From 6a4c7988678f99208eefa8c636fe72da4273a75a Mon Sep 17 00:00:00 2001 From: Machiavelli Date: Sun, 12 Sep 2010 11:06:26 +0200 Subject: Core/DBLayer: Replace all ad-hoc queries in AuthSocket with prepared statements --HG-- branch : trunk --- src/server/shared/Database/Implementation/LoginDatabase.cpp | 12 ++++++++++++ src/server/shared/Database/Implementation/LoginDatabase.h | 13 +++++++++++++ 2 files changed, 25 insertions(+) (limited to 'src/server/shared/Database/Implementation') diff --git a/src/server/shared/Database/Implementation/LoginDatabase.cpp b/src/server/shared/Database/Implementation/LoginDatabase.cpp index 7cf7e30b0f6..9032cb639d3 100644 --- a/src/server/shared/Database/Implementation/LoginDatabase.cpp +++ b/src/server/shared/Database/Implementation/LoginDatabase.cpp @@ -31,9 +31,21 @@ bool LoginDatabaseConnection::Open(const std::string& infoString) ################################## */ PrepareStatement(LOGIN_GET_REALMLIST, "SELECT id, name, address, port, icon, color, timezone, allowedSecurityLevel, population, gamebuild FROM realmlist WHERE color <> 3 ORDER BY name"); + PrepareStatement(LOGIN_SET_EXPIREDIPBANS, "DELETE FROM ip_banned WHERE unbandate<=UNIX_TIMESTAMP() AND unbandate<>bandate"); + PrepareStatement(LOGIN_SET_EXPIREDACCBANS, "UPDATE account_banned SET active = 0 WHERE unbandate<=UNIX_TIMESTAMP() AND unbandate<>bandate"); + PrepareStatement(LOGIN_GET_IPBANNED, "SELECT * FROM ip_banned WHERE ip = ?"); + PrepareStatement(LOGIN_SET_IPAUTOBANNED, "INSERT INTO ip_banned VALUES (?, UNIX_TIMESTAMP(), UNIX_TIMESTAMP()+?,'Trinity realmd', 'Failed login autoban')"); + PrepareStatement(LOGIN_GET_ACCBANNED, "SELECT bandate,unbandate FROM account_banned WHERE id = ? AND active = 1"); + PrepareStatement(LOGIN_SET_ACCAUTOBANNED, "INSERT INTO account_banned VALUES (?, UNIX_TIMESTAMP(), UNIX_TIMESTAMP()+?, 'Trinity realmd', 'Failed login autoban', 1)"); + PrepareStatement(LOGIN_GET_SESSIONKEY, "SELECT sessionkey FROM account WHERE username = ?"); PrepareStatement(LOGIN_SET_VS, "UPDATE account SET v = ?, s = ? WHERE username = ?"); PrepareStatement(LOGIN_SET_LOGONPROOF, "UPDATE account SET sessionkey = ?, last_ip = ?, last_login = NOW(), locale = ?, failed_logins = 0 WHERE username = ?"); PrepareStatement(LOGIN_GET_LOGONCHALLENGE, "SELECT a.sha_pass_hash,a.id,a.locked,a.last_ip,aa.gmlevel,a.v,a.s FROM account a LEFT JOIN account_access aa ON (a.id = aa.id) WHERE a.username = ?"); + PrepareStatement(LOGIN_SET_FAILEDLOGINS, "UPDATE account SET failed_logins = failed_logins + 1 WHERE username = ?"); + PrepareStatement(LOGIN_GET_FAILEDLOGINS, "SELECT id, failed_logins FROM account WHERE username = ?"); + PrepareStatement(LOGIN_GET_ACCIDBYNAME, "SELECT id FROM account WHERE username = ?"); + PrepareStatement(LOGIN_GET_NUMCHARSONREALM, "SELECT numchars FROM realmcharacters WHERE realmid = ? AND acctid= ?"); + return true; } diff --git a/src/server/shared/Database/Implementation/LoginDatabase.h b/src/server/shared/Database/Implementation/LoginDatabase.h index 2dde12014d0..4792858d50e 100644 --- a/src/server/shared/Database/Implementation/LoginDatabase.h +++ b/src/server/shared/Database/Implementation/LoginDatabase.h @@ -44,9 +44,22 @@ enum LoginDatabaseStatements */ LOGIN_GET_REALMLIST, + LOGIN_SET_EXPIREDIPBANS, + LOGIN_SET_EXPIREDACCBANS, + LOGIN_GET_IPBANNED, + LOGIN_SET_IPAUTOBANNED, + LOGIN_GET_ACCBANNED, + LOGIN_SET_ACCAUTOBANNED, + LOGIN_GET_SESSIONKEY, LOGIN_SET_VS, LOGIN_SET_LOGONPROOF, LOGIN_GET_LOGONCHALLENGE, + LOGIN_SET_FAILEDLOGINS, + LOGIN_GET_FAILEDLOGINS, + + LOGIN_GET_ACCIDBYNAME, + LOGIN_GET_NUMCHARSONREALM, + MAX_LOGINDATABASE_STATEMENTS, }; -- cgit v1.2.3