1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
|
# This file is part of Senator Sperma
# Licensed under the GPL-3.0 License
# Copyright (C) 2026 Salmonik @ salmonik@tuta.io
# https://codeberg.org/salmonik/senator-sperma
import logging
import asyncio
import re
from discord import ApplicationContext
from discord.ext import commands
logger = logging.getLogger(__name__)
MATH_SANITIZE_PATTERN = re.compile(r'^[\d\s\+\-\*\/\^\%\(\)\.\,\=\\<\>\!\|\&\~\?\:\'\"\[\]\{\}a-zA-Z]+$')
def sanitize_math_input(equation: str) -> str | None:
if not equation or len(equation) > 1000:
return None
equation = equation.strip()
if not equation:
return None
if not MATH_SANITIZE_PATTERN.match(equation):
return None
for char in equation:
if ord(char) < 32 or ord(char) > 126:
return None
if equation.count('(') != equation.count(')'):
return None
if equation.count('[') != equation.count(']'):
return None
if equation.count('{') != equation.count('}'):
return None
dangerous_patterns = [
r'eval', r'exec', r'__import__', r'os\.', r'sys\.',
r'subprocess', r'open(', r'file', r'shutil',
r'lambda:', r'compile', r'dir(', r'vars(',
r'\|\|', r'&&', r';', r'`', r'\$', r'\\n', r'\\r',
r'\x', r'\0', r'\a', r'\b', r'\f', r'\v',
]
for pattern in dangerous_patterns:
if re.search(pattern, equation, re.IGNORECASE):
return None
return equation
class Math(commands.Cog):
def __init__(self, bot):
self.bot = bot
@commands.slash_command(
name="math",
description="wrug szyskih matfisuf"
)
async def math(self, ctx: ApplicationContext, equation: str):
sanitized = sanitize_math_input(equation)
if sanitized is None:
await ctx.respond("Invalid equation. Only basic math expressions allowed.", ephemeral=True)
logger.warning(f"Math command rejected invalid input: {equation}")
return
try:
math_proc = await asyncio.create_subprocess_exec(
"qalc", "-e", sanitized,
stdout=asyncio.subprocess.PIPE,
stderr=asyncio.subprocess.PIPE
)
stdout, stderr = await math_proc.communicate()
if math_proc.returncode != 0:
error_output = stderr.decode('utf-8', errors='replace').strip()
await ctx.respond(f"Calculation error: {error_output}", ephemeral=True)
logger.error(f"qalc error: {error_output}")
return
result = stdout.decode('utf-8', errors='replace').strip()
await ctx.respond(f"{sanitized} = {result}")
logger.info(f"Math command executed: {sanitized}")
except Exception as e:
await ctx.respond(f"Error: {str(e)}", ephemeral=True)
logger.error(f"Error in math command: {e}", exc_info=True)
def setup(bot):
bot.add_cog(Math(bot))
|
