<?
ob_start("ob_gzhandler");

require_once("include/bittorrent.php");
require_once("include/benc.php");


function err($msg)
{
	benc_resp(array("failure reason" => array(type => "string", value => $msg)));

	exit();
}

function benc_resp($d)
{
	benc_resp_raw(benc(array(type => "dictionary", value => $d)));
}

function benc_resp_raw($x)
{
	header("Content-Type: text/plain");
	header("Pragma: no-cache");
	print($x);
}


$agent = strtolower($_SERVER["HTTP_USER_AGENT"]);

$denied_useragents = array("mozilla", "opera", "links", "lynx");

// Deny access made with a browser...
// Editted for something faster
foreach( $denied_useragents as $denied_agent )
{
  if( strpos($agent, $denied_agent) !== false )
  	err("torrent not registered with this tracker");
}


foreach (array("passkey","info_hash","peer_id","ip","event") as $x)
   $GLOBALS[$x] = "" . $_GET[$x];

foreach (array("port","downloaded","uploaded","left") as $x)
   $GLOBALS[$x] = 0 + $_GET[$x];

if (strpos($passkey, "?")) {
    $tmp = substr($passkey, strpos($passkey, "?"));
   $passkey = substr($passkey, 0, strpos($passkey, "?"));
   $tmpname = substr($tmp, 1, strpos($tmp, "=")-1);
   $tmpvalue = substr($tmp, strpos($tmp, "=")+1);
   $GLOBALS[$tmpname] = $tmpvalue;
}

foreach (array("passkey","info_hash","peer_id","port","downloaded","uploaded","left") as $x)
   if (!isset($x))   err("Missing key: $x");

foreach (array("info_hash","peer_id") as $x)
   if (strlen($GLOBALS[$x]) != 20)   err("Invalid $x (" . strlen($GLOBALS[$x]) . " - " . urlencode($GLOBALS[$x]) . ")");

if (strlen($passkey) != 32)   err("Invalid passkey (" . strlen($passkey) . " - $passkey)");

//if (empty($ip) || !preg_match('/^(\d{1,3}\.){3}\d{1,3}$/s', $ip))
   $ip = getip();

$rsize = 50;
foreach(array("num want", "numwant", "num_want") as $k)
{
	if (isset($_GET[$k]))
	{
		$rsize = (int) $_GET[$k];
		break;
	}
}


/* Check some additional headers as well */


if( isset($_GET['info_hash']) && isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])   )
{
 //Log

}

if (!$port || $port > 0xffff)
	err("invalid port");

if (!isset($event))
	$event = "";

$seeder = ($left == 0) ? "yes" : "no";

dbconn(false);


$res = do_mysql_query("SELECT id, name, category, banned, seeders + leechers AS numpeers, (UNIX_TIMESTAMP() - UNIX_TIMESTAMP(added)) as elapsed FROM torrents WHERE " . hash_where("info_hash", $info_hash));

$torrent = mysql_fetch_assoc($res);
if (!$torrent)
	err("torrent not registered with this tracker");

$torrentid = $torrent["id"];
$torrentname = $torrent["name"];
$torrentcategory = $torrent["category"];

$fields = "seeder, peer_id, ip, port, uploaded, downloaded, userid, agent, UNIX_TIMESTAMP(last_action) AS ts ";

$numpeers = $torrent["numpeers"];
$limit = "";
if ($numpeers > $rsize)
	$limit = "ORDER BY RAND() LIMIT $rsize";
$res = do_mysql_query("SELECT $fields FROM peers WHERE torrent = $torrentid AND connectable = 'yes' $limit");
//////////////////////////////////////////////////// Compact Mode Support ///////////////////////////////////////////////////
if($_GET['compact'] != 1)
{
$resp = "d" . benc_str("interval") . "i" . $announce_interval . "e" . benc_str("peers") . "l";
}
else
{
$resp = "d" . benc_str("interval") . "i" . $announce_interval . "e5:"."peers" ;
}
$peer = array();
while ($row = mysql_fetch_assoc($res))
{
    if($_GET['compact'] != 1)
{
$row["peer_id"] = hash_pad($row["peer_id"]);
if ($row["peer_id"] === $peer_id)
{
 $self = $row;
 continue;
}
$resp .= "d" .
 benc_str("ip") . benc_str($row["ip"]);
       if (!$_GET['no_peer_id']) {
  $resp .= benc_str("peer id") . benc_str($row["peer_id"]);
 }
 $resp .= benc_str("port") . "i" . $row["port"] . "e" .
 "e";
      }
      else
      {
         $peer_ip = explode('.', $row["ip"]);
$peer_ip = pack("C*", $peer_ip[0], $peer_ip[1], $peer_ip[2], $peer_ip[3]);
$peer_port = pack("n*", (int)$row["port"]);
$time = intval((time() % 7680) / 60);
if($_GET['left'] == 0)
{
$time += 128;
}
$time = pack("C", $time);
   $peer[] = $time . $peer_ip . $peer_port;
$peer_num++;
      }
}
if ($_GET['compact']!=1)
$resp .= "ee";
else
{
for($i=0;$i<$peer_num;$i++)
 {
  $o .= substr($peer[$i], 1, 6);
 }
$resp .= strlen($o) . ':' . $o . 'e';
}
$selfwhere = "torrent = $torrentid AND " . hash_where("peer_id", $peer_id);
//////////////////////////////////////////////////// End of Compact Mode Support ///////////////////////////////////////////////////
if (!isset($self))
{
	$res = do_mysql_query("SELECT $fields FROM peers WHERE $selfwhere") or die( mysql_error() );
	$row = mysql_fetch_assoc($res);
	if ($row)
	{
		$self = $row;
		$peerip = $row["ip"];
	}
}

if (!isset($self))
$peerip = $ip;

   $rz = do_mysql_query("SELECT id, username, uploaded, downloaded, parked, class, maxtorrents FROM users WHERE ip='$peerip' AND passkey=".sqlesc($passkey)." AND enabled = 'yes'") or err("Tracker error 2");
   if ($MEMBERSONLY)
	{
		if (mysql_num_rows($rz) ==0)
      		err("Unknown passkey ($passkey) and host ($ip) combo.");
   $az = mysql_fetch_assoc($rz);
   		$userid = $az["id"];
   //// check the peers for the userid ///////////////////////
   $allowedtorrents = $az["maxtorrents"];
   $res = do_mysql_query("SELECT COUNT(*) FROM peers WHERE userid=$userid") or err("Tracker error 051");
   $row = mysql_fetch_row($res);
   $activetorrents = $row[0];
		if ($activetorrents >= $allowedtorrents)
         		err("Sorry, $allowedtorrents active torrents are enough! Read the FAQ!");
		if ($az["parked"] == "yes")
        		err("Error, your account is parked! Please read the FAQ!");
      }

//// Up/down stats ////////////////////////////////////////////////////////////
if (!isset($self))
{
   if ($MEMBERSONLY)
	{
   	$valid = @mysql_fetch_row(@do_mysql_query("SELECT COUNT(*) FROM peers WHERE torrent=$torrentid AND passkey=" . sqlesc($passkey)));
   	if ($valid[0] >= 4 && $seeder == 'no')
		err("Connection limit exceeded! You may only leech from 3 location at a time.");
   	if ($valid[0] >= 4 && $seeder == 'yes')
		err("Connection limit exceeded! You may only seed from 3 location at a time.");
	}
//////////////////////////////////////////////////////////////////////

	/*if ($az["class"] < UC_VIP)
	{
		$gigs = $az["uploaded"] / (1024*1024*1024);
		$elapsed = floor($torrent['elapsed'] / 3600);
		$ratio = (($az["downloaded"] > 0) ? ($az["uploaded"] / $az["downloaded"]) : 1);
		if ($ratio < 0.5 || $gigs < 5) $wait = 0;
		elseif ($ratio < 0.65 || $gigs < 6.5) $wait = 0;
		elseif ($ratio < 0.8 || $gigs < 8) $wait = 0;
		elseif ($ratio < 0.95 || $gigs < 9.5) $wait = 0;
		else $wait = 0;
		if ($elapsed < $wait)
				err("Not authorized (" . ($wait - $elapsed) . "h) - READ THE FAQ!");
	}*/
}
else
{
	$upthis = max(0, $uploaded - $self["uploaded"]);
	$downthis = max(0, $downloaded - $self["downloaded"]);

	if ($upthis > 0 || $downthis > 0)
		do_mysql_query("UPDATE users SET uploaded = uploaded + $upthis, downloaded = downloaded + $downthis WHERE id=$userid") or err("Tracker error 3");
}

///////////////////////////////////////////////////////////////////////////////

function portblacklisted($port)
{
	// direct connect
	if ($port >= 411 && $port <= 413) return true;

	// bittorrent
	if ($port >= 6881 && $port <= 6889) return true;

	// kazaa
	if ($port == 1214) return true;

	// gnutella
	if ($port >= 6346 && $port <= 6347) return true;

	// emule
	if ($port == 4662) return true;

	// winmx
	if ($port == 6699) return true;

	return false;
}

$updateset = array();

if ($event == "stopped")
{

	if (isset($self))
	{
	 if( $GLOBALS['settings']['mod_snatched'] )
   {
      do_mysql_query("UPDATE snatched SET seeder = 'no', connectable='no' WHERE torrentid = ".$torrentid." AND userid = ".$userid);
   }

		do_mysql_query("DELETE FROM peers WHERE $selfwhere");
		if (mysql_affected_rows())
		{
			if ($self["seeder"] == "yes")
				$updateset[] = "seeders = seeders - 1";
			else
				$updateset[] = "leechers = leechers - 1";
		}
	}
}
else
{
	////// Completed_by hack ///////
   if ($event == "completed")
  {
      if( $GLOBALS['settings']['mod_snatched'] )
      {
         do_mysql_query("UPDATE snatched SET  finished  = 'yes', completedat = NOW() WHERE torrentid = ".$torrentid." AND userid = ".$userid);
      }

                $updateset[] = "times_completed = times_completed + 1";

                /*
                $res = do_mysql_query("SELECT id FROM users WHERE ip='$peerip'");
                $current = mysql_fetch_assoc($res);
                $sql = "INSERT INTO completed_by VALUES (".$torrentid.",".$current['id']);
                $result = do_mysql_query($sql); //Don't add a SQLerr function here!
                */
  }
        ///// end /////

	if (isset($self))
	{
	   if( $GLOBALS['settings']['mod_snatched'] )
	   {
	       //$res=mysql_query("SELECT uploaded, downloaded FROM snatched WHERE torrent = ".$torrentid." AND userid = ".$userid);
         //$row = mysql_fetch_array($res);
         $sockres = @fsockopen($ip, $port, $errno, $errstr, 5);
         if (!$sockres)
            $connectable = "no";
         else
         {
            $connectable = "yes";
            @fclose($sockres);
         }
         $downloaded2=$downloaded - $self["downloaded"];
         $uploaded2=$uploaded - $self["uploaded"];
         do_mysql_query("UPDATE snatched SET uploaded = uploaded+$uploaded2, downloaded = downloaded+$downloaded2, port = $port, connectable = '$connectable', agent= " . sqlesc($agent) . ", to_go = $left, last_action = NOW(), seeder = '$seeder' WHERE torrentid = $torrentid AND userid = $userid");

	   }


		do_mysql_query("UPDATE peers SET ip='".$_SERVER['REMOTE_ADDR']."', uploaded = $uploaded, downloaded = $downloaded, to_go = $left, last_action = NOW(), seeder = '$seeder'"
			. ($seeder == "yes" && $self["seeder"] != $seeder ? ", finishedat = " . time() : "") . " WHERE $selfwhere");

		//Detect abnormal upload stuff by retro
		// Initial sanity check xMB/s for 1 second
       if( $upthis > $GLOBALS['settings']['abnormal_upload_speed'] ){
           // Work out time difference
           $endtime = $res['ts'];
           $diff = $endtime - $starttime;
           // Normalise to prevent divide by zero.
           $rate = $upthis / ( $diff + 1 );
           // Currently 2MB/s. Increase to 5MB/s once finished testing.
           if( $rate > $GLOBALS['settings']['abnormal_upload_speed'] ){
               $username = $az['username'];
               $class = $az['class'];
               if( $class < UC_UPLOADER ){
                   $subject = sqlesc( "Upload - $username" );
                   $rate = mksize( $rate );
                   $client = $self['agent'];
                   $body = sqlesc( format_comment(
                       "[url=".$GLOBALS['DEFAULTBASEURL']."/userdetails.php?id=".$userid.
                       "][b]".$username."[/b][/url] just uploaded at $rate/s. (".
                       mksize( $upthis )." in $diff seconds.)\n".
                       "On Torrent [url=".$GLOBALS['DEFAULTBASEURL']."/details.php?id=".
                       $torrentid."]".$torrentname."[/url]\n".
                       "Using $client from $ip\n\n".
                       "This members last actual recorded total uploaded was " . mksize( $last_up ) ) );

                   auto_post( $subject , $body );
               }
           }
       }
		////////


		if (mysql_affected_rows() && $self["seeder"] != $seeder)
		{
			if ($seeder == "yes")
			{
				$updateset[] = "seeders = seeders + 1";
				$updateset[] = "leechers = leechers - 1";
			}
			else
			{
				$updateset[] = "seeders = seeders - 1";
				$updateset[] = "leechers = leechers + 1";
			}
		}
	}
	else
	{
		if (portblacklisted($port))
			err("Port $port is blacklisted.");

			$sockres = @fsockopen($ip, $port, $errno, $errstr, 5);
			if (!$sockres)
				$connectable = "no";
			else
			{
				$connectable = "yes";
				@fclose($sockres);
			}

      if( $GLOBALS['settings']['mod_snatched'] )
      {

         $res = do_mysql_query("SELECT torrent FROM snatched WHERE torrentid = $torrentid AND userid = $userid");
         //$check = @mysql_fetch_assoc($res);
         if (mysql_num_rows($res) == 0)
            do_mysql_query("INSERT INTO snatched (torrentid, userid, port, startdat, last_action, agent, torrent_name, torrent_category) VALUES ($torrentid, $userid, $port, NOW(), NOW(), " . sqlesc($agent) . ", " . sqlesc($torrentname) . ", $torrentcategory)");
      }

		$ret = do_mysql_query("INSERT INTO peers (connectable, torrent, peer_id, ip, port, uploaded, downloaded, to_go, started, last_action, seeder, userid, agent, uploadoffset, downloadoffset, passkey) VALUES ('$connectable', $torrentid, " . sqlesc($peer_id) . ", " . sqlesc($peerip) . ", $port, $uploaded, $downloaded, $left, NOW(), NOW(), '$seeder', $userid, " . sqlesc($agent) . ", $uploaded, $downloaded, " . sqlesc($passkey) . ")");
		if ($ret)
		{
			if ($seeder == "yes")
				$updateset[] = "seeders = seeders + 1";
			else
				$updateset[] = "leechers = leechers + 1";
		}
	}
}

if ($seeder == "yes")
{
	if ($torrent["banned"] != "yes")
		$updateset[] = "visible = 'yes'";
	$updateset[] = "last_action = NOW()";
}

if (count($updateset))
	do_mysql_query("UPDATE torrents SET " . join(",", $updateset) . " WHERE id = $torrentid");
/////////// GZiP Support COMMENT OUT//////////////////
benc_resp_raw($resp);
/////////// GZiP Support//////////////////
/*
if ($_SERVER["HTTP_ACCEPT_ENCODING"] == "gzip")
{
header("Content-Encoding: gzip");
echo gzencode(benc_resp_raw($resp), 9, FORCE_GZIP);
}
else  benc_resp_raw($resp);
*/
/////////////////////////////


?>