mirror of
https://github.com/aaPanel/aaPanel.git
synced 2026-08-17 21:25:47 +02:00
2160 lines
94 KiB
Python
2160 lines
94 KiB
Python
# coding: utf-8
|
||
# +-------------------------------------------------------------------
|
||
# | 宝塔Linux面板 x3
|
||
# +-------------------------------------------------------------------
|
||
# | Copyright (c) 2015-2017 宝塔软件(http://bt.cn) All rights reserved.
|
||
# +-------------------------------------------------------------------
|
||
# | Author: hwliang <hwl@bt.cn>
|
||
# +-------------------------------------------------------------------
|
||
import base64
|
||
import public,re,os,nginx,apache,json,time,ols
|
||
try:
|
||
import pyotp
|
||
except:
|
||
public.ExecShell("pip install pyotp &")
|
||
try:
|
||
from BTPanel import session,admin_path_checks,g,request,cache
|
||
import send_mail
|
||
except:pass
|
||
class config:
|
||
_setup_path = "/www/server/panel"
|
||
_key_file = _setup_path+"/data/two_step_auth.txt"
|
||
_bk_key_file = _setup_path + "/data/bk_two_step_auth.txt"
|
||
_username_file = _setup_path + "/data/username.txt"
|
||
_core_fle_path = _setup_path + '/data/qrcode'
|
||
__mail_config = _setup_path+'/data/stmp_mail.json'
|
||
__mail_list_data = _setup_path+'/data/mail_list.json'
|
||
__dingding_config = _setup_path+'/data/dingding.json'
|
||
__mail_list = []
|
||
__weixin_user = []
|
||
|
||
def __init__(self):
|
||
try:
|
||
self.mail = send_mail.send_mail()
|
||
if not os.path.exists(self.__mail_list_data):
|
||
ret = []
|
||
public.writeFile(self.__mail_list_data, json.dumps(ret))
|
||
else:
|
||
try:
|
||
mail_data = json.loads(public.ReadFile(self.__mail_list_data))
|
||
self.__mail_list = mail_data
|
||
except:
|
||
ret = []
|
||
public.writeFile(self.__mail_list_data, json.dumps(ret))
|
||
except:pass
|
||
# 返回配置邮件地址
|
||
def return_mail_list(self, get):
|
||
return public.return_msg_gettext(True, self.__mail_list)
|
||
|
||
# 删除邮件接口
|
||
def del_mail_list(self, get):
|
||
emial = get.email.strip()
|
||
if emial in self.__mail_list:
|
||
self.__mail_list.remove(emial)
|
||
public.writeFile(self.__mail_list_data, json.dumps(self.__mail_list))
|
||
return public.return_msg_gettext(True, 'Successfully deleted')
|
||
else:
|
||
return public.return_msg_gettext(True, 'Email does not exist')
|
||
|
||
def del_tg_info(self,get):
|
||
import panel_telegram_bot
|
||
return panel_telegram_bot.panel_telegram_bot().del_tg_bot(get)
|
||
|
||
def set_tg_bot(self,get):
|
||
import panel_telegram_bot
|
||
return panel_telegram_bot.panel_telegram_bot().set_tg_bot(get)
|
||
|
||
#添加接受邮件地址
|
||
def add_mail_address(self, get):
|
||
if not hasattr(get, 'email'): return public.return_msg_gettext(False, 'Please input your email')
|
||
emailformat = re.compile(r'[a-zA-Z0-9.-_+%]+@[a-zA-Z0-9]+\.[a-zA-Z0-9]+')
|
||
if not emailformat.search(get.email): return public.return_msg_gettext(False, 'Please enter your vaild email')
|
||
# 测试发送邮件
|
||
if get.email.strip() in self.__mail_list: return public.return_msg_gettext(True, 'Email already exists')
|
||
self.__mail_list.append(get.email.strip())
|
||
public.writeFile(self.__mail_list_data, json.dumps(self.__mail_list))
|
||
return public.return_msg_gettext(True, 'Setup successfully!')
|
||
|
||
# 添加自定义邮箱地址
|
||
def user_mail_send(self, get):
|
||
if not (hasattr(get, 'email') or hasattr(get, 'stmp_pwd') or hasattr(get, 'hosts') or hasattr(get, 'port')):
|
||
return public.return_msg_gettext(False, 'Please complete the information')
|
||
# 自定义邮件
|
||
self.mail.qq_stmp_insert(get.email.strip(), get.stmp_pwd.strip(), get.hosts.strip(),get.port.strip())
|
||
# 测试发送
|
||
if self.mail.qq_smtp_send(get.email.strip(), public.get_msg_gettext('aaPanel Alert Test Email'), public.get_msg_gettext('aaPanel Alert Test Email')):
|
||
if not get.email.strip() in self.__mail_list:
|
||
self.__mail_list.append(get.email.strip())
|
||
public.writeFile(self.__mail_list_data, json.dumps(self.__mail_list))
|
||
return public.return_msg_gettext(True, 'Setup successfully!')
|
||
else:
|
||
ret = []
|
||
public.writeFile(self.__mail_config, json.dumps(ret))
|
||
return public.return_msg_gettext(False, 'Email sending failed, please check if the STMP password is correct or the hosts are correct')
|
||
|
||
# 查看自定义邮箱配置
|
||
def get_user_mail(self, get):
|
||
qq_mail_info = json.loads(public.ReadFile(self.__mail_config))
|
||
if len(qq_mail_info) == 0:
|
||
return public.return_msg_gettext(False, 'No Data')
|
||
if not 'port' in qq_mail_info:qq_mail_info['port']=465
|
||
return public.return_msg_gettext(True, qq_mail_info)
|
||
|
||
#清空数据
|
||
def set_empty(self,get):
|
||
type=get.type.strip()
|
||
if type=='dingding':
|
||
ret = []
|
||
public.writeFile(self.__dingding_config, json.dumps(ret))
|
||
return public.return_msg_gettext(True, 'Empty successfully')
|
||
else:
|
||
ret = []
|
||
public.writeFile(self.__mail_config, json.dumps(ret))
|
||
return public.return_msg_gettext(True, 'Empty successfully')
|
||
|
||
|
||
# 用户自定义邮件发送
|
||
def user_stmp_mail_send(self, get):
|
||
if not (hasattr(get, 'email')): return public.return_msg_gettext(False, 'Please input your email')
|
||
emailformat = re.compile(r'[a-zA-Z0-9.-_+%]+@[a-zA-Z0-9]+\.[a-zA-Z0-9]+')
|
||
if not emailformat.search(get.email): return public.return_msg_gettext(False, 'Please enter your vaild email')
|
||
# 测试发送邮件
|
||
if not get.email.strip() in self.__mail_list: return public.return_msg_gettext(True, 'The mailbox does not exist, please add it to the mailbox list')
|
||
if not (hasattr(get, 'title')): return public.return_msg_gettext(False, 'Please fill in the email title')
|
||
if not (hasattr(get, 'body')): return public.return_msg_gettext(False, 'Please enter the email content')
|
||
# 先判断是否存在stmp信息
|
||
qq_mail_info = json.loads(public.ReadFile(self.__mail_config))
|
||
if len(qq_mail_info) == 0:
|
||
return public.return_msg_gettext(False, 'STMP information was not found, please re-add custom mail STMP information in the settings')
|
||
if self.mail.qq_smtp_send(get.email.strip(), get.title.strip(), get.body):
|
||
# 发送成功
|
||
return public.return_msg_gettext(True, 'Sent successfully')
|
||
else:
|
||
return public.return_msg_gettext(False, 'Failed to send')
|
||
|
||
# 查看能使用的告警通道
|
||
def get_settings(self, get=None):
|
||
qq_mail_info = json.loads(public.ReadFile(self.__mail_config))
|
||
if len(qq_mail_info) == 0:
|
||
user_mail = False
|
||
else:
|
||
user_mail = True
|
||
dingding_info = json.loads(public.ReadFile(self.__dingding_config))
|
||
if len(dingding_info) == 0:
|
||
dingding = False
|
||
else:
|
||
dingding = True
|
||
ret = {}
|
||
ret['user_mail'] = {"user_name": user_mail, "mail_list": self.__mail_list,"info":self.get_user_mail(get)}
|
||
ret['dingding'] = {"dingding": dingding,"info":self.get_dingding(get)}
|
||
return ret
|
||
|
||
def get_settings2(self, get=None):
|
||
import panel_telegram_bot
|
||
tg = panel_telegram_bot.panel_telegram_bot()
|
||
tg = tg.get_tg_conf()
|
||
conf = self.get_settings()
|
||
conf['telegram'] = tg
|
||
return conf
|
||
|
||
# 设置钉钉报警
|
||
def set_dingding(self, get):
|
||
if not (hasattr(get, 'url') or hasattr(get, 'atall')):
|
||
return public.return_msg_gettext(False, 'Please complete the information')
|
||
if get.atall=='True' or get.atall=='1':
|
||
get.atall = 'True'
|
||
else: get.atall = 'False'
|
||
self.mail.dingding_insert(get.url.strip(), get.atall)
|
||
if self.mail.dingding_send(public.get_msg_gettext('aaPanel alarm test')):
|
||
return public.return_msg_gettext(True, 'Successfully set')
|
||
else:
|
||
ret = []
|
||
public.writeFile(self.__dingding_config, json.dumps(ret))
|
||
return public.return_msg_gettext(False, 'Add failed, please check if the URL is correct')
|
||
# 查看钉钉
|
||
def get_dingding(self, get):
|
||
qq_mail_info = json.loads(public.ReadFile(self.__dingding_config))
|
||
if len(qq_mail_info) == 0:
|
||
return public.return_msg_gettext(False, 'No Data')
|
||
return public.return_msg_gettext(True, qq_mail_info)
|
||
|
||
# 使用钉钉发送消息
|
||
def user_dingding_send(self, get):
|
||
qq_mail_info = json.loads(public.ReadFile(self.__dingding_config))
|
||
if len(qq_mail_info) == 0:
|
||
return public.return_msg_gettext(False, 'The configuration information of the nails you configured was not found, please add in the settings')
|
||
if not (hasattr(get, 'content')): return public.return_msg_gettext(False, 'Please enter the data you need to send')
|
||
if self.mail.dingding_send(get.content):
|
||
return public.return_msg_gettext(True, 'Sent successfully')
|
||
else:
|
||
return public.return_msg_gettext(False, 'Failed to send')
|
||
|
||
|
||
def getPanelState(self,get):
|
||
return os.path.exists(self._setup_path+'/data/close.pl')
|
||
|
||
def reload_session(self):
|
||
userInfo = public.M('users').where("id=?",(1,)).field('username,password').find()
|
||
token = public.Md5(userInfo['username'] + '/' + userInfo['password'])
|
||
public.writeFile(self._setup_path+'/data/login_token.pl',token)
|
||
skey = 'login_token'
|
||
cache.set(skey,token)
|
||
sess_path = 'data/sess_files'
|
||
if not os.path.exists(sess_path):
|
||
os.makedirs(sess_path,384)
|
||
self.clean_sess_files(sess_path)
|
||
sess_key = public.get_sess_key()
|
||
sess_file = os.path.join(sess_path,sess_key)
|
||
public.writeFile(sess_file,str(int(time.time()+86400)))
|
||
public.set_mode(sess_file,'600')
|
||
session['login_token'] = token
|
||
|
||
def clean_sess_files(self,sess_path):
|
||
'''
|
||
@name 清理过期的sess_file
|
||
@auther hwliang<2020-07-25>
|
||
@param sess_path(string) sess_files目录
|
||
@return void
|
||
'''
|
||
s_time = time.time()
|
||
for fname in os.listdir(sess_path):
|
||
try:
|
||
if len(fname) != 32: continue
|
||
sess_file = os.path.join(sess_path,fname)
|
||
if not os.path.isfile(sess_file): continue
|
||
sess_tmp = public.ReadFile(sess_file)
|
||
if not sess_tmp:
|
||
if os.path.exists(sess_file):
|
||
os.remove(sess_file)
|
||
if s_time > int(sess_tmp):
|
||
os.remove(sess_file)
|
||
except:
|
||
pass
|
||
|
||
def get_password_safe_file(self):
|
||
'''
|
||
@name 获取密码复杂度配置文件
|
||
@auther hwliang<2021-10-18>
|
||
@return string
|
||
'''
|
||
return public.get_panel_path() + '/data/check_password_safe.pl'
|
||
|
||
def check_password_safe(self,password):
|
||
'''
|
||
@name 密码复杂度验证
|
||
@auther hwliang<2021-10-18>
|
||
@param password(string) 密码
|
||
@return bool
|
||
'''
|
||
# 是否检测密码复杂度
|
||
is_check_file = self.get_password_safe_file()
|
||
if not os.path.exists(is_check_file): return True
|
||
|
||
# 密码长度验证
|
||
if len(password) < 8: return False
|
||
|
||
num = 0
|
||
# 密码是否包含数字
|
||
if re.search(r'[0-9]+',password): num += 1
|
||
# 密码是否包含小写字母
|
||
if re.search(r'[a-z]+',password): num += 1
|
||
# 密码是否包含大写字母
|
||
if re.search(r'[A-Z]+',password): num += 1
|
||
# 密码是否包含特殊字符
|
||
if re.search(r'[^\w\s]+',password): num += 1
|
||
# 密码是否包含以上任意3种组合
|
||
if num < 3: return False
|
||
return True
|
||
|
||
def set_password_safe(self,get):
|
||
'''
|
||
@name 设置密码复杂度
|
||
@auther hwliang<2021-10-18>
|
||
@param get(string) 参数
|
||
@return dict
|
||
'''
|
||
is_check_file = self.get_password_safe_file()
|
||
if os.path.exists(is_check_file):
|
||
os.remove(is_check_file)
|
||
public.WriteLog('TYPE_PANEL','Disable password complexity verification')
|
||
return public.returnMsg(True,'Password complexity verification is disabled')
|
||
else:
|
||
public.writeFile(is_check_file,'True')
|
||
public.WriteLog('TYPE_PANEL','Enable password complexity verification')
|
||
return public.returnMsg(True,'Password complexity verification has been enabled')
|
||
|
||
def get_password_safe(self,get):
|
||
'''
|
||
@name 获取密码复杂度
|
||
@auther hwliang<2021-10-18>
|
||
@param get(string) 参数
|
||
@return bool
|
||
'''
|
||
is_check_file = self.get_password_safe_file()
|
||
return os.path.exists(is_check_file)
|
||
|
||
|
||
def get_password_expire_file(self):
|
||
'''
|
||
@name 获取密码过期配置文件
|
||
@auther hwliang<2021-10-18>
|
||
@return string
|
||
'''
|
||
return public.get_panel_path() + '/data/password_expire.pl'
|
||
|
||
|
||
def set_password_expire(self,get):
|
||
'''
|
||
@name 设置密码过期时间
|
||
@auther hwliang<2021-10-18>
|
||
@param get<dict_obj>{
|
||
expire: int<密码过期时间> 单位:天,
|
||
}
|
||
@return dict
|
||
'''
|
||
expire = int(get.expire)
|
||
expire_file = self.get_password_expire_file()
|
||
if expire <= 0:
|
||
if os.path.exists(expire_file):
|
||
os.remove(expire_file)
|
||
public.WriteLog('TYPE_PANEL','Disable password expiration authentication')
|
||
return public.returnMsg(True,'Password expiration authentication is disabled')
|
||
min_expire = 10
|
||
max_expire = 365 * 5
|
||
if expire < min_expire: return public.returnMsg(False,'The password expiration period cannot be less than {} days'.format(min_expire))
|
||
if expire > max_expire: return public.returnMsg(False,'The password expiration period cannot be longer than {} days'.format(max_expire))
|
||
|
||
public.writeFile(self.get_password_expire_file(),str(expire))
|
||
|
||
if expire > 0:
|
||
expire_time_file = public.get_panel_path() + '/data/password_expire_time.pl'
|
||
public.writeFile(expire_time_file,str(int(time.time()) + (expire * 86400)))
|
||
|
||
public.WriteLog('TYPE_PANEL','Set the password expiration time to [{}] days'.format(expire))
|
||
return public.returnMsg(True,'The password expiration time is set to [{}] days'.format(expire))
|
||
|
||
def get_password_config(self,get=None):
|
||
'''
|
||
@name 获取密码配置
|
||
@auther hwliang<2021-10-18>
|
||
@param get<dict_obj> 参数
|
||
@return dict{expire:int,expire_time:int,password_safe:bool}
|
||
'''
|
||
expire_file = self.get_password_expire_file()
|
||
expire = 0
|
||
expire_time=0
|
||
if os.path.exists(expire_file):
|
||
expire = public.readFile(expire_file)
|
||
try:
|
||
expire = int(expire)
|
||
except:
|
||
expire = 0
|
||
|
||
# 检查密码过期时间文件是否存在
|
||
expire_time_file = public.get_panel_path() + '/data/password_expire_time.pl'
|
||
if not os.path.exists(expire_time_file) and expire > 0:
|
||
public.writeFile(expire_time_file,str(int(time.time()) + (expire * 86400)))
|
||
|
||
expire_time = public.readFile(expire_time_file)
|
||
if expire_time:
|
||
expire_time = int(expire_time)
|
||
else:
|
||
expire_time = 0
|
||
|
||
data = {}
|
||
data['expire'] = expire
|
||
data['expire_time'] = expire_time
|
||
data['password_safe'] = self.get_password_safe(get)
|
||
data['ps'] = 'Password expiration configuration is not enabled. For your panel security, please consider enabling it!'
|
||
if data['expire_time']:
|
||
data['expire_day'] = int((expire_time - time.time()) / 86400)
|
||
if data['expire_day'] < 10:
|
||
if data['expire_day'] <= 0:
|
||
data['ps'] = 'Your password has expired. In case you fail to log in next time, please change your password immediately.'
|
||
else:
|
||
data['ps'] = "Your panel password will expire in <span style='color:red;'>{}</span> days, in order not to affect your normal login, please change the password as soon as possible!".format(data['expire_day'])
|
||
else:
|
||
data['ps'] = "Your panel password has <span style='color:green;'>{}</span> days left to expire!".format(data['expire_day'])
|
||
return data
|
||
|
||
|
||
def setPassword(self,get):
|
||
get.password1 = public.url_decode(get.password1)
|
||
get.password2 = public.url_decode(get.password2)
|
||
if get.password1 != get.password2: return public.return_msg_gettext(False,'The passwords entered twice are inconsistent, please try again!')
|
||
if len(get.password1) < 5: return public.return_msg_gettext(False,'Password cannot be less than 5 characters!')
|
||
if not self.check_password_safe(get.password1): return public.returnMsg(False,'The password must be at least eight characters in length and contain at least three combinations of digits, uppercase letters, lowercase letters, and special characters')
|
||
public.M('users').where("username=?",(session['username'],)).setField('password',public.password_salt(public.md5(get.password1.strip()),username=session['username']))
|
||
public.write_log_gettext('Panel configuration','Successfully modified password for user [{0}]!',(session['username'],))
|
||
self.reload_session()
|
||
|
||
# 密码过期时间
|
||
expire_time_file = public.get_panel_path() + '/data/password_expire_time.pl'
|
||
if os.path.exists(expire_time_file): os.remove(expire_time_file)
|
||
self.get_password_config(None)
|
||
if session.get('password_expire',False):
|
||
session['password_expire'] = False
|
||
return public.return_msg_gettext(True,'Setup successfully!')
|
||
|
||
def setUsername(self,get):
|
||
get.username1 = public.url_decode(get.username1)
|
||
get.username2 = public.url_decode(get.username2)
|
||
if get.username1 != get.username2: return public.return_msg_gettext(False,'The usernames entered twice are inconsistent, plesea try again!')
|
||
if len(get.username1) < 3: return public.return_msg_gettext(False,'Username cannot be less than 3 characters')
|
||
public.M('users').where("username=?",(session['username'],)).setField('username',get.username1.strip())
|
||
public.write_log_gettext('Panel configuration','Username is modified from [{}] to [{}]',(session['username'],get.username2))
|
||
session['username'] = get.username1
|
||
self.reload_session()
|
||
return public.return_msg_gettext(True,'Setup successfully!')
|
||
|
||
#取用户列表
|
||
def get_users(self,args):
|
||
data = public.M('users').field('id,username').select()
|
||
return data
|
||
|
||
# 创建新用户
|
||
def create_user(self,args):
|
||
args.username = public.url_decode(args.username)
|
||
args.password = public.url_decode(args.password)
|
||
if session['uid'] != 1: return public.return_msg_gettext(False,'Permission denied!')
|
||
if len(args.username) < 2: return public.return_msg_gettext(False,'User name must be at least 2 characters')
|
||
if len(args.password) < 8: return public.return_msg_gettext(False,'Password must be at least 8 characters')
|
||
pdata = {
|
||
"username": args.username.strip(),
|
||
"password": public.password_salt(public.md5(args.password.strip()),username=args.username.strip())
|
||
}
|
||
|
||
if(public.M('users').where('username=?',(pdata['username'],)).count()):
|
||
return public.return_msg_gettext(False,'The specified username already exists!')
|
||
|
||
if(public.M('users').insert(pdata)):
|
||
public.write_log_gettext('User Management','Create new user {}',(pdata['username'],))
|
||
return public.return_msg_gettext(True,'Create new user {} success!',(pdata['username'],))
|
||
return public.return_msg_gettext(False,'Create new user failed!')
|
||
|
||
# 删除用户
|
||
def remove_user(self,args):
|
||
if session['uid'] != 1: return public.return_msg_gettext(False,'Permission denied!')
|
||
if int(args.id) == 1: return public.return_msg_gettext(False,'Cannot delete initial default user!')
|
||
username = public.M('users').where('id=?',(args.id,)).getField('username')
|
||
if not username: return public.return_msg_gettext(False,'The specified username not exists!')
|
||
if(public.M('users').where('id=?',(args.id,)).delete()):
|
||
public.write_log_gettext('User Management','Delete users [{}]',(username))
|
||
return public.return_msg_gettext(True,'Delete user {} success!',(username,))
|
||
return public.return_msg_gettext(False,'User deletion failed!')
|
||
|
||
# 修改用户
|
||
def modify_user(self,args):
|
||
if session['uid'] != 1: return public.return_msg_gettext(False,'Permission denied!')
|
||
username = public.M('users').where('id=?',(args.id,)).getField('username')
|
||
pdata = {}
|
||
if 'username' in args:
|
||
args.username = public.url_decode(args.username)
|
||
if len(args.username) < 2: return public.return_msg_gettext(False,'User name must be at least 2 characters')
|
||
pdata['username'] = args.username.strip()
|
||
|
||
if 'password' in args:
|
||
if args.password:
|
||
args.password = public.url_decode(args.password)
|
||
if len(args.password) < 8: return public.return_msg_gettext(False,'Password must be at least 8 characters')
|
||
pdata['password'] = public.password_salt(public.md5(args.password.strip()),username=username)
|
||
|
||
if(public.M('users').where('id=?',(args.id,)).update(pdata)):
|
||
public.write_log_gettext('User Management',"Edit user {}",(username,))
|
||
return public.return_msg_gettext(True,'Setup successfully!')
|
||
return public.return_msg_gettext(False,'No changes submitted')
|
||
|
||
def setPanel(self,get):
|
||
if not public.IsRestart(): return public.return_msg_gettext(False,'Please run the program when all install tasks finished!')
|
||
if 'limitip' in get:
|
||
if get.limitip.find('/') != -1:
|
||
return public.return_msg_gettext(False,'The authorized IP format is incorrect, and the subnet segment writing is not supported')
|
||
isReWeb = False
|
||
sess_out_path = 'data/session_timeout.pl'
|
||
if 'session_timeout' in get:
|
||
try:
|
||
session_timeout = int(get.session_timeout)
|
||
except:
|
||
return public.returnMsg(False,"Timeout must be an integer!")
|
||
s_time_tmp = public.readFile(sess_out_path)
|
||
if not s_time_tmp: s_time_tmp = '0'
|
||
if int(s_time_tmp) != session_timeout:
|
||
if session_timeout < 300 or session_timeout > 86400: return public.return_msg_gettext(False,'The timeout time needs to be between 300-86400')
|
||
public.writeFile(sess_out_path,str(session_timeout))
|
||
isReWeb = True
|
||
else:
|
||
return public.returnMsg(False,'Timeout must be an integer!')
|
||
|
||
workers_p = 'data/workers.pl'
|
||
if 'workers' in get:
|
||
workers = int(get.workers)
|
||
if int(public.readFile(workers_p)) != workers:
|
||
if workers < 1 or workers > 1024: return public.return_msg_gettext(False,public.get_msg_gettext('The number of panel threads should be between 1-1024'))
|
||
public.writeFile(workers_p,str(workers))
|
||
isReWeb = True
|
||
|
||
if get.domain:
|
||
reg = r"^([\w\-\*]{1,100}\.){1,4}(\w{1,10}|\w{1,10}\.\w{1,10})$"
|
||
if not re.match(reg, get.domain): return public.return_msg_gettext(False,'Format of primary domain is incorrect')
|
||
oldPort = public.GetHost(True)
|
||
if not 'port' in get:
|
||
get.port = oldPort
|
||
newPort = get.port
|
||
if oldPort != get.port:
|
||
get.port = str(int(get.port))
|
||
if self.IsOpen(get.port):
|
||
return public.return_msg_gettext(False,'Port [{}] is in use!',(get.port,))
|
||
if int(get.port) >= 65535 or int(get.port) < 100: return public.return_msg_gettext(False,'Port range is incorrect! should be between 100-65535')
|
||
public.writeFile('data/port.pl',get.port)
|
||
import firewalls
|
||
get.ps = public.get_msg_gettext('New panel port')
|
||
fw = firewalls.firewalls()
|
||
fw.AddAcceptPort(get)
|
||
get.port = oldPort
|
||
get.id = public.M('firewall').where("port=?",(oldPort,)).getField('id')
|
||
fw.DelAcceptPort(get)
|
||
isReWeb = True
|
||
|
||
if get.webname != session['title']:
|
||
session['title'] = public.xssencode2(get.webname)
|
||
public.SetConfigValue('title',public.xssencode2(get.webname))
|
||
|
||
limitip = public.readFile('data/limitip.conf')
|
||
if get.limitip != limitip:
|
||
public.writeFile('data/limitip.conf',get.limitip)
|
||
cache.set('limit_ip',[])
|
||
|
||
public.writeFile('data/domain.conf',public.xssencode2(get.domain).strip())
|
||
public.writeFile('data/iplist.txt',get.address)
|
||
|
||
import files
|
||
fs = files.files()
|
||
if not fs.CheckDir(get.backup_path): return public.returnMsg(False,'Cannot use system critical directory as default backup directory')
|
||
if not fs.CheckDir(get.sites_path): return public.returnMsg(False,'Cannot use system critical directory as default site directory')
|
||
public.M('config').where("id=?",('1',)).save('backup_path,sites_path',(get.backup_path,get.sites_path))
|
||
session['config']['backup_path'] = os.path.join('/',get.backup_path)
|
||
session['config']['sites_path'] = os.path.join('/',get.sites_path)
|
||
db_backup = get.backup_path + '/database'
|
||
if not os.path.exists(db_backup):
|
||
try:
|
||
os.makedirs(db_backup,384)
|
||
except:
|
||
public.ExecShell('mkdir -p ' + db_backup)
|
||
site_backup = get.backup_path + '/site'
|
||
if not os.path.exists(site_backup):
|
||
try:
|
||
os.makedirs(site_backup,384)
|
||
except:
|
||
public.ExecShell('mkdir -p ' + site_backup)
|
||
|
||
mhost = public.GetHost()
|
||
if get.domain.strip(): mhost = get.domain
|
||
data = {'uri':request.path,'host':mhost+':'+newPort,'status':True,'isReWeb':isReWeb,'msg':public.get_msg_gettext('Saved')}
|
||
public.write_log_gettext('Panel configuration','Set panel port [{}], domain [{}], default backup directory [{}], default site directory [{}], server IP [{}], authorized IP [{}]!',(newPort,get.domain,get.backup_path,get.sites_path,get.address,get.limitip))
|
||
if isReWeb: public.restart_panel()
|
||
return data
|
||
|
||
|
||
def set_admin_path(self,get):
|
||
get.admin_path = get.admin_path.strip()
|
||
if len(get.admin_path) < 6: return public.return_msg_gettext(False,'Security Entrance cannot be less than 6 characters!')
|
||
if get.admin_path in admin_path_checks: return public.return_msg_gettext(False,'This entrance has been used by the panel, please set another entrances!')
|
||
if not public.path_safe_check(get.admin_path) or get.admin_path[-1] == '.': return public.returnMsg(False,'Entrance address format is incorrect, e.g. /my_panel')
|
||
if get.admin_path[0] != '/': return public.return_msg_gettext(False,'Entrance address format is incorrect, e.g. /my_panel')
|
||
|
||
admin_path_file = 'data/admin_path.pl'
|
||
admin_path = '/'
|
||
if os.path.exists(admin_path_file): admin_path = public.readFile(admin_path_file).strip()
|
||
if get.admin_path != admin_path:
|
||
public.writeFile(admin_path_file,get.admin_path)
|
||
public.restart_panel()
|
||
return public.return_msg_gettext(True, 'Setup successfully!')
|
||
|
||
|
||
def setPathInfo(self,get):
|
||
#设置PATH_INFO
|
||
version = get.version
|
||
type = get.type
|
||
if public.get_webserver() == 'nginx':
|
||
path = public.GetConfigValue('setup_path')+'/nginx/conf/enable-php-'+version+'.conf'
|
||
conf = public.readFile(path)
|
||
rep = r"\s+#*include\s+pathinfo.conf;"
|
||
if type == 'on':
|
||
conf = re.sub(rep,'\n\t\t\tinclude pathinfo.conf;',conf)
|
||
else:
|
||
conf = re.sub(rep,'\n\t\t\t#include pathinfo.conf;',conf)
|
||
public.writeFile(path,conf)
|
||
public.serviceReload()
|
||
|
||
path = public.GetConfigValue('setup_path')+'/php/'+version+'/etc/php.ini'
|
||
conf = public.readFile(path)
|
||
rep = r"\n*\s*cgi\.fix_pathinfo\s*=\s*([0-9]+)\s*\n"
|
||
status = '0'
|
||
if type == 'on':status = '1'
|
||
conf = re.sub(rep,"\ncgi.fix_pathinfo = "+status+"\n",conf)
|
||
public.writeFile(path,conf)
|
||
public.write_log_gettext("PHP configuration", "Set PATH_INFO module to [{}] for PHP-{}!",(version,type))
|
||
public.phpReload(version)
|
||
return public.return_msg_gettext(True,'Setup successfully!')
|
||
|
||
|
||
#设置文件上传大小限制
|
||
def setPHPMaxSize(self,get):
|
||
version = get.version
|
||
max = get.max
|
||
if int(max) < 2: return public.return_msg_gettext(False,'Limit of upload size cannot be less than 2 MB')
|
||
#设置PHP
|
||
path = public.GetConfigValue('setup_path')+'/php/'+version+'/etc/php.ini'
|
||
ols_php_path = '/usr/local/lsws/lsphp{}/etc/php/{}.{}/litespeed/php.ini'.format(get.version, get.version[0],get.version[1])
|
||
if os.path.exists('/etc/redhat-release'):
|
||
ols_php_path = '/usr/local/lsws/lsphp' + get.version + '/etc/php.ini'
|
||
for p in [path,ols_php_path]:
|
||
if not p:
|
||
continue
|
||
if not os.path.exists(p):
|
||
continue
|
||
conf = public.readFile(p)
|
||
rep = r"\nupload_max_filesize\s*=\s*[0-9]+M?m?"
|
||
conf = re.sub(rep,r'\nupload_max_filesize = '+max+'M',conf)
|
||
rep = r"\npost_max_size\s*=\s*[0-9]+M?m?"
|
||
conf = re.sub(rep,r'\npost_max_size = '+max+'M',conf)
|
||
public.writeFile(p,conf)
|
||
|
||
if public.get_webserver() == 'nginx':
|
||
#设置Nginx
|
||
path = public.GetConfigValue('setup_path')+'/nginx/conf/nginx.conf'
|
||
conf = public.readFile(path)
|
||
rep = r"client_max_body_size\s+([0-9]+)m?M?"
|
||
tmp = re.search(rep,conf).groups()
|
||
if int(tmp[0]) < int(max):
|
||
conf = re.sub(rep,'client_max_body_size '+max+'m',conf)
|
||
public.writeFile(path,conf)
|
||
|
||
public.serviceReload()
|
||
public.phpReload(version)
|
||
public.write_log_gettext("PHP configuration", "Set max upload size to [{} MB] for PHP-{}!",(version,max))
|
||
return public.return_msg_gettext(True,'Setup successfully!')
|
||
|
||
#设置禁用函数
|
||
def setPHPDisable(self,get):
|
||
filename = public.GetConfigValue('setup_path') + '/php/' + get.version + '/etc/php.ini'
|
||
ols_php_path = '/usr/local/lsws/lsphp{}/etc/php/{}.{}/litespeed/php.ini'.format(get.version, get.version[0],get.version[1])
|
||
if os.path.exists('/etc/redhat-release'):
|
||
ols_php_path = '/usr/local/lsws/lsphp' + get.version + '/etc/php.ini'
|
||
if not os.path.exists(filename): return public.return_msg_gettext(False,'Requested PHP version does NOT exist!')
|
||
for file in [filename,ols_php_path]:
|
||
if not os.path.exists(file):
|
||
continue
|
||
phpini = public.readFile(file)
|
||
rep = r"disable_functions\s*=\s*.*\n"
|
||
phpini = re.sub(rep, 'disable_functions = ' + get.disable_functions + "\n", phpini)
|
||
public.write_log_gettext('PHP configuration','Modified disabled function to [{}] for PHP-{}',(get.version,get.disable_functions))
|
||
public.writeFile(file,phpini)
|
||
public.phpReload(get.version)
|
||
public.serviceReload()
|
||
return public.return_msg_gettext(True,'Setup successfully!')
|
||
|
||
#设置PHP超时时间
|
||
def setPHPMaxTime(self,get):
|
||
time = get.time
|
||
version = get.version
|
||
if int(time) < 30 or int(time) > 86400: return public.return_msg_gettext(False,'Please fill in the value between 30 and 86400!')
|
||
file = public.GetConfigValue('setup_path')+'/php/'+version+'/etc/php-fpm.conf'
|
||
conf = public.readFile(file)
|
||
rep = r"request_terminate_timeout\s*=\s*([0-9]+)\n"
|
||
conf = re.sub(rep,"request_terminate_timeout = "+time+"\n",conf)
|
||
public.writeFile(file,conf)
|
||
|
||
file = '/www/server/php/'+version+'/etc/php.ini'
|
||
phpini = public.readFile(file)
|
||
rep = r"max_execution_time\s*=\s*([0-9]+)\r?\n"
|
||
phpini = re.sub(rep,"max_execution_time = "+time+"\n",phpini)
|
||
rep = r"max_input_time\s*=\s*([0-9]+)\r?\n"
|
||
phpini = re.sub(rep,"max_input_time = "+time+"\n",phpini)
|
||
public.writeFile(file,phpini)
|
||
|
||
if public.get_webserver() == 'nginx':
|
||
#设置Nginx
|
||
path = public.GetConfigValue('setup_path')+'/nginx/conf/nginx.conf'
|
||
conf = public.readFile(path)
|
||
rep = r"fastcgi_connect_timeout\s+([0-9]+);"
|
||
tmp = re.search(rep, conf).groups()
|
||
if int(tmp[0]) < int(time):
|
||
conf = re.sub(rep,'fastcgi_connect_timeout '+time+';',conf)
|
||
rep = r"fastcgi_send_timeout\s+([0-9]+);"
|
||
conf = re.sub(rep,'fastcgi_send_timeout '+time+';',conf)
|
||
rep = r"fastcgi_read_timeout\s+([0-9]+);"
|
||
conf = re.sub(rep,'fastcgi_read_timeout '+time+';',conf)
|
||
public.writeFile(path,conf)
|
||
|
||
public.write_log_gettext("PHP configuration", "Set maximum time of script to [{} second] for PHP-{}!",(version,time))
|
||
public.serviceReload()
|
||
public.phpReload(version)
|
||
return public.return_msg_gettext(True, 'Setup successfully!')
|
||
|
||
|
||
#取FPM设置
|
||
def getFpmConfig(self,get):
|
||
version = get.version
|
||
file = public.GetConfigValue('setup_path')+"/php/"+version+"/etc/php-fpm.conf"
|
||
conf = public.readFile(file)
|
||
data = {}
|
||
rep = r"\s*pm.max_children\s*=\s*([0-9]+)\s*"
|
||
tmp = re.search(rep, conf).groups()
|
||
data['max_children'] = tmp[0]
|
||
|
||
rep = r"\s*pm.start_servers\s*=\s*([0-9]+)\s*"
|
||
tmp = re.search(rep, conf).groups()
|
||
data['start_servers'] = tmp[0]
|
||
|
||
rep = r"\s*pm.min_spare_servers\s*=\s*([0-9]+)\s*"
|
||
tmp = re.search(rep, conf).groups()
|
||
data['min_spare_servers'] = tmp[0]
|
||
|
||
rep = r"\s*pm.max_spare_servers \s*=\s*([0-9]+)\s*"
|
||
tmp = re.search(rep, conf).groups()
|
||
data['max_spare_servers'] = tmp[0]
|
||
|
||
rep = r"\s*pm\s*=\s*(\w+)\s*"
|
||
tmp = re.search(rep, conf).groups()
|
||
data['pm'] = tmp[0]
|
||
|
||
rep = r"\s*listen.allowed_clients\s*=\s*([\w\.,/]+)\s*"
|
||
tmp = re.search(rep, conf).groups()
|
||
data['allowed'] = tmp[0]
|
||
|
||
|
||
data['unix'] = 'unix'
|
||
data['port'] = ''
|
||
data['bind'] = '/tmp/php-cgi-{}.sock'.format(version)
|
||
|
||
fpm_address = public.get_fpm_address(version,True)
|
||
if not isinstance(fpm_address,str):
|
||
data['unix'] = 'tcp'
|
||
data['port'] = fpm_address[1]
|
||
data['bind'] = fpm_address[0]
|
||
|
||
return data
|
||
|
||
|
||
#设置
|
||
def setFpmConfig(self,get):
|
||
version = get.version
|
||
max_children = get.max_children
|
||
start_servers = get.start_servers
|
||
min_spare_servers = get.min_spare_servers
|
||
max_spare_servers = get.max_spare_servers
|
||
pm = get.pm
|
||
if not pm in ['static','dynamic','ondemand']:
|
||
return public.return_msg_gettext(False,'Wrong operating mode')
|
||
file = public.GetConfigValue('setup_path')+"/php/"+version+"/etc/php-fpm.conf"
|
||
conf = public.readFile(file)
|
||
|
||
rep = r"\s*pm.max_children\s*=\s*([0-9]+)\s*"
|
||
conf = re.sub(rep, "\npm.max_children = "+max_children, conf)
|
||
|
||
rep = r"\s*pm.start_servers\s*=\s*([0-9]+)\s*"
|
||
conf = re.sub(rep, "\npm.start_servers = "+start_servers, conf)
|
||
|
||
rep = r"\s*pm.min_spare_servers\s*=\s*([0-9]+)\s*"
|
||
conf = re.sub(rep, "\npm.min_spare_servers = "+min_spare_servers, conf)
|
||
|
||
rep = r"\s*pm.max_spare_servers \s*=\s*([0-9]+)\s*"
|
||
conf = re.sub(rep, "\npm.max_spare_servers = "+max_spare_servers+"\n", conf)
|
||
|
||
rep = r"\s*pm\s*=\s*(\w+)\s*"
|
||
conf = re.sub(rep, "\npm = "+pm+"\n", conf)
|
||
if pm == 'ondemand':
|
||
if conf.find('listen.backlog = -1') != -1:
|
||
rep = r"\s*listen\.backlog\s*=\s*([0-9-]+)\s*"
|
||
conf = re.sub(rep, "\nlisten.backlog = 8192\n", conf)
|
||
|
||
if get.listen == 'unix':
|
||
listen = '/tmp/php-cgi-{}.sock'.format(version)
|
||
else:
|
||
default_listen = '127.0.0.1:10{}1'.format(version)
|
||
if 'bind_port' in get:
|
||
if get.bind_port.find('sock') != -1:
|
||
listen = default_listen
|
||
else:
|
||
listen = get.bind_port
|
||
else:
|
||
listen = default_listen
|
||
|
||
|
||
rep = r'\s*listen\s*=\s*.+\s*'
|
||
conf = re.sub(rep, "\nlisten = "+listen+"\n", conf)
|
||
|
||
if 'allowed' in get:
|
||
if not get.allowed: get.allowed = '127.0.0.1'
|
||
rep = r"\s*listen.allowed_clients\s*=\s*([\w\.,/]+)\s*"
|
||
conf = re.sub(rep, "\nlisten.allowed_clients = "+get.allowed+"\n", conf)
|
||
|
||
public.writeFile(file,conf)
|
||
public.phpReload(version)
|
||
public.sync_php_address(version)
|
||
public.write_log_gettext("PHP configuration",'Set concurrency of PHP-{}, max_children={}, start_servers={}, min_spare_servers={}, max_spare_servers={}', (version,max_children,start_servers,min_spare_servers,max_spare_servers))
|
||
return public.return_msg_gettext(True, 'Setup successfully!')
|
||
|
||
#同步时间
|
||
def syncDate(self,get):
|
||
time_str = public.HttpGet(public.GetConfigValue('home') + '/api/index/get_time')
|
||
new_time = int(time_str)
|
||
time_arr = time.localtime(new_time)
|
||
date_str = time.strftime("%Y-%m-%d %H:%M:%S", time_arr)
|
||
public.ExecShell('date -s "%s"' % date_str)
|
||
public.write_log_gettext("Panel configuration", 'Update Succeeded!')
|
||
return public.return_msg_gettext(True,'Setup successfully!')
|
||
|
||
def IsOpen(self,port):
|
||
#检查端口是否占用
|
||
import socket
|
||
s = socket.socket(socket.AF_INET,socket.SOCK_STREAM)
|
||
try:
|
||
s.connect(('127.0.0.1',int(port)))
|
||
s.shutdown(2)
|
||
return True
|
||
except:
|
||
return False
|
||
|
||
#设置是否开启监控
|
||
def SetControl(self,get):
|
||
try:
|
||
if hasattr(get,'day'):
|
||
get.day = int(get.day)
|
||
get.day = str(get.day)
|
||
if(get.day < 1): return public.return_msg_gettext(False,'Number of saving days is illegal!')
|
||
except:
|
||
pass
|
||
|
||
filename = 'data/control.conf'
|
||
if get.type == '1':
|
||
public.writeFile(filename,get.day)
|
||
public.write_log_gettext("Panel configuration",'Turned on monitory service, save for [{}] day!',(get.day,))
|
||
elif get.type == '0':
|
||
if os.path.exists(filename): os.remove(filename)
|
||
public.write_log_gettext("Panel configuration", 'Monitor service turned off!')
|
||
elif get.type == 'del':
|
||
if not public.IsRestart(): return public.return_msg_gettext(False,'Please run the program when all install tasks finished!')
|
||
os.remove("data/system.db")
|
||
import db
|
||
sql = db.Sql()
|
||
sql.dbfile('system').create('system')
|
||
public.write_log_gettext("Panel configuration", 'Monitor service turned off!')
|
||
return public.return_msg_gettext(True,'Setup successfully!')
|
||
|
||
else:
|
||
data = {}
|
||
if os.path.exists(filename):
|
||
try:
|
||
data['day'] = int(public.readFile(filename))
|
||
except:
|
||
data['day'] = 30
|
||
data['status'] = True
|
||
else:
|
||
data['day'] = 30
|
||
data['status'] = False
|
||
return data
|
||
|
||
return public.return_msg_gettext(True,'Successfully set')
|
||
|
||
#关闭面板
|
||
def ClosePanel(self,get):
|
||
filename = 'data/close.pl'
|
||
if os.path.exists(filename):
|
||
os.remove(filename)
|
||
return public.returnMsg(True, 'Setup successfully!')
|
||
public.writeFile(filename, 'True')
|
||
public.ExecShell("chmod 600 " + filename)
|
||
public.ExecShell("chown root.root " + filename)
|
||
return public.return_msg_gettext(True,'Setup successfully!')
|
||
|
||
|
||
#设置自动更新
|
||
def AutoUpdatePanel(self,get):
|
||
#return public.returnMsg(False,'体验服务器，禁止修改!')
|
||
filename = 'data/autoUpdate.pl'
|
||
if os.path.exists(filename):
|
||
os.remove(filename)
|
||
else:
|
||
public.writeFile(filename,'True')
|
||
public.ExecShell("chmod 600 " + filename)
|
||
public.ExecShell("chown root.root " + filename)
|
||
return public.return_msg_gettext(True,'Setup successfully!')
|
||
|
||
#设置二级密码
|
||
def SetPanelLock(self,get):
|
||
path = 'data/lock'
|
||
if not os.path.exists(path):
|
||
public.ExecShell('mkdir ' + path)
|
||
public.ExecShell("chmod 600 " + path)
|
||
public.ExecShell("chown root.root " + path)
|
||
|
||
keys = ['files','tasks','config']
|
||
for name in keys:
|
||
filename = path + '/' + name + '.pl'
|
||
if hasattr(get,name):
|
||
public.writeFile(filename,'True')
|
||
else:
|
||
if os.path.exists(filename): os.remove(filename);
|
||
|
||
#设置PHP守护程序
|
||
def Set502(self,get):
|
||
filename = 'data/502Task.pl'
|
||
if os.path.exists(filename):
|
||
public.ExecShell('rm -f ' + filename)
|
||
else:
|
||
public.writeFile(filename,'True')
|
||
|
||
return public.return_msg_gettext(True,'Setup successfully!')
|
||
|
||
#设置模板
|
||
def SetTemplates(self,get):
|
||
public.writeFile('data/templates.pl',get.templates)
|
||
return public.return_msg_gettext(True,'Setup successfully!')
|
||
|
||
#设置面板SSL
|
||
def SetPanelSSL(self, get):
|
||
if hasattr(get, "cert_type") and str(get.cert_type) == "2":
|
||
# rep_mail = r"[\w!#$%&'*+/=?^_`{|}~-]+(?:\.[\w!#$%&'*+/=?^_`{|}~-]+)*@(?:[\w](?:[\w-]*[\w])?\.)+[\w](?:[\w-]*[\w])?"
|
||
# if not re.search(rep_mail,get.email):
|
||
# return public.return_msg_gettext(False,'The E-Mail format is illegal')
|
||
import setPanelLets
|
||
sp = setPanelLets.setPanelLets()
|
||
sps = sp.set_lets(get)
|
||
return sps
|
||
else:
|
||
sslConf = self._setup_path + '/data/ssl.pl'
|
||
if os.path.exists(sslConf):
|
||
public.ExecShell('rm -f ' + sslConf + '&& rm -f /www/server/panel/ssl/*')
|
||
g.rm_ssl = True
|
||
return public.return_msg_gettext(True, 'SSL turned off，Please use http protocol to access the panel!')
|
||
else:
|
||
public.ExecShell('btpip install cffi')
|
||
public.ExecShell('btpip install cryptography')
|
||
public.ExecShell('btpip install pyOpenSSL')
|
||
try:
|
||
if not self.CreateSSL():
|
||
return public.return_msg_gettext(False,
|
||
'Error, unable to auto install pyOpenSSL!<p>Plesea try to manually install: pip install pyOpenSSL</p>')
|
||
public.writeFile(sslConf, 'True')
|
||
except:
|
||
return public.return_msg_gettext(False,
|
||
'Error, unable to auto install pyOpenSSL!<p>Plesea try to manually install: pip install pyOpenSSL</p>')
|
||
return public.return_msg_gettext(True,
|
||
'SSL is turned on, plesea use https protocol to access the panel!')
|
||
#自签证书
|
||
# def CreateSSL(self):
|
||
# if os.path.exists('ssl/input.pl'): return True
|
||
# import OpenSSL
|
||
# key = OpenSSL.crypto.PKey()
|
||
# key.generate_key(OpenSSL.crypto.TYPE_RSA, 2048)
|
||
# cert = OpenSSL.crypto.X509()
|
||
# cert.set_serial_number(0)
|
||
# cert.get_subject().CN = public.GetLocalIp()
|
||
# cert.set_issuer(cert.get_subject())
|
||
# cert.gmtime_adj_notBefore( 0 )
|
||
# cert.gmtime_adj_notAfter(86400 * 3650)
|
||
# cert.set_pubkey( key )
|
||
# cert.sign( key, 'md5' )
|
||
# cert_ca = OpenSSL.crypto.dump_certificate(OpenSSL.crypto.FILETYPE_PEM, cert)
|
||
# private_key = OpenSSL.crypto.dump_privatekey(OpenSSL.crypto.FILETYPE_PEM, key)
|
||
# if len(cert_ca) > 100 and len(private_key) > 100:
|
||
# public.writeFile('ssl/certificate.pem',cert_ca,'wb+')
|
||
# public.writeFile('ssl/privateKey.pem',private_key,'wb+')
|
||
# return True
|
||
# return False
|
||
# 自签证书
|
||
|
||
def CreateSSL(self):
|
||
import base64
|
||
userInfo = public.get_user_info()
|
||
if not userInfo:
|
||
userInfo['uid'] = 0
|
||
userInfo['access_key'] = 'B' * 32
|
||
domains = self.get_host_all()
|
||
pdata = {
|
||
"action": "get_domain_cert",
|
||
"company": "aapanel.com",
|
||
"domain": ','.join(domains),
|
||
"uid": userInfo['uid'],
|
||
"access_key": 'B' * 32,
|
||
"panel": 1
|
||
}
|
||
cert_api = 'https://api.aapanel.com/aapanel_cert'
|
||
result = json.loads(public.httpPost(cert_api, {'data': json.dumps(pdata)}))
|
||
if 'status' in result:
|
||
if result['status']:
|
||
# if os.path.exists('ssl/certificate.pem'):
|
||
# os.remove('ssl/certificate.pem')
|
||
# if os.path.exists('ssl/privateKey.pem'):
|
||
# os.remove('ssl/privateKey.pem')
|
||
# if os.path.exists('ssl/baota_root.pfx'):
|
||
# os.remove('ssl/baota_root.pfx')
|
||
# if os.path.exists('ssl/root_password.pl'):
|
||
# os.remove('ssl/root_password.pl')
|
||
public.writeFile('ssl/certificate.pem', result['cert'])
|
||
public.writeFile('ssl/privateKey.pem', result['key'])
|
||
public.writeFile('ssl/baota_root.pfx', base64.b64decode(result['pfx']), 'wb+')
|
||
public.writeFile('ssl/root_password.pl', result['password'])
|
||
public.writeFile('data/ssl.pl', 'True')
|
||
# public.ExecShell("/etc/init.d/bt reload")
|
||
print('1')
|
||
return True
|
||
print('0')
|
||
return False
|
||
|
||
def get_ipaddress(self):
|
||
'''
|
||
@name 获取本机IP地址
|
||
@author hwliang<2020-11-24>
|
||
@return list
|
||
'''
|
||
ipa_tmp = \
|
||
public.ExecShell("ip a |grep inet|grep -v inet6|grep -v 127.0.0.1|awk '{print $2}'|sed 's#/[0-9]*##g'")[
|
||
0].strip()
|
||
iplist = ipa_tmp.split('\n')
|
||
return iplist
|
||
|
||
def get_host_all(self):
|
||
local_ip = ['127.0.0.1', '::1', 'localhost']
|
||
ip_list = []
|
||
bind_ip = self.get_ipaddress()
|
||
|
||
for ip in bind_ip:
|
||
ip = ip.strip()
|
||
if ip in local_ip: continue
|
||
if ip in ip_list: continue
|
||
ip_list.append(ip)
|
||
net_ip = public.httpGet("https://www.aapanel.com/api/common/getClientIP")
|
||
|
||
if net_ip:
|
||
net_ip = net_ip.strip()
|
||
if not net_ip in ip_list:
|
||
ip_list.append(net_ip)
|
||
ip_list = [ip_list[-1], ip_list[0]]
|
||
return ip_list
|
||
#生成Token
|
||
def SetToken(self,get):
|
||
data = {}
|
||
data[''] = public.GetRandomString(24)
|
||
|
||
#取面板列表
|
||
def GetPanelList(self,get):
|
||
try:
|
||
data = public.M('panel').field('id,title,url,username,password,click,addtime').order('click desc').select()
|
||
if type(data) == str: data[111]
|
||
return data
|
||
except:
|
||
sql = '''CREATE TABLE IF NOT EXISTS `panel` (
|
||
`id` INTEGER PRIMARY KEY AUTOINCREMENT,
|
||
`title` TEXT,
|
||
`url` TEXT,
|
||
`username` TEXT,
|
||
`password` TEXT,
|
||
`click` INTEGER,
|
||
`addtime` INTEGER
|
||
);'''
|
||
public.M('sites').execute(sql,())
|
||
return []
|
||
|
||
#添加面板资料
|
||
def AddPanelInfo(self,get):
|
||
|
||
#校验是还是重复
|
||
isAdd = public.M('panel').where('title=? OR url=?',(get.title,get.url)).count()
|
||
if isAdd: return public.return_msg_gettext(False,'Notes or panel address duplicate!')
|
||
import time,json
|
||
isRe = public.M('panel').add('title,url,username,password,click,addtime',(public.xssencode2(get.title),public.xssencode2(get.url),public.xssencode2(get.username),get.password,0,int(time.time())))
|
||
if isRe: return public.return_msg_gettext(True,'Setup successfully!')
|
||
return public.return_msg_gettext(False,'Failed to add')
|
||
|
||
#修改面板资料
|
||
def SetPanelInfo(self,get):
|
||
#校验是还是重复
|
||
isSave = public.M('panel').where('(title=? OR url=?) AND id!=?',(get.title,get.url,get.id)).count()
|
||
if isSave: return public.return_msg_gettext(False,'Notes or panel address duplicate!')
|
||
import time,json
|
||
|
||
#更新到数据库
|
||
isRe = public.M('panel').where('id=?',(get.id,)).save('title,url,username,password',(get.title,get.url,get.username,get.password))
|
||
if isRe: return public.return_msg_gettext(True,'Setup successfully!')
|
||
return public.return_msg_gettext(False,'Failed to modify')
|
||
|
||
#删除面板资料
|
||
def DelPanelInfo(self,get):
|
||
isExists = public.M('panel').where('id=?',(get.id,)).count()
|
||
if not isExists: return public.return_msg_gettext(False,'Requested panel info does NOT exist!')
|
||
public.M('panel').where('id=?',(get.id,)).delete()
|
||
return public.return_msg_gettext(True,'Successfully deleted')
|
||
|
||
#点击计数
|
||
def ClickPanelInfo(self,get):
|
||
click = public.M('panel').where('id=?',(get.id,)).getField('click')
|
||
public.M('panel').where('id=?',(get.id,)).setField('click',click+1)
|
||
return True
|
||
|
||
#获取PHP配置参数
|
||
def GetPHPConf(self,get):
|
||
gets = [
|
||
{'name':'short_open_tag','type':1,'ps':public.get_msg_gettext('Short tag support')},
|
||
{'name':'asp_tags','type':1,'ps':public.get_msg_gettext('ASP tag support')},
|
||
{'name':'max_execution_time','type':2,'ps':public.get_msg_gettext('Max time of running script')},
|
||
{'name':'max_input_time','type':2,'ps':public.get_msg_gettext('Max time of input')},
|
||
{'name':'memory_limit','type':2,'ps':public.get_msg_gettext('Limit of script memory')},
|
||
{'name':'post_max_size','type':2,'ps':public.get_msg_gettext('Max size of POST data')},
|
||
{'name':'file_uploads','type':1,'ps':public.get_msg_gettext('Whether to allow upload file')},
|
||
{'name':'upload_max_filesize','type':2,'ps':public.get_msg_gettext('Max size of upload file')},
|
||
{'name':'max_file_uploads','type':2,'ps':public.get_msg_gettext('Max value of simultaneously upload file')},
|
||
{'name':'default_socket_timeout','type':2,'ps':public.get_msg_gettext('Socket over time')},
|
||
{'name':'error_reporting','type':3,'ps':public.get_msg_gettext('Level of error')},
|
||
{'name':'display_errors','type':1,'ps':public.get_msg_gettext('Whether to output detailed error info')},
|
||
{'name':'cgi.fix_pathinfo','type':0,'ps':public.get_msg_gettext('Whether to turn on pathinfo')},
|
||
{'name':'date.timezone','type':3,'ps':public.get_msg_gettext('Timezone')}
|
||
]
|
||
phpini_file = '/www/server/php/' + get.version + '/etc/php.ini'
|
||
if public.get_webserver() == 'openlitespeed':
|
||
phpini_file = '/usr/local/lsws/lsphp{}/etc/php/{}.{}/litespeed/php.ini'.format(get.version, get.version[0],get.version[1])
|
||
if os.path.exists('/etc/redhat-release'):
|
||
phpini_file = '/usr/local/lsws/lsphp' + get.version + '/etc/php.ini'
|
||
phpini = public.readFile(phpini_file)
|
||
if not phpini:
|
||
return public.return_msg_gettext(False,"Error reading PHP configuration file, please try to reinstall this PHP!")
|
||
result = []
|
||
for g in gets:
|
||
rep = g['name'] + r'\s*=\s*([0-9A-Za-z_&/ ~]+)(\s*;?|\r?\n)'
|
||
tmp = re.search(rep,phpini)
|
||
if not tmp: continue
|
||
g['value'] = tmp.groups()[0]
|
||
result.append(g)
|
||
|
||
return result
|
||
|
||
|
||
def get_php_config(self,get):
|
||
#取PHP配置
|
||
get.version = get.version.replace('.','')
|
||
file = session['setupPath'] + "/php/"+get.version+"/etc/php.ini"
|
||
if public.get_webserver() == 'openlitespeed':
|
||
file = '/usr/local/lsws/lsphp{}/etc/php/{}.{}/litespeed/php.ini'.format(get.version, get.version[0],get.version[1])
|
||
if os.path.exists('/etc/redhat-release'):
|
||
file = '/usr/local/lsws/lsphp' + get.version + '/etc/php.ini'
|
||
phpini = public.readFile(file)
|
||
file = session['setupPath'] + "/php/"+get.version+"/etc/php-fpm.conf"
|
||
phpfpm = public.readFile(file)
|
||
data = {}
|
||
try:
|
||
rep = r"upload_max_filesize\s*=\s*([0-9]+)M"
|
||
tmp = re.search(rep,phpini).groups()
|
||
data['max'] = tmp[0]
|
||
except:
|
||
data['max'] = '50'
|
||
try:
|
||
rep = r"request_terminate_timeout\s*=\s*([0-9]+)\n"
|
||
tmp = re.search(rep,phpfpm).groups()
|
||
data['maxTime'] = tmp[0]
|
||
except:
|
||
data['maxTime'] = 0
|
||
|
||
try:
|
||
rep = r"\n;*\s*cgi\.fix_pathinfo\s*=\s*([0-9]+)\s*\n"
|
||
tmp = re.search(rep,phpini).groups()
|
||
|
||
if tmp[0] == '1':
|
||
data['pathinfo'] = True
|
||
else:
|
||
data['pathinfo'] = False
|
||
except:
|
||
data['pathinfo'] = False
|
||
|
||
return data
|
||
|
||
#提交PHP配置参数
|
||
def SetPHPConf(self,get):
|
||
gets = ['display_errors','cgi.fix_pathinfo','date.timezone','short_open_tag','asp_tags','max_execution_time','max_input_time','memory_limit','post_max_size','file_uploads','upload_max_filesize','max_file_uploads','default_socket_timeout','error_reporting']
|
||
filename = '/www/server/php/' + get.version + '/etc/php.ini'
|
||
reload_str = '/etc/init.d/php-fpm-' + get.version + ' reload'
|
||
ols_php_path = '/usr/local/lsws/lsphp{}/etc/php/{}.{}/litespeed/php.ini'.format(get.version, get.version[0],get.version[1])
|
||
if os.path.exists('/etc/redhat-release'):
|
||
ols_php_path = '/usr/local/lsws/lsphp' + get.version + '/etc/php.ini'
|
||
reload_ols_str = '/usr/local/lsws/bin/lswsctrl restart'
|
||
for p in [filename,ols_php_path]:
|
||
if not p:
|
||
continue
|
||
if not os.path.exists(p):
|
||
continue
|
||
phpini = public.readFile(p)
|
||
for g in gets:
|
||
try:
|
||
rep = g + r'\s*=\s*(.+)\r?\n'
|
||
val = g+' = ' + get[g] + '\n'
|
||
phpini = re.sub(rep,val,phpini)
|
||
except: continue
|
||
|
||
public.writeFile(p,phpini)
|
||
public.ExecShell(reload_str)
|
||
public.ExecShell(reload_ols_str)
|
||
return public.return_msg_gettext(True,'Setup successfully!')
|
||
|
||
|
||
# 取Session缓存方式
|
||
def GetSessionConf(self,get):
|
||
filename = '/www/server/php/' + get.version + '/etc/php.ini'
|
||
if public.get_webserver() == 'openlitespeed':
|
||
filename = '/usr/local/lsws/lsphp{}/etc/php/{}.{}/litespeed/php.ini'.format(get.version,get.version[0],get.version[1])
|
||
if os.path.exists('/etc/redhat-release'):
|
||
filename = '/usr/local/lsws/lsphp' + get.version + '/etc/php.ini'
|
||
phpini = public.readFile(filename)
|
||
rep = r'session.save_handler\s*=\s*([0-9A-Za-z_& ~]+)(\s*;?|\r?\n)'
|
||
save_handler = re.search(rep, phpini)
|
||
if save_handler:
|
||
save_handler = save_handler.group(1)
|
||
else:
|
||
save_handler = "files"
|
||
|
||
reppath = r'\nsession.save_path\s*=\s*"tcp\:\/\/([\d\.]+):(\d+).*\r?\n'
|
||
passrep = r'\nsession.save_path\s*=\s*"tcp://[\w\.\?\:]+=(.*)"\r?\n'
|
||
memcached = r'\nsession.save_path\s*=\s*"([\d\.]+):(\d+)"'
|
||
save_path = re.search(reppath, phpini)
|
||
if not save_path:
|
||
save_path = re.search(memcached, phpini)
|
||
passwd = re.search(passrep, phpini)
|
||
port = ""
|
||
if passwd:
|
||
passwd = passwd.group(1)
|
||
else:
|
||
passwd = ""
|
||
if save_path:
|
||
port = save_path.group(2)
|
||
save_path = save_path.group(1)
|
||
|
||
else:
|
||
save_path = ""
|
||
return {"save_handler": save_handler, "save_path": save_path, "passwd": passwd, "port": port}
|
||
|
||
# 设置Session缓存方式
|
||
def SetSessionConf(self, get):
|
||
import glob
|
||
g = get.save_handler
|
||
ip = get.ip
|
||
port = get.port
|
||
passwd = get.passwd
|
||
if g != "files":
|
||
iprep = r"(2(5[0-5]{1}|[0-4]\d{1})|[0-1]?\d{1,2})\.(2(5[0-5]{1}|[0-4]\d{1})|[0-1]?\d{1,2})\.(2(5[0-5]{1}|[0-4]\d{1})|[0-1]?\d{1,2})\.(2(5[0-5]{1}|[0-4]\d{1})|[0-1]?\d{1,2})"
|
||
if not re.search(iprep, ip):
|
||
return public.return_msg_gettext(False, 'IP address is illegal!')
|
||
try:
|
||
port = int(port)
|
||
if port >= 65535 or port < 1:
|
||
return public.return_msg_gettext(False, 'Port range is incorrect! should be between 100-65535')
|
||
except:
|
||
return public.return_msg_gettext(False, 'Port range is incorrect! should be between 100-65535')
|
||
prep = r"[\~\`\/\=]"
|
||
if re.search(prep, passwd):
|
||
return public.return_msg_gettext(False, 'Please do NOT enter the following special characters {}', ('" ~ ` / = "'))
|
||
filename = '/www/server/php/' + get.version + '/etc/php.ini'
|
||
filename_ols = None
|
||
if os.path.exists("/usr/local/lsws/bin/lswsctrl"):
|
||
filename_ols = '/usr/local/lsws/lsphp{}/etc/php/{}.{}/litespeed/php.ini'.format(get.version, get.version[0],
|
||
get.version[1])
|
||
if os.path.exists('/etc/redhat-release'):
|
||
filename_ols = '/usr/local/lsws/lsphp' + get.version + '/etc/php.ini'
|
||
try:
|
||
ols_php_os_path = glob.glob("/usr/local/lsws/lsphp{}/lib/php/20*".format(get.version))[0]
|
||
except:
|
||
ols_php_os_path = None
|
||
if os.path.exists("/etc/redhat-release"):
|
||
ols_php_os_path = '/usr/local/lsws/lsphp{}/lib64/php/modules/'.format(get.version)
|
||
ols_so_list = os.listdir(ols_php_os_path)
|
||
else:
|
||
ols_so_list = []
|
||
for f in [filename,filename_ols]:
|
||
if not f:
|
||
continue
|
||
phpini = public.readFile(f)
|
||
rep = r'session.save_handler\s*=\s*(.+)\r?\n'
|
||
val = r'session.save_handler = ' + g + '\n'
|
||
phpini = re.sub(rep, val, phpini)
|
||
if g == "memcached":
|
||
if not re.search("memcached.so", phpini) and "memcached.so" not in ols_so_list:
|
||
return public.return_msg_gettext(False, 'Please install the {} extension first.', (g,))
|
||
rep = r'\nsession.save_path\s*=\s*(.+)\r?\n'
|
||
val = r'\nsession.save_path = "%s:%s" \n' % (ip,port)
|
||
if re.search(rep, phpini):
|
||
phpini = re.sub(rep, val, phpini)
|
||
else:
|
||
phpini = re.sub('\n;session.save_path = "/tmp"', '\n;session.save_path = "/tmp"' + val, phpini)
|
||
if g == "memcache":
|
||
if not re.search("memcache.so", phpini) and "memcache.so" not in ols_so_list:
|
||
return public.return_msg_gettext(False, 'Please install the {} extension first.', (g,))
|
||
rep = r'\nsession.save_path\s*=\s*(.+)\r?\n'
|
||
val = r'\nsession.save_path = "tcp://%s:%s"\n' % (ip, port)
|
||
if re.search(rep, phpini):
|
||
phpini = re.sub(rep, val, phpini)
|
||
else:
|
||
phpini = re.sub('\n;session.save_path = "/tmp"', '\n;session.save_path = "/tmp"' + val, phpini)
|
||
if g == "redis":
|
||
if not re.search("redis.so", phpini) and "redis.so" not in ols_so_list:
|
||
return public.return_msg_gettext(False, 'Please install the {} extension first.', (g,))
|
||
if passwd:
|
||
passwd = "?auth=" + passwd
|
||
else:
|
||
passwd = ""
|
||
rep = r'\nsession.save_path\s*=\s*(.+)\r?\n'
|
||
val = r'\nsession.save_path = "tcp://%s:%s%s"\n' % (ip, port, passwd)
|
||
res = re.search(rep, phpini)
|
||
if res:
|
||
phpini = re.sub(rep, val, phpini)
|
||
else:
|
||
phpini = re.sub('\n;session.save_path = "/tmp"', '\n;session.save_path = "/tmp"' + val, phpini)
|
||
if g == "files":
|
||
rep = r'\nsession.save_path\s*=\s*(.+)\r?\n'
|
||
val = r'\nsession.save_path = "/tmp"\n'
|
||
if re.search(rep, phpini):
|
||
phpini = re.sub(rep, val, phpini)
|
||
else:
|
||
phpini = re.sub('\n;session.save_path = "/tmp"', '\n;session.save_path = "/tmp"' + val, phpini)
|
||
public.writeFile(f, phpini)
|
||
public.ExecShell('/etc/init.d/php-fpm-' + get.version + ' reload')
|
||
public.serviceReload()
|
||
return public.return_msg_gettext(True, 'Setup successfully!')
|
||
|
||
# 获取Session文件数量
|
||
def GetSessionCount(self, get):
|
||
d=["/tmp","/www/php_session"]
|
||
|
||
count = 0
|
||
for i in d:
|
||
if not os.path.exists(i): public.ExecShell('mkdir -p %s'%i)
|
||
list = os.listdir(i)
|
||
for l in list:
|
||
if os.path.isdir(i+"/"+l):
|
||
l1 = os.listdir(i+"/"+l)
|
||
for ll in l1:
|
||
if "sess_" in ll:
|
||
count += 1
|
||
continue
|
||
if "sess_" in l:
|
||
count += 1
|
||
|
||
s = "find /tmp -mtime +1 |grep 'sess_'|wc -l"
|
||
old_file = int(public.ExecShell(s)[0].split("\n")[0])
|
||
|
||
s = "find /www/php_session -mtime +1 |grep 'sess_'|wc -l"
|
||
old_file += int(public.ExecShell(s)[0].split("\n")[0])
|
||
|
||
return {"total":count,"oldfile":old_file}
|
||
|
||
# 删除老文件
|
||
def DelOldSession(self,get):
|
||
s = "find /tmp -mtime +1 |grep 'sess_'|xargs rm -f"
|
||
public.ExecShell(s)
|
||
s = "find /www/php_session -mtime +1 |grep 'sess_'|xargs rm -f"
|
||
public.ExecShell(s)
|
||
# s = "find /tmp -mtime +1 |grep 'sess_'|wc -l"
|
||
# old_file_conf = int(public.ExecShell(s)[0].split("\n")[0])
|
||
old_file_conf = self.GetSessionCount(get)["oldfile"]
|
||
if old_file_conf == 0:
|
||
return public.return_msg_gettext(True, 'Successfully deleted')
|
||
else:
|
||
return public.return_msg_gettext(True, 'Failed to delete')
|
||
|
||
# 获取面板证书
|
||
def GetPanelSSL(self, get):
|
||
cert = {}
|
||
cert['privateKey'] = public.readFile('ssl/privateKey.pem')
|
||
cert['certPem'] = public.readFile('ssl/certificate.pem')
|
||
cert['rep'] = os.path.exists('ssl/input.pl')
|
||
return cert
|
||
|
||
#保存面板证书
|
||
def SavePanelSSL(self,get):
|
||
keyPath = 'ssl/privateKey.pem'
|
||
certPath = 'ssl/certificate.pem'
|
||
checkCert = '/tmp/cert.pl'
|
||
public.writeFile(checkCert,get.certPem)
|
||
if get.privateKey:
|
||
public.writeFile(keyPath,get.privateKey)
|
||
if get.certPem:
|
||
public.writeFile(certPath, get.certPem)
|
||
if not public.CheckCert(checkCert): return public.return_msg_gettext(False, 'Certificate ERROR, please check!')
|
||
public.writeFile('ssl/input.pl', 'True')
|
||
return public.return_msg_gettext(True, 'Certificate saved!')
|
||
|
||
#获取配置
|
||
def get_config(self,get):
|
||
if 'config' in session:
|
||
session['config']['distribution'] = public.get_linux_distribution()
|
||
session['webserver'] = public.get_webserver()
|
||
session['config']['webserver'] = session['webserver']
|
||
return session['config']
|
||
data = public.M('config').where("id=?",('1',)).field('webserver,sites_path,backup_path,status,mysql_root').find()
|
||
data['webserver'] = public.get_webserver()
|
||
data['distribution'] = public.get_linux_distribution()
|
||
return data
|
||
|
||
|
||
#取面板错误日志
|
||
def get_error_logs(self,get):
|
||
return public.GetNumLines('logs/error.log',2000)
|
||
|
||
def is_pro(self,get):
|
||
import panelAuth,json
|
||
pdata = panelAuth.panelAuth().create_serverid(None)
|
||
url = public.GetConfigValue('home') + '/api/panel/is_pro'
|
||
pluginTmp = public.httpPost(url,pdata)
|
||
pluginInfo = json.loads(pluginTmp)
|
||
return pluginInfo
|
||
|
||
def get_token(self,get):
|
||
import panelApi
|
||
return panelApi.panelApi().get_token(get)
|
||
|
||
def set_token(self,get):
|
||
import panelApi
|
||
return panelApi.panelApi().set_token(get)
|
||
|
||
def get_tmp_token(self,get):
|
||
import panelApi
|
||
return panelApi.panelApi().get_tmp_token(get)
|
||
|
||
def GetNginxValue(self,get):
|
||
n = nginx.nginx()
|
||
return n.GetNginxValue()
|
||
|
||
def SetNginxValue(self,get):
|
||
n = nginx.nginx()
|
||
return n.SetNginxValue(get)
|
||
|
||
def GetApacheValue(self,get):
|
||
a = apache.apache()
|
||
return a.GetApacheValue()
|
||
|
||
def SetApacheValue(self,get):
|
||
a = apache.apache()
|
||
return a.SetApacheValue(get)
|
||
|
||
def get_ols_value(self,get):
|
||
a = ols.ols()
|
||
return a.get_value(get)
|
||
|
||
def set_ols_value(self,get):
|
||
a = ols.ols()
|
||
return a.set_value(get)
|
||
|
||
def get_ols_private_cache(self,get):
|
||
a = ols.ols()
|
||
return a.get_private_cache(get)
|
||
|
||
def get_ols_static_cache(self,get):
|
||
a = ols.ols()
|
||
return a.get_static_cache(get)
|
||
|
||
def set_ols_static_cache(self,get):
|
||
a = ols.ols()
|
||
return a.set_static_cache(get)
|
||
|
||
def switch_ols_private_cache(self,get):
|
||
a = ols.ols()
|
||
return a.switch_private_cache(get)
|
||
|
||
def set_ols_private_cache(self,get):
|
||
a = ols.ols()
|
||
return a.set_private_cache(get)
|
||
|
||
def get_ols_private_cache_status(self,get):
|
||
a = ols.ols()
|
||
return a.get_private_cache_status(get)
|
||
|
||
def get_ipv6_listen(self,get):
|
||
return os.path.exists('data/ipv6.pl')
|
||
|
||
def set_ipv6_status(self,get):
|
||
ipv6_file = 'data/ipv6.pl'
|
||
if self.get_ipv6_listen(get):
|
||
os.remove(ipv6_file)
|
||
public.write_log_gettext('Panel setting', 'Disable IPv6 compatibility of the panel!')
|
||
else:
|
||
public.writeFile(ipv6_file, 'True')
|
||
public.write_log_gettext('Panel setting', 'Enable IPv6 compatibility of the panel!')
|
||
public.restart_panel()
|
||
return public.return_msg_gettext(True, 'Setup successfully!')
|
||
|
||
#自动补充CLI模式下的PHP版本
|
||
def auto_cli_php_version(self,get):
|
||
import panelSite
|
||
php_versions = panelSite.panelSite().GetPHPVersion(get)
|
||
php_bin_src = "/www/server/php/%s/bin/php" % php_versions[-1]['version']
|
||
if not os.path.exists(php_bin_src): return public.return_msg_gettext(False,'PHP is not installed')
|
||
get.php_version = php_versions[-1]['version']
|
||
self.set_cli_php_version(get)
|
||
return php_versions[-1]
|
||
|
||
#获取CLI模式下的PHP版本
|
||
def get_cli_php_version(self,get):
|
||
php_bin = '/usr/bin/php'
|
||
if not os.path.exists(php_bin) or not os.path.islink(php_bin): return self.auto_cli_php_version(get)
|
||
link_re = os.readlink(php_bin)
|
||
if not os.path.exists(link_re): return self.auto_cli_php_version(get)
|
||
import panelSite
|
||
php_versions = panelSite.panelSite().GetPHPVersion(get)
|
||
if len(php_versions)==0:
|
||
return public.return_msg_gettext(False,'Failed to get php version!')
|
||
del(php_versions[0])
|
||
for v in php_versions:
|
||
if link_re.find(v['version']) != -1: return {"select":v,"versions":php_versions}
|
||
return {"select":self.auto_cli_php_version(get),"versions":php_versions}
|
||
|
||
#设置CLI模式下的PHP版本
|
||
def set_cli_php_version(self,get):
|
||
php_bin = '/usr/bin/php'
|
||
php_bin_src = "/www/server/php/%s/bin/php" % get.php_version
|
||
php_ize = '/usr/bin/phpize'
|
||
php_ize_src = "/www/server/php/%s/bin/phpize" % get.php_version
|
||
php_fpm = '/usr/bin/php-fpm'
|
||
php_fpm_src = "/www/server/php/%s/sbin/php-fpm" % get.php_version
|
||
php_pecl = '/usr/bin/pecl'
|
||
php_pecl_src = "/www/server/php/%s/bin/pecl" % get.php_version
|
||
php_pear = '/usr/bin/pear'
|
||
php_pear_src = "/www/server/php/%s/bin/pear" % get.php_version
|
||
if not os.path.exists(php_bin_src): return public.return_msg_gettext(False,'Specified PHP version not installed')
|
||
is_chattr = public.ExecShell('lsattr /usr|grep /usr/bin')[0].find('-i-')
|
||
if is_chattr != -1: public.ExecShell('chattr -i /usr/bin')
|
||
public.ExecShell("rm -f " + php_bin + ' '+ php_ize + ' ' + php_fpm + ' ' + php_pecl + ' ' + php_pear)
|
||
public.ExecShell("ln -sf %s %s" % (php_bin_src,php_bin))
|
||
public.ExecShell("ln -sf %s %s" % (php_ize_src,php_ize))
|
||
public.ExecShell("ln -sf %s %s" % (php_fpm_src,php_fpm))
|
||
public.ExecShell("ln -sf %s %s" % (php_pecl_src,php_pecl))
|
||
public.ExecShell("ln -sf %s %s" % (php_pear_src,php_pear))
|
||
import jobs
|
||
jobs.set_php_cli_env()
|
||
if is_chattr != -1: public.ExecShell('chattr +i /usr/bin')
|
||
public.write_log_gettext('Panel settings','Set the PHP-CLI version to: {}',(get.php_version,))
|
||
return public.return_msg_gettext(True,'Setup successfully!')
|
||
|
||
|
||
#获取BasicAuth状态
|
||
def get_basic_auth_stat(self,get):
|
||
path = 'config/basic_auth.json'
|
||
is_install = True
|
||
result = {"basic_user":"","basic_pwd":"","open":False,"is_install":is_install}
|
||
if not os.path.exists(path): return result
|
||
try:
|
||
ba_conf = json.loads(public.readFile(path))
|
||
except:
|
||
os.remove(path)
|
||
return result
|
||
ba_conf['is_install'] = is_install
|
||
return ba_conf
|
||
|
||
#设置BasicAuth
|
||
def set_basic_auth(self,get):
|
||
is_open = False
|
||
if get.open == 'True': is_open = True
|
||
tips = '_bt.cn'
|
||
path = 'config/basic_auth.json'
|
||
ba_conf = None
|
||
if is_open:
|
||
if not get.basic_user.strip() or not get.basic_pwd.strip(): return public.returnMsg(False,'BasicAuth authentication username and password cannot be empty!')
|
||
if os.path.exists(path):
|
||
try:
|
||
ba_conf = json.loads(public.readFile(path))
|
||
except:
|
||
os.remove(path)
|
||
|
||
if not ba_conf:
|
||
ba_conf = {"basic_user":public.md5(get.basic_user.strip() + tips),"basic_pwd":public.md5(get.basic_pwd.strip() + tips),"open":is_open}
|
||
else:
|
||
if get.basic_user: ba_conf['basic_user'] = public.md5(get.basic_user.strip() + tips)
|
||
if get.basic_pwd: ba_conf['basic_pwd'] = public.md5(get.basic_pwd.strip() + tips)
|
||
ba_conf['open'] = is_open
|
||
|
||
public.writeFile(path,json.dumps(ba_conf))
|
||
os.chmod(path,384)
|
||
public.write_log_gettext('Panel settings','Set the BasicAuth status to: {}', (is_open,))
|
||
public.writeFile('data/reload.pl','True')
|
||
return public.return_msg_gettext(True,'Setup successfully!')
|
||
|
||
#取面板运行日志
|
||
def get_panel_error_logs(self,get):
|
||
filename = 'logs/error.log'
|
||
if not os.path.exists(filename): return public.return_msg_gettext(False,"Logs emptied")
|
||
result = public.GetNumLines(filename,2000)
|
||
return public.return_msg_gettext(True,result)
|
||
|
||
#清空面板运行日志
|
||
def clean_panel_error_logs(self,get):
|
||
filename = 'logs/error.log'
|
||
public.writeFile(filename,'')
|
||
public.write_log_gettext('Panel settings','Clearing log info')
|
||
return public.return_msg_gettext(True,'Cleared!')
|
||
|
||
# 获取lets证书
|
||
def get_cert_source(self,get):
|
||
import setPanelLets
|
||
sp = setPanelLets.setPanelLets()
|
||
spg = sp.get_cert_source()
|
||
return spg
|
||
|
||
#设置debug模式
|
||
def set_debug(self,get):
|
||
debug_path = 'data/debug.pl'
|
||
if os.path.exists(debug_path):
|
||
t_str = 'Close'
|
||
os.remove(debug_path)
|
||
else:
|
||
t_str = 'Open'
|
||
public.writeFile(debug_path,'True')
|
||
public.write_log_gettext('Panel configuration','{} Developer mode(DeBug)',(t_str,))
|
||
public.restart_panel()
|
||
return public.return_msg_gettext(True,'Setup successfully!')
|
||
|
||
|
||
#设置离线模式
|
||
def set_local(self,get):
|
||
d_path = 'data/not_network.pl'
|
||
if os.path.exists(d_path):
|
||
t_str = 'Close'
|
||
os.remove(d_path)
|
||
else:
|
||
t_str = 'Open'
|
||
public.writeFile(d_path,'True')
|
||
public.write_log_gettext('Panel configuration','{} Offline mode',(t_str,))
|
||
return public.return_msg_gettext(True,'Setup successfully!')
|
||
|
||
# 修改.user.ini文件
|
||
def _edit_user_ini(self,file,s_conf,act,session_path):
|
||
public.ExecShell("chattr -i {}".format(file))
|
||
conf = public.readFile(file)
|
||
if act == "1":
|
||
if "session.save_path" in conf:
|
||
return False
|
||
conf = conf + ":{}/".format(session_path)
|
||
conf = conf + "\n" + s_conf
|
||
else:
|
||
rep = "\n*session.save_path(.|\n)*files"
|
||
rep1 = ":{}".format(session_path)
|
||
conf = re.sub(rep,"",conf)
|
||
conf = re.sub(rep1,"",conf)
|
||
public.writeFile(file, conf)
|
||
public.ExecShell("chattr +i {}".format(file))
|
||
|
||
# 设置php_session存放到独立文件夹
|
||
def set_php_session_path(self,get):
|
||
'''
|
||
get.id site id
|
||
get.act 0/1
|
||
:param get:
|
||
:return:
|
||
'''
|
||
if public.get_webserver() == 'openlitespeed':
|
||
return public.return_msg_gettext(False, 'The current web server is openlitespeed. This function is not supported yet.')
|
||
import panelSite
|
||
site_info = public.M('sites').where('id=?', (get.id,)).field('name,path').find()
|
||
session_path = "/www/php_session/{}".format(site_info["name"])
|
||
if not os.path.exists(session_path):
|
||
os.makedirs(session_path)
|
||
public.ExecShell('chown www.www {}'.format(session_path))
|
||
run_path = panelSite.panelSite().GetSiteRunPath(get)["runPath"]
|
||
user_ini_file = "{site_path}{run_path}/.user.ini".format(site_path=site_info["path"], run_path=run_path)
|
||
conf = "session.save_path={}/\nsession.save_handler = files".format(session_path)
|
||
if get.act == "1":
|
||
if not os.path.exists(user_ini_file):
|
||
public.writeFile(user_ini_file,conf)
|
||
public.ExecShell("chattr +i {}".format(user_ini_file))
|
||
return public.return_msg_gettext(True,'Setup successfully!')
|
||
self._edit_user_ini(user_ini_file,conf,get.act,session_path)
|
||
return public.return_msg_gettext(True, 'Setup successfully!')
|
||
else:
|
||
self._edit_user_ini(user_ini_file,conf,get.act,session_path)
|
||
return public.return_msg_gettext(True, 'Setup successfully!')
|
||
|
||
# 获取php_session是否存放到独立文件夹
|
||
def get_php_session_path(self,get):
|
||
import panelSite
|
||
site_info = public.M('sites').where('id=?', (get.id,)).field('name,path').find()
|
||
run_path = panelSite.panelSite().GetSiteRunPath(get)["runPath"]
|
||
user_ini_file = "{site_path}{run_path}/.user.ini".format(site_path=site_info["path"], run_path=run_path)
|
||
conf = public.readFile(user_ini_file)
|
||
if conf and "session.save_path" in conf:
|
||
return True
|
||
return False
|
||
|
||
def _create_key(self):
|
||
get_token = pyotp.random_base32() # returns a 16 character base32 secret. Compatible with Google Authenticator
|
||
public.writeFile(self._key_file,get_token)
|
||
username = self.get_random()
|
||
public.writeFile(self._username_file, username)
|
||
|
||
def get_key(self,get):
|
||
key = public.readFile(self._key_file)
|
||
username = public.readFile(self._username_file)
|
||
if not key:
|
||
return public.return_msg_gettext(False, 'The key does not exist. Please turn on and try again.')
|
||
if not username:
|
||
return public.return_msg_gettext(False, 'The username does not exist. Please turn on and try again.')
|
||
return {"key":key,"username":username}
|
||
|
||
def get_random(self):
|
||
import random
|
||
seed = "1234567890abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"
|
||
sa = []
|
||
for _ in range(8):
|
||
sa.append(random.choice(seed))
|
||
salt = ''.join(sa)
|
||
return salt
|
||
|
||
def set_two_step_auth(self,get):
|
||
if not hasattr(get,"act") or not get.act:
|
||
return public.return_msg_gettext(False, 'Please enter the operation mode')
|
||
if get.act == "1":
|
||
if not os.path.exists(self._core_fle_path):
|
||
os.makedirs(self._core_fle_path)
|
||
username = public.readFile(self._username_file)
|
||
if not os.path.exists(self._bk_key_file):
|
||
secret_key = public.readFile(self._key_file)
|
||
if not secret_key or not username:
|
||
self._create_key()
|
||
else:
|
||
os.rename(self._bk_key_file,self._key_file)
|
||
secret_key = public.readFile(self._key_file)
|
||
username = public.readFile(self._username_file)
|
||
local_ip = public.GetLocalIp()
|
||
if not secret_key:
|
||
return public.return_msg_gettext(False,"Failed to generate key or username. Please check if the hard disk space is insufficient or the directory cannot be written.[ {} ]",(self._setup_path+"/data/",))
|
||
try:
|
||
try:
|
||
panel_name = json.loads(public.readFile(self._setup_path+'/config/config.json'))['title']
|
||
except:
|
||
panel_name = 'aaPanel'
|
||
data = pyotp.totp.TOTP(secret_key).provisioning_uri(username, issuer_name='{}--{}'.format(panel_name,local_ip))
|
||
public.writeFile(self._core_fle_path+'/qrcode.txt',str(data))
|
||
return public.return_msg_gettext(True, 'Setup successfully!')
|
||
except Exception as e:
|
||
return public.return_msg_gettext(False, e)
|
||
else:
|
||
if os.path.exists(self._key_file):
|
||
os.rename(self._key_file,self._bk_key_file)
|
||
return public.return_msg_gettext(True, 'Setup successfully!')
|
||
|
||
# 检测是否开启双因素验证
|
||
def check_two_step(self,get):
|
||
secret_key = public.readFile(self._key_file)
|
||
if not secret_key:
|
||
return public.return_msg_gettext(False, 'Did not open Google authentication')
|
||
return public.return_msg_gettext(True, 'Google authentication has been turned on')
|
||
|
||
# 读取二维码data
|
||
def get_qrcode_data(self,get):
|
||
data = public.readFile(self._core_fle_path + '/qrcode.txt')
|
||
if data:
|
||
return data
|
||
return public.return_msg_gettext(True, 'No QR code data, please re-open')
|
||
|
||
# 设置是否云控打开
|
||
def set_coll_open(self,get):
|
||
if not 'coll_show' in get: return public.return_msg_gettext(False,'Parameter ERROR!')
|
||
if get.coll_show == 'True':
|
||
session['tmp_login'] = True
|
||
else:
|
||
session['tmp_login'] = False
|
||
return public.return_msg_gettext(True,'Setup successfully!')
|
||
|
||
# 获取菜单列表
|
||
def get_menu_list(self, get):
|
||
'''
|
||
@name 获取菜单列表
|
||
@author hwliang<2020-08-31>
|
||
@param get<dict_obj>
|
||
@return list
|
||
'''
|
||
menu_file = 'config/menu.json'
|
||
hide_menu_file = 'config/hide_menu.json'
|
||
data = json.loads(public.ReadFile(menu_file))
|
||
if not os.path.exists(hide_menu_file):
|
||
public.writeFile(hide_menu_file, '[]')
|
||
hide_menu = public.ReadFile(hide_menu_file)
|
||
if not hide_menu:
|
||
hide_menu = []
|
||
else:
|
||
hide_menu = json.loads(hide_menu)
|
||
result = []
|
||
for d in data:
|
||
tmp = {}
|
||
tmp['id'] = d['id']
|
||
tmp['title'] = d['title']
|
||
tmp['show'] = not d['id'] in hide_menu
|
||
tmp['sort'] = d['sort']
|
||
result.append(tmp)
|
||
|
||
menus = sorted(result, key=lambda x: x['sort'])
|
||
return menus
|
||
|
||
# 设置隐藏菜单列表
|
||
def set_hide_menu_list(self, get):
|
||
'''
|
||
@name 设置隐藏菜单列表
|
||
@author hwliang<2020-08-31>
|
||
@param get<dict_obj> {
|
||
hide_list: json<list> 所有不显示的菜单ID
|
||
}
|
||
@return dict
|
||
'''
|
||
hide_menu_file = 'config/hide_menu.json'
|
||
not_hide_id = ["dologin", "memuAconfig", "memuAsoft", "memuA"] # 禁止隐藏的菜单
|
||
|
||
hide_list = json.loads(get.hide_list)
|
||
hide_menu = []
|
||
for h in hide_list:
|
||
if h in not_hide_id: continue
|
||
hide_menu.append(h)
|
||
public.writeFile(hide_menu_file, json.dumps(hide_menu))
|
||
public.write_log_gettext('Panel setting', 'Successfully modify the panel menu display list')
|
||
return public.return_msg_gettext(True, 'Setup successfully!')
|
||
|
||
# 获取临时登录列表
|
||
def get_temp_login(self, args):
|
||
'''
|
||
@name 获取临时登录列表
|
||
@author hwliang<2020-09-2>
|
||
@return dict
|
||
'''
|
||
if 'tmp_login_expire' in session: return public.return_msg_gettext(False, 'Permission denied!')
|
||
public.M('temp_login').where('state=? and expire<?', (0, int(time.time()))).setField('state', -1)
|
||
callback = ''
|
||
if 'tojs' in args:
|
||
callback = args.tojs
|
||
p = 1
|
||
if 'p' in args:
|
||
p = int(args.p)
|
||
rows = 12
|
||
if 'rows' in args:
|
||
rows = int(args.rows)
|
||
count = public.M('temp_login').count()
|
||
data = {}
|
||
page_data = public.get_page(count, p, rows, callback)
|
||
data['page'] = page_data['page']
|
||
data['data'] = public.M('temp_login').limit(page_data['shift'] + ',' + page_data['row']).order('id desc').field(
|
||
'id,addtime,expire,login_time,login_addr,state').select()
|
||
for i in range(len(data['data'])):
|
||
data['data'][i]['online_state'] = os.path.exists('data/session/{}'.format(data['data'][i]['id']))
|
||
return data
|
||
|
||
# 设置临时登录
|
||
def set_temp_login(self, args):
|
||
'''
|
||
@name 设置临时登录
|
||
@author hwliang<2020-09-2>
|
||
@return dict
|
||
'''
|
||
if 'tmp_login_expire' in session: return public.return_msg_gettext(False, 'Permission denied!')
|
||
s_time = int(time.time())
|
||
public.M('temp_login').where('state=? and expire>?', (0, s_time)).delete()
|
||
token = public.GetRandomString(48)
|
||
salt = public.GetRandomString(12)
|
||
|
||
pdata = {
|
||
'token': public.md5(token + salt),
|
||
'salt': salt,
|
||
'state': 0,
|
||
'login_time': 0,
|
||
'login_addr': '',
|
||
'expire': s_time + 3600,
|
||
'addtime': s_time
|
||
}
|
||
|
||
if not public.M('temp_login').count():
|
||
pdata['id'] = 101
|
||
|
||
if public.M('temp_login').insert(pdata):
|
||
public.write_log_gettext('Panel setting', 'Generate temporary connection, expiration time: {}',(public.format_date(times=pdata['expire']),))
|
||
return {'status': True, 'msg': public.get_msg_gettext('Temporary login URL has been generated'), 'token': token, 'expire': pdata['expire']}
|
||
return public.return_msg_gettext(False, 'Failed to generate temporary login URL')
|
||
|
||
# 删除临时登录
|
||
def remove_temp_login(self, args):
|
||
'''
|
||
@name 删除临时登录
|
||
@author hwliang<2020-09-2>
|
||
@param args<dict_obj>{
|
||
id: int<临时登录ID>
|
||
}
|
||
@return dict
|
||
'''
|
||
if 'tmp_login_expire' in session: return public.return_msg_gettext(False, 'Permission denied!')
|
||
id = int(args.id)
|
||
if public.M('temp_login').where('id=?', (id,)).delete():
|
||
public.write_log_gettext('Panel setting', 'Delete temporary login URL')
|
||
return public.return_msg_gettext(True, 'Successfully deleted')
|
||
return public.return_msg_gettext(False, 'Failed to delete')
|
||
|
||
# 强制弹出指定临时登录
|
||
def clear_temp_login(self, args):
|
||
'''
|
||
@name 强制登出
|
||
@author hwliang<2020-09-2>
|
||
@param args<dict_obj>{
|
||
id: int<临时登录ID>
|
||
}
|
||
@return dict
|
||
'''
|
||
if 'tmp_login_expire' in session: return public.return_msg_gettext(False, 'Permission denied!')
|
||
id = int(args.id)
|
||
s_file = 'data/session/{}'.format(id)
|
||
if os.path.exists(s_file):
|
||
os.remove(s_file)
|
||
public.write_log_gettext('Panel setting', 'Force logout of temporary users:{1}',(str(id),))
|
||
return public.return_msg_gettext(True, 'Temporary user has been forcibly logged out:{}',(str(id),))
|
||
public.return_msg_gettext(False, 'The specified user is not currently logged in!')
|
||
|
||
# 查看临时授权操作日志
|
||
def get_temp_login_logs(self, args):
|
||
'''
|
||
@name 查看临时授权操作日志
|
||
@author hwliang<2020-09-2>
|
||
@param args<dict_obj>{
|
||
id: int<临时登录ID>
|
||
}
|
||
@return dict
|
||
'''
|
||
if 'tmp_login_expire' in session: return public.return_msg_gettext(False, 'Permission denied!')
|
||
id = int(args.id)
|
||
data = public.M('logs').where('uid=?', (id,)).order('id desc').select()
|
||
return data
|
||
|
||
def add_nginx_access_log_format(self,args):
|
||
n = nginx.nginx()
|
||
return n.add_nginx_access_log_format(args)
|
||
|
||
def del_nginx_access_log_format(self,args):
|
||
n = nginx.nginx()
|
||
return n.del_nginx_access_log_format(args)
|
||
|
||
def get_nginx_access_log_format(self,args):
|
||
n = nginx.nginx()
|
||
return n.get_nginx_access_log_format(args)
|
||
|
||
def set_format_log_to_website(self,args):
|
||
n = nginx.nginx()
|
||
return n.set_format_log_to_website(args)
|
||
|
||
def get_nginx_access_log_format_parameter(self,args):
|
||
n = nginx.nginx()
|
||
return n.get_nginx_access_log_format_parameter(args)
|
||
|
||
def add_httpd_access_log_format(self,args):
|
||
a = apache.apache()
|
||
return a.add_httpd_access_log_format(args)
|
||
|
||
def del_httpd_access_log_format(self,args):
|
||
a = apache.apache()
|
||
return a.del_httpd_access_log_format(args)
|
||
|
||
def get_httpd_access_log_format(self,args):
|
||
a = apache.apache()
|
||
return a.get_httpd_access_log_format(args)
|
||
|
||
def set_httpd_format_log_to_website(self,args):
|
||
a = apache.apache()
|
||
return a.set_httpd_format_log_to_website(args)
|
||
|
||
def get_httpd_access_log_format_parameter(self,args):
|
||
a = apache.apache()
|
||
return a.get_httpd_access_log_format_parameter(args)
|
||
|
||
def get_file_deny(self,args):
|
||
import file_execute_deny
|
||
p = file_execute_deny.FileExecuteDeny()
|
||
return p.get_file_deny(args)
|
||
|
||
def set_file_deny(self,args):
|
||
import file_execute_deny
|
||
p = file_execute_deny.FileExecuteDeny()
|
||
return p.set_file_deny(args)
|
||
|
||
def del_file_deny(self,args):
|
||
import file_execute_deny
|
||
p = file_execute_deny.FileExecuteDeny()
|
||
return p.del_file_deny(args)
|
||
#查看告警
|
||
def get_login_send(self,get):
|
||
result={}
|
||
import time
|
||
time.sleep(0.01)
|
||
if os.path.exists('/www/server/panel/data/login_send_mail.pl'):
|
||
result['mail']=True
|
||
else:
|
||
result['mail']=False
|
||
if os.path.exists('/www/server/panel/data/login_send_dingding.pl'):
|
||
result['dingding']=True
|
||
else:
|
||
result['dingding']=False
|
||
if result['mail'] or result['dingding']:
|
||
return public.return_msg_gettext(True, result)
|
||
return public.return_msg_gettext(False, result)
|
||
|
||
#设置告警
|
||
def set_login_send(self,get):
|
||
type=get.type.strip()
|
||
if type=='mail':
|
||
if not os.path.exists("/www/server/panel/data/login_send_mail.pl"):
|
||
os.mknod("/www/server/panel/data/login_send_mail.pl")
|
||
if os.path.exists("/www/server/panel/data/login_send_dingding.pl"):
|
||
os.remove("/www/server/panel/data/login_send_dingding.pl")
|
||
return public.return_msg_gettext(True, 'Setup Successfully')
|
||
elif type=='dingding':
|
||
if not os.path.exists("/www/server/panel/data/login_send_dingding.pl"):
|
||
os.mknod("/www/server/panel/data/login_send_dingding.pl")
|
||
if os.path.exists("/www/server/panel/data/login_send_mail.pl"):
|
||
os.remove("/www/server/panel/data/login_send_mail.pl")
|
||
return public.return_msg_gettext(True, 'Setup Successfully')
|
||
else:
|
||
return public.return_msg_gettext(False,'The delivery type is not supported')
|
||
|
||
#取消告警
|
||
def clear_login_send(self,get):
|
||
type = get.type.strip()
|
||
if type == 'mail':
|
||
if os.path.exists("/www/server/panel/data/login_send_mail.pl"):
|
||
os.remove("/www/server/panel/data/login_send_mail.pl")
|
||
return public.return_msg_gettext(True, 'Setup successfully!')
|
||
elif type == 'dingding':
|
||
if os.path.exists("/www/server/panel/data/login_send_dingding.pl"):
|
||
os.remove("/www/server/panel/data/login_send_dingding.pl")
|
||
return public.return_msg_gettext(True, 'Setup successfully!')
|
||
else:
|
||
return public.return_msg_gettext(False, 'The send type is not supported')
|
||
|
||
#告警日志
|
||
def get_login_log(self,get):
|
||
public.create_logs()
|
||
import page
|
||
page = page.Page()
|
||
count = public.M('logs2').where('type=?', (u'aapanel login reminder',)).field('log,addtime').count()
|
||
limit = 7
|
||
info = {}
|
||
info['count'] = count
|
||
info['row'] = limit
|
||
info['p'] = 1
|
||
if hasattr(get, 'p'):
|
||
info['p'] = int(get['p'])
|
||
info['uri'] = get
|
||
info['return_js'] = ''
|
||
if hasattr(get, 'tojs'):
|
||
info['return_js'] = get.tojs
|
||
data = {}
|
||
# 获取分页数据
|
||
data['page'] = page.GetPage(info, '1,2,3,4,5,8')
|
||
data['data'] = public.M('logs2').where('type=?', (u'aapanel login reminder',)).field('log,addtime').order('id desc').limit(
|
||
str(page.SHIFT) + ',' + str(page.ROW)).field('log,addtime').select()
|
||
return data
|
||
|
||
#白名单设置
|
||
def login_ipwhite(self,get):
|
||
type=get.type
|
||
if type=='get':
|
||
return self.get_login_ipwhite(get)
|
||
if type=='add':
|
||
return self.add_login_ipwhite(get)
|
||
if type=='del':
|
||
return self.del_login_ipwhite(get)
|
||
if type=='clear':
|
||
return self.clear_login_ipwhite(get)
|
||
|
||
#查看IP白名单
|
||
def get_login_ipwhite(self,get):
|
||
try:
|
||
path='/www/server/panel/data/send_login_white.json'
|
||
ip_white=json.loads(public.ReadFile('/www/server/panel/data/send_login_white.json'))
|
||
if not ip_white:return public.return_msg_gettext(True, [])
|
||
return public.return_msg_gettext(True, ip_white)
|
||
except:
|
||
public.WriteFile(path, '[]')
|
||
return public.return_msg_gettext(True, [])
|
||
|
||
def add_login_ipwhite(self,get):
|
||
ip=get.ip.strip()
|
||
try:
|
||
path = '/www/server/panel/data/send_login_white.json'
|
||
ip_white = json.loads(public.ReadFile('/www/server/panel/data/send_login_white.json'))
|
||
if not ip in ip_white:
|
||
ip_white.append(ip)
|
||
public.WriteFile(path, json.dumps(ip_white))
|
||
return public.return_msg_gettext(True, "Setup successfully!")
|
||
except:
|
||
public.WriteFile(path, json.dumps([ip]))
|
||
return public.return_msg_gettext(True, "Setup successfully!")
|
||
|
||
def del_login_ipwhite(self,get):
|
||
ip = get.ip.strip()
|
||
try:
|
||
path = '/www/server/panel/data/send_login_white.json'
|
||
ip_white = json.loads(public.ReadFile('/www/server/panel/data/send_login_white.json'))
|
||
if ip in ip_white:
|
||
ip_white.remove(ip)
|
||
public.WriteFile(path, json.dumps(ip_white))
|
||
return public.return_msg_gettext(True, "Successfully deleted!")
|
||
except:
|
||
public.WriteFile(path, json.dumps([]))
|
||
return public.return_msg_gettext(True, "Successfully deleted!")
|
||
|
||
def clear_login_ipwhite(self,get):
|
||
path = '/www/server/panel/data/send_login_white.json'
|
||
public.WriteFile(path, json.dumps([]))
|
||
return public.return_msg_gettext(True, "Successfully created")
|
||
|
||
|
||
def get_panel_ssl_status(self,get):
|
||
import os
|
||
if os.path.exists(self._setup_path+'/data/ssl.pl'):
|
||
return public.return_msg_gettext(True,'success')
|
||
return public.return_msg_gettext(False,'false')
|
||
|
||
def set_backup_notification(self,get):
|
||
import os
|
||
f = self._setup_path+'/data/send_back_error.pl'
|
||
if os.path.exists(f):
|
||
public.ExecShell('rm -f {}'.format(f))
|
||
return public.return_msg_gettext(True,'Disable successfully')
|
||
public.writeFile(f,'1')
|
||
return public.return_msg_gettext(True,'Enable Successfully')
|
||
|
||
def get_backup_notification(self,get):
|
||
import os
|
||
if os.path.exists(self._setup_path+'/data/send_back_error.pl'):
|
||
return public.returnMsg(True,'success')
|
||
return public.returnMsg(False,'false')
|
||
|
||
def set_not_auth_status(self,get):
|
||
'''
|
||
@name 设置未认证时的响应状态
|
||
@author hwliang<2021-12-16>
|
||
@param status_code<int> 状态码
|
||
@return dict
|
||
'''
|
||
if not 'status_code' in get:
|
||
return public.return_msg_gettext(False,'Parameter ERROR!')
|
||
|
||
if re.match("^\d+$", get.status_code):
|
||
status_code = int(get.status_code)
|
||
if status_code != 0:
|
||
if status_code < 100 or status_code > 999:
|
||
return public.return_msg_gettext(False,'Parameter ERROR!')
|
||
else:
|
||
return public.return_msg_gettext(False,'Parameter ERROR!')
|
||
|
||
public.save_config('abort',get.status_code)
|
||
public.write_log_gettext('Panel configuration','Set the unauthorized response status to:{}'.format(get.status_code))
|
||
return public.return_msg_gettext(True,'Setup successfully!')
|
||
|
||
def get_not_auth_status(self):
|
||
'''
|
||
@name 获取未认证时的响应状态
|
||
@author hwliang<2021-12-16>
|
||
@return int
|
||
'''
|
||
try:
|
||
status_code = int(public.read_config('abort'))
|
||
return status_code
|
||
except:
|
||
return 404 |