Initial commit

This commit is contained in:
2025-07-06 16:00:38 -07:00
commit 67d2fe9589
11 changed files with 957 additions and 0 deletions

View File

@@ -0,0 +1,36 @@
<?php
require __DIR__ . '/../config/general.php';
require __DIR__ . '/../incl/util.php';
setPlainHeader();
function isSupportedVersion($version) {
global $latestVersion;
if (!isset($latestVersion)) require __DIR__ . '/../config/general.php';
return $version === $latestVersion || $version === $latestBetaVersion;
}
function isAllowedVersion($version) {
global $allowedVersions;
if (!isset($allowedVersions)) require __DIR__ . '/../config/general.php';
return in_array($version, $allowedVersions);
}
function isAllowedDatabaseVersion($version) {
global $allowedDatabaseVersions;
if (!isset($allowedDatabaseVersions)) require __DIR__ . '/../config/general.php';
return in_array($version, $allowedDatabaseVersions);
}
$clientVersion = $_SERVER['HTTP_CLIENTVERSION'] ?? "0";
if (($_SERVER['HTTP_REQUESTER'] ?? "0") != "BerryDashClient") {
exitWithMessage("-1", false);
}
if (isSupportedVersion($clientVersion)) {
echo "1";
} else if (isAllowedVersion($clientVersion)) {
echo "3";
} else if (isAllowedVersion($clientVersion) && isAllowedDatabaseVersion($clientVersion)) {
echo "2";
} else {
echo "-1";
}

View File

@@ -0,0 +1,3 @@
<?php
require __DIR__ . '/../config/general.php';
echo $latestVersion;

101
database/loginAccount.php Normal file
View File

@@ -0,0 +1,101 @@
<?php
require __DIR__ . '/../incl/util.php';
setJsonHeader();
checkClientDatabaseVersion();
$conn = newConnection();
$postData = getPostData();
$request_username = $postData['username'];
$request_password = $postData['password'];
$request_currenthighscore = $postData['currentHighScore'] ?? 0;
$request_logintype = $postData['loginType'] ?? '0';
$stmt = $conn->prepare("SELECT * FROM users WHERE username = ?");
$stmt->bind_param("s", $request_username);
$stmt->execute();
$result = $stmt->get_result();
if ($result->num_rows > 0) {
while($row = $result->fetch_assoc()) {
if (password_verify($request_password, $row["password"])) {
$login_ip = getIPAddress();
$login_time = time();
$username = $row['username'];
$highscore = $row['highScore'];
$icon = $row['icon'];
$overlay = $row['overlay'];
$uid = $row['uid'];
$totalNormalBerries = $row['totalNormalBerries'];
$totalPoisonBerries = $row['totalPoisonBerries'];
$totalSlowBerries = $row['totalSlowBerries'];
$totalUltraBerries = $row['totalUltraBerries'];
$totalSpeedyBerries = $row['totalSpeedyBerries'];
$birdR = $row['birdR'];
$birdG = $row['birdG'];
$birdB = $row['birdB'];
$overlayR = $row['overlayR'];
$overlayG = $row['overlayG'];
$overlayB = $row['overlayB'];
$totalAttempts = $row['totalAttempts'];
$game_session_token = $row['game_session_token'];
if ($game_session_token == null || strlen(trim($game_session_token)) != 512) {
$game_session_token = bin2hex(random_bytes(256));
}
if ($request_currenthighscore > $row['highScore']) {
$stmt = $conn->prepare("UPDATE users SET highScore = ? WHERE uid = ?");
$stmt->bind_param("ii", $request_currenthighscore, $uid);
$stmt->execute();
$row['highScore'] = $request_currenthighscore;
}
$stmt = $conn->prepare("UPDATE users SET latest_ip = ?, game_session_token = ? WHERE uid = ?");
$stmt->bind_param("ssi", $login_ip, $game_session_token, $uid);
$stmt->execute();
if ($request_logintype == "0") {
echo encrypt(json_encode(["success" => true, "data" => [
"session" => (string)$game_session_token,
"username" => (string)$username,
"userid" => (string)$uid,
"highscore" => (string)$highscore,
"icon" => (int)$icon,
"overlay" => (int)$overlay,
"totalNormalBerries" => (string)$totalNormalBerries,
"totalPoisonBerries" => (string)$totalPoisonBerries,
"totalSlowBerries" => (string)$totalSlowBerries,
"totalUltraBerries" => (string)$totalUltraBerries,
"totalSpeedyBerries" => (string)$totalSpeedyBerries,
"totalAttempts" => (string)$totalAttempts,
"birdColor" => [
(int)$birdR,
(int)$birdG,
(int)$birdB
],
"overlayColor" => [
(int)$overlayR,
(int)$overlayG,
(int)$overlayB
]
]]));
} else if ($request_logintype == "1") {
echo encrypt(json_encode(["success" => true, "data" => [
"session" => $game_session_token,
"username" => $username,
"userid" => $uid
]]));
} else {
echo encrypt(json_encode(["success" => true]));
}
} else {
echo encrypt(json_encode(["success" => false, "message" => "Invalid username or password"]));
}
}
} else {
echo encrypt(json_encode(["success" => false, "message" => "Invalid username or password"]));
}
$stmt->close();
$conn->close();

View File

@@ -0,0 +1,52 @@
<?php
require __DIR__ . '/../incl/util.php';
setJsonHeader();
checkClientDatabaseVersion();
$conn = newConnection();
$postData = getPostData();
$request_username = $postData['username'] ?? '';
$request_password = $postData['password'] ?? '';
$request_email = $postData['email'] ?? '';
if (strlen($request_username) < 3 || strlen($request_username) > 16) {
exitWithMessage(json_encode(["success" => false, "message" => "Username must be 3-16 characters, letters and numbers only"]));
}
if (!preg_match('/^[a-zA-Z0-9]{3,16}$/', $request_username)) {
exitWithMessage(json_encode(["success" => false, "message" => "Username must be 3-16 characters, letters and numbers only"]));
}
if (!filter_var($request_email, FILTER_VALIDATE_EMAIL)) {
exitWithMessage(json_encode(["success" => false, "message" => "Email is invalid"]));
}
//if (!preg_match('/^[a-zA-Z0-9!@#$%^&*()_\-+=]{3,16}$/', $request_password)) {
// exitWithMessage(json_encode(["success" => false, "message" => "Password must have 8 characters, one number and one letter"]));
//}
$hashed_password = password_hash($request_password, PASSWORD_DEFAULT);
$game_session_token = bin2hex(random_bytes(256));
$stmt = $conn->prepare("SELECT * FROM users WHERE username = ? OR email = ?");
$stmt->bind_param("ss", $request_username, $request_email);
$stmt->execute();
$result = $stmt->get_result();
if ($result->num_rows > 0) {
exitWithMessage(json_encode(["success" => false, "message" => "Username or email already taken"]));
}
$register_ip = getIPAddress();
$register_time = time();
$stmt = $conn->prepare("INSERT INTO users (game_session_token, username, password, email, register_time, latest_ip) VALUES (?, ?, ?, ?, ?, ?)");
$stmt->bind_param("ssssis", $game_session_token, $request_username, $hashed_password, $request_email, $register_time, $register_ip);
$stmt->execute();
$stmt->close();
$conn->close();
echo encrypt(json_encode(["success" => true]));