function Global_Init()
{
    //session_start();
    Load_Configs();
    if (!strnatcasecmp(trim($GLOBALS['db']['type']), "LB")) {
        require_once 'inc/dbmodule_LB.php';
    }
    if (!strnatcasecmp(trim($GLOBALS['db']['type']), "GD")) {
        require_once 'inc/dbmodule_GD.php';
    }
    //echo "GLOBALS: <BR>"; print_r($GLOBALS['db']); echo "<BR>";
    $source_db_ok = SQL_DB_OK("source");
    if ($source_db_ok['error'] === false) {
        $GLOBALS['db']['s_resource'] = @mysql_connect($GLOBALS['db']['s_host'], $GLOBALS['db']['s_user'], $GLOBALS['db']['s_pass']) or die($_SERVER["SCRIPT_FILENAME"] . "Could not connect to Source MySQL Server. : " . mysql_error());
        @mysql_selectdb($GLOBALS['db']['s_base']) or die("Could not connect to Source database [" . $GLOBALS['db']['s_base'] . "] : " . mysql_error());
        $GLOBALS['db']['x_resource'] = @mysql_connect($GLOBALS['db']['x_host'], $GLOBALS['db']['x_user'], $GLOBALS['db']['x_pass']) or die($_SERVER["SCRIPT_FILENAME"] . "Could not connect to X-Ray  MySQL Server. : " . mysql_error());
        @mysql_selectdb($GLOBALS['db']['x_base']) or die("Could not connect to X-Ray database [" . $GLOBALS['db']['x_base'] . "] : " . mysql_error());
        $GLOBALS['db']['s_link'] = mysqli_connect($GLOBALS['db']['s_host'], $GLOBALS['db']['s_user'], $GLOBALS['db']['s_pass'], $GLOBALS['db']['s_base']) or die($_SERVER["SCRIPT_FILENAME"] . "Could not connect to Source MySQL Server (multilink). : " . mysqli_error($GLOBALS['db']['s_link']));
        mysqli_select_db($GLOBALS['db']['s_link'], $GLOBALS['db']['s_base']) or die("Could not connect to Source database (multilink) [" . $GLOBALS['db']['s_base'] . "] : " . mysqli_error($GLOBALS['db']['s_link']));
        $GLOBALS['db']['x_link'] = mysqli_connect($GLOBALS['db']['x_host'], $GLOBALS['db']['x_user'], $GLOBALS['db']['x_pass'], $GLOBALS['db']['x_base']) or die($_SERVER["SCRIPT_FILENAME"] . "Could not connect to X-Ray MySQL Server (multilink). : " . mysqli_error($GLOBALS['db']['x_link']));
        mysqli_select_db($GLOBALS['db']['x_link'], $GLOBALS['db']['x_base']) or die("Could not connect to X-Ray database (multilink) [" . $GLOBALS['db']['x_base'] . "] : " . mysqli_error($GLOBALS['db']['x_link']));
    } else {
        $config_error .= $source_db_ok['message'] . "<BR>";
    }
    //	array_key_exists('form', $_POST) && $_POST['form']!="" ? $_GET = $_POST : NULL;
    //	array_key_exists('force', $_GET) && $_GET['force']!="" ? $_POST = $_GET : NULL;
    if (count($_GET) > 0) {
        $_POST = $_GET;
    }
    //	if($_POST['form']!=""){$_GET = $_POST;}
    //	if($_GET['force']!=""){$_POST = $_GET;}
    if (!FixOutput_Bool($GLOBALS['config_settings']['settings']['first_setup'], true, false, true)) {
        $GLOBALS['worlds'] = Get_Worlds_Enabled();
    }
}
function Save_Config_DB()
{
    $config_settings_file_path = "config/config_settings.php";
    $config_database_file_path = "config/config_database.php";
    $GLOBALS['config_db']['db_config']['db_use_same'] = FixOutput_Bool($GLOBALS['config_db']['db_config']['db_use_same'], "yes", "no");
    return write_ini_file($config_database_file_path, $GLOBALS['config_db']);
}
Example #3
0
            ?>
" id="worldtoggle_<?php 
            echo $world_item['worldid'];
            ?>
"<?php 
            if ($world_item['enabled']) {
                ?>
 checked="checked"<?php 
            }
            ?>
 />
                                      <label for="worldtoggle_<?php 
            echo $world_item['worldid'];
            ?>
"><?php 
            echo FixOutput_Bool($world_item['enabled'], "ON", "OFF");
            ?>
</label></td>
                                    <td><input type="text" value="<?php 
            echo $world_item['worldalias'];
            ?>
" name="worldalias_<?php 
            echo $world_item['worldid'];
            ?>
" id="worldalias_<?php 
            echo $world_item['worldid'];
            ?>
" /></td>
                                    </tr>
                                  <?php 
        }
function Do_Auth($ip_only = false)
{
    //echo "FIRST SETUP (Config): " . FixOutput_Bool($GLOBALS['config_settings']['settings']['first_setup'], "YES", "NO", "UNDEFINED") . "<BR>";
    // Force IP to match Failsafe IPs list if running setup for first time
    if (FixOutput_Bool($GLOBALS['config_settings']['settings']['first_setup'], true, false, true)) {
        session_unset();
        session_start();
        $_SESSION['first_setup'] = true;
        $ip_only = true;
    } else {
        if (!isset($_SESSION)) {
            session_start();
        }
        $_SESSION['first_setup'] = false;
    }
    // Initialize variables
    if (count($_GET) > 0) {
        $_POST = $_GET;
    }
    if (!isset($_POST['form'])) {
        $_POST['form'] = "";
    }
    if (!isset($_POST['submit'])) {
        $_POST['submit'] = "";
    }
    $IP_Users_list = array();
    $login_error = "";
    $logout_success = "";
    $_SESSION['auth_is_valid'] = false;
    $_SESSION['first_setup'] = FixOutput_Bool($GLOBALS['config_settings']['settings']['first_setup'], true, false, true);
    if (!$ip_only) {
        //echo "IP-Only Authentication is OFF.<BR>";
        if ($_SESSION['auth_is_valid'] == true) {
            /*
            echo "You are logged in!<br>";
            echo "User ID: " . $_SESSION['viewer_id'] . "<br>";
            echo "User Name: " . $_SESSION['viewer_name'] . "<br>";
            echo "Password: "******"<br>";
            */
        } else {
            Use_DB("source");
            //mysql_select_db($GLOBALS['db']['db_source']['base'], $GLOBALS['db']['s_resource']);
            $query_IP_Users = sprintf("SELECT * FROM `" . DB_Type_PlayersTable($GLOBALS['db']['type']) . "` WHERE ip LIKE %s ORDER BY playername ASC", GetSQLValueString("%" . $_SERVER['REMOTE_ADDR'] . "%", "text"));
            //echo "SQL[query_IP_Users]: <BR>". $query_IP_Users. "<BR>";
            $res_IP_Users = mysql_query($query_IP_Users, $GLOBALS['db']['s_resource']) or die(mysql_error());
            $totalRows_IP_Users = mysql_num_rows($res_IP_Users);
            // VALIDATE IP
            $ip_valid = false;
            if ($totalRows_IP_Users > 0) {
                while (($IP_Users_list[] = mysql_fetch_assoc($res_IP_Users)) || array_pop($IP_Users_list)) {
                }
            } else {
                //echo "WARNING: There are no known users with your IP.<BR>";
            }
            if ($_POST['form'] == "loginform") {
                //echo "Login form detected...<BR>";
                if ($GLOBALS['config_settings']['auth']['mode'] == "username") {
                    // VALIDATE IP
                    $ip_valid = false;
                    if ($totalRows_IP_Users > 0) {
                        //$playerid = $IP_Users_list[0]["playerid"];
                        $auth_allow_guest_users = FixInput_Bool($auth_allow_guest_users);
                        $auth_admin_usernames_exploded = explode(",", $GLOBALS['config']['auth']['admin_usernames']);
                        foreach ($auth_admin_usernames_exploded as &$input_fix_item) {
                            $input_fix_item = trim($input_fix_item);
                        }
                        $auth_mod_usernames_exploded = explode(",", $GLOBALS['config']['auth']['mod_usernames']);
                        foreach ($auth_mod_usernames_exploded as &$input_fix_item) {
                            $input_fix_item = trim($input_fix_item);
                        }
                        $auth_user_usernames_exploded = explode(",", $GLOBALS['config']['auth']['user_usernames']);
                        foreach ($auth_user_usernames_exploded as &$input_fix_item) {
                            $input_fix_item = trim($input_fix_item);
                        }
                        //echo "AUTH_ADMIN_USERNAMES: "; print_r($auth_admin_usernames_exploded); echo "<BR>";
                        //echo "AUTH_MOD_USERNAMES: "; print_r($auth_mod_usernames_exploded); echo "<BR>";
                        //echo "AUTH_USER_USERNAMES: "; print_r($auth_user_usernames_exploded); echo "<BR>";
                        foreach ($IP_Users_list as $auth_test_item) {
                            $ip_valid = true;
                            if ($auth_test_item["playername"] == $_GET['my_username']) {
                                foreach ($auth_admin_usernames_exploded as $admin_name_item) {
                                    if (!strnatcasecmp($admin_name_item, $auth_test_item["playername"])) {
                                        //echo "AUTH: VALID ADMINISTRATOR!<BR>";
                                        $_SESSION["auth_admin"] = true;
                                        $_SESSION["auth_level"] = "Administrator";
                                        break;
                                        $_SESSION["auth_username"] = $auth_test_item["playername"];
                                    }
                                }
                                foreach ($auth_mod_usernames_exploded as $mod_name_item) {
                                    if (!strnatcasecmp($mod_name_item, $auth_test_item["playername"])) {
                                        //echo "AUTH: VALID MODERATOR!<BR>";
                                        $_SESSION["auth_mod"] = true;
                                        $_SESSION["auth_level"] = "Moderator";
                                        break;
                                    }
                                }
                                foreach ($auth_user_usernames_exploded as $user_name_item) {
                                    if (!strnatcasecmp($user_name_item, $auth_test_item["playername"])) {
                                        //echo "AUTH: VALID USER!<BR>";
                                        $_SESSION["auth_user"] = true;
                                        $_SESSION["auth_level"] = "User";
                                        break;
                                    }
                                }
                                if ($_SESSION["auth_admin"] || $_SESSION["auth_mod"] || $_SESSION["auth_user"]) {
                                    $_SESSION["auth_type"] = $GLOBALS['config_settings']['auth']['mode'];
                                    $_SESSION["account"] = $auth_test_item;
                                    $_SESSION['auth_is_valid'] = true;
                                }
                            }
                        }
                    } else {
                        $login_error .= "ERROR: You do not have access to this page!<br>";
                        $_SESSION['auth_is_valid'] = false;
                    }
                } elseif ($GLOBALS['config_settings']['auth']['mode'] == "password") {
                    if ($_POST['login_password'] == "") {
                        $login_error .= "ERROR: Password cannot be blank!<br>";
                    }
                    if (!strnatcasecmp($GLOBALS['config']['auth']['admin_password'], $_POST['login_password'])) {
                        //echo "AUTH: VALID ADMINISTRATOR!<BR>";
                        $_SESSION["auth_admin"] = true;
                        $_SESSION["auth_level"] = "Administrator";
                    } elseif (!strnatcasecmp($GLOBALS['config']['auth']['mod_password'], $_POST['login_password'])) {
                        //echo "AUTH: VALID MODERATOR!<BR>";
                        $_SESSION["auth_mod"] = true;
                        $_SESSION["auth_level"] = "Moderator";
                    } elseif (!strnatcasecmp($GLOBALS['config']['auth']['user_password'], $_POST['login_password'])) {
                        //echo "AUTH: VALID USER!<BR>";
                        $_SESSION["auth_user"] = true;
                        $_SESSION["auth_level"] = "User";
                    }
                    if ($_SESSION["auth_admin"] || $_SESSION["auth_mod"] || $_SESSION["auth_user"]) {
                        $_SESSION["auth_type"] = $GLOBALS['config_settings']['auth']['mode'];
                        $_SESSION["account"] = false;
                        $_SESSION['auth_is_valid'] = true;
                    } else {
                        $login_error .= "ERROR: Incorrect password!<br>";
                        $_SESSION['auth_is_valid'] = false;
                    }
                }
            }
            if ($GLOBALS['config_settings']['auth']['mode'] == "none") {
                $_SESSION["auth_user"] = true;
                $_SESSION["auth_level"] = "Administrator";
                $_SESSION["auth_username"] = NULL;
            }
        }
    }
    if (!isset($_SESSION['auth_is_valid']) || !$_SESSION['auth_is_valid'] || $ip_only) {
        $auth_failsafe_ips_exploded = explode(",", $GLOBALS['config']['auth']['failsafe_ips']);
        foreach ($auth_failsafe_ips_exploded as &$input_fix_item) {
            $input_fix_item = trim($input_fix_item);
        }
        array_push($auth_failsafe_ips_exploded, "127.0.0.1", "::1");
        //echo "FAILSAFE_IPS: "; print_r($auth_failsafe_ips_exploded); echo "<BR>";
        foreach ($auth_failsafe_ips_exploded as $auth_test_item) {
            if ($_SERVER['REMOTE_ADDR'] == $auth_test_item) {
                $_SESSION["auth_admin"] = true;
                $_SESSION["auth_level"] = "Administrator";
                $_SESSION["auth_type"] = "ip";
                $_SESSION["account"] = false;
                $_SESSION['auth_is_valid'] = true;
                break;
            }
        }
    }
    if ($_POST['form'] == "logoutform" && $_POST['Submit'] == "Logout") {
        session_unset();
        $logout_success .= "You have been logged off successfully.<br>";
        $_SESSION['auth_is_valid'] = false;
        $_SESSION['first_setup'] = FixOutput_Bool($GLOBALS['config_settings']['settings']['first_setup'], true, false, true);
        $_SESSION['IP_Users_List'] = $IP_Users_list;
    }
    $GLOBALS['auth']['IP_Users_list'] = $IP_Users_list;
    //echo "FIRST SETUP (Session - Final): " . FixOutput_Bool($_SESSION['first_setup'], "YES", "NO", "UNDEFINED") . "<BR>";
    //echo "AUTH VALID (Session - Final): " . FixOutput_Bool($_SESSION['auth_is_valid'], "YES", "NO", "UNDEFINED") . "<BR>";
    return array("valid_ips" => $IP_Users_list, "login_error" => $login_error, "logout_success" => $logout_success);
}