mirror of
https://github.com/aaPanel/aaPanel.git
synced 2026-09-28 20:34:52 +02:00
Update to 7.7.0
Since version 7.7.0, we recommend yours update python to 3.12. [+] Using nginx technology to load static files improves access speed [+] Refactor homepage, website, FTP, and database using vue3 [+] Table loading changed to skeleton screen [+] Add Website statistics-v2 professional plug-in [+] Add Home page - top 5 resource occupancy [+] Add protection for Files management (requires Tamper-proof for Enterprise 3.7) [+] Website, FTP, Databases page add program status [+] Add FTP log analysis (only supports Centos) [+] Add password-free login to phpMyAdmin [+] Add Proxy Project in Website (Supported when web service uses Nginx) [+] Add WP Toolkit (Pro version only) [+] Redesigned Docker module [+] Add WP Toolkit Protection [+] Add WP Toolkit Backup and Restore [+] Add WP Toolkit Migrated [+] Add WP Toolkit Clone site (supports new domain and subdomain) [+] Add WP Toolkit Create site from backup of other panel [+] Add WP Toolkit support for Cron automatic backup (only save Local disk) [+] Add WP Toolkit operation log [+] Add Integrity check for WP Toolkit [+] Add WP Toolkit plug-in management and themes management [*] Optimize phpMyAdmin formula access method [*] Optimize Home page PHP display problem [*] Optimize jump to the login interface after the login expires [*] Optimize automatic renewal of SSL at some times [*] Optimize Let's Encrypt to increase application success rate [-] Fix Logs Audit cannot be opened [-] Fix apache URL rewrite issue [-] Fix phpmyadmin installation problem [-] Fix the problem that some servers cannot install software [-] Fix upload file error [-] Fix left menu hiding problem [-] Fix aaPanel Mobile QR code display problem [-] Fix problem that third-party plug-ins are not displayed in the App Store [-] Fix issue where the menu bar is blank when opening new tabs [-] Fixed panel not being accessible in some cases [-] Fix the issue where Curl warning caused the inability to apply for SSL [-] Fix Quota issues for Website, FTP, Databases [-] Fix file interface display problem on mobile terminal
This commit is contained in:
Jack
@@ -0,0 +1,223 @@
|
||||
# WP Toolkit security
|
||||
# author: hzh<2024-07-02>
|
||||
import public
|
||||
from public.validate import Param
|
||||
|
||||
|
||||
# WP安全模块类
|
||||
class wp_security:
|
||||
|
||||
# 开启文件防护
|
||||
def open_file_protection(self, get):
|
||||
# 校验参数
|
||||
try:
|
||||
get.validate([
|
||||
Param('paths').Require().String(),
|
||||
], [
|
||||
public.validate.trim_filter(),
|
||||
])
|
||||
except Exception as ex:
|
||||
public.print_log("error info: {}".format(ex))
|
||||
return public.return_message(-1, 0, str(ex))
|
||||
|
||||
tamper_core_status = public.run_plugin('tamper_core', 'get_service_status', public.to_dict_obj({}))
|
||||
if not (tamper_core_status["kernel_module_status"] and tamper_core_status["controller_status"]):
|
||||
return public.return_message(-1,0,'Sorry, opening failed, please go to the App Store --Tamper-proof for Enterprise to view details')
|
||||
|
||||
result= public.run_plugin('tamper_core', 'multi_create', public.to_dict_obj({
|
||||
'paths': get.paths,
|
||||
}))
|
||||
if 'status' in result:
|
||||
return public.return_message(-1,0,result[0]['msg'])
|
||||
if type(result)==list:
|
||||
# for i in result:
|
||||
|
||||
public.run_plugin('tamper_core', 'assign_rule_to_directory', public.to_dict_obj({
|
||||
'rule_group_name': 'WordPress Normal',
|
||||
'path_id': result[0]['pid'],
|
||||
}))
|
||||
return public.return_message(0,0,'Successfully added file protection')
|
||||
|
||||
#取安全防护配置
|
||||
def get_security_info(self, get):
|
||||
|
||||
# 校验参数
|
||||
try:
|
||||
get.validate([
|
||||
Param('path').Require().String(),
|
||||
Param('site_name').Require().String(),
|
||||
], [
|
||||
public.validate.trim_filter(),
|
||||
])
|
||||
except Exception as ex:
|
||||
public.print_log("error info: {}".format(ex))
|
||||
return public.return_message(-1, 0, str(ex))
|
||||
|
||||
return_result={
|
||||
'hotlink_status':0,
|
||||
'file_status':0,
|
||||
'firewall_status':0,
|
||||
'file_count':0,
|
||||
'firewall_count':0,
|
||||
}
|
||||
if get.path[-1] !='/':
|
||||
get.path+='/'
|
||||
#取文件防护配置
|
||||
tamper_core_status = public.run_plugin('tamper_core', 'get_service_status', public.to_dict_obj({}))
|
||||
if tamper_core_status["kernel_module_status"] and tamper_core_status["controller_status"]:
|
||||
result= public.run_plugin('tamper_core', 'get_tamper_paths', public.to_dict_obj({}))
|
||||
if type(result)==list:
|
||||
for i in result:
|
||||
if i['path']==get.path and i['status']==1:
|
||||
return_result['file_status']=1
|
||||
today=i['total']['today']
|
||||
return_result['file_count']=int(today['create'])+int(today['modify'])+int(today['unlink'])+int(today['rename'])+int(today['mkdir'])+int(today['rmdir'])+int(today['chmod'])+int(today['chown'])+int(today['link'])
|
||||
break
|
||||
|
||||
#取防火墙配置
|
||||
result= public.run_plugin('btwaf', 'get_site_config_byname', public.to_dict_obj({'siteName':get.site_name}))
|
||||
try:
|
||||
if result['open']:
|
||||
return_result['firewall_status']=1
|
||||
except:
|
||||
pass
|
||||
result= public.run_plugin('btwaf', 'get_site_config3', public.to_dict_obj({'siteName':get.site_name}))
|
||||
try:
|
||||
if type(result['data'])==list:
|
||||
for i in result['data']:
|
||||
if i['siteName']!=get.site_name:
|
||||
continue
|
||||
if type(i['total'])==list:
|
||||
for total in i['total']:
|
||||
return_result['firewall_count']+=int(total['value'])
|
||||
except:
|
||||
pass
|
||||
|
||||
return public.return_message(0,0,return_result)
|
||||
|
||||
#关闭文件保护
|
||||
def close_file_protection(self, get):
|
||||
# 校验参数
|
||||
try:
|
||||
get.validate([
|
||||
Param('path_id').Require().String(),
|
||||
], [
|
||||
public.validate.trim_filter(),
|
||||
])
|
||||
except Exception as ex:
|
||||
public.print_log("error info: {}".format(ex))
|
||||
return public.return_message(-1, 0, str(ex))
|
||||
tamper_core_status = public.run_plugin('tamper_core', 'get_service_status', public.to_dict_obj({}))
|
||||
if not (tamper_core_status["kernel_module_status"] and tamper_core_status["controller_status"]):
|
||||
return public.return_message(-1,0,'Sorry, opening failed, please go to the App Store --Tamper-proof for Enterprise to view details')
|
||||
|
||||
result= public.run_plugin('tamper_core', 'remove_path_config', public.to_dict_obj({
|
||||
'path_id': get.path_id,
|
||||
}))
|
||||
status=0
|
||||
if not result['status']:
|
||||
status=-1
|
||||
return public.return_message(status,0,result['msg'])
|
||||
|
||||
|
||||
|
||||
# 开启防火墙防护
|
||||
def open_firewall_protection(self, get):
|
||||
# 校验参数
|
||||
try:
|
||||
get.validate([
|
||||
Param('site_name').Require().String(),
|
||||
Param('obj').Require().String(),
|
||||
], [
|
||||
public.validate.trim_filter(),
|
||||
])
|
||||
except Exception as ex:
|
||||
public.print_log("error info: {}".format(ex))
|
||||
return public.return_message(-1, 0, str(ex))
|
||||
|
||||
result= public.run_plugin('btwaf', 'get_total_all', public.to_dict_obj({
|
||||
}))
|
||||
if not result['open']:
|
||||
result= public.run_plugin('btwaf', 'set_open', public.to_dict_obj({
|
||||
}))
|
||||
if not result['status']:
|
||||
return public.return_message(-1,0,'Failed to open firewall')
|
||||
|
||||
result= public.run_plugin('btwaf', 'get_site_config_byname', public.to_dict_obj({
|
||||
'siteName': get.site_name,
|
||||
}))
|
||||
if not result['open']:
|
||||
result= public.run_plugin('btwaf', 'set_site_obj_open', public.to_dict_obj({
|
||||
'siteName': get.site_name,
|
||||
'obj': get.obj,
|
||||
}))
|
||||
if not result['status']:
|
||||
return public.return_message(-1,0,'Failed to open firewall')
|
||||
return public.return_message(0,0,'Successfully opened firewall')
|
||||
|
||||
|
||||
# 关闭防火墙防护
|
||||
def close_firewall_protection(self, get):
|
||||
# 校验参数
|
||||
try:
|
||||
get.validate([
|
||||
Param('site_name').Require().String(),
|
||||
], [
|
||||
public.validate.trim_filter(),
|
||||
])
|
||||
except Exception as ex:
|
||||
public.print_log("error info: {}".format(ex))
|
||||
return public.return_message(-1, 0, str(ex))
|
||||
|
||||
result= public.run_plugin('btwaf', 'set_site_obj_open', public.to_dict_obj({
|
||||
'siteName': get.site_name,
|
||||
'obj': 'open',
|
||||
}))
|
||||
if not result['status']:
|
||||
return public.return_message(-1,0,'Failed to close firewall')
|
||||
return public.return_message(0,0,'Successfully closeed firewall')
|
||||
|
||||
# 获取防火墙防护配置
|
||||
def get_firewall_info(self, get):
|
||||
# 校验参数
|
||||
try:
|
||||
get.validate([
|
||||
Param('site_name').Require().String(),
|
||||
], [
|
||||
public.validate.trim_filter(),
|
||||
])
|
||||
except Exception as ex:
|
||||
public.print_log("error info: {}".format(ex))
|
||||
return public.return_message(-1, 0, str(ex))
|
||||
|
||||
result= public.run_plugin('btwaf', 'get_site_config_byname', public.to_dict_obj({
|
||||
'siteName':get.site_name,
|
||||
}))
|
||||
return public.return_message(0,0,result)
|
||||
|
||||
|
||||
# 获取文件防护配置
|
||||
def get_file_info(self, get):
|
||||
# 校验参数
|
||||
try:
|
||||
get.validate([
|
||||
Param('path').Require().String(),
|
||||
], [
|
||||
public.validate.trim_filter(),
|
||||
])
|
||||
except Exception as ex:
|
||||
public.print_log("error info: {}".format(ex))
|
||||
return public.return_message(-1, 0, str(ex))
|
||||
if get.path[-1] !='/':
|
||||
get.path+='/'
|
||||
result= public.run_plugin('tamper_core', 'get_tamper_paths', public.to_dict_obj({
|
||||
'path':get.path,
|
||||
}))
|
||||
for i in result:
|
||||
if i['path']==get.path:
|
||||
return public.return_message(0,0,i)
|
||||
return public.return_message(0,0,{})
|
||||
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user