| 1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516 |
- /**--------------------------------------------------------------------------**\
- ===================================
- y_users - Registration functions.
- ===================================
- Description:
- Provides access to a user system for registering and saving users.
- Legal:
- Version: MPL 1.1
-
- The contents of this file are subject to the Mozilla Public License Version
- 1.1 (the "License"); you may not use this file except in compliance with
- the License. You may obtain a copy of the License at
- http://www.mozilla.org/MPL/
-
- Software distributed under the License is distributed on an "AS IS" basis,
- WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
- for the specific language governing rights and limitations under the
- License.
-
- The Original Code is the YSI malloc include.
-
- The Initial Developer of the Original Code is Alex "Y_Less" Cole.
- Portions created by the Initial Developer are Copyright (C) 2011
- the Initial Developer. All Rights Reserved.
-
- Contributors:
- ZeeX, koolk, JoeBullet/Google63, g_aSlice/Slice
-
- Thanks:
- JoeBullet/Google63 - Handy arbitrary ASM jump code using SCTRL.
- ZeeX - Very productive conversations.
- koolk - IsPlayerinAreaEx code.
- TheAlpha - Danish translation.
- breadfish - German translation.
- Fireburn - Dutch translation.
- yom - French translation.
- 50p - Polish translation.
- Zamaroht - Spanish translation.
- Dracoblue, sintax, mabako, Xtreme, other coders - Producing other modes
- for me to strive to better.
- Pixels^ - Running XScripters where the idea was born.
- Matite - Pestering me to release it and using it.
-
- Very special thanks to:
- Thiadmer - PAWN, whose limits continue to amaze me!
- Kye/Kalcor - SA:MP.
- SA:MP Team past, present and future - SA:MP.
-
- Version:
- 2.2
- Changelog:
- 02/02/13:
- Added bits and join timestamp to preload data.
- Added backwards compatible salting to the hash.
- 15/11/11:
- Added comments.
- Added language to the top-level player data (needed for login).
- 11/11/11:
- First version.
- Functions:
- Public
- -
- Core:
- -
- Stock:
- -
- Static:
- -
- Inline:
- -
- API:
- -
- Callbacks:
- -
- Definitions:
- -
- Enums:
- -
- Macros:
- -
- Tags:
- -
- Variables:
- Global:
- -
- Static:
- -
- Commands:
- -
- Compile options:
- -
- Operators:
- -
- \**--------------------------------------------------------------------------**/
- #if !defined Y_USERS_SQL_HOST
- #define Y_USERS_SQL_HOST GetUsersSQLHost()
- #endif
- #if !defined Y_USERS_SQL_READ_USER
- #define Y_USERS_SQL_READ_USER GetUsersSQLReadUser()
- #endif
- #if !defined Y_USERS_SQL_READ_PASS
- #define Y_USERS_SQL_READ_PASS GetUsersSQLReadPass()
- #endif
- #if !defined Y_USERS_SQL_DB
- #define Y_USERS_SQL_DB GetUsersSQLDB()
- #endif
- #if !defined Y_USERS_SQL_PORT
- #define Y_USERS_SQL_PORT GetUsersSQLPort()
- #endif
- #if !defined Y_USERS_SQL_WRITE_USER
- #define Y_USERS_SQL_WRITE_USER Y_USERS_SQL_READ_USER
- #endif
- #if !defined Y_USERS_SQL_WRITE_PASS
- #define Y_USERS_SQL_WRITE_PASS Y_USERS_SQL_READ_PASS
- #endif
- #if !defined Y_USERS_SQL_MAKE_USER
- #define Y_USERS_SQL_MAKE_USER Y_USERS_SQL_READ_USER
- #endif
- #if !defined Y_USERS_SQL_MAKE_PASS
- #define Y_USERS_SQL_MAKE_PASS Y_USERS_SQL_READ_PASS
- #endif
- loadtext core[ysi_players];
- enum E_USER_PRELOAD
- {
- E_USER_PRELOAD_YID,
- Language:E_USER_PRELOAD_LANG,
- E_USER_PRELOAD_PASS[MAX_PASSWORD_LENGTH + 1],
- E_USER_PRELOAD_BITS,
- /*E_USER_PRELOAD_PLAY_TIME,
- E_USER_PRELOAD_LAST_IP,
- E_USER_PRELOAD_LAST_LOGIN,*/
- E_USER_PRELOAD_DATE
- }
- static stock
- YSI_g_sCurrentYID,
- YSI_g_sModeNameLength,
- YSI_g_sSQLBuffer[2048],
- YSI_g_sSQLQuery[256],
- SQL:YSI_g_sPreloadHandle,
- SQL:YSI_g_sLoadHandle,
- SQL:YSI_g_sWriteHandle,
- YSI_g_sPlayerYID[MAX_PLAYERS] = {-2, ...},
- YSI_g_sPreloadData[MAX_PLAYERS][E_USER_PRELOAD];
- forward y_users_SQLLoaded(playerid, uid, Result:r);
- forward y_users_SQLCallback(id, Result:r);
- /**--------------------------------------------------------------------------**\
- <remarks>
- This code loads the settings for accessing your database from a file.
- </remarks>
- \**--------------------------------------------------------------------------**/
- #define GetUsersSQLHost() (Player_LoadDBSettings(),YSI_g_sUsersSQLHost)
- #define GetUsersSQLReadUser() (Player_LoadDBSettings(),YSI_g_sUsersSQLReadUser)
- #define GetUsersSQLReadPass() (Player_LoadDBSettings(),YSI_g_sUsersSQLReadPass)
- #define GetUsersSQLDB() (Player_LoadDBSettings(),YSI_g_sUsersSQLDB)
- #define GetUsersSQLPort() (Player_LoadDBSettings(),YSI_g_sUsersSQLPort)
- static stock
- YSI_g_sUsersSQLHost[16] = "localhost",
- YSI_g_sUsersSQLReadUser[16] = "y_users_make",
- YSI_g_sUsersSQLReadPass[16] = "y_users_make",
- YSI_g_sUsersSQLDB[16] = "y_users",
- YSI_g_sUsersSQLPort = 3306;
- INI:YSI[y_users](name[], value[])
- {
- INI_String("Host", YSI_g_sUsersSQLHost, sizeof (YSI_g_sUsersSQLHost));
- INI_String("User", YSI_g_sUsersSQLReadUser, sizeof (YSI_g_sUsersSQLReadUser));
- INI_String("Pass", YSI_g_sUsersSQLReadPass, sizeof (YSI_g_sUsersSQLReadPass));
- INI_String("DB", YSI_g_sUsersSQLDB, sizeof (YSI_g_sUsersSQLDB));
- INI_Int("Port", YSI_g_sUsersSQLPort);
- return 0;
- }
- static stock Player_LoadDBSettings()
- {
- static
- bool:sLoad = true;
- if (sLoad)
- {
- INI_Load("YSI.ini");
- sLoad = false;
- }
- }
- /**--------------------------------------------------------------------------**\
- <summary>Player_Reload</summary>
- <param name="playerid">Player who changed name.</param>
- <returns>
- -
- </returns>
- <remarks>
- Reload a player's basic data when they change name.
- </remarks>
- \**--------------------------------------------------------------------------**/
- stock Player_Reload(playerid)
- {
- new
- name[MAX_PLAYER_NAME];
- GetPlayerName(playerid, name, sizeof (name)),
- Player_Preload(name, YSI_g_sPreloadData[playerid]);
- }
- stock Player_SetPreload(playerid, data[E_USER_PRELOAD])
- {
- if (VALID_PLAYERID(playerid))
- {
- YSI_g_sPreloadData[playerid] = data;
- }
- }
- /**--------------------------------------------------------------------------**\
- <summary>Player_Preload</summary>
- <param name="playerid">Player who is logging in.</param>
- <returns>
- -
- </returns>
- <remarks>
- Loads a player's data to an array.
- </remarks>
- \**--------------------------------------------------------------------------**/
- stock Player_Preload(string:name[], ret[E_USER_PRELOAD])
- {
- // First, find the player's file. This should be the ONLY place where the
- // password is to be loaded.
- P:4("Player_Preload called: %s", name);
- ret[E_USER_PRELOAD_YID] = -1,
- ret[E_USER_PRELOAD_PASS] = '\0',
- ret[E_USER_PRELOAD_LANG] = NO_LANGUAGE,
- ret[E_USER_PRELOAD_BITS] = 0,
- ret[E_USER_PRELOAD_DATE] = 0;
- new
- safeName[MAX_PLAYER_NAME];
- sql_escape_string(YSI_g_sPreloadHandle, name, safeName),
- // I don't normally like "SELECT *" but it is appropriate here.
- format(YSI_g_sSQLQuery, sizeof (YSI_g_sSQLQuery), "SELECT yp.* FROM y_users_preload AS yp JOIN y_users_users WHERE name='%s';", safeName);
- new
- Result:r = sql_query(YSI_g_sPreloadHandle, YSI_g_sSQLQuery);
- if (sql_error(r))
- {
- P:E("SQL Error: %s", YSI_g_sSQLQuery);
- return
- sql_error_string(r, YSI_g_sSQLQuery),
- sql_free_result(r),
- 0;
- }
- switch (sql_num_rows(r))
- {
- case 0:
- {
- ret[E_USER_PRELOAD_YID] = 0;
- }
- case 1:
- {
- // YID.
- sql_get_field(r, 0, YSI_g_sSQLQuery),
- ret[E_USER_PRELOAD_YID] = strval(YSI_g_sSQLQuery),
- // Hash.
- sql_get_field(r, 1, YSI_g_sSQLQuery),
- strcat(ret[E_USER_PRELOAD_PASS], YSI_g_sSQLQuery, MAX_PASSWORD_LENGTH + 1),
- // Language
- sql_get_field(r, 2, YSI_g_sSQLQuery),
- ret[E_USER_PRELOAD_LANG] = Langs_GetLanguage(YSI_g_sSQLQuery),
- // Load the 32 extra "bits".
- sql_get_field(r, 3, YSI_g_sSQLQuery),
- ret[E_USER_PRELOAD_BITS] = strval(YSI_g_sSQLQuery),
- // Load the user registration date (if they have one).
- sql_get_field(r, 4, YSI_g_sSQLQuery),
- ret[E_USER_PRELOAD_DATE] = strval(YSI_g_sSQLQuery);
- P:6("Player_Preload: %s %d %d %x %x", ret[E_USER_PRELOAD_PASS], ret[E_USER_PRELOAD_YID], _:ret[E_USER_PRELOAD_LANG], ret[E_USER_PRELOAD_BITS], ret[E_USER_PRELOAD_DATE]);
- // Load their total play time.
- // Load their last IP.
- // Load their last login.
- }
- default:
- {
- P:E("y_users found mutliple YID results for %s", name);
- }
- }
- return
- sql_free_result(r),
- (ret[E_USER_PRELOAD_YID] > 0);
- }
- stock Language:Player_GetPreloadLanguage(playerid)
- {
- return Language:YSI_g_sPreloadData[playerid][E_USER_PRELOAD_LANG];
- }
- stock Player_GetPreloadBits(playerid)
- {
- return YSI_g_sPreloadData[playerid][E_USER_PRELOAD_BITS];
- }
- static remotefunc void:_Player_SetPreloadBits(playerid, bits)
- {
- YSI_g_sPreloadData[playerid][E_USER_PRELOAD_BITS] = bits;
- }
- stock Player_SetPreloadBits(playerid, bits)
- {
- broadcastfunc _Player_SetPreloadBits(playerid, bits);
- Player_RewritePreload(playerid);
- }
- stock Player_GetPreloadDate(playerid)
- {
- if (0 <= YSI_g_sPreloadData[playerid][E_USER_PRELOAD_DATE] < 1234567890)
- {
- return -1;
- }
- return YSI_g_sPreloadData[playerid][E_USER_PRELOAD_DATE];
- }
- stock Player_IsRegistered(playerid)
- {
- return YSI_g_sPreloadData[playerid][E_USER_PRELOAD_YID] > 0;
- }
- hook OnScriptInit()
- {
- sql_debug(LOG_NONE, LOG_ALL);
- #define SQL_CLEANUP(%0) if (sql_error((%0))){sql_error_string((%0),error),P:E("SQL Error: %s",error);return sql_free_result((%0)),sql_disconnect(mkH),0;}sql_free_result((%0))
- YSI_g_sModeNameLength = strlen(MODE_NAME),
- YSI_g_sPreloadHandle = sql_connect(SQL_HANDLER_MYSQL, Y_USERS_SQL_HOST, Y_USERS_SQL_READ_USER, Y_USERS_SQL_READ_PASS, Y_USERS_SQL_DB),
- P:5("Users_OnScriptInit: YSI_g_sPreloadHandle = %d", _:YSI_g_sPreloadHandle);
- YSI_g_sLoadHandle = sql_connect(SQL_HANDLER_MYSQL, Y_USERS_SQL_HOST, Y_USERS_SQL_READ_USER, Y_USERS_SQL_READ_PASS, Y_USERS_SQL_DB),
- P:5("Users_OnScriptInit: YSI_g_sLoadHandle = %d", _:YSI_g_sLoadHandle);
- YSI_g_sWriteHandle = sql_connect(SQL_HANDLER_MYSQL, Y_USERS_SQL_HOST, Y_USERS_SQL_WRITE_USER, Y_USERS_SQL_WRITE_PASS, Y_USERS_SQL_DB);
- P:5("Users_OnScriptInit: YSI_g_sWriteHandle = %d", _:YSI_g_sWriteHandle);
- // There are two main tables.
- new
- SQL:mkH = sql_connect(SQL_HANDLER_MYSQL, Y_USERS_SQL_HOST, Y_USERS_SQL_MAKE_USER, Y_USERS_SQL_MAKE_PASS, Y_USERS_SQL_DB),
- error[64],
- // Create the table for storing users.
- Result:r = sql_query(mkH,
- "CREATE TABLE IF NOT EXISTS y_users_preload (" \
- "yid INT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY," \
- "password_hash CHAR(128), language CHAR(2)," \
- "options INT UNSIGNED, registered INT UNSIGNED," \
- "play_time INT UNSIGNED, last_ip INT UNSIGNED," \
- "last_seen DATETIME" \
- ") ENGINE InnoDB;");
- P:5("Users_OnScriptInit: mkH = %d", _:mkH);
- // "options" was "BIT(32)".
- #pragma tabsize 0 // BAD BAD BAD! HACK HACK HACK!
- SQL_CLEANUP(r);
- #pragma tabsize 4 // RESTORE FROM THE UGLINESS!
- // Create the table for storing tags.
- r = sql_query(mkH,
- "CREATE TABLE IF NOT EXISTS y_users_modes (" \
- "tagid INT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY," \
- "mode VARCHAR(32) NOT NULL," \
- "tag VARCHAR(32)," \
- "INDEX (mode) USING HASH," \
- "UNIQUE KEY (mode, tag)" \
- ") ENGINE InnoDB;");
- #pragma tabsize 0 // BAD BAD BAD! HACK HACK HACK!
- SQL_CLEANUP(r);
- #pragma tabsize 4 // RESTORE FROM THE UGLINESS!
- // Create the table to map names to YIDs.
- r = sql_query(mkH,
- "CREATE TABLE IF NOT EXISTS y_users_users (" \
- "name VARCHAR(24) NOT NULL PRIMARY KEY," \
- "yid INT UNSIGNED," \
- "CONSTRAINT FOREIGN KEY (yid)" \
- "REFERENCES y_users_preload (yid) ON DELETE CASCADE," \
- "INDEX (name) USING HASH" \
- ") ENGINE InnoDB;");
- #pragma tabsize 0 // BAD BAD BAD! HACK HACK HACK!
- SQL_CLEANUP(r);
- #pragma tabsize 4 // RESTORE FROM THE UGLINESS!
- // Create the table for storing key/value pairs.
- r = sql_query(mkH,
- "CREATE TABLE IF NOT EXISTS y_users_keystore (" \
- "yid INT UNSIGNED NOT NULL," \
- "tagid INT UNSIGNED NOT NULL," \
- "vkey VARCHAR(32) NOT NULL," \
- "value VARCHAR(196)," \
- "CONSTRAINT FOREIGN KEY (tagid) REFERENCES y_users_modes (tagid) ON DELETE CASCADE," \
- "CONSTRAINT FOREIGN KEY (yid) REFERENCES y_users_preload (yid) ON DELETE CASCADE," \
- "UNIQUE KEY (yid, tagid, vkey), INDEX (yid)" \
- ") ENGINE InnoDB;");
- #pragma tabsize 0 // BAD BAD BAD! HACK HACK HACK!
- SQL_CLEANUP(r);
- #pragma tabsize 4 // RESTORE FROM THE UGLINESS!
- // Create the table to map names to IPs.
- r = sql_query(mkH,
- "CREATE TABLE IF NOT EXISTS y_users_name_ips (" \
- "row BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY," \
- "name VARCHAR(24) NOT NULL," \
- "one_ip INT UNSIGNED," \
- "validated BOOL," \
- "registered DATETIME," \
- "leave_time DATETIME" \
- ") ENGINE InnoDB;");
- // "validated" means that this name/IP combination logged in and was
- // confirmed to be a valid connecting user, not someone trying to spoof a
- // login.
- #pragma tabsize 0 // BAD BAD BAD! HACK HACK HACK!
- SQL_CLEANUP(r);
- #pragma tabsize 4 // RESTORE FROM THE UGLINESS!
- // Create the table to map YIDs to IPs.
- r = sql_query(mkH,
- "CREATE TABLE IF NOT EXISTS y_users_yid_ips (" \
- "row BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY," \
- "yid INT UNSIGNED NOT NULL," \
- "one_ip INT UNSIGNED," \
- "registered DATETIME," \
- "leave_time DATETIME" \
- ") ENGINE InnoDB;");
- #pragma tabsize 0 // BAD BAD BAD! HACK HACK HACK!
- SQL_CLEANUP(r);
- #pragma tabsize 4 // RESTORE FROM THE UGLINESS!
- // Create the table to store failed logins.
- r = sql_query(mkH,
- "CREATE TABLE IF NOT EXISTS y_users_fails (" \
- "row BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY," \
- "try_yid INT UNSIGNED NOT NULL," \
- "from_name VARCHAR(24)," \
- "from_ip INT UNSIGNED," \
- "validated BOOL," \
- "attempt_time DATETIME" \
- ") ENGINE InnoDB;");
- #pragma tabsize 0 // BAD BAD BAD! HACK HACK HACK!
- SQL_CLEANUP(r);
- #pragma tabsize 4 // RESTORE FROM THE UGLINESS!
- sql_disconnect(mkH);
- return 1;
- #undef SQL_CLEANUP
- }
- hook OnScriptExit()
- {
- // Loop through all players.
- foreach (new i : Player)
- {
- Player_DoDisconnect(i);
- }
- sql_disconnect(YSI_g_sPreloadHandle),
- sql_disconnect(YSI_g_sLoadHandle),
- sql_disconnect(YSI_g_sWriteHandle);
- }
- hook OnPlayerConnect(playerid)
- {
- P:1("Users_OnPlayerConnect called: %d", playerid);
- new
- name[MAX_PLAYER_NAME];
- GetPlayerName(playerid, name, sizeof (name)),
- YSI_g_sPlayerYID[playerid] = 0,
- // -1 means unknown.
- YSI_g_sPreloadData[playerid][E_USER_PRELOAD_YID] = -1,
- YSI_g_sPreloadData[playerid][E_USER_PRELOAD_PASS] = '\0',
- YSI_g_sPreloadData[playerid][E_USER_PRELOAD_LANG] = NO_LANGUAGE,
- YSI_g_sPreloadData[playerid][E_USER_PRELOAD_BITS] = 0,
- YSI_g_sPreloadData[playerid][E_USER_PRELOAD_DATE] = 0;
- broadcastfunc _Player_IsLoggedIn(playerid);
- if (existproperty(8, YSIM_LOG_IN))
- {
- new
- uid = getproperty(8, YSIM_LOG_IN);
- P:5("Users_OnPlayerConnect: Exists %d", uid);
- // We need the preload data even if they're already logged in.
- if (uid)
- {
- Player_Preload(name, YSI_g_sPreloadData[playerid]);
- if (uid > 0)
- {
- // This DOES NOT use "broadcastfunc" as it's local only.
- Player_DoLogin(playerid, uid);
- }
- }
- deleteproperty(8, YSIM_LOG_IN);
- }
- else
- {
- new
- safeName[MAX_PLAYER_NAME],
- ip = GetIP(playerid);
- // Write this connection.
- sql_escape_string(YSI_g_sWriteHandle, name, safeName),
- format(YSI_g_sSQLQuery, sizeof (YSI_g_sSQLQuery),
- "INSERT INTO y_users_name_ips VALUES (DEFAULT, '%s', 0x%04x%04x, 0, NOW(), 0)",
- safeName,
- ip >>> 16,
- ip & 0xFFFF),
- sql_query(YSI_g_sWriteHandle, YSI_g_sSQLQuery, QUERY_THREADED, "y_users_SQLCallback", "ir", 1);
- P:5("Users_OnPlayerConnect: Doesn't exist");
- Player_Preload(name, YSI_g_sPreloadData[playerid]);
- P:5("Users_OnPlayerConnect: Done Preload");
- // Can do checking in here to see if they just rejoined.
- }
- return 1;
- }
- /**--------------------------------------------------------------------------**\
- <summary>_Player_IsLoggedIn</summary>
- <param name="playerid">Player to check.</param>
- <returns>
- -1 - Registered but not logged in.
- 0 - Not registered.
- 1+ - Logged in, and their YID.
- </returns>
- <remarks>
- This is a remote function called in existing scripts when a new script
- starts. If the player is logged in it returns their YID. If a player is
- registered but not logged in it returns "-1". Otherwise it returns 0.
- </remarks>
- \**--------------------------------------------------------------------------**/
- static remotefunc void:_Player_IsLoggedIn(playerid)
- {
- P:4("_Player_IsLoggedIn called: %d %d", playerid, YSI_g_sPlayerYID[playerid]);
- if (YSI_g_sPlayerYID[playerid] > 0)
- {
- setproperty(8, YSIM_LOG_IN, YSI_g_sPlayerYID[playerid]);
- }
- else if (YSI_g_sPreloadData[playerid][E_USER_PRELOAD_YID] > 0)
- {
- setproperty(8, YSIM_LOG_IN, -1);
- }
- else
- {
- setproperty(8, YSIM_LOG_IN, 0);
- }
- }
- /**--------------------------------------------------------------------------**\
- <summary>OnPlayerDisconnect</summary>
- <param name="playerid">Player who left.</param>
- <param name="reason">Why they left.</param>
- <returns>
- -
- </returns>
- <remarks>
- Logs the player out if they're logged in.
- </remarks>
- \**--------------------------------------------------------------------------**/
- hook OnPlayerDisconnect(playerid, reason)
- {
- Player_DoDisconnect(playerid);
- }
- static stock Player_DoDisconnect(playerid)
- {
- new
- yid = YSI_g_sPlayerYID[playerid];
- P:2("Users_OnPlayerDisconnect called: %d %d %d", playerid, yid);
- if (yid > 0)
- {
- // DO NOT broadcastfunc this in case it's just because of one script being
- // unloaded, not the player actually leaving (and thus do everything in
- // different scripts separately).
- Player_SaveData(playerid, true);
- new
- name[MAX_PLAYER_NAME],
- ip = GetIP(playerid);
- GetPlayerName(playerid, name, sizeof (name)),
- // Write this connection.
- sql_escape_string(YSI_g_sWriteHandle, name, name),
- // Save the online time for this NAME.
- format(YSI_g_sSQLQuery, sizeof (YSI_g_sSQLQuery),
- "UPDATE y_users_name_ips SET leave_time=NOW() WHERE name='%s' ORDER BY row DESC LIMIT 1;",
- name),
- sql_query(YSI_g_sWriteHandle, YSI_g_sSQLQuery, QUERY_THREADED, "y_users_SQLCallback", "ir", 1),
- // Save the total online time for this YID.
- format(YSI_g_sSQLQuery, sizeof (YSI_g_sSQLQuery),
- "UPDATE y_users_preload SET last_ip=0x%04x%04x, last_seen=NOW(), play_time=play_time+(" \
- "SELECT (NOW()-leave_time) FROM y_users_yid_ips WHERE yid=%d ORDER BY row DESC LIMIT 1)" \
- "WHERE yid=%d;",
- ip >>> 16, ip & 0xFFFF, yid, yid),
- sql_query(YSI_g_sWriteHandle, YSI_g_sSQLQuery, QUERY_THREADED, "y_users_SQLCallback", "ir", 1),
- // Save the current online time for this YID.
- format(YSI_g_sSQLQuery, sizeof (YSI_g_sSQLQuery),
- "UPDATE y_users_yid_ips SET leave_time=NOW() WHERE yid=%d ORDER BY row DESC LIMIT 1;",
- yid),
- sql_query(YSI_g_sWriteHandle, YSI_g_sSQLQuery, QUERY_THREADED, "y_users_SQLCallback", "ir", 1);
-
- }
- YSI_g_sPreloadData[playerid][E_USER_PRELOAD_YID] = -1,
- YSI_g_sPlayerYID[playerid] = 0;
- }
- stock bool:Player_IsLoggedIn(playerid)
- {
- // -2 should never be an issue, but if it is...
- return YSI_g_sPlayerYID[playerid] > 0;
- }
- stock Player_GetYID(playerid)
- {
- return YSI_g_sPlayerYID[playerid];
- }
- /**--------------------------------------------------------------------------**\
- <summary>Player_TryLogin</summary>
- <param name="playerid">Player who is logging in.</param>
- <param name="password[]">Password they entered.</param>
- <param name="f">Show the failed to login message?</param>
- <returns>
- -
- </returns>
- <remarks>
- Tries to log in a player - hashes and checks their password and if it's
- right calls the core login code. It doesn't matter WHICH script does this
- as they ALL get called and ALL track the login status of a player.
- </remarks>
- \**--------------------------------------------------------------------------**/
- global Player_TryLogin(playerid, string:password[])
- {
- P:2("Player_TryLogin start");
- if (Player_IsLoggedIn(playerid))
- {
- // They are already logged in.
- Text_Send(playerid, $YSI_LOGIN_ALREADY);
- return 1;
- }
- new
- hash[MAX_PASSWORD_LENGTH + 8 + 1];
- Player_HashPass(password, hash);
- format(hash[MAX_PASSWORD_LENGTH], sizeof (hash) - MAX_PASSWORD_LENGTH, "%04x%04x", YSI_g_sPreloadData[playerid][E_USER_PRELOAD_DATE] >>> 16, YSI_g_sPreloadData[playerid][E_USER_PRELOAD_DATE] & 0xFFFF);
- Player_HashPass(hash, hash);
- switch (YSI_g_sPreloadData[playerid][E_USER_PRELOAD_YID])
- {
- case -1:
- {
- Text_Send(playerid, $YSI_LOGIN_INDERR);
- }
- case 0:
- {
- Text_Send(playerid, $YSI_LOGIN_NOTF);
- }
- default:
- {
- // Match the password.
- if (YSI_g_sPreloadData[playerid][E_USER_PRELOAD_PASS][0] && !strcmp(YSI_g_sPreloadData[playerid][E_USER_PRELOAD_PASS], hash, false, MAX_PASSWORD_LENGTH))
- {
- // Wipe the password from memory.
- memset(YSI_g_sPreloadData[playerid][E_USER_PRELOAD_PASS], 0, MAX_PASSWORD_LENGTH);
- // Extract the uid and call in to the login code.
- Langs_SetPlayerLanguage(playerid, YSI_g_sPreloadData[playerid][E_USER_PRELOAD_LANG]);
- broadcastfunc Player_DoLogin(playerid, YSI_g_sPreloadData[playerid][E_USER_PRELOAD_YID]);
- Text_Send(playerid, $YSI_LOGIN_LOGIN);
- new
- name[MAX_PLAYER_NAME],
- safeName[MAX_PLAYER_NAME],
- ip = GetIP(playerid);
- GetPlayerName(playerid, name, sizeof (name)),
- // Write this connection.
- sql_escape_string(YSI_g_sWriteHandle, name, safeName),
- format(YSI_g_sSQLQuery, sizeof (YSI_g_sSQLQuery),
- "INSERT INTO y_users_yid_ips VALUES (DEFAULT, %d, 0x%04x%04x, NOW(), NOW())",
- YSI_g_sPreloadData[playerid][E_USER_PRELOAD_YID],
- ip >>> 16,
- ip & 0xFFFF),
- sql_query(YSI_g_sWriteHandle, YSI_g_sSQLQuery, QUERY_THREADED, "y_users_SQLCallback", "ir", 1);
- return 1;
- }
- else
- {
- Text_Send(playerid, $YSI_LOGIN_WRONG);
- // Record the failed login in the database.
- new
- ip = GetIP(playerid);
- GetPlayerName(playerid, hash, sizeof (hash)),
- sql_escape_string(YSI_g_sWriteHandle, hash, hash),
- format(YSI_g_sSQLQuery, sizeof (YSI_g_sSQLQuery),
- "INSERT INTO y_users_fails VALUES (DEFAULT, %d, '%s', 0x%04x%04x, 0, NOW())",
- YSI_g_sPreloadData[playerid][E_USER_PRELOAD_YID],
- hash,
- ip >>> 16,
- ip & 0xFFFF),
- sql_query(YSI_g_sWriteHandle, YSI_g_sSQLQuery, QUERY_THREADED, "y_users_SQLCallback", "ir", 1);
- }
- }
- }
- return 0;
- }
- /**--------------------------------------------------------------------------**\
- <summary>Player_ForceLogin</summary>
- <param name="playerid">Player who is logging in.</param>
- <returns>
- -
- </returns>
- <remarks>
- Like "Player_TryLogin" but doesn't take a password so always works.
- </remarks>
- \**--------------------------------------------------------------------------**/
- global Player_ForceLogin(playerid)
- {
- P:2("Player_TryLogin start");
- if (Player_IsLoggedIn(playerid))
- {
- // They are already logged in.
- Text_Send(playerid, $YSI_LOGIN_ALREADY);
- return 1;
- }
- switch (YSI_g_sPreloadData[playerid][E_USER_PRELOAD_YID])
- {
- case -1:
- {
- Text_Send(playerid, $YSI_LOGIN_INDERR);
- }
- case 0:
- {
- Text_Send(playerid, $YSI_LOGIN_NOTF);
- }
- default:
- {
- // Extract the uid and call in to the login code.
- YSI_g_sPreloadData[playerid][E_USER_PRELOAD_PASS] = '\0';
- Langs_SetPlayerLanguage(playerid, YSI_g_sPreloadData[playerid][E_USER_PRELOAD_LANG]);
- broadcastfunc Player_DoLogin(playerid, YSI_g_sPreloadData[playerid][E_USER_PRELOAD_YID]);
- Text_Send(playerid, $YSI_LOGIN_LOGIN);
- new
- name[MAX_PLAYER_NAME],
- safeName[MAX_PLAYER_NAME],
- ip = GetIP(playerid);
- GetPlayerName(playerid, name, sizeof (name)),
- // Write this connection.
- sql_escape_string(YSI_g_sWriteHandle, name, safeName),
- format(YSI_g_sSQLQuery, sizeof (YSI_g_sSQLQuery),
- "INSERT INTO y_users_yid_ips VALUES (DEFAULT, %d, 0x%04x%04x, NOW(), NOW())",
- YSI_g_sPreloadData[playerid][E_USER_PRELOAD_YID],
- ip >>> 16,
- ip & 0xFFFF),
- sql_query(YSI_g_sWriteHandle, YSI_g_sSQLQuery, QUERY_THREADED, "y_users_SQLCallback", "ir", 1);
- return 1;
- }
- }
- return 0;
- }
- remotefunc void:Player_DoLogin(playerid, uid)
- {
- // Called when a player logs in - either locally (new script) or globally
- // (actually only just logged in).
- YSI_g_sPlayerYID[playerid] = uid;
- // We don't need to specify how to join the tables because the definitions
- // use a FOREIGN KEY CONSTRAINT to map them to each other.
- format(YSI_g_sSQLQuery, sizeof (YSI_g_sSQLQuery), "SELECT tag, vkey, value FROM y_users_modes JOIN y_users_keystore WHERE yid=%d && mode='" #MODE_NAME "';", uid);
- sql_query(YSI_g_sLoadHandle, YSI_g_sSQLQuery, QUERY_THREADED, "y_users_SQLLoaded", "iir", playerid, uid);
- //UPDATE y_users_name_ips SET validated=1 WHERE name='%s' && one_ip=0x%04x%04x && leave_time=0
- //format(YSI_g_sSQLQuery, sizeof (YSI_g_sSQLQuery), "SELECT tag, vkey, value FROM y_users_modes JOIN y_users_keystore WHERE yid=%d && mode='" #MODE_NAME "';", uid);
- //sql_query(YSI_g_sLoadHandle, YSI_g_sSQLQuery, QUERY_THREADED, "y_users_SQLLoaded", "iir", playerid, uid);
- }
- public y_users_SQLLoaded(playerid, uid, Result:r)
- {
- static
- func[32] = "@yU_",
- name[32];
- if (sql_error(r))
- {
- sql_error_string(r, YSI_g_sSQLQuery),
- P:E("SQL Error: %s", YSI_g_sSQLQuery);
- return
- sql_free_result(r),
- 0;
- }
- // Finally, they've logged in.
- call OnPlayerLogin(playerid, uid);
- // Loop through all the results.
- new
- rows = sql_num_rows(r);
- for (new row = 0; row != rows; ++row)
- {
- // Load all the data in a YSI-compatible way.
- sql_next_row(r, row),
- sql_get_field(r, 0, func[4]),
- sql_get_field(r, 1, name),
- sql_get_field(r, 2, YSI_g_sSQLQuery),
- CallLocalFunction(func, "iss", playerid, name, YSI_g_sSQLQuery);
- }
- return
- sql_free_result(r),
- 1;
- }
- public y_users_SQLCallback(id, Result:r)
- {
- if (sql_error(r))
- {
- if (id == 3 && sql_error(r) == 1452) goto y_users_SQLCallback_done;
- sql_error_string(r, YSI_g_sSQLQuery),
- P:E("SQL Error: %s", YSI_g_sSQLQuery);
- return
- sql_free_result(r),
- 0;
- }
- y_users_SQLCallback_done:
- return
- sql_free_result(r),
- 1;
- }
- /**--------------------------------------------------------------------------**\
- <summary>Player_RemoveEntry</summary>
- <param name="name[]">Item to remove.</param>
- <returns>
- -
- </returns>
- <remarks>
- Wrapper for Player_AddToBuffer for removing data.
- </remarks>
- \**--------------------------------------------------------------------------**/
- stock Player_RemoveEntry(name[])
- {
- // First, flush the main buffer so we can add anything we might want to
- // remove.
- Player_FlushData();
- sql_escape_string(YSI_g_sWriteHandle, name, YSI_g_sSQLQuery),
- format(YSI_g_sSQLQuery, sizeof (YSI_g_sSQLQuery), "DELETE FROM y_users_keystore WHERE yid=%d && tagid=@T && vkey='%s';", YSI_g_sCurrentYID, YSI_g_sSQLQuery),
- sql_query(YSI_g_sWriteHandle, YSI_g_sSQLQuery, QUERY_THREADED, "y_users_SQLCallback", "ir", 1);
- }
- /**--------------------------------------------------------------------------**\
- <summary>Player_WriteString</summary>
- <param name="name[]">Data name.</param>
- <param name="data[]">Data.</param>
- <returns>
- -
- </returns>
- <remarks>
- Wrapper for Player_AddToBuffer for strings.
- </remarks>
- \**--------------------------------------------------------------------------**/
- stock Player_WriteString(name[], data[])
- {
- static
- sPart[196 + 32 + 10 + 10 + 10];
- format(sPart, sizeof (YSI_g_sSQLBuffer), "(%d,@T,'", YSI_g_sCurrentYID);
- sql_escape_string(YSI_g_sWriteHandle, name, sPart[strlen(sPart)])
- strcat(sPart, "','")
- sql_escape_string(YSI_g_sWriteHandle, data, sPart[strlen(sPart)])
- strcat(sPart, "')")
- // Already has some query buffered.
- if (YSI_g_sSQLBuffer[0])
- {
- if (strlen(YSI_g_sSQLBuffer) < sizeof (YSI_g_sSQLBuffer) - 44 - 2 - strlen(sPart))
- {
- // Enough space for the new values and the standard suffix.
- strcat(YSI_g_sSQLBuffer, ",");
- goto Player_WriteString_run;
- }
- strcat(YSI_g_sSQLBuffer, "ON DUPLICATE KEY UPDATE value=values(value);");
- sql_query(YSI_g_sWriteHandle, YSI_g_sSQLBuffer, QUERY_THREADED, "y_users_SQLCallback", "ir", 3);
- }
- YSI_g_sSQLBuffer = "INSERT INTO y_users_keystore(yid,tagid,vkey,value)VALUES";
- Player_WriteString_run:
- strcat(YSI_g_sSQLBuffer, sPart);
- }
- stock Player_WriteArray(const name[], data[], len)
- {
- // INI_WriteArray(YSI_g_sPlayerWriteFile, name, data, len);
- return 1;
- }
- /**--------------------------------------------------------------------------**\
- <summary>Player_WriteInt</summary>
- <param name="name[]">Data name.</param>
- <param name="data">Integer data.</param>
- <returns>
- -
- </returns>
- <remarks>
- Wrapper for Player_AddToBuffer for integers.
- </remarks>
- \**--------------------------------------------------------------------------**/
- stock Player_WriteInt(name[], data)
- {
- static
- sVal[12];
- strval(sVal, data);
- Player_WriteString(name, sVal);
- }
- /**--------------------------------------------------------------------------**\
- <summary>Player_WriteHex</summary>
- <param name="name[]">Data name.</param>
- <param name="data">Hex data.</param>
- <returns>
- -
- </returns>
- <remarks>
- Wrapper for Player_AddToBuffer for integers to be written as hex values.
- </remarks>
- \**--------------------------------------------------------------------------**/
- stock Player_WriteHex(name[], data)
- {
- static
- sVal[11];
- format(sVal, sizeof (sVal), "0x%04x%04x", data >>> 16, data & 0xFFFF);
- Player_WriteString(name, data);
- }
- /**--------------------------------------------------------------------------**\
- <summary>Player_WriteBin</summary>
- <param name="name[]">Data name.</param>
- <param name="data">Binary data.</param>
- <returns>
- -
- </returns>
- <remarks>
- Wrapper for Player_AddToBuffer for integers to be written as binary values.
- </remarks>
- \**--------------------------------------------------------------------------**/
- stock Player_WriteBin(name[], data)
- {
- static const
- sc_values[] = !"0000" "0001" "0010" "0011" "0100" "0101" "0110" "0111" "1000" "1001" "1010" "1011" "1100" "1101" "1110" "1111";
- static
- str[35];
- new
- i = 10;
- do
- {
- str[--i] = sc_values[data & 0x0F];
- data >>>= 4;
- }
- while (data);
- // Convert the coalesced values to individual values.
- strunpack(str[i], str[i], 33);
- str[--i] = 'b';
- str[--i] = '0';
- Player_WriteString(name, str);
- }
- /**--------------------------------------------------------------------------**\
- <summary>Player_WriteBool</summary>
- <param name="name[]">Data name.</param>
- <param name="data">Boolean data.</param>
- <returns>
- -
- </returns>
- <remarks>
- Wrapper for Player_AddToBuffer for booleans.
- </remarks>
- \**--------------------------------------------------------------------------**/
- stock Player_WriteBool(name[], bool:data)
- {
- Player_WriteString(name, data ? ("true") : ("false"));
- }
- /**--------------------------------------------------------------------------**\
- <summary>Player_WriteFloat</summary>
- <param name="name[]">Data name.</param>
- <param name="Float:data">Float data.</param>
- <param name="accuracy">number of decimal places to write.</param>
- <returns>
- -
- </returns>
- <remarks>
- Wrapper for Player_AddToBuffer for floats. Uses custom code instead of
- format() as it's actually faster for something simple like this.
- </remarks>
- \**--------------------------------------------------------------------------**/
- stock Player_WriteFloat(name[], Float:data, accuracy = 6)
- {
- static
- str[16];
- format(str, sizeof (str), "%.*f", accuracy, data);
- Player_WriteString(name, str);
- }
- static stock Player_FlushData()
- {
- if (YSI_g_sSQLBuffer[0])
- {
- new
- len = strlen(YSI_g_sSQLBuffer) + 44;
- if (len >= sizeof (YSI_g_sSQLBuffer))
- {
- P:E("Could not save y_users buffer (should not happen).");
- return 0;
- }
- strcat(YSI_g_sSQLBuffer, "ON DUPLICATE KEY UPDATE value=values(value);");
- sql_query(YSI_g_sWriteHandle, YSI_g_sSQLBuffer, QUERY_THREADED, "y_users_SQLCallback", "ir", 3),
- YSI_g_sSQLBuffer[0] = '\0';
- }
- return 1;
- }
- stock Player_SetTag(tag[])
- {
- Player_FlushData();
- sql_escape_string(YSI_g_sWriteHandle, tag, YSI_g_sSQLQuery),
- // Run the second query. Use "INSERT IGNORE" to add the tag only if it
- // doesn't exist already. The length check here is wrong, but making it
- // correct would take more effort and we've already checked the length.
- // This stores the tagid in to a global MySQL variable.
- format(YSI_g_sSQLBuffer, sizeof (YSI_g_sSQLBuffer),
- "INSERT IGNORE INTO y_users_modes(tag,mode)VALUES('%s','" #MODE_NAME "');" \
- "SELECT @T:=tagid FROM y_users_modes WHERE tag='%s'&&mode='" #MODE_NAME "';",
- YSI_g_sSQLQuery, YSI_g_sSQLQuery),
- sql_query(YSI_g_sWriteHandle, YSI_g_sSQLBuffer, QUERY_THREADED, "y_users_SQLCallback", "ir", 4),
- YSI_g_sSQLBuffer[0] = '\0';
- }
- stock Player_DeleteTag(tag[])
- {
- // Uses "CASCADE ON DELETE".
- sql_escape_string(YSI_g_sWriteHandle, tag, YSI_g_sSQLQuery),
- format(YSI_g_sSQLQuery, sizeof (YSI_g_sSQLQuery), "DELETE FROM y_users_modes WHERE tag='%s' && mode='" #MODE_NAME "';", YSI_g_sSQLQuery),
- sql_query(YSI_g_sWriteHandle, YSI_g_sSQLQuery, QUERY_THREADED, "y_users_SQLCallback", "ir", 5);
- // Any future data written to this tag will just fail the constraint.
- }
- stock Player_SaveData(playerid, bool:logout = false)
- {
- // Just in case they decide to save a player's data in the middle of another
- // player's data being saved...
- new
- stk = YSI_g_sCurrentYID;
- if (YSI_g_sPlayerYID[playerid] > 0)
- {
- // Flush any old data.
- Player_FlushData();
- // New player's data.
- YSI_g_sCurrentYID = YSI_g_sPlayerYID[playerid];
- Player_SetTag("");
- CallLocalFunction("OnSavePlayerData", "ii", playerid, YSI_g_sCurrentYID);
- if (logout)
- {
- Player_SetTag("");
- call OnPlayerLogout(playerid, YSI_g_sCurrentYID);
- }
- // Flush new data.
- Player_FlushData();
- }
- YSI_g_sCurrentYID = stk;
- }
- /**--------------------------------------------------------------------------**\
- <summary>Player_HashPass</summary>
- <param name="pass[]">Data to hash.</param>
- <returns>
- -
- </returns>
- <remarks>
- Based on my Dad's hash system but slightly modifed. Updated for reverse
- compatability with other login systems. Needs more code for Whirlpool.
- </remarks>
- \**--------------------------------------------------------------------------**/
- static stock Player_HashPass(pass[], target[])
- {
- #if defined PP_ADLER32
- new
- s1 = 1,
- s2 = 0,
- i,
- You_REALLY_shouldnt_use_Adler32;
- while (pass[i])
- {
- s1 = (s1 + pass[i++]) % 65521,
- s2 = (s2 + s1) % 65521;
- }
- format(target, sizeof (target), "%" #MAX_PASSWORD_LENGTH "d", (s2 << 16) + s1);
- #elseif defined PP_MD5 && defined MD5_Hash
- new
- You_REALLY_shouldnt_use_MD5;
- strcpy(target, MD5_Hash(pass, strlen(pass)));
- #elseif defined PP_SHA1
- #error SHA1 unsupported.
- #elseif defined PP_YSI
- static
- charset[] = "A,UbRgdnS#|rT_%5+ZvEK¬NF<9¦IH[(C)2O07 Y-Less]$Qw^?/om4;@'8k£Pp.c{&l\\3zay>DfxV:WXjuG6*!1\"i~=Mh`JB}qt",
- css = 99;
- new
- //target[MAX_PASSWORD_LENGTH + 1],
- j,
- sum = j,
- tmp = 0,
- i,
- mod;
- j = strlen(pass);
- for (i = 0; i < MAX_PASSWORD_LENGTH || i < j; i++)
- {
- mod = i % MAX_PASSWORD_LENGTH,
- tmp = (i >= j) ? charset[(7 * i) % css] : pass[i],
- sum = (sum + chrfind(tmp, charset) + 1) % css,
- target[mod] = charset[(sum + target[mod]) % css];
- }
- target[MAX_PASSWORD_LENGTH] = '\0';
- //return target;
- #elseif defined WP_Hash
- WP_Hash(target, MAX_PASSWORD_LENGTH + 1, pass);
- #else
- #error Whirlpool (or other) hash not found.
- #endif
- }
- // Hooray for bizare bugs! I think this is because the function above is
- // secretly a macro with "if/else" and a block statement, not a real function.
- // Only now it isn't, but honestly I'm no longer sure what this was fixing or if
- // it is still needed or not. Even if it isn't there's no point removing it as
- // it was clearly important at some point in the past!
- stock Player_SomeWeirdBugFix()
- {
- }
- /**--------------------------------------------------------------------------**\
- <summary>Player_TryRegister</summary>
- <param name="playerid">Player who is registering.</param>
- <param name="string:password[]">The password they entered.</param>
- <returns>
- -
- </returns>
- <remarks>
- Register the player with the given password if there is no-one else with the
- name already. Or log them in if the username and password match an existing
- account. Note that there is no "Player_ForceRegister" as it would do the
- same thing with no less parameters (a password MUST be given to write in the
- file).
- </remarks>
- \**--------------------------------------------------------------------------**/
- global Player_TryRegister(playerid, string:password[])
- {
- P:2("Player_TryRegister called");
- if (Player_IsLoggedIn(playerid))
- {
- // They are already logged in.
- Text_Send(playerid, $YSI_LOGIN_ALREADY);
- return 1;
- }
- new
- hash[MAX_PASSWORD_LENGTH + 1 + 8];
- Player_HashPass(password, hash);
- switch (YSI_g_sPreloadData[playerid][E_USER_PRELOAD_YID])
- {
- case -1:
- {
- Text_Send(playerid, $YSI_LOGIN_INDERR);
- return 0;
- }
- case 0:
- {
- }
- default:
- {
- // Get the salt.
- format(hash[MAX_PASSWORD_LENGTH], sizeof (hash) - MAX_PASSWORD_LENGTH, "%04x%04x", YSI_g_sPreloadData[playerid][E_USER_PRELOAD_DATE] >>> 16, YSI_g_sPreloadData[playerid][E_USER_PRELOAD_DATE] & 0xFFFF);
- Player_HashPass(hash, hash);
- // Match the password.
- if (!strcmp(YSI_g_sPreloadData[playerid][E_USER_PRELOAD_PASS], hash, false, MAX_PASSWORD_LENGTH) && YSI_g_sPreloadData[playerid][E_USER_PRELOAD_PASS][0])
- {
- // Extract the uid and call in to the login code.
- YSI_g_sPreloadData[playerid][E_USER_PRELOAD_PASS] = '\0';
- Langs_SetPlayerLanguage(playerid, YSI_g_sPreloadData[playerid][E_USER_PRELOAD_LANG]);
- broadcastfunc Player_DoLogin(playerid, YSI_g_sPreloadData[playerid][E_USER_PRELOAD_YID]);
- Text_Send(playerid, $YSI_LOGIN_LOGIN);
- return 1;
- }
- else
- {
- Text_Send(playerid, $YSI_REG_TAKEN);
- return 0;
- }
- }
- }
- // Flush pending updates as we need to use "YSI_g_sSQLBuffer", mainly
- // (entirely) because the hash pushes us well over the 256 limit for using
- // "YSI_g_sSQLQuery" so we need the larger buffer.
- Player_FlushData();
- new
- name[MAX_PLAYER_NAME + 1];
- GetPlayerName(playerid, name, sizeof (name)),
- sql_escape_string(YSI_g_sWriteHandle, name, name);
- // Hash the password a second time.
- new
- d = gettime(),
- date[9];
- format(date, sizeof (date), "%04x%04x", d >>> 16, d & 0xFFFF),
- strcat(hash, date),
- Player_HashPass(hash, hash),
- // Create a new YID, then associate this name with it.
- format(YSI_g_sSQLBuffer, sizeof (YSI_g_sSQLBuffer),
- "INSERT INTO y_users_preload VALUES (DEFAULT, '%s', '%s', 0, 0x%s, 0, 0, 0);" \
- "SELECT @Y:=LAST_INSERT_ID();" \
- "INSERT INTO y_users_users VALUES ('%s', @Y);" \
- "SELECT @Y;",
- hash, Langs_GetCode(Langs_GetPlayerLanguage(playerid)), date, name);
- new
- Result:r = sql_query(YSI_g_sWriteHandle, YSI_g_sSQLBuffer);
- YSI_g_sSQLBuffer[0] = '\0';
- if (sql_error(r))
- {
- sql_error_string(r, YSI_g_sSQLQuery),
- P:E("SQL Error: %s", YSI_g_sSQLQuery);
- return
- Text_Send(playerid, $YSI_ADDU_INDER2),
- sql_free_result(r),
- 0;
- }
- sql_get_field(r, 0, name),
- sql_free_result(r),
- broadcastfunc Player_DoLogin(playerid, strval(name)),
- Text_Send(playerid, $YSI_LOGIN_LOGIN);
- return 1;
- }
- #endinput
- global Player_ChangePassword(playerid, string:password[])
- {
- #pragma unused password
- new
- uid = Player_GetYID(playerid);
- if (uid <= 0)
- {
- return 0;
- }
- // Create the new password.
- new
- hash[MAX_PASSWORD_LENGTH + 8 + 1];
- Player_HashPass(password, hash);
- format(hash[MAX_PASSWORD_LENGTH], sizeof (hash) - MAX_PASSWORD_LENGTH, "%04x%04x", YSI_g_sPreloadData[playerid][E_USER_PRELOAD_DATE] >>> 16, YSI_g_sPreloadData[playerid][E_USER_PRELOAD_DATE] & 0xFFFF);
- Player_HashPass(hash, YSI_g_sPreloadData[playerid][E_USER_PRELOAD_PASS]);
- // Save it.
- Player_RewritePreload(playerid);
- // Wipe it.
- memset(YSI_g_sPreloadData[playerid][E_USER_PRELOAD_PASS], 0, MAX_PASSWORD_LENGTH);
- return 1;
- }
- /**--------------------------------------------------------------------------**\
- <summary>Player_RewritePreload</summary>
- <param name="playerid">Player whose data should be saved.</param>
- <returns>
- -
- </returns>
- <remarks>
- When a player's preload data is modifed (new bit data or changed password),
- it needs to be written back out to file.
- </remarks>
- \**--------------------------------------------------------------------------**/
- static stock Player_RewritePreload(playerid)
- {
- if (YSI_g_sPreloadData[playerid][E_USER_PRELOAD_YID] <= 0)
- {
- return 0;
- }
- // First, find the player's file. This should be the ONLY place where the
- // password is to be loaded.
- new
- name[MAX_PLAYER_NAME + 1];
- GetPlayerName(playerid, name, sizeof (name));
- P:4("Player_RewritePreload called: %s", name);
- #if _YSI_PLUGINS_MYSQL == 7
- // Right then, lets get coding...
- new
- query[110];
- mysql_format(YSI_g_sMySQL, query, "SELECT `uid`, `language`, `hash` FROM `y_users_register` WHERE `name` = '%e' LIMIT 1", name);
- mysql_function_query(YSI_g_sMySQL, query, true, "_Player_Preload", "ii", );
- #else
- new
- namelen = strlen(name),
- filename[] = USER_FILE_PATH "ind_X.YSI",
- File:fIndex;
- Player_GetIndexFile(filename, name[0]);
- fIndex = fopen(filename, io_readwrite);
- if (fIndex)
- {
- P:5("Player_RewritePreload: fIndex OK");
- new
- line[INDEX_DATA_LINE_LENGTH],
- len;
- while ((len = fread(fIndex, line)))
- {
- P:6("Player_RewritePreload: while");
- // Check if the line is the right length (could be one of three
- // lengths depending on newlines). Skip blanks.
- if (len < INDEX_DATA_LINE_LENGTH - 3)
- {
- continue;
- }
- P:6("Player_RewritePreload: Not len");
- // Check the name on the line.
- if (!strcmp(line[MAX_INDEX_LENGTH + 1], name, false, namelen) && line[MAX_INDEX_LENGTH + 1 + namelen] == ' ')
- {
- P:6("Player_RewritePreload: checked name");
- fseek(fIndex, -len, seek_current);
- format(line, sizeof (line),
- "%0" #MAX_INDEX_LENGTH "d %" #MAX_PLAYER_NAME "s %" #MAX_PASSWORD_LENGTH "s %02s %04x%04x %04x%04x" INI_NEW_LINE,
- YSI_g_sPreloadData[playerid][E_USER_PRELOAD_YID],
- name,
- YSI_g_sPreloadData[playerid][E_USER_PRELOAD_PASS],
- Langs_GetCode(Langs_GetPlayerLanguage(playerid)),
- YSI_g_sPreloadData[playerid][E_USER_PRELOAD_BITS] >>> 16, YSI_g_sPreloadData[playerid][E_USER_PRELOAD_BITS] & 0xFFFF,
- YSI_g_sPreloadData[playerid][E_USER_PRELOAD_DATE] >>> 16, YSI_g_sPreloadData[playerid][E_USER_PRELOAD_DATE] & 0xFFFF);
- P:5("Player_RewritePreload: Writing: %s", line);
- fwrite(fIndex, line);
- fclose(fIndex);
- return 1;
- }
- }
- fclose(fIndex);
- }
- else if (fexist(filename))
- {
- P:E("Error reading index %c.", filename[0]);
- return 0;
- }
- //ret[E_USER_PRELOAD_YID] = 0;
- #endif
- return 0;
- }
- /**--------------------------------------------------------------------------**\
- <summary>Player_TryGroup</summary>
- <param name="playerid">Player who is joining a group.</param>
- <param name="string:other[]">A player name already in the group.</param>
- <param name="string:password[]">The password of the group.</param>
- <returns>
- -
- </returns>
- <remarks>
- Links a player with an existing player such that they share all stats.
- </remarks>
- \**--------------------------------------------------------------------------**/
- global Player_TryGroup(playerid, string:other[], string:password[])
- {
- P:2("Player_TryGroup called");
- if (Player_IsLoggedIn(playerid))
- {
- // They are already logged in.
- Text_Send(playerid, $YSI_LOGIN_ALREADY);
- return 1;
- }
- switch (YSI_g_sPreloadData[playerid][E_USER_PRELOAD_YID])
- {
- case -1:
- {
- Text_Send(playerid, $YSI_LOGIN_INDERR);
- return 0;
- }
- case 0:
- {
- }
- default:
- {
- Text_Send(playerid, $YSI_REG_TAKEN);
- return 0;
- }
- }
- // Check if the new data matches the old.
- new
- ret[E_USER_PRELOAD];
- Player_Preload(other, ret);
- switch (ret[E_USER_PRELOAD_YID])
- {
- case -1:
- {
- Text_Send(playerid, $YSI_LOGIN_INDERR);
- }
- case 0:
- {
- Text_Send(playerid, $YSI_LOGIN_NOTF);
- }
- default:
- {
- new
- hash[MAX_PASSWORD_LENGTH + 1 + 8],
- d = ret[E_USER_PRELOAD_DATE],
- date[9];
- // Hash the password twice, second time with the salt.
- Player_HashPass(password, hash),
- format(date, sizeof (date), "%04x%04x", d >>> 16, d & 0xFFFF),
- strcat(hash, date),
- Player_HashPass(hash, hash);
- // Match the password.
- if (!strcmp(ret[E_USER_PRELOAD_PASS], hash, false, MAX_PASSWORD_LENGTH) && ret[E_USER_PRELOAD_PASS][0])
- {
- new
- name[MAX_PLAYER_NAME + 1];
- GetPlayerName(playerid, name, sizeof (name)),
- sql_escape_string(YSI_g_sWriteHandle, name, name),
- format(YSI_g_sSQLQuery, sizeof (YSI_g_sSQLQuery),
- "INSERT INTO y_users_users VALUES ('%s', %d);",
- name, ret[E_USER_PRELOAD_YID]);
- new
- Result:r = sql_query(YSI_g_sWriteHandle, YSI_g_sSQLQuery);
- if (sql_error(r))
- {
- sql_error_string(r, YSI_g_sSQLQuery),
- P:E("SQL Error: %s", YSI_g_sSQLQuery);
- return
- Text_Send(playerid, $YSI_ADDU_INDER2),
- sql_free_result(r),
- 0;
- }
- sql_free_result(r),
- // Copy over the preload data.
- YSI_g_sPreloadData[playerid] = ret,
- broadcastfunc Player_DoLogin(playerid, ret[E_USER_PRELOAD_YID]),
- Text_Send(playerid, $YSI_LOGIN_LOGIN);
- }
- else
- {
- Text_Send(playerid, $YSI_LOGIN_WRONG);
- return 0;
- }
- }
- }
- return 1;
- }
- /**--------------------------------------------------------------------------**\
- <summary>Player_ForceGroup</summary>
- <param name="playerid">Player who is joining a group.</param>
- <param name="string:other[]">A player name already in the group.</param>
- <returns>
- -
- </returns>
- <remarks>
- Like "Player_TryGroup", but doesn't take a password and instead just uses
- the password of the old player (hashed).
- </remarks>
- \**--------------------------------------------------------------------------**/
- global Player_ForceGroup(playerid, string:other[])
- {
- P:2("Player_ForceGroup called");
- if (Player_IsLoggedIn(playerid))
- {
- // They are already logged in.
- Text_Send(playerid, $YSI_LOGIN_ALREADY);
- return 1;
- }
- switch (YSI_g_sPreloadData[playerid][E_USER_PRELOAD_YID])
- {
- case -1:
- {
- Text_Send(playerid, $YSI_LOGIN_INDERR);
- return 0;
- }
- case 0:
- {
- }
- default:
- {
- Text_Send(playerid, $YSI_REG_TAKEN);
- return 0;
- }
- }
- // Check if the new data matches the old.
- new
- ret[E_USER_PRELOAD];
- Player_Preload(other, ret);
- switch (ret[E_USER_PRELOAD_YID])
- {
- case -1:
- {
- Text_Send(playerid, $YSI_LOGIN_INDERR);
- }
- case 0:
- {
- Text_Send(playerid, $YSI_LOGIN_NOTF);
- }
- default:
- {
- new
- name[MAX_PLAYER_NAME + 1];
- GetPlayerName(playerid, name, sizeof (name)),
- sql_escape_string(YSI_g_sWriteHandle, name, name),
- format(YSI_g_sSQLQuery, sizeof (YSI_g_sSQLQuery),
- "INSERT INTO y_users_users VALUES ('%s', %d);",
- name, ret[E_USER_PRELOAD_YID]);
- new
- Result:r = sql_query(YSI_g_sWriteHandle, YSI_g_sSQLQuery);
- if (sql_error(r))
- {
- sql_error_string(r, YSI_g_sSQLQuery),
- P:E("SQL Error: %s", YSI_g_sSQLQuery);
- return
- Text_Send(playerid, $YSI_ADDU_INDER2),
- sql_free_result(r),
- 0;
- }
- sql_free_result(r),
- // Copy over the preload data.
- YSI_g_sPreloadData[playerid] = ret,
- broadcastfunc Player_DoLogin(playerid, ret[E_USER_PRELOAD_YID]),
- Text_Send(playerid, $YSI_LOGIN_LOGIN);
- }
- }
- return 1;
- }
|