main.sh 25 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867
  1. # Internal variables
  2. DATE=$(date +%F)
  3. TIME=$(date +%T)
  4. SCRIPT=$(basename $0)
  5. A1=$1
  6. A2=$2
  7. A3=$3
  8. A4=$4
  9. A5=$5
  10. A6=$6
  11. A7=$7
  12. A8=$8
  13. A9=$9
  14. EVENT="$DATE $TIME $SCRIPT $A1 $A2 $A3 $A4 $A5 $A6 $A7 $A8 $A9"
  15. HOMEDIR='/home'
  16. BACKUP='/backup'
  17. BACKUP_GZIP=5
  18. BACKUP_DISK_LIMIT=95
  19. BACKUP_LA_LIMIT=5
  20. RRD_STEP=300
  21. RRD_IFACE_EXCLUDE=lo
  22. PW_MATRIX='0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'
  23. PW_LENGHT='10'
  24. BIN=$VESTA/bin
  25. USER_DATA=$VESTA/data/users/$user
  26. WEBTPL=$VESTA/data/templates/web
  27. DNSTPL=$VESTA/data/templates/dns
  28. RRD=$VESTA/web/rrd
  29. # Return codes
  30. OK=0
  31. E_ARGS=1
  32. E_INVALID=2
  33. E_NOTEXIST=3
  34. E_EXISTS=4
  35. E_SUSPENDED=5
  36. E_UNSUSPENDED=6
  37. E_INUSE=7
  38. E_LIMIT=8
  39. E_PASSWORD=9
  40. E_FORBIDEN=10
  41. E_DISABLED=11
  42. E_PARSING=12
  43. E_DISK=13
  44. E_LA=14
  45. E_CONNECT=15
  46. E_FTP=16
  47. E_DB=17
  48. E_RRD=18
  49. E_UPDATE=19
  50. E_RESTART=20
  51. # Log event function
  52. log_event() {
  53. if [ "$1" -eq 0 ]; then
  54. echo "$2" >> $VESTA/log/system.log
  55. else
  56. echo "$2 [Error $1]" >> $VESTA/log/error.log
  57. fi
  58. }
  59. # Log user history
  60. log_history() {
  61. cmd=$1
  62. undo=${2-no}
  63. log_user=${3-$user}
  64. log=$VESTA/data/users/$log_user/history.log
  65. touch $log
  66. if [ '99' -lt "$(wc -l $log |cut -f 1 -d ' ')" ]; then
  67. tail -n 49 $log > $log.moved
  68. mv -f $log.moved $log
  69. chmod 660 $log
  70. fi
  71. curr_str=$(grep "ID=" $log | cut -f 2 -d \' | sort -n | tail -n1)
  72. id="$((curr_str +1))"
  73. echo "ID='$id' DATE='$DATE' TIME='$TIME' CMD='$cmd' UNDO='$undo'" >> $log
  74. }
  75. # Argument list checker
  76. check_args() {
  77. if [ "$1" -gt "$2" ]; then
  78. echo "Error: not enought arguments"
  79. echo "Usage: $SCRIPT $3"
  80. log_event "$E_ARGS" "$EVENT"
  81. exit $E_ARGS
  82. fi
  83. }
  84. # Subsystem checker
  85. is_system_enabled() {
  86. if [ -z "$1" ] || [ "$1" = no ]; then
  87. echo "Error: $2 is disabled in the vesta.conf"
  88. log_event "$E_DISABLED" "$EVENT"
  89. exit $E_DISABLED
  90. fi
  91. }
  92. # User package check
  93. is_package_full() {
  94. case "$1" in
  95. WEB_DOMAINS) used=$(wc -l $USER_DATA/web.conf|cut -f1 -d \ );;
  96. WEB_ALIASES) used=$(grep "DOMAIN='$domain'" $USER_DATA/web.conf |\
  97. awk -F "ALIAS='" '{print $2}' | cut -f 1 -d \' | tr ',' '\n' |\
  98. wc -l );;
  99. DNS_DOMAINS) used=$(wc -l $USER_DATA/dns.conf |cut -f1 -d \ );;
  100. DNS_RECORDS) used=$(wc -l $USER_DATA/dns/$domain.conf |cut -f1 -d \ );;
  101. MAIL_DOMAINS) used=$(wc -l $USER_DATA/mail.conf |cut -f1 -d \ );;
  102. MAIL_ACCOUNTS) used=$(wc -l $USER_DATA/mail/$domain.conf |\
  103. cut -f1 -d \ );;
  104. DATABASES) used=$(wc -l $USER_DATA/db.conf |cut -f1 -d \ );;
  105. CRON_JOBS) used=$(wc -l $USER_DATA/cron.conf |cut -f1 -d \ );;
  106. esac
  107. limit=$(grep "^$1=" $USER_DATA/user.conf | cut -f 2 -d \' )
  108. if [ "$used" -ge "$limit" ]; then
  109. echo "Error: Limit reached / Upgrade package"
  110. log_event "$E_LIMIT" "$EVENT"
  111. exit $E_LIMIT
  112. fi
  113. }
  114. # Random password generator
  115. gen_password() {
  116. pw_matrix=${1-$PW_MATRIX}
  117. pw_lenght=${2-$PW_LENGHT}
  118. while [ ${n:=1} -le $pw_lenght ]; do
  119. pass="$pass${pw_matrix:$(($RANDOM%${#pw_matrix})):1}"
  120. let n+=1
  121. done
  122. echo "$pass"
  123. }
  124. # Package existance check
  125. is_package_valid() {
  126. if [ -z "$1" ]; then
  127. pkg_dir="$VESTA/data/packages"
  128. fi
  129. if [ ! -e "$pkg_dir/$package.pkg" ]; then
  130. echo "Error: package $package doesn't exist"
  131. log_event "$E_NOTEXIST" "$EVENT"
  132. exit $E_NOTEXIST
  133. fi
  134. }
  135. # Validate system type
  136. is_type_valid() {
  137. if [ -z "$(echo $1 | grep -w $2)" ]; then
  138. echo "Error: $2 is unknown type"
  139. log_event "$E_INVALID" "$EVENT"
  140. exit $E_INVALID
  141. fi
  142. }
  143. # Check if backup is available for user
  144. is_backup_available() {
  145. b_owner=$(echo $user |\
  146. sed -e "s/\.[0-9][0-9][0-9][0-9]-[0-9][0-9]-[0-9][0-9].tar//")
  147. if [ "$user" != "$b_owner" ]; then
  148. echo "Error: User $user don't have permission to use $backup"
  149. log_event "$E_FORBIDEN" "$EVENT"
  150. exit $E_FORBIDEN
  151. fi
  152. }
  153. # Check user backup settings
  154. is_backup_enabled() {
  155. BACKUPS=$(grep "^BACKUPS=" $USER_DATA/user.conf | cut -f2 -d \')
  156. if [ -z "$BACKUPS" ] || [[ "$BACKUPS" -le '0' ]]; then
  157. echo "Error: user backup disabled"
  158. log_event "$E_DISABLED" "$EVENT"
  159. exit $E_DISABLED
  160. fi
  161. }
  162. # Check user backup settings
  163. is_backup_scheduled() {
  164. if [ -e "$VESTA/data/queue/backup.pipe" ]; then
  165. check_q=$(grep " $user " $VESTA/data/queue/backup.pipe | grep $1)
  166. if [ ! -z "$check_q" ]; then
  167. echo "Error: $1 is already scheduled"
  168. log_event "$E_EXISTS" "$EVENT"
  169. exit $E_EXISTS
  170. fi
  171. fi
  172. }
  173. # Check if object is new
  174. is_object_new() {
  175. if [ $2 = 'USER' ]; then
  176. if [ -d "$USER_DATA" ]; then
  177. object="OK"
  178. fi
  179. else
  180. object=$(grep "$2='$3'" $USER_DATA/$1.conf)
  181. fi
  182. if [ ! -z "$object" ]; then
  183. echo "Error: $2 with value $3 exists"
  184. log_event "$E_EXISTS" "$EVENT"
  185. exit $E_EXISTS
  186. fi
  187. }
  188. # Check if object exists and can be used
  189. is_object_valid() {
  190. if [ $2 = 'USER' ]; then
  191. if [ -d "$VESTA/data/users/$user" ]; then
  192. sobject="OK"
  193. fi
  194. else
  195. if [ $2 = 'DBHOST' ]; then
  196. sobject=$(grep "HOST='$host'" $VESTA/conf/$type.conf)
  197. else
  198. sobject=$(grep "$2='$3'" $VESTA/data/users/$user/$1.conf)
  199. fi
  200. fi
  201. if [ -z "$sobject" ]; then
  202. echo "Error: $2 $3 doesn't exist"
  203. log_event "$E_NOTEXIST" "$EVENT"
  204. exit $E_NOTEXIST
  205. fi
  206. }
  207. # Check if object is supended
  208. is_object_suspended() {
  209. if [ $2 = 'USER' ]; then
  210. spnd=$(cat $USER_DATA/$1.conf|grep "SUSPENDED='yes'")
  211. else
  212. spnd=$(grep "$2='$3'" $USER_DATA/$1.conf|grep "SUSPENDED='yes'")
  213. fi
  214. if [ -z "$spnd" ]; then
  215. echo "Error: $(basename $1) $3 is not suspended"
  216. log_event "$E_SUSPENDED" "$EVENT"
  217. exit $E_SUSPENDED
  218. fi
  219. }
  220. # Check if object is unsupended
  221. is_object_unsuspended() {
  222. if [ $2 = 'USER' ]; then
  223. spnd=$(cat $USER_DATA/$1.conf|grep "SUSPENDED='yes'")
  224. else
  225. spnd=$(grep "$2='$3'" $USER_DATA/$1.conf|grep "SUSPENDED='yes'")
  226. fi
  227. if [ ! -z "$spnd" ]; then
  228. echo "Error: $(basename $1) $3 is already suspended"
  229. log_event "$E_UNSUSPENDED" "$EVENT"
  230. exit $E_UNSUSPENDED
  231. fi
  232. }
  233. # Check if object value is empty
  234. is_object_value_empty() {
  235. str=$(grep "$2='$3'" $USER_DATA/$1.conf)
  236. eval $str
  237. eval value=$4
  238. if [ ! -z "$value" ] && [ "$value" != 'no' ]; then
  239. echo "Error: ${4//$}=$value (not empty)"
  240. log_event "$E_EXISTS" "$EVENT"
  241. exit $E_EXISTS
  242. fi
  243. }
  244. # Check if object value is empty
  245. is_object_value_exist() {
  246. str=$(grep "$2='$3'" $USER_DATA/$1.conf)
  247. eval $str
  248. eval value=$4
  249. if [ -z "$value" ] || [ "$value" = 'no' ]; then
  250. echo "Error: ${4//$}=$value (doesn't exist)"
  251. log_event "$E_NOTEXIST" "$EVENT"
  252. exit $E_NOTEXIST
  253. fi
  254. }
  255. # Get object value
  256. get_object_value() {
  257. object=$(grep "$2='$3'" $USER_DATA/$1.conf)
  258. eval "$object"
  259. eval echo $4
  260. }
  261. # Update object value
  262. update_object_value() {
  263. row=$(grep -n "$2='$3'" $USER_DATA/$1.conf)
  264. lnr=$(echo $row | cut -f 1 -d ':')
  265. object=$(echo $row | sed "s/^$lnr://")
  266. eval "$object"
  267. eval old="$4"
  268. old=$(echo "$old" | sed -e 's/\\/\\\\/g' -e 's/&/\\&/g' -e 's/\//\\\//g')
  269. new=$(echo "$5" | sed -e 's/\\/\\\\/g' -e 's/&/\\&/g' -e 's/\//\\\//g')
  270. sed -i "$lnr s/${4//$/}='${old//\*/\\*}'/${4//$/}='${new//\*/\\*}'/g" \
  271. $USER_DATA/$1.conf
  272. }
  273. # Add object key
  274. add_object_key() {
  275. row=$(grep -n "$2='$3'" $USER_DATA/$1.conf)
  276. lnr=$(echo $row | cut -f 1 -d ':')
  277. object=$(echo $row | sed "s/^$lnr://")
  278. if [ -z "$(echo $object |grep $4=)" ]; then
  279. eval old="$4"
  280. sed -i "$lnr s/$5='/$4='' $5='/" $USER_DATA/$1.conf
  281. fi
  282. }
  283. # Search objects
  284. search_objects() {
  285. OLD_IFS="$IFS"
  286. IFS=$'\n'
  287. for line in $(grep $2=\'$3\' $USER_DATA/$1.conf); do
  288. eval $line
  289. eval echo \$$4
  290. done
  291. IFS="$OLD_IFS"
  292. }
  293. # Get user value
  294. get_user_value() {
  295. grep "^${1//$/}=" $USER_DATA/user.conf| cut -f 2 -d \'
  296. }
  297. # Update user value in user.conf
  298. update_user_value() {
  299. key="${2//$}"
  300. lnr=$(grep -n "^$key='" $VESTA/data/users/$1/user.conf |cut -f 1 -d ':')
  301. if [ ! -z "$lnr" ]; then
  302. sed -i "$lnr d" $VESTA/data/users/$1/user.conf
  303. sed -i "$lnr i\\$key='${3}'" $VESTA/data/users/$1/user.conf
  304. fi
  305. }
  306. # Increase user counter
  307. increase_user_value() {
  308. key="${2//$}"
  309. factor="${3-1}"
  310. conf="$VESTA/data/users/$1/user.conf"
  311. old=$(grep "$key=" $conf | cut -f 2 -d \')
  312. if [ -z "$old" ]; then
  313. old=0
  314. fi
  315. new=$((old + factor))
  316. sed -i "s/$key='$old'/$key='$new'/g" $conf
  317. }
  318. # Decrease user counter
  319. decrease_user_value() {
  320. key="${2//$}"
  321. factor="${3-1}"
  322. conf="$VESTA/data/users/$1/user.conf"
  323. old=$(grep "$key=" $conf | cut -f 2 -d \')
  324. if [ -z "$old" ]; then
  325. old=0
  326. fi
  327. if [ "$old" -le 1 ]; then
  328. new=0
  329. else
  330. new=$((old - factor))
  331. fi
  332. sed -i "s/$key='$old'/$key='$new'/g" $conf
  333. }
  334. # Json listing function
  335. json_list() {
  336. echo '{'
  337. fileds_count=$(echo $fields| wc -w )
  338. #for line in $(cat $conf); do
  339. while read line; do
  340. eval $line
  341. if [ -n "$data_output" ]; then
  342. echo -e ' },'
  343. fi
  344. i=1
  345. for field in $fields; do
  346. eval value=$field
  347. if [ $i -eq 1 ]; then
  348. (( ++i))
  349. echo -e "\t\"$value\": {"
  350. else
  351. if [ $i -lt $fileds_count ]; then
  352. (( ++i))
  353. echo -e "\t\t\"${field//$/}\": \"$value\","
  354. else
  355. echo -e "\t\t\"${field//$/}\": \"$value\""
  356. data_output=yes
  357. fi
  358. fi
  359. done
  360. done < $conf
  361. if [ "$data_output" = 'yes' ]; then
  362. echo -e ' }'
  363. fi
  364. echo -e '}'
  365. }
  366. # Shell listing function
  367. shell_list() {
  368. if [ -z "$nohead" ] ; then
  369. echo "${fields//$/}"
  370. for a in $fields; do
  371. echo -e "------ \c"
  372. done
  373. echo
  374. fi
  375. while read line ; do
  376. eval $line
  377. for field in $fields; do
  378. eval value=$field
  379. if [ -z "$value" ]; then
  380. value='NULL'
  381. fi
  382. echo -n "$value "
  383. done
  384. echo
  385. done < $conf
  386. }
  387. # Recalculate U_DISK value
  388. recalc_user_disk_usage() {
  389. u_usage=0
  390. if [ -f "$USER_DATA/web.conf" ]; then
  391. usage=0
  392. dusage=$(grep 'U_DISK=' $USER_DATA/web.conf |\
  393. awk -F "U_DISK='" '{print $2}' | cut -f 1 -d \')
  394. for disk_usage in $dusage; do
  395. usage=$((usage + disk_usage))
  396. done
  397. d=$(grep "U_DISK_WEB='" $USER_DATA/user.conf | cut -f 2 -d \')
  398. sed -i "s/U_DISK_WEB='$d'/U_DISK_WEB='$usage'/g" $USER_DATA/user.conf
  399. u_usage=$((u_usage + usage))
  400. fi
  401. if [ -f "$USER_DATA/mail.conf" ]; then
  402. usage=0
  403. dusage=$(grep 'U_DISK=' $USER_DATA/mail.conf |\
  404. awk -F "U_DISK='" '{print $2}' | cut -f 1 -d \')
  405. for disk_usage in $dusage; do
  406. usage=$((usage + disk_usage))
  407. done
  408. d=$(grep "U_DISK_MAIL='" $USER_DATA/user.conf | cut -f 2 -d \')
  409. sed -i "s/U_DISK_MAIL='$d'/U_DISK_MAIL='$usage'/g" $USER_DATA/user.conf
  410. u_usage=$((u_usage + usage))
  411. fi
  412. if [ -f "$USER_DATA/db.conf" ]; then
  413. usage=0
  414. dusage=$(grep 'U_DISK=' $USER_DATA/db.conf |\
  415. awk -F "U_DISK='" '{print $2}' | cut -f 1 -d \')
  416. for disk_usage in $dusage; do
  417. usage=$((usage + disk_usage))
  418. done
  419. d=$(grep "U_DISK_DB='" $USER_DATA/user.conf | cut -f 2 -d \')
  420. sed -i "s/U_DISK_DB='$d'/U_DISK_DB='$usage'/g" $USER_DATA/user.conf
  421. u_usage=$((u_usage + usage))
  422. fi
  423. usage=$(grep 'U_DIR_DISK=' $USER_DATA/user.conf | cut -f 2 -d "'")
  424. u_usage=$((u_usage + usage))
  425. old=$(grep "U_DISK='" $USER_DATA/user.conf | cut -f 2 -d \')
  426. sed -i "s/U_DISK='$old'/U_DISK='$u_usage'/g" $USER_DATA/user.conf
  427. }
  428. # Recalculate U_BANDWIDTH value
  429. recalc_user_bandwidth_usage() {
  430. usage=0
  431. bandwidth_usage=$(grep 'U_BANDWIDTH=' $USER_DATA/web.conf |\
  432. awk -F "U_BANDWIDTH='" '{print $2}'|cut -f 1 -d \')
  433. for bandwidth in $bandwidth_usage; do
  434. usage=$((usage + bandwidth))
  435. done
  436. old=$(grep "U_BANDWIDTH='" $USER_DATA/user.conf | cut -f 2 -d \')
  437. sed -i "s/U_BANDWIDTH='$old'/U_BANDWIDTH='$usage'/g" $USER_DATA/user.conf
  438. }
  439. # Get next cron job id
  440. get_next_cronjob() {
  441. if [ -z "$job" ]; then
  442. curr_str=$(grep "JOB=" $USER_DATA/cron.conf|cut -f 2 -d \'|\
  443. sort -n|tail -n1)
  444. job="$((curr_str +1))"
  445. fi
  446. }
  447. # Sort cron jobs by id
  448. sort_cron_jobs() {
  449. cat $USER_DATA/cron.conf |sort -n -k 2 -t \' > $USER_DATA/cron.tmp
  450. mv -f $USER_DATA/cron.tmp $USER_DATA/cron.conf
  451. }
  452. # Sync cronjobs with system cron
  453. sync_cron_jobs() {
  454. source $USER_DATA/user.conf
  455. if [ -e "/var/spool/cron/crontabs" ]; then
  456. sys_cron="/var/spool/cron/crontabs/$user"
  457. else
  458. sys_cron="/var/spool/cron/$user"
  459. fi
  460. rm -f $sys_cron
  461. if [ "$CRON_REPORTS" = 'yes' ]; then
  462. echo "MAILTO=$CONTACT" > $sys_cron
  463. fi
  464. while read line; do
  465. eval $line
  466. if [ "$SUSPENDED" = 'no' ]; then
  467. echo "$MIN $HOUR $DAY $MONTH $WDAY $CMD" |\
  468. sed -e "s/%quote%/'/g" -e "s/%dots%/:/g" \
  469. >> $sys_cron
  470. fi
  471. done < $USER_DATA/cron.conf
  472. # Set proper permissions
  473. chown $user:$user $sys_cron
  474. chmod 600 $sys_cron
  475. }
  476. ### Format Validators ###
  477. # Shell
  478. validate_format_shell() {
  479. if [ -z "$(grep -w $1 /etc/shells)" ]; then
  480. echo "Error: shell $1 is not valid"
  481. log_event "$E_INVALID" "$EVENT"
  482. exit $E_INVALID
  483. fi
  484. }
  485. # Password
  486. validate_format_password() {
  487. if [ "${#1}" -lt '6' ]; then
  488. echo "Error: password is too short"
  489. log_event "$E_INVALID" "$EVENT"
  490. exit $E_INVALID
  491. fi
  492. }
  493. # Integer
  494. validate_format_int() {
  495. if ! [[ "$1" =~ ^[0-9]+$ ]] ; then
  496. echo "Error: $2 $1 is not valid"
  497. log_event "$E_INVALID" "$EVENT"
  498. exit $E_INVALID
  499. fi
  500. }
  501. # Boolean
  502. validate_format_boolean() {
  503. if [ "$1" != 'yes' ] && [ "$1" != 'no' ]; then
  504. echo "Error: $2 $1 is not valid"
  505. log_event "$E_INVALID" "$EVENT"
  506. exit $E_INVALID
  507. fi
  508. }
  509. # Network interface
  510. validate_format_interface() {
  511. netdevices=$(cat /proc/net/dev | grep : | cut -f 1 -d : | tr -d ' ')
  512. if [ -z $(echo "$netdevices"| grep -x $1) ]; then
  513. echo "Error: intreface $1 is not valid"
  514. log_event "$E_INVALID" "$EVENT"
  515. exit $E_INVALID
  516. fi
  517. }
  518. # IP address
  519. validate_format_ip() {
  520. valid_octets=0
  521. for octet in ${1//./ }; do
  522. if [[ $octet =~ ^[0-9]{1,3}$ ]] && [[ $octet -le 255 ]]; then
  523. ((++valid_octets))
  524. fi
  525. done
  526. if [ "$valid_octets" -lt 4 ]; then
  527. echo "Error: ip $1 is not valid"
  528. log_event "$E_INVALID" "$EVENT"
  529. exit $E_INVALID
  530. fi
  531. }
  532. # IP address status
  533. validate_format_ip_status() {
  534. if [ -z "$(echo shared,dedicated | grep -w $1 )" ]; then
  535. echo "Error: ip_status $1 is not valid"
  536. log_event "$E_INVALID" "$EVENT"
  537. exit $E_INVALID
  538. fi
  539. }
  540. # Email address
  541. validate_format_email() {
  542. local_part=$(echo $1 | cut -s -f1 -d\@)
  543. remote_host=$(echo $1 | cut -s -f2 -d\@)
  544. mx_failed=1
  545. if [ ! -z "$remote_host" ] && [ ! -z "$local_part" ]; then
  546. /usr/bin/host -t mx "$remote_host" &> /dev/null
  547. mx_failed="$?"
  548. fi
  549. if [ "$mx_failed" -eq 1 ]; then
  550. echo "Error: email $1 is not valid"
  551. log_event "$E_INVALID" "$EVENT"
  552. exit $E_INVALID
  553. fi
  554. }
  555. # Name
  556. validate_format_name() {
  557. if ! [[ "$1" =~ ^[[:alnum:]][-|\.|_[:alnum:]]{0,28}[[:alnum:]]$ ]]; then
  558. echo "Error: $2 $1 is not valid"
  559. log_event "$E_INVALID" "$EVENT"
  560. exit $E_INVALID
  561. fi
  562. }
  563. # Name with space
  564. validate_format_name_s() {
  565. if ! [[ "$1" =~ ^[[:alnum:]][-|\ |\.|_[:alnum:]]{0,28}[[:alnum:]]$ ]]; then
  566. echo "Error: $2 $1 is not valid"
  567. log_event "$E_INVALID" "$EVENT"
  568. exit $E_INVALID
  569. fi
  570. }
  571. # Username
  572. validate_format_username() {
  573. if [ "${#1}" -eq 1 ]; then
  574. if ! [[ "$1" =~ [a-z] ]]; then
  575. echo "Error: $2 $1 is not valid"
  576. exit 1
  577. fi
  578. else
  579. if ! [[ "$1" =~ ^[a-zA-Z0-9][-|\.|_|a-zA-Z0-9]{0,28}[a-zA-Z0-9]$ ]]
  580. then
  581. echo "Error: $2 $1 is not valid"
  582. exit 1
  583. fi
  584. fi
  585. }
  586. # Domain
  587. validate_format_domain() {
  588. exclude="[!|@|#|$|^|&|*|(|)|+|=|{|}|:|,|<|>|?|_|/|\|\"|'|;|%|\`| ]"
  589. if [[ "$1" =~ $exclude ]] || [[ "$1" =~ "^[0-9]+$" ]]; then
  590. echo "Error: $2 $1 is not valid"
  591. log_event "$E_INVALID" "$EVENT"
  592. exit $E_INVALID
  593. fi
  594. }
  595. # Domain alias
  596. validate_format_domain_alias() {
  597. exclude="[!|@|#|$|^|&|(|)|+|=|{|}|:|,|<|>|?|_|/|\|\"|'|;|%|\`| ]"
  598. if [[ "$1" =~ $exclude ]] || [[ "$1" =~ "^[0-9]+$" ]]; then
  599. echo "Error: domain alias $1 is not valid"
  600. log_event "$E_INVALID" "$EVENT"
  601. exit $E_INVALID
  602. fi
  603. }
  604. # Database
  605. validate_format_database() {
  606. exclude="[!|@|#|$|^|&|*|(|)|+|=|{|}|:|,|<|>|?|/|\|\"|'|;|%|\`| ]"
  607. if [[ "$1" =~ $exclude ]] || [ 65 -le ${#1} ]; then
  608. echo "Error: $2 $1 is not valid"
  609. log_event "$E_INVALID" "$EVENT"
  610. exit $E_INVALID
  611. fi
  612. }
  613. # Database user
  614. validate_format_dbuser() {
  615. exclude="[!|@|#|$|^|&|*|(|)|+|=|{|}|:|,|<|>|?|/|\|\"|'|;|%|\`| ]"
  616. if [[ "$1" =~ $exclude ]] || [ 17 -le ${#1} ]; then
  617. echo "Error: $2 $1 is not valid"
  618. log_event "$E_INVALID" "$EVENT"
  619. exit $E_INVALID
  620. fi
  621. }
  622. # DNS type
  623. validate_format_dns_type() {
  624. known_dnstype='A,AAAA,NS,CNAME,MX,TXT,SRV,DNSKEY,KEY,IPSECKEY,PTR,SPF'
  625. if [ -z "$(echo $known_dnstype | grep -w $1)" ]; then
  626. echo "Error: dnstype $1 is not valid"
  627. log_event "$E_INVALID" "$EVENT"
  628. exit $E_INVALID
  629. fi
  630. }
  631. # DKIM key size
  632. validate_format_key_size() {
  633. known_size='128,256,512,768,1024,2048'
  634. if [ -z "$(echo $known_size | grep -w $1)" ]; then
  635. echo "Error: key_size $1 is not valid"
  636. log_event "$E_INVALID" "$EVENT"
  637. exit $E_INVALID
  638. fi
  639. }
  640. # Minute / Hour / Day / Month / Day of Week
  641. validate_format_mhdmw() {
  642. limit=60
  643. check_format=''
  644. if [ "$2" = 'day' ]; then
  645. limit=31
  646. fi
  647. if [ "$2" = 'month' ]; then
  648. limit=12
  649. fi
  650. if [ "$2" = 'wday' ]; then
  651. limit=7
  652. fi
  653. if [ "$1" = '*' ]; then
  654. check_format='ok'
  655. fi
  656. if [[ "$1" =~ ^[\*]+[/]+[0-9] ]]; then
  657. if [ "$(echo $1 |cut -f 2 -d /)" -lt $limit ]; then
  658. check_format='ok'
  659. fi
  660. fi
  661. if [[ "$1" =~ ^[0-9][-|,|0-9]{0,28}[0-9]$ ]]; then
  662. check_format='ok'
  663. crn_values=${1//,/ }
  664. crn_values=${crn_values//-/ }
  665. for crn_vl in $crn_values; do
  666. if [ "$crn_vl" -gt $limit ]; then
  667. check_format='invalid'
  668. fi
  669. done
  670. fi
  671. if [[ "$1" =~ ^[0-9]+$ ]] && [ "$1" -lt $limit ]; then
  672. check_format='ok'
  673. fi
  674. if [ "$check_format" != 'ok' ]; then
  675. echo "Error: $2 $1 is not valid"
  676. log_event "$E_INVALID" "$EVENT"
  677. exit $E_INVALID
  678. fi
  679. }
  680. # proxy extention or DNS record
  681. validate_format_common() {
  682. exclude="[!|#|$|^|&|(|)|+|=|{|}|:|<|>|?|/|\|\"|'|;|%|\`| ]"
  683. if [[ "$1" =~ $exclude ]]; then
  684. echo "Error: $2 $1 is not valid"
  685. log_event "$E_INVALID" "$EVENT"
  686. exit $E_INVALID
  687. fi
  688. if [ 400 -le ${#1} ]; then
  689. echo "Error: $2 $1 is too long"
  690. log_event "$E_INVALID" "$EVENT"
  691. exit $E_INVALID
  692. fi
  693. }
  694. # DNS record value
  695. validate_format_dvalue() {
  696. record_types="$(echo A,AAAA,NS,CNAME | grep -w "$rtype")"
  697. if [[ "$1" =~ [\ ] ]] && [ ! -z "$record_types" ]; then
  698. echo "Error: dvalue $1 is not valid"
  699. log_event "$E_INVALID" "$EVENT"
  700. exit $E_INVALID
  701. fi
  702. if [ "$rtype" = 'A' ]; then
  703. validate_format_ip "$1"
  704. fi
  705. if [ "$rtype" = 'NS' ]; then
  706. validate_format_domain "$1" 'ns_record'
  707. fi
  708. if [ "$rtype" = 'MX' ]; then
  709. validate_format_domain "$1" 'mx_record'
  710. validate_format_int "$priority" 'priority_record'
  711. fi
  712. }
  713. # Date
  714. validate_format_date() {
  715. if ! [[ "$1" =~ ^[0-9][0-9][0-9][0-9]-[0-9][0-9]-[0-9][0-9]$ ]]; then
  716. echo "Error: date $1 is not valid"
  717. log_event "$E_INVALID" "$EVENT"
  718. exit $E_INVALID
  719. fi
  720. }
  721. # Autoreply
  722. validate_format_autoreply() {
  723. exclude="[$|\`]"
  724. if [[ "$1" =~ $exclude ]] || [ 10240 -le ${#1} ]; then
  725. echo "Error: autoreply is not valid"
  726. log_event "$E_INVALID" "$EVENT"
  727. exit $E_INVALID
  728. fi
  729. }
  730. # Format validation controller
  731. validate_format(){
  732. for arg_name in $*; do
  733. eval arg=\$$arg_name
  734. if [ -z "$arg" ]; then
  735. echo "Error: argument $arg_name is not valid (empty)"
  736. log_event "$E_INVALID" "$EVENT"
  737. exit $E_INVALID
  738. fi
  739. case $arg_name in
  740. account) validate_format_username "$arg" "$arg_name" ;;
  741. antispam) validate_format_boolean "$arg" 'antispam' ;;
  742. antivirus) validate_format_boolean "$arg" 'antivirus' ;;
  743. autoreply) validate_format_autoreply "$arg" ;;
  744. backup) validate_format_domain "$arg" 'backup' ;;
  745. charset) validate_format_name "$arg" "$arg_name" ;;
  746. charsets) validate_format_common "$arg" 'charsets' ;;
  747. database) validate_format_database "$arg" 'database';;
  748. day) validate_format_mhdmw "$arg" $arg_name ;;
  749. dbpass) validate_format_password "$arg" ;;
  750. dbuser) validate_format_dbuser "$arg" 'db_user';;
  751. dkim) validate_format_boolean "$arg" 'dkim' ;;
  752. dkim_size) validate_format_key_size "$arg" ;;
  753. domain) validate_format_domain "$arg" 'domain';;
  754. dom_alias) validate_format_domain_alias "$arg" 'alias';;
  755. dvalue) validate_format_dvalue "$arg";;
  756. email) validate_format_email "$arg" ;;
  757. exp) validate_format_date "$arg" ;;
  758. extentions) validate_format_common "$arg" 'extentions' ;;
  759. fname) validate_format_name_s "$arg" "$arg_name" ;;
  760. forward) validate_format_email "$arg" ;;
  761. ftp_password) validate_format_password "$arg" ;;
  762. ftp_user) validate_format_username "$arg" "$arg_name" ;;
  763. host) validate_format_domain "$arg" "$arg_name" 'host';;
  764. hour) validate_format_mhdmw "$arg" $arg_name ;;
  765. id) validate_format_int "$arg" 'id' ;;
  766. interface) validate_format_interface "$arg" ;;
  767. ip) validate_format_ip "$arg" ;;
  768. ip_name) validate_format_domain "$arg" 'domain';;
  769. ip_status) validate_format_ip_status "$arg" ;;
  770. job) validate_format_int "$arg" 'job' ;;
  771. key) validate_format_username "$arg" "$arg_name" ;;
  772. lname) validate_format_name_s "$arg" "$arg_name" ;;
  773. malias) validate_format_username "$arg" "$arg_name" ;;
  774. mask) validate_format_ip "$arg" ;;
  775. max_db) validate_format_int "$arg" 'max db';;
  776. min) validate_format_mhdmw "$arg" $arg_name ;;
  777. month) validate_format_mhdmw "$arg" $arg_name ;;
  778. nat_ip) validate_format_ip "$arg" ;;
  779. newid) validate_format_int "$arg" 'id' ;;
  780. ns1) validate_format_domain "$arg" 'name_server';;
  781. ns2) validate_format_domain "$arg" 'name_server';;
  782. ns3) validate_format_domain "$arg" 'name_server';;
  783. ns4) validate_format_domain "$arg" 'name_server';;
  784. package) validate_format_name "$arg" "$arg_name" ;;
  785. password) validate_format_password "$arg" ;;
  786. port) validate_format_int "$arg" 'port' ;;
  787. quota) validate_format_int "$arg" 'quota' ;;
  788. restart) validate_format_boolean "$arg" 'restart' ;;
  789. record) validate_format_common "$arg" 'record';;
  790. rtype) validate_format_dns_type "$arg" ;;
  791. shell) validate_format_shell "$arg" ;;
  792. soa) validate_format_domain "$arg" 'soa_record';;
  793. stats_pass) validate_format_password "$arg" ;;
  794. stats_user) validate_format_username "$arg" "$arg_name" ;;
  795. template) validate_format_name "$arg" "$arg_name" ;;
  796. ttl) validate_format_int "$arg" 'ttl';;
  797. user) validate_format_username "$arg" "$arg_name" ;;
  798. wday) validate_format_mhdmw "$arg" $arg_name ;;
  799. esac
  800. done
  801. }