408 lines
12 KiB
SourcePawn
408 lines
12 KiB
SourcePawn
#include <sourcemod>
|
|
#include <SteamWorks>
|
|
#include <multicolors>
|
|
#include <json>
|
|
|
|
#undef REQUIRE_PLUGIN
|
|
#tryinclude <PlayerManager>
|
|
#define REQUIRE_PLUGIN
|
|
|
|
#pragma newdecls required
|
|
#pragma semicolon 1
|
|
|
|
#define APIKEY ""
|
|
|
|
|
|
#define STATUS_ERROR -2
|
|
#define STATUS_NONE -1
|
|
#define STATUS_SAFE 0
|
|
#define STATUS_BAD 1
|
|
|
|
|
|
ConVar g_cvBlockNoSteamVPN;
|
|
|
|
Database g_hDatabase;
|
|
|
|
int g_bStatus[MAXPLAYERS+1] = {STATUS_NONE,...};
|
|
|
|
bool g_bPMLoaded;
|
|
|
|
//----------------------------------------------------------------------------------------------------
|
|
// Purpose:
|
|
//----------------------------------------------------------------------------------------------------
|
|
public Plugin myinfo =
|
|
{
|
|
name = "VPN-Check",
|
|
author = "Neon",
|
|
description = "",
|
|
version = "2.1.0"
|
|
};
|
|
|
|
//----------------------------------------------------------------------------------------------------
|
|
// Purpose:
|
|
//----------------------------------------------------------------------------------------------------
|
|
public void OnPluginStart()
|
|
{
|
|
g_cvBlockNoSteamVPN = CreateConVar("sm_vpn_block", "1", "Kick unauthenticated people that use a VPN.", FCVAR_NONE, true, 0.0, true, 1.0);
|
|
|
|
RegAdminCmd("sm_vpn", Command_CheckVPN, ADMFLAG_RCON);
|
|
|
|
AutoExecConfig();
|
|
}
|
|
|
|
//----------------------------------------------------------------------------------------------------
|
|
// Purpose:
|
|
//----------------------------------------------------------------------------------------------------
|
|
public void SQL_OnTableCreated(Database db, DBResultSet results, const char[] error, any data)
|
|
{
|
|
for(int i = 1; i <= MaxClients; i++)
|
|
{
|
|
if(IsValidClient(i) && IsClientAuthorized(i))
|
|
OnClientAuthorized(i, "");
|
|
}
|
|
}
|
|
|
|
//----------------------------------------------------------------------------------------------------
|
|
// Purpose:
|
|
//----------------------------------------------------------------------------------------------------
|
|
public void OnConfigsExecuted()
|
|
{
|
|
if (!g_hDatabase)
|
|
{
|
|
Database.Connect(SQL_OnDatabaseConnect, "vpn_check");
|
|
}
|
|
}
|
|
|
|
//----------------------------------------------------------------------------------------------------
|
|
// Purpose:
|
|
//----------------------------------------------------------------------------------------------------
|
|
public void SQL_OnDatabaseConnect(Database db, const char[] error, any data)
|
|
{
|
|
if(!db || strlen(error))
|
|
{
|
|
LogError("Database error: %s", error);
|
|
return;
|
|
}
|
|
|
|
g_hDatabase = db;
|
|
|
|
char sQuery[256];
|
|
Format(sQuery, sizeof(sQuery), "CREATE TABLE IF NOT EXISTS ip_table (`ip` varchar(32), `type` int(64), `last_check` int(64), PRIMARY KEY (`ip`))");
|
|
|
|
g_hDatabase.Query(SQL_OnTableCreated, sQuery, _, DBPrio_High);
|
|
}
|
|
|
|
//----------------------------------------------------------------------------------------------------
|
|
// Purpose:
|
|
//----------------------------------------------------------------------------------------------------
|
|
public void OnClientAuthorized(int client, const char[] auth)
|
|
{
|
|
if (IsFakeClient(client))
|
|
return;
|
|
|
|
char sIP[32];
|
|
GetClientIP(client, sIP, sizeof(sIP));
|
|
|
|
char sQuery[512];
|
|
Format(sQuery, sizeof(sQuery), "SELECT * FROM ip_table WHERE ip='%s'", sIP);
|
|
|
|
g_hDatabase.Query(SQL_OnQueryCompleted, sQuery, GetClientSerial(client), DBPrio_Low);
|
|
}
|
|
|
|
//----------------------------------------------------------------------------------------------------
|
|
// Purpose:
|
|
//----------------------------------------------------------------------------------------------------
|
|
public void SQL_OnQueryCompleted(Database db, DBResultSet results, const char[] error, int iSerial)
|
|
{
|
|
int client = GetClientFromSerial(iSerial);
|
|
if (!client) //Player disconnected.
|
|
return;
|
|
|
|
if (!db || strlen(error))
|
|
{
|
|
g_bStatus[client] = STATUS_ERROR;
|
|
LogError("Query error: %s", error);
|
|
return;
|
|
}
|
|
|
|
if (results.RowCount && results.FetchRow())
|
|
{
|
|
int iFieldNum;
|
|
|
|
results.FieldNameToNum("type", iFieldNum);
|
|
int iType = results.FetchInt(iFieldNum);
|
|
|
|
results.FieldNameToNum("last_check", iFieldNum);
|
|
int iLastCheck = results.FetchInt(iFieldNum);
|
|
|
|
delete results;
|
|
|
|
if ((GetTime() - iLastCheck) < (86400 * 2))
|
|
{
|
|
g_bStatus[client] = iType;
|
|
if (g_bStatus[client] == STATUS_BAD)
|
|
TakeAction(client);
|
|
|
|
return;
|
|
}
|
|
}
|
|
|
|
char sIP[32];
|
|
GetClientIP(client, sIP, sizeof(sIP));
|
|
|
|
char sRequest[256];
|
|
FormatEx(sRequest, sizeof(sRequest), "use a url here", sIP, APIKEY);
|
|
//PrintToConsoleAll(sRequest);
|
|
|
|
Handle hRequest = SteamWorks_CreateHTTPRequest(k_EHTTPMethodGET, sRequest);
|
|
if (!hRequest ||
|
|
!SteamWorks_SetHTTPCallbacks(hRequest, OnTransferComplete) ||
|
|
!SteamWorks_SetHTTPRequestContextValue(hRequest, iSerial) ||
|
|
!SteamWorks_SendHTTPRequest(hRequest))
|
|
{
|
|
delete hRequest;
|
|
}
|
|
}
|
|
|
|
//----------------------------------------------------------------------------------------------------
|
|
// Purpose:
|
|
//----------------------------------------------------------------------------------------------------
|
|
public int OnTransferComplete(Handle hRequest, bool bFailure, bool bSuccessful, EHTTPStatusCode eStatusCode, int iSerial)
|
|
{
|
|
int client = GetClientFromSerial(iSerial);
|
|
if (!client) //Player disconnected.
|
|
{
|
|
delete hRequest;
|
|
return 0;
|
|
}
|
|
|
|
if (bFailure || !bSuccessful || eStatusCode != k_EHTTPStatusCode200OK)
|
|
{
|
|
delete hRequest;
|
|
g_bStatus[client] = STATUS_ERROR;
|
|
LogError("Request-Error: %d", eStatusCode);
|
|
return 0;
|
|
}
|
|
|
|
SteamWorks_GetHTTPResponseBodyCallback(hRequest, OnTransferResponse, iSerial);
|
|
return 0;
|
|
}
|
|
|
|
//----------------------------------------------------------------------------------------------------
|
|
// Purpose:
|
|
//----------------------------------------------------------------------------------------------------
|
|
public int OnTransferResponse(char[] sData, int iSerial)
|
|
{
|
|
int client = GetClientFromSerial(iSerial);
|
|
if (!client) //Player disconnected.
|
|
return 0;
|
|
|
|
char sIP[32];
|
|
GetClientIP(client, sIP, sizeof(sIP));
|
|
|
|
JSON_Object obj = json_decode(sData);
|
|
|
|
char sStatus[32];
|
|
obj.GetString("status", sStatus, sizeof(sStatus));
|
|
if (!StrEqual(sStatus, "ok") && !StrEqual(sStatus, "warning"))
|
|
{
|
|
char sMessage[256];
|
|
obj.GetString("message", sMessage, sizeof(sMessage));
|
|
LogError("API-Response: %s: %s", sStatus, sMessage);
|
|
g_bStatus[client] = STATUS_ERROR;
|
|
json_cleanup_and_delete(obj);
|
|
return 0;
|
|
}
|
|
|
|
JSON_Object ipobj = obj.GetObject(sIP);
|
|
char sProxy[16];
|
|
ipobj.GetString("proxy", sProxy, sizeof(sProxy));
|
|
if (StrEqual(sProxy, "no"))
|
|
g_bStatus[client] = STATUS_SAFE;
|
|
else
|
|
{
|
|
//char sType[64];
|
|
//ipobj.GetString("type", sType, sizeof(sType));
|
|
//if (StrEqual(sType, "Compromised Server"))
|
|
//g_bStatus[client] = STATUS_SAFE;
|
|
//else
|
|
//{
|
|
g_bStatus[client] = STATUS_BAD;
|
|
TakeAction(client);
|
|
//}
|
|
}
|
|
|
|
int iCurrentTime = GetTime();
|
|
|
|
char sQuery[512];
|
|
Format(sQuery, sizeof(sQuery), "INSERT INTO ip_table (ip, type, last_check) VALUES ('%s', '%d', '%d') ON DUPLICATE KEY UPDATE type='%d', last_check='%d';", sIP, g_bStatus[client], iCurrentTime, g_bStatus[client], iCurrentTime);
|
|
g_hDatabase.Query(SQL_OnQueryCompleted, sQuery, _, DBPrio_Low);
|
|
|
|
//https://github.com/clugg/sm-json/blob/master/addons/sourcemod/scripting/json_test.sp#L446
|
|
//as far as i can tell i just need to call json_cleanup_and_delete() on the most outer json object, all its children should get cleaned and deleted as well.
|
|
json_cleanup_and_delete(obj);
|
|
return 0;
|
|
}
|
|
|
|
//----------------------------------------------------------------------------------------------------
|
|
// Purpose:
|
|
//----------------------------------------------------------------------------------------------------
|
|
public Action Command_CheckVPN(int client, int args)
|
|
{
|
|
char sBuffer[4096];
|
|
char sIP[32];
|
|
char sSteamID[32];
|
|
bool bFound = false;
|
|
|
|
Format(sBuffer, sizeof(sBuffer), "VPN STATUS:\n");
|
|
Format(sBuffer, sizeof(sBuffer), "%s#########################################\n", sBuffer);
|
|
for (int i = 1; i <= MaxClients; i++)
|
|
{
|
|
if (!IsValidClient(i))
|
|
continue;
|
|
|
|
if (g_bStatus[i] == STATUS_SAFE || g_bStatus[i] == STATUS_NONE)
|
|
continue;
|
|
|
|
if (g_bStatus[i] == STATUS_BAD)
|
|
{
|
|
GetClientAuthId(i, AuthId_Steam2, sSteamID, sizeof(sSteamID));
|
|
GetClientIP(i, sIP, sizeof(sIP));
|
|
|
|
if (g_bPMLoaded)
|
|
{
|
|
if (!PM_IsPlayerSteam(i))
|
|
Format(sBuffer, sizeof(sBuffer), "%s\"%L\"[NOSTEAM] is using a VPN (%s).\n", sBuffer, i, sIP);
|
|
else
|
|
Format(sBuffer, sizeof(sBuffer), "%s\"%L\"[STEAM] is using a VPN (%s).\n", sBuffer, i, sIP);
|
|
}
|
|
else
|
|
Format(sBuffer, sizeof(sBuffer), "%s\"%L\" is using a VPN (%s).\n", sBuffer, i, sIP);
|
|
|
|
bFound = true;
|
|
}
|
|
else if (g_bStatus[i] == STATUS_ERROR)
|
|
{
|
|
Format(sBuffer, sizeof(sBuffer), "%s\"%L\" Error: VPN-Check failed, check the error logs.\n", sBuffer, i);
|
|
bFound = true;
|
|
}
|
|
}
|
|
|
|
if (!bFound)
|
|
Format(sBuffer, sizeof(sBuffer), "%sCould not find any possible VPNs\n", sBuffer);
|
|
|
|
Format(sBuffer, sizeof(sBuffer), "%s#########################################", sBuffer);
|
|
ReplyToCommand(client, sBuffer);
|
|
return Plugin_Handled;
|
|
}
|
|
|
|
//----------------------------------------------------------------------------------------------------
|
|
// Purpose:
|
|
//----------------------------------------------------------------------------------------------------
|
|
public void TakeAction(int client)
|
|
{
|
|
char sIP[32];
|
|
GetClientIP(client, sIP, sizeof(sIP));
|
|
|
|
char sSteamID[32];
|
|
GetClientAuthId(client, AuthId_Steam2, sSteamID, sizeof(sSteamID));
|
|
|
|
for(int i = 1; i <= MaxClients; i++)
|
|
{
|
|
if(IsValidClient(i) && CheckCommandAccess(i, "sm_vpn", ADMFLAG_RCON))
|
|
{
|
|
if (g_bPMLoaded)
|
|
{
|
|
if (!PM_IsPlayerSteam(client))
|
|
{
|
|
if (g_cvBlockNoSteamVPN.BoolValue)
|
|
{
|
|
CPrintToChat(i, "{green}[SM]{default} %L[NOSTEAM] is using a {red}VPN {default}(IP: %s). Client will be kicked.", client, sIP);
|
|
}
|
|
else
|
|
{
|
|
CPrintToChat(i, "{green}[SM]{default} %L[NOSTEAM] is using a {red}VPN {default}(IP: %s).", client, sIP);
|
|
}
|
|
}
|
|
else
|
|
{
|
|
CPrintToChat(i, "{green}[SM]{default} %L[STEAM] is using a {red}VPN {default}(IP: %s).", client, sIP);
|
|
}
|
|
}
|
|
else
|
|
{
|
|
CPrintToChat(i, "{green}[SM]{default} %L is using a {red}VPN {default}(IP: %s).", client, sIP);
|
|
}
|
|
}
|
|
}
|
|
|
|
if (g_bPMLoaded)
|
|
{
|
|
if (!PM_IsPlayerSteam(client))
|
|
{
|
|
if (g_cvBlockNoSteamVPN.BoolValue)
|
|
{
|
|
LogAction(client, -1, "\"%L\"[NOSTEAM] is using a VPN (IP: %s). Client got kicked.", client, sIP);
|
|
KickClient(client, "VPN not allowed");
|
|
}
|
|
else
|
|
{
|
|
LogMessage("%L[NOSTEAM] is using a VPN (IP: %s).", client, sIP);
|
|
}
|
|
}
|
|
else
|
|
{
|
|
LogMessage("%L[STEAM] is using a VPN (IP: %s).", client, sIP);
|
|
}
|
|
}
|
|
else
|
|
{
|
|
LogMessage("%L is using a VPN (IP: %s).", client, sIP);
|
|
}
|
|
}
|
|
|
|
//----------------------------------------------------------------------------------------------------
|
|
// Purpose:
|
|
//----------------------------------------------------------------------------------------------------
|
|
public void OnClientDisconnect(int client)
|
|
{
|
|
g_bStatus[client] = STATUS_NONE;
|
|
}
|
|
|
|
//----------------------------------------------------------------------------------------------------
|
|
// Purpose:
|
|
//----------------------------------------------------------------------------------------------------
|
|
stock int IsValidClient(int client, bool nobots = true)
|
|
{
|
|
if (client <= 0 || client > MaxClients || !IsClientConnected(client) || (nobots && IsFakeClient(client)))
|
|
return false;
|
|
|
|
return IsClientInGame(client);
|
|
}
|
|
|
|
//----------------------------------------------------------------------------------------------------
|
|
// Purpose:
|
|
//----------------------------------------------------------------------------------------------------
|
|
public void OnAllPluginsLoaded()
|
|
{
|
|
g_bPMLoaded = LibraryExists("PlayerManager");
|
|
}
|
|
|
|
//----------------------------------------------------------------------------------------------------
|
|
// Purpose:
|
|
//----------------------------------------------------------------------------------------------------
|
|
public void OnLibraryAdded(const char[] sName)
|
|
{
|
|
if (strcmp(sName, "PlayerManager", false) == 0)
|
|
g_bPMLoaded = true;
|
|
}
|
|
|
|
//----------------------------------------------------------------------------------------------------
|
|
// Purpose:
|
|
//----------------------------------------------------------------------------------------------------
|
|
public void OnLibraryRemoved(const char[] sName)
|
|
{
|
|
if (strcmp(sName, "PlayerManager", false) == 0)
|
|
g_bPMLoaded = false;
|
|
}
|