2008-04-06 19:45:09 +00:00
|
|
|
<? /*
|
|
|
|
|
LibreSSL - CAcert web application
|
|
|
|
|
Copyright (C) 2004-2008 CAcert Inc.
|
|
|
|
|
|
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
|
|
|
it under the terms of the GNU General Public License as published by
|
|
|
|
|
the Free Software Foundation; version 2 of the License.
|
|
|
|
|
|
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
|
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
|
GNU General Public License for more details.
|
|
|
|
|
|
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
|
|
|
along with this program; if not, write to the Free Software
|
|
|
|
|
Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
|
|
|
|
|
*/
|
|
|
|
|
|
2007-02-23 22:43:07 +00:00
|
|
|
include_once("/www/includes/general.php");
|
|
|
|
|
|
|
|
|
|
function clean($key)
|
|
|
|
|
{
|
|
|
|
|
return(mysql_real_escape_string(strip_tags(trim($_REQUEST[$key]))));
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
function checkhostname($ref)
|
|
|
|
|
{
|
|
|
|
|
$ref = trim($ref);
|
|
|
|
|
if($ref[count($ref)-1] == "." || $ref[count($ref)-1] == ":")
|
|
|
|
|
$ref = substr($ref, 0, -1);
|
|
|
|
|
|
|
|
|
|
$stampid = 0;
|
|
|
|
|
$query = "select * from `stampcache` where `hostname`='$ref'";
|
|
|
|
|
$res = mysql_query($query);
|
|
|
|
|
if(mysql_num_rows($res) > 0)
|
|
|
|
|
{
|
|
|
|
|
$row = mysql_fetch_assoc($res);
|
|
|
|
|
if($row['cacheexpire'] >= date("U"))
|
|
|
|
|
return(array($row['valid'], $row));
|
|
|
|
|
else {
|
|
|
|
|
if($row['certid'] > 0)
|
|
|
|
|
{
|
|
|
|
|
if($row['org'] == 0)
|
|
|
|
|
$query = "select * from `domaincerts` where `id`='$row[certid]' and `expire`>NOW() and `revoked`=0";
|
|
|
|
|
else
|
|
|
|
|
$query = "select * from `orgdomaincerts` where `id`='$row[certid]' and `expire`>NOW() and `revoked`=0";
|
|
|
|
|
if($_REQUEST['debug'] == 1)
|
|
|
|
|
echo $query."<br>\n";
|
|
|
|
|
$res = mysql_query($query);
|
|
|
|
|
if(mysql_num_rows($res) > 0)
|
|
|
|
|
{
|
|
|
|
|
$query = "update `stampcache` set `cacheexpire`='".(date("U")+600)."' where `id`='$row[id]'";
|
|
|
|
|
if($_REQUEST['debug'] == 1)
|
|
|
|
|
echo $query."<br>\n";
|
|
|
|
|
mysql_query($query);
|
|
|
|
|
return(array($row['valid'], $row));
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
$stampid = $row['id'];
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
$query = "select *,`domaincerts`.`id` as `certid`,`domaincerts`.`created` as `issued` from `domlink`,`domains`,`domaincerts`
|
|
|
|
|
where `domlink`.`domid`=`domains`.`id` and `domlink`.`certid`=`domaincerts`.`id` and
|
|
|
|
|
`domaincerts`.`revoked`=0 and `domaincerts`.`expire` > NOW() and
|
|
|
|
|
(`domaincerts`.`subject` like '%=DNS:$ref/%' OR `domaincerts`.`subject` like '%=$ref/%' OR
|
|
|
|
|
`domaincerts`.`subject` like '%=DNS:$ref' OR `domaincerts`.`subject` like '%=$ref')
|
|
|
|
|
group by `domaincerts`.`id` order by `domaincerts`.`id`";
|
|
|
|
|
if($_REQUEST['debug'] == 1)
|
|
|
|
|
echo $query."<br>\n";
|
|
|
|
|
$res = mysql_query($query);
|
|
|
|
|
if(mysql_num_rows($res) <= 0)
|
|
|
|
|
{
|
|
|
|
|
$bits = explode(".", $ref);
|
|
|
|
|
for($i = 1; $i < count($bits); $i++)
|
|
|
|
|
{
|
|
|
|
|
if($ref2 != "")
|
|
|
|
|
$ref2 .= ".";
|
|
|
|
|
$ref2 .= $bits[$i];
|
|
|
|
|
}
|
|
|
|
|
$query = "select *,`domaincerts`.`id` as `certid`,`domaincerts`.`created` as `issued` from `domlink`,`domains`,`domaincerts`
|
|
|
|
|
where `domlink`.`domid`=`domains`.`id` and `domlink`.`certid`=`domaincerts`.`id` and
|
|
|
|
|
`domaincerts`.`revoked`=0 and `domaincerts`.`expire` > NOW() and
|
|
|
|
|
(`domaincerts`.`subject` like '%=DNS:$ref/%' or `domaincerts`.`subject` like '%=DNS:*.$ref2/%' OR
|
|
|
|
|
`domaincerts`.`subject` like '%=DNS:$ref' or `domaincerts`.`subject` like '%=DNS:*.$ref2' OR
|
|
|
|
|
`domaincerts`.`subject` like '%=$ref/%' or `domaincerts`.`subject` like '%=*.$ref2/%' OR
|
|
|
|
|
`domaincerts`.`subject` like '%=$ref' or `domaincerts`.`subject` like '%=*.$ref2')
|
|
|
|
|
group by `domaincerts`.`id` order by `domaincerts`.`id`";
|
|
|
|
|
if($_REQUEST['debug'] == 1)
|
|
|
|
|
echo $query."<br>\n";
|
|
|
|
|
$res = mysql_query($query);
|
|
|
|
|
if(mysql_num_rows($res) <= 0)
|
|
|
|
|
{
|
|
|
|
|
$query = "select *,`orgdomaincerts`.`id` as `certid`,`orgdomaincerts`.`created` as `issued` from `orgdomaincerts`,`orgdomlink`,`orgdomains` where
|
|
|
|
|
(`orgdomaincerts`.`subject` like '%=DNS:$ref/%' or `orgdomaincerts`.`subject` like '%=DNS:*.$ref2/%' OR
|
|
|
|
|
`orgdomaincerts`.`subject` like '%=DNS:$ref' or `orgdomaincerts`.`subject` like '%=DNS:*.$ref2' OR
|
|
|
|
|
`orgdomaincerts`.`subject` like '%=$ref/%' or `orgdomaincerts`.`subject` like '%=*.$ref2/%' OR
|
|
|
|
|
`orgdomaincerts`.`subject` like '%=$ref' or `orgdomaincerts`.`subject` like '%=*.$ref2') AND
|
|
|
|
|
`orgdomaincerts`.`id`=`orgdomlink`.`orgcertid` and `orgdomlink`.`orgdomid`=`orgdomains`.`id` and
|
|
|
|
|
`orgdomaincerts`.`revoked`=0 and `orgdomaincerts`.`expire` > NOW()
|
|
|
|
|
group by `orgdomaincerts`.`id` order by `orgdomaincerts`.`id`";
|
|
|
|
|
if($_REQUEST['debug'] == 1)
|
|
|
|
|
echo $query."<br>\n";
|
|
|
|
|
$res = mysql_query($query);
|
|
|
|
|
if(mysql_num_rows($res) <= 0)
|
|
|
|
|
{
|
|
|
|
|
$invalid = 1;
|
|
|
|
|
} else {
|
|
|
|
|
$org = 1;
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if($invalid == 0)
|
|
|
|
|
{
|
|
|
|
|
$cert = mysql_fetch_assoc($res);
|
|
|
|
|
if($org == 0)
|
|
|
|
|
{
|
|
|
|
|
$query = "SELECT *, sum(`points`) AS `total` FROM `users`, `notary` WHERE `users`.`id` = '$cert[memid]' AND
|
|
|
|
|
`notary`.`to` = `users`.`id` and `notary`.`when` <= '$cert[issued]' GROUP BY `notary`.`to`";
|
|
|
|
|
$user = mysql_fetch_assoc(mysql_query($query));
|
|
|
|
|
} else {
|
|
|
|
|
$query = "select * from `orginfo` where `id`='$cert[orgid]'";
|
|
|
|
|
$orgi = mysql_fetch_assoc(mysql_query($query));
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if($stampid <= 0)
|
|
|
|
|
{
|
|
|
|
|
$query = "insert into `stampcache` set `certid`='$cert[certid]',`cacheexpire`='".(date("U")+600)."',`issued`='$cert[issued]',
|
|
|
|
|
`expire`='$cert[expire]',`subject`='$cert[subject]',`hostname`='$ref',`org`='$org',`points`='$user[total]',
|
|
|
|
|
`O`='$orgi[O]',`L`='$orgi[L]',`ST`='$orgi[ST]',`C`='$orgi[C]',`valid`='$invalid'";
|
|
|
|
|
} else {
|
|
|
|
|
$query = "update `stampcache` set `certid`='$cert[certid]',`cacheexpire`='".(date("U")+600)."',`issued`='$cert[issued]',
|
|
|
|
|
`expire`='$cert[expire]',`subject`='$cert[subject]',`hostname`='$ref',`org`='$org',`points`='$user[total]',
|
|
|
|
|
`O`='$orgi[O]',`L`='$orgi[L]',`ST`='$orgi[ST]',`C`='$orgi[C]',`valid`='$invalid' where `id`='$stampid'";
|
|
|
|
|
}
|
|
|
|
|
mysql_query($query);
|
|
|
|
|
} else if($stampid > 0) {
|
|
|
|
|
mysql_query("update `stampcache` set `cacheexpire`='".(date("U")+600)."' where `id`='$stampid'");
|
|
|
|
|
} else {
|
|
|
|
|
$query = "insert into `stampcache` set `cacheexpire`='".(date("U")+600)."',`hostname`='$ref',`valid`='$invalid'";
|
|
|
|
|
mysql_query($query);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
$arr = array("issued" => $cert['issued'], "expire" => $cert['expire'], "subject" => $cert['subject'], "hostname" => $ref,
|
|
|
|
|
"org" => $org, "points" => $user['total'], "O" => $orgi['O'], "L" => $orgi['L'], "ST" => $orgi['ST'],
|
|
|
|
|
"C" => $orgi['C']);
|
|
|
|
|
|
|
|
|
|
return(array($invalid, $arr));
|
|
|
|
|
}
|
|
|
|
|
?>
|
