index.php

<?php
error_reporting(NULL);
ob_start();
$TAB = 'PACKAGE';

// Main include
include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");

// Check user
if ($_SESSION['userContext'] != 'admin')  {
    header("Location: /list/user");
    exit;
}

// Check POST request
if (!empty($_POST['ok'])) {

    // Check token
    if ((!isset($_POST['token'])) || ($_SESSION['token'] != $_POST['token'])) {
        header('location: /login/');
        exit();
    }

    // Check empty fields
    if (empty($_POST['v_package'])) $errors[] = _('package');
    if (empty($_POST['v_web_template'])) $errors[] = _('web template');
    if (!empty($_SESSION['WEB_BACKEND'])) {
        if (empty($_POST['v_backend_template'])) $errors[] = _('backend template');
    }
    if (!empty($_SESSION['PROXY_SYSTEM'])) {
        if (empty($_POST['v_proxy_template'])) $errors[] = _('proxy template');
    }
    if (empty($_POST['v_dns_template'])) $errors[] = _('dns template');
    if (empty($_POST['v_shell'])) $errrors[] = _('shell');
    if (!isset($_POST['v_web_domains'])) $errors[] = _('web domains');
    if (!isset($_POST['v_web_aliases'])) $errors[] = _('web aliases');
    if (!isset($_POST['v_dns_domains'])) $errors[] = _('dns domains');
    if (!isset($_POST['v_dns_records'])) $errors[] = _('dns records');
    if (!isset($_POST['v_mail_domains'])) $errors[] = _('mail domains');
    if (!isset($_POST['v_mail_accounts'])) $errors[] = _('mail accounts');
    if (!isset($_POST['v_databases'])) $errors[] = _('databases');
    if (!isset($_POST['v_cron_jobs'])) $errors[] = _('cron jobs');
    if (!isset($_POST['v_backups'])) $errors[] = _('backups');
    if (!isset($_POST['v_disk_quota'])) $errors[] = _('quota');
    if (!isset($_POST['v_bandwidth'])) $errors[] = _('bandwidth');
    
    // Check if name server entries are blank if DNS server is installed
    if ((isset($_SESSION['DNS_SYSTEM'])) && (!empty($_SESSION['DNS_SYSTEM']))) {
        if (empty($_POST['v_ns1'])) $errors[] = _('ns1');
        if (empty($_POST['v_ns2'])) $errors[] = _('ns2');
    }
    if (!empty($errors[0])) {
        foreach ($errors as $i => $error) {
            if ( $i == 0 ) {
                $error_msg = $error;
            } else {
                $error_msg = $error_msg.", ".$error;
            }
        }
        $_SESSION['error_msg'] = sprintf(_('Field "%s" can not be blank.'),$error_msg);
    }

    // Protect input
    $v_package = escapeshellarg($_POST['v_package']);
    $v_web_template = escapeshellarg($_POST['v_web_template']);
    $v_backend_template = escapeshellarg($_POST['v_backend_template']);
    $v_proxy_template = escapeshellarg($_POST['v_proxy_template']);
    $v_dns_template = escapeshellarg($_POST['v_dns_template']);
    $v_shell = escapeshellarg($_POST['v_shell']);
    $v_web_domains = escapeshellarg($_POST['v_web_domains']);
    $v_web_aliases = escapeshellarg($_POST['v_web_aliases']);
    $v_dns_domains = escapeshellarg($_POST['v_dns_domains']);
    $v_dns_records = escapeshellarg($_POST['v_dns_records']);
    $v_mail_domains = escapeshellarg($_POST['v_mail_domains']);
    $v_mail_accounts = escapeshellarg($_POST['v_mail_accounts']);
    $v_databases = escapeshellarg($_POST['v_databases']);
    $v_cron_jobs = escapeshellarg($_POST['v_cron_jobs']);
    $v_backups = escapeshellarg($_POST['v_backups']);
    $v_disk_quota = escapeshellarg($_POST['v_disk_quota']);
    $v_bandwidth = escapeshellarg($_POST['v_bandwidth']);
    $v_ns1 = trim($_POST['v_ns1'], '.');
    $v_ns2 = trim($_POST['v_ns2'], '.');
    $v_ns3 = trim($_POST['v_ns3'], '.');
    $v_ns4 = trim($_POST['v_ns4'], '.');
    $v_ns5 = trim($_POST['v_ns5'], '.');
    $v_ns6 = trim($_POST['v_ns6'], '.');
    $v_ns7 = trim($_POST['v_ns7'], '.');
    $v_ns8 = trim($_POST['v_ns8'], '.');
    $v_ns = $v_ns1.",".$v_ns2;
    if (!empty($v_ns3)) $v_ns .= ",".$v_ns3;
    if (!empty($v_ns4)) $v_ns .= ",".$v_ns4;
    if (!empty($v_ns5)) $v_ns .= ",".$v_ns5;
    if (!empty($v_ns6)) $v_ns .= ",".$v_ns6;
    if (!empty($v_ns7)) $v_ns .= ",".$v_ns7;
    if (!empty($v_ns8)) $v_ns .= ",".$v_ns8;
    $v_ns = escapeshellarg($v_ns);
    $v_time = escapeshellarg(date('H:i:s'));
    $v_date = escapeshellarg(date('Y-m-d'));

    // Create temporary dir
    if (empty($_SESSION['error_msg'])) {
        exec ('mktemp -d', $output, $return_var);
        $tmpdir = $output[0];
        check_return_code($return_var,$output);
        unset($output);
    }

    // Create package file
    if (empty($_SESSION['error_msg'])) {
        $pkg = "WEB_TEMPLATE=".$v_web_template."\n";
        if (!empty($_SESSION['WEB_BACKEND'])) {
            $pkg .= "BACKEND_TEMPLATE=".$v_backend_template."\n";
        }
        if (!empty($_SESSION['PROXY_SYSTEM'])) {
            $pkg .= "PROXY_TEMPLATE=".$v_proxy_template."\n";
        }
        $pkg .= "DNS_TEMPLATE=".$v_dns_template."\n";
        $pkg .= "WEB_DOMAINS=".$v_web_domains."\n";
        $pkg .= "WEB_ALIASES=".$v_web_aliases."\n";
        $pkg .= "DNS_DOMAINS=".$v_dns_domains."\n";
        $pkg .= "DNS_RECORDS=".$v_dns_records."\n";
        $pkg .= "MAIL_DOMAINS=".$v_mail_domains."\n";
        $pkg .= "MAIL_ACCOUNTS=".$v_mail_accounts."\n";
        $pkg .= "DATABASES=".$v_databases."\n";
        $pkg .= "CRON_JOBS=".$v_cron_jobs."\n";
        $pkg .= "DISK_QUOTA=".$v_disk_quota."\n";
        $pkg .= "BANDWIDTH=".$v_bandwidth."\n";
        $pkg .= "NS=".$v_ns."\n";
        $pkg .= "SHELL=".$v_shell."\n";
        $pkg .= "BACKUPS=".$v_backups."\n";
        $pkg .= "TIME=".$v_time."\n";
        $pkg .= "DATE=".$v_date."\n";

        $fp = fopen($tmpdir."/".$_POST['v_package'].".pkg", 'w');
        fwrite($fp, $pkg);
        fclose($fp);
    }

    // Add new package
    if (empty($_SESSION['error_msg'])) {
        exec (HESTIA_CMD."v-add-user-package ".$tmpdir." ".$v_package, $output, $return_var);
        check_return_code($return_var,$output);
        unset($output);
    }

    // Remove tmpdir
    exec ('rm -rf '.$tmpdir, $output, $return_var);
    unset($output);

    // Flush field values on success
    if (empty($_SESSION['error_msg'])) {
        $_SESSION['ok_msg'] = sprintf(_('PACKAGE_CREATED_OK'),htmlentities($_POST['v_package']),htmlentities($_POST['v_package']));
        unset($v_package);
    }

}


// List web temmplates
exec (HESTIA_CMD."v-list-web-templates json", $output, $return_var);
$web_templates = json_decode(implode('', $output), true);
unset($output);

// List web templates for backend
if (!empty($_SESSION['WEB_BACKEND'])) {
    exec (HESTIA_CMD."v-list-web-templates-backend json", $output, $return_var);
    $backend_templates = json_decode(implode('', $output), true);
    unset($output);
}

// List web templates for proxy
if (!empty($_SESSION['PROXY_SYSTEM'])) {
    exec (HESTIA_CMD."v-list-web-templates-proxy json", $output, $return_var);
    $proxy_templates = json_decode(implode('', $output), true);
    unset($output);
}

// List DNS templates
exec (HESTIA_CMD."v-list-dns-templates json", $output, $return_var);
$dns_templates = json_decode(implode('', $output), true);
unset($output);

// List system shells
exec (HESTIA_CMD."v-list-sys-shells json", $output, $return_var);
$shells = json_decode(implode('', $output), true);
unset($output);

// Set default values
if (empty($v_web_template)) $v_web_template = 'default';
if (empty($v_backend_template)) $v_backend_template = 'default';
if (empty($v_proxy_template)) $v_proxy_template = 'default';
if (empty($v_dns_template)) $v_dns_template = 'default';
if (empty($v_shell)) $v_shell = 'nologin';
if (empty($v_web_domains)) $v_web_domains = "'1'";
if (empty($v_web_aliases)) $v_web_aliases = "'1'";
if (empty($v_dns_domains)) $v_dns_domains = "'1'";
if (empty($v_dns_records)) $v_dns_records = "'1'";
if (empty($v_mail_domains)) $v_mail_domains = "'1'";
if (empty($v_mail_accounts)) $v_mail_accounts = "'1'";
if (empty($v_databases)) $v_databases = "'1'";
if (empty($v_cron_jobs)) $v_cron_jobs = "'1'";
if (empty($v_backups)) $v_backups = "'1'";
if (empty($v_disk_quota)) $v_disk_quota = "'1000'";
if (empty($v_bandwidth)) $v_bandwidth = "'1000'";
if (empty($v_ns1)) $v_ns1 = 'ns1.example.ltd';
if (empty($v_ns2)) $v_ns2 = 'ns2.example.ltd';

// Render page
render_page($user, $TAB, 'add_package');

// Flush session messages
unset($_SESSION['error_msg']);
unset($_SESSION['ok_msg']);