<?php
//----------------------------------------------------------------------
//  CrawlTrack 3.1.0
//----------------------------------------------------------------------
// Crawler Tracker for website
//----------------------------------------------------------------------
// Author: Jean-Denis Brun
//----------------------------------------------------------------------
// Website: www.crawltrack.net
//----------------------------------------------------------------------
// That script is distributed under GNU GPL license
//----------------------------------------------------------------------
// file: updateremoteattack.php
//----------------------------------------------------------------------
//  Last update: 21/09/2008
//----------------------------------------------------------------------
if (!defined('IN_CRAWLT_ADMIN'))
{
	echo"<h1>Hacking attempt !!!!</h1>";
	exit();
}

//initialize array
$updatelistua=array();
$updatelistname=array();
$updatelisturl=array();
$updatelistuser=array();
$listcrawler=array();
$crawlernameadd=array();
$crawleruaadd=array();	

//databaseconnection
$connexion = mysql_connect($crawlthost,$crawltuser,$crawltpassword) or die("MySQL connection to database problem");
$selection = mysql_select_db($crawltdb) or die("MySQL database selection problem");


	//requete to get the actual liste id

	$sqlupdate = "SELECT * FROM crawlt_update_attack";

	$requeteupdate = db_query($sqlupdate, $connexion);

	$idlastupdate=0;

	while ($ligne = mysql_fetch_object($requeteupdate))                                                                              
		{
		$update=$ligne->update_id; 
		if($update>$idlastupdate)
			{
			$idlastupdate=$update;
			}		
		}
	// we get the actual list number on www.crawltrack.net

	$idlist="";
	$file="";
	if(function_exists('fopen'))
		{
		$nofile=0;
		$file = fopen("http://www.crawltrack.net/listattack/idlist.txt", "r");
	
		}
	else
		{
		$nofile=1;
		}

	if (!$file OR $nofile==1)
		{
		//no connection to the file
	
	
		echo"<br><br><h5>".$language['no_access_attack']."</h5>\n";
		

		echo"<h2><a href=\"http://www.crawltrack.net/crawlttest/php/countdownload.php?url=http://www.crawltrack.net/download/attacklist.zip\">".$language['download_attack']."</a></h2>\n";		
		
		echo"<h5>".$language['download_update_attack']."</h5>\n";		
		echo"<div class=\"form\">\n";
		echo"<form action=\"index.php\" method=\"POST\" >\n";
		echo "<input type=\"hidden\" name ='validform' value='29'>\n";
		echo "<input type=\"hidden\" name ='navig' value='6'>\n";
		echo"<input name='ok' type='submit'  value='OK ' size='20'>\n";
		echo"</form>\n";
		echo"</div><br>\n";

		}
	else
		{
		while (!feof($file))
			{
			$data = fgets($file, 1024);
			$idlist=$idlist.$data;
			}

		fclose($file);

		if($idlist=="")
			{
			//file empty
		
			echo"<br><br><h2>".$language['no_access2']."</h2><br><br>";	

			}
		else
			{

			//test to know is the crawler list is up to date.
			if($idlist==$idlastupdate)
				{
				//the list is up to date
				echo"<br><br><h1>".$language['list_up_to_date']."</h1><br><br>";	
				}
			else
				{
				//we can update the list
				// we get the actual list on www.crawltrack.net

				$crawlerlist="";
				$file2="";
				if( function_exists('fopen'))
					{
					$nofile2=0;
					$file2 = fopen("http://www.crawltrack.net/listattack/attacklist.txt", "r");
					}
				else
					{
					$nofile2=1;
					}	
								
				if (!$file2 OR $nofile2==1) 
					{
					//no connection to the file
					echo"<br><br><h2>".$language['no_access2']."</h2><br><br>";
				
					}
				else
					{
					while (!feof($file2))
						{
						$data2 = fgets($file2, 1024);
						$crawlerlist=$crawlerlist.$data2;
						}

					fclose($file2);
				
					if($crawlerlist=="")
						{
						//file empty
		
						echo"<br><br><h2>".$language['no_access2']."</h2><br><br>";	
						}
					else
						{				
	
						$tabdata=explode("crawltototrack",$crawlerlist);

						$nbr=count($tabdata)/4;

						//we treat the file content
						$i=0;
						for ($j=1;$j<=$nbr;$j++)
							{
							$updatelistid[$j]=$tabdata[$i];
							$i=$i+1;
							$updatelistattack[$j]=$tabdata[$i];
							$i=$i+1;
							$updatelistscript[$j]=$tabdata[$i];							
							$i=$i+1;
							$updatelisttype[$j]=$tabdata[$i];							
							$i=$i+1;							
							}
		
		
						$sqlexist = "SELECT * FROM crawlt_attack";
	
						$requeteexist = db_query($sqlexist, $connexion);
	
	
						while ($ligne = mysql_fetch_object($requeteexist))                                                                              
							{
							$attackid=$ligne->id_attack;
							$listattack[]=$attackid;
							}	

		
						$nbrdata =count($updatelistid);
						$nbrupdate=0;	
	
						for ($k=1;$k<=$nbrdata;$k++)
							{
							$id=$updatelistid[$k];
							$attack=$updatelistattack[$k];
							$script=$updatelistscript[$k];
              $type=$updatelisttype[$k];
		

							if(in_array($id,$listattack))
								{
								}
							else
								{
								$sqlinsert ="INSERT INTO crawlt_attack (id_attack,attack, script, type)
								VALUES ('".sql_quote($id)."','".sql_quote($attack)."','".sql_quote($script)."','".sql_quote($type)."')";	
		
								$requeteinsert = db_query($sqlinsert, $connexion);
								$nbrupdate=$nbrupdate+1;
								$crawlernameadd[] = $attack;
								$crawleruaadd[] = $script;
								$crawlertypeadd[] = $type;
								}				
				
							}

						echo"<h1><br><br>$nbrupdate&nbsp;".$language['attack_add']."<br></h1>";
						$sqlinsertid ="INSERT INTO crawlt_update_attack (update_id) VALUES ('".sql_quote($idlist)."')";	
		
						$requeteinsertid = db_query($sqlinsertid, $connexion);
						
						
						echo"<div align='center'><table cellpadding='0px' cellspacing='0' width='750px'><tr><td class='tableau1'>".$language['parameter']."</td><td class='tableau1'>".$language['script']."</td><td class='tableau2'>".$language['attack_type']."</td></tr>\n";
                        for ($l=0;$l<$nbrupdate;$l++)
                            {
                            $crawlnamedisplay=htmlentities($crawlernameadd[$l]);
                            $crawluadisplay=htmlentities($crawleruaadd[$l]);
                            $crawltypedisplay=htmlentities($crawlertypeadd[$l]);
                            
                            if ($l%2 ==0)
                                {
                                echo"<tr><td class='tableau3'>$crawlnamedisplay</td>\n";
                                echo"<td class='tableau3'>$crawluadisplay</td>\n";
                                echo"<td class='tableau5'>$crawltypedisplay</td></tr>\n";
                                }
                            else
                                {
                                echo"<tr><td class='tableau30'>$crawlnamedisplay</td>\n";
                                echo"<td class='tableau30'>$crawluadisplay</td>\n";
                                echo"<td class='tableau50'>$crawltypedisplay</td></tr>\n";
                                } 
                            }
                        echo"</tr></table></div><br><br>";
								
						}
					}
				}
			}

		}

?>