From 7fc3addf1b2796998fe0350cd4c5d7513612b1ba Mon Sep 17 00:00:00 2001
From: Christoph Burschka
Date: Tue, 30 Oct 2012 02:45:21 +0100
Subject: Initial checkin

---
 classes/JabberAuth.php      | 90 +++++++++++++++++++++++++++++++++++++++++++++
 classes/JabberAuthPhpBB.php | 38 +++++++++++++++++++
 2 files changed, 128 insertions(+)
 create mode 100644 classes/JabberAuth.php
 create mode 100644 classes/JabberAuthPhpBB.php

(limited to 'classes')

diff --git a/classes/JabberAuth.php b/classes/JabberAuth.php
new file mode 100644
index 0000000..f649889
--- /dev/null
+++ b/classes/JabberAuth.php
@@ -0,0 +1,90 @@
+<?php
+// Arancaytar, October 2012
+// This is a general PHP implementation of the ejabberd auth protocol.
+
+abstract class JabberAuth {
+  var $running;
+
+  abstract function isuser($username, $server);
+  abstract function auth($username, $server, $password);
+  abstract function setpass($username, $server, $password);
+  abstract function tryregister($username, $server, $password);
+  abstract function removeuser($username, $server);
+
+  function init() {
+    $this->stdin = fopen('php://stdin', 'r');
+    $this->stdout = fopen('php://stdout', 'w');
+    $this->logfile = fopen($this->logpath . 'activity-' . date('Y-m-d') . '.log', 'a');
+    $this->running = TRUE;
+  }
+
+  function stop() {
+    $this->log("Stopping...");
+    $this->running = FALSE;
+  }
+
+  function run() {
+    while ($this->running) {
+      $data = $this->read();
+      if ($data) {
+        $result = $this->execute($data);
+        $this->write((int)$result);
+      }
+    }
+    $this->log("Stopped");
+  }
+
+  function read() {
+    $input = fread($this->stdin, 2);
+    if (!$input) {
+      return $this->stop();
+    }
+
+    $input = unpack('n', $input);
+    $length = $input[1];
+    if($length > 0) {
+      $this->log("Reading $length bytes...");
+      $data = fread($this->stdin, $length);
+      return $data;
+    }
+  }
+
+  function write($data) {
+    $this->log("OUT: $data");
+    fwrite($this->stdout, pack("nn", 2, $data));
+  }
+
+  function log($data) {
+    fwrite($this->logfile, sprintf("%s [%d] - %s\n", date('Y-m-d H:i:s'), getmypid(), $data));
+  }
+
+  function execute($data) {
+    $args = explode(':', $data);
+    $command = array_shift($args);
+    // Only log the username for security.
+    $this->log("Executing $command on {$args[0]}");
+
+    switch ($command) {
+      case 'isuser':
+        list($username, $server) = $args;
+        return $this->isuser($username, $server);
+      case 'auth':
+        list($username, $server, $password) = $args;
+        return $this->auth($username, $server, $password);
+      case 'setpass':
+        list($username, $server, $password) = $args;
+        return $this->setpass($username, $server, $password);
+      case 'tryregister':
+        list($username, $server, $password) = $args;
+        return $this->tryregister($username, $server, $password);
+      case 'removeuser':
+        list($username, $server) = $args;
+        return $this->removeuser($username, $server);
+      case 'removeuser3':
+        list($username, $server, $password) = $args;
+        return $this->auth($username, $server, $password) && $this->removeuser($username, $password);
+      default:
+        $this->stop();
+    }
+  }
+}
diff --git a/classes/JabberAuthPhpBB.php b/classes/JabberAuthPhpBB.php
new file mode 100644
index 0000000..e60cbae
--- /dev/null
+++ b/classes/JabberAuthPhpBB.php
@@ -0,0 +1,38 @@
+<?php
+
+class JabberAuthPhpBB extends JabberAuth {
+  var $auth;
+  var $db;
+  
+  function __construct($auth, $db, $logpath) {
+    $this->logpath = $logpath;
+    parent::init();
+    $this->auth = $auth;
+    $this->db = $db;
+  }
+
+  function isuser($username, $server) {
+    $username_clean = utf8_clean_string($username);
+    $row = $this->db->sql_fetchrow($this->db->sql_query('SELECT username FROM ' . USERS_TABLE . ' WHERE username_clean = ' . "'" . $this->db->sql_escape($username_clean) . "'" . ';'));
+    return !empty($row);
+  }
+
+  function auth($username, $server, $password) {
+    $result = $this->auth->login($username, $password);
+    return $result['status'] == LOGIN_SUCCESS;
+  }
+  
+  // The following functions are disabled. This script will not change the phpBB user database.
+  
+  function setpass($username, $server, $password) {
+    return FALSE;
+  }
+
+  function tryregister($username, $server, $password) {
+    return FALSE;
+  }
+
+  function removeuser($username, $server) {
+    return FALSE;
+  }
+}
-- 
cgit v1.1