File: //usr/local/CyberCP/api/__pycache__/views.cpython-310.pyc
o
��h � � @ s6 d dl Z d dlmZ d dlmZ d dlmZ d dlmZ d dl m
Z
d dl m Z d dl
mZ d d lmZ d d
lmZ d dlZd d lmZ d d lmZ d d
lmZ d dlmZ d dl m Z d dl m Z d dl!m"Z" d dl#m$Z$ d dl%m&Z' d dl%m(Z) dLdd�Z*e$dd� �Z+e$dd� �Z,e$d d � �Z-e$d d � �Z.e$d d!� �Z/e$d"d#� �Z(e$d$d%� �Z0e$d&d'� �Z1e$d(d)� �Z2e$d*d+� �Z3e$d,d-� �Z4e$d.d/� �Z5e$d0d1� �Z6e$d2d3� �Z7e$d4d5� �Z8e$d6d7� �Z9e$d8d9� �Z:e$d:d;� �Z&e$d<d=� �Z;e$d>d?� �Z<e$d@dA� �Z=e$dBdC� �Z>e$dDdE� �Z?e$dFdG� �Z@e$dHdI� �ZAdJdK� ZBdS )M� N)�redirect)� HttpResponse)�
Administrator)�virtualHostUtilities)� hashPassword)�Package)�
renderBase)�randint)�Websites)�version)�
mailUtilities)�WebsiteManager)�PackagesManager)� S3Backups)�CyberCPLogFileWriter)�ProcessUtilities)� csrf_exempt)�submitUserCreation)�submitUserDeletion�fieldc C s> t | t�sdS g d�}|D ]}|| v r d|� d�f S q
dS )z}
Validate API input for security threats while allowing legitimate data
Returns tuple: (is_valid, error_message)
)TN)�;z&&z||�|�`�$z../z../../�
�
z<scriptz </script>z javascript:zeval(zexec(zsystem(z shell_exec(Fz) contains invalid characters or patterns.)�
isinstance�str)� input_value�
field_name�dangerous_patterns�pattern� r" � /usr/local/CyberCP/api/views.py�validate_api_input s
�r$ c
C s� z�| j dkr�z+t�| j�}|d }|d }t|d�\}}|s0d|d�}t�|�}t|dd�W W S W n& tjtfyW } zddd�}t�|�}t|dd�W Y d }~W S d }~ww z t j
j |d �} W n t j y| dd
d�}t�|�}t|d d� Y W S w | j
dkr�dd d�}t�|�}t|d
d�W S t�| j|�r�ddi}t�|�}t|�W S ddd�}t�|�}t|dd�W S ddd�}t�|�}t|dd�W S ty� }
zddt|
�� �d�}t�|�}t|dd�W Y d }
~
S d }
~
ww )N�POST� adminUser� adminPassr )�
verifyConn�
error_message� ��statusz3Invalid JSON or missing adminUser/adminPass fields.��userName�Administrator not found.� �API Access Disabled.� r( � zInvalid password.i� �Only POST method allowed.� �Internal server error: �� )�method�json�loads�bodyr$ �dumpsr �JSONDecodeError�KeyErrorr �objects�get� DoesNotExist�apir �check_password�password� Exceptionr ) �request�datar& r' �is_valid� error_msg�data_ret� json_data�e�admin�msgr" r" r# r( 1 sZ
�
��
�
��r( c
C s z�| j dkrdddd�}t�|�}t|dd�W S zJt�| j�}|d }t|d�\}}|s?dd|d�}t�|�}t|dd�W W S d |v rat|d d �\}}|sadd|d�}t�|�}t|dd�W W S W n tjtfy� ddd
d�}t�|�}t|dd� Y W S w z t j
j |d �}W n t j y� ddd d�}t�|�}t|d
d� Y W S w t
j�tj�r�t�dt|�� �� |jdkr�dddd�}t�|�}t|dd�W S t� }|�|�W S ty� } z dddt| �� �d�}t�|�}t|dd�W Y d } ~ S d } ~ ww )Nr% r r4 )� existsStatus�createWebSiteStatusr) r5 r+ r& r* �
domainNamez(Invalid JSON or missing adminUser field.r- r/ r0 z Create website payload in API r1 r2 r6 r7 )r8 r9 r< r r: r; r$ r= r> r r? r@ rA �os�path�existsr � debugPath�logging� writeToFiler rB r
�createWebsiteAPIrE )
rF rJ rK rG r& rH rI rM �wmrN r" r" r# �
createWebsited sp
�
��
��
�
�
�
��rZ c C s� t �| j�}|d }|d }tjj|d�}|jdkr'dg dd�}tt �|��S t �
|j |�r6t � }|�
|�S ddd�}t �|�}t|�S ) Nr& r' r- r r1 )rO � listPackagesr) �!Could not authorize access to API�r, r) )r9 r: r; r r? r@ rB r r< r rC rD r �listPackagesAPI)rF rG r& r' rM rJ �pmrK r" r" r# �getPackagesListAPI� s
�
r` c
C sH z�| j dkrt�| j�}|d }|d }|d }tjj|d�}|jdkr3ddd�}t�|�}t |�W S t
� |j |�r;ndd d�}t�|�}t |�W S z tjj|d�}d
|j
|j|j|jjd d �}t�|�}t |�W W S dd
d�}t�|�}t |� Y W S W d S ty� } zdt| �d�}t�|�}t |�W Y d } ~ S d } ~ ww )Nr% r& r' �usernamer- r r1 r] r\ r3 �None)r, � firstName�lastName�email� adminStatusr) zUser does not exists.)r8 r9 r: r; r r? r@ rB r< r r rC rD rc rd re �aclrf �
BaseExceptionr )
rF rG r& r' ra rM rJ rK �userrN r" r" r# � getUserInfo� sP
�
�
�&
��rj c
C s& zp| j dkrnt�| j�}|d }|d }|d }|d }tjj|d�}|jdkr7ddd �}t�|�}t |�W S t
� |j |�r?ndd
d �}t�|�}t |�W S tjj|d�} t
�
|�| _ | �� d d d �}t�|�}t |�W S W d S ty� }
zdt|
�d �}t�|�}t |�W Y d }
~
S d }
~
ww )
Nr% � websiteOwner�
ownerPasswordr& r' r- r r1 �� changeStatusr) r\ r3 rb )r8 r9 r: r; r r? r@ rB r< r r rC rD �
hash_password�saverh r ) rF rG rk rl r& r' rM rJ rK �
websiteOwnrN r" r" r# �changeUserPassAPI� s@
�
�!
��rr c
C �� zR| j dkrPt�| j�}|d }|d }tjj|d�}|jdkr/ddd�}t�|�}t |�W S t
� |j |�rA|j
| jd< t| �W S dd d�}t�|�}t |�W S W d S tyt } zdt|�d
�}t�|�}t |�W Y d }~S d }~ww ) Nr% r& r' r- r r1 r] �userIDr\ �r r) )r8 r9 r: r; r r? r@ rB r< r r rC rD �pk�session�ducrh r �rF rG r& r' rM rJ rK rN r" r" r# r �2
�
�
��r c
C s. zt| j dkrrt�| j�}|d }|d }|d }|d }tjj|d�}|jdkr7ddd �}t�|�}t |�W S t
� |j |�r?ndd
d �}t�|�}t |�W S t
jj|d �} tjj|d �}
|
| _| �� d
dd �}t�|�}t |�W S W d S ty� } zdt| �d �}t�|�}t |�W Y d } ~ S d } ~ ww )Nr% � websiteName� packageNamer& r' r- r r1 )�
changePackager) r\ ��domain)r| r3 rb )r8 r9 r: r; r r? r@ rB r< r r rC rD r
r �packagerp rh r ) rF rG r{ r| r& r' rM rJ rK �website�packrN r" r" r# �changePackageAPI+ sB
�
�"
��r� c
C s8 zy| j dkrwt�| j�}|d }|d }tjj|d�}|jdkr/ddd�}t�|�}t |�W S |d |d < t
� |j |�r=ndd
d�}t�|�}t |�W S t
jj|d d �}|j}z|j�� �� dkrf|�� W n Y t� } | �|j|�W S W d S ty� }
zdt|
�d�}t�|�}t |�W Y d }
~
S d }
~
ww ) Nr% r& r' r- r r1 )�websiteDeleteStatusr) rQ r{ r\ r~ )r8 r9 r: r; r r? r@ rB r< r r rC rD r
rM � websites_set�all�count�deleter
�submitWebsiteDeletionrv rh r ) rF rG r& r' rM rJ rK r� rk rY rN r" r" r# �
deleteWebsiteV sF
�
��%
��r� c
C s� zW| j dkrUt�| j�}|d }|d }tjj|d�}|jdkr/ddd�}t�|�}t |�W S t
� |j |�r7nddd�}t�|�}t |�W S t
� }|�|jt�| j��W S W d S tyy } zdt|�d�}t�|�}t |�W Y d }~S d }~ww ) Nr% r& r' r- r r1 )�
websiteStatusr) r\ )r8 r9 r: r; r r? r@ rB r< r r rC rD r
�submitWebsiteStatusrv rh r ) rF rG r& r' rM rJ rK rY rN r" r" r# r� � s4
�
�
��r� c
C s� z<| j d }| j d }tjj|d�}|jdkr&ddd�}t�|�}t|�W S t� |j
|�r8|j | j d< t
t�W S td�W S ty_ } zddt|�d �}t�|�}t|�W Y d }~S d }~ww )
Nra rD r- r r1 )rt r) rt zInvalid Credentials.)rt � loginStatusr) )r% r r? r@ rB r9 r< r r rC rD rv rw r r rh r )rF ra rD rM rJ rK rN rG r" r" r# �loginAPI� s$
��r� c
C s zj| j dkrht�| j�}|d }|d }tjj|d�}|jdkr/ddd�}t�|�}t |�W S t
� |j |�rXt
j�dd d
�}d | }t�|�}d d d
|d�}t�|�}t |�W S dddd�}t�|�}t |�W S W d S ty� } zddt| �d�}t�|�}t |�W Y d } ~ S d } ~ ww )Nr% ra rD r- r r1 r] z/rootz.sshzcyberpanel.pub�cat r3 rb )r, � pubKeyStatusr) �pubKey�"Could not authorize access to API.)r, r� r) )r8 r9 r: r; r r? r@ rB r< r r rC rD rR rS �joinr �outputExecutionerrh r )
rF rG ra rD rM rJ rK r� �execPathrN r" r" r# � fetchSSHkey� sD
�
�
�#
��r� c
C s� z�| j dkr�t�| j�}|d }|d }tjj|d�}|jdkr/ddd�}t�|�}t |�W S |d }|d }|d
} t
� d t | � � t
�|j|�r�t td d
��}
d} t| d�} | �| � | �� t�� dt td d
�� }
t|
d�} |D ] }| �|d � qv| �� dtj d }|d |�d� d |
d |
}t�|� tj � d�r�t
� dt |� � t t�d|
d���W S ddd�}t�|�}t |�W S W d S t y� } zdt |�d�}t�|�}t |�W Y d }~S d }~ww ) Nr% ra rD r- r r1 )�transferStatusr) � ipAddress�accountsToTransfer�portz!port on server B-------------- %si� i' z /home/cyberpanel/remote_port�wz/home/cyberpanel/accounts-r z /usr/local/CyberCP/bin/python z$/plogical/remoteTransferUtilities.pyz remoteTransfer --ipAddress z --dir z --accountsToTransfer z/usr/local/CyberCP/debugz Repor of %sr3 )r� �dirr� ) r8 r9 r: r; r r? r@ rB r< r rV rW r r rC rD r �open�
writelines�closer � checkHomer �
cyberPanel�rstripr �popenExecutionerrR rS rT �reprrh )rF rG ra rD rM rJ rK r� r� r� r� �portpathrW rS �itemsr� rN r" r" r# �remoteTransfer� sT
"
�5
��r� c
C sZ z�| j dkr�t�| j�}|d }|d }tjj|d�}|jdkr/ddd�}t�|�}t |�W S t
� |j |�ryt
j�� }d}d}|D ]%} | j| j| jj| jd �}
|dkr]|t�|
� }d
}qA|d t�|
� }qA|d }t�d
d
|d��} t | �W S ddd�}t�|�}t |�W S W d S ty� } zdt| �d�}t�|�}t |�W Y d } ~ S d } ~ ww )Nr% ra rD r- r r1 �� fetchStatusr) �[)r� �phpr� re r3 �,�]rb )r� r) rG �Invalid Credentials)r8 r9 r: r; r r? r@ rB r< r r rC rD r
r� r � phpSelectionr� r| �
adminEmailrh r )
rF rG ra rD rM rJ rK �records�checkerr� �dic�
final_jsonrN r" r" r# � fetchAccountsFromRemoteServer' sJ
�
�*
��r� c
C sD z| j dkr}t�| j�}|d }|d }tjj|d�}|jdkr/ddd�}t�|�}t |�W S dt
|d � d
}z0t � |j
|�rZd |� �}t�|�} t�d d
| d��}
t |
�W W S ddd�}t�|�}t |�W W S t�d d
dd��}
t |
� Y W S W d S ty� } zdt
| �d�}t�|�}t |�W Y d } ~ S d } ~ ww )Nr% ra rD r- r r1 r� �/home/backup/transfer-r� z /backup_logr� r3 rb )r� r) r, r� zJust started..)r8 r9 r: r; r r? r@ rB r< r r r rC rD r r� rh ) rF rG ra rD rM rJ rK r� �commandr, r� rN r" r" r# �FetchRemoteTransferStatusZ s<
�
��r� c
C s@ z}| j dkr{t�| j�}|d }|d }tjj|d�}|jdkr/ddd�}t�|�}t |�W S dt
|d � }t � |j
|�rl|d
}d | } t�| �}
d |
} t�| � d
| } t�| � ddd�}t�|�}t |�W S ddd�}t�|�}t |�W S W d S ty� } zdt
| �d�}t�|�}t |�W Y d } ~ S d } ~ ww )Nr% ra rD r- r r1 )� cancelStatusr) r� r� z/pidr� z kill -KILL zrm -rf r3 rb r� )r8 r9 r: r; r r? r@ rB r< r r r rC rD r r� � executionerrh ) rF rG ra rD rM rJ rK r� rS r� �pidrN r" r" r# �cancelRemoteTransfer� s@
�$
��r� c
C s za| j dkr_t�| j�}|d }|d }tjj|d�}|jdkr/ddd�}t�|�}t |�W S t
� |j |�rPt
jjdd �}dd
|j|jd �}t�|�}t |�W S dd d�}t�|�}t |�W S W d S ty� } zdt|�d�}t�|�}t |�W Y d }~S d }~ww )
Nr% ra rD r- r r1 )�
getVersionr) r3 )rv �none)r� r) �currentVersion�buildr� )r8 r9 r: r; r r? r@ rB r< r r rC rD r r� r� rh r ) rF rG r& r' rM rJ rK �VersionrN r" r" r# �cyberPanelVersion� sB
�
�
�#�
��r� c
C sz z t �| j�}|d }tj�|�r t| d d�}|�� W d S W d S ty< } zt �
t |�d � W Y d }~d S d }~ww )N�
randomFile�
runAWSBackupsz [API.runAWSBackups]) r9 r: r; rR rS rT r �startrh rV rW r )rF rG r� �s3rN r" r" r# r� � s � ��r� c
C rs ) Nr% r& r' r- r r1 r] rt r\ rm )r8 r9 r: r; r r? r@ rB r< r r rC rD rv rw �sucrh r ry r" r" r# r � rz r c
C � z\| j dkrZt�| j�}|d }|d }tjj|d�}|jdkr/ddd�}t�|�}t |�W S t
� |j |�rKddl
m} |� }|�|jt�| j��W S dd d�}t�|�}t |�W S W d S ty~ } zdt| �d
�}t�|�}t |�W Y d } ~ S d } ~ ww � Nr% r& r' r- r r1 r] )�FirewallManagerr\ ru )r8 r9 r: r; r r? r@ rB r< r r rC rD �firewall.firewallManagerr� �addRulerv rh r �
rF rG r& r' rM rJ rK r� �fmrN r" r" r# �addFirewallRule �4
�
�
��r� c
C r� r� )r8 r9 r: r; r r? r@ rB r< r r rC rD r� r� �
deleteRulerv rh r r� r" r" r# �deleteFirewallRule- r� r� c
C �j z ddl m} || �W S ty4 } z t�dt|�� �� ddi}tt�|�dd�W Y d}~S d}~ww ) z)AI Scanner worker authentication endpointr )�authenticate_workerz%[API] AI Scanner authenticate error: �errorz"Authentication service unavailabler7 r+ N) �
aiScanner.apir� rE rV rW r r r9 r< )rF r� rL rJ r" r" r# �aiScannerAuthenticateP �
��r� c
C r� ) z AI Scanner file listing endpointr )�
list_filesz#[API] AI Scanner list files error: r� z File listing service unavailabler7 r+ N) r� r� rE rV rW r r r9 r< )rF r� rL rJ r" r" r# �aiScannerListFiles\ r� r� c
C r� ) z AI Scanner file content endpointr )�get_file_contentz)[API] AI Scanner get file content error: r� z File content service unavailabler7 r+ N) r� r� rE rV rW r r r9 r< )rF r� rL rJ r" r" r# �aiScannerGetFileContenth r� r� c
C r� ) z,AI Scanner scan completion callback endpointr )�
scan_callbackz![API] AI Scanner callback error: r� z Callback service unavailabler7 r+ N) r� r� rE rV rW r r r9 r< )rF r� rL rJ r" r" r# �aiScannerCallbackt r� r� c
C r� ) z,AI Scanner real-time status webhook endpointr )�receive_status_updatez'[API] AI Scanner status webhook error: r� z"Status webhook service unavailabler7 r+ N) �aiScanner.status_apir� rE rV rW r r r9 r< )rF r� rL rJ r" r" r# �aiScannerStatusWebhook� r� r� c
C sl z ddl m} || |�W S ty5 } z t�dt|�� �� ddi}tt�|�dd�W Y d}~S d}~ww ) z!AI Scanner live progress endpointr )�get_live_scan_progressz&[API] AI Scanner live progress error: r� z!Live progress service unavailabler7 r+ N) r� r� rE rV rW r r r9 r< )rF �scan_idr� rL rJ r" r" r# �aiScannerLiveProgress� s ��r� )r )Cr9 �django.shortcutsr � django.httpr �loginSystem.modelsr � plogical.virtualHostUtilitiesr �plogicalr �packages.modelsr �baseTemplate.viewsr �randomr �websiteFunctions.modelsr
rR �baseTemplate.modelsr �plogical.mailUtilitiesr �websiteFunctions.websiter
�packages.packagesManagerr �s3Backups.s3Backupsr � plogical.CyberCPLogFileWriterr rV �plogical.processUtilitiesr � django.views.decorators.csrfr �userManagment.viewsr r� r rx r$ r( rZ r` rj rr r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r" r" r" r# �<module> s�
2
;
.
)
*
-
+
=
2
&
,
.
!
"