mirror of
https://github.com/Shadowss/TravianZ.git
synced 2026-06-28 00:24:23 +00:00
Catalin Novgorodschi
500 lines
15 KiB
PHP
Executable File
500 lines
15 KiB
PHP
Executable File
<?php
|
||
use App\Entity\User;
|
||
|
||
ob_start(); // Enesure, that no more header already been sent error not showing up again
|
||
mb_internal_encoding("UTF-8"); // Add for utf8 varriables.
|
||
|
||
#################################################################################
|
||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||
## --------------------------------------------------------------------------- ##
|
||
## Project: TravianZ ##
|
||
## Version: 22.06.2015 ##
|
||
## Filename Session.php ##
|
||
## Developed by: Mr.php , Advocaite , brainiacX , yi12345 , Shadow , ronix ##
|
||
## Fixed by: Shadow - STARVATION , HERO FIXED COMPL. ##
|
||
## Fixed by: InCube - double troops ##
|
||
## Refactored TravianZ Enterprise Hardened Core by Shadow ##
|
||
## License: TravianZ Project ##
|
||
## Copyright: TravianZ (c) 2010-2015. All rights reserved. ##
|
||
## URLs: http://travian.shadowss.ro ##
|
||
## Source code: https://github.com/Shadowss/TravianZ ##
|
||
## ##
|
||
#################################################################################
|
||
|
||
global $autoprefix;
|
||
|
||
$autoprefix = '';
|
||
for ($i = 0; $i < 5; $i++) {
|
||
$autoprefix = str_repeat('../', $i);
|
||
if (file_exists($autoprefix.'autoloader.php')) {
|
||
break;
|
||
}
|
||
}
|
||
|
||
if(!file_exists($autoprefix.'GameEngine/config.php')) {
|
||
header("Location: install/");
|
||
exit;
|
||
}
|
||
|
||
$script_name = ($_SERVER['REQUEST_URI'] == 'karte.php') ? 'karte' : $_SERVER['REQUEST_URI'];
|
||
|
||
include_once ("Battle.php");
|
||
include_once ("Data/buidata.php");
|
||
include_once ("Data/cp.php");
|
||
include_once ("Data/cel.php");
|
||
include_once ("Data/resdata.php");
|
||
include_once ("Data/unitdata.php");
|
||
include_once ("Data/hero_full.php");
|
||
include_once ("config.php");
|
||
include_once ("Database.php");
|
||
include_once ("Mailer.php");
|
||
include_once ("Form.php");
|
||
include_once ("Generator.php");
|
||
include_once ("Multisort.php");
|
||
include_once ("Ranking.php");
|
||
include_once ("Lang/" . LANG . ".php");
|
||
include_once ("Logging.php");
|
||
include_once ("Message.php");
|
||
include_once ("Alliance.php");
|
||
include_once ("Profile.php");
|
||
|
||
class Session {
|
||
|
||
private $time;
|
||
var $logged_in = false;
|
||
var $referrer, $url;
|
||
var $username, $uid, $access, $plus, $tribe, $isAdmin, $alliance, $gold, $oldrank, $gpack, $goldclub;
|
||
var $bonus = 0;
|
||
var $bonus1 = 0;
|
||
var $bonus2 = 0;
|
||
var $bonus3 = 0;
|
||
var $bonus4 = 0;
|
||
var $timer = 0;
|
||
var $sharedForums = array();
|
||
var $checker, $mchecker;
|
||
public $userinfo = array();
|
||
private $userarray = array();
|
||
var $villages = array();
|
||
|
||
function __construct() {
|
||
global $database;
|
||
|
||
$this->time = time();
|
||
|
||
if (session_status() == PHP_SESSION_NONE) {
|
||
session_start();
|
||
}
|
||
|
||
session_regenerate_id(true); // 🔒 Session fixation protection
|
||
|
||
$this->logged_in = $this->checkLogin();
|
||
|
||
if($this->logged_in && TRACK_USR) {
|
||
$database->updateActiveUser($this->username, $this->time);
|
||
}
|
||
|
||
$this->referrer = isset($_SESSION['url']) ? $_SESSION['url'] : "/";
|
||
$this->url = $_SESSION['url'] = $_SERVER['PHP_SELF'];
|
||
|
||
$this->SurfControl();
|
||
}
|
||
public function Login($user) {
|
||
global $database, $generator, $logging;
|
||
|
||
if(empty($user)) {
|
||
header("Location: login.php");
|
||
exit;
|
||
}
|
||
|
||
$this->logged_in = true;
|
||
|
||
$_SESSION['sessid'] = $generator->generateRandID();
|
||
$_SESSION['username'] = $user;
|
||
$_SESSION['checker'] = $generator->generateRandStr(3);
|
||
$_SESSION['mchecker'] = $generator->generateRandStr(5);
|
||
|
||
// 🔒 Prepared statement (critical zone)
|
||
$stmt = $database->dblink->prepare(
|
||
"SELECT id, quest, village_select FROM " . TB_PREFIX . "users WHERE username = ? LIMIT 1"
|
||
);
|
||
$stmt->bind_param("s", $user);
|
||
$stmt->execute();
|
||
$result = $stmt->get_result();
|
||
$dbarray = $result->fetch_assoc();
|
||
$stmt->close();
|
||
|
||
if(!$dbarray) {
|
||
$this->Logout();
|
||
header("Location: login.php");
|
||
exit;
|
||
}
|
||
|
||
$_SESSION['id_user'] = (int)$dbarray['id'];
|
||
$_SESSION['qst'] = $dbarray['quest'];
|
||
|
||
$selected_village = (int)$dbarray['village_select'];
|
||
|
||
if(!isset($_SESSION['wid']) || empty($_SESSION['wid'])) {
|
||
|
||
if(!empty($selected_village)) {
|
||
$data = $database->getVillage($selected_village);
|
||
} else {
|
||
$data = $database->getVillage($dbarray['id']);
|
||
}
|
||
|
||
if(isset($data['wref'])) {
|
||
$_SESSION['wid'] = (int)$data['wref'];
|
||
}
|
||
}
|
||
|
||
$this->PopulateVar();
|
||
|
||
$database->updateActiveUser($user, $this->time);
|
||
$database->updateUserField($user, "sessid", $_SESSION['sessid'], 0);
|
||
|
||
$logging->addLoginLog($dbarray['id'], $_SERVER['REMOTE_ADDR']);
|
||
|
||
if ($dbarray['id'] == 1) {
|
||
header("Location: nachrichten.php");
|
||
} else {
|
||
header("Location: dorf1.php");
|
||
}
|
||
exit;
|
||
}
|
||
|
||
public function Logout() {
|
||
global $database;
|
||
|
||
$this->logged_in = false;
|
||
|
||
if(isset($_SESSION['username'])) {
|
||
$database->updateUserField($_SESSION['username'], "sessid", "", 0);
|
||
}
|
||
|
||
$_SESSION = array();
|
||
|
||
if (ini_get("session.use_cookies")) {
|
||
$params = session_get_cookie_params();
|
||
setcookie(session_name(), '', time() - 42000,
|
||
$params["path"],
|
||
$params["domain"],
|
||
$params["secure"],
|
||
$params["httponly"]
|
||
);
|
||
}
|
||
|
||
session_destroy();
|
||
session_start();
|
||
}
|
||
|
||
public function changeChecker() {
|
||
global $generator;
|
||
|
||
$this->checker = $_SESSION['checker'] = $generator->generateRandStr(3);
|
||
$this->mchecker = $_SESSION['mchecker'] = $generator->generateRandStr(5);
|
||
}
|
||
private function checkLogin() {
|
||
global $database;
|
||
|
||
$user = '';
|
||
$id = 0;
|
||
$admin = false;
|
||
$inAdmin = (strpos($_SERVER['REQUEST_URI'], '/Admin') !== false);
|
||
|
||
if (!$inAdmin && isset($_SESSION['username'])) {
|
||
$user = $_SESSION['username'];
|
||
$id = isset($_SESSION['id_user']) ? (int)$_SESSION['id_user'] : 0;
|
||
}
|
||
else if ($inAdmin && isset($_SESSION['admin_username'])) {
|
||
$user = $_SESSION['admin_username'];
|
||
$id = isset($_SESSION['id']) ? (int)$_SESSION['id'] : 0;
|
||
$admin = true;
|
||
}
|
||
|
||
if ($user && ($admin || isset($_SESSION['sessid']))) {
|
||
|
||
$this->maintenance();
|
||
$this->isWinner();
|
||
|
||
// 🔒 Support restriction hardening
|
||
if ($user === 'Support') {
|
||
$req_file = basename($_SERVER['PHP_SELF']);
|
||
$allowed = array(
|
||
'nachrichten.php',
|
||
'logout.php',
|
||
'statistiken.php',
|
||
'rules.php',
|
||
'karte.php',
|
||
'karte2.php',
|
||
'spieler.php'
|
||
);
|
||
|
||
if (!in_array($req_file, $allowed)) {
|
||
header('Location: nachrichten.php');
|
||
exit;
|
||
}
|
||
}
|
||
|
||
// Populate user data
|
||
$this->PopulateVar();
|
||
|
||
// Ban check
|
||
$this->isBanned();
|
||
|
||
$database->updateActiveUser($user, $this->time);
|
||
|
||
return true;
|
||
}
|
||
|
||
return false;
|
||
}
|
||
|
||
/**
|
||
* Ban control
|
||
*/
|
||
function isBanned() {
|
||
$current = basename($_SERVER['PHP_SELF']);
|
||
|
||
if ($this->access == BANNED &&
|
||
!in_array($current, array('banned.php','nachrichten.php','rules.php'))) {
|
||
|
||
header('Location: banned.php');
|
||
exit;
|
||
}
|
||
}
|
||
|
||
/**
|
||
* Maintenance control
|
||
*/
|
||
function maintenance() {
|
||
$current = basename($_SERVER['PHP_SELF']);
|
||
|
||
if (isset($_SESSION['ok']) &&
|
||
$_SESSION['ok'] == 2 &&
|
||
$current != 'maintenance.php') {
|
||
|
||
header('Location: maintenance.php');
|
||
exit;
|
||
}
|
||
}
|
||
|
||
/**
|
||
* Winner check (WW level 100)
|
||
*/
|
||
function isWinner() {
|
||
global $database;
|
||
|
||
$requiredPage = basename($_SERVER['PHP_SELF']);
|
||
|
||
if ($database->isThereAWinner()) {
|
||
|
||
$restricted = array('build.php', 'plus1.php');
|
||
|
||
if (in_array($requiredPage, $restricted) ||
|
||
($requiredPage == 'plus.php' &&
|
||
isset($_GET['id']) &&
|
||
is_numeric($_GET['id']) &&
|
||
(int)$_GET['id'] >= 7)) {
|
||
|
||
header('Location: winner.php');
|
||
exit;
|
||
}
|
||
}
|
||
}
|
||
/**
|
||
* Hero integrity verification
|
||
* (Enterprise hardened – logic 1:1)
|
||
*/
|
||
function CheckHeroReal() {
|
||
global $database;
|
||
|
||
if (!is_array($this->villages) || !count($this->villages)) {
|
||
$this->Logout();
|
||
header('Location: login.php');
|
||
exit;
|
||
}
|
||
|
||
// 🔒 sanitize village IDs (critical SQL protection)
|
||
$safeVillageIDs = array();
|
||
foreach ($this->villages as $v) {
|
||
$safeVillageIDs[] = (int)$v;
|
||
}
|
||
|
||
$villageIDs = implode(',', $safeVillageIDs);
|
||
|
||
$q = "
|
||
SELECT
|
||
IFNULL((SELECT SUM(hero) FROM ".TB_PREFIX."enforcement WHERE `from` IN($villageIDs)),0) +
|
||
IFNULL((SELECT SUM(hero) FROM ".TB_PREFIX."units WHERE `vref` IN($villageIDs)),0) +
|
||
IFNULL((SELECT SUM(t11) FROM ".TB_PREFIX."prisoners WHERE `from` IN($villageIDs)),0) +
|
||
IFNULL((SELECT SUM(t11) FROM ".TB_PREFIX."movement m
|
||
JOIN ".TB_PREFIX."attacks a ON m.ref = a.id
|
||
WHERE m.`from` IN($villageIDs)
|
||
AND m.proc = 0 AND m.sort_type = 3),0) +
|
||
IFNULL((SELECT SUM(t11) FROM ".TB_PREFIX."movement m
|
||
JOIN ".TB_PREFIX."attacks a ON m.ref = a.id
|
||
WHERE m.`to` IN($villageIDs)
|
||
AND m.proc = 0 AND m.sort_type = 4),0)
|
||
AS herocount
|
||
";
|
||
|
||
$res = mysqli_query($database->dblink, $q);
|
||
$row = mysqli_fetch_assoc($res);
|
||
$heroUnitRegisters = isset($row['herocount']) ? (int)$row['herocount'] : 0;
|
||
|
||
$isHeroLivingOrRaising = $database->getHeroDeadReviveOrInTraining($this->uid);
|
||
|
||
if (!$heroUnitRegisters && $isHeroLivingOrRaising) {
|
||
$database->KillMyHero($this->uid);
|
||
}
|
||
}
|
||
|
||
/**
|
||
* Populate session variables (NO LOGIC CHANGE)
|
||
*/
|
||
private function PopulateVar() {
|
||
global $database;
|
||
|
||
$this->userarray = $this->userinfo =
|
||
$database->getUserArray($_SESSION['username'], 0);
|
||
|
||
if (!is_array($this->userarray)) {
|
||
$this->Logout();
|
||
header('Location: login.php');
|
||
exit;
|
||
}
|
||
|
||
$this->username = $this->userarray['username'];
|
||
$this->uid = $_SESSION['id_user'] = (int)$this->userarray['id'];
|
||
$this->gpack = $this->userarray['gpack'];
|
||
$this->access = (int)$this->userarray['access'];
|
||
$this->plus = ($this->userarray['plus'] > $this->time);
|
||
$this->goldclub = (int)$this->userarray['goldclub'];
|
||
$this->tribe = (int)$this->userarray['tribe'];
|
||
$this->isAdmin = ($this->access >= MODERATOR);
|
||
$this->alliance = $_SESSION['alliance_user'] = (int)$this->userarray['alliance'];
|
||
|
||
$this->checker = $_SESSION['checker'];
|
||
$this->mchecker = $_SESSION['mchecker'];
|
||
|
||
$this->villages = $database->getVillagesID($this->uid);
|
||
$this->sit = $database->GetOnline($this->uid);
|
||
$this->sit1 = (int)$this->userarray['sit1'];
|
||
$this->sit2 = (int)$this->userarray['sit2'];
|
||
$this->cp = floor($this->userarray['cp']);
|
||
$this->gold = (int)$this->userarray['gold'];
|
||
$this->oldrank = (int)$this->userarray['oldrank'];
|
||
$this->sharedForums = $database->getSharedForums($this->uid, $this->alliance);
|
||
|
||
$_SESSION['ok'] = $this->userarray['ok'];
|
||
|
||
// bonuses
|
||
if ($this->userarray['b1'] > $this->time) $this->bonus1 = 1;
|
||
if ($this->userarray['b2'] > $this->time) $this->bonus2 = 1;
|
||
if ($this->userarray['b3'] > $this->time) $this->bonus3 = 1;
|
||
if ($this->userarray['b4'] > $this->time) $this->bonus4 = 1;
|
||
|
||
if (!in_array($this->username, array('Support','Multihunter'))) {
|
||
$this->CheckHeroReal();
|
||
}
|
||
}
|
||
|
||
/**
|
||
* Populate attack indicators
|
||
*/
|
||
public function populateAttacks() {
|
||
global $database, $village;
|
||
|
||
$_SESSION['troops_movement'] = array(
|
||
'scouts' => array(),
|
||
'enforcements' => array(),
|
||
'attacks' => array()
|
||
);
|
||
|
||
$troopsMovement = $database->getMovement(3, $village->wid, 0);
|
||
|
||
if (is_array($troopsMovement) && count($troopsMovement) > 0) {
|
||
|
||
foreach ($troopsMovement as $movement) {
|
||
|
||
switch ((int)$movement['attack_type']) {
|
||
|
||
case 1:
|
||
$_SESSION['troops_movement']['scouts'][] = $movement['to'];
|
||
break;
|
||
|
||
case 2:
|
||
$_SESSION['troops_movement']['enforcements'][] = $movement['to'];
|
||
break;
|
||
|
||
case 3:
|
||
case 4:
|
||
$_SESSION['troops_movement']['attacks'][] = $movement['to'];
|
||
break;
|
||
}
|
||
}
|
||
}
|
||
}
|
||
/**
|
||
* Page access control
|
||
* Enterprise hardened – logic 1:1
|
||
*/
|
||
private function SurfControl() {
|
||
|
||
if (SERVER_WEB_ROOT) {
|
||
$page = basename($_SERVER['SCRIPT_NAME']);
|
||
} else {
|
||
$explode = explode("/", $_SERVER['SCRIPT_NAME']);
|
||
$page = end($explode);
|
||
}
|
||
|
||
$allowedWithoutLogin = array(
|
||
"index.php",
|
||
"anleitung.php",
|
||
"tutorial.php",
|
||
"login.php",
|
||
"activate.php",
|
||
"anmelden.php",
|
||
"xaccount.php"
|
||
);
|
||
|
||
if (!$this->logged_in) {
|
||
|
||
if (!in_array($page, $allowedWithoutLogin) || $page == "logout.php") {
|
||
header("Location: login.php");
|
||
exit;
|
||
}
|
||
|
||
} else {
|
||
|
||
if (in_array($page, $allowedWithoutLogin)) {
|
||
|
||
if ($this->uid == 1) {
|
||
header("Location: nachrichten.php");
|
||
} else {
|
||
header("Location: dorf1.php");
|
||
}
|
||
exit;
|
||
}
|
||
}
|
||
}
|
||
|
||
} // END CLASS
|
||
|
||
$session = new Session();
|
||
$form = new Form();
|
||
|
||
/**
|
||
* Message + User init
|
||
* Enterprise safe instantiation
|
||
*/
|
||
|
||
if (!empty($_SESSION['id_user']) && is_numeric($_SESSION['id_user'])) {
|
||
|
||
$message = new Message();
|
||
|
||
// Safe casting
|
||
$user = new User((int)$_SESSION['id_user'], $database);
|
||
}
|
||
|