using System; using System.Collections.Generic; using System.Linq; using System.Text.RegularExpressions; using System.Text; using SharedLibrary; using System.Collections.Specialized; namespace MessageBoard.Forum { public class Manager { private List forumPages; private List activeSessions; private Storage.Database database; private const int MAX_SESSIONS = 64; public const int TITLE_MAXLENGTH = 30; public const int CONTENT_MAXLENGTH = 8192; public const int USERNAME_MAXLENGTH = 30; public const int PASSWORD_MAXLENGTH = 64; public Rank guestRank; public Rank UserRank; public Rank ModRank; public Rank AdminRank; public enum ErrorCode { NO_ERROR, GLOBAL_PERMISSIONDENIED, USER_DUPLICATE, USER_INVALID, USER_BADCREDENTIALS, USER_EMPTYCREDENTIALS, USER_NOTAUTHORIZED, USER_PASSWORDTOOLONG, USER_USERNAMETOOLONG, USER_BADPROFILEDATA, SESSION_INVALID, THREAD_BADDATA, THREAD_EMPTYDATA, THREAD_CONTENTTOOLONG, THREAD_TITLETOOLONG, THREAD_INVALID, REPLY_SAVEFAILED, CATEGORY_INVALID, CATEGORY_EMPTY, USER_MISMATCHEDPASSWORD } public Manager() { forumPages = new List(); activeSessions = new List(); database = new Storage.Database("Database/forum.db", null); } public void startSession(string sessionID) { try { Session newSession = getSession(sessionID); newSession.sessionStartTime = DateTime.Now; addSession(newSession); } catch (Exceptions.SessionException) { //Console.WriteLine("No session was found so we are adding a new one"); Session newSession = new Session(new User(), sessionID); addSession(newSession); } } public Session getSession(string sessionID) { Session requestedSession = activeSessions.Find(sess => sess.sessionID == sessionID); if (requestedSession == null) requestedSession = database.getSession(sessionID); if (requestedSession == null) throw new Exceptions.SessionException("Session not found"); return requestedSession; } public User getUser(int userID) { User requestedUser = database.getUser(userID); if (requestedUser == null) throw new Exceptions.UserException("User not found"); return requestedUser; } public User getUser(string username) { User requestedUser = database.getUser(username); if (requestedUser == null) throw new Exceptions.UserException("User not found"); return requestedUser; } public ForumThread getThread(int threadID) { ForumThread requestedThread = database.getThread(threadID); if (requestedThread == null) throw new Exceptions.ThreadException("Thread not found"); return requestedThread; } public Post getPost(int postID) { Post requestedPost = database.getReply(postID); if (requestedPost == null) throw new Exceptions.ThreadException("Post not found"); return requestedPost; } public List getReplies(int threadID) { return database.getRepliesFromThreadID(threadID); } public Post getReply(int replyID) { Post reply = database.getReply(replyID); if (reply == null) throw new Exceptions.ThreadException("Reply not found"); return reply; } public ErrorCode addPost(ForumThread parentThread, Post newPost) { int addedPost = database.addReply(newPost); if (addedPost > 0) { parentThread.replies++; parentThread.updatedDate = DateTime.Now; database.updateThread(parentThread); database.updateUser(newPost.author); return ErrorCode.NO_ERROR; } return ErrorCode.REPLY_SAVEFAILED; } private ErrorCode addSession(Session sess) { if (activeSessions.Count >= MAX_SESSIONS) activeSessions.RemoveAt(0); activeSessions.RemoveAll(x => x.sessionUser.ranking.name == "Guest" && x.sessionID == sess.sessionID); //Console.WriteLine(String.Format("Adding new session [{0}] [{1}]", sess.sessionID, sess.sessionUser.username)); if (activeSessions.Find(x => x.sessionID == sess.sessionID) == null) activeSessions.Add(sess); // if it's a guest session, we don't want to save them in the database... if (sess.sessionUser.ranking.name != "Guest") { database.setSession(sess.sessionUser.id, sess.sessionID); sess.sessionUser.lastLogin = DateTime.Now; database.updateUser(sess.sessionUser); } return ErrorCode.NO_ERROR; } public void removeSession(string sessID) { activeSessions.RemoveAll(x => x.sessionID == sessID); database.removeSession(sessID); } public ProfileSettings getProfileSettings(int userid) { var retrieved = database.getProfileSettings(userid); if (retrieved == null) { if (userid > 0) { var profile = new ProfileSettings(userid); database.addProfileSettings(profile); return profile; } return new ProfileSettings(0); } else return retrieved; } public ErrorCode addUser(User newUser, Session userSession) { if (database.userExists(newUser.username, newUser.email)) return ErrorCode.USER_DUPLICATE; // first added user is going to be admin if (database.getNumUsers() == 0) newUser.ranking = AdminRank; User createdUser = database.addUser(newUser, userSession); database.addProfileSettings(new ProfileSettings(createdUser.id)); removeSession(userSession.sessionID); return addSession(new Session(createdUser, userSession.sessionID)); } public void updateUser(User updatedUser) { database.updateUser(updatedUser); } public void updateUserProfile(ProfileSettings updatedUserProfile) { database.updateProfileSettings(updatedUserProfile); } public ErrorCode updateThread(ForumThread newThread) { if (database.updateThread(newThread)) return ErrorCode.NO_ERROR; else return ErrorCode.THREAD_INVALID; } public ErrorCode updateReply(Post updatedReply) { if (database.updateReply(updatedReply)) return ErrorCode.NO_ERROR; else return ErrorCode.THREAD_INVALID; } public ErrorCode addThread(ForumThread newThread) { if (database.addThread(newThread) > 0) return ErrorCode.NO_ERROR; else return ErrorCode.THREAD_INVALID; } public ErrorCode authorizeUser(string username, string password, string sessionID) { User toAuth = database.getUser(username); if (toAuth == null) return ErrorCode.USER_BADCREDENTIALS; bool validCredentials = Encryption.PasswordHasher.VerifyPassword(password, Convert.FromBase64String(toAuth.getPasswordSalt()), Convert.FromBase64String(toAuth.getPasswordHash())); if (!validCredentials) return ErrorCode.USER_BADCREDENTIALS; addSession(new Session(toAuth, sessionID)); return ErrorCode.NO_ERROR; } public List getAllCategories() { return database.getAllCategories(); } public List getRecentThreads(int catID) { return database.getRecentThreads(catID); } public List getCategoryThreads(int categoryID) { return database.getCategoryThreads(categoryID); } public Category getCategory(int id) { Category cat = database.getCategory(id); if (cat == null) throw new Exceptions.CategoryException("Category not found"); return cat; } public List getSessions() { return activeSessions; } public void Start() { var login = new Pages.Login(); var loginJSON = new Pages.LoginJSON(); var register = new Pages.Register(); var registerJSON = new Pages.RegisterJSON(); var userinfoJSON = new Pages.userinfoJSON(); var viewUser = new Pages.ViewUser(); var userCP = new Pages.UserCP(); var updateUserJSON = new Pages.updateUserJSON(); var categoriesJSON = new Pages.categoriesJSON(); var category = new Pages.ViewCategory(); var categorythreadsJSON = new Pages.categorythreadsJSON(); var home = new Pages.Home(); var recentthreadsJSON = new Pages.recentthreadsJSON(); var postthread = new Pages.PostThread(); var postthreadJSON = new Pages.postthreadJSON(); var editthreadJSON = new Pages.editthreadJSON(); var threadJSON = new Pages.threadJSON(); var viewthread = new Pages.ViewThread(); var logout = new Pages.LogOut(); var stats = new Pages.StatsJSON(); forumPages.Add(login); forumPages.Add(loginJSON); forumPages.Add(register); forumPages.Add(registerJSON); forumPages.Add(userinfoJSON); forumPages.Add(viewUser); forumPages.Add(userCP); forumPages.Add(updateUserJSON); forumPages.Add(categoriesJSON); forumPages.Add(category); forumPages.Add(categorythreadsJSON); forumPages.Add(home); forumPages.Add(recentthreadsJSON); forumPages.Add(postthread); forumPages.Add(postthreadJSON); forumPages.Add(editthreadJSON); forumPages.Add(threadJSON); forumPages.Add(viewthread); forumPages.Add(logout); forumPages.Add(stats); SharedLibrary.WebService.PageList.Add(login); SharedLibrary.WebService.PageList.Add(loginJSON); SharedLibrary.WebService.PageList.Add(register); SharedLibrary.WebService.PageList.Add(registerJSON); SharedLibrary.WebService.PageList.Add(userinfoJSON); SharedLibrary.WebService.PageList.Add(viewUser); SharedLibrary.WebService.PageList.Add(userCP); SharedLibrary.WebService.PageList.Add(updateUserJSON); SharedLibrary.WebService.PageList.Add(categoriesJSON); SharedLibrary.WebService.PageList.Add(category); SharedLibrary.WebService.PageList.Add(categorythreadsJSON); SharedLibrary.WebService.PageList.Add(home); SharedLibrary.WebService.PageList.Add(recentthreadsJSON); SharedLibrary.WebService.PageList.Add(postthread); SharedLibrary.WebService.PageList.Add(postthreadJSON); SharedLibrary.WebService.PageList.Add(editthreadJSON); SharedLibrary.WebService.PageList.Add(threadJSON); SharedLibrary.WebService.PageList.Add(viewthread); SharedLibrary.WebService.PageList.Add(logout); SharedLibrary.WebService.PageList.Add(stats); guestRank = database.getRank("Guest"); UserRank = database.getRank("User"); ModRank = database.getRank("Moderator"); AdminRank = database.getRank("Administrator"); } public void Stop() { //session logouts //checkme foreach (var page in forumPages) SharedLibrary.WebService.PageList.Remove(page); } } public class Pages { public abstract class JSONPage : IPage { protected Session currentSession; public bool Visible() { return false; } public virtual string GetPath() { return "/forum"; } public string GetName() { return "JSONPage"; } public virtual HttpResponse GetPage(System.Collections.Specialized.NameValueCollection querySet, IDictionary requestHeaders) { HttpResponse resp = new HttpResponse(); resp.contentType = "application/json"; resp.additionalHeaders = new Dictionary(); if (requestHeaders.ContainsKey("Cookie")) { //Console.WriteLine("JSON request contains session header - " + requestHeaders["Cookie"]); string cookie = requestHeaders["Cookie"].Split('=')[1]; Plugin.Main.ManagerInstance.startSession(cookie); currentSession = Plugin.Main.ManagerInstance.getSession(cookie); } else { string sessionID = Convert.ToBase64String(Encryption.PasswordHasher.GenerateSalt()); resp.additionalHeaders.Add("Set-Cookie", "IW4MAdmin_ForumSession=" + sessionID + "; path=/; expires=Sat, 01 May 2025 12:00:00 GMT"); currentSession = new Session(new User(), sessionID); Plugin.Main.ManagerInstance.startSession(sessionID); currentSession = Plugin.Main.ManagerInstance.getSession(sessionID); } return resp; } } abstract public class ForumPage : HTMLPage { public ForumPage(bool visible) : base(visible) { } public abstract override string GetName(); public override string GetPath() { return base.GetPath() + "/forum"; } public override Dictionary GetHeaders(IDictionary requestHeaders) { return base.GetHeaders(requestHeaders); } protected string templatation(string bodyContent) { StringBuilder S = new StringBuilder(); S.Append(base.LoadHeader()); S.Append(bodyContent); S.Append(base.LoadFooter()); return S.ToString(); } } public class Login : ForumPage { public Login() : base(true) { } public override string GetName() { return "Forum"; } public override string GetPath() { return base.GetPath() + "/login"; } public override string GetContent(NameValueCollection querySet, IDictionary headers) { return templatation(LoadFile("forum\\login.html")); } } public class Register : ForumPage { public Register(): base(false) { } public override string GetName() { return "Register"; } public override string GetPath() { return base.GetPath() + "/register"; } public override string GetContent(NameValueCollection querySet, IDictionary headers) { string content = LoadFile("forum\\register.html"); return templatation(content); } } public class Home : ForumPage { public Home() : base(false) { } public override string GetName() { return "Forum - Home"; } public override string GetPath() { return base.GetPath() + "/home"; } public override string GetContent(NameValueCollection querySet, IDictionary headers) { string content = LoadFile("forum\\home.html"); return templatation(content); } } public class PostThread : ForumPage { public PostThread() : base(false) { } public override string GetName() { return "Forum - Post New Thread"; } public override string GetPath() { return base.GetPath() + "/postthread"; } public override string GetContent(NameValueCollection querySet, IDictionary headers) { string content = LoadFile("forum\\postthread.html"); return templatation(content); } } public class ViewCategory : ForumPage { public ViewCategory() : base(false) { } public override string GetName() { return "Forum - Category View"; } public override string GetPath() { return base.GetPath() + "/category"; } public override string GetContent(NameValueCollection querySet, IDictionary headers) { string content = LoadFile("forum\\category.html"); return templatation(content); } } public class ViewUser : ForumPage { public ViewUser() : base(false) { } public override string GetName() { return "Forum - View User"; } public override string GetPath() { return base.GetPath() + "/user"; } public override string GetContent(NameValueCollection querySet, IDictionary headers) { string content = LoadFile("forum\\user.html"); return templatation(content); } } public class UserCP : ForumPage { public UserCP() : base(false) { } public override string GetName() { return "Forum - User Control Panel"; } public override string GetPath() { return base.GetPath() + "/usercp"; } public override string GetContent(NameValueCollection querySet, IDictionary headers) { string content = LoadFile("forum\\usercp.html"); return templatation(content); } } public class ViewThread : ForumPage { public ViewThread() : base(false) { } public override string GetName() { return "Forum - View Thread"; } public override string GetPath() { return base.GetPath() + "/thread"; } public override string GetContent(NameValueCollection querySet, IDictionary headers) { string content = LoadFile("forum\\thread.html"); return templatation(content); } } public class LogOut : ForumPage { public LogOut() : base(false) { } public override string GetName() { return "Forum - Log Out"; } public override string GetPath() { return base.GetPath() + "/logout"; } public override Dictionary GetHeaders(IDictionary requestHeaders) { Plugin.Main.ManagerInstance.removeSession(requestHeaders["Cookie"].Split('=')[1]); return new Dictionary() { { "Set-Cookie", "IW4MAdmin_ForumSession=deleted; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT" } }; } public override string GetContent(NameValueCollection querySet, IDictionary headers) { string content = @""; return templatation(content); } } public class RegisterJSON : JSONPage { public override string GetPath() { return base.GetPath() + "/_register"; } public override HttpResponse GetPage(NameValueCollection querySet, IDictionary requestHeaders) { var resp = base.GetPage(querySet, requestHeaders); var result = new ActionResponse(); result.success = false; result.destination = base.GetPath() + "/error"; try { string username = DNA.Text.TextEngine.Text(querySet["username"]); string password = DNA.Text.TextEngine.Text(querySet["password"]); string email = DNA.Text.TextEngine.Text(querySet["email"]); bool validEmail = Regex.IsMatch(email, @"^(?("")("".+?(? Manager.USERNAME_MAXLENGTH) throw new Exceptions.UserException("Username is too long"); if (password.Length > Manager.PASSWORD_MAXLENGTH) throw new Exceptions.UserException("Password is too long"); byte[] passwordSalt = Encryption.PasswordHasher.GenerateSalt(); string b64PasswordHash = Convert.ToBase64String(Encryption.PasswordHasher.ComputeHash(password, passwordSalt)); User registeringUser = new User(username, querySet["hiddenUsername"], email, b64PasswordHash, Convert.ToBase64String(passwordSalt), Plugin.Main.ManagerInstance.UserRank); currentSession = new Session(registeringUser, currentSession.sessionID); var addUserResult = Plugin.Main.ManagerInstance.addUser(registeringUser, currentSession); if (addUserResult != Manager.ErrorCode.NO_ERROR) { result.errorCode = addUserResult; } else { result.destination = base.GetPath() + "/home"; result.success = true; result.errorCode = Manager.ErrorCode.NO_ERROR; } } catch (Exception E) { //logme result.errorCode = Manager.ErrorCode.USER_INVALID; } resp.content = Newtonsoft.Json.JsonConvert.SerializeObject(result); return resp; } } public class userinfoJSON : JSONPage { public override string GetPath() { return base.GetPath() + "/_userinfo"; } public override HttpResponse GetPage(NameValueCollection querySet, IDictionary requestHeaders) { var resp = base.GetPage(querySet, requestHeaders); UserInfo info = new UserInfo(); bool validUserSelection = true; try { int userid = Convert.ToInt32(querySet["id"]); info.user = Plugin.Main.ManagerInstance.getUser(userid); info.profile = Plugin.Main.ManagerInstance.getProfileSettings(userid); } catch (FormatException) { // logme validUserSelection = false; } catch (Exceptions.UserException) { //logme validUserSelection = false; } if (!validUserSelection) { info.user = currentSession.sessionUser; try { info.profile = Plugin.Main.ManagerInstance.getProfileSettings(info.user.id); } catch (Exceptions.UserException) { //logme } } /*// this should not be a thing but ok... Player matchedPlayer = Plugin.Main.stupidServer.clientDB.getPlayer(querySet["ip"]); if (matchedPlayer != null) info.matchedUsername = matchedPlayer.Name;*/ resp.content = Newtonsoft.Json.JsonConvert.SerializeObject(info); return resp; } } public class updateUserJSON : JSONPage { public override string GetPath() { return base.GetPath() + "/_updateuser"; } public override HttpResponse GetPage(NameValueCollection querySet, IDictionary requestHeaders) { var resp = base.GetPage(querySet, requestHeaders); var aResp = new ActionResponse(); bool passwordUpdateRequest = false; if (querySet["username"] == null || currentSession.sessionUser.id == 0) aResp.errorCode = Manager.ErrorCode.USER_INVALID; else if (querySet["bannercolor"] == null) aResp.errorCode = Manager.ErrorCode.USER_BADPROFILEDATA; if (querySet["updatedpassword"] != null && querySet["updatedpasswordrepeat"] != null && querySet["updatedpassword"].Length > 0 && querySet["updatedpasswordrepeat"].Length > 0) passwordUpdateRequest = true; if (aResp.errorCode == Manager.ErrorCode.NO_ERROR) { string username = DNA.Text.TextEngine.Text(querySet["username"]); string bannercolor = DNA.Text.TextEngine.Text(querySet["bannercolor"]); string avatarURL = DNA.Text.TextEngine.Text(querySet["avatarurl"]); string password = null; if (passwordUpdateRequest) { password = DNA.Text.TextEngine.Text(querySet["updatedpassword"]); string passwordRepeat = DNA.Text.TextEngine.Text(querySet["updatedpasswordrepeat"]); if (!password.Equals(passwordRepeat)) { password = null; aResp.errorCode = Manager.ErrorCode.USER_MISMATCHEDPASSWORD; } else if (password.Length > Manager.PASSWORD_MAXLENGTH) { password = null; aResp.errorCode = Manager.ErrorCode.USER_PASSWORDTOOLONG; } } User existingUser = null; try { existingUser = Plugin.Main.ManagerInstance.getUser(username); } catch (Exceptions.UserException) { } if (existingUser != null && existingUser.id != currentSession.sessionUser.id) aResp.errorCode = Manager.ErrorCode.USER_DUPLICATE; else { var profile = Plugin.Main.ManagerInstance.getProfileSettings(currentSession.sessionUser.id); if (username.Length <= Manager.USERNAME_MAXLENGTH) currentSession.sessionUser.updateUsername(username); else aResp.errorCode = Manager.ErrorCode.USER_USERNAMETOOLONG; currentSession.sessionUser.updateAvatar(avatarURL); if (passwordUpdateRequest && aResp.errorCode == Manager.ErrorCode.NO_ERROR) { byte[] passwordSalt = Encryption.PasswordHasher.GenerateSalt(); string b64PasswordHash = Convert.ToBase64String(Encryption.PasswordHasher.ComputeHash(password, passwordSalt)); currentSession.sessionUser.updatePassword(Convert.ToBase64String(passwordSalt), b64PasswordHash); } Plugin.Main.ManagerInstance.updateUser(currentSession.sessionUser); if (bannercolor.Length == 7) profile.bannerColor = bannercolor; Plugin.Main.ManagerInstance.updateUserProfile(profile); } } aResp.success = aResp.errorCode == Manager.ErrorCode.NO_ERROR; if (aResp.success) aResp.destination = "usercp"; resp.content = Newtonsoft.Json.JsonConvert.SerializeObject(aResp); return resp; } } public class LoginJSON : JSONPage { public override string GetPath() { return base.GetPath() + "/_login"; } public override HttpResponse GetPage(NameValueCollection querySet, IDictionary requestHeaders) { var resp = base.GetPage(querySet, requestHeaders); ActionResponse aResp = new ActionResponse(); aResp.success = false; try { string username = DNA.Text.TextEngine.Text(querySet["username"]); string password = DNA.Text.TextEngine.Text(querySet["password"]); var result = Plugin.Main.ManagerInstance.authorizeUser(username, password, currentSession.sessionID); aResp.success = result == Manager.ErrorCode.NO_ERROR; aResp.errorCode = result; aResp.destination = "home"; } catch (KeyNotFoundException) { aResp.errorCode = Manager.ErrorCode.USER_EMPTYCREDENTIALS; } resp.content = Newtonsoft.Json.JsonConvert.SerializeObject(aResp); return resp; } } public class categoriesJSON : JSONPage { public override string GetPath() { return base.GetPath() + "/_categories"; } public override HttpResponse GetPage(NameValueCollection querySet, IDictionary requestHeaders) { var resp = base.GetPage(querySet, requestHeaders); var categories = Plugin.Main.ManagerInstance.getAllCategories(); resp.content = Newtonsoft.Json.JsonConvert.SerializeObject(categories); return resp; } } public class recentthreadsJSON : JSONPage { public override string GetPath() { return base.GetPath() + "/_recentthreads"; } public override HttpResponse GetPage(NameValueCollection querySet, IDictionary requestHeaders) { var resp = base.GetPage(querySet, requestHeaders); try { List threads = new List(); var categories = Plugin.Main.ManagerInstance.getAllCategories(); foreach (var t in categories) { if ((t.permissions.Find(x => x.rankID == currentSession.sessionUser.ranking.id).actionable & Permission.Action.READ) != Permission.Action.READ) continue; HomeThread thread = new HomeThread(); thread.categoryTitle = t.title; thread.categoryDescription = t.description; thread.categoryID = t.id; thread.recentThreads = Plugin.Main.ManagerInstance.getRecentThreads(t.id); threads.Add(thread); } resp.content = Newtonsoft.Json.JsonConvert.SerializeObject(threads); } catch (Exception e) { //logme resp.content = ""; } return resp; } } public class categorythreadsJSON : JSONPage { public override string GetPath() { return base.GetPath() + "/_categorythreads"; } public override HttpResponse GetPage(NameValueCollection querySet, IDictionary requestHeaders) { var resp = base.GetPage(querySet, requestHeaders); var aResp = new ActionResponse(); try { var category = Plugin.Main.ManagerInstance.getCategory(Convert.ToInt32(querySet["id"])); if ((category.permissions.Find(x => x.rankID == currentSession.sessionUser.ranking.id).actionable & Permission.Action.READ) != Permission.Action.READ) throw new Exceptions.PermissionException("User cannot view this category"); var categoryThreads = Plugin.Main.ManagerInstance.getCategoryThreads(category.id); resp.content = Newtonsoft.Json.JsonConvert.SerializeObject(categoryThreads); return resp; } catch (FormatException) { //logme aResp.errorCode = Manager.ErrorCode.CATEGORY_INVALID; } catch (Exceptions.CategoryException) { //logme aResp.errorCode = Manager.ErrorCode.CATEGORY_INVALID; } catch (Exceptions.PermissionException) { aResp.errorCode = Manager.ErrorCode.GLOBAL_PERMISSIONDENIED; } resp.content = Newtonsoft.Json.JsonConvert.SerializeObject(aResp); return resp; } } public class threadJSON : JSONPage { public override string GetPath() { return base.GetPath() + "/_thread"; } public override HttpResponse GetPage(NameValueCollection querySet, IDictionary requestHeaders) { var resp = base.GetPage(querySet, requestHeaders); var aResp = new ActionResponse(); aResp.success = false; aResp.errorCode = Manager.ErrorCode.NO_ERROR; try { if (querySet.Get("id") != null) { var thread = Plugin.Main.ManagerInstance.getThread(Convert.ToInt32(querySet["id"])); if ((thread.threadCategory.permissions.Find(x => x.rankID == currentSession.sessionUser.ranking.id).actionable & Permission.Action.READ) != Permission.Action.READ) throw new Exceptions.PermissionException("User cannot view this post"); var replies = Plugin.Main.ManagerInstance.getReplies(thread.id); resp.content = Newtonsoft.Json.JsonConvert.SerializeObject(new ThreadView(thread, replies)); aResp.success = true; } else if (querySet.Get("replyid") != null) { var thread = Plugin.Main.ManagerInstance.getReply(Convert.ToInt32(querySet["replyid"])); //if ((thread.threadCategory.permissions.Find(x => x.rankID == currentSession.sessionUser.ranking.id).actionable & Permission.Action.READ) != Permission.Action.READ) // throw new Exceptions.PermissionException("User cannot view this post"); resp.content = Newtonsoft.Json.JsonConvert.SerializeObject(thread); aResp.success = true; } } catch (FormatException) { aResp.errorCode = Manager.ErrorCode.THREAD_INVALID; } catch (Exceptions.ThreadException) { aResp.errorCode = Manager.ErrorCode.THREAD_INVALID; } catch (Exceptions.PermissionException) { aResp.errorCode = Manager.ErrorCode.GLOBAL_PERMISSIONDENIED; } if (aResp.success == false) resp.content = Newtonsoft.Json.JsonConvert.SerializeObject(aResp); return resp; } } public class editthreadJSON : JSONPage { public override string GetPath() { return base.GetPath() + "/_editthread"; } public override HttpResponse GetPage(NameValueCollection querySet, IDictionary requestHeaders) { var resp = base.GetPage(querySet, requestHeaders); var aResp = new ActionResponse(); aResp.success = false; aResp.errorCode = Manager.ErrorCode.NO_ERROR; try { if (querySet.Get("id") != null) { var thread = Plugin.Main.ManagerInstance.getThread(Convert.ToInt32(querySet["id"])); if (thread.author.id != currentSession.sessionUser.id && (thread.threadCategory.permissions.Find(x => x.rankID == currentSession.sessionUser.ranking.id).actionable & Permission.Action.MODIFY) != Permission.Action.MODIFY) throw new Exceptions.PermissionException("User cannot modify this post"); if (querySet.Get("delete") != null) { thread.visible = false; aResp.errorCode = Plugin.Main.ManagerInstance.updateThread(thread); aResp.success = aResp.errorCode == Manager.ErrorCode.NO_ERROR; aResp.destination = "category?id=" + thread.threadCategory.id; } else if (querySet.Get("update") != null) { if (querySet.Get("content") == null || querySet.Get("title") == null) throw new Exceptions.ThreadException("Invalid update data"); if (querySet.Get("content").Length > Manager.CONTENT_MAXLENGTH) { aResp.errorCode = Manager.ErrorCode.THREAD_CONTENTTOOLONG; } else if (querySet.Get("title").Length > Manager.TITLE_MAXLENGTH) { aResp.errorCode = Manager.ErrorCode.THREAD_TITLETOOLONG; } else { //fixsecurity var fmtr = new DNA.Text.BBCodeFormatter(); string content = fmtr.Format(Uri.UnescapeDataString(querySet["content"])); string title = DNA.Text.TextEngine.Text(Uri.UnescapeDataString(querySet["title"])); if (thread.updateTitle(title) && thread.updateContent(content)) { aResp.errorCode = Plugin.Main.ManagerInstance.updateThread(thread); aResp.success = aResp.errorCode == Manager.ErrorCode.NO_ERROR; aResp.destination = "thread?id=" + thread.id; } else aResp.errorCode = Manager.ErrorCode.THREAD_EMPTYDATA; } } } else if (querySet.Get("replyid") != null) { var reply = Plugin.Main.ManagerInstance.getReply(Convert.ToInt32(querySet["replyid"])); if (currentSession.sessionUser.id == 0 || reply.author.id != currentSession.sessionUser.id && (reply.threadCategory.permissions.Find(x => x.rankID == currentSession.sessionUser.ranking.id).actionable & Permission.Action.MODIFY) != Permission.Action.MODIFY) throw new Exceptions.PermissionException("User cannot modify this reply"); if (querySet.Get("delete") != null) { reply.visible = false; aResp.errorCode = Plugin.Main.ManagerInstance.updateReply(reply); aResp.success = aResp.errorCode == Manager.ErrorCode.NO_ERROR; aResp.destination = "thread?id=" + reply.threadid; } else if (querySet.Get("content") != null) { if (querySet.Get("content") == null || querySet.Get("title") == null) throw new Exceptions.ThreadException("Invalid update data"); if (querySet.Get("content").Length > Manager.CONTENT_MAXLENGTH) { aResp.errorCode = Manager.ErrorCode.THREAD_CONTENTTOOLONG; } else if (querySet.Get("title").Length > Manager.TITLE_MAXLENGTH) { aResp.errorCode = Manager.ErrorCode.THREAD_TITLETOOLONG; } else { int threadID = Convert.ToInt32(querySet["threadid"]); //fixsecurity var fmtr = new DNA.Text.BBCodeFormatter(); string content = fmtr.Format(Uri.UnescapeDataString(querySet["content"])); string title = DNA.Text.TextEngine.Text(Uri.UnescapeDataString(querySet["title"])); if (reply.updateTitle(title) && reply.updateContent(content)) { aResp.errorCode = Plugin.Main.ManagerInstance.updateReply(reply); aResp.success = aResp.errorCode == Manager.ErrorCode.NO_ERROR; aResp.destination = "thread?id=" + threadID; } else aResp.errorCode = Manager.ErrorCode.THREAD_EMPTYDATA; } } } resp.content = Newtonsoft.Json.JsonConvert.SerializeObject(aResp); } catch (FormatException) { aResp.errorCode = Manager.ErrorCode.THREAD_INVALID; } catch (Exceptions.ThreadException) { aResp.errorCode = Manager.ErrorCode.THREAD_INVALID; } catch (Exceptions.PermissionException) { aResp.errorCode = Manager.ErrorCode.GLOBAL_PERMISSIONDENIED; } if (aResp.success == false) resp.content = Newtonsoft.Json.JsonConvert.SerializeObject(aResp); return resp; } } public class postthreadJSON : JSONPage { public override string GetPath() { return base.GetPath() + "/_postthread"; } public override HttpResponse GetPage(NameValueCollection querySet, IDictionary requestHeaders) { var resp = base.GetPage(querySet, requestHeaders); ActionResponse aResp = new ActionResponse(); if (currentSession.sessionUser.ranking.equivalentRank < Player.Permission.Trusted) { aResp.errorCode = Manager.ErrorCode.USER_NOTAUTHORIZED; } else { try { if (querySet["content"].Length < Manager.CONTENT_MAXLENGTH && querySet["title"].Length <= Manager.TITLE_MAXLENGTH) { var fmtr = new DNA.Text.BBCodeFormatter(); string content = fmtr.Format(Uri.UnescapeDataString(querySet["content"])); string title = DNA.Text.TextEngine.Text(Uri.UnescapeDataString(querySet["title"])); if (querySet.Get("threadid") != null) { var replyThread = Plugin.Main.ManagerInstance.getThread(Convert.ToInt32(querySet.Get("threadid"))); var reply = new Post(title, replyThread.getID(), content, currentSession.sessionUser); aResp.errorCode = Plugin.Main.ManagerInstance.addPost(replyThread, reply); aResp.destination = String.Format("thread?id={0}", replyThread.id); aResp.success = aResp.errorCode == Manager.ErrorCode.NO_ERROR; } else { Category threadCategory = Plugin.Main.ManagerInstance.getCategory(Convert.ToInt32(querySet["category"])); if ((threadCategory.permissions.Find(x => x.rankID == currentSession.sessionUser.ranking.id).actionable & Permission.Action.WRITE) == Permission.Action.WRITE) { ForumThread newThread = new ForumThread(title, content, currentSession.sessionUser, threadCategory); aResp.errorCode = Plugin.Main.ManagerInstance.addThread(newThread); aResp.destination = String.Format("category?id={0}", threadCategory.id); aResp.success = aResp.errorCode == Manager.ErrorCode.NO_ERROR; } else aResp.errorCode = Manager.ErrorCode.USER_NOTAUTHORIZED; } } else if (querySet["title"].Length > Manager.TITLE_MAXLENGTH) aResp.errorCode = Manager.ErrorCode.THREAD_TITLETOOLONG; else aResp.errorCode = Manager.ErrorCode.THREAD_CONTENTTOOLONG; } catch (Exceptions.ThreadException) { aResp.errorCode = Manager.ErrorCode.THREAD_BADDATA; } catch (NullReferenceException) { //logme aResp.errorCode = Manager.ErrorCode.THREAD_EMPTYDATA; } } resp.content = Newtonsoft.Json.JsonConvert.SerializeObject(aResp); return resp; } } public class StatsJSON : JSONPage { public override string GetPath() { return base.GetPath() + "/_stats"; } public override HttpResponse GetPage(NameValueCollection querySet, IDictionary requestHeaders) { var resp = base.GetPage(querySet, requestHeaders); StatView stats = new StatView(); stats.onlineUsers = new List(); foreach (Session s in Plugin.Main.ManagerInstance.getSessions()) { if (s.sessionUser.ranking.id > 0 && (DateTime.Now - s.sessionStartTime).TotalMinutes < 5 && s.sessionUser.username != "Guest") stats.onlineUsers.Add(s.sessionUser); } stats.onlineUsers.OrderByDescending(x => x.ranking.equivalentRank); resp.content = Newtonsoft.Json.JsonConvert.SerializeObject(stats); return resp; } } protected struct StatView { public List onlineUsers; } protected struct ActionResponse { public bool success; public string destination; public Manager.ErrorCode errorCode; } protected struct HomeThread { public string categoryTitle; public string categoryDescription; public int categoryID; public List recentThreads; } protected struct ThreadView { public ForumThread Thread; public List Replies; public ThreadView(ForumThread t, List r) { Thread = t; Replies = r; } } } }