All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */ /* pfSense_BUILDER_BINARIES: /sbin/ifconfig pfSense_MODULE: pkgs */ ##|+PRIV ##|*IDENT=page-package-edit ##|*NAME=Package: Edit page ##|*DESCR=Allow access to the 'Package: Edit' page. ##|*MATCH=pkg_edit.php* ##|-PRIV ini_set('max_execution_time', '0'); require("guiconfig.inc"); require_once("functions.inc"); require_once("filter.inc"); require_once("shaper.inc"); require_once("pkg-utils.inc"); /* dummy stubs needed by some code that was MFC'd */ function pfSenseHeader($location) { header("Location: " . $location); } function gentitle_pkg($pgname) { global $pfSense_config; return $pfSense_config['system']['hostname'] . "." . $pfSense_config['system']['domain'] . " - " . $pgname; } $xml = htmlspecialchars($_GET['xml']); if($_POST['xml']) $xml = htmlspecialchars($_POST['xml']); if($xml == "") { print_info_box_np(gettext("ERROR: No package defined.")); die; } else { $pkg = parse_xml_config_pkg("/usr/local/pkg/" . $xml, "packagegui"); } if($pkg['include_file'] <> "") { require_once($pkg['include_file']); } if (!isset($pkg['adddeleteeditpagefields'])) $only_edit = true; else $only_edit = false; $package_name = $pkg['menu'][0]['name']; $section = $pkg['menu'][0]['section']; $config_path = $pkg['configpath']; $name = $pkg['name']; $title = $pkg['title']; $pgtitle = $title; $id = $_GET['id']; if (isset($_POST['id'])) $id = htmlspecialchars($_POST['id']); if(!is_numeric($id)) { Header("Location: /"); exit; } // Not posting? Then user is editing a record. There must be a valid id // when editing a record. if(!$id && !$_POST) $id = "0"; if($pkg['custom_php_global_functions'] <> "") eval($pkg['custom_php_global_functions']); // grab the installedpackages->package_name section. if(!is_array($config['installedpackages'][xml_safe_fieldname($pkg['name'])]['config'])) $config['installedpackages'][xml_safe_fieldname($pkg['name'])]['config'] = array(); // If the first entry in the array is an empty tag, kill it. if ((count($config['installedpackages'][xml_safe_fieldname($pkg['name'])]['config']) > 0) && ($config['installedpackages'][xml_safe_fieldname($pkg['name'])]['config'][0] == "")) array_shift($config['installedpackages'][xml_safe_fieldname($pkg['name'])]['config']); $a_pkg = &$config['installedpackages'][xml_safe_fieldname($pkg['name'])]['config']; if($_GET['savemsg'] <> "") $savemsg = htmlspecialchars($_GET['savemsg']); if($pkg['custom_php_command_before_form'] <> "") eval($pkg['custom_php_command_before_form']); if ($_POST) { if($_POST['act'] == "del") { if($pkg['custom_delete_php_command']) { if($pkg['custom_php_command_before_form'] <> "") eval($pkg['custom_php_command_before_form']); eval($pkg['custom_delete_php_command']); } write_config($pkg['delete_string']); // resync the configuration file code if defined. if($pkg['custom_php_resync_config_command'] <> "") { if($pkg['custom_php_command_before_form'] <> "") eval($pkg['custom_php_command_before_form']); eval($pkg['custom_php_resync_config_command']); } } else { if($pkg['custom_add_php_command']) { if($pkg['donotsave'] <> "" or $pkg['preoutput'] <> "") { ?> "; eval($pkg['custom_add_php_command']); if($pkg['preoutput']) echo ""; } } // donotsave is enabled. lets simply exit. if($pkg['donotsave'] <> "") exit; $firstfield = ""; $rows = 0; $input_errors = array(); $reqfields = array(); $reqfieldsn = array(); foreach ($pkg['fields']['field'] as $field) { if (($field['type'] == 'input') && isset($field['required'])) { if($field['fieldname']) $reqfields[] = $field['fieldname']; if($field['fielddescr']) $reqfieldsn[] = $field['fielddescr']; } } do_input_validation($_POST, $reqfields, $reqfieldsn, &$input_errors); if ($pkg['custom_php_validation_command']) eval($pkg['custom_php_validation_command']); // store values in xml configration file. if (!$input_errors) { $pkgarr = array(); foreach ($pkg['fields']['field'] as $fields) { if($fields['type'] == "sorting") continue; if($fields['type'] == "listtopic") continue; if($fields['type'] == "rowhelper") { // save rowhelper items. for($x=0; $x<99; $x++) { // XXX: this really should be passed from the form. // XXX: this really is not helping embedded platforms. foreach($fields['rowhelper']['rowhelperfield'] as $rowhelperfield) { if($firstfield == "") { $firstfield = $rowhelperfield['fieldname']; } else { if($firstfield == $rowhelperfield['fieldname']) $rows++; } $fieldname = str_replace("\\", "", $rowhelperfield['fieldname']); $comd = "\$value = \$_POST['" . $fieldname . $x . "'];"; eval($comd); if($value <> "") { $comd = "\$pkgarr['row'][" . $x . "]['" . $fieldname . "'] = \"" . $value . "\";"; //echo($comd . "
"); eval($comd); } } } } else { $fieldname = $fields['fieldname']; $fieldvalue = $_POST[$fieldname]; if (is_array($fieldvalue)) $fieldvalue = implode(',', $fieldvalue); else { $fieldvalue = trim($fieldvalue); if ($fields['encoding'] == 'base64') $fieldvalue = base64_encode($fieldvalue); } if($fieldname) $pkgarr[$fieldname] = $fieldvalue; } } if (isset($id) && $a_pkg[$id]) $a_pkg[$id] = $pkgarr; else $a_pkg[] = $pkgarr; write_config($pkg['addedit_string']); // late running code if($pkg['custom_add_php_command_late'] <> "") { eval($pkg['custom_add_php_command_late']); } if (isset($pkg['filter_rules_needed'])) filter_configure(); // resync the configuration file code if defined. if($pkg['custom_php_resync_config_command'] <> "") { eval($pkg['custom_php_resync_config_command']); } parse_package_templates(); /* if start_command is defined, restart w/ this */ if($pkg['start_command'] <> "") exec($pkg['start_command'] . ">/dev/null 2&>1"); /* if restart_command is defined, restart w/ this */ if($pkg['restart_command'] <> "") exec($pkg['restart_command'] . ">/dev/null 2&>1"); if($pkg['aftersaveredirect'] <> "") { pfSenseHeader($pkg['aftersaveredirect']); } elseif(!$pkg['adddeleteeditpagefields']) { pfSenseHeader("pkg_edit.php?xml={$xml}&id=0"); } elseif(!$pkg['preoutput']) { pfSenseHeader("pkg.php?xml=" . $xml); } exit; } else { $get_from_post = true; } } if($pkg['title'] <> "") { $edit = ($only_edit ? '' : ": " . gettext("Edit")); $title = $pkg['title'] . $edit; } else $title = gettext("Package Editor"); $pgtitle = $title; include("head.inc"); if ($pkg['custom_php_after_head_command']) eval($pkg['custom_php_after_head_command']); ?> "") { ?>
"") { $tab_array = array(); foreach($pkg['tabs']['tab'] as $tab) { if($tab['tab_level']) $tab_level = $tab['tab_level']; else $tab_level = 1; if(isset($tab['active'])) { $active = true; } else { $active = false; } $urltmp = ""; if($tab['url'] <> "") $urltmp = $tab['url']; if($tab['xml'] <> "") $urltmp = "pkg_edit.php?xml=" . $tab['xml']; $addresswithport = getenv("HTTP_HOST"); $colonpos = strpos($addresswithport, ":"); if ($colonpos !== False) { //my url is actually just the IP address of the pfsense box $myurl = substr($addresswithport, 0, $colonpos); } else { $myurl = $addresswithport; } // eval url so that above $myurl item can be processed if need be. $url = str_replace('$myurl', $myurl, $urltmp); $tab_array[$tab_level][] = array( $tab['text'], $active, $url ); } ksort($tab_array); foreach($tab_array as $tab) { echo ''; } } ?>
'; display_top_tabs($tab); echo '
"") $savevalue = $pkg['savetext']; /* If a package's XML has configured, then setup * the table rows for the fields that have set. * These fields will be placed below other fields in a seprate area titled 'Advanced Features'. * These advanced fields are not normally configured and generally left to default to 'default settings'. */ if ($pkg['advanced_options'] == "enabled") { $adv_enabled = true; $advanced .= ""; $advanced .= "\n"; } foreach ($pkg['fields']['field'] as $pkga) { if ($pkga['type'] == "sorting") continue; if ($pkga['type'] == "listtopic") { if(isset($pkga['advancedfield']) && $adv_enabled) { $advanced .= ""; $advanced .= "\n"; } else { echo ""; echo "\n"; } continue; } if(!$pkga['combinefieldsend']) { if(isset($pkga['advancedfield']) && $adv_enabled) $advanced .= ""; else echo ""; } $size = ""; if(!$pkga['dontdisplayname']) { unset($req); if (isset($pkga['required'])) $req = 'req'; if(isset($pkga['advancedfield']) && $adv_enabled) { $advanced .= ""; } else { echo ""; } } if(!$pkga['dontcombinecells']) if(isset($pkga['advancedfield']) && $adv_enabled) $advanced .= ""; $i++; } ?>
 
". gettext("Advanced features") . "
 
" . $pkga['name'] . "
 
" . $pkga['name'] . "
"; $advanced .= fixup_string($pkga['fielddescr']); $advanced .= ""; echo fixup_string($pkga['fielddescr']); echo ""; else echo ""; // if user is editing a record, load in the data. $fieldname = $pkga['fieldname']; if ($get_from_post) { $value = $_POST[$fieldname]; if (is_array($value)) $value = implode(',', $value); } else { if (isset($id) && $a_pkg[$id]) $value = $a_pkg[$id][$fieldname]; else $value = $pkga['default_value']; } if($pkga['type'] == "input") { if($pkga['size']) $size = " size='" . $pkga['size'] . "' "; if(isset($pkga['advancedfield']) && $adv_enabled) { $js_array[] = $pkga['fieldname']; $advanced .= display_advanced_field($pkga['fieldname']); $advanced .= "\n"; $advanced .= "
" . fixup_string($pkga['description']) . "\n"; $advanced .= "\n"; } else { echo "\n"; echo "
" . fixup_string($pkga['description']) . "\n"; } } else if($pkga['type'] == "password") { if($pkga['size']) $size = " size='" . $pkga['size'] . "' "; if(isset($pkga['advancedfield']) && $adv_enabled) { $js_array[] = $pkga['fieldname']; $advanced .= display_advanced_field($pkga['fieldname']); $advanced .= "\n"; $advanced .= "
" . fixup_string($pkga['description']) . "\n"; $advanced .= "\n"; } else { echo "\n"; echo "
" . fixup_string($pkga['description']) . "\n"; } } else if($pkga['type'] == "select") { $fieldname = $pkga['fieldname']; if (isset($pkga['multiple'])) { $multiple = 'multiple="multiple"'; $items = explode(',', $value); $fieldname .= "[]"; } else { $multiple = ''; $items = array($value); } $size = (isset($pkga['size']) ? "size=\"{$pkga['size']}\"" : ''); $onchange = (isset($pkga['onchange']) ? "onchange=\"{$pkga['onchange']}\"" : ''); if(isset($pkga['advancedfield']) && $adv_enabled) { $js_array[] = $pkga['fieldname']; $advanced .= display_advanced_field($pkga['fieldname']); $advanced .= "\n
\n" . fixup_string($pkga['description']) . "\n"; $advanced .= "\n"; } else { echo "\n
\n" . fixup_string($pkga['description']) . "\n"; } } else if($pkga['type'] == "select_source") { $fieldname = $pkga['fieldname']; if (isset($pkga['multiple'])) { $multiple = 'multiple="multiple"'; $items = explode(',', $value); $fieldname .= "[]"; } else { $multiple = ''; $items = array($value); } $size = (isset($pkga['size']) ? "size=\"{$pkga['size']}\"" : ''); $onchange = (isset($pkga['onchange']) ? "onchange=\"{$pkga['onchange']}\"" : ''); if(isset($pkga['advancedfield']) && $adv_enabled) { $js_array[] = $pkga['fieldname']; $advanced .= display_advanced_field($pkga['fieldname']); $advanced .= "\n"; } $source_url = $pkga['source']; eval("\$pkg_source_txt = &$source_url;"); foreach ($pkg_source_txt as $opt) { $selected = ''; if($pkga['source_name']) { $source_name = $opt[$pkga['source_name']]; } else { $source_name = $opt[$pkga['name']]; } if($pkga['source_value']) { $source_value = $opt[$pkga['source_value']]; } else { $source_value = $opt[$pkga['value']]; } if (in_array($source_value, $items)) $selected = 'selected="selected"'; if(isset($pkga['advancedfield']) && $adv_enabled) $advanced .= "\t\n"; else echo "\t\n"; } if(isset($pkga['advancedfield']) && $adv_enabled) $advanced .= "\n
\n" . fixup_string($pkga['description']) . "\n"; else echo "\n
\n" . fixup_string($pkga['description']) . "\n"; } else if($pkga['type'] == "vpn_selection") { if(isset($pkga['advancedfield']) && $adv_enabled) { $js_array[] = $pkga['fieldname']; $advanced .= display_advanced_field($pkga['fieldname']); $advanced .= "\n"; $advanced .= "
" . fixup_string($pkga['description']) . "\n"; $advanced .= "\n"; } else { echo "\n"; echo "
" . fixup_string($pkga['description']) . "\n"; } } else if($pkga['type'] == "checkbox") { $checkboxchecked = ""; if($value == "on") $checkboxchecked = " CHECKED"; if (isset($pkga['enablefields']) || isset($pkga['checkenablefields'])) $onclick = ' onclick="javascript:enablechange();"'; if(isset($pkga['advancedfield']) && $adv_enabled) { $js_array[] = $pkga['fieldname']; $advanced .= display_advanced_field($pkga['fieldname']); $advanced .= "\n"; $advanced .= "
" . fixup_string($pkga['description']) . "\n"; $advanced .= "\n"; } else { echo "\n"; echo "
" . fixup_string($pkga['description']) . "\n"; } } else if($pkga['type'] == "textarea") { if($pkga['rows']) $rows = " rows='" . $pkga['rows'] . "' "; if($pkga['cols']) $cols = " cols='" . $pkga['cols'] . "' "; if($pkga['wrap'] == "off") { $wrap = 'wrap="off" style="white-space:nowrap;"'; } else { $wrap = ''; } if (($pkga['encoding'] == 'base64') && !$get_from_post && !empty($value)) $value = base64_decode($value); if(isset($pkga['advancedfield']) && $adv_enabled) { $js_array[] = $pkga['fieldname']; $advanced .= display_advanced_field($pkga['fieldname']); $advanced .= "\n"; $advanced .= "
" . fixup_string($pkga['description']) . "\n"; $advanced .= "\n"; } else { echo "\n"; echo "
" . fixup_string($pkga['description']) . "\n"; } } else if($pkga['type'] == "interfaces_selection") { $size = ($pkga['size'] ? "size=\"{$pkga['size']}\"" : ''); $multiple = ''; $fieldname = $pkga['fieldname']; if (isset($pkga['multiple'])) { $fieldname .= '[]'; $multiple = 'multiple'; } if(isset($pkga['advancedfield']) && $adv_enabled) { $js_array[] = $pkga['fieldname']; $advanced .= display_advanced_field($pkga['fieldname']); $advanced .= "\n"; } $ifaces = get_configured_interface_with_descr(); $additional_ifaces = $pkga['add_to_interfaces_selection']; if (!empty($additional_ifaces)) $ifaces = array_merge($ifaces, explode(',', $additional_ifaces)); if(is_array($value)) $values = $value; else $values = explode(',', $value); foreach($ifaces as $ifname => $iface) { $selected = (in_array($ifname, $values) ? 'selected' : ''); if(isset($pkga['advancedfield']) && $adv_enabled) $advanced .= "\n"; else echo "\n"; } if(isset($pkga['advancedfield']) && $adv_enabled) { $advanced .= "\n
" . fixup_string($pkga['description']) . "\n"; $advanced .= "\n"; } else { echo "\n
" . fixup_string($pkga['description']) . "\n"; } } else if($pkga['type'] == "radio") { if(isset($pkga['advancedfield']) && $adv_enabled) $advanced .= ""; else echo ""; } else if($pkga['type'] == "rowhelper") { ?> " . fixup_string($rowhelper['fielddescr']) . "\n"; } echo ""; echo ""; // XXX: traverse saved fields, add back needed rows. echo ""; echo "\n"; $rowcounter = 0; $trc = 0; if(isset($a_pkg[$id]['row'])) { foreach($a_pkg[$id]['row'] as $row) { /* * loop through saved data for record if it exists, populating rowhelper */ foreach($pkga['rowhelper']['rowhelperfield'] as $rowhelper) { unset($value); if($rowhelper['value'] <> "") $value = $rowhelper['value']; $fieldname = $rowhelper['fieldname']; // if user is editing a record, load in the data. if (isset($id) && $a_pkg[$id]) { $value = $row[$fieldname]; } $options = ""; $type = $rowhelper['type']; $fieldname = $rowhelper['fieldname']; if($type == "option") $options = &$rowhelper['options']['option']; if($rowhelper['size']) $size = $rowhelper['size']; else if ($pkga['size']) $size = $pkga['size']; else $size = "8"; display_row($rowcounter, $value, $fieldname, $type, $rowhelper, $size); // javascript helpers for row_helper_dynamic.js echo "\n"; echo "\n"; $text = ""; $trc++; } $rowcounter++; echo "\n"; echo "\n"; } } if($trc == 0) { /* * no records loaded. * just show a generic line non-populated with saved data */ foreach($pkga['rowhelper']['rowhelperfield'] as $rowhelper) { if($rowhelper['value'] <> "") $value = $rowhelper['value']; $fieldname = $rowhelper['fieldname']; $options = ""; $type = $rowhelper['type']; $fieldname = $rowhelper['fieldname']; if($type == "option") $options = &$rowhelper['options']['option']; if($rowhelper['size'] <> "") $size = $rowhelper['size']; else if ($pkga['size']) $size = $pkga['size']; else $size = 8; display_row($rowcounter, $value, $fieldname, $type, $rowhelper, $size); // javascript helpers for row_helper_dynamic.js echo "\n"; echo "\n"; $text = ""; $trc++; } $rowcounter++; echo "\n"; echo "\n"; } ?>
"; echo ""; echo "
"; echo ""; echo "


 
  " . gettext("Note") . ": {$pkg['note']}

"; //if (isset($id) && $a_pkg[$id]) // We'll always have a valid ID in our hands echo ""; ?> " onclick="history.back()">
  " onclick="history.back()">
\n"; foreach($js_array as $advfieldname) { echo "function show_" . $advfieldname . "() {\n"; echo "document.getElementById('showadv_{$advfieldname}').innerHTML='';\n"; echo "aodiv = document.getElementById('show_{$advfieldname}');\n"; echo "aodiv.style.display = 'block';\n"; echo "}\n\n"; } echo "\n"; } ?> \n"; if($type == "input") { echo "\n"; } else if($type == "checkbox") { if($value) echo "\n"; else echo "\n"; } else if($type == "password") { echo "\n"; } else if($type == "textarea") { echo "\n"; } else if($type == "select") { echo "\n"; } else if($type == "select_source") { echo "\n"; } } function fixup_string($string) { global $config; // fixup #1: $myurl -> http[s]://ip_address:port/ $https = ""; $port = $config['system']['webguiport']; if($port <> "443" and $port <> "80") $urlport = ":" . $port; else $urlport = ""; if($config['system']['webgui']['protocol'] == "https") $https = "s"; $myurl = "http" . $https . "://" . getenv("HTTP_HOST") . $urlport; $newstring = str_replace("\$myurl", $myurl, $string); $string = $newstring; // fixup #2: $wanip $curwanip = get_interface_ip(); $newstring = str_replace("\$wanip", $curwanip, $string); $string = $newstring; // fixup #3: $lanip $lancfg = $config['interfaces']['lan']; $lanip = $lancfg['ipaddr']; $newstring = str_replace("\$lanip", $lanip, $string); $string = $newstring; // fixup #4: fix'r'up here. return $newstring; } /* * Parse templates if they are defined */ function parse_package_templates() { global $pkg, $config; $rows = 0; if($pkg['templates']['template'] <> "") foreach($pkg['templates']['template'] as $pkg_template_row) { $filename = $pkg_template_row['filename']; $template_text = $pkg_template_row['templatecontents']; $firstfield = ""; /* calculate total row helpers count */ foreach ($pkg['fields']['field'] as $fields) { if($fields['type'] == "rowhelper") { // save rowhelper items. $row_helper_total_rows = 0; for($x=0; $x<99; $x++) { // XXX: this really should be passed from the form. foreach($fields['rowhelper']['rowhelperfield'] as $rowhelperfield) { if($firstfield == "") { $firstfield = $rowhelperfield['fieldname']; } else { if($firstfield == $rowhelperfield['fieldname']) $rows++; } $comd = "\$value = \$_POST['" . $rowhelperfield['fieldname'] . $x . "'];"; $value = ""; eval($comd); if($value <> "") { //$template_text = str_replace($fieldname . "_fieldvalue", $fieldvalue, $template_text); } else { $row_helper_total_rows = $rows; break; } } } } } /* replace $domain_total_rows with total rows */ $template_text = str_replace("$domain_total_rows", $row_helper_total_rows, $template_text); /* change fields defined as fieldname_fieldvalue to their value */ foreach ($pkg['fields']['field'] as $fields) { if($fields['type'] == "rowhelper") { // save rowhelper items. for($x=0; $x<99; $x++) { // XXX: this really should be passed from the form. $row_helper_data = ""; $isfirst = 0; foreach($fields['rowhelper']['rowhelperfield'] as $rowhelperfield) { if($firstfield == "") { $firstfield = $rowhelperfield['fieldname']; } else { if($firstfield == $rowhelperfield['fieldname']) $rows++; } $comd = "\$value = \$_POST['" . $rowhelperfield['fieldname'] . $x . "'];"; eval($comd); if($value <> "") { if($isfirst == 1) $row_helper_data .= " " ; $row_helper_data .= $value; $isfirst = 1; } $sep = ""; ereg($rowhelperfield['fieldname'] . "_fieldvalue\[(.*)\]", $template_text, $sep); foreach ($sep as $se) $seperator = $se; if($seperator <> "") { $row_helper_data = ereg_replace(" ", $seperator, $row_helper_data); $template_text = ereg_replace("\[" . $seperator . "\]", "", $template_text); } $template_text = str_replace($rowhelperfield['fieldname'] . "_fieldvalue", $row_helper_data, $template_text); } } } else { $fieldname = $fields['fieldname']; $fieldvalue = $_POST[$fieldname]; $template_text = str_replace($fieldname . "_fieldvalue", $fieldvalue, $template_text); } } /* replace cr's */ $template_text = str_replace("\\n", "\n", $template_text); /* write out new template file */ $fout = fopen($filename,"w"); fwrite($fout, $template_text); fclose($fout); } } /* Return html div fields */ function display_advanced_field($fieldname) { $div = "
\n"; $div .= " - " . gettext("Show advanced option") ."
\n"; $div .= "