mirror of
https://github.com/aaPanel/aaPanel.git
synced 2026-09-12 20:47:39 +02:00
v6.8.8
1. Add user login function. 2. Add the first professional plug-in Nginx WAF. 3. Release a new version of the online editor. 4. Fixed some bugs.
This commit is contained in:
jose
@@ -0,0 +1,209 @@
|
||||
#coding: utf-8
|
||||
#-------------------------------------------------------------------
|
||||
# 宝塔Linux面板
|
||||
#-------------------------------------------------------------------
|
||||
# Copyright (c) 2015-2020 宝塔软件(http:#bt.cn) All rights reserved.
|
||||
#-------------------------------------------------------------------
|
||||
# Author: zhwen <zhw@bt.cn>
|
||||
#-------------------------------------------------------------------
|
||||
|
||||
#------------------------------
|
||||
# 禁止某个目录运行PHP
|
||||
#------------------------------
|
||||
import public,re,os,json,shutil
|
||||
|
||||
class PhpExecuteDeny:
|
||||
|
||||
def _init_conf(self,website):
|
||||
self.ng_website_conf = '/www/server/panel/vhost/nginx/{}.conf'.format(website)
|
||||
self.ap_website_conf = '/www/server/panel/vhost/apache/{}.conf'.format(website)
|
||||
self.ols_website_conf = '/www/server/panel/vhost/openlitespeed/detail/{}.conf'.format(website)
|
||||
self.webserver = public.get_webserver()
|
||||
|
||||
# 获取某个网站禁止运行的目录规则
|
||||
def get_php_deny(self,args):
|
||||
'''
|
||||
# 添加某个网站禁止运行PHP
|
||||
author: zhwen<zhw@bt.cn>
|
||||
:param args: website 网站名 str
|
||||
:return:
|
||||
'''
|
||||
self._init_conf(args.website)
|
||||
if self.webserver == 'nginx':
|
||||
data=self._get_nginx_php_deny()
|
||||
elif self.webserver == 'apache':
|
||||
data = self._get_apache_php_deny()
|
||||
else:
|
||||
data = self._get_ols_php_deny()
|
||||
return data
|
||||
|
||||
def _get_nginx_php_deny(self):
|
||||
conf = public.readFile(self.ng_website_conf)
|
||||
if not conf:
|
||||
return False
|
||||
data = re.findall('BEGIN_DENY_.*',conf)
|
||||
deny_name = [i.split('_')[-1] for i in data]
|
||||
result = []
|
||||
for i in deny_name:
|
||||
reg = '#BEGIN_DENY_{}\n\s*location\s*\~\*\s*\^(.*)\.\*.*\((.*)\)\$'.format(i)
|
||||
deny_directory = re.search(reg,conf).groups()[0]
|
||||
deny_suffix = re.search(reg,conf).groups()[1]
|
||||
result.append({'name':i,'dir':deny_directory,'suffix':deny_suffix})
|
||||
return result
|
||||
|
||||
def _get_apache_php_deny(self):
|
||||
conf = public.readFile(self.ap_website_conf)
|
||||
if not conf:
|
||||
return False
|
||||
data = re.findall('BEGIN_DENY_.*',conf)
|
||||
deny_name = [i.split('_')[-1] for i in data]
|
||||
result = []
|
||||
for i in deny_name:
|
||||
reg = '#BEGIN_DENY_{}\n\s*<Directory\s*\~\s*"(.*)\.\*.*\((.*)\)\$'.format(i)
|
||||
deny_directory = re.search(reg,conf).groups()[0]
|
||||
deny_suffix = re.search(reg,conf).groups()[1]
|
||||
result.append({'name':i,'dir':deny_directory,'suffix':deny_suffix})
|
||||
return result
|
||||
|
||||
def _get_ols_php_deny(self):
|
||||
conf = public.readFile(self.ols_website_conf)
|
||||
if not conf:
|
||||
return False
|
||||
data = re.findall('BEGIN_DENY_.*',conf)
|
||||
deny_name = [i.split('_')[-1] for i in data]
|
||||
result = []
|
||||
for i in deny_name:
|
||||
reg = '#BEGIN_DENY_{}\n\s*rules\s*RewriteRule\s*\^(.*)\.\*.*\((.*)\)\$'.format(i)
|
||||
deny_directory = re.search(reg, conf).groups()[0]
|
||||
deny_suffix = re.search(reg,conf).groups()[1]
|
||||
result.append({'name':i,'dir':deny_directory,'suffix':deny_suffix})
|
||||
return result
|
||||
|
||||
def set_php_deny(self,args):
|
||||
'''
|
||||
# 添加某个网站禁止运行PHP
|
||||
author: zhwen<zhw@bt.cn>
|
||||
:param args: website 网站名 str
|
||||
:param args: deny_name 规则名称 str
|
||||
:param args: suffix 禁止访问的后续名 str
|
||||
:param args: dir 禁止访问的目录 str
|
||||
:param args: deny_name 规则名称
|
||||
:param args: act 操作方法
|
||||
:return:
|
||||
'''
|
||||
tmp = self._check_args(args)
|
||||
if tmp:
|
||||
return tmp
|
||||
deny_name = args.deny_name
|
||||
dir = args.dir
|
||||
suffix = args.suffix
|
||||
website = args.website
|
||||
self._init_conf(website)
|
||||
conf = public.readFile(self.ng_website_conf)
|
||||
if not conf:
|
||||
return False
|
||||
data = re.findall('BEGIN_DENY_.*',conf)
|
||||
exist_deny_name = [i.split('_')[-1] for i in data]
|
||||
if args.act == 'edit':
|
||||
if deny_name not in exist_deny_name:
|
||||
return public.returnMsg(False, 'The specify rule name is not exists! [ {} ]'.format(deny_name))
|
||||
self.del_php_deny(args)
|
||||
else:
|
||||
if deny_name in exist_deny_name:
|
||||
return public.returnMsg(False,'The specify rule name is already exists! [ {} ]'.format(deny_name))
|
||||
self._set_nginx_php_deny(deny_name,dir,suffix)
|
||||
self._set_apache_php_deny(deny_name,dir,suffix)
|
||||
self._set_ols_php_deny(deny_name,dir,suffix)
|
||||
public.serviceReload()
|
||||
return public.returnMsg(True,'Add Successfully')
|
||||
|
||||
def _set_nginx_php_deny(self,name,dir=None,suffix=None):
|
||||
conf = public.readFile(self.ng_website_conf)
|
||||
if not conf:
|
||||
return False
|
||||
if not dir and not suffix:
|
||||
reg = '\s*#BEGIN_DENY_{n}\n(.|\n)*#END_DENY_{n}\n'.format(n=name)
|
||||
conf = re.sub(reg,'',conf)
|
||||
else:
|
||||
new = '''
|
||||
#BEGIN_DENY_%s
|
||||
location ~* ^%s.*.(%s)$ {
|
||||
deny all;
|
||||
}
|
||||
#END_DENY_%s
|
||||
''' % (name,dir,suffix,name)
|
||||
if '#BEGIN_DENY_{}\n'.format(name) in conf:
|
||||
return True
|
||||
conf = re.sub('#ERROR-PAGE-END','#ERROR-PAGE-END'+new,conf)
|
||||
public.writeFile(self.ng_website_conf,conf)
|
||||
return True
|
||||
|
||||
def _set_apache_php_deny(self,name,dir=None,suffix=None):
|
||||
conf = public.readFile(self.ap_website_conf)
|
||||
if not conf:
|
||||
return False
|
||||
if not dir and not suffix:
|
||||
reg = '\s*#BEGIN_DENY_{n}\n(.|\n)*#END_DENY_{n}'.format(n=name)
|
||||
conf = re.sub(reg,'',conf)
|
||||
else:
|
||||
new = '''
|
||||
#BEGIN_DENY_{n}
|
||||
<Directory ~ "{d}.*\.(s)$">
|
||||
Order allow,deny
|
||||
Deny from all
|
||||
</Directory>
|
||||
#END_DENY_{n}
|
||||
'''.format(n=name,d=dir,s=suffix)
|
||||
if '#BEGIN_DENY_{}'.format(name) in conf:
|
||||
return True
|
||||
conf = re.sub('#DENY\s*FILES',new+'\n #DENY FILES',conf)
|
||||
public.writeFile(self.ap_website_conf,conf)
|
||||
return True
|
||||
|
||||
def _set_ols_php_deny(self,name,dir=None,suffix=None):
|
||||
conf = public.readFile(self.ols_website_conf)
|
||||
if not conf:
|
||||
return False
|
||||
if not dir and not suffix:
|
||||
reg = '#BEGIN_DENY_{n}\n(.|\n)*#END_DENY_{n}\s*'.format(n=name)
|
||||
conf = re.sub(reg,'',conf)
|
||||
else:
|
||||
new = '''
|
||||
#BEGIN_DENY_{n}
|
||||
rules RewriteRule ^{d}.*\.({s})$ - [F,L]
|
||||
#END_DENY_{n}
|
||||
'''.format(n=name,d=dir,s=suffix)
|
||||
if '#BEGIN_DENY_{}'.format(name) in conf:
|
||||
return True
|
||||
conf = re.sub('autoLoadHtaccess\s*1','autoLoadHtaccess 1'+new,conf)
|
||||
public.writeFile(self.ols_website_conf,conf)
|
||||
return True
|
||||
|
||||
# 删除某个网站禁止运行PHP
|
||||
def del_php_deny(self,args):
|
||||
'''
|
||||
# 添加某个网站禁止运行PHP
|
||||
author: zhwen<zhw@bt.cn>
|
||||
:param args: website 网站名 str
|
||||
:param args: deny_name 规则名称 str
|
||||
:return:
|
||||
'''
|
||||
self._init_conf(args.website)
|
||||
deny_name = args.deny_name
|
||||
self._set_nginx_php_deny(deny_name)
|
||||
self._set_apache_php_deny(deny_name)
|
||||
self._set_ols_php_deny(deny_name)
|
||||
public.serviceReload()
|
||||
return public.returnMsg(True,'Delete Successfully')
|
||||
|
||||
# 检查传入参数
|
||||
def _check_args(self,args):
|
||||
if hasattr(args,'deny_name'):
|
||||
if len(args.deny_name) < 3:
|
||||
return public.returnMsg(False, 'Rule name needs to be greater than 3 bytes')
|
||||
if hasattr(args,'suffix'):
|
||||
if not args.suffix:
|
||||
return public.returnMsg(False, 'File suffix cannot be empty')
|
||||
if hasattr(args,'dir'):
|
||||
if not args.dir:
|
||||
return public.returnMsg(False, 'Directory cannot be empty')
|
||||
Reference in New Issue
Block a user