index.php 52 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253
  1. <?php
  2. $TAB = 'SERVER';
  3. // Main include
  4. include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
  5. // Check user
  6. if ($_SESSION['userContext'] != 'admin') {
  7. header("Location: /list/user");
  8. exit;
  9. }
  10. // Get server hostname
  11. $v_hostname = exec('hostname');
  12. // List available timezones and get current one
  13. $v_timezones = list_timezones();
  14. exec(HESTIA_CMD."v-get-sys-timezone", $output, $return_var);
  15. $v_timezone = $output[0];
  16. unset($output);
  17. if ($v_timezone == 'Etc/UTC') {
  18. $v_timezone = 'UTC';
  19. }
  20. if ($v_timezone == 'Pacific/Honolulu') {
  21. $v_timezone = 'HAST';
  22. }
  23. if ($v_timezone == 'US/Aleutian') {
  24. $v_timezone = 'HADT';
  25. }
  26. if ($v_timezone == 'Etc/GMT+9') {
  27. $v_timezone = 'AKST';
  28. }
  29. if ($v_timezone == 'America/Anchorage') {
  30. $v_timezone = 'AKDT';
  31. }
  32. if ($v_timezone == 'America/Dawson_Creek') {
  33. $v_timezone = 'PST';
  34. }
  35. if ($v_timezone == 'PST8PDT') {
  36. $v_timezone = 'PDT';
  37. }
  38. if ($v_timezone == 'MST7MDT') {
  39. $v_timezone = 'MDT';
  40. }
  41. if ($v_timezone == 'Canada/Saskatchewan') {
  42. $v_timezone = 'CST';
  43. }
  44. if ($v_timezone == 'CST6CDT') {
  45. $v_timezone = 'CDT';
  46. }
  47. if ($v_timezone == 'EST5EDT') {
  48. $v_timezone = 'EDT';
  49. }
  50. if ($v_timezone == 'America/Puerto_Rico') {
  51. $v_timezone = 'AST';
  52. }
  53. if ($v_timezone == 'America/Halifax') {
  54. $v_timezone = 'ADT';
  55. }
  56. // List supported php versions
  57. exec(HESTIA_CMD."v-list-web-templates-backend json", $output, $return_var);
  58. $backend_templates = json_decode(implode('', $output), true);
  59. unset($output);
  60. $v_php_versions = [
  61. 'php-5.6',
  62. 'php-7.0',
  63. 'php-7.1',
  64. 'php-7.2',
  65. 'php-7.3',
  66. 'php-7.4',
  67. 'php-8.0',
  68. 'php-8.1',
  69. ];
  70. sort($v_php_versions);
  71. if (empty($backend_templates)) {
  72. $v_php_versions=[];
  73. }
  74. $backends_active = backendtpl_with_webdomains();
  75. $v_php_versions = array_map(function ($php_version) use ($backend_templates, $backends_active) {
  76. // Mark installed php versions
  77. if (stripos($php_version, 'php') !== 0) {
  78. return false;
  79. }
  80. $phpinfo = (object) [
  81. "name" => $php_version,
  82. "tpl" => strtoupper(str_replace('.', '_', $php_version)),
  83. "version" => str_ireplace('php-', '', $php_version),
  84. "usedby" => [],
  85. "installed" => false,
  86. "protected" => false,
  87. ];
  88. if (in_array($phpinfo->tpl, $backend_templates)) {
  89. $phpinfo->installed = true;
  90. }
  91. if (array_key_exists($phpinfo->tpl, $backends_active)) {
  92. // Prevent used php version to be removed
  93. if ($phpinfo->installed) {
  94. $phpinfo->protected = true;
  95. }
  96. $phpinfo->usedby = $backends_active[$phpinfo->tpl];
  97. }
  98. if ($phpinfo->name == DEFAULT_PHP_VERSION) {
  99. // Prevent default php version to be removed
  100. if ($phpinfo->installed) {
  101. $phpinfo->protected = true;
  102. }
  103. if (!empty($backends_active['default'])) {
  104. $phpinfo->usedby = array_merge_recursive($phpinfo->usedby, $backends_active['default']);
  105. }
  106. }
  107. return $phpinfo;
  108. }, $v_php_versions);
  109. // List languages
  110. exec(HESTIA_CMD."v-list-sys-languages json", $output, $return_var);
  111. $language = json_decode(implode('', $output), true);
  112. foreach ($language as $lang) {
  113. $languages[$lang] = translate_json($lang);
  114. }
  115. asort($languages);
  116. unset($output);
  117. // List themes
  118. exec(HESTIA_CMD."v-list-sys-themes json", $output, $return_var);
  119. $theme = json_decode(implode('', $output), true);
  120. unset($output);
  121. // List dns cluster hosts
  122. exec(HESTIA_CMD."v-list-remote-dns-hosts json", $output, $return_var);
  123. $dns_cluster = json_decode(implode('', $output), true);
  124. unset($output);
  125. if (is_array($dns_cluster)) {
  126. foreach ($dns_cluster as $key => $value) {
  127. $v_dns_cluster = 'yes';
  128. }
  129. }
  130. // List smtp relay settings
  131. if (!empty($_SESSION['SMTP_RELAY'])) {
  132. $v_smtp_relay = $_SESSION['SMTP_RELAY'];
  133. }
  134. if (!empty($_SESSION['SMTP_RELAY_HOST'])) {
  135. $v_smtp_relay_host = $_SESSION['SMTP_RELAY_HOST'];
  136. }
  137. if (!empty($_SESSION['SMTP_RELAY_PORT'])) {
  138. $v_smtp_relay_port = $_SESSION['SMTP_RELAY_PORT'];
  139. }
  140. if (!empty($_SESSION['SMTP_RELAY_USER'])) {
  141. $v_smtp_relay_user = $_SESSION['SMTP_RELAY_USER'];
  142. }
  143. // List Database hosts
  144. exec(HESTIA_CMD."v-list-database-hosts json", $output, $return_var);
  145. $db_hosts = json_decode(implode('', $output), true);
  146. unset($output);
  147. $v_mysql_hosts = array_values(array_filter($db_hosts, function ($host) {
  148. return $host['TYPE'] === 'mysql';
  149. }));
  150. $v_mysql = count($v_mysql_hosts) ? 'yes' : 'no';
  151. $v_pgsql_hosts = array_values(array_filter($db_hosts, function ($host) {
  152. return $host['TYPE'] === 'pgsql';
  153. }));
  154. $v_pgsql = count($v_pgsql_hosts) ? 'yes' : 'no';
  155. unset($db_hosts);
  156. // List backup settings
  157. $v_backup_dir = "/backup";
  158. if (!empty($_SESSION['BACKUP'])) {
  159. $v_backup_dir = $_SESSION['BACKUP'];
  160. }
  161. $v_backup_gzip = '5';
  162. if (!empty($_SESSION['BACKUP_GZIP'])) {
  163. $v_backup_gzip = $_SESSION['BACKUP_GZIP'];
  164. }
  165. $v_backup_mode = 'gzip';
  166. if (!empty($_SESSION['BACKUP_MODE'])) {
  167. $v_backup_mode = $_SESSION['BACKUP_MODE'];
  168. }
  169. $backup_types = explode(",", $_SESSION['BACKUP_SYSTEM']);
  170. foreach ($backup_types as $backup_type) {
  171. if ($backup_type == 'local') {
  172. $v_backup = 'yes';
  173. } else {
  174. exec(HESTIA_CMD."v-list-backup-host ".escapeshellarg($backup_type)." json", $output, $return_var);
  175. $v_remote_backup = json_decode(implode('', $output), true);
  176. unset($output);
  177. if (in_array($backup_type, array('ftp','sftp'))) {
  178. $v_backup_host = $v_remote_backup[$backup_type]['HOST'];
  179. $v_backup_type = $v_remote_backup[$backup_type]['TYPE'];
  180. $v_backup_username = $v_remote_backup[$backup_type]['USERNAME'];
  181. $v_backup_password = "";
  182. $v_backup_port = $v_remote_backup[$backup_type]['PORT'];
  183. $v_backup_bpath = $v_remote_backup[$backup_type]['BPATH'];
  184. $v_backup_remote_adv = "yes";
  185. } elseif (in_array($backup_type, array('b2'))) {
  186. $v_backup_bucket = $v_remote_backup[$backup_type]['BUCKET'];
  187. $v_backup_type = $v_remote_backup[$backup_type]['TYPE'];
  188. $v_backup_application_id = $v_remote_backup[$backup_type]['B2_KEY_ID'];
  189. $v_backup_application_key = '';
  190. $v_backup_remote_adv = "yes";
  191. }
  192. }
  193. }
  194. // List ssl certificate info
  195. exec(HESTIA_CMD."v-list-sys-hestia-ssl json", $output, $return_var);
  196. $ssl_str = json_decode(implode('', $output), true);
  197. unset($output);
  198. $v_ssl_crt = $ssl_str['HESTIA']['CRT'];
  199. $v_ssl_key = $ssl_str['HESTIA']['KEY'];
  200. $v_ssl_ca = $ssl_str['HESTIA']['CA'];
  201. $v_ssl_subject = $ssl_str['HESTIA']['SUBJECT'];
  202. $v_ssl_aliases = $ssl_str['HESTIA']['ALIASES'];
  203. $v_ssl_not_before = $ssl_str['HESTIA']['NOT_BEFORE'];
  204. $v_ssl_not_after = $ssl_str['HESTIA']['NOT_AFTER'];
  205. $v_ssl_signature = $ssl_str['HESTIA']['SIGNATURE'];
  206. $v_ssl_pub_key = $ssl_str['HESTIA']['PUB_KEY'];
  207. $v_ssl_issuer = $ssl_str['HESTIA']['ISSUER'];
  208. // Check POST request
  209. if (!empty($_POST['save'])) {
  210. $require_refresh = false;
  211. // Check token
  212. verify_csrf($_POST);
  213. // Change hostname
  214. if ((!empty($_POST['v_hostname'])) && ($v_hostname != $_POST['v_hostname'])) {
  215. exec(HESTIA_CMD."v-change-sys-hostname ".escapeshellarg($_POST['v_hostname']), $output, $return_var);
  216. check_return_code($return_var, $output);
  217. unset($output);
  218. $v_hostname = $_POST['v_hostname'];
  219. }
  220. // Install/remove php versions
  221. if (empty($_SESSION['error_msg'])) {
  222. if (!empty($v_php_versions)) {
  223. $post_php = $_POST['v_php_versions'];
  224. if(empty($post_php)){
  225. $post_php = array();
  226. }
  227. array_map(function ($php_version) use ($post_php) {
  228. if (array_key_exists($php_version->tpl, $post_php)) {
  229. if (!$php_version->installed) {
  230. exec(HESTIA_CMD . "v-add-web-php " . escapeshellarg($php_version->version), $output, $return_var);
  231. check_return_code($return_var, $output);
  232. unset($output);
  233. if (empty($_SESSION['error_msg'])) {
  234. $php_version->installed = true;
  235. }
  236. }
  237. } else {
  238. if ($php_version->installed && !$php_version->protected) {
  239. exec(HESTIA_CMD . "v-delete-web-php " . escapeshellarg($php_version->version), $output, $return_var);
  240. check_return_code($return_var, $output);
  241. unset($output);
  242. if (empty($_SESSION['error_msg'])) {
  243. $php_version->installed = false;
  244. }
  245. }
  246. }
  247. return $php_version;
  248. }, $v_php_versions);
  249. }
  250. }
  251. if (empty($_SESSION['error_msg'])) {
  252. if($_POST['v_php_default_version'] != DEFAULT_PHP_VERSION) {
  253. exec(HESTIA_CMD . "v-change-sys-php " . escapeshellarg($_POST['v_php_default_version']), $output, $return_var);
  254. check_return_code($return_var, $output);
  255. unset($output);
  256. }
  257. }
  258. // Change timezone
  259. if (empty($_SESSION['error_msg'])) {
  260. if (!empty($_POST['v_timezone'])) {
  261. $v_tz = $_POST['v_timezone'];
  262. if ($v_tz == 'UTC') {
  263. $v_tz = 'Etc/UTC';
  264. }
  265. if ($v_tz == 'HAST') {
  266. $v_tz = 'Pacific/Honolulu';
  267. }
  268. if ($v_tz == 'HADT') {
  269. $v_tz = 'US/Aleutian';
  270. }
  271. if ($v_tz == 'AKST') {
  272. $v_tz = 'Etc/GMT+9';
  273. }
  274. if ($v_tz == 'AKDT') {
  275. $v_tz = 'America/Anchorage';
  276. }
  277. if ($v_tz == 'PST') {
  278. $v_tz = 'America/Dawson_Creek';
  279. }
  280. if ($v_tz == 'PDT') {
  281. $v_tz = 'PST8PDT';
  282. }
  283. if ($v_tz == 'MDT') {
  284. $v_tz = 'MST7MDT';
  285. }
  286. if ($v_tz == 'CST') {
  287. $v_tz = 'Canada/Saskatchewan';
  288. }
  289. if ($v_tz == 'CDT') {
  290. $v_tz = 'CST6CDT';
  291. }
  292. if ($v_tz == 'EDT') {
  293. $v_tz = 'EST5EDT';
  294. }
  295. if ($v_tz == 'AST') {
  296. $v_tz = 'America/Puerto_Rico';
  297. }
  298. if ($v_tz == 'ADT') {
  299. $v_tz = 'America/Halifax';
  300. }
  301. if ($v_timezone != $v_tz) {
  302. exec(HESTIA_CMD."v-change-sys-timezone ".escapeshellarg($v_tz), $output, $return_var);
  303. check_return_code($return_var, $output);
  304. $v_timezone = $v_tz;
  305. unset($output);
  306. }
  307. }
  308. }
  309. // Change default language
  310. if (empty($_SESSION['error_msg'])) {
  311. if ((!empty($_POST['v_language'])) && ($_SESSION['LANGUAGE'] != $_POST['v_language'])) {
  312. if (isset($_POST['v_language_update'])) {
  313. exec(HESTIA_CMD."v-change-sys-language ".escapeshellarg($_POST['v_language'])." yes", $output, $return_var);
  314. if (empty($_SESSION['error_msg'])) {
  315. $_SESSION['LANGUAGE'] = $_POST['v_language'];
  316. }
  317. }
  318. exec(HESTIA_CMD."v-change-sys-language ".escapeshellarg($_POST['v_language']), $output, $return_var);
  319. check_return_code($return_var, $output);
  320. unset($output);
  321. if (empty($_SESSION['error_msg'])) {
  322. $_SESSION['LANGUAGE'] = $_POST['v_language'];
  323. }
  324. }
  325. }
  326. // Update theme
  327. if (empty($_SESSION['error_msg'])) {
  328. if ($_POST['v_theme'] != $_SESSION['THEME']) {
  329. exec(HESTIA_CMD."v-change-sys-config-value THEME ".escapeshellarg($_POST['v_theme']), $output, $return_var);
  330. check_return_code($return_var, $output);
  331. unset($output);
  332. }
  333. }
  334. // Update debug mode status
  335. if (empty($_SESSION['error_msg'])) {
  336. if ($_POST['v_debug_mode'] == 'on') {
  337. $_POST['v_debug_mode'] = 'true';
  338. } else {
  339. $_POST['v_debug_mode'] = 'false';
  340. }
  341. if ($_POST['v_debug_mode'] != $_SESSION['DEBUG_MODE']) {
  342. exec(HESTIA_CMD."v-change-sys-config-value DEBUG_MODE ".escapeshellarg($_POST['v_debug_mode']), $output, $return_var);
  343. check_return_code($return_var, $output);
  344. unset($output);
  345. $v_debug_mode_adv = 'yes';
  346. }
  347. }
  348. // Enable/Disable Quick App Installer
  349. if (empty($_SESSION['error_msg'])) {
  350. if ($_POST['v_plugin_app_installer'] != $_SESSION['PLUGIN_APP_INSTALLER']) {
  351. if ($_POST['v_plugin_app_installer'] == 'true') {
  352. $_POST['v_plugin_app_installer'] = 'true';
  353. } else {
  354. $_POST['v_plugin_app_installer'] = 'false';
  355. }
  356. exec(HESTIA_CMD."v-change-sys-config-value PLUGIN_APP_INSTALLER ".escapeshellarg($_POST['v_plugin_app_installer']), $output, $return_var);
  357. check_return_code($return_var, $output);
  358. unset($output);
  359. }
  360. }
  361. // Update experimental features status
  362. if (empty($_SESSION['error_msg'])) {
  363. if ($_POST['v_experimental_features'] == 'on') {
  364. $_POST['v_experimental_features'] = 'true';
  365. } else {
  366. $_POST['v_experimental_features'] = 'false';
  367. }
  368. if ($_POST['v_experimental_features'] != $_SESSION['POLICY_SYSTEM_ENABLE_BACON']) {
  369. exec(HESTIA_CMD."v-change-sys-config-value POLICY_SYSTEM_ENABLE_BACON ".escapeshellarg($_POST['v_experimental_features']), $output, $return_var);
  370. check_return_code($return_var, $output);
  371. unset($output);
  372. $v_debug_mode_adv = 'yes';
  373. }
  374. if (($_POST['v_policy_user_view_suspended'] != $_SESSION['POLICY_SYSTEM_ENABLE_BACON']) && $_POST['v_experimental_features'] == "false" ) {
  375. //disable preview mode
  376. exec(HESTIA_CMD."v-change-sys-config-value POLICY_USER_VIEW_SUSPENDED ".escapeshellarg($_POST['v_policy_user_view_suspended']), $output, $return_var);
  377. check_return_code($return_var, $output);
  378. unset($output);
  379. }
  380. }
  381. // Set File Manager support
  382. if (empty($_SESSION['error_msg'])) {
  383. if ((!empty($_POST['v_filemanager'])) && ($_SESSION['FILE_MANAGER'] != $_POST['v_filemanager'])) {
  384. if ($_POST['v_filemanager'] == 'true') {
  385. exec(HESTIA_CMD."v-add-sys-filemanager", $output, $return_var);
  386. check_return_code($return_var, $output);
  387. unset($output);
  388. if (empty($_SESSION['error_msg'])) {
  389. $_SESSION['FILE_MANAGER'] = 'true';
  390. }
  391. } else {
  392. exec(HESTIA_CMD."v-delete-sys-filemanager", $output, $return_var);
  393. check_return_code($return_var, $output);
  394. unset($output);
  395. if (empty($_SESSION['error_msg'])) {
  396. $_SESSION['FILE_MANAGER'] = 'false';
  397. }
  398. }
  399. }
  400. }
  401. // Set phpMyAdmin SSO key
  402. if (empty($_SESSION['error_msg'])) {
  403. if (!empty($_POST['v_phpmyadmin_key'])) {
  404. if ($_POST['v_phpmyadmin_key'] == 'yes' && $_SESSION['PHPMYADMIN_KEY'] == '') {
  405. exec(HESTIA_CMD."v-add-sys-pma-sso quiet", $output, $return_var);
  406. check_return_code($return_var, $output);
  407. unset($output);
  408. if (empty($_SESSION['error_msg'])) {
  409. $_SESSION['PHPMYADMIN_KEY'] != "";
  410. }
  411. } elseif ($_POST['v_phpmyadmin_key'] == 'no' && $_SESSION['PHPMYADMIN_KEY'] != '') {
  412. exec(HESTIA_CMD."v-delete-sys-pma-sso quiet", $output, $return_var);
  413. check_return_code($return_var, $output);
  414. unset($output);
  415. if (empty($_SESSION['error_msg'])) {
  416. $_SESSION['PHPMYADMIN_KEY'] = '';
  417. }
  418. }
  419. }
  420. }
  421. // Set disk_quota support
  422. if (empty($_SESSION['error_msg'])) {
  423. if ((!empty($_POST['v_quota'])) && ($_SESSION['DISK_QUOTA'] != $_POST['v_quota'])) {
  424. if ($_POST['v_quota'] == 'yes') {
  425. exec(HESTIA_CMD."v-add-sys-quota", $output, $return_var);
  426. check_return_code($return_var, $output);
  427. unset($output);
  428. if (empty($_SESSION['error_msg'])) {
  429. $_SESSION['DISK_QUOTA'] = 'yes';
  430. }
  431. } else {
  432. exec(HESTIA_CMD."v-delete-sys-quota", $output, $return_var);
  433. check_return_code($return_var, $output);
  434. unset($output);
  435. if (empty($_SESSION['error_msg'])) {
  436. $_SESSION['DISK_QUOTA'] = 'no';
  437. }
  438. }
  439. }
  440. }
  441. // Set firewall support
  442. if (empty($_SESSION['error_msg'])) {
  443. if ($_SESSION['FIREWALL_SYSTEM'] == 'iptables') {
  444. $v_firewall = 'yes';
  445. }
  446. if ($_SESSION['FIREWALL_SYSTEM'] != 'iptables') {
  447. $v_firewall = 'no';
  448. }
  449. if ((!empty($_POST['v_firewall'])) && ($v_firewall != $_POST['v_firewall'])) {
  450. if ($_POST['v_firewall'] == 'yes') {
  451. exec(HESTIA_CMD."v-add-sys-firewall", $output, $return_var);
  452. check_return_code($return_var, $output);
  453. unset($output);
  454. if (empty($_SESSION['error_msg'])) {
  455. $_SESSION['FIREWALL_SYSTEM'] = 'iptables';
  456. }
  457. } else {
  458. exec(HESTIA_CMD."v-delete-sys-firewall", $output, $return_var);
  459. check_return_code($return_var, $output);
  460. unset($output);
  461. if (empty($_SESSION['error_msg'])) {
  462. $_SESSION['FIREWALL_SYSTEM'] = '';
  463. }
  464. }
  465. }
  466. }
  467. // Update mysql pasword
  468. if (empty($_SESSION['error_msg'])) {
  469. if (!empty($_POST['v_mysql_password'])) {
  470. exec(HESTIA_CMD."v-change-database-host-password mysql localhost root ".escapeshellarg($_POST['v_mysql_password']), $output, $return_var);
  471. check_return_code($return_var, $output);
  472. unset($output);
  473. $v_db_adv = 'yes';
  474. }
  475. }
  476. // Update webmail url
  477. if (empty($_SESSION['error_msg'])) {
  478. if ($_POST['v_webmail_alias'] != $_SESSION['WEBMAIL_ALIAS']) {
  479. exec(HESTIA_CMD."v-change-sys-webmail ".escapeshellarg($_POST['v_webmail_alias']), $output, $return_var);
  480. check_return_code($return_var, $output);
  481. unset($output);
  482. $v_mail_adv = 'yes';
  483. }
  484. }
  485. // Update system wide smtp relay
  486. if (empty($_SESSION['error_msg'])) {
  487. if (isset($_POST['v_smtp_relay']) && (!empty($_POST['v_smtp_relay_host'])) && (!empty($_POST['v_smtp_relay_user']))) {
  488. if (($_POST['v_smtp_relay_host'] != $v_smtp_relay_host) ||
  489. ($_POST['v_smtp_relay_user'] != $v_smtp_relay_user) ||
  490. ($_POST['v_smtp_relay_port'] != $v_smtp_relay_port) ||
  491. (!empty($_POST['v_smtp_relay_pass']))) {
  492. if (!empty($_POST['v_smtp_relay_pass'])) {
  493. $v_smtp_relay = true;
  494. $v_smtp_relay_host = escapeshellarg($_POST['v_smtp_relay_host']);
  495. $v_smtp_relay_user = escapeshellarg($_POST['v_smtp_relay_user']);
  496. $v_smtp_relay_pass = escapeshellarg($_POST['v_smtp_relay_pass']);
  497. if (!empty($_POST['v_smtp_relay_port'])) {
  498. $v_smtp_relay_port = escapeshellarg($_POST['v_smtp_relay_port']);
  499. } else {
  500. $v_smtp_relay_port = '587';
  501. }
  502. exec(HESTIA_CMD."v-add-sys-smtp-relay ".$v_smtp_relay_host." ".$v_smtp_relay_user." ".$v_smtp_relay_pass." ".$v_smtp_relay_port, $output, $return_var);
  503. check_return_code($return_var, $output);
  504. unset($output);
  505. } else {
  506. $_SESSION['error_msg'] = _('SMTP Relay Password is required');
  507. }
  508. }
  509. }
  510. if ((!isset($_POST['v_smtp_relay'])) && ($v_smtp_relay == true)) {
  511. $v_smtp_relay = false;
  512. $v_smtp_relay_host = $v_smtp_relay_user = $v_smtp_relay_pass = $v_smtp_relay_port = '';
  513. exec(HESTIA_CMD."v-delete-sys-smtp-relay", $output, $return_var);
  514. check_return_code($return_var, $output);
  515. unset($output);
  516. }
  517. }
  518. // Update phpMyAdmin url
  519. if (empty($_SESSION['error_msg'])) {
  520. if ($_POST['v_mysql_url'] != $_SESSION['DB_PMA_ALIAS']) {
  521. exec(HESTIA_CMD."v-change-sys-db-alias pma ".escapeshellarg($_POST['v_mysql_url']), $output, $return_var);
  522. check_return_code($return_var, $output);
  523. unset($output);
  524. $v_db_adv = 'yes';
  525. }
  526. }
  527. // Update phpPgAdmin url
  528. if (empty($_SESSION['error_msg'])) {
  529. if ($_POST['v_pgsql_url'] != $_SESSION['DB_PGA_ALIAS']) {
  530. exec(HESTIA_CMD."v-change-sys-db-alias pga ".escapeshellarg($_POST['v_pgsql_url']), $output, $return_var);
  531. check_return_code($return_var, $output);
  532. unset($output);
  533. $v_db_adv = 'yes';
  534. }
  535. }
  536. // Update release branch
  537. if (empty($_SESSION['error_msg'])) {
  538. if ($_POST['v_release_branch'] != $_SESSION['RELEASE_BRANCH']) {
  539. exec(HESTIA_CMD."v-change-sys-release ".escapeshellarg($_POST['v_release_branch']), $output, $return_var);
  540. check_return_code($return_var, $output);
  541. unset($output);
  542. $v_release_adv = 'yes';
  543. }
  544. }
  545. // Update send notification setting
  546. if (empty($_SESSION['error_msg'])) {
  547. if ($_SESSION['UPGRADE_SEND_EMAIL'] == 'true') {
  548. $ugrade_send_mail = 'on';
  549. } else {
  550. $ugrade_send_mail = '';
  551. }
  552. if ($_POST['v_upgrade_send_notification_email'] != $ugrade_send_mail) {
  553. if ($_POST['v_upgrade_send_notification_email'] == 'on') {
  554. $_POST['v_upgrade_send_notification_email'] = 'true';
  555. } else {
  556. $_POST['v_upgrade_send_notification_email'] = 'false';
  557. }
  558. exec(HESTIA_CMD."v-change-sys-config-value UPGRADE_SEND_EMAIL ".escapeshellarg($_POST['v_upgrade_send_notification_email']), $output, $return_var);
  559. check_return_code($return_var, $output);
  560. unset($output);
  561. $v_upgrade_notification_adv = 'yes';
  562. }
  563. }
  564. // Update send log by email setting
  565. if (empty($_SESSION['error_msg'])) {
  566. if ($_SESSION['UPGRADE_SEND_EMAIL_LOG'] == 'true') {
  567. $send_email_log = 'on';
  568. } else {
  569. $send_email_log = '';
  570. }
  571. if ($_POST['v_upgrade_send_email_log'] != $send_email_log) {
  572. if ($_POST['v_upgrade_send_email_log'] == 'on') {
  573. $_POST['v_upgrade_send_email_log'] = 'true';
  574. } else {
  575. $_POST['v_upgrade_send_email_log'] = 'false';
  576. }
  577. exec(HESTIA_CMD."v-change-sys-config-value UPGRADE_SEND_EMAIL_LOG ".escapeshellarg($_POST['v_upgrade_send_email_log']), $output, $return_var);
  578. check_return_code($return_var, $output);
  579. unset($output);
  580. $v_upgrade_send_log_adv = 'yes';
  581. }
  582. }
  583. // Disable local backup
  584. if (empty($_SESSION['error_msg'])) {
  585. if (($_POST['v_backup'] == 'no') && ($v_backup == 'yes')) {
  586. exec(HESTIA_CMD."v-delete-backup-host local", $output, $return_var);
  587. check_return_code($return_var, $output);
  588. unset($output);
  589. if (empty($_SESSION['error_msg'])) {
  590. $v_backup = 'no';
  591. }
  592. $v_backup_adv = 'yes';
  593. }
  594. }
  595. // Enable local backups
  596. if (empty($_SESSION['error_msg'])) {
  597. if (($_POST['v_backup'] == 'yes') && ($v_backup != 'yes')) {
  598. exec(HESTIA_CMD."v-add-backup-host local", $output, $return_var);
  599. check_return_code($return_var, $output);
  600. unset($output);
  601. if (empty($_SESSION['error_msg'])) {
  602. $v_backup = 'yes';
  603. }
  604. $v_backup_adv = 'yes';
  605. }
  606. }
  607. // Change backup gzip level
  608. if (empty($_SESSION['error_msg'])) {
  609. if ($_POST['v_backup_gzip'] != $v_backup_gzip) {
  610. if ($_POST['v_backup_mode'] == 'gzip') {
  611. $_POST['v_backup_gzip'] = 9;
  612. }
  613. exec(HESTIA_CMD."v-change-sys-config-value BACKUP_GZIP ".escapeshellarg($_POST['v_backup_gzip']), $output, $return_var);
  614. check_return_code($return_var, $output);
  615. unset($output);
  616. if (empty($_SESSION['error_msg'])) {
  617. $v_backup_gzip = $_POST['v_backup_gzip'];
  618. }
  619. $v_backup_adv = 'yes';
  620. }
  621. }
  622. // Change backup mode
  623. if (empty($_SESSION['error_msg'])) {
  624. if ($_POST['v_backup_mode'] != $v_backup_mode) {
  625. exec(HESTIA_CMD."v-change-sys-config-value BACKUP_MODE ".escapeshellarg($_POST['v_backup_mode']), $output, $return_var);
  626. check_return_code($return_var, $output);
  627. unset($output);
  628. if (empty($_SESSION['error_msg'])) {
  629. $v_backup_mode = $_POST['v_backup_mode'];
  630. }
  631. $v_backup_adv = 'yes';
  632. if ($_POST['v_backup_mode'] == 'gzip') {
  633. $_POST['v_backup_gzip'] = 9;
  634. if (empty($_SESSION['error_msg'])) {
  635. $v_backup_gzip = $_POST['v_backup_gzip'];
  636. }
  637. exec(HESTIA_CMD."v-change-sys-config-value BACKUP_GZIP ".escapeshellarg($_POST['v_backup_gzip']), $output, $return_var);
  638. }
  639. }
  640. }
  641. // Change backup path
  642. if (empty($_SESSION['error_msg'])) {
  643. if ($_POST['v_backup_dir'] != $v_backup_dir) {
  644. /*
  645. See #1655
  646. exec (HESTIA_CMD."v-change-sys-config-value BACKUP ".escapeshellarg($_POST['v_backup_dir']), $output, $return_var);
  647. check_return_code($return_var,$output);
  648. unset($output);
  649. */
  650. if (empty($_SESSION['error_msg'])) {
  651. $v_backup_dir = $_POST['v_backup_dir'];
  652. }
  653. #$v_backup_adv = 'yes';
  654. }
  655. }
  656. // Add remote backup host
  657. if (empty($_SESSION['error_msg'])) {
  658. if ((empty($v_backup_host) && empty($v_backup_bucket) && ((!empty($_POST['v_backup_host'])) || !empty($_POST['v_backup_bucket'])))) {
  659. if (in_array($_POST['v_backup_type'], array('ftp','sftp'))) {
  660. $v_backup_host = escapeshellarg($_POST['v_backup_host']);
  661. $v_backup_port = escapeshellarg($_POST['v_backup_port']);
  662. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  663. $v_backup_username = escapeshellarg($_POST['v_backup_username']);
  664. $v_backup_password = escapeshellcmd($_POST['v_backup_password']);
  665. $v_backup_bpath = escapeshellarg($_POST['v_backup_bpath']);
  666. exec(HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_host ." ". $v_backup_username ." ". $v_backup_password ." ". $v_backup_bpath." ".$v_backup_port, $output, $return_var);
  667. check_return_code($return_var, $output);
  668. unset($output);
  669. if (empty($_SESSION['error_msg'])) {
  670. $v_backup_host = $_POST['v_backup_host'];
  671. }
  672. if (empty($_SESSION['error_msg'])) {
  673. $v_backup_type = $_POST['v_backup_type'];
  674. }
  675. if (empty($_SESSION['error_msg'])) {
  676. $v_backup_username = $_POST['v_backup_username'];
  677. }
  678. if (empty($_SESSION['error_msg'])) {
  679. $v_backup_password = $_POST['v_backup_password'];
  680. }
  681. if (empty($_SESSION['error_msg'])) {
  682. $v_backup_bpath = $_POST['v_backup_bpath'];
  683. }
  684. if (empty($_SESSION['error_msg'])) {
  685. $v_backup_port = $_POST['v_backup_port'];
  686. }
  687. $v_backup_new = 'yes';
  688. $v_backup_adv = 'yes';
  689. $v_backup_remote_adv = 'yes';
  690. } elseif (in_array($_POST['v_backup_type'], array('b2'))) {
  691. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  692. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  693. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  694. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  695. exec(HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_bucket ." ". $v_backup_application_id ." ". $v_backup_application_key, $output, $return_var);
  696. check_return_code($return_var, $output);
  697. unset($output);
  698. if (empty($_SESSION['error_msg'])) {
  699. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  700. }
  701. if (empty($_SESSION['error_msg'])) {
  702. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  703. }
  704. if (empty($_SESSION['error_msg'])) {
  705. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  706. }
  707. $v_backup_new = 'yes';
  708. $v_backup_adv = 'yes';
  709. $v_backup_remote_adv = 'yes';
  710. }
  711. }
  712. }
  713. // Change remote backup host type
  714. if (empty($_SESSION['error_msg'])) {
  715. if ((!empty($_POST['v_backup_host'])) && ($_POST['v_backup_type'] != $v_backup_type)) {
  716. exec(HESTIA_CMD."v-delete-backup-host " . escapeshellarg($v_backup_type), $output, $return_var);
  717. unset($output);
  718. if (in_array($_POST['v_backup_type'], array('ftp','sftp'))) {
  719. $v_backup_host = escapeshellarg($_POST['v_backup_host']);
  720. $v_backup_port = escapeshellarg($_POST['v_backup_port']);
  721. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  722. $v_backup_username = escapeshellarg($_POST['v_backup_username']);
  723. $v_backup_password = escapeshellcmd($_POST['v_backup_password']);
  724. $v_backup_bpath = escapeshellarg($_POST['v_backup_bpath']);
  725. exec(HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_host ." ". $v_backup_username ." ". $v_backup_password ." ". $v_backup_bpath." ".$v_backup_port, $output, $return_var);
  726. check_return_code($return_var, $output);
  727. unset($output);
  728. if (empty($_SESSION['error_msg'])) {
  729. $v_backup_host = $_POST['v_backup_host'];
  730. }
  731. if (empty($_SESSION['error_msg'])) {
  732. $v_backup_type = $_POST['v_backup_type'];
  733. }
  734. if (empty($_SESSION['error_msg'])) {
  735. $v_backup_username = $_POST['v_backup_username'];
  736. }
  737. if (empty($_SESSION['error_msg'])) {
  738. $v_backup_password = $_POST['v_backup_password'];
  739. }
  740. if (empty($_SESSION['error_msg'])) {
  741. $v_backup_bpath = $_POST['v_backup_bpath'];
  742. }
  743. if (empty($_SESSION['error_msg'])) {
  744. $v_backup_port = $_POST['v_backup_port'];
  745. }
  746. $v_backup_adv = 'yes';
  747. $v_backup_remote_adv = 'yes';
  748. } elseif (in_array($_POST['v_backup_type'], array('b2'))) {
  749. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  750. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  751. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  752. exec(HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_bucket ." ". $v_backup_application_id ." ". $v_backup_application_key, $output, $return_var);
  753. check_return_code($return_var, $output);
  754. unset($output);
  755. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  756. if (empty($_SESSION['error_msg'])) {
  757. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  758. }
  759. if (empty($_SESSION['error_msg'])) {
  760. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  761. }
  762. if (empty($_SESSION['error_msg'])) {
  763. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  764. }
  765. $v_backup_adv = 'yes';
  766. $v_backup_remote_adv = 'yes';
  767. }
  768. }
  769. }
  770. // Change remote backup host
  771. if (empty($_SESSION['error_msg'])) {
  772. if ((!empty($_POST['v_backup_host'])) && ($_POST['v_backup_type'] == $v_backup_type) && (!isset($v_backup_new))) {
  773. if (in_array($_POST['v_backup_type'], array('ftp','sftp'))) {
  774. if (($_POST['v_backup_host'] != $v_backup_host) || ($_POST['v_backup_username'] != $v_backup_username) || ($_POST['v_backup_password'] != $v_backup_password) || ($_POST['v_backup_bpath'] != $v_backup_bpath || $_POST['v_backup_port'] != $v_backup_port)) {
  775. $v_backup_host = escapeshellarg($_POST['v_backup_host']);
  776. $v_backup_port = escapeshellarg($_POST['v_backup_port']);
  777. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  778. $v_backup_username = escapeshellarg($_POST['v_backup_username']);
  779. $v_backup_password = escapeshellcmd($_POST['v_backup_password']);
  780. $v_backup_bpath = escapeshellarg($_POST['v_backup_bpath']);
  781. exec(HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_host ." ". $v_backup_username ." ". $v_backup_password ." ". $v_backup_bpath." ".$v_backup_port, $output, $return_var);
  782. check_return_code($return_var, $output);
  783. unset($output);
  784. if (empty($_SESSION['error_msg'])) {
  785. $v_backup_host = $_POST['v_backup_host'];
  786. }
  787. if (empty($_SESSION['error_msg'])) {
  788. $v_backup_type = $_POST['v_backup_type'];
  789. }
  790. if (empty($_SESSION['error_msg'])) {
  791. $v_backup_username = $_POST['v_backup_username'];
  792. }
  793. if (empty($_SESSION['error_msg'])) {
  794. $v_backup_password = $_POST['v_backup_password'];
  795. }
  796. if (empty($_SESSION['error_msg'])) {
  797. $v_backup_bpath = $_POST['v_backup_bpath'];
  798. }
  799. if (empty($_SESSION['error_msg'])) {
  800. $v_backup_port = $_POST['v_backup_port'];
  801. }
  802. $v_backup_adv = 'yes';
  803. $v_backup_remote_adv = 'yes';
  804. }
  805. } elseif (in_array($_POST['v_backup_type'], array('b2'))) {
  806. if (($_POST['v_backup_bucket'] != $v_backup_bucket) || ($_POST['v_backup_application_key'] != $v_backup_application_key) || ($_POST['v_backup_application_id'] != $v_backup_application_id)) {
  807. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  808. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  809. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  810. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  811. exec(HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_bucket ." ". $v_backup_application_id ." ". $v_backup_application_key, $output, $return_var);
  812. check_return_code($return_var, $output);
  813. unset($output);
  814. if (empty($_SESSION['error_msg'])) {
  815. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  816. }
  817. if (empty($_SESSION['error_msg'])) {
  818. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  819. }
  820. if (empty($_SESSION['error_msg'])) {
  821. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  822. }
  823. $v_backup_adv = 'yes';
  824. $v_backup_remote_adv = 'yes';
  825. }
  826. }
  827. }
  828. }
  829. // Delete remote backup host
  830. if (empty($_SESSION['error_msg'])) {
  831. if (empty($_POST['v_backup_remote_adv']) && isset($v_backup_remote_adv)) {
  832. exec(HESTIA_CMD."v-delete-backup-host ".escapeshellarg($v_backup_type), $output, $return_var);
  833. check_return_code($return_var, $output);
  834. unset($output);
  835. if (empty($_SESSION['error_msg'])) {
  836. $v_backup_host = '';
  837. }
  838. if (empty($_SESSION['error_msg'])) {
  839. $v_backup_type = '';
  840. }
  841. if (empty($_SESSION['error_msg'])) {
  842. $v_backup_username = '';
  843. }
  844. if (empty($_SESSION['error_msg'])) {
  845. $v_backup_password = '';
  846. }
  847. if (empty($_SESSION['error_msg'])) {
  848. $v_backup_bpath = '';
  849. }
  850. if (empty($_SESSION['error_msg'])) {
  851. $v_backup_bucket = '';
  852. }
  853. if (empty($_SESSION['error_msg'])) {
  854. $v_backup_application_id = '';
  855. }
  856. if (empty($_SESSION['error_msg'])) {
  857. $v_backup_application_key = '';
  858. }
  859. $v_backup_adv = '';
  860. $v_backup_remote_adv = '';
  861. }
  862. }
  863. // Change INACTIVE_SESSION_TIMEOUT
  864. if (empty($_SESSION['error_msg'])) {
  865. if ($_POST['v_inactive_session_timeout'] != $_SESSION['INACTIVE_SESSION_TIMEOUT']) {
  866. if ($_POST['v_inactive_session_timeout'] < 1) {
  867. $_SESSION['error_msg'] = _('Inactive session timeout can not lower than 1 minute');
  868. } else {
  869. exec(HESTIA_CMD."v-change-sys-config-value INACTIVE_SESSION_TIMEOUT ".escapeshellarg($_POST['v_inactive_session_timeout']), $output, $return_var);
  870. check_return_code($return_var, $output);
  871. unset($output);
  872. if (empty($_SESSION['error_msg'])) {
  873. $v_inactive_session_timeout = $_POST['v_inactive_session_timeout'];
  874. }
  875. }
  876. $v_security_adv = 'yes';
  877. }
  878. }
  879. // Change POLICY_CSRF_STRICTNESS
  880. if (empty($_SESSION['error_msg'])) {
  881. if ($_POST['v_policy_csrf_strictness'] != $_SESSION['POLICY_CSRF_STRICTNESS']) {
  882. exec(HESTIA_CMD."v-change-sys-config-value POLICY_CSRF_STRICTNESS ".escapeshellarg($_POST['v_policy_csrf_strictness']), $output, $return_var);
  883. check_return_code($return_var, $output);
  884. unset($output);
  885. if (empty($_SESSION['error_msg'])) {
  886. $v_policy_csrf_strictness = $_POST['v_inactive_session_timeout'];
  887. }
  888. $v_security_adv = 'yes';
  889. }
  890. }
  891. // Change ENFORCE_SUBDOMAIN_OWNERSHIP
  892. if (empty($_SESSION['error_msg'])) {
  893. if ($_POST['v_enforce_subdomain_ownership'] != $_SESSION['ENFORCE_SUBDOMAIN_OWNERSHIP']) {
  894. exec(HESTIA_CMD."v-change-sys-config-value ENFORCE_SUBDOMAIN_OWNERSHIP ".escapeshellarg($_POST['v_enforce_subdomain_ownership']), $output, $return_var);
  895. check_return_code($return_var, $output);
  896. unset($output);
  897. if (empty($_SESSION['error_msg'])) {
  898. $v_enforce_subdomain_ownership = $_POST['v_enforce_subdomain_ownership'];
  899. }
  900. $v_security_adv = 'yes';
  901. }
  902. }
  903. // Change POLICY_USER_EDIT_DETAILS
  904. if (empty($_SESSION['error_msg'])) {
  905. if ($_POST['v_policy_user_edit_details'] != $_SESSION['POLICY_USER_EDIT_DETAILS']) {
  906. exec(HESTIA_CMD."v-change-sys-config-value POLICY_USER_EDIT_DETAILS ".escapeshellarg($_POST['v_policy_user_edit_details']), $output, $return_var);
  907. check_return_code($return_var, $output);
  908. unset($output);
  909. if (empty($_SESSION['error_msg'])) {
  910. $v_policy_user_edit_details = $_POST['v_policy_user_edit_details'];
  911. }
  912. $v_security_adv = 'yes';
  913. }
  914. }
  915. // Change POLICY_USER_EDIT_WEB_TEMPLATES
  916. if (empty($_SESSION['error_msg'])) {
  917. if ($_POST['v_policy_user_edit_web_templates'] != $_SESSION['POLICY_USER_EDIT_WEB_TEMPLATES']) {
  918. exec(HESTIA_CMD."v-change-sys-config-value POLICY_USER_EDIT_WEB_TEMPLATES ".escapeshellarg($_POST['v_policy_user_edit_web_templates']), $output, $return_var);
  919. check_return_code($return_var, $output);
  920. unset($output);
  921. if (empty($_SESSION['error_msg'])) {
  922. $v_policy_user_edit_details = $_POST['v_policy_user_edit_web_templates'];
  923. }
  924. $v_security_adv = 'yes';
  925. }
  926. }
  927. // Change POLICY_USER_EDIT_DNS_TEMPLATES
  928. if (empty($_SESSION['error_msg'])) {
  929. if ($_POST['v_policy_user_edit_dns_templates'] != $_SESSION['POLICY_USER_EDIT_DNS_TEMPLATES']) {
  930. exec(HESTIA_CMD."v-change-sys-config-value POLICY_USER_EDIT_DNS_TEMPLATES ".escapeshellarg($_POST['v_policy_user_edit_dns_templates']), $output, $return_var);
  931. check_return_code($return_var, $output);
  932. unset($output);
  933. if (empty($_SESSION['error_msg'])) {
  934. $v_policy_user_edit_details = $_POST['v_policy_user_edit_dns_templates'];
  935. }
  936. $v_security_adv = 'yes';
  937. }
  938. }
  939. // Change POLICY_USER_VIEW_LOGS
  940. if (empty($_SESSION['error_msg'])) {
  941. if ($_POST['v_policy_user_view_logs'] != $_SESSION['POLICY_USER_VIEW_LOGS']) {
  942. exec(HESTIA_CMD."v-change-sys-config-value POLICY_USER_VIEW_LOGS ".escapeshellarg($_POST['v_policy_user_view_logs']), $output, $return_var);
  943. check_return_code($return_var, $output);
  944. unset($output);
  945. if (empty($_SESSION['error_msg'])) {
  946. $v_policy_user_view_logs = $_POST['v_policy_user_view_logs'];
  947. }
  948. $v_security_adv = 'yes';
  949. }
  950. }
  951. // Change POLICY_USER_DELETE_LOGS
  952. if (empty($_SESSION['error_msg'])) {
  953. if ($_POST['v_policy_user_delete_logs'] != $_SESSION['POLICY_USER_DELETE_LOGS']) {
  954. exec(HESTIA_CMD."v-change-sys-config-value POLICY_USER_DELETE_LOGS ".escapeshellarg($_POST['v_policy_user_delete_logs']), $output, $return_var);
  955. check_return_code($return_var, $output);
  956. unset($output);
  957. if (empty($_SESSION['error_msg'])) {
  958. $v_policy_user_delete_logs = $_POST['v_policy_user_delete_logs'];
  959. }
  960. $v_security_adv = 'yes';
  961. }
  962. }
  963. // Change POLICY_SYSTEM_PASSWORD_RESET
  964. if (empty($_SESSION['error_msg'])) {
  965. if ($_POST['v_policy_system_password_reset'] != $_SESSION['POLICY_SYSTEM_PASSWORD_RESET']) {
  966. exec(HESTIA_CMD."v-change-sys-config-value POLICY_SYSTEM_PASSWORD_RESET ".escapeshellarg($_POST['v_policy_system_password_reset']), $output, $return_var);
  967. check_return_code($return_var, $output);
  968. unset($output);
  969. if (empty($_SESSION['error_msg'])) {
  970. $v_policy_system_password_reset = $_POST['v_policy_system_password_reset'];
  971. }
  972. $v_security_adv = 'yes';
  973. }
  974. }
  975. // Change POLICY_SYSTEM_PROTECTED_ADMIN
  976. if (empty($_SESSION['error_msg'])) {
  977. if ($_POST['v_policy_system_protected_admin'] != $_SESSION['POLICY_SYSTEM_PROTECTED_ADMIN']) {
  978. exec(HESTIA_CMD."v-change-sys-config-value POLICY_SYSTEM_PROTECTED_ADMIN ".escapeshellarg($_POST['v_policy_system_protected_admin']), $output, $return_var);
  979. check_return_code($return_var, $output);
  980. unset($output);
  981. if (empty($_SESSION['error_msg'])) {
  982. $v_policy_system_protected_admin = $_POST['v_policy_system_protected_admin'];
  983. }
  984. $v_security_adv = 'yes';
  985. }
  986. }
  987. // Change POLICY_USER_VIEW_SUSPENDED
  988. if (empty($_SESSION['error_msg'])) {
  989. if ($_POST['v_policy_user_view_suspended'] != $_SESSION['POLICY_USER_VIEW_SUSPENDED'] && !empty($_SESSION['POLICY_USER_VIEW_SUSPENDED'])) {
  990. exec(HESTIA_CMD."v-change-sys-config-value POLICY_USER_VIEW_SUSPENDED ".escapeshellarg($_POST['v_policy_user_view_suspended']), $output, $return_var);
  991. check_return_code($return_var, $output);
  992. unset($output);
  993. if (empty($_SESSION['error_msg'])) {
  994. $v_policy_system_hide_admin = $_POST['v_policy_user_view_suspended'];
  995. }
  996. $v_security_adv = 'yes';
  997. }
  998. }
  999. // Change POLICY_USER_CHANGE_THEME
  1000. if (empty($_SESSION['error_msg'])) {
  1001. if ($_POST['v_policy_user_change_theme'] == 'on') {
  1002. $_POST['v_policy_user_change_theme'] = 'no';
  1003. } else {
  1004. $_POST['v_policy_user_change_theme'] = 'yes';
  1005. }
  1006. {
  1007. if ($_POST['v_policy_user_change_theme'] != $_SESSION['POLICY_USER_CHANGE_THEME']) {
  1008. exec(HESTIA_CMD."v-change-sys-config-value POLICY_USER_CHANGE_THEME ".escapeshellarg($_POST['v_policy_user_change_theme']), $output, $return_var);
  1009. check_return_code($return_var, $output);
  1010. unset($output);
  1011. if ($_POST['v_policy_user_change_theme']) {
  1012. unset($_SESSION['userTheme']);
  1013. $require_refresh = true;
  1014. }
  1015. if (empty($_SESSION['error_msg'])) {
  1016. $v_policy_user_change_theme = $_POST['v_policy_user_change_theme'];
  1017. }
  1018. }
  1019. }
  1020. }
  1021. // Change POLICY_SYSTEM_HIDE_ADMIN
  1022. if (empty($_SESSION['error_msg'])) {
  1023. if ($_POST['v_policy_system_hide_admin'] != $_SESSION['POLICY_SYSTEM_HIDE_ADMIN']) {
  1024. exec(HESTIA_CMD."v-change-sys-config-value POLICY_SYSTEM_HIDE_ADMIN ".escapeshellarg($_POST['v_policy_system_hide_admin']), $output, $return_var);
  1025. check_return_code($return_var, $output);
  1026. unset($output);
  1027. if (empty($_SESSION['error_msg'])) {
  1028. $v_policy_system_hide_admin = $_POST['v_policy_system_hide_admin'];
  1029. }
  1030. $v_security_adv = 'yes';
  1031. }
  1032. }
  1033. // Change POLICY_SYSTEM_HIDE_SERVICES
  1034. if (empty($_SESSION['error_msg'])) {
  1035. if ($_POST['v_policy_system_hide_services'] != $_SESSION['POLICY_SYSTEM_HIDE_SERVICES']) {
  1036. exec(HESTIA_CMD."v-change-sys-config-value POLICY_SYSTEM_HIDE_SERVICES ".escapeshellarg($_POST['v_policy_system_hide_services']), $output, $return_var);
  1037. check_return_code($return_var, $output);
  1038. unset($output);
  1039. if (empty($_SESSION['error_msg'])) {
  1040. $v_policy_system_hide_services = $_POST['v_policy_system_hide_services'];
  1041. }
  1042. $v_security_adv = 'yes';
  1043. }
  1044. }
  1045. // Change login style
  1046. if (empty($_SESSION['error_msg'])) {
  1047. if ($_POST['v_login_style'] != $_SESSION['LOGIN_STYLE']) {
  1048. exec(HESTIA_CMD."v-change-sys-config-value LOGIN_STYLE ".escapeshellarg($_POST['v_login_style']), $output, $return_var);
  1049. check_return_code($return_var, $output);
  1050. unset($output);
  1051. if (empty($_SESSION['error_msg'])) {
  1052. $v_login_style = $_POST['v_login_style'];
  1053. }
  1054. $v_security_adv = 'yes';
  1055. }
  1056. }
  1057. // Change API access
  1058. if (empty($_SESSION['error_msg'])) {
  1059. if ($_POST['v_api'] != $_SESSION['API']) {
  1060. $api_status = 'disable';
  1061. if ($_POST['v_api'] == 'yes') {
  1062. $api_status = 'enable';
  1063. }
  1064. exec(HESTIA_CMD."v-change-sys-api ".escapeshellarg($api_status), $output, $return_var);
  1065. check_return_code($return_var, $output);
  1066. unset($output);
  1067. if (empty($_SESSION['error_msg'])) {
  1068. $v_api = $_POST['v_api'];
  1069. }
  1070. $v_security_adv = 'yes';
  1071. }
  1072. }
  1073. // Change API allowed IPs
  1074. if (empty($_SESSION['error_msg'])) {
  1075. if ($_POST['v_api_allowed_ip'] != $_SESSION['API_ALLOWED_IP']) {
  1076. $ips = array();
  1077. foreach (explode("\n", $_POST['v_api_allowed_ip']) as $ip) {
  1078. if (trim($ip) != "allow-all") {
  1079. if (filter_var(trim($ip), FILTER_VALIDATE_IP)) {
  1080. $ips[] = trim($ip);
  1081. }
  1082. } else {
  1083. $ips[] = trim($ip);
  1084. }
  1085. }
  1086. if (implode(',', $ips) != $_SESSION['API_ALLOWED_IP']) {
  1087. exec(HESTIA_CMD."v-change-sys-config-value API_ALLOWED_IP ".escapeshellarg(implode(',', $ips)), $output, $return_var);
  1088. check_return_code($return_var, $output);
  1089. unset($output);
  1090. if (empty($_SESSION['error_msg'])) {
  1091. $v_api_allowed_ip = $_POST['v_api_allowed_ip'];
  1092. }
  1093. $v_security_adv = 'yes';
  1094. }
  1095. }
  1096. }
  1097. // Update SSL certificate
  1098. if ((!empty($_POST['v_ssl_crt'])) && (empty($_SESSION['error_msg']))) {
  1099. if (($v_ssl_crt != str_replace("\r\n", "\n", $_POST['v_ssl_crt'])) || ($v_ssl_key != str_replace("\r\n", "\n", $_POST['v_ssl_key']))) {
  1100. exec('mktemp -d', $mktemp_output, $return_var);
  1101. $tmpdir = $mktemp_output[0];
  1102. // Certificate
  1103. if (!empty($_POST['v_ssl_crt'])) {
  1104. $fp = fopen($tmpdir."/certificate.crt", 'w');
  1105. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_crt']));
  1106. fwrite($fp, "\n");
  1107. fclose($fp);
  1108. }
  1109. // Key
  1110. if (!empty($_POST['v_ssl_key'])) {
  1111. $fp = fopen($tmpdir."/certificate.key", 'w');
  1112. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_key']));
  1113. fwrite($fp, "\n");
  1114. fclose($fp);
  1115. }
  1116. exec(HESTIA_CMD."v-change-sys-hestia-ssl ".$tmpdir, $output, $return_var);
  1117. check_return_code($return_var, $output);
  1118. unset($output);
  1119. // List ssl certificate info
  1120. exec(HESTIA_CMD."v-list-sys-hestia-ssl json", $output, $return_var);
  1121. $ssl_str = json_decode(implode('', $output), true);
  1122. unset($output);
  1123. $v_ssl_crt = $ssl_str['HESTIA']['CRT'];
  1124. $v_ssl_key = $ssl_str['HESTIA']['KEY'];
  1125. $v_ssl_ca = $ssl_str['HESTIA']['CA'];
  1126. $v_ssl_subject = $ssl_str['HESTIA']['SUBJECT'];
  1127. $v_ssl_aliases = $ssl_str['HESTIA']['ALIASES'];
  1128. $v_ssl_not_before = $ssl_str['HESTIA']['NOT_BEFORE'];
  1129. $v_ssl_not_after = $ssl_str['HESTIA']['NOT_AFTER'];
  1130. $v_ssl_signature = $ssl_str['HESTIA']['SIGNATURE'];
  1131. $v_ssl_pub_key = $ssl_str['HESTIA']['PUB_KEY'];
  1132. $v_ssl_issuer = $ssl_str['HESTIA']['ISSUER'];
  1133. // Cleanup certificate tempfiles
  1134. if (file_exists($tmpdir . '/certificate.crt')) {
  1135. unlink($tmpdir . '/certificate.crt');
  1136. }
  1137. if (file_exists($tmpdir . '/certificate.key')) {
  1138. unlink($tmpdir . '/certificate.key');
  1139. }
  1140. rmdir($tmpdir);
  1141. }
  1142. }
  1143. // Flush field values on success
  1144. if (empty($_SESSION['error_msg'])) {
  1145. $_SESSION['ok_msg'] = _('Changes has been saved.');
  1146. }
  1147. if ($require_refresh == true) {
  1148. $refresh = $_SERVER['REQUEST_URI'];
  1149. $_SESSION['ok_msg'] = _('Changes has been saved.');
  1150. header("Location: $refresh");
  1151. die();
  1152. }
  1153. }
  1154. // Check system configuration
  1155. exec(HESTIA_CMD . "v-list-sys-config json", $output, $return_var);
  1156. $data = json_decode(implode('', $output), true);
  1157. unset($output);
  1158. $sys_arr = $data['config'];
  1159. foreach ($sys_arr as $key => $value) {
  1160. $_SESSION[$key] = $value;
  1161. }
  1162. // Render page
  1163. render_page($user, $TAB, 'edit_server');
  1164. // Flush session messages
  1165. unset($_SESSION['error_msg']);
  1166. unset($_SESSION['ok_msg']);