$buffer=trim($buffer);

if($buffer==null){return null;}

if(preg_match("#GET cache_object#",$buffer)){return null;}

if(preg_match('#(.+?)\s+.+?\s+(.*?)\s+\[.+?:(.+?)\s+.+?\]\s+"(GET|POST)\s+(.+?)\s+.+?"\s+([0-9]+)\s+([0-9]+)#',$buffer,$re)){

$ip=$re[1];

$user=$re[2];

$time=$re[3];

$uri=$re[5];

$code_error=$re[6];

$size=$re[7];

Builsql($ip,$user,$uri,$code_error,$size,$time);

return null;

}

events("Not filtered: $buffer");

$squid_error["100"]="Continue";

$squid_error["101"]="Switching Protocols";

$squid_error["102"]="Processing";

$squid_error["200"]="Pass";

$squid_error["201"]="Created";

$squid_error["202"]="Accepted";

$squid_error["203"]="Non-Authoritative Information";

$squid_error["204"]="No Content";

$squid_error["205"]="Reset Content";

$squid_error["206"]="Partial Content";

$squid_error["207"]="Multi Status";

$squid_error["300"]="Multiple Choices";

$squid_error["301"]="Moved Permanently";

$squid_error["302"]="Moved Temporarily";

$squid_error["303"]="See Other";

$squid_error["304"]="Not Modified";

$squid_error["305"]="Use Proxy";

$squid_error["307"]="Temporary Redirect";

$squid_error["400"]="Bad Request";

$squid_error["401"]="Unauthorized";

$squid_error["402"]="Payment Required";

$squid_error["403"]="Forbidden";

$squid_error["404"]="Not Found";

$squid_error["405"]="Method Not Allowed";

$squid_error["406"]="Not Acceptable";

$squid_error["407"]="Proxy Authentication Required";

$squid_error["408"]="Request Timeout";

$squid_error["409"]="Conflict";

$squid_error["410"]="Gone";

$squid_error["411"]="Length Required";

$squid_error["412"]="Precondition Failed";

$squid_error["413"]="Request Entity Too Large";

$squid_error["414"]="Request URI Too Large";

$squid_error["415"]="Unsupported Media Type";

$squid_error["416"]="Request Range Not Satisfiable";

$squid_error["417"]="Expectation Failed";

$squid_error["424"]="Locked";

$squid_error["424"]="Failed Dependency";

$squid_error["433"]="Unprocessable Entity";

$squid_error["500"]="Internal Server Error";

$squid_error["501"]="Not Implemented";

$squid_error["502"]="Bad Gateway";

$squid_error["503"]="Service Unavailable";

$squid_error["504"]="Gateway Timeout";

$squid_error["505"]="HTTP Version Not Supported";

$squid_error["507"]="Insufficient Storage";

$squid_error["600"]="Squid header parsing error";

if(preg_match("#^(?:[^/]+://)?([^/:]+)#",$uri,$re)){

$sitename=$re[1];

}else{

events("unable to extract domain name from $uri");

return false;

}

$TYPE=$squid_error[$code_error];

$REASON=$TYPE;

$CLIENT=trim($CLIENT);

$date=date('Y-m-d')." ". $time;

if($username==null){$username=GetComputerName($ip);}

if($size==null){$size=0;}

if(trim($GLOBALS["IPs"][$sitename])==null){

$site_IP=trim(gethostbyname($sitename));

$GLOBALS["IPs"][$sitename]=$site_IP;

}else{

$site_IP=$GLOBALS["IPs"][$sitename];

}

if(count($_GET["IPs"])>5000){unset($_GET["IPs"]);}

if(count($_GET["COUNTRIES"])>5000){unset($_GET["COUNTRIES"]);}

if(trim($GLOBALS["COUNTRIES"][$site_IP])==null){

if(function_exists("geoip_record_by_name")){

if($site_IP==null){$site_IP=$sitename;}

$record = geoip_record_by_name($site_IP);

if ($record) {

$Country=$record["country_name"];

$GLOBALS["COUNTRIES"][$site_IP]=$Country;

}

}

}else{

$Country=$GLOBALS["COUNTRIES"][$site_IP];

}

$zMD5=md5("$uri$date$CLIENT$username$TYPE$Country$site_IP");

events("$date $REASON:: $CLIENT ($username) -> $sitename ($site_IP) Country=$Country REASON:\"$REASON\" TYPE::\"$TYPE\" size=$size" );

$uri=addslashes($uri);

$sql="INSERT INTO dansguardian_events (`sitename`,`uri`,`TYPE`,`REASON`,`CLIENT`,`zDate`,`zMD5`,`remote_ip`,`country`,`QuerySize`,`uid`)

VALUES('$sitename','$uri','$TYPE','$REASON','$CLIENT','$date','$zMD5','$site_IP','$Country','$size','$username');";

@file_put_contents("/var/log/artica-postfix/dansguardian-stats/$zMD5.sql",$sql);

$pid=@getmypid();

$date=@date("h:i:s");

$logFile="/var/log/artica-postfix/squid-tail.debug";

$size=@filesize($logFile);

if($size>1000000){@unlink($logFile);}

$f = @fopen($logFile, 'a');

@fwrite($f, "$pid ".basename(__FILE__)." $text\n");

@fclose($f);

if($GLOBALS["resvip"][$ip]<>null){return $GLOBALS["resvip"][$ip];}

$name=gethostbyaddr($ip);

$GLOBALS["resvip"]=$name;

return $name;