mirror of
https://github.com/aaPanel/aaPanel.git
synced 2026-08-30 11:49:48 +02:00
jose
5e2cbf9a5c
1. After the update, the software and panel directory permissions will be set to strict mode (it will be restored automatically after modification) 2. Increase the panel comprehensive anti-riot mechanism 3. Enhance the security of the panel session<br> 4. Enhanced panel entry verification mechanism 5. Optimize the terminal 6. Optimize the panel memory release mechanism Note 1: Version 6.8.2/6.9.11 has security issues, please be sure to upgrade to the latest version Note 2: After this update is successful, it will automatically log out and you need to log in again
1438 lines
62 KiB
Python
1438 lines
62 KiB
Python
# coding: utf-8
|
|
# +-------------------------------------------------------------------
|
|
# | 宝塔Linux面板 x3
|
|
# +-------------------------------------------------------------------
|
|
# | Copyright (c) 2015-2017 宝塔软件(http://bt.cn) All rights reserved.
|
|
# +-------------------------------------------------------------------
|
|
# | Author: hwliang <hwl@bt.cn>
|
|
# +-------------------------------------------------------------------
|
|
import public,re,sys,os,nginx,apache,json,time,ols
|
|
try:
|
|
import pyotp
|
|
except:
|
|
public.ExecShell("pip install pyotp &")
|
|
try:
|
|
from BTPanel import session,admin_path_checks,g,request
|
|
import send_mail
|
|
except:pass
|
|
class config:
|
|
_setup_path = "/www/server/panel"
|
|
_key_file = _setup_path+"/data/two_step_auth.txt"
|
|
_bk_key_file = _setup_path + "/data/bk_two_step_auth.txt"
|
|
_username_file = _setup_path + "/data/username.txt"
|
|
_core_fle_path = _setup_path + '/data/qrcode'
|
|
__mail_config = '/www/server/panel/data/stmp_mail.json'
|
|
__mail_list_data = '/www/server/panel/data/mail_list.json'
|
|
__dingding_config = '/www/server/panel/data/dingding.json'
|
|
__mail_list = []
|
|
__weixin_user = []
|
|
|
|
def __init__(self):
|
|
try:
|
|
self.mail = send_mail.send_mail()
|
|
if not os.path.exists(self.__mail_list_data):
|
|
ret = []
|
|
public.writeFile(self.__mail_list_data, json.dumps(ret))
|
|
else:
|
|
try:
|
|
mail_data = json.loads(public.ReadFile(self.__mail_list_data))
|
|
self.__mail_list = mail_data
|
|
except:
|
|
ret = []
|
|
public.writeFile(self.__mail_list_data, json.dumps(ret))
|
|
except:pass
|
|
# 返回配置邮件地址
|
|
def return_mail_list(self, get):
|
|
return public.returnMsg(True, self.__mail_list)
|
|
|
|
# 删除邮件接口
|
|
def del_mail_list(self, get):
|
|
emial = get.email.strip()
|
|
if emial in self.__mail_list:
|
|
self.__mail_list.remove(emial)
|
|
public.writeFile(self.__mail_list_data, json.dumps(self.__mail_list))
|
|
return public.returnMsg(True, 'Successfully deleted')
|
|
else:
|
|
return public.returnMsg(True, 'Email does not exist')
|
|
|
|
#添加接受邮件地址
|
|
def add_mail_address(self, get):
|
|
if not hasattr(get, 'email'): return public.returnMsg(False, 'Please input your email')
|
|
emailformat = re.compile(r'[a-zA-Z0-9.-_+%]+@[a-zA-Z0-9]+\.[a-zA-Z0-9]+')
|
|
if not emailformat.search(get.email): return public.returnMsg(False, 'Please enter your vaild email')
|
|
# 测试发送邮件
|
|
if get.email.strip() in self.__mail_list: return public.returnMsg(True, 'Email already exists')
|
|
self.__mail_list.append(get.email.strip())
|
|
public.writeFile(self.__mail_list_data, json.dumps(self.__mail_list))
|
|
return public.returnMsg(True, 'Added successfully')
|
|
|
|
# 添加自定义邮箱地址
|
|
def user_mail_send(self, get):
|
|
if not (hasattr(get, 'email') or hasattr(get, 'stmp_pwd') or hasattr(get, 'hosts') or hasattr(get, 'port')):
|
|
return public.returnMsg(False, 'Please complete the information')
|
|
# 自定义邮件
|
|
self.mail.qq_stmp_insert(get.email.strip(), get.stmp_pwd.strip(), get.hosts.strip(),get.port.strip())
|
|
# 测试发送
|
|
if self.mail.qq_smtp_send(get.email.strip(), 'aaPanel Alert Test Email', 'aaPanel Alert Test Email'):
|
|
if not get.email.strip() in self.__mail_list:
|
|
self.__mail_list.append(get.email.strip())
|
|
public.writeFile(self.__mail_list_data, json.dumps(self.__mail_list))
|
|
return public.returnMsg(True, 'Added successfully')
|
|
else:
|
|
ret = []
|
|
public.writeFile(self.__mail_config, json.dumps(ret))
|
|
return public.returnMsg(False, 'Email sending failed, please check if the STMP password is correct or the hosts are correct')
|
|
|
|
# 查看自定义邮箱配置
|
|
def get_user_mail(self, get):
|
|
qq_mail_info = json.loads(public.ReadFile(self.__mail_config))
|
|
if len(qq_mail_info) == 0:
|
|
return public.returnMsg(False, 'No Data')
|
|
if not 'port' in qq_mail_info:qq_mail_info['port']=465
|
|
return public.returnMsg(True, qq_mail_info)
|
|
|
|
|
|
# 用户自定义邮件发送
|
|
def user_stmp_mail_send(self, get):
|
|
if not (hasattr(get, 'email')): return public.returnMsg(False, 'Please fill in the email address')
|
|
emailformat = re.compile(r'[a-zA-Z0-9.-_+%]+@[a-zA-Z0-9]+\.[a-zA-Z0-9]+')
|
|
if not emailformat.search(get.email): return public.returnMsg(False, 'Please enter your vaild email')
|
|
# 测试发送邮件
|
|
if not get.email.strip() in self.__mail_list: return public.returnMsg(True, 'The mailbox does not exist, please add it to the mailbox list')
|
|
if not (hasattr(get, 'title')): return public.returnMsg(False, 'Please fill in the message header')
|
|
if not (hasattr(get, 'body')): return public.returnMsg(False, 'Please enter the message content')
|
|
# 先判断是否存在stmp信息
|
|
qq_mail_info = json.loads(public.ReadFile(self.__mail_config))
|
|
if len(qq_mail_info) == 0:
|
|
return public.returnMsg(False, 'STMP information was not found, please re-add custom mail STMP information in the settings')
|
|
if self.mail.qq_smtp_send(get.email.strip(), get.title.strip(), get.body):
|
|
# 发送成功
|
|
return public.returnMsg(True, 'Sent successfully')
|
|
else:
|
|
return public.returnMsg(False, 'Failed to send')
|
|
|
|
# 查看能使用的告警通道
|
|
def get_settings(self, get):
|
|
qq_mail_info = json.loads(public.ReadFile(self.__mail_config))
|
|
if len(qq_mail_info) == 0:
|
|
user_mail = False
|
|
else:
|
|
user_mail = True
|
|
dingding_info = json.loads(public.ReadFile(self.__dingding_config))
|
|
if len(dingding_info) == 0:
|
|
dingding = False
|
|
else:
|
|
dingding = True
|
|
ret = {}
|
|
ret['user_mail'] = {"user_name": user_mail, "mail_list": self.__mail_list,"info":self.get_user_mail(get)}
|
|
ret['dingding'] = {"dingding": dingding,"info":self.get_dingding(get)}
|
|
return ret
|
|
# 设置钉钉报警
|
|
def set_dingding(self, get):
|
|
if not (hasattr(get, 'url') or hasattr(get, 'atall')):
|
|
return public.returnMsg(False, 'Please complete the information')
|
|
if get.atall:
|
|
get.atall = 'True'
|
|
else: get.atall = 'False'
|
|
self.mail.dingding_insert(get.url.strip(), get.atall)
|
|
if self.mail.dingding_send('aaPanel alarm test'):
|
|
return public.returnMsg(True, 'Added successfully')
|
|
else:
|
|
ret = []
|
|
public.writeFile(self.__dingding_config, json.dumps(ret))
|
|
return public.returnMsg(False, 'Add failed, please check if the URL is correct')
|
|
# 查看钉钉
|
|
def get_dingding(self, get):
|
|
qq_mail_info = json.loads(public.ReadFile(self.__dingding_config))
|
|
if len(qq_mail_info) == 0:
|
|
return public.returnMsg(False, 'No Data')
|
|
return public.returnMsg(True, qq_mail_info)
|
|
|
|
# 使用钉钉发送消息
|
|
def user_dingding_send(self, get):
|
|
qq_mail_info = json.loads(public.ReadFile(self.__dingding_config))
|
|
if len(qq_mail_info) == 0:
|
|
return public.returnMsg(False, 'The configuration information of the nails you configured was not found, please add in the settings')
|
|
if not (hasattr(get, 'content')): return public.returnMsg(False, 'Please enter the data you need to send')
|
|
if self.mail.dingding_send(get.content):
|
|
return public.returnMsg(True, 'Sent successfully')
|
|
else:
|
|
return public.returnMsg(False, 'Failed to send')
|
|
|
|
|
|
def getPanelState(self,get):
|
|
return os.path.exists('/www/server/panel/data/close.pl')
|
|
|
|
def reload_session(self):
|
|
userInfo = public.M('users').where("id=?",(1,)).field('username,password').find()
|
|
token = public.Md5(userInfo['username'] + '/' + userInfo['password'])
|
|
public.writeFile('/www/server/panel/data/login_token.pl',token)
|
|
|
|
sess_path = 'data/sess_files'
|
|
if not os.path.exists(sess_path):
|
|
os.makedirs(sess_path,384)
|
|
self.clean_sess_files(sess_path)
|
|
sess_key = public.get_sess_key()
|
|
sess_file = os.path.join(sess_path,sess_key)
|
|
public.writeFile(sess_file,str(int(time.time()+86400)))
|
|
public.set_mode(sess_file,'600')
|
|
session['login_token'] = token
|
|
|
|
def clean_sess_files(self,sess_path):
|
|
'''
|
|
@name 清理过期的sess_file
|
|
@auther hwliang<2020-07-25>
|
|
@param sess_path(string) sess_files目录
|
|
@return void
|
|
'''
|
|
s_time = time.time()
|
|
for fname in os.listdir(sess_path):
|
|
try:
|
|
if len(fname) != 32: continue
|
|
sess_file = os.path.join(sess_path,fname)
|
|
if not os.path.isfile(sess_file): continue
|
|
sess_tmp = public.ReadFile(sess_file)
|
|
if not sess_tmp:
|
|
if os.path.exists(sess_file):
|
|
os.remove(sess_file)
|
|
if s_time > int(sess_tmp):
|
|
os.remove(sess_file)
|
|
except:
|
|
pass
|
|
|
|
|
|
|
|
def setPassword(self,get):
|
|
if get.password1 != get.password2: return public.returnMsg(False,'USER_PASSWORD_CHECK')
|
|
if len(get.password1) < 5: return public.returnMsg(False,'USER_PASSWORD_LEN')
|
|
public.M('users').where("username=?",(session['username'],)).setField('password',public.password_salt(public.md5(get.password1.strip()),username=session['username']))
|
|
public.WriteLog('TYPE_PANEL','USER_PASSWORD_SUCCESS',(session['username'],))
|
|
self.reload_session()
|
|
return public.returnMsg(True,'USER_PASSWORD_SUCCESS')
|
|
|
|
def setUsername(self,get):
|
|
if get.username1 != get.username2: return public.returnMsg(False,'USER_USERNAME_CHECK')
|
|
if len(get.username1) < 3: return public.returnMsg(False,'USER_USERNAME_LEN')
|
|
public.M('users').where("username=?",(session['username'],)).setField('username',get.username1.strip())
|
|
public.WriteLog('TYPE_PANEL','USER_USERNAME_SUCCESS',(session['username'],get.username2))
|
|
session['username'] = get.username1
|
|
self.reload_session()
|
|
return public.returnMsg(True,'USER_USERNAME_SUCCESS')
|
|
|
|
#取用户列表
|
|
def get_users(self,args):
|
|
data = public.M('users').field('id,username').select()
|
|
return data
|
|
|
|
# 创建新用户
|
|
def create_user(self,args):
|
|
if session['uid'] != 1: return public.returnMsg(False,'Permission denied!')
|
|
if len(args.username) < 2: return public.returnMsg(False,'User name must be at least 2 characters')
|
|
if len(args.password) < 8: return public.returnMsg(False,'Password must be at least 8 characters')
|
|
pdata = {
|
|
"username": args.username.strip(),
|
|
"password": public.password_salt(public.md5(args.password.strip()),username=args.username.strip())
|
|
}
|
|
|
|
if(public.M('users').where('username=?',(pdata['username'],)).count()):
|
|
return public.returnMsg(False,'The specified username already exists!')
|
|
|
|
if(public.M('users').insert(pdata)):
|
|
public.WriteLog('User Management','Create new user {}'.format(pdata['username']))
|
|
return public.returnMsg(True,'Create new user {} success!'.format(pdata['username']))
|
|
return public.returnMsg(False,'Create new user failed!')
|
|
|
|
# 删除用户
|
|
def remove_user(self,args):
|
|
if session['uid'] != 1: return public.returnMsg(False,'Permission denied!')
|
|
if int(args.id) == 1: return public.returnMsg(False,'Cannot delete initial default user!')
|
|
username = public.M('users').where('id=?',(args.id,)).getField('username')
|
|
if not username: return public.returnMsg(False,'The specified user does not exist!')
|
|
if(public.M('users').where('id=?',(args.id,)).delete()):
|
|
public.WriteLog('User Management','delete users[{}]'.format(username))
|
|
return public.returnMsg(True,'Delete user {} success!'.format(username))
|
|
return public.returnMsg(False,'User deletion failed!')
|
|
|
|
# 修改用户
|
|
def modify_user(self,args):
|
|
if session['uid'] != 1: return public.returnMsg(False,'Permission denied!')
|
|
username = public.M('users').where('id=?',(args.id,)).getField('username')
|
|
pdata = {}
|
|
if 'username' in args:
|
|
if len(args.username) < 2: return public.returnMsg(False,'User name must be at least 2 characters')
|
|
pdata['username'] = args.username.strip()
|
|
|
|
if 'password' in args:
|
|
if args.password:
|
|
if len(args.password) < 8: return public.returnMsg(False,'Password must be at least 8 characters')
|
|
pdata['password'] = public.password_salt(public.md5(args.password.strip()),username=username)
|
|
|
|
if(public.M('users').where('id=?',(args.id,)).update(pdata)):
|
|
public.WriteLog('User Management',"Edit user{}".format(username))
|
|
return public.returnMsg(True,'Successfully modified!')
|
|
return public.returnMsg(False,'No changes submitted!')
|
|
|
|
def setPanel(self,get):
|
|
if not public.IsRestart(): return public.returnMsg(False,'EXEC_ERR_TASK')
|
|
isReWeb = False
|
|
sess_out_path = 'data/session_timeout.pl'
|
|
if 'session_timeout' in get:
|
|
session_timeout = int(get.session_timeout)
|
|
s_time_tmp = public.readFile(sess_out_path)
|
|
if not s_time_tmp: s_time_tmp = '0'
|
|
if int(s_time_tmp) != session_timeout:
|
|
if session_timeout < 300: return public.returnMsg(False,'NOT_LESS_THAN_TIMEOUT')
|
|
public.writeFile(sess_out_path,str(session_timeout))
|
|
isReWeb = True
|
|
|
|
workers_p = 'data/workers.pl'
|
|
if 'workers' in get:
|
|
workers = int(get.workers)
|
|
if int(public.readFile(workers_p)) != workers:
|
|
if workers < 1 or workers > 1024: return public.returnMsg(False,public.GetMsg("PANEL_THREAD_RANGE_ERR"))
|
|
public.writeFile(workers_p,str(workers))
|
|
isReWeb = True
|
|
|
|
if get.domain:
|
|
reg = r"^([\w\-\*]{1,100}\.){1,4}(\w{1,10}|\w{1,10}\.\w{1,10})$"
|
|
if not re.match(reg, get.domain): return public.returnMsg(False,'SITE_ADD_ERR_DOMAIN')
|
|
oldPort = public.GetHost(True)
|
|
if not 'port' in get:
|
|
get.port = oldPort
|
|
newPort = get.port
|
|
if oldPort != get.port:
|
|
get.port = str(int(get.port))
|
|
if self.IsOpen(get.port):
|
|
return public.returnMsg(False,'PORT_CHECK_EXISTS',(get.port,))
|
|
if int(get.port) >= 65535 or int(get.port) < 100: return public.returnMsg(False,'PORT_CHECK_RANGE')
|
|
public.writeFile('data/port.pl',get.port)
|
|
import firewalls
|
|
get.ps = public.getMsg('PORT_CHECK_PS')
|
|
fw = firewalls.firewalls()
|
|
fw.AddAcceptPort(get)
|
|
get.port = oldPort
|
|
get.id = public.M('firewall').where("port=?",(oldPort,)).getField('id')
|
|
fw.DelAcceptPort(get)
|
|
isReWeb = True
|
|
|
|
if get.webname != session['title']:
|
|
session['title'] = get.webname
|
|
public.SetConfigValue('title',get.webname)
|
|
|
|
limitip = public.readFile('data/limitip.conf')
|
|
if get.limitip != limitip: public.writeFile('data/limitip.conf',get.limitip)
|
|
|
|
public.writeFile('data/domain.conf',get.domain.strip())
|
|
public.writeFile('data/iplist.txt',get.address)
|
|
|
|
|
|
public.M('config').where("id=?",('1',)).save('backup_path,sites_path',(get.backup_path,get.sites_path))
|
|
session['config']['backup_path'] = os.path.join('/',get.backup_path)
|
|
session['config']['sites_path'] = os.path.join('/',get.sites_path)
|
|
db_backup = get.backup_path + '/database'
|
|
if not os.path.exists(db_backup):
|
|
try:
|
|
os.makedirs(db_backup,384)
|
|
except:
|
|
public.ExecShell('mkdir -p ' + db_backup)
|
|
site_backup = get.backup_path + '/site'
|
|
if not os.path.exists(site_backup):
|
|
try:
|
|
os.makedirs(site_backup,384)
|
|
except:
|
|
public.ExecShell('mkdir -p ' + site_backup)
|
|
|
|
mhost = public.GetHost()
|
|
if get.domain.strip(): mhost = get.domain
|
|
data = {'uri':request.path,'host':mhost+':'+newPort,'status':True,'isReWeb':isReWeb,'msg':public.getMsg('PANEL_SAVE')}
|
|
public.WriteLog('TYPE_PANEL','PANEL_SET_SUCCESS',(newPort,get.domain,get.backup_path,get.sites_path,get.address,get.limitip))
|
|
if isReWeb: public.restart_panel()
|
|
return data
|
|
|
|
|
|
def set_admin_path(self,get):
|
|
get.admin_path = get.admin_path.strip()
|
|
if get.admin_path == '': get.admin_path = '/'
|
|
if get.admin_path != '/':
|
|
if len(get.admin_path) < 6: return public.returnMsg(False, 'SECURITY_ENTRANCE_ADDRESS_NOT_LESS_THAN')
|
|
if get.admin_path in admin_path_checks: return public.returnMsg(False, 'SECURITY_ENTRANCE_ADDRESS_EXIST')
|
|
if not public.path_safe_check(get.admin_path) or get.admin_path[-1] == '.': return public.returnMsg(False, 'SECURITY_ENTRANCE_ADDRESS_INCORRECT')
|
|
if get.admin_path[0] != '/': return public.returnMsg(False, 'SECURITY_ENTRANCE_ADDRESS_INCORRECT')
|
|
else:
|
|
get.domain = public.readFile('data/domain.conf')
|
|
if not get.domain: get.domain = ''
|
|
get.limitip = public.readFile('data/limitip.conf')
|
|
if not get.limitip: get.limitip = ''
|
|
if not get.domain.strip() and not get.limitip.strip(): return public.returnMsg(False,
|
|
'SECURITY_ENTRANCE_ADDRESS_TRUEN_OFF_WARN')
|
|
|
|
admin_path_file = 'data/admin_path.pl'
|
|
admin_path = '/'
|
|
if os.path.exists(admin_path_file): admin_path = public.readFile(admin_path_file).strip()
|
|
if get.admin_path != admin_path:
|
|
public.writeFile(admin_path_file,get.admin_path)
|
|
public.restart_panel()
|
|
return public.returnMsg(True, 'EDIT_SUCCESS')
|
|
|
|
|
|
def setPathInfo(self,get):
|
|
#设置PATH_INFO
|
|
version = get.version
|
|
type = get.type
|
|
if public.get_webserver() == 'nginx':
|
|
path = public.GetConfigValue('setup_path')+'/nginx/conf/enable-php-'+version+'.conf'
|
|
conf = public.readFile(path)
|
|
rep = r"\s+#*include\s+pathinfo.conf;"
|
|
if type == 'on':
|
|
conf = re.sub(rep,'\n\t\t\tinclude pathinfo.conf;',conf)
|
|
else:
|
|
conf = re.sub(rep,'\n\t\t\t#include pathinfo.conf;',conf)
|
|
public.writeFile(path,conf)
|
|
public.serviceReload()
|
|
|
|
path = public.GetConfigValue('setup_path')+'/php/'+version+'/etc/php.ini'
|
|
conf = public.readFile(path)
|
|
rep = r"\n*\s*cgi\.fix_pathinfo\s*=\s*([0-9]+)\s*\n"
|
|
status = '0'
|
|
if type == 'on':status = '1'
|
|
conf = re.sub(rep,"\ncgi.fix_pathinfo = "+status+"\n",conf)
|
|
public.writeFile(path,conf)
|
|
public.WriteLog("TYPE_PHP", "PHP_PATHINFO_SUCCESS",(version,type))
|
|
public.phpReload(version)
|
|
return public.returnMsg(True,'SET_SUCCESS')
|
|
|
|
|
|
#设置文件上传大小限制
|
|
def setPHPMaxSize(self,get):
|
|
version = get.version
|
|
max = get.max
|
|
if int(max) < 2: return public.returnMsg(False,'PHP_UPLOAD_MAX_ERR')
|
|
#设置PHP
|
|
path = public.GetConfigValue('setup_path')+'/php/'+version+'/etc/php.ini'
|
|
ols_php_path = '/usr/local/lsws/lsphp{}/etc/php/{}.{}/litespeed/php.ini'.format(get.version, get.version[0],get.version[1])
|
|
if os.path.exists('/etc/redhat-release'):
|
|
ols_php_path = '/usr/local/lsws/lsphp' + get.version + '/etc/php.ini'
|
|
for p in [path,ols_php_path]:
|
|
if not p:
|
|
continue
|
|
if not os.path.exists(p):
|
|
continue
|
|
conf = public.readFile(p)
|
|
rep = r"\nupload_max_filesize\s*=\s*[0-9]+M"
|
|
conf = re.sub(rep,r'\nupload_max_filesize = '+max+'M',conf)
|
|
rep = r"\npost_max_size\s*=\s*[0-9]+M"
|
|
conf = re.sub(rep,r'\npost_max_size = '+max+'M',conf)
|
|
public.writeFile(p,conf)
|
|
|
|
if public.get_webserver() == 'nginx':
|
|
#设置Nginx
|
|
path = public.GetConfigValue('setup_path')+'/nginx/conf/nginx.conf'
|
|
conf = public.readFile(path)
|
|
rep = r"client_max_body_size\s+([0-9]+)m"
|
|
tmp = re.search(rep,conf).groups()
|
|
if int(tmp[0]) < int(max):
|
|
conf = re.sub(rep,'client_max_body_size '+max+'m',conf)
|
|
public.writeFile(path,conf)
|
|
|
|
public.serviceReload()
|
|
public.phpReload(version)
|
|
public.WriteLog("TYPE_PHP", "PHP_UPLOAD_MAX",(version,max))
|
|
return public.returnMsg(True,'SET_SUCCESS')
|
|
|
|
#设置禁用函数
|
|
def setPHPDisable(self,get):
|
|
filename = public.GetConfigValue('setup_path') + '/php/' + get.version + '/etc/php.ini'
|
|
ols_php_path = '/usr/local/lsws/lsphp{}/etc/php/{}.{}/litespeed/php.ini'.format(get.version, get.version[0],get.version[1])
|
|
if os.path.exists('/etc/redhat-release'):
|
|
ols_php_path = '/usr/local/lsws/lsphp' + get.version + '/etc/php.ini'
|
|
if not os.path.exists(filename): return public.returnMsg(False,'PHP_NOT_EXISTS')
|
|
for file in [filename,ols_php_path]:
|
|
if not os.path.exists(file):
|
|
continue
|
|
phpini = public.readFile(file)
|
|
rep = r"disable_functions\s*=\s*.*\n"
|
|
phpini = re.sub(rep, 'disable_functions = ' + get.disable_functions + "\n", phpini)
|
|
public.WriteLog('TYPE_PHP','PHP_DISABLE_FUNCTION',(get.version,get.disable_functions))
|
|
public.writeFile(file,phpini)
|
|
public.phpReload(get.version)
|
|
public.serviceReload()
|
|
return public.returnMsg(True,'SET_SUCCESS')
|
|
|
|
#设置PHP超时时间
|
|
def setPHPMaxTime(self,get):
|
|
time = get.time
|
|
version = get.version
|
|
if int(time) < 30 or int(time) > 86400: return public.returnMsg(False,'PHP_TIMEOUT_ERR')
|
|
file = public.GetConfigValue('setup_path')+'/php/'+version+'/etc/php-fpm.conf'
|
|
conf = public.readFile(file)
|
|
rep = r"request_terminate_timeout\s*=\s*([0-9]+)\n"
|
|
conf = re.sub(rep,"request_terminate_timeout = "+time+"\n",conf)
|
|
public.writeFile(file,conf)
|
|
|
|
file = '/www/server/php/'+version+'/etc/php.ini'
|
|
phpini = public.readFile(file)
|
|
rep = r"max_execution_time\s*=\s*([0-9]+)\r?\n"
|
|
phpini = re.sub(rep,"max_execution_time = "+time+"\n",phpini)
|
|
rep = r"max_input_time\s*=\s*([0-9]+)\r?\n"
|
|
phpini = re.sub(rep,"max_input_time = "+time+"\n",phpini)
|
|
public.writeFile(file,phpini)
|
|
|
|
if public.get_webserver() == 'nginx':
|
|
#设置Nginx
|
|
path = public.GetConfigValue('setup_path')+'/nginx/conf/nginx.conf'
|
|
conf = public.readFile(path)
|
|
rep = r"fastcgi_connect_timeout\s+([0-9]+);"
|
|
tmp = re.search(rep, conf).groups()
|
|
if int(tmp[0]) < int(time):
|
|
conf = re.sub(rep,'fastcgi_connect_timeout '+time+';',conf)
|
|
rep = r"fastcgi_send_timeout\s+([0-9]+);"
|
|
conf = re.sub(rep,'fastcgi_send_timeout '+time+';',conf)
|
|
rep = r"fastcgi_read_timeout\s+([0-9]+);"
|
|
conf = re.sub(rep,'fastcgi_read_timeout '+time+';',conf)
|
|
public.writeFile(path,conf)
|
|
|
|
public.WriteLog("TYPE_PHP", "PHP_TIMEOUT",(version,time))
|
|
public.serviceReload()
|
|
public.phpReload(version)
|
|
return public.returnMsg(True, 'SET_SUCCESS')
|
|
|
|
|
|
#取FPM设置
|
|
def getFpmConfig(self,get):
|
|
version = get.version
|
|
file = public.GetConfigValue('setup_path')+"/php/"+version+"/etc/php-fpm.conf"
|
|
conf = public.readFile(file)
|
|
data = {}
|
|
rep = r"\s*pm.max_children\s*=\s*([0-9]+)\s*"
|
|
tmp = re.search(rep, conf).groups()
|
|
data['max_children'] = tmp[0]
|
|
|
|
rep = r"\s*pm.start_servers\s*=\s*([0-9]+)\s*"
|
|
tmp = re.search(rep, conf).groups()
|
|
data['start_servers'] = tmp[0]
|
|
|
|
rep = r"\s*pm.min_spare_servers\s*=\s*([0-9]+)\s*"
|
|
tmp = re.search(rep, conf).groups()
|
|
data['min_spare_servers'] = tmp[0]
|
|
|
|
rep = r"\s*pm.max_spare_servers \s*=\s*([0-9]+)\s*"
|
|
tmp = re.search(rep, conf).groups()
|
|
data['max_spare_servers'] = tmp[0]
|
|
|
|
rep = r"\s*pm\s*=\s*(\w+)\s*"
|
|
tmp = re.search(rep, conf).groups()
|
|
data['pm'] = tmp[0]
|
|
|
|
return data
|
|
|
|
|
|
#设置
|
|
def setFpmConfig(self,get):
|
|
version = get.version
|
|
max_children = get.max_children
|
|
start_servers = get.start_servers
|
|
min_spare_servers = get.min_spare_servers
|
|
max_spare_servers = get.max_spare_servers
|
|
pm = get.pm
|
|
if not pm in ['static','dynamic','ondemand']:
|
|
return public.returnMsg(False,'Wrong operating mode!')
|
|
file = public.GetConfigValue('setup_path')+"/php/"+version+"/etc/php-fpm.conf"
|
|
conf = public.readFile(file)
|
|
|
|
rep = r"\s*pm.max_children\s*=\s*([0-9]+)\s*"
|
|
conf = re.sub(rep, "\npm.max_children = "+max_children, conf)
|
|
|
|
rep = r"\s*pm.start_servers\s*=\s*([0-9]+)\s*"
|
|
conf = re.sub(rep, "\npm.start_servers = "+start_servers, conf)
|
|
|
|
rep = r"\s*pm.min_spare_servers\s*=\s*([0-9]+)\s*"
|
|
conf = re.sub(rep, "\npm.min_spare_servers = "+min_spare_servers, conf)
|
|
|
|
rep = r"\s*pm.max_spare_servers \s*=\s*([0-9]+)\s*"
|
|
conf = re.sub(rep, "\npm.max_spare_servers = "+max_spare_servers+"\n", conf)
|
|
|
|
rep = r"\s*pm\s*=\s*(\w+)\s*"
|
|
conf = re.sub(rep, "\npm = "+pm+"\n", conf)
|
|
if pm == 'ondemand':
|
|
if conf.find('listen.backlog = -1') != -1:
|
|
rep = r"\s*listen\.backlog\s*=\s*([0-9-]+)\s*"
|
|
conf = re.sub(rep, "\nlisten.backlog = 8192\n", conf)
|
|
|
|
public.writeFile(file,conf)
|
|
public.phpReload(version)
|
|
public.WriteLog("TYPE_PHP",'PHP_CHILDREN', (version,max_children,start_servers,min_spare_servers,max_spare_servers))
|
|
return public.returnMsg(True, 'SET_SUCCESS')
|
|
|
|
#同步时间
|
|
def syncDate(self,get):
|
|
time_str = public.HttpGet(public.GetConfigValue('home') + '/api/index/get_time')
|
|
new_time = int(time_str)
|
|
time_arr = time.localtime(new_time)
|
|
date_str = time.strftime("%Y-%m-%d %H:%M:%S", time_arr)
|
|
public.ExecShell('date -s "%s"' % date_str)
|
|
public.WriteLog("TYPE_PANEL", "DATE_SUCCESS")
|
|
return public.returnMsg(True,"DATE_SUCCESS")
|
|
|
|
def IsOpen(self,port):
|
|
#检查端口是否占用
|
|
import socket
|
|
s = socket.socket(socket.AF_INET,socket.SOCK_STREAM)
|
|
try:
|
|
s.connect(('127.0.0.1',int(port)))
|
|
s.shutdown(2)
|
|
return True
|
|
except:
|
|
return False
|
|
|
|
#设置是否开启监控
|
|
def SetControl(self,get):
|
|
try:
|
|
if hasattr(get,'day'):
|
|
get.day = int(get.day)
|
|
get.day = str(get.day)
|
|
if(get.day < 1): return public.returnMsg(False,"CONTROL_ERR")
|
|
except:
|
|
pass
|
|
|
|
filename = 'data/control.conf'
|
|
if get.type == '1':
|
|
public.writeFile(filename,get.day)
|
|
public.WriteLog("TYPE_PANEL",'CONTROL_OPEN',(get.day,))
|
|
elif get.type == '0':
|
|
if os.path.exists(filename): os.remove(filename)
|
|
public.WriteLog("TYPE_PANEL", "CONTROL_CLOSE")
|
|
elif get.type == 'del':
|
|
if not public.IsRestart(): return public.returnMsg(False,'EXEC_ERR_TASK')
|
|
os.remove("data/system.db")
|
|
import db
|
|
sql = db.Sql()
|
|
sql.dbfile('system').create('system')
|
|
public.WriteLog("TYPE_PANEL", "CONTROL_CLOSE")
|
|
return public.returnMsg(True,"CONTROL_CLOSE")
|
|
|
|
else:
|
|
data = {}
|
|
if os.path.exists(filename):
|
|
try:
|
|
data['day'] = int(public.readFile(filename))
|
|
except:
|
|
data['day'] = 30
|
|
data['status'] = True
|
|
else:
|
|
data['day'] = 30
|
|
data['status'] = False
|
|
return data
|
|
|
|
return public.returnMsg(True,"SET_SUCCESS")
|
|
|
|
#关闭面板
|
|
def ClosePanel(self,get):
|
|
filename = 'data/close.pl'
|
|
if os.path.exists(filename):
|
|
os.remove(filename)
|
|
return public.returnMsg(True, 'OPEN_SUCCESSFUL')
|
|
public.writeFile(filename, 'True')
|
|
public.ExecShell("chmod 600 " + filename)
|
|
public.ExecShell("chown root.root " + filename)
|
|
return public.returnMsg(True,'PANEL_CLOSE')
|
|
|
|
|
|
#设置自动更新
|
|
def AutoUpdatePanel(self,get):
|
|
#return public.returnMsg(False,'体验服务器，禁止修改!')
|
|
filename = 'data/autoUpdate.pl'
|
|
if os.path.exists(filename):
|
|
os.remove(filename)
|
|
else:
|
|
public.writeFile(filename,'True')
|
|
public.ExecShell("chmod 600 " + filename)
|
|
public.ExecShell("chown root.root " + filename)
|
|
return public.returnMsg(True,'SET_SUCCESS')
|
|
|
|
#设置二级密码
|
|
def SetPanelLock(self,get):
|
|
path = 'data/lock'
|
|
if not os.path.exists(path):
|
|
public.ExecShell('mkdir ' + path)
|
|
public.ExecShell("chmod 600 " + path)
|
|
public.ExecShell("chown root.root " + path)
|
|
|
|
keys = ['files','tasks','config']
|
|
for name in keys:
|
|
filename = path + '/' + name + '.pl'
|
|
if hasattr(get,name):
|
|
public.writeFile(filename,'True')
|
|
else:
|
|
if os.path.exists(filename): os.remove(filename);
|
|
|
|
#设置PHP守护程序
|
|
def Set502(self,get):
|
|
filename = 'data/502Task.pl'
|
|
if os.path.exists(filename):
|
|
public.ExecShell('rm -f ' + filename)
|
|
else:
|
|
public.writeFile(filename,'True')
|
|
|
|
return public.returnMsg(True,'SET_SUCCESS')
|
|
|
|
#设置模板
|
|
def SetTemplates(self,get):
|
|
public.writeFile('data/templates.pl',get.templates)
|
|
return public.returnMsg(True,'SET_SUCCESS')
|
|
|
|
#设置面板SSL
|
|
def SetPanelSSL(self,get):
|
|
if hasattr(get,"email"):
|
|
#rep_mail = "^[a-zA-Z0-9_-]+@[a-zA-Z0-9_-]+(\.[a-zA-Z0-9_-]+)+$"
|
|
rep_mail = r"[\w!#$%&'*+/=?^_`{|}~-]+(?:\.[\w!#$%&'*+/=?^_`{|}~-]+)*@(?:[\w](?:[\w-]*[\w])?\.)+[\w](?:[\w-]*[\w])?"
|
|
if not re.search(rep_mail,get.email):
|
|
return public.returnMsg(False,'The E-Mail format is illegal')
|
|
import setPanelLets
|
|
sp = setPanelLets.setPanelLets()
|
|
sps = sp.set_lets(get)
|
|
return sps
|
|
else:
|
|
sslConf = '/www/server/panel/data/ssl.pl'
|
|
if os.path.exists(sslConf):
|
|
public.ExecShell('rm -f ' + sslConf)
|
|
return public.returnMsg(True,'PANEL_SSL_CLOSE')
|
|
else:
|
|
public.ExecShell('pip install cffi')
|
|
public.ExecShell('pip install cryptography')
|
|
public.ExecShell('pip install pyOpenSSL')
|
|
try:
|
|
if not self.CreateSSL(): return public.returnMsg(False,'PANEL_SSL_ERR')
|
|
public.writeFile(sslConf,'True')
|
|
except:
|
|
return public.returnMsg(False,'PANEL_SSL_ERR')
|
|
return public.returnMsg(True,'PANEL_SSL_OPEN')
|
|
#自签证书
|
|
def CreateSSL(self):
|
|
if os.path.exists('ssl/input.pl'): return True
|
|
import OpenSSL
|
|
key = OpenSSL.crypto.PKey()
|
|
key.generate_key(OpenSSL.crypto.TYPE_RSA, 2048)
|
|
cert = OpenSSL.crypto.X509()
|
|
cert.set_serial_number(0)
|
|
cert.get_subject().CN = public.GetLocalIp()
|
|
cert.set_issuer(cert.get_subject())
|
|
cert.gmtime_adj_notBefore( 0 )
|
|
cert.gmtime_adj_notAfter(86400 * 3650)
|
|
cert.set_pubkey( key )
|
|
cert.sign( key, 'md5' )
|
|
cert_ca = OpenSSL.crypto.dump_certificate(OpenSSL.crypto.FILETYPE_PEM, cert)
|
|
private_key = OpenSSL.crypto.dump_privatekey(OpenSSL.crypto.FILETYPE_PEM, key)
|
|
if len(cert_ca) > 100 and len(private_key) > 100:
|
|
public.writeFile('ssl/certificate.pem',cert_ca,'wb+')
|
|
public.writeFile('ssl/privateKey.pem',private_key,'wb+')
|
|
return True
|
|
return False
|
|
|
|
#生成Token
|
|
def SetToken(self,get):
|
|
data = {}
|
|
data[''] = public.GetRandomString(24)
|
|
|
|
#取面板列表
|
|
def GetPanelList(self,get):
|
|
try:
|
|
data = public.M('panel').field('id,title,url,username,password,click,addtime').order('click desc').select()
|
|
if type(data) == str: data[111]
|
|
return data
|
|
except:
|
|
sql = '''CREATE TABLE IF NOT EXISTS `panel` (
|
|
`id` INTEGER PRIMARY KEY AUTOINCREMENT,
|
|
`title` TEXT,
|
|
`url` TEXT,
|
|
`username` TEXT,
|
|
`password` TEXT,
|
|
`click` INTEGER,
|
|
`addtime` INTEGER
|
|
);'''
|
|
public.M('sites').execute(sql,())
|
|
return []
|
|
|
|
#添加面板资料
|
|
def AddPanelInfo(self,get):
|
|
|
|
#校验是还是重复
|
|
isAdd = public.M('panel').where('title=? OR url=?',(get.title,get.url)).count()
|
|
if isAdd: return public.returnMsg(False,'PANEL_SSL_ADD_EXISTS')
|
|
import time,json
|
|
isRe = public.M('panel').add('title,url,username,password,click,addtime',(get.title,get.url,get.username,get.password,0,int(time.time())))
|
|
if isRe: return public.returnMsg(True,'ADD_SUCCESS')
|
|
return public.returnMsg(False,'ADD_ERROR')
|
|
|
|
#修改面板资料
|
|
def SetPanelInfo(self,get):
|
|
#校验是还是重复
|
|
isSave = public.M('panel').where('(title=? OR url=?) AND id!=?',(get.title,get.url,get.id)).count()
|
|
if isSave: return public.returnMsg(False,'PANEL_SSL_ADD_EXISTS')
|
|
import time,json
|
|
|
|
#更新到数据库
|
|
isRe = public.M('panel').where('id=?',(get.id,)).save('title,url,username,password',(get.title,get.url,get.username,get.password))
|
|
if isRe: return public.returnMsg(True,'EDIT_SUCCESS')
|
|
return public.returnMsg(False,'EDIT_ERROR')
|
|
|
|
#删除面板资料
|
|
def DelPanelInfo(self,get):
|
|
isExists = public.M('panel').where('id=?',(get.id,)).count()
|
|
if not isExists: return public.returnMsg(False,'PANEL_SSL_ADD_NOT_EXISTS')
|
|
public.M('panel').where('id=?',(get.id,)).delete()
|
|
return public.returnMsg(True,'DEL_SUCCESS')
|
|
|
|
#点击计数
|
|
def ClickPanelInfo(self,get):
|
|
click = public.M('panel').where('id=?',(get.id,)).getField('click')
|
|
public.M('panel').where('id=?',(get.id,)).setField('click',click+1)
|
|
return True
|
|
|
|
#获取PHP配置参数
|
|
def GetPHPConf(self,get):
|
|
gets = [
|
|
{'name':'short_open_tag','type':1,'ps':public.getMsg('PHP_CONF_1')},
|
|
{'name':'asp_tags','type':1,'ps':public.getMsg('PHP_CONF_2')},
|
|
{'name':'max_execution_time','type':2,'ps':public.getMsg('PHP_CONF_4')},
|
|
{'name':'max_input_time','type':2,'ps':public.getMsg('PHP_CONF_5')},
|
|
{'name':'memory_limit','type':2,'ps':public.getMsg('PHP_CONF_6')},
|
|
{'name':'post_max_size','type':2,'ps':public.getMsg('PHP_CONF_7')},
|
|
{'name':'file_uploads','type':1,'ps':public.getMsg('PHP_CONF_8')},
|
|
{'name':'upload_max_filesize','type':2,'ps':public.getMsg('PHP_CONF_9')},
|
|
{'name':'max_file_uploads','type':2,'ps':public.getMsg('PHP_CONF_10')},
|
|
{'name':'default_socket_timeout','type':2,'ps':public.getMsg('PHP_CONF_11')},
|
|
{'name':'error_reporting','type':3,'ps':public.getMsg('PHP_CONF_12')},
|
|
{'name':'display_errors','type':1,'ps':public.getMsg('PHP_CONF_13')},
|
|
{'name':'cgi.fix_pathinfo','type':0,'ps':public.getMsg('PHP_CONF_14')},
|
|
{'name':'date.timezone','type':3,'ps':public.getMsg('PHP_CONF_15')}
|
|
]
|
|
phpini_file = '/www/server/php/' + get.version + '/etc/php.ini'
|
|
if public.get_webserver() == 'openlitespeed':
|
|
phpini_file = '/usr/local/lsws/lsphp{}/etc/php/{}.{}/litespeed/php.ini'.format(get.version, get.version[0],get.version[1])
|
|
if os.path.exists('/etc/redhat-release'):
|
|
phpini_file = '/usr/local/lsws/lsphp' + get.version + '/etc/php.ini'
|
|
phpini = public.readFile(phpini_file)
|
|
result = []
|
|
for g in gets:
|
|
rep = g['name'] + r'\s*=\s*([0-9A-Za-z_&/ ~]+)(\s*;?|\r?\n)'
|
|
tmp = re.search(rep,phpini)
|
|
if not tmp: continue
|
|
g['value'] = tmp.groups()[0]
|
|
result.append(g)
|
|
|
|
return result
|
|
|
|
|
|
def get_php_config(self,get):
|
|
#取PHP配置
|
|
get.version = get.version.replace('.','')
|
|
file = session['setupPath'] + "/php/"+get.version+"/etc/php.ini"
|
|
if public.get_webserver() == 'openlitespeed':
|
|
file = '/usr/local/lsws/lsphp{}/etc/php/{}.{}/litespeed/php.ini'.format(get.version, get.version[0],get.version[1])
|
|
if os.path.exists('/etc/redhat-release'):
|
|
file = '/usr/local/lsws/lsphp' + get.version + '/etc/php.ini'
|
|
phpini = public.readFile(file)
|
|
file = session['setupPath'] + "/php/"+get.version+"/etc/php-fpm.conf"
|
|
phpfpm = public.readFile(file)
|
|
data = {}
|
|
try:
|
|
rep = r"upload_max_filesize\s*=\s*([0-9]+)M"
|
|
tmp = re.search(rep,phpini).groups()
|
|
data['max'] = tmp[0]
|
|
except:
|
|
data['max'] = '50'
|
|
try:
|
|
rep = r"request_terminate_timeout\s*=\s*([0-9]+)\n"
|
|
tmp = re.search(rep,phpfpm).groups()
|
|
data['maxTime'] = tmp[0]
|
|
except:
|
|
data['maxTime'] = 0
|
|
|
|
try:
|
|
rep = r"\n;*\s*cgi\.fix_pathinfo\s*=\s*([0-9]+)\s*\n"
|
|
tmp = re.search(rep,phpini).groups()
|
|
|
|
if tmp[0] == '1':
|
|
data['pathinfo'] = True
|
|
else:
|
|
data['pathinfo'] = False
|
|
except:
|
|
data['pathinfo'] = False
|
|
|
|
return data
|
|
|
|
#提交PHP配置参数
|
|
def SetPHPConf(self,get):
|
|
gets = ['display_errors','cgi.fix_pathinfo','date.timezone','short_open_tag','asp_tags','max_execution_time','max_input_time','memory_limit','post_max_size','file_uploads','upload_max_filesize','max_file_uploads','default_socket_timeout','error_reporting']
|
|
filename = '/www/server/php/' + get.version + '/etc/php.ini'
|
|
reload_str = '/etc/init.d/php-fpm-' + get.version + ' reload'
|
|
ols_php_path = '/usr/local/lsws/lsphp{}/etc/php/{}.{}/litespeed/php.ini'.format(get.version, get.version[0],get.version[1])
|
|
if os.path.exists('/etc/redhat-release'):
|
|
ols_php_path = '/usr/local/lsws/lsphp' + get.version + '/etc/php.ini'
|
|
reload_ols_str = '/usr/local/lsws/bin/lswsctrl restart'
|
|
for p in [filename,ols_php_path]:
|
|
if not p:
|
|
continue
|
|
if not os.path.exists(p):
|
|
continue
|
|
phpini = public.readFile(filename)
|
|
for g in gets:
|
|
try:
|
|
rep = g + r'\s*=\s*(.+)\r?\n'
|
|
val = g+' = ' + get[g] + '\n'
|
|
phpini = re.sub(rep,val,phpini)
|
|
except: continue
|
|
|
|
public.writeFile(p,phpini)
|
|
public.ExecShell(reload_str)
|
|
public.ExecShell(reload_ols_str)
|
|
return public.returnMsg(True,'SET_SUCCESS')
|
|
|
|
|
|
# 取Session缓存方式
|
|
def GetSessionConf(self,get):
|
|
filename = '/www/server/php/' + get.version + '/etc/php.ini'
|
|
if public.get_webserver() == 'openlitespeed':
|
|
filename = '/usr/local/lsws/lsphp{}/etc/php/{}.{}/litespeed/php.ini'.format(get.version,get.version[0],get.version[1])
|
|
if os.path.exists('/etc/redhat-release'):
|
|
filename = '/usr/local/lsws/lsphp' + get.version + '/etc/php.ini'
|
|
phpini = public.readFile(filename)
|
|
rep = r'session.save_handler\s*=\s*([0-9A-Za-z_& ~]+)(\s*;?|\r?\n)'
|
|
save_handler = re.search(rep, phpini)
|
|
if save_handler:
|
|
save_handler = save_handler.group(1)
|
|
else:
|
|
save_handler = "files"
|
|
|
|
reppath = r'\nsession.save_path\s*=\s*"tcp\:\/\/([\d\.]+):(\d+).*\r?\n'
|
|
passrep = r'\nsession.save_path\s*=\s*"tcp://[\w\.\?\:]+=(.*)"\r?\n'
|
|
memcached = r'\nsession.save_path\s*=\s*"([\d\.]+):(\d+)"'
|
|
save_path = re.search(reppath, phpini)
|
|
if not save_path:
|
|
save_path = re.search(memcached, phpini)
|
|
passwd = re.search(passrep, phpini)
|
|
port = ""
|
|
if passwd:
|
|
passwd = passwd.group(1)
|
|
else:
|
|
passwd = ""
|
|
if save_path:
|
|
port = save_path.group(2)
|
|
save_path = save_path.group(1)
|
|
|
|
else:
|
|
save_path = ""
|
|
return {"save_handler": save_handler, "save_path": save_path, "passwd": passwd, "port": port}
|
|
|
|
# 设置Session缓存方式
|
|
def SetSessionConf(self, get):
|
|
import glob
|
|
g = get.save_handler
|
|
ip = get.ip
|
|
port = get.port
|
|
passwd = get.passwd
|
|
if g != "files":
|
|
iprep = r"(2(5[0-5]{1}|[0-4]\d{1})|[0-1]?\d{1,2})\.(2(5[0-5]{1}|[0-4]\d{1})|[0-1]?\d{1,2})\.(2(5[0-5]{1}|[0-4]\d{1})|[0-1]?\d{1,2})\.(2(5[0-5]{1}|[0-4]\d{1})|[0-1]?\d{1,2})"
|
|
if not re.search(iprep, ip):
|
|
return public.returnMsg(False, 'FIREWALL_IP_FORMAT')
|
|
try:
|
|
port = int(port)
|
|
if port >= 65535 or port < 1:
|
|
return public.returnMsg(False, 'SITE_ADD_ERR_PORT')
|
|
except:
|
|
return public.returnMsg(False, 'SITE_ADD_ERR_PORT')
|
|
prep = r"[\~\`\/\=]"
|
|
if re.search(prep, passwd):
|
|
return public.returnMsg(False, 'SPECIAL_CHARACTRES', ('" ~ ` / = "'))
|
|
filename = '/www/server/php/' + get.version + '/etc/php.ini'
|
|
filename_ols = None
|
|
if os.path.exists("/usr/local/lsws"):
|
|
filename_ols = '/usr/local/lsws/lsphp{}/etc/php/{}.{}/litespeed/php.ini'.format(get.version, get.version[0],
|
|
get.version[1])
|
|
if os.path.exists('/etc/redhat-release'):
|
|
filename_ols = '/usr/local/lsws/lsphp' + get.version + '/etc/php.ini'
|
|
try:
|
|
ols_php_os_path = glob.glob("/usr/local/lsws/lsphp{}/lib/php/20*".format(get.version))[0]
|
|
except:
|
|
ols_php_os_path = None
|
|
if os.path.exists("/etc/redhat-release"):
|
|
ols_php_os_path = '/usr/local/lsws/lsphp{}/lib64/php/modules/'.format(get.version)
|
|
ols_so_list = os.listdir(ols_php_os_path)
|
|
for f in [filename,filename_ols]:
|
|
if not f:
|
|
continue
|
|
phpini = public.readFile(f)
|
|
rep = r'session.save_handler\s*=\s*(.+)\r?\n'
|
|
val = r'session.save_handler = ' + g + '\n'
|
|
phpini = re.sub(rep, val, phpini)
|
|
if g == "memcached":
|
|
if not re.search("memcached.so", phpini) and "memcached.so" not in ols_so_list:
|
|
return public.returnMsg(False, 'INSTALL_EXTEND_FIRST', (g,))
|
|
rep = r'\nsession.save_path\s*=\s*(.+)\r?\n'
|
|
val = r'\nsession.save_path = "%s:%s" \n' % (ip,port)
|
|
if re.search(rep, phpini):
|
|
phpini = re.sub(rep, val, phpini)
|
|
else:
|
|
phpini = re.sub('\n;session.save_path = "/tmp"', '\n;session.save_path = "/tmp"' + val, phpini)
|
|
if g == "memcache":
|
|
if not re.search("memcache.so", phpini) and "memcache.so" not in ols_so_list:
|
|
return public.returnMsg(False, 'INSTALL_EXTEND_FIRST', (g,))
|
|
rep = r'\nsession.save_path\s*=\s*(.+)\r?\n'
|
|
val = r'\nsession.save_path = "tcp://%s:%s"\n' % (ip, port)
|
|
if re.search(rep, phpini):
|
|
phpini = re.sub(rep, val, phpini)
|
|
else:
|
|
phpini = re.sub('\n;session.save_path = "/tmp"', '\n;session.save_path = "/tmp"' + val, phpini)
|
|
if g == "redis":
|
|
if not re.search("redis.so", phpini) and "redis.so" not in ols_so_list:
|
|
return public.returnMsg(False, 'INSTALL_EXTEND_FIRST', (g,))
|
|
if passwd:
|
|
passwd = "?auth=" + passwd
|
|
else:
|
|
passwd = ""
|
|
rep = r'\nsession.save_path\s*=\s*(.+)\r?\n'
|
|
val = r'\nsession.save_path = "tcp://%s:%s%s"\n' % (ip, port, passwd)
|
|
res = re.search(rep, phpini)
|
|
if res:
|
|
phpini = re.sub(rep, val, phpini)
|
|
else:
|
|
phpini = re.sub('\n;session.save_path = "/tmp"', '\n;session.save_path = "/tmp"' + val, phpini)
|
|
if g == "files":
|
|
rep = r'\nsession.save_path\s*=\s*(.+)\r?\n'
|
|
val = r'\nsession.save_path = "/tmp"\n'
|
|
if re.search(rep, phpini):
|
|
phpini = re.sub(rep, val, phpini)
|
|
else:
|
|
phpini = re.sub('\n;session.save_path = "/tmp"', '\n;session.save_path = "/tmp"' + val, phpini)
|
|
public.writeFile(f, phpini)
|
|
public.ExecShell('/etc/init.d/php-fpm-' + get.version + ' reload')
|
|
public.serviceReload()
|
|
return public.returnMsg(True, 'SET_SUCCESS')
|
|
|
|
# 获取Session文件数量
|
|
def GetSessionCount(self, get):
|
|
d=["/tmp","/www/php_session"]
|
|
|
|
count = 0
|
|
for i in d:
|
|
if not os.path.exists(i): public.ExecShell('mkdir -p %s'%i)
|
|
list = os.listdir(i)
|
|
for l in list:
|
|
if os.path.isdir(i+"/"+l):
|
|
l1 = os.listdir(i+"/"+l)
|
|
for ll in l1:
|
|
if "sess_" in ll:
|
|
count += 1
|
|
continue
|
|
if "sess_" in l:
|
|
count += 1
|
|
|
|
s = "find /tmp -mtime +1 |grep 'sess_'|wc -l"
|
|
old_file = int(public.ExecShell(s)[0].split("\n")[0])
|
|
|
|
s = "find /www/php_session -mtime +1 |grep 'sess_'|wc -l"
|
|
old_file += int(public.ExecShell(s)[0].split("\n")[0])
|
|
|
|
return {"total":count,"oldfile":old_file}
|
|
|
|
# 删除老文件
|
|
def DelOldSession(self,get):
|
|
s = "find /tmp -mtime +1 |grep 'sess_'|xargs rm -f"
|
|
public.ExecShell(s)
|
|
s = "find /www/php_session -mtime +1 |grep 'sess_'|xargs rm -f"
|
|
public.ExecShell(s)
|
|
# s = "find /tmp -mtime +1 |grep 'sess_'|wc -l"
|
|
# old_file_conf = int(public.ExecShell(s)[0].split("\n")[0])
|
|
old_file_conf = self.GetSessionCount(get)["oldfile"]
|
|
if old_file_conf == 0:
|
|
return public.returnMsg(True, 'DEL_SUCCESS')
|
|
else:
|
|
return public.returnMsg(True, 'DEL_ERROR')
|
|
|
|
# 获取面板证书
|
|
def GetPanelSSL(self, get):
|
|
cert = {}
|
|
cert['privateKey'] = public.readFile('ssl/privateKey.pem')
|
|
cert['certPem'] = public.readFile('ssl/certificate.pem')
|
|
cert['rep'] = os.path.exists('ssl/input.pl')
|
|
return cert
|
|
|
|
#保存面板证书
|
|
def SavePanelSSL(self,get):
|
|
keyPath = 'ssl/privateKey.pem'
|
|
certPath = 'ssl/certificate.pem'
|
|
checkCert = '/tmp/cert.pl'
|
|
public.writeFile(checkCert,get.certPem)
|
|
if get.privateKey:
|
|
public.writeFile(keyPath,get.privateKey)
|
|
if get.certPem:
|
|
public.writeFile(certPath, get.certPem)
|
|
if not public.CheckCert(checkCert): return public.returnMsg(False, 'SITE_SSL_ERR_CERT')
|
|
public.writeFile('ssl/input.pl', 'True')
|
|
return public.returnMsg(True, 'SITE_SSL_SUCCESS')
|
|
|
|
#获取配置
|
|
def get_config(self,get):
|
|
if 'config' in session:
|
|
session['config']['distribution'] = public.get_linux_distribution()
|
|
return session['config']
|
|
data = public.M('config').where("id=?",('1',)).field('webserver,sites_path,backup_path,status,mysql_root').find()
|
|
data['distribution'] = public.get_linux_distribution()
|
|
return data
|
|
|
|
|
|
#取面板错误日志
|
|
def get_error_logs(self,get):
|
|
return public.GetNumLines('logs/error.log',2000)
|
|
|
|
def is_pro(self,get):
|
|
import panelAuth,json
|
|
pdata = panelAuth.panelAuth().create_serverid(None)
|
|
url = public.GetConfigValue('home') + '/api/panel/is_pro'
|
|
pluginTmp = public.httpPost(url,pdata)
|
|
pluginInfo = json.loads(pluginTmp)
|
|
return pluginInfo
|
|
|
|
def get_token(self,get):
|
|
import panelApi
|
|
return panelApi.panelApi().get_token(get)
|
|
|
|
def set_token(self,get):
|
|
import panelApi
|
|
return panelApi.panelApi().set_token(get)
|
|
|
|
def get_tmp_token(self,get):
|
|
import panelApi
|
|
return panelApi.panelApi().get_tmp_token(get)
|
|
|
|
def GetNginxValue(self,get):
|
|
n = nginx.nginx()
|
|
return n.GetNginxValue()
|
|
|
|
def SetNginxValue(self,get):
|
|
n = nginx.nginx()
|
|
return n.SetNginxValue(get)
|
|
|
|
def GetApacheValue(self,get):
|
|
a = apache.apache()
|
|
return a.GetApacheValue()
|
|
|
|
def SetApacheValue(self,get):
|
|
a = apache.apache()
|
|
return a.SetApacheValue(get)
|
|
|
|
def get_ols_value(self,get):
|
|
a = ols.ols()
|
|
return a.get_value(get)
|
|
|
|
def set_ols_value(self,get):
|
|
a = ols.ols()
|
|
return a.set_value(get)
|
|
|
|
def get_ols_private_cache(self,get):
|
|
a = ols.ols()
|
|
return a.get_private_cache(get)
|
|
|
|
def get_ols_static_cache(self,get):
|
|
a = ols.ols()
|
|
return a.get_static_cache(get)
|
|
|
|
def set_ols_static_cache(self,get):
|
|
a = ols.ols()
|
|
return a.set_static_cache(get)
|
|
|
|
def switch_ols_private_cache(self,get):
|
|
a = ols.ols()
|
|
return a.switch_private_cache(get)
|
|
|
|
def set_ols_private_cache(self,get):
|
|
a = ols.ols()
|
|
return a.set_private_cache(get)
|
|
|
|
def get_ols_private_cache_status(self,get):
|
|
a = ols.ols()
|
|
return a.get_private_cache_status(get)
|
|
|
|
def get_ipv6_listen(self,get):
|
|
return os.path.exists('data/ipv6.pl')
|
|
|
|
def set_ipv6_status(self,get):
|
|
ipv6_file = 'data/ipv6.pl'
|
|
if self.get_ipv6_listen(get):
|
|
os.remove(ipv6_file)
|
|
public.WriteLog('TYPE_CONFIG', 'P_STOP_IPV6!')
|
|
else:
|
|
public.writeFile(ipv6_file, 'True')
|
|
public.WriteLog('TYPE_CONFIG', 'P_START_IPV6!')
|
|
public.restart_panel()
|
|
return public.returnMsg(True, 'SET_SUCCESS')
|
|
|
|
#自动补充CLI模式下的PHP版本
|
|
def auto_cli_php_version(self,get):
|
|
import panelSite
|
|
php_versions = panelSite.panelSite().GetPHPVersion(get)
|
|
php_bin_src = "/www/server/php/%s/bin/php" % php_versions[-1]['version']
|
|
if not os.path.exists(php_bin_src): return public.returnMsg(False,'PHP_NOT_INSTALL')
|
|
get.php_version = php_versions[-1]['version']
|
|
self.set_cli_php_version(get)
|
|
return php_versions[-1]
|
|
|
|
#获取CLI模式下的PHP版本
|
|
def get_cli_php_version(self,get):
|
|
php_bin = '/usr/bin/php'
|
|
if not os.path.exists(php_bin) or not os.path.islink(php_bin): return self.auto_cli_php_version(get)
|
|
link_re = os.readlink(php_bin)
|
|
if not os.path.exists(link_re): return self.auto_cli_php_version(get)
|
|
import panelSite
|
|
php_versions = panelSite.panelSite().GetPHPVersion(get)
|
|
if len(php_versions)==0:
|
|
return public.returnMsg(False,'Failed to get php version!')
|
|
del(php_versions[0])
|
|
for v in php_versions:
|
|
if link_re.find(v['version']) != -1: return {"select":v,"versions":php_versions}
|
|
return {"select":self.auto_cli_php_version(get),"versions":php_versions}
|
|
|
|
#设置CLI模式下的PHP版本
|
|
def set_cli_php_version(self,get):
|
|
php_bin = '/usr/bin/php'
|
|
php_bin_src = "/www/server/php/%s/bin/php" % get.php_version
|
|
php_ize = '/usr/bin/phpize'
|
|
php_ize_src = "/www/server/php/%s/bin/phpize" % get.php_version
|
|
php_fpm = '/usr/bin/php-fpm'
|
|
php_fpm_src = "/www/server/php/%s/sbin/php-fpm" % get.php_version
|
|
php_pecl = '/usr/bin/pecl'
|
|
php_pecl_src = "/www/server/php/%s/bin/pecl" % get.php_version
|
|
php_pear = '/usr/bin/pear'
|
|
php_pear_src = "/www/server/php/%s/bin/pear" % get.php_version
|
|
if not os.path.exists(php_bin_src): return public.returnMsg(False,'SPECIFIED_PHP_NOT_INSTALL')
|
|
is_chattr = public.ExecShell('lsattr /usr|grep /usr/bin')[0].find('-i-')
|
|
if is_chattr != -1: public.ExecShell('chattr -i /usr/bin')
|
|
public.ExecShell("rm -f " + php_bin + ' '+ php_ize + ' ' + php_fpm + ' ' + php_pecl + ' ' + php_pear)
|
|
public.ExecShell("ln -sf %s %s" % (php_bin_src,php_bin))
|
|
public.ExecShell("ln -sf %s %s" % (php_ize_src,php_ize))
|
|
public.ExecShell("ln -sf %s %s" % (php_fpm_src,php_fpm))
|
|
public.ExecShell("ln -sf %s %s" % (php_pecl_src,php_pecl))
|
|
public.ExecShell("ln -sf %s %s" % (php_pear_src,php_pear))
|
|
if is_chattr != -1: public.ExecShell('chattr +i /usr/bin')
|
|
public.WriteLog('P_CONF','SET_PHP_CLI %s' % get.php_version)
|
|
return public.returnMsg(True,'SET_SUCCESS')
|
|
|
|
|
|
#获取BasicAuth状态
|
|
def get_basic_auth_stat(self,get):
|
|
path = 'config/basic_auth.json'
|
|
is_install = True
|
|
result = {"basic_user":"","basic_pwd":"","open":False,"is_install":is_install}
|
|
if not os.path.exists(path): return result
|
|
try:
|
|
ba_conf = json.loads(public.readFile(path))
|
|
except:
|
|
os.remove(path)
|
|
return result
|
|
ba_conf['is_install'] = is_install
|
|
return ba_conf
|
|
|
|
#设置BasicAuth
|
|
def set_basic_auth(self,get):
|
|
is_open = False
|
|
if get.open == 'True': is_open = True
|
|
tips = '_bt.cn'
|
|
path = 'config/basic_auth.json'
|
|
ba_conf = None
|
|
if os.path.exists(path):
|
|
try:
|
|
ba_conf = json.loads(public.readFile(path))
|
|
except:
|
|
os.remove(path)
|
|
|
|
if not ba_conf:
|
|
ba_conf = {"basic_user":public.md5(get.basic_user.strip() + tips),"basic_pwd":public.md5(get.basic_pwd.strip() + tips),"open":is_open}
|
|
else:
|
|
if get.basic_user: ba_conf['basic_user'] = public.md5(get.basic_user.strip() + tips)
|
|
if get.basic_pwd: ba_conf['basic_pwd'] = public.md5(get.basic_pwd.strip() + tips)
|
|
ba_conf['open'] = is_open
|
|
|
|
public.writeFile(path,json.dumps(ba_conf))
|
|
os.chmod(path,384)
|
|
public.WriteLog('P_CONF','SET_BASICAUTH_STATUS %s' % is_open)
|
|
public.writeFile('data/reload.pl','True')
|
|
return public.returnMsg(True,"SET_SUCCESS")
|
|
|
|
#取面板运行日志
|
|
def get_panel_error_logs(self,get):
|
|
filename = 'logs/error.log'
|
|
if not os.path.exists(filename): return public.returnMsg(False,'LOG_CLOSE')
|
|
result = public.GetNumLines(filename,2000)
|
|
return public.returnMsg(True,result)
|
|
#清空面板运行日志
|
|
def clean_panel_error_logs(self,get):
|
|
filename = 'logs/error.log'
|
|
public.writeFile(filename,'')
|
|
public.WriteLog('P_CONF','CLEARING_LOG')
|
|
return public.returnMsg(True,'CLEARED')
|
|
|
|
# 获取lets证书
|
|
def get_cert_source(self,get):
|
|
import setPanelLets
|
|
sp = setPanelLets.setPanelLets()
|
|
spg = sp.get_cert_source()
|
|
return spg
|
|
|
|
#设置debug模式
|
|
def set_debug(self,get):
|
|
debug_path = 'data/debug.pl'
|
|
if os.path.exists(debug_path):
|
|
t_str = 'Close'
|
|
os.remove(debug_path)
|
|
else:
|
|
t_str = 'Open'
|
|
public.writeFile(debug_path,'True')
|
|
public.WriteLog('TYPE_PANEL','%s Developer mode(debug)' % t_str)
|
|
public.restart_panel()
|
|
return public.returnMsg(True,'Successful setup!')
|
|
|
|
|
|
#设置离线模式
|
|
def set_local(self,get):
|
|
d_path = 'data/not_network.pl'
|
|
if os.path.exists(d_path):
|
|
t_str = 'Close'
|
|
os.remove(d_path)
|
|
else:
|
|
t_str = 'Open'
|
|
public.writeFile(d_path,'True')
|
|
public.WriteLog('TYPE_PANEL','%s Offline mode' % t_str)
|
|
return public.returnMsg(True,'Successful setup!')
|
|
|
|
# 修改.user.ini文件
|
|
def _edit_user_ini(self,file,s_conf,act,session_path):
|
|
public.ExecShell("chattr -i {}".format(file))
|
|
conf = public.readFile(file)
|
|
if act == "1":
|
|
if "session.save_path" in conf:
|
|
return False
|
|
conf = conf + ":{}/".format(session_path)
|
|
conf = conf + "\n" + s_conf
|
|
else:
|
|
rep = "\n*session.save_path(.|\n)*files"
|
|
rep1 = ":{}".format(session_path)
|
|
conf = re.sub(rep,"",conf)
|
|
conf = re.sub(rep1,"",conf)
|
|
public.writeFile(file, conf)
|
|
public.ExecShell("chattr +i {}".format(file))
|
|
|
|
# 设置php_session存放到独立文件夹
|
|
def set_php_session_path(self,get):
|
|
'''
|
|
get.id site id
|
|
get.act 0/1
|
|
:param get:
|
|
:return:
|
|
'''
|
|
if public.get_webserver() == 'openlitespeed':
|
|
return public.returnMsg(False, "This feature does not currently support openlitespeed")
|
|
import panelSite
|
|
site_info = public.M('sites').where('id=?', (get.id,)).field('name,path').find()
|
|
session_path = "/www/php_session/{}".format(site_info["name"])
|
|
if os.path.exists(session_path):
|
|
os.makedirs(session_path)
|
|
run_path = panelSite.panelSite().GetSiteRunPath(get)["runPath"]
|
|
user_ini_file = "{site_path}{run_path}/.user.ini".format(site_path=site_info["path"], run_path=run_path)
|
|
conf = "session.save_path={}/\nsession.save_handler = files".format(session_path)
|
|
if get.act == "1":
|
|
if not os.path.exists(user_ini_file):
|
|
public.writeFile(user_ini_file,conf)
|
|
public.ExecShell("chattr +i {}".format(user_ini_file))
|
|
return public.returnMsg(True,"Successful setup")
|
|
self._edit_user_ini(user_ini_file,conf,get.act,session_path)
|
|
return public.returnMsg(True, "Successful setup")
|
|
else:
|
|
self._edit_user_ini(user_ini_file,conf,get.act,session_path)
|
|
return public.returnMsg(True, "Successful setup")
|
|
|
|
# 获取php_session是否存放到独立文件夹
|
|
def get_php_session_path(self,get):
|
|
import panelSite
|
|
site_info = public.M('sites').where('id=?', (get.id,)).field('name,path').find()
|
|
run_path = panelSite.panelSite().GetSiteRunPath(get)["runPath"]
|
|
user_ini_file = "{site_path}{run_path}/.user.ini".format(site_path=site_info["path"], run_path=run_path)
|
|
conf = public.readFile(user_ini_file)
|
|
if conf and "session.save_path" in conf:
|
|
return True
|
|
return False
|
|
|
|
def _create_key(self):
|
|
get_token = pyotp.random_base32() # returns a 16 character base32 secret. Compatible with Google Authenticator
|
|
public.writeFile(self._key_file,get_token)
|
|
username = self.get_random()
|
|
public.writeFile(self._username_file, username)
|
|
|
|
def get_key(self,get):
|
|
key = public.readFile(self._key_file)
|
|
username = public.readFile(self._username_file)
|
|
if not key:
|
|
return public.returnMsg(False, "The key does not exist. Please turn on and try again.")
|
|
if not username:
|
|
return public.returnMsg(False, "The username does not exist. Please turn on and try again.")
|
|
return {"key":key,"username":username}
|
|
|
|
def get_random(self):
|
|
import random
|
|
seed = "1234567890abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"
|
|
sa = []
|
|
for _ in range(8):
|
|
sa.append(random.choice(seed))
|
|
salt = ''.join(sa)
|
|
return salt
|
|
|
|
def set_two_step_auth(self,get):
|
|
if not hasattr(get,"act") or not get.act:
|
|
return public.returnMsg(False, "Please enter the operation mode")
|
|
if get.act == "1":
|
|
if not os.path.exists(self._core_fle_path):
|
|
os.makedirs(self._core_fle_path)
|
|
username = public.readFile(self._username_file)
|
|
if not os.path.exists(self._bk_key_file):
|
|
secret_key = public.readFile(self._key_file)
|
|
if not secret_key or not username:
|
|
self._create_key()
|
|
else:
|
|
os.rename(self._bk_key_file,self._key_file)
|
|
secret_key = public.readFile(self._key_file)
|
|
username = public.readFile(self._username_file)
|
|
local_ip = public.GetLocalIp()
|
|
if not secret_key:
|
|
return public.returnMsg(False,"Failed to generate key or username. Please check if the hard disk space is insufficient or the directory cannot be written.[ {} ]".format(self._setup_path+"/data/"))
|
|
try:
|
|
data = pyotp.totp.TOTP(secret_key).provisioning_uri(username, issuer_name=local_ip)
|
|
public.writeFile(self._core_fle_path+'/qrcode.txt',str(data))
|
|
return public.returnMsg(True, "Open successfully")
|
|
except Exception as e:
|
|
return public.returnMsg(False, e)
|
|
else:
|
|
if os.path.exists(self._key_file):
|
|
os.rename(self._key_file,self._bk_key_file)
|
|
return public.returnMsg(True, "Closed successfully")
|
|
|
|
# 检测是否开启双因素验证
|
|
def check_two_step(self,get):
|
|
secret_key = public.readFile(self._key_file)
|
|
if not secret_key:
|
|
return public.returnMsg(False, "Did not open Google authentication")
|
|
return public.returnMsg(True, "Google authentication has been turned on")
|
|
|
|
# 读取二维码data
|
|
def get_qrcode_data(self,get):
|
|
data = public.readFile(self._core_fle_path + '/qrcode.txt')
|
|
if data:
|
|
return data
|
|
return public.returnMsg(True, "No QR code data, please re-open")
|
|
|
|
# 设置是否云控打开
|
|
def set_coll_open(self,get):
|
|
if not 'coll_show' in get: return public.returnMsg(False,'Parameter error!')
|
|
if get.coll_show == 'True':
|
|
session['tmp_login'] = True
|
|
else:
|
|
session['tmp_login'] = False
|
|
return public.returnMsg(True,'Successful setup!') |