| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423 |
- package tool
- import (
- "database/sql"
- "log"
- "regexp"
- "strconv"
- "strings"
- "github.com/3th1nk/cidr"
- "github.com/dlclark/regexp2"
- )
- func IP_or_user(ip string) bool {
- match, _ := regexp.MatchString("(\\.|:)", ip)
- if match {
- return true
- } else {
- return false
- }
- }
- func Get_level(db *sql.DB, ip string) []string {
- var level string
- var exp string
- var max_exp string
- stmt, err := db.Prepare(DB_change("select data from user_set where id = ? and name = 'level'"))
- if err != nil {
- log.Fatal(err)
- }
- defer stmt.Close()
- err = stmt.QueryRow(ip).Scan(&level)
- if err != nil {
- if err == sql.ErrNoRows {
- level = "0"
- } else {
- log.Fatal(err)
- }
- }
- stmt, err = db.Prepare(DB_change("select data from user_set where id = ? and name = 'experience'"))
- if err != nil {
- log.Fatal(err)
- }
- defer stmt.Close()
- err = stmt.QueryRow(ip).Scan(&exp)
- if err != nil {
- if err == sql.ErrNoRows {
- exp = "0"
- } else {
- log.Fatal(err)
- }
- }
- level_int, _ := strconv.Atoi(level)
- max_exp = strconv.Itoa(level_int*50 + 500)
- return []string{level, exp, max_exp}
- }
- func IP_preprocess(db *sql.DB, ip string, my_ip string) []string {
- var ip_view string
- var user_name_view string
- ip_split := strings.Split(ip, ":")
- if len(ip_split) != 1 && ip_split[0] == "tool" {
- return []string{ip, ""}
- }
- err := db.QueryRow(DB_change("select data from other where name = 'ip_view'")).Scan(&ip_view)
- if err != nil {
- if err == sql.ErrNoRows {
- ip_view = ""
- } else {
- log.Fatal(err)
- }
- }
- err = db.QueryRow(DB_change("select data from other where name = 'user_name_view'")).Scan(&user_name_view)
- if err != nil {
- if err == sql.ErrNoRows {
- user_name_view = ""
- } else {
- log.Fatal(err)
- }
- }
- if Check_acl(db, "", "", "view_hide_user_name", my_ip) {
- ip_view = ""
- user_name_view = ""
- }
- ip_change := ""
- if IP_or_user(ip) {
- if ip_view != "" && ip != my_ip {
- hash_ip := Sha224(ip)
- ip = hash_ip[:10]
- ip_change = "true"
- }
- } else {
- if user_name_view != "" {
- var sub_user_name string
- stmt, err := db.Prepare(DB_change("select data from user_set where id = ? and name = 'sub_user_name'"))
- if err != nil {
- log.Fatal(err)
- }
- defer stmt.Close()
- err = stmt.QueryRow(ip).Scan(&sub_user_name)
- if err != nil {
- if err == sql.ErrNoRows {
- sub_user_name = Get_language(db, "member", false)
- } else {
- log.Fatal(err)
- }
- }
- if sub_user_name == "" {
- sub_user_name = Get_language(db, "member", false)
- }
- ip = sub_user_name
- ip_change = "true"
- } else {
- var user_name string
- stmt, err := db.Prepare(DB_change("select data from user_set where name = 'user_name' and id = ?"))
- if err != nil {
- log.Fatal(err)
- }
- defer stmt.Close()
- err = stmt.QueryRow(ip).Scan(&user_name)
- if err != nil {
- if err == sql.ErrNoRows {
- user_name = ip
- } else {
- log.Fatal(err)
- }
- }
- if user_name == "" {
- user_name = ip
- }
- ip = user_name
- }
- }
- return []string{ip, ip_change}
- }
- func IP_menu(db *sql.DB, ip string, my_ip string, option string) map[string][][]string {
- menu := map[string][][]string{}
- if ip == my_ip && option == "" {
- stmt, err := db.Prepare(DB_change("select count(*) from user_notice where name = ? and readme = ''"))
- if err != nil {
- log.Fatal(err)
- }
- defer stmt.Close()
- var alarm_count string
- err = stmt.QueryRow(my_ip).Scan(&alarm_count)
- if err != nil {
- if err == sql.ErrNoRows {
- alarm_count = "0"
- } else {
- log.Fatal(err)
- }
- }
- if IP_or_user(my_ip) {
- menu[Get_language(db, "login", false)] = [][]string{
- {"/login", Get_language(db, "login", false)},
- {"/register", Get_language(db, "register", false)},
- {"/change", Get_language(db, "user_setting", false)},
- {"/login/find", Get_language(db, "password_search", false)},
- {"/alarm" + Url_parser(my_ip), Get_language(db, "alarm", false) + " (" + alarm_count + ")"},
- }
- } else {
- menu[Get_language(db, "login", false)] = [][]string{
- {"/logout", Get_language(db, "logout", false)},
- {"/change", Get_language(db, "user_setting", false)},
- }
- menu[Get_language(db, "tool", false)] = [][]string{
- {"/watch_list", Get_language(db, "watchlist", false)},
- {"/star_doc", Get_language(db, "star_doc", false)},
- {"/challenge", Get_language(db, "challenge_and_level_manage", false)},
- {"/acl/user:" + Url_parser(my_ip), Get_language(db, "user_document_acl", false)},
- {"/alarm" + Url_parser(my_ip), Get_language(db, "alarm", false) + " (" + alarm_count + ")"},
- }
- }
- }
- auth_name := Check_acl(db, "", "", "ban_auth", my_ip)
- if auth_name {
- menu[Get_language(db, "admin", false)] = [][]string{
- {"/auth/ban/" + Url_parser(ip), Get_language(db, "ban", false)},
- {"/list/user/check_submit/" + Url_parser(ip), Get_language(db, "check", false)},
- }
- }
- menu[Get_language(db, "other", false)] = [][]string{
- {"/record/" + Url_parser(ip), Get_language(db, "edit_record", false)},
- {"/record/topic/" + Url_parser(ip), Get_language(db, "discussion_record", false)},
- {"/record/bbs/" + Url_parser(ip), Get_language(db, "bbs_record", false)},
- {"/record/bbs_comment/" + Url_parser(ip), Get_language(db, "bbs_comment_record", false)},
- {"/topic/user:" + Url_parser(ip), Get_language(db, "user_discussion", false)},
- {"/count/" + Url_parser(ip), Get_language(db, "count", false)},
- }
- return menu
- }
- func Get_user_ban_type(ban_type string) string {
- if ban_type == "O" {
- return "1"
- } else if ban_type == "E" {
- return "2"
- } else if ban_type == "A" {
- return "3"
- } else if ban_type == "D" {
- return "4"
- } else {
- return ""
- }
- }
- func Get_user_ban(db *sql.DB, ip string, tool string) []string {
- rows, err := db.Query(DB_change("select login, block from rb where band = 'regex' and ongoing = '1'"))
- if err != nil {
- log.Fatal(err)
- }
- defer rows.Close()
- for rows.Next() {
- var login string
- var block string
- err := rows.Scan(&login, &block)
- if err != nil {
- log.Fatal(err)
- }
- ban_type := Get_user_ban_type(login)
- r := regexp2.MustCompile(block, 0)
- if m, _ := r.FindStringMatch(ip); m != nil {
- if tool == "login" {
- if ban_type != "1" {
- return []string{"true", "a" + ban_type}
- }
- } else if tool == "edit_request" {
- if ban_type != "2" {
- return []string{"true", "a" + ban_type}
- }
- } else {
- return []string{"true", "a" + ban_type}
- }
- }
- }
- if IP_or_user(ip) {
- rows, err = db.Query(DB_change("select login, block from rb where band = 'cidr' and ongoing = '1'"))
- if err != nil {
- log.Fatal(err)
- }
- defer rows.Close()
- for rows.Next() {
- var login string
- var block string
- err := rows.Scan(&login, &block)
- if err != nil {
- log.Fatal(err)
- }
- ban_type := Get_user_ban_type(login)
- c, _ := cidr.Parse(block)
- if c.Contains(ip) {
- if tool == "login" {
- if ban_type != "1" {
- return []string{"true", "b" + ban_type}
- }
- } else if tool == "edit_request" {
- if ban_type != "2" {
- return []string{"true", "b" + ban_type}
- }
- } else {
- return []string{"true", "b" + ban_type}
- }
- }
- }
- }
- stmt, err := db.Prepare(DB_change("select login from rb where block = ? and band = '' and ongoing = '1'"))
- if err != nil {
- log.Fatal(err)
- }
- defer stmt.Close()
- var login string
- err = stmt.QueryRow(ip).Scan(&login)
- if err != nil {
- if err == sql.ErrNoRows {
- } else {
- log.Fatal(err)
- }
- } else {
- ban_type := Get_user_ban_type(login)
- if tool == "login" {
- if ban_type != "1" {
- return []string{"true", ban_type}
- }
- } else if tool == "edit_request" {
- if ban_type != "2" {
- return []string{"true", ban_type}
- }
- } else {
- return []string{"true", ban_type}
- }
- }
- stmt, err = db.Prepare(DB_change("select data from user_set where id = ? and name = 'acl'"))
- if err != nil {
- log.Fatal(err)
- }
- defer stmt.Close()
- var data string
- err = stmt.QueryRow(ip).Scan(&data)
- if err != nil {
- if err == sql.ErrNoRows {
- } else {
- log.Fatal(err)
- }
- } else {
- if data == "ban" {
- return []string{"true", "c"}
- }
- }
- return []string{"", ""}
- }
- func IP_parser(db *sql.DB, ip string, my_ip string) string {
- ip_pre_data := IP_preprocess(db, ip, my_ip)
- if ip_pre_data[0] == "" {
- return ""
- }
- if ip_pre_data[1] != "" {
- return ip_pre_data[0]
- } else {
- raw_ip := ip
- ip = HTML_escape(ip_pre_data[0])
- if !IP_or_user(raw_ip) {
- var user_name_level string
- var user_title string
- err := db.QueryRow(DB_change("select data from other where name = 'user_name_level'")).Scan(&user_name_level)
- if err != nil {
- if err == sql.ErrNoRows {
- user_name_level = ""
- } else {
- log.Fatal(err)
- }
- }
- if user_name_level != "" {
- level_data := Get_level(db, raw_ip)
- ip += "<sup>" + level_data[0] + "</sup>"
- }
- ip = "<a href=\"/w/" + Url_parser("user:"+raw_ip) + "\">" + ip + "</a>"
- stmt, err := db.Prepare(DB_change("select data from user_set where name = 'user_title' and id = ?"))
- if err != nil {
- log.Fatal(err)
- }
- defer stmt.Close()
- err = stmt.QueryRow(raw_ip).Scan(&user_title)
- if err != nil {
- if err == sql.ErrNoRows {
- user_title = ""
- } else {
- log.Fatal(err)
- }
- }
- if Check_acl(db, "", "", "user_name_bold", raw_ip) {
- ip = "<b>" + ip + "</b>"
- }
- ip = user_title + ip
- }
- ban := Get_user_ban(db, raw_ip, "")
- if ban[0] == "true" {
- ip = "<sup>" + ban[1] + "</sup><s>" + ip + "</s>"
- }
- ip += "<a href=\"javascript:void(0);\" name=\"" + Url_parser(raw_ip) + "\" onclick=\"opennamu_do_ip_click(this);\"><span class=\"opennamu_svg opennamu_svg_tool\"> </span></a>"
- return ip
- }
- }
|