docker-tmserver/docker-xaseco/xaseco/plugins/plugin.access.php

449 lines
14 KiB
PHP

<?php
/* vim: set noexpandtab tabstop=2 softtabstop=2 shiftwidth=2: */
/**
* Access Control plugin.
* Controls player access by nation (TMN) or zone (TMF).
* Inspired by Apache's mod_access:
* http://httpd.apache.org/docs/2.0/mod/mod_access.html
* Created by Xymph
*
* Dependencies: none
*/
Aseco::registerEvent('onStartup', 'access_initcontrol');
Aseco::registerEvent('onPlayerConnect2', 'access_playerconnect'); // use post event after all join processing
global $access_control;
// ['order'] - boolean: allow,deny = true; deny,allow = false
// ['allowall'] - boolean: Allow from all = true; otherwise false
// ['allow'] - array of nations/zones to allow
// ['denyall'] - boolean: Deny from all = true; otherwise false
// ['deny'] - array of nations/zones to deny
// called @ onStartup
function access_initcontrol($aseco, $reload = false) {
global $access_control;
// initialize access control
$access_control = array();
$access_control['order'] = false;
$access_control['allowall'] = false;
$access_control['allow'] = array();
$access_control['denyall'] = false;
$access_control['deny'] = array();
$access_control['messages'] = array();
$error = '';
// log console message
if (!$reload)
$aseco->console('Load player access control [access.xml]');
// read & parse config file
if (!$settings = $aseco->xml_parser->parseXml('access.xml'))
$error = 'Could not read/parse access control config file access.xml !';
// check/store Order section
if (!$error) {
if (isset($settings['ACCESS']['ORDER'][0])) {
// strip all spaces
$order = str_replace(' ', '', strtolower($settings['ACCESS']['ORDER'][0]));
if ($order == 'allow,deny')
$access_control['order'] = true;
elseif ($order == 'deny,allow')
$access_control['order'] = false;
else {
$error = 'Access control config invalid \'order\' section: "' . $settings['ACCESS']['ORDER'][0] . '"';
}
} else {
$error = 'Access control config missing section: order';
}
}
// check/store Allow section
if (!$error) {
if (isset($settings['ACCESS']['ALLOW'][0])) {
// check/store From entry(ies)
if (isset($settings['ACCESS']['ALLOW'][0]['FROM'])) {
foreach ($settings['ACCESS']['ALLOW'][0]['FROM'] as $from) {
if ($from == 'all') {
if (count($settings['ACCESS']['ALLOW'][0]['FROM']) > 1) {
$error = 'Access control config \'allow\' section contains more besides "all" value';
break;
} else {
$access_control['allowall'] = true;
}
} else { // != 'all'
if (in_array($from, $access_control['allow'])) {
$error = 'Access control config \'allow\' section contains duplicate value: ' . $from;
break;
} else {
if ($from != '') // ignore empty entries
$access_control['allow'][] = $from;
}
}
}
} else {
$error = 'Access control config \'allow\' section must contain at least one \'from\' entry';
}
} else {
$error = 'Access control config missing section: allow';
}
}
// check/store Deny section
if (!$error) {
if (isset($settings['ACCESS']['DENY'][0])) {
// check/store From entry(ies)
if (isset($settings['ACCESS']['DENY'][0]['FROM'])) {
foreach ($settings['ACCESS']['DENY'][0]['FROM'] as $from) {
if ($from == 'all') {
if (count($settings['ACCESS']['DENY'][0]['FROM']) > 1) {
$error = 'Access control config \'deny\' section contains more besides "all" value';
break;
} else {
$access_control['denyall'] = true;
}
} else { // != 'all'
if (in_array($from, $access_control['deny'])) {
$error = 'Access control config \'deny\' section contains duplicate value: ' . $from;
break;
} else {
if ($from != '') // ignore empty entries
$access_control['deny'][] = $from;
}
}
}
} else {
$error = 'Access control config \'deny\' section must contain at least one \'from\' entry';
}
} else {
$error = 'Access control config missing section: deny';
}
}
// final consistency check
if (!$error && $access_control['allowall'] && $access_control['denyall'])
$error = 'Access control config \'allow\' & \'deny\' sections cannot both use "all" value';
// load messages
if (!$error) {
if (isset($settings['ACCESS']['MESSAGES'][0])) {
if (isset($settings['ACCESS']['MESSAGES'][0]['DENIED'][0]))
$access_control['messages']['denied'] = $settings['ACCESS']['MESSAGES'][0]['DENIED'][0];
else
$error = 'Access control config \'messages\' section missing value: denied';
if (isset($settings['ACCESS']['MESSAGES'][0]['DIALOG'][0]))
$access_control['messages']['dialog'] = $settings['ACCESS']['MESSAGES'][0]['DIALOG'][0];
else
$error = 'Access control config \'messages\' section missing value: dialog';
if (isset($settings['ACCESS']['MESSAGES'][0]['RELOAD'][0]))
$access_control['messages']['reload'] = $settings['ACCESS']['MESSAGES'][0]['RELOAD'][0];
else
$error = 'Access control config \'messages\' section missing value: reload';
if (isset($settings['ACCESS']['MESSAGES'][0]['XMLERR'][0]))
$access_control['messages']['xmlerr'] = $settings['ACCESS']['MESSAGES'][0]['XMLERR'][0];
else
$error = 'Access control config \'messages\' section missing value: xmlerr';
if (isset($settings['ACCESS']['MESSAGES'][0]['MISSING'][0]))
$access_control['messages']['missing'] = $settings['ACCESS']['MESSAGES'][0]['MISSING'][0];
else
$error = 'Access control config \'messages\' section missing value: missing';
} else {
$error = 'Access control config missing section: messages';
}
}
if (!$error) {
// sort access lists
sort($access_control['allow']);
sort($access_control['deny']);
// log console message
if ($reload)
$aseco->console('Player access control reloaded from access.xml');
return true;
} else {
// log error message
trigger_error($error, E_USER_WARNING);
$access_control = array();
return false;
}
} // access_initcontrol
function in_zones($access, $zones) {
// check all zones for matching (leading part of) player's zone
foreach ($zones as $zone)
if (strpos($access, $zone) === 0)
return true;
return false;
} // in_zones
// called @ onPlayerConnect2
function access_playerconnect($aseco, $player) {
global $access_control;
// if no access control, bail out immediately
if (!$access_control) return;
// get nation/zone to check for access
if ($aseco->server->getGame() == 'TMF') {
$access = $player->zone;
} elseif ($aseco->server->getGame() == 'TMN') {
$access = $player->nation;
} else { // TMS/TMO
return; // no access control
}
// check for empty nation/zone
if ($access == '') {
if ($access_control['order']) { // Allow,Deny
; // default denied
} else { // Deny,Allow
return; // default allowed
}
} else {
if ($aseco->server->getGame() == 'TMF') {
if ($access_control['order']) { // Allow,Deny
// first check Allow list
if ($access_control['allowall'] || in_zones($access, $access_control['allow'])) {
// then check Deny list
if ($access_control['denyall'] || in_zones($access, $access_control['deny']))
; // deny this nation
else
return; // allow this nation
}
else
; // deny this nation
} else { // Deny,Allow
// first check Deny list
if ($access_control['denyall'] || in_zones($access, $access_control['deny'])) {
// then check Allow list
if ($access_control['allowall'] || in_zones($access, $access_control['allow']))
return; // allow this nation
else
; // deny this nation
}
else
return; // allow this nation
}
} else { // TMN
if ($access_control['order']) { // Allow,Deny
// first check Allow list
if ($access_control['allowall'] || in_array($access, $access_control['allow'])) {
// then check Deny list
if ($access_control['denyall'] || in_array($access, $access_control['deny']))
; // deny this nation
else
return; // allow this nation
}
else
; // deny this nation
} else { // Deny,Allow
// first check Deny list
if ($access_control['denyall'] || in_array($access, $access_control['deny'])) {
// then check Allow list
if ($access_control['allowall'] || in_array($access, $access_control['allow']))
return; // allow this nation
else
; // deny this nation
}
else
return; // allow this nation
}
}
}
// log & kick player
$aseco->console('Player \'{1}\' denied access from "{2}" - kicking...', $player->login, $access);
$message = formatText($access_control['messages']['denied'],
stripColors($player->nickname),
($aseco->server->getGame() == 'TMF' ? 'zone' : 'nation'),
$access);
$aseco->client->query('ChatSendServerMessage', $aseco->formatColors($message));
if ($aseco->server->getGame() == 'TMF') {
$message = formatText($access_control['messages']['dialog'],
$access);
$aseco->client->addCall('Kick', array($player->login, $aseco->formatColors($message)));
} else {
$aseco->client->addCall('Kick', array($player->login));
}
} // access_playerconnect
function admin_access($aseco, $command) {
global $access_control;
$player = $command['author'];
$login = $player->login;
if ($command['params'] == 'help') {
if ($aseco->server->getGame() == 'TMF') {
$header = '{#black}/admin access$g handles player access control:';
$help = array();
$help[] = array('...', '{#black}help',
'Displays this help information');
$help[] = array('...', '{#black}list',
'Displays current access control settings');
$help[] = array('...', '{#black}reload',
'Reloads updated access control settings');
// display ManiaLink message
display_manialink($login, $header, array('Icons64x64_1', 'TrackInfo', -0.01), $help, array(0.8, 0.05, 0.15, 0.6), 'OK');
} elseif ($aseco->server->getGame() == 'TMN') {
$help = '{#black}/admin access$g handles player access control:' . LF;
$help .= ' - {#black}help$g, displays this help information' . LF;
$help .= ' - {#black}list$g, lists current settings' . LF;
$help .= ' - {#black}reload$g, reloads updated settings' . LF;
// display popup message
$aseco->client->query('SendDisplayServerMessageToLogin', $login, $aseco->formatColors($help), 'OK', '', 0);
}
}
elseif ($command['params'] == 'list') {
$player->msgs = array();
if ($aseco->server->getGame() == 'TMF') {
$head = 'Current player access control settings:';
$info = array();
// initialize with Order entry
$info[] = array('Order:', '{#black}' . ($access_control['order'] ? 'Allow,Deny' : 'Deny,Allow'));
$info[] = array();
$lines = 2;
$player->msgs[0] = array(1, $head, array(1.0, 0.2, 0.8), array('Icons128x128_1', 'ManiaZones'));
// collect Allow entries
$info[] = array('Allow:', '');
$lines++;
if ($access_control['allowall']) {
$info[] = array('', '{#black}all');
$lines++;
} else {
foreach ($access_control['allow'] as $from) {
$info[] = array('', '{#black}' . $from);
if (++$lines > 14) {
$player->msgs[] = $info;
$lines = 0;
$info = array();
}
}
}
// insert spacer
$info[] = array();
if (++$lines > 14) {
$player->msgs[] = $info;
$lines = 0;
$info = array();
}
// collect Deny entries
$info[] = array('Deny:', '');
$lines++;
if ($access_control['denyall']) {
$info[] = array('', '{#black}all');
$lines++;
} else {
foreach ($access_control['deny'] as $from) {
$info[] = array('', '{#black}' . $from);
if (++$lines > 14) {
$player->msgs[] = $info;
$lines = 0;
$info = array();
}
}
}
// add if last batch exists
if (count($info) > 1)
$player->msgs[] = $info;
// display ManiaLink message
display_manialink_multi($player);
} elseif ($aseco->server->getGame() == 'TMN') {
$head = 'Current player access control settings:' . LF;
// initialize with Order entry
$info = 'Order: {#black}' . ($access_control['order'] ? 'Allow,Deny' : 'Deny,Allow') . LF . LF;
$lines = 2;
$player->msgs[0] = 1;
// collect Allow entries
$info .= '$gAllow:' . LF;
$lines++;
if ($access_control['allowall']) {
$info .= ' {#black}all' . LF;
$lines++;
} else {
foreach ($access_control['allow'] as $from) {
$info .= ' {#black}' . $from . LF;
if (++$lines > 9) {
$player->msgs[] = $aseco->formatColors($head . $info);
$lines = 0;
$info = '';
}
}
}
// insert spacer
$info .= LF;
if (++$lines > 9) {
$player->msgs[] = $aseco->formatColors($head . $info);
$lines = 0;
$info = '';
}
// collect Deny entries
$info .= '$gDeny:' . LF;
$lines++;
if ($access_control['denyall']) {
$info .= ' {#black}all' . LF;
$lines++;
} else {
foreach ($access_control['deny'] as $from) {
$info .= ' {#black}' . $from . LF;
if (++$lines > 9) {
$player->msgs[] = $aseco->formatColors($head . $info);
$lines = 0;
$info = '';
}
}
}
// add if last batch exists
if ($info != '')
$player->msgs[] = $aseco->formatColors($head . $info);
// display popup message
if (count($player->msgs) == 2) {
$aseco->client->query('SendDisplayServerMessageToLogin', $login, $player->msgs[1], 'OK', '', 0);
} elseif (count($player->msgs) > 2) {
$aseco->client->query('SendDisplayServerMessageToLogin', $login, $player->msgs[1], 'Close', 'Next', 0);
}
}
}
elseif ($command['params'] == 'reload') {
// reload/check access control
if (access_initcontrol($aseco, true)) {
$message = $access_control['messages']['reload'];
} else {
$access_control = array();
$message = $access_control['messages']['xmlerr'];
}
$aseco->client->query('ChatSendServerMessageToLogin', $aseco->formatColors($message), $login);
}
else {
$message = $access_control['messages']['missing'];
$aseco->client->query('ChatSendServerMessageToLogin', $aseco->formatColors($message), $login);
}
} // admin_access
?>