logdnet.php

<?php
// translator ready
// addnews ready
// mail ready

define("ALLOW_ANONYMOUS",true);
if (!isset($_GET['op']) || $_GET['op']!='list'){
	//don't want people to be able to visit the list while logged in -- breaks their navs.
	define("OVERRIDE_FORCED_NAV",true);
}
require_once("common.php");
require_once("lib/http.php");
require_once("lib/sanitize.php");

translator::tlschema("logdnet");

function lotgdsort($a, $b)
{
	// $a and $b are table rows.

	global $logd_version;
	$official_prefixes = array(
		"1.1.2 Dragonprime Edition",
		"1.1.1 Dragonprime Edition",
		"1.1.0 Dragonprime Edition",
		"1.0.6",
		"1.0.5",
		"1.0.4",
		"1.0.3",
		"1.0.2",
		"1.0.1",
		"1.0.0",
		// MUST REMEMBER TO PUT NEW PRE-RELEASES HERE
		"0.9.7"
	);

	$aver = strtolower(str_replace(' ', '', $a['version']));
	$bver = strtolower(str_replace(' ', '', $b['version']));

	// Okay, if $a and $b are the same version, use the priority
	// This is true whether or not they are the official version or not.
	// We bubble the official version to the top below.
	if (strcmp($aver, $bver) == 0) {
		if ($a['priority'] == $b['priority']) return 0;
		return (($a['priority'] < $b['priority']) ? 1 : -1);
	}

	// Unknown versions are always worse than non-unknown
	if (strcmp($aver, "unknown") == 0 && strcmp($bver, "unknown") != 0) {
		return 1;
	}
	if (strcmp($bver, "unknown") == 0 && strcmp($aver, "unknown") != 0) {
		return -1;
	}

	// Check if either of them are a prefix.
	$costa = 10000;
	$costb = 10000;
	foreach ($official_prefixes as $index => $value) {
		if (strncmp($aver, $value, strlen($value)) == 0)
			if ($costa == 10000) $costa = $index;
		if (strncmp($bver, $value, strlen($value)) == 0)
			if ($costb == 10000) $costb = $index;
	}

	// If both are the same prefix (or no prefix), just strcmp.
	if ($costa == $costb) {
		return strcmp($aver, $bver);
	}

	return (($costa < $costb) ? -1 : 1);
}

$op = http::httpget('op');
if ($op==""){
	$addy = http::httpget('addy');
	$desc = http::httpget('desc');
	$vers = http::httpget('version');
	$admin = http::httpget('admin');
	$count = http::httpget('c')*1;
	$lang = http::httpget('l');

	if ($vers == "") $vers = "Unknown";
	if ($admin == "" || $admin=="postmaster@localhost.com")
		$admin = "unknown";

	// See if we know this server.
	$sql = "SELECT lastupdate,serverid,lastping,recentips FROM " . db_prefix("logdnet") . " WHERE address='$addy'";
	$result = db_query($sql);
	$row = db_fetch_assoc($result);

	// Clean up the desc
	$desc = logdnet_sanitize($desc);
	$desc = soap($desc);
	// Limit descs to 75 characters.
	if (strlen($desc) > 75) $desc = substr($desc, 0, 75);

	$date = date("Y-m-d H:i:s");
	if (db_num_rows($result)>0){
		// This is an already known server.

		// Eric, this below code does NOT work and causes a server to NEVER
		// get updated.. I'm commenting it out until you rethink it!
		// the server addy doesn't *change* so by checking this we never
		// update
		// It seems as if you thought this was the IP of the user logging in.
		// Also, nothing ever expires the IP from this list.
		//$ips = array_flip(explode(",",$row['recentips']));
		//if (isset($ips[$_SERVER['REMOTE_ADDR']])){
		//	//we've seen this user too recently.
		//}else{
		//	$ips = array_keys($ips);
		//	if (!isset($ips[$_SERVER['REMOTE_ADDR']]))
		//		array_push($ips,$_SERVER['REMOTE_ADDR']);
		//	$ips = addslashes(join(',',$ips));

		// TEMP hack for IPs
		$ips = $_SERVER['REMOTE_ADDR'];
			// Only one update per minute allowed.
			if (strtotime($row['lastping'])<strtotime("-1 minutes")){
				// Increase the popularity of this server
				$sql = "UPDATE " . db_prefix("logdnet") . " SET lang='$lang',count='$count',recentips='$ips',priority=priority+1,description='$desc',version='$vers',admin='$admin',lastupdate='$date',lastping='$date' WHERE serverid={$row['serverid']}";
				db_query($sql);
			}
	//	}
	}else{
		// This is a new server, so add it and give it a small priority boost.
		$sql = "INSERT INTO " . db_prefix("logdnet") . " (address,description,version,admin,priority,lastupdate,lastping,count,recentips,lang) VALUES ('$addy','$desc','$vers','$admin',10,'$date','$date','$count','{$_SERVER['REMOTE_ADDR']}','$lang')";
		$result = db_query($sql);
	}

	// Do these next two things whether we've added a new server or
	// updated an old one

	// Delete servers older than a week
	$sql = "DELETE FROM " . db_prefix("logdnet") . " WHERE lastping < '".date("Y-m-d H:i:s",strtotime("-2 weeks"))."'";
	db_query($sql);

	// Degrade the popularity of any server which hasn't been updated in the
	// past 5 minutes by 1%.  This means that unpopular servers will fall
	// toward the bottom of the list.
	$since = date("Y-m-d H:i:s", strtotime("-5 minutes"));
	$sql = "UPDATE " .  db_prefix("logdnet") . " SET priority=priority*0.99,lastupdate='".date("Y-m-d H:i:s") . "' WHERE lastupdate < '$since'";
	db_query($sql);

	//Now, if we're using version 2 of LoGDnet, we'll return the appropriate code.
	$v = http::httpget("v");
	if ((int)$v>=2){
		$currency = settings::getsetting("paypalcurrency", "USD");
		$info = array();
		$info[''] = '<!--data from '.$_SERVER['HTTP_HOST'].'-->
<form action="https://www.paypal.com/cgi-bin/webscr" method="post" target="_blank">
<input type="hidden" name="cmd" value="_xclick">
<input type="hidden" name="business" value="logd@mightye.org">
<input type="hidden" name="item_name" value="Legend of the Green Dragon Author Donation from %s">
<input type="hidden" name="item_number" value="%s">
<input type="hidden" name="no_shipping" value="1">
<input type="hidden" name="notify_url" value="http://lotgd.net/payment.php">
<input type="hidden" name="cn" value="Your Character Name">
<input type="hidden" name="cs" value="1">
<input type="hidden" name="currency_code" value="' . $currency . '">
<input type="hidden" name="tax" value="0">
<input type="image" src="images/logdnet.php" border="0" width="62" height="57" name="submit" alt="Donate!">
</form>';
		$info['image'] = join("",file("images/paypal1.gif"));
		$info['content-type'] = "image/gif";

		echo base64_encode(serialize($info));
	}
}elseif ($op=="net"){
	// Someone is requesting our list of servers, so give it to them.

	// I'm going to do a slightly niftier sort manually in a bit which always
	// pops the most recent 'official' versions to the top of the list.
	$sql = "SELECT address,description,version,admin,priority FROM " . db_prefix("logdnet") . " WHERE lastping > '".date("Y-m-d H:i:s",strtotime("-7 days"))."'";
	$result=db_query($sql);
	$rows = array();
	$number=db_num_rows($result);
	for ($i=0;$i<$number;$i++){
		$rows[] = db_fetch_assoc($result);
	}
	$rows = apply_logdnet_bans($rows);
	usort($rows, "lotgdsort");

	// Okay, they are now sorted, so output them
	for ($i = 0; $i < count($rows); $i++) {
		$row = serialize($rows[$i]);
		echo $row."\n";
	}
}else{
	page_header("LoGD Net");
	output::addnav("Login page","index.php");
	output::doOutput("`@Below are a list of other LoGD servers that have registered with the LoGD Net.`n");
	output::doOutput("`2It should be noted that this list is subject to editing and culling by the administrators of logdnet.logd.com. ");
	output::doOutput("Normally this list is a comprehensive list of all servers that have elected to register with LoGDnet, but I'm making changes to that. ");
	output::doOutput("Because this list is a free service provided by logdnet.logd.com, we reserve the right to remove those who we don't want in the list.`n");
	output::doOutput("Reasons we might remove a server:`n");
	output::doOutput("&#149; Altering our copyright statement outside of the provisions we have provided within the code,`n", true);
	output::doOutput("&#149; Removing our PayPal link,`n", true);
	output::doOutput("&#149; Providing deceptive, inappropriate, or false information in the server listing,`n", true);
	output::doOutput("&#149; Not linking back to LoGDnet`n", true);
	output::doOutput("Or really, any other reason that we want.`n");
	output::doOutput("If you've been banned already, chances are you know why, and chances are we've got no interest in removing the ban.");
	output::doOutput("We provide this free of charge, at the expense of considerable bandwidth and server load, so if you've had the gall to abuse our charity, don't expect it to be won back very easily.`n`n");
	output::doOutput("If you are well behaved, we don't have an interest in blocking you from this listing. `0`n");
	rawoutput("<table border='0' cellpadding='1' cellspacing='0'>");
	rawoutput("<tr class='trhead'><td>");
	output::doOutput("Server");
	rawoutput("</td><td>");
	output::doOutput("Version");
	rawoutput("</td>");
	require_once("lib/pullurl.php");
	$u = settings::getsetting("logdnetserver", "http://logdnet.logd.com/");
	if (!preg_match("/\\/$/", $u)) {
		$u = $u . "/";
		savesetting("logdnetserver", $u);
	}
	$servers=pullurl($u."logdnet.php?op=net");
	if (!$servers) $servers = array();
	$i = 0;
	while (list($key,$val)=each($servers)){
		$row=unserialize($val);

		// If we aren't given an address, continue on.
		if (substr($row['address'],0,7)!="http://" &&
				substr($row['address'],0,8) != "https://") {
			continue;
		}

		// Give undescribed servers a boring descriptionn
		if (trim($row['description'])=="")
			$row['description']="Another boring and undescribed LotGD server";

		// Strip out any embedded html.
		$row['description'] =
			preg_replace("|<[a-zA-Z0-9/ =]+>|", "", $row['description']);

		// Clean up the desc
		$row['description'] = logdnet_sanitize($row['description']);
		$row['description'] = soap($row['description']);
		// Limit descs to 75 characters.
		if (strlen($row['description']) > 75)
			$row['description'] = substr($row['description'], 0, 75);

		$row['description'] = htmlentities(stripslashes($row['description']), ENT_COMPAT, settings::getsetting("charset", "ISO-8859-1"));
		$row['description'] = str_replace("`&amp;", "`&", $row['description']);

		// Correct for old logdnet servers
		if ($row['version']=="") $row['version'] = translator::translate_inline("Unknown");

		// Output the information we have.
		rawoutput("<tr class='" . ($i%2==0?"trlight":"trdark") . "'>");
		rawoutput("<td><a href=\"".HTMLEntities($row['address'], ENT_COMPAT, settings::getsetting("charset", "ISO-8859-1"))."\" target='_blank'>");
		output_notl("`&%s`0",$row['description'], true);
		rawoutput("</a></td><td>");
		output_notl("`^%s`0", $row['version']); // so we are able to translate "`^Unknown`0"
		rawoutput("</td></tr>");
		$i++;
	}
	rawoutput("</table>");
	page_footer();
}

function apply_logdnet_bans($logdnet){
	$sql = "SELECT * FROM ".db_prefix("logdnetbans");
	$result = db_query($sql,"logdnetbans");
	while ($row = db_fetch_assoc($result)){
		reset($logdnet);
		while (list($i,$net)=each($logdnet)){
			if (preg_match("/{$row['banvalue']}/i",$net[$row['bantype']])){
				unset($logdnet[$i]);
			}
		}
	}
	return $logdnet;
}