ZeroDream/SakuraPanel
2
0
Fork 0
mirror of https://github.com/ZeroDream-CN/SakuraPanel.git synced 2025-01-12 09:52:52 +08:00
Code Issues Projects Releases Wiki Activity

Feature: New frps api server

Browse Source 
合并了原来的独立 API，直接调用 configuration.php 里面的配置，不再需要单独配置一次
增加配置文件获取接口 getconf，请求地址：`/api/?action=getconf&user=用户名&token=访问密钥&node=节点ID`
This commit is contained in:
Akkariin Meiko 2020-01-21 11:09:43 +08:00 committed by GitHub
parent e1f3a683b3
commit 5a26258cde
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 169 additions and 187 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

230
api/index.php
View File

@ -1,223 +1,205 @@
<?php <?php
error_reporting(0); namespace SakuraPanel;
Header("Content-type: text/plain");
$conn = mysqli_connect( use SakuraPanel;
/* 数据库地址 */ "localhost",
/* 数据库账号 */ "root",
/* 数据库密码 */ "123456",
/* 数据库名称 */ "spanel",
/* 数据库端口 */ 3306
) or die("Database error");
// API 密码，需要和 Frps.ini 里面设置的一样 // API 密码，需要和 Frps.ini 里面设置的一样
define("API_TOKEN", "SakuraFrpToken"); define("API_TOKEN", "SakuraFrpToken");
define("ROOT", realpath(__DIR__ . "/../"));
// 输出禁止错误 Header if(ROOT === false) {
function ServerForbidden($msg) { exit("Please place this file on /api/ folder");
Header("HTTP/1.1 403 {$msg}");
echo json_encode(Array(
'status' => 403,
'message' => $msg
), JSON_UNESCAPED_UNICODE);
exit;
} }
// 输出未找到错误 Header include(ROOT . "/configuration.php");
function ServerNotFound($msg) { include(ROOT . "/core/Database.php");
Header("HTTP/1.1 404 {$msg}"); include(ROOT . "/core/Regex.php");
echo json_encode(Array( include(ROOT . "/core/Utils.php");
'status' => 404,
'message' => $msg
), JSON_UNESCAPED_UNICODE);
exit;
}
// 输出未找到错误 Header $conn = null;
function ServerBadRequest($msg) { $db = new SakuraPanel\Database();
Header("HTTP/1.1 400 {$msg}");
echo json_encode(Array(
'status' => 400,
'message' => $msg
), JSON_UNESCAPED_UNICODE);
exit;
}
// 输出正常消息 include(ROOT . "/core/UserManager.php");
function LoginSuccessful($msg) { include(ROOT . "/core/NodeManager.php");
Header("Content-type: text/plain", true, 200); include(ROOT . "/core/ProxyManager.php");
echo json_encode(Array(
'status' => 200,
'success' => true,
'message' => $msg
), JSON_UNESCAPED_UNICODE);
exit;
}
// 输出正常消息 $pm = new ProxyManager();
function CheckSuccessful($msg) { $nm = new NodeManager();
Header("Content-type: text/plain", true, 200);
echo json_encode(Array(
'status' => 200,
'success' => true,
'message' => $msg
), JSON_UNESCAPED_UNICODE);
exit;
}
// Json 格式消息输出
function Println($data) {
Header("Content-type: text/plain", true, 200);
echo json_encode($data, JSON_UNESCAPED_UNICODE);
exit;
}
function getBoolean($str) {
return $str == "true";
}
// 服务端 API 部分 // 服务端 API 部分
// 先进行 Frps 鉴权 // 先进行 Frps 鉴权
if(isset($_GET['apitoken']) && $_GET['apitoken'] == API_TOKEN) { if((isset($_GET['apitoken']) && $_GET['apitoken'] == API_TOKEN) || (isset($_GET['action']) && $_GET['action'] == "getconf")) {
if(isset($_GET['action'])) {
switch($_GET['action']) { switch($_GET['action']) {
case "getconf":
if(isset($_GET['user'], $_GET['token'], $_GET['node'])) {
if(Regex::isUserName($_GET['user']) && Regex::isLetter($_GET['token']) && Regex::isNumber($_GET['node'])) {
$rs = Database::querySingleLine("tokens", [
"username" => $_GET['user'],
"token" => $_GET['token']
]);
if($rs && $nm->isNodeExist($_GET['node'])) {
$rs = $pm->getUserProxiesConfig($_GET['user'], $_GET['node']);
if(is_string($rs)) {
Header("Content-Type: text/plain");
exit($rs);
} else {
Utils::sendServerNotFound("User or node not found");
}
} else {
Utils::sendServerNotFound("User or node not found");
}
} else {
Utils::sendServerNotFound("Invalid username or token");
}
} else {
Utils::sendServerNotFound("Invalid request");
}
break;
// 检查客户端是否合法 // 检查客户端是否合法
case "checktoken": case "checktoken":
if(isset($_GET['user'])) { if(isset($_GET['user'])) {
if(preg_match("/^[A-Za-z0-9]{1,32}$/", $_GET['user'])) { if(Regex::isLetter($_GET['user']) && strlen($_GET['user']) == 16) {
$userToken = mysqli_real_escape_string($conn, $_GET['user']); $userToken = Database::escape($_GET['user']);
$rs = mysqli_fetch_array(mysqli_query($conn, "SELECT * FROM `tokens` WHERE `token`='{$userToken}'")); $rs = Database::querySingleLine("tokens", ["token" => $userToken]);
if($rs) { if($rs) {
LoginSuccessful("Login successful, welcome!"); Utils::sendLoginSuccessful("Login successful, welcome!");
} else { } else {
ServerForbidden("Login failed"); Utils::sendServerForbidden("Login failed");
} }
} else { } else {
ServerForbidden("Invalid username"); Utils::sendServerForbidden("Invalid username");
} }
} else { } else {
ServerForbidden("Username cannot be empty"); Utils::sendServerForbidden("Username cannot be empty");
} }
break; break;
// 检查隧道是否合法 // 检查隧道是否合法
case "checkproxy": case "checkproxy":
if(isset($_GET['user'])) { if(isset($_GET['user'])) {
if(preg_match("/^[A-Za-z0-9]{1,32}$/", $_GET['user'])) { if(Regex::isLetter($_GET['user']) && strlen($_GET['user']) == 16) {
$proxyName = str_replace("{$_GET['user']}.", "", $_GET['proxy_name']); $proxyName = str_replace("{$_GET['user']}.", "", $_GET['proxy_name']);
$proxyType = $_GET['proxy_type'] ?? "tcp"; $proxyType = $_GET['proxy_type'] ?? "tcp";
$remotePort = Intval($_GET['remote_port']) ?? ""; $remotePort = Intval($_GET['remote_port']) ?? "";
$userToken = mysqli_real_escape_string($conn, $_GET['user']); $userToken = Database::escape($_GET['user']);
$rs = mysqli_fetch_array(mysqli_query($conn, "SELECT * FROM `tokens` WHERE `token`='{$userToken}'")); $rs = Database::querySingleLine("tokens", ["token" => $userToken]);
if($rs) { if($rs) {
if($proxyType == "tcp" || $proxyType == "udp" || $proxyType == "stcp" || $proxyType == "xtcp") { if($proxyType == "tcp" || $proxyType == "udp" || $proxyType == "stcp" || $proxyType == "xtcp") {
if(isset($remotePort) && preg_match("/^[0-9]{1,5}$/", $remotePort)) { if(isset($remotePort) && Regex::isNumber($remotePort)) {
$username = mysqli_real_escape_string($conn, $rs['username']); $username = Database::escape($rs['username']);
// 这里只对远程端口做限制，可根据自己的需要修改 // 这里只对远程端口做限制，可根据自己的需要修改
$rs = mysqli_fetch_array(mysqli_query($conn, "SELECT * FROM `proxies` WHERE `username`='{$username}' AND `remote_port`='{$remotePort}' AND `proxy_type`='{$proxyType}'")); $rs = Database::querySingleLine("proxies", [
"username" => $username,
"remote_port" => $remotePort,
"proxy_type" => $proxyType
]);
if($rs) { if($rs) {
if($rs['status'] !== "0") { if($rs['status'] !== "0") {
ServerForbidden("Proxy disabled"); Utils::sendServerForbidden("Proxy disabled");
} }
CheckSuccessful("Proxy exist"); Utils::sendCheckSuccessful("Proxy exist");
} else { } else {
ServerNotFound("Proxy not found"); Utils::sendServerNotFound("Proxy not found");
} }
} else { } else {
ServerBadRequest("Invalid request"); Utils::sendServerBadRequest("Invalid request");
} }
} elseif($proxyType == "http" || $proxyType == "https") { } elseif($proxyType == "http" || $proxyType == "https") {
if(isset($_GET['domain']) || isset($_GET['subdomain'])) { if(isset($_GET['domain']) || isset($_GET['subdomain'])) {
// 目前只验证域名和子域名 // 目前只验证域名和子域名
$domain = $_GET['domain'] ?? "null"; $domain = $_GET['domain'] ?? "null";
$subdomain = $_GET['subdomain'] ?? "null"; $subdomain = $_GET['subdomain'] ?? "null";
$username = mysqli_real_escape_string($conn, $rs['username']); $username = Database::escape($rs['username']);
$domain = mysqli_real_escape_string($conn, $domain); $domain = Database::escape($domain);
$subdomain = mysqli_real_escape_string($conn, $subdomain); $subdomain = Database::escape($subdomain);
$domainsql = (isset($_GET['domain']) && !empty($_GET['domain'])) ? "`domain`='{$domain}'" : "`subdomain`='{$subdomain}'"; $domainSQL = (isset($_GET['domain']) && !empty($_GET['domain'])) ? ["domain" => $domain] : ["subdomain" => $subdomain];
$rs = mysqli_fetch_array(mysqli_query($conn, "SELECT * FROM `proxies` WHERE `username`='{$username}' AND {$domainsql} AND `proxy_type`='{$proxyType}'")); $querySQL = [
"username" => $username,
"proxy_type" => $proxyType
];
$querySQL = Array_merge($querySQL, $domainSQL);
$rs = Database::querySingleLine("proxies", $querySQL);
if($rs) { if($rs) {
if($rs['status'] !== "0") { if($rs['status'] !== "0") {
ServerForbidden("Proxy disabled"); Utils::sendServerForbidden("Proxy disabled");
} }
CheckSuccessful("Proxy exist"); Utils::sendCheckSuccessful("Proxy exist");
} else { } else {
ServerNotFound("Proxy not found"); Utils::sendServerNotFound("Proxy not found");
} }
} else { } else {
ServerBadRequest("Invalid request"); Utils::sendServerBadRequest("Invalid request");
} }
} else { } else {
ServerBadRequest("Invalid request"); Utils::sendServerBadRequest("Invalid request");
} }
} else { } else {
ServerNotFound("User not found"); Utils::sendServerNotFound("User not found");
} }
} else { } else {
ServerBadRequest("Invalid request"); Utils::sendServerBadRequest("Invalid request");
} }
} else { } else {
ServerForbidden("Invalid username"); Utils::sendServerForbidden("Invalid username");
} }
break; break;
case "getlimit": case "getlimit":
Header("Content-type: text/plain", true, 200);
if(isset($_GET['user'])) { if(isset($_GET['user'])) {
if(preg_match("/^[A-Za-z0-9]{1,32}$/", $_GET['user'])) { if(Regex::isLetter($_GET['user']) && strlen($_GET['user']) == 16) {
$userToken = mysqli_real_escape_string($conn, $_GET['user']); $userToken = Database::escape($_GET['user']);
$rs = mysqli_fetch_array(mysqli_query($conn, "SELECT * FROM `tokens` WHERE `token`='{$userToken}'")); $rs = Database::querySingleLine("tokens", ["token" => $userToken]);
if($rs) { if($rs) {
$username = mysqli_real_escape_string($conn, $rs['username']); $username = Database::escape($rs['username']);
$ls = mysqli_fetch_array(mysqli_query($conn, "SELECT * FROM `limits` WHERE `username`='{$username}'")); $ls = Database::querySingleLine("limits", ["username" => $username]);
if($ls) { if($ls) {
exit(json_encode(Array( Utils::sendJson(Array(
'status' => 200, 'status' => 200,
'max-in' => Floatval($ls['inbound']), 'max-in' => Floatval($ls['inbound']),
'max-out' => Floatval($ls['outbound']) 'max-out' => Floatval($ls['outbound'])
))); ));
} else { } else {
$uinfo = mysqli_fetch_array(mysqli_query($conn, "SELECT * FROM `users` WHERE `username`='{$username}'")); $uinfo = Database::querySingleLine("users", ["username" => $username]);
if($uinfo) { if($uinfo) {
if($rs['group'] == "admin") { if($uinfo['group'] == "admin") {
exit(json_encode(Array( Utils::sendJson(Array(
'status' => 200, 'status' => 200,
'max-in' => 1000000, 'max-in' => 1000000,
'max-out' => 1000000 'max-out' => 1000000
))); ));
} }
$group = mysqli_real_escape_string($conn, $rs['group']); $group = Database::escape($uinfo['group']);
$gs = mysqli_fetch_array(mysqli_query($conn, "SELECT * FROM `groups` WHERE `name`='{$group}'")); $gs = Database::querySingleLine("groups", ["name" => $group]);
if($gs) { if($gs) {
exit(json_encode(Array( Utils::sendJson(Array(
'status' => 200, 'status' => 200,
'max-in' => Floatval($gs['inbound']), 'max-in' => Floatval($gs['inbound']),
'max-out' => Floatval($gs['outbound']) 'max-out' => Floatval($gs['outbound'])
))); ));
} else { } else {
exit(json_encode(Array( Utils::sendJson(Array(
'status' => 200, 'status' => 200,
'max-in' => 1024, 'max-in' => 1024,
'max-out' => 1024 'max-out' => 1024
))); ));
} }
} else {
Utils::sendServerForbidden("User not exist");
} }
} }
} else { } else {
ServerForbidden("Login failed"); Utils::sendServerForbidden("Login failed");
} }
} else { } else {
ServerForbidden("Invalid username"); Utils::sendServerForbidden("Invalid username");
} }
} else { } else {
ServerForbidden("Username cannot be empty"); Utils::sendServerForbidden("Username cannot be empty");
} }
break; break;
default: default:
ServerNotFound("Undefined action"); Utils::sendServerNotFound("Undefined action");
} }
} else { } else {
ServerNotFound("Invalid request"); Utils::sendServerNotFound("Invalid request");
}
} else {
ServerNotFound("Invalid request");
} }