LiveCode Forums.

Code: Select all

"SELECT USERGROUP FROM USERS WHERE NAME = 'JGonz' AND PASSWORD = '12345'; DROP TABLE USERS;"

Code: Select all

local sConnectedClients     -- array of authorised clients [client] => [name]
local sPendingClients        -- list of all pending clients
local sClientNames            -- list of all currently used client names
local sRunning = false                   -- if the server is currently running

constant kPort = 8080

on preopenstack
   start using stack "SockSerfD_main.livecode"
   -- This is my library stack
   if loadprefs() then
      -- loading prefs from a text file,
      -- and testing this way if the 'use' has worked
      get writelog("Prefs connected")
      -- a function that does the logging
      serverstart
   else
      get writelog("Error loading Prefs")
      close this stack -- no idea yet if this works ...
   end if
end preopenstack

command ServerStart
   if not sRunning then
      put true into sRunning
      accept connections on port kPort with message "ServerClientConnected"
      get writelog("Server listens")
   end if    
end ServerStart

command ServerStop
   if sRunning then
      put false into sRunning
      put empty into sConnectedClients
      put empty into sPendingClients
      put empty into sClientNames
      repeat for each line tSocket in the opensockets
         close socket tSocket
      end repeat
   end if
   get writelog("Server dead")
end ServerStop

on ServerClientConnected pSocket
   if checkallow(checkSocket(pSocket),true) then
      --Is it a valid IP? (I only allow designated IPs to connect at all)     
      read from socket pSocket until return with message "ServerMessageReceived"
      write "Welcome, please AUT!" & return to socket pSocket
      -- Bogus reply ...
      get writelog("Client connected: " & pSocket)
   else
      get writelog("Wrong IP, rejected " & pSocket)
      -- this is a miscreant, do nothing but logging
      close socket pSocket
      socketClosed -- hope this works ...
   end if
end ServerClientConnected

on ServerMessageReceived pSocket, pMsg
   put char 1 to -2 of pMsg into pMsg
   if mMsg <> empty then get writelog(pMsg)
   local tCommand, tLength, tMsg
   put item 1 of pMsg into tCommand
   if item 2 of pMsg is empty then put 0 into item 2 of pMsg --### Hmmm ...
   put item 2 of pMsg into tLength
   switch tCommand
      case "MSG"
         read from socket pSocket for tLength chars
         put it into MyVar
         get writelog(MyVar)
         write "Message received, send next!" & return & MyVar to socket pSocket
         -- (Actually something meaningful should come here...)
         break
      case "AUT"
         read from socket pSocket for tLength chars
         if checkallow(it) then
             -- correct User? Additionally it should be a correct User ...
            put it into sConnectedClients[pSocket]
            write it & " , you're welcome! Send MSG!" & return to socket pSocket            
            get writelog(it & " is valid: " & pSocket)
         else
            put "Unknown User, try again!" into tMsg
            write "ERR," & the number of chars in tMsg & return & tMsg to socket pSocket
            close socket pSocket
            socketClosed
         end if
         break
   end switch
   read from socket pSocket until return with message "ServerMessageReceived"
end ServerMessageReceived

on socketClosed pSocket
   if sConnectedClients[pSocket] is not empty then
      local tName
      put sConnectedClients[pSocket] into tName
      delete variable sConnectedClients[pSocket]
      get writelog(tName & " disconnected")
   end if
end socketClosed

function CheckSocket pSocket
   -- extracts the IP from a socket
   put the itemdelimiter into OldItemDel
   set the itemdelimiter to ":"
   get item 1 of pSocket
   set the itemdelimiter to olditemDel
   return it
end CheckSocket