Initial

web/edit/firewall/index.php

@@ -0,0 +1,153 @@
+<?php
+use function Hestiacp\quoteshellarg\quoteshellarg;
+
+ob_start();
+$TAB = "FIREWALL";
+
+// Main include
+include $_SERVER["DOCUMENT_ROOT"] . "/inc/main.php";
+
+// Check user
+if ($_SESSION["userContext"] != "admin") {
+	header("Location: /list/user");
+	exit();
+}
+
+// Check ip argument
+if (empty($_GET["rule"])) {
+	header("Location: /list/firewall/");
+	exit();
+}
+
+// List rule
+$v_rule = quoteshellarg($_GET["rule"]);
+exec(HESTIA_CMD . "v-list-firewall-rule " . $v_rule . " 'json'", $output, $return_var);
+check_return_code_redirect($return_var, $output, "/list/firewall");
+$data = json_decode(implode("", $output), true);
+unset($output);
+
+// Parse rule
+$v_rule = $_GET["rule"];
+$v_action = $data[$v_rule]["ACTION"];
+$v_protocol = $data[$v_rule]["PROTOCOL"];
+$v_port = $data[$v_rule]["PORT"];
+$v_ip = $data[$v_rule]["IP"];
+$v_comment = $data[$v_rule]["COMMENT"];
+$v_date = $data[$v_rule]["DATE"];
+$v_time = $data[$v_rule]["TIME"];
+$v_suspended = $data[$v_rule]["SUSPENDED"];
+if ($v_suspended == "yes") {
+	$v_status = "suspended";
+} else {
+	$v_status = "active";
+}
+
+// Get ipset lists
+exec(HESTIA_CMD . "v-list-firewall-ipset 'json'", $output, $return_var);
+check_return_code($return_var, $output);
+$data = json_decode(implode("", $output), true);
+unset($output);
+
+$ipset_lists = [];
+foreach ($data as $key => $value) {
+	if (isset($value["SUSPENDED"]) && $value["SUSPENDED"] === "yes") {
+		continue;
+	}
+	if (isset($value["IP_VERSION"]) && $value["IP_VERSION"] !== "v4") {
+		continue;
+	}
+	array_push($ipset_lists, ["name" => $key]);
+}
+$ipset_lists_json = json_encode($ipset_lists);
+
+// Check POST request
+if (!empty($_POST["save"])) {
+	// Check token
+	verify_csrf($_POST);
+
+	// Check empty fields
+	if (empty($_POST["v_action"])) {
+		$errors[] = _("Action");
+	}
+	if (empty($_POST["v_protocol"])) {
+		$errors[] = _("Protocol");
+	}
+	if (empty($_POST["v_port"]) && strlen($_POST["v_port"]) == 0) {
+		$errors[] = _("Port");
+	}
+	if (empty($_POST["v_ip"])) {
+		$errors[] = _("IP Address");
+	}
+	if (!empty($errors[0])) {
+		foreach ($errors as $i => $error) {
+			if ($i == 0) {
+				$error_msg = $error;
+			} else {
+				$error_msg = $error_msg . ", " . $error;
+			}
+		}
+		$_SESSION["error_msg"] = sprintf(_('Field "%s" can not be blank.'), $error_msg);
+	}
+	if (empty($_SESSION["error_msg"])) {
+		$v_rule = quoteshellarg($_GET["rule"]);
+		$v_action = quoteshellarg($_POST["v_action"]);
+		$v_protocol = quoteshellarg($_POST["v_protocol"]);
+		$v_port = str_replace(" ", ",", $_POST["v_port"]);
+		$v_port = preg_replace("/\,+/", ",", $v_port);
+		$v_port = trim($v_port, ",");
+		$v_port = quoteshellarg($v_port);
+		$v_ip = quoteshellarg($_POST["v_ip"]);
+		$v_comment = quoteshellarg($_POST["v_comment"]);
+
+		// Change Status
+		exec(
+			HESTIA_CMD .
+				"v-change-firewall-rule " .
+				$v_rule .
+				" " .
+				$v_action .
+				" " .
+				$v_ip .
+				" " .
+				$v_port .
+				" " .
+				$v_protocol .
+				" " .
+				$v_comment,
+			$output,
+			$return_var,
+		);
+		check_return_code($return_var, $output);
+		unset($output);
+
+		$v_rule = $_GET["v_rule"];
+		$v_action = $_POST["v_action"];
+		$v_protocol = $_POST["v_protocol"];
+		$v_port = str_replace(" ", ",", $_POST["v_port"]);
+		$v_port = preg_replace("/\,+/", ",", $v_port);
+		$v_port = trim($v_port, ",");
+		$v_ip = $_POST["v_ip"];
+		$v_comment = $_POST["v_comment"];
+
+		// Set success message
+		if (empty($_SESSION["error_msg"])) {
+			$_SESSION["ok_msg"] = _("Changes have been saved.");
+		}
+	} else {
+		$v_rule = $_GET["v_rule"];
+		$v_action = $_POST["v_action"];
+		$v_protocol = $_POST["v_protocol"];
+		$v_port = str_replace(" ", ",", $_POST["v_port"]);
+		$v_port = preg_replace("/\,+/", ",", $v_port);
+		$v_port = trim($v_port, ",");
+		$v_ip = $_POST["v_ip"];
+		$v_comment = $_POST["v_comment"];
+	}
+}
+
+// Render page
+render_page($user, $TAB, "edit_firewall");
+
+// Flush session messages
+unset($_SESSION["error_msg"]);
+unset($_SESSION["ok_msg"]);