Update to v2.4

+ new character
+ new byd map
+ new items
+ some new configs
+ two new operations in background
+ record email while registering
+ record ip while logging in
+ checking something before running and updating database automatically

building something about API

fix bugs:
about purchasing system
about hiding ptt
about login different accounts with same device
about some details

This is only a pre updating. Many things have been changed. It takes time to find some ways.

.gitignore

@@ -0,0 +1 @@
+*.log

README.md

@@ -2,14 +2,21 @@
 一个微型的Arcaea本地服务器  A small local server for Arcaea
 
 ## 简介 Introduction
-这是基于Python以及Flask的微型本地Arcaea服务器，可以模拟游戏的主要功能，一时兴起在五天之内糊了出来。这可能是我第一次写这种大程序，若有不妥之处，敬请谅解。  
+这是基于Python以及Flask的微型本地Arcaea服务器，可以模拟游戏的主要功能。这可能是我第一次写这种大程序，若有不妥之处，敬请谅解。  
-This is a small local Arcaea server based on Python and Flask, which can simulate the main functions of the game. I completed it on the spur of the moment in five days. This may be the first time I have written such a large program. Please understand if there is something wrong with it.
+
+本程序主要用于学习研究，不得用于任何商业行为，否则后果自负，这不是强制要求，只是一个提醒与警告。  
+
+This is a small local Arcaea server based on Python and Flask, which can simulate the main functions of the game. This may be the first time I have written such a large program. Please understand if there is something wrong with it.  
+
+This procedure is mainly used for study and research, and shall not be used for any commercial activities, otherwise the consequences will be borne by oneself. This is not a mandatory requirement, just a reminder and warning.
+
 > 虽然看起来很蠢，但是可以用！
 > It looks stupid, but it works!
 
 ## 特性 Features
 有以下 We have：
 - 登录、注册 Login and registration
+- 多设备登录 Multi device login
 - 成绩上传 Score upload
 - PTT
 - 排名 Rank
@@ -19,6 +26,8 @@ This is a small local Arcaea server based on Python and Flask, which can simulat
 - 自定义世界模式 Customizable World Mode
 - 自定义歌曲下载 Customizable songs download
 - 单曲和曲包购买（没啥用） Single songs and song packs purchase(useless)
+- 奖励系统 Present system
+- 兑换码系统 Redeem code system
 - 全角色立绘 All character drawings
 - 角色技能 Character skills
 - 自定义角色属性 Customizable characters attributes
@@ -27,15 +36,17 @@ This is a small local Arcaea server based on Python and Flask, which can simulat
 - 后台自定义信息 Customize some things in the background
 - 成绩校验 Score check
 - 下载校验 Download check
+- 服务器日志 Server log
 
 没有以下 We don't have：
-- 角色数值 Character characteristic value
-- 数据同步的时间记录 The record of time for data synchronization 
 - 服务器安全性保证 Server security assurance
+- 世界模式下的搭档升级、觉醒，以及某些奖励的获取 Partner upgrading, uncapping, and receiving some rewards in the world mode
+- 世界排名 Global rank
 
 可能有问题 There may be problems：
 - Recent 30
-- 一些歌曲的解锁 Some Songs' unlocking
+- 一些歌曲的解锁 Some songs' unlocking
+- 同设备多共存登录 Multiple app logins on the same device
 
 ## 说明 Statement
 只是很有趣，用处探索中。  
@@ -50,25 +61,29 @@ It is just so interesting. What it can do is under exploration.
 ## 更新日志 Update log
 只保留最新版本 Only keep the latest version.
 
-> 提醒：更新时请注意保留原先的数据库，以防数据丢失
+> 提醒：更新时请注意保留原先的数据库，以防数据丢失。
 >
 > Tips: When updating, please keep the original database in case of data loss. 
 
-### Version 1.8
+### Version 2.4
-- 适用于Arcaea 3.3.0版本 For Arcaea 3.3.0
+- 适用于Arcaea 3.6.0版本 For Arcaea 3.6.0
 - 更新了歌曲数据库 Update the song database.
-- 新角色**Alice & Tenniel**已解锁 Unlock new character **Alice & Tenniel**.
+- 新搭档 **拉格兰（拉格朗日！）** 已解锁 Unlock the new character **Lagrange**.
-- 数据同步机制修改 Modify data synchronization mechanism.
+- 新增游戏版本校验 Add game version verification.
-- Recent30增添简易的PTT保护机制 Add simple PTT protection mechanism to Recent30.
+- 新增注册时邮箱记录 Add email recording while registering.
-- 尝试解锁了一些东西 Try to unlock something.
+- 新增登录时IP地址记录 Add IP address recording at login time.
+- 新增了一些设置选项和后台功能 Add some setting options and background functions.
+- 新增数据库自动更新功能 Add database automatic update function.
+- 正在构建API接口 Building API interface.
 - 修复了一些Bug Fix some bugs.
 
 ## 运行环境与依赖 Running environment and requirements
-- Windows操作系统 Windows operating system
+- Windows/Linux/Mac OS/Android
 - Python 3
-- Flask模块 Flask module
+- Flask module
-- Charles
+- Charles, IDA, proxy app... (optional)
 
+<!--
 ## 环境搭建 Environment construction
 [中文](https://github.com/Lost-MSth/Arcaea-server/wiki/%E7%8E%AF%E5%A2%83%E6%90%AD%E5%BB%BA)  
 [English](https://github.com/Lost-MSth/Arcaea-server/wiki/Environment-construction)
@@ -76,11 +91,13 @@ It is just so interesting. What it can do is under exploration.
 ## 使用说明 Instruction for use
 [中文](https://github.com/Lost-MSth/Arcaea-server/wiki/%E4%BD%BF%E7%94%A8%E8%AF%B4%E6%98%8E)  
 [English](https://github.com/Lost-MSth/Arcaea-server/wiki/Instruction-for-use)
+-->
 
 ## 注意 Attentions
 [中文](https://github.com/Lost-MSth/Arcaea-server/wiki/%E6%B3%A8%E6%84%8F)  
 [English](https://github.com/Lost-MSth/Arcaea-server/wiki/Attentions)
 
+
 ## 鸣谢 Thanks
 歌曲数据库来自 Using song database from
 [BotArcAPI releases](https://github.com/TheSnowfield/BotArcAPI/releases)  

latest version/api/api_auth.py

@@ -0,0 +1,119 @@
+import hashlib
+import time
+from server.sql import Connect
+import functools
+from setting import Config
+from flask import jsonify
+
+
+class User():
+    # 用户类，当数据类型用
+    def __init__(self, user_id=None, role='', power=[]):
+        self.user_id = user_id
+        self.role = role
+        self.power = power
+
+
+def login():
+    # 登录接口
+    return {'token': 1}, 0
+
+
+def logout():
+    # 登出接口
+    pass
+
+
+def id_get_role_id(c, user_id):
+    # user_id获取role_id
+    role_id = 1
+    c.execute('''select role_id from user_role where user_id = :a''',
+              {'a': user_id})
+    x = c.fetchone()
+    if x is not None:
+        role_id = int(x[0])
+
+    return role_id
+
+
+def role_id_get_role(c, role_id):
+    # role_id获取role
+    role = ''
+    c.execute('''select role_name from role where role_id = :a''',
+              {'a': role_id})
+    x = c.fetchone()
+    if x is not None:
+        role = x[0]
+
+    return role
+
+
+def api_token_get_id(c, token):
+    # api的token获取user_id
+    user_id = None
+    c.execute('''select user_id from api_login where token = :token''', {
+        'token': token})
+    x = c.fetchone()
+    if x is not None:
+        user_id = x[0]
+
+    return user_id
+
+
+def get_role_power(c, role_id):
+    # 获取role_id对应power，返回列表
+
+    role_power = []
+
+    c.execute('''select power_name from power where power_id in (select power_id from role_power where role_id=:a)''', {
+        'a': role_id})
+    x = c.fetchall()
+    for i in x:
+        role_power.append(i[0])
+
+    return role_power
+
+
+def role_required(request, power=[]):
+    # api token验证，写成了修饰器
+    def decorator(view):
+        @functools.wraps(view)
+        def wrapped_view(*args, **kwargs):
+
+            try:
+                request.json  # 检查请求json格式
+            except:
+                return jsonify({'status': 400, 'code': -1, 'data': {}, 'msg': 'Payload must be a valid json'})
+
+            if not 'Token' in request.headers:
+                return jsonify({'status': 401, 'code': -1, 'data': {}, 'msg': 'No Token'})
+
+            user = User()
+            if power == []:
+                if Config.API_TOKEN == request.headers['Token'] and Config.API_TOKEN != '':
+                    user.user_id = 0
+                else:
+                    return jsonify({'status': 403, 'code': -1, 'data': {}, 'msg': 'No permission'})
+            else:
+                with Connect() as c:
+                    user.user_id = api_token_get_id(
+                        c, request.headers['Token'])
+                    if user.user_id is None:
+                        return jsonify({'status': 404, 'code': -1, 'data': {}, 'msg': ''})
+
+                    role_id = id_get_role_id(c, user.user_id)
+                    user.role = role_id_get_role(c, role_id)
+                    user.role_power = get_role_power(c, role_id)
+
+                    f = False
+                    for i in power:
+                        if i in user.role_power:
+                            f = True
+                            break
+                    if not f:
+                        return jsonify({'status': 403, 'code': -1, 'data': {}, 'msg': 'No permission'})
+
+            return view(user, *args, **kwargs)
+
+        return wrapped_view
+    return decorator

latest version/api/api_code.py

@@ -0,0 +1,15 @@
+def code_get_msg(code):
+    # api接口code获取msg，返回字符串
+    msg = {
+        '0': '',
+        '-1': 'See status code',
+        '-2': 'No data',
+        '-3': 'No data or user',
+        '-4': 'No user_id',
+        '-101': 'Wrong data type',
+        '-102': 'Wrong query parameter',
+        '-103': 'Wrong sort parameter',
+        '-104': 'Wrong sort order parameter'
+    }
+
+    return msg[str(code)]

latest version/api/api_main.py

@@ -0,0 +1,223 @@
+from flask import (
+    Blueprint, request, jsonify
+)
+import api.api_auth
+import api.users
+import api.songs
+from api.api_code import code_get_msg
+
+
+bp = Blueprint('api', __name__, url_prefix='/api/v1')
+
+
+def get_query_parameter(request, query_able=[], sort_able=[]):
+    # 提取查询请求参数，返回四个参数和code
+
+    limit = -1
+    offset = 0
+    query = {}  # {'name': 'admin'}
+    sort = []  # [{'column': 'user_id', 'order': 'ASC'}, ...]
+
+    if 'limit' in request.json:
+        try:
+            limit = int(request.json['limit'])
+        except:
+            return -1, 0, {}, {}, -101
+    if 'offset' in request.json:
+        try:
+            offset = int(request.json['offset'])
+        except:
+            return -1, 0, {}, {}, -101
+    if 'query' in request.json:
+        query = request.json['query']
+        for i in query:
+            if i not in query_able:
+                return -1, 0, {}, {}, -102
+    if 'sort' in request.json:
+        sort = request.json['sort']
+        for i in sort:
+            if 'column' not in i or i['column'] not in sort_able:
+                return -1, 0, {}, {}, -103
+            if not 'order' in i:
+                i['order'] = 'ASC'
+            else:
+                if i['order'] not in ['ASC', 'DESC']:
+                    return -1, 0, {}, {}, -104
+
+    return limit, offset, query, sort, 0
+
+
+@bp.route('/')
+def ping():
+    return jsonify({'status': 200, 'code': 0, 'data': {}, 'msg': ''})
+
+
+@bp.route('/token', methods=['POST'])
+def token_post():
+    # 登录，获取token
+
+    if 'auth' in request.json:
+        data, code = api.api_auth.login(
+            request.json['auth'], request.remote_addr)
+        if code < 0:
+            return jsonify({'status': 200, 'code': code, 'data': {}, 'msg': code_get_msg(code)})
+        else:
+            return jsonify({'status': 200, 'code': 0, 'data': data, 'msg': ''})
+    else:
+        return jsonify({'status': 401, 'code': -1, 'data': {}, 'msg': 'No authentication'})
+
+
+@bp.route('/token', methods=['GET'])
+@api.api_auth.role_required(request, ['select_me', 'select'])
+def token_get(user):
+    # 判断登录有效性
+    return jsonify({'status': 200, 'code': 0, 'data': {}, 'msg': ''})
+
+
+@bp.route('/token', methods=['DELETE'])
+@api.api_auth.role_required(request, ['change_me', 'select_me', 'select'])
+def token_delete(user):
+    # 登出
+    return jsonify({'status': 200, 'code': 0, 'data': {}, 'msg': ''})
+
+
+@bp.route('/users', methods=['GET'])
+@api.api_auth.role_required(request, ['select'])
+def users_get(user):
+    # 查询全用户信息
+
+    limit, offset, query, sort, code = get_query_parameter(request, ['user_id', 'name', 'user_code'], [
+        'user_id', 'name', 'user_code', 'join_date', 'rating_ptt', 'time_played', 'ticket'])
+    if code < 0:
+        return jsonify({'status': 200, 'code': code, 'data': {}, 'msg': code_get_msg(code)})
+
+    data = api.users.get_users(limit, offset, query, sort)
+
+    if not data:
+        return jsonify({'status': 200, 'code': -2, 'data': {}, 'msg': code_get_msg(-2)})
+
+    return jsonify({'status': 200, 'code': 0, 'data': data, 'msg': ''})
+
+
+@bp.route('/users/<int:user_id>', methods=['GET'])
+@api.api_auth.role_required(request, ['select', 'select_me'])
+def users_user_get(user, user_id):
+    # 查询用户信息
+
+    if user_id == 'me':
+        user_id = user.user_id
+
+    if user_id <= 0:
+        return jsonify({'status': 200, 'code': -4, 'data': {}, 'msg': code_get_msg(-4)})
+
+    if user_id != user.user_id and not 'select' in user.power and user.user_id != 0:  # 查别人需要select权限
+        return jsonify({'status': 403, 'code': -1, 'data': {}, 'msg': 'No permission'})
+
+    data = api.users.get_user_info(user_id)
+
+    if not data:
+        return jsonify({'status': 200, 'code': -3, 'data': {}, 'msg': code_get_msg(-3)})
+
+    return jsonify({'status': 200, 'code': 0, 'data': data, 'msg': ''})
+
+
+@bp.route('/users/<int:user_id>/b30', methods=['GET'])
+@api.api_auth.role_required(request, ['select', 'select_me'])
+def users_user_b30_get(user, user_id):
+    # 查询用户b30
+
+    if user_id == 'me':
+        user_id = user.user_id
+
+    if user_id <= 0:
+        return jsonify({'status': 200, 'code': -4, 'data': {}, 'msg': code_get_msg(-4)})
+
+    if user_id != user.user_id and not 'select' in user.power and user.user_id != 0:  # 查别人需要select权限
+        return jsonify({'status': 403, 'code': -1, 'data': {}, 'msg': 'No permission'})
+
+    data = api.users.get_user_b30(user_id)
+
+    if data['data'] == []:
+        return jsonify({'status': 200, 'code': -3, 'data': {}, 'msg': code_get_msg(-3)})
+
+    return jsonify({'status': 200, 'code': 0, 'data': data, 'msg': ''})
+
+
+@bp.route('/users/<int:user_id>/best', methods=['GET'])
+@api.api_auth.role_required(request, ['select', 'select_me'])
+def users_user_best_get(user, user_id):
+    # 查询用户所有best成绩
+
+    if user_id == 'me':
+        user_id = user.user_id
+
+    if user_id <= 0:
+        return jsonify({'status': 200, 'code': -4, 'data': {}, 'msg': code_get_msg(-4)})
+
+    if user_id != user.user_id and not 'select' in user.power and user.user_id != 0:  # 查别人需要select权限
+        return jsonify({'status': 403, 'code': -1, 'data': {}, 'msg': 'No permission'})
+
+    limit, offset, query, sort, code = get_query_parameter(request, ['song_id', 'difficulty'], [
+        'song_id', 'difficulty', 'score', 'time_played', 'rating'])
+    if code < 0:
+        return jsonify({'status': 200, 'code': code, 'data': {}, 'msg': code_get_msg(code)})
+
+    data = api.users.get_user_best(user_id, limit, offset, query, sort)
+
+    if data['data'] == []:
+        return jsonify({'status': 200, 'code': -3, 'data': {}, 'msg': code_get_msg(-3)})
+
+    return jsonify({'status': 200, 'code': 0, 'data': data, 'msg': ''})
+
+
+@bp.route('/users/<int:user_id>/r30', methods=['GET'])
+@api.api_auth.role_required(request, ['select', 'select_me'])
+def users_user_r30_get(user, user_id):
+    # 查询用户r30
+
+    if user_id == 'me':
+        user_id = user.user_id
+
+    if user_id <= 0:
+        return jsonify({'status': 200, 'code': -4, 'data': {}, 'msg': code_get_msg(-4)})
+
+    if user_id != user.user_id and not 'select' in user.power and user.user_id != 0:  # 查别人需要select权限
+        return jsonify({'status': 403, 'code': -1, 'data': {}, 'msg': 'No permission'})
+
+    data = api.users.get_user_r30(user_id)
+
+    if data['data'] == []:
+        return jsonify({'status': 200, 'code': -3, 'data': {}, 'msg': code_get_msg(-3)})
+
+    return jsonify({'status': 200, 'code': 0, 'data': data, 'msg': ''})
+
+
+@bp.route('/songs/<string:song_id>', methods=['GET'])
+@api.api_auth.role_required(request, ['select', 'select_song_info'])
+def songs_song_get(user, song_id):
+    # 查询歌曲信息
+
+    data = api.songs.get_song_info(song_id)
+
+    if not data:
+        return jsonify({'status': 200, 'code': -2, 'data': {}, 'msg': code_get_msg(-2)})
+
+    return jsonify({'status': 200, 'code': 0, 'data': data, 'msg': ''})
+
+
+@bp.route('/songs', methods=['GET'])
+@api.api_auth.role_required(request, ['select', 'select_song_info'])
+def songs_get(user):
+    # 查询全歌曲信息
+
+    limit, offset, query, sort, code = get_query_parameter(request, ['sid', 'name_en', 'name_jp', 'pakset', 'artist'], [
+                                                           'sid', 'name_en', 'name_jp', 'pakset', 'artist', 'date', 'rating_pst', 'rating_prs', 'rating_ftr', 'rating_byn'])
+    if code < 0:
+        return jsonify({'status': 200, 'code': code, 'data': {}, 'msg': code_get_msg(code)})
+
+    data = api.songs.get_songs(limit, offset, query, sort)
+
+    if not data:
+        return jsonify({'status': 200, 'code': -2, 'data': {}, 'msg': code_get_msg(-2)})
+
+    return jsonify({'status': 200, 'code': 0, 'data': data, 'msg': ''})

latest version/api/songs.py

@@ -0,0 +1,58 @@
+from server.sql import Connect
+from server.sql import Sql
+import time
+
+
+def get_song_info(song_id):
+    # 查询指定歌曲信息，返回字典
+    r = {}
+
+    with Connect('./database/arcsong.db') as c:
+        c.execute('''select * from songs where sid=:a''', {'a': song_id})
+        x = c.fetchone()
+        if x:
+            r = {'song_id': x[0],
+                 'name': {'name_en': x[1],
+                          'name_jp': x[2]},
+                 'pakset': x[5],
+                 'artist': x[6],
+                 'date': x[9],
+                 'rating_pst': x[12]/10,
+                 'rating_prs': x[13]/10,
+                 'rating_ftr': x[14]/10,
+                 'rating_byn': x[15]/10,
+                 'difficultly_pst': x[16]/2,
+                 'difficultly_prs': x[17]/2,
+                 'difficultly_ftr': x[18]/2,
+                 'difficultly_byn': x[19]/2
+                 }
+
+    return r
+
+
+def get_songs(limit=-1, offset=0, query={}, sort=[]):
+    # 查询全部歌曲信息，返回字典列表
+    r = []
+
+    with Connect('./database/arcsong.db') as c:
+        x = Sql.select(c, 'songs', [], limit, offset, query, sort)
+
+        if x:
+            for i in x:
+                r.append({'sid': i[0],
+                          'name': {'name_en': i[1],
+                                   'name_jp': i[2]},
+                          'pakset': i[5],
+                          'artist': i[6],
+                          'date': i[9],
+                          'rating_pst': i[12]/10,
+                          'rating_prs': i[13]/10,
+                          'rating_ftr': i[14]/10,
+                          'rating_byn': i[15]/10,
+                          'difficultly_pst': i[16]/2,
+                          'difficultly_prs': i[17]/2,
+                          'difficultly_ftr': i[18]/2,
+                          'difficultly_byn': i[19]/2
+                          })
+
+    return r

latest version/api/users.py

@@ -0,0 +1,99 @@
+from server.sql import Connect
+from server.sql import Sql
+import time
+import web.webscore
+import server.info
+
+
+def get_users(limit=-1, offset=0, query={}, sort=[]):
+    # 获取全用户信息，返回字典列表
+
+    r = []
+    with Connect() as c:
+        x = Sql.select(c, 'user', [], limit, offset, query, sort)
+
+        if x:
+            for i in x:
+                if i[23] != -1:
+                    character_id = i[23]
+                else:
+                    character_id = i[6]
+                r.append({
+                    'user_id': i[0],
+                    'name': i[1],
+                    'join_date': i[3],
+                    'user_code': i[4],
+                    'rating_ptt': i[5]/100,
+                    'character_id': character_id,
+                    'is_char_uncapped': i[8] == 1,
+                    'is_char_uncapped_override': i[9] == 1,
+                    'is_hide_rating': i[10],
+                    'ticket': i[26]
+                })
+
+    return r
+
+
+def get_user_info(user_id):
+    # 获取用户信息，返回字典，其实就是调用user/me信息
+
+    r = {}
+    with Connect() as c:
+        r = server.info.get_user_me(c, user_id)
+
+    return r
+
+
+def get_user_b30(user_id):
+    # 获取用户b30信息，返回字典
+
+    r = []
+    with Connect() as c:
+        r = web.webscore.get_user_score(c, user_id, 30)
+
+    bestptt = 0
+    for i in r:
+        if i['rating']:
+            bestptt += i['rating']
+        if 'time_played' in i:
+            i['time_played'] = int(time.mktime(time.strptime(
+                i['time_played'], '%Y-%m-%d %H:%M:%S')))
+
+    return {'user_id': user_id, 'b30_ptt': bestptt / 30, 'data': r}
+
+
+def get_user_best(user_id, limit=-1, offset=0, query={}, sort=[]):
+    # 获取用户b30信息，返回字典
+
+    r = []
+    with Connect() as c:
+        x = Sql.select(c, 'best_score', [], limit, offset, query, sort)
+        if x:
+            for i in x:
+                r.append({
+                    "song_id": i[1],
+                    "difficulty": i[2],
+                    "score": i[3],
+                    "shiny_perfect_count": i[4],
+                    "perfect_count": i[5],
+                    "near_count": i[6],
+                    "miss_count": i[7],
+                    "health": i[8],
+                    "modifier": i[9],
+                    "time_played": i[10],
+                    "best_clear_type": i[11],
+                    "clear_type": i[12],
+                    "rating": i[13]
+                })
+
+    return {'user_id': user_id, 'data': r}
+
+
+def get_user_r30(user_id):
+    # 获取用户r30信息，返回字典
+
+    r = []
+    with Connect() as c:
+        r, r10_ptt = web.webscore.get_user_recent30(c, user_id)
+
+    return {'user_id': user_id, 'r10_ptt': r10_ptt, 'data': r}

latest version/database/database_initialize.py

@@ -5,8 +5,17 @@ import json
 
 # 数据库初始化文件，删掉arcaea_database.db文件后运行即可，谨慎使用
 
-conn = sqlite3.connect('arcaea_database.db')
+ARCAEA_SERVER_VERSION = 'v2.4.0'
+
+
+def main(path='./'):
+    conn = sqlite3.connect(path+'arcaea_database.db')
     c = conn.cursor()
+    c.execute('''create table if not exists config(id text primary key,
+    value text
+    );''')
+    c.execute('''insert into config values("version", :a);''',
+              {'a': ARCAEA_SERVER_VERSION})
     c.execute('''create table if not exists user(user_id int primary key,
     name text unique,
     password text not null,
@@ -33,13 +42,16 @@ rating real,
     favorite_character int,
     max_stamina_notification_enabled int,
     current_map text,
-ticket int
+    ticket int,
+    prog_boost int,
+    email text
     );''')
     c.execute('''create table if not exists login(access_token text,
     user_id int,
-last_login_time int,
+    login_time int,
-last_login_ip text,
+    login_ip text,
-last_login_device text
+    login_device text,
+    primary key(access_token, user_id)
     );''')
     c.execute('''create table if not exists friend(user_id_me int,
     user_id_other int,
@@ -206,29 +218,95 @@ clearedsongs_data text,
     unlocklist_data text,
     installid_data text,
     devicemodelname_data text,
-story_data text
+    story_data text,
+    createdAt int
+    );''')
+    c.execute('''create table if not exists present(present_id text primary key,
+    expire_ts int,
+    items text,
+    description text
+    );''')
+    c.execute('''create table if not exists user_present(user_id int,
+    present_id text,
+    primary key(user_id, present_id)
+    );''')
+    c.execute('''create table if not exists songfile(song_id text,
+    file_type int,
+    md5 text,
+    primary key(song_id, file_type)
+    );''')
+    c.execute('''create table if not exists redeem(code text primary key,
+    items text,
+    type int
+    );''')
+    c.execute('''create table if not exists user_redeem(user_id int,
+    code text,
+    primary key(user_id, code)
     );''')
 
+    c.execute('''create table if not exists role(role_id int primary key,
+    role_name text,
+    caption text
+    );''')
+    c.execute('''create table if not exists user_role(user_id int,
+    role_id int,
+    primary key(user_id, role_id)
+    );''')
+    c.execute('''create table if not exists power(power_id int primary key,
+    power_name text,
+    caption text
+    );''')
+    c.execute('''create table if not exists role_power(role_id int,
+    power_id int,
+    primary key(role_id, power_id)
+    );''')
+    c.execute('''create table if not exists api_login(user_id int,
+    token text,
+    login_time int,
+    login_ip text,
+    primary key(user_id, token)
+    );''')
+
+    # 搭档初始化
     char = ['Hikari', 'Tairitsu', 'Kou', 'Sapphire', 'Lethe', '', 'Tairitsu(Axium)', 'Tairitsu(Grievous Lady)', 'Stella', 'Hikari & Fisica', 'Ilith', 'Eto', 'Luna', 'Shirabe', 'Hikari(Zero)', 'Hikari(Fracture)', 'Hikari(Summer)', 'Tairitsu(Summer)', 'Tairitsu & Trin',
-        'Ayu', 'Eto & Luna', 'Yume', 'Seine & Hikari', 'Saya', 'Tairitsu & Chuni Penguin', 'Chuni Penguin', 'Haruna', 'Nono', 'MTA-XXX', 'MDA-21', 'Kanae', 'Hikari(Fantasia)', 'Tairitsu(Sonata)', 'Sia', 'DORO*C', 'Tairitsu(Tempest)', 'Brillante', 'Ilith(Summer)', 'Etude', 'Alice & Tenniel']
+            'Ayu', 'Eto & Luna', 'Yume', 'Seine & Hikari', 'Saya', 'Tairitsu & Chuni Penguin', 'Chuni Penguin', 'Haruna', 'Nono', 'MTA-XXX', 'MDA-21', 'Kanae', 'Hikari(Fantasia)', 'Tairitsu(Sonata)', 'Sia', 'DORO*C', 'Tairitsu(Tempest)', 'Brillante', 'Ilith(Summer)', 'Etude', 'Alice & Tenniel', 'Luna & Mia', 'Areus', 'Seele', 'Isabelle', 'Mir', 'Lagrange']
 
     skill_id = ['gauge_easy', '', '', '', 'note_mirror', '', '', 'gauge_hard', 'frag_plus_10_pack_stellights', 'gauge_easy|frag_plus_15_pst&prs', 'gauge_hard|fail_frag_minus_100', 'frag_plus_5_side_light', 'visual_hide_hp', 'frag_plus_5_side_conflict', 'challenge_fullcombo_0gauge', 'gauge_overflow', 'gauge_easy|note_mirror', 'note_mirror', 'visual_tomato_pack_tonesphere',
-            'frag_rng_ayu', 'gaugestart_30|gaugegain_70', 'combo_100-frag_1', 'audio_gcemptyhit_pack_groovecoaster', 'gauge_saya', 'gauge_chuni', 'kantandeshou', 'gauge_haruna', 'frags_nono', 'gauge_pandora', 'gauge_regulus', 'omatsuri_daynight', '', '', 'sometimes(note_mirror|frag_plus_5)', 'scoreclear_aa|visual_scoregauge', 'gauge_tempest', 'gauge_hard', 'gauge_ilith_summer', '', 'note_mirror|visual_hide_far']
+                'frag_rng_ayu', 'gaugestart_30|gaugegain_70', 'combo_100-frag_1', 'audio_gcemptyhit_pack_groovecoaster', 'gauge_saya', 'gauge_chuni', 'kantandeshou', 'gauge_haruna', 'frags_nono', 'gauge_pandora', 'gauge_regulus', 'omatsuri_daynight', '', '', 'sometimes(note_mirror|frag_plus_5)', 'scoreclear_aa|visual_scoregauge', 'gauge_tempest', 'gauge_hard', 'gauge_ilith_summer', '', 'note_mirror|visual_hide_far', 'frags_ongeki', 'gauge_areus', 'gauge_seele', 'gauge_isabelle', 'gauge_exhaustion', 'skill_lagrange']
 
     skill_id_uncap = ['', '', 'frags_kou', '', 'visual_ink', '', '', '', '', '', '', '', '', 'shirabe_entry_fee',
-                  '', '', '', '', '', '', '', 'frags_yume', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '']
+                      '', '', '', '', '', '', '', 'frags_yume', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '']
 
-for i in range(0, 40):
+    frag = [88, 90, 100, 75, 80, 0, 70, 79, 65, 40, 50, 80, 90, 92, 0, 61, 67, 92, 85, 50, 86, 62,
-    if i in [0, 1, 2, 4, 13, 26, 27, 28, 29, 36, 21]:
+            65, 85, 67, 88, 74, 0.5, 105, 80, 95, 50, 80, 87, 71, 50, 95, 0, 80, 75, 50, 70, 80, 100, 65, 80]
-        sql = 'insert into character values('+str(
+
-            i)+',"'+char[i]+'''",30,25000,25000,90,90,90,"'''+skill_id[i]+'''",0,0,"'''+skill_id_uncap[i]+'''",0,'',1,1)'''
+    prog = [71, 90, 80, 75, 100, 0, 90, 102, 84, 78, 105, 67, 63, 78, 0, 99, 80, 66, 46, 83, 40, 83,
-        c.execute(sql)
+            80, 90, 93, 50, 96, 88, 99, 108, 75, 80, 50, 64, 55, 100, 100, 110, 80, 50, 74, 90, 80, 80, 56, 80]
+
+    overdrive = [71, 90, 57, 75, 80, 0, 95, 79, 65, 31, 50, 59, 90, 68, 0, 78, 50, 70, 62, 49, 64,
+                 56, 73, 95, 67, 84, 80, 88, 79, 80, 50, 80, 80, 63, 25, 50, 82, 55, 50, 95, 55, 70, 100, 80, 90, 80]
+
+    char_type = [1, 0, 0, 0, 0, 0, 0, 2, 0, 1, 2, 0, 0, 0, 2, 3, 1, 0, 0, 0, 1,
+                 0, 0, 0, 0, 0, 0, 0, 2, 2, 0, 0, 0, 0, 0, 2, 2, 2, 0, 0, 0, 2, 2, 2, 1, 0]
+
+    # print(len(char))
+    # print(len(skill_id))
+    # print(len(skill_id_uncap))
+    # print(len(frag))
+    # print(len(prog))
+    # print(len(overdrive))
+    # print(len(char_type))
+
+    for i in range(0, 46):
+        if i in [0, 1, 2, 4, 13, 26, 27, 28, 29, 36, 21, 42, 43]:
+            sql = '''insert into character values(:a,:b,30,25000,25000,:c,:d,:e,:f,0,0,:g,:h,'',1,1)'''
+            c.execute(sql, {'a': i, 'b': char[i], 'c': frag[i], 'd': prog[i],
+                            'e': overdrive[i], 'f': skill_id[i], 'g': skill_id_uncap[i], 'h': char_type[i]})
         else:
             if i != 5:
-            sql = 'insert into character values('+str(
+                sql = '''insert into character values(:a,:b,20,10000,10000,:c,:d,:e,:f,0,0,:g,:h,'',0,0)'''
-                i)+',"'+char[i]+'''",30,25000,25000,90,90,90,"'''+skill_id[i]+'''",0,0,"'''+skill_id_uncap[i]+'''",0,'',0,0)'''
+                c.execute(sql, {'a': i, 'b': char[i], 'c': frag[i], 'd': prog[i],
-            c.execute(sql)
+                                'e': overdrive[i], 'f': skill_id[i], 'g': skill_id_uncap[i], 'h': char_type[i]})
-
 
     def b2int(x):
         # int与布尔值转换
@@ -237,7 +315,6 @@ def b2int(x):
         else:
             return 0
 
-
     def insert_items(c, items):
         # 物品数据导入
         for i in items:
@@ -258,21 +335,45 @@ def insert_items(c, items):
                     c.execute('''insert into item(item_id, type, is_available, price, orig_price, discount_from, discount_to, _id) values(:a,:b,:c,:d,:e,:f,:g,:h)''', {
                         'a': j['id'], 'b': j['type'], 'c': b2int(j['is_available']), 'd': i['price'], 'e': i['orig_price'], 'f': discount_from, 'g': discount_to, 'h': _id})
 
-
+    # item初始化
-f = open('singles.json', 'r')
+    f = open(path+'singles.json', 'r')
     singles = json.load(f)
     f.close()
     insert_items(c, singles)
 
-f = open('packs.json', 'r')
+    f = open(path+'packs.json', 'r')
     packs = json.load(f)
     f.close()
     insert_items(c, packs)
 
+    # api权限与权限组初始化
+    role = ['admin', 'user', 'selecter']
+    role_caption = ['管理员', '用户', '查询接口']
+
+    power = ['select', 'select_me', 'change', 'change_me', 'grant',
+             'grant_inf', 'select_song_rank', 'select_song_info']
+    power_caption = ['总体查询权限', '自我查询权限', '总体修改权限',
+                     '自我修改权限', '授权权限', '下级授权权限', '歌曲排行榜查询权限', '歌曲信息查询权限']
+
+    role_power = {'0': [0, 1, 3, 5, 6, 7],
+                  '1': [1, 3, 6, 7],
+                  '2': [0]
+                  }
+
+    for i in range(0, len(role)):
+        c.execute('''insert into role values(:a,:b,:c)''', {
+            'a': i, 'b': role[i], 'c': role_caption[i]})
+    for i in range(0, len(power)):
+        c.execute('''insert into power values(:a,:b,:c)''', {
+            'a': i, 'b': power[i], 'c': power_caption[i]})
+    for i in role_power:
+        for j in role_power[i]:
+            c.execute('''insert into role_power values(:a,:b)''',
+                      {'a': int(i), 'b': j})
+
     conn.commit()
     conn.close()
 
-
     def arc_register(name: str, password: str):
         def build_user_code(c):
             return '123456789'
@@ -300,7 +401,7 @@ def arc_register(name: str, password: str):
                     c.execute('''insert into user_char values(:a,:b,:c,:d,:e,:f,:g,:h,:i,:j,:k,:l,:m,:n,:o)''', {
                         'a': user_id, 'b': i[0], 'c': i[2], 'd': i[3], 'e': i[4], 'f': i[5], 'g': i[6], 'h': i[7], 'i': i[8], 'j': i[9], 'k': i[10], 'l': i[11], 'm': i[12], 'n': i[14], 'o': i[15]})
 
-    conn = sqlite3.connect('arcaea_database.db')
+        conn = sqlite3.connect(path+'arcaea_database.db')
         c = conn.cursor()
         hash_pwd = hashlib.sha256(password.encode("utf8")).hexdigest()
         c.execute(
@@ -326,5 +427,8 @@ def arc_register(name: str, password: str):
             conn.close()
             return None
 
-
     arc_register('admin', 'admin123')
+
+
+if __name__ == '__main__':
+    main()

latest version/database/map/byd_lostcivilization.json

@@ -0,0 +1,78 @@
+{
+	"map_id": "byd_lostcivilization",
+	"is_legacy": false,
+	"chapter": 1001,
+	"available_from": -1,
+	"available_to": 9999999999999,
+	"is_repeatable": false,
+	"require_id": "lostcivilization2",
+	"require_type": "chart_unlock",
+	"coordinate": "-650,-900",
+	"is_beyond": true,
+	"stamina_cost": 3,
+	"beyond_health": 250,
+	"character_affinity": [0, 1],
+	"affinity_multiplier": [1.9, 1.9],
+	"step_count": 7,
+	"custom_bg": "",
+	"curr_position": 0,
+	"curr_capture": 0,
+	"is_locked": false,
+	"steps": [{
+		"map_id": "byd_lostcivilization",
+		"position": 0,
+		"capture": 85
+	}, {
+		"map_id": "byd_lostcivilization",
+		"position": 1,
+		"capture": 5,
+		"items": [{
+			"type": "core",
+			"id": "core_generic",
+			"amount": 1
+		}]
+	}, {
+		"map_id": "byd_lostcivilization",
+		"position": 2,
+		"capture": 5,
+		"items": [{
+			"type": "core",
+			"id": "core_generic",
+			"amount": 1
+		}]
+	}, {
+		"map_id": "byd_lostcivilization",
+		"position": 3,
+		"capture": 5,
+		"items": [{
+			"type": "core",
+			"id": "core_generic",
+			"amount": 1
+		}]
+	}, {
+		"map_id": "byd_lostcivilization",
+		"position": 4,
+		"capture": 100,
+		"items": [{
+			"type": "core",
+			"id": "core_generic",
+			"amount": 1
+		}]
+	}, {
+		"map_id": "byd_lostcivilization",
+		"position": 5,
+		"capture": 50,
+		"items": [{
+			"type": "fragment",
+			"amount": 525
+		}]
+	}, {
+		"map_id": "byd_lostcivilization",
+		"position": 6,
+		"capture": 0,
+		"items": [{
+			"id": "lostcivilization3",
+			"type": "world_song"
+		}]
+	}]
+}

latest version/database/packs.json

@@ -3,154 +3,139 @@
 	"items": [{
 		"type": "pack",
 		"id": "core",
-		"_id": "5fc8306209787401bb857d1b",
 		"is_available": true
 	}],
 	"price": 500,
 	"orig_price": 500,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "shiawase",
 	"items": [{
 		"type": "pack",
 		"id": "shiawase",
-		"_id": "5fc8306209787401bb857d3b",
 		"is_available": true
 	}, {
 		"type": "character",
 		"id": "kou",
-		"_id": "5fc8306209787401bb857d3a",
 		"is_available": true
 	}],
 	"price": 500,
 	"orig_price": 500,
-	"discount_from": 1552089600000,
+	"discount_from": 1615248000000,
-	"discount_to": 1552694399000
+	"discount_to": 1615852799000
 }, {
 	"name": "dynamix",
 	"items": [{
 		"type": "pack",
 		"id": "dynamix",
-		"_id": "5fc8306209787401bb857d33",
 		"is_available": true
 	}, {
 		"type": "character",
 		"id": "sapphire",
-		"_id": "5fc8306209787401bb857d32",
 		"is_available": true
 	}],
 	"price": 500,
 	"orig_price": 500,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "mirai",
 	"items": [{
 		"type": "pack",
 		"id": "mirai",
-		"_id": "5fc8306209787401bb857d37",
 		"is_available": true
 	}, {
 		"type": "character",
 		"id": "lethe",
-		"_id": "5fc8306209787401bb857d36",
 		"is_available": true
 	}],
 	"price": 500,
 	"orig_price": 500,
-	"discount_from": 1552089600000,
+	"discount_from": 1615248000000,
-	"discount_to": 1552694399000
+	"discount_to": 1615852799000
 }, {
 	"name": "yugamu",
 	"items": [{
 		"type": "pack",
 		"id": "yugamu",
-		"_id": "5fc8306209787401bb857d1c",
 		"is_available": true
 	}],
 	"price": 500,
 	"orig_price": 500,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "lanota",
 	"items": [{
 		"type": "pack",
 		"id": "lanota",
-		"_id": "5fc8306209787401bb857d26",
 		"is_available": true
 	}],
 	"price": 500,
 	"orig_price": 500,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "nijuusei",
 	"items": [{
 		"type": "pack",
 		"id": "nijuusei",
-		"_id": "5fc8306209787401bb857d1d",
 		"is_available": true
 	}],
 	"price": 500,
 	"orig_price": 500,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "rei",
 	"items": [{
 		"type": "pack",
 		"id": "rei",
-		"_id": "5fc8306209787401bb857cfa",
 		"is_available": true
 	}],
 	"price": 500,
 	"orig_price": 500,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "tonesphere",
 	"items": [{
 		"type": "pack",
 		"id": "tonesphere",
-		"_id": "5fc8306209787401bb857d28",
 		"is_available": true
 	}],
 	"price": 500,
 	"orig_price": 500,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "groovecoaster",
 	"items": [{
 		"type": "pack",
 		"id": "groovecoaster",
-		"_id": "5fc8306209787401bb857d14",
 		"is_available": true
 	}],
 	"price": 500,
 	"orig_price": 500,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "zettai",
 	"items": [{
 		"type": "pack",
 		"id": "zettai",
-		"_id": "5fc8306209787401bb857cfc",
 		"is_available": true
 	}],
 	"price": 500,
 	"orig_price": 500,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "chunithm",
 	"items": [{
 		"type": "pack",
 		"id": "chunithm",
-		"_id": "5fc8306209787401bb857d09",
 		"is_available": true
 	}],
 	"price": 300,
@@ -160,47 +145,104 @@
 	"items": [{
 		"type": "pack",
 		"id": "prelude",
-		"_id": "5fc8306209787401bb857d15",
 		"is_available": true
 	}],
 	"price": 400,
-	"orig_price": 400
+	"orig_price": 400,
+	"discount_from": 1615248000000,
+	"discount_to": 1615852799000
 }, {
 	"name": "omatsuri",
 	"items": [{
 		"type": "pack",
 		"id": "omatsuri",
-		"_id": "5fc8306209787401bb857cfd",
 		"is_available": true
 	}],
 	"price": 500,
-	"orig_price": 500
+	"orig_price": 500,
+	"discount_from": 1615248000000,
+	"discount_to": 1615852799000
 }, {
 	"name": "vs",
 	"items": [{
 		"type": "pack",
 		"id": "vs",
-		"_id": "5fc8306209787401bb857d0c",
 		"is_available": true
 	}],
 	"price": 500,
-	"orig_price": 500
+	"orig_price": 500,
+	"discount_from": 1615248000000,
+	"discount_to": 1615852799000
 }, {
 	"name": "extend",
 	"items": [{
 		"type": "pack",
 		"id": "extend",
-		"_id": "5fc8306209787401bb857d18",
 		"is_available": true
 	}],
 	"price": 700,
-	"orig_price": 700
+	"orig_price": 700,
+	"discount_from": 1615248000000,
+	"discount_to": 1615852799000
 }, {
 	"name": "alice",
 	"items": [{
 		"type": "pack",
 		"id": "alice",
-		"_id": "5fc8306209787401bb857d02",
+		"is_available": true
+	}],
+	"orig_price": 500,
+	"price": 500
+}, {
+	"name": "alice_append_1",
+	"items": [{
+		"type": "pack",
+		"id": "alice_append_1",
+		"is_available": true
+	}],
+	"orig_price": 300,
+	"price": 300
+}, {
+	"name": "ongeki",
+	"items": [{
+		"type": "pack",
+		"id": "ongeki",
+		"is_available": true
+	}],
+	"orig_price": 400,
+	"price": 400
+}, {
+	"name": "maimai",
+	"items": [{
+		"type": "pack",
+		"id": "maimai",
+		"is_available": true
+	}],
+	"orig_price": 400,
+	"price": 400
+}, {
+	"name": "chunithm_append_1",
+	"items": [{
+		"type": "pack",
+		"id": "chunithm_append_1",
+		"is_available": true
+	}],
+	"orig_price": 300,
+	"price": 300
+}, {
+	"name": "observer_append_1",
+	"items": [{
+		"type": "pack",
+		"id": "observer_append_1",
+		"is_available": true
+	}],
+	"orig_price": 300,
+	"price": 300
+}, {
+	"name": "observer",
+	"items": [{
+		"type": "pack",
+		"id": "observer",
 		"is_available": true
 	}],
 	"orig_price": 500,

latest version/database/singles.json

@@ -12,55 +12,50 @@
 	"items": [{
 		"id": "dataerror",
 		"type": "single",
-		"_id": "5fc8306209787401bb857d0f",
 		"is_available": true
 	}],
 	"price": 100,
 	"orig_price": 100,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "yourvoiceso",
 	"items": [{
 		"id": "yourvoiceso",
 		"type": "single",
-		"_id": "5fc8306209787401bb857cf7",
 		"is_available": true
 	}],
 	"price": 100,
 	"orig_price": 100,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "crosssoul",
 	"items": [{
 		"id": "crosssoul",
 		"type": "single",
-		"_id": "5fc8306209787401bb857d03",
 		"is_available": true
 	}],
 	"price": 100,
 	"orig_price": 100,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "impurebird",
 	"items": [{
 		"type": "single",
 		"id": "impurebird",
-		"_id": "5fc8306209787401bb857d04",
 		"is_available": true
 	}],
 	"price": 100,
 	"orig_price": 100,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "auxesia",
 	"items": [{
 		"type": "single",
 		"id": "auxesia",
-		"_id": "5fc8306209787401bb857d10",
 		"is_available": true
 	}],
 	"price": 100,
@@ -72,43 +67,39 @@
 	"items": [{
 		"type": "single",
 		"id": "modelista",
-		"_id": "5fc8306209787401bb857cf8",
 		"is_available": true
 	}],
 	"price": 100,
 	"orig_price": 100,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "yozakurafubuki",
 	"items": [{
 		"type": "single",
 		"id": "yozakurafubuki",
-		"_id": "5fc8306209787401bb857d05",
 		"is_available": true
 	}],
 	"price": 100,
 	"orig_price": 100,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "surrender",
 	"items": [{
 		"type": "single",
 		"id": "surrender",
-		"_id": "5fc8306209787401bb857d11",
 		"is_available": true
 	}],
 	"price": 100,
 	"orig_price": 100,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "metallicpunisher",
 	"items": [{
 		"type": "single",
 		"id": "metallicpunisher",
-		"_id": "5fc8306209787401bb857cf9",
 		"is_available": true
 	}],
 	"price": 100,
@@ -118,7 +109,6 @@
 	"items": [{
 		"type": "single",
 		"id": "carminescythe",
-		"_id": "5fc8306209787401bb857d06",
 		"is_available": true
 	}],
 	"price": 100,
@@ -128,79 +118,72 @@
 	"items": [{
 		"type": "single",
 		"id": "bethere",
-		"_id": "5fc8306209787401bb857d12",
 		"is_available": true
 	}],
 	"price": 100,
 	"orig_price": 100,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "callmyname",
 	"items": [{
 		"type": "single",
 		"id": "callmyname",
-		"_id": "5fc8306209787401bb857d27",
 		"is_available": true
 	}],
 	"price": 100,
 	"orig_price": 100,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "fallensquare",
 	"items": [{
 		"type": "single",
 		"id": "fallensquare",
-		"_id": "5fc8306209787401bb857d1e",
 		"is_available": true
 	}],
 	"price": 100,
 	"orig_price": 100,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "dropdead",
 	"items": [{
 		"type": "single",
 		"id": "dropdead",
-		"_id": "5fc8306209787401bb857d07",
 		"is_available": true
 	}],
 	"price": 100,
 	"orig_price": 100,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "alexandrite",
 	"items": [{
 		"type": "single",
 		"id": "alexandrite",
-		"_id": "5fc8306209787401bb857d13",
 		"is_available": true
 	}],
 	"price": 100,
 	"orig_price": 100,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "astraltale",
 	"items": [{
 		"type": "single",
 		"id": "astraltale",
-		"_id": "5fc8306209787401bb857cfb",
 		"is_available": true
 	}],
 	"price": 100,
 	"orig_price": 100,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "phantasia",
 	"items": [{
 		"type": "single",
 		"id": "phantasia",
-		"_id": "5fc8306209787401bb857d1f",
 		"is_available": true
 	}],
 	"price": 100,
@@ -210,7 +193,6 @@
 	"items": [{
 		"type": "single",
 		"id": "empireofwinter",
-		"_id": "5fc8306209787401bb857d08",
 		"is_available": true
 	}],
 	"price": 100,
@@ -220,75 +202,72 @@
 	"items": [{
 		"type": "single",
 		"id": "libertas",
-		"_id": "5fc8306209787401bb857d29",
 		"is_available": true
 	}],
 	"price": 100,
 	"orig_price": 100,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "dottodot",
 	"items": [{
 		"type": "single",
 		"id": "dottodot",
-		"_id": "5fc8306209787401bb857d20",
 		"is_available": true
 	}],
 	"price": 100,
 	"orig_price": 100,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "dreadnought",
 	"items": [{
 		"type": "single",
 		"id": "dreadnought",
-		"_id": "5fc8306209787401bb857d2a",
 		"is_available": true
 	}],
 	"price": 100,
 	"orig_price": 100,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "mirzam",
 	"items": [{
 		"type": "single",
 		"id": "mirzam",
-		"_id": "5fc8306209787401bb857d21",
 		"is_available": true
 	}],
 	"price": 100,
 	"orig_price": 100,
-	"discount_from": 1583712000000,
+	"discount_from": 1615248000000,
-	"discount_to": 1584316799000
+	"discount_to": 1615852799000
 }, {
 	"name": "heavenlycaress",
 	"items": [{
 		"type": "single",
 		"id": "heavenlycaress",
-		"_id": "5fc8306209787401bb857d0a",
 		"is_available": true
 	}],
 	"price": 100,
-	"orig_price": 100
+	"orig_price": 100,
+	"discount_from": 1615248000000,
+	"discount_to": 1615852799000
 }, {
 	"name": "filament",
 	"items": [{
 		"type": "single",
 		"id": "filament",
-		"_id": "5fc8306209787401bb857d16",
 		"is_available": true
 	}],
 	"price": 100,
-	"orig_price": 100
+	"orig_price": 100,
+	"discount_from": 1615248000000,
+	"discount_to": 1615852799000
 }, {
 	"name": "avantraze",
 	"items": [{
 		"type": "single",
 		"id": "avantraze",
-		"_id": "5fc8306209787401bb857d2b",
 		"is_available": true
 	}],
 	"price": 100,
@@ -298,17 +277,17 @@
 	"items": [{
 		"type": "single",
 		"id": "battlenoone",
-		"_id": "5fc8306209787401bb857cfe",
 		"is_available": true
 	}],
 	"price": 100,
-	"orig_price": 100
+	"orig_price": 100,
+	"discount_from": 1615248000000,
+	"discount_to": 1615852799000
 }, {
 	"name": "saikyostronger",
 	"items": [{
 		"type": "single",
 		"id": "saikyostronger",
-		"_id": "5fc8306209787401bb857d22",
 		"is_available": true
 	}],
 	"price": 100,
@@ -318,67 +297,72 @@
 	"items": [{
 		"type": "single",
 		"id": "izana",
-		"_id": "5fc8306209787401bb857d0b",
 		"is_available": true
 	}],
 	"price": 100,
-	"orig_price": 100
+	"orig_price": 100,
+	"discount_from": 1615248000000,
+	"discount_to": 1615852799000
 }, {
 	"name": "einherjar",
 	"items": [{
 		"type": "single",
 		"id": "einherjar",
-		"_id": "5fc8306209787401bb857d17",
 		"is_available": true
 	}],
 	"price": 100,
-	"orig_price": 100
+	"orig_price": 100,
+	"discount_from": 1615248000000,
+	"discount_to": 1615852799000
 }, {
 	"name": "laqryma",
 	"items": [{
 		"type": "single",
 		"id": "laqryma",
-		"_id": "5fc8306209787401bb857d2c",
 		"is_available": true
 	}],
 	"price": 100,
-	"orig_price": 100
+	"orig_price": 100,
+	"discount_from": 1615248000000,
+	"discount_to": 1615852799000
 }, {
 	"name": "amygdata",
 	"items": [{
 		"type": "single",
 		"id": "amygdata",
-		"_id": "5fc8306209787401bb857cff",
 		"is_available": true
 	}],
 	"price": 100,
-	"orig_price": 100
+	"orig_price": 100,
+	"discount_from": 1615248000000,
+	"discount_to": 1615852799000
 }, {
 	"name": "altale",
 	"items": [{
 		"type": "single",
 		"id": "altale",
-		"_id": "5fc8306209787401bb857d23",
 		"is_available": true
 	}],
 	"price": 100,
-	"orig_price": 100
+	"orig_price": 100,
+	"discount_from": 1615248000000,
+	"discount_to": 1615852799000
 }, {
 	"name": "feelssoright",
 	"items": [{
 		"type": "single",
 		"id": "feelssoright",
-		"_id": "5fc8306209787401bb857d2d",
 		"is_available": true
 	}],
 	"price": 100,
-	"orig_price": 100
+	"orig_price": 100,
+	"discount_from": 1615248000000,
+	"discount_to": 1615852799000
 }, {
 	"name": "scarletcage",
 	"items": [{
 		"type": "single",
 		"id": "scarletcage",
-		"_id": "5fc8306209787401bb857d00",
 		"is_available": true
 	}],
 	"price": 100,
@@ -388,7 +372,6 @@
 	"items": [{
 		"type": "single",
 		"id": "teriqma",
-		"_id": "5fc8306209787401bb857d24",
 		"is_available": true
 	}],
 	"price": 100,
@@ -398,27 +381,28 @@
 	"items": [{
 		"type": "single",
 		"id": "mahoroba",
-		"_id": "5fc8306209787401bb857d0d",
 		"is_available": true
 	}],
 	"price": 100,
-	"orig_price": 100
+	"orig_price": 100,
+	"discount_from": 1615248000000,
+	"discount_to": 1615852799000
 }, {
 	"name": "badtek",
 	"items": [{
 		"type": "single",
 		"id": "badtek",
-		"_id": "5fc8306209787401bb857d2e",
 		"is_available": true
 	}],
 	"price": 100,
-	"orig_price": 100
+	"orig_price": 100,
+	"discount_from": 1615248000000,
+	"discount_to": 1615852799000
 }, {
 	"name": "maliciousmischance",
 	"items": [{
 		"type": "single",
 		"id": "maliciousmischance",
-		"_id": "5fc8306209787401bb857d19",
 		"is_available": true
 	}],
 	"price": 100,
@@ -428,7 +412,6 @@
 	"items": [{
 		"type": "single",
 		"id": "buchigireberserker",
-		"_id": "5fc8306209787401bb857d25",
 		"is_available": true
 	}],
 	"price": 100,
@@ -438,17 +421,17 @@
 	"items": [{
 		"type": "single",
 		"id": "galaxyfriends",
-		"_id": "5fc8306209787401bb857d0e",
 		"is_available": true
 	}],
 	"price": 100,
-	"orig_price": 100
+	"orig_price": 100,
+	"discount_from": 1615248000000,
+	"discount_to": 1615852799000
 }, {
 	"name": "xeraphinite",
 	"items": [{
 		"type": "single",
 		"id": "xeraphinite",
-		"_id": "5fc8306209787401bb857d1a",
 		"is_available": true
 	}],
 	"orig_price": 100,
@@ -458,9 +441,35 @@
 	"items": [{
 		"type": "single",
 		"id": "xanatos",
-		"_id": "5fc8306209787401bb857d2f",
 		"is_available": true
 	}],
 	"price": 100,
 	"orig_price": 100
+}, {
+	"name": "attraqtia",
+	"items": [{
+		"type": "single",
+		"id": "attraqtia",
+		"is_available": true
+	}],
+	"orig_price": 100,
+	"price": 100
+}, {
+	"name": "gimmedablood",
+	"items": [{
+		"type": "single",
+		"id": "gimmedablood",
+		"is_available": true
+	}],
+	"orig_price": 100,
+	"price": 100
+}, {
+	"name": "bassline",
+	"items": [{
+		"type": "single",
+		"id": "bassline",
+		"is_available": true
+	}],
+	"orig_price": 100,
+	"price": 100
 }]

latest version/main.py

@@ -1,5 +1,8 @@
+# encoding: utf-8
+
 from flask import Flask, request, jsonify, make_response, send_from_directory
-import configparser
+from logging.config import dictConfig
+from setting import Config
 import base64
 import server.auth
 import server.info
@@ -7,15 +10,107 @@ import server.setme
 import server.arcscore
 import web.login
 import web.index
+import api.api_main
 import server.arcworld
 import server.arcdownload
 import server.arcpurchase
+import server.init
 import os
+import sys
 
 
 app = Flask(__name__)
 wsgi_app = app.wsgi_app
 
+os.chdir(sys.path[0])  # 更改工作路径，以便于愉快使用相对路径
+
+app.config.from_mapping(SECRET_KEY=Config.SECRET_KEY)
+app.config['SESSION_TYPE'] = 'filesystem'
+app.register_blueprint(web.login.bp)
+app.register_blueprint(web.index.bp)
+app.register_blueprint(api.api_main.bp)
+
+log_dict = {
+    'version': 1,
+    'root': {
+        'level': 'INFO',
+        'handlers': ['wsgi', 'error_file']
+    },
+    'handlers': {
+        'wsgi': {
+            'class': 'logging.StreamHandler',
+            'stream': 'ext://flask.logging.wsgi_errors_stream',
+            'formatter': 'default'
+        },
+        "error_file": {
+            "class": "logging.handlers.RotatingFileHandler",
+            "maxBytes": 1024 * 1024,
+            "backupCount": 1,
+            "encoding": "utf-8",
+            "level": "ERROR",
+            "formatter": "default",
+            "filename": "./log/error.log"
+        }
+    },
+    'formatters': {
+        'default': {
+            'format': '[%(asctime)s] %(levelname)s in %(module)s: %(message)s'
+        }
+    }
+}
+if Config.ALLOW_LOG_INFO:
+    log_dict['root']['handlers'] = ['wsgi', 'info_file', 'error_file']
+    log_dict['handlers']['info_file'] = {
+        "class": "logging.handlers.RotatingFileHandler",
+        "maxBytes": 1024 * 1024,
+        "backupCount": 1,
+        "encoding": "utf-8",
+        "level": "INFO",
+        "formatter": "default",
+        "filename": "./log/info.log"
+    }
+
+dictConfig(log_dict)
+
+if not server.init.check_before_run(app):
+    app.logger.error('Something wrong. The server will not run.')
+    input('Press ENTER key to exit.')
+    sys.exit()
+
+app.logger.info("Start to initialize data in 'songfile' table...")
+try:
+    error = server.arcdownload.initialize_songfile()
+except:
+    error = 'Something wrong.'
+if error:
+    app.logger.warning(error)
+else:
+    app.logger.info('Complete!')
+
+
+def add_url_prefix(url, strange_flag=False):
+    # 给url加前缀，返回字符串
+    if not url or not Config.GAME_API_PREFIX:
+        return Config.GAME_API_PREFIX + url
+
+    prefix = Config.GAME_API_PREFIX
+    if prefix[0] != '/':
+        prefix = '/' + prefix
+    if prefix[-1] == '/':
+        prefix = prefix[:-1]
+
+    if url[0] != '/':
+        r = '/' + url
+    else:
+        r = url
+
+    if strange_flag and prefix.count('/') >= 1:  # 为了方便处理双斜杠
+        t = prefix[::-1]
+        t = t[t.find('/')+1:]
+        prefix = t[::-1]
+
+    return prefix + r
+
 
 def error_return(error_code):  # 错误返回
     # -7 处理交易时发生了错误
@@ -69,6 +164,7 @@ def error_return(error_code):  # 错误返回
 @app.route('/')
 def hello():
     return "Hello World!"
+# 自定义路径
 
 
 @app.route('/favicon.ico', methods=['GET'])  # 图标
@@ -80,74 +176,76 @@ def favicon():
     return app.send_static_file('favicon.ico')
 
 
-@app.route('/coffee/12/auth/login', methods=['POST'])  # 登录接口
+@app.route(add_url_prefix('/auth/login'), methods=['POST'])  # 登录接口
 def login():
+    if 'AppVersion' in request.headers:  # 版本检查
+        if Config.ALLOW_APPVERSION:
+            if request.headers['AppVersion'] not in Config.ALLOW_APPVERSION:
+                return jsonify({"success": False, "error_code": 5})
+
     headers = request.headers
     id_pwd = headers['Authorization']
     id_pwd = base64.b64decode(id_pwd[6:]).decode()
     name, password = id_pwd.split(':', 1)
+    if 'DeviceId' in headers:
+        device_id = headers['DeviceId']
+    else:
+        device_id = 'low_version'
 
-    try:
+    token, error_code = server.auth.arc_login(
-        token = server.auth.arc_login(name, password)
+        name, password, device_id, request.remote_addr)
-        if token is not None:
+    if not error_code:
         r = {"success": True, "token_type": "Bearer"}
         r['access_token'] = token
         return jsonify(r)
     else:
-            return error_return(104)  # 用户名或密码错误
+        return error_return(error_code)
-    except:
-        return error_return(108)
 
 
-@app.route('/coffee/12/user/', methods=['POST'])  # 注册接口
+@app.route(add_url_prefix('/user/'), methods=['POST'])  # 注册接口
 def register():
+    if 'AppVersion' in request.headers:  # 版本检查
+        if Config.ALLOW_APPVERSION:
+            if request.headers['AppVersion'] not in Config.ALLOW_APPVERSION:
+                return jsonify({"success": False, "error_code": 5})
+
     name = request.form['name']
     password = request.form['password']
-    try:
+    email = request.form['email']
-        user_id, token, error_code = server.auth.arc_register(name, password)
+    if 'device_id' in request.form:
+        device_id = request.form['device_id']
+    else:
+        device_id = 'low_version'
+
+    user_id, token, error_code = server.auth.arc_register(
+        name, password, device_id, email, request.remote_addr)
     if user_id is not None:
         r = {"success": True, "value": {
             'user_id': user_id, 'access_token': token}}
         return jsonify(r)
     else:
-            return error_return(error_code)  # 应该是101，用户名被占用，毕竟电子邮箱、设备号没记录
+        return error_return(error_code)
-    except:
-        return error_return(108)
 
 
 # 集成式请求，没想到什么好办法处理，就先这样写着
-@app.route('/coffee/12/compose/aggregate', methods=['GET'])
+@app.route(add_url_prefix('/compose/aggregate'), methods=['GET'])
-def aggregate():
+@server.auth.auth_required(request)
+def aggregate(user_id):
     calls = request.args.get('calls')
-    headers = request.headers
-    token = headers['Authorization']
-    token = token[7:]
-    try:
-        user_id = server.auth.token_get_id(token)
-        if user_id is not None:
     if calls == '[{ "endpoint": "/user/me", "id": 0 }]':  # 极其沙雕的判断，我猜get的参数就两种
         r = server.info.arc_aggregate_small(user_id)
     else:
         r = server.info.arc_aggregate_big(user_id)
     return jsonify(r)
-        else:
-            return error_return(108)
-    except:
-        return error_return(108)
 
 
-@app.route('/coffee/12/user/me/character', methods=['POST'])  # 角色切换
+@app.route(add_url_prefix('/user/me/character'), methods=['POST'])  # 角色切换
-def character_change():
+@server.auth.auth_required(request)
-    headers = request.headers
+def character_change(user_id):
-    token = headers['Authorization']
-    token = token[7:]
     character_id = request.form['character']
     skill_sealed = request.form['skill_sealed']
-    try:
+
-        user_id = server.auth.token_get_id(token)
+    flag = server.setme.change_char(user_id, character_id, skill_sealed)
-        if user_id is not None:
-            flag = server.setme.change_char(
-                user_id, character_id, skill_sealed)
     if flag:
         return jsonify({
             "success": True,
@@ -158,21 +256,15 @@ def character_change():
         })
     else:
         return error_return(108)
-        else:
-            return error_return(108)
-    except:
-        return error_return(108)
 
 
-@app.route('/coffee/<path:path>/toggle_uncap', methods=['POST'])  # 角色觉醒切换
+# 角色觉醒切换
-def character_uncap(path):
+@app.route(add_url_prefix('/<path:path>/toggle_uncap', True), methods=['POST'])
-    character_id = int(path[22:])
+@server.auth.auth_required(request)
-    headers = request.headers
+def character_uncap(user_id, path):
-    token = headers['Authorization']
+    while '//' in path:
-    token = token[7:]
+        path = path.replace('//', '/')
-    try:
+    character_id = int(path[21:])
-        user_id = server.auth.token_get_id(token)
-        if user_id is not None:
     r = server.setme.change_char_uncap(user_id, character_id)
     if r is not None:
         return jsonify({
@@ -184,22 +276,14 @@ def character_uncap(path):
         })
     else:
         return error_return(108)
-        else:
-            return error_return(108)
-    except:
-        return error_return(108)
 
 
-@app.route('/coffee/12/friend/me/add', methods=['POST'])  # 加好友
+@app.route(add_url_prefix('/friend/me/add'), methods=['POST'])  # 加好友
-def add_friend():
+@server.auth.auth_required(request)
-    headers = request.headers
+def add_friend(user_id):
-    token = headers['Authorization']
-    token = token[7:]
     friend_code = request.form['friend_code']
-    try:
-        user_id = server.auth.token_get_id(token)
     friend_id = server.auth.code_get_id(friend_code)
-        if user_id is not None and friend_id is not None:
+    if friend_id is not None:
         r = server.setme.arc_add_friend(user_id, friend_id)
         if r is not None and r != 602 and r != 604:
             return jsonify({
@@ -217,23 +301,14 @@ def add_friend():
             else:
                 return error_return(108)
     else:
-            if friend_id is None:
         return error_return(401)
-            else:
-                return error_return(108)
-    except:
-        return error_return(108)
 
 
-@app.route('/coffee/12/friend/me/delete', methods=['POST'])  # 删好友
+@app.route(add_url_prefix('/friend/me/delete'), methods=['POST'])  # 删好友
-def delete_friend():
+@server.auth.auth_required(request)
-    headers = request.headers
+def delete_friend(user_id):
-    token = headers['Authorization']
-    token = token[7:]
     friend_id = int(request.form['friend_id'])
-    try:
+    if friend_id is not None:
-        user_id = server.auth.token_get_id(token)
-        if user_id is not None and friend_id is not None:
         r = server.setme.arc_delete_friend(user_id, friend_id)
         if r is not None:
             return jsonify({
@@ -248,24 +323,15 @@ def delete_friend():
         else:
             return error_return(108)
     else:
-            if friend_id is None:
         return error_return(401)
-            else:
-                return error_return(108)
-    except:
-        return error_return(108)
 
 
-@app.route('/coffee/12/score/song/friend', methods=['GET'])  # 好友排名，默认最多50
+# 好友排名，默认最多50
-def song_score_friend():
+@app.route(add_url_prefix('/score/song/friend'), methods=['GET'])
+@server.auth.auth_required(request)
+def song_score_friend(user_id):
     song_id = request.args.get('song_id')
     difficulty = request.args.get('difficulty')
-    headers = request.headers
-    token = headers['Authorization']
-    token = token[7:]
-    try:
-        user_id = server.auth.token_get_id(token)
-        if user_id is not None:
     r = server.arcscore.arc_score_friend(user_id, song_id, difficulty)
     if r is not None:
         return jsonify({
@@ -274,22 +340,13 @@ def song_score_friend():
         })
     else:
         return error_return(108)
-        else:
-            return error_return(108)
-    except:
-        return error_return(108)
 
 
-@app.route('/coffee/12/score/song/me', methods=['GET'])  # 我的排名，默认最多20
+@app.route(add_url_prefix('/score/song/me'), methods=['GET'])  # 我的排名，默认最多20
-def song_score_me():
+@server.auth.auth_required(request)
+def song_score_me(user_id):
     song_id = request.args.get('song_id')
     difficulty = request.args.get('difficulty')
-    headers = request.headers
-    token = headers['Authorization']
-    token = token[7:]
-    try:
-        user_id = server.auth.token_get_id(token)
-        if user_id is not None:
     r = server.arcscore.arc_score_me(user_id, song_id, difficulty)
     if r is not None:
         return jsonify({
@@ -298,22 +355,13 @@ def song_score_me():
         })
     else:
         return error_return(108)
-        else:
-            return error_return(108)
-    except:
-        return error_return(108)
 
 
-@app.route('/coffee/12/score/song', methods=['GET'])  # TOP20
+@app.route(add_url_prefix('/score/song'), methods=['GET'])  # TOP20
-def song_score_top():
+@server.auth.auth_required(request)
+def song_score_top(user_id):
     song_id = request.args.get('song_id')
     difficulty = request.args.get('difficulty')
-    headers = request.headers
-    token = headers['Authorization']
-    token = token[7:]
-    try:
-        user_id = server.auth.token_get_id(token)
-        if user_id is not None:
     r = server.arcscore.arc_score_top(song_id, difficulty)
     if r is not None:
         return jsonify({
@@ -322,17 +370,11 @@ def song_score_top():
         })
     else:
         return error_return(108)
-        else:
-            return error_return(108)
-    except:
-        return error_return(108)
 
 
-@app.route('/coffee/12/score/song', methods=['POST'])  # 成绩上传
+@app.route(add_url_prefix('/score/song'), methods=['POST'])  # 成绩上传
-def song_score_post():
+@server.auth.auth_required(request)
-    headers = request.headers
+def song_score_post(user_id):
-    token = headers['Authorization']
-    token = token[7:]
     song_token = request.form['song_token']
     song_hash = request.form['song_hash']
     song_id = request.form['song_id']
@@ -348,16 +390,13 @@ def song_score_post():
     clear_type = int(request.form['clear_type'])
     submission_hash = request.form['submission_hash']
 
-    try:
-        user_id = server.auth.token_get_id(token)
-        if user_id is not None:
     # 增加成绩校验
     if not server.arcscore.arc_score_check(user_id, song_id, difficulty, score, shiny_perfect_count, perfect_count, near_count, miss_count, health, modifier, beyond_gauge, clear_type, song_token, song_hash, submission_hash):
         return error_return(107)
 
     r, re = server.arcscore.arc_score_post(user_id, song_id, difficulty, score, shiny_perfect_count,
                                            perfect_count, near_count, miss_count, health, modifier, beyond_gauge, clear_type)
-            if r:
+    if r is not None:
         if re:
             return jsonify({
                 "success": True,
@@ -370,13 +409,10 @@ def song_score_post():
             })
     else:
         return error_return(108)
-        else:
-            return error_return(108)
-    except:
-        return error_return(108)
 
 
-@app.route('/coffee/12/score/token', methods=['GET'])  # 成绩上传所需的token，显然我不想验证
+# 成绩上传所需的token，显然我不想验证
+@app.route(add_url_prefix('/score/token'), methods=['GET'])
 def score_token():
     return jsonify({
         "success": True,
@@ -387,15 +423,10 @@ def score_token():
 
 
 # 世界模式成绩上传所需的token，无验证
-@app.route('/coffee/12/score/token/world', methods=['GET'])
+@app.route(add_url_prefix('/score/token/world'), methods=['GET'])
-def score_token_world():
+@server.auth.auth_required(request)
-    headers = request.headers
+def score_token_world(user_id):
-    token = headers['Authorization']
-    token = token[7:]
     args = request.args
-    try:
-        user_id = server.auth.token_get_id(token)
-        if user_id:
     server.arcworld.play_world_song(user_id, args)
     return jsonify({
         "success": True,
@@ -405,20 +436,11 @@ def score_token_world():
             "token": "13145201919810"
         }
     })
-        else:
-            return error_return(108)
-    except:
-        return error_return(108)
 
 
-@app.route('/coffee/12/user/me/save', methods=['GET'])  # 从云端同步
+@app.route(add_url_prefix('/user/me/save'), methods=['GET'])  # 从云端同步
-def cloud_get():
+@server.auth.auth_required(request)
-    headers = request.headers
+def cloud_get(user_id):
-    token = headers['Authorization']
-    token = token[7:]
-    try:
-        user_id = server.auth.token_get_id(token)
-        if user_id is not None:
     r = server.arcscore.arc_all_get(user_id)
     if r is not None:
         return jsonify({
@@ -427,17 +449,11 @@ def cloud_get():
         })
     else:
         return error_return(108)
-        else:
-            return error_return(108)
-    except:
-        return error_return(108)
 
 
-@app.route('/coffee/12/user/me/save', methods=['POST'])  # 向云端同步
+@app.route(add_url_prefix('/user/me/save'), methods=['POST'])  # 向云端同步
-def cloud_post():
+@server.auth.auth_required(request)
-    headers = request.headers
+def cloud_post(user_id):
-    token = headers['Authorization']
-    token = token[7:]
     scores_data = request.form['scores_data']
     clearlamps_data = request.form['clearlamps_data']
     clearedsongs_data = request.form['clearedsongs_data']
@@ -445,9 +461,7 @@ def cloud_post():
     installid_data = request.form['installid_data']
     devicemodelname_data = request.form['devicemodelname_data']
     story_data = request.form['story_data']
-    try:
+
-        user_id = server.auth.token_get_id(token)
-        if user_id is not None:
     server.arcscore.arc_all_post(user_id, scores_data, clearlamps_data, clearedsongs_data,
                                  unlocklist_data, installid_data, devicemodelname_data, story_data)
     return jsonify({
@@ -456,55 +470,73 @@ def cloud_post():
             "user_id": user_id
         }
     })
+
+
+@app.route(add_url_prefix('/purchase/me/redeem'), methods=['POST'])  # 兑换码
+@server.auth.auth_required(request)
+def redeem(user_id):
+    code = request.form['code']
+    fragment, error_code = server.arcpurchase.claim_user_redeem(
+        user_id, code)
+    if not error_code:
+        if fragment > 0:
+            return jsonify({
+                "success": True,
+                "value": {"coupon": "fragment"+str(fragment)}
+            })
         else:
-            return error_return(108)
+            return jsonify({
-    except:
+                "success": True,
-        return error_return(108)
+                "value": {"coupon": ""}
-
+            })
-
+    else:
-@app.route('/coffee/12/purchase/me/redeem', methods=['POST'])  # 兑换码，依然没有用
+        return error_return(error_code)
-def redeem():
-    return error_return(504)
 
 
 # 礼物确认
-@app.route('/coffee/12/present/me/claim/<present_id>', methods=['POST'])
+@app.route(add_url_prefix('/present/me/claim/<present_id>'), methods=['POST'])
-def claim_present(present_id):
+@server.auth.auth_required(request)
+def claim_present(user_id, present_id):
+    flag = server.arcpurchase.claim_user_present(user_id, present_id)
+    if flag:
         return jsonify({
             "success": True
         })
-
-
-# 购买，为了world模式boost一下
-@app.route('/coffee/12/purchase/me/item', methods=['POST'])
-def item():
-    return jsonify({
-        "success": True
-    })
-
-
-@app.route('/coffee/12/purchase/me/pack', methods=['POST'])  # 曲包和单曲购买
-def pack():
-    headers = request.headers
-    token = headers['Authorization']
-    token = token[7:]
-    try:
-        user_id = server.auth.token_get_id(token)
-        if user_id:
-            if 'pack_id' in request.form:
-                return jsonify(server.arcpurchase.buy_pack(user_id, request.form['pack_id']))
-            if 'single_id' in request.form:
-                return jsonify(server.arcpurchase.buy_single(user_id, request.form['single_id']))
     else:
         return error_return(108)
-    except:
-        return error_return(108)
-    return jsonify({
-        "success": True
-    })
 
 
-@app.route('/coffee/12/purchase/bundle/single', methods=['GET'])  # 单曲购买信息获取
+# 购买，world模式boost
+@app.route(add_url_prefix('/purchase/me/item'), methods=['POST'])
+@server.auth.auth_required(request)
+def prog_boost(user_id):
+    re = {"success": False}
+    if 'item_id' in request.form:
+        if request.form['item_id'] == 'prog_boost_300':
+            ticket, error_code = server.arcpurchase.get_prog_boost(user_id)
+            if error_code:
+                return error_return(error_code)
+
+            re = {
+                "success": True,
+                "value": {'ticket': ticket}
+            }
+    return jsonify(re)
+
+
+@app.route(add_url_prefix('/purchase/me/pack'), methods=['POST'])  # 曲包和单曲购买
+@server.auth.auth_required(request)
+def pack(user_id):
+    if 'pack_id' in request.form:
+        return jsonify(server.arcpurchase.buy_thing(user_id, request.form['pack_id'], 'pack'))
+    if 'single_id' in request.form:
+        return jsonify(server.arcpurchase.buy_thing(user_id, request.form['single_id'], 'single'))
+
+    return jsonify({"success": True})
+
+
+# 单曲购买信息获取
+@app.route(add_url_prefix('/purchase/bundle/single'), methods=['GET'])
 def single():
     return jsonify({
         "success": True,
@@ -512,15 +544,9 @@ def single():
     })
 
 
-@app.route('/coffee/12/world/map/me', methods=['GET'])  # 获得世界模式信息，所有地图
+@app.route(add_url_prefix('/world/map/me'), methods=['GET'])  # 获得世界模式信息，所有地图
-def world_all():
+@server.auth.auth_required(request)
-    headers = request.headers
+def world_all(user_id):
-    token = headers['Authorization']
-    token = token[7:]
-    try:
-
-        user_id = server.auth.token_get_id(token)
-        if user_id:
     return jsonify({
         "success": True,
         "value": {
@@ -529,39 +555,22 @@ def world_all():
             "maps": server.arcworld.get_world_all(user_id)
         }
     })
-        else:
-            return error_return(108)
-    except:
-        return error_return(108)
 
 
-@app.route('/coffee/12/world/map/me/', methods=['POST'])  # 进入地图
+@app.route(add_url_prefix('/world/map/me/'), methods=['POST'])  # 进入地图
-def world_in():
+@server.auth.auth_required(request)
-    headers = request.headers
+def world_in(user_id):
-    token = headers['Authorization']
-    token = token[7:]
     map_id = request.form['map_id']
-    try:
-        user_id = server.auth.token_get_id(token)
-        if user_id:
     return jsonify({
         "success": True,
         "value": server.arcworld.get_user_world(user_id, map_id)
     })
-        else:
-            return error_return(108)
-    except:
-        return error_return(108)
 
 
-@app.route('/coffee/12/world/map/me/<map_id>', methods=['GET'])  # 获得单个地图完整信息
+# 获得单个地图完整信息
-def world_one(map_id):
+@app.route(add_url_prefix('/world/map/me/<map_id>'), methods=['GET'])
-    headers = request.headers
+@server.auth.auth_required(request)
-    token = headers['Authorization']
+def world_one(user_id, map_id):
-    token = token[7:]
-    try:
-        user_id = server.auth.token_get_id(token)
-        if user_id:
     server.arcworld.change_user_current_map(user_id, map_id)
     return jsonify({
         "success": True,
@@ -571,21 +580,12 @@ def world_one(map_id):
             "maps": [server.arcworld.get_user_world_info(user_id, map_id)]
         }
     })
-        else:
-            return error_return(108)
-    except:
-        return error_return(108)
 
 
-@app.route('/coffee/12/serve/download/me/song', methods=['GET'])  # 歌曲下载
+@app.route(add_url_prefix('/serve/download/me/song'), methods=['GET'])  # 歌曲下载
-def download_song():
+@server.auth.auth_required(request)
-    headers = request.headers
+def download_song(user_id):
-    token = headers['Authorization']
-    token = token[7:]
     song_ids = request.args.getlist('sid')
-    try:
-        user_id = server.auth.token_get_id(token)
-        if user_id:
     if server.arcdownload.is_able_download(user_id):
         re = {}
         if not song_ids:
@@ -599,16 +599,12 @@ def download_song():
         })
     else:
         return error_return(903)
-        else:
-            return error_return(108)
-    except:
-        return error_return(108)
 
 
 @app.route('/download/<path:file_path>', methods=['GET'])  # 下载
 def download(file_path):
-    t = request.args.get('t')
     try:
+        t = request.args.get('t')
         message = server.arcdownload.is_token_able_download(t)
         if message == 0:
             path = os.path.join('./database/songs', file_path)
@@ -622,38 +618,24 @@ def download(file_path):
         return error_return(108)
 
 
-@app.route('/coffee/<path:path>', methods=['POST'])  # 三个设置，写在最后降低优先级
+# 三个设置，写在最后降低优先级
-def sys_set(path):
+@app.route(add_url_prefix('/<path:path>', True), methods=['POST'])
+@server.auth.auth_required(request)
+def sys_set(user_id, path):
     set_arg = path[10:]
-    headers = request.headers
-    token = headers['Authorization']
-    token = token[7:]
     value = request.form['value']
-
-    try:
-        user_id = server.auth.token_get_id(token)
-        if user_id is not None:
     server.setme.arc_sys_set(user_id, value, set_arg)
     r = server.info.arc_aggregate_small(user_id)
     r['value'] = r['value'][0]['value']
     return jsonify(r)
-        else:
-            return error_return(108)
-    except:
-        return error_return(108)
 
 
 def main():
-    config = configparser.ConfigParser()
+    if Config.SSL_CERT and Config.SSL_KEY:
-    path = r'setting.ini'
+        app.run(Config.HOST, Config.PORT, ssl_context=(
-    config.read(path, encoding="utf-8")
+            Config.SSL_CERT, Config.SSL_KEY))
-    HOST = config.get('CONFIG', 'HOST')
+    else:
-    PORT = config.get('CONFIG', 'PORT')
+        app.run(Config.HOST, Config.PORT)
-    app.config.from_mapping(SECRET_KEY='1145141919810')
-    app.register_blueprint(web.login.bp)
-    app.register_blueprint(web.index.bp)
-
-    app.run(HOST, PORT)
 
 
 if __name__ == '__main__':

latest version/run.bat

@@ -1 +1 @@
-python main.py
+python -B main.py

latest version/server/arcdownload.py

@@ -2,10 +2,12 @@ import os
 import hashlib
 from flask import url_for
 import sqlite3
+from server.sql import Connect
 import time
+from setting import Config
 
-time_limit = 3000  # 每个玩家24小时下载次数限制
+time_limit = Config.DOWNLOAD_TIMES_LIMIT  # 每个玩家24小时下载次数限制
-time_gap_limit = 1000  # 下载链接有效秒数
+time_gap_limit = Config.DOWNLOAD_TIME_GAP_LIMIT  # 下载链接有效秒数
 
 
 def get_file_md5(file_path):
@@ -13,17 +15,34 @@ def get_file_md5(file_path):
     if not os.path.isfile(file_path):
         return None
     myhash = hashlib.md5()
-    f = open(file_path, 'rb')
+    with open(file_path, 'rb') as f:
         while True:
             b = f.read(8096)
             if not b:
                 break
             myhash.update(b)
-    f.close()
+
     return myhash.hexdigest()
 
 
-def get_one_song(c, user_id, song_id, file_dir='./database/songs'):
+def get_url(file_path, **kwargs):
+    # 获取下载地址
+
+    t = ''
+    if 't' in kwargs:
+        t = kwargs['t']
+
+    if Config.DOWNLOAD_LINK_PREFIX:
+        prefix = Config.DOWNLOAD_LINK_PREFIX
+        if prefix[-1] != '/':
+            prefix += '/'
+
+        return prefix + file_path + '?t=' + t
+    else:
+        return url_for('download', file_path=file_path, t=t, _external=True)
+
+
+def get_one_song(c, user_id, song_id, file_dir='./database/songs', url_flag=True):
     # 获取一首歌的下载链接，返回字典
     dir_list = os.listdir(os.path.join(file_dir, song_id))
     re = {}
@@ -35,56 +54,72 @@ def get_one_song(c, user_id, song_id, file_dir='./database/songs'):
         if os.path.isfile(os.path.join(file_dir, song_id, i)) and i in ['0.aff', '1.aff', '2.aff', '3.aff', 'base.ogg']:
             token = hashlib.md5(
                 (str(user_id) + song_id + i + str(now)).encode(encoding='UTF-8')).hexdigest()
-            token = token[:8]
 
             if i == 'base.ogg':
-                re['audio'] = {"checksum": get_file_md5(os.path.join(file_dir, song_id, 'base.ogg')),
+                c.execute(
-                               "url": url_for('download', file_path=song_id+'/base.ogg', t=token, _external=True)}
+                    '''select md5 from songfile where song_id=:a and file_type=-1''', {'a': song_id})
+                x = c.fetchone()
+                if x:
+                    checksum = x[0]
+                else:
+                    checksum = get_file_md5(os.path.join(
+                        file_dir, song_id, 'base.ogg'))
+
+                if url_flag:
+                    re['audio'] = {"checksum": checksum, "url": get_url(
+                        file_path=song_id+'/base.ogg', t=token)}
+                else:
+                    re['audio'] = {"checksum": checksum}
             else:
                 if 'chart' not in re:
                     re['chart'] = {}
-                re['chart'][i[0]] = {"checksum": get_file_md5(os.path.join(file_dir, song_id, i)),
+                c.execute(
-                                     "url": url_for('download', file_path=song_id+'/'+i, t=token, _external=True)}
+                    '''select md5 from songfile where song_id=:a and file_type=:b''', {'a': song_id, 'b': int(i[0])})
+                x = c.fetchone()
+                if x:
+                    checksum = x[0]
+                else:
+                    checksum = get_file_md5(os.path.join(file_dir, song_id, i))
 
+                if url_flag:
+                    re['chart'][i[0]] = {"checksum": checksum, "url": get_url(
+                        file_path=song_id+'/'+i, t=token)}
+                else:
+                    re['chart'][i[0]] = {"checksum": checksum}
+
+            if url_flag:
                 c.execute('''insert into download_token values(:a,:b,:c,:d,:e)''', {
                     'a': user_id, 'b': song_id, 'c': i, 'd': token, 'e': now})
 
     return {song_id: re}
 
 
-def get_all_songs(user_id, file_dir='./database/songs'):
+def get_all_songs(user_id, file_dir='./database/songs', url_flag=True):
     # 获取所有歌的下载链接，返回字典
     dir_list = os.listdir(file_dir)
     re = {}
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    with Connect() as c:
-    c = conn.cursor()
         for i in dir_list:
             if os.path.isdir(os.path.join(file_dir, i)):
-            re.update(get_one_song(c, user_id, i))
+                re.update(get_one_song(c, user_id, i, file_dir, url_flag))
 
-    conn.commit()
-    conn.close()
     return re
 
 
 def get_some_songs(user_id, song_ids):
     # 获取一些歌的下载链接，返回字典
     re = {}
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    with Connect() as c:
-    c = conn.cursor()
         for song_id in song_ids:
             re.update(get_one_song(c, user_id, song_id))
 
-    conn.commit()
-    conn.close()
     return re
 
 
 def is_token_able_download(t):
     # token是否可以下载，返回错误码，0即可以
-    errorcode = 0
+    errorcode = 108
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    with Connect() as c:
-    c = conn.cursor()
         c.execute('''select * from download_token where token = :t limit 1''',
                   {'t': t})
         x = c.fetchone()
@@ -96,21 +131,19 @@ def is_token_able_download(t):
             if y and y[0] <= time_limit:
                 c.execute('''insert into user_download values(:a,:b,:c)''', {
                     'a': x[0], 'b': x[3], 'c': now})
+                errorcode = 0
             else:
                 errorcode = 903
         else:
             errorcode = 108
 
-    conn.commit()
-    conn.close()
     return errorcode
 
 
 def is_able_download(user_id):
     # 是否可以下载，返回布尔值
-    f = True
+    f = False
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    with Connect() as c:
-    c = conn.cursor()
         now = int(time.time())
         c.execute(
             '''delete from user_download where user_id = :a and time <= :b''', {'a': user_id, 'b': now - 24*3600})
@@ -118,10 +151,50 @@ def is_able_download(user_id):
             '''select count(*) from user_download where user_id = :a''', {'a': user_id})
         y = c.fetchone()
         if y and y[0] <= time_limit:
-        pass
+            f = True
         else:
             f = False
 
+    return f
+
+
+def initialize_one_songfile(c, song_id, file_dir='./database/songs'):
+    # 计算并添加歌曲md5到表中，无返回
+    dir_list = os.listdir(os.path.join(file_dir, song_id))
+    for i in dir_list:
+        if os.path.isfile(os.path.join(file_dir, song_id, i)) and i in ['0.aff', '1.aff', '2.aff', '3.aff', 'base.ogg']:
+            if i == 'base.ogg':
+                c.execute('''insert into songfile values(:a,-1,:c)''', {
+                          'a': song_id, 'c': get_file_md5(os.path.join(file_dir, song_id, 'base.ogg'))})
+            else:
+                c.execute('''insert into songfile values(:a,:b,:c)''', {
+                          'a': song_id, 'b': int(i[0]), 'c': get_file_md5(os.path.join(file_dir, song_id, i))})
+
+    return
+
+
+def initialize_songfile(file_dir='./database/songs'):
+    # 初始化歌曲数据的md5表，返回错误信息
+    error = None
+    try:
+        dir_list = os.listdir(file_dir)
+    except:
+        error = 'OS error!'
+        return error
+    try:
+        conn = sqlite3.connect('./database/arcaea_database.db')
+        c = conn.cursor()
+    except:
+        error = 'Database error!'
+        return error
+    try:
+        c.execute('''delete from songfile''')
+        for i in dir_list:
+            if os.path.isdir(os.path.join(file_dir, i)):
+                initialize_one_songfile(c, i, file_dir)
+    except:
+        error = 'Initialization error!'
+    finally:
         conn.commit()
         conn.close()
-    return f
+        return error

latest version/server/arcpurchase.py

@@ -1,4 +1,7 @@
-import sqlite3
+from server.sql import Connect
+import server.info
+import time
+import json
 
 
 def int2b(x):
@@ -39,26 +42,17 @@ def get_item(c, type='pack'):
 
 def get_single_purchase():
     # main里面没开数据库，这里写一下代替
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    re = []
-    c = conn.cursor()
+    with Connect() as c:
         re = get_item(c, type='single')
-    conn.commit()
+
-    conn.close()
     return re
 
 
-def buy_pack(user_id, pack_id):
+def buy_item(c, user_id, price):
-    # 曲包购买，返回字典
+    # 购买接口，返回成功与否标识符和剩余源点数
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    c.execute('''select ticket from user where user_id = :a''',
-    c = conn.cursor()
+              {'a': user_id})
-    c.execute('''select price from item where item_id = :a''', {'a': pack_id})
-    price = c.fetchone()
-    if price:
-        price = price[0]
-    else:
-        price = 0
-
-    c.execute('''select ticket from user where user_id = :a''', {'a': user_id})
     ticket = c.fetchone()
     if ticket:
         ticket = ticket[0]
@@ -66,57 +60,167 @@ def buy_pack(user_id, pack_id):
         ticket = 0
 
     if ticket < price:
-        conn.commit()
+        return False, ticket
-        conn.close()
-        return {
-            "success": False
-        }
 
     c.execute('''update user set ticket = :b where user_id = :a''',
               {'a': user_id, 'b': ticket-price})
-    c.execute('''insert into user_item values(:a,:b,'pack')''',
-              {'a': user_id, 'b': pack_id})
 
-    conn.commit()
+    return True, ticket - price
-    conn.close()
-    return {
-        "success": True
-    }
 
 
-def buy_single(user_id, single_id):
+def buy_thing(user_id, item_id, item_type):
-    # 单曲购买，返回字典
+    # 购买物品接口，返回字典
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    success_flag = False
-    c = conn.cursor()
-    c.execute('''select price from item where item_id = :a''',
-              {'a': single_id})
-    price = c.fetchone()
-    if price:
-        price = price[0]
-    else:
-        price = 0
-
-    c.execute('''select ticket from user where user_id = :a''', {'a': user_id})
-    ticket = c.fetchone()
-    if ticket:
-        ticket = ticket[0]
-    else:
     ticket = 0
+    packs = []
+    singles = []
+    characters = []
+
+    with Connect() as c:
+        c.execute('''select is_available, price, orig_price, discount_from, discount_to from item where item_id=:a and type=:b''',
+                  {'a': item_id, 'b': item_type})
+        x = c.fetchone()
+        price = 0
+        flag = False
+        if x:
+            is_available = x[0]
+            price = x[1]
+            orig_price = x[2]
+            discount_from = x[3]
+            discount_to = x[4]
+
+            if not is_available:
+                return False
+
+            now = int(time.time() * 1000)
+            if not(discount_from <= now <= discount_to):
+                price = orig_price
+
+            flag, ticket = buy_item(c, user_id, price)
+
+        if flag:
+            c.execute('''insert into user_item values(:a,:b,:c)''',
+                      {'a': user_id, 'b': item_id, 'c': item_type})
+
+            success_flag = True
+
+        packs = server.info.get_user_packs(c, user_id)
+        singles = server.info.get_user_singles(c, user_id)
+        characters = server.info.get_user_characters(c, user_id)
 
-    if ticket < price:
-        conn.commit()
-        conn.close()
     return {
-            "success": False
+        "success": success_flag,
+        "value": {'user_id': user_id,
+                  'ticket': ticket,
+                  'packs': packs,
+                  'singles': singles,
+                  'characters': characters
+                  }
     }
 
-    c.execute('''update user set ticket = :b where user_id = :a''',
-              {'a': user_id, 'b': ticket-price})
-    c.execute('''insert into user_item values(:a,:b,'single')''',
-              {'a': user_id, 'b': single_id})
 
-    conn.commit()
+def get_prog_boost(user_id):
-    conn.close()
+    # 世界模式源韵强化，扣50源点，返回剩余源点数
-    return {
+
-        "success": True
+    ticket = -1
-    }
+    with Connect() as c:
+        flag, ticket = buy_item(c, user_id, 50)
+
+        if flag:
+            c.execute('''update user set prog_boost = 1 where user_id = :a''', {
+                      'a': user_id})
+    if ticket >= 0:
+        return ticket, None
+    else:
+        return 0, 108
+
+
+def get_user_present(c, user_id):
+    # 获取用户奖励，返回字典列表
+    c.execute(
+        '''select * from present where present_id in (select present_id from user_present where user_id=:a)''', {'a': user_id})
+    x = c.fetchall()
+    re = []
+    now = int(time.time() * 1000)
+    if x:
+        for i in x:
+            if now <= int(i[1]):
+                re.append({'expire_ts': i[1],
+                           'description': i[3],
+                           'present_id': i[0],
+                           'items': json.loads(i[2])
+                           })
+
+    return re
+
+
+def claim_user_present(user_id, present_id):
+    # 确认并删除用户奖励，返回成功与否的布尔值
+    flag = False
+    with Connect() as c:
+        c.execute('''select exists(select * from user_present where user_id=:a and present_id=:b)''',
+                  {'a': user_id, 'b': present_id})
+        if c.fetchone() == (1,):
+            c.execute('''delete from user_present where user_id=:a and present_id=:b''',
+                      {'a': user_id, 'b': present_id})
+            c.execute('''select * from present where present_id=:b''',
+                      {'b': present_id})
+            x = c.fetchone()
+            now = int(time.time() * 1000)
+            if now <= int(x[1]):
+                # 处理memory
+                items = json.loads(x[2])
+                for i in items:
+                    if i['id'] == 'memory':
+                        c.execute('''select ticket from user where user_id=:a''', {
+                            'a': user_id})
+                        ticket = int(c.fetchone()[0])
+                        ticket += int(i['amount'])
+                        c.execute('''update user set ticket=:b where user_id=:a''', {
+                            'a': user_id, 'b': ticket})
+                flag = True
+            else:
+                # 过期
+                flag = False
+
+    return flag
+
+
+def claim_user_redeem(user_id, code):
+    # 处理兑换码，返回碎片数量和错误码
+    fragment = 0
+    error_code = 108
+    with Connect() as c:
+        c.execute('''select * from redeem where code=:a''', {'a': code})
+        x = c.fetchone()
+        if not x:
+            return 0, 504
+
+        if x[2] == 0:  # 一次性
+            c.execute(
+                '''select exists(select * from user_redeem where code=:a)''', {'a': code})
+            if c.fetchone() == (1,):
+                return 0, 505
+        elif x[2] == 1:  # 每个玩家一次
+            c.execute('''select exists(select * from user_redeem where code=:a and user_id=:b)''',
+                      {'a': code, 'b': user_id})
+            if c.fetchone() == (1,):
+                return 0, 506
+
+        c.execute('''insert into user_redeem values(:b,:a)''',
+                  {'a': code, 'b': user_id})
+
+        items = json.loads(x[1])
+        for i in items:
+            if i['type'] == 'fragment':
+                fragment = i['amount']
+            if i['type'] == 'memory':
+                c.execute('''select ticket from user where user_id=:a''', {
+                    'a': user_id})
+                ticket = int(c.fetchone()[0])
+                ticket += int(i['amount'])
+                c.execute('''update user set ticket=:b where user_id=:a''', {
+                    'a': user_id, 'b': ticket})
+        error_code = None
+
+    return fragment, error_code

latest version/server/arcworld.py

@@ -1,5 +1,5 @@
 import json
-import sqlite3
+from server.sql import Connect
 import os
 
 
@@ -23,17 +23,17 @@ def get_world_name(file_dir='./database/map'):
 
 def get_world_info(map_id):
     # 读取json文件内容，返回字典
-    f = open('./database/map/'+map_id+'.json', 'r')
+    world_info = {}
+    with open('./database/map/'+map_id+'.json', 'r') as f:
         world_info = json.load(f)
-    f.close()
+
     return world_info
 
 
 def get_user_world_info(user_id, map_id):
     # 读取json文件内容，加上用户信息，返回字典
     info = get_world_info(map_id)
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    with Connect() as c:
-    c = conn.cursor()
         c.execute('''select * from user_world where map_id = :a and user_id = :b''',
                   {'a': map_id, 'b': user_id})
         x = c.fetchone()
@@ -44,33 +44,28 @@ def get_user_world_info(user_id, map_id):
         else:
             c.execute('''insert into user_world values(:a,:b,0,0,0)''', {
                 'a': user_id, 'b': map_id})
-    conn.commit()
+
-    conn.close()
     return info
 
 
 def get_current_map(user_id):
     # 得到user的当前图，返回字符串
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    re = ''
-    c = conn.cursor()
+    with Connect() as c:
         c.execute('''select current_map from user where user_id = :a''',
                   {'a': user_id})
         x = c.fetchone()
-    re = ''
         if x:
             re = x[0]
 
-    conn.commit()
-    conn.close()
     return re
 
 
 def get_world_all(user_id):
     # 读取所有地图信息并处理，返回字典列表
-    conn = sqlite3.connect('./database/arcaea_database.db')
-    c = conn.cursor()
-    worlds = get_world_name()
     re = []
+    with Connect() as c:
+        worlds = get_world_name()
         for map_id in worlds:
             info = get_world_info(map_id)
             steps = info['steps']
@@ -94,15 +89,13 @@ def get_world_all(user_id):
 
             re.append(info)
 
-    conn.commit()
-    conn.close()
     return re
 
 
 def get_user_world(user_id, map_id):
     # 获取用户图信息，返回字典
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    re = {}
-    c = conn.cursor()
+    with Connect() as c:
         c.execute('''select * from user_world where map_id = :a and user_id = :b''',
                   {'a': map_id, 'b': user_id})
         x = c.fetchone()
@@ -121,27 +114,20 @@ def get_user_world(user_id, map_id):
             c.execute('''insert into user_world values(:a,:b,0,0,0)''', {
                 'a': user_id, 'b': map_id})
 
-    conn.commit()
-    conn.close()
     return re
 
 
 def change_user_current_map(user_id, map_id):
     # 改变用户当前图
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    with Connect() as c:
-    c = conn.cursor()
         c.execute('''update user set current_map = :a where user_id=:b''', {
             'a': map_id, 'b': user_id})
-    conn.commit()
-    conn.close()
     return None
 
 
 def play_world_song(user_id, args):
     # 声明是世界模式的打歌，并且记录加成信息
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    with Connect() as c:
-    c = conn.cursor()
-
         stamina_multiply = 1
         fragment_multiply = 100
         prog_boost_multiply = 0
@@ -150,15 +136,17 @@ def play_world_song(user_id, args):
         if 'fragment_multiply' in args:
             fragment_multiply = int(args['fragment_multiply'])
         if 'prog_boost_multiply' in args:
-        prog_boost_multiply = int(args['prog_boost_multiply'])
+            c.execute('''select prog_boost from user where user_id=:a''', {
+                      'a': user_id})
+            x = c.fetchone()
+            if x and x[0] == 1:
+                prog_boost_multiply = 300
 
         c.execute('''delete from world_songplay where user_id=:a and song_id=:b and difficulty=:c''', {
             'a': user_id, 'b': args['song_id'], 'c': args['difficulty']})
         c.execute('''insert into world_songplay values(:a,:b,:c,:d,:e,:f)''', {
             'a': user_id, 'b': args['song_id'], 'c': args['difficulty'], 'd': stamina_multiply, 'e': fragment_multiply, 'f': prog_boost_multiply})
 
-    conn.commit()
-    conn.close()
     return None
 
 

latest version/server/auth.py

@@ -1,44 +1,72 @@
-import sqlite3
 import hashlib
 import time
-import server.arcworld
+from server.sql import Connect
+import functools
+from setting import Config
+from flask import jsonify
 
 
-def arc_login(name: str, password: str) -> str:  # 登录判断
+def arc_login(name: str, password: str, device_id: str, ip: str):  # 登录判断
-    # 查询数据库中的user表，验证账号密码，返回并记录token
+    # 查询数据库中的user表，验证账号密码，返回并记录token，多返回个error code
     # token采用user_id和时间戳连接后hash生成（真的是瞎想的，没用bear）
     # 密码和token的加密方式为 SHA-256
 
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    error_code = 108
-    c = conn.cursor()
+    token = None
+    with Connect() as c:
         hash_pwd = hashlib.sha256(password.encode("utf8")).hexdigest()
-    c.execute('''select user_id from user where name = :name and password = :password''', {
+        c.execute('''select user_id, password from user where name = :name''', {
-              'name': name, 'password': hash_pwd})
+            'name': name})
         x = c.fetchone()
         if x is not None:
+            if x[1] == '':
+                # 账号封禁
+                error_code = 106
+            elif x[1] == hash_pwd:
                 user_id = str(x[0])
                 now = int(time.time() * 1000)
-        token = hashlib.sha256((user_id + str(now)).encode("utf8")).hexdigest()
+                token = hashlib.sha256(
+                    (user_id + str(now)).encode("utf8")).hexdigest()
                 c.execute(
-            '''select exists(select * from login where user_id = :user_id)''', {"user_id": user_id})
+                    '''select login_device from login where user_id = :user_id''', {"user_id": user_id})
+                y = c.fetchall()
+                if y:
+                    device_list = []
+                    for i in y:
+                        if i[0]:
+                            device_list.append(i[0])
+                        else:
+                            device_list.append('')
 
-        if c.fetchone() == (1,):  # 删掉多余token
+                    should_delete_num = len(
-            c.execute('''delete from login where user_id = :user_id''',
+                        device_list) + 1 - Config.LOGIN_DEVICE_NUMBER_LIMIT
-                      {'user_id': user_id})
 
-        c.execute('''insert into login(access_token, user_id) values(:access_token, :user_id)''', {
+                    if not Config.ALLOW_LOGIN_SAME_DEVICE:
-                  'user_id': user_id, 'access_token': token})
+                        if device_id in device_list:  # 对相同设备进行删除
-        conn.commit()
+                            c.execute('''delete from login where login_device=:a and user_id=:b''', {
-        conn.close()
+                                'a': device_id, 'b': user_id})
-        return token
+                            should_delete_num = len(
+                                device_list) + 1 - device_list.count(device_id) - Config.LOGIN_DEVICE_NUMBER_LIMIT
 
-    conn.commit()
+                    if should_delete_num >= 1:  # 删掉多余token
-    conn.close()
+                        c.execute('''delete from login where rowid in (select rowid from login where user_id=:user_id limit :a);''',
-    return None
+                                  {'user_id': user_id, 'a': int(should_delete_num)})
+
+                c.execute('''insert into login values(:access_token, :user_id, :time, :ip, :device_id)''', {
+                    'user_id': user_id, 'access_token': token, 'device_id': device_id, 'time': now, 'ip': ip})
+                error_code = None
+            else:
+                # 密码错误
+                error_code = 104
+        else:
+            # 用户名错误
+            error_code = 104
+
+    return token, error_code
 
 
-def arc_register(name: str, password: str):  # 注册
+def arc_register(name: str, password: str, device_id: str, email: str, ip: str):  # 注册
-    # 账号注册，只记录hash密码和用户名，生成user_id和user_code，自动登录返回token
+    # 账号注册，记录hash密码、用户名和邮箱，生成user_id和user_code，自动登录返回token
     # token和密码的处理同登录部分
 
     def build_user_code(c):
@@ -71,68 +99,94 @@ def arc_register(name: str, password: str):  # 注册
                 c.execute('''insert into user_char values(:a,:b,:c,:d,:e,:f,:g,:h,:i,:j,:k,:l,:m,:n,:o)''', {
                           'a': user_id, 'b': i[0], 'c': i[2], 'd': i[3], 'e': i[4], 'f': i[5], 'g': i[6], 'h': i[7], 'i': i[8], 'j': i[9], 'k': i[10], 'l': i[11], 'm': i[12], 'n': i[14], 'o': i[15]})
 
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    user_id = None
-    c = conn.cursor()
+    token = None
+    error_code = 108
+    with Connect() as c:
         hash_pwd = hashlib.sha256(password.encode("utf8")).hexdigest()
         c.execute(
             '''select exists(select * from user where name = :name)''', {'name': name})
+        if c.fetchone() == (0,):
+            c.execute(
+                '''select exists(select * from user where email = :email)''', {'email': email})
             if c.fetchone() == (0,):
                 user_code = build_user_code(c)
                 user_id = build_user_id(c)
                 now = int(time.time() * 1000)
                 c.execute('''insert into user(user_id, name, password, join_date, user_code, rating_ptt, 
-        character_id, is_skill_sealed, is_char_uncapped, is_char_uncapped_override, is_hide_rating, favorite_character, max_stamina_notification_enabled, current_map, ticket)
+                character_id, is_skill_sealed, is_char_uncapped, is_char_uncapped_override, is_hide_rating, favorite_character, max_stamina_notification_enabled, current_map, ticket, prog_boost, email)
-        values(:user_id, :name, :password, :join_date, :user_code, 0, 0, 0, 0, 0, 0, -1, 0, '', 0)
+                values(:user_id, :name, :password, :join_date, :user_code, 0, 0, 0, 0, 0, 0, -1, 0, '', :memories, 0, :email)
-        ''', {'user_code': user_code, 'user_id': user_id, 'join_date': now, 'name': name, 'password': hash_pwd})
+                ''', {'user_code': user_code, 'user_id': user_id, 'join_date': now, 'name': name, 'password': hash_pwd, 'memories': Config.DEFAULT_MEMORIES, 'email': email})
                 c.execute('''insert into recent30(user_id) values(:user_id)''', {
                     'user_id': user_id})
 
                 token = hashlib.sha256(
                     (str(user_id) + str(now)).encode("utf8")).hexdigest()
-        c.execute('''insert into login(access_token, user_id) values(:access_token, :user_id)''', {
+                c.execute('''insert into login values(:access_token, :user_id, :time, :ip, :device_id)''', {
-                  'user_id': user_id, 'access_token': token})
+                    'user_id': user_id, 'access_token': token, 'device_id': device_id, 'time': now, 'ip': ip})
 
                 insert_user_char(c, user_id)
-        conn.commit()
+                error_code = 0
-        conn.close()
-        return user_id, token, 0
             else:
-        conn.commit()
+                error_code = 102
-        conn.close()
+        else:
-        return None, None, 101
+            error_code = 101
+
+    return user_id, token, error_code
 
 
 def token_get_id(token: str):
     # 用token获取id，没有考虑不同用户token相同情况，说不定会有bug
 
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    user_id = None
-    c = conn.cursor()
+    with Connect() as c:
         c.execute('''select user_id from login where access_token = :token''', {
             'token': token})
         x = c.fetchone()
         if x is not None:
-        conn.commit()
+            user_id = x[0]
-        conn.close()
+
-        return x[0]
+    return user_id
-    else:
-        conn.commit()
-        conn.close()
-        return None
 
 
 def code_get_id(user_code):
     # 用user_code获取id
 
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    user_id = None
-    c = conn.cursor()
+
+    with Connect() as c:
         c.execute('''select user_id from user where user_code = :a''',
                   {'a': user_code})
         x = c.fetchone()
         if x is not None:
-        conn.commit()
+            user_id = x[0]
-        conn.close()
+
-        return x[0]
+    return user_id
+
+
+def auth_required(request):
+    # arcaea登录验证，写成了修饰器
+    def decorator(view):
+        @functools.wraps(view)
+        def wrapped_view(*args, **kwargs):
+
+            user_id = None
+            headers = request.headers
+
+            if 'AppVersion' in headers:  # 版本检查
+                if Config.ALLOW_APPVERSION:
+                    if headers['AppVersion'] not in Config.ALLOW_APPVERSION:
+                        return jsonify({"success": False, "error_code": 5})
+
+            if 'Authorization' in headers:
+                token = headers['Authorization']
+                token = token[7:]
+                user_id = token_get_id(token)
+
+            if user_id is not None:
+                return view(user_id, *args, **kwargs)
             else:
-        conn.commit()
+                return jsonify({"success": False, "error_code": 108})
-        conn.close()
+
-        return None
+        return wrapped_view
+    return decorator

latest version/server/info.py

@@ -1,7 +1,9 @@
-import sqlite3
+from server.sql import Connect
 import server.arcworld
 import server.arcpurchase
+import server.arcdownload
 import time
+from setting import Config
 
 
 def int2b(x):
@@ -104,14 +106,30 @@ def get_user_friend(c, user_id):
             c.execute('''select * from user where user_id = :x''', {'x': i[0]})
             y = c.fetchone()
             if y is not None:
+                character = y[6]
+                is_char_uncapped = int2b(y[8])
+                is_char_uncapped_override = int2b(y[9])
+                if y[23] != -1:
+                    character = y[23]
+                    c.execute('''select is_uncapped, is_uncapped_override from user_char where user_id=:a and character_id=:b''', {
+                              'a': i[0], 'b': character})
+                    z = c.fetchone()
+                    if z:
+                        is_char_uncapped = int2b(z[0])
+                        is_char_uncapped_override = int2b(z[1])
+
+                rating = y[5]
+                if int2b(y[10]):
+                    rating = -1
+
                 s.append({
                     "is_mutual": is_mutual,
-                    "is_char_uncapped_override": int2b(y[9]),
+                    "is_char_uncapped_override": is_char_uncapped_override,
-                    "is_char_uncapped": int2b(y[8]),
+                    "is_char_uncapped": is_char_uncapped,
                     "is_skill_sealed": int2b(y[7]),
-                    "rating": y[5],
+                    "rating": rating,
                     "join_date": int(y[3]),
-                    "character": y[6],
+                    "character": character,
                     "recent_score": get_recent_score(c, i[0]),
                     "name": y[1],
                     "user_id": i[0]
@@ -148,18 +166,39 @@ def get_user_packs(c, user_id):
     return re
 
 
-def get_value_0(c, user_id):
+def get_user_characters(c, user_id):
-    # 构造value id=0的数据，返回字典
+    # 获取用户所拥有角色，返回列表
+
+    c.execute('''select character_id from user_char where user_id = :user_id''',
+              {'user_id': user_id})
+
+    x = c.fetchall()
+    characters = []
+
+    if x:
+        for i in x:
+            characters.append(i[0])
+
+    return characters
+
+
+def get_user_me(c, user_id):
+    # 构造user/me的数据，返回字典
     c.execute('''select * from user where user_id = :x''', {'x': user_id})
     x = c.fetchone()
     r = {}
     if x is not None:
         user_character = get_user_character(c, user_id)
+        # 下面没有使用get_user_characters函数是为了节省一次查询
         characters = []
         for i in user_character:
             characters.append(i['character_id'])
 
-        r = {"is_aprilfools": False,
+        prog_boost = 0
+        if x[27] and x[27] != 0:
+            prog_boost = 300
+
+        r = {"is_aprilfools": Config.IS_APRILFOOLS,
              "curr_available_maps": [],
              "character_stats": user_character,
              "friends": get_user_friend(c, user_id),
@@ -177,21 +216,21 @@ def get_value_0(c, user_id):
              "is_locked_name_duplicate": False,
              "is_skill_sealed": int2b(x[7]),
              "current_map": x[25],
-             "prog_boost": 0,
+             "prog_boost": prog_boost,
              "next_fragstam_ts": -1,
              "max_stamina_ts": 1586274871917,
              "stamina": 12,
              "world_unlocks": ["scenery_chap1", "scenery_chap2", "scenery_chap3", "scenery_chap4", "scenery_chap5"],
-             "world_songs": ["babaroque", "shadesoflight", "kanagawa", "lucifer", "anokumene", "ignotus", "rabbitintheblackroom", "qualia", "redandblue", "bookmaker", "darakunosono", "espebranch", "blacklotus", "givemeanightmare", "vividtheory", "onefr", "gekka", "vexaria3", "infinityheaven3", "fairytale3", "goodtek3", "suomi", "rugie", "faintlight", "harutopia", "goodtek", "dreaminattraction", "syro", "diode", "freefall", "grimheart", "blaster", "cyberneciacatharsis", "monochromeprincess", "revixy", "vector", "supernova", "nhelv", "purgatorium3", "dement3", "crossover", "guardina", "axiumcrisis", "worldvanquisher", "sheriruth", "pragmatism", "gloryroad", "etherstrike", "corpssansorganes", "lostdesire", "blrink", "essenceoftwilight", "lapis", "solitarydream", "lumia3", "purpleverse"],
+             "world_songs": ["babaroque", "shadesoflight", "kanagawa", "lucifer", "anokumene", "ignotus", "rabbitintheblackroom", "qualia", "redandblue", "bookmaker", "darakunosono", "espebranch", "blacklotus", "givemeanightmare", "vividtheory", "onefr", "gekka", "vexaria3", "infinityheaven3", "fairytale3", "goodtek3", "suomi", "rugie", "faintlight", "harutopia", "goodtek", "dreaminattraction", "syro", "diode", "freefall", "grimheart", "blaster", "cyberneciacatharsis", "monochromeprincess", "revixy", "vector", "supernova", "nhelv", "purgatorium3", "dement3", "crossover", "guardina", "axiumcrisis", "worldvanquisher", "sheriruth", "pragmatism", "gloryroad", "etherstrike", "corpssansorganes", "lostdesire", "blrink", "essenceoftwilight", "lapis", "solitarydream", "lumia3", "purpleverse", "moonheart3", "glow", "enchantedlove", "take", "lifeispiano", "vandalism", "nexttoyou3", "lostcivilization3"],
-             "singles": get_user_singles(c, user_id),  # ["dataerror", "yourvoiceso", "crosssoul", "impurebird", "auxesia", "modelista", "yozakurafubuki", "surrender", "metallicpunisher", "carminescythe", "bethere", "callmyname", "fallensquare", "dropdead", "alexandrite", "astraltale", "phantasia", "empireofwinter", "libertas", "dottodot", "dreadnought", "mirzam", "heavenlycaress", "filament", "avantraze", "battlenoone", "saikyostronger", "izana", "einherjar", "laqryma", "amygdata", "altale", "feelssoright", "scarletcage", "teriqma", "mahoroba", "badtek", "maliciousmischance", "buchigireberserker", "galaxyfriends", "xeraphinite", "xanatos"]
+             "singles": get_user_singles(c, user_id),
              "packs": get_user_packs(c, user_id),
-             # ["vs", "extend", "dynamix", "prelude", "core", "yugamu", "omatsuri", "zettai", "mirai", "shiawase", "chunithm", "nijuusei", "groovecoaster", "rei", "tonesphere", "lanota"]
              "characters": characters,
              "cores": [],
              "recent_score": get_recent_score(c, user_id),
              "max_friend": 50,
              "rating": x[5],
-             "join_date": int(x[3])
+             "join_date": int(x[3]),
+             "global_rank": 114514
              }
 
     return r
@@ -199,34 +238,31 @@ def get_value_0(c, user_id):
 
 def arc_aggregate_small(user_id):
     # 返回用户数据
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    r = {"success": False}
-    c = conn.cursor()
+    with Connect() as c:
         r = {"success": True,
              "value": [{
                  "id": 0,
-             "value": get_value_0(c, user_id)
+                 "value": get_user_me(c, user_id)
              }]}
 
-    conn.commit()
-    conn.close()
     return r
 
 
 def arc_aggregate_big(user_id):
-    # 返回用户数据和地图歌曲信息
+    # 返回比较全的用户数据
-
+    r = {"success": False}
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    with Connect() as c:
-    c = conn.cursor()
         r = {"success": True,
              "value": [{
                  "id": 0,
-             "value": get_value_0(c, user_id)
+                 "value": get_user_me(c, user_id)
              }, {
                  "id": 1,
                  "value": server.arcpurchase.get_item(c, 'pack')
              }, {
                  "id": 2,
-             "value": {}
+                 "value": server.arcdownload.get_all_songs(user_id, url_flag=False)
              }, {
                  "id": 3,
                  "value": {
@@ -330,7 +366,7 @@ def arc_aggregate_big(user_id):
                  }
              }, {
                  "id": 4,
-             "value": []
+                 "value": server.arcpurchase.get_user_present(c, user_id)
              }, {
                  "id": 5,
                  "value": {
@@ -341,6 +377,4 @@ def arc_aggregate_big(user_id):
              }
              ]}
 
-    conn.commit()
-    conn.close()
     return r

latest version/server/init.py

@@ -0,0 +1,98 @@
+import os
+from shutil import copy, copy2
+from server.sql import Connect
+from database.database_initialize import main, ARCAEA_SERVER_VERSION
+from web.system import update_database
+
+
+def try_rename(path, new_path):
+    # 尝试重命名文件，并尝试避免命名冲突，返回最终路径
+    final_path = new_path
+    if os.path.exists(new_path):
+        i = 1
+        while os.path.exists(new_path + str(i)):
+            i += 1
+        os.rename(path, new_path + str(i))
+        final_path = new_path + str(i)
+    else:
+        os.rename(path, new_path)
+
+    return final_path
+
+
+def check_before_run(app):
+    # 运行前检查关键文件，返回布尔值，其实是因为有人经常忘了
+
+    f = True
+
+    if not os.path.exists('setting.py'):
+        app.logger.warning('File `setting.py` is missing.')
+        f = False
+
+    if not os.path.exists('database'):
+        app.logger.warning('Folder `database` is missing.')
+        f = False
+
+    if not os.path.exists('database/songs'):
+        app.logger.warning('Folder `database/songs` is missing.')
+        f = False
+
+    if not os.path.exists('database/arcaea_database.db'):
+        app.logger.warning('File `database/arcaea_database.db` is missing.')
+        f = False
+        try:
+            app.logger.info(
+                'Try to new the file `database/arcaea_database.db`.')
+            main('./database/')
+            app.logger.info(
+                'Success to new the file `database/arcaea_database.db`.')
+            f = True
+        except:
+            app.logger.warning(
+                'Fail to new the file `database/arcaea_database.db`.')
+
+    else:
+        with Connect() as c:
+            try:
+                c.execute('''select value from config where id="version"''')
+                x = c.fetchone()
+            except:
+                x = None
+
+        # 数据库自动更新，不强求
+        if not x or x[0] != ARCAEA_SERVER_VERSION:
+            app.logger.warning(
+                'Maybe the file `database/arcaea_database.db` is an old version.')
+            try:
+                app.logger.info(
+                    'Try to update the file `database/arcaea_database.db`.')
+
+                path = try_rename('database/arcaea_database.db',
+                                  'database/arcaea_database.db.bak')
+
+                try:
+                    copy2(path, 'database/arcaea_database.db')
+                except:
+                    copy(path, 'database/arcaea_database.db')
+
+                if os.path.isfile("database/old_arcaea_database.db"):
+                    os.remove('database/old_arcaea_database.db')
+
+                try_rename('database/arcaea_database.db',
+                           'database/old_arcaea_database.db')
+
+                main('./database/')
+                update_database()
+
+                app.logger.info(
+                    'Success to update the file `database/arcaea_database.db`.')
+
+            except:
+                app.logger.warning(
+                    'Fail to update the file `database/arcaea_database.db`.')
+
+    if not os.path.exists('database/arcsong.db'):
+        app.logger.warning('File `database/arcsong.db` is missing.')
+        f = False
+
+    return f

latest version/server/setme.py

@@ -1,4 +1,4 @@
-import sqlite3
+from server.sql import Connect
 import server.info
 
 
@@ -20,8 +20,9 @@ def int2b(x):
 
 def change_char(user_id, character_id, skill_sealed):
     # 角色改变，包括技能封印的改变，返回成功与否的布尔值
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    re = False
-    c = conn.cursor()
+
+    with Connect() as c:
         c.execute('''select is_uncapped, is_uncapped_override from user_char where user_id = :a and character_id = :b''',
                   {'a': user_id, 'b': character_id})
         x = c.fetchone()
@@ -33,23 +34,19 @@ def change_char(user_id, character_id, skill_sealed):
             c.execute('''update user set is_skill_sealed = :a, character_id = :b, is_char_uncapped = :c, is_char_uncapped_override = :d where user_id = :e''', {
                 'a': b2int(skill_sealed), 'b': character_id, 'c': x[0], 'd': x[1], 'e': user_id})
 
-        conn.commit()
+            re = True
-        conn.close()
-        return True
 
-    conn.commit()
+    return re
-    conn.close()
-    return False
 
 
 def change_char_uncap(user_id, character_id):
     # 角色觉醒改变，返回字典
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    r = None
-    c = conn.cursor()
+    with Connect() as c:
         c.execute('''select is_uncapped, is_uncapped_override from user_char where user_id = :a and character_id = :b''',
                   {'a': user_id, 'b': character_id})
         x = c.fetchone()
-    r = None
+
         if x is not None and x[0] == 1:
             c.execute('''update user set is_char_uncapped_override = :a where user_id = :b''', {
                 'a': b2int(x[1] == 0), 'b': user_id})
@@ -83,15 +80,12 @@ def change_char_uncap(user_id, character_id):
                     "character_id": y[1]
                 }
 
-    conn.commit()
-    conn.close()
     return r
 
 
 def arc_sys_set(user_id, value, set_arg):
     # 三个设置，PTT隐藏、体力满通知、最爱角色，无返回
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    with Connect() as c:
-    c = conn.cursor()
         if 'favorite_character' in set_arg:
             value = int(value)
             c.execute('''update user set favorite_character = :a where user_id = :b''', {
@@ -110,8 +104,6 @@ def arc_sys_set(user_id, value, set_arg):
                 c.execute('''update user set max_stamina_notification_enabled = :a where user_id = :b''', {
                     'a': b2int(value), 'b': user_id})
 
-    conn.commit()
-    conn.close()
     return None
 
 
@@ -119,37 +111,32 @@ def arc_add_friend(user_id, friend_id):
     # 加好友，返回好友列表，或者是错误码602、604
     if user_id == friend_id:
         return 604
-    conn = sqlite3.connect('./database/arcaea_database.db')
+
-    c = conn.cursor()
+    r = None
+    with Connect() as c:
         c.execute('''select exists(select * from friend where user_id_me = :x and user_id_other = :y)''',
                   {'x': user_id, 'y': friend_id})
-    r = None
         if c.fetchone() == (0,):
             c.execute('''insert into friend values(:a, :b)''',
                       {'a': user_id, 'b': friend_id})
             r = server.info.get_user_friend(c, user_id)
-
         else:
-        return 602
+            r = 602
 
-    conn.commit()
-    conn.close()
     return r
 
 
 def arc_delete_friend(user_id, friend_id):
     # 删好友，返回好友列表
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    r = None
-    c = conn.cursor()
+    with Connect() as c:
+
         c.execute('''select exists(select * from friend where user_id_me = :x and user_id_other = :y)''',
                   {'x': user_id, 'y': friend_id})
-    r = None
         if c.fetchone() == (1,):
             c.execute('''delete from friend where user_id_me = :x and user_id_other = :y''',
                       {'x': user_id, 'y': friend_id})
 
             r = server.info.get_user_friend(c, user_id)
 
-    conn.commit()
-    conn.close()
     return r

latest version/server/sql.py

@@ -0,0 +1,80 @@
+import sqlite3
+from flask import current_app
+import traceback
+
+
+class Connect():
+    # 数据库连接类，上下文管理
+
+    def __init__(self, file_path='./database/arcaea_database.db'):
+        """
+        数据库连接，默认连接arcaea_database.db
+        接受：文件路径
+        返回：sqlite3连接操作对象
+        """
+        self.file_path = file_path
+
+    def __enter__(self):
+        self.conn = sqlite3.connect(self.file_path)
+        self.c = self.conn.cursor()
+        return self.c
+
+    def __exit__(self, exc_type, exc_val, exc_tb):
+        if self.conn:
+            self.conn.commit()
+            self.conn.close()
+
+        if exc_type is not None:
+            current_app.logger.error(
+                traceback.format_exception(exc_type, exc_val, exc_tb))
+
+        return True
+
+class Sql():
+
+    @staticmethod
+    def select(c, table_name, target_column=[], limit=-1, offset=0, query={}, sort=[]):
+        # 执行查询单句sql语句，返回fetchall数据
+        # 使用准确查询，且在单表内
+
+        sql = 'select '
+        sql_dict = {}
+        if len(target_column) >= 2:
+            sql += target_column[0]
+            for i in range(1, len(target_column)):
+                sql += ',' + target_column[i]
+            sql += ' from ' + table_name
+        elif len(target_column) == 1:
+            sql += target_column[0] + ' from ' + table_name
+        else:
+            sql += '* from ' + table_name
+
+        where_field = []
+        where_value = []
+        for i in query:
+            where_field.append(i)
+            where_value.append(query[i])
+
+        if where_field and where_value:
+            sql += ' where '
+            sql += where_field[0] + '=:' + where_field[0]
+            sql_dict[where_field[0]] = where_value[0]
+            if len(where_field) >= 2:
+                for i in range(1, len(where_field)):
+                    sql_dict[where_field[i]] = where_value[i]
+                    sql += ' and ' + where_field[i] + '=:' + where_field[i]
+
+        if sort:
+            sql += ' order by ' + sort[0]['column'] + ' ' + sort[0]['order']
+            if len(sort) >= 2:
+                for i in range(1, len(sort)):
+                    sql += ', ' + sort[i]['column'] + ' ' + sort[i]['order']
+
+        if limit >= 0:
+            sql += ' limit :limit offset :offset'
+            sql_dict['limit'] = limit
+            sql_dict['offset'] = offset
+
+        c.execute(sql, sql_dict)
+
+        return c.fetchall()

latest version/setting.ini

@@ -1,7 +0,0 @@
-[CONFIG]
-HOST = 192.168.1.113
-PORT = 80
-
-[WEB]
-USERNAME = admin
-PASSWORD = admin

latest version/setting.py

@@ -0,0 +1,164 @@
+class Config():
+    '''
+    This is the setting file. You can change some parameters here.
+    '''
+
+    '''
+    --------------------
+    主机的地址和端口号
+    Host and port of your server
+    '''
+    HOST = '192.168.1.101'
+    PORT = '80'
+    '''
+    --------------------
+    '''
+
+    '''
+    --------------------
+    游戏API地址前缀
+    Game API's URL prefix
+    '''
+    GAME_API_PREFIX = '/blockchain/14'
+    '''
+    --------------------
+    '''
+
+    '''
+    --------------------
+    允许使用的游戏版本，若为空，则默认全部允许
+    Allowed game versions
+    If it is blank, all are allowed.
+    '''
+    ALLOW_APPVERSION = ['3.5.3', '3.5.3c',
+                        '3.6.0', '3.6.0c', '3.6.1', '3.6.1c']
+    '''
+    --------------------
+    '''
+
+    '''
+    --------------------
+    SSL证书路径
+    留空则使用HTTP
+    SSL certificate path
+    If left blank, use HTTP.
+    '''
+    SSL_CERT = ''  # *.pem
+    SSL_KEY = ''  # *.key
+    '''
+    --------------------
+    '''
+
+    '''
+    --------------------
+    愚人节模式开关
+    Switch of April Fool's Day
+    '''
+    IS_APRILFOOLS = True
+    '''
+    --------------------
+    '''
+
+    '''
+    --------------------
+    Web后台管理页面的用户名和密码
+    Username and password of web background management page
+    '''
+    USERNAME = 'admin'
+    PASSWORD = 'admin'
+    '''
+    --------------------
+    '''
+
+    '''
+    --------------------
+    Web后台管理页面的session秘钥，如果不知道是什么，请不要修改
+    Session key of web background management page
+    If you don't know what it is, please don't modify it.
+    '''
+    SECRET_KEY = '1145141919810'
+    '''
+    --------------------
+    '''
+
+    '''
+    --------------------
+    API接口完全控制权限Token，留空则不使用
+    API interface full control permission Token
+    If you don't want to use it, leave it blank.
+    '''
+    API_TOKEN = ''
+    '''
+    --------------------
+    '''
+
+    '''
+    --------------------
+    歌曲下载地址前缀，留空则自动获取
+    Song download address prefix
+    If left blank, it will be obtained automatically.
+    '''
+    DOWNLOAD_LINK_PREFIX = ''  # http://***.com/download/
+    '''
+    --------------------
+    '''
+
+    '''
+    --------------------
+    玩家歌曲下载的24小时次数限制，每个文件算一次
+    Player's song download limit times in 24 hours, once per file
+    '''
+    DOWNLOAD_TIMES_LIMIT = 3000
+    '''
+    歌曲下载链接的有效时长，单位：秒
+    Effective duration of song download link, unit: seconds
+    '''
+    DOWNLOAD_TIME_GAP_LIMIT = 1000
+    '''
+    --------------------
+    '''
+
+    '''
+    --------------------
+    Arcaea登录的最大允许设备数量，最小值为1
+    The maximum number of devices allowed to log in Arcaea, minimum: 1
+    '''
+    LOGIN_DEVICE_NUMBER_LIMIT = 1
+    '''
+    是否允许同设备多应用共存登录
+    If logging in from multiple applications on the same device is allowed
+    '''
+    ALLOW_LOGIN_SAME_DEVICE = False
+    '''
+    --------------------
+    '''
+
+    '''
+    --------------------
+    是否记录详细的服务器日志
+    If recording detailed server logs is enabled
+    '''
+    ALLOW_LOG_INFO = False
+    '''
+    --------------------
+    '''
+
+    '''
+    --------------------
+    用户注册时的默认记忆源点数量
+    The default amount of memories at the time of user registration
+    '''
+    DEFAULT_MEMORIES = 0
+    '''
+    --------------------
+    '''
+
+    '''
+    --------------------
+    是否强制使用全解锁云端存档
+    If forcing full unlocked cloud save is enabled
+    '''
+    SAVE_FULL_UNLOCK = False
+    '''
+    --------------------
+    '''

latest version/templates/base.html

@@ -20,4 +20,4 @@
     {% endfor %} {% block content %}{% endblock %}
 </section>
 
-<footer id="footer" class="footer">Made by Lost@2020</footer>
+<footer id="footer" class="footer">Made by Lost@2020-2021</footer>

latest version/templates/web/allplayer.html

@@ -11,6 +11,9 @@
     <div class="name">{{user['name']}}
         <span class="rank">UID: {{user['user_id']}}</span>
         <span class="rank">User code: {{user['user_code']}}</span>
+        {% if user['ban_flag'] %}
+        <span class="rank">Banned</span>
+        {% endif %}
     </div>
     <div class="join-date">注册于 Registered in: {{user['join_date']}}</div>
     <div class="ptt">PTT: {{'%0.2f'|format(user['rating_ptt']/100|float)}}</div>

latest version/templates/web/allpresent.html

@@ -0,0 +1,37 @@
+{% extends 'base.html' %}
+{% block header %}
+<h1>{% block title %}All presents{% endblock %}</h1>
+{% endblock %}
+
+{% block content %}
+{% if posts %}<br />
+{% for present in posts %}
+
+<div class="char-present">
+    <span>Id: </span>
+    <span class="name">{{present['present_id']}}</span>
+    <br />
+
+    <span>Expire time: </span>
+    <span class="char-num">{{present['expire_ts']}}</span>
+    <br />
+
+    <span>Description: </span>
+    <span class="char-num">{{present['description']}}</span>
+    <br />
+
+    <span>Items: </span>
+    <span class="char-num" style='white-space:pre'>{{present['items']}}</span>
+    <br />
+
+
+</div>
+{% if not loop.last %}
+<br />
+<hr />
+<br />
+{% endif %}
+{% endfor %}
+
+{% endif %}
+{% endblock %}

latest version/templates/web/allredeem.html

@@ -0,0 +1,39 @@
+{% extends 'base.html' %}
+{% block header %}
+<h1>{% block title %}All redeem codes{% endblock %}</h1>
+{% endblock %}
+
+{% block content %}
+{% if posts %}<br />
+{% for redeem in posts %}
+
+<div class="char-redeem">
+    <span>Code: </span>
+    <span class="name">{{redeem['code']}}</span>
+    <br />
+
+    <span>Type: </span>
+    <span class="char-num">
+        {% if redeem['type'] == 0 %}
+        仅可使用一次 It can only be used once.
+        {% elif redeem['type'] == 1 %}
+        每个用户仅可以使用一次 Each user can only use it once.
+        {% endif %}
+    </span>
+    <br />
+
+    <span>Items: </span>
+    <span class="char-num" style='white-space:pre'>{{redeem['items']}}</span>
+    <br />
+    <div><a href="/web/redeem/{{redeem['code']}}">使用者 Players who have used it.</a></div>
+
+</div>
+{% if not loop.last %}
+<br />
+<hr />
+<br />
+{% endif %}
+{% endfor %}
+
+{% endif %}
+{% endblock %}

latest version/templates/web/banuser.html

@@ -0,0 +1,37 @@
+{% extends 'base.html' %}
+{% block header %}
+<h1>{% block title %}Ban the user{% endblock %}</h1>
+{% endblock %}
+
+{% block content %}
+<form action="/web/banuser" method="post">
+    <div class="title">Ban the user</div>
+    <label for="name">Arcaea Username</label>
+    <input name="name" id="name">
+    or<br />
+    <label for="user_code">Arcaea User Code</label>
+    <input name="user_code" id="user_code">
+
+    <br />
+    <div class="content">提示：重设用户密码即可解封账号</div>
+    <div class="content">Tip: Reset the user password to unseal the account.</div>
+    <br />
+    <input type="submit" value="Execute">
+</form>
+<br />
+<hr />
+<form action="/web/banuser/deleteuserscore" method="post">
+    <div class="title">Delete all of the user's scores</div>
+    <label for="name">Arcaea Username</label>
+    <input name="name" id="name">
+    or<br />
+    <label for="user_code">Arcaea User Code</label>
+    <input name="user_code" id="user_code">
+
+    <br />
+    <div class="content">警告！这个操作具有破坏性，且不可恢复。</div>
+    <div class="content">Warning! This operation is destructive and unrecoverable.</div>
+    <br />
+    <input type="submit" value="Execute">
+</form>
+{% endblock %}

latest version/templates/web/changepresent.html

@@ -0,0 +1,39 @@
+{% extends 'base.html' %}
+{% block header %}
+<h1>{% block title %}Change the presents{% endblock %}</h1>
+{% endblock %}
+
+{% block content %}
+<form action="/web/changepresent/addpresent" method="post">
+    <div class="title">Add the present</div>
+    <label for="present_id">ID of the present</label>
+    <input name="present_id" id="present_id" required>
+    <label for="description">Description of the present</label>
+    <input name="description" id="description" required>
+
+    <label for="expire_ts">Expire time</label>
+    <input type="datetime-local" name="expire_ts" id="expire_ts" required>
+    <br />
+    <div>Items:</div>
+    <label for="fragment">Fragments</label>
+    <input name="fragment" id="fragment">
+    <label for="ticket">Memories</label>
+    <input name="ticket" id="ticket">
+
+    <div class="content">两种奖励只能有一个，另一个请留空。如果都填写，以记忆源点优先。</div>
+    <div class="content">There can only be one of the two kinds of present. Please leave the other one blank. If you
+        fill both, the memories will be given priority.</div>
+    <div class="content">时间填写是一个HTML5控件</div>
+    <div class="content">Time filling is an HTML5 control.</div>
+    <input type="submit" value="Add">
+</form>
+<br />
+<hr />
+<form action="/web/changepresent/deletepresent" method="post">
+    <div class="title">Delete the present</div>
+    <label for="present_id">ID of the present</label>
+    <input name="present_id" id="present_id" required>
+
+    <input type="submit" value="Delete">
+</form>
+{% endblock %}

latest version/templates/web/changeredeem.html

@@ -0,0 +1,50 @@
+{% extends 'base.html' %}
+{% block header %}
+<h1>{% block title %}Change the redeem codes{% endblock %}</h1>
+{% endblock %}
+
+{% block content %}
+<form action="/web/changeredeem/addredeem" method="post">
+    <div class="title">Add the redeem</div>
+    <div>指定生成 Specify generation</div>
+    <label for="code">The redeem code</label>
+    <input name="code" id="code">
+    <div>Or</div>
+    <div>随机批量生成 Batch generation at random</div>
+    <label for="amount">Amount</label>
+    <input name="amount" id="amount">
+    <br />
+    <div>Type:
+        <br />
+        <br />
+        <label><input type="radio" name="type" value="0" checked>仅可使用一次 It can only be used once.</label>
+        <br />
+        <label><input type="radio" name="type" value="1">每个用户仅可以使用一次 Each user can only use it once.</label>
+    </div>
+
+
+    <br />
+    <div>Items:</div>
+    <label for="fragment">Fragments</label>
+    <input name="fragment" id="fragment">
+    <label for="ticket">Memories</label>
+    <input name="ticket" id="ticket">
+
+    <div class="content">两种奖励可以都有，不需要请留空。</div>
+    <div class="content">You can have both kinds of items. Please leave it blank if you don't need it.</div>
+    <div class="content">兑换码长度为10~20。</div>
+    <div class="content">The length of redeem code is 10 ~ 20.</div>
+    <div class="content">随机生成数量不得超过1000。</div>
+    <div class="content">The amount of batch generation should not be more than 1000.</div>
+    <input type="submit" value="Add">
+</form>
+<br />
+<hr />
+<form action="/web/changeredeem/deleteredeem" method="post">
+    <div class="title">Delete the redeem</div>
+    <label for="code">The redeem code</label>
+    <input name="code" id="code" required>
+
+    <input type="submit" value="Delete">
+</form>
+{% endblock %}

latest version/templates/web/changesong.html

@@ -19,7 +19,7 @@
     <input name="rating_ftr" id="rating_ftr" required>
     <label for="rating_byd">Beyond chart const</label>
     <input name="rating_byd" id="rating_byd" required>
-    <div class="content">如果没有某个铺面，应该填入-1。</div>
+    <div class="content">如果没有某个谱面，应该填入-1。</div>
     <div class="content">If there is no some chart, fill in -1 please.</div>
     <input type="submit" value="Add">
 </form>

latest version/templates/web/changeuserpwd.html

@@ -0,0 +1,24 @@
+{% extends 'base.html' %}
+{% block header %}
+<h1>{% block title %}Change user password{% endblock %}</h1>
+{% endblock %}
+
+{% block content %}
+<form action="/web/changeuserpwd" method="post">
+    <div class="title">Edit the user's password</div>
+    <label for="name">Arcaea Username</label>
+    <input name="name" id="name">
+    or<br />
+    <label for="user_code">Arcaea User Code</label>
+    <input name="user_code" id="user_code">
+    <br />
+    <br />
+
+    <label for="pwd">Password</label>
+    <input type="password" name="pwd" id="pwd" required>
+    <label for="pwd2">Enter again</label>
+    <input type="password" name="pwd2" id="pwd2" required>
+    
+    <input type="submit" value="Edit">
+</form>
+{% endblock %}

latest version/templates/web/deliverpresent.html

@@ -0,0 +1,32 @@
+{% extends 'base.html' %}
+{% block header %}
+<h1>{% block title %}Deliver presents{% endblock %}</h1>
+{% endblock %}
+
+{% block content %}
+<form action="/web/deliverpresent" method="post">
+    <div class="title">Deliver to the user</div>
+    <label for="name">Arcaea Username</label>
+    <input name="name" id="name">
+    or<br />
+    <label for="user_code">Arcaea User Code</label>
+    <input name="user_code" id="user_code">
+    <br />
+    <br />
+
+    <label for="present_id">ID of the present</label>
+    <input name="present_id" id="present_id" required>
+
+    <br />
+    <input type="submit" value="Edit">
+</form>
+<br />
+<hr />
+<form action="/web/deliverpresent" method="post">
+    <div class="title">Deliver to all the users</div>
+    <label for="present_id">ID of the present</label>
+    <input name="present_id" id="present_id" required>
+
+    <input type="submit" value="Edit all">
+</form>
+{% endblock %}

latest version/templates/web/index.html

@@ -13,19 +13,27 @@
 <a href="{{ url_for('index.single_player_score') }}">单个玩家成绩查询 Single player score</a></br></br>
 <a href="{{ url_for('index.single_player_ptt') }}">单个玩家PTT详情查询 Single player ptt</a></br></br>
 <a href="{{ url_for('index.all_player') }}">所有玩家信息查询 All players</a></br></br>
-<a href="{{ url_for('index.all_song') }}">铺面信息查询 All songs</a></br></br>
+<a href="{{ url_for('index.all_song') }}">谱面信息查询 All songs</a></br></br>
 <a href="{{ url_for('index.all_character') }}">角色信息查询 All characters</a></br></br>
 <a href="{{ url_for('index.all_item') }}">购买信息查询 All items</a></br></br>
+<a href="{{ url_for('index.all_present') }}">奖励信息查询 All presents</a></br></br>
+<a href="{{ url_for('index.all_redeem') }}">兑换码信息查询 All redeem codes</a></br></br>
 <a href="{{ url_for('index.single_chart_top') }}">单个铺面排行榜查询 Single song chart tops</a>
 <hr>
 <h1>系统方面 System</h1>
 <a href="{{ url_for('index.update_database') }}">数据库更新 Update databases</a></br></br>
+<a href="{{ url_for('index.edit_userpwd') }}">用户密码修改 Change user password</a></br></br>
+<a href="{{ url_for('index.ban_user') }}">封禁用户 Ban the user</a></br></br>
 <a href="{{ url_for('index.update_user_save') }}">用户存档更新 Update user saves</a></br></br>
 <a href="{{ url_for('index.change_song') }}">歌曲修改 Change the songs</a></br></br>
 <a href="{{ url_for('index.change_character') }}">角色修改 Change the characters</a></br></br>
 <a href="{{ url_for('index.change_item') }}">购买信息修改 Change the items</a></br></br>
 <a href="{{ url_for('index.change_user') }}">用户信息修改 Change user information</a></br></br>
-<a href="{{ url_for('index.change_user_purchase') }}">用户购买信息修改 Change user purchase information</a>
+<a href="{{ url_for('index.change_user_purchase') }}">用户购买信息修改 Change user purchase information</a></br></br>
+<a href="{{ url_for('index.change_present') }}">奖励修改 Change the presents</a></br></br>
+<a href="{{ url_for('index.deliver_present') }}">奖励分发 Deliver the presents</a></br></br>
+<a href="{{ url_for('index.change_redeem') }}">兑换码修改 Change the redeem codes</a>
+
 
 
 {% endblock %}

latest version/templates/web/redeem.html

@@ -0,0 +1,24 @@
+{% extends 'base.html' %}
+{% block header %}
+<h1>{% block title %}Redeem - {{code}}{% endblock %}</h1>
+{% endblock %}
+
+{% block content %}
+{% if posts %}
+{% for user in posts %}
+
+<div id="user-info">
+    <div class="name">{{user['name']}}
+        <span class="rank">UID: {{user['user_id']}}</span>
+        <span class="rank">User code: {{user['user_code']}}</span>
+    </div>
+</div>
+{% if not loop.last %}
+<br />
+{% endif %}
+{% endfor %}
+
+{% endif %}
+<br />
+<a href="{{ url_for('index.all_redeem') }}">Back</a>
+{% endblock %}

latest version/templates/web/singleplayerptt.html

@@ -22,6 +22,9 @@
         <div class="name">{{user['name']}}
             <span class="rank">UID: {{user['user_id']}}</span>
             <span class="rank">User code: {{user['user_code']}}</span>
+            {% if user['ban_flag'] %}
+            <span class="rank">Banned</span>
+            {% endif %}
         </div>
         <div class="join-date">注册于 Registered in: {{user['join_date']}}</div>
         <div class="ptt">Memories: {{user['ticket']}}</div>

latest version/templates/web/updatedatabase.html

@@ -12,10 +12,32 @@
 <div class="content">
     这里可以将旧版本的数据库同步到新版本的数据库，并刷新用户拥有的角色列表。<br />
     可上传文件: arcaea_database.db和arcsong.db<br />
-    新数据库不存在的数据会被添加，存在的数据将不会被改变。<br /><br />
+    新数据库不存在的数据会被添加，存在的重复数据也会被改变。<br /><br />
     Here you can synchronize the old version of the database to the new version of the database and refresh the list of
     characters owned by players.<br />
     Uploadable files: arcaea_database.db & arcsong.db<br />
-    Data that does not exist in the new database will be added and the existing data will not be changed.
+    Data that does not exist in the new database will be added and the existing duplicate data will also be changed.
 </div>
+<br />
+<hr />
+<form action="/web/updatedatabase/refreshsonghash" method="post">
+    <div class="title">Refresh songs' hash</div>
+    <br />
+    <input type="submit" value="Refresh">
+
+    <div class="content">这里可以刷新储存在数据库中的songs文件夹下所有文件的Hash值。目的是应对歌曲谱面文件的更新。</div>
+    <div class="content">Here you can refresh the hash values of all the files stored in the songs folder in the
+        database. The purpose is to deal with the updating of songs' files.</div>
+</form>
+<br />
+<hr />
+<form action="/web/updatedatabase/refreshsongrating" method="post">
+    <div class="title">Refresh songs' rating</div>
+    <br />
+    <input type="submit" value="Refresh">
+
+    <div class="content">这里可以刷新数据库中所有成绩的评分。目的是应对歌曲谱面定数的更新。</div>
+    <div class="content">Here you can refresh the ratings of all scores in the database. The purpose is to deal
+        with the updating of songs' chart consts.</div>
+</form>
 {% endblock %}

latest version/web/index.py

@@ -3,12 +3,14 @@ from flask import (
 )
 from web.login import login_required
 from werkzeug.utils import secure_filename
-import sqlite3
+from server.sql import Connect
 import web.webscore
 import web.system
 import time
 import server.arcscore
 import os
+import json
+from server.arcdownload import initialize_songfile
 
 UPLOAD_FOLDER = 'database'
 ALLOWED_EXTENSIONS = {'db'}
@@ -42,8 +44,7 @@ def single_player_score():
         user_code = request.form['user_code']
         error = None
         if name or user_code:
-            conn = sqlite3.connect('./database/arcaea_database.db')
+            with Connect() as c:
-            c = conn.cursor()
                 if user_code:
                     c.execute('''select user_id from user where user_code=:a''', {
                         'a': user_code})
@@ -60,8 +61,6 @@ def single_player_score():
                         error = '无成绩 No score.'
                 else:
                     error = '玩家不存在 The player does not exist.'
-            conn.commit()
-            conn.close()
 
         else:
             error = '输入为空 Null Input.'
@@ -83,8 +82,7 @@ def single_player_ptt():
         user_code = request.form['user_code']
         error = None
         if name or user_code:
-            conn = sqlite3.connect('./database/arcaea_database.db')
+            with Connect() as c:
-            c = conn.cursor()
                 if user_code:
                     c.execute('''select user_id from user where user_code=:a''', {
                         'a': user_code})
@@ -98,7 +96,8 @@ def single_player_ptt():
                     user_id = user_id[0]
                     user = web.webscore.get_user(c, user_id)
                     posts = web.webscore.get_user_score(c, user_id, 30)
-                recent, recentptt = web.webscore.get_user_recent30(c, user_id)
+                    recent, recentptt = web.webscore.get_user_recent30(
+                        c, user_id)
                     if not posts:
                         error = '无成绩 No score.'
                     else:
@@ -110,8 +109,6 @@ def single_player_ptt():
                 else:
                     error = '玩家不存在 The player does not exist.'
 
-            conn.commit()
-            conn.close()
         else:
             error = '输入为空 Null Input.'
 
@@ -127,11 +124,10 @@ def single_player_ptt():
 @login_required
 def all_player():
     # 所有玩家数据，按照ptt排序
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    error = None
-    c = conn.cursor()
+    with Connect() as c:
         c.execute('''select * from user order by rating_ptt DESC''')
         x = c.fetchall()
-    error = None
         if x:
             posts = []
             for i in x:
@@ -143,6 +139,11 @@ def all_player():
                 if i[20]:
                     time_played = time.strftime('%Y-%m-%d %H:%M:%S',
                                                 time.localtime(int(i[20])//1000))
+                if i[2] == '':
+                    ban_flag = True
+                else:
+                    ban_flag = False
+
                 posts.append({'name': i[1],
                               'user_id': i[0],
                               'join_date': join_date,
@@ -158,13 +159,12 @@ def all_player():
                               'time_played': time_played,
                               'clear_type': i[21],
                               'rating': i[22],
-                          'ticket': i[26]
+                              'ticket': i[26],
+                              'ban_flag': ban_flag
                               })
         else:
             error = '没有玩家数据 No player data.'
 
-    conn.commit()
-    conn.close()
     if error:
         flash(error)
         return render_template('web/allplayer.html')
@@ -183,11 +183,10 @@ def all_song():
         else:
             return None
 
-    conn = sqlite3.connect('./database/arcsong.db')
+    error = None
-    c = conn.cursor()
+    with Connect('./database/arcsong.db') as c:
         c.execute('''select * from songs''')
         x = c.fetchall()
-    error = None
         if x:
             posts = []
             for i in x:
@@ -201,8 +200,6 @@ def all_song():
         else:
             error = '没有铺面数据 No song data.'
 
-    conn.commit()
-    conn.close()
     if error:
         flash(error)
         return render_template('web/allsong.html')
@@ -220,15 +217,13 @@ def single_chart_top():
         if difficulty.isdigit():
             difficulty = int(difficulty)
         error = None
-        conn = sqlite3.connect('./database/arcsong.db')
+        x = None
-        c = conn.cursor()
+        with Connect('./database/arcsong.db') as c:
             song_name = '%'+song_name+'%'
             c.execute('''select sid, name_en from songs where sid like :a limit 1''',
                       {'a': song_name})
             x = c.fetchone()
-        conn.commit()
+
-        conn.close()
-        print(x)
         if x:
             song_id = x[0]
             posts = server.arcscore.arc_score_top(song_id, difficulty, -1)
@@ -283,6 +278,30 @@ def update_database():
     return render_template('web/updatedatabase.html')
 
 
+@bp.route('/updatedatabase/refreshsonghash', methods=['POST'])
+@login_required
+def update_song_hash():
+    # 更新数据库内谱面文件hash值
+    error = initialize_songfile()
+    if error:
+        flash(error)
+    else:
+        flash('数据刷新成功 Success refresh data.')
+    return render_template('web/updatedatabase.html')
+
+
+@bp.route('/updatedatabase/refreshsongrating', methods=['POST'])
+@login_required
+def update_song_rating():
+    # 更新所有分数的rating
+    error = server.arcscore.refresh_all_score_rating()
+    if error:
+        flash(error)
+    else:
+        flash('数据刷新成功 Success refresh data.')
+    return render_template('web/updatedatabase.html')
+
+
 @bp.route('/changesong', methods=['GET'])
 @login_required
 def change_song():
@@ -316,8 +335,8 @@ def add_song():
         song_id = song_id[:200]
     if len(name_en) >= 256:
         name_en = name_en[:200]
-    conn = sqlite3.connect('./database/arcsong.db')
+
-    c = conn.cursor()
+    with Connect('./database/arcsong.db') as c:
         c.execute(
             '''select exists(select * from songs where sid=:a)''', {'a': song_id})
         if c.fetchone() == (0,):
@@ -327,9 +346,6 @@ def add_song():
         else:
             error = '歌曲已存在 The song exists.'
 
-    conn.commit()
-    conn.close()
-
     if error:
         flash(error)
 
@@ -343,8 +359,7 @@ def delete_song():
 
     error = None
     song_id = request.form['sid']
-    conn = sqlite3.connect('./database/arcsong.db')
+    with Connect('./database/arcsong.db') as c:
-    c = conn.cursor()
         c.execute(
             '''select exists(select * from songs where sid=:a)''', {'a': song_id})
         if c.fetchone() == (1,):
@@ -353,8 +368,6 @@ def delete_song():
         else:
             error = "歌曲不存在 The song doesn't exist."
 
-    conn.commit()
-    conn.close()
     if error:
         flash(error)
 
@@ -365,12 +378,10 @@ def delete_song():
 @login_required
 def all_character():
     # 所有角色数据
-
+    error = None
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    with Connect() as c:
-    c = conn.cursor()
         c.execute('''select * from character''')
         x = c.fetchall()
-    error = None
         if x:
             posts = []
             for i in x:
@@ -388,8 +399,6 @@ def all_character():
         else:
             error = '没有角色数据 No character data.'
 
-    conn.commit()
-    conn.close()
     if error:
         flash(error)
         return render_template('web/allchar.html')
@@ -402,7 +411,7 @@ def all_character():
 def change_character():
     # 修改角色数据
     skill_ids = ['No_skill', 'gauge_easy', 'note_mirror', 'gauge_hard', 'frag_plus_10_pack_stellights', 'gauge_easy|frag_plus_15_pst&prs', 'gauge_hard|fail_frag_minus_100', 'frag_plus_5_side_light', 'visual_hide_hp', 'frag_plus_5_side_conflict', 'challenge_fullcombo_0gauge', 'gauge_overflow', 'gauge_easy|note_mirror', 'note_mirror', 'visual_tomato_pack_tonesphere',
-                 'frag_rng_ayu', 'gaugestart_30|gaugegain_70', 'combo_100-frag_1', 'audio_gcemptyhit_pack_groovecoaster', 'gauge_saya', 'gauge_chuni', 'kantandeshou', 'gauge_haruna', 'frags_nono', 'gauge_pandora', 'gauge_regulus', 'omatsuri_daynight', 'sometimes(note_mirror|frag_plus_5)', 'scoreclear_aa|visual_scoregauge', 'gauge_tempest', 'gauge_hard', 'gauge_ilith_summer', 'frags_kou', 'visual_ink', 'shirabe_entry_fee', 'frags_yume', 'note_mirror|visual_hide_far']
+                 'frag_rng_ayu', 'gaugestart_30|gaugegain_70', 'combo_100-frag_1', 'audio_gcemptyhit_pack_groovecoaster', 'gauge_saya', 'gauge_chuni', 'kantandeshou', 'gauge_haruna', 'frags_nono', 'gauge_pandora', 'gauge_regulus', 'omatsuri_daynight', 'sometimes(note_mirror|frag_plus_5)', 'scoreclear_aa|visual_scoregauge', 'gauge_tempest', 'gauge_hard', 'gauge_ilith_summer', 'frags_kou', 'visual_ink', 'shirabe_entry_fee', 'frags_yume', 'note_mirror|visual_hide_far', 'frags_ongeki', 'gauge_areus', 'gauge_seele', 'gauge_isabelle', 'gauge_exhaustion', 'skill_lagrange']
     return render_template('web/changechar.html', skill_ids=skill_ids)
 
 
@@ -442,8 +451,7 @@ def edit_char():
         flash(error)
         return redirect(url_for('index.change_character'))
 
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    with Connect() as c:
-    c = conn.cursor()
         c.execute(
             '''select exists(select * from character where character_id=:a)''', {'a': character_id})
         if c.fetchone() == (1,):
@@ -483,9 +491,6 @@ def edit_char():
         else:
             error = '角色不存在 The character does not exist.'
 
-    conn.commit()
-    conn.close()
-
     if error:
         flash(error)
 
@@ -496,11 +501,8 @@ def edit_char():
 @login_required
 def update_character():
     # 更新角色数据
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    with Connect() as c:
-    c = conn.cursor()
         web.system.update_user_char(c)
-    conn.commit()
-    conn.close()
 
     flash('数据更新成功 Success update data.')
     return redirect(url_for('index.change_character'))
@@ -534,8 +536,7 @@ def edit_user():
         flash(error)
         return redirect(url_for('index.change_user'))
 
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    with Connect() as c:
-    c = conn.cursor()
 
        # 全修改
         if 'name' not in request.form and 'user_code' not in request.form:
@@ -582,8 +583,6 @@ def edit_user():
             if flag:
                 error = '输入为空 Null Input.'
 
-    conn.commit()
-    conn.close()
     if error:
         flash(error)
 
@@ -613,8 +612,7 @@ def edit_user_purchase():
         flash('输入为空 Null Input.')
         return redirect(url_for('index.change_user_purchase'))
 
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    with Connect() as c:
-    c = conn.cursor()
 
         # 全修改
         if 'name' not in request.form and 'user_code' not in request.form:
@@ -658,8 +656,6 @@ def edit_user_purchase():
             if flag:
                 error = '输入为空 Null Input.'
 
-    conn.commit()
-    conn.close()
     if error:
         flash(error)
 
@@ -729,8 +725,7 @@ def change_item():
             flash(error)
             return redirect(url_for('index.change_item'))
 
-        conn = sqlite3.connect('./database/arcaea_database.db')
+        with Connect() as c:
-        c = conn.cursor()
             c.execute(
                 '''select exists(select * from item where item_id=:a and type=:b)''', {'a': item_id, 'b': item_type})
             if c.fetchone() == (1,):
@@ -761,8 +756,6 @@ def change_item():
             else:
                 error = '购买项目不存在 The item does not exist.'
 
-        conn.commit()
-        conn.close()
         if error:
             flash(error)
 
@@ -782,8 +775,7 @@ def update_user_save():
     name = None
     user_code = None
 
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    with Connect() as c:
-    c = conn.cursor()
 
         # 全修改
         if 'name' not in request.form and 'user_code' not in request.form:
@@ -818,9 +810,421 @@ def update_user_save():
             if flag:
                 error = '输入为空 Null Input.'
 
-    conn.commit()
-    conn.close()
     if error:
         flash(error)
 
     return render_template('web/updateusersave.html')
+
+
+@bp.route('/allpresent', methods=['GET'])
+@login_required
+def all_present():
+    # 所有奖励数据
+
+    error = None
+    with Connect() as c:
+        c.execute('''select * from present''')
+        x = c.fetchall()
+        if x:
+            posts = []
+            for i in x:
+                items = json.loads(i[2])
+                items_string = ''
+                for j in items:
+                    items_string = items_string + '\n' + \
+                        str(j['id']) + ': ' + str(j['amount'])
+
+                posts.append({'present_id': i[0],
+                              'expire_ts': time.strftime('%Y-%m-%d %H:%M:%S', time.localtime(int(i[1])//1000)),
+                              'items': items_string,
+                              'description': i[3]
+                              })
+        else:
+            error = '没有奖励数据 No present data.'
+
+    if error:
+        flash(error)
+        return render_template('web/allpresent.html')
+    else:
+        return render_template('web/allpresent.html', posts=posts)
+
+
+@bp.route('/changepresent', methods=['GET'])
+@login_required
+def change_present():
+    # 修改奖励数据
+    return render_template('web/changepresent.html')
+
+
+@bp.route('/changepresent/addpresent', methods=['POST'])
+@login_required
+def add_present():
+    # 添加奖励数据
+    present_id = request.form['present_id']
+    expire_ts = request.form['expire_ts']
+    description = request.form['description']
+    fragment = request.form['fragment']
+    ticket = request.form['ticket']
+    try:
+        if ticket:
+            ticket = int(ticket)
+        if fragment:
+            fragment = int(fragment)
+        expire_ts = int(time.mktime(time.strptime(
+            expire_ts, "%Y-%m-%dT%H:%M"))) * 1000
+    except:
+        flash('数据错误 Wrong data.')
+        return redirect(url_for('index.change_present'))
+
+    if len(present_id) >= 256:
+        present_id = present_id[:200]
+    if len(description) >= 256:
+        description = description[:200]
+
+    items = []
+    if ticket:
+        items.append({'type': 'memory', 'id': 'memory', 'amount': ticket})
+    if fragment:
+        items.append(
+            {'type': 'fragment', 'id': 'fragment', 'amount': fragment})
+    if items == []:
+        flash('奖励为空 No items.')
+        return redirect(url_for('index.change_present'))
+
+    message = web.system.add_one_present(
+        present_id, expire_ts, description, json.dumps(items))
+
+    if message:
+        flash(message)
+
+    return redirect(url_for('index.change_present'))
+
+
+@bp.route('/changepresent/deletepresent', methods=['POST'])
+@login_required
+def delete_present():
+    # 删除奖励数据
+    present_id = request.form['present_id']
+    message = web.system.delete_one_present(present_id)
+
+    if message:
+        flash(message)
+
+    return redirect(url_for('index.change_present'))
+
+
+@bp.route('/deliverpresent', methods=['GET', 'POST'])
+@login_required
+def deliver_present():
+    # 分发奖励
+
+    if request.method == 'GET':
+        return render_template('web/deliverpresent.html')
+
+    error = None
+    flag = True
+    name = None
+    user_code = None
+    present_id = request.form['present_id']
+
+    with Connect() as c:
+        if not web.system.is_present_available(c, present_id):
+            flash("奖励不存在 The present does not exist.")
+            return render_template('web/deliverpresent.html')
+
+        # 全修改
+        if 'name' not in request.form and 'user_code' not in request.form:
+            flag = False
+            web.system.deliver_all_user_present(c, present_id)
+            flash("全部用户奖励分发成功 Successfully deliver the present to all users.")
+        else:
+            name = request.form['name']
+            user_code = request.form['user_code']
+
+        # 指定修改f
+        if name or user_code:
+            if user_code:
+                c.execute('''select user_id from user where user_code=:a''', {
+                    'a': user_code})
+            else:
+                c.execute(
+                    '''select user_id from user where name=:a''', {'a': name})
+
+            user_id = c.fetchone()
+            if user_id:
+                user_id = user_id[0]
+                web.system.deliver_one_user_present(c, present_id, user_id)
+                flash("用户奖励分发成功 Successfully deliver the present to the user.")
+
+            else:
+                error = '玩家不存在 The player does not exist.'
+
+        else:
+            if flag:
+                error = '输入为空 Null Input.'
+
+    if error:
+        flash(error)
+
+    return render_template('web/deliverpresent.html')
+
+
+@bp.route('/allredeem', methods=['GET'])
+@login_required
+def all_redeem():
+    # 所有兑换码数据
+
+    error = None
+    with Connect() as c:
+        c.execute('''select * from redeem''')
+        x = c.fetchall()
+        if x:
+            posts = []
+            for i in x:
+                items = json.loads(i[1])
+                items_string = ''
+                for j in items:
+                    items_string = items_string + '\n' + \
+                        str(j['id']) + ': ' + str(j['amount'])
+
+                posts.append({'code': i[0],
+                              'items': items_string,
+                              'type': i[2]
+                              })
+        else:
+            error = '没有兑换码数据 No redeem code data.'
+
+    if error:
+        flash(error)
+        return render_template('web/allredeem.html')
+    else:
+        return render_template('web/allredeem.html', posts=posts)
+
+
+@bp.route('/changeredeem', methods=['GET'])
+@login_required
+def change_redeem():
+    # 修改兑换码数据
+    return render_template('web/changeredeem.html')
+
+
+@bp.route('/changeredeem/addredeem', methods=['POST'])
+@login_required
+def add_redeem():
+    # 添加兑换码数据
+    print(request.form)
+    code = request.form['code']
+    amount = request.form['amount']
+    redeem_type = request.form['type']
+    fragment = request.form['fragment']
+    ticket = request.form['ticket']
+    try:
+        if amount:
+            amount = int(amount)
+        if ticket:
+            ticket = int(ticket)
+        if fragment:
+            fragment = int(fragment)
+    except:
+        flash('数据错误 Wrong data.')
+        return redirect(url_for('index.change_redeem'))
+
+    items = []
+    if ticket:
+        items.append({'type': 'memory', 'id': 'memory', 'amount': ticket})
+    if fragment:
+        items.append(
+            {'type': 'fragment', 'id': 'fragment', 'amount': fragment})
+    if items == []:
+        flash('奖励为空 No items.')
+        return redirect(url_for('index.change_redeem'))
+
+    if code and not amount:
+        if len(code) > 20 or len(code) < 10:
+            flash('兑换码长度不合适 Inappropriate length of redeem code.')
+            return redirect(url_for('index.change_redeem'))
+
+        message = web.system.add_one_redeem(
+            code, redeem_type, json.dumps(items))
+    elif amount and not code:
+        if amount <= 0 or amount > 1000:
+            flash('数量错误 Wrong amount.')
+            return redirect(url_for('index.change_redeem'))
+
+        message = web.system.add_some_random_redeem(
+            amount, redeem_type, json.dumps(items))
+    elif amount and code:
+        flash('只能使用一种添加方式 Only one add method can be used.')
+        return redirect(url_for('index.change_redeem'))
+    else:
+        flash('空输入 Null input.')
+        return redirect(url_for('index.change_redeem'))
+
+    if message:
+        flash(message)
+
+    return redirect(url_for('index.change_redeem'))
+
+
+@bp.route('/changeredeem/deleteredeem', methods=['POST'])
+@login_required
+def delete_redeem():
+    # 删除兑换码数据
+    code = request.form['code']
+    message = web.system.delete_one_redeem(code)
+
+    if message:
+        flash(message)
+
+    return redirect(url_for('index.change_redeem'))
+
+
+@bp.route('/redeem/<code>', methods=['GET'])
+@login_required
+def one_redeem(code):
+    # 某个兑换码的用户使用情况数据
+
+    error = None
+    with Connect() as c:
+        c.execute(
+            '''select user_id, name, user_code from user where user_id in (select user_id from user_redeem where code=:a)''', {'a': code})
+        x = c.fetchall()
+        if x:
+            posts = []
+            for i in x:
+                posts.append({'user_id': i[0],
+                              'name': i[1],
+                              'user_code': i[2]
+                              })
+        else:
+            error = '没有数据 No data.'
+
+    if error:
+        flash(error)
+        return render_template('web/redeem.html', code=code)
+    else:
+        return render_template('web/redeem.html', posts=posts, code=code)
+
+
+@bp.route('/changeuserpwd', methods=['GET', 'POST'])
+@login_required
+def edit_userpwd():
+    # 修改用户密码
+    if request.method == 'GET':
+        return render_template('web/changeuserpwd.html')
+
+    error = None
+
+    name = request.form['name']
+    user_code = request.form['user_code']
+    pwd = request.form['pwd']
+    pwd2 = request.form['pwd2']
+    if pwd != pwd2:
+        flash('两次输入的密码不一致 Entered passwords differ!')
+        return render_template('web/changeuserpwd.html')
+    else:
+        if len(pwd) < 8 or len(pwd) > 20:
+            flash('密码太长或太短 Password is too long or too short!')
+            return render_template('web/changeuserpwd.html')
+
+    with Connect() as c:
+        if name or user_code:
+
+            if user_code:
+                c.execute('''select user_id from user where user_code=:a''', {
+                    'a': user_code})
+            else:
+                c.execute(
+                    '''select user_id from user where name=:a''', {'a': name})
+
+            user_id = c.fetchone()
+            if user_id:
+                user_id = user_id[0]
+                web.system.change_userpwd(c, user_id, pwd)
+                flash('用户密码修改成功 Successfully edit the user information.')
+
+            else:
+                error = '玩家不存在 The player does not exist.'
+
+        else:
+            error = '输入为空 Null Input.'
+
+    if error:
+        flash(error)
+
+    return redirect(url_for('index.edit_userpwd'))
+
+
+@bp.route('/banuser', methods=['POST', 'GET'])
+@login_required
+def ban_user():
+    # 封禁用户
+    if request.method == 'GET':
+        return render_template('web/banuser.html')
+
+    error = None
+
+    name = request.form['name']
+    user_code = request.form['user_code']
+
+    with Connect() as c:
+        if name or user_code:
+            if user_code:
+                c.execute('''select user_id from user where user_code=:a''', {
+                    'a': user_code})
+            else:
+                c.execute(
+                    '''select user_id from user where name=:a''', {'a': name})
+
+            user_id = c.fetchone()
+            if user_id:
+                user_id = user_id[0]
+                web.system.ban_one_user(c, user_id)
+                flash('用户封禁成功 Successfully ban the user.')
+
+            else:
+                error = '玩家不存在 The player does not exist.'
+
+        else:
+            error = '输入为空 Null Input.'
+
+    if error:
+        flash(error)
+
+    return redirect(url_for('index.ban_user'))
+
+
+@bp.route('/banuser/deleteuserscore', methods=['POST'])
+@login_required
+def delete_user_score():
+    # 删除用户所有成绩
+    error = None
+
+    name = request.form['name']
+    user_code = request.form['user_code']
+
+    with Connect() as c:
+        if name or user_code:
+            if user_code:
+                c.execute('''select user_id from user where user_code=:a''', {
+                    'a': user_code})
+            else:
+                c.execute(
+                    '''select user_id from user where name=:a''', {'a': name})
+
+            user_id = c.fetchone()
+            if user_id:
+                user_id = user_id[0]
+                web.system.clear_user_score(c, user_id)
+                flash("用户成绩删除成功 Successfully delete the user's scores.")
+
+            else:
+                error = '玩家不存在 The player does not exist.'
+
+        else:
+            error = '输入为空 Null Input.'
+
+    if error:
+        flash(error)
+
+    return redirect(url_for('index.ban_user'))

latest version/web/login.py

@@ -2,7 +2,8 @@
 from flask import (Blueprint, flash, g, redirect,
                    render_template, request, session, url_for)
 import functools
-import configparser
+from setting import Config
+import hashlib
 
 bp = Blueprint('login', __name__, url_prefix='/web')
 
@@ -15,18 +16,16 @@ def login():
         password = request.form['password']
         error = None
 
-        config = configparser.ConfigParser()
+        if username != Config.USERNAME or password != Config.PASSWORD:
-        path = r'setting.ini'
-        config.read(path, encoding="utf-8")
-        USERNAME = config.get('WEB', 'USERNAME')
-        PASSWORD = config.get('WEB', 'PASSWORD')
-
-        if username != USERNAME and password != PASSWORD:
             error = '错误的用户名或密码 Incorrect username or password.'
 
         if error is None:
             session.clear()
-            session['user_id'] = USERNAME + PASSWORD
+            hash_session = username + \
+                hashlib.sha256(password.encode("utf8")).hexdigest()
+            hash_session = hashlib.sha256(
+                hash_session.encode("utf8")).hexdigest()
+            session['user_id'] = hash_session
             return redirect(url_for('index.index'))
 
         flash(error)
@@ -48,16 +47,14 @@ def login_required(view):
     def wrapped_view(**kwargs):
         x = session.get('user_id')
 
-        config = configparser.ConfigParser()
+        hash_session = Config.USERNAME + \
-        path = r'setting.ini'
+            hashlib.sha256(Config.PASSWORD.encode("utf8")).hexdigest()
-        config.read(path, encoding="utf-8")
+        hash_session = hashlib.sha256(hash_session.encode("utf8")).hexdigest()
-        USERNAME = config.get('WEB', 'USERNAME')
-        PASSWORD = config.get('WEB', 'PASSWORD')
 
-        if x != USERNAME + PASSWORD:
+        if x != hash_session:
             return redirect(url_for('login.login'))
 
-        g.user = {'user_id': x, 'username': USERNAME}
+        g.user = {'user_id': x, 'username': Config.USERNAME}
         return view(**kwargs)
 
     return wrapped_view

latest version/web/system.py

@@ -1,8 +1,10 @@
 import os
-import sqlite3
+from server.sql import Connect
 import time
 import json
 import server.arcscore
+import hashlib
+from random import Random
 
 
 def int2b(x):
@@ -13,6 +15,17 @@ def int2b(x):
         return True
 
 
+def random_str(randomlength=10):
+    # 随机生成字符串
+    s = ''
+    chars = 'AaBbCcDdEeFfGgHhIiJjKkLlMmNnOoPpQqRrSsTtUuVvWwXxYyZz0123456789'
+    length = len(chars) - 1
+    random = Random()
+    for i in range(randomlength):
+        s += chars[random.randint(0, length)]
+    return s
+
+
 def get_table_info(c, table_name):
     # 得到表结构，返回主键列表和字段名列表
     pk = []
@@ -85,8 +98,25 @@ def get_sql_insert_table(table_name, field, value):
     return sql, sql_dict
 
 
+def get_sql_delete_table(table_name, where_field=[], where_value=[]):
+    # sql语句拼接，delete from ... where ...
+    sql = 'delete from ' + table_name
+    sql_dict = {}
+
+    if where_field and where_value:
+        sql += ' where '
+        sql += where_field[0] + '=:' + where_field[0]
+        sql_dict[where_field[0]] = where_value[0]
+        if len(where_field) >= 1:
+            for i in range(1, len(where_field)):
+                sql_dict[where_field[i]] = where_value[i]
+                sql += ' and ' + where_field[i] + '=:' + where_field[i]
+
+    return sql, sql_dict
+
+
 def update_one_table(c1, c2, table_name):
-    # 从c1向c2更新数据表，c2中存在的信息不变
+    # 从c1向c2更新数据表，c1中存在的信息不变
     c1.execute(
         '''select * from sqlite_master where type = 'table' and name = :a''', {'a': table_name})
     c2.execute(
@@ -117,7 +147,11 @@ def update_one_table(c1, c2, table_name):
             sql = 'select exists(' + sql + ')'
             c2.execute(sql, sql_dict)
 
-            if c2.fetchone() == (0,):
+            if c2.fetchone() == (1,):  # 如果c2里存在，先删除
+                sql, sql_dict = get_sql_delete_table(
+                    table_name, db1_pk, list(x[i]))
+                c2.execute(sql, sql_dict)
+
             sql, sql_dict = get_sql_insert_table(
                 table_name, field, list(y[i]))
             c2.execute(sql, sql_dict)
@@ -142,43 +176,42 @@ def update_user_char(c):
 
 def update_database():
     # 将old数据库不存在数据加入到新数据库上，并删除old数据库
-    # 对于arcaea_datebase.db，更新best_score，friend，recent30，user，user_world, user_item, user_save并用character数据更新user_char
+    # 对于arcaea_datebase.db，更新一些表，并用character数据更新user_char
     # 对于arcsong.db，更新songs
     if os.path.isfile("database/old_arcaea_database.db") and os.path.isfile("database/arcaea_database.db"):
-        conn1 = sqlite3.connect('./database/old_arcaea_database.db')
+        with Connect('./database/old_arcaea_database.db') as c1:
-        c1 = conn1.cursor()
+            with Connect() as c2:
-        conn2 = sqlite3.connect('./database/arcaea_database.db')
-        c2 = conn2.cursor()
 
                 update_one_table(c1, c2, 'user')
                 update_one_table(c1, c2, 'friend')
                 update_one_table(c1, c2, 'best_score')
                 update_one_table(c1, c2, 'recent30')
                 update_one_table(c1, c2, 'user_world')
+                update_one_table(c1, c2, 'item')
                 update_one_table(c1, c2, 'user_item')
                 update_one_table(c1, c2, 'user_save')
+                update_one_table(c1, c2, 'login')
+                update_one_table(c1, c2, 'present')
+                update_one_table(c1, c2, 'user_present')
+                update_one_table(c1, c2, 'redeem')
+                update_one_table(c1, c2, 'user_redeem')
+                update_one_table(c1, c2, 'role')
+                update_one_table(c1, c2, 'user_role')
+                update_one_table(c1, c2, 'power')
+                update_one_table(c1, c2, 'role_power')
+                update_one_table(c1, c2, 'api_auth')
 
                 update_user_char(c2)
 
-        conn1.commit()
-        conn1.close()
-        conn2.commit()
-        conn2.close()
         os.remove('database/old_arcaea_database.db')
 
     # songs
     if os.path.isfile("database/old_arcsong.db") and os.path.isfile("database/arcsong.db"):
-        conn1 = sqlite3.connect('./database/old_arcsong.db')
+        with Connect('./database/old_arcsong.db') as c1:
-        c1 = conn1.cursor()
+            with Connect('./database/arcsong.db') as c2:
-        conn2 = sqlite3.connect('./database/arcsong.db')
-        c2 = conn2.cursor()
 
                 update_one_table(c1, c2, 'songs')
 
-        conn1.commit()
-        conn1.close()
-        conn2.commit()
-        conn2.close()
         os.remove('database/old_arcsong.db')
 
 
@@ -217,8 +250,7 @@ def unlock_user_item(c, user_id):
 
 def get_all_item():
     # 所有购买数据查询
-    conn = sqlite3.connect('./database/arcaea_database.db')
+    with Connect() as c:
-    c = conn.cursor()
         c.execute('''select * from item''')
         x = c.fetchall()
         re = []
@@ -243,8 +275,6 @@ def get_all_item():
                            'discount_to': discount_to
                            })
 
-    conn.commit()
-    conn.close()
     return re
 
 
@@ -267,6 +297,8 @@ def update_one_save(c, user_id):
         for i in scores:
             rating = server.arcscore.get_one_ptt(
                 i['song_id'], i['difficulty'], i['score'])
+            if rating < 0:
+                rating = 0
             try:
                 index = clear_song_id_difficulty.index(
                     i['song_id'] + str(i['difficulty']))
@@ -298,3 +330,154 @@ def update_all_save(c):
             update_one_save(c, i[0])
 
     return
+
+
+def add_one_present(present_id, expire_ts, description, items):
+    # 添加一个奖励
+
+    message = None
+    with Connect() as c:
+        c.execute(
+            '''select exists(select * from present where present_id=:a)''', {'a': present_id})
+        if c.fetchone() == (0,):
+            c.execute('''insert into present values(:a,:b,:c,:d)''', {
+                'a': present_id, 'b': expire_ts, 'c': items, 'd': description})
+            message = '添加成功 Successfully add it.'
+        else:
+            message = '奖励已存在 The present exists.'
+
+    return message
+
+
+def delete_one_present(present_id):
+    # 删除一个奖励
+
+    message = None
+    with Connect() as c:
+        c.execute(
+            '''select exists(select * from present where present_id=:a)''', {'a': present_id})
+        if c.fetchone() == (1,):
+            c.execute('''delete from present where present_id = :a''',
+                      {'a': present_id})
+            c.execute('''delete from user_present where present_id =:a''', {
+                'a': present_id})
+            message = '删除成功 Successfully delete it.'
+        else:
+            message = '奖励不存在 The present does not exist.'
+
+    return message
+
+
+def is_present_available(c, present_id):
+    # 判断present_id是否有效
+    c.execute(
+        '''select exists(select * from present where present_id = :a)''', {'a': present_id})
+
+    if c.fetchone() == (1,):
+        return True
+    else:
+        return False
+
+
+def deliver_one_user_present(c, present_id, user_id):
+    # 为指定玩家添加奖励，重复添加不会提示
+    c.execute('''select exists(select * from user_present where user_id=:a and present_id=:b)''',
+              {'a': user_id, 'b': present_id})
+    if c.fetchone() == (0,):
+        c.execute('''insert into user_present values(:a,:b)''',
+                  {'a': user_id, 'b': present_id})
+    return
+
+
+def deliver_all_user_present(c, present_id):
+    # 为所有玩家添加奖励
+    c.execute('''select user_id from user''')
+    x = c.fetchall()
+    if x:
+        c.execute('''delete from user_present where present_id=:b''',
+                  {'b': present_id})
+        for i in x:
+            c.execute('''insert into user_present values(:a,:b)''',
+                      {'a': i[0], 'b': present_id})
+
+    return
+
+
+def add_one_redeem(code, redeem_type, items):
+    # 添加一个兑换码
+
+    message = None
+    with Connect() as c:
+        c.execute(
+            '''select exists(select * from redeem where code=:a)''', {'a': code})
+        if c.fetchone() == (0,):
+            c.execute('''insert into redeem values(:a,:b,:c)''', {
+                'a': code, 'b': items, 'c': redeem_type})
+            message = '添加成功 Successfully add it.'
+        else:
+            message = '兑换码已存在 The redeem code exists.'
+
+    return message
+
+
+def add_some_random_redeem(amount, redeem_type, items):
+    # 随机生成一堆10位的兑换码
+
+    message = None
+    with Connect() as c:
+        i = 1
+        while i <= amount:
+            code = random_str()
+            c.execute(
+                '''select exists(select * from redeem where code=:a)''', {'a': code})
+            if c.fetchone() == (0,):
+                c.execute('''insert into redeem values(:a,:b,:c)''',
+                          {'a': code, 'b': items, 'c': redeem_type})
+                i += 1
+
+        message = '添加成功 Successfully add it.'
+
+    return message
+
+
+def delete_one_redeem(code):
+    # 删除一个兑换码
+
+    message = None
+    with Connect() as c:
+        c.execute(
+            '''select exists(select * from redeem where code=:a)''', {'a': code})
+        if c.fetchone() == (1,):
+            c.execute('''delete from redeem where code = :a''', {'a': code})
+            c.execute(
+                '''delete from user_redeem where code =:a''', {'a': code})
+            message = '删除成功 Successfully delete it.'
+        else:
+            message = '兑换码不存在 The redeem code does not exist.'
+
+    return message
+
+
+def change_userpwd(c, user_id, password):
+    # 修改用户密码
+    hash_pwd = hashlib.sha256(password.encode("utf8")).hexdigest()
+    c.execute('''update user set password =:a where user_id=:b''',
+              {'a': hash_pwd, 'b': user_id})
+    return
+
+
+def ban_one_user(c, user_id):
+    # 封禁用户
+    c.execute('''update user set password = '' where user_id=:a''',
+              {'a': user_id})
+    c.execute('''delete from login where user_id=:a''', {'a': user_id})
+    return
+
+
+def clear_user_score(c, user_id):
+    # 清除用户所有成绩，包括best_score和recent30，以及recent数据，但不包括云端存档
+    c.execute('''update user set rating_ptt=0, song_id='', difficulty=0, score=0, shiny_perfect_count=0, perfect_count=0, near_count=0, miss_count=0, health=0, time_played=0, rating=0 where user_id=:a''',
+              {'a': user_id})
+    c.execute('''delete from best_score where user_id=:a''', {'a': user_id})
+    c.execute('''delete from recent30 where user_id=:a''', {'a': user_id})
+    return

latest version/web/webscore.py

@@ -1,11 +1,11 @@
 import time
 
 
-def get_user_score(c, user_id, limit=-1):
+def get_user_score(c, user_id, limit=-1, offset=0):
     # 返回用户的所有歌曲数据，带排名，返回字典列表
     if limit >= 0:
-        c.execute('''select * from best_score where user_id =:a order by rating DESC limit :b''',
+        c.execute('''select * from best_score where user_id =:a order by rating DESC limit :b offset :c''',
-                  {'a': user_id, 'b': limit})
+                  {'a': user_id, 'b': limit, 'c': offset})
     else:
         c.execute(
             '''select * from best_score where user_id =:a order by rating DESC''', {'a': user_id})
@@ -49,6 +49,10 @@ def get_user(c, user_id):
         if x[20]:
             time_played = time.strftime('%Y-%m-%d %H:%M:%S',
                                         time.localtime(int(x[20])//1000))
+        if x[2] == '':
+            ban_flag = True
+        else:
+            ban_flag = False
 
         r = {'name': x[1],
              'user_id': user_id,
@@ -65,14 +69,15 @@ def get_user(c, user_id):
              'time_played': time_played,
              'clear_type': x[21],
              'rating': x[22],
-             'ticket': x[26]
+             'ticket': x[26],
+             'ban_flag': ban_flag
              }
 
     return r
 
 
 def get_user_recent30(c, user_id):
-    # 获取玩家recent30信息并计算这一部分的ptt，返回字典列表和一个值
+    # 获取玩家recent30信息并计算recent10的ptt，返回字典列表和一个值
     c.execute('''select * from recent30 where user_id=:a''', {'a': user_id})
     sumr = 0
     x = c.fetchone()