wcp/web/add/ip/index.php at main · ghzhost/wcp · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
<?php
use function Hestiacp\quoteshellarg\quoteshellarg;

ob_start();
$TAB = "IP";

// Main include
include $_SERVER["DOCUMENT_ROOT"] . "/inc/main.php";

// Check user
if ($_SESSION["userContext"] != "admin") {
	header("Location: /list/user");
	exit();
}

// Check POST request
if (!empty($_POST["ok"])) {
	/// Check token
	verify_csrf($_POST);

	// Check empty fields
	if (empty($_POST["v_ip"])) {
		$errors[] = _("IP Address");
	}
	if (empty($_POST["v_netmask"])) {
		$errors[] = _("Netmask");
	}
	if (empty($_POST["v_interface"])) {
		$errors[] = _("Interface");
	}
	if (empty($_POST["v_owner"])) {
		$errors[] = _("Assigned User");
	}
	if (!empty($errors[0])) {
		foreach ($errors as $i => $error) {
			if ($i == 0) {
				$error_msg = $error;
			} else {
				$error_msg = $error_msg . ", " . $error;
			}
		}
		$_SESSION["error_msg"] = sprintf(_('Field "%s" can not be blank.'), $error_msg);
	}

	// Protect input
	$v_ip = quoteshellarg($_POST["v_ip"]);
	$v_netmask = quoteshellarg($_POST["v_netmask"]);
	$v_name = quoteshellarg($_POST["v_name"]);
	$v_nat = quoteshellarg($_POST["v_nat"]);
	$v_interface = quoteshellarg($_POST["v_interface"]);
	$v_owner = quoteshellarg($_POST["v_owner"]);
	$v_shared = $_POST["v_shared"];

	// Check shared checkmark
	if ($v_shared == "on") {
		$ip_status = "shared";
	} else {
		$ip_status = "dedicated";
		$v_dedicated = "yes";
	}

	// Add IP
	if (empty($_SESSION["error_msg"])) {
		exec(
			HESTIA_CMD .
				"v-add-sys-ip " .
				$v_ip .
				" " .
				$v_netmask .
				" " .
				$v_interface .
				" " .
				$v_owner .
				" " .
				quoteshellarg($ip_status) .
				" " .
				$v_name .
				" " .
				$v_nat,
			$output,
			$return_var,
		);
		check_return_code($return_var, $output);
		unset($output);
		$v_owner = $_POST["v_owner"];
		$v_interface = $_POST["v_interface"];
	}

	// Flush field values on success
	if (empty($_SESSION["error_msg"])) {
		$_SESSION["ok_msg"] = htmlify_trans(
			sprintf(
				_("IP address {%s} has been created successfully."),
				htmlentities($_POST["v_ip"]),
			),
			"</a>",
			'<a href="/edit/ip/?ip=' . htmlentities($_POST["v_ip"]) . '">',
		);
		unset($v_ip);
		unset($v_netmask);
		unset($v_name);
		unset($v_nat);
	}
}

// List network interfaces
exec(HESTIA_CMD . "v-list-sys-interfaces 'json'", $output, $return_var);
$interfaces = json_decode(implode("", $output), true);
unset($output);

// List users
exec(HESTIA_CMD . "v-list-sys-users 'json'", $output, $return_var);
$users = json_decode(implode("", $output), true);
unset($output);

if (empty($v_ip)) {
	$v_ip = "";
}
if (empty($v_netmask)) {
	$v_netmask = "";
}
if (empty($v_name)) {
	$v_name = "";
}
if (empty($v_nat)) {
	$v_nat = "";
}
if (empty($v_interface)) {
	$v_interface = "";
}
if (empty($ip_status)) {
	$ip_status = "";
}
if (empty($v_owner)) {
	$v_owner = "";
}
// Render
render_page($user, $TAB, "add_ip");

// Flush session messages
unset($_SESSION["error_msg"]);
unset($_SESSION["ok_msg"]);