limit guest logins - ip check done

This commit is contained in:
Kai Philipp
2016-06-17 18:02:10 +02:00
parent f6fb0650e3
commit 935ec2ad92
3 changed files with 37 additions and 0 deletions
+11
View File
@@ -1006,6 +1006,12 @@ void
ServerLobbyThread::HandleNetPacketInit(boost::shared_ptr<SessionData> session, const InitMessage &initMessage)
{
LOG_VERBOSE("Received init for session #" << session->GetId() << ".");
// @XXX: debug tests
if(m_sessionManager.IsGuestConnectedMultiple(session->GetClientAddr())){
LOG_ERROR("Guest with IP " << session->GetClientAddr() << " already connected! Should be declined!");
}
// @XXX: end debug tests
// Before any other processing, perform some denial of service and
// brute force attack prevention by checking whether the user recently sent an
@@ -1057,6 +1063,11 @@ ServerLobbyThread::HandleNetPacketInit(boost::shared_ptr<SessionData> session, c
validGuest = true;
noAuth = true;
}
// @XXX: check if a guest session with same ip is already connected - decline if true
if(m_sessionManager.IsGuestConnectedMultiple(session->GetClientAddr())){
LOG_ERROR("Guest with IP " << session->GetClientAddr() << " already connected! Decline!");
validGuest = false;
}
}
if (!validGuest) {
SessionError(session, ERR_NET_INVALID_PLAYER_NAME);
+25
View File
@@ -247,6 +247,31 @@ SessionManager::IsClientAddressConnected(const std::string &clientAddress) const
return retVal;
}
bool
SessionManager::IsGuestConnectedMultiple(const std::string &clientAddress) const
{
bool retVal = false;
boost::recursive_mutex::scoped_lock lock(m_sessionMapMutex);
SessionMap::const_iterator i = m_sessionMap.begin();
SessionMap::const_iterator end = m_sessionMap.end();
int j = 0;
while (i != end) {
// @XXX: comparing PlayerRights does not yet work (e.g. throws an exception)
//if ((*i).second->GetClientAddr() == clientAddress && (*i).second->GetPlayerData()->GetRights() == PLAYER_RIGHTS_GUEST) {
if ((*i).second->GetClientAddr() == clientAddress) {
j++;
}
++i;
}
if (j > 1) {
retVal = true;
}
return retVal;
}
void
SessionManager::ForEach(boost::function<void (boost::shared_ptr<SessionData>)> func)
{
+1
View File
@@ -64,6 +64,7 @@ public:
bool IsPlayerConnected(const std::string &playerName) const;
bool IsPlayerConnected(unsigned uniqueId) const;
bool IsClientAddressConnected(const std::string &clientAddress) const;
bool IsGuestConnectedMultiple(const std::string &clientAddress) const;
void ForEach(boost::function<void (boost::shared_ptr<SessionData>)> func);