index.php 52 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254
  1. <?php
  2. $TAB = 'SERVER';
  3. // Main include
  4. include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
  5. // Check user
  6. if ($_SESSION['userContext'] != 'admin') {
  7. header("Location: /list/user");
  8. exit;
  9. }
  10. // Get server hostname
  11. $v_hostname = exec('hostname');
  12. // List available timezones and get current one
  13. $v_timezones = list_timezones();
  14. exec(HESTIA_CMD."v-get-sys-timezone", $output, $return_var);
  15. $v_timezone = $output[0];
  16. unset($output);
  17. if ($v_timezone == 'Etc/UTC') {
  18. $v_timezone = 'UTC';
  19. }
  20. if ($v_timezone == 'Pacific/Honolulu') {
  21. $v_timezone = 'HAST';
  22. }
  23. if ($v_timezone == 'US/Aleutian') {
  24. $v_timezone = 'HADT';
  25. }
  26. if ($v_timezone == 'Etc/GMT+9') {
  27. $v_timezone = 'AKST';
  28. }
  29. if ($v_timezone == 'America/Anchorage') {
  30. $v_timezone = 'AKDT';
  31. }
  32. if ($v_timezone == 'America/Dawson_Creek') {
  33. $v_timezone = 'PST';
  34. }
  35. if ($v_timezone == 'PST8PDT') {
  36. $v_timezone = 'PDT';
  37. }
  38. if ($v_timezone == 'MST7MDT') {
  39. $v_timezone = 'MDT';
  40. }
  41. if ($v_timezone == 'Canada/Saskatchewan') {
  42. $v_timezone = 'CST';
  43. }
  44. if ($v_timezone == 'CST6CDT') {
  45. $v_timezone = 'CDT';
  46. }
  47. if ($v_timezone == 'EST5EDT') {
  48. $v_timezone = 'EDT';
  49. }
  50. if ($v_timezone == 'America/Puerto_Rico') {
  51. $v_timezone = 'AST';
  52. }
  53. if ($v_timezone == 'America/Halifax') {
  54. $v_timezone = 'ADT';
  55. }
  56. // List supported php versions
  57. exec(HESTIA_CMD."v-list-web-templates-backend json", $output, $return_var);
  58. $backend_templates = json_decode(implode('', $output), true);
  59. unset($output);
  60. $v_php_versions = [
  61. 'php-5.6',
  62. 'php-7.0',
  63. 'php-7.1',
  64. 'php-7.2',
  65. 'php-7.3',
  66. 'php-7.4',
  67. 'php-8.0',
  68. 'php-8.1',
  69. ];
  70. sort($v_php_versions);
  71. if (empty($backend_templates)) {
  72. $v_php_versions=[];
  73. }
  74. $backends_active = backendtpl_with_webdomains();
  75. $v_php_versions = array_map(function ($php_version) use ($backend_templates, $backends_active) {
  76. // Mark installed php versions
  77. if (stripos($php_version, 'php') !== 0) {
  78. return false;
  79. }
  80. $phpinfo = (object) [
  81. "name" => $php_version,
  82. "tpl" => strtoupper(str_replace('.', '_', $php_version)),
  83. "version" => str_ireplace('php-', '', $php_version),
  84. "usedby" => [],
  85. "installed" => false,
  86. "protected" => false,
  87. ];
  88. if (in_array($phpinfo->tpl, $backend_templates)) {
  89. $phpinfo->installed = true;
  90. }
  91. if (array_key_exists($phpinfo->tpl, $backends_active)) {
  92. // Prevent used php version to be removed
  93. if ($phpinfo->installed) {
  94. $phpinfo->protected = true;
  95. }
  96. $phpinfo->usedby = $backends_active[$phpinfo->tpl];
  97. }
  98. if ($phpinfo->name == DEFAULT_PHP_VERSION) {
  99. // Prevent default php version to be removed
  100. if ($phpinfo->installed) {
  101. $phpinfo->protected = true;
  102. }
  103. if (!empty($backends_active['default'])) {
  104. $phpinfo->usedby = array_merge_recursive($phpinfo->usedby, $backends_active['default']);
  105. }
  106. }
  107. return $phpinfo;
  108. }, $v_php_versions);
  109. // List languages
  110. exec(HESTIA_CMD."v-list-sys-languages json", $output, $return_var);
  111. $language = json_decode(implode('', $output), true);
  112. foreach ($language as $lang) {
  113. $languages[$lang] = translate_json($lang);
  114. }
  115. asort($languages);
  116. unset($output);
  117. // List themes
  118. exec(HESTIA_CMD."v-list-sys-themes json", $output, $return_var);
  119. $theme = json_decode(implode('', $output), true);
  120. unset($output);
  121. // List dns cluster hosts
  122. exec(HESTIA_CMD."v-list-remote-dns-hosts json", $output, $return_var);
  123. $dns_cluster = json_decode(implode('', $output), true);
  124. unset($output);
  125. if (is_array($dns_cluster)) {
  126. foreach ($dns_cluster as $key => $value) {
  127. $v_dns_cluster = 'yes';
  128. }
  129. }
  130. // List smtp relay settings
  131. if (!empty($_SESSION['SMTP_RELAY'])) {
  132. $v_smtp_relay = $_SESSION['SMTP_RELAY'];
  133. }
  134. if (!empty($_SESSION['SMTP_RELAY_HOST'])) {
  135. $v_smtp_relay_host = $_SESSION['SMTP_RELAY_HOST'];
  136. }
  137. if (!empty($_SESSION['SMTP_RELAY_PORT'])) {
  138. $v_smtp_relay_port = $_SESSION['SMTP_RELAY_PORT'];
  139. }
  140. if (!empty($_SESSION['SMTP_RELAY_USER'])) {
  141. $v_smtp_relay_user = $_SESSION['SMTP_RELAY_USER'];
  142. }
  143. // List Database hosts
  144. exec(HESTIA_CMD."v-list-database-hosts json", $output, $return_var);
  145. $db_hosts = json_decode(implode('', $output), true);
  146. unset($output);
  147. $v_mysql_hosts = array_values(array_filter($db_hosts, function ($host) {
  148. return $host['TYPE'] === 'mysql';
  149. }));
  150. $v_mysql = count($v_mysql_hosts) ? 'yes' : 'no';
  151. $v_pgsql_hosts = array_values(array_filter($db_hosts, function ($host) {
  152. return $host['TYPE'] === 'pgsql';
  153. }));
  154. $v_pgsql = count($v_pgsql_hosts) ? 'yes' : 'no';
  155. unset($db_hosts);
  156. // List backup settings
  157. $v_backup_dir = "/backup";
  158. if (!empty($_SESSION['BACKUP'])) {
  159. $v_backup_dir = $_SESSION['BACKUP'];
  160. }
  161. $v_backup_gzip = '5';
  162. if (!empty($_SESSION['BACKUP_GZIP'])) {
  163. $v_backup_gzip = $_SESSION['BACKUP_GZIP'];
  164. }
  165. $v_backup_mode = 'gzip';
  166. if (!empty($_SESSION['BACKUP_MODE'])) {
  167. $v_backup_mode = $_SESSION['BACKUP_MODE'];
  168. }
  169. $backup_types = explode(",", $_SESSION['BACKUP_SYSTEM']);
  170. foreach ($backup_types as $backup_type) {
  171. if ($backup_type == 'local') {
  172. $v_backup = 'yes';
  173. } else {
  174. exec(HESTIA_CMD."v-list-backup-host ".escapeshellarg($backup_type)." json", $output, $return_var);
  175. $v_remote_backup = json_decode(implode('', $output), true);
  176. unset($output);
  177. if (in_array($backup_type, array('ftp','sftp'))) {
  178. $v_backup_host = $v_remote_backup[$backup_type]['HOST'];
  179. $v_backup_type = $v_remote_backup[$backup_type]['TYPE'];
  180. $v_backup_username = $v_remote_backup[$backup_type]['USERNAME'];
  181. $v_backup_password = "";
  182. $v_backup_port = $v_remote_backup[$backup_type]['PORT'];
  183. $v_backup_bpath = $v_remote_backup[$backup_type]['BPATH'];
  184. $v_backup_remote_adv = "yes";
  185. } elseif (in_array($backup_type, array('b2'))) {
  186. $v_backup_bucket = $v_remote_backup[$backup_type]['BUCKET'];
  187. $v_backup_type = $v_remote_backup[$backup_type]['TYPE'];
  188. $v_backup_application_id = $v_remote_backup[$backup_type]['B2_KEY_ID'];
  189. $v_backup_application_key = '';
  190. $v_backup_remote_adv = "yes";
  191. }
  192. }
  193. }
  194. // List ssl certificate info
  195. exec(HESTIA_CMD."v-list-sys-hestia-ssl json", $output, $return_var);
  196. $ssl_str = json_decode(implode('', $output), true);
  197. unset($output);
  198. $v_ssl_crt = $ssl_str['HESTIA']['CRT'];
  199. $v_ssl_key = $ssl_str['HESTIA']['KEY'];
  200. $v_ssl_ca = $ssl_str['HESTIA']['CA'];
  201. $v_ssl_subject = $ssl_str['HESTIA']['SUBJECT'];
  202. $v_ssl_aliases = $ssl_str['HESTIA']['ALIASES'];
  203. $v_ssl_not_before = $ssl_str['HESTIA']['NOT_BEFORE'];
  204. $v_ssl_not_after = $ssl_str['HESTIA']['NOT_AFTER'];
  205. $v_ssl_signature = $ssl_str['HESTIA']['SIGNATURE'];
  206. $v_ssl_pub_key = $ssl_str['HESTIA']['PUB_KEY'];
  207. $v_ssl_issuer = $ssl_str['HESTIA']['ISSUER'];
  208. // Check POST request
  209. if (!empty($_POST['save'])) {
  210. $require_refresh = false;
  211. // Check token
  212. verify_csrf($_POST);
  213. // Change hostname
  214. if ((!empty($_POST['v_hostname'])) && ($v_hostname != $_POST['v_hostname'])) {
  215. exec(HESTIA_CMD."v-change-sys-hostname ".escapeshellarg($_POST['v_hostname']), $output, $return_var);
  216. check_return_code($return_var, $output);
  217. unset($output);
  218. $v_hostname = $_POST['v_hostname'];
  219. }
  220. if($_SESSION['WEB_BACKEND'] == "php-fpm"){
  221. // Install/remove php versions
  222. if (empty($_SESSION['error_msg'])) {
  223. if (!empty($v_php_versions)) {
  224. $post_php = $_POST['v_php_versions'];
  225. if(empty($post_php)){
  226. $post_php = array();
  227. }
  228. array_map(function ($php_version) use ($post_php) {
  229. if (array_key_exists($php_version->tpl, $post_php)) {
  230. if (!$php_version->installed) {
  231. exec(HESTIA_CMD . "v-add-web-php " . escapeshellarg($php_version->version), $output, $return_var);
  232. check_return_code($return_var, $output);
  233. unset($output);
  234. if (empty($_SESSION['error_msg'])) {
  235. $php_version->installed = true;
  236. }
  237. }
  238. } else {
  239. if ($php_version->installed && !$php_version->protected) {
  240. exec(HESTIA_CMD . "v-delete-web-php " . escapeshellarg($php_version->version), $output, $return_var);
  241. check_return_code($return_var, $output);
  242. unset($output);
  243. if (empty($_SESSION['error_msg'])) {
  244. $php_version->installed = false;
  245. }
  246. }
  247. }
  248. return $php_version;
  249. }, $v_php_versions);
  250. }
  251. }
  252. if (empty($_SESSION['error_msg'])) {
  253. if($_POST['v_php_default_version'] != DEFAULT_PHP_VERSION) {
  254. exec(HESTIA_CMD . "v-change-sys-php " . escapeshellarg($_POST['v_php_default_version']), $output, $return_var);
  255. check_return_code($return_var, $output);
  256. unset($output);
  257. }
  258. }
  259. }
  260. // Change timezone
  261. if (empty($_SESSION['error_msg'])) {
  262. if (!empty($_POST['v_timezone'])) {
  263. $v_tz = $_POST['v_timezone'];
  264. if ($v_tz == 'UTC') {
  265. $v_tz = 'Etc/UTC';
  266. }
  267. if ($v_tz == 'HAST') {
  268. $v_tz = 'Pacific/Honolulu';
  269. }
  270. if ($v_tz == 'HADT') {
  271. $v_tz = 'US/Aleutian';
  272. }
  273. if ($v_tz == 'AKST') {
  274. $v_tz = 'Etc/GMT+9';
  275. }
  276. if ($v_tz == 'AKDT') {
  277. $v_tz = 'America/Anchorage';
  278. }
  279. if ($v_tz == 'PST') {
  280. $v_tz = 'America/Dawson_Creek';
  281. }
  282. if ($v_tz == 'PDT') {
  283. $v_tz = 'PST8PDT';
  284. }
  285. if ($v_tz == 'MDT') {
  286. $v_tz = 'MST7MDT';
  287. }
  288. if ($v_tz == 'CST') {
  289. $v_tz = 'Canada/Saskatchewan';
  290. }
  291. if ($v_tz == 'CDT') {
  292. $v_tz = 'CST6CDT';
  293. }
  294. if ($v_tz == 'EDT') {
  295. $v_tz = 'EST5EDT';
  296. }
  297. if ($v_tz == 'AST') {
  298. $v_tz = 'America/Puerto_Rico';
  299. }
  300. if ($v_tz == 'ADT') {
  301. $v_tz = 'America/Halifax';
  302. }
  303. if ($v_timezone != $v_tz) {
  304. exec(HESTIA_CMD."v-change-sys-timezone ".escapeshellarg($v_tz), $output, $return_var);
  305. check_return_code($return_var, $output);
  306. $v_timezone = $v_tz;
  307. unset($output);
  308. }
  309. }
  310. }
  311. // Change default language
  312. if (empty($_SESSION['error_msg'])) {
  313. if ((!empty($_POST['v_language'])) && ($_SESSION['LANGUAGE'] != $_POST['v_language'])) {
  314. if (isset($_POST['v_language_update'])) {
  315. exec(HESTIA_CMD."v-change-sys-language ".escapeshellarg($_POST['v_language'])." yes", $output, $return_var);
  316. if (empty($_SESSION['error_msg'])) {
  317. $_SESSION['LANGUAGE'] = $_POST['v_language'];
  318. }
  319. }
  320. exec(HESTIA_CMD."v-change-sys-language ".escapeshellarg($_POST['v_language']), $output, $return_var);
  321. check_return_code($return_var, $output);
  322. unset($output);
  323. if (empty($_SESSION['error_msg'])) {
  324. $_SESSION['LANGUAGE'] = $_POST['v_language'];
  325. }
  326. }
  327. }
  328. // Update theme
  329. if (empty($_SESSION['error_msg'])) {
  330. if ($_POST['v_theme'] != $_SESSION['THEME']) {
  331. exec(HESTIA_CMD."v-change-sys-config-value THEME ".escapeshellarg($_POST['v_theme']), $output, $return_var);
  332. check_return_code($return_var, $output);
  333. unset($output);
  334. }
  335. }
  336. // Update debug mode status
  337. if (empty($_SESSION['error_msg'])) {
  338. if ($_POST['v_debug_mode'] == 'on') {
  339. $_POST['v_debug_mode'] = 'true';
  340. } else {
  341. $_POST['v_debug_mode'] = 'false';
  342. }
  343. if ($_POST['v_debug_mode'] != $_SESSION['DEBUG_MODE']) {
  344. exec(HESTIA_CMD."v-change-sys-config-value DEBUG_MODE ".escapeshellarg($_POST['v_debug_mode']), $output, $return_var);
  345. check_return_code($return_var, $output);
  346. unset($output);
  347. $v_debug_mode_adv = 'yes';
  348. }
  349. }
  350. // Enable/Disable Quick App Installer
  351. if (empty($_SESSION['error_msg'])) {
  352. if ($_POST['v_plugin_app_installer'] != $_SESSION['PLUGIN_APP_INSTALLER']) {
  353. if ($_POST['v_plugin_app_installer'] == 'true') {
  354. $_POST['v_plugin_app_installer'] = 'true';
  355. } else {
  356. $_POST['v_plugin_app_installer'] = 'false';
  357. }
  358. exec(HESTIA_CMD."v-change-sys-config-value PLUGIN_APP_INSTALLER ".escapeshellarg($_POST['v_plugin_app_installer']), $output, $return_var);
  359. check_return_code($return_var, $output);
  360. unset($output);
  361. }
  362. }
  363. // Update experimental features status
  364. if (empty($_SESSION['error_msg'])) {
  365. if ($_POST['v_experimental_features'] == 'on') {
  366. $_POST['v_experimental_features'] = 'true';
  367. } else {
  368. $_POST['v_experimental_features'] = 'false';
  369. }
  370. if ($_POST['v_experimental_features'] != $_SESSION['POLICY_SYSTEM_ENABLE_BACON']) {
  371. exec(HESTIA_CMD."v-change-sys-config-value POLICY_SYSTEM_ENABLE_BACON ".escapeshellarg($_POST['v_experimental_features']), $output, $return_var);
  372. check_return_code($return_var, $output);
  373. unset($output);
  374. $v_debug_mode_adv = 'yes';
  375. }
  376. if (($_POST['v_policy_user_view_suspended'] != $_SESSION['POLICY_SYSTEM_ENABLE_BACON']) && $_POST['v_experimental_features'] == "false" ) {
  377. //disable preview mode
  378. exec(HESTIA_CMD."v-change-sys-config-value POLICY_USER_VIEW_SUSPENDED ".escapeshellarg($_POST['v_policy_user_view_suspended']), $output, $return_var);
  379. check_return_code($return_var, $output);
  380. unset($output);
  381. }
  382. }
  383. // Set File Manager support
  384. if (empty($_SESSION['error_msg'])) {
  385. if ((!empty($_POST['v_filemanager'])) && ($_SESSION['FILE_MANAGER'] != $_POST['v_filemanager'])) {
  386. if ($_POST['v_filemanager'] == 'true') {
  387. exec(HESTIA_CMD."v-add-sys-filemanager", $output, $return_var);
  388. check_return_code($return_var, $output);
  389. unset($output);
  390. if (empty($_SESSION['error_msg'])) {
  391. $_SESSION['FILE_MANAGER'] = 'true';
  392. }
  393. } else {
  394. exec(HESTIA_CMD."v-delete-sys-filemanager", $output, $return_var);
  395. check_return_code($return_var, $output);
  396. unset($output);
  397. if (empty($_SESSION['error_msg'])) {
  398. $_SESSION['FILE_MANAGER'] = 'false';
  399. }
  400. }
  401. }
  402. }
  403. // Set phpMyAdmin SSO key
  404. if (empty($_SESSION['error_msg'])) {
  405. if (!empty($_POST['v_phpmyadmin_key'])) {
  406. if ($_POST['v_phpmyadmin_key'] == 'yes' && $_SESSION['PHPMYADMIN_KEY'] == '') {
  407. exec(HESTIA_CMD."v-add-sys-pma-sso quiet", $output, $return_var);
  408. check_return_code($return_var, $output);
  409. unset($output);
  410. if (empty($_SESSION['error_msg'])) {
  411. $_SESSION['PHPMYADMIN_KEY'] != "";
  412. }
  413. } elseif ($_POST['v_phpmyadmin_key'] == 'no' && $_SESSION['PHPMYADMIN_KEY'] != '') {
  414. exec(HESTIA_CMD."v-delete-sys-pma-sso quiet", $output, $return_var);
  415. check_return_code($return_var, $output);
  416. unset($output);
  417. if (empty($_SESSION['error_msg'])) {
  418. $_SESSION['PHPMYADMIN_KEY'] = '';
  419. }
  420. }
  421. }
  422. }
  423. // Set disk_quota support
  424. if (empty($_SESSION['error_msg'])) {
  425. if ((!empty($_POST['v_quota'])) && ($_SESSION['DISK_QUOTA'] != $_POST['v_quota'])) {
  426. if ($_POST['v_quota'] == 'yes') {
  427. exec(HESTIA_CMD."v-add-sys-quota", $output, $return_var);
  428. check_return_code($return_var, $output);
  429. unset($output);
  430. if (empty($_SESSION['error_msg'])) {
  431. $_SESSION['DISK_QUOTA'] = 'yes';
  432. }
  433. } else {
  434. exec(HESTIA_CMD."v-delete-sys-quota", $output, $return_var);
  435. check_return_code($return_var, $output);
  436. unset($output);
  437. if (empty($_SESSION['error_msg'])) {
  438. $_SESSION['DISK_QUOTA'] = 'no';
  439. }
  440. }
  441. }
  442. }
  443. // Set firewall support
  444. if (empty($_SESSION['error_msg'])) {
  445. if ($_SESSION['FIREWALL_SYSTEM'] == 'iptables') {
  446. $v_firewall = 'yes';
  447. }
  448. if ($_SESSION['FIREWALL_SYSTEM'] != 'iptables') {
  449. $v_firewall = 'no';
  450. }
  451. if ((!empty($_POST['v_firewall'])) && ($v_firewall != $_POST['v_firewall'])) {
  452. if ($_POST['v_firewall'] == 'yes') {
  453. exec(HESTIA_CMD."v-add-sys-firewall", $output, $return_var);
  454. check_return_code($return_var, $output);
  455. unset($output);
  456. if (empty($_SESSION['error_msg'])) {
  457. $_SESSION['FIREWALL_SYSTEM'] = 'iptables';
  458. }
  459. } else {
  460. exec(HESTIA_CMD."v-delete-sys-firewall", $output, $return_var);
  461. check_return_code($return_var, $output);
  462. unset($output);
  463. if (empty($_SESSION['error_msg'])) {
  464. $_SESSION['FIREWALL_SYSTEM'] = '';
  465. }
  466. }
  467. }
  468. }
  469. // Update mysql pasword
  470. if (empty($_SESSION['error_msg'])) {
  471. if (!empty($_POST['v_mysql_password'])) {
  472. exec(HESTIA_CMD."v-change-database-host-password mysql localhost root ".escapeshellarg($_POST['v_mysql_password']), $output, $return_var);
  473. check_return_code($return_var, $output);
  474. unset($output);
  475. $v_db_adv = 'yes';
  476. }
  477. }
  478. // Update webmail url
  479. if (empty($_SESSION['error_msg'])) {
  480. if ($_POST['v_webmail_alias'] != $_SESSION['WEBMAIL_ALIAS']) {
  481. exec(HESTIA_CMD."v-change-sys-webmail ".escapeshellarg($_POST['v_webmail_alias']), $output, $return_var);
  482. check_return_code($return_var, $output);
  483. unset($output);
  484. $v_mail_adv = 'yes';
  485. }
  486. }
  487. // Update system wide smtp relay
  488. if (empty($_SESSION['error_msg'])) {
  489. if (isset($_POST['v_smtp_relay']) && (!empty($_POST['v_smtp_relay_host'])) && (!empty($_POST['v_smtp_relay_user']))) {
  490. if (($_POST['v_smtp_relay_host'] != $v_smtp_relay_host) ||
  491. ($_POST['v_smtp_relay_user'] != $v_smtp_relay_user) ||
  492. ($_POST['v_smtp_relay_port'] != $v_smtp_relay_port) ||
  493. (!empty($_POST['v_smtp_relay_pass']))) {
  494. if (!empty($_POST['v_smtp_relay_pass'])) {
  495. $v_smtp_relay = true;
  496. $v_smtp_relay_host = escapeshellarg($_POST['v_smtp_relay_host']);
  497. $v_smtp_relay_user = escapeshellarg($_POST['v_smtp_relay_user']);
  498. $v_smtp_relay_pass = escapeshellarg($_POST['v_smtp_relay_pass']);
  499. if (!empty($_POST['v_smtp_relay_port'])) {
  500. $v_smtp_relay_port = escapeshellarg($_POST['v_smtp_relay_port']);
  501. } else {
  502. $v_smtp_relay_port = '587';
  503. }
  504. exec(HESTIA_CMD."v-add-sys-smtp-relay ".$v_smtp_relay_host." ".$v_smtp_relay_user." ".$v_smtp_relay_pass." ".$v_smtp_relay_port, $output, $return_var);
  505. check_return_code($return_var, $output);
  506. unset($output);
  507. } else {
  508. $_SESSION['error_msg'] = _('SMTP Relay Password is required');
  509. }
  510. }
  511. }
  512. if ((!isset($_POST['v_smtp_relay'])) && ($v_smtp_relay == true)) {
  513. $v_smtp_relay = false;
  514. $v_smtp_relay_host = $v_smtp_relay_user = $v_smtp_relay_pass = $v_smtp_relay_port = '';
  515. exec(HESTIA_CMD."v-delete-sys-smtp-relay", $output, $return_var);
  516. check_return_code($return_var, $output);
  517. unset($output);
  518. }
  519. }
  520. // Update phpMyAdmin url
  521. if (empty($_SESSION['error_msg'])) {
  522. if ($_POST['v_mysql_url'] != $_SESSION['DB_PMA_ALIAS']) {
  523. exec(HESTIA_CMD."v-change-sys-db-alias pma ".escapeshellarg($_POST['v_mysql_url']), $output, $return_var);
  524. check_return_code($return_var, $output);
  525. unset($output);
  526. $v_db_adv = 'yes';
  527. }
  528. }
  529. // Update phpPgAdmin url
  530. if (empty($_SESSION['error_msg'])) {
  531. if ($_POST['v_pgsql_url'] != $_SESSION['DB_PGA_ALIAS']) {
  532. exec(HESTIA_CMD."v-change-sys-db-alias pga ".escapeshellarg($_POST['v_pgsql_url']), $output, $return_var);
  533. check_return_code($return_var, $output);
  534. unset($output);
  535. $v_db_adv = 'yes';
  536. }
  537. }
  538. // Update release branch
  539. if (empty($_SESSION['error_msg'])) {
  540. if ($_POST['v_release_branch'] != $_SESSION['RELEASE_BRANCH']) {
  541. exec(HESTIA_CMD."v-change-sys-release ".escapeshellarg($_POST['v_release_branch']), $output, $return_var);
  542. check_return_code($return_var, $output);
  543. unset($output);
  544. $v_release_adv = 'yes';
  545. }
  546. }
  547. // Update send notification setting
  548. if (empty($_SESSION['error_msg'])) {
  549. if ($_SESSION['UPGRADE_SEND_EMAIL'] == 'true') {
  550. $ugrade_send_mail = 'on';
  551. } else {
  552. $ugrade_send_mail = '';
  553. }
  554. if ($_POST['v_upgrade_send_notification_email'] != $ugrade_send_mail) {
  555. if ($_POST['v_upgrade_send_notification_email'] == 'on') {
  556. $_POST['v_upgrade_send_notification_email'] = 'true';
  557. } else {
  558. $_POST['v_upgrade_send_notification_email'] = 'false';
  559. }
  560. exec(HESTIA_CMD."v-change-sys-config-value UPGRADE_SEND_EMAIL ".escapeshellarg($_POST['v_upgrade_send_notification_email']), $output, $return_var);
  561. check_return_code($return_var, $output);
  562. unset($output);
  563. $v_upgrade_notification_adv = 'yes';
  564. }
  565. }
  566. // Update send log by email setting
  567. if (empty($_SESSION['error_msg'])) {
  568. if ($_SESSION['UPGRADE_SEND_EMAIL_LOG'] == 'true') {
  569. $send_email_log = 'on';
  570. } else {
  571. $send_email_log = '';
  572. }
  573. if ($_POST['v_upgrade_send_email_log'] != $send_email_log) {
  574. if ($_POST['v_upgrade_send_email_log'] == 'on') {
  575. $_POST['v_upgrade_send_email_log'] = 'true';
  576. } else {
  577. $_POST['v_upgrade_send_email_log'] = 'false';
  578. }
  579. exec(HESTIA_CMD."v-change-sys-config-value UPGRADE_SEND_EMAIL_LOG ".escapeshellarg($_POST['v_upgrade_send_email_log']), $output, $return_var);
  580. check_return_code($return_var, $output);
  581. unset($output);
  582. $v_upgrade_send_log_adv = 'yes';
  583. }
  584. }
  585. // Disable local backup
  586. if (empty($_SESSION['error_msg'])) {
  587. if (($_POST['v_backup'] == 'no') && ($v_backup == 'yes')) {
  588. exec(HESTIA_CMD."v-delete-backup-host local", $output, $return_var);
  589. check_return_code($return_var, $output);
  590. unset($output);
  591. if (empty($_SESSION['error_msg'])) {
  592. $v_backup = 'no';
  593. }
  594. $v_backup_adv = 'yes';
  595. }
  596. }
  597. // Enable local backups
  598. if (empty($_SESSION['error_msg'])) {
  599. if (($_POST['v_backup'] == 'yes') && ($v_backup != 'yes')) {
  600. exec(HESTIA_CMD."v-add-backup-host local", $output, $return_var);
  601. check_return_code($return_var, $output);
  602. unset($output);
  603. if (empty($_SESSION['error_msg'])) {
  604. $v_backup = 'yes';
  605. }
  606. $v_backup_adv = 'yes';
  607. }
  608. }
  609. // Change backup gzip level
  610. if (empty($_SESSION['error_msg'])) {
  611. if ($_POST['v_backup_gzip'] != $v_backup_gzip) {
  612. if ($_POST['v_backup_mode'] == 'gzip') {
  613. $_POST['v_backup_gzip'] = 9;
  614. }
  615. exec(HESTIA_CMD."v-change-sys-config-value BACKUP_GZIP ".escapeshellarg($_POST['v_backup_gzip']), $output, $return_var);
  616. check_return_code($return_var, $output);
  617. unset($output);
  618. if (empty($_SESSION['error_msg'])) {
  619. $v_backup_gzip = $_POST['v_backup_gzip'];
  620. }
  621. $v_backup_adv = 'yes';
  622. }
  623. }
  624. // Change backup mode
  625. if (empty($_SESSION['error_msg'])) {
  626. if ($_POST['v_backup_mode'] != $v_backup_mode) {
  627. exec(HESTIA_CMD."v-change-sys-config-value BACKUP_MODE ".escapeshellarg($_POST['v_backup_mode']), $output, $return_var);
  628. check_return_code($return_var, $output);
  629. unset($output);
  630. if (empty($_SESSION['error_msg'])) {
  631. $v_backup_mode = $_POST['v_backup_mode'];
  632. }
  633. $v_backup_adv = 'yes';
  634. if ($_POST['v_backup_mode'] == 'gzip') {
  635. $_POST['v_backup_gzip'] = 9;
  636. if (empty($_SESSION['error_msg'])) {
  637. $v_backup_gzip = $_POST['v_backup_gzip'];
  638. }
  639. exec(HESTIA_CMD."v-change-sys-config-value BACKUP_GZIP ".escapeshellarg($_POST['v_backup_gzip']), $output, $return_var);
  640. }
  641. }
  642. }
  643. // Change backup path
  644. if (empty($_SESSION['error_msg'])) {
  645. if ($_POST['v_backup_dir'] != $v_backup_dir) {
  646. /*
  647. See #1655
  648. exec (HESTIA_CMD."v-change-sys-config-value BACKUP ".escapeshellarg($_POST['v_backup_dir']), $output, $return_var);
  649. check_return_code($return_var,$output);
  650. unset($output);
  651. */
  652. if (empty($_SESSION['error_msg'])) {
  653. $v_backup_dir = $_POST['v_backup_dir'];
  654. }
  655. #$v_backup_adv = 'yes';
  656. }
  657. }
  658. // Add remote backup host
  659. if (empty($_SESSION['error_msg'])) {
  660. if ((empty($v_backup_host) && empty($v_backup_bucket) && ((!empty($_POST['v_backup_host'])) || !empty($_POST['v_backup_bucket'])))) {
  661. if (in_array($_POST['v_backup_type'], array('ftp','sftp'))) {
  662. $v_backup_host = escapeshellarg($_POST['v_backup_host']);
  663. $v_backup_port = escapeshellarg($_POST['v_backup_port']);
  664. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  665. $v_backup_username = escapeshellarg($_POST['v_backup_username']);
  666. $v_backup_password = escapeshellcmd($_POST['v_backup_password']);
  667. $v_backup_bpath = escapeshellarg($_POST['v_backup_bpath']);
  668. exec(HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_host ." ". $v_backup_username ." ". $v_backup_password ." ". $v_backup_bpath." ".$v_backup_port, $output, $return_var);
  669. check_return_code($return_var, $output);
  670. unset($output);
  671. if (empty($_SESSION['error_msg'])) {
  672. $v_backup_host = $_POST['v_backup_host'];
  673. }
  674. if (empty($_SESSION['error_msg'])) {
  675. $v_backup_type = $_POST['v_backup_type'];
  676. }
  677. if (empty($_SESSION['error_msg'])) {
  678. $v_backup_username = $_POST['v_backup_username'];
  679. }
  680. if (empty($_SESSION['error_msg'])) {
  681. $v_backup_password = $_POST['v_backup_password'];
  682. }
  683. if (empty($_SESSION['error_msg'])) {
  684. $v_backup_bpath = $_POST['v_backup_bpath'];
  685. }
  686. if (empty($_SESSION['error_msg'])) {
  687. $v_backup_port = $_POST['v_backup_port'];
  688. }
  689. $v_backup_new = 'yes';
  690. $v_backup_adv = 'yes';
  691. $v_backup_remote_adv = 'yes';
  692. } elseif (in_array($_POST['v_backup_type'], array('b2'))) {
  693. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  694. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  695. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  696. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  697. exec(HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_bucket ." ". $v_backup_application_id ." ". $v_backup_application_key, $output, $return_var);
  698. check_return_code($return_var, $output);
  699. unset($output);
  700. if (empty($_SESSION['error_msg'])) {
  701. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  702. }
  703. if (empty($_SESSION['error_msg'])) {
  704. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  705. }
  706. if (empty($_SESSION['error_msg'])) {
  707. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  708. }
  709. $v_backup_new = 'yes';
  710. $v_backup_adv = 'yes';
  711. $v_backup_remote_adv = 'yes';
  712. }
  713. }
  714. }
  715. // Change remote backup host type
  716. if (empty($_SESSION['error_msg'])) {
  717. if ((!empty($_POST['v_backup_host'])) && ($_POST['v_backup_type'] != $v_backup_type)) {
  718. exec(HESTIA_CMD."v-delete-backup-host " . escapeshellarg($v_backup_type), $output, $return_var);
  719. unset($output);
  720. if (in_array($_POST['v_backup_type'], array('ftp','sftp'))) {
  721. $v_backup_host = escapeshellarg($_POST['v_backup_host']);
  722. $v_backup_port = escapeshellarg($_POST['v_backup_port']);
  723. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  724. $v_backup_username = escapeshellarg($_POST['v_backup_username']);
  725. $v_backup_password = escapeshellcmd($_POST['v_backup_password']);
  726. $v_backup_bpath = escapeshellarg($_POST['v_backup_bpath']);
  727. exec(HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_host ." ". $v_backup_username ." ". $v_backup_password ." ". $v_backup_bpath." ".$v_backup_port, $output, $return_var);
  728. check_return_code($return_var, $output);
  729. unset($output);
  730. if (empty($_SESSION['error_msg'])) {
  731. $v_backup_host = $_POST['v_backup_host'];
  732. }
  733. if (empty($_SESSION['error_msg'])) {
  734. $v_backup_type = $_POST['v_backup_type'];
  735. }
  736. if (empty($_SESSION['error_msg'])) {
  737. $v_backup_username = $_POST['v_backup_username'];
  738. }
  739. if (empty($_SESSION['error_msg'])) {
  740. $v_backup_password = $_POST['v_backup_password'];
  741. }
  742. if (empty($_SESSION['error_msg'])) {
  743. $v_backup_bpath = $_POST['v_backup_bpath'];
  744. }
  745. if (empty($_SESSION['error_msg'])) {
  746. $v_backup_port = $_POST['v_backup_port'];
  747. }
  748. $v_backup_adv = 'yes';
  749. $v_backup_remote_adv = 'yes';
  750. } elseif (in_array($_POST['v_backup_type'], array('b2'))) {
  751. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  752. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  753. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  754. exec(HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_bucket ." ". $v_backup_application_id ." ". $v_backup_application_key, $output, $return_var);
  755. check_return_code($return_var, $output);
  756. unset($output);
  757. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  758. if (empty($_SESSION['error_msg'])) {
  759. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  760. }
  761. if (empty($_SESSION['error_msg'])) {
  762. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  763. }
  764. if (empty($_SESSION['error_msg'])) {
  765. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  766. }
  767. $v_backup_adv = 'yes';
  768. $v_backup_remote_adv = 'yes';
  769. }
  770. }
  771. }
  772. // Change remote backup host
  773. if (empty($_SESSION['error_msg'])) {
  774. if ((!empty($_POST['v_backup_host'])) && ($_POST['v_backup_type'] == $v_backup_type) && (!isset($v_backup_new))) {
  775. if (in_array($_POST['v_backup_type'], array('ftp','sftp'))) {
  776. if (($_POST['v_backup_host'] != $v_backup_host) || ($_POST['v_backup_username'] != $v_backup_username) || ($_POST['v_backup_password'] != $v_backup_password) || ($_POST['v_backup_bpath'] != $v_backup_bpath || $_POST['v_backup_port'] != $v_backup_port)) {
  777. $v_backup_host = escapeshellarg($_POST['v_backup_host']);
  778. $v_backup_port = escapeshellarg($_POST['v_backup_port']);
  779. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  780. $v_backup_username = escapeshellarg($_POST['v_backup_username']);
  781. $v_backup_password = escapeshellcmd($_POST['v_backup_password']);
  782. $v_backup_bpath = escapeshellarg($_POST['v_backup_bpath']);
  783. exec(HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_host ." ". $v_backup_username ." ". $v_backup_password ." ". $v_backup_bpath." ".$v_backup_port, $output, $return_var);
  784. check_return_code($return_var, $output);
  785. unset($output);
  786. if (empty($_SESSION['error_msg'])) {
  787. $v_backup_host = $_POST['v_backup_host'];
  788. }
  789. if (empty($_SESSION['error_msg'])) {
  790. $v_backup_type = $_POST['v_backup_type'];
  791. }
  792. if (empty($_SESSION['error_msg'])) {
  793. $v_backup_username = $_POST['v_backup_username'];
  794. }
  795. if (empty($_SESSION['error_msg'])) {
  796. $v_backup_password = $_POST['v_backup_password'];
  797. }
  798. if (empty($_SESSION['error_msg'])) {
  799. $v_backup_bpath = $_POST['v_backup_bpath'];
  800. }
  801. if (empty($_SESSION['error_msg'])) {
  802. $v_backup_port = $_POST['v_backup_port'];
  803. }
  804. $v_backup_adv = 'yes';
  805. $v_backup_remote_adv = 'yes';
  806. }
  807. } elseif (in_array($_POST['v_backup_type'], array('b2'))) {
  808. if (($_POST['v_backup_bucket'] != $v_backup_bucket) || ($_POST['v_backup_application_key'] != $v_backup_application_key) || ($_POST['v_backup_application_id'] != $v_backup_application_id)) {
  809. $v_backup_type = escapeshellarg($_POST['v_backup_type']);
  810. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  811. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  812. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  813. exec(HESTIA_CMD."v-add-backup-host ". $v_backup_type ." ". $v_backup_bucket ." ". $v_backup_application_id ." ". $v_backup_application_key, $output, $return_var);
  814. check_return_code($return_var, $output);
  815. unset($output);
  816. if (empty($_SESSION['error_msg'])) {
  817. $v_backup_bucket = escapeshellarg($_POST['v_backup_bucket']);
  818. }
  819. if (empty($_SESSION['error_msg'])) {
  820. $v_backup_application_id = escapeshellarg($_POST['v_backup_application_id']);
  821. }
  822. if (empty($_SESSION['error_msg'])) {
  823. $v_backup_application_key = escapeshellarg($_POST['v_backup_application_key']);
  824. }
  825. $v_backup_adv = 'yes';
  826. $v_backup_remote_adv = 'yes';
  827. }
  828. }
  829. }
  830. }
  831. // Delete remote backup host
  832. if (empty($_SESSION['error_msg'])) {
  833. if (empty($_POST['v_backup_remote_adv']) && isset($v_backup_remote_adv)) {
  834. exec(HESTIA_CMD."v-delete-backup-host ".escapeshellarg($v_backup_type), $output, $return_var);
  835. check_return_code($return_var, $output);
  836. unset($output);
  837. if (empty($_SESSION['error_msg'])) {
  838. $v_backup_host = '';
  839. }
  840. if (empty($_SESSION['error_msg'])) {
  841. $v_backup_type = '';
  842. }
  843. if (empty($_SESSION['error_msg'])) {
  844. $v_backup_username = '';
  845. }
  846. if (empty($_SESSION['error_msg'])) {
  847. $v_backup_password = '';
  848. }
  849. if (empty($_SESSION['error_msg'])) {
  850. $v_backup_bpath = '';
  851. }
  852. if (empty($_SESSION['error_msg'])) {
  853. $v_backup_bucket = '';
  854. }
  855. if (empty($_SESSION['error_msg'])) {
  856. $v_backup_application_id = '';
  857. }
  858. if (empty($_SESSION['error_msg'])) {
  859. $v_backup_application_key = '';
  860. }
  861. $v_backup_adv = '';
  862. $v_backup_remote_adv = '';
  863. }
  864. }
  865. // Change INACTIVE_SESSION_TIMEOUT
  866. if (empty($_SESSION['error_msg'])) {
  867. if ($_POST['v_inactive_session_timeout'] != $_SESSION['INACTIVE_SESSION_TIMEOUT']) {
  868. if ($_POST['v_inactive_session_timeout'] < 1) {
  869. $_SESSION['error_msg'] = _('Inactive session timeout can not lower than 1 minute');
  870. } else {
  871. exec(HESTIA_CMD."v-change-sys-config-value INACTIVE_SESSION_TIMEOUT ".escapeshellarg($_POST['v_inactive_session_timeout']), $output, $return_var);
  872. check_return_code($return_var, $output);
  873. unset($output);
  874. if (empty($_SESSION['error_msg'])) {
  875. $v_inactive_session_timeout = $_POST['v_inactive_session_timeout'];
  876. }
  877. }
  878. $v_security_adv = 'yes';
  879. }
  880. }
  881. // Change POLICY_CSRF_STRICTNESS
  882. if (empty($_SESSION['error_msg'])) {
  883. if ($_POST['v_policy_csrf_strictness'] != $_SESSION['POLICY_CSRF_STRICTNESS']) {
  884. exec(HESTIA_CMD."v-change-sys-config-value POLICY_CSRF_STRICTNESS ".escapeshellarg($_POST['v_policy_csrf_strictness']), $output, $return_var);
  885. check_return_code($return_var, $output);
  886. unset($output);
  887. if (empty($_SESSION['error_msg'])) {
  888. $v_policy_csrf_strictness = $_POST['v_inactive_session_timeout'];
  889. }
  890. $v_security_adv = 'yes';
  891. }
  892. }
  893. // Change ENFORCE_SUBDOMAIN_OWNERSHIP
  894. if (empty($_SESSION['error_msg'])) {
  895. if ($_POST['v_enforce_subdomain_ownership'] != $_SESSION['ENFORCE_SUBDOMAIN_OWNERSHIP']) {
  896. exec(HESTIA_CMD."v-change-sys-config-value ENFORCE_SUBDOMAIN_OWNERSHIP ".escapeshellarg($_POST['v_enforce_subdomain_ownership']), $output, $return_var);
  897. check_return_code($return_var, $output);
  898. unset($output);
  899. if (empty($_SESSION['error_msg'])) {
  900. $v_enforce_subdomain_ownership = $_POST['v_enforce_subdomain_ownership'];
  901. }
  902. $v_security_adv = 'yes';
  903. }
  904. }
  905. // Change POLICY_USER_EDIT_DETAILS
  906. if (empty($_SESSION['error_msg'])) {
  907. if ($_POST['v_policy_user_edit_details'] != $_SESSION['POLICY_USER_EDIT_DETAILS']) {
  908. exec(HESTIA_CMD."v-change-sys-config-value POLICY_USER_EDIT_DETAILS ".escapeshellarg($_POST['v_policy_user_edit_details']), $output, $return_var);
  909. check_return_code($return_var, $output);
  910. unset($output);
  911. if (empty($_SESSION['error_msg'])) {
  912. $v_policy_user_edit_details = $_POST['v_policy_user_edit_details'];
  913. }
  914. $v_security_adv = 'yes';
  915. }
  916. }
  917. // Change POLICY_USER_EDIT_WEB_TEMPLATES
  918. if (empty($_SESSION['error_msg'])) {
  919. if ($_POST['v_policy_user_edit_web_templates'] != $_SESSION['POLICY_USER_EDIT_WEB_TEMPLATES']) {
  920. exec(HESTIA_CMD."v-change-sys-config-value POLICY_USER_EDIT_WEB_TEMPLATES ".escapeshellarg($_POST['v_policy_user_edit_web_templates']), $output, $return_var);
  921. check_return_code($return_var, $output);
  922. unset($output);
  923. if (empty($_SESSION['error_msg'])) {
  924. $v_policy_user_edit_details = $_POST['v_policy_user_edit_web_templates'];
  925. }
  926. $v_security_adv = 'yes';
  927. }
  928. }
  929. // Change POLICY_USER_EDIT_DNS_TEMPLATES
  930. if (empty($_SESSION['error_msg'])) {
  931. if ($_POST['v_policy_user_edit_dns_templates'] != $_SESSION['POLICY_USER_EDIT_DNS_TEMPLATES']) {
  932. exec(HESTIA_CMD."v-change-sys-config-value POLICY_USER_EDIT_DNS_TEMPLATES ".escapeshellarg($_POST['v_policy_user_edit_dns_templates']), $output, $return_var);
  933. check_return_code($return_var, $output);
  934. unset($output);
  935. if (empty($_SESSION['error_msg'])) {
  936. $v_policy_user_edit_details = $_POST['v_policy_user_edit_dns_templates'];
  937. }
  938. $v_security_adv = 'yes';
  939. }
  940. }
  941. // Change POLICY_USER_VIEW_LOGS
  942. if (empty($_SESSION['error_msg'])) {
  943. if ($_POST['v_policy_user_view_logs'] != $_SESSION['POLICY_USER_VIEW_LOGS']) {
  944. exec(HESTIA_CMD."v-change-sys-config-value POLICY_USER_VIEW_LOGS ".escapeshellarg($_POST['v_policy_user_view_logs']), $output, $return_var);
  945. check_return_code($return_var, $output);
  946. unset($output);
  947. if (empty($_SESSION['error_msg'])) {
  948. $v_policy_user_view_logs = $_POST['v_policy_user_view_logs'];
  949. }
  950. $v_security_adv = 'yes';
  951. }
  952. }
  953. // Change POLICY_USER_DELETE_LOGS
  954. if (empty($_SESSION['error_msg'])) {
  955. if ($_POST['v_policy_user_delete_logs'] != $_SESSION['POLICY_USER_DELETE_LOGS']) {
  956. exec(HESTIA_CMD."v-change-sys-config-value POLICY_USER_DELETE_LOGS ".escapeshellarg($_POST['v_policy_user_delete_logs']), $output, $return_var);
  957. check_return_code($return_var, $output);
  958. unset($output);
  959. if (empty($_SESSION['error_msg'])) {
  960. $v_policy_user_delete_logs = $_POST['v_policy_user_delete_logs'];
  961. }
  962. $v_security_adv = 'yes';
  963. }
  964. }
  965. // Change POLICY_SYSTEM_PASSWORD_RESET
  966. if (empty($_SESSION['error_msg'])) {
  967. if ($_POST['v_policy_system_password_reset'] != $_SESSION['POLICY_SYSTEM_PASSWORD_RESET']) {
  968. exec(HESTIA_CMD."v-change-sys-config-value POLICY_SYSTEM_PASSWORD_RESET ".escapeshellarg($_POST['v_policy_system_password_reset']), $output, $return_var);
  969. check_return_code($return_var, $output);
  970. unset($output);
  971. if (empty($_SESSION['error_msg'])) {
  972. $v_policy_system_password_reset = $_POST['v_policy_system_password_reset'];
  973. }
  974. $v_security_adv = 'yes';
  975. }
  976. }
  977. // Change POLICY_SYSTEM_PROTECTED_ADMIN
  978. if (empty($_SESSION['error_msg'])) {
  979. if ($_POST['v_policy_system_protected_admin'] != $_SESSION['POLICY_SYSTEM_PROTECTED_ADMIN']) {
  980. exec(HESTIA_CMD."v-change-sys-config-value POLICY_SYSTEM_PROTECTED_ADMIN ".escapeshellarg($_POST['v_policy_system_protected_admin']), $output, $return_var);
  981. check_return_code($return_var, $output);
  982. unset($output);
  983. if (empty($_SESSION['error_msg'])) {
  984. $v_policy_system_protected_admin = $_POST['v_policy_system_protected_admin'];
  985. }
  986. $v_security_adv = 'yes';
  987. }
  988. }
  989. // Change POLICY_USER_VIEW_SUSPENDED
  990. if (empty($_SESSION['error_msg'])) {
  991. if ($_POST['v_policy_user_view_suspended'] != $_SESSION['POLICY_USER_VIEW_SUSPENDED'] && !empty($_SESSION['POLICY_USER_VIEW_SUSPENDED'])) {
  992. exec(HESTIA_CMD."v-change-sys-config-value POLICY_USER_VIEW_SUSPENDED ".escapeshellarg($_POST['v_policy_user_view_suspended']), $output, $return_var);
  993. check_return_code($return_var, $output);
  994. unset($output);
  995. if (empty($_SESSION['error_msg'])) {
  996. $v_policy_system_hide_admin = $_POST['v_policy_user_view_suspended'];
  997. }
  998. $v_security_adv = 'yes';
  999. }
  1000. }
  1001. // Change POLICY_USER_CHANGE_THEME
  1002. if (empty($_SESSION['error_msg'])) {
  1003. if ($_POST['v_policy_user_change_theme'] == 'on') {
  1004. $_POST['v_policy_user_change_theme'] = 'no';
  1005. } else {
  1006. $_POST['v_policy_user_change_theme'] = 'yes';
  1007. }
  1008. {
  1009. if ($_POST['v_policy_user_change_theme'] != $_SESSION['POLICY_USER_CHANGE_THEME']) {
  1010. exec(HESTIA_CMD."v-change-sys-config-value POLICY_USER_CHANGE_THEME ".escapeshellarg($_POST['v_policy_user_change_theme']), $output, $return_var);
  1011. check_return_code($return_var, $output);
  1012. unset($output);
  1013. if ($_POST['v_policy_user_change_theme']) {
  1014. unset($_SESSION['userTheme']);
  1015. $require_refresh = true;
  1016. }
  1017. if (empty($_SESSION['error_msg'])) {
  1018. $v_policy_user_change_theme = $_POST['v_policy_user_change_theme'];
  1019. }
  1020. }
  1021. }
  1022. }
  1023. // Change POLICY_SYSTEM_HIDE_ADMIN
  1024. if (empty($_SESSION['error_msg'])) {
  1025. if ($_POST['v_policy_system_hide_admin'] != $_SESSION['POLICY_SYSTEM_HIDE_ADMIN']) {
  1026. exec(HESTIA_CMD."v-change-sys-config-value POLICY_SYSTEM_HIDE_ADMIN ".escapeshellarg($_POST['v_policy_system_hide_admin']), $output, $return_var);
  1027. check_return_code($return_var, $output);
  1028. unset($output);
  1029. if (empty($_SESSION['error_msg'])) {
  1030. $v_policy_system_hide_admin = $_POST['v_policy_system_hide_admin'];
  1031. }
  1032. $v_security_adv = 'yes';
  1033. }
  1034. }
  1035. // Change POLICY_SYSTEM_HIDE_SERVICES
  1036. if (empty($_SESSION['error_msg'])) {
  1037. if ($_POST['v_policy_system_hide_services'] != $_SESSION['POLICY_SYSTEM_HIDE_SERVICES']) {
  1038. exec(HESTIA_CMD."v-change-sys-config-value POLICY_SYSTEM_HIDE_SERVICES ".escapeshellarg($_POST['v_policy_system_hide_services']), $output, $return_var);
  1039. check_return_code($return_var, $output);
  1040. unset($output);
  1041. if (empty($_SESSION['error_msg'])) {
  1042. $v_policy_system_hide_services = $_POST['v_policy_system_hide_services'];
  1043. }
  1044. $v_security_adv = 'yes';
  1045. }
  1046. }
  1047. // Change login style
  1048. if (empty($_SESSION['error_msg'])) {
  1049. if ($_POST['v_login_style'] != $_SESSION['LOGIN_STYLE']) {
  1050. exec(HESTIA_CMD."v-change-sys-config-value LOGIN_STYLE ".escapeshellarg($_POST['v_login_style']), $output, $return_var);
  1051. check_return_code($return_var, $output);
  1052. unset($output);
  1053. if (empty($_SESSION['error_msg'])) {
  1054. $v_login_style = $_POST['v_login_style'];
  1055. }
  1056. $v_security_adv = 'yes';
  1057. }
  1058. }
  1059. // Change API access
  1060. if (empty($_SESSION['error_msg'])) {
  1061. if ($_POST['v_api'] != $_SESSION['API']) {
  1062. $api_status = 'disable';
  1063. if ($_POST['v_api'] == 'yes') {
  1064. $api_status = 'enable';
  1065. }
  1066. exec(HESTIA_CMD."v-change-sys-api ".escapeshellarg($api_status), $output, $return_var);
  1067. check_return_code($return_var, $output);
  1068. unset($output);
  1069. if (empty($_SESSION['error_msg'])) {
  1070. $v_api = $_POST['v_api'];
  1071. }
  1072. $v_security_adv = 'yes';
  1073. }
  1074. }
  1075. // Change API allowed IPs
  1076. if (empty($_SESSION['error_msg'])) {
  1077. if ($_POST['v_api_allowed_ip'] != $_SESSION['API_ALLOWED_IP']) {
  1078. $ips = array();
  1079. foreach (explode("\n", $_POST['v_api_allowed_ip']) as $ip) {
  1080. if (trim($ip) != "allow-all") {
  1081. if (filter_var(trim($ip), FILTER_VALIDATE_IP)) {
  1082. $ips[] = trim($ip);
  1083. }
  1084. } else {
  1085. $ips[] = trim($ip);
  1086. }
  1087. }
  1088. if (implode(',', $ips) != $_SESSION['API_ALLOWED_IP']) {
  1089. exec(HESTIA_CMD."v-change-sys-config-value API_ALLOWED_IP ".escapeshellarg(implode(',', $ips)), $output, $return_var);
  1090. check_return_code($return_var, $output);
  1091. unset($output);
  1092. if (empty($_SESSION['error_msg'])) {
  1093. $v_api_allowed_ip = $_POST['v_api_allowed_ip'];
  1094. }
  1095. $v_security_adv = 'yes';
  1096. }
  1097. }
  1098. }
  1099. // Update SSL certificate
  1100. if ((!empty($_POST['v_ssl_crt'])) && (empty($_SESSION['error_msg']))) {
  1101. if (($v_ssl_crt != str_replace("\r\n", "\n", $_POST['v_ssl_crt'])) || ($v_ssl_key != str_replace("\r\n", "\n", $_POST['v_ssl_key']))) {
  1102. exec('mktemp -d', $mktemp_output, $return_var);
  1103. $tmpdir = $mktemp_output[0];
  1104. // Certificate
  1105. if (!empty($_POST['v_ssl_crt'])) {
  1106. $fp = fopen($tmpdir."/certificate.crt", 'w');
  1107. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_crt']));
  1108. fwrite($fp, "\n");
  1109. fclose($fp);
  1110. }
  1111. // Key
  1112. if (!empty($_POST['v_ssl_key'])) {
  1113. $fp = fopen($tmpdir."/certificate.key", 'w');
  1114. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_key']));
  1115. fwrite($fp, "\n");
  1116. fclose($fp);
  1117. }
  1118. exec(HESTIA_CMD."v-change-sys-hestia-ssl ".$tmpdir, $output, $return_var);
  1119. check_return_code($return_var, $output);
  1120. unset($output);
  1121. // List ssl certificate info
  1122. exec(HESTIA_CMD."v-list-sys-hestia-ssl json", $output, $return_var);
  1123. $ssl_str = json_decode(implode('', $output), true);
  1124. unset($output);
  1125. $v_ssl_crt = $ssl_str['HESTIA']['CRT'];
  1126. $v_ssl_key = $ssl_str['HESTIA']['KEY'];
  1127. $v_ssl_ca = $ssl_str['HESTIA']['CA'];
  1128. $v_ssl_subject = $ssl_str['HESTIA']['SUBJECT'];
  1129. $v_ssl_aliases = $ssl_str['HESTIA']['ALIASES'];
  1130. $v_ssl_not_before = $ssl_str['HESTIA']['NOT_BEFORE'];
  1131. $v_ssl_not_after = $ssl_str['HESTIA']['NOT_AFTER'];
  1132. $v_ssl_signature = $ssl_str['HESTIA']['SIGNATURE'];
  1133. $v_ssl_pub_key = $ssl_str['HESTIA']['PUB_KEY'];
  1134. $v_ssl_issuer = $ssl_str['HESTIA']['ISSUER'];
  1135. // Cleanup certificate tempfiles
  1136. if (file_exists($tmpdir . '/certificate.crt')) {
  1137. unlink($tmpdir . '/certificate.crt');
  1138. }
  1139. if (file_exists($tmpdir . '/certificate.key')) {
  1140. unlink($tmpdir . '/certificate.key');
  1141. }
  1142. rmdir($tmpdir);
  1143. }
  1144. }
  1145. // Flush field values on success
  1146. if (empty($_SESSION['error_msg'])) {
  1147. $_SESSION['ok_msg'] = _('Changes has been saved.');
  1148. }
  1149. if ($require_refresh == true) {
  1150. $refresh = $_SERVER['REQUEST_URI'];
  1151. $_SESSION['ok_msg'] = _('Changes has been saved.');
  1152. header("Location: $refresh");
  1153. die();
  1154. }
  1155. }
  1156. // Check system configuration
  1157. exec(HESTIA_CMD . "v-list-sys-config json", $output, $return_var);
  1158. $data = json_decode(implode('', $output), true);
  1159. unset($output);
  1160. $sys_arr = $data['config'];
  1161. foreach ($sys_arr as $key => $value) {
  1162. $_SESSION[$key] = $value;
  1163. }
  1164. // Render page
  1165. render_page($user, $TAB, 'edit_server');
  1166. // Flush session messages
  1167. unset($_SESSION['error_msg']);
  1168. unset($_SESSION['ok_msg']);