Panel/modules/util/addadmin_helper.php

<?php
/*
 *
 * OGP - Open Game Panel
 * Copyright (C) 2008 - 2018 The OGP Development Team
 *
 * http://www.opengamepanel.org/
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License
 * as published by the Free Software Foundation; either version 2
 * of the License, or any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
 *
 */
require 'includes/lib_remote.php';
function exec_ogp_module() 
{
	global $db;
	include 'modules/util/functions.php';
	include 'modules/util/util_config.php';
	$servers = getUserServers($db->getIpPortsForUser($_SESSION['user_id']), $subuserAdminManagement, $supportedGames);
	
	// If it's a post request and the user is signed in - process it.
	// Otherwise, remove some sensitive info (such as encryption_key) from $servers - only keeping what the user needs to see and json_encode it for JS to process.
	if($_SERVER['REQUEST_METHOD'] === 'POST'){
		$serverInfo = array();
		$flags = '';
		$sourcemodFlags = range('a', 't');
		$immunityRange = range(1, 99);
		
		// Don't use isset here because they're always going to be set if the form is submitted - we only want to process the data if the following isn't empty.
		if(!empty($_POST['gameserver_id']) && !empty($_POST['remote_server_id']) && !empty($_POST['gameserver_name'])
		&& !empty($_POST['gameserver_ip']) && !empty($_POST['gameserver_port']) && !empty($_POST['addSteamid']) && !empty($_POST['sourcemod_perms'])){
				
			foreach ((array)$servers as $server){
				// Try to check if hidden form values have been manually edited. If not, process.
				if($server['remote_server_id'] == $_POST['remote_server_id'] && $server['home_id'] == $_POST['gameserver_id']
				&& $server['game_name'] == $_POST['gameserver_name'] && $server['ip'] == $_POST['gameserver_ip'] && $server['port'] == $_POST['gameserver_port']){	
					$serverInfo = $server;
				}
			}
			
			if(!empty($serverInfo)){
				$remote = new OGPRemoteLibrary($serverInfo['agent_ip'], $serverInfo['agent_port'], $serverInfo['encryption_key'], $serverInfo['timeout']);
				
				if($remote->status_chk() === 1){
					if(preg_match('/^STEAM_[01]:[01]:\d+$/', $_POST['addSteamid'])){
						$immunity = (!empty($_POST['immunity']) && in_array($_POST['immunity'], $immunityRange)) ? $_POST['immunity'] : '';
						
						if($_POST['sourcemod_perms'] == 'root'){
							$flags = 'z';
						}elseif($_POST['sourcemod_perms'] == 'custom'){
							if(!empty($_POST['flags']) && is_array($_POST['flags'])){
								$x = array_intersect(array_values($_POST['flags']), $sourcemodFlags);
								$flags = implode('', ($x));
							}
						}
						
						if(!empty($flags)){
							$adminFile = $serverInfo['home_path'].'/'.$serverInfo['mod_key'].'/'.$adminFiles['sourcemod'];
							// Build up what the new line will be.
							$newLine = "\"{$_POST['addSteamid']}\"\t\"".(!empty($immunity) ? $immunity.':' : '').$flags."\"";
							
							// Only process if the $adminFile exists;
							if($remote->rfile_exists($adminFile) === 1){
								$remote->remote_readfile($adminFile, $file_content);
								
								// Decide if it's replacing an existing line or is a new line.
								if(preg_match('/'.$_POST['addSteamid'].'/i', $file_content)){
									$file_content = preg_replace('/.*'.$_POST['addSteamid'].'.*/i', $newLine, $file_content);
								}else{
									$file_content .= $newLine."\r\n";
								}
								
								if($remote->remote_writefile($adminFile, $file_content) === 1){
									if(!empty($serverInfo['control_password'])){
										$reloadAdmins = $remote->remote_send_rcon_command($serverInfo['home_id'], $serverInfo['ip'], $serverInfo['port'], 'rcon2', $serverInfo['control_password'], '', 'sm_reloadadmins', $return);
										
										if($reloadAdmins === -1){
											echo get_lang('rcon_reload_admins_failed');
										}elseif($reloadAdmins === 1){
											if(preg_match('/Admin cache has been refreshed/i', $return)){
												echo get_lang_f('reload_admins_success', $_POST['addSteamid']);
											}else{
												echo get_lang('reload_admins_failed');
											}
										}
									}else{
										// No rcon password stored - can't reload admins
										echo get_lang_f('add_success_no_rcon', $_POST['addSteamid']);
									}
								}else{
									// There was a problem writing to the admin file.
									echo get_lang_f('writefile_error', $adminFile);
								}
							}else{
								// The remote admin file doesn't exist.
								echo get_lang_f('remotefile_nonexistent', $adminFiles['sourcemod']);
							}
						}else{
							// There wasn't any flags specified.
							echo get_lang('empty_flag_list');
						}
					}else{
						// invalid steam_id format given.
						echo get_lang('invalid_steam_format');
					}
				}else{
					// Agent is offline. We can't add any admins here.
					echo get_lang('selected_server_offline');
				}
			}else{
				// the hidden input values don't exist in our servers array. however, they should exist.
				// if we're here: 1) the hidden variables have either been manually changed, or 2) the user was removed from accessing the selected server while still on the page.
				echo get_lang('malformed_form');
			}
		}else{
			// An empty form was submitted.
			echo get_lang('empty_form_data');
		}
	}else{
		$return = array();
		for($x = 0; $x < count((array)$servers); ++$x){
			$return[] = array(
				'remote_server_id'		=>	$servers[$x]['remote_server_id'],
				'ip'					=>	$servers[$x]['ip'],
				'port'					=>	$servers[$x]['port'],
				'home_id'				=>	$servers[$x]['home_id'],
				'home_name'				=>	$servers[$x]['home_name'],
				'game_name'				=>	$servers[$x]['game_name'],
			);
		}
		
		echo json_encode($return);
	}
}
?>