Fixes for /edit/server/ (hestiacp#2300)

* hestiacp#2296 - Fix API allowed IPs being reset on save
* Fix missing option for debug mode on release builds/flag reset on saving
* Hide DNS, Mail, and Database sections if not installed

Author: Kristan Kenney

web/edit/server/index.php

@@ -1113,11 +1113,29 @@
         }
     }
 
+    // Change API access
+    if (empty($_SESSION['error_msg'])) {
+        if ($_POST['v_api'] != $_SESSION['API']) {
+            $api_status = 'disable';
+            if ($_POST['v_api'] == 'yes') {
+                $api_status = 'enable';
+            }
+            exec(HESTIA_CMD."v-change-sys-api ".escapeshellarg($api_status), $output, $return_var);
+            check_return_code($return_var, $output);
+            unset($output);
+            if (empty($_SESSION['error_msg'])) {
+                $v_api = $_POST['v_api'];
+            }
+            $v_security_adv = 'yes';
+        }
+    }
+
+    // Change API allowed IPs
     if (empty($_SESSION['error_msg'])) {
         if ($_POST['v_api_allowed_ip'] != $_SESSION['API_ALLOWED_IP']) {
             $ips = array();
             foreach (explode("\n", $_POST['v_api_allowed_ip']) as $ip) {
-                if ($ip != "allow-all") {
+                if (trim($ip) != "allow-all") {
                     if (filter_var(trim($ip), FILTER_VALIDATE_IP)) {
                         $ips[] = trim($ip);
                     }
@@ -1130,29 +1148,13 @@
                 check_return_code($return_var, $output);
                 unset($output);
                 if (empty($_SESSION['error_msg'])) {
-                    $v_login_style = $_POST['v_api_allowed_ip'];
+                    $v_api_allowed_ip = $_POST['v_api_allowed_ip'];
                 }
                 $v_security_adv = 'yes';
             }
         }
     }
 
-    if (empty($_SESSION['error_msg'])) {
-        if ($_POST['v_api'] != $_SESSION['API']) {
-            $api_status = 'disable';
-            if ($_POST['v_api'] == 'yes') {
-                $api_status = 'enable';
-            }
-            exec(HESTIA_CMD."v-change-sys-api ".escapeshellarg($api_status), $output, $return_var);
-            check_return_code($return_var, $output);
-            unset($output);
-            if (empty($_SESSION['error_msg'])) {
-                $v_login_style = $_POST['v_api'];
-            }
-            $v_security_adv = 'yes';
-        }
-    }
-
     // Update SSL certificate
     if ((!empty($_POST['v_ssl_crt'])) && (empty($_SESSION['error_msg']))) {
         if (($v_ssl_crt != str_replace("\r\n", "\n", $_POST['v_ssl_crt'])) || ($v_ssl_key != str_replace("\r\n", "\n", $_POST['v_ssl_key']))) {