Annotation of botnow/register.php, Revision 1.1
1.1 ! bountyht 1: <?php
! 2:
! 3: $hashirc = isset($_REQUEST['hashirc']) ? $_REQUEST['hashirc'] : NULL;
! 4: $hashbnc = isset($_REQUEST['hashbnc']) ? $_REQUEST['hashbnc'] : NULL;
! 5: $hashshell = isset($_REQUEST['hashshell']) ? $_REQUEST['hashshell'] : NULL;
! 6: $hashsmtp = isset($_REQUEST['hashsmtp']) ? $_REQUEST['hashsmtp'] : NULL;
! 7: $lines = file('botnow.conf');
! 8:
! 9: foreach ($lines as $i => $line) {
! 10: if (preg_match('/^\#/', $line, $matches)) {
! 11: } elseif (preg_match('/^\s*$/', $line, $matches)) {
! 12: } elseif (preg_match('/^([^=\s]+)\s*=\s*(.*)$/', $line, $matches)) {
! 13: $key = $matches[1];
! 14: $val = $matches[2];
! 15: $conf{$key} = $val;
! 16: }
! 17: }
! 18:
! 19: $wordslist = file('words');
! 20: $wordslen = sizeof($wordslist);
! 21: for ($n = 0; $n < 5; $n++) {
! 22: $i = rand(0, $wordslen-1);
! 23: $words[] = substr($wordslist[$i],0,-1); // remove newline
! 24: }
! 25: $passphrase = implode(" ", $words);
! 26: $passphrase = ucwords($passphrase);
! 27: $fpr{"passphrase"} = $passphrase;
! 28: $fpr{"remoteaddr"} = $_SERVER['REMOTE_ADDR'];
! 29: $fpr{"httpxforwarded"} = $_SERVER['HTTP_X_FORWARDED_FOR'];
! 30: $fpr{"time"} = date("Y-m-d H:i:s");
! 31: if (isset($hashirc)) {
! 32: $fpr{"hashirc"} = $hashirc;
! 33: } elseif (isset($hashbnc)) {
! 34: $fpr{"hashbnc"} = $hashbnc;
! 35: } elseif (isset($hashshell)) {
! 36: $fpr{"hashshell"} = $hashshell;
! 37: } elseif (isset($hashsmtp)) {
! 38: $fpr{"hashsmtp"} = $hashsmtp;
! 39: }
! 40:
! 41: foreach (getallheaders() as $key => $value) {
! 42: if ($key == "User-Agent") {
! 43: $key = "useragent";
! 44: } elseif ($key == "Upgrade-Insecure-Requests") {
! 45: $key = "upgradeinsecure";
! 46: } elseif ($key == "Host") {
! 47: $key = "host";
! 48: } elseif ($key == "Dnt") {
! 49: $key = "dnt";
! 50: } elseif ($key == "Connection") {
! 51: $key = "connection";
! 52: } elseif ($key == "Cache-Control") {
! 53: $key = "cachecontrol";
! 54: } elseif ($key == "Accept-Language") {
! 55: $key = "acceptlanguage";
! 56: } elseif ($key == "Accept-Encoding") {
! 57: $key = "acceptencoding";
! 58: } elseif ($key == "Accept") {
! 59: $key = "accept";
! 60: } elseif ($key == "Cookie") {
! 61: $key = "cookie";
! 62: }
! 63: $fpr{$key} = $value;
! 64: }
! 65:
! 66: setcookie("ircnow[hashirc]", $hashirc, time()+86400*30, '/', 'ircnow.org', true);
! 67: setcookie("ircnow[hashbnc]", $hashbnc, time()+86400*30, '/', 'ircnow.org', true);
! 68: setcookie("ircnow[hashshell]", $hashshell, time()+86400*30, '/', 'ircnow.org', true);
! 69: setcookie("ircnow[hashsmtp]", $hashsmtp, time()+86400*30, '/', 'ircnow.org', true);
! 70:
! 71: class wwwdb extends SQLite3 {
! 72: function __construct() {
! 73: $this->open('/botnow/botnow.db');
! 74: }
! 75: }
! 76: $wwwdb = new wwwdb();
! 77: if(!$wwwdb) {
! 78: echo $wwwdb->lastErrorMsg();
! 79: } else {
! 80: foreach ($fpr as $key => $value) {
! 81: $keys[] = $key;
! 82: $values[] = $value;
! 83: }
! 84: $keystr = '"'.implode('","', $keys).'"';
! 85: $valstr = '"'.implode('","', $values).'"';
! 86: $sql =<<<EOF
! 87: INSERT INTO www ($keystr)
! 88: VALUES ($valstr);
! 89: EOF;
! 90: if (!$wwwdb->exec($sql)) {
! 91: echo $db->lastErrorMsg();
! 92: }
! 93: $clients = array("AdiIRC", "Adium", "AndroIRC", "Atomic", "Colloquy", "Hexchat", "HydraIRC", "IRCForAndroid", "IRCCloud", "IceChat", "ircEX", "irssi", "Igloo", "KVIrc", "KiwiIRC", "Limechat", "Mibbit", "mIRC", "nettalk", "Pidgin", "qwebirc", "Quassel", "RevolutionIRC", "SimpleIRC", "Smuxi", "Textual", "Thunderbird", "TurboIRC", "Weechat", "Yaaic", "XChat");
! 94: $sql =<<<EOF
! 95: SELECT * from irc where hashid = "$hashirc";
! 96: EOF;
! 97: $ret = $wwwdb->query($sql);
! 98: while($row = $ret->fetchArray(SQLITE3_ASSOC)) {
! 99: echo "Don't worry I got called";
! 100: $ircid = $row['id'];
! 101: $ctcpversion = $row['ctcpversion'];
! 102: $hostmask = $row['hostmask'];
! 103: foreach ($clients as $i => $value) {
! 104: if (preg_match("/$value/i", $ctcpversion, $matches)) {
! 105: $client = $value;
! 106: }
! 107: }
! 108: if (!isset($client)) {
! 109: if (preg_match('/!~?uid\d+/i', $hostmask, $matches)) {
! 110: $client = "IRCCloud";
! 111: } elseif(preg_match('/!~?quassel/i', $hostmask, $matches)) {
! 112: $client = "Quassel";
! 113: } elseif(preg_match('/!~?IceChat/i', $hostmask, $matches)) {
! 114: $client = "IceChat";
! 115: } elseif(preg_match('/Purple\s+IRC/i', $ctcpversion, $matches)) {
! 116: $client = "Pidgin";
! 117: } elseif(preg_match('/X-Chat/i', $ctcpversion, $matches)) {
! 118: $client = "XChat";
! 119: } elseif(preg_match('/Kiwi\s+IRC/i', $ctcpversion, $matches)) {
! 120: $client = "KiwiIRC";
! 121: } elseif(preg_match('/Android\s+IRC/i', $ctcpversion, $matches)) {
! 122: $client = "AndroIRC";
! 123: } elseif(preg_match('/IRC\s+for\s+Android/i', $ctcpversion, $matches)) {
! 124: $client = "IRCForAndroid";
! 125: } elseif(preg_match('/Revolution\s+IRC/i', $ctcpversion, $matches)) {
! 126: $client = "RevolutionIRC";
! 127: } elseif(preg_match('/Yet\s+another\s+Android\s+IRC\s+client/i', $ctcpversion, $matches)) {
! 128: $client = "Yaaic";
! 129: } else {
! 130: $client = "Bouncer";
! 131: }
! 132: }
! 133:
! 134: }
! 135: $sql =<<<EOF
! 136: SELECT * from bnc where ircid = "$ircid";
! 137: EOF;
! 138: $ret = $wwwdb->query($sql);
! 139: while($row = $ret->fetchArray(SQLITE3_ASSOC)) {
! 140: $username = $row['username'];
! 141: }
! 142: $wwwdb->close();
! 143: }
! 144: function myURLEncode($string) {
! 145: $replace = array('%20', '%21', '%2A', '%27', '%28', '%29', '%3B', '%3A', '%40', '%26', '%3D', '%2B', '%24', '%2C', '%2F', '%3F', '%23', '%5B', '%5D');
! 146: $search = array(' ', '!', '*', "'", "(", ")", ";", ":", "@", "&", "=", "+", "$", ",", "/", "?", "#", "[", "]");
! 147: return str_replace($search, $replace, $string);
! 148: }
! 149: $hostname = $conf{"hostname"};
! 150: ?>
! 151:
! 152: <!DOCTYPE html>
! 153: <html lang="en">
! 154: <head>
! 155: <meta charset="utf-8">
! 156: <meta name="viewport" content="width=device-width, initial-scale=1">
! 157: <meta name="robots" content="index, follow"/>
! 158: <title>IRCNow -- Verify Account</title>
! 159: <style>
! 160: body {
! 161: width: 80%;
! 162: margin: 5rem auto;
! 163: text-align: center;
! 164: font-family: "Tahoma", "Verdana", "Arial";
! 165: }
! 166: </style>
! 167: <script>
! 168: console.log(Intl.DateTimeFormat().resolvedOptions().timeZone);
! 169: var offset = new Date().getTimezoneOffset();
! 170: console.log(offset);
! 171: console.log(new Date().toString());
! 172: console.log(window.screen.width);
! 173: console.log(window.screen.height);
! 174: //console.log(screen.availWidth);
! 175: //console.log(screen.availHeight);
! 176: console.log(screen.colorDepth);
! 177: </script>
! 178: </head>
! 179:
! 180: <body>
! 181: <p>Please email <a href="mailto:<?php echo $conf{"mailfrom"}."?subject=".myURLEncode("IRCNow Verify: $passphrase")."&body=".myURLEncode("IRCNow Verify: $passphrase") ?>"><?php echo $conf{"mailfrom"} ?></a> with the following passphrase:</p>
! 182:
! 183: <p>IRCNow Verify: <?php echo $passphrase ?></p>
! 184:
! 185: <p><a href="https://wiki.ircnow.org/index.php?n=Bouncer.<?php echo $client ?>">Click here for <?php echo $client ?> connection instructions.</a></p>
! 186:
! 187: <p>To change your password, login to <a href="<?php echo "https://bnc.$hostname/" ?>"><?php echo "https://bnc.$hostname/" ?></a>, fill in the password field, then click on the "Save and Return" button.</p>
! 188:
! 189: <p>Or, you can change the password from your IRC client. Once you have logged in, type:</p>
! 190:
! 191: <code>/msg *controlpanel set password <?php echo $username ?> newpassword</code>
! 192:
! 193: </body>
! 194: </html>
CVSweb
![[BACK]](/cvsweb/icons/back.gif){kind=icon}
Return to register.php CVS log ![[TXT]](/cvsweb/icons/text.gif){kind=icon}
![[DIR]](/cvsweb/icons/dir.gif){kind=icon}
Up to [local] / botnow