From addc5a14a93547f630f23e5b6a79cffa2e37d71a Mon Sep 17 00:00:00 2001
From: lolcat <will@lolcat.ca>
Date: Sat, 17 Feb 2024 23:22:19 -0500
Subject: boobs

---
 lib/bot_protection.php | 281 +++++++++++++++++++++++++++++++++++++++++
 lib/captcha_gen.php    | 336 -------------------------------------------------
 lib/classic.png        | Bin 358 -> 0 bytes
 lib/frontend.php       |  13 +-
 lib/fuckhtml.php       |  25 ++--
 5 files changed, 308 insertions(+), 347 deletions(-)
 create mode 100644 lib/bot_protection.php
 delete mode 100644 lib/captcha_gen.php
 delete mode 100644 lib/classic.png

(limited to 'lib')

diff --git a/lib/bot_protection.php b/lib/bot_protection.php
new file mode 100644
index 0000000..82de54c
--- /dev/null
+++ b/lib/bot_protection.php
@@ -0,0 +1,281 @@
+<?php
+
+class bot_protection{
+	
+	public function __construct($frontend, $get, $filters, $page, $output){
+		
+		// check if we want captcha
+		if(config::BOT_PROTECTION !== 1){
+			
+			apcu_inc("real_requests");
+			if($output === true){
+				$frontend->loadheader(
+					$get,
+					$filters,
+					$page
+				);
+			}
+			return;
+		}
+		
+		/*
+			Validate cookie, if it exists
+		*/
+		if(isset($_COOKIE["pass"])){
+			
+			if(
+				// check if key is not malformed
+				preg_match(
+					'/^k[0-9]+\.[A-Za-z0-9_]{20}$/',
+					$_COOKIE["pass"]
+				) &&
+				// does key exist
+				apcu_exists($_COOKIE["pass"])
+			){
+					
+				// exists, increment counter
+				$inc = apcu_inc($_COOKIE["pass"]);
+				
+				// we start counting from 1
+				// when it has been incremented to 102, it has reached
+				// 100 reqs
+				if($inc >= config::MAX_SEARCHES + 2){
+					
+					// reached limit, delete and give captcha
+					apcu_delete($_COOKIE["pass"]);
+				}else{
+					
+					// the cookie is OK! dont die() and give results
+					apcu_inc("real_requests");
+					
+					if($output === true){
+						$frontend->loadheader(
+							$get,
+							$filters,
+							$page
+						);
+					}
+					return;
+				}
+			}
+		}
+		
+		if($output === false){
+			
+			http_response_code(401); // forbidden
+			echo json_encode([
+				"status" => "The \"pass\" token in your cookies is missing or has expired!!"
+			]);
+			die();
+		}
+		
+		/*
+			Validate form data
+		*/
+		$lines =
+			explode(
+				"\r\n",
+				file_get_contents("php://input")
+			);
+
+		$invalid = false;
+		$answers = [];
+		$key = false;
+		$error = "";
+
+		foreach($lines as $line){
+			
+			$line = explode("=", $line, 2);
+			
+			if(count($line) !== 2){
+				
+				$invalid = true;
+				break;
+			}
+			
+			preg_match(
+				'/^c\[([0-9]+)\]$/',
+				$line[0],
+				$regex
+			);
+			
+			if(
+				$line[1] != "on" ||
+				!isset($regex[0][1])
+			){
+				
+				// check if its the v key
+				if(
+					$line[0] == "v" &&
+					preg_match(
+						'/^c[0-9]+\.[A-Za-z0-9_]{20}$/',
+						$line[1]
+					)
+				){
+					
+					$key = apcu_fetch($line[1]);
+					apcu_delete($line[1]);
+				}
+				break;
+			}
+			
+			$regex = (int)$regex[1];
+			
+			if(
+				$regex >= 16 ||
+				$regex <= -1
+			){
+				
+				$invalid = true;
+				break;
+			}
+			
+			$answers[] = $regex;
+		}
+		
+		if(
+			!$invalid &&
+			$key !== false // has captcha been gen'd?
+		){
+			$check = count($key);
+			
+			// validate answer
+			for($i=0; $i<count($answers); $i++){
+				
+				if(in_array($answers[$i], $key)){
+					
+					$check--;
+				}else{
+					
+					$check = -1;
+					break;
+				}
+			}
+			
+			if($check === 0){
+				
+				// we passed the captcha
+				// set cookie
+				$inc = apcu_inc("cookie");
+				
+				$key = "k" . $inc . "." . $this->randomchars();
+				
+				apcu_inc($key, 1, $stupid, 86400);
+				
+				apcu_inc("real_requests");
+				
+				setcookie(
+					"pass",
+					$key,
+					[
+						"expires" => time() + 86400, // expires in 24 hours
+						"samesite" => "Lax",
+						"path" => "/"
+					]
+				);
+				
+				$frontend->loadheader(
+					$get,
+					$filters,
+					$page
+				);
+				return;
+				
+			}else{
+				
+				$error = "<div class=\"quote\">You were <a href=\"https://www.youtube.com/watch?v=e1d7fkQx2rk\" target=\"_BLANK\" rel=\"noreferrer nofollow\">kicked out of Mensa.</a> Please try again.</div>";
+			}
+		}
+		
+		$key = "c" . apcu_inc("captcha_gen", 1) . "." . $this->randomchars();
+		
+		$payload = [
+			"timetaken" => microtime(true),
+			"class" => "",
+			"right-left" => "",
+			"right-right" => "",
+			"left" =>
+				'<div class="infobox">' .
+					'<h1>IQ test</h1>' .
+					'IQ test has been enabled due to bot abuse on the network.<br>' .
+					'Solving this IQ test will let you make 100 searches today. I will add an invite system to bypass this soon...' .
+					$error .
+					'<form method="POST" enctype="text/plain" autocomplete="off">' .
+						'<div class="captcha-wrapper">' .
+							'<div class="captcha">' .
+								'<img src="captcha.php?v=' . $key . '" alt="Captcha image">' .
+								'<div class="captcha-controls">' .
+									'<input type="checkbox" name="c[0]" id="c0">' .
+									'<label for="c0"></label>' .
+									'<input type="checkbox" name="c[1]" id="c1">' .
+									'<label for="c1"></label>' .
+									'<input type="checkbox" name="c[2]" id="c2">' .
+									'<label for="c2"></label>' .
+									'<input type="checkbox" name="c[3]" id="c3">' .
+									'<label for="c3"></label>' .
+									'<input type="checkbox" name="c[4]" id="c4">' .
+									'<label for="c4"></label>' .
+									'<input type="checkbox" name="c[5]" id="c5">' .
+									'<label for="c5"></label>' .
+									'<input type="checkbox" name="c[6]" id="c6">' .
+									'<label for="c6"></label>' .
+									'<input type="checkbox" name="c[7]" id="c7">' .
+									'<label for="c7"></label>' .
+									'<input type="checkbox" name="c[8]" id="c8">' .
+									'<label for="c8"></label>' .
+									'<input type="checkbox" name="c[9]" id="c9">' .
+									'<label for="c9"></label>' .
+									'<input type="checkbox" name="c[10]" id="c10">' .
+									'<label for="c10"></label>' .
+									'<input type="checkbox" name="c[11]" id="c11">' .
+									'<label for="c11"></label>' .
+									'<input type="checkbox" name="c[12]" id="c12">' .
+									'<label for="c12"></label>' .
+									'<input type="checkbox" name="c[13]" id="c13">' .
+									'<label for="c13"></label>' .
+									'<input type="checkbox" name="c[14]" id="c14">' .
+									'<label for="c14"></label>' .
+									'<input type="checkbox" name="c[15]" id="c15">' .
+									'<label for="c15"></label>' .
+								'</div>' .
+							'</div>' .
+						'</div>' .
+						'<input type="hidden" name="v" value="' . $key . '">' .
+						'<input type="submit" value="Check IQ" class="captcha-submit">' .
+					'</form>' .
+				'</div>'
+		];
+		
+		$frontend->loadheader(
+			$get,
+			$filters,
+			$page
+		);
+		
+		echo $frontend->load("search.html", $payload);
+		die();
+	}
+	
+	private function randomchars(){
+		
+		$chars =
+			array_merge(
+				range("A", "Z"),
+				range("a", "z"),
+				range(0, 9)
+			);
+		
+		$chars[] = "_";
+		
+		$c = count($chars) - 1;
+		
+		$key = "";
+		
+		for($i=0; $i<20; $i++){
+			
+			$key .= $chars[random_int(0, $c)];
+		}
+		
+		return $key;
+	}
+}
diff --git a/lib/captcha_gen.php b/lib/captcha_gen.php
deleted file mode 100644
index abcab7a..0000000
--- a/lib/captcha_gen.php
+++ /dev/null
@@ -1,336 +0,0 @@
-<?php
-
-class captcha{
-	
-	public function __construct($frontend, $get, $filters, $page, $output){
-		
-		// check if we want captcha
-		if(config::BOT_PROTECTION !== 1){
-			
-			apcu_inc("real_requests");
-			if($output === true){
-				$frontend->loadheader(
-					$get,
-					$filters,
-					$page
-				);
-			}
-			return;
-		}
-		
-		/*
-			Validate cookie, if it exists
-		*/
-		if(isset($_COOKIE["pass"])){
-			
-			if(
-				// check if key is not malformed
-				preg_match(
-					'/^c[0-9]+\.[A-Za-z0-9]{20}$/',
-					$_COOKIE["pass"]
-				) &&
-				// does key exist
-				apcu_exists($_COOKIE["pass"])
-			){
-					
-				// exists, increment counter
-				$inc = apcu_inc($_COOKIE["pass"]);
-				
-				// we start counting from 1
-				// when it has been incremented to 102, it has reached
-				// 100 reqs
-				if($inc >= 102){
-					
-					// reached limit, delete and give captcha
-					apcu_delete($_COOKIE["pass"]);
-				}else{
-					
-					// the cookie is OK! dont die() and give results
-					apcu_inc("real_requests");
-					
-					if($output === true){
-						$frontend->loadheader(
-							$get,
-							$filters,
-							$page
-						);
-					}
-					return;
-				}
-			}
-		}
-		
-		if($output === false){
-			
-			http_response_code(429); // too many reqs
-			echo json_encode([
-				"status" => "The \"pass\" token in your cookies is missing or has expired!!"
-			]);
-			die();
-		}
-		
-		/*
-			Validate form data
-		*/
-		$lines =
-			explode(
-				"\r\n",
-				file_get_contents("php://input")
-			);
-
-		$invalid = false;
-		$answers = [];
-		$key = false;
-		$error = "";
-
-		foreach($lines as $line){
-			
-			$line = explode("=", $line, 2);
-			
-			if(count($line) !== 2){
-				
-				$invalid = true;
-				break;
-			}
-			
-			preg_match(
-				'/^c\[([0-9]+)\]$/',
-				$line[0],
-				$regex
-			);
-			
-			if(
-				$line[1] != "on" ||
-				!isset($regex[0][1])
-			){
-				
-				// check if its k
-				if(
-					$line[0] == "k" &&
-					strpos($line[1], "c.") === 0
-				){
-					
-					$key = apcu_fetch($line[1]);
-					apcu_delete($line[1]);
-				}
-				break;
-			}
-			
-			$regex = (int)$regex[1];
-			
-			if(
-				$regex >= 16 ||
-				$regex <= -1
-			){
-				
-				$invalid = true;
-				break;
-			}
-			
-			$answers[] = $regex;
-		}
-
-		if(
-			!$invalid &&
-			$key !== false
-		){
-			$check = $key[1];
-			
-			// validate answer
-			for($i=0; $i<count($key[0]); $i++){
-				
-				if(!in_array($i, $answers)){
-					
-					continue;
-				}
-				
-				if($key[0][$i][0] == $key[2]){
-					
-					$check--;
-				}else{
-					
-					// got a wrong answer
-					$check = -1;
-					break;
-				}
-			}
-			
-			if($check === 0){
-				
-				// we passed the captcha
-				// set cookie
-				$inc = apcu_inc("cookie");
-				$chars =
-					array_merge(
-						range("A", "Z"),
-						range("a", "z"),
-						range(0, 9)
-					);
-				
-				$c = count($chars) - 1;
-				
-				$key = "c" . $inc . ".";
-				
-				for($i=0; $i<20; $i++){
-					
-					$key .= $chars[random_int(0, $c)];
-				}
-				
-				apcu_inc($key, 1, $stupid, 86400);
-				
-				apcu_inc("real_requests");
-				
-				setcookie(
-					"pass",
-					$key,
-					[
-						"expires" => time() + 86400, // expires in 24 hours
-						"samesite" => "Lax",
-						"path" => "/"
-					]
-				);
-				
-				$frontend->loadheader(
-					$get,
-					$filters,
-					$page
-				);
-				return;
-				
-			}else{
-				
-				$error = "<div class=\"quote\">You were <a href=\"https://www.youtube.com/watch?v=e1d7fkQx2rk\" target=\"_BLANK\" rel=\"noreferrer nofollow\">kicked out of Mensa.</a> Please try again.</div>";
-			}
-		}
-		
-		// get the positions for the answers
-		// will return between 3 and 6 answer positions
-		$range = range(0, 15);
-		$answer_pos = [];
-
-		array_splice($range, 0, 1);
-
-		for($i=0; $i<random_int(3, 6); $i++){
-			
-			$answer_pos_tmp =
-				array_splice(
-					$range,
-					random_int(
-						0,
-						14 - $i
-					),
-					1
-				);
-			
-			$answer_pos[] = $answer_pos_tmp[0];
-		}
-
-		// choose a dataset
-		$c = count(config::CAPTCHA_DATASET);
-		$choosen = config::CAPTCHA_DATASET[random_int(0, $c - 1)];
-		$choices = [];
-
-		for($i=0; $i<$c; $i++){
-			
-			if(config::CAPTCHA_DATASET[$i][0] == $choosen[0]){
-				
-				continue;
-			}
-			
-			$choices[] = config::CAPTCHA_DATASET[$i];
-		}
-
-		// generate grid data
-		$grid = [];
-
-		for($i=0; $i<16; $i++){
-			
-			if(in_array($i, $answer_pos)){
-				
-				$grid[] = $choosen;
-			}else{
-				
-				$grid[] = $choices[random_int(0, count($choices) - 1)];
-			}
-		}
-
-		$key = "c." . apcu_inc("captcha_gen", 1) . "." . random_int(0, 100000000);
-
-		apcu_store(
-			$key,
-			[
-				$grid,
-				count($answer_pos),
-				$choosen[0],
-				false // has captcha been generated?
-			],
-			120 // we give user 2 minutes to get captcha, in case of network error
-		);
-		
-		$payload = [
-			"class" => "",
-			"right-left" => "",
-			"right-right" => "",
-			"left" =>
-				'<div class="infobox">' .
-					'<h1>IQ test</h1>' .
-					'Due to getting hit with 20,000 bot requests per day, I had to put this up. Sorry.<br><br>' .
-					'Solving this captcha will allow you to make 100 searches today. I will add a way for legit users to bypass the captcha later. Sorry /g/tards!!' .
-					$error .
-					'<form method="POST" enctype="text/plain" autocomplete="off">' .
-						'<div class="captcha-wrapper">' .
-							'<div class="captcha">' .
-								'<img src="captcha?k=' . $key . '" alt="Captcha image">' .
-								'<div class="captcha-controls">' .
-									'<input type="checkbox" name="c[0]" id="c0">' .
-									'<label for="c0"></label>' .
-									'<input type="checkbox" name="c[1]" id="c1">' .
-									'<label for="c1"></label>' .
-									'<input type="checkbox" name="c[2]" id="c2">' .
-									'<label for="c2"></label>' .
-									'<input type="checkbox" name="c[3]" id="c3">' .
-									'<label for="c3"></label>' .
-									'<input type="checkbox" name="c[4]" id="c4">' .
-									'<label for="c4"></label>' .
-									'<input type="checkbox" name="c[5]" id="c5">' .
-									'<label for="c5"></label>' .
-									'<input type="checkbox" name="c[6]" id="c6">' .
-									'<label for="c6"></label>' .
-									'<input type="checkbox" name="c[7]" id="c7">' .
-									'<label for="c7"></label>' .
-									'<input type="checkbox" name="c[8]" id="c8">' .
-									'<label for="c8"></label>' .
-									'<input type="checkbox" name="c[9]" id="c9">' .
-									'<label for="c9"></label>' .
-									'<input type="checkbox" name="c[10]" id="c10">' .
-									'<label for="c10"></label>' .
-									'<input type="checkbox" name="c[11]" id="c11">' .
-									'<label for="c11"></label>' .
-									'<input type="checkbox" name="c[12]" id="c12">' .
-									'<label for="c12"></label>' .
-									'<input type="checkbox" name="c[13]" id="c13">' .
-									'<label for="c13"></label>' .
-									'<input type="checkbox" name="c[14]" id="c14">' .
-									'<label for="c14"></label>' .
-									'<input type="checkbox" name="c[15]" id="c15">' .
-									'<label for="c15"></label>' .
-								'</div>' .
-							'</div>' .
-						'</div>' .
-						'<input type="hidden" name="k" value="' . $key . '">' .
-						'<input type="submit" value="Check IQ" class="captcha-submit">' .
-					'</form>' .
-				'</div>'
-		];
-		
-		http_response_code(429); // too many reqs
-		$frontend->loadheader(
-			$get,
-			$filters,
-			$page
-		);
-		
-		echo $frontend->load("search.html", $payload);
-		die();
-	}
-}
diff --git a/lib/classic.png b/lib/classic.png
deleted file mode 100644
index d2c9609..0000000
Binary files a/lib/classic.png and /dev/null differ
diff --git a/lib/frontend.php b/lib/frontend.php
index b002ee9..738ad83 100644
--- a/lib/frontend.php
+++ b/lib/frontend.php
@@ -39,6 +39,14 @@ class frontend{
 			$replacements["ac"] = '';
 		}
 		
+		if(
+			isset($replacements["timetaken"]) &&
+			$replacements["timetaken"] !== null
+		){
+			
+			$replacements["timetaken"] = '<div class="timetaken">Took ' . substr(microtime(true) - $replacements["timetaken"], 0, 4) . 's</div>';
+		}
+		
 		$handle = fopen("template/{$template}", "r");
 		$data = fread($handle, filesize("template/{$template}"));
 		fclose($handle);
@@ -68,7 +76,7 @@ class frontend{
 		
 		echo
 			$this->load("header.html", [
-				"title" => trim($get["s"] . " ({$page})"),
+				"title" => trim(htmlspecialchars($get["s"]) . " ({$page})"),
 				"description" => ucfirst($page) . ' search results for &quot;' . htmlspecialchars($get["s"]) . '&quot;',
 				"index" => "no",
 				"search" => htmlspecialchars($get["s"]),
@@ -88,7 +96,7 @@ class frontend{
 			
 			$this->drawerror(
 				"Tshh, blocked!",
-				'You were blocked from viewing this page. If you wish to scrape data from 4get, please consider running <a href="https://git.lolcat.ca/lolcat/4get" rel="noreferrer nofollow">your own 4get instance</a> or using <a href="/api.txt">the API</a>.',
+				'You were blocked from viewing this page. If you wish to scrape data from 4get, please consider running <a href="https://git.lolcat.ca/lolcat/4get" rel="noreferrer nofollow">your own 4get instance</a>.',
 			);
 			die();
 		}
@@ -98,6 +106,7 @@ class frontend{
 		
 		echo
 			$this->load("search.html", [
+				"timetaken" => null,
 				"class" => "",
 				"right-left" => "",
 				"right-right" => "",
diff --git a/lib/fuckhtml.php b/lib/fuckhtml.php
index 2f9d3aa..ed1252c 100644
--- a/lib/fuckhtml.php
+++ b/lib/fuckhtml.php
@@ -466,19 +466,26 @@ class fuckhtml{
 		
 		return
 			preg_replace_callback(
-				'/\\\u[A-Fa-f0-9]{4}|\\\x[A-Fa-f0-9]{2}/',
+				'/\\\u[A-Fa-f0-9]{4}|\\\x[A-Fa-f0-9]{2}|\\\n|\\\r/',
 				function($match){
 					
-					if($match[0][1] == "u"){
+					switch($match[0][1]){
 						
-						return json_decode('"' . $match[0] . '"');
-					}else{
+						case "u":
+							return json_decode('"' . $match[0] . '"');
+							break;
 						
-						return mb_convert_encoding(
-							stripcslashes($match[0]),
-							"utf-8",
-							"windows-1252"
-						);
+						case "x":
+							return mb_convert_encoding(
+								stripcslashes($match[0]),
+								"utf-8",
+								"windows-1252"
+							);
+							break;
+						
+						default:
+							return " ";
+							break;
 					}
 				},
 				$string
-- 
cgit v1.2.3