'use strict'; const { Bans } = require(__dirname+'/../../db/') , config = require(__dirname+'/../../lib/misc/config.js'); module.exports = async (req, res, next) => { const { defaultBanDuration } = config.get; const banDate = new Date(); const banExpiry = new Date(banDate.getTime() + (req.body.ban_duration || defaultBanDuration)); //uses config default if missing or malformed const banReason = req.body.ban_reason || req.body.log_message || 'No reason specified'; const allowAppeal = (req.body.no_appeal || req.body.ban_q || req.body.ban_h) ? false : true; //dont allow appeals for range bans const bans = []; if (req.body.ban || req.body.global_ban) { const banBoard = req.body.global_ban ? null : req.params.board; const ipPosts = res.locals.posts.reduce((acc, post) => { if (!acc[post.ip.cloak]) { acc[post.ip.cloak] = []; } acc[post.ip.cloak].push(post); return acc; }, {}); for (let ip in ipPosts) { const banType = ip.endsWith('.IP') ? 0 : ip.endsWith('.BP') ? 1 : 2; /* should we at some point filter these to not bother banning pruned ips, and/or not range banning bypasses (since it does nothing)? */ const thisIpPosts = ipPosts[ip]; let banRange = 0; let banIp = { cloak: thisIpPosts[0].ip.cloak, raw: thisIpPosts[0].ip.raw, }; if (req.body.ban_h) { banRange = 2; banIp.cloak = thisIpPosts[0].ip.cloak .split('.') .slice(0,1) .join('.'); } else if (req.body.ban_q) { banRange = 1; banIp.cloak = thisIpPosts[0].ip.cloak .split('.') .slice(0,2) .join('.'); } bans.push({ 'range': banRange, 'type': banType, 'ip': banIp, 'reason': banReason, 'board': banBoard, 'posts': req.body.preserve_post ? thisIpPosts : null, 'issuer': req.session.user, 'date': banDate, 'expireAt': banExpiry, allowAppeal, 'appeal': null, 'showUser': !req.body.hide_name, 'seen': false, }); } } if (req.body.report_ban || req.body.global_report_ban){ const banBoard = req.body.global_report_ban ? null : req.params.board; res.locals.posts.forEach(post => { let ips = []; if (req.body.report_ban) { const matches = post.reports.map(r => { if (req.body.checkedreports.includes(r.id.toString())) { return r.ip; } }); ips = ips.concat(matches); } if (req.body.global_report_ban) { const matches = post.globalreports.map(r => { if (req.body.checkedreports.includes(r.id.toString())) { return r.ip; } }); ips = ips.concat(matches); } ips = ips.filter(n => n); [...new Set(ips)].forEach(ip => { const banType = ip.endsWith('.IP') ? 0 : ip.endsWith('.BP') ? 1 : 2; bans.push({ 'type': banType, 'range': 0, 'ip': ip, 'reason': banReason, 'board': banBoard, 'posts': null, 'issuer': req.session.user, 'date': banDate, 'expireAt': banExpiry, allowAppeal, 'appeal': null, 'showUser': !req.body.hide_name, 'seen': false }); }); }); } const numBans = await Bans.insertMany(bans).then(result => result.insertedCount); const query = { message: `Added ${numBans} bans`, }; if ((req.body.ban || req.body.global_ban ) && req.body.ban_reason) { res.locals.actions.numBuild++;//there was a ban reason, so we may need to rebuild some pages, since banning is usually not a building action query['action'] = '$set'; query['query'] = { 'banmessage': req.body.ban_reason }; } return query; }