RideLogic.pm 13 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405
  1. package RideLogic;
  2. use strict;
  3. use POSIX;
  4. require Exporter;
  5. use vars qw($VERSION @ISA @EXPORT @EXPORT_OK %EXPORT_TAGS);
  6. $VERSION = "0.01";
  7. @ISA = qw(Exporter);
  8. #@EXPORT = qw( daemonize
  9. # read_config
  10. # strip_whitespace
  11. # try
  12. # catch );
  13. #@EXPORT_OK = qw( daemonize
  14. # read_config
  15. # strip_whitespace
  16. # try
  17. # catch );
  18. #%EXPORT_TAGS = ( DEFAULT => [qw( &daemonize
  19. # &read_config
  20. # &strip_whitespace
  21. # &try
  22. # &catch )] );
  23. @EXPORT = qw( audit_user_card_start
  24. audit_user_card_end
  25. audit_user_pass_start
  26. audit_user_pass_end
  27. audit_users_start
  28. audit_users_end
  29. audit_admins_start
  30. audit_admins_end
  31. daemonize
  32. read_config
  33. strip_whitespace
  34. try
  35. catch );
  36. @EXPORT_OK = qw( audit_user_card_start
  37. audit_user_card_end
  38. audit_user_pass_start
  39. audit_user_pass_end
  40. audit_users_start
  41. audit_users_end
  42. audit_admins_start
  43. audit_admins_end
  44. daemonize
  45. read_config
  46. strip_whitespace
  47. try
  48. catch );
  49. %EXPORT_TAGS = ( DEFAULT => [qw( &audit_user_card_start
  50. &audit_user_card_end
  51. &audit_user_pass_start
  52. &audit_user_pass_end
  53. &audit_users_start
  54. &audit_users_end
  55. &audit_admins_start
  56. &audit_admins_end
  57. &daemonize
  58. &read_config
  59. &strip_whitespace
  60. &try
  61. &catch )] );
  62. our @ISA = qw(Exporter);
  63. our $VERSION="0.1";
  64. our $RIDELOGIC_DAEMON_CONF="/etc/ridelogic/daemon.conf";
  65. our $RIDELOGIC_DAEMON_LOG_DIR="/var/log/ridelogic";
  66. our $RIDELOGIC_DAEMON_PID_DIR="/var/run/ridelogic";
  67. our $RIDELOGIC_API_CONF="/etc/ridelogic/api.conf";
  68. our $RIDELOGIC_IS_SQLITE=1;
  69. sub audit_user_pass_start {
  70. my $dbh = shift;
  71. my $pass_id = shift;
  72. my $comment = shift;
  73. my $isSqlite = $RIDELOGIC_IS_SQLITE;
  74. if ($isSqlite) { return -1; }
  75. my @field = qw( user_pass_id logical_card_id issued activated firstused lastused nrides_orig nrides_remain nday_orig nday_expiration active rule queue_order comment expired paytype deactivated );
  76. my $ins_query = " insert into audit_user_pass ( timestamp, comment, old_" . $field[0];
  77. my $tail_ins_query = " select " . ($isSqlite ? "datetime('now', 'localtime')" : "now()") . ", ?, " . ($pass_id ? $field[0] : "null");
  78. for (my $i=1; $i<scalar(@field); $i++) {
  79. $ins_query .= ", old_" . $field[$i];
  80. $tail_ins_query .= ", " . ($pass_id ? $field[$i] : "null" );
  81. }
  82. $ins_query .= ") ";
  83. $tail_ins_query .= ($pass_id ? " from user_pass where user_pass_id = ?" : "");
  84. $ins_query .= $tail_ins_query;
  85. my $query = $dbh->prepare($ins_query);
  86. my $response = ($pass_id ? $query->execute($comment, $pass_id) : $query->execute($comment));
  87. return ($dbh->last_insert_id(undef, undef, undef, undef));
  88. }
  89. sub audit_user_pass_end {
  90. my $dbh = shift;
  91. my $pass_id = shift;
  92. my $audit_id = shift;
  93. my $isSqlite = $RIDELOGIC_IS_SQLITE;
  94. if ($isSqlite) { return; }
  95. my @field = qw( user_pass_id logical_card_id issued activated firstused lastused nrides_orig nrides_remain nday_orig nday_expiration active rule queue_order comment expired paytype deactivated );
  96. my $up_query = " update audit_user_pass, user_pass set audit_user_pass.new_" . $field[0] . " = user_pass." . $field[0];
  97. for (my $i=1; $i<scalar(@field); $i++) {
  98. $up_query .= ", audit_user_pass.new_".$field[$i] . " = user_pass." . $field[$i];
  99. }
  100. $up_query .= " where audit_user_pass.audit_user_pass_id = ? and user_pass.user_pass_id = ? ";
  101. my $query = $dbh->prepare($up_query);
  102. my $response = $query->execute($audit_id, $pass_id);
  103. }
  104. sub audit_user_card_start {
  105. my $dbh = shift;
  106. my $card_id = shift;
  107. my $comment = shift;
  108. my $isSqlite = $RIDELOGIC_IS_SQLITE;
  109. if ($isSqlite) { return -1; }
  110. my @field = qw( logical_card_id mag_token rfid_token comment lastused userid issued firstused group_id active deactivated issuetype );
  111. my $ins_query = " insert into audit_user_card ( timestamp, comment, old_" . $field[0];
  112. my $tail_ins_query = " select " . ($isSqlite ? "datetime('now', 'localtime')" : "now()") . ", ?, " . ($card_id ? $field[0] : "null");
  113. for (my $i=1; $i<scalar(@field); $i++) {
  114. $ins_query .= ", old_" . $field[$i];
  115. $tail_ins_query .= ", " . ($card_id ? $field[$i] : "null");
  116. }
  117. $ins_query .= ") ";
  118. $tail_ins_query .= ($card_id ? " from user_card where logical_card_id = ?" : "");
  119. $ins_query .= $tail_ins_query;
  120. my $query = $dbh->prepare($ins_query);
  121. my $response = ($card_id ? $query->execute($comment, $card_id) : $query->execute($comment) );
  122. return ($dbh->last_insert_id(undef, undef, undef, undef));
  123. }
  124. sub audit_user_card_end {
  125. my $dbh = shift;
  126. my $card_id = shift;
  127. my $audit_id = shift;
  128. my $isSqlite = $RIDELOGIC_IS_SQLITE;
  129. if ($isSqlite) { return; }
  130. my @field = qw( logical_card_id mag_token rfid_token comment lastused userid issued firstused group_id active deactivated issuetype );
  131. my $up_query = " update audit_user_card, user_card set audit_user_card.new_" . $field[0] . " = user_card." . $field[0];
  132. for (my $i=1; $i<scalar(@field); $i++) {
  133. $up_query .= ", audit_user_card.new_".$field[$i] . " = user_card." . $field[$i];
  134. }
  135. $up_query .= " where audit_user_card.audit_user_card_id = ? and user_card.logical_card_id = ? ";
  136. my $query = $dbh->prepare($up_query);
  137. my $response = $query->execute($audit_id, $card_id);
  138. }
  139. sub audit_users_start {
  140. my $dbh = shift;
  141. my $userid = shift;
  142. my $comment = shift;
  143. my $isSqlite = $RIDELOGIC_IS_SQLITE;
  144. if ($isSqlite) { return -1; }
  145. my @field = qw( username passwordhash userid comment first_name last_name phone email address city state zip created active
  146. shipping_address shipping_city shipping_state shipping_zip shipping_name shipping_country_code shipping_country_name reset_attempts );
  147. my $ins_query = " insert into audit_users ( timestamp, comment, old_" . $field[0];
  148. my $tail_ins_query = " select " . ($isSqlite ? "datetime('now', 'localtime')" : "now()") . ", ?, " . ($userid ? $field[0] : "null");
  149. for (my $i=1; $i<scalar(@field); $i++) {
  150. $ins_query .= ", old_".$field[$i];
  151. $tail_ins_query .= ", " . ($userid ? $field[$i] : "null");
  152. }
  153. $ins_query .= ") ";
  154. $tail_ins_query .= ($userid ? " from users where userid = ?" : "");
  155. $ins_query .= $tail_ins_query;
  156. my $query = $dbh->prepare($ins_query);
  157. my $response = ($userid ? $query->execute($comment, $userid) : $query->execute($comment) );
  158. return ($dbh->last_insert_id(undef, undef, undef, undef));
  159. }
  160. sub audit_users_end {
  161. my $dbh = shift;
  162. my $userid = shift;
  163. my $audit_id = shift;
  164. my $isSqlite = $RIDELOGIC_IS_SQLITE;
  165. if ($isSqlite) { return; }
  166. my @field = qw( username passwordhash userid comment first_name last_name phone email address city state zip created active
  167. shipping_address shipping_city shipping_state shipping_zip shipping_name shipping_country_code shipping_country_name reset_attempts );
  168. my $up_query = " update audit_users, users set audit_users.new_" . $field[0] . " = users." . $field[0];
  169. for (my $i=1; $i<scalar(@field); $i++) {
  170. $up_query .= ", audit_users.new_".$field[$i] . " = users." . $field[$i];
  171. }
  172. $up_query .= " where audit_users.audit_users_id = ? and users.userid = ? ";
  173. my $query = $dbh->prepare($up_query);
  174. my $response = $query->execute($audit_id, $userid);
  175. }
  176. sub audit_admins_start {
  177. my $dbh = shift;
  178. my $userid = shift;
  179. my $comment = shift;
  180. my $isSqlite = $RIDELOGIC_IS_SQLITE;
  181. if ($isSqlite) { return -1; }
  182. my @field = qw( username password userid );
  183. my $ins_query = " insert into audit_admins ( timestamp, comment, old_" . $field[0];
  184. my $tail_ins_query = " select " . ($isSqlite ? "datetime('now', 'localtime')" : "now()") . ", ?, " . ($userid ? $field[0] : "null");
  185. for (my $i=1; $i<scalar(@field); $i++) {
  186. $ins_query .= ", old_".$field[$i];
  187. $tail_ins_query .= ", " . ($userid ? $field[$i] : "null");
  188. }
  189. $ins_query .= ") ";
  190. $tail_ins_query .= ($userid ? " from admins where userid = ?" : "");
  191. $ins_query .= $tail_ins_query;
  192. my $query = $dbh->prepare($ins_query);
  193. my $response = ($userid ? $query->execute($comment, $userid) : $query->execute($comment) );
  194. return ($dbh->last_insert_id(undef, undef, undef, undef));
  195. }
  196. sub audit_admins_end {
  197. my $dbh = shift;
  198. my $userid = shift;
  199. my $audit_id = shift;
  200. my $isSqlite = $RIDELOGIC_IS_SQLITE;
  201. if ($isSqlite) { return; }
  202. my @field = qw( username password userid );
  203. my $up_query = " update audit_admins, admins set audit_admins.new_" . $field[0] . " = admins." . $field[0];
  204. for (my $i=1; $i<scalar(@field); $i++) {
  205. $up_query .= ", audit_admins.new_".$field[$i] . " = admins." . $field[$i];
  206. }
  207. $up_query .= " where audit_admins.audit_admins_id = ? and admins.userid = ? ";
  208. my $query = $dbh->prepare($up_query);
  209. my $response = $query->execute($audit_id, $userid);
  210. }
  211. #----------------------------------------------Ugly exception handling logic using closures and anonymous functions----
  212. #-------------------------------------------This is in there to deal with the fact that CreditCall uses the die("error")
  213. #-------------------------------------------function instead of returning an error message in many cases...
  214. # This utility function returns the passed string sans any leading or trailing whitespace.
  215. #
  216. sub strip_whitespace
  217. {
  218. my $str = shift; #grab our first parameter
  219. $str =~ s/^\s+//; #strip leading whitespace
  220. $str =~ s/\s+$//; #strip trailing whitespace
  221. return $str; #return the improved string
  222. }
  223. # This function takes two coderef parameters, the second of which is usually an explicit call to the
  224. # 'catch' function which itself takes a coderef parameter. This allows the code employing this suite of
  225. # functions to look somewhat like a conventional exception handling mechanism:
  226. #
  227. # try
  228. # {
  229. # do_something_that_might_die();
  230. # }
  231. # catch
  232. # {
  233. # my $errmsg = $_;
  234. # log_the_error_message($errmsg);
  235. # perform_some_cleanup();
  236. # };
  237. #
  238. # DO NOT FORGET THAT LAST SEMICOLON, EVERYTHING GOES TO HELL IF YOU DO!
  239. #
  240. sub try(&$)
  241. {
  242. my ($attempt, $handler) = @_;
  243. eval
  244. {
  245. &$attempt;
  246. };
  247. if($@)
  248. {
  249. do_catch($handler);
  250. }
  251. }
  252. # This function strips off the whitespace from the exception message reported by die()
  253. # and places the result into the default variable such that the code in the catch block can
  254. # just examine $_ to figure out what the cause of the error is, or to display or log
  255. # the error message.
  256. #
  257. sub do_catch(&$)
  258. {
  259. my ($handler) = @_;
  260. local $_ = strip_whitespace($@);
  261. &$handler;
  262. }
  263. # This just takes an explicit coderef and returns it unharmed. The only
  264. # purpose of this is so the try/catch structure looks pretty and familiar.
  265. #
  266. sub catch(&) {$_[0]}
  267. sub read_config
  268. {
  269. my $cfg_file = shift;
  270. my $cfg_href = shift;
  271. try
  272. {
  273. open my $fh, "$cfg_file";
  274. while (<$fh>) {
  275. next if /^#/;
  276. chomp;
  277. s/^\s+//;
  278. s/\s+$//;
  279. next if !$_;
  280. my ($var, $val) = split(/=/, $_);
  281. $cfg_href->{$var} = $val;
  282. }
  283. close $fh;
  284. }
  285. catch
  286. {
  287. my $errmsg = $_;
  288. die "Error processing config file $cfg_file, '$errmsg'. exiting\n";
  289. };
  290. }
  291. sub daemonize
  292. {
  293. my $logfile = shift;
  294. my $pidfile = shift;
  295. my ($untainted_lf, $untainted_pf);
  296. $untainted_lf = $1 if ($logfile =~ /^([^\0]+)$/);
  297. $untainted_pf = $1 if ($pidfile =~ /^([^\0]+)$/);
  298. try
  299. {
  300. chdir '/';
  301. umask 0;
  302. open STDIN, '/dev/null';
  303. open STDOUT, '/dev/null';
  304. open STDERR, '/dev/null';
  305. my $pid = fork;
  306. exit if $pid;
  307. setsid;
  308. if ($untainted_lf)
  309. {
  310. close STDOUT;
  311. close STDERR;
  312. sysopen( STDOUT, $untainted_lf, O_WRONLY|O_APPEND|O_CREAT, S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH );
  313. sysopen( STDERR, $untainted_lf, O_WRONLY|O_APPEND|O_CREAT, S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH );
  314. }
  315. if ($untainted_pf)
  316. {
  317. sysopen( my $fh, $untainted_pf, O_WRONLY|O_APPEND|O_CREAT, S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH );
  318. #open my $fh, ">$untainted_pf";
  319. print $fh $$, "\n";
  320. close $fh ;
  321. }
  322. }
  323. catch
  324. {
  325. my $errmsg = $_;
  326. die "Failed to daemonize: '$errmsg', exiting\n";
  327. };
  328. }
  329. return 1;