main.sh 29 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959
  1. #!/usr/bin/env bash
  2. # Internal variables
  3. HOMEDIR='/home'
  4. BACKUP='/backup'
  5. BACKUP_GZIP=9
  6. BACKUP_DISK_LIMIT=95
  7. BACKUP_LA_LIMIT=5
  8. RRD_STEP=300
  9. BIN=$HESTIA/bin
  10. USER_DATA=$HESTIA/data/users/$user
  11. WEBTPL=$HESTIA/data/templates/web
  12. MAILTPL=$HESTIA/data/templates/mail
  13. DNSTPL=$HESTIA/data/templates/dns
  14. RRD=$HESTIA/web/rrd
  15. SENDMAIL="$HESTIA/web/inc/mail-wrapper.php"
  16. # Return codes
  17. OK=0
  18. E_ARGS=1
  19. E_INVALID=2
  20. E_NOTEXIST=3
  21. E_EXISTS=4
  22. E_SUSPENDED=5
  23. E_UNSUSPENDED=6
  24. E_INUSE=7
  25. E_LIMIT=8
  26. E_PASSWORD=9
  27. E_FORBIDEN=10
  28. E_DISABLED=11
  29. E_PARSING=12
  30. E_DISK=13
  31. E_LA=14
  32. E_CONNECT=15
  33. E_FTP=16
  34. E_DB=17
  35. E_RRD=18
  36. E_UPDATE=19
  37. E_RESTART=20
  38. # Generate time stamp
  39. new_timestamp() {
  40. time_n_date=$(date +'%T %F')
  41. time=$(echo "$time_n_date" |cut -f 1 -d \ )
  42. date=$(echo "$time_n_date" |cut -f 2 -d \ )
  43. }
  44. # Event string for logger
  45. for ((I=1; I <= $# ; I++)); do
  46. if [[ "$HIDE" != $I ]]; then
  47. ARGUMENTS="$ARGUMENTS '$(eval echo \$${I})'"
  48. else
  49. ARGUMENTS="$ARGUMENTS '******'"
  50. fi
  51. done
  52. # Log event function
  53. log_event() {
  54. if [ -z "$time" ]; then
  55. LOG_TIME="$(date +'%F %T') $(basename $0)"
  56. else
  57. LOG_TIME="$date $time $(basename $0)"
  58. fi
  59. if [ "$1" -eq 0 ]; then
  60. echo "$LOG_TIME $2" >> $HESTIA/log/system.log
  61. else
  62. echo "$LOG_TIME $2 [Error $1]" >> $HESTIA/log/error.log
  63. fi
  64. }
  65. # Log user history
  66. log_history() {
  67. cmd=$1
  68. undo=${2-no}
  69. log_user=${3-$user}
  70. log=$HESTIA/data/users/$log_user/history.log
  71. touch $log
  72. if [ '99' -lt "$(wc -l $log |cut -f 1 -d ' ')" ]; then
  73. tail -n 49 $log > $log.moved
  74. mv -f $log.moved $log
  75. chmod 660 $log
  76. fi
  77. if [ -z "$date" ]; then
  78. time_n_date=$(date +'%T %F')
  79. time=$(echo "$time_n_date" |cut -f 1 -d \ )
  80. date=$(echo "$time_n_date" |cut -f 2 -d \ )
  81. fi
  82. curr_str=$(grep "ID=" $log | cut -f 2 -d \' | sort -n | tail -n1)
  83. id="$((curr_str +1))"
  84. echo "ID='$id' DATE='$date' TIME='$time' CMD='$cmd' UNDO='$undo'" >> $log
  85. }
  86. # Result checker
  87. check_result() {
  88. if [ $1 -ne 0 ]; then
  89. echo "Error: $2"
  90. if [ ! -z "$3" ]; then
  91. log_event "$3" "$ARGUMENTS"
  92. exit $3
  93. else
  94. log_event "$1" "$ARGUMENTS"
  95. exit $1
  96. fi
  97. fi
  98. }
  99. # Argument list checker
  100. check_args() {
  101. if [ "$1" -gt "$2" ]; then
  102. echo "Usage: $(basename $0) $3"
  103. check_result $E_ARGS "not enought arguments" >/dev/null
  104. fi
  105. }
  106. # Subsystem checker
  107. is_system_enabled() {
  108. if [ -z "$1" ] || [ "$1" = no ]; then
  109. check_result $E_DISABLED "$2 is not enabled"
  110. fi
  111. }
  112. # User package check
  113. is_package_full() {
  114. case "$1" in
  115. WEB_DOMAINS) used=$(wc -l $USER_DATA/web.conf);;
  116. WEB_ALIASES) used=$(echo $aliases |tr ',' '\n' |wc -l);;
  117. DNS_DOMAINS) used=$(wc -l $USER_DATA/dns.conf);;
  118. DNS_RECORDS) used=$(wc -l $USER_DATA/dns/$domain.conf);;
  119. MAIL_DOMAINS) used=$(wc -l $USER_DATA/mail.conf);;
  120. MAIL_ACCOUNTS) used=$(wc -l $USER_DATA/mail/$domain.conf);;
  121. DATABASES) used=$(wc -l $USER_DATA/db.conf);;
  122. CRON_JOBS) used=$(wc -l $USER_DATA/cron.conf);;
  123. esac
  124. used=$(echo "$used"| cut -f 1 -d \ )
  125. limit=$(grep "^$1=" $USER_DATA/user.conf |cut -f 2 -d \')
  126. if [ "$limit" != 'unlimited' ] && [[ "$used" -ge "$limit" ]]; then
  127. check_result $E_LIMIT "$1 limit is reached :: upgrade user package"
  128. fi
  129. }
  130. # User owner for reseller plugin
  131. get_user_owner() {
  132. if [ -z "$RESELLER_KEY" ]; then
  133. owner='admin'
  134. else
  135. owner=$(grep "^OWNER" $USER_DATA/user.conf| cut -f 2 -d \')
  136. if [ -z "$owner" ]; then
  137. owner='admin'
  138. fi
  139. fi
  140. }
  141. # Random password generator
  142. generate_password() {
  143. matrix=$1
  144. lenght=$2
  145. if [ -z "$matrix" ]; then
  146. matrix=0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz
  147. fi
  148. if [ -z "$lenght" ]; then
  149. lenght=10
  150. fi
  151. i=1
  152. while [ $i -le $lenght ]; do
  153. pass="$pass${matrix:$(($RANDOM%${#matrix})):1}"
  154. ((i++))
  155. done
  156. echo "$pass"
  157. }
  158. # Package existence check
  159. is_package_valid() {
  160. if [ -z "$1" ]; then
  161. pkg_dir="$HESTIA/data/packages"
  162. fi
  163. if [ ! -e "$pkg_dir/$package.pkg" ]; then
  164. check_result $E_NOTEXIST "package $package doesn't exist"
  165. fi
  166. }
  167. # Validate system type
  168. is_type_valid() {
  169. if [ -z "$(echo $1 | grep -w $2)" ]; then
  170. check_result $E_INVALID "$2 type is invalid"
  171. fi
  172. }
  173. # Check user backup settings
  174. is_backup_enabled() {
  175. BACKUPS=$(grep "^BACKUPS=" $USER_DATA/user.conf | cut -f2 -d \')
  176. if [ -z "$BACKUPS" ] || [[ "$BACKUPS" -le '0' ]]; then
  177. check_result $E_DISABLED "user backup is disabled"
  178. fi
  179. }
  180. # Check user backup settings
  181. is_backup_scheduled() {
  182. if [ -e "$HESTIA/data/queue/backup.pipe" ]; then
  183. check_q=$(grep " $user " $HESTIA/data/queue/backup.pipe | grep $1)
  184. if [ ! -z "$check_q" ]; then
  185. check_result $E_EXISTS "$1 is already scheduled"
  186. fi
  187. fi
  188. }
  189. # Check if object is new
  190. is_object_new() {
  191. if [ $2 = 'USER' ]; then
  192. if [ -d "$USER_DATA" ]; then
  193. object="OK"
  194. fi
  195. else
  196. object=$(grep "$2='$3'" $USER_DATA/$1.conf)
  197. fi
  198. if [ ! -z "$object" ]; then
  199. check_result $E_EXISTS "$2=$3 is already exists"
  200. fi
  201. }
  202. # Check if object is valid
  203. is_object_valid() {
  204. if [ $2 = 'USER' ]; then
  205. if [ ! -d "$HESTIA/data/users/$3" ]; then
  206. check_result $E_NOTEXIST "$1 $3 doesn't exist"
  207. fi
  208. else
  209. object=$(grep "$2='$3'" $HESTIA/data/users/$user/$1.conf)
  210. if [ -z "$object" ]; then
  211. arg1=$(basename $1)
  212. arg2=$(echo $2 |tr '[:upper:]' '[:lower:]')
  213. check_result $E_NOTEXIST "$arg1 $arg2 $3 doesn't exist"
  214. fi
  215. fi
  216. }
  217. # Check if object is supended
  218. is_object_suspended() {
  219. if [ $2 = 'USER' ]; then
  220. spnd=$(cat $USER_DATA/$1.conf|grep "SUSPENDED='yes'")
  221. else
  222. spnd=$(grep "$2='$3'" $USER_DATA/$1.conf|grep "SUSPENDED='yes'")
  223. fi
  224. if [ -z "$spnd" ]; then
  225. check_result $E_UNSUSPENDED "$(basename $1) $3 is not suspended"
  226. fi
  227. }
  228. # Check if object is unsupended
  229. is_object_unsuspended() {
  230. if [ $2 = 'USER' ]; then
  231. spnd=$(cat $USER_DATA/$1.conf |grep "SUSPENDED='yes'")
  232. else
  233. spnd=$(grep "$2='$3'" $USER_DATA/$1.conf |grep "SUSPENDED='yes'")
  234. fi
  235. if [ ! -z "$spnd" ]; then
  236. check_result $E_SUSPENDED "$(basename $1) $3 is suspended"
  237. fi
  238. }
  239. # Check if object value is empty
  240. is_object_value_empty() {
  241. str=$(grep "$2='$3'" $USER_DATA/$1.conf)
  242. eval $str
  243. eval value=$4
  244. if [ ! -z "$value" ] && [ "$value" != 'no' ]; then
  245. check_result $E_EXISTS "${4//$}=$value is already exists"
  246. fi
  247. }
  248. # Check if object value is empty
  249. is_object_value_exist() {
  250. str=$(grep "$2='$3'" $USER_DATA/$1.conf)
  251. eval $str
  252. eval value=$4
  253. if [ -z "$value" ] || [ "$value" = 'no' ]; then
  254. check_result $E_NOTEXIST "${4//$}=$value doesn't exist"
  255. fi
  256. }
  257. # Check if password is transmitted via file
  258. is_password_valid() {
  259. if [[ "$password" =~ ^/tmp/ ]]; then
  260. if [ -f "$password" ]; then
  261. password="$(head -n1 $password)"
  262. fi
  263. fi
  264. }
  265. # Check if hash is transmitted via file
  266. is_hash_valid() {
  267. if [[ "$hash" =~ ^/tmp/ ]]; then
  268. if [ -f "$hash" ]; then
  269. hash="$(head -n1 $hash)"
  270. fi
  271. fi
  272. }
  273. # Check if directory is a symlink
  274. is_dir_symlink() {
  275. if [[ -L "$1" ]]; then
  276. check_result $E_FORBIDEN "$1 directory is a symlink"
  277. fi
  278. }
  279. # Get object value
  280. get_object_value() {
  281. object=$(grep "$2='$3'" $USER_DATA/$1.conf)
  282. eval "$object"
  283. eval echo $4
  284. }
  285. # Update object value
  286. update_object_value() {
  287. row=$(grep -nF "$2='$3'" $USER_DATA/$1.conf)
  288. lnr=$(echo $row | cut -f 1 -d ':')
  289. object=$(echo $row | sed "s/^$lnr://")
  290. eval "$object"
  291. eval old="$4"
  292. old=$(echo "$old" | sed -e 's/\\/\\\\/g' -e 's/&/\\&/g' -e 's/\//\\\//g')
  293. new=$(echo "$5" | sed -e 's/\\/\\\\/g' -e 's/&/\\&/g' -e 's/\//\\\//g')
  294. sed -i "$lnr s/${4//$/}='${old//\*/\\*}'/${4//$/}='${new//\*/\\*}'/g" \
  295. $USER_DATA/$1.conf
  296. }
  297. # Add object key
  298. add_object_key() {
  299. row=$(grep -n "$2='$3'" $USER_DATA/$1.conf)
  300. lnr=$(echo $row | cut -f 1 -d ':')
  301. object=$(echo $row | sed "s/^$lnr://")
  302. if [ -z "$(echo $object |grep $4=)" ]; then
  303. eval old="$4"
  304. sed -i "$lnr s/$5='/$4='' $5='/" $USER_DATA/$1.conf
  305. fi
  306. }
  307. # Search objects
  308. search_objects() {
  309. OLD_IFS="$IFS"
  310. IFS=$'\n'
  311. for line in $(grep $2=\'$3\' $USER_DATA/$1.conf); do
  312. eval $line
  313. eval echo \$$4
  314. done
  315. IFS="$OLD_IFS"
  316. }
  317. # Get user value
  318. get_user_value() {
  319. grep "^${1//$/}=" $USER_DATA/user.conf | head -1 | awk -F "'" '{print $2}'
  320. }
  321. # Update user value in user.conf
  322. update_user_value() {
  323. key="${2//$}"
  324. lnr=$(grep -n "^$key='" $HESTIA/data/users/$1/user.conf |cut -f 1 -d ':')
  325. if [ ! -z "$lnr" ]; then
  326. sed -i "$lnr d" $HESTIA/data/users/$1/user.conf
  327. sed -i "$lnr i\\$key='${3}'" $HESTIA/data/users/$1/user.conf
  328. fi
  329. }
  330. # Increase user counter
  331. increase_user_value() {
  332. key="${2//$}"
  333. factor="${3-1}"
  334. conf="$HESTIA/data/users/$1/user.conf"
  335. old=$(grep "$key=" $conf | cut -f 2 -d \')
  336. if [ -z "$old" ]; then
  337. old=0
  338. fi
  339. new=$((old + factor))
  340. sed -i "s/$key='$old'/$key='$new'/g" $conf
  341. }
  342. # Decrease user counter
  343. decrease_user_value() {
  344. key="${2//$}"
  345. factor="${3-1}"
  346. conf="$HESTIA/data/users/$1/user.conf"
  347. old=$(grep "$key=" $conf | cut -f 2 -d \')
  348. if [ -z "$old" ]; then
  349. old=0
  350. fi
  351. if [ "$old" -le 1 ]; then
  352. new=0
  353. else
  354. new=$((old - factor))
  355. fi
  356. if [ "$new" -lt 0 ]; then
  357. new=0
  358. fi
  359. sed -i "s/$key='$old'/$key='$new'/g" $conf
  360. }
  361. # Notify user
  362. send_notice() {
  363. topic=$1
  364. notice=$2
  365. if [ "$notify" = 'yes' ]; then
  366. touch $USER_DATA/notifications.conf
  367. chmod 660 $USER_DATA/notifications.conf
  368. time_n_date=$(date +'%T %F')
  369. time=$(echo "$time_n_date" |cut -f 1 -d \ )
  370. date=$(echo "$time_n_date" |cut -f 2 -d \ )
  371. nid=$(grep "NID=" $USER_DATA/notifications.conf |cut -f 2 -d \')
  372. nid=$(echo "$nid" |sort -n |tail -n1)
  373. if [ ! -z "$nid" ]; then
  374. nid="$((nid +1))"
  375. else
  376. nid=1
  377. fi
  378. str="NID='$nid' TOPIC='$topic' NOTICE='$notice' TYPE='$type'"
  379. str="$str ACK='no' TIME='$time' DATE='$date'"
  380. echo "$str" >> $USER_DATA/notifications.conf
  381. if [ -z "$(grep NOTIFICATIONS $USER_DATA/user.conf)" ]; then
  382. sed -i "s/^TIME/NOTIFICATIONS='yes'\nTIME/g" $USER_DATA/user.conf
  383. else
  384. update_user_value "$user" '$NOTIFICATIONS' "yes"
  385. fi
  386. fi
  387. }
  388. # Recalculate U_DISK value
  389. recalc_user_disk_usage() {
  390. u_usage=0
  391. if [ -f "$USER_DATA/web.conf" ]; then
  392. usage=0
  393. dusage=$(grep 'U_DISK=' $USER_DATA/web.conf |\
  394. awk -F "U_DISK='" '{print $2}' | cut -f 1 -d \')
  395. for disk_usage in $dusage; do
  396. usage=$((usage + disk_usage))
  397. done
  398. d=$(grep "U_DISK_WEB='" $USER_DATA/user.conf | cut -f 2 -d \')
  399. sed -i "s/U_DISK_WEB='$d'/U_DISK_WEB='$usage'/g" $USER_DATA/user.conf
  400. u_usage=$((u_usage + usage))
  401. fi
  402. if [ -f "$USER_DATA/mail.conf" ]; then
  403. usage=0
  404. dusage=$(grep 'U_DISK=' $USER_DATA/mail.conf |\
  405. awk -F "U_DISK='" '{print $2}' | cut -f 1 -d \')
  406. for disk_usage in $dusage; do
  407. usage=$((usage + disk_usage))
  408. done
  409. d=$(grep "U_DISK_MAIL='" $USER_DATA/user.conf | cut -f 2 -d \')
  410. sed -i "s/U_DISK_MAIL='$d'/U_DISK_MAIL='$usage'/g" $USER_DATA/user.conf
  411. u_usage=$((u_usage + usage))
  412. fi
  413. if [ -f "$USER_DATA/db.conf" ]; then
  414. usage=0
  415. dusage=$(grep 'U_DISK=' $USER_DATA/db.conf |\
  416. awk -F "U_DISK='" '{print $2}' | cut -f 1 -d \')
  417. for disk_usage in $dusage; do
  418. usage=$((usage + disk_usage))
  419. done
  420. d=$(grep "U_DISK_DB='" $USER_DATA/user.conf | cut -f 2 -d \')
  421. sed -i "s/U_DISK_DB='$d'/U_DISK_DB='$usage'/g" $USER_DATA/user.conf
  422. u_usage=$((u_usage + usage))
  423. fi
  424. usage=$(grep 'U_DISK_DIRS=' $USER_DATA/user.conf | cut -f 2 -d "'")
  425. u_usage=$((u_usage + usage))
  426. old=$(grep "U_DISK='" $USER_DATA/user.conf | cut -f 2 -d \')
  427. sed -i "s/U_DISK='$old'/U_DISK='$u_usage'/g" $USER_DATA/user.conf
  428. }
  429. # Recalculate U_BANDWIDTH value
  430. recalc_user_bandwidth_usage() {
  431. usage=0
  432. bandwidth_usage=$(grep 'U_BANDWIDTH=' $USER_DATA/web.conf |\
  433. awk -F "U_BANDWIDTH='" '{print $2}'|cut -f 1 -d \')
  434. for bandwidth in $bandwidth_usage; do
  435. usage=$((usage + bandwidth))
  436. done
  437. old=$(grep "U_BANDWIDTH='" $USER_DATA/user.conf | cut -f 2 -d \')
  438. sed -i "s/U_BANDWIDTH='$old'/U_BANDWIDTH='$usage'/g" $USER_DATA/user.conf
  439. }
  440. # Get next cron job id
  441. get_next_cronjob() {
  442. if [ -z "$job" ]; then
  443. curr_str=$(grep "JOB=" $USER_DATA/cron.conf|cut -f 2 -d \'|\
  444. sort -n|tail -n1)
  445. job="$((curr_str +1))"
  446. fi
  447. }
  448. # Sort cron jobs by id
  449. sort_cron_jobs() {
  450. cat $USER_DATA/cron.conf |sort -n -k 2 -t \' > $USER_DATA/cron.tmp
  451. mv -f $USER_DATA/cron.tmp $USER_DATA/cron.conf
  452. }
  453. # Sync cronjobs with system cron
  454. sync_cron_jobs() {
  455. source $USER_DATA/user.conf
  456. if [ -e "/var/spool/cron/crontabs" ]; then
  457. crontab="/var/spool/cron/crontabs/$user"
  458. else
  459. crontab="/var/spool/cron/$user"
  460. fi
  461. rm -f $crontab
  462. if [ "$CRON_REPORTS" = 'yes' ]; then
  463. echo "MAILTO=$CONTACT" > $crontab
  464. echo 'CONTENT_TYPE="text/plain; charset=utf-8"' >> $crontab
  465. fi
  466. while read line; do
  467. eval $line
  468. if [ "$SUSPENDED" = 'no' ]; then
  469. echo "$MIN $HOUR $DAY $MONTH $WDAY $CMD" |\
  470. sed -e "s/%quote%/'/g" -e "s/%dots%/:/g" \
  471. >> $crontab
  472. fi
  473. done < $USER_DATA/cron.conf
  474. chown $user:$user $crontab
  475. chmod 600 $crontab
  476. }
  477. # User format validator
  478. is_user_format_valid() {
  479. if [ ${#1} -eq 1 ]; then
  480. if ! [[ "$1" =~ ^^[[:alnum:]]$ ]]; then
  481. check_result $E_INVALID "invalid $2 format :: $1"
  482. fi
  483. else
  484. if ! [[ "$1" =~ ^[[:alnum:]][-|\.|_[:alnum:]]{0,28}[[:alnum:]]$ ]]
  485. then
  486. check_result $E_INVALID "invalid $2 format :: $1"
  487. fi
  488. fi
  489. }
  490. # Domain format validator
  491. is_domain_format_valid() {
  492. object_name=${2-domain}
  493. exclude="[!|@|#|$|^|&|*|(|)|+|=|{|}|:|,|<|>|?|_|/|\|\"|'|;|%|\`| ]"
  494. if [[ $1 =~ $exclude ]] || [[ $1 =~ ^[0-9]+$ ]] || [[ $1 =~ "\.\." ]] || [[ $1 =~ "$(printf '\t')" ]]; then
  495. check_result $E_INVALID "invalid $object_name format :: $1"
  496. fi
  497. }
  498. # Alias forman validator
  499. is_alias_format_valid() {
  500. for object in ${1//,/ }; do
  501. exclude="[!|@|#|$|^|&|(|)|+|=|{|}|:|<|>|?|_|/|\|\"|'|;|%|\`| ]"
  502. if [[ "$object" =~ $exclude ]]; then
  503. check_result $E_INVALID "invalid alias format :: $object"
  504. fi
  505. if [[ "$object" =~ [*] ]] && ! [[ "$object" =~ ^[*]\..* ]]; then
  506. check_result $E_INVALID "invalid alias format :: $object"
  507. fi
  508. done
  509. }
  510. # IP format validator
  511. is_ip_format_valid() {
  512. object_name=${2-ip}
  513. ip_regex='([1-9]?[0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])'
  514. ip_clean=$(echo "${1%/*}")
  515. if ! [[ $ip_clean =~ ^$ip_regex\.$ip_regex\.$ip_regex\.$ip_regex$ ]]; then
  516. check_result $E_INVALID "invalid $object_name format :: $1"
  517. fi
  518. if [ $1 != "$ip_clean" ]; then
  519. ip_cidr="$ip_clean/"
  520. ip_cidr=$(echo "${1#$ip_cidr}")
  521. if [[ "$ip_cidr" -gt 32 ]] || [[ "$ip_cidr" =~ [:alnum:] ]]; then
  522. check_result $E_INVALID "invalid $object_name format :: $1"
  523. fi
  524. fi
  525. }
  526. # Proxy extention format validator
  527. is_extention_format_valid() {
  528. exclude="[!|#|$|^|&|(|)|+|=|{|}|:|@|<|>|?|/|\|\"|'|;|%|\`| ]"
  529. if [[ "$1" =~ $exclude ]]; then
  530. check_result $E_INVALID "invalid proxy extention format :: $1"
  531. fi
  532. }
  533. # Number format validator
  534. is_number_format_valid() {
  535. object_name=${2-number}
  536. if ! [[ "$1" =~ ^[0-9]+$ ]] ; then
  537. check_result $E_INVALID "invalid $object_name format :: $1"
  538. fi
  539. }
  540. # Autoreply format validator
  541. is_autoreply_format_valid() {
  542. if [[ "$1" =~ [$|\`] ]] || [ 10240 -le ${#1} ]; then
  543. check_result $E_INVALID "invalid autoreply format :: $1"
  544. fi
  545. }
  546. # Boolean format validator
  547. is_boolean_format_valid() {
  548. if [ "$1" != 'yes' ] && [ "$1" != 'no' ]; then
  549. check_result $E_INVALID "invalid $2 format :: $1"
  550. fi
  551. }
  552. # Common format validator
  553. is_common_format_valid() {
  554. exclude="[!|#|$|^|&|(|)|+|=|{|}|:|<|>|?|/|\|\"|'|;|%|\`| ]"
  555. if [[ "$1" =~ $exclude ]]; then
  556. check_result $E_INVALID "invalid $2 format :: $1"
  557. fi
  558. if [ 400 -le ${#1} ]; then
  559. check_result $E_INVALID "invalid $2 format :: $1"
  560. fi
  561. if [[ "$1" =~ @ ]] && [ ${#1} -gt 1 ] ; then
  562. check_result $E_INVALID "invalid $2 format :: $1"
  563. fi
  564. if [[ $1 =~ \* ]]; then
  565. if [[ "$(echo $1 | grep -o '\*\.' |wc -l)" -eq 0 ]] && [[ $1 != '*' ]] ; then
  566. check_result $E_INVALID "invalid $2 format :: $1"
  567. fi
  568. fi
  569. if [[ $(echo -n "$1" | tail -c 1) =~ [^a-zA-Z0-9_*@] ]]; then
  570. check_result $E_INVALID "invalid $2 format :: $1"
  571. fi
  572. if [[ $(echo -n "$1" | grep -c '\.\.') -gt 0 ]];then
  573. check_result $E_INVALID "invalid $2 format :: $1"
  574. fi
  575. if [[ $(echo -n "$1" | head -c 1) =~ [^a-zA-Z0-9_*@] ]]; then
  576. check_result $E_INVALID "invalid $2 format :: $1"
  577. fi
  578. if [[ $(echo -n "$1" | grep -c '\-\-') -gt 0 ]]; then
  579. check_result $E_INVALID "invalid $2 format :: $1"
  580. fi
  581. if [[ $(echo -n "$1" | grep -c '\_\_') -gt 0 ]]; then
  582. check_result $E_INVALID "invalid $2 format :: $1"
  583. fi
  584. }
  585. # Database format validator
  586. is_database_format_valid() {
  587. exclude="[!|@|#|$|^|&|*|(|)|+|=|{|}|:|,|<|>|?|/|\|\"|'|;|%|\`| ]"
  588. if [[ "$1" =~ $exclude ]] || [ 65 -le ${#1} ]; then
  589. check_result $E_INVALID "invalid $2 format :: $1"
  590. fi
  591. }
  592. # Date format validator
  593. is_date_format_valid() {
  594. if ! [[ "$1" =~ ^[0-9][0-9][0-9][0-9]-[0-9][0-9]-[0-9][0-9]$ ]]; then
  595. check_result $E_INVALID "invalid date format :: $1"
  596. fi
  597. }
  598. # Database user validator
  599. is_dbuser_format_valid() {
  600. exclude="[!|@|#|$|^|&|*|(|)|+|=|{|}|:|,|<|>|?|/|\|\"|'|;|%|\`| ]"
  601. if [ 31 -le ${#1} ]; then
  602. check_result $E_INVALID "mysql username can be up to 30 characters long"
  603. fi
  604. if [[ "$1" =~ $exclude ]]; then
  605. check_result $E_INVALID "invalid $2 format :: $1"
  606. fi
  607. }
  608. # DNS record type validator
  609. is_dns_type_format_valid() {
  610. known_dnstype='A,AAAA,NS,CNAME,MX,TXT,SRV,DNSKEY,KEY,IPSECKEY,PTR,SPF,TLSA,CAA'
  611. if [ -z "$(echo $known_dnstype |grep -w $1)" ]; then
  612. check_result $E_INVALID "invalid dns record type format :: $1"
  613. fi
  614. }
  615. # DNS record validator
  616. is_dns_record_format_valid() {
  617. if [ "$rtype" = 'A' ]; then
  618. is_ip_format_valid "$1"
  619. fi
  620. if [ "$rtype" = 'NS' ]; then
  621. is_domain_format_valid "${1::-1}" 'ns_record'
  622. fi
  623. if [ "$rtype" = 'MX' ]; then
  624. is_domain_format_valid "${1::-1}" 'mx_record'
  625. is_int_format_valid "$priority" 'priority_record'
  626. fi
  627. }
  628. # Email format validator
  629. is_email_format_valid() {
  630. if [[ ! "$1" =~ ^[A-Za-z0-9._%+-]+@[[:alnum:].-]+\.[A-Za-z]{2,63}$ ]] ; then
  631. check_result $E_INVALID "invalid email format :: $1"
  632. fi
  633. }
  634. # Firewall action validator
  635. is_fw_action_format_valid() {
  636. if [ "$1" != "ACCEPT" ] && [ "$1" != 'DROP' ] ; then
  637. check_result $E_INVALID "invalid action format :: $1"
  638. fi
  639. }
  640. # Firewall protocol validator
  641. is_fw_protocol_format_valid() {
  642. if [ "$1" != "ICMP" ] && [ "$1" != 'UDP' ] && [ "$1" != 'TCP' ] ; then
  643. check_result $E_INVALID "invalid protocol format :: $1"
  644. fi
  645. }
  646. # Firewall port validator
  647. is_fw_port_format_valid() {
  648. if [ "${#1}" -eq 1 ]; then
  649. if ! [[ "$1" =~ [0-9] ]]; then
  650. check_result $E_INVALID "invalid port format :: $1"
  651. fi
  652. else
  653. if ! [[ "$1" =~ ^[0-9][-|,|:|0-9]{0,30}[0-9]$ ]]
  654. then
  655. check_result $E_INVALID "invalid port format :: $1"
  656. fi
  657. fi
  658. }
  659. # Integer validator
  660. is_int_format_valid() {
  661. if ! [[ "$1" =~ ^[0-9]+$ ]] ; then
  662. check_result $E_INVALID "invalid $2 format :: $1"
  663. fi
  664. }
  665. # Interface validator
  666. is_interface_format_valid() {
  667. netdevices=$(cat /proc/net/dev |grep : |cut -f 1 -d : |tr -d ' ')
  668. if [ -z $(echo "$netdevices" |grep -x $1) ]; then
  669. check_result $E_INVALID "invalid interface format :: $1"
  670. fi
  671. }
  672. # IP status validator
  673. is_ip_status_format_valid() {
  674. if [ -z "$(echo shared,dedicated | grep -w $1 )" ]; then
  675. check_result $E_INVALID "invalid status format :: $1"
  676. fi
  677. }
  678. # Cron validator
  679. is_cron_format_valid() {
  680. limit=59
  681. check_format=''
  682. if [ "$2" = 'hour' ]; then
  683. limit=23
  684. fi
  685. if [ "$2" = 'day' ]; then
  686. limit=31
  687. fi
  688. if [ "$2" = 'month' ]; then
  689. limit=12
  690. fi
  691. if [ "$2" = 'wday' ]; then
  692. limit=7
  693. fi
  694. if [ "$1" = '*' ]; then
  695. check_format='ok'
  696. fi
  697. if [[ "$1" =~ ^[\*]+[/]+[0-9] ]]; then
  698. if [ "$(echo $1 |cut -f 2 -d /)" -lt $limit ]; then
  699. check_format='ok'
  700. fi
  701. fi
  702. if [[ "$1" =~ ^[0-9][-|,|0-9]{0,70}[\/][0-9]$ ]]; then
  703. check_format='ok'
  704. crn_values=${1//,/ }
  705. crn_values=${crn_values//-/ }
  706. crn_values=${crn_values//\// }
  707. for crn_vl in $crn_values; do
  708. if [ "$crn_vl" -gt $limit ]; then
  709. check_format='invalid'
  710. fi
  711. done
  712. fi
  713. crn_values=$(echo $1 |tr "," " " | tr "-" " ")
  714. for crn_vl in $crn_values
  715. do
  716. if [[ "$crn_vl" =~ ^[0-9]+$ ]] && [ "$crn_vl" -le $limit ]; then
  717. check_format='ok'
  718. fi
  719. done
  720. if [ "$check_format" != 'ok' ]; then
  721. check_result $E_INVALID "invalid $2 format :: $1"
  722. fi
  723. }
  724. # Name validator
  725. is_name_format_valid() {
  726. if ! [[ "$1" =~ ^[[:alnum:]][-|\ |\.|_[:alnum:]]{0,28}[[:alnum:]]$ ]]; then
  727. check_result $E_INVALID "invalid $2 format :: $1"
  728. fi
  729. }
  730. # Object validator
  731. is_object_format_valid() {
  732. if ! [[ "$1" =~ ^[[:alnum:]][-|\.|_[:alnum:]]{0,64}[[:alnum:]]$ ]]; then
  733. check_result $E_INVALID "invalid $2 format :: $1"
  734. fi
  735. }
  736. # Password validator
  737. is_password_format_valid() {
  738. if [ "${#1}" -lt '6' ]; then
  739. check_result $E_INVALID "invalid password format :: $1"
  740. fi
  741. }
  742. # Missing function -
  743. # Before: validate_format_shell
  744. # After: is_format_valid_shell
  745. is_format_valid_shell() {
  746. if [ -z "$(grep -w $1 /etc/shells)" ]; then
  747. echo "Error: shell $1 is not valid"
  748. log_event "$E_INVALID" "$EVENT"
  749. exit $E_INVALID
  750. fi
  751. }
  752. # Format validation controller
  753. is_format_valid() {
  754. for arg_name in $*; do
  755. eval arg=\$$arg_name
  756. if [ ! -z "$arg" ]; then
  757. case $arg_name in
  758. account) is_user_format_valid "$arg" "$arg_name";;
  759. action) is_fw_action_format_valid "$arg";;
  760. aliases) is_alias_format_valid "$arg" ;;
  761. antispam) is_boolean_format_valid "$arg" 'antispam' ;;
  762. antivirus) is_boolean_format_valid "$arg" 'antivirus' ;;
  763. autoreply) is_autoreply_format_valid "$arg" ;;
  764. backup) is_object_format_valid "$arg" 'backup' ;;
  765. charset) is_object_format_valid "$arg" "$arg_name" ;;
  766. charsets) is_common_format_valid "$arg" 'charsets' ;;
  767. comment) is_object_format_valid "$arg" 'comment' ;;
  768. database) is_database_format_valid "$arg" 'database';;
  769. day) is_cron_format_valid "$arg" $arg_name ;;
  770. dbpass) is_password_format_valid "$arg" ;;
  771. dbuser) is_dbuser_format_valid "$arg" 'dbuser';;
  772. dkim) is_boolean_format_valid "$arg" 'dkim' ;;
  773. dkim_size) is_int_format_valid "$arg" ;;
  774. domain) is_domain_format_valid "$arg" ;;
  775. dvalue) is_dns_record_format_valid "$arg";;
  776. email) is_email_format_valid "$arg" ;;
  777. exp) is_date_format_valid "$arg" ;;
  778. extentions) is_common_format_valid "$arg" 'extentions' ;;
  779. fname) is_name_format_valid "$arg" "first name" ;;
  780. ftp_password) is_password_format_valid "$arg" ;;
  781. ftp_user) is_user_format_valid "$arg" "$arg_name" ;;
  782. host) is_object_format_valid "$arg" "$arg_name" ;;
  783. hour) is_cron_format_valid "$arg" $arg_name ;;
  784. id) is_int_format_valid "$arg" 'id' ;;
  785. ip) is_ip_format_valid "$arg" ;;
  786. ip_name) is_domain_format_valid "$arg" 'IP name';;
  787. ip_status) is_ip_status_format_valid "$arg" ;;
  788. job) is_int_format_valid "$arg" 'job' ;;
  789. key) is_user_format_valid "$arg" "$arg_name" ;;
  790. lname) is_name_format_valid "$arg" "last name" ;;
  791. malias) is_user_format_valid "$arg" "$arg_name" ;;
  792. max_db) is_int_format_valid "$arg" 'max db';;
  793. min) is_cron_format_valid "$arg" $arg_name ;;
  794. month) is_cron_format_valid "$arg" $arg_name ;;
  795. nat_ip) is_ip_format_valid "$arg" ;;
  796. netmask) is_ip_format_valid "$arg" 'netmask' ;;
  797. newid) is_int_format_valid "$arg" 'id' ;;
  798. ns1) is_domain_format_valid "$arg" 'ns1' ;;
  799. ns2) is_domain_format_valid "$arg" 'ns2' ;;
  800. ns3) is_domain_format_valid "$arg" 'ns3' ;;
  801. ns4) is_domain_format_valid "$arg" 'ns4' ;;
  802. ns5) is_domain_format_valid "$arg" 'ns5' ;;
  803. ns6) is_domain_format_valid "$arg" 'ns6' ;;
  804. ns7) is_domain_format_valid "$arg" 'ns7' ;;
  805. ns8) is_domain_format_valid "$arg" 'ns8' ;;
  806. object) is_name_format_valid "$arg" 'object';;
  807. package) is_object_format_valid "$arg" "$arg_name" ;;
  808. password) is_password_format_valid "$arg" ;;
  809. port) is_int_format_valid "$arg" 'port' ;;
  810. port_ext) is_fw_port_format_valid "$arg";;
  811. protocol) is_fw_protocol_format_valid "$arg" ;;
  812. proxy_ext) is_extention_format_valid "$arg" ;;
  813. quota) is_int_format_valid "$arg" 'quota' ;;
  814. record) is_common_format_valid "$arg" 'record';;
  815. restart) is_boolean_format_valid "$arg" 'restart' ;;
  816. rtype) is_dns_type_format_valid "$arg" ;;
  817. rule) is_int_format_valid "$arg" "rule id" ;;
  818. soa) is_domain_format_valid "$arg" 'SOA' ;;
  819. #missing command: is_format_valid_shell
  820. shell) is_format_valid_shell "$arg" ;;
  821. stats_pass) is_password_format_valid "$arg" ;;
  822. stats_user) is_user_format_valid "$arg" "$arg_name" ;;
  823. template) is_object_format_valid "$arg" "$arg_name" ;;
  824. ttl) is_int_format_valid "$arg" 'ttl';;
  825. user) is_user_format_valid "$arg" $arg_name;;
  826. wday) is_cron_format_valid "$arg" $arg_name ;;
  827. esac
  828. fi
  829. done
  830. }
  831. # Domain argument formatting
  832. format_domain() {
  833. if [[ "$domain" = *[![:ascii:]]* ]]; then
  834. if [[ "$domain" =~ [[:upper:]] ]]; then
  835. domain=$(echo "$domain" |sed 's/[[:upper:]].*/\L&/')
  836. fi
  837. else
  838. if [[ "$domain" =~ [[:upper:]] ]]; then
  839. domain=$(echo "$domain" |tr '[:upper:]' '[:lower:]')
  840. fi
  841. fi
  842. if [[ "$domain" =~ ^www\..* ]]; then
  843. domain=$(echo "$domain" |sed -e "s/^www.//")
  844. fi
  845. if [[ "$domain" =~ .*\.$ ]]; then
  846. domain=$(echo "$domain" |sed -e "s/[.]*$//g")
  847. fi
  848. if [[ "$domain" =~ ^\. ]]; then
  849. domain=$(echo "$domain" |sed -e "s/^[.]*//")
  850. fi
  851. }
  852. format_domain_idn() {
  853. if [ -z "$domain_idn" ]; then
  854. domain_idn=$domain
  855. fi
  856. if [[ "$domain_idn" = *[![:ascii:]]* ]]; then
  857. domain_idn=$(idn -t --quiet -a $domain_idn)
  858. fi
  859. }
  860. format_aliases() {
  861. if [ ! -z "$aliases" ] && [ "$aliases" != 'none' ]; then
  862. aliases=$(echo $aliases |tr '[:upper:]' '[:lower:]' |tr ',' '\n')
  863. aliases=$(echo "$aliases" |sed -e "s/\.$//" |sort -u)
  864. aliases=$(echo "$aliases" |tr -s '.')
  865. aliases=$(echo "$aliases" |sed -e "s/[.]*$//g")
  866. aliases=$(echo "$aliases" |sed -e "s/^[.]*//")
  867. aliases=$(echo "$aliases" |sed -e "/^$/d")
  868. aliases=$(echo "$aliases" |tr '\n' ',' |sed -e "s/,$//")
  869. fi
  870. }
  871. check_backup_conditions() {
  872. # Checking load average
  873. la=$(cat /proc/loadavg |cut -f 1 -d ' ' |cut -f 1 -d '.')
  874. # i=0
  875. while [ "$la" -ge "$BACKUP_LA_LIMIT" ]; do
  876. echo -e "$(date "+%F %T") Load Average $la"
  877. sleep 60
  878. la=$(cat /proc/loadavg |cut -f 1 -d ' ' |cut -f 1 -d '.')
  879. done
  880. }