index.php 26 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616
  1. <?php
  2. error_reporting(NULL);
  3. $TAB = 'SERVER';
  4. // Main include
  5. include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
  6. // Check user
  7. if ($_SESSION['user'] != 'admin') {
  8. header("Location: /list/user");
  9. exit;
  10. }
  11. // Get server hostname
  12. $v_hostname = exec('hostname');
  13. // List available timezones and get current one
  14. $v_timezones = list_timezones();
  15. exec (HESTIA_CMD."v-get-sys-timezone", $output, $return_var);
  16. $v_timezone = $output[0];
  17. unset($output);
  18. if ($v_timezone == 'Etc/UTC' ) $v_timezone = 'UTC';
  19. if ($v_timezone == 'Pacific/Honolulu' ) $v_timezone = 'HAST';
  20. if ($v_timezone == 'US/Aleutian' ) $v_timezone = 'HADT';
  21. if ($v_timezone == 'Etc/GMT+9' ) $v_timezone = 'AKST';
  22. if ($v_timezone == 'America/Anchorage' ) $v_timezone = 'AKDT';
  23. if ($v_timezone == 'America/Dawson_Creek' ) $v_timezone = 'PST';
  24. if ($v_timezone == 'PST8PDT' ) $v_timezone = 'PDT';
  25. if ($v_timezone == 'MST7MDT' ) $v_timezone = 'MDT';
  26. if ($v_timezone == 'Canada/Saskatchewan' ) $v_timezone = 'CST';
  27. if ($v_timezone == 'CST6CDT' ) $v_timezone = 'CDT';
  28. if ($v_timezone == 'EST5EDT' ) $v_timezone = 'EDT';
  29. if ($v_timezone == 'America/Puerto_Rico' ) $v_timezone = 'AST';
  30. if ($v_timezone == 'America/Halifax' ) $v_timezone = 'ADT';
  31. // List supported php versions
  32. exec (HESTIA_CMD."v-list-web-templates-backend json", $output, $return_var);
  33. $backend_templates = json_decode(implode('', $output), true);
  34. unset($output);
  35. $v_php_versions = [
  36. 'php-5.6',
  37. 'php-7.0',
  38. 'php-7.1',
  39. 'php-7.2',
  40. 'php-7.3',
  41. 'php-7.4',
  42. 'php-8.0',
  43. ];
  44. sort($v_php_versions);
  45. if(empty($backend_templates))
  46. $v_php_versions=[];
  47. $backends_active = backendtpl_with_webdomains();
  48. $v_php_versions = array_map(function($php_version) use ($backend_templates, $backends_active) {
  49. // Mark installed php versions
  50. if(stripos($php_version,'php') !== 0)
  51. return false;
  52. $phpinfo = (object) [
  53. "name" => $php_version,
  54. "tpl" => strtoupper(str_replace('.', '_', $php_version)),
  55. "version" => str_ireplace('php-', '', $php_version),
  56. "usedby" => [],
  57. "installed" => false,
  58. "protected" => false,
  59. ];
  60. if(in_array($phpinfo->tpl, $backend_templates)) {
  61. $phpinfo->installed = true;
  62. }
  63. if (array_key_exists($phpinfo->tpl, $backends_active)) {
  64. // Prevent used php version to be removed
  65. if($phpinfo->installed)
  66. $phpinfo->protected = true;
  67. $phpinfo->usedby = $backends_active[$phpinfo->tpl];
  68. }
  69. if ($phpinfo->name == DEFAULT_PHP_VERSION) {
  70. // Prevent default php version to be removed
  71. if($phpinfo->installed)
  72. $phpinfo->protected = true;
  73. if (!empty($backends_active['default'])) {
  74. $phpinfo->usedby = array_merge_recursive($phpinfo->usedby,$backends_active['default'] );
  75. }
  76. }
  77. return $phpinfo;
  78. }, $v_php_versions);
  79. // List languages
  80. exec (HESTIA_CMD."v-list-sys-languages json", $output, $return_var);
  81. $language = json_decode(implode('', $output), true);
  82. foreach($language as $lang){
  83. $languages[$lang] = translate_json($lang);
  84. }
  85. asort($languages);
  86. unset($output);
  87. // List themes
  88. exec (HESTIA_CMD."v-list-sys-themes json", $output, $return_var);
  89. $theme = json_decode(implode('', $output), true);
  90. unset($output);
  91. // List dns cluster hosts
  92. exec (HESTIA_CMD."v-list-remote-dns-hosts json", $output, $return_var);
  93. $dns_cluster = json_decode(implode('', $output), true);
  94. unset($output);
  95. foreach ($dns_cluster as $key => $value) {
  96. $v_dns_cluster = 'yes';
  97. }
  98. // List Database hosts
  99. exec (HESTIA_CMD."v-list-database-hosts json", $output, $return_var);
  100. $db_hosts = json_decode(implode('', $output), true);
  101. unset($output);
  102. $v_mysql_hosts = array_values(array_filter($db_hosts, function($host){return $host['TYPE'] === 'mysql';}));
  103. $v_mysql = count($v_mysql_hosts) ? 'yes' : 'no';
  104. $v_pgsql_hosts = array_values(array_filter($db_hosts, function($host){return $host['TYPE'] === 'pgsql';}));
  105. $v_pgsql = count($v_pgsql_hosts) ? 'yes' : 'no';
  106. unset($db_hosts);
  107. // List backup settings
  108. $v_backup_dir = "/backup";
  109. if (!empty($_SESSION['BACKUP'])) $v_backup_dir = $_SESSION['BACKUP'];
  110. $v_backup_gzip = '5';
  111. if (!empty($_SESSION['BACKUP_GZIP'])) $v_backup_gzip = $_SESSION['BACKUP_GZIP'];
  112. $v_backup_mode = 'gzip';
  113. if (!empty($_SESSION['BACKUP_MODE'])) $v_backup_mode = $_SESSION['BACKUP_MODE'];
  114. $backup_types = explode(",",$_SESSION['BACKUP_SYSTEM']);
  115. foreach ($backup_types as $backup_type) {
  116. if ($backup_type == 'local') {
  117. $v_backup = 'yes';
  118. } else {
  119. exec (HESTIA_CMD."v-list-backup-host ".escapeshellarg($backup_type)." json", $output, $return_var);
  120. $v_remote_backup = json_decode(implode('', $output), true);
  121. unset($output);
  122. $v_backup_host = $v_remote_backup[$backup_type]['HOST'];
  123. $v_backup_type = $v_remote_backup[$backup_type]['TYPE'];
  124. $v_backup_username = $v_remote_backup[$backup_type]['USERNAME'];
  125. $v_backup_password = "";
  126. $v_backup_port = $v_remote_backup[$backup_type]['PORT'];
  127. $v_backup_bpath = $v_remote_backup[$backup_type]['BPATH'];
  128. }
  129. }
  130. // List ssl certificate info
  131. exec (HESTIA_CMD."v-list-sys-hestia-ssl json", $output, $return_var);
  132. $ssl_str = json_decode(implode('', $output), true);
  133. unset($output);
  134. $v_ssl_crt = $ssl_str['HESTIA']['CRT'];
  135. $v_ssl_key = $ssl_str['HESTIA']['KEY'];
  136. $v_ssl_ca = $ssl_str['HESTIA']['CA'];
  137. $v_ssl_subject = $ssl_str['HESTIA']['SUBJECT'];
  138. $v_ssl_aliases = $ssl_str['HESTIA']['ALIASES'];
  139. $v_ssl_not_before = $ssl_str['HESTIA']['NOT_BEFORE'];
  140. $v_ssl_not_after = $ssl_str['HESTIA']['NOT_AFTER'];
  141. $v_ssl_signature = $ssl_str['HESTIA']['SIGNATURE'];
  142. $v_ssl_pub_key = $ssl_str['HESTIA']['PUB_KEY'];
  143. $v_ssl_issuer = $ssl_str['HESTIA']['ISSUER'];
  144. // Check POST request
  145. if (!empty($_POST['save'])) {
  146. // Check token
  147. if ((!isset($_POST['token'])) || ($_SESSION['token'] != $_POST['token'])) {
  148. header('location: /login/');
  149. exit();
  150. }
  151. // Change hostname
  152. if ((!empty($_POST['v_hostname'])) && ($v_hostname != $_POST['v_hostname'])) {
  153. exec (HESTIA_CMD."v-change-sys-hostname ".escapeshellarg($_POST['v_hostname']), $output, $return_var);
  154. check_return_code($return_var,$output);
  155. unset($output);
  156. $v_hostname = $_POST['v_hostname'];
  157. }
  158. // Install/remove php versions
  159. if (empty($_SESSION['error_msg'])) {
  160. if(!empty($v_php_versions)) {
  161. $post_php = $_POST['v_php_versions'];
  162. array_map(function($php_version) use ($post_php) {
  163. if(array_key_exists($php_version->tpl, $post_php)) {
  164. if(!$php_version->installed) {
  165. exec (HESTIA_CMD . "v-add-web-php " . escapeshellarg($php_version->version), $output, $return_var);
  166. check_return_code($return_var, $output);
  167. unset($output);
  168. if(empty($_SESSION['error_msg']))
  169. $php_version->installed = true;
  170. }
  171. } else {
  172. if($php_version->installed && !$php_version->protected) {
  173. exec (HESTIA_CMD . "v-delete-web-php " . escapeshellarg($php_version->version), $output, $return_var);
  174. check_return_code($return_var, $output);
  175. unset($output);
  176. if(empty($_SESSION['error_msg']))
  177. $php_version->installed = false;
  178. }
  179. }
  180. return $php_version;
  181. }, $v_php_versions);
  182. }
  183. }
  184. // Change timezone
  185. if (empty($_SESSION['error_msg'])) {
  186. if (!empty($_POST['v_timezone'])) {
  187. $v_tz = $_POST['v_timezone'];
  188. if ($v_tz == 'UTC' ) $v_tz = 'Etc/UTC';
  189. if ($v_tz == 'HAST' ) $v_tz = 'Pacific/Honolulu';
  190. if ($v_tz == 'HADT' ) $v_tz = 'US/Aleutian';
  191. if ($v_tz == 'AKST' ) $v_tz = 'Etc/GMT+9';
  192. if ($v_tz == 'AKDT' ) $v_tz = 'America/Anchorage';
  193. if ($v_tz == 'PST' ) $v_tz = 'America/Dawson_Creek';
  194. if ($v_tz == 'PDT' ) $v_tz = 'PST8PDT';
  195. if ($v_tz == 'MDT' ) $v_tz = 'MST7MDT';
  196. if ($v_tz == 'CST' ) $v_tz = 'Canada/Saskatchewan';
  197. if ($v_tz == 'CDT' ) $v_tz = 'CST6CDT';
  198. if ($v_tz == 'EDT' ) $v_tz = 'EST5EDT';
  199. if ($v_tz == 'AST' ) $v_tz = 'America/Puerto_Rico';
  200. if ($v_tz == 'ADT' ) $v_tz = 'America/Halifax';
  201. if ($v_timezone != $v_tz) {
  202. exec (HESTIA_CMD."v-change-sys-timezone ".escapeshellarg($v_tz), $output, $return_var);
  203. check_return_code($return_var,$output);
  204. $v_timezone = $v_tz;
  205. unset($output);
  206. }
  207. }
  208. }
  209. // Change default language
  210. if (empty($_SESSION['error_msg'])) {
  211. if ((!empty($_POST['v_language'])) && ($_SESSION['LANGUAGE'] != $_POST['v_language'])) {
  212. if (isset($_POST['v_language_update'])) {
  213. exec (HESTIA_CMD."v-change-sys-language ".escapeshellarg($_POST['v_language'])." yes", $output, $return_var);
  214. if (empty($_SESSION['error_msg'])) $_SESSION['LANGUAGE'] = $_POST['v_language'];
  215. }
  216. exec (HESTIA_CMD."v-change-sys-language ".escapeshellarg($_POST['v_language']), $output, $return_var);
  217. check_return_code($return_var,$output);
  218. unset($output);
  219. if (empty($_SESSION['error_msg'])) $_SESSION['LANGUAGE'] = $_POST['v_language'];
  220. }
  221. }
  222. // Update theme
  223. if (empty($_SESSION['error_msg'])) {
  224. if ($_POST['v_theme'] != $_SESSION['THEME']) {
  225. exec (HESTIA_CMD."v-change-sys-theme ".escapeshellarg($_POST['v_theme']), $output, $return_var);
  226. check_return_code($return_var,$output);
  227. unset($output);
  228. }
  229. }
  230. // Set File Manager support
  231. if (empty($_SESSION['error_msg'])) {
  232. if ((!empty($_POST['v_filemanager'])) && ($_SESSION['FILE_MANAGER'] != $_POST['v_filemanager'])) {
  233. if ($_POST['v_filemanager'] == 'true') {
  234. exec (HESTIA_CMD."v-add-sys-filemanager", $output, $return_var);
  235. check_return_code($return_var,$output);
  236. unset($output);
  237. if (empty($_SESSION['error_msg'])) $_SESSION['FILE_MANAGER'] = 'true';
  238. } else {
  239. exec (HESTIA_CMD."v-delete-sys-filemanager", $output, $return_var);
  240. check_return_code($return_var,$output);
  241. unset($output);
  242. if (empty($_SESSION['error_msg'])) $_SESSION['FILE_MANAGER'] = 'false';
  243. }
  244. }
  245. }
  246. // Set disk_quota support
  247. if (empty($_SESSION['error_msg'])) {
  248. if ((!empty($_POST['v_quota'])) && ($_SESSION['DISK_QUOTA'] != $_POST['v_quota'])) {
  249. if ($_POST['v_quota'] == 'yes') {
  250. exec (HESTIA_CMD."v-add-sys-quota", $output, $return_var);
  251. check_return_code($return_var,$output);
  252. unset($output);
  253. if (empty($_SESSION['error_msg'])) $_SESSION['DISK_QUOTA'] = 'yes';
  254. } else {
  255. exec (HESTIA_CMD."v-delete-sys-quota", $output, $return_var);
  256. check_return_code($return_var,$output);
  257. unset($output);
  258. if (empty($_SESSION['error_msg'])) $_SESSION['DISK_QUOTA'] = 'no';
  259. }
  260. }
  261. }
  262. // Set firewall support
  263. if (empty($_SESSION['error_msg'])) {
  264. if ($_SESSION['FIREWALL_SYSTEM'] == 'iptables') $v_firewall = 'yes';
  265. if ($_SESSION['FIREWALL_SYSTEM'] != 'iptables') $v_firewall = 'no';
  266. if ((!empty($_POST['v_firewall'])) && ($v_firewall != $_POST['v_firewall'])) {
  267. if ($_POST['v_firewall'] == 'yes') {
  268. exec (HESTIA_CMD."v-add-sys-firewall", $output, $return_var);
  269. check_return_code($return_var,$output);
  270. unset($output);
  271. if (empty($_SESSION['error_msg'])) $_SESSION['FIREWALL_SYSTEM'] = 'iptables';
  272. } else {
  273. exec (HESTIA_CMD."v-delete-sys-firewall", $output, $return_var);
  274. check_return_code($return_var,$output);
  275. unset($output);
  276. if (empty($_SESSION['error_msg'])) $_SESSION['FIREWALL_SYSTEM'] = '';
  277. }
  278. }
  279. }
  280. // Update mysql pasword
  281. if (empty($_SESSION['error_msg'])) {
  282. if (!empty($_POST['v_mysql_password'])) {
  283. exec (HESTIA_CMD."v-change-database-host-password mysql localhost root ".escapeshellarg($_POST['v_mysql_password']), $output, $return_var);
  284. check_return_code($return_var,$output);
  285. unset($output);
  286. $v_db_adv = 'yes';
  287. }
  288. }
  289. // Update webmail url
  290. if (empty($_SESSION['error_msg'])) {
  291. if ($_POST['v_webmail_alias'] != $_SESSION['WEBMAIL_ALIAS']) {
  292. exec (HESTIA_CMD."v-change-sys-webmail ".escapeshellarg($_POST['v_webmail_alias']), $output, $return_var);
  293. check_return_code($return_var,$output);
  294. unset($output);
  295. $v_mail_adv = 'yes';
  296. }
  297. }
  298. // Update phpMyAdmin url
  299. if (empty($_SESSION['error_msg'])) {
  300. if ($_POST['v_mysql_url'] != $_SESSION['DB_PMA_ALIAS']) {
  301. exec (HESTIA_CMD."v-change-sys-db-alias pma ".escapeshellarg($_POST['v_mysql_url']), $output, $return_var);
  302. check_return_code($return_var,$output);
  303. unset($output);
  304. $v_db_adv = 'yes';
  305. }
  306. }
  307. // Update phpPgAdmin url
  308. if (empty($_SESSION['error_msg'])) {
  309. if ($_POST['v_pgsql_url'] != $_SESSION['DB_PGA_ALIAS']) {
  310. exec (HESTIA_CMD."v-change-sys-db-alias pga ".escapeshellarg($_POST['v_pgsql_url']), $output, $return_var);
  311. check_return_code($return_var,$output);
  312. unset($output);
  313. $v_db_adv = 'yes';
  314. }
  315. }
  316. // Update release branch
  317. if (empty($_SESSION['error_msg'])) {
  318. if ($_POST['v_release_branch'] != $_SESSION['RELEASE_BRANCH']) {
  319. exec (HESTIA_CMD."v-change-sys-release ".escapeshellarg($_POST['v_release_branch']), $output, $return_var);
  320. check_return_code($return_var,$output);
  321. unset($output);
  322. $v_release_adv = 'yes';
  323. }
  324. }
  325. // Update send notification setting
  326. if (empty($_SESSION['error_msg'])) {
  327. if ($_POST['v_upgrade_send_notification_email'] != $_SESSION['UPGRADE_SEND_EMAIL']) {
  328. if ($_POST['v_upgrade_send_notification_email'] == 'on'){ $_POST['v_upgrade_send_notification_email'] = 'true'; } else { $_POST['v_upgrade_send_notification_email'] = 'false'; }
  329. exec (HESTIA_CMD."v-change-sys-config-value UPGRADE_SEND_EMAIL ".escapeshellarg($_POST['v_upgrade_send_notification_email']), $output, $return_var);
  330. check_return_code($return_var,$output);
  331. unset($output);
  332. $v_upgrade_notification_adv = 'yes';
  333. }
  334. }
  335. // Update send log by email setting
  336. if (empty($_SESSION['error_msg'])) {
  337. if ($_POST['v_upgrade_send_email_log'] != $_SESSION['UPGRADE_SEND_EMAIL_LOG']) {
  338. if ($_POST['v_upgrade_send_email_log'] == 'on') { $_POST['v_upgrade_send_email_log'] = 'true'; } else { $_POST['v_upgrade_send_email_log'] = 'false'; }
  339. exec (HESTIA_CMD."v-change-sys-config-value UPGRADE_SEND_EMAIL_LOG ".escapeshellarg($_POST['v_upgrade_send_email_log']), $output, $return_var);
  340. check_return_code($return_var,$output);
  341. unset($output);
  342. $v_upgrade_send_log_adv = 'yes';
  343. }
  344. }
  345. // Disable local backup
  346. if (empty($_SESSION['error_msg'])) {
  347. if (($_POST['v_backup'] == 'no') && ($v_backup == 'yes' )) {
  348. exec (HESTIA_CMD."v-delete-backup-host local", $output, $return_var);
  349. check_return_code($return_var,$output);
  350. unset($output);
  351. if (empty($_SESSION['error_msg'])) $v_backup = 'no';
  352. $v_backup_adv = 'yes';
  353. }
  354. }
  355. // Enable local backups
  356. if (empty($_SESSION['error_msg'])) {
  357. if (($_POST['v_backup'] == 'yes') && ($v_backup != 'yes' )) {
  358. exec (HESTIA_CMD."v-add-backup-host local", $output, $return_var);
  359. check_return_code($return_var,$output);
  360. unset($output);
  361. if (empty($_SESSION['error_msg'])) $v_backup = 'yes';
  362. $v_backup_adv = 'yes';
  363. }
  364. }
  365. // Change backup gzip level
  366. if (empty($_SESSION['error_msg'])) {
  367. if ($_POST['v_backup_gzip'] != $v_backup_gzip ) {
  368. exec (HESTIA_CMD."v-change-sys-config-value BACKUP_GZIP ".escapeshellarg($_POST['v_backup_gzip']), $output, $return_var);
  369. check_return_code($return_var,$output);
  370. unset($output);
  371. if (empty($_SESSION['error_msg'])) $v_backup_gzip = $_POST['v_backup_gzip'];
  372. $v_backup_adv = 'yes';
  373. }
  374. }
  375. // Change backup gzip level
  376. if (empty($_SESSION['error_msg'])) {
  377. if ($_POST['v_backup_mode'] != $v_backup_mode ) {
  378. exec (HESTIA_CMD."v-change-sys-config-value BACKUP_MODE ".escapeshellarg($_POST['v_backup_mode']), $output, $return_var);
  379. check_return_code($return_var,$output);
  380. unset($output);
  381. if (empty($_SESSION['error_msg'])) $v_backup_mode = $_POST['v_backup_mode'];
  382. $v_backup_adv = 'yes';
  383. }
  384. }
  385. // Change backup path
  386. if (empty($_SESSION['error_msg'])) {
  387. if ($_POST['v_backup_dir'] != $v_backup_dir ) {
  388. exec (HESTIA_CMD."v-change-sys-config-value BACKUP ".escapeshellarg($_POST['v_backup_dir']), $output, $return_var);
  389. check_return_code($return_var,$output);
  390. unset($output);
  391. if (empty($_SESSION['error_msg'])) $v_backup_dir = $_POST['v_backup_dir'];
  392. $v_backup_adv = 'yes';
  393. }
  394. }
  395. // Add remote backup host
  396. if (empty($_SESSION['error_msg'])) {
  397. if ((!empty($_POST['v_backup_host'])) && (empty($v_backup_host))) {
  398. $v_backup_host = escapeshellarg($_POST['v_backup_host']);
  399. $v_backup_port = escapeshellarg($_POST['v_backup_port']);
  400. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  401. $v_backup_username = escapeshellarg($_POST['v_backup_username']);
  402. $v_backup_password = escapeshellcmd($_POST['v_backup_password']);
  403. $v_backup_bpath = escapeshellarg($_POST['v_backup_bpath']);
  404. exec (HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_host ." ". $v_backup_username ." ". $v_backup_password ." ". $v_backup_bpath." ".$v_backup_port, $output, $return_var);
  405. check_return_code($return_var,$output);
  406. unset($output);
  407. if (empty($_SESSION['error_msg'])) $v_backup_host = $_POST['v_backup_host'];
  408. if (empty($_SESSION['error_msg'])) $v_backup_type = $_POST['v_backup_type'];
  409. if (empty($_SESSION['error_msg'])) $v_backup_username = $_POST['v_backup_username'];
  410. if (empty($_SESSION['error_msg'])) $v_backup_password = $_POST['v_backup_password'];
  411. if (empty($_SESSION['error_msg'])) $v_backup_bpath = $_POST['v_backup_bpath'];
  412. if (empty($_SESSION['error_msg'])) $v_backup_port = $_POST['v_backup_port'];
  413. $v_backup_new = 'yes';
  414. $v_backup_adv = 'yes';
  415. $v_backup_remote_adv = 'yes';
  416. }
  417. }
  418. // Change remote backup host type
  419. if (empty($_SESSION['error_msg'])) {
  420. if ((!empty($_POST['v_backup_host'])) && ($_POST['v_backup_type'] != $v_backup_type)) {
  421. exec (HESTIA_CMD."v-delete-backup-host " . escapeshellarg($v_backup_type) , $output, $return_var);
  422. unset($output);
  423. $v_backup_host = escapeshellarg($_POST['v_backup_host']);
  424. $v_backup_port = escapeshellarg($_POST['v_backup_port']);
  425. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  426. $v_backup_username = escapeshellarg($_POST['v_backup_username']);
  427. $v_backup_password = escapeshellcmd($_POST['v_backup_password']);
  428. $v_backup_bpath = escapeshellarg($_POST['v_backup_bpath']);
  429. exec (HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_host ." ". $v_backup_username ." ". $v_backup_password ." ". $v_backup_bpath." ".$v_backup_port, $output, $return_var);
  430. check_return_code($return_var,$output);
  431. unset($output);
  432. if (empty($_SESSION['error_msg'])) $v_backup_host = $_POST['v_backup_host'];
  433. if (empty($_SESSION['error_msg'])) $v_backup_type = $_POST['v_backup_type'];
  434. if (empty($_SESSION['error_msg'])) $v_backup_username = $_POST['v_backup_username'];
  435. if (empty($_SESSION['error_msg'])) $v_backup_password = $_POST['v_backup_password'];
  436. if (empty($_SESSION['error_msg'])) $v_backup_bpath = $_POST['v_backup_bpath'];
  437. if (empty($_SESSION['error_msg'])) $v_backup_port = $_POST['v_backup_port'];
  438. $v_backup_adv = 'yes';
  439. $v_backup_remote_adv = 'yes';
  440. }
  441. }
  442. // Change remote backup host
  443. if (empty($_SESSION['error_msg'])) {
  444. if ((!empty($_POST['v_backup_host'])) && ($_POST['v_backup_type'] == $v_backup_type) && (!isset($v_backup_new))) {
  445. if (($_POST['v_backup_host'] != $v_backup_host) || ($_POST['v_backup_username'] != $v_backup_username) || ($_POST['v_backup_password'] != $v_backup_password) || ($_POST['v_backup_bpath'] != $v_backup_bpath || $_POST['v_backup_port'] != $v_backup_port)){
  446. $v_backup_host = escapeshellarg($_POST['v_backup_host']);
  447. $v_backup_port = escapeshellarg($_POST['v_backup_port']);
  448. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  449. $v_backup_username = escapeshellarg($_POST['v_backup_username']);
  450. $v_backup_password = escapeshellcmd($_POST['v_backup_password']);
  451. $v_backup_bpath = escapeshellarg($_POST['v_backup_bpath']);
  452. exec (HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_host ." ". $v_backup_username ." ". $v_backup_password ." ". $v_backup_bpath." ".$v_backup_port, $output, $return_var);
  453. check_return_code($return_var,$output);
  454. unset($output);
  455. if (empty($_SESSION['error_msg'])) $v_backup_host = $_POST['v_backup_host'];
  456. if (empty($_SESSION['error_msg'])) $v_backup_type = $_POST['v_backup_type'];
  457. if (empty($_SESSION['error_msg'])) $v_backup_username = $_POST['v_backup_username'];
  458. if (empty($_SESSION['error_msg'])) $v_backup_password = $_POST['v_backup_password'];
  459. if (empty($_SESSION['error_msg'])) $v_backup_bpath = $_POST['v_backup_bpath'];
  460. if (empty($_SESSION['error_msg'])) $v_backup_port = $_POST['v_backup_port'];
  461. $v_backup_adv = 'yes';
  462. $v_backup_remote_adv = 'yes';
  463. }
  464. }
  465. }
  466. // Delete remote backup host
  467. if (empty($_SESSION['error_msg'])) {
  468. if ((empty($_POST['v_backup_host'])) && (!empty($v_backup_host))) {
  469. exec (HESTIA_CMD."v-delete-backup-host ".escapeshellarg($v_backup_type), $output, $return_var);
  470. check_return_code($return_var,$output);
  471. unset($output);
  472. if (empty($_SESSION['error_msg'])) $v_backup_host = '';
  473. if (empty($_SESSION['error_msg'])) $v_backup_type = '';
  474. if (empty($_SESSION['error_msg'])) $v_backup_username = '';
  475. if (empty($_SESSION['error_msg'])) $v_backup_password = '';
  476. if (empty($_SESSION['error_msg'])) $v_backup_bpath = '';
  477. $v_backup_adv = '';
  478. $v_backup_remote_adv = '';
  479. }
  480. }
  481. // Change login style
  482. if (empty($_SESSION['error_msg'])) {
  483. if ($_POST['v_login_style'] != $_SESSION['LOGIN_STYLE']) {
  484. exec (HESTIA_CMD."v-change-sys-config-value LOGIN_STYLE ".escapeshellarg($_POST['v_login_style']), $output, $return_var);
  485. check_return_code($return_var,$output);
  486. unset($output);
  487. if (empty($_SESSION['error_msg'])) $v_login_style = $_POST['v_login_style'];
  488. $v_security_adv = 'yes';
  489. }
  490. }
  491. // Update SSL certificate
  492. if ((!empty($_POST['v_ssl_crt'])) && (empty($_SESSION['error_msg']))) {
  493. if (($v_ssl_crt != str_replace("\r\n", "\n", $_POST['v_ssl_crt'])) || ($v_ssl_key != str_replace("\r\n", "\n", $_POST['v_ssl_key']))) {
  494. exec ('mktemp -d', $mktemp_output, $return_var);
  495. $tmpdir = $mktemp_output[0];
  496. // Certificate
  497. if (!empty($_POST['v_ssl_crt'])) {
  498. $fp = fopen($tmpdir."/certificate.crt", 'w');
  499. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_crt']));
  500. fwrite($fp, "\n");
  501. fclose($fp);
  502. }
  503. // Key
  504. if (!empty($_POST['v_ssl_key'])) {
  505. $fp = fopen($tmpdir."/certificate.key", 'w');
  506. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_key']));
  507. fwrite($fp, "\n");
  508. fclose($fp);
  509. }
  510. exec (HESTIA_CMD."v-change-sys-hestia-ssl ".$tmpdir, $output, $return_var);
  511. check_return_code($return_var,$output);
  512. unset($output);
  513. // List ssl certificate info
  514. exec (HESTIA_CMD."v-list-sys-hestia-ssl json", $output, $return_var);
  515. $ssl_str = json_decode(implode('', $output), true);
  516. unset($output);
  517. $v_ssl_crt = $ssl_str['HESTIA']['CRT'];
  518. $v_ssl_key = $ssl_str['HESTIA']['KEY'];
  519. $v_ssl_ca = $ssl_str['HESTIA']['CA'];
  520. $v_ssl_subject = $ssl_str['HESTIA']['SUBJECT'];
  521. $v_ssl_aliases = $ssl_str['HESTIA']['ALIASES'];
  522. $v_ssl_not_before = $ssl_str['HESTIA']['NOT_BEFORE'];
  523. $v_ssl_not_after = $ssl_str['HESTIA']['NOT_AFTER'];
  524. $v_ssl_signature = $ssl_str['HESTIA']['SIGNATURE'];
  525. $v_ssl_pub_key = $ssl_str['HESTIA']['PUB_KEY'];
  526. $v_ssl_issuer = $ssl_str['HESTIA']['ISSUER'];
  527. // Cleanup certificate tempfiles
  528. if (file_exists($tmpdir . '/certificate.crt')) unlink($tmpdir . '/certificate.crt');
  529. if (file_exists($tmpdir . '/certificate.key')) unlink($tmpdir . '/certificate.key');
  530. rmdir($tmpdir);
  531. }
  532. }
  533. // Flush field values on success
  534. if (empty($_SESSION['error_msg'])) {
  535. $_SESSION['ok_msg'] = _('Changes has been saved.');
  536. }
  537. }
  538. // Check system configuration
  539. exec (HESTIA_CMD . "v-list-sys-config json", $output, $return_var);
  540. $data = json_decode(implode('', $output), true);
  541. unset($output);
  542. $sys_arr = $data['config'];
  543. foreach ($sys_arr as $key => $value) {
  544. $_SESSION[$key] = $value;
  545. }
  546. // Render page
  547. render_page($user, $TAB, 'edit_server');
  548. // Flush session messages
  549. unset($_SESSION['error_msg']);
  550. unset($_SESSION['ok_msg']);