index.php 31 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726
  1. <?php
  2. error_reporting(NULL);
  3. ob_start();
  4. unset($_SESSION['error_msg']);
  5. $TAB = 'WEB';
  6. // Main include
  7. include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
  8. // Check domain argument
  9. if (empty($_GET['domain'])) {
  10. header("Location: /list/web/");
  11. exit;
  12. }
  13. // Edit as someone else?
  14. if (($_SESSION['user'] == 'admin') && (!empty($_GET['user']))) {
  15. $user=escapeshellarg($_GET['user']);
  16. }
  17. // List domain
  18. $v_domain = escapeshellarg($_GET['domain']);
  19. exec (VESTA_CMD."v-list-web-domain ".$user." ".$v_domain." json", $output, $return_var);
  20. $data = json_decode(implode('', $output), true);
  21. unset($output);
  22. // Parse domain
  23. $v_username = $user;
  24. $v_domain = $_GET['domain'];
  25. $v_ip = $data[$v_domain]['IP'];
  26. $v_template = $data[$v_domain]['TPL'];
  27. $v_aliases = str_replace(',', "\n", $data[$v_domain]['ALIAS']);
  28. $valiases = explode(",", $data[$v_domain]['ALIAS']);
  29. $v_tpl = $data[$v_domain]['IP'];
  30. $v_cgi = $data[$v_domain]['CGI'];
  31. $v_elog = $data[$v_domain]['ELOG'];
  32. $v_ssl = $data[$v_domain]['SSL'];
  33. $v_letsencrypt = $data[$v_domain]['LETSENCRYPT'];
  34. if ( $v_ssl == 'yes' && ($v_letsencrypt == 'no' || empty($v_letsencrypt))) {
  35. exec (VESTA_CMD."v-list-web-domain-ssl ".$user." '".$v_domain."' json", $output, $return_var);
  36. $ssl_str = json_decode(implode('', $output), true);
  37. unset($output);
  38. $v_ssl_crt = $ssl_str[$v_domain]['CRT'];
  39. $v_ssl_key = $ssl_str[$v_domain]['KEY'];
  40. $v_ssl_ca = $ssl_str[$v_domain]['CA'];
  41. }
  42. $v_ssl_home = $data[$v_domain]['SSL_HOME'];
  43. $v_backend_template = $data[$v_domain]['BACKEND'];
  44. $v_proxy = $data[$v_domain]['PROXY'];
  45. $v_proxy_template = $data[$v_domain]['PROXY'];
  46. $v_proxy_ext = str_replace(',', ', ', $data[$v_domain]['PROXY_EXT']);
  47. $v_stats = $data[$v_domain]['STATS'];
  48. $v_stats_user = $data[$v_domain]['STATS_USER'];
  49. if (!empty($v_stats_user)) $v_stats_password = "";
  50. $v_ftp_user = $data[$v_domain]['FTP_USER'];
  51. $v_ftp_path = $data[$v_domain]['FTP_PATH'];
  52. if (!empty($v_ftp_user)) $v_ftp_password = "";
  53. $v_ftp_user_prepath = $data[$v_domain]['DOCUMENT_ROOT'];
  54. $v_ftp_user_prepath = str_replace('/public_html', '', $v_ftp_user_prepath, $occurance = 1);
  55. $v_ftp_email = $panel[$user]['CONTACT'];
  56. $v_suspended = $data[$v_domain]['SUSPENDED'];
  57. if ( $v_suspended == 'yes' ) {
  58. $v_status = 'suspended';
  59. } else {
  60. $v_status = 'active';
  61. }
  62. $v_time = $data[$v_domain]['TIME'];
  63. $v_date = $data[$v_domain]['DATE'];
  64. // List ip addresses
  65. exec (VESTA_CMD."v-list-user-ips ".$user." json", $output, $return_var);
  66. $ips = json_decode(implode('', $output), true);
  67. unset($output);
  68. // List web templates
  69. exec (VESTA_CMD."v-list-web-templates json", $output, $return_var);
  70. $templates = json_decode(implode('', $output), true);
  71. unset($output);
  72. // List backend templates
  73. if (!empty($_SESSION['WEB_BACKEND'])) {
  74. exec (VESTA_CMD."v-list-web-templates-backend json", $output, $return_var);
  75. $backend_templates = json_decode(implode('', $output), true);
  76. unset($output);
  77. }
  78. // List proxy templates
  79. if (!empty($_SESSION['PROXY_SYSTEM'])) {
  80. exec (VESTA_CMD."v-list-web-templates-proxy json", $output, $return_var);
  81. $proxy_templates = json_decode(implode('', $output), true);
  82. unset($output);
  83. }
  84. // List web stat engines
  85. exec (VESTA_CMD."v-list-web-stats json", $output, $return_var);
  86. $stats = json_decode(implode('', $output), true);
  87. unset($output);
  88. // Check POST request
  89. if (!empty($_POST['save'])) {
  90. $v_domain = escapeshellarg($_POST['v_domain']);
  91. // Check token
  92. if ((!isset($_POST['token'])) || ($_SESSION['token'] != $_POST['token'])) {
  93. header('location: /login/');
  94. exit();
  95. }
  96. // Change web domain IP
  97. if (($v_ip != $_POST['v_ip']) && (empty($_SESSION['error_msg']))) {
  98. $v_ip = escapeshellarg($_POST['v_ip']);
  99. exec (VESTA_CMD."v-change-web-domain-ip ".$v_username." ".$v_domain." ".$v_ip." 'no'", $output, $return_var);
  100. check_return_code($return_var,$output);
  101. $restart_web = 'yes';
  102. $restart_proxy = 'yes';
  103. unset($output);
  104. }
  105. // Chane dns domain IP
  106. if (($v_ip != $_POST['v_ip']) && (empty($_SESSION['error_msg']))) {
  107. exec (VESTA_CMD."v-list-dns-domain ".$v_username." ".$v_domain." json", $output, $return_var);
  108. unset($output);
  109. if ($return_var == 0 ) {
  110. exec (VESTA_CMD."v-change-dns-domain-ip ".$v_username." ".$v_domain." ".$v_ip." 'no'", $output, $return_var);
  111. check_return_code($return_var,$output);
  112. unset($output);
  113. $restart_dns = 'yes';
  114. }
  115. }
  116. // Change dns ip for each alias
  117. if (($v_ip != $_POST['v_ip']) && (empty($_SESSION['error_msg']))) {
  118. foreach($valiases as $v_alias ){
  119. exec (VESTA_CMD."v-list-dns-domain ".$v_username." '".$v_alias."' json", $output, $return_var);
  120. unset($output);
  121. if ($return_var == 0 ) {
  122. exec (VESTA_CMD."v-change-dns-domain-ip ".$v_username." '".$v_alias."' ".$v_ip, $output, $return_var);
  123. check_return_code($return_var,$output);
  124. unset($output);
  125. $restart_dns = 'yes';
  126. }
  127. }
  128. }
  129. // Change template (admin only)
  130. if (($v_template != $_POST['v_template']) && ( $_SESSION['user'] == 'admin') && (empty($_SESSION['error_msg']))) {
  131. $v_template = escapeshellarg($_POST['v_template']);
  132. exec (VESTA_CMD."v-change-web-domain-tpl ".$v_username." ".$v_domain." ".$v_template." 'no'", $output, $return_var);
  133. check_return_code($return_var,$output);
  134. unset($output);
  135. $restart_web = 'yes';
  136. }
  137. // Change aliases
  138. if (empty($_SESSION['error_msg'])) {
  139. $waliases = preg_replace("/\n/", " ", $_POST['v_aliases']);
  140. $waliases = preg_replace("/,/", " ", $waliases);
  141. $waliases = preg_replace('/\s+/', ' ',$waliases);
  142. $waliases = trim($waliases);
  143. $aliases = explode(" ", $waliases);
  144. $v_aliases = str_replace(' ', "\n", $waliases);
  145. $result = array_diff($valiases, $aliases);
  146. foreach ($result as $alias) {
  147. if ((empty($_SESSION['error_msg'])) && (!empty($alias))) {
  148. $restart_web = 'yes';
  149. $restart_proxy = 'yes';
  150. $v_template = escapeshellarg($_POST['v_template']);
  151. exec (VESTA_CMD."v-delete-web-domain-alias ".$v_username." ".$v_domain." '".$alias."' 'no'", $output, $return_var);
  152. check_return_code($return_var,$output);
  153. unset($output);
  154. if (empty($_SESSION['error_msg'])) {
  155. exec (VESTA_CMD."v-list-dns-domain ".$v_username." ".$v_domain, $output, $return_var);
  156. unset($output);
  157. if ($return_var == 0) {
  158. exec (VESTA_CMD."v-delete-dns-on-web-alias ".$v_username." ".$v_domain." '".$alias."' 'no'", $output, $return_var);
  159. check_return_code($return_var,$output);
  160. unset($output);
  161. $restart_dns = 'yes';
  162. }
  163. }
  164. }
  165. }
  166. $result = array_diff($aliases, $valiases);
  167. foreach ($result as $alias) {
  168. if ((empty($_SESSION['error_msg'])) && (!empty($alias))) {
  169. $restart_web = 'yes';
  170. $restart_proxy = 'yes';
  171. $v_template = escapeshellarg($_POST['v_template']);
  172. exec (VESTA_CMD."v-add-web-domain-alias ".$v_username." ".$v_domain." ".escapeshellarg($alias)." 'no'", $output, $return_var);
  173. check_return_code($return_var,$output);
  174. unset($output);
  175. if (empty($_SESSION['error_msg'])) {
  176. exec (VESTA_CMD."v-list-dns-domain ".$v_username." ".$v_domain, $output, $return_var);
  177. unset($output);
  178. if ($return_var == 0) {
  179. exec (VESTA_CMD."v-add-dns-on-web-alias ".$v_username." ".escapeshellarg($alias)." ".$v_ip." no", $output, $return_var);
  180. check_return_code($return_var,$output);
  181. unset($output);
  182. $restart_dns = 'yes';
  183. }
  184. }
  185. }
  186. }
  187. }
  188. // Change backend template
  189. if ((!empty($_SESSION['WEB_BACKEND'])) && ( $v_backend_template != $_POST['v_backend_template']) && ( $_SESSION['user'] == 'admin') && (empty($_SESSION['error_msg']))) {
  190. $v_backend_template = $_POST['v_backend_template'];
  191. exec (VESTA_CMD."v-change-web-domain-backend-tpl ".$v_username." ".$v_domain." ".escapeshellarg($v_backend_template), $output, $return_var);
  192. check_return_code($return_var,$output);
  193. unset($output);
  194. }
  195. // Delete proxy support
  196. if ((!empty($_SESSION['PROXY_SYSTEM'])) && (!empty($v_proxy)) && (empty($_POST['v_proxy'])) && (empty($_SESSION['error_msg']))) {
  197. exec (VESTA_CMD."v-delete-web-domain-proxy ".$v_username." ".$v_domain." 'no'", $output, $return_var);
  198. check_return_code($return_var,$output);
  199. unset($output);
  200. unset($v_proxy);
  201. $restart_proxy = 'yes';
  202. }
  203. // Change proxy template / Update extension list
  204. if ((!empty($_SESSION['PROXY_SYSTEM'])) && (!empty($v_proxy)) && (!empty($_POST['v_proxy'])) && (empty($_SESSION['error_msg']))) {
  205. $ext = preg_replace("/\n/", " ", $_POST['v_proxy_ext']);
  206. $ext = preg_replace("/,/", " ", $ext);
  207. $ext = preg_replace('/\s+/', ' ',$ext);
  208. $ext = trim($ext);
  209. $ext = str_replace(' ', ", ", $ext);
  210. if (( $v_proxy_template != $_POST['v_proxy_template']) || ($v_proxy_ext != $ext)) {
  211. $ext = str_replace(', ', ",", $ext);
  212. if (!empty($_POST['v_proxy_template'])) $v_proxy_template = $_POST['v_proxy_template'];
  213. exec (VESTA_CMD."v-change-web-domain-proxy-tpl ".$v_username." ".$v_domain." ".escapeshellarg($v_proxy_template)." ".escapeshellarg($ext)." 'no'", $output, $return_var);
  214. check_return_code($return_var,$output);
  215. $v_proxy_ext = str_replace(',', ', ', $ext);
  216. unset($output);
  217. $restart_proxy = 'yes';
  218. }
  219. }
  220. // Add proxy support
  221. if ((!empty($_SESSION['PROXY_SYSTEM'])) && (empty($v_proxy)) && (!empty($_POST['v_proxy'])) && (empty($_SESSION['error_msg']))) {
  222. $v_proxy_template = $_POST['v_proxy_template'];
  223. if (!empty($_POST['v_proxy_ext'])) {
  224. $ext = preg_replace("/\n/", " ", $_POST['v_proxy_ext']);
  225. $ext = preg_replace("/,/", " ", $ext);
  226. $ext = preg_replace('/\s+/', ' ',$ext);
  227. $ext = trim($ext);
  228. $ext = str_replace(' ', ",", $ext);
  229. $v_proxy_ext = str_replace(',', ', ', $ext);
  230. }
  231. exec (VESTA_CMD."v-add-web-domain-proxy ".$v_username." ".$v_domain." ".escapeshellarg($v_proxy_template)." ".escapeshellarg($ext)." 'no'", $output, $return_var);
  232. check_return_code($return_var,$output);
  233. unset($output);
  234. $restart_proxy = 'yes';
  235. }
  236. // Disable Lets Encrypt support
  237. if (( $v_letsencrypt == 'yes' ) && (empty($_POST['v_letsencrypt'])) && (!empty($_POST['v_letsencrypt'])) && (empty($_SESSION['error_msg']))) {
  238. exec (VESTA_CMD."v-add-letsencrypt-domain ".$user." ".$v_domain." '' 'no'", $output, $return_var);
  239. check_return_code($return_var,$output);
  240. unset($output);
  241. $v_letsencrypt = 'no';
  242. $restart_web = 'yes';
  243. $restart_proxy = 'yes';
  244. }
  245. else {
  246. // Delete SSL certificate
  247. if (( $v_ssl == 'yes' ) && (empty($_POST['v_ssl'])) && (empty($_SESSION['error_msg']))) {
  248. exec (VESTA_CMD."v-list-web-domain ".$user." ".$v_domain." json", $output, $return_var);
  249. $data = json_decode(implode('', $output), true);
  250. exec (VESTA_CMD."v-add-letsencrypt-domain ".$user." ".$v_domain." '".$data['ALIAS']."' 'no'", $output, $return_var);
  251. check_return_code($return_var,$output);
  252. unset($output);
  253. $v_ssl = 'no';
  254. $restart_web = 'yes';
  255. $restart_proxy = 'yes';
  256. }
  257. }
  258. if (( $v_letsencrypt == 'no' || empty( $v_letsencrypt)) && (!empty($_POST['v_letsencrypt'])) && empty($_SESSION['error_msg'])) {
  259. exec (VESTA_CMD."v-list-web-domain ".$user." ".$v_domain." json", $output, $return_var);
  260. $data = json_decode(implode('', $output), true);
  261. exec (VESTA_CMD."v-add-letsencrypt-domain ".$user." ".$v_domain." '' 'no'", $output, $return_var);
  262. check_return_code($return_var,$output);
  263. unset($output);
  264. $v_letsencrypt = 'yes';
  265. $restart_web = 'yes';
  266. $restart_proxy = 'yes';
  267. }
  268. else{
  269. // Change SSL certificate
  270. if (($v_ssl == 'yes') && (!empty($_POST['v_ssl'])) && (empty($_SESSION['error_msg']))) {
  271. if (( $v_ssl_crt != str_replace("\r\n", "\n", $_POST['v_ssl_crt'])) || ( $v_ssl_key != str_replace("\r\n", "\n", $_POST['v_ssl_key'])) || ( $v_ssl_ca != str_replace("\r\n", "\n", $_POST['v_ssl_ca']))) {
  272. exec ('mktemp -d', $mktemp_output, $return_var);
  273. $tmpdir = $mktemp_output[0];
  274. // Certificate
  275. if (!empty($_POST['v_ssl_crt'])) {
  276. $fp = fopen($tmpdir."/".$_POST['v_domain'].".crt", 'w');
  277. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_crt']));
  278. fwrite($fp, "\n");
  279. fclose($fp);
  280. }
  281. // Key
  282. if (!empty($_POST['v_ssl_key'])) {
  283. $fp = fopen($tmpdir."/".$_POST['v_domain'].".key", 'w');
  284. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_key']));
  285. fwrite($fp, "\n");
  286. fclose($fp);
  287. }
  288. // CA
  289. if (!empty($_POST['v_ssl_ca'])) {
  290. $fp = fopen($tmpdir."/".$_POST['v_domain'].".ca", 'w');
  291. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_ca']));
  292. fwrite($fp, "\n");
  293. fclose($fp);
  294. }
  295. exec (VESTA_CMD."v-change-web-domain-sslcert ".$user." ".$v_domain." ".$tmpdir." 'no'", $output, $return_var);
  296. check_return_code($return_var,$output);
  297. unset($output);
  298. $restart_web = 'yes';
  299. $restart_proxy = 'yes';
  300. $v_ssl_crt = $_POST['v_ssl_crt'];
  301. $v_ssl_key = $_POST['v_ssl_key'];
  302. $v_ssl_ca = $_POST['v_ssl_ca'];
  303. // Cleanup certificate tempfiles
  304. if (!empty($_POST['v_ssl_crt'])) {
  305. unlink($tmpdir."/".$_POST['v_domain'].".crt");
  306. }
  307. if (!empty($_POST['v_ssl_key'])) {
  308. unlink($tmpdir."/".$_POST['v_domain'].".key");
  309. }
  310. if (!empty($_POST['v_ssl_ca'])) {
  311. unlink($tmpdir."/".$_POST['v_domain'].".ca");
  312. }
  313. rmdir($tmpdir);
  314. }
  315. }
  316. // Add SSL certificate
  317. if (( $v_ssl == 'no') && (!empty($_POST['v_ssl'])) && (empty($_SESSION['error_msg']))) {
  318. if ((!empty($_POST['v_ssl'])) && (empty($_POST['v_ssl_crt']))) $errors[] = 'ssl certificate';
  319. if ((!empty($_POST['v_ssl'])) && (empty($_POST['v_ssl_key']))) $errors[] = 'ssl key';
  320. if ((!empty($_POST['v_ssl'])) && (empty($_POST['v_ssl_home']))) $errors[] = 'ssl home';
  321. $v_ssl_home = escapeshellarg($_POST['v_ssl_home']);
  322. if (!empty($errors[0])) {
  323. foreach ($errors as $i => $error) {
  324. if ( $i == 0 ) {
  325. $error_msg = $error;
  326. } else {
  327. $error_msg = $error_msg.", ".$error;
  328. }
  329. }
  330. $_SESSION['error_msg'] = __('Field "%s" can not be blank.',$error_msg);
  331. } else {
  332. exec ('mktemp -d', $mktemp_output, $return_var);
  333. $tmpdir = $mktemp_output[0];
  334. // Certificate
  335. if (!empty($_POST['v_ssl_crt'])) {
  336. $fp = fopen($tmpdir."/".$_POST['v_domain'].".crt", 'w');
  337. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_crt']));
  338. fclose($fp);
  339. }
  340. // Key
  341. if (!empty($_POST['v_ssl_key'])) {
  342. $fp = fopen($tmpdir."/".$_POST['v_domain'].".key", 'w');
  343. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_key']));
  344. fclose($fp);
  345. }
  346. // CA
  347. if (!empty($_POST['v_ssl_ca'])) {
  348. $fp = fopen($tmpdir."/".$_POST['v_domain'].".ca", 'w');
  349. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_ca']));
  350. fclose($fp);
  351. }
  352. exec (VESTA_CMD."v-add-web-domain-ssl ".$user." ".$v_domain." ".$tmpdir." ".$v_ssl_home." 'no'", $output, $return_var);
  353. check_return_code($return_var,$output);
  354. unset($output);
  355. $v_ssl = 'yes';
  356. $restart_web = 'yes';
  357. $restart_proxy = 'yes';
  358. $v_ssl_crt = $_POST['v_ssl_crt'];
  359. $v_ssl_key = $_POST['v_ssl_key'];
  360. $v_ssl_ca = $_POST['v_ssl_ca'];
  361. $v_ssl_home = $_POST['v_ssl_home'];
  362. // Cleanup certificate tempfiles
  363. if (!empty($_POST['v_ssl_crt'])) {
  364. unlink($tmpdir."/".$_POST['v_domain'].".crt");
  365. }
  366. if (!empty($_POST['v_ssl_key'])) {
  367. unlink($tmpdir."/".$_POST['v_domain'].".key");
  368. }
  369. if (!empty($_POST['v_ssl_ca'])) {
  370. unlink($tmpdir."/".$_POST['v_domain'].".ca");
  371. }
  372. rmdir($tmpdir);
  373. }
  374. }
  375. }
  376. // Change document root for ssl domain
  377. if (( $v_ssl == 'yes') && (!empty($_POST['v_ssl'])) && (empty($_SESSION['error_msg']))) {
  378. if ( $v_ssl_home != $_POST['v_ssl_home'] ) {
  379. $v_ssl_home = escapeshellarg($_POST['v_ssl_home']);
  380. exec (VESTA_CMD."v-change-web-domain-sslhome ".$user." ".$v_domain." ".$v_ssl_home." 'no'", $output, $return_var);
  381. check_return_code($return_var,$output);
  382. $v_ssl_home = $_POST['v_ssl_home'];
  383. unset($output);
  384. }
  385. }
  386. // Delete web stats
  387. if ((!empty($v_stats)) && ($_POST['v_stats'] == 'none') && (empty($_SESSION['error_msg']))) {
  388. exec (VESTA_CMD."v-delete-web-domain-stats ".$v_username." ".$v_domain, $output, $return_var);
  389. check_return_code($return_var,$output);
  390. unset($output);
  391. $v_stats = '';
  392. }
  393. // Change web stats engine
  394. if ((!empty($v_stats)) && ($_POST['v_stats'] != $v_stats) && (empty($_SESSION['error_msg']))) {
  395. $v_stats = escapeshellarg($_POST['v_stats']);
  396. exec (VESTA_CMD."v-change-web-domain-stats ".$v_username." ".$v_domain." ".$v_stats, $output, $return_var);
  397. check_return_code($return_var,$output);
  398. unset($output);
  399. }
  400. // Add web stats
  401. if ((empty($v_stats)) && ($_POST['v_stats'] != 'none') && (empty($_SESSION['error_msg']))) {
  402. $v_stats = escapeshellarg($_POST['v_stats']);
  403. exec (VESTA_CMD."v-add-web-domain-stats ".$v_username." ".$v_domain." ".$v_stats, $output, $return_var);
  404. check_return_code($return_var,$output);
  405. unset($output);
  406. }
  407. // Delete web stats authorization
  408. if ((!empty($v_stats_user)) && (empty($_POST['v_stats_auth'])) && (empty($_SESSION['error_msg']))) {
  409. exec (VESTA_CMD."v-delete-web-domain-stats-user ".$v_username." ".$v_domain, $output, $return_var);
  410. check_return_code($return_var,$output);
  411. unset($output);
  412. $v_stats_user = '';
  413. $v_stats_password = '';
  414. }
  415. // Change web stats user or password
  416. if ((empty($v_stats_user)) && (!empty($_POST['v_stats_auth'])) && (empty($_SESSION['error_msg']))) {
  417. if (empty($_POST['v_stats_user'])) $errors[] = __('stats username');
  418. if (!empty($errors[0])) {
  419. foreach ($errors as $i => $error) {
  420. if ( $i == 0 ) {
  421. $error_msg = $error;
  422. } else {
  423. $error_msg = $error_msg.", ".$error;
  424. }
  425. }
  426. $_SESSION['error_msg'] = __('Field "%s" can not be blank.',$error_msg);
  427. } else {
  428. $v_stats_user = escapeshellarg($_POST['v_stats_user']);
  429. $v_stats_password = tempnam("/tmp","vst");
  430. $fp = fopen($v_stats_password, "w");
  431. fwrite($fp, $_POST['v_stats_password']."\n");
  432. fclose($fp);
  433. exec (VESTA_CMD."v-add-web-domain-stats-user ".$v_username." ".$v_domain." ".$v_stats_user." ".$v_stats_password, $output, $return_var);
  434. check_return_code($return_var,$output);
  435. unset($output);
  436. unlink($v_stats_password);
  437. $v_stats_password = escapeshellarg($_POST['v_stats_password']);
  438. }
  439. }
  440. // Add web stats authorization
  441. if ((!empty($v_stats_user)) && (!empty($_POST['v_stats_auth'])) && (empty($_SESSION['error_msg']))) {
  442. if (empty($_POST['v_stats_user'])) $errors[] = __('stats user');
  443. if (!empty($errors[0])) {
  444. foreach ($errors as $i => $error) {
  445. if ( $i == 0 ) {
  446. $error_msg = $error;
  447. } else {
  448. $error_msg = $error_msg.", ".$error;
  449. }
  450. }
  451. $_SESSION['error_msg'] = __('Field "%s" can not be blank.',$error_msg);
  452. }
  453. if (($v_stats_user != $_POST['v_stats_user']) || (!empty($_POST['v_stats_password'])) && (empty($_SESSION['error_msg']))) {
  454. $v_stats_user = escapeshellarg($_POST['v_stats_user']);
  455. $v_stats_password = tempnam("/tmp","vst");
  456. $fp = fopen($v_stats_password, "w");
  457. fwrite($fp, $_POST['v_stats_password']."\n");
  458. fclose($fp);
  459. exec (VESTA_CMD."v-add-web-domain-stats-user ".$v_username." ".$v_domain." ".$v_stats_user." ".$v_stats_password, $output, $return_var);
  460. check_return_code($return_var,$output);
  461. unset($output);
  462. unlink($v_stats_password);
  463. $v_stats_password = escapeshellarg($_POST['v_stats_password']);
  464. }
  465. }
  466. // Update ftp account
  467. if (!empty($_POST['v_ftp_user'])) {
  468. $v_ftp_users_updated = array();
  469. foreach ($_POST['v_ftp_user'] as $i => $v_ftp_user_data) {
  470. if (empty($v_ftp_user_data['v_ftp_user'])) {
  471. continue;
  472. }
  473. $v_ftp_user_data['v_ftp_user'] = preg_replace("/^".$user."_/i", "", $v_ftp_user_data['v_ftp_user']);
  474. if ($v_ftp_user_data['is_new'] == 1 && !empty($_POST['v_ftp'])) {
  475. if ((!empty($v_ftp_user_data['v_ftp_email'])) && (!filter_var($v_ftp_user_data['v_ftp_email'], FILTER_VALIDATE_EMAIL))) $_SESSION['error_msg'] = __('Please enter valid email address.');
  476. if (empty($v_ftp_user_data['v_ftp_user'])) $errors[] = 'ftp user';
  477. if (!empty($errors[0])) {
  478. foreach ($errors as $i => $error) {
  479. if ( $i == 0 ) {
  480. $error_msg = $error;
  481. } else {
  482. $error_msg = $error_msg.", ".$error;
  483. }
  484. }
  485. $_SESSION['error_msg'] = __('Field "%s" can not be blank.',$error_msg);
  486. }
  487. // Add ftp account
  488. $v_ftp_username = $v_ftp_user_data['v_ftp_user'];
  489. $v_ftp_username_full = $user . '_' . $v_ftp_user_data['v_ftp_user'];
  490. $v_ftp_user = escapeshellarg($v_ftp_username);
  491. $v_ftp_path = escapeshellarg(trim($v_ftp_user_data['v_ftp_path']));
  492. if (empty($_SESSION['error_msg'])) {
  493. $v_ftp_password = tempnam("/tmp","vst");
  494. $fp = fopen($v_ftp_password, "w");
  495. fwrite($fp, $v_ftp_user_data['v_ftp_password']."\n");
  496. fclose($fp);
  497. exec (VESTA_CMD."v-add-web-domain-ftp ".$v_username." ".$v_domain." ".$v_ftp_user." ".$v_ftp_password . " " . $v_ftp_path, $output, $return_var);
  498. check_return_code($return_var,$output);
  499. if ((!empty($v_ftp_user_data['v_ftp_email'])) && (empty($_SESSION['error_msg']))) {
  500. $to = $v_ftp_user_data['v_ftp_email'];
  501. $subject = __("FTP login credentials");
  502. $hostname = exec('hostname');
  503. $from = __('MAIL_FROM',$hostname);
  504. $mailtext = __('FTP_ACCOUNT_READY',$_GET['domain'],$user,$v_ftp_username,$v_ftp_user_data['v_ftp_password']);
  505. send_email($to, $subject, $mailtext, $from);
  506. unset($v_ftp_email);
  507. }
  508. unset($output);
  509. unlink($v_ftp_password);
  510. $v_ftp_password = escapeshellarg($v_ftp_user_data['v_ftp_password']);
  511. }
  512. if ($return_var == 0) {
  513. $v_ftp_password = "";
  514. $v_ftp_user_data['is_new'] = 0;
  515. }
  516. else {
  517. $v_ftp_user_data['is_new'] = 1;
  518. }
  519. $v_ftp_users_updated[] = array(
  520. 'is_new' => empty($_SESSION['error_msg']) ? 0 : 1,
  521. 'v_ftp_user' => $v_ftp_username_full,
  522. 'v_ftp_password' => $v_ftp_password,
  523. 'v_ftp_path' => $v_ftp_user_data['v_ftp_path'],
  524. 'v_ftp_email' => $v_ftp_user_data['v_ftp_email'],
  525. 'v_ftp_pre_path' => $v_ftp_user_prepath
  526. );
  527. continue;
  528. }
  529. // Delete FTP account
  530. if ($v_ftp_user_data['delete'] == 1) {
  531. $v_ftp_username = $user . '_' . $v_ftp_user_data['v_ftp_user'];
  532. exec (VESTA_CMD."v-delete-web-domain-ftp ".$v_username." ".$v_domain." ".$v_ftp_username, $output, $return_var);
  533. check_return_code($return_var,$output);
  534. unset($output);
  535. continue;
  536. }
  537. if (!empty($_POST['v_ftp'])) {
  538. if (empty($v_ftp_user_data['v_ftp_user'])) $errors[] = __('ftp user');
  539. if (!empty($errors[0])) {
  540. foreach ($errors as $i => $error) {
  541. if ( $i == 0 ) {
  542. $error_msg = $error;
  543. } else {
  544. $error_msg = $error_msg.", ".$error;
  545. }
  546. }
  547. $_SESSION['error_msg'] = __('Field "%s" can not be blank.',$error_msg);
  548. }
  549. // Change FTP account path
  550. $v_ftp_username = $user . '_' . $v_ftp_user_data['v_ftp_user']; //preg_replace("/^".$user."_/", "", $v_ftp_user_data['v_ftp_user']);
  551. $v_ftp_username = escapeshellarg($v_ftp_username);
  552. //if (!empty($v_ftp_user_data['v_ftp_path'])) {
  553. $v_ftp_path = escapeshellarg(trim($v_ftp_user_data['v_ftp_path']));
  554. exec (VESTA_CMD."v-change-web-domain-ftp-path ".$v_username." ".$v_domain." ".$v_ftp_username." ".$v_ftp_path, $output, $return_var);
  555. //}
  556. // Change FTP account password
  557. if (!empty($v_ftp_user_data['v_ftp_password'])) {
  558. $v_ftp_password = tempnam("/tmp","vst");
  559. $fp = fopen($v_ftp_password, "w");
  560. fwrite($fp, $v_ftp_user_data['v_ftp_password']."\n");
  561. fclose($fp);
  562. exec (VESTA_CMD."v-change-web-domain-ftp-password ".$v_username." ".$v_domain." ".$v_ftp_username." ".$v_ftp_password, $output, $return_var);
  563. unlink($v_ftp_password);
  564. $to = $v_ftp_user_data['v_ftp_email'];
  565. $subject = __("FTP login credentials");
  566. $hostname = exec('hostname');
  567. $from = __('MAIL_FROM',$hostname);
  568. $mailtext = __('FTP_ACCOUNT_READY',$_GET['domain'],$user,$v_ftp_username,$v_ftp_user_data['v_ftp_password']);
  569. send_email($to, $subject, $mailtext, $from);
  570. unset($v_ftp_email);
  571. }
  572. check_return_code($return_var, $output);
  573. unset($output);
  574. $v_ftp_users_updated[] = array(
  575. 'is_new' => 0,
  576. 'v_ftp_user' => $v_ftp_username,
  577. 'v_ftp_password' => $v_ftp_user_data['v_ftp_password'],
  578. 'v_ftp_path' => $v_ftp_user_data['v_ftp_path'],
  579. 'v_ftp_email' => $v_ftp_user_data['v_ftp_email'],
  580. 'v_ftp_pre_path' => $v_ftp_user_prepath
  581. );
  582. }
  583. }
  584. }
  585. // Restart web server
  586. if (!empty($restart_web) && (empty($_SESSION['error_msg']))) {
  587. exec (VESTA_CMD."v-restart-web", $output, $return_var);
  588. check_return_code($return_var,$output);
  589. unset($output);
  590. }
  591. // Restart proxy server
  592. if ((!empty($_SESSION['PROXY_SYSTEM'])) && !empty($restart_proxy) && (empty($_SESSION['error_msg']))) {
  593. exec (VESTA_CMD."v-restart-proxy", $output, $return_var);
  594. check_return_code($return_var,$output);
  595. unset($output);
  596. }
  597. // Restart dns server
  598. if (!empty($restart_dns) && (empty($_SESSION['error_msg']))) {
  599. exec (VESTA_CMD."v-restart-dns", $output, $return_var);
  600. check_return_code($return_var,$output);
  601. unset($output);
  602. }
  603. // Set success message
  604. if (empty($_SESSION['error_msg'])) {
  605. $_SESSION['ok_msg'] = __('Changes has been saved.');
  606. }
  607. }
  608. $v_ftp_users_raw = explode(':', $v_ftp_user);
  609. $v_ftp_users_paths_raw = explode(':', $data[$v_domain]['FTP_PATH']);
  610. $v_ftp_users = array();
  611. foreach ($v_ftp_users_raw as $v_ftp_user_index => $v_ftp_user_val) {
  612. if (empty($v_ftp_user_val)) {
  613. continue;
  614. }
  615. $v_ftp_users[] = array(
  616. 'is_new' => 0,
  617. 'v_ftp_user' => $v_ftp_user_val,
  618. 'v_ftp_password' => $v_ftp_password,
  619. 'v_ftp_path' => (isset($v_ftp_users_paths_raw[$v_ftp_user_index]) ? $v_ftp_users_paths_raw[$v_ftp_user_index] : ''),
  620. 'v_ftp_email' => $v_ftp_email,
  621. 'v_ftp_pre_path' => $v_ftp_user_prepath
  622. );
  623. }
  624. if (empty($v_ftp_users)) {
  625. $v_ftp_user = null;
  626. $v_ftp_users[] = array(
  627. 'is_new' => 1,
  628. 'v_ftp_user' => '',
  629. 'v_ftp_password' => '',
  630. 'v_ftp_path' => (isset($v_ftp_users_paths_raw[$v_ftp_user_index]) ? $v_ftp_users_paths_raw[$v_ftp_user_index] : ''),
  631. 'v_ftp_email' => '',
  632. 'v_ftp_pre_path' => $v_ftp_user_prepath
  633. );
  634. }
  635. // set default pre path for newly created users
  636. $v_ftp_pre_path_new_user = $v_ftp_user_prepath;
  637. if (isset($v_ftp_users_updated)) {
  638. $v_ftp_users = $v_ftp_users_updated;
  639. if (empty($v_ftp_users_updated)) {
  640. $v_ftp_user = null;
  641. $v_ftp_users[] = array(
  642. 'is_new' => 1,
  643. 'v_ftp_user' => '',
  644. 'v_ftp_password' => '',
  645. 'v_ftp_path' => (isset($v_ftp_users_paths_raw[$v_ftp_user_index]) ? $v_ftp_users_paths_raw[$v_ftp_user_index] : ''),
  646. 'v_ftp_email' => '',
  647. 'v_ftp_pre_path' => $v_ftp_user_prepath
  648. );
  649. }
  650. }
  651. // Render page
  652. render_page($user, $TAB, 'edit_web');
  653. // Flush session messages
  654. unset($_SESSION['error_msg']);
  655. unset($_SESSION['ok_msg']);