# shroudBNC - an object-oriented framework for IRC
# Copyright (C) 2005 Gunnar Beutner
#
# Modified by Worrum & Khobbits
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.

###############################################################################
#### You will need to edit the next few sections read comments for details ####
###############################################################################

# format: ip limit hostname password
set ::trust {
{83.170.81.20 2 swallowed.a.largebus.com}
{83.170.81.23 2 has.swallowed.his.leftshoe.com}
{83.170.81.24 2 why.not.beweird.org passo}
{83.170.81.44 2 flying.from.heathrow.to-the.us pass}
{83.170.81.90 1 Use.if.you.have.a.vhost}
{83.170.81.91 1 Use.if.you.have.a.vhost}
}

# Give regular user access to any vhost being not 0 in limit
set ::vhostoverridepassword "pass"

# Set the defaulthost which is given for outgoing connections (eg. the ip of eth0)
set ::defaulthost "83.170.81.100"

internalbind command vhost:command
internalbind usrcreate vhost:autoset

proc vhost:autoset {user} {
vhost:autosetvhost $user
}

proc vhost:countvhost {ip} {
	set count 0

	if {$ip == ""} { set ip $::defaulthost }

	foreach user [bncuserlist] {
		if {[string equal [getbncuser $user vhost] $ip] || ([getbncuser $user vhost] == "" && [string equal $ip $::defaulthost])} {
			incr count
		}
	}

	return $count
}

proc vhost:getlimit {ip} {
	if {$ip == ""} { set ip $::defaulthost }

	set res [lsearch -inline $::trust "$ip *"]

	if {$res != ""} {
		return [lindex $res 1]
	} else {
		return 0
	}
}

proc vhost:getpassword {ip} {
	if {$ip == ""} { set ip $::defaulthost }

	set res [lsearch -inline $::trust "$ip *"]

	if {$res != ""} {
		return [lindex $res 3]
	} else {
		return 0
	}
}

proc vhost:command {client parameters} {
	if {![getbncuser $client admin] && [string equal -nocase [lindex $parameters 0] "set"] && [string equal -nocase [lindex $parameters 1] "vhost"]} {
		if {[lsearch -exact [info commands] "lock:islocked"] != -1} {
			if {([lock:islocked $client "vhost"])} { return }
		}
		if {([lrange $parameters 2 end] == "")} {
			haltoutput
			bncreply "Syntax: set vhost <ip> \[<password>\]"
			return
		}
		if {![regexp {(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)} [lindex $parameters 2]]} {
			haltoutput
			bncreply "You have to specify a valid IP address."
			return
		}

		set limit [vhost:getlimit [lindex $parameters 2]]
		if {($limit == "0")} {
			haltoutput
			bncreply "Sorry, you may not use this IP address."
			return
		} elseif {[vhost:countvhost [lindex $parameters 2]] >= $limit} {
			haltoutput
			bncreply "Sorry, the IP address [lindex $parameters 2] is already being used by [vhost:countvhost [lindex $parameters 2]] users. A maximum number of [vhost:getlimit [lindex $parameters 2]] users may use this IP address."
			return
		}
		set password [vhost:getpassword [lindex $parameters 2]]
		if {!($password == "") && !($password == "none")} {
			if {([lindex $parameters 3] == "")} {
				haltoutput
				bncreply "This vhost requires a password, use set vhost <ip> <password>"
				return
			}
			if {!($password == [lindex $parameters 3]) && !($::vhostoverridepassword == [lindex $parameters 3])} {
			    haltoutput
				bncreply "Sorry, the entered password is incorrect"
				return
			}
		}
	}

	if {[string equal -nocase [lindex $parameters 0] "vhosts"]} {
		foreach ip $::trust {
			if {[lindex $ip 1] > 0} {
				if {!([lindex $ip 3] == "")} {
					bncreply "[lindex $ip 0] ([lindex $ip 2]) [vhost:countvhost [lindex $ip 0]]/[vhost:getlimit [lindex $ip 0]] connections \[password protected\]"
				} else  {
					bncreply "[lindex $ip 0] ([lindex $ip 2]) [vhost:countvhost [lindex $ip 0]]/[vhost:getlimit [lindex $ip 0]] connections"
				}
			}
		}

		bncreply "-- End of VHOSTS."

		haltoutput
	}

	if {[string equal -nocase [lindex $parameters 0] "help"]} {
		bncaddcommand vhosts User "lists all available vhosts" "Syntax: vhosts\nDisplays a list of all available virtual vhosts."
	}
}

proc vhost:findip {} {
	set min 9000
	set minip ""

	foreach ip $::trust {
		if {([lindex $ip 3] == "")} {
			if {[vhost:countvhost [lindex $ip 0]] < $min} {
				set min [vhost:countvhost [lindex $ip 0]]
				set minip [lindex $ip 0]

				if {$min == 0} { break }
			}
		}
	}

	return $minip
}

proc vhost:autosetvhost {user} {
	setbncuser $user vhost [vhost:findip]
}

# iface commands
# +user			if {([lindex $parameters 3] == "")} {
# freeip
# set vhost
# vhosts

proc vhost:ifacecmd {command params account} {
	switch -- $command {
		"freeip" {
			return [vhost:findip]
		}
		"set" {
			if {[lsearch -exact [info commands] "lock:islocked"] != -1} {
				if {[lock:islocked $account "vhost"]} { return }
			}

			if {![getbncuser $account admin] && [string equal -nocase [lindex $params 0] "vhost"]} {
				set ip [lindex $params 1]

				set limit [vhost:getlimit $ip]
				if {$limit == 0} { return "You may not use this virtual host." }

				set count [vhost:countvhost $ip]
				if {$count >= $limit} { return "Sorry, the virtual host $ip is already being used by $count users. Please use another virtual host." }

				set password [vhost:getpassword $ip]
				if {!($password == "") && !($password == "none")} {
					if {([lindex $params 2] == "")} {
						haltoutput
						return "This vhost requires a password, use set vhost <ip> <password>"
					}
					if {!($password == [lindex $params 2]) && !($::vhostoverridepassword == [lindex $params 2])} {
						haltoutput
						return "Sorry, the entered password is incorrect"
					}
				}
				setbncuser $account vhost $ip
				return "1"
			}
		}
		"vhosts" {
			set vhosts [list]

			foreach host $::trust {
				lappend vhosts [list [lindex $host 0] [vhost:countvhost [lindex $host 0]] [lindex $host 1] [lindex $host 2] [vhost:getpassword [lindex $host 0]]]
			}

			return [join $vhosts \005]
		}
	}
}

if {[lsearch -exact [info commands] "registerifacehandler"] != -1} {
	registerifacehandler vhost vhost:ifacecmd
}