main.sh 31 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012
  1. #!/usr/bin/env bash
  2. # Internal variables
  3. HOMEDIR='/home'
  4. BACKUP='/backup'
  5. BACKUP_GZIP=9
  6. BACKUP_DISK_LIMIT=95
  7. BACKUP_LA_LIMIT=`cat /proc/cpuinfo | grep processor | wc -l`
  8. RRD_STEP=300
  9. BIN=$HESTIA/bin
  10. HESTIA_INSTALL_DIR=$HESTIA/install/deb
  11. HESTIA_BACKUP="/root/hst_backups/$(date +%d%m%Y%H%M)"
  12. USER_DATA=$HESTIA/data/users/$user
  13. WEBTPL=$HESTIA/data/templates/web
  14. MAILTPL=$HESTIA/data/templates/mail
  15. DNSTPL=$HESTIA/data/templates/dns
  16. RRD=$HESTIA/web/rrd
  17. SENDMAIL="$HESTIA/web/inc/mail-wrapper.php"
  18. HESTIA_GIT_REPO="https://raw.githubusercontent.com/hestiacp/hestiacp"
  19. HESTIA_THEMES="$HESTIA_INSTALL_DIR/themes"
  20. HESTIA_THEMES_CUSTOM="$HESTIA/data/templates/themes"
  21. SCRIPT="$(basename $0)"
  22. # Return codes
  23. OK=0
  24. E_ARGS=1
  25. E_INVALID=2
  26. E_NOTEXIST=3
  27. E_EXISTS=4
  28. E_SUSPENDED=5
  29. E_UNSUSPENDED=6
  30. E_INUSE=7
  31. E_LIMIT=8
  32. E_PASSWORD=9
  33. E_FORBIDEN=10
  34. E_DISABLED=11
  35. E_PARSING=12
  36. E_DISK=13
  37. E_LA=14
  38. E_CONNECT=15
  39. E_FTP=16
  40. E_DB=17
  41. E_RRD=18
  42. E_UPDATE=19
  43. E_RESTART=20
  44. # Generate time stamp
  45. new_timestamp() {
  46. time_n_date=$(date +'%T %F')
  47. time=$(echo "$time_n_date" |cut -f 1 -d \ )
  48. date=$(echo "$time_n_date" |cut -f 2 -d \ )
  49. }
  50. # Event string for logger
  51. for ((I=1; I <= $# ; I++)); do
  52. if [[ "$HIDE" != $I ]]; then
  53. ARGUMENTS="$ARGUMENTS '$(eval echo \$${I})'"
  54. else
  55. ARGUMENTS="$ARGUMENTS '******'"
  56. fi
  57. done
  58. # Log event function
  59. log_event() {
  60. if [ -z "$time" ]; then
  61. LOG_TIME="$(date +'%F %T') $(basename $0)"
  62. else
  63. LOG_TIME="$date $time $(basename $0)"
  64. fi
  65. if [ "$1" -eq 0 ]; then
  66. echo "$LOG_TIME $2" >> $HESTIA/log/system.log
  67. else
  68. echo "$LOG_TIME $2 [Error $1]" >> $HESTIA/log/error.log
  69. fi
  70. }
  71. # Log user history
  72. log_history() {
  73. cmd=$1
  74. undo=${2-no}
  75. log_user=${3-$user}
  76. log=$HESTIA/data/users/$log_user/history.log
  77. touch $log
  78. if [ '99' -lt "$(wc -l $log |cut -f 1 -d ' ')" ]; then
  79. tail -n 49 $log > $log.moved
  80. mv -f $log.moved $log
  81. chmod 660 $log
  82. fi
  83. if [ -z "$date" ]; then
  84. time_n_date=$(date +'%T %F')
  85. time=$(echo "$time_n_date" |cut -f 1 -d \ )
  86. date=$(echo "$time_n_date" |cut -f 2 -d \ )
  87. fi
  88. curr_str=$(grep "ID=" $log | cut -f 2 -d \' | sort -n | tail -n1)
  89. id="$((curr_str +1))"
  90. echo "ID='$id' DATE='$date' TIME='$time' CMD='$cmd' UNDO='$undo'" >> $log
  91. }
  92. # Result checker
  93. check_result() {
  94. if [ $1 -ne 0 ]; then
  95. echo "Error: $2"
  96. if [ ! -z "$3" ]; then
  97. log_event "$3" "$ARGUMENTS"
  98. exit $3
  99. else
  100. log_event "$1" "$ARGUMENTS"
  101. exit $1
  102. fi
  103. fi
  104. }
  105. # Argument list checker
  106. check_args() {
  107. if [ "$1" -gt "$2" ]; then
  108. echo "Usage: $(basename $0) $3"
  109. check_result $E_ARGS "not enought arguments" >/dev/null
  110. fi
  111. }
  112. # Subsystem checker
  113. is_system_enabled() {
  114. if [ -z "$1" ] || [ "$1" = no ]; then
  115. check_result $E_DISABLED "$2 is not enabled"
  116. fi
  117. }
  118. # User package check
  119. is_package_full() {
  120. case "$1" in
  121. WEB_DOMAINS) used=$(wc -l $USER_DATA/web.conf);;
  122. WEB_ALIASES) used=$(echo $aliases |tr ',' '\n' |wc -l);;
  123. DNS_DOMAINS) used=$(wc -l $USER_DATA/dns.conf);;
  124. DNS_RECORDS) used=$(wc -l $USER_DATA/dns/$domain.conf);;
  125. MAIL_DOMAINS) used=$(wc -l $USER_DATA/mail.conf);;
  126. MAIL_ACCOUNTS) used=$(wc -l $USER_DATA/mail/$domain.conf);;
  127. DATABASES) used=$(wc -l $USER_DATA/db.conf);;
  128. CRON_JOBS) used=$(wc -l $USER_DATA/cron.conf);;
  129. esac
  130. used=$(echo "$used"| cut -f 1 -d \ )
  131. limit=$(grep "^$1=" $USER_DATA/user.conf |cut -f 2 -d \')
  132. if [ "$limit" != 'unlimited' ] && [[ "$used" -ge "$limit" ]]; then
  133. check_result $E_LIMIT "$1 limit is reached :: upgrade user package"
  134. fi
  135. }
  136. # User owner for reseller plugin
  137. get_user_owner() {
  138. if [ -z "$RESELLER_KEY" ]; then
  139. owner='admin'
  140. else
  141. owner=$(grep "^OWNER" $USER_DATA/user.conf| cut -f 2 -d \')
  142. if [ -z "$owner" ]; then
  143. owner='admin'
  144. fi
  145. fi
  146. }
  147. # Random password generator
  148. generate_password() {
  149. matrix=$1
  150. lenght=$2
  151. if [ -z "$matrix" ]; then
  152. matrix=0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz
  153. fi
  154. if [ -z "$lenght" ]; then
  155. lenght=10
  156. fi
  157. i=1
  158. while [ $i -le $lenght ]; do
  159. pass="$pass${matrix:$(($RANDOM%${#matrix})):1}"
  160. ((i++))
  161. done
  162. echo "$pass"
  163. }
  164. # Package existence check
  165. is_package_valid() {
  166. if [ -z "$1" ]; then
  167. pkg_dir="$HESTIA/data/packages"
  168. fi
  169. if [ ! -e "$pkg_dir/$package.pkg" ]; then
  170. check_result $E_NOTEXIST "package $package doesn't exist"
  171. fi
  172. }
  173. # Validate system type
  174. is_type_valid() {
  175. if [ -z "$(echo $1 | grep -w $2)" ]; then
  176. check_result $E_INVALID "$2 type is invalid"
  177. fi
  178. }
  179. # Check user backup settings
  180. is_backup_enabled() {
  181. BACKUPS=$(grep "^BACKUPS=" $USER_DATA/user.conf | cut -f2 -d \')
  182. if [ -z "$BACKUPS" ] || [[ "$BACKUPS" -le '0' ]]; then
  183. check_result $E_DISABLED "user backup is disabled"
  184. fi
  185. }
  186. # Check user backup settings
  187. is_backup_scheduled() {
  188. if [ -e "$HESTIA/data/queue/backup.pipe" ]; then
  189. check_q=$(grep " $user " $HESTIA/data/queue/backup.pipe | grep $1)
  190. if [ ! -z "$check_q" ]; then
  191. check_result $E_EXISTS "$1 is already scheduled"
  192. fi
  193. fi
  194. }
  195. # Check if object is new
  196. is_object_new() {
  197. if [ $2 = 'USER' ]; then
  198. if [ -d "$USER_DATA" ]; then
  199. object="OK"
  200. fi
  201. else
  202. object=$(grep "$2='$3'" $USER_DATA/$1.conf)
  203. fi
  204. if [ ! -z "$object" ]; then
  205. check_result $E_EXISTS "$2=$3 is already exists"
  206. fi
  207. }
  208. # Check if object is valid
  209. is_object_valid() {
  210. if [ $2 = 'USER' ]; then
  211. if [ ! -d "$HESTIA/data/users/$3" ]; then
  212. check_result $E_NOTEXIST "$1 $3 doesn't exist"
  213. fi
  214. else
  215. object=$(grep "$2='$3'" $HESTIA/data/users/$user/$1.conf)
  216. if [ -z "$object" ]; then
  217. arg1=$(basename $1)
  218. arg2=$(echo $2 |tr '[:upper:]' '[:lower:]')
  219. check_result $E_NOTEXIST "$arg1 $arg2 $3 doesn't exist"
  220. fi
  221. fi
  222. }
  223. # Check if object is supended
  224. is_object_suspended() {
  225. if [ $2 = 'USER' ]; then
  226. spnd=$(cat $USER_DATA/$1.conf|grep "SUSPENDED='yes'")
  227. else
  228. spnd=$(grep "$2='$3'" $USER_DATA/$1.conf|grep "SUSPENDED='yes'")
  229. fi
  230. if [ -z "$spnd" ]; then
  231. check_result $E_UNSUSPENDED "$(basename $1) $3 is not suspended"
  232. fi
  233. }
  234. # Check if object is unsupended
  235. is_object_unsuspended() {
  236. if [ $2 = 'USER' ]; then
  237. spnd=$(cat $USER_DATA/$1.conf |grep "SUSPENDED='yes'")
  238. else
  239. spnd=$(grep "$2='$3'" $USER_DATA/$1.conf |grep "SUSPENDED='yes'")
  240. fi
  241. if [ ! -z "$spnd" ]; then
  242. check_result $E_SUSPENDED "$(basename $1) $3 is suspended"
  243. fi
  244. }
  245. # Check if object value is empty
  246. is_object_value_empty() {
  247. str=$(grep "$2='$3'" $USER_DATA/$1.conf)
  248. eval $str
  249. eval value=$4
  250. if [ ! -z "$value" ] && [ "$value" != 'no' ]; then
  251. check_result $E_EXISTS "${4//$}=$value is already exists"
  252. fi
  253. }
  254. # Check if object value is empty
  255. is_object_value_exist() {
  256. str=$(grep "$2='$3'" $USER_DATA/$1.conf)
  257. eval $str
  258. eval value=$4
  259. if [ -z "$value" ] || [ "$value" = 'no' ]; then
  260. check_result $E_NOTEXIST "${4//$}=$value doesn't exist"
  261. fi
  262. }
  263. # Check if password is transmitted via file
  264. is_password_valid() {
  265. if [[ "$password" =~ ^/tmp/ ]]; then
  266. if [ -f "$password" ]; then
  267. password="$(head -n1 $password)"
  268. fi
  269. fi
  270. }
  271. # Check if hash is transmitted via file
  272. is_hash_valid() {
  273. if [[ "$hash" =~ ^/tmp/ ]]; then
  274. if [ -f "$hash" ]; then
  275. hash="$(head -n1 $hash)"
  276. fi
  277. fi
  278. }
  279. # Check if directory is a symlink
  280. is_dir_symlink() {
  281. if [[ -L "$1" ]]; then
  282. check_result $E_FORBIDEN "$1 directory is a symlink"
  283. fi
  284. }
  285. # Get object value
  286. get_object_value() {
  287. object=$(grep "$2='$3'" $USER_DATA/$1.conf)
  288. eval "$object"
  289. eval echo $4
  290. }
  291. # Update object value
  292. update_object_value() {
  293. row=$(grep -nF "$2='$3'" $USER_DATA/$1.conf)
  294. lnr=$(echo $row | cut -f 1 -d ':')
  295. object=$(echo $row | sed "s/^$lnr://")
  296. eval "$object"
  297. eval old="$4"
  298. old=$(echo "$old" | sed -e 's/\\/\\\\/g' -e 's/&/\\&/g' -e 's/\//\\\//g')
  299. new=$(echo "$5" | sed -e 's/\\/\\\\/g' -e 's/&/\\&/g' -e 's/\//\\\//g')
  300. sed -i "$lnr s/${4//$/}='${old//\*/\\*}'/${4//$/}='${new//\*/\\*}'/g" \
  301. $USER_DATA/$1.conf
  302. }
  303. # Add object key
  304. add_object_key() {
  305. row=$(grep -n "$2='$3'" $USER_DATA/$1.conf)
  306. lnr=$(echo $row | cut -f 1 -d ':')
  307. object=$(echo $row | sed "s/^$lnr://")
  308. if [ -z "$(echo $object |grep $4=)" ]; then
  309. eval old="$4"
  310. sed -i "$lnr s/$5='/$4='' $5='/" $USER_DATA/$1.conf
  311. fi
  312. }
  313. # Search objects
  314. search_objects() {
  315. OLD_IFS="$IFS"
  316. IFS=$'\n'
  317. for line in $(grep $2=\'$3\' $USER_DATA/$1.conf); do
  318. eval $line
  319. eval echo \$$4
  320. done
  321. IFS="$OLD_IFS"
  322. }
  323. # Get user value
  324. get_user_value() {
  325. grep "^${1//$/}=" $USER_DATA/user.conf | head -1 | awk -F "'" '{print $2}'
  326. }
  327. # Update user value in user.conf
  328. update_user_value() {
  329. key="${2//$}"
  330. lnr=$(grep -n "^$key='" $HESTIA/data/users/$1/user.conf |cut -f 1 -d ':')
  331. if [ ! -z "$lnr" ]; then
  332. sed -i "$lnr d" $HESTIA/data/users/$1/user.conf
  333. sed -i "$lnr i\\$key='${3}'" $HESTIA/data/users/$1/user.conf
  334. fi
  335. }
  336. # Increase user counter
  337. increase_user_value() {
  338. key="${2//$}"
  339. factor="${3-1}"
  340. conf="$HESTIA/data/users/$1/user.conf"
  341. old=$(grep "$key=" $conf | cut -f 2 -d \')
  342. if [ -z "$old" ]; then
  343. old=0
  344. fi
  345. new=$((old + factor))
  346. sed -i "s/$key='$old'/$key='$new'/g" $conf
  347. }
  348. # Decrease user counter
  349. decrease_user_value() {
  350. key="${2//$}"
  351. factor="${3-1}"
  352. conf="$HESTIA/data/users/$1/user.conf"
  353. old=$(grep "$key=" $conf | cut -f 2 -d \')
  354. if [ -z "$old" ]; then
  355. old=0
  356. fi
  357. if [ "$old" -le 1 ]; then
  358. new=0
  359. else
  360. new=$((old - factor))
  361. fi
  362. if [ "$new" -lt 0 ]; then
  363. new=0
  364. fi
  365. sed -i "s/$key='$old'/$key='$new'/g" $conf
  366. }
  367. # Notify user
  368. send_notice() {
  369. topic=$1
  370. notice=$2
  371. if [ "$notify" = 'yes' ]; then
  372. touch $USER_DATA/notifications.conf
  373. chmod 660 $USER_DATA/notifications.conf
  374. time_n_date=$(date +'%T %F')
  375. time=$(echo "$time_n_date" |cut -f 1 -d \ )
  376. date=$(echo "$time_n_date" |cut -f 2 -d \ )
  377. nid=$(grep "NID=" $USER_DATA/notifications.conf |cut -f 2 -d \')
  378. nid=$(echo "$nid" |sort -n |tail -n1)
  379. if [ ! -z "$nid" ]; then
  380. nid="$((nid +1))"
  381. else
  382. nid=1
  383. fi
  384. str="NID='$nid' TOPIC='$topic' NOTICE='$notice' TYPE='$type'"
  385. str="$str ACK='no' TIME='$time' DATE='$date'"
  386. echo "$str" >> $USER_DATA/notifications.conf
  387. if [ -z "$(grep NOTIFICATIONS $USER_DATA/user.conf)" ]; then
  388. sed -i "s/^TIME/NOTIFICATIONS='yes'\nTIME/g" $USER_DATA/user.conf
  389. else
  390. update_user_value "$user" '$NOTIFICATIONS' "yes"
  391. fi
  392. fi
  393. }
  394. # Recalculate U_DISK value
  395. recalc_user_disk_usage() {
  396. u_usage=0
  397. if [ -f "$USER_DATA/web.conf" ]; then
  398. usage=0
  399. dusage=$(grep 'U_DISK=' $USER_DATA/web.conf |\
  400. awk -F "U_DISK='" '{print $2}' | cut -f 1 -d \')
  401. for disk_usage in $dusage; do
  402. usage=$((usage + disk_usage))
  403. done
  404. d=$(grep "U_DISK_WEB='" $USER_DATA/user.conf | cut -f 2 -d \')
  405. sed -i "s/U_DISK_WEB='$d'/U_DISK_WEB='$usage'/g" $USER_DATA/user.conf
  406. u_usage=$((u_usage + usage))
  407. fi
  408. if [ -f "$USER_DATA/mail.conf" ]; then
  409. usage=0
  410. dusage=$(grep 'U_DISK=' $USER_DATA/mail.conf |\
  411. awk -F "U_DISK='" '{print $2}' | cut -f 1 -d \')
  412. for disk_usage in $dusage; do
  413. usage=$((usage + disk_usage))
  414. done
  415. d=$(grep "U_DISK_MAIL='" $USER_DATA/user.conf | cut -f 2 -d \')
  416. sed -i "s/U_DISK_MAIL='$d'/U_DISK_MAIL='$usage'/g" $USER_DATA/user.conf
  417. u_usage=$((u_usage + usage))
  418. fi
  419. if [ -f "$USER_DATA/db.conf" ]; then
  420. usage=0
  421. dusage=$(grep 'U_DISK=' $USER_DATA/db.conf |\
  422. awk -F "U_DISK='" '{print $2}' | cut -f 1 -d \')
  423. for disk_usage in $dusage; do
  424. usage=$((usage + disk_usage))
  425. done
  426. d=$(grep "U_DISK_DB='" $USER_DATA/user.conf | cut -f 2 -d \')
  427. sed -i "s/U_DISK_DB='$d'/U_DISK_DB='$usage'/g" $USER_DATA/user.conf
  428. u_usage=$((u_usage + usage))
  429. fi
  430. usage=$(grep 'U_DISK_DIRS=' $USER_DATA/user.conf | cut -f 2 -d "'")
  431. u_usage=$((u_usage + usage))
  432. old=$(grep "U_DISK='" $USER_DATA/user.conf | cut -f 2 -d \')
  433. sed -i "s/U_DISK='$old'/U_DISK='$u_usage'/g" $USER_DATA/user.conf
  434. }
  435. # Recalculate U_BANDWIDTH value
  436. recalc_user_bandwidth_usage() {
  437. usage=0
  438. bandwidth_usage=$(grep 'U_BANDWIDTH=' $USER_DATA/web.conf |\
  439. awk -F "U_BANDWIDTH='" '{print $2}'|cut -f 1 -d \')
  440. for bandwidth in $bandwidth_usage; do
  441. usage=$((usage + bandwidth))
  442. done
  443. old=$(grep "U_BANDWIDTH='" $USER_DATA/user.conf | cut -f 2 -d \')
  444. sed -i "s/U_BANDWIDTH='$old'/U_BANDWIDTH='$usage'/g" $USER_DATA/user.conf
  445. }
  446. # Get next cron job id
  447. get_next_cronjob() {
  448. if [ -z "$job" ]; then
  449. curr_str=$(grep "JOB=" $USER_DATA/cron.conf|cut -f 2 -d \'|\
  450. sort -n|tail -n1)
  451. job="$((curr_str +1))"
  452. fi
  453. }
  454. # Sort cron jobs by id
  455. sort_cron_jobs() {
  456. cat $USER_DATA/cron.conf |sort -n -k 2 -t \' > $USER_DATA/cron.tmp
  457. mv -f $USER_DATA/cron.tmp $USER_DATA/cron.conf
  458. }
  459. # Sync cronjobs with system cron
  460. sync_cron_jobs() {
  461. source $USER_DATA/user.conf
  462. if [ -e "/var/spool/cron/crontabs" ]; then
  463. crontab="/var/spool/cron/crontabs/$user"
  464. else
  465. crontab="/var/spool/cron/$user"
  466. fi
  467. rm -f $crontab
  468. if [ "$CRON_REPORTS" = 'yes' ]; then
  469. echo "MAILTO=$CONTACT" > $crontab
  470. echo 'CONTENT_TYPE="text/plain; charset=utf-8"' >> $crontab
  471. fi
  472. while read line; do
  473. eval $line
  474. if [ "$SUSPENDED" = 'no' ]; then
  475. echo "$MIN $HOUR $DAY $MONTH $WDAY $CMD" |\
  476. sed -e "s/%quote%/'/g" -e "s/%dots%/:/g" \
  477. >> $crontab
  478. fi
  479. done < $USER_DATA/cron.conf
  480. chown $user:$user $crontab
  481. chmod 600 $crontab
  482. }
  483. # User format validator
  484. is_user_format_valid() {
  485. if [ ${#1} -eq 1 ]; then
  486. if ! [[ "$1" =~ ^^[[:alnum:]]$ ]]; then
  487. check_result $E_INVALID "invalid $2 format :: $1"
  488. fi
  489. else
  490. if ! [[ "$1" =~ ^[[:alnum:]][-|\.|_[:alnum:]]{0,28}[[:alnum:]]$ ]]
  491. then
  492. check_result $E_INVALID "invalid $2 format :: $1"
  493. fi
  494. fi
  495. }
  496. # Domain format validator
  497. is_domain_format_valid() {
  498. object_name=${2-domain}
  499. exclude="[!|@|#|$|^|&|*|(|)|+|=|{|}|:|,|<|>|?|_|/|\|\"|'|;|%|\`| ]"
  500. if [[ $1 =~ $exclude ]] || [[ $1 =~ ^[0-9]+$ ]] || [[ $1 =~ "\.\." ]] || [[ $1 =~ "$(printf '\t')" ]]; then
  501. check_result $E_INVALID "invalid $object_name format :: $1"
  502. fi
  503. }
  504. # Alias forman validator
  505. is_alias_format_valid() {
  506. for object in ${1//,/ }; do
  507. exclude="[!|@|#|$|^|&|(|)|+|=|{|}|:|<|>|?|_|/|\|\"|'|;|%|\`| ]"
  508. if [[ "$object" =~ $exclude ]]; then
  509. check_result $E_INVALID "invalid alias format :: $object"
  510. fi
  511. if [[ "$object" =~ [*] ]] && ! [[ "$object" =~ ^[*]\..* ]]; then
  512. check_result $E_INVALID "invalid alias format :: $object"
  513. fi
  514. done
  515. }
  516. # IP format validator
  517. is_ip_format_valid() {
  518. object_name=${2-ip}
  519. ip_regex='([1-9]?[0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])'
  520. ip_clean=$(echo "${1%/*}")
  521. if ! [[ $ip_clean =~ ^$ip_regex\.$ip_regex\.$ip_regex\.$ip_regex$ ]]; then
  522. check_result $E_INVALID "invalid $object_name format :: $1"
  523. fi
  524. if [ $1 != "$ip_clean" ]; then
  525. ip_cidr="$ip_clean/"
  526. ip_cidr=$(echo "${1#$ip_cidr}")
  527. if [[ "$ip_cidr" -gt 32 ]] || [[ "$ip_cidr" =~ [:alnum:] ]]; then
  528. check_result $E_INVALID "invalid $object_name format :: $1"
  529. fi
  530. fi
  531. }
  532. # Proxy extention format validator
  533. is_extention_format_valid() {
  534. exclude="[!|#|$|^|&|(|)|+|=|{|}|:|@|<|>|?|/|\|\"|'|;|%|\`| ]"
  535. if [[ "$1" =~ $exclude ]]; then
  536. check_result $E_INVALID "invalid proxy extention format :: $1"
  537. fi
  538. }
  539. # Number format validator
  540. is_number_format_valid() {
  541. object_name=${2-number}
  542. if ! [[ "$1" =~ ^[0-9]+$ ]] ; then
  543. check_result $E_INVALID "invalid $object_name format :: $1"
  544. fi
  545. }
  546. # Autoreply format validator
  547. is_autoreply_format_valid() {
  548. if [[ "$1" =~ [$|\`] ]] || [ 10240 -le ${#1} ]; then
  549. check_result $E_INVALID "invalid autoreply format :: $1"
  550. fi
  551. }
  552. # Boolean format validator
  553. is_boolean_format_valid() {
  554. if [ "$1" != 'yes' ] && [ "$1" != 'no' ]; then
  555. check_result $E_INVALID "invalid $2 format :: $1"
  556. fi
  557. }
  558. # Common format validator
  559. is_common_format_valid() {
  560. exclude="[!|#|$|^|&|(|)|+|=|{|}|:|<|>|?|/|\|\"|'|;|%|\`| ]"
  561. if [[ "$1" =~ $exclude ]]; then
  562. check_result $E_INVALID "invalid $2 format :: $1"
  563. fi
  564. if [ 400 -le ${#1} ]; then
  565. check_result $E_INVALID "invalid $2 format :: $1"
  566. fi
  567. if [[ "$1" =~ @ ]] && [ ${#1} -gt 1 ] ; then
  568. check_result $E_INVALID "invalid $2 format :: $1"
  569. fi
  570. if [[ $1 =~ \* ]]; then
  571. if [[ "$(echo $1 | grep -o '\*\.' |wc -l)" -eq 0 ]] && [[ $1 != '*' ]] ; then
  572. check_result $E_INVALID "invalid $2 format :: $1"
  573. fi
  574. fi
  575. if [[ $(echo -n "$1" | tail -c 1) =~ [^a-zA-Z0-9_*@] ]]; then
  576. check_result $E_INVALID "invalid $2 format :: $1"
  577. fi
  578. if [[ $(echo -n "$1" | grep -c '\.\.') -gt 0 ]];then
  579. check_result $E_INVALID "invalid $2 format :: $1"
  580. fi
  581. if [[ $(echo -n "$1" | head -c 1) =~ [^a-zA-Z0-9_*@] ]]; then
  582. check_result $E_INVALID "invalid $2 format :: $1"
  583. fi
  584. if [[ $(echo -n "$1" | grep -c '\-\-') -gt 0 ]]; then
  585. check_result $E_INVALID "invalid $2 format :: $1"
  586. fi
  587. if [[ $(echo -n "$1" | grep -c '\_\_') -gt 0 ]]; then
  588. check_result $E_INVALID "invalid $2 format :: $1"
  589. fi
  590. }
  591. # Database format validator
  592. is_database_format_valid() {
  593. exclude="[!|@|#|$|^|&|*|(|)|+|=|{|}|:|,|<|>|?|/|\|\"|'|;|%|\`| ]"
  594. if [[ "$1" =~ $exclude ]] || [ 65 -le ${#1} ]; then
  595. check_result $E_INVALID "invalid $2 format :: $1"
  596. fi
  597. }
  598. # Date format validator
  599. is_date_format_valid() {
  600. if ! [[ "$1" =~ ^[0-9][0-9][0-9][0-9]-[0-9][0-9]-[0-9][0-9]$ ]]; then
  601. check_result $E_INVALID "invalid date format :: $1"
  602. fi
  603. }
  604. # Database user validator
  605. is_dbuser_format_valid() {
  606. exclude="[!|@|#|$|^|&|*|(|)|+|=|{|}|:|,|<|>|?|/|\|\"|'|;|%|\`| ]"
  607. if [ 31 -le ${#1} ]; then
  608. check_result $E_INVALID "mysql username can be up to 30 characters long"
  609. fi
  610. if [[ "$1" =~ $exclude ]]; then
  611. check_result $E_INVALID "invalid $2 format :: $1"
  612. fi
  613. }
  614. # DNS record type validator
  615. is_dns_type_format_valid() {
  616. known_dnstype='A,AAAA,NS,CNAME,MX,TXT,SRV,DNSKEY,KEY,IPSECKEY,PTR,SPF,TLSA,CAA'
  617. if [ -z "$(echo $known_dnstype |grep -w $1)" ]; then
  618. check_result $E_INVALID "invalid dns record type format :: $1"
  619. fi
  620. }
  621. # DNS record validator
  622. is_dns_record_format_valid() {
  623. if [ "$rtype" = 'A' ]; then
  624. is_ip_format_valid "$1"
  625. fi
  626. if [ "$rtype" = 'NS' ]; then
  627. is_domain_format_valid "${1::-1}" 'ns_record'
  628. fi
  629. if [ "$rtype" = 'MX' ]; then
  630. is_domain_format_valid "${1::-1}" 'mx_record'
  631. is_int_format_valid "$priority" 'priority_record'
  632. fi
  633. }
  634. # Email format validator
  635. is_email_format_valid() {
  636. if [[ ! "$1" =~ ^[A-Za-z0-9._%+-]+@[[:alnum:].-]+\.[A-Za-z]{2,63}$ ]] ; then
  637. check_result $E_INVALID "invalid email format :: $1"
  638. fi
  639. }
  640. # Firewall action validator
  641. is_fw_action_format_valid() {
  642. if [ "$1" != "ACCEPT" ] && [ "$1" != 'DROP' ] ; then
  643. check_result $E_INVALID "invalid action format :: $1"
  644. fi
  645. }
  646. # Firewall protocol validator
  647. is_fw_protocol_format_valid() {
  648. if [ "$1" != "ICMP" ] && [ "$1" != 'UDP' ] && [ "$1" != 'TCP' ] ; then
  649. check_result $E_INVALID "invalid protocol format :: $1"
  650. fi
  651. }
  652. # Firewall port validator
  653. is_fw_port_format_valid() {
  654. if [ "${#1}" -eq 1 ]; then
  655. if ! [[ "$1" =~ [0-9] ]]; then
  656. check_result $E_INVALID "invalid port format :: $1"
  657. fi
  658. else
  659. if ! [[ "$1" =~ ^[0-9][-|,|:|0-9]{0,30}[0-9]$ ]]
  660. then
  661. check_result $E_INVALID "invalid port format :: $1"
  662. fi
  663. fi
  664. }
  665. # Integer validator
  666. is_int_format_valid() {
  667. if ! [[ "$1" =~ ^[0-9]+$ ]] ; then
  668. check_result $E_INVALID "invalid $2 format :: $1"
  669. fi
  670. }
  671. # Interface validator
  672. is_interface_format_valid() {
  673. netdevices=$(cat /proc/net/dev |grep : |cut -f 1 -d : |tr -d ' ')
  674. if [ -z $(echo "$netdevices" |grep -x $1) ]; then
  675. check_result $E_INVALID "invalid interface format :: $1"
  676. fi
  677. }
  678. # IP status validator
  679. is_ip_status_format_valid() {
  680. if [ -z "$(echo shared,dedicated | grep -w $1 )" ]; then
  681. check_result $E_INVALID "invalid status format :: $1"
  682. fi
  683. }
  684. # Cron validator
  685. is_cron_format_valid() {
  686. limit=59
  687. check_format=''
  688. if [ "$2" = 'hour' ]; then
  689. limit=23
  690. fi
  691. if [ "$2" = 'day' ]; then
  692. limit=31
  693. fi
  694. if [ "$2" = 'month' ]; then
  695. limit=12
  696. fi
  697. if [ "$2" = 'wday' ]; then
  698. limit=7
  699. fi
  700. if [ "$1" = '*' ]; then
  701. check_format='ok'
  702. fi
  703. if [[ "$1" =~ ^[\*]+[/]+[0-9] ]]; then
  704. if [ "$(echo $1 |cut -f 2 -d /)" -lt $limit ]; then
  705. check_format='ok'
  706. fi
  707. fi
  708. if [[ "$1" =~ ^[0-9][-|,|0-9]{0,70}[\/][0-9]$ ]]; then
  709. check_format='ok'
  710. crn_values=${1//,/ }
  711. crn_values=${crn_values//-/ }
  712. crn_values=${crn_values//\// }
  713. for crn_vl in $crn_values; do
  714. if [ "$crn_vl" -gt $limit ]; then
  715. check_format='invalid'
  716. fi
  717. done
  718. fi
  719. crn_values=$(echo $1 |tr "," " " | tr "-" " ")
  720. for crn_vl in $crn_values
  721. do
  722. if [[ "$crn_vl" =~ ^[0-9]+$ ]] && [ "$crn_vl" -le $limit ]; then
  723. check_format='ok'
  724. fi
  725. done
  726. if [ "$check_format" != 'ok' ]; then
  727. check_result $E_INVALID "invalid $2 format :: $1"
  728. fi
  729. }
  730. # Name validator
  731. is_name_format_valid() {
  732. if ! [[ "$1" =~ ^[[:alnum:]][-|\ |\.|_[:alnum:]]{0,28}[[:alnum:]]$ ]]; then
  733. check_result $E_INVALID "invalid $2 format :: $1"
  734. fi
  735. }
  736. # Object validator
  737. is_object_format_valid() {
  738. if ! [[ "$1" =~ ^[[:alnum:]][-|\.|_[:alnum:]]{0,64}[[:alnum:]]$ ]]; then
  739. check_result $E_INVALID "invalid $2 format :: $1"
  740. fi
  741. }
  742. # Password validator
  743. is_password_format_valid() {
  744. if [ "${#1}" -lt '6' ]; then
  745. check_result $E_INVALID "invalid password format :: $1"
  746. fi
  747. }
  748. # Missing function -
  749. # Before: validate_format_shell
  750. # After: is_format_valid_shell
  751. is_format_valid_shell() {
  752. if [ -z "$(grep -w $1 /etc/shells)" ]; then
  753. echo "Error: shell $1 is not valid"
  754. log_event "$E_INVALID" "$EVENT"
  755. exit $E_INVALID
  756. fi
  757. }
  758. # Format validation controller
  759. is_format_valid() {
  760. for arg_name in $*; do
  761. eval arg=\$$arg_name
  762. if [ ! -z "$arg" ]; then
  763. case $arg_name in
  764. account) is_user_format_valid "$arg" "$arg_name";;
  765. action) is_fw_action_format_valid "$arg";;
  766. aliases) is_alias_format_valid "$arg" ;;
  767. antispam) is_boolean_format_valid "$arg" 'antispam' ;;
  768. antivirus) is_boolean_format_valid "$arg" 'antivirus' ;;
  769. autoreply) is_autoreply_format_valid "$arg" ;;
  770. backup) is_object_format_valid "$arg" 'backup' ;;
  771. charset) is_object_format_valid "$arg" "$arg_name" ;;
  772. charsets) is_common_format_valid "$arg" 'charsets' ;;
  773. comment) is_object_format_valid "$arg" 'comment' ;;
  774. database) is_database_format_valid "$arg" 'database';;
  775. day) is_cron_format_valid "$arg" $arg_name ;;
  776. dbpass) is_password_format_valid "$arg" ;;
  777. dbuser) is_dbuser_format_valid "$arg" 'dbuser';;
  778. dkim) is_boolean_format_valid "$arg" 'dkim' ;;
  779. dkim_size) is_int_format_valid "$arg" ;;
  780. domain) is_domain_format_valid "$arg" ;;
  781. dvalue) is_dns_record_format_valid "$arg";;
  782. email) is_email_format_valid "$arg" ;;
  783. exp) is_date_format_valid "$arg" ;;
  784. extentions) is_common_format_valid "$arg" 'extentions' ;;
  785. fname) is_name_format_valid "$arg" "first name" ;;
  786. ftp_password) is_password_format_valid "$arg" ;;
  787. ftp_user) is_user_format_valid "$arg" "$arg_name" ;;
  788. host) is_object_format_valid "$arg" "$arg_name" ;;
  789. hour) is_cron_format_valid "$arg" $arg_name ;;
  790. id) is_int_format_valid "$arg" 'id' ;;
  791. ip) is_ip_format_valid "$arg" ;;
  792. ip_name) is_domain_format_valid "$arg" 'IP name';;
  793. ip_status) is_ip_status_format_valid "$arg" ;;
  794. job) is_int_format_valid "$arg" 'job' ;;
  795. key) is_user_format_valid "$arg" "$arg_name" ;;
  796. lname) is_name_format_valid "$arg" "last name" ;;
  797. malias) is_user_format_valid "$arg" "$arg_name" ;;
  798. max_db) is_int_format_valid "$arg" 'max db';;
  799. min) is_cron_format_valid "$arg" $arg_name ;;
  800. month) is_cron_format_valid "$arg" $arg_name ;;
  801. nat_ip) is_ip_format_valid "$arg" ;;
  802. netmask) is_ip_format_valid "$arg" 'netmask' ;;
  803. newid) is_int_format_valid "$arg" 'id' ;;
  804. ns1) is_domain_format_valid "$arg" 'ns1' ;;
  805. ns2) is_domain_format_valid "$arg" 'ns2' ;;
  806. ns3) is_domain_format_valid "$arg" 'ns3' ;;
  807. ns4) is_domain_format_valid "$arg" 'ns4' ;;
  808. ns5) is_domain_format_valid "$arg" 'ns5' ;;
  809. ns6) is_domain_format_valid "$arg" 'ns6' ;;
  810. ns7) is_domain_format_valid "$arg" 'ns7' ;;
  811. ns8) is_domain_format_valid "$arg" 'ns8' ;;
  812. object) is_name_format_valid "$arg" 'object';;
  813. package) is_object_format_valid "$arg" "$arg_name" ;;
  814. password) is_password_format_valid "$arg" ;;
  815. port) is_int_format_valid "$arg" 'port' ;;
  816. port_ext) is_fw_port_format_valid "$arg";;
  817. protocol) is_fw_protocol_format_valid "$arg" ;;
  818. proxy_ext) is_extention_format_valid "$arg" ;;
  819. quota) is_int_format_valid "$arg" 'quota' ;;
  820. record) is_common_format_valid "$arg" 'record';;
  821. restart) is_boolean_format_valid "$arg" 'restart' ;;
  822. rtype) is_dns_type_format_valid "$arg" ;;
  823. rule) is_int_format_valid "$arg" "rule id" ;;
  824. soa) is_domain_format_valid "$arg" 'SOA' ;;
  825. #missing command: is_format_valid_shell
  826. shell) is_format_valid_shell "$arg" ;;
  827. stats_pass) is_password_format_valid "$arg" ;;
  828. stats_user) is_user_format_valid "$arg" "$arg_name" ;;
  829. template) is_object_format_valid "$arg" "$arg_name" ;;
  830. ttl) is_int_format_valid "$arg" 'ttl';;
  831. user) is_user_format_valid "$arg" $arg_name;;
  832. wday) is_cron_format_valid "$arg" $arg_name ;;
  833. esac
  834. fi
  835. done
  836. }
  837. # Domain argument formatting
  838. format_domain() {
  839. if [[ "$domain" = *[![:ascii:]]* ]]; then
  840. if [[ "$domain" =~ [[:upper:]] ]]; then
  841. domain=$(echo "$domain" |sed 's/[[:upper:]].*/\L&/')
  842. fi
  843. else
  844. if [[ "$domain" =~ [[:upper:]] ]]; then
  845. domain=$(echo "$domain" |tr '[:upper:]' '[:lower:]')
  846. fi
  847. fi
  848. if [[ "$domain" =~ ^www\..* ]]; then
  849. domain=$(echo "$domain" |sed -e "s/^www.//")
  850. fi
  851. if [[ "$domain" =~ .*\.$ ]]; then
  852. domain=$(echo "$domain" |sed -e "s/[.]*$//g")
  853. fi
  854. if [[ "$domain" =~ ^\. ]]; then
  855. domain=$(echo "$domain" |sed -e "s/^[.]*//")
  856. fi
  857. }
  858. format_domain_idn() {
  859. if [ -z "$domain_idn" ]; then
  860. domain_idn=$domain
  861. fi
  862. if [[ "$domain_idn" = *[![:ascii:]]* ]]; then
  863. domain_idn=$(idn -t --quiet -a $domain_idn)
  864. fi
  865. }
  866. format_aliases() {
  867. if [ ! -z "$aliases" ] && [ "$aliases" != 'none' ]; then
  868. aliases=$(echo $aliases |tr '[:upper:]' '[:lower:]' |tr ',' '\n')
  869. aliases=$(echo "$aliases" |sed -e "s/\.$//" |sort -u)
  870. aliases=$(echo "$aliases" |tr -s '.')
  871. aliases=$(echo "$aliases" |sed -e "s/[.]*$//g")
  872. aliases=$(echo "$aliases" |sed -e "s/^[.]*//")
  873. aliases=$(echo "$aliases" |sed -e "/^$/d")
  874. aliases=$(echo "$aliases" |tr '\n' ',' |sed -e "s/,$//")
  875. fi
  876. }
  877. check_backup_conditions() {
  878. # Checking load average
  879. la=$(cat /proc/loadavg |cut -f 1 -d ' ' |cut -f 1 -d '.')
  880. # i=0
  881. while [ "$la" -ge "$BACKUP_LA_LIMIT" ]; do
  882. echo -e "$(date "+%F %T") Load Average $la"
  883. sleep 60
  884. la=$(cat /proc/loadavg |cut -f 1 -d ' ' |cut -f 1 -d '.')
  885. done
  886. }
  887. # Define download function
  888. download_file() {
  889. local url=$1
  890. local destination=$2
  891. local force=$3
  892. # Default destination is the curent working directory
  893. local dstopt=""
  894. if [ ! -z "$(echo "$url" | grep -E "\.(gz|gzip|bz2|zip|xz)$")" ]; then
  895. # When an archive file is downloaded it will be first saved localy
  896. dstopt="--directory-prefix=$ARCHIVE_DIR"
  897. local is_archive="true"
  898. local filename="${url##*/}"
  899. if [ -z "$filename" ]; then
  900. >&2 echo "[!] No filename was found in url, exiting ($url)"
  901. exit 1
  902. fi
  903. if [ ! -z "$force" ] && [ -f "$ARCHIVE_DIR/$filename" ]; then
  904. rm -f $ARCHIVE_DIR/$filename
  905. fi
  906. elif [ ! -z "$destination" ]; then
  907. # Plain files will be written to specified location
  908. dstopt="-O $destination"
  909. fi
  910. # check for corrupted archive
  911. if [ -f "$ARCHIVE_DIR/$filename" ] && [ "$is_archive" = "true" ]; then
  912. tar -tzf "$ARCHIVE_DIR/$filename" > /dev/null 2>&1
  913. if [ $? -ne 0 ]; then
  914. >&2 echo "[!] Archive $ARCHIVE_DIR/$filename is corrupted, redownloading"
  915. rm -f $ARCHIVE_DIR/$filename
  916. fi
  917. fi
  918. if [ ! -f "$ARCHIVE_DIR/$filename" ]; then
  919. wget $url -q $dstopt --show-progress --progress=bar:force --limit-rate=3m
  920. fi
  921. if [ ! -z "$destination" ] && [ "$is_archive" = "true" ]; then
  922. if [ "$destination" = "-" ]; then
  923. cat "$ARCHIVE_DIR/$filename"
  924. elif [ -d "$(dirname $destination)" ]; then
  925. cp "$ARCHIVE_DIR/$filename" "$destination"
  926. fi
  927. fi
  928. }