hestiacp/web/edit/package/index.php

<?php
error_reporting(NULL);
ob_start();
$TAB = 'PACKAGE';

// Main include
include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");


// Check user
if ($_SESSION['user'] != 'admin') {
    header("Location: /list/user");
    exit;
}

// Check package argument
if (empty($_GET['package'])) {
    header("Location: /list/package/");
    exit;
}

// Prevent editing of default package
if ($_GET['package'] === 'default') {
    header("Location: /list/package/");
    exit;
}

// List package
$v_package = escapeshellarg($_GET['package']);
exec (HESTIA_CMD."v-list-user-package ".$v_package." 'json'", $output, $return_var);
$data = json_decode(implode('', $output), true);
unset($output);

// Parse package
$v_package = $_GET['package'];
$v_web_template = $data[$v_package]['WEB_TEMPLATE'];
$v_backend_template = $data[$v_package]['BACKEND_TEMPLATE'];
$v_proxy_template = $data[$v_package]['PROXY_TEMPLATE'];
$v_dns_template = $data[$v_package]['DNS_TEMPLATE'];
$v_web_domains = $data[$v_package]['WEB_DOMAINS'];
$v_web_aliases = $data[$v_package]['WEB_ALIASES'];
$v_dns_domains = $data[$v_package]['DNS_DOMAINS'];
$v_dns_records = $data[$v_package]['DNS_RECORDS'];
$v_mail_domains = $data[$v_package]['MAIL_DOMAINS'];
$v_mail_accounts = $data[$v_package]['MAIL_ACCOUNTS'];
$v_databases = $data[$v_package]['DATABASES'];
$v_cron_jobs = $data[$v_package]['CRON_JOBS'];
$v_disk_quota = $data[$v_package]['DISK_QUOTA'];
$v_bandwidth = $data[$v_package]['BANDWIDTH'];
$v_shell = $data[$v_package]['SHELL'];
$v_ns = $data[$v_package]['NS'];
$nameservers = explode(",", $v_ns);
$v_ns1 = $nameservers[0];
$v_ns2 = $nameservers[1];
$v_ns3 = $nameservers[2];
$v_ns4 = $nameservers[3];
$v_ns5 = $nameservers[4];
$v_ns6 = $nameservers[5];
$v_ns7 = $nameservers[6];
$v_ns8 = $nameservers[7];
$v_backups = $data[$v_package]['BACKUPS'];
$v_date = $data[$v_package]['DATE'];
$v_time = $data[$v_package]['TIME'];
$v_status =  'active';

// List web templates
exec (HESTIA_CMD."v-list-web-templates json", $output, $return_var);
$web_templates = json_decode(implode('', $output), true);
unset($output);

// List backend templates
if (!empty($_SESSION['WEB_BACKEND'])) {
    exec (HESTIA_CMD."v-list-web-templates-backend json", $output, $return_var);
    $backend_templates = json_decode(implode('', $output), true);
    unset($output);
}

// List proxy templates
if (!empty($_SESSION['PROXY_SYSTEM'])) {
    exec (HESTIA_CMD."v-list-web-templates-proxy json", $output, $return_var);
    $proxy_templates = json_decode(implode('', $output), true);
    unset($output);
}


// List dns templates
exec (HESTIA_CMD."v-list-dns-templates json", $output, $return_var);
$dns_templates = json_decode(implode('', $output), true);
unset($output);

// List shels
exec (HESTIA_CMD."v-list-sys-shells json", $output, $return_var);
$shells = json_decode(implode('', $output), true);
unset($output);

// Check POST request
if (!empty($_POST['save'])) {

    // Check token
    if ((!isset($_POST['token'])) || ($_SESSION['token'] != $_POST['token'])) {
        header('location: /login/');
        exit();
    }

    // Check empty fields
    if (empty($_POST['v_package'])) $errors[] = _('package');
    if (empty($_POST['v_web_template'])) $errors[] = _('web template');
    if (!empty($_SESSION['WEB_BACKEND'])) {
        if (empty($_POST['v_backend_template'])) $errors[] = _('backend template');
    }
    if (!empty($_SESSION['PROXY_SYSTEM'])) {
        if (empty($_POST['v_proxy_template'])) $errors[] = _('proxy template');
    }
    if (empty($_POST['v_dns_template'])) $errors[] = _('dns template');
    if (empty($_POST['v_shell'])) $errrors[] = _('shell');
    if (!isset($_POST['v_web_domains'])) $errors[] = _('web domains');
    if (!isset($_POST['v_web_aliases'])) $errors[] = _('web aliases');
    if (!isset($_POST['v_dns_domains'])) $errors[] = _('dns domains');
    if (!isset($_POST['v_dns_records'])) $errors[] = _('dns records');
    if (!isset($_POST['v_mail_domains'])) $errors[] = _('mail domains');
    if (!isset($_POST['v_mail_accounts'])) $errors[] = _('mail accounts');
    if (!isset($_POST['v_databases'])) $errors[] = _('databases');
    if (!isset($_POST['v_cron_jobs'])) $errors[] = _('cron jobs');
    if (!isset($_POST['v_backups'])) $errors[] = _('backups');
    if (!isset($_POST['v_disk_quota'])) $errors[] = _('quota');
    if (!isset($_POST['v_bandwidth'])) $errors[] = _('bandwidth');

    // Check if name server entries are blank if DNS server is installed
    if ((isset($_SESSION['DNS_SYSTEM'])) && (!empty($_SESSION['DNS_SYSTEM']))) {
        if (empty($_POST['v_ns1'])) $errors[] = _('ns1');
        if (empty($_POST['v_ns2'])) $errors[] = _('ns2');
    }

    if (!empty($errors[0])) {
        foreach ($errors as $i => $error) {
            if ( $i == 0 ) {
                $error_msg = $error;
            } else {
                $error_msg = $error_msg.", ".$error;
            }
        }
        $_SESSION['error_msg'] = _('Field "%s" can not be blank.',$error_msg);
    }

    // Protect input
    $v_package = escapeshellarg($_POST['v_package']);
    $v_web_template = escapeshellarg($_POST['v_web_template']);
    if (!empty($_SESSION['WEB_BACKEND'])) {
        $v_backend_template = escapeshellarg($_POST['v_backend_template']);
    }
    if (!empty($_SESSION['PROXY_SYSTEM'])) {
        $v_proxy_template = escapeshellarg($_POST['v_proxy_template']);
    }
    $v_dns_template = escapeshellarg($_POST['v_dns_template']);
    $v_shell = escapeshellarg($_POST['v_shell']);
    $v_web_domains = escapeshellarg($_POST['v_web_domains']);
    $v_web_aliases = escapeshellarg($_POST['v_web_aliases']);
    $v_dns_domains = escapeshellarg($_POST['v_dns_domains']);
    $v_dns_records = escapeshellarg($_POST['v_dns_records']);
    $v_mail_domains = escapeshellarg($_POST['v_mail_domains']);
    $v_mail_accounts = escapeshellarg($_POST['v_mail_accounts']);
    $v_databases = escapeshellarg($_POST['v_databases']);
    $v_cron_jobs = escapeshellarg($_POST['v_cron_jobs']);
    $v_backups = escapeshellarg($_POST['v_backups']);
    $v_disk_quota = escapeshellarg($_POST['v_disk_quota']);
    $v_bandwidth = escapeshellarg($_POST['v_bandwidth']);
    $v_ns1 = trim($_POST['v_ns1'], '.');
    $v_ns2 = trim($_POST['v_ns2'], '.');
    $v_ns3 = trim($_POST['v_ns3'], '.');
    $v_ns4 = trim($_POST['v_ns4'], '.');
    $v_ns5 = trim($_POST['v_ns5'], '.');
    $v_ns6 = trim($_POST['v_ns6'], '.');
    $v_ns7 = trim($_POST['v_ns7'], '.');
    $v_ns8 = trim($_POST['v_ns8'], '.');
    $v_ns = $v_ns1.",".$v_ns2;
    if (!empty($v_ns3)) $v_ns .= ",".$v_ns3;
    if (!empty($v_ns4)) $v_ns .= ",".$v_ns4;
    if (!empty($v_ns5)) $v_ns .= ",".$v_ns5;
    if (!empty($v_ns6)) $v_ns .= ",".$v_ns6;
    if (!empty($v_ns7)) $v_ns .= ",".$v_ns7;
    if (!empty($v_ns8)) $v_ns .= ",".$v_ns8;
    $v_ns = escapeshellarg($v_ns);
    $v_time = escapeshellarg(date('H:i:s'));
    $v_date = escapeshellarg(date('Y-m-d'));

    // Create temprorary directory
    exec ('mktemp -d', $output, $return_var);
    $tmpdir = $output[0];
    unset($output);

    // Save package file on a fs
    $pkg = "WEB_TEMPLATE=".$v_web_template."\n";
    $pkg .= "BACKEND_TEMPLATE=".$v_backend_template."\n";
    $pkg .= "PROXY_TEMPLATE=".$v_proxy_template."\n";
    $pkg .= "DNS_TEMPLATE=".$v_dns_template."\n";
    $pkg .= "WEB_DOMAINS=".$v_web_domains."\n";
    $pkg .= "WEB_ALIASES=".$v_web_aliases."\n";
    $pkg .= "DNS_DOMAINS=".$v_dns_domains."\n";
    $pkg .= "DNS_RECORDS=".$v_dns_records."\n";
    $pkg .= "MAIL_DOMAINS=".$v_mail_domains."\n";
    $pkg .= "MAIL_ACCOUNTS=".$v_mail_accounts."\n";
    $pkg .= "DATABASES=".$v_databases."\n";
    $pkg .= "CRON_JOBS=".$v_cron_jobs."\n";
    $pkg .= "DISK_QUOTA=".$v_disk_quota."\n";
    $pkg .= "BANDWIDTH=".$v_bandwidth."\n";
    $pkg .= "NS=".$v_ns."\n";
    $pkg .= "SHELL=".$v_shell."\n";
    $pkg .= "BACKUPS=".$v_backups."\n";
    $pkg .= "TIME=".$v_time."\n";
    $pkg .= "DATE=".$v_date."\n";
    $fp = fopen($tmpdir."/".$_POST['v_package'].".pkg", 'w');
    fwrite($fp, $pkg);
    fclose($fp);

    // Save changes
    exec (HESTIA_CMD."v-add-user-package ".$tmpdir." ".$v_package." 'yes'", $output, $return_var);
    check_return_code($return_var,$output);
    unset($output);

    // Remove temporary dir
    exec ('rm -rf '.$tmpdir, $output, $return_var);
    unset($output);

    // Propogate new package
    exec (HESTIA_CMD."v-update-user-package ".$v_package." 'json'", $output, $return_var);
    check_return_code($return_var,$output);
    unset($output);

    // Set success message
    if (empty($_SESSION['error_msg'])) {
        $_SESSION['ok_msg'] = _('Changes has been saved.');
    }
}


// Render page
render_page($user, $TAB, 'edit_package');

// Flush session messages
unset($_SESSION['error_msg']);
unset($_SESSION['ok_msg']);