From 5872d0682a9687469ca0e87fb46c391a42cad31b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 22 Jun 2021 15:20:44 +0000
Subject: [PATCH 01/15] Bump phpmailer/phpmailer from 6.4.1 to 6.5.0

Bumps [phpmailer/phpmailer](https://github.com/PHPMailer/PHPMailer) from 6.4.1 to 6.5.0.
- [Release notes](https://github.com/PHPMailer/PHPMailer/releases)
- [Changelog](https://github.com/PHPMailer/PHPMailer/blob/master/changelog.md)
- [Commits](https://github.com/PHPMailer/PHPMailer/compare/v6.4.1...v6.5.0)

---
updated-dependencies:
- dependency-name: phpmailer/phpmailer
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 composer.lock | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/composer.lock b/composer.lock
index f66deb47..364abc0b 100644
--- a/composer.lock
+++ b/composer.lock
@@ -150,16 +150,16 @@
         },
         {
             "name": "phpmailer/phpmailer",
-            "version": "v6.4.1",
+            "version": "v6.5.0",
             "source": {
                 "type": "git",
                 "url": "https://github.com/PHPMailer/PHPMailer.git",
-                "reference": "9256f12d8fb0cd0500f93b19e18c356906cbed3d"
+                "reference": "a5b5c43e50b7fba655f793ad27303cd74c57363c"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/PHPMailer/PHPMailer/zipball/9256f12d8fb0cd0500f93b19e18c356906cbed3d",
-                "reference": "9256f12d8fb0cd0500f93b19e18c356906cbed3d",
+                "url": "https://api.github.com/repos/PHPMailer/PHPMailer/zipball/a5b5c43e50b7fba655f793ad27303cd74c57363c",
+                "reference": "a5b5c43e50b7fba655f793ad27303cd74c57363c",
                 "shasum": ""
             },
             "require": {
@@ -214,7 +214,7 @@
             "description": "PHPMailer is a full-featured email creation and transfer class for PHP",
             "support": {
                 "issues": "https://github.com/PHPMailer/PHPMailer/issues",
-                "source": "https://github.com/PHPMailer/PHPMailer/tree/v6.4.1"
+                "source": "https://github.com/PHPMailer/PHPMailer/tree/v6.5.0"
             },
             "funding": [
                 {
@@ -222,7 +222,7 @@
                     "type": "github"
                 }
             ],
-            "time": "2021-04-29T12:25:04+00:00"
+            "time": "2021-06-16T14:33:43+00:00"
         },
         {
             "name": "psr/log",
@@ -4133,5 +4133,5 @@
         "php": ">=7.3",
         "ext-pcntl": "*"
     },
-    "plugin-api-version": "2.0.0"
+    "plugin-api-version": "2.1.0"
 }

From c69ef20b177d23980bf4d10c333c8dd80ac4c983 Mon Sep 17 00:00:00 2001
From: Daniel Schmitz <daniel@bashgeek.net>
Date: Wed, 23 Jun 2021 10:58:52 +0800
Subject: [PATCH 02/15] wip

---
 .gitignore                            | 1 +
 lib/init.php                          | 5 ++++-
 templates/Sparkle/2fa/entercode.tpl   | 2 +-
 templates/Sparkle/login/fpwd.tpl      | 2 +-
 templates/Sparkle/login/login.tpl     | 2 +-
 templates/Sparkle/login/login_ftp.tpl | 2 +-
 templates/Sparkle/login/rpwd.tpl      | 2 +-
 7 files changed, 10 insertions(+), 6 deletions(-)

diff --git a/.gitignore b/.gitignore
index 3d547882..42d3b189 100644
--- a/.gitignore
+++ b/.gitignore
@@ -17,4 +17,5 @@ logs/*
 !templates/Sparkle/
 !templates/misc/
 templates/Froxlor/assets/img/logo_custom.png
+templates/Froxlor/assets/img/logo_custom_login.png
 vendor/
diff --git a/lib/init.php b/lib/init.php
index a0a8a431..7a9e9de5 100644
--- a/lib/init.php
+++ b/lib/init.php
@@ -380,11 +380,14 @@ if (! array_key_exists('variants', $_themeoptions) || ! array_key_exists($themev
 
 // check for custom header-graphic
 $hl_path = 'templates/' . $theme . '/assets/img';
-$header_logo = $hl_path . '/logo.png';
+$header_logo = $header_logo_login = $hl_path . '/logo.png';
 
 if (file_exists($hl_path . '/logo_custom.png')) {
 	$header_logo = $hl_path . '/logo_custom.png';
 }
+if (file_exists($hl_path . '/logo_custom_login.png')) {
+	$header_logo_login = $hl_path . '/logo_custom_login.png';
+}
 
 /**
  * Redirects to index.php (login page) if no session exists
diff --git a/templates/Sparkle/2fa/entercode.tpl b/templates/Sparkle/2fa/entercode.tpl
index 2f2d84f6..b79090e6 100644
--- a/templates/Sparkle/2fa/entercode.tpl
+++ b/templates/Sparkle/2fa/entercode.tpl
@@ -1,7 +1,7 @@
 $header
 	<article class="login bradius">
 		<header class="dark">
-			<img src="{$header_logo}" alt="Froxlor Server Management Panel" />
+			<img src="{$header_logo_login}" alt="Froxlor Server Management Panel" />
 		</header>
 			<section class="loginsec">
 				<form method="post" action="{$filename}" enctype="application/x-www-form-urlencoded">
diff --git a/templates/Sparkle/login/fpwd.tpl b/templates/Sparkle/login/fpwd.tpl
index 1764e47d..fa8c7d2e 100644
--- a/templates/Sparkle/login/fpwd.tpl
+++ b/templates/Sparkle/login/fpwd.tpl
@@ -1,7 +1,7 @@
 $header
 	<article class="login bradius">
 		<header class="dark">
-			<img src="{$header_logo}" alt="Froxlor Server Management Panel" />
+			<img src="{$header_logo_login}" alt="Froxlor Server Management Panel" />
 		</header>
 			<if $message != ''>
 				<div class="errorcontainer bradius">
diff --git a/templates/Sparkle/login/login.tpl b/templates/Sparkle/login/login.tpl
index e1cb034f..670a4002 100644
--- a/templates/Sparkle/login/login.tpl
+++ b/templates/Sparkle/login/login.tpl
@@ -1,7 +1,7 @@
 $header
 	<article class="login bradius">
 		<header class="dark">
-			<img src="{$header_logo}" alt="Froxlor Server Management Panel" />
+			<img src="{$header_logo_login}" alt="Froxlor Server Management Panel" />
 		</header>
 
 		<if $update_in_progress !== ''>
diff --git a/templates/Sparkle/login/login_ftp.tpl b/templates/Sparkle/login/login_ftp.tpl
index ea9c16ff..dd8ed686 100644
--- a/templates/Sparkle/login/login_ftp.tpl
+++ b/templates/Sparkle/login/login_ftp.tpl
@@ -1,6 +1,6 @@
 	<article class="login bradius">
 		<header class="dark">
-			<img src="{$header_logo}" alt="{t}Froxlor Server Management Panel{/t}" />
+			<img src="{$header_logo_login}" alt="{t}Froxlor Server Management Panel{/t}" />
 		</header>
 
 		{if isset($successmessage)}
diff --git a/templates/Sparkle/login/rpwd.tpl b/templates/Sparkle/login/rpwd.tpl
index 3d25daf4..57f5cb14 100644
--- a/templates/Sparkle/login/rpwd.tpl
+++ b/templates/Sparkle/login/rpwd.tpl
@@ -1,7 +1,7 @@
 $header
 	<article class="login bradius">
 		<header class="dark">
-			<img src="{$header_logo}" alt="Froxlor Server Management Panel" />
+			<img src="{$header_logo_login}" alt="Froxlor Server Management Panel" />
 		</header>
 			<if $message != ''>
 				<div class="errorcontainer bradius">

From acb04566f546cce4dd99018cf74a7b224c04a1d0 Mon Sep 17 00:00:00 2001
From: Daniel Schmitz <daniel@bashgeek.net>
Date: Wed, 23 Jun 2021 11:28:07 +0800
Subject: [PATCH 03/15] wip

---
 .gitignore | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.gitignore b/.gitignore
index 42d3b189..4e37d749 100644
--- a/.gitignore
+++ b/.gitignore
@@ -16,6 +16,6 @@ logs/*
 !templates/Froxlor/
 !templates/Sparkle/
 !templates/misc/
-templates/Froxlor/assets/img/logo_custom.png
-templates/Froxlor/assets/img/logo_custom_login.png
+templates/Sparkle/assets/img/logo_custom.png
+templates/Sparkle/assets/img/logo_custom_login.png
 vendor/

From d2efa3ecc491d3dbc5fb5202a32783c8dc61a6e9 Mon Sep 17 00:00:00 2001
From: kruegerj <github@chef-ist.net>
Date: Thu, 24 Jun 2021 03:16:12 +0200
Subject: [PATCH 04/15] Update focal.xml

---
 lib/configfiles/focal.xml | 21 ++++++++++-----------
 1 file changed, 10 insertions(+), 11 deletions(-)

diff --git a/lib/configfiles/focal.xml b/lib/configfiles/focal.xml
index 588f0e4d..0a060b63 100644
--- a/lib/configfiles/focal.xml
+++ b/lib/configfiles/focal.xml
@@ -74,7 +74,7 @@ Alias "/.well-known/acme-challenge" "{{settings.system.letsencryptchallengepath}
 ]]>
 						</content>
 					</file>
-					<command><![CDATA[/etc/init.d/apache2 restart]]></command>
+					<command><![CDATA[service apache2 restart]]></command>
 				</daemon>
 				<!-- HTTP Lighttpd -->
 				<daemon name="lighttpd" title="LigHTTPd">
@@ -138,7 +138,7 @@ include_shell "/usr/share/lighttpd/include-conf-enabled.pl"
 					</command>
 					<command><![CDATA[lighty-disable-mod cgi]]></command>
 					<command><![CDATA[lighty-disable-mod fastcgi]]></command>
-					<command><![CDATA[/etc/init.d/lighttpd restart]]></command>
+					<command><![CDATA[service lighttpd restart]]></command>
 				</daemon>
 				<!-- HTTP Nginx -->
 				<daemon name="nginx" title="nginx">
@@ -354,7 +354,6 @@ exit "$RETVAL"
 						</visibility>
 						<content><![CDATA[/etc/init.d/php-fcgi restart]]></content>
 					</command>
-					<command><![CDATA[/etc/init.d/nginx restart]]></command>
 				</daemon>
 			</service>
 			<!--DNS -->
@@ -366,7 +365,7 @@ exit "$RETVAL"
 					<command><![CDATA[touch {{settings.system.bindconf_directory}}froxlor_bind.conf]]></command>
 					<command><![CDATA[chown bind:0 {{settings.system.bindconf_directory}}froxlor_bind.conf]]></command>
 					<command><![CDATA[chmod 0644 {{settings.system.bindconf_directory}}froxlor_bind.conf]]></command>
-					<command><![CDATA[/etc/init.d/bind9 restart]]></command>
+					<command><![CDATA[service bind9 restart]]></command>
 				</daemon>
 				<daemon name="powerdns" title="PowerDNS (standalone)">
 					<install><![CDATA[apt-get install pdns-server pdns-backend-mysql]]></install>
@@ -908,7 +907,7 @@ gmysql-password=
 ]]>
 						</content>
 					</file>
-					<command><![CDATA[/etc/init.d/pdns restart]]></command>
+					<command><![CDATA[service pdns restart]]></command>
 				</daemon>
 				<daemon name="powerdns_bind"
 					title="PowerDNS via bind-backend">
@@ -1455,7 +1454,7 @@ bind-check-interval=180
 ]]>
 						</content>
 					</file>
-					<command><![CDATA[/etc/init.d/pdns restart]]></command>
+					<command><![CDATA[service pdns restart]]></command>
 				</daemon>
 			</service>
 			<!-- SMTP services -->
@@ -1578,7 +1577,7 @@ root:               root@<SERVERNAME>
 					</files>
 					<commands index="3">
 						<command><![CDATA[newaliases]]></command>
-						<command><![CDATA[/etc/init.d/postfix restart]]></command>
+						<command><![CDATA[service postfix restart]]></command>
 					</commands>
 				</general>
 				<!-- postfix with dovecot -->
@@ -3299,7 +3298,7 @@ plugin {
 						</file>
 					</files>
 					<commands index="1">
-						<command><![CDATA[/etc/init.d/dovecot restart]]></command>
+						<command><![CDATA[service dovecot restart]]></command>
 					</commands>
 				</general>
 				<!-- Dovecot with postfix -->
@@ -3722,7 +3721,7 @@ TLSVerifyClient                         off
 ]]>
 						</content>
 					</file>
-					<command><![CDATA[/etc/init.d/proftpd restart]]></command>
+					<command><![CDATA[service proftpd restart]]></command>
 				</daemon>
 				<!-- Pureftpd -->
 				<daemon name="pureftpd" title="PureFTPd">
@@ -3948,7 +3947,7 @@ UPLOADGID=
 ]]>
 						</content>
 					</file>
-					<command><![CDATA[/etc/init.d/pure-ftpd-mysql restart]]></command>
+					<command><![CDATA[service pure-ftpd-mysql restart]]></command>
 				</daemon>
 			</service>
 			<!-- System tools/services -->
@@ -4088,7 +4087,7 @@ aliases:     files
 					<commands index="5">
 						<visibility mode="equals" value="apache2">{{settings.system.webserver}}
 						</visibility>
-						<command><![CDATA[/etc/init.d/apache2 restart]]></command>
+						<command><![CDATA[service apache2 restart]]></command>
 					</commands>
 					<!-- instead of just restarting apache, we let the cronjob do all the 
 						dirty work -->

From 0208812013ab30347137f2230bf3c0d0e83cb9c2 Mon Sep 17 00:00:00 2001
From: Michael Kaufmann <d00p@froxlor.org>
Date: Sun, 27 Jun 2021 08:41:16 +0200
Subject: [PATCH 05/15] prefer custom zone entries over automatically created
 ones when system.dns_createmailentry is enabled, fixes #944

Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
---
 lib/Froxlor/Dns/Dns.php | 24 +++++++++++++++++++-----
 1 file changed, 19 insertions(+), 5 deletions(-)

diff --git a/lib/Froxlor/Dns/Dns.php b/lib/Froxlor/Dns/Dns.php
index fa95586e..f333c3d1 100644
--- a/lib/Froxlor/Dns/Dns.php
+++ b/lib/Froxlor/Dns/Dns.php
@@ -53,7 +53,7 @@ class Dns
 			$domain = $domain_id;
 		}
 
-		if ($domain['isbinddomain'] != '1') {
+		if (!isset($domain['isbinddomain']) || $domain['isbinddomain'] != '1') {
 			return;
 		}
 
@@ -190,12 +190,26 @@ class Dns
 				'@',
 				'www',
 				'*'
-			] as $crceord) {
-				if ($entry['type'] == 'CNAME' && $entry['record'] == '@' && (array_key_exists(md5($crceord), $required_entries['A']) || array_key_exists(md5($crceord), $required_entries['AAAA']))) {
-					unset($required_entries['A'][md5($crceord)]);
-					unset($required_entries['AAAA'][md5($crceord)]);
+			] as $crecord) {
+				if ($entry['type'] == 'CNAME' && $entry['record'] == '@' && (array_key_exists(md5($crecord), $required_entries['A']) || array_key_exists(md5($crecord), $required_entries['AAAA']))) {
+					unset($required_entries['A'][md5($crecord)]);
+					unset($required_entries['AAAA'][md5($crecord)]);
 				}
 			}
+			// also allow overriding of auto-generated values (imap,pop3,mail,smtp) if enabled in the settings
+			if (Settings::Get('system.dns_createmailentry')) {
+			    foreach (array(
+			        'imap',
+			        'pop3',
+			        'mail',
+			        'smtp'
+			    ) as $crecord) {
+			        if ($entry['type'] == 'CNAME' && $entry['record'] == $crecord && (array_key_exists(md5($crecord), $required_entries['A']) || array_key_exists(md5($crecord), $required_entries['AAAA']))) {
+			            unset($required_entries['A'][md5($crecord)]);
+			            unset($required_entries['AAAA'][md5($crecord)]);
+			        }
+			    }
+			}
 			$zonerecords[] = new DnsEntry($entry['record'], $entry['type'], $entry['content'], $entry['prio'], $entry['ttl']);
 		}
 

From 73991e855c2f14252d8559435d70466ace75f3a0 Mon Sep 17 00:00:00 2001
From: Michael Kaufmann <d00p@froxlor.org>
Date: Sun, 27 Jun 2021 09:00:44 +0200
Subject: [PATCH 06/15] Support ZeroSSL via acme.sh (v3); refs #946

Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
---
 actions/admin/settings/131.ssl.php            |  11 +-
 install/froxlor.sql                           |   4 +-
 .../updates/froxlor/0.10/update_0.10.inc.php  |  13 +
 lib/Froxlor/Cron/Http/LetsEncrypt/AcmeSh.php  | 914 +++++++++---------
 lib/Froxlor/Froxlor.php                       |   2 +-
 lng/english.lng.php                           |   4 +-
 lng/german.lng.php                            |   4 +-
 7 files changed, 488 insertions(+), 464 deletions(-)

diff --git a/actions/admin/settings/131.ssl.php b/actions/admin/settings/131.ssl.php
index 973dbf2b..50a0b96e 100644
--- a/actions/admin/settings/131.ssl.php
+++ b/actions/admin/settings/131.ssl.php
@@ -142,6 +142,9 @@ return array(
 					'default' => '/etc/apache2/conf-enabled/acme.conf',
 					'save_method' => 'storeSettingField'
 				),
+			    /**
+			     * currently the only option anyway
+			     *
 				'system_leapiversion' => array(
 					'label' => $lng['serversettings']['leapiversion'],
 					'settinggroup' => 'system',
@@ -154,16 +157,18 @@ return array(
 					),
 					'save_method' => 'storeSettingField'
 				),
+				*/
 				'system_letsencryptca' => array(
 					'label' => $lng['serversettings']['letsencryptca'],
 					'settinggroup' => 'system',
 					'varname' => 'letsencryptca',
 					'type' => 'option',
-					'default' => 'production',
+					'default' => 'letsencrypt',
 					'option_mode' => 'one',
 					'option_options' => array(
-						'testing' => 'https://acme-staging-v0' . \Froxlor\Settings::Get('system.leapiversion') . '.api.letsencrypt.org (Test)',
-						'production' => 'https://acme-v0' . \Froxlor\Settings::Get('system.leapiversion') . '.api.letsencrypt.org (Live)'
+						'letsencrypt_test' => 'Let\'s Encrypt (Test / Staging)',
+						'letsencrypt' => 'Let\'s Encrypt (Live)',
+					    'zerossl' => 'ZeroSSL (Live)'
 					),
 					'save_method' => 'storeSettingField'
 				),
diff --git a/install/froxlor.sql b/install/froxlor.sql
index de3e8cf6..64db3116 100644
--- a/install/froxlor.sql
+++ b/install/froxlor.sql
@@ -628,7 +628,7 @@ opcache.interned_strings_buffer'),
 	('system', 'apacheitksupport', '0'),
 	('system', 'leprivatekey', 'unset'),
 	('system', 'lepublickey', 'unset'),
-	('system', 'letsencryptca', 'production'),
+	('system', 'letsencryptca', 'letsencrypt'),
 	('system', 'letsencryptcountrycode', 'DE'),
 	('system', 'letsencryptstate', 'Hessen'),
 	('system', 'letsencryptchallengepath', '/var/www/froxlor'),
@@ -716,7 +716,7 @@ opcache.interned_strings_buffer'),
 	('panel', 'terms_url', ''),
 	('panel', 'privacy_url', ''),
 	('panel', 'version', '0.10.26'),
-	('panel', 'db_version', '202106160');
+	('panel', 'db_version', '202106270');
 
 
 DROP TABLE IF EXISTS `panel_tasks`;
diff --git a/install/updates/froxlor/0.10/update_0.10.inc.php b/install/updates/froxlor/0.10/update_0.10.inc.php
index 190123be..3f03dff2 100644
--- a/install/updates/froxlor/0.10/update_0.10.inc.php
+++ b/install/updates/froxlor/0.10/update_0.10.inc.php
@@ -812,3 +812,16 @@ if (\Froxlor\Froxlor::isDatabaseVersion('202103240')) {
 
     \Froxlor\Froxlor::updateToDbVersion('202106160');
 }
+
+if (\Froxlor\Froxlor::isDatabaseVersion('202106160')) {
+
+    showUpdateStep("Adjusting Let's Encrypt endpoint configuration to support ZeroSSL", true);
+    if (Settings::Get('system.letsencryptca') == 'testing') {
+        Settings::Set("system.letsencryptca", 'letsencrypt_test');
+    } else {
+        Settings::Set("system.letsencryptca", 'letsencrypt');
+    }
+    lastStepStatus(0);
+
+    \Froxlor\Froxlor::updateToDbVersion('202106270');
+}
diff --git a/lib/Froxlor/Cron/Http/LetsEncrypt/AcmeSh.php b/lib/Froxlor/Cron/Http/LetsEncrypt/AcmeSh.php
index 5a473b19..1b2786ce 100644
--- a/lib/Froxlor/Cron/Http/LetsEncrypt/AcmeSh.php
+++ b/lib/Froxlor/Cron/Http/LetsEncrypt/AcmeSh.php
@@ -21,70 +21,76 @@ use Froxlor\FileDir;
  * @author Froxlor team <team@froxlor.org> (2016-)
  * @license GPLv2 http://files.froxlor.org/misc/COPYING.txt
  * @package Cron
- *
+ *         
  * @since 0.9.35
- *
+ *       
  */
 class AcmeSh extends \Froxlor\Cron\FroxlorCron
 {
 
-	private static $apiserver = "";
+    const ACME_PROVIDER = [
+        'letsencrypt' => "https://acme-v02.api.letsencrypt.org/directory",
+        'letsencrypt_test' => "https://acme-staging-v02.api.letsencrypt.org/directory",
+        'zerossl' => "https://acme.zerossl.com/v2/DV90"
+    ];
 
-	private static $acmesh = "/root/.acme.sh/acme.sh";
+    private static $apiserver = "";
 
-	/**
-	 *
-	 * @var \PDOStatement
-	 */
-	private static $updcert_stmt = null;
+    private static $acmesh = "/root/.acme.sh/acme.sh";
 
-	/**
-	 *
-	 * @var \PDOStatement
-	 */
-	private static $upddom_stmt = null;
+    /**
+     *
+     * @var \PDOStatement
+     */
+    private static $updcert_stmt = null;
 
-	public static $no_inserttask = false;
+    /**
+     *
+     * @var \PDOStatement
+     */
+    private static $upddom_stmt = null;
 
-	/**
-	 * run the task
-	 *
-	 * @param boolean $internal
-	 * @return number
-	 */
-	public static function run($internal = false)
-	{
-		// usually, this is action is called from within the tasks-jobs
-		if (! defined('CRON_IS_FORCED') && ! defined('CRON_DEBUG_FLAG') && $internal == false) {
-			// Let's Encrypt cronjob is combined with regeneration of webserver configuration files.
-			// For debugging purposes you can use the --debug switch and the --force switch to run the cron manually.
-			// check whether we MIGHT need to run although there is no task to regenerate config-files
-			$issue_froxlor = self::issueFroxlorVhost();
-			$issue_domains = self::issueDomains();
-			$renew_froxlor = self::renewFroxlorVhost();
-			$renew_domains = self::renewDomains(true);
-			if ($issue_froxlor || !empty($issue_domains) || !empty($renew_froxlor) || $renew_domains) {
-				// insert task to generate certificates and vhost-configs
-				\Froxlor\System\Cronjob::inserttask(1);
-			}
-			return 0;
-		}
+    public static $no_inserttask = false;
 
-		// set server according to settings
-		self::$apiserver = 'https://acme-' . (Settings::Get('system.letsencryptca') == 'testing' ? 'staging-' : '') . 'v0' . \Froxlor\Settings::Get('system.leapiversion') . '.api.letsencrypt.org/directory';
+    /**
+     * run the task
+     *
+     * @param boolean $internal
+     * @return number
+     */
+    public static function run($internal = false)
+    {
+        // usually, this is action is called from within the tasks-jobs
+        if (! defined('CRON_IS_FORCED') && ! defined('CRON_DEBUG_FLAG') && $internal == false) {
+            // Let's Encrypt cronjob is combined with regeneration of webserver configuration files.
+            // For debugging purposes you can use the --debug switch and the --force switch to run the cron manually.
+            // check whether we MIGHT need to run although there is no task to regenerate config-files
+            $issue_froxlor = self::issueFroxlorVhost();
+            $issue_domains = self::issueDomains();
+            $renew_froxlor = self::renewFroxlorVhost();
+            $renew_domains = self::renewDomains(true);
+            if ($issue_froxlor || ! empty($issue_domains) || ! empty($renew_froxlor) || $renew_domains) {
+                // insert task to generate certificates and vhost-configs
+                \Froxlor\System\Cronjob::inserttask(1);
+            }
+            return 0;
+        }
 
-		// validate acme.sh installation
-		if (! self::checkInstall()) {
-			return - 1;
-		}
+        // set server according to settings
+        self::$apiserver = self::ACME_PROVIDER[Settings::Get('system.letsencryptca')];
 
-		self::checkUpgrade();
+        // validate acme.sh installation
+        if (! self::checkInstall()) {
+            return - 1;
+        }
 
-		// flag for re-generation of vhost files
-		$changedetected = 0;
+        self::checkUpgrade();
 
-		// prepare update sql
-		self::$updcert_stmt = Database::prepare("
+        // flag for re-generation of vhost files
+        $changedetected = 0;
+
+        // prepare update sql
+        self::$updcert_stmt = Database::prepare("
 			REPLACE INTO
 				`" . TABLE_PANEL_DOMAIN_SSL_SETTINGS . "`
 			SET
@@ -99,99 +105,99 @@ class AcmeSh extends \Froxlor\Cron\FroxlorCron
 				`expirationdate` = :expirationdate
 		");
 
-		// prepare domain update sql
-		self::$upddom_stmt = Database::prepare("UPDATE `" . TABLE_PANEL_DOMAINS . "` SET `ssl_redirect` = '1' WHERE `id` = :domainid");
+        // prepare domain update sql
+        self::$upddom_stmt = Database::prepare("UPDATE `" . TABLE_PANEL_DOMAINS . "` SET `ssl_redirect` = '1' WHERE `id` = :domainid");
 
-		// check whether there are certificates to issue
-		$issue_froxlor = self::issueFroxlorVhost();
-		$issue_domains = self::issueDomains();
+        // check whether there are certificates to issue
+        $issue_froxlor = self::issueFroxlorVhost();
+        $issue_domains = self::issueDomains();
 
-		// first - generate LE for system-vhost if enabled
-		if ($issue_froxlor) {
-			// build row
-			$certrow = array(
-				'loginname' => 'froxlor.panel',
-				'domain' => Settings::Get('system.hostname'),
-				'domainid' => 0,
-				'documentroot' => \Froxlor\Froxlor::getInstallDir(),
-				'leprivatekey' => Settings::Get('system.leprivatekey'),
-				'lepublickey' => Settings::Get('system.lepublickey'),
-				'leregistered' => Settings::Get('system.leregistered'),
-				'ssl_redirect' => Settings::Get('system.le_froxlor_redirect'),
-				'expirationdate' => null,
-				'ssl_cert_file' => null,
-				'ssl_key_file' => null,
-				'ssl_ca_file' => null,
-				'ssl_csr_file' => null,
-				'id' => null
-			);
+        // first - generate LE for system-vhost if enabled
+        if ($issue_froxlor) {
+            // build row
+            $certrow = array(
+                'loginname' => 'froxlor.panel',
+                'domain' => Settings::Get('system.hostname'),
+                'domainid' => 0,
+                'documentroot' => \Froxlor\Froxlor::getInstallDir(),
+                'leprivatekey' => Settings::Get('system.leprivatekey'),
+                'lepublickey' => Settings::Get('system.lepublickey'),
+                'leregistered' => Settings::Get('system.leregistered'),
+                'ssl_redirect' => Settings::Get('system.le_froxlor_redirect'),
+                'expirationdate' => null,
+                'ssl_cert_file' => null,
+                'ssl_key_file' => null,
+                'ssl_ca_file' => null,
+                'ssl_csr_file' => null,
+                'id' => null
+            );
 
-			// add to queue
-			$issue_domains[] = $certrow;
-		}
+            // add to queue
+            $issue_domains[] = $certrow;
+        }
 
-		if (count($issue_domains)) {
-			FroxlorLogger::getInstanceOf()->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Requesting " . count($issue_domains) . " new Let's Encrypt certificates");
-			self::runIssueFor($issue_domains);
-			$changedetected = 1;
-		}
+        if (count($issue_domains)) {
+            FroxlorLogger::getInstanceOf()->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Requesting " . count($issue_domains) . " new Let's Encrypt certificates");
+            self::runIssueFor($issue_domains);
+            $changedetected = 1;
+        }
 
-		// compare file-system certificates with the ones in our database
-		// and update if needed
-		$renew_froxlor = self::renewFroxlorVhost();
-		$renew_domains = self::renewDomains();
+        // compare file-system certificates with the ones in our database
+        // and update if needed
+        $renew_froxlor = self::renewFroxlorVhost();
+        $renew_domains = self::renewDomains();
 
-		if ($renew_froxlor) {
-			// build row
-			$certrow = array(
-				'loginname' => 'froxlor.panel',
-				'domain' => Settings::Get('system.hostname'),
-				'domainid' => 0,
-				'documentroot' => \Froxlor\Froxlor::getInstallDir(),
-				'leprivatekey' => Settings::Get('system.leprivatekey'),
-				'lepublickey' => Settings::Get('system.lepublickey'),
-				'leregistered' => Settings::Get('system.leregistered'),
-				'ssl_redirect' => Settings::Get('system.le_froxlor_redirect'),
-				'expirationdate' => is_array($renew_froxlor) ? $renew_froxlor['expirationdate'] : date('Y-m-d H:i:s', 0),
-				'ssl_cert_file' => is_array($renew_froxlor) ? $renew_froxlor['ssl_cert_file'] : null,
-				'ssl_key_file' => is_array($renew_froxlor) ? $renew_froxlor['ssl_key_file'] : null,
-				'ssl_ca_file' => is_array($renew_froxlor) ? $renew_froxlor['ssl_ca_file'] : null,
-				'ssl_csr_file' => is_array($renew_froxlor) ? $renew_froxlor['ssl_csr_file'] : null,
-				'id' => is_array($renew_froxlor) ? $renew_froxlor['id'] : null
-			);
-			$renew_domains[] = $certrow;
-		}
+        if ($renew_froxlor) {
+            // build row
+            $certrow = array(
+                'loginname' => 'froxlor.panel',
+                'domain' => Settings::Get('system.hostname'),
+                'domainid' => 0,
+                'documentroot' => \Froxlor\Froxlor::getInstallDir(),
+                'leprivatekey' => Settings::Get('system.leprivatekey'),
+                'lepublickey' => Settings::Get('system.lepublickey'),
+                'leregistered' => Settings::Get('system.leregistered'),
+                'ssl_redirect' => Settings::Get('system.le_froxlor_redirect'),
+                'expirationdate' => is_array($renew_froxlor) ? $renew_froxlor['expirationdate'] : date('Y-m-d H:i:s', 0),
+                'ssl_cert_file' => is_array($renew_froxlor) ? $renew_froxlor['ssl_cert_file'] : null,
+                'ssl_key_file' => is_array($renew_froxlor) ? $renew_froxlor['ssl_key_file'] : null,
+                'ssl_ca_file' => is_array($renew_froxlor) ? $renew_froxlor['ssl_ca_file'] : null,
+                'ssl_csr_file' => is_array($renew_froxlor) ? $renew_froxlor['ssl_csr_file'] : null,
+                'id' => is_array($renew_froxlor) ? $renew_froxlor['id'] : null
+            );
+            $renew_domains[] = $certrow;
+        }
 
-		foreach ($renew_domains as $domain) {
-			$cronlog = FroxlorLogger::getInstanceOf(array(
-				'loginname' => $domain['loginname'],
-				'adminsession' => 0
-			));
-			if (defined('CRON_IS_FORCED') || self::checkFsFilesAreNewer($domain['domain'], $domain['expirationdate'])) {
-				self::certToDb($domain, $cronlog, array());
-				$changedetected = 1;
-			}
-		}
+        foreach ($renew_domains as $domain) {
+            $cronlog = FroxlorLogger::getInstanceOf(array(
+                'loginname' => $domain['loginname'],
+                'adminsession' => 0
+            ));
+            if (defined('CRON_IS_FORCED') || self::checkFsFilesAreNewer($domain['domain'], $domain['expirationdate'])) {
+                self::certToDb($domain, $cronlog, array());
+                $changedetected = 1;
+            }
+        }
 
-		// If we have a change in a certificate, we need to update the webserver - configs
-		// This is easiest done by just creating a new task ;)
-		if ($changedetected) {
-			if (self::$no_inserttask == false) {
-				\Froxlor\System\Cronjob::inserttask(1);
-			}
-			FroxlorLogger::getInstanceOf()->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Let's Encrypt certificates have been updated");
-		} else {
-			FroxlorLogger::getInstanceOf()->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "No new certificates or certificate updates found");
-		}
-	}
+        // If we have a change in a certificate, we need to update the webserver - configs
+        // This is easiest done by just creating a new task ;)
+        if ($changedetected) {
+            if (self::$no_inserttask == false) {
+                \Froxlor\System\Cronjob::inserttask(1);
+            }
+            FroxlorLogger::getInstanceOf()->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Let's Encrypt certificates have been updated");
+        } else {
+            FroxlorLogger::getInstanceOf()->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "No new certificates or certificate updates found");
+        }
+    }
 
-	/**
-	 * issue certificates for a list of domains
-	 */
-	private static function runIssueFor($certrows = array())
-	{
-		// prepare aliasdomain-check
-		$aliasdomains_stmt = Database::prepare("
+    /**
+     * issue certificates for a list of domains
+     */
+    private static function runIssueFor($certrows = array())
+    {
+        // prepare aliasdomain-check
+        $aliasdomains_stmt = Database::prepare("
 			SELECT
 				dom.`id` as domainid,
 				dom.`domain`,
@@ -202,216 +208,216 @@ class AcmeSh extends \Froxlor\Cron\FroxlorCron
 				AND dom.`letsencrypt` = 1
 				AND dom.`iswildcarddomain` = 0
 		");
-		// iterate through all domains
-		foreach ($certrows as $certrow) {
-			// set logger to corresponding loginname for the log to appear in the users system-log
-			$cronlog = FroxlorLogger::getInstanceOf(array(
-				'loginname' => $certrow['loginname'],
-				'adminsession' => 0
-			));
-			// Only issue let's encrypt certificate if no broken ssl_redirect is enabled
-			if ($certrow['ssl_redirect'] != 2) {
-				$do_force = false;
-				if (! empty($certrow['ssl_cert_file']) && empty($certrow['expirationdate'])) {
-					// domain changed (SAN or similar)
-					$do_force = true;
-					$cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Re-creating certificate for " . $certrow['domain']);
-				} else {
-					$cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Creating certificate for " . $certrow['domain']);
-				}
-				$cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Adding common-name: " . $certrow['domain']);
-				$domains = array(
-					strtolower($certrow['domain'])
-				);
-				// add www.<domain> to SAN list
-				if ($certrow['wwwserveralias'] == 1) {
-					$cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Adding SAN entry: www." . $certrow['domain']);
-					$domains[] = strtolower('www.' . $certrow['domain']);
-				}
-				if ($certrow['domainid'] == 0) {
-					$froxlor_aliases = Settings::Get('system.froxloraliases');
-					if (! empty($froxlor_aliases)) {
-						$froxlor_aliases = explode(",", $froxlor_aliases);
-						foreach ($froxlor_aliases as $falias) {
-							if (\Froxlor\Validate\Validate::validateDomain(trim($falias))) {
-								$cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Adding SAN entry: " . strtolower(trim($falias)));
-								$domains[] = strtolower(trim($falias));
-							}
-						}
-					}
-				} else {
-					// add alias domains (and possibly www.<aliasdomain>) to SAN list
-					Database::pexecute($aliasdomains_stmt, array(
-						'id' => $certrow['domainid']
-					));
-					$aliasdomains = $aliasdomains_stmt->fetchAll(\PDO::FETCH_ASSOC);
-					foreach ($aliasdomains as $aliasdomain) {
-						$cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Adding SAN entry: " . $aliasdomain['domain']);
-						$domains[] = strtolower($aliasdomain['domain']);
-						if ($aliasdomain['wwwserveralias'] == 1) {
-							$cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Adding SAN entry: www." . $aliasdomain['domain']);
-							$domains[] = strtolower('www.' . $aliasdomain['domain']);
-						}
-					}
-				}
+        // iterate through all domains
+        foreach ($certrows as $certrow) {
+            // set logger to corresponding loginname for the log to appear in the users system-log
+            $cronlog = FroxlorLogger::getInstanceOf(array(
+                'loginname' => $certrow['loginname'],
+                'adminsession' => 0
+            ));
+            // Only issue let's encrypt certificate if no broken ssl_redirect is enabled
+            if ($certrow['ssl_redirect'] != 2) {
+                $do_force = false;
+                if (! empty($certrow['ssl_cert_file']) && empty($certrow['expirationdate'])) {
+                    // domain changed (SAN or similar)
+                    $do_force = true;
+                    $cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Re-creating certificate for " . $certrow['domain']);
+                } else {
+                    $cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Creating certificate for " . $certrow['domain']);
+                }
+                $cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Adding common-name: " . $certrow['domain']);
+                $domains = array(
+                    strtolower($certrow['domain'])
+                );
+                // add www.<domain> to SAN list
+                if ($certrow['wwwserveralias'] == 1) {
+                    $cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Adding SAN entry: www." . $certrow['domain']);
+                    $domains[] = strtolower('www.' . $certrow['domain']);
+                }
+                if ($certrow['domainid'] == 0) {
+                    $froxlor_aliases = Settings::Get('system.froxloraliases');
+                    if (! empty($froxlor_aliases)) {
+                        $froxlor_aliases = explode(",", $froxlor_aliases);
+                        foreach ($froxlor_aliases as $falias) {
+                            if (\Froxlor\Validate\Validate::validateDomain(trim($falias))) {
+                                $cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Adding SAN entry: " . strtolower(trim($falias)));
+                                $domains[] = strtolower(trim($falias));
+                            }
+                        }
+                    }
+                } else {
+                    // add alias domains (and possibly www.<aliasdomain>) to SAN list
+                    Database::pexecute($aliasdomains_stmt, array(
+                        'id' => $certrow['domainid']
+                    ));
+                    $aliasdomains = $aliasdomains_stmt->fetchAll(\PDO::FETCH_ASSOC);
+                    foreach ($aliasdomains as $aliasdomain) {
+                        $cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Adding SAN entry: " . $aliasdomain['domain']);
+                        $domains[] = strtolower($aliasdomain['domain']);
+                        if ($aliasdomain['wwwserveralias'] == 1) {
+                            $cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Adding SAN entry: www." . $aliasdomain['domain']);
+                            $domains[] = strtolower('www.' . $aliasdomain['domain']);
+                        }
+                    }
+                }
 
-				self::validateDns($domains, $certrow['domainid'], $cronlog);
+                self::validateDns($domains, $certrow['domainid'], $cronlog);
 
-				self::runAcmeSh($certrow, $domains, $cronlog, $do_force);
-			} else {
-				$cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_WARNING, "Skipping Let's Encrypt generation for " . $certrow['domain'] . " due to an enabled ssl_redirect");
-			}
-		}
-	}
+                self::runAcmeSh($certrow, $domains, $cronlog, $do_force);
+            } else {
+                $cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_WARNING, "Skipping Let's Encrypt generation for " . $certrow['domain'] . " due to an enabled ssl_redirect");
+            }
+        }
+    }
 
-	/**
-	 * validate dns (A / AAAA record) of domain against known system ips
-	 *
-	 * @param array $domains
-	 * @param int $domain_id
-	 * @param FroxlorLogger $cronlog
-	 */
-	private static function validateDns(array &$domains, $domain_id, &$cronlog)
-	{
-		if (Settings::Get('system.le_domain_dnscheck') == '1' && ! empty($domains)) {
-			$loop_domains = $domains;
-			// ips according to our system
-			$our_ips = Domain::getIpsOfDomain($domain_id);
-			foreach ($loop_domains as $idx => $domain) {
-				$cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Validating DNS of " . $domain);
-				// ips accordint to NS
-				$domain_ips = PhpHelper::gethostbynamel6($domain);
-				if ($domain_ips == false || count(array_intersect($our_ips, $domain_ips)) <= 0) {
-					// no common ips...
-					$cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_WARNING, "Skipping Let's Encrypt generation for " . $domain . " due to no system known IP address via DNS check");
-					unset($domains[$idx]);
-				}
-			}
-		}
-	}
+    /**
+     * validate dns (A / AAAA record) of domain against known system ips
+     *
+     * @param array $domains
+     * @param int $domain_id
+     * @param FroxlorLogger $cronlog
+     */
+    private static function validateDns(array &$domains, $domain_id, &$cronlog)
+    {
+        if (Settings::Get('system.le_domain_dnscheck') == '1' && ! empty($domains)) {
+            $loop_domains = $domains;
+            // ips according to our system
+            $our_ips = Domain::getIpsOfDomain($domain_id);
+            foreach ($loop_domains as $idx => $domain) {
+                $cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Validating DNS of " . $domain);
+                // ips accordint to NS
+                $domain_ips = PhpHelper::gethostbynamel6($domain);
+                if ($domain_ips == false || count(array_intersect($our_ips, $domain_ips)) <= 0) {
+                    // no common ips...
+                    $cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_WARNING, "Skipping Let's Encrypt generation for " . $domain . " due to no system known IP address via DNS check");
+                    unset($domains[$idx]);
+                }
+            }
+        }
+    }
 
-	private static function runAcmeSh(array $certrow, array $domains, &$cronlog = null, $force = false)
-	{
-		if (! empty($domains)) {
+    private static function runAcmeSh(array $certrow, array $domains, &$cronlog = null, $force = false)
+    {
+        if (! empty($domains)) {
 
-			$acmesh_cmd = self::$acmesh . " --server " . self::$apiserver . " --issue -d " . implode(" -d ", $domains);
-			// challenge path
-			$acmesh_cmd .= " -w " . Settings::Get('system.letsencryptchallengepath');
-			if (Settings::Get('system.leecc') > 0) {
-				// ecc certificate
-				$acmesh_cmd .= " --keylength ec-" . Settings::Get('system.leecc');
-			} else {
-				$acmesh_cmd .= " --keylength " . Settings::Get('system.letsencryptkeysize');
-			}
-			if (Settings::Get('system.letsencryptreuseold') != '1') {
-				$acmesh_cmd .= " --always-force-new-domain-key";
-			}
-			if (Settings::Get('system.letsencryptca') == 'testing') {
-				$acmesh_cmd .= " --staging";
-			}
-			if ($force) {
-				$acmesh_cmd .= " --force";
-			}
-			if (defined('CRON_DEBUG_FLAG')) {
-				$acmesh_cmd .= " --debug";
-			}
+            $acmesh_cmd = self::$acmesh . " --server " . self::$apiserver . " --issue -d " . implode(" -d ", $domains);
+            // challenge path
+            $acmesh_cmd .= " -w " . Settings::Get('system.letsencryptchallengepath');
+            if (Settings::Get('system.leecc') > 0) {
+                // ecc certificate
+                $acmesh_cmd .= " --keylength ec-" . Settings::Get('system.leecc');
+            } else {
+                $acmesh_cmd .= " --keylength " . Settings::Get('system.letsencryptkeysize');
+            }
+            if (Settings::Get('system.letsencryptreuseold') != '1') {
+                $acmesh_cmd .= " --always-force-new-domain-key";
+            }
+            if (Settings::Get('system.letsencryptca') == 'letsencrypt_test') {
+                $acmesh_cmd .= " --staging";
+            }
+            if ($force) {
+                $acmesh_cmd .= " --force";
+            }
+            if (defined('CRON_DEBUG_FLAG')) {
+                $acmesh_cmd .= " --debug";
+            }
 
-			$acme_result = \Froxlor\FileDir::safe_exec($acmesh_cmd);
-			// debug output of acme.sh run
-			$cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_DEBUG, implode("\n", $acme_result));
+            $acme_result = \Froxlor\FileDir::safe_exec($acmesh_cmd);
+            // debug output of acme.sh run
+            $cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_DEBUG, implode("\n", $acme_result));
 
-			self::certToDb($certrow, $cronlog, $acme_result);
-		}
-	}
+            self::certToDb($certrow, $cronlog, $acme_result);
+        }
+    }
 
-	private static function certToDb($certrow, &$cronlog, $acme_result)
-	{
-		$return = array();
-		self::readCertificateToVar(strtolower($certrow['domain']), $return, $cronlog);
+    private static function certToDb($certrow, &$cronlog, $acme_result)
+    {
+        $return = array();
+        self::readCertificateToVar(strtolower($certrow['domain']), $return, $cronlog);
 
-		if (! empty($return['crt'])) {
+        if (! empty($return['crt'])) {
 
-			$newcert = openssl_x509_parse($return['crt']);
+            $newcert = openssl_x509_parse($return['crt']);
 
-			if ($newcert) {
-				// Store the new data
-				Database::pexecute(self::$updcert_stmt, array(
-					'id' => $certrow['id'],
-					'domainid' => $certrow['domainid'],
-					'crt' => $return['crt'],
-					'key' => $return['key'],
-					'ca' => $return['chain'],
-					'chain' => $return['chain'],
-					'csr' => $return['csr'],
-					'fullchain' => $return['fullchain'],
-					'expirationdate' => date('Y-m-d H:i:s', $newcert['validTo_time_t'])
-				));
+            if ($newcert) {
+                // Store the new data
+                Database::pexecute(self::$updcert_stmt, array(
+                    'id' => $certrow['id'],
+                    'domainid' => $certrow['domainid'],
+                    'crt' => $return['crt'],
+                    'key' => $return['key'],
+                    'ca' => $return['chain'],
+                    'chain' => $return['chain'],
+                    'csr' => $return['csr'],
+                    'fullchain' => $return['fullchain'],
+                    'expirationdate' => date('Y-m-d H:i:s', $newcert['validTo_time_t'])
+                ));
 
-				if ($certrow['ssl_redirect'] == 3) {
-					Database::pexecute(self::$upddom_stmt, array(
-						'domainid' => $certrow['domainid']
-					));
-				}
+                if ($certrow['ssl_redirect'] == 3) {
+                    Database::pexecute(self::$upddom_stmt, array(
+                        'domainid' => $certrow['domainid']
+                    ));
+                }
 
-				$cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Updated Let's Encrypt certificate for " . $certrow['domain']);
-			} else {
-				$cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_ERR, "Got non-successful Let's Encrypt response for " . $certrow['domain'] . ":\n" . implode("\n", $acme_result));
-			}
-		} else {
-			$cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_ERR, "Could not get Let's Encrypt certificate for " . $certrow['domain'] . ":\n" . implode("\n", $acme_result));
-		}
-	}
+                $cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Updated Let's Encrypt certificate for " . $certrow['domain']);
+            } else {
+                $cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_ERR, "Got non-successful Let's Encrypt response for " . $certrow['domain'] . ":\n" . implode("\n", $acme_result));
+            }
+        } else {
+            $cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_ERR, "Could not get Let's Encrypt certificate for " . $certrow['domain'] . ":\n" . implode("\n", $acme_result));
+        }
+    }
 
-	/**
-	 * check whether we need to issue a new certificate for froxlor itself
-	 *
-	 * @return boolean
-	 */
-	private static function issueFroxlorVhost()
-	{
-		if (Settings::Get('system.le_froxlor_enabled') == '1') {
-			// let's encrypt is enabled, now check whether we have a certificate
-			$froxlor_ssl_settings_stmt = Database::prepare("
+    /**
+     * check whether we need to issue a new certificate for froxlor itself
+     *
+     * @return boolean
+     */
+    private static function issueFroxlorVhost()
+    {
+        if (Settings::Get('system.le_froxlor_enabled') == '1') {
+            // let's encrypt is enabled, now check whether we have a certificate
+            $froxlor_ssl_settings_stmt = Database::prepare("
 				SELECT * FROM `" . TABLE_PANEL_DOMAIN_SSL_SETTINGS . "`
 				WHERE `domainid` = '0'
 			");
-			$froxlor_ssl = Database::pexecute_first($froxlor_ssl_settings_stmt);
-			// also check for possible existing certificate
-			if (! $froxlor_ssl && ! self::checkFsFilesAreNewer(Settings::Get('system.hostname'), date('Y-m-d H:i:s'))) {
-				return true;
-			}
-		}
-		return false;
-	}
+            $froxlor_ssl = Database::pexecute_first($froxlor_ssl_settings_stmt);
+            // also check for possible existing certificate
+            if (! $froxlor_ssl && ! self::checkFsFilesAreNewer(Settings::Get('system.hostname'), date('Y-m-d H:i:s'))) {
+                return true;
+            }
+        }
+        return false;
+    }
 
-	/**
-	 * check whether we need to renew-check the certificate for froxlor itself
-	 *
-	 * @return boolean
-	 */
-	private static function renewFroxlorVhost()
-	{
-		if (Settings::Get('system.le_froxlor_enabled') == '1') {
-			// let's encrypt is enabled, now check whether we have a certificate
-			$froxlor_ssl_settings_stmt = Database::prepare("
+    /**
+     * check whether we need to renew-check the certificate for froxlor itself
+     *
+     * @return boolean
+     */
+    private static function renewFroxlorVhost()
+    {
+        if (Settings::Get('system.le_froxlor_enabled') == '1') {
+            // let's encrypt is enabled, now check whether we have a certificate
+            $froxlor_ssl_settings_stmt = Database::prepare("
 				SELECT * FROM `" . TABLE_PANEL_DOMAIN_SSL_SETTINGS . "`
 				WHERE `domainid` = '0'
 			");
-			$froxlor_ssl = Database::pexecute_first($froxlor_ssl_settings_stmt);
-			// also check for possible existing certificate
-			if ($froxlor_ssl && self::checkFsFilesAreNewer(Settings::Get('system.hostname'), $froxlor_ssl['expirationdate'])) {
-				return $froxlor_ssl;
-			}
-		}
-		return false;
-	}
+            $froxlor_ssl = Database::pexecute_first($froxlor_ssl_settings_stmt);
+            // also check for possible existing certificate
+            if ($froxlor_ssl && self::checkFsFilesAreNewer(Settings::Get('system.hostname'), $froxlor_ssl['expirationdate'])) {
+                return $froxlor_ssl;
+            }
+        }
+        return false;
+    }
 
-	/**
-	 * get a list of domains that have a lets encrypt certificate (possible renew)
-	 */
-	private static function renewDomains($check = false)
-	{
-		$certificates_stmt = Database::query("
+    /**
+     * get a list of domains that have a lets encrypt certificate (possible renew)
+     */
+    private static function renewDomains($check = false)
+    {
+        $certificates_stmt = Database::query("
 			SELECT
 				domssl.`id`,
 				domssl.`domainid`,
@@ -435,27 +441,27 @@ class AcmeSh extends \Froxlor\Cron\FroxlorCron
 				AND dom.`aliasdomain` IS NULL
 				AND dom.`iswildcarddomain` = 0
 		");
-		$renew_certs = $certificates_stmt->fetchAll(\PDO::FETCH_ASSOC);
-		if ($renew_certs) {
-			if ($check) {
-				foreach ($renew_certs as $cert) {
-					if (self::checkFsFilesAreNewer($cert['domain'], $cert['expirationdate'])) {
-						return true;
-					}
-				}
-				return false;
-			}
-			return $renew_certs;
-		}
-		return array();
-	}
+        $renew_certs = $certificates_stmt->fetchAll(\PDO::FETCH_ASSOC);
+        if ($renew_certs) {
+            if ($check) {
+                foreach ($renew_certs as $cert) {
+                    if (self::checkFsFilesAreNewer($cert['domain'], $cert['expirationdate'])) {
+                        return true;
+                    }
+                }
+                return false;
+            }
+            return $renew_certs;
+        }
+        return array();
+    }
 
-	/**
-	 * get a list of domains that require a new certificate (issue)
-	 */
-	private static function issueDomains()
-	{
-		$certificates_stmt = Database::query("
+    /**
+     * get a list of domains that require a new certificate (issue)
+     */
+    private static function issueDomains()
+    {
+        $certificates_stmt = Database::query("
 			SELECT
 				domssl.`id`,
 				domssl.`domainid`,
@@ -488,125 +494,125 @@ class AcmeSh extends \Froxlor\Cron\FroxlorCron
 				AND dom.`iswildcarddomain` = 0
 				AND domssl.`expirationdate` IS NULL
 		");
-		$customer_ssl = $certificates_stmt->fetchAll(\PDO::FETCH_ASSOC);
-		if ($customer_ssl) {
-			return $customer_ssl;
-		}
-		return array();
-	}
+        $customer_ssl = $certificates_stmt->fetchAll(\PDO::FETCH_ASSOC);
+        if ($customer_ssl) {
+            return $customer_ssl;
+        }
+        return array();
+    }
 
-	private static function checkFsFilesAreNewer($domain, $cert_date = 0)
-	{
-		$certificate_folder = self::getWorkingDirFromEnv(strtolower($domain));
-		$ssl_file = \Froxlor\FileDir::makeCorrectFile($certificate_folder . '/' . strtolower($domain) . '.cer');
+    private static function checkFsFilesAreNewer($domain, $cert_date = 0)
+    {
+        $certificate_folder = self::getWorkingDirFromEnv(strtolower($domain));
+        $ssl_file = \Froxlor\FileDir::makeCorrectFile($certificate_folder . '/' . strtolower($domain) . '.cer');
 
-		if (is_dir($certificate_folder) && file_exists($ssl_file) && is_readable($ssl_file)) {
-			$cert_data = openssl_x509_parse(file_get_contents($ssl_file));
-			if ($cert_data && $cert_data['validTo_time_t'] > strtotime($cert_date)) {
-				return true;
-			}
-		}
-		return false;
-	}
+        if (is_dir($certificate_folder) && file_exists($ssl_file) && is_readable($ssl_file)) {
+            $cert_data = openssl_x509_parse(file_get_contents($ssl_file));
+            if ($cert_data && $cert_data['validTo_time_t'] > strtotime($cert_date)) {
+                return true;
+            }
+        }
+        return false;
+    }
 
-	public static function getWorkingDirFromEnv($domain = "", $forced_noecc = false)
-	{
-		if (Settings::Get('system.leecc') > 0 && ! $forced_noecc) {
-			$domain .= "_ecc";
-		}
-		$env_file = FileDir::makeCorrectFile(dirname(self::$acmesh) . '/acme.sh.env');
-		if (file_exists($env_file)) {
-			$output = [];
-			$cut = <<<EOC
-cut -d'"' -f2
-EOC;
-			exec('grep "LE_WORKING_DIR" ' . escapeshellarg($env_file) . ' | ' . $cut, $output);
-			if (is_array($output) && ! empty($output) && isset($output[0]) && ! empty($output[0])) {
-				return FileDir::makeCorrectDir($output[0] . "/" . $domain);
-			}
-		}
-		return FileDir::makeCorrectDir(dirname(self::$acmesh) . "/" . $domain);
-	}
+    public static function getWorkingDirFromEnv($domain = "", $forced_noecc = false)
+    {
+        if (Settings::Get('system.leecc') > 0 && ! $forced_noecc) {
+            $domain .= "_ecc";
+        }
+        $env_file = FileDir::makeCorrectFile(dirname(self::$acmesh) . '/acme.sh.env');
+        if (file_exists($env_file)) {
+            $output = [];
+            $cut = <<<EOC
+            cut -d'"' -f2
+            EOC;
+            exec('grep "LE_WORKING_DIR" ' . escapeshellarg($env_file) . ' | ' . $cut, $output);
+            if (is_array($output) && ! empty($output) && isset($output[0]) && ! empty($output[0])) {
+                return FileDir::makeCorrectDir($output[0] . "/" . $domain);
+            }
+        }
+        return FileDir::makeCorrectDir(dirname(self::$acmesh) . "/" . $domain);
+    }
 
-	public static function getAcmeSh()
-	{
-		return self::$acmesh;
-	}
+    public static function getAcmeSh()
+    {
+        return self::$acmesh;
+    }
 
-	/**
-	 * get certificate files from filesystem and store in $return array
-	 *
-	 * @param string $domain
-	 * @param array $return
-	 * @param object $cronlog
-	 */
-	private static function readCertificateToVar($domain, &$return, &$cronlog)
-	{
-		$certificate_folder = self::getWorkingDirFromEnv($domain);
-		$certificate_folder_noecc = null;
-		if (Settings::Get('system.leecc') > 0) {
-			$certificate_folder_noecc = self::getWorkingDirFromEnv($domain, true);
-		}
-		$certificate_folder = \Froxlor\FileDir::makeCorrectDir($certificate_folder);
+    /**
+     * get certificate files from filesystem and store in $return array
+     *
+     * @param string $domain
+     * @param array $return
+     * @param object $cronlog
+     */
+    private static function readCertificateToVar($domain, &$return, &$cronlog)
+    {
+        $certificate_folder = self::getWorkingDirFromEnv($domain);
+        $certificate_folder_noecc = null;
+        if (Settings::Get('system.leecc') > 0) {
+            $certificate_folder_noecc = self::getWorkingDirFromEnv($domain, true);
+        }
+        $certificate_folder = \Froxlor\FileDir::makeCorrectDir($certificate_folder);
 
-		if (is_dir($certificate_folder) || is_dir($certificate_folder_noecc)) {
-			foreach ([
-				'crt' => $domain . '.cer',
-				'key' => $domain . '.key',
-				'chain' => 'ca.cer',
-				'fullchain' => 'fullchain.cer',
-				'csr' => $domain . '.csr'
-			] as $index => $sslfile) {
-				$ssl_file = \Froxlor\FileDir::makeCorrectFile($certificate_folder . '/' . $sslfile);
-				if (file_exists($ssl_file)) {
-					$return[$index] = file_get_contents($ssl_file);
-				} else {
-					if (! empty($certificate_folder_noecc)) {
-						$ssl_file_fb = \Froxlor\FileDir::makeCorrectFile($certificate_folder_noecc . '/' . $sslfile);
-						if (file_exists($ssl_file_fb)) {
-							$cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_WARNING, "ECC certificates activated but found only non-ecc file");
-							$return[$index] = file_get_contents($ssl_file_fb);
-							continue;
-						}
-					}
-					$cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_ERR, "Could not find file '" . $sslfile . "' in '" . $certificate_folder . "'");
-					$return[$index] = null;
-				}
-			}
-		} else {
-			$cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_ERR, "Could not find certificate-folder '" . $certificate_folder . "'");
-		}
-	}
+        if (is_dir($certificate_folder) || is_dir($certificate_folder_noecc)) {
+            foreach ([
+                'crt' => $domain . '.cer',
+                'key' => $domain . '.key',
+                'chain' => 'ca.cer',
+                'fullchain' => 'fullchain.cer',
+                'csr' => $domain . '.csr'
+            ] as $index => $sslfile) {
+                $ssl_file = \Froxlor\FileDir::makeCorrectFile($certificate_folder . '/' . $sslfile);
+                if (file_exists($ssl_file)) {
+                    $return[$index] = file_get_contents($ssl_file);
+                } else {
+                    if (! empty($certificate_folder_noecc)) {
+                        $ssl_file_fb = \Froxlor\FileDir::makeCorrectFile($certificate_folder_noecc . '/' . $sslfile);
+                        if (file_exists($ssl_file_fb)) {
+                            $cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_WARNING, "ECC certificates activated but found only non-ecc file");
+                            $return[$index] = file_get_contents($ssl_file_fb);
+                            continue;
+                        }
+                    }
+                    $cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_ERR, "Could not find file '" . $sslfile . "' in '" . $certificate_folder . "'");
+                    $return[$index] = null;
+                }
+            }
+        } else {
+            $cronlog->logAction(FroxlorLogger::CRON_ACTION, LOG_ERR, "Could not find certificate-folder '" . $certificate_folder . "'");
+        }
+    }
 
-	/**
-	 * install acme.sh if not found yet
-	 */
-	private static function checkInstall($tries = 0)
-	{
-		if (! file_exists(self::$acmesh) && $tries > 0) {
-			FroxlorLogger::getInstanceOf()->logAction(FroxlorLogger::CRON_ACTION, LOG_ERR, "Download/installation of acme.sh seems to have failed. Re-run cronjob to try again or install manually to '" . self::$acmesh . "'");
-			echo PHP_EOL . "Download/installation of acme.sh seems to have failed. Re-run cronjob to try again or install manually to '" . self::$acmesh . "'" . PHP_EOL;
-			return false;
-		} else if (! file_exists(self::$acmesh)) {
-			FroxlorLogger::getInstanceOf()->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Could not find acme.sh - installing it to /root/.acme.sh/");
-			$return = false;
-			\Froxlor\FileDir::safe_exec("wget -O - https://get.acme.sh | sh", $return, array(
-				'|'
-			));
-			// check whether the installation worked
-			return self::checkInstall(++ $tries);
-		}
-		return true;
-	}
+    /**
+     * install acme.sh if not found yet
+     */
+    private static function checkInstall($tries = 0)
+    {
+        if (! file_exists(self::$acmesh) && $tries > 0) {
+            FroxlorLogger::getInstanceOf()->logAction(FroxlorLogger::CRON_ACTION, LOG_ERR, "Download/installation of acme.sh seems to have failed. Re-run cronjob to try again or install manually to '" . self::$acmesh . "'");
+            echo PHP_EOL . "Download/installation of acme.sh seems to have failed. Re-run cronjob to try again or install manually to '" . self::$acmesh . "'" . PHP_EOL;
+            return false;
+        } else if (! file_exists(self::$acmesh)) {
+            FroxlorLogger::getInstanceOf()->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Could not find acme.sh - installing it to /root/.acme.sh/");
+            $return = false;
+            \Froxlor\FileDir::safe_exec("wget -O - https://get.acme.sh | sh", $return, array(
+                '|'
+            ));
+            // check whether the installation worked
+            return self::checkInstall(++ $tries);
+        }
+        return true;
+    }
 
-	/**
-	 * run upgrade
-	 */
-	private static function checkUpgrade()
-	{
-		$acmesh_result = \Froxlor\FileDir::safe_exec(self::$acmesh . " --upgrade --auto-upgrade 0");
-		// check for activated cron
-		$acmesh_result2 = \Froxlor\FileDir::safe_exec(self::$acmesh . " --install-cronjob");
-		FroxlorLogger::getInstanceOf()->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Checking for LetsEncrypt client upgrades before renewing certificates:\n" . implode("\n", $acmesh_result) . "\n" . implode("\n", $acmesh_result2));
-	}
+    /**
+     * run upgrade
+     */
+    private static function checkUpgrade()
+    {
+        $acmesh_result = \Froxlor\FileDir::safe_exec(self::$acmesh . " --upgrade --auto-upgrade 0");
+        // check for activated cron
+        $acmesh_result2 = \Froxlor\FileDir::safe_exec(self::$acmesh . " --install-cronjob");
+        FroxlorLogger::getInstanceOf()->logAction(FroxlorLogger::CRON_ACTION, LOG_INFO, "Checking for LetsEncrypt client upgrades before renewing certificates:\n" . implode("\n", $acmesh_result) . "\n" . implode("\n", $acmesh_result2));
+    }
 }
diff --git a/lib/Froxlor/Froxlor.php b/lib/Froxlor/Froxlor.php
index 97277643..e9ccbe30 100644
--- a/lib/Froxlor/Froxlor.php
+++ b/lib/Froxlor/Froxlor.php
@@ -10,7 +10,7 @@ final class Froxlor
 	const VERSION = '0.10.26';
 
 	// Database version (YYYYMMDDC where C is a daily counter)
-	const DBVERSION = '202106160';
+	const DBVERSION = '202106270';
 
 	// Distribution branding-tag (used for Debian etc.)
 	const BRANDING = '';
diff --git a/lng/english.lng.php b/lng/english.lng.php
index 1283c6f4..117690d6 100644
--- a/lng/english.lng.php
+++ b/lng/english.lng.php
@@ -1839,8 +1839,8 @@ $lng['error']['sslredirectonlypossiblewithsslipport'] = 'Using Let\'s Encrypt is
 $lng['error']['nowildcardwithletsencrypt'] = 'Let\'s Encrypt cannot handle wildcard-domains using ACME in froxlor (requires dns-challenge), sorry. Please set the ServerAlias to WWW or disable it completely';
 $lng['panel']['letsencrypt'] = 'Using Let\'s encrypt';
 $lng['crondesc']['cron_letsencrypt'] = 'updating Let\'s Encrypt certificates';
-$lng['serversettings']['letsencryptca']['title'] = "Let's Encrypt environment";
-$lng['serversettings']['letsencryptca']['description'] = "Environment to be used for Let's Encrypt certificates.";
+$lng['serversettings']['letsencryptca']['title'] = "ACME environment";
+$lng['serversettings']['letsencryptca']['description'] = "Environment to be used for Let's Encrypt / ZeroSSL certificates.";
 $lng['serversettings']['letsencryptcountrycode']['title'] = "Let's Encrypt country code";
 $lng['serversettings']['letsencryptcountrycode']['description'] = "2 letter country code used to generate Let's Encrypt certificates.";
 $lng['serversettings']['letsencryptstate']['title'] = "Let's Encrypt state";
diff --git a/lng/german.lng.php b/lng/german.lng.php
index 13cdcb4d..1aeba318 100644
--- a/lng/german.lng.php
+++ b/lng/german.lng.php
@@ -1490,8 +1490,8 @@ $lng['error']['sslredirectonlypossiblewithsslipport'] = 'Die Nutzung von Let\'s
 $lng['error']['nowildcardwithletsencrypt'] = 'Let\'s Encrypt kann mittels ACME Wildcard-Domains nur via DNS validieren, sorry. Bitte den ServerAlias auf WWW setzen oder deaktivieren';
 $lng['panel']['letsencrypt'] = 'Benutzt Let\'s encrypt';
 $lng['crondesc']['cron_letsencrypt'] = 'Aktualisierung der Let\'s Encrypt Zertifikate';
-$lng['serversettings']['letsencryptca']['title'] = "Let's Encrypt Umgebung";
-$lng['serversettings']['letsencryptca']['description'] = "Let's Encrypt - Umgebung, welche genutzt wird um Zertifikate zu bestellen.";
+$lng['serversettings']['letsencryptca']['title'] = "ACME Umgebung";
+$lng['serversettings']['letsencryptca']['description'] = "Umgebung, welche genutzt wird um Zertifikate zu bestellen.";
 $lng['serversettings']['letsencryptcountrycode']['title'] = "Let's Encrypt Ländercode";
 $lng['serversettings']['letsencryptcountrycode']['description'] = "2 - stelliger Ländercode, welcher benutzt wird um Let's Encrypt - Zertifikate zu bestellen.";
 $lng['serversettings']['letsencryptstate']['title'] = "Let's Encrypt Bundesland";

From 79f0c8d28f7b2f8ed9ad739475fe47b28b2185a4 Mon Sep 17 00:00:00 2001
From: Daniel Schmitz <daniel@bashgeek.net>
Date: Mon, 28 Jun 2021 11:01:22 +0800
Subject: [PATCH 07/15] wip

---
 install/lib/class.FroxlorInstall.php | 16 ++++++++++------
 1 file changed, 10 insertions(+), 6 deletions(-)

diff --git a/install/lib/class.FroxlorInstall.php b/install/lib/class.FroxlorInstall.php
index aa9977e8..6b27e62a 100644
--- a/install/lib/class.FroxlorInstall.php
+++ b/install/lib/class.FroxlorInstall.php
@@ -28,7 +28,7 @@
  * @author Froxlor team <team@froxlor.org> (2010-)
  * @license GPLv2 http://files.froxlor.org/misc/COPYING.txt
  * @package Install
- *         
+ *
  */
 class FroxlorInstall
 {
@@ -784,7 +784,7 @@ class FroxlorInstall
 		}
 		// language selection
 		$language_options = '';
-		foreach ($this->_languages as $language_name => $language_file) {
+		foreach ($this->_languages as $language_file => $language_name) {
 			$language_options .= \Froxlor\UI\HTML::makeoption($language_name, $language_file, $this->_activelng, true, true);
 		}
 		// get language-form-template
@@ -867,19 +867,24 @@ class FroxlorInstall
 		}
 
 		// show list of available distro's
+		$distributions_select_data = [];
 		$distros = glob(\Froxlor\FileDir::makeCorrectDir(\Froxlor\Froxlor::getInstallDir() . '/lib/configfiles/') . '*.xml');
 		foreach ($distros as $_distribution) {
 			$dist = new \Froxlor\Config\ConfigParser($_distribution);
 			$dist_display = $dist->distributionName . " " . $dist->distributionCodename . " (" . $dist->distributionVersion . ")";
+			if (!array_key_exists($dist_display, $distributions_select_data)) {
+				$distributions_select_data[$dist_display] = '';
+			}
 			$distributions_select_data[$dist_display] .= str_replace(".xml", "", strtolower(basename($_distribution)));
 		}
 
 		// sort by distribution name
 		ksort($distributions_select_data);
 
+		$distributions_select = '';
 		foreach ($distributions_select_data as $dist_display => $dist_index) {
 			// create select-box-option
-			$distributions_select .= \Froxlor\UI\HTML::makeoption($dist_display, $dist_index, $this->_data['distribution']);
+			$distributions_select .= \Froxlor\UI\HTML::makeoption($dist_display, $dist_index, $this->_data['distribution'] ?? '');
 			// $this->_data['distribution']
 		}
 
@@ -947,7 +952,7 @@ class FroxlorInstall
 	 *        	optional css
 	 * @param string $type
 	 *        	optional type of input-box (default: text)
-	 *        	
+	 *
 	 * @return string
 	 */
 	private function _getSectionItemString($fieldname = null, $required = false, $style = "", $type = 'text')
@@ -994,7 +999,6 @@ class FroxlorInstall
 	 */
 	private function _getSectionItemSelectbox($fieldname = null, $options = null, $style = "")
 	{
-		$groupname = $this->_lng['install'][$groupname];
 		$fieldlabel = $this->_lng['install'][$fieldname];
 
 		$sectionitem = "";
@@ -1239,7 +1243,7 @@ class FroxlorInstall
 	 *
 	 * @param string $template
 	 *        	name of the template including subdirectory
-	 *        	
+	 *
 	 * @return string
 	 */
 	private function _getTemplate($template = null)

From 518ec202ab9f9d4b5f7c30c7e39bd2feae26656f Mon Sep 17 00:00:00 2001
From: Daniel Schmitz <daniel@bashgeek.net>
Date: Wed, 7 Jul 2021 13:26:15 +0800
Subject: [PATCH 08/15] wip

---
 .gitignore                                    |  3 +-
 actions/admin/settings/100.panel.php          | 18 ++++++
 install/froxlor.sql                           |  6 +-
 .../updates/froxlor/0.10/update_0.10.inc.php  | 12 +++-
 lib/Froxlor/SImExporter.php                   |  6 +-
 lib/Froxlor/Settings/Store.php                | 58 +++++++++++++++++++
 lib/Froxlor/UI/Data.php                       |  6 ++
 lib/Froxlor/UI/Fields.php                     |  9 +++
 lib/init.php                                  | 10 +---
 lng/english.lng.php                           |  6 ++
 .../admin/settings/settings_form_begin.tpl    |  2 +-
 templates/Sparkle/assets/css/main.css         |  6 ++
 templates/Sparkle/formfields/image.tpl        | 11 ++++
 13 files changed, 137 insertions(+), 16 deletions(-)
 create mode 100644 templates/Sparkle/formfields/image.tpl

diff --git a/.gitignore b/.gitignore
index 4e37d749..1b91d454 100644
--- a/.gitignore
+++ b/.gitignore
@@ -12,10 +12,9 @@ logs/*
 .well-known
 .idea
 *.iml
+img/
 
 !templates/Froxlor/
 !templates/Sparkle/
 !templates/misc/
-templates/Sparkle/assets/img/logo_custom.png
-templates/Sparkle/assets/img/logo_custom_login.png
 vendor/
diff --git a/actions/admin/settings/100.panel.php b/actions/admin/settings/100.panel.php
index 3485bbdf..e73c5183 100644
--- a/actions/admin/settings/100.panel.php
+++ b/actions/admin/settings/100.panel.php
@@ -296,6 +296,24 @@ return array(
 					'default' => '',
 					'save_method' => 'storeSettingField'
 				),
+				'panel_logo_image_header' => array(
+					'label' => $lng['serversettings']['logo_image_header'],
+					'settinggroup' => 'panel',
+					'varname' => 'logo_image_header',
+					'type' => 'image',
+					'image_name' => 'logo_header',
+					'default' => '',
+					'save_method' => 'storeSettingImage'
+				),
+				'panel_logo_image_login' => array(
+					'label' => $lng['serversettings']['logo_image_login'],
+					'settinggroup' => 'panel',
+					'varname' => 'logo_image_login',
+					'type' => 'image',
+					'image_name' => 'logo_login',
+					'default' => '',
+					'save_method' => 'storeSettingImage'
+				),
 			)
 		)
 	)
diff --git a/install/froxlor.sql b/install/froxlor.sql
index 64db3116..763a1fec 100644
--- a/install/froxlor.sql
+++ b/install/froxlor.sql
@@ -715,8 +715,10 @@ opcache.interned_strings_buffer'),
 	('panel', 'imprint_url', ''),
 	('panel', 'terms_url', ''),
 	('panel', 'privacy_url', ''),
+	('panel', 'logo_image_header', ''),
+	('panel', 'logo_image_login', ''),
 	('panel', 'version', '0.10.26'),
-	('panel', 'db_version', '202106270');
+	('panel', 'db_version', '202107070');
 
 
 DROP TABLE IF EXISTS `panel_tasks`;
@@ -933,7 +935,7 @@ CREATE TABLE IF NOT EXISTS `ftp_quotalimits` (
 
 
 
-INSERT INTO `ftp_quotalimits` (`name`, `quota_type`, `per_session`, `limit_type`, `bytes_in_avail`, `bytes_out_avail`, `bytes_xfer_avail`, `files_in_avail`, `files_out_avail`, `files_xfer_avail`) VALUES 
+INSERT INTO `ftp_quotalimits` (`name`, `quota_type`, `per_session`, `limit_type`, `bytes_in_avail`, `bytes_out_avail`, `bytes_xfer_avail`, `files_in_avail`, `files_out_avail`, `files_xfer_avail`) VALUES
 	('froxlor', 'user', 'false', 'hard', 0, 0, 0, 0, 0, 0);
 
 
diff --git a/install/updates/froxlor/0.10/update_0.10.inc.php b/install/updates/froxlor/0.10/update_0.10.inc.php
index 3f03dff2..278f6c43 100644
--- a/install/updates/froxlor/0.10/update_0.10.inc.php
+++ b/install/updates/froxlor/0.10/update_0.10.inc.php
@@ -14,7 +14,7 @@ use Froxlor\Settings;
  * @author Froxlor team <team@froxlor.org> (2010-)
  * @license GPLv2 http://files.froxlor.org/misc/COPYING.txt
  * @package Install
- *         
+ *
  */
 if (! defined('_CRON_UPDATE')) {
 	if (! defined('AREA') || (defined('AREA') && AREA != 'admin') || ! isset($userinfo['loginname']) || (isset($userinfo['loginname']) && $userinfo['loginname'] == '')) {
@@ -825,3 +825,13 @@ if (\Froxlor\Froxlor::isDatabaseVersion('202106160')) {
 
     \Froxlor\Froxlor::updateToDbVersion('202106270');
 }
+
+if (\Froxlor\Froxlor::isDatabaseVersion('202107070')) {
+
+    showUpdateStep("Adding custom logo image settings", true);
+    Settings::AddNew("panel.logo_image_header", '');
+    Settings::AddNew("panel.logo_image_login", '');
+    lastStepStatus(0);
+
+    \Froxlor\Froxlor::updateToDbVersion('202107070');
+}
diff --git a/lib/Froxlor/SImExporter.php b/lib/Froxlor/SImExporter.php
index 7120aaad..aca4dea7 100644
--- a/lib/Froxlor/SImExporter.php
+++ b/lib/Froxlor/SImExporter.php
@@ -16,9 +16,9 @@ use Froxlor\Database\Database;
  * @author Froxlor team <team@froxlor.org> (2018-)
  * @license GPLv2 http://files.froxlor.org/misc/COPYING.txt
  * @package Classes
- *         
+ *
  * @since 0.9.39
- *       
+ *
  */
 
 /**
@@ -70,12 +70,14 @@ class SImExporter
 				$_data[$index] = $row['value'];
 			}
 		}
+
 		// add checksum for validation
 		$_data['_sha'] = sha1(var_export($_data, true));
 		$_export = json_encode($_data, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES);
 		if (! $_export) {
 			throw new \Exception("Error exporting settings: " . json_last_error_msg());
 		}
+
 		return $_export;
 	}
 
diff --git a/lib/Froxlor/Settings/Store.php b/lib/Froxlor/Settings/Store.php
index e4a8035e..2441cdc6 100644
--- a/lib/Froxlor/Settings/Store.php
+++ b/lib/Froxlor/Settings/Store.php
@@ -367,4 +367,62 @@ class Store
 
 		return $returnvalue;
 	}
+
+	public static function storeSettingImage($fieldname, $fielddata)
+    {
+        if (isset($fielddata['settinggroup'], $fielddata['varname']) && is_array($fielddata) && $fielddata['settinggroup'] !== '' && $fielddata['varname'] !== '') {
+            $save_to = null;
+            $path = \Froxlor\Froxlor::getInstallDir().'/img/';
+
+            // New file?
+            if ($_FILES[$fieldname]['tmp_name']) {
+                // Make sure upload directory exists
+                if (!is_dir($path) && !mkdir($path, '0775')) {
+                    throw new \Exception("img directory does not exist and cannot be created");
+                }
+
+                // Make sure we can write to the upload directory
+                if (!is_writable($path)) {
+                    if (!chmod($path, '0775')) {
+                        throw new \Exception("Cannot write to img directory");
+                    }
+                }
+
+                // Determine file extension
+                $spl = explode('.', $_FILES[$fieldname]['name']);
+                $file_extension = strtolower(array_pop($spl));
+                unset($spl);
+
+                // Move file
+                if (!move_uploaded_file($_FILES[$fieldname]['tmp_name'], $path.$fielddata['image_name'].'.'.$file_extension)) {
+                    throw new \Exception("Unable to save image to img folder");
+                }
+
+                $save_to = 'img/'.$fielddata['image_name'].'.'.$file_extension.'?v='.time();
+            }
+
+            // Delete file?
+            if ($fielddata['value'] !== "" && array_key_exists($fieldname.'_delete', $_POST) && $_POST[$fieldname.'_delete']) {
+                @unlink($path . explode('?', $fielddata['value'], 2)[0]);
+                $save_to = '';
+            }
+
+            // Nothing changed
+            if ($save_to === null) {
+                return array(
+                    $fielddata['settinggroup'] . '.' . $fielddata['varname'] => $fielddata['value']
+                );
+            }
+
+            if (Settings::Set($fielddata['settinggroup'] . '.' . $fielddata['varname'], $save_to) === false) {
+                return false;
+            }
+
+            return array(
+                $fielddata['settinggroup'] . '.' . $fielddata['varname'] => $save_to
+            );
+        }
+
+        return false;
+    }
 }
diff --git a/lib/Froxlor/UI/Data.php b/lib/Froxlor/UI/Data.php
index a32ffa31..ee34f012 100644
--- a/lib/Froxlor/UI/Data.php
+++ b/lib/Froxlor/UI/Data.php
@@ -52,6 +52,12 @@ class Data
 		return $newfieldvalue;
 	}
 
+	public static function getFormFieldDataImage($fieldname, $fielddata, $input)
+    {
+        // We always make the system think we have new data to trigger the save function where we actually check everything
+        return time();
+    }
+
 	public static function manipulateFormFieldDataDate($fieldname, $fielddata, $newfieldvalue)
 	{
 		if (isset($fielddata['date_timestamp']) && $fielddata['date_timestamp'] === true) {
diff --git a/lib/Froxlor/UI/Fields.php b/lib/Froxlor/UI/Fields.php
index c138538a..681e701c 100644
--- a/lib/Froxlor/UI/Fields.php
+++ b/lib/Froxlor/UI/Fields.php
@@ -89,6 +89,15 @@ class Fields
 		return $returnvalue;
 	}
 
+    public static function getFormFieldOutputImage($fieldname, $fielddata, $do_show = true)
+    {
+        global $lng;
+        $label = $fielddata['label'];
+        $value = htmlentities($fielddata['value']);
+        eval("\$returnvalue = \"" . \Froxlor\UI\Template::getTemplate("formfields/image", true) . "\";");
+        return $returnvalue;
+    }
+
 	public static function getFormFieldOutputDate($fieldname, $fielddata, $do_show = true)
 	{
 		if (isset($fielddata['date_timestamp']) && $fielddata['date_timestamp'] === true) {
diff --git a/lib/init.php b/lib/init.php
index 7a9e9de5..f34565c1 100644
--- a/lib/init.php
+++ b/lib/init.php
@@ -380,14 +380,8 @@ if (! array_key_exists('variants', $_themeoptions) || ! array_key_exists($themev
 
 // check for custom header-graphic
 $hl_path = 'templates/' . $theme . '/assets/img';
-$header_logo = $header_logo_login = $hl_path . '/logo.png';
-
-if (file_exists($hl_path . '/logo_custom.png')) {
-	$header_logo = $hl_path . '/logo_custom.png';
-}
-if (file_exists($hl_path . '/logo_custom_login.png')) {
-	$header_logo_login = $hl_path . '/logo_custom_login.png';
-}
+$header_logo = Settings::Get('panel.logo_image_header') ?: $hl_path . '/logo.png';
+$header_logo_login = Settings::Get('panel.logo_image_login') ?: $hl_path . '/logo.png';
 
 /**
  * Redirects to index.php (login page) if no session exists
diff --git a/lng/english.lng.php b/lng/english.lng.php
index 117690d6..c8336b01 100644
--- a/lng/english.lng.php
+++ b/lng/english.lng.php
@@ -2117,3 +2117,9 @@ $lng['privacy'] = 'Privacy policy';
 $lng['serversettings']['privacy_url']['title'] = 'URL to privacy policy';
 $lng['serversettings']['privacy_url']['description'] = 'Specify an URL to your privacy policy site / imprint site. The link will be visible on the login screen and on the footer when logged in.';
 $lng['admin']['domaindefaultalias'] = 'Default ServerAlias value for new domains';
+
+$lng['serversettings']['logo_image_header']['title'] = 'Logo Image (Header)';
+$lng['serversettings']['logo_image_header']['description'] = 'Upload your own logo image to be shown in the header after login (recommended height 50px)';
+$lng['serversettings']['logo_image_login']['title'] = 'Logo Image (Login)';
+$lng['serversettings']['logo_image_login']['description'] = 'Upload your own logo image to be shown during login';
+$lng['panel']['image_field_delete'] = 'Delete the existing current image';
diff --git a/templates/Sparkle/admin/settings/settings_form_begin.tpl b/templates/Sparkle/admin/settings/settings_form_begin.tpl
index 87a16c57..792b8af1 100644
--- a/templates/Sparkle/admin/settings/settings_form_begin.tpl
+++ b/templates/Sparkle/admin/settings/settings_form_begin.tpl
@@ -1,5 +1,5 @@
 $header
-	<form method="post" action="$filename" enctype="application/x-www-form-urlencoded">
+	<form method="post" action="$filename" enctype="multipart/form-data">
 		<input type="hidden" name="send" value="send" />
 		<input type="hidden" name="s" value="$s" />
 		<input type="hidden" name="page" value="$page" />
diff --git a/templates/Sparkle/assets/css/main.css b/templates/Sparkle/assets/css/main.css
index 127f360b..e88099cf 100644
--- a/templates/Sparkle/assets/css/main.css
+++ b/templates/Sparkle/assets/css/main.css
@@ -1745,3 +1745,9 @@ td.size-50 {
 .footer-link:last-child:after {
         content: "";
 }
+
+.field-image-preview {
+	max-width: 300px;
+	max-height: 500px;
+	margin-bottom: 10px;
+}
diff --git a/templates/Sparkle/formfields/image.tpl b/templates/Sparkle/formfields/image.tpl
new file mode 100644
index 00000000..2c72f8dd
--- /dev/null
+++ b/templates/Sparkle/formfields/image.tpl
@@ -0,0 +1,11 @@
+<tr>
+	<td>{$label}</td>
+	<td>
+		<if $value>
+			<img src="/{$value}" alt="Current Image" class="field-image-preview"><br>
+			<input type="checkbox" value="1" name="{$fieldname}_delete" /> {$lng['panel']['image_field_delete']}
+			<br><br>
+		</if>
+		<input <if $do_show == 0>disabled="disabled"</if> type="file" class="file" name="{$fieldname}" accept=".jpg, .jpeg, .png" />
+	</td>
+</tr>

From 9f5978e87530a7bac6f963af172589b0d9b3e6f1 Mon Sep 17 00:00:00 2001
From: Daniel Schmitz <daniel@bashgeek.net>
Date: Wed, 7 Jul 2021 13:33:33 +0800
Subject: [PATCH 09/15] german translations

---
 lng/german.lng.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/lng/german.lng.php b/lng/german.lng.php
index 1aeba318..06550758 100644
--- a/lng/german.lng.php
+++ b/lng/german.lng.php
@@ -1763,3 +1763,9 @@ $lng['privacy'] = 'Datenschutzerklärung';
 $lng['serversettings']['privacy_url']['title'] = 'URL zur Datenschutzerklärung';
 $lng['serversettings']['privacy_url']['description'] = 'Die URL zur Datenschutzerklärungs-Seite. Der Link ist auf der Login-Seite und wenn eingeloggt, in der Fußzeile sichtbar.';
 $lng['admin']['domaindefaultalias'] = 'Standard ServerAlias-Angabe für neue Domains';
+
+$lng['serversettings']['logo_image_header']['title'] = 'Logo Bild (Header)';
+$lng['serversettings']['logo_image_header']['description'] = 'Das hochgeladene Bild wird als Logo oben links nach dem Login angezeigt (empfohlene Höhe sind 50px)';
+$lng['serversettings']['logo_image_login']['title'] = 'Logo Bild (Login)';
+$lng['serversettings']['logo_image_login']['description'] = 'Das hochgeladene Bild wird als Logo während des Logins angezeigt';
+$lng['panel']['image_field_delete'] = 'Das momentan vorhandene Bild löschen';

From 7a8b39fad09d854d0d03350aaaac314e803a4118 Mon Sep 17 00:00:00 2001
From: Daniel Schmitz <daniel@bashgeek.net>
Date: Wed, 7 Jul 2021 14:00:55 +0800
Subject: [PATCH 10/15] wip

---
 lib/Froxlor/SImExporter.php    | 38 ++++++++++++++++++++++++++++++++++
 lib/Froxlor/Settings/Store.php |  2 +-
 2 files changed, 39 insertions(+), 1 deletion(-)

diff --git a/lib/Froxlor/SImExporter.php b/lib/Froxlor/SImExporter.php
index aca4dea7..5a549f97 100644
--- a/lib/Froxlor/SImExporter.php
+++ b/lib/Froxlor/SImExporter.php
@@ -60,6 +60,13 @@ class SImExporter
 
 	public static function export()
 	{
+	    $settings_definitions = [];
+	    foreach (\Froxlor\PhpHelper::loadConfigArrayDir('./actions/admin/settings/')['groups'] AS $group) {
+            foreach ($group['fields'] AS $field) {
+                $settings_definitions[$field['settinggroup']][$field['varname']] = $field;
+            }
+        }
+
 		$result_stmt = Database::query("
 			SELECT * FROM `" . TABLE_PANEL_SETTINGS . "` ORDER BY `settingid` ASC
 		");
@@ -69,6 +76,17 @@ class SImExporter
 			if (! in_array($index, self::$no_export)) {
 				$_data[$index] = $row['value'];
 			}
+
+			if (array_key_exists($row['settinggroup'], $settings_definitions) && array_key_exists($row['varname'], $settings_definitions[$row['settinggroup']])) {
+			    // Export image file
+			    if ($settings_definitions[$row['settinggroup']][$row['varname']]['type'] === "image") {
+			        if ($row['value'] === "") {
+			            continue;
+                    }
+
+			        $_data[$index.'.image_data'] = base64_encode(file_get_contents(explode('?', $row['value'], 2)[0]));
+                }
+            }
 		}
 
 		// add checksum for validation
@@ -122,6 +140,26 @@ class SImExporter
 			}
 			// store new data
 			foreach ($_data as $index => $value) {
+                $index_split = explode('.', $index, 3);
+
+			    // Catch image_data and save it
+                if (isset($index_split[2]) && $index_split[2] === 'image_data' && !empty($_data[$index_split[0].'.'.$index_split[1]])) {
+                    $path = \Froxlor\Froxlor::getInstallDir().'/img/';
+                    if (!is_dir($path) && !mkdir($path, '0775')) {
+                        throw new \Exception("img directory does not exist and cannot be created");
+                    }
+
+                    // Make sure we can write to the upload directory
+                    if (!is_writable($path)) {
+                        if (!chmod($path, '0775')) {
+                            throw new \Exception("Cannot write to img directory");
+                        }
+                    }
+
+                    file_put_contents(\Froxlor\Froxlor::getInstallDir() . '/' . explode('?', $_data[$index_split[0].'.'.$index_split[1]], 2)[0], base64_decode($value));
+                    continue;
+                }
+
 				Settings::Set($index, $value);
 			}
 			// save to DB
diff --git a/lib/Froxlor/Settings/Store.php b/lib/Froxlor/Settings/Store.php
index 2441cdc6..c1131644 100644
--- a/lib/Froxlor/Settings/Store.php
+++ b/lib/Froxlor/Settings/Store.php
@@ -403,7 +403,7 @@ class Store
 
             // Delete file?
             if ($fielddata['value'] !== "" && array_key_exists($fieldname.'_delete', $_POST) && $_POST[$fieldname.'_delete']) {
-                @unlink($path . explode('?', $fielddata['value'], 2)[0]);
+                @unlink(\Froxlor\Froxlor::getInstallDir() . '/' . explode('?', $fielddata['value'], 2)[0]);
                 $save_to = '';
             }
 

From 80b5f973672345e7b6ff9afd804ba38f757bbdab Mon Sep 17 00:00:00 2001
From: Daniel Schmitz <daniel@bashgeek.net>
Date: Wed, 7 Jul 2021 14:10:21 +0800
Subject: [PATCH 11/15] wip

---
 templates/Sparkle/assets/css/main.css | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/templates/Sparkle/assets/css/main.css b/templates/Sparkle/assets/css/main.css
index e88099cf..8d6f7726 100644
--- a/templates/Sparkle/assets/css/main.css
+++ b/templates/Sparkle/assets/css/main.css
@@ -77,7 +77,11 @@ strong {
 }
 
 header img {
-	padding: 10px 0 10px 10px;
+	padding: 10px;
+}
+.login header img {
+	margin: 0 auto;
+	display: block;
 }
 
 img.small {

From 0dac045dc9bc7738f27a10900a046f5fda62ffa4 Mon Sep 17 00:00:00 2001
From: Daniel Schmitz <daniel@bashgeek.net>
Date: Wed, 7 Jul 2021 14:11:54 +0800
Subject: [PATCH 12/15] wip

---
 lng/english.lng.php | 2 +-
 lng/german.lng.php  | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/lng/english.lng.php b/lng/english.lng.php
index c8336b01..afb00a0a 100644
--- a/lng/english.lng.php
+++ b/lng/english.lng.php
@@ -2119,7 +2119,7 @@ $lng['serversettings']['privacy_url']['description'] = 'Specify an URL to your p
 $lng['admin']['domaindefaultalias'] = 'Default ServerAlias value for new domains';
 
 $lng['serversettings']['logo_image_header']['title'] = 'Logo Image (Header)';
-$lng['serversettings']['logo_image_header']['description'] = 'Upload your own logo image to be shown in the header after login (recommended height 50px)';
+$lng['serversettings']['logo_image_header']['description'] = 'Upload your own logo image to be shown in the header after login (recommended height 30px)';
 $lng['serversettings']['logo_image_login']['title'] = 'Logo Image (Login)';
 $lng['serversettings']['logo_image_login']['description'] = 'Upload your own logo image to be shown during login';
 $lng['panel']['image_field_delete'] = 'Delete the existing current image';
diff --git a/lng/german.lng.php b/lng/german.lng.php
index 06550758..c9cf309c 100644
--- a/lng/german.lng.php
+++ b/lng/german.lng.php
@@ -1765,7 +1765,7 @@ $lng['serversettings']['privacy_url']['description'] = 'Die URL zur Datenschutze
 $lng['admin']['domaindefaultalias'] = 'Standard ServerAlias-Angabe für neue Domains';
 
 $lng['serversettings']['logo_image_header']['title'] = 'Logo Bild (Header)';
-$lng['serversettings']['logo_image_header']['description'] = 'Das hochgeladene Bild wird als Logo oben links nach dem Login angezeigt (empfohlene Höhe sind 50px)';
+$lng['serversettings']['logo_image_header']['description'] = 'Das hochgeladene Bild wird als Logo oben links nach dem Login angezeigt (empfohlene Höhe sind 30px)';
 $lng['serversettings']['logo_image_login']['title'] = 'Logo Bild (Login)';
 $lng['serversettings']['logo_image_login']['description'] = 'Das hochgeladene Bild wird als Logo während des Logins angezeigt';
 $lng['panel']['image_field_delete'] = 'Das momentan vorhandene Bild löschen';

From b88f9c1f18fc39c5d06d7bc2969a6644c894e6f1 Mon Sep 17 00:00:00 2001
From: Michael Kaufmann <d00p@froxlor.org>
Date: Fri, 9 Jul 2021 08:23:46 +0200
Subject: [PATCH 13/15] allow defining php_value/php_admin_value for
 session.save_path when using php-fpm; fixes #954

Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
---
 lib/Froxlor/Cron/Http/Php/Fpm.php | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/lib/Froxlor/Cron/Http/Php/Fpm.php b/lib/Froxlor/Cron/Http/Php/Fpm.php
index c74cace8..cac90aa8 100644
--- a/lib/Froxlor/Cron/Http/Php/Fpm.php
+++ b/lib/Froxlor/Cron/Http/Php/Fpm.php
@@ -218,7 +218,7 @@ class Fpm
 					$openbasedir .= $_phpappendopenbasedir;
 				}
 			}
-			$fpm_config .= 'php_admin_value[session.save_path] = ' . \Froxlor\FileDir::makeCorrectDir(Settings::Get('phpfpm.tmpdir') . '/' . $this->domain['loginname'] . '/') . "\n";
+
 			$fpm_config .= 'php_admin_value[upload_tmp_dir] = ' . \Froxlor\FileDir::makeCorrectDir(Settings::Get('phpfpm.tmpdir') . '/' . $this->domain['loginname'] . '/') . "\n";
 
 			$admin = $this->getAdminData($this->domain['adminid']);
@@ -261,6 +261,11 @@ class Fpm
 				$fpm_config .= 'php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i -f ' . $this->domain['email'] . "\n";
 			}
 
+			// check for session.save_path, whether it has been specified by the user, if not, set a default
+			if (strpos($fpm_config, 'php_value[session.save_path]') === false && strpos($fpm_config, 'php_admin_value[session.save_path]') === false) {
+				$fpm_config .= 'php_admin_value[session.save_path] = ' . $this->getTempDir() . "\n";
+			}
+
 			// append custom phpfpm configuration
 			if (! empty($fpm_custom_config)) {
 				$fpm_config .= "\n; Custom Configuration\n";

From 48f6601003d7315c047b0f9e8a7f1c2d85b33a11 Mon Sep 17 00:00:00 2001
From: Daniel Schmitz <daniel@bashgeek.net>
Date: Fri, 9 Jul 2021 16:42:21 +0800
Subject: [PATCH 14/15] check mime types

---
 composer.json                          | 3 ++-
 lib/Froxlor/Settings/Store.php         | 5 +++++
 templates/Sparkle/formfields/image.tpl | 2 +-
 3 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/composer.json b/composer.json
index d5feaf8c..82326ce4 100644
--- a/composer.json
+++ b/composer.json
@@ -43,12 +43,13 @@
 		"ext-curl": "*",
 		"ext-json": "*",
 		"ext-openssl": "*",
+		"ext-fileinfo": "*",
 		"phpmailer/phpmailer": "~6.0",
 		"monolog/monolog": "^1.24",
 		"robthree/twofactorauth": "^1.6",
 		"froxlor/idna-convert-legacy": "^2.1",
 		"voku/anti-xss": "^4.1"
-	},
+    },
 	"require-dev": {
 		"phpunit/phpunit": "^9",
 		"php": ">=7.3",
diff --git a/lib/Froxlor/Settings/Store.php b/lib/Froxlor/Settings/Store.php
index c1131644..69e365fa 100644
--- a/lib/Froxlor/Settings/Store.php
+++ b/lib/Froxlor/Settings/Store.php
@@ -388,6 +388,11 @@ class Store
                     }
                 }
 
+                // Make sure mime-type matches an image
+                if (!in_array(mime_content_type($_FILES[$fieldname]['tmp_name']), ['image/jpeg','image/jpg','image/png','image/gif'])) {
+                    throw new \Exception("Uploaded file not a valid image");
+                }
+
                 // Determine file extension
                 $spl = explode('.', $_FILES[$fieldname]['name']);
                 $file_extension = strtolower(array_pop($spl));
diff --git a/templates/Sparkle/formfields/image.tpl b/templates/Sparkle/formfields/image.tpl
index 2c72f8dd..1a880c44 100644
--- a/templates/Sparkle/formfields/image.tpl
+++ b/templates/Sparkle/formfields/image.tpl
@@ -6,6 +6,6 @@
 			<input type="checkbox" value="1" name="{$fieldname}_delete" /> {$lng['panel']['image_field_delete']}
 			<br><br>
 		</if>
-		<input <if $do_show == 0>disabled="disabled"</if> type="file" class="file" name="{$fieldname}" accept=".jpg, .jpeg, .png" />
+		<input <if $do_show == 0>disabled="disabled"</if> type="file" class="file" name="{$fieldname}" accept="image/jpeg, image/jpg, image/png, image/gif" />
 	</td>
 </tr>

From 282d7d9101c71f2d23982758dbe130a3aa387b04 Mon Sep 17 00:00:00 2001
From: Daniel Schmitz <daniel@bashgeek.net>
Date: Fri, 9 Jul 2021 17:07:50 +0800
Subject: [PATCH 15/15] migrate old image + fix versioning

---
 .../updates/froxlor/0.10/update_0.10.inc.php  | 31 +++++++++++++++++--
 lib/Froxlor/Froxlor.php                       | 14 ++++-----
 2 files changed, 36 insertions(+), 9 deletions(-)

diff --git a/install/updates/froxlor/0.10/update_0.10.inc.php b/install/updates/froxlor/0.10/update_0.10.inc.php
index 278f6c43..1f2d360e 100644
--- a/install/updates/froxlor/0.10/update_0.10.inc.php
+++ b/install/updates/froxlor/0.10/update_0.10.inc.php
@@ -826,12 +826,39 @@ if (\Froxlor\Froxlor::isDatabaseVersion('202106160')) {
     \Froxlor\Froxlor::updateToDbVersion('202106270');
 }
 
-if (\Froxlor\Froxlor::isDatabaseVersion('202107070')) {
-
+if (\Froxlor\Froxlor::isDatabaseVersion('202106270')) {
     showUpdateStep("Adding custom logo image settings", true);
     Settings::AddNew("panel.logo_image_header", '');
     Settings::AddNew("panel.logo_image_login", '');
     lastStepStatus(0);
 
+    // Migrating old custom logo over, if exists
+    $custom_logo_file_old = \Froxlor\Froxlor::getInstallDir() . '/templates/Sparkle/assets/img/logo_custom.png';
+    if (file_exists($custom_logo_file_old)) {
+        showUpdateStep("Migrating existing custom logo to new settings", true);
+
+        $path = \Froxlor\Froxlor::getInstallDir().'/img/';
+        if (!is_dir($path) && !mkdir($path, 0775)) {
+            throw new \Exception("img directory does not exist and cannot be created");
+        }
+        if (!is_writable($path)) {
+            if (!chmod($path, '0775')) {
+                throw new \Exception("Cannot write to img directory");
+            }
+        }
+
+        // Save as new custom logo header
+        $save_to = 'logo_header.png';
+        copy($custom_logo_file_old, $path.$save_to);
+        Settings::Set("panel.logo_image_header", "img/{$save_to}?v=".time());
+
+        // Save as new custom logo login
+        $save_to = 'logo_login.png';
+        copy($custom_logo_file_old, $path.$save_to);
+        Settings::Set("panel.logo_image_login", "img/{$save_to}?v=".time());
+
+        lastStepStatus(0);
+    }
+
     \Froxlor\Froxlor::updateToDbVersion('202107070');
 }
diff --git a/lib/Froxlor/Froxlor.php b/lib/Froxlor/Froxlor.php
index e9ccbe30..9e9fb3f2 100644
--- a/lib/Froxlor/Froxlor.php
+++ b/lib/Froxlor/Froxlor.php
@@ -10,7 +10,7 @@ final class Froxlor
 	const VERSION = '0.10.26';
 
 	// Database version (YYYYMMDDC where C is a daily counter)
-	const DBVERSION = '202106270';
+	const DBVERSION = '202107070';
 
 	// Distribution branding-tag (used for Debian etc.)
 	const BRANDING = '';
@@ -63,7 +63,7 @@ final class Froxlor
 	 *
 	 * @param string $to_check
 	 *        	version to check, if empty current version is used
-	 *        	
+	 *
 	 * @return bool true if version to check does not match, else false
 	 */
 	public static function hasUpdates($to_check = null)
@@ -84,7 +84,7 @@ final class Froxlor
 	 *
 	 * @param int $to_check
 	 *        	version to check, if empty current dbversion is used
-	 *        	
+	 *
 	 * @return bool true if version to check does not match, else false
 	 */
 	public static function hasDbUpdates($to_check = null)
@@ -105,7 +105,7 @@ final class Froxlor
 	 *
 	 * @param int $to_check
 	 *        	version to check
-	 *        	
+	 *
 	 * @return bool true if version to check matches, else false
 	 */
 	public static function isDatabaseVersion($to_check = null)
@@ -124,7 +124,7 @@ final class Froxlor
 	 *
 	 * @param string $new_version
 	 *        	new-version
-	 *        	
+	 *
 	 * @return bool true on success, else false
 	 */
 	public static function updateToDbVersion($new_version = null)
@@ -150,7 +150,7 @@ final class Froxlor
 	 *
 	 * @param string $new_version
 	 *        	new-version
-	 *        	
+	 *
 	 * @return bool true on success, else false
 	 */
 	public static function updateToVersion($new_version = null)
@@ -191,7 +191,7 @@ final class Froxlor
 	 *
 	 * @param string $to_check
 	 *        	version to check
-	 *        	
+	 *
 	 * @return bool true if version to check matches, else false
 	 */
 	public static function isFroxlorVersion($to_check = null)