453 lines
12 KiB
PHP
453 lines
12 KiB
PHP
<?php
|
|
ini_set('display_errors', 0);
|
|
error_reporting(E_ALL);
|
|
|
|
header('Content-Type: application/json; charset=utf-8');
|
|
|
|
require_once __DIR__ . '/../class/db-functions.php';
|
|
|
|
$db = DBHandlerSelect::getInstance()->getConnection();
|
|
|
|
function jsonResponse(bool $success, string $message, array $extra = []): void
|
|
{
|
|
echo json_encode(array_merge([
|
|
'success' => $success,
|
|
'message' => $message
|
|
], $extra));
|
|
exit;
|
|
}
|
|
|
|
function getCyberpanelEncryptionKey(): string
|
|
{
|
|
return hash('sha256', 'CHANGE_THIS_SECRET_KEY_FOR_CYBERPANEL_DASHBOARD');
|
|
}
|
|
|
|
function decryptCyberpanelPassword(string $encryptedPassword): string
|
|
{
|
|
if ($encryptedPassword === '') {
|
|
return '';
|
|
}
|
|
|
|
$key = getCyberpanelEncryptionKey();
|
|
$decoded = base64_decode($encryptedPassword);
|
|
|
|
if (!$decoded || strpos($decoded, '::') === false) {
|
|
return '';
|
|
}
|
|
|
|
[$ivBase64, $encrypted] = explode('::', $decoded, 2);
|
|
$iv = base64_decode($ivBase64);
|
|
|
|
if (!$iv) {
|
|
return '';
|
|
}
|
|
|
|
$decrypted = openssl_decrypt(
|
|
$encrypted,
|
|
'AES-256-CBC',
|
|
$key,
|
|
0,
|
|
$iv
|
|
);
|
|
|
|
return $decrypted ?: '';
|
|
}
|
|
|
|
function readCookieFromJar(string $cookieFile, string $cookieName): string
|
|
{
|
|
if (!file_exists($cookieFile)) {
|
|
return '';
|
|
}
|
|
|
|
$lines = file($cookieFile, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES);
|
|
|
|
foreach ($lines as $line) {
|
|
if (strpos($line, '#') === 0) {
|
|
continue;
|
|
}
|
|
|
|
$parts = preg_split('/\s+/', $line);
|
|
|
|
if (count($parts) >= 7 && $parts[5] === $cookieName) {
|
|
return $parts[6];
|
|
}
|
|
}
|
|
|
|
return '';
|
|
}
|
|
|
|
function cyberpanelGet(string $url, string $cookieFile): array
|
|
{
|
|
$ch = curl_init();
|
|
|
|
curl_setopt_array($ch, [
|
|
CURLOPT_URL => $url,
|
|
CURLOPT_RETURNTRANSFER => true,
|
|
CURLOPT_HEADER => false,
|
|
CURLOPT_COOKIEJAR => $cookieFile,
|
|
CURLOPT_COOKIEFILE => $cookieFile,
|
|
CURLOPT_TIMEOUT => 30,
|
|
CURLOPT_CONNECTTIMEOUT => 15,
|
|
CURLOPT_SSL_VERIFYHOST => false,
|
|
CURLOPT_SSL_VERIFYPEER => false,
|
|
CURLOPT_USERAGENT => 'Mozilla/5.0 CyberPanelDashboard'
|
|
]);
|
|
|
|
$response = curl_exec($ch);
|
|
$curlError = curl_error($ch);
|
|
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
|
|
|
|
curl_close($ch);
|
|
|
|
return [
|
|
'http_code' => $httpCode,
|
|
'curl_error' => $curlError,
|
|
'raw' => $response
|
|
];
|
|
}
|
|
|
|
function cyberpanelPostJson(string $url, array $payload, string $cookieFile, string $csrfToken, string $referer): array
|
|
{
|
|
$headers = [
|
|
'Content-Type: application/json',
|
|
'Accept: application/json',
|
|
'X-Csrftoken: ' . $csrfToken,
|
|
'Referer: ' . $referer
|
|
];
|
|
|
|
$ch = curl_init();
|
|
|
|
curl_setopt_array($ch, [
|
|
CURLOPT_URL => $url,
|
|
CURLOPT_POST => true,
|
|
CURLOPT_POSTFIELDS => json_encode($payload),
|
|
CURLOPT_HTTPHEADER => $headers,
|
|
CURLOPT_RETURNTRANSFER => true,
|
|
CURLOPT_HEADER => false,
|
|
CURLOPT_COOKIEJAR => $cookieFile,
|
|
CURLOPT_COOKIEFILE => $cookieFile,
|
|
CURLOPT_TIMEOUT => 30,
|
|
CURLOPT_CONNECTTIMEOUT => 15,
|
|
CURLOPT_SSL_VERIFYHOST => false,
|
|
CURLOPT_SSL_VERIFYPEER => false,
|
|
CURLOPT_USERAGENT => 'Mozilla/5.0 CyberPanelDashboard'
|
|
]);
|
|
|
|
$response = curl_exec($ch);
|
|
$curlError = curl_error($ch);
|
|
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
|
|
|
|
curl_close($ch);
|
|
|
|
$json = json_decode((string)$response, true);
|
|
|
|
return [
|
|
'http_code' => $httpCode,
|
|
'curl_error' => $curlError,
|
|
'raw' => $response,
|
|
'json' => is_array($json) ? $json : null
|
|
];
|
|
}
|
|
|
|
function normalizeWebsiteItems(array $fetchJson): array
|
|
{
|
|
$items = [];
|
|
|
|
if (isset($fetchJson['data'])) {
|
|
if (is_string($fetchJson['data'])) {
|
|
$decodedData = json_decode($fetchJson['data'], true);
|
|
if (is_array($decodedData)) {
|
|
$items = $decodedData;
|
|
}
|
|
} elseif (is_array($fetchJson['data'])) {
|
|
$items = $fetchJson['data'];
|
|
}
|
|
} elseif (isset($fetchJson['websites']) && is_array($fetchJson['websites'])) {
|
|
$items = $fetchJson['websites'];
|
|
} elseif (isset($fetchJson['records']) && is_array($fetchJson['records'])) {
|
|
$items = $fetchJson['records'];
|
|
}
|
|
|
|
$websites = [];
|
|
|
|
foreach ($items as $item) {
|
|
if (!is_array($item)) {
|
|
continue;
|
|
}
|
|
|
|
$domain = $item['domain'] ?? $item['domainName'] ?? $item['website'] ?? $item['name'] ?? '';
|
|
$owner = $item['admin'] ?? $item['owner'] ?? $item['user'] ?? $item['websiteOwner'] ?? '';
|
|
$ownerUsername = $item['owner_username'] ?? $item['ownerUsername'] ?? $item['username'] ?? $owner ?? '';
|
|
$package = $item['package'] ?? $item['packageName'] ?? '';
|
|
$phpVersion = $item['php_version'] ?? $item['phpVersion'] ?? $item['php'] ?? '';
|
|
$sslStatus = $item['ssl']['status'] ?? $item['ssl_status'] ?? $item['sslStatus'] ?? 'unknown';
|
|
$diskUsage = $item['diskUsed'] ?? $item['disk_usage'] ?? $item['diskUsage'] ?? '';
|
|
$status = $item['status'] ?? $item['state'] ?? 'unknown';
|
|
|
|
if ($domain === '') {
|
|
foreach ($item as $value) {
|
|
if (is_string($value) && preg_match('/^[a-z0-9.-]+\.[a-z]{2,}$/i', trim($value))) {
|
|
$domain = trim($value);
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
|
|
if ($domain !== '') {
|
|
$websites[] = [
|
|
'domain' => $domain,
|
|
'owner' => $owner,
|
|
'owner_username' => $ownerUsername,
|
|
'package' => $package,
|
|
'php_version' => $phpVersion,
|
|
'ssl_status' => $sslStatus,
|
|
'disk_usage' => $diskUsage,
|
|
'status' => strtolower(trim((string)$status)),
|
|
'php_version' => trim((string)$phpVersion),
|
|
'ssl_status' => strtolower(trim((string)$sslStatus)),
|
|
'disk_usage' => trim((string)$diskUsage),
|
|
'raw' => $item
|
|
];
|
|
}
|
|
}
|
|
|
|
return $websites;
|
|
}
|
|
|
|
try {
|
|
$serverId = isset($_POST['server_id']) ? (int)$_POST['server_id'] : 0;
|
|
|
|
if ($serverId <= 0) {
|
|
jsonResponse(false, 'Missing server ID.');
|
|
}
|
|
|
|
$stmt = $db->prepare("
|
|
SELECT
|
|
id,
|
|
panel_url,
|
|
username,
|
|
password_encrypted,
|
|
api_enabled
|
|
FROM cyberpanel_servers
|
|
WHERE id = :id
|
|
LIMIT 1
|
|
");
|
|
|
|
$stmt->execute([
|
|
':id' => $serverId
|
|
]);
|
|
|
|
$server = $stmt->fetch(PDO::FETCH_ASSOC);
|
|
|
|
if (!$server) {
|
|
jsonResponse(false, 'Server not found.');
|
|
}
|
|
|
|
if ((int)$server['api_enabled'] !== 1) {
|
|
jsonResponse(false, 'API disabled for this server.');
|
|
}
|
|
|
|
$panelUrl = rtrim($server['panel_url'], '/');
|
|
$username = $server['username'];
|
|
$password = decryptCyberpanelPassword($server['password_encrypted']);
|
|
|
|
if ($password === '') {
|
|
jsonResponse(false, 'Password cannot be decrypted.');
|
|
}
|
|
|
|
$cookieFile = tempnam(sys_get_temp_dir(), 'cyberpanel_cookie_');
|
|
|
|
/*
|
|
* Step 1: open CyberPanel first to obtain csrftoken cookie.
|
|
*/
|
|
$initialGet = cyberpanelGet($panelUrl . '/', $cookieFile);
|
|
|
|
if ($initialGet['curl_error'] !== '') {
|
|
@unlink($cookieFile);
|
|
jsonResponse(false, 'CyberPanel initial GET failed: ' . $initialGet['curl_error']);
|
|
}
|
|
|
|
$csrfToken = readCookieFromJar($cookieFile, 'csrftoken');
|
|
|
|
if ($csrfToken === '') {
|
|
@unlink($cookieFile);
|
|
jsonResponse(false, 'CSRF token not found from CyberPanel.', [
|
|
'http_code' => $initialGet['http_code'],
|
|
'raw_preview' => substr(strip_tags((string)$initialGet['raw']), 0, 1000)
|
|
]);
|
|
}
|
|
|
|
/*
|
|
* Step 2: login with csrf token.
|
|
*/
|
|
$login = cyberpanelPostJson(
|
|
$panelUrl . '/verifyLogin',
|
|
[
|
|
'username' => $username,
|
|
'password' => $password,
|
|
'languageSelection' => 'english'
|
|
],
|
|
$cookieFile,
|
|
$csrfToken,
|
|
$panelUrl . '/'
|
|
);
|
|
|
|
if ($login['curl_error'] !== '') {
|
|
@unlink($cookieFile);
|
|
jsonResponse(false, 'CyberPanel login cURL error: ' . $login['curl_error']);
|
|
}
|
|
|
|
if (!$login['json']) {
|
|
@unlink($cookieFile);
|
|
jsonResponse(false, 'CyberPanel login did not return JSON.', [
|
|
'http_code' => $login['http_code'],
|
|
'raw_preview' => substr(strip_tags((string)$login['raw']), 0, 1000)
|
|
]);
|
|
}
|
|
|
|
$loginOk = false;
|
|
|
|
if (isset($login['json']['loginStatus']) && $login['json']['loginStatus']) {
|
|
$loginOk = true;
|
|
}
|
|
|
|
if (isset($login['json']['status']) && (int)$login['json']['status'] === 1) {
|
|
$loginOk = true;
|
|
}
|
|
|
|
if (!$loginOk) {
|
|
@unlink($cookieFile);
|
|
jsonResponse(false, 'CyberPanel login failed.', [
|
|
'login_response' => $login['json']
|
|
]);
|
|
}
|
|
|
|
/*
|
|
* Step 3: after login, read sessionid and fetch websites.
|
|
*/
|
|
|
|
|
|
$csrfTokenAfterLogin = readCookieFromJar($cookieFile, 'csrftoken');
|
|
|
|
if ($csrfTokenAfterLogin !== '') {
|
|
$csrfToken = $csrfTokenAfterLogin;
|
|
}
|
|
|
|
$fetch = cyberpanelPostJson(
|
|
$panelUrl . '/websites/fetchWebsitesList',
|
|
[
|
|
'page' => 1,
|
|
'recordsToShow' => 1000
|
|
],
|
|
$cookieFile,
|
|
$csrfToken,
|
|
$panelUrl . '/websites/listWebsites'
|
|
);
|
|
|
|
@unlink($cookieFile);
|
|
|
|
if ($fetch['curl_error'] !== '') {
|
|
jsonResponse(false, 'fetchWebsitesList cURL error: ' . $fetch['curl_error']);
|
|
}
|
|
|
|
if (!$fetch['json']) {
|
|
jsonResponse(false, 'fetchWebsitesList did not return JSON.', [
|
|
'http_code' => $fetch['http_code'],
|
|
'raw_preview' => substr(strip_tags((string)$fetch['raw']), 0, 1000)
|
|
]);
|
|
}
|
|
|
|
if (
|
|
isset($fetch['json']['error_message']) &&
|
|
stripos($fetch['json']['error_message'], 'session') !== false
|
|
) {
|
|
jsonResponse(false, 'CyberPanel session not accepted.', [
|
|
'fetch_response' => $fetch['json']
|
|
]);
|
|
}
|
|
|
|
$websites = normalizeWebsiteItems($fetch['json']);
|
|
|
|
$upsert = $db->prepare("
|
|
INSERT INTO cyberpanel_websites
|
|
(
|
|
server_id,
|
|
domain,
|
|
website_owner,
|
|
owner_username,
|
|
package_name,
|
|
php_version,
|
|
ssl_status,
|
|
website_status,
|
|
disk_usage,
|
|
raw_json,
|
|
last_sync
|
|
)
|
|
VALUES
|
|
(
|
|
:server_id,
|
|
:domain,
|
|
:website_owner,
|
|
:owner_username,
|
|
:package_name,
|
|
:php_version,
|
|
:ssl_status,
|
|
:website_status,
|
|
:disk_usage,
|
|
:raw_json,
|
|
NOW()
|
|
)
|
|
ON DUPLICATE KEY UPDATE
|
|
website_owner = VALUES(website_owner),
|
|
owner_username = VALUES(owner_username),
|
|
package_name = VALUES(package_name),
|
|
php_version = VALUES(php_version),
|
|
ssl_status = VALUES(ssl_status),
|
|
website_status = VALUES(website_status),
|
|
disk_usage = VALUES(disk_usage),
|
|
raw_json = VALUES(raw_json),
|
|
last_sync = NOW()
|
|
");
|
|
|
|
$inserted = 0;
|
|
|
|
$inserted = 0;
|
|
|
|
foreach ($websites as $website) {
|
|
$upsert->execute([
|
|
':server_id' => $serverId,
|
|
':domain' => $website['domain'],
|
|
':website_owner' => $website['owner'],
|
|
':owner_username' => $website['owner_username'] ?: null,
|
|
':package_name' => $website['package'] ?: null,
|
|
':php_version' => $website['php_version'] ?: null,
|
|
':ssl_status' => $website['ssl_status'] ?: 'unknown',
|
|
':website_status' => $website['status'] ?: 'unknown',
|
|
':disk_usage' => $website['disk_usage'] ?: null,
|
|
':raw_json' => json_encode($website['raw'], JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES)
|
|
]);
|
|
|
|
$inserted++;
|
|
}
|
|
|
|
$update = $db->prepare("
|
|
UPDATE cyberpanel_servers
|
|
SET
|
|
last_status = 'online',
|
|
last_check = NOW()
|
|
WHERE id = :server_id
|
|
");
|
|
|
|
$update->execute([
|
|
':server_id' => $serverId
|
|
]);
|
|
|
|
jsonResponse(true, 'Websites synced successfully.', [
|
|
'count' => $inserted,
|
|
'websites' => $websites,
|
|
'raw_response' => $fetch['json']
|
|
]);
|
|
} catch (Throwable $e) {
|
|
jsonResponse(false, 'Sync websites error: ' . $e->getMessage());
|
|
}
|