lkddi/nexusphp
1
0
Fork 0
mirror of https://github.com/lkddi/nexusphp.git synced 2026-04-24 12:07:23 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix reAnnounce check

Browse Source
This commit is contained in:
xiaomlove
2023-06-05 02:51:07 +08:00
parent d0b2f57643
commit cf36944d28
3 changed files with 18 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
include/constants.php
+1 -1
View File
@@ -1,6 +1,6 @@
<?php <?php
defined('VERSION_NUMBER') || define('VERSION_NUMBER', '1.8.4'); defined('VERSION_NUMBER') || define('VERSION_NUMBER', '1.8.4');
defined('RELEASE_DATE') || define('RELEASE_DATE', '2023-06-04'); defined('RELEASE_DATE') || define('RELEASE_DATE', '2023-06-05');
defined('IN_TRACKER') || define('IN_TRACKER', false); defined('IN_TRACKER') || define('IN_TRACKER', false);
defined('PROJECTNAME') || define("PROJECTNAME","NexusPHP"); defined('PROJECTNAME') || define("PROJECTNAME","NexusPHP");
defined('NEXUSPHPURL') || define("NEXUSPHPURL","https://nexusphp.org"); defined('NEXUSPHPURL') || define("NEXUSPHPURL","https://nexusphp.org");
include/functions_announce.php
+6
View File
@@ -66,6 +66,12 @@ function err($msg, $userid = 0, $torrentid = 0)
benc_resp(['failure reason' => $msg]); benc_resp(['failure reason' => $msg]);
exit(); exit();
} }
function warn($msg)
{
benc_resp(['warning message' => $msg]);
exit();
}
function check_cheater($userid, $torrentid, $uploaded, $downloaded, $anctime, $seeders=0, $leechers=0){ function check_cheater($userid, $torrentid, $uploaded, $downloaded, $anctime, $seeders=0, $leechers=0){
global $cheaterdet_security,$nodetect_security, $CURUSER; global $cheaterdet_security,$nodetect_security, $CURUSER;
public/announce.php
+11 -9
View File
@@ -5,7 +5,6 @@ require ROOT_PATH . 'include/core.php';
//1. BLOCK ACCESS WITH WEB BROWSERS AND CHEATS! //1. BLOCK ACCESS WITH WEB BROWSERS AND CHEATS!
$agent = $_SERVER["HTTP_USER_AGENT"] ?? ''; $agent = $_SERVER["HTTP_USER_AGENT"] ?? '';
block_browser(); block_browser();
//2. GET ANNOUNCE VARIABLES //2. GET ANNOUNCE VARIABLES
// get string type passkey, info_hash, peer_id, event, ip from client // get string type passkey, info_hash, peer_id, event, ip from client
foreach (array("passkey","info_hash","peer_id","event") as $x) foreach (array("passkey","info_hash","peer_id","event") as $x)
@@ -30,6 +29,7 @@ $torrentNotExistsKey = "torrent_not_exists";
$authKeyInvalidKey = "authkey_invalid"; $authKeyInvalidKey = "authkey_invalid";
$passkeyInvalidKey = "passkey_invalid"; $passkeyInvalidKey = "passkey_invalid";
$isReAnnounce = false; $isReAnnounce = false;
$userAuthenticateKey = "";
if (!empty($_GET['authkey'])) { if (!empty($_GET['authkey'])) {
$authkey = $_GET['authkey']; $authkey = $_GET['authkey'];
$parts = explode("|", $authkey); $parts = explode("|", $authkey);
@@ -37,7 +37,7 @@ if (!empty($_GET['authkey'])) {
err("authkey format error"); err("authkey format error");
} }
$authKeyTid = $parts[0]; $authKeyTid = $parts[0];
$authKeyUid = $parts[1]; $authKeyUid = $userAuthenticateKey = $parts[1];
$subAuthkey = sprintf("%s|%s", $authKeyTid, $authKeyUid); $subAuthkey = sprintf("%s|%s", $authKeyTid, $authKeyUid);
//check ReAnnounce //check ReAnnounce
$lockParams = ['torrent_user' => $subAuthkey]; $lockParams = ['torrent_user' => $subAuthkey];
@@ -49,10 +49,11 @@ if (!empty($_GET['authkey'])) {
if (!$redis->set($lockKey, TIMENOW, ['nx', 'ex' => 20])) { if (!$redis->set($lockKey, TIMENOW, ['nx', 'ex' => 20])) {
$isReAnnounce = true; $isReAnnounce = true;
} }
if (!$isReAnnounce && !$redis->set($subAuthkey, TIMENOW, ['nx', 'ex' => 60])) { $reAnnounceCheckByAuthKey = "reAnnounceCheckByAuthKey:$subAuthkey";
if (!$isReAnnounce && !$redis->set($reAnnounceCheckByAuthKey, TIMENOW, ['nx', 'ex' => 60])) {
$msg = "Request too frequent(a)"; $msg = "Request too frequent(a)";
do_log("[ANNOUNCE] $msg"); do_log(sprintf("[ANNOUNCE] %s key: %s already exists, value: %s", $msg, $reAnnounceCheckByAuthKey, TIMENOW));
err($msg); warn($msg);
} }
if ($redis->get("$authKeyInvalidKey:$authkey")) { if ($redis->get("$authKeyInvalidKey:$authkey")) {
$msg = "Invalid authkey"; $msg = "Invalid authkey";
@@ -60,7 +61,7 @@ if (!empty($_GET['authkey'])) {
err($msg); err($msg);
} }
} elseif (!empty($_GET['passkey'])) { } elseif (!empty($_GET['passkey'])) {
$passkey = $_GET['passkey']; $passkey = $userAuthenticateKey = $_GET['passkey'];
if ($redis->get("$passkeyInvalidKey:$passkey")) { if ($redis->get("$passkeyInvalidKey:$passkey")) {
$msg = "Passkey invalid"; $msg = "Passkey invalid";
do_log("[ANNOUNCE] $msg"); do_log("[ANNOUNCE] $msg");
@@ -84,10 +85,11 @@ if ($redis->get("$torrentNotExistsKey:$info_hash")) {
do_log("[ANNOUNCE] $msg"); do_log("[ANNOUNCE] $msg");
err($msg); err($msg);
} }
if (!$isReAnnounce && !$redis->set(sprintf('%s:%s', $userid, $info_hash), TIMENOW, ['nx', 'ex' => 60])) { $torrentReAnnounceKey = sprintf('reAnnounceCheckByPasskey:%s:%s', $userAuthenticateKey, $info_hash);
if (!$isReAnnounce && !$redis->set($torrentReAnnounceKey, TIMENOW, ['nx', 'ex' => 60])) {
$msg = "Request too frequent(h)"; $msg = "Request too frequent(h)";
do_log("[ANNOUNCE] $msg"); do_log(sprintf("[ANNOUNCE] %s key: %s already exists, value: %s", $msg, $torrentReAnnounceKey, TIMENOW));
err($msg); warn($msg);
} }