main.sh 25 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868
  1. # Internal variables
  2. DATE=$(date +%F)
  3. TIME=$(date +%T)
  4. SCRIPT=$(basename $0)
  5. A1=$1
  6. A2=$2
  7. A3=$3
  8. A4=$4
  9. A5=$5
  10. A6=$6
  11. A7=$7
  12. A8=$8
  13. A9=$9
  14. EVENT="$DATE $TIME $SCRIPT $A1 $A2 $A3 $A4 $A5 $A6 $A7 $A8 $A9"
  15. HOMEDIR='/home'
  16. BACKUP='/backup'
  17. BACKUP_GZIP=5
  18. BACKUP_DISK_LIMIT=95
  19. BACKUP_LA_LIMIT=5
  20. RRD_STEP=300
  21. RRD_IFACE_EXCLUDE=lo
  22. BIN=$VESTA/bin
  23. USER_DATA=$VESTA/data/users/$user
  24. WEBTPL=$VESTA/data/templates/web
  25. DNSTPL=$VESTA/data/templates/dns
  26. RRD=$VESTA/web/rrd
  27. if [ "$MAIL_SYSTEM" = 'exim4' ]; then
  28. MAIL_USER=Debian-exim
  29. else
  30. MAIL_USER=exim
  31. fi
  32. # Return codes
  33. OK=0
  34. E_ARGS=1
  35. E_INVALID=2
  36. E_NOTEXIST=3
  37. E_EXISTS=4
  38. E_SUSPENDED=5
  39. E_UNSUSPENDED=6
  40. E_INUSE=7
  41. E_LIMIT=8
  42. E_PASSWORD=9
  43. E_FORBIDEN=10
  44. E_DISABLED=11
  45. E_PARSING=12
  46. E_DISK=13
  47. E_LA=14
  48. E_CONNECT=15
  49. E_FTP=16
  50. E_DB=17
  51. E_RRD=18
  52. E_UPDATE=19
  53. E_RESTART=20
  54. # Log event function
  55. log_event() {
  56. if [ "$1" -eq 0 ]; then
  57. echo "$2" >> $VESTA/log/system.log
  58. else
  59. echo "$2 [Error $1]" >> $VESTA/log/error.log
  60. fi
  61. }
  62. # Log user history
  63. log_history() {
  64. cmd=$1
  65. undo=${2-no}
  66. log_user=${3-$user}
  67. log=$VESTA/data/users/$log_user/history.log
  68. touch $log
  69. if [ '99' -lt "$(wc -l $log |cut -f 1 -d ' ')" ]; then
  70. tail -n 49 $log > $log.moved
  71. mv -f $log.moved $log
  72. chmod 660 $log
  73. fi
  74. curr_str=$(grep "ID=" $log | cut -f 2 -d \' | sort -n | tail -n1)
  75. id="$((curr_str +1))"
  76. echo "ID='$id' DATE='$DATE' TIME='$TIME' CMD='$cmd' UNDO='$undo'" >> $log
  77. }
  78. # Argument list checker
  79. check_args() {
  80. if [ "$1" -gt "$2" ]; then
  81. echo "Error: not enought arguments"
  82. echo "Usage: $SCRIPT $3"
  83. log_event "$E_ARGS" "$EVENT"
  84. exit $E_ARGS
  85. fi
  86. }
  87. # Subsystem checker
  88. is_system_enabled() {
  89. if [ -z "$1" ] || [ "$1" = no ]; then
  90. echo "Error: $2 is disabled in the vesta.conf"
  91. log_event "$E_DISABLED" "$EVENT"
  92. exit $E_DISABLED
  93. fi
  94. }
  95. # User package check
  96. is_package_full() {
  97. case "$1" in
  98. WEB_DOMAINS) used=$(wc -l $USER_DATA/web.conf|cut -f1 -d \ );;
  99. WEB_ALIASES) used=$(grep "DOMAIN='$domain'" $USER_DATA/web.conf |\
  100. awk -F "ALIAS='" '{print $2}' | cut -f 1 -d \' | tr ',' '\n' |\
  101. wc -l );;
  102. DNS_DOMAINS) used=$(wc -l $USER_DATA/dns.conf |cut -f1 -d \ );;
  103. DNS_RECORDS) used=$(wc -l $USER_DATA/dns/$domain.conf |cut -f1 -d \ );;
  104. MAIL_DOMAINS) used=$(wc -l $USER_DATA/mail.conf |cut -f1 -d \ );;
  105. MAIL_ACCOUNTS) used=$(wc -l $USER_DATA/mail/$domain.conf |\
  106. cut -f1 -d \ );;
  107. DATABASES) used=$(wc -l $USER_DATA/db.conf |cut -f1 -d \ );;
  108. CRON_JOBS) used=$(wc -l $USER_DATA/cron.conf |cut -f1 -d \ );;
  109. esac
  110. limit=$(grep "^$1=" $USER_DATA/user.conf | cut -f 2 -d \' )
  111. if [ "$used" -ge "$limit" ]; then
  112. echo "Error: Limit reached / Upgrade package"
  113. log_event "$E_LIMIT" "$EVENT"
  114. exit $E_LIMIT
  115. fi
  116. }
  117. # Random password generator
  118. gen_password() {
  119. matrix='0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'
  120. lenght=10
  121. while [ ${n:=1} -le $lenght ]; do
  122. pass="$pass${matrix:$(($RANDOM%${#matrix})):1}"
  123. let n+=1
  124. done
  125. echo "$pass"
  126. }
  127. # Package existance check
  128. is_package_valid() {
  129. if [ -z "$1" ]; then
  130. pkg_dir="$VESTA/data/packages"
  131. fi
  132. if [ ! -e "$pkg_dir/$package.pkg" ]; then
  133. echo "Error: package $package doesn't exist"
  134. log_event "$E_NOTEXIST $EVENT"
  135. exit $E_NOTEXIST
  136. fi
  137. }
  138. # Validate system type
  139. is_type_valid() {
  140. if [ -z "$(echo $1 | grep -w $2)" ]; then
  141. echo "Error: $2 is unknown type"
  142. log_event "$E_INVALID" "$EVENT"
  143. exit $E_INVALID
  144. fi
  145. }
  146. # Check if backup is available for user
  147. is_backup_available() {
  148. b_owner=$(echo $user |\
  149. sed -e "s/\.[0-9][0-9][0-9][0-9]-[0-9][0-9]-[0-9][0-9].tar//")
  150. if [ "$user" != "$b_owner" ]; then
  151. echo "Error: User $user don't have permission to use $backup"
  152. log_event "$E_FORBIDEN" "$EVENT"
  153. exit $E_FORBIDEN
  154. fi
  155. }
  156. # Check user backup settings
  157. is_backup_enabled() {
  158. BACKUPS=$(grep "^BACKUPS=" $USER_DATA/user.conf | cut -f2 -d \')
  159. if [ -z "$BACKUPS" ] || [[ "$BACKUPS" -le '0' ]]; then
  160. echo "Error: user backup disabled"
  161. log_event "$E_DISABLED" "$EVENT"
  162. exit $E_DISABLED
  163. fi
  164. }
  165. # Check user backup settings
  166. is_backup_scheduled() {
  167. if [ -e "$VESTA/data/queue/backup.pipe" ]; then
  168. check_q=$(grep " $user " $VESTA/data/queue/backup.pipe | grep $1)
  169. if [ ! -z "$check_q" ]; then
  170. echo "Error: $1 is already scheduled"
  171. log_event "$E_EXISTS" "$EVENT"
  172. exit $E_EXISTS
  173. fi
  174. fi
  175. }
  176. # Check if object is new
  177. is_object_new() {
  178. if [ $2 = 'USER' ]; then
  179. if [ -d "$USER_DATA" ]; then
  180. object="OK"
  181. fi
  182. else
  183. object=$(grep "$2='$3'" $USER_DATA/$1.conf)
  184. fi
  185. if [ ! -z "$object" ]; then
  186. echo "Error: $2 with value $3 exists"
  187. log_event "$E_EXISTS" "$EVENT"
  188. exit $E_EXISTS
  189. fi
  190. }
  191. # Check if object exists and can be used
  192. is_object_valid() {
  193. if [ $2 = 'USER' ]; then
  194. if [ -d "$VESTA/data/users/$user" ]; then
  195. sobject="OK"
  196. fi
  197. else
  198. if [ $2 = 'DBHOST' ]; then
  199. sobject=$(grep "HOST='$host'" $VESTA/conf/$type.conf)
  200. else
  201. sobject=$(grep "$2='$3'" $VESTA/data/users/$user/$1.conf)
  202. fi
  203. fi
  204. if [ -z "$sobject" ]; then
  205. echo "Error: $2 $3 doesn't exist"
  206. log_event "$E_NOTEXIST" "$EVENT"
  207. exit $E_NOTEXIST
  208. fi
  209. }
  210. # Check if object is supended
  211. is_object_suspended() {
  212. if [ $2 = 'USER' ]; then
  213. spnd=$(cat $USER_DATA/$1.conf|grep "SUSPENDED='yes'")
  214. else
  215. spnd=$(grep "$2='$3'" $USER_DATA/$1.conf|grep "SUSPENDED='yes'")
  216. fi
  217. if [ -z "$spnd" ]; then
  218. echo "Error: $(basename $1) $3 is not suspended"
  219. log_event "$E_SUSPENDED" "$EVENT"
  220. exit $E_SUSPENDED
  221. fi
  222. }
  223. # Check if object is unsupended
  224. is_object_unsuspended() {
  225. if [ $2 = 'USER' ]; then
  226. spnd=$(cat $USER_DATA/$1.conf|grep "SUSPENDED='yes'")
  227. else
  228. spnd=$(grep "$2='$3'" $USER_DATA/$1.conf|grep "SUSPENDED='yes'")
  229. fi
  230. if [ ! -z "$spnd" ]; then
  231. echo "Error: $(basename $1) $3 is already suspended"
  232. log_event "$E_UNSUSPENDED" "$EVENT"
  233. exit $E_UNSUSPENDED
  234. fi
  235. }
  236. # Check if object value is empty
  237. is_object_value_empty() {
  238. str=$(grep "$2='$3'" $USER_DATA/$1.conf)
  239. eval $str
  240. eval value=$4
  241. if [ ! -z "$value" ] && [ "$value" != 'no' ]; then
  242. echo "Error: ${4//$}=$value (not empty)"
  243. log_event "$E_EXISTS" "$EVENT"
  244. exit $E_EXISTS
  245. fi
  246. }
  247. # Check if object value is empty
  248. is_object_value_exist() {
  249. str=$(grep "$2='$3'" $USER_DATA/$1.conf)
  250. eval $str
  251. eval value=$4
  252. if [ -z "$value" ] || [ "$value" = 'no' ]; then
  253. echo "Error: ${4//$}=$value (doesn't exist)"
  254. log_event "$E_NOTEXIST" "$EVENT"
  255. exit $E_NOTEXIST
  256. fi
  257. }
  258. # Get object value
  259. get_object_value() {
  260. object=$(grep "$2='$3'" $USER_DATA/$1.conf)
  261. eval "$object"
  262. eval echo $4
  263. }
  264. # Update object value
  265. update_object_value() {
  266. row=$(grep -n "$2='$3'" $USER_DATA/$1.conf)
  267. lnr=$(echo $row | cut -f 1 -d ':')
  268. object=$(echo $row | sed "s/^$lnr://")
  269. eval "$object"
  270. eval old="$4"
  271. old=$(echo "$old" | sed -e 's/\\/\\\\/g' -e 's/&/\\&/g' -e 's/\//\\\//g')
  272. new=$(echo "$5" | sed -e 's/\\/\\\\/g' -e 's/&/\\&/g' -e 's/\//\\\//g')
  273. sed -i "$lnr s/${4//$/}='${old//\*/\\*}'/${4//$/}='${new//\*/\\*}'/g" \
  274. $USER_DATA/$1.conf
  275. }
  276. # Add object key
  277. add_object_key() {
  278. row=$(grep -n "$2='$3'" $USER_DATA/$1.conf)
  279. lnr=$(echo $row | cut -f 1 -d ':')
  280. object=$(echo $row | sed "s/^$lnr://")
  281. if [ -z "$(echo $object |grep $4=)" ]; then
  282. eval old="$4"
  283. sed -i "$lnr s/$5='/$4='' $5='/" $USER_DATA/$1.conf
  284. fi
  285. }
  286. # Search objects
  287. search_objects() {
  288. OLD_IFS="$IFS"
  289. IFS=$'\n'
  290. for line in $(grep $2=\'$3\' $USER_DATA/$1.conf); do
  291. eval $line
  292. eval echo \$$4
  293. done
  294. IFS="$OLD_IFS"
  295. }
  296. # Get user value
  297. get_user_value() {
  298. grep "^${1//$/}=" $USER_DATA/user.conf| cut -f 2 -d \'
  299. }
  300. # Update user value in user.conf
  301. update_user_value() {
  302. key="${2//$}"
  303. lnr=$(grep -n "^$key='" $VESTA/data/users/$1/user.conf |cut -f 1 -d ':')
  304. if [ ! -z "$lnr" ]; then
  305. sed -i "$lnr d" $VESTA/data/users/$1/user.conf
  306. sed -i "$lnr i\\$key='${3}'" $VESTA/data/users/$1/user.conf
  307. fi
  308. }
  309. # Increase user counter
  310. increase_user_value() {
  311. key="${2//$}"
  312. factor="${3-1}"
  313. conf="$VESTA/data/users/$1/user.conf"
  314. old=$(grep "$key=" $conf | cut -f 2 -d \')
  315. if [ -z "$old" ]; then
  316. old=0
  317. fi
  318. new=$((old + factor))
  319. sed -i "s/$key='$old'/$key='$new'/g" $conf
  320. }
  321. # Decrease user counter
  322. decrease_user_value() {
  323. key="${2//$}"
  324. factor="${3-1}"
  325. conf="$VESTA/data/users/$1/user.conf"
  326. old=$(grep "$key=" $conf | cut -f 2 -d \')
  327. if [ -z "$old" ]; then
  328. old=0
  329. fi
  330. if [ "$old" -le 1 ]; then
  331. new=0
  332. else
  333. new=$((old - factor))
  334. fi
  335. sed -i "s/$key='$old'/$key='$new'/g" $conf
  336. }
  337. # Json listing function
  338. json_list() {
  339. echo '{'
  340. fileds_count=$(echo $fields| wc -w )
  341. #for line in $(cat $conf); do
  342. while read line; do
  343. eval $line
  344. if [ -n "$data_output" ]; then
  345. echo -e ' },'
  346. fi
  347. i=1
  348. for field in $fields; do
  349. eval value=$field
  350. if [ $i -eq 1 ]; then
  351. (( ++i))
  352. echo -e "\t\"$value\": {"
  353. else
  354. if [ $i -lt $fileds_count ]; then
  355. (( ++i))
  356. echo -e "\t\t\"${field//$/}\": \"$value\","
  357. else
  358. echo -e "\t\t\"${field//$/}\": \"$value\""
  359. data_output=yes
  360. fi
  361. fi
  362. done
  363. done < $conf
  364. if [ "$data_output" = 'yes' ]; then
  365. echo -e ' }'
  366. fi
  367. echo -e '}'
  368. }
  369. # Shell listing function
  370. shell_list() {
  371. if [ -z "$nohead" ] ; then
  372. echo "${fields//$/}"
  373. for a in $fields; do
  374. echo -e "------ \c"
  375. done
  376. echo
  377. fi
  378. while read line ; do
  379. eval $line
  380. for field in $fields; do
  381. eval value=$field
  382. if [ -z "$value" ]; then
  383. value='NULL'
  384. fi
  385. echo -n "$value "
  386. done
  387. echo
  388. done < $conf
  389. }
  390. # Recalculate U_DISK value
  391. recalc_user_disk_usage() {
  392. u_usage=0
  393. if [ -f "$USER_DATA/web.conf" ]; then
  394. usage=0
  395. dusage=$(grep 'U_DISK=' $USER_DATA/web.conf |\
  396. awk -F "U_DISK='" '{print $2}' | cut -f 1 -d \')
  397. for disk_usage in $dusage; do
  398. usage=$((usage + disk_usage))
  399. done
  400. d=$(grep "U_DISK_WEB='" $USER_DATA/user.conf | cut -f 2 -d \')
  401. sed -i "s/U_DISK_WEB='$d'/U_DISK_WEB='$usage'/g" $USER_DATA/user.conf
  402. u_usage=$((u_usage + usage))
  403. fi
  404. if [ -f "$USER_DATA/mail.conf" ]; then
  405. usage=0
  406. dusage=$(grep 'U_DISK=' $USER_DATA/mail.conf |\
  407. awk -F "U_DISK='" '{print $2}' | cut -f 1 -d \')
  408. for disk_usage in $dusage; do
  409. usage=$((usage + disk_usage))
  410. done
  411. d=$(grep "U_DISK_MAIL='" $USER_DATA/user.conf | cut -f 2 -d \')
  412. sed -i "s/U_DISK_MAIL='$d'/U_DISK_MAIL='$usage'/g" $USER_DATA/user.conf
  413. u_usage=$((u_usage + usage))
  414. fi
  415. if [ -f "$USER_DATA/db.conf" ]; then
  416. usage=0
  417. dusage=$(grep 'U_DISK=' $USER_DATA/db.conf |\
  418. awk -F "U_DISK='" '{print $2}' | cut -f 1 -d \')
  419. for disk_usage in $dusage; do
  420. usage=$((usage + disk_usage))
  421. done
  422. d=$(grep "U_DISK_DB='" $USER_DATA/user.conf | cut -f 2 -d \')
  423. sed -i "s/U_DISK_DB='$d'/U_DISK_DB='$usage'/g" $USER_DATA/user.conf
  424. u_usage=$((u_usage + usage))
  425. fi
  426. usage=$(grep 'U_DIR_DISK=' $USER_DATA/user.conf | cut -f 2 -d "'")
  427. u_usage=$((u_usage + usage))
  428. old=$(grep "U_DISK='" $USER_DATA/user.conf | cut -f 2 -d \')
  429. sed -i "s/U_DISK='$old'/U_DISK='$u_usage'/g" $USER_DATA/user.conf
  430. }
  431. # Recalculate U_BANDWIDTH value
  432. recalc_user_bandwidth_usage() {
  433. usage=0
  434. bandwidth_usage=$(grep 'U_BANDWIDTH=' $USER_DATA/web.conf |\
  435. awk -F "U_BANDWIDTH='" '{print $2}'|cut -f 1 -d \')
  436. for bandwidth in $bandwidth_usage; do
  437. usage=$((usage + bandwidth))
  438. done
  439. old=$(grep "U_BANDWIDTH='" $USER_DATA/user.conf | cut -f 2 -d \')
  440. sed -i "s/U_BANDWIDTH='$old'/U_BANDWIDTH='$usage'/g" $USER_DATA/user.conf
  441. }
  442. # Get next cron job id
  443. get_next_cronjob() {
  444. if [ -z "$job" ]; then
  445. curr_str=$(grep "JOB=" $USER_DATA/cron.conf|cut -f 2 -d \'|\
  446. sort -n|tail -n1)
  447. job="$((curr_str +1))"
  448. fi
  449. }
  450. # Sort cron jobs by id
  451. sort_cron_jobs() {
  452. cat $USER_DATA/cron.conf |sort -n -k 2 -t \' > $USER_DATA/cron.tmp
  453. mv -f $USER_DATA/cron.tmp $USER_DATA/cron.conf
  454. }
  455. # Sync cronjobs with system cron
  456. sync_cron_jobs() {
  457. source $USER_DATA/user.conf
  458. if [ -e "/var/spool/cron/crontabs" ]; then
  459. sys_cron="/var/spool/cron/crontabs/$user"
  460. else
  461. sys_cron="/var/spool/cron/$user"
  462. fi
  463. rm -f $sys_cron
  464. if [ "$CRON_REPORTS" = 'yes' ]; then
  465. echo "MAILTO=$CONTACT" > $sys_cron
  466. fi
  467. while read line; do
  468. eval $line
  469. if [ "$SUSPENDED" = 'no' ]; then
  470. echo "$MIN $HOUR $DAY $MONTH $WDAY $CMD" |\
  471. sed -e "s/%quote%/'/g" -e "s/%dots%/:/g" \
  472. >> $sys_cron
  473. fi
  474. done < $USER_DATA/cron.conf
  475. # Set proper permissions
  476. chown $user:$user $sys_cron
  477. chmod 600 $sys_cron
  478. }
  479. ### Format Validators ###
  480. # Shell
  481. validate_format_shell() {
  482. if [ -z "$(grep -w $1 /etc/shells)" ]; then
  483. echo "Error: shell $1 is not valid"
  484. log_event "$E_INVALID" "$EVENT"
  485. exit $E_INVALID
  486. fi
  487. }
  488. # Password
  489. validate_format_password() {
  490. if [ "${#1}" -lt '6' ]; then
  491. echo "Error: password is too short"
  492. log_event "$E_INVALID" "$EVENT"
  493. exit $E_INVALID
  494. fi
  495. }
  496. # Integer
  497. validate_format_int() {
  498. if ! [[ "$1" =~ ^[0-9]+$ ]] ; then
  499. echo "Error: $2 $1 is not valid"
  500. log_event "$E_INVALID" "$EVENT"
  501. exit $E_INVALID
  502. fi
  503. }
  504. # Boolean
  505. validate_format_boolean() {
  506. if [ "$1" != 'yes' ] && [ "$1" != 'no' ]; then
  507. echo "Error: $2 $1 is not valid"
  508. log_event "$E_INVALID" "$EVENT"
  509. exit $E_INVALID
  510. fi
  511. }
  512. # Network interface
  513. validate_format_interface() {
  514. netdevices=$(cat /proc/net/dev | grep : | cut -f 1 -d : | tr -d ' ')
  515. if [ -z $(echo "$netdevices"| grep -x $1) ]; then
  516. echo "Error: intreface $1 is not valid"
  517. log_event "$E_INVALID" "$EVENT"
  518. exit $E_INVALID
  519. fi
  520. }
  521. # IP address
  522. validate_format_ip() {
  523. valid_octets=0
  524. for octet in ${1//./ }; do
  525. if [[ $octet =~ ^[0-9]{1,3}$ ]] && [[ $octet -le 255 ]]; then
  526. ((++valid_octets))
  527. fi
  528. done
  529. if [ "$valid_octets" -lt 4 ]; then
  530. echo "Error: ip $1 is not valid"
  531. log_event "$E_INVALID" "$EVENT"
  532. exit $E_INVALID
  533. fi
  534. }
  535. # IP address status
  536. validate_format_ip_status() {
  537. if [ -z "$(echo shared,dedicated | grep -w $1 )" ]; then
  538. echo "Error: ip_status $1 is not valid"
  539. log_event "$E_INVALID" "$EVENT"
  540. exit $E_INVALID
  541. fi
  542. }
  543. # Email address
  544. validate_format_email() {
  545. local_part=$(echo $1 | cut -s -f1 -d\@)
  546. remote_host=$(echo $1 | cut -s -f2 -d\@)
  547. mx_failed=1
  548. if [ ! -z "$remote_host" ] && [ ! -z "$local_part" ]; then
  549. /usr/bin/host -t mx "$remote_host" &> /dev/null
  550. mx_failed="$?"
  551. fi
  552. if [ "$mx_failed" -eq 1 ]; then
  553. echo "Error: email $1 is not valid"
  554. log_event "$E_INVALID" "$EVENT"
  555. exit $E_INVALID
  556. fi
  557. }
  558. # Name
  559. validate_format_name() {
  560. if ! [[ "$1" =~ ^[[:alnum:]][-|\.|_[:alnum:]]{0,28}[[:alnum:]]$ ]]; then
  561. echo "Error: $2 $1 is not valid"
  562. log_event "$E_INVALID" "$EVENT"
  563. exit $E_INVALID
  564. fi
  565. }
  566. # Name with space
  567. validate_format_name_s() {
  568. if ! [[ "$1" =~ ^[[:alnum:]][-|\ |\.|_[:alnum:]]{0,28}[[:alnum:]]$ ]]; then
  569. echo "Error: $2 $1 is not valid"
  570. log_event "$E_INVALID" "$EVENT"
  571. exit $E_INVALID
  572. fi
  573. }
  574. # Username
  575. validate_format_username() {
  576. if [ "${#1}" -eq 1 ]; then
  577. if ! [[ "$1" =~ [a-z] ]]; then
  578. echo "Error: $2 $1 is not valid"
  579. exit 1
  580. fi
  581. else
  582. if ! [[ "$1" =~ ^[a-zA-Z0-9][-|\.|_|a-zA-Z0-9]{0,28}[a-zA-Z0-9]$ ]]
  583. then
  584. echo "Error: $2 $1 is not valid"
  585. exit 1
  586. fi
  587. fi
  588. }
  589. # Domain
  590. validate_format_domain() {
  591. exclude="[!|@|#|$|^|&|*|(|)|+|=|{|}|:|,|<|>|?|_|/|\|\"|'|;|%|\`| ]"
  592. if [[ "$1" =~ $exclude ]] || [[ "$1" =~ "^[0-9]+$" ]]; then
  593. echo "Error: $2 $1 is not valid"
  594. log_event "$E_INVALID" "$EVENT"
  595. exit $E_INVALID
  596. fi
  597. }
  598. # Domain alias
  599. validate_format_domain_alias() {
  600. exclude="[!|@|#|$|^|&|(|)|+|=|{|}|:|,|<|>|?|_|/|\|\"|'|;|%|\`| ]"
  601. if [[ "$1" =~ $exclude ]] || [[ "$1" =~ "^[0-9]+$" ]]; then
  602. echo "Error: domain alias $1 is not valid"
  603. log_event "$E_INVALID" "$EVENT"
  604. exit $E_INVALID
  605. fi
  606. }
  607. # Database
  608. validate_format_database() {
  609. exclude="[!|@|#|$|^|&|*|(|)|+|=|{|}|:|,|<|>|?|/|\|\"|'|;|%|\`| ]"
  610. if [[ "$1" =~ $exclude ]] || [ 65 -le ${#1} ]; then
  611. echo "Error: $2 $1 is not valid"
  612. log_event "$E_INVALID" "$EVENT"
  613. exit $E_INVALID
  614. fi
  615. }
  616. # Database user
  617. validate_format_dbuser() {
  618. exclude="[!|@|#|$|^|&|*|(|)|+|=|{|}|:|,|<|>|?|/|\|\"|'|;|%|\`| ]"
  619. if [[ "$1" =~ $exclude ]] || [ 17 -le ${#1} ]; then
  620. echo "Error: $2 $1 is not valid"
  621. log_event "$E_INVALID" "$EVENT"
  622. exit $E_INVALID
  623. fi
  624. }
  625. # DNS type
  626. validate_format_dns_type() {
  627. known_dnstype='A,AAAA,NS,CNAME,MX,TXT,SRV,DNSKEY,KEY,IPSECKEY,PTR,SPF'
  628. if [ -z "$(echo $known_dnstype | grep -w $1)" ]; then
  629. echo "Error: dnstype $1 is not valid"
  630. log_event "$E_INVALID" "$EVENT"
  631. exit $E_INVALID
  632. fi
  633. }
  634. # DKIM key size
  635. validate_format_key_size() {
  636. known_size='128,256,512,768,1024,2048'
  637. if [ -z "$(echo $known_size | grep -w $1)" ]; then
  638. echo "Error: key_size $1 is not valid"
  639. log_event "$E_INVALID" "$EVENT"
  640. exit $E_INVALID
  641. fi
  642. }
  643. # Minute / Hour / Day / Month / Day of Week
  644. validate_format_mhdmw() {
  645. limit=60
  646. check_format=''
  647. if [ "$2" = 'day' ]; then
  648. limit=31
  649. fi
  650. if [ "$2" = 'month' ]; then
  651. limit=12
  652. fi
  653. if [ "$2" = 'wday' ]; then
  654. limit=7
  655. fi
  656. if [ "$1" = '*' ]; then
  657. check_format='ok'
  658. fi
  659. if [[ "$1" =~ ^[\*]+[/]+[0-9] ]]; then
  660. if [ "$(echo $1 |cut -f 2 -d /)" -lt $limit ]; then
  661. check_format='ok'
  662. fi
  663. fi
  664. if [[ "$1" =~ ^[0-9][-|,|0-9]{0,28}[0-9]$ ]]; then
  665. check_format='ok'
  666. crn_values=${1//,/ }
  667. crn_values=${crn_values//-/ }
  668. for crn_vl in $crn_values; do
  669. if [ "$crn_vl" -gt $limit ]; then
  670. check_format='invalid'
  671. fi
  672. done
  673. fi
  674. if [[ "$1" =~ ^[0-9]+$ ]] && [ "$1" -lt $limit ]; then
  675. check_format='ok'
  676. fi
  677. if [ "$check_format" != 'ok' ]; then
  678. echo "Error: $2 $1 is not valid"
  679. log_event "$E_INVALID" "$EVENT"
  680. exit $E_INVALID
  681. fi
  682. }
  683. # proxy extention or DNS record
  684. validate_format_common() {
  685. exclude="[!|#|$|^|&|(|)|+|=|{|}|:|<|>|?|/|\|\"|'|;|%|\`| ]"
  686. if [[ "$1" =~ $exclude ]] || [ 200 -le ${#1} ]; then
  687. echo "Error: $2 $1 is not valid"
  688. log_event "$E_INVALID" "$EVENT"
  689. exit $E_INVALID
  690. fi
  691. }
  692. # DNS record value
  693. validate_format_dvalue() {
  694. record_types="$(echo A,AAAA,NS,CNAME | grep -w "$rtype")"
  695. if [[ "$1" =~ [\ ] ]] && [ ! -z "$record_types" ]; then
  696. echo "Error: dvalue $1 is not valid"
  697. log_event "$E_INVALID" "$EVENT"
  698. exit $E_INVALID
  699. fi
  700. if [ "$rtype" = 'A' ]; then
  701. validate_format_ip "$1"
  702. fi
  703. if [ "$rtype" = 'NS' ]; then
  704. validate_format_domain "$1" 'ns_record'
  705. fi
  706. if [ "$rtype" = 'MX' ]; then
  707. validate_format_domain "$1" 'mx_record'
  708. validate_format_int "$priority" 'priority_record'
  709. fi
  710. }
  711. # Date
  712. validate_format_date() {
  713. if ! [[ "$1" =~ ^[0-9][0-9][0-9][0-9]-[0-9][0-9]-[0-9][0-9]$ ]]; then
  714. echo "Error: date $1 is not valid"
  715. log_event "$E_INVALID" "$EVENT"
  716. exit $E_INVALID
  717. fi
  718. }
  719. # Autoreply
  720. validate_format_autoreply() {
  721. exclude="[$|\`]"
  722. if [[ "$1" =~ $exclude ]] || [ 10240 -le ${#1} ]; then
  723. echo "Error: autoreply is not valid"
  724. log_event "$E_INVALID" "$EVENT"
  725. exit $E_INVALID
  726. fi
  727. }
  728. # Format validation controller
  729. validate_format(){
  730. for arg_name in $*; do
  731. eval arg=\$$arg_name
  732. if [ -z "$arg" ]; then
  733. echo "Error: argument $arg_name is not valid (empty)"
  734. log_event "$E_INVALID" "$EVENT"
  735. exit $E_INVALID
  736. fi
  737. case $arg_name in
  738. account) validate_format_username "$arg" "$arg_name" ;;
  739. antispam) validate_format_boolean "$arg" 'antispam' ;;
  740. antivirus) validate_format_boolean "$arg" 'antivirus' ;;
  741. autoreply) validate_format_autoreply "$arg" ;;
  742. backup) validate_format_domain "$arg" 'backup' ;;
  743. charset) validate_format_name "$arg" "$arg_name" ;;
  744. charsets) validate_format_common "$arg" 'charsets' ;;
  745. database) validate_format_database "$arg" 'database';;
  746. day) validate_format_mhdmw "$arg" $arg_name ;;
  747. dbpass) validate_format_password "$arg" ;;
  748. dbuser) validate_format_dbuser "$arg" 'db_user';;
  749. dkim) validate_format_boolean "$arg" 'dkim' ;;
  750. dkim_size) validate_format_key_size "$arg" ;;
  751. domain) validate_format_domain "$arg" 'domain';;
  752. dom_alias) validate_format_domain_alias "$arg" 'alias';;
  753. dvalue) validate_format_dvalue "$arg";;
  754. email) validate_format_email "$arg" ;;
  755. exp) validate_format_date "$arg" ;;
  756. extentions) validate_format_common "$arg" 'extentions' ;;
  757. fname) validate_format_name_s "$arg" "$arg_name" ;;
  758. forward) validate_format_email "$arg" ;;
  759. ftp_password) validate_format_password "$arg" ;;
  760. ftp_user) validate_format_username "$arg" "$arg_name" ;;
  761. host) validate_format_domain "$arg" "$arg_name" 'host';;
  762. hour) validate_format_mhdmw "$arg" $arg_name ;;
  763. id) validate_format_int "$arg" 'id' ;;
  764. interface) validate_format_interface "$arg" ;;
  765. ip) validate_format_ip "$arg" ;;
  766. ip_name) validate_format_domain "$arg" 'domain';;
  767. ip_status) validate_format_ip_status "$arg" ;;
  768. job) validate_format_int "$arg" 'job' ;;
  769. key) validate_format_username "$arg" "$arg_name" ;;
  770. lname) validate_format_name_s "$arg" "$arg_name" ;;
  771. malias) validate_format_username "$arg" "$arg_name" ;;
  772. mask) validate_format_ip "$arg" ;;
  773. max_db) validate_format_int "$arg" 'max db';;
  774. min) validate_format_mhdmw "$arg" $arg_name ;;
  775. month) validate_format_mhdmw "$arg" $arg_name ;;
  776. nat_ip) validate_format_ip "$arg" ;;
  777. newid) validate_format_int "$arg" 'id' ;;
  778. ns1) validate_format_domain "$arg" 'name_server';;
  779. ns2) validate_format_domain "$arg" 'name_server';;
  780. ns3) validate_format_domain "$arg" 'name_server';;
  781. ns4) validate_format_domain "$arg" 'name_server';;
  782. package) validate_format_name "$arg" "$arg_name" ;;
  783. password) validate_format_password "$arg" ;;
  784. port) validate_format_int "$arg" 'port' ;;
  785. quota) validate_format_int "$arg" 'quota' ;;
  786. restart) validate_format_boolean "$arg" 'restart' ;;
  787. record) validate_format_common "$arg" 'record';;
  788. rtype) validate_format_dns_type "$arg" ;;
  789. shell) validate_format_shell "$arg" ;;
  790. soa) validate_format_domain "$arg" 'soa_record';;
  791. stats_pass) validate_format_password "$arg" ;;
  792. stats_user) validate_format_username "$arg" "$arg_name" ;;
  793. template) validate_format_name "$arg" "$arg_name" ;;
  794. ttl) validate_format_int "$arg" 'ttl';;
  795. user) validate_format_username "$arg" "$arg_name" ;;
  796. wday) validate_format_mhdmw "$arg" $arg_name ;;
  797. esac
  798. done
  799. }