index.php 33 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704
  1. <?php
  2. $TAB = 'SERVER';
  3. // Main include
  4. include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
  5. // Check user
  6. if ($_SESSION['user'] != 'admin') {
  7. header("Location: /list/user");
  8. exit;
  9. }
  10. // Get server hostname
  11. $v_hostname = exec('hostname');
  12. // List available timezones and get current one
  13. $v_timezones = list_timezones();
  14. exec (HESTIA_CMD."v-get-sys-timezone", $output, $return_var);
  15. $v_timezone = $output[0];
  16. unset($output);
  17. if ($v_timezone == 'Etc/UTC' ) $v_timezone = 'UTC';
  18. if ($v_timezone == 'Pacific/Honolulu' ) $v_timezone = 'HAST';
  19. if ($v_timezone == 'US/Aleutian' ) $v_timezone = 'HADT';
  20. if ($v_timezone == 'Etc/GMT+9' ) $v_timezone = 'AKST';
  21. if ($v_timezone == 'America/Anchorage' ) $v_timezone = 'AKDT';
  22. if ($v_timezone == 'America/Dawson_Creek' ) $v_timezone = 'PST';
  23. if ($v_timezone == 'PST8PDT' ) $v_timezone = 'PDT';
  24. if ($v_timezone == 'MST7MDT' ) $v_timezone = 'MDT';
  25. if ($v_timezone == 'Canada/Saskatchewan' ) $v_timezone = 'CST';
  26. if ($v_timezone == 'CST6CDT' ) $v_timezone = 'CDT';
  27. if ($v_timezone == 'EST5EDT' ) $v_timezone = 'EDT';
  28. if ($v_timezone == 'America/Puerto_Rico' ) $v_timezone = 'AST';
  29. if ($v_timezone == 'America/Halifax' ) $v_timezone = 'ADT';
  30. // List supported php versions
  31. exec (HESTIA_CMD."v-list-web-templates-backend json", $output, $return_var);
  32. $backend_templates = json_decode(implode('', $output), true);
  33. unset($output);
  34. $v_php_versions = [
  35. 'php-5.6',
  36. 'php-7.0',
  37. 'php-7.1',
  38. 'php-7.2',
  39. 'php-7.3',
  40. 'php-7.4',
  41. 'php-8.0',
  42. ];
  43. sort($v_php_versions);
  44. if (empty($backend_templates))
  45. $v_php_versions=[];
  46. $backends_active = backendtpl_with_webdomains();
  47. $v_php_versions = array_map(function($php_version) use ($backend_templates, $backends_active) {
  48. // Mark installed php versions
  49. if (stripos($php_version,'php') !== 0)
  50. return false;
  51. $phpinfo = (object) [
  52. "name" => $php_version,
  53. "tpl" => strtoupper(str_replace('.', '_', $php_version)),
  54. "version" => str_ireplace('php-', '', $php_version),
  55. "usedby" => [],
  56. "installed" => false,
  57. "protected" => false,
  58. ];
  59. if (in_array($phpinfo->tpl, $backend_templates)) {
  60. $phpinfo->installed = true;
  61. }
  62. if (array_key_exists($phpinfo->tpl, $backends_active)) {
  63. // Prevent used php version to be removed
  64. if($phpinfo->installed)
  65. $phpinfo->protected = true;
  66. $phpinfo->usedby = $backends_active[$phpinfo->tpl];
  67. }
  68. if ($phpinfo->name == DEFAULT_PHP_VERSION) {
  69. // Prevent default php version to be removed
  70. if ($phpinfo->installed)
  71. $phpinfo->protected = true;
  72. if (!empty($backends_active['default'])) {
  73. $phpinfo->usedby = array_merge_recursive($phpinfo->usedby,$backends_active['default'] );
  74. }
  75. }
  76. return $phpinfo;
  77. }, $v_php_versions);
  78. // List languages
  79. exec (HESTIA_CMD."v-list-sys-languages json", $output, $return_var);
  80. $language = json_decode(implode('', $output), true);
  81. foreach ($language as $lang) {
  82. $languages[$lang] = translate_json($lang);
  83. }
  84. asort($languages);
  85. unset($output);
  86. // List themes
  87. exec (HESTIA_CMD."v-list-sys-themes json", $output, $return_var);
  88. $theme = json_decode(implode('', $output), true);
  89. unset($output);
  90. // List dns cluster hosts
  91. exec (HESTIA_CMD."v-list-remote-dns-hosts json", $output, $return_var);
  92. $dns_cluster = json_decode(implode('', $output), true);
  93. unset($output);
  94. if (is_array($dns_cluster)) {
  95. foreach ($dns_cluster as $key => $value) {
  96. $v_dns_cluster = 'yes';
  97. }
  98. }
  99. // List Database hosts
  100. exec (HESTIA_CMD."v-list-database-hosts json", $output, $return_var);
  101. $db_hosts = json_decode(implode('', $output), true);
  102. unset($output);
  103. $v_mysql_hosts = array_values(array_filter($db_hosts, function($host){return $host['TYPE'] === 'mysql';}));
  104. $v_mysql = count($v_mysql_hosts) ? 'yes' : 'no';
  105. $v_pgsql_hosts = array_values(array_filter($db_hosts, function($host){return $host['TYPE'] === 'pgsql';}));
  106. $v_pgsql = count($v_pgsql_hosts) ? 'yes' : 'no';
  107. unset($db_hosts);
  108. // List backup settings
  109. $v_backup_dir = "/backup";
  110. if (!empty($_SESSION['BACKUP'])) $v_backup_dir = $_SESSION['BACKUP'];
  111. $v_backup_gzip = '5';
  112. if (!empty($_SESSION['BACKUP_GZIP'])) $v_backup_gzip = $_SESSION['BACKUP_GZIP'];
  113. $v_backup_mode = 'gzip';
  114. if (!empty($_SESSION['BACKUP_MODE'])) $v_backup_mode = $_SESSION['BACKUP_MODE'];
  115. $backup_types = explode(",",$_SESSION['BACKUP_SYSTEM']);
  116. foreach ($backup_types as $backup_type) {
  117. if ($backup_type == 'local') {
  118. $v_backup = 'yes';
  119. } else {
  120. exec (HESTIA_CMD."v-list-backup-host ".escapeshellarg($backup_type)." json", $output, $return_var);
  121. $v_remote_backup = json_decode(implode('', $output), true);
  122. unset($output);
  123. if (in_array($backup_type , array('ftp','sftp'))) {
  124. $v_backup_host = $v_remote_backup[$backup_type]['HOST'];
  125. $v_backup_type = $v_remote_backup[$backup_type]['TYPE'];
  126. $v_backup_username = $v_remote_backup[$backup_type]['USERNAME'];
  127. $v_backup_password = "";
  128. $v_backup_port = $v_remote_backup[$backup_type]['PORT'];
  129. $v_backup_bpath = $v_remote_backup[$backup_type]['BPATH'];
  130. $v_backup_remote_adv = "yes";
  131. } else if ( in_array($backup_type , array('b2')) ) {
  132. $v_backup_bucket = $v_remote_backup[$backup_type]['BUCKET'];
  133. $v_backup_type = $v_remote_backup[$backup_type]['TYPE'];
  134. $v_backup_application_id = $v_remote_backup[$backup_type]['B2_KEY_ID'];
  135. $v_backup_application_key = '';
  136. $v_backup_remote_adv = "yes";
  137. }
  138. }
  139. }
  140. // List ssl certificate info
  141. exec (HESTIA_CMD."v-list-sys-hestia-ssl json", $output, $return_var);
  142. $ssl_str = json_decode(implode('', $output), true);
  143. unset($output);
  144. $v_ssl_crt = $ssl_str['HESTIA']['CRT'];
  145. $v_ssl_key = $ssl_str['HESTIA']['KEY'];
  146. $v_ssl_ca = $ssl_str['HESTIA']['CA'];
  147. $v_ssl_subject = $ssl_str['HESTIA']['SUBJECT'];
  148. $v_ssl_aliases = $ssl_str['HESTIA']['ALIASES'];
  149. $v_ssl_not_before = $ssl_str['HESTIA']['NOT_BEFORE'];
  150. $v_ssl_not_after = $ssl_str['HESTIA']['NOT_AFTER'];
  151. $v_ssl_signature = $ssl_str['HESTIA']['SIGNATURE'];
  152. $v_ssl_pub_key = $ssl_str['HESTIA']['PUB_KEY'];
  153. $v_ssl_issuer = $ssl_str['HESTIA']['ISSUER'];
  154. // Check POST request
  155. if (!empty($_POST['save'])) {
  156. // Check token
  157. if ((!isset($_POST['token'])) || ($_SESSION['token'] != $_POST['token'])) {
  158. header('location: /login/');
  159. exit();
  160. }
  161. // Change hostname
  162. if ((!empty($_POST['v_hostname'])) && ($v_hostname != $_POST['v_hostname'])) {
  163. exec (HESTIA_CMD."v-change-sys-hostname ".escapeshellarg($_POST['v_hostname']), $output, $return_var);
  164. check_return_code($return_var,$output);
  165. unset($output);
  166. $v_hostname = $_POST['v_hostname'];
  167. }
  168. // Install/remove php versions
  169. if (empty($_SESSION['error_msg'])) {
  170. if(!empty($v_php_versions)) {
  171. $post_php = $_POST['v_php_versions'];
  172. array_map(function($php_version) use ($post_php) {
  173. if (array_key_exists($php_version->tpl, $post_php)) {
  174. if (!$php_version->installed) {
  175. exec (HESTIA_CMD . "v-add-web-php " . escapeshellarg($php_version->version), $output, $return_var);
  176. check_return_code($return_var, $output);
  177. unset($output);
  178. if(empty($_SESSION['error_msg']))
  179. $php_version->installed = true;
  180. }
  181. } else {
  182. if ($php_version->installed && !$php_version->protected) {
  183. exec (HESTIA_CMD . "v-delete-web-php " . escapeshellarg($php_version->version), $output, $return_var);
  184. check_return_code($return_var, $output);
  185. unset($output);
  186. if (empty($_SESSION['error_msg']))
  187. $php_version->installed = false;
  188. }
  189. }
  190. return $php_version;
  191. }, $v_php_versions);
  192. }
  193. }
  194. // Change timezone
  195. if (empty($_SESSION['error_msg'])) {
  196. if (!empty($_POST['v_timezone'])) {
  197. $v_tz = $_POST['v_timezone'];
  198. if ($v_tz == 'UTC' ) $v_tz = 'Etc/UTC';
  199. if ($v_tz == 'HAST' ) $v_tz = 'Pacific/Honolulu';
  200. if ($v_tz == 'HADT' ) $v_tz = 'US/Aleutian';
  201. if ($v_tz == 'AKST' ) $v_tz = 'Etc/GMT+9';
  202. if ($v_tz == 'AKDT' ) $v_tz = 'America/Anchorage';
  203. if ($v_tz == 'PST' ) $v_tz = 'America/Dawson_Creek';
  204. if ($v_tz == 'PDT' ) $v_tz = 'PST8PDT';
  205. if ($v_tz == 'MDT' ) $v_tz = 'MST7MDT';
  206. if ($v_tz == 'CST' ) $v_tz = 'Canada/Saskatchewan';
  207. if ($v_tz == 'CDT' ) $v_tz = 'CST6CDT';
  208. if ($v_tz == 'EDT' ) $v_tz = 'EST5EDT';
  209. if ($v_tz == 'AST' ) $v_tz = 'America/Puerto_Rico';
  210. if ($v_tz == 'ADT' ) $v_tz = 'America/Halifax';
  211. if ($v_timezone != $v_tz) {
  212. exec (HESTIA_CMD."v-change-sys-timezone ".escapeshellarg($v_tz), $output, $return_var);
  213. check_return_code($return_var,$output);
  214. $v_timezone = $v_tz;
  215. unset($output);
  216. }
  217. }
  218. }
  219. // Change default language
  220. if (empty($_SESSION['error_msg'])) {
  221. if ((!empty($_POST['v_language'])) && ($_SESSION['LANGUAGE'] != $_POST['v_language'])) {
  222. if (isset($_POST['v_language_update'])) {
  223. exec (HESTIA_CMD."v-change-sys-language ".escapeshellarg($_POST['v_language'])." yes", $output, $return_var);
  224. if (empty($_SESSION['error_msg'])) $_SESSION['LANGUAGE'] = $_POST['v_language'];
  225. }
  226. exec (HESTIA_CMD."v-change-sys-language ".escapeshellarg($_POST['v_language']), $output, $return_var);
  227. check_return_code($return_var,$output);
  228. unset($output);
  229. if (empty($_SESSION['error_msg'])) $_SESSION['LANGUAGE'] = $_POST['v_language'];
  230. }
  231. }
  232. // Update theme
  233. if (empty($_SESSION['error_msg'])) {
  234. if ($_POST['v_theme'] != $_SESSION['THEME']) {
  235. exec (HESTIA_CMD."v-change-sys-theme ".escapeshellarg($_POST['v_theme']), $output, $return_var);
  236. check_return_code($return_var,$output);
  237. unset($output);
  238. }
  239. }
  240. // Set File Manager support
  241. if (empty($_SESSION['error_msg'])) {
  242. if ((!empty($_POST['v_filemanager'])) && ($_SESSION['FILE_MANAGER'] != $_POST['v_filemanager'])) {
  243. if ($_POST['v_filemanager'] == 'true') {
  244. exec (HESTIA_CMD."v-add-sys-filemanager", $output, $return_var);
  245. check_return_code($return_var,$output);
  246. unset($output);
  247. if (empty($_SESSION['error_msg'])) $_SESSION['FILE_MANAGER'] = 'true';
  248. } else {
  249. exec (HESTIA_CMD."v-delete-sys-filemanager", $output, $return_var);
  250. check_return_code($return_var,$output);
  251. unset($output);
  252. if (empty($_SESSION['error_msg'])) $_SESSION['FILE_MANAGER'] = 'false';
  253. }
  254. }
  255. }
  256. // Set File Manager support
  257. if (empty($_SESSION['error_msg'])) {
  258. if (!empty($_POST['v_phpmyadmin_key'])) {
  259. if ($_POST['v_phpmyadmin_key'] == 'yes' && $_SESSION['PHPMYADMIN_KEY'] == '') {
  260. exec (HESTIA_CMD."v-add-sys-pma-sso quiet", $output, $return_var);
  261. check_return_code($return_var,$output);
  262. unset($output);
  263. if (empty($_SESSION['error_msg'])) $_SESSION['PHPMYADMIN_KEY'] != "";
  264. } else if ($_POST['v_phpmyadmin_key'] == 'no' && $_SESSION['PHPMYADMIN_KEY'] != '') {
  265. exec (HESTIA_CMD."v-delete-sys-pma-sso quiet", $output, $return_var);
  266. check_return_code($return_var,$output);
  267. unset($output);
  268. if (empty($_SESSION['error_msg'])) $_SESSION['PHPMYADMIN_KEY'] = '';
  269. }
  270. }
  271. }
  272. // Set disk_quota support
  273. if (empty($_SESSION['error_msg'])) {
  274. if ((!empty($_POST['v_quota'])) && ($_SESSION['DISK_QUOTA'] != $_POST['v_quota'])) {
  275. if ($_POST['v_quota'] == 'yes') {
  276. exec (HESTIA_CMD."v-add-sys-quota", $output, $return_var);
  277. check_return_code($return_var,$output);
  278. unset($output);
  279. if (empty($_SESSION['error_msg'])) $_SESSION['DISK_QUOTA'] = 'yes';
  280. } else {
  281. exec (HESTIA_CMD."v-delete-sys-quota", $output, $return_var);
  282. check_return_code($return_var,$output);
  283. unset($output);
  284. if (empty($_SESSION['error_msg'])) $_SESSION['DISK_QUOTA'] = 'no';
  285. }
  286. }
  287. }
  288. // Set firewall support
  289. if (empty($_SESSION['error_msg'])) {
  290. if ($_SESSION['FIREWALL_SYSTEM'] == 'iptables') $v_firewall = 'yes';
  291. if ($_SESSION['FIREWALL_SYSTEM'] != 'iptables') $v_firewall = 'no';
  292. if ((!empty($_POST['v_firewall'])) && ($v_firewall != $_POST['v_firewall'])) {
  293. if ($_POST['v_firewall'] == 'yes') {
  294. exec (HESTIA_CMD."v-add-sys-firewall", $output, $return_var);
  295. check_return_code($return_var,$output);
  296. unset($output);
  297. if (empty($_SESSION['error_msg'])) $_SESSION['FIREWALL_SYSTEM'] = 'iptables';
  298. } else {
  299. exec (HESTIA_CMD."v-delete-sys-firewall", $output, $return_var);
  300. check_return_code($return_var,$output);
  301. unset($output);
  302. if (empty($_SESSION['error_msg'])) $_SESSION['FIREWALL_SYSTEM'] = '';
  303. }
  304. }
  305. }
  306. // Update mysql pasword
  307. if (empty($_SESSION['error_msg'])) {
  308. if (!empty($_POST['v_mysql_password'])) {
  309. exec (HESTIA_CMD."v-change-database-host-password mysql localhost root ".escapeshellarg($_POST['v_mysql_password']), $output, $return_var);
  310. check_return_code($return_var,$output);
  311. unset($output);
  312. $v_db_adv = 'yes';
  313. }
  314. }
  315. // Update webmail url
  316. if (empty($_SESSION['error_msg'])) {
  317. if ($_POST['v_webmail_alias'] != $_SESSION['WEBMAIL_ALIAS']) {
  318. exec (HESTIA_CMD."v-change-sys-webmail ".escapeshellarg($_POST['v_webmail_alias']), $output, $return_var);
  319. check_return_code($return_var,$output);
  320. unset($output);
  321. $v_mail_adv = 'yes';
  322. }
  323. }
  324. // Update phpMyAdmin url
  325. if (empty($_SESSION['error_msg'])) {
  326. if ($_POST['v_mysql_url'] != $_SESSION['DB_PMA_ALIAS']) {
  327. exec (HESTIA_CMD."v-change-sys-db-alias pma ".escapeshellarg($_POST['v_mysql_url']), $output, $return_var);
  328. check_return_code($return_var,$output);
  329. unset($output);
  330. $v_db_adv = 'yes';
  331. }
  332. }
  333. // Update phpPgAdmin url
  334. if (empty($_SESSION['error_msg'])) {
  335. if ($_POST['v_pgsql_url'] != $_SESSION['DB_PGA_ALIAS']) {
  336. exec (HESTIA_CMD."v-change-sys-db-alias pga ".escapeshellarg($_POST['v_pgsql_url']), $output, $return_var);
  337. check_return_code($return_var,$output);
  338. unset($output);
  339. $v_db_adv = 'yes';
  340. }
  341. }
  342. // Update release branch
  343. if (empty($_SESSION['error_msg'])) {
  344. if ($_POST['v_release_branch'] != $_SESSION['RELEASE_BRANCH']) {
  345. exec (HESTIA_CMD."v-change-sys-release ".escapeshellarg($_POST['v_release_branch']), $output, $return_var);
  346. check_return_code($return_var,$output);
  347. unset($output);
  348. $v_release_adv = 'yes';
  349. }
  350. }
  351. // Update send notification setting
  352. if (empty($_SESSION['error_msg'])) {
  353. if ($_POST['v_upgrade_send_notification_email'] != $_SESSION['UPGRADE_SEND_EMAIL']) {
  354. if ($_POST['v_upgrade_send_notification_email'] == 'on') { $_POST['v_upgrade_send_notification_email'] = 'true'; } else { $_POST['v_upgrade_send_notification_email'] = 'false'; }
  355. exec (HESTIA_CMD."v-change-sys-config-value UPGRADE_SEND_EMAIL ".escapeshellarg($_POST['v_upgrade_send_notification_email']), $output, $return_var);
  356. check_return_code($return_var,$output);
  357. unset($output);
  358. $v_upgrade_notification_adv = 'yes';
  359. }
  360. }
  361. // Update send log by email setting
  362. if (empty($_SESSION['error_msg'])) {
  363. if ($_POST['v_upgrade_send_email_log'] != $_SESSION['UPGRADE_SEND_EMAIL_LOG']) {
  364. if ($_POST['v_upgrade_send_email_log'] == 'on') { $_POST['v_upgrade_send_email_log'] = 'true'; } else { $_POST['v_upgrade_send_email_log'] = 'false'; }
  365. exec (HESTIA_CMD."v-change-sys-config-value UPGRADE_SEND_EMAIL_LOG ".escapeshellarg($_POST['v_upgrade_send_email_log']), $output, $return_var);
  366. check_return_code($return_var,$output);
  367. unset($output);
  368. $v_upgrade_send_log_adv = 'yes';
  369. }
  370. }
  371. // Disable local backup
  372. if (empty($_SESSION['error_msg'])) {
  373. if (($_POST['v_backup'] == 'no') && ($v_backup == 'yes' )) {
  374. exec (HESTIA_CMD."v-delete-backup-host local", $output, $return_var);
  375. check_return_code($return_var,$output);
  376. unset($output);
  377. if (empty($_SESSION['error_msg'])) $v_backup = 'no';
  378. $v_backup_adv = 'yes';
  379. }
  380. }
  381. // Enable local backups
  382. if (empty($_SESSION['error_msg'])) {
  383. if (($_POST['v_backup'] == 'yes') && ($v_backup != 'yes' )) {
  384. exec (HESTIA_CMD."v-add-backup-host local", $output, $return_var);
  385. check_return_code($return_var,$output);
  386. unset($output);
  387. if (empty($_SESSION['error_msg'])) $v_backup = 'yes';
  388. $v_backup_adv = 'yes';
  389. }
  390. }
  391. // Change backup gzip level
  392. if (empty($_SESSION['error_msg'])) {
  393. if ($_POST['v_backup_gzip'] != $v_backup_gzip ) {
  394. exec (HESTIA_CMD."v-change-sys-config-value BACKUP_GZIP ".escapeshellarg($_POST['v_backup_gzip']), $output, $return_var);
  395. check_return_code($return_var,$output);
  396. unset($output);
  397. if (empty($_SESSION['error_msg'])) $v_backup_gzip = $_POST['v_backup_gzip'];
  398. $v_backup_adv = 'yes';
  399. }
  400. }
  401. // Change backup gzip level
  402. if (empty($_SESSION['error_msg'])) {
  403. if ($_POST['v_backup_mode'] != $v_backup_mode ) {
  404. exec (HESTIA_CMD."v-change-sys-config-value BACKUP_MODE ".escapeshellarg($_POST['v_backup_mode']), $output, $return_var);
  405. check_return_code($return_var,$output);
  406. unset($output);
  407. if (empty($_SESSION['error_msg'])) $v_backup_mode = $_POST['v_backup_mode'];
  408. $v_backup_adv = 'yes';
  409. }
  410. }
  411. // Change backup path
  412. if (empty($_SESSION['error_msg'])) {
  413. if ($_POST['v_backup_dir'] != $v_backup_dir ) {
  414. exec (HESTIA_CMD."v-change-sys-config-value BACKUP ".escapeshellarg($_POST['v_backup_dir']), $output, $return_var);
  415. check_return_code($return_var,$output);
  416. unset($output);
  417. if (empty($_SESSION['error_msg'])) $v_backup_dir = $_POST['v_backup_dir'];
  418. $v_backup_adv = 'yes';
  419. }
  420. }
  421. // Add remote backup host
  422. if (empty($_SESSION['error_msg'])) {
  423. if ((empty($v_backup_host) && empty($v_backup_bucket) && ((!empty($_POST['v_backup_host'])) || !empty($_POST['v_backup_bucket']))) ) {
  424. if (in_array($_POST['v_backup_type'], array('ftp','sftp'))) {
  425. $v_backup_host = escapeshellarg($_POST['v_backup_host']);
  426. $v_backup_port = escapeshellarg($_POST['v_backup_port']);
  427. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  428. $v_backup_username = escapeshellarg($_POST['v_backup_username']);
  429. $v_backup_password = escapeshellcmd($_POST['v_backup_password']);
  430. $v_backup_bpath = escapeshellarg($_POST['v_backup_bpath']);
  431. exec (HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_host ." ". $v_backup_username ." ". $v_backup_password ." ". $v_backup_bpath." ".$v_backup_port, $output, $return_var);
  432. check_return_code($return_var,$output);
  433. unset($output);
  434. if (empty($_SESSION['error_msg'])) $v_backup_host = $_POST['v_backup_host'];
  435. if (empty($_SESSION['error_msg'])) $v_backup_type = $_POST['v_backup_type'];
  436. if (empty($_SESSION['error_msg'])) $v_backup_username = $_POST['v_backup_username'];
  437. if (empty($_SESSION['error_msg'])) $v_backup_password = $_POST['v_backup_password'];
  438. if (empty($_SESSION['error_msg'])) $v_backup_bpath = $_POST['v_backup_bpath'];
  439. if (empty($_SESSION['error_msg'])) $v_backup_port = $_POST['v_backup_port'];
  440. $v_backup_new = 'yes';
  441. $v_backup_adv = 'yes';
  442. $v_backup_remote_adv = 'yes';
  443. } else if (in_array($_POST['v_backup_type'], array('b2'))) {
  444. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  445. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  446. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  447. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  448. exec (HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_bucket ." ". $v_backup_application_id ." ". $v_backup_application_key, $output, $return_var);
  449. check_return_code($return_var,$output);
  450. unset($output);
  451. if (empty($_SESSION['error_msg'])) $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  452. if (empty($_SESSION['error_msg'])) $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  453. if (empty($_SESSION['error_msg'])) $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  454. $v_backup_new = 'yes';
  455. $v_backup_adv = 'yes';
  456. $v_backup_remote_adv = 'yes';
  457. }
  458. }
  459. }
  460. // Change remote backup host type
  461. if (empty($_SESSION['error_msg'])) {
  462. if ((!empty($_POST['v_backup_host'])) && ($_POST['v_backup_type'] != $v_backup_type)) {
  463. exec (HESTIA_CMD."v-delete-backup-host " . escapeshellarg($v_backup_type) , $output, $return_var);
  464. unset($output);
  465. if (in_array($_POST['v_backup_type'], array('ftp','sftp'))) {
  466. $v_backup_host = escapeshellarg($_POST['v_backup_host']);
  467. $v_backup_port = escapeshellarg($_POST['v_backup_port']);
  468. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  469. $v_backup_username = escapeshellarg($_POST['v_backup_username']);
  470. $v_backup_password = escapeshellcmd($_POST['v_backup_password']);
  471. $v_backup_bpath = escapeshellarg($_POST['v_backup_bpath']);
  472. exec (HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_host ." ". $v_backup_username ." ". $v_backup_password ." ". $v_backup_bpath." ".$v_backup_port, $output, $return_var);
  473. check_return_code($return_var,$output);
  474. unset($output);
  475. if (empty($_SESSION['error_msg'])) $v_backup_host = $_POST['v_backup_host'];
  476. if (empty($_SESSION['error_msg'])) $v_backup_type = $_POST['v_backup_type'];
  477. if (empty($_SESSION['error_msg'])) $v_backup_username = $_POST['v_backup_username'];
  478. if (empty($_SESSION['error_msg'])) $v_backup_password = $_POST['v_backup_password'];
  479. if (empty($_SESSION['error_msg'])) $v_backup_bpath = $_POST['v_backup_bpath'];
  480. if (empty($_SESSION['error_msg'])) $v_backup_port = $_POST['v_backup_port'];
  481. $v_backup_adv = 'yes';
  482. $v_backup_remote_adv = 'yes';
  483. } else if(in_array($_POST['v_backup_type'], array('b2'))) {
  484. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  485. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  486. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  487. exec (HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_bucket ." ". $v_backup_application_id ." ". $v_backup_application_key, $output, $return_var);
  488. check_return_code($return_var,$output);
  489. unset($output);
  490. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  491. if (empty($_SESSION['error_msg'])) $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  492. if (empty($_SESSION['error_msg'])) $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  493. if (empty($_SESSION['error_msg'])) $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  494. $v_backup_adv = 'yes';
  495. $v_backup_remote_adv = 'yes';
  496. }
  497. }
  498. }
  499. // Change remote backup host
  500. if (empty($_SESSION['error_msg'])) {
  501. if ((!empty($_POST['v_backup_host'])) && ($_POST['v_backup_type'] == $v_backup_type) && (!isset($v_backup_new))) {
  502. if (in_array($_POST['v_backup_type'], array('ftp','sftp'))) {
  503. if (($_POST['v_backup_host'] != $v_backup_host) || ($_POST['v_backup_username'] != $v_backup_username) || ($_POST['v_backup_password'] != $v_backup_password) || ($_POST['v_backup_bpath'] != $v_backup_bpath || $_POST['v_backup_port'] != $v_backup_port)) {
  504. $v_backup_host = escapeshellarg($_POST['v_backup_host']);
  505. $v_backup_port = escapeshellarg($_POST['v_backup_port']);
  506. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  507. $v_backup_username = escapeshellarg($_POST['v_backup_username']);
  508. $v_backup_password = escapeshellcmd($_POST['v_backup_password']);
  509. $v_backup_bpath = escapeshellarg($_POST['v_backup_bpath']);
  510. exec (HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_host ." ". $v_backup_username ." ". $v_backup_password ." ". $v_backup_bpath." ".$v_backup_port, $output, $return_var);
  511. check_return_code($return_var,$output);
  512. unset($output);
  513. if (empty($_SESSION['error_msg'])) $v_backup_host = $_POST['v_backup_host'];
  514. if (empty($_SESSION['error_msg'])) $v_backup_type = $_POST['v_backup_type'];
  515. if (empty($_SESSION['error_msg'])) $v_backup_username = $_POST['v_backup_username'];
  516. if (empty($_SESSION['error_msg'])) $v_backup_password = $_POST['v_backup_password'];
  517. if (empty($_SESSION['error_msg'])) $v_backup_bpath = $_POST['v_backup_bpath'];
  518. if (empty($_SESSION['error_msg'])) $v_backup_port = $_POST['v_backup_port'];
  519. $v_backup_adv = 'yes';
  520. $v_backup_remote_adv = 'yes';
  521. }
  522. } else if(in_array($_POST['v_backup_type'], array('b2'))) {
  523. if (($_POST['v_backup_bucket'] != $v_backup_bucket) || ($_POST['v_backup_application_key'] != $v_backup_application_key) || ($_POST['v_backup_application_id'] != $v_backup_application_id)) {
  524. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  525. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  526. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  527. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  528. exec (HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_bucket ." ". $v_backup_application_id ." ". $v_backup_application_key, $output, $return_var);
  529. check_return_code($return_var,$output);
  530. unset($output);
  531. if (empty($_SESSION['error_msg'])) $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  532. if (empty($_SESSION['error_msg'])) $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  533. if (empty($_SESSION['error_msg'])) $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  534. $v_backup_adv = 'yes';
  535. $v_backup_remote_adv = 'yes';
  536. }
  537. }
  538. }
  539. }
  540. // Delete remote backup host
  541. if (empty($_SESSION['error_msg'])) {
  542. if (empty($_POST['v_backup_remote_adv']) && isset($v_backup_remote_adv)) {
  543. exec (HESTIA_CMD."v-delete-backup-host ".escapeshellarg($v_backup_type), $output, $return_var);
  544. check_return_code($return_var,$output);
  545. unset($output);
  546. if (empty($_SESSION['error_msg'])) $v_backup_host = '';
  547. if (empty($_SESSION['error_msg'])) $v_backup_type = '';
  548. if (empty($_SESSION['error_msg'])) $v_backup_username = '';
  549. if (empty($_SESSION['error_msg'])) $v_backup_password = '';
  550. if (empty($_SESSION['error_msg'])) $v_backup_bpath = '';
  551. if (empty($_SESSION['error_msg'])) $v_backup_bucket = '';
  552. if (empty($_SESSION['error_msg'])) $v_backup_application_id = '';
  553. if (empty($_SESSION['error_msg'])) $v_backup_application_key = '';
  554. $v_backup_adv = '';
  555. $v_backup_remote_adv = '';
  556. }
  557. }
  558. // Change login style
  559. if (empty($_SESSION['error_msg'])) {
  560. if ($_POST['v_inactive_session_timeout'] != $_SESSION['INACTIVE_SESSION_TIMEOUT']) {
  561. exec (HESTIA_CMD."v-change-sys-config-value INACTIVE_SESSION_TIMEOUT ".escapeshellarg($_POST['v_inactive_session_timeout']), $output, $return_var);
  562. check_return_code($return_var,$output);
  563. unset($output);
  564. if (empty($_SESSION['error_msg'])) $v_login_style = $_POST['v_inactive_session_timeout'];
  565. $v_security_adv = 'yes';
  566. }
  567. }
  568. // Change login style
  569. if (empty($_SESSION['error_msg'])) {
  570. if ($_POST['v_login_style'] != $_SESSION['LOGIN_STYLE']) {
  571. exec (HESTIA_CMD."v-change-sys-config-value LOGIN_STYLE ".escapeshellarg($_POST['v_login_style']), $output, $return_var);
  572. check_return_code($return_var,$output);
  573. unset($output);
  574. if (empty($_SESSION['error_msg'])) $v_login_style = $_POST['v_login_style'];
  575. $v_security_adv = 'yes';
  576. }
  577. }
  578. // Update SSL certificate
  579. if ((!empty($_POST['v_ssl_crt'])) && (empty($_SESSION['error_msg']))) {
  580. if (($v_ssl_crt != str_replace("\r\n", "\n", $_POST['v_ssl_crt'])) || ($v_ssl_key != str_replace("\r\n", "\n", $_POST['v_ssl_key']))) {
  581. exec ('mktemp -d', $mktemp_output, $return_var);
  582. $tmpdir = $mktemp_output[0];
  583. // Certificate
  584. if (!empty($_POST['v_ssl_crt'])) {
  585. $fp = fopen($tmpdir."/certificate.crt", 'w');
  586. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_crt']));
  587. fwrite($fp, "\n");
  588. fclose($fp);
  589. }
  590. // Key
  591. if (!empty($_POST['v_ssl_key'])) {
  592. $fp = fopen($tmpdir."/certificate.key", 'w');
  593. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_key']));
  594. fwrite($fp, "\n");
  595. fclose($fp);
  596. }
  597. exec (HESTIA_CMD."v-change-sys-hestia-ssl ".$tmpdir, $output, $return_var);
  598. check_return_code($return_var,$output);
  599. unset($output);
  600. // List ssl certificate info
  601. exec (HESTIA_CMD."v-list-sys-hestia-ssl json", $output, $return_var);
  602. $ssl_str = json_decode(implode('', $output), true);
  603. unset($output);
  604. $v_ssl_crt = $ssl_str['HESTIA']['CRT'];
  605. $v_ssl_key = $ssl_str['HESTIA']['KEY'];
  606. $v_ssl_ca = $ssl_str['HESTIA']['CA'];
  607. $v_ssl_subject = $ssl_str['HESTIA']['SUBJECT'];
  608. $v_ssl_aliases = $ssl_str['HESTIA']['ALIASES'];
  609. $v_ssl_not_before = $ssl_str['HESTIA']['NOT_BEFORE'];
  610. $v_ssl_not_after = $ssl_str['HESTIA']['NOT_AFTER'];
  611. $v_ssl_signature = $ssl_str['HESTIA']['SIGNATURE'];
  612. $v_ssl_pub_key = $ssl_str['HESTIA']['PUB_KEY'];
  613. $v_ssl_issuer = $ssl_str['HESTIA']['ISSUER'];
  614. // Cleanup certificate tempfiles
  615. if (file_exists($tmpdir . '/certificate.crt')) unlink($tmpdir . '/certificate.crt');
  616. if (file_exists($tmpdir . '/certificate.key')) unlink($tmpdir . '/certificate.key');
  617. rmdir($tmpdir);
  618. }
  619. }
  620. // Flush field values on success
  621. if (empty($_SESSION['error_msg'])) {
  622. $_SESSION['ok_msg'] = _('Changes has been saved.');
  623. }
  624. }
  625. // Check system configuration
  626. exec (HESTIA_CMD . "v-list-sys-config json", $output, $return_var);
  627. $data = json_decode(implode('', $output), true);
  628. unset($output);
  629. $sys_arr = $data['config'];
  630. foreach ($sys_arr as $key => $value) {
  631. $_SESSION[$key] = $value;
  632. }
  633. // Render page
  634. render_page($user, $TAB, 'edit_server');
  635. // Flush session messages
  636. unset($_SESSION['error_msg']);
  637. unset($_SESSION['ok_msg']);