hestiacp/web/edit/web/index.php

<?php
// Init
//error_reporting(NULL);
ob_start();
session_start();

$TAB = 'WEB';
include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");

// Header
include($_SERVER['DOCUMENT_ROOT'].'/templates/header.html');

// Panel
top_panel($user,$TAB);

// Are you admin?
if ($_SESSION['user'] == 'admin') {

    // Check user argument?
    if (empty($_GET['domain'])) {
        header("Location: /list/web/");
    }

    if (!empty($_POST['cancel'])) {
        header("Location: /list/web/");
    }

    // Check domain
    $v_domain = escapeshellarg($_GET['domain']);
    exec (VESTA_CMD."v_list_web_domain ".$user." ".$v_domain." json", $output, $return_var);
    if ($return_var != 0) {
        $error = implode('<br>', $output);
        if (empty($error)) $error = 'Error: vesta did not return any output.';
        $_SESSION['error_msg'] = $error;
    } else {
        $data = json_decode(implode('', $output), true);
        unset($output);
        $v_username = $user;
        $v_domain = $_GET['domain'];
        $v_ip = $data[$v_domain]['IP'];
        $v_template = $data[$v_domain]['TPL'];
        $v_aliases = str_replace(',', "\n", $data[$v_domain]['ALIAS']);
        $valiases = explode(",", $data[$v_domain]['ALIAS']);
        $v_tpl = $data[$v_domain]['IP'];
        $v_cgi = $data[$v_domain]['CGI'];
        $v_elog = $data[$v_domain]['ELOG'];
        $v_ssl = $data[$v_domain]['SSL'];
        if ( $v_ssl == 'yes' ) {
            exec (VESTA_CMD."v_list_web_domain_ssl ".$user." '".$v_domain."' json", $output, $return_var);
            $ssl_str = json_decode(implode('', $output), true);
            unset($output);
            $v_ssl_crt = $ssl_str[$v_domain]['CRT'];
            $v_ssl_key = $ssl_str[$v_domain]['KEY'];
            $v_ssl_ca = $ssl_str[$v_domain]['CA'];
        }
        $v_ssl_home = $data[$v_domain]['SSL_HOME'];
        $v_nginx = $data[$v_domain]['NGINX'];
        $v_nginx_ext = str_replace(',', ', ', $data[$v_domain]['NGINX_EXT']);
        $v_stats = $data[$v_domain]['STATS'];
        $v_stats_user = $data[$v_domain]['STATS_USER'];
        if (!empty($v_stats_user)) $v_stats_password = "••••••••";
        $v_suspended = $data[$v_domain]['SUSPENDED'];
        if ( $v_suspended == 'yes' ) {
            $v_status =  'suspended';
        } else {
            $v_status =  'active';
        }
        $v_time = $data[$v_domain]['TIME'];
        $v_date = $data[$v_domain]['DATE'];
    
        exec (VESTA_CMD."v_list_user_ips ".$user." json", $output, $return_var);
        $ips = json_decode(implode('', $output), true);
        unset($output);

        exec (VESTA_CMD."v_list_web_templates ".$user." json", $output, $return_var);
        $templates = json_decode(implode('', $output), true);
        unset($output);

        exec (VESTA_CMD."v_list_web_stats json", $output, $return_var);
        $stats = json_decode(implode('', $output), true);
        unset($output);
    }

    // Action
    if (!empty($_POST['save'])) {
        $v_domain = escapeshellarg($_POST['v_domain']);

        // IP
        if (($v_ip != $_POST['v_ip']) && (empty($_SESSION['error_msg']))) {
            $v_ip = escapeshellarg($_POST['v_ip']);
            exec (VESTA_CMD."v_change_web_domain_ip ".$v_username." ".$v_domain." ".$v_ip." 'no'", $output, $return_var);
            if ($return_var != 0) {
                $error = implode('<br>', $output);
                if (empty($error)) $error = 'Error: vesta did not return any output.';
                $_SESSION['error_msg'] = $error;
            }
            $restart_web = 'yes';
            unset($output);
            exec (VESTA_CMD."v_list_dns_domain ".$v_username." ".$v_domain." json", $output, $return_var);
            if ((empty($_SESSION['error_msg'])) && ($return_var == 0 )) {
                exec (VESTA_CMD."v_change_dns_domain_ip ".$v_username." ".$v_domain." ".$v_ip." 'no'", $output, $return_var);
                if ($return_var != 0) {
                    $error = implode('<br>', $output);
                    if (empty($error)) $error = 'Error: vesta did not return any output.';
                    $_SESSION['error_msg'] = $error;
                }
                $restart_dns = 'yes';
            }
            unset($output);
            foreach($valiases as $v_alias ){
                exec (VESTA_CMD."v_list_dns_domain ".$v_username." '".$v_alias."' json", $output, $return_var);
                if ((empty($_SESSION['error_msg'])) && ($return_var == 0 )) {
                    exec (VESTA_CMD."v_change_dns_domain_ip ".$v_username." '".$v_alias."' ".$v_ip, $output, $return_var);
                    if ($return_var != 0) {
                        $error = implode('<br>', $output);
                        if (empty($error)) $error = 'Error: vesta did not return any output.';
                        $_SESSION['error_msg'] = $error;
                    }
                    $restart_dns = 'yes';
                }
                unset($output);
            }
        }

        // Template
        if (($v_template != $_POST['v_template']) && (empty($_SESSION['error_msg']))) {
            $v_template = escapeshellarg($_POST['v_template']);
            exec (VESTA_CMD."v_change_web_domain_tpl ".$v_username." ".$v_domain." ".$v_template." 'no'", $output, $return_var);
            if ($return_var != 0) {
                $error = implode('<br>', $output);
                if (empty($error)) $error = 'Error: vesta did not return any output.';
                $_SESSION['error_msg'] = $error;
            }
            unset($output);
            $restart_web = 'yes';
        }

        // Aliases
        if (empty($_SESSION['error_msg'])) {
            $waliases = preg_replace("/\n/", " ", $_POST['v_aliases']);
            $waliases = preg_replace("/,/", " ", $waliases);
            $waliases = preg_replace('/\s+/', ' ',$waliases);
            $waliases = trim($waliases);
            $aliases = explode(" ", $waliases);
            $v_aliases = str_replace(' ', "\n", $waliases);
            $result = array_diff($valiases, $aliases);
            foreach ($result as $alias) {
                if (empty($_SESSION['error_msg'])) {
                    $restart_web = 'yes';
                    $v_template = escapeshellarg($_POST['v_template']);
                    exec (VESTA_CMD."v_delete_web_domain_alias ".$v_username." ".$v_domain." '".$alias."' 'no'", $output, $return_var);
                    if ($return_var != 0) {
                        $error = implode('<br>', $output);
                        if (empty($error)) $error = 'Error: vesta did not return any output.';
                        $_SESSION['error_msg'] = $error;
                    }
                    unset($output);
                    exec (VESTA_CMD."v_list_dns_domain ".$v_username." '".$alias."' json", $output, $return_var);
                    if ((empty($_SESSION['error_msg'])) && ($return_var == 0 )) {
                        exec (VESTA_CMD."v_delete_dns_domain ".$v_username." '".$alias."'", $output, $return_var);
                        if ($return_var != 0) {
                            $error = implode('<br>', $output);
                            if (empty($error)) $error = 'Error: vesta did not return any output.';
                            $_SESSION['error_msg'] = $error;
                        }
                        $restart_dns = 'yes';
                    }
                    unset($output);
                }
            }

            $result = array_diff($aliases, $valiases);
            foreach ($result as $alias) {
                if (empty($_SESSION['error_msg'])) {
                    $restart_web = 'yes';
                    $v_template = escapeshellarg($_POST['v_template']);
                    exec (VESTA_CMD."v_add_web_domain_alias ".$v_username." ".$v_domain." '".$alias."' 'no'", $output, $return_var);
                    if ($return_var != 0) {
                        $error = implode('<br>', $output);
                        if (empty($error)) $error = 'Error: vesta did not return any output.';
                        $_SESSION['error_msg'] = $error;
                    }
                    unset($output);
                    exec (VESTA_CMD."v_list_dns_domain ".$v_username." '".$alias."' json", $output, $return_var);
                    if ((empty($_SESSION['error_msg'])) && ($return_var == 0 )) {
                        exec (VESTA_CMD."v_add_dns_domain ".$v_username." '".$alias."' ".$v_ip, $output, $return_var);
                        if ($return_var != 0) {
                            $error = implode('<br>', $output);
                            if (empty($error)) $error = 'Error: vesta did not return any output.';
                            $_SESSION['error_msg'] = $error;
                        }
                        $restart_dns = 'yes';
                    }
                    unset($output);
                }
            }
        }

        // Elog
        if (($v_elog == 'yes') && (empty($_POST['v_elog'])) && (empty($_SESSION['error_msg']))) {
            exec (VESTA_CMD."v_delete_web_domain_elog ".$v_username." ".$v_domain." 'no'", $output, $return_var);
            if ($return_var != 0) {
                $error = implode('<br>', $output);
                if (empty($error)) $error = 'Error: vesta did not return any output.';
                $_SESSION['error_msg'] = $error;
            }
            unset($output);
            $restart_web = 'yes';
            $v_elog = 'no';
        }
        if (($v_elog == 'no') && (!empty($_POST['v_elog'])) && (empty($_SESSION['error_msg'])) ) {
            exec (VESTA_CMD."v_add_web_domain_elog ".$v_username." ".$v_domain." 'no'", $output, $return_var);
            if ($return_var != 0) {
                $error = implode('<br>', $output);
                if (empty($error)) $error = 'Error: vesta did not return any output.';
                $_SESSION['error_msg'] = $error;
            }
            unset($output);
            $restart_web = 'yes';
            $v_elog = 'yes';
        }

        // Nginx
        if ((!empty($v_nginx)) && (empty($_POST['v_nginx'])) && (empty($_SESSION['error_msg']))) {
            exec (VESTA_CMD."v_delete_web_domain_nginx ".$v_username." ".$v_domain." 'no'", $output, $return_var);
            if ($return_var != 0) {
                $error = implode('<br>', $output);
                if (empty($error)) $error = 'Error: vesta did not return any output.';
                $_SESSION['error_msg'] = $error;
            }
            unset($output);
            unset($v_nginx);
            $restart_web = 'yes';
        }
        if ((!empty($v_nginx)) && (!empty($_POST['v_nginx'])) && (empty($_SESSION['error_msg']))) {
            $ext = preg_replace("/\n/", " ", $_POST['v_nginx_ext']);
            $ext = preg_replace("/,/", " ", $ext);
            $ext = preg_replace('/\s+/', ' ',$ext);
            $ext = trim($ext);
            $ext = str_replace(' ', ", ", $ext);
            if ( $v_nginx_ext != $ext ) {
                $ext = str_replace(', ', ",", $ext);
                exec (VESTA_CMD."v_change_web_domain_nginx_tpl ".$v_username." ".$v_domain." 'default' ".escapeshellarg($ext)." 'no'", $output, $return_var);
                if ($return_var != 0) {
                    $error = implode('<br>', $output);
                    if (empty($error)) $error = 'Error: vesta did not return any output.';
                    $_SESSION['error_msg'] = $error;
                }
                $v_nginx_ext = str_replace(',', ', ', $ext);
                unset($output);
                $restart_web = 'yes';
            }
        }
        if ((empty($v_nginx)) && (!empty($_POST['v_nginx'])) && (empty($_SESSION['error_msg']))) {
            $nginx_ext = "'jpg,jpeg,gif,png,ico,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,tar,wav,bmp,rtf,js,mp3,avi,mpeg,html,htm'";
            if (!empty($_POST['v_nginx_ext'])) {
                $ext = preg_replace("/\n/", " ", $_POST['v_nginx_ext']);
                $ext = preg_replace("/,/", " ", $ext);
                $ext = preg_replace('/\s+/', ' ',$ext);
                $ext = trim($ext);
                $ext = str_replace(' ', ",", $ext);
                $v_nginx_ext = str_replace(',', ', ', $ext);
            }
            exec (VESTA_CMD."v_add_web_domain_nginx ".$v_username." ".$v_domain." 'default' ".escapeshellarg($ext)." 'no'", $output, $return_var);
            if ($return_var != 0) {
                $error = implode('<br>', $output);
                if (empty($error)) $error = 'Error: vesta did not return any output.';
                $_SESSION['error_msg'] = $error;
            }
            unset($output);
            $v_nginx = 'default';
            $restart_web = 'yes';
        }

        // SSL
        if (( $v_ssl == 'yes' ) && (empty($_POST['v_ssl'])) && (empty($_SESSION['error_msg']))) {
            exec (VESTA_CMD."v_delete_web_domain_ssl ".$v_username." ".$v_domain." 'no'", $output, $return_var);
            if ($return_var != 0) {
                $error = implode('<br>', $output);
                if (empty($error)) $error = 'Error: vesta did not return any output.';
                $_SESSION['error_msg'] = $error;
            }
            unset($output);
            $v_ssl = 'no';
            $restart_web = 'yes';
        }
        if (($v_ssl == 'yes') && (!empty($_POST['v_ssl'])) && (empty($_SESSION['error_msg']))) {
            if (( $v_ssl_crt != str_replace("\r\n", "\n",  $_POST['v_ssl_crt'])) || ( $v_ssl_key != str_replace("\r\n", "\n",  $_POST['v_ssl_key'])) || ( $v_ssl_ca != str_replace("\r\n", "\n",  $_POST['v_ssl_ca']))) {
                exec ('mktemp -d', $mktemp_output, $return_var);
                $tmpdir = $mktemp_output[0];

                // Certificate
                if (!empty($_POST['v_ssl_crt'])) {
                    $fp = fopen($tmpdir."/".$_POST['v_domain'].".crt", 'w');
                    fwrite($fp, str_replace("\r\n", "\n",  $_POST['v_ssl_crt']));
                    fclose($fp);
                }

                // Key
                if (!empty($_POST['v_ssl_key'])) {
                    $fp = fopen($tmpdir."/".$_POST['v_domain'].".key", 'w');
                    fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_key']));
                    fclose($fp);
                }

                // CA
                if (!empty($_POST['v_ssl_ca'])) {
                    $fp = fopen($tmpdir."/".$_POST['v_domain'].".ca", 'w');
                    fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_ca']));
                    fclose($fp);
                }

                exec (VESTA_CMD."v_change_web_domain_sslcert ".$user." ".$v_domain." ".$tmpdir." 'no'", $output, $return_var);
                if ($return_var != 0) {
                    $error = implode('<br>', $output);
                    if (empty($error)) $error = 'Error: vesta did not return any output.';
                    $_SESSION['error_msg'] = $error;
                }
                unset($output);
                $restart_web = 'yes';
                $v_ssl_crt = $_POST['v_ssl_crt'];
                $v_ssl_key = $_POST['v_ssl_key'];
                $v_ssl_ca = $_POST['v_ssl_ca'];
            }
        }
        if (( $v_ssl == 'yes') && (!empty($_POST['v_ssl'])) && (empty($_SESSION['error_msg']))) {
            if ( $v_ssl_home != $_POST['v_ssl_home'] ) {
                $v_ssl_home = escapeshellarg($_POST['v_ssl_home']);
                exec (VESTA_CMD."v_change_web_domain_sslhome ".$user." ".$v_domain." ".$v_ssl_home." 'no'", $output, $return_var);
                if ($return_var != 0) {
                    $error = implode('<br>', $output);
                    if (empty($error)) $error = 'Error: vesta did not return any output.';
                    $_SESSION['error_msg'] = $error;
                }
                $v_ssl_home = $_POST['v_ssl_home'];
                unset($output);
            }
        }
        if (( $v_ssl == 'no') && (!empty($_POST['v_ssl'])) && (empty($_SESSION['error_msg']))) {
            if ((!empty($_POST['v_ssl'])) && (empty($_POST['v_ssl_crt']))) $errors[] = 'ssl certificate';
            if ((!empty($_POST['v_ssl'])) && (empty($_POST['v_ssl_key']))) $errors[] = 'ssl key';
            if ((!empty($_POST['v_ssl'])) && (empty($_POST['v_ssl_home']))) $errors[] = 'ssl home';
            $v_ssl_home = escapeshellarg($_POST['v_ssl_home']);
            if (!empty($errors[0])) {
                foreach ($errors as $i => $error) {
                    if ( $i == 0 ) {
                        $error_msg = $error;
                    } else {
                        $error_msg = $error_msg.", ".$error;
                    }
                }
                $_SESSION['error_msg'] = "Error: field ".$error_msg." can not be blank.";
            } else {
                exec ('mktemp -d', $mktemp_output, $return_var);
                $tmpdir = $mktemp_output[0];

                // Certificate
                if (!empty($_POST['v_ssl_crt'])) {
                    $fp = fopen($tmpdir."/".$_POST['v_domain'].".crt", 'w');
                    fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_crt']));
                    fclose($fp);
                }

                // Key
                if (!empty($_POST['v_ssl_key'])) {
                    $fp = fopen($tmpdir."/".$_POST['v_domain'].".key", 'w');
                    fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_key']));
                    fclose($fp);
                }

                // CA
                if (!empty($_POST['v_ssl_ca'])) {
                    $fp = fopen($tmpdir."/".$_POST['v_domain'].".ca", 'w');
                    fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_ca']));
                    fclose($fp);
                }
                exec (VESTA_CMD."v_add_web_domain_ssl ".$user." ".$v_domain." ".$tmpdir." ".$v_ssl_home." 'no'", $output, $return_var);
                if ($return_var != 0) {
                    $error = implode('<br>', $output);
                    if (empty($error)) $error = 'Error: vesta did not return any output.';
                    $_SESSION['error_msg'] = $error;
                }
                unset($output);
                $v_ssl = 'yes';
                $restart_web = 'yes';
                $v_ssl_crt = $_POST['v_ssl_crt'];
                $v_ssl_key = $_POST['v_ssl_key'];
                $v_ssl_ca = $_POST['v_ssl_ca'];
                $v_ssl_home = $_POST['v_ssl_home'];
            }
        }

        // Web Stats
        if ((!empty($v_stats)) && ($_POST['v_stats'] == 'none') && (empty($_SESSION['error_msg']))) {
            exec (VESTA_CMD."v_delete_web_domain_stats ".$v_username." ".$v_domain, $output, $return_var);
            if ($return_var != 0) {
                $error = implode('<br>', $output);
                if (empty($error)) $error = 'Error: vesta did not return any output.';
                $_SESSION['error_msg'] = $error;
            }
            unset($output);
            $v_stats = '';
        }
        if ((!empty($v_stats)) && ($_POST['v_stats'] != $v_stats) && (empty($_SESSION['error_msg']))) {
            $v_stats = escapeshellarg($_POST['v_stats']);
            exec (VESTA_CMD."v_change_web_domain_stats ".$v_username." ".$v_domain." ".$v_stats, $output, $return_var);
            if ($return_var != 0) {
                $error = implode('<br>', $output);
                if (empty($error)) $error = 'Error: vesta did not return any output.';
                $_SESSION['error_msg'] = $error;
            }
            unset($output);
        }
        if ((empty($v_stats)) && ($_POST['v_stats'] != 'none') && (empty($_SESSION['error_msg']))) {
            $v_stats = escapeshellarg($_POST['v_stats']);
            exec (VESTA_CMD."v_add_web_domain_stats ".$v_username." ".$v_domain." ".$v_stats, $output, $return_var);
            if ($return_var != 0) {
                $error = implode('<br>', $output);
                if (empty($error)) $error = 'Error: vesta did not return any output.';
                $_SESSION['error_msg'] = $error;
            }
            unset($output);
        }

        // Web Stats Auth
        if ((!empty($v_stats_user)) && (empty($_POST['v_stats_auth'])) && (empty($_SESSION['error_msg']))) {
            exec (VESTA_CMD."v_delete_web_domain_stats_user ".$v_username." ".$v_domain, $output, $return_var);
            if ($return_var != 0) {
                $error = implode('<br>', $output);
                if (empty($error)) $error = 'Error: vesta did not return any output.';
                $_SESSION['error_msg'] = $error;
            }
            unset($output);
            $v_stats_user = '';
            $v_stats_password = '';
        }
        if ((empty($v_stats_user)) && (!empty($_POST['v_stats_auth'])) && (empty($_SESSION['error_msg']))) {
            if (empty($_POST['v_stats_user'])) $errors[] = 'stats username';
            if (empty($_POST['v_stats_password'])) $errors[] = 'stats password';
            if (!empty($errors[0])) {
                foreach ($errors as $i => $error) {
                    if ( $i == 0 ) {
                        $error_msg = $error;
                    } else {
                        $error_msg = $error_msg.", ".$error;
                    }
                }
                $_SESSION['error_msg'] = "Error: field ".$error_msg." can not be blank.";
            } else {
                $v_stats_user = escapeshellarg($_POST['v_stats_user']);
                $v_stats_password = escapeshellarg($_POST['v_stats_password']);
                exec (VESTA_CMD."v_add_web_domain_stats_user ".$v_username." ".$v_domain." ".$v_stats_user." ".$v_stats_password, $output, $return_var);
                if ($return_var != 0) {
                    $error = implode('<br>', $output);
                    if (empty($error)) $error = 'Error: vesta did not return any output.';
                    $_SESSION['error_msg'] = $error;
                }
                unset($output);
                $v_stats_password = "••••••••";
            }
        }
        if ((!empty($v_stats_user)) && (!empty($_POST['v_stats_auth'])) && (empty($_SESSION['error_msg']))) {
            if (empty($_POST['v_stats_user'])) $errors[] = 'stats user';
            if (empty($_POST['v_stats_password'])) $errors[] = 'stats password';
            if (!empty($errors[0])) {
                foreach ($errors as $i => $error) {
                    if ( $i == 0 ) {
                        $error_msg = $error;
                    } else {
                        $error_msg = $error_msg.", ".$error;
                    }
                }
                $_SESSION['error_msg'] = "Error: field ".$error_msg." can not be blank.";
            }
            if (($v_stats_user != $_POST['v_stats_user']) || ($_POST['v_stats_password'] != "••••••••" ) && (empty($_SESSION['error_msg']))) {
                $v_stats_user = escapeshellarg($_POST['v_stats_user']);
                $v_stats_password = escapeshellarg($_POST['v_stats_password']);
                exec (VESTA_CMD."v_add_web_domain_stats_user ".$v_username." ".$v_domain." ".$v_stats_user." ".$v_stats_password, $output, $return_var);
                if ($return_var != 0) {
                    $error = implode('<br>', $output);
                    if (empty($error)) $error = 'Error: vesta did not return any output.';
                    $_SESSION['error_msg'] = $error;
                }
                unset($output);
                $v_stats_password = "••••••••";
            }
        }


        // Restart web
        if (!empty($restart_web) && (empty($_SESSION['error_msg']))) {
            exec (VESTA_CMD."v_restart_web", $output, $return_var);
            if ($return_var != 0) {
                $error = implode('<br>', $output);
                if (empty($error)) $error = 'Error: vesta did not return any output.';
                $_SESSION['error_msg'] = $error;
            }
        }

        // Restart dns
        if (!empty($restart_dns) && (empty($_SESSION['error_msg']))) {
            exec (VESTA_CMD."v_restart_dns", $output, $return_var);
            if ($return_var != 0) {
                $error = implode('<br>', $output);
                if (empty($error)) $error = 'Error: vesta did not return any output.';
                $_SESSION['error_msg'] = $error;
            }
        }

        if (empty($_SESSION['error_msg'])) {
            $_SESSION['ok_msg'] = "OK: changes has been saved.";
        }

    }
    include($_SERVER['DOCUMENT_ROOT'].'/templates/admin/menu_edit_web.html');
    include($_SERVER['DOCUMENT_ROOT'].'/templates/admin/edit_web.html');
    unset($_SESSION['error_msg']);
    unset($_SESSION['ok_msg']);
}

// Footer
include($_SERVER['DOCUMENT_ROOT'].'/templates/footer.html');