metin-server/m2dev-server-src
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

XChaCha20-Poly1305 via libsodium

Browse Source
This commit is contained in:
rtw1x1
2026-02-03 11:11:37 +00:00
parent 66068c1bd5
commit db87d068bc
963 changed files with 49428 additions and 264486 deletions
Download Patch File Download Diff File Expand all files Collapse all files

70
src/game/input_auth.cpp
View File

@@ -1,4 +1,4 @@
#include "stdafx.h"
#include "stdafx.h"
#include "constants.h"
#include "config.h"
#include "input.h"
@@ -8,8 +8,61 @@
#include "locale_service.h"
#include "db.h"
#include <unordered_map>
extern time_t get_global_time();
static const int LOGIN_MAX_ATTEMPTS = 5;
static const DWORD LOGIN_BLOCK_DURATION_MS = 60000;
struct LoginAttemptInfo
{
int failCount;
DWORD lastAttemptTime;
};
static std::unordered_map<std::string, LoginAttemptInfo> s_loginAttempts;
void RecordLoginFailure(const char* hostName)
{
DWORD now = get_dword_time();
auto it = s_loginAttempts.find(hostName);
if (it == s_loginAttempts.end())
{
s_loginAttempts[hostName] = { 1, now };
}
else
{
if (now - it->second.lastAttemptTime >= LOGIN_BLOCK_DURATION_MS)
it->second.failCount = 0;
it->second.failCount++;
it->second.lastAttemptTime = now;
}
}
void ClearLoginFailure(const char* hostName)
{
s_loginAttempts.erase(hostName);
}
static bool IsLoginRateLimited(const char* hostName)
{
auto it = s_loginAttempts.find(hostName);
if (it == s_loginAttempts.end())
return false;
DWORD now = get_dword_time();
if (now - it->second.lastAttemptTime >= LOGIN_BLOCK_DURATION_MS)
{
s_loginAttempts.erase(it);
return false;
}
return it->second.failCount >= LOGIN_MAX_ATTEMPTS;
}
bool FN_IS_VALID_LOGIN_STRING(const char *str)
{
const char* tmp;
@@ -105,12 +158,21 @@ void CInputAuth::Login(LPDESC d, const char * c_pData)
if (!g_bAuthServer)
{
sys_err ("CInputAuth class is not for game server. IP %s might be a hacker.",
sys_err ("CInputAuth class is not for game server. IP %s might be a hacker.",
inet_ntoa(d->GetAddr().sin_addr));
d->DelayedDisconnect(5);
return;
}
// Rate limiting: block IPs with too many failed attempts
if (IsLoginRateLimited(d->GetHostName()))
{
sys_log(0, "InputAuth::Login : RATE LIMITED IP %s", d->GetHostName());
LoginFailure(d, "BLOCK");
d->DelayedDisconnect(3);
return;
}
// string 무결성을 위해 복사
char login[LOGIN_MAX_LEN + 1];
trim_and_lower(pinfo->login, login, sizeof(login));
@@ -148,10 +210,8 @@ void CInputAuth::Login(LPDESC d, const char * c_pData)
}
DWORD dwKey = DESC_MANAGER::instance().CreateLoginKey(d);
DWORD dwPanamaKey = dwKey ^ pinfo->adwClientKey[0] ^ pinfo->adwClientKey[1] ^ pinfo->adwClientKey[2] ^ pinfo->adwClientKey[3];
d->SetPanamaKey(dwPanamaKey);
sys_log(0, "InputAuth::Login : key %u:0x%x login %s", dwKey, dwPanamaKey, login);
sys_log(0, "InputAuth::Login : key %u login %s", dwKey, login);
TPacketCGLogin3 * p = M2_NEW TPacketCGLogin3;
thecore_memcpy(p, pinfo, sizeof(TPacketCGLogin3));