462 lines
15 KiB
Python
462 lines
15 KiB
Python
import sqlite3
|
||
import datetime
|
||
import msvcrt
|
||
import sys
|
||
import os
|
||
import hashlib
|
||
import random
|
||
import secrets
|
||
from Crypto.Cipher import AES
|
||
from Crypto.PublicKey import RSA
|
||
from Crypto.Cipher import PKCS1_OAEP
|
||
from Crypto.Util.Padding import pad,unpad
|
||
|
||
#读入密码
|
||
def readpass(text):
|
||
sys.stdout=sys.__stdout__
|
||
sys.stdout.write(text)
|
||
sys.stdout.flush()
|
||
p=''
|
||
while True:
|
||
typed=msvcrt.getch()
|
||
if len(p)!=0:
|
||
if typed==b'\r':
|
||
sys.stdout.write('\b*')
|
||
sys.stdout.flush()
|
||
break
|
||
elif typed==b'\b':
|
||
p=p[:-1]
|
||
sys.stdout.write('\b \b')
|
||
sys.stdout.flush()
|
||
else:
|
||
p+=typed.decode("utf-8")
|
||
sys.stdout.write('\b*'+typed.decode("utf-8"))
|
||
sys.stdout.flush()
|
||
elif typed!=b'\r' and typed!=b'\b':
|
||
p+=typed.decode("utf-8")
|
||
sys.stdout.write(typed.decode("utf-8"))
|
||
sys.stdout.flush()
|
||
print('')
|
||
return p
|
||
|
||
#配置密钥
|
||
def getPASSWORD(PASSWORD):
|
||
#生成RSA密钥对
|
||
key=RSA.generate(2048)
|
||
public_key_local=key.publickey()
|
||
private_key=key
|
||
#保存RSA公钥
|
||
with open('data/key/public_key.pem','wb') as f:
|
||
f.write(public_key_local.exportKey())
|
||
#生成密钥转换与校验随机盐
|
||
PASSWORDsalt=secrets.token_hex(random.randint(32,1024))
|
||
with open("data/key/PASSWORDsalt.txt","w",encoding="utf-8") as f:
|
||
print(PASSWORDsalt,file=f)
|
||
verifysalt=secrets.token_hex(random.randint(32,1024))
|
||
with open("data/key/verifysalt.txt","w",encoding="utf-8") as f:
|
||
print(verifysalt,file=f)
|
||
#将管理密钥转化为AES-256密钥
|
||
AES_password=hashlib.sha256((PASSWORD+PASSWORDsalt).encode("utf-8")).digest()
|
||
#生成AES-256密钥校验哈希值并保存
|
||
AES_password_verify=hashlib.sha256(AES_password+verifysalt.encode("utf-8")).digest()
|
||
with open("data/key/AES_password_verify.bin","wb") as f:
|
||
f.write(AES_password_verify)
|
||
#AES-256加密RSA私钥并保存密文
|
||
AES_key=AES.new(AES_password,AES.MODE_ECB)
|
||
private_key_local=AES_key.encrypt(pad(private_key.exportKey(),32))
|
||
with open("data/key/private_key.bin","wb") as f:
|
||
f.write(private_key_local)
|
||
|
||
#加密
|
||
def encryptx(note):
|
||
#读取RSA公钥
|
||
with open('data/key/public_key.pem','rb') as f:
|
||
public_key_local=RSA.import_key(f.read())
|
||
#使用RSA公钥对数据进行加密
|
||
cipher=PKCS1_OAEP.new(public_key_local)
|
||
encrypted=cipher.encrypt(note.encode("utf-8"))
|
||
return encrypted
|
||
|
||
#解密
|
||
def decryptx(note,PASSWORD):
|
||
#读入RSA私钥密文、盐与校验哈希值
|
||
with open("data/key/private_key.bin","rb") as f:
|
||
private_key_local=f.read().strip()
|
||
with open("data/key/PASSWORDsalt.txt","r",encoding="utf-8") as f:
|
||
PASSWORDsalt=f.read().strip()
|
||
with open("data/key/verifysalt.txt","r",encoding="utf-8") as f:
|
||
verifysalt=f.read().strip()
|
||
with open("data/key/AES_password_verify.bin","rb") as f:
|
||
AES_password_verify=f.read().strip()
|
||
#将管理密钥转化为AES-256密钥并验证
|
||
AES_password=hashlib.sha256((PASSWORD+PASSWORDsalt).encode("utf-8")).digest()
|
||
AES_password_SHA=hashlib.sha256(AES_password+verifysalt.encode("utf-8")).digest()
|
||
if AES_password_SHA!=AES_password_verify:
|
||
return "管理密钥错误"
|
||
else:
|
||
#AES解密RSA私钥
|
||
AES_key=AES.new(AES_password,AES.MODE_ECB)
|
||
private_key_pem=unpad(AES_key.decrypt(private_key_local),32)
|
||
private_key=RSA.import_key(private_key_pem)
|
||
#使用RSA私钥解密数据
|
||
decrypter=PKCS1_OAEP.new(private_key)
|
||
note=decrypter.decrypt(note)
|
||
return note.decode("utf-8")
|
||
|
||
#修改管理密钥
|
||
def changePASSWORD():
|
||
#获取用户信息
|
||
db=sqlite3.connect(DATABASE)
|
||
cur=db.cursor()
|
||
cur.execute("SELECT * FROM adminx WHERE True")
|
||
data=cur.fetchall()
|
||
cur.close()
|
||
db.close()
|
||
data=[list(row) for row in data]
|
||
global PASSWORD
|
||
#验证管理密钥
|
||
PASSWORDold=readpass("请输入旧管理密钥：")
|
||
if len(data)==0:
|
||
print("当前无用户，验证自动通过")
|
||
PASSWORDnew=readpass("请输入新管理密钥：")
|
||
getPASSWORD(PASSWORDnew)
|
||
PASSWORD=PASSWORDnew
|
||
return "管理密钥修改成功"
|
||
while decryptx(data[0][6],PASSWORDold)=="管理密钥错误":
|
||
print("管理密钥错误")
|
||
PASSWORDold=readpass("请输入旧管理密钥：")
|
||
print("验证通过")
|
||
#修改管理密钥
|
||
PASSWORDnew=readpass("请输入新管理密钥：")
|
||
#使用旧管理密钥解密
|
||
for i in range(len(data)):
|
||
data[i][6]=decryptx(data[i][6],PASSWORDold)
|
||
#使用新管理密钥重新加密
|
||
getPASSWORD(PASSWORDnew)
|
||
db=sqlite3.connect(DATABASE)
|
||
cur=db.cursor()
|
||
for i in range(len(data)):
|
||
cur.execute("UPDATE adminx SET password=? WHERE admin=?",(encryptx(data[i][6]),data[i][0]))
|
||
db.commit()
|
||
cur.close()
|
||
db.close()
|
||
PASSWORD=PASSWORDnew
|
||
return "管理密钥修改成功"
|
||
|
||
#添加用户
|
||
def add():
|
||
db=sqlite3.connect(DATABASE)
|
||
cur=db.cursor()
|
||
adminx=input("用户名：")
|
||
#用户名重复验证
|
||
while search(adminx,0)=="":
|
||
print("该用户已存在，请重新输入")
|
||
adminx=input("用户名：")
|
||
numberx=input("手机号码：")
|
||
dayx=int(input("代理天数："))
|
||
gamex=input("关卡号：")
|
||
passwordx=readpass("密码：")
|
||
passwordx=encryptx(passwordx)
|
||
#应用更新
|
||
cur.execute("INSERT INTO adminx VALUES(?,?,?,'y','2000-01-01',?,?)",(adminx,numberx,dayx,gamex,passwordx))
|
||
db.commit()
|
||
cur.close()
|
||
db.close()
|
||
return "操作成功"
|
||
|
||
#删除用户信息
|
||
def delete(id):
|
||
db=sqlite3.connect(DATABASE)
|
||
cur=db.cursor()
|
||
#检查用户是否存在
|
||
cur.execute("SELECT * FROM adminx WHERE admin=?",(id,))
|
||
data=cur.fetchall()
|
||
if len(data)==0:
|
||
return "未找到"+id
|
||
#应用更新
|
||
cur.execute("DELETE FROM adminx WHERE admin=?",(id,))
|
||
db.commit()
|
||
cur.close()
|
||
db.close()
|
||
return "成功删除"+id
|
||
|
||
#检索用户信息与配置
|
||
def search(id,book):
|
||
db=sqlite3.connect(DATABASE)
|
||
cur=db.cursor()
|
||
#处理启动时间查询
|
||
if id=="time":
|
||
cur.execute("SELECT * FROM timeset WHERE True")
|
||
timex=cur.fetchall()
|
||
timex=[list(row) for row in timex]
|
||
cur.close()
|
||
db.close()
|
||
if len(timex)==0:
|
||
return "启动时间未设置"
|
||
else:
|
||
for i in range(len(timex)):
|
||
print(timex[i][0])
|
||
return ""
|
||
#处理MAA路径查询
|
||
if id=="maa":
|
||
cur.execute("SELECT * FROM pathset WHERE True")
|
||
pathx=cur.fetchall()
|
||
if len(pathx)>0:
|
||
cur.close()
|
||
db.close()
|
||
return pathx[0][0]
|
||
else:
|
||
cur.close()
|
||
db.close()
|
||
return "MAA路径未设置"
|
||
#处理用户查询与全部信息查询
|
||
if id=="all":
|
||
cur.execute("SELECT * FROM adminx WHERE True")
|
||
else:
|
||
cur.execute("SELECT * FROM adminx WHERE admin=?",(id,))
|
||
data=cur.fetchall()
|
||
#处理全部信息查询时的MAA路径与启动时间查询
|
||
if id=="all":
|
||
cur.execute("SELECT * FROM pathset WHERE True")
|
||
pathx=cur.fetchall()
|
||
if len(pathx)>0:
|
||
print("\nMAA路径："+pathx[0][0])
|
||
else:
|
||
print("\nMAA路径未设置")
|
||
cur.execute("SELECT * FROM timeset WHERE True")
|
||
timex=cur.fetchall()
|
||
timex=[list(row) for row in timex]
|
||
if len(timex)==0:
|
||
print("\n启动时间未设置")
|
||
else:
|
||
print("启动时间：",end='')
|
||
for i in range(len(timex)):
|
||
print(timex[i][0],end=' ')
|
||
print('')
|
||
cur.close()
|
||
db.close()
|
||
data=[list(row) for row in data]
|
||
if len(data)>0:
|
||
#转译执行情况、用户状态，对全部信息查询隐去密码
|
||
curdate=datetime.date.today()
|
||
curdate=curdate.strftime('%Y-%m-%d')
|
||
for i in range(len(data)):
|
||
if data[i][4]==curdate:
|
||
data[i][4]="今日已执行"
|
||
else:
|
||
data[i][4]="今日未执行"
|
||
if data[i][3]=='y':
|
||
data[i][3]="启用"
|
||
else:
|
||
data[i][3]="禁用"
|
||
if id=="all":
|
||
data[i][6]="******"
|
||
else:
|
||
#解密
|
||
global PASSWORD
|
||
if PASSWORD==0 or decryptx(data[i][6],PASSWORD)=="管理密钥错误":
|
||
PASSWORD=readpass("请输入管理密钥：")
|
||
data[i][6]=decryptx(data[i][6],PASSWORD)
|
||
#制表输出
|
||
if book==1:
|
||
print('')
|
||
print(unit("用户名",15),unit("手机号码",12),unit("代理天数",8),unit("状态",4),unit("执行情况",10),unit("关卡",10),unit("密码",25))
|
||
for i in range(len(data)):
|
||
print(unit(data[i][0],15),unit(data[i][1],12),unit(data[i][2],8),unit(data[i][3],4),unit(data[i][4],10),unit(data[i][5],10),unit(data[i][6],25))
|
||
return ""
|
||
elif id=="all":
|
||
return "\n当前没有用户记录"
|
||
else:
|
||
return "未找到"+id
|
||
|
||
#续期
|
||
def renewal(readxx):
|
||
#提取用户名与续期时间
|
||
for i in range(len(readxx)):
|
||
if readxx[i]==' ':
|
||
id=readxx[:i]
|
||
dayp=int(readxx[i+1:])
|
||
break
|
||
#检查用户是否存在
|
||
db=sqlite3.connect(DATABASE)
|
||
cur=db.cursor()
|
||
cur.execute("SELECT * FROM adminx WHERE admin=?",(id,))
|
||
data=cur.fetchall()
|
||
if len(data)==0:
|
||
cur.close()
|
||
db.close()
|
||
return "未找到"+id
|
||
#应用更新
|
||
cur.execute("UPDATE adminx SET day=? WHERE admin=?",(data[0][2]+dayp,id))
|
||
db.commit()
|
||
cur.close()
|
||
db.close()
|
||
return '成功更新'+id+'的代理天数至'+str(data[0][2]+dayp)+'天'
|
||
|
||
#用户状态配置
|
||
def turn(id,t):
|
||
#检查用户是否存在
|
||
db=sqlite3.connect(DATABASE)
|
||
cur=db.cursor()
|
||
cur.execute("SELECT * FROM adminx WHERE admin=?",(id,))
|
||
data=cur.fetchall()
|
||
if len(data)==0:
|
||
cur.close()
|
||
db.close()
|
||
return "未找到"+id
|
||
#应用更新
|
||
cur.execute("UPDATE adminx SET status=? WHERE admin=?",(t,id))
|
||
db.commit()
|
||
cur.close()
|
||
db.close()
|
||
if t=='y':
|
||
return '已启用'+id
|
||
else:
|
||
return '已禁用'+id
|
||
|
||
#修改刷取关卡
|
||
def gameid(readxx):
|
||
#提取用户名与修改值
|
||
for i in range(len(readxx)):
|
||
if readxx[i]==' ':
|
||
id=readxx[:i]
|
||
gamep=readxx[i+1:]
|
||
break
|
||
#检查用户是否存在
|
||
db=sqlite3.connect(DATABASE)
|
||
cur=db.cursor()
|
||
cur.execute("SELECT * FROM adminx WHERE admin=?",(id,))
|
||
data=cur.fetchall()
|
||
if len(data)==0:
|
||
cur.close()
|
||
db.close()
|
||
return "未找到"+id
|
||
#导入与应用特殊关卡规则
|
||
games={}
|
||
with open('data/gameid.txt',encoding='utf-8') as f:
|
||
gameids=f.readlines()
|
||
for i in range(len(gameids)):
|
||
for j in range(len(gameids[i])):
|
||
if gameids[i][j]=='：':
|
||
gamein=gameids[i][:j]
|
||
gameout=gameids[i][j+1:]
|
||
break
|
||
games[gamein]=gameout.strip()
|
||
if gamep in games:
|
||
gamep=games[gamep]
|
||
#应用更新
|
||
cur.execute("UPDATE adminx SET game=? WHERE admin=?",(gamep,id))
|
||
db.commit()
|
||
cur.close()
|
||
db.close()
|
||
return '成功更新'+id+'的关卡为'+gamep
|
||
|
||
#设置MAA路径
|
||
def setpath(pathx):
|
||
db=sqlite3.connect(DATABASE)
|
||
cur=db.cursor()
|
||
cur.execute("SELECT * FROM pathset WHERE True")
|
||
pathold=cur.fetchall()
|
||
if len(pathold)>0:
|
||
cur.execute("UPDATE pathset SET path=? WHERE True",(pathx,))
|
||
else:
|
||
cur.execute("INSERT INTO pathset VALUES(?)",(pathx,))
|
||
db.commit()
|
||
cur.close()
|
||
db.close()
|
||
return "MAA路径已设置为"+pathx
|
||
|
||
#设置启动时间
|
||
def settime(book,timex):
|
||
db=sqlite3.connect(DATABASE)
|
||
cur=db.cursor()
|
||
#检查待操作对象存在情况
|
||
cur.execute("SELECT * FROM timeset WHERE True")
|
||
timeold=cur.fetchall()
|
||
timeold=[list(row) for row in timeold]
|
||
timenew=[]
|
||
timenew.append(timex)
|
||
#添加时间设置
|
||
if book=='+':
|
||
if timenew in timeold:
|
||
cur.close()
|
||
db.close()
|
||
return "已存在"+timex
|
||
else:
|
||
cur.execute("INSERT INTO timeset VALUES(?)",(timex,))
|
||
db.commit()
|
||
cur.close()
|
||
db.close()
|
||
return "已添加"+timex
|
||
#删除时间设置
|
||
elif book=='-':
|
||
if timenew in timeold:
|
||
cur.execute("DELETE FROM timeset WHERE time=?",(timex,))
|
||
db.commit()
|
||
cur.close()
|
||
db.close()
|
||
return "已删除"+timex
|
||
else:
|
||
cur.close()
|
||
db.close()
|
||
return "未找到"+timex
|
||
|
||
#统一制表单元
|
||
def unit(x,m):
|
||
#字母与连接符占1位，中文占2位
|
||
x=str(x)
|
||
n=0
|
||
for i in x:
|
||
if 'a'<=i<='z' or 'A'<=i<='Z' or '0'<=i<='9' or i=='_' or i=='-':
|
||
n+=1
|
||
return ' '+x+' '*(m-2*len(x)+n)
|
||
|
||
#初期检查
|
||
DATABASE="data/data.db"
|
||
PASSWORD=0
|
||
if not os.path.exists(DATABASE):
|
||
db=sqlite3.connect(DATABASE)
|
||
cur=db.cursor()
|
||
db.execute("CREATE TABLE adminx(admin text,number text,day int,status text,last date,game text,password byte)")
|
||
db.execute("CREATE TABLE pathset(path text)")
|
||
db.execute("CREATE TABLE timeset(time text)")
|
||
readx=input("首次启动，请设置MAA路径：")
|
||
cur.execute("INSERT INTO pathset VALUES(?)",(readx,))
|
||
db.commit()
|
||
cur.close()
|
||
db.close()
|
||
PASSWORD=readpass("请设置管理密钥（密钥与数据库绑定）：")
|
||
getPASSWORD(PASSWORD)
|
||
|
||
#初始界面
|
||
print("Good evening!")
|
||
print(search("all",1))
|
||
|
||
#主程序
|
||
while True:
|
||
read=input()
|
||
if len(read)==0:
|
||
print("无法识别的输入")
|
||
elif read[0]=='+' and len(read)==1:
|
||
print(add())
|
||
elif read[0]=='-' and len(read)==1:
|
||
exit()
|
||
elif read[0]=='/':
|
||
print(setpath(read[1:]))
|
||
elif read[0]=='*' and len(read)==1:
|
||
print(changePASSWORD())
|
||
elif read[0]==':' and (read[1]=='+' or read[1]=='-'):
|
||
print(settime(read[1],read[2:]))
|
||
else:
|
||
if read[-1]=='?' and read[-2]==' ':
|
||
print(search(read[:-2],1))
|
||
elif read[-1]=='+' and read[-2]==' ':
|
||
print(renewal(read[:-2]))
|
||
elif read[-1]=='-' and read[-2]==' ':
|
||
print(delete(read[:-2]))
|
||
elif read[-1]=='~' and read[-2]==' ':
|
||
print(gameid(read[:-2]))
|
||
elif (read[-1]=='y' or read[-1]=='n') and read[-2]==' ':
|
||
print(turn(read[:-2],read[-1]))
|
||
else:
|
||
print("无法识别的输入") |