<?php session_start(); define('VESTA_CMD', '/usr/bin/sudo /usr/local/vesta/bin/'); define('JS_LATEST_UPDATE', '1491697868'); $i = 0; require_once(dirname(__FILE__).'/i18n.php'); // Saving user IPs to the session for preventing session hijacking $user_combined_ip = $_SERVER['REMOTE_ADDR']; if(isset($_SERVER['HTTP_CLIENT_IP'])){ $user_combined_ip .= '|'. $_SERVER['HTTP_CLIENT_IP']; } if(isset($_SERVER['HTTP_X_FORWARDED_FOR'])){ $user_combined_ip .= '|'. $_SERVER['HTTP_X_FORWARDED_FOR']; } if(isset($_SERVER['HTTP_FORWARDED_FOR'])){ $user_combined_ip .= '|'. $_SERVER['HTTP_FORWARDED_FOR']; } if(isset($_SERVER['HTTP_X_FORWARDED'])){ $user_combined_ip .= '|'. $_SERVER['HTTP_X_FORWARDED']; } if(isset($_SERVER['HTTP_FORWARDED'])){ $user_combined_ip .= '|'. $_SERVER['HTTP_FORWARDED']; } if(!isset($_SESSION['user_combined_ip'])){ $_SESSION['user_combined_ip'] = $user_combined_ip; } // Checking user to use session from the same IP he has been logged in if($_SESSION['user_combined_ip'] != $user_combined_ip){ session_destroy(); session_start(); $_SESSION['request_uri'] = $_SERVER['REQUEST_URI']; header("Location: /login/"); exit; } // Check system settings if ((!isset($_SESSION['VERSION'])) && (!defined('NO_AUTH_REQUIRED'))) { session_destroy(); session_start(); $_SESSION['request_uri'] = $_SERVER['REQUEST_URI']; header("Location: /login/"); exit; } // Check user session if ((!isset($_SESSION['user'])) && (!defined('NO_AUTH_REQUIRED'))) { $_SESSION['request_uri'] = $_SERVER['REQUEST_URI']; header("Location: /login/"); exit; } if (isset($_SESSION['user'])) { if(!isset($_SESSION['token'])){ $token = uniqid(mt_rand(), true); $_SESSION['token'] = $token; } } if (isset($_SESSION['language'])) { switch ($_SESSION['language']) { case 'ro': setlocale(LC_ALL, 'ro_RO.utf8'); break; case 'ru': setlocale(LC_ALL, 'ru_RU.utf8'); break; case 'ua': setlocale(LC_ALL, 'uk_UA.utf8'); break; case 'es': setlocale(LC_ALL, 'es_ES.utf8'); break; case 'ja': setlocale(LC_ALL, 'ja_JP.utf8'); break; default: setlocale(LC_ALL, 'en_US.utf8'); } } if (isset($_SESSION['user'])) { $user = $_SESSION['user']; } if (isset($_SESSION['look']) && ( $_SESSION['look'] != 'admin' )) { $user = $_SESSION['look']; } function get_favourites(){ exec (VESTA_CMD."v-list-user-favourites ".$_SESSION['user']." json", $output, $return_var); // $data = json_decode(implode('', $output).'}', true); $data = json_decode(implode('', $output), true); $data = array_reverse($data,true); $favourites = array(); foreach($data['Favourites'] as $key => $favourite){ $favourites[$key] = array(); $items = explode(',', $favourite); foreach($items as $item){ if($item) $favourites[$key][trim($item)] = 1; } } $_SESSION['favourites'] = $favourites; } function check_error($return_var) { if ( $return_var > 0 ) { header("Location: /error/"); exit; } } function check_return_code($return_var,$output) { if ($return_var != 0) { $error = implode('<br>', $output); if (empty($error)) $error = __('Error code:',$return_var); $_SESSION['error_msg'] = $error; } } function render_page($user, $TAB, $page) { $__template_dir = dirname(__DIR__) . '/templates/'; $__pages_js_dir = dirname(__DIR__) . '/js/pages/'; // Header include($__template_dir . 'header.html'); // Panel top_panel(empty($_SESSION['look']) ? $_SESSION['user'] : $_SESSION['look'], $TAB); // Extarct global variables // I think those variables should be passed via arguments //* extract($GLOBALS, EXTR_SKIP); /*/ $variables = array_filter($GLOBALS, function($key){return preg_match('/^(v_|[a-z])[a-z\d]+$/', $key);}, ARRAY_FILTER_USE_KEY); extract($variables, EXTR_OVERWRITE); //*/ // Body if (($_SESSION['user'] !== 'admin') && (@include($__template_dir . "user/$page.html"))) { // User page loaded } else { // Not admin or user page doesn't exist // Load admin page @include($__template_dir . "admin/$page.html"); } // Including common js files @include_once(dirname(__DIR__) . '/templates/scripts.html'); // Including page specific js file if(file_exists($__pages_js_dir.$page.'.js')) echo '<script type="text/javascript" src="/js/pages/'.$page.'.js?'.JS_LATEST_UPDATE.'"></script>'; // Footer include($__template_dir . 'footer.html'); } function top_panel($user, $TAB) { global $panel; $command = VESTA_CMD."v-list-user '".$user."' 'json'"; exec ($command, $output, $return_var); if ( $return_var > 0 ) { header("Location: /error/"); exit; } $panel = json_decode(implode('', $output), true); unset($output); // getting notifications $command = VESTA_CMD."v-list-user-notifications '".$user."' 'json'"; exec ($command, $output, $return_var); $notifications = json_decode(implode('', $output), true); foreach($notifications as $message){ if($message['ACK'] == 'no'){ $panel[$user]['NOTIFICATIONS'] = 'yes'; break; } } unset($output); if ( $user == 'admin' ) { include(dirname(__FILE__).'/../templates/admin/panel.html'); } else { include(dirname(__FILE__).'/../templates/user/panel.html'); } } function translate_date($date){ $date = strtotime($date); return strftime("%d ", $date).__(strftime("%b", $date)).strftime(" %Y", $date); } function humanize_time($usage) { if ( $usage > 60 ) { $usage = $usage / 60; if ( $usage > 24 ) { $usage = $usage / 24; $usage = number_format($usage); if ( $usage == 1 ) { $usage = $usage." ".__('day'); } else { $usage = $usage." ".__('days'); } } else { $usage = number_format($usage); if ( $usage == 1 ) { $usage = $usage." ".__('hour'); } else { $usage = $usage." ".__('hours'); } } } else { if ( $usage == 1 ) { $usage = $usage." ".__('minute'); } else { $usage = $usage." ".__('minutes'); } } return $usage; } function humanize_usage_size($usage) { if ( $usage > 1024 ) { $usage = $usage / 1024; if ( $usage > 1024 ) { $usage = $usage / 1024 ; if ( $usage > 1024 ) { $usage = $usage / 1024 ; $usage = number_format($usage, 2); } else { $usage = number_format($usage, 2); } } else { $usage = number_format($usage, 2); } } return $usage; } function humanize_usage_measure($usage) { $measure = 'kb'; if ( $usage > 1024 ) { $usage = $usage / 1024; if ( $usage > 1024 ) { $usage = $usage / 1024 ; if ( $usage > 1024 ) { $measure = 'pb'; } else { $measure = 'tb'; } } else { $measure = 'gb'; } } else { $measure = 'mb'; } return __($measure); } function get_percentage($used,$total) { if (!isset($total)) $total = 0; if (!isset($used)) $used = 0; if ( $total == 0 ) { $percent = 0; } else { $percent = $used / $total; $percent = $percent * 100; $percent = number_format($percent, 0, '', ''); if ( $percent > 100 ) { $percent = 100; } if ( $percent < 0 ) { $percent = 0; } } return $percent; } function send_email($to,$subject,$mailtext,$from) { $charset = "utf-8"; $to = '<'.$to.'>'; $boundary = '--' . md5( uniqid("myboundary") ); $priorities = array( '1 (Highest)', '2 (High)', '3 (Normal)', '4 (Low)', '5 (Lowest)' ); $priority = $priorities[2]; $ctencoding = "8bit"; $sep = chr(13) . chr(10); $disposition = "inline"; $subject = "=?$charset?B?".base64_encode($subject)."?="; $header = "From: $from \nX-Priority: $priority\nCC:\n"; $header .= "Mime-Version: 1.0\nContent-Type: text/plain; charset=$charset \n"; $header .= "Content-Transfer-Encoding: $ctencoding\nX-Mailer: Php/libMailv1.3\n"; $message = $mailtext; mail($to, $subject, $message, $header); } function list_timezones() { $tz = new DateTimeZone('HAST'); $timezone_offsets['HAST'] = $tz->getOffset(new DateTime); $tz = new DateTimeZone('HADT'); $timezone_offsets['HADT'] = $tz->getOffset(new DateTime); $tz = new DateTimeZone('AKST'); $timezone_offsets['AKST'] = $tz->getOffset(new DateTime); $tz = new DateTimeZone('AKDT'); $timezone_offsets['AKDT'] = $tz->getOffset(new DateTime); $tz = new DateTimeZone('PST'); $timezone_offsets['PST'] = $tz->getOffset(new DateTime); $tz = new DateTimeZone('PDT'); $timezone_offsets['PDT'] = $tz->getOffset(new DateTime); $tz = new DateTimeZone('MST'); $timezone_offsets['MST'] = $tz->getOffset(new DateTime); $tz = new DateTimeZone('MDT'); $timezone_offsets['MDT'] = $tz->getOffset(new DateTime); $tz = new DateTimeZone('CST'); $timezone_offsets['CST'] = $tz->getOffset(new DateTime); $tz = new DateTimeZone('CDT'); $timezone_offsets['CDT'] = $tz->getOffset(new DateTime); $tz = new DateTimeZone('EST'); $timezone_offsets['EST'] = $tz->getOffset(new DateTime); $tz = new DateTimeZone('EDT'); $timezone_offsets['EDT'] = $tz->getOffset(new DateTime); $tz = new DateTimeZone('AST'); $timezone_offsets['AST'] = $tz->getOffset(new DateTime); $tz = new DateTimeZone('ADT'); $timezone_offsets['ADT'] = $tz->getOffset(new DateTime); foreach(DateTimeZone::listIdentifiers() as $timezone){ $tz = new DateTimeZone($timezone); $timezone_offsets[$timezone] = $tz->getOffset(new DateTime); } foreach($timezone_offsets as $timezone => $offset){ $offset_prefix = $offset < 0 ? '-' : '+'; $offset_formatted = gmdate( 'H:i', abs($offset) ); $pretty_offset = "UTC${offset_prefix}${offset_formatted}"; $t = new DateTimeZone($timezone); $c = new DateTime(null, $t); $current_time = $c->format('H:i:s'); $timezone_list[$timezone] = "$timezone [ $current_time ] ${pretty_offset}"; } return $timezone_list; } /** * A function that tells is it MySQL installed on the system, or it is MariaDB. * * Explaination: * $_SESSION['DB_SYSTEM'] has 'mysql' value even if MariaDB is installed, so you can't figure out is it really MySQL or it's MariaDB. * So, this function will make it clear. * * If MySQL is installed, function will return 'mysql' as a string. * If MariaDB is installed, function will return 'mariadb' as a string. * * Hint: if you want to check if PostgreSQL is installed - check value of $_SESSION['DB_SYSTEM'] * * @return string */ function is_it_mysql_or_mariadb() { exec (VESTA_CMD."v-list-sys-services json", $output, $return_var); $data = json_decode(implode('', $output), true); unset($output); $mysqltype='mysql'; if (isset($data['mariadb'])) $mysqltype='mariadb'; return $mysqltype; }