def regen_all(cls, context):
"""重算所有缓存，只有通过命令行提权后才能调用"""
User.test_permission(context)
for obj in models.Submission.objects.all():
try:
obj.group = User.get(context, obj.user).group
obj.save()
except NotFound:
pass
for obj in models.FlagClear.objects.all():
try:
user = User.get(context, obj.user)
obj.group = user.group
challenge = Challenge.get(context, obj.challenge)
if obj.flag not in range(len(challenge.flags)):
raise NotFound
obj.save()
except NotFound:
obj.delete()
for challenge in Challenge.get_all(context):
cls._regen_challenge_clear(challenge)
models.ChallengeFirst.objects.all().delete()
models.FlagFirst.objects.all().delete()
cls._refill_first()
cls._regen_score()
def handle(self, challenges_dir, dry_run=False, **options):
self.challenges_dir = challenges_dir
self.media_dir = pathlib.Path(settings.MEDIA_ROOT)
self.dry_run = dry_run
context = Context(elevated=True)
old_challenges = {i.name: i for i in Challenge.get_all(context)}
new_challenges = {}
for path in challenges_dir.iterdir():
if not path.is_dir() or path.name.startswith('.'):
continue
# noinspection PyBroadException
try:
challenge = self.parse_challenge(path)
except Exception as e:
msg = traceback.format_exception_only(type(e), e)[0].strip()
self.stdout.write(self.style.ERROR(f'{path.name}: {msg}'))
else:
if challenge['enabled']:
new_challenges[challenge['name']] = challenge
self.stdout.write(f'Parsed {len(new_challenges)} challenges')
for name in new_challenges:
if name in old_challenges:
if not dry_run:
old_challenges[name].update(**new_challenges[name])
self.stdout.write(f'{name}: ' + self.style.WARNING('updated'))
else:
if not dry_run:
Challenge.create(context, **new_challenges[name])
self.stdout.write(f'{name}: ' + self.style.SUCCESS('created'))
for name in old_challenges:
if name not in new_challenges:
if not dry_run:
old_challenges[name].delete()
self.stdout.write(f'{name}: ' + self.style.NOTICE('deleted'))
def _challenge_event(cls, old, new):
context = Context(elevated=True)
if old is None:
return
if new is None:
models.ChallengeClear.objects.filter(challenge=old['pk']).delete()
models.FlagClear.objects.filter(challenge=old['pk']).delete()
models.ChallengeFirst.objects.filter(challenge=old['pk']).delete()
models.FlagFirst.objects.filter(challenge=old['pk']).delete()
if old['enabled']:
cls._regen_score()
return
if len(new['flags']) != len(old['flags']):
models.FlagClear.objects.filter(challenge=old['pk'],
flag__gte=len(
new['flags'])).delete()
cls._regen_challenge_clear(Challenge.get(context, old['pk']))
models.ChallengeFirst.objects.filter(challenge=old['pk']).delete()
models.FlagFirst.objects.filter(challenge=old['pk']).delete()
cls._refill_first()
if not old['enabled'] and not new['enabled']:
return
if new['enabled'] != old['enabled']:
cls._regen_score()
return
if new['category'] != old['category']:
cls._regen_score()
return
old_flag_scores = [i['score'] for i in old['flags']]
new_flag_scores = [i['score'] for i in new['flags']]
if new_flag_scores != old_flag_scores:
cls._regen_score()
return
def _regen_score(cls):
models.Score.objects.all().delete()
cs = {i.pk: i.json for i in Challenge.get_all(Context(elevated=True))}
for i in models.FlagClear.objects.order_by('time').iterator():
if cs[i.challenge]['enabled']:
cls._add_score(i.user, i.group, i.time,
cs[i.challenge]['flags'][i.flag]['score'],
cs[i.challenge]['category'])
def get_user_history(cls, context, user):
challenges = Challenge.get_all(context.copy(elevated=True))
flags = {i.pk: i.flags for i in challenges}
score = 0
history = []
for i in models.FlagClear.objects.filter(user=user).order_by('time'):
score += flags[i.challenge][i.flag]['score']
history.append({'time': i.time, 'score': score})
return history
def get(self, request):
context = Context.from_request(request)
try:
return TemplateResponse(
request, 'first.html', {
'filters': {
'group': request.GET.get('group', None),
},
'users': {u.pk: u.json
for u in User.get_all(context)},
'challenges':
[c.json for c in Challenge.get_enabled(context)],
})
except Error as e:
messages.error(request, e.message)
return redirect('hub')
def get(self, request):
if request.user.is_authenticated:
if Account.objects.filter(provider='ustc',
user=request.user).exists():
try:
request.user.ustceligible
except UstcEligible.DoesNotExist:
return redirect('ustcprofile')
context = Context.from_request(request)
try:
challenges = Challenge.get_enabled(context)
challenges = {'value': [obj.json for obj in challenges]}
except ProfileRequired as e:
messages.info(request, e.message)
return redirect('profile')
except TermsRequired as e:
messages.info(request, e.message)
return redirect('terms')
except Error as e:
challenges = {'error': e.json}
try:
announcement = Announcement.get_latest(context).json
except NotFound:
announcement = None
if request.user.is_authenticated:
user = User.get(context, request.user.pk)
if user.group == 'other':
ranking = Submission.get_user_ranking(context, request.user.pk)
else:
ranking = Submission.get_user_ranking(context,
request.user.pk,
group=user.group)
else:
ranking = {}
return TemplateResponse(
request, 'hub.html', {
'announcement': announcement,
'challenges': challenges,
'progress': Submission.get_user_progress(
context, request.user.pk),
'ranking': ranking,
'clear_count': Submission.get_clear_count(context),
})
def _refill_first(cls):
"""尝试把 ChallengeFirst 和 FlagFirst 中的空位都填上"""
for challenge in Challenge.get_all(Context(elevated=True)):
for group in {None, *User.groups}.difference(
models.ChallengeFirst.objects
.filter(challenge=challenge.pk)
.values_list('group', flat=True)
):
try:
first = (
cls._filter_group(models.ChallengeClear.objects, group)
.filter(challenge=challenge.pk)
.earliest('time')
)
models.ChallengeFirst.objects.create(
challenge=challenge.pk,
group=group,
user=first.user,
time=first.time,
)
except models.ChallengeClear.DoesNotExist:
pass
for flag in range(len(challenge.flags)):
for group in {None, *User.groups}.difference(
models.FlagFirst.objects
.filter(challenge=challenge.pk, flag=flag)
.values_list('group', flat=True)
):
try:
first = (
cls._filter_group(models.FlagClear.objects, group)
.filter(challenge=challenge.pk, flag=flag)
.earliest('time')
)
models.FlagFirst.objects.create(
challenge=challenge.pk,
flag=flag,
group=group,
user=first.user,
time=first.time,
)
except models.FlagClear.DoesNotExist:
pass
def handle(self, *args, **options):
context = Context(elevated=True)
Challenge.regen_all(context)
Submission.regen_all(context)
def submit(cls, context, user, challenge, text):
if context.user.pk != user:
User.test_permission(context)
if len(text) > 200:
raise WrongFormat('Flag 不应超过 200 个字符')
user = User.get(context, user)
challenge = Challenge.get(context, challenge)
try:
latest = (models.Submission.objects.filter(
user=user.pk, challenge=challenge.pk).latest('time'))
except models.Submission.DoesNotExist:
pass
else:
if latest.time + timedelta(seconds=10) > context.time:
raise SlowDown('提交过于频繁，请 10 秒后再试')
obj = models.Submission.objects.create(
user=user.pk,
group=user.group,
challenge=challenge.pk,
text=text,
time=context.time,
)
matches, violations = challenge.check_flag_with_violations(text)
queryset = models.FlagClear.objects.filter(user=user.pk,
challenge=challenge.pk)
flags = {i.flag for i in queryset}
match_flags = {i['index'] for i in matches}
for flag in match_flags - flags:
models.FlagClear.objects.create(
submission=obj,
user=user.pk,
group=user.group,
challenge=challenge.pk,
flag=flag,
time=context.time,
)
if user.group not in User.no_score_groups:
models.FlagFirst.objects.get_or_create(
challenge=challenge.pk,
flag=flag,
group=None,
defaults={
'user': user.pk,
'time': context.time
},
)
models.FlagFirst.objects.get_or_create(
challenge=challenge.pk,
flag=flag,
group=user.group,
defaults={
'user': user.pk,
'time': context.time
},
)
for f, u in violations:
models.FlagViolation.objects.create(
submission=obj,
violation_flag=f['index'],
violation_user=u,
)
if match_flags - flags:
if (flags | match_flags).issuperset(range(len(challenge.flags))):
models.ChallengeClear.objects.create(
user=user.pk,
group=user.group,
challenge=challenge.pk,
time=context.time,
)
if user.group not in User.no_score_groups:
models.ChallengeFirst.objects.get_or_create(
challenge=challenge.pk,
group=None,
defaults={
'user': user.pk,
'time': context.time
},
)
models.ChallengeFirst.objects.get_or_create(
challenge=challenge.pk,
group=user.group,
defaults={
'user': user.pk,
'time': context.time
},
)
score = sum(i['score'] for i in matches if i['index'] not in flags)
cls._add_score(user.pk, user.group, context.time, score,
challenge.category)
return matches
def get_extra_context(self, context):
return {
'users': {u.pk: u.display_name
for u in User.get_all(context)},
'challenges': [c.json for c in Challenge.get_all(context)],
}
def do_delete(self, context, pk, **kwargs):
return Challenge.get(context, pk).delete()
def do_save(self, context, pk, **kwargs):
kwargs = {k: kwargs[k] for k in kwargs if k in Challenge.update_fields}
if pk is None:
return Challenge.create(context, **kwargs).json
else:
return Challenge.get(context, pk).update(**kwargs)
def do_get_all(self, context):
return [obj.json for obj in Challenge.get_all(context)]
def handle(self, fake_complex_challenges, fake_simple_challenges,
fake_users, fake_submissions, game_started_seconds,
**options):
root = User.create(
Context(elevated=True),
group='other',
nickname='root',
).user
root.is_staff = True
root.is_superuser = True
root.save()
root.refresh_from_db()
Account.objects.create(provider='debug', identity='root', user=root)
c1 = Challenge.create(
Context(root),
name='签到题',
category='checkin',
detail='签到题描述',
url='https://example.com/{token}',
prompt='flag{hackergame}',
index=-100,
enabled=True,
flags=[{
'name': '',
'score': 10,
'type': 'text',
'flag': 'flag{hackergame}',
}],
)
Submission.submit(Context(root), root.pk, c1.pk, 'flag{hackergame}')
for i in range(1, fake_complex_challenges + 1):
Challenge.create(
Context(root),
name=f'复杂题 {i}',
category='complex',
detail='<code>flag{FLAG_INDEX}</code> 或 '
'<code>flag{FLAG_INDEX:USER_ID}</code>',
url='',
prompt='flag{...}',
index=random.randrange(100),
enabled=random.choice((False, True, True, True, True)),
flags=[{
'name': f'flag {j}',
'score': random.randrange(100),
'type': ('expr', 'text')[j % 2],
'flag': ("f'flag{{%s:{token.partition(\":\")[0]}}}'" % j,
f'flag{{{j}}}')[j % 2],
} for j in range(random.randrange(1, 4))],
)
for i in range(1, fake_simple_challenges + 1):
Challenge.create(
Context(root),
name=f'简单题 {i}',
category='simple',
detail='',
url='',
prompt=('flag{0}', 'flag{0:USER_ID}')[i % 2],
index=random.randrange(100),
enabled=random.choice((False, True, True, True, True)),
flags=[{
'name': '',
'score': random.randrange(100),
'type': ('text', 'expr')[i % 2],
'flag': ('flag{0}',
"'flag{0:'+token.partition(':')[0]+'}'")[i % 2],
}],
)
terms = Terms.create(Context(root), name='条款', content='1 2 3 ...',
enabled=True)
now = timezone.now()
timestamps = []
for i in range(fake_submissions):
delta = random.randrange(game_started_seconds)
timestamps.append(now - timezone.timedelta(seconds=delta))
timestamps.sort()
Trigger.create(Context(root), time=min(timestamps), state=True)
groups = list(set(User.groups.keys()) - {'staff', 'banned'})
for i in range(fake_users):
print('user', i, end='\r')
u = User.create(
Context(elevated=True),
group=random.choice(groups),
nickname='用户 ' * 8 + str(i),
name='姓名',
sno='PB11111111',
tel='123456789',
email='*****@*****.**',
gender=random.choice(('female', 'male')),
qq='12345',
school='foo',
grade='1',
)
Terms.get(Context(u.user), terms.pk).agree(u.pk)
Account.objects.create(provider='debug', identity=f'{i}',
user=u.user)
users = [i.pk for i in User.get_all(Context(root))]
challenges = [i.pk for i in Challenge.get_all(Context(root))]
for i in range(fake_submissions):
print('submission', i, end='\r')
try:
u = random.choice(users)
c = random.choice(challenges)
fs = len(Challenge.get(Context(root), c).flags)
Submission.submit(
Context(
User.get(Context(root), u).user,
timestamps[i]
), u, c, f'flag{{{random.choice(range(fs))}:{u}}}'
)
Submission.submit(
Context(
User.get(Context(root), u).user,
timestamps[i] + timezone.timedelta(seconds=20)
), u, c, f'flag{{{random.choice(range(fs))}}}'
)
except (NotFound, SlowDown):
pass
Challenge.create(
Context(root),
name='难题',
category='hard',
detail='难题描述',
url='https://example.com/{token}',
prompt='flag{hackergame}',
index=100,
enabled=True,
flags=[{
'name': '',
'score': 100,
'type': 'text',
'flag': 'flag{hackergame}',
}],
)
