($result as &$action){
+ $userName = $gs->getAccountName($action['account']);
+ $data[] = [
+ 'username' => $userName,
+ 'accountID' => $action['account'],
+ 'difficulty' => $action['value'],
+ 'stars' => $action['value2'],
+ 'timestamp' => $action['timestamp']
+ ];
+}
+exit(json_encode(['dashboard' => true, 'success' => true, 'level' => ['name' => $levelInfo['levelName'], 'author' => $levelInfo['userName']], 'rates' => $data]));
+?>
\ No newline at end of file
diff --git a/dashboard/automod/index.php b/dashboard/automod/index.php
new file mode 100644
index 000000000..919b52adc
--- /dev/null
+++ b/dashboard/automod/index.php
@@ -0,0 +1,425 @@
+title($dl->getLocalizedString("automodTitle"));
+$dl->printFooter('../');
+if(!$gs->checkPermission($_SESSION["accountID"], "dashboardManageAutomod")) {
+ exit($dl->printSong(''.$dl->getLocalizedString("force".$type).'
+'.$dl->getLocalizedString("force".$type.'Desc').'
+ + +
+
', 'mod'));
+}
+if($_POST['resolve'] == 1) {
+ $actionID = ExploitPatch::number($_POST['actionID']);
+ $action = Automod::getAutomodActionByID($actionID);
+ if($action && !$action['resolved']) Automod::changeAutomodAction($actionID, 1);
+}
+if(isset($_POST['disableType'])) {
+ $disableType = ExploitPatch::number($_POST['disableType']);
+ $expires = (new DateTime($_POST['expires']))->getTimestamp();
+ switch(true) {
+ case isset($_POST['levels']):
+ $isDisable = $_POST['levels'] == 1;
+ if($expires > time() || !$isDisable) Automod::changeLevelsAutomodState($disableType, $isDisable, $expires);
+ break;
+ case isset($_POST['accounts']):
+ $isDisable = $_POST['accounts'] == 1;
+ if($expires > time() || !$isDisable) Automod::changeAccountsAutomodState($disableType, $isDisable, $expires);
+ break;
+ }
+}
+$actions = Automod::getAutomodActions();
+$actionTypes = Automod::getAutomodTypes();
+$actionsDiv = '';
+foreach($actions AS &$actionValue) {
+ $actionType = $actionTypes[$actionValue['type']];
+ $actionButtons = $actionDesc = $spammerUsername = '';
+ switch($actionType) {
+ case 1:
+ $actionTitle = $dl->getLocalizedString('possibleLevelsSpamming');
+ $actionButtonsText = $dl->getLocalizedString('disableLevelsUploading');
+ $openTabFunction = 'openLevelsDisableTab(0, '.$actionValue['ID'].')';
+ break;
+ case 2:
+ $actionTitle = $dl->getLocalizedString('possibleAccountsSpamming');
+ $actionButtonsText = $dl->getLocalizedString('disableAccountsRegistering');
+ $openTabFunction = 'openAccountsDisableTab(0, '.$actionValue['ID'].')';
+ break;
+ case 3:
+ $actionTitle = $dl->getLocalizedString('possibleCommentsSpamming');
+ $actionButtonsText = $dl->getLocalizedString('disableCommenting');
+ $actionDesc = ''.$dl->getLocalizedString("errorGeneric").'
+ +
+
';
+ $openTabFunction = 'openLevelsDisableTab(1, '.$actionValue['ID'].')';
+ break;
+ case 4:
+ $actionTitle = $dl->getLocalizedString('possibleCommentsSpammer');
+ $actionButtonsText = $dl->getLocalizedString('banCommenting');
+ $spammerUsername = $gs->getUserName($actionValue['value4']);
+ $actionDesc = '
+ '.$actionValue['value1'].'
+
+
+ '.$actionValue['value2'].' / '.$actionValue['value3'].'
+
+
+
';
+ $openTabFunction = 'a(\'account/banPerson.php?person='.urlencode($actionValue['value4']).'&personType=1&banType=3\', true, true, \'GET\')';
+ break;
+ case 5:
+ $actionTitle = $dl->getLocalizedString('possibleAccountPostsSpamming');
+ $actionButtonsText = $dl->getLocalizedString('disablePosting');
+ $actionDesc = '
+ '.$actionValue['value1'].'
+
+
+ '.$actionValue['value2'].' / '.$actionValue['value3'].'
+
+
+
+
';
+ $openTabFunction = 'openAccountsDisableTab(1, '.$actionValue['ID'].')';
+ break;
+ case 6:
+ $actionTitle = $dl->getLocalizedString('possibleAccountPostsSpammer');
+ $actionButtonsText = $dl->getLocalizedString('banCommenting');
+ $spammerUsername = $gs->getUserName($actionValue['value4']);
+ $actionDesc = '
+ '.$actionValue['value1'].'
+
+
+ '.$actionValue['value2'].' / '.$actionValue['value3'].'
+
+
+
';
+ $openTabFunction = 'a(\'account/banPerson.php?person='.urlencode($actionValue['value4']).'&personType=1&banType=3\', true, true, \'GET\')';
+ break;
+ case 7:
+ $actionTitle = $dl->getLocalizedString('possibleRepliesSpamming');
+ $actionButtonsText = $dl->getLocalizedString('disablePosting');
+ $actionDesc = '
+ '.$actionValue['value1'].'
+
+
+ '.$actionValue['value2'].' / '.$actionValue['value3'].'
+
+
+
+
';
+ $openTabFunction = 'openAccountsDisableTab(1, '.$actionValue['ID'].')';
+ break;
+ case 8:
+ $actionTitle = $dl->getLocalizedString('possibleRepliesSpammer');
+ $actionButtonsText = $dl->getLocalizedString('banCommenting');
+ $spammerUsername = $gs->getAccountName($actionValue['value4']);
+ $actionDesc = '
+ '.$actionValue['value1'].'
+
+
+ '.$actionValue['value2'].' / '.$actionValue['value3'].'
+
+
+
';
+ $openTabFunction = 'a(\'account/banPerson.php?person='.urlencode($actionValue['value4']).'&personType=0&banType=3\', true, true, \'GET\')';
+ break;
+ default:
+ $actionTitle = $dl->getLocalizedString('unknownWarning');
+ $actionButtons = '';
+ $actionDesc = '
+ '.$actionValue['value1'].'
+
+
+ '.$actionValue['value2'].' / '.$actionValue['value3'].'
+
+
+
+
+
+ '.$actionValue['value1'].'
+
+
+ '.$actionValue['value2'].'
+
+
+ '.$actionValue['value3'].'
+
+
+
';
+ break;
+ }
+ if(empty($actionDesc)) {
+ if(empty($actionValue['value1'])) $actionCompare = '∞';
+ else $actionCompare = ceil($actionValue['value2'] / $actionValue['value1'] * 10) / 10;
+ $actionDesc = '
+ '.$actionValue['value4'].'
+
+
+ '.$actionValue['value5'].'
+
+
+ '.$actionValue['value6'].'
+
+
+
';
+ }
+ if(empty($actionButtons)) {
+ if($actionValue['resolved']) $actionButtons = '';
+ else $actionButtons = '
+
+ ';
+ }
+ $actionsDiv .= '
+ '.$actionValue['value1'].'
+
+
+ '.$actionValue['value2'].'
+
+
+ x'.$actionCompare.'
+
+
+
';
+}
+if(empty($actionsDiv)) $actionsDiv = '
+
+ '.$actionTitle.'
+
+
+ '.$actionDesc.'
+
+ '.$actionButtons.'
+
+
+
+
';
+$levelsCount = Automod::getLevelsCountPerDay();
+if(empty($levelsCount['yesterday'])) $levelsCountCompare = '∞';
+else $levelsCountCompare = ceil(($levelsCount['today'] / $levelsCount['yesterday']) * 1000) / 10 .'%';
+$levelsDisableTimes = Automod::getLevelsDisableStates();
+$levelsUploadingState = empty($levelsDisableTimes[0]) ? 'enabled' : 'disabled';
+$levelsCommentingState = empty($levelsDisableTimes[1]) ? 'enabled' : 'disabled';
+$levelsLeaderboardSubmitsState = empty($levelsDisableTimes[2]) ? 'enabled' : 'disabled';
+$accountsCount = Automod::getAccountsCountPerDay();
+if(empty($accountsCount['yesterday'])) $accountsCountCompare = '∞';
+else $accountsCountCompare = ceil(($accountsCount['today'] / $accountsCount['yesterday']) * 1000) / 10 .'%';
+$accountsDisableTimes = Automod::getAccountsDisableStates();
+$accountRegisteringState = empty($accountsDisableTimes[0]) ? 'enabled' : 'disabled';
+$accountPostingState = empty($accountsDisableTimes[1]) ? 'enabled' : 'disabled';
+$accountStatsUpdatingState = empty($accountsDisableTimes[2]) ? 'enabled' : 'disabled';
+$accountMessagingState = empty($accountsDisableTimes[3]) ? 'enabled' : 'disabled';
+$dl->printPage(''.$dl->getLocalizedString('noWarnings').'
+
+
+', 'mod');
+?>
\ No newline at end of file
diff --git a/dashboard/clan/.htaccess b/dashboard/clan/.htaccess
new file mode 100644
index 000000000..0621d3743
--- /dev/null
+++ b/dashboard/clan/.htaccess
@@ -0,0 +1,9 @@
+RewriteEngine On
+RewriteCond %{REQUEST_FILENAME} !-f
+RewriteCond %{REQUEST_FILENAME} !-d
+RewriteCond %{REQUEST_URI} !^/replies.php
+RewriteCond %{REQUEST_URI} !/settings
+RewriteRule ^ %{REQUEST_URI}/../../clan/?id=%{REQUEST_URI} [L]
+
+RewriteCond %{REQUEST_URI} /settings
+RewriteRule ^ %{REQUEST_URI}/../../../clan/?id=%{REQUEST_URI} [L]
diff --git a/dashboard/clan/index.php b/dashboard/clan/index.php
new file mode 100644
index 000000000..d9c68bce5
--- /dev/null
+++ b/dashboard/clan/index.php
@@ -0,0 +1,476 @@
+printSong(''.$dl->getLocalizedString("automodTitle").'
+
+
+
+ '.$actionsDiv.'
+
+
+
+
+
+
+
+
+ '.$dl->getLocalizedString('levels').'
+
+
+
+
+
+ '.$levelsCount['yesterday'].'
+
+
+ '.$levelsCount['today'].'
+
+
+ '.$levelsCountCompare.'
+
+
+
+
+ '.$dl->getLocalizedString('uploading').'
+
+
+
+
+
+ '.$dl->getLocalizedString('commenting').'
+
+
+
+
+
+ '.$dl->getLocalizedString('leaderboardSubmits').'
+
+
+
+
+
+
+
+
+
+
+
+ '.$dl->getLocalizedString('accounts').'
+
+
+
+
+
+ '.$accountsCount['yesterday'].'
+
+
+ '.$accountsCount['today'].'
+
+
+ '.$accountsCountCompare.'
+
+
+
+
+ '.$dl->getLocalizedString('registering').'
+
+
+
+
+
+ '.$dl->getLocalizedString('accountPosting').'
+
+
+
+
+
+ '.$dl->getLocalizedString('updatingProfileStats').'
+
+
+
+
+
+ '.$dl->getLocalizedString('messaging').'
+
+
+
+
+
+
+
+
+
', 'profile'));
+$getID = explode("/", $_GET["id"])[count(explode("/", $_GET["id"]))-1];
+if($getID == "settings") {
+ $getID = explode("/", $_GET["id"])[count(explode("/", $_GET["id"]))-2];
+ $_POST["settings"] = 1;
+ $dl->printFooter('../../');
+ echo ''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'profile'));
+}
+$dl->title($dl->getLocalizedString("clan").' '.$clan["clan"]);
+$back = $members = $settings = $menu = $pending = $membermenu = $requests = $closed = $kick = "";
+if(isset($_SERVER["HTTP_REFERER"])) $back = ''; else $back = '';
+if(!empty($clan)) {
+ if(isset($_POST["settings"]) AND $_POST["settings"] == 1 AND $clan["clanOwner"] == $_SESSION["accountID"]) {
+ if(!isset($_POST["ichangedsmth"])) {
+ if(isset($_POST["givethisclan"])) {
+ if(isset($_POST["newOwner"])) {
+ $newOwner = ExploitPatch::number($_POST["newOwner"]);
+ $mbrs = $db->prepare("SELECT * FROM users WHERE clan = :cid AND extID = :own");
+ $mbrs->execute([':cid' => $clan["ID"], ':own' => $newOwner]);
+ $mbrs = $mbrs->fetch();
+ if(empty($mbrs)) exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'profile'));
+ else {
+ $giveclan = $db->prepare("UPDATE clans SET clanOwner = :own WHERE ID = :id");
+ $giveclan->execute([':own' => $newOwner, ':id' => $clan["ID"]]);
+ exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'profile'));
+ }
+ }
+ $mbrs = $db->prepare("SELECT * FROM users WHERE clan = :cid AND extID != :own");
+ $mbrs->execute([':cid' => $clan["ID"], ':own' => $clan["clanOwner"]]);
+ $mbrs = $mbrs->fetchAll();
+ foreach($mbrs as &$mbr) $members .= '';
+ exit($dl->printSong(''.$dl->getLocalizedString("clan").'
+ +
+ ', 'profile'));
+ } elseif(isset($_POST["delclan"])) {
+ if(isset($_POST["yesdelete"]) AND $_POST["yesdelete"] == 1) {
+ $delete = $db->prepare("DELETE FROM clans WHERE ID = :id");
+ $delete->execute([':id' => $clan["ID"]]);
+ $delete = $db->prepare("UPDATE users SET clan = 0 WHERE clan = :id");
+ $delete->execute([':id' => $clan["ID"]]);
+ exit($dl->printSong('
';
}
}else{
- echo $browse . "";
+ echo $browse."";
}
- echo '
+
+
+
+ '.$dl->getLocalizedString("areYouSure").'
'.$dl->getLocalizedString("giveClanDesc").'
+ + +
+
', 'profile'));
+ }
+ exit($dl->printSong(''.$dl->getLocalizedString("clan").'
+ +
+ ', 'profile'));
+ } elseif(isset($_POST["pending"])) {
+ if((isset($_POST["yes"]) OR isset($_POST["no"])) AND is_numeric($_POST["accountID"])) {
+ $reqs = $db->prepare("SELECT * FROM clanrequests WHERE clanID = :id AND accountID = :acc");
+ $reqs->execute([':id' => $clan["ID"], ':acc' => ExploitPatch::number($_POST["accountID"])]);
+ $reqs = $reqs->fetch();
+ if(!empty($reqs)) {
+ $reqs = $db->prepare("DELETE FROM clanrequests WHERE accountID = :acc AND clanID = :cid");
+ $reqs->execute([':acc' => ExploitPatch::number($_POST["accountID"]), ':cid' => $clan["ID"]]);
+ if(isset($_POST["yes"])) {
+ $join = $db->prepare("UPDATE users SET clan = :cid, joinedAt = :time WHERE extID = :id");
+ $join->execute([':cid' => $clan["ID"], ':id' => ExploitPatch::number($_POST["accountID"]), ':time' => time()]);
+ $gs->sendNotify($clan["clanOwner"], ExploitPatch::number($_POST["accountID"]), ['action' => 6, 'value1' => true, 'value2' => $clan["ID"], 'value3' => time()]);
+ } else $gs->sendNotify($clan["clanOwner"], ExploitPatch::number($_POST["accountID"]), ['action' => 6, 'value1' => false, 'value2' => $clan["ID"], 'value3' => time()]);
+ }
+ }
+ $reqs = $db->prepare("SELECT * FROM clanrequests WHERE clanID = :id ORDER BY timestamp DESC");
+ $reqs->execute([':id' => $clan["ID"]]);
+ $reqs = $reqs->fetchAll();
+ foreach($reqs as &$rqs) {
+ $mbrs = $db->prepare("SELECT * FROM users WHERE extID = :id");
+ $mbrs->execute([':id' => $rqs["accountID"]]);
+ $mbr = $mbrs->fetch();
+ $stats = $dl->createProfileStats($mbr['stars'], $mbr['moons'], $mbr['diamonds'], $mbr['coins'], $mbr['userCoins'], $mbr['demons'], $mbr['creatorPoints'], 0);
+ $requests .= '';
+ }
+ else $clIcon = '';
+ exit($dl->printSong('
';
+ }
+ }
+ $avatarImg = ' . ')
';
+ $members .= '';
+ $owner = '
+
+
+ ';
+ $dl->printSong('
';
}
public function printLoginBox($content){
- $this->printBox("
+
+
+
+ '.$dl->getLocalizedString("areYouSure").'
'.$dl->getLocalizedString("deleteClanDesc").'
+ + +
+
+
+
';
+ }
+ if(empty($requests)) $requests = '
+
'.$stats.'
+
+
+
+
+
+
+
';
+ exit($dl->printSong(''.$dl->getLocalizedString("noRequests").'
+
+
', 'profile'));
+ }
+ if($clan["isClosed"] == 1) {
+ $clIcon = '';
+ $pending = ''.$dl->getLocalizedString("pendingRequests").'
+ +'.$dl->getLocalizedString("pendingRequests").'
+ + +
+
+ ', 'profile'));
+ } else {
+ $name = strip_tags(ExploitPatch::rucharclean(str_replace(' ', '', $_POST["clanname"]), 20));
+ $tag = strip_tags(ExploitPatch::charclean(str_replace(' ', '', strtoupper($_POST["clantag"])), 5));
+ $desc = base64_encode(strip_tags(ExploitPatch::rucharclean($_POST["clandesc"], 255)));
+ $color = ExploitPatch::charclean(mb_substr($_POST["clancolor"], 1), 6);
+ $isClosed = ExploitPatch::number($_POST["isclosed"], 1);
+ if(!empty($name) AND !empty($color) AND !empty($tag) AND strlen($tag) > 1 AND is_numeric($isClosed)) {
+ if($filterClanNames >= 1) {
+ $bannedClanNamesList = array_map('strtolower', $bannedClanNames);
+ switch($filterClanNames) {
+ case 1:
+ if(in_array(strtolower($name), $bannedClanNamesList)) exit($dl->printSong('
+
+
+
+ '.$dl->getLocalizedString("settings").'
+
+
+
+
+
'));
+ break;
+ case 2:
+ foreach($bannedClanNamesList as $bannedClanName) {
+ if(!empty($bannedClanName) && mb_strpos(strtolower($name), $bannedClanName) !== false) exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
'));
+ }
+ }
+ }
+ if($filterClanTags >= 1) {
+ $bannedClanTagsList = array_map('strtolower', $bannedClanTags);
+ switch($filterClanTags) {
+ case 1:
+ if(in_array(strtolower($tag), $bannedClanTagsList)) exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
'));
+ break;
+ case 2:
+ foreach($bannedClanTagsList as $bannedClanTag) {
+ if(!empty($bannedClanTag) && mb_strpos(strtolower($tag), $bannedClanTag) !== false) exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
'));
+ }
+ }
+ }
+ $name = base64_encode($name);
+ $tag = base64_encode($tag);
+ $check = $db->prepare('SELECT count(*) FROM clans WHERE clan LIKE :c AND ID != :id');
+ $check->execute([':c' => $name, ':id' => $clan['ID']]);
+ $check = $check->fetchColumn();
+ if($check > 0) exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'browse'));
+ $check = $db->prepare('SELECT count(*) FROM clans WHERE tag LIKE :t AND ID != :id');
+ $check->execute([':id' => $clan['ID'], ':t' => $tag]);
+ $check = $check->fetchColumn();
+ if($check > 0) exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'browse'));
+ $update = $db->prepare("UPDATE clans SET `clan` = :n, `desc` = :d, `color` = :c, `isClosed` = :ic, `tag` = :t WHERE `ID` = :id");
+ $update->execute([':id' => $clan["ID"], ':n' => $name, ':d' => $desc, ':c' => $color, ':ic' => $isClosed, ':t' => $tag]);
+ $clan["clan"] = htmlspecialchars(base64_decode($name));
+ $clan["tag"] = htmlspecialchars(base64_decode($tag));
+ $clan["desc"] = htmlspecialchars(base64_decode($desc));
+ $clan["color"] = $color;
+ $clan["isClosed"] = $isClosed;
+ }
+ }
+ }
+ if(isset($_POST["leave"]) AND $_POST["leave"] == 1 AND $isPlayerInClan == $clan["ID"] AND $clan["clanOwner"] != $_SESSION["accountID"]) {
+ $leave = $db->prepare("UPDATE users SET clan = 0, joinedAt = :time WHERE extID = :id");
+ $leave->execute([':time' => time(), ':id' => $_SESSION["accountID"]]);
+ $gs->sendNotify($_SESSION["accountID"], $clan['clanOwner'], ['action' => 4, 'value1' => false, 'value2' => $clan["ID"], 'value3' => time()]);
+ $isPlayerInClan = false;
+ }
+ elseif(isset($_POST["join"]) AND !$isPlayerInClan AND $_SESSION["accountID"] != 0) {
+ if($clan["isClosed"] == 1) {
+ if($_POST["join"] == 1) {
+ $join = $db->prepare("SELECT * FROM clanrequests WHERE accountID = :acc AND clanID = :cid");
+ $join->execute([':acc' => $_SESSION["accountID"], ':cid' => $clan["ID"]]);
+ $join = $join->fetch();
+ if(empty($join)) {
+ $join = $db->prepare("INSERT INTO clanrequests (accountID, clanID, timestamp) VALUES (:acc, :cid, :time)");
+ $join->execute([':acc' => $_SESSION["accountID"], ':cid' => $clan["ID"], ':time' => time()]);
+ $gs->sendNotify($_SESSION["accountID"], $clan['clanOwner'], ['action' => 3, 'value1' => true, 'value2' => $clan["ID"], 'value3' => time()]);
+ }
+ } else {
+ $join = $db->prepare("DELETE FROM clanrequests WHERE accountID = :acc AND clanID = :cid");
+ $join->execute([':acc' => $_SESSION["accountID"], ':cid' => $clan["ID"]]);
+ }
+ } else {
+ $join = $db->prepare("UPDATE users SET clan = :cid, joinedAt = :j WHERE extID = :id");
+ $join->execute([':id' => $_SESSION["accountID"], ':cid' => $clan["ID"], ':j' => time()]);
+ $isPlayerInClan = $clan["ID"];
+ $gs->sendNotify($_SESSION["accountID"], $clan['clanOwner'], ['action' => 4, 'value1' => true, 'value2' => $clan["ID"], 'value3' => time()]);
+ }
+ }
+ if(isset($_POST["kick"]) AND is_numeric($_POST["accountID"]) AND $clan["clanOwner"] == $_SESSION["accountID"]) {
+ $kick = $db->prepare("SELECT clan FROM users WHERE extID = :id");
+ $kick->execute([':id' => ExploitPatch::number($_POST["accountID"])]);
+ $kick = $kick->fetch();
+ if($kick["clan"] == $clan["ID"] AND $clan["clanOwner"] != ExploitPatch::number($_POST["accountID"])) {
+ $kick = $db->prepare("UPDATE users SET clan = 0, joinedAt = :j WHERE extID = :id");
+ $kick->execute([':id' => ExploitPatch::number($_POST["accountID"]), ':j' => time()]);
+ $gs->sendNotify($clan["clanOwner"], ExploitPatch::number($_POST["accountID"]), ['action' => 5, 'value1' => true, 'value2' => $clan["ID"], 'value3' => time()]);
+ }
+ }
+ if($clan["isClosed"] == 1) $closed = ' ';
+ $clanname = "'.$dl->getLocalizedString("errorGeneric").'
+ +[".htmlspecialchars($clan["tag"]).'] '.htmlspecialchars($clan["clan"]).$closed."
"; + $mbrs = $db->prepare("SELECT * FROM users WHERE clan = :cid"); + $mbrs->execute([':cid' => $clan["ID"]]); + $mbrs = $mbrs->fetchAll(); + foreach($mbrs as &$mbr) { + if($clan["clanOwner"] == $_SESSION["accountID"]) $kick = ' + '; + $allstars += $mbr['stars']; + $allmoons += $mbr['moons']; + $alldias += $mbr['diamonds']; + $allcoins += $mbr['coins']; + $allucoins += $mbr['userCoins']; + $alldemons += $mbr['demons']; + $allcp += $mbr['creatorPoints']; + $stats = $dl->createProfileStats($mbr['stars'], $mbr['moons'], $mbr['diamonds'], $mbr['coins'], $mbr['userCoins'], $mbr['demons'], $mbr['creatorPoints'], 0); + $mbr["userName"] = $mbr["userName"] == 'Undefined' ? $gs->getAccountName($mbr['extID']) : $mbr['userName']; + // Avatar management + $avatarImg = ''; + $iconType = ($mbr['iconType'] > 8) ? 0 : $mbr['iconType']; + $iconTypeMap = [0 => ['type' => 'cube', 'value' => $mbr['accIcon']], 1 => ['type' => 'ship', 'value' => $mbr['accShip']], 2 => ['type' => 'ball', 'value' => $mbr['accBall']], 3 => ['type' => 'ufo', 'value' => $mbr['accBird']], 4 => ['type' => 'wave', 'value' => $mbr['accDart']], 5 => ['type' => 'robot', 'value' => $mbr['accRobot']], 6 => ['type' => 'spider', 'value' => $mbr['accSpider']], 7 => ['type' => 'swing', 'value' => $mbr['accSwing']], 8 => ['type' => 'jetpack', 'value' => $mbr['accJetpack']]]; + $iconValue = isset($iconTypeMap[$iconType]) ? $iconTypeMap[$iconType]['value'] : 1; + if($mbr["extID"] != $clan["clanOwner"]) { + $badgeImg = ''; + $queryRoleID = $db->prepare("SELECT roleID FROM roleassign WHERE accountID = :accountID"); + $queryRoleID->execute([':accountID' => $mbr["extID"]]); + if($roleAssignData = $queryRoleID->fetch(PDO::FETCH_ASSOC)) { + $queryBadgeLevel = $db->prepare("SELECT modBadgeLevel FROM roles WHERE roleID = :roleID"); + $queryBadgeLevel->execute([':roleID' => $roleAssignData['roleID']]); + if(($modBadgeLevel = $queryBadgeLevel->fetchColumn() ?? 0) >= 1 && $modBadgeLevel <= 3) { + $badgeImg = '';
+ }
+ }
+ $avatarImg = '';
+ $members .= '
+
';
+ } else {
+ $avatarImg = ''.$kick.'
+ '.$stats.'
+ '.sprintf($dl->getLocalizedString("joinedAt"), $dl->convertToDate($mbr["joinedAt"], true)).'
+';
+ $owner = '
+
';
+ }
+ }
+ $allstats = $dl->createProfileStats($allstars, $allmoons, $alldias, $allcoins, $allucoins, $alldemons, $allcp, 0);
+ $total = '
+
'.$stats.'
+ '.sprintf($dl->getLocalizedString("createdAt"), $dl->convertToDate($clan["creationDate"], true)).'
+
+
';
+ if(empty($members)) $members .= ''.$allstats.'
+
+
';
+ if(empty($clan["desc"])) $clan["desc"] = $dl->getLocalizedString("noClanDesc");
+ if($clan["clanOwner"] == $_SESSION["accountID"]) $settings = '';
+ elseif($isPlayerInClan == $clan["ID"]) $membermenu = '';
+ elseif(!$isPlayerInClan) {
+ if($clan["isClosed"] == 1) {
+ $join = $db->prepare("SELECT * FROM clanrequests WHERE accountID = :acc AND clanID = :cid");
+ $join->execute([':acc' => $_SESSION["accountID"], ':cid' => $clan["ID"]]);
+ $join = $join->fetch();
+ if(empty($join)) $membermenu = '';
+ else $membermenu = '';
+ } else $membermenu = '';
+ }
+ $membercount = count($mbrs) - 1; // cuz owner
+ $dontmind = mb_substr($membercount, -1);
+ if($dontmind == 1) $dm = 0; elseif($dontmind < 5 AND $dontmind > 0) $dm = 1; else $dm = 2;
+ if($membercount > 9 AND $membercount < 20) $dm = 2;
+ $clanDescription = $dl->parseMessage(htmlspecialchars($clan["desc"]));
+ if($_SESSION["accountID"] != 0 AND $clan["clanOwner"] != $_SESSION["accountID"] AND !empty($membermenu)) $menu = ''.$dl->getLocalizedString("noMembers").'
+
+ ', 'profile');
+}
+?>
\ No newline at end of file
diff --git a/dashboard/clans/create.php b/dashboard/clans/create.php
new file mode 100644
index 000000000..98391fa7f
--- /dev/null
+++ b/dashboard/clans/create.php
@@ -0,0 +1,144 @@
+printSong(' . ')
';
+ }
+ $options .= '';
+}
+if(empty($options)) {
+ $style = "align-items: center !important;align-content: center !important;justify-content:center !important;";
+ $options = ''.$gdps.' ';
+ echo '
+
';
}
- public function printFooter(){
- echo '
- ';
+ public function printFooter($sub = ''){
+ global $dbPath;
+ global $vk;
+ global $discord;
+ global $twitter;
+ global $youtube;
+ global $twitch;
+ echo '
+
+ '.$back.'
+ '.$clanname.'
'.$settings.$menu.'
+ '.$clanDescription.'
+
+ '.$total.'
+
+
+
+ '.$dl->getLocalizedString("clanOwner").'
+'.$owner.'
+
+
+
'.$dl->getLocalizedString("clanMembers").'
+'.sprintf($dl->getLocalizedString("members".$dm), $membercount).'
+ '.$members.'
+
+
', 'browse'));
+require "../".$dbPath."incl/lib/exploitPatch.php";
+require_once "../".$dbPath."incl/lib/mainLib.php";
+$gs = new mainLib();
+require "../".$dbPath."incl/lib/connection.php";
+require "../".$dbPath."config/security.php";
+$isPlayerInClan = $gs->isPlayerInClan($_SESSION["accountID"]);
+$dl->printFooter('../');
+$dl->title($dl->getLocalizedString("createClan"));
+if($isPlayerInClan) die($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'browse'));
+if(isset($_POST["name"]) AND isset($_POST["desc"]) AND isset($_POST["color"])) {
+ $name = strip_tags(ExploitPatch::rucharclean(str_replace(' ', '', $_POST["name"]), 20));
+ $tag = strip_tags(ExploitPatch::charclean(str_replace(' ', '', strtoupper($_POST["tag"])), 5));
+ $desc = base64_encode(strip_tags(ExploitPatch::rucharclean($_POST["desc"], 255)));
+ $color = ExploitPatch::charclean(mb_substr($_POST["color"], 1), 6);
+ if(!empty($name) AND !empty($color) AND !empty($tag) AND strlen($tag) > 1) {
+ if($filterClanNames >= 1) {
+ $bannedClanNamesList = array_map('strtolower', $bannedClanNames);
+ switch($filterClanNames) {
+ case 1:
+ if(in_array(strtolower($name), $bannedClanNamesList)) exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
'));
+ break;
+ case 2:
+ foreach($bannedClanNamesList as $bannedClanName) {
+ if(!empty($bannedClanName) && mb_strpos(strtolower($name), $bannedClanName) !== false) exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
'));
+ }
+ }
+ }
+ if($filterClanTags >= 1) {
+ $bannedClanTagsList = array_map('strtolower', $bannedClanTags);
+ switch($filterClanTags) {
+ case 1:
+ if(in_array(strtolower($tag), $bannedClanTagsList)) exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
'));
+ break;
+ case 2:
+ foreach($bannedClanTagsList as $bannedClanTag) {
+ if(!empty($bannedClanTag) && mb_strpos(strtolower($tag), $bannedClanTag) !== false) exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
'));
+ }
+ }
+ }
+ $name = base64_encode($name);
+ $tag = base64_encode($tag);
+ $check = $db->prepare('SELECT count(*) FROM clans WHERE clan LIKE :c');
+ $check->execute([':c' => $name]);
+ $check = $check->fetchColumn();
+ if($check > 0) exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'browse'));
+ $check = $db->prepare('SELECT count(*) FROM clans WHERE tag LIKE :t');
+ $check->execute([':t' => $tag]);
+ $check = $check->fetchColumn();
+ if($check > 0) exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'browse'));
+ $clan = $db->prepare("INSERT INTO clans (`clan`, `desc`, `clanOwner`, `color`, `creationDate`, `tag`) VALUES (:c, :d, :co, :col, :cr, :t)");
+ $clan->execute([':c' => $name, ':d' => $desc, ':co' => $_SESSION["accountID"], ':col' => $color, ':cr' => time(), ':t' => $tag]);
+ $owner = $db->prepare("UPDATE users SET clan = :c, joinedAt = :j WHERE extID = :i");
+ $owner->execute([':c' => $db->lastInsertId(), ':j' => time(), ':i' => $_SESSION["accountID"]]);
+ $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +
+
', 'browse');
+ }
+} else $dl->printSong(''.$dl->getLocalizedString("createClan").'
+ +
+
+', 'browse');
+?>
\ No newline at end of file
diff --git a/dashboard/clans/index.php b/dashboard/clans/index.php
new file mode 100644
index 000000000..c644b3bcc
--- /dev/null
+++ b/dashboard/clans/index.php
@@ -0,0 +1,65 @@
+printSong(''.$dl->getLocalizedString("createClan").'
+ +
+
', 'browse'));
+$isPlayerInClan = $gs->isPlayerInClan($_SESSION["accountID"]);
+$dl->printFooter('../');
+$dl->title($dl->getLocalizedString("clans"));
+$clans = $db->prepare("SELECT clans.*, COUNT(users.clan) AS members FROM clans LEFT JOIN users ON clans.id = users.clan GROUP BY clans.id ORDER BY members DESC;");
+$clans->execute();
+$clans = $clans->fetchAll();
+$style = $closed = $create = "";
+foreach($clans as &$clan) {
+ $closed = '';
+ $name = htmlspecialchars(base64_decode($clan["clan"]));
+ $tag = htmlspecialchars(base64_decode($clan["tag"]));
+ $desc = $dl->parseMessage(htmlspecialchars(base64_decode($clan["desc"])));
+ if(empty($desc)) $desc = $dl->getLocalizedString("noClanDesc");
+ $members = $db->prepare("SELECT count(clan) FROM users WHERE clan = :id");
+ $members->execute([':id' => $clan["ID"]]);
+ $members = $members->fetchColumn() - 1;
+ $dontmind = mb_substr($members, -1);
+ if($dontmind == 1) $dm = 0; elseif($dontmind < 5 AND $dontmind > 0) $dm = 1; else $dm = 2;
+ if($members > 9 AND $members < 20) $dm = 2;
+ if($clan["isClosed"] == 1) $closed = ' ';
+ // Avatar management
+ $avatarImg = '';
+ $query = $db->prepare('SELECT userName, iconType, color1, color2, color3, accGlow, accIcon, accShip, accBall, accBird, accDart, accRobot, accSpider, accSwing, accJetpack FROM users WHERE extID = :extID');
+ $query->execute(['extID' => $clan["clanOwner"]]);
+ $userData = $query->fetch(PDO::FETCH_ASSOC);
+ if($userData) {
+ $iconType = ($userData['iconType'] > 8) ? 0 : $userData['iconType'];
+ $iconTypeMap = [0 => ['type' => 'cube', 'value' => $userData['accIcon']], 1 => ['type' => 'ship', 'value' => $userData['accShip']], 2 => ['type' => 'ball', 'value' => $userData['accBall']], 3 => ['type' => 'ufo', 'value' => $userData['accBird']], 4 => ['type' => 'wave', 'value' => $userData['accDart']], 5 => ['type' => 'robot', 'value' => $userData['accRobot']], 6 => ['type' => 'spider', 'value' => $userData['accSpider']], 7 => ['type' => 'swing', 'value' => $userData['accSwing']], 8 => ['type' => 'jetpack', 'value' => $userData['accJetpack']]];
+ $iconValue = isset($iconTypeMap[$iconType]) ? $iconTypeMap[$iconType]['value'] : 1;
+ $avatarImg = ''.$dl->getLocalizedString("errorGeneric").'
+ +';
+ }
+ $options .= '
+
+
+ '.sprintf($dl->getLocalizedString('demonlistLevel'), ' ['.$tag.'] '.$name.$closed.'', $clan["clanOwner"], $gs->getAccountName($clan["clanOwner"]), $avatarImg).'
+'.sprintf($dl->getLocalizedString("members".$dm), $members).'
'.$desc.'
'.$dl->getLocalizedString("noClans").'
'; +} +if($_SESSION["accountID"] != 0 AND !$isPlayerInClan) $create = ''; +$dl->printSong('
+
', 'browse');
+?>
\ No newline at end of file
diff --git a/dashboard/download/updater.php b/dashboard/download/updater.php
new file mode 100644
index 000000000..75f3e8f52
--- /dev/null
+++ b/dashboard/download/updater.php
@@ -0,0 +1,43 @@
+ true, 'time' => $time, 'client' => $client]));
+} else {
+ if($_GET["dl"] == "updater") $fileName = $file = "GDPS-Updater.exe";
+ elseif($_GET["dl"] == "client") $fileName = $file = "GDPS-Client.exe";
+ else $fileName = $file = $gdps.".zip";
+ $bufferSize = 2097152;
+ $filesize = filesize($file);
+ $offset = 0;
+ $length = $filesize;
+ if (isset($_SERVER['HTTP_RANGE'])) {
+ preg_match('/bytes=(\d+)-(\d+)?/', $_SERVER['HTTP_RANGE'], $matches);
+ $offset = intval($matches[1]);
+ $end = $matches[2] || $matches[2] === '0' ? intval($matches[2]) : $filesize - 1;
+ $length = $end + 1 - $offset;
+ header('HTTP/1.1 206 Partial Content');
+ header("Content-Range: bytes $offset-$end/$filesize");
+ }
+ header('Content-Type: ' . mime_content_type($file));
+ header("Content-Length: $filesize");
+ header("Content-Disposition: attachment; filename=\"$fileName\"");
+ header('Accept-Ranges: bytes');
+
+ $file = fopen($file, 'r');
+ fseek($file, $offset);
+ while ($length >= $bufferSize)
+ {
+ print(fread($file, $bufferSize));
+ $length -= $bufferSize;
+ }
+ if ($length) print(fread($file, $length));
+ fclose($file);
+}
+?>
\ No newline at end of file
diff --git a/dashboard/errors/400/index.php b/dashboard/errors/400/index.php
new file mode 100644
index 000000000..0710ce4ec
--- /dev/null
+++ b/dashboard/errors/400/index.php
@@ -0,0 +1,47 @@
+title($e);
+echo ''.$dl->getLocalizedString("clans").'
+
+ '.$options.'
+
'.$create.'
+'.$e.'
+'.$dl->getLocalizedString($e).'
+'.$dl->getLocalizedString($e.'!').'
'; +?> + \ No newline at end of file diff --git a/dashboard/errors/403/index.php b/dashboard/errors/403/index.php new file mode 100644 index 000000000..439c7091d --- /dev/null +++ b/dashboard/errors/403/index.php @@ -0,0 +1,47 @@ +title($e); +echo ''.$e.'
+'.$dl->getLocalizedString($e).'
+'.$dl->getLocalizedString($e.'!').'
'; +?> + \ No newline at end of file diff --git a/dashboard/errors/404/index.php b/dashboard/errors/404/index.php new file mode 100644 index 000000000..ead09efea --- /dev/null +++ b/dashboard/errors/404/index.php @@ -0,0 +1,47 @@ +title($e); +echo ''.$e.'
+'.$dl->getLocalizedString($e).'
+'.$dl->getLocalizedString($e.'!').'
'; +?> + \ No newline at end of file diff --git a/dashboard/errors/500/index.php b/dashboard/errors/500/index.php new file mode 100644 index 000000000..dadd47f8e --- /dev/null +++ b/dashboard/errors/500/index.php @@ -0,0 +1,47 @@ +title($e); +echo ''.$e.'
+'.$dl->getLocalizedString($e).'
+'.$dl->getLocalizedString($e.'!').'
'; +?> + \ No newline at end of file diff --git a/dashboard/errors/502/index.php b/dashboard/errors/502/index.php new file mode 100644 index 000000000..6fa6664ac --- /dev/null +++ b/dashboard/errors/502/index.php @@ -0,0 +1,47 @@ +title($e); +echo ''.$e.'
+'.$dl->getLocalizedString($e).'
+'.$dl->getLocalizedString($e.'!').'
'; +?> + \ No newline at end of file diff --git a/dashboard/errors/index.php b/dashboard/errors/index.php new file mode 100644 index 000000000..742d3251d --- /dev/null +++ b/dashboard/errors/index.php @@ -0,0 +1,3 @@ + \ No newline at end of file diff --git a/dashboard/incl/XOR.php b/dashboard/incl/XOR.php new file mode 100644 index 000000000..ee878c91c --- /dev/null +++ b/dashboard/incl/XOR.php @@ -0,0 +1,61 @@ +text2ascii($key); + $plaintext = $this->text2ascii($plaintext); + + $keysize = count($key); + $input_size = count($plaintext); + + $cipher = ""; + + for ($i = 0; $i < $input_size; $i++) + $cipher .= chr($plaintext[$i] ^ $key[$i % $keysize]); + + return $cipher; + } + + public function crack($cipher, $keysize) { + $cipher = $this->text2ascii($cipher); + $occurences = $key = array(); + $input_size = count($cipher); + + for ($i = 0; $i < $input_size; $i++) { + $j = $i % $keysize; + if (++$occurences[$j][$cipher[$i]] > $occurences[$j][$key[$j]]) + $key[$j] = $cipher[$i]; + } + + return $this->ascii2text(array_map(function($v) { return $v ^ 32; }, $key)); + } + + public function plaintext($cipher, $key) { + $key = $this->text2ascii($key); + $cipher = $this->text2ascii($cipher); + $keysize = count($key); + $input_size = count($cipher); + $plaintext = ""; + + for ($i = 0; $i < $input_size; $i++) + $plaintext .= chr($cipher[$i] ^ $key[$i % $keysize]); + + return $plaintext; + } + + private function text2ascii($text) { + return array_map('ord', str_split($text)); + } + + private function ascii2text($ascii) { + $text = ""; + + foreach($ascii as $char) + $text .= chr($char); + + return $text; + } +} \ No newline at end of file diff --git a/dashboard/incl/auth.php b/dashboard/incl/auth.php new file mode 100644 index 000000000..b2175d2a4 --- /dev/null +++ b/dashboard/incl/auth.php @@ -0,0 +1,25 @@ +query("SHOW COLUMNS FROM `accounts` LIKE 'auth'"); + $exist = $check->fetchAll(); + if(empty($exist)) return 'no'; + if($_SESSION["accountID"] != 0) { + $query = $db->prepare("SELECT auth FROM accounts WHERE accountID = :id"); + $query->execute([':id' => $_SESSION["accountID"]]); + $auth = $query->fetch(); + if($_COOKIE["auth"] != $auth["auth"]) $_SESSION["accountID"] = 0; + } else { + $query = $db->prepare("SELECT accountID FROM accounts WHERE auth = :id"); + $query->execute([':id' => $_COOKIE["auth"]]); + $auth = $query->fetch(); + if(!empty($auth) AND $_COOKIE["auth"] != 'none') $_SESSION["accountID"] = $auth["accountID"]; + } + return true; + } +} +?> diff --git a/dashboard/incl/cvolton.css b/dashboard/incl/cvolton.css index 5ebabb0fd..6fdbeff96 100644 --- a/dashboard/incl/cvolton.css +++ b/dashboard/incl/cvolton.css @@ -1,44 +1,2640 @@ -.menubar { - background-color: #1e2124; - color: #d6ddde; +@import url('https://fonts.googleapis.com/css2?family=Inter:wght@400;500;700&display=swap'); + +@media screen and (max-width: 1537px) { + body {overflow-y: auto !important} + .maindiv{width:100% !important} + .secondarydiv{flex-direction: column;} + .mainlist{width:80% !important} + .new-form-control.songs {grid-template-columns: repeat(1, 100%) !important;} + .last{margin-bottom: 55px !important;} + .profileform{width:75vw !important;margin: 20px 0px 50px 0px !important;} + .packfc .profilepic {font-size: 15px !important;} + .itemsbox {width: 75% !important;} + .songUploadDiv {min-width: 55vw !important;} + .icon-cube, .icon-ball, .icon-ufo, .icon-robot, .icon-spider, .icon-swing, .icon-jetpack {height: 50px !important;} + .icon-ship {height: 37px !important;} + .icon-wave {height: 33px !important;} + .friends-button-div {min-width: 40% !important; width: 40% !important;} } -.content { - background-color: #36393e; - color: #a7a8aa; + +@media (min-width: 1537px) { + .container {max-width: 1450px;} + .nav-link {width:max-content;} + .btn-group {position:initial !important; background: #00000000 !important;} } -html,body{ - height:100%; - background-color: #36393e + +@media (max-width: 1000px) { + .form h1 {font-size:28px !important;} + .form__inner p {font-size:17px !important;} + .profilenick {font-size: 20px !important;} + .mavdiv .accbtn, .profilepic, .profilepic .accbtn {font-size: 20px !important;} + .songacc {font-size: 13px !important;} + .songidyeah {font-size: 11px !important;} + .btn-group {right: 5px !important;} + .btn-group button, .btn-group a, .btn-group i {font-size: 13px !important;overflow-wrap: anywhere; height: 100%;} + .mainpagecardh1 {font-size:27px !important;} + .mph1 {font-size:20px !important;height: 40px !important; width: 40px !important;} + .welcomeh1 {font-size:29px !important;} + .welcomep, .mpp {font-size:17px !important;} + .welcomeh3 {font-size:20px !important;} + .mpsmall {font-size:12px !important;} + .profileform{width:95vw !important;} + .profilemsg{font-size:17px !important;} + .mainlist{width:95% !important} + .msgbox {min-width:85vw !important} + .form, .demonlist{width:95vw !important} + .dlh1 {font-size:25px !important;} + .dltext, .dltext button {font-size:20px !important;} + .dlp {font-size:15px !important;} + .dlposttext, .dlposttext button {font-size:10px !important;} + .dlcard {display: grid !important;} + .dlcard iframe {margin-top: 10px !important; width: 100% !important;} + .accnamedesc, .acccontrol {width:100% !important;} + .profacclist {flex-direction: column !important;} + .songauthor {font-size:10px !important;} + .songname {font-size:15px !important;} + .clandesc {font-size:15px !important;} + .clanname {font-size:25px !important;} + .msgupd, .goback {font-size: 15px !important; padding: 10px !important;} + .clanname i {font-size:10px !important;} + .clancreatetext {font-size:14px !important;} + .clanownernick, .a-btn h1, .profilename, .messengerbox h1 {font-size:25px !important;} + .clanmembernick {font-size:18px !important;} + .clanownertext, .clanmemberstext {font-size:16px !important;} + .mainsettings {flex-direction: column !important;} + .secondsettingsform {width: 100% !important;} + .music {font-size:13px !important;} + .dlpoints {font-size: 15px !important; right: 5% !important; top: 3%} + .itemslist {width: max-content !important; flex-direction: row !important; flex-wrap: nowrap !important;} + .itembtn {width: max-content !important; margin-right: 0px !important; height: auto !important;} + .itemoverflow {overflow-x: auto !important; max-width: 100%; padding-right: 10px;overflow-y: hidden !important;} + .acccomments {flex-direction: column-reverse !important; align-items: center !important;} + .acccomments h3 {font-size:11px !important;} + .acclistnick, .acclistdiv {flex-direction: column; align-items: center; margin-left: 0px !important;} + .accresultrole {font-size: 13px !important; text-align: center !important;} + .clansname h1 {font-size:25px !important; display: flex; flex-direction: column; margin-bottom: 0px !important;} + .clansname {align-items: flex-start !important; flex-direction: column !important;} + .clansdesc {font-size:15px !important;} + .clansmembercount {margin-bottom:5px !important; margin-top:5px !important;} + .clansmembercount h3 {font-size:17px !important;} + .clansmembercount button {padding: 10px !important; font-size:13px !important;} + .suggest .accbtn, .suggest .levelname {font-size:23px !important;} + .suggest .dltext {font-size:18px !important;} + .buffer {margin: 0px !important;} + .quests-form {height: 80% !important;} + .audioDiv {width: 98% !important; left: 1% !important; grid-gap: 0px !important;} + .audioDiv .cover, .audioDiv .image {width: 67px !important; height: 67px !important} + .audioDiv .name {margin: 0px !important; font-size: 18px !important;} + .audioDiv .track {width: 78% !important; margin-left: 10px !important;} + .audioDiv .length {min-width: 0px !important; width: 100% !important;} + .audioDiv .author {font-size: 15px !important;} + .audioDiv .volumeDiv {height: 65px !important;} + .audioDiv .queueDiv {bottom: 110% !important;} + .queueDiv .track {width: 100% !important; margin-left: 0px !important;} + .audioDiv .length.volume {min-width: 65px !important; bottom: 28px !important;} + .audioDiv .anotherVolume {opacity: 1 !important; visibility: initial !important;} + .audioDiv i.volume {opacity: 0 !important; visibility: hidden !important;} + .audioDiv.showButton {width: max-content !important; padding: 15px !important;} + .audioDiv.showButton i {font-size: 20px !important;} + .audioDiv .cover i {font-size: 40px !important;} + .queueDiv .cover, .queueDiv .image {width: 55px !important; height: 55px !important} + .audioDiv:not(.show):not(.showButton):not(.queueDiv), .audioDiv.showButton:not(.show) {animation-duration: 0s !important;} + .icon-cube, .icon-ball, .icon-ufo, .icon-robot, .icon-spider, .icon-swing, .icon-jetpack {height: 45px !important;} + .icon-ship {height: 30px !important;} + .icon-wave {height: 27px !important;} + .icon-kit-div {width: 20% !important;} + .icon-kit {flex-wrap: wrap !important;} + .form-control {flex-wrap: wrap !important; justify-content: center !important;} + .profilepic {width: max-content !important;} + .modactionsspoiler {font-size: 20px !important;} + .another-chat-div {height: 80%;} + .itemsbox {flex-direction: column !important; margin-left: 2.5vw !important; width: 95vw !important; margin-bottom: 50px !important; margin-top: 15px !important; flex-wrap: nowrap !important;} + .manage-button-div {align-items: flex-start !important; flex-direction: column !important;} + .friends-button-div {min-width: 100% !important; width: 100% !important;} + #htmlpage > div {margin-bottom: 50px !important; margin-top: 20px !important;} + .automod-form {max-height: 140vh !important; height: 140vh !important;} + .automod-boxes, .attribute-divs {flex-direction: column !important;} + .attribute-button {width: 100% !important;} + .profilelikes {font-size: 20px !important; height: max-content;} + .twice-form {max-height: 100vh !important; height: 100vh !important;} + .cards-form {height: 90% !important;} + .cards-overflow {height: max-content !important;} } -.fill { - flex:1; + +* { + font-family: 'Google Sans', 'Inter', 'Segoe UI' , 'Calibri Light', 'Arial'; +} + +#ads, .adsbygoogle, #ads_bottom_static { + display: none !important; +} + +.btn-group { + position: fixed; + bottom: -50px; + right: 20px; + backdrop-filter: blur(2px); + background: #00000050; +} + +.closebtn { + margin: 0px !important; + font-size: 25px !important; + padding: 14px 19px !important; + margin-left: 5px !important; +} + +.smallpage { + margin-top: 10px; + display: flex; + align-items: center; + justify-content: center; + flex-wrap:wrap; +} + +.btns { + display:flex; + width:100%; + grid-gap:5px; +} + +.music { + display: flex; + margin: 0px; + padding: 4px 8px; + background: #141414; + border-radius: 500px; + align-items: center; + font-size: 16px; +} + +input, select { + cursor: pointer; +} + +.replybtn { + color: #909090; + margin-left: 5px; + font-size: 13px; + display: block; +} + +.table-inverse td, .table-inverse th, .table-inverse thead th { + border-color: #32383e00; +} + +.samepass { + display: none; + color: #ffb4b4; + text-align: center; + width: 100%; + margin: -11px 0px -11px 0px; + transition: 0.3s; +} + +.btn-success { + background: #5effaf !important; + color: #149957 !important; +} + +.no { + display: block; + transition: 0.3s; +} + +.nav-link { + transition: 0.2s; +} + +.flag { + vertical-align: sub; +} + +.footer { + display: flex; + justify-content: space-between; + position: fixed; + bottom: 0px; + font-size: 15px; + padding: 10px; + text-align: left; + width: 100%; + color: #c0c0c0; + justify-self: center; + background: linear-gradient(0deg, rgba(33,37,41,1) 0%, rgba(30,33,36,0) 100%); +} + +.profilepic { + font-size: 25px; + display: flex; + width: 100%; + margin: 0px 5px 0px 5px; + align-items: center; + justify-content: center; + grid-gap: 5px; + color: #c0c0c0; +} + +.icon, .icon:visited { + transition: 0.3s; + margin-right: 10px; + background: #1e2124; + height: 32px; + width: 32px; + margin-left: -4px; + text-align: center; + display: inline-flex; + border-radius: 500px; + align-items: center; + justify-content: center; +} + +.table-inverse td, .table-inverse th, .table-inverse thead th { + text-align:center; + vertical-align: middle; +} + +.newMsgs { + font-size: 10px; + margin-left: -5px; + margin-right: 3px; + color: #e35151; +} + +.msgupd { + background-color: #212529; + color: #c0c0c0; + font-size: 20px; + padding: 15px; + margin-left: 10px; + border: none; + margin-top: 15px; + border-radius: 500px; + transition: 0.3s; + cursor: pointer; +} + +.goback { + background-color: #212529; + color: #c0c0c0; + font-size: 20px; + padding: 15px; + margin-right: 10px; + border: none; + margin-top: 15px; + border-radius: 500px; + transition: 0.3s; + cursor: pointer; +} + +.socials { + text-align: right; + justify-self: center; + justify-items: right; + margin: 0px 3px 0px 3px; + background: rgba(0,0,0,0); +} + +.h-captcha { + justify-self: center; +} + +.field { + display: grid; + width: 100%; +} + +.notify { + background: rgb(73 41 40 / 67%); + border: 1px solid #ff7f7f; + border-radius: 20px; + padding: 5px 10px; + text-align: center; + height: max-content; + pointer-events: none; + color: white; + font-weight: 700; + max-width: 90vw; + width: max-content; + backdrop-filter: blur(5px); + opacity: 0; + transition: 0.3s; + z-index: 10; +} + +.notifyblue { + width: 100%; + background: rgba(29,133,240, 0.2); + border: 2px solid #016bfc; + border-radius: 20px; + margin: 0px 0px 20px 0px; + padding-top: 20px; + padding-bottom: 20px; + text-align: center; +} + +.checkbox { + justify-items: left; + color: #c0c0c0; + display: flex; + align-items: center; + grid-gap: 5px; +} + +.messengeryou { + padding: 10px; + width: 53%; + justify-self: right; + border-radius: 20px; + background: #29282c; +} + +.ratecheck { + text-align: left; + color: white; +} + +.messenger { + padding: 10px; + margin-top: 10px; + width: 100%; + border-radius: 20px; + background: #29282c; +} + + +.field-options { + appearance: none; + transition: 0.2s; +} + +.profile { + padding: 10px; + margin-top: 10px; + width: 100%; + border-radius: 20px; + background: #29282c; +} + +.messengernotyou { + padding: 10px; + width: 53%; + justify-self: left; + border-radius: 20px; + background: #29282c; +} + +.dmbox { + min-width: 500px; + overflow: scroll; + overflow-x: hidden; + padding: 5px 0px 15px 15px !important; +} + +::-webkit-scrollbar { + width:15px; + border-radius:500px; +} + +::-webkit-scrollbar-track { + background-color: rgba(0, 0, 0, 0); + border-radius: 100px; +} + +.msgbox::-webkit-scrollbar-thumb, +.form::-webkit-scrollbar-thumb, +.clandesc::-webkit-scrollbar-thumb, +.audioDiv .queueDiv::-webkit-scrollbar-thumb, +.rewards-div::-webkit-scrollbar-thumb { + background-color: #373A3F; + border-radius: 100px; + border: 4px solid #181a1b; +} + +.itemslist::-webkit-scrollbar-thumb, +.new-form-control::-webkit-scrollbar-thumb, +.dmbox::-webkit-scrollbar-thumb, +.itemoverflow::-webkit-scrollbar-thumb, +.clan-form-control::-webkit-scrollbar-thumb { + background-color: #373A3F; + border-radius: 100px; + border: 4px solid #141414; +} + +.itemslist { + overflow: auto; + border-radius: 20px; + grid-gap: 10px; + display: flex; + margin: 10px 0px 10px 10px; + flex-wrap: wrap; + align-content: flex-start; +} + +::-webkit-scrollbar-thumb { + background-color: #181a1b; + border-radius: 100px; + border: 4px solid #373A3F; +} + +.messageyou { + font-size:13px; + overflow-wrap: anywhere; + color:white; + margin:5px; + text-align:right; +} + +.messagenotyou { + font-size: 13px; + overflow-wrap: anywhere; + color: white; + margin: 5px; + text-align: left; +} + +.profilemsg { + font-size: 17px; + color: #c0c0c0; + margin: 5px; + text-align: left; + overflow-wrap: anywhere; +} + +.msgbox { + text-align:center; + min-width: 500px; + max-height: 50vh; + overflow:scroll; + overflow-x: hidden; +} + +.receiver { + text-align:center; + font-size:20px; + color:white; +} + +.subjectyou { + overflow-wrap: anywhere; + text-align:right; + font-size:17px; + font-weight:500; + margin-right:5px; + color:white; } + +.subjectnotyou { + overflow-wrap: anywhere; + text-align:left; + font-size:17px; + font-weight:500; + margin-left:5px; + color:white; +} + +.profilenick { + text-align:left; + font-size:22px; + font-weight:700; + margin-left:5px; + color:white; + width: 100%; +} + +.table .table { + color: #fff; + background: #141414; +} + +.tcell { + padding: .75rem; + vertical-align: top; + border-top: 3px solid #181a1b !important; +} + +.field input, +.card input, +.form-control, +#input { + border-radius: 500px; + border: 0px solid #141414; + background-color: rgb(0 0 0 / 2%); + outline: none; + width: 100%; + padding: 7px 10px; + font-size: 13px; + background: #141414; + color: gray; +} + +.field:focus { + border-radius: 500px; + background-color: rgb(0 0 0 / 2%); + outline: none; + width: 100%; + padding: 7px 10px; + font-size: 13px; + background: #141414; + color: gray; +} + +.details .field input { + display: block; + width: 130%; +} + +.details { + width:100%; +} + +.form__create > div { + display: flex; + width:100%; + justify-content:center; +} + +#selecthihi { + display: flex; + justify-content: space-between; + grid-gap: 10px; +} + +#selecthihi > select { + width: 100%; + margin: 0px; +} + +#file-upload-button { + opacity:0; + cursor:pointer; +} + +form p, +p { + font-size: 20px; + color: #c0c0c0; + text-align:center; + margin:0px; + width:100%; +} + +.a { + font-size: 20px; + text-align:center; + margin:0px; + transition:0.2s; + width:100%; +} + +.a-btn { + border: none; + background: none; + cursor: pointer; +} + +.a-btn:hover { + text-decoration: underline; + text-decoration-color: dodgerblue; +} + +summary { + color: #d0d0d0; + font-size: 15px; + cursor: pointer; +} + +select::-webkit-scrollbar { + width:15px; + border-radius:500px; +} + +select::-webkit-scrollbar-thumb { + background-color: #141414; + border-radius: 100px; + border: 4px solid #373A3F; +} + +#bruh{ + margin-bottom:20px; + font-weight: 700; +} +h2{ + font-size: 17px; + color: #c0c0c0; + margin-top: 0px; + text-align:center; + margin-bottom: 1rem; + font-weight: 400; +} + +h3{ + margin: 15px 0px 20px 0px; + font-weight: 400; + text-align:center; +} + +body { + display: flex; + align-items: center; + justify-content: start; + flex-direction: column; + margin: 0px; + padding: 0px; + overflow: hidden; + background-color: #36393e; + min-height: calc(100vh - 10px); +} + .btn-primary, .btn-primary:visited { - background-color: #212529; - border-color: #212529; + background-color: #212529; + color: #fff; + font-weight: 700; + font-size: 15px; + padding: 7px 20px; + border: none; + border-radius: 500px; + width: 100%; + transition: 0.3s; + cursor: pointer; } + .btn-primary:hover, .btn-primary:active, -.btn-primary:focus { - background-color: #47494e; - border-color: #47494e; +.btn-primary:focus, +.msgupd:hover, +.msgupd:active, +.msgupd:focus, +.goback:hover, +.goback:active, +.goback:focus { + background-color: #47494e; + border-color: #47494e; +} + +.btn-rendel, +.btn-rendel:visited { + background-color: #373A3F; + font-weight: 700; + font-size: 15px; + color: #007bff; + padding: 7px 20px; + border: none; + border-radius: 500px; + width: 100%; + transition: 0.3s; + cursor: pointer; +} + +.btn-rendel:hover, +.btn-rendel:active, +.btn-rendel:focus { + color: #007bff; + background-color: #47494e; + text-decoration: none; + border-color: #47494e; +} + +.accbtn { + background-color: #373A3F00; + font-weight: 700; + font-size: 15px; + color: #007bff; + margin:0px; + padding:0px; + border: none; + border-radius: 500px; + cursor: pointer; +} + +.btn-song, +.btn-song:visited { + background-color: #212529; + color: #fff; + font-weight: 700; + font-size: 15px; + padding: 7px 20px; + border: none; + border-radius: 500px; + width: 100%; + transition: 0.3s; + cursor: pointer; +} + +.btn-song:hover, +.btn-song:active, +.btn-song:focus { + background-color: #47494e; + border-color: #47494e; +} + +.btn-upload-song, +.btn-upload-song:visited { + background-color: #212529; + color: #c0c0c0; + font-weight: 700; + font-size: 15px; + padding: 7px 20px; + border: none; + border-radius: 500px; + width: 100%; + transition: 0.3s; + cursor: pointer; +} + +.btn-upload-song input[type=file] { + position: absolute; + opacity: 0; + cursor: pointer; + width: 0px; + height: 0px; +} + +.btn-upload-song:hover, +.btn-upload-song:active, +.btn-upload-song:focus, +.btn-size:hover, +.btn-size:active, +.btn-size:focus { + background-color: #47494e; + border-color: #47494e; +} + +.btn-size, +.btn-size:visited { + background-color: #ffb1ab !important; + border-color: #ffb1ab !important; + transition: 0.3s; + color: #bc6363 !important; +} + +.btn-size:hover, +.btn-size:active, +.btn-size:focus { + color: #c0c0c0; +} + +.btn-size > .icon, +.btn-size:visited > .icon { + background: #dc8a80; +} + +.btn-size:hover > .icon, +.btn-size:active > .icon, +.btn-size:focus > .icon{ + background: #1e2124; +} + +.btn-block, +.btn-block:visited, +.btn-block:hover, +.btn-block:active, +.btn-block:focus, +.btn-primary:disabled{ + background: #141414; + color: #303030; + font-weight: 700; + font-size: 15px; + padding: 7px 20px; + border: none; + border-radius: 500px; + width: 100%; + transition: 0.3s; + cursor: default; +} + +.form { + display: flex; + align-items: center; + justify-content: center; + flex-direction: column; + background: #181a1b; + width: max-content; + margin: auto auto; + border-radius: 30px; + padding: 7px 20px; + box-shadow: 0 0 20px 1px #181a1b1f; +} + +.form h1 { + margin: 15px 0 15px; + font-size: 34px; + color: white; + text-align:center; +} + +#navbarepta { + width: 100vw; +} + +.color123 > input { + position: relative; + padding: 0px; + background: none; + border: none; + height: 40px; +} + +.color123 > input::-webkit-color-swatch { + border: none; + border-radius: 500px; +} + +.form__inner { + display: grid; + grid-template-columns: 1fr; + justify-items: center; + align-items: stretch; + grid-gap: 20px; + font-size: 14px; + width: 100%; +} + +.imgflag { + width: 18px; +} + +select, +option, +.quest { + display: grid; + grid-template-columns: 3fr; + border-radius: 500px; + border: 1px solid #141414; + background-color: rgb(0 0 0 / 2%); + outline: none; + width:100%; + padding: 7px 10px; + font-size: 13px; + background: #141414; + color: #c0c0c0; +} +.number { + margin: 0px 2px 0px 2px; +} + +.dropdown-menu { + display: block; + opacity: 0; + visibility: hidden; + position: absolute !important; + border-radius: 30px; + text-align: left; + transition: 0.2s; + background: #181a1b; +} + +.dropdown-menu.show { + display: block; + opacity: 1; + visibility: visible; + position: static; + border-radius: 30px; + text-align: left; + transition: 0.2s; + background: #181a1b; +} + +.dropdown-item{ + padding: .25rem 2rem 0.3rem 1rem; + border-radius: 27px; + transition: 0.3s; + cursor: pointer; + color: #c0c0c0; + width: 0%; + margin-left: 3%; + text-align: left; + font-size: 104%; +} + +#center { + text-align:center; +} + +.dropdown-item:active, +.dropdown-item:hover, +.dropdown-item:focus, +.dropdown-item.now:hover, +.dropdown-item.now:active, +.dropdown-item.now:focus { + font-size: 104%; + background: #47a0ff; + padding: .25rem 2.2rem 0.3rem 1rem; + border-radius: 27px; + color: #181a1b; + text-align: left; + margin-left: 4%; + width: 92%; +} +.dropdown-item:hover > .icon, +.dropdown-item:active > .icon, +.dropdown-item:focus > .icon, +.dropdown-item.now:hover > .icon, +.dropdown-item.now:active > .icon, +.dropdown-item.now:focus > .icon{ + background: #8abfff; +} + +.dropdown-success:hover, +.dropdown-success:active, +.dropdown-success:focus { + background: #5effaf; } +.dropdown-success:hover > .icon, +.dropdown-success:active > .icon, +.dropdown-success:focus > .icon { + background: #1ce681; +} + +.dropdown-error:hover, +.dropdown-error:active, +.dropdown-error:focus { + background: #ff8787; +} +.dropdown-error:hover > .icon, +.dropdown-error:active > .icon, +.dropdown-error:focus > .icon { + background: #f55656; +} + +table, +.btn-group { + border-radius: 20px; +} + +.card { + border-radius: 25px; + display: inline; + background-color: rgb(0 0 0 / 2%); + outline: none; + padding: 5px 10px; + font-size: 17px; + grid-gap: 20px; + background: #181a1b; + color: #c0c0c0; +} + +.menubar { + background-color: #1e2124; + color: #d6ddde; + justify-content: center; +} + +.content { + background-color: transparent; + color: #a7a8aa; + border-radius: 25px; +} + +.fill { + flex: 1; +} + .buffer { + margin-top: 20px; + margin-bottom: 20px; + margin-left: 20px; + margin-right: 20px; +} + +.container-box { + height: 100%; + display: flex; + justify-content: center; + align-items: center; +} + +.login-input { + border-radius: 20px; + background: #141414; +} + +.black-dropdown { + background-color: #e7e7e7; +} + +#lol { + color: white; + justify-content: center; +} + +hr { + background-image: linear-gradient(to right, transparent, rgba(255, 255, 255, 0.2), transparent); + border: 0px; + height: 1px; + margin: 0px; + box-sizing:content-box; + display: block; +} + +#comments, +.comments { + margin: 10px 0px 0px 0px; + overflow-wrap: break-word; + color: #535456; + font-size: 13px; + display: flex; + justify-content: space-between; + text-align: right; + align-items: baseline; + grid-gap: 3px; +} + +.tooactive { + font-weight: 700; +} + +.btn-outline-secondary:enabled { + cursor: pointer; +} + +audio::-webkit-media-controls-panel { + color-scheme: dark !important; + background: #181a1b; + color:white; +} + +.audio { + position: fixed; + left: 4px; + bottom: 45px; + width: calc(100% - 8px); +} + +button > .icon:hover { + background: #47494e !important; + cursor: pointer; +} + +.dropdown-item > .icon:hover, +.dropdown-item.now > .icon:hover { + background: #8abfff !important; + cursor: pointer; +} + +progress { + width: 100%; + margin-top: 13px; + margin-bottom: -8px; + display: block; + background: #141414; + transition: 0.2s; + border-radius: 500px; +} + +progress::-webkit-progress-bar { + background: transparent; + transition: 0.2s; + border-radius: 500px; +} + +progress::-webkit-progress-value { + border-radius: 500px; + background: linear-gradient(-90deg, rgba(106,255,115,1) 0%, rgba(0,255,86,1) 100%); + transition: 0.2s; + padding: 5px; +} + +label { + margin: 0px; +} + +.mainlist { + width: 48%; + padding: 5px 20 20px 20; + border-radius: 47px; +} + +.maindiv { margin-top:20px; + width: 70%; +} + +.secondarydiv { + display: flex; + grid-gap: 10px; +} + +.lilcard { + display: inherit; + border-radius: 30px; + margin: 0px; + flex-wrap: nowrap; + padding: 0 5 15 20; + min-width: 100%; + justify-content: space-between; + height: max-content; + margin-bottom: 0px; + align-items: center; + width:100%; + background: #29282c; + transition: 0.3s; +} + +.lilcard:hover, +.lilcard:active, +.lilcard:focus { + background: #47494e; +} + +.lilcardcontent { + width: 100%; + display: flex; + height: 100%; + flex-wrap: wrap; + flex-direction: column; + justify-content: space-between; +} + +.dropdown-item.big { + padding: 15px; + padding-left: 25px; + border-radius: 500px; + .icon{height: 45px;width: 45px;} +} + +.new-form { + position:relative; + padding-bottom: 20px; + height:70vh; + width: 100%; + margin-top:10px; margin-bottom:20px; - margin-left:20px; - margin-right:20px; + border-radius:45px; + overflow:hidden; + max-height:80vh; + justify-content:flex-start; } -.container-box { + +.new-form-control { + display: inherit; + border-radius: 40px; + margin-top: 15px; + flex-wrap: wrap; + padding: 5px 0px 15px 15px; + overflow-y: scroll; + min-width: 100%; + justify-content: space-between; height: 100%; + margin-bottom: 0px; + align-items: start; + align-content: start; + overflow-x: hidden; +} + +.dropdown-item.now { + background: #141414; + width: 95%; + .icon{background: #101010;} +} + +.new-form-control.songs { + display: grid; + grid-template-columns: repeat(2, 49.5%); +} + +.songidyeah { + font-size: 13px; +} + +.btn-outline-secondary i { + font-size: 20px; +} + +.mainpagecardh1 { + width: max-content; + text-align: left; +} + +.mpp { + margin-bottom: 10px; + width:100%; + text-align:left; +} + +.profileform { + width: 60vw; + max-height: max-content; + position: relative; +} + +.dlemptycard { + height: 23vh; + display: inherit; + border-radius: 30px; + margin-top: 15px; + flex-wrap: nowrap; + padding: 20 0 20 20; + min-width: 100%; + justify-content: space-between; + margin-bottom: 0px; + align-items: center; +} + +.demonlist { + padding-right: 5px; + width: 70vw; + height: 77vh; + margin-top: 10px; + border-radius: 45px; + overflow: scroll; + overflow-x: hidden; + max-height: 80vh; + justify-content: flex-start; + position: relative; +} + +.dlbutton { + position: fixed; + padding: 15px; + width: max-content; + font-size: 21px; + bottom: 6.5vh; +} + +.dlcard { + display: inherit; + border-radius: 30px; + margin-top: 15px; + flex-wrap: nowrap; + padding: 20px; + min-width: 100%; + justify-content: space-between; + height: max-content; + margin-bottom: 0px; + align-items: center; +} + +.dlseconddiv { display: flex; + height: 100%; + flex-wrap: wrap; + flex-direction: column; + justify-content: space-between; +} + +.dltext { + display: inline-flex; + font-size: 25px; + font-weight: 400; + grid-gap: 5px; + flex-wrap: wrap; + align-items: center; +} + +.dlp { + margin-bottom: 10px; + width: calc(100% - 10px); + text-align: left; + overflow-wrap: anywhere; +} + +.dlposttext { + display: inline-flex; + align-items: center; + width: max-content; +} + +.profcard1 { + display: flex; + width: 100%; + justify-content: space-between; + margin-bottom: 7px; + align-items: center; +} + +.profh1 { + text-align:left !important; + margin: 0px !important; + font-size: 30px; + overflow-wrap: anywhere; +} + +.profacclist { + display: flex; + width: 100%; +} + +.acccontrol { + width: 30%; + border-radius: 25px; + display: flex; + flex-direction: column; + justify-content: space-around; + align-items: center; +} + +.acccontrol2 { + display: grid; + grid-template-columns: repeat(2, 50%); + justify-items: center; + align-items: center; + width: 100%; +} + +.songbtnpic { + font-size:13px; + height:25px; + width:25px; + background:#373A3F; + margin: 0px; +} + +.songpic { + display: flex; + align-items: center; + grid-gap: 5px; +} + +.accnamedesc { + width: 70%; + margin-left: 5px; +} + +.songauthor { + font-size: 12.5px; +} + +.songname { + font-size: 17.5px; + color: white; +} + +.acccontrol2 .profilepic, +.acccontrol .profilepic { + margin: 0px; + font-size: 20px; +} + +.msgbox.list, +.dmbox.list { + display: flex; + max-width: 500px; + border-radius: 35px; justify-content: center; + align-content: flex-start; + align-items: center; + padding: 15px 0px 15px 15px; + grid-gap: 10px; + margin: 0px; + margin-bottom: 15px; +} + +.messengerbox h1 { + margin-bottom: 0px; +} + +.message { + display: flex; + width: 100%; + grid-gap: 5px; +} + +.message.you { + justify-content: flex-end; +} + +.message.notyou { + justify-content: flex-start; + align-items: flex-end; +} + +.clanname { + margin: 0px; + margin-top: 0px; + font-weight: 700; + display: flex; + grid-gap: 5px; align-items: center; } -.login-input { - width: 250px; + +.clandesc { + max-height: 90px; + overflow: scroll; + overflow-x: hidden; + padding-left: 15px; } -.black-dropdown { - background-color: #e7e7e7; + +.clanownertext { + margin: 0px; + color: gray; + text-align: right; + margin-bottom: 5px; + font-size: 20px; + margin-top: 5px; +} + +.clanmemberstext { + width: max-content; + margin: 0px; + color: gray; + margin-bottom: 5px; + font-size: 20px; + margin-top: 5px; +} + +.clan-owner-form { + overflow-wrap: anywhere; + display: flex; + border-radius: 30px; + flex-wrap: wrap; + padding-top: 0px; + max-height: 45vh; + padding-bottom: 10px; + min-width: 100%; + height: max-content; + margin-bottom: 5px; + align-items: center; +} + +.clancreatetext { + justify-content: flex-end; + grid-gap: 0.5vh; + font-size: 16px; +} + +.clanmemberndiv { + display: flex; + margin-bottom: 10px; + align-items: center; +} + +.clanmemberndiv h2 { + margin-bottom: 0px; +} + +.secondsettingsform { + width: 70%; +} + +.mainsettings { + display: flex; + grid-gap: 10px; + width: 100%; + margin-bottom: 30px; +} + +.profilewclanname { + display: flex; + flex-direction: column; + align-items: center; + margin: 5px 0px 10px 0px; +} + +.profilename { + margin: 0px !important; +} + +.dlpoints { + position: absolute; + font-size: 20px; + right: 50px; + color: gray; +} + +body:has(.audio) { + .btn-group {bottom: 15px !important; position: fixed !important;} +} + +.draganddrop { + position: absolute; + width: 100vw; + height: 100vh; + background: #00000080; + transition: 0.3s; + color: white; + display: flex; + justify-content: center; + align-items: center; + z-index: 2; +} + +.dadh1 i { + font-size: 150px; + margin-bottom: 15px; + margin-right: 33px; +} + +.dadh1 { + display: flex; + flex-direction: column; +} + +.itemsbox { + border-radius: 30px; + width: 50%; + padding: 0px; + display: flex; + margin: auto; +} + +.itembtn { + padding: 10px; + border-radius: 20px; + height: max-content; + margin: 0px; + width: 100%; + border: none; +} + +.itemoverflow { + border-radius: 30px; + overflow: scroll; + width: 100%; + overflow-x: hidden; + height: 100%; +} + +.acccomments { + display: flex; + justify-content: space-between; + margin-top: 10px; +} + +.acclistnick { + margin: 0px; + font-size: 27px; + margin-left:5px; + display: flex; +} + +.accresultrole { + margin: 0px; + width: 100%; + text-align: right; +} + +.acclistdiv { + display: flex; + width: 100%; + justify-content: space-between; + align-items: center; +} + +.clanscard { + display: inherit; + border-radius: 30px; + margin-top: 15px; + flex-wrap: nowrap; + padding: 0px 5px 15px 20px; + min-width: 100%; + justify-content: space-between; + height: max-content; + margin-bottom: 0px; + align-items: center; +} + +.clansname { + display: flex; + justify-content: space-between; + align-items: center; +} + +.clansname h1 { + width: max-content; + text-align: left; + overflow-wrap: anywhere; +} + +.clansdesc { + margin-bottom: 10px; + width:100%; + text-align: left; + overflow-wrap: anywhere; +} + +.clan-form-control { + display: inherit; + border-radius: 45px; + margin-top: 15px; + flex-wrap: wrap; + padding: 0px 0px 15px 15px; + overflow-y: scroll; + overflow-x: hidden; + min-width: 100%; + justify-content: space-between; + height: 100%; + margin-bottom: 0px; + align-items: start; + align-content:start; +} + +.clan-form { + position: relative; + padding-bottom: 20px; + width: 60vw; + height: 77vh; + margin-top: 1.5%; + border-radius: 45px; + overflow: auto; + overflow-x: hidden; + max-height: 80vh; + justify-content: flex-start; +} + +.clansmembercount { + display: flex; + grid-gap: 5px; + align-items: center; +} + +.packcard { + border-radius: 30px; + margin-top: 15px; + background: #1e2124; +} + +.packh2 { + text-align: right; + margin: 15px 5px 5px 0px; + font-style: italic; +} + +.commentsdiv { + display: flex; + justify-content: space-between; + margin-top: 10px; +} + +.packlevels { + height: 225px; + overflow-y: scroll; +} + +.longfc { + display: flex; + width: 100%; + height: max-content; + align-items: center; +} + +.gauntletlevels { + height: 375px; + overflow-y: scroll; + margin-top: 10px; +} + +.suggested { + height: max-content; + border-radius: 33px; + margin-top: 10px; +} + +.suggest .accbtn { + font-size: 30px; +} + +.sugnamedesc { + width: 100%; +} + +.suggest .dltext, +.suggest .dltext b { + font-size: 22px; +} + +.suggest .levelname { + font-size: 30px; +} + +.suggest, +.suggest .dltext { + display: flex; + grid-gap: 5px; + align-items: baseline; + flex-wrap: wrap; +} + +.mavdiv { + width: 100%; + display: flex; + align-items: center; +} + +.mavdiv details { + width: 100%; +} + +.packname p { + margin-bottom: 10px; +} + +.clan-form h1 { + margin: 10px 0px 0px; +} + +.packname h1 { + margin: 0px; + margin-bottom: 5px; + font-weight: 700; +} + +.clan-form.clans h1 { + margin: 15px 0 15px; +} + +.messenger.msgs { + margin-top: 0px; +} + +.mavdiv .accbtn, +.profilepic .accbtn { + font-size: 25px; +} + +.audioDiv { + display: flex; + background: #181a1b; + border-radius: 20px; + position: fixed; + bottom: 45px; + left: 30px; + padding: 10px; + align-items: center; + grid-gap: 10px; + min-width: 350px; + z-index: 2; + transition: 0.2s; +} + +.audioDiv p { + width: max-content; +} + +.audioDiv .name { + font-weight: 700; + font-size: 24px; + color: white; + max-width: calc(100% - 62px); + margin-right: 62px; + text-align: left; +} + +.audioDiv .author { + font-size: 20px; + max-width: calc(100% - 62px); + text-align: left; +} + +.audioDiv .image { + width: 81px; + height: 81px; + aspect-ratio: 1/1; + border-radius: 15px; + position: absolute; + top: 0px; +} + +.audioDiv .track { + display: flex; + flex-direction: column; + line-height: 1; + grid-gap: 7px; + position: relative +} +/* +.audioDiv .length { + margin: 0px; + width: 300px; + background: #121212; + color: white; + border-radius: 500px; + height: 13px; +} +*/ +.audioDiv .cover { + position: relative; + width: 81px; + height: 81px; + cursor: pointer +} + +.audioDiv .cover i { + z-index: 1; + display: flex; + align-items: center; + justify-content: center; + color: white; + background: #0000006b; + font-size: 50px; + opacity: 0; + transition: 0.25s; +} + +.audioDiv .cover:hover i { + opacity: 1; +} + +.audioDiv .length { + -webkit-appearance: none; + height: 10px; + background: #121212; + border-radius: 500px; + background-image: linear-gradient(#c0c0c0, #c0c0c0); + background-size: 0% 100%; + background-repeat: no-repeat; + min-width: 300px; + width: 100%; +} + +.audioDiv .length::-webkit-slider-runnable-track { + -webkit-appearance: none; + box-shadow: none; + border: none; + background: transparent; +} + +.audioDiv .length.volume { + rotate: 270deg; + margin: 0px; + position: absolute; + bottom: 30px; + right: -22px; + min-width: 70px; + width: 100%; +} + +.audioDiv i.volume { + color: white; + font-size: 17px; + transition: 0.2s; + position: absolute; + bottom: 0px; + opacity: 0; + visibility: hidden; +} + +.audioDiv i.volume.show { + opacity: 1; + visibility: initial; +} + +.audioDiv .volumeDiv { + display: flex; + position: relative; + height: 75px; + width: 25px; +} + +.audioDiv .duration { + display: flex; + font-size: 18px; + align-items: center; + grid-gap: 5px; +} + +.audioDiv .duration button:disabled { + color: gray; +} + +.audioDiv .queueDiv { + position: absolute; + right: 0px; + top: auto; + bottom: 104px; + left: 0px; + width: max-content; + display: flex; + flex-direction: column-reverse; + overflow-y: auto; + overflow-x: hidden; + max-height: 205px; + opacity: 0; + visibility: hidden; + transition: 0.2s; +} + +.queueDiv .item { + display: flex; + width: 100%; + align-items: center; + grid-gap: 17px; +} + +.queueDiv .cover, .queueDiv .image{ + width: 55px; + height: 55px; +} + +.queueDiv .cover i { + font-size: 30px; +} + +.audioDiv .anotherVolume { + opacity: 0; + visibility: hidden; + transition: 0.2s; +} + +.audioDiv .anotherVolume.show { + opacity: 1; + visibility: initial; +} + +.queueDiv .name { + font-size: 21px; +} + +.queueDiv .author { + font-size: 17px; +} + +.queueDiv:has(.item) { + opacity: 1; + visibility: initial; +} + +.audioDiv button i { + cursor: pointer; +} + +.audioDiv .indicator { + display: none; +} + +.audioDiv .track .buttons { + position: absolute; + top: 1px; + right: 8px; + display: flex; + grid-gap: 10px; +} + +.audioDiv .track .buttons button, +.queueDiv .track .buttons { + background: transparent; + border: none; + outline: none; + padding: 0px; + font-size: 18px; +} + +.queueDiv .track { + width: 100%; +} + +.queueDiv .name { + margin: 0px; +} + +.audioDiv.showButton { + width: max-content; + border-radius: 500px; + color: white; + min-width: 0px; + padding: 27px; + z-index: 3; +} + +.audioDiv.showButton i { + font-size: 48px; +} + +.audioDiv.showButton:not(.show) { + opacity: 1; + visibility: initial; + animation-name: button; + animation-duration: 1.5s; + animation-iteration-count: initial; +} + +.audioDiv.showButton.show { + opacity: 0; + visibility: hidden; +} + +.audioDiv:not(.show):not(.showButton):not(.queueDiv) { + opacity: 0; + visibility: hidden; + animation-name: player; + animation-duration: 1.5s; + animation-iteration-count: initial; +} + +.songUploadDiv { + width: 100%; + padding: 0px 10px 10px 10px; + background: #141414; + border-radius: 30px; + min-width: 35vw; +} + +.forgotPassword { + width: 100%; + text-align: right; + background: none; + border: none; + padding: 0px; + margin: 5px 0px; + cursor: pointer; + color: #c0c0c0; + font-weight: 700; + transition: 0.2s; + outline: none; + font-size: 15px; +} + +.forgotPassword:hover { + text-decoration: underline; +} + +.itembtn:disabled { + padding: 10px; + border-radius: 20px; + height: max-content; + margin: 0px; + margin-right: 10px; + width: 100%; + border: none; + background: #231717 +} + +@keyframes player { + 0% { + opacity: 1; + visibility: initial; + } + 70% { + opacity: 1; + visibility: initial; + } + 100% { + opacity: 0; + visibility: hidden; + } +} + +@keyframes button { + 0% { + opacity: 0; + visibility: hidden; + } + 70% { + opacity: 0; + visibility: hidden; + } + 100% { + opacity: 1; + visibility: initial; + } +} + +.audioDiv.showButton:not(:has(.indicator)) { + opacity: 0; + visibility: hidden; + animation-duration: 0s; +} + +@keyframes fadeInAnimation { + 0% { + opacity: 0; + } + 100% { + opacity: 1; + } +} + +.icon-kit { + display: flex; + width: 100%; + height: max-content; + justify-content: space-between; + margin-top:10px; + padding: 5px 5%; + align-items: center; + border-radius: 20px; +} + +.profile-stats { + display: flex; + width: 100%; + height: max-content; + align-items: center; +} + +.profile-comments { + overflow-wrap: anywhere; + display: flex; + border-radius: 30px; + margin-top: 20px; + flex-wrap: wrap; + padding-top: 0; + max-height: 45vh; + padding-bottom: 10px; + min-width: 100%; + height: max-content; + margin-bottom: 17px; + align-items: center; +} + +.icon-kit-icon { + animation: fadeInAnimation ease 1s; + animation-iteration-count: 1; + animation-fill-mode: forwards; +} + +.icon-kit-div { + width: 100%; + display: flex; + align-content: center; + justify-content: center; +} + +.icon-ship { + height: 45px; +} + +.icon-wave { + height: 40px; +} + +.icon-cube, +.icon-ball, +.icon-ufo, +.icon-robot, +.icon-spider, +.icon-swing, +.icon-jetpack { + height: 60px; +} + +.selectField { + display: flex; + grid-gap: 5px; +} + +.selectField select { + width: 60%; + margin: 0px; +} + +.bantitle { + display: flex; + width: 100%; + justify-content: space-between; + margin-bottom: 7px; + align-items: center; + grid-gap: 5px; + flex-direction: column; +} + +.banusernamediv { + flex-direction: row; + justify-content: center; +} + +.banusernamediv button .profilenick, +.banusernamediv .profilenick { + width: max-content; +} + +.banbuttons { + min-width: 250px; + display: flex; + flex-direction: column; + grid-gap: 10px; + align-items: center; +} + +.modactionsspoiler { + font-size: 25px; +} + +.accounts-badge-icon-div { + display: flex; + align-items: center; + grid-gap: 5px; +} + +.chatdiv { + height: 75vh; + flex-wrap: nowrap !important; +} + +.chatbox { + display: flex; + flex-direction: column; + width: 100%; + height: 100%; + justify-content: center; +} + +.messenger-username { + display: flex; + margin-bottom: 5px; + align-items: center; + justify-content: center; + grid-gap: 10px; +} + +.messenger-username .goback, +.messenger-username .msgupd { + margin: 0px; +} + +.chat-opened { + background-color: #313539; + border: 2px solid #6e757b; + padding: 8px; +} + +.friends-button-div { + position: relative; + min-width: 30%; + width: 30%; +} + +.friends-button { + position: absolute; + bottom: 10px; + width: max-content; + padding: 15px; + right: 10px; + font-size: 20px; + background-color: #141414; + border: 4px solid #212529; +} + +.itemslist.hide { + display: none; +} + +.page-buttons { + display: flex; + height: max-content; + width: 100%; +} + +.form.new-form h1 { + margin-bottom: 5px; +} + +.manage-button-div { + display: flex; + align-items: flex-end; + grid-gap: 5px; +} + +.btn-manage { + width: 35px; + color: white; + padding: 7px; + font-size: 20px; + height: 35px; + text-align: center; +} + +.profilenick.big { + font-size: 27px; + grid-gap: 10px; + display: flex; + align-items: center; + cursor: pointer; +} + +.profilelikes { + text-align: right; +} + +.profilelikes.big { + font-size: 25px; + width: max-content; +} + +.profilemsg.big { + font-size: 22px; +} + +.comments.big { + font-size: 15px; + margin-left: 5px; +} + +.profile.big { + display: flex; + flex-direction: column; + grid-gap: 5px; +} + +.level-card { + overflow: visible; + height: max-content; + padding: 5px 15px 15px 15px; +} + +.goback-title { + display: flex; + align-items: center; + justify-content: center; + margin-bottom: 5px; + grid-gap: 10px; +} + +.no-margin { + margin: 0px; +} + +.delete-comment-div { + width: 100%; + display: flex; + justify-content: flex-end; + grid-gap: 10px; + align-items: center; +} + +.empty-section { + display: flex; + align-items: center; + justify-content: center; + width: 100%; + height: 100%; + flex-direction: column; + grid-gap: 10px; +} + +.empty-section i { + font-size: 100px; + color: #c0c0c0; +} + +.empty-section p { + font-size: 30px; + color: #c0c0c0; +} + +.checkboxes { + display: grid !important; + align-items: center; + justify-content: center; + width: 100%; + flex-direction: column; + grid-gap: 5px; + grid-template-columns: repeat(2, 49.5%); +} + +.checkbox input { + width: 20px; + height: 20px; +} + +.checkbox h3 { + margin: 0px; + font-size: 17px; + text-align: left; +} + +.manage-level-name-div { + display: flex; + flex-direction: row; + align-items: center; + justify-content: flex-start; + grid-gap: 5px; +} + +.chat { + overflow: hidden; + white-space: nowrap; + text-overflow: ellipsis; +} + +.empty-itemoverflow { + display: flex; + align-items: center; + justify-content: center; + padding-left: 15px; +} + +.messenger-link { + font-weight: 700; + color: #007bff; + cursor: pointer; +} + +.automod-boxes { + display: flex; + width: 100%; + justify-content: center; + grid-gap: 10px; + margin-top: 10px; + height: calc(100% - 68px); +} + +.automod-boxes .new-form-control { + min-width: 45%; + margin: 0px; +} + +.new-form-control .profile { + border-radius: 25px; +} + +.automod-boxes .profile { + display: flex; + flex-direction: column; + grid-gap: 5px; +} + +.automod-boxes .btns { + margin-top: 5px; +} + +.no-scroll { + overflow: hidden !important; + max-height: max-content !important; + padding: 0px !important; +} + +.attribute-div { + background: #373A3F; + border-radius: 20px; + font-size: 25px; + padding: 7px 15px; + color: white; + width: 100%; + display: flex; + grid-gap: 5px; + align-items: center; +} + +.attribute-divs { + display: flex; + grid-gap: 5px; + background: #141414; + padding: 10px; + border-radius: 25px; +} + +.attribute-div.attribute-button { + width: max-content; + transition: 0.2s; + cursor: pointer +} + +.attributes { + display: flex; + flex-direction: column; + grid-gap: 5px; + padding: 10px !important; + background: #373A3F; + border-radius: 30px; +} + +.attribute-divs.text text { + font-size: 20px; +} + +.attribute-div.enabled { + color: #bbffbb; + font-weight: 700; +} + +.attribute-div.disabled { + color: #ffbbbb; + font-weight: 700; +} + +.attribute-div.attribute-button:hover { + background: #47494e; +} + +.invisible { + width: 0px; + height: 0px; + border: none; + background: none; + position: absolute; + opacity: 0; +} + +.profilepercent { + font-size: 20px; + font-weight: 400; + margin-left: -5px; + color: gray; +} + +.song-info { + flex-wrap: wrap !important; + justify-content: space-evenly !important; + border-radius: 20px; +} + +.song-info .profilepic { + width: max-content; +} + +.new-messages-notify { + background: #e35151; + border-radius: 500px; + padding: 2px; + width: 20px; + height: 20px; + display: flex; + align-items: center; + justify-content: center; + word-wrap: break-word; + font-size: 13px; + font-weight: 400; + color: white; +} + +.new-messages-notify.smaller { + width: 17px; + height: 17px; +} + +.btn-circle { + width: max-content; + height: max-content; + color: white; + padding: 8px; + font-size: 13px; + background-color: #373A3F; + font-weight: 700; + font-size: 15px; + border: none; + border-radius: 500px; + transition: 0.3s; + cursor: pointer; +} + +.btn-circle:hover, +.btn-circle:active, +.btn-circle:focus { + background-color: #47494e; + text-decoration: none; +} + +.active-profile-pic { + background: #c0c0c0; + color: #141414; + padding: 2px 6px; + border-radius: 15px; + width: max-content; +} + +.cards-form { + margin: 0px; + width: 150%; +} + +.error-divs { + display: flex; + position: fixed; + bottom: 50px; + right: 10px; + flex-direction: column; + grid-gap: 10px; +} + +.notify-show { + opacity: 1; +} + +.rewards-div { + display: flex; + flex-direction: column; + grid-gap: 10px; + justify-content: flex-start !important; + overflow-y: scroll; + position: absolute; + padding: 15px 0px 15px 15px; + margin: 20px; + width: 96% !important; + background: #181a1bdb; + height: calc(100% - 20px); + top: -10px; + border-radius: 20px; + backdrop-filter: blur(3px); + pointer-events: none; + opacity: 0; + transition: 0.3s; +} + +.rewards-div.show { + pointer-events: initial; + opacity: 1; +} + +.rewards-div h1 { + margin: 0px; +} + +.h1-with-close { + display: flex; + justify-content: space-between; + position: relative; +} + +.only-icon-button { + background: none; + border: none; + font-size: 25px; + cursor: pointer; + border-radius: 1000px; +} + +.comments i { + color: #c0c0c0; } \ No newline at end of file diff --git a/dashboard/incl/dashboardLib.php b/dashboard/incl/dashboardLib.php index 799064fe5..2b46d14b0 100644 --- a/dashboard/incl/dashboardLib.php +++ b/dashboard/incl/dashboardLib.php @@ -1,28 +1,63 @@ auth($dbPath); +// Dashboard library +class dashboardLib { public function printHeader($isSubdirectory = true){ $this->handleLangStart(); + global $gdps; + global $dashboardFavicon; + if(file_exists("../../incl/cvolton.css")) $css = filemtime("../../incl/cvolton.css"); + elseif(file_exists("../incl/cvolton.css")) $css = filemtime("../incl/cvolton.css"); + else $css = filemtime("incl/cvolton.css"); echo ' - '; - if($isSubdirectory){ - echo '';
+ }
+ public function getLocalizedString($stringName, $lang = '') {
+ if(empty($lang)) {
+ if(!isset($_COOKIE["lang"]) OR !ctype_alpha($_COOKIE["lang"])) {
+ if(file_exists(__DIR__.'/lang/locale'.strtoupper(substr($_SERVER['HTTP_ACCEPT_LANGUAGE'], 0, 2))).'.php') $lang = strtoupper(substr($_SERVER['HTTP_ACCEPT_LANGUAGE'], 0, 2));
+ else $lang = "EN";
+ } else $lang = $_COOKIE["lang"];
+ }
+ $lang = substr($lang, 0, 2);
+ $locale = __DIR__."/lang/locale".$lang.".php";
+ if(file_exists($locale)) require $locale;
+ else require __DIR__."/lang/localeEN.php";
+ if(isset($string[$stringName])) return $string[$stringName];
+ else {
+ require __DIR__."/lang/localeEN.php";
+ if(isset($string[$stringName])) return $string[$stringName];
+ else return "lnf:$stringName";
}
- echo '
-
-
-
-
-
-
- [Beta] GDPS Dashboard
- ';
- echo '
- ';
}
public function printBoxBody(){
- echo '
+ echo '
';
+ echo '
';
}
@@ -30,287 +65,1454 @@ public function printBox($content, $active = "", $isSubdirectory = true){
$this->printHeader($isSubdirectory);
$this->printNavbar($active);
$this->printBoxBody();
- echo "$content";
+ echo $content;
$this->printBoxFooter();
$this->printFooter();
}
+ public function printSong($content, $active = "", $isSubdirectory = true){
+ $this->printHeader($isSubdirectory);
+ $this->printNavbar($active, $isSubdirectory);
+ echo ''.$content.'';
+ }
public function printBoxFooter(){
- echo '
'.$this->getLocalizedString("footer").'
';
+ if($youtube != '') echo '
';
+ if($discord != '') echo '
';
+ if($twitter != '') echo '
';
+ if($vk != '') echo '
';
+ if($twitch != '') echo '
';
+ echo '
';
+ if($discord != '') echo '';
+ if($twitter != '') echo '';
+ if($vk != '') echo '';
+ if($twitch != '') echo '';
+ echo 'Login
".$content); + $this->printBox("".$this->getLocalizedString("loginBox")."
".$content); } public function printLoginBoxInvalid(){ - $this->printLoginBox("Invalid username or password. Click here to try again."); + $this->printLoginBox("
".$this->getLocalizedString("wrongNickOrPass").""); } public function printLoginBoxError($content){ $this->printLoginBox("
An error has occured: $content. Click here to try again."); } - public function printNavbar($active){ - require_once __DIR__."/../../incl/lib/mainLib.php"; + public function printNavbar($active, $isSubdirectory = true) { + global $gdps; + global $lrEnabled; + global $msgEnabled; + global $songEnabled; + global $sfxEnabled; + global $clansEnabled; + global $pc; + global $mac; + global $android; + global $ios; + global $pcLauncher; + global $macLauncher; + global $androidLauncher; + global $iosLauncher; + global $thirdParty; + global $dbPath; + global $dashboardIcon; + require_once __DIR__."/../".$dbPath."incl/lib/Captcha.php"; + require __DIR__."/../".$dbPath."config/security.php"; + require __DIR__."/../".$dbPath."config/mail.php"; + require_once __DIR__."/../".$dbPath."incl/lib/mainLib.php"; + require __DIR__."/../".$dbPath."incl/lib/connection.php"; + if(!isset($enableCaptcha)) global $enableCaptcha; + if(!isset($preactivateAccounts)) global $preactivateAccounts; + if($enableCaptcha) { + $captchaTypes = ['hcaptcha', 'grecaptcha', 'turnstile']; + $captchaUsed = $captchaTypes[$captchaType-1]; + } $gs = new mainLib(); - $homeActive = ""; - $accountActive = ""; - $modActive = ""; - $reuploadActive = ""; - $statsActive = ""; - switch($active){ + $homeActive = $accountActive = $browseActive = $modActive = $reuploadActive = $statsActive = $msgActive = $profileActive = ""; + switch($active) { case "home": - $homeActive = "active"; + $homeActive = "active tooactive"; break; case "account": - $accountActive = "active"; + $accountActive = "active tooactive"; + break; + case "browse": + $browseActive = "active tooactive"; break; case "mod": - $modActive = "active"; + $modActive = "active tooactive"; break; case "reupload": - $reuploadActive = "active"; + $reuploadActive = "active tooactive"; break; case "stats": - $statsActive = "active"; + $statsActive = "active tooactive"; + break; + case "msg": + $msgActive = "active tooactive"; + break; + case "profile": + $profileActive = "active tooactive"; break; } - echo '
-
+
-
+ + '.$this->getLocalizedString("messenger").''.$new; + } + echo '
- - '.$this->getLocalizedString("language").' + '.$this->getLocalizedString("language").' -
- Česky - Deutsch - Eesti - English - Esperanto - Español - Ελληνικά - Hrvatski - Italiano - Português - Русский - ภาษาไทย - Türkçe - translTest ++'; + $glob = function_exists('glob') ? (!empty(glob("../download/".$gdps.".*")) OR !empty(glob("download/".$gdps.".*"))) : true; + if($glob OR !empty($pc) OR !empty($mac) OR !empty($android) OR !empty($ios)) { + echo ' +Русский +
English +
Türkçe +
Українська +
Français +
Español +
Português +
Čeština +
Italiano +
Polski +
Tiếng Việt +
Bahasa Indonesia
- + + '.$this->getLocalizedString("download").' + +
'; + if((file_exists("download/".$gdps.".zip") OR file_exists("../download/".$gdps.".zip")) AND empty($pcLauncher)) echo '+ '; + } + } if(isset($_SESSION["accountID"]) AND $_SESSION["accountID"] != 0){ $userName = $gs->getAccountName($_SESSION["accountID"]); - echo''.$this->getLocalizedString("forwindows").''; + elseif(!empty($pcLauncher)) echo ''.$this->getLocalizedString("forwindows").''; + elseif(!empty($pc)) echo ''.$this->getLocalizedString("forwindows").''; + if((file_exists("download/".$gdps.".dmg") OR file_exists("../download/".$gdps.".dmg")) AND empty($macLauncher)) echo ''.$this->getLocalizedString("formac").''; + elseif(!empty($macLauncher)) echo ''.$this->getLocalizedString("formac").''; + elseif(!empty($mac)) echo ''.$this->getLocalizedString("formac").''; + if((file_exists("download/".$gdps.".apk") OR file_exists("../download/".$gdps.".apk")) AND empty($androidLauncher)) echo ''.$this->getLocalizedString("forandroid").''; + elseif(!empty($androidLauncher)) echo ''.$this->getLocalizedString("forandroid").''; + elseif(!empty($android)) echo ''.$this->getLocalizedString("forandroid").''; + if((file_exists("download/".$gdps.".ipa") OR file_exists("../download/".$gdps.".ipa")) AND empty($iosLauncher)) echo ''.$this->getLocalizedString("forios").''; + elseif(!empty($iosLauncher)) echo ''.$this->getLocalizedString("forios").''; + elseif(!empty($ios)) echo ''.$this->getLocalizedString("forios").''; + if(!empty($thirdParty)) { + foreach($thirdParty as &$thp) { + if(isset($tpcheck[$thp[1]])) continue; + $tp .= ''.$thp[1].''; + $tpcheck[$thp[1]] = "set"; + } + echo ' +- - '.sprintf($this->getLocalizedString("loginHeader"), $userName).' + '.$userName.' - + +
++++ +'; + if((date("F", time()) == "December" AND date("j", time()) > 17) OR (date("F", time()) == "January" AND date("j", time()) < 10)) echo ""; } public function printPage($content, $isSubdirectory = true, $navbar = "home"){ - $dl = new dashboardLib(); - $dl->printHeader($isSubdirectory); - $dl->printNavbar($navbar); - echo '+ +- '; +
++'.$this->getLocalizedString("songAddNameFieldPlaceholder").'
+'.$this->getLocalizedString("songAddAuthorFieldPlaceholder").'
++ + + ++ + ++ + ++ + ++ $this->printHeader($isSubdirectory); + $this->printNavbar($navbar); + echo ''; } - public function handleLangStart(){ + public function handleLangStart() { if(!isset($_COOKIE["lang"]) OR !ctype_alpha($_COOKIE["lang"])){ - setcookie("lang", "EN", 2147483647, "/"); + if(file_exists('/lang/locale'.strtoupper(substr($_SERVER['HTTP_ACCEPT_LANGUAGE'], 0, 2))).'.php') setcookie("lang", strtoupper(substr($_SERVER['HTTP_ACCEPT_LANGUAGE'], 0, 2)), 2147483647, "/"); + else setcookie("lang", "EN", 2147483647, "/"); } + if(!isset($_SESSION["accountID"])) $_SESSION["accountID"] = 0; } - public function getLocalizedString($stringName){ - if(!isset($_COOKIE["lang"]) OR !ctype_alpha($_COOKIE["lang"])){ - $lang = "EN"; - }else{ - $lang = $_COOKIE["lang"]; + public function hex2RGB($hexStr, $returnAsString = false, $seperator = ',') { + $hexStr = preg_replace("/[^0-9A-Fa-f]/", '', $hexStr); + $rgbArray = []; + if(strlen($hexStr) == 6) { + $colorVal = hexdec($hexStr); + $rgbArray['red'] = 0xFF & ($colorVal >> 0x10); + $rgbArray['green'] = 0xFF & ($colorVal >> 0x8); + $rgbArray['blue'] = 0xFF & $colorVal; + } elseif (strlen($hexStr) == 3) { + $rgbArray['red'] = hexdec(str_repeat(substr($hexStr, 0, 1), 2)); + $rgbArray['green'] = hexdec(str_repeat(substr($hexStr, 1, 1), 2)); + $rgbArray['blue'] = hexdec(str_repeat(substr($hexStr, 2, 1), 2)); + } else return false; + return $returnAsString ? implode($seperator, $rgbArray) : $rgbArray; + } + public function convertToDate($timestamp, $acc = false){ + if($acc) { + if($timestamp == 0) return $this->getLocalizedString("never"); + if(date("d.m.Y", $timestamp) == date("d.m.Y", time())) return date("G:i", $timestamp); + elseif(date("Y", $timestamp) == date("Y", time())) return date("d.m", $timestamp); + else return date("d.m.Y", $timestamp); + } else return date("d.m.Y G:i:s", $timestamp); + } + public function createProfileStats($stars = 0, $moons = 0, $diamonds = 0, $goldCoins = 0, $userCoins = 0, $demons = 0, $creatorPoints = 0, $isCreatorBanned = 0, $returnText = true) { + if($stars == 0) $st = ''; else $st = ''; - $dl->printFooter(); +'.$content.'-'.$stars.'
'; + if($moons == 0) $ms = ''; else $ms = ''.$moons.'
'; + if($diamonds == 0) $dm = ''; else $dm = ''.$diamonds.'
'; + if($goldCoins == 0) $gc = ''; else $gc = ''.$goldCoins.'
'; + if($userCoins == 0) $uc = ''; else $uc = ''.$userCoins.'
'; + if($demons == 0) $dn = ''; else $dn = ''.$demons.'
'; + if($creatorPoints == 0) $cp = ''; else $cp = ''.$creatorPoints.'
'; + $all = $st.$ms.$dm.$gc.$uc.$dn.$cp; + if(empty($all) && $returnText) $all = ''.$this->getLocalizedString("empty").'
'; + return $all; + } + public function generateLevelsCard($action, $modcheck = false, $extraDetails = '') { + global $dbPath; + global $iconsRendererServer; + require __DIR__."/../".$dbPath."incl/lib/connection.php"; + require_once __DIR__."/../".$dbPath."incl/lib/mainLib.php"; + $gs = new mainLib(); + $levelid = $action["levelID"]; + $levelname = $action["levelName"]; + $levelIDlol = ''; + $levelDesc = $this->parseMessage(htmlspecialchars(ExploitPatch::url_base64_decode($action["levelDesc"]))); + if(empty($levelDesc)) $levelDesc = ''.$this->getLocalizedString("noDesc").' '; + $levelpass = $action["password"]; + $likes = ''.$action["likes"].''; + $dislikes = ''.$action["dislikes"].''; + $stats = ''.$likes.' '.(isset($action['dislikes']) ? ''; + if($modcheck) { + $levelpass = substr($levelpass, 1); + $levelpass = preg_replace('/(0)\1+/', '', $levelpass); + if($levelpass == 0 OR empty($levelpass)) $lp = '• '.$dislikes : '').''.$this->getLocalizedString("nopass").'
'; + else { + if(strlen($levelpass) < 4) while(strlen($levelpass) < 4) $levelpass = '0'.$levelpass; + $lp = ''.$levelpass.'
'; + } + if($action["requestedStars"] <= 0 && $action["requestedStars"] > 10) $rs = '0
'; + else $rs = ''.$action["requestedStars"].'
'; + } else $lp = $rs = ''; + if($action["songID"] > 0) { + $songlol = $gs->getSongInfo($action["songID"]); + $songArtists = $gs->getLibrarySongInfo($action["songID"])["artists"]; + $artistIDs = preg_split('/\./', $songArtists); + $artistIDs = array_filter($artistIDs); + $artistIDsString = implode(', ', $artistIDs); + $authorNames = [$songlol["authorName"]]; + foreach($artistIDs as $id) { + $authorInfo = $gs->getLibrarySongAuthorInfo($id); + $authorNames[] = $authorInfo["name"]; + } + $artistNames = implode(', ', $authorNames); + $btn = ''; + $songid = ''.$btn.''; + } else $songid = ''.$songlol["name"].''.strstr($gs->getAudioTrack($action["audioTrack"]), ' by ', true).'
'; + $username = ''; + $time = $this->convertToDate($action["uploadDate"], true); + $diff = $gs->getDifficulty($action["starDifficulty"], $action["auto"], $action["starDemonDiff"]); + if($modcheck) { + $stars = ''; } - $locale = __DIR__ . "/lang/locale".$lang.".php"; - if(file_exists($locale)){ - include $locale; - }else{ - include __DIR__ . "/lang/localeEN.php"; + if($action['levelLength'] == 5) $starIcon = 'moon'; else $starIcon = 'star'; + if(!empty($stars)) $st = ''.$diff.', '.$action["starStars"].'
'.$stars; + else $st = ''.$diff.', '.$action["starStars"].'
'; + $ln = ''.$gs->getLength($action['levelLength']).'
'; + $dls = ''.$action['downloads'].'
'; + $all = $dls.$stats.$st.$ln.$lp.$rs.$extraDetails; + // Avatar management + $avatarImg = ''; + $extIDvalue = $action['extID']; + $query = $db->prepare('SELECT userName, iconType, color1, color2, color3, accGlow, accIcon, accShip, accBall, accBird, accDart, accRobot, accSpider, accSwing, accJetpack FROM users WHERE extID = :extID'); + $query->execute(['extID' => $extIDvalue]); + $userData = $query->fetch(PDO::FETCH_ASSOC); + if($userData) { + $iconType = ($userData['iconType'] > 8) ? 0 : $userData['iconType']; + $iconTypeMap = [0 => ['type' => 'cube', 'value' => $userData['accIcon']], 1 => ['type' => 'ship', 'value' => $userData['accShip']], 2 => ['type' => 'ball', 'value' => $userData['accBall']], 3 => ['type' => 'ufo', 'value' => $userData['accBird']], 4 => ['type' => 'wave', 'value' => $userData['accDart']], 5 => ['type' => 'robot', 'value' => $userData['accRobot']], 6 => ['type' => 'spider', 'value' => $userData['accSpider']], 7 => ['type' => 'swing', 'value' => $userData['accSwing']], 8 => ['type' => 'jetpack', 'value' => $userData['accJetpack']]]; + $iconValue = (isset($iconTypeMap[$iconType]) && $iconTypeMap[$iconType]['value'] > 0) ? $iconTypeMap[$iconType]['value'] : 1; + $avatarImg = '';
}
- if($lang == "TEST"){
- return "lnf:$stringName";
+ $manage = '
+
+
+ ';
+ return '+'; + } + public function generateCommentsCard($comment, $commentDeleteCheck = false) { + global $dbPath; + global $iconsRendererServer; + require __DIR__."/../".$dbPath."incl/lib/connection.php"; + require_once __DIR__."/../".$dbPath."incl/lib/mainLib.php"; + $gs = new mainLib(); + $commentAccountName = $gs->getUserName($comment['userID']); + $commentMessage = $this->parseMessage(htmlspecialchars(ExploitPatch::url_base64_decode($comment["comment"]))); + $extIDvalue = $gs->getExtID($comment['userID']); + $likes = ''.$comment["likes"].''; + $dislikes = ''.$comment["dislikes"].''; + $stats = ' '.$likes.' '.(isset($comment['dislikes']) ? '+++++++
+'.$manage.sprintf($this->getLocalizedString("demonlistLevel"), $levelname.'', 0, $action["userName"], $avatarImg).''.$levelDesc.'
++++ '.$all.' ++ '.$songid.' ++'.$this->getLocalizedString("levelid").': '.$levelIDlol.'
'.$this->getLocalizedString("date").': '.$time.'
• '.$dislikes : ''); + $commentIDDiv = ''; + if($commentDeleteCheck || $extIDvalue == $_SESSION['accountID']) $deleteComment = ''; + $percentText = $comment['percent'] > 0 ? ''.$comment['percent'].'% ' : ''; + // Avatar management + $avatarImg = ''; + $query = $db->prepare('SELECT userName, iconType, color1, color2, color3, accGlow, accIcon, accShip, accBall, accBird, accDart, accRobot, accSpider, accSwing, accJetpack FROM users WHERE extID = :extID'); + $query->execute([':extID' => $extIDvalue]); + $userData = $query->fetch(PDO::FETCH_ASSOC); + if($userData) { + $iconType = ($userData['iconType'] > 8) ? 0 : $userData['iconType']; + $iconTypeMap = [0 => ['type' => 'cube', 'value' => $userData['accIcon']], 1 => ['type' => 'ship', 'value' => $userData['accShip']], 2 => ['type' => 'ball', 'value' => $userData['accBall']], 3 => ['type' => 'ufo', 'value' => $userData['accBird']], 4 => ['type' => 'wave', 'value' => $userData['accDart']], 5 => ['type' => 'robot', 'value' => $userData['accRobot']], 6 => ['type' => 'spider', 'value' => $userData['accSpider']], 7 => ['type' => 'swing', 'value' => $userData['accSwing']], 8 => ['type' => 'jetpack', 'value' => $userData['accJetpack']]]; + $iconValue = isset($iconTypeMap[$iconType]) ? $iconTypeMap[$iconType]['value'] : 1; + $avatarImg = '';
}
- if(isset($string[$stringName])){
- return $string[$stringName];
- }else{
- return "lnf:$stringName";
+ // Badge management
+ $badgeImg = '';
+ $queryRoleID = $db->prepare("SELECT roleID FROM roleassign WHERE accountID = :accountID");
+ $queryRoleID->execute([':accountID' => $extIDvalue]);
+ if($roleAssignData = $queryRoleID->fetch(PDO::FETCH_ASSOC)) {
+ $queryBadgeLevel = $db->prepare("SELECT modBadgeLevel FROM roles WHERE roleID = :roleID");
+ $queryBadgeLevel->execute([':roleID' => $roleAssignData['roleID']]);
+ if(($modBadgeLevel = $queryBadgeLevel->fetchColumn() ?? 0) >= 1 && $modBadgeLevel <= 3) {
+ $badgeImg = '';
+ }
}
+ // Color management
+ $queryColorLevel = $gs->getAccountCommentColor($extIDvalue);
+ return '+'; } - public function convertToDate($timestamp){ - return date("d/m/Y G:i:s", $timestamp); + public function generateLeaderboardsCard($x, $leaderboard, $action, $leaderboardDeleteCheck = false, $stats = '') { + global $dbPath; + global $iconsRendererServer; + require __DIR__."/../".$dbPath."incl/lib/connection.php"; + require_once __DIR__."/../".$dbPath."incl/lib/mainLib.php"; + $gs = new mainLib(); + switch($x) { + case 1: + $place = ' 1'; + break; + case 2: + $place = ' 2'; + break; + case 3: + $place = ' 3'; + break; + default: + $place = '# '.$x.''; + break; + } + if($leaderboardDeleteCheck) $deleteLeaderboard = ''; + // Avatar management + $avatarImg = ''; + $extIDvalue = $action['extID']; + $query = $db->prepare('SELECT userName, iconType, color1, color2, color3, accGlow, accIcon, accShip, accBall, accBird, accDart, accRobot, accSpider, accSwing, accJetpack FROM users WHERE extID = :extID'); + $query->execute(['extID' => $extIDvalue]); + $userData = $query->fetch(PDO::FETCH_ASSOC); + if($userData) { + $iconType = ($userData['iconType'] > 8) ? 0 : $userData['iconType']; + $iconTypeMap = [0 => ['type' => 'cube', 'value' => $userData['accIcon']], 1 => ['type' => 'ship', 'value' => $userData['accShip']], 2 => ['type' => 'ball', 'value' => $userData['accBall']], 3 => ['type' => 'ufo', 'value' => $userData['accBird']], 4 => ['type' => 'wave', 'value' => $userData['accDart']], 5 => ['type' => 'robot', 'value' => $userData['accRobot']], 6 => ['type' => 'spider', 'value' => $userData['accSpider']], 7 => ['type' => 'swing', 'value' => $userData['accSwing']], 8 => ['type' => 'jetpack', 'value' => $userData['accJetpack']]]; + $iconValue = isset($iconTypeMap[$iconType]) ? $iconTypeMap[$iconType]['value'] : 1; + $avatarImg = '++++'.$avatarImg.$commentAccountName.$badgeImg.$percentText.'
+'.$deleteComment.'+'.$stats.'
'.$commentMessage.'
++
+'.$this->getLocalizedString("ID").': '.$commentIDDiv.' +'.$this->convertToDate($comment['timestamp'], true).' +';
+ }
+ return '+'; } - public function generateBottomRow($pagecount, $actualpage){ + public function parseMessage($body) { + global $dbPath; + require __DIR__."/../".$dbPath."incl/lib/connection.php"; + require_once __DIR__."/../".$dbPath."incl/lib/exploitPatch.php"; + $parseBody = explode(' ', $body); + $playersFound = $levelsFound = []; + foreach($parseBody AS &$element) { + $firstChar = mb_substr($element, 0, 1); + if(!in_array($firstChar, ['@', '#'])) continue; + $element = mb_substr($element, 1); + switch($firstChar) { + case '@': + if($playersFound[$element]) break; + $element = ExploitPatch::charclean($element); + $check = $db->prepare('SELECT count(*) FROM accounts WHERE userName = :userName AND isActive != 0'); + $check->execute([':userName' => $element]); + $check = $check->fetchColumn(); + if($check) { + $body = str_replace('@'.$element, '@'.$element.'', $body); + $playersFound[$element] = true; + } + break; + case '#': + if(!is_numeric($element) || $levelsFound[$element]) break; + $check = $db->prepare('SELECT levelName FROM levels WHERE levelID = :levelID AND unlisted = 0 AND unlisted2 = 0'); + $check->execute([':levelID' => $element]); + $check = $check->fetchColumn(); + if($check) { + $body = str_replace('#'.$element, '#'.htmlspecialchars($check).'', $body); + $levelsFound[$element] = true; + } + break; + } + } + return $body; + } + public function generateSongCard($song, $extraLabels = '', $includeAuthor = true) { + global $dbPath; + require __DIR__."/../".$dbPath."incl/lib/connection.php"; + require_once __DIR__."/../".$dbPath."incl/lib/mainLib.php"; + $gs = new mainLib(); + $fontsize = 27; + $modCheck = $gs->checkPermission($_SESSION["accountID"], "dashboardManageSongs"); + $check = $modCheck ?: ($_SESSION['accountID'] != 0 && $_SESSION['accountID'] == $song['reuploadID']); + $songsid = $song["ID"]; + $songIDlol = ''; + $time = $this->convertToDate($song["reuploadTime"], true); + $who = ''; + $author = htmlspecialchars(ExploitPatch::rucharclean($song["authorName"])); + $name = htmlspecialchars(ExploitPatch::rucharclean($song["name"])); + $size = $song["size"]; + $download = str_replace('http://', 'https://', $song["download"]); + if($_SESSION["accountID"] != 0) { + $favourites = $db->prepare("SELECT * FROM favsongs WHERE songID = :id AND accountID = :aid"); + $favourites->execute([':id' => $songsid, ':aid' => $_SESSION["accountID"]]); + $favourites = $favourites->fetch(); + if(!empty($favourites)) $favs = ''; + else $favs = ''; + } + if($song["reuploadID"] == 0) { + $time = "+ '.$deleteLeaderboard.' ++'.$stats.'++'.$this->getLocalizedString("accountID").': '.$extIDvalue.'
'.$this->getLocalizedString("date").': '.$this->convertToDate($leaderboard['uploadDate'], true).'
Newgrounds"; + $who = "".$author.""; + $btn = ''; + } else $btn = ''; + $isDisabled = $song['isDisabled'] != 0; + if($check) $manage = ''; + if(mb_strlen($author) + mb_strlen($name) > 30) $fontsize = 17; + elseif(mb_strlen($author) + mb_strlen($name) > 20) $fontsize = 20; + $songSize = ''.$song["size"].' MB
'; + if($includeAuthor) $who = ''.$who.'
'; + else { + $isDisabledText = !$isDisabled ? $this->getLocalizedString('songIsAvailable') : $this->getLocalizedString('songIsDisabled'); + $isDisabledIcon = !$isDisabled ? 'check' : 'xmark'; + $who = ''.$isDisabledText.'
'; + } + $stats = $songSize.$who.$extraLabels; + return '+'; + } + public function generateSFXCard($sfx, $extraLabels = '', $includeAuthor = true) { + global $dbPath; + require __DIR__."/../".$dbPath."incl/lib/connection.php"; + require_once __DIR__."/../".$dbPath."incl/lib/mainLib.php"; + $gs = new mainLib(); + $fontsize = 27; + $modCheck = $gs->checkPermission($_SESSION["accountID"], "dashboardManageSongs"); + $check = $modCheck ?: ($_SESSION['accountID'] != 0 && $_SESSION['accountID'] == $song['reuploadID']); + $sfxsid = $sfx["ID"]; + $songIDlol = ''; + $time = $this->convertToDate($sfx["reuploadTime"], true); + $who = ''; + $author = htmlspecialchars($sfx["authorName"]); + $name = htmlspecialchars($sfx["name"]); + $size = round($sfx["size"] / 1024 / 1024, 2); + $download = str_replace('http://', 'https://', $sfx["download"]); + $btn = ''; + $isDisabled = $sfx['isDisabled'] != 0; + if($check) $manage = ''; + if(mb_strlen($name) > 30) $fontsize = 17; + elseif(mb_strlen($name) > 20) $fontsize = 20; + $songSize = '++
'.$favs.$manage.' +'.$author.' — '.$name.' '.$btn.''.$stats.'++'.$this->getLocalizedString("songIDw").': '.$songIDlol.'
'.$this->getLocalizedString("date").': '.$time.'
'.$size.' MB
'; + if($includeAuthor) $who = ''.$who.'
'; + else { + $isDisabledText = !$isDisabled ? $this->getLocalizedString('songIsAvailable') : $this->getLocalizedString('songIsDisabled'); + $isDisabledIcon = !$isDisabled ? 'check' : 'xmark'; + $who = ''.$isDisabledText.'
'; + } + $stats = $songSize.$who.$extraLabels; + return '+'; + } + public function generateBottomRow($pagecount, $actualpage) { $pageminus = $actualpage - 1; $pageplus = $actualpage + 1; - $bottomrow = '++
'.$favs.$manage.' +'.$name.' '.$btn.''.$stats.'++'.$this->getLocalizedString("sfxID").': '.$songIDlol.'
'.$this->getLocalizedString("date").': '.$time.'
'.sprintf($this->getLocalizedString("pageInfo"),$actualpage,$pagecount).''; - $bottomrow .= ' '.$this->getLocalizedString("first").' '.$this->getLocalizedString("previous").''; - //updated to ".." - $bottomrow .= '.. - + ', 'browse'); +} +?> \ No newline at end of file diff --git a/dashboard/levels/packCreate.php b/dashboard/levels/packCreate.php new file mode 100644 index 000000000..412f9c3b6 --- /dev/null +++ b/dashboard/levels/packCreate.php @@ -0,0 +1,252 @@ +title($dl->getLocalizedString("packCreateTitle")); +$dl->printFooter('../'); +$allPacks = ''; +if($gs->checkPermission($_SESSION["accountID"], "dashboardLevelPackCreate")){ +if(!empty($_POST["packName"])) { + if(!Captcha::validateCaptcha()) { + $dl->printSong('', 'msg'); +?> \ No newline at end of file diff --git a/dashboard/profile/.htaccess b/dashboard/profile/.htaccess new file mode 100644 index 000000000..c3156bd6d --- /dev/null +++ b/dashboard/profile/.htaccess @@ -0,0 +1,5 @@ +RewriteEngine On +RewriteCond %{REQUEST_FILENAME} !-f +RewriteCond %{REQUEST_FILENAME} !-d +RewriteCond %{REQUEST_URI} !^replies +RewriteRule ^ %{REQUEST_URI}/../../profile/?id=%{REQUEST_URI} [L] diff --git a/dashboard/profile/index.php b/dashboard/profile/index.php new file mode 100644 index 000000000..c3efff908 --- /dev/null +++ b/dashboard/profile/index.php @@ -0,0 +1,463 @@ +getOffset(new DateTime); + } + + // sort timezone by offset + asort($timezone_offsets); + + $timezone_list = array(); + foreach( $timezone_offsets as $timezone => $offset ) + { + $offset_prefix = $offset < 0 ? '-' : '+'; + $offset_formatted = gmdate( 'H:i', abs($offset) ); + + $pretty_offset = "UTC${offset_prefix}${offset_formatted}"; + + $timezone_list .= ''; + } + + return $timezone_list; +} + +$clan = $none = ""; +if((!isset($_SESSION["accountID"]) OR $_SESSION["accountID"] == 0) AND (empty($_POST["accountID"]) AND empty($_GET["id"]))) { + $dl->title($dl->getLocalizedString("profile")); + $dl->printSong('+', 'mod'); + die(); + } + $accountID = $_SESSION["accountID"]; + if($_POST['level_1'] == $_POST['level_3'] OR $_POST['level_3'] == $_POST['level_2'] OR $_POST['level_1'] == $_POST['level_2']) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'mod'); + die(); + } + $name = ExploitPatch::rucharclean($_POST["packName"]); + $color = ExploitPatch::remove($dl->hex2RGB($_POST["color"], true)); + $stars = ExploitPatch::number($_POST["stars"]); + $coins = ExploitPatch::number($_POST["coins"]); + if(!is_numeric($_POST['level_1']) OR !is_numeric($_POST['level_2']) OR !is_numeric($_POST['level_3']) OR $stars > 10 OR $stars < 0 OR $coins > 2 OR $coins < 0 OR !$gs->getLevelName(ExploitPatch::remove($_POST['level_1'])) OR !$gs->getLevelName(ExploitPatch::remove($_POST['level_2'])) OR !$gs->getLevelName(ExploitPatch::remove($_POST['level_3']))) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'mod'); + die(); + } + $levels = ExploitPatch::number($_POST['level_1']) . ',' . ExploitPatch::number($_POST['level_2']) . ',' . ExploitPatch::number($_POST['level_3']); + switch($stars) { + case 1: + $diff = 0; + break; + case 2: + $diff = 1; + break; + case 3: + $diff = 2; + break; + case 4: + case 5: + $diff = 3; + break; + case 6: + case 7: + $diff = 4; + break; + case 8: + case 9: + $diff = 5; + break; + case 10: + $diff = 6; + break; + } + $query = $db->prepare("INSERT INTO mappacks (name, levels, stars, coins, difficulty, rgbcolors, colors2, timestamp) VALUES (:name, :levels, :stars, :coins, :diff, :rgb, :c2, :time)"); + $query->execute([':name' => $name, ':levels' => $levels, ':stars' => $stars, ':coins' => $coins, ':diff' => $diff, ':rgb' => $color, ':c2' => $color, ':time' => time()]); + $packID = $db->lastInsertId(); + $gs->sendLogsMapPackChangeWebhook($packID, $_SESSION['accountID']); + $query = $db->prepare("INSERT INTO modactions (type, value, timestamp, account, value2, value3, value4, value7) VALUES ('17',:value,:timestamp,:account,:levels, :stars, :coins, :rgb)"); + $query->execute([':value' => $name, ':timestamp' => time(), ':account' => $accountID, ':levels' => $levels, ':stars' => $stars, ':coins' => $coins, ':rgb' => $color]); + $success = $dl->getLocalizedString("packCreateSuccess").' '.$name."!"; + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'mod'); +} else { + $packs = $db->prepare("SELECT ID, name, stars, coins, rgbcolors FROM mappacks ORDER BY ID DESC"); + $packs->execute(); + $packs = $packs->fetchAll(); + foreach($packs as &$pack) $allPacks .= ''; + $dl->printSong(''.$dl->getLocalizedString("packCreateTitle").'
+ +++ ', 'mod'); +} +} else + $dl->printSong('++ '.$allPacks.' ++' . $dl->getLocalizedString("packCreateTitle") . '
+ ++', 'mod'); +?> \ No newline at end of file diff --git a/dashboard/levels/packs.php b/dashboard/levels/packs.php new file mode 100644 index 000000000..f54bc9300 --- /dev/null +++ b/dashboard/levels/packs.php @@ -0,0 +1,63 @@ +checkPermission($_SESSION["accountID"], 'dashboardLevelPackCreate')) { + switch(ExploitPatch::number($_GET["stars"])) { + case 1: + $diff = 0; + break; + case 2: + $diff = 1; + break; + case 3: + $diff = 2; + break; + case 4: + case 5: + $diff = 3; + break; + case 6: + case 7: + $diff = 4; + break; + case 8: + case 9: + $diff = 5; + break; + case 10: + $diff = 6; + break; + } + $levels = explode(',', ExploitPatch::remove($_GET["levels"])); + if(!$gs->getLevelName($levels[0]) OR !$gs->getLevelName($levels[1]) OR !$gs->getLevelName($levels[2])) die("-1"); + $color = explode(',', ExploitPatch::remove($_GET["color"])); + if($color[0] > 255) $color[0] = 255; elseif($color[0] < 0) $color[0] = 0; + if($color[1] > 255) $color[1] = 255; elseif($color[1] < 0) $color[1] = 0; + if($color[2] > 255) $color[2] = 255; elseif($color[2] < 0) $color[2] = 0; + $color = $color[0].','.$color[1].','.$color[2]; + if($_GET["stars"] > 10) $stars = 10; elseif($_GET["stars"] < 1) $stars = 1; else $stars = ExploitPatch::number($_GET["stars"]); + if($_GET["coins"] > 2) $coins = 2; elseif($_GET["coins"] < 1) $coins = 1; else $coins = ExploitPatch::number($_GET["coins"]); + $getPack = $db->prepare("SELECT * FROM mappacks WHERE ID = :packID"); + $getPack->execute([':packID' => $id]); + $getPack = $getPack->fetch(); + $change = $db->prepare("UPDATE mappacks SET name = :n, levels = :l, rgbcolors = :r, stars = :s, coins = :c, difficulty = :d WHERE id = :i"); + $change->execute([':n' => ExploitPatch::remove($_GET["name"]), ':l' => ExploitPatch::remove($_GET["levels"]), ':r' => $color, ':s' => $stars, ':c' => $coins, ':i' => $id, ':d' => $diff]); + $query = $db->prepare("INSERT INTO modactions (type, value, timestamp, account, value2, value3, value4, value7) VALUES ('21',:value,:timestamp,:account,:levels, :stars, :coins, :rgb)"); + $query->execute([':value' => ExploitPatch::remove($_GET["name"]), ':timestamp' => time(), ':account' => $_SESSION["accountID"], ':levels' => ExploitPatch::remove($_GET["levels"]), ':stars' => $stars, ':coins' => $coins, ':rgb' => $color]); + $gs->sendLogsMapPackChangeWebhook($id, $_SESSION['accountID'], $getPack); + echo 1; + } else { + $pck = $db->prepare("SELECT * FROM mappacks WHERE ID = :id"); + $pck->execute([':id' => $id]); + $map = $pck->fetch(); + echo $map["ID"].' | '.$map["name"].' | '.$map["stars"].' | '.$map["coins"].' | '.$map["rgbcolors"].' | '.$map["levels"]; + } +} +?> \ No newline at end of file diff --git a/dashboard/levels/rateLevel.php b/dashboard/levels/rateLevel.php new file mode 100644 index 000000000..9c07ee714 --- /dev/null +++ b/dashboard/levels/rateLevel.php @@ -0,0 +1,20 @@ + 10 || $stars < 0) header('Location: '.$_SERVER['HTTP_REFERER']); +$difficulty = $gs->getDiffFromStars($stars); +if($gs->checkPermission($_SESSION["accountID"], "actionRateStars")) { + $gs->featureLevel($_SESSION["accountID"], $levelID, $featured); + $gs->verifyCoinsLevel($_SESSION["accountID"], $levelID, 1); + $gs->rateLevel($_SESSION["accountID"], $levelID, $stars, $difficulty["diff"], $difficulty["auto"], $difficulty["demon"]); +} elseif($gs->checkPermission($_SESSION["accountID"], "actionSuggestRating")) $gs->suggestLevel($_SESSION["accountID"], $levelID, $difficulty["diff"], $stars, $featured, $difficulty["auto"], $difficulty["demon"]); +header('Location: '.$_SERVER['HTTP_REFERER']); +?> \ No newline at end of file diff --git a/dashboard/levels/shareCP.php b/dashboard/levels/shareCP.php new file mode 100644 index 000000000..0ddce385c --- /dev/null +++ b/dashboard/levels/shareCP.php @@ -0,0 +1,109 @@ +printFooter('../'); +$dl->title($dl->getLocalizedString("shareCPTitle")); +if($gs->checkPermission($_SESSION["accountID"], "commandSharecpAll")){ +if(!empty($_POST["username"]) AND !empty($_POST["level"])) { + if(!Captcha::validateCaptcha()) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'mod'); + die(); + } + $userID = ExploitPatch::number($_POST["username"]); + $level = ExploitPatch::number($_POST["level"]); + $query = $db->prepare("SELECT * FROM cpshares WHERE levelID = :level AND userID = :user"); + $query->execute([':level' => $level, ':user' => $userID]); + $res = $query->fetchAll(); + if(count($res) != 0) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'mod'); + die(); + } + $query = $db->prepare("SELECT * FROM levels WHERE levelID = :level AND userID = :user"); + $query->execute([':level' => $level, ':user' => $userID]); + $res = $query->fetchAll(); + if(count($res) != 0) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'mod'); + die(); + } + $query = $db->prepare("SELECT IP FROM users WHERE userID = :user"); + $query->execute([':user' => $userID]); + $query = $query->fetchColumn(); + $res = $gs->getPersonBan($gs->getExtID($userID), $userID, 1, $query); + if($res) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'mod'); + die(); + } + $accountID = $_SESSION["accountID"]; + $query = $db->prepare("INSERT INTO cpshares (levelID, userID) VALUES (:level, :user)"); + $query->execute([':level' => $level, ':user' => $userID]); + $query = $db->prepare("UPDATE levels SET isCPShared = 1 WHERE levelID = :level"); + $query->execute([':level' => $level]); + $username = $gs->getAccountName($userID); + $query = $db->prepare("INSERT INTO modactions (type, value, timestamp, account, value3) VALUES ('11',:value,:timestamp,:account,:level)"); + $query->execute([':value' => $username, ':timestamp' => time(), ':account' => $accountID, ':level' => $level]); + $query = $db->prepare("SELECT levelName FROM levels WHERE levelID=:level"); + $query->execute([':level' => $level]); + $res = $query->fetch(); + $level = $res["levelName"]; + $success = sprintf($dl->getLocalizedString("shareCPSuccessNew"), $level, $username); + if($automaticCron) Cron::updateCreatorPoints($_SESSION['accountID'], false); + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'mod'); +} else { + $dl->printSong(''.$dl->getLocalizedString("shareCPTitle").'
+ ++', 'mod'); +} +} else + $dl->printSong('' . $dl->getLocalizedString("shareCPTitle") . '
+ ++', 'mod'); +?> \ No newline at end of file diff --git a/dashboard/levels/vaultCodes.php b/dashboard/levels/vaultCodes.php new file mode 100644 index 000000000..b9a9e595c --- /dev/null +++ b/dashboard/levels/vaultCodes.php @@ -0,0 +1,214 @@ +title($dl->getLocalizedString("vaultCodesTitle")); +$dl->printFooter('../'); +$allVaultCodes = $vaultCodeName = $vaultCodeRewards = $vaultCodeUses = $vaultCodeDuration = ''; +if(isset($_GET['rewardID']) && !isset($_POST['rewardID'])) $_POST['rewardID'] = $_GET['rewardID']; +if(!$gs->checkPermission($_SESSION["accountID"], "dashboardVaultCodesManage")) exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'mod')); +if(isset($_POST['vaultCodeName']) && isset($_POST['vaultCodeRewards'])) { + if(!Captcha::validateCaptcha()) exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'mod')); + $vaultCodeName = base64_encode(trim(ExploitPatch::rucharclean($_POST['vaultCodeName']))); + $vaultCodeRewards = ExploitPatch::numbercolon($_POST['vaultCodeRewards']); + $vaultCodeUses = $_POST['vaultCodeUses'] > 0 ? ExploitPatch::number($_POST['vaultCodeUses']) : '-1'; + $vaultCodeDuration = !empty($_POST['vaultCodeDuration']) ? (new DateTime($_POST['vaultCodeDuration']))->getTimestamp() : 0; + if(empty($_POST['rewardID'])) { + $checkName = $db->prepare('SELECT count(*) FROM vaultcodes WHERE code LIKE :code'); + $checkName->execute([':code' => $vaultCodeName]); + $checkName = $checkName->fetchColumn(); + if($checkName) exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'mod')); + $insertCode = $db->prepare('INSERT INTO vaultcodes (code, rewards, duration, uses, timestamp) VALUES (:code, :rewards, :duration, :uses, :timestamp)'); + $insertCode->execute([':code' => $vaultCodeName, ':rewards' => $vaultCodeRewards, ':duration' => $vaultCodeDuration, ':uses' => $vaultCodeUses, ':timestamp' => time()]); + $rewardID = $db->lastInsertId(); + $query = $db->prepare("INSERT INTO modactions (type, value, value2, value4, value5, value6, timestamp, account) VALUES ('42', :value, :value2, :value4, :value5, :value6, :timestamp, :accountID)"); + $query->execute([':value' => $vaultCodeName, ':value2' => $vaultCodeRewards, ':value4' => $vaultCodeDuration, ':value5' => $vaultCodeUses, ':value6' => $rewardID, ':timestamp' => time(), ':accountID' => $_SESSION['accountID']]); + $rewardID = $vaultCodeName = $vaultCodeRewards = $vaultCodeUses = $vaultCodeDuration = ''; + } else { + $rewardID = ExploitPatch::number($_POST['rewardID']); + $checkName = $db->prepare('SELECT count(*) FROM vaultcodes WHERE code LIKE :code AND rewardID != :rewardID'); + $checkName->execute([':code' => $vaultCodeName, ':rewardID' => $rewardID]); + $checkName = $checkName->fetchColumn(); + if($checkName) exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'mod')); + $insertCode = $db->prepare('UPDATE vaultcodes SET code = :code, rewards = :rewards, duration = :duration, uses = :uses WHERE rewardID = :rewardID'); + $insertCode->execute([':code' => $vaultCodeName, ':rewards' => $vaultCodeRewards, ':duration' => $vaultCodeDuration, ':uses' => $vaultCodeUses, ':rewardID' => $rewardID]); + $query = $db->prepare("INSERT INTO modactions (type, value, value2, value4, value5, value6, timestamp, account) VALUES ('43', :value, :value2, :value4, :value5, :value6, :timestamp, :accountID)"); + $query->execute([':value' => $vaultCodeName, ':value2' => $vaultCodeRewards, ':value4' => $vaultCodeDuration, ':value5' => $vaultCodeUses, ':value6' => $rewardID, ':timestamp' => time(), ':accountID' => $_SESSION['accountID']]); + } +} +if(!empty($_POST['rewardID'])) { + $rewardID = ExploitPatch::number($_POST['rewardID']); + $getVaultCode = $db->prepare('SELECT * FROM vaultcodes WHERE rewardID = :rewardID'); + $getVaultCode->execute([':rewardID' => $rewardID]); + $getVaultCode = $getVaultCode->fetch(); + if($getVaultCode) { + $vaultCodeName = htmlspecialchars(base64_decode($getVaultCode['code'])); + $vaultCodeUses = $getVaultCode['uses']; + $vaultCodeRewards = $getVaultCode['rewards']; + $vaultCodeDuration = !empty($getVaultCode['duration']) ? date('Y-m-d\TH:i:s', $getVaultCode['duration']) : ''; + } +} +$rewardTypes = $gs->getRewardTypes(); +$vaultCodes = $db->prepare("SELECT * FROM vaultcodes ORDER BY rewardID ASC"); +$vaultCodes->execute(); +$vaultCodes = $vaultCodes->fetchAll(); +foreach($vaultCodes as &$vaultCode) { + $allVaultCodes .= ''; +} +$rewardTypesOptions = ''; +foreach($rewardTypes AS $rewardType => $rewardText) { + if(empty($rewardText)) continue; + $rewardTypesOptions .= ''; +} +$dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ +++', 'mod'); +?> \ No newline at end of file diff --git a/dashboard/login/activate.php b/dashboard/login/activate.php new file mode 100644 index 000000000..110eda865 --- /dev/null +++ b/dashboard/login/activate.php @@ -0,0 +1,147 @@ +title($dl->getLocalizedString("activateAccount")); +$dl->printFooter('../'); +if(!$preactivateAccounts) { +if(!isset($_SESSION["accountID"]) OR $_SESSION["accountID"] == 0){ +if($mailEnabled) { + if(isset($_GET["mail"])) { + $mail = ExploitPatch::remove(explode('/', $_GET["mail"])[count(explode('/', $_GET["mail"]))-1]); + $check = $db->prepare("SELECT * FROM accounts WHERE mail = :mail"); + $check->execute([':mail' => $mail]); + $check = $check->fetch(); + if(empty($check)) { + $gs->logAction(0, 4, 1); + $dl->printSong('+++ '.$allVaultCodes.' ++++'.$dl->getLocalizedString((!empty($rewardID) ? 'vaultCodesEditTitle' : 'vaultCodesTitle')).'
+ + ++'); + die(); + } else { + $query = $db->prepare("UPDATE accounts SET isActive = '1', mail = 'activated' WHERE accountID = :acc"); + $query->execute([':acc' => $check["accountID"]]); + $gs->logAction($check["accountID"], 3, 1); + $gs->sendLogsAccountChangeWebhook($check['accountID'], $check['accountID'], $check); + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
++'); + die(); + } + } + die($dl->printSong(''.$dl->getLocalizedString("activateAccount").'
++')); +} +if(!empty($_POST["userName"]) && !empty($_POST["password"])){ + if(!Captcha::validateCaptcha()) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++'); + die(); + } + $userName = ExploitPatch::charclean($_POST["userName"]); + $password = $_POST["password"]; + $pass = GeneratePass::isValidUsrname($userName, $password); + $getAccountData = $db->prepare('SELECT * FROM accounts WHERE userName LIKE :userName'); + $getAccountData->execute([':userName' => $userName]); + $getAccountData = $getAccountData->fetch(); + if($pass == '-2') { + $query = $db->prepare("UPDATE accounts SET isActive = 1 WHERE userName LIKE :userName"); + $query->execute(['userName' => $userName]); + $gs->logAction($getAccountData["accountID"], 3, 1); + $gs->sendLogsAccountChangeWebhook($getAccountData['accountID'], $getAccountData['accountID'], $getAccountData); + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++'); + } + elseif ($pass == 1) { + $gs->logAction($getAccountData["accountID"], 4, 1); + $dl->printSong(''.$dl->getLocalizedString("activateAccount").'
++'); + } else { + if($getAccountData) $gs->logAction($getAccountData["accountID"], 4, 2); + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
++'); + } +} else { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+++ '; +} +} else { + $dl->printSong(''.$dl->getLocalizedString("activateAccount").'
++'); +} +} else { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++'); +} +?> \ No newline at end of file diff --git a/dashboard/login/api.php b/dashboard/login/api.php new file mode 100644 index 000000000..badabc2b6 --- /dev/null +++ b/dashboard/login/api.php @@ -0,0 +1,3 @@ + \ No newline at end of file diff --git a/dashboard/login/forgotPassword.php b/dashboard/login/forgotPassword.php new file mode 100644 index 000000000..88acdbd35 --- /dev/null +++ b/dashboard/login/forgotPassword.php @@ -0,0 +1,194 @@ +title($dl->getLocalizedString("forgotPasswordTitle")); +$dl->printFooter('../'); +if(isset($_SESSION["accountID"]) AND $_SESSION["accountID"] > 0) { + exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++')); +} +if(!$mailEnabled) { + exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++')); +} +if(!empty(ExploitPatch::charclean($_POST['code'])) AND !empty($_POST['password']) AND !empty($_POST['repeatpassword'])) { + if(!Captcha::validateCaptcha()) { + exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++')); + } + $code = ExploitPatch::charclean($_POST['code']); + $accountID = $db->prepare("SELECT accountID FROM accounts WHERE passCode = :code"); + $accountID->execute([':code' => $code]); + $accountID = $accountID->fetchColumn(); + if(empty($accountID)) { + exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++')); + } + $pass = $_POST['password']; + $repeatPass = $_POST['repeatpassword']; + if($pass !== $repeatPass) { + exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
++')); + } + $passhash = password_hash($pass, PASSWORD_DEFAULT); + $gjp2 = GeneratePass::GJP2hash($pass); + $auth = $gs->randomString(8); + $query = $db->prepare("UPDATE accounts SET password = :password, gjp2 = :gjp, auth = :auth, passCode = '' WHERE accountID = :id"); + $test = $query->execute([':auth' => $auth, ':password' => $passhash, ':id' => $accountID, ':gjp' => $gjp2]); + var_dump($test); + exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++')); +} +if(!empty($_GET['code'])) { + $code = ExploitPatch::charclean(explode('/', $_GET["code"])[count(explode('/', $_GET["code"]))-1]); + $check = $db->prepare("SELECT accountID FROM accounts WHERE passCode = :code"); + $check->execute([':code' => $code]); + $check = $check->fetch(); + if(empty($check) || empty($code)) { + exit($dl->printSong(''.$dl->getLocalizedString("forgotPasswordChangeTitle").'
++')); + } else { + exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+++ ')); + } +} +if(!empty($_POST['username']) && !empty($_POST['email'])) { + if(!Captcha::validateCaptcha()) { + exit($dl->printSong(''.$dl->getLocalizedString("forgotPasswordChangeTitle").'
+ ++')); + } + $username = ExploitPatch::charclean($_POST["username"]); + $email = ExploitPatch::rucharclean($_POST["email"]); + $check = $db->prepare("SELECT accountID FROM accounts WHERE userName LIKE :username AND email LIKE :email"); + $check->execute([':username' => $username, ':email' => $email]); + $check = $check->fetch(); + if($check) { + $code = $gs->randomString(6); + $sendCode = $db->prepare("UPDATE accounts SET passCode = :code WHERE accountID = :id"); + $sendCode->execute([':code' => $code, ':id' => $check['accountID']]); + $gs->mail($email, $username, $code); + } + exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++')); +} else { + $dl->printSong(''.$dl->getLocalizedString("forgotPasswordTitle").'
+ +++ '); +} +?> \ No newline at end of file diff --git a/dashboard/login/login.php b/dashboard/login/login.php index 3af5bbe1a..c645c954a 100644 --- a/dashboard/login/login.php +++ b/dashboard/login/login.php @@ -1,50 +1,169 @@ printLoginBox("'.$dl->getLocalizedString("forgotPasswordTitle").'
+ +You are already logged in. Click here to continue
"); - exit(); +if(isset($_SESSION["accountID"]) && $_SESSION["accountID"] != 0) header('Location: ../'); +if(isset($_POST["resendMailUserName"]) && isset($_POST["resendMailEmail"]) && $mailEnabled) { + $dl->title($dl->getLocalizedString("resendMailTitle")); + $dl->printFooter('../'); + if(!Captcha::validateCaptcha()) { + exit($dl->printSong('+')); + } + $userName = ExploitPatch::charclean($_POST["resendMailUserName"]); + $email = ExploitPatch::rucharclean($_POST["resendMailEmail"]); + $check = $db->prepare('SELECT count(*) FROM accounts WHERE userName = :username AND email = :email AND isActive = 0'); + $check->execute([':username' => $userName, ':email' => $email]); + $check = $check->fetchColumn(); + if($check) $gs->mail($email, $userName); + exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++')); } -if(isset($_POST["userName"]) AND isset($_POST["password"])){ - $userName = $_POST["userName"]; +if(isset($_POST["userName"]) && isset($_POST["password"])) { + $userName = ExploitPatch::charclean($_POST["userName"]); $password = $_POST["password"]; $valid = GeneratePass::isValidUsrname($userName, $password); - if($valid != 1){ - $dl->printLoginBoxInvalid(); - exit(); + if($valid != 1) { + $dl->title($dl->getLocalizedString("loginBox")); + $dl->printFooter('../'); + if($valid == -2) { + if($mailEnabled) $dl->printSong(''.$dl->getLocalizedString("resendMailTitle").'
+ ++'); + else $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++'); + die(); + } + if($valid == -1) { + $accountID = $gs->getAccountIDFromName($userName); + $userID = $gs->getUserID($accountID, $userName); + $checkBan = $gs->getPersonBan($accountID, $userID, 4); + if($checkBan) { + exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++')); + } + } + exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++')); } $accountID = $gs->getAccountIDFromName($userName); - if($accountID == 0){ - $dl->printLoginBoxError("Invalid accountID"); - exit(); - } - $_SESSION["accountID"] = $accountID; - if(isset($_POST["ref"])){ - header('Location: ' . $_POST["ref"]); - }elseif(isset($_SERVER["HTTP_REFERER"])){ - header('Location: ' . $_SERVER["HTTP_REFERER"]); - } - $dl->printLoginBox("'.$dl->getLocalizedString("errorGeneric").'
+ +You are now logged in. Please click here to continue.
"); -}else{ - $loginbox = ''; - $dl->printLoginBox($loginbox); + $dl->title($dl->getLocalizedString("loginBox")); + $dl->printSong('+'); } -?> +?> \ No newline at end of file diff --git a/dashboard/login/logout.php b/dashboard/login/logout.php index 0d5cc7f2a..6913e9ad3 100644 --- a/dashboard/login/logout.php +++ b/dashboard/login/logout.php @@ -1,10 +1,7 @@ printLoginBox("'.$dl->getLocalizedString("loginBox").'
+ + +You are now logged out. Click here to continue
"); +setcookie('auth', 'no', 2147483647, '/'); +if(!empty($_SERVER["HTTP_REFERER"])) header('Location: '.$_SERVER["HTTP_REFERER"]); +else header('Location: ../'); ?> \ No newline at end of file diff --git a/dashboard/login/register.php b/dashboard/login/register.php new file mode 100644 index 000000000..c4799fadc --- /dev/null +++ b/dashboard/login/register.php @@ -0,0 +1,230 @@ +title($dl->getLocalizedString("registerAcc")); +$dl->printFooter('../'); +if(Automod::isAccountsDisabled(0)) exit($dl->printSong('+')); +if(!isset($_SESSION["accountID"]) OR $_SESSION["accountID"] == 0) { +if(!isset($preactivateAccounts)) $preactivateAccounts = false; +if(!isset($filterUsernames)) global $filterUsernames; +// here begins the checks +if(!empty($_POST["username"]) AND !empty($_POST["email"]) AND !empty($_POST["repeatemail"]) AND !empty($_POST["password"]) AND !empty($_POST["repeatpassword"])){ + if(!Captcha::validateCaptcha()) { + exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++')); + } + $username = str_replace(' ', '', ExploitPatch::charclean($_POST["username"])); + $password = $_POST["password"]; + $repeat_password = $_POST["repeatpassword"]; + $email = ExploitPatch::rucharclean($_POST["email"]); + $repeat_email = ExploitPatch::rucharclean($_POST["repeatemail"]); + if($filterUsernames >= 1) { + $bannedUsernamesList = array_map('strtolower', $bannedUsernames); + switch($filterUsernames) { + case 1: + if(in_array(strtolower($username), $bannedUsernamesList)) exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++')); + break; + case 2: + foreach($bannedUsernamesList as $bannedUsername) { + if(!empty($bannedUsername) && mb_strpos(strtolower($username), $bannedUsername) !== false) exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++')); + } + } + } + if(strlen($username) < 3) { + exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++')); + } + if(strlen($username) > 20) { + exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++')); + } + if(strlen($password) < 6) { + exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++')); + } else { + $query = $db->prepare("SELECT count(*) FROM accounts WHERE userName LIKE :userName"); + $query->execute([':userName' => $username]); + $registred_users = $query->fetchColumn(); + if($registred_users > 0){ + exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++')); + } else { + if($password != $repeat_password){ + exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++')); + } elseif($email != $repeat_email){ + exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++')); + }else{ + if($mailEnabled) { + $checkMail = $db->prepare("SELECT count(*) FROM accounts WHERE email LIKE :mail"); + $checkMail->execute([':mail' => $email]); + $checkMail = $checkMail->fetchColumn(); + if($checkMail > 0) exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++')); + } + $hashpass = password_hash($password, PASSWORD_DEFAULT); + $gjp2 = GeneratePass::GJP2hash($password); + $query2 = $db->prepare("INSERT INTO accounts (userName, password, email, registerDate, isActive, gjp2) + VALUES (:userName, :password, :email, :time, :isActive, :gjp)"); + $query2->execute([':userName' => $username, ':password' => $hashpass, ':email' => $email, ':time' => time(), ':isActive' => $preactivateAccounts ? 1 : 0, ':gjp' => $gjp2]); + $accountID = $db->lastInsertId(); + $gs->logAction($accountID, 1, $username, $email, $gs->getUserID($accountID, $username)); + $gs->sendLogsRegisterWebhook($accountID); + if($mailEnabled) { + $gs->mail($email, $username); + exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++')); + } else exit($dl->printSong(''.$dl->getLocalizedString("registerAcc").'
+ ++')); + } + } + } +}else{ + $dl->printSong(''.$dl->getLocalizedString("registerAcc").'
+ +++ '); +} +} else { + $dl->printSong(''.$dl->getLocalizedString("registerAcc").'
+ ++'); +} +?> \ No newline at end of file diff --git a/dashboard/messenger/.htaccess b/dashboard/messenger/.htaccess new file mode 100644 index 000000000..69b112001 --- /dev/null +++ b/dashboard/messenger/.htaccess @@ -0,0 +1,4 @@ +RewriteEngine On +RewriteCond %{REQUEST_FILENAME} !-f +RewriteCond %{REQUEST_FILENAME} !-d +RewriteRule ^ %{REQUEST_URI}/../../messenger/?id=%{REQUEST_URI} [L] diff --git a/dashboard/messenger/index.php b/dashboard/messenger/index.php new file mode 100644 index 000000000..9f50fb298 --- /dev/null +++ b/dashboard/messenger/index.php @@ -0,0 +1,316 @@ +printFooter('../'); +if(!isset($_POST["receiver"])) { + $getID = str_replace('%20', ' ', explode("/", $_GET["id"])[count(explode("/", $_GET["id"]))-1]); + $receiver = ExploitPatch::charclean($getID); + if(!empty($receiver)) { + if(is_numeric($receiver)) $_POST["receiver"] = ExploitPatch::number($receiver); + else $_POST["receiver"] = $gs->getAccountIDFromName(ExploitPatch::charclean($receiver)); + } +} +$allChats = ''.$dl->getLocalizedString("errorGeneric").'
+ ++ +'; +$allChatsEmpty = true; +$friendsChats = '+ +'; +$friendsChatsEmpty = true; +$alertScript = ''; +$chatBox = '+ +'; +$pageScript = 'function friendsList() { + if(window.currentMessengerTab == "chats") { + document.getElementById("lastChats").classList.add("hide"); + document.getElementById("friendsChats").classList.remove("hide"); + window.currentMessengerTab = "friends"; + if(friendsChatsEmpty) document.getElementById("itemoverflow").classList.add("empty-itemoverflow"); + else document.getElementById("itemoverflow").classList.remove("empty-itemoverflow"); + } else { + document.getElementById("lastChats").classList.remove("hide"); + document.getElementById("friendsChats").classList.add("hide"); + window.currentMessengerTab = "chats"; + if(allChatsEmpty) document.getElementById("itemoverflow").classList.add("empty-itemoverflow"); + else document.getElementById("itemoverflow").classList.remove("empty-itemoverflow"); + } +}'; +if($msgEnabled == 0) { + $dl->title($dl->getLocalizedString("messenger")); + exit($dl->printSong(''.$dl->getLocalizedString('chooseChat').'
++', 'msg')); +} +if(!isset($_SESSION["accountID"]) || $_SESSION["accountID"] == 0) { + $dl->title($dl->getLocalizedString("messenger")); + exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'msg')); +} +if($_POST['receiver'] != 0 && ExploitPatch::number($_POST['receiver']) != $_SESSION['accountID'] && !empty($gs->getAccountName(ExploitPatch::number($_POST['receiver'])))) { + $receiver = ExploitPatch::number($_POST['receiver']); + $receiverUsername = $gs->getAccountName($receiver); + if(isset($_POST['subject']) && isset($_POST['body'])) { + $checkBan = $gs->getPersonBan($_SESSION['accountID'], $gs->getUserID($_SESSION['accountID']), 3); + if($checkBan) exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++')); + $subject = ExploitPatch::url_base64_encode(trim(ExploitPatch::rucharclean($_POST["subject"]))); + $body = ExploitPatch::rucharclean($_POST["body"]); + if(Automod::isAccountsDisabled(3)) { + $alertScript = $dl->getLocalizedString('messagingIsDisabled'); + $subject = $body = ""; + } + if(is_numeric(mb_substr($body, -3)) && !is_numeric(mb_substr($body, -4))) $body .= ' '; + $body = base64_encode(trim($xor->cipher($body, 14251))); + $query = $db->prepare("SELECT timestamp FROM messages WHERE accID = :accountID AND toAccountID = :toAccountID ORDER BY timestamp DESC LIMIT 1"); + $query->execute([':accountID' => $_SESSION['accountID'], ':toAccountID' => $receiver]); + $res = $query->fetch(); + $time = time() - 3; + if($res["timestamp"] > $time) { + $alertScript = $dl->getLocalizedString("tooFast"); + $subject = $body = ""; + } + $privacySettings = $db->prepare("SELECT mS FROM accounts WHERE accountID = :receiver"); + $privacySettings->execute([':receiver' => $receiver]); + $privacySettings = $privacySettings->fetchColumn(); + $block = $db->prepare("SELECT count(*) FROM blocks WHERE (person1 = :receiver AND person2 = :accountID) OR (person2 = :receiver AND person1 = :accountID)"); + $block->execute([':receiver' => $receiver, ':accountID' => $_SESSION['accountID']]); + $block = $block->fetchColumn(); + if(($privacySettings == 1 && !$gs->isFriends($receiver, $_SESSION["accountID"])) || $privacySettings == 2 || $block > 0) { + $alertScript = $dl->getLocalizedString("cantMessage"); + $subject = $body = ""; + } + if(!empty($subject) && !empty($body) && !empty($receiverUsername)) { + $query = $db->prepare("INSERT INTO messages (userID, userName, body, subject, accID, toAccountID, timestamp, secret, isNew) + VALUES (:userID, :userName, :body, :subject, :accountID, :receiver, :time, 'Wmfd2893gb7', '0')"); + $query->execute([':userID' => $gs->getUserID($_SESSION['accountID']), ':userName' => $gs->getAccountName($_SESSION['accountID']), ':body' => $body, ':subject' => $subject, ':accountID' => $_SESSION['accountID'], ':receiver' => $receiver, 'time' => time()]); + } + } + if($_POST['deleteMessage']) { + $deleteMessageID = ExploitPatch::number($_POST['deleteMessage']); + $messageCheck = $db->prepare("SELECT count(*) FROM messages WHERE toAccountID = :receiver AND accID = :accountID AND messageID = :messageID"); + $messageCheck->execute([':receiver' => $receiver, ':accountID' => $_SESSION['accountID'], ':messageID' => $deleteMessageID]); + $messageCheck = $messageCheck->fetchColumn(); + if($messageCheck) { + $deleteMessage = $db->prepare("DELETE FROM messages WHERE messageID = :messageID"); + $deleteMessage->execute([':messageID' => $deleteMessageID]); + } + } + $query = $db->prepare("SELECT * FROM messages WHERE (accID = :accountID AND toAccountID = :receiver) OR (accID = :receiver AND toAccountID = :accountID) ORDER BY timestamp ASC"); + $query->execute([':accountID' => $_SESSION['accountID'], ':receiver' => $receiver]); + $result = $query->fetchAll(); + foreach($result AS &$messages) { + $div = $messages["accID"] == $_SESSION['accountID'] ? 'you' : 'notyou'; + $subject = htmlspecialchars(ExploitPatch::url_base64_decode($messages["subject"])); + $body = $dl->parseMessage(htmlspecialchars($xor->plaintext(ExploitPatch::url_base64_decode($messages["body"]), 14251))); + $replyToMessageButton = $deleteMessageButton = $wasReadIcon = ''; + if($div == 'notyou') $replyToMessageButton = ''; + else { + $deleteMessageButton = ''; + $wasReadIcon = ''.$dl->getLocalizedString("errorGeneric").'
+ +• '; + } + $chatMessages .= ''; + } + if(empty($chatMessages)) $chatMessages = '+ +'; + $readAllMessages = $db->prepare("UPDATE messages SET isNew = 1, readTime = :readTime WHERE accID = :receiver AND toAccountID = :accountID AND readTime = 0"); + $readAllMessages->execute([':receiver' => $receiver, ':accountID' => $_SESSION['accountID'], ':readTime' => time()]); + $chatBox = ''.$dl->getLocalizedString('noMsgs').'
++ ++'.$receiverUsername.'
+ +'.$chatMessages.'+ '; + $dl->title($dl->getLocalizedString("messenger").", ".$receiverUsername); + $pageScript .= PHP_EOL.'var element = document.getElementById("chatMessages"); + element.scrollTop = element.scrollHeight; + var scrollAll = document.getElementById("chat-opened-all"); + if(scrollAll !== null) scrollAll.scrollIntoView(); + var scrollFriends = document.getElementById("chat-opened-friends"); + if(scrollFriends !== null) scrollFriends.scrollIntoView(); + $(document).on("keyup keypress change keydown", function() { + const p1 = document.getElementById("chatSubject"); + const p2 = document.getElementById("chatBody"); + const btn = document.getElementById("chatSubmit"); + if(!p1.value.trim().length || !p2.value.trim().length) { + btn.disabled = true; + btn.classList.add("btn-block"); + btn.classList.remove("btn-primary"); + } else { + btn.removeAttribute("disabled"); + btn.classList.remove("btn-block"); + btn.classList.remove("btn-size"); + btn.classList.add("btn-primary"); + } + }); + function replyToMessage(messageID) { + messageSubject = document.getElementById("messageSubject" + messageID).innerHTML; + if(!messageSubject.startsWith("Re:")) messageSubject = "Re: " + messageSubject; + document.getElementById("chatSubject").value = messageSubject; + document.getElementById("chatBody").focus(); + } + function deleteMessage(messageID) { + document.getElementById("deleteMessage").value = messageID; + a("messenger/'.$receiverUsername.'", true, true, "POST"); + } + '.(!empty($alertScript) ? 'alert("'.$alertScript.'");' : '').''; +} +$query = $db->prepare("SELECT * FROM messages, (SELECT max(messageID) messageIDs, (CASE WHEN accID = :accountID THEN toAccountID ELSE accID END) receiverID FROM messages WHERE accID = :accountID OR toAccountID = :accountID GROUP BY receiverID ORDER BY timestamp DESC) messageIDs WHERE messageID = messageIDs ORDER BY timestamp DESC"); +$query->execute([':accountID' => $_SESSION['accountID']]); +$result = $query->fetchAll(); +$playersLastMessage = []; +if(!empty($result)) { + $allChats = ''; + $allChatsEmpty = false; +} +foreach($result AS &$chat) { + $youreLast = $chat['accID'] != $_SESSION['accountID'] ? false : true; + $receiver = $chat['receiverID']; + $username = !$youreLast ? $chat['userName'] : $gs->getAccountName($chat['receiverID']); + $body = ($youreLast ? $dl->getLocalizedString("messengerYou").' ' : '').htmlspecialchars($xor->plaintext(ExploitPatch::url_base64_decode($chat["body"]), 14251)); + if(strlen($body) > 50) $body = mb_substr($body, 0, 50).'...'; + $playersLastMessage[$receiver] = $body; + // Avatar management + $queryAvatar = $db->prepare("SELECT iconType, accIcon, accShip, accBall, accBird, accDart, accRobot, accSpider, accSwing, accJetpack, color1, color2, color3, accGlow FROM users WHERE extID = :accountID"); + $queryAvatar->execute([':accountID' => $receiver]); + if($action = $queryAvatar->fetch()) { + $iconType = ($action['iconType'] > 8) ? 0 : $action['iconType']; + $iconTypeMap = [0 => ['type' => 'cube', 'value' => $action['accIcon']], 1 => ['type' => 'ship', 'value' => $action['accShip']], 2 => ['type' => 'ball', 'value' => $action['accBall']], 3 => ['type' => 'ufo', 'value' => $action['accBird']], 4 => ['type' => 'wave', 'value' => $action['accDart']], 5 => ['type' => 'robot', 'value' => $action['accRobot']], 6 => ['type' => 'spider', 'value' => $action['accSpider']], 7 => ['type' => 'swing', 'value' => $action['accSwing']], 8 => ['type' => 'jetpack', 'value' => $action['accJetpack']]]; + $iconValue = $iconTypeMap[$iconType]['value'] ?: 1; + $avatarImg = ' . ')
';
+ }
+ // Badge management
+ $badgeImg = '';
+ $queryRoleID = $db->prepare("SELECT roleID FROM roleassign WHERE accountID = :accountID");
+ $queryRoleID->execute([':accountID' => $receiver]);
+ if($roleAssignData = $queryRoleID->fetch()) {
+ $queryBadgeLevel = $db->prepare("SELECT modBadgeLevel FROM roles WHERE roleID = :roleID");
+ $queryBadgeLevel->execute([':roleID' => $roleAssignData['roleID']]);
+ if(($modBadgeLevel = $queryBadgeLevel->fetchColumn() ?? 0) >= 1 && $modBadgeLevel <= 3) {
+ $badgeImg = '';
+ }
+ }
+ $newMessage = $db->prepare("SELECT min(isNew) newMessage, count(*) messageCount FROM messages WHERE accID = :receiver AND toAccountID = :accountID");
+ $newMessage->execute([':receiver' => $receiver, ':accountID' => $_SESSION['accountID']]);
+ $newMessage = $newMessage->fetch();
+ $newMessages = '';
+ if($newMessage['newMessage'] == 0 && $newMessage['messageCount'] > 0) {
+ $newMessagesCount = $db->prepare('SELECT count(*) FROM messages WHERE accID = :receiver AND toAccountID = :accountID AND isNew = 0');
+ $newMessagesCount->execute([':receiver' => $receiver, ':accountID' => $_SESSION['accountID']]);
+ $newMessagesCount = $newMessagesCount->fetchColumn();
+ $newMessages = '';
+ }
+ $allChats .= '
+ ';
+}
+$friends = $db->prepare("SELECT * FROM friendships INNER JOIN users ON users.extID = (CASE WHEN person1 = :accountID THEN person2 ELSE person1 END) WHERE person1 = :accountID OR person2 = :accountID ORDER BY userName ASC");
+$friends->execute([':accountID' => $_SESSION['accountID']]);
+$friends = $friends->fetchAll();
+if(!empty($friends)) {
+ $friendsChats = '';
+ $friendsChatsEmpty = false;
+}
+foreach($friends AS &$friend) {
+ $receiver = $friend['extID'];
+ $username = $friend['userName'];
+ $body = isset($playersLastMessage[$receiver]) ? $playersLastMessage[$receiver] : $dl->getLocalizedString('noMsgs');
+ // Avatar management
+ $queryAvatar = $db->prepare("SELECT iconType, accIcon, accShip, accBall, accBird, accDart, accRobot, accSpider, accSwing, accJetpack, color1, color2, color3, accGlow FROM users WHERE extID = :accountID");
+ $queryAvatar->execute([':accountID' => $receiver]);
+ if($action = $queryAvatar->fetch()) {
+ $iconType = ($action['iconType'] > 8) ? 0 : $action['iconType'];
+ $iconTypeMap = [0 => ['type' => 'cube', 'value' => $action['accIcon']], 1 => ['type' => 'ship', 'value' => $action['accShip']], 2 => ['type' => 'ball', 'value' => $action['accBall']], 3 => ['type' => 'ufo', 'value' => $action['accBird']], 4 => ['type' => 'wave', 'value' => $action['accDart']], 5 => ['type' => 'robot', 'value' => $action['accRobot']], 6 => ['type' => 'spider', 'value' => $action['accSpider']], 7 => ['type' => 'swing', 'value' => $action['accSwing']], 8 => ['type' => 'jetpack', 'value' => $action['accJetpack']]];
+ $iconValue = $iconTypeMap[$iconType]['value'] ?: 1;
+ $avatarImg = '';
+ }
+ // Badge management
+ $badgeImg = '';
+ $queryRoleID = $db->prepare("SELECT roleID FROM roleassign WHERE accountID = :accountID");
+ $queryRoleID->execute([':accountID' => $receiver]);
+ if($roleAssignData = $queryRoleID->fetch()) {
+ $queryBadgeLevel = $db->prepare("SELECT modBadgeLevel FROM roles WHERE roleID = :roleID");
+ $queryBadgeLevel->execute([':roleID' => $roleAssignData['roleID']]);
+ if(($modBadgeLevel = $queryBadgeLevel->fetchColumn() ?? 0) >= 1 && $modBadgeLevel <= 3) {
+ $badgeImg = '';
+ }
+ }
+ $friendsChats .= '
+ ';
+}
+$dl->printSong('+ +++++ '.$chatBox.' +++', 'profile'); + die(); +} +if(!empty($_POST["accountID"])) { + $accid = ExploitPatch::remove($_POST["accountID"]); + if(!is_numeric($accid)) $userID = $gs->getUserID($accid); +} +elseif(isset($_GET["id"])) { + $dl->printFooter('../../'); + $getID = explode("/", $_GET["id"])[count(explode("/", $_GET["id"]))-1]; + if($getID == "settings") { + $getID = explode("/", $_GET["id"])[count(explode("/", $_GET["id"]))-2]; + $_POST["settings"] = 1; + } + $accid = ExploitPatch::charclean($getID); + if(!is_numeric($accid)) $accid = $gs->getAccountIDFromName(str_replace('%20', ' ', $accid)); + if(!$accid) { + $userCheck = $db->prepare("SELECT * FROM users WHERE userName = :name LIMIT 1"); + $userCheck->execute([":name" => ExploitPatch::remove($getID)]); + $userCheck = $userCheck->fetch(); + if($userCheck) { + $userID = $userCheck['userID']; + $accid = $userCheck['extID']; + } else { + $userCheck = $db->prepare("SELECT * FROM users WHERE extID = :id"); + $userCheck->execute([":id" => ExploitPatch::remove($getID)]); + $userCheck = $userCheck->fetch(); + if($userCheck) { + $userID = $userCheck['userID']; + $accid = $userCheck['extID']; + } + } + } +} +else { + $accid = $_SESSION["accountID"]; + $dl->printFooter('../'); +} +if(!$accid) $accid = $_SESSION["accountID"]; +if(!$userID) $userID = $gs->getUserID($accid); +if(is_numeric($accid)) $accname = $gs->getAccountName($accid); +else $accname = $gs->getUserName($userID); +$dl->title($dl->getLocalizedString("profile").', '.$accname); +if($accid != $_SESSION["accountID"] && is_numeric($accid)) { + $block = $db->prepare("SELECT * FROM blocks WHERE person1 = :p1 AND person2 = :p2"); + $block->execute([':p1' => $accid, ':p2' => $_SESSION["accountID"]]); + $block = $block->fetch(); + if(!empty($block)) exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++')); +} +if(!empty($_POST["msg"])) { + if(Automod::isAccountsDisabled(1)) die($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'profile')); + $checkBan = $gs->getPersonBan($accid, $userID, 3); + if($checkBan) exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++')); + $query = $db->prepare("SELECT timestamp FROM acccomments WHERE userID=:accid ORDER BY timestamp DESC LIMIT 1"); + $query->execute([':accid' => $userID]); + $res = $query->fetch(); + $time = time() - 5; + if($res["timestamp"] > $time) die($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'profile')); + $msg = ExploitPatch::url_base64_encode(ExploitPatch::rucharclean($_POST["msg"])); + if($enableCommentLengthLimiter && strlen(ExploitPatch::url_base64_decode($msg)) > $maxAccountCommentLength) $msgTooLong = true; + else { + $query = $db->prepare("INSERT INTO acccomments (userID, userName, comment, timestamp) VALUES (:id, :name, :msg, :time)"); + $query->execute([':id' => $userID, ':name' => $accname, ':msg' => $msg, ':time' => time()]); + $gs->logAction($_SESSION['accountID'], 14, $accname, $msg, $db->lastInsertId()); + Automod::checkAccountPostsSpamming($userID); + } +} +if(isset($_POST["settings"]) AND $_POST["settings"] == 1 AND $accid == $_SESSION["accountID"]) { + if(!isset($_POST["ichangedsmth"]) OR $_POST["ichangedsmth"] != 1) { + echo ''.$dl->getLocalizedString("errorGeneric").'
+ +'; + $query = $db->prepare("SELECT mS, frS, cS, youtubeurl, twitter, twitch, timezone FROM accounts WHERE accountID=:id"); + $query->execute([':id' => $accid]); + $query = $query->fetch(); + $query["youtubeurl"] = mb_ereg_replace("(?!^@)[^a-zA-Z0-9_]", "", $query["youtubeurl"]); + $query["twitter"] = mb_ereg_replace("[^a-zA-Z0-9_]", "", $query["twitter"]); + $query["twitch"] = mb_ereg_replace("[^a-zA-Z0-9_]", "", $query["twitch"]); + exit($dl->printSong(' +')); + } else { + $getAccountData = $db->prepare("SELECT * FROM accounts WHERE accountID = :accountID"); + $getAccountData->execute([':accountID' => $accid]); + $getAccountData = $getAccountData->fetch(); + if(ExploitPatch::number($_POST["messages"]) > 2 OR ExploitPatch::number($_POST["messages"]) < 0 OR empty(ExploitPatch::number($_POST["messages"]))) $_POST["messages"] = 0; + if(ExploitPatch::number($_POST["friendreqs"]) > 1 OR ExploitPatch::number($_POST["friendreqs"]) < 0 OR empty(ExploitPatch::number($_POST["friendreqs"]))) $_POST["friendreqs"] = 0; + if(ExploitPatch::number($_POST["comments"]) > 2 OR ExploitPatch::number($_POST["comments"]) < 0 OR empty(ExploitPatch::number($_POST["comments"]))) $_POST["comments"] = 0; + $_POST["youtube"] = mb_ereg_replace("(?!^@)[^a-zA-Z0-9_]", "", $_POST["youtube"]); + $_POST["twitter"] = mb_ereg_replace("[^a-zA-Z0-9_]", "", $_POST["twitter"]); + $_POST["twitch"] = mb_ereg_replace("[^a-zA-Z0-9_]", "", $_POST["twitch"]); + $query = $db->prepare("UPDATE accounts SET mS = :ms, frS = :frs, cS = :cs, youtubeurl = :yt, twitter = :twt, twitch = :ttv, timezone = :tz WHERE accountID=:id"); + $query->execute([':id' => $accid, ':ms' => ExploitPatch::number($_POST["messages"]), ':frs' => ExploitPatch::number($_POST["friendreqs"]), ':cs' => ExploitPatch::number($_POST["comments"]), ':yt' => ExploitPatch::remove($_POST["youtube"]), ':twt' => ExploitPatch::remove($_POST["twitter"]), ':ttv' => ExploitPatch::remove($_POST["twitch"]), ':tz' => ExploitPatch::rucharclean($_POST["timezone"])]); + $gs->sendLogsAccountChangeWebhook($accid, $accid, $getAccountData); + } +} +$query = $db->prepare("SELECT * FROM users WHERE userID=:id"); +$query->execute([':id' => $userID]); +$res = $query->fetch(); +$badgeImg = ''; +$queryRoleID = $db->prepare("SELECT roleID FROM roleassign WHERE accountID = :accountID"); +$queryRoleID->execute([':accountID' => $accid]); +if($roleAssignData = $queryRoleID->fetch(PDO::FETCH_ASSOC)) { + $queryBadgeLevel = $db->prepare("SELECT modBadgeLevel FROM roles WHERE roleID = :roleID"); + $queryBadgeLevel->execute([':roleID' => $roleAssignData['roleID']]); + if(($modBadgeLevel = $queryBadgeLevel->fetchColumn() ?? 0) >= 1 && $modBadgeLevel <= 3) { + $badgeImg = '+ +++ + +'.$dl->getLocalizedString("settings").'
';
+ }
+}
+$maybeban = ''.$accname.$badgeImg.'
'; +if(isset($_SERVER["HTTP_REFERER"])) $back = ''; else $back = ''; +$all = $dl->createProfileStats($res['stars'], $res['moons'], $res['diamonds'], $res['coins'], $res['userCoins'], $res['demons'], $res['creatorPoints'], 0); +$msgs = $db->prepare("SELECT * FROM acccomments WHERE userID = :uid ORDER BY commentID DESC"); +$msgs->execute([':uid' => $userID]); +$msgs = $msgs->fetchAll(); +$comments = $send = ''; +foreach($msgs AS &$msg) { + $none = ''; + $reply = $db->prepare("SELECT count(*) FROM replies WHERE commentID = :id"); + $reply->execute([':id' => $msg["commentID"]]); + $reply = $reply->fetchColumn(); + $message = $dl->parseMessage(htmlspecialchars(ExploitPatch::url_base64_decode($msg["comment"]))); + if($enableCommentLengthLimiter) $message = substr($message, 0, $maxAccountCommentLength); + $time = $msg["timestamp"]; + $likes = ''.$msg["likes"].''; + $dislikes = ''.$msg["dislikes"].''; + $stats = ' '.$likes.' '.(isset($msg['dislikes']) ? '• '.$dislikes : ''); + if($reply < 1) $none = 'display:none'; + $replies = ''; + if($_SESSION["accountID"] != 0) $input = ''; + $comments .= '+'; +} +if(empty($comments)) $comments = '+ ++'.$accname.'
'.$stats.'
'.$message.'
+'.$replies.''.$input.''.$dl->convertToDate($time, true).''.$dl->getLocalizedString("empty").'
'; +$msgtopl = ''; +if($accid == $_SESSION["accountID"]) { + if(empty($comments)) $comments = ''.$dl->getLocalizedString("writeSomething").'
'; + $send = '+ +'; + $msgtopl = ''; +} else { + $privacySettings = $db->prepare("SELECT mS FROM accounts WHERE accountID = :receiver"); + $privacySettings->execute([':receiver' => $accid]); + $privacySettings = $privacySettings->fetchColumn(); + $block = $db->prepare("SELECT count(*) FROM blocks WHERE (person1 = :receiver AND person2 = :accountID) OR (person2 = :receiver AND person1 = :accountID)"); + $block->execute([':receiver' => $accid, ':accountID' => $_SESSION['accountID']]); + $block = $block->fetchColumn(); + if(($privacySettings == 1 && !$gs->isFriends($accid, $_SESSION["accountID"])) || $privacySettings == 2 || $block > 0) $msgtopl = ''; +} +if($_SESSION["accountID"] == 0) $msgtopl = ''; +if($res["dlPoints"] != 0) $points = ' '.$res["dlPoints"].''; +if($gs->isPlayerInClan($accid)) { + $claninfo = $gs->getClanInfo($res["clan"]); + if($claninfo["clanOwner"] == $accid) $own = ''; + $clan = ''; +} +$kit = '+.'&color1='.$res['color1'].'&color2='.$res['color2'].($res['accGlow'] && $res['accGlow'] != 0 ? '&glow='.$res['accGlow'].'&color3='.$res['color3'] : '').')
++.'&color1='.$res['color1'].'&color2='.$res['color2'].($res['accGlow'] && $res['accGlow'] != 0 ? '&glow='.$res['accGlow'].'&color3='.$res['color3'] : '').')
++.'&color1='.$res['color1'].'&color2='.$res['color2'].($res['accGlow'] && $res['accGlow'] != 0 ? '&glow='.$res['accGlow'].'&color3='.$res['color3'] : '').')
++.'&color1='.$res['color1'].'&color2='.$res['color2'].($res['accGlow'] && $res['accGlow'] != 0 ? '&glow='.$res['accGlow'].'&color3='.$res['color3'] : '').')
++.'&color1='.$res['color1'].'&color2='.$res['color2'].($res['accGlow'] && $res['accGlow'] != 0 ? '&glow='.$res['accGlow'].'&color3='.$res['color3'] : '').')
++.'&color1='.$res['color1'].'&color2='.$res['color2'].($res['accGlow'] && $res['accGlow'] != 0 ? '&glow='.$res['accGlow'].'&color3='.$res['color3'] : '').')
++.'&color1='.$res['color1'].'&color2='.$res['color2'].($res['accGlow'] && $res['accGlow'] != 0 ? '&glow='.$res['accGlow'].'&color3='.$res['color3'] : '').')
++.'&color1='.$res['color1'].'&color2='.$res['color2'].($res['accGlow'] && $res['accGlow'] != 0 ? '&glow='.$res['accGlow'].'&color3='.$res['color3'] : '').')
++'; + +$dl->printSong('.'&color1='.$res['color1'].'&color2='.$res['color2'].($res['accGlow'] && $res['accGlow'] != 0 ? '&glow='.$res['accGlow'].'&color3='.$res['color3'] : '').')
+++', 'profile'); +?> \ No newline at end of file diff --git a/dashboard/profile/replies.php b/dashboard/profile/replies.php new file mode 100644 index 000000000..eaf32893a --- /dev/null +++ b/dashboard/profile/replies.php @@ -0,0 +1,60 @@ +prepare("SELECT * FROM replies WHERE replyID = :id"); + $reply->execute([':id' => $id]); + $reply = $reply->fetch(); + if($reply["accountID"] == $_SESSION["accountID"]) { + $reply = $db->prepare("DELETE FROM replies WHERE replyID = :id"); + $reply->execute([':id' => $id]); + exit('1'); + } + } + if(empty($_POST["body"])) { + $reply = $db->prepare("SELECT * FROM replies WHERE commentID = :id ORDER BY replyID DESC"); + $reply->execute([':id' => $id]); + $reply = $reply->fetchAll(); + foreach($reply as &$rep) { + if($x > 1) echo ' | '; + $body = $rep["body"]; + if($enableCommentLengthLimiter) $body = base64_encode(substr(base64_decode($body), 0, $maxCommentLength)); + echo $rep["replyID"].', '.$id.', '.$gs->getAccountName($rep["accountID"]).', '.$body.', '.$dl->convertToDate($rep["timestamp"], true).', '.count($reply); + $x++; + } + } else { + if(Automod::isAccountsDisabled(1)) exit('-2'); + $userID = $gs->getUserID($_SESSION["accountID"], $gs->getAccountName($_SESSION["accountID"])); + $checkBan = $gs->getPersonBan($_SESSION["accountID"], $userID, 3); + if($checkBan) exit('-3'); + $body = base64_encode(strip_tags(ExploitPatch::rucharclean($_POST["body"]))); + if($enableCommentLengthLimiter && strlen(base64_decode($body)) > $maxCommentLength) exit("-1"); + $reply = $db->prepare("INSERT INTO replies (commentID, accountID, body, timestamp) VALUES (:cid, :acc, :body, :time)"); + $reply->execute([':cid' => $id, ':acc' => $_SESSION["accountID"], ':body' => $body, ':time' => time()]); + echo 1; + } +} else { + $reply = $db->prepare("SELECT * FROM replies WHERE commentID = :id ORDER BY replyID DESC"); + $reply->execute([':id' => $id]); + $reply = $reply->fetchAll(); + foreach($reply as &$rep) { + if($x > 1) echo ' | '; + $body = $rep["body"]; + if($enableCommentLengthLimiter) $body = base64_encode(substr(base64_decode($body), 0, $maxCommentLength)); + echo $rep["replyID"].', '.$id.', '.$gs->getAccountName($rep["accountID"]).', '.$body.', '.$dl->convertToDate($rep["timestamp"], true).', '.count($reply); + $x++; + } +} +?> \ No newline at end of file diff --git a/dashboard/reupload/songAdd.php b/dashboard/reupload/songAdd.php index 049bf161e..9ca9ea992 100644 --- a/dashboard/reupload/songAdd.php +++ b/dashboard/reupload/songAdd.php @@ -1,31 +1,135 @@ songReupload($_POST["url"]); - if($songID < 0){ - $errorDesc = $dl->getLocalizedString("songAddError$songID"); - $dl->printBox('+ '.$back.' ++'.$maybeban.$clan.''.$msgtopl.$points.' +'.$all.'+'.$kit.'++ '.$comments.' ++ '.$send.' +'.$dl->getLocalizedString("songAdd")."
-".$dl->getLocalizedString("errorGeneric")." $songID ($errorDesc)
- ".$dl->getLocalizedString("tryAgainBTN")."","reupload"); +$dl->title($dl->getLocalizedString("songLink")); +$dl->printFooter('../'); +if(strpos($songEnabled, '2') === false) { + exit($dl->printSong('+', 'reupload')); +} +if(isset($_SESSION["accountID"]) AND $_SESSION["accountID"] != 0) { + if(!empty($_POST["url"])) { + if(!Captcha::validateCaptcha()) { + exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'reupload')); + } + $song = $_POST['url']; + $author = strip_tags(ExploitPatch::rucharclean($_POST["author"], 30)) ?: 'Reupload'; + $name = strip_tags(ExploitPatch::rucharclean($_POST["name"], 40)) ?: 'Unnamed'; + $songID = $gs->songReupload($song, $author, $name, $_SESSION["accountID"]); + if($songID == '-4' && strpos($songEnabled, '1') !== false) { + $songFile = $gs->getDownloadLinkWithCobalt($song); + if($songFile) { + $cobaltSongSize = strlen($songFile); + if($cobaltSongSize >= $songSize * 1024 * 1024) exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'reupload')); + $freeID = false; + while(!$freeID) { + $songID = rand(99, 7999999); + $checkID = $db->prepare('SELECT count(*) FROM songs WHERE ID = :id'); // If randomized ID picks existing song ID + $checkID->execute([':id' => $songID]); + if($checkID->fetchColumn() == 0) $freeID = true; + } + file_put_contents(__DIR__.'/../songs/'.$songID.'.mp3', $songFile); + $duration = $gs->getAudioDuration(realpath(__DIR__.'/../songs/'.$songID.'.mp3')); + $duration = empty($duration) ? 0 : $duration; + $dirPath = dirname(dirname($_SERVER["REQUEST_URI"])); + if($dirPath == '/') $dirPath = ''; + $songUrl = (isset($_SERVER['HTTPS']) ? "https" : "http") . "://".$_SERVER["HTTP_HOST"].$dirPath.'/songs/'.$songID.".mp3"; + $query = $db->prepare("INSERT INTO songs (ID, name, authorID, authorName, size, duration, download, hash, reuploadTime, reuploadID, isDisabled) VALUES (:id, :name, '9', :author, :size, :duration, :download, :hash, :reuploadTime, :reuploadID, :isDisabled)"); + $query->execute([':id' => $songID, ':name' => $name, ':download' => $songUrl, ':author' => $author, ':size' => round($cobaltSongSize / 1048576, 2), ':duration' => $duration, ':hash' => '', ':reuploadTime' => time(), ':reuploadID' => $_SESSION['accountID'], ':isDisabled' => ($preenableSongs ? 0 : 1)]); + } + } + if($songID < 0) { + $existed = str_replace('-3', '', $songID); + if($songID != $existed) { + exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'reupload')); + } + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'reupload'); + } else { + $songArray = $db->prepare('SELECT * FROM songs WHERE ID = :ID'); + $songArray->execute([':ID' => $songID]); + $songArray = $songArray->fetch(); + $wholiked = ''.$dl->getLocalizedString("errorGeneric").'
+ +0
'; + $whoused = '0
'; + $songs = $dl->generateSongCard($songArray, $wholiked.$whoused, false); + $dl->printSong('+'.$dl->getLocalizedString("songAdded").'
+ ', 'reupload'); + } }else{ - $dl->printBox("".$dl->getLocalizedString("songAdd")."
-Song Reuploaded: $songID
- ".$dl->getLocalizedString("songAddAnotherBTN")."","reupload"); + $dl->printSong('++ ', 'reupload'); } -}else{ - $dl->printBox(''.$dl->getLocalizedString("songAdd").'
+ +'.$dl->getLocalizedString("songAdd").'
- ',"reupload"); +} else { + $dl->printSong('+', 'reupload'); } ?> \ No newline at end of file diff --git a/dashboard/sfxs/index.php b/dashboard/sfxs/index.php new file mode 100644 index 000000000..d7de65d7b --- /dev/null +++ b/dashboard/sfxs/index.php @@ -0,0 +1,175 @@ +title($dl->getLocalizedString("sfxAdd")); +$dl->printFooter('../'); +if(!$sfxEnabled) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'reupload'); + die(); +} +if(isset($_SESSION["accountID"]) AND $_SESSION["accountID"] != 0) { +if($_FILES && $_FILES['filename']['error'] == UPLOAD_ERR_OK) { + if(!Captcha::validateCaptcha()) { + exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'reupload')); + } + $info = new finfo(FILEINFO_MIME); + $file_type = explode(';', $info->buffer(file_get_contents($_FILES['filename']['tmp_name'])))[0]; + $allowed = array("audio/mpeg", "audio/ogg", "audio/mp3"); + $db_fid = 1; + if(!in_array($file_type, $allowed)) $db_fid = -7; + else { + if($_FILES['filename']['size'] == 0) $db_fid = -6; + else { + if($_FILES['filename']['size'] >= $sfxSize * 1024 * 1024) $db_fid = -5; + else { + $server = (((!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') || $_SERVER['SERVER_PORT'] == 443) ? "https" : "http")."://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]"; + $time = time(); + $types = array('.mp3', '.ogg', '.mpeg'); + $name = !empty(mb_substr(ExploitPatch::rucharclean($_POST['name']), 0, 40)) ? mb_substr(ExploitPatch::rucharclean($_POST['name']), 0, 40) : 'Unnamed SFX'; + $author = $gs->getAccountName($_SESSION['accountID']); + $size = $_FILES['filename']['size']; + $query = $db->prepare("INSERT INTO sfxs (name, authorName, size, download, reuploadTime, reuploadID) VALUES (:name, :author, :size, '', :reuploadTime, :reuploadID)"); + $query->execute([':name' => $name, ':author' => $author, ':size' => $size, ':reuploadTime' => $time, ':reuploadID' => $_SESSION['accountID']]); + $db_fid = $db->lastInsertId(); + $token = $convertEnabled ? $gs->randomString(16) : ''; + $convert = $gs->convertSFX($_FILES['filename'], $server, $name, $token); + $temp = $convert ? '_temp' : ''; + $song = $server.$db_fid.$temp.".ogg"; + move_uploaded_file($_FILES['filename']['tmp_name'], $db_fid.$temp.".ogg"); + $duration = $gs->getAudioDuration(realpath($db_fid.$temp.".ogg")); + $duration = empty($duration) ? 0 : $duration * 1000; + $query = $db->prepare('UPDATE sfxs SET download = :dl, milliseconds = :ms, token = :token, isDisabled = :isDisabled WHERE ID = :id'); + $query->execute([':dl' => $song, ':ms' => $duration, ':id' => $db_fid, ':token' => $token, ':isDisabled' => ($preenableSFXs ? 0 : 1)]); + $songArray = $db->prepare('SELECT * FROM sfxs WHERE ID = :ID'); + $songArray->execute([':ID' => $db_fid]); + $songArray = $songArray->fetch(); + $songs = $dl->generateSongCard($songArray, '', false); + } + } + } + if($db_fid < 0) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'reupload'); + } else { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++'.$dl->getLocalizedString("sfxAdded").'
+ ', 'reupload'); + } + } else { + $dl->printSong('+Drag-and-drop!
+'.$dl->getLocalizedString("sfxAdd").'
+ + ', 'reupload'); +} +} else { + $dl->printSong('+', 'reupload'); +} \ No newline at end of file diff --git a/dashboard/sfxs/update.php b/dashboard/sfxs/update.php new file mode 100644 index 000000000..53bbeddc0 --- /dev/null +++ b/dashboard/sfxs/update.php @@ -0,0 +1,28 @@ + false, 'code' => 0, 'error' => 'Invalid params.'])); + $check = $db->prepare('SELECT ID FROM sfxs WHERE token = :token'); + $check->execute([':token' => $token]); + $check = $check->fetchColumn(); + if(!$check) exit(json_encode(['success' => false, 'code' => 1, 'error' => 'Invalid token.'])); + $info = new finfo(FILEINFO_MIME); + $file_type = explode(';', $info->buffer(file_get_contents($_FILES['file']['tmp_name'])))[0]; + if($file_type != 'audio/ogg' || $_FILES['file']['size'] >= $sfxSize * 1024 * 1024 || $_FILES['file']['size'] == 0) exit(json_encode(['success' => false, 'code' => 2, 'error' => 'Invalid file.'])); + move_uploaded_file($_FILES['file']['tmp_name'], $check.'.ogg'); + if(file_exists($check.'_temp.ogg')) unlink($check.'_temp.ogg'); + $song = $server.$check.".ogg"; + $change = $db->prepare('UPDATE sfxs SET token = "", download = :dl WHERE ID = :id'); + if($change->execute([':dl' => $song, ':id' => $check])) exit(json_encode(['success' => true])); + exit(json_encode(['success' => false, 'code' => 3, 'error' => 'Something went wrong.'])); +} +exit(json_encode(['success' => false, 'code' => 0, 'error' => 'Invalid params.'])); +?> \ No newline at end of file diff --git a/dashboard/songs/index.php b/dashboard/songs/index.php new file mode 100644 index 000000000..4c3ebfd34 --- /dev/null +++ b/dashboard/songs/index.php @@ -0,0 +1,195 @@ +title($dl->getLocalizedString("songAdd")); +$dl->printFooter('../'); +if(strpos($songEnabled, '1') === false) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'reupload'); + die(); +} +if(isset($_SESSION["accountID"]) AND $_SESSION["accountID"] != 0) { +if($_FILES && $_FILES['filename']['error'] == UPLOAD_ERR_OK) { + if(!Captcha::validateCaptcha()) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'reupload'); + die(); + } else { + $info = new finfo(FILEINFO_MIME); + $file_type = explode(';', $info->buffer(file_get_contents($_FILES['filename']['tmp_name'])))[0]; + $allowed = array("audio/mpeg", "audio/ogg", "audio/mp3"); + if(!in_array($file_type, $allowed)) $db_fid = -7; + else { + if($_FILES['filename']['size'] == 0) $db_fid = -6; + else { + $maxsize = $songSize * 1024 * 1024; + if($_FILES['filename']['size'] >= $maxsize) $db_fid = -5; + else { + $freeID = false; + while(!$freeID) { + $db_fid = rand(99, 7999999); + $checkID = $db->prepare('SELECT count(*) FROM songs WHERE ID = :id'); // If randomized ID picks existing song ID + $checkID->execute([':id' => $db_fid]); + if($checkID->fetchColumn() == 0) $freeID = true; + } + move_uploaded_file($_FILES['filename']['tmp_name'], "$db_fid.mp3"); + $duration = $gs->getAudioDuration(realpath("$db_fid.mp3")); + $duration = empty($duration) ? 0 : $duration; + $size = ($_FILES['filename']['size'] / 1048576); + $size = round($size, 2); + $hash = ""; + $types = array('.mp3', '.ogg', '.mpeg'); + $nAu = explode(' - ', str_replace($types, '', $_FILES['filename']['name']), 2); + if(empty($nAu[1])) $nAu = explode(' — ', str_replace($types, '', $_FILES['filename']['name']), 2); + if(!empty($nAu[1])) { + if(!empty($_POST['name'])) $name = ExploitPatch::rucharclean($_POST['name']); + else $name = trim(ExploitPatch::rucharclean($nAu[1])); + if(!empty($_POST['author'])) $author = ExploitPatch::rucharclean($_POST['author']); + else $author = trim(ExploitPatch::rucharclean($nAu[0])); + } else { + $name = ExploitPatch::rucharclean($_POST['name']); + $author = ExploitPatch::rucharclean($_POST['author']); + } + if(empty($name)) $name = "Unnamed"; + if(empty($author)) $author = "Reupload"; + $accountID = $_SESSION["accountID"]; + $name = mb_substr($name, 0, 40); + $author = mb_substr($author, 0, 40); + $song = (isset($_SERVER['HTTPS']) ? "https" : "http") . "://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]".$db_fid.".mp3"; + $query = $db->prepare("INSERT INTO songs (ID, name, authorID, authorName, size, duration, download, hash, reuploadTime, reuploadID, isDisabled) VALUES (:id, :name, '9', :author, :size, :duration, :download, :hash, :reuploadTime, :reuploadID, :isDisabled)"); + $query->execute([':id' => $db_fid, ':name' => $name, ':download' => $song, ':author' => $author, ':size' => $size, ':duration' => $duration, ':hash' => $hash, ':reuploadTime' => time(), ':reuploadID' => $accountID, ':isDisabled' => ($preenableSongs ? 0 : 1)]); + $songArray = $db->prepare('SELECT * FROM songs WHERE ID = :ID'); + $songArray->execute([':ID' => $db_fid]); + $songArray = $songArray->fetch(); + $wholiked = ''.$dl->getLocalizedString("errorGeneric").'
+ +0
'; + $whoused = '0
'; + $songs = $dl->generateSongCard($songArray, $wholiked.$whoused, false); + } + } + } + if($db_fid < 0) { + $dl->printSong('+', 'reupload'); + } else { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++'.$dl->getLocalizedString("songAdded").'
+ ', 'reupload'); + } + } +} else { + $dl->printSong('+Drag-and-drop!
+'.$dl->getLocalizedString("songAdd").'
+ + ', 'reupload'); +} +} else { + $dl->printSong('+', 'reupload'); +} +?> \ No newline at end of file diff --git a/dashboard/stats/SFXList.php b/dashboard/stats/SFXList.php new file mode 100644 index 000000000..a49cdbec6 --- /dev/null +++ b/dashboard/stats/SFXList.php @@ -0,0 +1,78 @@ +title($dl->getLocalizedString("sfxs")); +$dl->printFooter('../'); +if(isset($_GET["page"]) AND is_numeric($_GET["page"]) AND $_GET["page"] > 0) { + $page = ($_GET["page"] - 1) * 10; + $actualpage = $_GET["page"]; +} else { + $page = 0; + $actualpage = 1; +} +$pagelol = explode("/", $_SERVER["REQUEST_URI"]); +$pagelol = $pagelol[count($pagelol)-2]."/".$pagelol[count($pagelol)-1]; +$pagelol = explode("?", $pagelol)[0]; +if(!isset($_GET["search"])) $_GET["search"] = ""; +if(!isset($_GET["type"])) $_GET["type"] = ""; +$srcbtn = $favs = $meta = ""; +if(!empty(trim(ExploitPatch::rucharclean($_GET["search"])))) { + $q = is_numeric(trim(ExploitPatch::rucharclean($_GET["search"]))) ? "ID LIKE '%".trim(ExploitPatch::rucharclean($_GET["search"]))."%'" : "(name LIKE '%".trim(ExploitPatch::rucharclean($_GET["search"]))."%' OR authorName LIKE '%".trim(ExploitPatch::rucharclean($_GET["search"]))."%')"; + $srcbtn = ''; + $query = $db->prepare("SELECT * FROM sfxs WHERE isDisabled = 0 AND $q ORDER BY reuploadTime DESC LIMIT 10 OFFSET $page"); + $query->execute(); + $result = $query->fetchAll(); + if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++'); + die(); + } +} else { + $query = $db->prepare("SELECT * FROM sfxs WHERE isDisabled = 0 ORDER BY reuploadTime DESC LIMIT 10 OFFSET $page"); + $query->execute(); + $result = $query->fetchAll(); +} +$x = 0; +if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'browse'); + die(); +} +foreach($result as &$action) { + $x++; + $songs .= $dl->generateSFXCard($action); +} +$pagel = ''.$dl->getLocalizedString("errorGeneric").'
+ ++'; +if(!empty(trim($_GET["search"]))) $query = $db->prepare("SELECT count(*) FROM sfxs WHERE isDisabled = 0 AND $q"); +else $query = $db->prepare("SELECT count(*) FROM sfxs WHERE isDisabled = 0"); +$query->execute(); +$packcount = $query->fetchColumn(); +$pagecount = ceil($packcount / 10); +$bottomrow = $dl->generateBottomRow($pagecount, $actualpage); +$dl->printPage($pagel . $bottomrow, true, "browse"); +?> \ No newline at end of file diff --git a/dashboard/stats/accountsList.php b/dashboard/stats/accountsList.php new file mode 100644 index 000000000..cb805a3f9 --- /dev/null +++ b/dashboard/stats/accountsList.php @@ -0,0 +1,138 @@ +title($dl->getLocalizedString("accounts")); +$dl->printFooter('../'); +if(isset($_GET["page"]) AND is_numeric($_GET["page"]) AND $_GET["page"] > 0) { + $page = ($_GET["page"] - 1) * 10; + $actualpage = $_GET["page"]; +} else { + $page = 0; + $actualpage = 1; +} +$pagelol = explode("/", $_SERVER["REQUEST_URI"]); +$pagelol = $pagelol[count($pagelol)-2]."/".$pagelol[count($pagelol)-1]; +$pagelol = explode("?", $pagelol)[0]; +if(!isset($_GET["search"])) $_GET["search"] = ""; +if(!isset($_GET["type"])) $_GET["type"] = ""; +if(!isset($_GET["ng"])) $_GET["ng"] = ""; +$srcbtn = $members = ""; +if(!isset($_GET["search"]) OR empty(trim(ExploitPatch::remove($_GET["search"])))) { + $query = $db->prepare("SELECT * FROM accounts INNER JOIN users WHERE isActive = 1 AND accounts.accountID = users.extID ORDER BY accountID ASC LIMIT 10 OFFSET $page"); + $query->execute(); + $result = $query->fetchAll(); + if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("sfxs").'
++ '.$songs.' ++'); + die(); + } +} else { + $srcbtn = ''; + $query = $db->prepare("SELECT * FROM accounts INNER JOIN users WHERE accounts.userName LIKE '%".trim(ExploitPatch::remove($_GET["search"]))."%' AND isActive = 1 AND accounts.accountID = users.extID ORDER BY accountID ASC LIMIT 10 OFFSET $page"); + $query->execute(); + $result = $query->fetchAll(); + if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++'); + die(); + } +} +$x = $page + 1; +foreach($result as &$action){ + $clan = $own = ''; + $accUserID = $action["userID"]; + $accountID = $action["accountID"].''.$dl->getLocalizedString("errorGeneric").'
+ +| '.$accUserID; + if($action["accountID"] == $accUserID) $accountID = $action["accountID"]; + $query = $db->prepare("SELECT roleID FROM roleassign WHERE accountID = :accid"); + $query->execute([':accid' => $accountID]); + $resultPls = $query->fetch(); + if(!$resultPls) $resultRole = $dl->getLocalizedString("player"); + else { + $resultRole = $resultPls["roleID"]; + if(empty($resultRole)) { + $resultRole = $dl->getLocalizedString("player"); + } else { + $query = $db->prepare("SELECT roleName FROM roles WHERE roleID = :id"); + $query->execute([':id' => $resultRole]); + $resultRole = $query->fetch()["roleName"]; + } + } + if($action["clan"] != 0) { + $claninfo = $gs->getClanInfo($action["clan"]); + if($claninfo["clanOwner"] == $action["accountID"]) $own = ''; + $clan = ''.$claninfo["clan"].$own.'
'; + } + // Avatar management + $iconType = ($action['iconType'] > 8) ? 0 : $action['iconType']; + $iconTypeMap = [0 => ['type' => 'cube', 'value' => $action['accIcon']], 1 => ['type' => 'ship', 'value' => $action['accShip']], 2 => ['type' => 'ball', 'value' => $action['accBall']], 3 => ['type' => 'ufo', 'value' => $action['accBird']], 4 => ['type' => 'wave', 'value' => $action['accDart']], 5 => ['type' => 'robot', 'value' => $action['accRobot']], 6 => ['type' => 'spider', 'value' => $action['accSpider']], 7 => ['type' => 'swing', 'value' => $action['accSwing']], 8 => ['type' => 'jetpack', 'value' => $action['accJetpack']]]; + $iconValue = (isset($iconTypeMap[$iconType]) && $iconTypeMap[$iconType]['value'] > 0) ? $iconTypeMap[$iconType]['value'] : 1; + $avatarImg = '';
+ // Badge management
+ $badgeImg = '';
+ $queryRoleID = $db->prepare("SELECT roleID FROM roleassign WHERE accountID = :accountID");
+ $queryRoleID->execute([':accountID' => $accountID]);
+ if($roleAssignData = $queryRoleID->fetch(PDO::FETCH_ASSOC)) {
+ $queryBadgeLevel = $db->prepare("SELECT modBadgeLevel FROM roles WHERE roleID = :roleID");
+ $queryBadgeLevel->execute([':roleID' => $roleAssignData['roleID']]);
+ if(($modBadgeLevel = $queryBadgeLevel->fetchColumn() ?? 0) >= 1 && $modBadgeLevel <= 3) {
+ $badgeImg = '';
+ }
+ }
+ $stats = $dl->createProfileStats($action['stars'], $action['moons'], $action['diamonds'], $action['coins'], $action['userCoins'], $action['demons'], $action['creatorPoints'], 0);
+ $registerDate = date("d.m.Y", $action["registerDate"]);
+ if($action['userName'] == "Undefined") $action['userName'] = $gs->getAccountName($action["accountID"]);
+ $members .= '+'; + $x++; +} +$pagel = '++ ++'.$stats.'+++'.$dl->getLocalizedString("accountID").': '.$accountID.'
+'.$dl->getLocalizedString("registerDate").': '.$registerDate.'
++'; +if(empty(trim(ExploitPatch::remove($_GET["search"])))) $query = $db->prepare("SELECT count(*) FROM accounts INNER JOIN users WHERE isActive = 1 AND accounts.accountID = users.extID"); +else $query = $db->prepare("SELECT count(*) FROM accounts INNER JOIN users WHERE accounts.userName LIKE '%".trim(ExploitPatch::remove($_GET["search"]))."%' AND isActive = 1 AND accounts.accountID = users.extID"); +$query->execute(); +$packcount = $query->fetchColumn(); +$pagecount = ceil($packcount / 10); +$bottomrow = $dl->generateBottomRow($pagecount, $actualpage); +$dl->printPage($pagel . $bottomrow, true, "browse"); +?> \ No newline at end of file diff --git a/dashboard/stats/addQuests.php b/dashboard/stats/addQuests.php new file mode 100644 index 000000000..b433f300b --- /dev/null +++ b/dashboard/stats/addQuests.php @@ -0,0 +1,216 @@ +title($dl->getLocalizedString("addQuest")); +$dl->printFooter('../'); +$allQuests = ''; +if($gs->checkPermission($_SESSION["accountID"], "toolQuestsCreate")) { +if(!empty($_POST["type"]) AND !empty($_POST["amount"]) AND !empty($_POST["reward"]) AND !empty($_POST["names"])){ + if(!Captcha::validateCaptcha()) { + $dl->printSong(''.$dl->getLocalizedString("accounts").'
++ '.$members.' ++', 'mod'); + die(); + } + $type = ExploitPatch::number($_POST["type"]); + $amount = ExploitPatch::number($_POST["amount"]); + $reward = ExploitPatch::number($_POST["reward"]); + $name = ExploitPatch::remove($_POST["names"]); + $accountID = $_SESSION["accountID"]; + if(!is_numeric($type) OR !is_numeric($amount) OR !is_numeric($reward) OR $type > 3 OR $type < 1){ + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'mod'); + die(); + } + $query = $db->prepare("INSERT INTO quests (type, amount, reward, name) VALUES (:type,:amount,:reward,:name)"); + $query->execute([':type' => $type, ':amount' => $amount, ':reward' => $reward, ':name' => $name]); + $query = $db->prepare("INSERT INTO modactions (type, value, timestamp, account, value2, value3, value4) VALUES ('25',:value,:timestamp,:account,:amount,:reward,:name)"); + $query->execute([':value' => $type, ':timestamp' => time(), ':account' => $accountID, ':amount' => $amount, ':reward' => $reward, ':name' => $name]); + $success = $dl->getLocalizedString("questsSuccess").' '. $name. '!'; + if($db->lastInsertId() < 3) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'mod'); + } else { + $dl->printSong(''.$dl->getLocalizedString("addQuest").'
+ ++', 'mod'); + } + } else { + $quests = $db->prepare("SELECT * FROM quests ORDER BY ID ASC"); + $quests->execute(); + $quests = $quests->fetchAll(); + foreach($quests as &$quest) { + switch($quest["type"]) { + case 1: + $questType = ' '.$dl->getLocalizedString("orbs"); + break; + case 2: + $questType = ' '.$dl->getLocalizedString("coins"); + break; + case 3: + $questType = ' '.$dl->getLocalizedString("stars"); + break; + } + $allQuests .= ''; + } + $dl->printSong(''.$dl->getLocalizedString("addQuest").'
+ +++'; +} +} else { + $dl->printSong('++ '.$allQuests.' ++'.$dl->getLocalizedString("addQuest").'
+ ++', 'mod'); +} +?> \ No newline at end of file diff --git a/dashboard/stats/banList.php b/dashboard/stats/banList.php new file mode 100644 index 000000000..f5139a54f --- /dev/null +++ b/dashboard/stats/banList.php @@ -0,0 +1,116 @@ +title($dl->getLocalizedString("banList")); +$dl->printFooter('../'); +if(!$gs->checkPermission($_SESSION["accountID"], "dashboardModTools")) exit($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'mod')); +if(!empty($_POST['banID'])) { + $banID = ExploitPatch::number($_POST['banID']); + if(!empty($_POST['unban'])) $gs->unbanPerson($banID, $_SESSION['accountID']); + else { + $reason = trim(ExploitPatch::rucharclean($_POST['reason'])); + $expires = (new DateTime($_POST['expires']))->getTimestamp(); + if(time() < $expires) $gs->changeBan($banID, $_SESSION['accountID'], $reason, $expires); + } +} +$query = $db->prepare('SELECT * FROM bans WHERE isActive != 0 ORDER BY timestamp DESC'); +$query->execute(); +$result = $query->fetchAll(); +$x = $page + 1; +if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'mod'); + die(); +} +foreach($result as &$action) { + $person = htmlspecialchars($action['person']); + switch($action['personType']) { + case 0: + $personUsername = $gs->getAccountName($person); + $personText = ''; + break; + case 1: + $personUsername = $gs->getUserName($person); + $personText = ''.$dl->getLocalizedString("errorGeneric").'
+ +'.$personUsername.'
'; + break; + case 2: + $personText = ''.$person.'
'; + break; + } + $personTypes = ['accountID', 'userID', 'IP']; + $personTypeText = $dl->getLocalizedString($personTypes[$action['personType']]); + $banTypes = ['playerTop', 'creatorTop', 'levelUploading', 'commentBan', 'account']; + $banTypeText = $dl->getLocalizedString($banTypes[$action['banType']]); + $reason = !empty($action['reason']) ? htmlspecialchars(base64_decode($action['reason'])) : ''.$dl->getLocalizedString('noReason').''; + $expires = $dl->convertToDate($action['expires'], true); + if($action['modID'] != 0) { + $modUsername = $gs->getAccountName($action['modID']); + $modUsernameButton = ''; + } else $modUsernameButton = $dl->getLocalizedString('system'); + $stats = ''.$modUsernameButton.'
+'.$personTypeText.'
+'.$banTypeText.'
+'.$expires.'
'; + $manage = ''; + $bans .= '+'; + $x++; +} +$pagel = '+++++ '.$personText.$manage.' ++'.$reason.'
+'.$stats.'++'.$dl->getLocalizedString("ID").': '.$action['banID'].'
'.$dl->getLocalizedString("date").': '.$dl->convertToDate($action['timestamp'], true).'
+'; +$dl->printPage($pagel, true, "mod"); +?> \ No newline at end of file diff --git a/dashboard/stats/dailyTable.php b/dashboard/stats/dailyTable.php index 34ba3d4c5..19e85badf 100644 --- a/dashboard/stats/dailyTable.php +++ b/dashboard/stats/dailyTable.php @@ -2,75 +2,57 @@ session_start(); require "../incl/dashboardLib.php"; $dl = new dashboardLib(); -require "../../incl/lib/mainLib.php"; +require_once "../".$dbPath."incl/lib/mainLib.php"; $gs = new mainLib(); -require "../../incl/lib/connection.php"; -/* - generating dailytable -*/ +require "../".$dbPath."incl/lib/connection.php"; +require "../".$dbPath."incl/lib/exploitPatch.php"; +$dl->title($dl->getLocalizedString("dailyTable")); +$dl->printFooter('../'); if(isset($_GET["page"]) AND is_numeric($_GET["page"]) AND $_GET["page"] > 0){ $page = ($_GET["page"] - 1) * 10; $actualpage = $_GET["page"]; -}else{ +} else { $page = 0; $actualpage = 1; } -$dailytable = ""; -//getting data -$query = $db->prepare("SELECT feaID, levelID, timestamp FROM dailyfeatures WHERE timestamp < :time ORDER BY feaID DESC LIMIT 10 OFFSET $page"); +$query = $db->prepare("SELECT * FROM dailyfeatures WHERE timestamp < :time ORDER BY feaID DESC LIMIT 10 OFFSET $page"); $query->execute([':time' => time()]); $result = $query->fetchAll(); $query = $db->prepare("SELECT count(*) FROM dailyfeatures WHERE timestamp < :time"); $query->execute([':time' => time()]); $dailycount = $query->fetchColumn(); $x = $dailycount - $page; -//printing data +if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("banList").'
++ '.$bans.' ++', 'stats'); + die(); +} +$modcheck = $gs->checkPermission($_SESSION["accountID"], "dashboardModTools"); foreach($result as &$daily){ - //getting level data - $query = $db->prepare("SELECT levelName,userID,starStars,coins FROM levels WHERE levelID = :levelID"); + $typeArray = ['Daily', 'Weekly']; + $type = $typeArray[$daily["type"]]; + $query = $db->prepare("SELECT * FROM levels WHERE levelID = :levelID"); $query->execute([':levelID' => $daily["levelID"]]); $level = $query->fetch(); - if($query->rowCount() == 0){ - $level["levelName"] = $dl->getLocalizedString("deletedLevel"); - $level["userID"] = 0; - $level["starStars"] = -1; - $level["coins"] = -1; - } - $dailytable .= ''.$dl->getLocalizedString("errorGeneric").'
+ +- '; - $x--; - echo ""; + $dtt = $dl->convertToDate($daily['timestamp'], true); + if(!empty($level)) { + $dailyl = ''.$x.' -'.$daily["levelID"].' - '.$level["levelName"].' -'.$gs->getUserName($level["userID"]).' -'.$level["starStars"].' -'.$level["coins"].' -'.$dl->convertToDate($daily["timestamp"]).' -'.$type.'
'; + $dt = ''.$dtt.'
'; + $levels .= $dl->generateLevelsCard($level, $modcheck, $dailyl.$dt); + } else $levels .= ''; } -/* - bottom row -*/ +$pagel = ''.$dl->getLocalizedString("deletedLevel").'
+'; $pagecount = ceil($dailycount / 10); $bottomrow = $dl->generateBottomRow($pagecount, $actualpage); -/* - printing -*/ -$dl->printPage(''.$dl->getLocalizedString("dailyTable").'
++ '.$levels.' ++- -
' -.$bottomrow, true, "stats"); +$dl->printPage($pagel.$bottomrow, true, "stats"); ?> \ No newline at end of file diff --git a/dashboard/stats/deleteSong.php b/dashboard/stats/deleteSong.php new file mode 100644 index 000000000..0361d98ba --- /dev/null +++ b/dashboard/stats/deleteSong.php @@ -0,0 +1,38 @@ + false, 'error' => '0'])); +else { + if($songid == 0) die(json_encode(['success' => false, 'error' => '-1'])); + $query = $db->prepare("SELECT reuploadID, isDisabled FROM ".$type." WHERE ID = :sid"); + $query->execute([':sid' => $songid]); + $song = $query->fetch(); + if(!$song) die(json_encode(['success' => false, 'error' => '-2'])); + else { + $check = $gs->checkPermission($accID, "dashboardManageSongs") ?: $accID == $song['reuploadID']; + if(!$check) die(json_encode(['success' => false, 'error' => '-3'])); + if(!isset($_GET['disable'])) { + $query = $db->prepare("DELETE FROM ".$type." WHERE ID = :sid"); + $query->execute([':sid' => $songid]); + if(file_exists("../".$type."/".$songid.".".$format)) unlink("../".$type."/".$songid.".".$format); + if(file_exists("../".$type."/".$songid."_temp.".$format)) unlink("../".$type."/".$songid."_temp.".$format); + } else { + $query = $db->prepare("UPDATE ".$type." SET isDisabled = :isDisabled WHERE ID = :sid"); + $query->execute([':sid' => $songid, ':isDisabled' => ($song['isDisabled'] == 0 ? 1 : 0)]); + } + die(json_encode(['success' => true])); + } +} +?> \ No newline at end of file diff --git a/dashboard/stats/disabledSFXsList.php b/dashboard/stats/disabledSFXsList.php new file mode 100644 index 000000000..6b2c1202e --- /dev/null +++ b/dashboard/stats/disabledSFXsList.php @@ -0,0 +1,82 @@ +title($dl->getLocalizedString("disabledSFXs")); +$dl->printFooter('../'); +if(!$gs->checkPermission($_SESSION["accountID"], "dashboardManageSongs")) $dl->printSong('- - - - '.$dailytable.' - -# -'.$dl->getLocalizedString("ID").' -'.$dl->getLocalizedString("name").' -'.$dl->getLocalizedString("author").' -'.$dl->getLocalizedString("stars").' -'.$dl->getLocalizedString("userCoins").' -'.$dl->getLocalizedString("time").' -+', 'mod'); +if(isset($_GET["page"]) AND is_numeric($_GET["page"]) AND $_GET["page"] > 0) { + $page = ($_GET["page"] - 1) * 10; + $actualpage = $_GET["page"]; +} else { + $page = 0; + $actualpage = 1; +} +$pagelol = explode("/", $_SERVER["REQUEST_URI"]); +$pagelol = $pagelol[count($pagelol)-2]."/".$pagelol[count($pagelol)-1]; +$pagelol = explode("?", $pagelol)[0]; +if(!isset($_GET["search"])) $_GET["search"] = ""; +if(!isset($_GET["type"])) $_GET["type"] = ""; +if(!isset($_GET["ng"])) $_GET["ng"] = ""; +$srcbtn = $favs = $meta = ""; +if(!empty(trim(ExploitPatch::rucharclean($_GET["search"])))) { + $q = is_numeric(trim(ExploitPatch::rucharclean($_GET["search"]))) ? "ID LIKE '%".trim(ExploitPatch::rucharclean($_GET["search"]))."%'" : "name LIKE '%".trim(ExploitPatch::rucharclean($_GET["search"]))."%'"; + $srcbtn = ''; + $query = $db->prepare("SELECT * FROM sfxs WHERE isDisabled != 0 AND $q ORDER BY reuploadTime DESC LIMIT 10 OFFSET $page"); + $query->execute(); + $result = $query->fetchAll(); + if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++'); + die(); + } +} else { + $query = $db->prepare("SELECT * FROM sfxs WHERE isDisabled != 0 ORDER BY reuploadTime DESC LIMIT 10 OFFSET $page"); + $query->execute(); + $result = $query->fetchAll(); +} +if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'browse'); + die(); +} +foreach($result as &$action) $songs .= $dl->generateSFXCard($action); +$pagel = ''.$dl->getLocalizedString("errorGeneric").'
+ ++'; +if(!empty(trim($_GET["search"]))) $query = $db->prepare("SELECT count(*) FROM sfxs WHERE isDisabled != 0 AND $q"); +else $query = $db->prepare("SELECT count(*) FROM sfxs WHERE isDisabled != 0"); +$query->execute(); +$packcount = $query->fetchColumn(); +$pagecount = ceil($packcount / 10); +$bottomrow = $dl->generateBottomRow($pagecount, $actualpage); +$dl->printPage($pagel . $bottomrow, true, "browse"); +?> \ No newline at end of file diff --git a/dashboard/stats/disabledSongsList.php b/dashboard/stats/disabledSongsList.php new file mode 100644 index 000000000..ea2b9aac4 --- /dev/null +++ b/dashboard/stats/disabledSongsList.php @@ -0,0 +1,84 @@ +title($dl->getLocalizedString("disabledSongs")); +$dl->printFooter('../'); +if(!$gs->checkPermission($_SESSION["accountID"], "dashboardManageSongs")) $dl->printSong(''.$dl->getLocalizedString("disabledSFXs").'
++ '.$songs.' ++', 'mod'); +if(isset($_GET["page"]) AND is_numeric($_GET["page"]) AND $_GET["page"] > 0) { + $page = ($_GET["page"] - 1) * 10; + $actualpage = $_GET["page"]; +} else { + $page = 0; + $actualpage = 1; +} +$pagelol = explode("/", $_SERVER["REQUEST_URI"]); +$pagelol = $pagelol[count($pagelol)-2]."/".$pagelol[count($pagelol)-1]; +$pagelol = explode("?", $pagelol)[0]; +if(!isset($_GET["search"])) $_GET["search"] = ""; +if(!isset($_GET["type"])) $_GET["type"] = ""; +if(!isset($_GET["ng"])) $_GET["ng"] = ""; +$srcbtn = $favs = $meta = ""; +$ngw = $_GET["ng"] == 1 ? '' : 'AND reuploadID > 0'; +if(!empty(trim(ExploitPatch::rucharclean($_GET["search"])))) { + $q = is_numeric(trim(ExploitPatch::rucharclean($_GET["search"]))) ? "ID LIKE '%".trim(ExploitPatch::rucharclean($_GET["search"]))."%'" : "(name LIKE '%".trim(ExploitPatch::rucharclean($_GET["search"]))."%' OR authorName LIKE '%".trim(ExploitPatch::rucharclean($_GET["search"]))."%')"; + $srcbtn = ''; + $query = $db->prepare("SELECT * FROM songs WHERE isDisabled != 0 AND $q $ngw ORDER BY reuploadTime DESC LIMIT 10 OFFSET $page"); + $query->execute(); + $result = $query->fetchAll(); + if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++'); + die(); + } +} else { + $query = $db->prepare("SELECT * FROM songs WHERE isDisabled != 0 $ngw ORDER BY reuploadTime DESC LIMIT 10 OFFSET $page"); + $query->execute(); + $result = $query->fetchAll(); +} +$x = 0; +if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'browse'); + die(); +} +foreach($result as &$action) $songs .= $dl->generateSongCard($action); +$pagel = ''.$dl->getLocalizedString("errorGeneric").'
+ ++'; +if(!empty(trim($_GET["search"]))) $query = $db->prepare("SELECT count(*) FROM songs WHERE isDisabled != 0 AND $q $ngw"); +else $query = $db->prepare("SELECT count(*) FROM songs WHERE isDisabled != 0 $ngw"); +$query->execute(); +$packcount = $query->fetchColumn(); +$pagecount = ceil($packcount / 10); +$bottomrow = $dl->generateBottomRow($pagecount, $actualpage); +$dl->printPage($pagel . $bottomrow, true, "browse"); +?> \ No newline at end of file diff --git a/dashboard/stats/favourite.php b/dashboard/stats/favourite.php new file mode 100644 index 000000000..e835ee742 --- /dev/null +++ b/dashboard/stats/favourite.php @@ -0,0 +1,25 @@ +prepare('SELECT * FROM songs WHERE ID = :ID'); +$check->execute([':ID' => $id]); +$check = $check->fetchColumn(); +if(!empty($id) AND $_SESSION["accountID"] != 0 AND $check AND $check['isDisabled'] == 0) { + $favourites = $db->prepare("SELECT * FROM favsongs WHERE songID = :id AND accountID = :aid"); + $favourites->execute([':id' => $id, ':aid' => $_SESSION["accountID"]]); + $favourites = $favourites->fetch(); + if(!empty($favourites)) { + $favourites = $db->prepare("DELETE FROM favsongs WHERE songID = :id AND accountID = :aid"); + $favourites->execute([':id' => $id, ':aid' => $_SESSION["accountID"]]); + exit("1"); + } else { + $favourites = $db->prepare("INSERT INTO favsongs (songID, accountID, timestamp) VALUES (:id, :aid, :time)"); + $favourites->execute([':id' => $id, ':aid' => $_SESSION["accountID"], ':time' => time()]); + exit("1"); + } +} else exit("-1"); +?> \ No newline at end of file diff --git a/dashboard/stats/favouriteSongs.php b/dashboard/stats/favouriteSongs.php new file mode 100644 index 000000000..34de543de --- /dev/null +++ b/dashboard/stats/favouriteSongs.php @@ -0,0 +1,53 @@ +title($dl->getLocalizedString("favouriteSongs")); +$dl->printFooter('../'); +if(!isset($_SESSION["accountID"]) || $_SESSION["accountID"] == 0) die($dl->printSong(''.$dl->getLocalizedString("disabledSongs").'
++ '.$songs.' ++', 'account')); +if(isset($_GET["page"]) AND is_numeric($_GET["page"]) AND $_GET["page"] > 0) { + $page = ($_GET["page"] - 1) * 10; + $actualpage = $_GET["page"]; +} else { + $page = 0; + $actualpage = 1; +} +$dailytable = $songs = ""; +if(!isset($_GET["type"])) $_GET["type"] = ""; +if(!isset($_GET["ng"])) $_GET["ng"] = ""; +$query = $db->prepare("SELECT * FROM favsongs INNER JOIN songs on favsongs.songID = songs.ID WHERE favsongs.accountID = :id ORDER BY favsongs.ID DESC LIMIT 10 OFFSET $page"); +$query->execute([':id' => $_SESSION["accountID"]]); +$result = $query->fetchAll(); +if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'account'); + die(); +} +foreach($result as &$action) $songs .= $dl->generateSongCard($action); +$pagel = ''.$dl->getLocalizedString("errorGeneric").'
+ ++'; +$query = $db->prepare("SELECT * FROM favsongs INNER JOIN songs on favsongs.songID = songs.ID WHERE favsongs.accountID = :id ORDER BY favsongs.ID DESC"); +$query->execute([':id' => $_SESSION["accountID"]]); +$result = $query->fetchAll(); +$pagecount = ceil(count($result) / 10); +$bottomrow = $dl->generateBottomRow($pagecount, $actualpage); +$dl->printPage($pagel . $bottomrow, true, "account"); +?> \ No newline at end of file diff --git a/dashboard/stats/gauntletTable.php b/dashboard/stats/gauntletTable.php index a0bb765ca..59534f47b 100644 --- a/dashboard/stats/gauntletTable.php +++ b/dashboard/stats/gauntletTable.php @@ -2,92 +2,73 @@ session_start(); require "../incl/dashboardLib.php"; $dl = new dashboardLib(); -require "../../incl/lib/mainLib.php"; +require_once "../".$dbPath."incl/lib/mainLib.php"; $gs = new mainLib(); -/* - generating packtable -*/ -include "../../incl/lib/connection.php"; +$dl->title($dl->getLocalizedString("gauntletTable")); +$dl->printFooter('../'); +require "../".$dbPath."incl/lib/connection.php"; +require "../".$dbPath."incl/lib/exploitPatch.php"; if(isset($_GET["page"]) AND is_numeric($_GET["page"]) AND $_GET["page"] > 0){ $page = ($_GET["page"] - 1) * 10; $actualpage = $_GET["page"]; -}else{ +} else { $page = 0; $actualpage = 1; } -$x = $page + 1; -$gauntlettable = ""; +if(!isset($_GET["search"])) $_GET["search"] = ""; +if(!isset($_GET["type"])) $_GET["type"] = ""; +if(!isset($_GET["ng"])) $_GET["ng"] = ""; +$srcbtn = $levels = ""; +$pagelol = explode("/", $_SERVER["REQUEST_URI"]); +$pagelol = $pagelol[count($pagelol)-2]."/".$pagelol[count($pagelol)-1]; +$pagelol = explode("?", $pagelol)[0]; +$x = 1; +$packtable = ""; $query = $db->prepare("SELECT * FROM gauntlets ORDER BY ID ASC LIMIT 10 OFFSET $page"); $query->execute(); $result = $query->fetchAll(); -foreach($result as &$gauntlet){ - $lvlarray = array(); - for ($y = 1; $y < 6; $y++) { - $lvlarray[] = $gauntlet["level".$y]; - } +if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("favouriteSongs").'
++ '.$songs.' ++', 'browse'); + die(); +} +$modcheck = $gs->checkPermission($_SESSION["accountID"], "dashboardModTools"); +foreach($result as &$pack) { + $lvlarray = [$pack["level1"], $pack["level2"], $pack["level3"], $pack["level4"], $pack["level5"]]; $lvltable = ""; - foreach($lvlarray as &$lvl){ - $query = $db->prepare("SELECT levelID,levelName,starStars,userID,coins FROM levels WHERE levelID = :levelID"); + foreach($lvlarray as &$lvl) { + $query = $db->prepare("SELECT * FROM levels WHERE levelID = :levelID"); $query->execute([':levelID' => $lvl]); - $level = $query->fetch(); - $lvltable .= "'.$dl->getLocalizedString("errorGeneric").'
+ +- "; + $action = $query->fetch(); + if(!$action) continue; + $lvltable .= $dl->generateLevelsCard($action, $modcheck); } - $gauntlettable .= "".$level["levelID"]." -".$level["levelName"]." -".$gs->getUserName($level["userID"])." -".$level["starStars"]." -".$level["coins"]." -- '; + $packtable .= '$x -".$gs->getGauntletName($gauntlet["ID"]).' -- Show - - - -+'; $x++; - echo ""; } -/* - bottom row -*/ -//getting count -$query = $db->prepare("SELECT count(*) FROM gauntlets"); -$query->execute(); -$gauntletcount = $query->fetchColumn(); -$pagecount = ceil($gauntletcount / 10); +$pagecount = ceil($dailycount / 10); $bottomrow = $dl->generateBottomRow($pagecount, $actualpage); -/* - printing -*/ -$dl->printPage('++++'.$gs->getGauntletName($pack["ID"]).' Gauntlet
++ '.$lvltable.' ++- -
' -.$bottomrow, true, "stats"); +$dl->printPage('- - - - '.$gauntlettable.' - -# -'.$dl->getLocalizedString("name").' -'.$dl->getLocalizedString("levels").' -'.$bottomrow, 'browse'); ?> \ No newline at end of file diff --git a/dashboard/stats/index.php b/dashboard/stats/index.php new file mode 100644 index 000000000..742d3251d --- /dev/null +++ b/dashboard/stats/index.php @@ -0,0 +1,3 @@ + \ No newline at end of file diff --git a/dashboard/stats/levelComments.php b/dashboard/stats/levelComments.php new file mode 100644 index 000000000..c4ff04606 --- /dev/null +++ b/dashboard/stats/levelComments.php @@ -0,0 +1,111 @@ +title($dl->getLocalizedString("levelComments")); +$dl->printFooter('../'); +if(isset($_GET["page"]) AND is_numeric($_GET["page"]) AND $_GET["page"] > 0) { + $page = ($_GET["page"] - 1) * 10; + $actualpage = $_GET["page"]; +} else { + $page = 0; + $actualpage = 1; +} +if(!isset($_GET["search"])) $_GET["search"] = ""; +if(!isset($_GET["levelID"])) $_GET["levelID"] = ""; +if(!isset($_GET["type"])) $_GET["type"] = ""; +if(!isset($_GET["ng"])) $_GET["ng"] = ""; +$srcbtn = $levels = ""; +$levelID = ExploitPatch::number($_GET['levelID']); +$modcheck = $gs->checkPermission($_SESSION["accountID"], "dashboardModTools"); +$commentDeleteCheck = $gs->checkPermission($_SESSION["accountID"], "actionDeleteComment"); +$query = $db->prepare("SELECT * FROM levels WHERE levelID = :levelID".(!$modcheck ? ' AND unlisted = 0' : '')); +$query->execute([':levelID' => $levelID]); +$level = $query->fetch(); +if(empty($level)) die($dl->printSong(''.$dl->getLocalizedString('gauntletTable').'
++ '.$packtable.' +++', 'browse')); +if($_SESSION['accountID'] != 0) { + if(isset($_POST['deleteCommentID'])) { + $commentID = ExploitPatch::number($_POST['deleteCommentID']); + $query = $db->prepare("SELECT * FROM comments WHERE commentID = :deleteCommentID"); + $query->execute([':deleteCommentID' => $commentID]); + $comment = $query->fetch(); + $creatorAccID = $gs->getExtID($comment['userID']); + if($comment && ($commentDeleteCheck || $_SESSION['accountID'] == $creatorAccID)) { + $query = $db->prepare("DELETE FROM comments WHERE commentID = :deleteCommentID"); + $query->execute([':deleteCommentID' => $commentID]); + $gs->logAction($_SESSION['accountID'], 13, $comment['userName'], $comment['comment'], $creatorAccID, $commentID, ($comment['likes'] - $comment['dislikes']), $comment['levelID']); + } + } + if(isset($_POST['commentText'])) { + if(!Automod::isLevelsDisabled(1)) { + $commentText = trim(ExploitPatch::rucharclean($_POST['commentText'])); + $commentLength = mb_strlen($commentText); + if($enableCommentLengthLimiter && $commentLength > $maxCommentLength) $alertText = sprintf($dl->getLocalizedString('cantPostCommentsAboveChars'), $maxCommentLength); + elseif($commentText) { + $commentText = ExploitPatch::url_base64_encode($commentText); + $userName = $gs->getAccountName($_SESSION['accountID']); + $query = $db->prepare("INSERT INTO comments (userName, comment, levelID, userID, timeStamp, percent) VALUES (:userName, :comment, :levelID, :userID, :uploadDate, :percent)"); + $query->execute([':userName' => $userName, ':comment' => $commentText, ':levelID' => $levelID, ':userID' => $gs->getUserID($_SESSION['accountID'], $userName), ':uploadDate' => time(), ':percent' => 0]); + $gs->logAction($_SESSION['accountID'], 15, $userName, $commentText, $db->lastInsertId(), $levelID); + } + } else $alertText = $dl->getLocalizedString('commentingIsDisabled'); + } +} +$query = $db->prepare("SELECT * FROM comments WHERE levelID = :levelID ORDER BY timestamp DESC LIMIT 10 OFFSET $page"); +$query->execute([':levelID' => $levelID]); +$result = $query->fetchAll(); +if(isset($_SERVER["HTTP_REFERER"])) $back = ''; +else $back = ''; +foreach($result as &$action) $comments .= $dl->generateCommentsCard($action, $commentDeleteCheck); +if(empty($comments)) $comments = ''.$dl->getLocalizedString("errorGeneric").'
+ ++ +'; +$pagel = ''.$dl->getLocalizedString('noComments').'
+++'.($_SESSION['accountID'] != 0 ? ''.$back.$dl->getLocalizedString("levelComments").'
++ '.$dl->generateLevelsCard($level, $modcheck).' +++ '.$comments.' +++ + +' : '').' +'; +/* + bottom row +*/ +//getting count +$query = $db->prepare("SELECT count(*) FROM comments WHERE levelID = :levelID"); +$query->execute([':levelID' => $levelID]); +$packcount = $query->fetchColumn(); +$pagecount = ceil($packcount / 10); +$bottomrow = $dl->generateBottomRow($pagecount, $actualpage); +$dl->printPage($pagel.$bottomrow, true, "browse"); +?> \ No newline at end of file diff --git a/dashboard/stats/levelLeaderboards.php b/dashboard/stats/levelLeaderboards.php new file mode 100644 index 000000000..7fca67a6f --- /dev/null +++ b/dashboard/stats/levelLeaderboards.php @@ -0,0 +1,131 @@ +title($dl->getLocalizedString("levelLeaderboards")); +$dl->printFooter('../'); +if(isset($_GET["page"]) AND is_numeric($_GET["page"]) AND $_GET["page"] > 0) { + $page = ($_GET["page"] - 1) * 10; + $actualpage = $_GET["page"]; +} else { + $page = 0; + $actualpage = 1; +} +if(!isset($_GET["search"])) $_GET["search"] = ""; +if(!isset($_GET["levelID"])) $_GET["levelID"] = ""; +if(!isset($_GET["type"])) $_GET["type"] = ""; +if(!isset($_GET["ng"])) $_GET["ng"] = ""; +$srcbtn = $levels = ""; +$levelID = ExploitPatch::number($_GET['levelID']); +$type = ExploitPatch::number($_GET['type']) ?: ($_SESSION['accountID'] != 0 ? 0 : 1); +$modcheck = $gs->checkPermission($_SESSION["accountID"], "dashboardModTools"); +$leaderboardDeleteCheck = $gs->checkPermission($_SESSION["accountID"], "dashboardDeleteLeaderboards"); +$query = $db->prepare("SELECT * FROM levels WHERE levelID = :levelID".(!$modcheck ? ' AND unlisted = 0' : '')); +$query->execute([':levelID' => $levelID]); +$level = $query->fetch(); +if(empty($level) || $level['levelLength'] == 5) die($dl->printSong('+', 'browse')); +if($_SESSION['accountID'] != 0) { + if(isset($_POST['deleteLeaderboardID'])) { + $deleteLeaderboardID = ExploitPatch::number($_POST['deleteLeaderboardID']); + $query = $db->prepare("SELECT count(*) FROM levelscores WHERE scoreID = :deleteLeaderboardID"); + $query->execute([':deleteLeaderboardID' => $deleteLeaderboardID]); + $leaderboard = $query->fetch(); + if($leaderboard && $leaderboardDeleteCheck) { + $query = $db->prepare("DELETE FROM levelscores WHERE scoreID = :deleteLeaderboardID"); + $query->execute([':deleteLeaderboardID' => $deleteLeaderboardID]); + } + } +} +switch($type) { + case 1: + $query2 = $db->prepare("SELECT * FROM levelscores WHERE dailyID = 0 AND levelID = :levelID ORDER BY percent DESC, uploadDate ASC LIMIT 10 OFFSET $page"); + $countQuery = "SELECT count(*) FROM levelscores WHERE dailyID = 0 AND levelID = :levelID"; + $query2args = [':levelID' => $levelID]; + break; + case 2: + $query2 = $db->prepare("SELECT * FROM levelscores WHERE dailyID = 0 AND levelID = :levelID AND uploadDate > :time ORDER BY percent DESC, uploadDate ASC LIMIT 10 OFFSET $page"); + $countQuery = "SELECT count(*) FROM levelscores WHERE dailyID = 0 AND levelID = :levelID AND uploadDate > :time"; + $query2args = [':levelID' => $levelID, ':time' => time() - 604800]; + break; + default: + $friends = $gs->getFriends($_SESSION['accountID']); + $friends[] = $_SESSION['accountID']; + $friends = implode(",", $friends); + $query2 = $db->prepare("SELECT * FROM levelscores WHERE dailyID = 0 AND levelID = :levelID AND accountID IN ($friends) ORDER BY percent DESC, uploadDate ASC LIMIT 10 OFFSET $page"); + $countQuery = "SELECT count(*) FROM levelscores WHERE dailyID = 0 AND levelID = :levelID AND accountID IN ($friends)"; + $query2args = [':levelID' => $levelID]; + break; +} +$query2->execute($query2args); +$result = $query2->fetchAll(); +if(isset($_SERVER["HTTP_REFERER"])) $back = ''; +else $back = ''; +$typeMenu = ' +'; +$x = 0; +foreach($result as &$leaderboard) { + $x++; + $query = $db->prepare("SELECT userName, extID, userID, icon, color1, color2, color3, iconType, special, clan, IP FROM users WHERE extID = :extID"); + $query->execute([':extID' => $leaderboard['accountID']]); + $action = $query->fetch(); + $percent = ''.$dl->getLocalizedString("errorGeneric").'
+ +'.$leaderboard["percent"].'
'; + $attempts = ''.$leaderboard["attempts"].'
'; + $coins = ''.$leaderboard["coins"].'
'; + $leaderboards .= $dl->generateLeaderboardsCard($x, $leaderboard, $action, $leaderboardDeleteCheck, $percent.$attempts.$coins); +} +if(empty($leaderboards)) $leaderboards = '+ +'; +$pagel = ''.$dl->getLocalizedString('noLeaderboards').'
++'; +/* + bottom row +*/ +//getting count +$query = $db->prepare($countQuery); +$query->execute($query2args); +$packcount = $query->fetchColumn(); +$pagecount = ceil($packcount / 10); +$bottomrow = $dl->generateBottomRow($pagecount, $actualpage); +$dl->printPage($pagel.$bottomrow, true, "browse"); +?> \ No newline at end of file diff --git a/dashboard/stats/levelsList.php b/dashboard/stats/levelsList.php new file mode 100644 index 000000000..e8dde45b5 --- /dev/null +++ b/dashboard/stats/levelsList.php @@ -0,0 +1,64 @@ +title($dl->getLocalizedString("levels")); +$dl->printFooter('../'); +if(isset($_GET["page"]) AND is_numeric($_GET["page"]) AND $_GET["page"] > 0){ + $page = ($_GET["page"] - 1) * 10; + $actualpage = $_GET["page"]; +} else { + $page = 0; + $actualpage = 1; +} +if(!isset($_GET["search"])) $_GET["search"] = ""; +if(!isset($_GET["type"])) $_GET["type"] = ""; +if(!isset($_GET["ng"])) $_GET["ng"] = ""; +$srcbtn = $levels = ""; +$pagelol = explode("/", $_SERVER["REQUEST_URI"]); +$pagelol = $pagelol[count($pagelol)-2]."/".$pagelol[count($pagelol)-1]; +$pagelol = explode("?", $pagelol)[0]; +$modcheck = $gs->checkPermission($_SESSION["accountID"], "dashboardModTools"); +$searchValue = trim(ExploitPatch::rucharclean($_GET["search"])); +if(!empty($searchValue)) { + $srcbtn = ''; + $query = $db->prepare("SELECT * FROM levels WHERE unlisted = 0 AND ".(is_numeric($searchValue) ? 'levelID' : 'levelName')." LIKE '%".$searchValue."%' ORDER BY uploadDate DESC LIMIT 10 OFFSET $page"); +} else $query = $db->prepare("SELECT * FROM levels WHERE unlisted = 0 ORDER BY uploadDate DESC LIMIT 10 OFFSET $page"); +$query->execute(); +$result = $query->fetchAll(); +if(empty($result)) die($dl->printSong(''.$back.$dl->getLocalizedString("levelLeaderboards").$typeMenu.'
++ '.$dl->generateLevelsCard($level, $modcheck).' +++ '.$leaderboards.' +++', 'browse')); +foreach($result as &$action) $levels .= $dl->generateLevelsCard($action, $modcheck); +$pagel = ''.$dl->getLocalizedString("errorGeneric").'
+ ++'; +/* + bottom row +*/ +//getting count +if(!empty($searchValue)) $query = $db->prepare("SELECT count(*) FROM levels WHERE unlisted = 0 AND ".(is_numeric($searchValue) ? 'levelID' : 'levelName')." LIKE '%".$searchValue."%'"); +else $query = $db->prepare("SELECT count(*) FROM levels WHERE unlisted = 0"); +$query->execute(); +$packcount = $query->fetchColumn(); +$pagecount = ceil($packcount / 10); +$bottomrow = $dl->generateBottomRow($pagecount, $actualpage); +$dl->printPage($pagel.$bottomrow, true, "browse"); +?> \ No newline at end of file diff --git a/dashboard/stats/listsTable.php b/dashboard/stats/listsTable.php new file mode 100644 index 000000000..bd1deca15 --- /dev/null +++ b/dashboard/stats/listsTable.php @@ -0,0 +1,101 @@ +printFooter('../'); +$dl->title($dl->getLocalizedString("listTable")); +if(isset($_GET["page"]) AND is_numeric($_GET["page"]) AND $_GET["page"] > 0) { + $page = ($_GET["page"] - 1) * 10; + $actualpage = $_GET["page"]; +} else { + $page = 0; + $actualpage = 1; +} +if(!isset($_GET["search"])) $_GET["search"] = ""; +if(!isset($_GET["type"])) $_GET["type"] = ""; +if(!isset($_GET["ng"])) $_GET["ng"] = ""; +$srcbtn = $levels = ""; +$pagelol = explode("/", $_SERVER["REQUEST_URI"]); +$pagelol = $pagelol[count($pagelol)-2]."/".$pagelol[count($pagelol)-1]; +$pagelol = explode("?", $pagelol)[0]; +$x = 1; +$packtable = ""; +$query = $db->prepare("SELECT * FROM lists WHERE unlisted = 0 ORDER BY listID DESC LIMIT 10 OFFSET $page"); +$query->execute(); +$result = $query->fetchAll(); +if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("levels").'
++ '.$levels.' ++', 'browse'); + die(); +} +$modcheck = $gs->checkPermission($_SESSION["accountID"], "dashboardModTools"); +foreach($result as &$pack){ + $lvlarray = explode(",", $pack["listlevels"]); + $lvltable = ""; + $listDesc = htmlspecialchars(ExploitPatch::url_base64_decode($pack['listDesc'])); + if(empty($listDesc)) $listDesc = ''.$dl->getLocalizedString("errorGeneric").'
+ +'.$dl->getLocalizedString("noDesc").' '; + $starspack = $pack["starStars"]; + if($pack["starStars"] == 0) $starspack = '0'; + $coinspack = $pack["countForReward"]; + $pst = ''.$starspack.'
'; + if($pack["countForReward"] != 0) $pcc = ''.$coinspack.'
'; else $pcc = ''; + $pd = ''.$gs->getListDiffName($pack['starDifficulty']).'
'; + $lk = ''.abs($pack['likes'] - $pack['dislikes']).'
'; + $dload = ''.$pack['downloads'].'
'; + $packall = $dload.$lk.$pst.$pd.$pcc; + foreach($lvlarray as &$lvl) { + $query = $db->prepare("SELECT * FROM levels WHERE levelID = :levelID"); + $query->execute([':levelID' => $lvl]); + $action = $query->fetch(); + if(!$action) continue; + $lvltable .= $dl->generateLevelsCard($action, $modcheck); + } + // Avatar management + $avatarImg = ''; + $query = $db->prepare('SELECT userName, iconType, color1, color2, color3, accGlow, accIcon, accShip, accBall, accBird, accDart, accRobot, accSpider, accSwing, accJetpack FROM users WHERE extID = :extID'); + $query->execute(['extID' => $pack["accountID"]]); + $userData = $query->fetch(PDO::FETCH_ASSOC); + if($userData) { + $iconType = ($userData['iconType'] > 8) ? 0 : $userData['iconType']; + $iconTypeMap = [0 => ['type' => 'cube', 'value' => $userData['accIcon']], 1 => ['type' => 'ship', 'value' => $userData['accShip']], 2 => ['type' => 'ball', 'value' => $userData['accBall']], 3 => ['type' => 'ufo', 'value' => $userData['accBird']], 4 => ['type' => 'wave', 'value' => $userData['accDart']], 5 => ['type' => 'robot', 'value' => $userData['accRobot']], 6 => ['type' => 'spider', 'value' => $userData['accSpider']], 7 => ['type' => 'swing', 'value' => $userData['accSwing']], 8 => ['type' => 'jetpack', 'value' => $userData['accJetpack']]]; + $iconValue = (isset($iconTypeMap[$iconType]) && $iconTypeMap[$iconType]['value'] > 0) ? $iconTypeMap[$iconType]['value'] : 1; + $avatarImg = '';
+ }
+ $packtable .= '+'; + $x++; +} +$pagecount = ceil($dailycount / 10); +$bottomrow = $dl->generateBottomRow($pagecount, $actualpage); +$dl->printPage('++++'.sprintf($dl->getLocalizedString("demonlistLevel"), htmlspecialchars($pack["listName"]), 0, htmlspecialchars($gs->getAccountName($pack['accountID'])), $avatarImg).'
+'.$listDesc.'
++ '.$packall.' +++ '.$lvltable.' ++++ID: '.$pack["listID"].'
+'.$dl->getLocalizedString('date').': '.$dl->convertToDate($pack["uploadDate"], true).'
+'.$bottomrow, 'browse'); +?> \ No newline at end of file diff --git a/dashboard/stats/listsTableMod.php b/dashboard/stats/listsTableMod.php new file mode 100644 index 000000000..d708ef850 --- /dev/null +++ b/dashboard/stats/listsTableMod.php @@ -0,0 +1,109 @@ +printFooter('../'); +$dl->title($dl->getLocalizedString("listTableMod")); +$modcheck = $gs->checkPermission($_SESSION["accountID"], "dashboardModTools"); +if(!$modcheck) exit($dl->printSong(''.$dl->getLocalizedString('listTable').'
++ '.$packtable.' +++', 'mod')); +if(isset($_GET["page"]) AND is_numeric($_GET["page"]) AND $_GET["page"] > 0){ + $page = ($_GET["page"] - 1) * 10; + $actualpage = $_GET["page"]; +} else { + $page = 0; + $actualpage = 1; +} +if(!isset($_GET["search"])) $_GET["search"] = ""; +if(!isset($_GET["type"])) $_GET["type"] = ""; +if(!isset($_GET["ng"])) $_GET["ng"] = ""; +$srcbtn = $levels = ""; +$pagelol = explode("/", $_SERVER["REQUEST_URI"]); +$pagelol = $pagelol[count($pagelol)-2]."/".$pagelol[count($pagelol)-1]; +$pagelol = explode("?", $pagelol)[0]; +$x = 1; +$packtable = ""; +$query = $db->prepare("SELECT * FROM lists WHERE unlisted != 0 ORDER BY listID DESC LIMIT 10 OFFSET $page"); +$query->execute(); +$result = $query->fetchAll(); +if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'mod'); + die(); +} +$modcheck = $gs->checkPermission($_SESSION["accountID"], "dashboardModTools"); +foreach($result as &$pack){ + $lvlarray = explode(",", $pack["listlevels"]); + $lvltable = ""; + $listDesc = htmlspecialchars(ExploitPatch::url_base64_decode($pack['listDesc'])); + if(empty($listDesc)) $listDesc = ''.$dl->getLocalizedString("errorGeneric").'
+ +'.$dl->getLocalizedString("noDesc").' '; + $starspack = $pack["starStars"]; + if($pack["starStars"] == 0) $starspack = '0'; + $coinspack = $pack["countForReward"]; + $pst = ''.$starspack.'
'; + if($pack["countForReward"] != 0) $pcc = ''.$coinspack.'
'; else $pcc = ''; + $pd = ''.$gs->getListDiffName($pack['starDifficulty']).'
'; + $lk = ''.abs($pack['likes'] - $pack['dislikes']).'
'; + $dload = ''.$pack['downloads'].'
'; + $packall = $dload.$lk.$pst.$pd.$pcc; + foreach($lvlarray as &$lvl) { + $query = $db->prepare("SELECT * FROM levels WHERE levelID = :levelID"); + $query->execute([':levelID' => $lvl]); + $action = $query->fetch(); + if(!$action) continue; + $lvltable .= $dl->generateLevelsCard($action, $modcheck); + } + // Avatar management + $avatarImg = ''; + $query = $db->prepare('SELECT userName, iconType, color1, color2, color3, accGlow, accIcon, accShip, accBall, accBird, accDart, accRobot, accSpider, accSwing, accJetpack FROM users WHERE extID = :extID'); + $query->execute(['extID' => $pack["accountID"]]); + $userData = $query->fetch(PDO::FETCH_ASSOC); + if($userData) { + $iconType = ($userData['iconType'] > 8) ? 0 : $userData['iconType']; + $iconTypeMap = [0 => ['type' => 'cube', 'value' => $userData['accIcon']], 1 => ['type' => 'ship', 'value' => $userData['accShip']], 2 => ['type' => 'ball', 'value' => $userData['accBall']], 3 => ['type' => 'ufo', 'value' => $userData['accBird']], 4 => ['type' => 'wave', 'value' => $userData['accDart']], 5 => ['type' => 'robot', 'value' => $userData['accRobot']], 6 => ['type' => 'spider', 'value' => $userData['accSpider']], 7 => ['type' => 'swing', 'value' => $userData['accSwing']], 8 => ['type' => 'jetpack', 'value' => $userData['accJetpack']]]; + $iconValue = (isset($iconTypeMap[$iconType]) && $iconTypeMap[$iconType]['value'] > 0) ? $iconTypeMap[$iconType]['value'] : 1; + $avatarImg = '';
+ }
+ $packtable .= '+'; + $x++; +} +$pagecount = ceil($dailycount / 10); +$bottomrow = $dl->generateBottomRow($pagecount, $actualpage); +$dl->printPage('++++'.sprintf($dl->getLocalizedString("demonlistLevel"), htmlspecialchars($pack["listName"]), 0, htmlspecialchars($gs->getAccountName($pack['accountID'])), $avatarImg).'
+'.$listDesc.'
++ '.$packall.' +++ '.$lvltable.' ++++ID: '.$pack["listID"].'
+'.$dl->getLocalizedString('date').': '.$dl->convertToDate($pack["uploadDate"], true).'
+'.$bottomrow, 'browse'); +?> \ No newline at end of file diff --git a/dashboard/stats/listsTableYour.php b/dashboard/stats/listsTableYour.php new file mode 100644 index 000000000..15b587145 --- /dev/null +++ b/dashboard/stats/listsTableYour.php @@ -0,0 +1,108 @@ +printFooter('../'); +$dl->title($dl->getLocalizedString("listTableYour")); +if(!isset($_SESSION["accountID"]) || $_SESSION["accountID"] == 0) exit($dl->printSong(''.$dl->getLocalizedString('listTableMod').'
++ '.$packtable.' +++', 'account')); +if(isset($_GET["page"]) AND is_numeric($_GET["page"]) AND $_GET["page"] > 0){ + $page = ($_GET["page"] - 1) * 10; + $actualpage = $_GET["page"]; +} else { + $page = 0; + $actualpage = 1; +} +if(!isset($_GET["search"])) $_GET["search"] = ""; +if(!isset($_GET["type"])) $_GET["type"] = ""; +if(!isset($_GET["ng"])) $_GET["ng"] = ""; +$srcbtn = $levels = ""; +$pagelol = explode("/", $_SERVER["REQUEST_URI"]); +$pagelol = $pagelol[count($pagelol)-2]."/".$pagelol[count($pagelol)-1]; +$pagelol = explode("?", $pagelol)[0]; +$x = 1; +$packtable = ""; +$query = $db->prepare("SELECT * FROM lists WHERE unlisted != 0 AND accountID = :accID ORDER BY listID DESC LIMIT 10 OFFSET $page"); +$query->execute([':accID' => $_SESSION['accountID']]); +$result = $query->fetchAll(); +if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'account'); + die(); +} +$modcheck = $gs->checkPermission($_SESSION["accountID"], "dashboardModTools"); +foreach($result as &$pack){ + $lvlarray = explode(",", $pack["listlevels"]); + $lvltable = ""; + $listDesc = htmlspecialchars(ExploitPatch::url_base64_decode($pack['listDesc'])); + if(empty($listDesc)) $listDesc = ''.$dl->getLocalizedString("errorGeneric").'
+ +'.$dl->getLocalizedString("noDesc").' '; + $starspack = $pack["starStars"]; + if($pack["starStars"] == 0) $starspack = '0'; + $coinspack = $pack["countForReward"]; + $pst = ''.$starspack.'
'; + if($pack["countForReward"] != 0) $pcc = ''.$coinspack.'
'; else $pcc = ''; + $pd = ''.$gs->getListDiffName($pack['starDifficulty']).'
'; + $lk = ''.abs($pack['likes'] - $pack['dislikes']).'
'; + $dload = ''.$pack['downloads'].'
'; + $packall = $dload.$lk.$pst.$pd.$pcc; + foreach($lvlarray as &$lvl) { + $query = $db->prepare("SELECT * FROM levels WHERE levelID = :levelID"); + $query->execute([':levelID' => $lvl]); + $action = $query->fetch(); + if(!$action) continue; + $lvltable .= $dl->generateLevelsCard($action, $modcheck); + } + // Avatar management + $avatarImg = ''; + $query = $db->prepare('SELECT userName, iconType, color1, color2, color3, accGlow, accIcon, accShip, accBall, accBird, accDart, accRobot, accSpider, accSwing, accJetpack FROM users WHERE extID = :extID'); + $query->execute(['extID' => $pack["accountID"]]); + $userData = $query->fetch(PDO::FETCH_ASSOC); + if($userData) { + $iconType = ($userData['iconType'] > 8) ? 0 : $userData['iconType']; + $iconTypeMap = [0 => ['type' => 'cube', 'value' => $userData['accIcon']], 1 => ['type' => 'ship', 'value' => $userData['accShip']], 2 => ['type' => 'ball', 'value' => $userData['accBall']], 3 => ['type' => 'ufo', 'value' => $userData['accBird']], 4 => ['type' => 'wave', 'value' => $userData['accDart']], 5 => ['type' => 'robot', 'value' => $userData['accRobot']], 6 => ['type' => 'spider', 'value' => $userData['accSpider']], 7 => ['type' => 'swing', 'value' => $userData['accSwing']], 8 => ['type' => 'jetpack', 'value' => $userData['accJetpack']]]; + $iconValue = (isset($iconTypeMap[$iconType]) && $iconTypeMap[$iconType]['value'] > 0) ? $iconTypeMap[$iconType]['value'] : 1; + $avatarImg = '';
+ }
+ $packtable .= '+'; + $x++; +} +$pagecount = ceil($dailycount / 10); +$bottomrow = $dl->generateBottomRow($pagecount, $actualpage); +$dl->printPage('++++'.sprintf($dl->getLocalizedString("demonlistLevel"), htmlspecialchars($pack["listName"]), 0, htmlspecialchars($gs->getAccountName($pack['accountID'])), $avatarImg).'
+'.$listDesc.'
++ '.$packall.' +++ '.$lvltable.' ++++ID: '.$pack["listID"].'
+'.$dl->getLocalizedString('date').': '.$dl->convertToDate($pack["uploadDate"], true).'
+'.$bottomrow, 'browse'); +?> \ No newline at end of file diff --git a/dashboard/stats/manageSFX.php b/dashboard/stats/manageSFX.php new file mode 100644 index 000000000..6ec5ca6f1 --- /dev/null +++ b/dashboard/stats/manageSFX.php @@ -0,0 +1,88 @@ +title($dl->getLocalizedString("manageSFX")); +$dl->printFooter('../'); +if(isset($_SESSION["accountID"]) AND $_SESSION["accountID"] != 0){ +if(isset($_GET["page"]) AND is_numeric($_GET["page"]) AND $_GET["page"] > 0){ + $page = ($_GET["page"] - 1) * 10; + $actualpage = $_GET["page"]; +}else{ + $page = 0; + $actualpage = 1; +} +$pagelol = explode("/", $_SERVER["REQUEST_URI"]); +$pagelol = $pagelol[count($pagelol)-2]."/".$pagelol[count($pagelol)-1]; +$pagelol = explode("?", $pagelol)[0]; +$accountID = $_SESSION["accountID"]; +if(!isset($_GET["search"])) $_GET["search"] = ""; +$srcbtn = ""; +if(!empty(trim(ExploitPatch::rucharclean($_GET["search"])))) { + $q = is_numeric(trim(ExploitPatch::rucharclean($_GET["search"]))) ? "ID LIKE '%".trim(ExploitPatch::rucharclean($_GET["search"]))."%'" : "(name LIKE '%".trim(ExploitPatch::rucharclean($_GET["search"]))."%' OR authorName LIKE '%".trim(ExploitPatch::rucharclean($_GET["search"]))."%')"; + $srcbtn = ''; + $query = $db->prepare("SELECT * FROM sfxs WHERE reuploadID = $accountID AND $q ORDER BY reuploadTime DESC LIMIT 10 OFFSET $page"); + $query->execute(); + $result = $query->fetchAll(); + if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString('listTableYour').'
++ '.$packtable.' +++', "account"); + die(); + } +} else { + $query = $db->prepare("SELECT * FROM sfxs WHERE reuploadID = $accountID ORDER BY reuploadTime DESC LIMIT 10 OFFSET $page"); + $query->execute(); + $result = $query->fetchAll(); +} +$x = $page + 1; +if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'account'); + die(); +} +foreach($result as &$action) { + $whoused = ''.$dl->getLocalizedString("errorGeneric").'
+ +'.$action['levelsCount'].'
'; + $songs .= $dl->generateSFXCard($action, $whoused, false); +} +$pagel = '+'; +if(!empty(trim(ExploitPatch::rucharclean($_GET["search"])))) $query = $db->prepare("SELECT count(*) FROM sfxs WHERE reuploadID=:id AND $q"); +else $query = $db->prepare("SELECT count(*) FROM sfxs WHERE reuploadID=:id"); +$query->execute([':id' => $accountID]); +$packcount = $query->fetchColumn(); +$pagecount = ceil($packcount / 10); +$bottomrow = $dl->generateBottomRow($pagecount, $actualpage); +$dl->printPage($pagel . $bottomrow, true, "account"); +} else { + $dl->printSong(''.$dl->getLocalizedString("manageSFX").'
++ '.$songs.' ++', 'account'); +} +?> \ No newline at end of file diff --git a/dashboard/stats/manageSongs.php b/dashboard/stats/manageSongs.php new file mode 100644 index 000000000..f16e117a0 --- /dev/null +++ b/dashboard/stats/manageSongs.php @@ -0,0 +1,89 @@ +title($dl->getLocalizedString("manageSongs")); +$dl->printFooter('../'); +if(!isset($_SESSION["accountID"]) || $_SESSION["accountID"] == 0) die($dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'account')); +if(isset($_GET["page"]) AND is_numeric($_GET["page"]) AND $_GET["page"] > 0) { + $page = ($_GET["page"] - 1) * 10; + $actualpage = $_GET["page"]; +} else { + $page = 0; + $actualpage = 1; +} +$pagelol = explode("/", $_SERVER["REQUEST_URI"]); +$pagelol = $pagelol[count($pagelol)-2]."/".$pagelol[count($pagelol)-1]; +$pagelol = explode("?", $pagelol)[0]; +$accountID = $_SESSION["accountID"]; +if(!isset($_GET["search"])) $_GET["search"] = ""; +$srcbtn = ""; +if(!empty(trim(ExploitPatch::rucharclean($_GET["search"])))) { + $q = is_numeric(trim(ExploitPatch::rucharclean($_GET["search"]))) ? "ID LIKE '%".trim(ExploitPatch::rucharclean($_GET["search"]))."%'" : "(name LIKE '%".trim(ExploitPatch::rucharclean($_GET["search"]))."%' OR authorName LIKE '%".trim(ExploitPatch::rucharclean($_GET["search"]))."%')"; + $srcbtn = ''; + $query = $db->prepare("SELECT * FROM songs WHERE reuploadID = $accountID AND $q ORDER BY reuploadTime DESC LIMIT 10 OFFSET $page"); + $query->execute(); + $result = $query->fetchAll(); + if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', "account"); + die(); + } +} else { + $query = $db->prepare("SELECT * FROM songs WHERE reuploadID = $accountID ORDER BY reuploadTime DESC LIMIT 10 OFFSET $page"); + $query->execute(); + $result = $query->fetchAll(); +} +if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'account'); + die(); +} +foreach($result as &$action) { + $wholiked = $db->prepare("SELECT count(*) FROM favsongs WHERE songID = :id"); + $wholiked->execute([':id' => $songsid]); + $wholiked = $wholiked->fetchColumn(); + $whoused = $action['levelsCount']; + $wholiked = ''.$dl->getLocalizedString("errorGeneric").'
+ +'.$wholiked.'
'; + $whoused = ''.$whoused.'
'; + $songs .= $dl->generateSongCard($action, $wholiked.$whoused, false); +} +$pagel = '+'; +if(!empty(trim(ExploitPatch::rucharclean($_GET["search"])))) $query = $db->prepare("SELECT count(*) FROM songs WHERE reuploadID=:id AND $q"); +else $query = $db->prepare("SELECT count(*) FROM songs WHERE reuploadID = :id"); +$query->execute([':id' => $accountID]); +$packcount = $query->fetchColumn(); +$pagecount = ceil($packcount / 10); +$bottomrow = $dl->generateBottomRow($pagecount, $actualpage); +$dl->printPage($pagel . $bottomrow, true, "account"); +?> \ No newline at end of file diff --git a/dashboard/stats/modActions.php b/dashboard/stats/modActions.php deleted file mode 100644 index d2b1d3777..000000000 --- a/dashboard/stats/modActions.php +++ /dev/null @@ -1,52 +0,0 @@ -getAccountsWithPermission("toolModactions")); -if($accounts == ""){ - $dl->printBox(sprintf($dl->getLocalizedString("errorNoAccWithPerm"), "toolsModactions")); - exit(); -} -$query = $db->prepare("SELECT accountID, userName FROM accounts WHERE accountID IN ($accounts) ORDER BY userName ASC"); -$query->execute(); -$result = $query->fetchAll(); -$row = 0; -foreach($result as &$mod){ - $row++; - $query = $db->prepare("SELECT lastPlayed FROM users WHERE extID = :id"); - $query->execute([':id' => $mod["accountID"]]); - $time = $dl->convertToDate($query->fetchColumn()); - $query = $db->prepare("SELECT count(*) FROM modactions WHERE account = :id"); - $query->execute([':id' => $mod["accountID"]]); - $actionscount = $query->fetchColumn(); - $query = $db->prepare("SELECT count(*) FROM modactions WHERE account = :id AND type = '1'"); - $query->execute([':id' => $mod["accountID"]]); - $lvlcount = $query->fetchColumn(); - $modtable .= "'.$dl->getLocalizedString("manageSongs").'
++ '.$songs.' +".$row." ".$mod["userName"]." ".$actionscount." ".$lvlcount." ".$time." - -
', true, "stats"); -?> \ No newline at end of file diff --git a/dashboard/stats/modActionsList.php b/dashboard/stats/modActionsList.php index 6b342c607..e274ddc87 100644 --- a/dashboard/stats/modActionsList.php +++ b/dashboard/stats/modActionsList.php @@ -1,73 +1,349 @@ 0){ +$dl = new dashboardLib(); +$dl->title($dl->getLocalizedString("modActionsList")); +if(isset($_GET["page"]) AND is_numeric($_GET["page"]) AND $_GET["page"] > 0) { $page = ($_GET["page"] - 1) * 10; $actualpage = $_GET["page"]; -}else{ +} else { $page = 0; $actualpage = 1; } -$table = '- - - - '.$modtable.' - -# -'.$dl->getLocalizedString("mod").' -'.$dl->getLocalizedString("count").' -'.$dl->getLocalizedString("ratedLevels").' -'.$dl->getLocalizedString("lastSeen").' -
"; -/* - bottom row -*/ -//getting count -$query = $db->prepare("SELECT count(*) FROM modactions"); +$mods = $db->prepare("SELECT * FROM roleassign GROUP BY accountID"); +$mods->execute(); +$mods = $mods->fetchAll(); +$options = ''; +foreach($mods as &$mod) { + $name = $gs->getAccountName($mod["accountID"]); + $options .= ''; +}; +$pagel = '# '.$dl->getLocalizedString("mod").' '.$dl->getLocalizedString("action").' '.$dl->getLocalizedString("value").' '.$dl->getLocalizedString("value2").' '.$dl->getLocalizedString("level").' '.$dl->getLocalizedString("time").' +', 'stats'); + die(); +} +foreach($result as &$action) { + $account = $gs->getAccountName($action["account"]); + $value = htmlspecialchars($action["value"]); + $value2 = htmlspecialchars($action["value2"]); + $value3 = htmlspecialchars($action["value3"]); + $value4 = htmlspecialchars($action["value4"]); + $value5 = htmlspecialchars($action["value5"]); + $value6 = htmlspecialchars($action["value6"]); $actionname = $dl->getLocalizedString("modAction".$action["type"]); - if($action["type"] == 2 OR $action["type"] == 3 OR $action["type"] == 4){ - if($action["value"] == 1){ - $value = "True"; - }else{ - $value = "False"; - } - } - if($action["type"] == 5 OR $action["type"] == 6){ - $value = ""; - } - if($action["type"] == 13){ - $value = base64_decode($value); - } - if(strlen($value) > 18){ - $value = "'.$dl->getLocalizedString("errorGeneric").'
+ +"; //todo: finish - } - if(strlen($value2) > 18){ - $value2 = "Spoiler
$value"; //todo: finish - } - $time = date("d/m/Y G:i:s", $action["timestamp"]); - if($action["type"] == 5 AND $action["value2"] > time()){ - $value3 = "future"; + switch($action["type"]) { + case 1: + if($value2 == 1) $star = 0; elseif($value2 < 5 AND $value2 != 0) $star = 1; else $star = 2; + $value2 = $value2.' '.$dl->getLocalizedString("starsLevel$star"); + if($value == 0) $value = 'Spoiler
$value2'.$dl->getLocalizedString("isAdminNo").' '; + break; + case 2: + case 3: + case 4: + case 12: + case 14: + case 29: + case 38: + if($action["value"] == 1) $value = ''.$dl->getLocalizedString("isAdminYes").' '; + else $value = ''.$dl->getLocalizedString("isAdminNo").' '; + $value2 = $gs->getLevelName($value3); + break; + case 5: + $value = $value3; + if(is_numeric($value2)) $value3 = date("d.m.Y", $value2); + $value2 = $gs->getLevelName($value); + break; + case 6: + case 34: + $value = $value3; + if(empty($value2)) $value2 = ''.$dl->getLocalizedString('empty').' '; + $value3 = date("d.m.Y", $action["timestamp"]); + break; + case 8: + $value2 = $value; + $value = htmlspecialchars($action['value2']); + if(empty($action['value2'])) $value = ''.$dl->getLocalizedString('empty').' '; + break; + case 9: + if(!$gs->checkPermission($_SESSION['accountID'], "dashboardModTools")) $value = ''.$dl->getLocalizedString('empty').' '; + else $value = substr($value, 1); + break; + case 7: + case 10: + case 11: + case 16: + $value2 = $gs->getLevelName($value3); + break; + case 13: + $value = ExploitPatch::url_base64_decode($value); + break; + case 15: + $value = $gs->getAccountName($value); + switch($value4) { + case 'isBanned': + $value4 = $dl->getLocalizedString('playerTop'); + break; + case 'isCreatorBanned': + $value4 = $dl->getLocalizedString('creatorTop'); + break; + case 'isUploadBanned': + $value4 = $dl->getLocalizedString('levelUploading'); + break; + case 'isCommentBanned': + $value4 = $dl->getLocalizedString('commentBan'); + break; + } + if($value3 == 0) $value3 = $value4.', '.$dl->getLocalizedString("unban").''; + else $value3 = $value4.', '.$dl->getLocalizedString("isBan").''; + if($value2 == 'banned' OR $value2 == 'none') $value2 = ''.$dl->getLocalizedString("noReason").''; + break; + case 18: + case 22: + $value2 = $value; + $action['value2'] = $action['value']; + $value = $action['value'] = $gs->getGauntletName($value3); + break; + case 17: + case 21: + if($value3 == 1) $star = 0; elseif($value3 < 5) $star = 1; else $star = 2; + if($action["value4"] == 1) $coin = 0; elseif($action["value4"] != 0) $coin = 1; else $coin = 2; + $value = ''.$value.''; + $value3 = $value3.' '.$dl->getLocalizedString("starsLevel$star").', '.$action["value4"].' '.$dl->getLocalizedString("coins$coin"); + break; + case 20: + case 24: + $value = ''; + if(!empty($value3) && $value3 != "-1") { + $clr = $db->prepare("SELECT commentColor, roleName FROM roles WHERE roleID = :id"); + $clr->execute([':id' => $value3]); + $clr = $clr->fetch(); + } else { + $clr['roleName'] = $dl->getLocalizedString('demoted'); + $clr['commentColor'] = '227, 81, 81'; + } + $value3 = ''.$clr['roleName'].' '; + break; + case 23: + case 25: + $value = $value4; + $questTypes = ['Unknown', $dl->getLocalizedString("orbs"), $dl->getLocalizedString("coins"), $dl->getLocalizedString("stars")]; + $value2 = $questTypes[$action['value']]; + $value3 = $action["value2"].' | '.$action["value3"]; + break; + case 26: + $username26 = $gs->getAccountName($action["value"]); + $value = ''; + $value2 = $action["value"]; + if($value2 == 'Password') $value3 = $dl->getLocalizedString("password"); + else $value3 = $dl->getLocalizedString("username"); + break; + case 28: + switch($value3) { + case 0: + $username28 = $gs->getAccountName($action["value"]); + $value = ''; + break; + case 1: + $value = $gs->getUserName($value); + break; + case 2: + $value = $dl->getLocalizedString('IP'); + break; + } + $value2 = $action['value2'] = base64_decode($action['value2']); + $banTextArray = ['unban', 'isBan', 'banChange']; + $banColorArray = ['BBFFBB', 'FFBBBB', 'FFEEBB']; + if(empty($value2)) $value2 = "".$dl->getLocalizedString('noReason').""; + $value2 .= "| ".$dl->getLocalizedString($banTextArray[$value6]).''; + $value3 = date("d.m.Y G:i", $value5); + break; + case 30: + case 31: + $value = $gs->getListName($action["value3"]).', '.$action['value3']; + $value2 = $gs->getListDiffName($action["value2"]); + $value3 = $action['value']; + break; + case 32: + case 33: + $value = $gs->getListName($action["value3"]); + $value2 = $action['value']; + break; + case 35: + $value = $gs->getListName($action["value3"]); + $value2 = $gs->getAccountName($action['value']); + break; + case 37: + $value = ExploitPatch::url_base64_decode($action['value']); + $value2 = $gs->getListName($action["value3"]); + break; + case 39: + if($action["value"] == 1) $value = ''.$dl->getLocalizedString("isAdminYes").' '; + else $value = ''.$dl->getLocalizedString("isAdminNo").' '; + $value2 = $gs->getListName($value3); + break; + case 40: + $value = $value3; + $value2 = $gs->getLevelName($value3); + $value3 = date("d.m.Y", $action["timestamp"]); + break; + case 41: + $value2 = $value.' '.$dl->getLocalizedString("starsLevel1"); + $value = $value3; + $value3 = $gs->getLevelName($value3); + break; + case 42: + case 43: + $rewardTypes = ['Nothing', 'Fire Shard', 'Ice Shard', 'Poison Shard', 'Shadow Shard', 'Lava Shard', 'Demon Key', 'Orbs', 'Diamond', 'Nothing', 'Earth Shard', 'Blood Shard', 'Metal Shard', 'Light Shard', 'Soul Shard', 'Gold Key']; + $value = $rewardTypes[$value2].', '.$value3; + $value2 = $value5; + $value3 = $dl->convertToDate($value4, true); + break; + case 44: + $rewardTypes = ['Nothing', 'Fire Shard', 'Ice Shard', 'Poison Shard', 'Shadow Shard', 'Lava Shard', 'Demon Key', 'Orbs', 'Diamond', 'Nothing', 'Earth Shard', 'Blood Shard', 'Metal Shard', 'Light Shard', 'Soul Shard', 'Gold Key']; + $value = $dl->convertToDate($value, true); + $value2 = $rewardTypes[$value2].', '.$value4; + $value3 = $gs->getLevelName($value3); + break; } - $table .= "".$x." ".$account." ".$actionname." ".$value." ".$value2." ".$value3." ".$time." "; + if(mb_strlen($action["value2"]) > 18) $value2 = "".$dl->getLocalizedString("spoiler")."
$value"; + $time = $dl->convertToDate($action["timestamp"], true); + $v1 = '".$dl->getLocalizedString("spoiler")."
$value2'.$value.''; + $v2 = ''.$value2.''; + $v3 = ''.$value3.''; + $stats = $v1.$v2.$v3; + // Avatar management + $queryUserDetails = $db->prepare("SELECT iconType, accIcon, accShip, accBall, accBird, accDart, accRobot, accSpider, accSwing, accJetpack, color1, color2, color3, accGlow FROM users WHERE extID = :accountID"); + $queryUserDetails->execute([':accountID' => $action['account']]); + if($userDetails = $queryUserDetails->fetch(PDO::FETCH_ASSOC)) { + $iconType = ($userDetails['iconType'] > 8) ? 0 : $userDetails['iconType']; + $iconTypeMap = [0 => ['type' => 'cube', 'value' => $userDetails['accIcon']], 1 => ['type' => 'ship', 'value' => $userDetails['accShip']], 2 => ['type' => 'ball', 'value' => $userDetails['accBall']], 3 => ['type' => 'ufo', 'value' => $userDetails['accBird']], 4 => ['type' => 'wave', 'value' => $userDetails['accDart']], 5 => ['type' => 'robot', 'value' => $userDetails['accRobot']], 6 => ['type' => 'spider', 'value' => $userDetails['accSpider']], 7 => ['type' => 'swing', 'value' => $userDetails['accSwing']], 8 => ['type' => 'jetpack', 'value' => $userDetails['accJetpack']]]; + $iconValue = (isset($iconTypeMap[$iconType]) && $iconTypeMap[$iconType]['value'] > 0) ? $iconTypeMap[$iconType]['value'] : 1; + $avatarImg = ' . ')
';
+ }
+ $members .= '+'; $x++; } -$table .= "+++++ '.$avatarImg.' +++++ '.(!empty($account) ? '' : $dl->getLocalizedString("system")).' +
+'.$actionname.' +'.$stats.'+++'.$dl->getLocalizedString("ID").': '.$action["ID"].'
+'.$dl->getLocalizedString("date").': '.$time.'
++'; +$query = $db->prepare("SELECT count(*) FROM modactions $where $requesttype $requestwho"); $query->execute(); $packcount = $query->fetchColumn(); $pagecount = ceil($packcount / 10); $bottomrow = $dl->generateBottomRow($pagecount, $actualpage); -$dl->printPage($table . $bottomrow, true, "browse"); +$dl->printPage($pagel.$bottomrow.'', true, "stats"); ?> \ No newline at end of file diff --git a/dashboard/stats/modList.php b/dashboard/stats/modList.php new file mode 100644 index 000000000..b87aa5408 --- /dev/null +++ b/dashboard/stats/modList.php @@ -0,0 +1,100 @@ +title($dl->getLocalizedString("modActions")); +$dl->printFooter('../'); +$modtable = ""; +$pagelol = explode("/", $_SERVER["REQUEST_URI"]); +$pagelol = $pagelol[count($pagelol)-2]."/".$pagelol[count($pagelol)-1]; +$pagelol = explode("?", $pagelol)[0]; +if(!isset($_GET["search"])) $_GET["search"] = ""; +$srcbtn = ""; +if(!empty($_GET["search"])) { + $query = $db->prepare("SELECT * FROM accounts INNER JOIN users INNER JOIN roleassign WHERE isActive = 1 AND accounts.accountID = users.extID AND accounts.accountID = roleassign.accountID AND accounts.userName LIKE '%".ExploitPatch::remove($_GET["search"])."%' ORDER BY roleassign.roleID ASC, accounts.userName ASC"); + $srcbtn = ''; +} else $query = $db->prepare("SELECT * FROM accounts INNER JOIN users INNER JOIN roleassign WHERE isActive = 1 AND accounts.accountID = users.extID AND accounts.accountID = roleassign.accountID ORDER BY roleassign.roleID ASC, accounts.userName ASC"); +$query->execute(); +$result = $query->fetchAll(); +$row = 0; +if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("modActionsList").'
++ '.$members.' ++', 'stats'); + die(); +} +foreach($result as &$action) { + $clan = $own = ''; + $query = $db->prepare("SELECT * FROM (SELECT count(*) AS actionCount FROM modactions WHERE account = :id) actionCount JOIN (SELECT count(*) AS levelsRated FROM modactions WHERE account = :id AND type = 1) levelsRated"); + $query->execute([':id' => $action["accountID"]]); + $counts = $query->fetch(); + $accUserID = $gs->getUserID($action["accountID"]); + $accountID = $action["accountID"].''.$dl->getLocalizedString("errorGeneric").'
+ +| '.$accUserID; + if($action["accountID"] == $accUserID) $accountID = $action["accountID"]; + $resultRole = $action["roleID"]; + $query = $db->prepare("SELECT roleName FROM roles WHERE roleID = :id"); + $query->execute([':id' => $resultRole]); + $resultRole = $query->fetch()["roleName"]; + if($action["clan"] != 0) { + $claninfo = $gs->getClanInfo($action["clan"]); + if($claninfo["clanOwner"] == $action["accountID"]) $own = ''; + $clan = ''.$claninfo["clan"].$own.'
'; + } + // Avatar management + $iconType = ($action['iconType'] > 8) ? 0 : $action['iconType']; + $iconTypeMap = [0 => ['type' => 'cube', 'value' => $action['accIcon']], 1 => ['type' => 'ship', 'value' => $action['accShip']], 2 => ['type' => 'ball', 'value' => $action['accBall']], 3 => ['type' => 'ufo', 'value' => $action['accBird']], 4 => ['type' => 'wave', 'value' => $action['accDart']], 5 => ['type' => 'robot', 'value' => $action['accRobot']], 6 => ['type' => 'spider', 'value' => $action['accSpider']], 7 => ['type' => 'swing', 'value' => $action['accSwing']], 8 => ['type' => 'jetpack', 'value' => $action['accJetpack']]]; + $iconValue = (isset($iconTypeMap[$iconType]) && $iconTypeMap[$iconType]['value'] > 0) ? $iconTypeMap[$iconType]['value'] : 1; + $avatarImg = '';
+ // Badge management
+ $badgeImg = '';
+ $queryRoleID = $db->prepare("SELECT roleID FROM roleassign WHERE accountID = :accountID");
+ $queryRoleID->execute([':accountID' => $accountID]);
+ if($roleAssignData = $queryRoleID->fetch(PDO::FETCH_ASSOC)) {
+ $queryBadgeLevel = $db->prepare("SELECT modBadgeLevel FROM roles WHERE roleID = :roleID");
+ $queryBadgeLevel->execute([':roleID' => $roleAssignData['roleID']]);
+ if(($modBadgeLevel = $queryBadgeLevel->fetchColumn() ?? 0) >= 1 && $modBadgeLevel <= 3) {
+ $badgeImg = '';
+ }
+ }
+ $ac = ''.$counts["actionCount"].'
'; + $lr = ''.$counts["levelsRated"].'
'; + $stats = $dl->createProfileStats($action['stars'], $action['moons'], $action['diamonds'], $action['coins'], $action['userCoins'], $action['demons'], $action['creatorPoints'], 0, false).$ac.$lr; + $registerDate = $dl->convertToDate($action["registerDate"], true); + $members .= '+'; + $x++; +} +$pagel = '+ ++'.$stats.'++'.$dl->getLocalizedString("accountID").': '.$accountID.'
'.$dl->getLocalizedString("registerDate").': '.$registerDate.'
+'; +$dl->printPage($pagel.$bottomrow, true, "stats"); +?> \ No newline at end of file diff --git a/dashboard/stats/packTable.php b/dashboard/stats/packTable.php index 43dc55d0f..e3a212d4d 100644 --- a/dashboard/stats/packTable.php +++ b/dashboard/stats/packTable.php @@ -2,92 +2,86 @@ session_start(); require "../incl/dashboardLib.php"; $dl = new dashboardLib(); -require "../../incl/lib/mainLib.php"; +require_once "../".$dbPath."incl/lib/mainLib.php"; $gs = new mainLib(); -/* - generating packtable -*/ -include "../../incl/lib/connection.php"; +$dl->title($dl->getLocalizedString("packTable")); +$dl->printFooter('../'); +require "../".$dbPath."incl/lib/connection.php"; +require "../".$dbPath."incl/lib/exploitPatch.php"; if(isset($_GET["page"]) AND is_numeric($_GET["page"]) AND $_GET["page"] > 0){ $page = ($_GET["page"] - 1) * 10; $actualpage = $_GET["page"]; -}else{ +} else { $page = 0; $actualpage = 1; } -$x = $page + 1; +if(!isset($_GET["search"])) $_GET["search"] = ""; +if(!isset($_GET["type"])) $_GET["type"] = ""; +if(!isset($_GET["ng"])) $_GET["ng"] = ""; +$srcbtn = $levels = ""; +$pagelol = explode("/", $_SERVER["REQUEST_URI"]); +$pagelol = $pagelol[count($pagelol)-2]."/".$pagelol[count($pagelol)-1]; +$pagelol = explode("?", $pagelol)[0]; +$x = 1; $packtable = ""; -$query = $db->prepare("SELECT levels,name,stars,coins FROM mappacks ORDER BY ID ASC LIMIT 10 OFFSET $page"); +$query = $db->prepare("SELECT * FROM mappacks ORDER BY ID ASC LIMIT 10 OFFSET $page"); $query->execute(); $result = $query->fetchAll(); +if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("modActions").'
++ '.$members.' ++', 'browse'); + die(); +} +$modcheck = $gs->checkPermission($_SESSION["accountID"], "dashboardModTools"); foreach($result as &$pack){ $lvlarray = explode(",", $pack["levels"]); $lvltable = ""; - foreach($lvlarray as &$lvl){ - $query = $db->prepare("SELECT levelID,levelName,starStars,userID,coins FROM levels WHERE levelID = :levelID"); + $color = $pack['rgbcolors']; + $starspack = $pack["stars"]; + if($pack["stars"] == 0) $starspack = '0'; + $coinspack = $pack["coins"]; + if($pack["coins"] == 0) $coinspack = '0'; + $pst = ''.$dl->getLocalizedString("errorGeneric").'
+ +'.$starspack.'
'; + $pcc = ''.$coinspack.'
'; + $diffarray = ['Auto', 'Easy', 'Normal', 'Hard', 'Harder', 'Insane', 'Demon']; + $pd = ''.$diffarray[$pack['difficulty']].'
'; + $packall = $pst.$pd.$pcc; + foreach($lvlarray as &$lvl) { + $query = $db->prepare("SELECT * FROM levels WHERE levelID = :levelID"); $query->execute([':levelID' => $lvl]); - $level = $query->fetch(); - $lvltable .= "- "; + $action = $query->fetch(); + if(!$action) continue; + $lvltable .= $dl->generateLevelsCard($action, $modcheck); } - $packtable .= "".$level["levelID"]." -".$level["levelName"]." -".$gs->getUserName($level["userID"])." -".$level["starStars"]." -".$level["coins"]." -- '; + $packtable .= '$x -".htmlspecialchars($pack["name"],ENT_QUOTES)." -".$pack["stars"]." -".$pack["coins"].' -- Show - - - -+'; $x++; } -/* - bottom row -*/ -//getting count -$query = $db->prepare("SELECT count(*) FROM mappacks"); -$query->execute(); -$packcount = $query->fetchColumn(); -$pagecount = ceil($packcount / 10); +$pagecount = ceil($dailycount / 10); $bottomrow = $dl->generateBottomRow($pagecount, $actualpage); -/* - printing -*/ -$dl->printPage('++++'.$pack["name"].'
++ '.$packall.' +++ '.$lvltable.' ++++ID: '.$pack["ID"].'
+ '.($pack["timestamp"] != 0 ? ''.$dl->getLocalizedString('date').': '.$dl->convertToDate($pack["timestamp"], true).'
' : '').' +- -
' -.$bottomrow, true, "stats"); +$dl->printPage('- - - - '.$packtable.' - -# -'.$dl->getLocalizedString("name").' -'.$dl->getLocalizedString("stars").' -'.$dl->getLocalizedString("coins").' -'.$dl->getLocalizedString("levels").' -'.$bottomrow, 'browse'); ?> \ No newline at end of file diff --git a/dashboard/stats/platformerLeaderboards.php b/dashboard/stats/platformerLeaderboards.php new file mode 100644 index 000000000..fcb3ae0dd --- /dev/null +++ b/dashboard/stats/platformerLeaderboards.php @@ -0,0 +1,136 @@ +title($dl->getLocalizedString("levelLeaderboards")); +$dl->printFooter('../'); +if(isset($_GET["page"]) AND is_numeric($_GET["page"]) AND $_GET["page"] > 0) { + $page = ($_GET["page"] - 1) * 10; + $actualpage = $_GET["page"]; +} else { + $page = 0; + $actualpage = 1; +} +if(!isset($_GET["search"])) $_GET["search"] = ""; +if(!isset($_GET["levelID"])) $_GET["levelID"] = ""; +if(!isset($_GET["type"])) $_GET["type"] = ""; +if(!isset($_GET["ng"])) $_GET["ng"] = ""; +$srcbtn = $levels = ""; +$levelID = ExploitPatch::number($_GET['levelID']); +$type = ExploitPatch::number($_GET['type']) ?: ($_SESSION['accountID'] != 0 ? 0 : 1); +$mode = ExploitPatch::charclean($_GET['mode']) ?: 'time'; +$order = $mode == 'time' ? 'ASC' : 'DESC'; +$modcheck = $gs->checkPermission($_SESSION["accountID"], "dashboardModTools"); +$leaderboardDeleteCheck = $gs->checkPermission($_SESSION["accountID"], "dashboardDeleteLeaderboards"); +$query = $db->prepare("SELECT * FROM levels WHERE levelID = :levelID".(!$modcheck ? ' AND unlisted = 0' : '')); +$query->execute([':levelID' => $levelID]); +$level = $query->fetch(); +if(empty($level) || $level['levelLength'] != 5) die($dl->printSong(''.$dl->getLocalizedString('packTable').'
++ '.$packtable.' +++', 'browse')); +if($_SESSION['accountID'] != 0) { + if(isset($_POST['deleteLeaderboardID'])) { + $deleteLeaderboardID = ExploitPatch::number($_POST['deleteLeaderboardID']); + $query = $db->prepare("SELECT count(*) FROM platscores WHERE ID = :deleteLeaderboardID"); + $query->execute([':deleteLeaderboardID' => $deleteLeaderboardID]); + $leaderboard = $query->fetch(); + if($leaderboard && $leaderboardDeleteCheck) { + $query = $db->prepare("DELETE FROM platscores WHERE ID = :deleteLeaderboardID"); + $query->execute([':deleteLeaderboardID' => $deleteLeaderboardID]); + } + } +} +switch($type) { + case 1: + $query2 = $db->prepare("SELECT * FROM platscores WHERE levelID = :levelID AND time > 0 ORDER BY {$mode} {$order} LIMIT 10 OFFSET $page"); + $countQuery = "SELECT count(*) FROM platscores WHERE levelID = :levelID AND time > 0"; + $query2args = [':levelID' => $levelID]; + break; + case 2: + $query2 = $db->prepare("SELECT * FROM platscores WHERE levelID = :levelID AND timestamp > :time AND time > 0 ORDER BY {$mode} {$order} LIMIT 10 OFFSET $page"); + $countQuery = "SELECT count(*) FROM platscores WHERE levelID = :levelID AND timestamp > :time AND time > 0"; + $query2args = [':levelID' => $levelID, ':time' => time() - 604800]; + break; + default: + $friends = $gs->getFriends($_SESSION['accountID']); + $friends[] = $_SESSION['accountID']; + $friends = implode(",", $friends); + $query2 = $db->prepare("SELECT * FROM platscores WHERE levelID = :levelID AND accountID IN ($friends) AND time > 0 ORDER BY {$mode} {$order} LIMIT 10 OFFSET $page"); + $countQuery = "SELECT count(*) FROM platscores WHERE levelID = :levelID AND accountID IN ($friends) AND time > 0"; + $query2args = [':levelID' => $levelID]; + break; +} +$query2->execute($query2args); +$result = $query2->fetchAll(); +if(isset($_SERVER["HTTP_REFERER"])) $back = ''; +else $back = ''; +$typeMenu = ' +'; +$x = 0; +foreach($result as &$leaderboard) { + $x++; + $query = $db->prepare("SELECT * FROM users WHERE extID = :extID"); + $query->execute([':extID' => $leaderboard['accountID']]); + $action = $query->fetch(); + $query = $db->prepare("SELECT levelLength FROM levels WHERE levelID = :levelID"); + $query->execute([':levelID' => $levelID]); + $action['levelLength'] = $query->fetchColumn(); + $time = ''.$dl->getLocalizedString("errorGeneric").'
+ +'.($leaderboard["time"] / 1000).'
'; + $points = ''.$leaderboard["points"].'
'; + $leaderboard['uploadDate'] = $leaderboard['timestamp']; + $leaderboards .= $dl->generateLeaderboardsCard($x, $leaderboard, $action, $leaderboardDeleteCheck, $time.$points); +} +if(empty($leaderboards)) $leaderboards = '+ +'; +$pagel = ''.$dl->getLocalizedString('noLeaderboards').'
++'; +/* + bottom row +*/ +//getting count +$query = $db->prepare($countQuery); +$query->execute($query2args); +$packcount = $query->fetchColumn(); +$pagecount = ceil($packcount / 10); +$bottomrow = $dl->generateBottomRow($pagecount, $actualpage); +$dl->printPage($pagel.$bottomrow, true, "browse"); +?> \ No newline at end of file diff --git a/dashboard/stats/quests.php b/dashboard/stats/quests.php new file mode 100644 index 000000000..8dbcd5c22 --- /dev/null +++ b/dashboard/stats/quests.php @@ -0,0 +1,27 @@ +checkPermission($_SESSION["accountID"], 'toolQuestsCreate')) { + $name = ExploitPatch::charclean($_GET["name"]); + if(!is_numeric($_GET["type"]) OR !is_numeric($_GET["amount"]) OR !is_numeric($_GET["reward"])) die("-1"); + if($_GET["type"] > 3) $type = 3; elseif($_GET["type"] < 1) $type = 1; else $type = ExploitPatch::number($_GET["type"]); + $amount = ExploitPatch::number($_GET["amount"]); + $reward = ExploitPatch::number($_GET["reward"]); + $change = $db->prepare("UPDATE quests SET name = :n, type = :t, amount = :a, reward = :r WHERE ID = :i"); + if($change->execute([':n' => $name, ':t' => $type, ':a' => $amount, ':r' => $reward, ':i' => $id])) echo 1; else die("-1"); + $query = $db->prepare("INSERT INTO modactions (type, value, timestamp, account, value2, value3, value4) VALUES ('23',:value,:timestamp,:account,:amount,:reward,:name)"); + $query->execute([':value' => $type, ':timestamp' => time(), ':account' => $_SESSION["accountID"], ':amount' => $amount, ':reward' => $reward, ':name' => $name]); + } else { + $pck = $db->prepare("SELECT * FROM quests WHERE ID = :id"); + $pck->execute([':id' => $id]); + $map = $pck->fetch(); + echo $map["ID"].' | '.$map["name"].' | '.$map["type"].' | '.$map["amount"].' | '.$map["reward"]; + } +} +?> \ No newline at end of file diff --git a/dashboard/stats/renameSong.php b/dashboard/stats/renameSong.php new file mode 100644 index 000000000..286c9b00f --- /dev/null +++ b/dashboard/stats/renameSong.php @@ -0,0 +1,30 @@ +prepare('SELECT reuploadID FROM '.$audioType.' WHERE ID = :ID'); +$check->execute([':ID' => $sid]); +$check = $check->fetchColumn(); +if($gs->checkPermission($_SESSION["accountID"], "dashboardManageSongs") || ($_SESSION["accountID"] != 0 && $_SESSION["accountID"] == $check)) { + $author = mb_substr(ExploitPatch::rucharclean($_POST["author"]), 0, 23); + $name = mb_substr(ExploitPatch::rucharclean($_POST["name"]), 0, 30); + if($audioType == 'sfxs' AND !empty($name) AND !empty($sid)) { + $query = $db->prepare("UPDATE sfxs SET name = :n WHERE ID = :id"); + $query->execute([':n' => $name, ':id' => $sid]); + $query = $db->prepare("INSERT INTO modactions (type, value2, value3, timestamp, account) VALUES ('27', :n, :id, :timestamp, :account)"); + $query->execute([':n' => $name, ':id' => $sid, ':timestamp' => time(), ':account' => $_SESSION["accountID"]]); + die(json_encode(['success' => true])); + } elseif(!empty($author) AND !empty($name) AND !empty($sid)) { + $query = $db->prepare("UPDATE songs SET name = :n, authorName = :a WHERE ID = :id"); + $query->execute([':n' => $name, ':a' => $author, ':id' => $sid]); + $query = $db->prepare("INSERT INTO modactions (type, value, value2, value3, timestamp, account) VALUES ('19', :a, :n, :id, :timestamp, :account)"); + $query->execute([':n' => $name, ':a' => $author, ':id' => $sid, ':timestamp' => time(), ':account' => $_SESSION["accountID"]]); + die(json_encode(['success' => true])); + } else die(json_encode(['success' => false, 'error' => '-2'])); +} else die(json_encode(['success' => false, 'error' => '-1'])); +?> \ No newline at end of file diff --git a/dashboard/stats/reportMod.php b/dashboard/stats/reportMod.php new file mode 100644 index 000000000..91d25a85d --- /dev/null +++ b/dashboard/stats/reportMod.php @@ -0,0 +1,64 @@ +title($dl->getLocalizedString("reportMod")); +$dl->printFooter('../'); +$modcheck = $gs->checkPermission($_SESSION["accountID"], "dashboardModTools"); +if($modcheck) { +$reported = ''; +$query = $db->prepare("SELECT levels.*, count(*) AS reportsCount FROM reports INNER JOIN levels ON reports.levelID = levels.levelID GROUP BY levels.levelID ORDER BY reportsCount DESC"); +$query->execute(); +$result = $query->fetchAll(); +$x = 1; +if(empty($result)) { + $dl->printSong(''.$back.$dl->getLocalizedString("levelLeaderboards").$typeMenu.'
++ '.$dl->generateLevelsCard($level, $modcheck).' +++ '.$leaderboards.' +++', 'mod'); + die(); +} +foreach($result as &$level){ + $reports = $level["reportsCount"]; + $repstr = (string)$reports; // bruh + $report = $repstr[strlen($repstr)-1]; + if($report == 1) $action = 0; elseif(($report < 5 AND $report != 0) AND !($reports > 9 AND $reports < 20)) $action = 1; else $action = "s"; + $reportsText = $reports.' '.$dl->getLocalizedString("time".$action); + $levels = $dl->generateLevelsCard($level, $modcheck); + $reported .= ''.$dl->getLocalizedString("errorGeneric").'
+ ++'; + $x++; +} +$pagel = '+++++++'.sprintf($dl->getLocalizedString("reportedName"), $level["levelName"], $reportsText).'
++ '.$levels.' +++'; +$dl->printPage($pagel, true, "mod"); +} else $dl->printSong(''.$dl->getLocalizedString("reportMod").'
++ '.$reported.' +++', 'mod'); +?> \ No newline at end of file diff --git a/dashboard/stats/songList.php b/dashboard/stats/songList.php new file mode 100644 index 000000000..2d576ccc6 --- /dev/null +++ b/dashboard/stats/songList.php @@ -0,0 +1,80 @@ +title($dl->getLocalizedString("songs")); +$dl->printFooter('../'); +if(isset($_GET["page"]) AND is_numeric($_GET["page"]) AND $_GET["page"] > 0) { + $page = ($_GET["page"] - 1) * 10; + $actualpage = $_GET["page"]; +} else { + $page = 0; + $actualpage = 1; +} +$pagelol = explode("/", $_SERVER["REQUEST_URI"]); +$pagelol = $pagelol[count($pagelol)-2]."/".$pagelol[count($pagelol)-1]; +$pagelol = explode("?", $pagelol)[0]; +if(!isset($_GET["search"])) $_GET["search"] = ""; +if(!isset($_GET["type"])) $_GET["type"] = ""; +if(!isset($_GET["ng"])) $_GET["ng"] = ""; +$srcbtn = $favs = $meta = ""; +$ngw = $_GET["ng"] == 1 ? '' : 'AND reuploadID > 0'; +if(!empty(trim(ExploitPatch::rucharclean($_GET["search"])))) { + $q = is_numeric(trim(ExploitPatch::rucharclean($_GET["search"]))) ? "ID LIKE '%".trim(ExploitPatch::rucharclean($_GET["search"]))."%'" : "(name LIKE '%".trim(ExploitPatch::rucharclean($_GET["search"]))."%' OR authorName LIKE '%".trim(ExploitPatch::rucharclean($_GET["search"]))."%')"; + $srcbtn = ''; + $query = $db->prepare("SELECT * FROM songs WHERE isDisabled = 0 AND $q $ngw ORDER BY reuploadTime DESC LIMIT 10 OFFSET $page"); + $query->execute(); + $result = $query->fetchAll(); + if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++'); + die(); + } +} else { + $query = $db->prepare("SELECT * FROM songs WHERE isDisabled = 0 $ngw ORDER BY reuploadTime DESC LIMIT 10 OFFSET $page"); + $query->execute(); + $result = $query->fetchAll(); +} +$x = 0; +if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'browse'); + die(); +} +foreach($result as &$action) { + $x++; + $songs .= $dl->generateSongCard($action); +} +$pagel = ''.$dl->getLocalizedString("errorGeneric").'
+ ++'; +if(!empty(trim($_GET["search"]))) $query = $db->prepare("SELECT count(*) FROM songs WHERE isDisabled = 0 AND $q $ngw"); +else $query = $db->prepare("SELECT count(*) FROM songs WHERE isDisabled = 0 $ngw"); +$query->execute(); +$packcount = $query->fetchColumn(); +$pagecount = ceil($packcount / 10); +$bottomrow = $dl->generateBottomRow($pagecount, $actualpage); +$dl->printPage($pagel . $bottomrow, true, "browse"); +?> \ No newline at end of file diff --git a/dashboard/stats/suggestList.php b/dashboard/stats/suggestList.php new file mode 100644 index 000000000..d3493e03d --- /dev/null +++ b/dashboard/stats/suggestList.php @@ -0,0 +1,89 @@ +title($dl->getLocalizedString("suggestLevels")); +$dl->printFooter('../'); +$modcheck = $gs->checkPermission($_SESSION["accountID"], "dashboardModTools"); +if(!$modcheck) die($dl->printSong(''.$dl->getLocalizedString("songs").'
++ '.$songs.' ++', 'mod')); +if(isset($_GET["page"]) AND is_numeric($_GET["page"]) AND $_GET["page"] > 0) { + $page = ($_GET["page"] - 1) * 10; + $actualpage = $_GET["page"]; +} else { + $page = 0; + $actualpage = 1; +} +$query = $db->prepare("SELECT * FROM suggest WHERE suggestLevelId > 0 ORDER BY ID DESC LIMIT 10 OFFSET $page"); +$query->execute(); +$result = $query->fetchAll(); +$x = $page + 1; +$pagelol = explode("/", $_SERVER["REQUEST_URI"]); +$pagelol = $pagelol[count($pagelol)-2]."/".$pagelol[count($pagelol)-1]; +$pagelol = explode("?", $pagelol)[0]; +if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'mod'); + die(); +} +foreach($result as &$action) { + $suggestid = $action["suggestLevelId"]; + $suggestby = $gs->getAccountName($action["suggestBy"]); + $stars = $action["suggestStars"]; + if($stars < 5) $star = 1; elseif($stars > 4) $star = 2; else $star = 0; + $suggestStars = $stars.' '.$dl->getLocalizedString("starsLevel$star"); + $suggestFeatured = $action["suggestFeatured"]; + $suggestTime = $dl->convertToDate($action["timestamp"], true); + $feat = ['', 'Featured, ', 'Epic, ']; + $level = $db->prepare("SELECT * FROM levels WHERE levelID = :id"); + $level->execute([':id' => $action["suggestLevelId"]]); + $level = $level->fetch(); + if(!empty($level)) $levels = $dl->generateLevelsCard($level, $modcheck); + else $levels = ''.$dl->getLocalizedString("errorGeneric").'
+ +'; + $suggested .= ''.$dl->getLocalizedString("deletedLevel").'
+'; + $x++; +} +$pagel = '+++++++'.sprintf($dl->getLocalizedString("suggestedName"), $suggestby, $level["levelName"], $suggestStars, $feat[$suggestFeatured]).'
++ '.$levels.' +++'.$dl->getLocalizedString("ID").': '.$action["ID"].'
'.$dl->getLocalizedString("date").': '.$suggestTime.'
+'; +/* + bottom row +*/ +$query = $db->prepare("SELECT count(*) FROM suggest"); +$query->execute(); +$packcount = $query->fetchColumn(); +$pagecount = ceil($packcount / 10); +$bottomrow = $dl->generateBottomRow($pagecount, $actualpage); +$dl->printPage($pagel.$bottomrow, true, "mod"); +?> \ No newline at end of file diff --git a/dashboard/stats/top24h.php b/dashboard/stats/top24h.php new file mode 100644 index 000000000..b72d29013 --- /dev/null +++ b/dashboard/stats/top24h.php @@ -0,0 +1,117 @@ +title($dl->getLocalizedString("leaderboardTime")); +$dl->printFooter('../'); +if(isset($_GET["page"]) AND is_numeric($_GET["page"]) AND $_GET["page"] > 0){ + $page = ($_GET["page"] - 1) * 10; + $actualpage = $_GET["page"]; +}else{ + $page = 0; + $actualpage = 1; +} +$time = time() - 86400; +$bans = $gs->getAllBansOfBanType(0); +$extIDs = $userIDs = $bannedIPs = []; +foreach($bans AS &$ban) { + switch($ban['personType']) { + case 0: + $extIDs[] = $ban['person']; + break; + case 1: + $userIDs[] = $ban['person']; + break; + case 2: + $bannedIPs[] = $gs->IPForBan($ban['person'], true); + break; + } +} +$extIDsString = implode("','", $extIDs); +$userIDsString = implode("','", $userIDs); +$bannedIPsString = implode("|", $bannedIPs); +$queryArray = []; +if(!empty($extIDsString)) $queryArray[] = "extID NOT IN ('".$extIDsString."')"; +if(!empty($userIDsString)) $queryArray[] = "userID NOT IN ('".$userIDsString."')"; +if(!empty($bannedIPsString)) $queryArray[] = "IP NOT REGEXP '".$bannedIPsString."'"; +$queryText = !empty($queryArray) ? '('.implode(' AND ', $queryArray).') AND' : ''; +$query = $db->prepare("SELECT users.extID, SUM(actions.value) AS stars, users.userName FROM actions INNER JOIN users ON actions.account = users.extID WHERE type = '9' AND timestamp > :time AND ".$queryText." actions.value > 0 GROUP BY (stars) DESC ORDER BY stars DESC LIMIT 10 OFFSET $page"); +$query->execute([':time' => $time]); +$result = $query->fetchAll(); +$x = $page + 1; +if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("suggestLevels").'
++ '.$suggested.' +++', 'stats'); + die(); +} +foreach($result as &$action){ + $userid = $action["extID"]; + $stars = $action["stars"]; + $strs = $stars[strlen($stars)-1]; + if($strs == 1) $star = 0; elseif($strs < 5 AND $strs != 0 AND ($stars > 20 OR $stars < 10)) $star = 1; else $star = 2; + $coin = $db->prepare("SELECT SUM(coins) FROM levelscores WHERE accountID = :id AND uploadDate > :time"); + $coin->execute([':id' => $userid, ':time' => $time]); + $coins = $coin->fetchColumn(); + if(empty($coins)) $coins = 0; + $cns = $coins[strlen($coins)-1]; + if($cns == 1) $lvl = 0; elseif($cns < 5 AND $cns > 0 AND ($cns > 20 OR $cns < 10)) $lvl = 1; else $lvl = 2; + if(empty($action["userCoins"])) $action["userCoins"] = 0; + $st = ''.$dl->getLocalizedString("errorGeneric").'
+ +'.$action["stars"].'
'; + $uc = ''.$action["userCoins"].'
'; + $stats = $dl->createProfileStats($action["stars"], 0, 0, 0, $action['userCoins'], 0, 0, 0); + switch($x) { + case 1: + $place = ' 1'; + break; + case 2: + $place = ' 2'; + break; + case 3: + $place = ' 3'; + break; + default: + $place = '# '.$x.''; + break; + } + // Avatar management + $avatarImg = ''; + $extIDvalue = $action['extID']; + $query = $db->prepare('SELECT userName, iconType, color1, color2, color3, accGlow, accIcon, accShip, accBall, accBird, accDart, accRobot, accSpider, accSwing, accJetpack FROM users WHERE extID = :extID'); + $query->execute(['extID' => $extIDvalue]); + $userData = $query->fetch(PDO::FETCH_ASSOC); + if($userData) { + $iconType = ($userData['iconType'] > 8) ? 0 : $userData['iconType']; + $iconTypeMap = [0 => ['type' => 'cube', 'value' => $userData['accIcon']], 1 => ['type' => 'ship', 'value' => $userData['accShip']], 2 => ['type' => 'ball', 'value' => $userData['accBall']], 3 => ['type' => 'ufo', 'value' => $userData['accBird']], 4 => ['type' => 'wave', 'value' => $userData['accDart']], 5 => ['type' => 'robot', 'value' => $userData['accRobot']], 6 => ['type' => 'spider', 'value' => $userData['accSpider']], 7 => ['type' => 'swing', 'value' => $userData['accSwing']], 8 => ['type' => 'jetpack', 'value' => $userData['accJetpack']]]; + $iconValue = (isset($iconTypeMap[$iconType]) && $iconTypeMap[$iconType]['value'] > 0) ? $iconTypeMap[$iconType]['value'] : 1; + $avatarImg = '';
+ }
+ $members .= '+'; + $x++; +} +$pagel = '+'.$stats.'++'.$dl->getLocalizedString("accountID").': '.(is_numeric($userid) ? $userid : 0).'
+'; +$query = $db->prepare("SELECT users.extID, SUM(actions.value) AS stars, users.userName FROM actions INNER JOIN users ON actions.account = users.userID WHERE type = '9' AND ".$queryText." timestamp > :time GROUP BY (stars) DESC ORDER BY stars DESC"); +$query->execute([':time' => $time]); +$packcount = 0; +$pagecount = ceil($packcount / 10); +$bottomrow = $dl->generateBottomRow($pagecount, $actualpage); +$dl->printPage($pagel.$bottomrow, true, "stats"); +?> \ No newline at end of file diff --git a/dashboard/stats/unlisted.php b/dashboard/stats/unlisted.php new file mode 100644 index 000000000..03d54558d --- /dev/null +++ b/dashboard/stats/unlisted.php @@ -0,0 +1,87 @@ +title($dl->getLocalizedString("unlistedLevels")); +$dl->printFooter('../'); +if(!isset($_SESSION["accountID"]) || $_SESSION["accountID"] == 0) exit($dl->printSong(''.$dl->getLocalizedString("leaderboardTime").'
++ '.$members.' ++', 'account')); +if(isset($_GET["page"]) AND is_numeric($_GET["page"]) AND $_GET["page"] > 0) { + $page = ($_GET["page"] - 1) * 10; + $actualpage = $_GET["page"]; +} else { + $page = 0; + $actualpage = 1; +} +if(!isset($_GET["search"])) $_GET["search"] = ""; +if(!isset($_GET["type"])) $_GET["type"] = ""; +if(!isset($_GET["ng"])) $_GET["ng"] = ""; +$srcbtn = $levels = ""; +$pagelol = explode("/", $_SERVER["REQUEST_URI"]); +$pagelol = $pagelol[count($pagelol)-2]."/".$pagelol[count($pagelol)-1]; +$pagelol = explode("?", $pagelol)[0]; +if(!empty(trim(ExploitPatch::remove($_GET["search"])))) { + $srcbtn = ''; + $query = $db->prepare("SELECT * FROM levels WHERE unlisted != 0 AND extID = :extid AND levelName LIKE '%".trim(ExploitPatch::remove($_GET["search"]))."%' LIMIT 10 OFFSET $page"); + $query->execute([':extid' => $_SESSION['accountID']]); + $result = $query->fetchAll(); + if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++'); + die(); + } +} else { + $query = $db->prepare("SELECT * FROM levels WHERE unlisted != 0 AND extID = :extid ORDER BY levelID DESC LIMIT 10 OFFSET $page"); + $query->execute([':extid' => $_SESSION['accountID']]); + $result = $query->fetchAll(); + if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'browse'); + die(); + } +} +$modcheck = $gs->checkPermission($_SESSION["accountID"], "dashboardModTools"); +foreach($result as &$action) $levels .= $dl->generateLevelsCard($action, $modcheck); +$pagel = ''.$dl->getLocalizedString("errorGeneric").'
+ ++'; +/* + bottom row +*/ +//getting count +if(!empty(trim(ExploitPatch::remove($_GET["search"])))) $query = $db->prepare("SELECT count(*) FROM levels WHERE unlisted != 0 AND extID = :extid levelName LIKE '%".trim(ExploitPatch::remove($_GET["search"]))."%'"); +else $query = $db->prepare("SELECT count(*) FROM levels WHERE unlisted != 0 AND extID = :extid"); +$query->execute([':extid' => $_SESSION['accountID']]); +$packcount = $query->fetchColumn(); +$pagecount = ceil($packcount / 10); +$bottomrow = $dl->generateBottomRow($pagecount, $actualpage); +$dl->printPage($pagel.$bottomrow, true, "account"); +?> \ No newline at end of file diff --git a/dashboard/stats/unlistedMod.php b/dashboard/stats/unlistedMod.php new file mode 100644 index 000000000..aee802d37 --- /dev/null +++ b/dashboard/stats/unlistedMod.php @@ -0,0 +1,87 @@ +title($dl->getLocalizedString("unlistedMod")); +$dl->printFooter('../'); +$modcheck = $gs->checkPermission($_SESSION["accountID"], "dashboardModTools"); +if(!$modcheck) exit($dl->printSong(''.$dl->getLocalizedString("unlistedLevels").'
++ '.$levels.' ++', 'mod')); +if(isset($_GET["page"]) AND is_numeric($_GET["page"]) AND $_GET["page"] > 0) { + $page = ($_GET["page"] - 1) * 10; + $actualpage = $_GET["page"]; +} else { + $page = 0; + $actualpage = 1; +} +if(!isset($_GET["search"])) $_GET["search"] = ""; +if(!isset($_GET["type"])) $_GET["type"] = ""; +if(!isset($_GET["ng"])) $_GET["ng"] = ""; +$srcbtn = $levels = ""; +$pagelol = explode("/", $_SERVER["REQUEST_URI"]); +$pagelol = $pagelol[count($pagelol)-2]."/".$pagelol[count($pagelol)-1]; +$pagelol = explode("?", $pagelol)[0]; +if(!empty(trim(ExploitPatch::remove($_GET["search"])))) { + $srcbtn = ''; + $query = $db->prepare("SELECT * FROM levels WHERE unlisted != 0 AND levelName LIKE '%".trim(ExploitPatch::remove($_GET["search"]))."%' LIMIT 10 OFFSET $page"); + $query->execute(); + $result = $query->fetchAll(); + if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++'); + die(); + } +} else { + $query = $db->prepare("SELECT * FROM levels WHERE unlisted != 0 ORDER BY levelID DESC LIMIT 10 OFFSET $page"); + $query->execute(); + $result = $query->fetchAll(); + if(empty($result)) { + $dl->printSong(''.$dl->getLocalizedString("errorGeneric").'
+ ++', 'browse'); + die(); + } +} +foreach($result as &$action) $levels .= $dl->generateLevelsCard($action, $modcheck); +$pagel = ''.$dl->getLocalizedString("errorGeneric").'
+ ++'; +/* + bottom row +*/ +//getting count +if(!empty(trim(ExploitPatch::remove($_GET["search"])))) $query = $db->prepare("SELECT count(*) FROM levels WHERE unlisted != 0 AND levelName LIKE '%".trim(ExploitPatch::remove($_GET["search"]))."%'"); +else $query = $db->prepare("SELECT count(*) FROM levels WHERE unlisted != 0"); +$query->execute(); +$packcount = $query->fetchColumn(); +$pagecount = ceil($packcount / 10); +$bottomrow = $dl->generateBottomRow($pagecount, $actualpage); +$dl->printPage($pagel.$bottomrow, true, "mod"); +?> \ No newline at end of file diff --git a/dashboard/uploadGJComment21.php b/dashboard/uploadGJComment21.php deleted file mode 100644 index 2f97f7225..000000000 --- a/dashboard/uploadGJComment21.php +++ /dev/null @@ -1,3 +0,0 @@ - \ No newline at end of file diff --git a/tools/logs/cplog.txt b/data/info/filler.txt similarity index 100% rename from tools/logs/cplog.txt rename to data/info/filler.txt diff --git a/database.sql b/database.sql index ccce5149b..236522106 100644 --- a/database.sql +++ b/database.sql @@ -279,7 +279,7 @@ CREATE TABLE `levels` ( `wt` int(11) NOT NULL DEFAULT '0', `wt2` int(11) NOT NULL DEFAULT '0', `ts` int(11) NOT NULL DEFAULT '0', - `settingsString` mediumtext COLLATE utf8_unicode_ci NOT NULL + `settingsString` mediumtext COLLATE utf8_unicode_ci NOT NULL DEFAULT '' ) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_unicode_ci; -- -------------------------------------------------------- diff --git a/database/accounts/backupGJAccountNew.php b/database/accounts/backupGJAccountNew.php index c118a0765..5b7e964c6 100644 --- a/database/accounts/backupGJAccountNew.php +++ b/database/accounts/backupGJAccountNew.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/database/accounts/syncGJAccountNew.php b/database/accounts/syncGJAccountNew.php index e7de5574c..c2156dfff 100644 --- a/database/accounts/syncGJAccountNew.php +++ b/database/accounts/syncGJAccountNew.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/deleteGJAccComment20.php b/deleteGJAccComment20.php index aa7283c4a..5a1c724c1 100644 --- a/deleteGJAccComment20.php +++ b/deleteGJAccComment20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/deleteGJComment.php b/deleteGJComment.php new file mode 100644 index 000000000..5e9806a4f --- /dev/null +++ b/deleteGJComment.php @@ -0,0 +1,3 @@ + \ No newline at end of file diff --git a/deleteGJComment19.php b/deleteGJComment19.php new file mode 100644 index 000000000..250cdf2df --- /dev/null +++ b/deleteGJComment19.php @@ -0,0 +1,3 @@ + diff --git a/deleteGJComment20.php b/deleteGJComment20.php index 88be0a28a..5e9806a4f 100644 --- a/deleteGJComment20.php +++ b/deleteGJComment20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/deleteGJFriendRequests20.php b/deleteGJFriendRequests20.php index f33ae2b44..106412c35 100644 --- a/deleteGJFriendRequests20.php +++ b/deleteGJFriendRequests20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/deleteGJLevelList.php b/deleteGJLevelList.php index 0cb850d86..b0f20ef2f 100644 --- a/deleteGJLevelList.php +++ b/deleteGJLevelList.php @@ -1,3 +1,3 @@ - \ No newline at end of file diff --git a/deleteGJLevelUser20.php b/deleteGJLevelUser20.php index 45fe25f11..9c6dcc362 100644 --- a/deleteGJLevelUser20.php +++ b/deleteGJLevelUser20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/deleteGJMessages20.php b/deleteGJMessages20.php index 7e8687617..35386e807 100644 --- a/deleteGJMessages20.php +++ b/deleteGJMessages20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/downloadGJLevel.php b/downloadGJLevel.php index 8af2e82fc..e7045c886 100644 --- a/downloadGJLevel.php +++ b/downloadGJLevel.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/downloadGJLevel19.php b/downloadGJLevel19.php index 8af2e82fc..e7045c886 100644 --- a/downloadGJLevel19.php +++ b/downloadGJLevel19.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/downloadGJLevel20.php b/downloadGJLevel20.php index 8af2e82fc..e7045c886 100644 --- a/downloadGJLevel20.php +++ b/downloadGJLevel20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/downloadGJLevel21.php b/downloadGJLevel21.php index 8af2e82fc..e7045c886 100644 --- a/downloadGJLevel21.php +++ b/downloadGJLevel21.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/downloadGJLevel22.php b/downloadGJLevel22.php index 8af2e82fc..e7045c886 100644 --- a/downloadGJLevel22.php +++ b/downloadGJLevel22.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/downloadGJMessage20.php b/downloadGJMessage20.php index 241cd9801..c0e4e135a 100644 --- a/downloadGJMessage20.php +++ b/downloadGJMessage20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getAccountURL.php b/getAccountURL.php index aeae6e282..71a5fca82 100644 --- a/getAccountURL.php +++ b/getAccountURL.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getCustomContentURL.php b/getCustomContentURL.php index 5e29bb1d1..71a5fca82 100644 --- a/getCustomContentURL.php +++ b/getCustomContentURL.php @@ -1 +1,3 @@ -https://geometrydashfiles.b-cdn.net \ No newline at end of file + \ No newline at end of file diff --git a/getGJAccountComments20.php b/getGJAccountComments20.php index b15c9d6be..395454c46 100644 --- a/getGJAccountComments20.php +++ b/getGJAccountComments20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJChallenges.php b/getGJChallenges.php index f8e203ec8..47b6c5658 100644 --- a/getGJChallenges.php +++ b/getGJChallenges.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJCommentHistory.php b/getGJCommentHistory.php index 02b0a0f59..749a45a91 100644 --- a/getGJCommentHistory.php +++ b/getGJCommentHistory.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJComments.php b/getGJComments.php index 02b0a0f59..749a45a91 100644 --- a/getGJComments.php +++ b/getGJComments.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJComments19.php b/getGJComments19.php index 02b0a0f59..749a45a91 100644 --- a/getGJComments19.php +++ b/getGJComments19.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJComments20.php b/getGJComments20.php index 02b0a0f59..749a45a91 100644 --- a/getGJComments20.php +++ b/getGJComments20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJComments21.php b/getGJComments21.php index 02b0a0f59..749a45a91 100644 --- a/getGJComments21.php +++ b/getGJComments21.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJCreators.php b/getGJCreators.php index 1aedc9046..128ee6764 100644 --- a/getGJCreators.php +++ b/getGJCreators.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJCreators19.php b/getGJCreators19.php index 1aedc9046..128ee6764 100644 --- a/getGJCreators19.php +++ b/getGJCreators19.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJDailyLevel.php b/getGJDailyLevel.php index 97375067b..63e810c04 100644 --- a/getGJDailyLevel.php +++ b/getGJDailyLevel.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJFriendRequests20.php b/getGJFriendRequests20.php index d68492746..d54aa3686 100644 --- a/getGJFriendRequests20.php +++ b/getGJFriendRequests20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJGauntlets.php b/getGJGauntlets.php index 7f5ae7392..b202dd2a8 100644 --- a/getGJGauntlets.php +++ b/getGJGauntlets.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJGauntlets21.php b/getGJGauntlets21.php index 7f5ae7392..b202dd2a8 100644 --- a/getGJGauntlets21.php +++ b/getGJGauntlets21.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJLevelLists.php b/getGJLevelLists.php index 80a7489dc..7d6df05fb 100644 --- a/getGJLevelLists.php +++ b/getGJLevelLists.php @@ -1,3 +1,3 @@ - \ No newline at end of file diff --git a/getGJLevelScores.php b/getGJLevelScores.php index 8de008be7..7e2ea47ca 100644 --- a/getGJLevelScores.php +++ b/getGJLevelScores.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJLevelScores211.php b/getGJLevelScores211.php index 8de008be7..7e2ea47ca 100644 --- a/getGJLevelScores211.php +++ b/getGJLevelScores211.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJLevelScoresPlat.php b/getGJLevelScoresPlat.php index bd7afdccd..223a4d96f 100644 --- a/getGJLevelScoresPlat.php +++ b/getGJLevelScoresPlat.php @@ -1,3 +1,3 @@ - \ No newline at end of file diff --git a/getGJLevels.php b/getGJLevels.php index 1cfbdf5ee..6f07f84d2 100644 --- a/getGJLevels.php +++ b/getGJLevels.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJLevels19.php b/getGJLevels19.php index 1cfbdf5ee..6f07f84d2 100644 --- a/getGJLevels19.php +++ b/getGJLevels19.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJLevels20.php b/getGJLevels20.php index 1cfbdf5ee..6f07f84d2 100644 --- a/getGJLevels20.php +++ b/getGJLevels20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJLevels21.php b/getGJLevels21.php index 1cfbdf5ee..6f07f84d2 100644 --- a/getGJLevels21.php +++ b/getGJLevels21.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJMapPacks.php b/getGJMapPacks.php index cf4e0cc71..94cdec5c4 100644 --- a/getGJMapPacks.php +++ b/getGJMapPacks.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJMapPacks20.php b/getGJMapPacks20.php index cf4e0cc71..94cdec5c4 100644 --- a/getGJMapPacks20.php +++ b/getGJMapPacks20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJMapPacks21.php b/getGJMapPacks21.php index cf4e0cc71..94cdec5c4 100644 --- a/getGJMapPacks21.php +++ b/getGJMapPacks21.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJMessages20.php b/getGJMessages20.php index 948de31f7..62f571718 100644 --- a/getGJMessages20.php +++ b/getGJMessages20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJRewards.php b/getGJRewards.php index 068dd18b1..d657cf61e 100644 --- a/getGJRewards.php +++ b/getGJRewards.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJScores.php b/getGJScores.php index 8a3251b4b..5933900de 100644 --- a/getGJScores.php +++ b/getGJScores.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJScores19.php b/getGJScores19.php index 8a3251b4b..5933900de 100644 --- a/getGJScores19.php +++ b/getGJScores19.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJScores20.php b/getGJScores20.php index 8a3251b4b..5933900de 100644 --- a/getGJScores20.php +++ b/getGJScores20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJSecretReward.php b/getGJSecretReward.php new file mode 100644 index 000000000..57e97c47d --- /dev/null +++ b/getGJSecretReward.php @@ -0,0 +1,3 @@ + \ No newline at end of file diff --git a/getGJSongInfo.php b/getGJSongInfo.php index 73b3b8799..afcf0d0e9 100644 --- a/getGJSongInfo.php +++ b/getGJSongInfo.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJTopArtists.php b/getGJTopArtists.php index f65374aab..d26285c84 100644 --- a/getGJTopArtists.php +++ b/getGJTopArtists.php @@ -1,3 +1,3 @@ diff --git a/getGJUserInfo20.php b/getGJUserInfo20.php index 747991bbd..0c6b6aee7 100644 --- a/getGJUserInfo20.php +++ b/getGJUserInfo20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJUserList20.php b/getGJUserList20.php index bade29746..cc8aa329b 100644 --- a/getGJUserList20.php +++ b/getGJUserList20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/getGJUsers20.php b/getGJUsers20.php index 13b97371f..cd9d0765e 100644 --- a/getGJUsers20.php +++ b/getGJUsers20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/incl/comments/deleteGJAccComment.php b/incl/comments/deleteGJAccComment.php index a97a84727..5ee277906 100644 --- a/incl/comments/deleteGJAccComment.php +++ b/incl/comments/deleteGJAccComment.php @@ -1,19 +1,23 @@ getUserID($accountID); +$getCommentData = $db->prepare('SELECT * FROM acccomments WHERE commentID = :commentID'); +$getCommentData->execute([':commentID' => $commentID]); +$getCommentData = $getCommentData->fetch(); +if(!$getCommentData) exit("-1"); if($gs->checkPermission($accountID, "actionDeleteComment") == 1) { $query = $db->prepare("DELETE FROM acccomments WHERE commentID = :commentID LIMIT 1"); - $query->execute([':commentID' => $commentID]); -}else{ + if($query->execute([':commentID' => $commentID])) $gs->logAction($accountID, 12, $getCommentData['userName'], $getCommentData['comment'], $accountID, $commentID, ($getCommentData['likes'] - $getCommentData['dislikes'])); +} else { $query = $db->prepare("DELETE FROM acccomments WHERE commentID=:commentID AND userID=:userID LIMIT 1"); - $query->execute([':userID' => $userID, ':commentID' => $commentID]); + if($query->execute([':userID' => $userID, ':commentID' => $commentID])) $gs->logAction($accountID, 12, $getCommentData['userName'], $getCommentData['comment'], $gs->getExtID($userID), $commentID, ($getCommentData['likes'] - $getCommentData['dislikes'])); } echo "1"; \ No newline at end of file diff --git a/incl/comments/deleteGJComment.php b/incl/comments/deleteGJComment.php index aca68a296..3dbf42979 100644 --- a/incl/comments/deleteGJComment.php +++ b/incl/comments/deleteGJComment.php @@ -1,23 +1,26 @@ getIDFromPost(); $userID = $gs->getUserID($accountID); -$query = $db->prepare("DELETE FROM comments WHERE commentID=:commentID AND userID=:userID LIMIT 1"); +$getCommentData = $db->prepare('SELECT * FROM comments WHERE commentID = :commentID'); +$getCommentData->execute([':commentID' => $commentID]); +$getCommentData = $getCommentData->fetch(); +$query = $db->prepare("DELETE FROM comments WHERE commentID = :commentID AND userID = :userID LIMIT 1"); $query->execute([':commentID' => $commentID, ':userID' => $userID]); -if($query->rowCount() == 0){ +if($query->rowCount() == 0) { $query = $db->prepare("SELECT users.extID FROM comments INNER JOIN levels ON levels.levelID = comments.levelID INNER JOIN users ON levels.userID = users.userID WHERE commentID = :commentID"); $query->execute([':commentID' => $commentID]); $creatorAccID = $query->fetchColumn(); - if($creatorAccID == $accountID || $gs->checkPermission($accountID, "actionDeleteComment") == 1){ - $query = $db->prepare("DELETE FROM comments WHERE commentID=:commentID LIMIT 1"); - $query->execute([':commentID' => $commentID]); + if($creatorAccID == $accountID || $gs->checkPermission($accountID, "actionDeleteComment") == 1) { + $query = $db->prepare("DELETE FROM comments WHERE commentID = :commentID LIMIT 1"); + if($query->execute([':commentID' => $commentID])) $gs->logAction($accountID, 13, $getCommentData['userName'], $getCommentData['comment'], $creatorAccID, $commentID, ($getCommentData['likes'] - $getCommentData['dislikes']), $getCommentData['levelID']); } -} -echo "1"; +} else $gs->logAction($accountID, 13, $getCommentData['userName'], $getCommentData['comment'], $accountID, $commentID, ($getCommentData['likes'] - $getCommentData['dislikes']), $getCommentData['levelID']); +echo "1"; \ No newline at end of file diff --git a/incl/comments/getGJAccountComments.php b/incl/comments/getGJAccountComments.php index 1e52b5406..b2285fc41 100644 --- a/incl/comments/getGJAccountComments.php +++ b/incl/comments/getGJAccountComments.php @@ -1,13 +1,13 @@ getUserID($accountid); $query = "SELECT comment, userID, likes, isSpam, commentID, timestamp FROM acccomments WHERE userID = :userID ORDER BY timeStamp DESC LIMIT 10 OFFSET $commentpage"; @@ -21,9 +21,19 @@ $countquery->execute([':userID' => $userID]); $commentcount = $countquery->fetchColumn(); foreach($result as &$comment1) { - if($comment1["commentID"]!=""){ - $uploadDate = date("d/m/Y G:i", $comment1["timestamp"]); - $commentstring .= "2~".$comment1["comment"]."~3~".$comment1["userID"]."~4~".$comment1["likes"]."~5~0~7~".$comment1["isSpam"]."~9~".$uploadDate."~6~".$comment1["commentID"]."|"; + if($comment1["commentID"]!="") { + $uploadDate = $gs->makeTime($comment1["timestamp"]); + $likes = $comment1["likes"]; // - $comment1["dislikes"]; + $reply = $db->prepare("SELECT count(*) FROM replies WHERE commentID = :id"); + $reply->execute([':id' => $comment1["commentID"]]); + $reply = $reply->fetchColumn(); + if($reply > 0) { + $rep = $reply > 1 ? 'replies)' : 'reply)'; + $comment1["comment"] = ExploitPatch::url_base64_encode(ExploitPatch::url_base64_decode($comment1["comment"]).' ('.$reply.' '.$rep); + } + $comment1['comment'] = ExploitPatch::url_base64_encode(trim(ExploitPatch::translit(ExploitPatch::url_base64_decode($comment1['comment'])))); + if($enableCommentLengthLimiter) $comment1['comment'] = ExploitPatch::url_base64_encode(substr(ExploitPatch::url_base64_decode($comment1['comment']), 0, $maxAccountCommentLength)); + $commentstring .= "2~".$comment1["comment"]."~3~".$comment1["userID"]."~4~".$likes."~5~0~7~".$comment1["isSpam"]."~9~".$uploadDate."~6~".$comment1["commentID"]."|"; } } $commentstring = substr($commentstring, 0, -1); diff --git a/incl/comments/getGJComments.php b/incl/comments/getGJComments.php index 142bb26f1..3c5b4e1a3 100644 --- a/incl/comments/getGJComments.php +++ b/incl/comments/getGJComments.php @@ -1,78 +1,90 @@ 0) { + $levelExists = $db->prepare("SELECT COUNT(*) FROM levels WHERE levelID = :levelID"); + $levelExists->execute([':levelID' => $filterID]); + } else { + $levelExists = $db->prepare("SELECT COUNT(*) FROM lists WHERE listID = :levelID"); + $levelExists->execute([':levelID' => ExploitPatch::number($filterID)]); + } + if($levelExists->fetchColumn() == 0) exit("-2"); // Don't return comments from nonexistent levels + $userListJoin = ""; +} elseif(isset($_POST['userID'])) { $filterColumn = 'userID'; $filterToFilter = 'comments.'; $displayLevelID = true; - $filterID = ExploitPatch::remove($_POST["userID"]); + $filterID = ExploitPatch::number($_POST["userID"]); $userListColumns = ", levels.unlisted"; - $userListJoin = "INNER JOIN levels ON comments.levelID = levels.levelID"; - $userListWhere = "AND levels.unlisted = 0"; -} -else - exit(-1); + $userListJoin = " LEFT JOIN levels ON comments.levelID = levels.levelID LEFT JOIN lists ON (comments.levelID * -1) = lists.listID"; + $userListWhere = "AND (levels.unlisted = 0 OR lists.unlisted = 0)"; + $accountID = !empty($_POST['accountID']) ? GJPCheck::getAccountIDOrDie() : 0; + $targetAccountID = $gs->getExtID($filterID); + $cS = $db->prepare("SELECT cS FROM accounts WHERE accountID = :targetAccountID"); + $cS->execute([':targetAccountID' => $targetAccountID]); + $cS = $cS->fetchColumn(); + if($accountID != $targetAccountID && (($cS == 1 && !$gs->isFriends($accountID, $targetAccountID)) || $cS > 1)) exit("-2"); +} else exit("-1"); -$countquery = "SELECT count(*) FROM comments $userListJoin WHERE ${filterToFilter}${filterColumn} = :filterID $userListWhere"; +$countquery = "SELECT count(*) FROM comments {$userListJoin} WHERE ${filterToFilter}${filterColumn} = :filterID {$userListWhere}"; $countquery = $db->prepare($countquery); $countquery->execute([':filterID' => $filterID]); $commentcount = $countquery->fetchColumn(); -if($commentcount == 0){ - exit("-2"); -} - +if($commentcount == 0) exit("-2"); -$query = "SELECT comments.levelID, comments.commentID, comments.timestamp, comments.comment, comments.userID, comments.likes, comments.isSpam, comments.percent, users.userName, users.icon, users.color1, users.color2, users.iconType, users.special, users.extID FROM comments LEFT JOIN users ON comments.userID = users.userID ${userListJoin} WHERE comments.${filterColumn} = :filterID ${userListWhere} ORDER BY comments.${modeColumn} DESC LIMIT ${count} OFFSET ${commentpage}"; +$query = "SELECT comments.levelID, comments.commentID, comments.timestamp, comments.comment, comments.userID, comments.likes, comments.isSpam, comments.percent, users.userName, users.clan, users.icon, users.color1, users.color2, users.iconType, users.special, users.extID FROM comments LEFT JOIN users ON comments.userID = users.userID {$userListJoin} WHERE comments.${filterColumn} = :filterID {$userListWhere} ORDER BY comments.${modeColumn} DESC LIMIT ${count} OFFSET ${commentpage}"; $query = $db->prepare($query); $query->execute([':filterID' => $filterID]); $result = $query->fetchAll(); $visiblecount = $query->rowCount(); foreach($result as &$comment1) { - if($comment1["commentID"]!=""){ - $uploadDate = date("d/m/Y G.i", $comment1["timestamp"]); - $commentText = ($gameVersion < 20) ? base64_decode($comment1["comment"]) : $comment1["comment"]; + if(!empty($comment1["commentID"])) { + $uploadDate = $gs->makeTime($comment1["timestamp"]); + $comment1['comment'] = ExploitPatch::translit(ExploitPatch::url_base64_decode($comment1["comment"])); + if($enableCommentLengthLimiter) $commentText = mb_substr($comment1['comment'], 0, $maxCommentLength); + $commentText = ($gameVersion < 20) ? ExploitPatch::gd_escape($comment1["comment"]) : ExploitPatch::url_base64_encode($comment1["comment"]); if($displayLevelID) $commentstring .= "1~".$comment1["levelID"]."~"; - $commentstring .= "2~".$commentText."~3~".$comment1["userID"]."~4~".$comment1["likes"]."~5~0~7~".$comment1["isSpam"]."~9~".$uploadDate."~6~".$comment1["commentID"]."~10~".$comment1["percent"]; - if ($comment1['userName']) { //TODO: get rid of queries caused by getMaxValuePermission and getAccountCommentColor - $extID = is_numeric($comment1["extID"]) ? $comment1["extID"] : 0; - if($binaryVersion > 31){ - $badge = $gs->getMaxValuePermission($extID, "modBadgeLevel"); - $colorString = $badge > 0 ? "~12~".$gs->getAccountCommentColor($extID) : ""; - - $commentstring .= "~11~${badge}${colorString}:1~".$comment1["userName"]."~7~1~9~".$comment1["icon"]."~10~".$comment1["color1"]."~11~".$comment1["color2"]."~14~".$comment1["iconType"]."~15~".$comment1["special"]."~16~".$extID; - }elseif(!in_array($comment1["userID"], $users)){ + if($commentAutoLike && array_key_exists($comment1["commentID"], $specialCommentLikes)) $likes = $comment1["likes"] * $specialCommentLikes[$comment1["commentID"]]; // Multiply by the specified value + else $likes = $comment1["likes"]; // Normal like value + if($likes < -2) $comment1["isSpam"] = 1; + $commentstring .= "2~".$commentText."~3~".$comment1["userID"]."~4~".$likes."~5~0~7~".$comment1["isSpam"]."~9~".$uploadDate."~6~".$comment1["commentID"]."~10~".$comment1["percent"]; + if($comment1['userName']) { + $comment1["extID"] = is_numeric($comment1["extID"]) ? $comment1["extID"] : 0; + $comment1['userName'] = $gs->makeClanUsername($comment1); + if($binaryVersion > 31) { + $badge = $gs->getMaxValuePermission($comment1["extID"], "modBadgeLevel"); + $colorString = $badge > 0 ? "~12~".$gs->getAccountCommentColor($comment1["extID"]) : ""; + $commentstring .= "~11~${badge}${colorString}:1~".$comment1["userName"]."~7~1~9~".$comment1["icon"]."~10~".$comment1["color1"]."~11~".$comment1["color2"]."~14~".$comment1["iconType"]."~15~".$comment1["special"]."~16~".$comment1["extID"]; + } elseif(!in_array($comment1["userID"], $users)) { $users[] = $comment1["userID"]; - $userstring .= $comment1["userID"] . ":" . $comment1["userName"] . ":" . $extID . "|"; + $userstring .= $comment1["userID"] . ":" . $comment1["userName"] . ":" . $comment1["extID"] . "|"; } $commentstring .= "|"; } @@ -81,9 +93,9 @@ $commentstring = substr($commentstring, 0, -1); echo $commentstring; -if($binaryVersion < 32){ +if($binaryVersion < 32) { $userstring = substr($userstring, 0, -1); echo "#$userstring"; } echo "#${commentcount}:${commentpage}:${visiblecount}"; -?> +?> \ No newline at end of file diff --git a/incl/comments/uploadGJAccComment.php b/incl/comments/uploadGJAccComment.php index 3f8518ccb..e2de1cf64 100644 --- a/incl/comments/uploadGJAccComment.php +++ b/incl/comments/uploadGJAccComment.php @@ -1,28 +1,31 @@ 20 ? 'temp_0_Account posting is currently disabled!' : '-1')); $userName = ExploitPatch::remove($_POST["userName"]); $comment = ExploitPatch::remove($_POST["comment"]); +$commentLength = ($gameVersion >= 20) ? mb_strlen(ExploitPatch::url_base64_decode($comment)) : mb_strlen($comment); +if($enableCommentLengthLimiter && $commentLength > $maxAccountCommentLength) exit("temp_0_You cannot post account comments above $maxAccountCommentLength characters! (Your's ".$commentLength.")"); $accountID = GJPCheck::getAccountIDOrDie(); -$userID = $mainLib->getUserID($accountID, $userName); +$userID = $gs->getUserID($accountID, $userName); $uploadDate = time(); //usercheck -if($accountID != "" AND $comment != ""){ - $decodecomment = base64_decode($comment); - if(Commands::doProfileCommands($accountID, $decodecomment)){ - exit("-1"); - } - $query = $db->prepare("INSERT INTO acccomments (userName, comment, userID, timeStamp) - VALUES (:userName, :comment, :userID, :uploadDate)"); +if($accountID != "" AND $comment != "") { + $decodecomment = ExploitPatch::url_base64_decode($comment); + if(Commands::doProfileCommands($accountID, $decodecomment)) exit("-1"); + $checkCommentBan = $gs->getPersonBan($accountID, $userID, 3); + if($checkCommentBan) ($_POST['gameVersion'] > 20 ? exit("temp_".($checkCommentBan['expires'] - time())."_".ExploitPatch::translit(ExploitPatch::url_base64_decode($checkCommentBan['reason']))) : exit('-10')); + $query = $db->prepare("INSERT INTO acccomments (userName, comment, userID, timeStamp) VALUES (:userName, :comment, :userID, :uploadDate)"); $query->execute([':userName' => $userName, ':comment' => $comment, ':userID' => $userID, ':uploadDate' => $uploadDate]); + Automod::checkAccountPostsSpamming($userID); + $gs->logAction($accountID, 14, $userName, $comment, $db->lastInsertId()); echo 1; -}else{ - echo -1; -} +} else echo -1; ?> \ No newline at end of file diff --git a/incl/comments/uploadGJComment.php b/incl/comments/uploadGJComment.php index 56b07d700..5817bfdc1 100644 --- a/incl/comments/uploadGJComment.php +++ b/incl/comments/uploadGJComment.php @@ -1,49 +1,68 @@ 20 ? 'temp_0_Commenting is currently disabled!' : '-1')); +$userName = !empty($_POST['userName']) ? ExploitPatch::charclean($_POST['userName']) : ""; +$comment = !empty($_POST['comment']) ? $_POST['comment'] : ""; $gameVersion = !empty($_POST['gameVersion']) ? ExploitPatch::number($_POST['gameVersion']) : 0; -$comment = ExploitPatch::remove($_POST['comment']); -$comment = ($gameVersion < 20) ? base64_encode($comment) : $comment; -$levelID = ($_POST['levelID'] < 0 ? '-' : '').ExploitPatch::number($_POST["levelID"]); -$percent = !empty($_POST["percent"]) ? ExploitPatch::remove($_POST["percent"]) : 0; +$commentLength = ($gameVersion >= 20) ? mb_strlen(ExploitPatch::url_base64_decode($comment)) : mb_strlen($comment); +if($enableCommentLengthLimiter && $commentLength > $maxCommentLength) exit("temp_0_You cannot post comments above $maxCommentLength characters! (Your's ".$commentLength.")"); +$comment = ($gameVersion < 20) ? ExploitPatch::url_base64_encode(ExploitPatch::rucharclean($comment)) : ExploitPatch::url_base64_encode(ExploitPatch::rucharclean(ExploitPatch::url_base64_decode($comment))); +$levelID = ExploitPatch::numbercolon($_POST["levelID"]); +$percent = !empty($_POST["percent"]) ? ExploitPatch::number($_POST["percent"]) : 0; + +if(strpos($levelID, '-') === 0) { + $checkLevelExist = $db->prepare("SELECT * FROM lists WHERE listID = :levelID"); + $checkLevelExist->execute([':levelID' => ltrim($levelID, '-')]); +} else { + $checkLevelExist = $db->prepare("SELECT * FROM levels WHERE levelID = :levelID"); + $checkLevelExist->execute([':levelID' => $levelID]); +} +if($checkLevelExist->rowCount() == 0) die("-1"); -$id = $mainLib->getIDFromPost(); +$id = $gs->getIDFromPost(); $register = is_numeric($id); -$userID = $mainLib->getUserID($id, $userName); +$userID = $gs->getUserID($id, $userName); $uploadDate = time(); -$decodecomment = base64_decode($comment); -if(Commands::doCommands($id, $decodecomment, $levelID)){ - exit($gameVersion > 20 ? "temp_0_Command executed successfully!" : "-1"); -} -if($id != "" AND $comment != ""){ +$decodecomment = ExploitPatch::url_base64_decode($comment); +$command = Commands::doCommands($id, $decodecomment, $levelID); +if($command) ($_POST['gameVersion'] > 20 ? exit("temp_0_".$command) : exit('-1')); +if($percent < 0 || $percent > 100) exit("temp_0_Invalid percentage!"); +$checkCommentBan = $gs->getPersonBan($id, $userID, 3); +if($checkCommentBan) ($_POST['gameVersion'] > 20 ? exit("temp_".($checkCommentBan['expires'] - time())."_".ExploitPatch::translit(ExploitPatch::url_base64_decode($checkCommentBan['reason']))) : exit('-10')); +if($checkLevelExist->fetch()['commentLocked']) exit("temp_0_Comments on this ".(strpos($levelID, '-') === 0 ? 'list' : 'level')." are locked!"); +if($id != "" AND $comment != "") { $query = $db->prepare("INSERT INTO comments (userName, comment, levelID, userID, timeStamp, percent) VALUES (:userName, :comment, :levelID, :userID, :uploadDate, :percent)"); $query->execute([':userName' => $userName, ':comment' => $comment, ':levelID' => $levelID, ':userID' => $userID, ':uploadDate' => $uploadDate, ':percent' => $percent]); + $gs->logAction($id, 15, $userName, $comment, $db->lastInsertId(), $levelID); + Automod::checkCommentsSpamming($userID); echo 1; - if($register){ - //TODO: improve this - if($percent != 0){ + if($register) { + if($percent != 0) { $query2 = $db->prepare("SELECT percent FROM levelscores WHERE accountID = :accountID AND levelID = :levelID"); $query2->execute([':accountID' => $id, ':levelID' => $levelID]); $result = $query2->fetchColumn(); - if ($query2->rowCount() == 0) { + if($query2->rowCount() == 0) { $query = $db->prepare("INSERT INTO levelscores (accountID, levelID, percent, uploadDate) VALUES (:accountID, :levelID, :percent, :uploadDate)"); + $gs->logAction($id, 34, $levelID, $percent); } else { - if($result < $percent){ + if($result < $percent) { + $gs->logAction($id, 35, $levelID, $percent); $query = $db->prepare("UPDATE levelscores SET percent=:percent, uploadDate=:uploadDate WHERE accountID=:accountID AND levelID=:levelID"); $query->execute([':accountID' => $id, ':levelID' => $levelID, ':percent' => $percent, ':uploadDate' => $uploadDate]); } } } } -}else{ +} else { echo -1; } ?> diff --git a/incl/levelpacks/deleteGJLevelList.php b/incl/levelpacks/deleteGJLevelList.php index 4c87ab7a0..f283ed3a8 100644 --- a/incl/levelpacks/deleteGJLevelList.php +++ b/incl/levelpacks/deleteGJLevelList.php @@ -1,15 +1,20 @@ -getListOwner($listID)) { - $list = $db->prepare('DELETE FROM lists WHERE listID = :listID'); - $list->execute([':listID' => $listID]); - exit("1"); -} else exit("-1"); +getListOwner($listID)) { + $listData = $db->prepare('SELECT * FROM lists WHERE listID = :listID AND accountID = :accountID'); + $listData->execute([':listID' => $listID, ':accountID' => $accountID]); + $listData = $listData->fetch(); + $list = $db->prepare('DELETE FROM lists WHERE listID = :listID'); + $list->execute([':listID' => $listID]); + $gs->logAction($accountID, 19, $listData['listName'], $listData['listlevels'], $listID, $listData['difficulty'], $listData['unlisted']); + $gs->sendLogsListChangeWebhook($listID, $accountID, $listData); + exit("1"); +} else exit("-1"); ?> \ No newline at end of file diff --git a/incl/levelpacks/getGJGauntlets.php b/incl/levelpacks/getGJGauntlets.php index bf0cc607b..25530413e 100644 --- a/incl/levelpacks/getGJGauntlets.php +++ b/incl/levelpacks/getGJGauntlets.php @@ -1,6 +1,6 @@ '.(time()-604800); - break; - case 4: // RECENT - $order = "uploadDate"; - break; - case 5: - $params[] = "lists.accountID = '$str'"; - break; - case 6: // TOP LISTS - $params[] = "lists.starStars > 0"; - $params[] = "lists.starFeatured > 0"; - $order = "downloads"; - break; - case 11: // RATED - $params[] = "lists.starStars > 0"; - $order = "downloads"; - break; - case 12: //FOLLOWED - $followed = ExploitPatch::numbercolon($_POST["followed"]); - if(empty($followed)) $followed = 0; // No SQL syntax error today - $params[] = "lists.accountID IN ($followed)"; - break; - case 13: //FRIENDS - $accountID = GJPCheck::getAccountIDOrDie(); - $peoplearray = $gs->getFriends($accountID); - $whereor = implode(",", $peoplearray); - $params[] = "lists.accountID IN ($whereor)"; - break; - case 7: // MAGIC - case 27: // SENT - $params[] = "suggest.suggestLevelId < 0"; - $order = "suggest.timestamp"; - $morejoins = "LEFT JOIN suggest ON lists.listID*-1 LIKE suggest.suggestLevelId"; - break; -} -//ACTUAL QUERY EXECUTION -$querybase = "FROM lists LEFT JOIN users ON lists.accountID LIKE users.extID $morejoins"; -if(!empty($params)){ - $querybase .= " WHERE (" . implode(" ) AND ( ", $params) . ")"; -} -$query = "SELECT lists.*, UNIX_TIMESTAMP(uploadDate) AS uploadDateUnix, UNIX_TIMESTAMP(updateDate) AS updateDateUnix, users.userID, users.userName, users.extID $querybase"; -if($order){ - $query .= "ORDER BY $order DESC"; -} -$query .= " LIMIT 10 OFFSET $offset"; -//echo $query; -$countquery = "SELECT count(*) $querybase"; -//echo $query; -$query = $db->prepare($query); -$query->execute(); -//echo $countquery; -$countquery = $db->prepare($countquery); -$countquery->execute(); -$totallvlcount = $countquery->fetchColumn(); -$result = $query->fetchAll(); -$levelcount = $query->rowCount(); -foreach($result as &$list) { - if(!$list['uploadDateUnix']) $list['uploadDateUnix'] = 0; - if(!$list['updateDateUnix']) $list['updateDateUnix'] = 0; - $lvlstring .= "1:{$list['listID']}:2:{$list['listName']}:3:{$list['listDesc']}:5:{$list['listVersion']}:49:{$list['accountID']}:50:{$list['userName']}:10:{$list['downloads']}:7:{$list['starDifficulty']}:14:{$list['likes']}:19:{$list['starFeatured']}:51:{$list['listlevels']}:55:{$list['starStars']}:56:{$list['countForReward']}:28:{$list['uploadDateUnix']}:29:{$list['updateDateUnix']}"."|"; - $userstring .= $gs->getUserString($list)."|"; -} -if(empty($lvlstring)) exit("-1"); -if(!empty($str) AND is_numeric($str) AND $levelcount == 1) { - $ip = $gs->getIP(); - $query6 = $db->prepare("SELECT count(*) FROM actions_downloads WHERE levelID=:listID AND ip=INET6_ATON(:ip)"); - $query6->execute([':listID' => '-'.$str, ':ip' => $ip]); - if($query6->fetchColumn() < 2){ - $query2=$db->prepare("UPDATE lists SET downloads = downloads + 1 WHERE listID = :listID"); - $query2->execute([':listID' => $str]); - $query6 = $db->prepare("INSERT INTO actions_downloads (levelID, ip) VALUES - (:listID,INET6_ATON(:ip))"); - $query6->execute([':listID' => '-'.$str, ':ip' => $ip]); - } -} -$lvlstring = substr($lvlstring, 0, -1); -$userstring = substr($userstring, 0, -1); -echo $lvlstring."#".$userstring; -echo "#".$totallvlcount.":".$offset.":10"; -echo "#"; -echo "Sa1ntSosetHuiHelloFromGreenCatsServerLOL"; -//echo GenerateHash::genMulti($lvlsmultistring); -?> \ No newline at end of file + '.(time()-604800); + break; + case 4: // RECENT + $order = "uploadDate"; + break; + case 5: + if(!empty($_POST['accountID'])) { + $accountID = GJPCheck::getAccountIDOrDie(); + if($accountID == $str) $params = []; + } + $params[] = "lists.accountID = '$str'"; + break; + case 6: // TOP LISTS + $params[] = "lists.starStars > 0"; + $params[] = "lists.starFeatured > 0"; + $order = "downloads"; + break; + case 11: // RATED + $params[] = "lists.starStars > 0"; + $order = "downloads"; + break; + case 12: //FOLLOWED + $followed = ExploitPatch::numbercolon($_POST["followed"]); + if(empty($followed)) $followed = 0; // No SQL syntax error today + $params[] = "lists.accountID IN ($followed)"; + break; + case 13: //FRIENDS + $accountID = GJPCheck::getAccountIDOrDie(); + $peoplearray = $gs->getFriends($accountID); + $whereor = implode(",", $peoplearray); + $params[] = "lists.accountID IN ($whereor)"; + break; + case 7: // MAGIC + $order = "likes"; + break; + case 27: // SENT + $params[] = "suggest.suggestLevelId < 0"; + $order = "suggest.timestamp"; + $morejoins = "LEFT JOIN suggest ON lists.listID*-1 LIKE suggest.suggestLevelId"; + break; +} +//ACTUAL QUERY EXECUTION +$querybase = "FROM lists LEFT JOIN users ON lists.accountID LIKE users.extID $morejoins"; +if(!empty($params)){ + $querybase .= " WHERE (" . implode(" ) AND ( ", $params) . ")"; +} +$query = "SELECT lists.*, UNIX_TIMESTAMP(uploadDate) AS uploadDateUnix, UNIX_TIMESTAMP(updateDate) AS updateDateUnix, users.userID, users.userName, users.extID, users.clan $querybase"; +if($order){ + $query .= "ORDER BY $order DESC"; +} +$query .= " LIMIT 10 OFFSET $offset"; +//echo $query; +$countquery = "SELECT count(*) $querybase"; +//echo $query; +$query = $db->prepare($query); +$query->execute(); +//echo $countquery; +$countquery = $db->prepare($countquery); +$countquery->execute(); +$totallvlcount = $countquery->fetchColumn(); +$result = $query->fetchAll(); +$levelcount = $query->rowCount(); +foreach($result as &$list) { + if(!$list['uploadDateUnix']) $list['uploadDateUnix'] = 0; + if(!$list['updateDateUnix']) $list['updateDateUnix'] = 0; + $list['listName'] = ExploitPatch::translit($list['listName']); + $list['listDesc'] = ExploitPatch::translit($list['listDesc']); + $list['likes'] = $list['likes']; // - $list['dislikes']; + $list['userName'] = $gs->makeClanUsername($list); + $lvlstring .= "1:{$list['listID']}:2:{$list['listName']}:3:{$list['listDesc']}:5:{$list['listVersion']}:49:{$list['accountID']}:50:{$list['userName']}:10:{$list['downloads']}:7:{$list['starDifficulty']}:14:{$list['likes']}:19:{$list['starFeatured']}:51:{$list['listlevels']}:55:{$list['starStars']}:56:{$list['countForReward']}:28:{$list['uploadDateUnix']}:29:{$list['updateDateUnix']}"."|"; + $userstring .= $gs->getUserString($list)."|"; +} +if(empty($lvlstring)) exit("-1"); +if(!empty($str) AND is_numeric($str) AND $levelcount == 1) { + $ip = $gs->getIP(); + $query6 = $db->prepare("SELECT count(*) FROM actions_downloads WHERE levelID=:listID AND ip=INET6_ATON(:ip)"); + $query6->execute([':listID' => '-'.$str, ':ip' => $ip]); + if($query6->fetchColumn() < 2){ + $query2=$db->prepare("UPDATE lists SET downloads = downloads + 1 WHERE listID = :listID"); + $query2->execute([':listID' => $str]); + $query6 = $db->prepare("INSERT INTO actions_downloads (levelID, ip) VALUES + (:listID,INET6_ATON(:ip))"); + $query6->execute([':listID' => '-'.$str, ':ip' => $ip]); + } +} +$lvlstring = substr($lvlstring, 0, -1); +$userstring = substr($userstring, 0, -1); +echo $lvlstring."#".$userstring; +echo "#".$totallvlcount.":".$offset.":10"; +echo "#"; +echo "Sa1ntSosetHuiHelloFromGreenCatsServerLOL"; +//echo GenerateHash::genMulti($lvlsmultistring); +?> diff --git a/incl/levelpacks/getGJMapPacks.php b/incl/levelpacks/getGJMapPacks.php index 6d3dd7b94..ef7c7a94f 100644 --- a/incl/levelpacks/getGJMapPacks.php +++ b/incl/levelpacks/getGJMapPacks.php @@ -1,30 +1,29 @@ prepare("SELECT colors2,rgbcolors,ID,name,levels,stars,coins,difficulty FROM `mappacks` ORDER BY `ID` ASC LIMIT 10 OFFSET $packpage"); +$lvlsmultistring = []; +if($orderMapPacksByStars) $query = $db->prepare("SELECT * FROM `mappacks` ORDER BY `stars` ASC LIMIT 10 OFFSET $packpage"); +else $query = $db->prepare("SELECT * FROM `mappacks` ORDER BY `ID` ASC LIMIT 10 OFFSET $packpage"); $query->execute(); $result = $query->fetchAll(); $packcount = $query->rowCount(); foreach($result as &$mappack) { - $lvlsmultistring .= $mappack["ID"] . ","; + $lvlsmultistring[] = ['ID' => $mappack["ID"], 'stars' => $mappack["stars"], 'coins' => $mappack["coins"]]; $colors2 = $mappack["colors2"]; - if($colors2 == "none" OR $colors2 == ""){ - $colors2 = $mappack["rgbcolors"]; - } - $mappackstring .= "1:".$mappack["ID"].":2:".$mappack["name"].":3:".$mappack["levels"].":4:".$mappack["stars"].":5:".$mappack["coins"].":6:".$mappack["difficulty"].":7:".$mappack["rgbcolors"].":8:".$colors2."|"; + if($colors2 == "none" OR $colors2 == "") $colors2 = $mappack["rgbcolors"]; + $mappackstring .= "1:".$mappack["ID"].":2:".ExploitPatch::translit($mappack["name"]).":3:".$mappack["levels"].":4:".$mappack["stars"].":5:".$mappack["coins"].":6:".$mappack["difficulty"].":7:".$mappack["rgbcolors"].":8:".$colors2."|"; } $query = $db->prepare("SELECT count(*) FROM mappacks"); $query->execute(); $totalpackcount = $query->fetchColumn(); $mappackstring = substr($mappackstring, 0, -1); -$lvlsmultistring = substr($lvlsmultistring, 0, -1); echo $mappackstring; echo "#".$totalpackcount.":".$packpage.":10"; echo "#"; diff --git a/incl/levelpacks/uploadGJLevelList.php b/incl/levelpacks/uploadGJLevelList.php index 7c26dd586..dcd45a2c9 100644 --- a/incl/levelpacks/uploadGJLevelList.php +++ b/incl/levelpacks/uploadGJLevelList.php @@ -1,36 +1,41 @@ -prepare('SELECT * FROM lists WHERE listID = :listID AND accountID = :accountID'); - $list->execute([':listID' => $listID, ':accountID' => $accountID]); - $list = $list->fetch(); - if(!empty($list)) { - $list = $db->prepare('UPDATE lists SET listDesc = :listDesc, listVersion = :listVersion, listlevels = :listlevels, starDifficulty = :difficulty, original = :original, unlisted = :unlisted, updateDate = :timestamp WHERE listID = :listID'); - $list->execute([':listID' => $listID, ':listDesc' => $listDesc, ':listVersion' => $listVersion, ':listlevels' => $listLevels, ':difficulty' => $difficulty, ':original' => $original, ':unlisted' => $unlisted, ':timestamp' => time()]); - exit($listID); - } -} -$list = $db->prepare('INSERT INTO lists (listName, listDesc, listVersion, accountID, listlevels, starDifficulty, original, unlisted, uploadDate) VALUES (:listName, :listDesc, :listVersion, :accountID, :listlevels, :difficulty, :original, :unlisted, :timestamp)'); -$list->execute([':listName' => $listName, ':listDesc' => $listDesc, ':listVersion' => $listVersion, ':accountID' => $accountID, ':listlevels' => $listLevels, ':difficulty' => $difficulty, ':original' => $original, ':unlisted' => $unlisted, ':timestamp' => time()]); -echo $db->lastInsertId(); +prepare('SELECT * FROM lists WHERE listID = :listID AND accountID = :accountID'); + $list->execute([':listID' => $listID, ':accountID' => $accountID]); + $list = $list->fetch(); + if(!empty($list)) { + $updateList = $db->prepare('UPDATE lists SET listDesc = :listDesc, listVersion = :listVersion, listlevels = :listlevels, starDifficulty = :difficulty, original = :original, unlisted = :unlisted, updateDate = :timestamp WHERE listID = :listID'); + $updateList->execute([':listID' => $listID, ':listDesc' => $listDesc, ':listVersion' => $listVersion, ':listlevels' => $listLevels, ':difficulty' => $difficulty, ':original' => $original, ':unlisted' => $unlisted, ':timestamp' => time()]); + $gs->logAction($accountID, 18, $listName, $listLevels, $listID, $difficulty, $unlisted); + $gs->sendLogsListChangeWebhook($listID, $accountID, $list); + exit($listID); + } +} +$list = $db->prepare('INSERT INTO lists (listName, listDesc, listVersion, accountID, listlevels, starDifficulty, original, unlisted, uploadDate) VALUES (:listName, :listDesc, :listVersion, :accountID, :listlevels, :difficulty, :original, :unlisted, :timestamp)'); +$list->execute([':listName' => $listName, ':listDesc' => $listDesc, ':listVersion' => $listVersion, ':accountID' => $accountID, ':listlevels' => $listLevels, ':difficulty' => $difficulty, ':original' => $original, ':unlisted' => $unlisted, ':timestamp' => time()]); +$listID = $db->lastInsertId(); +$gs->logAction($accountID, 17, $listName, $listLevels, $listID, $difficulty, $unlisted); +$gs->sendLogsListChangeWebhook($listID, $accountID); +echo $listID; ?> \ No newline at end of file diff --git a/incl/levels/deleteGJLevelUser.php b/incl/levels/deleteGJLevelUser.php index 5cb66409f..f225eac92 100644 --- a/incl/levels/deleteGJLevelUser.php +++ b/incl/levels/deleteGJLevelUser.php @@ -1,26 +1,36 @@ getUserID($accountID); -$query = $db->prepare("DELETE from levels WHERE levelID=:levelID AND userID=:userID AND starStars = 0 LIMIT 1"); +$userID = $gs->getUserID($accountID); +$query = $db->prepare("SELECT * FROM levels WHERE levelID = :levelID AND userID = :userID AND starStars = 0"); $query->execute([':levelID' => $levelID, ':userID' => $userID]); -$query6 = $db->prepare("INSERT INTO actions (type, value, timestamp, value2) VALUES - (:type,:itemID, :time, :ip)"); -$query6->execute([':type' => 8, ':itemID' => $levelID, ':time' => time(), ':ip' => $userID]); -if(file_exists("../../data/levels/$levelID") AND $query->rowCount() != 0){ - rename("../../data/levels/$levelID","../../data/levels/deleted/$levelID"); -} +$getLevelData = $query->fetch(); + +if(!$getLevelData) exit("-1"); + +$query = $db->prepare("DELETE FROM comments WHERE levelID = :levelID"); +$query->execute([':levelID' => $levelID]); +$query = $db->prepare("DELETE FROM levels WHERE levelID = :levelID AND userID = :userID LIMIT 1"); +$query->execute([':levelID' => $levelID, ':userID' => $userID]); +if(file_exists("../../data/levels/$levelID")) rename("../../data/levels/$levelID","../../data/levels/deleted/$levelID"); echo "1"; +$gs->logAction($accountID, 8, $getLevelData['levelName'], $getLevelData['levelDesc'], $getLevelData['extID'], $levelID, $getLevelData['starStars'], $getLevelData['starDifficulty']); +$gs->sendLogsLevelChangeWebhook($levelID, $accountID, $getLevelData); +if($automaticCron) { + Cron::autoban($accountID, false); + Cron::updateCreatorPoints($accountID, false); + Cron::updateSongsUsage($accountID, false); +} ?> \ No newline at end of file diff --git a/incl/levels/downloadGJLevel.php b/incl/levels/downloadGJLevel.php index 4a4ec0c62..e93c05c7f 100644 --- a/incl/levels/downloadGJLevel.php +++ b/incl/levels/downloadGJLevel.php @@ -1,136 +1,107 @@ getIP(); -$levelID = ExploitPatch::remove($_POST["levelID"]); -$binaryVersion = !empty($_POST["binaryVersion"]) ? ExploitPatch::remove($_POST["levelID"]) : 0; +$binaryVersion = !empty($_POST["binaryVersion"]) ? ExploitPatch::number($_POST["binaryVersion"]) : 0; $feaID = 0; -if(!is_numeric($levelID)){ - echo -1; -}else{ - switch($levelID){ - case -1: //Daily level - $query = $db->prepare("SELECT feaID, levelID FROM dailyfeatures WHERE timestamp < :time AND type = 0 ORDER BY timestamp DESC LIMIT 1"); - $query->execute([':time' => time()]); - $result = $query->fetch(); - $levelID = $result["levelID"]; - $feaID = $result["feaID"]; - $daily = 1; - break; - case -2: //Weekly level - $query = $db->prepare("SELECT feaID, levelID FROM dailyfeatures WHERE timestamp < :time AND type = 1 ORDER BY timestamp DESC LIMIT 1"); - $query->execute([':time' => time()]); - $result = $query->fetch(); - $levelID = $result["levelID"]; - $feaID = $result["feaID"]; - $feaID = $feaID + 100001; - $daily = 1; - break; - case -3: //Event level - $query = $db->prepare("SELECT feaID, levelID FROM dailyfeatures WHERE timestamp < :time AND type = 2 ORDER BY timestamp DESC LIMIT 1"); - $query->execute([':time' => time()]); - $result = $query->fetch(); - $levelID = $result["levelID"]; - $feaID = $result["feaID"]; - //The feaID range for event levels on real GD is currently unknown, as there haven't been any yet. As such, offsetting this is to be implemented in the future - //$feaID = $feaID + 100001; - $daily = 1; - break; - default: - $daily = 0; - } - //downloading the level - if($daily == 1) - $query=$db->prepare("SELECT levels.*, users.userName, users.extID FROM levels LEFT JOIN users ON levels.userID = users.userID WHERE levelID = :levelID"); - else - $query=$db->prepare("SELECT * FROM levels WHERE levelID = :levelID"); - - $query->execute([':levelID' => $levelID]); - $lvls = $query->rowCount(); - if($lvls!=0){ +switch($levelID) { + case -1: // Daily level + $query = $db->prepare("SELECT feaID, levelID FROM dailyfeatures WHERE timestamp < :time AND type = 0 ORDER BY timestamp DESC LIMIT 1"); + $query->execute([':time' => time()]); + $result = $query->fetch(); + $levelID = $result["levelID"]; + $feaID = $result["feaID"]; + $daily = 1; + break; + case -2: // Weekly level + $query = $db->prepare("SELECT feaID, levelID FROM dailyfeatures WHERE timestamp < :time AND type = 1 ORDER BY timestamp DESC LIMIT 1"); + $query->execute([':time' => time()]); $result = $query->fetch(); - - //Verifying friends only unlisted - if($result["unlisted2"] != 0){ - $accountID = GJPCheck::getAccountIDOrDie(); - if(! ($result["extID"] == $accountID || $gs->isFriends($accountID, $result["extID"])) ) exit("-1"); + $levelID = $result["levelID"]; + $feaID = $result["feaID"] + 100000; + $daily = 1; + break; + case -3: // Event level + $query = $db->prepare("SELECT feaID, levelID FROM events WHERE timestamp < :time AND duration >= :time ORDER BY timestamp DESC LIMIT 1"); + $query->execute([':time' => time()]); + $result = $query->fetch(); + $levelID = $result["levelID"]; + $feaID = $result["feaID"] + 200000; + $daily = 1; + break; + default: + $daily = 0; + break; +} +if($daily == 1) $query = $db->prepare("SELECT levels.*, users.userName, users.extID FROM levels LEFT JOIN users ON levels.userID = users.userID WHERE levelID = :levelID"); +else $query = $db->prepare("SELECT * FROM levels WHERE levelID = :levelID"); +$query->execute([':levelID' => $levelID]); +$result = $query->fetch(); +if($result) { + $isPlayerAnAdmin = false; + if(!empty($_POST['accountID'])) { + $accountID = GJPCheck::getAccountIDOrDie(); + if($unlistedLevelsForAdmins) { + $checkAdmin = $db->prepare('SELECT isAdmin FROM accounts WHERE accountID = :accountID'); + $checkAdmin->execute([':accountID' => $accountID]); + $checkAdmin = $checkAdmin->fetchColumn(); + if($checkAdmin) $isPlayerAnAdmin = true; } - - //adding the download - $query6 = $db->prepare("SELECT count(*) FROM actions_downloads WHERE levelID=:levelID AND ip=INET6_ATON(:ip)"); + } + if($result["unlisted2"] == 1) if(!($result["extID"] == $accountID || $gs->isFriends($accountID, $result["extID"])) && !$isPlayerAnAdmin) exit("-1"); // Verifying friends only unlisted + // Adding the download + $query6 = $db->prepare("SELECT count(*) FROM actions_downloads WHERE levelID=:levelID AND ip=INET6_ATON(:ip)"); + $query6->execute([':levelID' => $levelID, ':ip' => $ip]); + if($inc && $query6->fetchColumn() < 2) { + $query2=$db->prepare("UPDATE levels SET downloads = downloads + 1 WHERE levelID = :levelID"); + $query2->execute([':levelID' => $levelID]); + $query6 = $db->prepare("INSERT INTO actions_downloads (levelID, ip) VALUES (:levelID,INET6_ATON(:ip))"); $query6->execute([':levelID' => $levelID, ':ip' => $ip]); - if($inc && $query6->fetchColumn() < 2){ - $query2=$db->prepare("UPDATE levels SET downloads = downloads + 1 WHERE levelID = :levelID"); - $query2->execute([':levelID' => $levelID]); - $query6 = $db->prepare("INSERT INTO actions_downloads (levelID, ip) VALUES - (:levelID,INET6_ATON(:ip))"); - $query6->execute([':levelID' => $levelID, ':ip' => $ip]); - } - //getting the days since uploaded... or outputting the date in Y-M-D format at least for now... - $uploadDate = date("d-m-Y G-i", $result["uploadDate"]); - $updateDate = date("d-m-Y G-i", $result["updateDate"]); - //password xor - $pass = $result["password"]; - $desc = $result["levelDesc"]; - if($gs->checkModIPPermission("actionFreeCopy") == 1){ - $pass = "1"; - } - $xorPass = $pass; - if($gameVersion > 19){ - if($pass != 0) $xorPass = base64_encode(XORCipher::cipher($pass,26364)); - }else{ - $desc = ExploitPatch::remove(base64_decode($desc)); - } - //submitting data - if(file_exists("../../data/levels/$levelID")){ - $levelstring = file_get_contents("../../data/levels/$levelID"); - }else{ - $levelstring = $result["levelString"]; - } - if($gameVersion > 18){ - if(substr($levelstring,0,3) == 'kS1'){ - $levelstring = base64_encode(gzcompress($levelstring)); - $levelstring = str_replace("/","_",$levelstring); - $levelstring = str_replace("+","-",$levelstring); - } - } - $response = "1:".$result["levelID"].":2:".$result["levelName"].":3:".$desc.":4:".$levelstring.":5:".$result["levelVersion"].":6:".$result["userID"].":8:10:9:".$result["starDifficulty"].":10:".$result["downloads"].":11:1:12:".$result["audioTrack"].":13:".$result["gameVersion"].":14:".$result["likes"].":17:".$result["starDemon"].":43:".$result["starDemonDiff"].":25:".$result["starAuto"].":18:".$result["starStars"].":19:".$result["starFeatured"].":42:".$result["starEpic"].":45:".$result["objects"].":15:".$result["levelLength"].":30:".$result["original"].":31:".$result['twoPlayer'].":28:".$uploadDate. ":29:".$updateDate. ":35:".$result["songID"].":36:".$result["extraString"].":37:".$result["coins"].":38:".$result["starCoins"].":39:".$result["requestedStars"].":46:".$result["wt"].":47:".$result["wt2"].":48:".$result["settingsString"].":40:".$result["isLDM"].":27:$xorPass:52:".$result["songIDs"].":53:".$result["sfxIDs"].":57:".$result['ts']; - if($daily == 1) $response .= ":41:".$feaID; - if($extras) $response .= ":26:" . $result["levelInfo"]; - //2.02 stuff - $response .= "#" . GenerateHash::genSolo($levelstring) . "#"; - //2.1 stuff - $somestring = $result["userID"].",".$result["starStars"].",".$result["starDemon"].",".$result["levelID"].",".$result["starCoins"].",".$result["starFeatured"].",".$pass.",".$feaID; - $response .= GenerateHash::genSolo2($somestring); - if($daily == 1){ - $response .= "#" . $gs->getUserString($result); - }elseif($binaryVersion == 30){ - /* - This was only part of the response for a brief time prior to GD 2.1's relase. - This binary version corresponds to the original release of Geometry Dash World. - It is currently unknown if it's required, so it is left in for now. - */ - $response .= "#" . $somestring; + } + $uploadDate = $gs->makeTime($result["uploadDate"]); + $updateDate = $gs->makeTime($result["updateDate"]); + $pass = $result["password"]; + $desc = ExploitPatch::translit(ExploitPatch::rucharclean(ExploitPatch::url_base64_decode($result["levelDesc"]))); + if($gs->checkModIPPermission("actionFreeCopy") == 1) $pass = "1"; + $xorPass = $pass; + $levelstring = file_exists("../../data/levels/$levelID") ? file_get_contents("../../data/levels/$levelID") : $result["levelString"]; + if($gameVersion > 18) { + if(substr($levelstring, 0, 3) == 'kS1') $levelstring = ExploitPatch::url_base64_encode(gzcompress($levelstring)); + if($gameVersion > 19) { + if($pass != 0) $xorPass = ExploitPatch::url_base64_encode(XORCipher::cipher($pass, 26364)); + $desc = ExploitPatch::url_base64_encode($desc); } - echo $response; - }else{ - echo -1; } -} + $response = "1:".$result["levelID"].":2:".ExploitPatch::translit($result["levelName"]).":3:".$desc.":4:".$levelstring.":5:".$result["levelVersion"].":6:".$result["userID"].":8:10:9:".$result["starDifficulty"].":10:".$result["downloads"].":11:1:12:".$result["audioTrack"].":13:".$result["gameVersion"].":14:".$result["likes"].":17:".$result["starDemon"].":43:".$result["starDemonDiff"].":25:".$result["starAuto"].":18:".$result["starStars"].":19:".$result["starFeatured"].":42:".$result["starEpic"].":45:".$result["objects"].":15:".$result["levelLength"].":30:".$result["original"].":31:".$result['twoPlayer'].":28:".$uploadDate. ":29:".$updateDate. ":35:".$result["songID"].":36:".$result["extraString"].":37:".$result["coins"].":38:".$result["starCoins"].":39:".$result["requestedStars"].":46:".$result["wt"].":47:".$result["wt2"].":48:".$result["settingsString"].":40:".$result["isLDM"].":27:$xorPass:52:".$result["songIDs"].":53:".$result["sfxIDs"].":57:".$result['ts']; + if($daily == 1) $response .= ":41:".$feaID; + if($extras) $response .= ":26:" . $result["levelInfo"]; + // 2.02 stuff + $response .= "#" . GenerateHash::genSolo($levelstring) . "#"; + // 2.1 stuff + $somestring = $result["userID"].",".$result["starStars"].",".$result["starDemon"].",".$result["levelID"].",".$result["starCoins"].",".$result["starFeatured"].",".$pass.",".$feaID; + $response .= GenerateHash::genSolo2($somestring); + if($daily == 1) { + $response .= "#" . $gs->getUserString($result); + } elseif($binaryVersion == 30) { + /* + This was only part of the response for a brief time prior to GD 2.1's relase. + This binary version corresponds to the original release of Geometry Dash World. + It is currently unknown if it's required, so it is left in for now. + */ + $response .= "#" . $somestring; + } + echo $response; +} else exit('-1'); ?> diff --git a/incl/levels/getGJDailyLevel.php b/incl/levels/getGJDailyLevel.php index 277649af7..a3689e7ee 100644 --- a/incl/levels/getGJDailyLevel.php +++ b/incl/levels/getGJDailyLevel.php @@ -1,19 +1,51 @@ prepare("SELECT feaID FROM dailyfeatures WHERE timestamp < :current AND type = :type ORDER BY timestamp DESC LIMIT 1"); -$query->execute([':current' => $current, ':type' => $type]); +switch($type) { + case 0: + case 1: + $dailyTable = 'dailyfeatures'; + $dailyTime = 'timestamp'; + $isEvent = false; + $query = $db->prepare("SELECT * FROM dailyfeatures WHERE timestamp < :current AND type = :type ORDER BY timestamp DESC LIMIT 1"); + $query->execute([':current' => $current, ':type' => $type]); + break; + case 2: + $dailyTable = 'events'; + $dailyTime = 'duration'; + $isEvent = true; + $query = $db->prepare("SELECT * FROM events WHERE timestamp < :current AND duration >= :current ORDER BY duration ASC LIMIT 1"); + $query->execute([':current' => $current]); + break; +} + +$daily = $query->fetch(); if($query->rowCount() == 0) exit("-1"); -$dailyID = $query->fetchColumn(); -if($type == 1) $dailyID += 100001; -//Time left -$timeleft = $midnight - $current; -//output -echo $dailyID ."|". $timeleft; -?> +$dailyID = $daily['feaID'] + ($type * 100000); +$timeleft = $daily[$dailyTime] - $current; +if(!$daily['webhookSent']) { + $gs->sendDailyWebhook($daily['levelID'], $type); + $sent = $db->prepare('UPDATE '.$dailyTable.' SET webhookSent = 1 WHERE feaID = :feaID'); + $sent->execute([':feaID' => $daily['feaID']]); + if($automaticCron) Cron::updateCreatorPoints($accountID, false); +} +$stringToAdd = ''; +if($isEvent) { + $chk = XORCipher::cipher(ExploitPatch::url_base64_decode(substr(ExploitPatch::charclean($_POST["chk"]), 5)), 59182); + $string = ExploitPatch::url_base64_encode(XORCipher::cipher('Sa1nt:'.$chk.':'.($daily['feaID'] + 19).':3:'.$daily['rewards'], 59182)); + $timeleft = 10; + $hash = $gh->genSolo4($string); + $stringToAdd = '|Sa1nt'.$string.'|'.$hash; +} +echo $dailyID ."|". $timeleft.$stringToAdd; +?> \ No newline at end of file diff --git a/incl/levels/getGJLevels.php b/incl/levels/getGJLevels.php index a48c36dbd..2591461eb 100644 --- a/incl/levels/getGJLevels.php +++ b/incl/levels/getGJLevels.php @@ -1,112 +1,77 @@ 27){ - $gameVersion++; +// Initializing variables +$lvlstring = $userstring = $songsstring = $suggestColumn = $suggestJoin = $str = $morejoins = ""; +$lvlsmultistring = $epicParams = []; +$order = "uploadDate"; +$orderenabled = $ordergauntlet = $isIDSearch = false; +$params = ["unlisted = 0"]; +if(!empty($_POST['accountID'])) { + $accountID = GJPCheck::getAccountIDOrDie(); + if($unlistedLevelsForAdmins) { + $checkAdmin = $db->prepare('SELECT isAdmin FROM accounts WHERE accountID = :accountID'); + $checkAdmin->execute([':accountID' => $accountID]); + $checkAdmin = $checkAdmin->fetchColumn(); + if($checkAdmin) $params = []; } } -if(!empty($_POST["type"])){ - $type = ExploitPatch::number($_POST["type"]); -}else{ - $type = 0; -} -if(!empty($_POST["diff"])){ - $diff = ExploitPatch::numbercolon($_POST["diff"]); -}else{ - $diff = "-"; -} +$gameVersion = ExploitPatch::number($_POST["gameVersion"]) ?: 0; +$binaryVersion = ExploitPatch::number($_POST["binaryVersion"]) ?: 0; +$type = ExploitPatch::number($_POST["type"]) ?: 0; +$diff = ExploitPatch::numbercolon($_POST["diff"]) ?: '-'; -//ADDITIONAL PARAMETERS -if($gameVersion==0){ - $params[] = "levels.gameVersion <= 18"; -}else{ - $params[] = "levels.gameVersion <= '$gameVersion'"; -} -if(!empty($_POST["original"]) AND $_POST["original"]==1){ - $params[] = "original = 0"; -} -if(!empty($_POST["coins"]) AND $_POST["coins"]==1){ - $params[] = "starCoins = 1 AND NOT levels.coins = 0"; -} -if(!empty($_POST["uncompleted"]) AND $_POST["uncompleted"]==1){ - $completedLevels = ExploitPatch::numbercolon($_POST["completedLevels"]); - $params[] = "NOT levelID IN ($completedLevels)"; +// Additional search parameters + +if(!$showAllLevels) { + if($gameVersion == 0) $params[] = "levels.gameVersion <= 18"; + else $params[] = "levels.gameVersion <= '$gameVersion'"; } -if(!empty($_POST["onlyCompleted"]) AND $_POST["onlyCompleted"]==1){ +if(isset($_POST["original"]) && $_POST["original"] == 1) $params[] = "original = 0"; +if(isset($_POST["coins"]) && $_POST["coins"] == 1) $params[] = "starCoins = 1 AND NOT levels.coins = 0"; +if((isset($_POST["uncompleted"]) || isset($_POST["onlyCompleted"])) && ($_POST["uncompleted"] == 1 || $_POST["onlyCompleted"] == 1)) { $completedLevels = ExploitPatch::numbercolon($_POST["completedLevels"]); - $params[] = "levelID IN ($completedLevels)"; + $params[] = ($_POST['uncompleted'] == 1 ? 'NOT ' : '')."levelID IN ($completedLevels)"; } -if(!empty($_POST["song"])){ - if(empty($_POST["customSong"])){ - $song = ExploitPatch::number($_POST["song"]); - $song = $song -1; +if(isset($_POST["song"]) && $_POST["song"] > 0) { + $song = ExploitPatch::number($_POST["song"]); + if(!isset($_POST["customSong"])) { + $song = $song - 1; $params[] = "audioTrack = '$song' AND songID = 0"; - }else{ - $song = ExploitPatch::number($_POST["song"]); - $params[] = "songID = '$song'"; - } -} -if(!empty($_POST["twoPlayer"]) AND $_POST["twoPlayer"]==1){ - $params[] = "twoPlayer = 1"; + } else $params[] = "songID = '$song'"; } -if(!empty($_POST["star"])){ - $params[] = "NOT starStars = 0"; -} -if(!empty($_POST["noStar"])){ - $params[] = "starStars = 0"; -} -if(!empty($_POST["gauntlet"])){ +if(isset($_POST["twoPlayer"]) && $_POST["twoPlayer"] == 1) $params[] = "twoPlayer = 1"; +if(isset($_POST["star"]) && $_POST["star"] == 1) $params[] = "NOT starStars = 0"; +if(isset($_POST["noStar"]) && $_POST["noStar"] == 1) $params[] = "starStars = 0"; +if(isset($_POST["gauntlet"]) && $_POST["gauntlet"] != 0) { $ordergauntlet = true; $order = "starStars"; - $gauntlet = ExploitPatch::remove($_POST["gauntlet"]); - $query=$db->prepare("SELECT * FROM gauntlets WHERE ID = :gauntlet"); + $gauntlet = ExploitPatch::number($_POST["gauntlet"]); + $query = $db->prepare("SELECT * FROM gauntlets WHERE ID = :gauntlet"); $query->execute([':gauntlet' => $gauntlet]); $actualgauntlet = $query->fetch(); $str = $actualgauntlet["level1"].",".$actualgauntlet["level2"].",".$actualgauntlet["level3"].",".$actualgauntlet["level4"].",".$actualgauntlet["level5"]; $params[] = "levelID IN ($str)"; $type = -1; } -if(!empty($_POST["len"])){ - $len = ExploitPatch::numbercolon($_POST["len"]); -}else{ - $len = "-"; -} -if($len != "-" AND !empty($len)){ - $params[] = "levelLength IN ($len)"; -} -if(!empty($_POST["featured"])) $epicParams[] = "starFeatured = 1"; -if(!empty($_POST["epic"])) $epicParams[] = "starEpic = 1"; -if(!empty($_POST["mythic"])) $epicParams[] = "starEpic = 2"; -if(!empty($_POST["legendary"])) $epicParams[] = "starEpic = 3"; +$len = ExploitPatch::numbercolon($_POST["len"]) ?: '-'; +if($len != "-" AND !empty($len)) $params[] = "levelLength IN ($len)"; +if(isset($_POST["featured"]) && $_POST["featured"] == 1) $epicParams[] = "starFeatured > 0"; +if(isset($_POST["epic"]) && $_POST["epic"] == 1) $epicParams[] = "starEpic = 1"; +if(isset($_POST["mythic"]) && $_POST["mythic"] == 1) $epicParams[] = "starEpic = 2"; // The reason why Mythic and Legendary ratings are swapped because RobTop accidentally swapped them in-game +if(isset($_POST["legendary"]) && $_POST["legendary"] == 1) $epicParams[] = "starEpic = 3"; $epicFilter = implode(" OR ", $epicParams); if(!empty($epicFilter)) $params[] = $epicFilter; -//DIFFICULTY FILTERS -switch($diff){ +// Difficulty filters +switch($diff) { case -1: $params[] = "starDifficulty = '0'"; break; @@ -114,13 +79,9 @@ $params[] = "starAuto = '1'"; break; case -2: - if(!empty($_POST["demonFilter"])){ - $demonFilter = ExploitPatch::number($_POST["demonFilter"]); - }else{ - $demonFilter = 0; - } + $demonFilter = ExploitPatch::number($_POST["demonFilter"]) ?: 0; $params[] = "starDemon = 1"; - switch($demonFilter){ + switch($demonFilter) { case 1: $params[] = "starDemonDiff = '3'"; break; @@ -136,167 +97,143 @@ case 5: $params[] = "starDemonDiff = '6'"; break; - default: - break; } break; case "-"; break; default: - if($diff){ + if($diff) { $diff = str_replace(",", "0,", $diff) . "0"; $params[] = "starDifficulty IN ($diff) AND starAuto = '0' AND starDemon = '0'"; } break; } -//TYPE DETECTION -//TODO: the 2 non-friend types that send GJP in 2.11 -if(!empty($_POST["str"])){ - $str = ExploitPatch::remove($_POST["str"]); -} -if(isset($_POST["page"]) AND is_numeric($_POST["page"])){ - $offset = ExploitPatch::number($_POST["page"]) . "0"; -}else{ - $offset = 0; -} +// Type detection +// TODO: the 2 non-friend types that send GJP in 2.11 +if(isset($_POST["str"])) $str = ExploitPatch::rucharclean($_POST["str"]) ?: ''; +$offset = is_numeric($_POST["page"]) ? ExploitPatch::number($_POST["page"]) . "0" : 0; switch($type){ - case 0: - case 15: //most liked, changed to 15 in GDW for whatever reason + case 0: // Search + case 15: // Most liked, changed to 15 in GDW for whatever reason $order = "likes"; - if(!empty($str)){ - if(is_numeric($str)){ + if(!empty($str)) { + if(is_numeric($str)) { $params = array("levelID = '$str'"); $isIDSearch = true; - }else{ - $params[] = "levelName LIKE '%$str%'"; - } + } else $params[] = "levelName LIKE '%$str%'"; } break; - case 1: + case 1: // Most downloaded $order = "downloads"; break; - case 2: + case 2: // Most liked $order = "likes"; break; - case 3: //TRENDING + case 3: // Trending $uploadDate = time() - (7 * 24 * 60 * 60); $params[] = "uploadDate > $uploadDate "; $order = "likes"; break; - case 5: + case 5: // Levels per user + if($accountID && $gs->getUserID($accountID, $gs->getAccountName($accountID)) == $str) $params = []; $params[] = "levels.userID = '$str'"; break; - case 6: //featured - case 17: //featured GDW //TODO: make this list of daily levels + case 6: // Featured + case 17: // Featured in GDW if($gameVersion > 21) $params[] = "NOT starFeatured = 0 OR NOT starEpic = 0"; else $params[] = "NOT starFeatured = 0"; - $order = "rateDate DESC,uploadDate"; + $order = "starFeatured DESC, rateDate DESC, uploadDate"; break; - case 16: //HALL OF FAME + case 16: // Hall of Fame $params[] = "NOT starEpic = 0"; - $order = "rateDate DESC,uploadDate"; + $order = "starFeatured DESC, rateDate DESC, uploadDate"; break; - case 7: //MAGIC - $params[] = "objects > 9999"; // L + case 7: // Magic + $params[] = "objects > 9999"; // L break; - case 10: //MAP PACKS - case 19: //unknown but same as map packs (on real GD type 10 has star rated filter and 19 doesn't) + case 10: // Map Packs + case 19: // Unknown, but same as Map Packs (on real GD type 10 has star rated filter and 19 doesn't) $order = false; $params[] = "levelID IN ($str)"; break; - case 11: //AWARDED + case 11: // Awarded $params[] = "NOT starStars = 0"; $order = "rateDate DESC,uploadDate"; break; - case 12: //FOLLOWED + case 12: // Followed $followed = ExploitPatch::numbercolon($_POST["followed"]); $params[] = "users.extID IN ($followed)"; break; - case 13: //FRIENDS - $accountID = GJPCheck::getAccountIDOrDie(); + case 13: // Friends + if(!isset($accountID)) $accountID = GJPCheck::getAccountIDOrDie(); $peoplearray = $gs->getFriends($accountID); $whereor = implode(",", $peoplearray); $params[] = "users.extID IN ($whereor)"; break; - case 21: //DAILY SAFE + case 21: // Daily safe $morejoins = "INNER JOIN dailyfeatures ON levels.levelID = dailyfeatures.levelID"; - $params[] = "dailyfeatures.type = 0"; + $params[] = "dailyfeatures.type = 0 AND timestamp < ".time(); $order = "dailyfeatures.feaID"; break; - case 22: //WEEKLY SAFE + case 22: // Weekly safe $morejoins = "INNER JOIN dailyfeatures ON levels.levelID = dailyfeatures.levelID"; - $params[] = "dailyfeatures.type = 1"; + $params[] = "dailyfeatures.type = 1 AND timestamp < ".time(); $order = "dailyfeatures.feaID"; break; - case 23: //EVENT SAFE (assumption) - $morejoins = "INNER JOIN dailyfeatures ON levels.levelID = dailyfeatures.levelID"; - $params[] = "dailyfeatures.type = 2"; - $order = "dailyfeatures.feaID"; + case 23: // Event safe + $morejoins = "INNER JOIN events ON levels.levelID = events.levelID"; + $params[] = "timestamp < ".time(); + $order = "events.feaID"; break; - case 25: // LIST LEVELS + case 25: // List levels $listLevels = $gs->getListLevels($str); $params = array("levelID IN (".$listLevels.")"); break; - case 27: // SENT LEVELS - $sug = ", suggest.suggestLevelId, suggest.timestamp"; - $sugg = "LEFT JOIN suggest ON levels.levelID = suggest.suggestLevelId"; - $params[] = "suggestLevelId > 0"; - $order = 'suggest.timestamp'; + case 27: // Sent levels + $suggestColumn = ", s.max_timestamp"; + $suggestJoin = "LEFT JOIN (SELECT suggestLevelId, MAX(timestamp) as max_timestamp FROM suggest GROUP BY suggestLevelId) s ON levels.levelID = s.suggestLevelId"; + $params[] = "s.suggestLevelId > 0"; + if(!$ratedLevelsInSent) $params[] = "starStars = 0"; + $order = 's.max_timestamp'; break; } -//ACTUAL QUERY EXECUTION -$querybase = "FROM levels LEFT JOIN songs ON levels.songID = songs.ID LEFT JOIN users ON levels.userID = users.userID $sugg $morejoins"; -if(!empty($params)){ - $querybase .= " WHERE (" . implode(" ) AND ( ", $params) . ")"; -} -$query = "SELECT levels.*, songs.ID, songs.name, songs.authorID, songs.authorName, songs.size, songs.isDisabled, songs.download, users.userName, users.extID$sug $querybase"; -if($order){ - if($ordergauntlet){ - $query .= "ORDER BY $order ASC"; - }else{ - $query .= "ORDER BY $order DESC"; - } -} +// Actual query execution +$querybase = "FROM levels LEFT JOIN songs ON levels.songID = songs.ID LEFT JOIN users ON levels.userID = users.userID $suggestJoin $morejoins"; +if(!empty($params)) $querybase .= " WHERE (" . implode(" ) AND ( ", $params) . ")"; +$query = "SELECT levels.*, songs.ID, songs.name, songs.authorID, songs.authorName, songs.size, songs.isDisabled, songs.download, users.userName, users.extID, users.clan$suggestColumn $querybase"; +if($order) $query .= "ORDER BY $order ".($ordergauntlet ? 'ASC' : 'DESC'); $query .= " LIMIT 10 OFFSET $offset"; -//echo $query; $countquery = "SELECT count(*) $querybase"; -//echo $query; $query = $db->prepare($query); $query->execute(); -//echo $countquery; $countquery = $db->prepare($countquery); $countquery->execute(); $totallvlcount = $countquery->fetchColumn(); $result = $query->fetchAll(); $levelcount = $query->rowCount(); foreach($result as &$level1) { - if($level1["levelID"]!=""){ - if($isIDSearch AND $level1['unlisted'] > 1) { - if(!isset($accountID)) $accountID = GJPCheck::getAccountIDOrDie(); - if(!$gs->isFriends($accountID, $level1['extID']) && $accountID != $level1['extID']) break; - } - $lvlsmultistring[] = ["levelID" => $level1["levelID"], "stars" => $level1["starStars"], 'coins' => $level1["starCoins"]]; - if(!empty($gauntlet)){ - $lvlstring .= "44:$gauntlet:"; - } - $lvlstring .= "1:".$level1["levelID"].":2:".$level1["levelName"].":5:".$level1["levelVersion"].":6:".$level1["userID"].":8:10:9:".$level1["starDifficulty"].":10:".$level1["downloads"].":12:".$level1["audioTrack"].":13:".$level1["gameVersion"].":14:".$level1["likes"].":17:".$level1["starDemon"].":43:".$level1["starDemonDiff"].":25:".$level1["starAuto"].":18:".$level1["starStars"].":19:".$level1["starFeatured"].":42:".$level1["starEpic"].":45:".$level1["objects"].":3:".$level1["levelDesc"].":15:".$level1["levelLength"].":30:".$level1["original"].":31:".$level1['twoPlayer'].":37:".$level1["coins"].":38:".$level1["starCoins"].":39:".$level1["requestedStars"].":46:1:47:2:40:".$level1["isLDM"].":35:".$level1["songID"]."|"; - if($level1["songID"]!=0){ - $song = $gs->getSongString($level1); - if($song){ - $songsstring .= $song . "~:~"; - } - } - $userstring .= $gs->getUserString($level1)."|"; + if(empty($level1["levelID"])) continue; + if($isIDSearch && $level1['unlisted'] > 0) { + if(!isset($accountID)) $accountID = GJPCheck::getAccountIDOrDie(); + if($level1['unlisted'] == 1 && (!$gs->isFriends($accountID, $level1['extID']) && $accountID != $level1['extID'])) break; } + if($gameVersion < 20) $level1['levelDesc'] = ExploitPatch::gd_escape(ExploitPatch::url_base64_decode($level1['levelDesc'])); + $lvlsmultistring[] = ["levelID" => $level1["levelID"], "stars" => $level1["starStars"], 'coins' => $level1["starCoins"]]; + $likes = $level1["likes"]; // - $level1["dislikes"]; // Yeah, my GDPS has dislikes separated + if(isset($gauntlet)) $lvlstring .= "44:$gauntlet:"; + $lvlstring .= "1:".$level1["levelID"].":2:".ExploitPatch::translit($level1["levelName"]).":5:".$level1["levelVersion"].":6:".$level1["userID"].":8:10:9:".$level1["starDifficulty"].":10:".$level1["downloads"].":12:".$level1["audioTrack"].":13:".$level1["gameVersion"].":14:".$likes.":17:".$level1["starDemon"].":43:".$level1["starDemonDiff"].":25:".$level1["starAuto"].":18:".$level1["starStars"].":19:".$level1["starFeatured"].":42:".$level1["starEpic"].":45:".$level1["objects"].":3:".ExploitPatch::translit($level1["levelDesc"]).":15:".$level1["levelLength"].":30:".$level1["original"].":31:".$level1['twoPlayer'].":37:".$level1["coins"].":38:".$level1["starCoins"].":39:".$level1["requestedStars"].":46:1:47:2:40:".$level1["isLDM"].":35:".$level1["songID"]."|"; + if($level1["songID"] != 0) { + $song = $gs->getSongString($level1); + if($song) $songsstring .= $song . "~:~"; + } + $userstring .= $gs->getUserString($level1)."|"; } $lvlstring = substr($lvlstring, 0, -1); $userstring = substr($userstring, 0, -1); $songsstring = substr($songsstring, 0, -3); echo $lvlstring."#".$userstring; -if($gameVersion > 18){ - echo "#".$songsstring; -} +if($gameVersion > 18) echo "#".$songsstring; echo "#".$totallvlcount.":".$offset.":10"; echo "#"; echo GenerateHash::genMulti($lvlsmultistring); -?> +?> \ No newline at end of file diff --git a/incl/levels/rateGJDemon.php b/incl/levels/rateGJDemon.php index f03d144cf..0090e50b3 100644 --- a/incl/levels/rateGJDemon.php +++ b/incl/levels/rateGJDemon.php @@ -1,7 +1,7 @@ getIDFromPost(); +$permState = $gs->checkPermission($accountID, "actionRateStars"); +if($permState) { + $difficulty = $gs->getDiffFromRating($rating); + $gs->changeDifficulty($accountID, $levelID, $difficulty["diff"], $difficulty["auto"], $difficulty["demon"]); +} +echo 1; \ No newline at end of file diff --git a/incl/levels/rateGJStars.php b/incl/levels/rateGJStars.php index 9d85d56e7..50f14b431 100644 --- a/incl/levels/rateGJStars.php +++ b/incl/levels/rateGJStars.php @@ -1,6 +1,6 @@ checkPermission($accountID, "actionRateStars"); -if($permState){ +if($permState) { $difficulty = $gs->getDiffFromStars($stars); - $gs->rateLevel($accountID, $levelID, 0, $difficulty["diff"], $difficulty["auto"], $difficulty["demon"]); + $gs->changeDifficulty($accountID, $levelID, $difficulty["diff"], $difficulty["auto"], $difficulty["demon"]); } echo 1; \ No newline at end of file diff --git a/incl/levels/reportGJLevel.php b/incl/levels/reportGJLevel.php index 407553dfe..664740487 100644 --- a/incl/levels/reportGJLevel.php +++ b/incl/levels/reportGJLevel.php @@ -1,7 +1,7 @@ getDiffFromStars($stars); - -if($gs->checkPermission($accountID, "actionRateStars")){ - $gs->rateLevel($accountID, $levelID, $stars, $difficulty["diff"], $difficulty["auto"], $difficulty["demon"]); +if($gs->checkPermission($accountID, "actionRateStars")) { $gs->featureLevel($accountID, $levelID, $feature); $gs->verifyCoinsLevel($accountID, $levelID, 1); - echo 1; -}else if($gs->checkPermission($accountID, "actionSuggestRating")){ + $gs->rateLevel($accountID, $levelID, $stars, $difficulty["diff"], $difficulty["auto"], $difficulty["demon"]); + exit('1'); +} elseif($gs->checkPermission($accountID, "actionSuggestRating")) { $gs->suggestLevel($accountID, $levelID, $difficulty["diff"], $stars, $feature, $difficulty["auto"], $difficulty["demon"]); - echo 1; -}else{ - echo -2; -} -?> + exit('1'); +} else exit('-2'); +?> \ No newline at end of file diff --git a/incl/levels/updateGJDesc.php b/incl/levels/updateGJDesc.php index 119c3eb0a..fbec47dff 100644 --- a/incl/levels/updateGJDesc.php +++ b/incl/levels/updateGJDesc.php @@ -1,26 +1,21 @@ substr_count($rawDesc, '')) { @@ -28,10 +23,11 @@ for ($i = 0; $i < $tags; $i++) { $rawDesc .= ''; } - $levelDesc = str_replace('+', '-', base64_encode($rawDesc)); - $levelDesc = str_replace('/', '_', $levelDesc); + $levelDesc = ExploitPatch::url_base64_encode($rawDesc); } } -$query = $db->prepare("UPDATE levels SET levelDesc=:levelDesc WHERE levelID=:levelID AND extID=:extID"); +$query = $db->prepare("UPDATE levels SET levelDesc = :levelDesc WHERE levelID = :levelID AND extID = :extID"); $query->execute([':levelID' => $levelID, ':extID' => $id, ':levelDesc' => $levelDesc]); +$gs->logAction($id, 21, $levelID, $levelDesc); echo 1; +?> \ No newline at end of file diff --git a/incl/levels/uploadGJLevel.php b/incl/levels/uploadGJLevel.php index 3ce2e2a7b..f936575fc 100644 --- a/incl/levels/uploadGJLevel.php +++ b/incl/levels/uploadGJLevel.php @@ -1,42 +1,35 @@ substr_count($rawDesc, '')) { + if($tags > substr_count($rawDesc, '')) { $tags = $tags - substr_count($rawDesc, ''); - for ($i = 0; $i < $tags; $i++) { + for($i = 0; $i < $tags; $i++) { $rawDesc .= ''; } - $levelDesc = str_replace('+', '-', base64_encode($rawDesc)); - $levelDesc = str_replace('/', '_', $levelDesc); } } +$levelDesc = ExploitPatch::url_base64_encode(ExploitPatch::rucharclean($rawDesc)); $levelVersion = ExploitPatch::remove($_POST["levelVersion"]); $levelLength = ExploitPatch::remove($_POST["levelLength"]); $audioTrack = ExploitPatch::remove($_POST["audioTrack"]); @@ -68,44 +61,52 @@ $sfxIDs = !empty($_POST["sfxIDs"]) ? ExploitPatch::numbercolon($_POST["sfxIDs"]) : ''; $ts = !empty($_POST["ts"]) ? ExploitPatch::number($_POST["ts"]) : 0; -if(isset($_POST["password"])){ - $password = ExploitPatch::remove($_POST["password"]); -}else{ - $password = 1; - if($gameVersion > 17){ - $password = 0; - } -} +if(isset($_POST["password"])) $password = $_POST["password"] != 0 ? ExploitPatch::remove($_POST["password"]) : 1; +else $password = $gameVersion > 21 ? 1 : 0; $id = $gs->getIDFromPost(); $hostname = $gs->getIP(); -$userID = $mainLib->getUserID($id, $userName); +$userID = $gs->getUserID($id, $userName); +$checkBan = $gs->getPersonBan($id, $userID, 2); +if($checkBan) exit("-1"); $uploadDate = time(); $query = $db->prepare("SELECT count(*) FROM levels WHERE uploadDate > :time AND (userID = :userID OR hostname = :ip)"); -$query->execute([':time' => $uploadDate - 60, ':userID' => $userID, ':ip' => $hostname]); -if($query->fetchColumn() > 0){ - exit("-1"); -} +$query->execute([':time' => $uploadDate - 15, ':userID' => $userID, ':ip' => $hostname]); +if($query->fetchColumn() > 0) exit("-1"); $query = $db->prepare("INSERT INTO levels (levelName, gameVersion, binaryVersion, userName, levelDesc, levelVersion, levelLength, audioTrack, auto, password, original, twoPlayer, songID, objects, coins, requestedStars, extraString, levelString, levelInfo, secret, uploadDate, userID, extID, updateDate, unlisted, hostname, isLDM, wt, wt2, unlisted2, settingsString, songIDs, sfxIDs, ts) VALUES (:levelName, :gameVersion, :binaryVersion, :userName, :levelDesc, :levelVersion, :levelLength, :audioTrack, :auto, :password, :original, :twoPlayer, :songID, :objects, :coins, :requestedStars, :extraString, :levelString, :levelInfo, :secret, :uploadDate, :userID, :id, :uploadDate, :unlisted, :hostname, :ldm, :wt, :wt2, :unlisted2, :settingsString, :songIDs, :sfxIDs, :ts)"); - -if($levelString != "" AND $levelName != ""){ - $querye=$db->prepare("SELECT levelID FROM levels WHERE levelName = :levelName AND userID = :userID"); +if($levelString != "" AND $levelName != "") { + $querye=$db->prepare("SELECT levelID, updateLocked FROM levels WHERE levelName = :levelName AND userID = :userID"); $querye->execute([':levelName' => $levelName, ':userID' => $userID]); - $levelID = $querye->fetchColumn(); + $level = $querye->fetch(); + $levelID = $level['levelID']; + if($level['updateLocked']) exit("-1"); $lvls = $querye->rowCount(); - if($lvls==1){ + if($lvls == 1) { + $query = $db->prepare("SELECT * FROM levels WHERE levelID = :levelID"); + $query->execute([":levelID"=> $levelID]); + $getLevelData = $query->fetch(); + $stars = $getLevelData['starStars']; + if(!$ratedLevelsUpdates && !in_array($levelID, $ratedLevelsUpdatesExceptions) && $stars > 0) exit("-1"); $query = $db->prepare("UPDATE levels SET levelName=:levelName, gameVersion=:gameVersion, binaryVersion=:binaryVersion, userName=:userName, levelDesc=:levelDesc, levelVersion=:levelVersion, levelLength=:levelLength, audioTrack=:audioTrack, auto=:auto, password=:password, original=:original, twoPlayer=:twoPlayer, songID=:songID, objects=:objects, coins=:coins, requestedStars=:requestedStars, extraString=:extraString, levelString=:levelString, levelInfo=:levelInfo, secret=:secret, updateDate=:uploadDate, unlisted=:unlisted, hostname=:hostname, isLDM=:ldm, wt=:wt, wt2=:wt2, unlisted2=:unlisted2, settingsString=:settingsString, songIDs=:songIDs, sfxIDs=:sfxIDs, ts=:ts WHERE levelName=:levelName AND extID=:id"); $query->execute([':levelName' => $levelName, ':gameVersion' => $gameVersion, ':binaryVersion' => $binaryVersion, ':userName' => $userName, ':levelDesc' => $levelDesc, ':levelVersion' => $levelVersion, ':levelLength' => $levelLength, ':audioTrack' => $audioTrack, ':auto' => $auto, ':password' => $password, ':original' => $original, ':twoPlayer' => $twoPlayer, ':songID' => $songID, ':objects' => $objects, ':coins' => $coins, ':requestedStars' => $requestedStars, ':extraString' => $extraString, ':levelString' => "", ':levelInfo' => $levelInfo, ':secret' => $secret, ':levelName' => $levelName, ':id' => $id, ':uploadDate' => $uploadDate, ':unlisted' => $unlisted, ':hostname' => $hostname, ':ldm' => $ldm, ':wt' => $wt, ':wt2' => $wt2, ':unlisted2' => $unlisted2, ':settingsString' => $settingsString, ':songIDs' => $songIDs, ':sfxIDs' => $sfxIDs, ':ts' => $ts]); - file_put_contents("../../data/levels/$levelID",$levelString); + file_put_contents("../../data/levels/$levelID", $levelString); echo $levelID; - }else{ + $gs->logAction($id, 23, $levelName, $levelDesc, $levelID); + $gs->sendLogsLevelChangeWebhook($levelID, $id, $getLevelData); + Automod::checkLevelsCount(); + if($automaticCron) Cron::updateSongsUsage($id, false); + } else { $query->execute([':levelName' => $levelName, ':gameVersion' => $gameVersion, ':binaryVersion' => $binaryVersion, ':userName' => $userName, ':levelDesc' => $levelDesc, ':levelVersion' => $levelVersion, ':levelLength' => $levelLength, ':audioTrack' => $audioTrack, ':auto' => $auto, ':password' => $password, ':original' => $original, ':twoPlayer' => $twoPlayer, ':songID' => $songID, ':objects' => $objects, ':coins' => $coins, ':requestedStars' => $requestedStars, ':extraString' => $extraString, ':levelString' => "", ':levelInfo' => $levelInfo, ':secret' => $secret, ':uploadDate' => $uploadDate, ':userID' => $userID, ':id' => $id, ':unlisted' => $unlisted, ':hostname' => $hostname, ':ldm' => $ldm, ':wt' => $wt, ':wt2' => $wt2, ':unlisted2' => $unlisted2, ':settingsString' => $settingsString, ':songIDs' => $songIDs, ':sfxIDs' => $sfxIDs, ':ts' => $ts]); $levelID = $db->lastInsertId(); - file_put_contents("../../data/levels/$levelID",$levelString); + file_put_contents("../../data/levels/$levelID", $levelString); echo $levelID; + $gs->logAction($id, 22, $levelName, $levelDesc, $levelID); + $gs->sendLogsLevelChangeWebhook($levelID, $id); + Automod::checkLevelsCount(); + if($automaticCron) Cron::updateSongsUsage($id, false); } -}else{ - echo -1; +} else { + exit('-1'); } ?> diff --git a/incl/lib/Captcha.php b/incl/lib/Captcha.php index 62c3560ca..f2abf1e67 100644 --- a/incl/lib/Captcha.php +++ b/incl/lib/Captcha.php @@ -1,26 +1,76 @@ "; - echo ""; + public static function displayCaptcha($returnOrEcho = false) { + require __DIR__ . "/../../config/security.php"; + if ($enableCaptcha) { + if($returnOrEcho) { + switch($captchaType) { + case 1: + return " + "; + break; + case 2: + return " + "; + break; + case 3: + return " + "; + break; + default: + return ''; + break; + } + } else { + switch($captchaType) { + case 1: + echo " + "; + break; + case 2: + echo " + "; + break; + case 3: + echo " + "; + break; + default: + break; + } + } } } public static function validateCaptcha() { - include __DIR__ . "/../../config/security.php"; - if(!$enableCaptcha) - return true; - + require __DIR__ . "/../../config/security.php"; + if(!$enableCaptcha) return true; + switch($captchaType) { + case 1: + if(isset($_GET['h-captcha-response'])) $_POST['h-captcha-response'] = $_GET['h-captcha-response']; + $url = "https://hcaptcha.com/siteverify"; + $req = isset($_POST['h-captcha-response']) ? $_POST['h-captcha-response'] : null; + break; + case 2: + if(isset($_GET['g-recaptcha-response'])) $_POST['g-recaptcha-response'] = $_GET['g-recaptcha-response']; + $url = "https://www.google.com/recaptcha/api/siteverify"; + $req = isset($_POST['g-recaptcha-response']) ? $_POST['g-recaptcha-response'] : null; + break; + case 3: + if(isset($_GET['cf-turnstile-response'])) $_POST['cf-turnstile-response'] = $_GET['cf-turnstile-response']; + $url = "https://challenges.cloudflare.com/turnstile/v0/siteverify"; + $req = isset($_POST['cf-turnstile-response']) ? $_POST['cf-turnstile-response'] : null; + break; + default: + return false; + break; + } $data = array( - 'secret' => $hCaptchaSecret, - 'response' => $_POST['h-captcha-response'] - ); + 'secret' => $CaptchaSecret, + 'response' => $req + ); $verify = curl_init(); - curl_setopt($verify, CURLOPT_URL, "https://hcaptcha.com/siteverify"); + curl_setopt($verify, CURLOPT_URL, $url); curl_setopt($verify, CURLOPT_POST, true); curl_setopt($verify, CURLOPT_POSTFIELDS, http_build_query($data)); curl_setopt($verify, CURLOPT_RETURNTRANSFER, true); @@ -29,5 +79,4 @@ public static function validateCaptcha() { $responseData = json_decode($response); return $responseData->success; } - } \ No newline at end of file diff --git a/incl/lib/GJPCheck.php b/incl/lib/GJPCheck.php index 0e44e1e1c..eae87abe5 100644 --- a/incl/lib/GJPCheck.php +++ b/incl/lib/GJPCheck.php @@ -1,59 +1,61 @@ getIP(); - $query = $db->prepare("SELECT count(*) FROM actions WHERE type = 16 AND value = :accountID AND value2 = :ip AND timestamp > :timestamp"); - $query->execute([':accountID' => $accountID, ':ip' => $ip, ':timestamp' => time() - 3600]); - if($query->fetchColumn() > 0){ - return 1; - } - } - $gjpdecode = str_replace("_","/",$gjp); - $gjpdecode = str_replace("-","+",$gjpdecode); - $gjpdecode = base64_decode($gjpdecode); - $gjpdecode = XORCipher::cipher($gjpdecode,37526); + $gjpdecode = XORCipher::cipher(ExploitPatch::url_base64_decode($gjp), 37526); $validationResult = GeneratePass::isValid($accountID, $gjpdecode); - if($validationResult == 1 AND $sessionGrants){ - $ip = $ml->getIP(); - $query = $db->prepare("INSERT INTO actions (type, value, value2, timestamp) VALUES (16, :accountID, :ip, :timestamp)"); - $query->execute([':accountID' => $accountID, ':ip' => $ip, ':timestamp' => time()]); - } return $validationResult; } - public static function validateGJPOrDie($gjp, $accountID){ - if(self::check($gjp, $accountID) != 1) - exit("-1"); + public static function validateGJPOrDie($gjp, $accountID, $dontDie = false) { + if(self::check($gjp, $accountID) != 1) { + if($dontDie) return false; + else exit('-1'); + } } - public static function validateGJP2OrDie($gjp2, $accountID){ - if(GeneratePass::isGJP2Valid($accountID, $gjp2) != 1) - exit("-1"); + public static function validateGJP2OrDie($gjp2, $accountID,$dontDie = false) { + if(GeneratePass::isGJP2Valid($accountID, $gjp2) != 1) { + if($dontDie) return false; + else exit('-1'); + } } /** - * Gets accountID and from the POST parameters and validates if the provided GJP matches + * Gets accountID and from the POST parameters and validates if the provided GJP/token matches * * @return The account id */ - public static function getAccountIDOrDie(){ - require_once "../lib/exploitPatch.php"; + public static function getAccountIDOrDie($dontDie = false) { + require_once __DIR__."/exploitPatch.php"; - if(empty($_POST['accountID'])) exit("-1"); + if(empty($_POST['accountID']) && empty($_POST['auth'])) { + if($dontDie) return false; + else exit('-1'); + } $accountID = ExploitPatch::remove($_POST["accountID"]); - if(!empty($_POST['gjp'])) self::validateGJPOrDie($_POST['gjp'], $accountID); - elseif(!empty($_POST['gjp2'])) self::validateGJP2OrDie($_POST['gjp2'], $accountID); - else exit("-1"); + if(!empty($_POST['gjp'])) self::validateGJPOrDie($_POST['gjp'], $accountID, $dontDie); + elseif(!empty($_POST['gjp2'])) self::validateGJP2OrDie($_POST['gjp2'], $accountID, $dontDie); + elseif(!empty($_POST['auth'])) { + $tokenAuth = GeneratePass::isValidToken($_POST['auth']); + if(!is_array($tokenAuth)) { + if($dontDie) return false; + else exit('-1'); + } + $accountID = $tokenAuth['accountID']; + } + else { + if($dontDie) return false; + else exit('-1'); + } return $accountID; } diff --git a/incl/lib/automod.php b/incl/lib/automod.php new file mode 100644 index 000000000..77b0d10b7 --- /dev/null +++ b/incl/lib/automod.php @@ -0,0 +1,638 @@ + $levelsYesterdayModified) { + $isWarned = self::getLastAutomodAction(1, true); + if(!$isWarned) { + self::logAutomodActions(1, $levelsYesterday, $levelsToday, $levelsYesterdayModified); + $gs->sendLevelsWarningWebhook($levelsYesterday, $levelsToday); + } + return false; + } + return true; + } + /* + self::logAutomodActions($type, $value1, $value2, $value3, $value4, $value5, $value6) + This private function logs any automod actions + $type — type of action (Number) + $value1 — first value of action (Mixed) + $value2 — second value of action (Mixed) + $value3 — third value of action (Mixed) + $value4 — fourth value of action (Mixed) + $value5 — fifth value of action (Mixed) + $value6 — sixth value of action (Mixed) + Return value: + ID of logged action + */ + private static function logAutomodActions($type, $value1 = '', $value2 = '', $value3 = '', $value4 = '', $value5 = '', $value6 = '') { + require __DIR__."/connection.php"; + $insertAction = $db->prepare('INSERT INTO automod (type, value1, value2, value3, value4, value5, value6, timestamp) VALUES (:type, :value1, :value2, :value3, :value4, :value5, :value6, :timestamp)'); + $insertAction->execute([':type' => $type, ':value1' => $value1, ':value2' => $value2, ':value3' => $value3, ':value4' => $value4, ':value5' => $value5, ':value6' => $value6, ':timestamp' => time()]); + return $db->lastInsertId(); + } + /* + self::getLastAutomodAction($type, $limitTime) + This private function gets last automod action from SQL + $type — type of action (Number) + $limitTime — should function return actions from limited time or all actions (Boolean) + true — limit action search by $levelsCheckPeriod from config/security.php + false — don't limit action search by time + Return value: + Array — array with action data + false — nothing found + */ + private static function getLastAutomodAction($type, $limitTime = false) { + require __DIR__."/connection.php"; + require __DIR__."/../../config/security.php"; + $getAction = $db->prepare('SELECT * FROM automod WHERE type = :type '.($limitTime ? 'AND timestamp > '.time().' - '.(int)$warningsPeriod : '').' ORDER BY timestamp DESC LIMIT 1'); + $getAction->execute([':type' => $type]); + return $getAction->fetch(); + } + /* + Automod::getAutomodActions($types) + This function returns all automod actions of $types + $types — array of types you want to see, all public types if empty (Array) + Return value: + Array — array of actions + false — nothing found + */ + public static function getAutomodActions($types = []) { + require __DIR__."/connection.php"; + if(!is_array($types) || empty($types)) $types = self::getPublicActionTypes(); + $getActions = $db->prepare('SELECT * FROM automod WHERE type IN ('.implode(',', $types).') ORDER BY timestamp DESC'); + $getActions->execute(); + return $getActions->fetchAll(); + } + /* + Automod::changeAutomodAction($actionID, $isResolved, $value1, $value2, $value3, $value4, $value5, $value6) + This function changes automod action values + $actionID — ID of action you want to change (Number) + $isResolved — is action resolved or not (Number) + 1 — action is resolved + 0 — action is not resolved + $value1 — change action value 1 (Mixed) + $value2 — change action value 2 (Mixed) + $value3 — change action value 3 (Mixed) + $value4 — change action value 4 (Mixed) + $value5 — change action value 5 (Mixed) + $value6 — change action value 6 (Mixed) + If $value is false, doesn't change value + Return value: + true — action changed successfully + false — something went wrong when changing value + */ + public static function changeAutomodAction($actionID, $isResolved, $value1 = false, $value2 = false, $value3 = false, $value4 = false, $value5 = false, $value6 = false) { + require __DIR__."/connection.php"; + $getAction = $db->prepare('SELECT * FROM automod WHERE ID = :ID'); + $getAction->execute([':ID' => $actionID]); + $getAction = $getAction->fetch(); + if(!$getAction) return false; + $changeAction = $db->prepare('UPDATE automod SET value1 = :value1, value2 = :value2, value3 = :value3, value4 = :value4, value5 = :value5, value6 = :value6, resolved = :isResolved WHERE ID = :ID'); + return $changeAction->execute([':ID' => $actionID, ':isResolved' => $isResolved, ':value1' => ($value1 === false ? $getAction['value1'] : $value1), ':value2' => ($value2 === false ? $getAction['value2'] : $value2), ':value3' => ($value3 === false ? $getAction['value3'] : $value3), ':value4' => ($value4 === false ? $getAction['value4'] : $value4), ':value5' => ($value5 === false ? $getAction['value5'] : $value5), ':value6' => ($value6 === false ? $getAction['value6'] : $value6)]); + } + /* + Automod::getAutomodActionByID($actionID) + This function returns action values by action ID + $actionID — action ID you want to find (Number) + Return value: + Array — array of action values + false — nothing found + */ + public static function getAutomodActionByID($actionID) { + require __DIR__."/connection.php"; + $getAction = $db->prepare('SELECT * FROM automod WHERE ID = :ID'); + $getAction->execute([':ID' => $actionID]); + return $getAction->fetch(); + } + /* + Automod::isLevelsDisabled() + This function checks if levels uploading is disabled by automod + Return value: + true — levels uploading is disabled + false — levels uploading is enabled + */ + public static function isLevelsDisabled($disableType = 0) { + $actionTypes = self::getLevelsDisableTypes(); + $isDisabled = self::getLastAutomodAction($actionTypes[$disableType]); + if(!$isDisabled['resolved']) { + $disableExpires = $isDisabled['value1'] ?? 0; + if($disableExpires <= time()) { + self::changeAutomodAction($isDisabled['ID'], 1); + return false; + } + return true; + } + return false; + } + /* + Automod::changeLevelsAutomodState($disableType, $isDisable, $expires) + This function change levels automod state + $disableType — type of levels disabling (Number) + $isDisable — disabling or enabling (Boolean) + true — disable state + false — enable state + $expires — when disabling will expire, required if disabling (Number) + Return value: void + */ + public static function changeLevelsAutomodState($disableType, $isDisable, $expires = 0) { + $actionTypes = self::getLevelsDisableTypes(); + $action = self::getLastAutomodAction($actionTypes[$disableType]); + if(!$action) self::logAutomodActions($actionTypes[$disableType], $expires); + elseif($isDisable) { + if($action['resolved']) self::logAutomodActions($actionTypes[$disableType], $expires); + else self::changeAutomodAction($action['ID'], 0, $expires); + } else self::changeAutomodAction($action['ID'], 1, false, time()); + } + /* + self::getPublicActionTypes() + This private function returns all types of public automod actions + Return value: + Array — array of public action types + */ + private static function getPublicActionTypes() { + return [1, 5, 10, 11, 12, 13, 14, 15]; + } + /* + Automod::getLevelsCountPerDay() + This function returns levels count yesterday and today + Return value: + Array — levels yesterday and today + */ + public static function getLevelsCountPerDay() { + require __DIR__."/connection.php"; + require_once __DIR__."/mainLib.php"; + require __DIR__."/../../config/security.php"; + $gs = new mainLib(); + $levelsPeriod = time() - ($levelsCheckPeriod * 2); + $levelsCount = $db->prepare("SELECT count(*) FROM levels WHERE uploadDate >= :time AND uploadDate <= :time2 ORDER BY uploadDate DESC"); + $levelsCount->execute([':time' => $levelsPeriod, ':time2' => $levelsPeriod + $levelsCheckPeriod]); + $levelsYesterday = $levelsCount->fetchColumn(); + + $levelsPeriod = $levelsPeriod + $levelsCheckPeriod; + $levelsCount = $db->prepare("SELECT count(*) FROM levels WHERE uploadDate >= :time AND uploadDate <= :time2 ORDER BY uploadDate DESC"); + $levelsCount->execute([':time' => $levelsPeriod, ':time2' => $levelsPeriod + $levelsCheckPeriod]); + $levelsToday = $levelsCount->fetchColumn(); + return ['yesterday' => $levelsYesterday, 'today' => $levelsToday]; + } + /* + self::getLevelsDisableTypes() + This private function returns all level disables types + Return value: + Array — array of level disables types + */ + private static function getLevelsDisableTypes() { + return [2, 3, 4]; + } + /* + Automod::getLevelsDisableStates() + This function returns expire time of all level disables types + Return value: + Array — array of expire time of all level disables types + */ + public static function getLevelsDisableStates() { + $disableTypes = self::getLevelsDisableTypes(); + $levelsUploadingTime = $levelsCommentingTime = $levelsLeaderboardSubmitsTime = ''; + $levelsUploadingAction = self::getLastAutomodAction($disableTypes[0]); + if($levelsUploadingAction['value1'] <= time()) { + self::changeAutomodAction($levelsUploadingAction['ID'], 1); + $levelsUploadingAction['resolved'] = 1; + } + if(is_array($levelsUploadingAction) && !$levelsUploadingAction['resolved']) $levelsUploadingTime = date('Y-m-d\TH:i:s', $levelsUploadingAction['value1']); + $levelsCommentingAction = self::getLastAutomodAction($disableTypes[1]); + if($levelsCommentingAction['value1'] <= time()) { + self::changeAutomodAction($levelsCommentingAction['ID'], 1); + $levelsCommentingAction['resolved'] = 1; + } + if(is_array($levelsCommentingAction) && !$levelsCommentingAction['resolved']) $levelsCommentingTime = date('Y-m-d\TH:i:s', $levelsCommentingAction['value1']); + $levelsLeaderboardSubmitsAction = self::getLastAutomodAction($disableTypes[2]); + if($levelsLeaderboardSubmitsAction['value1'] <= time()) { + self::changeAutomodAction($levelsLeaderboardSubmitsAction['ID'], 1); + $levelsLeaderboardSubmitsAction['resolved'] = 1; + } + if(is_array($levelsLeaderboardSubmitsAction) && !$levelsLeaderboardSubmitsAction['resolved']) $levelsLeaderboardSubmitsTime = date('Y-m-d\TH:i:s', $levelsLeaderboardSubmitsAction['value1']); + return [$levelsUploadingTime, $levelsCommentingTime, $levelsLeaderboardSubmitsTime]; + } + /* + Automod::getAccountsCountPerDay() + This function returns accounts count yesterday and today + Return value: + Array — accounts yesterday and today + */ + public static function getAccountsCountPerDay() { + require __DIR__."/connection.php"; + require_once __DIR__."/mainLib.php"; + require __DIR__."/../../config/security.php"; + $gs = new mainLib(); + $accountsPeriod = time() - ($accountsCheckPeriod * 2); + $accountsCount = $db->prepare("SELECT count(*) FROM accounts WHERE registerDate >= :time AND registerDate <= :time2 ORDER BY registerDate DESC"); + $accountsCount->execute([':time' => $accountsPeriod, ':time2' => $accountsPeriod + $accountsCheckPeriod]); + $accountsYesterday = $accountsCount->fetchColumn(); + + $accountsPeriod = $accountsPeriod + $accountsCheckPeriod; + $accountsCount = $db->prepare("SELECT count(*) FROM accounts WHERE registerDate >= :time AND registerDate <= :time2 ORDER BY registerDate DESC"); + $accountsCount->execute([':time' => $accountsPeriod, ':time2' => $accountsPeriod + $accountsCheckPeriod]); + $accountsToday = $accountsCount->fetchColumn(); + return ['yesterday' => $accountsYesterday, 'today' => $accountsToday]; + } + /* + Automod::checkAccountsCount() + This function checks accounts register count to see if there is too many accounts registered in small time + Return value: + true — everything is normal, nothing to be scared of + false — high accounts amount detected! possible raid + */ + public static function checkAccountsCount() { + require __DIR__."/connection.php"; + require_once __DIR__."/mainLib.php"; + require __DIR__."/../../config/security.php"; + $gs = new mainLib(); + $accountsCount = self::getAccountsCountPerDay(); + $accountsYesterday = $levelsCount['yesterday']; + $accountsToday = $levelsCount['today']; + + $accountsYesterdayModified = $accountsYesterday * $accountsCountModifier + 3; + if($accountsToday > $accountsYesterdayModified) { + $isWarned = self::getLastAutomodAction(5, true); + if(!$isWarned) { + self::logAutomodActions(5, $accountsYesterday, $accountsToday, $accountsYesterdayModified); + $gs->sendAccountsWarningWebhook($accountsYesterday, $accountsToday); + } + return false; + } + return true; + } + /* + Automod::getAutomodTypes() + This function returns automod types (levels, accounts, etc) according to their action type + Return value: + Array — array with automod types + */ + public static function getAutomodTypes() { + return [1 => 1, 5 => 2, 10 => 3, 11 => 4, 12 => 5, 13 => 6, 14 => 7, 15 => 8]; + } + /* + self::getAccountsDisableTypes() + This private function returns all account disables types + Return value: + Array — array of account disables types + */ + private static function getAccountsDisableTypes() { + return [6, 7, 8, 9]; + } + /* + Automod::getAccountsDisableStates() + This function returns expire time of all level disables types + Return value: + Array — array of expire time of all level disables types + */ + public static function getAccountsDisableStates() { + $disableTypes = self::getAccountsDisableTypes(); + $accountRegisteringTime = $accountPostingTime = $accountStatsUpdatingTime = $accountMessagingTime = ''; + $accountRegisteringAction = self::getLastAutomodAction($disableTypes[0]); + if($accountRegisteringAction['value1'] <= time()) { + self::changeAutomodAction($accountRegisteringAction['ID'], 1); + $accountRegisteringAction['resolved'] = 1; + } + if(is_array($accountRegisteringAction) && !$accountRegisteringAction['resolved']) $accountRegisteringTime = date('Y-m-d\TH:i:s', $accountRegisteringAction['value1']); + $accountPostingAction = self::getLastAutomodAction($disableTypes[1]); + if($accountPostingAction['value1'] <= time()) { + self::changeAutomodAction($accountPostingAction['ID'], 1); + $accountPostingAction['resolved'] = 1; + } + if(is_array($accountPostingAction) && !$accountPostingAction['resolved']) $accountPostingTime = date('Y-m-d\TH:i:s', $accountPostingAction['value1']); + $accountStatsUpdatingAction = self::getLastAutomodAction($disableTypes[2]); + if($accountStatsUpdatingAction['value1'] <= time()) { + self::changeAutomodAction($accountStatsUpdatingAction['ID'], 1); + $accountStatsUpdatingAction['resolved'] = 1; + } + if(is_array($accountStatsUpdatingAction) && !$accountStatsUpdatingAction['resolved']) $accountStatsUpdatingTime = date('Y-m-d\TH:i:s', $accountStatsUpdatingAction['value1']); + $accountMessagingAction = self::getLastAutomodAction($disableTypes[3]); + if($accountMessagingAction['value1'] <= time()) { + self::changeAutomodAction($accountMessagingAction['ID'], 1); + $accountMessagingAction['resolved'] = 1; + } + if(is_array($accountMessagingAction) && !$accountMessagingAction['resolved']) $accountMessagingTime = date('Y-m-d\TH:i:s', $accountMessagingAction['value1']); + return [$accountRegisteringTime, $accountPostingTime, $accountStatsUpdatingTime, $accountMessagingTime]; + } + /* + Automod::changeAccountsAutomodState($disableType, $isDisable, $expires) + This function change accounts automod state + $disableType — type of accounts disabling (Number) + $isDisable — disabling or enabling (Boolean) + true — disable state + false — enable state + $expires — when disabling will expire, required if disabling (Number) + Return value: void + */ + public static function changeAccountsAutomodState($disableType, $isDisable, $expires = 0) { + $actionTypes = self::getAccountsDisableTypes(); + $action = self::getLastAutomodAction($actionTypes[$disableType]); + if(!$action) self::logAutomodActions($actionTypes[$disableType], $expires); + elseif($isDisable) { + if($action['resolved']) self::logAutomodActions($actionTypes[$disableType], $expires); + else self::changeAutomodAction($action['ID'], 0, $expires); + } else self::changeAutomodAction($action['ID'], 1, false, time()); + } + /* + Automod::isAccountsDisabled() + This function checks if levels uploading is disabled by automod + Return value: + true — levels uploading is disabled + false — levels uploading is enabled + */ + public static function isAccountsDisabled($disableType = 0) { + $actionTypes = self::getAccountsDisableTypes(); + $isDisabled = self::getLastAutomodAction($actionTypes[$disableType]); + if(!$isDisabled['resolved']) { + $disableExpires = $isDisabled['value1'] ?? 0; + if($disableExpires <= time()) { + self::changeAutomodAction($isDisabled['ID'], 1); + return false; + } + return true; + } + return false; + } + /* + self::check_comments_similarity($str1, $str2) + This private function checks similarity of 2 strings + $str1 — string 1 (String) + $str2 — string 2 (String) + Return value: + Number — similarity of strings + Taken from https://www.php.net/manual/ru/function.similar-text.php#118799 + */ + private static function check_comments_similarity($str1, $str2) { + $len1 = strlen($str1); + $len2 = strlen($str2); + $max = max($len1, $len2); + $similarity = $i = $j = 0; + while(($i < $len1) && isset($str2[$j])) { + if($str1[$i] == $str2[$j]) { + $similarity++; + $i++; + $j++; + } elseif($len1 < $len2) { + $len1++; + $j++; + } elseif($len1 > $len2) { + $i++; + $len1--; + } else { + $i++; + $j++; + } + } + return round($similarity / $max, 2); + } + /* + Automod::similarity($str1, $str2) + This function checks similarity of 2 strings 4 times with different algorithms and returns greatest value + $str1 — string 1 (String) + $str2 — string 2 (String) + Return value: + Number — similarity of strings + https://gcs.icu/WTFIcons/checking_speed.png + */ + public static function similarity($str1, $str2) { + $check1 = self::check_comments_similarity($str1, $str2); + $check2 = self::check_comments_similarity($str2, $str1); + similar_text($str1, $str2, $perc); + $check3 = round($perc / 100, 2); + similar_text($str2, $str1, $perc); + $check4 = round($perc / 100, 2); + $biggestOne = [$check1, $check2, $check3, $check4]; + rsort($biggestOne); + return $biggestOne[0]; + } + /* + Automod::checkCommentsSpamming($userID) + This function checks last comments for spamming + $userID — user ID of latest comment author (Number) + Return value: + true — everything is good, no spamming + false — spamming detected! + */ + public static function checkCommentsSpamming($userID) { + require __DIR__."/connection.php"; + require_once __DIR__."/mainLib.php"; + require_once __DIR__."/exploitPatch.php"; + require __DIR__."/../../config/security.php"; + $gs = new mainLib(); + $returnValue = true; + $comments = $db->prepare('SELECT comment, userID FROM comments WHERE timestamp > :time ORDER BY timestamp DESC'); + $comments->execute([':time' => time() - $commentsCheckPeriod]); + $comments = $comments->fetchAll(); + $commentsCount = count($comments); + $similarity = 0; + $x = 1; + $similarCommentsCount = 0; + $similarCommentsAuthors = []; + foreach($comments AS &$comment) { + if(!isset($comments[$x])) break; + $comment1 = ExploitPatch::prepare_for_checking(ExploitPatch::url_base64_decode($comment['comment'])); + $comment2 = ExploitPatch::prepare_for_checking(ExploitPatch::url_base64_decode($comments[$x]['comment'])); + $sim = self::similarity($comment1, $comment2); + if($sim > 0.5) { + $similarCommentsAuthors[] = $comment['userID']; + $similarCommentsCount++; + } + $similarity += $sim; + $x++; + } + if($similarity > $commentsCount / 3 && $commentsCount > 5) { + $isWarned = self::getLastAutomodAction(10, true); + if(!$isWarned) { + $similarCommentsAuthors = array_unique($similarCommentsAuthors); + self::logAutomodActions(10, $similarCommentsCount, $similarity, $commentsCount, implode(', ', $similarCommentsAuthors)); + $gs->sendCommentsSpammingWarningWebhook($similarCommentsCount, $similarCommentsAuthors); + } + $returnValue = false; + } + + $comments = $db->prepare('SELECT comment FROM comments WHERE timestamp > :time AND userID = :userID ORDER BY timestamp DESC'); + $comments->execute([':time' => time() - $commentsCheckPeriod, ':userID' => $userID]); + $comments = $comments->fetchAll(); + $commentsCount = count($comments); + $similarity = 0; + $x = 1; + $similarCommentsCount = 0; + foreach($comments AS &$comment) { + if(!isset($comments[$x])) break; + $comment1 = ExploitPatch::prepare_for_checking(ExploitPatch::url_base64_decode($comment['comment'])); + $comment2 = ExploitPatch::prepare_for_checking(ExploitPatch::url_base64_decode($comments[$x]['comment'])); + $sim = self::similarity($comment1, $comment2); + if($sim > 0.5) $similarCommentsCount++; + $similarity += $sim; + $x++; + } + if($similarity > $commentsCount / 3 && $commentsCount > 3) { + $isWarned = self::getLastAutomodAction(11, true); + if(!$isWarned) { + self::logAutomodActions(11, $similarCommentsCount, $similarity, $commentsCount, $userID); + $gs->sendCommentsSpammerWarningWebhook($similarCommentsCount, $userID); + } + $returnValue = false; + } + return $returnValue; + } + /* + Automod::checkAccountPostsSpamming($userID) + This function checks last account posts for spamming + $userID — user ID of latest post author (Number) + Return value: + true — everything is good, no spamming + false — spamming detected! + */ + public static function checkAccountPostsSpamming($userID) { + require __DIR__."/connection.php"; + require_once __DIR__."/mainLib.php"; + require_once __DIR__."/exploitPatch.php"; + require __DIR__."/../../config/security.php"; + $gs = new mainLib(); + $returnValue = true; + $comments = $db->prepare('SELECT comment, userID FROM acccomments WHERE timestamp > :time ORDER BY timestamp DESC'); + $comments->execute([':time' => time() - $commentsCheckPeriod]); + $comments = $comments->fetchAll(); + $commentsCount = count($comments); + $similarity = 0; + $x = 1; + $similarCommentsCount = 0; + $similarCommentsAuthors = []; + foreach($comments AS &$comment) { + if(!isset($comments[$x])) break; + $comment1 = ExploitPatch::prepare_for_checking(ExploitPatch::url_base64_decode($comment['comment'])); + $comment2 = ExploitPatch::prepare_for_checking(ExploitPatch::url_base64_decode($comments[$x]['comment'])); + $sim = self::similarity($comment1, $comment2); + if($sim > 0.5) { + $similarCommentsAuthors[] = $comment['userID']; + $similarCommentsCount++; + } + $similarity += $sim; + $x++; + } + if($similarity > $commentsCount / 3 && $commentsCount > 5) { + $isWarned = self::getLastAutomodAction(12, true); + if(!$isWarned) { + $similarCommentsAuthors = array_unique($similarCommentsAuthors); + self::logAutomodActions(12, $similarCommentsCount, $similarity, $commentsCount, implode(', ', $similarCommentsAuthors)); + $gs->sendAccountPostsSpammingWarningWebhook($similarCommentsCount, $similarCommentsAuthors); + } + $returnValue = false; + } + + $comments = $db->prepare('SELECT comment FROM acccomments WHERE timestamp > :time AND userID = :userID ORDER BY timestamp DESC'); + $comments->execute([':time' => time() - $commentsCheckPeriod, ':userID' => $userID]); + $comments = $comments->fetchAll(); + $commentsCount = count($comments); + $similarity = 0; + $x = 1; + $similarCommentsCount = 0; + foreach($comments AS &$comment) { + if(!isset($comments[$x])) break; + $comment1 = ExploitPatch::prepare_for_checking(ExploitPatch::url_base64_decode($comment['comment'])); + $comment2 = ExploitPatch::prepare_for_checking(ExploitPatch::url_base64_decode($comments[$x]['comment'])); + $sim = self::similarity($comment1, $comment2); + if($sim > 0.5) $similarCommentsCount++; + $similarity += $sim; + $x++; + } + if($similarity > $commentsCount / 3 && $commentsCount > 3) { + $isWarned = self::getLastAutomodAction(13, true); + if(!$isWarned) { + self::logAutomodActions(13, $similarCommentsCount, $similarity, $commentsCount, $userID); + $gs->sendAccountPostsSpammerWarningWebhook($similarCommentsCount, $userID); + } + $returnValue = false; + } + return $returnValue; + } + /* + Automod::checkRepliesSpamming($accountID) + This function checks last replies for spamming + $userID — account ID of latest reply author (Number) + Return value: + true — everything is good, no spamming + false — spamming detected! + */ + public static function checkRepliesSpamming($accountID) { + require __DIR__."/connection.php"; + require_once __DIR__."/mainLib.php"; + require_once __DIR__."/exploitPatch.php"; + require __DIR__."/../../config/security.php"; + $gs = new mainLib(); + $returnValue = true; + $comments = $db->prepare('SELECT body, accountID FROM replies WHERE timestamp > :time ORDER BY timestamp DESC'); + $comments->execute([':time' => time() - $commentsCheckPeriod]); + $comments = $comments->fetchAll(); + $commentsCount = count($comments); + $similarity = 0; + $x = 1; + $similarCommentsCount = 0; + $similarCommentsAuthors = []; + foreach($comments AS &$comment) { + if(!isset($comments[$x])) break; + $comment1 = ExploitPatch::prepare_for_checking(base64_decode($comment['body'])); + $comment2 = ExploitPatch::prepare_for_checking(base64_decode($comments[$x]['body'])); + $sim = self::similarity($comment1, $comment2); + if($sim > 0.5) { + $similarCommentsAuthors[] = $comment['accountID']; + $similarCommentsCount++; + } + $similarity += $sim; + $x++; + } + if($similarity > $commentsCount / 3 && $commentsCount > 5) { + $isWarned = self::getLastAutomodAction(14, true); + if(!$isWarned) { + $similarCommentsAuthors = array_unique($similarCommentsAuthors); + self::logAutomodActions(14, $similarCommentsCount, $similarity, $commentsCount, implode(', ', $similarCommentsAuthors)); + $gs->sendRepliesSpammingWarningWebhook($similarCommentsCount, $similarCommentsAuthors); + } + $returnValue = false; + } + + $comments = $db->prepare('SELECT body FROM replies WHERE timestamp > :time AND accountID = :accountID ORDER BY timestamp DESC'); + $comments->execute([':time' => time() - $commentsCheckPeriod, ':accountID' => $accountID]); + $comments = $comments->fetchAll(); + $commentsCount = count($comments); + $similarity = 0; + $x = 1; + $similarCommentsCount = 0; + foreach($comments AS &$comment) { + if(!isset($comments[$x])) break; + $comment1 = ExploitPatch::prepare_for_checking(base64_decode($comment['body'])); + $comment2 = ExploitPatch::prepare_for_checking(base64_decode($comments[$x]['body'])); + $sim = self::similarity($comment1, $comment2); + if($sim > 0.5) $similarCommentsCount++; + $similarity += $sim; + $x++; + } + if($similarity > $commentsCount / 3 && $commentsCount > 3) { + $isWarned = self::getLastAutomodAction(15, true); + if(!$isWarned) { + self::logAutomodActions(15, $similarCommentsCount, $similarity, $commentsCount, $accountID); + $gs->sendRepliesSpammerWarningWebhook($similarCommentsCount, $accountID); + } + $returnValue = false; + } + return $returnValue; + } +} +?> \ No newline at end of file diff --git a/incl/lib/commands.php b/incl/lib/commands.php index ea3e68f44..fd74a6fee 100644 --- a/incl/lib/commands.php +++ b/incl/lib/commands.php @@ -1,256 +1,452 @@ checkPermission($accountID, "command".$commandInPerms."All") OR ($targetExtID == $accountID AND $gs->checkPermission($accountID, "command".$commandInPerms."Own"))))){ - return true; - } + if($gs->checkPermission($accountID, "command".$commandInPerms."All") OR ($targetExtID == $accountID AND $gs->checkPermission($accountID, "command".$commandInPerms."Own"))) return true; return false; } public static function doCommands($accountID, $comment, $levelID) { - if(!is_numeric($accountID)) return false; + if(!is_numeric($accountID) || !is_numeric($levelID) || substr($comment, 0, 1) != '!') return false; if($levelID < 0) return self::doListCommands($accountID, $comment, $levelID); - include dirname(__FILE__)."/../lib/connection.php"; - require_once "../lib/exploitPatch.php"; - require_once "../lib/mainLib.php"; + require __DIR__."/connection.php"; + require __DIR__."/../../config/misc.php"; + require_once __DIR__."/exploitPatch.php"; + require_once __DIR__."/mainLib.php"; + require_once __DIR__."/cron.php"; $gs = new mainLib(); $commentarray = explode(' ', $comment); $uploadDate = time(); - //LEVELINFO - $query2 = $db->prepare("SELECT extID FROM levels WHERE levelID = :id"); - $query2->execute([':id' => $levelID]); + $query2 = $db->prepare("SELECT extID FROM levels WHERE levelID = :levelID"); + $query2->execute([':levelID' => $levelID]); $targetExtID = $query2->fetchColumn(); - //ADMIN COMMANDS - if(substr($comment,0,5) == '!rate' AND $gs->checkPermission($accountID, "commandRate")){ - $starStars = $commentarray[2]; - if($starStars == ""){ - $starStars = 0; - } - $starCoins = $commentarray[3]; - $starFeatured = $commentarray[4]; - $diffArray = $gs->getDiffFromName($commentarray[1]); - $starDemon = $diffArray[1]; - $starAuto = $diffArray[2]; - $starDifficulty = $diffArray[0]; - $query = $db->prepare("UPDATE levels SET starStars=:starStars, starDifficulty=:starDifficulty, starDemon=:starDemon, starAuto=:starAuto, rateDate=:timestamp WHERE levelID=:levelID"); - $query->execute([':starStars' => $starStars, ':starDifficulty' => $starDifficulty, ':starDemon' => $starDemon, ':starAuto' => $starAuto, ':timestamp' => $uploadDate, ':levelID' => $levelID]); - $query = $db->prepare("INSERT INTO modactions (type, value, value2, value3, timestamp, account) VALUES ('1', :value, :value2, :levelID, :timestamp, :id)"); - $query->execute([':value' => $commentarray[1], ':timestamp' => $uploadDate, ':id' => $accountID, ':value2' => $starStars, ':levelID' => $levelID]); - if($starFeatured != ""){ - $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('2', :value, :levelID, :timestamp, :id)"); - $query->execute([':value' => $starFeatured, ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); - $query = $db->prepare("UPDATE levels SET starFeatured=:starFeatured WHERE levelID=:levelID"); - $query->execute([':starFeatured' => $starFeatured, ':levelID' => $levelID]); - } - if($starCoins != ""){ + $getLevelData = $db->prepare("SELECT * FROM levels WHERE levelID = :levelID"); + $getLevelData->execute([':levelID' => $levelID]); + $getLevelData = $getLevelData->fetch(); + switch($commentarray[0]) { + case '!r': + case '!rate': + if(!$gs->checkPermission($accountID, "commandRate")) return false; + $starStars = ExploitPatch::number($commentarray[2]); + if(!is_numeric($starStars)) $starStars = 0; + if($starStars == 0) return 'Please use !unrate.'; + $starCoins = ExploitPatch::number($commentarray[3]); + $starFeatured = ExploitPatch::number($commentarray[4]); + if(!is_numeric($starFeatured)) $starFeatured = 0; + $diffArray = $gs->getDiffFromName(ExploitPatch::charclean($commentarray[1])); + $starDemon = $diffArray[1]; + $starAuto = $diffArray[2]; + $starDifficulty = $diffArray[0]; + $diffic = $gs->getDiffFromStars($starStars); + if($diffic["demon"] == 1) $diffic = 'Demon'; + elseif($diffic["auto"] == 1) $diffic = 'Auto'; + else $diffic = $diffic["name"]; + $query = $db->prepare("UPDATE levels SET starStars = :starStars, starDifficulty = :starDifficulty, starDemon = :starDemon, starAuto = :starAuto, rateDate = :timestamp WHERE levelID = :levelID"); + $query->execute([':starStars' => $starStars, ':starDifficulty' => $starDifficulty, ':starDemon' => $starDemon, ':starAuto' => $starAuto, ':timestamp' => $uploadDate, ':levelID' => $levelID]); + $query = $db->prepare("INSERT INTO modactions (type, value, value2, value3, timestamp, account) VALUES ('1', :value, :value2, :levelID, :timestamp, :id)"); + $query->execute([':value' => $commentarray[1], ':timestamp' => $uploadDate, ':id' => $accountID, ':value2' => $starStars, ':levelID' => $levelID]); + if(!empty($starFeatured)) { + if($starFeatured > 1) { + $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('4', :value, :levelID, :timestamp, :id)"); + $query->execute([':value' => $starFeatured - 1, ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); + $query = $db->prepare("UPDATE levels SET starEpic = :starEpic WHERE levelID = :levelID"); + $query->execute([':starEpic' => $starFeatured - 1, ':levelID' => $levelID]); + } elseif($starFeatured == 1) { + $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('2', :value, :levelID, :timestamp, :id)"); + $query->execute([':value' => 1, ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); + $query = $db->prepare("SELECT starFeatured FROM levels WHERE levelID=:levelID ORDER BY starFeatured DESC LIMIT 1"); + $query->execute([':levelID' => $levelID]); + $featuredID = $query->fetchColumn(); + if(!$featuredID) { + $query = $db->prepare("SELECT starFeatured FROM levels ORDER BY starFeatured DESC LIMIT 1"); + $query->execute(); + $featuredID = $query->fetchColumn() + 1; + } + $query = $db->prepare("UPDATE levels SET starFeatured=:starFeatured WHERE levelID=:levelID"); + $query->execute([':starFeatured' => $featuredID + 1, ':levelID' => $levelID]); + } + } else $starFeatured = 0; + if(!empty($starCoins)) { + if($starCoins > 1 OR $starCoins < 0) $starCoins = 1; + $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('3', :value, :levelID, :timestamp, :id)"); + $query->execute([':value' => $starCoins, ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); + $query = $db->prepare("UPDATE levels SET starCoins=:starCoins WHERE levelID=:levelID"); + $query->execute([':starCoins' => $starCoins, ':levelID' => $levelID]); + } + $gs->sendRateWebhook($accountID, $levelID); + $gs->sendLogsLevelChangeWebhook($levelID, $accountID, $getLevelData); + if($automaticCron) Cron::updateCreatorPoints($accountID, false); + return 'You successfully rated '.$gs->getLevelName($levelID).' as '.$diffic.', '.$starStars.' star'.($starStars == 1 ? '' : 's').'!'; + break; + case '!unr': + case '!unrate': + if(!$gs->checkPermission($accountID, "commandRate")) return false; + $query = $db->prepare("UPDATE levels SET starStars = 0, starDemon = 0, rateDate = :timestamp, starFeatured = 0, starEpic = 0, starCoins = 0 WHERE levelID = :levelID"); + $query->execute([':timestamp' => $uploadDate, ':levelID' => $levelID]); + $query = $db->prepare("INSERT INTO modactions (type, value, value2, value3, timestamp, account) VALUES ('1', :value, :value2, :levelID, :timestamp, :id)"); + $query->execute([':value' => 0, ':timestamp' => $uploadDate, ':id' => $accountID, ':value2' => 0, ':levelID' => $levelID]); + $levelDiff = $gs->getLevelDiff($levelID); + $gs->sendRateWebhook($accountID, $levelID); + $gs->sendLogsLevelChangeWebhook($levelID, $accountID, $getLevelData); + if($automaticCron) Cron::updateCreatorPoints($accountID, false); + return 'You successfully unrated '.$gs->getLevelName($levelID).'!'; + break; + case '!f': + case '!feature': + case '!epic': + case '!legendary': + case '!mythic': + case '!unfeature': + case '!unepic': + case '!unlegendary': + case '!unmythic': + if(!isset($commentarray[1])) { + $starArray = ['!f' => 1, '!feature' => 1, '!epic' => 2, '!legendary' => 3, '!mythic' => 4, '!unfeature' => 0, '!unepic' => 0, '!unlegendary' => 0, '!unmythic' => 0]; + if($starArray[$commentarray[0]] > 1) { + if(!$gs->checkPermission($accountID, "commandEpic")) return false; + $column = 'starEpic'; + $starFeatured = $starArray[$commentarray[0]] - 1; + $returnTextArray = ['!epic' => 'epiced %1$s!', '!legendary' => 'set %1$s as a legendary level!', '!mythic' => 'set %1$s as a mythic level!']; + $returnText = 'You successfully '.sprintf($returnTextArray[$commentarray[0]], $gs->getLevelName($levelID)); + } else { + if(!$gs->checkPermission($accountID, "commandFeature")) return false; + $column = 'starFeatured'; + if($starArray[$commentarray[0]] != 0) { + $query = $db->prepare("SELECT starFeatured FROM levels WHERE levelID=:levelID ORDER BY starFeatured DESC LIMIT 1"); + $query->execute([':levelID' => $levelID]); + $starFeatured = $query->fetchColumn(); + if(!$starFeatured) { + $query = $db->prepare("SELECT starFeatured FROM levels ORDER BY starFeatured DESC LIMIT 1"); + $query->execute(); + $starFeatured = $query->fetchColumn() + 1; + } + $returnText = 'You successfully featured '.$gs->getLevelName($levelID).'!'; + } else $returnText = 'You successfully unfeatured '.$gs->getLevelName($levelID).'!'; + } + } else { + if($commentarray[1] > 1) { + if(!$gs->checkPermission($accountID, "commandEpic")) return false; + $column = 'starEpic'; + $starFeatured = ExploitPatch::number($commentarray[1]) - 1; + $returnTextArray = ['!epic' => 'epiced %1$s!', '!legendary' => 'set %1$s as a legendary level!', '!mythic' => 'set %1$s as a mythic level!']; + $returnText = 'You successfully '.sprintf($returnTextArray[$commentarray[0]], $gs->getLevelName($levelID)); + } else { + if(!$gs->checkPermission($accountID, "commandFeature")) return false; + $column = 'starFeatured'; + if($starArray[$commentarray[0]] != 0) { + $query = $db->prepare("SELECT starFeatured FROM levels WHERE levelID=:levelID ORDER BY starFeatured DESC LIMIT 1"); + $query->execute([':levelID' => $levelID]); + $starFeatured = $query->fetchColumn(); + if(!$starFeatured) { + $query = $db->prepare("SELECT starFeatured FROM levels ORDER BY starFeatured DESC LIMIT 1"); + $query->execute(); + $starFeatured = $query->fetchColumn() + 1; + } + $returnText = 'You successfully featured '.$gs->getLevelName($levelID).'!'; + } else $returnText = 'You successfully unfeatured '.$gs->getLevelName($levelID).'!'; + } + } + if($starArray[$commentarray[0]] == 0 && $commentarray[1] == 0) $column = 'starFeatured = 0, starEpic'; + $query = $db->prepare("UPDATE levels SET $column = :starFeatured WHERE levelID = :levelID"); + $query->execute([':levelID' => $levelID, ':starFeatured' => $starFeatured]); + $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('".($column == 'starEpic' ? 4 : 2)."', :value, :levelID, :timestamp, :id)"); + $query->execute([':value' => ($column == 'starEpic' ? $starArray[$commentarray[0]] - 1 : $starArray[$commentarray[0]]), ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); + if($automaticCron) Cron::updateCreatorPoints($accountID, false); + return $returnText; + break; + case '!vc': + case '!verifycoins': + case '!unverifycoins': + if(!$gs->checkPermission($accountID, "commandVerifycoins")) return false; + if(!isset($commentarray[1])) { + $coinsArray = ['!vc' => 1, '!verifycoins' => 1, '!unverifycoins' => 0]; + $verifyCoins = $coinsArray[ExploitPatch::number($commentarray[0])] ?? 1; + } else $verifyCoins = ExploitPatch::number($commentarray[0]) > 1 ? 1 : ExploitPatch::number($commentarray[0]); + $query = $db->prepare("UPDATE levels SET starCoins = :starCoins WHERE levelID = :levelID"); + $query->execute([':levelID' => $levelID, ':starCoins' => $verifyCoins]); $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('3', :value, :levelID, :timestamp, :id)"); - $query->execute([':value' => $starCoins, ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); - $query = $db->prepare("UPDATE levels SET starCoins=:starCoins WHERE levelID=:levelID"); - $query->execute([':starCoins' => $starCoins, ':levelID' => $levelID]); - } - return true; - } - if(substr($comment,0,8) == '!feature' AND $gs->checkPermission($accountID, "commandFeature")){ - $query = $db->prepare("UPDATE levels SET starFeatured='1' WHERE levelID=:levelID"); - $query->execute([':levelID' => $levelID]); - $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('2', :value, :levelID, :timestamp, :id)"); - $query->execute([':value' => "1", ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); - return true; - } - if(substr($comment,0,5) == '!epic' AND $gs->checkPermission($accountID, "commandEpic")){ - $query = $db->prepare("UPDATE levels SET starEpic='1' WHERE levelID=:levelID"); - $query->execute([':levelID' => $levelID]); - $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('4', :value, :levelID, :timestamp, :id)"); - $query->execute([':value' => "1", ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); - return true; - } - if(substr($comment,0,7) == '!unepic' AND $gs->checkPermission($accountID, "commandUnepic")){ - $query = $db->prepare("UPDATE levels SET starEpic='0' WHERE levelID=:levelID"); - $query->execute([':levelID' => $levelID]); - $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('4', :value, :levelID, :timestamp, :id)"); - $query->execute([':value' => "0", ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); - return true; - } - if(substr($comment,0,12) == '!verifycoins' AND $gs->checkPermission($accountID, "commandVerifycoins")){ - $query = $db->prepare("UPDATE levels SET starCoins='1' WHERE levelID = :levelID"); - $query->execute([':levelID' => $levelID]); - $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('2', :value, :levelID, :timestamp, :id)"); - $query->execute([':value' => "1", ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); - return true; - } - if(substr($comment,0,6) == '!daily' AND $gs->checkPermission($accountID, "commandDaily")){ - $query = $db->prepare("SELECT count(*) FROM dailyfeatures WHERE levelID = :level AND type = 0"); + $query->execute([':value' => $verifyCoins, ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); + $gs->sendLogsLevelChangeWebhook($levelID, $accountID, $getLevelData); + return 'You successfully '.($verifyCoins ? '' : 'un').'verified coins in '.$gs->getLevelName($levelID).'!'; + break; + case '!da': + case '!daily': + if(!$gs->checkPermission($accountID, "commandDaily")) return false; + $query = $db->prepare("SELECT count(*) FROM dailyfeatures WHERE levelID = :level AND type = 0"); $query->execute([':level' => $levelID]); - if($query->fetchColumn() != 0){ - return false; - } - $query = $db->prepare("SELECT timestamp FROM dailyfeatures WHERE timestamp >= :tomorrow AND type = 0 ORDER BY timestamp DESC LIMIT 1"); - $query->execute([':tomorrow' => strtotime("tomorrow 00:00:00")]); - if($query->rowCount() == 0){ - $timestamp = strtotime("tomorrow 00:00:00"); - }else{ - $timestamp = $query->fetchColumn() + 86400; - } - $query = $db->prepare("INSERT INTO dailyfeatures (levelID, timestamp, type) VALUES (:levelID, :uploadDate, 0)"); + if($query->fetchColumn() != 0) return $gs->getLevelName($levelID).' is already daily!'; + $query = $db->prepare("SELECT timestamp FROM dailyfeatures WHERE timestamp >= :tomorrow AND type = 0 ORDER BY timestamp DESC LIMIT 1"); + $query->execute([':tomorrow' => strtotime("tomorrow 00:00:00")]); + if($query->rowCount() == 0) $timestamp = strtotime("tomorrow 00:00:00"); + else $timestamp = $query->fetchColumn() + 86400; + $query = $db->prepare("INSERT INTO dailyfeatures (levelID, timestamp, type) VALUES (:levelID, :uploadDate, 0)"); $query->execute([':levelID' => $levelID, ':uploadDate' => $timestamp]); - $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account, value2, value4) VALUES ('5', :value, :levelID, :timestamp, :id, :dailytime, 0)"); - $query->execute([':value' => "1", ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID, ':dailytime' => $timestamp]); - return true; - } - if(substr($comment,0,7) == '!weekly' AND $gs->checkPermission($accountID, "commandWeekly")){ - $query = $db->prepare("SELECT count(*) FROM dailyfeatures WHERE levelID = :level AND type = 1"); - $query->execute([':level' => $levelID]); - if($query->fetchColumn() != 0){ - return false; - } - $query = $db->prepare("SELECT timestamp FROM dailyfeatures WHERE timestamp >= :tomorrow AND type = 1 ORDER BY timestamp DESC LIMIT 1"); + $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account, value2, value4) VALUES ('5', :value, :levelID, :timestamp, :id, :dailytime, 0)"); + $query->execute([':value' => "1", ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID, ':dailytime' => $timestamp]); + return 'You successfully made '.$gs->getLevelName($levelID).' daily!'; + break; + case '!w': + case '!weekly': + if(!$gs->checkPermission($accountID, "commandWeekly")) return false; + $query = $db->prepare("SELECT count(*) FROM dailyfeatures WHERE levelID = :level AND type = 1"); + $query->execute([':level' => $levelID]); + if($query->fetchColumn() != 0) return $gs->getLevelName($levelID).' is already weekly!'; + $query = $db->prepare("SELECT timestamp FROM dailyfeatures WHERE timestamp >= :tomorrow AND type = 1 ORDER BY timestamp DESC LIMIT 1"); $query->execute([':tomorrow' => strtotime("next monday")]); - if($query->rowCount() == 0){ - $timestamp = strtotime("next monday"); - }else{ - $timestamp = $query->fetchColumn() + 604800; - } - $query = $db->prepare("INSERT INTO dailyfeatures (levelID, timestamp, type) VALUES (:levelID, :uploadDate, 1)"); - $query->execute([':levelID' => $levelID, ':uploadDate' => $timestamp]); - $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account, value2, value4) VALUES ('5', :value, :levelID, :timestamp, :id, :dailytime, 1)"); - $query->execute([':value' => "1", ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID, ':dailytime' => $timestamp]); - return true; - } - if(substr($comment,0,6) == '!delet' AND $gs->checkPermission($accountID, "commandDelete")){ - if(!is_numeric($levelID)){ - return false; - } - $query = $db->prepare("DELETE from levels WHERE levelID=:levelID LIMIT 1"); - $query->execute([':levelID' => $levelID]); - $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('6', :value, :levelID, :timestamp, :id)"); - $query->execute([':value' => "1", ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); - if(file_exists(dirname(__FILE__)."../../data/levels/$levelID")){ - rename(dirname(__FILE__)."../../data/levels/$levelID",dirname(__FILE__)."../../data/levels/deleted/$levelID"); - } - return true; - } - if(substr($comment,0,7) == '!setacc' AND $gs->checkPermission($accountID, "commandSetacc")){ - $query = $db->prepare("SELECT accountID FROM accounts WHERE userName = :userName OR accountID = :userName LIMIT 1"); - $query->execute([':userName' => $commentarray[1]]); - if($query->rowCount() == 0){ - return false; - } - $targetAcc = $query->fetchColumn(); - //var_dump($result); - $query = $db->prepare("SELECT userID FROM users WHERE extID = :extID LIMIT 1"); - $query->execute([':extID' => $targetAcc]); - $userID = $query->fetchColumn(); - $query = $db->prepare("UPDATE levels SET extID=:extID, userID=:userID, userName=:userName WHERE levelID=:levelID"); - $query->execute([':extID' => $targetAcc, ':userID' => $userID, ':userName' => $commentarray[1], ':levelID' => $levelID]); - $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('7', :value, :levelID, :timestamp, :id)"); - $query->execute([':value' => $commentarray[1], ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); - return true; - } - - - //NON-ADMIN COMMANDS - if(self::ownCommand($comment, "rename", $accountID, $targetExtID)){ - $name = ExploitPatch::remove(str_replace("!rename ", "", $comment)); - $query = $db->prepare("UPDATE levels SET levelName=:levelName WHERE levelID=:levelID"); - $query->execute([':levelID' => $levelID, ':levelName' => $name]); - $query = $db->prepare("INSERT INTO modactions (type, value, timestamp, account, value3) VALUES ('8', :value, :timestamp, :id, :levelID)"); - $query->execute([':value' => $name, ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); - return true; - } - if(self::ownCommand($comment, "pass", $accountID, $targetExtID)){ - $pass = ExploitPatch::remove(str_replace("!pass ", "", $comment)); - if(is_numeric($pass)){ - $pass = sprintf("%06d", $pass); - if($pass == "000000"){ - $pass = ""; + if($query->rowCount() == 0) $timestamp = strtotime("next monday"); + else $timestamp = $query->fetchColumn() + 604800; + $query = $db->prepare("INSERT INTO dailyfeatures (levelID, timestamp, type) VALUES (:levelID, :uploadDate, 1)"); + $query->execute([':levelID' => $levelID, ':uploadDate' => $timestamp]); + $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account, value2, value4) VALUES ('5', :value, :levelID, :timestamp, :id, :dailytime, 1)"); + $query->execute([':value' => "1", ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID, ':dailytime' => $timestamp]); + return 'You successfully made '.$gs->getLevelName($levelID).' weekly!'; + break; + case '!d': + case '!delet': + case '!delete': + if(!$gs->checkPermission($accountID, "commandDelete")) return false; + $levelName = $gs->getLevelName($levelID); + if(!$levelName) return false; + $query = $db->prepare("DELETE FROM comments WHERE levelID = :levelID"); + $query->execute([':levelID' => $levelID]); + $query = $db->prepare("DELETE from levels WHERE levelID = :levelID LIMIT 1"); + $query->execute([':levelID' => $levelID]); + $query = $db->prepare("INSERT INTO modactions (type, value, value2, value3, timestamp, account) VALUES ('6', :value, :value2, :levelID, :timestamp, :id)"); + $query->execute([':value' => "1", ":value2" => $levelName, ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); + if(file_exists(__DIR__."../../data/levels/$levelID")) rename(__DIR__."../../data/levels/$levelID", __DIR__."../../data/levels/deleted/$levelID"); + $gs->sendLogsLevelChangeWebhook($levelID, $accountID, $getLevelData); + return 'You successfully deleted '.$levelName.'!'; + break; + case '!send': + case '!unsend': + if(!$gs->checkPermission($accountID, "actionSuggestRating")) return false; + $levelName = $gs->getLevelName($levelID); + if(!$levelName) return false; + $sendArray = ['!send' => 1, '!unsend' => 0]; + $sendValue = $sendArray[$commentarray[0]]; + if($sendValue) { + $query = $db->prepare("SELECT COUNT(*) FROM suggest WHERE suggestLevelId = :levelID AND suggestBy = :accountID"); + $query->execute([':levelID' => $levelID, ':accountID' => $accountID]); + if($query->fetchColumn() != 0) return 'You already suggested '.$levelName.'!'; + $diffVariable = ExploitPatch::charclean($commentarray[1]); + $starStars = ExploitPatch::number($commentarray[2]); + $starFeatured = ExploitPatch::number($commentarray[3]); + if(!is_numeric($starFeatured)) $starFeatured = 0; + $diffArray = $gs->getDiffFromName($diffVariable); + $starDemon = $diffArray[1]; + $starAuto = $diffArray[2]; + $starDifficulty = $diffArray[0]; + $diffic = $gs->getDiffFromStars($starStars); + if($diffic["demon"] == 1) $diffic = 'Demon'; + elseif($diffic["auto"] == 1) $diffic = 'Auto'; + else $diffic = $diffic["name"]; + $gs->suggestLevel($accountID, $levelID, $starDifficulty, $starStars, $starFeatured, $starAuto, $starDemon); + return 'You successfully suggested '.$levelName.' as '.$diffic.', '.$starStars.' star'.($starStars == 1 ? '' : 's').'!'; + } else { + $query = $db->prepare("SELECT COUNT(*) FROM suggest WHERE suggestLevelId = :levelID"); + $query->execute([':levelID' => $levelID]); + if($query->fetchColumn() == 0) return $levelName.' is not suggested!'; + $gs->removeSuggestedLevel($accountID, $levelID); + return 'You successfully removed level '.$levelName.' from being suggested!'; } - $pass = "1".$pass; - $query = $db->prepare("UPDATE levels SET password=:password WHERE levelID=:levelID"); - $query->execute([':levelID' => $levelID, ':password' => $pass]); - $query = $db->prepare("INSERT INTO modactions (type, value, timestamp, account, value3) VALUES ('9', :value, :timestamp, :id, :levelID)"); - $query->execute([':value' => $pass, ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); - return true; - } - } - if(self::ownCommand($comment, "song", $accountID, $targetExtID)){ - $song = ExploitPatch::remove(str_replace("!song ", "", $comment)); - if(is_numeric($song)){ - $query = $db->prepare("UPDATE levels SET songID=:song WHERE levelID=:levelID"); - $query->execute([':levelID' => $levelID, ':song' => $song]); - $query = $db->prepare("INSERT INTO modactions (type, value, timestamp, account, value3) VALUES ('16', :value, :timestamp, :id, :levelID)"); - $query->execute([':value' => $song, ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); - return true; - } - } - if(self::ownCommand($comment, "description", $accountID, $targetExtID)){ - $desc = base64_encode(ExploitPatch::remove(str_replace("!description ", "", $comment))); - $query = $db->prepare("UPDATE levels SET levelDesc=:desc WHERE levelID=:levelID"); - $query->execute([':levelID' => $levelID, ':desc' => $desc]); - $query = $db->prepare("INSERT INTO modactions (type, value, timestamp, account, value3) VALUES ('13', :value, :timestamp, :id, :levelID)"); - $query->execute([':value' => $desc, ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); - return true; - } - if(self::ownCommand($comment, "public", $accountID, $targetExtID)){ - $query = $db->prepare("UPDATE levels SET unlisted='0' WHERE levelID=:levelID"); - $query->execute([':levelID' => $levelID]); - $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('12', :value, :levelID, :timestamp, :id)"); - $query->execute([':value' => "0", ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); - return true; - } - if(self::ownCommand($comment, "unlist", $accountID, $targetExtID)){ - $query = $db->prepare("UPDATE levels SET unlisted='1' WHERE levelID=:levelID"); - $query->execute([':levelID' => $levelID]); - $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('12', :value, :levelID, :timestamp, :id)"); - $query->execute([':value' => "1", ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); - return true; - } - if(self::ownCommand($comment, "sharecp", $accountID, $targetExtID)){ - $query = $db->prepare("SELECT userID FROM users WHERE userName = :userName ORDER BY isRegistered DESC LIMIT 1"); - $query->execute([':userName' => $commentarray[1]]); - $targetAcc = $query->fetchColumn(); - //var_dump($result); - $query = $db->prepare("INSERT INTO cpshares (levelID, userID) VALUES (:levelID, :userID)"); - $query->execute([':userID' => $targetAcc, ':levelID' => $levelID]); - $query = $db->prepare("UPDATE levels SET isCPShared='1' WHERE levelID=:levelID"); - $query->execute([':levelID' => $levelID]); - $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('11', :value, :levelID, :timestamp, :id)"); - $query->execute([':value' => $commentarray[1], ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); - return true; - } - if(self::ownCommand($comment, "ldm", $accountID, $targetExtID)){ - $query = $db->prepare("UPDATE levels SET isLDM='1' WHERE levelID=:levelID"); - $query->execute([':levelID' => $levelID]); - $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('14', :value, :levelID, :timestamp, :id)"); - $query->execute([':value' => "1", ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); - return true; - } - if(self::ownCommand($comment, "unldm", $accountID, $targetExtID)){ - $query = $db->prepare("UPDATE levels SET isLDM='0' WHERE levelID=:levelID"); - $query->execute([':levelID' => $levelID]); - $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('14', :value, :levelID, :timestamp, :id)"); - $query->execute([':value' => "0", ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); - return true; + break; + case '!sa': + case '!setacc': + if(!$gs->checkPermission($accountID, "commandSetacc")) return false; + $query = $db->prepare("SELECT accountID, userName FROM accounts WHERE userName = :userName OR accountID = :userName LIMIT 1"); + $query->execute([':userName' => ExploitPatch::charclean($commentarray[1])]); + $query = $query->fetch(); + if(!$query) return false; + $targetAcc = $query['accountID']; + $targetUserName = $query['userName']; + $query = $db->prepare("SELECT userID FROM users WHERE extID = :extID LIMIT 1"); + $query->execute([':extID' => $targetAcc]); + $userID = $query->fetchColumn(); + $query = $db->prepare("UPDATE levels SET extID = :extID, userID = :userID, userName = :userName WHERE levelID = :levelID"); + $query->execute([':extID' => $targetAcc, ':userID' => $userID, ':userName' => $targetUserName, ':levelID' => $levelID]); + $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('7', :value, :levelID, :timestamp, :id)"); + $query->execute([':value' => $targetUserName, ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); + $gs->sendLogsLevelChangeWebhook($levelID, $accountID, $getLevelData); + if($automaticCron) Cron::updateCreatorPoints($accountID, false); + return 'You successfully set '.$gs->getAccountName($targetAcc).' as creator of '.$gs->getLevelName($levelID).'!'; + break; + case '!lockUpdating': + case '!unlockUpdating': + case '!lu': + case '!unlu': + if(!$gs->checkPermission($accountID, "commandLockUpdating")) return false; + if(!isset($commentarray[1])) { + $lockArray = ['!lockUpdating' => 1, '!unlockUpdating' => 0, '!lu' => 1, '!unlu' => 0]; + $lockValue = $lockArray[$commentarray[0]]; + } else $lockValue = $commentarray[1]; + $query = $db->prepare("UPDATE levels SET updateLocked = :updateLocked WHERE levelID = :levelID"); + $query->execute([':levelID' => $levelID, ':updateLocked' => $lockValue]); + $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('29', :value, :levelID, :timestamp, :id)"); + $query->execute([':value' => $lockValue, ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); + $gs->sendLogsLevelChangeWebhook($levelID, $accountID, $getLevelData); + return 'You successfully '.($lockValue ? 'locked updating of' : 'unlocked updating of').' level '.$gs->getLevelName($levelID).'!'; + case '!re': + case '!rename': + if(self::ownCommand("rename", $accountID, $targetExtID)) { + $name = ExploitPatch::rucharclean(str_replace($commentarray[0]." ", "", $comment)); + $levelName = $gs->getLevelName($levelID); + if(!$levelName) return false; + $query = $db->prepare("UPDATE levels SET levelName = :levelName WHERE levelID = :levelID"); + $query->execute([':levelID' => $levelID, ':levelName' => $name]); + $query = $db->prepare("INSERT INTO modactions (type, value, value2, timestamp, account, value3) VALUES ('8', :value, :value2, :timestamp, :id, :levelID)"); + $query->execute([':value' => $name, ":value2" => $levelName, ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); + $gs->sendLogsLevelChangeWebhook($levelID, $accountID, $getLevelData); + return 'You successfully renamed '.$levelName.' to '.$gs->getLevelName($levelID).'!'; + } + break; + case '!p': + case '!pass': + case '!password': + if(self::ownCommand("pass", $accountID, $targetExtID)) { + $pass = ExploitPatch::number($commentarray[1]); + if(is_numeric($pass)) { + $pass = sprintf("%06d", $pass); + if($pass == "000000") $pass = ""; + $pass = "1".$pass; + $query = $db->prepare("UPDATE levels SET password = :password WHERE levelID = :levelID"); + $query->execute([':levelID' => $levelID, ':password' => $pass]); + $query = $db->prepare("INSERT INTO modactions (type, value, timestamp, account, value3) VALUES ('9', :value, :timestamp, :id, :levelID)"); + $query->execute([':value' => $pass, ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); + $returnText = $pass == 1 ? 'You successfully removed password of level '.$gs->getLevelName($levelID).'!' : 'You successfully set password of level '.$gs->getLevelName($levelID).' to '.ExploitPatch::number($commentarray[1]).'!'; + $gs->sendLogsLevelChangeWebhook($levelID, $accountID, $getLevelData); + return $returnText; + } + } + break; + case '!s': + case '!song': + if(self::ownCommand("song", $accountID, $targetExtID)) { + $song = ExploitPatch::number($commentarray[1]); + if(is_numeric($song)) { + $songInfo = $gs->getSongInfo($song); + if(!$songInfo) return false; + $query = $db->prepare("UPDATE levels SET songID = :song WHERE levelID = :levelID"); + $query->execute([':levelID' => $levelID, ':song' => $song]); + $query = $db->prepare("INSERT INTO modactions (type, value, timestamp, account, value3) VALUES ('16', :value, :timestamp, :id, :levelID)"); + $query->execute([':value' => $song, ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); + $gs->sendLogsLevelChangeWebhook($levelID, $accountID, $getLevelData); + if($automaticCron) Cron::updateSongsUsage($accountID, false); + return 'You successfully changed song of level '.$gs->getLevelName($levelID).' to '.$songInfo['authorName'].' - '.$songInfo['name'].' ('.$songInfo['ID'].')!'; + } + } + break; + case '!desc': + case '!description': + if(self::ownCommand("description", $accountID, $targetExtID)) { + $desc = ExploitPatch::url_base64_encode(ExploitPatch::rucharclean(str_replace($commentarray[0]." ", "", $comment))); + $query = $db->prepare("UPDATE levels SET levelDesc = :desc WHERE levelID = :levelID"); + $query->execute([':levelID' => $levelID, ':desc' => $desc]); + $query = $db->prepare("INSERT INTO modactions (type, value, timestamp, account, value3) VALUES ('13', :value, :timestamp, :id, :levelID)"); + $query->execute([':value' => $desc, ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); + $gs->sendLogsLevelChangeWebhook($levelID, $accountID, $getLevelData); + return 'You successfully changed description of level '.$gs->getLevelName($levelID).'!'; + } + break; + case '!pub': + case '!public': + case '!unlist': + if(!isset($commentarray[1])) { + $permsArray = ['!pub' => 'public', '!public' => 'public', '!unlist' => 'unlist']; + $permission = $permsArray[$commentarray[0]]; + } else $permission = $commentarray[1] == 1 ? 'public' : 'unlist'; + if(self::ownCommand($permission, $accountID, $targetExtID)) { + $unlisted = $permission == 'public' ? 0 : 1; + $query = $db->prepare("UPDATE levels SET unlisted = :unlisted WHERE levelID = :levelID"); + $query->execute([':levelID' => $levelID, ':unlisted' => $unlisted]); + $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('12', :value, :levelID, :timestamp, :id)"); + $query->execute([':value' => $unlisted, ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); + $returnText = $unlisted ? 'You successfully unlisted level '.$gs->getLevelName($levelID).'!' : 'You successfully made level '.$gs->getLevelName($levelID).' public!'; + $gs->sendLogsLevelChangeWebhook($levelID, $accountID, $getLevelData); + return $returnText; + } + break; + case '!cp': + case '!sharecp': + if(self::ownCommand("sharecp", $accountID, $targetExtID)) { + $query = $db->prepare("SELECT userID FROM users WHERE userName = :userName ORDER BY isRegistered DESC LIMIT 1"); + $query->execute([':userName' => ExploitPatch::charclean($commentarray[1])]); + $targetAcc = $query->fetchColumn(); + $query = $db->prepare("INSERT INTO cpshares (levelID, userID) VALUES (:levelID, :userID)"); + $query->execute([':userID' => $targetAcc, ':levelID' => $levelID]); + $query = $db->prepare("UPDATE levels SET isCPShared = '1' WHERE levelID = :levelID"); + $query->execute([':levelID' => $levelID]); + $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('11', :value, :levelID, :timestamp, :id)"); + $query->execute([':value' => ExploitPatch::charclean($commentarray[1]), ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); + if($automaticCron) Cron::updateCreatorPoints($accountID, false); + return 'You successfully shared Creator Points of level '.$gs->getLevelName($levelID).' with '.ExploitPatch::charclean($commentarray[1]).'!'; + } + break; + case '!ldm': + case '!unldm': + if(!isset($commentarray[1])) { + $permsArray = ['!ldm' => 'ldm', '!unldm' => 'unldm']; + $permission = $permsArray[$commentarray[0]]; + } else $permission = $commentarray[1] == 1 ? 'ldm' : 'unldm'; + if(self::ownCommand($permission, $accountID, $targetExtID)) { + $ldm = $permission == 'ldm' ? 1 : 0; + $query = $db->prepare("UPDATE levels SET isLDM = :ldm WHERE levelID = :levelID"); + $query->execute([':levelID' => $levelID, ':ldm' => $ldm]); + $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('14', :value, :levelID, :timestamp, :id)"); + $query->execute([':value' => $ldm, ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); + return 'You successfully '.($ldm ? 'added LDM to' : 'removed LDM from').' level '.$gs->getLevelName($levelID).'!'; + } + case '!lockComments': + case '!unlockComments': + case '!lc': + case '!unlc': + if(self::ownCommand("lockComments", $accountID, $targetExtID)) { + if(!isset($commentarray[1])) { + $lockArray = ['!lockComments' => 1, '!unlockComments' => 0, '!lc' => 1, '!unlc' => 0]; + $lockValue = $lockArray[$commentarray[0]]; + } else $lockValue = $commentarray[1]; + $query = $db->prepare("UPDATE levels SET commentLocked = :commentLocked WHERE levelID = :levelID"); + $query->execute([':levelID' => $levelID, ':commentLocked' => $lockValue]); + $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('38', :value, :levelID, :timestamp, :id)"); + $query->execute([':value' => $lockValue, ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); + $gs->sendLogsLevelChangeWebhook($levelID, $accountID, $getLevelData); + return 'You successfully '.($lockValue ? 'locked comments on' : 'unlocked comments on').' level '.$gs->getLevelName($levelID).'!'; + } + case '!ev': + case '!event': + if(!$gs->checkPermission($accountID, "commandEvent")) return false; + $duration = time() + ((int)ExploitPatch::number($commentarray[1]) * 60); + unset($commentarray[0]); + unset($commentarray[1]); + $rewards = implode(",", $commentarray); + if($duration <= time() || !$rewards) return 'Usage: !event *event duration in minutes* *reward type* *reward amount* *reward type* *reward amount* and so on...'; + $check = $db->prepare('SELECT count(*) FROM events WHERE timestamp < :time AND duration >= :time'); + $check->execute([':time' => $duration]); + $check = $check->fetchColumn(); + if($check) return 'There is already an event level! Try increasing duration ;)'; + $query = $db->prepare("INSERT INTO events (levelID, timestamp, duration, rewards) VALUES (:levelID, :timestamp, :duration, :rewards)"); + $query->execute([':levelID' => $levelID, ':timestamp' => time(), ':duration' => $duration, ':rewards' => $rewards]); + $query = $db->prepare("INSERT INTO modactions (type, value, value2, value3, timestamp, account) VALUES ('44', :value, :value2, :levelID, :timestamp, :id)"); + $query->execute([':value' => $duration, ':value2' => $rewards, ':timestamp' => $uploadDate, ':id' => $accountID, ':levelID' => $levelID]); + if($automaticCron) Cron::updateCreatorPoints($accountID, false); + return 'You successfully made '.$gs->getLevelName($levelID).' event level!'; } return false; } public static function doListCommands($accountID, $command, $listID) { if(substr($command,0,1) != '!') return false; $listID = $listID * -1; - include dirname(__FILE__)."/../lib/connection.php"; - require_once "../lib/exploitPatch.php"; - require_once "../lib/mainLib.php"; + require __DIR__."/connection.php"; + require_once __DIR__."/exploitPatch.php"; + require_once __DIR__."/mainLib.php"; $gs = new mainLib(); $carray = explode(' ', $command); + $getList = $db->prepare('SELECT * FROM lists WHERE listID = :listID'); + $getList->execute([':listID' => $listID]); + $getList = $getList->fetch(); switch($carray[0]) { case '!r': case '!rate': - $getList = $db->prepare('SELECT * FROM lists WHERE listID = :listID'); - $getList->execute([':listID' => $listID]); - $getList = $getList->fetch(); $reward = ExploitPatch::number($carray[1]); $diff = ExploitPatch::charclean($carray[2]); $featured = is_numeric($carray[3]) ? ExploitPatch::number($carray[3]) : ExploitPatch::number($carray[4]); @@ -275,11 +471,14 @@ public static function doListCommands($accountID, $command, $listID) { $query->execute([':listID' => $listID, ':reward' => $reward, ':diff' => $diff, ':feat' => $featured, ':count' => $count]); $query = $db->prepare("INSERT INTO modactions (type, value, value2, value3, timestamp, account) VALUES ('30', :value, :value2, :listID, :timestamp, :id)"); $query->execute([':value' => $reward, ':value2' => $diff, ':timestamp' => time(), ':id' => $accountID, ':listID' => $listID]); + $gs->sendLogsListChangeWebhook($listID, $accountID, $getList); + return 'You successfully '.($reward == 0 ? 'un' : '').'rated list '.$gs->getListName($listID).'!'; } elseif($gs->checkPermission($accountID, "actionSuggestRating")) { $query = $db->prepare("INSERT INTO suggest (suggestBy, suggestLevelId, suggestDifficulty, suggestStars, suggestFeatured, timestamp) VALUES (:accID, :listID, :diff, :reward, :feat, :time)"); $query->execute([':listID' => $listID*-1, ':reward' => $reward, ':diff' => $diff, ':accID' => $accountID, ':feat' => $featured, ':time' => time()]); $query = $db->prepare("INSERT INTO modactions (type, value, value2, value3, timestamp, account) VALUES ('31', :value, :value2, :listID, :timestamp, :id)"); $query->execute([':value' => $reward, ':value2' => $diff, ':timestamp' => time(), ':id' => $accountID, ':listID' => $listID]); + return 'You successfully suggested list '.$gs->getListName($listID).'!'; } else return false; break; case '!f': @@ -290,24 +489,33 @@ public static function doListCommands($accountID, $command, $listID) { $query->execute([':listID' => $listID, ':feat' => $carray[1]]); $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('32', :value, :listID, :timestamp, :id)"); $query->execute([':value' => $carray[1], ':timestamp' => time(), ':id' => $accountID, ':listID' => $listID]); + $gs->sendLogsListChangeWebhook($listID, $accountID, $getList); + return 'You successfully '.($carray[1] == 0 ? 'un' : '').'featured list '.$gs->getListName($listID).'!'; break; case '!un': case '!unlist': $accCheck = $gs->getListOwner($listID); if(!$gs->checkPermission($accountID, "commandUnlistAll") AND $accountID != $accCheck) return false; - if(!isset($carray[1])) $carray[1] = 1; + if(!isset($carray[1])) $carray[1] = 2; $query = $db->prepare("UPDATE lists SET unlisted = :unlisted WHERE listID=:listID"); $query->execute([':listID' => $listID, ':unlisted' => $carray[1]]); $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('33', :value, :listID, :timestamp, :id)"); $query->execute([':value' => $carray[1], ':timestamp' => time(), ':id' => $accountID, ':listID' => $listID]); + $listName = $gs->getListName($listID); + $unlistedText = ['You successfully made public list '.$listName.'!', 'You successfully made list '.$listName.' only for friends!', 'You successfully unlisted list '.$listName.'!']; + $gs->sendLogsListChangeWebhook($listID, $accountID, $getList); + return $unlistedText[$carray[1]] ?? $unlistedText[2]; break; case '!d': case '!delete': if(!$gs->checkPermission($accountID, "commandDelete")) return false; + $oldName = $gs->getListName($listID); $query = $db->prepare("DELETE FROM lists WHERE listID = :listID"); $query->execute([':listID' => $listID]); - $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('34', 0, :listID, :timestamp, :id)"); - $query->execute([':timestamp' => time(), ':id' => $accountID, ':listID' => $listID]); + $query = $db->prepare("INSERT INTO modactions (type, value, value2, value3, timestamp, account) VALUES ('34', 0, :value2, :listID, :timestamp, :id)"); + $query->execute([':timestamp' => time(), ':value2' => $oldName, ':id' => $accountID, ':listID' => $listID]); + $gs->sendLogsListChangeWebhook($listID, $accountID, $getList); + return 'You successfully deleted list '.$oldName.'!'; break; case '!acc': case '!setacc': @@ -319,6 +527,8 @@ public static function doListCommands($accountID, $command, $listID) { $query->execute([':listID' => $listID, ':accID' => $acc]); $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('35', :value, :listID, :timestamp, :id)"); $query->execute([':value' => $acc, ':timestamp' => time(), ':id' => $accountID, ':listID' => $listID]); + $gs->sendLogsListChangeWebhook($listID, $accountID, $getList); + return 'You successfully changed creator of list '.$gs->getListName($listID).'!'; break; case '!re': case '!rename': @@ -331,52 +541,157 @@ public static function doListCommands($accountID, $command, $listID) { $query->execute([':listID' => $listID, ':name' => $name]); $query = $db->prepare("INSERT INTO modactions (type, value, value2, value3, timestamp, account) VALUES ('36', :value, :value2, :listID, :timestamp, :id)"); $query->execute([':value' => $name, ':value2' => $oldName, ':timestamp' => time(), ':id' => $accountID, ':listID' => $listID]); + $gs->sendLogsListChangeWebhook($listID, $accountID, $getList); + return 'You successfully changed description renamed '.$oldName.' to '.$gs->getListName($listID).'!'; break; case '!desc': case '!description': $accCheck = $gs->getListOwner($listID); if(!$gs->checkPermission($accountID, "commandDescriptionAll") AND $accountID != $accCheck) return false; $carray[0] = ''; - $name = base64_encode(trim(ExploitPatch::charclean(implode(' ', $carray)))); + $name = ExploitPatch::url_base64_encode(trim(ExploitPatch::charclean(implode(' ', $carray)))); $query = $db->prepare("UPDATE lists SET listDesc = :name WHERE listID = :listID"); $query->execute([':listID' => $listID, ':name' => $name]); $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('37', :value, :listID, :timestamp, :id)"); $query->execute([':value' => $name, ':timestamp' => time(), ':id' => $accountID, ':listID' => $listID]); + $gs->sendLogsListChangeWebhook($listID, $accountID, $getList); + return 'You successfully changed description on list '.$gs->getListName($listID).'!'; break; + case '!lockComments': + case '!unlockComments': + case '!lc': + case '!unlc': + if(self::ownCommand("lockComments", $accountID, $targetExtID)) { + if(!isset($carray[1])) { + $lockArray = ['!lockComments' => 1, '!unlockComments' => 0, '!lc' => 1, '!unlc' => 0]; + $lockValue = $lockArray[$carray[0]]; + } else $lockValue = $carray[1]; + $query = $db->prepare("UPDATE lists SET commentLocked = :commentLocked WHERE listID = :listID"); + $query->execute([':listID' => $listID, ':commentLocked' => $lockValue]); + $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('39', :value, :listID, :timestamp, :id)"); + $query->execute([':value' => $lockValue, ':timestamp' => time(), ':id' => $accountID, ':listID' => $listID]); + $gs->sendLogsListChangeWebhook($listID, $accountID, $getList); + return 'You successfully '.($lockValue ? 'locked comments on' : 'unlocked comments on').' list '.$gs->getListName($listID).'!'; + } } - return true; + return false; } public static function doProfileCommands($accountID, $command){ - include dirname(__FILE__)."/../lib/connection.php"; - require_once "../lib/exploitPatch.php"; - require_once "../lib/mainLib.php"; - $gs = new mainLib(); - if(substr($command, 0, 8) == '!discord'){ - if(substr($command, 9, 6) == "accept"){ - $query = $db->prepare("UPDATE accounts SET discordID = discordLinkReq, discordLinkReq = '0' WHERE accountID = :accountID AND discordLinkReq <> 0"); - $query->execute([':accountID' => $accountID]); - $query = $db->prepare("SELECT discordID, userName FROM accounts WHERE accountID = :accountID"); - $query->execute([':accountID' => $accountID]); - $account = $query->fetch(); - $gs->sendDiscordPM($account["discordID"], "Your link request to " . $account["userName"] . " has been accepted!"); - return true; + require __DIR__."/connection.php"; + require_once __DIR__."/exploitPatch.php"; + require_once __DIR__."/mainLib.php"; + require __DIR__."/../../config/dashboard.php"; + require __DIR__."/../../config/discord.php"; + $gs = new mainLib(); + $carray = explode(' ', $command); + $acc = $gs->getAccountName($accountID); + $timestamp = date("c", strtotime("now")); + if(substr($command, 0, 8) == '!discord') { + $webhookLangArray = $gs->webhookStartLanguage($webhookLanguage); + if(substr($command, 9, 6) == "accept") { + $query = $db->prepare("SELECT accountID, discordID FROM accounts WHERE discordLinkReq = :id"); + $query->execute([':id' => ExploitPatch::number($carray[2])]); + $check = $query->fetch(); + if($check["accountID"] != $accountID) return false; + else { + $query = $db->prepare("UPDATE accounts SET discordLinkReq = '0' WHERE accountID = :accountID"); + $query->execute([':accountID' => $accountID]); + $setColor = $successColor; + $setTitle = $gs->webhookLanguage('accountAcceptTitle', $webhookLangArray); + $setDescription = sprintf($gs->webhookLanguage('accountAcceptDesc', $webhookLangArray), '**'.$acc.'**'); + $setThumbnail = $acceptThumbnailURL; + $setFooter = sprintf($gs->webhookLanguage('footer', $webhookLangArray), $gdps); + $embed = $gs->generateEmbedArray( + [$gdps, $authorURL, $authorIconURL], + $setColor, + [$setTitle, $linkTitleURL], + $setDescription, + $setThumbnail, + [], + [$setFooter, $footerIconURL] + ); + $json = json_encode([ + "content" => "", + "tts" => false, + "embeds" => [$embed] + ], JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE); + $gs->sendDiscordPM($check["discordID"], $json, true); + $gs->logAction($accountID, 24, $check["discordID"]); + return true; + } } - if(substr($command, 9, 4) == "deny"){ - $query = $db->prepare("SELECT discordLinkReq, userName FROM accounts WHERE accountID = :accountID"); - $query->execute([':accountID' => $accountID]); - $account = $query->fetch(); - $gs->sendDiscordPM($account["discordLinkReq"], "Your link request to " . $account["userName"] . " has been denied!"); - $query = $db->prepare("UPDATE accounts SET discordLinkReq = '0' WHERE accountID = :accountID"); - $query->execute([':accountID' => $accountID]); - return true; + if(substr($command, 9, 6) == "unlink") { + $query = $db->prepare("SELECT discordID, discordLinkReq FROM accounts WHERE accountID = :id"); + $query->execute([':id' => $accountID]); + $check = $query->fetch(); + if($check["discordID"] == 0 || $check['discordLinkReq'] != 0) return false; + else { + $query = $db->prepare("UPDATE accounts SET discordID = '0' WHERE accountID = :accountID"); + $query->execute([':accountID' => $accountID]); + $setColor = $failColor; + $setTitle = $gs->webhookLanguage('accountUnlinkTitle', $webhookLangArray); + $setDescription = sprintf($gs->webhookLanguage('accountUnlinkDesc', $webhookLangArray), '**'.$acc.'**'); + $setThumbnail = $unlinkThumbnailURL; + $setFooter = sprintf($gs->webhookLanguage('footer', $webhookLangArray), $gdps); + $embed = $gs->generateEmbedArray( + [$gdps, $authorURL, $authorIconURL], + $setColor, + [$setTitle, $linkTitleURL], + $setDescription, + $setThumbnail, + [], + [$setFooter, $footerIconURL] + ); + $json = json_encode([ + "content" => "", + "tts" => false, + "embeds" => [$embed] + ], JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE); + $gs->sendDiscordPM($check["discordID"], $json, true); + $gs->logAction($accountID, 25, $check["discordID"]); + return true; + } } - if(substr($command, 9, 6) == "unlink"){ - $query = $db->prepare("SELECT discordID, userName FROM accounts WHERE accountID = :accountID"); - $query->execute([':accountID' => $accountID]); - $account = $query->fetch(); - $gs->sendDiscordPM($account["discordID"], "Your Discord account has been unlinked from " . $account["userName"] . "!"); - $query = $db->prepare("UPDATE accounts SET discordID = '0' WHERE accountID = :accountID"); - $query->execute([':accountID' => $accountID]); + if(substr($command, 9, 4) == "link") { + $query = $db->prepare("SELECT discordID, discordLinkReq FROM accounts WHERE accountID = :id"); + $query->execute([':id' => $accountID]); + $check = $query->fetch(); + if($check["discordID"] != 0 && $check['discordLinkReq'] == 0) return false; + $query = $db->prepare("SELECT count(*) FROM accounts WHERE discordID = :id AND discordLinkReq = 0"); + $query->execute([':id' => $carray[2]]); + $check = $query->fetchColumn(); + if($check > 0) return false; + $code = rand(1000, 9999); + $emojis = [":zero:", ":one:", ":two:", ":three:", ":four:", ":five:", ":six:", ":seven:", ":eight:", ":nine:"]; + $acode = str_split($code); + $acode = [$emojis[$acode[0]], $emojis[$acode[1]], $emojis[$acode[2]], $emojis[$acode[3]]]; + $setColor = $pendingColor; + $setTitle = $gs->webhookLanguage('accountLinkTitle', $webhookLangArray); + $setDescription = sprintf($gs->webhookLanguage('accountLinkDesc', $webhookLangArray), '**'.$acc.'**'); + $setThumbnail = $linkThumbnailURL; + $codeFirst = [$gs->webhookLanguage('accountCodeFirst', $webhookLangArray), $acode[0], true]; + $codeSecond = [$gs->webhookLanguage('accountCodeSecond', $webhookLangArray), $acode[1], true]; + $codeThird = [$gs->webhookLanguage('accountCodeThird', $webhookLangArray), $acode[2], true]; + $codeFourth = [$gs->webhookLanguage('accountCodeFourth', $webhookLangArray), $acode[3], true]; + $setFooter = sprintf($gs->webhookLanguage('footer', $webhookLangArray), $gdps); + $embed = $gs->generateEmbedArray( + [$gdps, $authorURL, $authorIconURL], + $setColor, + [$setTitle, $linkTitleURL], + $setDescription, + $setThumbnail, + [$codeFirst, $codeSecond, $codeThird, $codeFourth], + [$setFooter, $footerIconURL] + ); + $json = json_encode([ + "content" => "", + "tts" => false, + "embeds" => [$embed] + ], JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE); + $query = $db->prepare("UPDATE accounts SET discordLinkReq = :id, discordID = :did WHERE accountID = :accountID"); + $query->execute([':accountID' => $accountID, ':id' => $code, ':did' => ExploitPatch::number($carray[2])]); + $gs->sendDiscordPM($carray[2], $json, true); + $gs->logAction($accountID, 26, $check["discordID"]); return true; } } diff --git a/incl/lib/connection.php b/incl/lib/connection.php index 6748d1d53..f0554a44c 100644 --- a/incl/lib/connection.php +++ b/incl/lib/connection.php @@ -1,18 +1,49 @@ true -)); - // set the PDO error mode to exception - $db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); - } -catch(PDOException $e) - { - echo "Connection failed: " . $e->getMessage(); - } +if(!isset($db)) global $db; +if(empty($db)) { + error_reporting(0); + require dirname(__FILE__)."/../../config/connection.php"; + require dirname(__FILE__)."/../../config/misc.php"; + require_once dirname(__FILE__)."/../../config/security.php"; + require_once dirname(__FILE__)."/../../config/dashboard.php"; + require_once dirname(__FILE__)."/ipCheck.php"; + $ic = new ipCheck(); + @header('Content-Type: text/html; charset=utf-8'); + if(!isset($port)) $port = 3306; + try { + $db = new PDO("mysql:host=$servername;port=$port;dbname=$dbname", $username, $password, array(PDO::ATTR_PERSISTENT => true)); + $db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); + $ic->checkIP(); + $ip = $ic->getYourIP(); + if($minGameVersion != 0 && isset($_POST['gameVersion']) && $_POST['gameVersion'] != 0 && $_POST['gameVersion'] < $minGameVersion && !isset($_SESSION)) exit("-1"); + if($maxGameVersion != 0 && isset($_POST['gameVersion']) && $_POST['gameVersion'] != 0 && $_POST['gameVersion'] > $maxGameVersion && !isset($_SESSION)) exit("-1"); + if($minBinaryVersion != 0 && isset($_POST['binaryVersion']) && $_POST['binaryVersion'] != 0 && $_POST['binaryVersion'] < $minBinaryVersion && !isset($_SESSION)) exit("-1"); + if($maxBinaryVersion != 0 && isset($_POST['binaryVersion']) && $_POST['binaryVersion'] != 0 && $_POST['binaryVersion'] > $maxBinaryVersion && !isset($_SESSION)) exit("-1"); + if(!isset($_SESSION['accountID'])) { + $getExtID = $db->prepare('SELECT extID FROM users WHERE isRegistered = 1 AND IP = :ip LIMIT 1'); + $getExtID->execute([':ip' => $ip]); + $getExtID = $getExtID->fetchColumn(); + } + if(!isset($installed)) global $installed; + if($installed && (!empty($getExtID) || isset($_SESSION['accountID']))) { + $accountIDcheck = $getExtID ?? $_SESSION['accountID']; + $timezone = $db->prepare('SELECT timezone FROM accounts WHERE accountID = :id'); + $timezone->execute([':id' => $accountIDcheck]); + $timezone = $timezone->fetchColumn(); + if(!empty($timezone)) date_default_timezone_set($timezone); + else { + $json = file_get_contents('http://ip-api.com/json/'.$ip); + $ipData = json_decode($json, true); + if($ipData['timezone']) { + $update = $db->prepare('UPDATE accounts SET timezone = :tz WHERE accountID = :id'); + $update->execute([':tz' => $ipData['timezone'], ':id' => $accountIDcheck]); + date_default_timezone_set($ipData['timezone']); + } + } + } + } + catch(PDOException $e) { + echo "Connection failed: " . $e->getMessage(); + } +} ?> \ No newline at end of file diff --git a/incl/lib/cron.php b/incl/lib/cron.php new file mode 100644 index 000000000..e60833adc --- /dev/null +++ b/incl/lib/cron.php @@ -0,0 +1,320 @@ +prepare("SELECT count(*) FROM actions WHERE type = 39 AND timestamp >= :timestamp"); + $check->execute([':timestamp' => time() - 30]); + $check = $check->fetchColumn(); + if($check) return false; + } + $query = $db->prepare("SELECT + 212 + IFNULL(stars.stars, 0) + IFNULL(dailyStars.stars, 0) + IFNULL(eventStars.stars, 0) + IFNULL(gauntletStars.stars, 0) + IFNULL(mappackStars.stars, 0) AS stars, + 10 + IFNULL(coins.coins, 0) + IFNULL(dailyCoins.coins, 0) + IFNULL(eventCoins.coins, 0) + IFNULL(gauntletCoins.coins, 0) AS coins, + 3 + IFNULL(demons.demons, 0) + IFNULL(dailyDemons.demons, 0) + IFNULL(eventDemons.demons, 0) + IFNULL(gauntletDemons.demons, 0) AS demons, + 25 + IFNULL(moons.moons, 0) + IFNULL(dailyMoons.moons, 0) + IFNULL(eventMoons.moons, 0) + IFNULL(gauntletMoons.moons, 0) AS moons + FROM ( + -- Levels table + (SELECT SUM(starStars) AS stars FROM levels WHERE levelLength != 5) stars + JOIN (SELECT SUM(coins) AS coins FROM levels WHERE starCoins > 0) coins + JOIN (SELECT SUM(starDemon) AS demons FROM levels WHERE starStars > 0) demons + JOIN (SELECT SUM(starStars) AS moons FROM levels WHERE levelLength = 5) moons + + -- Daily/Weekly levels + JOIN (SELECT SUM(starStars) as stars FROM dailyfeatures INNER JOIN levels ON levels.levelID = dailyfeatures.levelID WHERE levelLength != 5) dailyStars + JOIN (SELECT SUM(coins) as coins FROM dailyfeatures INNER JOIN levels ON levels.levelID = dailyfeatures.levelID WHERE starCoins > 0) dailyCoins + JOIN (SELECT SUM(starDemon) as demons FROM dailyfeatures INNER JOIN levels ON levels.levelID = dailyfeatures.levelID WHERE starStars > 0) dailyDemons + JOIN (SELECT SUM(starStars) as moons FROM dailyfeatures INNER JOIN levels ON levels.levelID = dailyfeatures.levelID WHERE levelLength = 5) dailyMoons + + -- Event levels + JOIN (SELECT SUM(starStars) as stars FROM events INNER JOIN levels ON levels.levelID = events.levelID WHERE levelLength != 5) eventStars + JOIN (SELECT SUM(coins) as coins FROM events INNER JOIN levels ON levels.levelID = events.levelID WHERE starCoins > 0) eventCoins + JOIN (SELECT SUM(starDemon) as demons FROM events INNER JOIN levels ON levels.levelID = events.levelID WHERE starStars > 0) eventDemons + JOIN (SELECT SUM(starStars) as moons FROM events INNER JOIN levels ON levels.levelID = events.levelID WHERE levelLength = 5) eventMoons + + -- Map Packs + JOIN (SELECT SUM(stars) as stars FROM mappacks) mappackStars + + -- Gauntlets + JOIN (SELECT SUM(starStars) as stars FROM levels INNER JOIN gauntlets ON levels.levelID IN (gauntlets.level1, gauntlets.level2, gauntlets.level3, gauntlets.level4, gauntlets.level5) WHERE levelLength != 5) gauntletStars + JOIN (SELECT SUM(coins) as coins FROM levels INNER JOIN gauntlets ON levels.levelID IN (gauntlets.level1, gauntlets.level2, gauntlets.level3, gauntlets.level4, gauntlets.level5) WHERE starCoins > 0) gauntletCoins + JOIN (SELECT SUM(starDemon) as demons FROM levels INNER JOIN gauntlets ON levels.levelID IN (gauntlets.level1, gauntlets.level2, gauntlets.level3, gauntlets.level4, gauntlets.level5) WHERE starStars > 0) gauntletDemons + JOIN (SELECT SUM(starStars) as moons FROM levels INNER JOIN gauntlets ON levels.levelID IN (gauntlets.level1, gauntlets.level2, gauntlets.level3, gauntlets.level4, gauntlets.level5) WHERE levelLength = 5) gauntletMoons + )"); + $query->execute(); + $levelstuff = $query->fetch(); + $stars = $levelstuff['stars']; + $coins = $levelstuff['coins']; + $demons = $levelstuff['demons']; + $moons = $levelstuff['moons']; + $query = $db->prepare("SELECT userID FROM users WHERE stars > :stars OR demons > :demons OR userCoins > :coins OR moons > :moons OR stars < 0 OR demons < 0 OR coins < 0 OR userCoins < 0 OR diamonds < 0 OR moons < 0"); + $query->execute([':stars' => $stars, ':demons' => $demons, ':coins' => $coins, ':moons' => $moons]); + $query = $query->fetchAll(); + foreach($query AS &$ban) { + $getUser = $db->prepare('SELECT stars, demons, userCoins, moons FROM users WHERE userID = :userID'); + $getUser->execute([':userID' => $ban['userID']]); + $getUser = $getUser->fetch(); + $maxText = 'MAX: ⭐'.$stars.' • 🌙'.$moons.' • 👿'.$demons.' • 🪙'.$coins.' | USER: ⭐'.$getUser['stars'].' • 🌙'.$getUser['moons'].' • 👿'.$getUser['demons'].' • 🪙'.$getUser['userCoins']; + $gs->banPerson(0, $ban['userID'], $maxText, 0, 1, 2147483647); + } + $gs->logAction($accountID, 39, $stars, $coins, $demons, $moons, count($query)); + return true; + } + public static function updateCreatorPoints($accountID, $checkForTime) { + require __DIR__."/connection.php"; + require_once __DIR__."/mainLib.php"; + $gs = new mainLib(); + if($checkForTime) { + $check = $db->prepare("SELECT count(*) FROM actions WHERE type = 40 AND timestamp >= :timestamp"); + $check->execute([':timestamp' => time() - 30]); + $check = $check->fetchColumn(); + if($check) return false; + } + $people = []; + /* + Creator Points for rated levels + */ + $query = $db->prepare("UPDATE users + LEFT JOIN + ( + SELECT usersTable.userID, (IFNULL(starredTable.starred, 0) + IFNULL(featuredTable.featured, 0) + (IFNULL(epicTable.epic,0))) as CP FROM ( + SELECT userID FROM users + ) AS usersTable + LEFT JOIN + ( + SELECT count(*) as starred, userID FROM levels WHERE starStars != 0 AND isCPShared = 0 GROUP BY(userID) + ) AS starredTable ON usersTable.userID = starredTable.userID + LEFT JOIN + ( + SELECT count(*) as featured, userID FROM levels WHERE starFeatured != 0 AND isCPShared = 0 GROUP BY(userID) + ) AS featuredTable ON usersTable.userID = featuredTable.userID + LEFT JOIN + ( + SELECT starEpic as epic, userID FROM levels WHERE starEpic != 0 AND isCPShared = 0 GROUP BY(userID) + ) AS epicTable ON usersTable.userID = epicTable.userID + ) calculated + ON users.userID = calculated.userID + SET users.creatorPoints = IFNULL(calculated.CP, 0)"); + $query->execute(); + /* + Creator Points sharing + */ + $query = $db->prepare("SELECT levelID, userID, starStars, starFeatured, starEpic FROM levels WHERE isCPShared != 0"); + $query->execute(); + $result = $query->fetchAll(); + foreach($result AS &$level) { + $deservedcp = 0; + if($level["starStars"] != 0) $deservedcp++; + if($level["starFeatured"] != 0) $deservedcp++; + if($level["starEpic"] != 0) $deservedcp += $level["starEpic"]; + $query = $db->prepare("SELECT userID FROM cpshares WHERE levelID = :levelID"); + $query->execute([':levelID' => $level["levelID"]]); + $sharecount = $query->rowCount() + 1; + $addcp = $deservedcp / $sharecount; + $shares = $query->fetchAll(); + foreach($shares as &$share) $people[$share["userID"]] += $addcp; + $people[$level["userID"]] += $addcp; + } + /* + Creator Points for levels in Map Packs + */ + $query = $db->prepare("SELECT levels FROM mappacks"); + $query->execute(); + $result = $query->fetchAll(); + foreach($result AS &$pack) { + $query = $db->prepare("SELECT userID FROM levels WHERE levelID IN (".$pack['levels'].")"); + $query->execute(); + $levels = $query->fetch(); + foreach($levels AS &$level) $people[$level["userID"]] += 1; + } + /* + Creator Points for levels in Gauntlets + */ + $query = $db->prepare("SELECT level1, level2, level3, level4, level5 FROM gauntlets"); + $query->execute(); + $result = $query->fetchAll(); + foreach($result AS &$gauntlet) { + for($x = 1; $x < 6; $x++) { + $query = $db->prepare("SELECT userID FROM levels WHERE levelID = :levelID"); + $query->execute([':levelID' => $gauntlet["level".$x]]); + $result = $query->fetch(); + if($result) $people[$result["userID"]] += 1; + } + } + /* + Creator Points for Daily/Weekly levels + */ + $query = $db->prepare("SELECT levelID FROM dailyfeatures WHERE timestamp < :time"); + $query->execute([':time' => time()]); + $result = $query->fetchAll(); + foreach($result AS &$daily) { + $query = $db->prepare("SELECT userID, levelID FROM levels WHERE levelID = :levelID"); + $query->execute([':levelID' => $daily["levelID"]]); + $result = $query->fetch(); + if($result) $people[$result["userID"]] += 1; + } + /* + Creator Points for Event levels + */ + $query = $db->prepare("SELECT levelID FROM events WHERE timestamp < :time"); + $query->execute([':time' => time()]); + $result = $query->fetchAll(); + foreach($result AS &$event) { + $query = $db->prepare("SELECT userID, levelID FROM levels WHERE levelID = :levelID"); + $query->execute([':levelID' => $event["levelID"]]); + $result = $query->fetch(); + if($result) $people[$result["userID"]] += 1; + } + /* + Done + */ + foreach($people AS $user => $cp) { + $query4 = $db->prepare("UPDATE users SET creatorPoints = (creatorpoints + :creatorpoints) WHERE userID = :userID"); + $query4->execute([':userID' => $user, ':creatorpoints' => $cp]); + } + $gs->logAction($accountID, 40); + return true; + } + public static function fixUsernames($accountID, $checkForTime) { + require __DIR__."/connection.php"; + require_once __DIR__."/mainLib.php"; + $gs = new mainLib(); + if($checkForTime) { + $check = $db->prepare("SELECT count(*) FROM actions WHERE type = 41 AND timestamp >= :timestamp"); + $check->execute([':timestamp' => time() - 30]); + $check = $check->fetchColumn(); + if($check) return false; + } + $query = $db->prepare("UPDATE users + INNER JOIN accounts ON accounts.accountID = users.extID + SET users.userName = accounts.userName + WHERE users.extID REGEXP '^-?[0-9]+$' + AND LENGTH(accounts.userName) <= 69"); + $query->execute(); + $gs->logAction($accountID, 41); + return true; + } + public static function updateFriendsCount($accountID, $checkForTime) { + require __DIR__."/connection.php"; + require_once __DIR__."/mainLib.php"; + $gs = new mainLib(); + if($checkForTime) { + $check = $db->prepare("SELECT count(*) FROM actions WHERE type = 42 AND timestamp >= :timestamp"); + $check->execute([':timestamp' => time() - 30]); + $check = $check->fetchColumn(); + if($check) return false; + } + $query = $db->prepare("UPDATE accounts + LEFT JOIN + ( + SELECT a.person, (IFNULL(a.friends, 0) + IFNULL(b.friends, 0)) AS friends FROM ( + SELECT count(*) as friends, person1 AS person FROM friendships GROUP BY(person1) + ) AS a + JOIN + ( + SELECT count(*) as friends, person2 AS person FROM friendships GROUP BY(person2) + ) AS b ON a.person = b.person + ) calculated + ON accounts.accountID = calculated.person + SET accounts.friendsCount = IFNULL(calculated.friends, 0)"); + $query->execute(); + $gs->logAction($accountID, 42); + return true; + } + public static function miscFixes($accountID, $checkForTime) { + require __DIR__."/connection.php"; + require_once __DIR__."/mainLib.php"; + $gs = new mainLib(); + if($checkForTime) { + $check = $db->prepare("SELECT count(*) FROM actions WHERE type = 43 AND timestamp >= :timestamp"); + $check->execute([':timestamp' => time() - 30]); + $check = $check->fetchColumn(); + if($check) return false; + } + /* + Unbanning everyone who has expired ban + */ + $bans = $db->prepare('UPDATE bans SET isActive = 0 WHERE expires < :time'); + $bans->execute([':time' => time()]); + /* + Unbanning IPs + */ + $getIPBans = $db->prepare("SELECT person FROM bans WHERE personType = 2 AND banType = 4 AND isActive = 0"); + $getIPBans->execute(); + $getIPBans = $getIPBans->fetchAll(); + $IPBans = []; + foreach($getIPBans AS &$ban) { + $IPBans[] = $gs->IPForBan($ban['person'], true); + } + $bannedIPsString = implode("|", $IPBans); + $unbanIPs = $db->prepare('DELETE FROM bannedips WHERE IP REGEXP "'.$bannedIPsString.'"'); + $unbanIPs->execute(); + $gs->logAction($accountID, 43); + return true; + } + public static function updateSongsUsage($accountID, $checkForTime) { + require __DIR__."/connection.php"; + require_once __DIR__."/mainLib.php"; + $gs = new mainLib(); + if($checkForTime) { + $check = $db->prepare("SELECT count(*) FROM actions WHERE type = 44 AND timestamp >= :timestamp"); + $check->execute([':timestamp' => time() - 30]); + $check = $check->fetchColumn(); + if($check) return false; + } + $query = $db->prepare("SELECT songID, songIDs, sfxIDs FROM levels"); + $query->execute(); + $levels = $query->fetchAll(); + $songsUsage = $sfxsUsage = []; + /* + Count songs and SFXs usage + */ + $songsLibrary = json_decode(file_get_contents(__DIR__.'/../../music/ids.json'), true) ?: []; + $sfxsLibrary = json_decode(file_get_contents(__DIR__.'/../../sfx/ids.json'), true) ?: []; + foreach($levels AS &$level) { + $mainSong = $gs->getSongInfo($level['songID'], "*", $songsLibrary); + if($mainSong && $mainSong['isLocalSong']) $songsUsage[$mainSong['ID']]++; + $extraSongs = explode(',', $level['songIDs']); + foreach($extraSongs AS &$song) { + if(empty($song)) continue; + $extraSong = $gs->getSongInfo($song, "*", $songsLibrary); + if($extraSong && $extraSong['isLocalSong']) $songsUsage[$extraSong['ID']]++; + } + $extraSFXs = explode(',', $level['sfxIDs']); + foreach($extraSFXs AS &$sfx) { + if(empty($sfx)) continue; + $extraSFX = $gs->getLibrarySongInfo($sfx, 'sfx', $sfxsLibrary); + if($extraSFX && $extraSFX['isLocalSFX']) $sfxsUsage[$extraSFX['originalID']]++; + } + } + /* + Add this info to SQL + */ + $db->query("UPDATE songs SET levelsCount = 0"); + $db->query("UPDATE sfxs SET levelsCount = 0"); + foreach($songsUsage AS $song => $usage) { + $addInfo = $db->prepare("UPDATE songs SET levelsCount = :usage WHERE ID = :songID"); + $addInfo->execute([':usage' => $usage, ':songID' => $song]); + } + foreach($sfxsUsage AS $sfx => $usage) { + $addInfo = $db->prepare("UPDATE sfxs SET levelsCount = :usage WHERE ID = :sfxID"); + $addInfo->execute([':usage' => $usage, ':sfxID' => $sfx]); + } + $gs->logAction($accountID, 44, count($songsUsage), count($sfxsUsage)); + return true; + } + public static function doEverything($accountID, $checkForTime) { + if( + !self::autoban($accountID, $checkForTime) || + !self::updateCreatorPoints($accountID, $checkForTime) || + !self::fixUsernames($accountID, $checkForTime) || + !self::updateFriendsCount($accountID, $checkForTime) || + !self::miscFixes($accountID, $checkForTime) || + !self::updateSongsUsage($accountID, $checkForTime) + ) return false; + return true; + } +} +?> diff --git a/incl/lib/exploitPatch.php b/incl/lib/exploitPatch.php index 3b7f45441..09a1460a8 100644 --- a/incl/lib/exploitPatch.php +++ b/incl/lib/exploitPatch.php @@ -1,17 +1,49 @@ '-', '/' => '_']); + } + public static function prepare_for_checking($string) { + $string = self::charclean(strtolower(self::translit($string))); + $lettersToReplace = ['0', '1', '3', '@', 'l', '4', '7', '6', '5']; + $replaceLetters = ['o', 'i', 'e', 'a', 'i', 'a', 't', 'g', 's']; + return str_replace(' ', '', mb_ereg_replace('([А-Яа-яA-Za-z0-9 ])\1+', '\1', str_replace($lettersToReplace, $replaceLetters, $string))); + } + public static function translit($string) { + require_once __DIR__.'/../../config/translit/Translit.php'; + return \ashtokalo\translit\Translit::object()->convert(str_replace(['Ё', 'ё'], ['YO', 'yo'], $string), 'ru,uk,mk,be,bg,kk,ka,hy,el,cyrillic,latin'); + } + public static function gd_escape($string) { + return strtr(self::rucharclean($string), ':#', ';N'); + } } } -?> +?> \ No newline at end of file diff --git a/incl/lib/generateHash.php b/incl/lib/generateHash.php index 2f419ef69..9b51fca92 100644 --- a/incl/lib/generateHash.php +++ b/incl/lib/generateHash.php @@ -1,13 +1,7 @@ prepare("SELECT ID,stars,coins FROM mappacks WHERE ID = :id"); - $query->execute([':id' => $id]); - $result2 = $query->fetchAll(); - $result = $result2[0]; - $idstring = strval($result["ID"]); - $hash = $hash . $idstring[0].$idstring[strlen($idstring)-1].$result["stars"].$result["coins"]; + foreach($lvlsmultistring as $result) { + $result["ID"] = strval($result["ID"]); + $hash = $hash . $result["ID"][0].$result["ID"][strlen($result["ID"])-1].$result["stars"].$result["coins"]; } return sha1($hash . "xI25fpAapCQg"); } @@ -61,4 +49,4 @@ public static function genSeed2noXor($levelstring) { return $hash; } } -?> +?> \ No newline at end of file diff --git a/incl/lib/generatePass.php b/incl/lib/generatePass.php index eb4ffa7b0..b3f93df05 100644 --- a/incl/lib/generatePass.php +++ b/incl/lib/generatePass.php @@ -1,8 +1,6 @@ prepare("UPDATE accounts SET gjp2 = :gjp2 WHERE accountID = :id"); $query->execute(["gjp2" => self::GJP2hash($pass), ":id" => $accid]); } public static function attemptsFromIP() { - include dirname(__FILE__)."/connection.php"; + require __DIR__."/connection.php"; $gs = new mainLib(); $ip = $gs->getIP(); $newtime = time() - (60*60); - $query6 = $db->prepare("SELECT count(*) FROM actions WHERE type = '6' AND timestamp > :time AND value2 = :ip"); + $query6 = $db->prepare("SELECT count(*) FROM actions WHERE type = '6' AND timestamp > :time AND IP = :ip"); $query6->execute([':time' => $newtime, ':ip' => $ip]); return $query6->fetchColumn(); } @@ -32,100 +29,130 @@ public static function tooManyAttemptsFromIP() { return self::attemptsFromIP() > 7; } - public static function logInvalidAttemptFromIP($accid) { - include dirname(__FILE__)."/connection.php"; + public static function logInvalidAttemptFromIP($accountID) { + require __DIR__."/connection.php"; $gs = new mainLib(); - $ip = $gs->getIP(); - $query6 = $db->prepare("INSERT INTO actions (type, value, timestamp, value2) VALUES - ('6',:accid,:time,:ip)"); - $query6->execute([':accid' => $accid, ':time' => time(), ':ip' => $ip]); + $gs->logAction($accountID, 6, $accountID); } public static function assignModIPs($accountID, $ip) { //this system is most likely going to be removed altogether soon - include dirname(__FILE__)."/connection.php"; + require __DIR__."/connection.php"; $gs = new mainLib(); $modipCategory = $gs->getMaxValuePermission($accountID, "modipCategory"); - if($modipCategory > 0){ //modIPs + if($modipCategory > 0) { //modIPs $query4 = $db->prepare("SELECT count(*) FROM modips WHERE accountID = :id"); $query4->execute([':id' => $accountID]); - if ($query4->fetchColumn() > 0) { - $query6 = $db->prepare("UPDATE modips SET IP=:hostname, modipCategory=:modipCategory WHERE accountID=:id"); - }else{ - $query6 = $db->prepare("INSERT INTO modips (IP, accountID, isMod, modipCategory) VALUES (:hostname,:id,'1',:modipCategory)"); - } + if($query4->fetchColumn() > 0) $query6 = $db->prepare("UPDATE modips SET IP = :hostname, modipCategory = :modipCategory WHERE accountID = :id"); + else $query6 = $db->prepare("INSERT INTO modips (IP, accountID, isMod, modipCategory) VALUES (:hostname, :id, '1', :modipCategory)"); $query6->execute([':hostname' => $ip, ':id' => $accountID, ':modipCategory' => $modipCategory]); } } public static function isGJP2Valid($accid, $gjp2) { - include dirname(__FILE__)."/connection.php"; + require __DIR__."/connection.php"; $gs = new mainLib(); - - if(self::tooManyAttemptsFromIP()) return -1; - - $userInfo = $db->prepare("SELECT gjp2, isActive FROM accounts WHERE accountID = :accid"); + if(self::tooManyAttemptsFromIP()) return '-1'; + $userInfo = $db->prepare("SELECT userName, gjp2, isActive FROM accounts WHERE accountID = :accid"); $userInfo->execute([':accid' => $accid]); - if($userInfo->rowCount() == 0) return 0; - $userInfo = $userInfo->fetch(); - if(!($userInfo['gjp2'])) return -2; - + if(!$userInfo) { + self::logInvalidAttemptFromIP(0); + return 0; + } + if(!$userInfo['gjp2']) return '-2'; if(password_verify($gjp2, $userInfo['gjp2'])) { + $checkBan = $gs->getPersonBan($accid, $gs->getUserID($accid, $userInfo['userName']), 4); + if($checkBan) return '-1'; self::assignModIPs($accid, $gs->getIP()); - return $userInfo['isActive'] ? 1 : -2; + if($userInfo['isActive']) { + self::updateLastPlayed($accid); + return 1; + } + return '-2'; } else { self::logInvalidAttemptFromIP($accid); return 0; } - } public static function isGJP2ValidUsrname($userName, $gjp2) { - include dirname(__FILE__)."/connection.php"; + require __DIR__."/connection.php"; $query = $db->prepare("SELECT accountID FROM accounts WHERE userName LIKE :userName"); $query->execute([':userName' => $userName]); - if($query->rowCount() == 0){ - return 0; - } + if($query->rowCount() == 0) return 0; $result = $query->fetch(); $accID = $result["accountID"]; return self::isGJP2Valid($accID, $gjp2); - } public static function isValid($accid, $pass) { - include dirname(__FILE__)."/connection.php"; + require __DIR__."/connection.php"; $gs = new mainLib(); - - if(self::tooManyAttemptsFromIP()) return -1; - - $query = $db->prepare("SELECT accountID, salt, password, isActive, gjp2 FROM accounts WHERE accountID = :accid"); + if(self::tooManyAttemptsFromIP()) return '-1'; + $query = $db->prepare("SELECT userName, accountID, salt, password, isActive, gjp2 FROM accounts WHERE accountID = :accid"); $query->execute([':accid' => $accid]); - if($query->rowCount() == 0) return 0; - + if($query->rowCount() == 0) { + self::logInvalidAttemptFromIP(0); + return 0; + } $result = $query->fetch(); - if(password_verify($pass, $result["password"])){ + if(password_verify($pass, $result["password"])) { if(!$result["gjp2"]) self::assignGJP2($accid, $pass); + $checkBan = $gs->getPersonBan($accid, $gs->getUserID($accid, $result['userName']), 4); + if($checkBan) { + self::logInvalidAttemptFromIP($accid); + return -1; + } self::assignModIPs($accid, $gs->getIP()); - return $result['isActive'] ? 1 : -2; + if($result['isActive']) { + self::updateLastPlayed($accid); + return 1; + } + return '-2'; } else { // Code to validate password hashes created prior to March 2017 has been removed. self::logInvalidAttemptFromIP($accid); return 0; } - } + public static function isValidUsrname($userName, $pass){ - include dirname(__FILE__)."/connection.php"; + require __DIR__."/connection.php"; $query = $db->prepare("SELECT accountID FROM accounts WHERE userName LIKE :userName"); $query->execute([':userName' => $userName]); - if($query->rowCount() == 0){ - return 0; - } - $result = $query->fetch(); - $accID = $result["accountID"]; + if($query->rowCount() == 0) return 0; + $accID = $query->fetchColumn(); return self::isValid($accID, $pass); } + + public static function isValidToken($auth) { + require __DIR__."/connection.php"; + $gs = new mainLib(); + if(self::tooManyAttemptsFromIP() || empty(trim($auth))) return '-3'; + $query = $db->prepare("SELECT userName, accountID, isActive FROM accounts WHERE auth = :id"); + $query->execute([':id' => $auth]); + $fetch = $query->fetch(); + if(!$fetch) { + self::logInvalidAttemptFromIP(0); + return '-4'; + } else { + $userID = $gs->getUserID($fetch['accountID'], $fetch['userName']); + $checkBan = $gs->getPersonBan($fetch['accountID'], $userID, 4); + if($checkBan) { + self::logInvalidAttemptFromIP($fetch['accountID']); + return '-1'; + } + self::updateLastPlayed($fetch['accountID']); + if(!$fetch['isActive']) return '-2'; + return ['accountID' => $fetch['accountID'], 'userID' => $userID, 'userName' => $fetch['userName'], 'color' => $gs->getAccountCommentColor($fetch["accountID"])]; + } + } + + public static function updateLastPlayed($accountID) { + require __DIR__."/connection.php"; + $update = $db->prepare("UPDATE users SET lastPlayed = :time WHERE extID = :accountID"); + $update->execute([':accountID' => $accountID, ':time' => time()]); + } } ?> \ No newline at end of file diff --git a/incl/lib/ipCheck.php b/incl/lib/ipCheck.php new file mode 100644 index 000000000..7309f70a9 --- /dev/null +++ b/incl/lib/ipCheck.php @@ -0,0 +1,142 @@ +ipv4inrange($ip, $cf_ip)) { + return true; + } + } + foreach ($cf_ipv6s as $cf_ip) { + if ($this->ipv6_in_range($ip, $cf_ip)) { + return true; + } + } + return false; + } + public function getYourIP() { + if (isset($_SERVER['HTTP_CF_CONNECTING_IP']) && $this->isCloudFlareIP($_SERVER['REMOTE_ADDR'])) //CLOUDFLARE REVERSE PROXY SUPPORT + return $_SERVER['HTTP_CF_CONNECTING_IP']; + if(isset($_SERVER['HTTP_X_FORWARDED_FOR']) && $this->ipv4inrange($_SERVER['REMOTE_ADDR'], '127.0.0.0/8')) //LOCALHOST REVERSE PROXY SUPPORT (7m.pl) + return $_SERVER['HTTP_X_FORWARDED_FOR']; + if(isset($_SERVER['HTTP_X_FORWARDED_FOR']) && $_SERVER['REMOTE_ADDR'] == "10.0.1.10") // 141412 PROXY SUPPORT FUCK YOU HESTIA + return explode(",", $_SERVER['HTTP_X_FORWARDED_FOR'])[0]; // fuck my life + return $_SERVER['REMOTE_ADDR']; + } + public function checkProxy() { + require __DIR__."/../../config/security.php"; + if(!isset($blockFreeProxies)) global $blockFreeProxies; + if(!isset($proxies)) global $proxies; + if(!$blockFreeProxies) return; + $fileExists = file_exists(__DIR__ .'/../../config/proxies.txt'); + $lastUpdate = $fileExists ? filemtime(__DIR__ .'/../../config/proxies.txt') : 0; + $checkTime = time() - 3600; + $allProxies = ''; + if($checkTime > $lastUpdate) { + foreach($proxies AS $link) { + $ch = curl_init($link); + if($proxytype > 0) { + curl_setopt($ch, CURLOPT_PROXY, $host); + if($proxytype == 2) curl_setopt($ch, CURLOPT_PROXYTYPE, CURLPROXY_SOCKS5); + if(!empty($auth)) curl_setopt($ch, CURLOPT_PROXYUSERPWD, $auth); + } + curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); + curl_setopt($ch, CURLOPT_PROTOCOLS, CURLPROTO_HTTP | CURLPROTO_HTTPS); + curl_setopt($ch, CURLOPT_USERAGENT, ""); + $IPs = curl_exec($ch); + $proxy = preg_split('/\r\n|\r|\n/', $IPs); + foreach($proxy AS $ip) $allProxies .= explode(':', $ip)[0].PHP_EOL; + } + file_put_contents(__DIR__ .'/../../config/proxies.txt', $allProxies); + } + if(empty($allProxies)) $allProxies = file(__DIR__ .'/../../config/proxies.txt', FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES); + else $allProxies = explode(PHP_EOL, $allProxies); + if(in_array($this->getYourIP(), $allProxies)) { + http_response_code(404); + exit; + } + } + public function checkVPN() { + require __DIR__."/../../config/security.php"; + require __DIR__."/../../config/proxy.php"; + if(!isset($blockCommonVPNs)) global $blockCommonVPNs; + if(!isset($vpns)) global $vpns; + if(!$blockCommonVPNs) return; + $fileExists = file_exists(__DIR__ .'/../../config/vpns.txt'); + $lastUpdate = $fileExists ? filemtime(__DIR__ .'/../../config/vpns.txt') : 0; + $checkTime = time() - 3600; + $allVPNs = ''; + if($checkTime > $lastUpdate) { + foreach($vpns AS $link) { + $ch = curl_init($link); + if($proxytype > 0) { + curl_setopt($ch, CURLOPT_PROXY, $host); + if($proxytype == 2) curl_setopt($ch, CURLOPT_PROXYTYPE, CURLPROXY_SOCKS5); + if(!empty($auth)) curl_setopt($ch, CURLOPT_PROXYUSERPWD, $auth); + } + curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); + curl_setopt($ch, CURLOPT_PROTOCOLS, CURLPROTO_HTTP | CURLPROTO_HTTPS); + curl_setopt($ch, CURLOPT_USERAGENT, ""); + $IPs = curl_exec($ch); + $allVPNs .= $IPs.PHP_EOL; + } + file_put_contents(__DIR__ .'/../../config/vpns.txt', $allVPNs); + } + if(empty($allVPNs)) $allVPNs = file(__DIR__ .'/../../config/vpns.txt', FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES); + else $allVPNs = explode(PHP_EOL, $allVPNs); + foreach($allVPNs AS &$vpnCheck) { + if($this->ipv4inrange($this->getYourIP(), $vpnCheck)) { + http_response_code(404); + exit; + } + } + } + public function checkIP() { + global $db; + $this->checkProxy(); + $this->checkVPN(); + $banip = $db->prepare("SELECT count(*) FROM bannedips WHERE IP = :ip"); + $banip->execute([':ip' => $this->getYourIP()]); + $banip = $banip->fetchColumn(); + if($banip > 0) { + http_response_code(404); + exit; + } + } +} +?> diff --git a/incl/lib/ip_in_range.php b/incl/lib/ip_in_range.php index 1a128d1aa..440ea29d7 100644 --- a/incl/lib/ip_in_range.php +++ b/incl/lib/ip_in_range.php @@ -34,16 +34,6 @@ */ class ipInRange { - - - // decbin32 - // In order to simplify working with IP addresses (in binary) and their - // netmasks, it is easier to ensure that the binary strings are padded - // with zeros out to 32 characters - IP addresses are 32 bit numbers - public static function decbin32 ($dec) { - return str_pad(decbin($dec), 32, '0', STR_PAD_LEFT); - } - // ipv4_in_range // This function takes 2 arguments, an IP address and a "range" in several // different formats. @@ -156,7 +146,7 @@ public static function get_ipv6_full($ip) // Rebuild the final long form IPV6 address $final_ip = implode(":", $main_ip_pieces); - return ip2long6($final_ip); + return self::ip2long6($final_ip); } @@ -207,8 +197,8 @@ public static function ipv6_in_range($ip, $range_ip) } // Rebuild the final long form IPV6 address - $first = ip2long6(implode(":", $first)); - $last = ip2long6(implode(":", $last)); + $first = self::ip2long6(implode(":", $first)); + $last = self::ip2long6(implode(":", $last)); $in_range = ($ip >= $first && $ip <= $last); return $in_range; diff --git a/incl/lib/mainLib.php b/incl/lib/mainLib.php index 817c2ac3c..1ca2c44a3 100644 --- a/incl/lib/mainLib.php +++ b/incl/lib/mainLib.php @@ -1,8 +1,9 @@ = count($songs)) - return "Unknown by DJVI"; + "Monster Dance Off by F-777", + "Press Start by MDK", + "Nock Em by Bossfight", + "Power Trip by Boom Kitty" + ]; + if($id === -1) return "Practice: Stay Inside Me by OcularNebula"; + if($id < 0 || $id >= count($songs)) return "Unknown by DJVI"; return $songs[$id]; } - public function getDifficulty($diff,$auto,$demon) { - if($auto != 0){ - return "Auto"; - }else if($demon != 0){ - return "Demon"; - }else{ - switch($diff){ + public function getDifficulty($diff, $auto, $demon, $demonDiff = 1) { + if($auto != 0) return "Auto"; + if($demon != 0) { + switch($demonDiff) { + case 0: + return 'Hard Demon'; + break; + case 3: + return 'Easy Demon'; + break; + case 4: + return 'Medium Demon'; + break; + case 5: + return 'Insane Demon'; + break; + case 6: + return 'Extreme Demon'; + break; + default: + return 'Demon'; + break; + } + } else { + switch($diff) { case 0: return "N/A"; break; @@ -110,15 +135,30 @@ public function getDiffFromStars($stars) { $demon = 1; break; default: - $diffname = "N/A: " . $stars; + $diffname = "N/A"; $diff = 0; $demon = 0; break; } return array('diff' => $diff, 'auto' => $auto, 'demon' => $demon, 'name' => $diffname); } + public function getLevelDiff($levelID) { + require __DIR__ . "/connection.php"; + $diff = $db->prepare("SELECT starDifficulty FROM levels WHERE levelID = :id"); + $diff->execute([':id' => $levelID]); + $diff = $diff->fetch(); + $diff = $this->getDifficulty($diff["starDifficulty"], 0, 0); + return $diff; + } + public function getLevelStars($levelID) { + require __DIR__ . "/connection.php"; + $diff = $db->prepare("SELECT starStars FROM levels WHERE levelID = :id"); + $diff->execute([':id' => $levelID]); + $diff = $diff->fetch(); + return $diff["starStars"]; + } public function getLength($length) { - switch($length){ + switch($length) { case 0: return "Tiny"; break; @@ -143,15 +183,20 @@ public function getLength($length) { } } public function getGameVersion($version) { - if($version > 17){ - return $version / 10; - }elseif($version == 11){ - return "1.8"; - }elseif($version == 10){ - return "1.7"; - }else{ - $version--; - return "1.$version"; + switch(true) { + case $version > 17: + return $version / 10; + break; + case $version == 11: + return "1.8"; + break; + case $version == 10: + return "1.0"; + break; + default: + $version--; + return "1.$version"; + break; } } public function getDemonDiff($dmn) { @@ -207,87 +252,54 @@ public function getDiffFromName($name) { } return array($starDifficulty, $starDemon, $starAuto); } - public function getGauntletName($id){ - $gauntlets = ["Unknown", "Fire", "Ice", "Poison", "Shadow", "Lava", "Bonus", "Chaos", "Demon", "Time", "Crystal", "Magic", "Spike", "Monster", "Doom", "Death", 'Forest', 'Rune', 'Force', 'Spooky', 'Dragon', 'Water', 'Haunted', 'Acid', 'Witch', 'Power', 'Potion', 'Snake', 'Toxic', 'Halloween', 'Treasure', 'Ghost', 'Spider', 'Gem', 'Inferno', 'Portal', 'Strange', 'Fantasy', 'Christmas', 'Surprise', 'Mystery', 'Cursed', 'Cyborg', 'Castle', 'Grave', 'Temple', 'World', 'Galaxy', 'Universe', 'Discord', 'Split']; + public function getGauntletName($id, $wholeArray = false){ + $gauntlets = ["Unknown", "Fire", "Ice", "Poison", "Shadow", "Lava", "Bonus", "Chaos", "Demon", "Time", "Crystal", "Magic", "Spike", "Monster", "Doom", "Death", 'Forest', 'Rune', 'Force', 'Spooky', 'Dragon', 'Water', 'Haunted', 'Acid', 'Witch', 'Power', 'Potion', 'Snake', 'Toxic', 'Halloween', 'Treasure', 'Ghost', 'Spider', 'Gem', 'Inferno', 'Portal', 'Strange', 'Fantasy', 'Christmas', 'Surprise', 'Mystery', 'Cursed', 'Cyborg', 'Castle', 'Grave', 'Temple', 'World', 'Galaxy', 'Universe', 'Discord', 'Split', 'NCS I', 'NCS II', 'Space', 'Cosmos']; + if($wholeArray) return $gauntlets; if($id < 0 || $id >= count($gauntlets)) return $gauntlets[0]; return $gauntlets[$id]; } - - function makeTime($delta) - { - if ($delta < 31536000) - { - if ($delta < 2628000) - { - if ($delta < 604800) - { - if ($delta < 86400) - { - if ($delta < 3600) - { - if ($delta < 60) - { - return $delta." second".($delta == 1 ? "" : "s"); - } - else - { - $rounded = floor($delta / 60); - return $rounded." minute".($rounded == 1 ? "" : "s"); - } - } - else - { - $rounded = floor($delta / 3600); - return $rounded." hour".($rounded == 1 ? "" : "s"); - } - } - else - { - $rounded = floor($delta / 86400); - return $rounded." day".($rounded == 1 ? "" : "s"); - } - } - else - { - $rounded = floor($delta / 604800); - return $rounded." week".($rounded == 1 ? "" : "s"); + public function getGauntletCount() { + return count($this->getGauntletName(0, true))-1; + } + public function makeTime($time) { + require __DIR__ . "/../../config/dashboard.php"; + if(!isset($timeType)) $timeType = 0; + switch($timeType) { + case 1: + if(date("d.m.Y", $time) == date("d.m.Y", time())) return date("G;i", $time); + elseif(date("Y", $time) == date("Y", time())) return date("d.m", $time); + else return date("d.m.Y", $time); + break; + case 2: + // taken from https://stackoverflow.com/a/36297417 + $time = time() - $time; + $time = ($time < 1) ? 1 : $time; + $tokens = array (31536000 => 'year', 2592000 => 'month', 604800 => 'week', 86400 => 'day', 3600 => 'hour', 60 => 'minute', 1 => 'second'); + foreach($tokens as $unit => $text) { + if($time < $unit) continue; + $numberOfUnits = floor($time / $unit); + return $numberOfUnits . ' ' . $text . (($numberOfUnits > 1) ? 's' : ''); } - } - else - { - $rounded = floor($delta / 2628000); - return $rounded." month".($rounded == 1 ? "" : "s"); - } - } - else - { - $rounded = floor($delta / 31536000); - return $rounded." year".($rounded == 1 ? "" : "s"); + break; + default: + return date("d/m/Y G.i", $time); + break; } } - public function getIDFromPost(){ - include __DIR__ . "/../../config/security.php"; - include_once __DIR__ . "/exploitPatch.php"; - include_once __DIR__ . "/GJPCheck.php"; - - if(!empty($_POST["udid"]) AND $_POST['gameVersion'] < 20 AND $unregisteredSubmissions) - { + public function getIDFromPost() { + require __DIR__ . "/../../config/security.php"; + require_once __DIR__ . "/exploitPatch.php"; + require_once __DIR__ . "/GJPCheck.php"; + if(!empty($_POST["udid"]) && $unregisteredSubmissions) { $id = ExploitPatch::remove($_POST["udid"]); if(is_numeric($id)) exit("-1"); - } - elseif(!empty($_POST["accountID"]) AND $_POST["accountID"]!="0") - { - $id = GJPCheck::getAccountIDOrDie(); - } - else - { - exit("-1"); - } + } elseif(!empty($_POST["accountID"]) AND $_POST["accountID"] !="0") $id = GJPCheck::getAccountIDOrDie(); + else exit("-1"); return $id; } public function getUserID($extID, $userName = "Undefined") { - include __DIR__ . "/connection.php"; + require __DIR__ . "/connection.php"; if(is_numeric($extID)){ $register = 1; }else{ @@ -298,29 +310,29 @@ public function getUserID($extID, $userName = "Undefined") { if ($query->rowCount() > 0) { $userID = $query->fetchColumn(); } else { - $query = $db->prepare("INSERT INTO users (isRegistered, extID, userName, lastPlayed) - VALUES (:register, :id, :userName, :uploadDate)"); - - $query->execute([':id' => $extID, ':register' => $register, ':userName' => $userName, ':uploadDate' => time()]); + $query = $db->prepare("INSERT INTO users (isRegistered, extID, userName, lastPlayed, IP) + VALUES (:register, :id, :userName, :uploadDate, :IP)"); + $ip = $this->getIP(); + $query->execute([':id' => $extID, ':register' => $register, ':userName' => $userName, ':uploadDate' => time(), ':IP' => $ip]); $userID = $db->lastInsertId(); } return $userID; } public function getAccountName($accountID) { - if(!is_numeric($accountID)) return false; - - include __DIR__ . "/connection.php"; - $query = $db->prepare("SELECT userName FROM accounts WHERE accountID = :id"); - $query->execute([':id' => $accountID]); - if ($query->rowCount() > 0) { + require __DIR__ . "/connection.php"; + if(is_numeric($accountID)) { + $query = $db->prepare("SELECT userName FROM accounts WHERE accountID = :id"); + $query->execute([':id' => $accountID]); $userName = $query->fetchColumn(); } else { - $userName = false; + $query = $db->prepare("SELECT userName FROM users WHERE extID = :id"); + $query->execute([':id' => $accountID]); + $userName = $query->fetchColumn(); } return $userName; } public function getUserName($userID) { - include __DIR__ . "/connection.php"; + require __DIR__ . "/connection.php"; $query = $db->prepare("SELECT userName FROM users WHERE userID = :id"); $query->execute([':id' => $userID]); if ($query->rowCount() > 0) { @@ -331,7 +343,7 @@ public function getUserName($userID) { return $userName; } public function getAccountIDFromName($userName) { - include __DIR__ . "/connection.php"; + require __DIR__ . "/connection.php"; $query = $db->prepare("SELECT accountID FROM accounts WHERE userName LIKE :usr"); $query->execute([':usr' => $userName]); if ($query->rowCount() > 0) { @@ -342,7 +354,7 @@ public function getAccountIDFromName($userName) { return $accountID; } public function getExtID($userID) { - include __DIR__ . "/connection.php"; + require __DIR__ . "/connection.php"; $query = $db->prepare("SELECT extID FROM users WHERE userID = :id"); $query->execute([':id' => $userID]); if ($query->rowCount() > 0) { @@ -352,33 +364,116 @@ public function getExtID($userID) { } } public function getUserString($userdata) { - include __DIR__ . "/connection.php"; - /*$query = $db->prepare("SELECT userName, extID FROM users WHERE userID = :id"); - $query->execute([':id' => $userID]); - $userdata = $query->fetch();*/ + $userdata['userName'] = $this->makeClanUsername($userdata); $extID = is_numeric($userdata['extID']) ? $userdata['extID'] : 0; - return "${userdata['userID']}:${userdata['userName']}:${extID}"; + return "{$userdata['userID']}:{$userdata["userName"]}:{$extID}"; } public function getSongString($song){ - include __DIR__ . "/connection.php"; - /*$query3=$db->prepare("SELECT ID,name,authorID,authorName,size,isDisabled,download FROM songs WHERE ID = :songid LIMIT 1"); - $query3->execute([':songid' => $songID]);*/ - if($song['ID'] == 0 || empty($song['ID'])){ - return false; - } - //$song = $query3->fetch(); - if($song["isDisabled"] == 1){ - return false; + require __DIR__ . "/connection.php"; + require_once __DIR__ . "/exploitPatch.php"; + $librarySong = false; + $extraSongString = ''; + if(!isset($song['ID'])) { + $librarySong = true; + $song = $this->getLibrarySongInfo($song['songID']); } + if(!$song || $song['ID'] == 0 || empty($song['ID']) || $song["isDisabled"] == 1) return false; $dl = $song["download"]; if(strpos($dl, ':') !== false){ $dl = urlencode($dl); } - return "1~|~".$song["ID"]."~|~2~|~".str_replace("#", "", $song["name"])."~|~3~|~".$song["authorID"]."~|~4~|~".$song["authorName"]."~|~5~|~".$song["size"]."~|~6~|~~|~10~|~".$dl."~|~7~|~~|~8~|~1"; + if($librarySong) { + $artistsNames = []; + $artistsArray = explode('.', $song['artists']); + if(count($artistsArray) > 0) { + foreach($artistsArray AS &$artistID) { + $artistData = $this->getLibrarySongAuthorInfo($artistID); + if(!$artistData) continue; + $artistsNames[] = $artistID; + $artistsNames[] = $artistData['name']; + } + } + $artistsNames = implode(',', $artistsNames); + $extraSongString = '~|~9~|~'.$song['priorityOrder'].'~|~11~|~'.$song['ncs'].'~|~12~|~'.$song['artists'].'~|~13~|~'.($song['new'] ? 1 : 0).'~|~14~|~'.$song['new'].'~|~15~|~'.$artistsNames; + } + return "1~|~".$song["ID"]."~|~2~|~".ExploitPatch::translit(str_replace("#", "", $song["name"]))."~|~3~|~".$song["authorID"]."~|~4~|~".ExploitPatch::translit($song["authorName"])."~|~5~|~".$song["size"]."~|~6~|~~|~10~|~".$dl."~|~7~|~~|~8~|~1".$extraSongString; + } + public function getSongInfo($id, $column = "*", $library = false) { + if(!is_numeric($id)) return; + require __DIR__ . "/connection.php"; + $sinfo = $db->prepare("SELECT $column FROM songs WHERE ID = :id"); + $sinfo->execute([':id' => $id]); + $sinfo = $sinfo->fetch(); + if(empty($sinfo)) { + $sinfo = $this->getLibrarySongInfo($id, 'music', $library); + if(!$sinfo) return false; + else { + if($column != "*") return $sinfo[$column]; + else return array("isLocalSong" => false, "ID" => $sinfo["ID"], "name" => $sinfo["name"], "authorName" => $sinfo["authorName"], "size" => $sinfo["size"], "duration" => $sinfo["duration"], "download" => $sinfo["download"], "reuploadTime" => $sinfo["reuploadTime"], "reuploadID" => $sinfo["reuploadID"]); + } + } else { + if($column != "*") return $sinfo[$column]; + else return array("isLocalSong" => true, "ID" => $sinfo["ID"], "name" => $sinfo["name"], "authorName" => $sinfo["authorName"], "size" => $sinfo["size"], "duration" => $sinfo["duration"], "download" => $sinfo["download"], "reuploadTime" => $sinfo["reuploadTime"], "reuploadID" => $sinfo["reuploadID"]); + } + } + public function getSFXInfo($id, $column = "*") { + if(!is_numeric($id)) return; + require __DIR__ . "/connection.php"; + $sinfo = $db->prepare("SELECT $column FROM sfxs WHERE ID = :id"); + $sinfo->execute([':id' => $id]); + $sinfo = $sinfo->fetch(); + if(empty($sinfo)) return false; + else { + if($column != "*") return $sinfo[$column]; + else return array("ID" => $sinfo["ID"], "name" => $sinfo["name"], "authorName" => $sinfo["authorName"], "size" => $sinfo["size"], "download" => $sinfo["download"], "reuploadTime" => $sinfo["reuploadTime"], "reuploadID" => $sinfo["reuploadID"]); + } + } + public function getClanInfo($clan, $column = "*") { + global $dashCheck; + if(!is_numeric($clan) || $dashCheck === 'no') return false; + require __DIR__ . "/connection.php"; + $claninfo = $db->prepare("SELECT $column FROM clans WHERE ID = :id"); + $claninfo->execute([':id' => $clan]); + $claninfo = $claninfo->fetch(); + if(empty($claninfo)) return false; + else { + if($column != "*") { + if($column != "clan" AND $column != "desc" AND $column != "tag") return $claninfo[$column]; + else return base64_decode($claninfo[$column]); + } + else return array("ID" => $claninfo["ID"], "clan" => base64_decode($claninfo["clan"]), "tag" => base64_decode($claninfo["tag"]), "desc" => base64_decode($claninfo["desc"]), "clanOwner" => $claninfo["clanOwner"], "color" => $claninfo["color"], "isClosed" => $claninfo["isClosed"], "creationDate" => $claninfo["creationDate"]); + } + } + public function getClanID($clan) { + global $dashCheck; + if($dashCheck === 'no') return false; + require __DIR__ . "/connection.php"; + $claninfo = $db->prepare("SELECT ID FROM clans WHERE clan = :id"); + $claninfo->execute([':id' => base64_encode($clan)]); + $claninfo = $claninfo->fetch(); + return $claninfo["ID"]; + } + public function isPlayerInClan($id) { + global $dashCheck; + if(!is_numeric($id) || $dashCheck === 'no') return false; + require __DIR__ . "/connection.php"; + $claninfo = $db->prepare("SELECT clan FROM users WHERE extID = :id"); + $claninfo->execute([':id' => $id]); + $claninfo = $claninfo->fetch(); + if(!empty($claninfo)) return $claninfo["clan"]; + else return false; } - public function sendDiscordPM($receiver, $message){ - include __DIR__ . "/../../config/discord.php"; - if(!$discordEnabled){ + public function isPendingRequests($clan) { + global $dashCheck; + if(!is_numeric($clan) || $dashCheck === 'no') return false; + require __DIR__ . "/connection.php"; + $claninfo = $db->prepare("SELECT count(*) FROM clanrequests WHERE clanID = :id"); + $claninfo->execute([':id' => $clan]); + return $claninfo->fetchColumn(); + } + public function sendDiscordPM($receiver, $message, $json = false){ + require __DIR__ . "/../../config/discord.php"; + if(!$discordEnabled) { return false; } //findind the channel id @@ -409,7 +504,8 @@ public function sendDiscordPM($receiver, $message){ $headr = array(); $headr['User-Agent'] = 'GMDprivateServer (https://github.com/Cvolton/GMDprivateServer, 1.0)'; curl_setopt($crl, CURLOPT_CUSTOMREQUEST, "POST"); - curl_setopt($crl, CURLOPT_POSTFIELDS, $data_string); + if(!$json) curl_setopt($crl, CURLOPT_POSTFIELDS, $data_string); + else curl_setopt($crl, CURLOPT_POSTFIELDS, $message); $headr[] = 'Content-type: application/json'; $headr[] = 'Authorization: Bot '.$bottoken; curl_setopt($crl, CURLOPT_HTTPHEADER,$headr); @@ -420,7 +516,7 @@ public function sendDiscordPM($receiver, $message){ return $response; } public function getDiscordAcc($discordID){ - include __DIR__ . "/../../config/discord.php"; + require __DIR__ . "/../../config/discord.php"; ///getting discord acc info $url = "https://discord.com/api/v8/users/".$discordID; $crl = curl_init($url); @@ -435,7 +531,56 @@ public function getDiscordAcc($discordID){ curl_close($crl); $userinfo = json_decode($response, true); //var_dump($userinfo); - return $userinfo["username"] . "#" . $userinfo["discriminator"]; + if($userinfo["discriminator"] != "0") $userinfo["discriminator"] = '#'.$userinfo["discriminator"]; + else $userinfo["discriminator"] = ''; + return $userinfo["username"].$userinfo["discriminator"]; + } + public function getDesc($lid, $dashboard = false) { + require __DIR__ . "/connection.php"; + require __DIR__ . "/exploitPatch.php"; + $desc = $db->prepare("SELECT levelDesc FROM levels WHERE levelID = :id"); + $desc->execute([':id' => $lid]); + $desc = $desc->fetch(); + if(empty($desc["levelDesc"])) return !$dashboard ? '*This level doesn\'t have description*' : ''.$dl->getLocalizedString("unlistedMod").'
++ '.$levels.' +This level doesn\'t have description '; + else return ExploitPatch::url_base64_decode($desc["levelDesc"]); + } + public function getLevelName($lid) { + require __DIR__ . "/connection.php"; + $desc = $db->prepare("SELECT levelName FROM levels WHERE levelID = :id"); + $desc->execute([':id' => $lid]); + $desc = $desc->fetch(); + if(!empty($desc["levelName"])) return $desc["levelName"]; else return false; + } + public function getLevelStats($lid) { + require __DIR__ . "/connection.php"; + $info = $db->prepare("SELECT downloads, likes, requestedStars FROM levels WHERE levelID = :id"); + $info->execute([':id' => $lid]); + $info = $info->fetch(); + $likes = $info["likes"]; // - $info["dislikes"]; + if(!empty($info)) return array('dl' => $info["downloads"], 'likes' => $likes, 'req' => $info["requestedStars"]); + } + public function getLevelAuthor($lid) { + require __DIR__ . "/connection.php"; + $desc = $db->prepare("SELECT extID FROM levels WHERE levelID = :id"); + $desc->execute([':id' => $lid]); + $desc = $desc->fetch(); + return $desc["extID"]; + } + public function isRated($lid) { + require __DIR__ . "/connection.php"; + $desc = $db->prepare("SELECT starStars FROM levels WHERE levelID = :id"); + $desc->execute([':id' => $lid]); + $desc = $desc->fetch(); + if($desc["starStars"] == 0) return false; + else return true; + } + public function hasDiscord($acc) { + require __DIR__ . "/connection.php"; + $ds = $db->prepare("SELECT discordID, discordLinkReq FROM accounts WHERE accountID = :id"); + $ds->execute([':id' => $acc]); + $ds = $ds->fetch(); + if($ds["discordID"] != 0 AND $ds["discordLinkReq"] == 0) return $ds["discordID"]; + else return false; } public function randomString($length = 6) { $randomString = openssl_random_pseudo_bytes($length); @@ -452,7 +597,7 @@ public function randomString($length = 6) { return $randomString; } public function getAccountsWithPermission($permission){ - include __DIR__ . "/connection.php"; + require __DIR__ . "/connection.php"; $query = $db->prepare("SELECT roleID FROM roles WHERE $permission = 1 ORDER BY priority DESC"); $query->execute(); $result = $query->fetchAll(); @@ -470,7 +615,7 @@ public function getAccountsWithPermission($permission){ public function checkPermission($accountID, $permission){ if(!is_numeric($accountID)) return false; - include __DIR__ . "/connection.php"; + require __DIR__ . "/connection.php"; //isAdmin check $query = $db->prepare("SELECT isAdmin FROM accounts WHERE accountID = :accountID"); $query->execute([':accountID' => $accountID]); @@ -482,6 +627,7 @@ public function checkPermission($accountID, $permission){ $query = $db->prepare("SELECT roleID FROM roleassign WHERE accountID = :accountID"); $query->execute([':accountID' => $accountID]); $roleIDarray = $query->fetchAll(); + if(empty($roleIDarray)) return false; $roleIDlist = ""; foreach($roleIDarray as &$roleIDobject){ $roleIDlist .= $roleIDobject["roleID"] . ","; @@ -512,8 +658,8 @@ public function checkPermission($accountID, $permission){ return false; } public function isCloudFlareIP($ip) { - $cf_ips = array( - '173.245.48.0/20', + $cf_ipv4s = array( + '173.245.48.0/20', '103.21.244.0/22', '103.22.200.0/22', '103.31.4.0/22', @@ -529,10 +675,20 @@ public function isCloudFlareIP($ip) { '172.64.0.0/13', '131.0.72.0/22' ); - foreach ($cf_ips as $cf_ip) { - if (ipInRange::ipv4_in_range($ip, $cf_ip)) { - return true; - } + $cf_ipv6s = array( + '2400:cb00::/32', + '2606:4700::/32', + '2803:f800::/32', + '2405:b500::/32', + '2405:8100::/32', + '2a06:98c0::/29', + '2c0f:f248::/32' + ); + foreach($cf_ipv4s as $cf_ip) { + if(ipInRange::ipv4_in_range($ip, $cf_ip)) return true; + } + foreach($cf_ipv6s as $cf_ip) { + if(ipInRange::ipv6_in_range($ip, $cf_ip)) return true; } return false; } @@ -541,10 +697,12 @@ public function getIP(){ return $_SERVER['HTTP_CF_CONNECTING_IP']; if(isset($_SERVER['HTTP_X_FORWARDED_FOR']) && ipInRange::ipv4_in_range($_SERVER['REMOTE_ADDR'], '127.0.0.0/8')) //LOCALHOST REVERSE PROXY SUPPORT (7m.pl) return $_SERVER['HTTP_X_FORWARDED_FOR']; + if(isset($_SERVER['HTTP_X_FORWARDED_FOR']) && $_SERVER['REMOTE_ADDR'] == "10.0.1.10") // 141412 PROXY SUPPORT FUCK YOU HESTIA + return explode(",", $_SERVER['HTTP_X_FORWARDED_FOR'])[0]; // fuck my life return $_SERVER['REMOTE_ADDR']; } public function checkModIPPermission($permission){ - include __DIR__ . "/connection.php"; + require __DIR__ . "/connection.php"; $ip = $this->getIP(); $query=$db->prepare("SELECT modipCategory FROM modips WHERE IP = :ip"); $query->execute([':ip' => $ip]); @@ -565,7 +723,7 @@ public function checkModIPPermission($permission){ public function getFriends($accountID){ if(!is_numeric($accountID)) return false; - include __DIR__ . "/connection.php"; + require __DIR__ . "/connection.php"; $friendsarray = array(); $query = "SELECT person1,person2 FROM friendships WHERE person1 = :accountID OR person2 = :accountID"; //selecting friendships $query = $db->prepare($query); @@ -589,7 +747,7 @@ public function getFriends($accountID){ public function isFriends($accountID, $targetAccountID) { if(!is_numeric($accountID) || !is_numeric($targetAccountID)) return false; - include __DIR__ . "/connection.php"; + require __DIR__ . "/connection.php"; $query = $db->prepare("SELECT count(*) FROM friendships WHERE person1 = :accountID AND person2 = :targetAccountID OR person1 = :targetAccountID AND person2 = :accountID"); $query->execute([':accountID' => $accountID, ':targetAccountID' => $targetAccountID]); return $query->fetchColumn() > 0; @@ -597,7 +755,7 @@ public function isFriends($accountID, $targetAccountID) { public function getMaxValuePermission($accountID, $permission){ if(!is_numeric($accountID)) return false; - include __DIR__ . "/connection.php"; + require __DIR__ . "/connection.php"; $maxvalue = 0; $query = $db->prepare("SELECT roleID FROM roleassign WHERE accountID = :accountID"); $query->execute([':accountID' => $accountID]); @@ -621,8 +779,7 @@ public function getMaxValuePermission($accountID, $permission){ } public function getAccountCommentColor($accountID){ if(!is_numeric($accountID)) return false; - - include __DIR__ . "/connection.php"; + require __DIR__ . "/connection.php"; $query = $db->prepare("SELECT roleID FROM roleassign WHERE accountID = :accountID"); $query->execute([':accountID' => $accountID]); $roleIDarray = $query->fetchAll(); @@ -647,88 +804,89 @@ public function getAccountCommentColor($accountID){ return $query->fetchColumn(); return "255,255,255"; } - public function rateLevel($accountID, $levelID, $stars, $difficulty, $auto, $demon){ + public function rateLevel($accountID, $levelID, $stars, $difficulty, $auto, $demon) { if(!is_numeric($accountID)) return false; - - include __DIR__ . "/connection.php"; - //lets assume the perms check is done properly before + require __DIR__ . "/connection.php"; + require __DIR__ . "/../../config/misc.php"; + require_once __DIR__ . "/cron.php"; + $diffName = $this->getDiffFromStars($stars)["name"]; $query = "UPDATE levels SET starDemon=:demon, starAuto=:auto, starDifficulty=:diff, starStars=:stars, rateDate=:now WHERE levelID=:levelID"; $query = $db->prepare($query); $query->execute([':demon' => $demon, ':auto' => $auto, ':diff' => $difficulty, ':stars' => $stars, ':levelID'=>$levelID, ':now' => time()]); - $query = $db->prepare("INSERT INTO modactions (type, value, value2, value3, timestamp, account) VALUES ('1', :value, :value2, :levelID, :timestamp, :id)"); - $query->execute([':value' => $this->getDiffFromStars($stars)["name"], ':timestamp' => time(), ':id' => $accountID, ':value2' => $stars, ':levelID' => $levelID]); - - + $query->execute([':value' => $diffName, ':timestamp' => time(), ':id' => $accountID, ':value2' => $stars, ':levelID' => $levelID]); + $this->sendRateWebhook($accountID, $levelID); + if($automaticCron) Cron::updateCreatorPoints($accountID, false); } public function featureLevel($accountID, $levelID, $state) { if(!is_numeric($accountID)) return false; + require __DIR__ . "/connection.php"; + $query = $db->prepare("SELECT starFeatured FROM levels WHERE levelID=:levelID ORDER BY starFeatured DESC LIMIT 1"); + $query->execute([':levelID' => $levelID]); + $featured = $query->fetchColumn(); + if(!$featured) { + $query = $db->prepare("SELECT starFeatured FROM levels ORDER BY starFeatured DESC LIMIT 1"); + $query->execute(); + $featured = $query->fetchColumn() + 1; + } switch($state) { - case 0: - $feature = 0; - $epic = 0; - break; - case 1: - $feature = 1; - $epic = 0; - break; - case 2: // Stole from TheJulfor - $feature = 1; - $epic = 1; - break; - case 3: - $feature = 1; - $epic = 2; - break; - case 4: - $feature = 1; - $epic = 3; - break; - } - include __DIR__ . "/connection.php"; - $query = "UPDATE levels SET starFeatured=:feature, starEpic=:epic, rateDate=:now WHERE levelID=:levelID"; - $query = $db->prepare($query); + case 0: + $feature = 0; + $epic = 0; + break; + case 1: + case 2: + case 3: + case 4: + $feature = $featured; + $epic = $state - 1; + break; + } + $query = $db->prepare("UPDATE levels SET starFeatured = :feature, starEpic = :epic, rateDate = :now WHERE levelID = :levelID"); $query->execute([':feature' => $feature, ':epic' => $epic, ':levelID' => $levelID, ':now' => time()]); $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('2', :value, :levelID, :timestamp, :id)"); $query->execute([':value' => $state, ':timestamp' => time(), ':id' => $accountID, ':levelID' => $levelID]); } - public function verifyCoinsLevel($accountID, $levelID, $coins){ + public function verifyCoinsLevel($accountID, $levelID, $coins) { if(!is_numeric($accountID)) return false; - - include __DIR__ . "/connection.php"; + require __DIR__ . "/connection.php"; $query = "UPDATE levels SET starCoins=:coins WHERE levelID=:levelID"; $query = $db->prepare($query); $query->execute([':coins' => $coins, ':levelID'=>$levelID]); - $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('3', :value, :levelID, :timestamp, :id)"); $query->execute([':value' => $coins, ':timestamp' => time(), ':id' => $accountID, ':levelID' => $levelID]); } - public function songReupload($url){ + public function songReupload($url, $author, $name, $accountID) { require __DIR__ . "/../../incl/lib/connection.php"; require_once __DIR__ . "/../../incl/lib/exploitPatch.php"; $song = str_replace("www.dropbox.com","dl.dropboxusercontent.com",$url); - if (filter_var($song, FILTER_VALIDATE_URL) == TRUE && substr($song, 0, 4) == "http") { + if(filter_var($song, FILTER_VALIDATE_URL) == TRUE && substr($song, 0, 4) == "http") { $song = str_replace(["?dl=0","?dl=1"],"",$song); $song = trim($song); - $query = $db->prepare("SELECT count(*) FROM songs WHERE download = :download"); + $query = $db->prepare("SELECT ID FROM songs WHERE download = :download"); $query->execute([':download' => $song]); - $count = $query->fetchColumn(); - if($count != 0){ - return "-3"; + $count = $query->fetch(); + if(!empty($count)){ + return "-3".$count["ID"]; } - $name = ExploitPatch::remove(urldecode(str_replace([".mp3",".webm",".mp4",".wav"], "", basename($song)))); - $author = "Reupload"; + $freeID = false; + while(!$freeID) { + $db_fid = rand(99, 7999999); + $checkID = $db->prepare('SELECT count(*) FROM songs WHERE ID = :id'); // If randomized ID picks existing song ID + $checkID->execute([':id' => $db_fid]); + if($checkID->fetchColumn() == 0) $freeID = true; + } + if(empty($name)) $name = ExploitPatch::remove(urldecode(str_replace([".mp3",".webm",".mp4",".wav"], "", basename($song)))); + if(empty($author)) $author = "Reupload"; $info = $this->getFileInfo($song); - $size = $info['size']; - if(substr($info['type'], 0, 6) != "audio/") - return "-4"; - $size = round($size / 1024 / 1024, 2); + $size = round($info['size'] / 1024 / 1024, 2); + if(substr($info['type'], 0, 6) != "audio/" || $size == 0 || $size == '-0') return "-4"; $hash = ""; - $query = $db->prepare("INSERT INTO songs (name, authorID, authorName, size, download, hash) - VALUES (:name, '9', :author, :size, :download, :hash)"); - $query->execute([':name' => $name, ':download' => $song, ':author' => $author, ':size' => $size, ':hash' => $hash]); - return $db->lastInsertId(); - }else{ + $query = $db->prepare("INSERT INTO songs (ID, name, authorID, authorName, size, download, hash, reuploadTime, reuploadID) + VALUES (:songID, :name, '9', :author, :size, :download, :hash, :time, :accountID)"); + $query->execute([':songID' => $db_fid, ':name' => $name, ':download' => $song, ':author' => $author, ':size' => $size, ':hash' => $hash, ':time' => time(), ':accountID' => $accountID]); + return $db_fid; + } else { return "-2"; } } @@ -747,38 +905,2161 @@ public function getFileInfo($url){ curl_close($ch); return ['size' => $size, 'type' => $mime]; } - public function suggestLevel($accountID, $levelID, $difficulty, $stars, $feat, $auto, $demon){ + public function suggestLevel($accountID, $levelID, $difficulty, $stars, $feat, $auto, $demon) { if(!is_numeric($accountID)) return false; - - include __DIR__ . "/connection.php"; - $query = "INSERT INTO suggest (suggestBy, suggestLevelID, suggestDifficulty, suggestStars, suggestFeatured, suggestAuto, suggestDemon, timestamp) VALUES (:account, :level, :diff, :stars, :feat, :auto, :demon, :timestamp)"; - $query = $db->prepare($query); + require __DIR__ . "/connection.php"; + $query = $db->prepare("INSERT INTO suggest (suggestBy, suggestLevelID, suggestDifficulty, suggestStars, suggestFeatured, suggestAuto, suggestDemon, timestamp) VALUES (:account, :level, :diff, :stars, :feat, :auto, :demon, :timestamp)"); $query->execute([':account' => $accountID, ':level' => $levelID, ':diff' => $difficulty, ':stars' => $stars, ':feat' => $feat, ':auto' => $auto, ':demon' => $demon, ':timestamp' => time()]); + $query = $db->prepare("INSERT INTO modactions (type, value, value3, account, timestamp) VALUES ('41', :value, :value3, :id, :timestamp)"); + $query->execute([':value' => $stars, ':value3' => $levelID, ':id' => $accountID, ':timestamp' => time()]); + $this->sendSuggestWebhook($accountID, $levelID, $difficulty, $stars, $feat, $auto, $demon); + } + public function removeSuggestedLevel($accountID, $levelID) { + if(!is_numeric($accountID)) return false; + require __DIR__ . "/connection.php"; + $query = $db->prepare("DELETE FROM suggest WHERE suggestLevelId = :levelID"); + $query->execute([':levelID' => $levelID]); + $query = $db->prepare("INSERT INTO modactions (type, value, value3, timestamp, account) VALUES ('40', :value, :levelID, :timestamp, :id)"); + $query->execute([':value' => "1", ':timestamp' => time(), ':id' => $accountID, ':levelID' => $levelID]); + } + public function isUnlisted($levelID) { + require __DIR__."/connection.php"; + $query = $db->prepare("SELECT count(*) FROM levels WHERE unlisted > 0 AND levelID = :id"); + $query->execute([':id' => $levelID]); + $query = $query->fetch(); + if(!empty($query)) return true; + else return false; } public function getListOwner($listID) { if(!is_numeric($listID)) return false; - include __DIR__ . "/connection.php"; + require __DIR__ . "/connection.php"; $query = $db->prepare('SELECT accountID FROM lists WHERE listID = :id'); $query->execute([':id' => $listID]); return $query->fetchColumn(); } public function getListLevels($listID) { if(!is_numeric($listID)) return false; - include __DIR__ . "/connection.php"; + require __DIR__ . "/connection.php"; $query = $db->prepare('SELECT listlevels FROM lists WHERE listID = :id'); $query->execute([':id' => $listID]); return $query->fetchColumn(); } public function getListDiffName($diff) { - if($diff == -1) return 'N/A'; $diffs = ['Auto', 'Easy', 'Normal', 'Hard', 'Harder', 'Extreme', 'Easy Demon', 'Medium Demon', 'Hard Demon', 'Insane Demon', 'Extreme Demon']; + if($diff == -1 || $diff >= count($diffs)) return 'N/A'; return $diffs[$diff]; } public function getListName($listID) { if(!is_numeric($listID)) return false; - include __DIR__ . "/connection.php"; + require __DIR__ . "/connection.php"; $query = $db->prepare('SELECT listName FROM lists WHERE listID = :id'); $query->execute([':id' => $listID]); return $query->fetchColumn(); } + public function makeClanUsername($user) { + require __DIR__ . "/../../config/dashboard.php"; + if($clansEnabled && $user['clan'] > 0 && !isset($_REQUEST['noClan'])) { + $clan = $this->getClanInfo($user['clan'], 'tag'); + if(!empty($clan)) return '['.$clan.'] '.$user['userName']; + } + return $user['userName']; + } + public function updateLibraries($token, $expires, $mainServerTime, $type = 0) { + require __DIR__ . "/../../config/dashboard.php"; + $servers = []; + $types = ['sfx', 'music']; + if(!isset($customLibrary)) $customLibrary = [[1, 'Geometry Dash', 'https://geometrydashfiles.b-cdn.net'], [3, $gdps, null]]; + foreach($customLibrary AS $library) { + if(($types[$type] == 'sfx' AND $library[3] === 1) OR ($types[$type] == 'music' AND $library[3] === 0)) continue; + if($library[2] !== null) { + $servers['s'.$library[0]] = $library[2]; + } + } + $updatedLib = false; + foreach($servers AS $key => &$server) { + if($types[$type] == 'music') { + $versionUrl = $server.'/'.$types[$type].'/'.$types[$type].'library_version_02.txt'; + $dataUrl = $server.'/'.$types[$type].'/'.$types[$type].'library_02.dat'; + } else { + $versionUrl = $server.'/'.$types[$type].'/'.$types[$type].'library_version.txt'; + $dataUrl = $server.'/'.$types[$type].'/'.$types[$type].'library.dat'; + } + if(file_exists(__DIR__.'/../../'.$types[$type].'/'.$key.'.txt')) $oldVersion = explode(', ', file_get_contents(__DIR__.'/../../'.$types[$type].'/'.$key.'.txt')); + else $oldVersion = [0, 0]; + if($oldVersion[1] + 600 > time()) continue; // Download library only once per 10 minutes + $curl = curl_init($versionUrl.'?token='.$token.'&expires='.$expires); + curl_setopt_array($curl, [ + CURLOPT_PROTOCOLS => CURLPROTO_HTTP | CURLPROTO_HTTPS, + CURLOPT_RETURNTRANSFER => 1, + CURLOPT_FOLLOWLOCATION => 1 + ]); + $newVersion = (int)curl_exec($curl); + curl_close($curl); + if($newVersion > $oldVersion[0]) { + file_put_contents(__DIR__.'/../../'.$types[$type].'/'.$key.'.txt', $newVersion.', '.time()); + $download = curl_init($dataUrl.'?token='.$token.'&expires='.$expires.'&dashboard=1'); + curl_setopt_array($download, [ + CURLOPT_PROTOCOLS => CURLPROTO_HTTP | CURLPROTO_HTTPS, + CURLOPT_RETURNTRANSFER => 1, + CURLOPT_FOLLOWLOCATION => 1 + ]); + $dat = curl_exec($download); + $resultStatus = curl_getinfo($download, CURLINFO_HTTP_CODE); + curl_close($download); + if($resultStatus == 200) { + file_put_contents(__DIR__.'/../../'.$types[$type].'/'.$key.'.dat', $dat); + $updatedLib = true; + } + } + } + // Now this server's version check + if(file_exists(__DIR__.'/../../'.$types[$type].'/gdps.txt')) $oldVersion = file_get_contents(__DIR__.'/../../'.$types[$type].'/gdps.txt'); + else { + $oldVersion = 0; + file_put_contents(__DIR__.'/../../'.$types[$type].'/gdps.txt', $mainServerTime); + } + if($oldVersion < $mainServerTime || $updatedLib) $this->generateDATFile($mainServerTime, $type); + } + public function generateDATFile($mainServerTime, $type = 0) { + require __DIR__ . "/connection.php"; + require __DIR__ . "/exploitPatch.php"; + require __DIR__ . "/../../config/dashboard.php"; + $library = $servers = $serverIDs = $serverTypes = []; + if(!isset($customLibrary)) $customLibrary = [[1, 'Geometry Dash', 'https://geometrydashfiles.b-cdn.net', 2], [3, $gdps, null, 2]]; + $types = ['sfx', 'music']; + foreach($customLibrary AS $customLib) { + if($customLib[2] !== null) { + $servers['s'.$customLib[0]] = $customLib[0]; + } + $serverIDs[$customLib[2]] = $customLib[0]; + if($types[$type] == 'sfx') { + $library['folders'][($customLib[0] + 1)] = [ + 'name' => ExploitPatch::escapedat($customLib[1]), + 'type' => 1, + 'parent' => 1 + ]; + } else { + $library['tags'][$customLib[0]] = [ + 'ID' => $customLib[0], + 'name' => ExploitPatch::escapedat($customLib[1]), + ]; + } + } + if(file_exists(__DIR__.'/../../'.$types[$type].'/ids.json')) $idsConverter = json_decode(file_get_contents(__DIR__.'/../../'.$types[$type].'/ids.json'), true); + else $idsConverter = ['count' => ($type == 0 ? count($customLibrary) + 2 : 8000000), 'IDs' => [], 'originalIDs' => []]; + if(file_exists(__DIR__.'/../../config/skipSFXIDs.json')) $skipSFXIDs = json_decode(file_get_contents(__DIR__.'/../../config/skipSFXIDs.json'), true); + else $skipSFXIDs = []; + foreach($servers AS $key => $server) { + if(!file_exists(__DIR__.'/../../'.$types[$type].'/'.$key.'.dat')) continue; + $res = null; + $bits = null; + $res = file_get_contents(__DIR__.'/../../'.$types[$type].'/'.$key.'.dat'); + $res = mb_convert_encoding($res, 'UTF-8', 'UTF-8'); + try { + $res = ExploitPatch::url_base64_decode($res); + $res = zlib_decode($res); + } catch(Exception $e) { + unlink(__DIR__.'/../../'.$types[$type].'/'.$key.'.dat'); + continue; + } + $res = explode('|', $res); + if(!$type) { + for($i = 0; $i < count($res); $i++) { // SFX library decoding was made by MigMatos, check their ObeyGDBot! https://obeybd.web.app/ + $res[$i] = explode(';', $res[$i]); + if($i === 0) { + $library['version'] = $mainServerTime; + $version = explode(',', $res[0][0]); + $version[1] = $mainServerTime; + $version = implode(',', $version); + } + for($j = 1; $j <= count($res[$i]); $j++) { + $bits = explode(',', $res[$i][$j]); + switch($i) { + case 0: // File/Folder + if(empty(trim($bits[1])) || empty($bits[0]) || !is_numeric($bits[0])) break; + if(empty($idsConverter['originalIDs'][$server][$bits[0]])) { + $idsConverter['count']++; + while(in_array($idsConverter['count'], $skipSFXIDs)) $idsConverter['count']++; + $idsConverter['IDs'][$idsConverter['count']] = ['server' => $server, 'ID' => $bits[0], 'name' => $bits[1], 'type' => $bits[2]]; + $idsConverter['originalIDs'][$server][$bits[0]] = $idsConverter['count']; + $bits[0] = $idsConverter['count']; + } else { + $bits[0] = $idsConverter['originalIDs'][$server][$bits[0]]; + if(!isset($idsConverter['IDs'][$bits[0]]['name'])) $idsConverter['IDs'][$bits[0]] = ['server' => $server, 'ID' => $bits[0], 'name' => $bits[1], 'type' => $bits[2]]; + } + if($bits[3] != 1) { + if(empty($idsConverter['originalIDs'][$server][$bits[3]])) { + $idsConverter['count']++; + while(in_array($idsConverter['count'], $skipSFXIDs)) $idsConverter['count']++; + $idsConverter['IDs'][$idsConverter['count']] = ['server' => $server, 'ID' => $bits[3], 'name' => $bits[1], 'type' => 1]; + $idsConverter['originalIDs'][$server][$bits[3]] = $idsConverter['count']; + $bits[3] = $idsConverter['count']; + } else $bits[3] = $idsConverter['originalIDs'][$server][$bits[3]]; + } else $bits[3] = $server + 1; + if($bits[2]) { + $library['folders'][$bits[0]] = [ + 'name' => ExploitPatch::escapedat($bits[1]), + 'type' => (int)$bits[2], + 'parent' => (int)$bits[3] + ]; + } else { + $library['files'][$bits[0]] = [ + 'name' => ExploitPatch::escapedat($bits[1]), + 'type' => (int)$bits[2], + 'parent' => (int)$bits[3], + 'bytes' => (int)$bits[4], + 'milliseconds' => (int)$bits[5], + ]; + } + break; + case 1: // Credit + if(empty(trim($bits[0])) || empty(trim($bits[1]))) continue 2; + $library['credits'][ExploitPatch::escapedat($bits[0])] = [ + 'name' => ExploitPatch::escapedat($bits[0]), + 'website' => ExploitPatch::escapedat($bits[1]), + ]; + break; + } + } + } + } else { + $version = $mainServerTime; + array_shift($res); + $x = 0; + foreach($res AS &$data) { + $data = rtrim($data, ';'); + $music = explode(';', $data); + foreach($music AS &$songString) { + $song = explode(',', $songString); + $originalID = $song[0]; + if(empty($song[0]) || !is_numeric($song[0])) continue; + if(empty($idsConverter['originalIDs'][$server][$song[0]])) { + $idsConverter['count']++; + $idsConverter['IDs'][$idsConverter['count']] = ['server' => $server, 'ID' => $song[0], 'type' => $x]; + $idsConverter['originalIDs'][$server][$song[0]] = $idsConverter['count']; + $song[0] = $idsConverter['count']; + } else $song[0] = $idsConverter['originalIDs'][$server][$song[0]]; + switch($x) { + case 0: + $idsConverter['IDs'][$song[0]] = $library['authors'][$song[0]] = [ + 'server' => $server, + 'type' => $x, + 'originalID' => $originalID, + 'authorID' => $song[0], + 'name' => ExploitPatch::escapedat($song[1]), + 'link' => ExploitPatch::escapedat($song[2]), + 'yt' => ExploitPatch::escapedat($song[3]) + ]; + break; + case 1: + if(empty($idsConverter['originalIDs'][$server][$song[2]])) { + $idsConverter['count']++; + $idsConverter['IDs'][$idsConverter['count']] = ['server' => $server, 'ID' => $song[2], 'type' => $x]; + $idsConverter['originalIDs'][$server][$song[2]] = $idsConverter['count']; + $song[2] = $idsConverter['count']; + } else $song[2] = $idsConverter['originalIDs'][$server][$song[2]]; + $tags = explode('.', $song[5]); + $newTags = []; + foreach($tags AS &$tag) { + if(empty($tag)) continue; + if(empty($idsConverter['originalIDs'][$server][$tag])) { + $idsConverter['count']++; + $idsConverter['IDs'][$idsConverter['count']] = ['server' => $server, 'ID' => $tag, 'type' => 2]; + $idsConverter['originalIDs'][$server][$tag] = $idsConverter['count']; + $tag = $idsConverter['count']; + } else $tag = $idsConverter['originalIDs'][$server][$tag]; + $newTags[] = $tag; + } + $newTags[] = $server; + $tags = '.'.implode('.', $newTags).'.'; + $newArtists = []; + $artists = explode('.', $song[7]); + foreach($artists AS &$artist) { + if(empty($artist)) continue; + if(empty($idsConverter['originalIDs'][$server][$artist])) { + $idsConverter['count']++; + $idsConverter['IDs'][$idsConverter['count']] = ['server' => $server, 'ID' => $artist, 'type' => 0]; + $idsConverter['originalIDs'][$server][$artist] = $idsConverter['count']; + $artist = $idsConverter['count']; + } else $artist = $idsConverter['originalIDs'][$server][$artist]; + $newArtists[] = $artist; + } + $artists = implode('.', $newArtists); + $idsConverter['IDs'][$song[0]] = $library['songs'][$song[0]] = [ + 'server' => $server, + 'type' => $x, + 'originalID' => $originalID, + 'ID' => $song[0], + 'name' => ExploitPatch::escapedat($song[1]), + 'authorID' => $song[2], + 'size' => $song[3], + 'seconds' => $song[4], + 'tags' => $tags, + 'ncs' => $song[6] ?: 0, + 'artists' => $artists, + 'externalLink' => $song[8] ?: '', + 'new' => $song[9] ?: 0, + 'priorityOrder' => $song[10] ?: 0 + ]; + break; + case 2: + $idsConverter['IDs'][$song[0]] = $library['tags'][$song[0]] = [ + 'server' => $server, + 'type' => $x, + 'originalID' => $originalID, + 'ID' => $song[0], + 'name' => ExploitPatch::escapedat($song[1]) + ]; + break; + } + } + $x++; + } + } + } + if(!$type) { + $sfxs = $db->prepare("SELECT sfxs.*, accounts.userName FROM sfxs JOIN accounts ON accounts.accountID = sfxs.reuploadID"); + $sfxs->execute(); + $sfxs = $sfxs->fetchAll(); + $folderID = $gdpsLibrary = []; + $server = $serverIDs[null]; + foreach($sfxs AS &$customSFX) { + if(!isset($folderID[$customSFX['reuploadID']])) { + if(empty($idsConverter['originalIDs'][$server][$customSFX['reuploadID']])) { + $idsConverter['count']++; + $idsConverter['IDs'][$idsConverter['count']] = ['server' => $server, 'ID' => $customSFX['ID'], 'name' => $customSFX['userName'].'\'s SFXs', 'type' => 1]; + $idsConverter['originalIDs'][$server][$customSFX['reuploadID']] = $idsConverter['count']; + $newID = $idsConverter['count']; + } else $newID = $idsConverter['originalIDs'][$server][$customSFX['reuploadID']]; + $library['folders'][$newID] = [ + 'name' => ExploitPatch::escapedat($customSFX['userName']).'\'s SFXs', + 'type' => 1, + 'parent' => (int)($server + 1) + ]; + $gdpsLibrary['folders'][$newID] = [ + 'name' => ExploitPatch::escapedat($customSFX['userName']).'\'s SFXs', + 'type' => 1, + 'parent' => 1 + ]; + $folderID[$customSFX['reuploadID']] = true; + } + if(empty($idsConverter['originalIDs'][$server][$customSFX['ID'] + 8000000])) { + $idsConverter['count']++; + $idsConverter['IDs'][$idsConverter['count']] = ['server' => $server, 'ID' => $customSFX['ID'], 'name' => $customSFX['name'], 'type' => 0]; + $idsConverter['originalIDs'][$server][$customSFX['ID'] + 8000000] = $idsConverter['count']; + $customSFX['ID'] = $idsConverter['count']; + } else $customSFX['ID'] = $idsConverter['originalIDs'][$server][$customSFX['ID'] + 8000000]; + $library['files'][$customSFX['ID']] = $gdpsLibrary['files'][$customSFX['ID']] = [ + 'name' => ExploitPatch::escapedat($customSFX['name']), + 'type' => 0, + 'parent' => (int)$idsConverter['originalIDs'][$server][$customSFX['reuploadID']], + 'bytes' => (int)$customSFX['size'], + 'milliseconds' => (int)($customSFX['milliseconds'] / 10) + ]; + } + $filesEncrypted = $creditsEncrypted = []; + foreach($library['folders'] AS $id => &$folder) $filesEncrypted[] = implode(',', [$id, $folder['name'], 1, $folder['parent'], 0, 0]); + foreach($library['files'] AS $id => &$file) $filesEncrypted[] = implode(',', [$id, $file['name'], 0, $file['parent'], $file['bytes'], $file['milliseconds']]); + foreach($library['credits'] AS &$credit) $creditsEncrypted[] = implode(',', [$credit['name'], $credit['website']]); + $encrypted = $version.";".implode(';', $filesEncrypted)."|" .implode(';', $creditsEncrypted).';'; + $filesEncrypted = $creditsEncrypted = []; + foreach($gdpsLibrary['folders'] AS $id => &$folder) $filesEncrypted[] = implode(',', [$id, $folder['name'], 1, $folder['parent'], 0, 0]); + foreach($gdpsLibrary['files'] AS $id => &$file) $filesEncrypted[] = implode(',', [$id, $file['name'], 0, $file['parent'], $file['bytes'], $file['milliseconds']]); + $creditsEncrypted[] = implode(',', [$gdps, $_SERVER['SERVER_NAME']]); + $gdpsEncrypted = $version.";".implode(';', $filesEncrypted)."|" .implode(';', $creditsEncrypted).';'; + } else { + $songs = $db->prepare("SELECT songs.*, accounts.userName FROM songs JOIN accounts ON accounts.accountID = songs.reuploadID WHERE isDisabled = 0"); + $songs->execute(); + $songs = $songs->fetchAll(); + $folderID = $accIDs = $gdpsLibrary = []; + $c = 100; + foreach($songs AS &$customSongs) { + $c++; + $authorName = trim(ExploitPatch::rucharclean(ExploitPatch::escapedat(ExploitPatch::translit($customSongs['authorName'])), 40)); + if(empty($authorName)) $authorName = 'Reupload'; + if(empty($folderID[$authorName])) { + $folderID[$authorName] = $c; + $library['authors'][$serverIDs[null]. 0 .$folderID[$authorName]] = $gdpsLibrary['authors'][$serverIDs[null]. 0 .$folderID[$authorName]] = [ + 'authorID' => (int)($serverIDs[null]. 0 .$folderID[$authorName]), + 'name' => $authorName, + 'link' => ' ', + 'yt' => ' ' + ]; + } + if(empty($accIDs[$customSongs['reuploadID']])) { + $c++; + $accIDs[$customSongs['reuploadID']] = $c; + $library['tags'][$serverIDs[null]. 0 .$accIDs[$customSongs['reuploadID']]] = $gdpsLibrary['tags'][$serverIDs[null]. 0 .$accIDs[$customSongs['reuploadID']]] = [ + 'ID' => (int)($serverIDs[null]. 0 .$accIDs[$customSongs['reuploadID']]), + 'name' => ExploitPatch::rucharclean(ExploitPatch::escapedat($customSongs['userName']), 30), + ]; + } + $customSongs['name'] = trim(ExploitPatch::rucharclean(ExploitPatch::escapedat(ExploitPatch::translit($customSongs['name'])), 40)); + $library['songs'][$customSongs['ID']] = $gdpsLibrary['songs'][$customSongs['ID']] = [ + 'ID' => ($customSongs['ID']), + 'name' => !empty($customSongs['name']) ? $customSongs['name'] : 'Unnamed', + 'authorID' => (int)($serverIDs[null]. 0 .$folderID[$authorName]), + 'size' => $customSongs['size'] * 1024 * 1024, + 'seconds' => $customSongs['duration'], + 'tags' => '.'.$serverIDs[null].'.'.$serverIDs[null]. 0 .$accIDs[$customSongs['reuploadID']].'.', + 'ncs' => 0, + 'artists' => '', + 'externalLink' => urlencode($customSongs['download']), + 'new' => ($customSongs['reuploadTime'] > time() - 604800 ? 1 : 0), + 'priorityOrder' => 0 + ]; + } + $authorsEncrypted = $songsEncrypted = $tagsEncrypted = []; + foreach($library['authors'] AS &$authorList) { + unset($authorList['server']); + unset($authorList['type']); + unset($authorList['originalID']); + $authorsEncrypted[] = implode(',', $authorList); + } + foreach($library['songs'] AS &$songsList) { + unset($songsList['server']); + unset($songsList['type']); + unset($songsList['originalID']); + $songsEncrypted[] = implode(',', $songsList); + } + foreach($library['tags'] AS &$tagsList) { + unset($tagsList['server']); + unset($tagsList['type']); + unset($tagsList['originalID']); + $tagsEncrypted[] = implode(',', $tagsList); + } + $encrypted = $version."|".implode(';', $authorsEncrypted).";|" .implode(';', $songsEncrypted).";|" .implode(';', $tagsEncrypted).';'; + $authorsEncrypted = $songsEncrypted = $tagsEncrypted = []; + foreach($gdpsLibrary['authors'] AS &$authorList) { + unset($authorList['server']); + unset($authorList['type']); + unset($authorList['originalID']); + $authorsEncrypted[] = implode(',', $authorList); + } + foreach($gdpsLibrary['songs'] AS &$songsList) { + unset($songsList['server']); + unset($songsList['type']); + unset($songsList['originalID']); + $songsEncrypted[] = implode(',', $songsList); + } + foreach($gdpsLibrary['tags'] AS &$tagsList) { + unset($tagsList['server']); + unset($tagsList['type']); + unset($tagsList['originalID']); + $tagsEncrypted[] = implode(',', $tagsList); + } + $gdpsEncrypted = $version."|".implode(';', $authorsEncrypted).";|" .implode(';', $songsEncrypted).";|" .implode(';', $tagsEncrypted).';'; + } + file_put_contents(__DIR__.'/../../'.$types[$type].'/ids.json', json_encode($idsConverter, JSON_PRETTY_PRINT | JSON_INVALID_UTF8_IGNORE)); + $encrypted = zlib_encode($encrypted, ZLIB_ENCODING_DEFLATE); + $encrypted = ExploitPatch::url_base64_encode($encrypted); + file_put_contents(__DIR__.'/../../'.$types[$type].'/gdps.dat', $encrypted); + $gdpsEncrypted = zlib_encode($gdpsEncrypted, ZLIB_ENCODING_DEFLATE); + $gdpsEncrypted = ExploitPatch::url_base64_encode($gdpsEncrypted); + file_put_contents(__DIR__.'/../../'.$types[$type].'/standalone.dat', $gdpsEncrypted); + } + public function getAudioDuration($file) { + require_once(__DIR__.'/../../config/getid3/getid3.php'); + $getID3 = new getID3; + $info = $getID3->analyze($file); + $result = (isset($info['playtime_seconds']) ? (int)($info['playtime_seconds']) : false); + return $result; + } + public function convertSFX($file, $server, $name, $token) { + require __DIR__."/../../config/dashboard.php"; + if(!$convertEnabled) return false; + $link = $convertSFXAPI[rand(0, count($convertSFXAPI) - 1)]; + $filePath = $file['tmp_name']; + $type = $file['type']; + $post = [ + 'name' => $name, + 'token' => $token, + 'server' => $server, + 'file' => new CURLFile(realpath($filePath), $type, $filePath) + ]; + $curl = curl_init($link.'/convert'); + curl_setopt_array($curl, [ + CURLOPT_PROTOCOLS => CURLPROTO_HTTP | CURLPROTO_HTTPS, + CURLOPT_RETURNTRANSFER => 1, + CURLOPT_POST => true, + CURLOPT_POSTFIELDS => $post + ]); + $response = json_decode(curl_exec($curl), true); + $result = isset($response['success']) ? $response['success'] : false; + return $result; + } + public function getLibrarySongInfo($id, $type = 'music', $extraLibrary = false) { + require __DIR__."/../../config/dashboard.php"; + if(!file_exists(__DIR__.'/../../'.$type.'/ids.json')) return false; + $servers = $serverIDs = $serverNames = []; + foreach($customLibrary AS $customLib) { + $servers[$customLib[0]] = $customLib[2]; + $serverNames[$customLib[0]] = $customLib[1]; + $serverIDs[$customLib[2]] = $customLib[0]; + } + $library = $extraLibrary ? $extraLibrary : json_decode(file_get_contents(__DIR__.'/../../'.$type.'/ids.json'), true); + if(!isset($library['IDs'][$id]) || ($type == 'music' && $library['IDs'][$id]['type'] != 1)) return false; + if($type == 'music') { + $song = $library['IDs'][$id]; + $author = $library['IDs'][$song['authorID']]; + $token = $this->randomString(11); + $expires = time() + 3600; + $link = $servers[$song['server']].'/music/'.$song['originalID'].'.ogg?token='.$token.'&expires='.$expires; + return ['server' => $song['server'], 'ID' => $id, 'name' => $song['name'], 'authorID' => $song['authorID'], 'authorName' => $author['name'], 'size' => round($song['size'] / 1024 / 1024, 2), 'download' => $link, 'seconds' => $song['seconds'], 'tags' => $song['tags'], 'ncs' => $song['ncs'], 'artists' => $song['artists'], 'externalLink' => $song['externalLink'], 'new' => $song['new'], 'priorityOrder' => $song['priorityOrder']]; + } else { + $SFX = $library['IDs'][$id]; + $token = $this->randomString(11); + $expires = time() + 3600; + $link = $servers[$SFX['server']] != null ? $servers[$SFX['server']].'/sfx/s'.$SFX['ID'].'.ogg?token='.$token.'&expires='.$expires : $this->getSFXInfo($SFX['ID'], 'download'); + return ['isLocalSFX' => $servers[$SFX['server']] == null, 'server' => $SFX['server'], 'ID' => $id, 'name' => $song['name'], 'download' => $link, 'originalID' => $SFX['ID']]; + } + } + public function getLibrarySongAuthorInfo($id) { + require __DIR__."/../../config/dashboard.php"; + if(!file_exists(__DIR__.'/../../music/ids.json')) return false; + $library = json_decode(file_get_contents(__DIR__.'/../../music/ids.json'), true); + if(!isset($library['IDs'][$id])) return false; + return $library['IDs'][$id]; + } + public function sendRateWebhook($modAccID, $levelID) { + require __DIR__."/connection.php"; + if(!class_exists('ExploitPatch')) require_once __DIR__."/exploitPatch.php"; + require __DIR__."/../../config/dashboard.php"; + require __DIR__."/../../config/discord.php"; + if(!$webhooksEnabled OR !is_numeric($levelID) OR !in_array("rate", $webhooksToEnable)) return false; + require_once __DIR__."/../../config/webhooks/DiscordWebhook.php"; + $webhookLangArray = $this->webhookStartLanguage($webhookLanguage); + $dw = new DiscordWebhook($rateWebhook); + $level = $db->prepare('SELECT * FROM levels WHERE levelID = :levelID'); + $level->execute([':levelID' => $levelID]); + $level = $level->fetch(); + if(!$level) return false; + $modUsername = $this->getAccountName($modAccID); + $modHasDiscord = $this->hasDiscord($modAccID); + $modFormattedUsername = $modHasDiscord ? "<@".$modHasDiscord.">" : "**".$modUsername."**"; + $creatorAccID = $level['extID']; + $creatorUsername = $this->getAccountName($creatorAccID); + $creatorHasDiscord = $this->hasDiscord($creatorAccID); + $creatorFormattedUsername = $creatorHasDiscord ? "<@".$creatorHasDiscord.">" : "**".$creatorUsername."**"; + $isRated = $level['starStars'] != 0; + $difficulty = $this->getDifficulty($level['starDifficulty'], $level['starAuto'], $level['starDemon'], $level['starDemonDiff']); + $starsIcon = 'stars'; + $diffIcon = 'na'; + switch(true) { + case ($level['starEpic'] > 0): + $starsArray = ['', 'epic', 'legendary', 'mythic']; + $starsIcon = $starsArray[$level['starEpic']]; + break; + case ($level['starFeatured'] > 0): + $starsIcon = 'featured'; + break; + } + $diffArray = ['n/a' => 'na', 'auto' => 'auto', 'easy' => 'easy', 'normal' => 'normal', 'hard' => 'hard', 'harder' => 'harder', 'insane' => 'insane', 'demon' => 'demon-hard', 'easy demon' => 'demon-easy', 'medium demon' => 'demon-medium', 'hard demon' => 'demon-hard', 'insane demon' => 'demon-insane', 'extreme demon' => 'demon-extreme']; + $diffIcon = $diffArray[strtolower($difficulty)] ?? 'na'; + $originalDiffColorArray = ['na' => 'a9a9a9', 'auto' => 'f5c96b', 'easy' => '00e0ff', 'normal' => '00ff3a', 'hard' => 'ffb438', 'harder' => 'fc1f1f', 'insane' => 'f91ffc', 'demon-easy' => 'aa6bf5', 'demon-medium' => 'ac2974', 'demon-hard' => 'ff0000', 'demon-insane' => 'b31548', 'demon-extreme' => '8e0505']; + $originalDiffColor = $originalDiffColor && empty($successColor); + if($level['starStars'] != 0) { + $setColor = empty($successColor) ? $originalDiffColorArray[$diffIcon] : $successColor; + $setTitle = $this->webhookLanguage('rateSuccessTitle', $webhookLangArray); + $dmTitle = $this->webhookLanguage('rateSuccessTitleDM', $webhookLangArray); + $setDescription = sprintf($this->webhookLanguage('rateSuccessDesc', $webhookLangArray), $modFormattedUsername); + $dmDescription = sprintf($this->webhookLanguage('rateSuccessDescDM', $webhookLangArray), $modFormattedUsername, $tadaEmoji); + $setNotificationText = $rateNotificationText; + } else { + $setColor = $failColor; + $setTitle = $this->webhookLanguage('rateFailTitle', $webhookLangArray); + $dmTitle = $this->webhookLanguage('rateFailTitleDM', $webhookLangArray); + $setDescription = sprintf($this->webhookLanguage('rateFailDesc', $webhookLangArray), $modFormattedUsername); + $dmDescription = sprintf($this->webhookLanguage('rateFailDescDM', $webhookLangArray), $modFormattedUsername, $sobEmoji); + $setNotificationText = $unrateNotificationText; + } + $stats = $downloadEmoji.' '.$level['downloads'].' • '.($level['likes'] - $level['dislikes'] >= 0 ? $likeEmoji.' '.abs($level['likes'] - $level['dislikes']) : $dislikeEmoji.' '.abs($level['likes'] - $level['dislikes'])); + $levelField = [$this->webhookLanguage('levelTitle', $webhookLangArray), sprintf($this->webhookLanguage('levelDesc', $webhookLangArray), '**'.$level['levelName'].'**', $creatorFormattedUsername), true]; + $IDField = [$this->webhookLanguage('levelIDTitle', $webhookLangArray), $level['levelID'], true]; + if($level['starStars'] == 1) $action = 0; elseif(($level['starStars'] < 5 AND $level['starStars'] != 0) AND !($level['starStars'] > 9 AND $level['starStars'] < 20)) $action = 1; else $action = 2; + $difficultyField = [$this->webhookLanguage('difficultyTitle', $webhookLangArray), sprintf($this->webhookLanguage('difficultyDesc' . ($level['levelLength'] == 5 ? 'Moon' : '') . $action, $webhookLangArray), $difficulty, $level['starStars']), true]; + $statsField = [$this->webhookLanguage('statsTitle', $webhookLangArray), $stats, true]; + if($level['requestedStars'] == 1) $action = 0; elseif(($level['requestedStars'] < 5 AND $level['requestedStars'] != 0) AND !($level['requestedStars'] > 9 AND $level['requestedStars'] < 20)) $action = 1; else $action = 2; + $requestedField = $level['requestedStars'] > 0 ? [$this->webhookLanguage('requestedTitle', $webhookLangArray), sprintf($this->webhookLanguage('requestedDesc' . ($level['levelLength'] == 5 ? 'Moon' : '') . $action, $webhookLangArray), $level['requestedStars']), true] : []; + $descriptionField = [$this->webhookLanguage('descTitle', $webhookLangArray), (!empty($level['levelDesc']) ? ExploitPatch::url_base64_decode($level['levelDesc']) : $this->webhookLanguage('descDesc', $webhookLangArray)), false]; + $setThumbnail = $difficultiesURL.$starsIcon.'/'.$diffIcon.'.png'; + $setFooter = sprintf($this->webhookLanguage('footer', $webhookLangArray), $gdps); + $dw->newMessage() + ->setContent($setNotificationText) + ->setAuthor($gdps, $authorURL, $authorIconURL) + ->setColor($setColor) + ->setTitle($setTitle, $rateTitleURL) + ->setDescription($setDescription) + ->setThumbnail($setThumbnail) + ->addFields($levelField, $IDField, $difficultyField, $statsField, $requestedField, $descriptionField) + ->setFooter($setFooter, $footerIconURL) + ->setTimestamp() + ->send(); + if($dmNotifications && $creatorHasDiscord) { + $embed = $this->generateEmbedArray( + [$gdps, $authorURL, $authorIconURL], + $setColor, + [$dmTitle, $rateTitleURL], + $dmDescription, + $setThumbnail, + [$levelField, $IDField, $difficultyField, $statsField, $requestedField, $descriptionField], + [$setFooter, $footerIconURL] + ); + $json = json_encode([ + "content" => "", + "tts" => false, + "embeds" => [$embed] + ], JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE); + $this->sendDiscordPM($creatorHasDiscord, $json, true); + } + } + public function generateEmbedArray($author, $color, $title, $description, $thumbnail, $fieldsArray, $footer) { + if(!is_array($author) || !is_array($title) || !is_array($fieldsArray) || !is_array($footer)) return false; + $fields = []; + $author = [ + "name" => $author[0], + "url" => $author[1], + "icon_url" => $author[2] + ]; + foreach($fieldsArray AS &$field) { + if(!empty($field)) $fields[] = [ + "name" => $field[0], + "value" => $field[1], + "inline" => $field[2] + ]; + } + $footer = [ + "text" => $footer[0], + "icon_url" => $footer[1] + ]; + return [ + "type" => "rich", + "timestamp" => date("c", time()), + "title" => $title[0], + "url" => $title[1], + "color" => hexdec($color), + "description" => $description, + "thumbnail" => ["url" => $thumbnail], + "footer" => $footer, + "author" => $author, + "fields" => $fields + ]; + } + public function webhookStartLanguage($lang) { + $fileExists = file_exists(__DIR__."/../../config/webhooks/lang/".$lang.".php"); + if(!$fileExists) return false; + require __DIR__."/../../config/webhooks/lang/".$lang.".php"; + return $webhookLang; + } + public function webhookLanguage($langString, $webhookLangArray) { + if(isset($webhookLangArray[$langString])) { + if(is_array($webhookLangArray[$langString])) return $webhookLangArray[$langString][rand(0, count($webhookLangArray[$langString]) - 1)]; + else return $webhookLangArray[$langString]; + } + return $langString; + } + public function changeDifficulty($accountID, $levelID, $difficulty, $auto, $demon) { + if(!is_numeric($accountID)) return false; + require __DIR__ . "/connection.php"; + $query = "UPDATE levels SET starDemon=:demon, starAuto=:auto, starDifficulty=:diff, rateDate=:now WHERE levelID=:levelID"; + $query = $db->prepare($query); + $query->execute([':demon' => $demon, ':auto' => $auto, ':diff' => $difficulty, ':levelID'=>$levelID, ':now' => time()]); + $query = $db->prepare("INSERT INTO modactions (type, value, value2, value3, timestamp, account) VALUES ('1', :value, :value2, :levelID, :timestamp, :id)"); + $query->execute([':value' => $diffName, ':timestamp' => time(), ':id' => $accountID, ':value2' => 0, ':levelID' => $levelID]); + } + public function sendSuggestWebhook($modAccID, $levelID, $difficulty, $stars, $featured, $auto, $demon) { + require __DIR__."/connection.php"; + if(!class_exists('ExploitPatch')) require __DIR__."/exploitPatch.php"; + require __DIR__."/../../config/dashboard.php"; + require __DIR__."/../../config/discord.php"; + if(!$webhooksEnabled OR !is_numeric($levelID) OR !in_array("suggest", $webhooksToEnable)) return false; + require_once __DIR__."/../../config/webhooks/DiscordWebhook.php"; + $webhookLangArray = $this->webhookStartLanguage($webhookLanguage); + $dw = new DiscordWebhook($suggestWebhook); + $level = $db->prepare('SELECT * FROM levels WHERE levelID = :levelID'); + $level->execute([':levelID' => $levelID]); + $level = $level->fetch(); + if(!$level) return false; + $modUsername = $this->getAccountName($modAccID); + $modHasDiscord = $this->hasDiscord($modAccID); + $modFormattedUsername = $modHasDiscord ? "<@".$modHasDiscord.">" : "**".$modUsername."**"; + $creatorAccID = $level['extID']; + $creatorUsername = $this->getAccountName($creatorAccID); + $creatorHasDiscord = $this->hasDiscord($creatorAccID); + $creatorFormattedUsername = $creatorHasDiscord ? "<@".$creatorHasDiscord.">" : "**".$creatorUsername."**"; + $difficulty = $this->getDifficulty($difficulty, $auto, $demon); + $starsArray = ['stars', 'featured', 'epic', 'legendary', 'mythic']; + $starsIcon = $starsArray[$featured] ?? 'stars'; + $diffArray = ['n/a' => 'na', 'auto' => 'auto', 'easy' => 'easy', 'normal' => 'normal', 'hard' => 'hard', 'harder' => 'harder', 'insane' => 'insane', 'demon' => 'demon-hard', 'easy demon' => 'demon-easy', 'medium demon' => 'demon-medium', 'hard demon' => 'demon-hard', 'insane demon' => 'demon-insane', 'extreme demon' => 'demon-extreme']; + $diffIcon = $diffArray[strtolower($difficulty)] ?? 'na'; + $originalDiffColorArray = ['na' => 'a9a9a9', 'auto' => 'f5c96b', 'easy' => '00e0ff', 'normal' => '00ff3a', 'hard' => 'ffb438', 'harder' => 'fc1f1f', 'insane' => 'f91ffc', 'demon-easy' => 'aa6bf5', 'demon-medium' => 'ac2974', 'demon-hard' => 'ff0000', 'demon-insane' => 'b31548', 'demon-extreme' => '8e0505']; + $originalDiffColor = $originalDiffColor && empty($successColor); + $setColor = empty($successColor) ? $originalDiffColorArray[$diffIcon] : $successColor; + $setTitle = $this->webhookLanguage('suggestTitle', $webhookLangArray); + $setDescription = sprintf($this->webhookLanguage('suggestDesc', $webhookLangArray), $modFormattedUsername); + $stats = $downloadEmoji.' '.$level['downloads'].' • '.($level['likes'] - $level['dislikes'] >= 0 ? $likeEmoji.' '.abs($level['likes'] - $level['dislikes']) : $dislikeEmoji.' '.abs($level['likes'] - $level['dislikes'])); + $levelField = [$this->webhookLanguage('levelTitle', $webhookLangArray), sprintf($this->webhookLanguage('levelDesc', $webhookLangArray), '**'.$level['levelName'].'**', $creatorFormattedUsername), true]; + $IDField = [$this->webhookLanguage('levelIDTitle', $webhookLangArray), $level['levelID'], true]; + if($stars == 1) $action = 0; elseif(($stars < 5 AND $stars != 0) AND !($stars > 9 AND $stars < 20)) $action = 1; else $action = 2; + $difficultyField = [$this->webhookLanguage('difficultyTitle', $webhookLangArray), sprintf($this->webhookLanguage('difficultyDesc' . ($level['levelLength'] == 5 ? 'Moon' : '') . $action, $webhookLangArray), $difficulty, $stars), true]; + $statsField = [$this->webhookLanguage('statsTitle', $webhookLangArray), $stats, true]; + if($level['requestedStars'] == 1) $action = 0; elseif(($level['requestedStars'] < 5 AND $level['requestedStars'] != 0) AND !($level['requestedStars'] > 9 AND $level['requestedStars'] < 20)) $action = 1; else $action = 2; + $requestedField = $level['requestedStars'] > 0 ? [$this->webhookLanguage('requestedTitle', $webhookLangArray), sprintf($this->webhookLanguage('requestedDesc' . ($level['levelLength'] == 5 ? 'Moon' : '') . $action, $webhookLangArray), $level['requestedStars']), true] : []; + $descriptionField = [$this->webhookLanguage('descTitle', $webhookLangArray), (!empty($level['levelDesc']) ? ExploitPatch::url_base64_decode($level['levelDesc']) : $this->webhookLanguage('descDesc', $webhookLangArray)), false]; + $setThumbnail = $difficultiesURL.$starsIcon.'/'.$diffIcon.'.png'; + $setFooter = sprintf($this->webhookLanguage('footerSuggest', $webhookLangArray), $gdps); + $dw->newMessage() + ->setContent($suggestNotificationText) + ->setAuthor($gdps, $authorURL, $authorIconURL) + ->setColor($setColor) + ->setTitle($setTitle, $rateTitleURL) + ->setDescription($setDescription) + ->setThumbnail($setThumbnail) + ->addFields($levelField, $IDField, $difficultyField, $statsField, $requestedField, $descriptionField) + ->setFooter($setFooter, $footerIconURL) + ->setTimestamp() + ->send(); + } + public function sendBanWebhook($banID, $modAccID) { + require __DIR__."/connection.php"; + require __DIR__."/../../config/dashboard.php"; + require __DIR__."/../../config/discord.php"; + if(!$webhooksEnabled OR !is_numeric($banID) OR !in_array("ban", $webhooksToEnable)) return false; + require_once __DIR__."/../../config/webhooks/DiscordWebhook.php"; + $webhookLangArray = $this->webhookStartLanguage($webhookLanguage); + $dw = new DiscordWebhook($banWebhook); + $ban = $this->getBanByID($banID); + switch($ban['personType']) { + case 0: + $playerAccID = $ban['person']; + $user = $db->prepare('SELECT * FROM users WHERE extID = :ID'); + $user->execute([':ID' => $playerAccID]); + $user = $user->fetch(); + if(!$user) return false; + $playerUsername = $this->getAccountName($playerAccID); + $playerHasDiscord = $this->hasDiscord($playerAccID); + $playerFormattedUsername = $playerHasDiscord ? "<@".$playerHasDiscord.">" : "**".$playerUsername."**"; + break; + case 1: + $playerFormattedUsername = "**".$this->getUserName($ban['person'])."**"; + break; + case 2: + $playerFormattedUsername = "||**".$ban['person']."**||"; + break; + } + $modUsername = $this->getAccountName($modAccID); + $modHasDiscord = $this->hasDiscord($modAccID); + $modFormattedUsername = $modHasDiscord ? "<@".$modHasDiscord.">" : "**".$modUsername."**"; + switch($ban['banType']) { + case 0: + if($ban['isActive']) { + $setColor = $failColor; + $setTitle = $this->webhookLanguage('playerBanTitle', $webhookLangArray); + $dmTitle = $this->webhookLanguage('playerBanTitleDM', $webhookLangArray); + $setDescription = sprintf($this->webhookLanguage('playerBanTopDesc', $webhookLangArray), $modFormattedUsername, $playerFormattedUsername); + $dmDescription = sprintf($this->webhookLanguage('playerBanTopDescDM', $webhookLangArray), $modFormattedUsername); + $setThumbnail = $banThumbnailURL; + $setFooter = sprintf($this->webhookLanguage('footerBan', $webhookLangArray), $gdps); + } else { + $setColor = $successColor; + $setTitle = $this->webhookLanguage('playerUnbanTitle', $webhookLangArray); + $dmTitle = $this->webhookLanguage('playerUnbanTitleDM', $webhookLangArray); + $setDescription = sprintf($this->webhookLanguage('playerUnbanTopDesc', $webhookLangArray), $modFormattedUsername, $playerFormattedUsername); + $dmDescription = sprintf($this->webhookLanguage('playerUnbanTopDescDM', $webhookLangArray), $modFormattedUsername); + $setThumbnail = $unbanThumbnailURL; + $setFooter = sprintf($this->webhookLanguage('footer', $webhookLangArray), $gdps); + } + break; + case 1: + if($ban['isActive']) { + $setColor = $failColor; + $setTitle = $this->webhookLanguage('playerBanTitle', $webhookLangArray); + $dmTitle = $this->webhookLanguage('playerBanTitleDM', $webhookLangArray); + $setDescription = sprintf($this->webhookLanguage('playerBanCreatorDesc', $webhookLangArray), $modFormattedUsername, $playerFormattedUsername); + $dmDescription = sprintf($this->webhookLanguage('playerBanCreatorDescDM', $webhookLangArray), $modFormattedUsername); + $setThumbnail = $banThumbnailURL; + $setFooter = sprintf($this->webhookLanguage('footerBan', $webhookLangArray), $gdps); + } else { + $setColor = $successColor; + $setTitle = $this->webhookLanguage('playerUnbanTitle', $webhookLangArray); + $dmTitle = $this->webhookLanguage('playerUnbanTitleDM', $webhookLangArray); + $setDescription = sprintf($this->webhookLanguage('playerUnbanCreatorDesc', $webhookLangArray), $modFormattedUsername, $playerFormattedUsername); + $dmDescription = sprintf($this->webhookLanguage('playerUnbanCreatorDescDM', $webhookLangArray), $modFormattedUsername); + $setThumbnail = $unbanThumbnailURL; + $setFooter = sprintf($this->webhookLanguage('footer', $webhookLangArray), $gdps); + } + break; + case 2: + if($ban['isActive']) { + $setColor = $failColor; + $setTitle = $this->webhookLanguage('playerBanTitle', $webhookLangArray); + $dmTitle = $this->webhookLanguage('playerBanTitleDM', $webhookLangArray); + $setDescription = sprintf($this->webhookLanguage('playerBanUploadDesc', $webhookLangArray), $modFormattedUsername, $playerFormattedUsername); + $dmDescription = sprintf($this->webhookLanguage('playerBanUploadDescDM', $webhookLangArray), $modFormattedUsername); + $setThumbnail = $banThumbnailURL; + $setFooter = sprintf($this->webhookLanguage('footerBan', $webhookLangArray), $gdps); + } else { + $setColor = $successColor; + $setTitle = $this->webhookLanguage('playerUnbanTitle', $webhookLangArray); + $dmTitle = $this->webhookLanguage('playerUnbanTitleDM', $webhookLangArray); + $setDescription = sprintf($this->webhookLanguage('playerUnbanUploadDesc', $webhookLangArray), $modFormattedUsername, $playerFormattedUsername); + $dmDescription = sprintf($this->webhookLanguage('playerUnbanUploadDescDM', $webhookLangArray), $modFormattedUsername); + $setThumbnail = $unbanThumbnailURL; + $setFooter = sprintf($this->webhookLanguage('footer', $webhookLangArray), $gdps); + } + break; + case 3: + if($ban['isActive']) { + $setColor = $failColor; + $setTitle = $this->webhookLanguage('playerBanTitle', $webhookLangArray); + $dmTitle = $this->webhookLanguage('playerBanTitleDM', $webhookLangArray); + $setDescription = sprintf($this->webhookLanguage('playerBanCommentDesc', $webhookLangArray), $modFormattedUsername, $playerFormattedUsername); + $dmDescription = sprintf($this->webhookLanguage('playerBanCommentDescDM', $webhookLangArray), $modFormattedUsername); + $setThumbnail = $banThumbnailURL; + $setFooter = sprintf($this->webhookLanguage('footerBan', $webhookLangArray), $gdps); + } else { + $setColor = $successColor; + $setTitle = $this->webhookLanguage('playerUnbanTitle', $webhookLangArray); + $dmTitle = $this->webhookLanguage('playerUnbanTitleDM', $webhookLangArray); + $setDescription = sprintf($this->webhookLanguage('playerUnbanCommentDesc', $webhookLangArray), $modFormattedUsername, $playerFormattedUsername); + $dmDescription = sprintf($this->webhookLanguage('playerUnbanCommentDescDM', $webhookLangArray), $modFormattedUsername); + $setThumbnail = $unbanThumbnailURL; + $setFooter = sprintf($this->webhookLanguage('footer', $webhookLangArray), $gdps); + } + break; + case 4: + if($ban['isActive']) { + $setColor = $failColor; + $setTitle = $this->webhookLanguage('playerBanTitle', $webhookLangArray); + $dmTitle = $this->webhookLanguage('playerBanTitleDM', $webhookLangArray); + $setDescription = sprintf($this->webhookLanguage('playerBanAccountDesc', $webhookLangArray), $modFormattedUsername, $playerFormattedUsername); + $dmDescription = sprintf($this->webhookLanguage('playerBanAccountDescDM', $webhookLangArray), $modFormattedUsername); + $setThumbnail = $banThumbnailURL; + $setFooter = sprintf($this->webhookLanguage('footerBan', $webhookLangArray), $gdps); + } else { + $setColor = $successColor; + $setTitle = $this->webhookLanguage('playerUnbanTitle', $webhookLangArray); + $dmTitle = $this->webhookLanguage('playerUnbanTitleDM', $webhookLangArray); + $setDescription = sprintf($this->webhookLanguage('playerUnbanAccountDesc', $webhookLangArray), $modFormattedUsername, $playerFormattedUsername); + $dmDescription = sprintf($this->webhookLanguage('playerUnbanAccountDescDM', $webhookLangArray), $modFormattedUsername); + $setThumbnail = $unbanThumbnailURL; + $setFooter = sprintf($this->webhookLanguage('footer', $webhookLangArray), $gdps); + } + break; + } + $modField = [$this->webhookLanguage('playerModTitle', $webhookLangArray), $modFormattedUsername, true]; + $expiresField = $ban['isActive'] ? [$this->webhookLanguage('playerExpiresTitle', $webhookLangArray), ''; + + $gmdFile .= ' k1 '.$levelID.''; + $gmdFile .= 'k2 '.$level['levelName'].''; + $gmdFile .= 'k3 '.$level['levelDesc'].''; + $gmdFile .= 'k4 '.$levelString.''; + $gmdFile .= 'k5 '.$level['userName'].''; + $gmdFile .= 'k6 '.$level['userID'].''; + $gmdFile .= 'k8 '.$level['audioTrack'].''; + $gmdFile .= 'k11 '.$level['downloads'].''; + $gmdFile .= 'k13 '; + $gmdFile .= ' k16 '.$level['levelVersion'].''; + $gmdFile .= 'k21 2'; + $gmdFile .= 'k23 '.$level['levelLength'].''; + $gmdFile .= 'k42 '.$level['levelID'].''; + $gmdFile .= 'k45 '.$level['songID'].''; + $gmdFile .= 'k47 '; + $gmdFile .= ' k48 '.$level['objects'].''; + $gmdFile .= 'k50 '.$level['binaryVersion'].''; + $gmdFile .= 'k87 556365614873111'; + $gmdFile .= 'k101 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0'; + $gmdFile .= 'kl1 0'; + $gmdFile .= 'kl2 0'; + $gmdFile .= 'kl3 1'; + $gmdFile .= 'kl5 1'; + $gmdFile .= 'kl6 kI6 0 00 00 00 00 00 00 00 00 00 00 00 00 00 0Hello, '.$user.'!
+It seems, that you wanna register new account in '.$gdps.'
+Here is your link!
+'.dirname('https://'.$_SERVER["HTTP_HOST"].$_SERVER['REQUEST_URI']).'/activate.php?mail='.$string.'
'; + } else { + $m->Subject = 'Forgot password?'; + $m->Body = 'Hello, '.$user.'!
+It seems, that you forgot your password in '.$gdps.'...
+Here is your link!
+https://'.$_SERVER["HTTP_HOST"].$_SERVER['REQUEST_URI'].'?code='.$isForgotPass.'
'; + } + return $m->send(); + } + } } diff --git a/incl/lib/songReup.php b/incl/lib/songReup.php index bf6c9d1cb..f63c33099 100644 --- a/incl/lib/songReup.php +++ b/incl/lib/songReup.php @@ -1,7 +1,7 @@ prepare("INSERT INTO songs (ID, name, authorID, authorName, size, download) diff --git a/incl/messages/deleteGJMessages.php b/incl/messages/deleteGJMessages.php index 46b2c1b9d..823c7e2b1 100644 --- a/incl/messages/deleteGJMessages.php +++ b/incl/messages/deleteGJMessages.php @@ -2,7 +2,7 @@ //TODO: unify the queries //TODO: does real geometry dash only delete messages for one person? if so, implement this chdir(dirname(__FILE__)); -include "../lib/connection.php"; +require "../lib/connection.php"; require_once "../lib/GJPCheck.php"; require_once "../lib/exploitPatch.php"; if(isset($_POST['messageID'])){$messageID = ExploitPatch::remove($_POST["messageID"]);} diff --git a/incl/messages/downloadGJMessage.php b/incl/messages/downloadGJMessage.php index 195828437..16f77d904 100644 --- a/incl/messages/downloadGJMessage.php +++ b/incl/messages/downloadGJMessage.php @@ -1,30 +1,34 @@ prepare("SELECT accID, toAccountID, timestamp, userName, messageID, subject, isNew, body FROM messages WHERE messageID = :messageID AND (accID = :accID OR toAccountID = :accID) LIMIT 1"); +$query = $db->prepare("SELECT accID, toAccountID, timestamp, userName, messageID, subject, isNew, body FROM messages WHERE messageID = :messageID AND (accID = :accID OR toAccountID = :accID) LIMIT 1"); $query->execute([':messageID' => $messageID, ':accID' => $accountID]); $result = $query->fetch(); -if($query->rowCount() == 0){ - exit("-1"); -} -if(empty($_POST["isSender"])){ - $query=$db->prepare("UPDATE messages SET isNew=1 WHERE messageID = :messageID AND toAccountID = :accID"); - $query->execute([':messageID' => $messageID, ':accID' =>$accountID]); +if($query->rowCount() == 0) exit("-1"); +if(empty($_POST["isSender"])) { + $query = $db->prepare("UPDATE messages SET isNew = 1, readTime = :readTime WHERE messageID = :messageID AND toAccountID = :accID AND readTime = 0"); + $query->execute([':messageID' => $messageID, ':accID' => $accountID, ':readTime' => time()]); $accountID = $result["accID"]; $isSender = 0; -}else{ +} else { $isSender = 1; $accountID = $result["toAccountID"]; } -$query=$db->prepare("SELECT userName,userID,extID FROM users WHERE extID = :accountID"); +$query = $db->prepare("SELECT userName, userID, extID, clan FROM users WHERE extID = :accountID"); $query->execute([':accountID' => $accountID]); $result12 = $query->fetch(); -$uploadDate = date("d/m/Y G.i", $result["timestamp"]); +$uploadDate = $gs->makeTime($result["timestamp"]); +$result12["userName"] = $gs->makeClanUsername($result12); +$result["subject"] = ExploitPatch::url_base64_encode(ExploitPatch::translit(ExploitPatch::url_base64_decode($result["subject"]))); +$result["body"] = ExploitPatch::url_base64_encode(XORCipher::cipher(ExploitPatch::translit(XORCipher::cipher(ExploitPatch::url_base64_decode($result["body"]), 14251)), 14251)); echo "6:".$result12["userName"].":3:".$result12["userID"].":2:".$result12["extID"].":1:".$result["messageID"].":4:".$result["subject"].":8:".$result["isNew"].":9:".$isSender.":5:".$result["body"].":7:".$uploadDate.""; ?> \ No newline at end of file diff --git a/incl/messages/getGJMessages.php b/incl/messages/getGJMessages.php index 4d55c66e4..abf2ad3b0 100644 --- a/incl/messages/getGJMessages.php +++ b/incl/messages/getGJMessages.php @@ -1,13 +1,14 @@ makeTime($message1["timestamp"]); if($getSent == 1){ $accountID = $message1["toAccountID"]; }else{ @@ -39,6 +40,8 @@ $query=$db->prepare("SELECT * FROM users WHERE extID = :accountID"); $query->execute([':accountID' => $accountID]); $result12 = $query->fetchAll()[0]; + $result12["userName"] = $gs->makeClanUsername($result12); + $message1['subject'] = ExploitPatch::url_base64_encode(ExploitPatch::translit(ExploitPatch::url_base64_decode($message1["subject"]))); $msgstring .= "6:".$result12["userName"].":3:".$result12["userID"].":2:".$result12["extID"].":1:".$message1["messageID"].":4:".$message1["subject"].":8:".$message1["isNew"].":9:".$getSent.":7:".$uploadDate."|"; } } diff --git a/incl/messages/uploadGJMessage.php b/incl/messages/uploadGJMessage.php index 6a24c8241..0f8844f32 100644 --- a/incl/messages/uploadGJMessage.php +++ b/incl/messages/uploadGJMessage.php @@ -1,10 +1,11 @@ prepare($query3); $query3->execute([':accID' => $accID]); @@ -26,6 +25,13 @@ $userID = $gs->getUserID($id); $uploadDate = time(); +$checkBan = $gs->getPersonBan($accID, $userID, 3); +if($checkBan) exit('-1'); + +$checkExistence = $db->prepare("SELECT count(*) FROM accounts WHERE accountID = :toAccountID"); +$checkExistence->execute([':toAccountID' => $toAccountID]); +if(!$checkExistence->fetchColumn()) exit('-1'); + $blocked = $db->query("SELECT ID FROM `blocks` WHERE person1 = $toAccountID AND person2 = $accID")->fetchAll(PDO::FETCH_COLUMN); $mSOnly = $db->query("SELECT mS FROM `accounts` WHERE accountID = $toAccountID AND mS > 0")->fetchAll(PDO::FETCH_COLUMN); $friend = $db->query("SELECT ID FROM `friendships` WHERE (person1 = $accID AND person2 = $toAccountID) || (person2 = $accID AND person1 = $toAccountID)")->fetchAll(PDO::FETCH_COLUMN); diff --git a/incl/misc/getAccountURL.php b/incl/misc/getAccountURL.php index fb83f3c4f..d370c4f66 100644 --- a/incl/misc/getAccountURL.php +++ b/incl/misc/getAccountURL.php @@ -2,4 +2,4 @@ if((!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') || $_SERVER['SERVER_PORT'] == 443) $https = 'https'; else $https = 'http'; echo dirname($https."://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]"); -?> +?> \ No newline at end of file diff --git a/incl/misc/getGJSongInfo.php b/incl/misc/getGJSongInfo.php index 251f124a6..709cfd1a0 100644 --- a/incl/misc/getGJSongInfo.php +++ b/incl/misc/getGJSongInfo.php @@ -1,17 +1,21 @@ prepare("SELECT ID,name,authorID,authorName,size,isDisabled,download FROM songs WHERE ID = :songid LIMIT 1"); $query3->execute([':songid' => $songid]); +$librarySong = $gs->getLibrarySongInfo($songid); //todo: move this logic away from this file -if($query3->rowCount() == 0) { - $url = 'http://www.boomlings.com/database/getGJSongInfo.php'; +if($query3->rowCount() == 0 && !$librarySong) { + $url = 'https://www.boomlings.com/database/getGJSongInfo.php'; $data = array('songID' => $songid, 'secret' => 'Wmfd2893gb7'); $options = array( 'http' => array( @@ -23,7 +27,7 @@ $context = stream_context_create($options); $result = file_get_contents($url, false, $context); if ($result == "-2" OR $result == "-1" OR $result == "") { - $url = 'http://www.boomlings.com/database/getGJLevels21.php'; + $url = 'https://www.boomlings.com/database/getGJLevels21.php'; $data = array( 'gameVersion' => '21', 'binaryVersion' => '33', @@ -47,6 +51,12 @@ ); $ch = curl_init($url); + if($proxytype == 1) curl_setopt($ch, CURLOPT_PROXY, $host); + elseif($proxytype == 2) { + curl_setopt($ch, CURLOPT_PROXY, $host); + curl_setopt($ch, CURLOPT_PROXYTYPE, CURLPROXY_SOCKS5); + } + if(!empty($auth)) curl_setopt($ch, CURLOPT_PROXYUSERPWD, $auth); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_POSTFIELDS, $data); curl_setopt($ch, CURLOPT_PROTOCOLS, CURLPROTO_HTTP | CURLPROTO_HTTPS); @@ -55,7 +65,13 @@ if(substr_count($result, "1~|~".$songid."~|~2") != 0){ $result = explode('#',$result)[2]; }else{ - $ch = curl_init(); + $ch = curl_init(); + if($proxytype == 1) curl_setopt($ch, CURLOPT_PROXY, $host); + elseif($proxytype == 2) { + curl_setopt($ch, CURLOPT_PROXY, $host); + curl_setopt($ch, CURLOPT_PROXYTYPE, CURLPROXY_SOCKS5); + } + if(!empty($auth)) curl_setopt($ch, CURLOPT_PROXYUSERPWD, $auth); curl_setopt($ch, CURLOPT_URL, "https://www.newgrounds.com/audio/listen/".$songid); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); $songinfo = curl_exec($ch); @@ -75,15 +91,25 @@ } echo $result; $reup = SongReup::reup($result); -}else{ - $result4 = $query3->fetch(); - if($result4["isDisabled"] == 1){ - exit("-2"); - } +} else { + $result4 = !$librarySong ? $query3->fetch() : $librarySong; + if($result4["isDisabled"] == 1) exit("-2"); $dl = $result4["download"]; - if(strpos($dl, ':') !== false){ - $dl = urlencode($dl); + if(strpos($dl, ':') !== false) $dl = urlencode($dl); + echo "1~|~".$result4["ID"]."~|~2~|~".ExploitPatch::translit($result4["name"])."~|~3~|~".$result4["authorID"]."~|~4~|~".ExploitPatch::translit($result4["authorName"])."~|~5~|~".$result4["size"]."~|~6~|~~|~7~|~~|~8~|~0~|~10~|~".$dl.""; + if($librarySong) { + $artistsNames = []; + $artistsArray = explode('.', $result4['artists']); + if(count($artistsArray) > 0) { + foreach($artistsArray AS &$artistID) { + $artistData = $gs->getLibrarySongAuthorInfo($artistID); + if(!$artistData) continue; + $artistsNames[] = $artistID; + $artistsNames[] = $artistData['name']; + } + } + $artistsNames = implode(',', $artistsNames); + echo '~|~9~|~'.$result4['priorityOrder'].'~|~11~|~'.$result4['ncs'].'~|~12~|~'.$result4['artists'].'~|~13~|~'.($result4['new'] ? 1 : 0).'~|~14~|~'.$result4['new'].'~|~15~|~'.$artistsNames; } - echo "1~|~".$result4["ID"]."~|~2~|~".$result4["name"]."~|~3~|~".$result4["authorID"]."~|~4~|~".$result4["authorName"]."~|~5~|~".$result4["size"]."~|~6~|~~|~10~|~".$dl."~|~7~|~~|~8~|~0"; } -?> +?> \ No newline at end of file diff --git a/incl/misc/getTopArtists.php b/incl/misc/getTopArtists.php index 44d0afba5..f9290f08f 100644 --- a/incl/misc/getTopArtists.php +++ b/incl/misc/getTopArtists.php @@ -1,6 +1,8 @@ prepare("SELECT extID FROM users WHERE IP = :ip ORDER BY lastPlayed DESC"); + $IPcheck->execute([':ip' => $gs->getIP()]); + $IPcheck = $IPcheck->fetch(); + $querywhat = "SELECT * FROM favsongs INNER JOIN songs on favsongs.songID = songs.ID WHERE favsongs.accountID = :id ORDER BY favsongs.ID DESC LIMIT 20 OFFSET $offset"; $query = $db->prepare($querywhat); - $query->execute(); + $query->execute([':id' => $IPcheck["extID"]]); $res = $query->fetchAll(); - // count - $countquery = $db->prepare("SELECT count(DISTINCT(authorName)) FROM songs WHERE (authorName NOT LIKE '%Reupload%' AND authorName NOT LIKE 'unknown')"); - $countquery->execute(); - $totalCount = $countquery->fetchColumn(); - // parse foreach($res as $sel){ - $str .= "4:$sel[0]"; - // TO-DO: Fetch YouTube links from RobTop's servers, as we are unable to auto-determine YouTube links. - // Also credit to @Intelligent-Cat for this piece of code - if (substr($sel[1], 0, 26) == "https://api.soundcloud.com") { - if (strpos(urlencode($sel[0]), '+' ) !== false) { - $str .= ":7:../redirect?q=https%3A%2F%2Fsoundcloud.com%2Fsearch%2Fpeople?q=$sel[0]"; - // search is used instead of directly redirecting the user due to how user links work with spaces in them - } else { - $str .= ":7:../redirect?q=https%3A%2F%2Fsoundcloud.com%2F$sel[0]"; - // unlikely to hit a different account if there are multiple users with the same name. - } - } + $str .= "4:".$sel["authorName"]." - ".$sel["name"].", ".$sel["ID"]; + $str .= ":7:../redirect?q=".urlencode($sel["download"]); $str .= "|"; } + if(empty($str)) $str = "4:There is no songs!|4:If you liked some...|4:Update your IP!|4:Go to your profile to do that."; $str = rtrim($str, "|"); + $querywhat = "SELECT * FROM favsongs INNER JOIN songs on favsongs.songID = songs.ID WHERE favsongs.accountID = :id ORDER BY favsongs.ID DESC"; + $query = $db->prepare($querywhat); + $query->execute([':id' => $IPcheck["extID"]]); + $res = $query->fetchAll(); + $totalCount = count($res); $str .= "#$totalCount:$offset:20"; - // send result echo "$str"; } ?> diff --git a/incl/misc/likeGJItem.php b/incl/misc/likeGJItem.php index 53edcba7c..8ce1dba5c 100644 --- a/incl/misc/likeGJItem.php +++ b/incl/misc/likeGJItem.php @@ -1,15 +1,15 @@ getIP(); diff --git a/incl/misc/restoreGJItems.php b/incl/misc/restoreGJItems.php new file mode 100644 index 000000000..31c9ca51f --- /dev/null +++ b/incl/misc/restoreGJItems.php @@ -0,0 +1,12 @@ +getIDFromPost(); + +if(!file_exists("../../data/info/$id")) exit("-1"); +echo XORCipher::cipher(ExploitPatch::url_base64_decode(file_get_contents("../../data/info/$id")), 24157); +?> \ No newline at end of file diff --git a/incl/misc/submitGJUserInfo.php b/incl/misc/submitGJUserInfo.php new file mode 100644 index 000000000..3edc73c49 --- /dev/null +++ b/incl/misc/submitGJUserInfo.php @@ -0,0 +1,14 @@ +getIDFromPost(); +if(empty($_POST["levelsInfo"])) exit('-2'); +/* GD doesn't XOR encrypts this data, i just want to encrypt it */ +$data = ExploitPatch::url_base64_encode(XORCipher::cipher($_POST["levelsInfo"], 24157)); +file_put_contents("../../data/info/$id", $data); +echo 1; +?> \ No newline at end of file diff --git a/incl/mods/requestUserAccess.php b/incl/mods/requestUserAccess.php index c04624310..510ec80c4 100644 --- a/incl/mods/requestUserAccess.php +++ b/incl/mods/requestUserAccess.php @@ -15,4 +15,4 @@ } echo $permState; } -?> +?> \ No newline at end of file diff --git a/incl/profiles/getGJUserInfo.php b/incl/profiles/getGJUserInfo.php index ba5f4f818..9c97fb655 100644 --- a/incl/profiles/getGJUserInfo.php +++ b/incl/profiles/getGJUserInfo.php @@ -1,6 +1,6 @@ prepare($query); $query->execute([':extid' => $extid, ':me' => $me]); -if($query->fetchColumn() > 0) - exit("-1"); +if($query->fetchColumn() > 0) exit("-1"); $query = "SELECT * FROM users WHERE extID = :extid"; $query = $db->prepare($query); $query->execute([':extid' => $extid]); -if($query->rowCount() == 0) - exit("-1"); +if($query->rowCount() == 0) exit("-1"); $user = $query->fetch(); //placeholders @@ -29,25 +27,46 @@ $e = "SET @rownum := 0;"; $query = $db->prepare($e); $query->execute(); -/*$f = "SELECT rank FROM ( - SELECT @rownum := @rownum + 1 AS rank, extID - FROM users WHERE isBanned = '0' AND gameVersion > 19 AND stars > 25 ORDER BY stars DESC - ) as result WHERE extID=:extid";*/ -$f = "SELECT count(*) FROM users WHERE stars > :stars AND isBanned = 0"; //I can do this, since I already know the stars amount beforehand -$query = $db->prepare($f); -$query->execute([':stars' => $user["stars"]]); -if($query->rowCount() > 0) { - $rank = $query->fetchColumn() + 1; -} else { - $rank = 0; +$bans = $gs->getAllBansOfBanType(0); +$extIDs = $userIDs = $bannedIPs = []; +foreach($bans AS &$ban) { + switch($ban['personType']) { + case 0: + $extIDs[] = $ban['person']; + break; + case 1: + $userIDs[] = $ban['person']; + break; + case 2: + $bannedIPs[] = $gs->IPForBan($ban['person'], true); + break; + } } -if($user['isBanned'] != 0) $rank = 0; +$extIDsString = implode("','", $extIDs); +$userIDsString = implode("','", $userIDs); +$bannedIPsString = implode("|", $bannedIPs); +$queryArray = []; +if(!empty($extIDsString)) $queryArray[] = "extID NOT IN ('".$extIDsString."')"; +if(!empty($userIDsString)) $queryArray[] = "userID NOT IN ('".$userIDsString."')"; +if(!empty($bannedIPsString)) $queryArray[] = "IP NOT REGEXP '".$bannedIPsString."'"; +$queryText = !empty($queryArray) ? '('.implode(' AND ', $queryArray).') AND' : ''; +$f = "SELECT count(*) FROM users WHERE ".$queryText." stars + moons > :stars + :moons"; +$query = $db->prepare($f); +$query->execute([':stars' => $user["stars"], ':moons' => $user["moons"]]); +if($query->rowCount() > 0) $rank = $query->fetchColumn() + 1; +else $rank = 0; +$isBanned = $gs->getPersonBan($user['extID'], $user['userID'], 0, $user['IP']); +if($isBanned) $rank = 0; //var_dump($leaderboard); //accinfo $query = "SELECT youtubeurl,twitter,twitch, frS, mS, cS FROM accounts WHERE accountID = :extID"; $query = $db->prepare($query); $query->execute([':extID' => $extid]); $accinfo = $query->fetch(); + $accinfo['youtubeurl'] = mb_ereg_replace("(?!^@)[^a-zA-Z0-9_]", "", $accinfo['youtubeurl']); + $accinfo['twitter'] = mb_ereg_replace("[^a-zA-Z0-9_]", "", $accinfo['twitter']); + $accinfo['twitch'] = mb_ereg_replace("[^a-zA-Z0-9_]", "", $accinfo['twitch']); + if(substr($accinfo['youtubeurl'], 0, 1) == "@") $accinfo['youtubeurl'] = "../".$accinfo['youtubeurl']; $reqsstate = $accinfo["frS"]; $msgstate = $accinfo["mS"]; $commentstate = $accinfo["cS"]; @@ -113,6 +132,7 @@ $appendix = ":32:".$INCrequestinfo["ID"].":35:".$INCrequestinfo["comment"].":37:".$uploaddate; } } +$user["userName"] = $gs->makeClanUsername($user); $user['extID'] = is_numeric($user['extID']) ? $user['extID'] : 0; echo "1:".$user["userName"].":2:".$user["userID"].":13:".$user["coins"].":17:".$user["userCoins"].":10:".$user["color1"].":11:".$user["color2"].":51:".$user["color3"].":3:".$user["stars"].":46:".$user["diamonds"].":52:".$user["moons"].":4:".$user["demons"].":8:".$creatorpoints.":18:".$msgstate.":19:".$reqsstate.":50:".$commentstate.":20:".$accinfo["youtubeurl"].":21:".$user["accIcon"].":22:".$user["accShip"].":23:".$user["accBall"].":24:".$user["accBird"].":25:".$user["accDart"].":26:".$user["accRobot"].":28:".$user["accGlow"].":43:".$user["accSpider"].":48:".$user["accExplosion"].":53:".$user["accSwing"].":54:".$user["accJetpack"].":30:".$rank.":16:".$user["extID"].":31:".$friendstate.":44:".$accinfo["twitter"].":45:".$accinfo["twitch"].":49:".$badge.":55:".$user["dinfo"].":56:".$user["sinfo"].":57:".$user["pinfo"].$appendix.":29:1"; -?> +?> \ No newline at end of file diff --git a/incl/profiles/getGJUsers.php b/incl/profiles/getGJUsers.php index 3d812f71e..5228180c2 100644 --- a/incl/profiles/getGJUsers.php +++ b/incl/profiles/getGJUsers.php @@ -1,23 +1,24 @@ prepare($query); $query->execute([':str' => $str]); $result = $query->fetchAll(); -if(count($result) < 1) { - exit("-1"); -} +if(count($result) < 1) exit("-1"); $countquery = "SELECT count(*) FROM users WHERE userName LIKE CONCAT('%', :str, '%')"; $countquery = $db->prepare($countquery); $countquery->execute([':str' => $str]); $usercount = $countquery->fetchColumn(); foreach($result as &$user) { + $user["userName"] = $gs->makeClanUsername($user); $user['extID'] = is_numeric($user['extID']) ? $user['extID'] : 0; $userstring .= "1:".$user["userName"].":2:".$user["userID"].":13:".$user["coins"].":17:".$user["userCoins"].":9:".$user["icon"].":10:".$user["color1"].":11:".$user["color2"].":51:".$user["color3"].":14:".$user["iconType"].":15:".$user["special"].":16:".$user["extID"].":3:".$user["stars"].":8:".round($user["creatorPoints"],0,PHP_ROUND_HALF_DOWN).":4:".$user["demons"].":46:".$user["diamonds"].":52:".$user["moons"]."|"; } diff --git a/incl/profiles/updateGJAccSettings.php b/incl/profiles/updateGJAccSettings.php index cab359d2f..015044e63 100644 --- a/incl/profiles/updateGJAccSettings.php +++ b/incl/profiles/updateGJAccSettings.php @@ -1,9 +1,10 @@ prepare("UPDATE accounts SET mS=:mS, frS=:frS, cS=:cS, youtubeurl=:youtubeurl, twitter=:twitter, twitch=:twitch WHERE accountID=:accountID"); +$getAccountData = $db->prepare("SELECT * FROM accounts WHERE accountID = :accountID"); +$getAccountData->execute([':accountID' => $accountID]); +$getAccountData = $getAccountData->fetch(); + +if(substr($youtubeurl, 0, 4) == "../@") $youtubeurl = "@" . substr($youtubeurl, 4); +$youtubeurl = mb_ereg_replace("(?!^@)[^a-zA-Z0-9_]", "", $youtubeurl); +$twitter = mb_ereg_replace("[^a-zA-Z0-9_]", "", $twitter); +$twitch = mb_ereg_replace("[^a-zA-Z0-9_]", "", $twitch); + +$query = $db->prepare("UPDATE accounts SET mS = :mS, frS = :frS, cS = :cS, youtubeurl = :youtubeurl, twitter = :twitter, twitch = :twitch WHERE accountID = :accountID"); $query->execute([':mS' => $mS, ':frS' => $frS, ':cS' => $cS, ':youtubeurl' => $youtubeurl, ':accountID' => $accountID, ':twitch' => $twitch, ':twitter' => $twitter]); echo 1; +$gs->logAction($accountID, 27, $mS, $frS, $cS); +$gs->sendLogsAccountChangeWebhook($accountID, $accountID, $getAccountData); ?> \ No newline at end of file diff --git a/incl/relationships/acceptGJFriendRequest.php b/incl/relationships/acceptGJFriendRequest.php index 28d276ca8..0a9159928 100644 --- a/incl/relationships/acceptGJFriendRequest.php +++ b/incl/relationships/acceptGJFriendRequest.php @@ -1,30 +1,27 @@ prepare("SELECT accountID, toAccountID FROM friendreqs WHERE ID = :requestID"); $query->execute([':requestID' => $requestID]); $request = $query->fetch(); $reqAccountID = $request["accountID"]; $toAccountID = $request["toAccountID"]; -if($toAccountID != $accountID OR $reqAccountID == $accountID){ - exit("-1"); -} -$query = $db->prepare("INSERT INTO friendships (person1, person2, isNew1, isNew2) -VALUES (:accountID, :targetAccountID, 1, 1)"); - +if($toAccountID != $accountID OR $reqAccountID == $accountID) exit("-1"); +$query = $db->prepare("INSERT INTO friendships (person1, person2, isNew1, isNew2) VALUES (:accountID, :targetAccountID, 1, 1)"); $query->execute([':accountID' => $reqAccountID, ':targetAccountID' => $toAccountID]); -//REMOVING THE REQUEST -$query = $db->prepare("DELETE from friendreqs WHERE ID=:requestID LIMIT 1"); +$gs->logAction($accountID, 28, $reqAccountID); +$query = $db->prepare("DELETE from friendreqs WHERE ID = :requestID LIMIT 1"); $query->execute([':requestID' => $requestID]); -//RESPONSE SO IT DOESNT SAY "FAILED" +if($automaticCron) Cron::updateFriendsCount($accountID, false); echo "1"; ?> \ No newline at end of file diff --git a/incl/relationships/blockGJUser.php b/incl/relationships/blockGJUser.php index 4b177e7e3..b13f50e82 100644 --- a/incl/relationships/blockGJUser.php +++ b/incl/relationships/blockGJUser.php @@ -1,19 +1,24 @@ prepare("INSERT INTO blocks (person1, person2) VALUES (:accountID, :targetAccountID)"); $query->execute([':accountID' => $accountID, ':targetAccountID' => $targetAccountID]); +// Remove from friend list if the two users were friends +$query = $db->prepare("DELETE FROM friendships WHERE (person1 = :accountID AND person2 = :targetAccountID) OR (person1 = :targetAccountID AND person2 = :accountID)"); +$query->execute([':accountID' => $accountID, ':targetAccountID' => $targetAccountID]); +if($automaticCron) Cron::updateFriendsCount($accountID, false); +$gs->logAction($accountID, 29, $targetAccountID); echo 1; \ No newline at end of file diff --git a/incl/relationships/deleteGJFriendRequests.php b/incl/relationships/deleteGJFriendRequests.php index 6ced40edf..260742221 100644 --- a/incl/relationships/deleteGJFriendRequests.php +++ b/incl/relationships/deleteGJFriendRequests.php @@ -1,18 +1,13 @@ prepare("DELETE from friendreqs WHERE accountID=:accountID AND toAccountID=:targetAccountID LIMIT 1"); -}else{ - $query = $db->prepare("DELETE from friendreqs WHERE toAccountID=:accountID AND accountID=:targetAccountID LIMIT 1"); -} -$query->execute([':accountID' => $accountID, ':targetAccountID' => $targetAccountID]); +$query = $db->prepare("DELETE FROM friendreqs WHERE (accountID = :accountID AND toAccountID = :targetAccountID) OR (toAccountID = :accountID AND accountID = :targetAccountID) LIMIT 1"); +if($query->execute([':accountID' => $accountID, ':targetAccountID' => $targetAccountID])) $gs->logAction($accountID, 30, $targetAccountID); echo "1"; \ No newline at end of file diff --git a/incl/relationships/getGJFriendRequests.php b/incl/relationships/getGJFriendRequests.php index 4bfceacdf..5ef919674 100644 --- a/incl/relationships/getGJFriendRequests.php +++ b/incl/relationships/getGJFriendRequests.php @@ -1,54 +1,51 @@ 21) ? $_POST["gjp2"] : $_POST["gjp"]; // Backwards Compatible GJP -if(empty($_POST["accountID"]) OR (!isset($_POST["page"]) OR !is_numeric($_POST["page"])) OR empty($bcgjp)){ +if(empty($_POST["accountID"]) OR (!isset($_POST["page"]) OR !is_numeric($_POST["page"])) OR empty($bcgjp)) { exit("-1"); } - $accountID = GJPCheck::getAccountIDOrDie(); $page = ExploitPatch::number($_POST["page"]); $offset = $page*10; -if($getSent == 0){ +if($getSent == 0) { $query = "SELECT accountID, toAccountID, uploadDate, ID, comment, isNew FROM friendreqs WHERE toAccountID = :accountID LIMIT 10 OFFSET $offset"; $countquery = "SELECT count(*) FROM friendreqs WHERE toAccountID = :accountID"; -}elseif($getSent == 1){ +} elseif($getSent == 1) { $query = "SELECT * FROM friendreqs WHERE accountID = :accountID LIMIT 10 OFFSET $offset"; $countquery = "SELECT count(*) FROM friendreqs WHERE accountID = :accountID"; -}else{ - exit("-1"); -} +} else exit("-1"); $query = $db->prepare($query); $query->execute([':accountID' => $accountID]); $result = $query->fetchAll(); $countquery = $db->prepare($countquery); $countquery->execute([':accountID' => $accountID]); $reqcount = $countquery->fetchColumn(); -if($reqcount == 0){ - exit("-2"); -} +if($reqcount == 0) exit("-2"); foreach($result as &$request) { - if($getSent == 0){ + if($getSent == 0) { $requester = $request["accountID"]; - }else if($getSent == 1){ + } elseif($getSent == 1) { $requester = $request["toAccountID"]; } - $query = "SELECT userName, userID, icon, color1, color2, iconType, special, extID FROM users WHERE extID = :requester"; + $query = "SELECT userName, userID, icon, color1, color2, iconType, special, extID, clan FROM users WHERE extID = :requester"; $query = $db->prepare($query); $query->execute([':requester' => $requester]); - $result2 = $query->fetchAll(); - $user = $result2[0]; - $uploadTime = date("d/m/Y G.i", $request["uploadDate"]); - $extid = is_numeric($user['extID']) ? $user['extID'] : 0; + $user = $query->fetch(); + $uploadTime = $gs->makeTime($request["uploadDate"]); + $extid = is_numeric($user["extID"]) ? $user['extID'] : 0; + $user["userName"] = $gs->makeClanUsername($user); + $request["comment"] = ExploitPatch::url_base64_encode(ExploitPatch::translit(ExploitPatch::url_base64_decode($request["comment"]))); $reqstring .= "1:".$user["userName"].":2:".$user["userID"].":9:".$user["icon"].":10:".$user["color1"].":11:".$user["color2"].":14:".$user["iconType"].":15:".$user["special"].":16:".$extid.":32:".$request["ID"].":35:".$request["comment"].":41:".$request["isNew"].":37:".$uploadTime."|"; } $reqstring = substr($reqstring, 0, -1); echo $reqstring; echo "#${reqcount}:${offset}:10"; -?> +?> \ No newline at end of file diff --git a/incl/relationships/getGJUserList.php b/incl/relationships/getGJUserList.php index 34eb56685..cbb74a378 100644 --- a/incl/relationships/getGJUserList.php +++ b/incl/relationships/getGJUserList.php @@ -1,9 +1,10 @@ prepare("SELECT userName, userID, icon, color1, color2, iconType, special, extID FROM users WHERE extID IN ($people) ORDER BY userName ASC"); + $query = $db->prepare("SELECT userName, userID, icon, color1, color2, iconType, special, extID, clan FROM users WHERE extID IN ($people) ORDER BY userName ASC"); $query->execute(); $result = $query->fetchAll(); - foreach($result as &$user){ + foreach($result as &$user) { + $user["userName"] = $gs->makeClanUsername($user); $user['extID'] = is_numeric($user['extID']) ? $user['extID'] : 0; $peoplestring .= "1:".$user["userName"].":2:".$user["userID"].":9:".$user["icon"].":10:".$user["color1"].":11:".$user["color2"].":14:".$user["iconType"].":15:".$user["special"].":16:".$user["extID"].":18:0:41:".$new[$user["extID"]]."|"; } diff --git a/incl/relationships/readGJFriendRequest.php b/incl/relationships/readGJFriendRequest.php index b4bdea11e..23667432b 100644 --- a/incl/relationships/readGJFriendRequest.php +++ b/incl/relationships/readGJFriendRequest.php @@ -1,16 +1,13 @@ prepare("UPDATE friendreqs SET isNew='0' WHERE ID = :requestID AND toAccountID = :targetAcc"); +$query = $db->prepare("UPDATE friendreqs SET isNew='0' WHERE ID = :requestID AND toAccountID = :targetAcc"); $query->execute([':requestID' => $requestID, ':targetAcc' => $accountID]); echo "1"; \ No newline at end of file diff --git a/incl/relationships/removeGJFriend.php b/incl/relationships/removeGJFriend.php index 1bd8c718c..0ad746c63 100644 --- a/incl/relationships/removeGJFriend.php +++ b/incl/relationships/removeGJFriend.php @@ -1,21 +1,16 @@ prepare($query); -$query->execute([':accountID' => $accountID, ':targetAccountID' => $targetAccountID]); - -$query = "DELETE FROM friendships WHERE person2 = :accountID AND person1 = :targetAccountID"; -$query = $db->prepare($query); -$query->execute([':accountID' => $accountID, ':targetAccountID' => $targetAccountID]); - +$query = $db->prepare("DELETE FROM friendships WHERE (person1 = :accountID AND person2 = :targetAccountID) OR (person2 = :accountID AND person1 = :targetAccountID)"); +if($query->execute([':accountID' => $accountID, ':targetAccountID' => $targetAccountID])) $gs->logAction($accountID, 31, $targetAccountID); +if($automaticCron) Cron::updateFriendsCount($accountID, false); echo "1"; \ No newline at end of file diff --git a/incl/relationships/unblockGJUser.php b/incl/relationships/unblockGJUser.php index 19e21e4e6..6710629e7 100644 --- a/incl/relationships/unblockGJUser.php +++ b/incl/relationships/unblockGJUser.php @@ -1,17 +1,15 @@ prepare($query); -$query->execute([':accountID' => $accountID, ':targetAccountID' => $targetAccountID]); - +$query = $db->prepare("DELETE FROM blocks WHERE person1 = :accountID AND person2 = :targetAccountID"); +if($query->execute([':accountID' => $accountID, ':targetAccountID' => $targetAccountID])) $gs->logAction($accountID, 32, $targetAccountID); echo "1"; \ No newline at end of file diff --git a/incl/relationships/uploadFriendRequest.php b/incl/relationships/uploadFriendRequest.php index 015723f6a..8d0a15457 100644 --- a/incl/relationships/uploadFriendRequest.php +++ b/incl/relationships/uploadFriendRequest.php @@ -1,30 +1,25 @@ query("SELECT ID FROM `blocks` WHERE person1 = $toAccountID AND person2 = $accountID")->fetchAll(PDO::FETCH_COLUMN); $frSOnly = $db->query("SELECT frS FROM `accounts` WHERE accountID = $toAccountID AND frS = 1")->fetchAll(PDO::FETCH_COLUMN); $query = $db->prepare("SELECT count(*) FROM friendreqs WHERE (accountID=:accountID AND toAccountID=:toAccountID) OR (toAccountID=:accountID AND accountID=:toAccountID)"); $query->execute([':accountID' => $accountID, ':toAccountID' => $toAccountID]); -if($query->fetchColumn() == 0 and empty($blocked[0]) and empty($frSOnly[0])){ +if($query->fetchColumn() == 0 && empty($blocked[0]) && empty($frSOnly[0])) { $query = $db->prepare("INSERT INTO friendreqs (accountID, toAccountID, comment, uploadDate) VALUES (:accountID, :toAccountID, :comment, :uploadDate)"); $query->execute([':accountID' => $accountID, ':toAccountID' => $toAccountID, ':comment' => $comment, ':uploadDate' => $uploadDate]); + $gs->logAction($accountID, 33, $toAccountID, $comment); echo 1; -}else{ - echo -1; -} +} else echo '-1'; ?> diff --git a/incl/rewards/getGJChallenges.php b/incl/rewards/getGJChallenges.php index 13623930e..389906800 100644 --- a/incl/rewards/getGJChallenges.php +++ b/incl/rewards/getGJChallenges.php @@ -1,6 +1,6 @@ getUserID($udid); } -$chk = XORCipher::cipher(base64_decode(substr($chk, 5)),19847); +$chk = XORCipher::cipher(ExploitPatch::url_base64_decode(substr($chk, 5)),19847); //Generating quest IDs $from = strtotime('2000-12-17'); $today = time(); @@ -45,7 +45,7 @@ $quest1 = $quest1ID.",".$result[0]["type"].",".$result[0]["amount"].",".$result[0]["reward"].",".$result[0]["name"].""; $quest2 = $quest2ID.",".$result[1]["type"].",".$result[1]["amount"].",".$result[1]["reward"].",".$result[1]["name"].""; $quest3 = $quest3ID.",".$result[2]["type"].",".$result[2]["amount"].",".$result[2]["reward"].",".$result[2]["name"].""; -$string = base64_encode(XORCipher::cipher("SaKuJ:".$userID.":".$chk.":".$udid.":".$accountID.":".$timeleft.":".$quest1.":".$quest2.":".$quest3."",19847)); +$string = ExploitPatch::url_base64_encode(XORCipher::cipher("SaKuJ:".$userID.":".$chk.":".$udid.":".$accountID.":".$timeleft.":".$quest1.":".$quest2.":".$quest3."",19847)); $hash = GenerateHash::genSolo3($string); echo "SaKuJ".$string . "|".$hash; ?> diff --git a/incl/rewards/getGJRewards.php b/incl/rewards/getGJRewards.php index f6757ab8b..cf118cdbb 100644 --- a/incl/rewards/getGJRewards.php +++ b/incl/rewards/getGJRewards.php @@ -1,8 +1,8 @@ getUserID($extID); $udid = ExploitPatch::remove($_POST["udid"]); $accountID = ExploitPatch::remove($_POST["accountID"]); -$chk = XORCipher::cipher(base64_decode(substr($chk, 5)),59182); +$chk = XORCipher::cipher(ExploitPatch::url_base64_decode(substr($chk, 5)),59182); $query=$db->prepare("SELECT chest1time, chest1count, chest2time, chest2count FROM users WHERE extID = :extID"); $query->execute([':extID' => $extID]); @@ -60,8 +60,6 @@ $query->execute([':chest2count' => $chest2count, ':userID' => $userid, ':currenttime' => $currenttime]); $chest2left = $chest2wait; } -$string = base64_encode(XORCipher::cipher("1:".$userid.":".$chk.":".$udid.":".$accountID.":".$chest1left.":".$chest1stuff.":".$chest1count.":".$chest2left.":".$chest2stuff.":".$chest2count.":".$rewardType."",59182)); -$string = str_replace("/","_",$string); -$string = str_replace("+","-",$string); +$string = ExploitPatch::url_base64_encode(XORCipher::cipher("1:".$userid.":".$chk.":".$udid.":".$accountID.":".$chest1left.":".$chest1stuff.":".$chest1count.":".$chest2left.":".$chest2stuff.":".$chest2count.":".$rewardType."",59182)); $hash = GenerateHash::genSolo4($string); echo "SaKuJ".$string . "|".$hash; diff --git a/incl/rewards/getGJSecretReward.php b/incl/rewards/getGJSecretReward.php new file mode 100644 index 000000000..8085b5db3 --- /dev/null +++ b/incl/rewards/getGJSecretReward.php @@ -0,0 +1,35 @@ +getIDFromPost() ?: 0; +$rewardKey = ExploitPatch::charclean($_POST["rewardKey"]); +$chk = XORCipher::cipher(ExploitPatch::url_base64_decode(substr(ExploitPatch::charclean($_POST["chk"]), 5)), 59182); + +$vaultCode = $db->prepare('SELECT * FROM vaultcodes WHERE code = :code'); +$vaultCode->execute([':code' => base64_encode($rewardKey)]); +$vaultCode = $vaultCode->fetch(); + +if(!$vaultCode || $vaultCode['uses'] == 0 || ($vaultCode['duration'] != 0 && $vaultCode['duration'] <= time())) exit('-1'); + +$check = $db->prepare("SELECT count(*) FROM actions WHERE type = 38 AND value = :vaultCode AND account = :extID"); +$check->execute([':vaultCode' => $vaultCode['rewardID'], ':extID' => $extID]); +$check = $check->fetchColumn(); +if($check) exit('-1'); + +if($vaultCode['uses'] > 0) { + $reduceUses = $db->prepare('UPDATE vaultcodes SET uses = uses - 1 WHERE rewardID = :rewardID'); + $reduceUses->execute([':rewardID' => $vaultCode['rewardID']]); +} + +$gs->logAction($extID, 38, $vaultCode['rewardID'], $vaultCode['rewards'], $rewardKey); +$string = ExploitPatch::url_base64_encode(XORCipher::cipher('Sa1nt:'.$chk.':'.$vaultCode['rewardID'].':1:'.$vaultCode['rewards'], 59182)); +$hash = $gh->genSolo4($string); +echo 'Sa1nt'.$string.'|'.$hash; +?> \ No newline at end of file diff --git a/incl/scores/getGJCreators.php b/incl/scores/getGJCreators.php index fda5c5780..e93b08709 100644 --- a/incl/scores/getGJCreators.php +++ b/incl/scores/getGJCreators.php @@ -1,19 +1,44 @@ prepare($query); +$bans = $gs->getAllBansOfBanType(1); +$extIDs = $userIDs = $bannedIPs = []; +foreach($bans AS &$ban) { + switch($ban['personType']) { + case 0: + $extIDs[] = $ban['person']; + break; + case 1: + $userIDs[] = $ban['person']; + break; + case 2: + $bannedIPs[] = $gs->IPForBan($ban['person'], true); + break; + } +} +$extIDsString = implode("','", $extIDs); +$userIDsString = implode("','", $userIDs); +$bannedIPsString = implode("|", $bannedIPs); +$queryArray = []; +if(!empty($extIDsString)) $queryArray[] = "extID NOT IN ('".$extIDsString."')"; +if(!empty($userIDsString)) $queryArray[] = "userID NOT IN ('".$userIDsString."')"; +if(!empty($bannedIPsString)) $queryArray[] = "IP NOT REGEXP '".$bannedIPsString."'"; +$queryText = !empty($queryArray) ? '('.implode(' AND ', $queryArray).') AND' : ''; +$query = $db->prepare("SELECT * FROM users WHERE ".$queryText." creatorPoints > 0 ORDER BY creatorPoints DESC LIMIT 100"); $query->execute(); $result = $query->fetchAll(); -foreach($result as &$user){ +$xi = 0; +foreach($result as &$user) { + $extid = is_numeric($user["extID"]) ? $user["extID"] : 0; $xi++; - $extid = is_numeric($user['extID']) ? $user['extID'] : 0; + $user["userName"] = $gs->makeClanUsername($user); $pplstring .= "1:".$user["userName"].":2:".$user["userID"].":13:".$user["coins"].":17:".$user["userCoins"].":6:".$xi.":9:".$user["icon"].":10:".$user["color1"].":11:".$user["color2"].":14:".$user["iconType"].":15:".$user["special"].":16:".$extid.":3:".$user["stars"].":8:".round($user["creatorPoints"],0,PHP_ROUND_HALF_DOWN).":4:".$user["demons"].":7:".$extid.":46:".$user["diamonds"]."|"; } $pplstring = substr($pplstring, 0, -1); echo $pplstring; -?> +?> \ No newline at end of file diff --git a/incl/scores/getGJLevelScores.php b/incl/scores/getGJLevelScores.php index fae1b663e..7f7274dec 100644 --- a/incl/scores/getGJLevelScores.php +++ b/incl/scores/getGJLevelScores.php @@ -1,61 +1,54 @@ getUserID($accountID); -$condition = ($dailyID > 0) ? ">" : "="; -$query2 = $db->prepare("SELECT percent FROM levelscores WHERE accountID = :accountID AND levelID = :levelID AND dailyID $condition 0"); -$query2->execute([':accountID' => $accountID, ':levelID' => $levelID]); -$oldPercent = $query2->fetchColumn(); -if($query2->rowCount() == 0) { - $query = $db->prepare("INSERT INTO levelscores (accountID, levelID, percent, uploadDate, coins, attempts, clicks, time, progresses, dailyID) - VALUES (:accountID, :levelID, :percent, :uploadDate, :coins, :attempts, :clicks, :time, :progresses, :dailyID)"); -} else { - if($oldPercent <= $percent){ - $query = $db->prepare("UPDATE levelscores SET percent=:percent, uploadDate=:uploadDate, coins=:coins, attempts=:attempts, clicks=:clicks, time=:time, progresses=:progresses, dailyID=:dailyID WHERE accountID=:accountID AND levelID=:levelID AND dailyID $condition 0"); - }else{ - $query = $db->prepare("SELECT count(*) FROM levelscores WHERE percent=:percent AND uploadDate=:uploadDate AND accountID=:accountID AND levelID=:levelID AND coins = :coins AND attempts = :attempts AND clicks = :clicks AND time = :time AND progresses = :progresses AND dailyID = :dailyID"); +if(!Automod::isLevelsDisabled(2)) { + $condition = ($dailyID > 0) ? ">" : "="; + $query2 = $db->prepare("SELECT percent FROM levelscores WHERE accountID = :accountID AND levelID = :levelID AND dailyID $condition 0"); + $query2->execute([':accountID' => $accountID, ':levelID' => $levelID]); + $oldPercent = $query2->fetchColumn(); + if($query2->rowCount() == 0) { + $gs->logAction($accountID, 34, $levelID, $percent, $coins, $attempts, $clicks, $time); + $query = $db->prepare("INSERT INTO levelscores (accountID, levelID, percent, uploadDate, coins, attempts, clicks, time, progresses, dailyID) + VALUES (:accountID, :levelID, :percent, :uploadDate, :coins, :attempts, :clicks, :time, :progresses, :dailyID)"); + } else { + if($oldPercent < $percent) { + $gs->logAction($accountID, 35, $levelID, $percent, $coins, $attempts, $clicks, $time); + $query = $db->prepare("UPDATE levelscores SET percent=:percent, uploadDate=:uploadDate, coins=:coins, attempts=:attempts, clicks=:clicks, time=:time, progresses=:progresses, dailyID=:dailyID WHERE accountID=:accountID AND levelID=:levelID AND dailyID $condition 0"); + } else { + $query = $db->prepare("SELECT count(*) FROM levelscores WHERE percent=:percent AND uploadDate=:uploadDate AND accountID=:accountID AND levelID=:levelID AND coins = :coins AND attempts = :attempts AND clicks = :clicks AND time = :time AND progresses = :progresses AND dailyID = :dailyID"); + } } -} -$query->execute([':accountID' => $accountID, ':levelID' => $levelID, ':percent' => $percent, ':uploadDate' => $uploadDate, ':coins' => $coins, ':attempts' => $attempts, ':clicks' => $clicks, ':time' => $time, ':progresses' => $progresses, ':dailyID' => $dailyID]); -if($percent > 100){ - $query = $db->prepare("UPDATE users SET isBanned=1 WHERE extID = :accountID"); - $query->execute([':accountID' => $accountID]); + $query->execute([':accountID' => $accountID, ':levelID' => $levelID, ':percent' => $percent, ':uploadDate' => $uploadDate, ':coins' => $coins, ':attempts' => $attempts, ':clicks' => $clicks, ':time' => $time, ':progresses' => $progresses, ':dailyID' => $dailyID]); } - - +if($percent > 100 || $percent < 0) $gs->banPerson(0, $accountID, 'Bro tried to post invalid percent value to level leaderboards. ('.$percent.')', 0, 0, 2147483647); //GETTING SCORES -if(!isset($_POST["type"])){ - $type = 1; -}else{ - $type = $_POST["type"]; -} -switch($type){ +$type = $_POST['type'] ?? 1; +switch($type) { case 0: $friends = $gs->getFriends($accountID); $friends[] = $accountID; - $friends = implode(",",$friends); + $friends = implode(",", $friends); $query2 = $db->prepare("SELECT accountID, uploadDate, percent, coins FROM levelscores WHERE dailyID $condition 0 AND levelID = :levelID AND accountID IN ($friends) ORDER BY percent DESC"); $query2args = [':levelID' => $levelID]; break; @@ -68,29 +61,23 @@ $query2args = [':levelID' => $levelID, ':time' => time() - 604800]; break; default: - return -1; + exit('-1'); break; } - - - $query2->execute($query2args); $result = $query2->fetchAll(); -foreach ($result as &$score) { +foreach($result as &$score) { $extID = $score["accountID"]; - $query2 = $db->prepare("SELECT userName, userID, icon, color1, color2, color3, iconType, special, extID, isBanned FROM users WHERE extID = :extID"); + $query2 = $db->prepare("SELECT userName, extID, userID, icon, color1, color2, color3, iconType, special, clan, IP FROM users WHERE extID = :extID"); $query2->execute([':extID' => $extID]); - $user = $query2->fetchAll(); - $user = $user[0]; - $time = date("d/m/Y G.i", $score["uploadDate"]); - if($user["isBanned"]==0){ - if($score["percent"] == 100){ - $place = 1; - }else if($score["percent"] > 75){ - $place = 2; - }else{ - $place = 3; - } + $user = $query2->fetch(); + $time = $gs->makeTime($score["uploadDate"]); + $isBanned = $gs->getPersonBan($user['extID'], $user['userID'], 0, $user['IP']); + if(!$isBanned) { + if($score["percent"] == 100) $place = 1; + else if($score["percent"] > 75) $place = 2; + else $place = 3; + $user["userName"] = $gs->makeClanUsername($user); echo "1:".$user["userName"].":2:".$user["userID"].":9:".$user["icon"].":10:".$user["color1"].":11:".$user["color2"].":51:".$user["color3"].":14:".$user["iconType"].":15:".$user["special"].":16:".$user["extID"].":3:".$score["percent"].":6:".$place.":13:".$score["coins"].":42:".$time."|"; } } diff --git a/incl/scores/getGJLevelScoresPlat.php b/incl/scores/getGJLevelScoresPlat.php index e20ec2330..23cb8778e 100644 --- a/incl/scores/getGJLevelScoresPlat.php +++ b/incl/scores/getGJLevelScoresPlat.php @@ -1,76 +1,80 @@ -prepare("SELECT {$mode} FROM platscores WHERE accountID = :accountID AND levelID = :levelID"); -$query2->execute([':accountID' => $accountID, ':levelID' => $levelID]); -$oldPercent = $query2->fetchColumn(); -if($query2->rowCount() == 0) { - if($scores['time'] > 0) { - $query = $db->prepare("INSERT INTO platscores (accountID, levelID, time, timestamp) VALUES (:accountID, :levelID, :time, :timestamp)"); - $query->execute([':accountID' => $accountID, ':levelID' => $levelID, ":time" => $scores['time'], ':timestamp' => $uploadDate]); - } -} else { - if((($mode == "time" AND $oldPercent > $scores['time']) OR ($mode == "points" AND $oldPercent < $scores['points'])) AND $scores['time'] > 0) { - $query = $db->prepare("UPDATE platscores SET {$mode}=:{$mode}, timestamp=:timestamp WHERE accountID=:accountID AND levelID=:levelID"); - } else { - $query = $db->prepare("SELECT count(*) FROM platscores WHERE {$mode}=:{$mode} AND timestamp=:timestamp AND accountID=:accountID AND levelID=:levelID"); - } - $query->execute([':accountID' => $accountID, ':levelID' => $levelID, ":{$mode}" => $scores[$mode], ':timestamp' => $uploadDate]); -} -//GETTING SCORES -if(!isset($_POST["type"])){ - $type = 1; -}else{ - $type = $_POST["type"]; -} -switch($type){ - case 0: - $friends = $gs->getFriends($accountID); - $friends[] = $accountID; - $friends = implode(",",$friends); - $query2 = $db->prepare("SELECT * FROM platscores WHERE levelID = :levelID AND accountID IN ($friends) AND time > 0 ORDER BY {$mode} {$order}"); - $query2args = [':levelID' => $levelID]; - break; - case 1: - $query2 = $db->prepare("SELECT * FROM platscores WHERE levelID = :levelID AND time > 0 ORDER BY {$mode} {$order}"); - $query2args = [':levelID' => $levelID]; - break; - case 2: - $query2 = $db->prepare("SELECT * FROM platscores WHERE levelID = :levelID AND timestamp > :time AND time > 0 ORDER BY {$mode} {$order}"); - $query2args = [':levelID' => $levelID, ':time' => $uploadDate - 604800]; - break; - default: - return -1; - break; -} -$query2->execute($query2args); -$result = $query2->fetchAll(); -$x = 0; -foreach ($result as &$score) { - $extID = $score["accountID"]; - $query2 = $db->prepare("SELECT userName, userID, icon, color1, color2, color3, iconType, special, extID, isBanned FROM users WHERE extID = :extID"); - $query2->execute([':extID' => $extID]); - $user = $query2->fetchAll(); - $user = $user[0]; - if($user["isBanned"] != 0) continue; - $x++; - $time = date("d/m/Y G.i", $score["timestamp"]); - $scoreType = $score[$mode]; - $lvlstr .= "1:{$user['userName']}:2:{$user['userID']}:9:{$user['icon']}:10:{$user['color1']}:11:{$user['color2']}:14:{$user['iconType']}:15:{$user['color3']}:16:{$extID}:3:{$scoreType}:6:{$x}:42:{$time}|"; -} -echo substr($lvlstr, 0, -1); -?> +prepare("SELECT {$mode} FROM platscores WHERE accountID = :accountID AND levelID = :levelID"); + $query2->execute([':accountID' => $accountID, ':levelID' => $levelID]); + $oldPercent = $query2->fetchColumn(); + if($query2->rowCount() == 0) { + if($scores['time'] > 0) { + $query = $db->prepare("INSERT INTO platscores (accountID, levelID, time, points, timestamp) VALUES (:accountID, :levelID, :time, :points, :timestamp)"); + $query->execute([':accountID' => $accountID, ':levelID' => $levelID, ":time" => $scores['time'], ':points' => $scores['points'], ':timestamp' => $uploadDate]); + $gs->logAction($accountID, 36, $levelID, $mode, $scores['time'], $scores['points']); + } + } else { + if((($mode == "time" AND $oldPercent > $scores['time']) OR ($mode == "points" AND $oldPercent < $scores['points'])) AND $scores['time'] > 0) { + $gs->logAction($accountID, 37, $levelID, $mode, $scores['time'], $scores['points']); + $query = $db->prepare("UPDATE platscores SET {$mode}=:{$mode}, timestamp=:timestamp WHERE accountID=:accountID AND levelID=:levelID"); + } else { + $query = $db->prepare("SELECT count(*) FROM platscores WHERE {$mode}=:{$mode} AND timestamp=:timestamp AND accountID=:accountID AND levelID=:levelID"); + } + $query->execute([':accountID' => $accountID, ':levelID' => $levelID, ":{$mode}" => $scores[$mode], ':timestamp' => $uploadDate]); + } +} +if(!isset($_POST["type"])){ + $type = 1; +}else{ + $type = $_POST["type"]; +} +switch($type){ + case 0: + $friends = $gs->getFriends($accountID); + $friends[] = $accountID; + $friends = implode(",",$friends); + $query2 = $db->prepare("SELECT * FROM platscores WHERE levelID = :levelID AND accountID IN ($friends) AND time > 0 ORDER BY {$mode} {$order}"); + $query2args = [':levelID' => $levelID]; + break; + case 1: + $query2 = $db->prepare("SELECT * FROM platscores WHERE levelID = :levelID AND time > 0 ORDER BY {$mode} {$order}"); + $query2args = [':levelID' => $levelID]; + break; + case 2: + $query2 = $db->prepare("SELECT * FROM platscores WHERE levelID = :levelID AND timestamp > :time AND time > 0 ORDER BY {$mode} {$order}"); + $query2args = [':levelID' => $levelID, ':time' => $uploadDate - 604800]; + break; + default: + return -1; + break; +} +$query2->execute($query2args); +$result = $query2->fetchAll(); +$x = 0; +foreach ($result as &$score) { + $extID = $score["accountID"]; + $query2 = $db->prepare("SELECT userName, clan, userID, icon, color1, color2, color3, iconType, special, extID, IP FROM users WHERE extID = :extID"); + $query2->execute([':extID' => $extID]); + $user = $query2->fetch(); + $isBanned = $gs->getPersonBan($user['extID'], $user['userID'], 0, $user['IP']); + if($isBanned) continue; + $x++; + $time = $gs->makeTime($score["timestamp"]); + $scoreType = $score[$mode]; + $user["userName"] = $gs->makeClanUsername($user); + $lvlstr .= "1:{$user['userName']}:2:{$user['userID']}:9:{$user['icon']}:10:{$user['color1']}:11:{$user['color2']}:14:{$user['iconType']}:15:{$user['color3']}:16:{$extID}:3:{$scoreType}:6:{$x}:42:{$time}|"; +} +echo substr($lvlstr, 0, -1); +?> \ No newline at end of file diff --git a/incl/scores/getGJScores.php b/incl/scores/getGJScores.php index 2a66de59c..24913ccee 100644 --- a/incl/scores/getGJScores.php +++ b/incl/scores/getGJScores.php @@ -1,135 +1,200 @@ 0"; -}else{ - $sign = "> 19"; -} -if(!empty($_POST["accountID"])){ - $accountID = GJPCheck::getAccountIDOrDie(); -}else{ - $accountID = ExploitPatch::remove($_POST["udid"]); - if(is_numeric($accountID)){ - exit("-1"); - } -} - -$type = ExploitPatch::remove($_POST["type"]); -if($type == "top" OR $type == "creators" OR $type == "relative"){ - if($type == "top"){ - $query = $db->prepare("SELECT * FROM users WHERE isBanned = '0' AND gameVersion $sign AND stars > 0 ORDER BY stars DESC LIMIT 100"); - $query->execute(); - } - if($type == "creators"){ - $query = $db->prepare("SELECT * FROM users WHERE isCreatorBanned = '0' AND creatorPoints > 0 ORDER BY creatorPoints DESC LIMIT 100"); +$accountID = $gs->getIDFromPost(); +$type = ExploitPatch::charclean($_POST["type"]); +switch($type) { + case 'top': + $bans = $gs->getAllBansOfBanType(0); + $extIDs = $userIDs = $bannedIPs = []; + foreach($bans AS &$ban) { + switch($ban['personType']) { + case 0: + $extIDs[] = $ban['person']; + break; + case 1: + $userIDs[] = $ban['person']; + break; + case 2: + $bannedIPs[] = $gs->IPForBan($ban['person'], true); + break; + } + } + $extIDsString = implode("','", $extIDs); + $userIDsString = implode("','", $userIDs); + $bannedIPsString = implode("|", $bannedIPs); + $queryArray = []; + if(!empty($extIDsString)) $queryArray[] = "extID NOT IN ('".$extIDsString."')"; + if(!empty($userIDsString)) $queryArray[] = "userID NOT IN ('".$userIDsString."')"; + if(!empty($bannedIPsString)) $queryArray[] = "IP NOT REGEXP '".$bannedIPsString."'"; + $queryText = !empty($queryArray) ? '('.implode(' AND ', $queryArray).') AND' : ''; + $query = $db->prepare("SELECT * FROM users WHERE ".$queryText." stars >= :stars ORDER BY stars + moons DESC LIMIT 100"); + $query->execute([':stars' => $leaderboardMinStars]); + break; + case 'creators': + $bans = $gs->getAllBansOfBanType(1); + $extIDs = $userIDs = $bannedIPs = []; + foreach($bans AS &$ban) { + switch($ban['personType']) { + case 0: + $extIDs[] = $ban['person']; + break; + case 1: + $userIDs[] = $ban['person']; + break; + case 2: + $bannedIPs[] = $gs->IPForBan($ban['person'], true); + break; + } + } + $extIDsString = implode("','", $extIDs); + $userIDsString = implode("','", $userIDs); + $bannedIPsString = implode("|", $bannedIPs); + $queryArray = []; + if(!empty($extIDsString)) $queryArray[] = "extID NOT IN ('".$extIDsString."')"; + if(!empty($userIDsString)) $queryArray[] = "userID NOT IN ('".$userIDsString."')"; + if(!empty($bannedIPsString)) $queryArray[] = "IP NOT REGEXP '".$bannedIPsString."'"; + $queryText = !empty($queryArray) ? '('.implode(' AND ', $queryArray).') AND' : ''; + $query = $db->prepare("SELECT * FROM users WHERE ".$queryText." creatorPoints > 0 ORDER BY creatorPoints DESC LIMIT 100"); $query->execute(); - } - if($type == "relative"){ - $query = "SELECT * FROM users WHERE extID = :accountID"; + break; + case 'relative': + if(!$moderatorsListInGlobal) { + $bans = $gs->getAllBansOfBanType(0); + $extIDs = $userIDs = $bannedIPs = []; + foreach($bans AS &$ban) { + switch($ban['personType']) { + case 0: + $extIDs[] = $ban['person']; + break; + case 1: + $userIDs[] = $ban['person']; + break; + case 2: + $bannedIPs[] = $gs->IPForBan($ban['person'], true); + break; + } + } + $extIDsString = implode("','", $extIDs); + $userIDsString = implode("','", $userIDs); + $bannedIPsString = implode("|", $bannedIPs); + $queryArray = []; + if(!empty($extIDsString)) $queryArray[] = "extID NOT IN ('".$extIDsString."')"; + if(!empty($userIDsString)) $queryArray[] = "userID NOT IN ('".$userIDsString."')"; + if(!empty($bannedIPsString)) $queryArray[] = "IP NOT REGEXP '".$bannedIPsString."'"; + $queryText = !empty($queryArray) ? 'AND ('.implode(' AND ', $queryArray).')' : ''; + $query = "SELECT * FROM users WHERE extID = :accountID"; + $query = $db->prepare($query); + $query->execute([':accountID' => $accountID]); + $user = $query->fetch(); + $stars = $user["stars"]; + $count = $_POST["count"] ? ExploitPatch::number($_POST["count"]) : 50; + $count = floor($count / 2); + $query = $db->prepare("SELECT A.* FROM ( + ( + SELECT * FROM users + WHERE stars <= :stars + ".$queryText." + ORDER BY stars + moons DESC + LIMIT $count + ) + UNION + ( + SELECT * FROM users + WHERE stars >= :stars + ".$queryText." + ORDER BY stars + moons ASC + LIMIT $count + ) + ) as A + ORDER BY A.stars DESC"); + $query->execute([':stars' => $stars]); + } else { + $query = $db->prepare("SELECT * FROM users INNER JOIN roleassign ON users.extID = roleassign.accountID ORDER BY users.userName ASC"); + $query ->execute(); + } + break; + case 'friends': + $query = "SELECT * FROM friendships WHERE person1 = :accountID OR person2 = :accountID"; $query = $db->prepare($query); $query->execute([':accountID' => $accountID]); $result = $query->fetchAll(); - $user = $result[0]; - $stars = $user["stars"]; - if($_POST["count"]){ - $count = ExploitPatch::remove($_POST["count"]); - }else{ - $count = 50; + $people = ""; + foreach($result as &$friendship) { + $person = $friendship["person2"] == $accountID ? $friendship["person1"] : $friendship["person2"]; + $people .= ",".$person; } - $count = floor($count / 2); - $query = $db->prepare("SELECT A.* FROM ( - ( - SELECT * FROM users - WHERE stars <= :stars - AND isBanned = 0 - AND gameVersion $sign - ORDER BY stars DESC - LIMIT $count - ) - UNION - ( - SELECT * FROM users - WHERE stars >= :stars - AND isBanned = 0 - AND gameVersion $sign - ORDER BY stars ASC - LIMIT $count - ) - ) as A - ORDER BY A.stars DESC"); - $query->execute([':stars' => $stars]); - } - $result = $query->fetchAll(); - if($type == "relative"){ + $query = "SELECT * FROM users WHERE extID IN (:accountID $people ) ORDER BY stars DESC"; + $query = $db->prepare($query); + $query->execute([':accountID' => $accountID]); + break; + case 'week': + $bans = $gs->getAllBansOfBanType(0); + $extIDs = $userIDs = $bannedIPs = []; + foreach($bans AS &$ban) { + switch($ban['personType']) { + case 0: + $extIDs[] = $ban['person']; + break; + case 1: + $userIDs[] = $ban['person']; + break; + case 2: + $bannedIPs[] = $gs->IPForBan($ban['person'], true); + break; + } + } + $extIDsString = implode("','", $extIDs); + $userIDsString = implode("','", $userIDs); + $bannedIPsString = implode("|", $bannedIPs); + $queryArray = []; + if(!empty($extIDsString)) $queryArray[] = "extID NOT IN ('".$extIDsString."')"; + if(!empty($userIDsString)) $queryArray[] = "userID NOT IN ('".$userIDsString."')"; + if(!empty($bannedIPsString)) $queryArray[] = "IP NOT REGEXP '".$bannedIPsString."'"; + $queryText = !empty($queryArray) ? 'AND ('.implode(' AND ', $queryArray).')' : ''; + $query = $db->prepare("SELECT users.*, SUM(actions.value) AS stars, SUM(actions.value2) AS coins, SUM(actions.value3) AS demons FROM actions INNER JOIN users ON actions.account = users.extID WHERE type = '9' AND timestamp > :time ".$queryText." AND actions.value > 0 GROUP BY (stars) DESC ORDER BY stars + moons DESC LIMIT 100"); + $query->execute([':time' => time() - 604800]); + break; +} +$result = $query->fetchAll(); +if($type == "relative") { + if(!$moderatorsListInGlobal) { $user = $result[0]; $extid = $user["extID"]; $e = "SET @rownum := 0;"; $query = $db->prepare($e); $query->execute(); + $queryText = !empty($queryText) && trim($queryText) != 'AND' ? 'WHERE '.substr($queryText, 4) : ''; $f = "SELECT rank, stars FROM ( - SELECT @rownum := @rownum + 1 AS rank, stars, extID, isBanned - FROM users WHERE isBanned = '0' AND gameVersion $sign ORDER BY stars DESC - ) as result WHERE extID=:extid"; + SELECT @rownum := @rownum + 1 AS rank, stars, extID + FROM users ".$queryText." ORDER BY stars + moons DESC + ) as result WHERE extID = :extid"; $query = $db->prepare($f); $query->execute([':extid' => $extid]); $leaderboard = $query->fetchAll(); - //var_dump($leaderboard); $leaderboard = $leaderboard[0]; $xi = $leaderboard["rank"] - 1; - } - foreach($result as &$user) { - $xi++; - $extid = is_numeric($user['extID']) ? $user['extID'] : 0; - if($date == "01-04"){ - $lbstring .= "1:sakujes:2:".$user["userID"].":13:999:17:999:6:".$xi.":9:9:10:9:11:8:14:1:15:3:16:".$extid.":3:999:8:99999:4:999:7:".$extid.":46:99999|"; - }else{ - $lbstring .= "1:".$user["userName"].":2:".$user["userID"].":13:".$user["coins"].":17:".$user["userCoins"].":6:".$xi.":9:".$user["icon"].":10:".$user["color1"].":11:".$user["color2"].":51:".$user["color3"].":14:".$user["iconType"].":15:".$user["special"].":16:".$extid.":3:".$user["stars"].":8:".round($user["creatorPoints"],0,PHP_ROUND_HALF_DOWN).":4:".$user["demons"].":7:".$extid.":46:".$user["diamonds"].":52:".$user["moons"]."|"; - } - } -} -if($type == "friends"){ - $query = "SELECT * FROM friendships WHERE person1 = :accountID OR person2 = :accountID"; - $query = $db->prepare($query); - $query->execute([':accountID' => $accountID]); - $result = $query->fetchAll(); - $people = ""; - foreach ($result as &$friendship) { - $person = $friendship["person1"]; - if($friendship["person1"] == $accountID){ - $person = $friendship["person2"]; - } - $people .= ",".$person; - } - $query = "SELECT * FROM users WHERE extID IN (:accountID $people ) ORDER BY stars DESC"; - $query = $db->prepare($query); - $query->execute([':accountID' => $accountID]); - $result = $query->fetchAll(); - foreach($result as &$user){ - if(is_numeric($user["extID"])){ - $extid = $user["extID"]; - }else{ - $extid = 0; - } - $xi++; - if($date == "01-04"){ - $lbstring .= "1:sakujes:2:".$user["userID"].":13:999:17:999:6:".$xi.":9:9:10:9:11:8:14:1:15:3:16:".$extid.":3:999:8:99999:4:999:7:".$extid.":46:99999|"; - }else{ - $lbstring .= "1:".$user["userName"].":2:".$user["userID"].":13:".$user["coins"].":17:".$user["userCoins"].":6:".$xi.":9:".$user["icon"].":10:".$user["color1"].":11:".$user["color2"].":14:".$user["iconType"].":15:".$user["special"].":16:".$extid.":3:".$user["stars"].":8:".round($user["creatorPoints"],0,PHP_ROUND_HALF_DOWN).":4:".$user["demons"].":7:".$extid.":46:".$user["diamonds"]."|"; - } - } + } else $lbstring = '1:---Moderators---:2:0:13:0:17:0:6:0:9:0:10:0:11:0:51:0:14:0:15:0:16:0:3:0:8:0:4:0:7:0:46:0:52:0|'; } -if($lbstring == ""){ - exit("-1"); +foreach($result as &$user) { + $xi++; + $user["userName"] = $gs->makeClanUsername($user); + $extid = is_numeric($user['extID']) ? $user['extID'] : 0; + if($date == "01-04" && $sakujes) $lbstring .= "1:sakujes:2:".$user["userID"].":13:999:17:999:6:".$xi.":9:9:10:9:11:8:14:1:15:3:16:".$extid.":3:999:8:99999:4:999:7:".$extid.":46:99999|"; + else $lbstring .= "1:".$user["userName"].":2:".$user["userID"].":13:".$user["coins"].":17:".$user["userCoins"].":6:".$xi.":9:".$user["icon"].":10:".$user["color1"].":11:".$user["color2"].":51:".$user["color3"].":14:".$user["iconType"].":15:".$user["special"].":16:".$extid.":3:".$user["stars"].":8:".round($user["creatorPoints"],0,PHP_ROUND_HALF_DOWN).":4:".$user["demons"].":7:".$extid.":46:".$user["diamonds"].":52:".$user["moons"]."|"; } -$lbstring = substr($lbstring, 0, -1); -echo $lbstring; +if($lbstring == "") exit("-1"); +echo substr($lbstring, 0, -1); ?> \ No newline at end of file diff --git a/incl/scores/updateGJUserScore.php b/incl/scores/updateGJUserScore.php index 474633501..ff7f78dc6 100644 --- a/incl/scores/updateGJUserScore.php +++ b/incl/scores/updateGJUserScore.php @@ -1,11 +1,13 @@ getIP(); -$query = $db->prepare("SELECT stars,coins,demons,userCoins,diamonds,moons FROM users WHERE userID=:userID LIMIT 1"); //getting differences +if(Automod::isAccountsDisabled(2)) exit((string)$userID); + +$query = $db->prepare("SELECT stars, coins, demons, userCoins, diamonds, moons FROM users WHERE userID = :userID LIMIT 1"); //getting differences $query->execute([':userID' => $userID]); $old = $query->fetch(); @@ -104,8 +108,7 @@ $ucdiff = $userCoins - $old["userCoins"]; $diadiff = $diamonds - $old["diamonds"]; $moondiff = $moons - $old["moons"]; -$query2 = $db->prepare("INSERT INTO actions (type, value, timestamp, account, value2, value3, value4, value5, value6) - VALUES ('9',:stars,:timestamp,:account,:coinsd, :demon, :usrco, :diamond, :moons)"); //creating the action -$query2->execute([':timestamp' => time(), ':stars' => $starsdiff, ':account' => $userID, ':coinsd' => $coindiff, ':demon' => $demondiff, ':usrco' => $ucdiff, ':diamond' => $diadiff, ':moons' => $moondiff]); +$gs->logAction($id, 9, $starsdiff, $coindiff, $demondiff, $ucdiff, $diadiff, $moondiff); +if($gameVersion < 20 && !is_numeric($id) && $starsdiff + $coindiff + $demondiff + $ucdiff + $diadiff + $moondiff != 0) exit('-9'); echo $userID; ?> \ No newline at end of file diff --git a/likeGJItem.php b/likeGJItem.php index 17626b8ac..5ae38906e 100644 --- a/likeGJItem.php +++ b/likeGJItem.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/likeGJItem19.php b/likeGJItem19.php index 17626b8ac..5ae38906e 100644 --- a/likeGJItem19.php +++ b/likeGJItem19.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/likeGJItem20.php b/likeGJItem20.php index 17626b8ac..5ae38906e 100644 --- a/likeGJItem20.php +++ b/likeGJItem20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/likeGJItem21.php b/likeGJItem21.php index 17626b8ac..5ae38906e 100644 --- a/likeGJItem21.php +++ b/likeGJItem21.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/likeGJItem211.php b/likeGJItem211.php index 17626b8ac..5ae38906e 100644 --- a/likeGJItem211.php +++ b/likeGJItem211.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/likeGJLevel.php b/likeGJLevel.php new file mode 100644 index 000000000..5ae38906e --- /dev/null +++ b/likeGJLevel.php @@ -0,0 +1,3 @@ + \ No newline at end of file diff --git a/music/.htaccess b/music/.htaccess new file mode 100644 index 000000000..55c4942ae --- /dev/null +++ b/music/.htaccess @@ -0,0 +1,4 @@ +RewriteEngine On +RewriteCond %{REQUEST_FILENAME} !-f +RewriteCond %{REQUEST_FILENAME} !-d +RewriteRule ^ %{REQUEST_URI}/../../music/handler.php?%{QUERY_STRING}&request=%{REQUEST_URI} [L] \ No newline at end of file diff --git a/music/handler.php b/music/handler.php new file mode 100644 index 000000000..682980fad --- /dev/null +++ b/music/handler.php @@ -0,0 +1,54 @@ +prepare('SELECT reuploadTime FROM songs WHERE reuploadTime > 0 ORDER BY reuploadTime DESC LIMIT 1'); + $time->execute(); + $time = $time->fetchColumn(); + $gs->updateLibraries($_GET['token'], $_GET['expires'], $time, 1); + } + echo file_get_contents($datFile); + break; + case 'musiclibrary_version.txt': + case 'musiclibrary_version_02.txt': + $time = $db->prepare('SELECT reuploadTime FROM songs WHERE reuploadTime > 0 ORDER BY reuploadTime DESC LIMIT 1'); + $time->execute(); + $time = $time->fetchColumn(); + if(!$time) $time = 1; + $gs->updateLibraries($_GET['token'], $_GET['expires'], $time, 1); + $times = []; + foreach($customLibrary AS $library) { + if($library[2] !== null) $times[] = explode(', ', file_get_contents('s'.$library[0].'.txt'))[1]; + } + $times[] = $time; + rsort($times); + echo $times[0]; + break; + default: + $servers = []; + foreach($customLibrary AS $library) { + $servers[$library[0]] = $library[2]; + } + if(!file_exists('ids.json')) { + $time = $db->prepare('SELECT reuploadTime FROM songs WHERE reuploadTime > 0 ORDER BY reuploadTime DESC LIMIT 1'); + $time->execute(); + $time = $time->fetchColumn(); + $gs->updateLibraries($_GET['token'], $_GET['expires'], $time, 1); + } + $musicID = explode('.', $file)[0]; + $song = $gs->getLibrarySongInfo($musicID, true); + if($song) $url = urldecode($song['download']); + else $url = urldecode($gs->getSongInfo($musicID, 'download')); + if(empty($url)) header("Location: https://www.newgrounds.com/audio/listen/$musicID"); + header("Location: $url"); + break; +} +?> diff --git a/nginx.conf b/nginx.conf new file mode 100644 index 000000000..cde86d84f --- /dev/null +++ b/nginx.conf @@ -0,0 +1,27 @@ +location ^~ /sfx/ { + try_files $uri /sfx/handler.php?$query_string&request=$uri; +} +location ^~ /music/ { + try_files $uri /music/handler.php?$query_string&request=$uri; +} +location ^~ /dashboard/clan/ { + try_files $uri /dashboard/clan/index.php?id=$request_uri; +} +location ^~ /dashboard/profile/ { + try_files $uri /dashboard/profile/index.php?id=$request_uri; +} +location ^~ /dashboard/demonlist/ { + try_files $uri /dashboard/demonlist/index.php?id=$request_uri; +} +location ^~ /dashboard/messenger/ { + try_files $uri /dashboard/messenger/index.php?id=$request_uri; +} +location ^~ /config/ { + deny all; +} +location ^~ /data/ { + deny all; +} +location ^~ /incl/ { + deny all; +} diff --git a/rateGJDemon21.php b/rateGJDemon21.php index 3297a933e..a4d56798d 100644 --- a/rateGJDemon21.php +++ b/rateGJDemon21.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/rateGJLevel.php b/rateGJLevel.php new file mode 100644 index 000000000..5a0a078eb --- /dev/null +++ b/rateGJLevel.php @@ -0,0 +1,3 @@ + \ No newline at end of file diff --git a/rateGJStars20.php b/rateGJStars20.php index c6b6313a9..f2b246dca 100644 --- a/rateGJStars20.php +++ b/rateGJStars20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/rateGJStars211.php b/rateGJStars211.php index c6b6313a9..f2b246dca 100644 --- a/rateGJStars211.php +++ b/rateGJStars211.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/readGJFriendRequest20.php b/readGJFriendRequest20.php index 7acdf2cbe..cff46da40 100644 --- a/readGJFriendRequest20.php +++ b/readGJFriendRequest20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/removeGJFriend20.php b/removeGJFriend20.php index 09a430f9f..26f0a4a3d 100644 --- a/removeGJFriend20.php +++ b/removeGJFriend20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/reportGJLevel.php b/reportGJLevel.php index bb2164a82..e96884094 100644 --- a/reportGJLevel.php +++ b/reportGJLevel.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/requestUserAccess.php b/requestUserAccess.php index 29c3dbc0b..62406a134 100644 --- a/requestUserAccess.php +++ b/requestUserAccess.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/restoreGJItems.php b/restoreGJItems.php new file mode 100644 index 000000000..89022fe70 --- /dev/null +++ b/restoreGJItems.php @@ -0,0 +1,3 @@ + \ No newline at end of file diff --git a/sfx/.htaccess b/sfx/.htaccess new file mode 100644 index 000000000..1c8fbb99c --- /dev/null +++ b/sfx/.htaccess @@ -0,0 +1,4 @@ +RewriteEngine On +RewriteCond %{REQUEST_FILENAME} !-f +RewriteCond %{REQUEST_FILENAME} !-d +RewriteRule ^ %{REQUEST_URI}/../../sfx/handler.php?%{QUERY_STRING}&request=%{REQUEST_URI} [L] \ No newline at end of file diff --git a/sfx/handler.php b/sfx/handler.php new file mode 100644 index 000000000..27c10862a --- /dev/null +++ b/sfx/handler.php @@ -0,0 +1,50 @@ +prepare('SELECT reuploadTime FROM sfxs ORDER BY reuploadTime DESC LIMIT 1'); + $time->execute(); + $time = $time->fetchColumn(); + $gs->updateLibraries($_GET['token'], $_GET['expires'], $time, 0); + } + echo file_get_contents($datFile); + break; + case 'sfxlibrary_version.txt': + $time = $db->prepare('SELECT reuploadTime FROM sfxs WHERE reuploadTime > 0 ORDER BY reuploadTime DESC LIMIT 1'); + $time->execute(); + $time = $time->fetchColumn(); + if(!$time) $time = 1; + $gs->updateLibraries($_GET['token'], $_GET['expires'], $time, 0); + $times = []; + foreach($customLibrary AS $library) { + if($library[2] !== null) $times[] = explode(', ', file_get_contents('s'.$library[0].'.txt'))[1]; + } + $times[] = $time; + rsort($times); + echo $times[0]; + break; + default: + $servers = []; + foreach($customLibrary AS $library) { + $servers[$library[0]] = $library[2]; + } + $sfxID = explode('.', substr($file, 1, strlen($file)))[0]; + if(!file_exists('ids.json')) { + $time = $db->prepare('SELECT reuploadTime FROM sfxs ORDER BY reuploadTime DESC LIMIT 1'); + $time->execute(); + $time = $time->fetchColumn(); + $gs->updateLibraries($_GET['token'], $_GET['expires'], $time, 0); + } + $song = $gs->getLibrarySongInfo($sfxID, 'sfx'); + $url = urldecode($song['download']); + header("Location: $url"); + break; +} +?> \ No newline at end of file diff --git a/submitGJUserInfo.php b/submitGJUserInfo.php new file mode 100644 index 000000000..60cf5ae3c --- /dev/null +++ b/submitGJUserInfo.php @@ -0,0 +1,3 @@ + \ No newline at end of file diff --git a/suggestGJStars20.php b/suggestGJStars20.php index 788d97f6c..526429973 100644 --- a/suggestGJStars20.php +++ b/suggestGJStars20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/tools/.htaccess b/tools/.htaccess deleted file mode 100644 index 84d959577..000000000 --- a/tools/.htaccess +++ /dev/null @@ -1 +0,0 @@ -Options +Indexes \ No newline at end of file diff --git a/tools/account/activateAccount.php b/tools/account/activateAccount.php deleted file mode 100644 index 9c513b824..000000000 --- a/tools/account/activateAccount.php +++ /dev/null @@ -1,30 +0,0 @@ -prepare("UPDATE accounts SET isActive = 1 WHERE userName LIKE :userName"); - $query->execute(['userName' => $userName]); - echo "Account has been succesfully activated."; - } - elseif ($pass == 1) { - echo "Account is already activated."; - }else{ - echo "Invalid password or nonexistant account. Try again"; - } -}else{ - echo ''; -} -?> \ No newline at end of file diff --git a/tools/account/changePassword.php b/tools/account/changePassword.php deleted file mode 100644 index 5e749cc95..000000000 --- a/tools/account/changePassword.php +++ /dev/null @@ -1,49 +0,0 @@ -prepare("UPDATE accounts SET password=:password, salt=:salt WHERE userName=:userName"); - $query->execute([':password' => $passhash, ':userName' => $userName, ':salt' => $salt]); - GeneratePass::assignGJP2($accid, $pass); - echo "Password changed. Go back to tools"; - //decrypting save - $query = $db->prepare("SELECT accountID FROM accounts WHERE userName=:userName"); - $query->execute([':userName' => $userName]); - $accountID = $query->fetchColumn(); - $saveData = file_get_contents("../../data/accounts/$accountID"); - if(file_exists("../../data/accounts/keys/$accountID")){ - $protected_key_encoded = file_get_contents("../../data/accounts/keys/$accountID"); - if($protected_key_encoded != ""){ - $protected_key = KeyProtectedByPassword::loadFromAsciiSafeString($protected_key_encoded); - $user_key = $protected_key->unlockKey($oldpass); - try { - $saveData = Crypto::decrypt($saveData, $user_key); - } catch (Defuse\Crypto\Exception\WrongKeyOrModifiedCiphertextException $ex) { - exit("Unable to update save data encryption"); - } - file_put_contents("../../data/accounts/$accountID",$saveData); - file_put_contents("../../data/accounts/keys/$accountID",""); - } - } -}else{ - echo "Invalid old password or nonexistent account. Try again"; - -} -}else{ - echo ''; -} -?> \ No newline at end of file diff --git a/tools/account/changeUsername.php b/tools/account/changeUsername.php deleted file mode 100644 index 664eba9ad..000000000 --- a/tools/account/changeUsername.php +++ /dev/null @@ -1,27 +0,0 @@ - 20) - exit("Username too long - 20 characters max. Try again"); - $query = $db->prepare("UPDATE accounts SET username=:newusr WHERE userName=:userName"); - $query->execute([':newusr' => $newusr, ':userName' => $userName]); - if($query->rowCount()==0){ - echo "Invalid password or nonexistant account. Try again"; - }else{ - echo "Username changed. Go back to tools"; - } - }else{ - echo "Invalid password or nonexistant account. Try again"; - } -}else{ - echo ''; -} -?> \ No newline at end of file diff --git a/tools/account/registerAccount.php b/tools/account/registerAccount.php deleted file mode 100644 index 3c7d5f0f6..000000000 --- a/tools/account/registerAccount.php +++ /dev/null @@ -1,56 +0,0 @@ -Username should be more than 3 characters.
'; - }elseif(strlen($password) < 6){ - // just why did you want to give a short password? do you wanna be hacked? - echo 'Password should be more than 6 characters.
'; - }else{ - // this checks if there is another account with the same username as your input - $query = $db->prepare("SELECT count(*) FROM accounts WHERE userName LIKE :userName"); - $query->execute([':userName' => $username]); - $registred_users = $query->fetchColumn(); - if($registred_users > 0){ - // why did you want to make a new account with the same username as someone else's - echo 'Username already taken.
'; - }else{ - if($password != $repeat_password){ - // this is when the passwords do not match - echo 'Passwords do not match.
'; - }elseif($email != $repeat_email){ - // this is when the emails dont match - echo 'Emails do not match.
'; - }else{ - // hashing your password and registering your account - $hashpass = password_hash($password, PASSWORD_DEFAULT); - $query2 = $db->prepare("INSERT INTO accounts (userName, password, email, registerDate, isActive, gjp2) - VALUES (:userName, :password, :email, :time, :isActive, :gjp2)"); - $query2->execute([':userName' => $username, ':password' => $hashpass, ':email' => $email,':time' => time(), ':isActive' => $preactivateAccounts ? 1 : 0, ':gjp2' => GeneratePass::GJP2hash($password)]); - // there you go, you are registered. - $activationInfo = $preactivateAccounts ? "No e-mail verification required, you can login." : "Click here to activate it."; - echo "Account registred. ${activationInfo} Go back to tools"; - } - } - } -}else{ - // this is given when we dont have an input - echo ''; -} -?> diff --git a/tools/addQuests.php b/tools/addQuests.php deleted file mode 100644 index 6615f5130..000000000 --- a/tools/addQuests.php +++ /dev/null @@ -1,52 +0,0 @@ -prepare("SELECT accountID FROM accounts WHERE userName=:userName"); - $query->execute([':userName' => $userName]); - $accountID = $query->fetchColumn(); - if($gs->checkPermission($accountID, "toolQuestsCreate") == false){ - echo "This account doesn't have the permissions to access this tool. Try again"; - }else{ - if(!is_numeric($type) OR !is_numeric($amount) OR !is_numeric($reward) OR $type > 3){ - exit("Type/Amount/Reward invalid"); - } - - $query = $db->prepare("INSERT INTO quests (type, amount, reward, name) VALUES (:type,:amount,:reward,:name)"); - $query->execute([':type' => $type, ':amount' => $amount, ':reward' => $reward, ':name' => $name]); - $query = $db->prepare("INSERT INTO modactions (type, value, timestamp, account, value2, value3, value4) VALUES ('25',:value,:timestamp,:account,:amount,:reward,:name)"); - $query->execute([':value' => $type, ':timestamp' => time(), ':account' => $accountID, ':amount' => $amount, ':reward' => $reward, ':name' => $name]); - if($db->lastInsertId() < 3) { - exit("Successfully added Quest! It's recommended that you should add a few more."); - } else { - exit("Successfully added Quest!"); - } - } - }else{ - echo "Invalid password or nonexistant account. Try again"; - } -}else{ - echo ''; -} -?> diff --git a/tools/bot/dailyLevelBot.php b/tools/bot/dailyLevelBot.php deleted file mode 100644 index 0db4b0f0f..000000000 --- a/tools/bot/dailyLevelBot.php +++ /dev/null @@ -1,95 +0,0 @@ -prepare("SELECT timestamp,levelID FROM dailyfeatures WHERE timestamp < :time ORDER BY timestamp DESC LIMIT 1"); //getting level info -$query->execute([':time' => time()]); -$dailyinfo = $query->fetch(); -$query = $db->prepare("SELECT * FROM levels WHERE levelID = :str LIMIT 1"); //getting level info -$query->execute([':str' => $dailyinfo["levelID"]]); -//checking if exists -if($query->rowCount() == 0){ - exit("The level you are searching for doesn't exist"); -} -$levelInfo = $query->fetchAll()[0]; -//getting creator name -$query = $db->prepare("SELECT userName FROM users WHERE userID = :userID"); -$query->execute([':userID' => $levelInfo["userID"]]); -$creator = $query->fetchColumn(); -//getting song name -if($levelInfo["songID"] != 0){ - $query = $db->prepare("SELECT name, authorName, ID FROM songs WHERE ID = :songID"); - $query->execute([':songID' => $levelInfo["songID"]]); - $songInfo = $query->fetchAll()[0]; - $song = $songInfo["name"] . " by " . $songInfo["authorName"] . " (" . $songInfo["ID"] . ")"; -}else{ - $song = $gs->getAudioTrack($levelInfo["audioTrack"]); -} -//getting difficulty -if($levelInfo["starDemon"] == 1){ - $difficulty .= $gs->getDemonDiff($levelInfo["starDemonDiff"]) . " "; -} -$difficulty .= $gs->getDifficulty($levelInfo["starDifficulty"],$levelInfo["starAuto"],$levelInfo["starDemon"]); -$difficulty .= " " . $levelInfo["starStars"] ."* "; -if($levelInfo["starEpic"] != 0){ - $difficulty .= "Epic "; -}else if($levelInfo["starFeatured"] != 0){ - $difficulty .= "Featured "; -} -//getting length -$length = $gs->getLength($levelInfo["levelLength"]); -//times -$uploadDate = date("d-m-Y G-i", $levelInfo["uploadDate"]); -$updateDate = date("d-m-Y G-i", $levelInfo["updateDate"]); -//getting original level -if($levelInfo["original"] != 0){ - $original = "\r\n**Original:** " . $levelInfo["original"] .""; -} -if($levelInfo["originalReup"] != 0){ - $original .= "\r\n**Reupload Original:** ".$levelInfo["originalReup"] . ""; -} -//whorated -$query = $db->prepare("SELECT * FROM modactions WHERE value3 = :lvid AND type = '1'"); -$query->execute([':lvid' => $levelInfo["levelID"]]); -$actionlist = $query->fetchAll(); -if($query->rowCount() == 0){ - $whorated = ""; -} -$x = 0; -foreach($actionlist as &$action){ - $query = $db->prepare("SELECT * FROM accounts WHERE accountID = :id"); - $query->execute([':id' => $action["account"]]); - $result2 = $query->fetchAll(); - $result2 = $result2[0]; - if($x != 0){ - $whorated .= " and "; - }else{ - $whorated = "\r\n**Rated by: **"; - } - $whorated .= $result2["userName"].""; - $x++; -} -//coins -$coins = $levelInfo["coins"]; -if($levelInfo["starCoins"] != 0){ - $coins .= " Verified"; -}else{ - $coins .= " Unverified"; -} -//gameVersion -$gameVersion = $gs->getGameVersion($levelInfo["gameVersion"]); -$dailytime = date("d-m-Y G-i", $dailyinfo["timestamp"]); -//outputting everything -echo "**NAME:** ".$levelInfo["levelName"]." -**ID:** ".$levelInfo["levelID"]." -**Author:** ".$creator." -**Song:** ".$song." -**Difficulty:** ".$difficulty." -**Daily Since:** ".$dailytime." -***DO ***`!level ".$levelInfo["levelID"]."`*** FOR MORE INFO***"; -?> \ No newline at end of file diff --git a/tools/bot/discordLinkReq.php b/tools/bot/discordLinkReq.php deleted file mode 100644 index 6b179274b..000000000 --- a/tools/bot/discordLinkReq.php +++ /dev/null @@ -1,45 +0,0 @@ -prepare("SELECT discordLinkReq FROM accounts WHERE userName = :account"); -$query->execute([':account' => $account]); -$discordLinkReq = $query->fetchColumn(); -if($discordLinkReq != 0){ - exit("This user has an ongoing link request already"); -} -$query = $db->prepare("SELECT count(*) FROM accounts WHERE discordID = :discordID OR discordLinkReq = :discordID"); -$query->execute([':discordID' => $discordID]); -if($query->fetchColumn() != 0){ - exit("You're linked or have sent a link request to a different account already"); -} -$query = $db->prepare("UPDATE accounts SET discordLinkReq = :discordID WHERE userName = :account"); -$query->execute([':account' => $account, ':discordID' => $discordID]); -if($query->rowCount() == 0){ - exit("This account doesn't exist."); -} -//in-game message -$accinfo = $gs->getDiscordAcc($discordID); -//sending the msg -$query = $db->prepare("SELECT accountID FROM accounts WHERE userName = :account"); -$query->execute([':account' => $account]); -$accountID = $query->fetchColumn(); -$message = $xc->cipher("The Discord account '$accinfo' has attempted to link to this GDPS account. If that was you, please comment '!discord accept' on your profile. If it wasn't you, please comment '!discord deny'. If you ever wish to unlink, please comment '!discord unlink' on your profile.", 14251); -$message = base64_encode($message); -$query = $db->prepare("INSERT INTO messages (subject, body, accID, userID, userName, toAccountID, secret, timestamp) -VALUES ('TmV3IEFjY291bnQgTGluayBSZXF1ZXN0', :body, 263, 388, 'GDPS Bot', :toAccountID, 'Automatic Message', :uploadDate)"); -$query->execute([':body' => $message, ':toAccountID' => $accountID, ':uploadDate' => time()]); -echo "Link request has been succesfully sent, please check your in-game messages"; -?> \ No newline at end of file diff --git a/tools/bot/discordLinkResetPass.php b/tools/bot/discordLinkResetPass.php deleted file mode 100644 index 3d8098b14..000000000 --- a/tools/bot/discordLinkResetPass.php +++ /dev/null @@ -1,20 +0,0 @@ -randomString(); -$passhash = password_hash($newpass, PASSWORD_DEFAULT); -$query = $db->prepare("UPDATE accounts SET password=:password, gjp2=:gjp2 WHERE discordID=:discordID"); -$query->execute([':password' => $passhash, ':discordID' => $discordID, ':gjp2' => GeneratePass::GJP2hash($newpass)]); -$gs->sendDiscordPM($discordID, "Password changed to $newpass\r\nFor your security we advise you to go change your password to http://pi.michaelbrabec.cz:9010/a/tools/account/changePassword.php"); -echo "Please check your DMs"; -?> \ No newline at end of file diff --git a/tools/bot/discordLinkTransferRoles.php b/tools/bot/discordLinkTransferRoles.php deleted file mode 100644 index 4164d829c..000000000 --- a/tools/bot/discordLinkTransferRoles.php +++ /dev/null @@ -1,26 +0,0 @@ -prepare("SELECT accountID FROM accounts WHERE discordID = :discordID"); -$query->execute([':discordID' => $discordID]); -if($query->rowCount() == 0){ - exit("Your Discord account isn't linked to a GDPS account <@$discordID>"); -} -$accountID = $query->fetchColumn(); -$query = $db->prepare("DELETE FROM roleassign WHERE accountID = :accountID"); -$query->execute([':accountID' => $accountID]); -foreach($rolesarray as &$role){ - $query = $db->prepare("INSERT INTO roleassign (roleID, accountID) VALUES (:roleID, :accountID)"); - $query->execute([':roleID' => $role, ':accountID' => $accountID]); -} -echo "Roles transferred! <@$discordID>"; -?> \ No newline at end of file diff --git a/tools/bot/discordLinkUnlink.php b/tools/bot/discordLinkUnlink.php deleted file mode 100644 index c1c1cf2cf..000000000 --- a/tools/bot/discordLinkUnlink.php +++ /dev/null @@ -1,25 +0,0 @@ -prepare("UPDATE accounts SET discordID=0 WHERE discordID=:discordID"); -$query->execute([':discordID' => $discordID]); -if($query->rowCount() > 0){ - $message = "Your GDPS account has been unlinked."; -} -$query = $db->prepare("UPDATE accounts SET discordLinkReq=0 WHERE discordLinkReq=:discordID"); -$query->execute([':discordID' => $discordID]); -if($query->rowCount() > 0){ - $message = "Your link request has been cancelled."; -} -echo $message; -?> \ No newline at end of file diff --git a/tools/bot/latestSongBot.php b/tools/bot/latestSongBot.php deleted file mode 100644 index fa11856ec..000000000 --- a/tools/bot/latestSongBot.php +++ /dev/null @@ -1,11 +0,0 @@ -prepare("SELECT `AUTO_INCREMENT` - FROM INFORMATION_SCHEMA.TABLES - WHERE TABLE_SCHEMA = :database - AND TABLE_NAME = 'songs';"); -$query->execute([':database' => $dbname]); -echo $query->fetchColumn(); -?> \ No newline at end of file diff --git a/tools/bot/leaderboardsBot.php b/tools/bot/leaderboardsBot.php deleted file mode 100644 index ca2c7f966..000000000 --- a/tools/bot/leaderboardsBot.php +++ /dev/null @@ -1,83 +0,0 @@ -quote($page); -$page = str_replace("'", "", $page); -if($page == ""){ - $page = 0; -} -$page--; -if($page < 0){ - $page = 0; -} -$page = $page * 10; -if($type =="stars" OR $type == "diamonds" OR $type == "usrcoins" OR $type == "coins" OR $type == "demons" OR $type == "cp" OR $type == "orbs" OR $type == "levels" OR $type == "friends"){ - $typename = $type; - switch($type){ - case "stars": - $thing = "stars"; - break; - case "coins": - $thing = "coins"; - break; - case "diamonds": - $thing = "diamonds"; - break; - case "usrcoins": - $typename = "User Coins"; - $thing = "userCoins"; - break; - case "demons": - $thing = "demons"; - break; - case "cp": - $thing = "creatorPoints"; - break; - case "orbs": - $thing = "orbs"; - break; - case "levels": - $typename = "Completed Levels"; - $thing = "completedLvls"; - break; - case "friends": - $thing = "friendsCount"; - } - $query = "SELECT $thing , userName, extID FROM users WHERE isBanned = '0' ORDER BY $thing DESC LIMIT 10 OFFSET $page"; - if($type == "friends"){ - $query = "SELECT userName, friendsCount, accountID FROM accounts ORDER BY friendsCount DESC LIMIT 10 OFFSET $page"; - } - $query = $db->prepare($query); - $query->execute([':page' => $page]); - $result = $query->fetchAll(); - echo "`# | Username | ".str_pad($typename, 16, " ", STR_PAD_LEFT)." | Linked? |`\r\n"; - echo "`-----|-----------------|------------------|---------|`\r\n"; - $xi = $page; - foreach($result as &$user){ - $query = $db->prepare("SELECT discordID FROM accounts WHERE accountID = :extID"); - if($type == "friends"){ - $query->execute([':extID' => $user["accountID"]]); - }else{ - $query->execute([':extID' => $user["extID"]]); - } - if($query->rowCount() == 0){ - $link = "N/A"; - }else{ - if($query->fetchColumn() == 0){ - $link = "No"; - }else{ - $link = "Yes"; - } - } - $xi++; - $xyz = str_pad($xi, 4, " ", STR_PAD_RIGHT); - //$date = date("d/m/Y H:i", $user["lastPlayed"]); - echo "`$xyz | ".str_pad($user["userName"], 15, " ", STR_PAD_LEFT)." | ".str_pad($user[$thing], 16, " ", STR_PAD_LEFT)." | " . str_pad($link, 7, " ", STR_PAD_LEFT) . " |`\r\n"; - } -}else{ - echo "**Command usage: *!top*\r\nValid types are: Stars, Diamonds, Coins, Usrcoins, Demons, CP, Orbs, Levels, Friends**"; -} -?> \ No newline at end of file diff --git a/tools/bot/levelSearchBot.php b/tools/bot/levelSearchBot.php deleted file mode 100644 index 8c1b5b5f4..000000000 --- a/tools/bot/levelSearchBot.php +++ /dev/null @@ -1,101 +0,0 @@ -prepare("(SELECT * FROM levels WHERE levelID = :str) UNION (SELECT * FROM levels WHERE levelName LIKE CONCAT('%', :str, '%') ORDER BY likes DESC LIMIT 1)"); //getting level info -$query->execute([':str' => $str]); -//checking if exists -if($query->rowCount() == 0){ - exit("The level you are searching for doesn't exist"); -} -$levelInfo = $query->fetchAll()[0]; -//getting creator name -$query = $db->prepare("SELECT userName FROM users WHERE userID = :userID"); -$query->execute([':userID' => $levelInfo["userID"]]); -$creator = $query->fetchColumn(); -//getting song name -if($levelInfo["songID"] != 0){ - $query = $db->prepare("SELECT name, authorName, ID FROM songs WHERE ID = :songID"); - $query->execute([':songID' => $levelInfo["songID"]]); - $songInfo = $query->fetchAll()[0]; - $song = $songInfo["name"] . " by " . $songInfo["authorName"] . " (" . $songInfo["ID"] . ")"; -}else{ - $song = $gs->getAudioTrack($levelInfo["audioTrack"]); -} -//getting difficulty -if($levelInfo["starDemon"] == 1){ - $difficulty .= $gs->getDemonDiff($levelInfo["starDemonDiff"]) . " "; -} -$difficulty .= $gs->getDifficulty($levelInfo["starDifficulty"],$levelInfo["starAuto"],$levelInfo["starDemon"]); -$difficulty .= " " . $levelInfo["starStars"] ."* "; -if($levelInfo["starEpic"] != 0){ - $difficulty .= "Epic "; -}else if($levelInfo["starFeatured"] != 0){ - $difficulty .= "Featured "; -} -//getting length -$length = $gs->getLength($levelInfo["levelLength"]); -//times -$uploadDate = date("d-m-Y G-i", $levelInfo["uploadDate"]); -$updateDate = date("d-m-Y G-i", $levelInfo["updateDate"]); -//getting original level -if($levelInfo["original"] != 0){ - $original .= "\r\n**Original:** " . $levelInfo["original"] .""; -} -if($levelInfo["originalReup"] != 0){ - $original .= "\r\n**Reupload Original:** ".$levelInfo["originalReup"] . ""; -} -//whorated -$query = $db->prepare("SELECT * FROM modactions WHERE value3 = :lvid AND type = '1'"); -$query->execute([':lvid' => $levelInfo["levelID"]]); -$actionlist = $query->fetchAll(); -if($query->rowCount() == 0){ - $whorated = ""; -} -$x = 0; -foreach($actionlist as &$action){ - $query = $db->prepare("SELECT * FROM accounts WHERE accountID = :id"); - $query->execute([':id' => $action["account"]]); - $result2 = $query->fetchAll(); - $result2 = $result2[0]; - if($x != 0){ - $whorated .= " and "; - }else{ - $whorated = "\r\n**Rated by: **"; - } - $whorated .= $result2["userName"].""; - $x++; -} -//coins -$coins = $levelInfo["coins"]; -if($levelInfo["starCoins"] != 0){ - $coins .= " Verified"; -}else{ - $coins .= " Unverified"; -} -//gameVersion -$gameVersion = $gs->getGameVersion($levelInfo["gameVersion"]); -//outputting everything -echo "**NAME:** ".$levelInfo["levelName"]." -**ID:** ".$levelInfo["levelID"]." -**Author:** ".$creator." -**Song:** ".$song." -**Difficulty:** ".$difficulty." -**Coins:** ".$coins." -**Length:** ".$length." -**Upload Time:** ".$uploadDate." -**Update Time:** ".$updateDate." $original $whorated -**Objects:** ".$levelInfo["objects"]." -**Level Version:** ".$levelInfo["levelVersion"]." -**Game Version:** ".$gameVersion." -**Downloads:** ".$levelInfo["downloads"]." -**Likes:** ".$levelInfo["likes"]; -?> \ No newline at end of file diff --git a/tools/bot/modActionsBot.php b/tools/bot/modActionsBot.php deleted file mode 100644 index 3cee3e3de..000000000 --- a/tools/bot/modActionsBot.php +++ /dev/null @@ -1,40 +0,0 @@ -Mod actions: -`| Name | Actions count | Levels count | Last time online | Linked? |` -`|-----------------|---------------|--------------|------------------|---------|` -prepare("SELECT roleID FROM roles WHERE toolModactions = 1 ORDER BY priority DESC"); -$query->execute(); -$result = $query->fetchAll(); -$accountlist = array(); -foreach($result as &$role){ - $query = $db->prepare("SELECT accountID FROM roleassign WHERE roleID = :roleID"); - $query->execute([':roleID' => $role["roleID"]]); - $accounts = $query->fetchAll(); - foreach($accounts as &$user){ - $accountlist[] = $user["accountID"]; - } -} -$accountlist = implode(",", $accountlist); -$query = $db->prepare("SELECT accountID,userName,discordID FROM accounts WHERE accountID IN($accountlist)"); -$query->execute(); -$result = $query->fetchAll(); -foreach($result as &$mod){ - if($mod["discordID"] == 0){ - $link = "No"; - }else{ - $link = "Yes"; - } - $query = $db->prepare("SELECT lastPlayed FROM users WHERE extID = :id"); - $query->execute([':id' => $mod["accountID"]]); - $time = date("d/m/Y H:i", $query->fetchColumn()); - $query = $db->prepare("SELECT count(*) FROM modactions WHERE account = :id"); - $query->execute([':id' => $mod["accountID"]]); - $actionscount = $query->fetchColumn(); - $query = $db->prepare("SELECT count(*) FROM modactions WHERE account = :id AND type = '1'"); - $query->execute([':id' => $mod["accountID"]]); - $lvlcount = $query->fetchColumn(); - echo "`| ".str_pad($mod["userName"], 15, " ", STR_PAD_LEFT)." | ".str_pad($actionscount, 13, " ", STR_PAD_LEFT)." | ".str_pad($lvlcount, 12, " ", STR_PAD_LEFT)." | ".$time." | ". str_pad($link, 7, " ", STR_PAD_LEFT)." |`\r\n"; -} -?> diff --git a/tools/bot/playerStatsBot.php b/tools/bot/playerStatsBot.php deleted file mode 100644 index ea3510e0e..000000000 --- a/tools/bot/playerStatsBot.php +++ /dev/null @@ -1,85 +0,0 @@ -prepare($query); -$query->execute([':userName' => $playername]); -if($query->rowCount() == 0){ - $query = "SELECT * FROM users WHERE userName LIKE CONCAT(:str, '%') ORDER BY stars DESC LIMIT 1"; - $query = $db->prepare($query); - $query->execute([':str' => $playername]); - if($query->rowCount() == 0){ - exit("No account with this or a similiar name has been found"); - } -} - $result = $query->fetchAll(); - $user = $result[0]; - //placeholders - $creatorpoints = $user["creatorPoints"]; - // GET POSITION - $e = "SET @rownum := 0;"; - $query = $db->prepare($e); - $query->execute(); - $extid = $user["extID"]; - $f = "SELECT rank, stars FROM ( - SELECT @rownum := @rownum + 1 AS rank, stars, extID, isBanned - FROM users WHERE isBanned = '0' AND gameVersion > 19 ORDER BY stars DESC - ) as result WHERE extID=:extid"; - $query = $db->prepare($f); - $query->execute([':extid' => $extid]); - $rank = $query->fetchColumn(); - $e = "SET @rownum := 0;"; - $query = $db->prepare($e); - $query->execute(); - $f = "SELECT rank, creatorPoints FROM ( - SELECT @rownum := @rownum + 1 AS rank, creatorPoints, extID, isCreatorBanned - FROM users WHERE isCreatorBanned = '0' ORDER BY creatorPoints DESC - ) as result WHERE extID=:extid"; - $query = $db->prepare($f); - $query->execute([':extid' => $extid]); - $crearank = $query->fetchColumn(); - $query = "SELECT * FROM accounts WHERE accountID = :extID"; - $query = $db->prepare($query); - $query->execute([':extID' => $extid]); - $accinfo = $query->fetch(); - $discordID = 0; - echo "**Name:** ".$user["userName"]. - "\r\n**User ID:** ".$user["userID"]; - if(is_numeric($extid)){ - echo "\r\n**Account ID:** " . $extid; - $query = $db->prepare("SELECT discordID FROM accounts WHERE accountID = :extid"); - $query->execute([':extid' => $extid]); - $discordID = $query->fetchColumn(); - } - echo "\r\n**------------------------------------**". - "\r\n**Stars:** ".$user["stars"]. - "\r\n**Coins:** ".$user["coins"]. - "\r\n**User Coins:** ".$user["userCoins"]. - "\r\n**Diamonds:** ".$user["diamonds"]. - "\r\n**Demons: **".$user["demons"]. - "\r\n**Orbs: **".$user["orbs"]. - "\r\n**Completed Levels: **".$user["completedLvls"]. - "\r\n**Creator points:** ".$creatorpoints. - "\r\n**------------------------------------**". - "\r\n**Leaderboards rank:** ".$rank. - "\r\n**Creator leaderboards rank:** ".$crearank. - "\r\n**------------------------------------**"; - if($accinfo["youtubeurl"] != ""){ - echo "\r\n**YouTube:** http://youtube.com/channel/".$accinfo["youtubeurl"]; - } - if($accinfo["twitter"] != ""){ - echo "\r\n**Twitter:** http://twitter.com/".$accinfo["twitter"]; - } - if($accinfo["twitch"] != ""){ - echo "\r\n**Twitch:** http://twitch.tv/".$accinfo["twitch"].""; - } - if($discordID == 0){ - echo "\r\n**Discord:** None"; - }else{ - echo "\r\n**Discord:** " . $gs->getDiscordAcc($discordID) . " ($discordID)"; - } -?> \ No newline at end of file diff --git a/tools/bot/songAddBot.php b/tools/bot/songAddBot.php deleted file mode 100644 index d46f3d26f..000000000 --- a/tools/bot/songAddBot.php +++ /dev/null @@ -1,33 +0,0 @@ -prepare("SELECT count(*) FROM songs WHERE download = :download"); -$query->execute([':download' => $link]); -$count = $query->fetchColumn(); -if($count != 0){ - echo "This song already exists in our database."; -}else{ - $query = $db->prepare("INSERT INTO songs (name, authorID, authorName, size, download, hash) - VALUES (:name, '9', :author, :size, :download, :hash)"); - $query->execute([':name' => $name, ':download' => $link, ':author' => $author, ':size' => $size, ':hash' => $hash]); - echo $db->lastInsertId(); -} -?> \ No newline at end of file diff --git a/tools/bot/songListBot.php b/tools/bot/songListBot.php deleted file mode 100644 index b21e6dce9..000000000 --- a/tools/bot/songListBot.php +++ /dev/null @@ -1,21 +0,0 @@ - 0){ - $page = $_GET["page"] - 1; -}else{ - $page = 0; -} -$humanpage = $page +1; -$page = $page*20; -echo "***SHOWING PAGE $humanpage***\r\n"; -include "../../incl/lib/connection.php"; -$query = $db->prepare("SELECT ID,name FROM songs WHERE ID >= 5000000 ORDER BY ID DESC LIMIT $page , 20"); -$query->execute(); -$result = $query->fetchAll(); -foreach($result as &$song){ - $name = str_replace("*", "", $song["name"]); - $name = str_replace("_", " ", $song["name"]); - echo "**".$song["ID"]." : **".$name."\r\n"; -} -?> -***USE !songlist TO SEE MORE SONGS*** \ No newline at end of file diff --git a/tools/bot/songSearchBot.php b/tools/bot/songSearchBot.php deleted file mode 100644 index 723e6a6fd..000000000 --- a/tools/bot/songSearchBot.php +++ /dev/null @@ -1,25 +0,0 @@ -prepare("(SELECT ID,name FROM songs WHERE ID = :str) UNION (SELECT ID,name FROM songs WHERE name LIKE CONCAT('%', :str, '%')) ORDER BY ID DESC"); //getting song info -$query->execute([':str' => $str]); -$result = $query->fetchAll(); -foreach($result as &$song){ - $name = str_replace("*", "", $song["name"]); - $name = str_replace("_", " ", $song["name"]); - $string .= "**".$song["ID"]." : **".$name."\r\n"; -} -if(strlen($string) > 1900){ - echo "Too many results, please specify your search query."; -}else{ - if($string == ""){ - echo "Nothing found."; - } - echo $string; -} -?> \ No newline at end of file diff --git a/tools/bot/userLevelSearchBot.php b/tools/bot/userLevelSearchBot.php deleted file mode 100644 index 56a32c1d1..000000000 --- a/tools/bot/userLevelSearchBot.php +++ /dev/null @@ -1,38 +0,0 @@ -prepare("SELECT accountID FROM accounts WHERE userName = :str OR userID = :str"); -$query->execute([':str' => $str]); -//checking if exists -if($query->rowCount() == 0){ - exit("The user you are searching for doesn't exist"); -} -$accountID = $query->fetchColumn(); -$query = $db->prepare("SELECT userID FROM users WHERE extID = :extID"); -$query->execute([':extID' => $accountID]); -$userID = $query->fetchColumn(); -$query = $db->prepare("SELECT levelName,levelID FROM levels WHERE userID = :userID"); //getting level info -$query->execute([':userID' => $userID]); -//checking if exists -if($query->rowCount() == 0){ - exit("This user doesn't have any levels."); -} -echo "```"; -$levels = $query->fetchAll(); -echo str_pad("Level ID", 16, " ", STR_PAD_LEFT) . " | Level Name\r\n--------------------------------------\r\n"; -foreach($levels as $level){ - $levelID = str_pad($level["levelID"], 16, " ", STR_PAD_LEFT); - $levelName = $level["levelName"]; - echo "$levelID | $levelName\r\n"; -} -echo "```"; -?> diff --git a/tools/bot/whoRatedBot.php b/tools/bot/whoRatedBot.php deleted file mode 100644 index 930c61b5e..000000000 --- a/tools/bot/whoRatedBot.php +++ /dev/null @@ -1,19 +0,0 @@ -prepare("SELECT account FROM modactions WHERE value3 = :lvid AND type = '1'"); -$query->execute([':lvid' => $_GET["level"]]); -$result = $query->fetchAll(); -if(!is_numeric($_GET["level"])){ - exit("Please supply a valid level ID."); -} -if($query->rowCount() == 0){ - echo "Nobody did!"; -} -foreach($result as &$action){ - $query = $db->prepare("SELECT userName FROM accounts WHERE accountID = :id"); - $query->execute([':id' => $action["account"]]); - $userName = $query->fetchColumn(); - echo $userName." did!\r\n"; -} -?> diff --git a/tools/cleanup/deleteUnused.php b/tools/cleanup/deleteUnused.php deleted file mode 100644 index ad9fca99e..000000000 --- a/tools/cleanup/deleteUnused.php +++ /dev/null @@ -1,25 +0,0 @@ -
-prepare("SELECT userID, userName, extID, lastPlayed FROM users WHERE NOT extID REGEXP '^[0-9]+$' AND lastPlayed < :time"); -$query->execute([':time' => time() - 604800]); -$users = $query->fetchAll(); -foreach($users as $user){ - $query = $db->prepare("SELECT count(*) FROM levels WHERE userID = :userID"); - $query->execute([':userID' => $user["userID"]]); - $count = $query->fetchColumn(); - $query = $db->prepare("SELECT count(*) FROM comments WHERE userID = :userID"); - $query->execute([':userID' => $user["userID"]]); - $count += $query->fetchColumn(); - if($count == 0){ - $query = $db->prepare("DELETE FROM users WHERE userID = :userID"); - $query->execute([':userID' => $user["userID"]]); - echo "Deleted ".htmlspecialchars($user["userName"],ENT_QUOTES)." - ".$user["userID"]." - ".$user["extID"]." - ".date("d-m-Y G-i", $user["lastPlayed"])."
"; - ob_flush(); - flush(); - $x++; - } -} -echo "
".$x; -?> \ No newline at end of file diff --git a/tools/cron/autoban.php b/tools/cron/autoban.php deleted file mode 100644 index 4693a03ce..000000000 --- a/tools/cron/autoban.php +++ /dev/null @@ -1,68 +0,0 @@ -
-"; -ob_flush(); -flush(); -//note: this needs a better algorithm -$query = $db->prepare("SELECT 10+IFNULL(FLOOR(coins.coins*1.25)+IFNULL(coins1.coins, 0),0) as coins, 3+IFNULL(FLOOR(levels.demons*1.0625)+IFNULL(demons.demons,0),0) as demons, 212+FLOOR((IFNULL(levels.stars,0)+IFNULL(gauntlets.stars,0)+IFNULL(mappacks.stars,0))+IFNULL(stars.stars,0)*1.25) as stars, 25+IFNULL(moons.moons,0) as moons FROM - (SELECT SUM(coins) as coins FROM levels WHERE starCoins <> 0) coins - JOIN - (SELECT SUM(starDemon) as demons, SUM(starStars) as stars FROM levels) levels - JOIN - (SELECT SUM(starStars) as stars FROM dailyfeatures - INNER JOIN levels on levels.levelID = dailyfeatures.levelID) stars - JOIN - (SELECT SUM(starCoins) as coins FROM dailyfeatures - INNER JOIN levels on levels.levelID = dailyfeatures.levelID) coins1 - JOIN - (SELECT SUM(starDemon) as demons FROM dailyfeatures - INNER JOIN levels on levels.levelID = dailyfeatures.levelID) demons - JOIN - ( - SELECT (level1.stars + level2.stars + level3.stars + level4.stars + level5.stars) as stars FROM - (SELECT SUM(starStars) as stars FROM gauntlets - INNER JOIN levels on levels.levelID = gauntlets.level1) level1 - JOIN - (SELECT SUM(starStars) as stars FROM gauntlets - INNER JOIN levels on levels.levelID = gauntlets.level2) level2 - JOIN - (SELECT SUM(starStars) as stars FROM gauntlets - INNER JOIN levels on levels.levelID = gauntlets.level3) level3 - JOIN - (SELECT SUM(starStars) as stars FROM gauntlets - INNER JOIN levels on levels.levelID = gauntlets.level4) level4 - JOIN - (SELECT SUM(starStars) as stars FROM gauntlets - INNER JOIN levels on levels.levelID = gauntlets.level5) level5 - ) gauntlets - JOIN - (SELECT SUM(stars) as stars FROM mappacks) mappacks - JOIN - (SELECT SUM(starStars) as moons FROM levels WHERE levelLength = 5) moons"); -$query->execute(); -$levelstuff = $query->fetch(); -$stars = $levelstuff['stars']; $coins = $levelstuff['coins']; $demons = $levelstuff['demons']; $moons = $levelstuff['moons']; -$query = $db->prepare("UPDATE users SET isBanned = '1' WHERE stars > :stars OR demons > :demons OR userCoins > :coins OR moons > :moons OR stars < 0 OR demons < 0 OR coins < 0 OR userCoins < 0 OR diamonds < 0 OR moons < 0"); -$query->execute([':stars' => $stars, ':demons' => $demons, ':coins' => $coins, ':moons' => $moons]); -$query = $db->prepare("SELECT userID, userName FROM users WHERE stars > :stars OR demons > :demons OR userCoins > :coins OR moons > :moons OR stars < 0 OR demons < 0 OR coins < 0 OR userCoins < 0 OR diamonds < 0 OR moons < 0"); -$query->execute([':stars' => $stars, ':demons' => $demons, ':coins' => $coins, ':moons' => $moons]); -$result = $query->fetchAll(); -foreach($result as $user){ - echo "Banned ".htmlspecialchars($user["userName"],ENT_QUOTES)." - ".$user["userID"]."
"; -} -//banips -$query = $db->prepare("SELECT IP FROM bannedips"); -$query->execute(); -$result = $query->fetchAll(); -foreach($result as &$ip){ - $query = $db->prepare("UPDATE users SET isBanned = '1' WHERE IP LIKE CONCAT(:ip, '%')"); - $query->execute([':ip' => $ip["IP"]]); -} -echo "
Autoban finished"; -ob_flush(); -flush(); -//done -//echo "
Banned everyone with over $stars stars and over $coins user coins and over $demons demons and over $moons moons!
done"; -?> -
diff --git a/tools/cron/cron.php b/tools/cron/cron.php deleted file mode 100644 index 772a924cd..000000000 --- a/tools/cron/cron.php +++ /dev/null @@ -1,24 +0,0 @@ - diff --git a/tools/cron/fixcps.php b/tools/cron/fixcps.php deleted file mode 100644 index 2fdecc825..000000000 --- a/tools/cron/fixcps.php +++ /dev/null @@ -1,123 +0,0 @@ -"; -ob_flush(); -flush(); -if(file_exists("../logs/fixcpslog.txt")){ - $cptime = file_get_contents("../logs/fixcpslog.txt"); - $newtime = time() - 30; - if($cptime > $newtime){ - $remaintime = time() - $cptime; - $remaintime = 30 - $remaintime; - $remainmins = floor($remaintime / 60); - $remainsecs = $remainmins * 60; - $remainsecs = $remaintime - $remainsecs; - exit("Please wait $remainmins minutes and $remainsecs seconds before running ". basename($_SERVER['SCRIPT_NAME'])." again"); - } -} -file_put_contents("../logs/fixcpslog.txt",time()); -if(function_exists("set_time_limit")) set_time_limit(0); -$cplog = ""; -$people = array(); -include "../../incl/lib/connection.php"; -//getting users -$query = $db->prepare("UPDATE users - LEFT JOIN - ( - SELECT usersTable.userID, (IFNULL(starredTable.starred, 0) + IFNULL(featuredTable.featured, 0) + (IFNULL(epicTable.epic,0)*2)) as CP FROM ( - SELECT userID FROM users - ) AS usersTable - LEFT JOIN - ( - SELECT count(*) as starred, userID FROM levels WHERE starStars != 0 AND isCPShared = 0 GROUP BY(userID) - ) AS starredTable ON usersTable.userID = starredTable.userID - LEFT JOIN - ( - SELECT count(*) as featured, userID FROM levels WHERE starFeatured != 0 AND isCPShared = 0 GROUP BY(userID) - ) AS featuredTable ON usersTable.userID = featuredTable.userID - LEFT JOIN - ( - SELECT count(*)+(starEpic-1) as epic, userID FROM levels WHERE starEpic != 0 AND isCPShared = 0 GROUP BY(userID) - ) AS epicTable ON usersTable.userID = epicTable.userID - ) calculated - ON users.userID = calculated.userID - SET users.creatorPoints = IFNULL(calculated.CP, 0)"); -$query->execute(); -echo "Calculated base CP
"; -/* - CP SHARING -*/ -$query = $db->prepare("SELECT levelID, userID, starStars, starFeatured, starEpic FROM levels WHERE isCPShared = 1"); -$query->execute(); -$result = $query->fetchAll(); -foreach($result as $level){ - $deservedcp = 0; - if($level["starStars"] != 0){ - $deservedcp++; - } - if($level["starFeatured"] != 0){ - $deservedcp++; - } - if($level["starEpic"] != 0){ - $deservedcp += $level["starEpic"]; // Epic - 1, Legendary - 2, Mythic - 3 - } - $query = $db->prepare("SELECT userID FROM cpshares WHERE levelID = :levelID"); - $query->execute([':levelID' => $level["levelID"]]); - $sharecount = $query->rowCount() + 1; - $addcp = $deservedcp / $sharecount; - $shares = $query->fetchAll(); - foreach($shares as &$share){ - $people[$share["userID"]] += $addcp; - } - $people[$level["userID"]] += $addcp; -} -/* - NOW to update GAUNTLETS CP -*/ -$query = $db->prepare("SELECT level1,level2,level3,level4,level5 FROM gauntlets"); -$query->execute(); -$result = $query->fetchAll(); -//getting gauntlets -foreach($result as $gauntlet){ - //getting lvls - for($x = 1; $x < 6; $x++){ - $query = $db->prepare("SELECT userID, levelID FROM levels WHERE levelID = :levelID"); - $query->execute([':levelID' => $gauntlet["level".$x]]); - $result = $query->fetch(); - //getting users - if($result["userID"] != ""){ - $cplog .= $result["userID"] . " - +1\r\n"; - $people[$result["userID"]] += 1; - } - } -} -/* - NOW to update DAILY CP -*/ -$query = $db->prepare("SELECT levelID FROM dailyfeatures WHERE timestamp < :time"); -$query->execute([':time' => time()]); -$result = $query->fetchAll(); -//getting gauntlets -foreach($result as $daily){ - //getting lvls - $query = $db->prepare("SELECT userID, levelID FROM levels WHERE levelID = :levelID"); - $query->execute([':levelID' => $daily["levelID"]]); - $result = $query->fetch(); - //getting users - if($result["userID"] != ""){ - $people[$result["userID"]] += 1; - $cplog .= $result["userID"] . " - +1\r\n"; - } -} -/* - DONE -*/ -foreach($people as $user => $cp){ - echo "$user now has $cp creator points...
"; - $query4 = $db->prepare("UPDATE users SET creatorPoints = (creatorpoints + :creatorpoints) WHERE userID=:userID"); - $query4->execute([':userID' => $user, ':creatorpoints' => $cp]); -} -echo "
done"; -file_put_contents("../logs/cplog.txt",$cplog); -?> diff --git a/tools/cron/fixnames.php b/tools/cron/fixnames.php deleted file mode 100644 index f9b9372d8..000000000 --- a/tools/cron/fixnames.php +++ /dev/null @@ -1,24 +0,0 @@ -"; -ob_flush(); -flush(); -if(function_exists("set_time_limit")) set_time_limit(0); -include "../../incl/lib/connection.php"; -$query = $db->prepare("UPDATE users - INNER JOIN accounts ON accounts.accountID = users.extID - SET users.userName = accounts.userName - WHERE users.extID REGEXP '^-?[0-9]+$' - AND LENGTH(accounts.userName) <= 69"); -$query->execute(); -$query = $db->prepare("UPDATE users - INNER JOIN accounts ON accounts.accountID = users.extID - SET users.userName = 'Invalid Username' - WHERE users.extID REGEXP '^-?[0-9]+$' - AND LENGTH(accounts.userName) > 69"); -$query->execute(); -echo "Done
"; \ No newline at end of file diff --git a/tools/cron/friendsLeaderboard.php b/tools/cron/friendsLeaderboard.php deleted file mode 100644 index bd24d0a06..000000000 --- a/tools/cron/friendsLeaderboard.php +++ /dev/null @@ -1,34 +0,0 @@ - $newtime){ - $remaintime = time() - $cptime; - $remaintime = 30 - $remaintime; - $remainmins = floor($remaintime / 60); - $remainsecs = $remainmins * 60; - $remainsecs = $remaintime - $remainsecs; - exit("Please wait $remainmins minutes and $remainsecs seconds before running ". basename($_SERVER['SCRIPT_NAME'])." again"); - } -} -file_put_contents("../logs/fixfrndlog.txt",time()); -if(function_exists("set_time_limit")) set_time_limit(0); -include "../../incl/lib/connection.php"; -echo "Calculating the amount of friends everyone has"; -$query = $db->prepare("UPDATE accounts - LEFT JOIN - ( - SELECT a.person, (IFNULL(a.friends, 0) + IFNULL(b.friends, 0)) AS friends FROM ( - SELECT count(*) as friends, person1 AS person FROM friendships GROUP BY(person1) - ) AS a - JOIN - ( - SELECT count(*) as friends, person2 AS person FROM friendships GROUP BY(person2) - ) AS b ON a.person = b.person - ) calculated - ON accounts.accountID = calculated.person - SET accounts.friendsCount = IFNULL(calculated.friends, 0)"); -$query->execute(); -echo "
"; -?> diff --git a/tools/cron/removeBlankLevels.php b/tools/cron/removeBlankLevels.php deleted file mode 100644 index 2e65bd036..000000000 --- a/tools/cron/removeBlankLevels.php +++ /dev/null @@ -1,55 +0,0 @@ -prepare("DELETE FROM users WHERE extID = ''"); -$query->execute(); -$query = $db->prepare("DELETE FROM songs WHERE download = ''"); -$query->execute(); -echo "Deleted invalid users and songs.
"; -ob_flush(); -flush(); -$query = $db->prepare("UPDATE levels SET password = 0 WHERE password = 2"); -$query->execute(); -echo "Fixed reuploaded levels with invalid passwords.
"; -ob_flush(); -flush(); -$query = $db->prepare("DELETE FROM songs WHERE download = '10' OR download LIKE 'file:%'"); -$query->execute(); -echo "Removed songs with nonsensical URLs.
"; -/*$query = $db->prepare("SELECT accountID, userName, registerDate FROM accounts"); -$query->execute(); -$result = $query->fetchAll(); -echo "Deleting unused accounts
"; -ob_flush(); -flush(); -foreach($result as &$account){ - $query = $db->prepare("SELECT count(*) FROM users WHERE extID = :accountID"); - $query->execute([':accountID' => $account["accountID"]]); - if($query->fetchColumn() == 0){ - $time = time() - 2592000; - if($account["registerDate"] < $time){ - echo "Deleted " . htmlspecialchars($account["userName"],ENT_QUOTES) . "
"; - $query = $db->prepare("DELETE FROM accounts WHERE accountID = :accountID"); - $query->execute([':accountID' => $account["accountID"]]); - ob_flush(); - flush(); - } - } -}*/ -/*$query = $db->prepare("show tables"); -$query->execute(); -$tables = $query->fetchAll(); -echo "Optimizing tables.
"; -ob_flush(); -flush(); -foreach($tables as &$table){ - $table = $table[0]; - $query = $db->prepare("OPTIMIZE TABLE $table"); - $query->execute(); - echo "Optimized $table
"; - ob_flush(); - flush(); -}*/ -echo "
"; -ob_flush(); -flush(); -?> \ No newline at end of file diff --git a/tools/cron/songsCount.php b/tools/cron/songsCount.php deleted file mode 100644 index 1cfa6e066..000000000 --- a/tools/cron/songsCount.php +++ /dev/null @@ -1,17 +0,0 @@ -prepare("UPDATE songs - LEFT JOIN - ( - SELECT count(*) AS levelsCount, songID FROM levels GROUP BY songID - ) calculated - ON calculated.songID = songs.ID - SET songs.levelsCount = IFNULL(calculated.levelsCount, 0)"); -$query->execute(); -echo "
"; -?> diff --git a/tools/index.php b/tools/index.php deleted file mode 100644 index b793e7a7b..000000000 --- a/tools/index.php +++ /dev/null @@ -1,21 +0,0 @@ -Check out the dashboard beta here -$file"; - } - } - return $dirstring; -} -echo 'Account management tools:
- ';
-echo listdir("account");
-echo'
Upload related tools:
- ';
-echo listdir(".");
-echo "
The cron job (fixing CPs, autoban, etc.)
- ";
-echo "
- cron.php "; -echo "
Stats related tools
- ";
-echo listdir("stats");
-?>
\ No newline at end of file
diff --git a/tools/leaderboardsBan.php b/tools/leaderboardsBan.php
deleted file mode 100644
index 775d87236..000000000
--- a/tools/leaderboardsBan.php
+++ /dev/null
@@ -1,42 +0,0 @@
-prepare("SELECT accountID FROM accounts WHERE userName=:userName");
- $query->execute([':userName' => $userName]);
- $accountID = $query->fetchColumn();
- if($gs->checkPermission($accountID, "toolLeaderboardsban")){
- if(!is_numeric($userID)){
- exit("Invalid userID");
- }
- $query = $db->prepare("UPDATE users SET isBanned = 1 WHERE userID = :id");
- $query->execute([':id' => $userID]);
- if($query->rowCount() != 0){
- echo "Banned succesfully.";
- }else{
- echo "Ban failed.";
- }
- $query = $db->prepare("INSERT INTO modactions (type, value, value2, timestamp, account)
- VALUES ('15',:userID, '1', :timestamp,:account)");
- $query->execute([':userID' => $userID, ':timestamp' => time(), ':account' => $accountID]);
- }else{
- exit("You do not have the permission to do this action. Try again");
- }
- }else{
- echo "Invalid password or nonexistant account. Try again";
- }
-}else{
- echo '
LEVEL REUPLOAD - - - '22', 'binaryVersion' => '37', 'gdw' => '0', 'levelID' => $levelID, 'secret' => 'Wmfd2893gb7', 'inc' => '0', 'extras' => '0']; - $ch = curl_init($url); - curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); - curl_setopt($ch, CURLOPT_POSTFIELDS, $post); - curl_setopt($ch, CURLOPT_PROTOCOLS, CURLPROTO_HTTP | CURLPROTO_HTTPS); - $result = curl_exec($ch); - curl_close($ch); - if($result == "" OR $result == "-1" OR $result == "No no no"){ - if($result==""){ - echo "An error has occured while connecting to the server."; - }else if($result=="-1"){ - echo "This level doesn't exist."; - }else{ - echo "RobTop doesn't like you or something..."; - } - echo "
Error code: $result"; - }else{ - $level = explode('#', $result)[0]; - $resultarray = explode(':', $level); - $levelarray = array(); - $x = 1; - foreach($resultarray as &$value){ - if ($x % 2 == 0) { - $levelarray["a$arname"] = $value; - }else{ - $arname = $value; - } - $x++; - } - //echo $result; - if($_POST["debug"] == 1){ - echo "
".$result . "
"; - var_dump($levelarray); - } - if($levelarray["a4"] == ""){ - echo "An error has occured.
Error code: ".htmlspecialchars($result,ENT_QUOTES); - } - $uploadDate = time(); - //old levelString - $levelString = chkarray($levelarray["a4"]); - $gameVersion = chkarray($levelarray["a13"]); - if(substr($levelString,0,2) == 'eJ'){ - $levelString = str_replace("_","/",$levelString); - $levelString = str_replace("-","+",$levelString); - $levelString = gzuncompress(base64_decode($levelString)); - if($gameVersion > 18){ - $gameVersion = 18; - } - } - //check if exists - $query = $db->prepare("SELECT count(*) FROM levels WHERE originalReup = :lvl OR original = :lvl"); - $query->execute([':lvl' => $levelarray["a1"]]); - if($query->fetchColumn() == 0){ - $parsedurl = parse_url($url); - if($parsedurl["host"] == $_SERVER['SERVER_NAME']){ - exit("You're attempting to reupload from the target server."); - } - $hostname = $gs->getIP(); - //values - $twoPlayer = chkarray($levelarray["a31"]); - $songID = chkarray($levelarray["a35"]); - $coins = chkarray($levelarray["a37"]); - $reqstar = chkarray($levelarray["a39"]); - $extraString = chkarray($levelarray["a36"], ""); - $starStars = chkarray($levelarray["a18"]); - $isLDM = chkarray($levelarray["a40"]); - $password = chkarray($levelarray["a27"]); - if($password != "0"){ - $password = XORCipher::cipher(base64_decode($password),26364); - } - $starCoins = 0; - $starDiff = 0; - $starDemon = 0; - $starAuto = 0; - if($parsedurl["host"] == "www.boomlings.com"){ - if($starStars != 0){ - $starCoins = chkarray($levelarray["a38"]); - $starDiff = chkarray($levelarray["a9"]); - $starDemon = chkarray($levelarray["a17"]); - $starAuto = chkarray($levelarray["a25"]); - } - }else{ - $starStars = 0; - } - $targetUserID = chkarray($levelarray["a6"]); - //linkacc - $query = $db->prepare("SELECT accountID, userID FROM links WHERE targetUserID=:target AND server=:url"); - $query->execute([':target' => $targetUserID, ':url' => $parsedurl["host"]]); - if($query->rowCount() == 0){ - $userID = $reupUID; - $extID = $reupAID; - }else{ - $userInfo = $query->fetchAll()[0]; - $userID = $userInfo["userID"]; - $extID = $userInfo["accountID"]; - } - //query - $query = $db->prepare("INSERT INTO levels (levelName, gameVersion, binaryVersion, userName, levelDesc, levelVersion, levelLength, audioTrack, auto, password, original, twoPlayer, songID, objects, coins, requestedStars, extraString, levelString, levelInfo, secret, uploadDate, updateDate, originalReup, userID, extID, unlisted, hostname, starStars, starCoins, starDifficulty, starDemon, starAuto, isLDM, songIDs, sfxIDs, ts) - VALUES (:name ,:gameVersion, '27', 'Reupload', :desc, :version, :length, :audiotrack, '0', :password, :originalReup, :twoPlayer, :songID, '0', :coins, :reqstar, :extraString, :levelString, '', '', '$uploadDate', '$uploadDate', :originalReup, :userID, :extID, '0', :hostname, :starStars, :starCoins, :starDifficulty, :starDemon, :starAuto, :isLDM, :songIDs, :sfxIDs, :ts)"); - $query->execute([':password' => $password, ':starDemon' => $starDemon, ':starAuto' => $starAuto, ':gameVersion' => $gameVersion, ':name' => $levelarray["a2"], ':desc' => $levelarray["a3"], ':version' => $levelarray["a5"], ':length' => $levelarray["a15"], ':audiotrack' => $levelarray["a12"], ':twoPlayer' => $twoPlayer, ':songID' => $songID, ':coins' => $coins, ':reqstar' => $reqstar, ':extraString' => $extraString, ':levelString' => "", ':originalReup' => $levelarray["a1"], ':hostname' => $hostname, ':starStars' => $starStars, ':starCoins' => $starCoins, ':starDifficulty' => $starDiff, ':userID' => $userID, ':extID' => $extID, ':isLDM' => $isLDM, ':songIDs' => $levelarray["a52"], ':sfxIDs' => $levelarray["a53"], ':ts' => $levelarray["a57"]]); - $levelID = $db->lastInsertId(); - file_put_contents("../data/levels/$levelID",$levelString); - echo "Level reuploaded, ID: $levelID
"; - }else{ - echo "This level has been already reuploaded"; - } - } -}else{ - echo 'LINKING YOUR ACCOUNT USING linkAcc.php RECOMMENDED
- '; -} -?> - - diff --git a/tools/levelToGD.php b/tools/levelToGD.php deleted file mode 100644 index deb3bb526..000000000 --- a/tools/levelToGD.php +++ /dev/null @@ -1,132 +0,0 @@ - - -LEVEL REUPLOAD TO NORMAL GD - - -prepare("SELECT * FROM levels WHERE levelID = :level"); - $query->execute([':level' => $levelID]); - $levelInfo = $query->fetch(); - $userID = $levelInfo["userID"]; - $query = $db->prepare("SELECT accountID FROM accounts WHERE userName = :user"); - $query->execute([':user' => $userhere]); - $accountID = $query->fetchColumn(); - $query = $db->prepare("SELECT userID FROM users WHERE extID = :ext"); - $query->execute([':ext' => $accountID]); - if($query->fetchColumn() != $userID){ //verifying if lvl owned - exit("This level doesn't belong to the account you're trying to reupload from"); - } - $udid = "S" . mt_rand(111111111,999999999) . mt_rand(111111111,999999999) . mt_rand(111111111,999999999) . mt_rand(111111111,999999999) . mt_rand(1,9); //getting accountid - $sid = mt_rand(111111111,999999999) . mt_rand(11111111,99999999); - //echo $udid; - $post = ['userName' => $usertarg, 'udid' => $udid, 'password' => $passtarg, 'sID' => $sid, 'secret' => 'Wmfv3899gc9']; - $ch = curl_init($server . "/accounts/loginGJAccount.php"); - curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); - curl_setopt($ch, CURLOPT_POSTFIELDS, $post); - curl_setopt($ch, CURLOPT_PROTOCOLS, CURLPROTO_HTTP | CURLPROTO_HTTPS); - $result = curl_exec($ch); - curl_close($ch); - if($result == "" OR $result == "-1" OR $result == "No no no"){ - if($result==""){ - echo "An error has occured while connecting to the login server."; - }else if($result=="-1"){ - echo "Login to the target server failed."; - }else{ - echo "RobTop doesn't like you or something..."; - } - exit("
Error code: $result"); - } - if(!is_numeric($levelID)){ //checking if the level id is numeric due to possible exploits - exit("Invalid levelID"); - } - //TODO: move all file_get_contents calls like this to a separate function - $levelString = file_get_contents("../data/levels/$levelID"); - $seed2 = base64_encode(XORCipher::cipher(GenerateHash::genSeed2noXor($levelString),41274)); - $accountID = explode(",",$result)[0]; - $gjp = base64_encode(XORCipher::cipher($passtarg,37526)); - $post = ['gameVersion' => $levelInfo["gameVersion"], - 'binaryVersion' => $levelInfo["binaryVersion"], - 'gdw' => "0", - 'accountID' => $accountID, - 'gjp' => $gjp, - 'userName' => $usertarg, - 'levelID' => "0", - 'levelName' => $levelInfo["levelName"], - 'levelDesc' => $levelInfo["levelDesc"], - 'levelVersion' => $levelInfo["levelVersion"], - 'levelLength' => $levelInfo["levelLength"], - 'audioTrack' => $levelInfo["audioTrack"], - 'auto' => $levelInfo["auto"], - 'password' => $levelInfo["password"], - 'original' => "0", - 'twoPlayer' => $levelInfo["twoPlayer"], - 'songID' => $levelInfo["songID"], - 'objects' => $levelInfo["objects"], - 'coins' => $levelInfo["coins"], - 'requestedStars' => $levelInfo["requestedStars"], - 'unlisted' => "0", - 'wt' => "0", - 'wt2' => "3", - 'extraString' => $levelInfo["extraString"], - 'seed' => "v2R5VPi53f", - 'seed2' => $seed2, - 'levelString' => $levelString, - 'levelInfo' => $levelInfo["levelInfo"], - 'secret' => "Wmfd2893gb7"]; - if($_POST["debug"] == 1){ - var_dump($post); - } - $ch = curl_init($server . "/uploadGJLevel21.php"); - curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); - curl_setopt($ch, CURLOPT_POSTFIELDS, $post); - curl_setopt($ch, CURLOPT_PROTOCOLS, CURLPROTO_HTTP | CURLPROTO_HTTPS); - $result = curl_exec($ch); - curl_close($ch); - if($result == "" OR $result == "-1" OR $result == "No no no"){ - if($result==""){ - echo "An error has occured while connecting to the upload server."; - }else if($result=="-1"){ - echo "Reuploading level failed."; - }else{ - echo "RobTop doesn't like you or something... (upload)"; - } - exit("
Error code: $result"); - } - echo "Level reuploaded - $result"; -}else{ - echo ''; -} -?> - - \ No newline at end of file diff --git a/tools/linkAcc.php b/tools/linkAcc.php deleted file mode 100644 index 7c477e216..000000000 --- a/tools/linkAcc.php +++ /dev/null @@ -1,92 +0,0 @@ - - -ACCOUNT LINKING - - - $usertarg, 'udid' => $udid, 'password' => $passtarg, 'sID' => $sid, 'secret' => 'Wmfv3899gc9']; - $ch = curl_init($url); - curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); - curl_setopt($ch, CURLOPT_POSTFIELDS, $post); - curl_setopt($ch, CURLOPT_PROTOCOLS, CURLPROTO_HTTP | CURLPROTO_HTTPS); - $result = curl_exec($ch); - curl_close($ch); - if($result == "" OR $result == "-1" OR $result == "No no no"){ - if($result==""){ - echo "An error has occured while connecting to the server."; - }else if($result=="-1"){ - echo "Login to the target server failed."; - }else{ - echo "RobTop doesn't like you or something..."; - } - echo "
Error code: $result"; - }else{ - if($_POST["debug"] == 1){ - echo "
$result
"; - } - $parsedurl = parse_url($url); - if($parsedurl["host"] == $_SERVER['SERVER_NAME']){ - exit("You can't link 2 accounts on the same server."); - } - //getting stuff - $query = $db->prepare("SELECT accountID FROM accounts WHERE userName = :userName LIMIT 1"); - $query->execute([':userName' => $userhere]); - $accountID = $query->fetchColumn(); - $query = $db->prepare("SELECT userID FROM users WHERE extID = :extID LIMIT 1"); - $query->execute([':extID' => $accountID]); - $userID = $query->fetchColumn(); - $targetAccountID = explode(",",$result)[0]; - $targetUserID = explode(",",$result)[1]; - $query = $db->prepare("SELECT count(*) FROM links WHERE targetAccountID = :targetAccountID LIMIT 1"); - $query->execute([':targetAccountID' => $targetAccountID]); - if($query->fetchColumn() != 0){ - exit("The target account is linked to an account already."); - } - //echo $accountID; - if(!is_numeric($targetAccountID) OR !is_numeric($accountID)){ - exit("Invalid AccountID found"); - } - $server = $parsedurl["host"]; - //query - $query = $db->prepare("INSERT INTO links (accountID, targetAccountID, server, timestamp, userID, targetUserID) - VALUES (:accountID,:targetAccountID,:server,:timestamp,:userID,:targetUserID)"); - $query->execute([':accountID' => $accountID, ':targetAccountID' => $targetAccountID, ':server' => $server, ':timestamp' => time(), 'userID' => $userID, 'targetUserID' => $targetUserID]); - echo "Account linked succesfully."; - } - }else{ - echo "Invalid local username/password combination."; - } -}else{ - echo ''; -} -?> - - \ No newline at end of file diff --git a/tools/logs/cronlastrun.txt b/tools/logs/cronlastrun.txt deleted file mode 100644 index e69de29bb..000000000 diff --git a/tools/logs/fixcpslog.txt b/tools/logs/fixcpslog.txt deleted file mode 100644 index e69de29bb..000000000 diff --git a/tools/logs/fixfrndlog.txt b/tools/logs/fixfrndlog.txt deleted file mode 100644 index e69de29bb..000000000 diff --git a/tools/logs/fixnameslog.txt b/tools/logs/fixnameslog.txt deleted file mode 100644 index e69de29bb..000000000 diff --git a/tools/logs/frndlog.txt b/tools/logs/frndlog.txt deleted file mode 100644 index e69de29bb..000000000 diff --git a/tools/logs/snglog.txt b/tools/logs/snglog.txt deleted file mode 100644 index e69de29bb..000000000 diff --git a/tools/packCreate.php b/tools/packCreate.php deleted file mode 100644 index 77a779a26..000000000 --- a/tools/packCreate.php +++ /dev/null @@ -1,108 +0,0 @@ -prepare("SELECT accountID FROM accounts WHERE userName=:userName"); - $query->execute([':userName' => $userName]); - $accountID = $query->fetchColumn(); - if($gs->checkPermission($accountID, "toolPackcreate") == false){ - echo "This account doesn't have the permissions to access this tool. Try again"; - }else{ - if(!is_numeric($stars) OR !is_numeric($coins) OR $stars > 10 OR $coins > 2){ - exit("Invalid stars/coins value"); - } - if(strlen($color) != 6){ - exit("Unknown color value"); - } - $rgb = hexdec(substr($color,0,2)). - ",".hexdec(substr($color,2,2)). - ",".hexdec(substr($color,4,2)); - $lvlsarray = explode(",", $levels); - foreach($lvlsarray AS &$level){ - if(!is_numeric($level)){ - exit("$level isn't a number"); - } - $query = $db->prepare("SELECT levelName FROM levels WHERE levelID=:levelID"); - $query->execute([':levelID' => $level]); - if($query->rowCount() == 0){ - exit("Level #$level doesn't exist."); - } - $levelName = $query->fetchColumn(); - $levelstring .= $levelName . ", "; - } - $levelstring = substr($levelstring,0,-2); - $diff = 0; - $diffname = "Auto"; - switch($stars){ - case 1: - $diffname = "Auto"; - $diff = 0; - break; - case 2: - $diffname = "Easy"; - $diff = 1; - break; - case 3: - $diffname = "Normal"; - $diff = 2; - break; - case 4: - case 5: - $diffname = "Hard"; - $diff = 3; - break; - case 6: - case 7: - $diffname = "Harder"; - $diff = 4; - break; - case 8: - case 9: - $diffname = "Insane"; - $diff = 5; - break; - case 10: - $diffname = "Demon"; - $diff = 6; - break; - } - echo "AccountID: $accountID
- Pack Name: $packName
- Levels: $levelstring ($levels)
- Difficulty: $diffname ($diff)
- Stars: $stars
- Coins: $coins
- RGB Color: $rgb"; - $query = $db->prepare("INSERT INTO mappacks (name, levels, stars, coins, difficulty, rgbcolors) - VALUES (:name,:levels,:stars,:coins,:difficulty,:rgbcolors)"); - $query->execute([':name' => $packName, ':levels' => $levels, ':stars' => $stars, ':coins' => $coins, ':difficulty' => $diff, ':rgbcolors' => $rgb]); - $query = $db->prepare("INSERT INTO modactions (type, value, timestamp, account, value2, value3, value4, value7) - VALUES ('11',:value,:timestamp,:account,:levels, :stars, :coins, :rgb)"); - $query->execute([':value' => $packName, ':timestamp' => time(), ':account' => $accountID, ':levels' => $levels, ':stars' => $stars, ':coins' => $coins, ':rgb' => $rgb]); - } - }else{ - echo "Invalid password or nonexistant account. Try again"; - } -}else{ - echo ''; -} -?> diff --git a/tools/revertLikes.php b/tools/revertLikes.php deleted file mode 100644 index b467cfff6..000000000 --- a/tools/revertLikes.php +++ /dev/null @@ -1,54 +0,0 @@ -prepare("SELECT accountID FROM accounts WHERE userName=:userName"); - $query->execute([':userName' => $userName]); - $accountID = $query->fetchColumn(); - if($gs->checkPermission($accountID, "toolLeaderboardsban")){ //TODO: create a permission for this - if(!is_numeric($levelID)) - exit("Invalid level ID"); - - $query = $db->prepare("SELECT count(*) FROM actions WHERE value = :levelID AND type = 3 AND timestamp >= :timestamp"); - $query->execute([':levelID' => $levelID, ':timestamp' => $timestamp]); - $count = $query->fetchColumn(); - - $query = $db->prepare("UPDATE levels SET likes = likes + :count WHERE levelID = :levelID"); - $query->execute([':levelID' => $levelID, ':count' => $count]); - - if($query->rowCount() != 0){ - echo "Banned succesfully."; - }else{ - echo "Ban failed."; - } - - $query = $db->prepare("INSERT INTO modactions (type, value, value2, value3, timestamp, account) - VALUES ('17',:levelID, '1', :now,:account)"); - $query->execute([':levelID' => $levelID,':timestamp' => $timestamp, ':now' => time(), ':account' => $accountID]); - - }else{ - exit("You do not have the permission to do this action. Try again"); - } - }else{ - echo "Invalid password or nonexistant account. Try again"; - } -}else{ - echo ''; -} -?> \ No newline at end of file diff --git a/tools/songAdd.php b/tools/songAdd.php deleted file mode 100644 index a544cddf6..000000000 --- a/tools/songAdd.php +++ /dev/null @@ -1,30 +0,0 @@ -songReupload($_POST['songlink']); - if($result == "-4"){ - echo "This URL doesn't point to a valid audio file."; - }elseif($result == "-3") - echo "This song already exists in our database."; - elseif($result == "-2") - echo "The download link isn't a valid URL"; - else - echo "Song reuploaded: ${result}
"; - -}else{ - echo 'Direct links or Dropbox links only accepted, NO YOUTUBE LINKS
- '; -} -?> \ No newline at end of file diff --git a/tools/stats/dailyTable.php b/tools/stats/dailyTable.php deleted file mode 100644 index a1e0249c1..000000000 --- a/tools/stats/dailyTable.php +++ /dev/null @@ -1,35 +0,0 @@ -Daily Levels
-
\ No newline at end of file diff --git a/tools/stats/modActions.php b/tools/stats/modActions.php deleted file mode 100644 index 5b8ca69dc..000000000 --- a/tools/stats/modActions.php +++ /dev/null @@ -1,117 +0,0 @@ -# ID Name Creator Time $feaID $levelID "; - //level name - /*$query = $db->prepare("SELECT levelName, userID FROM levels WHERE levelID = :level"); - $query->execute([':level' => $levelID]); - $level = $query->fetch(); - $levelName = $level["levelName"]; - $userID = $level["userID"];*/ - echo "$levelName "; - //creator name - /*$query = $db->prepare("SELECT userName FROM users WHERE userID = :userID"); - $query->execute([':userID' => $userID]); - $creator = $query->fetchColumn();*/ - echo "$creator "; - //timestamp - $time = date("d/m/Y H:i", $time); - echo "$time Actions Count
--
-Moderator Count Levels rated Last time online ${mod["userName"]} ${actionscount} ${lvlcount} ${time} Actions Log
-
\ No newline at end of file diff --git a/tools/stats/noLogIn.php b/tools/stats/noLogIn.php deleted file mode 100644 index a7a0dcfa3..000000000 --- a/tools/stats/noLogIn.php +++ /dev/null @@ -1,30 +0,0 @@ -Moderator Action Value Value2 LevelID Time ".$account." ".$actionname." ".$value." ".$value2." future ".$time." ".$account." ".$actionname." ".$value." ".$value2." ".$action["value3"]." ".$time." Unused Accounts
-
\ No newline at end of file diff --git a/tools/stats/packTable.php b/tools/stats/packTable.php deleted file mode 100644 index 01399e100..000000000 --- a/tools/stats/packTable.php +++ /dev/null @@ -1,102 +0,0 @@ -# ID Name Registration date $x ".$account["accountID"] . " " . $account["userName"] . " $register "; - ob_flush(); - flush(); - $time = time() - 2592000; - if($account["registerDate"] < $time){ - echo "1 "; - } - echo "MAP PACKS
-
-# ID Map Pack Stars Coins Levels $x ".$pack["ID"]." ".htmlspecialchars($pack["name"],ENT_QUOTES)." ".$pack["stars"]." ".$pack["coins"]." "; - $x++; - foreach($lvlarray as &$lvl){ - echo $lvl . " - "; - $query = $db->prepare("SELECT levelName FROM levels WHERE levelID = :levelID"); - $query->execute([':levelID' => $lvl]); - $levelName = $query->fetchColumn(); - echo $levelName . ", "; - } - echo " GAUNTLETS
-
\ No newline at end of file diff --git a/tools/stats/reportList.php b/tools/stats/reportList.php deleted file mode 100644 index c38651cdf..000000000 --- a/tools/stats/reportList.php +++ /dev/null @@ -1,14 +0,0 @@ -# Name Level 1 Level 2 Level 3 Level 4 Level 5 ".$gauntlet["ID"]." ".$gauntletname." "; - for ($x = 1; $x < 6; $x++) { - echo ""; - $lvl = $gauntlet["level".$x]; - echo $lvl . " - "; - $query = $db->prepare("SELECT levelName FROM levels WHERE levelID = :levelID"); - $query->execute([':levelID' => $lvl]); - $levelName = $query->fetchColumn(); - echo "$levelName "; - } - echo "
\ No newline at end of file diff --git a/tools/stats/songList.php b/tools/stats/songList.php deleted file mode 100644 index 82e916561..000000000 --- a/tools/stats/songList.php +++ /dev/null @@ -1,48 +0,0 @@ - -LevelID Level Name Reported ${report['levelID']} $levelName ${report['reportsCount']} times -
diff --git a/tools/stats/stats.php b/tools/stats/stats.php deleted file mode 100644 index 3291f5a9f..000000000 --- a/tools/stats/stats.php +++ /dev/null @@ -1,111 +0,0 @@ -- - - prepare("SELECT ID,name,authorName,size FROM songs WHERE " . $searchType . " LIKE CONCAT('%', :name, '%') ORDER BY ID DESC LIMIT 5000"); - $query->execute([':name' => $name]); - $result = $query->fetchAll(); - foreach ($result as &$song) { - echo "ID -Song Name -Song Author -Size -" . $song["ID"] . " " . htmlspecialchars($song["name"], ENT_QUOTES) . " " . $song['authorName'] . " " . $song['size'] . "mb Levels
--
-Difficulty Total Unrated Rated Featured Epic $params3 ".$query->fetchColumn()." "; - $query = $db->prepare("SELECT count(*) FROM levels WHERE starStars = 0 ".$params." ".$params2); - $query->execute(); - $row .= "".$query->fetchColumn()." "; - $query = $db->prepare("SELECT count(*) FROM levels WHERE starStars <> 0 ".$params." ".$params2); - $query->execute(); - $row .= "".$query->fetchColumn()." "; - $query = $db->prepare("SELECT count(*) FROM levels WHERE starFeatured <> 0 ".$params." ".$params2); - $query->execute(); - $row .= "".$query->fetchColumn()." "; - $query = $db->prepare("SELECT count(*) FROM levels WHERE starEpic <> 0 ".$params." ".$params2); - $query->execute(); - $row .= "".$query->fetchColumn()." ${diffName} ${row['total']} ${row['unrated']} ${row['rated']} ${row['featured']} ${row['epic']} ${diffName} ${row['total']} ${row['unrated']} ${row['rated']} ${row['featured']} ${row['epic']} ${diffName} ${row['total']} ${row['unrated']} ${row['rated']} ${row['featured']} ${row['epic']} Demons
--
- -Difficulty Total Unrated Rated Featured Epic ${diffName} ${row['total']} ${row['unrated']} ${row['rated']} ${row['featured']} ${row['epic']} Accounts
--
-prepare("SELECT accountID FROM accounts WHERE userName=:userName"); - $query->execute([':userName' => $userName]); - $accountID = $query->fetchColumn(); - if($query->rowCount()==0){ - echo "Invalid account/password. Try again."; - }else if($gs->checkPermission($accountID, "toolSuggestlist")){ - $accountID = $query->fetchColumn(); - $query = $db->prepare("SELECT suggestBy,suggestLevelId,suggestDifficulty,suggestStars,suggestFeatured,suggestAuto,suggestDemon,timestamp FROM suggest ORDER BY timestamp DESC"); - $query->execute(); - $result = $query->fetchAll(); - echo 'Type Count -prepare("SELECT count(*) FROM users"); -$query->execute(); -$thing = $query->fetchColumn(); -echo "Total $thing Registered $thing Active $thing
"; - }else{ - echo "You don't have permissions to view content on this page. Try again.\n"; - } - }else{ - echo "Invalid account/password. Try again."; - } -}else{ - echo ''; -} -?> diff --git a/tools/stats/top24h.php b/tools/stats/top24h.php deleted file mode 100644 index 21bb089f2..000000000 --- a/tools/stats/top24h.php +++ /dev/null @@ -1,17 +0,0 @@ -Time Suggested by Level ID Difficulty Stars Featured ".date("d/m/Y G:i", $sugg["timestamp"])." ".$gs->getAccountName($sugg["suggestBy"])."(".$sugg["suggestBy"].") ".htmlspecialchars($sugg["suggestLevelId"],ENT_QUOTES)." ".htmlspecialchars($gs->getDifficulty($sugg["suggestDifficulty"],$sugg["suggestAuto"],$sugg["suggestDemon"]), ENT_QUOTES)." ".htmlspecialchars($sugg["suggestStars"],ENT_QUOTES)." ".htmlspecialchars($sugg["suggestFeatured"],ENT_QUOTES)." TOP LEADERBOARD PROGRESS
-
\ No newline at end of file diff --git a/tools/stats/unlisted.php b/tools/stats/unlisted.php deleted file mode 100644 index 0dec75add..000000000 --- a/tools/stats/unlisted.php +++ /dev/null @@ -1,32 +0,0 @@ -prepare("SELECT accountID FROM accounts WHERE userName=:userName"); - $query->execute([':userName' => $userName]); - if($query->rowCount()==0){ - echo "Invalid password or nonexistant account. Try again"; - }else{ - $accountID = $query->fetchColumn(); - $query = $db->prepare("SELECT levelID, levelName FROM levels WHERE extID=:extID AND unlisted=1"); - $query->execute([':extID' => $accountID]); - $result = $query->fetchAll(); - echo '# UserID UserName Stars $x ${gain['userID']} ${gain['userName']} ${gain['stars']}
"; - } - }else{ - echo "Invalid password or nonexistant account. Try again"; - } -}else{ - echo ''; -} -?> \ No newline at end of file diff --git a/tools/stats/vipList.php b/tools/stats/vipList.php deleted file mode 100644 index 753cce349..000000000 --- a/tools/stats/vipList.php +++ /dev/null @@ -1,20 +0,0 @@ -ID Name ".$level["levelID"]." ".$level["levelName"]." VIP List
-prepare("SELECT roleID, roleName FROM roles WHERE priority > 0 ORDER BY priority DESC"); -$query->execute(); -$result = $query->fetchAll(); -foreach ($result as $role) { - echo "" . $role['roleName'] . "
"; - $query2 = $db->prepare("SELECT users.userName, users.lastPlayed FROM roleassign INNER JOIN users ON roleassign.accountID = users.extID WHERE roleassign.roleID = :roleID"); - $query2->execute([':roleID' => $role["roleID"]]); - $account = $query2->fetchAll(); - echo '
"; -} diff --git a/unblockGJUser20.php b/unblockGJUser20.php index 200715562..f0b68851e 100644 --- a/unblockGJUser20.php +++ b/unblockGJUser20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/updateGJAccSettings20.php b/updateGJAccSettings20.php index aa08f6223..e47c38191 100644 --- a/updateGJAccSettings20.php +++ b/updateGJAccSettings20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/updateGJDesc20.php b/updateGJDesc20.php index b326e40dc..0106b6cfc 100644 --- a/updateGJDesc20.php +++ b/updateGJDesc20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/updateGJUserScore.php b/updateGJUserScore.php index 096741e24..8c01ed04f 100644 --- a/updateGJUserScore.php +++ b/updateGJUserScore.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/updateGJUserScore19.php b/updateGJUserScore19.php index 096741e24..8c01ed04f 100644 --- a/updateGJUserScore19.php +++ b/updateGJUserScore19.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/updateGJUserScore20.php b/updateGJUserScore20.php index 096741e24..8c01ed04f 100644 --- a/updateGJUserScore20.php +++ b/updateGJUserScore20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/updateGJUserScore21.php b/updateGJUserScore21.php index 096741e24..8c01ed04f 100644 --- a/updateGJUserScore21.php +++ b/updateGJUserScore21.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/updateGJUserScore22.php b/updateGJUserScore22.php index 096741e24..8c01ed04f 100644 --- a/updateGJUserScore22.php +++ b/updateGJUserScore22.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/uploadFriendRequest20.php b/uploadFriendRequest20.php index ffc0de83f..a7ad8abfe 100644 --- a/uploadFriendRequest20.php +++ b/uploadFriendRequest20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/uploadGJAccComment20.php b/uploadGJAccComment20.php index 1229a9523..2a6db2cf4 100644 --- a/uploadGJAccComment20.php +++ b/uploadGJAccComment20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/uploadGJComment.php b/uploadGJComment.php index 2f97f7225..8c0946e67 100644 --- a/uploadGJComment.php +++ b/uploadGJComment.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/uploadGJComment19.php b/uploadGJComment19.php index 2f97f7225..8c0946e67 100644 --- a/uploadGJComment19.php +++ b/uploadGJComment19.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/uploadGJComment20.php b/uploadGJComment20.php index 2f97f7225..8c0946e67 100644 --- a/uploadGJComment20.php +++ b/uploadGJComment20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/uploadGJComment21.php b/uploadGJComment21.php index 2f97f7225..8c0946e67 100644 --- a/uploadGJComment21.php +++ b/uploadGJComment21.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/uploadGJLevel.php b/uploadGJLevel.php index 50e5a3e86..fc4dfeae4 100644 --- a/uploadGJLevel.php +++ b/uploadGJLevel.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/uploadGJLevel19.php b/uploadGJLevel19.php index 50e5a3e86..fc4dfeae4 100644 --- a/uploadGJLevel19.php +++ b/uploadGJLevel19.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/uploadGJLevel20.php b/uploadGJLevel20.php index 50e5a3e86..fc4dfeae4 100644 --- a/uploadGJLevel20.php +++ b/uploadGJLevel20.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/uploadGJLevel21.php b/uploadGJLevel21.php index 50e5a3e86..fc4dfeae4 100644 --- a/uploadGJLevel21.php +++ b/uploadGJLevel21.php @@ -1,3 +1,3 @@ \ No newline at end of file diff --git a/uploadGJLevelList.php b/uploadGJLevelList.php index b9e3653a3..14752bb06 100644 --- a/uploadGJLevelList.php +++ b/uploadGJLevelList.php @@ -1,3 +1,3 @@ - \ No newline at end of file diff --git a/uploadGJMessage20.php b/uploadGJMessage20.php index 75b976f92..bf805e317 100644 --- a/uploadGJMessage20.php +++ b/uploadGJMessage20.php @@ -1,3 +1,3 @@ \ No newline at end of fileUser Last Online " . $username . " $time - - '.$this->getLocalizedString("language").' + '.$this->getLocalizedString("language").' -
- ';
+ if($msgEnabled == 1 AND isset($_SESSION["accountID"]) AND $_SESSION["accountID"] != 0) {
+ $new = '';
+ $newMessagesCount = $db->prepare("SELECT * FROM messages WHERE toAccountID = :acc AND isNew = 0 GROUP BY accID");
+ $newMessagesCount->execute([':acc' => $_SESSION["accountID"]]);
+ $newMessagesCount = count($newMessagesCount->fetchAll());
+ if($newMessagesCount > 0) $new = '';
+ echo '
ID: '.$pack["ID"].'
+ '.($pack["timestamp"] != 0 ? ''.$dl->getLocalizedString('date').': '.$dl->convertToDate($pack["timestamp"], true).'
' : '').' +