Panel/modules/util/addadmin_helper.php
2025-09-04 21:42:25 -04:00

146 lines
No EOL
6 KiB
PHP

<?php
/*
*
* OGP - Open Game Panel
* Copyright (C) 2008 - 2018 The OGP Development Team
*
* http://www.opengamepanel.org/
*
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License
* as published by the Free Software Foundation; either version 2
* of the License, or any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
*
*/
require 'includes/lib_remote.php';
function exec_ogp_module()
{
global $db;
include 'modules/util/functions.php';
include 'modules/util/util_config.php';
$servers = getUserServers($db->getIpPortsForUser($_SESSION['user_id']), $subuserAdminManagement, $supportedGames);
// If it's a post request and the user is signed in - process it.
// Otherwise, remove some sensitive info (such as encryption_key) from $servers - only keeping what the user needs to see and json_encode it for JS to process.
if($_SERVER['REQUEST_METHOD'] === 'POST'){
$serverInfo = array();
$flags = '';
$sourcemodFlags = range('a', 't');
$immunityRange = range(1, 99);
// Don't use isset here because they're always going to be set if the form is submitted - we only want to process the data if the following isn't empty.
if(!empty($_POST['gameserver_id']) && !empty($_POST['remote_server_id']) && !empty($_POST['gameserver_name'])
&& !empty($_POST['gameserver_ip']) && !empty($_POST['gameserver_port']) && !empty($_POST['addSteamid']) && !empty($_POST['sourcemod_perms'])){
foreach($servers as $server){
// Try to check if hidden form values have been manually edited. If not, process.
if($server['remote_server_id'] == $_POST['remote_server_id'] && $server['home_id'] == $_POST['gameserver_id']
&& $server['game_name'] == $_POST['gameserver_name'] && $server['ip'] == $_POST['gameserver_ip'] && $server['port'] == $_POST['gameserver_port']){
$serverInfo = $server;
}
}
if(!empty($serverInfo)){
$remote = new OGPRemoteLibrary($serverInfo['agent_ip'], $serverInfo['agent_port'], $serverInfo['encryption_key'], $serverInfo['timeout']);
if($remote->status_chk() === 1){
if(preg_match('/^STEAM_[01]:[01]:\d+$/', $_POST['addSteamid'])){
$immunity = (!empty($_POST['immunity']) && in_array($_POST['immunity'], $immunityRange)) ? $_POST['immunity'] : '';
if($_POST['sourcemod_perms'] == 'root'){
$flags = 'z';
}elseif($_POST['sourcemod_perms'] == 'custom'){
if(!empty($_POST['flags']) && is_array($_POST['flags'])){
$x = array_intersect(array_values($_POST['flags']), $sourcemodFlags);
$flags = implode('', ($x));
}
}
if(!empty($flags)){
$adminFile = $serverInfo['home_path'].'/'.$serverInfo['mod_key'].'/'.$adminFiles['sourcemod'];
// Build up what the new line will be.
$newLine = "\"{$_POST['addSteamid']}\"\t\"".(!empty($immunity) ? $immunity.':' : '').$flags."\"";
// Only process if the $adminFile exists;
if($remote->rfile_exists($adminFile) === 1){
$remote->remote_readfile($adminFile, $file_content);
// Decide if it's replacing an existing line or is a new line.
if(preg_match('/'.$_POST['addSteamid'].'/i', $file_content)){
$file_content = preg_replace('/.*'.$_POST['addSteamid'].'.*/i', $newLine, $file_content);
}else{
$file_content .= $newLine."\r\n";
}
if($remote->remote_writefile($adminFile, $file_content) === 1){
if(!empty($serverInfo['control_password'])){
$reloadAdmins = $remote->remote_send_rcon_command($serverInfo['home_id'], $serverInfo['ip'], $serverInfo['port'], 'rcon2', $serverInfo['control_password'], '', 'sm_reloadadmins', $return);
if($reloadAdmins === -1){
echo get_lang('rcon_reload_admins_failed');
}elseif($reloadAdmins === 1){
if(preg_match('/Admin cache has been refreshed/i', $return)){
echo get_lang_f('reload_admins_success', $_POST['addSteamid']);
}else{
echo get_lang('reload_admins_failed');
}
}
}else{
// No rcon password stored - can't reload admins
echo get_lang_f('add_success_no_rcon', $_POST['addSteamid']);
}
}else{
// There was a problem writing to the admin file.
echo get_lang_f('writefile_error', $adminFile);
}
}else{
// The remote admin file doesn't exist.
echo get_lang_f('remotefile_nonexistent', $adminFiles['sourcemod']);
}
}else{
// There wasn't any flags specified.
echo get_lang('empty_flag_list');
}
}else{
// invalid steam_id format given.
echo get_lang('invalid_steam_format');
}
}else{
// Agent is offline. We can't add any admins here.
echo get_lang('selected_server_offline');
}
}else{
// the hidden input values don't exist in our servers array. however, they should exist.
// if we're here: 1) the hidden variables have either been manually changed, or 2) the user was removed from accessing the selected server while still on the page.
echo get_lang('malformed_form');
}
}else{
// An empty form was submitted.
echo get_lang('empty_form_data');
}
}else{
$return = array();
for($x = 0; $x < count($servers); ++$x){
$return[] = array(
'remote_server_id' => $servers[$x]['remote_server_id'],
'ip' => $servers[$x]['ip'],
'port' => $servers[$x]['port'],
'home_id' => $servers[$x]['home_id'],
'home_name' => $servers[$x]['home_name'],
'game_name' => $servers[$x]['game_name'],
);
}
echo json_encode($return);
}
}
?>