def regen_all(cls, context): """重算所有缓存,只有通过命令行提权后才能调用""" User.test_permission(context) for obj in models.Submission.objects.all(): try: obj.group = User.get(context, obj.user).group obj.save() except NotFound: pass for obj in models.FlagClear.objects.all(): try: user = User.get(context, obj.user) obj.group = user.group challenge = Challenge.get(context, obj.challenge) if obj.flag not in range(len(challenge.flags)): raise NotFound obj.save() except NotFound: obj.delete() for challenge in Challenge.get_all(context): cls._regen_challenge_clear(challenge) models.ChallengeFirst.objects.all().delete() models.FlagFirst.objects.all().delete() cls._refill_first() cls._regen_score()
def handle(self, challenges_dir, dry_run=False, **options): self.challenges_dir = challenges_dir self.media_dir = pathlib.Path(settings.MEDIA_ROOT) self.dry_run = dry_run context = Context(elevated=True) old_challenges = {i.name: i for i in Challenge.get_all(context)} new_challenges = {} for path in challenges_dir.iterdir(): if not path.is_dir() or path.name.startswith('.'): continue # noinspection PyBroadException try: challenge = self.parse_challenge(path) except Exception as e: msg = traceback.format_exception_only(type(e), e)[0].strip() self.stdout.write(self.style.ERROR(f'{path.name}: {msg}')) else: if challenge['enabled']: new_challenges[challenge['name']] = challenge self.stdout.write(f'Parsed {len(new_challenges)} challenges') for name in new_challenges: if name in old_challenges: if not dry_run: old_challenges[name].update(**new_challenges[name]) self.stdout.write(f'{name}: ' + self.style.WARNING('updated')) else: if not dry_run: Challenge.create(context, **new_challenges[name]) self.stdout.write(f'{name}: ' + self.style.SUCCESS('created')) for name in old_challenges: if name not in new_challenges: if not dry_run: old_challenges[name].delete() self.stdout.write(f'{name}: ' + self.style.NOTICE('deleted'))
def _challenge_event(cls, old, new): context = Context(elevated=True) if old is None: return if new is None: models.ChallengeClear.objects.filter(challenge=old['pk']).delete() models.FlagClear.objects.filter(challenge=old['pk']).delete() models.ChallengeFirst.objects.filter(challenge=old['pk']).delete() models.FlagFirst.objects.filter(challenge=old['pk']).delete() if old['enabled']: cls._regen_score() return if len(new['flags']) != len(old['flags']): models.FlagClear.objects.filter(challenge=old['pk'], flag__gte=len( new['flags'])).delete() cls._regen_challenge_clear(Challenge.get(context, old['pk'])) models.ChallengeFirst.objects.filter(challenge=old['pk']).delete() models.FlagFirst.objects.filter(challenge=old['pk']).delete() cls._refill_first() if not old['enabled'] and not new['enabled']: return if new['enabled'] != old['enabled']: cls._regen_score() return if new['category'] != old['category']: cls._regen_score() return old_flag_scores = [i['score'] for i in old['flags']] new_flag_scores = [i['score'] for i in new['flags']] if new_flag_scores != old_flag_scores: cls._regen_score() return
def _regen_score(cls): models.Score.objects.all().delete() cs = {i.pk: i.json for i in Challenge.get_all(Context(elevated=True))} for i in models.FlagClear.objects.order_by('time').iterator(): if cs[i.challenge]['enabled']: cls._add_score(i.user, i.group, i.time, cs[i.challenge]['flags'][i.flag]['score'], cs[i.challenge]['category'])
def get_user_history(cls, context, user): challenges = Challenge.get_all(context.copy(elevated=True)) flags = {i.pk: i.flags for i in challenges} score = 0 history = [] for i in models.FlagClear.objects.filter(user=user).order_by('time'): score += flags[i.challenge][i.flag]['score'] history.append({'time': i.time, 'score': score}) return history
def get(self, request): context = Context.from_request(request) try: return TemplateResponse( request, 'first.html', { 'filters': { 'group': request.GET.get('group', None), }, 'users': {u.pk: u.json for u in User.get_all(context)}, 'challenges': [c.json for c in Challenge.get_enabled(context)], }) except Error as e: messages.error(request, e.message) return redirect('hub')
def get(self, request): if request.user.is_authenticated: if Account.objects.filter(provider='ustc', user=request.user).exists(): try: request.user.ustceligible except UstcEligible.DoesNotExist: return redirect('ustcprofile') context = Context.from_request(request) try: challenges = Challenge.get_enabled(context) challenges = {'value': [obj.json for obj in challenges]} except ProfileRequired as e: messages.info(request, e.message) return redirect('profile') except TermsRequired as e: messages.info(request, e.message) return redirect('terms') except Error as e: challenges = {'error': e.json} try: announcement = Announcement.get_latest(context).json except NotFound: announcement = None if request.user.is_authenticated: user = User.get(context, request.user.pk) if user.group == 'other': ranking = Submission.get_user_ranking(context, request.user.pk) else: ranking = Submission.get_user_ranking(context, request.user.pk, group=user.group) else: ranking = {} return TemplateResponse( request, 'hub.html', { 'announcement': announcement, 'challenges': challenges, 'progress': Submission.get_user_progress( context, request.user.pk), 'ranking': ranking, 'clear_count': Submission.get_clear_count(context), })
def _refill_first(cls): """尝试把 ChallengeFirst 和 FlagFirst 中的空位都填上""" for challenge in Challenge.get_all(Context(elevated=True)): for group in {None, *User.groups}.difference( models.ChallengeFirst.objects .filter(challenge=challenge.pk) .values_list('group', flat=True) ): try: first = ( cls._filter_group(models.ChallengeClear.objects, group) .filter(challenge=challenge.pk) .earliest('time') ) models.ChallengeFirst.objects.create( challenge=challenge.pk, group=group, user=first.user, time=first.time, ) except models.ChallengeClear.DoesNotExist: pass for flag in range(len(challenge.flags)): for group in {None, *User.groups}.difference( models.FlagFirst.objects .filter(challenge=challenge.pk, flag=flag) .values_list('group', flat=True) ): try: first = ( cls._filter_group(models.FlagClear.objects, group) .filter(challenge=challenge.pk, flag=flag) .earliest('time') ) models.FlagFirst.objects.create( challenge=challenge.pk, flag=flag, group=group, user=first.user, time=first.time, ) except models.FlagClear.DoesNotExist: pass
def handle(self, *args, **options): context = Context(elevated=True) Challenge.regen_all(context) Submission.regen_all(context)
def submit(cls, context, user, challenge, text): if context.user.pk != user: User.test_permission(context) if len(text) > 200: raise WrongFormat('Flag 不应超过 200 个字符') user = User.get(context, user) challenge = Challenge.get(context, challenge) try: latest = (models.Submission.objects.filter( user=user.pk, challenge=challenge.pk).latest('time')) except models.Submission.DoesNotExist: pass else: if latest.time + timedelta(seconds=10) > context.time: raise SlowDown('提交过于频繁,请 10 秒后再试') obj = models.Submission.objects.create( user=user.pk, group=user.group, challenge=challenge.pk, text=text, time=context.time, ) matches, violations = challenge.check_flag_with_violations(text) queryset = models.FlagClear.objects.filter(user=user.pk, challenge=challenge.pk) flags = {i.flag for i in queryset} match_flags = {i['index'] for i in matches} for flag in match_flags - flags: models.FlagClear.objects.create( submission=obj, user=user.pk, group=user.group, challenge=challenge.pk, flag=flag, time=context.time, ) if user.group not in User.no_score_groups: models.FlagFirst.objects.get_or_create( challenge=challenge.pk, flag=flag, group=None, defaults={ 'user': user.pk, 'time': context.time }, ) models.FlagFirst.objects.get_or_create( challenge=challenge.pk, flag=flag, group=user.group, defaults={ 'user': user.pk, 'time': context.time }, ) for f, u in violations: models.FlagViolation.objects.create( submission=obj, violation_flag=f['index'], violation_user=u, ) if match_flags - flags: if (flags | match_flags).issuperset(range(len(challenge.flags))): models.ChallengeClear.objects.create( user=user.pk, group=user.group, challenge=challenge.pk, time=context.time, ) if user.group not in User.no_score_groups: models.ChallengeFirst.objects.get_or_create( challenge=challenge.pk, group=None, defaults={ 'user': user.pk, 'time': context.time }, ) models.ChallengeFirst.objects.get_or_create( challenge=challenge.pk, group=user.group, defaults={ 'user': user.pk, 'time': context.time }, ) score = sum(i['score'] for i in matches if i['index'] not in flags) cls._add_score(user.pk, user.group, context.time, score, challenge.category) return matches
def get_extra_context(self, context): return { 'users': {u.pk: u.display_name for u in User.get_all(context)}, 'challenges': [c.json for c in Challenge.get_all(context)], }
def do_delete(self, context, pk, **kwargs): return Challenge.get(context, pk).delete()
def do_save(self, context, pk, **kwargs): kwargs = {k: kwargs[k] for k in kwargs if k in Challenge.update_fields} if pk is None: return Challenge.create(context, **kwargs).json else: return Challenge.get(context, pk).update(**kwargs)
def do_get_all(self, context): return [obj.json for obj in Challenge.get_all(context)]
def handle(self, fake_complex_challenges, fake_simple_challenges, fake_users, fake_submissions, game_started_seconds, **options): root = User.create( Context(elevated=True), group='other', nickname='root', ).user root.is_staff = True root.is_superuser = True root.save() root.refresh_from_db() Account.objects.create(provider='debug', identity='root', user=root) c1 = Challenge.create( Context(root), name='签到题', category='checkin', detail='签到题描述', url='https://example.com/{token}', prompt='flag{hackergame}', index=-100, enabled=True, flags=[{ 'name': '', 'score': 10, 'type': 'text', 'flag': 'flag{hackergame}', }], ) Submission.submit(Context(root), root.pk, c1.pk, 'flag{hackergame}') for i in range(1, fake_complex_challenges + 1): Challenge.create( Context(root), name=f'复杂题 {i}', category='complex', detail='<code>flag{FLAG_INDEX}</code> 或 ' '<code>flag{FLAG_INDEX:USER_ID}</code>', url='', prompt='flag{...}', index=random.randrange(100), enabled=random.choice((False, True, True, True, True)), flags=[{ 'name': f'flag {j}', 'score': random.randrange(100), 'type': ('expr', 'text')[j % 2], 'flag': ("f'flag{{%s:{token.partition(\":\")[0]}}}'" % j, f'flag{{{j}}}')[j % 2], } for j in range(random.randrange(1, 4))], ) for i in range(1, fake_simple_challenges + 1): Challenge.create( Context(root), name=f'简单题 {i}', category='simple', detail='', url='', prompt=('flag{0}', 'flag{0:USER_ID}')[i % 2], index=random.randrange(100), enabled=random.choice((False, True, True, True, True)), flags=[{ 'name': '', 'score': random.randrange(100), 'type': ('text', 'expr')[i % 2], 'flag': ('flag{0}', "'flag{0:'+token.partition(':')[0]+'}'")[i % 2], }], ) terms = Terms.create(Context(root), name='条款', content='1 2 3 ...', enabled=True) now = timezone.now() timestamps = [] for i in range(fake_submissions): delta = random.randrange(game_started_seconds) timestamps.append(now - timezone.timedelta(seconds=delta)) timestamps.sort() Trigger.create(Context(root), time=min(timestamps), state=True) groups = list(set(User.groups.keys()) - {'staff', 'banned'}) for i in range(fake_users): print('user', i, end='\r') u = User.create( Context(elevated=True), group=random.choice(groups), nickname='用户 ' * 8 + str(i), name='姓名', sno='PB11111111', tel='123456789', email='*****@*****.**', gender=random.choice(('female', 'male')), qq='12345', school='foo', grade='1', ) Terms.get(Context(u.user), terms.pk).agree(u.pk) Account.objects.create(provider='debug', identity=f'{i}', user=u.user) users = [i.pk for i in User.get_all(Context(root))] challenges = [i.pk for i in Challenge.get_all(Context(root))] for i in range(fake_submissions): print('submission', i, end='\r') try: u = random.choice(users) c = random.choice(challenges) fs = len(Challenge.get(Context(root), c).flags) Submission.submit( Context( User.get(Context(root), u).user, timestamps[i] ), u, c, f'flag{{{random.choice(range(fs))}:{u}}}' ) Submission.submit( Context( User.get(Context(root), u).user, timestamps[i] + timezone.timedelta(seconds=20) ), u, c, f'flag{{{random.choice(range(fs))}}}' ) except (NotFound, SlowDown): pass Challenge.create( Context(root), name='难题', category='hard', detail='难题描述', url='https://example.com/{token}', prompt='flag{hackergame}', index=100, enabled=True, flags=[{ 'name': '', 'score': 100, 'type': 'text', 'flag': 'flag{hackergame}', }], )