pfSense

<?php

/*

 *

 * part of pfSense (https://www.pfsense.org)

 * Copyright (c) 2013-2016 Electric Sheep Fencing

 *

 * originally part of m0n0wall (http://m0n0.ch/wall)

 *

 * you may not use this file except in compliance with the License.

 * You may obtain a copy of the License at

 * distributed under the License is distributed on an "AS IS" BASIS,

 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

 * See the License for the specific language governing permissions and

 * limitations under the License.

	    && captiveportal_ha_is_node_in_backup_mode($cpzone)) {

		$username = $config['captiveportal'][$cpzone]['backwardsyncuser'];

		$password = $config['captiveportal'][$cpzone]['backwardsyncpassword'];

		$port = $config['system']['webgui']['port'];

		if (empty($port)) { // if port is empty lets rely on the protocol selection

			if ($config['system']['webgui']['protocol'] == "http") {

				$port = "80";

			} else {

				$port = "443";

			}

		}

	}

	if (!is_array($config['hasync']) ||

	    empty($config['hasync']['synchronizetoip']) ||

	    $carp_loop == true) {

	}

	$syncip = $config['hasync']['synchronizetoip'];

	$password = $config['hasync']['password'];

	if (empty($config['hasync']['username'])) {

		$username = "admin";

	} else {

		$username = $config['hasync']['username'];

	}

	/* if port is empty lets rely on the protocol selection */

	$port = $config['system']['webgui']['port'];

	if (empty($port)) {

		if ($config['system']['webgui']['protocol'] == "http") {

			$port = "80";

		} else {

			$port = "443";

		}

	}

	return true;

}

	$tickets_per_roll = array();

	$minutes_per_roll = array();

		foreach ($config['voucher'][$cpzone]['roll'] as $rollent) {

			$minutes_per_roll[$rollent['number']] = $rollent['minutes'];

		}

	}

	// split into an array. Useful for multiple vouchers given

	// Roll# and Ticket# using the external readvoucher binary

	foreach ($a_vouchers_received as $voucher) {

		$v = escapeshellarg($voucher);

			captiveportal_syslog("${voucher} invalid: Too short!");

		$_gb = exec("/usr/local/bin/voucher -c {$g['varetc_path']}/voucher_{$cpzone}.cfg -k {$g['varetc_path']}/voucher_{$cpzone}.public -- $v", $output);

		list($status, $roll, $nr) = explode(" ", $output[0]);

				if (!isset($active_vouchers[$roll])) {

				if (!empty($active_vouchers[$roll][$voucher])) {

					$active_dirty = true;

					unset($active_vouchers[$roll][$voucher]);

				}

				// check if voucher already marked as used

				$mask = 1 << ($nr % 8);

				// mark bit for this voucher as used

				/* Check if this voucher has any active sessions */

		} else {

	// Refresh active DBs

	if ($active_dirty == true) {

		$active_vouchers = array();

	// Write back the used DB's

	if (is_array($bitstring)) {

		foreach ($bitstring as $roll => $used) {

				foreach ($used as $u) {

				voucher_write_used_db($roll, base64_encode($used));

			}

		}

	}

	unlock($voucherlck);

	if (captiveportal_xmlrpc_sync_get_details($syncip, $syncport,

	    $syncuser, $syncpass, $carp_loop)) {

		$rpc_client = new pfsense_xmlrpc_client();

		$rpc_client->setConnectionData($syncip, $syncport, $syncuser, $syncpass);

		$rpc_client->set_noticefile("CaptivePortalVouchersSync");

		$arguments = array(

			'active_and_used_vouchers_bitmasks' => $bitstring,

			'active_vouchers' => $active_vouchers

		);

		$rpc_client->xmlrpc_method('captive_portal_sync',

			array(

				'op' => 'write_vouchers',

				'zone' => $cpzone,

				'arguments' => base64_encode(serialize($arguments))

			)

		);

	}

}

 * of active vouchers

 * but return a more verbose error and result message back

	$tickets_per_roll = array();

	$minutes_per_roll = array();

		foreach ($config['voucher'][$cpzone]['roll'] as $rollent) {

			$minutes_per_roll[$rollent['number']] = $rollent['minutes'];

		}

	}

	$test_result = array();     // used to display for voucher test option in GUI

	$total_minutes = 0;

	$first_voucher = "";

	$first_voucher_roll = 0;

	// go through all received vouchers, check their valid and extract

	// Roll# and Ticket# using the external readvoucher binary

	foreach ($a_vouchers_received as $voucher) {

		$v = escapeshellarg($voucher);

			$test_result[] = $voucher_err_text;

			captiveportal_syslog($voucher_err_text);

		if ($status == "OK") {

			if (!$first_voucher) {

				// store first voucher. Thats the one we give the timecredit

				$first_voucher = $voucher;

				$first_voucher_roll = $roll;

			}

				if (!isset($active_vouchers[$roll])) {

				if (!empty($active_vouchers[$roll][$voucher])) {

					$remaining = intval((($timestamp + (60*$minutes)) - time())/60);

				} else {

					// voucher not used. Check if ticket Id is on the roll (not too high)

					// and if the ticket is marked used.

					// check if voucher already marked as used

					$mask = 1 << ($nr % 8);

					if (ord($bitstring[$roll][$pos]) & $mask) {

						$test_result[] = $voucher_err_text;

						captiveportal_syslog($voucher_err_text);

						$error++;

					} else {

						// mark bit for this voucher as used

						$bitstring[$roll][$pos] = chr(ord($bitstring[$roll][$pos]) | $mask);

					}

				}

			} else {

				$test_result[] = $voucher_err_text;

				captiveportal_syslog($voucher_err_text);

		} else {

			// hmm, thats weird ... not what I expected

			$test_result[] = $voucher_err_text;

			captiveportal_syslog($voucher_err_text);

		}

	}

	if ($test) {

		if ($error) {

		unlock($voucherlck);

	}

	// Discussion: we could return the time remaining for good vouchers, but then

	// the user wouldn't know that he used at least one invalid voucher.

	if ($error) {

	}

	// Write back the used DB's

		foreach ($bitstring as $roll => $used) {

				foreach ($used as $u) {

				voucher_write_used_db($roll, base64_encode($used));

			}

		}

	}

	// and give that one all the time credit. This allows the user to logout and

	// log in later using just the first voucher. It also keeps username limited

	// to one voucher and that voucher shows the correct time credit in 'active vouchers'

	if (!empty($active_vouchers[$first_voucher_roll][$first_voucher])) {

		list($timestamp, $minutes) = explode(",", $active_vouchers[$first_voucher_roll][$first_voucher]);

	} else {

		$timestamp = time();    // new voucher

		$minutes = $total_minutes;

	}

	if (captiveportal_xmlrpc_sync_get_details($syncip, $syncport,

	    $syncuser, $syncpass, $carp_loop)) {

		$rpc_client = new pfsense_xmlrpc_client();

		$rpc_client->setConnectionData($syncip, $syncport, $syncuser, $syncpass);

		$rpc_client->set_noticefile("CaptivePortalVouchersSync");

		$arguments = array(

			'active_and_used_vouchers_bitmasks' => $bitstring,

			'active_vouchers' => array(

				$first_voucher_roll => $active_vouchers[$first_voucher_roll]

			)

		);

		$rpc_client->xmlrpc_method('captive_portal_sync',

			array(

				'op' => 'write_vouchers',

				'zone' => $cpzone,

				'arguments' => base64_encode(serialize($arguments))

			)

		);

	}

		foreach ($config['voucher'] as $voucherzone => $vcfg) {

				echo gettext("Enabling voucher support... ");

			}

	}

}

	$pubkey = base64_decode($config['voucher'][$cpzone]['publickey']);

	$fd = fopen("{$g['varetc_path']}/voucher_{$cpzone}.public", "w");

	if (!$fd) {

		return 1;

	}

	fwrite($fd, $pubkey);

	fclose($fd);

	@chmod("{$g['varetc_path']}/voucher_{$cpzone}.public", 0600);

	/* write config file used by voucher binary to decode vouchers */

	$fd = fopen("{$g['varetc_path']}/voucher_{$cpzone}.cfg", "w");

	if (!$fd) {

		printf(gettext("Error: cannot write voucher.cfg") . "\n");

		unlock($voucherlck);

		return 1;

	}

	fwrite($fd, "{$config['voucher'][$cpzone]['rollbits']},{$config['voucher'][$cpzone]['ticketbits']},{$config['voucher'][$cpzone]['checksumbits']},{$config['voucher'][$cpzone]['magic']},{$config['voucher'][$cpzone]['charset']}\n");

	fclose($fd);

	@chmod("{$g['varetc_path']}/voucher_{$cpzone}.cfg", 0600);

 */

function voucher_write_used_db($roll, $vdb) {

		fwrite($fd, $vdb . "\n");

		fclose($fd);

/* return assoc array of active vouchers with activation timestamp

function voucher_read_active_db($roll) {

	$active = array();

	$dirty = 0;

		$fd = fopen($file, "r");

		if ($fd) {

			while (!feof($fd)) {

				$line = trim(fgets($fd));

				if ($line) {

			}

			fclose($fd);

	}

	return $active;

/* store array of active vouchers back to DB */

function voucher_write_active_db($roll, $active) {

	$fd = fopen("{$g['vardb_path']}/voucher_{$cpzone}_active_$roll.db", "w");

	if ($fd) {

		foreach ($active as $voucher => $value) {

			fwrite($fd, "$voucher,$value\n");

		}

		fclose($fd);

	}

/* return how many vouchers are marked used on a roll */

function voucher_used_count($roll) {

	$bitstring = voucher_read_used_db($roll);

	$max = strlen($bitstring) * 8;

	$used = 0;

	for ($i = 1; $i <= $max; $i++) {

		// check if ticket already used or not.

		$pos = $i >> 3;            // divide by 8 -> octet

		$mask = 1 << ($i % 8);  // mask to test bit in octet

		if (ord($bitstring[$pos]) & $mask) {

			$used++;

		}

	}

	unset($bitstring);

	return $used;

function voucher_read_used_db($roll) {

	$vdb = "";

	$file = "{$g['vardb_path']}/voucher_{$cpzone}_used_$roll.db";

	if (file_exists($file)) {

		$fd = fopen($file, "r");

		if ($fd) {

			$vdb = trim(fgets($fd));

			fclose($fd);

		} else {

	}

	return base64_decode($vdb);

function voucher_unlink_db($roll) {

	@unlink("{$g['vardb_path']}/voucher_{$cpzone}_used_$roll.db");

	@unlink("{$g['vardb_path']}/voucher_{$cpzone}_active_$roll.db");

/* we share the log with captiveportal for now */

function voucher_log($priority, $message) {

	openlog("logportalauth", LOG_PID, LOG_LOCAL4);

function voucher_save_db_to_config() {

	if (is_array($config['voucher'])) {

			if (isset($config['voucher'][$zone]['enable']) && is_array($config['voucher'][$zone]['roll'])) {

				foreach ($config['voucher'][$zone]['roll'] as $key => $rollent) {

					// read_active_db will remove expired vouchers that are still active

					voucher_read_active_db($rollent['number']);

				}

			}

	}