index.php 51 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232
  1. <?php
  2. $TAB = 'SERVER';
  3. // Main include
  4. include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
  5. // Check user
  6. if ($_SESSION['userContext'] != 'admin') {
  7. header("Location: /list/user");
  8. exit;
  9. }
  10. // Get server hostname
  11. $v_hostname = exec('hostname');
  12. // List available timezones and get current one
  13. $v_timezones = list_timezones();
  14. exec(HESTIA_CMD."v-get-sys-timezone", $output, $return_var);
  15. $v_timezone = $output[0];
  16. unset($output);
  17. if ($v_timezone == 'Etc/UTC') {
  18. $v_timezone = 'UTC';
  19. }
  20. if ($v_timezone == 'Pacific/Honolulu') {
  21. $v_timezone = 'HAST';
  22. }
  23. if ($v_timezone == 'US/Aleutian') {
  24. $v_timezone = 'HADT';
  25. }
  26. if ($v_timezone == 'Etc/GMT+9') {
  27. $v_timezone = 'AKST';
  28. }
  29. if ($v_timezone == 'America/Anchorage') {
  30. $v_timezone = 'AKDT';
  31. }
  32. if ($v_timezone == 'America/Dawson_Creek') {
  33. $v_timezone = 'PST';
  34. }
  35. if ($v_timezone == 'PST8PDT') {
  36. $v_timezone = 'PDT';
  37. }
  38. if ($v_timezone == 'MST7MDT') {
  39. $v_timezone = 'MDT';
  40. }
  41. if ($v_timezone == 'Canada/Saskatchewan') {
  42. $v_timezone = 'CST';
  43. }
  44. if ($v_timezone == 'CST6CDT') {
  45. $v_timezone = 'CDT';
  46. }
  47. if ($v_timezone == 'EST5EDT') {
  48. $v_timezone = 'EDT';
  49. }
  50. if ($v_timezone == 'America/Puerto_Rico') {
  51. $v_timezone = 'AST';
  52. }
  53. if ($v_timezone == 'America/Halifax') {
  54. $v_timezone = 'ADT';
  55. }
  56. // List supported php versions
  57. exec(HESTIA_CMD."v-list-web-templates-backend json", $output, $return_var);
  58. $backend_templates = json_decode(implode('', $output), true);
  59. unset($output);
  60. $v_php_versions = [
  61. 'php-5.6',
  62. 'php-7.0',
  63. 'php-7.1',
  64. 'php-7.2',
  65. 'php-7.3',
  66. 'php-7.4',
  67. 'php-8.0',
  68. ];
  69. sort($v_php_versions);
  70. if (empty($backend_templates)) {
  71. $v_php_versions=[];
  72. }
  73. $backends_active = backendtpl_with_webdomains();
  74. $v_php_versions = array_map(function ($php_version) use ($backend_templates, $backends_active) {
  75. // Mark installed php versions
  76. if (stripos($php_version, 'php') !== 0) {
  77. return false;
  78. }
  79. $phpinfo = (object) [
  80. "name" => $php_version,
  81. "tpl" => strtoupper(str_replace('.', '_', $php_version)),
  82. "version" => str_ireplace('php-', '', $php_version),
  83. "usedby" => [],
  84. "installed" => false,
  85. "protected" => false,
  86. ];
  87. if (in_array($phpinfo->tpl, $backend_templates)) {
  88. $phpinfo->installed = true;
  89. }
  90. if (array_key_exists($phpinfo->tpl, $backends_active)) {
  91. // Prevent used php version to be removed
  92. if ($phpinfo->installed) {
  93. $phpinfo->protected = true;
  94. }
  95. $phpinfo->usedby = $backends_active[$phpinfo->tpl];
  96. }
  97. if ($phpinfo->name == DEFAULT_PHP_VERSION) {
  98. // Prevent default php version to be removed
  99. if ($phpinfo->installed) {
  100. $phpinfo->protected = true;
  101. }
  102. if (!empty($backends_active['default'])) {
  103. $phpinfo->usedby = array_merge_recursive($phpinfo->usedby, $backends_active['default']);
  104. }
  105. }
  106. return $phpinfo;
  107. }, $v_php_versions);
  108. // List languages
  109. exec(HESTIA_CMD."v-list-sys-languages json", $output, $return_var);
  110. $language = json_decode(implode('', $output), true);
  111. foreach ($language as $lang) {
  112. $languages[$lang] = translate_json($lang);
  113. }
  114. asort($languages);
  115. unset($output);
  116. // List themes
  117. exec(HESTIA_CMD."v-list-sys-themes json", $output, $return_var);
  118. $theme = json_decode(implode('', $output), true);
  119. unset($output);
  120. // List dns cluster hosts
  121. exec(HESTIA_CMD."v-list-remote-dns-hosts json", $output, $return_var);
  122. $dns_cluster = json_decode(implode('', $output), true);
  123. unset($output);
  124. if (is_array($dns_cluster)) {
  125. foreach ($dns_cluster as $key => $value) {
  126. $v_dns_cluster = 'yes';
  127. }
  128. }
  129. // List smtp relay settings
  130. if (!empty($_SESSION['SMTP_RELAY'])) {
  131. $v_smtp_relay = $_SESSION['SMTP_RELAY'];
  132. }
  133. if (!empty($_SESSION['SMTP_RELAY_HOST'])) {
  134. $v_smtp_relay_host = $_SESSION['SMTP_RELAY_HOST'];
  135. }
  136. if (!empty($_SESSION['SMTP_RELAY_PORT'])) {
  137. $v_smtp_relay_port = $_SESSION['SMTP_RELAY_PORT'];
  138. }
  139. if (!empty($_SESSION['SMTP_RELAY_USER'])) {
  140. $v_smtp_relay_user = $_SESSION['SMTP_RELAY_USER'];
  141. }
  142. // List Database hosts
  143. exec(HESTIA_CMD."v-list-database-hosts json", $output, $return_var);
  144. $db_hosts = json_decode(implode('', $output), true);
  145. unset($output);
  146. $v_mysql_hosts = array_values(array_filter($db_hosts, function ($host) {
  147. return $host['TYPE'] === 'mysql';
  148. }));
  149. $v_mysql = count($v_mysql_hosts) ? 'yes' : 'no';
  150. $v_pgsql_hosts = array_values(array_filter($db_hosts, function ($host) {
  151. return $host['TYPE'] === 'pgsql';
  152. }));
  153. $v_pgsql = count($v_pgsql_hosts) ? 'yes' : 'no';
  154. unset($db_hosts);
  155. // List backup settings
  156. $v_backup_dir = "/backup";
  157. if (!empty($_SESSION['BACKUP'])) {
  158. $v_backup_dir = $_SESSION['BACKUP'];
  159. }
  160. $v_backup_gzip = '5';
  161. if (!empty($_SESSION['BACKUP_GZIP'])) {
  162. $v_backup_gzip = $_SESSION['BACKUP_GZIP'];
  163. }
  164. $v_backup_mode = 'gzip';
  165. if (!empty($_SESSION['BACKUP_MODE'])) {
  166. $v_backup_mode = $_SESSION['BACKUP_MODE'];
  167. }
  168. $backup_types = explode(",", $_SESSION['BACKUP_SYSTEM']);
  169. foreach ($backup_types as $backup_type) {
  170. if ($backup_type == 'local') {
  171. $v_backup = 'yes';
  172. } else {
  173. exec(HESTIA_CMD."v-list-backup-host ".escapeshellarg($backup_type)." json", $output, $return_var);
  174. $v_remote_backup = json_decode(implode('', $output), true);
  175. unset($output);
  176. if (in_array($backup_type, array('ftp','sftp'))) {
  177. $v_backup_host = $v_remote_backup[$backup_type]['HOST'];
  178. $v_backup_type = $v_remote_backup[$backup_type]['TYPE'];
  179. $v_backup_username = $v_remote_backup[$backup_type]['USERNAME'];
  180. $v_backup_password = "";
  181. $v_backup_port = $v_remote_backup[$backup_type]['PORT'];
  182. $v_backup_bpath = $v_remote_backup[$backup_type]['BPATH'];
  183. $v_backup_remote_adv = "yes";
  184. } elseif (in_array($backup_type, array('b2'))) {
  185. $v_backup_bucket = $v_remote_backup[$backup_type]['BUCKET'];
  186. $v_backup_type = $v_remote_backup[$backup_type]['TYPE'];
  187. $v_backup_application_id = $v_remote_backup[$backup_type]['B2_KEY_ID'];
  188. $v_backup_application_key = '';
  189. $v_backup_remote_adv = "yes";
  190. }
  191. }
  192. }
  193. // List ssl certificate info
  194. exec(HESTIA_CMD."v-list-sys-hestia-ssl json", $output, $return_var);
  195. $ssl_str = json_decode(implode('', $output), true);
  196. unset($output);
  197. $v_ssl_crt = $ssl_str['HESTIA']['CRT'];
  198. $v_ssl_key = $ssl_str['HESTIA']['KEY'];
  199. $v_ssl_ca = $ssl_str['HESTIA']['CA'];
  200. $v_ssl_subject = $ssl_str['HESTIA']['SUBJECT'];
  201. $v_ssl_aliases = $ssl_str['HESTIA']['ALIASES'];
  202. $v_ssl_not_before = $ssl_str['HESTIA']['NOT_BEFORE'];
  203. $v_ssl_not_after = $ssl_str['HESTIA']['NOT_AFTER'];
  204. $v_ssl_signature = $ssl_str['HESTIA']['SIGNATURE'];
  205. $v_ssl_pub_key = $ssl_str['HESTIA']['PUB_KEY'];
  206. $v_ssl_issuer = $ssl_str['HESTIA']['ISSUER'];
  207. // Check POST request
  208. if (!empty($_POST['save'])) {
  209. $require_refresh = false;
  210. // Check token
  211. verify_csrf($_POST);
  212. // Change hostname
  213. if ((!empty($_POST['v_hostname'])) && ($v_hostname != $_POST['v_hostname'])) {
  214. exec(HESTIA_CMD."v-change-sys-hostname ".escapeshellarg($_POST['v_hostname']), $output, $return_var);
  215. check_return_code($return_var, $output);
  216. unset($output);
  217. $v_hostname = $_POST['v_hostname'];
  218. }
  219. // Install/remove php versions
  220. if (empty($_SESSION['error_msg'])) {
  221. if (!empty($v_php_versions)) {
  222. $post_php = $_POST['v_php_versions'];
  223. array_map(function ($php_version) use ($post_php) {
  224. if (array_key_exists($php_version->tpl, $post_php)) {
  225. if (!$php_version->installed) {
  226. exec(HESTIA_CMD . "v-add-web-php " . escapeshellarg($php_version->version), $output, $return_var);
  227. check_return_code($return_var, $output);
  228. unset($output);
  229. if (empty($_SESSION['error_msg'])) {
  230. $php_version->installed = true;
  231. }
  232. }
  233. } else {
  234. if ($php_version->installed && !$php_version->protected) {
  235. exec(HESTIA_CMD . "v-delete-web-php " . escapeshellarg($php_version->version), $output, $return_var);
  236. check_return_code($return_var, $output);
  237. unset($output);
  238. if (empty($_SESSION['error_msg'])) {
  239. $php_version->installed = false;
  240. }
  241. }
  242. }
  243. return $php_version;
  244. }, $v_php_versions);
  245. }
  246. }
  247. // Change timezone
  248. if (empty($_SESSION['error_msg'])) {
  249. if (!empty($_POST['v_timezone'])) {
  250. $v_tz = $_POST['v_timezone'];
  251. if ($v_tz == 'UTC') {
  252. $v_tz = 'Etc/UTC';
  253. }
  254. if ($v_tz == 'HAST') {
  255. $v_tz = 'Pacific/Honolulu';
  256. }
  257. if ($v_tz == 'HADT') {
  258. $v_tz = 'US/Aleutian';
  259. }
  260. if ($v_tz == 'AKST') {
  261. $v_tz = 'Etc/GMT+9';
  262. }
  263. if ($v_tz == 'AKDT') {
  264. $v_tz = 'America/Anchorage';
  265. }
  266. if ($v_tz == 'PST') {
  267. $v_tz = 'America/Dawson_Creek';
  268. }
  269. if ($v_tz == 'PDT') {
  270. $v_tz = 'PST8PDT';
  271. }
  272. if ($v_tz == 'MDT') {
  273. $v_tz = 'MST7MDT';
  274. }
  275. if ($v_tz == 'CST') {
  276. $v_tz = 'Canada/Saskatchewan';
  277. }
  278. if ($v_tz == 'CDT') {
  279. $v_tz = 'CST6CDT';
  280. }
  281. if ($v_tz == 'EDT') {
  282. $v_tz = 'EST5EDT';
  283. }
  284. if ($v_tz == 'AST') {
  285. $v_tz = 'America/Puerto_Rico';
  286. }
  287. if ($v_tz == 'ADT') {
  288. $v_tz = 'America/Halifax';
  289. }
  290. if ($v_timezone != $v_tz) {
  291. exec(HESTIA_CMD."v-change-sys-timezone ".escapeshellarg($v_tz), $output, $return_var);
  292. check_return_code($return_var, $output);
  293. $v_timezone = $v_tz;
  294. unset($output);
  295. }
  296. }
  297. }
  298. // Change default language
  299. if (empty($_SESSION['error_msg'])) {
  300. if ((!empty($_POST['v_language'])) && ($_SESSION['LANGUAGE'] != $_POST['v_language'])) {
  301. if (isset($_POST['v_language_update'])) {
  302. exec(HESTIA_CMD."v-change-sys-language ".escapeshellarg($_POST['v_language'])." yes", $output, $return_var);
  303. if (empty($_SESSION['error_msg'])) {
  304. $_SESSION['LANGUAGE'] = $_POST['v_language'];
  305. }
  306. }
  307. exec(HESTIA_CMD."v-change-sys-language ".escapeshellarg($_POST['v_language']), $output, $return_var);
  308. check_return_code($return_var, $output);
  309. unset($output);
  310. if (empty($_SESSION['error_msg'])) {
  311. $_SESSION['LANGUAGE'] = $_POST['v_language'];
  312. }
  313. }
  314. }
  315. // Update theme
  316. if (empty($_SESSION['error_msg'])) {
  317. if ($_POST['v_theme'] != $_SESSION['THEME']) {
  318. exec(HESTIA_CMD."v-change-sys-config-value THEME ".escapeshellarg($_POST['v_theme']), $output, $return_var);
  319. check_return_code($return_var, $output);
  320. unset($output);
  321. }
  322. }
  323. // Update debug mode status
  324. if (empty($_SESSION['error_msg'])) {
  325. if ($_POST['v_debug_mode'] == 'on') {
  326. $_POST['v_debug_mode'] = 'true';
  327. } else {
  328. $_POST['v_debug_mode'] = 'false';
  329. }
  330. if ($_POST['v_debug_mode'] != $_SESSION['DEBUG_MODE']) {
  331. exec(HESTIA_CMD."v-change-sys-config-value DEBUG_MODE ".escapeshellarg($_POST['v_debug_mode']), $output, $return_var);
  332. check_return_code($return_var, $output);
  333. unset($output);
  334. $v_debug_mode_adv = 'yes';
  335. }
  336. }
  337. // Enable/Disable Quick App Installer
  338. if (empty($_SESSION['error_msg'])) {
  339. if ($_POST['v_plugin_app_installer'] != $_SESSION['PLUGIN_APP_INSTALLER']) {
  340. if ($_POST['v_plugin_app_installer'] == 'true') {
  341. $_POST['v_plugin_app_installer'] = 'true';
  342. } else {
  343. $_POST['v_plugin_app_installer'] = 'false';
  344. }
  345. exec(HESTIA_CMD."v-change-sys-config-value PLUGIN_APP_INSTALLER ".escapeshellarg($_POST['v_plugin_app_installer']), $output, $return_var);
  346. check_return_code($return_var, $output);
  347. unset($output);
  348. }
  349. }
  350. // Update experimental features status
  351. if (empty($_SESSION['error_msg'])) {
  352. if ($_POST['v_experimental_features'] == 'on') {
  353. $_POST['v_experimental_features'] = 'true';
  354. } else {
  355. $_POST['v_experimental_features'] = 'false';
  356. }
  357. if ($_POST['v_experimental_features'] != $_SESSION['POLICY_SYSTEM_ENABLE_BACON']) {
  358. exec(HESTIA_CMD."v-change-sys-config-value POLICY_SYSTEM_ENABLE_BACON ".escapeshellarg($_POST['v_experimental_features']), $output, $return_var);
  359. check_return_code($return_var, $output);
  360. unset($output);
  361. $v_debug_mode_adv = 'yes';
  362. }
  363. }
  364. // Set File Manager support
  365. if (empty($_SESSION['error_msg'])) {
  366. if ((!empty($_POST['v_filemanager'])) && ($_SESSION['FILE_MANAGER'] != $_POST['v_filemanager'])) {
  367. if ($_POST['v_filemanager'] == 'true') {
  368. exec(HESTIA_CMD."v-add-sys-filemanager", $output, $return_var);
  369. check_return_code($return_var, $output);
  370. unset($output);
  371. if (empty($_SESSION['error_msg'])) {
  372. $_SESSION['FILE_MANAGER'] = 'true';
  373. }
  374. } else {
  375. exec(HESTIA_CMD."v-delete-sys-filemanager", $output, $return_var);
  376. check_return_code($return_var, $output);
  377. unset($output);
  378. if (empty($_SESSION['error_msg'])) {
  379. $_SESSION['FILE_MANAGER'] = 'false';
  380. }
  381. }
  382. }
  383. }
  384. // Set phpMyAdmin SSO key
  385. if (empty($_SESSION['error_msg'])) {
  386. if (!empty($_POST['v_phpmyadmin_key'])) {
  387. if ($_POST['v_phpmyadmin_key'] == 'yes' && $_SESSION['PHPMYADMIN_KEY'] == '') {
  388. exec(HESTIA_CMD."v-add-sys-pma-sso quiet", $output, $return_var);
  389. check_return_code($return_var, $output);
  390. unset($output);
  391. if (empty($_SESSION['error_msg'])) {
  392. $_SESSION['PHPMYADMIN_KEY'] != "";
  393. }
  394. } elseif ($_POST['v_phpmyadmin_key'] == 'no' && $_SESSION['PHPMYADMIN_KEY'] != '') {
  395. exec(HESTIA_CMD."v-delete-sys-pma-sso quiet", $output, $return_var);
  396. check_return_code($return_var, $output);
  397. unset($output);
  398. if (empty($_SESSION['error_msg'])) {
  399. $_SESSION['PHPMYADMIN_KEY'] = '';
  400. }
  401. }
  402. }
  403. }
  404. // Set disk_quota support
  405. if (empty($_SESSION['error_msg'])) {
  406. if ((!empty($_POST['v_quota'])) && ($_SESSION['DISK_QUOTA'] != $_POST['v_quota'])) {
  407. if ($_POST['v_quota'] == 'yes') {
  408. exec(HESTIA_CMD."v-add-sys-quota", $output, $return_var);
  409. check_return_code($return_var, $output);
  410. unset($output);
  411. if (empty($_SESSION['error_msg'])) {
  412. $_SESSION['DISK_QUOTA'] = 'yes';
  413. }
  414. } else {
  415. exec(HESTIA_CMD."v-delete-sys-quota", $output, $return_var);
  416. check_return_code($return_var, $output);
  417. unset($output);
  418. if (empty($_SESSION['error_msg'])) {
  419. $_SESSION['DISK_QUOTA'] = 'no';
  420. }
  421. }
  422. }
  423. }
  424. // Set firewall support
  425. if (empty($_SESSION['error_msg'])) {
  426. if ($_SESSION['FIREWALL_SYSTEM'] == 'iptables') {
  427. $v_firewall = 'yes';
  428. }
  429. if ($_SESSION['FIREWALL_SYSTEM'] != 'iptables') {
  430. $v_firewall = 'no';
  431. }
  432. if ((!empty($_POST['v_firewall'])) && ($v_firewall != $_POST['v_firewall'])) {
  433. if ($_POST['v_firewall'] == 'yes') {
  434. exec(HESTIA_CMD."v-add-sys-firewall", $output, $return_var);
  435. check_return_code($return_var, $output);
  436. unset($output);
  437. if (empty($_SESSION['error_msg'])) {
  438. $_SESSION['FIREWALL_SYSTEM'] = 'iptables';
  439. }
  440. } else {
  441. exec(HESTIA_CMD."v-delete-sys-firewall", $output, $return_var);
  442. check_return_code($return_var, $output);
  443. unset($output);
  444. if (empty($_SESSION['error_msg'])) {
  445. $_SESSION['FIREWALL_SYSTEM'] = '';
  446. }
  447. }
  448. }
  449. }
  450. // Update mysql pasword
  451. if (empty($_SESSION['error_msg'])) {
  452. if (!empty($_POST['v_mysql_password'])) {
  453. exec(HESTIA_CMD."v-change-database-host-password mysql localhost root ".escapeshellarg($_POST['v_mysql_password']), $output, $return_var);
  454. check_return_code($return_var, $output);
  455. unset($output);
  456. $v_db_adv = 'yes';
  457. }
  458. }
  459. // Update webmail url
  460. if (empty($_SESSION['error_msg'])) {
  461. if ($_POST['v_webmail_alias'] != $_SESSION['WEBMAIL_ALIAS']) {
  462. exec(HESTIA_CMD."v-change-sys-webmail ".escapeshellarg($_POST['v_webmail_alias']), $output, $return_var);
  463. check_return_code($return_var, $output);
  464. unset($output);
  465. $v_mail_adv = 'yes';
  466. }
  467. }
  468. // Update system wide smtp relay
  469. if (empty($_SESSION['error_msg'])) {
  470. if (isset($_POST['v_smtp_relay']) && (!empty($_POST['v_smtp_relay_host'])) && (!empty($_POST['v_smtp_relay_user']))) {
  471. if (($_POST['v_smtp_relay_host'] != $v_smtp_relay_host) ||
  472. ($_POST['v_smtp_relay_user'] != $v_smtp_relay_user) ||
  473. ($_POST['v_smtp_relay_port'] != $v_smtp_relay_port) ||
  474. (!empty($_POST['v_smtp_relay_pass']))) {
  475. if (!empty($_POST['v_smtp_relay_pass'])) {
  476. $v_smtp_relay = true;
  477. $v_smtp_relay_host = escapeshellarg($_POST['v_smtp_relay_host']);
  478. $v_smtp_relay_user = escapeshellarg($_POST['v_smtp_relay_user']);
  479. $v_smtp_relay_pass = escapeshellarg($_POST['v_smtp_relay_pass']);
  480. if (!empty($_POST['v_smtp_relay_port'])) {
  481. $v_smtp_relay_port = escapeshellarg($_POST['v_smtp_relay_port']);
  482. } else {
  483. $v_smtp_relay_port = '587';
  484. }
  485. exec(HESTIA_CMD."v-add-sys-smtp-relay ".$v_smtp_relay_host." ".$v_smtp_relay_user." ".$v_smtp_relay_pass." ".$v_smtp_relay_port, $output, $return_var);
  486. check_return_code($return_var, $output);
  487. unset($output);
  488. } else {
  489. $_SESSION['error_msg'] = _('SMTP Relay Password is required');
  490. }
  491. }
  492. }
  493. if ((!isset($_POST['v_smtp_relay'])) && ($v_smtp_relay == true)) {
  494. $v_smtp_relay = false;
  495. $v_smtp_relay_host = $v_smtp_relay_user = $v_smtp_relay_pass = $v_smtp_relay_port = '';
  496. exec(HESTIA_CMD."v-delete-sys-smtp-relay", $output, $return_var);
  497. check_return_code($return_var, $output);
  498. unset($output);
  499. }
  500. }
  501. // Update phpMyAdmin url
  502. if (empty($_SESSION['error_msg'])) {
  503. if ($_POST['v_mysql_url'] != $_SESSION['DB_PMA_ALIAS']) {
  504. exec(HESTIA_CMD."v-change-sys-db-alias pma ".escapeshellarg($_POST['v_mysql_url']), $output, $return_var);
  505. check_return_code($return_var, $output);
  506. unset($output);
  507. $v_db_adv = 'yes';
  508. }
  509. }
  510. // Update phpPgAdmin url
  511. if (empty($_SESSION['error_msg'])) {
  512. if ($_POST['v_pgsql_url'] != $_SESSION['DB_PGA_ALIAS']) {
  513. exec(HESTIA_CMD."v-change-sys-db-alias pga ".escapeshellarg($_POST['v_pgsql_url']), $output, $return_var);
  514. check_return_code($return_var, $output);
  515. unset($output);
  516. $v_db_adv = 'yes';
  517. }
  518. }
  519. // Update release branch
  520. if (empty($_SESSION['error_msg'])) {
  521. if ($_POST['v_release_branch'] != $_SESSION['RELEASE_BRANCH']) {
  522. exec(HESTIA_CMD."v-change-sys-release ".escapeshellarg($_POST['v_release_branch']), $output, $return_var);
  523. check_return_code($return_var, $output);
  524. unset($output);
  525. $v_release_adv = 'yes';
  526. }
  527. }
  528. // Update send notification setting
  529. if (empty($_SESSION['error_msg'])) {
  530. if ($_SESSION['UPGRADE_SEND_EMAIL'] == 'true') {
  531. $ugrade_send_mail = 'on';
  532. } else {
  533. $ugrade_send_mail = '';
  534. }
  535. if ($_POST['v_upgrade_send_notification_email'] != $ugrade_send_mail) {
  536. if ($_POST['v_upgrade_send_notification_email'] == 'on') {
  537. $_POST['v_upgrade_send_notification_email'] = 'true';
  538. } else {
  539. $_POST['v_upgrade_send_notification_email'] = 'false';
  540. }
  541. exec(HESTIA_CMD."v-change-sys-config-value UPGRADE_SEND_EMAIL ".escapeshellarg($_POST['v_upgrade_send_notification_email']), $output, $return_var);
  542. check_return_code($return_var, $output);
  543. unset($output);
  544. $v_upgrade_notification_adv = 'yes';
  545. }
  546. }
  547. // Update send log by email setting
  548. if (empty($_SESSION['error_msg'])) {
  549. if ($_SESSION['UPGRADE_SEND_EMAIL_LOG'] == 'true') {
  550. $send_email_log = 'on';
  551. } else {
  552. $send_email_log = '';
  553. }
  554. if ($_POST['v_upgrade_send_email_log'] != $send_email_log) {
  555. if ($_POST['v_upgrade_send_email_log'] == 'on') {
  556. $_POST['v_upgrade_send_email_log'] = 'true';
  557. } else {
  558. $_POST['v_upgrade_send_email_log'] = 'false';
  559. }
  560. exec(HESTIA_CMD."v-change-sys-config-value UPGRADE_SEND_EMAIL_LOG ".escapeshellarg($_POST['v_upgrade_send_email_log']), $output, $return_var);
  561. check_return_code($return_var, $output);
  562. unset($output);
  563. $v_upgrade_send_log_adv = 'yes';
  564. }
  565. }
  566. // Disable local backup
  567. if (empty($_SESSION['error_msg'])) {
  568. if (($_POST['v_backup'] == 'no') && ($v_backup == 'yes')) {
  569. exec(HESTIA_CMD."v-delete-backup-host local", $output, $return_var);
  570. check_return_code($return_var, $output);
  571. unset($output);
  572. if (empty($_SESSION['error_msg'])) {
  573. $v_backup = 'no';
  574. }
  575. $v_backup_adv = 'yes';
  576. }
  577. }
  578. // Enable local backups
  579. if (empty($_SESSION['error_msg'])) {
  580. if (($_POST['v_backup'] == 'yes') && ($v_backup != 'yes')) {
  581. exec(HESTIA_CMD."v-add-backup-host local", $output, $return_var);
  582. check_return_code($return_var, $output);
  583. unset($output);
  584. if (empty($_SESSION['error_msg'])) {
  585. $v_backup = 'yes';
  586. }
  587. $v_backup_adv = 'yes';
  588. }
  589. }
  590. // Change backup gzip level
  591. if (empty($_SESSION['error_msg'])) {
  592. if ($_POST['v_backup_gzip'] != $v_backup_gzip) {
  593. if ($_POST['v_backup_mode'] == 'gzip') {
  594. $_POST['v_backup_gzip'] = 9;
  595. }
  596. exec(HESTIA_CMD."v-change-sys-config-value BACKUP_GZIP ".escapeshellarg($_POST['v_backup_gzip']), $output, $return_var);
  597. check_return_code($return_var, $output);
  598. unset($output);
  599. if (empty($_SESSION['error_msg'])) {
  600. $v_backup_gzip = $_POST['v_backup_gzip'];
  601. }
  602. $v_backup_adv = 'yes';
  603. }
  604. }
  605. // Change backup mode
  606. if (empty($_SESSION['error_msg'])) {
  607. if ($_POST['v_backup_mode'] != $v_backup_mode) {
  608. exec(HESTIA_CMD."v-change-sys-config-value BACKUP_MODE ".escapeshellarg($_POST['v_backup_mode']), $output, $return_var);
  609. check_return_code($return_var, $output);
  610. unset($output);
  611. if (empty($_SESSION['error_msg'])) {
  612. $v_backup_mode = $_POST['v_backup_mode'];
  613. }
  614. $v_backup_adv = 'yes';
  615. if ($_POST['v_backup_mode'] == 'gzip') {
  616. $_POST['v_backup_gzip'] = 9;
  617. if (empty($_SESSION['error_msg'])) {
  618. $v_backup_gzip = $_POST['v_backup_gzip'];
  619. }
  620. exec(HESTIA_CMD."v-change-sys-config-value BACKUP_GZIP ".escapeshellarg($_POST['v_backup_gzip']), $output, $return_var);
  621. }
  622. }
  623. }
  624. // Change backup path
  625. if (empty($_SESSION['error_msg'])) {
  626. if ($_POST['v_backup_dir'] != $v_backup_dir) {
  627. /*
  628. See #1655
  629. exec (HESTIA_CMD."v-change-sys-config-value BACKUP ".escapeshellarg($_POST['v_backup_dir']), $output, $return_var);
  630. check_return_code($return_var,$output);
  631. unset($output);
  632. */
  633. if (empty($_SESSION['error_msg'])) {
  634. $v_backup_dir = $_POST['v_backup_dir'];
  635. }
  636. #$v_backup_adv = 'yes';
  637. }
  638. }
  639. // Add remote backup host
  640. if (empty($_SESSION['error_msg'])) {
  641. if ((empty($v_backup_host) && empty($v_backup_bucket) && ((!empty($_POST['v_backup_host'])) || !empty($_POST['v_backup_bucket'])))) {
  642. if (in_array($_POST['v_backup_type'], array('ftp','sftp'))) {
  643. $v_backup_host = escapeshellarg($_POST['v_backup_host']);
  644. $v_backup_port = escapeshellarg($_POST['v_backup_port']);
  645. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  646. $v_backup_username = escapeshellarg($_POST['v_backup_username']);
  647. $v_backup_password = escapeshellcmd($_POST['v_backup_password']);
  648. $v_backup_bpath = escapeshellarg($_POST['v_backup_bpath']);
  649. exec(HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_host ." ". $v_backup_username ." ". $v_backup_password ." ". $v_backup_bpath." ".$v_backup_port, $output, $return_var);
  650. check_return_code($return_var, $output);
  651. unset($output);
  652. if (empty($_SESSION['error_msg'])) {
  653. $v_backup_host = $_POST['v_backup_host'];
  654. }
  655. if (empty($_SESSION['error_msg'])) {
  656. $v_backup_type = $_POST['v_backup_type'];
  657. }
  658. if (empty($_SESSION['error_msg'])) {
  659. $v_backup_username = $_POST['v_backup_username'];
  660. }
  661. if (empty($_SESSION['error_msg'])) {
  662. $v_backup_password = $_POST['v_backup_password'];
  663. }
  664. if (empty($_SESSION['error_msg'])) {
  665. $v_backup_bpath = $_POST['v_backup_bpath'];
  666. }
  667. if (empty($_SESSION['error_msg'])) {
  668. $v_backup_port = $_POST['v_backup_port'];
  669. }
  670. $v_backup_new = 'yes';
  671. $v_backup_adv = 'yes';
  672. $v_backup_remote_adv = 'yes';
  673. } elseif (in_array($_POST['v_backup_type'], array('b2'))) {
  674. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  675. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  676. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  677. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  678. exec(HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_bucket ." ". $v_backup_application_id ." ". $v_backup_application_key, $output, $return_var);
  679. check_return_code($return_var, $output);
  680. unset($output);
  681. if (empty($_SESSION['error_msg'])) {
  682. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  683. }
  684. if (empty($_SESSION['error_msg'])) {
  685. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  686. }
  687. if (empty($_SESSION['error_msg'])) {
  688. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  689. }
  690. $v_backup_new = 'yes';
  691. $v_backup_adv = 'yes';
  692. $v_backup_remote_adv = 'yes';
  693. }
  694. }
  695. }
  696. // Change remote backup host type
  697. if (empty($_SESSION['error_msg'])) {
  698. if ((!empty($_POST['v_backup_host'])) && ($_POST['v_backup_type'] != $v_backup_type)) {
  699. exec(HESTIA_CMD."v-delete-backup-host " . escapeshellarg($v_backup_type), $output, $return_var);
  700. unset($output);
  701. if (in_array($_POST['v_backup_type'], array('ftp','sftp'))) {
  702. $v_backup_host = escapeshellarg($_POST['v_backup_host']);
  703. $v_backup_port = escapeshellarg($_POST['v_backup_port']);
  704. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  705. $v_backup_username = escapeshellarg($_POST['v_backup_username']);
  706. $v_backup_password = escapeshellcmd($_POST['v_backup_password']);
  707. $v_backup_bpath = escapeshellarg($_POST['v_backup_bpath']);
  708. exec(HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_host ." ". $v_backup_username ." ". $v_backup_password ." ". $v_backup_bpath." ".$v_backup_port, $output, $return_var);
  709. check_return_code($return_var, $output);
  710. unset($output);
  711. if (empty($_SESSION['error_msg'])) {
  712. $v_backup_host = $_POST['v_backup_host'];
  713. }
  714. if (empty($_SESSION['error_msg'])) {
  715. $v_backup_type = $_POST['v_backup_type'];
  716. }
  717. if (empty($_SESSION['error_msg'])) {
  718. $v_backup_username = $_POST['v_backup_username'];
  719. }
  720. if (empty($_SESSION['error_msg'])) {
  721. $v_backup_password = $_POST['v_backup_password'];
  722. }
  723. if (empty($_SESSION['error_msg'])) {
  724. $v_backup_bpath = $_POST['v_backup_bpath'];
  725. }
  726. if (empty($_SESSION['error_msg'])) {
  727. $v_backup_port = $_POST['v_backup_port'];
  728. }
  729. $v_backup_adv = 'yes';
  730. $v_backup_remote_adv = 'yes';
  731. } elseif (in_array($_POST['v_backup_type'], array('b2'))) {
  732. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  733. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  734. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  735. exec(HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_bucket ." ". $v_backup_application_id ." ". $v_backup_application_key, $output, $return_var);
  736. check_return_code($return_var, $output);
  737. unset($output);
  738. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  739. if (empty($_SESSION['error_msg'])) {
  740. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  741. }
  742. if (empty($_SESSION['error_msg'])) {
  743. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  744. }
  745. if (empty($_SESSION['error_msg'])) {
  746. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  747. }
  748. $v_backup_adv = 'yes';
  749. $v_backup_remote_adv = 'yes';
  750. }
  751. }
  752. }
  753. // Change remote backup host
  754. if (empty($_SESSION['error_msg'])) {
  755. if ((!empty($_POST['v_backup_host'])) && ($_POST['v_backup_type'] == $v_backup_type) && (!isset($v_backup_new))) {
  756. if (in_array($_POST['v_backup_type'], array('ftp','sftp'))) {
  757. if (($_POST['v_backup_host'] != $v_backup_host) || ($_POST['v_backup_username'] != $v_backup_username) || ($_POST['v_backup_password'] != $v_backup_password) || ($_POST['v_backup_bpath'] != $v_backup_bpath || $_POST['v_backup_port'] != $v_backup_port)) {
  758. $v_backup_host = escapeshellarg($_POST['v_backup_host']);
  759. $v_backup_port = escapeshellarg($_POST['v_backup_port']);
  760. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  761. $v_backup_username = escapeshellarg($_POST['v_backup_username']);
  762. $v_backup_password = escapeshellcmd($_POST['v_backup_password']);
  763. $v_backup_bpath = escapeshellarg($_POST['v_backup_bpath']);
  764. exec(HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_host ." ". $v_backup_username ." ". $v_backup_password ." ". $v_backup_bpath." ".$v_backup_port, $output, $return_var);
  765. check_return_code($return_var, $output);
  766. unset($output);
  767. if (empty($_SESSION['error_msg'])) {
  768. $v_backup_host = $_POST['v_backup_host'];
  769. }
  770. if (empty($_SESSION['error_msg'])) {
  771. $v_backup_type = $_POST['v_backup_type'];
  772. }
  773. if (empty($_SESSION['error_msg'])) {
  774. $v_backup_username = $_POST['v_backup_username'];
  775. }
  776. if (empty($_SESSION['error_msg'])) {
  777. $v_backup_password = $_POST['v_backup_password'];
  778. }
  779. if (empty($_SESSION['error_msg'])) {
  780. $v_backup_bpath = $_POST['v_backup_bpath'];
  781. }
  782. if (empty($_SESSION['error_msg'])) {
  783. $v_backup_port = $_POST['v_backup_port'];
  784. }
  785. $v_backup_adv = 'yes';
  786. $v_backup_remote_adv = 'yes';
  787. }
  788. } elseif (in_array($_POST['v_backup_type'], array('b2'))) {
  789. if (($_POST['v_backup_bucket'] != $v_backup_bucket) || ($_POST['v_backup_application_key'] != $v_backup_application_key) || ($_POST['v_backup_application_id'] != $v_backup_application_id)) {
  790. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  791. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  792. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  793. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  794. exec(HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_bucket ." ". $v_backup_application_id ." ". $v_backup_application_key, $output, $return_var);
  795. check_return_code($return_var, $output);
  796. unset($output);
  797. if (empty($_SESSION['error_msg'])) {
  798. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  799. }
  800. if (empty($_SESSION['error_msg'])) {
  801. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  802. }
  803. if (empty($_SESSION['error_msg'])) {
  804. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  805. }
  806. $v_backup_adv = 'yes';
  807. $v_backup_remote_adv = 'yes';
  808. }
  809. }
  810. }
  811. }
  812. // Delete remote backup host
  813. if (empty($_SESSION['error_msg'])) {
  814. if (empty($_POST['v_backup_remote_adv']) && isset($v_backup_remote_adv)) {
  815. exec(HESTIA_CMD."v-delete-backup-host ".escapeshellarg($v_backup_type), $output, $return_var);
  816. check_return_code($return_var, $output);
  817. unset($output);
  818. if (empty($_SESSION['error_msg'])) {
  819. $v_backup_host = '';
  820. }
  821. if (empty($_SESSION['error_msg'])) {
  822. $v_backup_type = '';
  823. }
  824. if (empty($_SESSION['error_msg'])) {
  825. $v_backup_username = '';
  826. }
  827. if (empty($_SESSION['error_msg'])) {
  828. $v_backup_password = '';
  829. }
  830. if (empty($_SESSION['error_msg'])) {
  831. $v_backup_bpath = '';
  832. }
  833. if (empty($_SESSION['error_msg'])) {
  834. $v_backup_bucket = '';
  835. }
  836. if (empty($_SESSION['error_msg'])) {
  837. $v_backup_application_id = '';
  838. }
  839. if (empty($_SESSION['error_msg'])) {
  840. $v_backup_application_key = '';
  841. }
  842. $v_backup_adv = '';
  843. $v_backup_remote_adv = '';
  844. }
  845. }
  846. // Change INACTIVE_SESSION_TIMEOUT
  847. if (empty($_SESSION['error_msg'])) {
  848. if ($_POST['v_inactive_session_timeout'] != $_SESSION['INACTIVE_SESSION_TIMEOUT']) {
  849. if ($_POST['v_inactive_session_timeout'] < 1) {
  850. $_SESSION['error_msg'] = _('Inactive session timeout can not lower than 1 minute');
  851. } else {
  852. exec(HESTIA_CMD."v-change-sys-config-value INACTIVE_SESSION_TIMEOUT ".escapeshellarg($_POST['v_inactive_session_timeout']), $output, $return_var);
  853. check_return_code($return_var, $output);
  854. unset($output);
  855. if (empty($_SESSION['error_msg'])) {
  856. $v_inactive_session_timeout = $_POST['v_inactive_session_timeout'];
  857. }
  858. }
  859. $v_security_adv = 'yes';
  860. }
  861. }
  862. // Change POLICY_CSRF_STRICTNESS
  863. if (empty($_SESSION['error_msg'])) {
  864. if ($_POST['v_policy_csrf_strictness'] != $_SESSION['POLICY_CSRF_STRICTNESS']) {
  865. exec(HESTIA_CMD."v-change-sys-config-value POLICY_CSRF_STRICTNESS ".escapeshellarg($_POST['v_policy_csrf_strictness']), $output, $return_var);
  866. check_return_code($return_var, $output);
  867. unset($output);
  868. if (empty($_SESSION['error_msg'])) {
  869. $v_policy_csrf_strictness = $_POST['v_inactive_session_timeout'];
  870. }
  871. $v_security_adv = 'yes';
  872. }
  873. }
  874. // Change ENFORCE_SUBDOMAIN_OWNERSHIP
  875. if (empty($_SESSION['error_msg'])) {
  876. if ($_POST['v_enforce_subdomain_ownership'] != $_SESSION['ENFORCE_SUBDOMAIN_OWNERSHIP']) {
  877. exec(HESTIA_CMD."v-change-sys-config-value ENFORCE_SUBDOMAIN_OWNERSHIP ".escapeshellarg($_POST['v_enforce_subdomain_ownership']), $output, $return_var);
  878. check_return_code($return_var, $output);
  879. unset($output);
  880. if (empty($_SESSION['error_msg'])) {
  881. $v_enforce_subdomain_ownership = $_POST['v_enforce_subdomain_ownership'];
  882. }
  883. $v_security_adv = 'yes';
  884. }
  885. }
  886. // Change POLICY_USER_EDIT_DETAILS
  887. if (empty($_SESSION['error_msg'])) {
  888. if ($_POST['v_policy_user_edit_details'] != $_SESSION['POLICY_USER_EDIT_DETAILS']) {
  889. exec(HESTIA_CMD."v-change-sys-config-value POLICY_USER_EDIT_DETAILS ".escapeshellarg($_POST['v_policy_user_edit_details']), $output, $return_var);
  890. check_return_code($return_var, $output);
  891. unset($output);
  892. if (empty($_SESSION['error_msg'])) {
  893. $v_policy_user_edit_details = $_POST['v_policy_user_edit_details'];
  894. }
  895. $v_security_adv = 'yes';
  896. }
  897. }
  898. // Change POLICY_USER_EDIT_WEB_TEMPLATES
  899. if (empty($_SESSION['error_msg'])) {
  900. if ($_POST['v_policy_user_edit_web_templates'] != $_SESSION['POLICY_USER_EDIT_WEB_TEMPLATES']) {
  901. exec(HESTIA_CMD."v-change-sys-config-value POLICY_USER_EDIT_WEB_TEMPLATES ".escapeshellarg($_POST['v_policy_user_edit_web_templates']), $output, $return_var);
  902. check_return_code($return_var, $output);
  903. unset($output);
  904. if (empty($_SESSION['error_msg'])) {
  905. $v_policy_user_edit_details = $_POST['v_policy_user_edit_web_templates'];
  906. }
  907. $v_security_adv = 'yes';
  908. }
  909. }
  910. // Change POLICY_USER_EDIT_DNS_TEMPLATES
  911. if (empty($_SESSION['error_msg'])) {
  912. if ($_POST['v_policy_user_edit_dns_templates'] != $_SESSION['POLICY_USER_EDIT_DNS_TEMPLATES']) {
  913. exec(HESTIA_CMD."v-change-sys-config-value POLICY_USER_EDIT_DNS_TEMPLATES ".escapeshellarg($_POST['v_policy_user_edit_dns_templates']), $output, $return_var);
  914. check_return_code($return_var, $output);
  915. unset($output);
  916. if (empty($_SESSION['error_msg'])) {
  917. $v_policy_user_edit_details = $_POST['v_policy_user_edit_dns_templates'];
  918. }
  919. $v_security_adv = 'yes';
  920. }
  921. }
  922. // Change POLICY_USER_VIEW_LOGS
  923. if (empty($_SESSION['error_msg'])) {
  924. if ($_POST['v_policy_user_view_logs'] != $_SESSION['POLICY_USER_VIEW_LOGS']) {
  925. exec(HESTIA_CMD."v-change-sys-config-value POLICY_USER_VIEW_LOGS ".escapeshellarg($_POST['v_policy_user_view_logs']), $output, $return_var);
  926. check_return_code($return_var, $output);
  927. unset($output);
  928. if (empty($_SESSION['error_msg'])) {
  929. $v_policy_user_view_logs = $_POST['v_policy_user_view_logs'];
  930. }
  931. $v_security_adv = 'yes';
  932. }
  933. }
  934. // Change POLICY_USER_DELETE_LOGS
  935. if (empty($_SESSION['error_msg'])) {
  936. if ($_POST['v_policy_user_delete_logs'] != $_SESSION['POLICY_USER_DELETE_LOGS']) {
  937. exec(HESTIA_CMD."v-change-sys-config-value POLICY_USER_DELETE_LOGS ".escapeshellarg($_POST['v_policy_user_delete_logs']), $output, $return_var);
  938. check_return_code($return_var, $output);
  939. unset($output);
  940. if (empty($_SESSION['error_msg'])) {
  941. $v_policy_user_delete_logs = $_POST['v_policy_user_delete_logs'];
  942. }
  943. $v_security_adv = 'yes';
  944. }
  945. }
  946. // Change POLICY_SYSTEM_PASSWORD_RESET
  947. if (empty($_SESSION['error_msg'])) {
  948. if ($_POST['v_policy_system_password_reset'] != $_SESSION['POLICY_SYSTEM_PASSWORD_RESET']) {
  949. exec(HESTIA_CMD."v-change-sys-config-value POLICY_SYSTEM_PASSWORD_RESET ".escapeshellarg($_POST['v_policy_system_password_reset']), $output, $return_var);
  950. check_return_code($return_var, $output);
  951. unset($output);
  952. if (empty($_SESSION['error_msg'])) {
  953. $v_policy_system_password_reset = $_POST['v_policy_system_password_reset'];
  954. }
  955. $v_security_adv = 'yes';
  956. }
  957. }
  958. // Change POLICY_SYSTEM_PROTECTED_ADMIN
  959. if (empty($_SESSION['error_msg'])) {
  960. if ($_POST['v_policy_system_protected_admin'] != $_SESSION['POLICY_SYSTEM_PROTECTED_ADMIN']) {
  961. exec(HESTIA_CMD."v-change-sys-config-value POLICY_SYSTEM_PROTECTED_ADMIN ".escapeshellarg($_POST['v_policy_system_protected_admin']), $output, $return_var);
  962. check_return_code($return_var, $output);
  963. unset($output);
  964. if (empty($_SESSION['error_msg'])) {
  965. $v_policy_system_protected_admin = $_POST['v_policy_system_protected_admin'];
  966. }
  967. $v_security_adv = 'yes';
  968. }
  969. }
  970. // Change POLICY_USER_VIEW_SUSPENDED
  971. if (empty($_SESSION['error_msg'])) {
  972. if ($_POST['v_policy_user_view_suspended'] != $_SESSION['POLICY_USER_VIEW_SUSPENDED'] && !empty($_SESSION['POLICY_USER_VIEW_SUSPENDED'])) {
  973. exec(HESTIA_CMD."v-change-sys-config-value POLICY_USER_VIEW_SUSPENDED ".escapeshellarg($_POST['v_policy_user_view_suspended']), $output, $return_var);
  974. check_return_code($return_var, $output);
  975. unset($output);
  976. if (empty($_SESSION['error_msg'])) {
  977. $v_policy_system_hide_admin = $_POST['v_policy_user_view_suspended'];
  978. }
  979. $v_security_adv = 'yes';
  980. }
  981. }
  982. // Change POLICY_USER_CHANGE_THEME
  983. if (empty($_SESSION['error_msg'])) {
  984. if ($_POST['v_policy_user_change_theme'] == 'on') {
  985. $_POST['v_policy_user_change_theme'] = 'no';
  986. } else {
  987. $_POST['v_policy_user_change_theme'] = 'yes';
  988. }
  989. {
  990. if ($_POST['v_policy_user_change_theme'] != $_SESSION['POLICY_USER_CHANGE_THEME']) {
  991. exec(HESTIA_CMD."v-change-sys-config-value POLICY_USER_CHANGE_THEME ".escapeshellarg($_POST['v_policy_user_change_theme']), $output, $return_var);
  992. check_return_code($return_var, $output);
  993. unset($output);
  994. if ($_POST['v_policy_user_change_theme']) {
  995. unset($_SESSION['userTheme']);
  996. $require_refresh = true;
  997. }
  998. if (empty($_SESSION['error_msg'])) {
  999. $v_policy_user_change_theme = $_POST['v_policy_user_change_theme'];
  1000. }
  1001. }
  1002. }
  1003. }
  1004. // Change POLICY_SYSTEM_HIDE_ADMIN
  1005. if (empty($_SESSION['error_msg'])) {
  1006. if ($_POST['v_policy_system_hide_admin'] != $_SESSION['POLICY_SYSTEM_HIDE_ADMIN']) {
  1007. exec(HESTIA_CMD."v-change-sys-config-value POLICY_SYSTEM_HIDE_ADMIN ".escapeshellarg($_POST['v_policy_system_hide_admin']), $output, $return_var);
  1008. check_return_code($return_var, $output);
  1009. unset($output);
  1010. if (empty($_SESSION['error_msg'])) {
  1011. $v_policy_system_hide_admin = $_POST['v_policy_system_hide_admin'];
  1012. }
  1013. $v_security_adv = 'yes';
  1014. }
  1015. }
  1016. // Change POLICY_SYSTEM_HIDE_SERVICES
  1017. if (empty($_SESSION['error_msg'])) {
  1018. if ($_POST['v_policy_system_hide_services'] != $_SESSION['POLICY_SYSTEM_HIDE_SERVICES']) {
  1019. exec(HESTIA_CMD."v-change-sys-config-value POLICY_SYSTEM_HIDE_SERVICES ".escapeshellarg($_POST['v_policy_system_hide_services']), $output, $return_var);
  1020. check_return_code($return_var, $output);
  1021. unset($output);
  1022. if (empty($_SESSION['error_msg'])) {
  1023. $v_policy_system_hide_services = $_POST['v_policy_system_hide_services'];
  1024. }
  1025. $v_security_adv = 'yes';
  1026. }
  1027. }
  1028. // Change login style
  1029. if (empty($_SESSION['error_msg'])) {
  1030. if ($_POST['v_login_style'] != $_SESSION['LOGIN_STYLE']) {
  1031. exec(HESTIA_CMD."v-change-sys-config-value LOGIN_STYLE ".escapeshellarg($_POST['v_login_style']), $output, $return_var);
  1032. check_return_code($return_var, $output);
  1033. unset($output);
  1034. if (empty($_SESSION['error_msg'])) {
  1035. $v_login_style = $_POST['v_login_style'];
  1036. }
  1037. $v_security_adv = 'yes';
  1038. }
  1039. }
  1040. if (empty($_SESSION['error_msg'])) {
  1041. if ($_POST['v_api_allowed_ip'] != $_SESSION['API_ALLOWED_IP']) {
  1042. $ips = array();
  1043. foreach (explode("\n", $_POST['v_api_allowed_ip']) as $ip) {
  1044. if ($ip != "allow-all") {
  1045. if (filter_var(trim($ip), FILTER_VALIDATE_IP)) {
  1046. $ips[] = trim($ip);
  1047. }
  1048. } else {
  1049. $ips[] = trim($ip);
  1050. }
  1051. }
  1052. if (implode(',', $ips) != $_SESSION['API_ALLOWED_IP']) {
  1053. exec(HESTIA_CMD."v-change-sys-config-value API_ALLOWED_IP ".escapeshellarg(implode(',', $ips)), $output, $return_var);
  1054. check_return_code($return_var, $output);
  1055. unset($output);
  1056. if (empty($_SESSION['error_msg'])) {
  1057. $v_login_style = $_POST['v_api_allowed_ip'];
  1058. }
  1059. $v_security_adv = 'yes';
  1060. }
  1061. }
  1062. }
  1063. if (empty($_SESSION['error_msg'])) {
  1064. if ($_POST['v_api'] != $_SESSION['API']) {
  1065. $api_status = 'disable';
  1066. if ($_POST['v_api'] == 'yes') {
  1067. $api_status = 'enable';
  1068. }
  1069. exec(HESTIA_CMD."v-change-sys-api ".escapeshellarg($api_status), $output, $return_var);
  1070. check_return_code($return_var, $output);
  1071. unset($output);
  1072. if (empty($_SESSION['error_msg'])) {
  1073. $v_login_style = $_POST['v_api'];
  1074. }
  1075. $v_security_adv = 'yes';
  1076. }
  1077. }
  1078. // Update SSL certificate
  1079. if ((!empty($_POST['v_ssl_crt'])) && (empty($_SESSION['error_msg']))) {
  1080. if (($v_ssl_crt != str_replace("\r\n", "\n", $_POST['v_ssl_crt'])) || ($v_ssl_key != str_replace("\r\n", "\n", $_POST['v_ssl_key']))) {
  1081. exec('mktemp -d', $mktemp_output, $return_var);
  1082. $tmpdir = $mktemp_output[0];
  1083. // Certificate
  1084. if (!empty($_POST['v_ssl_crt'])) {
  1085. $fp = fopen($tmpdir."/certificate.crt", 'w');
  1086. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_crt']));
  1087. fwrite($fp, "\n");
  1088. fclose($fp);
  1089. }
  1090. // Key
  1091. if (!empty($_POST['v_ssl_key'])) {
  1092. $fp = fopen($tmpdir."/certificate.key", 'w');
  1093. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_key']));
  1094. fwrite($fp, "\n");
  1095. fclose($fp);
  1096. }
  1097. exec(HESTIA_CMD."v-change-sys-hestia-ssl ".$tmpdir, $output, $return_var);
  1098. check_return_code($return_var, $output);
  1099. unset($output);
  1100. // List ssl certificate info
  1101. exec(HESTIA_CMD."v-list-sys-hestia-ssl json", $output, $return_var);
  1102. $ssl_str = json_decode(implode('', $output), true);
  1103. unset($output);
  1104. $v_ssl_crt = $ssl_str['HESTIA']['CRT'];
  1105. $v_ssl_key = $ssl_str['HESTIA']['KEY'];
  1106. $v_ssl_ca = $ssl_str['HESTIA']['CA'];
  1107. $v_ssl_subject = $ssl_str['HESTIA']['SUBJECT'];
  1108. $v_ssl_aliases = $ssl_str['HESTIA']['ALIASES'];
  1109. $v_ssl_not_before = $ssl_str['HESTIA']['NOT_BEFORE'];
  1110. $v_ssl_not_after = $ssl_str['HESTIA']['NOT_AFTER'];
  1111. $v_ssl_signature = $ssl_str['HESTIA']['SIGNATURE'];
  1112. $v_ssl_pub_key = $ssl_str['HESTIA']['PUB_KEY'];
  1113. $v_ssl_issuer = $ssl_str['HESTIA']['ISSUER'];
  1114. // Cleanup certificate tempfiles
  1115. if (file_exists($tmpdir . '/certificate.crt')) {
  1116. unlink($tmpdir . '/certificate.crt');
  1117. }
  1118. if (file_exists($tmpdir . '/certificate.key')) {
  1119. unlink($tmpdir . '/certificate.key');
  1120. }
  1121. rmdir($tmpdir);
  1122. }
  1123. }
  1124. // Flush field values on success
  1125. if (empty($_SESSION['error_msg'])) {
  1126. $_SESSION['ok_msg'] = _('Changes has been saved.');
  1127. }
  1128. if ($require_refresh == true) {
  1129. $refresh = $_SERVER['REQUEST_URI'];
  1130. $_SESSION['ok_msg'] = _('Changes has been saved.');
  1131. header("Location: $refresh");
  1132. die();
  1133. }
  1134. }
  1135. // Check system configuration
  1136. exec(HESTIA_CMD . "v-list-sys-config json", $output, $return_var);
  1137. $data = json_decode(implode('', $output), true);
  1138. unset($output);
  1139. $sys_arr = $data['config'];
  1140. foreach ($sys_arr as $key => $value) {
  1141. $_SESSION[$key] = $value;
  1142. }
  1143. // Render page
  1144. render_page($user, $TAB, 'edit_server');
  1145. // Flush session messages
  1146. unset($_SESSION['error_msg']);
  1147. unset($_SESSION['ok_msg']);