index.php 30 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715
  1. <?php
  2. // Init
  3. error_reporting(NULL);
  4. ob_start();
  5. session_start();
  6. unset($_SESSION['error_msg']);
  7. $TAB = 'WEB';
  8. include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
  9. // Check domain argument
  10. if (empty($_GET['domain'])) {
  11. header("Location: /list/web/");
  12. exit;
  13. }
  14. // Edit as someone else?
  15. if (($_SESSION['user'] == 'admin') && (!empty($_GET['user']))) {
  16. $user=escapeshellarg($_GET['user']);
  17. }
  18. // List domain
  19. $v_domain = escapeshellarg($_GET['domain']);
  20. exec (VESTA_CMD."v-list-web-domain ".$user." ".$v_domain." json", $output, $return_var);
  21. $data = json_decode(implode('', $output), true);
  22. unset($output);
  23. // Parse domain
  24. $v_username = $user;
  25. $v_domain = $_GET['domain'];
  26. $v_ip = $data[$v_domain]['IP'];
  27. $v_template = $data[$v_domain]['TPL'];
  28. $v_aliases = str_replace(',', "\n", $data[$v_domain]['ALIAS']);
  29. $valiases = explode(",", $data[$v_domain]['ALIAS']);
  30. $v_tpl = $data[$v_domain]['IP'];
  31. $v_cgi = $data[$v_domain]['CGI'];
  32. $v_elog = $data[$v_domain]['ELOG'];
  33. $v_ssl = $data[$v_domain]['SSL'];
  34. if ( $v_ssl == 'yes' ) {
  35. exec (VESTA_CMD."v-list-web-domain-ssl ".$user." '".$v_domain."' json", $output, $return_var);
  36. $ssl_str = json_decode(implode('', $output), true);
  37. unset($output);
  38. $v_ssl_crt = $ssl_str[$v_domain]['CRT'];
  39. $v_ssl_key = $ssl_str[$v_domain]['KEY'];
  40. $v_ssl_ca = $ssl_str[$v_domain]['CA'];
  41. }
  42. $v_ssl_home = $data[$v_domain]['SSL_HOME'];
  43. $v_backend_template = $data[$v_domain]['BACKEND'];
  44. $v_proxy = $data[$v_domain]['PROXY'];
  45. $v_proxy_template = $data[$v_domain]['PROXY'];
  46. $v_proxy_ext = str_replace(',', ', ', $data[$v_domain]['PROXY_EXT']);
  47. $v_stats = $data[$v_domain]['STATS'];
  48. $v_stats_user = $data[$v_domain]['STATS_USER'];
  49. if (!empty($v_stats_user)) $v_stats_password = "";
  50. $v_ftp_user = $data[$v_domain]['FTP_USER'];
  51. $v_ftp_path = $data[$v_domain]['FTP_PATH'];
  52. if (!empty($v_ftp_user)) $v_ftp_password = "";
  53. $v_ftp_user_prepath = $data[$v_domain]['DOCUMENT_ROOT'];
  54. $v_ftp_user_prepath = str_replace('/public_html', '', $v_ftp_user_prepath, $occurance = 1);
  55. $v_ftp_email = $panel[$user]['CONTACT'];
  56. $v_suspended = $data[$v_domain]['SUSPENDED'];
  57. if ( $v_suspended == 'yes' ) {
  58. $v_status = 'suspended';
  59. } else {
  60. $v_status = 'active';
  61. }
  62. $v_time = $data[$v_domain]['TIME'];
  63. $v_date = $data[$v_domain]['DATE'];
  64. // List ip addresses
  65. exec (VESTA_CMD."v-list-user-ips ".$user." json", $output, $return_var);
  66. $ips = json_decode(implode('', $output), true);
  67. unset($output);
  68. // List web templates
  69. exec (VESTA_CMD."v-list-web-templates json", $output, $return_var);
  70. $templates = json_decode(implode('', $output), true);
  71. unset($output);
  72. // List backend templates
  73. if (!empty($_SESSION['WEB_BACKEND'])) {
  74. exec (VESTA_CMD."v-list-web-templates-backend json", $output, $return_var);
  75. $backend_templates = json_decode(implode('', $output), true);
  76. unset($output);
  77. }
  78. // List proxy templates
  79. if (!empty($_SESSION['PROXY_SYSTEM'])) {
  80. exec (VESTA_CMD."v-list-web-templates-proxy json", $output, $return_var);
  81. $proxy_templates = json_decode(implode('', $output), true);
  82. unset($output);
  83. }
  84. // List web stat engines
  85. exec (VESTA_CMD."v-list-web-stats json", $output, $return_var);
  86. $stats = json_decode(implode('', $output), true);
  87. unset($output);
  88. // Check POST request
  89. if (!empty($_POST['save'])) {
  90. $v_domain = escapeshellarg($_POST['v_domain']);
  91. // Check token
  92. if ((!isset($_POST['token'])) || ($_SESSION['token'] != $_POST['token'])) {
  93. header('location: /login/');
  94. exit();
  95. }
  96. // Change web domain IP
  97. if (($v_ip != $_POST['v_ip']) && (empty($_SESSION['error_msg']))) {
  98. $v_ip = escapeshellarg($_POST['v_ip']);
  99. exec (VESTA_CMD."v-change-web-domain-ip ".$v_username." ".$v_domain." ".$v_ip." 'no'", $output, $return_var);
  100. check_return_code($return_var,$output);
  101. $restart_web = 'yes';
  102. $restart_proxy = 'yes';
  103. unset($output);
  104. }
  105. // Chane dns domain IP
  106. if (($v_ip != $_POST['v_ip']) && (empty($_SESSION['error_msg']))) {
  107. exec (VESTA_CMD."v-list-dns-domain ".$v_username." ".$v_domain." json", $output, $return_var);
  108. unset($output);
  109. if ($return_var == 0 ) {
  110. exec (VESTA_CMD."v-change-dns-domain-ip ".$v_username." ".$v_domain." ".$v_ip." 'no'", $output, $return_var);
  111. check_return_code($return_var,$output);
  112. unset($output);
  113. $restart_dns = 'yes';
  114. }
  115. }
  116. // Change dns ip for each alias
  117. if (($v_ip != $_POST['v_ip']) && (empty($_SESSION['error_msg']))) {
  118. foreach($valiases as $v_alias ){
  119. exec (VESTA_CMD."v-list-dns-domain ".$v_username." '".$v_alias."' json", $output, $return_var);
  120. unset($output);
  121. if ($return_var == 0 ) {
  122. exec (VESTA_CMD."v-change-dns-domain-ip ".$v_username." '".$v_alias."' ".$v_ip, $output, $return_var);
  123. check_return_code($return_var,$output);
  124. unset($output);
  125. $restart_dns = 'yes';
  126. }
  127. }
  128. }
  129. // Change template (admin only)
  130. if (($v_template != $_POST['v_template']) && ( $_SESSION['user'] == 'admin') && (empty($_SESSION['error_msg']))) {
  131. $v_template = escapeshellarg($_POST['v_template']);
  132. exec (VESTA_CMD."v-change-web-domain-tpl ".$v_username." ".$v_domain." ".$v_template." 'no'", $output, $return_var);
  133. check_return_code($return_var,$output);
  134. unset($output);
  135. $restart_web = 'yes';
  136. }
  137. // Change aliases
  138. if (empty($_SESSION['error_msg'])) {
  139. $waliases = preg_replace("/\n/", " ", $_POST['v_aliases']);
  140. $waliases = preg_replace("/,/", " ", $waliases);
  141. $waliases = preg_replace('/\s+/', ' ',$waliases);
  142. $waliases = trim($waliases);
  143. $aliases = explode(" ", $waliases);
  144. $v_aliases = str_replace(' ', "\n", $waliases);
  145. $result = array_diff($valiases, $aliases);
  146. foreach ($result as $alias) {
  147. if ((empty($_SESSION['error_msg'])) && (!empty($alias))) {
  148. $restart_web = 'yes';
  149. $restart_proxy = 'yes';
  150. $v_template = escapeshellarg($_POST['v_template']);
  151. exec (VESTA_CMD."v-delete-web-domain-alias ".$v_username." ".$v_domain." '".$alias."' 'no'", $output, $return_var);
  152. check_return_code($return_var,$output);
  153. unset($output);
  154. if (empty($_SESSION['error_msg'])) {
  155. exec (VESTA_CMD."v-list-dns-domain ".$v_username." ".$v_domain, $output, $return_var);
  156. unset($output);
  157. if ($return_var == 0) {
  158. exec (VESTA_CMD."v-delete-dns-on-web-alias ".$v_username." ".$v_domain." '".$alias."' 'no'", $output, $return_var);
  159. check_return_code($return_var,$output);
  160. unset($output);
  161. $restart_dns = 'yes';
  162. }
  163. }
  164. }
  165. }
  166. $result = array_diff($aliases, $valiases);
  167. foreach ($result as $alias) {
  168. if ((empty($_SESSION['error_msg'])) && (!empty($alias))) {
  169. $restart_web = 'yes';
  170. $restart_proxy = 'yes';
  171. $v_template = escapeshellarg($_POST['v_template']);
  172. exec (VESTA_CMD."v-add-web-domain-alias ".$v_username." ".$v_domain." '".$alias."' 'no'", $output, $return_var);
  173. check_return_code($return_var,$output);
  174. unset($output);
  175. if (empty($_SESSION['error_msg'])) {
  176. exec (VESTA_CMD."v-list-dns-domain ".$v_username." ".$v_domain, $output, $return_var);
  177. unset($output);
  178. if ($return_var == 0) {
  179. exec (VESTA_CMD."v-add-dns-on-web-alias ".$v_username." ".$alias." ".$v_ip." no", $output, $return_var);
  180. check_return_code($return_var,$output);
  181. unset($output);
  182. $restart_dns = 'yes';
  183. }
  184. }
  185. }
  186. }
  187. }
  188. // Change backend template
  189. if ((!empty($_SESSION['WEB_BACKEND'])) && ( $v_backend_template != $_POST['v_backend_template']) && ( $_SESSION['user'] == 'admin') && (empty($_SESSION['error_msg']))) {
  190. $v_backend_template = $_POST['v_backend_template'];
  191. exec (VESTA_CMD."v-change-web-domain-backend-tpl ".$v_username." ".$v_domain." ".escapeshellarg($v_backend_template), $output, $return_var);
  192. check_return_code($return_var,$output);
  193. unset($output);
  194. }
  195. // Delete proxy support
  196. if ((!empty($_SESSION['PROXY_SYSTEM'])) && (!empty($v_proxy)) && (empty($_POST['v_proxy'])) && (empty($_SESSION['error_msg']))) {
  197. exec (VESTA_CMD."v-delete-web-domain-proxy ".$v_username." ".$v_domain." 'no'", $output, $return_var);
  198. check_return_code($return_var,$output);
  199. unset($output);
  200. unset($v_proxy);
  201. $restart_proxy = 'yes';
  202. }
  203. // Change proxy template / Update extention list
  204. if ((!empty($_SESSION['PROXY_SYSTEM'])) && (!empty($v_proxy)) && (!empty($_POST['v_proxy'])) && (empty($_SESSION['error_msg']))) {
  205. $ext = preg_replace("/\n/", " ", $_POST['v_proxy_ext']);
  206. $ext = preg_replace("/,/", " ", $ext);
  207. $ext = preg_replace('/\s+/', ' ',$ext);
  208. $ext = trim($ext);
  209. $ext = str_replace(' ', ", ", $ext);
  210. if (( $v_proxy_template != $_POST['v_proxy_template']) || ($v_proxy_ext != $ext)) {
  211. $ext = str_replace(', ', ",", $ext);
  212. if (!empty($_POST['v_proxy_template'])) $v_proxy_template = $_POST['v_proxy_template'];
  213. exec (VESTA_CMD."v-change-web-domain-proxy-tpl ".$v_username." ".$v_domain." ".escapeshellarg($v_proxy_template)." ".escapeshellarg($ext)." 'no'", $output, $return_var);
  214. check_return_code($return_var,$output);
  215. $v_proxy_ext = str_replace(',', ', ', $ext);
  216. unset($output);
  217. $restart_proxy = 'yes';
  218. }
  219. }
  220. // Add proxy support
  221. if ((!empty($_SESSION['PROXY_SYSTEM'])) && (empty($v_proxy)) && (!empty($_POST['v_proxy'])) && (empty($_SESSION['error_msg']))) {
  222. $v_proxy_template = $_POST['v_proxy_template'];
  223. if (!empty($_POST['v_proxy_ext'])) {
  224. $ext = preg_replace("/\n/", " ", $_POST['v_proxy_ext']);
  225. $ext = preg_replace("/,/", " ", $ext);
  226. $ext = preg_replace('/\s+/', ' ',$ext);
  227. $ext = trim($ext);
  228. $ext = str_replace(' ', ",", $ext);
  229. $v_proxy_ext = str_replace(',', ', ', $ext);
  230. }
  231. exec (VESTA_CMD."v-add-web-domain-proxy ".$v_username." ".$v_domain." ".escapeshellarg($v_proxy_template)." ".escapeshellarg($ext)." 'no'", $output, $return_var);
  232. check_return_code($return_var,$output);
  233. unset($output);
  234. $restart_proxy = 'yes';
  235. }
  236. // Delete SSL certificate
  237. if (( $v_ssl == 'yes' ) && (empty($_POST['v_ssl'])) && (empty($_SESSION['error_msg']))) {
  238. exec (VESTA_CMD."v-delete-web-domain-ssl ".$v_username." ".$v_domain." 'no'", $output, $return_var);
  239. check_return_code($return_var,$output);
  240. unset($output);
  241. $v_ssl = 'no';
  242. $restart_web = 'yes';
  243. $restart_proxy = 'yes';
  244. }
  245. // Change SSL certificate
  246. if (($v_ssl == 'yes') && (!empty($_POST['v_ssl'])) && (empty($_SESSION['error_msg']))) {
  247. if (( $v_ssl_crt != str_replace("\r\n", "\n", $_POST['v_ssl_crt'])) || ( $v_ssl_key != str_replace("\r\n", "\n", $_POST['v_ssl_key'])) || ( $v_ssl_ca != str_replace("\r\n", "\n", $_POST['v_ssl_ca']))) {
  248. exec ('mktemp -d', $mktemp_output, $return_var);
  249. $tmpdir = $mktemp_output[0];
  250. // Certificate
  251. if (!empty($_POST['v_ssl_crt'])) {
  252. $fp = fopen($tmpdir."/".$_POST['v_domain'].".crt", 'w');
  253. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_crt']));
  254. fwrite($fp, "\n");
  255. fclose($fp);
  256. }
  257. // Key
  258. if (!empty($_POST['v_ssl_key'])) {
  259. $fp = fopen($tmpdir."/".$_POST['v_domain'].".key", 'w');
  260. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_key']));
  261. fwrite($fp, "\n");
  262. fclose($fp);
  263. }
  264. // CA
  265. if (!empty($_POST['v_ssl_ca'])) {
  266. $fp = fopen($tmpdir."/".$_POST['v_domain'].".ca", 'w');
  267. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_ca']));
  268. fwrite($fp, "\n");
  269. fclose($fp);
  270. }
  271. exec (VESTA_CMD."v-change-web-domain-sslcert ".$user." ".$v_domain." ".$tmpdir." 'no'", $output, $return_var);
  272. check_return_code($return_var,$output);
  273. unset($output);
  274. $restart_web = 'yes';
  275. $restart_proxy = 'yes';
  276. $v_ssl_crt = $_POST['v_ssl_crt'];
  277. $v_ssl_key = $_POST['v_ssl_key'];
  278. $v_ssl_ca = $_POST['v_ssl_ca'];
  279. // Cleanup certificate tempfiles
  280. if (!empty($_POST['v_ssl_crt'])) {
  281. unlink($tmpdir."/".$_POST['v_domain'].".crt");
  282. }
  283. if (!empty($_POST['v_ssl_key'])) {
  284. unlink($tmpdir."/".$_POST['v_domain'].".key");
  285. }
  286. if (!empty($_POST['v_ssl_ca'])) {
  287. unlink($tmpdir."/".$_POST['v_domain'].".ca");
  288. }
  289. rmdir($tmpdir);
  290. }
  291. }
  292. // Add SSL certificate
  293. if (( $v_ssl == 'no') && (!empty($_POST['v_ssl'])) && (empty($_SESSION['error_msg']))) {
  294. if ((!empty($_POST['v_ssl'])) && (empty($_POST['v_ssl_crt']))) $errors[] = 'ssl certificate';
  295. if ((!empty($_POST['v_ssl'])) && (empty($_POST['v_ssl_key']))) $errors[] = 'ssl key';
  296. if ((!empty($_POST['v_ssl'])) && (empty($_POST['v_ssl_home']))) $errors[] = 'ssl home';
  297. $v_ssl_home = escapeshellarg($_POST['v_ssl_home']);
  298. if (!empty($errors[0])) {
  299. foreach ($errors as $i => $error) {
  300. if ( $i == 0 ) {
  301. $error_msg = $error;
  302. } else {
  303. $error_msg = $error_msg.", ".$error;
  304. }
  305. }
  306. $_SESSION['error_msg'] = __('Field "%s" can not be blank.',$error_msg);
  307. } else {
  308. exec ('mktemp -d', $mktemp_output, $return_var);
  309. $tmpdir = $mktemp_output[0];
  310. // Certificate
  311. if (!empty($_POST['v_ssl_crt'])) {
  312. $fp = fopen($tmpdir."/".$_POST['v_domain'].".crt", 'w');
  313. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_crt']));
  314. fclose($fp);
  315. }
  316. // Key
  317. if (!empty($_POST['v_ssl_key'])) {
  318. $fp = fopen($tmpdir."/".$_POST['v_domain'].".key", 'w');
  319. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_key']));
  320. fclose($fp);
  321. }
  322. // CA
  323. if (!empty($_POST['v_ssl_ca'])) {
  324. $fp = fopen($tmpdir."/".$_POST['v_domain'].".ca", 'w');
  325. fwrite($fp, str_replace("\r\n", "\n", $_POST['v_ssl_ca']));
  326. fclose($fp);
  327. }
  328. exec (VESTA_CMD."v-add-web-domain-ssl ".$user." ".$v_domain." ".$tmpdir." ".$v_ssl_home." 'no'", $output, $return_var);
  329. check_return_code($return_var,$output);
  330. unset($output);
  331. $v_ssl = 'yes';
  332. $restart_web = 'yes';
  333. $restart_proxy = 'yes';
  334. $v_ssl_crt = $_POST['v_ssl_crt'];
  335. $v_ssl_key = $_POST['v_ssl_key'];
  336. $v_ssl_ca = $_POST['v_ssl_ca'];
  337. $v_ssl_home = $_POST['v_ssl_home'];
  338. // Cleanup certificate tempfiles
  339. if (!empty($_POST['v_ssl_crt'])) {
  340. unlink($tmpdir."/".$_POST['v_domain'].".crt");
  341. }
  342. if (!empty($_POST['v_ssl_key'])) {
  343. unlink($tmpdir."/".$_POST['v_domain'].".key");
  344. }
  345. if (!empty($_POST['v_ssl_ca'])) {
  346. unlink($tmpdir."/".$_POST['v_domain'].".ca");
  347. }
  348. rmdir($tmpdir);
  349. }
  350. }
  351. // Change document root for ssl domain
  352. if (( $v_ssl == 'yes') && (!empty($_POST['v_ssl'])) && (empty($_SESSION['error_msg']))) {
  353. if ( $v_ssl_home != $_POST['v_ssl_home'] ) {
  354. $v_ssl_home = escapeshellarg($_POST['v_ssl_home']);
  355. exec (VESTA_CMD."v-change-web-domain-sslhome ".$user." ".$v_domain." ".$v_ssl_home." 'no'", $output, $return_var);
  356. check_return_code($return_var,$output);
  357. $v_ssl_home = $_POST['v_ssl_home'];
  358. unset($output);
  359. }
  360. }
  361. // Delete web stats
  362. if ((!empty($v_stats)) && ($_POST['v_stats'] == 'none') && (empty($_SESSION['error_msg']))) {
  363. exec (VESTA_CMD."v-delete-web-domain-stats ".$v_username." ".$v_domain, $output, $return_var);
  364. check_return_code($return_var,$output);
  365. unset($output);
  366. $v_stats = '';
  367. }
  368. // Change web stats engine
  369. if ((!empty($v_stats)) && ($_POST['v_stats'] != $v_stats) && (empty($_SESSION['error_msg']))) {
  370. $v_stats = escapeshellarg($_POST['v_stats']);
  371. exec (VESTA_CMD."v-change-web-domain-stats ".$v_username." ".$v_domain." ".$v_stats, $output, $return_var);
  372. check_return_code($return_var,$output);
  373. unset($output);
  374. }
  375. // Add web stats
  376. if ((empty($v_stats)) && ($_POST['v_stats'] != 'none') && (empty($_SESSION['error_msg']))) {
  377. $v_stats = escapeshellarg($_POST['v_stats']);
  378. exec (VESTA_CMD."v-add-web-domain-stats ".$v_username." ".$v_domain." ".$v_stats, $output, $return_var);
  379. check_return_code($return_var,$output);
  380. unset($output);
  381. }
  382. // Delete web stats authorization
  383. if ((!empty($v_stats_user)) && (empty($_POST['v_stats_auth'])) && (empty($_SESSION['error_msg']))) {
  384. exec (VESTA_CMD."v-delete-web-domain-stats-user ".$v_username." ".$v_domain, $output, $return_var);
  385. check_return_code($return_var,$output);
  386. unset($output);
  387. $v_stats_user = '';
  388. $v_stats_password = '';
  389. }
  390. // Change web stats user or password
  391. if ((empty($v_stats_user)) && (!empty($_POST['v_stats_auth'])) && (empty($_SESSION['error_msg']))) {
  392. if (empty($_POST['v_stats_user'])) $errors[] = __('stats username');
  393. if (!empty($errors[0])) {
  394. foreach ($errors as $i => $error) {
  395. if ( $i == 0 ) {
  396. $error_msg = $error;
  397. } else {
  398. $error_msg = $error_msg.", ".$error;
  399. }
  400. }
  401. $_SESSION['error_msg'] = __('Field "%s" can not be blank.',$error_msg);
  402. } else {
  403. $v_stats_user = escapeshellarg($_POST['v_stats_user']);
  404. $v_stats_password = tempnam("/tmp","vst");
  405. $fp = fopen($v_stats_password, "w");
  406. fwrite($fp, $_POST['v_stats_password']."\n");
  407. fclose($fp);
  408. exec (VESTA_CMD."v-add-web-domain-stats-user ".$v_username." ".$v_domain." ".$v_stats_user." ".$v_stats_password, $output, $return_var);
  409. check_return_code($return_var,$output);
  410. unset($output);
  411. unlink($v_stats_password);
  412. $v_stats_password = escapeshellarg($_POST['v_stats_password']);
  413. }
  414. }
  415. // Add web stats authorization
  416. if ((!empty($v_stats_user)) && (!empty($_POST['v_stats_auth'])) && (empty($_SESSION['error_msg']))) {
  417. if (empty($_POST['v_stats_user'])) $errors[] = __('stats user');
  418. if (!empty($errors[0])) {
  419. foreach ($errors as $i => $error) {
  420. if ( $i == 0 ) {
  421. $error_msg = $error;
  422. } else {
  423. $error_msg = $error_msg.", ".$error;
  424. }
  425. }
  426. $_SESSION['error_msg'] = __('Field "%s" can not be blank.',$error_msg);
  427. }
  428. if (($v_stats_user != $_POST['v_stats_user']) || (!empty($_POST['v_stats_password'])) && (empty($_SESSION['error_msg']))) {
  429. $v_stats_user = escapeshellarg($_POST['v_stats_user']);
  430. $v_stats_password = tempnam("/tmp","vst");
  431. $fp = fopen($v_stats_password, "w");
  432. fwrite($fp, $_POST['v_stats_password']."\n");
  433. fclose($fp);
  434. exec (VESTA_CMD."v-add-web-domain-stats-user ".$v_username." ".$v_domain." ".$v_stats_user." ".$v_stats_password, $output, $return_var);
  435. check_return_code($return_var,$output);
  436. unset($output);
  437. unlink($v_stats_password);
  438. $v_stats_password = escapeshellarg($_POST['v_stats_password']);
  439. }
  440. }
  441. // Update ftp account
  442. if (!empty($_POST['v_ftp_user'])) {
  443. $v_ftp_users_updated = array();
  444. foreach ($_POST['v_ftp_user'] as $i => $v_ftp_user_data) {
  445. if (empty($v_ftp_user_data['v_ftp_user'])) {
  446. continue;
  447. }
  448. $v_ftp_user_data['v_ftp_user'] = preg_replace("/^".$user."_/i", "", $v_ftp_user_data['v_ftp_user']);
  449. if ($v_ftp_user_data['is_new'] == 1 && !empty($_POST['v_ftp'])) {
  450. if ((!empty($v_ftp_user_data['v_ftp_email'])) && (!filter_var($v_ftp_user_data['v_ftp_email'], FILTER_VALIDATE_EMAIL))) $_SESSION['error_msg'] = __('Please enter valid email address.');
  451. if (empty($v_ftp_user_data['v_ftp_user'])) $errors[] = 'ftp user';
  452. if (!empty($errors[0])) {
  453. foreach ($errors as $i => $error) {
  454. if ( $i == 0 ) {
  455. $error_msg = $error;
  456. } else {
  457. $error_msg = $error_msg.", ".$error;
  458. }
  459. }
  460. $_SESSION['error_msg'] = __('Field "%s" can not be blank.',$error_msg);
  461. }
  462. // Add ftp account
  463. $v_ftp_username = $v_ftp_user_data['v_ftp_user'];
  464. $v_ftp_username_full = $user . '_' . $v_ftp_user_data['v_ftp_user'];
  465. $v_ftp_user = escapeshellarg($v_ftp_username);
  466. $v_ftp_path = escapeshellarg(trim($v_ftp_user_data['v_ftp_path']));
  467. if (empty($_SESSION['error_msg'])) {
  468. $v_ftp_password = tempnam("/tmp","vst");
  469. $fp = fopen($v_ftp_password, "w");
  470. fwrite($fp, $v_ftp_user_data['v_ftp_password']."\n");
  471. fclose($fp);
  472. exec (VESTA_CMD."v-add-web-domain-ftp ".$v_username." ".$v_domain." ".$v_ftp_username." ".$v_ftp_password . " " . $v_ftp_path, $output, $return_var);
  473. check_return_code($return_var,$output);
  474. if ((!empty($v_ftp_user_data['v_ftp_email'])) && (empty($_SESSION['error_msg']))) {
  475. $to = $v_ftp_user_data['v_ftp_email'];
  476. $subject = __("FTP login credentials");
  477. $hostname = exec('hostname');
  478. $from = __('MAIL_FROM',$hostname);
  479. $mailtext = __('FTP_ACCOUNT_READY',$_GET['domain'],$user,$v_ftp_username,$v_ftp_user_data['v_ftp_password']);
  480. send_email($to, $subject, $mailtext, $from);
  481. unset($v_ftp_email);
  482. }
  483. unset($output);
  484. unlink($v_ftp_password);
  485. $v_ftp_password = escapeshellarg($v_ftp_user_data['v_ftp_password']);
  486. }
  487. if ($return_var == 0) {
  488. $v_ftp_password = "";
  489. $v_ftp_user_data['is_new'] = 0;
  490. }
  491. else {
  492. $v_ftp_user_data['is_new'] = 1;
  493. }
  494. $v_ftp_users_updated[] = array(
  495. 'is_new' => empty($_SESSION['error_msg']) ? 0 : 1,
  496. 'v_ftp_user' => $v_ftp_username_full,
  497. 'v_ftp_password' => $v_ftp_password,
  498. 'v_ftp_path' => $v_ftp_user_data['v_ftp_path'],
  499. 'v_ftp_email' => $v_ftp_user_data['v_ftp_email'],
  500. 'v_ftp_pre_path' => $v_ftp_user_prepath
  501. );
  502. continue;
  503. }
  504. // Delete FTP account
  505. if ($v_ftp_user_data['delete'] == 1) {
  506. $v_ftp_username = $user . '_' . $v_ftp_user_data['v_ftp_user'];
  507. exec (VESTA_CMD."v-delete-web-domain-ftp ".$v_username." ".$v_domain." ".$v_ftp_username, $output, $return_var);
  508. check_return_code($return_var,$output);
  509. unset($output);
  510. continue;
  511. }
  512. if (!empty($_POST['v_ftp'])) {
  513. if (empty($v_ftp_user_data['v_ftp_user'])) $errors[] = __('ftp user');
  514. if (!empty($errors[0])) {
  515. foreach ($errors as $i => $error) {
  516. if ( $i == 0 ) {
  517. $error_msg = $error;
  518. } else {
  519. $error_msg = $error_msg.", ".$error;
  520. }
  521. }
  522. $_SESSION['error_msg'] = __('Field "%s" can not be blank.',$error_msg);
  523. }
  524. // Change FTP account path
  525. $v_ftp_username = $user . '_' . $v_ftp_user_data['v_ftp_user']; //preg_replace("/^".$user."_/", "", $v_ftp_user_data['v_ftp_user']);
  526. $v_ftp_username = escapeshellarg($v_ftp_username);
  527. //if (!empty($v_ftp_user_data['v_ftp_path'])) {
  528. $v_ftp_path = escapeshellarg(trim($v_ftp_user_data['v_ftp_path']));
  529. exec (VESTA_CMD."v-change-web-domain-ftp-path ".$v_username." ".$v_domain." ".$v_ftp_username." ".$v_ftp_path, $output, $return_var);
  530. //}
  531. // Change FTP account password
  532. if (!empty($v_ftp_user_data['v_ftp_password'])) {
  533. $v_ftp_password = tempnam("/tmp","vst");
  534. $fp = fopen($v_ftp_password, "w");
  535. fwrite($fp, $v_ftp_user_data['v_ftp_password']."\n");
  536. fclose($fp);
  537. exec (VESTA_CMD."v-change-web-domain-ftp-password ".$v_username." ".$v_domain." ".$v_ftp_username." ".$v_ftp_password, $output, $return_var);
  538. unlink($v_ftp_password);
  539. $to = $v_ftp_user_data['v_ftp_email'];
  540. $subject = __("FTP login credentials");
  541. $hostname = exec('hostname');
  542. $from = __('MAIL_FROM',$hostname);
  543. $mailtext = __('FTP_ACCOUNT_READY',$_GET['domain'],$user,$v_ftp_username,$v_ftp_user_data['v_ftp_password']);
  544. send_email($to, $subject, $mailtext, $from);
  545. unset($v_ftp_email);
  546. }
  547. check_return_code($return_var, $output);
  548. unset($output);
  549. $v_ftp_users_updated[] = array(
  550. 'is_new' => 0,
  551. 'v_ftp_user' => $v_ftp_username,
  552. 'v_ftp_password' => $v_ftp_user_data['v_ftp_password'],
  553. 'v_ftp_path' => $v_ftp_user_data['v_ftp_path'],
  554. 'v_ftp_email' => $v_ftp_user_data['v_ftp_email'],
  555. 'v_ftp_pre_path' => $v_ftp_user_prepath
  556. );
  557. }
  558. }
  559. }
  560. // Restart web server
  561. if (!empty($restart_web) && (empty($_SESSION['error_msg']))) {
  562. exec (VESTA_CMD."v-restart-web", $output, $return_var);
  563. check_return_code($return_var,$output);
  564. unset($output);
  565. }
  566. // Restart proxy server
  567. if ((!empty($_SESSION['PROXY_SYSTEM'])) && !empty($restart_proxy) && (empty($_SESSION['error_msg']))) {
  568. exec (VESTA_CMD."v-restart-proxy", $output, $return_var);
  569. check_return_code($return_var,$output);
  570. unset($output);
  571. }
  572. // Restart dns server
  573. if (!empty($restart_dns) && (empty($_SESSION['error_msg']))) {
  574. exec (VESTA_CMD."v-restart-dns", $output, $return_var);
  575. check_return_code($return_var,$output);
  576. unset($output);
  577. }
  578. // Set success message
  579. if (empty($_SESSION['error_msg'])) {
  580. $_SESSION['ok_msg'] = __('Changes has been saved.');
  581. }
  582. }
  583. $v_ftp_users_raw = explode(':', $v_ftp_user);
  584. $v_ftp_users_paths_raw = explode(':', $data[$v_domain]['FTP_PATH']);
  585. $v_ftp_users = array();
  586. foreach ($v_ftp_users_raw as $v_ftp_user_index => $v_ftp_user_val) {
  587. if (empty($v_ftp_user_val)) {
  588. continue;
  589. }
  590. $v_ftp_users[] = array(
  591. 'is_new' => 0,
  592. 'v_ftp_user' => $v_ftp_user_val,
  593. 'v_ftp_password' => $v_ftp_password,
  594. 'v_ftp_path' => (isset($v_ftp_users_paths_raw[$v_ftp_user_index]) ? $v_ftp_users_paths_raw[$v_ftp_user_index] : ''),
  595. 'v_ftp_email' => $v_ftp_email,
  596. 'v_ftp_pre_path' => $v_ftp_user_prepath
  597. );
  598. }
  599. if (empty($v_ftp_users)) {
  600. $v_ftp_user = null;
  601. $v_ftp_users[] = array(
  602. 'is_new' => 1,
  603. 'v_ftp_user' => '',
  604. 'v_ftp_password' => '',
  605. 'v_ftp_path' => (isset($v_ftp_users_paths_raw[$v_ftp_user_index]) ? $v_ftp_users_paths_raw[$v_ftp_user_index] : ''),
  606. 'v_ftp_email' => '',
  607. 'v_ftp_pre_path' => $v_ftp_user_prepath
  608. );
  609. }
  610. // set default pre path for newly created users
  611. $v_ftp_pre_path_new_user = $v_ftp_user_prepath;
  612. if (isset($v_ftp_users_updated)) {
  613. $v_ftp_users = $v_ftp_users_updated;
  614. if (empty($v_ftp_users_updated)) {
  615. $v_ftp_user = null;
  616. $v_ftp_users[] = array(
  617. 'is_new' => 1,
  618. 'v_ftp_user' => '',
  619. 'v_ftp_password' => '',
  620. 'v_ftp_path' => (isset($v_ftp_users_paths_raw[$v_ftp_user_index]) ? $v_ftp_users_paths_raw[$v_ftp_user_index] : ''),
  621. 'v_ftp_email' => '',
  622. 'v_ftp_pre_path' => $v_ftp_user_prepath
  623. );
  624. }
  625. }
  626. // Header
  627. include($_SERVER['DOCUMENT_ROOT'].'/templates/header.html');
  628. // Panel
  629. top_panel($user,$TAB);
  630. // Display body
  631. if ($_SESSION['user'] == 'admin') {
  632. include($_SERVER['DOCUMENT_ROOT'].'/templates/admin/edit_web.html');
  633. } else {
  634. include($_SERVER['DOCUMENT_ROOT'].'/templates/user/edit_web.html');
  635. }
  636. // Flush session messages
  637. unset($_SESSION['error_msg']);
  638. unset($_SESSION['ok_msg']);
  639. // Footer
  640. include($_SERVER['DOCUMENT_ROOT'].'/templates/footer.html');