1559 lines
60 KiB
PHP
1559 lines
60 KiB
PHP
<?php
|
|
|
|
/**
|
|
* This file is part of the Froxlor project.
|
|
* Copyright (c) 2010 the Froxlor Team (see authors).
|
|
*
|
|
* For the full copyright and license information, please view the COPYING
|
|
* file that was distributed with this source code. You can also view the
|
|
* COPYING file online at http://files.froxlor.org/misc/COPYING.txt
|
|
*
|
|
* @copyright (c) the authors
|
|
* @author Froxlor team <team@froxlor.org> (2010-)
|
|
* @license GPLv2 http://files.froxlor.org/misc/COPYING.txt
|
|
* @package API
|
|
* @since 0.10.0
|
|
*
|
|
*/
|
|
class Customers extends ApiCommand implements ResourceEntity
|
|
{
|
|
|
|
/**
|
|
* lists all customer entries
|
|
*
|
|
* @access admin
|
|
* @return array count|list
|
|
*/
|
|
public function listing()
|
|
{
|
|
if ($this->isAdmin()) {
|
|
$this->logger()->logAction(ADM_ACTION, LOG_NOTICE, "[API] list customers");
|
|
$result_stmt = Database::prepare("
|
|
SELECT `c`.*, `a`.`loginname` AS `adminname`
|
|
FROM `" . TABLE_PANEL_CUSTOMERS . "` `c`, `" . TABLE_PANEL_ADMINS . "` `a`
|
|
WHERE " . ($this->getUserDetail('customers_see_all') ? '' : " `c`.`adminid` = :adminid AND ") . "
|
|
`c`.`adminid` = `a`.`adminid`
|
|
ORDER BY `c`.`loginname` ASC
|
|
");
|
|
$params = array();
|
|
if ($this->getUserDetail('customers_see_all') == '0') {
|
|
$params = array(
|
|
'adminid' => $this->getUserDetail('adminid')
|
|
);
|
|
}
|
|
Database::pexecute($result_stmt, $params, true, true);
|
|
$result = array();
|
|
while ($row = $result_stmt->fetch(PDO::FETCH_ASSOC)) {
|
|
$result[] = $row;
|
|
}
|
|
return $this->response(200, "successfull", array(
|
|
'count' => count($result),
|
|
'list' => $result
|
|
));
|
|
}
|
|
throw new Exception("Not allowed to execute given command.", 403);
|
|
}
|
|
|
|
/**
|
|
* return a customer entry by either id or loginname
|
|
*
|
|
* @param int $id
|
|
* optional, the customer-id
|
|
* @param string $loginname
|
|
* optional, the loginname
|
|
*
|
|
* @access admin, customer
|
|
* @throws Exception
|
|
* @return array
|
|
*/
|
|
public function get()
|
|
{
|
|
$id = $this->getParam('id', true, 0);
|
|
$ln_optional = ($id <= 0 ? false : true);
|
|
$loginname = $this->getParam('loginname', $ln_optional, '');
|
|
|
|
if ($this->isAdmin()) {
|
|
$result_stmt = Database::prepare("
|
|
SELECT `c`.*, `a`.`loginname` AS `adminname`
|
|
FROM `" . TABLE_PANEL_CUSTOMERS . "` `c`, `" . TABLE_PANEL_ADMINS . "` `a`
|
|
WHERE " . ($id > 0 ? "`c`.`customerid` = :idln" : "`c`.`loginname` = :idln") . ($this->getUserDetail('customers_see_all') ? '' : " AND `c`.`adminid` = :adminid") . " AND `c`.`adminid` = `a`.`adminid`");
|
|
$params = array(
|
|
'idln' => ($id <= 0 ? $loginname : $id)
|
|
);
|
|
if ($this->getUserDetail('customers_see_all') == '0') {
|
|
$params['adminid'] = $this->getUserDetail('adminid');
|
|
}
|
|
} else {
|
|
if (($id > 0 && $id != $this->getUserDetail('customerid')) || ! empty($loginname) && $loginname != $this->getUserDetail('loginname')) {
|
|
throw new Exception("You cannot access data of other customers", 401);
|
|
}
|
|
$result_stmt = Database::prepare("
|
|
SELECT * FROM `" . TABLE_PANEL_CUSTOMERS . "`
|
|
WHERE " . ($id > 0 ? "`customerid` = :idln" : "`loginname` = :idln"));
|
|
$params = array(
|
|
'idln' => ($id <= 0 ? $loginname : $id)
|
|
);
|
|
}
|
|
$result = Database::pexecute_first($result_stmt, $params, true, true);
|
|
if ($result) {
|
|
// check whether the admin does not want the customer to see the notes
|
|
if (! $this->isAdmin() && $result['custom_notes_show'] != 1) {
|
|
$result['custom_notes'] = "";
|
|
}
|
|
$this->logger()->logAction($this->isAdmin() ? ADM_ACTION : USR_ACTION, LOG_NOTICE, "[API] get customer '" . $result['loginname'] . "'");
|
|
return $this->response(200, "successfull", $result);
|
|
}
|
|
$key = ($id > 0 ? "id #" . $id : "loginname '" . $loginname . "'");
|
|
throw new Exception("Customer with " . $key . " could not be found", 404);
|
|
}
|
|
|
|
/**
|
|
* create a new customer with default ftp-user and standard-subdomain (if wanted)
|
|
*
|
|
* @access admin
|
|
* @return array
|
|
*/
|
|
public function add()
|
|
{
|
|
if ($this->isAdmin()) {
|
|
if ($this->getUserDetail('customers_used') < $this->getUserDetail('customers') || $this->getUserDetail('customers') == '-1') {
|
|
|
|
// required parameters
|
|
$email = $this->getParam('email');
|
|
|
|
// parameters
|
|
$name = $this->getParam('name', true, '');
|
|
$firstname = $this->getParam('firstname', true, '');
|
|
$company_required = (! empty($name) && empty($firstname)) || (empty($name) && ! empty($firstname)) || (empty($name) && empty($firstname));
|
|
$company = $this->getParam('company', ($company_required ? false : true), '');
|
|
$street = $this->getParam('street', true, '');
|
|
$zipcode = $this->getParam('zipcode', true, '');
|
|
$city = $this->getParam('city', true, '');
|
|
$phone = $this->getParam('phone', true, '');
|
|
$fax = $this->getParam('fax', true, '');
|
|
$customernumber = $this->getParam('customernumber', true, '');
|
|
$def_language = $this->getParam('def_language', true, Settings::Get('panel.standardlanguage'));
|
|
$gender = intval_ressource($this->getParam('gender', true, 0));
|
|
$custom_notes = $this->getParam('custom_notes', true, '');
|
|
$custom_notes_show = $this->getParam('custom_notes_show', true, 0);
|
|
|
|
$diskspace = $this->getUlParam('diskspace', 'diskspace_ul', true, 0);
|
|
$traffic = $this->getUlParam('traffic', 'traffic_ul', true, 0);
|
|
$subdomains = $this->getUlParam('subdomains', 'subdomains_ul', true, 0);
|
|
$emails = $this->getUlParam('emails', 'emails_ul', true, 0);
|
|
$email_accounts = $this->getUlParam('email_accounts', 'email_accounts_ul', true, 0);
|
|
$email_forwarders = $this->getUlParam('email_forwarders', 'email_forwarders_ul', true, 0);
|
|
$email_quota = $this->getUlParam('email_quota', 'email_quota_ul', true, 0);
|
|
$email_imap = $this->getParam('email_imap', true, 0);
|
|
$email_pop3 = $this->getParam('email_pop3', true, 0);
|
|
$ftps = $this->getUlParam('ftps', 'ftps_ul', true, 0);
|
|
$tickets = $this->getUlParam('tickets', 'tickets_ul', true, 0);
|
|
$mysqls = $this->getUlParam('mysqls', 'mysqls_ul', true, 0);
|
|
$createstdsubdomain = $this->getParam('createstdsubdomain', true, 0);
|
|
$password = $this->getParam('new_customer_password', true, '');
|
|
$sendpassword = $this->getParam('sendpassword', true, 0);
|
|
$phpenabled = $this->getParam('phpenabled', true, 0);
|
|
$p_allowed_phpconfigs = $this->getParam('allowed_phpconfigs', true, array());
|
|
$perlenabled = $this->getParam('perlenabled', true, 0);
|
|
$dnsenabled = $this->getParam('dnsenabled', true, 0);
|
|
$store_defaultindex = $this->getParam('store_defaultindex', true, 0);
|
|
$loginname = $this->getParam('new_loginname', true, '');
|
|
|
|
// validation
|
|
$name = validate($name, 'name', '', '', array(), true);
|
|
$firstname = validate($firstname, 'first name', '', '', array(), true);
|
|
$company = validate($company, 'company', '', '', array(), true);
|
|
$street = validate($street, 'street', '', '', array(), true);
|
|
$zipcode = validate($zipcode, 'zipcode', '/^[0-9 \-A-Z]*$/', '', array(), true);
|
|
$city = validate($city, 'city', '', '', array(), true);
|
|
$phone = validate($phone, 'phone', '/^[0-9\- \+\(\)\/]*$/', '', array(), true);
|
|
$fax = validate($fax, 'fax', '/^[0-9\- \+\(\)\/]*$/', '', array(), true);
|
|
$idna_convert = new idna_convert_wrapper();
|
|
$email = $idna_convert->encode(validate($email, 'email', '', '', array(), true));
|
|
$customernumber = validate($customernumber, 'customer number', '/^[A-Za-z0-9 \-]*$/Di', '', array(), true);
|
|
$def_language = validate($def_language, 'default language', '', '', array(), true);
|
|
$custom_notes = validate(str_replace("\r\n", "\n", $custom_notes), 'custom_notes', '/^[^\0]*$/', '', array(), true);
|
|
|
|
if (Settings::Get('system.mail_quota_enabled') != '1') {
|
|
$email_quota = - 1;
|
|
}
|
|
|
|
if (Settings::Get('ticket.enabled') != '1') {
|
|
$tickets = - 1;
|
|
}
|
|
|
|
$password = validate($password, 'password', '', '', array(), true);
|
|
// only check if not empty,
|
|
// cause empty == generate password automatically
|
|
if ($password != '') {
|
|
$password = validatePassword($password, true);
|
|
}
|
|
|
|
// gender out of range? [0,2]
|
|
if ($gender < 0 || $gender > 2) {
|
|
$gender = 0;
|
|
}
|
|
|
|
$allowed_phpconfigs = array();
|
|
if (! empty($p_allowed_phpconfigs) && is_array($p_allowed_phpconfigs)) {
|
|
foreach ($p_allowed_phpconfigs as $allowed_phpconfig) {
|
|
$allowed_phpconfig = intval($allowed_phpconfig);
|
|
$allowed_phpconfigs[] = $allowed_phpconfig;
|
|
}
|
|
}
|
|
|
|
$diskspace = $diskspace * 1024;
|
|
$traffic = $traffic * 1024 * 1024;
|
|
|
|
if (((($this->getUserDetail('diskspace_used') + $diskspace) > $this->getUserDetail('diskspace')) && ($this->getUserDetail('diskspace') / 1024) != '-1') || ((($this->getUserDetail('mysqls_used') + $mysqls) > $this->getUserDetail('mysqls')) && $this->getUserDetail('mysqls') != '-1') || ((($this->getUserDetail('emails_used') + $emails) > $this->getUserDetail('emails')) && $this->getUserDetail('emails') != '-1') || ((($this->getUserDetail('email_accounts_used') + $email_accounts) > $this->getUserDetail('email_accounts')) && $this->getUserDetail('email_accounts') != '-1') || ((($this->getUserDetail('email_forwarders_used') + $email_forwarders) > $this->getUserDetail('email_forwarders')) && $this->getUserDetail('email_forwarders') != '-1') || ((($this->getUserDetail('email_quota_used') + $email_quota) > $this->getUserDetail('email_quota')) && $this->getUserDetail('email_quota') != '-1' && Settings::Get('system.mail_quota_enabled') == '1') || ((($this->getUserDetail('ftps_used') + $ftps) > $this->getUserDetail('ftps')) && $this->getUserDetail('ftps') != '-1') || ((($this->getUserDetail('tickets_used') + $tickets) > $this->getUserDetail('tickets')) && $this->getUserDetail('tickets') != '-1') || ((($this->getUserDetail('subdomains_used') + $subdomains) > $this->getUserDetail('subdomains')) && $this->getUserDetail('subdomains') != '-1') || (($diskspace / 1024) == '-1' && ($this->getUserDetail('diskspace') / 1024) != '-1') || ($mysqls == '-1' && $this->getUserDetail('mysqls') != '-1') || ($emails == '-1' && $this->getUserDetail('emails') != '-1') || ($email_accounts == '-1' && $this->getUserDetail('email_accounts') != '-1') || ($email_forwarders == '-1' && $this->getUserDetail('email_forwarders') != '-1') || ($email_quota == '-1' && $this->getUserDetail('email_quota') != '-1' && Settings::Get('system.mail_quota_enabled') == '1') || ($ftps == '-1' && $this->getUserDetail('ftps') != '-1') || ($tickets == '-1' && $this->getUserDetail('tickets') != '-1') || ($subdomains == '-1' && $this->getUserDetail('subdomains') != '-1')) {
|
|
standard_error('youcantallocatemorethanyouhave', '', true);
|
|
}
|
|
|
|
if (! validateEmail($email)) {
|
|
standard_error('emailiswrong', $email, true);
|
|
} else {
|
|
|
|
if ($loginname != '') {
|
|
$accountnumber = intval(Settings::Get('system.lastaccountnumber'));
|
|
$loginname = validate($loginname, 'loginname', '/^[a-z][a-z0-9\-_]+$/i', '', array(), true);
|
|
|
|
// Accounts which match systemaccounts are not allowed, filtering them
|
|
if (preg_match('/^' . preg_quote(Settings::Get('customer.accountprefix'), '/') . '([0-9]+)/', $loginname)) {
|
|
standard_error('loginnameissystemaccount', Settings::Get('customer.accountprefix'), true);
|
|
}
|
|
|
|
// Additional filtering for Bug #962
|
|
if (function_exists('posix_getpwnam') && ! in_array("posix_getpwnam", explode(",", ini_get('disable_functions'))) && posix_getpwnam($loginname)) {
|
|
standard_error('loginnameissystemaccount', Settings::Get('customer.accountprefix'), true);
|
|
}
|
|
} else {
|
|
$accountnumber = intval(Settings::Get('system.lastaccountnumber')) + 1;
|
|
$loginname = Settings::Get('customer.accountprefix') . $accountnumber;
|
|
}
|
|
|
|
// Check if the account already exists
|
|
// do not check via api as we skip any permission checks for this task
|
|
$loginname_check_stmt = Database::prepare("
|
|
SELECT `loginname` FROM `" . TABLE_PANEL_CUSTOMERS . "` WHERE `loginname` = :login
|
|
");
|
|
$loginname_check = Database::pexecute_first($loginname_check_stmt, array(
|
|
'login' => $loginname
|
|
), true, true);
|
|
|
|
// Check if an admin with the loginname already exists
|
|
// do not check via api as we skip any permission checks for this task
|
|
$loginname_check_admin_stmt = Database::prepare("
|
|
SELECT `loginname` FROM `" . TABLE_PANEL_ADMINS . "` WHERE `loginname` = :login
|
|
");
|
|
$loginname_check_admin = Database::pexecute_first($loginname_check_admin_stmt, array(
|
|
'login' => $loginname
|
|
), true, true);
|
|
|
|
if (strtolower($loginname_check['loginname']) == strtolower($loginname) || strtolower($loginname_check_admin['loginname']) == strtolower($loginname)) {
|
|
standard_error('loginnameexists', $loginname, true);
|
|
} elseif (! validateUsername($loginname, Settings::Get('panel.unix_names'), 14 - strlen(Settings::Get('customer.mysqlprefix')))) {
|
|
if (strlen($loginname) > 14 - strlen(Settings::Get('customer.mysqlprefix'))) {
|
|
standard_error('loginnameiswrong2', 14 - strlen(Settings::Get('customer.mysqlprefix')), true);
|
|
} else {
|
|
standard_error('loginnameiswrong', $loginname, true);
|
|
}
|
|
}
|
|
|
|
$guid = intval(Settings::Get('system.lastguid')) + 1;
|
|
$documentroot = makeCorrectDir(Settings::Get('system.documentroot_prefix') . '/' . $loginname);
|
|
|
|
if (file_exists($documentroot)) {
|
|
standard_error('documentrootexists', $documentroot, true);
|
|
}
|
|
|
|
if ($createstdsubdomain != '1') {
|
|
$createstdsubdomain = '0';
|
|
}
|
|
|
|
if ($phpenabled != '0') {
|
|
$phpenabled = '1';
|
|
}
|
|
|
|
if ($perlenabled != '0') {
|
|
$perlenabled = '1';
|
|
}
|
|
|
|
if ($dnsenabled != '0') {
|
|
$dnsenabled = '1';
|
|
}
|
|
|
|
if ($password == '') {
|
|
$password = generatePassword();
|
|
}
|
|
|
|
$_theme = Settings::Get('panel.default_theme');
|
|
|
|
$ins_data = array(
|
|
'adminid' => $this->getUserDetail('adminid'),
|
|
'loginname' => $loginname,
|
|
'passwd' => makeCryptPassword($password),
|
|
'name' => $name,
|
|
'firstname' => $firstname,
|
|
'gender' => $gender,
|
|
'company' => $company,
|
|
'street' => $street,
|
|
'zipcode' => $zipcode,
|
|
'city' => $city,
|
|
'phone' => $phone,
|
|
'fax' => $fax,
|
|
'email' => $email,
|
|
'customerno' => $customernumber,
|
|
'lang' => $def_language,
|
|
'docroot' => $documentroot,
|
|
'guid' => $guid,
|
|
'diskspace' => $diskspace,
|
|
'traffic' => $traffic,
|
|
'subdomains' => $subdomains,
|
|
'emails' => $emails,
|
|
'email_accounts' => $email_accounts,
|
|
'email_forwarders' => $email_forwarders,
|
|
'email_quota' => $email_quota,
|
|
'ftps' => $ftps,
|
|
'tickets' => $tickets,
|
|
'mysqls' => $mysqls,
|
|
'phpenabled' => $phpenabled,
|
|
'allowed_phpconfigs' => empty($allowed_phpconfigs) ? "" : json_encode($allowed_phpconfigs),
|
|
'imap' => $email_imap,
|
|
'pop3' => $email_pop3,
|
|
'perlenabled' => $perlenabled,
|
|
'dnsenabled' => $dnsenabled,
|
|
'theme' => $_theme,
|
|
'custom_notes' => $custom_notes,
|
|
'custom_notes_show' => $custom_notes_show
|
|
);
|
|
|
|
$ins_stmt = Database::prepare("
|
|
INSERT INTO `" . TABLE_PANEL_CUSTOMERS . "` SET
|
|
`adminid` = :adminid,
|
|
`loginname` = :loginname,
|
|
`password` = :passwd,
|
|
`name` = :name,
|
|
`firstname` = :firstname,
|
|
`gender` = :gender,
|
|
`company` = :company,
|
|
`street` = :street,
|
|
`zipcode` = :zipcode,
|
|
`city` = :city,
|
|
`phone` = :phone,
|
|
`fax` = :fax,
|
|
`email` = :email,
|
|
`customernumber` = :customerno,
|
|
`def_language` = :lang,
|
|
`documentroot` = :docroot,
|
|
`guid` = :guid,
|
|
`diskspace` = :diskspace,
|
|
`traffic` = :traffic,
|
|
`subdomains` = :subdomains,
|
|
`emails` = :emails,
|
|
`email_accounts` = :email_accounts,
|
|
`email_forwarders` = :email_forwarders,
|
|
`email_quota` = :email_quota,
|
|
`ftps` = :ftps,
|
|
`tickets` = :tickets,
|
|
`mysqls` = :mysqls,
|
|
`standardsubdomain` = '0',
|
|
`phpenabled` = :phpenabled,
|
|
`allowed_phpconfigs` = :allowed_phpconfigs,
|
|
`imap` = :imap,
|
|
`pop3` = :pop3,
|
|
`perlenabled` = :perlenabled,
|
|
`dnsenabled` = :dnsenabled,
|
|
`theme` = :theme,
|
|
`custom_notes` = :custom_notes,
|
|
`custom_notes_show` = :custom_notes_show
|
|
");
|
|
Database::pexecute($ins_stmt, $ins_data, true, true);
|
|
|
|
$customerid = Database::lastInsertId();
|
|
$ins_data['customerid'] = $customerid;
|
|
|
|
// update admin resource-usage
|
|
$admin_update_query = "UPDATE `" . TABLE_PANEL_ADMINS . "` SET `customers_used` = `customers_used` + 1";
|
|
|
|
if ($mysqls != '-1') {
|
|
$admin_update_query .= ", `mysqls_used` = `mysqls_used` + 0" . (int) $mysqls;
|
|
}
|
|
|
|
if ($emails != '-1') {
|
|
$admin_update_query .= ", `emails_used` = `emails_used` + 0" . (int) $emails;
|
|
}
|
|
|
|
if ($email_accounts != '-1') {
|
|
$admin_update_query .= ", `email_accounts_used` = `email_accounts_used` + 0" . (int) $email_accounts;
|
|
}
|
|
|
|
if ($email_forwarders != '-1') {
|
|
$admin_update_query .= ", `email_forwarders_used` = `email_forwarders_used` + 0" . (int) $email_forwarders;
|
|
}
|
|
|
|
if ($email_quota != '-1') {
|
|
$admin_update_query .= ", `email_quota_used` = `email_quota_used` + 0" . (int) $email_quota;
|
|
}
|
|
|
|
if ($subdomains != '-1') {
|
|
$admin_update_query .= ", `subdomains_used` = `subdomains_used` + 0" . (int) $subdomains;
|
|
}
|
|
|
|
if ($ftps != '-1') {
|
|
$admin_update_query .= ", `ftps_used` = `ftps_used` + 0" . (int) $ftps;
|
|
}
|
|
|
|
if ($tickets != '-1' && Settings::Get('ticket.enabled') == 1) {
|
|
$admin_update_query .= ", `tickets_used` = `tickets_used` + 0" . (int) $tickets;
|
|
}
|
|
|
|
if (($diskspace / 1024) != '-1') {
|
|
$admin_update_query .= ", `diskspace_used` = `diskspace_used` + 0" . (int) $diskspace;
|
|
}
|
|
|
|
$admin_update_query .= " WHERE `adminid` = '" . (int) $this->getUserDetail('adminid') . "'";
|
|
Database::query($admin_update_query);
|
|
|
|
// update last guid
|
|
Settings::Set('system.lastguid', $guid, true);
|
|
|
|
if ($accountnumber != intval(Settings::Get('system.lastaccountnumber'))) {
|
|
// update last account number
|
|
Settings::Set('system.lastaccountnumber', $accountnumber, true);
|
|
}
|
|
|
|
$this->logger()->logAction(ADM_ACTION, LOG_INFO, "[API] added customer '" . $loginname . "'");
|
|
unset($ins_data);
|
|
|
|
// insert task to create homedir etc.
|
|
inserttask('2', $loginname, $guid, $guid, $store_defaultindex);
|
|
|
|
// Using filesystem - quota, insert a task which cleans the filesystem - quota
|
|
inserttask('10');
|
|
|
|
// Add htpasswd for the stats-pages
|
|
if (CRYPT_STD_DES == 1) {
|
|
$saltfordescrypt = substr(md5(uniqid(microtime(), 1)), 4, 2);
|
|
$htpasswdPassword = crypt($password, $saltfordescrypt);
|
|
} else {
|
|
$htpasswdPassword = crypt($password);
|
|
}
|
|
|
|
$ins_stmt = Database::prepare("
|
|
INSERT INTO `" . TABLE_PANEL_HTPASSWDS . "` SET
|
|
`customerid` = :customerid,
|
|
`username` = :username,
|
|
`password` = :passwd,
|
|
`path` = :path
|
|
");
|
|
$ins_data = array(
|
|
'customerid' => $customerid,
|
|
'username' => $loginname,
|
|
'passwd' => $htpasswdPassword
|
|
);
|
|
|
|
$stats_folder = 'webalizer';
|
|
if (Settings::Get('system.awstats_enabled') == '1') {
|
|
$stats_folder = 'awstats';
|
|
}
|
|
$ins_data['path'] = makeCorrectDir($documentroot . '/' . $stats_folder . '/');
|
|
$this->logger()->logAction(ADM_ACTION, LOG_NOTICE, "[API] automatically added ".$stats_folder." htpasswd for user '" . $loginname . "'");
|
|
Database::pexecute($ins_stmt, $ins_data, true, true);
|
|
|
|
inserttask('1');
|
|
$cryptPassword = makeCryptPassword($password);
|
|
// add FTP-User
|
|
// @fixme use Ftp-ApiCommand later
|
|
$ins_stmt = Database::prepare("
|
|
INSERT INTO `" . TABLE_FTP_USERS . "` SET `customerid` = :customerid, `username` = :username, `description` = :desc,
|
|
`password` = :passwd, `homedir` = :homedir, `login_enabled` = 'y', `uid` = :guid, `gid` = :guid
|
|
");
|
|
$ins_data = array(
|
|
'customerid' => $customerid,
|
|
'username' => $loginname,
|
|
'passwd' => $cryptPassword,
|
|
'homedir' => $documentroot,
|
|
'guid' => $guid,
|
|
'desc' => "Default"
|
|
);
|
|
Database::pexecute($ins_stmt, $ins_data, true, true);
|
|
// add FTP-Group
|
|
// @fixme use Ftp-ApiCommand later
|
|
$ins_stmt = Database::prepare("
|
|
INSERT INTO `" . TABLE_FTP_GROUPS . "` SET `customerid` = :customerid, `groupname` = :groupname, `gid` = :guid, `members` = :members
|
|
");
|
|
$ins_data = array(
|
|
'customerid' => $customerid,
|
|
'groupname' => $loginname,
|
|
'guid' => $guid,
|
|
'members' => $loginname . ',' . Settings::Get('system.httpuser')
|
|
);
|
|
|
|
// also, add froxlor-local user to ftp-group (if exists!) to
|
|
// allow access to customer-directories from within the panel, which
|
|
// is necessary when pathedit = Dropdown
|
|
if ((int) Settings::Get('system.mod_fcgid_ownvhost') == 1 || (int) Settings::Get('phpfpm.enabled_ownvhost') == 1) {
|
|
if ((int) Settings::Get('system.mod_fcgid') == 1) {
|
|
$local_user = Settings::Get('system.mod_fcgid_httpuser');
|
|
} else {
|
|
$local_user = Settings::Get('phpfpm.vhost_httpuser');
|
|
}
|
|
// check froxlor-local user membership in ftp-group
|
|
// without this check addition may duplicate user in list if httpuser == local_user
|
|
if (strpos($ins_data['members'], $local_user) == false) {
|
|
$ins_data['members'] .= ',' . $local_user;
|
|
}
|
|
}
|
|
Database::pexecute($ins_stmt, $ins_data, true, true);
|
|
|
|
// FTP-Quotatallies
|
|
// @fixme use Ftp-ApiCommand later
|
|
$ins_stmt = Database::prepare("
|
|
INSERT INTO `" . TABLE_FTP_QUOTATALLIES . "` SET `name` = :name, `quota_type` = 'user', `bytes_in_used` = '0',
|
|
`bytes_out_used` = '0', `bytes_xfer_used` = '0', `files_in_used` = '0', `files_out_used` = '0', `files_xfer_used` = '0'
|
|
");
|
|
Database::pexecute($ins_stmt, array(
|
|
'name' => $loginname
|
|
), true, true);
|
|
$this->logger()->logAction(ADM_ACTION, LOG_NOTICE, "[API] automatically added ftp-account for user '" . $loginname . "'");
|
|
|
|
$_stdsubdomain = '';
|
|
if ($createstdsubdomain == '1') {
|
|
if (Settings::Get('system.stdsubdomain') !== null && Settings::Get('system.stdsubdomain') != '') {
|
|
$_stdsubdomain = $loginname . '.' . Settings::Get('system.stdsubdomain');
|
|
} else {
|
|
$_stdsubdomain = $loginname . '.' . Settings::Get('system.hostname');
|
|
}
|
|
|
|
$ins_data = array(
|
|
'domain' => $_stdsubdomain,
|
|
'customerid' => $customerid,
|
|
'adminid' => $this->getUserDetail('adminid'),
|
|
'docroot' => $documentroot,
|
|
'phpenabled' => $phpenabled,
|
|
'openbasedir' => '1'
|
|
);
|
|
$domainid = - 1;
|
|
try {
|
|
$std_domain = $this->apiCall('Domains.add', $ins_data);
|
|
$domainid = $std_domain['id'];
|
|
} catch (Exception $e) {
|
|
$this->logger()->logAction(ADM_ACTION, LOG_ERR, "[API] Unable to add standard-subdomain: " . $e->getMessage());
|
|
}
|
|
|
|
if ($domainid > 0) {
|
|
$upd_stmt = Database::prepare("
|
|
UPDATE `" . TABLE_PANEL_CUSTOMERS . "` SET `standardsubdomain` = :domainid WHERE `customerid` = :customerid
|
|
");
|
|
Database::pexecute($upd_stmt, array(
|
|
'domainid' => $domainid,
|
|
'customerid' => $customerid
|
|
), true, true);
|
|
$this->logger()->logAction(ADM_ACTION, LOG_NOTICE, "[API] automatically added standardsubdomain for user '" . $loginname . "'");
|
|
inserttask('1');
|
|
}
|
|
}
|
|
|
|
if ($sendpassword == '1') {
|
|
|
|
$srv_hostname = Settings::Get('system.hostname');
|
|
if (Settings::Get('system.froxlordirectlyviahostname') == '0') {
|
|
$srv_hostname .= '/' . basename(FROXLOR_INSTALL_DIR);
|
|
}
|
|
|
|
$srv_ip_stmt = Database::prepare("
|
|
SELECT ip, port FROM `" . TABLE_PANEL_IPSANDPORTS . "`
|
|
WHERE `id` = :defaultip
|
|
");
|
|
$default_ips = Settings::Get('system.defaultip');
|
|
$default_ips = explode(',', $default_ips);
|
|
$srv_ip = Database::pexecute_first($srv_ip_stmt, array(
|
|
'defaultip' => reset($default_ips)
|
|
), true, true);
|
|
|
|
$replace_arr = array(
|
|
'FIRSTNAME' => $firstname,
|
|
'NAME' => $name,
|
|
'COMPANY' => $company,
|
|
'SALUTATION' => getCorrectUserSalutation(array(
|
|
'firstname' => $firstname,
|
|
'name' => $name,
|
|
'company' => $company
|
|
)),
|
|
'USERNAME' => $loginname,
|
|
'PASSWORD' => $password,
|
|
'SERVER_HOSTNAME' => $srv_hostname,
|
|
'SERVER_IP' => isset($srv_ip['ip']) ? $srv_ip['ip'] : '',
|
|
'SERVER_PORT' => isset($srv_ip['port']) ? $srv_ip['port'] : '',
|
|
'DOMAINNAME' => $_stdsubdomain
|
|
);
|
|
|
|
// get template for mail subject
|
|
$mail_subject = $this->getMailTemplate(array(
|
|
'adminid' => $this->getUserDetail('adminid'),
|
|
'def_language' => $def_language
|
|
), 'mails', 'createcustomer_subject', $replace_arr, $this->lng['mails']['createcustomer']['subject']);
|
|
// get template for mail body
|
|
$mail_body = $this->getMailTemplate(array(
|
|
'adminid' => $this->getUserDetail('adminid'),
|
|
'def_language' => $def_language
|
|
), 'mails', 'createcustomer_mailbody', $replace_arr, $this->lng['mails']['createcustomer']['mailbody']);
|
|
|
|
$_mailerror = false;
|
|
try {
|
|
$this->mailer()->Subject = $mail_subject;
|
|
$this->mailer()->AltBody = $mail_body;
|
|
$this->mailer()->MsgHTML(str_replace("\n", "<br />", $mail_body));
|
|
$this->mailer()->AddAddress($email, getCorrectUserSalutation(array(
|
|
'firstname' => $firstname,
|
|
'name' => $name,
|
|
'company' => $company
|
|
)));
|
|
$this->mailer()->Send();
|
|
} catch (phpmailerException $e) {
|
|
$mailerr_msg = $e->errorMessage();
|
|
$_mailerror = true;
|
|
} catch (Exception $e) {
|
|
$mailerr_msg = $e->getMessage();
|
|
$_mailerror = true;
|
|
}
|
|
|
|
if ($_mailerror) {
|
|
$this->logger()->logAction(ADM_ACTION, LOG_ERR, "[API] Error sending mail: " . $mailerr_msg);
|
|
standard_error('errorsendingmail', $email, true);
|
|
}
|
|
|
|
$this->mailer()->ClearAddresses();
|
|
$this->logger()->logAction(ADM_ACTION, LOG_NOTICE, "[API] automatically sent password to user '" . $loginname . "'");
|
|
}
|
|
}
|
|
$this->logger()->logAction(ADM_ACTION, LOG_WARNING, "[API] added customer '" . $loginname . "'");
|
|
|
|
$result = $this->apiCall('Customers.get', array(
|
|
'loginname' => $loginname
|
|
));
|
|
return $this->response(200, "successfull", $result);
|
|
}
|
|
throw new Exception("No more resources available", 406);
|
|
}
|
|
throw new Exception("Not allowed to execute given command.", 403);
|
|
}
|
|
|
|
/**
|
|
* update customer entry by either id or loginname
|
|
*
|
|
* @param int $id
|
|
* optional, the customer-id
|
|
* @param string $loginname
|
|
* optional, the loginname
|
|
*
|
|
* @access admin, customer
|
|
* @throws Exception
|
|
* @return array
|
|
*/
|
|
public function update()
|
|
{
|
|
$id = $this->getParam('id', true, 0);
|
|
$ln_optional = ($id <= 0 ? false : true);
|
|
$loginname = $this->getParam('loginname', $ln_optional, '');
|
|
|
|
$result = $this->apiCall('Customers.get', array(
|
|
'id' => $id,
|
|
'loginname' => $loginname
|
|
));
|
|
$id = $result['customerid'];
|
|
|
|
if ($this->isAdmin()) {
|
|
// parameters
|
|
$move_to_admin = intval_ressource($this->getParam('move_to_admin', true, 0));
|
|
|
|
$idna_convert = new idna_convert_wrapper();
|
|
$email = $this->getParam('email', true, $idna_convert->decode($result['email']));
|
|
$name = $this->getParam('name', true, $result['name']);
|
|
$firstname = $this->getParam('firstname', true, $result['firstname']);
|
|
$company_required = (! empty($name) && empty($firstname)) || (empty($name) && ! empty($firstname)) || (empty($name) && empty($firstname));
|
|
$company = $this->getParam('company', ($company_required ? false : true), $result['company']);
|
|
$street = $this->getParam('street', true, $result['street']);
|
|
$zipcode = $this->getParam('zipcode', true, $result['zipcode']);
|
|
$city = $this->getParam('city', true, $result['city']);
|
|
$phone = $this->getParam('phone', true, $result['phone']);
|
|
$fax = $this->getParam('fax', true, $result['fax']);
|
|
$customernumber = $this->getParam('customernumber', true, $result['customernumber']);
|
|
$def_language = $this->getParam('def_language', true, $result['def_language']);
|
|
$gender = intval_ressource($this->getParam('gender', true, $result['gender']));
|
|
$custom_notes = $this->getParam('custom_notes', true, $result['custom_notes']);
|
|
$custom_notes_show = $this->getParam('custom_notes_show', true, $result['custom_notes_show']);
|
|
|
|
$dec_places = Settings::Get('panel.decimal_places');
|
|
$diskspace = $this->getUlParam('diskspace', 'diskspace_ul', true, round($result['diskspace'] / 1024, $dec_places));
|
|
$traffic = $this->getUlParam('traffic', 'traffic_ul', true, round($result['traffic'] / (1024 * 1024), $dec_places));
|
|
$subdomains = $this->getUlParam('subdomains', 'subdomains_ul', true, $result['subdomains']);
|
|
$emails = $this->getUlParam('emails', 'emails_ul', true, $result['emails']);
|
|
$email_accounts = $this->getUlParam('email_accounts', 'email_accounts_ul', true, $result['email_accounts']);
|
|
$email_forwarders = $this->getUlParam('email_forwarders', 'email_forwarders_ul', true, $result['email_forwarders']);
|
|
$email_quota = $this->getUlParam('email_quota', 'email_quota_ul', true, $result['email_quota']);
|
|
$email_imap = $this->getParam('email_imap', true, $result['imap']);
|
|
$email_pop3 = $this->getParam('email_pop3', true, $result['pop3']);
|
|
$ftps = $this->getUlParam('ftps', 'ftps_ul', true, $result['ftps']);
|
|
$tickets = $this->getUlParam('tickets', 'tickets_ul', true, $result['tickets']);
|
|
$mysqls = $this->getUlParam('mysqls', 'mysqls_ul', true, $result['mysqls']);
|
|
$createstdsubdomain = $this->getParam('createstdsubdomain', true, 0);
|
|
$password = $this->getParam('new_customer_password', true, '');
|
|
$phpenabled = $this->getParam('phpenabled', true, $result['phpenabled']);
|
|
$allowed_phpconfigs = $this->getParam('allowed_phpconfigs', true, json_decode($result['allowed_phpconfigs'], true));
|
|
$perlenabled = $this->getParam('perlenabled', true, $result['perlenabled']);
|
|
$dnsenabled = $this->getParam('dnsenabled', true, $result['dnsenabled']);
|
|
$deactivated = $this->getParam('deactivated', true, $result['deactivated']);
|
|
$theme = $this->getParam('theme', true, $result['theme']);
|
|
} else {
|
|
// allowed parameters
|
|
$def_language = $this->getParam('def_language', true, $result['def_language']);
|
|
$password = $this->getParam('new_customer_password', true, '');
|
|
$theme = $this->getParam('theme', true, $result['theme']);
|
|
}
|
|
|
|
// validation
|
|
if ($this->isAdmin()) {
|
|
$idna_convert = new idna_convert_wrapper();
|
|
$name = validate($name, 'name', '', '', array(), true);
|
|
$firstname = validate($firstname, 'first name', '', '', array(), true);
|
|
$company = validate($company, 'company', '', '', array(), true);
|
|
$street = validate($street, 'street', '', '', array(), true);
|
|
$zipcode = validate($zipcode, 'zipcode', '/^[0-9 \-A-Z]*$/', '', array(), true);
|
|
$city = validate($city, 'city', '', '', array(), true);
|
|
$phone = validate($phone, 'phone', '/^[0-9\- \+\(\)\/]*$/', '', array(), true);
|
|
$fax = validate($fax, 'fax', '/^[0-9\- \+\(\)\/]*$/', '', array(), true);
|
|
$email = $idna_convert->encode(validate($email, 'email', '', '', array(), true));
|
|
$customernumber = validate($customernumber, 'customer number', '/^[A-Za-z0-9 \-]*$/Di', '', array(), true);
|
|
$custom_notes = validate(str_replace("\r\n", "\n", $custom_notes), 'custom_notes', '/^[^\0]*$/', '', array(), true);
|
|
}
|
|
$def_language = validate($def_language, 'default language', '', '', array(), true);
|
|
$theme = validate($theme, 'theme', '', '', array(), true);
|
|
|
|
if (Settings::Get('system.mail_quota_enabled') != '1') {
|
|
$email_quota = - 1;
|
|
}
|
|
|
|
if (Settings::Get('ticket.enabled') != '1') {
|
|
$tickets = - 1;
|
|
}
|
|
|
|
if (empty($theme)) {
|
|
$theme = Settings::Get('panel.default_theme');
|
|
}
|
|
|
|
if ($this->isAdmin()) {
|
|
|
|
$diskspace = $diskspace * 1024;
|
|
$traffic = $traffic * 1024 * 1024;
|
|
|
|
if (((($this->getUserDetail('diskspace_used') + $diskspace - $result['diskspace']) > $this->getUserDetail('diskspace')) && ($this->getUserDetail('diskspace') / 1024) != '-1') || ((($this->getUserDetail('mysqls_used') + $mysqls - $result['mysqls']) > $this->getUserDetail('mysqls')) && $this->getUserDetail('mysqls') != '-1') || ((($this->getUserDetail('emails_used') + $emails - $result['emails']) > $this->getUserDetail('emails')) && $this->getUserDetail('emails') != '-1') || ((($this->getUserDetail('email_accounts_used') + $email_accounts - $result['email_accounts']) > $this->getUserDetail('email_accounts')) && $this->getUserDetail('email_accounts') != '-1') || ((($this->getUserDetail('email_forwarders_used') + $email_forwarders - $result['email_forwarders']) > $this->getUserDetail('email_forwarders')) && $this->getUserDetail('email_forwarders') != '-1') || ((($this->getUserDetail('email_quota_used') + $email_quota - $result['email_quota']) > $this->getUserDetail('email_quota')) && $this->getUserDetail('email_quota') != '-1' && Settings::Get('system.mail_quota_enabled') == '1') || ((($this->getUserDetail('ftps_used') + $ftps - $result['ftps']) > $this->getUserDetail('ftps')) && $this->getUserDetail('ftps') != '-1') || ((($this->getUserDetail('tickets_used') + $tickets - $result['tickets']) > $this->getUserDetail('tickets')) && $this->getUserDetail('tickets') != '-1') || ((($this->getUserDetail('subdomains_used') + $subdomains - $result['subdomains']) > $this->getUserDetail('subdomains')) && $this->getUserDetail('subdomains') != '-1') || (($diskspace / 1024) == '-1' && ($this->getUserDetail('diskspace') / 1024) != '-1') || ($mysqls == '-1' && $this->getUserDetail('mysqls') != '-1') || ($emails == '-1' && $this->getUserDetail('emails') != '-1') || ($email_accounts == '-1' && $this->getUserDetail('email_accounts') != '-1') || ($email_forwarders == '-1' && $this->getUserDetail('email_forwarders') != '-1') || ($email_quota == '-1' && $this->getUserDetail('email_quota') != '-1' && Settings::Get('system.mail_quota_enabled') == '1') || ($ftps == '-1' && $this->getUserDetail('ftps') != '-1') || ($tickets == '-1' && $this->getUserDetail('tickets') != '-1') || ($subdomains == '-1' && $this->getUserDetail('subdomains') != '-1')) {
|
|
standard_error('youcantallocatemorethanyouhave', '', true);
|
|
}
|
|
|
|
if ($email == '') {
|
|
standard_error(array(
|
|
'stringisempty',
|
|
'emailadd'
|
|
), '', true);
|
|
} elseif (! validateEmail($email)) {
|
|
standard_error('emailiswrong', $email, true);
|
|
}
|
|
}
|
|
|
|
if ($password != '') {
|
|
$password = validatePassword($password, true);
|
|
$password = makeCryptPassword($password);
|
|
} else {
|
|
$password = $result['password'];
|
|
}
|
|
|
|
if ($this->isAdmin()) {
|
|
if ($createstdsubdomain != '1') {
|
|
$createstdsubdomain = '0';
|
|
}
|
|
|
|
if ($createstdsubdomain == '1' && $result['standardsubdomain'] == '0') {
|
|
|
|
if (Settings::Get('system.stdsubdomain') !== null && Settings::Get('system.stdsubdomain') != '') {
|
|
$_stdsubdomain = $result['loginname'] . '.' . Settings::Get('system.stdsubdomain');
|
|
} else {
|
|
$_stdsubdomain = $result['loginname'] . '.' . Settings::Get('system.hostname');
|
|
}
|
|
|
|
$ins_data = array(
|
|
'domain' => $_stdsubdomain,
|
|
'customerid' => $result['customerid'],
|
|
'adminid' => $this->getUserDetail('adminid'),
|
|
'docroot' => $result['documentroot'],
|
|
'phpenabled' => $phpenabled,
|
|
'openbasedir' => '1'
|
|
);
|
|
$domainid = - 1;
|
|
try {
|
|
$std_domain = $this->apiCall('Domains.add', $ins_data);
|
|
$domainid = $std_domain['id'];
|
|
} catch (Exception $e) {
|
|
$this->logger()->logAction(ADM_ACTION, LOG_ERR, "[API] Unable to add standard-subdomain: " . $e->getMessage());
|
|
}
|
|
|
|
if ($domainid > 0) {
|
|
$upd_stmt = Database::prepare("
|
|
UPDATE `" . TABLE_PANEL_CUSTOMERS . "` SET `standardsubdomain` = :domainid WHERE `customerid` = :customerid
|
|
");
|
|
Database::pexecute($upd_stmt, array(
|
|
'domainid' => $domainid,
|
|
'customerid' => $result['customerid']
|
|
), true, true);
|
|
$this->logger()->logAction(ADM_ACTION, LOG_NOTICE, "[API] automatically added standardsubdomain for user '" . $result['loginname'] . "'");
|
|
inserttask('1');
|
|
}
|
|
}
|
|
|
|
if ($createstdsubdomain == '0' && $result['standardsubdomain'] != '0') {
|
|
try {
|
|
$std_domain = $this->apiCall('Domains.delete', array(
|
|
'id' => $result['standardsubdomain'],
|
|
'is_stdsubdomain' => 1
|
|
));
|
|
} catch (Exception $e) {
|
|
$this->logger()->logAction(ADM_ACTION, LOG_ERR, "[API] Unable to delete standard-subdomain: " . $e->getMessage());
|
|
}
|
|
$this->logger()->logAction(ADM_ACTION, LOG_NOTICE, "[API] automatically deleted standardsubdomain for user '" . $result['loginname'] . "'");
|
|
inserttask('1');
|
|
}
|
|
|
|
if ($deactivated != '1') {
|
|
$deactivated = '0';
|
|
}
|
|
|
|
if ($phpenabled != '0') {
|
|
$phpenabled = '1';
|
|
}
|
|
|
|
if ($perlenabled != '0') {
|
|
$perlenabled = '1';
|
|
}
|
|
|
|
if ($dnsenabled != '0') {
|
|
$dnsenabled = '1';
|
|
}
|
|
|
|
if ($phpenabled != $result['phpenabled'] || $perlenabled != $result['perlenabled']) {
|
|
inserttask('1');
|
|
}
|
|
|
|
// activate/deactivate customer services
|
|
if ($deactivated != $result['deactivated']) {
|
|
|
|
$yesno = ($deactivated ? 'N' : 'Y');
|
|
$pop3 = ($deactivated ? '0' : (int) $result['pop3']);
|
|
$imap = ($deactivated ? '0' : (int) $result['imap']);
|
|
|
|
$upd_stmt = Database::prepare("
|
|
UPDATE `" . TABLE_MAIL_USERS . "` SET `postfix`= :yesno, `pop3` = :pop3, `imap` = :imap WHERE `customerid` = :customerid
|
|
");
|
|
Database::pexecute($upd_stmt, array(
|
|
'yesno' => $yesno,
|
|
'pop3' => $pop3,
|
|
'imap' => $imap,
|
|
'customerid' => $id
|
|
));
|
|
|
|
$upd_stmt = Database::prepare("
|
|
UPDATE `" . TABLE_FTP_USERS . "` SET `login_enabled` = :yesno WHERE `customerid` = :customerid
|
|
");
|
|
Database::pexecute($upd_stmt, array(
|
|
'yesno' => $yesno,
|
|
'customerid' => $id
|
|
));
|
|
|
|
$upd_stmt = Database::prepare("
|
|
UPDATE `" . TABLE_PANEL_DOMAINS . "` SET `deactivated`= :deactivated WHERE `customerid` = :customerid");
|
|
Database::pexecute($upd_stmt, array(
|
|
'deactivated' => $deactivated,
|
|
'customerid' => $id
|
|
));
|
|
|
|
// Retrieve customer's databases
|
|
$databases_stmt = Database::prepare("SELECT * FROM " . TABLE_PANEL_DATABASES . " WHERE customerid = :customerid ORDER BY `dbserver`");
|
|
Database::pexecute($databases_stmt, array(
|
|
'customerid' => $id
|
|
));
|
|
|
|
Database::needRoot(true);
|
|
$last_dbserver = 0;
|
|
|
|
$dbm = new DbManager($this->logger());
|
|
|
|
// For each of them
|
|
while ($row_database = $databases_stmt->fetch(PDO::FETCH_ASSOC)) {
|
|
|
|
if ($last_dbserver != $row_database['dbserver']) {
|
|
$dbm->getManager()->flushPrivileges();
|
|
Database::needRoot(true, $row_database['dbserver']);
|
|
$last_dbserver = $row_database['dbserver'];
|
|
}
|
|
|
|
foreach (array_unique(explode(',', Settings::Get('system.mysql_access_host'))) as $mysql_access_host) {
|
|
$mysql_access_host = trim($mysql_access_host);
|
|
|
|
// Prevent access, if deactivated
|
|
if ($deactivated) {
|
|
// failsafe if user has been deleted manually (requires MySQL 4.1.2+)
|
|
$dbm->getManager()->disableUser($row_database['databasename'], $mysql_access_host);
|
|
} else {
|
|
// Otherwise grant access
|
|
$dbm->getManager()->enableUser($row_database['databasename'], $mysql_access_host);
|
|
}
|
|
}
|
|
}
|
|
|
|
// At last flush the new privileges
|
|
$dbm->getManager()->flushPrivileges();
|
|
Database::needRoot(false);
|
|
|
|
// reactivate/deactivate api-keys
|
|
$valid_until = $deactivated ? 0 : - 1;
|
|
$stmt = Database::prepare("UPDATE `" . TABLE_API_KEYS . "` SET `valid_until` = :vu WHERE `customerid` = :id");
|
|
Database::pexecute($stmt, array(
|
|
'id' => $id,
|
|
'vu' => $valid_until
|
|
), true, true);
|
|
|
|
$this->logger()->logAction(ADM_ACTION, LOG_INFO, "[API] " . ($deactivated ? 'deactivated' : 'reactivated') . " user '" . $result['loginname'] . "'");
|
|
inserttask('1');
|
|
}
|
|
|
|
// Disable or enable POP3 Login for customers Mail Accounts
|
|
if ($email_pop3 != $result['pop3']) {
|
|
$upd_stmt = Database::prepare("UPDATE `" . TABLE_MAIL_USERS . "` SET `pop3` = :pop3 WHERE `customerid` = :customerid");
|
|
Database::pexecute($upd_stmt, array(
|
|
'pop3' => $email_pop3,
|
|
'customerid' => $id
|
|
));
|
|
}
|
|
|
|
// Disable or enable IMAP Login for customers Mail Accounts
|
|
if ($email_imap != $result['imap']) {
|
|
$upd_stmt = Database::prepare("UPDATE `" . TABLE_MAIL_USERS . "` SET `imap` = :imap WHERE `customerid` = :customerid");
|
|
Database::pexecute($upd_stmt, array(
|
|
'imap' => $email_imap,
|
|
'customerid' => $id
|
|
));
|
|
}
|
|
}
|
|
|
|
$upd_data = array(
|
|
'customerid' => $id,
|
|
'passwd' => $password,
|
|
'lang' => $def_language,
|
|
'theme' => $theme
|
|
);
|
|
|
|
if ($this->isAdmin()) {
|
|
$admin_upd_data = array(
|
|
'name' => $name,
|
|
'firstname' => $firstname,
|
|
'gender' => $gender,
|
|
'company' => $company,
|
|
'street' => $street,
|
|
'zipcode' => $zipcode,
|
|
'city' => $city,
|
|
'phone' => $phone,
|
|
'fax' => $fax,
|
|
'email' => $email,
|
|
'customerno' => $customernumber,
|
|
'diskspace' => $diskspace,
|
|
'traffic' => $traffic,
|
|
'subdomains' => $subdomains,
|
|
'emails' => $emails,
|
|
'email_accounts' => $email_accounts,
|
|
'email_forwarders' => $email_forwarders,
|
|
'email_quota' => $email_quota,
|
|
'ftps' => $ftps,
|
|
'tickets' => $tickets,
|
|
'mysqls' => $mysqls,
|
|
'deactivated' => $deactivated,
|
|
'phpenabled' => $phpenabled,
|
|
'allowed_phpconfigs' => empty($allowed_phpconfigs) ? "" : json_encode($allowed_phpconfigs),
|
|
'imap' => $email_imap,
|
|
'pop3' => $email_pop3,
|
|
'perlenabled' => $perlenabled,
|
|
'dnsenabled' => $dnsenabled,
|
|
'custom_notes' => $custom_notes,
|
|
'custom_notes_show' => $custom_notes_show
|
|
);
|
|
$upd_data = $upd_data + $admin_upd_data;
|
|
}
|
|
|
|
$upd_query = "UPDATE `" . TABLE_PANEL_CUSTOMERS . "` SET
|
|
`def_language` = :lang,
|
|
`password` = :passwd,
|
|
`theme` = :theme";
|
|
|
|
if ($this->isAdmin()) {
|
|
$admin_upd_query = ",
|
|
`name` = :name,
|
|
`firstname` = :firstname,
|
|
`gender` = :gender,
|
|
`company` = :company,
|
|
`street` = :street,
|
|
`zipcode` = :zipcode,
|
|
`city` = :city,
|
|
`phone` = :phone,
|
|
`fax` = :fax,
|
|
`email` = :email,
|
|
`customernumber` = :customerno,
|
|
`diskspace` = :diskspace,
|
|
`traffic` = :traffic,
|
|
`subdomains` = :subdomains,
|
|
`emails` = :emails,
|
|
`email_accounts` = :email_accounts,
|
|
`email_forwarders` = :email_forwarders,
|
|
`ftps` = :ftps,
|
|
`tickets` = :tickets,
|
|
`mysqls` = :mysqls,
|
|
`deactivated` = :deactivated,
|
|
`phpenabled` = :phpenabled,
|
|
`allowed_phpconfigs` = :allowed_phpconfigs,
|
|
`email_quota` = :email_quota,
|
|
`imap` = :imap,
|
|
`pop3` = :pop3,
|
|
`perlenabled` = :perlenabled,
|
|
`dnsenabled` = :dnsenabled,
|
|
`custom_notes` = :custom_notes,
|
|
`custom_notes_show` = :custom_notes_show";
|
|
$upd_query .= $admin_upd_query;
|
|
}
|
|
$upd_query .= " WHERE `customerid` = :customerid";
|
|
$upd_stmt = Database::prepare($upd_query);
|
|
Database::pexecute($upd_stmt, $upd_data);
|
|
|
|
if ($this->isAdmin()) {
|
|
// Using filesystem - quota, insert a task which cleans the filesystem - quota
|
|
inserttask('10');
|
|
|
|
$admin_update_query = "UPDATE `" . TABLE_PANEL_ADMINS . "` SET `customers_used` = `customers_used` ";
|
|
|
|
if ($mysqls != '-1' || $result['mysqls'] != '-1') {
|
|
$admin_update_query .= ", `mysqls_used` = `mysqls_used` ";
|
|
|
|
if ($mysqls != '-1') {
|
|
$admin_update_query .= " + 0" . (int) $mysqls . " ";
|
|
}
|
|
if ($result['mysqls'] != '-1') {
|
|
$admin_update_query .= " - 0" . (int) $result['mysqls'] . " ";
|
|
}
|
|
}
|
|
|
|
if ($emails != '-1' || $result['emails'] != '-1') {
|
|
$admin_update_query .= ", `emails_used` = `emails_used` ";
|
|
|
|
if ($emails != '-1') {
|
|
$admin_update_query .= " + 0" . (int) $emails . " ";
|
|
}
|
|
if ($result['emails'] != '-1') {
|
|
$admin_update_query .= " - 0" . (int) $result['emails'] . " ";
|
|
}
|
|
}
|
|
|
|
if ($email_accounts != '-1' || $result['email_accounts'] != '-1') {
|
|
$admin_update_query .= ", `email_accounts_used` = `email_accounts_used` ";
|
|
|
|
if ($email_accounts != '-1') {
|
|
$admin_update_query .= " + 0" . (int) $email_accounts . " ";
|
|
}
|
|
if ($result['email_accounts'] != '-1') {
|
|
$admin_update_query .= " - 0" . (int) $result['email_accounts'] . " ";
|
|
}
|
|
}
|
|
|
|
if ($email_forwarders != '-1' || $result['email_forwarders'] != '-1') {
|
|
$admin_update_query .= ", `email_forwarders_used` = `email_forwarders_used` ";
|
|
|
|
if ($email_forwarders != '-1') {
|
|
$admin_update_query .= " + 0" . (int) $email_forwarders . " ";
|
|
}
|
|
if ($result['email_forwarders'] != '-1') {
|
|
$admin_update_query .= " - 0" . (int) $result['email_forwarders'] . " ";
|
|
}
|
|
}
|
|
|
|
if ($email_quota != '-1' || $result['email_quota'] != '-1') {
|
|
$admin_update_query .= ", `email_quota_used` = `email_quota_used` ";
|
|
|
|
if ($email_quota != '-1') {
|
|
$admin_update_query .= " + 0" . (int) $email_quota . " ";
|
|
}
|
|
if ($result['email_quota'] != '-1') {
|
|
$admin_update_query .= " - 0" . (int) $result['email_quota'] . " ";
|
|
}
|
|
}
|
|
|
|
if ($subdomains != '-1' || $result['subdomains'] != '-1') {
|
|
$admin_update_query .= ", `subdomains_used` = `subdomains_used` ";
|
|
|
|
if ($subdomains != '-1') {
|
|
$admin_update_query .= " + 0" . (int) $subdomains . " ";
|
|
}
|
|
if ($result['subdomains'] != '-1') {
|
|
$admin_update_query .= " - 0" . (int) $result['subdomains'] . " ";
|
|
}
|
|
}
|
|
|
|
if ($ftps != '-1' || $result['ftps'] != '-1') {
|
|
$admin_update_query .= ", `ftps_used` = `ftps_used` ";
|
|
|
|
if ($ftps != '-1') {
|
|
$admin_update_query .= " + 0" . (int) $ftps . " ";
|
|
}
|
|
if ($result['ftps'] != '-1') {
|
|
$admin_update_query .= " - 0" . (int) $result['ftps'] . " ";
|
|
}
|
|
}
|
|
|
|
if ($tickets != '-1' || $result['tickets'] != '-1') {
|
|
$admin_update_query .= ", `tickets_used` = `tickets_used` ";
|
|
|
|
if ($tickets != '-1') {
|
|
$admin_update_query .= " + 0" . (int) $tickets . " ";
|
|
}
|
|
if ($result['tickets'] != '-1') {
|
|
$admin_update_query .= " - 0" . (int) $result['tickets'] . " ";
|
|
}
|
|
}
|
|
|
|
if (($diskspace / 1024) != '-1' || ($result['diskspace'] / 1024) != '-1') {
|
|
$admin_update_query .= ", `diskspace_used` = `diskspace_used` ";
|
|
|
|
if (($diskspace / 1024) != '-1') {
|
|
$admin_update_query .= " + 0" . (int) $diskspace . " ";
|
|
}
|
|
if (($result['diskspace'] / 1024) != '-1') {
|
|
$admin_update_query .= " - 0" . (int) $result['diskspace'] . " ";
|
|
}
|
|
}
|
|
|
|
$admin_update_query .= " WHERE `adminid` = '" . (int) $result['adminid'] . "'";
|
|
Database::query($admin_update_query);
|
|
}
|
|
|
|
$this->logger()->logAction($this->isAdmin() ? ADM_ACTION : USR_ACTION, LOG_INFO, "[API] edited user '" . $result['loginname'] . "'");
|
|
|
|
/*
|
|
* move customer to another admin/reseller; #1166
|
|
*/
|
|
if ($this->isAdmin()) {
|
|
if ($move_to_admin > 0 && $move_to_admin != $result['adminid']) {
|
|
$move_result = $this->apiCall('Customers.move', array(
|
|
'id' => $result['customerid'],
|
|
'adminid' => $move_to_admin
|
|
));
|
|
if ($move_result != true) {
|
|
standard_error('moveofcustomerfailed', $move_result, true);
|
|
}
|
|
}
|
|
}
|
|
|
|
$result = $this->apiCall('Customers.get', array(
|
|
'id' => $result['customerid']
|
|
));
|
|
return $this->response(200, "successfull", $result);
|
|
}
|
|
|
|
/**
|
|
* delete a customer entry by either id or loginname
|
|
*
|
|
* @param int $id
|
|
* optional, the customer-id
|
|
* @param string $loginname
|
|
* optional, the loginname
|
|
* @param bool $delete_userfiles
|
|
* optional, default false
|
|
*
|
|
* @access admin
|
|
* @throws Exception
|
|
* @return array
|
|
*/
|
|
public function delete()
|
|
{
|
|
if ($this->isAdmin()) {
|
|
$id = $this->getParam('id', true, 0);
|
|
$ln_optional = ($id <= 0 ? false : true);
|
|
$loginname = $this->getParam('loginname', $ln_optional, '');
|
|
$delete_userfiles = $this->getParam('delete_userfiles', true, 0);
|
|
|
|
$result = $this->apiCall('Customers.get', array(
|
|
'id' => $id,
|
|
'loginname' => $loginname
|
|
));
|
|
$id = $result['customerid'];
|
|
|
|
// @fixme use Databases-ApiCommand later
|
|
$databases_stmt = Database::prepare("
|
|
SELECT * FROM `" . TABLE_PANEL_DATABASES . "`
|
|
WHERE `customerid` = :id ORDER BY `dbserver`
|
|
");
|
|
Database::pexecute($databases_stmt, array(
|
|
'id' => $id
|
|
));
|
|
Database::needRoot(true);
|
|
$last_dbserver = 0;
|
|
|
|
$dbm = new DbManager($this->logger());
|
|
|
|
while ($row_database = $databases_stmt->fetch(PDO::FETCH_ASSOC)) {
|
|
if ($last_dbserver != $row_database['dbserver']) {
|
|
Database::needRoot(true, $row_database['dbserver']);
|
|
$dbm->getManager()->flushPrivileges();
|
|
$last_dbserver = $row_database['dbserver'];
|
|
}
|
|
$dbm->getManager()->deleteDatabase($row_database['databasename']);
|
|
}
|
|
$dbm->getManager()->flushPrivileges();
|
|
Database::needRoot(false);
|
|
|
|
// delete customer itself
|
|
$stmt = Database::prepare("DELETE FROM `" . TABLE_PANEL_CUSTOMERS . "` WHERE `customerid` = :id");
|
|
Database::pexecute($stmt, array(
|
|
'id' => $id
|
|
), true, true);
|
|
|
|
// delete customer databases
|
|
$stmt = Database::prepare("DELETE FROM `" . TABLE_PANEL_DATABASES . "` WHERE `customerid` = :id");
|
|
Database::pexecute($stmt, array(
|
|
'id' => $id
|
|
), true, true);
|
|
|
|
// first gather all domain-id's to clean up panel_domaintoip and dns-entries accordingly
|
|
$did_stmt = Database::prepare("SELECT `id` FROM `" . TABLE_PANEL_DOMAINS . "` WHERE `customerid` = :id");
|
|
Database::pexecute($did_stmt, array(
|
|
'id' => $id
|
|
), true, true);
|
|
while ($row = $did_stmt->fetch(PDO::FETCH_ASSOC)) {
|
|
// remove domain->ip connection
|
|
$stmt = Database::prepare("DELETE FROM `" . TABLE_DOMAINTOIP . "` WHERE `id_domain` = :did");
|
|
Database::pexecute($stmt, array(
|
|
'did' => $row['id']
|
|
), true, true);
|
|
// remove domain->dns entries
|
|
$stmt = Database::prepare("DELETE FROM `" . TABLE_DOMAIN_DNS . "` WHERE `domain_id` = :did");
|
|
Database::pexecute($stmt, array(
|
|
'did' => $row['id']
|
|
), true, true);
|
|
}
|
|
// remove customer domains
|
|
$stmt = Database::prepare("DELETE FROM `" . TABLE_PANEL_DOMAINS . "` WHERE `customerid` = :id");
|
|
Database::pexecute($stmt, array(
|
|
'id' => $id
|
|
), true, true);
|
|
$domains_deleted = $stmt->rowCount();
|
|
|
|
// delete htpasswds
|
|
$stmt = Database::prepare("DELETE FROM `" . TABLE_PANEL_HTPASSWDS . "` WHERE `customerid` = :id");
|
|
Database::pexecute($stmt, array(
|
|
'id' => $id
|
|
), true, true);
|
|
|
|
// delete htaccess options
|
|
$stmt = Database::prepare("DELETE FROM `" . TABLE_PANEL_HTACCESS . "` WHERE `customerid` = :id");
|
|
Database::pexecute($stmt, array(
|
|
'id' => $id
|
|
), true, true);
|
|
|
|
// delete potential existing sessions
|
|
$stmt = Database::prepare("DELETE FROM `" . TABLE_PANEL_SESSIONS . "` WHERE `userid` = :id AND `adminsession` = '0'");
|
|
Database::pexecute($stmt, array(
|
|
'id' => $id
|
|
), true, true);
|
|
|
|
// delete traffic information
|
|
$stmt = Database::prepare("DELETE FROM `" . TABLE_PANEL_TRAFFIC . "` WHERE `customerid` = :id");
|
|
Database::pexecute($stmt, array(
|
|
'id' => $id
|
|
), true, true);
|
|
|
|
// remove diskspace analysis
|
|
$stmt = Database::prepare("DELETE FROM `" . TABLE_PANEL_DISKSPACE . "` WHERE `customerid` = :id");
|
|
Database::pexecute($stmt, array(
|
|
'id' => $id
|
|
), true, true);
|
|
|
|
// delete mail-accounts
|
|
$stmt = Database::prepare("DELETE FROM `" . TABLE_MAIL_USERS . "` WHERE `customerid` = :id");
|
|
Database::pexecute($stmt, array(
|
|
'id' => $id
|
|
), true, true);
|
|
|
|
// delete mail-addresses
|
|
$stmt = Database::prepare("DELETE FROM `" . TABLE_MAIL_VIRTUAL . "` WHERE `customerid` = :id");
|
|
Database::pexecute($stmt, array(
|
|
'id' => $id
|
|
), true, true);
|
|
|
|
// gather ftp-user names
|
|
$result2_stmt = Database::prepare("SELECT `username` FROM `" . TABLE_FTP_USERS . "` WHERE `customerid` = :id");
|
|
Database::pexecute($result2_stmt, array(
|
|
'id' => $id
|
|
), true, true);
|
|
while ($row = $result2_stmt->fetch(PDO::FETCH_ASSOC)) {
|
|
// delete ftp-quotatallies by username
|
|
$stmt = Database::prepare("DELETE FROM `" . TABLE_FTP_QUOTATALLIES . "` WHERE `name` = :name");
|
|
Database::pexecute($stmt, array(
|
|
'name' => $row['username']
|
|
), true, true);
|
|
}
|
|
|
|
// remove ftp-group
|
|
$stmt = Database::prepare("DELETE FROM `" . TABLE_FTP_GROUPS . "` WHERE `customerid` = :id");
|
|
Database::pexecute($stmt, array(
|
|
'id' => $id
|
|
), true, true);
|
|
|
|
// remove ftp-users
|
|
$stmt = Database::prepare("DELETE FROM `" . TABLE_FTP_USERS . "` WHERE `customerid` = :id");
|
|
Database::pexecute($stmt, array(
|
|
'id' => $id
|
|
), true, true);
|
|
|
|
// remove api-keys
|
|
$stmt = Database::prepare("DELETE FROM `" . TABLE_API_KEYS . "` WHERE `customerid` = :id");
|
|
Database::pexecute($stmt, array(
|
|
'id' => $id
|
|
), true, true);
|
|
|
|
// Delete all waiting "create user" -tasks for this user, #276
|
|
// Note: the WHERE selects part of a serialized array, but it should be safe this way
|
|
$del_stmt = Database::prepare("
|
|
DELETE FROM `" . TABLE_PANEL_TASKS . "`
|
|
WHERE `type` = '2' AND `data` LIKE :loginname
|
|
");
|
|
Database::pexecute($del_stmt, array(
|
|
'loginname' => "%:{$result['loginname']};%"
|
|
), true, true);
|
|
|
|
// update admin-resource-usage
|
|
$admin_update_query = "UPDATE `" . TABLE_PANEL_ADMINS . "` SET `customers_used` = `customers_used` - 1 ";
|
|
$admin_update_query .= ", `domains_used` = `domains_used` - 0" . (int) ($domains_deleted - $result['subdomains_used']);
|
|
|
|
if ($result['mysqls'] != '-1') {
|
|
$admin_update_query .= ", `mysqls_used` = `mysqls_used` - 0" . (int) $result['mysqls'];
|
|
}
|
|
|
|
if ($result['emails'] != '-1') {
|
|
$admin_update_query .= ", `emails_used` = `emails_used` - 0" . (int) $result['emails'];
|
|
}
|
|
|
|
if ($result['email_accounts'] != '-1') {
|
|
$admin_update_query .= ", `email_accounts_used` = `email_accounts_used` - 0" . (int) $result['email_accounts'];
|
|
}
|
|
|
|
if ($result['email_forwarders'] != '-1') {
|
|
$admin_update_query .= ", `email_forwarders_used` = `email_forwarders_used` - 0" . (int) $result['email_forwarders'];
|
|
}
|
|
|
|
if ($result['email_quota'] != '-1') {
|
|
$admin_update_query .= ", `email_quota_used` = `email_quota_used` - 0" . (int) $result['email_quota'];
|
|
}
|
|
|
|
if ($result['subdomains'] != '-1') {
|
|
$admin_update_query .= ", `subdomains_used` = `subdomains_used` - 0" . (int) $result['subdomains'];
|
|
}
|
|
|
|
if ($result['ftps'] != '-1') {
|
|
$admin_update_query .= ", `ftps_used` = `ftps_used` - 0" . (int) $result['ftps'];
|
|
}
|
|
|
|
if ($result['tickets'] != '-1') {
|
|
$admin_update_query .= ", `tickets_used` = `tickets_used` - 0" . (int) $result['tickets'];
|
|
}
|
|
|
|
if (($result['diskspace'] / 1024) != '-1') {
|
|
$admin_update_query .= ", `diskspace_used` = `diskspace_used` - 0" . (int) $result['diskspace'];
|
|
}
|
|
|
|
$admin_update_query .= " WHERE `adminid` = '" . (int) $result['adminid'] . "'";
|
|
Database::query($admin_update_query);
|
|
|
|
// rebuild configs
|
|
inserttask('1');
|
|
|
|
// Using nameserver, insert a task which rebuilds the server config
|
|
inserttask('4');
|
|
|
|
if ($delete_userfiles == 1) {
|
|
// insert task to remove the customers files from the filesystem
|
|
inserttask('6', $result['loginname']);
|
|
}
|
|
|
|
// Using filesystem - quota, insert a task which cleans the filesystem - quota
|
|
inserttask('10');
|
|
|
|
// move old tickets to archive
|
|
$tickets = ticket::customerHasTickets($id);
|
|
if ($tickets !== false && isset($tickets[0])) {
|
|
foreach ($tickets as $ticket) {
|
|
$now = time();
|
|
$mainticket = ticket::getInstanceOf($result, (int) $ticket);
|
|
$mainticket->Set('lastchange', $now, true, true);
|
|
$mainticket->Set('lastreplier', '1', true, true);
|
|
$mainticket->Set('status', '3', true, true);
|
|
$mainticket->Update();
|
|
$mainticket->Archive();
|
|
$this->logger()->logAction(ADM_ACTION, LOG_NOTICE, "[API] archived ticket '" . $mainticket->Get('subject') . "'");
|
|
}
|
|
}
|
|
|
|
$this->logger()->logAction(ADM_ACTION, LOG_WARNING, "[API] deleted customer '" . $result['loginname'] . "'");
|
|
return $this->response(200, "successfull", $result);
|
|
}
|
|
throw new Exception("Not allowed to execute given command.", 403);
|
|
}
|
|
|
|
/**
|
|
* unlock a locked customer by either id or loginname
|
|
*
|
|
* @param int $id
|
|
* optional, the customer-id
|
|
* @param string $loginname
|
|
* optional, the loginname
|
|
*
|
|
* @access admin
|
|
* @throws Exception
|
|
* @return array
|
|
*/
|
|
public function unlock()
|
|
{
|
|
if ($this->isAdmin()) {
|
|
$id = $this->getParam('id', true, 0);
|
|
$ln_optional = ($id <= 0 ? false : true);
|
|
$loginname = $this->getParam('loginname', $ln_optional, '');
|
|
|
|
$result = $this->apiCall('Customers.get', array(
|
|
'id' => $id,
|
|
'loginname' => $loginname
|
|
));
|
|
$id = $result['customerid'];
|
|
|
|
$result_stmt = Database::prepare("
|
|
UPDATE `" . TABLE_PANEL_CUSTOMERS . "` SET
|
|
`loginfail_count` = '0'
|
|
WHERE `customerid`= :id
|
|
");
|
|
Database::pexecute($result_stmt, array(
|
|
'id' => $id
|
|
), true, true);
|
|
// set the new value for result-array
|
|
$result['loginfail_count'] = 0;
|
|
|
|
$this->logger()->logAction(ADM_ACTION, LOG_WARNING, "[API] unlocked customer '" . $result['loginname'] . "'");
|
|
return $this->response(200, "successfull", $result);
|
|
}
|
|
throw new Exception("Not allowed to execute given command.", 403);
|
|
}
|
|
|
|
/**
|
|
* Function to move a given customer to a given admin/reseller
|
|
* and update all its references accordingly
|
|
*
|
|
* @param int $id
|
|
* customer-id
|
|
* @param int $adminid
|
|
* target-admin-id
|
|
*
|
|
* @access admin
|
|
* @throws Exception
|
|
* @return array
|
|
*/
|
|
public function move()
|
|
{
|
|
if ($this->isAdmin() && $this->getUserDetail('change_serversettings') == 1) {
|
|
$adminid = $this->getParam('adminid');
|
|
$id = $this->getParam('id', true, 0);
|
|
$ln_optional = ($id <= 0 ? false : true);
|
|
$loginname = $this->getParam('loginname', $ln_optional, '');
|
|
|
|
$c_result = $this->apiCall('Customers.get', array(
|
|
'id' => $id,
|
|
'loginname' => $loginname
|
|
));
|
|
$id = $c_result['customerid'];
|
|
|
|
// check if target-admin is the current admin
|
|
if ($adminid == $c_result['adminid']) {
|
|
throw new Exception("Cannot move customer to the same admin/reseller as he currently is assigned to", 406);
|
|
}
|
|
|
|
// get target admin
|
|
$a_result = $this->apiCall('Admins.get', array(
|
|
'id' => $adminid
|
|
));
|
|
|
|
// Update customer entry
|
|
$updCustomer_stmt = Database::prepare("
|
|
UPDATE `" . TABLE_PANEL_CUSTOMERS . "` SET `adminid` = :adminid WHERE `customerid` = :cid
|
|
");
|
|
Database::pexecute($updCustomer_stmt, array(
|
|
'adminid' => $adminid,
|
|
'cid' => $id
|
|
), true, true);
|
|
|
|
// Update customer-domains
|
|
$updDomains_stmt = Database::prepare("
|
|
UPDATE `" . TABLE_PANEL_DOMAINS . "` SET `adminid` = :adminid WHERE `customerid` = :cid
|
|
");
|
|
Database::pexecute($updDomains_stmt, array(
|
|
'adminid' => $adminid,
|
|
'cid' => $id
|
|
), true, true);
|
|
|
|
// Update customer-tickets
|
|
$updTickets_stmt = Database::prepare("
|
|
UPDATE `" . TABLE_PANEL_TICKETS . "` SET `adminid` = :adminid WHERE `customerid` = :cid
|
|
");
|
|
Database::pexecute($updTickets_stmt, array(
|
|
'adminid' => $adminid,
|
|
'cid' => $id
|
|
), true, true);
|
|
|
|
// now, recalculate the resource-usage for the old and the new admin
|
|
updateCounters(false);
|
|
|
|
$this->logger()->logAction(ADM_ACTION, LOG_INFO, "[API] moved user '" . $c_result['loginname'] . "' from admin/reseller '" . $c_result['adminname'] . " to admin/reseller '" . $a_result['loginname'] . "'");
|
|
|
|
$result = $this->apiCall('Customers.get', array(
|
|
'id' => $c_result['customerid']
|
|
));
|
|
return $this->response(200, "successfull", $result);
|
|
}
|
|
throw new Exception("Not allowed to execute given command.", 403);
|
|
}
|
|
|
|
/**
|
|
* increase resource-usage
|
|
*
|
|
* @param int $customerid
|
|
* @param string $resource
|
|
* @param string $extra
|
|
* optional, default empty
|
|
*/
|
|
public static function increaseUsage($customerid = 0, $resource = null, $extra = '', $increase_by = 1)
|
|
{
|
|
self::updateResourceUsage(TABLE_PANEL_CUSTOMERS, 'customerid', $customerid, '+', $resource, $extra, $increase_by);
|
|
}
|
|
|
|
/**
|
|
* decrease resource-usage
|
|
*
|
|
* @param int $customerid
|
|
* @param string $resource
|
|
* @param string $extra
|
|
* optional, default empty
|
|
*/
|
|
public static function decreaseUsage($customerid = 0, $resource = null, $extra = '', $decrease_by = 1)
|
|
{
|
|
self::updateResourceUsage(TABLE_PANEL_CUSTOMERS, 'customerid', $customerid, '-', $resource, $extra, $decrease_by);
|
|
}
|
|
}
|