Viewing file:  domain_setup.cgi (16.22 KB) -rwxrwxr-x
Select action/file-type:
 (+) |  (+) |  (+) | Code (+) | Session (+) |  (+) | SDB (+) |  (+) |  (+) |  (+) |  (+) |  (+) |
#!/usr/bin/perl
# domain_setup.cgi
# Create a new virtual domain
require './virtual-server-lib.pl';
&can_create_master_servers() || &can_create_sub_servers() ||
&error($text{'form_ecannot'});
&require_bind() if ($config{'dns'});
&require_useradmin();
&require_mail() if ($config{'mail'});
&require_mysql() if ($config{'mysql'});
&require_postgres() if ($config{'postgres'});
&require_acl();
&ReadParse();
&error_setup($text{'setup_err'});
# Get parent settings
if ($in{'to'}) {
$aliasdom = &get_domain($in{'to'});
$aliasdom || &error($text{'form_ealiasdom'});
$parentdom = $aliasdom->{'parent'} ?
&get_domain($aliasdom->{'parent'}) : $aliasdom;
$parentuser = $parentdom->{'user'};
&can_edit_domain($aliasdom) || &error($text{'form_ecannot'});
}
elsif (!&can_create_master_servers()) {
if ($access{'admin'}) {
$parentdom = &get_domain($access{'admin'});
$parentuser = $parentdom->{'user'};
}
else {
$parentuser = $remote_user;
}
}
elsif ($in{'parentuser'}) {
$parentuser = $in{'parentuser'};
}
if ($parentuser && !$parentdom) {
$parentdom = &get_domain_by("user", $parentuser, "parent", "");
$parentdom || &error(&text('form_eparent', $parentuser));
&can_edit_domain($parentdom) || &error($text{'form_ecannot'});
}
if ($in{'subdom'}) {
$subdom = &get_domain($in{'subdom'});
$subdom || &error(&text('form_esubdom', &html_escape($in{'subdom'})));
&can_edit_domain($subdom) || &error($text{'form_ecannot'});
}
# Check if domains limit has been exceeded
($dleft, $dreason, $dmax) = &count_domains(
$aliasdom ? "aliasdoms" :
$parentdom ? "realdoms" : "topdoms");
&error(&text('setup_emax', $dmax, $virtualmin_account_subscriptions)) if ($dleft == 0);
# Validate inputs (check domain name to see if in use)
$dname = lc(&parse_domain_name($in{'dom'}));
$err = &valid_domain_name($dname);
&error($err) if ($err);
if ($subdom) {
# Append super-domain
$dname =~ /^[A-Za-z0-9\-]+$/ || &error($text{'setup_esubdomain'});
$subprefix = $dname;
$dname .= ".$subdom->{'dom'}";
}
else {
$force = $access{'forceunder'} && $parentdom ?
".$parentdom->{'dom'}" :
$access{'subdom'} ? ".$access{'subdom'}" : undef;
!$force || $dname =~ /\Q$force\E$/ ||
&error(&text('setup_eforceunder', $force));
}
&lock_domain_name($dname);
$in{'owner'} =~ s/\r|\n//g;
$in{'owner'} =~ /:/ && &error($text{'setup_eowner'});
my $clashed = &domain_name_clash($dname);
&error($clashed->{'defaulthostdomain'} ?
&text('setup_edomain5', $clashed->{'dom'}) :
$text{'setup_edomain4'})
if ($clashed);
$tmpl = &get_template($in{'template'});
&can_use_template($tmpl) || &error($text{'setup_etmpl'});
if (!$parentdom) {
$plan = &get_plan($in{'plan'});
$plan && &can_use_plan($plan) || &error($text{'setup_eplan'});
}
else {
$plan = &get_plan($parentdom->{'plan'});
}
if (!$parentuser) {
# Validate user and password-related inputs for top-level domain
if (!$in{'unix'}) {
$tmpl->{'mail_on'} eq "none" || !$in{'email_def'} ||
&error($text{'setup_eemail2'});
}
$pass = &parse_new_password("vpass", 0);
# Parse admin/unix username
if ($in{'vuser_def'}) {
# Automatic
($user, $try1, $try2) = &unixuser_name($dname);
$user || &error(&text('setup_eauto', $try1, $try2));
}
else {
# Selected by user
$in{'vuser'} = lc($in{'vuser'});
$user = $in{'vuser'};
&valid_mailbox_name($user) && &error($text{'setup_euser2'});
defined(getpwnam($user)) && &error($text{'setup_euser'});
}
&indexof($user, @banned_usernames) < 0 ||
&error(&text('setup_eroot', join(" ", @banned_usernames)));
($user eq $remote_user || $user eq $base_remote_user) &&
&error($text{'setup_eremoteuser'});
if (!$in{'email_def'}) {
$in{'email'} =~ /\S/ || &error($text{'setup_eemail'});
@parts = &extract_address_parts($in{'email'});
@parts || &error($text{'setup_eemail3'});
foreach my $p (@parts) {
if ($p =~ /^(\S+)\@(\S+)$/ && $2 eq $in{'dom'} &&
$1 ne $user && $in{'mail'}) {
# Don't allow contact address to be in the
# domain being created (if email is local)
&error($text{'setup_eemail4'});
}
}
}
# Parse mail group name
if ($in{'mgroup_def'}) {
if ($in{'vuser_def'}) {
# Automatic
($group, $gtry1, $gtry2) =
&unixgroup_name($dname, $user);
$group || &error(&text('setup_eauto2', $try1, $try2));
}
else {
# Same as admin user
$group = $user;
defined(getgrnam($group)) &&
&error(&text('setup_egroup', $group));
}
}
else {
# Selected by user
$in{'mgroup'} = lc($in{'mgroup'});
$group = $in{'mgroup'};
&valid_mailbox_name($group) && &error($text{'setup_egroup2'});
}
# Parse special group for Unix user
if (!$in{'group_def'} && &can_choose_ugroup()) {
$in{'group'} = lc($in{'group'});
$in{'group'} eq $group && &error(&text('setup_egroup3', $group));
local ($sg) = &get_domain_by("group", $in{'group'});
$sg && &error(&text('setup_egroup4', $sg->{'dom'}));
}
$home_base || &error($text{'setup_ehomebase'});
$uerr = &useradmin::check_username_restrictions($user);
if ($uerr) {
&error(&text('setup_eusername', $user, $uerr));
}
if (&has_home_quotas() && !$config{'template_auto'}) {
$in{'quota_def'} || $in{'quota'} =~ /^[0-9\.]+$/ ||
&error($text{'setup_equota'});
$in{'uquota_def'} || $in{'uquota'} =~ /^[0-9\.]+$/ ||
&error($text{'setup_euquota'});
$quota = $in{'quota_def'} ? '' :
"a_parse('quota', "home");
$uquota = $in{'uquota_def'} ? '' :
"a_parse('uquota', "home");
}
if (!$config{'template_auto'}) {
if ($config{'bw_active'} && !$config{'template_auto'}) {
$bw = &parse_bandwidth("bwlimit", $text{'setup_ebwlimit'});
}
$in{'mailboxlimit_def'} ||
$in{'mailboxlimit'} =~ /^\d+$/ ||
&error($text{'setup_emailboxlimit'});
$mailboxlimit = $in{'mailboxlimit_def'} ? undef :
$in{'mailboxlimit'};
$in{'aliaslimit_def'} || $in{'aliaslimit'} =~ /^\d+$/ ||
&error($text{'setup_ealiaslimit'});
$aliaslimit = $in{'aliaslimit_def'} ? undef : $in{'aliaslimit'};
$in{'dbslimit_def'} || $in{'dbslimit'} =~ /^\d+$/ ||
&error($text{'setup_edbslimit'});
$dbslimit = $in{'dbslimit_def'} ? undef : $in{'dbslimit'};
$in{'doms_def'} || $in{'doms'} =~ /^\d*$/ ||
&error($text{'setup_edomslimit'});
$domslimit = $in{'domslimit_def'} == 1 ? undef :
$in{'domslimit_def'} == 2 ? "*" : $in{'domslimit'};
$nodbname = $in{'nodbname'};
}
# Check password restrictions
if (defined($pass)) {
local $fakeuser = { 'user' => $user, 'plainpass' => $pass };
$err = &check_password_restrictions($fakeuser, $in{'webmin'});
&error(&text('setup_epassvalid', $err)) if ($err);
}
}
if (!$aliasdom) {
# Validate non-alias domain inputs
if ($config{'proxy_pass'} && !$in{'proxy_def'} &&
defined($in{'proxy'})) {
($proxy = $in{'proxy'}) =~ /^(http|https):\/\/\S+$/ ||
&error($text{'setup_eproxy'});
}
if (!$in{'prefix_def'}) {
$in{'prefix'} =~ /^[a-z0-9\.\-]+$/i ||
&error($text{'setup_eprefix'});
}
if (&database_feature() && &can_edit_databases() && !$in{'db_def'} &&
!$subdom) {
$in{'db'} =~ /^[a-z0-9\-\_]+$/i ||
&error($text{'setup_edbname'});
}
if (defined($in{'fwdto'}) && !$in{'fwdto_def'} && !$subdom &&
&can_edit_catchall()) {
$in{'mail'} ||
&error($text{'setup_efwdtomail'});
$in{'fwdto'} =~ /^\S+\@\S+$/ ||
&error($text{'setup_efwdto'});
$add_fwdto = 1;
}
}
# Work out the virtual IP
$resel = $parentdom ? $parentdom->{'reseller'} :
&reseller_admin() ? $base_remote_user : $in{'reseller'};
$defip = &get_default_ip($resel);
if ($aliasdom) {
# Alias domain gets IP from target
$ip = $aliasdom->{'ip'};
$virt = 0;
}
elsif (!&can_select_ip()) {
# Not allowed to select IP
if ($access{'ipfollow'} && $parentdom) {
# Inherit from parent
$ip = $parentdom->{'ip'};
$virt = 0;
}
else {
# Use global default
$ip = $defip;
$virt = 0;
}
}
else {
# User can select
($ip, $virt, $virtalready, $netmask) =
&parse_virtual_ip($tmpl, $resel);
}
# Work out the IPv6 address
if (&supports_ip6()) {
$defip6 = &get_default_ip6($resel);
if ($aliasdom) {
$ip6 = $aliasdom->{'ip6'};
$virt6 = 0;
}
elsif (!&can_select_ip6()) {
# Not allowed to select IPv6 address
if ($access{'ipfollow'} && $parentdom) {
# Inherit from parent
$ip6 = $parentdom->{'ip6'};
$virt6 = 0;
}
elsif ($config{'ip6enabled'} && $defip6) {
# Use global default
$ip6 = $defip6;
$virt6 = 0;
}
else {
# No v6 address
$virt6 = 0;
}
}
else {
# User can select
($ip6, $virt6, $virt6already, $netmask6) =
&parse_virtual_ip6($tmpl, $resel);
}
}
# Validate the DNS IP
if (&can_dnsip()) {
if ($in{'dns_ip_def'} == 0) {
&check_ipaddress($in{'dns_ip'}) || &error($text{'save_ednsip'});
}
}
# Make sure domain is under parent, if required
local $derr = &allowed_domain_name($parentdom, $dname);
&error($derr) if ($derr);
if ($parentuser) {
# User and group IDs come from parent
$gid = $parentdom->{'gid'};
$ugid = $parentdom->{'ugid'};
$user = $parentdom->{'user'};
$group = $parentdom->{'group'};
$ugroup = $parentdom->{'ugroup'};
$uid = $parentdom->{'uid'};
}
else {
# Work out user and group IDs
$uid = undef;
$gid = undef;
if ($in{'group_def'} || !&can_choose_ugroup()) {
$ugid = undef;
$ugroup = $group;
}
else {
$ugid = getgrnam($in{'group'});
$ugroup = $in{'group'};
}
}
$prefix = $in{'prefix_def'} ? &compute_prefix($dname, $group, $parentdom, 1)
: $in{'prefix'};
$pclash = &get_domain_by("prefix", $prefix);
$pclash && &error(&text('setup_eprefix3', $prefix, $pclash->{'dom'}));
# Build up domain object
%dom = ( 'id', &domain_id(),
'dom', $dname,
'user', $user,
'group', $group,
'prefix', $prefix,
'ugroup', $ugroup,
$parentuser ?
( 'pass', $parentdom->{'pass'} ) :
( 'pass', $pass ),
'alias', $aliasdom ? $aliasdom->{'id'} : undef,
'aliasmail', $in{'aliasmail'},
'subdom', $subdom ? $subdom->{'id'} : undef,
'subprefix', $subprefix,
'uid', $uid,
'gid', $gid,
'ugid', $ugid,
'owner', $in{'owner'},
'email', $parentdom ? $parentdom->{'email'} :
!$in{'email_def'} ? $in{'email'} : undef,
'name', !$virt,
'ip', $ip,
'netmask', $netmask,
'ip6', $ip6,
'netmask6', $netmask6,
'dns_ip', $in{'dns_ip_def'} == 0 && &can_dnsip() ? $in{'dns_ip'} :
$in{'dns_ip_def'} == 2 && &can_dnsip() ? undef :
$alias ? $alias->{'dns_ip'} :
$virt ? undef : &get_dns_ip($resel),
'virt', $virt,
'virt6', $virt6,
'name6', !$virt6,
'virtalready', $virtalready,
'virt6already', $virt6already,
'source', 'domain_setup.cgi',
'proxy_pass', $proxy,
'proxy_pass_mode', $proxy ? $config{'proxy_pass'} : 0,
'parent', $parentdom ? $parentdom->{'id'} : "",
'template', $in{'template'},
'plan', $plan->{'id'},
'reseller', $resel,
);
if (!$parentuser) {
# Set initial limits
&set_limits_from_plan(\%dom, $plan);
if (!$config{'template_auto'}) {
# Override from user inputs
$dom{'mailboxlimit'} = $mailboxlimit;
$dom{'aliaslimit'} = $aliaslimit;
$dom{'dbslimit'} = $dbslimit;
$dom{'bw_limit'} = $bw;
$dom{'domslimit'} = $domslimit;
$dom{'nodbname'} = $nodbname;
$dom{'quota'} = $quota;
$dom{'uquota'} = $uquota;
$dom{'norename'} = $plan->{'norename'}; # No input for this
$dom{'migrate'} = $plan->{'migrate'}; # No input for this
# No fields for these, so set from plan
$dom{'aliasdomslimit'} = $plan->{'aliasdomslimit'} eq '' ? '*' :
$plan->{'aliasdomslimit'};
$dom{'realdomslimit'} = $plan->{'realdomslimit'} eq '' ? '*' :
$plan->{'realdomslimit'};
}
&set_capabilities_from_plan(\%dom, $plan);
if ($tmpl->{'ujail'}) {
$dom{'jail'} = $tmpl->{'ujail'};
}
}
$dom{'emailto'} = $parentdom ? $parentdom->{'emailto'} :
$dom{'email'} ? $dom{'email'} :
$dom{'mail'} ? $dom{'user'}.'@'.$dom{'dom'} :
$dom{'user'}.'@'.&get_system_hostname();
# Remote MySQL server
if ($config{'mysql'} && &can_edit_templates() && !$aliasdom && !$parentdom) {
# User can select
$dom{'mysql_module'} = $in{'rmysql'};
}
# Set selected features in domain object
# Special magic - if the dir feature is enabled by default and this is an alias
# domain, don't set it
foreach my $f (@features, &list_feature_plugins()) {
next if ($f eq 'dir' && $config{$f} == 3 && $aliasdom &&
$tmpl->{'aliascopy'} && !$dom{'aliasmail'});
$dom{$f} = &can_use_feature($f) && int($in{$f});
}
if ($in{'db_def'} || !defined($in{'db'}) || !&database_feature() ||
!&can_edit_databases() || $aliasdom || $subdom) {
# Database name is automatic (or not even used, in the case of alias
# and sub-domains)
$dom{'db'} = &database_name(\%dom);
}
else {
# Make sure manual DB name has allowed prefix
$dom{'db'} = &database_name(\%dom); # For template
if ($tmpl->{'mysql_suffix'} ne "none") {
$prefix = &substitute_domain_template(
$tmpl->{'mysql_suffix'}, \%dom);
if ($in{'db'} !~ /^\Q$prefix\E/) {
&error(&text('setup_edbname2', $prefix));
}
}
$dom{'db'} = $in{'db'};
}
if (!$parentdom) {
&set_featurelimits_from_plan(\%dom, $plan);
}
&set_chained_features(\%dom, undef);
&set_provision_features(\%dom);
$dom{'home'} = &server_home_directory(\%dom, $parentdom);
&generate_domain_password_hashes(\%dom, 1);
&complete_domain(\%dom);
# Parse extra feature inputs
foreach $f (&list_feature_plugins()) {
if ($dom{$f}) {
$err = &plugin_call($f, "feature_inputs_parse", \%dom, \%in);
&error($err) if ($err);
}
}
# Check for various clashes
$derr = &virtual_server_depends(\%dom);
&error($derr) if ($derr);
$cerr = &virtual_server_clashes(\%dom);
&error($cerr) if ($cerr);
# Check if this new domain would exceed any limits
$lerr = &virtual_server_limits(\%dom);
&error($lerr) if ($lerr);
# Update custom fields
&parse_custom_fields(\%dom, \%in);
$main::force_bottom_scroll = 1;
&ui_print_unbuffered_header(&domain_in(\%dom), $text{'setup_title'}, "");
# Check for and show any warnings
if (&show_virtual_server_warnings(\%dom, undef, \%in)) {
&ui_print_footer("", $text{'index_return'});
return;
}
# Check if over quota
if ($parentdom) {
my $err = &check_domain_over_quota($parentdom);
if ($err) {
&error_setup();
&error(&text('setup_overquota', $err));
return;
}
}
# Parse content field
my $content = $in{'content'};
my $contented = !defined($in{'content_def'}) || $in{'content_def'} == 2;
$content =~ s/\r//g;
$content =~ s/^\s+//g;
$content =~ s/\s+$//g;
$content = '' if (!defined($in{'content_def'}));
$err = &create_virtual_server(\%dom, $parentdom, $parentuser,
0, 0, $parentdom ? undef : $pass,
$contented ? $content : undef);
&error($err) if ($err);
# Create default mail forward
if ($add_fwdto) {
&$first_print(&text('setup_fwding', $in{'fwdto'}));
&create_domain_forward(\%dom, $in{'fwdto'});
&$second_print($text{'setup_done'});
}
# Write totally custom site content
if (!$dom{'alias'} && &domain_has_website(\%dom) &&
(defined($in{'content_def'}) && $in{'content_def'} == 0)) {
# Create index.html file
&$first_print($text{'setup_contenting'});
my $home = &public_html_dir(\%dom);
eval {
local $main::error_must_die = 1;
&open_tempfile_as_domain_user(
\%dom, DATA, ">$home/index.html");
$content =~ s/\n/<br>\n/g if ($content);
my %hashtmp = %dom;
%hashtmp = &populate_default_index_page(\%dom, %hashtmp);
$content = &replace_default_index_page(\%dom, $content);
$content = &substitute_virtualmin_template($content, \%hashtmp);
&print_tempfile(DATA, $content);
&close_tempfile_as_domain_user(\%dom, DATA);
};
if ($@) {
&$second_print(&text('setup_econtenting', "$@"));
}
else {
&$second_print($text{'setup_done'});
}
}
# Setup SSH public key if one was given
if ($in{'sshkey_mode'} == 1) {
# Generate a keypair for the user
&$first_print($text{'setup_sshkey1'});
($sshkey, $err) = &create_domain_ssh_key(\%dom);
if (!$err) {
$err = &save_domain_ssh_pubkey(\%dom, $sshkey);
}
if ($err) {
&$second_print(&text('setup_esshkey', $err));
}
else {
&$second_print($text{'setup_done'});
}
}
elsif ($in{'sshkey_mode'} == 2) {
# Use only the given public key
&$first_print($text{'setup_sshkey2'});
$in{'sshkey'} =~ s/\r|\n/ /g;
$err = &save_domain_ssh_pubkey(\%dom, $in{'sshkey'});
if ($err) {
&$second_print(&text('setup_esshkey', $err));
}
else {
&$second_print($text{'setup_done'});
}
}
&run_post_actions();
&unlock_domain_name($dname);
&webmin_log("create", "domain", $dom{'dom'}, \%dom);
# Call any theme post command
if (defined(&theme_post_save_domain)) {
&theme_post_save_domain(\%dom, 'create');
}
&ui_print_footer("edit_domain.cgi?dom=$dom{'id'}", $text{'edit_return'},
"", $text{'index_return'});
|