clockwerk-www – Rev 72

Subversion Repositories:
Rev:
<?php

///////////////////////////////////////////////////////////////////////////
//       Copyright (C) Wizardry and Steamworks 2014 - License: MIT       //
///////////////////////////////////////////////////////////////////////////

// Hostname or IP of your OpenSim MySQL server.
$MYSQL_HOSTNAME='localhost';
// Username of the OpenSim MySQL user.
$MYSQL_USERNAME='opensim';
// Password of the OpenSim MySQL user.
$MYSQL_PASSWORD='***';
// Name of the OpenSim database on the MySQL server.
$MYSQL_DATABASE='opensim';

require_once 'lib/recaptchalib.php';
require_once 'lib/wasRemoteAdmin.php';

define('RECAPTCHA_PRIVATE_KEY', '6Lcz9ukSAAAAAC3u90rcOIdnNnaK_JgMjrOsSzZr');

$first = $_POST["first"];
$last = $_POST["last"];
$region = $_POST["region"];
$password = $_POST["password"];

$resp = recaptcha_check_answer(RECAPTCHA_PRIVATE_KEY,
$_SERVER["REMOTE_ADDR"],
$_POST["recaptcha_challenge_field"],
$_POST["recaptcha_response_field"]);

?>

<!DOCTYPE html>
<html>
<head>
<title>Clockwerk</title>
<link rel="stylesheet" href="css/gray.css" type="text/css" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
</head>
<body class=dark-grey>
<div class="center">
<img src="img/clockwerk-logo.png" alt="logo">
<h1><?php print gethostname(); ?></h1>
<hr>

<?php

if ($resp->is_valid) {
  $req = new wasRemoteAdmin('http://127.0.0.1:10000', 'opensim');
  $ret = $req->admin_authenticate_user($first, $last, MD5($password), '1');
  $rep = new SimpleXMLElement($ret);
  foreach($rep->params->param->value->struct->member as $member) {
    if ($member->name == "success" && $member->value->boolean == "0") {
      echo 'Sorry, wrong password.';
      goto last;
    }
  }
  try {
    $mysql = new PDO('mysql:host='.$MYSQL_HOSTNAME.';dbname='.$MYSQL_DATABASE.';', $MYSQL_USERNAME, $MYSQL_PASSWORD);
    $mysql->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
    $query = $mysql->prepare("SELECT UserLevel FROM UserAccounts WHERE FirstName=:first AND LastName=:last");
    $query->bindParam(':first', $first);
    $query->bindParam(':last', $last);
    $query->execute();
    $result=$query->fetch(PDO::FETCH_ASSOC);
  }
  catch(PDOException $e) {
    print '<p>Sorry, a database error occurred.</p>';
    goto last;
  }
  if($result['UserLevel'] < 100) {
    print '<p>Sorry, the authenticated agent does not have the necessary level to download OARs.</p>';
    goto last;
  }
  $oar_path = '/var/lib/oar/'.$region.'/'.$region.'.oar';
  if (file_exists($oar_path)) {
    header('Content-Description: File Transfer');
    header('Content-Type: application/x-gzip-compressed');
    header('Content-Disposition: attachment; filename='.basename($oar_path));
    header('Content-Transfer-Encoding: binary');
    header('Expires: 0');
    header('Cache-Control: must-revalidate, post-check=0, pre-check=0');
    header('Pragma: public');
    header('Content-Length: '.filesize($oar_path));
    readfile($oar_path);
    goto last;
  }
  echo '<p>Sorry, the OAR file is not available yet.</p>';
  goto last;
}

echo '<p>Sorry, incorrect CAPTCHA. Please try again.</p>';

last:

?>

<form class="dark-grey">
<input type="button" onclick="parent.location='welcome.php'" value="Main Page">
</form>
</div>
</body>
</html>