mirror of
https://github.com/ZeroDream-CN/SakuraPanel.git
synced 2025-01-12 09:52:52 +08:00
372 lines
13 KiB
PHP
Executable File
372 lines
13 KiB
PHP
Executable File
<?php
|
|
namespace SakuraPanel;
|
|
|
|
use SakuraPanel;
|
|
|
|
class PostHandler {
|
|
|
|
public function switcher($params)
|
|
{
|
|
global $_config;
|
|
|
|
if(isset($params['action']) && preg_match("/^[A-Za-z0-9\_\-]{1,20}$/", $params['action'])) {
|
|
switch($params['action']) {
|
|
case "login":
|
|
$um = new SakuraPanel\UserManager();
|
|
$pages = new SakuraPanel\Pages();
|
|
if($_config['recaptcha']['enable']) {
|
|
if(!isset($_POST["g-recaptcha-response"]) || !Utils::reCAPTCHA($_POST["g-recaptcha-response"])) {
|
|
$data = Array("status" => false, "message" => "reCAPTCHA 验证失败，请刷新重试");
|
|
$pages->loadPage("login", $data);
|
|
exit;
|
|
}
|
|
}
|
|
$data = $um->doLogin($_POST);
|
|
if(isset($data['status']) && $data['status'] === true) {
|
|
$_SESSION['user'] = $data['username'];
|
|
$_SESSION['mail'] = $data['email'];
|
|
$_SESSION['token'] = md5(mt_rand(0, 999999) . time() . $data['username']);
|
|
exit("<script>location='?page=panel';</script>");
|
|
}
|
|
$pages->loadPage("login", $data);
|
|
break;
|
|
case "register":
|
|
$um = new SakuraPanel\UserManager();
|
|
$pages = new SakuraPanel\Pages();
|
|
if($_config['recaptcha']['enable']) {
|
|
if(!isset($_POST["g-recaptcha-response"]) || !Utils::reCAPTCHA($_POST["g-recaptcha-response"])) {
|
|
$data = Array("status" => false, "message" => "reCAPTCHA 验证失败，请刷新重试");
|
|
$pages->loadPage("register", $data);
|
|
exit;
|
|
}
|
|
}
|
|
$data = $um->doRegister($_POST);
|
|
$pages->loadPage("register", $data);
|
|
break;
|
|
case "sendmail":
|
|
$um = new SakuraPanel\UserManager();
|
|
if(!$_config['smtp']['enable']) {
|
|
exit("本站未开启 SMTP 服务！");
|
|
}
|
|
if(isset($_SESSION['reg_wait'])) {
|
|
if(time() - $_SESSION['reg_wait'] < 60) {
|
|
exit("您的操作过于频繁，请稍后再试。");
|
|
}
|
|
}
|
|
if(!isset($_POST['mail']) || $_POST['mail'] == "") {
|
|
exit("请填写邮箱！");
|
|
}
|
|
if(!$um->checkEmail($_POST['mail'])) {
|
|
exit("不正确的邮箱格式！");
|
|
}
|
|
$rand = mt_rand(100000, 999999);
|
|
$_SESSION['reg_verifycode'] = $rand;
|
|
$_SESSION['reg_wait'] = time();
|
|
$_SESSION['reg_email'] = $_POST['mail'];
|
|
|
|
$um->sendRegisterEmail($_POST['mail'], $rand);
|
|
exit("系统已发送一封邮件至您的邮箱，请查收。");
|
|
break;
|
|
case "findpass":
|
|
$um = new SakuraPanel\UserManager();
|
|
$pages = new SakuraPanel\Pages();
|
|
if($_config['recaptcha']['enable']) {
|
|
if(!isset($_POST["g-recaptcha-response"]) || !Utils::reCAPTCHA($_POST["g-recaptcha-response"])) {
|
|
$data = Array("status" => false, "message" => "reCAPTCHA 验证失败，请刷新重试");
|
|
$pages->loadPage("findpass", $data);
|
|
exit;
|
|
}
|
|
}
|
|
$data = $um->doFindpass($_POST);
|
|
$pages->loadPage("findpass", $data);
|
|
break;
|
|
case "addproxy":
|
|
$um = new SakuraPanel\UserManager();
|
|
$pm = new SakuraPanel\ProxyManager();
|
|
if($um->isLogged()) {
|
|
$result = $pm->checkRules($_POST);
|
|
if(is_array($result) && isset($result[0])) {
|
|
if($result[0]) {
|
|
if($pm->addProxy($_POST)) {
|
|
exit("隧道创建成功");
|
|
} else {
|
|
exit("隧道创建失败，请联系管理员：" . Database::fetchError());
|
|
}
|
|
} else {
|
|
$msg = $result[1] ?? "未知错误";
|
|
exit($msg);
|
|
}
|
|
}
|
|
} else {
|
|
exit("登录会话已超时，请重新登录");
|
|
}
|
|
break;
|
|
case "updatepass":
|
|
$um = new SakuraPanel\UserManager();
|
|
if($um->isLogged()) {
|
|
SakuraPanel\Utils::checkCsrf();
|
|
if(!isset($_POST['oldpass']) || !isset($_POST['newpass']) || !isset($_POST['newpass1'])
|
|
|| $_POST['oldpass'] == "" || $_POST['newpass'] == "" || $_POST['newpass1'] == "") {
|
|
exit("<script>alert('不完整的信息，请重新填写');location='?page=panel&module=profile';</script>");
|
|
}
|
|
$us = $um->getInfoByUser($_SESSION['user']);
|
|
if($um->checkPassword($_POST['oldpass'], $us['password'])) {
|
|
if(strlen($_POST['newpass']) < 5) exit("<script>alert('新密码不能少于 5 个字符，请重新输入');location='?page=panel&module=profile';</script>");
|
|
if($_POST['newpass'] !== $_POST['newpass1']) exit("<script>alert('两次输入的密码不一致');location='?page=panel&module=profile';</script>");
|
|
$password = $um->generatePassword($_POST['newpass']);
|
|
$token = substr(md5(sha1(md5($_SESSION['user']) . md5($password) . time() . mt_rand(0, 9999999))), 0, 16);
|
|
// 更新数据库
|
|
Database::update("users", Array("password" => $password), Array("username" => $_SESSION['user']));
|
|
Database::update("tokens", Array("token" => $token), Array("username" => $_SESSION['user']));
|
|
unset($_SESSION['user']);
|
|
unset($_SESSION['mail']);
|
|
unset($_SESSION['token']);
|
|
exit("<script>alert('密码修改成功，请重新登录。');location='?';</script>");
|
|
} else {
|
|
exit("<script>alert('旧密码错误，请检查');location='?page=panel&module=profile';</script>");
|
|
}
|
|
} else {
|
|
exit("<script>alert('登录会话已超时，请重新登录');location='?';</script>");
|
|
}
|
|
break;
|
|
case "updateuser":
|
|
$um = new SakuraPanel\UserManager();
|
|
if($um->isLogged()) {
|
|
SakuraPanel\Utils::checkCsrf();
|
|
$us = $um->getInfoByUser($_SESSION['user']);
|
|
if($us['group'] == "admin") {
|
|
$valid = SakuraPanel\Regex::isValid($_POST, [
|
|
'id' => SakuraPanel\Regex::TYPE_NUMBER,
|
|
'traffic' => SakuraPanel\Regex::TYPE_NUMBER,
|
|
'proxies' => SakuraPanel\Regex::TYPE_NUMBER,
|
|
'group' => SakuraPanel\Regex::TYPE_LETTER,
|
|
'status' => SakuraPanel\Regex::TYPE_NUMBER,
|
|
]);
|
|
if($valid === true) {
|
|
$update = $um->updateUser($_POST['id'], [
|
|
'traffic' => $_POST['traffic'],
|
|
'proxies' => $_POST['proxies'],
|
|
'inbound' => $_POST['inbound'] ?? "",
|
|
'outbound' => $_POST['outbound'] ?? "",
|
|
'group' => $_POST['group'],
|
|
'status' => $_POST['status'],
|
|
]);
|
|
if($update === true) {
|
|
exit("用户资料更新成功！");
|
|
} else {
|
|
Header("HTTP/1.1 404 Not Found");
|
|
exit("该用户不存在！{$update}");
|
|
}
|
|
} else {
|
|
Header("HTTP/1.1 404 Not Found");
|
|
exit("提交的数据不合法！{$valid}");
|
|
}
|
|
} else {
|
|
exit("你没有足够的权限这么做");
|
|
}
|
|
} else {
|
|
exit("登录会话已超时，请重新登录");
|
|
}
|
|
break;
|
|
case "updatenode":
|
|
$um = new SakuraPanel\UserManager();
|
|
$nm = new SakuraPanel\NodeManager();
|
|
if($um->isLogged()) {
|
|
SakuraPanel\Utils::checkCsrf();
|
|
$us = $um->getInfoByUser($_SESSION['user']);
|
|
if($us['group'] == "admin") {
|
|
$valid = SakuraPanel\Regex::isValid($_POST, [
|
|
'id' => SakuraPanel\Regex::TYPE_NUMBER,
|
|
'name' => SakuraPanel\Regex::TYPE_NOTEMPTY,
|
|
'description' => SakuraPanel\Regex::TYPE_NOTEMPTY,
|
|
'hostname' => SakuraPanel\Regex::TYPE_HOSTNAME,
|
|
'ip' => SakuraPanel\Regex::TYPE_IPV4_V6,
|
|
'port' => SakuraPanel\Regex::TYPE_NUMBER,
|
|
'admin_port' => SakuraPanel\Regex::TYPE_NUMBER,
|
|
'admin_pass' => SakuraPanel\Regex::TYPE_NOTEMPTY,
|
|
'token' => SakuraPanel\Regex::TYPE_NOTEMPTY,
|
|
'group' => SakuraPanel\Regex::TYPE_NOTEMPTY,
|
|
'status' => SakuraPanel\Regex::TYPE_NUMBER,
|
|
]);
|
|
if($valid === true) {
|
|
$update = $nm->updateNode($_POST['id'], [
|
|
'id' => $_POST['id'],
|
|
'name' => $_POST['name'],
|
|
'description' => $_POST['description'],
|
|
'hostname' => $_POST['hostname'],
|
|
'ip' => $_POST['ip'],
|
|
'port' => $_POST['port'],
|
|
'admin_port' => $_POST['admin_port'],
|
|
'admin_pass' => $_POST['admin_pass'],
|
|
'token' => $_POST['token'],
|
|
'group' => $_POST['group'],
|
|
'status' => $_POST['status'],
|
|
]);
|
|
if($update === true) {
|
|
exit("节点信息更新成功！");
|
|
} else {
|
|
Header("HTTP/1.1 404 Not Found");
|
|
exit("该节点不存在！{$update}");
|
|
}
|
|
} else {
|
|
Header("HTTP/1.1 404 Not Found");
|
|
exit("提交的数据不合法！{$valid}");
|
|
}
|
|
} else {
|
|
exit("你没有足够的权限这么做");
|
|
}
|
|
} else {
|
|
exit("登录会话已超时，请重新登录");
|
|
}
|
|
break;
|
|
case "addnode":
|
|
$um = new SakuraPanel\UserManager();
|
|
$nm = new SakuraPanel\NodeManager();
|
|
if($um->isLogged()) {
|
|
SakuraPanel\Utils::checkCsrf();
|
|
$us = $um->getInfoByUser($_SESSION['user']);
|
|
if($us['group'] == "admin") {
|
|
$valid = SakuraPanel\Regex::isValid($_POST, [
|
|
'name' => SakuraPanel\Regex::TYPE_NOTEMPTY,
|
|
'description' => SakuraPanel\Regex::TYPE_NOTEMPTY,
|
|
'hostname' => SakuraPanel\Regex::TYPE_HOSTNAME,
|
|
'ip' => SakuraPanel\Regex::TYPE_IPV4_V6,
|
|
'port' => SakuraPanel\Regex::TYPE_NUMBER,
|
|
'admin_port' => SakuraPanel\Regex::TYPE_NUMBER,
|
|
'admin_pass' => SakuraPanel\Regex::TYPE_NOTEMPTY,
|
|
'token' => SakuraPanel\Regex::TYPE_NOTEMPTY,
|
|
'group' => SakuraPanel\Regex::TYPE_NOTEMPTY,
|
|
'status' => SakuraPanel\Regex::TYPE_NUMBER,
|
|
]);
|
|
if($valid === true) {
|
|
$update = $nm->addNode([
|
|
'name' => $_POST['name'],
|
|
'description' => $_POST['description'],
|
|
'hostname' => $_POST['hostname'],
|
|
'ip' => $_POST['ip'],
|
|
'port' => $_POST['port'],
|
|
'admin_port' => $_POST['admin_port'],
|
|
'admin_pass' => $_POST['admin_pass'],
|
|
'token' => $_POST['token'],
|
|
'group' => $_POST['group'],
|
|
'status' => $_POST['status'],
|
|
]);
|
|
if($update === true) {
|
|
exit("节点添加成功！");
|
|
} else {
|
|
Header("HTTP/1.1 404 Not Found");
|
|
exit("节点添加失败！{$update}");
|
|
}
|
|
} else {
|
|
Header("HTTP/1.1 404 Not Found");
|
|
exit("提交的数据不合法！{$valid}");
|
|
}
|
|
} else {
|
|
exit("你没有足够的权限这么做");
|
|
}
|
|
} else {
|
|
exit("登录会话已超时，请重新登录");
|
|
}
|
|
break;
|
|
case "deletenode":
|
|
$um = new SakuraPanel\UserManager();
|
|
$nm = new SakuraPanel\NodeManager();
|
|
if($um->isLogged()) {
|
|
SakuraPanel\Utils::checkCsrf();
|
|
$us = $um->getInfoByUser($_SESSION['user']);
|
|
if($us['group'] == "admin") {
|
|
if(SakuraPanel\Regex::isValid($_POST, [
|
|
"id" => SakuraPanel\Regex::TYPE_NUMBER
|
|
]) === true) {
|
|
$result = $nm->deleteNode($_POST['id']);
|
|
if($result === true) {
|
|
exit("节点删除成功！");
|
|
} else {
|
|
Header("HTTP/1.1 404 Not Found");
|
|
exit("节点删除失败！{$result}");
|
|
}
|
|
} else {
|
|
Header("HTTP/1.1 404 Not Found");
|
|
exit("提交的数据不合法！{$valid}");
|
|
}
|
|
} else {
|
|
exit("你没有足够的权限这么做");
|
|
}
|
|
} else {
|
|
exit("登录会话已超时，请重新登录");
|
|
}
|
|
break;
|
|
case "updatebroadcast":
|
|
$um = new SakuraPanel\UserManager();
|
|
if($um->isLogged()) {
|
|
SakuraPanel\Utils::checkCsrf();
|
|
$us = $um->getInfoByUser($_SESSION['user']);
|
|
if($us['group'] == "admin") {
|
|
if(isset($_POST['data'])) {
|
|
$result = SakuraPanel\Settings::set("broadcast", $_POST['data']);
|
|
if($result === true) {
|
|
exit("公告更新成功！");
|
|
} else {
|
|
exit("数据更新失败！{$result}");
|
|
}
|
|
} else {
|
|
Header("HTTP/1.1 404 Not Found");
|
|
exit("提交的数据不合法！");
|
|
}
|
|
} else {
|
|
exit("你没有足够的权限这么做");
|
|
}
|
|
} else {
|
|
exit("登录会话已超时，请重新登录");
|
|
}
|
|
break;
|
|
case "updatehelpinfo":
|
|
$um = new SakuraPanel\UserManager();
|
|
if($um->isLogged()) {
|
|
SakuraPanel\Utils::checkCsrf();
|
|
$us = $um->getInfoByUser($_SESSION['user']);
|
|
if($us['group'] == "admin") {
|
|
if(isset($_POST['data'])) {
|
|
$result = SakuraPanel\Settings::set("helpinfo", $_POST['data']);
|
|
if($result === true) {
|
|
exit("帮助更新成功！");
|
|
} else {
|
|
exit("数据更新失败！{$result}");
|
|
}
|
|
} else {
|
|
Header("HTTP/1.1 404 Not Found");
|
|
exit("提交的数据不合法！");
|
|
}
|
|
} else {
|
|
exit("你没有足够的权限这么做");
|
|
}
|
|
} else {
|
|
exit("登录会话已超时，请重新登录");
|
|
}
|
|
break;
|
|
case "preview":
|
|
$um = new SakuraPanel\UserManager();
|
|
if($um->isLogged()) {
|
|
SakuraPanel\Utils::checkCsrf();
|
|
include(ROOT . "/core/Parsedown.php");
|
|
$markdown = new Parsedown();
|
|
$markdown->setSafeMode(true);
|
|
$markdown->setBreaksEnabled(true);
|
|
$markdown->setUrlsLinked(true);
|
|
if(isset($_POST['data'])) {
|
|
exit($markdown->text($_POST['data']));
|
|
} else {
|
|
Header("HTTP/1.1 404 Not Found");
|
|
exit("提交的数据不合法！");
|
|
}
|
|
} else {
|
|
exit("登录会话已超时，请重新登录");
|
|
}
|
|
break;
|
|
default:
|
|
Header("HTTP/1.1 404 Not Found");
|
|
exit("Undefined action {$params['action']}");
|
|
}
|
|
}
|
|
}
|
|
} |