// GPL licensed (see end of file) * Use at your own risk!
//
// More at https://ownyourbits.com/2017/02/13/nextcloud-ready-raspberry-pi-image/
///
include ('csrf.php');
session_start();
$modules_path = '/usr/local/etc/nextcloudpi-config.d/';
$l10nDir = "l10n";
ignore_user_abort( true );
require("L10N.php");
try {
$l = new L10N($_SERVER["HTTP_ACCEPT_LANGUAGE"], $l10nDir, $modules_path);
} catch (Exception $e) {
die(json_encode("
Error while loading localizations!
"));
}
if ( $_POST['action'] == "cfgreq" )
{
if ( !$_POST['ref'] ) exit( '{ "output": "Invalid request" }' );
//CSFR check
$token = isset($_POST['csrf_token']) ? $_POST['csrf_token'] : '';
if ( empty($token) || !validateCSRFToken($token) )
exit( '{ "output": "Unauthorized request. Try reloading the page" }' );
$path = '/usr/local/etc/nextcloudpi-config.d/';
$files = array_diff(scandir($path), array('.', '..'));
$fh = fopen( $path . $_POST['ref'] . '.sh' ,'r')
or exit( '{ "output": "' . $file . ' read error" }' );
// Get new token
echo '{ "token": "' . getCSRFToken() . '",';
echo ' "output": ';
$output = "";
while ( $line = fgets($fh) )
{
// checkbox (yes/no) field
if ( preg_match('/^(\w+)_=(yes|no)$/', $line, $matches) )
{
$checked = "";
if ( $matches[2] == "yes" )
$checked = "checked";
$output = $output . "";
$output = $output . "". $l->__($matches[1], $_POST['ref']) ." ";
$output = $output . " ";
$output = $output . " ";
}
// drop down menu
else if(preg_match('/^(\w+)_=\[(([_\w]+,)*[_\w]+)\]$/', $line, $matches))
{
$options = explode(",", $matches[2]);
$output .= "";
$output .= "". $l->__($matches[1], $_POST['ref']) ." ";
$output .= "";
foreach($options as $option)
{
$output .= "__(trim($option, "_"), $_POST['ref']) ." ";
}
$output .= " ";
}
// text field
else if ( preg_match('/^(\w+)_=(.*)$/', $line, $matches) )
{
$output = $output . "";
$output = $output . "". $l->__($matches[1], $_POST['ref']) ." ";
$output = $output . " ";
$output = $output . " ";
}
}
$output = $output . "
";
fclose($fh);
echo json_encode( $output ) . ' }'; // close JSON
}
else if ( $_POST['action'] == "launch" && $_POST['config'] )
{
if ( !$_POST['ref'] ) exit( '{ "output": "Invalid request" }' );
// CSRF check
$token = isset($_POST['csrf_token']) ? $_POST['csrf_token'] : '';
if ( empty($token) || !validateCSRFToken($token) )
exit( '{ "output": "Unauthorized request. Try reloading the page" }' );
chdir('/usr/local/etc/nextcloudpi-config.d/');
$file = $_POST['ref'] . '.sh';
if ( $_POST['config'] != "{}" )
$params = json_decode( $_POST['config'], true )
or exit( '{ "output": "Invalid request" }' );
$code = file_get_contents( $file )
or exit( '{ "output": "' . $file . ' read error" }' );
if ( !empty( $params ) )
foreach( $params as $name => $value )
{
if( is_array($value))
{
$value = "[". join(",", $value) ."]";
}
preg_match( '/^[\[\]\w+-.,@_\/:]+$/' , $value , $matches )
or exit( '{ "output": "Invalid input" , "token": "' . getCSRFToken() . '" }' );
$code = preg_replace( '/\n' . $name . '_=.*' . PHP_EOL . '/' ,
PHP_EOL . $name . '_=' . $value . PHP_EOL ,
$code )
or exit();
}
file_put_contents($file, $code )
or exit( '{ "output": "' . $file . ' write error" }' );
// Get new token
echo '{ "token": "' . getCSRFToken() . '",';
echo ' "ref": "' . $_POST['ref'] . '",';
echo ' "output": "" , ';
echo ' "ret": ';
exec( 'bash -c "sudo /home/www/ncp-launcher.sh ' . $file . '"' , $output , $ret );
echo '"' . $ret . '" }';
}
else
{
// CSRF check
$token = isset($_POST['csrf_token']) ? $_POST['csrf_token'] : '';
if ( empty($token) || !validateCSRFToken($token) )
exit( '{ "output": "Unauthorized request. Try reloading the page" }' );
if ( $_POST['action'] == "poweroff" )
{
shell_exec( 'bash -c "( sleep 2 && sudo halt ) 2>/dev/null >/dev/null &"' );
}
else if ( $_POST['action'] == "reboot" )
{
shell_exec('bash -c "( sleep 2 && sudo reboot ) 2>/dev/null >/dev/null &"');
}
}
// License
//
// This script is free software; you can redistribute it and/or modify it
// under the terms of the GNU General Public License as published by
// the Free Software Foundation; either version 2 of the License, or
// (at your option) any later version.
//
// This script is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with this script; if not, write to the
// Free Software Foundation, Inc., 59 Temple Place, Suite 330,
// Boston, MA 02111-1307 USA
?>