Initial

2024-03-19 22:05:27 +03:00
commit 346a50856b
1572 changed files with 182163 additions and 0 deletions
--- a/web/add/key/index.php
+++ b/web/add/key/index.php
@@ -0,0 +1,83 @@
+<?php
+use function Hestiacp\quoteshellarg\quoteshellarg;
+
+ob_start();
+$TAB = "USER";
+
+// Main include
+include $_SERVER["DOCUMENT_ROOT"] . "/inc/main.php";
+
+// Check POST request
+if (!empty($_POST["ok"])) {
+	// Check token
+	verify_csrf($_POST);
+
+	// Check empty fields
+	if (empty($_POST["v_key"])) {
+		$errors[] = _("SSH Key");
+	}
+	if (!empty($errors[0])) {
+		foreach ($errors as $i => $error) {
+			if ($i == 0) {
+				$error_msg = $error;
+			} else {
+				$error_msg = $error_msg . ", " . $error;
+			}
+		}
+		$_SESSION["error_msg"] = sprintf(_('Field "%s" can not be blank.'), $error_msg);
+	}
+
+	if ($_SESSION["userContext"] === "admin" && !empty($_GET["user"])) {
+		$user = quoteshellarg($_GET["user"]);
+	}
+
+	if (empty($_SESSION["error_msg"])) {
+		if ($_POST) {
+			//key if key already exists
+			exec(HESTIA_CMD . "v-list-user-ssh-key " . $user . " json", $output, $return_var);
+			$data = json_decode(implode("", $output), true);
+			unset($output);
+			$keylist = [];
+			$idlist = [];
+			foreach ($data as $key => $value) {
+				$idlist[] = trim($data[$key]["ID"]);
+				$keylist[] = trim($data[$key]["KEY"]);
+			}
+
+			$v_key_parts = explode(" ", $_POST["v_key"]);
+			$key_id = trim($v_key_parts[2]);
+			if ($v_key_parts[2] == "") {
+				$v_key_parts[2] = md5(time());
+				$_POST["v_key"] .= " " . $v_key_parts[2];
+			}
+
+			//for deleting / revoking key the last part user@domain is used therefore needs to be unique
+			//maybe consider adding random generated message or even an human read able string set by user?
+			if (in_array($v_key_parts[2], $idlist)) {
+				$_SESSION["error_msg"] = _("SSH Key already exists.");
+			}
+			if (in_array($v_key_parts[1], $keylist)) {
+				$_SESSION["error_msg"] = _("SSH Key already exists.");
+			}
+			$v_key = quoteshellarg(trim($_POST["v_key"]));
+		}
+	}
+
+	if (empty($_SESSION["error_msg"])) {
+		exec(HESTIA_CMD . "v-add-user-ssh-key " . $user . " " . $v_key, $output, $return_var);
+		check_return_code($return_var, $output);
+	}
+	unset($output);
+	// Flush field values on success
+	if (empty($_SESSION["error_msg"])) {
+		$_SESSION["ok_msg"] = _("SSH Key has been created successfully.");
+	}
+}
+if (empty($v_key)) {
+	$v_key = "";
+}
+render_page($user, $TAB, "add_key");
+
+// Flush session messages
+unset($_SESSION["error_msg"]);
+unset($_SESSION["ok_msg"]);