summaryrefslogblamecommitdiffstats
path: root/mbbsd/register.c
blob: 64b0afe5a9da09a0d7cbd4f286236f2fe122ae12 (plain) (tree)
1
2
3
4
5
6
7
8
9
10
11
12
          
                     
                      
 
                






                                    
 


                                  

                                 
                               
                        
                       
                        


                         
                                



              
                                       
   
                                      
 
                       

                       






                                    


                        
   


                           

                         
                



                             
                             

                                                         


                                         
                 
 



                                                            

                 


                                                            







                                      
          



                                                 
                                                       


                                                                   
                      

                                                             
                                             
                                           
                          

                                                             
                  
                                                                 






                                                                         
   
                                                  
 


                                                    
                                                                      


                                                                 
                                       
                                                                           
                                  
                                                                       
                                                           


                                                                  

                               
                           


                                       
         
     


               
 
   


                               
                                 
                         



                          
                
 
                                                
                                      
                                             

                                                                          



                                              
 
                                                               

                                                                     
                          
 
                                                             
                                              
                                       
                                                   


             

                         
                                      
                        
                                                           

                
                                                  
                               
 
                 



                    
    



                                    
                                          
 







                                                                        
                                                                            




                                              


                                         

                         
                                                       

                    

                                                
 
                                        
                                                                         


                                                                    
                                                      
                  
                                                                               

              



                  

                         
                                                       

                    


                                                     



                                                                      
                                                                         
                                                        








                                                             
                       
                                                 


                             
                                              


                                                
                                                 



                                            
                                           

                          




                                          
 
    



                               









                                                       
                                      
 


                                                   
 
                                             
                                                 

                       


                                                   
 


                                                  
 

      
                                                                             

                                                                        

                                                                        
       


                                                                            

           
                                

                                                       
                   
                                                 

                                                       
 
                    

                                                            
                                 
      
     
 
/* $Id$ */
#define _XOPEN_SOURCE
#define _ISOC99_SOURCE

#include "bbs.h"

char           *
genpasswd(char *pw)
{
    if (pw[0]) {
    char            saltc[2], c;
    int             i;

    i = 9 * getpid();
    saltc[0] = i & 077;
    saltc[1] = (i >> 6) & 077;

    for (i = 0; i < 2; i++) {
        c = saltc[i] + '.';
        if (c > '9')
        c += 7;
        if (c > 'Z')
        c += 6;
        saltc[i] = c;
    }
    return crypt(pw, saltc);
    }
    return "";
}

// NOTE it will clean string in "plain"
int
checkpasswd(char *passwd, char *plain)
{
    int             ok;
    char           *pw;

    ok = 0;
    pw = crypt(plain, passwd);
    if(pw && strcmp(pw, passwd)==0)
    ok = 1;
    memset(plain, 0, strlen(plain));

    return ok;
}

/* 檢查 user 註冊情況 */
int
bad_user_id(char *userid)
{
    int             len, i;
    len = strlen(userid);

    if (len < 2)
    return 1;

    if (not_alpha(userid[0]))
    return 1;
    for (i = 1; i < len; i++)
    /* DickG: 修正了只比較 userid 第一個字元的 bug */
    if (not_alnum(userid[i]))
        return 1;

    if (strcasecmp(userid, str_new) == 0)
    return 1;

    /* in2: 原本是用strcasestr,
            不過有些人中間剛剛好出現這個字應該還算合理吧? */
    if( strncasecmp(userid, "fuck", 4) == 0 ||
        strncasecmp(userid, "shit", 4) == 0 )
    return 1;

    /*
     * while((ch = *(++userid))) if(not_alnum(ch)) return 1;
     */
    return 0;
}

/* -------------------------------- */
/* New policy for allocate new user */
/* (a) is the worst user currently  */
/* (b) is the object to be compared */
/* -------------------------------- */
static int
compute_user_value(userec_t * urec, time_t clock)
{
    int             value;

    /* if (urec) has XEMPT permission, don't kick it */
    if ((urec->userid[0] == '\0') || (urec->userlevel & PERM_XEMPT)
    /* || (urec->userlevel & PERM_LOGINOK) */
    || !strcmp(STR_GUEST, urec->userid))
    return 999999;
    value = (clock - urec->lastlogin) / 60; /* minutes */

    /* new user should register in 30 mins */
    if (strcmp(urec->userid, str_new) == 0)
    return 30 - value;
#if 0
    if (!urec->numlogins)   /* 未 login 成功者,不保留 */
    return -1;
    if (urec->numlogins <= 3)   /* #login 少於三者,保留 20 天 */
    return 20 * 24 * 60 - value;
#endif
    /* 未完成註冊者,保留 15 天 */
    /* 一般情況,保留 120 天 */
    return (urec->userlevel & PERM_LOGINOK ? 120 : 15) * 24 * 60 - value;
}

int
check_and_expire_account(int uid, userec_t * urec)
{
    char            genbuf[200], genbuf2[200];
    int             val;
    if ((val = compute_user_value(urec, now)) < 0) {
    snprintf(genbuf, sizeof(genbuf), "#%d %-12s %15.15s %d %d %d",
        uid, urec->userid, ctime(&(urec->lastlogin)) + 4,
        urec->numlogins, urec->numposts, val);
    if (val > -1 * 60 * 24 * 365) {
        log_usies("CLEAN", genbuf);
        snprintf(genbuf, sizeof(genbuf), "home/%c/%s", urec->userid[0],
            urec->userid);
        snprintf(genbuf2, sizeof(genbuf2), "tmp/%s", urec->userid);
        if (dashd(genbuf) && Rename(genbuf, genbuf2)) {
        snprintf(genbuf, sizeof(genbuf),
             "/bin/rm -fr home/%c/%s >/dev/null 2>&1",
             urec->userid[0], urec->userid);
        system(genbuf);
        }
            kill_user(uid);
    } else {
        val = 0;
        log_usies("DATED", genbuf);
    }
    }
    return val;
}


int
getnewuserid()
{
    char            genbuf[50];
    char    *fn_fresh = ".fresh";
    userec_t        utmp;
    time_t          clock;
    struct stat     st;
    int             fd, i;

    clock = now;

    /* Lazy method : 先找尋已經清除的過期帳號 */
    if ((i = searchnewuser(0)) == 0) {
    /* 每 1 個小時,清理 user 帳號一次 */
    if ((stat(fn_fresh, &st) == -1) || (st.st_mtime < clock - 3600)) {
        if ((fd = open(fn_fresh, O_RDWR | O_CREAT, 0600)) == -1)
        return -1;
        write(fd, ctime(&clock), 25);
        close(fd);
        log_usies("CLEAN", "dated users");

        fprintf(stdout, "尋找新帳號中, 請稍待片刻...\n\r");

        if ((fd = open(fn_passwd, O_RDWR | O_CREAT, 0600)) == -1)
        return -1;

        /* 不曉得為什麼要從 2 開始... Ptt:因為SYSOP在1 */
        for (i = 2; i <= MAX_USERS; i++) {
        passwd_query(i, &utmp);
        check_and_expire_account(i, &utmp);
        }
    }
    }
    passwd_lock();
    i = searchnewuser(1);
    if ((i <= 0) || (i > MAX_USERS)) {
    passwd_unlock();
    vmsg("抱歉,使用者帳號已經滿了,無法註冊新的帳號");
    exit(1);
    }
    snprintf(genbuf, sizeof(genbuf), "uid %d", i);
    log_usies("APPLY", genbuf);

    kill_user(i);
    passwd_unlock();
    return i;
}

void
new_register()
{
    userec_t        newuser;
    char            passbuf[STRLEN];
    int             allocid, try, id, uid;

#ifdef HAVE_USERAGREEMENT
    more(HAVE_USERAGREEMENT, YEA);
    while( 1 ){
    getdata(b_lines - 1, 0, "請問您接受這份使用者條款嗎? (yes/no) ",
        passbuf, 4, LCECHO);
    if( passbuf[0] == 'y' )
        break;
    if( passbuf[0] == 'n' ){
        vmsg("抱歉, 您須要接受使用者條款才能註冊帳號享受我們的服務唷!");
        exit(1);
    }
    vmsg("請輸入 y表示接受, n表示不接受");
    }
#endif
    memset(&newuser, 0, sizeof(newuser));
    more("etc/register", NA);
    try = 0;
    while (1) {
    if (++try >= 6) {
        vmsg("您嘗試錯誤的輸入太多,請下次再來吧");
        exit(1);
    }
    getdata(17, 0, msg_uid, newuser.userid,
        sizeof(newuser.userid), DOECHO);

    if (bad_user_id(newuser.userid))
        outs("無法接受這個代號,請使用英文字母,並且不要包含空格\n");
    else if ((id = getuser(newuser.userid)) &&
         (id = check_and_expire_account(id, &xuser)) >= 0) {
        if (id == 999999)
        outs("此代號已經有人使用 是不死之身");
        else {
        prints("此代號已經有人使用 還有%d天才過期 \n", id / (60 * 24));
        }
    } else
        break;
    }

    try = 0;
    while (1) {
    if (++try >= 6) {
        vmsg("您嘗試錯誤的輸入太多,請下次再來吧");
        exit(1);
    }
    if ((getdata(19, 0, "請設定密碼:", passbuf,
             sizeof(passbuf), NOECHO) < 3) ||
        !strcmp(passbuf, newuser.userid)) {
        outs("密碼太簡單,易遭入侵,至少要 4 個字,請重新輸入\n");
        continue;
    }
    strncpy(newuser.passwd, passbuf, PASSLEN);
    getdata(20, 0, "請檢查密碼:", passbuf, sizeof(passbuf), NOECHO);
    if (strncmp(passbuf, newuser.passwd, PASSLEN)) {
        outs("密碼輸入錯誤, 請重新輸入密碼.\n");
        continue;
    }
    passbuf[8] = '\0';
    strncpy(newuser.passwd, genpasswd(passbuf), PASSLEN);
    break;
    }
    newuser.userlevel = PERM_DEFAULT;
    newuser.uflag = COLOR_FLAG | BRDSORT_FLAG | MOVIE_FLAG;
    newuser.uflag2 = 0;
    newuser.firstlogin = newuser.lastlogin = now;
    newuser.money = 0;
    newuser.pager = 1;
    allocid = getnewuserid();
    if (allocid > MAX_USERS || allocid <= 0) {
    fprintf(stderr, "本站人口已達飽和!\n");
    exit(1);
    }
    if (passwd_update(allocid, &newuser) == -1) {
    fprintf(stderr, "客滿了,再見!\n");
    exit(1);
    }
    setuserid(allocid, newuser.userid);
    if( (uid = initcuser(newuser.userid)) )
    setumoney(uid, 0);
    else{
    fprintf(stderr, "無法建立帳號\n");
    exit(1);
    }
}


void
check_register()
{
    char           *ptr = NULL;

    if (HAS_PERM(PERM_LOGINOK))
    return;

    /* 
     * 避免使用者被退回註冊單後,在知道退回的原因之前,
     * 又送出一次註冊單。
     */ 
    if (currutmp->mailalert)
    m_read();

    stand_title("請詳細填寫個人資料");

    while (strlen(cuser.username) < 2)
    getdata(2, 0, "綽號暱稱:", cuser.username,
        sizeof(cuser.username), DOECHO);

    for (ptr = cuser.username; *ptr; ptr++) {
    if (*ptr == 9)      /* TAB convert */
        *ptr = ' ';
    }
    while (strlen(cuser.realname) < 4)
    getdata(4, 0, "真實姓名:", cuser.realname,
        sizeof(cuser.realname), DOECHO);

    while (strlen(cuser.address) < 8)
    getdata(6, 0, "聯絡地址:", cuser.address,
        sizeof(cuser.address), DOECHO);


    /*
     * if(!strchr(cuser.email, '@')) { bell(); move(t_lines - 4, 0); prints("
     * 您的權益,請填寫真實的 E-mail address," "以資確認閣下身份,\n" "
     * 033[44muser@domain_name\033[0m 或 \033[44muser"
     * "@\\[ip_number\\]\033[0m。\n\n" "※ 如果您真的沒有 E-mail, turn]
     * 即可。");
     * 
     * do { getdata(8, 0, "電子信箱:", cuser.email, sizeof(cuser->email),
     * DOECHO); if(!cuser.email[0]) sprintf(cuser->email, "%s%s",
     * cuser.userid, str_mail_address); } while(!strchr(cuser->email, '@'));
     * 
     * } */
    if (!HAS_PERM(PERM_SYSOP)) {
    /* 回覆過身份認證信函,或曾經 E-mail post 過 */
    clear();
    move(9, 3);
    outs("請詳填寫\033[32m註冊申請單\033[m,"
           "通告站長以獲得進階使用權力。\n\n\n\n");
    u_register();

#ifdef NEWUSER_LIMIT
    if (cuser.lastlogin - cuser->firstlogin < 3 * 86400)
        cuser.userlevel &= ~PERM_POST;
    more("etc/newuser", YEA);
#endif
    }
}