index.php 30 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701
  1. <?php
  2. error_reporting(NULL);
  3. ob_start();
  4. unset($_SESSION['error_msg']);
  5. $TAB = 'WEB';
  6. // Main include
  7. include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
  8. // Check domain argument
  9. if (empty($_GET['domain'])) {
  10. header("Location: /list/web/");
  11. exit;
  12. }
  13. // Edit as someone else?
  14. if (($_SESSION['user'] == 'admin') && (!empty($_GET['user']))) {
  15. $user=escapeshellarg($_GET['user']);
  16. }
  17. // List domain
  18. $v_domain = escapeshellarg($_GET['domain']);
  19. exec (VESTA_CMD."v-list-web-domain ".$user." ".$v_domain." json", $output, $return_var);
  20. $data = json_decode(implode('', $output), true);
  21. unset($output);
  22. // Parse domain
  23. $v_username = $user;
  24. $v_domain = $_GET['domain'];
  25. $v_ip = $data[$v_domain]['IP'];
  26. $v_template = $data[$v_domain]['TPL'];
  27. $v_aliases = str_replace(',', "\n", $data[$v_domain]['ALIAS']);
  28. $valiases = explode(",", $data[$v_domain]['ALIAS']);
  29. $v_tpl = $data[$v_domain]['IP'];
  30. $v_cgi = $data[$v_domain]['CGI'];
  31. $v_elog = $data[$v_domain]['ELOG'];
  32. $v_ssl = $data[$v_domain]['SSL'];
  33. if ( $v_ssl == 'yes' ) {
  34. exec (VESTA_CMD."v-list-web-domain-ssl ".$user." '".$v_domain."' json", $output, $return_var);
  35. $ssl_str = json_decode(implode('', $output), true);
  36. unset($output);
  37. $v_ssl_crt = $ssl_str[$v_domain]['CRT'];
  38. $v_ssl_key = $ssl_str[$v_domain]['KEY'];
  39. $v_ssl_ca = $ssl_str[$v_domain]['CA'];
  40. }
  41. $v_ssl_home = $data[$v_domain]['SSL_HOME'];
  42. $v_backend_template = $data[$v_domain]['BACKEND'];
  43. $v_proxy = $data[$v_domain]['PROXY'];
  44. $v_proxy_template = $data[$v_domain]['PROXY'];
  45. $v_proxy_ext = str_replace(',', ', ', $data[$v_domain]['PROXY_EXT']);
  46. $v_stats = $data[$v_domain]['STATS'];
  47. $v_stats_user = $data[$v_domain]['STATS_USER'];
  48. if (!empty($v_stats_user)) $v_stats_password = "";
  49. $v_ftp_user = $data[$v_domain]['FTP_USER'];
  50. $v_ftp_path = $data[$v_domain]['FTP_PATH'];
  51. if (!empty($v_ftp_user)) $v_ftp_password = "";
  52. $v_ftp_user_prepath = $data[$v_domain]['DOCUMENT_ROOT'];
  53. $v_ftp_user_prepath = str_replace('/public_html', '', $v_ftp_user_prepath, $occurance = 1);
  54. $v_ftp_email = $panel[$user]['CONTACT'];
  55. $v_suspended = $data[$v_domain]['SUSPENDED'];
  56. if ( $v_suspended == 'yes' ) {
  57. $v_status = 'suspended';
  58. } else {
  59. $v_status = 'active';
  60. }
  61. $v_time = $data[$v_domain]['TIME'];
  62. $v_date = $data[$v_domain]['DATE'];
  63. // List ip addresses
  64. exec (VESTA_CMD."v-list-user-ips ".$user." json", $output, $return_var);
  65. $ips = json_decode(implode('', $output), true);
  66. unset($output);
  67. // List web templates
  68. exec (VESTA_CMD."v-list-web-templates json", $output, $return_var);
  69. $templates = json_decode(implode('', $output), true);
  70. unset($output);
  71. // List backend templates
  72. if (!empty($_SESSION['WEB_BACKEND'])) {
  73. exec (VESTA_CMD."v-list-web-templates-backend json", $output, $return_var);
  74. $backend_templates = json_decode(implode('', $output), true);
  75. unset($output);
  76. }
  77. // List proxy templates
  78. if (!empty($_SESSION['PROXY_SYSTEM'])) {
  79. exec (VESTA_CMD."v-list-web-templates-proxy json", $output, $return_var);
  80. $proxy_templates = json_decode(implode('', $output), true);
  81. unset($output);
  82. }
  83. // List web stat engines
  84. exec (VESTA_CMD."v-list-web-stats json", $output, $return_var);
  85. $stats = json_decode(implode('', $output), true);
  86. unset($output);
  87. // Check POST request
  88. if (!empty($_POST['save'])) {
  89. $v_domain = escapeshellarg($_POST['v_domain']);
  90. // Check token
  91. if ((!isset($_POST['token'])) || ($_SESSION['token'] != $_POST['token'])) {
  92. header('location: /login/');
  93. exit();
  94. }
  95. // Change web domain IP
  96. if (($v_ip != $_POST['v_ip']) && (empty($_SESSION['error_msg']))) {
  97. $v_ip = escapeshellarg($_POST['v_ip']);
  98. exec (VESTA_CMD."v-change-web-domain-ip ".$v_username." ".$v_domain." ".$v_ip." 'no'", $output, $return_var);
  99. check_return_code($return_var,$output);
  100. $restart_web = 'yes';
  101. $restart_proxy = 'yes';
  102. unset($output);
  103. }
  104. // Chane dns domain IP
  105. if (($v_ip != $_POST['v_ip']) && (empty($_SESSION['error_msg']))) {
  106. exec (VESTA_CMD."v-list-dns-domain ".$v_username." ".$v_domain." json", $output, $return_var);
  107. unset($output);
  108. if ($return_var == 0 ) {
  109. exec (VESTA_CMD."v-change-dns-domain-ip ".$v_username." ".$v_domain." ".$v_ip." 'no'", $output, $return_var);
  110. check_return_code($return_var,$output);
  111. unset($output);
  112. $restart_dns = 'yes';
  113. }
  114. }
  115. // Change dns ip for each alias
  116. if (($v_ip != $_POST['v_ip']) && (empty($_SESSION['error_msg']))) {
  117. foreach($valiases as $v_alias ){
  118. exec (VESTA_CMD."v-list-dns-domain ".$v_username." '".$v_alias."' json", $output, $return_var);
  119. unset($output);
  120. if ($return_var == 0 ) {
  121. exec (VESTA_CMD."v-change-dns-domain-ip ".$v_username." '".$v_alias."' ".$v_ip, $output, $return_var);
  122. check_return_code($return_var,$output);
  123. unset($output);
  124. $restart_dns = 'yes';
  125. }
  126. }
  127. }
  128. // Change template (admin only)
  129. if (($v_template != $_POST['v_template']) && ( $_SESSION['user'] == 'admin') && (empty($_SESSION['error_msg']))) {
  130. $v_template = escapeshellarg($_POST['v_template']);
  131. exec (VESTA_CMD."v-change-web-domain-tpl ".$v_username." ".$v_domain." ".$v_template." 'no'", $output, $return_var);
  132. check_return_code($return_var,$output);
  133. unset($output);
  134. $restart_web = 'yes';
  135. }
  136. // Change aliases
  137. if (empty($_SESSION['error_msg'])) {
  138. $waliases = preg_replace("/\n/", " ", $_POST['v_aliases']);
  139. $waliases = preg_replace("/,/", " ", $waliases);
  140. $waliases = preg_replace('/\s+/', ' ',$waliases);
  141. $waliases = trim($waliases);
  142. $aliases = explode(" ", $waliases);
  143. $v_aliases = str_replace(' ', "\n", $waliases);
  144. $result = array_diff($valiases, $aliases);
  145. foreach ($result as $alias) {
  146. if ((empty($_SESSION['error_msg'])) && (!empty($alias))) {
  147. $restart_web = 'yes';
  148. $restart_proxy = 'yes';
  149. $v_template = escapeshellarg($_POST['v_template']);
  150. exec (VESTA_CMD."v-delete-web-domain-alias ".$v_username." ".$v_domain." '".$alias."' 'no'", $output, $return_var);
  151. check_return_code($return_var,$output);
  152. unset($output);
  153. if (empty($_SESSION['error_msg'])) {
  154. exec (VESTA_CMD."v-list-dns-domain ".$v_username." ".$v_domain, $output, $return_var);
  155. unset($output);
  156. if ($return_var == 0) {
  157. exec (VESTA_CMD."v-delete-dns-on-web-alias ".$v_username." ".$v_domain." '".$alias."' 'no'", $output, $return_var);
  158. check_return_code($return_var,$output);
  159. unset($output);
  160. $restart_dns = 'yes';
  161. }
  162. }
  163. }
  164. }
  165. $result = array_diff($aliases, $valiases);
  166. foreach ($result as $alias) {
  167. if ((empty($_SESSION['error_msg'])) && (!empty($alias))) {
  168. $restart_web = 'yes';
  169. $restart_proxy = 'yes';
  170. $v_template = escapeshellarg($_POST['v_template']);
  171. exec (VESTA_CMD."v-add-web-domain-alias ".$v_username." ".$v_domain." ".escapeshellarg($alias)." 'no'", $output, $return_var);
  172. check_return_code($return_var,$output);
  173. unset($output);
  174. if (empty($_SESSION['error_msg'])) {
  175. exec (VESTA_CMD."v-list-dns-domain ".$v_username." ".$v_domain, $output, $return_var);
  176. unset($output);
  177. if ($return_var == 0) {
  178. exec (VESTA_CMD."v-add-dns-on-web-alias ".$v_username." ".escapeshellarg($alias)." ".$v_ip." no", $output, $return_var);
  179. check_return_code($return_var,$output);
  180. unset($output);
  181. $restart_dns = 'yes';
  182. }
  183. }
  184. }
  185. }
  186. }
  187. // Change backend template
  188. if ((!empty($_SESSION['WEB_BACKEND'])) && ( $v_backend_template != $_POST['v_backend_template']) && ( $_SESSION['user'] == 'admin') && (empty($_SESSION['error_msg']))) {
  189. $v_backend_template = $_POST['v_backend_template'];
  190. exec (VESTA_CMD."v-change-web-domain-backend-tpl ".$v_username." ".$v_domain." ".escapeshellarg($v_backend_template), $output, $return_var);
  191. check_return_code($return_var,$output);
  192. unset($output);
  193. }
  194. // Delete proxy support
  195. if ((!empty($_SESSION['PROXY_SYSTEM'])) && (!empty($v_proxy)) && (empty($_POST['v_proxy'])) && (empty($_SESSION['error_msg']))) {
  196. exec (VESTA_CMD."v-delete-web-domain-proxy ".$v_username." ".$v_domain." 'no'", $output, $return_var);
  197. check_return_code($return_var,$output);
  198. unset($output);
  199. unset($v_proxy);
  200. $restart_proxy = 'yes';
  201. }
  202. // Change proxy template / Update extension list
  203. if ((!empty($_SESSION['PROXY_SYSTEM'])) && (!empty($v_proxy)) && (!empty($_POST['v_proxy'])) && (empty($_SESSION['error_msg']))) {
  204. $ext = preg_replace("/\n/", " ", $_POST['v_proxy_ext']);
  205. $ext = preg_replace("/,/", " ", $ext);
  206. $ext = preg_replace('/\s+/', ' ',$ext);
  207. $ext = trim($ext);
  208. $ext = str_replace(' ', ", ", $ext);
  209. if (( $v_proxy_template != $_POST['v_proxy_template']) || ($v_proxy_ext != $ext)) {
  210. $ext = str_replace(', ', ",", $ext);
  211. if (!empty($_POST['v_proxy_template'])) $v_proxy_template = $_POST['v_proxy_template'];
  212. exec (VESTA_CMD."v-change-web-domain-proxy-tpl ".$v_username." ".$v_domain." ".escapeshellarg($v_proxy_template)." ".escapeshellarg($ext)." 'no'", $output, $return_var);
  213. check_return_code($return_var,$output);
  214. $v_proxy_ext = str_replace(',', ', ', $ext);
  215. unset($output);
  216. $restart_proxy = 'yes';
  217. }
  218. }
  219. // Add proxy support
  220. if ((!empty($_SESSION['PROXY_SYSTEM'])) && (empty($v_proxy)) && (!empty($_POST['v_proxy'])) && (empty($_SESSION['error_msg']))) {
  221. $v_proxy_template = $_POST['v_proxy_template'];
  222. if (!empty($_POST['v_proxy_ext'])) {
  223. $ext = preg_replace("/\n/", " ", $_POST['v_proxy_ext']);
  224. $ext = preg_replace("/,/", " ", $ext);
  225. $ext = preg_replace('/\s+/', ' ',$ext);
  226. $ext = trim($ext);
  227. $ext = str_replace(' ', ",", $ext);
  228. $v_proxy_ext = str_replace(',', ', ', $ext);
  229. }
  230. exec (VESTA_CMD."v-add-web-domain-proxy ".$v_username." ".$v_domain." ".escapeshellarg($v_proxy_template)." ".escapeshellarg($ext)." 'no'", $output, $return_var);
  231. check_return_code($return_var,$output);
  232. unset($output);
  233. $restart_proxy = 'yes';
  234. }
  235. // Delete SSL certificate
  236. if (( $v_ssl == 'yes' ) && (empty($_POST['v_ssl'])) && (empty($_SESSION['error_msg']))) {
  237. exec (VESTA_CMD."v-delete-web-domain-ssl ".$v_username." ".$v_domain." 'no'", $output, $return_var);
  238. check_return_code($return_var,$output);
  239. unset($output);
  240. $v_ssl = 'no';
  241. $restart_web = 'yes';
  242. $restart_proxy = 'yes';
  243. }
  244. // Change SSL certificate
  245. if (($v_ssl == 'yes') && (!empty($_POST['v_ssl'])) && (empty($_SESSION['error_msg']))) {
  246. if (( $v_ssl_crt != str_replace("\r\n", "\n", $_POST['v_ssl_crt'])) || ( $v_ssl_key != str_replace("\r\n", "\n", $_POST['v_ssl_key'])) || ( $v_ssl_ca != str_replace("\r\n", "\n", $_POST['v_ssl_ca']))) {
  247. exec ('mktemp -d', $mktemp_output, $return_var);
  248. $tmpdir = $mktemp_output[0];
  249. // Certificate
  250. if (!empty($_POST['v_ssl_crt'])) {
  251. $fp = fopen($tmpdir."/".$_POST['v_domain'].".crt", 'w');
  252. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_crt']));
  253. fwrite($fp, "\n");
  254. fclose($fp);
  255. }
  256. // Key
  257. if (!empty($_POST['v_ssl_key'])) {
  258. $fp = fopen($tmpdir."/".$_POST['v_domain'].".key", 'w');
  259. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_key']));
  260. fwrite($fp, "\n");
  261. fclose($fp);
  262. }
  263. // CA
  264. if (!empty($_POST['v_ssl_ca'])) {
  265. $fp = fopen($tmpdir."/".$_POST['v_domain'].".ca", 'w');
  266. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_ca']));
  267. fwrite($fp, "\n");
  268. fclose($fp);
  269. }
  270. exec (VESTA_CMD."v-change-web-domain-sslcert ".$user." ".$v_domain." ".$tmpdir." 'no'", $output, $return_var);
  271. check_return_code($return_var,$output);
  272. unset($output);
  273. $restart_web = 'yes';
  274. $restart_proxy = 'yes';
  275. $v_ssl_crt = $_POST['v_ssl_crt'];
  276. $v_ssl_key = $_POST['v_ssl_key'];
  277. $v_ssl_ca = $_POST['v_ssl_ca'];
  278. // Cleanup certificate tempfiles
  279. if (!empty($_POST['v_ssl_crt'])) {
  280. unlink($tmpdir."/".$_POST['v_domain'].".crt");
  281. }
  282. if (!empty($_POST['v_ssl_key'])) {
  283. unlink($tmpdir."/".$_POST['v_domain'].".key");
  284. }
  285. if (!empty($_POST['v_ssl_ca'])) {
  286. unlink($tmpdir."/".$_POST['v_domain'].".ca");
  287. }
  288. rmdir($tmpdir);
  289. }
  290. }
  291. // Add SSL certificate
  292. if (( $v_ssl == 'no') && (!empty($_POST['v_ssl'])) && (empty($_SESSION['error_msg']))) {
  293. if ((!empty($_POST['v_ssl'])) && (empty($_POST['v_ssl_crt']))) $errors[] = 'ssl certificate';
  294. if ((!empty($_POST['v_ssl'])) && (empty($_POST['v_ssl_key']))) $errors[] = 'ssl key';
  295. if ((!empty($_POST['v_ssl'])) && (empty($_POST['v_ssl_home']))) $errors[] = 'ssl home';
  296. $v_ssl_home = escapeshellarg($_POST['v_ssl_home']);
  297. if (!empty($errors[0])) {
  298. foreach ($errors as $i => $error) {
  299. if ( $i == 0 ) {
  300. $error_msg = $error;
  301. } else {
  302. $error_msg = $error_msg.", ".$error;
  303. }
  304. }
  305. $_SESSION['error_msg'] = __('Field "%s" can not be blank.',$error_msg);
  306. } else {
  307. exec ('mktemp -d', $mktemp_output, $return_var);
  308. $tmpdir = $mktemp_output[0];
  309. // Certificate
  310. if (!empty($_POST['v_ssl_crt'])) {
  311. $fp = fopen($tmpdir."/".$_POST['v_domain'].".crt", 'w');
  312. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_crt']));
  313. fclose($fp);
  314. }
  315. // Key
  316. if (!empty($_POST['v_ssl_key'])) {
  317. $fp = fopen($tmpdir."/".$_POST['v_domain'].".key", 'w');
  318. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_key']));
  319. fclose($fp);
  320. }
  321. // CA
  322. if (!empty($_POST['v_ssl_ca'])) {
  323. $fp = fopen($tmpdir."/".$_POST['v_domain'].".ca", 'w');
  324. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_ca']));
  325. fclose($fp);
  326. }
  327. exec (VESTA_CMD."v-add-web-domain-ssl ".$user." ".$v_domain." ".$tmpdir." ".$v_ssl_home." 'no'", $output, $return_var);
  328. check_return_code($return_var,$output);
  329. unset($output);
  330. $v_ssl = 'yes';
  331. $restart_web = 'yes';
  332. $restart_proxy = 'yes';
  333. $v_ssl_crt = $_POST['v_ssl_crt'];
  334. $v_ssl_key = $_POST['v_ssl_key'];
  335. $v_ssl_ca = $_POST['v_ssl_ca'];
  336. $v_ssl_home = $_POST['v_ssl_home'];
  337. // Cleanup certificate tempfiles
  338. if (!empty($_POST['v_ssl_crt'])) {
  339. unlink($tmpdir."/".$_POST['v_domain'].".crt");
  340. }
  341. if (!empty($_POST['v_ssl_key'])) {
  342. unlink($tmpdir."/".$_POST['v_domain'].".key");
  343. }
  344. if (!empty($_POST['v_ssl_ca'])) {
  345. unlink($tmpdir."/".$_POST['v_domain'].".ca");
  346. }
  347. rmdir($tmpdir);
  348. }
  349. }
  350. // Change document root for ssl domain
  351. if (( $v_ssl == 'yes') && (!empty($_POST['v_ssl'])) && (empty($_SESSION['error_msg']))) {
  352. if ( $v_ssl_home != $_POST['v_ssl_home'] ) {
  353. $v_ssl_home = escapeshellarg($_POST['v_ssl_home']);
  354. exec (VESTA_CMD."v-change-web-domain-sslhome ".$user." ".$v_domain." ".$v_ssl_home." 'no'", $output, $return_var);
  355. check_return_code($return_var,$output);
  356. $v_ssl_home = $_POST['v_ssl_home'];
  357. unset($output);
  358. }
  359. }
  360. // Delete web stats
  361. if ((!empty($v_stats)) && ($_POST['v_stats'] == 'none') && (empty($_SESSION['error_msg']))) {
  362. exec (VESTA_CMD."v-delete-web-domain-stats ".$v_username." ".$v_domain, $output, $return_var);
  363. check_return_code($return_var,$output);
  364. unset($output);
  365. $v_stats = '';
  366. }
  367. // Change web stats engine
  368. if ((!empty($v_stats)) && ($_POST['v_stats'] != $v_stats) && (empty($_SESSION['error_msg']))) {
  369. $v_stats = escapeshellarg($_POST['v_stats']);
  370. exec (VESTA_CMD."v-change-web-domain-stats ".$v_username." ".$v_domain." ".$v_stats, $output, $return_var);
  371. check_return_code($return_var,$output);
  372. unset($output);
  373. }
  374. // Add web stats
  375. if ((empty($v_stats)) && ($_POST['v_stats'] != 'none') && (empty($_SESSION['error_msg']))) {
  376. $v_stats = escapeshellarg($_POST['v_stats']);
  377. exec (VESTA_CMD."v-add-web-domain-stats ".$v_username." ".$v_domain." ".$v_stats, $output, $return_var);
  378. check_return_code($return_var,$output);
  379. unset($output);
  380. }
  381. // Delete web stats authorization
  382. if ((!empty($v_stats_user)) && (empty($_POST['v_stats_auth'])) && (empty($_SESSION['error_msg']))) {
  383. exec (VESTA_CMD."v-delete-web-domain-stats-user ".$v_username." ".$v_domain, $output, $return_var);
  384. check_return_code($return_var,$output);
  385. unset($output);
  386. $v_stats_user = '';
  387. $v_stats_password = '';
  388. }
  389. // Change web stats user or password
  390. if ((empty($v_stats_user)) && (!empty($_POST['v_stats_auth'])) && (empty($_SESSION['error_msg']))) {
  391. if (empty($_POST['v_stats_user'])) $errors[] = __('stats username');
  392. if (!empty($errors[0])) {
  393. foreach ($errors as $i => $error) {
  394. if ( $i == 0 ) {
  395. $error_msg = $error;
  396. } else {
  397. $error_msg = $error_msg.", ".$error;
  398. }
  399. }
  400. $_SESSION['error_msg'] = __('Field "%s" can not be blank.',$error_msg);
  401. } else {
  402. $v_stats_user = escapeshellarg($_POST['v_stats_user']);
  403. $v_stats_password = tempnam("/tmp","vst");
  404. $fp = fopen($v_stats_password, "w");
  405. fwrite($fp, $_POST['v_stats_password']."\n");
  406. fclose($fp);
  407. exec (VESTA_CMD."v-add-web-domain-stats-user ".$v_username." ".$v_domain." ".$v_stats_user." ".$v_stats_password, $output, $return_var);
  408. check_return_code($return_var,$output);
  409. unset($output);
  410. unlink($v_stats_password);
  411. $v_stats_password = escapeshellarg($_POST['v_stats_password']);
  412. }
  413. }
  414. // Add web stats authorization
  415. if ((!empty($v_stats_user)) && (!empty($_POST['v_stats_auth'])) && (empty($_SESSION['error_msg']))) {
  416. if (empty($_POST['v_stats_user'])) $errors[] = __('stats user');
  417. if (!empty($errors[0])) {
  418. foreach ($errors as $i => $error) {
  419. if ( $i == 0 ) {
  420. $error_msg = $error;
  421. } else {
  422. $error_msg = $error_msg.", ".$error;
  423. }
  424. }
  425. $_SESSION['error_msg'] = __('Field "%s" can not be blank.',$error_msg);
  426. }
  427. if (($v_stats_user != $_POST['v_stats_user']) || (!empty($_POST['v_stats_password'])) && (empty($_SESSION['error_msg']))) {
  428. $v_stats_user = escapeshellarg($_POST['v_stats_user']);
  429. $v_stats_password = tempnam("/tmp","vst");
  430. $fp = fopen($v_stats_password, "w");
  431. fwrite($fp, $_POST['v_stats_password']."\n");
  432. fclose($fp);
  433. exec (VESTA_CMD."v-add-web-domain-stats-user ".$v_username." ".$v_domain." ".$v_stats_user." ".$v_stats_password, $output, $return_var);
  434. check_return_code($return_var,$output);
  435. unset($output);
  436. unlink($v_stats_password);
  437. $v_stats_password = escapeshellarg($_POST['v_stats_password']);
  438. }
  439. }
  440. // Update ftp account
  441. if (!empty($_POST['v_ftp_user'])) {
  442. $v_ftp_users_updated = array();
  443. foreach ($_POST['v_ftp_user'] as $i => $v_ftp_user_data) {
  444. if (empty($v_ftp_user_data['v_ftp_user'])) {
  445. continue;
  446. }
  447. $v_ftp_user_data['v_ftp_user'] = preg_replace("/^".$user."_/i", "", $v_ftp_user_data['v_ftp_user']);
  448. if ($v_ftp_user_data['is_new'] == 1 && !empty($_POST['v_ftp'])) {
  449. if ((!empty($v_ftp_user_data['v_ftp_email'])) && (!filter_var($v_ftp_user_data['v_ftp_email'], FILTER_VALIDATE_EMAIL))) $_SESSION['error_msg'] = __('Please enter valid email address.');
  450. if (empty($v_ftp_user_data['v_ftp_user'])) $errors[] = 'ftp user';
  451. if (!empty($errors[0])) {
  452. foreach ($errors as $i => $error) {
  453. if ( $i == 0 ) {
  454. $error_msg = $error;
  455. } else {
  456. $error_msg = $error_msg.", ".$error;
  457. }
  458. }
  459. $_SESSION['error_msg'] = __('Field "%s" can not be blank.',$error_msg);
  460. }
  461. // Add ftp account
  462. $v_ftp_username = $v_ftp_user_data['v_ftp_user'];
  463. $v_ftp_username_full = $user . '_' . $v_ftp_user_data['v_ftp_user'];
  464. $v_ftp_user = escapeshellarg($v_ftp_username);
  465. $v_ftp_path = escapeshellarg(trim($v_ftp_user_data['v_ftp_path']));
  466. if (empty($_SESSION['error_msg'])) {
  467. $v_ftp_password = tempnam("/tmp","vst");
  468. $fp = fopen($v_ftp_password, "w");
  469. fwrite($fp, $v_ftp_user_data['v_ftp_password']."\n");
  470. fclose($fp);
  471. exec (VESTA_CMD."v-add-web-domain-ftp ".$v_username." ".$v_domain." ".$v_ftp_user." ".$v_ftp_password . " " . $v_ftp_path, $output, $return_var);
  472. check_return_code($return_var,$output);
  473. if ((!empty($v_ftp_user_data['v_ftp_email'])) && (empty($_SESSION['error_msg']))) {
  474. $to = $v_ftp_user_data['v_ftp_email'];
  475. $subject = __("FTP login credentials");
  476. $hostname = exec('hostname');
  477. $from = __('MAIL_FROM',$hostname);
  478. $mailtext = __('FTP_ACCOUNT_READY',$_GET['domain'],$user,$v_ftp_username,$v_ftp_user_data['v_ftp_password']);
  479. send_email($to, $subject, $mailtext, $from);
  480. unset($v_ftp_email);
  481. }
  482. unset($output);
  483. unlink($v_ftp_password);
  484. $v_ftp_password = escapeshellarg($v_ftp_user_data['v_ftp_password']);
  485. }
  486. if ($return_var == 0) {
  487. $v_ftp_password = "";
  488. $v_ftp_user_data['is_new'] = 0;
  489. }
  490. else {
  491. $v_ftp_user_data['is_new'] = 1;
  492. }
  493. $v_ftp_users_updated[] = array(
  494. 'is_new' => empty($_SESSION['error_msg']) ? 0 : 1,
  495. 'v_ftp_user' => $v_ftp_username_full,
  496. 'v_ftp_password' => $v_ftp_password,
  497. 'v_ftp_path' => $v_ftp_user_data['v_ftp_path'],
  498. 'v_ftp_email' => $v_ftp_user_data['v_ftp_email'],
  499. 'v_ftp_pre_path' => $v_ftp_user_prepath
  500. );
  501. continue;
  502. }
  503. // Delete FTP account
  504. if ($v_ftp_user_data['delete'] == 1) {
  505. $v_ftp_username = $user . '_' . $v_ftp_user_data['v_ftp_user'];
  506. exec (VESTA_CMD."v-delete-web-domain-ftp ".$v_username." ".$v_domain." ".$v_ftp_username, $output, $return_var);
  507. check_return_code($return_var,$output);
  508. unset($output);
  509. continue;
  510. }
  511. if (!empty($_POST['v_ftp'])) {
  512. if (empty($v_ftp_user_data['v_ftp_user'])) $errors[] = __('ftp user');
  513. if (!empty($errors[0])) {
  514. foreach ($errors as $i => $error) {
  515. if ( $i == 0 ) {
  516. $error_msg = $error;
  517. } else {
  518. $error_msg = $error_msg.", ".$error;
  519. }
  520. }
  521. $_SESSION['error_msg'] = __('Field "%s" can not be blank.',$error_msg);
  522. }
  523. // Change FTP account path
  524. $v_ftp_username = $user . '_' . $v_ftp_user_data['v_ftp_user']; //preg_replace("/^".$user."_/", "", $v_ftp_user_data['v_ftp_user']);
  525. $v_ftp_username = escapeshellarg($v_ftp_username);
  526. //if (!empty($v_ftp_user_data['v_ftp_path'])) {
  527. $v_ftp_path = escapeshellarg(trim($v_ftp_user_data['v_ftp_path']));
  528. exec (VESTA_CMD."v-change-web-domain-ftp-path ".$v_username." ".$v_domain." ".$v_ftp_username." ".$v_ftp_path, $output, $return_var);
  529. //}
  530. // Change FTP account password
  531. if (!empty($v_ftp_user_data['v_ftp_password'])) {
  532. $v_ftp_password = tempnam("/tmp","vst");
  533. $fp = fopen($v_ftp_password, "w");
  534. fwrite($fp, $v_ftp_user_data['v_ftp_password']."\n");
  535. fclose($fp);
  536. exec (VESTA_CMD."v-change-web-domain-ftp-password ".$v_username." ".$v_domain." ".$v_ftp_username." ".$v_ftp_password, $output, $return_var);
  537. unlink($v_ftp_password);
  538. $to = $v_ftp_user_data['v_ftp_email'];
  539. $subject = __("FTP login credentials");
  540. $hostname = exec('hostname');
  541. $from = __('MAIL_FROM',$hostname);
  542. $mailtext = __('FTP_ACCOUNT_READY',$_GET['domain'],$user,$v_ftp_username,$v_ftp_user_data['v_ftp_password']);
  543. send_email($to, $subject, $mailtext, $from);
  544. unset($v_ftp_email);
  545. }
  546. check_return_code($return_var, $output);
  547. unset($output);
  548. $v_ftp_users_updated[] = array(
  549. 'is_new' => 0,
  550. 'v_ftp_user' => $v_ftp_username,
  551. 'v_ftp_password' => $v_ftp_user_data['v_ftp_password'],
  552. 'v_ftp_path' => $v_ftp_user_data['v_ftp_path'],
  553. 'v_ftp_email' => $v_ftp_user_data['v_ftp_email'],
  554. 'v_ftp_pre_path' => $v_ftp_user_prepath
  555. );
  556. }
  557. }
  558. }
  559. // Restart web server
  560. if (!empty($restart_web) && (empty($_SESSION['error_msg']))) {
  561. exec (VESTA_CMD."v-restart-web", $output, $return_var);
  562. check_return_code($return_var,$output);
  563. unset($output);
  564. }
  565. // Restart proxy server
  566. if ((!empty($_SESSION['PROXY_SYSTEM'])) && !empty($restart_proxy) && (empty($_SESSION['error_msg']))) {
  567. exec (VESTA_CMD."v-restart-proxy", $output, $return_var);
  568. check_return_code($return_var,$output);
  569. unset($output);
  570. }
  571. // Restart dns server
  572. if (!empty($restart_dns) && (empty($_SESSION['error_msg']))) {
  573. exec (VESTA_CMD."v-restart-dns", $output, $return_var);
  574. check_return_code($return_var,$output);
  575. unset($output);
  576. }
  577. // Set success message
  578. if (empty($_SESSION['error_msg'])) {
  579. $_SESSION['ok_msg'] = __('Changes has been saved.');
  580. }
  581. }
  582. $v_ftp_users_raw = explode(':', $v_ftp_user);
  583. $v_ftp_users_paths_raw = explode(':', $data[$v_domain]['FTP_PATH']);
  584. $v_ftp_users = array();
  585. foreach ($v_ftp_users_raw as $v_ftp_user_index => $v_ftp_user_val) {
  586. if (empty($v_ftp_user_val)) {
  587. continue;
  588. }
  589. $v_ftp_users[] = array(
  590. 'is_new' => 0,
  591. 'v_ftp_user' => $v_ftp_user_val,
  592. 'v_ftp_password' => $v_ftp_password,
  593. 'v_ftp_path' => (isset($v_ftp_users_paths_raw[$v_ftp_user_index]) ? $v_ftp_users_paths_raw[$v_ftp_user_index] : ''),
  594. 'v_ftp_email' => $v_ftp_email,
  595. 'v_ftp_pre_path' => $v_ftp_user_prepath
  596. );
  597. }
  598. if (empty($v_ftp_users)) {
  599. $v_ftp_user = null;
  600. $v_ftp_users[] = array(
  601. 'is_new' => 1,
  602. 'v_ftp_user' => '',
  603. 'v_ftp_password' => '',
  604. 'v_ftp_path' => (isset($v_ftp_users_paths_raw[$v_ftp_user_index]) ? $v_ftp_users_paths_raw[$v_ftp_user_index] : ''),
  605. 'v_ftp_email' => '',
  606. 'v_ftp_pre_path' => $v_ftp_user_prepath
  607. );
  608. }
  609. // set default pre path for newly created users
  610. $v_ftp_pre_path_new_user = $v_ftp_user_prepath;
  611. if (isset($v_ftp_users_updated)) {
  612. $v_ftp_users = $v_ftp_users_updated;
  613. if (empty($v_ftp_users_updated)) {
  614. $v_ftp_user = null;
  615. $v_ftp_users[] = array(
  616. 'is_new' => 1,
  617. 'v_ftp_user' => '',
  618. 'v_ftp_password' => '',
  619. 'v_ftp_path' => (isset($v_ftp_users_paths_raw[$v_ftp_user_index]) ? $v_ftp_users_paths_raw[$v_ftp_user_index] : ''),
  620. 'v_ftp_email' => '',
  621. 'v_ftp_pre_path' => $v_ftp_user_prepath
  622. );
  623. }
  624. }
  625. // Render page
  626. render_page($user, $TAB, 'edit_web');
  627. // Flush session messages
  628. unset($_SESSION['error_msg']);
  629. unset($_SESSION['ok_msg']);