| 1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297 |
- import os
- import sys
- import platform
- for i in range(0, 2):
- try:
- from diff_match_patch import diff_match_patch
- import werkzeug.routing
- import werkzeug.debug
- import flask_reggie
- import wsgiref.simple_server
- import urllib.request
- import email.mime.text
- import sqlite3
- import pymysql
- import hashlib
- import smtplib
- import asyncio
- import zipfile
- import shutil
- import threading
- import logging
- import random
- import flask
- import json
- import html
- import re
- if sys.version_info < (3, 6):
- import sha3
- from .mark import *
- except ImportError as e:
- if i == 0:
- print(e)
- print('----')
- if platform.system() == 'Linux' or platform.system() == 'Windows':
- ok = os.system('python' + ('3' if platform.system() != 'Windows' else '') + ' -m pip install --user -r requirements.txt')
- if ok == 0:
- print('----')
- try:
- os.execl(sys.executable, sys.executable, *sys.argv)
- except:
- try:
- os.execl(sys.executable, '"' + sys.executable + '"', *sys.argv)
- except:
- print('Error : restart failed')
- raise
- else:
- print('Error : library install failed')
- raise
- else:
- print('----')
- print(e)
- raise
- else:
- print('----')
- print(e)
- raise
- global_lang = {}
- req_list = ''
- def load_conn(data):
- global conn
- global curs
- conn = data
- curs = conn.cursor()
- load_conn2(data)
- def send_email(who, title, data):
- try:
- curs.execute(db_change('' + \
- 'select name, data from other ' + \
- 'where name = "smtp_email" or name = "smtp_pass" or name = "smtp_server" or name = "smtp_port" or name = "smtp_security"' + \
- ''))
- rep_data = curs.fetchall()
- smtp_email = ''
- smtp_pass = ''
- smtp_server = ''
- smtp_security = ''
- smtp_port = ''
- smtp = ''
- if rep_data:
- smtp_email = ''
- smtp_pass = ''
- for i in rep_data:
- if i[0] == 'smtp_email':
- smtp_email = i[1]
- elif i[0] == 'smtp_pass':
- smtp_pass = i[1]
- elif i[0] == 'smtp_server':
- smtp_server = i[1]
- elif i[0] == 'smtp_security':
- smtp_security = i[1]
- elif i[0] == 'smtp_port':
- smtp_port = i[1]
-
- smtp_port = int(smtp_port)
- if smtp_security == 'plain':
- smtp = smtplib.SMTP(smtp_server, smtp_port)
- elif smtp_security == 'starttls':
- smtp = smtplib.SMTP(smtp_server, smtp_port)
- smtp.starttls()
- else: # if smtp_security == 'tls':
- smtp = smtplib.SMTP_SSL(smtp_server, smtp_port)
-
- smtp.login(smtp_email, smtp_pass)
- else:
- raise
- msg = email.mime.text.MIMEText(data)
- msg['Subject'] = title
- smtp.sendmail(smtp_email, who, msg.as_string())
- smtp.quit()
- return 1
- except Exception as e:
- print('----')
- print('Error : email send error')
- print(e)
- return 0
- def last_change(data):
- json_address = re.sub(r"(((?!\.|\/).)+)\.html$", "set.json", skin_check())
- try:
- json_data = json.loads(open(json_address, encoding='utf8').read())
- except:
- json_data = 0
- if json_data != 0:
- for j_data in json_data:
- if "class" in json_data[j_data]:
- if "require" in json_data[j_data]:
- re_data = re.compile("<((?:" + j_data + ")( (?:(?!>).)*)?)>")
- s_data = re_data.findall(data)
- for i_data in s_data:
- e_data = 0
- for j_i_data in json_data[j_data]["require"]:
- re_data_2 = re.compile("( |^)" + j_i_data + " *= *[\'\"]" + json_data[j_data]["require"][j_i_data] + "[\'\"]")
- if not re_data_2.search(i_data[1]):
- re_data_2 = re.compile("( |^)" + j_i_data + "=" + json_data[j_data]["require"][j_i_data] + "(?: |$)")
- if not re_data_2.search(i_data[1]):
- e_data = 1
- break
- if e_data == 0:
- re_data_3 = re.compile("<" + i_data[0] + ">")
- data = re_data_3.sub("<" + i_data[0] + " class=\"" + json_data[j_data]["class"] + "\">", data)
- else:
- re_data = re.compile("<(?P<in>" + j_data + "(?: (?:(?!>).)*)?)>")
- data = re_data.sub("<\g<in> class=\"" + json_data[j_data]["class"] + "\">", data)
- return data
- def easy_minify(data, tool = None):
- return last_change(data)
- def render_set(title = '', data = '', num = 0, s_data = 0, include = None, acl = None):
- if not acl:
- acl = acl_check(title, 'render')
- if acl == 1:
- return 'HTTP Request 401.3'
- elif s_data == 1:
- return data
- else:
- if data != None:
- return render_do(title, data, num, include)
- else:
- return 'HTTP Request 404'
- def update(ver_num, set_data):
- print('----')
- # 업데이트 하위 호환 유지 함수
- if ver_num < 3160027:
- print('Add init set')
- set_init()
- if ver_num < 3170002:
- curs.execute(db_change("select html from html_filter where kind = 'extension'"))
- if not curs.fetchall():
- for i in ['jpg', 'jpeg', 'png', 'gif', 'webp']:
- curs.execute(db_change("insert into html_filter (html, kind) values (?, 'extension')"), [i])
- if ver_num < 3170400:
- curs.execute(db_change("select title, sub, code from topic where id = '1'"))
- for i in curs.fetchall():
- curs.execute(db_change("update topic set code = ? where title = ? and sub = ?"), [i[2], i[0], i[1]])
- curs.execute(db_change("update rd set code = ? where title = ? and sub = ?"), [i[2], i[0], i[1]])
- if ver_num < 3171800:
- curs.execute(db_change("select data from other where name = 'recaptcha'"))
- change_rec = curs.fetchall()
- if change_rec and change_rec[0][0] != '':
- new_rec = re.search(r'data-sitekey="([^"]+)"', change_rec[0][0])
- if new_rec:
- curs.execute(db_change("update other set data = ? where name = 'recaptcha'"), [new_rec.group(1)])
- else:
- curs.execute(db_change("update other set data = '' where name = 'recaptcha'"))
- curs.execute(db_change("update other set data = '' where name = 'sec_re'"))
-
- if ver_num < 3172800 and set_data['db_type'] == 'mysql':
- get_data_mysql = json.loads(open('data/mysql.json').read())
-
- with open('data/mysql.json', 'w') as f:
- f.write('{ "user" : "' + get_data_mysql['user'] + '", "password" : "' + get_data_mysql['password'] + '", "host" : "localhost" }')
- if ver_num < 3183603:
- curs.execute(db_change("select block from ban where band = 'O'"))
- for i in curs.fetchall():
- curs.execute(db_change("update ban set block = ?, band = 'regex' where block = ? and band = 'O'"), [
- '^' + i[0].replace('.', '\\.'),
- i[0]
- ])
- curs.execute(db_change("select block from rb where band = 'O'"))
- for i in curs.fetchall():
- curs.execute(db_change("update rb set block = ?, band = 'regex' where block = ? and band = 'O'"), [
- '^' + i[0].replace('.', '\\.'),
- i[0]
- ])
- # set 1
- if ver_num < 3190201:
- today_time = get_time()
- curs.execute(db_change("select block, end, why, band, login from ban"))
- for i in curs.fetchall():
- curs.execute(db_change("insert into rb (block, end, today, why, band, login, ongoing) values (?, ?, ?, ?, ?, ?, ?)"), [
- i[0],
- i[1],
- today_time,
- i[2],
- i[3],
- i[4],
- '1'
- ])
- if ver_num < 3191301:
- curs.execute(db_change('' + \
- 'select id, title, date from history ' + \
- 'where not title like "user:%" ' + \
- 'order by date desc ' + \
- 'limit 50' + \
- ''))
- data_list = curs.fetchall()
- for get_data in data_list:
- curs.execute(db_change("insert into rc (id, title, date, type) values (?, ?, ?, 'normal')"), [
- get_data[0],
- get_data[1],
- get_data[2]
- ])
- if ver_num < 3202100:
- curs.execute(db_change('delete from cache_data'))
- conn.commit()
- print('Update pass')
- def set_init():
- # 초기값 설정 함수
- curs.execute(db_change("select html from html_filter where kind = 'email'"))
- if not curs.fetchall():
- for i in ['naver.com', 'gmail.com', 'daum.net', 'kakao.com']:
- curs.execute(db_change("insert into html_filter (html, kind) values (?, 'email')"), [i])
- curs.execute(db_change("select html from html_filter where kind = 'extension'"))
- if not curs.fetchall():
- for i in ['jpg', 'jpeg', 'png', 'gif', 'webp']:
- curs.execute(db_change("insert into html_filter (html, kind) values (?, 'extension')"), [i])
- curs.execute(db_change('select data from other where name = "smtp_server" or name = "smtp_port" or name = "smtp_security"'))
- if not curs.fetchall():
- for i in [['smtp_server', 'smtp.gmail.com'], ['smtp_port', '587'], ['smtp_security', 'starttls']]:
- curs.execute(db_change("insert into other (name, data) values (?, ?)"), [i[0], i[1]])
- def pw_encode(data, data2 = '', type_d = ''):
- if type_d == '':
- curs.execute(db_change('select data from other where name = "encode"'))
- set_data = curs.fetchall()
- type_d = set_data[0][0]
- if type_d == 'sha256':
- return hashlib.sha256(bytes(data, 'utf-8')).hexdigest()
- else:
- if sys.version_info < (3, 6):
- return sha3.sha3_256(bytes(data, 'utf-8')).hexdigest()
- else:
- return hashlib.sha3_256(bytes(data, 'utf-8')).hexdigest()
- def pw_check(data, data2, type_d = 'no', id_d = ''):
- curs.execute(db_change('select data from other where name = "encode"'))
- db_data = curs.fetchall()
- if type_d != 'no':
- if type_d == '':
- set_data = 'sha3'
- else:
- set_data = type_d
- else:
- set_data = db_data[0][0]
- if pw_encode(data = data, type_d = set_data) == data2:
- re_data = 1
- else:
- re_data = 0
- if db_data[0][0] != set_data and re_data == 1 and id_d != '':
- curs.execute(db_change("update user set pw = ?, encode = ? where id = ?"), [pw_encode(data), db_data[0][0], id_d])
- return re_data
- def captcha_get():
- data = ''
- if ip_or_user() != 0:
- curs.execute(db_change('select data from other where name = "recaptcha"'))
- recaptcha = curs.fetchall()
- if recaptcha and recaptcha[0][0] != '':
- curs.execute(db_change('select data from other where name = "sec_re"'))
- sec_re = curs.fetchall()
- if sec_re and sec_re[0][0] != '':
- curs.execute(db_change('select data from other where name = "recaptcha_ver"'))
- rec_ver = curs.fetchall()
- if not rec_ver or rec_ver[0][0] == '':
- data += '' + \
- '<script src="https://www.google.com/recaptcha/api.js" async defer></script>' + \
- '<div class="g-recaptcha" data-sitekey="' + recaptcha[0][0] + '"></div>' + \
- '<hr class="main_hr">' + \
- ''
- else:
- data += '' + \
- '<script src="https://www.google.com/recaptcha/api.js?render=' + recaptcha[0][0] + '"></script>' + \
- '<input type="hidden" id="g-recaptcha" name="g-recaptcha">' + \
- '<script type="text/javascript">' + \
- 'grecaptcha.ready(function() {' + \
- 'grecaptcha.execute(\'' + recaptcha[0][0] + '\', {action: \'homepage\'}).then(function(token) {' + \
- 'document.getElementById(\'g-recaptcha\').value = token;' + \
- '});' + \
- '});' + \
- '</script>' + \
- ''
- return data
- def captcha_post(re_data, num = 1):
- if num == 1:
- curs.execute(db_change('select data from other where name = "sec_re"'))
- sec_re = curs.fetchall()
- if sec_re and sec_re[0][0] != '' and ip_or_user() != 0 and captcha_get() != '':
- try:
- data = urllib.request.urlopen('https://www.google.com/recaptcha/api/siteverify?secret=' + sec_re[0][0] + '&response=' + re_data)
- except:
- data = None
- if data and data.getcode() == 200:
- json_data = json.loads(data.read().decode(data.headers.get_content_charset()))
- if json_data['success'] == True:
- return 0
- else:
- return 1
- else:
- return 0
- else:
- return 0
- else:
- pass
- def load_lang(data, num = 2, safe = 0):
- global global_lang
- if num == 1:
- curs.execute(db_change("select data from other where name = 'language'"))
- rep_data = curs.fetchall()
- if rep_data:
- try:
- if not rep_data[0][0] in global_lang:
- lang = json.loads(open(os.path.join('language', rep_data[0][0] + '.json'), encoding='utf8').read())
- global_lang[rep_data[0][0]] = lang
- else:
- lang = global_lang[rep_data[0][0]]
- except:
- return html.escape(data + ' (' + rep_data[0][0] + ')')
- if data in lang:
- return lang[data] if safe == 1 else html.escape(lang[data])
- else:
- return html.escape(data + ' (' + rep_data[0][0] + ')')
- else:
- return html.escape(data + ' (' + rep_data[0][0] + ')')
- else:
- curs.execute(db_change('select data from user_set where name = "lang" and id = ?'), [ip_check()])
- rep_data = curs.fetchall()
- if rep_data and rep_data != '' and rep_data != 'default':
- try:
- if not rep_data[0][0] in global_lang:
- lang = json.loads(open(os.path.join('language', rep_data[0][0] + '.json'), encoding='utf8').read())
- global_lang[rep_data[0][0]] = lang
- else:
- lang = global_lang[rep_data[0][0]]
- except:
- return load_lang(data, 1, safe)
- if data in lang:
- return lang[data] if safe == 1 else html.escape(lang[data])
- else:
- return load_lang(data, 1, safe)
- else:
- return load_lang(data, 1, safe)
- def ip_or_user(data = ''):
- if data == '':
- data = ip_check()
- if re.search(r'(\.|:)', data):
- return 1
- else:
- return 0
- def edit_button():
- insert_list = []
- curs.execute(db_change("select html, plus from html_filter where kind = 'edit_top'"))
- db_data = curs.fetchall()
- for get_data in db_data:
- insert_list += [[get_data[1], get_data[0]]]
- data = ''
- for insert_data in insert_list:
- data += '<a href="javascript:do_insert_data(\'content\', \'' + insert_data[0] + '\')">(' + insert_data[1] + ')</a> '
- if admin_check() == 1:
- data += (' ' if data != '' else '') + '<a href="/edit_top">(' + load_lang('add') + ')</a>'
- return data + '<hr class="main_hr">'
- def ip_warring():
- if ip_or_user() != 0:
- curs.execute(db_change('select data from other where name = "no_login_warring"'))
- data = curs.fetchall()
- if data and data[0][0] != '':
- text_data = '' + \
- '<span>' + data[0][0] + '</span>' + \
- '<hr class="main_hr">' + \
- ''
- else:
- text_data = '' + \
- '<span>' + load_lang('no_login_warring') + '</span>' + \
- '<hr class="main_hr">' + \
- ''
- else:
- text_data = ''
- return text_data
- def skin_check(set_n = 0):
- skin_list = load_skin('marisa', 1)
- curs.execute(db_change('select data from user_set where name = "skin" and id = ?'), [ip_check()])
- skin_exist = curs.fetchall()
- if skin_exist and skin_exist[0][0] != '' and skin_exist[0][0] in skin_list:
- skin = skin_exist[0][0]
- else:
- curs.execute(db_change('select data from other where name = "skin"'))
- skin_exist = curs.fetchall()
- if skin_exist and skin_exist[0][0] != '' and skin_exist[0][0] in skin_list:
- skin = skin_exist[0][0]
- else:
- skin = skin_list[0]
- return './views/' + skin + '/index.html' if set_n == 0 else skin
- def next_fix(link, num, page, end = 50):
- list_data = ''
- if num == 1:
- if len(page) == end:
- list_data += '' + \
- '<hr class="main_hr">' + \
- '<a href="' + link + str(num + 1) + '">(' + load_lang('next') + ')</a>' + \
- ''
- elif len(page) != end:
- list_data += '' + \
- '<hr class="main_hr">' + \
- '<a href="' + link + str(num - 1) + '">(' + load_lang('previous') + ')</a>' + \
- ''
- else:
- list_data += '' + \
- '<hr class="main_hr">' + \
- '<a href="' + link + str(num - 1) + '">(' + load_lang('previous') + ')</a> <a href="' + link + str(num + 1) + '">(' + load_lang('next') + ')</a>' + \
- ''
- return list_data
- def other2(data):
- global req_list
- main_css_ver = '51'
- data += ['' for _ in range(0, 3 - len(data))]
- if req_list == '':
- for i_data in os.listdir(os.path.join("views", "main_css", "css")):
- req_list += '<link rel="stylesheet" href="/views/main_css/css/' + i_data + '?ver=' + main_css_ver + '">'
- for i_data in os.listdir(os.path.join("views", "main_css", "js")):
- req_list += '<script src="/views/main_css/js/' + i_data + '?ver=' + main_css_ver + '"></script>'
- data = data[0:2] + ['', '''
- <link rel="stylesheet"
- href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.18.1/styles/default.min.css">
- <link rel="stylesheet"
- href="https://cdn.jsdelivr.net/npm/katex@0.10.1/dist/katex.min.css"
- integrity="sha384-dbVIfZGuN1Yq7/1Ocstc1lUEm+AT+/rCkibIcC/OmWo5f0EA48Vf8CytHzGrSwbQ"
- crossorigin="anonymous">
- <script src="https://cdn.jsdelivr.net/npm/katex@0.10.1/dist/katex.min.js"
- integrity="sha384-2BKqo+exmr9su6dir+qCw08N2ZKRucY4PrGQPPWU1A7FtlCGjmEGFqXCv5nyM5Ij"
- crossorigin="anonymous"></script>
- <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.18.1/highlight.min.js"></script>
- <script>window.addEventListener('DOMContentLoaded', function() { main_css_skin_load(); });</script>
- ''' + req_list] + data[2:]
- return data
- def cut_100(data):
- if re.search(r'^\/w\/', flask.request.path):
- data = re.sub(r'<script>((\n*(((?!<\/script>).)+)\n*)+)<\/script>', '', data)
- data = re.sub(r'<hr class="main_hr">((\n*((.+)\n*))+)$', '', data)
- data = re.sub(r'<div id="cate_all">((\n*((.+)\n*))+)$', '', data)
- data = re.sub(r'<(((?!>).)*)>', ' ', data)
- data = re.sub(r'\n', ' ', data)
- data = re.sub(r'^ +', '', data)
- data = re.sub(r' +$', '', data)
- data = re.sub(r' {2,}', ' ', data)
-
- return data[0:100] + '...'
- else:
- return ''
- def wiki_set(num = 1):
- if num == 1:
- data_list = []
- skin_name = skin_check(1)
- curs.execute(db_change('select data from other where name = ?'), ['name'])
- db_data = curs.fetchall()
- if db_data and db_data[0][0] != '':
- data_list += [db_data[0][0]]
- else:
- data_list += ['Wiki']
- curs.execute(db_change('select data from other where name = "license"'))
- db_data = curs.fetchall()
- if db_data and db_data[0][0] != '':
- data_list += [db_data[0][0]]
- else:
- data_list += ['ARR']
- data_list += ['', '']
- curs.execute(db_change('select data from other where name = "logo" and coverage = ?'), [skin_name])
- db_data = curs.fetchall()
- if db_data and db_data[0][0] != '':
- data_list += [db_data[0][0]]
- else:
- curs.execute(db_change('select data from other where name = "logo" and coverage = ""'))
- db_data = curs.fetchall()
- if db_data and db_data[0][0] != '':
- data_list += [db_data[0][0]]
- else:
- data_list += [data_list[0]]
- head_data = ''
- curs.execute(db_change("select data from other where name = 'head' and coverage = ''"))
- db_data = curs.fetchall()
- if db_data and db_data[0][0] != '':
- head_data += db_data[0][0]
- curs.execute(db_change("select data from other where name = 'head' and coverage = ?"), [skin_name])
- db_data = curs.fetchall()
- if db_data and db_data[0][0] != '':
- head_data += db_data[0][0]
-
- data_list += [head_data]
- return data_list
- if num == 2:
- var_data = 'FrontPage'
- curs.execute(db_change('select data from other where name = "frontpage"'))
- elif num == 3:
- var_data = '2'
- curs.execute(db_change('select data from other where name = "upload"'))
- db_data = curs.fetchall()
- if db_data and db_data[0][0] != '':
- return db_data[0][0]
- else:
- return var_data
- def admin_check(num = None, what = None, name = ''):
- if name == '':
- ip = ip_check()
- else:
- ip = name
- curs.execute(db_change("select acl from user where id = ?"), [ip])
- user = curs.fetchall()
- if user:
- reset = 0
- back_num = num
- while 1:
- if num == 1:
- check = 'ban'
- elif num == 2:
- check = 'nothing'
- elif num == 3:
- check = 'toron'
- elif num == 4:
- check = 'check'
- elif num == 5:
- check = 'acl'
- elif num == 6:
- check = 'hidel'
- elif num == 7:
- check = 'give'
- else:
- check = 'owner'
- curs.execute(db_change('select name from alist where name = ? and acl = ?'), [user[0][0], check])
- if curs.fetchall():
- if what:
- curs.execute(db_change("insert into re_admin (who, what, time) values (?, ?, ?)"), [ip, what, get_time()])
- conn.commit()
- return 1
- else:
- if back_num == 'all':
- if num == 'all':
- num = 1
- elif num != 8:
- num += 1
- else:
- break
- elif num:
- num = None
- else:
- break
- return 0
- def ip_pas(raw_ip, type_d = 0):
- hide = 0
- end_ip = {}
- if type(raw_ip) != type([]):
- get_ip = [raw_ip]
- return_ip = 1
- else:
- get_ip = raw_ip
- return_ip = 0
- for raw_ip in get_ip:
- if not raw_ip in end_ip:
- if ip_or_user(raw_ip) != 0:
- curs.execute(db_change("select data from other where name = 'ip_view'"))
- data = curs.fetchall()
- if data and data[0][0] != '':
- if re.search(r'\.', raw_ip):
- ip = re.sub(r'\.([^.]*)\.([^.]*)$', '.*.*', raw_ip)
- else:
- ip = re.sub(r':([^:]*):([^:]*)$', ':*:*', raw_ip)
- if not admin_check(1):
- hide = 1
- else:
- ip = raw_ip
- else:
- if type_d == 0:
- curs.execute(db_change("select title from data where title = ?"), ['user:' + raw_ip])
- if curs.fetchall():
- ip = '<a href="/w/' + url_pas('user:' + raw_ip) + '">' + raw_ip + '</a>'
- else:
- ip = '<a id="not_thing" href="/w/' + url_pas('user:' + raw_ip) + '">' + raw_ip + '</a>'
- if admin_check('all', None, raw_ip) == 1:
- ip = '<b>' + ip + '</b>'
- else:
- ip = raw_ip
- if type_d == 0:
- if ban_check(raw_ip) == 1:
- ip = '<s>' + ip + '</s>'
- if hide == 0:
- ip += ' <a href="/tool/' + url_pas(raw_ip) + '">(' + load_lang('tool') + ')</a>'
-
- end_ip[raw_ip] = ip
- return ip if return_ip == 1 else end_ip
- def custom():
- if 'head' in flask.session:
- if len(re.findall('<', flask.session['head'])) % 2 != 1:
- user_head = flask.session['head']
- else:
- user_head = ''
- else:
- user_head = ''
- ip = ip_check()
- if ip_or_user(ip) == 0:
- user_icon = 1
- user_name = ip
- curs.execute(db_change('select data from user_set where name = "email" and id = ?'), [ip])
- email = curs.fetchall()
- email = email[0][0] if email else ''
- if admin_check('all') == 1:
- user_admin = '1'
- user_acl_list = []
- curs.execute(db_change("select acl from user where id = ?"), [ip])
- curs.execute(db_change('select acl from alist where name = ?'), [curs.fetchall()[0][0]])
- user_acl = curs.fetchall()
- for i in user_acl:
- user_acl_list += [i[0]]
- if user_acl != []:
- user_acl_list = user_acl_list
- else:
- user_acl_list = '0'
- else:
- user_admin = '0'
- user_acl_list = '0'
- curs.execute(db_change("select count(*) from alarm where name = ?"), [ip])
- count = curs.fetchall()
- if count:
- user_notice = str(count[0][0])
- else:
- user_notice = '0'
- else:
- user_icon = 0
- user_name = load_lang('user')
- email = ''
- user_admin = '0'
- user_acl_list = '0'
- user_notice = '0'
- curs.execute(db_change("select title from rd where title = ? and stop = ''"), ['user:' + ip])
- user_topic = '1' if curs.fetchall() else '0'
- return [
- '',
- '',
- user_icon,
- user_head,
- email,
- user_name,
- user_admin,
- str(ban_check()),
- user_notice,
- user_acl_list,
- ip,
- user_topic
- ]
- def load_skin(data = '', set_n = 0, default = 0):
- # data -> 가장 앞에 있을 스킨 이름
- # set_n == 0 -> 스트링으로 반환
- # set_n == 1 -> 리스트로 반환
- # default == 0 -> 디폴트 미포함
- # default == 1 -> 디폴트 포함
- skin_return_data = '' if set_n == 0 else []
- system_file = ['main_css']
- skin_list_get = os.listdir(os.path.abspath('views'))
- if default == 1:
- skin_list_get += ['default']
- if data == '':
- curs.execute(db_change('select data from user_set where name = "skin" and id = ?'), [ip_check()])
- data = curs.fetchall()
- if not data:
- curs.execute(db_change('select data from other where name = "skin"'))
- data = curs.fetchall()
- if not data or data[0][0] == '':
- if default == 1:
- data = [['default']]
- else:
- data = [['marisa']]
- else:
- data = [[data]]
- for skin_data in skin_list_get:
- see_data = skin_data if skin_data != 'default' else load_lang('default')
- if not skin_data in system_file:
- if data[0][0] == skin_data:
- if set_n == 0:
- skin_return_data = '<option value="' + skin_data + '">' + see_data + '</option>' + skin_return_data
- else:
- skin_return_data = [skin_data] + skin_return_data
- else:
- if set_n == 0:
- skin_return_data += '<option value="' + skin_data + '">' + see_data + '</option>'
- else:
- skin_return_data += [skin_data]
- return skin_return_data
- def slow_edit_check():
- curs.execute(db_change("select data from other where name = 'slow_edit'"))
- slow_edit = curs.fetchall()
- if slow_edit and slow_edit != '0' and admin_check(5) != 1:
- slow_edit = slow_edit[0][0]
- curs.execute(db_change("select date from history where ip = ? order by date desc limit 1"), [ip_check()])
- last_edit_data = curs.fetchall()
- if last_edit_data:
- last_edit_data = int(re.sub(' |:|-', '', last_edit_data[0][0]))
- now_edit_data = int((datetime.datetime.now() - datetime.timedelta(seconds = int(slow_edit))).strftime("%Y%m%d%H%M%S"))
- if last_edit_data > now_edit_data:
- return 1
- return 0
- def acl_check(name = 'test', tool = '', topic_num = '1'):
- ip = ip_check()
- get_ban = ban_check()
-
- if name:
- acl_c = re.search(r"^user:((?:(?!\/).)*)", name)
- else:
- acl_c = None
- if tool == '' and acl_c:
- acl_n = acl_c.groups()
- if get_ban == 1:
- return 1
- if admin_check(5) == 1:
- return 0
- curs.execute(db_change("select decu from acl where title = ?"), ['user:' + acl_n[0]])
- acl_data = curs.fetchall()
- if acl_data:
- if acl_data[0][0] == 'all':
- return 0
- elif acl_data[0][0] == 'user' and not ip_or_user(ip) == 1:
- return 0
- elif ip == acl_n[0] and not ip_or_user(ip) == 1:
- return 0
- else:
- if ip == acl_n[0] and not ip_or_user(ip) == 1 and not ip_or_user(acl_n[0]) == 1:
- return 0
- return 1
- if tool == 'topic':
- if not name:
- curs.execute(db_change("select title from rd where code = ?"), [topic_num])
- name = curs.fetchall()
- name = name[0][0] if name else 'test'
-
- end = 3
- elif tool == 'render' or tool == '' or tool == 'vote':
- if tool == '' and acl_check(name, 'render') == 1:
- return 1
- end = 2
- else:
- end = 1
- for i in range(0, end):
- if tool == '':
- if i == 0:
- curs.execute(db_change("select decu from acl where title = ?"), [name])
- else:
- curs.execute(db_change('select data from other where name = "edit"'))
- num = 5
- elif tool == 'topic':
- if i == 0 and topic_num:
- curs.execute(db_change("select acl from rd where code = ?"), [topic_num])
- elif i == 1:
- curs.execute(db_change("select dis from acl where title = ?"), [name])
- else:
- curs.execute(db_change('select data from other where name = "discussion"'))
- num = 3
- elif tool == 'upload':
- curs.execute(db_change("select data from other where name = 'upload_acl'"))
- num = 5
- elif tool == 'many_upload':
- curs.execute(db_change("select data from other where name = 'many_upload_acl'"))
- num = 5
- elif tool == 'vote':
- if i == 0:
- curs.execute(db_change('select acl from vote where id = ? and user = ""'), [topic_num])
- else:
- curs.execute(db_change('select data from other where name = "vote_acl"'))
- else:
- # tool == 'render'
- if i == 0:
- curs.execute(db_change("select view from acl where title = ?"), [name])
- else:
- curs.execute(db_change("select data from other where name = 'all_view_acl'"))
- num = 5
- acl_data = curs.fetchall()
- if (not acl_data and i == (end - 1)) and get_ban == 1 and tool != 'render':
- return 1
- elif acl_data and acl_data[0][0] != 'normal' and acl_data[0][0] != '':
- if acl_data[0][0] != 'ban' and get_ban == 1 and tool != 'render':
- return 1
- if acl_data[0][0] == 'all' or acl_data[0][0] == 'ban':
- return 0
- elif acl_data[0][0] == 'user':
- if ip_or_user(ip) != 1:
- return 0
- elif acl_data[0][0] == 'admin':
- if ip_or_user(ip) != 1:
- if admin_check(num) == 1:
- return 0
- elif acl_data[0][0] == '50_edit':
- if ip_or_user(ip) != 1:
- if admin_check(num) == 1:
- return 0
- else:
- curs.execute(db_change("select count(*) from history where ip = ?"), [ip])
- count = curs.fetchall()
- count = count[0][0] if count else 0
- if count >= 50:
- return 0
- elif acl_data[0][0] == 'before':
- if ip_or_user(ip) != 1:
- if admin_check(num) == 1:
- return 0
-
- curs.execute(db_change("select ip from history where title = ? and ip = ?"), [name, ip])
- if curs.fetchall():
- return 0
- elif acl_data[0][0] == '30_day':
- if ip_or_user(ip) != 1:
- if admin_check(num) == 1:
- return 0
- else:
- curs.execute(db_change("select date from user where id = ?"), [ip])
- user_date = curs.fetchall()[0][0]
-
- time_1 = datetime.datetime.strptime(user_date, '%Y-%m-%d %H:%M:%S') + datetime.timedelta(days = 30)
- time_2 = datetime.datetime.strptime(get_time(), '%Y-%m-%d %H:%M:%S')
-
- if time_2 > time_1:
- return 0
- elif acl_data[0][0] == 'email':
- if ip_or_user(ip) != 1:
- if admin_check(num) == 1:
- return 0
- else:
- curs.execute(db_change("select data from user_set where id = ? and name = 'email'"), [ip])
- if curs.fetchall():
- return 0
- elif acl_data[0][0] == 'owner':
- if admin_check() == 1:
- return 0
- elif acl_data[0][0] == 'ban_admin':
- if admin_check(1) == 1 or ban_check() == 1:
- return 0
- return 1
- else:
- if i == (end - 1):
- if tool == 'topic' and topic_num:
- curs.execute(db_change("select title from rd where code = ? and stop != ''"), [topic_num])
- if curs.fetchall():
- if admin_check(3, 'topic (code ' + topic_num + ')') == 1:
- return 0
- else:
- return 0
- else:
- return 0
- return 1
- def ban_check(ip = None, tool = None):
- if not ip:
- ip = ip_check()
- if admin_check(None, None, ip) == 1:
- return 0
- curs.execute(db_change("update rb set ongoing = '' where end < ? and end != '' and ongoing = '1'"), [get_time()])
- conn.commit()
- curs.execute(db_change("" + \
- "select login, block from rb " + \
- "where ((end > ? and end != '') or end = '') and band = 'regex' and ongoing = '1'" + \
- ""), [get_time()])
- regex_d = curs.fetchall()
- for test_r in regex_d:
- g_regex = re.compile(test_r[1])
- if g_regex.search(ip):
- if tool and tool == 'login':
- if test_r[0] != 'O':
- return 1
- else:
- return 1
- curs.execute(db_change("" + \
- "select login from rb " + \
- "where ((end > ? and end != '') or end = '') and block = ? and band = '' and ongoing = '1'" + \
- ""), [get_time(), ip])
- ban_d = curs.fetchall()
- if ban_d:
- if tool and tool == 'login':
- if ban_d[0][0] != 'O':
- return 1
- else:
- return 1
- return 0
- def ban_insert(name, end, why, login, blocker, type_d = None):
- now_time = get_time()
- if type_d:
- band = type_d
- else:
- band = ''
- curs.execute(db_change("update rb set ongoing = '' where end < ? and end != '' and ongoing = '1'"), [now_time])
- curs.execute(db_change("" + \
- "select block from rb where ((end > ? and end != '') or end = '') and block = ? and band = ? and ongoing = '1'" + \
- ""), [now_time, name, band])
- if curs.fetchall():
- curs.execute(db_change("insert into rb (block, end, today, blocker, why, band) values (?, ?, ?, ?, ?, ?)"), [
- name,
- 'release',
- now_time,
- blocker,
- '',
- band
- ])
- curs.execute(db_change("update rb set ongoing = '' where block = ? and band = ? and ongoing = '1'"), [name, band])
- else:
- if login != '':
- login = 'O'
- else:
- login = ''
- if end != '0':
- end = int(number_check(end))
- time = datetime.datetime.now()
- plus = datetime.timedelta(seconds = end)
- r_time = (time + plus).strftime("%Y-%m-%d %H:%M:%S")
- else:
- r_time = ''
- curs.execute(db_change("insert into rb (block, end, today, blocker, why, band, ongoing) values (?, ?, ?, ?, ?, ?, '1')"), [
- name,
- r_time,
- now_time,
- blocker,
- why,
- band
- ])
- conn.commit()
- def rd_plus(topic_num, date, name = None, sub = None):
- curs.execute(db_change("select code from rd where code = ?"), [topic_num])
- if curs.fetchall():
- curs.execute(db_change("update rd set date = ? where code = ?"), [date, topic_num])
- else:
- curs.execute(db_change("insert into rd (title, sub, code, date) values (?, ?, ?, ?)"), [name, sub, topic_num, date])
- conn.commit()
- def history_plus(title, data, date, ip, send, leng, t_check = '', d_type = '', mode = ''):
- if mode == 'add':
- curs.execute(db_change("select id from history where title = ? and type = '' order by id + 0 asc limit 1"), [title])
- id_data = curs.fetchall()
- id_data = str(int(id_data[0][0]) - 1) if id_data else '0'
- else:
- curs.execute(db_change("select id from history where title = ? and type = '' order by id + 0 desc limit 1"), [title])
- id_data = curs.fetchall()
- id_data = str(int(id_data[0][0]) + 1) if id_data else '1'
- send = re.sub(r'\(|\)|<|>', '', send)
- send = send[:128] if len(send) > 128 else send
- send = send + ' (' + t_check + ')' if t_check != '' else send
- if not re.search('^user:', title) and mode != 'add':
- curs.execute(db_change("select count(*) from rc where type = 'normal'"))
- if curs.fetchall()[0][0] > 49:
- curs.execute(db_change("select id, title from rc where type = 'normal' order by date asc limit 1"))
- rc_data = curs.fetchall()
- if rc_data:
- curs.execute(db_change('delete from rc where id = ? and title = ? and type = "normal"'), [
- rc_data[0][0],
- rc_data[0][1]
- ])
-
- curs.execute(db_change("insert into rc (id, title, date, type) values (?, ?, ?, 'normal')"), [
- id_data,
- title,
- date
- ])
- curs.execute(db_change("insert into history (id, title, data, date, ip, send, leng, hide, type) values (?, ?, ?, ?, ?, ?, ?, '', ?)"), [
- id_data,
- title,
- data,
- date,
- ip,
- send,
- leng,
- d_type
- ])
- def leng_check(first, second):
- if first < second:
- all_plus = '+' + str(second - first)
- elif second < first:
- all_plus = '-' + str(first - second)
- else:
- all_plus = '0'
- return all_plus
- def number_check(data):
- try:
- int(data)
- return data
- except:
- return '1'
- def edit_filter_do(data):
- if admin_check(1) != 1:
- curs.execute(db_change("select regex, sub from filter where regex != ''"))
- for data_list in curs.fetchall():
- match = re.compile(data_list[0], re.I)
- if match.search(data):
- ban_insert(
- ip_check(),
- '0' if data_list[1] == 'X' else data_list[1],
- 'edit filter',
- None,
- 'tool:edit filter'
- )
- return 1
- return 0
- def redirect(data = '/'):
- return flask.redirect(data)
- def get_acl_list(type_d = 'normal'):
- if type_d == 'user':
- return ['', 'user', 'all']
- else:
- return ['', 'all', 'user', 'admin', 'owner', '50_edit', 'email', 'ban', 'before', '30_day', 'ban_admin']
- def re_error(data):
- conn.commit()
- if data == '/ban':
- if ban_check() == 1:
- end = '<div id="get_user_info"></div><script>load_user_info("' + ip_check() + '");</script>'
- else:
- end = '<ul><li>' + load_lang('authority_error') + '</li></ul>'
- return easy_minify(flask.render_template(skin_check(),
- imp = [load_lang('error'), wiki_set(1), custom(), other2([0, 0])],
- data = '<h2>' + load_lang('error') + '</h2>' + end,
- menu = 0
- )), 401
- else:
- num = int(number_check(data.replace('/error/', '')))
- if num == 1:
- data = load_lang('no_login_error')
- elif num == 2:
- data = load_lang('no_exist_user_error')
- elif num == 3:
- data = load_lang('authority_error')
- elif num == 4:
- data = load_lang('no_admin_block_error')
- elif num == 5:
- data = load_lang('skin_error')
- elif num == 6:
- data = load_lang('same_id_exist_error')
- elif num == 7:
- data = load_lang('long_id_error')
- elif num == 8:
- data = load_lang('id_char_error') + ' <a href="/name_filter">(' + load_lang('id_filter_list') + ')</a>'
- elif num == 9:
- data = load_lang('file_exist_error')
- elif num == 10:
- data = load_lang('password_error')
- elif num == 11:
- data = load_lang('topic_long_error')
- elif num == 12:
- data = load_lang('email_error')
- elif num == 13:
- data = load_lang('recaptcha_error')
- elif num == 14:
- data = load_lang('file_extension_error') + ' <a href="/extension_filter">(' + load_lang('extension_filter_list') + ')</a>'
- elif num == 15:
- data = load_lang('edit_record_error')
- elif num == 16:
- data = load_lang('same_file_error')
- elif num == 17:
- data = load_lang('file_capacity_error') + wiki_set(3)
- elif num == 18:
- data = load_lang('email_send_error')
- elif num == 19:
- data = load_lang('decument_exist_error')
- elif num == 20:
- data = load_lang('password_diffrent_error')
- elif num == 21:
- data = load_lang('edit_filter_error')
- elif num == 22:
- data = load_lang('file_name_error')
- elif num == 23:
- data = load_lang('regex_error')
- elif num == 24:
- curs.execute(db_change("select data from other where name = 'slow_edit'"))
- data = load_lang('fast_edit_error') + curs.fetchall()[0][0]
- elif num == 25:
- data = load_lang('too_many_dec_error')
- elif num == 26:
- data = load_lang('application_not_found')
- elif num == 27:
- data = load_lang("invalid_password_error")
- elif num == 28:
- data = load_lang('watchlist_overflow_error')
- elif num == 29:
- data = load_lang('copyright_disagreed')
- elif num == 30:
- data = load_lang('ie_wrong_callback')
- elif num == 33:
- data = load_lang('restart_fail_error')
- elif num == 34:
- data = load_lang("update_error") + ' <a href="https://github.com/2DU/opennamu">(Github)</a>'
- else:
- data = '???'
- if num == 5:
- get_url = flask.request.path
-
- return easy_minify(flask.render_template(skin_check(),
- imp = [(load_lang('skin_set') if get_url != '/main_skin_set' else load_lang('main_skin_set')), wiki_set(1), custom(), other2([0, 0])],
- data = '' + \
- '<div id="main_skin_set">' + \
- '<h2>' + load_lang('error') + '</h2>' + \
- '<ul>' + \
- '<li>' + data + ' <a href="/main_skin_set">(' + load_lang('main_skin_set') + ')</a></li>' + \
- '</ul>' + \
- '</div>' + \
- ('<script>main_css_skin_set();</script>' if get_url == '/main_skin_set' else ''),
- menu = ([['main_skin_set', load_lang('main_skin_set')]] if get_url != '/main_skin_set' else [['skin_set', load_lang('skin_set')]])
- ))
- else:
- return easy_minify(flask.render_template(skin_check(),
- imp = [load_lang('error'), wiki_set(1), custom(), other2([0, 0])],
- data = '<h2>' + load_lang('error') + '</h2><ul><li>' + data + '</li></ul>',
- menu = 0
- )), 400
|