CREATE USER DBCONFIG IDENTIFIED BY "DBCONFIG"

GRANT UNLIMITED TABLESPACE TO DBCONFIG
/

ALTER USER DBCONFIG ACCOUNT LOCK
/

CREATE TABLE DBCONFIG.LOGON_IPCONFIG
(
    USERNAME                       VARCHAR2(30),
    STARTIP                        VARCHAR2(15) NOT NULL,
    ENDIP                          VARCHAR2(15),
    EFF_DATE                       DATE DEFAULT SYSDATE,
    EXP_DATE                       DATE DEFAULT SYSDATE+3,
    LOGON_ENABLED                  CHAR(1) DEFAULT 'Y',
    LOG_ENABLED                    CHAR(1) DEFAULT 'N',
    STATE                          CHAR(1) DEFAULT 'A',
    STATE_DATE                     DATE,
    REMARK                         VARCHAR2(20)
)
/

CREATE OR REPLACE TRIGGER DBCONFIG.TR_UI_LOGON_IPCONFIG
BEFORE INSERT OR UPDATE ON DBCONFIG.LOGON_IPCONFIG
REFERENCING OLD AS OLD NEW AS NEW
FOR EACH ROW
DECLARE
ip1 varchar(15);
ip2 varchar(15);
i integer;
l integer;

BEGIN

  ip1 := :new.startip;
  i := -1;
  --測試是否數字
  ip2 := to_char(to_number(replace(ip1,'.','')));

  i := instr(ip1, '.');
  if i=0 or i=l then raise_application_error(-20061,'INVALID STARTIP VALUE.'); end if;
  --STARTIP的第1節
  ip2 := lpad(substr(ip1,1,i),4,'0');

  l := length(ip1);
  ip1 := substr(ip1,i+1,l-i);
  i := instr(ip1, '.');
  if i=0 or i=l then raise_application_error(-20061,'INVALID STARTIP VALUE.'); end if;
  --STARTIP的第2節
  ip2 := ip2||lpad(substr(ip1,1,i),4,'0');

  l := length(ip1);
  ip1 := substr(ip1,i+1,l-i);
  i := instr(ip1, '.');
  if i=0 or i=l then raise_application_error(-20061,'INVALID STARTIP VALUE.'); end if;
  --STARTIP的第3節
  ip2 := ip2||lpad(substr(ip1,1,i),4,'0');

  ip1 := substr(ip1,i+1,l-i);
  --STARTIP的第4節
  ip2 := ip2||lpad(ip1,3,'0');
  :new.startip := ip2;

  ip1 := :new.endip;
  i := -2;
  --測試是否數字
  ip2 := to_char(to_number(replace(ip1,'.','')));

  i := instr(ip1, '.');
  if i=0 or i=l then raise_application_error(-20062,'INVALID ENDIP VALUE.'); end if;
  --ENDIP的第1節
  ip2 := lpad(substr(ip1,1,i),4,'0');

  l := length(ip1);
  ip1 := substr(ip1,i+1,l-i);
  i := instr(ip1, '.');
  if i=0 or i=l then raise_application_error(-20062,'INVALID ENDIP VALUE.'); end if;
  --ENDIP的第2節
  ip2 := ip2||lpad(substr(ip1,1,i),4,'0');

  l := length(ip1);
  ip1 := substr(ip1,i+1,l-i);
  i := instr(ip1, '.');
  if i=0 or i=l then raise_application_error(-20062,'INVALID ENDIP VALUE.'); end if;
  --ENDIP的第3節
  ip2 := ip2||lpad(substr(ip1,1,i),4,'0');

  ip1 := substr(ip1,i+1,l-i);
  --ENDIP的第4節
  ip2 := ip2||lpad(ip1,3,'0');
  :new.endip := ip2;

  :new.username := upper(:new.username);
  :new.logon_enabled := upper(:new.logon_enabled);
  :new.log_enabled := upper(:new.log_enabled);
  :new.state := upper(:new.state);

exception when others then
  if i=-1 then
     raise_application_error(-20061,'INVALID STARTIP VALUE.');
  elsif i=-2 then
     raise_application_error(-20062,'INVALID ENDIP VALUE.');
  end if;

END;

INSERT INTO DBCONFIG.LOGON_IPCONFIG
SELECT USERNAME,'0.0.0.0','255.255.255.255',TRUNC(SYSDATE),DATE '3000-1-1','Y','Y','A',TRUNC(SYSDATE),'DEFAULT' FROM ALL_USERS

select * from DBCONFIG.LOGON_IPCONFIG

CREATE UNIQUE INDEX DBCONFIG.IDX_LOGON_IPCONFIG
ON DBCONFIG.LOGON_IPCONFIG(USERNAME, LOGON_ENABLED, STATE, STATE_DATE)
/

CREATE SEQUENCE DBCONFIG.LOGON_SEQ
INCREMENT BY 1
START WITH 1
MAXVALUE 99999999
MINVALUE 1
CYCLE
CACHE 20
NOORDER
/

CREATE TABLE DBCONFIG.LOGON_HISTORY
(
    ID                             NUMBER(8),
    SID                            NUMBER,
    SERIAL#                        NUMBER,
    AUDSID                         NUMBER,
    USERNAME                       VARCHAR2(30),
    SERVER                         VARCHAR2(9),
    SCHEMANAME                     VARCHAR2(30),
    OSUSER                         VARCHAR2(30),
    MACHINE                        VARCHAR2(64),
    TERMINAL                       VARCHAR2(16),
    PROGRAM                        VARCHAR2(64),
    LOGON_IP                       VARCHAR2(16),
    LOGON_TIME                     DATE,
    CONSTRAINT PK_LOGON_HISTORY PRIMARY KEY (ID)
)
/

CREATE OR REPLACE TRIGGER SYS.TRIGGER_LOGON
AFTER LOGON ON DATABASE
declare
  usr varchar2(10);
  ip  varchar2(16);
  ip1 varchar2(15);
  ip2 varchar2(15);
  i   number;
  log char;
begin
  usr := sys_context('USERENV','SESSION_USER');
  ip := sys_context('USERENV','IP_ADDRESS');

  i := instr(ip,'.');
  ip1 := lpad(substr(ip,1,i),4,'0');
  ip2 := substr(ip,i+1,length(ip)-i);
  i := instr(ip2,'.');
  ip1 := ip1||lpad(substr(ip2,1,i),4,'0');
  ip2 := substr(ip2,i+1,length(ip2)-i);
  i := instr(ip2,'.');
  ip1 := ip1||lpad(substr(ip2,1,i),4,'0');
  ip2 := substr(ip2,i+1,length(ip2)-i);
  ip1 := ip1||lpad(ip2,3,'0');
 
  select max( LOG_ENABLED ) into log
  from DBCONFIG.LOGON_IPCONFIG
  where STATE = 'A'
  and USERNAME = usr
  and LOGON_ENABLED = 'Y'
  and ip1 between STARTIP and nvl(ENDIP,STARTIP)
  and sysdate between EFF_DATE and EXP_DATE
  and not exists
  (
    select 1 from DBCONFIG.LOGON_IPCONFIG
    where STATE = 'A'
    and USERNAME = usr
    and LOGON_ENABLED = 'N'
    and ip1 between STARTIP and nvl(ENDIP,STARTIP)
    and sysdate between EFF_DATE and EXP_DATE
  );
  if log is null then
     raise_application_error(-20069,'YOUR IP WAS REFUSED.');
  end if;
 
  if log = 'Y' then
     insert into DBCONFIG.LOGON_HISTORY
     select DBCONFIG.LOGON_SEQ.NEXTVAL,
         SID,SERIAL#,AUDSID,USERNAME,SERVER,
         SCHEMANAME,OSUSER,MACHINE,TERMINAL,PROGRAM,
         ip,LOGON_TIME
     from v$session
     where audsid = userenv('sessionid')
     and LOGON_TIME = sysdate;
  end if;
end;
/

CREATE OR REPLACE TRIGGER logoff_audit

Before LOGOFF ON DATABASE

BEGIN

NULL;

END;

select * from  DBCONFIG.LOGON_HISTORY

select * from dbconfig.logon_ipconfig for update

drop table dbconfig.logon_ipconfig