From 866658cded5b92ddb2681dead1ebaf111d712fcc Mon Sep 17 00:00:00 2001 From: cassiopc Date: Mon, 6 Aug 2012 11:09:10 +0200 Subject: init --- boca-1.5.0/src/system/contest.php | 214 +++++++++++++++++++++++++++++++ boca-1.5.0/src/system/header.php | 63 ++++++++++ boca-1.5.0/src/system/importxml.php | 245 ++++++++++++++++++++++++++++++++++++ boca-1.5.0/src/system/index.php | 22 ++++ boca-1.5.0/src/system/option.php | 21 ++++ 5 files changed, 565 insertions(+) create mode 100644 boca-1.5.0/src/system/contest.php create mode 100644 boca-1.5.0/src/system/header.php create mode 100644 boca-1.5.0/src/system/importxml.php create mode 100644 boca-1.5.0/src/system/index.php create mode 100644 boca-1.5.0/src/system/option.php (limited to 'boca-1.5.0/src/system') diff --git a/boca-1.5.0/src/system/contest.php b/boca-1.5.0/src/system/contest.php new file mode 100644 index 0000000..2d4d788 --- /dev/null +++ b/boca-1.5.0/src/system/contest.php @@ -0,0 +1,214 @@ +. +//////////////////////////////////////////////////////////////////////////////// +// Last modified 05/aug/2012 by cassio@ime.usp.br +//Change list: +// 02/jul/2006 by cassio@ime.usp.br +// 25/aug/2007 by cassio@ime.usp.br: php initial tag changed to complete form + +require 'header.php'; + +if (isset($_GET["new"]) && $_GET["new"]=="1") { + $n = DBNewContest(); + ForceLoad("contest.php?contest=$n"); +} + +if (isset($_GET["contest"]) && is_numeric($_GET["contest"])) + $contest=$_GET["contest"]; +else + $contest=$_SESSION["usertable"]["contestnumber"]; + +if(($ct = DBContestInfo($contest)) == null) + ForceLoad("../index.php"); +if ($ct["contestlocalsite"]==$ct["contestmainsite"]) $main=true; else $main=false; + +if (isset($_POST["Submit3"]) && isset($_POST["penalty"]) && is_numeric($_POST["penalty"]) && + isset($_POST["maxfilesize"]) && isset($_POST["mainsite"]) && isset($_POST['localsite']) && + isset($_POST["name"]) && $_POST["name"] != "" && isset($_POST["lastmileanswer"]) && + is_numeric($_POST["lastmileanswer"]) && is_numeric($_POST["mainsite"]) && is_numeric($_POST['localsite']) && + isset($_POST["lastmilescore"]) && is_numeric($_POST["lastmilescore"]) && isset($_POST["duration"]) && + is_numeric($_POST["duration"]) && + isset($_POST["startdateh"]) && $_POST["startdateh"] >= 0 && $_POST["startdateh"] <= 23 && + isset($_POST["contest"]) && is_numeric($_POST["contest"]) && + isset($_POST["startdatemin"]) && $_POST["startdatemin"] >= 0 && $_POST["startdatemin"] <= 59 && + isset($_POST["startdated"]) && isset($_POST["startdatem"]) && isset($_POST["startdatey"]) && + checkdate($_POST["startdatem"], $_POST["startdated"], $_POST["startdatey"])) { + if ($_POST["confirmation"] == "confirm") { + $t = mktime ($_POST["startdateh"], $_POST["startdatemin"], 0, $_POST["startdatem"], + $_POST["startdated"], $_POST["startdatey"]); + if ($_POST["Submit3"] == "Activate") $ac=1; + else $ac=0; + $param['number']=$_POST["contest"]; + $param['name']=$_POST["name"]; + $param['startdate']=$t; + $param['duration']=$_POST["duration"]*60; + $param['lastmileanswer']=$_POST["lastmileanswer"]*60; + $param['lastmilescore']= $_POST["lastmilescore"]*60; + $param['penalty']=$_POST["penalty"]*60; + $param['maxfilesize']=$_POST["maxfilesize"]*1000; + $param['active']=$ac; + $param['mainsite']=$_POST["mainsite"]; + $param['localsite']=$_POST["localsite"]; + $param['mainsiteurl']=$_POST["mainsiteurl"]; + + DBUpdateContest ($param); + if ($ac == 1 && $_POST["contest"] != $_SESSION["usertable"]["contestnumber"]) { + $cf = globalconf(); + if($cf["basepass"] == "") + MSGError("You must log in the new contest. The standard admin password is empty (if not changed yet)."); + else + MSGError("You must log in the new contest. The standard admin password is " . $cf["basepass"] . " (if not changed yet)."); + + ForceLoad("../index.php"); + } + } + ForceLoad("contest.php?contest=".$_POST["contest"]); +} +?> +
+ +
+ + +

+
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Contest number: + +
Name: + name="name" value="" size="50" maxlength="50" /> +
Start date: hh:mm + name="startdateh" value="" size="2" maxlength="2" /> + : + name="startdatemin" value="" size="2" maxlength="2" /> +     dd/mm/yyyy + name="startdated" value="" size="2" maxlength="2" /> + / + name="startdatem" value="" size="2" maxlength="2" /> + / + name="startdatey" value="" size="4" maxlength="4" /> +
Duration (in minutes): + value="" size="20" maxlength="20" /> +
Stop answering (in minutes): + value="" size="20" maxlength="20" /> +
Stop scoreboard (in minutes): + value="" size="20" maxlength="20" /> +
Penalty (in minutes): + value="" size="20" maxlength="20" /> +
Max file size allowed for teams (in KB): + + value="" size="20" maxlength="20" /> +
+ Your PHP config. allows at most: + +
Contest main site URL (IP/bocafolder): + " size="40" maxlength="200" /> +
Contest main site number: + " size="4" maxlength="4" /> +
Contest local site number: + " size="4" maxlength="4" /> +
+
+
+ + + +
+
Select a contest or create a new one.


"; } ?> +
+ + + diff --git a/boca-1.5.0/src/system/header.php b/boca-1.5.0/src/system/header.php new file mode 100644 index 0000000..75d0fca --- /dev/null +++ b/boca-1.5.0/src/system/header.php @@ -0,0 +1,63 @@ +. +//////////////////////////////////////////////////////////////////////////////// +// Last modified 05/aug/2012 by cassio@ime.usp.br +ob_start(); +header ("Expires: " . gmdate("D, d M Y H:i:s") . " GMT"); +header ("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT"); +header ("Cache-Control: no-cache, must-revalidate"); +header ("Pragma: no-cache"); +header ("Content-Type: text/html; charset=utf-8"); +session_start(); +ob_end_flush(); +require_once('../version.php'); + +require_once("../globals.php"); +require_once("../db.php"); + +echo "System's Page\n"; +echo "\n"; +echo "\n"; + +//echo ""; +if(!ValidSession()) { + InvalidSession("system/index.php"); + ForceLoad("../index.php"); +} +if($_SESSION["usertable"]["usertype"] != "system") { + IntrusionNotify("system/index.php"); + ForceLoad("../index.php"); +} + +echo "\n"; +echo "\n"; +echo "
"; +echo "\"\""; +echo "BOCA"; +echo "\n"; +echo "Username: " . $_SESSION["usertable"]["userfullname"] ."
\n"; +list($clockstr,$clocktype)=siteclock(); +echo "
 ".$clockstr." 
\n"; +echo "\n"; +echo " \n"; +echo " \n"; +echo " \n"; +echo " \n"; +echo " \n"; +echo " \n"; +echo "
ContestImportOptionsLogout
\n"; +?> diff --git a/boca-1.5.0/src/system/importxml.php b/boca-1.5.0/src/system/importxml.php new file mode 100644 index 0000000..5fcaef3 --- /dev/null +++ b/boca-1.5.0/src/system/importxml.php @@ -0,0 +1,245 @@ +. +//////////////////////////////////////////////////////////////////////////////// +// Last modified 05/aug/2012 by cassio@ime.usp.br +//Change list +// 15/June/2011 by cassio@ime.usp.br: created based on import.php + +require('header.php'); +$id = ''; + +if(isset($_POST["Submit"])) { + if(isset($_SESSION["importfile"])) { + $importfile = $_SESSION['importfile']; + } + if (isset($_FILES["importfile"]) && $_FILES["importfile"]["name"]!="") { + $importfile = $_FILES["importfile"]; + } + if(isset($importfile)) { + $_SESSION['importfile'] = $importfile; + + if ($_POST["confirmation"] == "confirm") { + $type=htmlspecialchars($importfile["type"]); + $size=htmlspecialchars($importfile["size"]); + $name=htmlspecialchars($importfile["name"]); + $temp=htmlspecialchars($importfile["tmp_name"]); + if(isset($importfile['filecontent'])) + $ar = $importfile['filecontent']; + else { + if (!is_uploaded_file($temp)) { + IntrusionNotify("file upload problem."); + ForceLoad("../index.php"); + } + if (($ar = file($temp)) === false) { + IntrusionNotify("Unable to open the uploaded file."); + ForceLoad("../index.php"); + } + $ar=implode('',$ar); + $_SESSION['importfile']['filecontent']=$ar; + } + $localsite=0; + if(isset($_POST['localsite']) && is_numeric($_POST['localsite'])) $localsite=$_POST['localsite']; + $acr['CONTESTREC']=array('number'=>-1, + 'name'=>-1, + 'startdate'=>-1, + 'duration'=>-1, + 'lastmileanswer'=>-1, + 'lastmilescore'=>-1, + 'localsite'=>-1, + 'penalty'=>-1, + 'maxfilesize'=>-1, + 'updatetime'=>-1); + if($localsite > 0) + $acr['CONTESTREC']['localsite'] = "" . $localsite; + + $acr['ANSWERREC']=array('number'=>-1, + 'name'=>-1, + 'yes'=>-1, + 'updatetime'=>-1); + $acr['LANGUAGEREC']=array('number'=>-1, + 'name'=>-1, + 'filepath'=>-1, + 'filename'=>-1, + 'comppath'=>-1, + 'compname'=>-1, + 'problemnumber'=>-1, + 'updatetime'=>-1); + $acr['PROBLEMREC']=array('number'=>-1, + 'name'=>-1, + 'fullname'=>-1, + 'basename'=>-1, + 'inputfilename'=>-1, + 'inputfilepath'=>-1, + 'solfilename'=>-1, + 'solfilepath'=>-1, + 'descfilename'=>-1, + 'descfilepath'=>-1, + 'tl'=>-1, + 'colorname'=>-1, + 'color'=>-1, + 'fake'=>-1, + 'updatetime'=>-1); + $acr['SITETIME']=array('site'=>-1, + 'start'=>-1, + 'enddate'=>-1, + 'updatetime'=>-1); + $acr['SITEREC']=array('sitenumber'=>-1, + 'site'=>-1, + 'number'=>-1, + 'sitename'=>-1, + 'siteip'=>-1, + 'siteduration'=>-1, + 'sitelastmileanswer'=>-1, + 'sitelastmilescore'=>-1, + 'sitejudging'=>-1, + 'sitetasking'=>-1, + 'siteautoend'=>-1, + 'siteglobalscore'=>-1, + 'siteactive'=>-1, + 'sitescorelevel'=>-1, + 'sitepermitlogins'=>-1, + 'siteautojudge'=>-1, + 'sitenextuser'=>-1, + 'sitenextclar'=>-1, + 'sitenextrun'=>-1, + 'sitenexttask'=>-1, + 'sitemaxtask'=>-1, + 'sitechiefname'=>-1, + 'updatetime'=>-1); + $acr['USERREC']=array('site'=>-1, + 'user'=>-1, + 'number'=>-1, + 'username'=>-1, + 'updatetime'=>-1, + 'usericpcid'=>-1, + 'userfull'=>-1, + 'userdesc'=>-1, + 'type'=>-1, + 'enabled'=>-1, + 'multilogin'=>-1, + 'userip'=>-1, + 'userlastlogin'=>-1, + 'userlastlogout'=>-1, + 'permitip'=>-1); + + if(strtoupper(substr($ar,0,5)) != '' && isset($_POST['password']) && strlen($_POST['password'])>20) { + echo "
Starting to create the contest
"; + $str = strtok($ar," \n\t"); + $str = strtok(" \n\t"); + $ar = decryptData($str,$_POST['password'],'importxml'); + if(strtoupper(substr($ar,0,5)) != '') { + echo "
Error decrypting file. Import aborted.
"; + echo ""; + exit; + } + } + if(strtoupper(substr($ar,0,5)) == '') { + echo "
File has been loaded.
"; +// echo "
\n$ar
\n"; + if(!importFromXML($ar,$acr,0,$localsite)) + echo "
Error during updating of the local database.
"; + echo ""; + exit; + } + else + $id = rawurldecode(strtok($ar," \n\t")); + } + } +} else { + unset($_POST['localsite']); + unset($_SESSION['importfile']); +} +?> +
+
+
+To import a pre-defined contest, just fill in the import file field.
+
+ + + + +
+ +
+ + + + + +\n"; + } else { +?> + + + + +"; + } else { +?> + + + + + +
Local site number: +"; + } else + echo ""; +?> +
Challenge string:" . $id . "
Import file: + +
Encryption key: + +
+
+ +
+ + +
+
+ + + diff --git a/boca-1.5.0/src/system/index.php b/boca-1.5.0/src/system/index.php new file mode 100644 index 0000000..ec74ce9 --- /dev/null +++ b/boca-1.5.0/src/system/index.php @@ -0,0 +1,22 @@ +. +//////////////////////////////////////////////////////////////////////////////// +// Last modified 05/aug/2012 by cassio@ime.usp.br +require('header.php'); +?> + + diff --git a/boca-1.5.0/src/system/option.php b/boca-1.5.0/src/system/option.php new file mode 100644 index 0000000..81e5879 --- /dev/null +++ b/boca-1.5.0/src/system/option.php @@ -0,0 +1,21 @@ +. +//////////////////////////////////////////////////////////////////////////////// +// Last modified 05/aug/2012 by cassio@ime.usp.br +require('header.php'); +require('../optionlower.php'); +?> -- cgit v1.2.3