mirror of https://github.com/calzoneman/sync.git
632 lines
17 KiB
JavaScript
632 lines
17 KiB
JavaScript
var mysql = require("mysql");
|
|
var hashlib = require("node_hash");
|
|
var bcrypt = require("bcrypt");
|
|
var $util = require("./utilities");
|
|
var Logger = require("./logger");
|
|
|
|
var pool = null;
|
|
var global_ipbans = {};
|
|
|
|
module.exports.init = function (cfg) {
|
|
pool = mysql.createPool({
|
|
host: cfg["mysql-server"],
|
|
user: cfg["mysql-user"],
|
|
password: cfg["mysql-pw"],
|
|
database: cfg["mysql-db"],
|
|
multipleStatements: true
|
|
});
|
|
|
|
// Test the connection
|
|
pool.getConnection(function (err, conn) {
|
|
if(err) {
|
|
Logger.errlog.log("! DB connection failed");
|
|
return;
|
|
} else {
|
|
// Refresh global IP bans
|
|
module.exports.listGlobalBans();
|
|
}
|
|
});
|
|
|
|
global_ipbans = {};
|
|
module.exports.users = require("./database/accounts");
|
|
module.exports.users.init();
|
|
module.exports.channels = require("./database/channels");
|
|
module.exports.channels.init();
|
|
};
|
|
|
|
/**
|
|
* Execute a database query
|
|
*/
|
|
module.exports.query = function (query, sub, callback) {
|
|
// 2nd argument is optional
|
|
if (typeof sub === "function") {
|
|
callback = sub;
|
|
sub = false;
|
|
}
|
|
|
|
if (typeof callback !== "function") {
|
|
callback = blackHole;
|
|
}
|
|
|
|
pool.getConnection(function (err, conn) {
|
|
if (err) {
|
|
Logger.errlog.log("! DB connection failed: " + err);
|
|
callback("Database failure", null);
|
|
} else {
|
|
function cback(err, res) {
|
|
if (err) {
|
|
Logger.errlog.log("! DB query failed: " + query);
|
|
if (sub) {
|
|
Logger.errlog.log("Substitutions: " + sub);
|
|
}
|
|
Logger.errlog.log(err);
|
|
callback("Database failure", null);
|
|
} else {
|
|
callback(null, res);
|
|
}
|
|
conn.end();
|
|
}
|
|
|
|
if (sub) {
|
|
conn.query(query, sub, cback);
|
|
} else {
|
|
conn.query(query, cback);
|
|
}
|
|
}
|
|
});
|
|
};
|
|
|
|
function blackHole() {
|
|
|
|
}
|
|
|
|
module.exports.initGlobalTables = function () {
|
|
var fail = function (table) {
|
|
return function (err) {
|
|
if (err) {
|
|
Logger.errlog.log("Failed to initialize " + table);
|
|
}
|
|
};
|
|
};
|
|
var query = module.exports.query;
|
|
query("CREATE TABLE IF NOT EXISTS `global_bans` (" +
|
|
"`ip` VARCHAR(39) NOT NULL," +
|
|
"`reason` VARCHAR(255) NOT NULL," +
|
|
"PRIMARY KEY (`ip`, `name`)) " +
|
|
"CHARACTER SET utf8",
|
|
fail("global_bans"));
|
|
|
|
query("CREATE TABLE IF NOT EXISTS `password_reset` (" +
|
|
"`ip` VARCHAR(39) NOT NULL," +
|
|
"`name` VARCHAR(20) NOT NULL," +
|
|
"`hash` VARCHAR(64) NOT NULL," +
|
|
"`email` VARCHAR(255) NOT NULL," +
|
|
"`expire` BIGINT NOT NULL," +
|
|
"PRIMARY KEY (`name`))" +
|
|
"CHARACTER SET utf8",
|
|
fail("password_reset"));
|
|
|
|
query("CREATE TABLE IF NOT EXISTS `user_playlists` (" +
|
|
"`user` VARCHAR(20) NOT NULL," +
|
|
"`name` VARCHAR(255) NOT NULL," +
|
|
"`contents` MEDIUMTEXT NOT NULL," +
|
|
"`count` INT NOT NULL," +
|
|
"`duration` INT NOT NULL," +
|
|
"PRIMARY KEY (`user`, `name`))" +
|
|
"CHARACTER SET utf8",
|
|
fail("user_playlists"));
|
|
|
|
query("CREATE TABLE IF NOT EXISTS `aliases` (" +
|
|
"`visit_id` INT NOT NULL AUTO_INCREMENT," +
|
|
"`ip` VARCHAR(39) NOT NULL," +
|
|
"`name` VARCHAR(20) NOT NULL," +
|
|
"`time` BIGINT NOT NULL," +
|
|
"PRIMARY KEY (`visit_id`), INDEX (`ip`))",
|
|
fail("aliases"));
|
|
|
|
// TODO actionlog? or no?
|
|
|
|
query("CREATE TABLE IF NOT EXISTS `stats` (" +
|
|
"`time` BIGINT NOT NULL," +
|
|
"`usercount` INT NOT NULL," +
|
|
"`chancount` INT NOT NULL," +
|
|
"`mem` INT NOT NULL," +
|
|
"PRIMARY KEY (`time`))" +
|
|
"CHARACTER SET utf8",
|
|
fail("stats"));
|
|
};
|
|
|
|
/* REGION global bans */
|
|
|
|
/**
|
|
* Check if an IP address is globally banned
|
|
*/
|
|
module.exports.isGlobalIPBanned = function (ip, callback) {
|
|
if (typeof callback !== "function") {
|
|
return;
|
|
}
|
|
|
|
// TODO account for IPv6
|
|
// Also possibly just change this to allow arbitrary
|
|
// ranges instead of only /32, /24, /16
|
|
const re = /(\d+)\.(\d+)\.(\d+)\.(\d+)/;
|
|
// Account for range banning
|
|
var s16 = ip.replace(re, "$1.$2");
|
|
var s24 = ip.replace(re, "$1.$2.$3");
|
|
|
|
var banned = ip in global_ipbans ||
|
|
s16 in global_ipbans ||
|
|
s24 in global_ipbans;
|
|
|
|
callback(null, banned);
|
|
};
|
|
|
|
/**
|
|
* Retrieve all global bans from the database.
|
|
* Cache locally in global_bans
|
|
*/
|
|
module.exports.listGlobalBans = function (callback) {
|
|
if (typeof callback !== "function") {
|
|
callback = blackHole;
|
|
}
|
|
|
|
module.exports.query("SELECT * FROM global_bans WHERE 1", function (err, res) {
|
|
if (err) {
|
|
callback(err, null);
|
|
return;
|
|
}
|
|
|
|
global_ipbans = {};
|
|
for (var i = 0; i < res.length; i++) {
|
|
global_ipbans[res[i].ip] = res[i];
|
|
}
|
|
|
|
callback(null, global_ipbans);
|
|
});
|
|
};
|
|
|
|
/**
|
|
* Globally ban by IP
|
|
*/
|
|
module.exports.globalBanIP = function (ip, reason, callback) {
|
|
if (typeof callback !== "function") {
|
|
callback = blackHole;
|
|
}
|
|
|
|
var query = "INSERT INTO global_bans (ip, reason) VALUES (?, ?)" +
|
|
" ON DUPLICATE KEY UPDATE reason=?";
|
|
module.exports.query(query, [ip, reason, reason], function (err, res) {
|
|
if(err) {
|
|
callback(err, null);
|
|
return;
|
|
}
|
|
|
|
module.exports.listGlobalBans();
|
|
callback(null, res);
|
|
});
|
|
};
|
|
|
|
/**
|
|
* Remove a global IP ban
|
|
*/
|
|
module.exports.globalUnbanIP = function (ip, callback) {
|
|
if (typeof callback !== "function") {
|
|
callback = blackHole;
|
|
}
|
|
|
|
|
|
var query = "DELETE FROM global_bans WHERE ip=?";
|
|
module.exports.query(query, [ip], function (err, res) {
|
|
if(err) {
|
|
callback(err, null);
|
|
return;
|
|
}
|
|
|
|
module.exports.listGlobalBans();
|
|
callback(null, res);
|
|
});
|
|
};
|
|
|
|
/* END REGION */
|
|
|
|
/* password recovery */
|
|
|
|
/*
|
|
module.exports.genPasswordReset = function (ip, name, email, callback) {
|
|
if(typeof callback !== "function")
|
|
callback = blackHole;
|
|
|
|
var query = "SELECT email FROM registrations WHERE uname=?";
|
|
module.exports.query(query, [name], function (err, res) {
|
|
if(err) {
|
|
callback(err, null);
|
|
return;
|
|
}
|
|
|
|
if(res.length == 0) {
|
|
callback("Provided username does not exist", null);
|
|
return;
|
|
}
|
|
|
|
if(res[0].email != email) {
|
|
callback("Provided email does not match user's email", null);
|
|
return;
|
|
}
|
|
|
|
var hash = hashlib.sha256($util.randomSalt(32) + name);
|
|
var expire = Date.now() + 24*60*60*1000;
|
|
query = "INSERT INTO password_reset " +
|
|
"(ip, name, hash, email, expire) VALUES (?, ?, ?, ?, ?) " +
|
|
"ON DUPLICATE KEY UPDATE hash=?, expire=?";
|
|
module.exports.query(query, [ip, name, hash, email, expire, hash, expire],
|
|
function (err, res) {
|
|
if(err) {
|
|
callback(err, null);
|
|
return;
|
|
}
|
|
|
|
callback(null, hash);
|
|
});
|
|
});
|
|
};
|
|
|
|
module.exports.recoverUserPassword = function (hash, callback) {
|
|
if(typeof callback !== "function")
|
|
callback = blackHole;
|
|
|
|
var query = "SELECT * FROM password_reset WHERE hash=?";
|
|
module.exports.query(query, [hash], function (err, res) {
|
|
if(err) {
|
|
callback(err, null);
|
|
return;
|
|
}
|
|
|
|
if(res.length == 0) {
|
|
callback("Invalid password reset link", null);
|
|
return;
|
|
}
|
|
|
|
if(Date.now() > res[0].expire) {
|
|
module.exports.query("DELETE FROM password_reset WHERE hash=?", [hash]);
|
|
callback("Link expired. Password resets are valid for 24hr",
|
|
null);
|
|
return;
|
|
}
|
|
|
|
var name = res[0].name;
|
|
|
|
resetUserPassword(res[0].name, function (err, pw) {
|
|
if(err) {
|
|
callback(err, null);
|
|
return;
|
|
}
|
|
|
|
module.exports.query("DELETE FROM password_reset WHERE hash=?", [hash]);
|
|
callback(null, {
|
|
name: name,
|
|
pw: pw
|
|
});
|
|
});
|
|
});
|
|
};
|
|
|
|
module.exports.resetUserPassword = function (name, callback) {
|
|
if(typeof callback !== "function")
|
|
callback = blackHole;
|
|
|
|
var pwChars = "abcdefghijkmnopqrstuvwxyz023456789";
|
|
var pw = "";
|
|
for(var i = 0; i < 10; i++)
|
|
pw += pwChars[parseInt(Math.random() * 33)];
|
|
|
|
bcrypt.hash(pw, 10, function (err, data) {
|
|
if(err) {
|
|
Logger.errlog.log("bcrypt error: " + err);
|
|
callback("Password reset failure", null);
|
|
return;
|
|
}
|
|
|
|
var query = "UPDATE registrations SET pw=? WHERE uname=?";
|
|
module.exports.query(query, [data, name], function (err, res) {
|
|
if(err) {
|
|
callback(err, null);
|
|
return;
|
|
}
|
|
|
|
callback(null, pw);
|
|
});
|
|
});
|
|
};
|
|
*/
|
|
|
|
/* user playlists */
|
|
|
|
/**
|
|
* Retrieve all of a user's playlists
|
|
*/
|
|
module.exports.listUserPlaylists = function (name, callback) {
|
|
if (typeof callback !== "function") {
|
|
return;
|
|
}
|
|
|
|
var query = "SELECT name, count, duration FROM user_playlists WHERE user=?";
|
|
module.exports.query(query, [name], callback);
|
|
};
|
|
|
|
/**
|
|
* Retrieve a user playlist by (user, name) pair
|
|
*/
|
|
module.exports.getUserPlaylist = function (username, plname, callback) {
|
|
if (typeof callback !== "function") {
|
|
return;
|
|
}
|
|
|
|
var query = "SELECT contents FROM user_playlists WHERE " +
|
|
"user=? AND name=?";
|
|
|
|
module.exports.query(query, [username, plname], function (err, res) {
|
|
if (err) {
|
|
callback(err, null);
|
|
return;
|
|
}
|
|
|
|
if (res.length == 0) {
|
|
callback("Playlist does not exist", null);
|
|
return;
|
|
}
|
|
|
|
var pl = null;
|
|
try {
|
|
pl = JSON.parse(res[0].contents);
|
|
} catch(e) {
|
|
callback("Malformed playlist JSON", null);
|
|
return;
|
|
}
|
|
callback(null, pl);
|
|
});
|
|
};
|
|
|
|
/**
|
|
* Saves a user playlist. Overwrites if the playlist keyed by
|
|
* (user, name) already exists
|
|
*/
|
|
module.exports.saveUserPlaylist = function (pl, username, plname, callback) {
|
|
if (typeof callback !== "function") {
|
|
callback = blackHole;
|
|
}
|
|
|
|
var tmp = [], time = 0;
|
|
for(var i in pl) {
|
|
var e = {
|
|
id: pl[i].media.id,
|
|
title: pl[i].media.title,
|
|
seconds: pl[i].media.seconds,
|
|
type: pl[i].media.type
|
|
};
|
|
time += pl[i].media.seconds;
|
|
tmp.push(e);
|
|
}
|
|
var count = tmp.length;
|
|
var plText = JSON.stringify(tmp);
|
|
|
|
var query = "INSERT INTO user_playlists VALUES (?, ?, ?, ?, ?) " +
|
|
"ON DUPLICATE KEY UPDATE contents=?, count=?, duration=?";
|
|
|
|
var params = [username, plname, plText, count, time,
|
|
plText, count, time];
|
|
|
|
module.exports.query(query, params, callback);
|
|
};
|
|
|
|
/**
|
|
* Deletes a user playlist
|
|
*/
|
|
module.exports.deleteUserPlaylist = function (username, plname, callback) {
|
|
if (typeof callback !== "function") {
|
|
callback = blackHole;
|
|
}
|
|
|
|
var query = "DELETE FROM user_playlists WHERE user=? AND name=?";
|
|
module.exports.query(query, [username, plname], callback);
|
|
};
|
|
|
|
/* aliases */
|
|
|
|
/**
|
|
* Records a user or guest login in the aliases table
|
|
*/
|
|
module.exports.recordVisit = function (ip, name, callback) {
|
|
if (typeof callback !== "function") {
|
|
callback = blackHole;
|
|
}
|
|
|
|
var time = Date.now();
|
|
var query = "DELETE FROM aliases WHERE ip=? AND name=?;" +
|
|
"INSERT INTO aliases VALUES (NULL, ?, ?, ?)";
|
|
|
|
module.exports.query(query, [ip, name, ip, name, time], callback);
|
|
};
|
|
|
|
/**
|
|
* Deletes alias rows older than the given time
|
|
*/
|
|
module.exports.cleanOldAliases = function (expiration, callback) {
|
|
if (typeof callback === "undefined") {
|
|
callback = blackHole;
|
|
}
|
|
|
|
var query = "DELETE FROM aliases WHERE time < ?";
|
|
module.exports.query(query, [Date.now() - expiration], callback);
|
|
};
|
|
|
|
/**
|
|
* Retrieves a list of aliases for an IP address
|
|
*/
|
|
module.exports.getAliases = function (ip, callback) {
|
|
if (typeof callback !== "function") {
|
|
return;
|
|
}
|
|
|
|
var query = "SELECT name,time FROM aliases WHERE ip";
|
|
// if the ip parameter is a /24 range, we want to match accordingly
|
|
if(ip.match(/^\d+\.\d+\.\d+$/)) {
|
|
query += " LIKE ?";
|
|
ip += ".%";
|
|
} else {
|
|
query += "=?";
|
|
}
|
|
|
|
query += " ORDER BY time DESC LIMIT 5";
|
|
|
|
module.exports.query(query, [ip], function (err, res) {
|
|
var names = null;
|
|
if(!err) {
|
|
names = res.map(function (row) { return row.name; });
|
|
}
|
|
|
|
callback(err, names);
|
|
});
|
|
};
|
|
|
|
/**
|
|
* Retrieves a list of IPs that a name as logged in from
|
|
*/
|
|
module.exports.getIPs = function (name, callback) {
|
|
if (typeof callback !== "function") {
|
|
return;
|
|
}
|
|
|
|
var query = "SELECT ip FROM aliases WHERE name=?";
|
|
module.exports.query(query, [name], function (err, res) {
|
|
var ips = null;
|
|
if(!err) {
|
|
ips = res.map(function (row) { return row.ip; });
|
|
}
|
|
|
|
callback(err, ips);
|
|
});
|
|
};
|
|
|
|
/* END REGION */
|
|
|
|
/* REGION action log */
|
|
|
|
/*
|
|
module.exports.recordAction = function (ip, name, action, args,
|
|
callback) {
|
|
if(typeof callback !== "function")
|
|
callback = blackHole;
|
|
|
|
var query = "INSERT INTO actionlog (ip, name, action, args, time) " +
|
|
"VALUES (?, ?, ?, ?, ?)";
|
|
|
|
module.exports.query(query, [ip, name, action, args, Date.now()], callback);
|
|
};
|
|
|
|
module.exports.clearActions = function (actions, callback) {
|
|
if(typeof callback !== "function")
|
|
callback = blackHole;
|
|
|
|
var list = [];
|
|
for(var i in actions)
|
|
list.push("?");
|
|
|
|
var actionlist = "(" + list.join(",") + ")";
|
|
|
|
var query = "DELETE FROM actionlog WHERE action IN " + actionlist;
|
|
module.exports.query(query, actions, callback);
|
|
};
|
|
|
|
module.exports.clearSingleAction = function (item, callback) {
|
|
if(typeof callback !== "function")
|
|
callback = blackHole;
|
|
|
|
var query = "DELETE FROM actionlog WHERE ip=? AND time=?";
|
|
module.exports.query(query, [item.ip, item.time], callback);
|
|
};
|
|
|
|
|
|
module.exports.recentRegistrationCount = function (ip, callback) {
|
|
if(typeof callback !== "function")
|
|
return;
|
|
|
|
var query = "SELECT * FROM actionlog WHERE ip=? " +
|
|
"AND action='register-success' AND time > ?";
|
|
|
|
module.exports.query(query, [ip, Date.now() - 48 * 3600 * 1000],
|
|
function (err, res) {
|
|
if(err) {
|
|
callback(err, null);
|
|
return;
|
|
}
|
|
|
|
callback(null, res.length);
|
|
});
|
|
};
|
|
|
|
module.exports.listActionTypes = function (callback) {
|
|
if(typeof callback !== "function")
|
|
return;
|
|
|
|
var query = "SELECT DISTINCT action FROM actionlog";
|
|
module.exports.query(query, function (err, res) {
|
|
if(err) {
|
|
callback(err, null);
|
|
return;
|
|
}
|
|
|
|
var types = [];
|
|
res.forEach(function (row) {
|
|
types.push(row.action);
|
|
});
|
|
callback(null, types);
|
|
});
|
|
};
|
|
|
|
module.exports.listActions = function (types, callback) {
|
|
if(typeof callback !== "function")
|
|
return;
|
|
|
|
var list = [];
|
|
for(var i in types)
|
|
list.push("?");
|
|
|
|
var actionlist = "(" + list.join(",") + ")";
|
|
var query = "SELECT * FROM actionlog WHERE action IN " + actionlist;
|
|
module.exports.query(query, types, callback);
|
|
};
|
|
*/
|
|
|
|
/* END REGION */
|
|
|
|
/* REGION stats */
|
|
|
|
module.exports.addStatPoint = function (time, ucount, ccount, mem, callback) {
|
|
if (typeof callback !== "function") {
|
|
callback = blackHole;
|
|
}
|
|
|
|
var query = "INSERT INTO stats VALUES (?, ?, ?, ?)";
|
|
module.exports.query(query, [time, ucount, ccount, mem], callback);
|
|
};
|
|
|
|
module.exports.pruneStats = function (before, callback) {
|
|
if (typeof callback !== "function") {
|
|
callback = blackHole;
|
|
}
|
|
|
|
var query = "DELETE FROM stats WHERE time < ?";
|
|
module.exports.query(query, [before], callback);
|
|
};
|
|
|
|
module.exports.listStats = function (callback) {
|
|
if (typeof callback !== "function") {
|
|
return;
|
|
}
|
|
|
|
var query = "SELECT * FROM stats ORDER BY time ASC";
|
|
module.exports.query(query, callback);
|
|
};
|
|
|
|
/* END REGION */
|