main.sh 30 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018
  1. #!/usr/bin/env bash
  2. # Internal variables
  3. HOMEDIR='/home'
  4. BACKUP='/backup'
  5. BACKUP_GZIP=9
  6. BACKUP_DISK_LIMIT=95
  7. BACKUP_LA_LIMIT=5
  8. RRD_STEP=300
  9. BIN=$VESTA/bin
  10. USER_DATA=$VESTA/data/users/$user
  11. WEBTPL=$VESTA/data/templates/web
  12. DNSTPL=$VESTA/data/templates/dns
  13. RRD=$VESTA/web/rrd
  14. SENDMAIL="$VESTA/web/inc/mail-wrapper.php"
  15. # Return codes
  16. OK=0
  17. E_ARGS=1
  18. E_INVALID=2
  19. E_NOTEXIST=3
  20. E_EXISTS=4
  21. E_SUSPENDED=5
  22. E_UNSUSPENDED=6
  23. E_INUSE=7
  24. E_LIMIT=8
  25. E_PASSWORD=9
  26. E_FORBIDEN=10
  27. E_DISABLED=11
  28. E_PARSING=12
  29. E_DISK=13
  30. E_LA=14
  31. E_CONNECT=15
  32. E_FTP=16
  33. E_DB=17
  34. E_RRD=18
  35. E_UPDATE=19
  36. E_RESTART=20
  37. E_TEAPOT=418
  38. # Event string for logger
  39. for ((I=1; I <= $# ; I++)); do
  40. if [[ "$HIDE" != $I ]]; then
  41. ARGUMENTS="$ARGUMENTS '$(eval echo \$${I})'"
  42. else
  43. ARGUMENTS="$ARGUMENTS '******'"
  44. fi
  45. done
  46. # Log event function
  47. log_event() {
  48. if [ -z "$time" ]; then
  49. LOG_TIME="$(date +'%F %T') $(basename $0)"
  50. else
  51. LOG_TIME="$date $time $(basename $0)"
  52. fi
  53. if [ "$1" -eq 0 ]; then
  54. echo "$LOG_TIME $2" >> $VESTA/log/system.log
  55. else
  56. echo "$LOG_TIME $2 [Error $1]" >> $VESTA/log/error.log
  57. fi
  58. }
  59. # Log user history
  60. log_history() {
  61. cmd=$1
  62. undo=${2-no}
  63. log_user=${3-$user}
  64. log=$VESTA/data/users/$log_user/history.log
  65. touch $log
  66. if [ '99' -lt "$(wc -l $log |cut -f 1 -d ' ')" ]; then
  67. tail -n 49 $log > $log.moved
  68. mv -f $log.moved $log
  69. chmod 660 $log
  70. fi
  71. if [ -z "$date" ]; then
  72. time_n_date=$(date +'%T %F')
  73. time=$(echo "$time_n_date" |cut -f 1 -d \ )
  74. date=$(echo "$time_n_date" |cut -f 2 -d \ )
  75. fi
  76. curr_str=$(grep "ID=" $log | cut -f 2 -d \' | sort -n | tail -n1)
  77. id="$((curr_str +1))"
  78. echo "ID='$id' DATE='$date' TIME='$time' CMD='$cmd' UNDO='$undo'" >> $log
  79. }
  80. # Result checker
  81. check_result() {
  82. if [ $1 -ne 0 ]; then
  83. echo "Error: $2"
  84. if [ ! -z "$3" ]; then
  85. log_event "$3" "$ARGUMENTS"
  86. exit $3
  87. else
  88. log_event "$1" "$ARGUMENTS"
  89. exit $1
  90. fi
  91. fi
  92. }
  93. # Argument list checker
  94. check_args() {
  95. if [ "$1" -gt "$2" ]; then
  96. echo "Usage: $(basename $0) $3"
  97. check_result $E_ARGS "not enought arguments" >/dev/null
  98. fi
  99. }
  100. # Subsystem checker
  101. is_system_enabled() {
  102. if [ -z "$1" ] || [ "$1" = no ]; then
  103. check_result $E_DISABLED "$2 is not enabled"
  104. fi
  105. }
  106. # User package check
  107. is_package_full() {
  108. case "$1" in
  109. WEB_DOMAINS) used=$(wc -l $USER_DATA/web.conf);;
  110. WEB_ALIASES) used=$(echo $aliases |tr ',' '\n' |wc -l);;
  111. DNS_DOMAINS) used=$(wc -l $USER_DATA/dns.conf);;
  112. DNS_RECORDS) used=$(wc -l $USER_DATA/dns/$domain.conf);;
  113. MAIL_DOMAINS) used=$(wc -l $USER_DATA/mail.conf);;
  114. MAIL_ACCOUNTS) used=$(wc -l $USER_DATA/mail/$domain.conf);;
  115. DATABASES) used=$(wc -l $USER_DATA/db.conf);;
  116. CRON_JOBS) used=$(wc -l $USER_DATA/cron.conf);;
  117. esac
  118. used=$(echo "$used"| cut -f 1 -d \ )
  119. limit=$(grep "^$1=" $USER_DATA/user.conf |cut -f 2 -d \')
  120. if [ "$limit" != 'unlimited' ] && [[ "$used" -ge "$limit" ]]; then
  121. check_result $E_LIMIT "$1 limit is reached :: upgrade user package"
  122. fi
  123. }
  124. # User owner for reseller plugin
  125. get_user_owner() {
  126. if [ -z "$RESELLER_KEY" ]; then
  127. owner='admin'
  128. else
  129. owner=$(grep "^OWNER" $USER_DATA/user.conf| cut -f 2 -d \')
  130. if [ -z "$owner" ]; then
  131. owner='admin'
  132. fi
  133. fi
  134. }
  135. # Random password generator
  136. generate_password() {
  137. matrix=$1
  138. lenght=$2
  139. if [ -z "$matrix" ]; then
  140. matrix=0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz
  141. fi
  142. if [ -z "$lenght" ]; then
  143. lenght=10
  144. fi
  145. i=1
  146. while [ $i -le $lenght ]; do
  147. pass="$pass${matrix:$(($RANDOM%${#matrix})):1}"
  148. ((i++))
  149. done
  150. echo "$pass"
  151. }
  152. # Package existence check
  153. is_package_valid() {
  154. if [ -z "$1" ]; then
  155. pkg_dir="$VESTA/data/packages"
  156. fi
  157. if [ ! -e "$pkg_dir/$package.pkg" ]; then
  158. check_result $E_NOTEXIST "package $package doesn't exist"
  159. fi
  160. }
  161. # Validate system type
  162. is_type_valid() {
  163. if [ -z "$(echo $1 | grep -w $2)" ]; then
  164. check_result $E_INVALID "$2 type is invalid"
  165. fi
  166. }
  167. # Check user backup settings
  168. is_backup_enabled() {
  169. BACKUPS=$(grep "^BACKUPS=" $USER_DATA/user.conf | cut -f2 -d \')
  170. if [ -z "$BACKUPS" ] || [[ "$BACKUPS" -le '0' ]]; then
  171. check_result $E_DISABLED "user backup is disabled"
  172. fi
  173. }
  174. # Check user backup settings
  175. is_backup_scheduled() {
  176. if [ -e "$VESTA/data/queue/backup.pipe" ]; then
  177. check_q=$(grep " $user " $VESTA/data/queue/backup.pipe | grep $1)
  178. if [ ! -z "$check_q" ]; then
  179. check_result $E_EXISTS "$1 is already scheduled"
  180. fi
  181. fi
  182. }
  183. # Check if object is new
  184. is_object_new() {
  185. if [ $2 = 'USER' ]; then
  186. if [ -d "$USER_DATA" ]; then
  187. object="OK"
  188. fi
  189. else
  190. object=$(grep "$2='$3'" $USER_DATA/$1.conf)
  191. fi
  192. if [ ! -z "$object" ]; then
  193. check_result $E_EXISTS "$2=$3 is already exists"
  194. fi
  195. }
  196. # Check if object is valid
  197. is_object_valid() {
  198. if [ $2 = 'USER' ]; then
  199. user_vst_dir=$(basename $3)
  200. if [ ! -d "$VESTA/data/users/$user_vst_dir" ]; then
  201. check_result $E_NOTEXIST "$1 $3 doesn't exist"
  202. fi
  203. else
  204. object=$(grep "$2='$3'" $VESTA/data/users/$user/$1.conf)
  205. if [ -z "$object" ]; then
  206. arg1=$(basename $1)
  207. arg2=$(echo $2 |tr '[:upper:]' '[:lower:]')
  208. check_result $E_NOTEXIST "$arg1 $arg2 $3 doesn't exist"
  209. fi
  210. fi
  211. }
  212. # Check if object is supended
  213. is_object_suspended() {
  214. if [ $2 = 'USER' ]; then
  215. spnd=$(cat $USER_DATA/$1.conf|grep "SUSPENDED='yes'")
  216. else
  217. spnd=$(grep "$2='$3'" $USER_DATA/$1.conf|grep "SUSPENDED='yes'")
  218. fi
  219. if [ -z "$spnd" ]; then
  220. check_result $E_UNSUSPENDED "$(basename $1) $3 is not suspended"
  221. fi
  222. }
  223. # Check if object is unsupended
  224. is_object_unsuspended() {
  225. if [ $2 = 'USER' ]; then
  226. spnd=$(cat $USER_DATA/$1.conf |grep "SUSPENDED='yes'")
  227. else
  228. spnd=$(grep "$2='$3'" $USER_DATA/$1.conf |grep "SUSPENDED='yes'")
  229. fi
  230. if [ ! -z "$spnd" ]; then
  231. check_result $E_SUSPENDED "$(basename $1) $3 is suspended"
  232. fi
  233. }
  234. # Check if object value is empty
  235. is_object_value_empty() {
  236. str=$(grep "$2='$3'" $USER_DATA/$1.conf)
  237. eval $str
  238. eval value=$4
  239. if [ ! -z "$value" ] && [ "$value" != 'no' ]; then
  240. check_result $E_EXISTS "${4//$}=$value is already exists"
  241. fi
  242. }
  243. # Check if object value is empty
  244. is_object_value_exist() {
  245. str=$(grep "$2='$3'" $USER_DATA/$1.conf)
  246. eval $str
  247. eval value=$4
  248. if [ -z "$value" ] || [ "$value" = 'no' ]; then
  249. check_result $E_NOTEXIST "${4//$}=$value doesn't exist"
  250. fi
  251. }
  252. # Check if password is transmitted via file
  253. is_password_valid() {
  254. if [[ "$password" =~ ^/tmp/ ]]; then
  255. if [ -f "$password" ]; then
  256. password="$(head -n1 $password)"
  257. fi
  258. fi
  259. }
  260. # Check if hash is transmitted via file
  261. is_hash_valid() {
  262. if [[ "$hash" =~ ^/tmp/ ]]; then
  263. if [ -f "$hash" ]; then
  264. hash="$(head -n1 $hash)"
  265. fi
  266. fi
  267. }
  268. # Check if directory is a symlink
  269. is_dir_symlink() {
  270. if [[ -L "$1" ]]; then
  271. check_result $E_FORBIDEN "$1 directory is a symlink"
  272. fi
  273. }
  274. # Check if file exists
  275. if_file_exists() {
  276. if [[ -f "$1" ]]; then
  277. check_result $E_FORBIDEN "$1 file exists"
  278. fi
  279. }
  280. # Check if directory exists
  281. if_dir_exists() {
  282. if [[ -d "$1" ]]; then
  283. check_result $E_FORBIDEN "$1 directory exists"
  284. fi
  285. }
  286. # Get object value
  287. get_object_value() {
  288. object=$(grep "$2='$3'" $USER_DATA/$1.conf)
  289. eval "$object"
  290. eval echo $4
  291. }
  292. # Update object value
  293. update_object_value() {
  294. row=$(grep -nF "$2='$3'" $USER_DATA/$1.conf)
  295. lnr=$(echo $row | cut -f 1 -d ':')
  296. object=$(echo $row | sed "s/^$lnr://")
  297. eval "$object"
  298. eval old="$4"
  299. old=$(echo "$old" | sed -e 's/\\/\\\\/g' -e 's/&/\\&/g' -e 's/\//\\\//g')
  300. new=$(echo "$5" | sed -e 's/\\/\\\\/g' -e 's/&/\\&/g' -e 's/\//\\\//g')
  301. sed -i "$lnr s/${4//$/}='${old//\*/\\*}'/${4//$/}='${new//\*/\\*}'/g" \
  302. $USER_DATA/$1.conf
  303. }
  304. # Add object key
  305. add_object_key() {
  306. row=$(grep -n "$2='$3'" $USER_DATA/$1.conf)
  307. lnr=$(echo $row | cut -f 1 -d ':')
  308. object=$(echo $row | sed "s/^$lnr://")
  309. if [ -z "$(echo $object |grep $4=)" ]; then
  310. eval old="$4"
  311. sed -i "$lnr s/$5='/$4='' $5='/" $USER_DATA/$1.conf
  312. fi
  313. }
  314. # Search objects
  315. search_objects() {
  316. OLD_IFS="$IFS"
  317. IFS=$'\n'
  318. for line in $(grep $2=\'$3\' $USER_DATA/$1.conf); do
  319. eval $line
  320. eval echo \$$4
  321. done
  322. IFS="$OLD_IFS"
  323. }
  324. # Get user value
  325. get_user_value() {
  326. grep "^${1//$/}=" $USER_DATA/user.conf |awk -F "'" '{print $2}'
  327. }
  328. # Update user value in user.conf
  329. update_user_value() {
  330. key="${2//$}"
  331. lnr=$(grep -n "^$key='" $VESTA/data/users/$1/user.conf |cut -f 1 -d ':')
  332. if [ ! -z "$lnr" ]; then
  333. sed -i "$lnr d" $VESTA/data/users/$1/user.conf
  334. sed -i "$lnr i\\$key='${3}'" $VESTA/data/users/$1/user.conf
  335. fi
  336. }
  337. # Increase user counter
  338. increase_user_value() {
  339. key="${2//$}"
  340. factor="${3-1}"
  341. conf="$VESTA/data/users/$1/user.conf"
  342. old=$(grep "$key=" $conf | cut -f 2 -d \')
  343. if [ -z "$old" ]; then
  344. old=0
  345. fi
  346. new=$((old + factor))
  347. sed -i "s/$key='$old'/$key='$new'/g" $conf
  348. }
  349. # Decrease user counter
  350. decrease_user_value() {
  351. key="${2//$}"
  352. factor="${3-1}"
  353. conf="$VESTA/data/users/$1/user.conf"
  354. old=$(grep "$key=" $conf | cut -f 2 -d \')
  355. if [ -z "$old" ]; then
  356. old=0
  357. fi
  358. if [ "$old" -le 1 ]; then
  359. new=0
  360. else
  361. new=$((old - factor))
  362. fi
  363. if [ "$new" -lt 0 ]; then
  364. new=0
  365. fi
  366. sed -i "s/$key='$old'/$key='$new'/g" $conf
  367. }
  368. # Notify user
  369. send_notice() {
  370. topic=$1
  371. notice=$2
  372. if [ "$notify" = 'yes' ]; then
  373. touch $USER_DATA/notifications.conf
  374. chmod 660 $USER_DATA/notifications.conf
  375. time_n_date=$(date +'%T %F')
  376. time=$(echo "$time_n_date" |cut -f 1 -d \ )
  377. date=$(echo "$time_n_date" |cut -f 2 -d \ )
  378. nid=$(grep "NID=" $USER_DATA/notifications.conf |cut -f 2 -d \')
  379. nid=$(echo "$nid" |sort -n |tail -n1)
  380. if [ ! -z "$nid" ]; then
  381. nid="$((nid +1))"
  382. else
  383. nid=1
  384. fi
  385. str="NID='$nid' TOPIC='$topic' NOTICE='$notice' TYPE='$type'"
  386. str="$str ACK='no' TIME='$time' DATE='$date'"
  387. echo "$str" >> $USER_DATA/notifications.conf
  388. if [ -z "$(grep NOTIFICATIONS $USER_DATA/user.conf)" ]; then
  389. sed -i "s/^TIME/NOTIFICATIONS='yes'\nTIME/g" $USER_DATA/user.conf
  390. else
  391. update_user_value "$user" '$NOTIFICATIONS' "yes"
  392. fi
  393. fi
  394. }
  395. # Recalculate U_DISK value
  396. recalc_user_disk_usage() {
  397. u_usage=0
  398. if [ -f "$USER_DATA/web.conf" ]; then
  399. usage=0
  400. dusage=$(grep 'U_DISK=' $USER_DATA/web.conf |\
  401. awk -F "U_DISK='" '{print $2}' | cut -f 1 -d \')
  402. for disk_usage in $dusage; do
  403. usage=$((usage + disk_usage))
  404. done
  405. d=$(grep "U_DISK_WEB='" $USER_DATA/user.conf | cut -f 2 -d \')
  406. sed -i "s/U_DISK_WEB='$d'/U_DISK_WEB='$usage'/g" $USER_DATA/user.conf
  407. u_usage=$((u_usage + usage))
  408. fi
  409. if [ -f "$USER_DATA/mail.conf" ]; then
  410. usage=0
  411. dusage=$(grep 'U_DISK=' $USER_DATA/mail.conf |\
  412. awk -F "U_DISK='" '{print $2}' | cut -f 1 -d \')
  413. for disk_usage in $dusage; do
  414. usage=$((usage + disk_usage))
  415. done
  416. d=$(grep "U_DISK_MAIL='" $USER_DATA/user.conf | cut -f 2 -d \')
  417. sed -i "s/U_DISK_MAIL='$d'/U_DISK_MAIL='$usage'/g" $USER_DATA/user.conf
  418. u_usage=$((u_usage + usage))
  419. fi
  420. if [ -f "$USER_DATA/db.conf" ]; then
  421. usage=0
  422. dusage=$(grep 'U_DISK=' $USER_DATA/db.conf |\
  423. awk -F "U_DISK='" '{print $2}' | cut -f 1 -d \')
  424. for disk_usage in $dusage; do
  425. usage=$((usage + disk_usage))
  426. done
  427. d=$(grep "U_DISK_DB='" $USER_DATA/user.conf | cut -f 2 -d \')
  428. sed -i "s/U_DISK_DB='$d'/U_DISK_DB='$usage'/g" $USER_DATA/user.conf
  429. u_usage=$((u_usage + usage))
  430. fi
  431. usage=$(grep 'U_DISK_DIRS=' $USER_DATA/user.conf | cut -f 2 -d "'")
  432. u_usage=$((u_usage + usage))
  433. old=$(grep "U_DISK='" $USER_DATA/user.conf | cut -f 2 -d \')
  434. sed -i "s/U_DISK='$old'/U_DISK='$u_usage'/g" $USER_DATA/user.conf
  435. }
  436. # Recalculate U_BANDWIDTH value
  437. recalc_user_bandwidth_usage() {
  438. usage=0
  439. bandwidth_usage=$(grep 'U_BANDWIDTH=' $USER_DATA/web.conf |\
  440. awk -F "U_BANDWIDTH='" '{print $2}'|cut -f 1 -d \')
  441. for bandwidth in $bandwidth_usage; do
  442. usage=$((usage + bandwidth))
  443. done
  444. old=$(grep "U_BANDWIDTH='" $USER_DATA/user.conf | cut -f 2 -d \')
  445. sed -i "s/U_BANDWIDTH='$old'/U_BANDWIDTH='$usage'/g" $USER_DATA/user.conf
  446. }
  447. # Get next cron job id
  448. get_next_cronjob() {
  449. if [ -z "$job" ]; then
  450. curr_str=$(grep "JOB=" $USER_DATA/cron.conf|cut -f 2 -d \'|\
  451. sort -n|tail -n1)
  452. job="$((curr_str +1))"
  453. fi
  454. }
  455. # Sort cron jobs by id
  456. sort_cron_jobs() {
  457. cat $USER_DATA/cron.conf |sort -n -k 2 -t \' > $USER_DATA/cron.tmp
  458. mv -f $USER_DATA/cron.tmp $USER_DATA/cron.conf
  459. }
  460. # Sync cronjobs with system cron
  461. sync_cron_jobs() {
  462. source $USER_DATA/user.conf
  463. if [ -e "/var/spool/cron/crontabs" ]; then
  464. crontab="/var/spool/cron/crontabs/$user"
  465. else
  466. crontab="/var/spool/cron/$user"
  467. fi
  468. rm -f $crontab
  469. if [ "$CRON_REPORTS" = 'yes' ]; then
  470. echo "MAILTO=$CONTACT" > $crontab
  471. echo 'CONTENT_TYPE="text/plain; charset=utf-8"' >> $crontab
  472. fi
  473. while read line; do
  474. eval $line
  475. if [ "$SUSPENDED" = 'no' ]; then
  476. echo "$MIN $HOUR $DAY $MONTH $WDAY $CMD" |\
  477. sed -e "s/%quote%/'/g" -e "s/%dots%/:/g" \
  478. >> $crontab
  479. fi
  480. done < $USER_DATA/cron.conf
  481. chown $user:$user $crontab
  482. chmod 600 $crontab
  483. }
  484. # User format validator
  485. is_user_format_valid() {
  486. if [ ${#1} -eq 1 ]; then
  487. if ! [[ "$1" =~ ^^[[:alnum:]]$ ]]; then
  488. check_result $E_INVALID "invalid $2 format :: $1"
  489. fi
  490. else
  491. if ! [[ "$1" =~ ^[[:alnum:]][-|\.|_[:alnum:]]{0,28}[[:alnum:]]$ ]]
  492. then
  493. check_result $E_INVALID "invalid $2 format :: $1"
  494. fi
  495. fi
  496. }
  497. # Domain format validator
  498. is_domain_format_valid() {
  499. object_name=${2-domain}
  500. exclude="[!|@|#|$|^|&|*|(|)|+|=|{|}|:|,|<|>|?|_|/|\|\"|'|;|%|\`| ]"
  501. if [[ $1 =~ $exclude ]] || [[ $1 =~ ^[0-9]+$ ]] || [[ $1 =~ "\.\." ]] || [[ $1 =~ "$(printf '\t')" ]]; then
  502. check_result $E_INVALID "invalid $object_name format :: $1"
  503. fi
  504. }
  505. # Alias forman validator
  506. is_alias_format_valid() {
  507. for object in ${1//,/ }; do
  508. exclude="[!|@|#|$|^|&|(|)|+|=|{|}|:|<|>|?|_|/|\|\"|'|;|%|\`| ]"
  509. if [[ "$object" =~ $exclude ]]; then
  510. check_result $E_INVALID "invalid alias format :: $object"
  511. fi
  512. if [[ "$object" =~ [*] ]] && ! [[ "$object" =~ ^[*]\..* ]]; then
  513. check_result $E_INVALID "invalid alias format :: $object"
  514. fi
  515. done
  516. }
  517. # IP format validator
  518. is_ip_format_valid() {
  519. object_name=${2-ip}
  520. ip_regex='([1-9]?[0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])'
  521. ip_clean=$(echo "${1%/*}")
  522. if ! [[ $ip_clean =~ ^$ip_regex\.$ip_regex\.$ip_regex\.$ip_regex$ ]]; then
  523. check_result $E_INVALID "invalid $object_name format :: $1"
  524. fi
  525. if [ $1 != "$ip_clean" ]; then
  526. ip_cidr="$ip_clean/"
  527. ip_cidr=$(echo "${1#$ip_cidr}")
  528. if [[ "$ip_cidr" -gt 32 ]] || [[ "$ip_cidr" =~ [:alnum:] ]]; then
  529. check_result $E_INVALID "invalid $object_name format :: $1"
  530. fi
  531. fi
  532. }
  533. # Proxy extention format validator
  534. is_extention_format_valid() {
  535. exclude="[!|#|$|^|&|(|)|+|=|{|}|:|@|<|>|?|/|\|\"|'|;|%|\`| ]"
  536. if [[ "$1" =~ $exclude ]]; then
  537. check_result $E_INVALID "invalid proxy extention format :: $1"
  538. fi
  539. }
  540. # Number format validator
  541. is_number_format_valid() {
  542. object_name=${2-number}
  543. if ! [[ "$1" =~ ^[0-9]+$ ]] ; then
  544. check_result $E_INVALID "invalid $object_name format :: $1"
  545. fi
  546. }
  547. # Autoreply format validator
  548. is_autoreply_format_valid() {
  549. if [[ "$1" =~ [$|\`] ]] || [ 10240 -le ${#1} ]; then
  550. check_result $E_INVALID "invalid autoreply format :: $1"
  551. fi
  552. }
  553. # Boolean format validator
  554. is_boolean_format_valid() {
  555. if [ "$1" != 'yes' ] && [ "$1" != 'no' ]; then
  556. check_result $E_INVALID "invalid $2 format :: $1"
  557. fi
  558. }
  559. # Common format validator
  560. is_common_format_valid() {
  561. exclude="[!|#|$|^|&|(|)|+|=|{|}|:|<|>|?|/|\|\"|'|;|%|\`| ]"
  562. if [[ "$1" =~ $exclude ]]; then
  563. check_result $E_INVALID "invalid $2 format :: $1"
  564. fi
  565. if [ 400 -le ${#1} ]; then
  566. check_result $E_INVALID "invalid $2 format :: $1"
  567. fi
  568. if [[ "$1" =~ @ ]] && [ ${#1} -gt 1 ] ; then
  569. check_result $E_INVALID "invalid $2 format :: $1"
  570. fi
  571. if [[ $1 =~ \* ]]; then
  572. if [[ "$(echo $1 | grep -o '\*\.' |wc -l)" -eq 0 ]] && [[ $1 != '*' ]] ; then
  573. check_result $E_INVALID "invalid $2 format :: $1"
  574. fi
  575. fi
  576. if [[ $(echo -n "$1" | tail -c 1) =~ [^a-zA-Z0-9_*@] ]]; then
  577. check_result $E_INVALID "invalid $2 format :: $1"
  578. fi
  579. if [[ $(echo -n "$1" | grep -c '\.\.') -gt 0 ]];then
  580. check_result $E_INVALID "invalid $2 format :: $1"
  581. fi
  582. if [[ $(echo -n "$1" | head -c 1) =~ [^a-zA-Z0-9_*@] ]]; then
  583. check_result $E_INVALID "invalid $2 format :: $1"
  584. fi
  585. if [[ $(echo -n "$1" | grep -c '\-\-') -gt 0 ]]; then
  586. check_result $E_INVALID "invalid $2 format :: $1"
  587. fi
  588. if [[ $(echo -n "$1" | grep -c '\_\_') -gt 0 ]]; then
  589. check_result $E_INVALID "invalid $2 format :: $1"
  590. fi
  591. }
  592. # Database format validator
  593. is_database_format_valid() {
  594. exclude="[!|@|#|$|^|&|*|(|)|+|=|{|}|:|,|<|>|?|/|\|\"|'|;|%|\`| ]"
  595. if [[ "$1" =~ $exclude ]] || [ 65 -le ${#1} ]; then
  596. check_result $E_INVALID "invalid $2 format :: $1"
  597. fi
  598. }
  599. # Date format validator
  600. is_date_format_valid() {
  601. if ! [[ "$1" =~ ^[0-9][0-9][0-9][0-9]-[0-9][0-9]-[0-9][0-9]$ ]]; then
  602. check_result $E_INVALID "invalid date format :: $1"
  603. fi
  604. }
  605. # Database user validator
  606. is_dbuser_format_valid() {
  607. exclude="[!|@|#|$|^|&|*|(|)|+|=|{|}|:|,|<|>|?|/|\|\"|'|;|%|\`| ]"
  608. if [ 17 -le ${#1} ]; then
  609. check_result $E_INVALID "mysql username can be up to 16 characters long"
  610. fi
  611. if [[ "$1" =~ $exclude ]]; then
  612. check_result $E_INVALID "invalid $2 format :: $1"
  613. fi
  614. }
  615. # DNS record type validator
  616. is_dns_type_format_valid() {
  617. known_dnstype='A,AAAA,NS,CNAME,MX,TXT,SRV,DNSKEY,KEY,IPSECKEY,PTR,SPF,TLSA,CAA'
  618. if [ -z "$(echo $known_dnstype |grep -w $1)" ]; then
  619. check_result $E_INVALID "invalid dns record type format :: $1"
  620. fi
  621. }
  622. # DNS record validator
  623. is_dns_record_format_valid() {
  624. if [ "$rtype" = 'A' ]; then
  625. is_ip_format_valid "$1"
  626. fi
  627. if [ "$rtype" = 'NS' ]; then
  628. is_domain_format_valid "${1::-1}" 'ns_record'
  629. fi
  630. if [ "$rtype" = 'MX' ]; then
  631. is_domain_format_valid "${1::-1}" 'mx_record'
  632. is_int_format_valid "$priority" 'priority_record'
  633. fi
  634. }
  635. # Email format validator
  636. is_email_format_valid() {
  637. if [[ ! "$1" =~ ^[A-Za-z0-9._%+-]+@[[:alnum:].-]+\.[A-Za-z]{2,63}$ ]] ; then
  638. check_result $E_INVALID "invalid email format :: $1"
  639. fi
  640. }
  641. # Firewall action validator
  642. is_fw_action_format_valid() {
  643. if [ "$1" != "ACCEPT" ] && [ "$1" != 'DROP' ] ; then
  644. check_result $E_INVALID "invalid action format :: $1"
  645. fi
  646. }
  647. # Firewall protocol validator
  648. is_fw_protocol_format_valid() {
  649. if [ "$1" != "ICMP" ] && [ "$1" != 'UDP' ] && [ "$1" != 'TCP' ] ; then
  650. check_result $E_INVALID "invalid protocol format :: $1"
  651. fi
  652. }
  653. # Firewall port validator
  654. is_fw_port_format_valid() {
  655. if [ "${#1}" -eq 1 ]; then
  656. if ! [[ "$1" =~ [0-9] ]]; then
  657. check_result $E_INVALID "invalid port format :: $1"
  658. fi
  659. else
  660. if ! [[ "$1" =~ ^[0-9][-|,|:|0-9]{0,30}[0-9]$ ]]
  661. then
  662. check_result $E_INVALID "invalid port format :: $1"
  663. fi
  664. fi
  665. }
  666. # Integer validator
  667. is_int_format_valid() {
  668. if ! [[ "$1" =~ ^[0-9]+$ ]] ; then
  669. check_result $E_INVALID "invalid $2 format :: $1"
  670. fi
  671. }
  672. # Interface validator
  673. is_interface_format_valid() {
  674. netdevices=$(cat /proc/net/dev |grep : |cut -f 1 -d : |tr -d ' ')
  675. if [ -z $(echo "$netdevices" |grep -x $1) ]; then
  676. check_result $E_INVALID "invalid interface format :: $1"
  677. fi
  678. }
  679. # IP status validator
  680. is_ip_status_format_valid() {
  681. if [ -z "$(echo shared,dedicated | grep -w $1 )" ]; then
  682. check_result $E_INVALID "invalid status format :: $1"
  683. fi
  684. }
  685. # Cron validator
  686. is_cron_format_valid() {
  687. limit=59
  688. check_format=''
  689. if [ "$2" = 'hour' ]; then
  690. limit=23
  691. fi
  692. if [ "$2" = 'day' ]; then
  693. limit=31
  694. fi
  695. if [ "$2" = 'month' ]; then
  696. limit=12
  697. fi
  698. if [ "$2" = 'wday' ]; then
  699. limit=7
  700. fi
  701. if [ "$1" = '*' ]; then
  702. check_format='ok'
  703. fi
  704. if [[ "$1" =~ ^[\*]+[/]+[0-9] ]]; then
  705. if [ "$(echo $1 |cut -f 2 -d /)" -lt $limit ]; then
  706. check_format='ok'
  707. fi
  708. fi
  709. if [[ "$1" =~ ^[0-9][-|,|0-9]{0,70}[\/][0-9]$ ]]; then
  710. check_format='ok'
  711. crn_values=${1//,/ }
  712. crn_values=${crn_values//-/ }
  713. crn_values=${crn_values//\// }
  714. for crn_vl in $crn_values; do
  715. if [ "$crn_vl" -gt $limit ]; then
  716. check_format='invalid'
  717. fi
  718. done
  719. fi
  720. crn_values=$(echo $1 |tr "," " " | tr "-" " ")
  721. for crn_vl in $crn_values
  722. do
  723. if [[ "$crn_vl" =~ ^[0-9]+$ ]] && [ "$crn_vl" -le $limit ]; then
  724. check_format='ok'
  725. fi
  726. done
  727. if [ "$check_format" != 'ok' ]; then
  728. check_result $E_INVALID "invalid $2 format :: $1"
  729. fi
  730. }
  731. # Name validator
  732. is_name_format_valid() {
  733. if ! [[ "$1" =~ ^[[:alnum:]][-|\ |\.|_[:alnum:]]{0,28}[[:alnum:]]$ ]]; then
  734. check_result $E_INVALID "invalid $2 format :: $1"
  735. fi
  736. }
  737. # Object validator
  738. is_object_format_valid() {
  739. if ! [[ "$1" =~ ^[[:alnum:]][-|\.|_[:alnum:]]{0,64}[[:alnum:]]$ ]]; then
  740. check_result $E_INVALID "invalid $2 format :: $1"
  741. fi
  742. }
  743. # Password validator
  744. is_password_format_valid() {
  745. if [ "${#1}" -lt '6' ]; then
  746. check_result $E_INVALID "invalid password format :: $1"
  747. fi
  748. }
  749. # Missing function -
  750. # Before: validate_format_shell
  751. # After: is_format_valid_shell
  752. is_format_valid_shell() {
  753. if [ -z "$(grep -w $1 /etc/shells)" ]; then
  754. echo "Error: shell $1 is not valid"
  755. log_event "$E_INVALID" "$EVENT"
  756. exit $E_INVALID
  757. fi
  758. }
  759. # Format validation controller
  760. is_format_valid() {
  761. for arg_name in $*; do
  762. eval arg=\$$arg_name
  763. if [ ! -z "$arg" ]; then
  764. case $arg_name in
  765. account) is_user_format_valid "$arg" "$arg_name";;
  766. action) is_fw_action_format_valid "$arg";;
  767. aliases) is_alias_format_valid "$arg" ;;
  768. antispam) is_boolean_format_valid "$arg" 'antispam' ;;
  769. antivirus) is_boolean_format_valid "$arg" 'antivirus' ;;
  770. autoreply) is_autoreply_format_valid "$arg" ;;
  771. backup) is_object_format_valid "$arg" 'backup' ;;
  772. charset) is_object_format_valid "$arg" "$arg_name" ;;
  773. charsets) is_common_format_valid "$arg" 'charsets' ;;
  774. comment) is_object_format_valid "$arg" 'comment' ;;
  775. database) is_database_format_valid "$arg" 'database';;
  776. day) is_cron_format_valid "$arg" $arg_name ;;
  777. dbpass) is_password_format_valid "$arg" ;;
  778. dbuser) is_dbuser_format_valid "$arg" 'dbuser';;
  779. dkim) is_boolean_format_valid "$arg" 'dkim' ;;
  780. dkim_size) is_int_format_valid "$arg" ;;
  781. domain) is_domain_format_valid "$arg" ;;
  782. dvalue) is_dns_record_format_valid "$arg";;
  783. email) is_email_format_valid "$arg" ;;
  784. exp) is_date_format_valid "$arg" ;;
  785. extentions) is_common_format_valid "$arg" 'extentions' ;;
  786. fname) is_name_format_valid "$arg" "first name" ;;
  787. ftp_password) is_password_format_valid "$arg" ;;
  788. ftp_user) is_user_format_valid "$arg" "$arg_name" ;;
  789. host) is_object_format_valid "$arg" "$arg_name" ;;
  790. hour) is_cron_format_valid "$arg" $arg_name ;;
  791. id) is_int_format_valid "$arg" 'id' ;;
  792. interface) is_interface_format_valid "$arg" ;;
  793. ip) is_ip_format_valid "$arg" ;;
  794. ip_name) is_domain_format_valid "$arg" 'IP name';;
  795. ip_status) is_ip_status_format_valid "$arg" ;;
  796. job) is_int_format_valid "$arg" 'job' ;;
  797. key) is_user_format_valid "$arg" "$arg_name" ;;
  798. lname) is_name_format_valid "$arg" "last name" ;;
  799. malias) is_user_format_valid "$arg" "$arg_name" ;;
  800. max_db) is_int_format_valid "$arg" 'max db';;
  801. min) is_cron_format_valid "$arg" $arg_name ;;
  802. month) is_cron_format_valid "$arg" $arg_name ;;
  803. nat_ip) is_ip_format_valid "$arg" ;;
  804. netmask) is_ip_format_valid "$arg" 'netmask' ;;
  805. newid) is_int_format_valid "$arg" 'id' ;;
  806. ns1) is_domain_format_valid "$arg" 'ns1' ;;
  807. ns2) is_domain_format_valid "$arg" 'ns2' ;;
  808. ns3) is_domain_format_valid "$arg" 'ns3' ;;
  809. ns4) is_domain_format_valid "$arg" 'ns4' ;;
  810. ns5) is_domain_format_valid "$arg" 'ns5' ;;
  811. ns6) is_domain_format_valid "$arg" 'ns6' ;;
  812. ns7) is_domain_format_valid "$arg" 'ns7' ;;
  813. ns8) is_domain_format_valid "$arg" 'ns8' ;;
  814. object) is_name_format_valid "$arg" 'object';;
  815. package) is_object_format_valid "$arg" "$arg_name" ;;
  816. password) is_password_format_valid "$arg" ;;
  817. port) is_int_format_valid "$arg" 'port' ;;
  818. port_ext) is_fw_port_format_valid "$arg";;
  819. protocol) is_fw_protocol_format_valid "$arg" ;;
  820. proxy_ext) is_extention_format_valid "$arg" ;;
  821. quota) is_int_format_valid "$arg" 'quota' ;;
  822. record) is_common_format_valid "$arg" 'record';;
  823. restart) is_boolean_format_valid "$arg" 'restart' ;;
  824. rtype) is_dns_type_format_valid "$arg" ;;
  825. rule) is_int_format_valid "$arg" "rule id" ;;
  826. soa) is_domain_format_valid "$arg" 'SOA' ;;
  827. #missing command: is_format_valid_shell
  828. shell) is_format_valid_shell "$arg" ;;
  829. stats_pass) is_password_format_valid "$arg" ;;
  830. stats_user) is_user_format_valid "$arg" "$arg_name" ;;
  831. template) is_object_format_valid "$arg" "$arg_name" ;;
  832. ttl) is_int_format_valid "$arg" 'ttl';;
  833. user) is_user_format_valid "$arg" $arg_name;;
  834. wday) is_cron_format_valid "$arg" $arg_name ;;
  835. esac
  836. fi
  837. done
  838. }
  839. # Domain argument formatting
  840. format_domain() {
  841. if [[ "$domain" = *[![:ascii:]]* ]]; then
  842. if [[ "$domain" =~ [[:upper:]] ]]; then
  843. domain=$(echo "$domain" |sed 's/[[:upper:]].*/\L&/')
  844. fi
  845. else
  846. if [[ "$domain" =~ [[:upper:]] ]]; then
  847. domain=$(echo "$domain" |tr '[:upper:]' '[:lower:]')
  848. fi
  849. fi
  850. if [[ "$domain" =~ ^www\..* ]]; then
  851. domain=$(echo "$domain" |sed -e "s/^www.//")
  852. fi
  853. if [[ "$domain" =~ .*\.$ ]]; then
  854. domain=$(echo "$domain" |sed -e "s/[.]*$//g")
  855. fi
  856. if [[ "$domain" =~ ^\. ]]; then
  857. domain=$(echo "$domain" |sed -e "s/^[.]*//")
  858. fi
  859. }
  860. format_domain_idn() {
  861. if [ -z "$domain_idn" ]; then
  862. domain_idn=$domain
  863. fi
  864. if [[ "$domain_idn" = *[![:ascii:]]* ]]; then
  865. domain_idn=$(idn -t --quiet -a $domain_idn)
  866. fi
  867. }
  868. format_aliases() {
  869. if [ ! -z "$aliases" ] && [ "$aliases" != 'none' ]; then
  870. aliases=$(echo $aliases |tr '[:upper:]' '[:lower:]' |tr ',' '\n')
  871. aliases=$(echo "$aliases" |sed -e "s/\.$//" |sort -u)
  872. aliases=$(echo "$aliases" |tr -s '.')
  873. aliases=$(echo "$aliases" |sed -e "s/[.]*$//g")
  874. aliases=$(echo "$aliases" |sed -e "s/^[.]*//")
  875. aliases=$(echo "$aliases" |sed -e "/^$/d")
  876. aliases=$(echo "$aliases" |tr '\n' ',' |sed -e "s/,$//")
  877. fi
  878. }
  879. alter_web_counter() {
  880. user=$1
  881. domain=$2
  882. USER_DATA=$VESTA/data/users/$user
  883. varc=$3
  884. vard="\$${varc}"
  885. counter=$(get_object_value 'web' 'DOMAIN' "$domain" "$vard")
  886. if [ -z "$counter" ]; then
  887. add_object_key "web" 'DOMAIN' "$domain" "$varc" "TIME"
  888. counter=0
  889. fi
  890. ((counter++))
  891. backup_counter=$counter
  892. update_object_value 'web' 'DOMAIN' "$domain" "$vard" "$counter"
  893. counter=$backup_counter
  894. echo $counter
  895. }
  896. reset_web_counter() {
  897. user=$1
  898. domain=$2
  899. USER_DATA=$VESTA/data/users/$user
  900. varc=$3
  901. vard="\$${varc}"
  902. update_object_value 'web' 'DOMAIN' "$domain" "$vard" "0"
  903. }
  904. get_web_counter() {
  905. user=$1
  906. domain=$2
  907. USER_DATA=$VESTA/data/users/$user
  908. varc=$3
  909. vard="\$${varc}"
  910. counter=$(get_object_value 'web' 'DOMAIN' "$domain" "$vard")
  911. if [ -z "$counter" ]; then
  912. counter=0
  913. fi
  914. echo $counter
  915. }
  916. # Simple chmod wrapper that skips symlink files after glob expand
  917. # Taken from HestiaCP
  918. no_symlink_chmod() {
  919. local filemode=$1; shift;
  920. for i in "$@"; do
  921. [[ -L ${i} ]] && continue
  922. chmod "${filemode}" "${i}"
  923. done
  924. }