IsleHorse/HorseIsleWeb
1
0
Fork 0
mirror of https://silica.codes/islehorse/HorseIsleWeb.git synced 2025-04-06 21:25:48 +12:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add files via upload

Browse source
This commit is contained in:
Bluzume 2021-10-28 17:20:53 +13:00 • committed by GitHub
parent c632c19c34
commit fb0a78cf76
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
17 changed files with 1808 additions and 1799 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
game-site/account.php
View file

@ -41,7 +41,7 @@ if(!is_logged_in() && isset($_GET["SLID"], $_GET["C"]))
$hmac = GenHmacMessage((string)$id, "CrossSiteLogin"); $hmac = GenHmacMessage((string)$id, "CrossSiteLogin");
$hmacSent = bin2hex(base64_url_decode($code)); $hmacSent = bin2hex(base64_url_decode($code));
if(hash_equals($hmacSent,$hmac)) if(hash_equals($hmacSent,$hmac) && userid_exists($dbname, $id))
{ {
$_SESSION['LOGGED_IN'] = "YES"; $_SESSION['LOGGED_IN'] = "YES";
$_SESSION['PLAYER_ID'] = $id; $_SESSION['PLAYER_ID'] = $id;

23
game-site/web/crosserver.php
View file

@ -8,7 +8,8 @@ function GenHmacMessage(string $data, string $channel)
echo("<h1>Set \$hmac_secret in config.php!</h1>"); echo("<h1>Set \$hmac_secret in config.php!</h1>");
exit(); exit();
} }
$hmac = hash_hmac('sha256', $data, $hmac_secret.$channel.$_SERVER['REMOTE_ADDR'].date('mdy')); $secret = $hmac_secret.$channel.$_SERVER['REMOTE_ADDR'].date('mdy');
$hmac = hash_hmac('sha256', $data, $secret);
return $hmac; return $hmac;
} }
@ -221,7 +222,7 @@ function addItemToPuchaseQueue($database, $playerId, $itemId, $itemCount)
$stmt->bind_param("iii", $playerId, $itemId, $itemCount); $stmt->bind_param("iii", $playerId, $itemId, $itemCount);
$stmt->execute(); $stmt->execute();
$result = $stmt->get_result(); $result = $stmt->get_result();
mysqli_close($connect);
} }
function getUserSubbed($database, $id) function getUserSubbed($database, $id)
@ -233,9 +234,10 @@ function getUserSubbed($database, $id)
$stmt->bind_param("i", $id); $stmt->bind_param("i", $id);
$stmt->execute(); $stmt->execute();
$result = $stmt->get_result(); $result = $stmt->get_result();
$subbed = $result->fetch_row()[0] == "YES";
mysqli_close($connect);
return $result->fetch_row()[0] == "YES"; return $subbed;
} }
function isUserOnline($database, $id) function isUserOnline($database, $id)
@ -249,6 +251,8 @@ function isUserOnline($database, $id)
$stmt->execute(); $stmt->execute();
$result = $stmt->get_result(); $result = $stmt->get_result();
$count = intval($result->fetch_row()[0]); $count = intval($result->fetch_row()[0]);
mysqli_close($connect);
return $count>0; return $count>0;
} }
@ -258,7 +262,9 @@ function getNoModPlayersOnlineInServer($database)
$dbname = $database; $dbname = $database;
$connect = mysqli_connect($dbhost, $dbuser, $dbpass,$dbname) or die("Unable to connect to '$dbhost'"); $connect = mysqli_connect($dbhost, $dbuser, $dbpass,$dbname) or die("Unable to connect to '$dbhost'");
$onlineModerators = mysqli_query($connect, "SELECT COUNT(1) FROM OnlineUsers WHERE Moderator = 'YES' OR Admin='YES'"); $onlineModerators = mysqli_query($connect, "SELECT COUNT(1) FROM OnlineUsers WHERE Moderator = 'YES' OR Admin='YES'");
return $onlineModerators->fetch_row()[0]; $num = $onlineModerators->fetch_row()[0];
mysqli_close($connect);
return $num;
} }
function getServerById(string $id) function getServerById(string $id)
@ -283,6 +289,8 @@ function userid_exists(string $database, string $userid)
$stmt->execute(); $stmt->execute();
$result = $stmt->get_result(); $result = $stmt->get_result();
$count = intval($result->fetch_row()[0]); $count = intval($result->fetch_row()[0]);
mysqli_close($connect);
return $count>0; return $count>0;
} }
@ -294,8 +302,8 @@ function createAccountOnServer(string $database)
$id = intval($_SESSION['PLAYER_ID']); $id = intval($_SESSION['PLAYER_ID']);
$username = $_SESSION['USERNAME']; $username = $_SESSION['USERNAME'];
$sex = $_SESSION['SEX']; $sex = $_SESSION['SEX'];
$admin = $_SESSION['ADMIN']; $admin = ($_SESSION['ADMIN'] ? "YES" : "NO");
$mod = $_SESSION['MOD']; $mod = ($_SESSION['MOD'] ? "YES" : "NO");
$passhash = $_SESSION['PASSWORD_HASH']; $passhash = $_SESSION['PASSWORD_HASH'];
$salt = $_SESSION['SALT']; $salt = $_SESSION['SALT'];
@ -304,6 +312,7 @@ function createAccountOnServer(string $database)
$stmt = $connect->prepare("INSERT INTO Users VALUES(?,?,?,?,?,?,?)"); $stmt = $connect->prepare("INSERT INTO Users VALUES(?,?,?,?,?,?,?)");
$stmt->bind_param("issssss", $id, $username, $passhash, $salt, $sex, $admin, $mod); $stmt->bind_param("issssss", $id, $username, $passhash, $salt, $sex, $admin, $mod);
$stmt->execute(); $stmt->execute();
mysqli_close($connect);
} }
# Global Functions # Global Functions