login.c 61 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940
  1. // Copyright (c) Athena Dev Teams - Licensed under GNU GPL
  2. // For more information, see LICENCE in the main folder
  3. #include "../common/cbasetypes.h"
  4. #include "../common/mmo.h"
  5. #include "../common/core.h"
  6. #include "../common/socket.h"
  7. #include "../common/db.h"
  8. #include "../common/timer.h"
  9. #include "../common/malloc.h"
  10. #include "../common/strlib.h"
  11. #include "../common/showmsg.h"
  12. #include "../common/version.h"
  13. #include "../common/md5calc.h"
  14. #include "../common/sql.h"
  15. #include "login.h"
  16. #include <stdio.h>
  17. #include <stdlib.h>
  18. #include <string.h>
  19. #include <sys/stat.h> // for stat/lstat/fstat
  20. struct Login_Config login_config;
  21. int login_fd; // login server socket
  22. #define MAX_SERVERS 30
  23. struct mmo_char_server server[MAX_SERVERS]; // char server data
  24. // Advanced subnet check [LuzZza]
  25. struct s_subnet {
  26. uint32 mask;
  27. uint32 char_ip;
  28. uint32 map_ip;
  29. } subnet[16];
  30. int subnet_count = 0;
  31. struct gm_account* gm_account_db = NULL;
  32. unsigned int GM_num = 0; // number of gm accounts
  33. //Account registration flood protection [Kevin]
  34. int allowed_regs = 1;
  35. int time_allowed = 10; //in seconds
  36. unsigned int new_reg_tick = 0;
  37. int num_regs = 0;
  38. Sql* sql_handle;
  39. // database parameters
  40. uint16 login_server_port = 3306;
  41. char login_server_ip[32] = "127.0.0.1";
  42. char login_server_id[32] = "ragnarok";
  43. char login_server_pw[32] = "ragnarok";
  44. char login_server_db[32] = "ragnarok";
  45. char default_codepage[32] = "";
  46. char login_db[256] = "login";
  47. char loginlog_db[256] = "loginlog";
  48. char reg_db[256] = "global_reg_value";
  49. // added to help out custom login tables, without having to recompile
  50. // source so options are kept in the login_athena.conf or the inter_athena.conf
  51. char login_db_account_id[256] = "account_id";
  52. char login_db_userid[256] = "userid";
  53. char login_db_user_pass[256] = "user_pass";
  54. char login_db_level[256] = "level";
  55. //-----------------------------------------------------
  56. struct login_session_data {
  57. uint16 md5keylen;
  58. char md5key[20];
  59. };
  60. // auth information of incoming clients
  61. struct _auth_fifo auth_fifo[AUTH_FIFO_SIZE];
  62. int auth_fifo_pos = 0;
  63. //-----------------------------------------------------
  64. // Online User Database [Wizputer]
  65. //-----------------------------------------------------
  66. struct online_login_data {
  67. int account_id;
  68. int waiting_disconnect;
  69. int char_server;
  70. };
  71. static DBMap* online_db; // int account_id -> struct online_login_data*
  72. static int waiting_disconnect_timer(int tid, unsigned int tick, int id, int data);
  73. static void* create_online_user(DBKey key, va_list args)
  74. {
  75. struct online_login_data* p;
  76. CREATE(p, struct online_login_data, 1);
  77. p->account_id = key.i;
  78. p->char_server = -1;
  79. p->waiting_disconnect = -1;
  80. return p;
  81. }
  82. void add_online_user(int char_server, int account_id)
  83. {
  84. struct online_login_data* p;
  85. if( !login_config.online_check )
  86. return;
  87. p = idb_ensure(online_db, account_id, create_online_user);
  88. p->char_server = char_server;
  89. if( p->waiting_disconnect != -1 )
  90. {
  91. delete_timer(p->waiting_disconnect, waiting_disconnect_timer);
  92. p->waiting_disconnect = -1;
  93. }
  94. }
  95. void remove_online_user(int account_id)
  96. {
  97. if( !login_config.online_check )
  98. return;
  99. if( account_id == 99 )
  100. {// reset all to offline
  101. online_db->clear(online_db, NULL); // purge db
  102. return;
  103. }
  104. idb_remove(online_db, account_id);
  105. }
  106. static int waiting_disconnect_timer(int tid, unsigned int tick, int id, int data)
  107. {
  108. struct online_login_data* p = idb_get(online_db, id);
  109. if( p != NULL && p->waiting_disconnect == id )
  110. {
  111. p->waiting_disconnect = -1;
  112. remove_online_user(id);
  113. }
  114. return 0;
  115. }
  116. //--------------------------------------------------------------------
  117. // Packet send to all char-servers, except one (wos: without our self)
  118. //--------------------------------------------------------------------
  119. int charif_sendallwos(int sfd, uint8* buf, size_t len)
  120. {
  121. int i, c;
  122. for( i = 0, c = 0; i < MAX_SERVERS; ++i )
  123. {
  124. int fd = server[i].fd;
  125. if( session_isValid(fd) && fd != sfd )
  126. {
  127. WFIFOHEAD(fd,len);
  128. memcpy(WFIFOP(fd,0), buf, len);
  129. WFIFOSET(fd,len);
  130. ++c;
  131. }
  132. }
  133. return c;
  134. }
  135. //-----------------------------------------------------
  136. // Read GM accounts
  137. //-----------------------------------------------------
  138. void read_gm_account(void)
  139. {
  140. if( !login_config.login_gm_read )
  141. return;// char server's job
  142. if( SQL_ERROR == Sql_Query(sql_handle, "SELECT `%s`,`%s` FROM `%s` WHERE `%s` > '0'", login_db_account_id, login_db_level, login_db, login_db_level) )
  143. {
  144. Sql_ShowDebug(sql_handle);
  145. return;// Failed to read GM list!
  146. }
  147. RECREATE(gm_account_db, struct gm_account, (size_t)Sql_NumRows(sql_handle));
  148. for( GM_num = 0; SQL_SUCCESS == Sql_NextRow(sql_handle); ++GM_num )
  149. {
  150. char* account;
  151. char* level;
  152. Sql_GetData(sql_handle, 0, &account, NULL);
  153. Sql_GetData(sql_handle, 1, &level, NULL);
  154. gm_account_db[GM_num].account_id = atoi(account);
  155. gm_account_db[GM_num].level = atoi(level);
  156. }
  157. Sql_FreeResult(sql_handle);
  158. }
  159. //-----------------------------------------------------
  160. // Send GM accounts to one or all char-servers
  161. //-----------------------------------------------------
  162. void send_GM_accounts(int fd)
  163. {
  164. unsigned int i;
  165. uint8 buf[32767];
  166. uint16 len;
  167. if( !login_config.login_gm_read )
  168. return;
  169. len = 4;
  170. WBUFW(buf,0) = 0x2732;
  171. for( i = 0; i < GM_num; ++i )
  172. {
  173. // send only existing accounts. We can not create a GM account when server is online.
  174. if( gm_account_db[i].level > 0 )
  175. {
  176. WBUFL(buf,len) = gm_account_db[i].account_id;
  177. WBUFB(buf,len+4) = (uint8)gm_account_db[i].level;
  178. len += 5;
  179. if( len >= 32000 )
  180. {
  181. ShowWarning("send_GM_accounts: Too many accounts! Only %d out of %d were sent.\n", i, GM_num);
  182. break;
  183. }
  184. }
  185. }
  186. WBUFW(buf,2) = len;
  187. if( fd == -1 )// send to all charservers
  188. charif_sendallwos(-1, buf, len);
  189. else
  190. {// send only to target
  191. WFIFOHEAD(fd,len);
  192. memcpy(WFIFOP(fd,0), buf, len);
  193. WFIFOSET(fd,len);
  194. }
  195. return;
  196. }
  197. /*=============================================
  198. * Does a mysql_ping to all connection handles
  199. *---------------------------------------------*/
  200. int login_sql_ping(int tid, unsigned int tick, int id, int data)
  201. {
  202. ShowInfo("Pinging SQL server to keep connection alive...\n");
  203. Sql_Ping(sql_handle);
  204. return 0;
  205. }
  206. int sql_ping_init(void)
  207. {
  208. uint32 connection_timeout, connection_ping_interval;
  209. // set a default value first
  210. connection_timeout = 28800; // 8 hours
  211. // ask the mysql server for the timeout value
  212. if( SQL_SUCCESS == Sql_GetTimeout(sql_handle, &connection_timeout) && connection_timeout < 60 )
  213. connection_timeout = 60;
  214. // establish keepalive
  215. connection_ping_interval = connection_timeout - 30; // 30-second reserve
  216. add_timer_func_list(login_sql_ping, "login_sql_ping");
  217. add_timer_interval(gettick() + connection_ping_interval*1000, login_sql_ping, 0, 0, connection_ping_interval*1000);
  218. return 0;
  219. }
  220. //-----------------------------------------------------
  221. // Read Account database - mysql db
  222. //-----------------------------------------------------
  223. int mmo_auth_sqldb_init(void)
  224. {
  225. ShowStatus("Login server init....\n");
  226. sql_handle = Sql_Malloc();
  227. // DB connection start
  228. ShowStatus("Connect Login Database Server....\n");
  229. if( SQL_ERROR == Sql_Connect(sql_handle, login_server_id, login_server_pw, login_server_ip, login_server_port, login_server_db) )
  230. {
  231. Sql_ShowDebug(sql_handle);
  232. Sql_Free(sql_handle);
  233. exit(EXIT_FAILURE);
  234. }
  235. else
  236. {
  237. ShowStatus("Connect success!\n");
  238. }
  239. if( default_codepage[0] != '\0' && SQL_ERROR == Sql_SetEncoding(sql_handle, default_codepage) )
  240. Sql_ShowDebug(sql_handle);
  241. if( login_config.log_login && SQL_ERROR == Sql_Query(sql_handle, "INSERT DELAYED INTO `%s` (`time`,`ip`,`user`,`rcode`,`log`) VALUES (NOW(), '0', 'lserver','100','login server started')", loginlog_db) )
  242. Sql_ShowDebug(sql_handle);
  243. sql_ping_init();
  244. return 0;
  245. }
  246. //-----------------------------------------------------
  247. // close DB
  248. //-----------------------------------------------------
  249. void mmo_db_close(void)
  250. {
  251. int i, fd;
  252. //set log.
  253. if( login_config.log_login && SQL_ERROR == Sql_Query(sql_handle, "INSERT DELAYED INTO `%s`(`time`,`ip`,`user`,`rcode`,`log`) VALUES (NOW(), '0', 'lserver','100', 'login server shutdown')", loginlog_db) )
  254. Sql_ShowDebug(sql_handle);
  255. for( i = 0; i < MAX_SERVERS; ++i )
  256. {
  257. fd = server[i].fd;
  258. if( session_isValid(fd) )
  259. {// Clean only data related to servers we are connected to. [Skotlex]
  260. if( SQL_ERROR == Sql_Query(sql_handle, "DELETE FROM `sstatus` WHERE `index` = '%d'", i) )
  261. Sql_ShowDebug(sql_handle);
  262. do_close(fd);
  263. }
  264. }
  265. Sql_Free(sql_handle);
  266. sql_handle = NULL;
  267. ShowStatus("close DB connect....\n");
  268. if( login_fd > 0 )
  269. do_close(login_fd);
  270. }
  271. //-----------------------------------------------------
  272. // periodic ip address synchronization
  273. //-----------------------------------------------------
  274. static int sync_ip_addresses(int tid, unsigned int tick, int id, int data)
  275. {
  276. uint8 buf[2];
  277. ShowInfo("IP Sync in progress...\n");
  278. WBUFW(buf,0) = 0x2735;
  279. charif_sendallwos(-1, buf, 2);
  280. return 0;
  281. }
  282. //-----------------------------------------------------
  283. // encrypted/unencrypted password check
  284. //-----------------------------------------------------
  285. bool check_encrypted(const char* str1, const char* str2, const char* passwd)
  286. {
  287. char md5str[64], md5bin[32];
  288. snprintf(md5str, sizeof(md5str), "%s%s", str1, str2);
  289. md5str[sizeof(md5str)-1] = '\0';
  290. MD5_String2binary(md5str, md5bin);
  291. return (0==memcmp(passwd, md5bin, 16));
  292. }
  293. bool check_password(struct login_session_data* ld, int passwdenc, const char* passwd, const char* refpass)
  294. {
  295. if(passwdenc == 0)
  296. {
  297. return (0==strcmp(passwd, refpass));
  298. }
  299. else if (ld)
  300. {
  301. // password mode set to 1 -> (md5key, refpass) enable with <passwordencrypt></passwordencrypt>
  302. // password mode set to 2 -> (refpass, md5key) enable with <passwordencrypt2></passwordencrypt2>
  303. return ((passwdenc&0x01) && check_encrypted(ld->md5key, refpass, passwd)) ||
  304. ((passwdenc&0x02) && check_encrypted(refpass, ld->md5key, passwd));
  305. }
  306. return false;
  307. }
  308. //-----------------------------------------------------
  309. // Make new account
  310. //-----------------------------------------------------
  311. int mmo_auth_new(struct mmo_account* account, char sex)
  312. {
  313. unsigned int tick = gettick();
  314. char md5buf[32+1];
  315. SqlStmt* stmt;
  316. int result = 0;
  317. //Account Registration Flood Protection by [Kevin]
  318. if( DIFF_TICK(tick, new_reg_tick) < 0 && num_regs >= allowed_regs )
  319. {
  320. ShowNotice("Account registration denied (registration limit exceeded)\n");
  321. return 3;
  322. }
  323. // check if the account doesn't exist already
  324. stmt = SqlStmt_Malloc(sql_handle);
  325. if( SQL_SUCCESS != SqlStmt_Prepare(stmt, "SELECT `%s` FROM `%s` WHERE `userid` = ?", login_db_userid, login_db)
  326. || SQL_SUCCESS != SqlStmt_BindParam(stmt, 0, SQLDT_STRING, account->userid, strnlen(account->userid, NAME_LENGTH))
  327. || SQL_SUCCESS != SqlStmt_Execute(stmt) )
  328. {
  329. SqlStmt_ShowDebug(stmt);
  330. result = 1;// error
  331. }
  332. else if( SqlStmt_NumRows(stmt) > 0 )
  333. result = 1;// incorrect user/pass
  334. SqlStmt_Free(stmt);
  335. if( result )
  336. return result;// error or incorrect user/pass
  337. // insert new entry into db
  338. //TODO: error checking
  339. stmt = SqlStmt_Malloc(sql_handle);
  340. SqlStmt_Prepare(stmt, "INSERT INTO `%s` (`%s`, `%s`, `sex`, `email`) VALUES (?, ?, '%c', 'a@a.com')", login_db, login_db_userid, login_db_user_pass, TOUPPER(sex));
  341. SqlStmt_BindParam(stmt, 0, SQLDT_STRING, account->userid, strnlen(account->userid, NAME_LENGTH));
  342. if( login_config.use_md5_passwds )
  343. {
  344. MD5_String(account->passwd, md5buf);
  345. SqlStmt_BindParam(stmt, 1, SQLDT_STRING, md5buf, 32);
  346. }
  347. else
  348. SqlStmt_BindParam(stmt, 1, SQLDT_STRING, account->passwd, strnlen(account->passwd, NAME_LENGTH));
  349. SqlStmt_Execute(stmt);
  350. SqlStmt_Free(stmt);
  351. ShowInfo("New account: userid='%s' passwd='%s' sex='%c'\n", account->userid, account->passwd, TOUPPER(sex));
  352. if( DIFF_TICK(tick, new_reg_tick) > 0 )
  353. {// Update the registration check.
  354. num_regs = 0;
  355. new_reg_tick = tick + time_allowed*1000;
  356. }
  357. ++num_regs;
  358. return 0;
  359. }
  360. //-----------------------------------------------------
  361. // Check/authentication of a connection
  362. //-----------------------------------------------------
  363. int mmo_auth(struct mmo_account* account, int fd)
  364. {
  365. time_t ban_until_time;
  366. char esc_userid[NAME_LENGTH*2+1];// escaped username
  367. char user_password[256], password[256];
  368. long connect_until;
  369. int state;
  370. size_t len;
  371. char* data;
  372. char ip[16];
  373. ip2str(session[fd]->client_addr, ip);
  374. // DNS Blacklist check
  375. if( login_config.use_dnsbl )
  376. {
  377. char r_ip[16];
  378. char ip_dnsbl[256];
  379. char* dnsbl_serv;
  380. bool matched = false;
  381. uint8* sin_addr = (uint8*)&session[fd]->client_addr;
  382. sprintf(r_ip, "%u.%u.%u.%u", sin_addr[0], sin_addr[1], sin_addr[2], sin_addr[3]);
  383. for( dnsbl_serv = strtok(login_config.dnsbl_servs,","); !matched && dnsbl_serv != NULL; dnsbl_serv = strtok(NULL,",") )
  384. {
  385. sprintf(ip_dnsbl, "%s.%s", r_ip, dnsbl_serv);
  386. if( host2ip(ip_dnsbl) )
  387. matched = true;
  388. }
  389. if( matched )
  390. {
  391. ShowInfo("DNSBL: (%s) Blacklisted. User Kicked.\n", r_ip);
  392. return 3;
  393. }
  394. }
  395. //Client Version check
  396. if( login_config.check_client_version && account->version != login_config.client_version_to_connect )
  397. return 5;
  398. len = strnlen(account->userid, NAME_LENGTH);
  399. // Account creation with _M/_F
  400. if( login_config.new_account_flag )
  401. {
  402. if( len > 2 && strnlen(account->passwd, NAME_LENGTH) > 0 && // valid user and password lengths
  403. account->passwdenc == 0 && // unencoded password
  404. account->userid[len-2] == '_' && memchr("FfMm", (unsigned char)account->userid[len-1], 4) ) // _M/_F suffix
  405. {
  406. int result;
  407. char sex;
  408. len -= 2;
  409. account->userid[len] = '\0';// nul-terminate the name.
  410. sex = account->userid[len+1];
  411. result = mmo_auth_new(account, sex);
  412. if( result )
  413. return result;// Failed to make account. [Skotlex].
  414. }
  415. }
  416. // escape username
  417. Sql_EscapeStringLen(sql_handle, esc_userid, account->userid, len);
  418. // retrieve login entry for the specified username
  419. if( SQL_ERROR == Sql_Query(sql_handle,
  420. "SELECT `%s`,`%s`,`lastlogin`,`sex`,`connect_until`,`ban_until`,`state`,`%s` FROM `%s` WHERE `%s`= %s '%s'",
  421. login_db_account_id, login_db_user_pass, login_db_level,
  422. login_db, login_db_userid, (login_config.case_sensitive ? "BINARY" : ""), esc_userid) )
  423. Sql_ShowDebug(sql_handle);
  424. if( Sql_NumRows(sql_handle) == 0 ) // no such entry
  425. {
  426. ShowNotice("auth failed: no such account '%s'\n", esc_userid);
  427. Sql_FreeResult(sql_handle);
  428. return 0;
  429. }
  430. Sql_NextRow(sql_handle); //TODO: error checking?
  431. Sql_GetData(sql_handle, 0, &data, NULL); account->account_id = atoi(data);
  432. Sql_GetData(sql_handle, 1, &data, &len); safestrncpy(password, data, sizeof(password));
  433. Sql_GetData(sql_handle, 2, &data, NULL); safestrncpy(account->lastlogin, data, sizeof(account->lastlogin));
  434. Sql_GetData(sql_handle, 3, &data, NULL); account->sex = (*data == 'S' ? 2 : *data == 'M' ? 1 : 0);
  435. Sql_GetData(sql_handle, 4, &data, NULL); connect_until = atol(data);
  436. Sql_GetData(sql_handle, 5, &data, NULL); ban_until_time = atol(data);
  437. Sql_GetData(sql_handle, 6, &data, NULL); state = atoi(data);
  438. Sql_GetData(sql_handle, 7, &data, NULL); account->level = atoi(data);
  439. if( len > sizeof(password) - 1 )
  440. ShowDebug("mmo_auth: password buffer is too small (len=%u,buflen=%u)\n", len, sizeof(password));
  441. if( account->level > 99 )
  442. account->level = 99;
  443. Sql_FreeResult(sql_handle);
  444. if( login_config.use_md5_passwds )
  445. MD5_String(account->passwd, user_password);
  446. else
  447. safestrncpy(user_password, account->passwd, NAME_LENGTH);
  448. if( !check_password(session[fd]->session_data, account->passwdenc, user_password, password) )
  449. {
  450. ShowInfo("Invalid password (account: '%s', pass: '%s', received pass: '%s', ip: %s)\n",
  451. esc_userid, password, (account->passwdenc) ? "[MD5]" : user_password, ip);
  452. return 1; // 1 = Incorrect Password
  453. }
  454. if( connect_until != 0 && connect_until < time(NULL) )
  455. return 2; // 2 = This ID is expired
  456. if( ban_until_time != 0 && ban_until_time > time(NULL) )
  457. return 6; // 6 = Your are Prohibited to log in until %s
  458. if( state )
  459. {
  460. ShowInfo("Connection refused (account: %s, pass: %s, state: %d, ip: %s)\n", account->userid, account->passwd, state, ip);
  461. return state - 1;
  462. }
  463. if( login_config.online_check )
  464. {
  465. struct online_login_data* data = idb_get(online_db, account->account_id);
  466. if( data )
  467. {// account is already marked as online!
  468. if( data->char_server > -1 )
  469. {// Request char servers to kick this account out. [Skotlex]
  470. uint8 buf[8];
  471. ShowNotice("User '%s' is already online - Rejected.\n", account->userid);
  472. WBUFW(buf,0) = 0x2734;
  473. WBUFL(buf,2) = account->account_id;
  474. charif_sendallwos(-1, buf, 6);
  475. if( data->waiting_disconnect == -1 )
  476. data->waiting_disconnect = add_timer(gettick()+30000, waiting_disconnect_timer, account->account_id, 0);
  477. return 3; // Rejected
  478. }
  479. else
  480. ; // the client disconnects after doing auth, so can't really kick it... need some form of expiration timer
  481. }
  482. }
  483. account->login_id1 = rand();
  484. account->login_id2 = rand();
  485. if( account->sex != 2 && account->account_id < START_ACCOUNT_NUM )
  486. ShowWarning("Account %s has account id %d! Account IDs must be over %d to work properly!\n", account->userid, account->account_id, START_ACCOUNT_NUM);
  487. if( SQL_ERROR == Sql_Query(sql_handle, "UPDATE `%s` SET `lastlogin` = NOW(), `logincount`=`logincount`+1, `last_ip`='%s', `ban_until`='0', `state`='0' WHERE `%s` = '%d'",
  488. login_db, ip, login_db_account_id, account->account_id) )
  489. Sql_ShowDebug(sql_handle);
  490. return -1; // account OK
  491. }
  492. static int online_db_setoffline(DBKey key, void* data, va_list ap)
  493. {
  494. struct online_login_data* p = (struct online_login_data*)data;
  495. int server = va_arg(ap, int);
  496. if( server == -1 )
  497. {
  498. p->char_server = -1;
  499. if( p->waiting_disconnect != -1 )
  500. {
  501. delete_timer(p->waiting_disconnect, waiting_disconnect_timer);
  502. p->waiting_disconnect = -1;
  503. }
  504. }
  505. else if( p->char_server == server )
  506. p->char_server = -2; //Char server disconnected.
  507. return 0;
  508. }
  509. //--------------------------------
  510. // Packet parsing for char-servers
  511. //--------------------------------
  512. int parse_fromchar(int fd)
  513. {
  514. int i, id;
  515. uint32 ipl;
  516. char ip[16];
  517. ARR_FIND( 0, MAX_SERVERS, id, server[id].fd == fd );
  518. if( id == MAX_SERVERS )
  519. {// not a char server
  520. set_eof(fd);
  521. do_close(fd);
  522. return 0;
  523. }
  524. if( session[fd]->flag.eof )
  525. {
  526. ShowStatus("Char-server '%s' has disconnected.\n", server[id].name);
  527. online_db->foreach(online_db, online_db_setoffline, id); //Set all chars from this char server to offline.
  528. if( SQL_ERROR == Sql_Query(sql_handle, "DELETE FROM `sstatus` WHERE `index`='%d'", id) )
  529. Sql_ShowDebug(sql_handle);
  530. memset(&server[id], 0, sizeof(struct mmo_char_server));
  531. server[id].fd = -1;
  532. do_close(fd);
  533. return 0;
  534. }
  535. ipl = server[id].ip;
  536. ip2str(ipl, ip);
  537. while( RFIFOREST(fd) >= 2 )
  538. {
  539. uint16 command = RFIFOW(fd,0);
  540. switch( command )
  541. {
  542. case 0x2709: // request from map-server via char-server to reload GM accounts
  543. RFIFOSKIP(fd,2);
  544. ShowStatus("Char-server '%s': Request to re-load GM configuration file (ip: %s).\n", server[id].name, ip);
  545. if( login_config.log_login )
  546. {
  547. if( SQL_ERROR == Sql_Query(sql_handle, "INSERT DELAYED INTO `%s`(`time`,`ip`,`user`,`log`) VALUES (NOW(), '%u', '%s', 'GM reload request')", loginlog_db, ipl, server[id].name) )
  548. Sql_ShowDebug(sql_handle);
  549. }
  550. read_gm_account();
  551. // send GM accounts to all char-servers
  552. send_GM_accounts(-1);
  553. break;
  554. case 0x2712: // request from char-server to authenticate an account
  555. if( RFIFOREST(fd) < 19 )
  556. return 0;
  557. {
  558. int account_id = RFIFOL(fd,2);
  559. int login_id1 = RFIFOL(fd,6);
  560. int login_id2 = RFIFOL(fd,10);
  561. char sex = RFIFOB(fd,14);
  562. uint32 ip_ = ntohl(RFIFOL(fd,15));
  563. RFIFOSKIP(fd,19);
  564. ARR_FIND( 0, AUTH_FIFO_SIZE, i,
  565. auth_fifo[i].account_id == account_id &&
  566. auth_fifo[i].login_id1 == login_id1 &&
  567. auth_fifo[i].login_id2 == login_id2 &&
  568. auth_fifo[i].sex == sex &&
  569. auth_fifo[i].ip == ip_ &&
  570. auth_fifo[i].delflag == 0 );
  571. if( i == AUTH_FIFO_SIZE || account_id <= 0 )
  572. {// authentication not found
  573. ShowStatus("Char-server '%s': authentication of the account %d REFUSED (ip: %s).\n", server[id].name, account_id, ip);
  574. WFIFOHEAD(fd,51);
  575. WFIFOW(fd,0) = 0x2713;
  576. WFIFOL(fd,2) = account_id;
  577. WFIFOB(fd,6) = 1;
  578. // It is unnecessary to send email
  579. // It is unnecessary to send validity date of the account
  580. WFIFOSET(fd,51);
  581. }
  582. else
  583. {// found
  584. uint32 connect_until_time;
  585. char email[40];
  586. // each auth entry can only be used once
  587. auth_fifo[i].delflag = 1;
  588. // retrieve email and account expiration time
  589. if( SQL_ERROR == Sql_Query(sql_handle, "SELECT `email`,`connect_until` FROM `%s` WHERE `%s`='%d'", login_db, login_db_account_id, account_id) )
  590. Sql_ShowDebug(sql_handle);
  591. if( SQL_SUCCESS == Sql_NextRow(sql_handle) )
  592. {
  593. char* data = NULL;
  594. size_t len = 0;
  595. Sql_GetData(sql_handle, 0, &data, &len); safestrncpy(email, data, sizeof(email));
  596. Sql_GetData(sql_handle, 1, &data, NULL); connect_until_time = (uint32)strtoul(data, NULL, 10);
  597. if( len > sizeof(email) )
  598. ShowDebug("parse_fromchar:0x2712: email is too long (len=%u,maxlen=%u)\n", len, sizeof(email));
  599. Sql_FreeResult(sql_handle);
  600. }
  601. else
  602. {
  603. memset(email, 0, sizeof(email));
  604. connect_until_time = 0;
  605. }
  606. // send ack
  607. WFIFOHEAD(fd,51);
  608. WFIFOW(fd,0) = 0x2713;
  609. WFIFOL(fd,2) = account_id;
  610. WFIFOB(fd,6) = 0;
  611. memcpy(WFIFOP(fd, 7), email, 40);
  612. WFIFOL(fd,47) = connect_until_time;
  613. WFIFOSET(fd,51);
  614. }
  615. }
  616. break;
  617. case 0x2714:
  618. if( RFIFOREST(fd) < 6 )
  619. return 0;
  620. {
  621. int users = RFIFOL(fd,2);
  622. RFIFOSKIP(fd,6);
  623. // how many users on world? (update)
  624. if( server[id].users != users )
  625. {
  626. ShowStatus("set users %s : %d\n", server[id].name, users);
  627. server[id].users = users;
  628. if( SQL_ERROR == Sql_Query(sql_handle, "UPDATE `sstatus` SET `user` = '%d' WHERE `index` = '%d'", server[id].users, id) )
  629. Sql_ShowDebug(sql_handle);
  630. }
  631. }
  632. break;
  633. case 0x2716: // received an e-mail/limited time request, because a player comes back from a map-server to the char-server
  634. if( RFIFOREST(fd) < 6 )
  635. return 0;
  636. {
  637. uint32 connect_until_time = 0;
  638. char email[40] = "";
  639. int account_id = RFIFOL(fd,2);
  640. RFIFOSKIP(fd,6);
  641. if( SQL_ERROR == Sql_Query(sql_handle, "SELECT `email`,`connect_until` FROM `%s` WHERE `%s`='%d'", login_db, login_db_account_id, account_id) )
  642. Sql_ShowDebug(sql_handle);
  643. else if( SQL_SUCCESS == Sql_NextRow(sql_handle) )
  644. {
  645. char* data;
  646. size_t len;
  647. Sql_GetData(sql_handle, 0, &data, &len);
  648. safestrncpy(email, data, sizeof(email));
  649. Sql_GetData(sql_handle, 1, &data, NULL);
  650. connect_until_time = (uint32)strtoul(data, NULL, 10);
  651. Sql_FreeResult(sql_handle);
  652. }
  653. WFIFOHEAD(fd,50);
  654. WFIFOW(fd,0) = 0x2717;
  655. WFIFOL(fd,2) = account_id;
  656. safestrncpy((char*)WFIFOP(fd,6), email, 40);
  657. WFIFOL(fd,46) = connect_until_time;
  658. WFIFOSET(fd,50);
  659. }
  660. break;
  661. case 0x2719: // ping request from charserver
  662. if( RFIFOREST(fd) < 2 )
  663. return 0;
  664. RFIFOSKIP(fd,2);
  665. WFIFOHEAD(fd,2);
  666. WFIFOW(fd,0) = 0x2718;
  667. WFIFOSET(fd,2);
  668. break;
  669. case 0x2720: // Request to become a GM
  670. if( RFIFOREST(fd) < 4 || RFIFOREST(fd) < RFIFOW(fd,2) )
  671. return 0;
  672. {
  673. int acc = RFIFOL(fd,4);
  674. RFIFOSKIP(fd, RFIFOW(fd,2));
  675. ShowWarning("change GM isn't supported in this login server version.\n");
  676. ShowError("change GM error 0 %s\n", RFIFOP(fd,8));
  677. // announce gm level update result
  678. WFIFOHEAD(fd,10);
  679. WFIFOW(fd,0) = 0x2721;
  680. WFIFOL(fd,2) = acc;
  681. WFIFOL(fd,6) = 0; // level
  682. WFIFOSET(fd,10);
  683. }
  684. break;
  685. // Map server send information to change an email of an account via char-server
  686. case 0x2722: // 0x2722 <account_id>.L <actual_e-mail>.40B <new_e-mail>.40B
  687. if (RFIFOREST(fd) < 86)
  688. return 0;
  689. {
  690. char actual_email[40];
  691. char new_email[40];
  692. int account_id = RFIFOL(fd,2);
  693. safestrncpy(actual_email, RFIFOP(fd,6), 40);
  694. safestrncpy(new_email, RFIFOP(fd,46), 40);
  695. RFIFOSKIP(fd, 86);
  696. if( e_mail_check(actual_email) == 0 )
  697. ShowNotice("Char-server '%s': Attempt to modify an e-mail on an account (@email GM command), but actual email is invalid (account: %d, ip: %s)\n", server[id].name, account_id, ip);
  698. else if( e_mail_check(new_email) == 0 )
  699. ShowNotice("Char-server '%s': Attempt to modify an e-mail on an account (@email GM command) with a invalid new e-mail (account: %d, ip: %s)\n", server[id].name, account_id, ip);
  700. else if( strcmpi(new_email, "a@a.com") == 0 )
  701. ShowNotice("Char-server '%s': Attempt to modify an e-mail on an account (@email GM command) with a default e-mail (account: %d, ip: %s)\n", server[id].name, account_id, ip);
  702. else if( SQL_ERROR == Sql_Query(sql_handle, "SELECT `%s`,`email` FROM `%s` WHERE `%s` = '%d'", login_db_userid, login_db, login_db_account_id, account_id) )
  703. Sql_ShowDebug(sql_handle);
  704. else if( SQL_SUCCESS == Sql_NextRow(sql_handle) )
  705. {
  706. char* data;
  707. size_t len;
  708. Sql_GetData(sql_handle, 1, &data, &len);
  709. if( strncasecmp(data, actual_email, sizeof(actual_email)) == 0 )
  710. {
  711. char esc_user_id[NAME_LENGTH*2+1];
  712. char esc_new_email[sizeof(new_email)*2+1];
  713. Sql_GetData(sql_handle, 0, &data, &len);
  714. Sql_EscapeStringLen(sql_handle, esc_user_id, data, len);
  715. Sql_EscapeStringLen(sql_handle, esc_new_email, new_email, strnlen(new_email, sizeof(new_email)));
  716. if( SQL_ERROR == Sql_Query(sql_handle, "UPDATE `%s` SET `email` = '%s' WHERE `%s` = '%d'", login_db, esc_new_email, login_db_account_id, account_id) )
  717. Sql_ShowDebug(sql_handle);
  718. ShowInfo("Char-server '%s': Modify an e-mail on an account (@email GM command) (account: %d ('%s'), new e-mail: '%s', ip: %s).\n", server[id].name, account_id, esc_user_id, esc_new_email, ip);
  719. }
  720. Sql_FreeResult(sql_handle);
  721. }
  722. }
  723. break;
  724. case 0x2724: // Receiving an account state update request from a map-server (relayed via char-server)
  725. if (RFIFOREST(fd) < 10)
  726. return 0;
  727. {
  728. int account_id = RFIFOL(fd,2);
  729. int state = RFIFOL(fd,6);
  730. RFIFOSKIP(fd,10);
  731. if( SQL_ERROR == Sql_Query(sql_handle, "SELECT `state` FROM `%s` WHERE `%s` = '%d'", login_db, login_db_account_id, account_id) )
  732. Sql_ShowDebug(sql_handle);
  733. else if( SQL_SUCCESS == Sql_NextRow(sql_handle) )
  734. {
  735. char* data;
  736. Sql_GetData(sql_handle, 0, &data, NULL);
  737. if( atoi(data) != state && state != 0 )
  738. {
  739. uint8 buf[11];
  740. WBUFW(buf,0) = 0x2731;
  741. WBUFL(buf,2) = account_id;
  742. WBUFB(buf,6) = 0; // 0: change of state, 1: ban
  743. WBUFL(buf,7) = state; // status or final date of a banishment
  744. charif_sendallwos(-1, buf, 11);
  745. }
  746. Sql_FreeResult(sql_handle);
  747. }
  748. if( SQL_ERROR == Sql_Query(sql_handle, "UPDATE `%s` SET `state` = '%d' WHERE `%s` = '%d'", login_db, state, login_db_account_id, account_id) )
  749. Sql_ShowDebug(sql_handle);
  750. }
  751. break;
  752. case 0x2725: // Receiving of map-server via char-server a ban request
  753. if (RFIFOREST(fd) < 18)
  754. return 0;
  755. {
  756. struct tm *tmtime;
  757. time_t tmptime = 0;
  758. time_t timestamp = time(NULL);
  759. int account_id = RFIFOL(fd,2);
  760. int year = (short)RFIFOW(fd,6);
  761. int month = (short)RFIFOW(fd,8);
  762. int mday = (short)RFIFOW(fd,10);
  763. int hour = (short)RFIFOW(fd,12);
  764. int min = (short)RFIFOW(fd,14);
  765. int sec = (short)RFIFOW(fd,16);
  766. RFIFOSKIP(fd,18);
  767. if( SQL_ERROR == Sql_Query(sql_handle, "SELECT `ban_until` FROM `%s` WHERE `%s` = '%d'", login_db, login_db_account_id, account_id) )
  768. Sql_ShowDebug(sql_handle);
  769. else if( SQL_SUCCESS == Sql_NextRow(sql_handle) )
  770. {
  771. char* data;
  772. Sql_GetData(sql_handle, 0, &data, NULL);
  773. tmptime = (time_t)strtoul(data, NULL, 10);
  774. if( tmptime > time(NULL) )
  775. timestamp = tmptime;
  776. }
  777. tmtime = localtime(&timestamp);
  778. tmtime->tm_year = tmtime->tm_year + year;
  779. tmtime->tm_mon = tmtime->tm_mon + month;
  780. tmtime->tm_mday = tmtime->tm_mday + mday;
  781. tmtime->tm_hour = tmtime->tm_hour + hour;
  782. tmtime->tm_min = tmtime->tm_min + min;
  783. tmtime->tm_sec = tmtime->tm_sec + sec;
  784. timestamp = mktime(tmtime);
  785. if( timestamp != (time_t)-1 )
  786. {
  787. if( timestamp <= time(NULL) )
  788. timestamp = 0;
  789. if( tmptime != timestamp )
  790. {
  791. if( timestamp != 0 )
  792. {
  793. uint8 buf[11];
  794. WBUFW(buf,0) = 0x2731;
  795. WBUFL(buf,2) = account_id;
  796. WBUFB(buf,6) = 1; // 0: change of statut, 1: ban
  797. WBUFL(buf,7) = (uint32)timestamp; // status or final date of a banishment
  798. charif_sendallwos(-1, buf, 11);
  799. }
  800. ShowNotice("Account: %d Banned until: %lu\n", account_id, (unsigned long)timestamp);
  801. if( SQL_ERROR == Sql_Query(sql_handle, "UPDATE `%s` SET `ban_until` = '%lu' WHERE `%s` = '%d'", login_db, (unsigned long)timestamp, login_db_account_id, account_id) )
  802. Sql_ShowDebug(sql_handle);
  803. }
  804. }
  805. }
  806. break;
  807. case 0x2727: // Change of sex (sex is reversed)
  808. if( RFIFOREST(fd) < 6 )
  809. return 0;
  810. {
  811. int account_id = RFIFOL(fd,2);
  812. RFIFOSKIP(fd,6);
  813. if( SQL_ERROR == Sql_Query(sql_handle, "SELECT `sex` FROM `%s` WHERE `%s` = '%d'", login_db, login_db_account_id, account_id) )
  814. Sql_ShowDebug(sql_handle);
  815. else if( SQL_SUCCESS == Sql_NextRow(sql_handle) )
  816. {
  817. unsigned char buf[7];
  818. int sex;
  819. char* data;
  820. Sql_GetData(sql_handle, 0, &data, NULL);
  821. if( *data == 'M' || *data == 'm' )
  822. sex = 0; //Change to female
  823. else
  824. sex = 1; //Change to male
  825. if( SQL_ERROR == Sql_Query(sql_handle, "UPDATE `%s` SET `sex` = '%c' WHERE `%s` = '%d'", login_db, (sex ? 'M' : 'F'), login_db_account_id, account_id) )
  826. Sql_ShowDebug(sql_handle);
  827. WBUFW(buf,0) = 0x2723;
  828. WBUFL(buf,2) = account_id;
  829. WBUFB(buf,6) = sex;
  830. charif_sendallwos(-1, buf, 7);
  831. }
  832. }
  833. break;
  834. case 0x2728: // save account_reg2
  835. if( RFIFOREST(fd) < 4 || RFIFOREST(fd) < RFIFOW(fd,2) )
  836. return 0;
  837. if( RFIFOL(fd,4) > 0 )
  838. {
  839. SqlStmt* stmt;
  840. int account_id;
  841. size_t off;
  842. account_id = RFIFOL(fd,4);
  843. //Delete all global account variables....
  844. if( SQL_ERROR == Sql_Query(sql_handle, "DELETE FROM `%s` WHERE `type`='1' AND `account_id`='%d';", reg_db, account_id) )
  845. Sql_ShowDebug(sql_handle);
  846. //Proceed to insert them....
  847. stmt = SqlStmt_Malloc(sql_handle);
  848. if( SQL_ERROR == SqlStmt_Prepare(stmt, "INSERT INTO `%s` (`type`, `account_id`, `str`, `value`) VALUES ( 1 , '%d' , ? , ?);", reg_db, account_id) )
  849. SqlStmt_ShowDebug(stmt);
  850. for( i = 0, off = 13; i < ACCOUNT_REG2_NUM && off < RFIFOW(fd,2); ++i )
  851. {
  852. uint8* p;
  853. size_t len;
  854. // str
  855. p = (uint8*)RFIFOP(fd,off);
  856. len = strlen(p);
  857. SqlStmt_BindParam(stmt, 0, SQLDT_STRING, p, len);
  858. off += len + 1;
  859. // value
  860. p = (uint8*)RFIFOP(fd,off);
  861. len = strlen(p);
  862. SqlStmt_BindParam(stmt, 1, SQLDT_STRING, p, len);
  863. off += len + 1;
  864. if( SQL_ERROR == SqlStmt_Execute(stmt) )
  865. SqlStmt_ShowDebug(stmt);
  866. }
  867. SqlStmt_Free(stmt);
  868. // Sending information towards the other char-servers.
  869. RFIFOW(fd,0) = 0x2729;// reusing read buffer
  870. charif_sendallwos(fd, RFIFOP(fd,0), RFIFOW(fd,2));
  871. RFIFOSKIP(fd,RFIFOW(fd,2));
  872. }
  873. break;
  874. case 0x272a: // Receiving of map-server via char-server an unban request
  875. if( RFIFOREST(fd) < 6 )
  876. return 0;
  877. {
  878. int account_id = RFIFOL(fd,2);
  879. RFIFOSKIP(fd,6);
  880. if( SQL_ERROR == Sql_Query(sql_handle, "SELECT `ban_until` FROM `%s` WHERE `%s` = '%d'", login_db, login_db_account_id, account_id) )
  881. Sql_ShowDebug(sql_handle);
  882. else if( Sql_NumRows(sql_handle) > 0 )
  883. {// Found a match
  884. if( SQL_ERROR == Sql_Query(sql_handle, "UPDATE `%s` SET `ban_until` = '0' WHERE `%s` = '%d'", login_db, login_db_account_id, account_id) )
  885. Sql_ShowDebug(sql_handle);
  886. }
  887. }
  888. break;
  889. case 0x272b: // Set account_id to online [Wizputer]
  890. if( RFIFOREST(fd) < 6 )
  891. return 0;
  892. add_online_user(id, RFIFOL(fd,2));
  893. RFIFOSKIP(fd,6);
  894. break;
  895. case 0x272c: // Set account_id to offline [Wizputer]
  896. if( RFIFOREST(fd) < 6 )
  897. return 0;
  898. remove_online_user(RFIFOL(fd,2));
  899. RFIFOSKIP(fd,6);
  900. break;
  901. case 0x272d: // Receive list of all online accounts. [Skotlex]
  902. if (RFIFOREST(fd) < 4 || RFIFOREST(fd) < RFIFOW(fd,2))
  903. return 0;
  904. if( login_config.online_check )
  905. {
  906. struct online_login_data *p;
  907. int aid;
  908. uint32 i, users;
  909. online_db->foreach(online_db, online_db_setoffline, id); //Set all chars from this char-server offline first
  910. users = RFIFOW(fd,4);
  911. for (i = 0; i < users; i++) {
  912. aid = RFIFOL(fd,6+i*4);
  913. p = idb_ensure(online_db, aid, create_online_user);
  914. p->char_server = id;
  915. if (p->waiting_disconnect != -1)
  916. {
  917. delete_timer(p->waiting_disconnect, waiting_disconnect_timer);
  918. p->waiting_disconnect = -1;
  919. }
  920. }
  921. }
  922. RFIFOSKIP(fd,RFIFOW(fd,2));
  923. break;
  924. case 0x272e: //Request account_reg2 for a character.
  925. if (RFIFOREST(fd) < 10)
  926. return 0;
  927. {
  928. size_t off;
  929. int account_id = RFIFOL(fd,2);
  930. int char_id = RFIFOL(fd,6);
  931. RFIFOSKIP(fd,10);
  932. WFIFOHEAD(fd,10000);
  933. WFIFOW(fd,0) = 0x2729;
  934. WFIFOL(fd,4) = account_id;
  935. WFIFOL(fd,8) = char_id;
  936. WFIFOB(fd,12) = 1; //Type 1 for Account2 registry
  937. if( SQL_ERROR == Sql_Query(sql_handle, "SELECT `str`,`value` FROM `%s` WHERE `type`='1' AND `account_id`='%d'", reg_db, account_id) )
  938. Sql_ShowDebug(sql_handle);
  939. off = 13;
  940. while( SQL_SUCCESS == Sql_NextRow(sql_handle) && off < 9000 )
  941. {
  942. char* data;
  943. // str
  944. Sql_GetData(sql_handle, 0, &data, NULL);
  945. if( *data != '\0' )
  946. {
  947. off += sprintf((char*)WFIFOP(fd,off), "%s", data)+1; //We add 1 to consider the '\0' in place.
  948. // value
  949. Sql_GetData(sql_handle, 1, &data, NULL);
  950. off += sprintf((char*)WFIFOP(fd,off), "%s", data)+1;
  951. }
  952. }
  953. Sql_FreeResult(sql_handle);
  954. if( off >= 9000 )
  955. ShowWarning("Too many account2 registries for AID %d. Some registries were not sent.\n", account_id);
  956. WFIFOW(fd,2) = (uint16)off;
  957. WFIFOSET(fd,WFIFOW(fd,2));
  958. }
  959. break;
  960. case 0x2736: // WAN IP update from char-server
  961. if( RFIFOREST(fd) < 6 )
  962. return 0;
  963. server[id].ip = ntohl(RFIFOL(fd,2));
  964. ShowInfo("Updated IP of Server #%d to %d.%d.%d.%d.\n",id, CONVIP(server[id].ip));
  965. RFIFOSKIP(fd,6);
  966. break;
  967. case 0x2737: //Request to set all offline.
  968. ShowInfo("Setting accounts from char-server %d offline.\n", id);
  969. online_db->foreach(online_db, online_db_setoffline, id);
  970. RFIFOSKIP(fd,2);
  971. break;
  972. default:
  973. ShowError("parse_fromchar: Unknown packet 0x%x from a char-server! Disconnecting!\n", command);
  974. set_eof(fd);
  975. return 0;
  976. } // switch
  977. } // while
  978. RFIFOSKIP(fd,RFIFOREST(fd));
  979. return 0;
  980. }
  981. //--------------------------------------------
  982. // Test to know if an IP come from LAN or WAN.
  983. //--------------------------------------------
  984. int lan_subnetcheck(uint32 ip)
  985. {
  986. int i;
  987. ARR_FIND( 0, subnet_count, i, (subnet[i].char_ip & subnet[i].mask) == (ip & subnet[i].mask) );
  988. return ( i < subnet_count ) ? subnet[i].char_ip : 0;
  989. }
  990. int login_ip_ban_check(uint32 ip)
  991. {
  992. uint8* p = (uint8*)&ip;
  993. char* data = NULL;
  994. int matches;
  995. if( SQL_ERROR == Sql_Query(sql_handle, "SELECT count(*) FROM `ipbanlist` WHERE `list` = '%u.*.*.*' OR `list` = '%u.%u.*.*' OR `list` = '%u.%u.%u.*' OR `list` = '%u.%u.%u.%u'",
  996. p[3], p[3], p[2], p[3], p[2], p[1], p[3], p[2], p[1], p[0]) )
  997. {
  998. Sql_ShowDebug(sql_handle);
  999. // close connection because we can't verify their connectivity.
  1000. return 1;
  1001. }
  1002. if( SQL_ERROR == Sql_NextRow(sql_handle) )
  1003. return 1;// Shouldn't happen, but just in case...
  1004. Sql_GetData(sql_handle, 0, &data, NULL);
  1005. matches = atoi(data);
  1006. Sql_FreeResult(sql_handle);
  1007. if( matches == 0 )
  1008. return 0;// No ban
  1009. // ip ban ok.
  1010. ShowInfo("Packet from banned ip : %u.%u.%u.%u\n", CONVIP(ip));
  1011. if( login_config.log_login && SQL_ERROR == Sql_Query(sql_handle, "INSERT DELAYED INTO `%s`(`time`,`ip`,`user`,`rcode`,`log`) VALUES (NOW(), '%u', 'unknown','-3', 'ip banned')", loginlog_db, ip) )
  1012. Sql_ShowDebug(sql_handle);
  1013. return 1;
  1014. }
  1015. //----------------------------------------------------------------------------------------
  1016. // Default packet parsing (normal players or administation/char-server connection requests)
  1017. //----------------------------------------------------------------------------------------
  1018. int parse_login(int fd)
  1019. {
  1020. char esc_userid[NAME_LENGTH*2+1];// escaped username
  1021. struct mmo_account account;
  1022. int result, i;
  1023. uint32 ipl;
  1024. char ip[16];
  1025. if( session[fd]->flag.eof )
  1026. {
  1027. do_close(fd);
  1028. return 0;
  1029. }
  1030. ipl = session[fd]->client_addr;
  1031. ip2str(ipl, ip);
  1032. while( RFIFOREST(fd) >= 2 )
  1033. {
  1034. uint16 command = RFIFOW(fd,0);
  1035. switch( command )
  1036. {
  1037. case 0x0200: // New alive packet: structure: 0x200 <account.userid>.24B. used to verify if client is always alive.
  1038. if (RFIFOREST(fd) < 26)
  1039. return 0;
  1040. RFIFOSKIP(fd,26);
  1041. break;
  1042. case 0x0204: // New alive packet: structure: 0x204 <encrypted.account.userid>.16B. (new ragexe from 22 june 2004)
  1043. if (RFIFOREST(fd) < 18)
  1044. return 0;
  1045. RFIFOSKIP(fd,18);
  1046. break;
  1047. case 0x0064: // request client login
  1048. case 0x01dd: // request client login (encryption mode)
  1049. case 0x0277: // New login packet (kRO 2006-04-24aSakexe langtype 0)
  1050. case 0x02b0: // New login packet (kRO 2007-05-14aSakexe langtype 0)
  1051. {
  1052. size_t packet_len = RFIFOREST(fd); // assume no other packet was sent
  1053. // Perform ip-ban check
  1054. if( login_config.ipban && login_ip_ban_check(ipl) )
  1055. {
  1056. ShowStatus("Connection refused: IP isn't authorised (deny/allow, ip: %s).\n", ip);
  1057. WFIFOHEAD(fd,23);
  1058. WFIFOW(fd,0) = 0x6a;
  1059. WFIFOB(fd,2) = 3; // 3 = Rejected from Server
  1060. WFIFOSET(fd,23);
  1061. RFIFOSKIP(fd,packet_len);
  1062. set_eof(fd);
  1063. break;
  1064. }
  1065. if( (command == 0x0064 && packet_len < 55)
  1066. || (command == 0x01dd && packet_len < 47)
  1067. || (command == 0x0277 && packet_len < 84)
  1068. || (command == 0x02b0 && packet_len < 85) )
  1069. return 0;
  1070. // S 0064 <version>.l <account name>.24B <password>.24B <version2>.B
  1071. // S 01dd <version>.l <account name>.24B <md5 binary>.16B <version2>.B
  1072. // S 0277 <version>.l <account name>.24B <password>.24B <junk?>.29B <version2>.B
  1073. // S 02b0 <version>.l <account name>.24B <password>.24B <junk?>.30B <version2>.B
  1074. memset(&account, 0, sizeof(account));
  1075. account.version = RFIFOL(fd,2);
  1076. safestrncpy(account.userid, (char*)RFIFOP(fd,6), NAME_LENGTH);//## does it have to be nul-terminated?
  1077. if (command != 0x01dd) {
  1078. safestrncpy(account.passwd, (char*)RFIFOP(fd,30), NAME_LENGTH);//## does it have to be nul-terminated?
  1079. } else {
  1080. memcpy(account.passwd, RFIFOP(fd,30), 16); account.passwd[16] = '\0'; // raw binary data here!
  1081. }
  1082. RFIFOSKIP(fd,packet_len);
  1083. account.passwdenc = (command == 0x01dd) ? PASSWORDENC : 0;
  1084. Sql_EscapeStringLen(sql_handle, esc_userid, account.userid, strlen(account.userid));
  1085. result = mmo_auth(&account, fd);
  1086. if( result == -1 )
  1087. { // auth success
  1088. if( login_config.min_level_to_connect > account.level )
  1089. {
  1090. ShowStatus("Connection refused: the minimum GM level for connection is %d (account: %s, GM level: %d, ip: %s).\n", login_config.min_level_to_connect, account.userid, account.level, ip);
  1091. WFIFOHEAD(fd,3);
  1092. WFIFOW(fd,0) = 0x81;
  1093. WFIFOB(fd,2) = 1; // 01 = Server closed
  1094. WFIFOSET(fd,3);
  1095. }
  1096. else
  1097. {
  1098. uint8 server_num, n;
  1099. uint32 subnet_char_ip;
  1100. server_num = 0;
  1101. for( i = 0; i < MAX_SERVERS; ++i )
  1102. if( session_isValid(server[i].fd) )
  1103. server_num++;
  1104. if( server_num > 0 )
  1105. {// if at least 1 char-server
  1106. if( login_config.log_login && SQL_ERROR == Sql_Query(sql_handle, "INSERT DELAYED INTO `%s`(`time`,`ip`,`user`,`rcode`,`log`) VALUES (NOW(), '%u', '%s','100', 'login ok')", loginlog_db, ipl, esc_userid) )
  1107. Sql_ShowDebug(sql_handle);
  1108. if( account.level )
  1109. ShowStatus("Connection of the GM (level:%d) account '%s' accepted.\n", account.level, account.userid);
  1110. else
  1111. ShowStatus("Connection of the account '%s' accepted.\n", account.userid);
  1112. WFIFOHEAD(fd,47+32*server_num);
  1113. WFIFOW(fd,0) = 0x69;
  1114. WFIFOW(fd,2) = 47+32*server_num;
  1115. WFIFOL(fd,4) = account.login_id1;
  1116. WFIFOL(fd,8) = account.account_id;
  1117. WFIFOL(fd,12) = account.login_id2;
  1118. WFIFOL(fd,16) = 0; // in old version, that was for ip (not more used)
  1119. //memcpy(WFIFOP(fd,20), account.lastlogin, 24); // in old version, that was for name (not more used)
  1120. WFIFOW(fd,44) = 0; // unknown
  1121. WFIFOB(fd,46) = account.sex;
  1122. for( i = 0, n = 0; i < MAX_SERVERS; ++i )
  1123. {
  1124. if( !session_isValid(server[i].fd) )
  1125. continue;
  1126. subnet_char_ip = lan_subnetcheck(ipl); // Advanced subnet check [LuzZza]
  1127. WFIFOL(fd,47+n*32) = htonl((subnet_char_ip) ? subnet_char_ip : server[i].ip);
  1128. WFIFOW(fd,47+n*32+4) = ntows(htons(server[i].port)); // [!] LE byte order here [!]
  1129. memcpy(WFIFOP(fd,47+n*32+6), server[i].name, 20);
  1130. WFIFOW(fd,47+n*32+26) = server[i].users;
  1131. WFIFOW(fd,47+n*32+28) = server[i].maintenance;
  1132. WFIFOW(fd,47+n*32+30) = server[i].new_;
  1133. n++;
  1134. }
  1135. WFIFOSET(fd,47+32*server_num);
  1136. if (auth_fifo_pos >= AUTH_FIFO_SIZE)
  1137. auth_fifo_pos = 0;
  1138. auth_fifo[auth_fifo_pos].account_id = account.account_id;
  1139. auth_fifo[auth_fifo_pos].login_id1 = account.login_id1;
  1140. auth_fifo[auth_fifo_pos].login_id2 = account.login_id2;
  1141. auth_fifo[auth_fifo_pos].sex = account.sex;
  1142. auth_fifo[auth_fifo_pos].delflag = 0;
  1143. auth_fifo[auth_fifo_pos].ip = session[fd]->client_addr;
  1144. auth_fifo_pos++;
  1145. }
  1146. else
  1147. {// if no char-server, don't send void list of servers, just disconnect the player with proper message
  1148. ShowStatus("Connection refused: there is no char-server online (account: %s, ip: %s).\n", account.userid, ip);
  1149. WFIFOHEAD(fd,3);
  1150. WFIFOW(fd,0) = 0x81;
  1151. WFIFOB(fd,2) = 1; // 01 = Server closed
  1152. WFIFOSET(fd,3);
  1153. }
  1154. }
  1155. }
  1156. else
  1157. { // auth failed
  1158. if (login_config.log_login)
  1159. {
  1160. const char* error;
  1161. switch( result ) {
  1162. case 0: error = "Unregistered ID."; break; // 0 = Unregistered ID
  1163. case 1: error = "Incorrect Password."; break; // 1 = Incorrect Password
  1164. case 2: error = "Account Expired."; break; // 2 = This ID is expired
  1165. case 3: error = "Rejected from server."; break; // 3 = Rejected from Server
  1166. case 4: error = "Blocked by GM."; break; // 4 = You have been blocked by the GM Team
  1167. case 5: error = "Not latest game EXE."; break; // 5 = Your Game's EXE file is not the latest version
  1168. case 6: error = "Banned."; break; // 6 = Your are Prohibited to log in until %s
  1169. case 7: error = "Server Over-population."; break; // 7 = Server is jammed due to over populated
  1170. case 8: error = "Account limit from company"; break; // 8 = No more accounts may be connected from this company
  1171. case 9: error = "Ban by DBA"; break; // 9 = MSI_REFUSE_BAN_BY_DBA
  1172. case 10: error = "Email not confirmed"; break; // 10 = MSI_REFUSE_EMAIL_NOT_CONFIRMED
  1173. case 11: error = "Ban by GM"; break; // 11 = MSI_REFUSE_BAN_BY_GM
  1174. case 12: error = "Working in DB"; break; // 12 = MSI_REFUSE_TEMP_BAN_FOR_DBWORK
  1175. case 13: error = "Self Lock"; break; // 13 = MSI_REFUSE_SELF_LOCK
  1176. case 14: error = "Not Permitted Group"; break; // 14 = MSI_REFUSE_NOT_PERMITTED_GROUP
  1177. case 15: error = "Not Permitted Group"; break; // 15 = MSI_REFUSE_NOT_PERMITTED_GROUP
  1178. case 99: error = "Account gone."; break; // 99 = This ID has been totally erased
  1179. case 100: error = "Login info remains."; break; // 100 = Login information remains at %s
  1180. case 101: error = "Hacking investigation."; break; // 101 = Account has been locked for a hacking investigation. Please contact the GM Team for more information
  1181. case 102: error = "Bug investigation."; break; // 102 = This account has been temporarily prohibited from login due to a bug-related investigation
  1182. case 103: error = "Deleting char."; break; // 103 = This character is being deleted. Login is temporarily unavailable for the time being
  1183. case 104: error = "Deleting spouse char."; break; // 104 = This character is being deleted. Login is temporarily unavailable for the time being
  1184. default : error = "Unknown Error."; break;
  1185. }
  1186. if( SQL_ERROR == Sql_Query(sql_handle, "INSERT DELAYED INTO `%s`(`time`,`ip`,`user`,`rcode`,`log`) VALUES (NOW(), '%u', '%s', '%d','login failed : %s')", loginlog_db, ipl, esc_userid, result, error) )
  1187. Sql_ShowDebug(sql_handle);
  1188. }
  1189. if( result == 1 && login_config.dynamic_pass_failure_ban && login_config.log_login ) // failed password
  1190. {
  1191. unsigned long failures = 0;
  1192. if( SQL_ERROR == Sql_Query(sql_handle, "SELECT count(*) FROM `%s` WHERE `ip` = '%u' AND `rcode` = '1' AND `time` > NOW() - INTERVAL %d MINUTE",
  1193. loginlog_db, ipl, login_config.dynamic_pass_failure_ban_interval) )// how many times failed account? in one ip.
  1194. Sql_ShowDebug(sql_handle);
  1195. //check query result
  1196. if( SQL_SUCCESS == Sql_NextRow(sql_handle) )
  1197. {
  1198. char* data;
  1199. Sql_GetData(sql_handle, 0, &data, NULL);
  1200. failures = strtoul(data, NULL, 10);
  1201. Sql_FreeResult(sql_handle);
  1202. }
  1203. if( failures >= login_config.dynamic_pass_failure_ban_limit )
  1204. {
  1205. uint8* p = (uint8*)&ipl;
  1206. if( SQL_ERROR == Sql_Query(sql_handle, "INSERT INTO `ipbanlist`(`list`,`btime`,`rtime`,`reason`) VALUES ('%u.%u.%u.*', NOW() , NOW() + INTERVAL %d MINUTE ,'Password error ban: %s')", p[3], p[2], p[1], login_config.dynamic_pass_failure_ban_duration, esc_userid) )
  1207. Sql_ShowDebug(sql_handle);
  1208. }
  1209. }
  1210. WFIFOHEAD(fd,23);
  1211. WFIFOW(fd,0) = 0x6a;
  1212. WFIFOB(fd,2) = (uint8)result;
  1213. if( result != 6 )
  1214. memset(WFIFOP(fd,3), '\0', 20);
  1215. else
  1216. {// 6 = Your are Prohibited to log in until %s
  1217. if( SQL_ERROR == Sql_Query(sql_handle, "SELECT `ban_until` FROM `%s` WHERE `%s` = %s '%s'", login_db, login_db_userid, (login_config.case_sensitive ? "BINARY" : ""), esc_userid) )
  1218. Sql_ShowDebug(sql_handle);
  1219. else if( SQL_SUCCESS == Sql_NextRow(sql_handle) )
  1220. {
  1221. char* data;
  1222. time_t ban_until_time;
  1223. Sql_GetData(sql_handle, 0, &data, NULL);
  1224. ban_until_time = (time_t)strtoul(data, NULL, 10);
  1225. Sql_FreeResult(sql_handle);
  1226. strftime((char*)WFIFOP(fd,3), 20, login_config.date_format, localtime(&ban_until_time));
  1227. }
  1228. }
  1229. WFIFOSET(fd,23);
  1230. }
  1231. }
  1232. break;
  1233. case 0x01db: // Sending request of the coding key
  1234. RFIFOSKIP(fd,2);
  1235. {
  1236. struct login_session_data* ld;
  1237. if( session[fd]->session_data )
  1238. {
  1239. ShowWarning("login: abnormal request of MD5 key (already opened session).\n");
  1240. set_eof(fd);
  1241. return 0;
  1242. }
  1243. CREATE(ld, struct login_session_data, 1);
  1244. session[fd]->session_data = ld;
  1245. // Creation of the coding key
  1246. memset(ld->md5key, '\0', sizeof(ld->md5key));
  1247. ld->md5keylen = (uint16)(12 + rand() % 4);
  1248. for( i = 0; i < ld->md5keylen; ++i )
  1249. ld->md5key[i] = (char)(1 + rand() % 255);
  1250. WFIFOHEAD(fd,4 + ld->md5keylen);
  1251. WFIFOW(fd,0) = 0x01dc;
  1252. WFIFOW(fd,2) = 4 + ld->md5keylen;
  1253. memcpy(WFIFOP(fd,4), ld->md5key, ld->md5keylen);
  1254. WFIFOSET(fd,WFIFOW(fd,2));
  1255. }
  1256. break;
  1257. case 0x2710: // Connection request of a char-server
  1258. if (RFIFOREST(fd) < 86)
  1259. return 0;
  1260. {
  1261. char server_name[20];
  1262. char esc_server_name[20*2+1];
  1263. uint32 server_ip;
  1264. uint16 server_port;
  1265. uint16 maintenance;
  1266. uint16 new_;
  1267. memset(&account, 0, sizeof(account));
  1268. account.passwdenc = 0;
  1269. account.version = login_config.client_version_to_connect; // hack to skip version check
  1270. safestrncpy(account.userid, (char*)RFIFOP(fd,2), NAME_LENGTH);
  1271. safestrncpy(account.passwd, (char*)RFIFOP(fd,26), NAME_LENGTH);
  1272. server_ip = ntohl(RFIFOL(fd,54));
  1273. server_port = ntohs(RFIFOW(fd,58));
  1274. safestrncpy(server_name, (char*)RFIFOP(fd,60), 20);
  1275. maintenance = RFIFOW(fd,82);
  1276. new_ = RFIFOW(fd,84);
  1277. RFIFOSKIP(fd,86);
  1278. Sql_EscapeStringLen(sql_handle, esc_server_name, server_name, strnlen(server_name, 20));
  1279. Sql_EscapeStringLen(sql_handle, esc_userid, account.userid, strnlen(account.userid, NAME_LENGTH));
  1280. ShowInfo("Connection request of the char-server '%s' @ %d.%d.%d.%d:%d (account: '%s', pass: '%s', ip: '%s')\n", server_name, CONVIP(server_ip), server_port, account.userid, account.passwd, ip);
  1281. if( login_config.log_login && SQL_ERROR == Sql_Query(sql_handle, "INSERT DELAYED INTO `%s`(`time`,`ip`,`user`,`rcode`,`log`) VALUES (NOW(), '%u', '%s@%s','100', 'charserver - %s@%u.%u.%u.%u:%d')",
  1282. loginlog_db, ipl, esc_userid, esc_server_name, esc_server_name, CONVIP(server_ip), server_port) )
  1283. Sql_ShowDebug(sql_handle);
  1284. result = mmo_auth(&account, fd);
  1285. if( result == -1 && account.sex == 2 && account.account_id < MAX_SERVERS && server[account.account_id].fd == -1 )
  1286. {
  1287. ShowStatus("Connection of the char-server '%s' accepted.\n", server_name);
  1288. safestrncpy(server[account.account_id].name, server_name, sizeof(server[account.account_id].name));
  1289. server[account.account_id].fd = fd;
  1290. server[account.account_id].ip = server_ip;
  1291. server[account.account_id].port = server_port;
  1292. server[account.account_id].users = 0;
  1293. server[account.account_id].maintenance = maintenance;
  1294. server[account.account_id].new_ = new_;
  1295. session[fd]->func_parse = parse_fromchar;
  1296. session[fd]->flag.server = 1;
  1297. realloc_fifo(fd, FIFOSIZE_SERVERLINK, FIFOSIZE_SERVERLINK);
  1298. // send connection success
  1299. WFIFOHEAD(fd,3);
  1300. WFIFOW(fd,0) = 0x2711;
  1301. WFIFOB(fd,2) = 0;
  1302. WFIFOSET(fd,3);
  1303. // send GM account to char-server
  1304. send_GM_accounts(fd);
  1305. if( SQL_ERROR == Sql_Query(sql_handle, "REPLACE INTO `sstatus`(`index`,`name`,`user`) VALUES ( '%d', '%s', '%d')", account.account_id, esc_server_name, 0) )
  1306. Sql_ShowDebug(sql_handle);
  1307. }
  1308. else
  1309. {
  1310. ShowNotice("Connection of the char-server '%s' REFUSED.\n", server_name);
  1311. WFIFOHEAD(fd,3);
  1312. WFIFOW(fd,0) = 0x2711;
  1313. WFIFOB(fd,2) = 3;
  1314. WFIFOSET(fd,3);
  1315. }
  1316. }
  1317. return 0; // processing will continue elsewhere
  1318. case 0x7530: // Server version information request
  1319. ShowStatus("Sending server version information to ip: %s\n", ip);
  1320. RFIFOSKIP(fd,2);
  1321. WFIFOHEAD(fd,10);
  1322. WFIFOW(fd,0) = 0x7531;
  1323. WFIFOB(fd,2) = ATHENA_MAJOR_VERSION;
  1324. WFIFOB(fd,3) = ATHENA_MINOR_VERSION;
  1325. WFIFOB(fd,4) = ATHENA_REVISION;
  1326. WFIFOB(fd,5) = ATHENA_RELEASE_FLAG;
  1327. WFIFOB(fd,6) = ATHENA_OFFICIAL_FLAG;
  1328. WFIFOB(fd,7) = ATHENA_SERVER_LOGIN;
  1329. WFIFOW(fd,8) = ATHENA_MOD_VERSION;
  1330. WFIFOSET(fd,10);
  1331. break;
  1332. default:
  1333. ShowNotice("Abnormal end of connection (ip: %s): Unknown packet 0x%x\n", ip, command);
  1334. set_eof(fd);
  1335. return 0;
  1336. }
  1337. }
  1338. RFIFOSKIP(fd,RFIFOREST(fd));
  1339. return 0;
  1340. }
  1341. //-----------------------
  1342. // Console Command Parser [Wizputer]
  1343. //-----------------------
  1344. int parse_console(char* buf)
  1345. {
  1346. char command[256];
  1347. memset(command, 0, sizeof(command));
  1348. sscanf(buf, "%[^\n]", command);
  1349. ShowInfo("Console command :%s", command);
  1350. if( strcmpi("shutdown", command) == 0 ||
  1351. strcmpi("exit", command) == 0 ||
  1352. strcmpi("quit", command) == 0 ||
  1353. strcmpi("end", command) == 0 )
  1354. runflag = 0;
  1355. else
  1356. if( strcmpi("alive", command) == 0 ||
  1357. strcmpi("status", command) == 0 )
  1358. ShowInfo(CL_CYAN"Console: "CL_BOLD"I'm Alive."CL_RESET"\n");
  1359. else
  1360. if( strcmpi("help", command) == 0 ) {
  1361. ShowInfo(CL_BOLD"Help of commands:"CL_RESET"\n");
  1362. ShowInfo(" To shutdown the server:\n");
  1363. ShowInfo(" 'shutdown|exit|quit|end'\n");
  1364. ShowInfo(" To know if server is alive:\n");
  1365. ShowInfo(" 'alive|status'\n");
  1366. }
  1367. return 0;
  1368. }
  1369. static int online_data_cleanup_sub(DBKey key, void *data, va_list ap)
  1370. {
  1371. struct online_login_data *character= (struct online_login_data*)data;
  1372. if (character->char_server == -2) //Unknown server.. set them offline
  1373. remove_online_user(character->account_id);
  1374. else if (character->char_server < 0)
  1375. //Free data from players that have not been online for a while.
  1376. db_remove(online_db, key);
  1377. return 0;
  1378. }
  1379. static int online_data_cleanup(int tid, unsigned int tick, int id, int data)
  1380. {
  1381. online_db->foreach(online_db, online_data_cleanup_sub);
  1382. return 0;
  1383. }
  1384. //----------------------------------
  1385. // Reading Lan Support configuration
  1386. //----------------------------------
  1387. int login_lan_config_read(const char *lancfgName)
  1388. {
  1389. FILE *fp;
  1390. int line_num = 0;
  1391. char line[1024], w1[64], w2[64], w3[64], w4[64];
  1392. if((fp = fopen(lancfgName, "r")) == NULL) {
  1393. ShowWarning("LAN Support configuration file is not found: %s\n", lancfgName);
  1394. return 1;
  1395. }
  1396. ShowInfo("Reading the configuration file %s...\n", lancfgName);
  1397. while(fgets(line, sizeof(line), fp))
  1398. {
  1399. line_num++;
  1400. if ((line[0] == '/' && line[1] == '/') || line[0] == '\n' || line[1] == '\n')
  1401. continue;
  1402. if(sscanf(line,"%[^:]: %[^:]:%[^:]:%[^\r\n]", w1, w2, w3, w4) != 4)
  1403. {
  1404. ShowWarning("Error syntax of configuration file %s in line %d.\n", lancfgName, line_num);
  1405. continue;
  1406. }
  1407. if( strcmpi(w1, "subnet") == 0 )
  1408. {
  1409. subnet[subnet_count].mask = str2ip(w2);
  1410. subnet[subnet_count].char_ip = str2ip(w3);
  1411. subnet[subnet_count].map_ip = str2ip(w4);
  1412. if( (subnet[subnet_count].char_ip & subnet[subnet_count].mask) != (subnet[subnet_count].map_ip & subnet[subnet_count].mask) )
  1413. {
  1414. ShowError("%s: Configuration Error: The char server (%s) and map server (%s) belong to different subnetworks!\n", lancfgName, w3, w4);
  1415. continue;
  1416. }
  1417. subnet_count++;
  1418. }
  1419. }
  1420. ShowStatus("Read information about %d subnetworks.\n", subnet_count);
  1421. fclose(fp);
  1422. return 0;
  1423. }
  1424. //-----------------------------------------------------
  1425. // clear expired ip bans
  1426. //-----------------------------------------------------
  1427. int ip_ban_flush(int tid, unsigned int tick, int id, int data)
  1428. {
  1429. if( SQL_ERROR == Sql_Query(sql_handle, "DELETE FROM `ipbanlist` WHERE `rtime` <= NOW()") )
  1430. Sql_ShowDebug(sql_handle);
  1431. return 0;
  1432. }
  1433. //-----------------------------------
  1434. // Reading main configuration file
  1435. //-----------------------------------
  1436. int login_config_read(const char* cfgName)
  1437. {
  1438. char line[1024], w1[1024], w2[1024];
  1439. FILE* fp = fopen(cfgName, "r");
  1440. if (fp == NULL) {
  1441. ShowError("Configuration file (%s) not found.\n", cfgName);
  1442. return 1;
  1443. }
  1444. ShowInfo("Reading configuration file %s...\n", cfgName);
  1445. while(fgets(line, sizeof(line), fp))
  1446. {
  1447. if (line[0] == '/' && line[1] == '/')
  1448. continue;
  1449. if (sscanf(line, "%[^:]: %[^\r\n]", w1, w2) < 2)
  1450. continue;
  1451. if(!strcmpi(w1,"timestamp_format"))
  1452. strncpy(timestamp_format, w2, 20);
  1453. else if(!strcmpi(w1,"stdout_with_ansisequence"))
  1454. stdout_with_ansisequence = config_switch(w2);
  1455. else if(!strcmpi(w1,"console_silent")) {
  1456. ShowInfo("Console Silent Setting: %d\n", atoi(w2));
  1457. msg_silent = atoi(w2);
  1458. }
  1459. else if( !strcmpi(w1, "bind_ip") ) {
  1460. char ip_str[16];
  1461. login_config.login_ip = host2ip(w2);
  1462. if( login_config.login_ip )
  1463. ShowStatus("Login server binding IP address : %s -> %s\n", w2, ip2str(login_config.login_ip, ip_str));
  1464. }
  1465. else if( !strcmpi(w1, "login_port") ) {
  1466. login_config.login_port = (uint16)atoi(w2);
  1467. ShowStatus("set login_port : %s\n",w2);
  1468. }
  1469. else if(!strcmpi(w1, "log_login"))
  1470. login_config.log_login = (bool)config_switch(w2);
  1471. else if(!strcmpi(w1, "ipban"))
  1472. login_config.ipban = (bool)config_switch(w2);
  1473. else if(!strcmpi(w1, "dynamic_pass_failure_ban"))
  1474. login_config.dynamic_pass_failure_ban = (bool)config_switch(w2);
  1475. else if(!strcmpi(w1, "dynamic_pass_failure_ban_interval"))
  1476. login_config.dynamic_pass_failure_ban_interval = atoi(w2);
  1477. else if(!strcmpi(w1, "dynamic_pass_failure_ban_limit"))
  1478. login_config.dynamic_pass_failure_ban_limit = atoi(w2);
  1479. else if(!strcmpi(w1, "dynamic_pass_failure_ban_duration"))
  1480. login_config.dynamic_pass_failure_ban_duration = atoi(w2);
  1481. else if(!strcmpi(w1, "new_account"))
  1482. login_config.new_account_flag = (bool)config_switch(w2);
  1483. else if(!strcmpi(w1, "check_client_version"))
  1484. login_config.check_client_version = (bool)config_switch(w2);
  1485. else if(!strcmpi(w1, "client_version_to_connect"))
  1486. login_config.client_version_to_connect = atoi(w2);
  1487. else if(!strcmpi(w1, "use_MD5_passwords"))
  1488. login_config.use_md5_passwds = (bool)config_switch(w2);
  1489. else if(!strcmpi(w1, "min_level_to_connect"))
  1490. login_config.min_level_to_connect = atoi(w2);
  1491. else if(!strcmpi(w1, "date_format"))
  1492. safestrncpy(login_config.date_format, w2, sizeof(login_config.date_format));
  1493. else if(!strcmpi(w1, "console"))
  1494. login_config.console = (bool)config_switch(w2);
  1495. else if(!strcmpi(w1, "case_sensitive"))
  1496. login_config.case_sensitive = (bool)config_switch(w2);
  1497. else if(!strcmpi(w1, "allowed_regs")) //account flood protection system
  1498. allowed_regs = atoi(w2);
  1499. else if(!strcmpi(w1, "time_allowed"))
  1500. time_allowed = atoi(w2);
  1501. else if(!strcmpi(w1, "online_check"))
  1502. login_config.online_check = (bool)config_switch(w2);
  1503. else if(!strcmpi(w1, "use_dnsbl"))
  1504. login_config.use_dnsbl = (bool)config_switch(w2);
  1505. else if(!strcmpi(w1, "dnsbl_servers"))
  1506. safestrncpy(login_config.dnsbl_servs, w2, sizeof(login_config.dnsbl_servs));
  1507. else if(!strcmpi(w1, "ip_sync_interval"))
  1508. login_config.ip_sync_interval = (unsigned int)1000*60*atoi(w2); //w2 comes in minutes.
  1509. else if(!strcmpi(w1, "import"))
  1510. login_config_read(w2);
  1511. }
  1512. fclose(fp);
  1513. ShowInfo("Finished reading %s.\n", cfgName);
  1514. return 0;
  1515. }
  1516. void sql_config_read(const char* cfgName)
  1517. {
  1518. char line[1024], w1[1024], w2[1024];
  1519. FILE* fp = fopen(cfgName, "r");
  1520. if(fp == NULL) {
  1521. ShowError("file not found: %s\n", cfgName);
  1522. return;
  1523. }
  1524. ShowInfo("reading configuration file %s...\n", cfgName);
  1525. while(fgets(line, sizeof(line), fp))
  1526. {
  1527. if (line[0] == '/' && line[1] == '/')
  1528. continue;
  1529. if (sscanf(line, "%[^:]: %[^\r\n]", w1, w2) < 2)
  1530. continue;
  1531. if (!strcmpi(w1, "gm_read_method"))
  1532. login_config.login_gm_read = (atoi(w2) == 0);
  1533. else if (!strcmpi(w1, "login_db"))
  1534. strcpy(login_db, w2);
  1535. else if (!strcmpi(w1, "login_server_ip"))
  1536. strcpy(login_server_ip, w2);
  1537. else if (!strcmpi(w1, "login_server_port"))
  1538. login_server_port = (uint16)atoi(w2);
  1539. else if (!strcmpi(w1, "login_server_id"))
  1540. strcpy(login_server_id, w2);
  1541. else if (!strcmpi(w1, "login_server_pw"))
  1542. strcpy(login_server_pw, w2);
  1543. else if (!strcmpi(w1, "login_server_db"))
  1544. strcpy(login_server_db, w2);
  1545. else if (!strcmpi(w1, "default_codepage"))
  1546. strcpy(default_codepage, w2);
  1547. else if (!strcmpi(w1, "login_db_account_id"))
  1548. strcpy(login_db_account_id, w2);
  1549. else if (!strcmpi(w1, "login_db_userid"))
  1550. strcpy(login_db_userid, w2);
  1551. else if (!strcmpi(w1, "login_db_user_pass"))
  1552. strcpy(login_db_user_pass, w2);
  1553. else if (!strcmpi(w1, "login_db_level"))
  1554. strcpy(login_db_level, w2);
  1555. else if (!strcmpi(w1, "loginlog_db"))
  1556. strcpy(loginlog_db, w2);
  1557. else if (!strcmpi(w1, "reg_db"))
  1558. strcpy(reg_db, w2);
  1559. else if (!strcmpi(w1, "import"))
  1560. sql_config_read(w2);
  1561. }
  1562. fclose(fp);
  1563. ShowInfo("Done reading %s.\n", cfgName);
  1564. }
  1565. void login_set_defaults()
  1566. {
  1567. login_config.login_ip = INADDR_ANY;
  1568. login_config.login_port = 6900;
  1569. login_config.ip_sync_interval = 0;
  1570. login_config.log_login = true;
  1571. safestrncpy(login_config.date_format, "%Y-%m-%d %H:%M:%S", sizeof(login_config.date_format));
  1572. login_config.console = false;
  1573. login_config.new_account_flag = true;
  1574. login_config.case_sensitive = true;
  1575. login_config.use_md5_passwds = false;
  1576. login_config.login_gm_read = true;
  1577. login_config.min_level_to_connect = 0;
  1578. login_config.online_check = true;
  1579. login_config.check_client_version = false;
  1580. login_config.client_version_to_connect = 20;
  1581. login_config.ipban = true;
  1582. login_config.dynamic_pass_failure_ban = true;
  1583. login_config.dynamic_pass_failure_ban_interval = 5;
  1584. login_config.dynamic_pass_failure_ban_limit = 7;
  1585. login_config.dynamic_pass_failure_ban_duration = 5;
  1586. login_config.use_dnsbl = false;
  1587. safestrncpy(login_config.dnsbl_servs, "", sizeof(login_config.dnsbl_servs));
  1588. }
  1589. //--------------------------------------
  1590. // Function called at exit of the server
  1591. //--------------------------------------
  1592. void do_final(void)
  1593. {
  1594. int i, fd;
  1595. ShowStatus("Terminating...\n");
  1596. mmo_db_close();
  1597. online_db->destroy(online_db, NULL);
  1598. if(gm_account_db) aFree(gm_account_db);
  1599. for (i = 0; i < MAX_SERVERS; i++) {
  1600. if ((fd = server[i].fd) >= 0) {
  1601. memset(&server[i], 0, sizeof(struct mmo_char_server));
  1602. server[i].fd = -1;
  1603. do_close(fd);
  1604. }
  1605. }
  1606. do_close(login_fd);
  1607. ShowStatus("Finished.\n");
  1608. }
  1609. //------------------------------
  1610. // Function called when the server
  1611. // has received a crash signal.
  1612. //------------------------------
  1613. void do_abort(void)
  1614. {
  1615. }
  1616. void set_server_type(void)
  1617. {
  1618. SERVER_TYPE = ATHENA_SERVER_LOGIN;
  1619. }
  1620. //------------------------------
  1621. // Login server initialization
  1622. //------------------------------
  1623. int do_init(int argc, char** argv)
  1624. {
  1625. int i;
  1626. login_set_defaults();
  1627. // read login-server configuration
  1628. login_config_read((argc > 1) ? argv[1] : LOGIN_CONF_NAME);
  1629. sql_config_read(SQL_CONF_NAME);
  1630. login_lan_config_read((argc > 2) ? argv[2] : LAN_CONF_NAME);
  1631. srand((unsigned int)time(NULL));
  1632. for( i = 0; i < AUTH_FIFO_SIZE; i++ )
  1633. auth_fifo[i].delflag = 1;
  1634. for( i = 0; i < MAX_SERVERS; i++ )
  1635. server[i].fd = -1;
  1636. // Online user database init
  1637. online_db = idb_alloc(DB_OPT_RELEASE_DATA);
  1638. add_timer_func_list(waiting_disconnect_timer, "waiting_disconnect_timer");
  1639. // Auth init
  1640. mmo_auth_sqldb_init();
  1641. // Read account information.
  1642. if(login_config.login_gm_read)
  1643. read_gm_account();
  1644. // set default parser as parse_login function
  1645. set_defaultparse(parse_login);
  1646. // ban deleter timer
  1647. add_timer_func_list(ip_ban_flush, "ip_ban_flush");
  1648. add_timer_interval(gettick()+10, ip_ban_flush, 0, 0, 60*1000);
  1649. // every 10 minutes cleanup online account db.
  1650. add_timer_func_list(online_data_cleanup, "online_data_cleanup");
  1651. add_timer_interval(gettick() + 600*1000, online_data_cleanup, 0, 0, 600*1000);
  1652. // add timer to detect ip address change and perform update
  1653. if (login_config.ip_sync_interval) {
  1654. add_timer_func_list(sync_ip_addresses, "sync_ip_addresses");
  1655. add_timer_interval(gettick() + login_config.ip_sync_interval, sync_ip_addresses, 0, 0, login_config.ip_sync_interval);
  1656. }
  1657. if( login_config.console )
  1658. {
  1659. //##TODO invoke a CONSOLE_START plugin event
  1660. }
  1661. new_reg_tick = gettick();
  1662. // server port open & binding
  1663. login_fd = make_listen_bind(login_config.login_ip, login_config.login_port);
  1664. ShowStatus("The login-server is "CL_GREEN"ready"CL_RESET" (Server is listening on the port %u).\n\n", login_config.login_port);
  1665. return 0;
  1666. }