<?php
//////////////////////////////////////////////////////////////////
// Worker functions
if (function_exists("bcadd"))
{
function sqlAdd($left, $right)
{
return bcadd($left, $right,0);
}
function sqlSubtract($left, $right)
{
return bcsub($left, $right,0);
}
function sqlMultiply($left, $right)
{
return bcmul($left, $right,0);
}
function sqlDivide($left, $right)
{
return bcdiv($left, $right,0);
}
}
else // BC vs SQL math
{
// Uses the mysql database connection to perform string math. :)
// Used by byte counting functions
// No error handling as we assume nothing can go wrong. :|
function sqlAdd($left, $right)
{
$query = 'SELECT '.$left.'+'.$right;
$results = mysql_query($query) or showError("Database error.");
return mysql_result($results,0,0);
}
// Ditto
function sqlSubtract($left, $right)
{
$query = 'SELECT '.$left.'-'.$right;
$results = mysql_query($query) or showError("Database error");
return mysql_result($results,0,0);
}
function sqlDivide($left, $right)
{
$query = 'SELECT '.$left.'/'.$right;
$results = mysql_query($query) or showError("Database error");
return mysql_result($results,0,0);
}
function sqlMultiply($left, $right)
{
$query = 'SELECT '.$left.'*'.$right;
$results = mysql_query($query) or showError("Database error");
return mysql_result($results,0,0);
}
} // End of BC vs SQL
// Runs a query with no regard for the result
function quickQuery($query)
{
$results = @mysql_query($query);
if (!is_bool($results))
mysql_free_result($results);
else
return $results;
return true;
}
if(!function_exists('hex2bin'))
{
function hex2bin ($input, $assume_safe=true)
{
if ($assume_safe !== true && ! ((strlen($input) % 2) === 0 || preg_match ('/^[0-9a-f]+$/i', $input)))
return "";
return pack('H*', $input );
}
}
// Reports an error to the client in $message.
// Any other output will confuse the client, so please don't do that.
function showError($message, $log=false)
{
if ($log)
error_log("RivetTracker: Sent error ($message)");
echo "d14:failure reason".strlen($message).":$message"."e";
exit(0);
}
function errorMessage()
{
echo "<center><img src='images/important.png' border='0' class='icon' alt='Critical Message' title='Critical Message' /></center>\n<p class='error'>";
}
// Used by newtorrents.php
// Returns true/false, depending on if there were errors.
function makeTorrent($hash, $tolerate = false)
{
require("config.php"); //necessary to get the prefix value, require_once() doesn't seem to work :/
if (strlen($hash) != 40)
showError("makeTorrent: Received an invalid hash");
$result = true;
$query = "CREATE TABLE ".$prefix."x$hash (peer_id char(40) NOT NULL default '', bytes bigint NOT NULL default 0, ip char(50) NOT NULL default 'error.x', port smallint UNSIGNED NOT NULL default '0', status enum('leecher','seeder') NOT NULL, lastupdate int unsigned NOT NULL default 0, sequence int unsigned AUTO_INCREMENT NOT NULL, natuser enum('N', 'Y') not null default 'N', primary key(sequence), unique(peer_id)) DEFAULT CHARACTER SET utf8 DEFAULT COLLATE utf8_general_ci ENGINE = innodb";
if (!@mysql_query($query))
$result = false;
if (!$result && !$tolerate)
return false;
//peercaching is ALWAYS on
$query = "CREATE TABLE ".$prefix."y$hash (sequence int unsigned NOT NULL default 0, with_peerid char(101) NOT NULL default '', without_peerid char(40) NOT NULL default '', compact char(6) NOT NULL DEFAULT '', unique k (sequence)) DELAY_KEY_WRITE=1 CHECKSUM=0 DEFAULT CHARACTER SET utf8 DEFAULT COLLATE utf8_general_ci ENGINE = innodb";
mysql_query($query);
$query = "INSERT INTO ".$prefix."summary set info_hash='".$hash."', lastSpeedCycle=UNIX_TIMESTAMP()";
if (!@mysql_query($query))
$result = false;
return $result;
}
// Returns true if the torrent exists.
// Currently checks by locating the row in "summary"
function verifyTorrent($hash)
{
require("config.php"); //need prefix value...
$query = "SELECT COUNT(*) FROM ".$prefix."summary where info_hash='$hash'";
$results = mysql_query($query);
$res = mysql_result($results,0,0);
if ($res == 1)
return true;
return false;
}
function verifyHash($input)
{
if (strlen($input) === 40 && preg_match('/^[0-9a-f]+$/', $input))
return true;
else
return false;
}
// Returns info on one peer
function getPeerInfo($user, $hash)
{
require("config.php");
// If "trackerid" is set, let's try that
if (isset($GLOBALS["trackerid"]))
{
$query = "SELECT peer_id,bytes,ip,port,status,lastupdate,sequence FROM ".$prefix."x$hash WHERE sequence=${GLOBALS["trackerid"]}";
$results = mysql_query($query) or showError("Tracker error: invalid torrent");
$data = mysql_fetch_assoc($results);
if (!$data || $data["peer_id"] != $user)
{
// Damn, but don't crash just yet.
$query = "SELECT peer_id,bytes,ip,port,status,lastupdate,sequence FROM ".$prefix."x$hash WHERE peer_id='$user'";
$results = mysql_query($query) or showError("Tracker error: invalid torrent");
$data = mysql_fetch_assoc($results);
$GLOBALS["trackerid"] = $data["sequence"];
}
}
else
{
$query = "SELECT peer_id,bytes,ip,port,status,lastupdate,sequence FROM ".$prefix."x$hash WHERE peer_id='$user'";
$results = mysql_query($query) or showError("Tracker error: invalid torrent");
$data = mysql_fetch_assoc($results);
$GLOBALS["trackerid"] = $data["sequence"];
}
if (!($data))
return false;
return $data;
}
// Slight redesign of loadPeers
function getRandomPeers($hash, $where="")
{
require("config.php");
// Don't want to send a bad "num peers" for new seeds
if ($GLOBALS["NAT"])
$results = mysql_query("SELECT COUNT(*) FROM ".$prefix."x$hash WHERE natuser = 'N'");
else
$results = mysql_query("SELECT COUNT(*) FROM ".$prefix."x$hash");
$peercount = mysql_result($results, 0,0);
// ORDER BY RAND() is expensive. Don't do it when the load gets too high
if ($peercount < 500)
$query = "SELECT ".((isset($_GET["no_peer_id"]) && $_GET["no_peer_id"] == 1) ? "" : "peer_id,")."ip, port, status FROM ".$prefix."x$hash ".$where." ORDER BY RAND() LIMIT ${GLOBALS['maxpeers']}";
else
$query = "SELECT ".((isset($_GET["no_peer_id"]) && $_GET["no_peer_id"] == 1) ? "" : "peer_id,")."ip, port, status FROM ".$prefix."x$hash LIMIT ".@mt_rand(0, $peercount - $GLOBALS["maxpeers"]).", ${GLOBALS['maxpeers']}";
$results = mysql_query($query);
if (!$results)
return false;
$peerno = 0;
while ($return[] = mysql_fetch_assoc($results))
$peerno++;
array_pop ($return);
mysql_free_result($results);
$return['size'] = $peerno;
return $return;
}
// Deletes a peer from the system and performs all cleaning up
//
// $assumepeer contains the result of getPeerInfo, or false
// if we should grab it ourselves.
function killPeer($userid, $hash, $left, $assumepeer = false)
{
require("config.php");
if (!$assumepeer)
{
$peer = getPeerInfo($userid, $hash);
if (!$peer)
return;
if ($left != $peer["bytes"])
$bytes = sqlSubtract($peer["bytes"], $left);
else
$bytes = 0;
}
else
{
$bytes = 0;
$peer = $assumepeer;
}
quickQuery("DELETE FROM ".$prefix."x$hash WHERE peer_id='$userid'");
if (mysql_affected_rows() == 1)
{
//peercaching ALWAYS on
quickQuery("DELETE FROM ".$prefix."y$hash WHERE sequence=" . $peer["sequence"]);
if ($peer["status"] == "leecher")
summaryAdd("leechers", -1);
else
summaryAdd("seeds", -1);
if ($GLOBALS["countbytes"] && ((float)$bytes) > 0)
summaryAdd("dlbytes",$bytes);
if ($peer["bytes"] != 0 && $left == 0)
summaryAdd("finished", 1);
}
}
// Transfers bytes from "left" to "dlbytes" when a peer reports in.
function collectBytes($peer, $hash, $left)
{
require("config.php");
$peerid=$peer["peer_id"];
if (!$GLOBALS["countbytes"])
{
quickQuery("UPDATE ".$prefix."x$hash SET lastupdate=UNIX_TIMESTAMP() where " . (isset($GLOBALS["trackerid"]) ? "sequence='${GLOBALS["trackerid"]}'" : "peer_id='$peerid'"));
return;
}
$diff = sqlSubtract($peer["bytes"], $left);
quickQuery("UPDATE ".$prefix."x$hash set " . (($diff != 0) ? "bytes='$left'," : ""). " lastupdate=UNIX_TIMESTAMP() where " . (isset($GLOBALS["trackerid"]) ? "sequence='${GLOBALS["trackerid"]}'" : "peer_id='$peerid'"));
// Anti-negative clause
if (((float)$diff) > 0)
summaryAdd("dlbytes", $diff);
}
// Transmits the actual data to the peer. No other output is permitted if
// this function is called, as that would break BEncoding.
// I don't use the bencode library, so watch out! If you add data,
// rules such as dictionary sorting are enforced by the remote side.
function sendPeerList($peers)
{
echo "d";
echo "8:intervali".$GLOBALS["report_interval"]."e";
if (isset($GLOBALS["min_interval"]))
echo "12:min intervali".$GLOBALS["min_interval"]."e";
echo "5:peers";
$size=$peers["size"];
if (isset($_GET["compact"]) && $_GET["compact"] == '1')
{
$p = '';
for ($i=0; $i < $size; $i++)
$p .= pack("Nn", ip2long($peers[$i]['ip']), $peers[$i]['port']);
echo strlen($p).':'.$p;
}
else // no_peer_id or no feature supported
{
echo 'l';
for ($i=0; $i < $size; $i++)
{
echo "d2:ip".strlen($peers[$i]["ip"]).":".$peers[$i]["ip"];
if (isset($peers[$i]["peer_id"]))
echo "7:peer id20:".hex2bin($peers[$i]["peer_id"]);
echo "4:porti".$peers[$i]["port"]."ee";
}
echo "e";
}
if (isset($GLOBALS["trackerid"]))
{
// Now it gets annoying. trackerid is a string
echo "10:tracker id".strlen($GLOBALS["trackerid"]).":".$GLOBALS["trackerid"];
}
echo "e";
}
// Faster pass-through version of getRandompeers => sendPeerList
// It's the only way to use cache tables. In fact, it only uses it.
function sendRandomPeers($info_hash)
{
require("config.php");
$result = mysql_query("SELECT COUNT(*) FROM ".$prefix."y$info_hash");
$count = mysql_result($result, 0, 0);
if (isset($_GET["compact"]) && $_GET["compact"] == '1')
$column = "compact";
else if (isset($_GET["no_peer_id"]) && $_GET["no_peer_id"] == '1')
$column = "without_peerid";
else
$column = "with_peerid";
if ($count < $GLOBALS["maxpeers"])
$query = "SELECT $column FROM ".$prefix."y$info_hash";
else if ($count > 500)
{
do
{
$rand1 = mt_rand(0, $count-$GLOBALS["maxpeers"]);
$rand2 = mt_rand(0, $count-$GLOBALS["maxpeers"]);
} while (abs($rand1 - $rand2) < $GLOBALS["maxpeers"]/2);
$query = "(SELECT $column FROM ".$prefix."y$info_hash LIMIT $rand1, ".($GLOBALS["maxpeers"]/2). ") UNION (SELECT $column FROM ".$prefix."y$info_hash LIMIT $rand2, ".($GLOBALS["maxpeers"]/2). ")";
}
else
$query = "SELECT $column FROM ".$prefix."y$info_hash ORDER BY RAND() LIMIT ".$GLOBALS["maxpeers"];
echo "d";
echo "8:intervali".$GLOBALS["report_interval"]."e";
if (isset($GLOBALS["min_interval"]))
echo "12:min intervali".$GLOBALS["min_interval"]."e";
echo "5:peers";
$result = mysql_query($query);
if ($column == "compact")
{
echo (mysql_num_rows($result) * 6) . ":";
while ($row = mysql_fetch_row($result))
echo str_pad($row[0], 6, chr(32));
}
else
if ($column == "compact")
{
echo (mysql_num_rows($result) * 18) . ":";
while ($row = mysql_fetch_row($result))
echo str_pad($row[0], 18, chr(32));
}
else
{
echo "l";
while ($row = mysql_fetch_row($result))
echo "d".$row[0]."e";
echo "e";
}
if (isset($GLOBALS["trackerid"]))
echo "10:tracker id".strlen($GLOBALS["trackerid"]).":".$GLOBALS["trackerid"];
echo "e";
}
// Returns a $peers array of all peers that have timed out (2* report interval seems fair
// for any reasonable report interval (900 or larger))
function loadLostPeers($hash, $timeout)
{
require("config.php"); //necessary for getting prefix value
$results = mysql_query("SELECT peer_id,bytes,ip,port,status,lastupdate,sequence from ".$prefix."x$hash where lastupdate < (UNIX_TIMESTAMP() - 2 * $timeout)");
$peerno = 0;
if (!$results)
return false;
while ($return[] = mysql_fetch_assoc($results))
$peerno++;
array_pop($return);
$return["size"] = $peerno;
mysql_free_result($results);
return $return;
}
function trashCollector($hash, $timeout)
{
require("config.php"); //need to grab prefix value...
if (isset($GLOBALS["trackerid"]))
unset($GLOBALS["trackerid"]);
if (!Lock($hash))
return;
$results = mysql_query("SELECT lastcycle FROM ".$prefix."summary WHERE info_hash='$hash'");
$lastcheck = (mysql_fetch_row($results));
// Check once every re-announce cycle
if (($lastcheck[0] + $timeout) < time())
{
$peers = loadLostPeers($hash, $timeout);
for ($i=0; $i < $peers["size"]; $i++)
killPeer($peers[$i]["peer_id"], $hash, $peers[$i]["bytes"]);
summaryAdd("lastcycle", "UNIX_TIMESTAMP()", true);
}
Unlock($hash);
}
// Attempts to aquire a lock by name.
// Returns true on success, false on failure
function Lock($hash, $time = 0)
{
$results = mysql_query("SELECT GET_LOCK('$hash', $time)");
$string = mysql_fetch_row($results);
if (strcmp($string[0], "1") == 0)
return true;
return false;
}
// Releases a lock. Ignores errors.
function Unlock($hash)
{
quickQuery("SELECT RELEASE_LOCK('$hash')");
}
// Returns true if the lock is available
function isFreeLock($lock)
{
if (Lock($lock, 0))
{
Unlock($lock);
return true;
}
return false;
}
/* Returns true if the user is firewalled, NAT'd, or whatever.
* The original tracker had its --nat_check parameter, so
* here is my version.
*
* This code has proven itself to be sufficiently correct,
* but will consume system resources when a lot of httpd processes
* are lingering around trying to connect to remote hosts.
* Consider disabling it under higher loads.
*/
function isFireWalled($hash, $peerid, $ip, $port)
{
// NAT checking off?
if (!$GLOBALS["NAT"])
return false;
$protocol_name = 'BitTorrent protocol';
$theError = "";
// Hoping 10 seconds will be enough
$fd = fsockopen($ip, $port, $errno, $theError, 10);
if (!$fd)
return true;
stream_set_timeout($fd, 5, 0);
fwrite($fd, chr(strlen($protocol_name)).$protocol_name.hex2bin("0000000000000000").
hex2bin($hash));
$data = fread($fd, strlen($protocol_name)+1+20+20+8); // ideally...
fclose($fd);
$offset = 0;
// First byte: strlen($protocol_name), then the protocol string itself
if (ord($data[$offset]) != strlen($protocol_name))
return true;
$offset++;
if (substr($data, $offset, strlen($protocol_name)) != $protocol_name)
return true;
$offset += strlen($protocol_name);
// 8 bytes reserved, ignore
$offset += 8;
// Download ID (hash)
if (substr($data, $offset, 20) != hex2bin($hash))
return true;
$offset+=20;
// Peer ID
if (substr($data, $offset, 20) != hex2bin($peerid))
return true;
return false;
}
// It's cruel, but if people abuse my tracker, I just might do it.
// It pretends to accept the torrent, and reports that you are the
// only person connected.
function evilReject($ip, $peer_id, $port)
{
// For those of you who are feeling evil, comment out this line.
showError("Torrent is not authorized for use on this tracker.");
$peers[0]["peer_id"] = $peer_id;
$peers[0]["ip"] = $ip;
$peers[0]["port"] = $port;
$peers["size"] = 1;
$GLOBALS["report_interval"] = 86400;
$GLOBALS["min_interval"] = 86000;
sendPeerList($peers);
exit(0);
}
function runSpeed($info_hash, $delta)
{
require("config.php");
//stick in our latest data before we calc it out
quickQuery("INSERT IGNORE INTO ".$prefix."timestamps (info_hash, bytes, delta, sequence) SELECT '$info_hash' AS info_hash, dlbytes, UNIX_TIMESTAMP() - lastSpeedCycle, NULL FROM ".$prefix."summary WHERE info_hash='$info_hash'");
// mysql blows sometimes so we have to read the data into php before updating it
$results = mysql_query('SELECT (MAX(bytes)-MIN(bytes))/SUM(delta), COUNT(*), MIN(sequence) FROM '.$prefix.'timestamps WHERE info_hash="'.$info_hash.'"' );
$data = mysql_fetch_row($results);
$results2 = mysql_query('SELECT '.$prefix.'summary.leechers FROM '.$prefix.'summary WHERE info_hash="'.$info_hash.'"');
$data2 = mysql_fetch_row($results2);
if ($data2[0] == 0) //if no leechers, speed is zero
$data[0] = 0;
$results3 = mysql_query("SELECT MIN(d1.bytes), MAX(d1.bytes) FROM (SELECT bytes FROM ".$prefix."timestamps WHERE info_hash='".$info_hash."' ORDER BY sequence DESC LIMIT 5) AS d1");
$data3 = mysql_fetch_row($results3);
//if the last 5 updates from clients show the same bytes, it's probably stalled, set speed to zero
if ($data3[0] == $data3[1])
$data[0] = 0;
summaryAdd("speed", $data[0], true);
summaryAdd("lastSpeedCycle", "UNIX_TIMESTAMP()", true);
// if we have more than 20 drop the rest
//if ($data[1] == 21)
//quickQuery("DELETE FROM timestamps WHERE info_hash='$info_hash' AND sequence=${data[2]}");
if ($data[1] > 21)
// This query requires MySQL 4.0.x, but should rarely be used.
quickQuery ('DELETE FROM '.$prefix.'timestamps WHERE info_hash="'.$info_hash.'" ORDER BY sequence LIMIT '.($data['1'] - 20));
}
// Schedules an update to the summary table. It gets so much traffic
// that we do all our changes at once.
// When called, the column $column for the current info_hash is incremented
// by $value, or set to exactly $value if $abs is true.
function summaryAdd($column, $value, $abs = false)
{
if (isset($GLOBALS["summaryupdate"][$column]))
{
if (!$abs)
$GLOBALS["summaryupdate"][$column][0] += $value;
else
showError("Tracker bug calling summaryAdd");
}
else
{
$GLOBALS["summaryupdate"][$column][0] = $value;
$GLOBALS["summaryupdate"][$column][1] = $abs;
}
}
//converts byte size to string format for display
function bytesToString($total_size)
{
if ($total_size < 1024) //dealing with bytes
return $total_size . " bytes";
elseif ($total_size < 1048576) //dealing with kilobytes
return round($total_size/1024, 2) . " KB";
elseif ($total_size < 1073741824) //dealing with megabytes
return round($total_size/1048576, 2) . " MB";
elseif ($total_size >= 1073741824) //dealing with gigabytes
return round($total_size/1073741824, 2) . " GB";
}
// Even if you're missing PHP 4.3.0, the MHASH extension might be of use.
// Someone was kind enought to email this code snippit in.
if (function_exists('mhash') && (!function_exists('sha1')) &&
defined('MHASH_SHA1'))
{
function sha1($str)
{
return bin2hex(mhash(MHASH_SHA1,$str));
}
}
//If magic quotes are on, returns the cleaned (no single quotes) output string
function clean($input)
{
if (get_magic_quotes_gpc())
return stripslashes($input);
return $input;
}
//If magic quotes are off, returns the added (single quotes) output string
function addquotes($input)
{
if (!get_magic_quotes_gpc())
return addslashes($input);
return $input;
}
//generic filter function for cleaning data
function filterData($data)
{
$data = trim(htmlentities(strip_tags($data)));
if (get_magic_quotes_gpc()) {
return stripslashes($data);
}
$data = mysql_real_escape_string($data);
return $data;
}
//generic filter function for character cleaning data
function filterChar($data)
{
$data = filter_var($data, FILTER_SANITIZE_FULL_SPECIAL_CHARS);
if (get_magic_quotes_gpc()) {
return stripslashes($data);
}
$data = mysql_real_escape_string($data);
return $data;
}
//generic filter function for validating integer and hex data
function filterInt($data)
{
$data = filter_var($data, FILTER_VALIDATE_INT, FILTER_FLAG_ALLOW_HEX);
if (get_magic_quotes_gpc()) {
return stripslashes($data);
}
$data = mysql_real_escape_string($data);
return $data;
}
//generic filter function for number cleaning data
function filterFloat($data)
{
$data = filter_var($data, FILTER_SANITIZE_NUMBER_FLOAT, FILTER_FLAG_ALLOW_FRACTION);
if (get_magic_quotes_gpc()) {
return stripslashes($data);
}
$data = mysql_real_escape_string($data);
return $data;
}
?>