MW-Peachy /
Peachy
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | /** |
||
| 4 | * This file is part of Peachy MediaWiki Bot API |
||
| 5 | * |
||
| 6 | * Peachy is free software: you can redistribute it and/or modify |
||
| 7 | * it under the terms of the GNU General Public License as published by |
||
| 8 | * the Free Software Foundation, either version 3 of the License, or |
||
| 9 | * (at your option) any later version. |
||
| 10 | * |
||
| 11 | * This program is distributed in the hope that it will be useful, |
||
| 12 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
||
| 13 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||
| 14 | * GNU General Public License for more details. |
||
| 15 | * |
||
| 16 | * You should have received a copy of the GNU General Public License |
||
| 17 | * along with this program. If not, see <http://www.gnu.org/licenses/>. |
||
| 18 | */ |
||
| 19 | |||
| 20 | class IRC { |
||
| 21 | |||
| 22 | /** |
||
| 23 | * IRC Socket connection |
||
| 24 | * |
||
| 25 | * @var object |
||
| 26 | * @access public |
||
| 27 | */ |
||
| 28 | public $f; |
||
| 29 | |||
| 30 | /** |
||
| 31 | * Channel(s) |
||
| 32 | * |
||
| 33 | * @var string|array |
||
| 34 | * @access private |
||
| 35 | */ |
||
| 36 | private $chan; |
||
| 37 | |||
| 38 | /** |
||
| 39 | * Construct function, front-end for fsockopen. |
||
| 40 | * @param string $User Username to send to IRC |
||
| 41 | * @param string $Nick Nick to use |
||
| 42 | * @param string $Pass Password to send |
||
| 43 | * @param string $Server Server to connect to |
||
| 44 | * @param string $pgPort Port to use |
||
| 45 | * @param string $Gecos AKA Real Name, Information field, etc. |
||
| 46 | * @param string|array Channel (s) to connect to |
||
| 47 | */ |
||
| 48 | function __construct( $User, $Nick, $Pass, $Server, $pgPort, $Gecos, $Channel ) { |
||
| 49 | $this->f = fsockopen( $Server, $pgPort, $errno, $errstr, 30 ); |
||
| 50 | |||
| 51 | if( !$this->f ) { |
||
| 52 | die( $errstr . ' (' . $errno . ")\n" ); |
||
| 53 | } |
||
| 54 | |||
| 55 | pecho( "Logging into IRC as $User into $Server:$pgPort\n\n", PECHO_NOTICE ); |
||
| 56 | |||
| 57 | $this->sendToIrc( 'USER ' . $User . ' "' . $Server . '" "localhost" :' . $Gecos . "\n" ); |
||
| 58 | $this->sendToIrc( 'PASS ' . $Pass . "\n" ); |
||
| 59 | $this->sendToIrc( 'NICK ' . $Nick . "\n" ); |
||
| 60 | |||
| 61 | if( !is_array( $Channel ) ) { |
||
| 62 | $this->chan = array( $Channel ); |
||
| 63 | } else { |
||
| 64 | $this->chan = $Channel; |
||
| 65 | } |
||
| 66 | $this->joinChan( $Channel ); |
||
| 67 | } |
||
| 68 | |||
| 69 | /** |
||
| 70 | * Destruct function, quits from IRC |
||
| 71 | * @return void |
||
| 72 | */ |
||
| 73 | public function quit() { |
||
| 74 | fwrite( $this->f, 'QUIT ' . "\n" ); |
||
| 75 | } |
||
| 76 | |||
| 77 | /** |
||
| 78 | * Sends a raw message to IRC |
||
| 79 | * @param string $msg Message to send |
||
| 80 | * @return void |
||
| 81 | */ |
||
| 82 | public function sendToIrc( $msg ) { |
||
| 83 | fwrite( $this->f, $msg ); |
||
| 84 | } |
||
| 85 | |||
| 86 | /** |
||
| 87 | * Send a message to a channel, formatted in PRIVMSG format |
||
| 88 | * @param string $msg Message to send |
||
| 89 | * @param string $chan Channel to send to |
||
| 90 | * @return void |
||
| 91 | */ |
||
| 92 | public function sendPrivmsg( $msg, $chan ) { |
||
| 93 | pecho( "Sending $msg to $chan...\n\n", PECHO_VERBOSE ); |
||
| 94 | fwrite( $this->f, "PRIVMSG " . $chan . " :$msg\n" ); |
||
| 95 | } |
||
| 96 | |||
| 97 | /** |
||
| 98 | * Return the pingpong game |
||
| 99 | * @param string $payload Data from the PING message |
||
| 100 | * @return void |
||
| 101 | */ |
||
| 102 | public function sendPong( $payload ) { |
||
| 103 | fwrite( $this->f, "PONG " . $payload . "\r\n" ); |
||
| 104 | } |
||
| 105 | |||
| 106 | /** |
||
| 107 | * Joins a channel, or the locally stored channel(s) |
||
| 108 | * @param string $chan Channel to join. Default null. |
||
| 109 | * @return void |
||
| 110 | */ |
||
| 111 | public function joinChan( $chan = null ) { |
||
| 112 | if( !is_null( $chan ) && !is_array( $chan ) ) { |
||
| 113 | pecho( "Joining $chan...\n", PECHO_VERBOSE ); |
||
| 114 | fwrite( $this->f, 'JOIN ' . $chan . "\n" ); |
||
| 115 | usleep( 5000 ); |
||
| 116 | } elseif( !is_null( $chan ) ) { |
||
| 117 | foreach( $chan as $channel ){ |
||
| 118 | pecho( "Joining $channel...\n", PECHO_VERBOSE ); |
||
| 119 | fwrite( $this->f, 'JOIN ' . $channel . "\n" ); |
||
| 120 | usleep( 5000 ); |
||
| 121 | } |
||
| 122 | } |
||
| 123 | } |
||
| 124 | |||
| 125 | /** |
||
| 126 | * Leaves a channel, or the locally stored channel(s) |
||
| 127 | * @param string $chan Channel to part. Default null |
||
| 128 | * @return void |
||
| 129 | */ |
||
| 130 | public function partChan( $chan = null ) { |
||
| 131 | if( !is_null( $chan ) ) { |
||
| 132 | pecho( "Parting $chan...\n", PECHO_VERBOSE ); |
||
| 133 | fwrite( $this->f, 'PART ' . $chan . "\n" ); |
||
| 134 | usleep( 5000 ); |
||
| 135 | } else { |
||
| 136 | foreach( $this->chan as $chan ){ |
||
| 137 | pecho( "Parting $chan...\n", PECHO_VERBOSE ); |
||
| 138 | fwrite( $this->f, 'PART ' . $chan . "\n" ); |
||
| 139 | usleep( 5000 ); |
||
| 140 | } |
||
| 141 | } |
||
| 142 | } |
||
| 143 | |||
| 144 | /** |
||
| 145 | * Splits apart the various parts of an IRC line into usable sections, e.g. !commands, cloaks, etc. |
||
| 146 | * @param string $line Line that IRC sent |
||
| 147 | * @param array $trigger Trigger character for !commands (e.g. !, ., @, etc) |
||
| 148 | * @param bool $feed Whether or not the IRC server is a MediaWiki RC channel |
||
| 149 | * @return array Parsed line |
||
| 150 | * @static |
||
| 151 | */ |
||
| 152 | public static function parseLine( $line, $trigger, $feed = false ) { |
||
| 153 | $return = array(); |
||
| 154 | $return['trueraw'] = $line; |
||
| 155 | $return['truerawmsg'] = explode( " ", $line ); |
||
| 156 | unset( $return['truerawmsg'][0], $return['truerawmsg'][1], $return['truerawmsg'][2] ); |
||
| 157 | $return['truerawmsg'] = substr( implode( ' ', $return['truerawmsg'] ), 1 ); |
||
| 158 | |||
| 159 | if( $feed ) { |
||
| 160 | $line = str_replace( array( "\n", "\r", "\002" ), '', $line ); |
||
| 161 | $line = preg_replace( '/\003(\d\d?(,\d\d?)?)?/', '', $line ); |
||
| 162 | } else { |
||
| 163 | $line = str_replace( array( "\n", "\r" ), '', $line ); |
||
| 164 | $line = preg_replace( '/' . chr( 3 ) . '.{2,}/i', '', $line ); |
||
| 165 | } |
||
| 166 | |||
| 167 | $return['raw'] = $line; |
||
| 168 | |||
| 169 | /* |
||
| 170 | Data for a privmsg: |
||
| 171 | $d[0] = Nick!User@Host format. |
||
| 172 | $d[1] = Action, e.g. "PRIVMSG", "MODE", etc. If it's a message from the server, it's the numerial code |
||
| 173 | $d[2] = The channel somethign was spoken in |
||
| 174 | $d[3] = The text that was spoken |
||
| 175 | */ |
||
| 176 | $d = $return['message'] = explode( ' ', $line ); |
||
| 177 | $return['n!u@h'] = $d[0]; |
||
| 178 | |||
| 179 | unset( $return['message'][0], $return['message'][1], $return['message'][2] ); |
||
| 180 | $return['message'] = substr( implode( ' ', $return['message'] ), 1 ); |
||
| 181 | |||
| 182 | $return['nick'] = substr( $d[0], 1 ); |
||
| 183 | $return['nick'] = explode( '!', $return['nick'] ); |
||
| 184 | $return['nick'] = $return['nick'][0]; |
||
| 185 | |||
| 186 | $return['cloak'] = explode( '@', $d[0] ); |
||
| 187 | $return['cloak'] = @$return['cloak'][1]; |
||
| 188 | |||
| 189 | $return['user'] = explode( '!', $d[0] ); |
||
| 190 | $return['user'] = explode( '@', $return['user'][1] ); |
||
| 191 | $return['user'] = $return['user'][0]; |
||
| 192 | |||
| 193 | $return['chan'] = strtolower( $d[2] ); |
||
| 194 | |||
| 195 | $return['type'] = $return['payload'] = $d[1]; |
||
| 196 | |||
| 197 | if( in_array( substr( $return['message'], 0, 1 ), $trigger ) ) { |
||
| 198 | $return['command'] = explode( ' ', substr( strtolower( $return['message'] ), 1 ) ); |
||
| 199 | $return['command'] = $return['command'][0]; |
||
| 200 | |||
| 201 | //Get the parameters |
||
| 202 | $return['param'] = explode( ' ', $return['message'] ); |
||
| 203 | unset( $return['param'][0] ); |
||
| 204 | $return['param'] = implode( ' ', $return['param'] ); |
||
| 205 | $return['param'] = trim( $return['param'] ); |
||
| 206 | } |
||
| 207 | |||
| 208 | /* |
||
| 209 | End result: |
||
| 210 | $return['raw'] = Raw data |
||
| 211 | $return['message'] = The text that appears in the channel |
||
| 212 | $return['n!u@h'] = The person who said the line, in N!U@H format |
||
| 213 | $return['nick'] = The nick who said the line |
||
| 214 | $return['cloak'] = The cloak of the person who said the line |
||
| 215 | $return['user'] = The username who said the line |
||
| 216 | $return['chan'] = The channel the line was said in |
||
| 217 | $return['type'] = The action that was done (eg PRIVMSG, MODE) |
||
| 218 | $return['payload'] = For pings, this is $d[1] |
||
| 219 | $return['command'] = The command that was said, eg !status (excuding !) |
||
| 220 | $return['param'] = Parameters of the command |
||
| 221 | */ |
||
| 222 | return $return; |
||
| 223 | } |
||
| 224 | |||
| 225 | /** |
||
| 226 | * Parses the title, user, etc from a MediaWiki RC feed |
||
| 227 | * @link http://www.mediawiki.org/wiki/Manual:IRC_RC_Bot |
||
| 228 | * @param string $msg Message from feed |
||
| 229 | * @return array Parsed line |
||
| 230 | * @static |
||
| 231 | */ |
||
| 232 | public static function parseRC( $msg ) { |
||
| 233 | if( preg_match( '/^\[\[((Talk|User|Wikipedia|Image|MediaWiki|Template|Help|Category|Portal|Special)(( |_)talk)?:)?([^\x5d]*)\]\] (\S*) (http:\/\/en\.wikipedia\.org\/w\/index\.php\?(oldid|diff)=(\d*)&(rcid|oldid)=(\d*).*|http:\/\/en\.wikipedia\.org\/wiki\/\S+)? \* ([^*]*) \* (\(([^)]*)\))? (.*)$/S', $msg, $m ) ) { |
||
| 234 | |||
| 235 | $return = array(); |
||
| 236 | |||
| 237 | //print_r($m); |
||
| 238 | |||
| 239 | $return['namespace'] = $m[2]; |
||
| 240 | $return['pagename'] = $m[5]; |
||
| 241 | $return['fullpagename'] = $m[1] . $m[5]; |
||
| 242 | $return['basepagename'] = explode( '/', $return['fullpagename'] ); |
||
| 243 | $return['basepagename'] = $return['basepagename'][0]; |
||
| 244 | $return['subpagename'] = str_replace( $return['basepagename'] . '/', '', $return['fullpagename'] ); |
||
| 245 | $return['flags'] = str_split( $m[6] ); |
||
| 246 | $return['action'] = $m[6]; |
||
| 247 | $return['url'] = $m[7]; |
||
| 248 | $return['revid'] = $m[9]; |
||
| 249 | $return['oldid'] = $m[11]; |
||
| 250 | $return['username'] = $m[12]; |
||
| 251 | $return['len'] = $m[14]; |
||
| 252 | $return['comment'] = $m[15]; |
||
| 253 | $return['timestamp'] = time(); |
||
| 254 | $return['is_new'] = false; |
||
| 255 | $return['is_minor'] = false; |
||
| 256 | $return['is_bot'] = false; |
||
| 257 | $return['is_delete'] = false; |
||
| 258 | $return['actionpage'] = null; |
||
| 259 | |||
| 260 | if( in_array( 'N', $return['flags'] ) ) { |
||
| 261 | $return['is_new'] = true; |
||
| 262 | } |
||
| 263 | |||
| 264 | if( in_array( 'M', $return['flags'] ) ) { |
||
| 265 | $return['is_minor'] = true; |
||
| 266 | } |
||
| 267 | |||
| 268 | if( in_array( 'B', $return['flags'] ) ) { |
||
| 269 | $return['is_bot'] = true; |
||
| 270 | } |
||
| 271 | |||
| 272 | if( $return['action'] == 'delete' ) { |
||
| 273 | $return['is_delete'] = true; |
||
| 274 | $tmp = explode( '[[', $return['comment'] ); |
||
| 275 | $tmp = explode( ']]', $tmp[1] ); |
||
| 276 | $return['actionpage'] = $tmp[0]; |
||
| 277 | $return['actionpageprefix'] = explode( '/', $return['actionpage'] ); |
||
| 278 | $return['actionpageprefix'] = $return['actionpageprefix'][0]; |
||
| 279 | } |
||
| 280 | |||
| 281 | return $return; |
||
| 282 | } |
||
| 283 | } |
||
| 284 | |||
| 285 | /** |
||
| 286 | * @param $errno |
||
| 287 | * @return bool|string |
||
| 288 | */ |
||
| 289 | public static function get_error($errno) |
||
| 290 | { |
||
| 291 | if ($errno != null) { |
||
| 292 | switch ($errno) { |
||
| 293 | case 401: |
||
| 294 | return "Nickname/Channel is currently unused"; |
||
| 295 | case 402: |
||
| 296 | return "Server not found"; |
||
| 297 | case 403: |
||
| 298 | return "Channel not found"; |
||
| 299 | case 404: |
||
| 300 | return "Cannot send to channel"; |
||
| 301 | case 405: |
||
| 302 | return "Too many channels joined"; |
||
| 303 | case 406: |
||
| 304 | return "There was no such nickname"; |
||
| 305 | } |
||
| 306 | } else { |
||
| 307 | return false; |
||
| 308 | } |
||
| 309 | } |
||
| 310 | } |
||
| 311 | |||
| 312 | class SimpleIRC { |
||
| 313 | |||
| 314 | private $server; |
||
| 315 | private $pgPort; |
||
|
0 ignored issues
–
show
|
|||
| 316 | private $user; |
||
| 317 | private $pass; |
||
| 318 | private $nick; |
||
| 319 | private $channel; |
||
| 320 | private $callback; |
||
| 321 | |||
| 322 | function __construct( $server, $pgPort = 6667, $user, $pass, $nick, $channel, $callback = null ) { |
||
| 323 | global $pgIRCTrigger, $pgHooks; |
||
| 324 | |||
| 325 | if( func_num_args() > 6 ) { |
||
| 326 | $this->server = $server; |
||
| 327 | $this->port = $pgPort; |
||
| 328 | $this->user = $user; |
||
| 329 | $this->pass = $pass; |
||
| 330 | $this->nick = $nick; |
||
| 331 | $this->channel = $channel; |
||
| 332 | $this->callback = $callback; |
||
| 333 | } else { |
||
| 334 | $this->server = $server; |
||
| 335 | $this->port = 6667; |
||
| 336 | $this->user = $pgPort; |
||
| 337 | $this->pass = $user; |
||
| 338 | $this->nick = $pass; |
||
| 339 | $this->channel = $nick; |
||
| 340 | $this->callback = $channel; |
||
| 341 | } |
||
| 342 | |||
| 343 | $pgHooks['SimpleIRCPrivMSG'][] = $callback; |
||
| 344 | |||
| 345 | $irc = new IRC( $this->user, $this->nick, $this->pass, $this->server, $this->port, "Peachy IRC Bot Version " . PEACHYVERSION, $this->channel ); |
||
| 346 | |||
| 347 | while( !feof( $irc->f ) ){ |
||
| 348 | |||
| 349 | $parsed = IRC::parseLine( fgets( $irc->f, 1024 ), $pgIRCTrigger, true ); |
||
| 350 | |||
| 351 | if( @$parsed['n!u@h'] == 'PING' ) { |
||
| 352 | $irc->sendPong( $parsed['payload'] ); |
||
| 353 | } |
||
| 354 | |||
| 355 | if( @$parsed['type'] == '376' || @$parser['type'] == '422' ) { |
||
| 356 | $feed->joinChan(); |
||
| 357 | sleep( 5 ); |
||
| 358 | } |
||
| 359 | |||
| 360 | if( @$parsed['type'] == 'PRIVMSG' ) { |
||
| 361 | Hooks::runHook( 'SimpleIRCPrivMSG', array( &$parsed, &$irc, &$this ) ); |
||
| 362 | } |
||
| 363 | } |
||
| 364 | } |
||
| 365 | |||
| 366 | } |
||
| 367 |
This check marks private properties in classes that are never used. Those properties can be removed.