index.php 37 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778
  1. <?php
  2. $TAB = 'SERVER';
  3. // Main include
  4. include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
  5. // Check user
  6. if ($_SESSION['user'] != 'admin') {
  7. header("Location: /list/user");
  8. exit;
  9. }
  10. // Get server hostname
  11. $v_hostname = exec('hostname');
  12. // List available timezones and get current one
  13. $v_timezones = list_timezones();
  14. exec (HESTIA_CMD."v-get-sys-timezone", $output, $return_var);
  15. $v_timezone = $output[0];
  16. unset($output);
  17. if ($v_timezone == 'Etc/UTC' ) $v_timezone = 'UTC';
  18. if ($v_timezone == 'Pacific/Honolulu' ) $v_timezone = 'HAST';
  19. if ($v_timezone == 'US/Aleutian' ) $v_timezone = 'HADT';
  20. if ($v_timezone == 'Etc/GMT+9' ) $v_timezone = 'AKST';
  21. if ($v_timezone == 'America/Anchorage' ) $v_timezone = 'AKDT';
  22. if ($v_timezone == 'America/Dawson_Creek' ) $v_timezone = 'PST';
  23. if ($v_timezone == 'PST8PDT' ) $v_timezone = 'PDT';
  24. if ($v_timezone == 'MST7MDT' ) $v_timezone = 'MDT';
  25. if ($v_timezone == 'Canada/Saskatchewan' ) $v_timezone = 'CST';
  26. if ($v_timezone == 'CST6CDT' ) $v_timezone = 'CDT';
  27. if ($v_timezone == 'EST5EDT' ) $v_timezone = 'EDT';
  28. if ($v_timezone == 'America/Puerto_Rico' ) $v_timezone = 'AST';
  29. if ($v_timezone == 'America/Halifax' ) $v_timezone = 'ADT';
  30. // List supported php versions
  31. exec (HESTIA_CMD."v-list-web-templates-backend json", $output, $return_var);
  32. $backend_templates = json_decode(implode('', $output), true);
  33. unset($output);
  34. $v_php_versions = [
  35. 'php-5.6',
  36. 'php-7.0',
  37. 'php-7.1',
  38. 'php-7.2',
  39. 'php-7.3',
  40. 'php-7.4',
  41. 'php-8.0',
  42. ];
  43. sort($v_php_versions);
  44. if (empty($backend_templates))
  45. $v_php_versions=[];
  46. $backends_active = backendtpl_with_webdomains();
  47. $v_php_versions = array_map(function($php_version) use ($backend_templates, $backends_active) {
  48. // Mark installed php versions
  49. if (stripos($php_version,'php') !== 0)
  50. return false;
  51. $phpinfo = (object) [
  52. "name" => $php_version,
  53. "tpl" => strtoupper(str_replace('.', '_', $php_version)),
  54. "version" => str_ireplace('php-', '', $php_version),
  55. "usedby" => [],
  56. "installed" => false,
  57. "protected" => false,
  58. ];
  59. if (in_array($phpinfo->tpl, $backend_templates)) {
  60. $phpinfo->installed = true;
  61. }
  62. if (array_key_exists($phpinfo->tpl, $backends_active)) {
  63. // Prevent used php version to be removed
  64. if($phpinfo->installed)
  65. $phpinfo->protected = true;
  66. $phpinfo->usedby = $backends_active[$phpinfo->tpl];
  67. }
  68. if ($phpinfo->name == DEFAULT_PHP_VERSION) {
  69. // Prevent default php version to be removed
  70. if ($phpinfo->installed)
  71. $phpinfo->protected = true;
  72. if (!empty($backends_active['default'])) {
  73. $phpinfo->usedby = array_merge_recursive($phpinfo->usedby,$backends_active['default'] );
  74. }
  75. }
  76. return $phpinfo;
  77. }, $v_php_versions);
  78. // List languages
  79. exec (HESTIA_CMD."v-list-sys-languages json", $output, $return_var);
  80. $language = json_decode(implode('', $output), true);
  81. foreach ($language as $lang) {
  82. $languages[$lang] = translate_json($lang);
  83. }
  84. asort($languages);
  85. unset($output);
  86. // List themes
  87. exec (HESTIA_CMD."v-list-sys-themes json", $output, $return_var);
  88. $theme = json_decode(implode('', $output), true);
  89. unset($output);
  90. // List dns cluster hosts
  91. exec (HESTIA_CMD."v-list-remote-dns-hosts json", $output, $return_var);
  92. $dns_cluster = json_decode(implode('', $output), true);
  93. unset($output);
  94. if (is_array($dns_cluster)) {
  95. foreach ($dns_cluster as $key => $value) {
  96. $v_dns_cluster = 'yes';
  97. }
  98. }
  99. // List smtp relay settings
  100. if (!empty($_SESSION['SMTP_RELAY'])) $v_smtp_relay = $_SESSION['SMTP_RELAY'];
  101. if (!empty($_SESSION['SMTP_RELAY_HOST'])) $v_smtp_relay_host = $_SESSION['SMTP_RELAY_HOST'];
  102. if (!empty($_SESSION['SMTP_RELAY_PORT'])) $v_smtp_relay_port = $_SESSION['SMTP_RELAY_PORT'];
  103. if (!empty($_SESSION['SMTP_RELAY_USER'])) $v_smtp_relay_user = $_SESSION['SMTP_RELAY_USER'];
  104. // List Database hosts
  105. exec (HESTIA_CMD."v-list-database-hosts json", $output, $return_var);
  106. $db_hosts = json_decode(implode('', $output), true);
  107. unset($output);
  108. $v_mysql_hosts = array_values(array_filter($db_hosts, function($host){return $host['TYPE'] === 'mysql';}));
  109. $v_mysql = count($v_mysql_hosts) ? 'yes' : 'no';
  110. $v_pgsql_hosts = array_values(array_filter($db_hosts, function($host){return $host['TYPE'] === 'pgsql';}));
  111. $v_pgsql = count($v_pgsql_hosts) ? 'yes' : 'no';
  112. unset($db_hosts);
  113. // List backup settings
  114. $v_backup_dir = "/backup";
  115. if (!empty($_SESSION['BACKUP'])) $v_backup_dir = $_SESSION['BACKUP'];
  116. $v_backup_gzip = '5';
  117. if (!empty($_SESSION['BACKUP_GZIP'])) $v_backup_gzip = $_SESSION['BACKUP_GZIP'];
  118. $v_backup_mode = 'gzip';
  119. if (!empty($_SESSION['BACKUP_MODE'])) $v_backup_mode = $_SESSION['BACKUP_MODE'];
  120. $backup_types = explode(",",$_SESSION['BACKUP_SYSTEM']);
  121. foreach ($backup_types as $backup_type) {
  122. if ($backup_type == 'local') {
  123. $v_backup = 'yes';
  124. } else {
  125. exec (HESTIA_CMD."v-list-backup-host ".escapeshellarg($backup_type)." json", $output, $return_var);
  126. $v_remote_backup = json_decode(implode('', $output), true);
  127. unset($output);
  128. if (in_array($backup_type , array('ftp','sftp'))) {
  129. $v_backup_host = $v_remote_backup[$backup_type]['HOST'];
  130. $v_backup_type = $v_remote_backup[$backup_type]['TYPE'];
  131. $v_backup_username = $v_remote_backup[$backup_type]['USERNAME'];
  132. $v_backup_password = "";
  133. $v_backup_port = $v_remote_backup[$backup_type]['PORT'];
  134. $v_backup_bpath = $v_remote_backup[$backup_type]['BPATH'];
  135. $v_backup_remote_adv = "yes";
  136. } else if ( in_array($backup_type , array('b2')) ) {
  137. $v_backup_bucket = $v_remote_backup[$backup_type]['BUCKET'];
  138. $v_backup_type = $v_remote_backup[$backup_type]['TYPE'];
  139. $v_backup_application_id = $v_remote_backup[$backup_type]['B2_KEY_ID'];
  140. $v_backup_application_key = '';
  141. $v_backup_remote_adv = "yes";
  142. }
  143. }
  144. }
  145. // List ssl certificate info
  146. exec (HESTIA_CMD."v-list-sys-hestia-ssl json", $output, $return_var);
  147. $ssl_str = json_decode(implode('', $output), true);
  148. unset($output);
  149. $v_ssl_crt = $ssl_str['HESTIA']['CRT'];
  150. $v_ssl_key = $ssl_str['HESTIA']['KEY'];
  151. $v_ssl_ca = $ssl_str['HESTIA']['CA'];
  152. $v_ssl_subject = $ssl_str['HESTIA']['SUBJECT'];
  153. $v_ssl_aliases = $ssl_str['HESTIA']['ALIASES'];
  154. $v_ssl_not_before = $ssl_str['HESTIA']['NOT_BEFORE'];
  155. $v_ssl_not_after = $ssl_str['HESTIA']['NOT_AFTER'];
  156. $v_ssl_signature = $ssl_str['HESTIA']['SIGNATURE'];
  157. $v_ssl_pub_key = $ssl_str['HESTIA']['PUB_KEY'];
  158. $v_ssl_issuer = $ssl_str['HESTIA']['ISSUER'];
  159. // Check POST request
  160. if (!empty($_POST['save'])) {
  161. // Check token
  162. if ((!isset($_POST['token'])) || ($_SESSION['token'] != $_POST['token'])) {
  163. header('location: /login/');
  164. exit();
  165. }
  166. // Change hostname
  167. if ((!empty($_POST['v_hostname'])) && ($v_hostname != $_POST['v_hostname'])) {
  168. exec (HESTIA_CMD."v-change-sys-hostname ".escapeshellarg($_POST['v_hostname']), $output, $return_var);
  169. check_return_code($return_var,$output);
  170. unset($output);
  171. $v_hostname = $_POST['v_hostname'];
  172. }
  173. // Install/remove php versions
  174. if (empty($_SESSION['error_msg'])) {
  175. if(!empty($v_php_versions)) {
  176. $post_php = $_POST['v_php_versions'];
  177. array_map(function($php_version) use ($post_php) {
  178. if (array_key_exists($php_version->tpl, $post_php)) {
  179. if (!$php_version->installed) {
  180. exec (HESTIA_CMD . "v-add-web-php " . escapeshellarg($php_version->version), $output, $return_var);
  181. check_return_code($return_var, $output);
  182. unset($output);
  183. if(empty($_SESSION['error_msg']))
  184. $php_version->installed = true;
  185. }
  186. } else {
  187. if ($php_version->installed && !$php_version->protected) {
  188. exec (HESTIA_CMD . "v-delete-web-php " . escapeshellarg($php_version->version), $output, $return_var);
  189. check_return_code($return_var, $output);
  190. unset($output);
  191. if (empty($_SESSION['error_msg']))
  192. $php_version->installed = false;
  193. }
  194. }
  195. return $php_version;
  196. }, $v_php_versions);
  197. }
  198. }
  199. // Change timezone
  200. if (empty($_SESSION['error_msg'])) {
  201. if (!empty($_POST['v_timezone'])) {
  202. $v_tz = $_POST['v_timezone'];
  203. if ($v_tz == 'UTC' ) $v_tz = 'Etc/UTC';
  204. if ($v_tz == 'HAST' ) $v_tz = 'Pacific/Honolulu';
  205. if ($v_tz == 'HADT' ) $v_tz = 'US/Aleutian';
  206. if ($v_tz == 'AKST' ) $v_tz = 'Etc/GMT+9';
  207. if ($v_tz == 'AKDT' ) $v_tz = 'America/Anchorage';
  208. if ($v_tz == 'PST' ) $v_tz = 'America/Dawson_Creek';
  209. if ($v_tz == 'PDT' ) $v_tz = 'PST8PDT';
  210. if ($v_tz == 'MDT' ) $v_tz = 'MST7MDT';
  211. if ($v_tz == 'CST' ) $v_tz = 'Canada/Saskatchewan';
  212. if ($v_tz == 'CDT' ) $v_tz = 'CST6CDT';
  213. if ($v_tz == 'EDT' ) $v_tz = 'EST5EDT';
  214. if ($v_tz == 'AST' ) $v_tz = 'America/Puerto_Rico';
  215. if ($v_tz == 'ADT' ) $v_tz = 'America/Halifax';
  216. if ($v_timezone != $v_tz) {
  217. exec (HESTIA_CMD."v-change-sys-timezone ".escapeshellarg($v_tz), $output, $return_var);
  218. check_return_code($return_var,$output);
  219. $v_timezone = $v_tz;
  220. unset($output);
  221. }
  222. }
  223. }
  224. // Change default language
  225. if (empty($_SESSION['error_msg'])) {
  226. if ((!empty($_POST['v_language'])) && ($_SESSION['LANGUAGE'] != $_POST['v_language'])) {
  227. if (isset($_POST['v_language_update'])) {
  228. exec (HESTIA_CMD."v-change-sys-language ".escapeshellarg($_POST['v_language'])." yes", $output, $return_var);
  229. if (empty($_SESSION['error_msg'])) $_SESSION['LANGUAGE'] = $_POST['v_language'];
  230. }
  231. exec (HESTIA_CMD."v-change-sys-language ".escapeshellarg($_POST['v_language']), $output, $return_var);
  232. check_return_code($return_var,$output);
  233. unset($output);
  234. if (empty($_SESSION['error_msg'])) $_SESSION['LANGUAGE'] = $_POST['v_language'];
  235. }
  236. }
  237. // Update theme
  238. if (empty($_SESSION['error_msg'])) {
  239. if ($_POST['v_theme'] != $_SESSION['THEME']) {
  240. exec (HESTIA_CMD."v-change-sys-theme ".escapeshellarg($_POST['v_theme']), $output, $return_var);
  241. check_return_code($return_var,$output);
  242. unset($output);
  243. }
  244. }
  245. // Update debug mode status
  246. if (empty($_SESSION['error_msg'])) {
  247. if ($_POST['v_debug_mode'] != $_SESSION['DEBUG_MODE']) {
  248. if ($_POST['v_debug_mode'] == 'on') { $_POST['v_debug_mode'] = 'true'; } else { $_POST['v_debug_mode'] = 'false'; }
  249. exec (HESTIA_CMD."v-change-sys-config-value DEBUG_MODE ".escapeshellarg($_POST['v_debug_mode']), $output, $return_var);
  250. check_return_code($return_var,$output);
  251. unset($output);
  252. $v_debug_mode_adv = 'yes';
  253. }
  254. }
  255. // Set File Manager support
  256. if (empty($_SESSION['error_msg'])) {
  257. if ((!empty($_POST['v_filemanager'])) && ($_SESSION['FILE_MANAGER'] != $_POST['v_filemanager'])) {
  258. if ($_POST['v_filemanager'] == 'true') {
  259. exec (HESTIA_CMD."v-add-sys-filemanager", $output, $return_var);
  260. check_return_code($return_var,$output);
  261. unset($output);
  262. if (empty($_SESSION['error_msg'])) $_SESSION['FILE_MANAGER'] = 'true';
  263. } else {
  264. exec (HESTIA_CMD."v-delete-sys-filemanager", $output, $return_var);
  265. check_return_code($return_var,$output);
  266. unset($output);
  267. if (empty($_SESSION['error_msg'])) $_SESSION['FILE_MANAGER'] = 'false';
  268. }
  269. }
  270. }
  271. // Set File Manager support
  272. if (empty($_SESSION['error_msg'])) {
  273. if (!empty($_POST['v_phpmyadmin_key'])) {
  274. if ($_POST['v_phpmyadmin_key'] == 'yes' && $_SESSION['PHPMYADMIN_KEY'] == '') {
  275. exec (HESTIA_CMD."v-add-sys-pma-sso quiet", $output, $return_var);
  276. check_return_code($return_var,$output);
  277. unset($output);
  278. if (empty($_SESSION['error_msg'])) $_SESSION['PHPMYADMIN_KEY'] != "";
  279. } else if ($_POST['v_phpmyadmin_key'] == 'no' && $_SESSION['PHPMYADMIN_KEY'] != '') {
  280. exec (HESTIA_CMD."v-delete-sys-pma-sso quiet", $output, $return_var);
  281. check_return_code($return_var,$output);
  282. unset($output);
  283. if (empty($_SESSION['error_msg'])) $_SESSION['PHPMYADMIN_KEY'] = '';
  284. }
  285. }
  286. }
  287. // Set disk_quota support
  288. if (empty($_SESSION['error_msg'])) {
  289. if ((!empty($_POST['v_quota'])) && ($_SESSION['DISK_QUOTA'] != $_POST['v_quota'])) {
  290. if ($_POST['v_quota'] == 'yes') {
  291. exec (HESTIA_CMD."v-add-sys-quota", $output, $return_var);
  292. check_return_code($return_var,$output);
  293. unset($output);
  294. if (empty($_SESSION['error_msg'])) $_SESSION['DISK_QUOTA'] = 'yes';
  295. } else {
  296. exec (HESTIA_CMD."v-delete-sys-quota", $output, $return_var);
  297. check_return_code($return_var,$output);
  298. unset($output);
  299. if (empty($_SESSION['error_msg'])) $_SESSION['DISK_QUOTA'] = 'no';
  300. }
  301. }
  302. }
  303. // Set firewall support
  304. if (empty($_SESSION['error_msg'])) {
  305. if ($_SESSION['FIREWALL_SYSTEM'] == 'iptables') $v_firewall = 'yes';
  306. if ($_SESSION['FIREWALL_SYSTEM'] != 'iptables') $v_firewall = 'no';
  307. if ((!empty($_POST['v_firewall'])) && ($v_firewall != $_POST['v_firewall'])) {
  308. if ($_POST['v_firewall'] == 'yes') {
  309. exec (HESTIA_CMD."v-add-sys-firewall", $output, $return_var);
  310. check_return_code($return_var,$output);
  311. unset($output);
  312. if (empty($_SESSION['error_msg'])) $_SESSION['FIREWALL_SYSTEM'] = 'iptables';
  313. } else {
  314. exec (HESTIA_CMD."v-delete-sys-firewall", $output, $return_var);
  315. check_return_code($return_var,$output);
  316. unset($output);
  317. if (empty($_SESSION['error_msg'])) $_SESSION['FIREWALL_SYSTEM'] = '';
  318. }
  319. }
  320. }
  321. // Update mysql pasword
  322. if (empty($_SESSION['error_msg'])) {
  323. if (!empty($_POST['v_mysql_password'])) {
  324. exec (HESTIA_CMD."v-change-database-host-password mysql localhost root ".escapeshellarg($_POST['v_mysql_password']), $output, $return_var);
  325. check_return_code($return_var,$output);
  326. unset($output);
  327. $v_db_adv = 'yes';
  328. }
  329. }
  330. // Update webmail url
  331. if (empty($_SESSION['error_msg'])) {
  332. if ($_POST['v_webmail_alias'] != $_SESSION['WEBMAIL_ALIAS']) {
  333. exec (HESTIA_CMD."v-change-sys-webmail ".escapeshellarg($_POST['v_webmail_alias']), $output, $return_var);
  334. check_return_code($return_var,$output);
  335. unset($output);
  336. $v_mail_adv = 'yes';
  337. }
  338. }
  339. // Update system wide smtp relay
  340. if (empty($_SESSION['error_msg'])) {
  341. if (isset($_POST['v_smtp_relay']) && (!empty($_POST['v_smtp_relay_host'])) && (!empty($_POST['v_smtp_relay_user']))) {
  342. if (($_POST['v_smtp_relay_host'] != $v_smtp_relay_host) ||
  343. ($_POST['v_smtp_relay_user'] != $v_smtp_relay_user) ||
  344. ($_POST['v_smtp_relay_port'] != $v_smtp_relay_port) ||
  345. (!empty($_POST['v_smtp_relay_pass']))) {
  346. if (!empty($_POST['v_smtp_relay_pass'])) {
  347. $v_smtp_relay = true;
  348. $v_smtp_relay_host = escapeshellarg($_POST['v_smtp_relay_host']);
  349. $v_smtp_relay_user = escapeshellarg($_POST['v_smtp_relay_user']);
  350. $v_smtp_relay_pass = escapeshellarg($_POST['v_smtp_relay_pass']);
  351. if (!empty($_POST['v_smtp_relay_port'])) {
  352. $v_smtp_relay_port = escapeshellarg($_POST['v_smtp_relay_port']);
  353. } else {
  354. $v_smtp_relay_port = '587';
  355. }
  356. exec (HESTIA_CMD."v-add-sys-smtp-relay ".$v_smtp_relay_host." ".$v_smtp_relay_user." ".$v_smtp_relay_pass." ".$v_smtp_relay_port, $output, $return_var);
  357. check_return_code($return_var,$output);
  358. unset($output);
  359. } else {
  360. $_SESSION['error_msg'] = _('SMTP Relay Password is required');
  361. }
  362. }
  363. }
  364. if ((!isset($_POST['v_smtp_relay'])) && ($v_smtp_relay == true)) {
  365. $v_smtp_relay = false;
  366. $v_smtp_relay_host = $v_smtp_relay_user = $v_smtp_relay_pass = $v_smtp_relay_port = '';
  367. exec (HESTIA_CMD."v-delete-sys-smtp-relay", $output, $return_var);
  368. check_return_code($return_var,$output);
  369. unset($output);
  370. }
  371. }
  372. // Update phpMyAdmin url
  373. if (empty($_SESSION['error_msg'])) {
  374. if ($_POST['v_mysql_url'] != $_SESSION['DB_PMA_ALIAS']) {
  375. exec (HESTIA_CMD."v-change-sys-db-alias pma ".escapeshellarg($_POST['v_mysql_url']), $output, $return_var);
  376. check_return_code($return_var,$output);
  377. unset($output);
  378. $v_db_adv = 'yes';
  379. }
  380. }
  381. // Update phpPgAdmin url
  382. if (empty($_SESSION['error_msg'])) {
  383. if ($_POST['v_pgsql_url'] != $_SESSION['DB_PGA_ALIAS']) {
  384. exec (HESTIA_CMD."v-change-sys-db-alias pga ".escapeshellarg($_POST['v_pgsql_url']), $output, $return_var);
  385. check_return_code($return_var,$output);
  386. unset($output);
  387. $v_db_adv = 'yes';
  388. }
  389. }
  390. // Update release branch
  391. if (empty($_SESSION['error_msg'])) {
  392. if ($_POST['v_release_branch'] != $_SESSION['RELEASE_BRANCH']) {
  393. exec (HESTIA_CMD."v-change-sys-release ".escapeshellarg($_POST['v_release_branch']), $output, $return_var);
  394. check_return_code($return_var,$output);
  395. unset($output);
  396. $v_release_adv = 'yes';
  397. }
  398. }
  399. // Update send notification setting
  400. if (empty($_SESSION['error_msg'])) {
  401. if ($_POST['v_upgrade_send_notification_email'] != $_SESSION['UPGRADE_SEND_EMAIL']) {
  402. if ($_POST['v_upgrade_send_notification_email'] == 'on') { $_POST['v_upgrade_send_notification_email'] = 'true'; } else { $_POST['v_upgrade_send_notification_email'] = 'false'; }
  403. exec (HESTIA_CMD."v-change-sys-config-value UPGRADE_SEND_EMAIL ".escapeshellarg($_POST['v_upgrade_send_notification_email']), $output, $return_var);
  404. check_return_code($return_var,$output);
  405. unset($output);
  406. $v_upgrade_notification_adv = 'yes';
  407. }
  408. }
  409. // Update send log by email setting
  410. if (empty($_SESSION['error_msg'])) {
  411. if ($_POST['v_upgrade_send_email_log'] != $_SESSION['UPGRADE_SEND_EMAIL_LOG']) {
  412. if ($_POST['v_upgrade_send_email_log'] == 'on') { $_POST['v_upgrade_send_email_log'] = 'true'; } else { $_POST['v_upgrade_send_email_log'] = 'false'; }
  413. exec (HESTIA_CMD."v-change-sys-config-value UPGRADE_SEND_EMAIL_LOG ".escapeshellarg($_POST['v_upgrade_send_email_log']), $output, $return_var);
  414. check_return_code($return_var,$output);
  415. unset($output);
  416. $v_upgrade_send_log_adv = 'yes';
  417. }
  418. }
  419. // Disable local backup
  420. if (empty($_SESSION['error_msg'])) {
  421. if (($_POST['v_backup'] == 'no') && ($v_backup == 'yes' )) {
  422. exec (HESTIA_CMD."v-delete-backup-host local", $output, $return_var);
  423. check_return_code($return_var,$output);
  424. unset($output);
  425. if (empty($_SESSION['error_msg'])) $v_backup = 'no';
  426. $v_backup_adv = 'yes';
  427. }
  428. }
  429. // Enable local backups
  430. if (empty($_SESSION['error_msg'])) {
  431. if (($_POST['v_backup'] == 'yes') && ($v_backup != 'yes' )) {
  432. exec (HESTIA_CMD."v-add-backup-host local", $output, $return_var);
  433. check_return_code($return_var,$output);
  434. unset($output);
  435. if (empty($_SESSION['error_msg'])) $v_backup = 'yes';
  436. $v_backup_adv = 'yes';
  437. }
  438. }
  439. // Change backup gzip level
  440. if (empty($_SESSION['error_msg'])) {
  441. if ($_POST['v_backup_gzip'] != $v_backup_gzip ) {
  442. if ( $_POST['v_backup_mode'] == 'gzip' ){
  443. $_POST['v_backup_gzip'] = 9;
  444. }
  445. exec (HESTIA_CMD."v-change-sys-config-value BACKUP_GZIP ".escapeshellarg($_POST['v_backup_gzip']), $output, $return_var);
  446. check_return_code($return_var,$output);
  447. unset($output);
  448. if (empty($_SESSION['error_msg'])) $v_backup_gzip = $_POST['v_backup_gzip'];
  449. $v_backup_adv = 'yes';
  450. }
  451. }
  452. // Change backup mode
  453. if (empty($_SESSION['error_msg'])) {
  454. if ($_POST['v_backup_mode'] != $v_backup_mode ) {
  455. exec (HESTIA_CMD."v-change-sys-config-value BACKUP_MODE ".escapeshellarg($_POST['v_backup_mode']), $output, $return_var);
  456. check_return_code($return_var,$output);
  457. unset($output);
  458. if (empty($_SESSION['error_msg'])) $v_backup_mode = $_POST['v_backup_mode'];
  459. $v_backup_adv = 'yes';
  460. if ( $_POST['v_backup_mode'] == 'gzip' ){
  461. $_POST['v_backup_gzip'] = 9;
  462. if (empty($_SESSION['error_msg'])) $v_backup_gzip = $_POST['v_backup_gzip'];
  463. exec (HESTIA_CMD."v-change-sys-config-value BACKUP_GZIP ".escapeshellarg($_POST['v_backup_gzip']), $output, $return_var);
  464. }
  465. }
  466. }
  467. // Change backup path
  468. if (empty($_SESSION['error_msg'])) {
  469. if ($_POST['v_backup_dir'] != $v_backup_dir ) {
  470. /*
  471. See #1655
  472. exec (HESTIA_CMD."v-change-sys-config-value BACKUP ".escapeshellarg($_POST['v_backup_dir']), $output, $return_var);
  473. check_return_code($return_var,$output);
  474. unset($output);
  475. */
  476. if (empty($_SESSION['error_msg'])) $v_backup_dir = $_POST['v_backup_dir'];
  477. $v_backup_adv = 'yes';
  478. }
  479. }
  480. // Add remote backup host
  481. if (empty($_SESSION['error_msg'])) {
  482. if ((empty($v_backup_host) && empty($v_backup_bucket) && ((!empty($_POST['v_backup_host'])) || !empty($_POST['v_backup_bucket']))) ) {
  483. if (in_array($_POST['v_backup_type'], array('ftp','sftp'))) {
  484. $v_backup_host = escapeshellarg($_POST['v_backup_host']);
  485. $v_backup_port = escapeshellarg($_POST['v_backup_port']);
  486. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  487. $v_backup_username = escapeshellarg($_POST['v_backup_username']);
  488. $v_backup_password = escapeshellcmd($_POST['v_backup_password']);
  489. $v_backup_bpath = escapeshellarg($_POST['v_backup_bpath']);
  490. exec (HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_host ." ". $v_backup_username ." ". $v_backup_password ." ". $v_backup_bpath." ".$v_backup_port, $output, $return_var);
  491. check_return_code($return_var,$output);
  492. unset($output);
  493. if (empty($_SESSION['error_msg'])) $v_backup_host = $_POST['v_backup_host'];
  494. if (empty($_SESSION['error_msg'])) $v_backup_type = $_POST['v_backup_type'];
  495. if (empty($_SESSION['error_msg'])) $v_backup_username = $_POST['v_backup_username'];
  496. if (empty($_SESSION['error_msg'])) $v_backup_password = $_POST['v_backup_password'];
  497. if (empty($_SESSION['error_msg'])) $v_backup_bpath = $_POST['v_backup_bpath'];
  498. if (empty($_SESSION['error_msg'])) $v_backup_port = $_POST['v_backup_port'];
  499. $v_backup_new = 'yes';
  500. $v_backup_adv = 'yes';
  501. $v_backup_remote_adv = 'yes';
  502. } else if (in_array($_POST['v_backup_type'], array('b2'))) {
  503. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  504. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  505. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  506. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  507. exec (HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_bucket ." ". $v_backup_application_id ." ". $v_backup_application_key, $output, $return_var);
  508. check_return_code($return_var,$output);
  509. unset($output);
  510. if (empty($_SESSION['error_msg'])) $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  511. if (empty($_SESSION['error_msg'])) $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  512. if (empty($_SESSION['error_msg'])) $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  513. $v_backup_new = 'yes';
  514. $v_backup_adv = 'yes';
  515. $v_backup_remote_adv = 'yes';
  516. }
  517. }
  518. }
  519. // Change remote backup host type
  520. if (empty($_SESSION['error_msg'])) {
  521. if ((!empty($_POST['v_backup_host'])) && ($_POST['v_backup_type'] != $v_backup_type)) {
  522. exec (HESTIA_CMD."v-delete-backup-host " . escapeshellarg($v_backup_type) , $output, $return_var);
  523. unset($output);
  524. if (in_array($_POST['v_backup_type'], array('ftp','sftp'))) {
  525. $v_backup_host = escapeshellarg($_POST['v_backup_host']);
  526. $v_backup_port = escapeshellarg($_POST['v_backup_port']);
  527. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  528. $v_backup_username = escapeshellarg($_POST['v_backup_username']);
  529. $v_backup_password = escapeshellcmd($_POST['v_backup_password']);
  530. $v_backup_bpath = escapeshellarg($_POST['v_backup_bpath']);
  531. exec (HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_host ." ". $v_backup_username ." ". $v_backup_password ." ". $v_backup_bpath." ".$v_backup_port, $output, $return_var);
  532. check_return_code($return_var,$output);
  533. unset($output);
  534. if (empty($_SESSION['error_msg'])) $v_backup_host = $_POST['v_backup_host'];
  535. if (empty($_SESSION['error_msg'])) $v_backup_type = $_POST['v_backup_type'];
  536. if (empty($_SESSION['error_msg'])) $v_backup_username = $_POST['v_backup_username'];
  537. if (empty($_SESSION['error_msg'])) $v_backup_password = $_POST['v_backup_password'];
  538. if (empty($_SESSION['error_msg'])) $v_backup_bpath = $_POST['v_backup_bpath'];
  539. if (empty($_SESSION['error_msg'])) $v_backup_port = $_POST['v_backup_port'];
  540. $v_backup_adv = 'yes';
  541. $v_backup_remote_adv = 'yes';
  542. } else if(in_array($_POST['v_backup_type'], array('b2'))) {
  543. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  544. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  545. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  546. exec (HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_bucket ." ". $v_backup_application_id ." ". $v_backup_application_key, $output, $return_var);
  547. check_return_code($return_var,$output);
  548. unset($output);
  549. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  550. if (empty($_SESSION['error_msg'])) $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  551. if (empty($_SESSION['error_msg'])) $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  552. if (empty($_SESSION['error_msg'])) $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  553. $v_backup_adv = 'yes';
  554. $v_backup_remote_adv = 'yes';
  555. }
  556. }
  557. }
  558. // Change remote backup host
  559. if (empty($_SESSION['error_msg'])) {
  560. if ((!empty($_POST['v_backup_host'])) && ($_POST['v_backup_type'] == $v_backup_type) && (!isset($v_backup_new))) {
  561. if (in_array($_POST['v_backup_type'], array('ftp','sftp'))) {
  562. if (($_POST['v_backup_host'] != $v_backup_host) || ($_POST['v_backup_username'] != $v_backup_username) || ($_POST['v_backup_password'] != $v_backup_password) || ($_POST['v_backup_bpath'] != $v_backup_bpath || $_POST['v_backup_port'] != $v_backup_port)) {
  563. $v_backup_host = escapeshellarg($_POST['v_backup_host']);
  564. $v_backup_port = escapeshellarg($_POST['v_backup_port']);
  565. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  566. $v_backup_username = escapeshellarg($_POST['v_backup_username']);
  567. $v_backup_password = escapeshellcmd($_POST['v_backup_password']);
  568. $v_backup_bpath = escapeshellarg($_POST['v_backup_bpath']);
  569. exec (HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_host ." ". $v_backup_username ." ". $v_backup_password ." ". $v_backup_bpath." ".$v_backup_port, $output, $return_var);
  570. check_return_code($return_var,$output);
  571. unset($output);
  572. if (empty($_SESSION['error_msg'])) $v_backup_host = $_POST['v_backup_host'];
  573. if (empty($_SESSION['error_msg'])) $v_backup_type = $_POST['v_backup_type'];
  574. if (empty($_SESSION['error_msg'])) $v_backup_username = $_POST['v_backup_username'];
  575. if (empty($_SESSION['error_msg'])) $v_backup_password = $_POST['v_backup_password'];
  576. if (empty($_SESSION['error_msg'])) $v_backup_bpath = $_POST['v_backup_bpath'];
  577. if (empty($_SESSION['error_msg'])) $v_backup_port = $_POST['v_backup_port'];
  578. $v_backup_adv = 'yes';
  579. $v_backup_remote_adv = 'yes';
  580. }
  581. } else if(in_array($_POST['v_backup_type'], array('b2'))) {
  582. if (($_POST['v_backup_bucket'] != $v_backup_bucket) || ($_POST['v_backup_application_key'] != $v_backup_application_key) || ($_POST['v_backup_application_id'] != $v_backup_application_id)) {
  583. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  584. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  585. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  586. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  587. exec (HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_bucket ." ". $v_backup_application_id ." ". $v_backup_application_key, $output, $return_var);
  588. check_return_code($return_var,$output);
  589. unset($output);
  590. if (empty($_SESSION['error_msg'])) $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  591. if (empty($_SESSION['error_msg'])) $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  592. if (empty($_SESSION['error_msg'])) $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  593. $v_backup_adv = 'yes';
  594. $v_backup_remote_adv = 'yes';
  595. }
  596. }
  597. }
  598. }
  599. // Delete remote backup host
  600. if (empty($_SESSION['error_msg'])) {
  601. if (empty($_POST['v_backup_remote_adv']) && isset($v_backup_remote_adv)) {
  602. exec (HESTIA_CMD."v-delete-backup-host ".escapeshellarg($v_backup_type), $output, $return_var);
  603. check_return_code($return_var,$output);
  604. unset($output);
  605. if (empty($_SESSION['error_msg'])) $v_backup_host = '';
  606. if (empty($_SESSION['error_msg'])) $v_backup_type = '';
  607. if (empty($_SESSION['error_msg'])) $v_backup_username = '';
  608. if (empty($_SESSION['error_msg'])) $v_backup_password = '';
  609. if (empty($_SESSION['error_msg'])) $v_backup_bpath = '';
  610. if (empty($_SESSION['error_msg'])) $v_backup_bucket = '';
  611. if (empty($_SESSION['error_msg'])) $v_backup_application_id = '';
  612. if (empty($_SESSION['error_msg'])) $v_backup_application_key = '';
  613. $v_backup_adv = '';
  614. $v_backup_remote_adv = '';
  615. }
  616. }
  617. // Change INACTIVE_SESSION_TIMEOUT
  618. if (empty($_SESSION['error_msg'])) {
  619. if ($_POST['v_inactive_session_timeout'] != $_SESSION['INACTIVE_SESSION_TIMEOUT']) {
  620. exec (HESTIA_CMD."v-change-sys-config-value INACTIVE_SESSION_TIMEOUT ".escapeshellarg($_POST['v_inactive_session_timeout']), $output, $return_var);
  621. check_return_code($return_var,$output);
  622. unset($output);
  623. if (empty($_SESSION['error_msg'])) $v_login_style = $_POST['v_inactive_session_timeout'];
  624. $v_security_adv = 'yes';
  625. }
  626. }
  627. // Change ALLOW_USERS_SERVER
  628. if (empty($_SESSION['error_msg'])) {
  629. if ($_POST['v_allow_users_system'] != $_SESSION['v_allow_users_system']) {
  630. exec (HESTIA_CMD."v-change-sys-config-value ALLOW_USERS_SYSTEM ".escapeshellarg($_POST['v_allow_users_system']), $output, $return_var);
  631. check_return_code($return_var,$output);
  632. unset($output);
  633. if (empty($_SESSION['error_msg'])) $v_allow_users_system = $_POST['v_allow_users_system'];
  634. $v_security_adv = 'yes';
  635. }
  636. }
  637. // Change login style
  638. if (empty($_SESSION['error_msg'])) {
  639. if ($_POST['v_login_style'] != $_SESSION['LOGIN_STYLE']) {
  640. exec (HESTIA_CMD."v-change-sys-config-value LOGIN_STYLE ".escapeshellarg($_POST['v_login_style']), $output, $return_var);
  641. check_return_code($return_var,$output);
  642. unset($output);
  643. if (empty($_SESSION['error_msg'])) $v_login_style = $_POST['v_login_style'];
  644. $v_security_adv = 'yes';
  645. }
  646. }
  647. // Update SSL certificate
  648. if ((!empty($_POST['v_ssl_crt'])) && (empty($_SESSION['error_msg']))) {
  649. if (($v_ssl_crt != str_replace("\r\n", "\n", $_POST['v_ssl_crt'])) || ($v_ssl_key != str_replace("\r\n", "\n", $_POST['v_ssl_key']))) {
  650. exec ('mktemp -d', $mktemp_output, $return_var);
  651. $tmpdir = $mktemp_output[0];
  652. // Certificate
  653. if (!empty($_POST['v_ssl_crt'])) {
  654. $fp = fopen($tmpdir."/certificate.crt", 'w');
  655. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_crt']));
  656. fwrite($fp, "\n");
  657. fclose($fp);
  658. }
  659. // Key
  660. if (!empty($_POST['v_ssl_key'])) {
  661. $fp = fopen($tmpdir."/certificate.key", 'w');
  662. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_key']));
  663. fwrite($fp, "\n");
  664. fclose($fp);
  665. }
  666. exec (HESTIA_CMD."v-change-sys-hestia-ssl ".$tmpdir, $output, $return_var);
  667. check_return_code($return_var,$output);
  668. unset($output);
  669. // List ssl certificate info
  670. exec (HESTIA_CMD."v-list-sys-hestia-ssl json", $output, $return_var);
  671. $ssl_str = json_decode(implode('', $output), true);
  672. unset($output);
  673. $v_ssl_crt = $ssl_str['HESTIA']['CRT'];
  674. $v_ssl_key = $ssl_str['HESTIA']['KEY'];
  675. $v_ssl_ca = $ssl_str['HESTIA']['CA'];
  676. $v_ssl_subject = $ssl_str['HESTIA']['SUBJECT'];
  677. $v_ssl_aliases = $ssl_str['HESTIA']['ALIASES'];
  678. $v_ssl_not_before = $ssl_str['HESTIA']['NOT_BEFORE'];
  679. $v_ssl_not_after = $ssl_str['HESTIA']['NOT_AFTER'];
  680. $v_ssl_signature = $ssl_str['HESTIA']['SIGNATURE'];
  681. $v_ssl_pub_key = $ssl_str['HESTIA']['PUB_KEY'];
  682. $v_ssl_issuer = $ssl_str['HESTIA']['ISSUER'];
  683. // Cleanup certificate tempfiles
  684. if (file_exists($tmpdir . '/certificate.crt')) unlink($tmpdir . '/certificate.crt');
  685. if (file_exists($tmpdir . '/certificate.key')) unlink($tmpdir . '/certificate.key');
  686. rmdir($tmpdir);
  687. }
  688. }
  689. // Flush field values on success
  690. if (empty($_SESSION['error_msg'])) {
  691. $_SESSION['ok_msg'] = _('Changes has been saved.');
  692. }
  693. }
  694. // Check system configuration
  695. exec (HESTIA_CMD . "v-list-sys-config json", $output, $return_var);
  696. $data = json_decode(implode('', $output), true);
  697. unset($output);
  698. $sys_arr = $data['config'];
  699. foreach ($sys_arr as $key => $value) {
  700. $_SESSION[$key] = $value;
  701. }
  702. // Render page
  703. render_page($user, $TAB, 'edit_server');
  704. // Flush session messages
  705. unset($_SESSION['error_msg']);
  706. unset($_SESSION['ok_msg']);