| 14 |
* * |
* * |
| 15 |
***************************************************************************/ |
***************************************************************************/ |
| 16 |
|
|
|
#include "user_priv.h" |
|
| 17 |
#include "bbs.h" |
#include "bbs.h" |
| 18 |
#include "common.h" |
#include "common.h" |
| 19 |
#include "database.h" |
#include "database.h" |
| 20 |
#include "log.h" |
#include "log.h" |
| 21 |
|
#include "user_priv.h" |
| 22 |
#include <stdio.h> |
#include <stdio.h> |
|
#include <mysql.h> |
|
| 23 |
#include <stdlib.h> |
#include <stdlib.h> |
| 24 |
|
#include <mysql/mysql.h> |
| 25 |
|
|
| 26 |
BBS_user_priv BBS_priv; |
BBS_user_priv BBS_priv; |
| 27 |
|
|
| 28 |
int setpriv(BBS_user_priv *p_priv, int sid, int priv) |
inline static int search_priv(BBS_user_priv *p_priv, int sid, int *p_offset) |
| 29 |
{ |
{ |
| 30 |
int left = 0; |
int left = 0; |
| 31 |
int right = p_priv->s_count - 1; |
int right = p_priv->s_count - 1; |
| 32 |
int mid; |
int mid = 0; |
|
|
|
|
if (sid == 0) |
|
|
{ |
|
|
p_priv->g_priv = priv; |
|
|
return 0; |
|
|
} |
|
| 33 |
|
|
| 34 |
while (left < right) |
while (left < right) |
| 35 |
{ |
{ |
| 36 |
mid = (left + right) / 2; |
mid = (left + right) / 2; |
| 37 |
|
|
| 38 |
if (sid <= p_priv->s_priv_list[mid].sid) |
if (sid < p_priv->s_priv_list[mid].sid) |
| 39 |
{ |
{ |
| 40 |
right = mid; |
right = mid - 1; |
| 41 |
} |
} |
| 42 |
else |
else if (sid > p_priv->s_priv_list[mid].sid) |
| 43 |
{ |
{ |
| 44 |
left = mid + 1; |
left = mid + 1; |
| 45 |
} |
} |
| 46 |
|
else // if (sid == p_priv->s_priv_list[mid].sid) |
| 47 |
|
{ |
| 48 |
|
left = mid; |
| 49 |
|
break; |
| 50 |
|
} |
| 51 |
|
} |
| 52 |
|
|
| 53 |
|
*p_offset = left; |
| 54 |
|
|
| 55 |
|
return (sid == p_priv->s_priv_list[left].sid); |
| 56 |
|
} |
| 57 |
|
|
| 58 |
|
int setpriv(BBS_user_priv *p_priv, int sid, int priv, int is_favor) |
| 59 |
|
{ |
| 60 |
|
int offset; |
| 61 |
|
int i; |
| 62 |
|
|
| 63 |
|
if (sid == 0) |
| 64 |
|
{ |
| 65 |
|
p_priv->g_priv = priv; |
| 66 |
|
return 0; |
| 67 |
} |
} |
| 68 |
|
|
| 69 |
if (sid == p_priv->s_priv_list[left].sid) // found |
if (search_priv(p_priv, sid, &offset)) //found |
| 70 |
{ |
{ |
| 71 |
p_priv->s_priv_list[left].s_priv = priv; |
p_priv->s_priv_list[offset].s_priv = priv; |
| 72 |
|
p_priv->s_priv_list[offset].is_favor = is_favor; |
| 73 |
return 0; |
return 0; |
| 74 |
} |
} |
| 75 |
|
|
| 80 |
} |
} |
| 81 |
|
|
| 82 |
// move items at [left, p_priv->s_count - 1] to [left + 1, p_priv->s_count] |
// move items at [left, p_priv->s_count - 1] to [left + 1, p_priv->s_count] |
| 83 |
for (right = p_priv->s_count - 1; right >= left; right--) |
for (i = p_priv->s_count - 1; i >= offset; i--) |
| 84 |
{ |
{ |
| 85 |
p_priv->s_priv_list[right + 1] = p_priv->s_priv_list[right]; |
p_priv->s_priv_list[i + 1] = p_priv->s_priv_list[i]; |
| 86 |
} |
} |
| 87 |
|
p_priv->s_count++; |
| 88 |
|
|
| 89 |
// insert new item at offset left |
// insert new item at offset left |
| 90 |
p_priv->s_priv_list[left].s_priv = priv; |
p_priv->s_priv_list[offset].sid = sid; |
| 91 |
|
p_priv->s_priv_list[offset].s_priv = priv; |
| 92 |
|
p_priv->s_priv_list[offset].is_favor = is_favor; |
| 93 |
|
|
| 94 |
return 0; |
return 0; |
| 95 |
} |
} |
| 96 |
|
|
| 97 |
int getpriv(BBS_user_priv *p_priv, int sid) |
int getpriv(BBS_user_priv *p_priv, int sid, int *p_is_favor) |
| 98 |
{ |
{ |
| 99 |
int left = 0; |
int offset; |
|
int right = p_priv->s_count - 1; |
|
|
int mid; |
|
| 100 |
|
|
| 101 |
while (left < right) |
if (search_priv(p_priv, sid, &offset)) //found |
| 102 |
{ |
{ |
| 103 |
mid = (left + right) / 2; |
*p_is_favor = p_priv->s_priv_list[offset].is_favor; |
| 104 |
|
return p_priv->s_priv_list[offset].s_priv; |
|
if (sid <= p_priv->s_priv_list[mid].sid) |
|
|
{ |
|
|
right = mid; |
|
|
} |
|
|
else |
|
|
{ |
|
|
left = mid + 1; |
|
|
} |
|
|
} |
|
|
|
|
|
if (sid == p_priv->s_priv_list[left].sid) // found |
|
|
{ |
|
|
return p_priv->s_priv_list[left].s_priv; |
|
| 105 |
} |
} |
| 106 |
|
|
| 107 |
|
*p_is_favor = 0; |
| 108 |
return (sid >= 0 ? p_priv->g_priv : S_NONE); |
return (sid >= 0 ? p_priv->g_priv : S_NONE); |
| 109 |
} |
} |
| 110 |
|
|
| 111 |
int load_priv(MYSQL *db, BBS_user_priv *p_priv, long int uid) |
int load_priv(MYSQL *db, BBS_user_priv *p_priv, int uid) |
| 112 |
{ |
{ |
| 113 |
MYSQL_RES *rs; |
MYSQL_RES *rs; |
| 114 |
MYSQL_ROW row; |
MYSQL_ROW row; |
| 115 |
char sql[SQL_BUFFER_LEN]; |
char sql[SQL_BUFFER_LEN]; |
| 116 |
|
int priv; |
| 117 |
|
int is_favor; |
| 118 |
|
|
| 119 |
p_priv->uid = uid; |
p_priv->uid = uid; |
| 120 |
p_priv->level = (uid == 0 ? P_GUEST : P_USER); |
p_priv->level = (uid == 0 ? P_GUEST : P_USER); |
| 125 |
return 1; |
return 1; |
| 126 |
|
|
| 127 |
// Permission |
// Permission |
| 128 |
snprintf(sql, sizeof(sql), "SELECT p_post, p_msg FROM user_list WHERE UID = %ld AND verified", |
snprintf(sql, sizeof(sql), |
| 129 |
|
"SELECT p_post, p_msg FROM user_list WHERE UID = %d AND verified", |
| 130 |
uid); |
uid); |
| 131 |
if (mysql_query(db, sql) != 0) |
if (mysql_query(db, sql) != 0) |
| 132 |
{ |
{ |
| 146 |
mysql_free_result(rs); |
mysql_free_result(rs); |
| 147 |
|
|
| 148 |
// Admin |
// Admin |
| 149 |
snprintf(sql, sizeof(sql), "SELECT major FROM admin_config WHERE UID = %ld " |
snprintf(sql, sizeof(sql), |
| 150 |
"AND enable AND (NOW() BETWEEN begin_dt AND end_dt)", |
"SELECT major FROM admin_config WHERE UID = %d " |
| 151 |
|
"AND enable AND (NOW() BETWEEN begin_dt AND end_dt)", |
| 152 |
uid); |
uid); |
| 153 |
if (mysql_query(db, sql) != 0) |
if (mysql_query(db, sql) != 0) |
| 154 |
{ |
{ |
| 168 |
mysql_free_result(rs); |
mysql_free_result(rs); |
| 169 |
|
|
| 170 |
// Section Master |
// Section Master |
| 171 |
snprintf(sql, sizeof(sql), "SELECT section_master.SID, major FROM section_master " |
snprintf(sql, sizeof(sql), |
| 172 |
"INNER JOIN section_config ON section_master.SID = section_config.SID " |
"SELECT section_master.SID, major FROM section_master " |
| 173 |
"WHERE UID = %ld AND section_master.enable AND section_config.enable " |
"INNER JOIN section_config ON section_master.SID = section_config.SID " |
| 174 |
"AND (NOW() BETWEEN begin_dt AND end_dt)", |
"WHERE UID = %d AND section_master.enable AND section_config.enable " |
| 175 |
|
"AND (NOW() BETWEEN begin_dt AND end_dt)", |
| 176 |
uid); |
uid); |
| 177 |
if (mysql_query(db, sql) != 0) |
if (mysql_query(db, sql) != 0) |
| 178 |
{ |
{ |
| 187 |
while ((row = mysql_fetch_row(rs))) |
while ((row = mysql_fetch_row(rs))) |
| 188 |
{ |
{ |
| 189 |
p_priv->level |= (atoi(row[1]) ? P_MAN_M : P_MAN_S); |
p_priv->level |= (atoi(row[1]) ? P_MAN_M : P_MAN_S); |
| 190 |
setpriv(p_priv, atoi(row[0]), getpriv(p_priv, atoi(row[0])) | (atoi(row[1]) ? S_MAN_M : S_MAN_S)); |
priv = (getpriv(p_priv, atoi(row[0]), &is_favor) | (atoi(row[1]) ? S_MAN_M : S_MAN_S)); |
| 191 |
|
setpriv(p_priv, atoi(row[0]), priv, is_favor); |
| 192 |
} |
} |
| 193 |
mysql_free_result(rs); |
mysql_free_result(rs); |
| 194 |
|
|
| 195 |
// Section status |
// Section status |
| 196 |
snprintf(sql, sizeof(sql), "SELECT SID, exp_get, read_user_level, write_user_level FROM section_config " |
snprintf(sql, sizeof(sql), |
| 197 |
"INNER JOIN section_class ON section_config.CID = section_class.CID " |
"SELECT SID, exp_get, read_user_level, write_user_level FROM section_config " |
| 198 |
"WHERE section_config.enable AND section_class.enable " |
"INNER JOIN section_class ON section_config.CID = section_class.CID " |
| 199 |
"ORDER BY SID"); |
"WHERE section_config.enable AND section_class.enable " |
| 200 |
|
"ORDER BY SID"); |
| 201 |
if (mysql_query(db, sql) != 0) |
if (mysql_query(db, sql) != 0) |
| 202 |
{ |
{ |
| 203 |
log_error("Query section_config error: %s\n", mysql_error(db)); |
log_error("Query section_config error: %s\n", mysql_error(db)); |
| 210 |
} |
} |
| 211 |
while ((row = mysql_fetch_row(rs))) |
while ((row = mysql_fetch_row(rs))) |
| 212 |
{ |
{ |
| 213 |
int priv = getpriv(p_priv, atoi(row[0])); |
int priv = getpriv(p_priv, atoi(row[0]), &is_favor); |
| 214 |
if (p_priv->level < atoi(row[2])) |
if (p_priv->level < atoi(row[2])) |
| 215 |
{ |
{ |
| 216 |
priv &= (~S_LIST); |
priv &= (~S_LIST); |
| 223 |
{ |
{ |
| 224 |
priv &= (~S_GETEXP); |
priv &= (~S_GETEXP); |
| 225 |
} |
} |
| 226 |
setpriv(p_priv, atoi(row[0]), priv); |
setpriv(p_priv, atoi(row[0]), priv, is_favor); |
| 227 |
} |
} |
| 228 |
mysql_free_result(rs); |
mysql_free_result(rs); |
| 229 |
|
|
| 230 |
// Section ban |
// Section ban |
| 231 |
snprintf(sql, sizeof(sql), "SELECT SID FROM ban_user_list WHERE UID = %ld AND enable " |
snprintf(sql, sizeof(sql), |
| 232 |
"AND (NOW() BETWEEN ban_dt AND unban_dt)", |
"SELECT SID FROM ban_user_list WHERE UID = %d AND enable " |
| 233 |
|
"AND (NOW() BETWEEN ban_dt AND unban_dt)", |
| 234 |
uid); |
uid); |
| 235 |
if (mysql_query(db, sql) != 0) |
if (mysql_query(db, sql) != 0) |
| 236 |
{ |
{ |
| 244 |
} |
} |
| 245 |
while ((row = mysql_fetch_row(rs))) |
while ((row = mysql_fetch_row(rs))) |
| 246 |
{ |
{ |
| 247 |
setpriv(p_priv, atoi(row[0]), |
priv = getpriv(p_priv, atoi(row[0]), &is_favor) & (~S_POST); |
| 248 |
getpriv(p_priv, atoi(row[0])) & (~S_POST)); |
setpriv(p_priv, atoi(row[0]), priv, is_favor); |
| 249 |
|
} |
| 250 |
|
mysql_free_result(rs); |
| 251 |
|
|
| 252 |
|
// User favor section |
| 253 |
|
snprintf(sql, sizeof(sql), |
| 254 |
|
"SELECT SID FROM section_favorite WHERE UID = %d", |
| 255 |
|
uid); |
| 256 |
|
if (mysql_query(db, sql) != 0) |
| 257 |
|
{ |
| 258 |
|
log_error("Query section_favorite error: %s\n", mysql_error(db)); |
| 259 |
|
return -1; |
| 260 |
|
} |
| 261 |
|
if ((rs = mysql_store_result(db)) == NULL) |
| 262 |
|
{ |
| 263 |
|
log_error("Get section_favorite data failed\n"); |
| 264 |
|
return -1; |
| 265 |
|
} |
| 266 |
|
while ((row = mysql_fetch_row(rs))) |
| 267 |
|
{ |
| 268 |
|
priv = getpriv(p_priv, atoi(row[0]), &is_favor); |
| 269 |
|
if (!is_favor) |
| 270 |
|
{ |
| 271 |
|
setpriv(p_priv, atoi(row[0]), priv, 1); |
| 272 |
|
priv = getpriv(p_priv, atoi(row[0]), &is_favor); |
| 273 |
|
} |
| 274 |
} |
} |
| 275 |
mysql_free_result(rs); |
mysql_free_result(rs); |
| 276 |
|
|