main.sh 24 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807
  1. #!/usr/bin/env bash
  2. # Internal variables
  3. HOMEDIR='/home'
  4. BACKUP='/backup'
  5. BACKUP_GZIP=5
  6. BACKUP_DISK_LIMIT=95
  7. BACKUP_LA_LIMIT=5
  8. RRD_STEP=300
  9. BIN=$VESTA/bin
  10. USER_DATA=$VESTA/data/users/$user
  11. WEBTPL=$VESTA/data/templates/web
  12. DNSTPL=$VESTA/data/templates/dns
  13. RRD=$VESTA/web/rrd
  14. SENDMAIL="$VESTA/web/inc/mail-wrapper.php"
  15. # Return codes
  16. OK=0
  17. E_ARGS=1
  18. E_INVALID=2
  19. E_NOTEXIST=3
  20. E_EXISTS=4
  21. E_SUSPENDED=5
  22. E_UNSUSPENDED=6
  23. E_INUSE=7
  24. E_LIMIT=8
  25. E_PASSWORD=9
  26. E_FORBIDEN=10
  27. E_DISABLED=11
  28. E_PARSING=12
  29. E_DISK=13
  30. E_LA=14
  31. E_CONNECT=15
  32. E_FTP=16
  33. E_DB=17
  34. E_RRD=18
  35. E_UPDATE=19
  36. E_RESTART=20
  37. # Event string for logger
  38. for ((I=1; I <= $# ; I++)); do
  39. if [[ "$HIDE" != $I ]]; then
  40. ARGUMENTS="$ARGUMENTS '$(eval echo \$${I})'"
  41. else
  42. ARGUMENTS="$ARGUMENTS '******'"
  43. fi
  44. done
  45. # Log event function
  46. log_event() {
  47. if [ -z "$time" ]; then
  48. LOG_TIME="$(date +'%F %T') $(basename $0)"
  49. else
  50. LOG_TIME="$date $time $(basename $0)"
  51. fi
  52. if [ "$1" -eq 0 ]; then
  53. echo "$LOG_TIME $2" >> $VESTA/log/system.log
  54. else
  55. echo "$LOG_TIME $2 [Error $1]" >> $VESTA/log/error.log
  56. fi
  57. }
  58. # Log user history
  59. log_history() {
  60. cmd=$1
  61. undo=${2-no}
  62. log_user=${3-$user}
  63. log=$VESTA/data/users/$log_user/history.log
  64. touch $log
  65. if [ '99' -lt "$(wc -l $log |cut -f 1 -d ' ')" ]; then
  66. tail -n 49 $log > $log.moved
  67. mv -f $log.moved $log
  68. chmod 660 $log
  69. fi
  70. if [ -z "$date" ]; then
  71. time_n_date=$(date +'%T %F')
  72. time=$(echo "$time_n_date" |cut -f 1 -d \ )
  73. date=$(echo "$time_n_date" |cut -f 2 -d \ )
  74. fi
  75. curr_str=$(grep "ID=" $log | cut -f 2 -d \' | sort -n | tail -n1)
  76. id="$((curr_str +1))"
  77. echo "ID='$id' DATE='$date' TIME='$time' CMD='$cmd' UNDO='$undo'" >> $log
  78. }
  79. # Result checker
  80. check_result() {
  81. if [ $1 -ne 0 ]; then
  82. echo "Error: $2"
  83. if [ ! -z "$3" ]; then
  84. log_event "$3" "$ARGUMENTS"
  85. exit $3
  86. else
  87. log_event "$1" "$ARGUMENTS"
  88. exit $1
  89. fi
  90. fi
  91. }
  92. # Argument list checker
  93. check_args() {
  94. if [ "$1" -gt "$2" ]; then
  95. echo "Usage: $(basename $0) $3"
  96. check_result $E_ARGS "not enought arguments" >/dev/null
  97. fi
  98. }
  99. # Subsystem checker
  100. is_system_enabled() {
  101. if [ -z "$1" ] || [ "$1" = no ]; then
  102. check_result $E_DISABLED "$2 is not enabled"
  103. fi
  104. }
  105. # User package check
  106. is_package_full() {
  107. case "$1" in
  108. WEB_DOMAINS) used=$(wc -l $USER_DATA/web.conf);;
  109. WEB_ALIASES) used=$(echo $aliases |tr ',' '\n' |wc -l);;
  110. DNS_DOMAINS) used=$(wc -l $USER_DATA/dns.conf);;
  111. DNS_RECORDS) used=$(wc -l $USER_DATA/dns/$domain.conf);;
  112. MAIL_DOMAINS) used=$(wc -l $USER_DATA/mail.conf);;
  113. MAIL_ACCOUNTS) used=$(wc -l $USER_DATA/mail/$domain.conf);;
  114. DATABASES) used=$(wc -l $USER_DATA/db.conf);;
  115. CRON_JOBS) used=$(wc -l $USER_DATA/cron.conf);;
  116. esac
  117. used=$(echo "$used"| cut -f 1 -d \ )
  118. limit=$(grep "^$1=" $USER_DATA/user.conf |cut -f 2 -d \')
  119. if [ "$limit" != 'unlimited' ] && [[ "$used" -ge "$limit" ]]; then
  120. check_result $E_LIMIT "$1 limit is reached :: upgrade user package"
  121. fi
  122. }
  123. # User owner for reseller plugin
  124. get_user_owner() {
  125. if [ -z "$RESELLER_KEY" ]; then
  126. owner='admin'
  127. else
  128. owner=$(grep "^OWNER" $USER_DATA/user.conf| cut -f 2 -d \')
  129. if [ -z "$owner" ]; then
  130. owner='admin'
  131. fi
  132. fi
  133. }
  134. # Random password generator
  135. generate_password() {
  136. matrix=$1
  137. lenght=$2
  138. if [ -z "$matrix" ]; then
  139. matrix=0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz
  140. fi
  141. if [ -z "$lenght" ]; then
  142. lenght=10
  143. fi
  144. i=1
  145. while [ $i -le $lenght ]; do
  146. pass="$pass${matrix:$(($RANDOM%${#matrix})):1}"
  147. ((i++))
  148. done
  149. echo "$pass"
  150. }
  151. # Package existence check
  152. is_package_valid() {
  153. if [ -z "$1" ]; then
  154. pkg_dir="$VESTA/data/packages"
  155. fi
  156. if [ ! -e "$pkg_dir/$package.pkg" ]; then
  157. check_result $E_NOTEXIST "package $package doesn't exist"
  158. fi
  159. }
  160. # Validate system type
  161. is_type_valid() {
  162. if [ -z "$(echo $1 | grep -w $2)" ]; then
  163. check_result $E_INVALID "$2 type is invalid"
  164. fi
  165. }
  166. # Check user backup settings
  167. is_backup_enabled() {
  168. BACKUPS=$(grep "^BACKUPS=" $USER_DATA/user.conf | cut -f2 -d \')
  169. if [ -z "$BACKUPS" ] || [[ "$BACKUPS" -le '0' ]]; then
  170. check_result $E_DISABLED "user backup is disabled"
  171. fi
  172. }
  173. # Check user backup settings
  174. is_backup_scheduled() {
  175. if [ -e "$VESTA/data/queue/backup.pipe" ]; then
  176. check_q=$(grep " $user " $VESTA/data/queue/backup.pipe | grep $1)
  177. if [ ! -z "$check_q" ]; then
  178. check_result $E_EXISTS "$1 is already scheduled"
  179. fi
  180. fi
  181. }
  182. # Check if object is new
  183. is_object_new() {
  184. if [ $2 = 'USER' ]; then
  185. if [ -d "$USER_DATA" ]; then
  186. object="OK"
  187. fi
  188. else
  189. object=$(grep "$2='$3'" $USER_DATA/$1.conf)
  190. fi
  191. if [ ! -z "$object" ]; then
  192. check_result $E_EXISTS "$2=$3 is already exists"
  193. fi
  194. }
  195. # Check if object is valid
  196. is_object_valid() {
  197. if [ $2 = 'USER' ]; then
  198. if [ ! -d "$VESTA/data/users/$3" ]; then
  199. check_result $E_NOTEXIST "$1 $3 doesn't exist"
  200. fi
  201. else
  202. object=$(grep "$2='$3'" $VESTA/data/users/$user/$1.conf)
  203. if [ -z "$object" ]; then
  204. arg1=$(basename $1)
  205. arg2=$(echo $2 |tr '[:upper:]' '[:lower:]')
  206. check_result $E_NOTEXIST "$arg1 $arg2 $3 doesn't exist"
  207. fi
  208. fi
  209. }
  210. # Check if object is supended
  211. is_object_suspended() {
  212. if [ $2 = 'USER' ]; then
  213. spnd=$(cat $USER_DATA/$1.conf|grep "SUSPENDED='yes'")
  214. else
  215. spnd=$(grep "$2='$3'" $USER_DATA/$1.conf|grep "SUSPENDED='yes'")
  216. fi
  217. if [ -z "$spnd" ]; then
  218. check_result $E_UNSUSPENDED "$(basename $1) $3 is not suspended"
  219. fi
  220. }
  221. # Check if object is unsupended
  222. is_object_unsuspended() {
  223. if [ $2 = 'USER' ]; then
  224. spnd=$(cat $USER_DATA/$1.conf |grep "SUSPENDED='yes'")
  225. else
  226. spnd=$(grep "$2='$3'" $USER_DATA/$1.conf |grep "SUSPENDED='yes'")
  227. fi
  228. if [ ! -z "$spnd" ]; then
  229. check_result $E_SUSPENDED "$(basename $1) $3 is suspended"
  230. fi
  231. }
  232. # Check if object value is empty
  233. is_object_value_empty() {
  234. str=$(grep "$2='$3'" $USER_DATA/$1.conf)
  235. eval $str
  236. eval value=$4
  237. if [ ! -z "$value" ] && [ "$value" != 'no' ]; then
  238. check_result $E_EXISTS "${4//$}=$value is already exists"
  239. fi
  240. }
  241. # Check if object value is empty
  242. is_object_value_exist() {
  243. str=$(grep "$2='$3'" $USER_DATA/$1.conf)
  244. eval $str
  245. eval value=$4
  246. if [ -z "$value" ] || [ "$value" = 'no' ]; then
  247. check_result $E_NOTEXIST "${4//$}=$value doesn't exist"
  248. fi
  249. }
  250. # Check if password is transmitted via file
  251. is_password_valid() {
  252. if [[ "$password" =~ ^/tmp/ ]]; then
  253. if [ -f "$password" ]; then
  254. password=$(head -n1 $password)
  255. fi
  256. fi
  257. }
  258. # Get object value
  259. get_object_value() {
  260. object=$(grep "$2='$3'" $USER_DATA/$1.conf)
  261. eval "$object"
  262. eval echo $4
  263. }
  264. # Update object value
  265. update_object_value() {
  266. row=$(grep -nF "$2='$3'" $USER_DATA/$1.conf)
  267. lnr=$(echo $row | cut -f 1 -d ':')
  268. object=$(echo $row | sed "s/^$lnr://")
  269. eval "$object"
  270. eval old="$4"
  271. old=$(echo "$old" | sed -e 's/\\/\\\\/g' -e 's/&/\\&/g' -e 's/\//\\\//g')
  272. new=$(echo "$5" | sed -e 's/\\/\\\\/g' -e 's/&/\\&/g' -e 's/\//\\\//g')
  273. sed -i "$lnr s/${4//$/}='${old//\*/\\*}'/${4//$/}='${new//\*/\\*}'/g" \
  274. $USER_DATA/$1.conf
  275. }
  276. # Add object key
  277. add_object_key() {
  278. row=$(grep -n "$2='$3'" $USER_DATA/$1.conf)
  279. lnr=$(echo $row | cut -f 1 -d ':')
  280. object=$(echo $row | sed "s/^$lnr://")
  281. if [ -z "$(echo $object |grep $4=)" ]; then
  282. eval old="$4"
  283. sed -i "$lnr s/$5='/$4='' $5='/" $USER_DATA/$1.conf
  284. fi
  285. }
  286. # Search objects
  287. search_objects() {
  288. OLD_IFS="$IFS"
  289. IFS=$'\n'
  290. for line in $(grep $2=\'$3\' $USER_DATA/$1.conf); do
  291. eval $line
  292. eval echo \$$4
  293. done
  294. IFS="$OLD_IFS"
  295. }
  296. # Get user value
  297. get_user_value() {
  298. grep "^${1//$/}=" $USER_DATA/user.conf |awk -F "'" '{print $2}'
  299. }
  300. # Update user value in user.conf
  301. update_user_value() {
  302. key="${2//$}"
  303. lnr=$(grep -n "^$key='" $VESTA/data/users/$1/user.conf |cut -f 1 -d ':')
  304. if [ ! -z "$lnr" ]; then
  305. sed -i "$lnr d" $VESTA/data/users/$1/user.conf
  306. sed -i "$lnr i\\$key='${3}'" $VESTA/data/users/$1/user.conf
  307. fi
  308. }
  309. # Increase user counter
  310. increase_user_value() {
  311. key="${2//$}"
  312. factor="${3-1}"
  313. conf="$VESTA/data/users/$1/user.conf"
  314. old=$(grep "$key=" $conf | cut -f 2 -d \')
  315. if [ -z "$old" ]; then
  316. old=0
  317. fi
  318. new=$((old + factor))
  319. sed -i "s/$key='$old'/$key='$new'/g" $conf
  320. }
  321. # Decrease user counter
  322. decrease_user_value() {
  323. key="${2//$}"
  324. factor="${3-1}"
  325. conf="$VESTA/data/users/$1/user.conf"
  326. old=$(grep "$key=" $conf | cut -f 2 -d \')
  327. if [ -z "$old" ]; then
  328. old=0
  329. fi
  330. if [ "$old" -le 1 ]; then
  331. new=0
  332. else
  333. new=$((old - factor))
  334. fi
  335. if [ "$new" -lt 0 ]; then
  336. new=0
  337. fi
  338. sed -i "s/$key='$old'/$key='$new'/g" $conf
  339. }
  340. # Recalculate U_DISK value
  341. recalc_user_disk_usage() {
  342. u_usage=0
  343. if [ -f "$USER_DATA/web.conf" ]; then
  344. usage=0
  345. dusage=$(grep 'U_DISK=' $USER_DATA/web.conf |\
  346. awk -F "U_DISK='" '{print $2}' | cut -f 1 -d \')
  347. for disk_usage in $dusage; do
  348. usage=$((usage + disk_usage))
  349. done
  350. d=$(grep "U_DISK_WEB='" $USER_DATA/user.conf | cut -f 2 -d \')
  351. sed -i "s/U_DISK_WEB='$d'/U_DISK_WEB='$usage'/g" $USER_DATA/user.conf
  352. u_usage=$((u_usage + usage))
  353. fi
  354. if [ -f "$USER_DATA/mail.conf" ]; then
  355. usage=0
  356. dusage=$(grep 'U_DISK=' $USER_DATA/mail.conf |\
  357. awk -F "U_DISK='" '{print $2}' | cut -f 1 -d \')
  358. for disk_usage in $dusage; do
  359. usage=$((usage + disk_usage))
  360. done
  361. d=$(grep "U_DISK_MAIL='" $USER_DATA/user.conf | cut -f 2 -d \')
  362. sed -i "s/U_DISK_MAIL='$d'/U_DISK_MAIL='$usage'/g" $USER_DATA/user.conf
  363. u_usage=$((u_usage + usage))
  364. fi
  365. if [ -f "$USER_DATA/db.conf" ]; then
  366. usage=0
  367. dusage=$(grep 'U_DISK=' $USER_DATA/db.conf |\
  368. awk -F "U_DISK='" '{print $2}' | cut -f 1 -d \')
  369. for disk_usage in $dusage; do
  370. usage=$((usage + disk_usage))
  371. done
  372. d=$(grep "U_DISK_DB='" $USER_DATA/user.conf | cut -f 2 -d \')
  373. sed -i "s/U_DISK_DB='$d'/U_DISK_DB='$usage'/g" $USER_DATA/user.conf
  374. u_usage=$((u_usage + usage))
  375. fi
  376. usage=$(grep 'U_DISK_DIRS=' $USER_DATA/user.conf | cut -f 2 -d "'")
  377. u_usage=$((u_usage + usage))
  378. old=$(grep "U_DISK='" $USER_DATA/user.conf | cut -f 2 -d \')
  379. sed -i "s/U_DISK='$old'/U_DISK='$u_usage'/g" $USER_DATA/user.conf
  380. }
  381. # Recalculate U_BANDWIDTH value
  382. recalc_user_bandwidth_usage() {
  383. usage=0
  384. bandwidth_usage=$(grep 'U_BANDWIDTH=' $USER_DATA/web.conf |\
  385. awk -F "U_BANDWIDTH='" '{print $2}'|cut -f 1 -d \')
  386. for bandwidth in $bandwidth_usage; do
  387. usage=$((usage + bandwidth))
  388. done
  389. old=$(grep "U_BANDWIDTH='" $USER_DATA/user.conf | cut -f 2 -d \')
  390. sed -i "s/U_BANDWIDTH='$old'/U_BANDWIDTH='$usage'/g" $USER_DATA/user.conf
  391. }
  392. # Get next cron job id
  393. get_next_cronjob() {
  394. if [ -z "$job" ]; then
  395. curr_str=$(grep "JOB=" $USER_DATA/cron.conf|cut -f 2 -d \'|\
  396. sort -n|tail -n1)
  397. job="$((curr_str +1))"
  398. fi
  399. }
  400. # Sort cron jobs by id
  401. sort_cron_jobs() {
  402. cat $USER_DATA/cron.conf |sort -n -k 2 -t \' > $USER_DATA/cron.tmp
  403. mv -f $USER_DATA/cron.tmp $USER_DATA/cron.conf
  404. }
  405. # Sync cronjobs with system cron
  406. sync_cron_jobs() {
  407. source $USER_DATA/user.conf
  408. if [ -e "/var/spool/cron/crontabs" ]; then
  409. crontab="/var/spool/cron/crontabs/$user"
  410. else
  411. crontab="/var/spool/cron/$user"
  412. fi
  413. rm -f $crontab
  414. if [ "$CRON_REPORTS" = 'yes' ]; then
  415. echo "MAILTO=$CONTACT" > $crontab
  416. echo 'CONTENT_TYPE="text/plain; charset=utf-8"' >> $crontab
  417. fi
  418. while read line; do
  419. eval $line
  420. if [ "$SUSPENDED" = 'no' ]; then
  421. echo "$MIN $HOUR $DAY $MONTH $WDAY $CMD" |\
  422. sed -e "s/%quote%/'/g" -e "s/%dots%/:/g" \
  423. >> $crontab
  424. fi
  425. done < $USER_DATA/cron.conf
  426. chown $user:$user $crontab
  427. chmod 600 $crontab
  428. }
  429. # User format validator
  430. is_user_format_valid() {
  431. if [ ${#1} -eq 1 ]; then
  432. if ! [[ "$1" =~ ^^[[:alnum:]]$ ]]; then
  433. check_result $E_INVALID "invalid $2 format :: $1"
  434. fi
  435. else
  436. if ! [[ "$1" =~ ^[[:alnum:]][-|\.|_[:alnum:]]{0,28}[[:alnum:]]$ ]]
  437. then
  438. check_result $E_INVALID "invalid $2 format :: $1"
  439. fi
  440. fi
  441. }
  442. # Domain format validator
  443. is_domain_format_valid() {
  444. object_name=${2-domain}
  445. exclude="[!|@|#|$|^|&|*|(|)|+|=|{|}|:|,|<|>|?|_|/|\|\"|'|;|%|\`| ]"
  446. if [[ $1 =~ $exclude ]] || [[ $1 =~ ^[0-9]+$ ]] || [[ $1 =~ "\.\." ]]; then
  447. check_result $E_INVALID "invalid $object_name format :: $1"
  448. fi
  449. }
  450. # Alias forman validator
  451. is_alias_format_valid() {
  452. for object in ${1//,/ }; do
  453. exclude="[!|@|#|$|^|&|(|)|+|=|{|}|:|<|>|?|_|/|\|\"|'|;|%|\`| ]"
  454. if [[ "$object" =~ $exclude ]]; then
  455. check_result $E_INVALID "invalid alias format :: $object"
  456. fi
  457. if [[ "$object" =~ [*] ]] && ! [[ "$object" =~ ^[*]\..* ]]; then
  458. check_result $E_INVALID "invalid alias format :: $object"
  459. fi
  460. done
  461. }
  462. # IP format validator
  463. is_ip_format_valid() {
  464. object_name=${2-ip}
  465. ip_regex='([1-9]?[0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])'
  466. ip_clean=$(echo "${1%/*}")
  467. if ! [[ $ip_clean =~ ^$ip_regex\.$ip_regex\.$ip_regex\.$ip_regex$ ]]; then
  468. check_result $E_INVALID "invalid $object_name format :: $1"
  469. fi
  470. if [ $1 != "$ip_clean" ]; then
  471. ip_cidr="$ip_clean/"
  472. ip_cidr=$(echo "${1#$ip_cidr}")
  473. if [[ "$ip_cidr" -gt 32 ]] || [[ "$ip_cidr" =~ [:alnum:] ]]; then
  474. check_result $E_INVALID "invalid $object_name format :: $1"
  475. fi
  476. fi
  477. }
  478. # Proxy extention format validator
  479. is_extention_format_valid() {
  480. exclude="[!|#|$|^|&|(|)|+|=|{|}|:|@|<|>|?|/|\|\"|'|;|%|\`| ]"
  481. if [[ "$1" =~ $exclude ]]; then
  482. check_result $E_INVALID "invalid proxy extention format :: $1"
  483. fi
  484. }
  485. # Number format validator
  486. is_number_format_valid() {
  487. object_name=${2-number}
  488. if ! [[ "$1" =~ ^[0-9]+$ ]] ; then
  489. check_result $E_INVALID "invalid $object_name format :: $1"
  490. fi
  491. }
  492. # Autoreply format validator
  493. is_autoreply_format_valid() {
  494. if [[ "$1" =~ [$|\`] ]] || [ 10240 -le ${#1} ]; then
  495. check_result $E_INVALID "invalid autoreply format :: $1"
  496. fi
  497. }
  498. # Boolean format validator
  499. is_boolean_format_valid() {
  500. if [ "$1" != 'yes' ] && [ "$1" != 'no' ]; then
  501. check_result $E_INVALID "invalid $2 format :: $1"
  502. fi
  503. }
  504. # Common format validator
  505. is_common_format_valid() {
  506. exclude="[!|#|$|^|&|(|)|+|=|{|}|:|<|>|?|/|\|\"|'|;|%|\`| ]"
  507. if [[ "$1" =~ $exclude ]]; then
  508. check_result $E_INVALID "invalid $2 format :: $1"
  509. fi
  510. if [ 400 -le ${#1} ]; then
  511. check_result $E_INVALID "invalid $2 format :: $1"
  512. fi
  513. if [[ "$1" =~ @ ]] && [ ${#1} -gt 1 ] ; then
  514. check_result $E_INVALID "invalid $2 format :: $1"
  515. fi
  516. if [[ $1 =~ \* ]]; then
  517. if [ "$(echo $1 | grep -o '*'|wc -l)" -gt 1 ]; then
  518. check_result $E_INVALID "invalid $2 format :: $1"
  519. fi
  520. fi
  521. }
  522. # Database format validator
  523. is_database_format_valid() {
  524. exclude="[!|@|#|$|^|&|*|(|)|+|=|{|}|:|,|<|>|?|/|\|\"|'|;|%|\`| ]"
  525. if [[ "$1" =~ $exclude ]] || [ 65 -le ${#1} ]; then
  526. check_result $E_INVALID "invalid $2 format :: $1"
  527. fi
  528. }
  529. # Date format validator
  530. is_date_format_valid() {
  531. if ! [[ "$1" =~ ^[0-9][0-9][0-9][0-9]-[0-9][0-9]-[0-9][0-9]$ ]]; then
  532. check_result $E_INVALID "invalid date format :: $1"
  533. fi
  534. }
  535. # Database user validator
  536. is_dbuser_format_valid() {
  537. exclude="[!|@|#|$|^|&|*|(|)|+|=|{|}|:|,|<|>|?|/|\|\"|'|;|%|\`| ]"
  538. if [[ "$1" =~ $exclude ]] || [ 17 -le ${#1} ]; then
  539. check_result $E_INVALID "invalid $2 format :: $1"
  540. fi
  541. }
  542. # DNS record type validator
  543. is_dns_type_format_valid() {
  544. known_dnstype='A,AAAA,NS,CNAME,MX,TXT,SRV,DNSKEY,KEY,IPSECKEY,PTR,SPF,TLSA'
  545. if [ -z "$(echo $known_dnstype |grep -w $1)" ]; then
  546. check_result $E_INVALID "invalid dns record type format :: $1"
  547. fi
  548. }
  549. # DNS record validator
  550. is_dns_record_format_valid() {
  551. if [ "$rtype" = 'A' ]; then
  552. is_ip_format_valid "$1"
  553. fi
  554. if [ "$rtype" = 'NS' ]; then
  555. is_domain_format_valid "$1" 'ns_record'
  556. fi
  557. if [ "$rtype" = 'MX' ]; then
  558. is_domain_format_valid "$1" 'mx_record'
  559. is_int_format_valid "$priority" 'priority_record'
  560. fi
  561. }
  562. # Email format validator
  563. is_email_format_valid() {
  564. if [[ ! "$1" =~ ^[A-Za-z0-9._%+-]+@[[:alnum:].-]+\.[A-Za-z]{2,63}$ ]] ; then
  565. check_result $E_INVALID "invalid email format :: $1"
  566. fi
  567. }
  568. # Firewall action validator
  569. is_fw_action_format_valid() {
  570. if [ "$1" != "ACCEPT" ] && [ "$1" != 'DROP' ] ; then
  571. check_result $E_INVALID "invalid action format :: $1"
  572. fi
  573. }
  574. # Firewall protocol validator
  575. is_fw_protocol_format_valid() {
  576. if [ "$1" != "ICMP" ] && [ "$1" != 'UDP' ] && [ "$1" != 'TCP' ] ; then
  577. check_result $E_INVALID "invalid protocol format :: $1"
  578. fi
  579. }
  580. # Firewall port validator
  581. is_fw_port_format_valid() {
  582. if [ "${#1}" -eq 1 ]; then
  583. if ! [[ "$1" =~ [0-9] ]]; then
  584. check_result $E_INVALID "invalid port format :: $1"
  585. fi
  586. else
  587. if ! [[ "$1" =~ ^[0-9][-|,|:|0-9]{0,30}[0-9]$ ]]
  588. then
  589. check_result $E_INVALID "invalid port format :: $1"
  590. fi
  591. fi
  592. }
  593. # Integer validator
  594. is_int_format_valid() {
  595. if ! [[ "$1" =~ ^[0-9]+$ ]] ; then
  596. check_result $E_INVALID "invalid $2 format :: $1"
  597. fi
  598. }
  599. # Interface validator
  600. is_interface_format_valid() {
  601. netdevices=$(cat /proc/net/dev |grep : |cut -f 1 -d : |tr -d ' ')
  602. if [ -z $(echo "$netdevices" |grep -x $1) ]; then
  603. check_result $E_INVALID "invalid interface format :: $1"
  604. fi
  605. }
  606. # IP status validator
  607. is_ip_status_format_valid() {
  608. if [ -z "$(echo shared,dedicated | grep -w $1 )" ]; then
  609. check_result $E_INVALID "invalid status format :: $1"
  610. fi
  611. }
  612. # Cron validator
  613. is_cron_format_valid() {
  614. limit=60
  615. check_format=''
  616. if [ "$2" = 'day' ]; then
  617. limit=31
  618. fi
  619. if [ "$2" = 'month' ]; then
  620. limit=12
  621. fi
  622. if [ "$2" = 'wday' ]; then
  623. limit=7
  624. fi
  625. if [ "$1" = '*' ]; then
  626. check_format='ok'
  627. fi
  628. if [[ "$1" =~ ^[\*]+[/]+[0-9] ]]; then
  629. if [ "$(echo $1 |cut -f 2 -d /)" -lt $limit ]; then
  630. check_format='ok'
  631. fi
  632. fi
  633. if [[ "$1" =~ ^[0-9][-|,|0-9]{0,28}[0-9]$ ]]; then
  634. check_format='ok'
  635. crn_values=${1//,/ }
  636. crn_values=${crn_values//-/ }
  637. for crn_vl in $crn_values; do
  638. if [ "$crn_vl" -gt $limit ]; then
  639. check_format='invalid'
  640. fi
  641. done
  642. fi
  643. if [[ "$1" =~ ^[0-9]+$ ]] && [ "$1" -lt $limit ]; then
  644. check_format='ok'
  645. fi
  646. if [ "$check_format" != 'ok' ]; then
  647. check_result $E_INVALID "invalid $2 format :: $1"
  648. fi
  649. }
  650. # Name validator
  651. is_name_format_valid() {
  652. if ! [[ "$1" =~ ^[[:alnum:]][-|\ |\.|_[:alnum:]]{0,28}[[:alnum:]]$ ]]; then
  653. check_result $E_INVALID "invalid $2 format :: $1"
  654. fi
  655. }
  656. # Object validator
  657. is_object_format_valid() {
  658. if ! [[ "$1" =~ ^[[:alnum:]][-|\.|_[:alnum:]]{0,28}[[:alnum:]]$ ]]; then
  659. check_result $E_INVALID "invalid $2 format :: $1"
  660. fi
  661. }
  662. # Password validator
  663. is_password_format_valid() {
  664. if [ "${#1}" -lt '6' ]; then
  665. check_result $E_INVALID "invalid password format :: $1"
  666. fi
  667. }
  668. # Format validation controller
  669. is_format_valid() {
  670. for arg_name in $*; do
  671. eval arg=\$$arg_name
  672. if [ ! -z "$arg" ]; then
  673. case $arg_name in
  674. account) is_user_format_valid "$arg" "$arg_name";;
  675. action) is_fw_action_format_valid "$arg";;
  676. aliases) is_alias_format_valid "$arg" ;;
  677. antispam) is_boolean_format_valid "$arg" 'antispam' ;;
  678. antivirus) is_boolean_format_valid "$arg" 'antivirus' ;;
  679. autoreply) is_autoreply_format_valid "$arg" ;;
  680. backup) is_user_format_valid "$arg" 'backup' ;;
  681. charset) is_object_format_valid "$arg" "$arg_name" ;;
  682. charsets) is_common_format_valid "$arg" 'charsets' ;;
  683. comment) is_object_format_valid "$arg" 'comment' ;;
  684. database) is_database_format_valid "$arg" 'database';;
  685. day) is_cron_format_valid "$arg" $arg_name ;;
  686. dbpass) is_password_format_valid "$arg" ;;
  687. dbuser) is_dbuser_format_valid "$arg" 'dbuser';;
  688. dkim) is_boolean_format_valid "$arg" 'dkim' ;;
  689. dkim_size) is_int_format_valid "$arg" ;;
  690. domain) is_domain_format_valid "$arg" ;;
  691. dvalue) is_dns_record_format_valid "$arg";;
  692. email) is_email_format_valid "$arg" ;;
  693. exp) is_date_format_valid "$arg" ;;
  694. extentions) is_common_format_valid "$arg" 'extentions' ;;
  695. fname) is_name_format_valid "$arg" "first name" ;;
  696. ftp_password) is_password_format_valid "$arg" ;;
  697. ftp_user) is_user_format_valid "$arg" "$arg_name" ;;
  698. host) is_object_format_valid "$arg" "$arg_name" ;;
  699. hour) is_cron_format_valid "$arg" $arg_name ;;
  700. id) is_int_format_valid "$arg" 'id' ;;
  701. ip) is_ip_format_valid "$arg" ;;
  702. ip_name) is_domain_format_valid "$arg" 'IP name';;
  703. ip_status) is_ip_status_format_valid "$arg" ;;
  704. job) is_int_format_valid "$arg" 'job' ;;
  705. key) is_user_format_valid "$arg" "$arg_name" ;;
  706. lname) is_name_format_valid "$arg" "last name" ;;
  707. malias) is_user_format_valid "$arg" "$arg_name" ;;
  708. max_db) is_int_format_valid "$arg" 'max db';;
  709. min) is_cron_format_valid "$arg" $arg_name ;;
  710. month) is_cron_format_valid "$arg" $arg_name ;;
  711. nat_ip) is_ip_format_valid "$arg" ;;
  712. netmask) is_ip_format_valid "$arg" 'netmask' ;;
  713. newid) is_int_format_valid "$arg" 'id' ;;
  714. ns1) is_domain_format_valid "$arg" 'ns1' ;;
  715. ns2) is_domain_format_valid "$arg" 'ns2' ;;
  716. ns3) is_domain_format_valid "$arg" 'ns3' ;;
  717. ns4) is_domain_format_valid "$arg" 'ns4' ;;
  718. ns5) is_domain_format_valid "$arg" 'ns5' ;;
  719. ns6) is_domain_format_valid "$arg" 'ns6' ;;
  720. ns7) is_domain_format_valid "$arg" 'ns7' ;;
  721. ns8) is_domain_format_valid "$arg" 'ns8' ;;
  722. object) is_name_format_valid "$arg" 'object';;
  723. package) is_object_format_valid "$arg" "$arg_name" ;;
  724. password) is_password_format_valid "$arg" ;;
  725. port) is_int_format_valid "$arg" 'port' ;;
  726. port_ext) is_fw_port_format_valid "$arg";;
  727. protocol) is_fw_protocol_format_valid "$arg" ;;
  728. proxy_ext) is_extention_format_valid "$arg" ;;
  729. quota) is_int_format_valid "$arg" 'quota' ;;
  730. record) is_common_format_valid "$arg" 'record';;
  731. restart) is_boolean_format_valid "$arg" 'restart' ;;
  732. rtype) is_dns_type_format_valid "$arg" ;;
  733. rule) is_int_format_valid "$arg" "rule id" ;;
  734. soa) is_domain_format_valid "$arg" 'SOA' ;;
  735. stats_pass) is_password_format_valid "$arg" ;;
  736. stats_user) is_user_format_valid "$arg" "$arg_name" ;;
  737. template) is_object_format_valid "$arg" "$arg_name" ;;
  738. ttl) is_int_format_valid "$arg" 'ttl';;
  739. user) is_user_format_valid "$arg" $arg_name;;
  740. wday) is_cron_format_valid "$arg" $arg_name ;;
  741. esac
  742. fi
  743. done
  744. }