idleirc/index.php

583 lines
21 KiB
PHP
Executable File

<?php
///////
// IdleIRC 2020
// (C) Chris Dorman, GPLv3
// https://notabug.org/Pentium44/idleirc
///////
// Start session for username saves.
session_start();
include "config.php";
if(!file_exists("users"))
{
mkdir("users", 0777);
}
function registerForm() {
?>
<br>
<div class="form">
<form action="<?php echo $_SERVER['PHP_SELF']; ?>?register=go" method="post">
<table>
<tr><td>Username:</td><td> <input style="padding: 2px; width: 300px;" class="text" type="text" name="username"></td></tr>
<tr><td>Password:</td><td> <input style="padding: 2px; width: 300px;" class="text" type="password" name="password"></td></tr>
<tr><td>Password again:</td><td> <input style="padding: 2px;width: 300px;" class="text" type="password" name="password-again"></td></tr>
<tr><td>Below forms:</td><td> The nickname form can be left blank and<br /> will be substituted with your username.</td></tr>
<tr><td>Default Nickname:</td><td> <input style="padding: 2px; width: 300px;" class="text" type="text" name="nick"></td></tr>
<tr><td>Autoconnect/focus channel:</td><td> <input style="padding: 2px; width: 300px;" class="text" type="text" name="channel" value="<?php echo $GLOBALS['default_channel']; ?>"></td></tr>
<?php
if($GLOBALS['allowMultiServer'] == "true") {
?>
<tr><td>Server (IP:Port)</td><td> <input style="padding: 2px; width: 236px;" class="text" type="text" name="servaddr" value="<?php echo $GLOBALS['server']; ?>">:<input style="padding: 2px; width: 50px;" class="text" type="text" name="servport" value="<?php echo $GLOBALS['port']; ?>"></td></tr>
<?php
}
?>
</table>
<br />
<input style="padding: 2px;" class="text" type="submit" name="submitBtn" value="Create account">
</form>
</div>
<br />
<?php
}
function loginForm(){
?>
<br>
<div class="form">
<p>
<?php echo $GLOBALS['desc']; ?><br />
Don't have an account? <a href="index.php?register">Create one</a> here!<br />
</p>
<form action="<?php echo $_SERVER['PHP_SELF']; ?>?do=login" method="post">
<table>
<tr><td>Username:</td><td> <input style="padding: 2px; width: 200px;" class="text" type="text" name="username"></td></tr>
<tr><td>Password:</td><td> <input style="padding: 2px; width: 200px;" class="text" type="password" name="password"></td></tr>
</table>
<input style="padding: 2px;" class="text" type="submit" name="submitBtn" value="Login">
</form>
</div>
<?php
}
//Logout
if (isset($_GET['do']) && $_GET['do']=="logout") {
$_SESSION['idleirc-user'] = null;
$_SESSION['idleirc-channel'] = null;
}
if (isset($_GET['do']) && $_GET['do']=="settings") {
$username = $_SESSION['idleirc-user'];
$password = $_SESSION['idleirc-pass'];
if (file_exists("users/$username.php")) {
include("users/$username.php");
} else {
$userpass = "";
}
if (isset($_SESSION['idleirc-pass']) && $userpass != "" && $userpass == $_SESSION['idleirc-pass']) {
if (isset($_POST['nick']) && $_POST['nick']!="") {
file_put_contents("users/$username.php", "<?php \$usernickname='" . stripslashes(htmlentities($_POST['nick'])) . "'; ?>\n", FILE_APPEND);
$_SESSION['idleirc-nick'] = stripslashes(htmlentities($_POST['nick']));
}
if (isset($_POST['channel']) && $_POST['channel']!="") {
file_put_contents("users/$username.php", "<?php \$userchannel='" . stripslashes(htmlentities($_POST['channel'])) . "'; ?>\n", FILE_APPEND);
$_SESSION['idleirc-channel'] = stripslashes(htmlentities($_POST['channel']));
}
if (isset($_POST['password']) && $_POST['password']!="") {
file_put_contents("users/$username.php", "<?php \$userpass='" . md5($_POST['password']) . "'; ?>\n", FILE_APPEND);
$_SESSION['idleirc-pass'] = md5($_POST['password']);
}
if ($allowMultiServer == "true") {
if (isset($_POST['servaddr']) && $_POST['servaddr']!="") {
file_put_contents("users/$username.php", "<?php \$userserver='" . stripslashes(htmlentities($_POST['servaddr'])) . "'; ?>\n", FILE_APPEND);
$_SESSION['idleirc-servaddr'] = stripslashes(htmlentities($_POST['servaddr']));
}
if (isset($_POST['servport']) && $_POST['servport']!="") {
file_put_contents("users/$username.php", "<?php \$userserverport='" . stripslashes(htmlentities($_POST['servport'])) . "'; ?>\n", FILE_APPEND);
$_SESSION['idleirc-servport'] = stripslashes(htmlentities($_POST['servport']));
}
}
header("refresh: 0;url=index.php");
} else {
header("refresh: 0;url=index.php");
}
}
if (isset($_GET['register']) && $_GET['register'] == "go") {
if(isset($_POST['password']) && $_POST['password'] != "" && isset($_POST['password-again']) && $_POST['password-again'] != "" && $_POST['password'] == $_POST['password-again']) {
if(isset($_POST['username']) && $_POST['username'] != "") {
$username = stripslashes(htmlentities($_POST['username']));
$password = md5($_POST['password']);
$channame = isset($_POST['channel']) && ($_POST['channel'] !== "") ? htmlentities(stripslashes($_POST['channel'])) : $default_channel;
$nickname = isset($_POST['nick']) && ($_POST['nick'] !== "") ? htmlentities(stripslashes($_POST['nick'])) : $username;
$servaddr = isset($_POST['servaddr']) && ($_POST['servaddr'] !== "") ? htmlentities(stripslashes($_POST['servaddr'])) : $server;
$servport = isset($_POST['servport']) && ($_POST['servport'] !== "") ? htmlentities(stripslashes($_POST['servport'])) : $port;
file_put_contents("users/$username.php", "<?php \$userpass = '" . $password . "'; \$userchannel='" . $channame . "'; \$usernickname='" . $nickname . "'; \$userserver='" . $servaddr . "'; \$userserverport='" . $servport . "'; ?>\n");
file_put_contents("users/.$username.first", "First time, start up\n");
$_SESSION['idleirc-user'] = $username;
$_SESSION['idleirc-nick'] = $nickname;
$_SESSION['idleirc-pass'] = $password;
$_SESSION['idleirc-channel'] = $channame;
$_SESSION['idleirc-servaddr'] = $servaddr;
$_SESSION['idleirc-servport'] = $servport;
header("refresh: 0;url=index.php");
} else {
echo "Please prove a username...";
}
} else {
echo "ERROR: Passwords did not match...";
}
}
// If web frontend is trying to login, process and connect
if (isset($_GET['do']) && $_GET['do']=="login" && isset($_POST['submitBtn']) && isset($_POST['password']) && $_POST['password']!=""){
$name = isset($_POST['username']) && ($_POST['username'] !== "") && file_exists("users/" . $_POST['username'] . ".php") ? htmlentities(stripslashes($_POST['username'])) : "Unnamed";
if(file_exists("users/$name.php")) {
include("users/$name.php");
if(md5($_POST['password']) == $userpass) {
$_SESSION['idleirc-user'] = $name;
$_SESSION['idleirc-nick'] = $usernickname;
$_SESSION['idleirc-pass'] = $userpass;
$_SESSION['idleirc-channel'] = $userchannel;
$_SESSION['idleirc-servaddr'] = $userserver;
$_SESSION['idleirc-servport'] = $userserverport;
header("refresh: 0;url=index.php");
} else {
echo "ERROR: Failed to login: password incorrect.";
}
} else {
echo "ERROR: Password for $name does not match";
}
}
?>
<!DOCTYPE html>
<html>
<head>
<title><?php echo $title . " " . $version; ?></title>
<link href="<?php echo $ui_theme; ?>.css" rel="stylesheet" type="text/css" />
<meta http-equiv="content-type" content="text/html; charset=utf-8">
<meta name="description" content="<?php echo $desc; ?>" />
<meta name="viewport" content="width=device-width, initial-scale=.5, shrink-to-fit=yes">
<!--Needed for urls -->
<script language="javascript" type="text/javascript">
var nickName = "<?php echo $_SESSION['idleirc-user']; ?>";
</script>
<script language="javascript" type="text/javascript" src="core.js"></script>
<script language="javascript" type="text/javascript">
<?php
if($hellFreezedOver == "yes") {
?>
<!--
var httpObject = null;
var link = "";
var link2 = "";
var link3 = "";
var pinglink = "";
var ScrollDown = 0;
var msgBox = document.getElementById('msgs');
var userlist = document.getElementById('userlist');
var timerID = 0;
// Get the HTTP Object
function getHTTPObject() {
if (window.ActiveXObject) return new ActiveXObject("Microsoft.XMLHTTP");
else if (window.XMLHttpRequest) return new XMLHttpRequest();
else {
alert("Your browser does not support AJAX.");
return null;
}
}
// Change the value of the outputText field
function setHtml() {
if(ajaxVar.readyState == 4){
var response = ajaxVar.responseText;
var msgBox = document.getElementById("msgs");
msgBox.innerHTML += response;
ScrollDown = 0;
MsgScrollDown();
}
}
// Change the value of the outputText field
function setAll() {
if(ajaxVar.readyState == 4){
var response = ajaxVar.responseText;
var msgBox = document.getElementById("msgs");
msgBox.innerHTML = response;
ScrollDown = 0;
MsgScrollDown();
}
}
function doNotificationPm() {
if(ajaxVar4.readyState == 4){
var mentionUser = ajaxVar4.responseText;
if(Notification.permission==="granted") {
var notify = new Notification("Private message from " + mentionUser, { body: ""});
}
}
}
function getPmUser() {
ajaxVar4 = getHTTPObject();
//var randomnumber=Math.floor(Math.random()*10000);
if (ajaxVar4 != null) {
link4 = "server.php?get=notificationpmed&nick="+nickName;
ajaxVar4.open("GET", link4 , true);
ajaxVar4.onreadystatechange = doNotificationPm;
ajaxVar4.send(null);
}
}
function checkNotificationPm() {
if(ajaxVar5.readyState == 4){
var returnMsg = ajaxVar5.responseText;
var compareString = "true";
//console.log(returnMsg);
if(returnMsg.trim() === compareString.trim()) {
getPmUser();
}
}
}
function checkPmUrl() {
ajaxVar5 = getHTTPObject();
//var randomnumber=Math.floor(Math.random()*10000);
if (ajaxVar5 != null) {
link5 = "server.php?get=notificationpmedexists&nick="+nickName;
ajaxVar5.open("GET", link5 , true);
ajaxVar5.onreadystatechange = checkNotificationPm;
ajaxVar5.send(null);
}
}
function doNotificationMention() {
if(ajaxVar2.readyState == 4){
var mentionUser = ajaxVar2.responseText;
if(Notification.permission==="granted") {
var notify = new Notification("You were mentioned by " + mentionUser, { body: ""});
}
}
}
function getMentionUser() {
ajaxVar2 = getHTTPObject();
//var randomnumber=Math.floor(Math.random()*10000);
if (ajaxVar2 != null) {
link2 = "server.php?get=notificationmention&nick="+nickName;
ajaxVar2.open("GET", link2 , true);
ajaxVar2.onreadystatechange = doNotificationMention;
ajaxVar2.send(null);
}
}
function checkNotificationMention() {
if(ajaxVar3.readyState == 4){
var returnMsg = ajaxVar3.responseText;
var compareString = "true";
//console.log(returnMsg);
if(returnMsg.trim() === compareString.trim()) {
getMentionUser();
}
}
}
function checkMentionUrl() {
ajaxVar3 = getHTTPObject();
//var randomnumber=Math.floor(Math.random()*10000);
if (ajaxVar3 != null) {
link3 = "server.php?get=notificationmentionexists&nick="+nickName;
ajaxVar3.open("GET", link3 , true);
ajaxVar3.onreadystatechange = checkNotificationMention;
ajaxVar3.send(null);
}
}
// Implement business logic
function serverWrite() {
ajaxVar = getHTTPObject();
if (ajaxVar != null) {
link = "server.php?nick="+nickName+"&msg="+encodeURIComponent(document.getElementById('msg').value);
ajaxVar.open("GET", link , true);
ajaxVar.send(null);
}
}
// Implement business logic
function serverReload() {
ajaxVar = getHTTPObject();
//var randomnumber=Math.floor(Math.random()*10000);
if (ajaxVar != null) {
link = "server.php?get&nick="+nickName;
ajaxVar.open("GET", link , true);
ajaxVar.onreadystatechange = setAll;
ajaxVar.send(null);
}
}
function MsgScrollDown() {
if(ScrollDown != 1) {
var msgBox = document.getElementById("msgs");
msgBox.scrollTop = msgBox.scrollHeight;
ScrollDown = 1;
}
}
function UpdateTimer() {
serverReload();
MsgScrollDown();
checkPmUrl();
checkMentionUrl();
setTimeout(UpdateTimer, 1000);
}
function doLogin() {
ajaxVar = getHTTPObject();
if(ajaxVar != null) {
link = "server.php?do=login&nick="+nickName;
ajaxVar.open("GET", link, true);
ajaxVar.onreadystatechange = setHtml;
ajaxVar.send(null);
setTimeout(function() { window.location.reload(); },1000);
}
}
function doClearLog() {
ajaxVar = getHTTPObject();
if(ajaxVar != null) {
link = "server.php?do=clearlog&nick="+nickName;
ajaxVar.open("GET", link, true);
ajaxVar.onreadystatechange = setHtml;
ajaxVar.send(null);
setTimeout(function() { window.location.reload(); },1000);
}
}
function doLogout() {
ajaxVar = getHTTPObject();
if(ajaxVar != null) {
link = "server.php?do=logout&nick="+nickName;
ajaxVar.open("GET", link, true);
ajaxVar.onreadystatechange = setHtml;
ajaxVar.send(null);
setTimeout(function() { window.location.reload(); },1000);
}
}
/*window.onbeforeunload = function (e) {
doLogout();
};*/
function wrapBBCode(tag) {
var msgInput = document.getElementById('msg');
var content = msgInput.value;
var selectedContent = content.substring(msgInput.selectionStart, msgInput.selectionEnd);
var beforeContent = content.substring(0, msgInput.selectionStart);
var afterContent = content.substring(msgInput.selectionEnd, content.length);
msgInput.value = beforeContent + '[' + tag + ']' + selectedContent + '[/' + tag + ']' + afterContent;
}
<?php
// Lets test this
}
if(file_exists("users/." . $_SESSION['idleirc-user'] . ".pingfile"))
{
?>
function getInput() {
// Send the server function the input
var userInput = document.getElementById('msg');
serverWrite(userInput.value);
// Clean out the input values
var msgBar = document.getElementById("msg");
msgBar.value = "";
msgBar.focus();
}
function keypressed(e) {
if(e.keyCode=='13'){
getInput();
}
}
if(Notification.permission !== "granted") {
Notification.requestPermission();
}
<?php
} else {
?>
function getInput() {
// IRC bouncer not running, warn
alert("You're not connected to the server, please connect your bouncer to send messages");
}
function keypressed(e) {
if(e.keyCode=='13'){
getInput();
}
}
<?php
}
?>
//-->
</script>
</head>
<body <?php if(!isset($_GET['register']) && !isset($_GET['logs']) && !isset($_GET['settings']) && isset($_SESSION['idleirc-user']) && file_exists("users/." . $_SESSION['idleirc-user'] . ".pingfile")) { echo 'onload="UpdateTimer();"'; } ?>>
<div class="info"><?php echo $pagetitle;
if(isset($_SESSION['idleirc-user'])) { echo " ~ " . $_SESSION['idleirc-servaddr'] . ":" . $_SESSION['idleirc-servport'] . " on " . $_SESSION['idleirc-channel']; } ?></div>
<?php
if (isset($_GET['register'])) {
registerForm();
}
if (!isset($_SESSION['idleirc-user'])) {
if(!isset($_GET['register'])) {
loginForm();
}
} else if(isset($_GET['logs'])) {
$username = $_SESSION['idleirc-user'];
if(file_exists("users/$username.php")) {
include("users/$username.php");
} else {
$userpass = "";
}
if(isset($_SESSION['idleirc-pass']) && $userpass != "" && $userpass == $_SESSION['idleirc-pass']) {
echo "<div class='navbar'><a href='index.php'>Back to IRC</a> &bull; <a onclick='doClearLog();'>Clear IRC logs</a>";
if(file_exists("users/$username.logcount")) {
echo "<br />Archived: ";
$archivedLogCount = file_get_contents("users/$username.logcount");
for($x = $archivedLogCount ; $x > 0 ; $x--) {
echo "<a href='index.php?logs&page=$x'>$x</a>&nbsp;";
}
}
echo "</div><br />\n";
if(isset($_GET['page']) && $_GET['page']!="") {
$logcontents = file_get_contents("users/$username." . $_GET['page'] . ".log");
echo "<div id='logmsgs'><table>\n" . $logcontents . "</table></div>\n";
} else {
$logcontents = file_get_contents("users/$username.log");
echo "<div id='logmsgs'><table>\n" . $logcontents . "</table></div>\n";
}
}
} else if(isset($_GET['settings'])) {
$username = $_SESSION['idleirc-user'];
$logcontents = file_get_contents("users/$username.log");
if(file_exists("users/$username.php")) {
include("users/$username.php");
} else {
$userpass = "";
}
if(isset($_SESSION['idleirc-pass']) && $userpass != "" && $userpass == $_SESSION['idleirc-pass']) {
echo "<div class='navbar'><a href='index.php'>Back to IRC</a></div><br />\n";
?>
<br>
<div style="width: 500px; margin: 0 auto; text-align: center;">
<p>Leave fields blank that you'd not like set. Fill in what you'd want to change and hit set. Settings will be saved and session will be updated</p>
<form action="<?php echo $_SERVER['PHP_SELF']; ?>?do=settings" method="post">
<table>
<tr><td>Default Nickname: </td><td> <input style="padding: 2px; width: 300px;" class="text" type="text" name="nick"></td></tr>
<tr><td>Autoconnect/focus channel: </td><td> <input style="padding: 2px; width: 300px;" class="text" type="text" name="channel" value="<?php echo $default_channel; ?>"></td></tr>
<tr><td>New password: </td><td> <input style="padding: 2px; width: 300px;" class="text" type="password" name="password"></td></tr>
<?php
if($allowMultiServer == "true") {
?> <tr><td>Server (IP:Port)</td><td> <input style="padding: 2px; width: 236px;" class="text" type="text" name="servaddr" value="<?php echo $server; ?>">:<input style="padding: 2px; width: 50px;" class="text" type="text" name="servport" value="<?php echo $port; ?>"></td></tr><?php
}
?>
</table>
<input style="padding: 2px;" class="text" type="submit" name="submitBtn" value="Set">
</form>
</div>
<?php
}
} else {
?>
<div class="navbar">
<a href="index.php?do=logout">Logout</a>
<?php
// If this is the first login, make sure to start the bouncer! From there, the user will have toggle control.
if (!file_exists("users/." . $_SESSION['idleirc-user'] . ".pingfile") && file_exists("users/." . $_SESSION['idleirc-user'] . ".first")) {
unlink("users/." . $_SESSION['idleirc-user'] . ".first");
echo "<script language='javascript' type='text/javascript'>doLogin();</script>";
}
if (!file_exists("users/." . $_SESSION['idleirc-user'] . ".pingfile"))
{
echo "&bull;\n<a onclick='doLogin();'>Connect to server</a>\n";
} else {
echo "&bull;\n<a onclick='doLogout();'>Disconnect from server</a>\n";
}
?>
&bull;
<a href="index.php?logs">IRC Logs</a>
&bull;
<a href="index.php?settings">Settings</a>
</div><br />
<table class="clientcontain">
<tr><td id="userlist">
</td><td id="client">
<div id="msgs">
<?php
echo "<table>";
$get = file_get_contents("users/" . $_SESSION['idleirc-user'] . ".log");
echo $get;
echo "</table>";
?>
</div>
<div id="msgbox" onkeyup="keypressed(event);">
<table>
<tr>
<td>
<textarea name="msg" id="msg"></textarea>
</td>
<td>
<button onclick="getInput();">Send</button>
</td>
</tr>
</table>
</div>
<?php
}
?>
</td>
</tr></table>
<div id="footer">Powered by <a href='https://notabug.org/Pentium44/idleirc'><?php echo $title . " " . $version; ?></a></div>
</div>
</body>
</html>