You can not select more than 25 topics
			Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
		
		
		
		
		
			
		
			
				
					
					
						
							84 lines
						
					
					
						
							2.2 KiB
						
					
					
				
			
		
		
	
	
							84 lines
						
					
					
						
							2.2 KiB
						
					
					
				<?php
 | 
						|
use function Hestiacp\quoteshellarg\quoteshellarg;
 | 
						|
 | 
						|
ob_start();
 | 
						|
$TAB = "USER";
 | 
						|
 | 
						|
// Main include
 | 
						|
include $_SERVER["DOCUMENT_ROOT"] . "/inc/main.php";
 | 
						|
 | 
						|
// Check POST request
 | 
						|
if (!empty($_POST["ok"])) {
 | 
						|
	// Check token
 | 
						|
	verify_csrf($_POST);
 | 
						|
 | 
						|
	// Check empty fields
 | 
						|
	if (empty($_POST["v_key"])) {
 | 
						|
		$errors[] = _("SSH Key");
 | 
						|
	}
 | 
						|
	if (!empty($errors[0])) {
 | 
						|
		foreach ($errors as $i => $error) {
 | 
						|
			if ($i == 0) {
 | 
						|
				$error_msg = $error;
 | 
						|
			} else {
 | 
						|
				$error_msg = $error_msg . ", " . $error;
 | 
						|
			}
 | 
						|
		}
 | 
						|
		$_SESSION["error_msg"] = sprintf(_('Field "%s" can not be blank.'), $error_msg);
 | 
						|
	}
 | 
						|
 | 
						|
	if ($_SESSION["userContext"] === "admin" && !empty($_GET["user"])) {
 | 
						|
		$user = quoteshellarg($_GET["user"]);
 | 
						|
	}
 | 
						|
 | 
						|
	if (empty($_SESSION["error_msg"])) {
 | 
						|
		if ($_POST) {
 | 
						|
			//key if key already exists
 | 
						|
			exec(HESTIA_CMD . "v-list-user-ssh-key " . $user . " json", $output, $return_var);
 | 
						|
			$data = json_decode(implode("", $output), true);
 | 
						|
			unset($output);
 | 
						|
			$keylist = [];
 | 
						|
			$idlist = [];
 | 
						|
			foreach ($data as $key => $value) {
 | 
						|
				$idlist[] = trim($data[$key]["ID"]);
 | 
						|
				$keylist[] = trim($data[$key]["KEY"]);
 | 
						|
			}
 | 
						|
 | 
						|
			$v_key_parts = explode(" ", $_POST["v_key"]);
 | 
						|
			$key_id = trim($v_key_parts[2]);
 | 
						|
			if ($v_key_parts[2] == "") {
 | 
						|
				$v_key_parts[2] = md5(time());
 | 
						|
				$_POST["v_key"] .= " " . $v_key_parts[2];
 | 
						|
			}
 | 
						|
 | 
						|
			//for deleting / revoking key the last part user@domain is used therefore needs to be unique
 | 
						|
			//maybe consider adding random generated message or even an human read able string set by user?
 | 
						|
			if (in_array($v_key_parts[2], $idlist)) {
 | 
						|
				$_SESSION["error_msg"] = _("SSH Key already exists.");
 | 
						|
			}
 | 
						|
			if (in_array($v_key_parts[1], $keylist)) {
 | 
						|
				$_SESSION["error_msg"] = _("SSH Key already exists.");
 | 
						|
			}
 | 
						|
			$v_key = quoteshellarg(trim($_POST["v_key"]));
 | 
						|
		}
 | 
						|
	}
 | 
						|
 | 
						|
	if (empty($_SESSION["error_msg"])) {
 | 
						|
		exec(HESTIA_CMD . "v-add-user-ssh-key " . $user . " " . $v_key, $output, $return_var);
 | 
						|
		check_return_code($return_var, $output);
 | 
						|
	}
 | 
						|
	unset($output);
 | 
						|
	// Flush field values on success
 | 
						|
	if (empty($_SESSION["error_msg"])) {
 | 
						|
		$_SESSION["ok_msg"] = _("SSH Key has been created successfully.");
 | 
						|
	}
 | 
						|
}
 | 
						|
if (empty($v_key)) {
 | 
						|
	$v_key = "";
 | 
						|
}
 | 
						|
render_page($user, $TAB, "add_key");
 | 
						|
 | 
						|
// Flush session messages
 | 
						|
unset($_SESSION["error_msg"]);
 | 
						|
unset($_SESSION["ok_msg"]);
 |