View file vavok-1.5.3/include/antidos.php

<?php 
// (c) Aleksandar Vranešević - vavok.net
// modified: 22.07.2020. 0:44:08

if (empty($config_requri)) {
    $config_requri = "index.php";
} 
if (isset($_SERVER['HTTP_REFERER'])) {
    $http_referer = urldecode(strtok($_SERVER['HTTP_REFERER'], 'sid'));
} else {
    $http_referer = "No referer";
} 
if (isset($_SESSION['log'])) {
    $username = $_SESSION['log'];
} else {
    $username = 'Guest';
}

$ip = $users->find_ip();
$hostname = gethostbyaddr($ip);

if ($opendir = opendir(BASEDIR . "used/datados")) {

    while (false !== ($doslog = readdir($opendir))) {

        if ($doslog != "." and $doslog != "..") {

            $file_array_filemtime = @filemtime(BASEDIR . "used/datados/$doslog");

            if ($file_array_filemtime < (time() - 60)) {

                if (file_exists(BASEDIR . "used/datados/$doslog")) {
                    @unlink(BASEDIR . "used/datados/$doslog");
                }

            }

        }

    }

    $logfiles = BASEDIR . "used/datados/" . $ip . ".dat";

    if (file_exists($logfiles)) {

        $file_dos_time = file($logfiles);
        $file_dos_str = explode("|", $file_dos_time[0]);

        if ($file_dos_str[1] < ($config["siteTime"]-60)) {
            unlink($logfiles);
        }

    } 

    $write = '|' . $config["siteTime"] . '|Time: ' . date("Y-m-d / H:i:s", $config["siteTime"]) . '|Browser: ' . $users->user_browser() . '|Referer: ' . $http_referer . '|URL: ' . $config_requri . '|User: ' . $username . '|';
    $fp = fopen($logfiles, "a+");
    flock ($fp, LOCK_EX);
    fputs($fp, "$write\r\n");
    flock ($fp, LOCK_UN);
    fclose($fp);
    @chmod ($fp, 0666);
    @chmod ($logfiles, 0666);

    if (count(file($logfiles)) > $config["dosLimit"] && $config["dosLimit"] > 0) {
        
        unlink($logfiles);

        $banlines = file(BASEDIR . "used/ban.dat");
        $banarray = '';

        foreach($banlines as $banvalue) {
            $bancell = explode("|", $banvalue);
            $banarray[] = $bancell[1];
        } 

        if (!in_array($ip, $banarray)) {
            $fp = fopen(BASEDIR . "used/ban.dat", "a+");
            flock ($fp, LOCK_EX);
            fputs($fp, "|$ip|\r\n");
            fflush ($fp);
            flock ($fp, LOCK_UN);
            fclose($fp);

            $logdat = BASEDIR . "used/datalog/ban.dat";
            $hostname = gethostbyaddr($ip);

            $write = '|Blocked access for IP|' . $_SERVER['PHP_SELF'] . $config_requri . '|' . time() . '|' . $ip . '|' . $hostname . '|' . $users->user_browser() . '|' . $http_referer . '|' . $username . '|';

            $fp = fopen($logdat, "a+");
            flock ($fp, LOCK_EX);
            fputs($fp, "$write\r\n");
            flock ($fp, LOCK_UN);
            fclose($fp);
            chmod ($fp, 0666);
            chmod ($logdat, 0666);

            $file = file($logdat);
            $i = count($file);
            if ($i >= $config["maxLogData"]) {
                $fp = fopen($logdat, "w");
                flock ($fp, LOCK_EX);
                unset($file[0], $file[1]);
                fputs($fp, implode("", $file));
                flock ($fp, LOCK_UN);
                fclose($fp);
            }

        }

	}

	// ban
	$old_ips = file(BASEDIR . "used/ban.dat");
	foreach($old_ips as $old_ip_line) {
	    $ip_arr = explode("|", $old_ip_line);

	    $ip_check_matches = 0;
	    $db_ip_split = explode(".", $ip_arr[1]);
	    $this_ip_split = explode(".", $ip);

	    for($i_i = 0;$i_i < 4;$i_i++) {
	        if ($this_ip_split[$i_i] == $db_ip_split[$i_i] or $db_ip_split[$i_i] == '*') {
	            $ip_check_matches += 1;
	        } 
	    } 

	    if ($ip_check_matches == 4) {
	        if ($users->is_administrator() == false) {
	            header ("Location: " . BASEDIR . "pages/banip.php");
	            exit;
	        } 
	    } 
	}

}

?>