source: extensions/whois_online/online.php @ 5954

<?php

if (!defined('PHPWG_ROOT_PATH')) die('Hacking attempt!');
global $conf, $conf_whois, $prefixeTable;
include_once(WHOIS_ONLINE_PATH.'include/wo_functions.inc.php');

define('ONLINE_LEVEL', (100+$conf_whois['Delete level'])/100);
define('ONLINE_LIMIT', $conf_whois['Obsolete limit']);

/* Admin menus are always available */
add_event_handler('get_admin_plugin_menu_links', 'whois_add_icon' );
/* On Active */
if ($conf_whois['Active']) {
        $conf['Whois Online Update'] = true;
        add_event_handler('loc_begin_picture', 'whois_online_management');
        add_event_handler('loc_begin_index', 'whois_online_management');
        add_event_handler('register_user', 'whois_online_register');
        if ($conf_whois['Default display'] or (defined('IN_ADMIN') and IN_ADMIN)) add_event_handler('loc_begin_page_tail', 'whois_default_display' );
}


/*
                Main process: Analyze, set new values and prepare displayed values.
                
                Update on parameter...
*/
function whois_online_management()
{
        global $user, $conf, $conf_whois, $template, $page, $lang, $lang_info;
        load_language('plugin.lang', WHOIS_ONLINE_PATH);
        srand((float)time());

  pwg_debug('*********** start Online_management ***********');
        if (!isset($conf_whois['Active'])) $conf_whois = whois_online_conf();

        $online = whois_online_get_data();

        $global = $online[0];
        unset($online[0]);
        $sid = session_id();
        
        // Step 1 - Find the User and/or IP/session_id
        foreach ($online as $key => $record) {
                // 1st case: Same IP and same member (Proxy guests are viewed as one)
                if ($record['IP'] == $_SERVER['REMOTE_ADDR']
                        and $record['username'] == $user['username'] ) {
                                $visit = $record;
                                $v = $key;
                                break;
                }
                // 2nd case: Same session and user (No doubt)
                if ($record['session_id'] == $sid
                        and $record['username'] == $user['username'] ) {
                                $visit = $record; // Maybe a guest
                                if (!is_a_guest()) $visit['hidden_IP'] = 'true'; // Maybe Proxy or hidden IP
                                //$visit['IP'] = $_SERVER['REMOTE_ADDR']; 
                                $v = $key;
                                break;
                }
                // 3rd and last case: Same user_id
                if ($record['user_id'] == $user['id'] and !is_a_guest()) { // new IP and new session
                                $visit = $record;
                                $visit['hidden_IP'] = 'true'; /* Or Generic user or the user is using several connections */
                                //$visit['IP'] = $_SERVER['REMOTE_ADDR']; 
                                $v = $key;
                                break;
                }
        }

        // Step 2 - Assume a new comer
        if ( !isset($visit) ) {
                $visit = Array( 
                        'IP' => $_SERVER['REMOTE_ADDR'], // First known IP (Is that one true?)
                        'hidden_IP' => 'false', // supposed a fixed IP
                        'session_id' => $sid,
                        'user_id' => $user['id'],
                        'username' => $user['username'],
                        'delay' => 0,
                        'lang' => substr($lang_info['code'],0,2),
                        'permanent' => 'false', // False: delete after 72 Hours / True: delete after 90 days
                        'last_access' => time(), // Last access by this user
                        'elm_ids' => array_fill(0, 10, 0), // 10 last minutes + Last reference minute
                        'cat_ids' => array_fill(0, 12, 0), // 12 ranges (of 5 minutes) + ref
                        'tag_ids' => array_fill(0, 24, 0), // 24 hours + ref
                        'sch_ids' => array_fill(0, 14, 0), // 14 days + ref
                        'date' => date('Y-m-d'), // Futur usage
                        'elm_hits' => 0, 'pag_hits' => 0, // elements hits and pages hits by this user
                        'first_access_date' => date('Y-m-d'), // First access by this user
                        'dates' => Array(), // 5 last access dates
                );
                $online[] = $visit;
                $v = count($online);
        }

        // Step 3 - Monitor this access
        $base = script_basename();
        // Picture page
        if (isset($page['image_id']) and $base == 'picture') {
                whois_online_track($visit['elm_ids'], $page['image_id'],$visit['dates']);
                if (isset($page['tags']))
                whois_online_track($visit['tag_ids'], $page['image_id'],$visit['dates']);
                if (isset($page['search']))
                whois_online_track($visit['sch_ids'], $page['image_id'],$visit['dates']);
                $visit['elm_hits']++;
                $global['elm_hits']++;
        }
        // Category page
        if (isset($page['category']['id']) and $base == 'index')
                whois_online_track($visit['cat_ids'], $page['category']['id'],$visit['dates']);
        // Page index
        if (!isset($page['category']['id']) and !isset($page['image_id']))
                whois_online_track($visit['cat_ids'], '' ,$visit['dates']);
        $visit['pag_hits']++;
        $global['pag_hits']++;

        // Step 4 - Identify current range
        $current = floor(time() / 60);                  // minutes for Unix time origin
        $minute = $current % 10;                                                // (0-9) current minute
        $five = floor($current / 5);    // (0-11) last 5 minutes range
        $hour = floor($current / 60);   // (0-11) last hours
        $day = floor($current / 1440); // (0-13) last days
        if (isset($global['elm_ids'][10])) $old = $global['elm_ids'][10]; // previous minute (last one, or maybe 60 minutes ago or more).
        else $old = $current; /* Only the first time or prevent wrong changes */

        // Step 5 - Hits by range
        if ($current != $old) {
                $global['elm_ids'][11] = $global['elm_ids'][$minute];
                $raz = min($current-$old, 10);
        // 5.1 - $global['elm_ids'] ( hits by minute range )
                for ($i=0;$i<$raz;$i++) {
                        $global['elm_ids'][($minute+10-$i)%10] = 0;
                }
        // 5.2 - $global['cat_ids'] ( hits by 5 minutes range )
                if (isset($global['cat_ids'][12])) $oldfive = $global['cat_ids'][12];
                else $oldfive = floor($old / 5);
                $raz = min($five - $oldfive, 12);
                for ($i=0;$i<$raz;$i++) {
                        $global['cat_ids'][($five+12-$i)%12] = 0; // Reset in backside
                }
        // 5.3 - $global['tag_ids'] (hits by hours )
                if (count($global['tag_ids'])<25) $global['tag_ids'] = array_fill(0, 24, 0);
                if (isset($global['tag_ids'][24])) $oldhour = $global['tag_ids'][24];
                else $oldhour = floor($old / 60);
                $raz = min($hour - $oldhour, 24);
                for ($i=0;$i<$raz;$i++) {
                        $global['tag_ids'][($hour+24-$i)%24] = 0; // Reset in backside
                }
        // 5.4 - $global['sch_ids'] ( hits by days )
                if (isset($global['sch_ids'][14])) $oldday = $global['sch_ids'][14];
                else $oldday = floor($old / 1440);
                $raz = min($day - $oldday, 14);
                for ($i=0;$i<$raz;$i++) {
                        $global['sch_ids'][($day+14-$i)%14] = 0; // Reset in backside
                }
        }
        $global['elm_ids'][$minute]++;
        $global['cat_ids'][$five%12]++;
        $global['tag_ids'][$hour%12]++;
        $global['sch_ids'][$day%14]++;
  // !!! WARNING  !!! WARNING !!! WARNING !!! WARNING !!!
        $global['elm_ids'][10] = $current; // reference minute has changed
        $global['cat_ids'][12] = $five;
        $global['tag_ids'][24] = $hour;
        $global['sch_ids'][14] = $day;
  // !!! WARNING  !!! WARNING !!! WARNING !!! WARNING !!!

        // 5.5 - Add in previous
  if (!isset($global['any_previous'])) {
                pwg_query('ALTER TABLE ' . WHOIS_ONLINE_TABLE . 
                        ' ADD `same_previous` VARCHAR( 255 ) NOT NULL DEFAULT \'\'  AFTER `country`;');
                pwg_query('ALTER TABLE ' . WHOIS_ONLINE_TABLE . 
                        ' ADD `any_previous` VARCHAR( 255 ) NOT NULL DEFAULT \'\'  AFTER `country`;');
                pwg_query('ALTER TABLE ' . WHOIS_ONLINE_TABLE . 
                        ' ADD `user_agent` VARCHAR( 160 ) NOT NULL DEFAULT \'\'  AFTER `country`;');
        }

        $antiaspi = array(
    'diff' => '20 pages in 00:00:10' , // Banned for 20 access in 10 seconds or less
    'same' => '15 pages in 00:00:30' , // Banned for 15 access on the same page in 30 seconds or less
    'banned during' => '23:59:59' ,    // Banned time hh:mm:ss or any valid MySQL datetime expression 'YYYY-MM-DD HH:MM:SS'
    'only guest' => true ,             // True, registred members won't be banned
    'only picture' => false ,          // True, Check only on picture pages
    'allowed ip' => array()            // Allowed IP array (Bots, or your fixed IP)
  );
  if (isset($conf['antiaspi'])) $antiaspi = array_merge($antiaspi, $conf['antiaspi']);

        // For AntiAspi follow ANY PREVIOUS access
        $access = '0:';
        list($max_any, $maxtext) = explode(' pages in ', $antiaspi['diff']);
        $maxtime = whois_online_duration($maxtext);
        $prev='';
        $previous = (isset($visit['any_previous'])) ? explode(' ', $visit['any_previous']):Array();
        foreach ($previous as $v) {
                $old = explode(':', $v);
                $old[0] += $visit['delay']; 
                if ($old[0]<$maxtime) $prev .= $old[0].': ';
        }
        $prev = $access . ' ' . $prev;
        $prev = substr($prev, 0, -2);
        $visit['any_previous'] = $prev;
        // For AntiAspi follow ANY SAME PICTURE access
        $access = '0:';
        $same_elem = (isset($page['image_id'])) ? $page['image_id']:'0';
        list($max_same, $maxtext) = explode(' pages in ', $antiaspi['same']);
        $maxtime = whois_online_duration($maxtext);
        $access .= $same_elem . ':';
        $prev='';
        $previous = (isset($visit['same_previous'])) ? explode(' ', $visit['same_previous']):Array();
        foreach ($previous as $v) {
                $old = explode(':', $v);
                $old[0] += $visit['delay'];
                if ($old[0]<$maxtime and $old[1]==$same_elem) $prev .= $old[0].':'.$old[1].': ';
        }
        $prev = $access . ' ' . $prev;
        $prev = substr($prev, 0, -2);
        $visit['same_previous'] = $prev;
        
        // Check limits of $visit['any_previous'] and $visit['same_previous'] 
        // by 256 characters
        // by $max_any and by $max_same
        while (strlen($visit['any_previous'])>256) {
          $previous = explode(' ',$visit['any_previous']);
                $oldest = array_pop($previous);
                $visit['any_previous'] = implode(' ', $previous);
        }
        $ctr_any = count(explode(' ',$visit['any_previous']));
        while (strlen($visit['same_previous'])>256) {
          $previous = explode(' ',$visit['same_previous']);
                $oldest = array_pop($previous);
                $visit['same_previous'] = implode(' ', $previous);
        }
        $ctr_same = count(explode(' ',$visit['same_previous']));
        
        $visit['user_agent'] = substr($_SERVER['HTTP_USER_AGENT'],0,160);
        $Vip =& $visit['IP'];
        $visit['Allowed_SE'] = false;
  if (!empty($antiaspi['allowed ip']))
  {
    $allowed_ips = str_replace(array('.', '%'), array('\.', '.*?'), $antiaspi['allowed ip']);
    foreach ($allowed_ips as $ip)
    {
      if (preg_match("#" . $ip . "#", $Vip)) { $visit['Allowed_SE'] = true; break; }
    }
  }
        
        // Step 6 - Update (on Conf_Update and trace) and send trace to determine global tracing or not
        $dtrace = 0;
        if ($user['status'] == 'admin') $dtrace += $conf_whois['Administrators'];
        elseif ($user['status'] == 'webmaster') $dtrace += $conf_whois['Webmasters'];
        else $dtrace = 2;
        if ($conf['Whois Online Update'] and $dtrace > 0) whois_online_update($global, $visit, $dtrace);

        // Step 7 - Find your recent visits (These image_ids are presumely authorized)
        $my_ids = $visit['elm_ids'];
        sort($my_ids);
        unset($my_ids[0]);
        $url_visited = (count($my_ids)>0) ? make_index_url(array('list' => $my_ids)).'&amp;review':'';

        // Step 8 - Guest count and Member list
        $h24 = 0; $h1 = 0; $guest = 0;
        $list = array();
        $elm = array(); $excl = array(); // Get images_ids from all and from the current visitor
        foreach ($online as $k => $monit)
        {
                if ($user['id']==$monit['user_id']) $excl = $monit['elm_ids'];
                else $elm = array_merge($elm, $monit['elm_ids']);
                if ($monit['delay'] <= (24*3600)) $h24++;
                if ($monit['delay'] <= 3600) $h1++;
                // Less than 5 minutes: users are considered as still online...
                if ($monit['delay'] <= 300) {
                        if ($monit['user_id'] == $conf['guest_id']) $guest++;
                        else $list[] = $monit['username'];
                }
        }
        // The first (and current) access are not recorded in $online
        // As visitor you are not expecting your access to be already counted: Ok that the case
        // but you are expecting to see you as a member in the member list if you are: and there it is
        if ($visit['user_id'] != $conf['guest_id'] ) $list[] = $visit['username'];
        $list = array_unique($list);
        
        if (count($list) > $conf_whois['Users']['max']) {
                $conf_whois['Users']['max'] = count($list);
                $conf_whois['Users']['When'] = time();
                $conf['Whois Online'] = serialize($conf_whois);
                pwg_query('REPLACE INTO ' . CONFIG_TABLE . " (param,value,comment)
    VALUES ('Whois Online','". $conf['Whois Online'] ."','Whois Online configuration');");
        }

        // Step 9 - Review pictures viewed by others (all images except yours)
        $elm = array_diff( array_unique($elm), $excl );
        shuffle($elm);
        $elm = array_slice($elm,0,($conf['top_number']+50));
        sort($elm);
        array_shift($elm);
        $elm[] = 0; // Check if authorized pictures
        $query = 'SELECT DISTINCT(image_id)
  FROM '.IMAGE_CATEGORY_TABLE.'
    INNER JOIN '.IMAGES_TABLE.' ON id = image_id
  WHERE image_id IN ('.implode(',', $elm ).')
    '.get_sql_condition_FandF(
      array(
          'forbidden_categories' => 'category_id',
          'visible_categories' => 'category_id',
          'visible_images' => 'id'
        ), "\n  AND") . ';';
        $ids = array_from_query($query, 'image_id');
        shuffle($ids);
        $ids = array_slice($ids, 0, $conf['top_number']); // Keep some
        $url_someothers = (isset($ids[0])) ? make_index_url(array('list' => $ids)).'&amp;others':'';

        // Random page title change
        $url_type = pwg_get_session_var('whois_url_type', ''); /* previous review or others */
        $list_ids = pwg_get_session_var('whois_list_ids', ''); /* previous list/xx,yy,zz, ... */
        $list_section = (isset($page['section']) and $page['section'] == 'list') ? true:false;
        $same_ids = (isset($page['list']) and $page['list'] == $list_ids) ? true:false;
        if ($list_section and isset($_GET['review'])) {
                $url_type = 'Whois_review';
                $same_ids = true;
        }
        if ($list_section and isset($_GET['others'])) {
                $url_type = 'Whois_others';
                $same_ids = true;
        }
        if ($list_section and $same_ids and isset($page['list'])) $list_ids = $page['list'];
        else $url_type = ''; // Not the same list
        pwg_set_session_var('whois_list_ids', $list_ids);
        pwg_set_session_var('whois_url_type', $url_type);
        if ($url_type != '' and $list_section)
  $page['title'] = '<a href="'.duplicate_index_url(array('start'=>0)).'">'
                    .l10n($url_type).'</a>';

        
        // Step 10 - Prepare data to display
        $yesterday = ($day+13) % 14;
        $template->assign('Whois', array(
                'Total' => $global['pag_hits'],
                'Image' => $global['elm_hits'],
                'Other' => ($global['pag_hits']-$global['elm_hits']),
                'Current_minute' => $global['elm_ids'][$minute],
                'Previous_minute' => $global['elm_ids'][($minute+9) % 10],
                'Current_5mins' => $global['elm_ids'][$minute]
                                                                        + $global['elm_ids'][($minute+9) % 10]
                                                                        + $global['elm_ids'][($minute+8) % 10]
                                                                        + $global['elm_ids'][($minute+7) % 10]
                                                                        + $global['elm_ids'][($minute+6) % 10],
                'Current_10mins' => array_sum(array_slice($global['elm_ids'],0,10)),
                'Current_hour' => array_sum(array_slice($global['cat_ids'],0,12)),
                'Current_24h' => array_sum(array_slice($global['tag_ids'],0,24)),
                'Yesterday' => $global['sch_ids'][$yesterday],
                'Users_Last_day' => $h24,
                'Users_Last_hour' => $h1,
                'Guests' => $guest,
                'Online' => $list,
                'Review_url' => $url_someothers,
                'Their_ids' => $ids,
                'Seen_url' => $url_visited,
                'My_ids' => $my_ids,
                'Slideshow' => isset($_GET['slideshow']) ? true:false,
        ));
        $template->assign('Online', $global );

        pwg_debug('end Online_management');
}
?>