110 lines
3.0 KiB
PHP
110 lines
3.0 KiB
PHP
<?php
|
|
|
|
set_time_limit(0);
|
|
ob_implicit_flush();
|
|
ignore_user_abort(true);
|
|
@ini_set("expose_php", "off");
|
|
header_remove();
|
|
date_default_timezone_set("Asia/Shanghai");
|
|
header("Access-Control-Allow-Origin: *");
|
|
header("Content-type: text/plain; charset=utf-8");
|
|
header("Cache-Control: no-store, max-age=0, must-revalidate");
|
|
|
|
error_reporting(0);
|
|
error_reporting(E_ALL);
|
|
|
|
|
|
require_once(__DIR__."/phplib/libutil.php");
|
|
require_once(__DIR__."/phplib/libcustomerrorgen.php");
|
|
require_once(__DIR__."/phplib/libteamtokenverifier.php");
|
|
require_once(__DIR__."/phplib/libteaminfo.php");
|
|
require_once(__DIR__."/phplib/libteamhashgen.php");
|
|
require_once(__DIR__."/phplib/libchallengelist.php");
|
|
require_once(__DIR__."/phplib/libattachmentmaker.php");
|
|
require_once(__DIR__."/phplib/libtemplate_replace_anchor.php");
|
|
|
|
|
|
$query=query2param();
|
|
|
|
if($query===false) {
|
|
gen_error_400("query string not found.");
|
|
exit;
|
|
}
|
|
|
|
if(!array_key_exists("game", $query)||gettype($query["game"])!="string"||strlen($query["game"])<=0) {
|
|
gen_error_400("key \"game\" not found or is empty, or has an invalid type.");
|
|
exit;
|
|
}
|
|
|
|
if(!array_key_exists("action", $query)||gettype($query["action"])!="string") {
|
|
gen_error_400("key \"action\" not found or has an invalid type. use 'help' to view help");
|
|
exit;
|
|
}
|
|
|
|
if(!array_key_exists("ttoken", $query)||gettype($query["ttoken"])!="string"||strlen($query["ttoken"])<=0) {
|
|
gen_error_400("key \"ttoken\" not found or is empty, or has an invalid type.");
|
|
exit;
|
|
}
|
|
|
|
$action=$query["action"];
|
|
$action=explode(",", $action);
|
|
|
|
//verify the [game, team-hash] pair
|
|
|
|
require(__DIR__."/phplib/libvar_gsec.php");
|
|
|
|
$game=$query["game"];
|
|
$team_token=$query["ttoken"];
|
|
|
|
if(!array_key_exists($game, $gsecret_l)) {
|
|
gen_error_400("game '".$game."' is not found in config file.");
|
|
exit;
|
|
}
|
|
|
|
$ginfo=$gsecret_l[$game];
|
|
unset($gsecret_l);
|
|
|
|
if(!verify_team_token($ginfo["gpub"], $team_token)) {
|
|
gen_error_400("the team token provided is not valid: ".$team_token);
|
|
exit;
|
|
}
|
|
|
|
$team_id=explode(":", $team_token)[0];
|
|
$team_id="team_".$team_id;
|
|
|
|
//require files depends on the request
|
|
//$action, $game, $ginfo, $team_id, $team_token is set
|
|
|
|
if($action[0]=="user-panel") {
|
|
require(__DIR__."/incl_user_panel.php");
|
|
exit;
|
|
}
|
|
|
|
if($action[0]=="team-info") {
|
|
require(__DIR__."/incl_get_team_info.php");
|
|
exit;
|
|
}
|
|
|
|
if($action[0]=="challenge-list") {
|
|
require(__DIR__."/incl_challenge_list.php");
|
|
exit;
|
|
}
|
|
|
|
if($action[0]=="attachment-dl") {
|
|
require(__DIR__."/incl_attachment_dl.php");
|
|
exit;
|
|
}
|
|
|
|
if($action[0]=="help") {
|
|
echo "notice: use comma(',') to split args\n";
|
|
echo "all available commands:\n";
|
|
echo " user-panel: display a interactive content for user\n";
|
|
echo " team-info: show your team info as json\n";
|
|
echo " challenge-list: list all challenges as json which are defined internally\n";
|
|
echo " attachment-dl <cid>: download attachment for challenge <cid>, or interact with it\n";
|
|
exit;
|
|
}
|
|
|
|
gen_error_400("unknown action '".$action[0]."'. use 'help' to view help");
|
|
exit;
|