var mysql = require("mysql"); var hashlib = require("node_hash"); var bcrypt = require("bcrypt"); var $util = require("./utilities"); var Logger = require("./logger"); var Database = function (cfg) { var self = this; self.cfg = cfg; self.pool = mysql.createPool({ host: cfg["mysql-server"], user: cfg["mysql-user"], password: cfg["mysql-pw"], database: cfg["mysql-db"], multipleStatements: true }); // Test the connection self.pool.getConnection(function (err, conn) { if(err) { Logger.errlog.log("! DB connection failed"); return; } else { self.init(); } }); self.global_ipbans = {}; }; Database.prototype.query = function (query, sub, callback) { // 2nd argument is optional if(typeof sub === "function") { callback = sub; sub = false; } if(typeof callback !== "function") callback = blackHole; var self = this; self.pool.getConnection(function (err, conn) { if(err) { Logger.errlog.log("! DB connection failed: " + err); callback("Database failure", null); } else { function cback(err, res) { if(err) { Logger.errlog.log("! DB query failed: " + query); if(sub) Logger.errlog.log("Substitutions: " + sub); Logger.errlog.log(err); callback("Database failure", null); } else { callback(null, res); } conn.end(); } if(sub) { conn.query(query, sub, cback); } else { conn.query(query, cback); } } }); }; function blackHole() { } Database.prototype.init = function () { var self = this; var query; // Create channel table query = ["CREATE TABLE IF NOT EXISTS `channels` (", "`id` INT NOT NULL AUTO_INCREMENT,", "`name` VARCHAR(255) NOT NULL,", "`owner` VARCHAR(20) NOT NULL,", "PRIMARY KEY(`id`))", "ENGINE = MyISAM ", "CHARACTER SET utf8;"].join(""); self.query(query, function (err, res) { if(err) { Logger.errlog.log("! Failed to create channels table"); } }); // Create registration table query = ["CREATE TABLE IF NOT EXISTS `registrations` (", "`id` INT NOT NULL AUTO_INCREMENT,", "`uname` VARCHAR(20) NOT NULL,", "`pw` VARCHAR(64) NOT NULL,", "`global_rank` INT NOT NULL,", "`session_hash` VARCHAR(64) NOT NULL,", "`expire` BIGINT NOT NULL,", "`profile_image` VARCHAR(255) NOT NULL,", "`profile_text` TEXT NOT NULL,", "`email` VARCHAR(255) NOT NULL,", "PRIMARY KEY (`id`))", "ENGINE = MyISAM ", "CHARACTER SET utf8;"].join(""); self.query(query, function (err, res) { if(err) { Logger.errlog.log("! Failed to create registration table"); } }); // Create global bans table query = ["CREATE TABLE IF NOT EXISTS `global_bans` (", "`ip` VARCHAR(15) NOT NULL,", "`note` VARCHAR(255) NOT NULL,", "PRIMARY KEY (`ip`))", "ENGINE = MyISAM ", "CHARACTER SET utf8;"].join(""); self.query(query, function (err, res) { if(err) { Logger.errlog.log("! Failed to create global ban table"); } }); // Create password reset table query = ["CREATE TABLE IF NOT EXISTS `password_reset` (", "`ip` VARCHAR(15) NOT NULL,", "`name` VARCHAR(20) NOT NULL,", "`hash` VARCHAR(64) NOT NULL,", "`email` VARCHAR(255) NOT NULL,", "`expire` BIGINT NOT NULL,", "PRIMARY KEY (`name`))", "ENGINE = MyISAM ", "CHARACTER SET utf8;"].join(""); self.query(query, function (err, res) { if(err) { Logger.errlog.log("! Failed to create password reset table"); } }); // Create user playlist table query = ["CREATE TABLE IF NOT EXISTS `user_playlists` (", "`user` VARCHAR(20) NOT NULL,", "`name` VARCHAR(255) NOT NULL,", "`contents` MEDIUMTEXT NOT NULL,", "`count` INT NOT NULL,", "`time` INT NOT NULL,", "PRIMARY KEY (`user`, `name`))", "ENGINE = MyISAM ", "CHARACTER SET utf8;"].join(""); self.query(query, function (err, res) { if(err) { Logger.errlog.log("! Failed to create user playlist table"); } }); // Create user aliases table query = ["CREATE TABLE IF NOT EXISTS `aliases` (", "`visit_id` INT NOT NULL AUTO_INCREMENT,", "`ip` VARCHAR(15) NOT NULL,", "`name` VARCHAR(20) NOT NULL,", "`time` BIGINT NOT NULL,", "PRIMARY KEY (`visit_id`), INDEX (`ip`))", "ENGINE = MyISAM ", "CHARACTER SET utf8;"].join(""); self.query(query, function (err, res) { if(err) { Logger.errlog.log("! Failed to create user aliases table"); } }); // Create action log table query = ["CREATE TABLE IF NOT EXISTS `actionlog` (", "`ip` VARCHAR(15) NOT NULL,", "`name` VARCHAR(20) NOT NULL,", "`action` VARCHAR(255) NOT NULL,", "`args` TEXT NOT NULL,", "`time` BIGINT NOT NULL,", "PRIMARY KEY (`ip`, `time`), INDEX (`action`))", "ENGINE = MyISAM ", "CHARACTER SET utf8;"].join(""); self.query(query, function (err, res) { if(err) { Logger.errlog.log("! Failed to create action log table"); } }); // Create stats table query = ["CREATE TABLE IF NOT EXISTS `stats` (", "`time` BIGINT NOT NULL,", "`usercount` INT NOT NULL,", "`chancount` INT NOT NULL,", "`mem` INT NOT NULL,", "PRIMARY KEY (`time`))", "ENGINE = MyISAM ", "CHARACTER SET utf8;"].join(""); self.query(query, function (err, res) { if(err) { Logger.errlog.log("! Failed to create stats table"); } }); // Refresh global IP bans self.listGlobalIPBans(); }; /* REGION global bans */ Database.prototype.isGlobalIPBanned = function (ip, callback) { if(typeof callback !== "function") return; const re = /(\d+)\.(\d+)\.(\d+)\.(\d+)/; // Account for range banning var s16 = ip.replace(re, "$1.$2"); var s24 = ip.replace(re, "$1.$2.$3"); var banned = ip in this.global_ipbans || s16 in this.global_ipbans || s24 in this.global_ipbans; callback(null, banned); }; Database.prototype.listGlobalIPBans = function (callback) { var self = this; if(typeof callback !== "function") callback = blackHole; self.query("SELECT * FROM global_bans WHERE 1", function (err, res) { if(err) { callback(err, null); return; } self.global_ipbans = {}; for(var i in res) { self.global_ipbans[res[i].ip] = res[i].note; } callback(null, self.global_ipbans); }); }; Database.prototype.setGlobalIPBan = function (ip, reason, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; var query = "INSERT INTO global_bans VALUES (?, ?)" + " ON DUPLICATE KEY UPDATE note=?"; self.query(query, [ip, reason, reason], function (err, res) { if(err) { callback(err, null); return; } self.listGlobalIPBans(); callback(null, res); }); }; Database.prototype.clearGlobalIPBan = function (ip, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; var query = "DELETE FROM global_bans WHERE ip=?"; self.query(query, [ip], function (err, res) { if(err) { callback(err, null); return; } callback(null, res); }); }; /* END REGION */ /* REGION channels */ Database.prototype.searchChannel = function (field, value, callback) { var self = this; if(typeof callback !== "function") return; var query = "SELECT * FROM channels WHERE "; if(field === "owner") query += "owner LIKE ?"; else if(field === "name") query += "name LIKE ?"; self.query(query, ["%" + value + "%"], callback); }; Database.prototype.channelExists = function (name, callback) { var self = this; if(typeof callback !== "function") return; if(!$util.isValidChannelName(name)) { callback("Invalid channel name", null); return; } var query = "SELECT name FROM channels WHERE name=?"; self.query(query, [name], function (err, res) { callback(err, res.length > 0); }); }; Database.prototype.registerChannel = function (name, owner, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; if(!$util.isValidChannelName(name)) { callback("Invalid channel name", null); return; } // Messy, but I can't think of a better async solution atm var query = "SELECT * FROM channels WHERE name=?"; self.query(query, [name], function (err, res) { if(!err && res.length > 0) { callback("Channel already exists", null); return; } // Library table query = ["CREATE TABLE `chan_" + name + "_library` (", "`id` VARCHAR(255) NOT NULL,", "`title` VARCHAR(255) NOT NULL,", "`seconds` INT NOT NULL,", "`type` VARCHAR(2) NOT NULL,", "PRIMARY KEY (`id`))", "ENGINE = MyISAM ", "CHARACTER SET utf8;"].join(""); self.query(query, function (err, res) { if(err) { callback(err, null); return; } // Rank table query = ["CREATE TABLE `chan_" + name + "_ranks` (", "`name` VARCHAR(32) NOT NULL,", "`rank` INT NOT NULL,", "UNIQUE (`name`))", "ENGINE = MyISAM ", "CHARACTER SET utf8;"].join(""); self.query(query, function (err, res) { if(err) { callback(err, null); return; } // Ban table query = ["CREATE TABLE `chan_" + name + "_bans` (", "`ip` VARCHAR(15) NOT NULL,", "`name` VARCHAR(32) NOT NULL,", "`banner` VARCHAR(32) NOT NULL,", "PRIMARY KEY (`ip`, `name`))", "ENGINE = MyISAM ", "CHARACTER SET utf8;"].join(""); self.query(query, function (err, res) { if(err) { callback(err, null); return; } query = "INSERT INTO channels VALUES (NULL, ?, ?)"; self.query(query, [name, owner], function (err, res) { callback(err, res); }); }); }); }); }); }; Database.prototype.loadChannelData = function (chan, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; if(!$util.isValidChannelName(chan.name)) { callback("Invalid channel name", null); return; } var query = "SELECT * FROM channels WHERE name=?"; self.query(query, [chan.name], function (err, res) { if(err) { callback(err, null); return; } if(res.length == 0) { callback("channel_unregistered", null); return; } if (chan.dead) { callback("channel_dead", null); return; } if(res[0].name != chan.name) chan.name = res[0].name; chan.registered = true; // Load bans query = "SELECT * FROM `chan_" + chan.name + "_bans`"; self.query(query, function (err, res) { if (chan.dead) { callback("channel_dead", null); return; } if(err) { callback(err, null); return; } for(var i in res) { var r = res[i]; if(r.ip === "*") chan.namebans[r.name] = r.banner; else chan.ipbans[r.ip] = [r.name, r.banner]; } chan.logger.log("*** Loaded channel from database"); callback(null, true); }); }); }; Database.prototype.dropChannel = function (name, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; if(!$util.isValidChannelName(name)) { callback("Invalid channel name", null); return; } var query = "DROP TABLE `chan_?_bans`,`chan_?_ranks`,`chan_?_library`" .replace(/\?/g, name); self.query(query, function (err, res) { if(err) { Logger.errlog.log("! Failed to drop channel tables for "+name); callback(err, null); return; } query = "DELETE FROM channels WHERE name=?"; self.query(query, [name], function (err, res) { callback(err, res); if(err) { Logger.errlog.log("! Failed to delete channel "+name); } }); }); }; Database.prototype.getChannelRank = function (channame, name, callback) { var self = this; if(typeof callback !== "function") return; if(!$util.isValidChannelName(channame)) { callback("Invalid channel name", null); return; } var query = "SELECT name, rank FROM `chan_" + channame + "_ranks`" + "WHERE name=?"; self.query(query, [name], function (err, res) { if(err) { Logger.errlog.log("! Failed to lookup " + channame + " ranks"); callback(err, null); return; } if(res.length == 0) callback(null, 0); else callback(null, res[0].rank); }); }; Database.prototype.listChannelUserRanks = function (channame, names, callback) { var self = this; if(typeof callback !== "function") return; if(!$util.isValidChannelName(channame)) { callback("Invalid channel name", null); return; } if(typeof names === "string") names = [names]; // Build the query template (?, ?, ?, ?, ...) var nlist = []; for(var i in names) nlist.push("?"); nlist = "(" + nlist.join(",") + ")"; var query = "SELECT name, rank FROM `chan_" + channame + "_ranks`" + "WHERE name IN " + nlist; self.query(query, names, function (err, res) { if(err) { Logger.errlog.log("! Failed to lookup " + channame + " ranks"); callback(err, null); return; } for(var i in res) res[i] = res[i].rank; callback(null, res); }); }; Database.prototype.setChannelRank = function (channame, name, rank, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; if(!$util.isValidChannelName(channame)) { callback("Invalid channel name", null); return; } var query = "INSERT INTO `chan_" + channame + "_ranks` " + "(name, rank) VALUES (?, ?) " + "ON DUPLICATE KEY UPDATE rank=?"; self.query(query, [name, rank, rank], callback); }; Database.prototype.insertChannelRank = function (channame, name, rank, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; if(!$util.isValidChannelName(channame)) { callback("Invalid channel name", null); return; } var query = "INSERT INTO `chan_" + channame + "_ranks` " + "(name, rank) VALUES (?, ?) " + "ON DUPLICATE KEY UPDATE rank=rank"; self.query(query, [name, rank], callback); }; Database.prototype.listChannelRanks = function (channame, callback) { var self = this; if(typeof callback !== "function") return; if(!$util.isValidChannelName(channame)) { callback("Invalid channel name", null); return; } var query = "SELECT * FROM `chan_" + channame + "_ranks` WHERE 1"; self.query(query, callback); }; Database.prototype.addToLibrary = function (channame, media, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; if(!$util.isValidChannelName(channame)) { callback("Invalid channel name"); return; } var query = "INSERT INTO `chan_" + channame + "_library` " + "(id, title, seconds, type) " + "VALUES (?, ?, ?, ?) " + "ON DUPLICATE KEY UPDATE id=id"; var params = [ media.id, media.title, media.seconds, media.type ]; self.query(query, params, callback); }; Database.prototype.removeFromLibrary = function (channame, id, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; if(!$util.isValidChannelName(channame)) { callback("Invalid channel name", null); return; } var query = "DELETE FROM `chan_" + channame + "_library` WHERE id=?"; self.query(query, [id], callback); }; Database.prototype.getLibraryItem = function (channame, id, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; if(!$util.isValidChannelName(channame)) { callback("Invalid channel name", null); return; } var m = id.match(/([\w-\/\.:]+)/); if (m) { id = m[1]; } else { callback("Invalid ID", null); return; } var query = "SELECT id, title, seconds, type FROM " + "`chan_" + channame + "_library` WHERE id=?"; self.query(query, [id], function (err, res) { if(err) { callback(err, null); return; } callback(null, res.length > 0 ? res[0] : null); }); }; Database.prototype.searchLibrary = function (channame, term, callback) { var self = this; if(typeof callback !== "function") return; if(!$util.isValidChannelName(channame)) { callback("Invalid channel name", null); return; } var query = "SELECT id, title, seconds, type FROM " + "`chan_" + channame + "_library` WHERE title LIKE ?"; self.query(query, ["%" + term + "%"], callback); }; Database.prototype.addChannelBan = function (channame, ip, name, banBy, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; if(!$util.isValidChannelName(channame)) { callback("Invalid channel name", null); return; } var query = "INSERT INTO `chan_" + channame + "_bans`" + "(ip, name, banner) VALUES (?, ?, ?) " + "ON DUPLICATE KEY UPDATE ip=ip"; self.query(query, [ip, name, banBy], callback); }; Database.prototype.clearChannelIPBan = function (channame, ip, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; if(!$util.isValidChannelName(channame)) { callback("Invalid channel name", null); return; } var query = "DELETE FROM `chan_" + channame + "_bans` WHERE ip=?"; self.query(query, [ip], callback); }; Database.prototype.clearChannelNameBan = function (channame, name, callback) { var self = this; if(typeof callback !== "function") { callback = blackHole; return; } var query = "DELETE FROM `chan_" + channame + "_bans` WHERE ip='*'" + "AND name=?"; self.query(query, [name], callback); }; /* END REGION */ /* REGION Auth */ Database.prototype.isUsernameTaken = function (name, callback) { var self = this; if(typeof callback !== "function") return; var query = "SELECT id FROM registrations WHERE uname=?"; self.query(query, [name], function (err, res) { if(err) { callback(err, null); return; } callback(null, res.length > 0); }); }; Database.prototype.registerUser = function (name, pw, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; if(!$util.isValidUserName(name)) { callback("Invalid username", null); return; } var postRegister = function (err, res) { if(err) { callback(err, null); return; } self.createLoginSession(name, function (err, hash) { if(err) { // Don't confuse people into thinking the registration // failed when it was the session that failed callback(null, ""); return; } callback(null, hash); }); }; self.isUsernameTaken(name, function (err, taken) { if(err) { callback(err, null); return; } if(taken) { callback("Username already taken", null); return; } bcrypt.hash(pw, 10, function (err, hash) { if(err) { callback(err, null); return; } var query = "INSERT INTO registrations VALUES " + "(NULL, ?, ?, 1, '', 0, '', '', '')"; self.query(query, [name, hash], postRegister); }); }); }; Database.prototype.userLogin = function (name, pw, session, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; var postLogin = function (err, row) { if(err) { callback(err, null); return; } if(row.session_hash) { callback(null, row); return; } self.createLoginSession(name, function (err, hash) { if(err) { callback(err, null); return; } row.session_hash = hash; callback(null, row); }); }; if(session) { self.userLoginSession(name, session, postLogin); } else if(pw) { self.userLoginPassword(name, pw, postLogin); } else { callback("Invalid login", null); } }; Database.prototype.userLoginPassword = function (name, pw, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; var query = "SELECT * FROM registrations WHERE uname=?"; self.query(query, [name], function (err, res) { if(err) { callback(err, null); return; } if(res.length == 0) { callback("User does not exist", null); return; } var row = res[0]; bcrypt.compare(pw, row.pw, function (err, valid) { if(valid) { // For security, erase the password field before returning delete row["pw"]; row.session_hash = ""; callback(null, row); return; } // Possibly could be a SHA256 hash from an *ancient* version // of CyTube var sha = hashlib.sha256(pw); if(sha == row.pw) { // Replace it bcrypt.hash(pw, 10, function (err, hash) { if(!err) { self.query("UPDATE registrations SET pw=? "+ "WHERE uname=?", [hash, name]); } }); // Remove password field before returning delete row["pw"]; row.session_hash = ""; callback(null, row); } else { callback("Invalid username/password combination", null); } }); }); }; Database.prototype.userLoginSession = function (name, session, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; var query = "SELECT * FROM registrations WHERE uname=? AND " + "session_hash=?"; self.query(query, [name, session], function (err, res) { if(err) { callback(err, null); return; } if(res.length == 0) { callback("Session expired", null); return; } var row = res[0]; if(row.expire < Date.now()) { callback("Session expired", null); return; } callback(null, row); }); }; Database.prototype.createLoginSession = function (name, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; var salt = $util.randomSalt(32); var hash = hashlib.sha256(salt + name); var query = "UPDATE registrations SET session_hash=?, expire=? " + "WHERE uname=?"; self.query(query, [hash, Date.now() + 604800000, name], function (err, res) { if(err) { callback(err, null); return; } callback(null, hash); }); }; Database.prototype.setUserPassword = function (name, pw, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; bcrypt.hash(pw, 10, function (err, hash) { if(err) { callback(err, null); return; } var query = "UPDATE registrations SET pw=? WHERE uname=?"; self.query(query, [hash, name], callback); }); }; Database.prototype.getGlobalRank = function (name, callback) { var self = this; if(typeof callback !== "function") return; var query = "SELECT global_rank FROM registrations WHERE uname=?"; self.query(query, [name], function (err, res) { if(err) { callback(err, null); return; } if(res.length == 0) { callback(null, 0); return; } callback(null, res[0].global_rank); }); }; Database.prototype.listGlobalRanks = function (names, callback) { var self = this; if(typeof callback !== "function") return; if(typeof names === "string") names = [names]; // Build the query template (?, ?, ?, ?, ...) var nlist = []; for(var i in names) nlist.push("?"); nlist = "(" + nlist.join(",") + ")"; var query = "SELECT global_rank FROM registrations WHERE uname IN " + nlist; self.query(query, names, function (err, res) { if(err) { callback(err, null); return; } if(res.length == 0) { callback(null, 0); return; } for(var i in res) res[i] = res[i].global_rank; callback(null, res); }); }; /* END REGION */ /* REGION users */ Database.prototype.searchUser = function (name, callback) { var self = this; if(typeof callback !== "function") return; // NOTE: No SELECT * here because I don't want to risk exposing // the user's password hash var query = "SELECT id, uname, global_rank, profile_image, " + "profile_text, email FROM registrations WHERE " + "uname LIKE ?"; self.query(query, ["%" + name + "%"], callback); }; /* rank */ Database.prototype.setGlobalRank = function (name, rank, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; var query = "UPDATE registrations SET global_rank=? WHERE uname=?"; self.query(query, [rank, name], callback); }; /* email and profile */ Database.prototype.getUserProfile = function (name, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; var query = "SELECT profile_image, profile_text FROM registrations " + "WHERE uname=?"; self.query(query, [name], function (err, res) { if(err) { callback(err, null); return; } var def = { profile_image: "", profile_text: "" }; callback(null, res.length > 0 ? res[0] : def); }); }; Database.prototype.setUserProfile = function (name, data, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; var query = "UPDATE registrations SET profile_image=?, profile_text=?" + "WHERE uname=?"; self.query(query, [data.image, data.text, name], callback); }; Database.prototype.setUserEmail = function (name, email, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; var query = "UPDATE registrations SET email=? WHERE uname=?"; self.query(query, [email, name], callback); }; /* password recovery */ Database.prototype.genPasswordReset = function (ip, name, email, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; var query = "SELECT email FROM registrations WHERE uname=?"; self.query(query, [name], function (err, res) { if(err) { callback(err, null); return; } if(res.length == 0) { callback("Provided username does not exist", null); return; } if(res[0].email != email) { callback("Provided email does not match user's email", null); return; } var hash = hashlib.sha256($util.randomSalt(32) + name); var expire = Date.now() + 24*60*60*1000; query = "INSERT INTO password_reset " + "(ip, name, hash, email, expire) VALUES (?, ?, ?, ?, ?) " + "ON DUPLICATE KEY UPDATE hash=?, expire=?"; self.query(query, [ip, name, hash, email, expire, hash, expire], function (err, res) { if(err) { callback(err, null); return; } callback(null, hash); }); }); }; Database.prototype.recoverUserPassword = function (hash, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; var query = "SELECT * FROM password_reset WHERE hash=?"; self.query(query, [hash], function (err, res) { if(err) { callback(err, null); return; } if(res.length == 0) { callback("Invalid password reset link", null); return; } if(Date.now() > res[0].expire) { self.query("DELETE FROM password_reset WHERE hash=?", [hash]); callback("Link expired. Password resets are valid for 24hr", null); return; } var name = res[0].name; self.resetUserPassword(res[0].name, function (err, pw) { if(err) { callback(err, null); return; } self.query("DELETE FROM password_reset WHERE hash=?", [hash]); callback(null, { name: name, pw: pw }); }); }); }; Database.prototype.resetUserPassword = function (name, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; var pwChars = "abcdefghijkmnopqrstuvwxyz023456789"; var pw = ""; for(var i = 0; i < 10; i++) pw += pwChars[parseInt(Math.random() * 33)]; bcrypt.hash(pw, 10, function (err, data) { if(err) { Logger.errlog.log("bcrypt error: " + err); callback("Password reset failure", null); return; } var query = "UPDATE registrations SET pw=? WHERE uname=?"; self.query(query, [data, name], function (err, res) { if(err) { callback(err, null); return; } callback(null, pw); }); }); }; /* user playlists */ Database.prototype.listUserPlaylists = function (name, callback) { var self = this; if(typeof callback !== "function") return; var query = "SELECT name, count, time FROM user_playlists WHERE user=?"; self.query(query, [name], callback); }; Database.prototype.getUserPlaylist = function (username, plname, callback) { var self = this; if(typeof callback !== "function") return; var query = "SELECT contents FROM user_playlists WHERE " + "user=? AND name=?"; self.query(query, [username, plname], function (err, res) { if(err) { callback(err, null); return; } if(res.length == 0) { callback("Playlist does not exist", null); return; } var pl = null; try { pl = JSON.parse(res[0].contents); } catch(e) { callback("Malformed playlist JSON", null); return; } callback(null, pl); }); }; Database.prototype.saveUserPlaylist = function (pl, username, plname, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; var tmp = [], time = 0; for(var i in pl) { var e = { id: pl[i].media.id, title: pl[i].media.title, seconds: pl[i].media.seconds, type: pl[i].media.type }; time += pl[i].media.seconds; tmp.push(e); } var count = tmp.length; var plText = JSON.stringify(tmp); var query = "INSERT INTO user_playlists VALUES (?, ?, ?, ?, ?) " + "ON DUPLICATE KEY UPDATE contents=?, count=?, time=?"; var params = [username, plname, plText, count, time, plText, count, time]; self.query(query, params, callback); }; Database.prototype.deleteUserPlaylist = function (username, plname, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; var query = "DELETE FROM user_playlists WHERE user=? AND name=?"; self.query(query, [username, plname], callback); }; /* user channels */ Database.prototype.listUserChannels = function (username, callback) { var self = this; if(typeof callback !== "function") return; var query = "SELECT * FROM channels WHERE owner=? ORDER BY id ASC"; self.query(query, [username], callback); }; /* aliases */ Database.prototype.recordVisit = function (ip, name, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; var time = Date.now(); var query = "DELETE FROM aliases WHERE ip=? AND name=?;" + "INSERT INTO aliases VALUES (NULL, ?, ?, ?)"; self.query(query, [ip, name, ip, name, time], callback); }; Database.prototype.cleanOldAliases = function (expiration, callback) { var self = this; if (typeof callback === "undefined") callback = blackHole; var query = "DELETE FROM aliases WHERE time < ?"; self.query(query, [Date.now() - expiration], callback); }; Database.prototype.listAliases = function (ip, callback) { var self = this; if(typeof callback !== "function") return; var query = "SELECT name,time FROM aliases WHERE ip"; // Range if(ip.match(/^\d+\.\d+\.\d+$/)) { query += " LIKE ?"; ip += ".%"; } else { query += "=?"; } query += " ORDER BY time DESC LIMIT 5"; self.query(query, [ip], function (err, res) { var names = null; if(!err) { names = []; res.forEach(function (row) { names.push(row.name); }); } callback(err, names); }); }; Database.prototype.listIPsForName = function (name, callback) { var self = this; if(typeof callback !== "function") return; var query = "SELECT ip FROM aliases WHERE name=?"; self.query(query, [name], function (err, res) { var ips = null; if(!err) { ips = []; res.forEach(function (row) { ips.push(row.ip); }); } callback(err, ips); }); }; /* END REGION */ /* REGION action log */ Database.prototype.recordAction = function (ip, name, action, args, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; var query = "INSERT INTO actionlog (ip, name, action, args, time) " + "VALUES (?, ?, ?, ?, ?)"; self.query(query, [ip, name, action, args, Date.now()], callback); }; Database.prototype.clearActions = function (actions, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; var list = []; for(var i in actions) list.push("?"); var actionlist = "(" + list.join(",") + ")"; var query = "DELETE FROM actionlog WHERE action IN " + actionlist; self.query(query, actions, callback); }; Database.prototype.clearSingleAction = function (item, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; var query = "DELETE FROM actionlog WHERE ip=? AND time=?"; self.query(query, [item.ip, item.time], callback); }; Database.prototype.recentRegistrationCount = function (ip, callback) { var self = this; if(typeof callback !== "function") return; var query = "SELECT * FROM actionlog WHERE ip=? " + "AND action='register-success' AND time > ?"; self.query(query, [ip, Date.now() - 48 * 3600 * 1000], function (err, res) { if(err) { callback(err, null); return; } callback(null, res.length); }); }; Database.prototype.listActionTypes = function (callback) { var self = this; if(typeof callback !== "function") return; var query = "SELECT DISTINCT action FROM actionlog"; self.query(query, function (err, res) { if(err) { callback(err, null); return; } var types = []; res.forEach(function (row) { types.push(row.action); }); callback(null, types); }); }; Database.prototype.listActions = function (types, callback) { var self = this; if(typeof callback !== "function") return; var list = []; for(var i in types) list.push("?"); var actionlist = "(" + list.join(",") + ")"; var query = "SELECT * FROM actionlog WHERE action IN " + actionlist; self.query(query, types, callback); }; /* END REGION */ /* REGION stats */ Database.prototype.addStatPoint = function (time, ucount, ccount, mem, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; var query = "INSERT INTO stats VALUES (?, ?, ?, ?)"; self.query(query, [time, ucount, ccount, mem], callback); }; Database.prototype.pruneStats = function (before, callback) { var self = this; if(typeof callback !== "function") callback = blackHole; var query = "DELETE FROM stats WHERE time < ?"; self.query(query, [before], callback); }; Database.prototype.listStats = function (callback) { var self = this; if(typeof callback !== "function") return; var query = "SELECT * FROM stats ORDER BY time ASC"; self.query(query, callback); }; /* END REGION */ module.exports = Database;