"English", "pl" => "Polski", "it" => "Italiano", "ca" => "Català", "pt" => "Português", # Eventually we will comment these in, when they are ready - PJM - 4/2005 "es" => "Español", "de" => "Deutsch", "ru" => "Русский", "fr" => "Français", ); # debugging variables # $QBUG = 1; # toggle query logging to /var/tmp/aurq.log $DBUG = 1; # use dbug($msg) to log to /var/tmp/aurd.log # return an array of info for each Trusted user # function getTrustedUsers() { $tus = array(); $dbh = db_connect(); $q = "SELECT * FROM Users WHERE AccountTypeID = 2 "; $q.= "ORDER BY Username ASC"; $result = db_query($q, $dbh); if ($result) { while ($row = mysql_fetch_assoc($result)) { $tus[$row["ID"]] = $row; } } return $tus; } # return an array of info for each Developer # function getDevelopers() { $devs = array(); $dbh = db_connect(); $q = "SELECT * FROM Users WHERE AccountTypeID = 3 "; $q.= "ORDER BY Username ASC"; $result = db_query($q, $dbh); if ($result) { while ($row = mysql_fetch_assoc($result)) { $devs[$row["ID"]] = $row; } } return $devs; } # return an array of info for each user function getUsers() { $users = array(); $dbh = db_connect(); $q = "SELECT * FROM Users ORDER BY Username ASC"; $result = db_query($q, $dbh); if ($result) { while ($row = mysql_fetch_assoc($result)) { $users[$row["ID"]] = $row; } } return $users; } # see if the visitor is already logged in # function check_sid() { global $_COOKIE; global $LOGIN_TIMEOUT; if ($_COOKIE["AURSID"]) { $failed = 0; # the visitor is logged in, try and update the session # $dbh = db_connect(); $q = "SELECT LastUpdateTS, UNIX_TIMESTAMP() FROM Sessions "; $q.= "WHERE SessionID = '" . mysql_real_escape_string($_COOKIE["AURSID"]) . "'"; $result = db_query($q, $dbh); if (!$result) { # Invalid SessionID - hacker alert! # $failed = 1; } else { $row = mysql_fetch_row($result); if ($row[0] + $LOGIN_TIMEOUT <= $row[1]) { dbug("login timeout reached"); $failed = 2; } } if ($failed == 1) { # clear out the hacker's cookie, and send them to a naughty page # setcookie("AURSID", "", time() - (60*60*24*30), "/"); header("Location: /hacker.php"); } elseif ($failed == 2) { # visitor's session id either doesn't exist, or the timeout # was reached and they must login again, send them back to # the main page where they can log in again. # $q = "DELETE FROM Sessions WHERE SessionID = '"; $q.= mysql_real_escape_string($_COOKIE["AURSID"]) . "'"; db_query($q, $dbh); setcookie("AURSID", "", time() - (60*60*24*30), "/"); header("Location: /timeout.php"); } else { # still logged in and haven't reached the timeout, go ahead # and update the idle timestamp # $q = "UPDATE Sessions SET LastUpdateTS = UNIX_TIMESTAMP() "; $q.= "WHERE SessionID = '".mysql_real_escape_string($_COOKIE["AURSID"])."'"; db_query($q, $dbh); } } return; } # verify that an email address looks like it is legitimate # function valid_email($addy) { return eregi("^[a-z0-9\._-]+@+[a-z0-9\._-]+\.+[a-z]{2,4}$", $addy); } # a new seed value for mt_srand() # function make_seed() { list($usec, $sec) = explode(' ', microtime()); return (float) $sec + ((float) $usec * 10000); } # generate a (hopefully) unique session id # function new_sid() { mt_srand(make_seed()); $ts = time(); $pid = getmypid(); $rand_num = mt_rand(); mt_srand(make_seed()); $rand_str = substr(md5(mt_rand()),2, 20); $id = $rand_str . strtolower(md5($ts.$pid)) . $rand_num; return strtoupper(md5($id)); } # obtain the username if given their Users.ID # function username_from_id($id="") { if (!$id) { return ""; } $dbh = db_connect(); $q = "SELECT Username FROM Users WHERE ID = " . mysql_real_escape_string($id); $result = db_query($q, $dbh); if (!$result) { return "None"; } $row = mysql_fetch_row($result); return $row[0]; } # obtain the username if given their current SID # function username_from_sid($sid="") { if (!$sid) { return ""; } $dbh = db_connect(); $q = "SELECT Username "; $q.= "FROM Users, Sessions "; $q.= "WHERE Users.ID = Sessions.UsersID "; $q.= "AND Sessions.SessionID = '" . mysql_real_escape_string($sid) . "'"; $result = db_query($q, $dbh); if (!$result) { return ""; } $row = mysql_fetch_row($result); return $row[0]; } # obtain the email address if given their current SID # function email_from_sid($sid="") { if (!$sid) { return ""; } $dbh = db_connect(); $q = "SELECT Email "; $q.= "FROM Users, Sessions "; $q.= "WHERE Users.ID = Sessions.UsersID "; $q.= "AND Sessions.SessionID = '" . mysql_real_escape_string($sid) . "'"; $result = db_query($q, $dbh); if (!$result) { return ""; } $row = mysql_fetch_row($result); return $row[0]; } # obtain the account type if given their current SID # Return either "", "User", "Trusted User", "Developer" # function account_from_sid($sid="") { if (!$sid) { return ""; } $dbh = db_connect(); $q = "SELECT AccountType "; $q.= "FROM Users, AccountTypes, Sessions "; $q.= "WHERE Users.ID = Sessions.UsersID "; $q.= "AND AccountTypes.ID = Users.AccountTypeID "; $q.= "AND Sessions.SessionID = '" . mysql_real_escape_string($sid) . "'"; $result = db_query($q, $dbh); if (!$result) { return ""; } $row = mysql_fetch_row($result); return $row[0]; } # obtain the Users.ID if given their current SID # function uid_from_sid($sid="") { if (!$sid) { return ""; } $dbh = db_connect(); $q = "SELECT Users.ID "; $q.= "FROM Users, Sessions "; $q.= "WHERE Users.ID = Sessions.UsersID "; $q.= "AND Sessions.SessionID = '" . mysql_real_escape_string($sid) . "'"; $result = db_query($q, $dbh); if (!$result) { return 0; } $row = mysql_fetch_row($result); return $row[0]; } # connect to the database # function db_connect() { global $AUR_db_host; global $AUR_db_name; global $AUR_db_user; global $AUR_db_pass; $handle = mysql_pconnect($AUR_db_host, $AUR_db_user, $AUR_db_pass); if (!$handle) { die("Error connecting to AUR database: " . mysql_error()); } mysql_select_db($AUR_db_name, $handle) or die("Error selecting AUR database: " . mysql_error()); return $handle; } # wrapper function around db_query in case we want to put # query logging/debuggin in. # function db_query($query="", $db_handle="") { global $QBUG; if (!$query) { return FALSE; } if (!$db_handle) { $db_handle = db_connect(); } if ($QBUG) { $fp = fopen("/var/tmp/aurq.log", "a"); fwrite($fp, $query . "\n"); fclose($fp); } $result = @mysql_query($query, $db_handle); return $result; } # set up the visitor's language # function set_lang() { global $_REQUEST; global $_COOKIE; global $LANG; global $SUPPORTED_LANGS; $update_cookie = 0; if ($_REQUEST['setlang']) { # visitor is requesting a language change # $LANG = $_REQUEST['setlang']; $update_cookie = 1; } elseif ($_COOKIE['AURLANG']) { # If a cookie is set, use that # $LANG = $_COOKIE['AURLANG']; } elseif ($_COOKIE["AURSID"]) { $dbh = db_connect(); $q = "SELECT LangPreference FROM Users, Sessions "; $q.= "WHERE Users.ID = Sessions.UsersID "; $q.= "AND Sessions.SessionID = '"; $q.= mysql_real_escape_string($_COOKIE["AURSID"])."'"; $result = db_query($q, $dbh); if (!$result) { $LANG = "en"; } else { $row = mysql_fetch_array($result); $LANG = $row[0]; } $update_cookie = 1; } else { $LANG = "en"; } if (!array_key_exists($LANG, $SUPPORTED_LANGS)) { $LANG = "en"; # default to English } if ($update_cookie) { setcookie("AURLANG", $LANG, 0, "/"); } return; } # common header # function html_header() { global $_SERVER; global $_COOKIE; global $LANG; print "\n"; print "\n"; print "\n"; print "\n"; print "AUR (".$LANG.")\n"; print "\n"; print "\n"; print "\n"; print "\n"; print "\n"; print "\n"; print "\n"; print "\n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; # Menu items # print " \n"; print " "; print " "; print " \n"; print " \n"; print " \n"; print "
"; print __("%s: %sAn ArchLinux project%s", array("AUR", "", "")); print "
\n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print "
"; # XXX Can I scale a PNG like this? # print ""; print "ArchLinux User-community Repository
"; # XXX CSS help - a:link, a:visited, etc are defined, but I don't want to # use the defaults. Is this the way to override them? # print "English "; print "Polski "; print "Italiano "; print "Català "; print "Português "; print "Español "; print "Deutsch "; print "Français"; print "Русский"; print "
\n"; print "
"; print " .:"; print " ".__("Home")." "; print " - "; print " ".__("Accounts")." "; print " - "; print " ".__("Packages")." "; if ($_COOKIE["AURSID"]) { # Only display these items if the visitor is logged in. This should # be a safe check because check_sid() has been called prior to # html_header(). # print " - "; print " ".__("Submit")." "; } print " - "; print " ".__("Bugs")." "; print " - "; print " ".__("Discussion")." "; if ($_COOKIE["AURSID"]) { # This is a usability change, so we can go to My Packages page # with just one click # Added by: dsa print " - "; print " ".__("My Packages")." "; print " - "; print " ".__("Logout")." "; } print " :."; print "
\n"; print "  
\n"; print "\n\n"; return; } # common footer # function html_footer($ver="") { print "\n\n\n"; print "
\n"; print "
\n"; if ($ver) { print "

\n"; print "\n"; print "\n"; print "
".$ver."
\n"; print "

\n"; } print "
\n"; print "\n"; return; } # debug logging # function dbug($msg) { $fp = fopen("/var/tmp/aurd.log", "a"); fwrite($fp, $msg . "\n"); fclose($fp); return; } # check to see if the user can overwrite an existing package # function can_overwrite_pkg($name="", $sid="") { if (!$name || !$sid) {return 0;} $dbh = db_connect(); $q = "SELECT SubmitterUID, MaintainerUID, AURMaintainerUID "; $q.= "FROM Packages WHERE Name = '".mysql_real_escape_string($name)."'"; $result = db_query($q, $dbh); if (!$result) {return 0;} $row = mysql_fetch_row($result); $my_uid = uid_from_sid($sid); # user is a dev and maintains the package # if ($my_uid == $row[2]) {return 1;} # user is a TU and there is no dev # if (!$row[2] && $my_uid == $row[1]) {return 1;} # user is a user and there is no TU or dev # if (!$row[2] && !$row[1] && $my_uid == $row[0]) {return 1;} return 0; } # convert an ini_get number to a real integer - stupid PHP! # function initeger($inival="0", $isbytes=1) { $last_char = strtolower(substr($inival, -1)); if ($isbytes) { switch ($last_char) { case 't': $multiplier = 1024 * 1024 * 1024; break; case 'm': $multiplier = 1024 * 1024; break; case 'k': $multiplier = 1024; break; default: $multiplier = 1; break; } } else { switch ($last_char) { case 't': $multiplier = 1000 * 1000 * 1000; break; case 'm': $multiplier = 1000 * 1000; break; case 'k': $multiplier = 1000; break; default: $multiplier = 1; break; } } return intval($inival) * $multiplier; } # recursive delete directory # function rm_rf($dirname="") { $d = dir($dirname); while ($f = $d->read()) { if ($f != "." && $f != "..") { if (is_dir($dirname."/".$f)) { rm_rf($dirname."/".$f); } if (is_file($dirname."/".$f) || is_link($dirname."/".$f)) { unlink($dirname."/".$f); } } } $d->close(); rmdir($dirname); return; } # obtain the uid given a Users.Username # function uid_from_username($username="") { if (!$username) { return ""; } $dbh = db_connect(); $q = "SELECT ID FROM Users WHERE Username = '".mysql_real_escape_string($username) ."'"; $result = db_query($q, $dbh); if (!$result) { return "None"; } $row = mysql_fetch_row($result); return $row[0]; } # vim: ts=2 sw=2 noet ft=php ?>