open dir for 1.5.2. I still must split devel and master in different branches to properly use git...

1 files changed, 327 insertions, 0 deletions

diff --git a/boca-1.5.2/src/globals.php b/boca-1.5.2/src/globals.php
new file mode 100644
index 0000000..fc83e11
--- /dev/null
+++ b/boca-1.5.2/src/globals.php
@@ -0,0 +1,327 @@
+<?php
+////////////////////////////////////////////////////////////////////////////////
+//BOCA Online Contest Administrator
+//    Copyright (C) 2003-2012 by BOCA Development Team (bocasystem@gmail.com)
+//
+//    This program is free software: you can redistribute it and/or modify
+//    it under the terms of the GNU General Public License as published by
+//    the Free Software Foundation, either version 3 of the License, or
+//    (at your option) any later version.
+//
+//    This program is distributed in the hope that it will be useful,
+//    but WITHOUT ANY WARRANTY; without even the implied warranty of
+//    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+//    GNU General Public License for more details.
+//    You should have received a copy of the GNU General Public License
+//    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+////////////////////////////////////////////////////////////////////////////////
+// Last modified 21/jul/2012 by cassio@ime.usp.br
+require_once('db.php');
+define("dbcompat_1_4_1",true);
+
+// sanitization 
+function sanitizeVariables(&$item, $key) 
+{ 
+    if (!is_array($item)) 
+    { 
+        // undoing 'magic_quotes_gpc = On' directive 
+        if (get_magic_quotes_gpc()) 
+            $item = stripcslashes($item); 
+        
+        $item = sanitizeText($item); 
+    } 
+} 
+
+function filedownload($oid,$fname,$msg='') {
+	$cf = globalconf();
+	$if = rawurlencode(encryptData($fname, session_id() . $cf['key'],false));
+	$p = myhash($oid . $fname . $msg . session_id() . $cf["key"]);
+	$str = "oid=". $oid . "&filename=". $if . "&check=" . $p;
+	if($msg != '') $str .= "&msg=" . rawurlencode($msg);
+	return $str;
+}
+
+function cleardir($dir,$cddir=true,$secure=false) {
+	if(is_dir($dir)) {
+		$ds = DIRECTORY_SEPARATOR;
+		if($ds=="") $ds = "/";
+		if($cddir) {
+			@chdir($dir);
+			@chdir('..');
+		}
+		$d = @opendir($dir);
+		while (($file = @readdir($d)) !== false) {
+			if(!is_dir($dir . $ds . $file)) {
+				if($secure)
+					file_put_contents($dir . $ds . $file,str_repeat('XXXXXXXXXX',10000));
+				@unlink($dir . $ds . $file);
+			}
+			else {
+				if($file != '.' && $file != '..') {
+					$cdir1 = $dir . $ds . $file;
+					$d1 = @opendir($cdir1);
+					while (($file1 = @readdir($d1)) !== false)
+						if(!is_dir($cdir1 . $ds . $file1)) {
+							if($secure)
+								file_put_contents($cdir1 . $ds . $file1,str_repeat('XXXXXXXXXX',10000));
+							@unlink($cdir1 . $ds . $file1);
+						}
+					@rmdir($cdir1);
+				}
+			}
+		}
+		@rmdir($dir);
+	} else {
+		if($secure)
+			file_put_contents($dir,str_repeat('XXXXXXXXXX',10000));
+		@unlink($dir);
+	}
+}
+
+// gen random alphanum string
+function randstr($len=8,$from='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789') {
+	$str='';
+	$fromlen=strlen($from);
+	while($len > 0) {
+		$str .= substr($from,rand(0,$fromlen-1),1);
+		$len--;
+	}
+	return $str;
+}
+
+function myhtmlspecialchars($text) {
+	return sanitizeText($text,false);
+}
+
+// does the actual 'html' and 'sql' sanitization.
+function sanitizeText($text, $doamp=true) 
+{
+	if($doamp)
+		$text = str_replace("&", "&amp;", $text);
+    $text = str_replace("<", "&lt;", $text);
+    $text = str_replace(">", "&gt;", $text); 
+    $text = str_replace("\"", "&quot;", $text); 
+    $text = str_replace("'", "&#39;", $text);
+    $text = str_replace("`", "&#96;", $text);
+    //$text = escape_string($text); 
+    $text = addslashes($text); 
+    return $text; 
+}
+
+array_walk_recursive($_FILES, 'sanitizeVariables'); 
+array_walk_recursive($_POST, 'sanitizeVariables'); 
+array_walk_recursive($_GET, 'sanitizeVariables'); 
+array_walk_recursive($_COOKIE, 'sanitizeVariables'); 
+
+//name of calling function
+function getFunctionName($num=2) {
+        if(strcmp(phpversion(),'5.3.6')<0) {
+                $backtrace = debug_backtrace();
+        } else {
+                if(strcmp(phpversion(),'5.4.0')<0)
+                        $backtrace = debug_backtrace(DEBUG_BACKTRACE_PROVIDE_OBJECT);
+                else
+                        $backtrace = debug_backtrace(DEBUG_BACKTRACE_PROVIDE_OBJECT,$num+5);
+        }
+        $ret = '';
+        for($i=0; $i<$num; $i++)
+                if(isset($backtrace[$i]) && isset($backtrace[$i]['function']))
+                        $ret .= " " . $backtrace[$i]['function'];
+        if($ret =='') $ret='undef';
+        return $ret;
+}
+
+function getIP() {
+	if (getenv("REMOTE_ADDR"))
+		$ip = getenv("REMOTE_ADDR");
+	else
+		return "UNKNOWN";
+	if(defined("dbcompat_1_4_1") && dbcompat_1_4_1==true) return $ip;
+
+	$ip1='';
+	if (getenv("HTTP_X_FORWARDED_FOR")) {
+		$ip1 = getenv("HTTP_X_FORWARDED_FOR");
+		$ip1 = strtok ($ip1, ",");
+		if($ip1 != $ip) $ip .= ';' . $ip1;
+	}
+	if (getenv("HTTP_X_CLIENTIP")) {
+		$ip1a = getenv("HTTP_X_CLIENTIP");
+		$ip1a = strtok ($ip1a, ",");
+		if($ip1a != $ip1 && $ip1a != getenv("REMOTE_ADDR")) $ip .= ';' . $ip1a;
+	}
+	if (getenv("HTTP_CLIENT_IP")) {
+		$ip2 = getenv("HTTP_CLIENT_IP");
+		$ip2 = strtok ($ip2, ",");
+		if($ip2 != $ip1a && $ip1 != $ip2 && $ip2 != getenv("REMOTE_ADDR")) $ip .= ';' . $ip2;
+	} else {
+		if (getenv('HTTP_X_FORWARDED')) {
+			$ip .= ';' . getenv('HTTP_X_FORWARDED');
+		} else {
+			if (getenv('HTTP_FORWARDED')) {
+				$ip .= ';' . getenv('HTTP_FORWARDED');
+			}
+		}
+	}
+	return sanitizeText($ip);
+}
+//retorna ip e hostname do cliente
+function getIPHost() {
+	$ips = explode(';',getIP());
+	$s='';
+	for($ipn=0;$ipn<count($ips);$ipn++) {
+		$ip = $ips[$ipn];
+		$host = @gethostbyaddr($ip);
+		if ($host != $ip && $host != "")
+			$s .= $ip . "(" . $host . ") ";
+		else
+			$s .= $ip . ' ';
+	}
+	return $s;
+}
+//trata o caso de sessao invalida
+function InvalidSession($where) {
+	$msg = "Session expired on $where";
+	LOGLevel($msg,3);
+	unset($_SESSION["usertable"]);
+	MSGError("Session expired. You must log in again.");
+}
+//trata o caso de tentativa de burlar as regras
+function IntrusionNotify($where) {
+	$msg = "Security Violation: $where";
+	if (isset($_SESSION["usertable"]["username"]))
+		$msg .= " (" . $_SESSION["usertable"]["username"] . "/" . $_SESSION["usertable"]["usersitenumber"] .")";
+	unset($_SESSION["usertable"]);
+	LOGLevel($msg,1);
+	MSGError("Violation ($where). Admin warned.");
+}
+// verifica se a sessao esta aberta e ok
+function ValidSession() {
+	if (!isset($_SESSION["usertable"])) return(FALSE);
+	$_SESSION["usertable"] = DBUserInfo($_SESSION["usertable"]["contestnumber"], 
+										$_SESSION["usertable"]["usersitenumber"], 
+										$_SESSION["usertable"]["usernumber"]);
+	if ($_SESSION["usertable"]["usersession"] != session_id() &&
+	    ($_SESSION["usertable"]["usermultilogin"] != 't' || 
+ 	     $_SESSION["usertable"]["usertype"] != 'score'))
+		return(FALSE);
+	return(TRUE);
+}
+// grava erro no arquivo de log
+function LOGError($msg) {
+	LOGLevel($msg,0);
+}
+// grava linha no arquivo de log com o nivel especificado
+function LOGLevel($msg,$level) {
+	$msga = sanitizeText(str_replace("\n", " ", $msg));
+	$msg = now() . ": ";
+	define_syslog_variables ();
+	$prior = LOG_CRIT;
+	switch ($level) {
+		case 0: $msg .= "ERROR: ";
+			$type = "error";
+			$prior = LOG_ERR;
+			break;
+		case 1: $msg .= "WARN: ";
+			$type = "warn";
+			$prior = LOG_WARNING;
+			break;
+		case 2: $msg .= "INFO: ";
+			$type = "info";
+			$prior = LOG_INFO;
+			break;
+		case 3: $msg .= "DEBUG: ";
+			$type = "debug";
+			$prior = LOG_DEBUG;
+			break;
+	}
+	$msg .= getIPHost() . ": " . $msga;
+
+	openlog ("BOCA", LOG_ODELAY, LOG_USER);	
+	syslog ($prior, $msg);
+	closelog();
+	if (isset($_SESSION["usertable"]))
+		DBNewLog($_SESSION["usertable"]["contestnumber"], $_SESSION["usertable"]["usersitenumber"], 
+				 $_SESSION["usertable"]["usernumber"], $type, getIP(), $msga, "");
+}
+//retorna data e hora atuais
+function now () {
+	return date('H\:i:s T \- d/M/Y');
+}
+//retorna data e hora em seg convertida para padrao
+function dateconv ($d) {
+	return date('H\:i:s T \- d/M/Y', $d);
+}
+//retorna data e hora em seg convertida para padrao simples
+function dateconvsimple ($d) {
+	return date('H\:i', $d);
+}
+//transforma segundos para minutos
+function dateconvminutes ($d) {
+	return (int)($d/60);
+}
+//alerta mensagem via javascript
+function MSGError($msg) {
+	$msg = str_replace("\n", " ", $msg);
+        echo "<script language=\"JavaScript\">\n";
+        echo "alert('". $msg . "');\n";
+        echo "</script>\n";
+}
+//gera script para voltar aa tela dada
+function ForceLoad($where) {
+        echo "<script language=\"JavaScript\">\n";
+	echo "document.location='" . $where . "';\n";
+	echo "</script></html>\n";
+	exit;
+}
+function ForceClose() {
+        echo "<script language=\"JavaScript\">\n";
+	echo "window.close;\n";
+	echo "</script></html>\n";
+	exit;
+}
+
+/**
+ * Compare an IP address to network(s)
+ *
+ * The network(s) argument may be a string or an array. A negative network
+ * match must start with a "!". Depending on the 3rd parameter, it will
+ * return true or false on the first match, or any negative rule will have
+ * absolute priority (default).
+ *
+ * Samples:
+ * match_network ("192.168.1.0/24", "192.168.1.1") -> true
+ *
+ * match_network (array ("192.168.1.0/24",  "!192.168.1.1"), "192.168.1.1")       -> false
+ * match_network (array ("192.168.1.0/24",  "!192.168.1.1"), "192.168.1.1", true) -> true
+ * match_network (array ("!192.168.1.0/24", "192.168.1.1"),  "192.168.1.1")       -> false
+ * match_network (array ("!192.168.1.0/24", "192.168.1.1"),  "192.168.1.1", true) -> false
+ *
+ * @param mixed  Network to match
+ * @param string IP address
+ * @param bool   true: first match will return / false: priority to negative rules (default)
+ * @see http://php.benscom.com/manual/en/function.ip2long.php#56373
+ */
+function match_network ($nets, $ip) {
+    if (!is_array ($nets)) $nets = explode(",",$nets);
+   
+    foreach ($nets as $net) {
+	$net = trim($net);
+        $rev = (preg_match ("/^\!/", $net)) ? true : false;
+        $net = preg_replace ("/^\!/", "", $net);
+
+        $ip_arr   = explode('/', $net);
+        $net_long = ip2long(trim($ip_arr[0]));
+        $x        = ip2long(trim($ip_arr[1]));
+        $mask     = long2ip($x) == ((int) trim($ip_arr[1])) ? $x : 0xffffffff << (32 - ((int) trim($ip_arr[1])));
+        $ip_long  = ip2long($ip);
+       
+        if ($rev) {
+            if (($ip_long & $mask) != ($net_long & $mask)) return true;
+        } else {
+            if (($ip_long & $mask) == ($net_long & $mask)) return true;
+        }
+    }
+    return false;
+}
+// eof
+?>