chanserv/batcher/templates.py

   1 import md5, os, hmac, time
   2 from rc4 import RC4
   3
   4 try:
   5   import hashlib
   6   sha256 = hashlib.sha256
   7   sha256m = hashlib.sha256
   8 except ImportError:
   9   import sha256 as __sha256
  10   sha256 = __sha256.sha256
  11   sha256m = __sha256
  12
  13 def generate_url(config, obj):
  14   s = os.urandom(4)
  15   r = RC4(md5.md5("%s %s" % (s, config["urlkey"])).hexdigest())
  16   a = r.crypt(obj["user.password"])
  17   b = md5.md5(md5.md5("%s %s %s %s" % (config["urlsecret"], obj["user.username"], a, s)).hexdigest()).hexdigest()
  18   obj["url"] = "%s?m=%s&h=%s&u=%s&r=%s" % (config["url"], a.encode("hex"), b, obj["user.username"].encode("hex"), s.encode("hex"))
  19
  20 def generate_resetcode(config, obj):
  21   if obj["user.lockuntil"] == 0:
  22     obj["resetline"] = "LOCK UNTIL NOT SET. STAFF ACCOUNT'S CAN'T USE RESET"
  23     return
  24
  25   if not config.has_key("__codegensecret"):
  26     config["__codegenhmac"] = hmac.HMAC(key=sha256(sha256("%s:codegenerator" % config["q9secret"]).digest()).hexdigest(), digestmod=sha256m)
  27
  28   h = config["__codegenhmac"].copy()
  29   h.update(sha256("%s:%d" % (obj["user.username"], obj["user.lockuntil"])).hexdigest())
  30
  31   obj["resetcode"] = h.hexdigest()
  32   obj["lockuntil"] = time.ctime(obj["user.lockuntil"])
  33   obj["resetline"] = "/MSG %(config.bot)s RESET #%(user.username)s %(resetcode)s" % obj
  34
  35 MAILTEMPLATES = {
  36   "mutators": {
  37     1: generate_url,
  38     3: generate_resetcode,
  39     5: generate_resetcode,
  40   },
  41   "sendto": {
  42     5: "prevemail",
  43   },
  44   "languages": {
  45     "en": {
  46       1: {
  47         "subject": "%(config.bot)s account registration",
  48         "body": """
  49 Thank you for registering.
  50 To get your password please visit:
  51 %(url)s
  52
  53 Note that this URL will not work forever, you should make a note of your password
  54 or change it (as on the site).
  55
  56 In case you forget your login/password use:
  57 /msg %(config.bot)s REQUESTPASSWORD %(user.email)s
  58
  59 Make sure you've read the %(config.bot)s FAQ at %(config.siteurl)s for a complete
  60 reference on Q's commands and usage.
  61
  62  ** PLEASE READ %(config.securityurl)s --
  63     it contains important information about keeping your account secure.
  64     Note that QuakeNet Operators will not intervene if you fail to read
  65     the above URL and your account is compromised as a result.
  66
  67 PLEASE REMEMBER THAT UNUSED ACCOUNTS ARE AUTOMATICALLY REMOVED
  68 AFTER %(config.cleanup)d DAYS, AND ALL CHANLEVS ARE LOST!
  69
  70 NB: Save this email for future reference.
  71 """,
  72       },
  73       2: { "subject": "%(config.bot)s password request", "body": """
  74 Your username/password is:
  75
  76 Username: %(user.username)s
  77 Password: %(user.password)s
  78
  79 To auth yourself to %(config.bot)s, type the following command
  80
  81    /MSG %(config.bot)s@%(config.server)s AUTH %(user.username)s %(user.password)s
  82 """, },
  83       3: { "subject": "%(config.bot)s password change", "body": """
  84 Your password has recently changed. If this was not requested by you,
  85 please use:
  86 %(resetline)s
  87
  88 You have until %(lockuntil)s to perform this command.
  89 """, },
  90       4: { "subject": "%(config.bot)s account reset", "body": """
  91 Your %(config.bot)s account settings have been restored:
  92   E-mail address: %(user.email)s
  93   Password:       %(user.password)s
  94
  95 Make sure you read the %(config.bot)s security FAQ at %(config.securityurl)s.
  96 """, },
  97       5: { "subject": "%(config.bot)s email change", "body": """
  98 Your email address has been changed on %(config.bot)s from %(prevemail)s to %(user.email)s.
  99
 100 If you did not request this please use:
 101 %(resetline)s
 102
 103 You have until %(lockuntil)s to perform this command.
 104 """, },
 105     },
 106   },
 107 }