Not logged in.  Login/Logout/Register | List snippets | | Create snippet | Upload image | Upload data

114
LINES

< > BotCompany Repo | #1032110 // Screenshot Service (use with #1032109)

JavaX source code (Dynamic Module) [tags: use-pretranspiled] - run with: Stefan's OS

Uses 1113K of libraries. Click here for Pure Java version (10741L/56K).

!7

sclass IPInfo {
  S ip;
  Timestamp firstSeen, lastSeen, blockUntil;
  long passwordFails, passwordSuccesses;
  Timestamp lastPasswordSuccess, lastPasswordFail;
  long blockedRequests;
  Bool allowed;
  
  bool isEvil() { ret blockUntil != null; }
}

static MapSO _renameClasses = litmap("SalterService" := "ScreenshotService");

cm ScreenshotService > DynPrintLogAndEnabled {
  !include early #1029545 // API for Eleu
  
  switchable S password = aGlobalID();
  switchable int badPWBlockSeconds = 30;

  Map<S, IPInfo> ipsSeen = syncLinkedHashMap();
  
  start {  // to show warnings early
    canServe();
    printIPsSeen();
  }
  
  void printIPsSeen aka printStats() {
    var list = cloneValues(ipsSeen);
    print(n2(list, "IP") + " seen." + stringIf(empty(list), " I am a virgin."));
    for (IPInfo info : list)
      print("Known client IP: " + info.ip
        + appendBracketed_comma(
          info.isEvil() ? "evil" : "good",
          info.passwordFails == 0 ? ""
            : n2(info.passwordSuccesses, "normal request") + ", last: "
              + info.lastPasswordSuccess,
          info.passwordFails == 0 ? ""
            : n2(info.passwordFails, "password failures") + ", last: " + info.lastPasswordFail,
          n2UnlessZero(info.blockedRequests, "blocked requests")));
  }
  
  O html(IWebRequest req) ctex {
    if (!canServe()) ret "Can't serve";

    S ip = req.clientIP();
    IPInfo ipInfo = getOrCreate(ipsSeen, ip, () -> {
      print("New client IP!! " + ip);
      new IPInfo info;
      info.ip = ip;
      info.lastSeen = new Timestamp;
      if (info.firstSeen == null) info.firstSeen = info.lastSeen;
      change();
      ret info;
    });
    
    // Don't allow brute-force password checking
    
    if (ipInfo.blockUntil != null && cmp(ipInfo.blockUntil, new Timestamp) > 0) {
      print("Request from blocked IP: " + ip);
      ipInfo.blockedRequests++;
      change();
      ret print("Not allowed (evil IP)");
    }

    S uri = req.uri();
    print("Serving to IP " + ip + ": " + uri);
    
    if (isFalse(ipInfo.allowed))
      ret print("Not allowed (bad IP)");
      
    S suppliedPW = req.get("password");
    if (empty(suppliedPW)) ret "Need password";
    
    if (!eq(password, suppliedPW)) {
      ++ipInfo.passwordFails;
      ipInfo.lastPasswordFail = new Timestamp;
      change();
      print("Password FAIL from " + ip + " OK");
      if ((ipInfo.passwordFails % 10) == 0) {
        infoMessage(n2(ipInfo.passwordFails) + " password fails from " + ip + "!!!!");
        print("Blocking " + ip + " for " + badPWBlockSeconds + " seconds");
        ipInfo.blockUntil = new Timestamp(nowPlusSeconds(badPWBlockSeconds));
        change();
      }
      ret "Bad PW";
    }
    
    ++ipInfo.passwordSuccesses;
    ipInfo.lastPasswordSuccess = new Timestamp;
    change();
    print("Password from " + ip + " OK");

    ret subBot_serveJPEG(shootScreen2());
  }
  
  bool canServe() {
    if (!enabled) ret false with print("Disabled");
    if (l(password) < 4) ret false with warn("Not starting - password too short!!");
    true;
  }
  
  void forgetIPsSeen() {
    ipsSeen.clear();
    change();
    print("Mandatory memory wipe done.");
    printIPsSeen();
  }
  
  enhanceFrame {
    addInternalFrameTitleMenuItem(f/JInternalFrame, "Print Stats", rThreadEnter printStats);
  }
}

Author comment

Began life as a copy of #1031702

download  show line numbers  debug dex  old transpilations   

Travelled to 3 computer(s): bhatertpkbcr, mqqgnosmbjvj, pyentgdyhuwx

No comments. add comment

Snippet ID: #1032110
Snippet name: Screenshot Service (use with #1032109)
Eternal ID of this version: #1032110/28
Text MD5: 87219990f2a03b647b03f581e581a2b5
Transpilation MD5: cff253e7030ac4056c9905ea00cd7403
Author: stefan
Category: javax
Type: JavaX source code (Dynamic Module)
Public (visible to everyone): Yes
Archived (hidden from active list): No
Created/modified: 2021-08-14 02:26:41
Source code size: 3457 bytes / 114 lines
Pitched / IR pitched: No / No
Views / Downloads: 226 / 1740
Version history: 27 change(s)
Referenced in: #1032120 - Rename Module Class Test (OK)
#1032401 - DynWebServee