Digitalstack/ZnoteAAC
2
0
Fork 0
mirror of https://github.com/Znote/ZnoteAAC.git synced 2025-04-29 18:59:21 +02:00
Code Issues Packages Projects Releases Wiki Activity

loginWebService type handler

Browse Source 
Fix #380
This commit is contained in:
Znote 2020-06-12 01:45:55 +02:00
parent 9c9941e292
commit 0d3940a0e6
1 changed files with 193 additions and 100 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

293
login.php
View File

@ -2,125 +2,218 @@
require_once 'engine/init.php'; require_once 'engine/init.php';
// Client 11 loginWebService // Client 11 loginWebService
// DEV: Uncomment all //error_log lines and tail error.log file to see communication from and to client.
// ...: Configure webserver to don't display PHP errors/warnings so the client can parse the json response.
if($_SERVER['HTTP_USER_AGENT'] == "Mozilla/5.0" && $config['ServerEngine'] === 'TFS_10' && $config['login_web_service'] == true) { if($_SERVER['HTTP_USER_AGENT'] == "Mozilla/5.0" && $config['ServerEngine'] === 'TFS_10' && $config['login_web_service'] == true) {
function jsonError($message, $code = 3) { function sendError($message, $code = 3) {
die(json_encode(array('errorCode' => $code, 'errorMessage' => $message))); $response = json_encode(array('errorCode' => $code, 'errorMessage' => $message));
//error_log("\nServer = " . $response . "\n-");
die($response);
} }
function sendMessage($message) {
$response = json_encode($message);
//error_log("\nServer = " . $response . "\n\n-");
die($response);
}
header("Content-Type: application/json"); header("Content-Type: application/json");
$input = file_get_contents("php://input"); $input = file_get_contents("php://input");
//error_log("\n\n\nClient = " . $input . "\n");
// Based on tests, input length should be at least 67+ chars. $client = json_decode($input);
if (strlen($input) > 10) {
/* {
'accountname' => 'username',
'password' => 'superpass',
'stayloggedin' => true,
'token' => '123123', (or not set)
'type' => 'login', (What other types do we have?)
} */
$jsonObject = json_decode($input);
$username = sanitize($jsonObject->accountname); if (!isset($client->type)) {
$password = SHA1($jsonObject->password); sendError("Type missing.");
$token = (isset($jsonObject->token)) ? sanitize($jsonObject->token) : false; }
$fields = '`id`, `premdays`';
if ($config['twoFactorAuthenticator']) $fields .= ', `secret`';
$account = mysql_select_single("SELECT {$fields} FROM `accounts` WHERE `name`='{$username}' AND `password`='{$password}' LIMIT 1;"); switch($client->type) {
if ($account === false) { // {"count":0,"isreturner":true,"offset":0,"showrewardnews":false,"type":"news"}
jsonError('Wrong username and/or password.'); case "cacheinfo":
} // {"type":"cacheinfo"}
sendMessage(array(
'playersonline' => user_count_online(),
'twitchstreams' => 0,
'twitchviewer' => 0,
'gamingyoutubestreams' => 0,
'gamingyoutubeviewer' => 0
));
break;
if ($config['twoFactorAuthenticator'] === true && $account['secret'] !== null) { case 'eventschedule':
if ($token === false) { // {"type":"eventschedule"}
jsonError('Submit a valid two-factor authentication token.', 6); sendMessage(array(
} else { 'eventlist' => array()
require_once("engine/function/rfc6238.php"); ));
if (TokenAuth6238::verify($account['secret'], $token) !== true) { /*
jsonError('Two-factor authentication failed, token is wrong.', 6); array(
array(
'description' => "Description text.\n\nTest",
'startdate' => 1590979202,
'colordark' => "#735D10", // HEX color code
'name' => "Full Moon",
'enddate' => 1590979202 + (300 * 24 * 60 * 60),
'isseasonal' => false,
'colorlight' => "#8B6D05"
),
array(
'description' => "Winterberries can now be found all over Tibia!",
'startdate' => 1590979202,
'colordark' => "#7A4C1F",
'name' => "Annual Autumn Vintage",
'enddate' => 1590979202 + (7 * 24 * 60 * 60),
'isseasonal' => false,
'colorlight' => "#935416"
),
array(
'description' => "This is the time of witches, ghosts and vampires.",
'startdate' => 1590979202,
'colordark' => "#235c00",
'name' => "Halloween Event",
'enddate' => 1590979202 + (30 * 24 * 60 * 60),
'isseasonal' => false,
'colorlight' => "#2d7400"
)
)
*/
break;
case 'boostedcreature':
// {"type":"boostedcreature"}
sendMessage(array(
//'boostedcreature' => false,
'raceid' => 219
));
break;
case 'news':
// {"count":0,"isreturner":true,"offset":0,"showrewardnews":false,"type":"news"}
sendMessage(array(
'gamenews' => array(), // element structure?
'categorycounts' => array(
'support' => 1,
'game contents' => 2,
'useful info' => 3,
'major updates' => 4,
'client features' => 5
),
'maxeditdate' => 1590979202
));
break;
case "login":
/* {
'accountname' => 'username',
'password' => 'superpass',
'stayloggedin' => true,
'token' => '123123', (or not set)
'type' => 'login',
} */
$username = sanitize($client->accountname);
$password = SHA1($client->password);
$token = (isset($client->token)) ? sanitize($client->token) : false;
$fields = '`id`, `premdays`';
if ($config['twoFactorAuthenticator']) $fields .= ', `secret`';
$account = mysql_select_single("SELECT {$fields} FROM `accounts` WHERE `name`='{$username}' AND `password`='{$password}' LIMIT 1;");
if ($account === false) {
sendError('Wrong username and/or password.');
}
if ($config['twoFactorAuthenticator'] === true && $account['secret'] !== null) {
if ($token === false) {
sendError('Submit a valid two-factor authentication token.', 6);
} else {
require_once("engine/function/rfc6238.php");
if (TokenAuth6238::verify($account['secret'], $token) !== true) {
sendError('Two-factor authentication failed, token is wrong.', 6);
}
} }
} }
}
$players = mysql_select_multi("SELECT `name`, `sex`, `level`, `vocation`, `lookbody`, `looktype`, `lookhead`, `looklegs`, `lookfeet`, `lookaddons`, `deletion` FROM `players` WHERE `account_id`='".$account['id']."';"); $players = mysql_select_multi("SELECT `name`, `sex`, `level`, `vocation`, `lookbody`, `looktype`, `lookhead`, `looklegs`, `lookfeet`, `lookaddons`, `deletion` FROM `players` WHERE `account_id`='".$account['id']."';");
if ($players !== false) { if ($players !== false) {
$gameserver = $config['gameserver']; $gameserver = $config['gameserver'];
// todo: Fix dynamic desition to pass along token. (and verify that it works). Hostname: otx11.lan // todo: Fix dynamic desition to pass along token. (and verify that it works). Hostname: otx11.lan
$sessionKey = $username."\n".$jsonObject->password; $sessionKey = $username."\n".$client->password;
if (strlen($account['secret']) > 5) $sessionKey .= "\n".$token."\n".floor(time() / 30); if (isset($account['secret']) && strlen($account['secret']) > 5) $sessionKey .= "\n".$token."\n".floor(time() / 30);
$response = array(
'session' => array( $response = array(
'fpstracking' => false, 'session' => array(
'optiontracking' => false, 'fpstracking' => false,
'isreturner' => true, 'optiontracking' => false,
'returnernotification' => false, 'isreturner' => true,
'showrewardnews' => false, 'returnernotification' => false,
'tournamentticketpurchasestate' => 0, 'showrewardnews' => false,
'emailcoderequest' => false, 'tournamentticketpurchasestate' => 0,
'sessionkey' => $sessionKey, 'emailcoderequest' => false,
'lastlogintime' => 0, 'sessionkey' => $sessionKey,
'ispremium' => ($account['premdays'] > 0) ? true : false, 'lastlogintime' => 0,
'premiumuntil' => time() + ($account['premdays'] * 86400), 'ispremium' => ($account['premdays'] > 0) ? true : false,
'status' => 'active' 'premiumuntil' => time() + ($account['premdays'] * 86400),
), 'status' => 'active'
'playdata' => array(
'worlds' => array(
array(
'id' => 0,
'name' => $gameserver['name'],
'externaladdress' => $gameserver['ip'],
'externalport' => $gameserver['port'],
'previewstate' => 0,
'location' => 'ALL',
'pvptype' => 'pvp',
'externaladdressunprotected' => $gameserver['ip'],
'externaladdressprotected' => $gameserver['ip'],
'externalportunprotected' => $gameserver['port'],
'externalportprotected' => $gameserver['port'],
'istournamentworld' => false,
'restrictedstore' => false,
'currenttournamentphase' => 2,
'anticheatprotection' => false
)
), ),
'characters' => array( 'playdata' => array(
//array( 'worldid' => ASD, 'name' => asd, 'ismale' => true, 'tutorial' => false ), 'worlds' => array(
array(
'id' => 0,
'name' => $gameserver['name'],
'externaladdress' => $gameserver['ip'],
'externalport' => $gameserver['port'],
'previewstate' => 0,
'location' => 'ALL',
'pvptype' => 'pvp',
'externaladdressunprotected' => $gameserver['ip'],
'externaladdressprotected' => $gameserver['ip'],
'externalportunprotected' => $gameserver['port'],
'externalportprotected' => $gameserver['port'],
'istournamentworld' => false,
'restrictedstore' => false,
'currenttournamentphase' => 2,
'anticheatprotection' => false
)
),
'characters' => array(
//array( 'worldid' => ASD, 'name' => asd, 'ismale' => true, 'tutorial' => false ),
)
) )
)
);
foreach ($players as $player) {
$response['playdata']['characters'][] = array(
'worldid' => 0,
'name' => $player['name'],
'ismale' => ($player['sex'] === 1) ? true : false,
'tutorial' => false,
'level' => intval($player['level']),
'vocation' => vocation_id_to_name($player['vocation']),
'outfitid' => intval($player['looktype']),
'headcolor' => intval($player['lookhead']),
'torsocolor' => intval($player['lookbody']),
'legscolor' => intval($player['looklegs']),
'detailcolor' => intval($player['lookfeet']),
'addonsflags' => intval($player['lookaddons']),
'ishidden' => intval($player['deletion']) === 1,
'istournamentparticipant' => false,
'remainingdailytournamentplaytime' => 0
); );
}
//error_log("= SESSION KEY: " . $response['session']['sessionkey']); foreach ($players as $player) {
die(json_encode($response)); $response['playdata']['characters'][] = array(
} else { 'worldid' => 0,
jsonError("Character list is empty."); 'name' => $player['name'],
} 'ismale' => ($player['sex'] === 1) ? true : false,
} else { 'tutorial' => false,
jsonError("Unrecognized event."); 'level' => intval($player['level']),
'vocation' => vocation_id_to_name($player['vocation']),
'outfitid' => intval($player['looktype']),
'headcolor' => intval($player['lookhead']),
'torsocolor' => intval($player['lookbody']),
'legscolor' => intval($player['looklegs']),
'detailcolor' => intval($player['lookfeet']),
'addonsflags' => intval($player['lookaddons']),
'ishidden' => intval($player['deletion']) === 1,
'istournamentparticipant' => false,
'remainingdailytournamentplaytime' => 0
);
}
sendMessage($response);
} else {
sendError("Character list is empty.");
}
break;
default:
sendError("Unsupported type: " . sanitize($client->type));
} }
} // End client 11 loginWebService } // End client 11 loginWebService
logged_in_redirect(); logged_in_redirect();