index.php 35 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804
  1. <?php
  2. error_reporting(NULL);
  3. ob_start();
  4. unset($_SESSION['error_msg']);
  5. $TAB = 'WEB';
  6. // Main include
  7. include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
  8. // Check domain argument
  9. if (empty($_GET['domain'])) {
  10. exit;
  11. }
  12. // Edit as someone else?
  13. if (($_SESSION['user'] == 'admin') && (!empty($_GET['user']))) {
  14. $user=escapeshellarg($_GET['user']);
  15. }
  16. // List domain
  17. $v_domain = escapeshellarg($_GET['domain']);
  18. exec (VESTA_CMD."v-list-web-domain ".$user." ".$v_domain." json", $output, $return_var);
  19. $data = json_decode(implode('', $output), true);
  20. unset($output);
  21. // Parse domain
  22. $v_username = $user;
  23. $v_domain = $_GET['domain'];
  24. $v_ip = $data[$v_domain]['IP'];
  25. $v_template = $data[$v_domain]['TPL'];
  26. $v_aliases = str_replace(',', "\n", $data[$v_domain]['ALIAS']);
  27. $valiases = explode(",", $data[$v_domain]['ALIAS']);
  28. $v_tpl = $data[$v_domain]['IP'];
  29. $v_cgi = $data[$v_domain]['CGI'];
  30. $v_elog = $data[$v_domain]['ELOG'];
  31. $v_ssl = $data[$v_domain]['SSL'];
  32. if (!empty($v_ssl)) {
  33. exec (VESTA_CMD."v-list-web-domain-ssl ".$user." ".escapeshellarg($v_domain)." json", $output, $return_var);
  34. $ssl_str = json_decode(implode('', $output), true);
  35. unset($output);
  36. $v_ssl_crt = $ssl_str[$v_domain]['CRT'];
  37. $v_ssl_key = $ssl_str[$v_domain]['KEY'];
  38. $v_ssl_ca = $ssl_str[$v_domain]['CA'];
  39. $v_ssl_subject = $ssl_str[$v_domain]['SUBJECT'];
  40. $v_ssl_aliases = $ssl_str[$v_domain]['ALIASES'];
  41. $v_ssl_not_before = $ssl_str[$v_domain]['NOT_BEFORE'];
  42. $v_ssl_not_after = $ssl_str[$v_domain]['NOT_AFTER'];
  43. $v_ssl_signature = $ssl_str[$v_domain]['SIGNATURE'];
  44. $v_ssl_pub_key = $ssl_str[$v_domain]['PUB_KEY'];
  45. $v_ssl_issuer = $ssl_str[$v_domain]['ISSUER'];
  46. }
  47. $v_letsencrypt = $data[$v_domain]['LETSENCRYPT'];
  48. if (empty($v_letsencrypt)) $v_letsencrypt = 'no';
  49. $v_ssl_home = $data[$v_domain]['SSL_HOME'];
  50. $v_backend_template = $data[$v_domain]['BACKEND'];
  51. $v_proxy = $data[$v_domain]['PROXY'];
  52. $v_proxy_template = $data[$v_domain]['PROXY'];
  53. $v_proxy_ext = str_replace(',', ', ', $data[$v_domain]['PROXY_EXT']);
  54. $v_stats = $data[$v_domain]['STATS'];
  55. $v_stats_user = $data[$v_domain]['STATS_USER'];
  56. if (!empty($v_stats_user)) $v_stats_password = "";
  57. $v_ftp_user = $data[$v_domain]['FTP_USER'];
  58. $v_ftp_path = $data[$v_domain]['FTP_PATH'];
  59. if (!empty($v_ftp_user)) $v_ftp_password = "";
  60. $v_ftp_user_prepath = $data[$v_domain]['DOCUMENT_ROOT'];
  61. $v_ftp_user_prepath = str_replace('/public_html', '', $v_ftp_user_prepath, $occurance = 1);
  62. $v_ftp_email = $panel[$user]['CONTACT'];
  63. $v_suspended = $data[$v_domain]['SUSPENDED'];
  64. if ( $v_suspended == 'yes' ) {
  65. $v_status = 'suspended';
  66. } else {
  67. $v_status = 'active';
  68. }
  69. $v_time = $data[$v_domain]['TIME'];
  70. $v_date = $data[$v_domain]['DATE'];
  71. // List ip addresses
  72. exec (VESTA_CMD."v-list-user-ips ".$user." json", $output, $return_var);
  73. $ips = json_decode(implode('', $output), true);
  74. unset($output);
  75. // List web templates
  76. exec (VESTA_CMD."v-list-web-templates json", $output, $return_var);
  77. $templates = json_decode(implode('', $output), true);
  78. unset($output);
  79. // List backend templates
  80. if (!empty($_SESSION['WEB_BACKEND'])) {
  81. exec (VESTA_CMD."v-list-web-templates-backend json", $output, $return_var);
  82. $backend_templates = json_decode(implode('', $output), true);
  83. unset($output);
  84. }
  85. // List proxy templates
  86. if (!empty($_SESSION['PROXY_SYSTEM'])) {
  87. exec (VESTA_CMD."v-list-web-templates-proxy json", $output, $return_var);
  88. $proxy_templates = json_decode(implode('', $output), true);
  89. unset($output);
  90. }
  91. // List web stat engines
  92. exec (VESTA_CMD."v-list-web-stats json", $output, $return_var);
  93. $stats = json_decode(implode('', $output), true);
  94. unset($output);
  95. // Check POST request
  96. if (!empty($_POST['save'])) {
  97. $v_domain = escapeshellarg($_POST['v_domain']);
  98. // Check token
  99. if ((!isset($_POST['token'])) || ($_SESSION['token'] != $_POST['token'])) {
  100. header('location: /login/');
  101. exit();
  102. }
  103. // Change web domain IP
  104. if (($v_ip != $_POST['v_ip']) && (empty($_SESSION['error_msg']))) {
  105. $v_ip = escapeshellarg($_POST['v_ip']);
  106. exec (VESTA_CMD."v-change-web-domain-ip ".$v_username." ".$v_domain." ".$v_ip." no", $output, $return_var);
  107. check_return_code($return_var,$output);
  108. $restart_web = 'yes';
  109. $restart_proxy = 'yes';
  110. unset($output);
  111. }
  112. // Chane dns domain IP
  113. if (($v_ip != $_POST['v_ip']) && (empty($_SESSION['error_msg']))) {
  114. exec (VESTA_CMD."v-list-dns-domain ".$v_username." ".$v_domain." json", $output, $return_var);
  115. unset($output);
  116. if ($return_var == 0 ) {
  117. $v_ip = escapeshellarg($_POST['v_ip']);
  118. exec (VESTA_CMD."v-change-dns-domain-ip ".$v_username." ".$v_domain." ".$v_ip." no", $output, $return_var);
  119. check_return_code($return_var,$output);
  120. unset($output);
  121. $restart_dns = 'yes';
  122. }
  123. }
  124. // Change dns ip for each alias
  125. if (($v_ip != $_POST['v_ip']) && (empty($_SESSION['error_msg']))) {
  126. foreach($valiases as $v_alias ){
  127. $v_alias = escapeshellarg($v_alias);
  128. exec (VESTA_CMD."v-list-dns-domain ".$v_username." ".$v_alias." json", $output, $return_var);
  129. unset($output);
  130. if ($return_var == 0 ) {
  131. $v_ip = escapeshellarg($_POST['v_ip']);
  132. exec (VESTA_CMD."v-change-dns-domain-ip ".$v_username." ".$v_alias." ".$v_ip, $output, $return_var);
  133. check_return_code($return_var,$output);
  134. unset($output);
  135. $restart_dns = 'yes';
  136. }
  137. }
  138. }
  139. // Change template (admin only)
  140. if (($v_template != $_POST['v_template']) && ( $_SESSION['user'] == 'admin') && (empty($_SESSION['error_msg']))) {
  141. $v_template = escapeshellarg($_POST['v_template']);
  142. exec (VESTA_CMD."v-change-web-domain-tpl ".$v_username." ".$v_domain." ".$v_template." no", $output, $return_var);
  143. check_return_code($return_var,$output);
  144. unset($output);
  145. $restart_web = 'yes';
  146. }
  147. // Change aliases
  148. if (empty($_SESSION['error_msg'])) {
  149. $waliases = preg_replace("/\n/", " ", $_POST['v_aliases']);
  150. $waliases = preg_replace("/,/", " ", $waliases);
  151. $waliases = preg_replace('/\s+/', ' ',$waliases);
  152. $waliases = trim($waliases);
  153. $aliases = explode(" ", $waliases);
  154. $v_aliases = str_replace(' ', "\n", $waliases);
  155. $result = array_diff($valiases, $aliases);
  156. foreach ($result as $alias) {
  157. if ((empty($_SESSION['error_msg'])) && (!empty($alias))) {
  158. $restart_web = 'yes';
  159. $restart_proxy = 'yes';
  160. $v_template = escapeshellarg($_POST['v_template']);
  161. $alias = escapeshellarg($alias);
  162. exec (VESTA_CMD."v-delete-web-domain-alias ".$v_username." ".$v_domain." ".$alias." no", $output, $return_var);
  163. check_return_code($return_var,$output);
  164. unset($output);
  165. if (empty($_SESSION['error_msg'])) {
  166. exec (VESTA_CMD."v-list-dns-domain ".$v_username." ".$v_domain, $output, $return_var);
  167. unset($output);
  168. if ($return_var == 0) {
  169. exec (VESTA_CMD."v-delete-dns-on-web-alias ".$v_username." ".$v_domain." ".$alias." no", $output, $return_var);
  170. check_return_code($return_var,$output);
  171. unset($output);
  172. $restart_dns = 'yes';
  173. }
  174. }
  175. }
  176. }
  177. $result = array_diff($aliases, $valiases);
  178. foreach ($result as $alias) {
  179. if ((empty($_SESSION['error_msg'])) && (!empty($alias))) {
  180. $restart_web = 'yes';
  181. $restart_proxy = 'yes';
  182. $v_template = escapeshellarg($_POST['v_template']);
  183. $alias = escapeshellarg($alias);
  184. exec (VESTA_CMD."v-add-web-domain-alias ".$v_username." ".$v_domain." ".$alias." no", $output, $return_var);
  185. check_return_code($return_var,$output);
  186. unset($output);
  187. if (empty($_SESSION['error_msg'])) {
  188. exec (VESTA_CMD."v-list-dns-domain ".$v_username." ".$v_domain, $output, $return_var);
  189. unset($output);
  190. if ($return_var == 0) {
  191. exec (VESTA_CMD."v-add-dns-on-web-alias ".$v_username." ".$alias." ".$v_ip." no", $output, $return_var);
  192. check_return_code($return_var,$output);
  193. unset($output);
  194. $restart_dns = 'yes';
  195. }
  196. }
  197. }
  198. }
  199. }
  200. // Change backend template
  201. if ((!empty($_SESSION['WEB_BACKEND'])) && ( $v_backend_template != $_POST['v_backend_template']) && ( $_SESSION['user'] == 'admin') && (empty($_SESSION['error_msg']))) {
  202. $v_backend_template = $_POST['v_backend_template'];
  203. exec (VESTA_CMD."v-change-web-domain-backend-tpl ".$v_username." ".$v_domain." ".escapeshellarg($v_backend_template), $output, $return_var);
  204. check_return_code($return_var,$output);
  205. unset($output);
  206. }
  207. // Delete proxy support
  208. if ((!empty($_SESSION['PROXY_SYSTEM'])) && (!empty($v_proxy)) && (empty($_POST['v_proxy'])) && (empty($_SESSION['error_msg']))) {
  209. exec (VESTA_CMD."v-delete-web-domain-proxy ".$v_username." ".$v_domain." no", $output, $return_var);
  210. check_return_code($return_var,$output);
  211. unset($output);
  212. unset($v_proxy);
  213. $restart_proxy = 'yes';
  214. }
  215. // Change proxy template / Update extension list (admin only)
  216. if ((!empty($_SESSION['PROXY_SYSTEM'])) && (!empty($v_proxy)) && (!empty($_POST['v_proxy'])) && (empty($_SESSION['error_msg'])) && ($_SESSION['user'] == 'admin')) {
  217. $ext = preg_replace("/\n/", " ", $_POST['v_proxy_ext']);
  218. $ext = preg_replace("/,/", " ", $ext);
  219. $ext = preg_replace('/\s+/', ' ',$ext);
  220. $ext = trim($ext);
  221. $ext = str_replace(' ', ", ", $ext);
  222. if (( $v_proxy_template != $_POST['v_proxy_template']) || ($v_proxy_ext != $ext)) {
  223. $ext = str_replace(', ', ",", $ext);
  224. if (!empty($_POST['v_proxy_template'])) $v_proxy_template = $_POST['v_proxy_template'];
  225. exec (VESTA_CMD."v-change-web-domain-proxy-tpl ".$v_username." ".$v_domain." ".escapeshellarg($v_proxy_template)." ".escapeshellarg($ext)." no", $output, $return_var);
  226. check_return_code($return_var,$output);
  227. $v_proxy_ext = str_replace(',', ', ', $ext);
  228. unset($output);
  229. $restart_proxy = 'yes';
  230. }
  231. }
  232. // Add proxy support
  233. if ((!empty($_SESSION['PROXY_SYSTEM'])) && (empty($v_proxy)) && (!empty($_POST['v_proxy'])) && (empty($_SESSION['error_msg']))) {
  234. $v_proxy_template = $_POST['v_proxy_template'];
  235. if (!empty($_POST['v_proxy_ext'])) {
  236. $ext = preg_replace("/\n/", " ", $_POST['v_proxy_ext']);
  237. $ext = preg_replace("/,/", " ", $ext);
  238. $ext = preg_replace('/\s+/', ' ',$ext);
  239. $ext = trim($ext);
  240. $ext = str_replace(' ', ",", $ext);
  241. $v_proxy_ext = str_replace(',', ', ', $ext);
  242. }
  243. exec (VESTA_CMD."v-add-web-domain-proxy ".$v_username." ".$v_domain." ".escapeshellarg($v_proxy_template)." ".escapeshellarg($ext)." no", $output, $return_var);
  244. check_return_code($return_var,$output);
  245. unset($output);
  246. $restart_proxy = 'yes';
  247. }
  248. // Change document root for ssl domain
  249. if (( $v_ssl == 'yes') && (!empty($_POST['v_ssl'])) && (empty($_SESSION['error_msg']))) {
  250. if ( $v_ssl_home != $_POST['v_ssl_home'] ) {
  251. $v_ssl_home = escapeshellarg($_POST['v_ssl_home']);
  252. exec (VESTA_CMD."v-change-web-domain-sslhome ".$user." ".$v_domain." ".$v_ssl_home." no", $output, $return_var);
  253. check_return_code($return_var,$output);
  254. $v_ssl_home = $_POST['v_ssl_home'];
  255. $restart_web = 'yes';
  256. $restart_proxy = 'yes';
  257. unset($output);
  258. }
  259. }
  260. // Change SSL certificate
  261. if (( $v_letsencrypt == 'no' ) && (empty($_POST['v_letsencrypt'])) && ( $v_ssl == 'yes' ) && (!empty($_POST['v_ssl'])) && (empty($_SESSION['error_msg']))) {
  262. if (( $v_ssl_crt != str_replace("\r\n", "\n", $_POST['v_ssl_crt'])) || ( $v_ssl_key != str_replace("\r\n", "\n", $_POST['v_ssl_key'])) || ( $v_ssl_ca != str_replace("\r\n", "\n", $_POST['v_ssl_ca']))) {
  263. exec ('mktemp -d', $mktemp_output, $return_var);
  264. $tmpdir = $mktemp_output[0];
  265. // Certificate
  266. if (!empty($_POST['v_ssl_crt'])) {
  267. $fp = fopen($tmpdir."/".$_POST['v_domain'].".crt", 'w');
  268. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_crt']));
  269. fwrite($fp, "\n");
  270. fclose($fp);
  271. }
  272. // Key
  273. if (!empty($_POST['v_ssl_key'])) {
  274. $fp = fopen($tmpdir."/".$_POST['v_domain'].".key", 'w');
  275. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_key']));
  276. fwrite($fp, "\n");
  277. fclose($fp);
  278. }
  279. // CA
  280. if (!empty($_POST['v_ssl_ca'])) {
  281. $fp = fopen($tmpdir."/".$_POST['v_domain'].".ca", 'w');
  282. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_ca']));
  283. fwrite($fp, "\n");
  284. fclose($fp);
  285. }
  286. exec (VESTA_CMD."v-change-web-domain-sslcert ".$user." ".$v_domain." ".$tmpdir." no", $output, $return_var);
  287. check_return_code($return_var,$output);
  288. unset($output);
  289. $restart_web = 'yes';
  290. $restart_proxy = 'yes';
  291. exec (VESTA_CMD."v-list-web-domain-ssl ".$user." ".$v_domain." json", $output, $return_var);
  292. $ssl_str = json_decode(implode('', $output), true);
  293. unset($output);
  294. $v_ssl_crt = $ssl_str[$v_domain]['CRT'];
  295. $v_ssl_key = $ssl_str[$v_domain]['KEY'];
  296. $v_ssl_ca = $ssl_str[$v_domain]['CA'];
  297. $v_ssl_subject = $ssl_str[$v_domain]['SUBJECT'];
  298. $v_ssl_aliases = $ssl_str[$v_domain]['ALIASES'];
  299. $v_ssl_not_before = $ssl_str[$v_domain]['NOT_BEFORE'];
  300. $v_ssl_not_after = $ssl_str[$v_domain]['NOT_AFTER'];
  301. $v_ssl_signature = $ssl_str[$v_domain]['SIGNATURE'];
  302. $v_ssl_pub_key = $ssl_str[$v_domain]['PUB_KEY'];
  303. $v_ssl_issuer = $ssl_str[$v_domain]['ISSUER'];
  304. // Cleanup certificate tempfiles
  305. if (!empty($_POST['v_ssl_crt'])) unlink($tmpdir."/".$_POST['v_domain'].".crt");
  306. if (!empty($_POST['v_ssl_key'])) unlink($tmpdir."/".$_POST['v_domain'].".key");
  307. if (!empty($_POST['v_ssl_ca'])) unlink($tmpdir."/".$_POST['v_domain'].".ca");
  308. rmdir($tmpdir);
  309. }
  310. }
  311. // Delete Lets Encrypt support
  312. if (( $v_letsencrypt == 'yes' ) && (empty($_POST['v_letsencrypt'])) && (empty($_SESSION['error_msg']))) {
  313. exec (VESTA_CMD."v-delete-letsencrypt-domain ".$user." ".$v_domain." no", $output, $return_var);
  314. check_return_code($return_var,$output);
  315. unset($output);
  316. $v_ssl_crt = '';
  317. $v_ssl_key = '';
  318. $v_ssl_ca = '';
  319. $v_letsencrypt = 'no';
  320. $v_letsencrypt_deleted = 'yes';
  321. $v_ssl = 'no';
  322. $restart_web = 'yes';
  323. $restart_proxy = 'yes';
  324. }
  325. // Delete SSL certificate
  326. if (( $v_ssl == 'yes' ) && (empty($_POST['v_ssl'])) && (empty($_SESSION['error_msg']))) {
  327. exec (VESTA_CMD."v-delete-web-domain-ssl ".$v_username." ".$v_domain." no", $output, $return_var);
  328. check_return_code($return_var,$output);
  329. unset($output);
  330. $v_ssl_crt = '';
  331. $v_ssl_key = '';
  332. $v_ssl_ca = '';
  333. $v_ssl = 'no';
  334. $restart_web = 'yes';
  335. $restart_proxy = 'yes';
  336. }
  337. // Add Lets Encrypt support
  338. if ((!empty($_POST['v_ssl'])) && ( $v_letsencrypt == 'no' ) && (!empty($_POST['v_letsencrypt'])) && empty($_SESSION['error_msg'])) {
  339. $l_aliases = str_replace("\n", ',', $v_aliases);
  340. exec (VESTA_CMD."v-add-letsencrypt-domain ".$user." ".$v_domain." ".escapeshellarg($l_aliases)." no", $output, $return_var);
  341. check_return_code($return_var,$output);
  342. unset($output);
  343. $v_letsencrypt = 'yes';
  344. $v_ssl = 'yes';
  345. $restart_web = 'yes';
  346. $restart_proxy = 'yes';
  347. }
  348. // Add SSL certificate
  349. if (( $v_ssl == 'no' ) && (!empty($_POST['v_ssl'])) && (empty($v_letsencrypt_deleted)) && (empty($_SESSION['error_msg']))) {
  350. if (empty($_POST['v_ssl_crt'])) $errors[] = 'ssl certificate';
  351. if (empty($_POST['v_ssl_key'])) $errors[] = 'ssl key';
  352. if (empty($_POST['v_ssl_home'])) $errors[] = 'ssl home';
  353. $v_ssl_home = escapeshellarg($_POST['v_ssl_home']);
  354. if (!empty($errors[0])) {
  355. foreach ($errors as $i => $error) {
  356. if ( $i == 0 ) {
  357. $error_msg = $error;
  358. } else {
  359. $error_msg = $error_msg.", ".$error;
  360. }
  361. }
  362. $_SESSION['error_msg'] = __('Field "%s" can not be blank.',$error_msg);
  363. } else {
  364. exec ('mktemp -d', $mktemp_output, $return_var);
  365. $tmpdir = $mktemp_output[0];
  366. // Certificate
  367. if (!empty($_POST['v_ssl_crt'])) {
  368. $fp = fopen($tmpdir."/".$_POST['v_domain'].".crt", 'w');
  369. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_crt']));
  370. fclose($fp);
  371. }
  372. // Key
  373. if (!empty($_POST['v_ssl_key'])) {
  374. $fp = fopen($tmpdir."/".$_POST['v_domain'].".key", 'w');
  375. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_key']));
  376. fclose($fp);
  377. }
  378. // CA
  379. if (!empty($_POST['v_ssl_ca'])) {
  380. $fp = fopen($tmpdir."/".$_POST['v_domain'].".ca", 'w');
  381. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_ca']));
  382. fclose($fp);
  383. }
  384. exec (VESTA_CMD."v-add-web-domain-ssl ".$user." ".$v_domain." ".$tmpdir." ".$v_ssl_home." no", $output, $return_var);
  385. check_return_code($return_var,$output);
  386. unset($output);
  387. $v_ssl = 'yes';
  388. $restart_web = 'yes';
  389. $restart_proxy = 'yes';
  390. exec (VESTA_CMD."v-list-web-domain-ssl ".$user." ".$v_domain." json", $output, $return_var);
  391. $ssl_str = json_decode(implode('', $output), true);
  392. unset($output);
  393. $v_ssl_crt = $ssl_str[$_POST['v_domain']]['CRT'];
  394. $v_ssl_key = $ssl_str[$_POST['v_domain']]['KEY'];
  395. $v_ssl_ca = $ssl_str[$_POST['v_domain']]['CA'];
  396. $v_ssl_subject = $ssl_str[$_POST['v_domain']]['SUBJECT'];
  397. $v_ssl_aliases = $ssl_str[$_POST['v_domain']]['ALIASES'];
  398. $v_ssl_not_before = $ssl_str[$_POST['v_domain']]['NOT_BEFORE'];
  399. $v_ssl_not_after = $ssl_str[$_POST['v_domain']]['NOT_AFTER'];
  400. $v_ssl_signature = $ssl_str[$_POST['v_domain']]['SIGNATURE'];
  401. $v_ssl_pub_key = $ssl_str[$_POST['v_domain']]['PUB_KEY'];
  402. $v_ssl_issuer = $ssl_str[$_POST['v_domain']]['ISSUER'];
  403. // Cleanup certificate tempfiles
  404. if (!empty($_POST['v_ssl_crt'])) unlink($tmpdir."/".$_POST['v_domain'].".crt");
  405. if (!empty($_POST['v_ssl_key'])) unlink($tmpdir."/".$_POST['v_domain'].".key");
  406. if (!empty($_POST['v_ssl_ca'])) unlink($tmpdir."/".$_POST['v_domain'].".ca");
  407. rmdir($tmpdir);
  408. }
  409. }
  410. // Delete web stats
  411. if ((!empty($v_stats)) && ($_POST['v_stats'] == 'none') && (empty($_SESSION['error_msg']))) {
  412. exec (VESTA_CMD."v-delete-web-domain-stats ".$v_username." ".$v_domain, $output, $return_var);
  413. check_return_code($return_var,$output);
  414. unset($output);
  415. $v_stats = '';
  416. }
  417. // Change web stats engine
  418. if ((!empty($v_stats)) && ($_POST['v_stats'] != $v_stats) && (empty($_SESSION['error_msg']))) {
  419. $v_stats = escapeshellarg($_POST['v_stats']);
  420. exec (VESTA_CMD."v-change-web-domain-stats ".$v_username." ".$v_domain." ".$v_stats, $output, $return_var);
  421. check_return_code($return_var,$output);
  422. unset($output);
  423. }
  424. // Add web stats
  425. if ((empty($v_stats)) && ($_POST['v_stats'] != 'none') && (empty($_SESSION['error_msg']))) {
  426. $v_stats = escapeshellarg($_POST['v_stats']);
  427. exec (VESTA_CMD."v-add-web-domain-stats ".$v_username." ".$v_domain." ".$v_stats, $output, $return_var);
  428. check_return_code($return_var,$output);
  429. unset($output);
  430. }
  431. // Delete web stats authorization
  432. if ((!empty($v_stats_user)) && (empty($_POST['v_stats_auth'])) && (empty($_SESSION['error_msg']))) {
  433. exec (VESTA_CMD."v-delete-web-domain-stats-user ".$v_username." ".$v_domain, $output, $return_var);
  434. check_return_code($return_var,$output);
  435. unset($output);
  436. $v_stats_user = '';
  437. $v_stats_password = '';
  438. }
  439. // Change web stats user or password
  440. if ((empty($v_stats_user)) && (!empty($_POST['v_stats_auth'])) && (empty($_SESSION['error_msg']))) {
  441. if (empty($_POST['v_stats_user'])) $errors[] = __('stats username');
  442. if (!empty($errors[0])) {
  443. foreach ($errors as $i => $error) {
  444. if ( $i == 0 ) {
  445. $error_msg = $error;
  446. } else {
  447. $error_msg = $error_msg.", ".$error;
  448. }
  449. }
  450. $_SESSION['error_msg'] = __('Field "%s" can not be blank.',$error_msg);
  451. } else {
  452. $v_stats_user = escapeshellarg($_POST['v_stats_user']);
  453. $v_stats_password = tempnam("/tmp","vst");
  454. $fp = fopen($v_stats_password, "w");
  455. fwrite($fp, $_POST['v_stats_password']."\n");
  456. fclose($fp);
  457. exec (VESTA_CMD."v-add-web-domain-stats-user ".$v_username." ".$v_domain." ".$v_stats_user." ".$v_stats_password, $output, $return_var);
  458. check_return_code($return_var,$output);
  459. unset($output);
  460. unlink($v_stats_password);
  461. $v_stats_password = escapeshellarg($_POST['v_stats_password']);
  462. }
  463. }
  464. // Add web stats authorization
  465. if ((!empty($v_stats_user)) && (!empty($_POST['v_stats_auth'])) && (empty($_SESSION['error_msg']))) {
  466. if (empty($_POST['v_stats_user'])) $errors[] = __('stats user');
  467. if (!empty($errors[0])) {
  468. foreach ($errors as $i => $error) {
  469. if ( $i == 0 ) {
  470. $error_msg = $error;
  471. } else {
  472. $error_msg = $error_msg.", ".$error;
  473. }
  474. }
  475. $_SESSION['error_msg'] = __('Field "%s" can not be blank.',$error_msg);
  476. }
  477. if (($v_stats_user != $_POST['v_stats_user']) || (!empty($_POST['v_stats_password'])) && (empty($_SESSION['error_msg']))) {
  478. $v_stats_user = escapeshellarg($_POST['v_stats_user']);
  479. $v_stats_password = tempnam("/tmp","vst");
  480. $fp = fopen($v_stats_password, "w");
  481. fwrite($fp, $_POST['v_stats_password']."\n");
  482. fclose($fp);
  483. exec (VESTA_CMD."v-add-web-domain-stats-user ".$v_username." ".$v_domain." ".$v_stats_user." ".$v_stats_password, $output, $return_var);
  484. check_return_code($return_var,$output);
  485. unset($output);
  486. unlink($v_stats_password);
  487. $v_stats_password = escapeshellarg($_POST['v_stats_password']);
  488. }
  489. }
  490. // Update ftp account
  491. if (!empty($_POST['v_ftp_user'])) {
  492. $v_ftp_users_updated = array();
  493. foreach ($_POST['v_ftp_user'] as $i => $v_ftp_user_data) {
  494. if (empty($v_ftp_user_data['v_ftp_user'])) {
  495. continue;
  496. }
  497. $v_ftp_user_data['v_ftp_user'] = preg_replace("/^".$user."_/i", "", $v_ftp_user_data['v_ftp_user']);
  498. if ($v_ftp_user_data['is_new'] == 1 && !empty($_POST['v_ftp'])) {
  499. if ((!empty($v_ftp_user_data['v_ftp_email'])) && (!filter_var($v_ftp_user_data['v_ftp_email'], FILTER_VALIDATE_EMAIL))) $_SESSION['error_msg'] = __('Please enter valid email address.');
  500. if (empty($v_ftp_user_data['v_ftp_user'])) $errors[] = 'ftp user';
  501. if (!empty($errors[0])) {
  502. foreach ($errors as $i => $error) {
  503. if ( $i == 0 ) {
  504. $error_msg = $error;
  505. } else {
  506. $error_msg = $error_msg.", ".$error;
  507. }
  508. }
  509. $_SESSION['error_msg'] = __('Field "%s" can not be blank.',$error_msg);
  510. }
  511. // Add ftp account
  512. $v_ftp_username = $v_ftp_user_data['v_ftp_user'];
  513. $v_ftp_username_full = $user . '_' . $v_ftp_user_data['v_ftp_user'];
  514. $v_ftp_user = escapeshellarg($v_ftp_username);
  515. $v_ftp_path = escapeshellarg(trim($v_ftp_user_data['v_ftp_path']));
  516. if (empty($_SESSION['error_msg'])) {
  517. $v_ftp_password = tempnam("/tmp","vst");
  518. $fp = fopen($v_ftp_password, "w");
  519. fwrite($fp, $v_ftp_user_data['v_ftp_password']."\n");
  520. fclose($fp);
  521. exec (VESTA_CMD."v-add-web-domain-ftp ".$v_username." ".$v_domain." ".$v_ftp_user." ".$v_ftp_password . " " . $v_ftp_path, $output, $return_var);
  522. check_return_code($return_var,$output);
  523. if ((!empty($v_ftp_user_data['v_ftp_email'])) && (empty($_SESSION['error_msg']))) {
  524. $to = $v_ftp_user_data['v_ftp_email'];
  525. $subject = __("FTP login credentials");
  526. $hostname = exec('hostname');
  527. $from = __('MAIL_FROM',$hostname);
  528. $mailtext = __('FTP_ACCOUNT_READY',$_GET['domain'],$user,$v_ftp_username,$v_ftp_user_data['v_ftp_password']);
  529. send_email($to, $subject, $mailtext, $from);
  530. unset($v_ftp_email);
  531. }
  532. unset($output);
  533. unlink($v_ftp_password);
  534. $v_ftp_password = escapeshellarg($v_ftp_user_data['v_ftp_password']);
  535. }
  536. if ($return_var == 0) {
  537. $v_ftp_password = "";
  538. $v_ftp_user_data['is_new'] = 0;
  539. }
  540. else {
  541. $v_ftp_user_data['is_new'] = 1;
  542. }
  543. $v_ftp_users_updated[] = array(
  544. 'is_new' => empty($_SESSION['error_msg']) ? 0 : 1,
  545. 'v_ftp_user' => $v_ftp_username_full,
  546. 'v_ftp_password' => $v_ftp_password,
  547. 'v_ftp_path' => $v_ftp_user_data['v_ftp_path'],
  548. 'v_ftp_email' => $v_ftp_user_data['v_ftp_email'],
  549. 'v_ftp_pre_path' => $v_ftp_user_prepath
  550. );
  551. continue;
  552. }
  553. // Delete FTP account
  554. if ($v_ftp_user_data['delete'] == 1) {
  555. $v_ftp_username = $user . '_' . $v_ftp_user_data['v_ftp_user'];
  556. exec (VESTA_CMD."v-delete-web-domain-ftp ".$v_username." ".$v_domain." ".$v_ftp_username, $output, $return_var);
  557. check_return_code($return_var,$output);
  558. unset($output);
  559. continue;
  560. }
  561. if (!empty($_POST['v_ftp'])) {
  562. if (empty($v_ftp_user_data['v_ftp_user'])) $errors[] = __('ftp user');
  563. if (!empty($errors[0])) {
  564. foreach ($errors as $i => $error) {
  565. if ( $i == 0 ) {
  566. $error_msg = $error;
  567. } else {
  568. $error_msg = $error_msg.", ".$error;
  569. }
  570. }
  571. $_SESSION['error_msg'] = __('Field "%s" can not be blank.',$error_msg);
  572. }
  573. // Change FTP account path
  574. $v_ftp_username_for_emailing = $v_ftp_user_data['v_ftp_user'];
  575. $v_ftp_username = $user . '_' . $v_ftp_user_data['v_ftp_user']; //preg_replace("/^".$user."_/", "", $v_ftp_user_data['v_ftp_user']);
  576. $v_ftp_username = escapeshellarg($v_ftp_username);
  577. $v_ftp_path = escapeshellarg(trim($v_ftp_user_data['v_ftp_path']));
  578. if(escapeshellarg(trim($v_ftp_user_data['v_ftp_path_prev'])) != $v_ftp_path) {
  579. exec (VESTA_CMD."v-change-web-domain-ftp-path ".$v_username." ".$v_domain." ".$v_ftp_username." ".$v_ftp_path, $output, $return_var);
  580. }
  581. // Change FTP account password
  582. if (!empty($v_ftp_user_data['v_ftp_password'])) {
  583. $v_ftp_password = tempnam("/tmp","vst");
  584. $fp = fopen($v_ftp_password, "w");
  585. fwrite($fp, $v_ftp_user_data['v_ftp_password']."\n");
  586. fclose($fp);
  587. exec (VESTA_CMD."v-change-web-domain-ftp-password ".$v_username." ".$v_domain." ".$v_ftp_username." ".$v_ftp_password, $output, $return_var);
  588. unlink($v_ftp_password);
  589. $to = $v_ftp_user_data['v_ftp_email'];
  590. $subject = __("FTP login credentials");
  591. $hostname = exec('hostname');
  592. $from = __('MAIL_FROM',$hostname);
  593. $mailtext = __('FTP_ACCOUNT_READY',$_GET['domain'],$user,$v_ftp_username_for_emailing,$v_ftp_user_data['v_ftp_password']);
  594. send_email($to, $subject, $mailtext, $from);
  595. unset($v_ftp_email);
  596. }
  597. check_return_code($return_var, $output);
  598. unset($output);
  599. $v_ftp_users_updated[] = array(
  600. 'is_new' => 0,
  601. 'v_ftp_user' => $v_ftp_username,
  602. 'v_ftp_password' => $v_ftp_user_data['v_ftp_password'],
  603. 'v_ftp_path' => $v_ftp_user_data['v_ftp_path'],
  604. 'v_ftp_email' => $v_ftp_user_data['v_ftp_email'],
  605. 'v_ftp_pre_path' => $v_ftp_user_prepath
  606. );
  607. }
  608. }
  609. }
  610. // Restart web server
  611. if (!empty($restart_web) && (empty($_SESSION['error_msg']))) {
  612. exec (VESTA_CMD."v-restart-web", $output, $return_var);
  613. check_return_code($return_var,$output);
  614. unset($output);
  615. }
  616. // Restart proxy server
  617. if ((!empty($_SESSION['PROXY_SYSTEM'])) && !empty($restart_proxy) && (empty($_SESSION['error_msg']))) {
  618. exec (VESTA_CMD."v-restart-proxy", $output, $return_var);
  619. check_return_code($return_var,$output);
  620. unset($output);
  621. }
  622. // Restart dns server
  623. if (!empty($restart_dns) && (empty($_SESSION['error_msg']))) {
  624. exec (VESTA_CMD."v-restart-dns", $output, $return_var);
  625. check_return_code($return_var,$output);
  626. unset($output);
  627. }
  628. // Set success message
  629. if (empty($_SESSION['error_msg'])) {
  630. $_SESSION['ok_msg'] = __('Changes has been saved.');
  631. }
  632. }
  633. $v_ftp_users_raw = explode(':', $v_ftp_user);
  634. $v_ftp_users_paths_raw = explode(':', $data[$v_domain]['FTP_PATH']);
  635. $v_ftp_users = array();
  636. foreach ($v_ftp_users_raw as $v_ftp_user_index => $v_ftp_user_val) {
  637. if (empty($v_ftp_user_val)) {
  638. continue;
  639. }
  640. $v_ftp_users[] = array(
  641. 'is_new' => 0,
  642. 'v_ftp_user' => $v_ftp_user_val,
  643. 'v_ftp_password' => $v_ftp_password,
  644. 'v_ftp_path' => (isset($v_ftp_users_paths_raw[$v_ftp_user_index]) ? $v_ftp_users_paths_raw[$v_ftp_user_index] : ''),
  645. 'v_ftp_email' => $v_ftp_email,
  646. 'v_ftp_pre_path' => $v_ftp_user_prepath
  647. );
  648. }
  649. if (empty($v_ftp_users)) {
  650. $v_ftp_user = null;
  651. $v_ftp_users[] = array(
  652. 'is_new' => 1,
  653. 'v_ftp_user' => '',
  654. 'v_ftp_password' => '',
  655. 'v_ftp_path' => (isset($v_ftp_users_paths_raw[$v_ftp_user_index]) ? $v_ftp_users_paths_raw[$v_ftp_user_index] : ''),
  656. 'v_ftp_email' => '',
  657. 'v_ftp_pre_path' => $v_ftp_user_prepath
  658. );
  659. }
  660. // set default pre path for newly created users
  661. $v_ftp_pre_path_new_user = $v_ftp_user_prepath;
  662. if (isset($v_ftp_users_updated)) {
  663. $v_ftp_users = $v_ftp_users_updated;
  664. if (empty($v_ftp_users_updated)) {
  665. $v_ftp_user = null;
  666. $v_ftp_users[] = array(
  667. 'is_new' => 1,
  668. 'v_ftp_user' => '',
  669. 'v_ftp_password' => '',
  670. 'v_ftp_path' => (isset($v_ftp_users_paths_raw[$v_ftp_user_index]) ? $v_ftp_users_paths_raw[$v_ftp_user_index] : ''),
  671. 'v_ftp_email' => '',
  672. 'v_ftp_pre_path' => $v_ftp_user_prepath
  673. );
  674. }
  675. }
  676. $result = array(
  677. 'username' => $v_username,
  678. 'domain' => $v_domain,
  679. 'ip' => $v_ip,
  680. 'template' => $v_template,
  681. 'aliases' => $v_aliases,
  682. 'valiases' => $valiases,
  683. 'tpl' => $v_tpl,
  684. 'elog' => $$v_elog,
  685. 'ssl' => $v_ssl,
  686. 'cgi' => $v_cgi,
  687. 'ssl_crt' => $v_ssl_crt,
  688. 'ssl_key' => $v_ssl_key,
  689. 'ssl_ca' => $v_ssl_ca,
  690. 'ssl_subject' => $v_ssl_subject,
  691. 'ssl_aliases' => $v_ssl_aliases,
  692. 'ssl_not_before' => $v_ssl_not_before,
  693. 'ssl_not_after' => $v_ssl_not_after,
  694. 'ssl_signature' => $v_ssl_signature,
  695. 'ssl_pub_key' => $v_ssl_pub_key,
  696. 'ssl_issuer' => $v_ssl_issuer,
  697. 'letsencrypt' => $v_letsencrypt,
  698. 'ssl_home' => $v_ssl_home,
  699. 'backend_template' => $v_backend_template,
  700. 'proxy' => $v_proxy,
  701. 'proxy_template' => $v_proxy_template,
  702. 'proxy_ext' => !empty($v_proxy_ext) ? $v_proxy_ext : 'jpg, jpeg, gif, png, ico, svg, css, zip, tgz, gz, rar, bz2, exe, pdf, doc, xls, ppt, txt, odt, ods, odp, odf, tar, bmp, rtf, js, mp3, avi, mpeg, flv, html, htm',
  703. 'v_stats' => $v_stats,
  704. 'stats_user' => $v_stats_user,
  705. 'ftp_user' => $v_ftp_user,
  706. 'ftp_path' => $v_ftp_path,
  707. 'ftp_password' => $v_ftp_password,
  708. 'ftp_user_prepath' => $v_ftp_user_prepath,
  709. 'ftp_email' => $v_ftp_email,
  710. 'suspended' => $v_suspended,
  711. 'status' => $v_status,
  712. 'time' => $v_time,
  713. 'date' => $v_date,
  714. 'ips' => $ips,
  715. 'prefixI18N' => __('Prefix will be automaticaly added to username',$user."_"),
  716. 'ftp_users' => $v_ftp_users,
  717. 'templates' => $templates,
  718. 'backend_templates' => $backend_templates,
  719. 'proxy_templates' => $proxy_templates,
  720. 'stats' => $stats,
  721. 'proxy_system' => $_SESSION['PROXY_SYSTEM'],
  722. 'web_backend' => $_SESSION['WEB_BACKEND'],
  723. 'web_system' => $_SESSION['WEB_SYSTEM'],
  724. 'error_msg' => $_SESSION['error_msg'],
  725. 'ok_msg' => $_SESSION['ok_msg']
  726. );
  727. echo json_encode($result);
  728. // Flush session messages
  729. unset($_SESSION['error_msg']);
  730. unset($_SESSION['ok_msg']);