main.sh 14 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533
  1. # Internal variables
  2. HOMEDIR='/home'
  3. BACKUP='/backup'
  4. BACKUP_GZIP=5
  5. BACKUP_DISK_LIMIT=95
  6. BACKUP_LA_LIMIT=5
  7. RRD_STEP=300
  8. BIN=$VESTA/bin
  9. USER_DATA=$VESTA/data/users/$user
  10. WEBTPL=$VESTA/data/templates/web
  11. DNSTPL=$VESTA/data/templates/dns
  12. RRD=$VESTA/web/rrd
  13. SENDMAIL="$VESTA/web/inc/mail-wrapper.php"
  14. # Return codes
  15. OK=0
  16. E_ARGS=1
  17. E_INVALID=2
  18. E_NOTEXIST=3
  19. E_EXISTS=4
  20. E_SUSPENDED=5
  21. E_UNSUSPENDED=6
  22. E_INUSE=7
  23. E_LIMIT=8
  24. E_PASSWORD=9
  25. E_FORBIDEN=10
  26. E_DISABLED=11
  27. E_PARSING=12
  28. E_DISK=13
  29. E_LA=14
  30. E_CONNECT=15
  31. E_FTP=16
  32. E_DB=17
  33. E_RRD=18
  34. E_UPDATE=19
  35. E_RESTART=20
  36. # Event string for logger
  37. for ((I=1; I <= $# ; I++)); do
  38. if [[ "$HIDE" != $I ]]; then
  39. ARGUMENTS="$ARGUMENTS '$(eval echo \$${I})'"
  40. else
  41. ARGUMENTS="$ARGUMENTS '******'"
  42. fi
  43. done
  44. # Log event function
  45. log_event() {
  46. if [ -z "$time" ]; then
  47. LOG_TIME="$(date +'%F %T') $(basename $0)"
  48. else
  49. LOG_TIME="$date $time $(basename $0)"
  50. fi
  51. if [ "$1" -eq 0 ]; then
  52. echo "$LOG_TIME $2" >> $VESTA/log/system.log
  53. else
  54. echo "$LOG_TIME $2 [Error $1]" >> $VESTA/log/error.log
  55. fi
  56. }
  57. # Log user history
  58. log_history() {
  59. cmd=$1
  60. undo=${2-no}
  61. log_user=${3-$user}
  62. log=$VESTA/data/users/$log_user/history.log
  63. touch $log
  64. if [ '99' -lt "$(wc -l $log |cut -f 1 -d ' ')" ]; then
  65. tail -n 49 $log > $log.moved
  66. mv -f $log.moved $log
  67. chmod 660 $log
  68. fi
  69. if [ -z "$date" ]; then
  70. time_n_date=$(date +'%T %F')
  71. time=$(echo "$time_n_date" |cut -f 1 -d \ )
  72. date=$(echo "$time_n_date" |cut -f 2 -d \ )
  73. fi
  74. curr_str=$(grep "ID=" $log | cut -f 2 -d \' | sort -n | tail -n1)
  75. id="$((curr_str +1))"
  76. echo "ID='$id' DATE='$date' TIME='$time' CMD='$cmd' UNDO='$undo'" >> $log
  77. }
  78. # Result checker
  79. check_result() {
  80. if [ $1 -ne 0 ]; then
  81. echo "Error: $2"
  82. if [ ! -z "$3" ]; then
  83. log_event "$3" "$ARGUMENTS"
  84. exit $3
  85. else
  86. log_event "$1" "$ARGUMENTS"
  87. exit $1
  88. fi
  89. fi
  90. }
  91. # Argument list checker
  92. check_args() {
  93. if [ "$1" -gt "$2" ]; then
  94. echo "Usage: $SCRIPT $3"
  95. check_result $E_ARGS "not enought arguments" >/dev/null
  96. fi
  97. }
  98. # Subsystem checker
  99. is_system_enabled() {
  100. if [ -z "$1" ] || [ "$1" = no ]; then
  101. check_result $E_DISABLED "$2 is not enabled"
  102. fi
  103. }
  104. # User package check
  105. is_package_full() {
  106. case "$1" in
  107. WEB_DOMAINS) used=$(wc -l $USER_DATA/web.conf |cut -f1 -d \ );;
  108. WEB_ALIASES) used=$(echo $aliases |tr ',' '\n' |wc -l);;
  109. DNS_DOMAINS) used=$(wc -l $USER_DATA/dns.conf |cut -f1 -d \ );;
  110. DNS_RECORDS) used=$(wc -l $USER_DATA/dns/$domain.conf|cut -f1 -d \ );;
  111. MAIL_DOMAINS) used=$(wc -l $USER_DATA/mail.conf |cut -f1 -d \ );;
  112. MAIL_USER) used=$(wc -l $USER_DATA/mail/$domain.conf |cut -f1 -d \ );;
  113. DATABASES) used=$(wc -l $USER_DATA/db.conf |cut -f1 -d \ );;
  114. CRON_JOBS) used=$(wc -l $USER_DATA/cron.conf |cut -f1 -d \ );;
  115. esac
  116. limit=$(grep "^$1=" $USER_DATA/user.conf |cut -f 2 -d \')
  117. if [ "$limit" != 'unlimited' ] && [ "$used" -ge "$limit" ]; then
  118. check_result $E_LIMIT "$1 limit is reached :: upgrade user package"
  119. fi
  120. }
  121. # User owner for reseller plugin
  122. get_user_owner() {
  123. if [ -z "$RESELLER_KEY" ]; then
  124. owner='admin'
  125. else
  126. owner=$(grep "^OWNER" $USER_DATA/user.conf| cut -f 2 -d \')
  127. if [ -z "$owner" ]; then
  128. owner='admin'
  129. fi
  130. fi
  131. }
  132. # Random password generator
  133. gen_password() {
  134. PW_MATRIX='0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'
  135. PW_LENGHT='10'
  136. pw_matrix=${1-$PW_MATRIX}
  137. pw_lenght=${2-$PW_LENGHT}
  138. while [ ${n:=1} -le $pw_lenght ]; do
  139. pass="$pass${pw_matrix:$(($RANDOM%${#pw_matrix})):1}"
  140. let n+=1
  141. done
  142. echo "$pass"
  143. }
  144. # Package existence check
  145. is_package_valid() {
  146. if [ -z "$1" ]; then
  147. pkg_dir="$VESTA/data/packages"
  148. fi
  149. if [ ! -e "$pkg_dir/$package.pkg" ]; then
  150. check_result $E_NOTEXIST "package $package doesn't exist"
  151. fi
  152. }
  153. # Validate system type
  154. is_type_valid() {
  155. if [ -z "$(echo $1 | grep -w $2)" ]; then
  156. check_result $E_INVALID "$2 type is invalid"
  157. fi
  158. }
  159. # Check if backup is available for user
  160. is_backup_available() {
  161. b_owner=$(echo $user |\
  162. sed -e "s/\.[0-9][0-9][0-9][0-9]-[0-9][0-9]-[0-9][0-9].tar//")
  163. if [ "$user" != "$b_owner" ]; then
  164. check_result $E_FORBIDEN "permission denied"
  165. fi
  166. }
  167. # Check user backup settings
  168. is_backup_enabled() {
  169. BACKUPS=$(grep "^BACKUPS=" $USER_DATA/user.conf | cut -f2 -d \')
  170. if [ -z "$BACKUPS" ] || [[ "$BACKUPS" -le '0' ]]; then
  171. check_result $E_DISABLED "user backup is disabled"
  172. fi
  173. }
  174. # Check user backup settings
  175. is_backup_scheduled() {
  176. if [ -e "$VESTA/data/queue/backup.pipe" ]; then
  177. check_q=$(grep " $user " $VESTA/data/queue/backup.pipe | grep $1)
  178. if [ ! -z "$check_q" ]; then
  179. check_result $E_EXISTS "$1 is already scheduled"
  180. fi
  181. fi
  182. }
  183. # Check if object is new
  184. is_object_new() {
  185. if [ $2 = 'USER' ]; then
  186. if [ -d "$USER_DATA" ]; then
  187. object="OK"
  188. fi
  189. else
  190. object=$(grep "$2='$3'" $USER_DATA/$1.conf)
  191. fi
  192. if [ ! -z "$object" ]; then
  193. check_result $E_EXISTS "$2=$3 is already exists"
  194. fi
  195. }
  196. # Check if object is valid
  197. is_object_valid() {
  198. if [ $2 = 'USER' ]; then
  199. if [ ! -d "$VESTA/data/users/$3" ]; then
  200. check_result $E_NOTEXIST "$1 $3 doesn't exist"
  201. fi
  202. else
  203. object=$(grep "$2='$3'" $VESTA/data/users/$user/$1.conf)
  204. if [ -z "$object" ]; then
  205. arg1=$(basename $1)
  206. arg2=$(echo $2 |tr '[:upper:]' '[:lower:]')
  207. check_result $E_NOTEXIST "$arg1 $arg2 $3 doesn't exist"
  208. fi
  209. fi
  210. }
  211. # Check if object is supended
  212. is_object_suspended() {
  213. if [ $2 = 'USER' ]; then
  214. spnd=$(cat $USER_DATA/$1.conf|grep "SUSPENDED='yes'")
  215. else
  216. spnd=$(grep "$2='$3'" $USER_DATA/$1.conf|grep "SUSPENDED='yes'")
  217. fi
  218. if [ -z "$spnd" ]; then
  219. check_result $E_UNSUSPENDED "$(basename $1) $3 is not suspended"
  220. fi
  221. }
  222. # Check if object is unsupended
  223. is_object_unsuspended() {
  224. if [ $2 = 'USER' ]; then
  225. spnd=$(cat $USER_DATA/$1.conf |grep "SUSPENDED='yes'")
  226. else
  227. spnd=$(grep "$2='$3'" $USER_DATA/$1.conf |grep "SUSPENDED='yes'")
  228. fi
  229. if [ ! -z "$spnd" ]; then
  230. check_result $E_SUSPENDED "$(basename $1) $3 is suspended"
  231. fi
  232. }
  233. # Check if object value is empty
  234. is_object_value_empty() {
  235. str=$(grep "$2='$3'" $USER_DATA/$1.conf)
  236. eval $str
  237. eval value=$4
  238. if [ ! -z "$value" ] && [ "$value" != 'no' ]; then
  239. check_result $E_EXISTS "${4//$}=$value is already exists"
  240. fi
  241. }
  242. # Check if object value is empty
  243. is_object_value_exist() {
  244. str=$(grep "$2='$3'" $USER_DATA/$1.conf)
  245. eval $str
  246. eval value=$4
  247. if [ -z "$value" ] || [ "$value" = 'no' ]; then
  248. check_result $E_NOTEXIST "${4//$}=$value doesn't exist"
  249. fi
  250. }
  251. # Check if password is transmitted via file
  252. is_password_valid() {
  253. if [[ "$password" =~ ^/tmp/ ]]; then
  254. if [ -f "$password" ]; then
  255. password=$(head -n1 $password)
  256. fi
  257. fi
  258. }
  259. # Get object value
  260. get_object_value() {
  261. object=$(grep "$2='$3'" $USER_DATA/$1.conf)
  262. eval "$object"
  263. eval echo $4
  264. }
  265. # Update object value
  266. update_object_value() {
  267. row=$(grep -nF "$2='$3'" $USER_DATA/$1.conf)
  268. lnr=$(echo $row | cut -f 1 -d ':')
  269. object=$(echo $row | sed "s/^$lnr://")
  270. eval "$object"
  271. eval old="$4"
  272. old=$(echo "$old" | sed -e 's/\\/\\\\/g' -e 's/&/\\&/g' -e 's/\//\\\//g')
  273. new=$(echo "$5" | sed -e 's/\\/\\\\/g' -e 's/&/\\&/g' -e 's/\//\\\//g')
  274. sed -i "$lnr s/${4//$/}='${old//\*/\\*}'/${4//$/}='${new//\*/\\*}'/g" \
  275. $USER_DATA/$1.conf
  276. }
  277. # Add object key
  278. add_object_key() {
  279. row=$(grep -n "$2='$3'" $USER_DATA/$1.conf)
  280. lnr=$(echo $row | cut -f 1 -d ':')
  281. object=$(echo $row | sed "s/^$lnr://")
  282. if [ -z "$(echo $object |grep $4=)" ]; then
  283. eval old="$4"
  284. sed -i "$lnr s/$5='/$4='' $5='/" $USER_DATA/$1.conf
  285. fi
  286. }
  287. # Search objects
  288. search_objects() {
  289. OLD_IFS="$IFS"
  290. IFS=$'\n'
  291. for line in $(grep $2=\'$3\' $USER_DATA/$1.conf); do
  292. eval $line
  293. eval echo \$$4
  294. done
  295. IFS="$OLD_IFS"
  296. }
  297. # Get user value
  298. get_user_value() {
  299. grep "^${1//$/}=" $USER_DATA/user.conf |awk -F "'" '{print $2}'
  300. }
  301. # Update user value in user.conf
  302. update_user_value() {
  303. key="${2//$}"
  304. lnr=$(grep -n "^$key='" $VESTA/data/users/$1/user.conf |cut -f 1 -d ':')
  305. if [ ! -z "$lnr" ]; then
  306. sed -i "$lnr d" $VESTA/data/users/$1/user.conf
  307. sed -i "$lnr i\\$key='${3}'" $VESTA/data/users/$1/user.conf
  308. fi
  309. }
  310. # Increase user counter
  311. increase_user_value() {
  312. key="${2//$}"
  313. factor="${3-1}"
  314. conf="$VESTA/data/users/$1/user.conf"
  315. old=$(grep "$key=" $conf | cut -f 2 -d \')
  316. if [ -z "$old" ]; then
  317. old=0
  318. fi
  319. new=$((old + factor))
  320. sed -i "s/$key='$old'/$key='$new'/g" $conf
  321. }
  322. # Decrease user counter
  323. decrease_user_value() {
  324. key="${2//$}"
  325. factor="${3-1}"
  326. conf="$VESTA/data/users/$1/user.conf"
  327. old=$(grep "$key=" $conf | cut -f 2 -d \')
  328. if [ -z "$old" ]; then
  329. old=0
  330. fi
  331. if [ "$old" -le 1 ]; then
  332. new=0
  333. else
  334. new=$((old - factor))
  335. fi
  336. if [ "$new" -lt 0 ]; then
  337. new=0
  338. fi
  339. sed -i "s/$key='$old'/$key='$new'/g" $conf
  340. }
  341. # Recalculate U_DISK value
  342. recalc_user_disk_usage() {
  343. u_usage=0
  344. if [ -f "$USER_DATA/web.conf" ]; then
  345. usage=0
  346. dusage=$(grep 'U_DISK=' $USER_DATA/web.conf |\
  347. awk -F "U_DISK='" '{print $2}' | cut -f 1 -d \')
  348. for disk_usage in $dusage; do
  349. usage=$((usage + disk_usage))
  350. done
  351. d=$(grep "U_DISK_WEB='" $USER_DATA/user.conf | cut -f 2 -d \')
  352. sed -i "s/U_DISK_WEB='$d'/U_DISK_WEB='$usage'/g" $USER_DATA/user.conf
  353. u_usage=$((u_usage + usage))
  354. fi
  355. if [ -f "$USER_DATA/mail.conf" ]; then
  356. usage=0
  357. dusage=$(grep 'U_DISK=' $USER_DATA/mail.conf |\
  358. awk -F "U_DISK='" '{print $2}' | cut -f 1 -d \')
  359. for disk_usage in $dusage; do
  360. usage=$((usage + disk_usage))
  361. done
  362. d=$(grep "U_DISK_MAIL='" $USER_DATA/user.conf | cut -f 2 -d \')
  363. sed -i "s/U_DISK_MAIL='$d'/U_DISK_MAIL='$usage'/g" $USER_DATA/user.conf
  364. u_usage=$((u_usage + usage))
  365. fi
  366. if [ -f "$USER_DATA/db.conf" ]; then
  367. usage=0
  368. dusage=$(grep 'U_DISK=' $USER_DATA/db.conf |\
  369. awk -F "U_DISK='" '{print $2}' | cut -f 1 -d \')
  370. for disk_usage in $dusage; do
  371. usage=$((usage + disk_usage))
  372. done
  373. d=$(grep "U_DISK_DB='" $USER_DATA/user.conf | cut -f 2 -d \')
  374. sed -i "s/U_DISK_DB='$d'/U_DISK_DB='$usage'/g" $USER_DATA/user.conf
  375. u_usage=$((u_usage + usage))
  376. fi
  377. usage=$(grep 'U_DISK_DIRS=' $USER_DATA/user.conf | cut -f 2 -d "'")
  378. u_usage=$((u_usage + usage))
  379. old=$(grep "U_DISK='" $USER_DATA/user.conf | cut -f 2 -d \')
  380. sed -i "s/U_DISK='$old'/U_DISK='$u_usage'/g" $USER_DATA/user.conf
  381. }
  382. # Recalculate U_BANDWIDTH value
  383. recalc_user_bandwidth_usage() {
  384. usage=0
  385. bandwidth_usage=$(grep 'U_BANDWIDTH=' $USER_DATA/web.conf |\
  386. awk -F "U_BANDWIDTH='" '{print $2}'|cut -f 1 -d \')
  387. for bandwidth in $bandwidth_usage; do
  388. usage=$((usage + bandwidth))
  389. done
  390. old=$(grep "U_BANDWIDTH='" $USER_DATA/user.conf | cut -f 2 -d \')
  391. sed -i "s/U_BANDWIDTH='$old'/U_BANDWIDTH='$usage'/g" $USER_DATA/user.conf
  392. }
  393. # Get next cron job id
  394. get_next_cronjob() {
  395. if [ -z "$job" ]; then
  396. curr_str=$(grep "JOB=" $USER_DATA/cron.conf|cut -f 2 -d \'|\
  397. sort -n|tail -n1)
  398. job="$((curr_str +1))"
  399. fi
  400. }
  401. # Sort cron jobs by id
  402. sort_cron_jobs() {
  403. cat $USER_DATA/cron.conf |sort -n -k 2 -t \' > $USER_DATA/cron.tmp
  404. mv -f $USER_DATA/cron.tmp $USER_DATA/cron.conf
  405. }
  406. # Sync cronjobs with system cron
  407. sync_cron_jobs() {
  408. source $USER_DATA/user.conf
  409. if [ -e "/var/spool/cron/crontabs" ]; then
  410. crontab="/var/spool/cron/crontabs/$user"
  411. else
  412. crontab="/var/spool/cron/$user"
  413. fi
  414. rm -f $crontab
  415. if [ "$CRON_REPORTS" = 'yes' ]; then
  416. echo "MAILTO=$CONTACT" > $sys_cron
  417. fi
  418. while read line; do
  419. eval $line
  420. if [ "$SUSPENDED" = 'no' ]; then
  421. echo "$MIN $HOUR $DAY $MONTH $WDAY $CMD" |\
  422. sed -e "s/%quote%/'/g" -e "s/%dots%/:/g" \
  423. >> $crontab
  424. fi
  425. done < $USER_DATA/cron.conf
  426. chown $user:$user $crontab
  427. chmod 600 $crontab
  428. }
  429. # User format validator
  430. is_user_format_valid() {
  431. if ! [[ "$1" =~ ^[a-zA-Z0-9][-|\.|_|a-zA-Z0-9]{0,28}[a-zA-Z0-9]$ ]]; then
  432. check_result $E_INVALID "invalid user format :: $1"
  433. fi
  434. }
  435. # Domain format validator
  436. is_domain_format_valid() {
  437. exclude="[!|@|#|$|^|&|*|(|)|+|=|{|}|:|,|<|>|?|_|/|\|\"|'|;|%|\`| ]"
  438. if [[ "$1" =~ $exclude ]]; then
  439. check_result $E_INVALID "invalid domain format :: $1"
  440. fi
  441. }
  442. # Alias forman validator
  443. is_alias_format_valid() {
  444. for object in ${1//,/ }; do
  445. exclude="[!|@|#|$|^|&|(|)|+|=|{|}|:|<|>|?|_|/|\|\"|'|;|%|\`| ]"
  446. if [[ "$object" =~ $exclude ]]; then
  447. check_result $E_INVALID "invalid alias format :: $object"
  448. fi
  449. if [[ "$object" =~ [*] ]] && ! [[ "$object" =~ ^[*]\..* ]]; then
  450. check_result $E_INVALID "invalid alias format :: $object"
  451. fi
  452. done
  453. }
  454. # IP format validator
  455. is_ip_format_valid() {
  456. ip_regex='([1-9]?[0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])'
  457. if ! [[ $1 =~ ^$ip_regex\.$ip_regex\.$ip_regex\.$ip_regex$ ]]; then
  458. check_result $E_INVALID "invalid IP format :: $1"
  459. fi
  460. }
  461. # Proxy extention format validator
  462. is_extention_format_valid() {
  463. exclude="[!|#|$|^|&|(|)|+|=|{|}|:|@|<|>|?|/|\|\"|'|;|%|\`| ]"
  464. if [[ "$1" =~ $exclude ]]; then
  465. check_result $E_INVALID "invalid proxy extention format :: $1"
  466. fi
  467. }
  468. # Number format validator
  469. is_number_format_valid() {
  470. object_name=${2-number}
  471. if ! [[ "$1" =~ ^[0-9]+$ ]] ; then
  472. check_result $E_INVALID "invalid $object_name format :: $1"
  473. fi
  474. }
  475. # Format validation controller
  476. is_format_valid() {
  477. for arg_name in $*; do
  478. eval arg=\$$arg_name
  479. if [ ! -z "$arg" ]; then
  480. case $arg_name in
  481. aliases) is_alias_format_valid "$arg" ;;
  482. domain) is_domain_format_valid "$arg" ;;
  483. proxy_ext) is_extention_format_valid "$arg" ;;
  484. ip) is_ip_format_valid "$arg" ;;
  485. user) is_user_format_valid "$arg" ;;
  486. esac
  487. fi
  488. done
  489. }