bb2_insert()

Complexity

Conditions	14
Paths	97

Size

Total Lines	72
Code Lines	38

Duplication

Lines	0
Ratio	0 %

Importance

Changes	1
Bugs	0	Features	0

<?php
function bb2_insert($settings, $package, $key)
{
	global $user_info;

	// Logging not enabled
	if (!$settings['logging'])
		return '';

	// Clean the data that bb sent us
	$ip = bb2_db_escape(substr($package['ip'], 0, 19));
	$date = (int) bb2_db_date();
	$request_method = bb2_db_escape($package['request_method']);
	$request_uri = bb2_db_escape(substr($package['request_uri'], 0, 254));
	$server_protocol = bb2_db_escape($package['server_protocol']);
	$user_agent = bb2_db_escape($package['user_agent']);
	$member_id = !empty($user_info['id']) ? (int) $user_info['id'] : 0;
	$session = !empty($_SESSION['session_value']) ? bb2_db_escape((string) $_SESSION['session_value']) : '';

	// Prepare the headers etc for db insertion
	// We are passed at least
	//	Host, User-Agent, Accept, Accept-Language, Accept-Encoding, DNT, Connection, Referer, Cookie, Authorization
	$headers = '';
	$length = 0;
	$skip = array('User-Agent', 'Accept-Encoding', 'DNT', 'X-Wap-Profile');
	foreach ($package['headers'] as $h => $v)
	{
		$v = trim($v);
		if ($v !== '' && !in_array($h, $skip))
		{
			// Make sure this header it will fit in the db, if not move on to the next
			// @todo increase the db space to 512 or convert to text?
			$check = $length + strlen($h) + strlen($v) + 2;
			if ($check < 254)
			{
				$headers .= bb2_db_escape("$h: $v\n");
				$length = $check;
			}
		}
	}

	$request_entity = '';
	if (!strcasecmp($request_method, "POST"))
	{
		foreach ($package['request_entity'] as $h => $v)
		{
			if (is_array($v))
				$v = bb2_multi_implode($v, ' | ', true);

			$v = trim($v);
			if ($v !== '')
				$request_entity .= bb2_db_escape("$h: $v\n");
		}

		// Only such much space in this column, so brutally cut it
		$request_entity = trim($request_entity);
		$request_entity = bb2_db_escape(substr($request_entity, 0, 254));
	}

	// Make it safe for the db
	foreach (array('ip', 'date', 'request_method', 'request_uri', 'server_protocol', 'headers', 'user_agent', 'request_entity', 'key', 'member_id', 'session') as $id)
	{
		$$id = trim($$id);
		while (preg_match('~[\'\\\\]$~', substr($$id, -1)) === 1)
			$$id = trim(substr($$id, 0, -1));

		$$id = str_replace("'", '_', $$id);
	}

	// Add it
	return "INSERT INTO {db_prefix}log_badbehavior
		(ip, date, request_method, request_uri, server_protocol, http_headers, user_agent, request_entity, valid, id_member, session) VALUES
		(\"$ip\", \"$date\", \"$request_method\", \"$request_uri\", \"$server_protocol\", \"$headers\", \"$user_agent\", \"$request_entity\", \"$key\", \"$member_id\" , \"$session\")";
}