90 lines
4.0 KiB
PHP
90 lines
4.0 KiB
PHP
<?PHP
|
|
if (isset($_POST['refresh'])) {
|
|
$rspathhex = 'rs_'.dechex(crc32(__DIR__)).'_';
|
|
rem_session_ts3($rspathhex);
|
|
}
|
|
function set_session_ts3($voiceport, $mysqlcon, $dbname, $language, $adminuuid) {
|
|
global $iphash, $lang;
|
|
if (!empty($_SERVER['HTTP_CLIENT_IP']))
|
|
$hpclientip = $_SERVER['HTTP_CLIENT_IP'];
|
|
elseif(!empty($_SERVER['HTTP_X_FORWARDED_FOR']))
|
|
$hpclientip = $_SERVER['HTTP_X_FORWARDED_FOR'];
|
|
elseif(!empty($_SERVER['HTTP_X_FORWARDED']))
|
|
$hpclientip = $_SERVER['HTTP_X_FORWARDED'];
|
|
elseif(!empty($_SERVER['HTTP_FORWARDED_FOR']))
|
|
$hpclientip = $_SERVER['HTTP_FORWARDED_FOR'];
|
|
elseif(!empty($_SERVER['HTTP_FORWARDED']))
|
|
$hpclientip = $_SERVER['HTTP_FORWARDED'];
|
|
elseif(!empty($_SERVER['REMOTE_ADDR']))
|
|
$hpclientip = $_SERVER['REMOTE_ADDR'];
|
|
else
|
|
$hpclientip = 0;
|
|
|
|
$rspathhex = 'rs_'.dechex(crc32(__DIR__)).'_';
|
|
|
|
$allclients = $mysqlcon->query("SELECT `u`.`uuid`,`u`.`cldbid`,`u`.`name`,`u`.`firstcon`,`s`.`total_connections` FROM `$dbname`.`user` AS `u` LEFT JOIN `$dbname`.`stats_user` AS `s` ON `u`.`uuid`=`s`.`uuid` WHERE `online`='1'")->fetchAll();
|
|
$iptable = $mysqlcon->query("SELECT `uuid`,`iphash`,`ip` FROM `$dbname`.`user_iphash`")->fetchAll(PDO::FETCH_ASSOC|PDO::FETCH_UNIQUE);
|
|
$_SESSION[$rspathhex.'connected'] = 0;
|
|
$_SESSION[$rspathhex.'tsname'] = $lang['stag0016'];
|
|
$_SESSION[$rspathhex.'serverport'] = $voiceport;
|
|
$_SESSION[$rspathhex.'csrf_token'] = bin2hex(openssl_random_pseudo_bytes(32));
|
|
$_SESSION[$rspathhex.'multiple'] = array();
|
|
|
|
foreach ($allclients as $client) {
|
|
if(isset($_SESSION[$rspathhex.'uuid_verified']) && $_SESSION[$rspathhex.'uuid_verified'] != $client['uuid']) {
|
|
continue;
|
|
}
|
|
$verify = FALSE;
|
|
if($iphash == 1) {
|
|
if (isset($iptable[$client['uuid']]['iphash']) && password_verify($hpclientip, $iptable[$client['uuid']]['iphash'])) {
|
|
$verify = TRUE;
|
|
}
|
|
} else {
|
|
if (isset($iptable[$client['uuid']]['ip']) && $hpclientip == $iptable[$client['uuid']]['ip']) {
|
|
$verify = TRUE;
|
|
}
|
|
}
|
|
if ($verify == TRUE) {
|
|
$_SESSION[$rspathhex.'tsname'] = htmlspecialchars($client['name']);
|
|
if(isset($_SESSION[$rspathhex.'tsuid']) && $_SESSION[$rspathhex.'tsuid'] != $client['uuid']) {
|
|
$_SESSION[$rspathhex.'multiple'][$client['uuid']] = htmlspecialchars($client['name']);
|
|
$_SESSION[$rspathhex.'tsname'] = "verification needed (multiple)!";
|
|
unset($_SESSION[$rspathhex.'admin']);
|
|
} elseif (!isset($_SESSION[$rspathhex.'tsuid'])) {
|
|
$_SESSION[$rspathhex.'multiple'][$client['uuid']] = htmlspecialchars($client['name']);
|
|
}
|
|
$_SESSION[$rspathhex.'tsuid'] = $client['uuid'];
|
|
foreach ($adminuuid as $auuid) {
|
|
if ($_SESSION[$rspathhex.'tsuid'] == $auuid) {
|
|
$_SESSION[$rspathhex.'admin'] = TRUE;
|
|
}
|
|
}
|
|
$_SESSION[$rspathhex.'tscldbid'] = $client['cldbid'];
|
|
if ($client['firstcon'] == 0) {
|
|
$_SESSION[$rspathhex.'tscreated'] = "unkown";
|
|
} else {
|
|
$_SESSION[$rspathhex.'tscreated'] = date('d-m-Y', $client['firstcon']);
|
|
}
|
|
if ($client['total_connections'] != NULL) {
|
|
$_SESSION[$rspathhex.'tsconnections'] = $client['total_connections'];
|
|
} else {
|
|
$_SESSION[$rspathhex.'tsconnections'] = 0;
|
|
}
|
|
$convert = array('a','b','c','d','e','f','g','h','i','j','k','l','m','n','o','p');
|
|
$uuidasbase16 = '';
|
|
for ($i = 0; $i < 20; $i++) {
|
|
$char = ord(substr(base64_decode($_SESSION[$rspathhex.'tsuid']), $i, 1));
|
|
$uuidasbase16 .= $convert[($char & 0xF0) >> 4];
|
|
$uuidasbase16 .= $convert[$char & 0x0F];
|
|
}
|
|
if (is_file('../avatars/' . $uuidasbase16 . '.png')) {
|
|
$_SESSION[$rspathhex.'tsavatar'] = $uuidasbase16 . '.png';
|
|
} else {
|
|
$_SESSION[$rspathhex.'tsavatar'] = "none";
|
|
}
|
|
$_SESSION[$rspathhex.'connected'] = 1;
|
|
$_SESSION[$rspathhex.'language'] = $language;
|
|
}
|
|
}
|
|
}
|
|
?>
|