index.php 47 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984
  1. <?php
  2. $TAB = 'SERVER';
  3. // Main include
  4. include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
  5. // Check user
  6. if ($_SESSION['userContext'] != 'admin') {
  7. header("Location: /list/user");
  8. exit;
  9. }
  10. // Get server hostname
  11. $v_hostname = exec('hostname');
  12. // List available timezones and get current one
  13. $v_timezones = list_timezones();
  14. exec (HESTIA_CMD."v-get-sys-timezone", $output, $return_var);
  15. $v_timezone = $output[0];
  16. unset($output);
  17. if ($v_timezone == 'Etc/UTC' ) $v_timezone = 'UTC';
  18. if ($v_timezone == 'Pacific/Honolulu' ) $v_timezone = 'HAST';
  19. if ($v_timezone == 'US/Aleutian' ) $v_timezone = 'HADT';
  20. if ($v_timezone == 'Etc/GMT+9' ) $v_timezone = 'AKST';
  21. if ($v_timezone == 'America/Anchorage' ) $v_timezone = 'AKDT';
  22. if ($v_timezone == 'America/Dawson_Creek' ) $v_timezone = 'PST';
  23. if ($v_timezone == 'PST8PDT' ) $v_timezone = 'PDT';
  24. if ($v_timezone == 'MST7MDT' ) $v_timezone = 'MDT';
  25. if ($v_timezone == 'Canada/Saskatchewan' ) $v_timezone = 'CST';
  26. if ($v_timezone == 'CST6CDT' ) $v_timezone = 'CDT';
  27. if ($v_timezone == 'EST5EDT' ) $v_timezone = 'EDT';
  28. if ($v_timezone == 'America/Puerto_Rico' ) $v_timezone = 'AST';
  29. if ($v_timezone == 'America/Halifax' ) $v_timezone = 'ADT';
  30. // List supported php versions
  31. exec (HESTIA_CMD."v-list-web-templates-backend json", $output, $return_var);
  32. $backend_templates = json_decode(implode('', $output), true);
  33. unset($output);
  34. $v_php_versions = [
  35. 'php-5.6',
  36. 'php-7.0',
  37. 'php-7.1',
  38. 'php-7.2',
  39. 'php-7.3',
  40. 'php-7.4',
  41. 'php-8.0',
  42. ];
  43. sort($v_php_versions);
  44. if (empty($backend_templates))
  45. $v_php_versions=[];
  46. $backends_active = backendtpl_with_webdomains();
  47. $v_php_versions = array_map(function($php_version) use ($backend_templates, $backends_active) {
  48. // Mark installed php versions
  49. if (stripos($php_version,'php') !== 0)
  50. return false;
  51. $phpinfo = (object) [
  52. "name" => $php_version,
  53. "tpl" => strtoupper(str_replace('.', '_', $php_version)),
  54. "version" => str_ireplace('php-', '', $php_version),
  55. "usedby" => [],
  56. "installed" => false,
  57. "protected" => false,
  58. ];
  59. if (in_array($phpinfo->tpl, $backend_templates)) {
  60. $phpinfo->installed = true;
  61. }
  62. if (array_key_exists($phpinfo->tpl, $backends_active)) {
  63. // Prevent used php version to be removed
  64. if($phpinfo->installed)
  65. $phpinfo->protected = true;
  66. $phpinfo->usedby = $backends_active[$phpinfo->tpl];
  67. }
  68. if ($phpinfo->name == DEFAULT_PHP_VERSION) {
  69. // Prevent default php version to be removed
  70. if ($phpinfo->installed)
  71. $phpinfo->protected = true;
  72. if (!empty($backends_active['default'])) {
  73. $phpinfo->usedby = array_merge_recursive($phpinfo->usedby,$backends_active['default'] );
  74. }
  75. }
  76. return $phpinfo;
  77. }, $v_php_versions);
  78. // List languages
  79. exec (HESTIA_CMD."v-list-sys-languages json", $output, $return_var);
  80. $language = json_decode(implode('', $output), true);
  81. foreach ($language as $lang) {
  82. $languages[$lang] = translate_json($lang);
  83. }
  84. asort($languages);
  85. unset($output);
  86. // List themes
  87. exec (HESTIA_CMD."v-list-sys-themes json", $output, $return_var);
  88. $theme = json_decode(implode('', $output), true);
  89. unset($output);
  90. // List dns cluster hosts
  91. exec (HESTIA_CMD."v-list-remote-dns-hosts json", $output, $return_var);
  92. $dns_cluster = json_decode(implode('', $output), true);
  93. unset($output);
  94. if (is_array($dns_cluster)) {
  95. foreach ($dns_cluster as $key => $value) {
  96. $v_dns_cluster = 'yes';
  97. }
  98. }
  99. // List smtp relay settings
  100. if (!empty($_SESSION['SMTP_RELAY'])) $v_smtp_relay = $_SESSION['SMTP_RELAY'];
  101. if (!empty($_SESSION['SMTP_RELAY_HOST'])) $v_smtp_relay_host = $_SESSION['SMTP_RELAY_HOST'];
  102. if (!empty($_SESSION['SMTP_RELAY_PORT'])) $v_smtp_relay_port = $_SESSION['SMTP_RELAY_PORT'];
  103. if (!empty($_SESSION['SMTP_RELAY_USER'])) $v_smtp_relay_user = $_SESSION['SMTP_RELAY_USER'];
  104. // List Database hosts
  105. exec (HESTIA_CMD."v-list-database-hosts json", $output, $return_var);
  106. $db_hosts = json_decode(implode('', $output), true);
  107. unset($output);
  108. $v_mysql_hosts = array_values(array_filter($db_hosts, function($host){return $host['TYPE'] === 'mysql';}));
  109. $v_mysql = count($v_mysql_hosts) ? 'yes' : 'no';
  110. $v_pgsql_hosts = array_values(array_filter($db_hosts, function($host){return $host['TYPE'] === 'pgsql';}));
  111. $v_pgsql = count($v_pgsql_hosts) ? 'yes' : 'no';
  112. unset($db_hosts);
  113. // List backup settings
  114. $v_backup_dir = "/backup";
  115. if (!empty($_SESSION['BACKUP'])) $v_backup_dir = $_SESSION['BACKUP'];
  116. $v_backup_gzip = '5';
  117. if (!empty($_SESSION['BACKUP_GZIP'])) $v_backup_gzip = $_SESSION['BACKUP_GZIP'];
  118. $v_backup_mode = 'gzip';
  119. if (!empty($_SESSION['BACKUP_MODE'])) $v_backup_mode = $_SESSION['BACKUP_MODE'];
  120. $backup_types = explode(",",$_SESSION['BACKUP_SYSTEM']);
  121. foreach ($backup_types as $backup_type) {
  122. if ($backup_type == 'local') {
  123. $v_backup = 'yes';
  124. } else {
  125. exec (HESTIA_CMD."v-list-backup-host ".escapeshellarg($backup_type)." json", $output, $return_var);
  126. $v_remote_backup = json_decode(implode('', $output), true);
  127. unset($output);
  128. if (in_array($backup_type , array('ftp','sftp'))) {
  129. $v_backup_host = $v_remote_backup[$backup_type]['HOST'];
  130. $v_backup_type = $v_remote_backup[$backup_type]['TYPE'];
  131. $v_backup_username = $v_remote_backup[$backup_type]['USERNAME'];
  132. $v_backup_password = "";
  133. $v_backup_port = $v_remote_backup[$backup_type]['PORT'];
  134. $v_backup_bpath = $v_remote_backup[$backup_type]['BPATH'];
  135. $v_backup_remote_adv = "yes";
  136. } else if ( in_array($backup_type , array('b2')) ) {
  137. $v_backup_bucket = $v_remote_backup[$backup_type]['BUCKET'];
  138. $v_backup_type = $v_remote_backup[$backup_type]['TYPE'];
  139. $v_backup_application_id = $v_remote_backup[$backup_type]['B2_KEY_ID'];
  140. $v_backup_application_key = '';
  141. $v_backup_remote_adv = "yes";
  142. }
  143. }
  144. }
  145. // List ssl certificate info
  146. exec (HESTIA_CMD."v-list-sys-hestia-ssl json", $output, $return_var);
  147. $ssl_str = json_decode(implode('', $output), true);
  148. unset($output);
  149. $v_ssl_crt = $ssl_str['HESTIA']['CRT'];
  150. $v_ssl_key = $ssl_str['HESTIA']['KEY'];
  151. $v_ssl_ca = $ssl_str['HESTIA']['CA'];
  152. $v_ssl_subject = $ssl_str['HESTIA']['SUBJECT'];
  153. $v_ssl_aliases = $ssl_str['HESTIA']['ALIASES'];
  154. $v_ssl_not_before = $ssl_str['HESTIA']['NOT_BEFORE'];
  155. $v_ssl_not_after = $ssl_str['HESTIA']['NOT_AFTER'];
  156. $v_ssl_signature = $ssl_str['HESTIA']['SIGNATURE'];
  157. $v_ssl_pub_key = $ssl_str['HESTIA']['PUB_KEY'];
  158. $v_ssl_issuer = $ssl_str['HESTIA']['ISSUER'];
  159. // Check POST request
  160. if (!empty($_POST['save'])) {
  161. $require_refresh = false;
  162. // Check token
  163. if ((!isset($_POST['token'])) || ($_SESSION['token'] != $_POST['token'])) {
  164. header('location: /login/');
  165. exit();
  166. }
  167. // Change hostname
  168. if ((!empty($_POST['v_hostname'])) && ($v_hostname != $_POST['v_hostname'])) {
  169. exec (HESTIA_CMD."v-change-sys-hostname ".escapeshellarg($_POST['v_hostname']), $output, $return_var);
  170. check_return_code($return_var,$output);
  171. unset($output);
  172. $v_hostname = $_POST['v_hostname'];
  173. }
  174. // Install/remove php versions
  175. if (empty($_SESSION['error_msg'])) {
  176. if(!empty($v_php_versions)) {
  177. $post_php = $_POST['v_php_versions'];
  178. array_map(function($php_version) use ($post_php) {
  179. if (array_key_exists($php_version->tpl, $post_php)) {
  180. if (!$php_version->installed) {
  181. exec (HESTIA_CMD . "v-add-web-php " . escapeshellarg($php_version->version), $output, $return_var);
  182. check_return_code($return_var, $output);
  183. unset($output);
  184. if(empty($_SESSION['error_msg']))
  185. $php_version->installed = true;
  186. }
  187. } else {
  188. if ($php_version->installed && !$php_version->protected) {
  189. exec (HESTIA_CMD . "v-delete-web-php " . escapeshellarg($php_version->version), $output, $return_var);
  190. check_return_code($return_var, $output);
  191. unset($output);
  192. if (empty($_SESSION['error_msg']))
  193. $php_version->installed = false;
  194. }
  195. }
  196. return $php_version;
  197. }, $v_php_versions);
  198. }
  199. }
  200. // Change timezone
  201. if (empty($_SESSION['error_msg'])) {
  202. if (!empty($_POST['v_timezone'])) {
  203. $v_tz = $_POST['v_timezone'];
  204. if ($v_tz == 'UTC' ) $v_tz = 'Etc/UTC';
  205. if ($v_tz == 'HAST' ) $v_tz = 'Pacific/Honolulu';
  206. if ($v_tz == 'HADT' ) $v_tz = 'US/Aleutian';
  207. if ($v_tz == 'AKST' ) $v_tz = 'Etc/GMT+9';
  208. if ($v_tz == 'AKDT' ) $v_tz = 'America/Anchorage';
  209. if ($v_tz == 'PST' ) $v_tz = 'America/Dawson_Creek';
  210. if ($v_tz == 'PDT' ) $v_tz = 'PST8PDT';
  211. if ($v_tz == 'MDT' ) $v_tz = 'MST7MDT';
  212. if ($v_tz == 'CST' ) $v_tz = 'Canada/Saskatchewan';
  213. if ($v_tz == 'CDT' ) $v_tz = 'CST6CDT';
  214. if ($v_tz == 'EDT' ) $v_tz = 'EST5EDT';
  215. if ($v_tz == 'AST' ) $v_tz = 'America/Puerto_Rico';
  216. if ($v_tz == 'ADT' ) $v_tz = 'America/Halifax';
  217. if ($v_timezone != $v_tz) {
  218. exec (HESTIA_CMD."v-change-sys-timezone ".escapeshellarg($v_tz), $output, $return_var);
  219. check_return_code($return_var,$output);
  220. $v_timezone = $v_tz;
  221. unset($output);
  222. }
  223. }
  224. }
  225. // Change default language
  226. if (empty($_SESSION['error_msg'])) {
  227. if ((!empty($_POST['v_language'])) && ($_SESSION['LANGUAGE'] != $_POST['v_language'])) {
  228. if (isset($_POST['v_language_update'])) {
  229. exec (HESTIA_CMD."v-change-sys-language ".escapeshellarg($_POST['v_language'])." yes", $output, $return_var);
  230. if (empty($_SESSION['error_msg'])) $_SESSION['LANGUAGE'] = $_POST['v_language'];
  231. }
  232. exec (HESTIA_CMD."v-change-sys-language ".escapeshellarg($_POST['v_language']), $output, $return_var);
  233. check_return_code($return_var,$output);
  234. unset($output);
  235. if (empty($_SESSION['error_msg'])) $_SESSION['LANGUAGE'] = $_POST['v_language'];
  236. }
  237. }
  238. // Update theme
  239. if (empty($_SESSION['error_msg'])) {
  240. if ($_POST['v_theme'] != $_SESSION['THEME']) {
  241. exec (HESTIA_CMD."v-change-sys-config-value THEME ".escapeshellarg($_POST['v_theme']), $output, $return_var);
  242. check_return_code($return_var,$output);
  243. unset($output);
  244. }
  245. }
  246. // Update debug mode status
  247. if (empty($_SESSION['error_msg'])) {
  248. if ($_POST['v_debug_mode'] == 'on') { $_POST['v_debug_mode'] = 'true'; } else { $_POST['v_debug_mode'] = 'false'; }
  249. if ($_POST['v_debug_mode'] != $_SESSION['DEBUG_MODE']) {
  250. exec (HESTIA_CMD."v-change-sys-config-value DEBUG_MODE ".escapeshellarg($_POST['v_debug_mode']), $output, $return_var);
  251. check_return_code($return_var,$output);
  252. unset($output);
  253. $v_debug_mode_adv = 'yes';
  254. }
  255. }
  256. // Enable/Disable Quick App Installer
  257. if (empty($_SESSION['error_msg'])) {
  258. if ($_POST['v_plugin_app_installer'] != $_SESSION['PLUGIN_APP_INSTALLER']) {
  259. if ($_POST['v_plugin_app_installer'] == 'true') { $_POST['v_plugin_app_installer'] = 'true'; } else { $_POST['v_plugin_app_installer'] = 'false'; }
  260. exec (HESTIA_CMD."v-change-sys-config-value PLUGIN_APP_INSTALLER ".escapeshellarg($_POST['v_plugin_app_installer']), $output, $return_var);
  261. check_return_code($return_var,$output);
  262. unset($output);
  263. }
  264. }
  265. // Update experimental features status
  266. if (empty($_SESSION['error_msg'])) {
  267. if ($_POST['v_experimental_features'] == 'on') { $_POST['v_experimental_features'] = 'true'; } else { $_POST['v_experimental_features'] = 'false'; }
  268. if ($_POST['v_experimental_features'] != $_SESSION['POLICY_SYSTEM_ENABLE_BACON']) {
  269. exec (HESTIA_CMD."v-change-sys-config-value POLICY_SYSTEM_ENABLE_BACON ".escapeshellarg($_POST['v_experimental_features']), $output, $return_var);
  270. check_return_code($return_var,$output);
  271. unset($output);
  272. $v_debug_mode_adv = 'yes';
  273. }
  274. }
  275. // Set File Manager support
  276. if (empty($_SESSION['error_msg'])) {
  277. if ((!empty($_POST['v_filemanager'])) && ($_SESSION['FILE_MANAGER'] != $_POST['v_filemanager'])) {
  278. if ($_POST['v_filemanager'] == 'true') {
  279. exec (HESTIA_CMD."v-add-sys-filemanager", $output, $return_var);
  280. check_return_code($return_var,$output);
  281. unset($output);
  282. if (empty($_SESSION['error_msg'])) $_SESSION['FILE_MANAGER'] = 'true';
  283. } else {
  284. exec (HESTIA_CMD."v-delete-sys-filemanager", $output, $return_var);
  285. check_return_code($return_var,$output);
  286. unset($output);
  287. if (empty($_SESSION['error_msg'])) $_SESSION['FILE_MANAGER'] = 'false';
  288. }
  289. }
  290. }
  291. // Set phpMyAdmin SSO key
  292. if (empty($_SESSION['error_msg'])) {
  293. if (!empty($_POST['v_phpmyadmin_key'])) {
  294. if ($_POST['v_phpmyadmin_key'] == 'yes' && $_SESSION['PHPMYADMIN_KEY'] == '') {
  295. exec (HESTIA_CMD."v-add-sys-pma-sso quiet", $output, $return_var);
  296. check_return_code($return_var,$output);
  297. unset($output);
  298. if (empty($_SESSION['error_msg'])) $_SESSION['PHPMYADMIN_KEY'] != "";
  299. } else if ($_POST['v_phpmyadmin_key'] == 'no' && $_SESSION['PHPMYADMIN_KEY'] != '') {
  300. exec (HESTIA_CMD."v-delete-sys-pma-sso quiet", $output, $return_var);
  301. check_return_code($return_var,$output);
  302. unset($output);
  303. if (empty($_SESSION['error_msg'])) $_SESSION['PHPMYADMIN_KEY'] = '';
  304. }
  305. }
  306. }
  307. // Set disk_quota support
  308. if (empty($_SESSION['error_msg'])) {
  309. if ((!empty($_POST['v_quota'])) && ($_SESSION['DISK_QUOTA'] != $_POST['v_quota'])) {
  310. if ($_POST['v_quota'] == 'yes') {
  311. exec (HESTIA_CMD."v-add-sys-quota", $output, $return_var);
  312. check_return_code($return_var,$output);
  313. unset($output);
  314. if (empty($_SESSION['error_msg'])) $_SESSION['DISK_QUOTA'] = 'yes';
  315. } else {
  316. exec (HESTIA_CMD."v-delete-sys-quota", $output, $return_var);
  317. check_return_code($return_var,$output);
  318. unset($output);
  319. if (empty($_SESSION['error_msg'])) $_SESSION['DISK_QUOTA'] = 'no';
  320. }
  321. }
  322. }
  323. // Set firewall support
  324. if (empty($_SESSION['error_msg'])) {
  325. if ($_SESSION['FIREWALL_SYSTEM'] == 'iptables') $v_firewall = 'yes';
  326. if ($_SESSION['FIREWALL_SYSTEM'] != 'iptables') $v_firewall = 'no';
  327. if ((!empty($_POST['v_firewall'])) && ($v_firewall != $_POST['v_firewall'])) {
  328. if ($_POST['v_firewall'] == 'yes') {
  329. exec (HESTIA_CMD."v-add-sys-firewall", $output, $return_var);
  330. check_return_code($return_var,$output);
  331. unset($output);
  332. if (empty($_SESSION['error_msg'])) $_SESSION['FIREWALL_SYSTEM'] = 'iptables';
  333. } else {
  334. exec (HESTIA_CMD."v-delete-sys-firewall", $output, $return_var);
  335. check_return_code($return_var,$output);
  336. unset($output);
  337. if (empty($_SESSION['error_msg'])) $_SESSION['FIREWALL_SYSTEM'] = '';
  338. }
  339. }
  340. }
  341. // Update mysql pasword
  342. if (empty($_SESSION['error_msg'])) {
  343. if (!empty($_POST['v_mysql_password'])) {
  344. exec (HESTIA_CMD."v-change-database-host-password mysql localhost root ".escapeshellarg($_POST['v_mysql_password']), $output, $return_var);
  345. check_return_code($return_var,$output);
  346. unset($output);
  347. $v_db_adv = 'yes';
  348. }
  349. }
  350. // Update webmail url
  351. if (empty($_SESSION['error_msg'])) {
  352. if ($_POST['v_webmail_alias'] != $_SESSION['WEBMAIL_ALIAS']) {
  353. exec (HESTIA_CMD."v-change-sys-webmail ".escapeshellarg($_POST['v_webmail_alias']), $output, $return_var);
  354. check_return_code($return_var,$output);
  355. unset($output);
  356. $v_mail_adv = 'yes';
  357. }
  358. }
  359. // Update system wide smtp relay
  360. if (empty($_SESSION['error_msg'])) {
  361. if (isset($_POST['v_smtp_relay']) && (!empty($_POST['v_smtp_relay_host'])) && (!empty($_POST['v_smtp_relay_user']))) {
  362. if (($_POST['v_smtp_relay_host'] != $v_smtp_relay_host) ||
  363. ($_POST['v_smtp_relay_user'] != $v_smtp_relay_user) ||
  364. ($_POST['v_smtp_relay_port'] != $v_smtp_relay_port) ||
  365. (!empty($_POST['v_smtp_relay_pass']))) {
  366. if (!empty($_POST['v_smtp_relay_pass'])) {
  367. $v_smtp_relay = true;
  368. $v_smtp_relay_host = escapeshellarg($_POST['v_smtp_relay_host']);
  369. $v_smtp_relay_user = escapeshellarg($_POST['v_smtp_relay_user']);
  370. $v_smtp_relay_pass = escapeshellarg($_POST['v_smtp_relay_pass']);
  371. if (!empty($_POST['v_smtp_relay_port'])) {
  372. $v_smtp_relay_port = escapeshellarg($_POST['v_smtp_relay_port']);
  373. } else {
  374. $v_smtp_relay_port = '587';
  375. }
  376. exec (HESTIA_CMD."v-add-sys-smtp-relay ".$v_smtp_relay_host." ".$v_smtp_relay_user." ".$v_smtp_relay_pass." ".$v_smtp_relay_port, $output, $return_var);
  377. check_return_code($return_var,$output);
  378. unset($output);
  379. } else {
  380. $_SESSION['error_msg'] = _('SMTP Relay Password is required');
  381. }
  382. }
  383. }
  384. if ((!isset($_POST['v_smtp_relay'])) && ($v_smtp_relay == true)) {
  385. $v_smtp_relay = false;
  386. $v_smtp_relay_host = $v_smtp_relay_user = $v_smtp_relay_pass = $v_smtp_relay_port = '';
  387. exec (HESTIA_CMD."v-delete-sys-smtp-relay", $output, $return_var);
  388. check_return_code($return_var,$output);
  389. unset($output);
  390. }
  391. }
  392. // Update phpMyAdmin url
  393. if (empty($_SESSION['error_msg'])) {
  394. if ($_POST['v_mysql_url'] != $_SESSION['DB_PMA_ALIAS']) {
  395. exec (HESTIA_CMD."v-change-sys-db-alias pma ".escapeshellarg($_POST['v_mysql_url']), $output, $return_var);
  396. check_return_code($return_var,$output);
  397. unset($output);
  398. $v_db_adv = 'yes';
  399. }
  400. }
  401. // Update phpPgAdmin url
  402. if (empty($_SESSION['error_msg'])) {
  403. if ($_POST['v_pgsql_url'] != $_SESSION['DB_PGA_ALIAS']) {
  404. exec (HESTIA_CMD."v-change-sys-db-alias pga ".escapeshellarg($_POST['v_pgsql_url']), $output, $return_var);
  405. check_return_code($return_var,$output);
  406. unset($output);
  407. $v_db_adv = 'yes';
  408. }
  409. }
  410. // Update release branch
  411. if (empty($_SESSION['error_msg'])) {
  412. if ($_POST['v_release_branch'] != $_SESSION['RELEASE_BRANCH']) {
  413. exec (HESTIA_CMD."v-change-sys-release ".escapeshellarg($_POST['v_release_branch']), $output, $return_var);
  414. check_return_code($return_var,$output);
  415. unset($output);
  416. $v_release_adv = 'yes';
  417. }
  418. }
  419. // Update send notification setting
  420. if (empty($_SESSION['error_msg'])) {
  421. if ( $_SESSION['UPGRADE_SEND_EMAIL'] == 'true' ){ $ugrade_send_mail = 'on'; }else{ $ugrade_send_mail = ''; }
  422. if ( $_POST['v_upgrade_send_notification_email'] != $ugrade_send_mail ) {
  423. if ($_POST['v_upgrade_send_notification_email'] == 'on') { $_POST['v_upgrade_send_notification_email'] = 'true'; } else { $_POST['v_upgrade_send_notification_email'] = 'false'; }
  424. exec (HESTIA_CMD."v-change-sys-config-value UPGRADE_SEND_EMAIL ".escapeshellarg($_POST['v_upgrade_send_notification_email']), $output, $return_var);
  425. check_return_code($return_var,$output);
  426. unset($output);
  427. $v_upgrade_notification_adv = 'yes';
  428. }
  429. }
  430. // Update send log by email setting
  431. if (empty($_SESSION['error_msg'])) {
  432. if ( $_SESSION['UPGRADE_SEND_EMAIL_LOG'] == 'true' ){ $send_email_log = 'on'; }else{ $send_email_log = ''; }
  433. if ( $_POST['v_upgrade_send_email_log'] != $send_email_log ) {
  434. if ($_POST['v_upgrade_send_email_log'] == 'on') { $_POST['v_upgrade_send_email_log'] = 'true'; } else { $_POST['v_upgrade_send_email_log'] = 'false'; }
  435. exec (HESTIA_CMD."v-change-sys-config-value UPGRADE_SEND_EMAIL_LOG ".escapeshellarg($_POST['v_upgrade_send_email_log']), $output, $return_var);
  436. check_return_code($return_var,$output);
  437. unset($output);
  438. $v_upgrade_send_log_adv = 'yes';
  439. }
  440. }
  441. // Disable local backup
  442. if (empty($_SESSION['error_msg'])) {
  443. if (($_POST['v_backup'] == 'no') && ($v_backup == 'yes' )) {
  444. exec (HESTIA_CMD."v-delete-backup-host local", $output, $return_var);
  445. check_return_code($return_var,$output);
  446. unset($output);
  447. if (empty($_SESSION['error_msg'])) $v_backup = 'no';
  448. $v_backup_adv = 'yes';
  449. }
  450. }
  451. // Enable local backups
  452. if (empty($_SESSION['error_msg'])) {
  453. if (($_POST['v_backup'] == 'yes') && ($v_backup != 'yes' )) {
  454. exec (HESTIA_CMD."v-add-backup-host local", $output, $return_var);
  455. check_return_code($return_var,$output);
  456. unset($output);
  457. if (empty($_SESSION['error_msg'])) $v_backup = 'yes';
  458. $v_backup_adv = 'yes';
  459. }
  460. }
  461. // Change backup gzip level
  462. if (empty($_SESSION['error_msg'])) {
  463. if ($_POST['v_backup_gzip'] != $v_backup_gzip ) {
  464. if ( $_POST['v_backup_mode'] == 'gzip' ){
  465. $_POST['v_backup_gzip'] = 9;
  466. }
  467. exec (HESTIA_CMD."v-change-sys-config-value BACKUP_GZIP ".escapeshellarg($_POST['v_backup_gzip']), $output, $return_var);
  468. check_return_code($return_var,$output);
  469. unset($output);
  470. if (empty($_SESSION['error_msg'])) $v_backup_gzip = $_POST['v_backup_gzip'];
  471. $v_backup_adv = 'yes';
  472. }
  473. }
  474. // Change backup mode
  475. if (empty($_SESSION['error_msg'])) {
  476. if ($_POST['v_backup_mode'] != $v_backup_mode ) {
  477. exec (HESTIA_CMD."v-change-sys-config-value BACKUP_MODE ".escapeshellarg($_POST['v_backup_mode']), $output, $return_var);
  478. check_return_code($return_var,$output);
  479. unset($output);
  480. if (empty($_SESSION['error_msg'])) $v_backup_mode = $_POST['v_backup_mode'];
  481. $v_backup_adv = 'yes';
  482. if ( $_POST['v_backup_mode'] == 'gzip' ){
  483. $_POST['v_backup_gzip'] = 9;
  484. if (empty($_SESSION['error_msg'])) $v_backup_gzip = $_POST['v_backup_gzip'];
  485. exec (HESTIA_CMD."v-change-sys-config-value BACKUP_GZIP ".escapeshellarg($_POST['v_backup_gzip']), $output, $return_var);
  486. }
  487. }
  488. }
  489. // Change backup path
  490. if (empty($_SESSION['error_msg'])) {
  491. if ($_POST['v_backup_dir'] != $v_backup_dir ) {
  492. /*
  493. See #1655
  494. exec (HESTIA_CMD."v-change-sys-config-value BACKUP ".escapeshellarg($_POST['v_backup_dir']), $output, $return_var);
  495. check_return_code($return_var,$output);
  496. unset($output);
  497. */
  498. if (empty($_SESSION['error_msg'])) $v_backup_dir = $_POST['v_backup_dir'];
  499. #$v_backup_adv = 'yes';
  500. }
  501. }
  502. // Add remote backup host
  503. if (empty($_SESSION['error_msg'])) {
  504. if ((empty($v_backup_host) && empty($v_backup_bucket) && ((!empty($_POST['v_backup_host'])) || !empty($_POST['v_backup_bucket']))) ) {
  505. if (in_array($_POST['v_backup_type'], array('ftp','sftp'))) {
  506. $v_backup_host = escapeshellarg($_POST['v_backup_host']);
  507. $v_backup_port = escapeshellarg($_POST['v_backup_port']);
  508. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  509. $v_backup_username = escapeshellarg($_POST['v_backup_username']);
  510. $v_backup_password = escapeshellcmd($_POST['v_backup_password']);
  511. $v_backup_bpath = escapeshellarg($_POST['v_backup_bpath']);
  512. exec (HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_host ." ". $v_backup_username ." ". $v_backup_password ." ". $v_backup_bpath." ".$v_backup_port, $output, $return_var);
  513. check_return_code($return_var,$output);
  514. unset($output);
  515. if (empty($_SESSION['error_msg'])) $v_backup_host = $_POST['v_backup_host'];
  516. if (empty($_SESSION['error_msg'])) $v_backup_type = $_POST['v_backup_type'];
  517. if (empty($_SESSION['error_msg'])) $v_backup_username = $_POST['v_backup_username'];
  518. if (empty($_SESSION['error_msg'])) $v_backup_password = $_POST['v_backup_password'];
  519. if (empty($_SESSION['error_msg'])) $v_backup_bpath = $_POST['v_backup_bpath'];
  520. if (empty($_SESSION['error_msg'])) $v_backup_port = $_POST['v_backup_port'];
  521. $v_backup_new = 'yes';
  522. $v_backup_adv = 'yes';
  523. $v_backup_remote_adv = 'yes';
  524. } else if (in_array($_POST['v_backup_type'], array('b2'))) {
  525. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  526. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  527. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  528. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  529. exec (HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_bucket ." ". $v_backup_application_id ." ". $v_backup_application_key, $output, $return_var);
  530. check_return_code($return_var,$output);
  531. unset($output);
  532. if (empty($_SESSION['error_msg'])) $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  533. if (empty($_SESSION['error_msg'])) $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  534. if (empty($_SESSION['error_msg'])) $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  535. $v_backup_new = 'yes';
  536. $v_backup_adv = 'yes';
  537. $v_backup_remote_adv = 'yes';
  538. }
  539. }
  540. }
  541. // Change remote backup host type
  542. if (empty($_SESSION['error_msg'])) {
  543. if ((!empty($_POST['v_backup_host'])) && ($_POST['v_backup_type'] != $v_backup_type)) {
  544. exec (HESTIA_CMD."v-delete-backup-host " . escapeshellarg($v_backup_type) , $output, $return_var);
  545. unset($output);
  546. if (in_array($_POST['v_backup_type'], array('ftp','sftp'))) {
  547. $v_backup_host = escapeshellarg($_POST['v_backup_host']);
  548. $v_backup_port = escapeshellarg($_POST['v_backup_port']);
  549. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  550. $v_backup_username = escapeshellarg($_POST['v_backup_username']);
  551. $v_backup_password = escapeshellcmd($_POST['v_backup_password']);
  552. $v_backup_bpath = escapeshellarg($_POST['v_backup_bpath']);
  553. exec (HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_host ." ". $v_backup_username ." ". $v_backup_password ." ". $v_backup_bpath." ".$v_backup_port, $output, $return_var);
  554. check_return_code($return_var,$output);
  555. unset($output);
  556. if (empty($_SESSION['error_msg'])) $v_backup_host = $_POST['v_backup_host'];
  557. if (empty($_SESSION['error_msg'])) $v_backup_type = $_POST['v_backup_type'];
  558. if (empty($_SESSION['error_msg'])) $v_backup_username = $_POST['v_backup_username'];
  559. if (empty($_SESSION['error_msg'])) $v_backup_password = $_POST['v_backup_password'];
  560. if (empty($_SESSION['error_msg'])) $v_backup_bpath = $_POST['v_backup_bpath'];
  561. if (empty($_SESSION['error_msg'])) $v_backup_port = $_POST['v_backup_port'];
  562. $v_backup_adv = 'yes';
  563. $v_backup_remote_adv = 'yes';
  564. } else if(in_array($_POST['v_backup_type'], array('b2'))) {
  565. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  566. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  567. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  568. exec (HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_bucket ." ". $v_backup_application_id ." ". $v_backup_application_key, $output, $return_var);
  569. check_return_code($return_var,$output);
  570. unset($output);
  571. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  572. if (empty($_SESSION['error_msg'])) $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  573. if (empty($_SESSION['error_msg'])) $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  574. if (empty($_SESSION['error_msg'])) $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  575. $v_backup_adv = 'yes';
  576. $v_backup_remote_adv = 'yes';
  577. }
  578. }
  579. }
  580. // Change remote backup host
  581. if (empty($_SESSION['error_msg'])) {
  582. if ((!empty($_POST['v_backup_host'])) && ($_POST['v_backup_type'] == $v_backup_type) && (!isset($v_backup_new))) {
  583. if (in_array($_POST['v_backup_type'], array('ftp','sftp'))) {
  584. if (($_POST['v_backup_host'] != $v_backup_host) || ($_POST['v_backup_username'] != $v_backup_username) || ($_POST['v_backup_password'] != $v_backup_password) || ($_POST['v_backup_bpath'] != $v_backup_bpath || $_POST['v_backup_port'] != $v_backup_port)) {
  585. $v_backup_host = escapeshellarg($_POST['v_backup_host']);
  586. $v_backup_port = escapeshellarg($_POST['v_backup_port']);
  587. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  588. $v_backup_username = escapeshellarg($_POST['v_backup_username']);
  589. $v_backup_password = escapeshellcmd($_POST['v_backup_password']);
  590. $v_backup_bpath = escapeshellarg($_POST['v_backup_bpath']);
  591. exec (HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_host ." ". $v_backup_username ." ". $v_backup_password ." ". $v_backup_bpath." ".$v_backup_port, $output, $return_var);
  592. check_return_code($return_var,$output);
  593. unset($output);
  594. if (empty($_SESSION['error_msg'])) $v_backup_host = $_POST['v_backup_host'];
  595. if (empty($_SESSION['error_msg'])) $v_backup_type = $_POST['v_backup_type'];
  596. if (empty($_SESSION['error_msg'])) $v_backup_username = $_POST['v_backup_username'];
  597. if (empty($_SESSION['error_msg'])) $v_backup_password = $_POST['v_backup_password'];
  598. if (empty($_SESSION['error_msg'])) $v_backup_bpath = $_POST['v_backup_bpath'];
  599. if (empty($_SESSION['error_msg'])) $v_backup_port = $_POST['v_backup_port'];
  600. $v_backup_adv = 'yes';
  601. $v_backup_remote_adv = 'yes';
  602. }
  603. } else if(in_array($_POST['v_backup_type'], array('b2'))) {
  604. if (($_POST['v_backup_bucket'] != $v_backup_bucket) || ($_POST['v_backup_application_key'] != $v_backup_application_key) || ($_POST['v_backup_application_id'] != $v_backup_application_id)) {
  605. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  606. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  607. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  608. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  609. exec (HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_bucket ." ". $v_backup_application_id ." ". $v_backup_application_key, $output, $return_var);
  610. check_return_code($return_var,$output);
  611. unset($output);
  612. if (empty($_SESSION['error_msg'])) $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  613. if (empty($_SESSION['error_msg'])) $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  614. if (empty($_SESSION['error_msg'])) $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  615. $v_backup_adv = 'yes';
  616. $v_backup_remote_adv = 'yes';
  617. }
  618. }
  619. }
  620. }
  621. // Delete remote backup host
  622. if (empty($_SESSION['error_msg'])) {
  623. if (empty($_POST['v_backup_remote_adv']) && isset($v_backup_remote_adv)) {
  624. exec (HESTIA_CMD."v-delete-backup-host ".escapeshellarg($v_backup_type), $output, $return_var);
  625. check_return_code($return_var,$output);
  626. unset($output);
  627. if (empty($_SESSION['error_msg'])) $v_backup_host = '';
  628. if (empty($_SESSION['error_msg'])) $v_backup_type = '';
  629. if (empty($_SESSION['error_msg'])) $v_backup_username = '';
  630. if (empty($_SESSION['error_msg'])) $v_backup_password = '';
  631. if (empty($_SESSION['error_msg'])) $v_backup_bpath = '';
  632. if (empty($_SESSION['error_msg'])) $v_backup_bucket = '';
  633. if (empty($_SESSION['error_msg'])) $v_backup_application_id = '';
  634. if (empty($_SESSION['error_msg'])) $v_backup_application_key = '';
  635. $v_backup_adv = '';
  636. $v_backup_remote_adv = '';
  637. }
  638. }
  639. // Change INACTIVE_SESSION_TIMEOUT
  640. if (empty($_SESSION['error_msg'])) {
  641. if ($_POST['v_inactive_session_timeout'] != $_SESSION['INACTIVE_SESSION_TIMEOUT']) {
  642. if($_POST['v_inactive_session_timeout'] < 1){
  643. $_SESSION['error_msg'] = _('Inactive session timeout can not lower than 1 minute');
  644. }else{
  645. exec (HESTIA_CMD."v-change-sys-config-value INACTIVE_SESSION_TIMEOUT ".escapeshellarg($_POST['v_inactive_session_timeout']), $output, $return_var);
  646. check_return_code($return_var,$output);
  647. unset($output);
  648. if (empty($_SESSION['error_msg'])) $v_inactive_session_timeout = $_POST['v_inactive_session_timeout'];
  649. }
  650. $v_security_adv = 'yes';
  651. }
  652. }
  653. // Change POLICY_CSRF_STRICTNESS
  654. if (empty($_SESSION['error_msg'])) {
  655. if ($_POST['v_policy_csrf_strictness'] != $_SESSION['POLICY_CSRF_STRICTNESS']) {
  656. exec (HESTIA_CMD."v-change-sys-config-value POLICY_CSRF_STRICTNESS ".escapeshellarg($_POST['v_policy_csrf_strictness']), $output, $return_var);
  657. check_return_code($return_var,$output);
  658. unset($output);
  659. if (empty($_SESSION['error_msg'])) $v_policy_csrf_strictness = $_POST['v_inactive_session_timeout'];
  660. $v_security_adv = 'yes';
  661. }
  662. }
  663. // Change ENFORCE_SUBDOMAIN_OWNERSHIP
  664. if (empty($_SESSION['error_msg'])) {
  665. if ($_POST['v_enforce_subdomain_ownership'] != $_SESSION['ENFORCE_SUBDOMAIN_OWNERSHIP']) {
  666. exec (HESTIA_CMD."v-change-sys-config-value ENFORCE_SUBDOMAIN_OWNERSHIP ".escapeshellarg($_POST['v_enforce_subdomain_ownership']), $output, $return_var);
  667. check_return_code($return_var,$output);
  668. unset($output);
  669. if (empty($_SESSION['error_msg'])) $v_enforce_subdomain_ownership = $_POST['v_enforce_subdomain_ownership'];
  670. $v_security_adv = 'yes';
  671. }
  672. }
  673. // Change POLICY_USER_EDIT_DETAILS
  674. if (empty($_SESSION['error_msg'])) {
  675. if ($_POST['v_policy_user_edit_details'] != $_SESSION['POLICY_USER_EDIT_DETAILS']) {
  676. exec (HESTIA_CMD."v-change-sys-config-value POLICY_USER_EDIT_DETAILS ".escapeshellarg($_POST['v_policy_user_edit_details']), $output, $return_var);
  677. check_return_code($return_var,$output);
  678. unset($output);
  679. if (empty($_SESSION['error_msg'])) $v_policy_user_edit_details = $_POST['v_policy_user_edit_details'];
  680. $v_security_adv = 'yes';
  681. }
  682. }
  683. // Change POLICY_USER_EDIT_WEB_TEMPLATES
  684. if (empty($_SESSION['error_msg'])) {
  685. if ($_POST['v_policy_user_edit_web_templates'] != $_SESSION['POLICY_USER_EDIT_WEB_TEMPLATES']) {
  686. exec (HESTIA_CMD."v-change-sys-config-value POLICY_USER_EDIT_WEB_TEMPLATES ".escapeshellarg($_POST['v_policy_user_edit_web_templates']), $output, $return_var);
  687. check_return_code($return_var,$output);
  688. unset($output);
  689. if (empty($_SESSION['error_msg'])) $v_policy_user_edit_details = $_POST['v_policy_user_edit_web_templates'];
  690. $v_security_adv = 'yes';
  691. }
  692. }
  693. // Change POLICY_USER_EDIT_DNS_TEMPLATES
  694. if (empty($_SESSION['error_msg'])) {
  695. if ($_POST['v_policy_user_edit_dns_templates'] != $_SESSION['POLICY_USER_EDIT_DNS_TEMPLATES']) {
  696. exec (HESTIA_CMD."v-change-sys-config-value POLICY_USER_EDIT_DNS_TEMPLATES ".escapeshellarg($_POST['v_policy_user_edit_dns_templates']), $output, $return_var);
  697. check_return_code($return_var,$output);
  698. unset($output);
  699. if (empty($_SESSION['error_msg'])) $v_policy_user_edit_details = $_POST['v_policy_user_edit_dns_templates'];
  700. $v_security_adv = 'yes';
  701. }
  702. }
  703. // Change POLICY_USER_VIEW_LOGS
  704. if (empty($_SESSION['error_msg'])) {
  705. if ($_POST['v_policy_user_view_logs'] != $_SESSION['POLICY_USER_VIEW_LOGS']) {
  706. exec (HESTIA_CMD."v-change-sys-config-value POLICY_USER_VIEW_LOGS ".escapeshellarg($_POST['v_policy_user_view_logs']), $output, $return_var);
  707. check_return_code($return_var,$output);
  708. unset($output);
  709. if (empty($_SESSION['error_msg'])) $v_policy_user_view_logs = $_POST['v_policy_user_view_logs'];
  710. $v_security_adv = 'yes';
  711. }
  712. }
  713. // Change POLICY_USER_DELETE_LOGS
  714. if (empty($_SESSION['error_msg'])) {
  715. if ($_POST['v_policy_user_delete_logs'] != $_SESSION['POLICY_USER_DELETE_LOGS']) {
  716. exec (HESTIA_CMD."v-change-sys-config-value POLICY_USER_DELETE_LOGS ".escapeshellarg($_POST['v_policy_user_delete_logs']), $output, $return_var);
  717. check_return_code($return_var,$output);
  718. unset($output);
  719. if (empty($_SESSION['error_msg'])) $v_policy_user_delete_logs = $_POST['v_policy_user_delete_logs'];
  720. $v_security_adv = 'yes';
  721. }
  722. }
  723. // Change POLICY_SYSTEM_PASSWORD_RESET
  724. if (empty($_SESSION['error_msg'])) {
  725. if ($_POST['v_policy_system_password_reset'] != $_SESSION['POLICY_SYSTEM_PASSWORD_RESET']) {
  726. exec (HESTIA_CMD."v-change-sys-config-value POLICY_SYSTEM_PASSWORD_RESET ".escapeshellarg($_POST['v_policy_system_password_reset']), $output, $return_var);
  727. check_return_code($return_var,$output);
  728. unset($output);
  729. if (empty($_SESSION['error_msg'])) $v_policy_system_password_reset = $_POST['v_policy_system_password_reset'];
  730. $v_security_adv = 'yes';
  731. }
  732. }
  733. // Change POLICY_SYSTEM_PROTECTED_ADMIN
  734. if (empty($_SESSION['error_msg'])) {
  735. if ($_POST['v_policy_system_protected_admin'] != $_SESSION['POLICY_SYSTEM_PROTECTED_ADMIN']) {
  736. exec (HESTIA_CMD."v-change-sys-config-value POLICY_SYSTEM_PROTECTED_ADMIN ".escapeshellarg($_POST['v_policy_system_protected_admin']), $output, $return_var);
  737. check_return_code($return_var,$output);
  738. unset($output);
  739. if (empty($_SESSION['error_msg'])) $v_policy_system_protected_admin = $_POST['v_policy_system_protected_admin'];
  740. $v_security_adv = 'yes';
  741. }
  742. }
  743. // Change POLICY_USER_VIEW_SUSPENDED
  744. if (empty($_SESSION['error_msg'])) {
  745. if ($_POST['v_policy_user_view_suspended'] != $_SESSION['POLICY_USER_VIEW_SUSPENDED'] && !empty($_SESSION['POLICY_USER_VIEW_SUSPENDED'])) {
  746. exec (HESTIA_CMD."v-change-sys-config-value POLICY_USER_VIEW_SUSPENDED ".escapeshellarg($_POST['v_policy_user_view_suspended']), $output, $return_var);
  747. check_return_code($return_var,$output);
  748. unset($output);
  749. if (empty($_SESSION['error_msg'])) $v_policy_system_hide_admin = $_POST['v_policy_user_view_suspended'];
  750. $v_security_adv = 'yes';
  751. }
  752. }
  753. // Change POLICY_USER_CHANGE_THEME
  754. if (empty($_SESSION['error_msg'])) {
  755. if ($_POST['v_policy_user_change_theme'] == 'on') { $_POST['v_policy_user_change_theme'] = 'no'; } else { $_POST['v_policy_user_change_theme'] = 'yes'; } {
  756. if ($_POST['v_policy_user_change_theme'] != $_SESSION['POLICY_USER_CHANGE_THEME']) {
  757. exec (HESTIA_CMD."v-change-sys-config-value POLICY_USER_CHANGE_THEME ".escapeshellarg($_POST['v_policy_user_change_theme']), $output, $return_var);
  758. check_return_code($return_var,$output);
  759. unset($output);
  760. if ($_POST['v_policy_user_change_theme']) {
  761. unset ($_SESSION['userTheme']);
  762. $require_refresh = true;
  763. }
  764. if (empty($_SESSION['error_msg'])) $v_policy_user_change_theme = $_POST['v_policy_user_change_theme'];
  765. }
  766. }
  767. }
  768. // Change POLICY_SYSTEM_HIDE_ADMIN
  769. if (empty($_SESSION['error_msg'])) {
  770. if ($_POST['v_policy_system_hide_admin'] != $_SESSION['POLICY_SYSTEM_HIDE_ADMIN']) {
  771. exec (HESTIA_CMD."v-change-sys-config-value POLICY_SYSTEM_HIDE_ADMIN ".escapeshellarg($_POST['v_policy_system_hide_admin']), $output, $return_var);
  772. check_return_code($return_var,$output);
  773. unset($output);
  774. if (empty($_SESSION['error_msg'])) $v_policy_system_hide_admin = $_POST['v_policy_system_hide_admin'];
  775. $v_security_adv = 'yes';
  776. }
  777. }
  778. // Change POLICY_SYSTEM_HIDE_SERVICES
  779. if (empty($_SESSION['error_msg'])) {
  780. if ($_POST['v_policy_system_hide_services'] != $_SESSION['POLICY_SYSTEM_HIDE_SERVICES']) {
  781. exec (HESTIA_CMD."v-change-sys-config-value POLICY_SYSTEM_HIDE_SERVICES ".escapeshellarg($_POST['v_policy_system_hide_services']), $output, $return_var);
  782. check_return_code($return_var,$output);
  783. unset($output);
  784. if (empty($_SESSION['error_msg'])) $v_policy_system_hide_services = $_POST['v_policy_system_hide_services'];
  785. $v_security_adv = 'yes';
  786. }
  787. }
  788. // Change login style
  789. if (empty($_SESSION['error_msg'])) {
  790. if ($_POST['v_login_style'] != $_SESSION['LOGIN_STYLE']) {
  791. exec (HESTIA_CMD."v-change-sys-config-value LOGIN_STYLE ".escapeshellarg($_POST['v_login_style']), $output, $return_var);
  792. check_return_code($return_var,$output);
  793. unset($output);
  794. if (empty($_SESSION['error_msg'])) $v_login_style = $_POST['v_login_style'];
  795. $v_security_adv = 'yes';
  796. }
  797. }
  798. if (empty($_SESSION['error_msg'])) {
  799. if ($_POST['v_api_allowed_ip'] != $_SESSION['API_ALLOWED_IP']) {
  800. $ips = array();
  801. foreach(explode("\n",$_POST['v_api_allowed_ip']) as $ip){
  802. if ($ip != "allow-all") {
  803. if(filter_var(trim($ip), FILTER_VALIDATE_IP)){
  804. $ips[] = trim($ip);
  805. }
  806. }else{
  807. $ips[] = trim($ip);
  808. }
  809. }
  810. if(implode(',',$ips) != $_SESSION['API_ALLOWED_IP']){
  811. exec (HESTIA_CMD."v-change-sys-config-value API_ALLOWED_IP ".escapeshellarg(implode(',',$ips)), $output, $return_var);
  812. check_return_code($return_var,$output);
  813. unset($output);
  814. if (empty($_SESSION['error_msg'])) $v_login_style = $_POST['v_api_allowed_ip'];
  815. $v_security_adv = 'yes';
  816. }
  817. }
  818. }
  819. if (empty($_SESSION['error_msg'])) {
  820. if ($_POST['v_api'] != $_SESSION['API']) {
  821. $api_status = 'disable';
  822. if ($_POST['v_api'] == 'yes'){
  823. $api_status = 'enable';
  824. }
  825. exec (HESTIA_CMD."v-change-sys-api ".escapeshellarg($api_status), $output, $return_var);
  826. check_return_code($return_var,$output);
  827. unset($output);
  828. if (empty($_SESSION['error_msg'])) $v_login_style = $_POST['v_api'];
  829. $v_security_adv = 'yes';
  830. }
  831. }
  832. // Update SSL certificate
  833. if ((!empty($_POST['v_ssl_crt'])) && (empty($_SESSION['error_msg']))) {
  834. if (($v_ssl_crt != str_replace("\r\n", "\n", $_POST['v_ssl_crt'])) || ($v_ssl_key != str_replace("\r\n", "\n", $_POST['v_ssl_key']))) {
  835. exec ('mktemp -d', $mktemp_output, $return_var);
  836. $tmpdir = $mktemp_output[0];
  837. // Certificate
  838. if (!empty($_POST['v_ssl_crt'])) {
  839. $fp = fopen($tmpdir."/certificate.crt", 'w');
  840. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_crt']));
  841. fwrite($fp, "\n");
  842. fclose($fp);
  843. }
  844. // Key
  845. if (!empty($_POST['v_ssl_key'])) {
  846. $fp = fopen($tmpdir."/certificate.key", 'w');
  847. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_key']));
  848. fwrite($fp, "\n");
  849. fclose($fp);
  850. }
  851. exec (HESTIA_CMD."v-change-sys-hestia-ssl ".$tmpdir, $output, $return_var);
  852. check_return_code($return_var,$output);
  853. unset($output);
  854. // List ssl certificate info
  855. exec (HESTIA_CMD."v-list-sys-hestia-ssl json", $output, $return_var);
  856. $ssl_str = json_decode(implode('', $output), true);
  857. unset($output);
  858. $v_ssl_crt = $ssl_str['HESTIA']['CRT'];
  859. $v_ssl_key = $ssl_str['HESTIA']['KEY'];
  860. $v_ssl_ca = $ssl_str['HESTIA']['CA'];
  861. $v_ssl_subject = $ssl_str['HESTIA']['SUBJECT'];
  862. $v_ssl_aliases = $ssl_str['HESTIA']['ALIASES'];
  863. $v_ssl_not_before = $ssl_str['HESTIA']['NOT_BEFORE'];
  864. $v_ssl_not_after = $ssl_str['HESTIA']['NOT_AFTER'];
  865. $v_ssl_signature = $ssl_str['HESTIA']['SIGNATURE'];
  866. $v_ssl_pub_key = $ssl_str['HESTIA']['PUB_KEY'];
  867. $v_ssl_issuer = $ssl_str['HESTIA']['ISSUER'];
  868. // Cleanup certificate tempfiles
  869. if (file_exists($tmpdir . '/certificate.crt')) unlink($tmpdir . '/certificate.crt');
  870. if (file_exists($tmpdir . '/certificate.key')) unlink($tmpdir . '/certificate.key');
  871. rmdir($tmpdir);
  872. }
  873. }
  874. // Flush field values on success
  875. if (empty($_SESSION['error_msg'])) {
  876. $_SESSION['ok_msg'] = _('Changes has been saved.');
  877. }
  878. if ($require_refresh == true){
  879. $refresh = $_SERVER['REQUEST_URI'];
  880. $_SESSION['ok_msg'] = _('Changes has been saved.');
  881. header("Location: $refresh");
  882. die();
  883. }
  884. }
  885. // Check system configuration
  886. exec (HESTIA_CMD . "v-list-sys-config json", $output, $return_var);
  887. $data = json_decode(implode('', $output), true);
  888. unset($output);
  889. $sys_arr = $data['config'];
  890. foreach ($sys_arr as $key => $value) {
  891. $_SESSION[$key] = $value;
  892. }
  893. // Render page
  894. render_page($user, $TAB, 'edit_server');
  895. // Flush session messages
  896. unset($_SESSION['error_msg']);
  897. unset($_SESSION['ok_msg']);