summaryrefslogtreecommitdiff
path: root/stamp/common.php
diff options
context:
space:
mode:
Diffstat (limited to 'stamp/common.php')
-rw-r--r--stamp/common.php151
1 files changed, 151 insertions, 0 deletions
diff --git a/stamp/common.php b/stamp/common.php
new file mode 100644
index 0000000..ff814dd
--- /dev/null
+++ b/stamp/common.php
@@ -0,0 +1,151 @@
+<? /*
+ LibreSSL - CAcert web application
+ Copyright (C) 2004-2008 CAcert Inc.
+
+ This program is free software; you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation; version 2 of the License.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more details.
+
+ You should have received a copy of the GNU General Public License
+ along with this program; if not, write to the Free Software
+ Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
+*/
+
+ include_once("/www/includes/general.php");
+
+ function clean($key)
+ {
+ return(mysql_real_escape_string(strip_tags(trim($_REQUEST[$key]))));
+ }
+
+ function checkhostname($ref)
+ {
+ $ref = trim($ref);
+ if($ref[count($ref)-1] == "." || $ref[count($ref)-1] == ":")
+ $ref = substr($ref, 0, -1);
+
+ $stampid = 0;
+ $query = "select * from `stampcache` where `hostname`='$ref'";
+ $res = mysql_query($query);
+ if(mysql_num_rows($res) > 0)
+ {
+ $row = mysql_fetch_assoc($res);
+ if($row['cacheexpire'] >= date("U"))
+ return(array($row['valid'], $row));
+ else {
+ if($row['certid'] > 0)
+ {
+ if($row['org'] == 0)
+ $query = "select * from `domaincerts` where `id`='$row[certid]' and `expire`>NOW() and `revoked`=0";
+ else
+ $query = "select * from `orgdomaincerts` where `id`='$row[certid]' and `expire`>NOW() and `revoked`=0";
+ if($_REQUEST['debug'] == 1)
+ echo $query."<br>\n";
+ $res = mysql_query($query);
+ if(mysql_num_rows($res) > 0)
+ {
+ $query = "update `stampcache` set `cacheexpire`='".(date("U")+600)."' where `id`='$row[id]'";
+ if($_REQUEST['debug'] == 1)
+ echo $query."<br>\n";
+ mysql_query($query);
+ return(array($row['valid'], $row));
+ }
+ }
+ $stampid = $row['id'];
+ }
+ }
+
+ $query = "select *,`domaincerts`.`id` as `certid`,`domaincerts`.`created` as `issued` from `domlink`,`domains`,`domaincerts`
+ where `domlink`.`domid`=`domains`.`id` and `domlink`.`certid`=`domaincerts`.`id` and
+ `domaincerts`.`revoked`=0 and `domaincerts`.`expire` > NOW() and
+ (`domaincerts`.`subject` like '%=DNS:$ref/%' OR `domaincerts`.`subject` like '%=$ref/%' OR
+ `domaincerts`.`subject` like '%=DNS:$ref' OR `domaincerts`.`subject` like '%=$ref')
+ group by `domaincerts`.`id` order by `domaincerts`.`id`";
+ if($_REQUEST['debug'] == 1)
+ echo $query."<br>\n";
+ $res = mysql_query($query);
+ if(mysql_num_rows($res) <= 0)
+ {
+ $bits = explode(".", $ref);
+ for($i = 1; $i < count($bits); $i++)
+ {
+ if($ref2 != "")
+ $ref2 .= ".";
+ $ref2 .= $bits[$i];
+ }
+ $query = "select *,`domaincerts`.`id` as `certid`,`domaincerts`.`created` as `issued` from `domlink`,`domains`,`domaincerts`
+ where `domlink`.`domid`=`domains`.`id` and `domlink`.`certid`=`domaincerts`.`id` and
+ `domaincerts`.`revoked`=0 and `domaincerts`.`expire` > NOW() and
+ (`domaincerts`.`subject` like '%=DNS:$ref/%' or `domaincerts`.`subject` like '%=DNS:*.$ref2/%' OR
+ `domaincerts`.`subject` like '%=DNS:$ref' or `domaincerts`.`subject` like '%=DNS:*.$ref2' OR
+ `domaincerts`.`subject` like '%=$ref/%' or `domaincerts`.`subject` like '%=*.$ref2/%' OR
+ `domaincerts`.`subject` like '%=$ref' or `domaincerts`.`subject` like '%=*.$ref2')
+ group by `domaincerts`.`id` order by `domaincerts`.`id`";
+ if($_REQUEST['debug'] == 1)
+ echo $query."<br>\n";
+ $res = mysql_query($query);
+ if(mysql_num_rows($res) <= 0)
+ {
+ $query = "select *,`orgdomaincerts`.`id` as `certid`,`orgdomaincerts`.`created` as `issued` from `orgdomaincerts`,`orgdomlink`,`orgdomains` where
+ (`orgdomaincerts`.`subject` like '%=DNS:$ref/%' or `orgdomaincerts`.`subject` like '%=DNS:*.$ref2/%' OR
+ `orgdomaincerts`.`subject` like '%=DNS:$ref' or `orgdomaincerts`.`subject` like '%=DNS:*.$ref2' OR
+ `orgdomaincerts`.`subject` like '%=$ref/%' or `orgdomaincerts`.`subject` like '%=*.$ref2/%' OR
+ `orgdomaincerts`.`subject` like '%=$ref' or `orgdomaincerts`.`subject` like '%=*.$ref2') AND
+ `orgdomaincerts`.`id`=`orgdomlink`.`orgcertid` and `orgdomlink`.`orgdomid`=`orgdomains`.`id` and
+ `orgdomaincerts`.`revoked`=0 and `orgdomaincerts`.`expire` > NOW()
+ group by `orgdomaincerts`.`id` order by `orgdomaincerts`.`id`";
+ if($_REQUEST['debug'] == 1)
+ echo $query."<br>\n";
+ $res = mysql_query($query);
+ if(mysql_num_rows($res) <= 0)
+ {
+ $invalid = 1;
+ } else {
+ $org = 1;
+ }
+ }
+ }
+
+ if($invalid == 0)
+ {
+ $cert = mysql_fetch_assoc($res);
+ if($org == 0)
+ {
+ $query = "SELECT *, sum(`points`) AS `total` FROM `users`, `notary` WHERE `users`.`id` = '$cert[memid]' AND
+ `notary`.`to` = `users`.`id` and `notary`.`when` <= '$cert[issued]' GROUP BY `notary`.`to`";
+ $user = mysql_fetch_assoc(mysql_query($query));
+ } else {
+ $query = "select * from `orginfo` where `id`='$cert[orgid]'";
+ $orgi = mysql_fetch_assoc(mysql_query($query));
+ }
+
+ if($stampid <= 0)
+ {
+ $query = "insert into `stampcache` set `certid`='$cert[certid]',`cacheexpire`='".(date("U")+600)."',`issued`='$cert[issued]',
+ `expire`='$cert[expire]',`subject`='$cert[subject]',`hostname`='$ref',`org`='$org',`points`='$user[total]',
+ `O`='$orgi[O]',`L`='$orgi[L]',`ST`='$orgi[ST]',`C`='$orgi[C]',`valid`='$invalid'";
+ } else {
+ $query = "update `stampcache` set `certid`='$cert[certid]',`cacheexpire`='".(date("U")+600)."',`issued`='$cert[issued]',
+ `expire`='$cert[expire]',`subject`='$cert[subject]',`hostname`='$ref',`org`='$org',`points`='$user[total]',
+ `O`='$orgi[O]',`L`='$orgi[L]',`ST`='$orgi[ST]',`C`='$orgi[C]',`valid`='$invalid' where `id`='$stampid'";
+ }
+ mysql_query($query);
+ } else if($stampid > 0) {
+ mysql_query("update `stampcache` set `cacheexpire`='".(date("U")+600)."' where `id`='$stampid'");
+ } else {
+ $query = "insert into `stampcache` set `cacheexpire`='".(date("U")+600)."',`hostname`='$ref',`valid`='$invalid'";
+ mysql_query($query);
+ }
+
+ $arr = array("issued" => $cert['issued'], "expire" => $cert['expire'], "subject" => $cert['subject'], "hostname" => $ref,
+ "org" => $org, "points" => $user['total'], "O" => $orgi['O'], "L" => $orgi['L'], "ST" => $orgi['ST'],
+ "C" => $orgi['C']);
+
+ return(array($invalid, $arr));
+ }
+?>