516 lines
18 KiB
PHP
516 lines
18 KiB
PHP
<?php
|
|
|
|
/**
|
|
* This file is part of the Froxlor project.
|
|
* Copyright (c) 2010 the Froxlor Team (see authors).
|
|
*
|
|
* For the full copyright and license information, please view the COPYING
|
|
* file that was distributed with this source code. You can also view the
|
|
* COPYING file online at http://files.froxlor.org/misc/COPYING.txt
|
|
*
|
|
* @copyright (c) the authors
|
|
* @author Froxlor team <team@froxlor.org> (2010-)
|
|
* @license GPLv2 http://files.froxlor.org/misc/COPYING.txt
|
|
* @package API
|
|
* @since 0.10.0
|
|
*
|
|
*/
|
|
class IpsAndPorts extends ApiCommand implements ResourceEntity
|
|
{
|
|
|
|
/**
|
|
* lists all ip/port entries
|
|
*
|
|
* @access admin
|
|
* @throws Exception
|
|
* @return array count|list
|
|
*/
|
|
public function listing()
|
|
{
|
|
if ($this->isAdmin() && ($this->getUserDetail('change_serversettings') || ! empty($this->getUserDetail('ip')))) {
|
|
$this->logger()->logAction(ADM_ACTION, LOG_NOTICE, "[API] list ips and ports");
|
|
$ip_where = "";
|
|
if (! empty($this->getUserDetail('ip')) && $this->getUserDetail('ip') != - 1) {
|
|
$ip_where = "WHERE `id` IN (" . implode(", ", json_decode($this->getUserDetail('ip'), true)) . ")";
|
|
}
|
|
$result_stmt = Database::prepare("
|
|
SELECT * FROM `" . TABLE_PANEL_IPSANDPORTS . "` " . $ip_where . " ORDER BY `ip` ASC, `port` ASC
|
|
");
|
|
Database::pexecute($result_stmt, null, true, true);
|
|
$result = array();
|
|
while ($row = $result_stmt->fetch(PDO::FETCH_ASSOC)) {
|
|
$result[] = $row;
|
|
}
|
|
return $this->response(200, "successfull", array(
|
|
'count' => count($result),
|
|
'list' => $result
|
|
));
|
|
}
|
|
throw new Exception("Not allowed to execute given command.", 403);
|
|
}
|
|
|
|
/**
|
|
* return an ip/port entry by id
|
|
*
|
|
* @param int $id
|
|
* ip-port-id
|
|
*
|
|
* @access admin
|
|
* @throws Exception
|
|
* @return array
|
|
*/
|
|
public function get()
|
|
{
|
|
if ($this->isAdmin() && ($this->getUserDetail('change_serversettings') || ! empty($this->getUserDetail('ip')))) {
|
|
$id = $this->getParam('id');
|
|
if (! empty($this->getUserDetail('ip')) && $this->getUserDetail('ip') != - 1) {
|
|
$allowed_ips = json_decode($this->getUserDetail('ip'), true);
|
|
if (! in_array($id, $allowed_ips)) {
|
|
throw new Exception("You cannot access this resource", 405);
|
|
}
|
|
}
|
|
$result_stmt = Database::prepare("
|
|
SELECT * FROM `" . TABLE_PANEL_IPSANDPORTS . "` WHERE `id` = :id
|
|
");
|
|
$result = Database::pexecute_first($result_stmt, array(
|
|
'id' => $id
|
|
), true, true);
|
|
if ($result) {
|
|
$this->logger()->logAction(ADM_ACTION, LOG_NOTICE, "[API] get ip " . $result['ip'] . " " . $result['port']);
|
|
return $this->response(200, "successfull", $result);
|
|
}
|
|
throw new Exception("IP/port with id #" . $id . " could not be found", 404);
|
|
}
|
|
throw new Exception("Not allowed to execute given command.", 403);
|
|
}
|
|
|
|
/**
|
|
* create a new ip/port entry
|
|
*
|
|
* @param string $ip
|
|
* @param int $port
|
|
* optional, default 80
|
|
* @param bool $listen_statement
|
|
* optional, default 0 (false)
|
|
* @param bool $namevirtualhost_statement
|
|
* optional, default 0 (false)
|
|
* @param bool $vhostcontainer
|
|
* optional, default 0 (false)
|
|
* @param string $specialsettings
|
|
* optional, default empty
|
|
* @param bool $vhostcontainer_servername_statement
|
|
* optional, default 0 (false)
|
|
* @param string $default_vhostconf_domain
|
|
* optional, defatul empty
|
|
* @param string $docroot
|
|
* optional, default empty (point to froxlor)
|
|
* @param bool $ssl
|
|
* optional, default 0 (false)
|
|
* @param string $ssl_cert_file
|
|
* optional, requires $ssl = 1, default empty
|
|
* @param string $ssl_key_file
|
|
* optional, requires $ssl = 1, default empty
|
|
* @param string $ssl_ca_file
|
|
* optional, requires $ssl = 1, default empty
|
|
* @param string $ssl_cert_chainfile
|
|
* optional, requires $ssl = 1, default empty
|
|
*
|
|
* @access admin
|
|
* @throws Exception
|
|
* @return array
|
|
*/
|
|
public function add()
|
|
{
|
|
if ($this->isAdmin() && $this->getUserDetail('change_serversettings')) {
|
|
|
|
$ip = validate_ip2($this->getParam('ip'), false, 'invalidip', false, false, false, true);
|
|
$port = validate($this->getParam('port', true, 80), 'port', '/^(([1-9])|([1-9][0-9])|([1-9][0-9][0-9])|([1-9][0-9][0-9][0-9])|([1-5][0-9][0-9][0-9][0-9])|(6[0-4][0-9][0-9][0-9])|(65[0-4][0-9][0-9])|(655[0-2][0-9])|(6553[0-5]))$/Di', array(
|
|
'stringisempty',
|
|
'myport'
|
|
), array(), true);
|
|
$listen_statement = ! empty($this->getParam('listen_statement', true, 0)) ? 1 : 0;
|
|
$namevirtualhost_statement = ! empty($this->getParam('namevirtualhost_statement', true, 0)) ? 1 : 0;
|
|
$vhostcontainer = ! empty($this->getParam('vhostcontainer', true, 0)) ? 1 : 0;
|
|
$specialsettings = validate(str_replace("\r\n", "\n", $this->getParam('specialsettings', true, '')), 'specialsettings', '/^[^\0]*$/', '', array(), true);
|
|
$vhostcontainer_servername_statement = ! empty($this->getParam('vhostcontainer_servername_statement', true, 1)) ? 1 : 0;
|
|
$default_vhostconf_domain = validate(str_replace("\r\n", "\n", $this->getParam('default_vhostconf_domain', true, '')), 'default_vhostconf_domain', '/^[^\0]*$/', '', array(), true);
|
|
$docroot = validate($this->getParam('docroot', true, ''), 'docroot', '', '', array(), true);
|
|
|
|
if ((int) Settings::Get('system.use_ssl') == 1) {
|
|
$ssl = ! empty($this->getParam('ssl', true, 0)) ? intval($this->getParam('ssl', true, 0)) : 0;
|
|
$ssl_cert_file = validate($this->getParam('ssl_cert_file', $ssl, ''), 'ssl_cert_file', '', '', array(), true);
|
|
$ssl_key_file = validate($this->getParam('ssl_key_file', $ssl, ''), 'ssl_key_file', '', '', array(), true);
|
|
$ssl_ca_file = validate($this->getParam('ssl_ca_file', true, ''), 'ssl_ca_file', '', '', array(), true);
|
|
$ssl_cert_chainfile = validate($this->getParam('ssl_cert_chainfile', true, ''), 'ssl_cert_chainfile', '', '', array(), true);
|
|
} else {
|
|
$ssl = 0;
|
|
$ssl_cert_file = '';
|
|
$ssl_key_file = '';
|
|
$ssl_ca_file = '';
|
|
$ssl_cert_chainfile = '';
|
|
}
|
|
|
|
if ($listen_statement != '1') {
|
|
$listen_statement = '0';
|
|
}
|
|
|
|
if ($namevirtualhost_statement != '1') {
|
|
$namevirtualhost_statement = '0';
|
|
}
|
|
|
|
if ($vhostcontainer != '1') {
|
|
$vhostcontainer = '0';
|
|
}
|
|
|
|
if ($vhostcontainer_servername_statement != '1') {
|
|
$vhostcontainer_servername_statement = '0';
|
|
}
|
|
|
|
if ($ssl != '1') {
|
|
$ssl = '0';
|
|
}
|
|
|
|
if ($ssl_cert_file != '') {
|
|
$ssl_cert_file = makeCorrectFile($ssl_cert_file);
|
|
}
|
|
|
|
if ($ssl_key_file != '') {
|
|
$ssl_key_file = makeCorrectFile($ssl_key_file);
|
|
}
|
|
|
|
if ($ssl_ca_file != '') {
|
|
$ssl_ca_file = makeCorrectFile($ssl_ca_file);
|
|
}
|
|
|
|
if ($ssl_cert_chainfile != '') {
|
|
$ssl_cert_chainfile = makeCorrectFile($ssl_cert_chainfile);
|
|
}
|
|
|
|
if (strlen(trim($docroot)) > 0) {
|
|
$docroot = makeCorrectDir($docroot);
|
|
} else {
|
|
$docroot = '';
|
|
}
|
|
|
|
$result_checkfordouble_stmt = Database::prepare("
|
|
SELECT `id` FROM `" . TABLE_PANEL_IPSANDPORTS . "`
|
|
WHERE `ip` = :ip AND `port` = :port");
|
|
$result_checkfordouble = Database::pexecute_first($result_checkfordouble_stmt, array(
|
|
'ip' => $ip,
|
|
'port' => $port
|
|
));
|
|
|
|
if ($result_checkfordouble['id'] != '') {
|
|
standard_error('myipnotdouble', '', true);
|
|
}
|
|
|
|
$ins_stmt = Database::prepare("
|
|
INSERT INTO `" . TABLE_PANEL_IPSANDPORTS . "`
|
|
SET
|
|
`ip` = :ip, `port` = :port, `listen_statement` = :ls,
|
|
`namevirtualhost_statement` = :nvhs, `vhostcontainer` = :vhc,
|
|
`vhostcontainer_servername_statement` = :vhcss,
|
|
`specialsettings` = :ss, `ssl` = :ssl,
|
|
`ssl_cert_file` = :ssl_cert, `ssl_key_file` = :ssl_key,
|
|
`ssl_ca_file` = :ssl_ca, `ssl_cert_chainfile` = :ssl_chain,
|
|
`default_vhostconf_domain` = :dvhd, `docroot` = :docroot;
|
|
");
|
|
$ins_data = array(
|
|
'ip' => $ip,
|
|
'port' => $port,
|
|
'ls' => $listen_statement,
|
|
'nvhs' => $namevirtualhost_statement,
|
|
'vhc' => $vhostcontainer,
|
|
'vhcss' => $vhostcontainer_servername_statement,
|
|
'ss' => $specialsettings,
|
|
'ssl' => $ssl,
|
|
'ssl_cert' => $ssl_cert_file,
|
|
'ssl_key' => $ssl_key_file,
|
|
'ssl_ca' => $ssl_ca_file,
|
|
'ssl_chain' => $ssl_cert_chainfile,
|
|
'dvhd' => $default_vhostconf_domain,
|
|
'docroot' => $docroot
|
|
);
|
|
Database::pexecute($ins_stmt, $ins_data);
|
|
$ins_data['id'] = Database::lastInsertId();
|
|
|
|
inserttask('1');
|
|
// Using nameserver, insert a task which rebuilds the server config
|
|
inserttask('4');
|
|
|
|
if (filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV6)) {
|
|
$ip = '[' . $ip . ']';
|
|
}
|
|
$this->logger()->logAction(ADM_ACTION, LOG_WARNING, "[API] added IP/port '" . $ip . ":" . $port . "'");
|
|
// get ip for return-array
|
|
$result = $this->apiCall('IpsAndPorts.get', array(
|
|
'id' => $ins_data['id']
|
|
));
|
|
return $this->response(200, "successfull", $result);
|
|
}
|
|
throw new Exception("Not allowed to execute given command.", 403);
|
|
}
|
|
|
|
/**
|
|
* update ip/port entry by given id
|
|
*
|
|
* @param int $id
|
|
* @param string $ip
|
|
* optional
|
|
* @param int $port
|
|
* optional, default 80
|
|
* @param bool $listen_statement
|
|
* optional, default 0 (false)
|
|
* @param bool $namevirtualhost_statement
|
|
* optional, default 0 (false)
|
|
* @param bool $vhostcontainer
|
|
* optional, default 0 (false)
|
|
* @param string $specialsettings
|
|
* optional, default empty
|
|
* @param bool $vhostcontainer_servername_statement
|
|
* optional, default 0 (false)
|
|
* @param string $default_vhostconf_domain
|
|
* optional, defatul empty
|
|
* @param string $docroot
|
|
* optional, default empty (point to froxlor)
|
|
* @param bool $ssl
|
|
* optional, default 0 (false)
|
|
* @param string $ssl_cert_file
|
|
* optional, requires $ssl = 1, default empty
|
|
* @param string $ssl_key_file
|
|
* optional, requires $ssl = 1, default empty
|
|
* @param string $ssl_ca_file
|
|
* optional, requires $ssl = 1, default empty
|
|
* @param string $ssl_cert_chainfile
|
|
* optional, requires $ssl = 1, default empty
|
|
*
|
|
* @access admin
|
|
* @throws ErrorException
|
|
* @return array
|
|
*/
|
|
public function update()
|
|
{
|
|
if ($this->isAdmin() && ($this->getUserDetail('change_serversettings') || ! empty($this->getUserDetail('ip')))) {
|
|
$id = $this->getParam('id');
|
|
|
|
$result = $this->apiCall('IpsAndPorts.get', array(
|
|
'id' => $id
|
|
));
|
|
|
|
$ip = validate_ip2($this->getParam('ip', true, $result['ip']), false, 'invalidip', false, false, false, true);
|
|
$port = validate($this->getParam('port', true, $result['port']), 'port', '/^(([1-9])|([1-9][0-9])|([1-9][0-9][0-9])|([1-9][0-9][0-9][0-9])|([1-5][0-9][0-9][0-9][0-9])|(6[0-4][0-9][0-9][0-9])|(65[0-4][0-9][0-9])|(655[0-2][0-9])|(6553[0-5]))$/Di', array(
|
|
'stringisempty',
|
|
'myport'
|
|
), array(), true);
|
|
$listen_statement = $this->getParam('listen_statement', true, $result['listen_statement']);
|
|
$namevirtualhost_statement = $this->getParam('namevirtualhost_statement', true, $result['namevirtualhost_statement']);
|
|
$vhostcontainer = $this->getParam('vhostcontainer', true, $result['vhostcontainer']);
|
|
$specialsettings = validate(str_replace("\r\n", "\n", $this->getParam('specialsettings', true, $result['specialsettings'])), 'specialsettings', '/^[^\0]*$/', '', array(), true);
|
|
$vhostcontainer_servername_statement = $this->getParam('vhostcontainer_servername_statement', true, $result['vhostcontainer_servername_statement']);
|
|
$default_vhostconf_domain = validate(str_replace("\r\n", "\n", $this->getParam('default_vhostconf_domain', true, $result['default_vhostconf_domain'])), 'default_vhostconf_domain', '/^[^\0]*$/', '', array(), true);
|
|
$docroot = validate($this->getParam('docroot', true, $result['docroot']), 'docroot', '', '', array(), true);
|
|
|
|
if ((int) Settings::Get('system.use_ssl') == 1) {
|
|
$ssl = $this->getParam('ssl', true, $result['ssl']);
|
|
$ssl_cert_file = validate($this->getParam('ssl_cert_file', $ssl, $result['ssl_cert_file']), 'ssl_cert_file', '', '', array(), true);
|
|
$ssl_key_file = validate($this->getParam('ssl_key_file', $ssl, $result['ssl_key_file']), 'ssl_key_file', '', '', array(), true);
|
|
$ssl_ca_file = validate($this->getParam('ssl_ca_file', true, $result['ssl_ca_file']), 'ssl_ca_file', '', '', array(), true);
|
|
$ssl_cert_chainfile = validate($this->getParam('ssl_cert_chainfile', true, $result['ssl_cert_chainfile']), 'ssl_cert_chainfile', '', '', array(), true);
|
|
} else {
|
|
$ssl = 0;
|
|
$ssl_cert_file = '';
|
|
$ssl_key_file = '';
|
|
$ssl_ca_file = '';
|
|
$ssl_cert_chainfile = '';
|
|
}
|
|
|
|
$result_checkfordouble_stmt = Database::prepare("
|
|
SELECT `id` FROM `" . TABLE_PANEL_IPSANDPORTS . "`
|
|
WHERE `ip` = :ip AND `port` = :port
|
|
");
|
|
$result_checkfordouble = Database::pexecute_first($result_checkfordouble_stmt, array(
|
|
'ip' => $ip,
|
|
'port' => $port
|
|
));
|
|
|
|
$result_sameipotherport_stmt = Database::prepare("
|
|
SELECT `id` FROM `" . TABLE_PANEL_IPSANDPORTS . "`
|
|
WHERE `ip` = :ip AND `id` <> :id
|
|
");
|
|
$result_sameipotherport = Database::pexecute_first($result_sameipotherport_stmt, array(
|
|
'ip' => $ip,
|
|
'id' => $id
|
|
), true, true);
|
|
|
|
if ($listen_statement != '1') {
|
|
$listen_statement = '0';
|
|
}
|
|
|
|
if ($namevirtualhost_statement != '1') {
|
|
$namevirtualhost_statement = '0';
|
|
}
|
|
|
|
if ($vhostcontainer != '1') {
|
|
$vhostcontainer = '0';
|
|
}
|
|
|
|
if ($vhostcontainer_servername_statement != '1') {
|
|
$vhostcontainer_servername_statement = '0';
|
|
}
|
|
|
|
if ($ssl != '1') {
|
|
$ssl = '0';
|
|
}
|
|
|
|
if ($ssl_cert_file != '') {
|
|
$ssl_cert_file = makeCorrectFile($ssl_cert_file);
|
|
}
|
|
|
|
if ($ssl_key_file != '') {
|
|
$ssl_key_file = makeCorrectFile($ssl_key_file);
|
|
}
|
|
|
|
if ($ssl_ca_file != '') {
|
|
$ssl_ca_file = makeCorrectFile($ssl_ca_file);
|
|
}
|
|
|
|
if ($ssl_cert_chainfile != '') {
|
|
$ssl_cert_chainfile = makeCorrectFile($ssl_cert_chainfile);
|
|
}
|
|
|
|
if (strlen(trim($docroot)) > 0) {
|
|
$docroot = makeCorrectDir($docroot);
|
|
} else {
|
|
$docroot = '';
|
|
}
|
|
|
|
if ($result['ip'] != $ip && $result['ip'] == Settings::Get('system.ipaddress') && $result_sameipotherport['id'] == '') {
|
|
standard_error('cantchangesystemip', '', true);
|
|
} elseif ($result_checkfordouble['id'] != '' && $result_checkfordouble['id'] != $id) {
|
|
standard_error('myipnotdouble', '', true);
|
|
} else {
|
|
|
|
$upd_stmt = Database::prepare("
|
|
UPDATE `" . TABLE_PANEL_IPSANDPORTS . "`
|
|
SET
|
|
`ip` = :ip, `port` = :port, `listen_statement` = :ls,
|
|
`namevirtualhost_statement` = :nvhs, `vhostcontainer` = :vhc,
|
|
`vhostcontainer_servername_statement` = :vhcss,
|
|
`specialsettings` = :ss, `ssl` = :ssl,
|
|
`ssl_cert_file` = :ssl_cert, `ssl_key_file` = :ssl_key,
|
|
`ssl_ca_file` = :ssl_ca, `ssl_cert_chainfile` = :ssl_chain,
|
|
`default_vhostconf_domain` = :dvhd, `docroot` = :docroot
|
|
WHERE `id` = :id;
|
|
");
|
|
$upd_data = array(
|
|
'ip' => $ip,
|
|
'port' => $port,
|
|
'ls' => $listen_statement,
|
|
'nvhs' => $namevirtualhost_statement,
|
|
'vhc' => $vhostcontainer,
|
|
'vhcss' => $vhostcontainer_servername_statement,
|
|
'ss' => $specialsettings,
|
|
'ssl' => $ssl,
|
|
'ssl_cert' => $ssl_cert_file,
|
|
'ssl_key' => $ssl_key_file,
|
|
'ssl_ca' => $ssl_ca_file,
|
|
'ssl_chain' => $ssl_cert_chainfile,
|
|
'dvhd' => $default_vhostconf_domain,
|
|
'docroot' => $docroot,
|
|
'id' => $id
|
|
);
|
|
Database::pexecute($upd_stmt, $upd_data);
|
|
|
|
inserttask('1');
|
|
// Using nameserver, insert a task which rebuilds the server config
|
|
inserttask('4');
|
|
|
|
$this->logger()->logAction(ADM_ACTION, LOG_WARNING, "[API] changed IP/port from '" . $result['ip'] . ":" . $result['port'] . "' to '" . $ip . ":" . $port . "'");
|
|
|
|
$result = $this->apiCall('IpsAndPorts.get', array(
|
|
'id' => $result['id']
|
|
));
|
|
return $this->response(200, "successfull", $result);
|
|
}
|
|
}
|
|
throw new Exception("Not allowed to execute given command.", 403);
|
|
}
|
|
|
|
/**
|
|
* delete an ip/port entry by id
|
|
*
|
|
* @param int $id
|
|
* ip-port-id
|
|
*
|
|
* @access admin
|
|
* @throws Exception
|
|
* @return array
|
|
*/
|
|
public function delete()
|
|
{
|
|
if ($this->isAdmin() && $this->getUserDetail('change_serversettings')) {
|
|
$id = $this->getParam('id');
|
|
|
|
$result = $this->apiCall('IpsAndPorts.get', array(
|
|
'id' => $id
|
|
));
|
|
|
|
$result_checkdomain_stmt = Database::prepare("
|
|
SELECT `id_domain` as `id` FROM `" . TABLE_DOMAINTOIP . "` WHERE `id_ipandports` = :id
|
|
");
|
|
$result_checkdomain = Database::pexecute_first($result_checkdomain_stmt, array(
|
|
'id' => $id
|
|
), true, true);
|
|
|
|
if (empty($result_checkdomain)) {
|
|
if (! in_array($result['id'], explode(',', Settings::Get('system.defaultip'))) && ! in_array($result['id'], explode(',', Settings::Get('system.defaultsslip')))) {
|
|
|
|
// check whether there is the same IP with a different port
|
|
// in case this ip-address is the system.ipaddress and therefore
|
|
// when there is one - we have an alternative
|
|
$result_sameipotherport_stmt = Database::prepare("
|
|
SELECT `id` FROM `" . TABLE_PANEL_IPSANDPORTS . "`
|
|
WHERE `ip` = :ip AND `id` <> :id");
|
|
$result_sameipotherport = Database::pexecute_first($result_sameipotherport_stmt, array(
|
|
'id' => $id,
|
|
'ip' => $result['ip']
|
|
));
|
|
|
|
if (($result['ip'] != Settings::Get('system.ipaddress')) || ($result['ip'] == Settings::Get('system.ipaddress') && $result_sameipotherport['id'] != '')) {
|
|
|
|
$del_stmt = Database::prepare("
|
|
DELETE FROM `" . TABLE_PANEL_IPSANDPORTS . "`
|
|
WHERE `id` = :id
|
|
");
|
|
Database::pexecute($del_stmt, array(
|
|
'id' => $id
|
|
), true, true);
|
|
|
|
// also, remove connections to domains (multi-stack)
|
|
$del_stmt = Database::prepare("
|
|
DELETE FROM `" . TABLE_DOMAINTOIP . "` WHERE `id_ipandports` = :id
|
|
");
|
|
Database::pexecute($del_stmt, array(
|
|
'id' => $id
|
|
), true, true);
|
|
|
|
inserttask('1');
|
|
// Using nameserver, insert a task which rebuilds the server config
|
|
inserttask('4');
|
|
|
|
$this->logger()->logAction(ADM_ACTION, LOG_WARNING, "[API] deleted IP/port '" . $result['ip'] . ":" . $result['port'] . "'");
|
|
return $this->response(200, "successfull", $result);
|
|
} else {
|
|
standard_error('cantdeletesystemip', '', true);
|
|
}
|
|
} else {
|
|
standard_error('cantdeletedefaultip', '', true);
|
|
}
|
|
} else {
|
|
standard_error('ipstillhasdomains', '', true);
|
|
}
|
|
}
|
|
throw new Exception("Not allowed to execute given command.", 403);
|
|
}
|
|
}
|