You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
489 lines
13 KiB
PHP
489 lines
13 KiB
PHP
<?php
|
|
|
|
/**
|
|
* DirectAdmin Password Driver
|
|
*
|
|
* Driver to change passwords via DirectAdmin Control Panel
|
|
*
|
|
* @version 2.1
|
|
* @author Victor Benincasa <vbenincasa@gmail.com>
|
|
*
|
|
*/
|
|
|
|
class rcube_directadmin_password
|
|
{
|
|
public function save($curpass, $passwd)
|
|
{
|
|
$rcmail = rcmail::get_instance();
|
|
$Socket = new HTTPSocket;
|
|
|
|
$da_user = $_SESSION['username'];
|
|
$da_curpass = $curpass;
|
|
$da_newpass = $passwd;
|
|
$da_host = $rcmail->config->get('password_directadmin_host');
|
|
$da_port = $rcmail->config->get('password_directadmin_port');
|
|
|
|
if (strpos($da_user, '@') === false) {
|
|
return array('code' => PASSWORD_ERROR, 'message' => 'Change the SYSTEM user password through control panel!');
|
|
}
|
|
|
|
$da_host = str_replace('%h', $_SESSION['imap_host'], $da_host);
|
|
$da_host = str_replace('%d', $rcmail->user->get_username('domain'), $da_host);
|
|
|
|
$Socket->connect($da_host,$da_port);
|
|
$Socket->set_method('POST');
|
|
$Socket->query('/CMD_CHANGE_EMAIL_PASSWORD',
|
|
array(
|
|
'email' => $da_user,
|
|
'oldpassword' => $da_curpass,
|
|
'password1' => $da_newpass,
|
|
'password2' => $da_newpass,
|
|
'api' => '1'
|
|
));
|
|
$response = $Socket->fetch_parsed_body();
|
|
|
|
//DEBUG
|
|
//rcube::console("Password Plugin: [USER: $da_user] [HOST: $da_host] - Response: [SOCKET: ".$Socket->result_status_code."] [DA ERROR: ".strip_tags($response['error'])."] [TEXT: ".$response[text]."]");
|
|
|
|
if($Socket->result_status_code != 200)
|
|
return array('code' => PASSWORD_CONNECT_ERROR, 'message' => $Socket->error[0]);
|
|
elseif($response['error'] == 1)
|
|
return array('code' => PASSWORD_ERROR, 'message' => strip_tags($response['text']));
|
|
else
|
|
return PASSWORD_SUCCESS;
|
|
}
|
|
}
|
|
|
|
|
|
/**
|
|
* Socket communication class.
|
|
*
|
|
* Originally designed for use with DirectAdmin's API, this class will fill any HTTP socket need.
|
|
*
|
|
* Very, very basic usage:
|
|
* $Socket = new HTTPSocket;
|
|
* echo $Socket->get('http://user:pass@somehost.com:2222/CMD_API_SOMEAPI?query=string&this=that');
|
|
*
|
|
* @author Phi1 'l0rdphi1' Stier <l0rdphi1@liquenox.net>
|
|
* @updates 2.7 and 2.8 by Victor Benincasa <vbenincasa @ gmail.com>
|
|
* @package HTTPSocket
|
|
* @version 2.8
|
|
*/
|
|
class HTTPSocket {
|
|
|
|
var $version = '2.8';
|
|
|
|
/* all vars are private except $error, $query_cache, and $doFollowLocationHeader */
|
|
|
|
var $method = 'GET';
|
|
|
|
var $remote_host;
|
|
var $remote_port;
|
|
var $remote_uname;
|
|
var $remote_passwd;
|
|
|
|
var $result;
|
|
var $result_header;
|
|
var $result_body;
|
|
var $result_status_code;
|
|
|
|
var $lastTransferSpeed;
|
|
|
|
var $bind_host;
|
|
|
|
var $error = array();
|
|
var $warn = array();
|
|
var $query_cache = array();
|
|
|
|
var $doFollowLocationHeader = TRUE;
|
|
var $redirectURL;
|
|
|
|
var $extra_headers = array();
|
|
|
|
/**
|
|
* Create server "connection".
|
|
*
|
|
*/
|
|
function connect($host, $port = '' )
|
|
{
|
|
if (!is_numeric($port))
|
|
{
|
|
$port = 2222;
|
|
}
|
|
|
|
$this->remote_host = $host;
|
|
$this->remote_port = $port;
|
|
}
|
|
|
|
function bind( $ip = '' )
|
|
{
|
|
if ( $ip == '' )
|
|
{
|
|
$ip = $_SERVER['SERVER_ADDR'];
|
|
}
|
|
|
|
$this->bind_host = $ip;
|
|
}
|
|
|
|
/**
|
|
* Change the method being used to communicate.
|
|
*
|
|
* @param string|null request method. supports GET, POST, and HEAD. default is GET
|
|
*/
|
|
function set_method( $method = 'GET' )
|
|
{
|
|
$this->method = strtoupper($method);
|
|
}
|
|
|
|
/**
|
|
* Specify a username and password.
|
|
*
|
|
* @param string|null username. defualt is null
|
|
* @param string|null password. defualt is null
|
|
*/
|
|
function set_login( $uname = '', $passwd = '' )
|
|
{
|
|
if ( strlen($uname) > 0 )
|
|
{
|
|
$this->remote_uname = $uname;
|
|
}
|
|
|
|
if ( strlen($passwd) > 0 )
|
|
{
|
|
$this->remote_passwd = $passwd;
|
|
}
|
|
|
|
}
|
|
|
|
/**
|
|
* Query the server
|
|
*
|
|
* @param string containing properly formatted server API. See DA API docs and examples. Http:// URLs O.K. too.
|
|
* @param string|array query to pass to url
|
|
* @param int if connection KB/s drops below value here, will drop connection
|
|
*/
|
|
function query( $request, $content = '', $doSpeedCheck = 0 )
|
|
{
|
|
$this->error = $this->warn = array();
|
|
$this->result_status_code = NULL;
|
|
|
|
// is our request a http(s):// ... ?
|
|
if (preg_match('/^(http|https):\/\//i',$request))
|
|
{
|
|
$location = parse_url($request);
|
|
$this->connect($location['host'],$location['port']);
|
|
$this->set_login($location['user'],$location['pass']);
|
|
|
|
$request = $location['path'];
|
|
$content = $location['query'];
|
|
|
|
if ( strlen($request) < 1 )
|
|
{
|
|
$request = '/';
|
|
}
|
|
|
|
}
|
|
|
|
$array_headers = array(
|
|
'User-Agent' => "HTTPSocket/$this->version",
|
|
'Host' => ( $this->remote_port == 80 ? parse_url($this->remote_host,PHP_URL_HOST) : parse_url($this->remote_host,PHP_URL_HOST).":".$this->remote_port ),
|
|
'Accept' => '*/*',
|
|
'Connection' => 'Close' );
|
|
|
|
foreach ( $this->extra_headers as $key => $value )
|
|
{
|
|
$array_headers[$key] = $value;
|
|
}
|
|
|
|
$this->result = $this->result_header = $this->result_body = '';
|
|
|
|
// was content sent as an array? if so, turn it into a string
|
|
if (is_array($content))
|
|
{
|
|
$pairs = array();
|
|
|
|
foreach ( $content as $key => $value )
|
|
{
|
|
$pairs[] = "$key=".urlencode($value);
|
|
}
|
|
|
|
$content = join('&',$pairs);
|
|
unset($pairs);
|
|
}
|
|
|
|
$OK = TRUE;
|
|
|
|
// instance connection
|
|
if ($this->bind_host)
|
|
{
|
|
$socket = socket_create(AF_INET, SOCK_STREAM, SOL_TCP);
|
|
socket_bind($socket,$this->bind_host);
|
|
|
|
if (!@socket_connect($socket,$this->remote_host,$this->remote_port))
|
|
{
|
|
$OK = FALSE;
|
|
}
|
|
|
|
}
|
|
else
|
|
{
|
|
$socket = @fsockopen( $this->remote_host, $this->remote_port, $sock_errno, $sock_errstr, 10 );
|
|
}
|
|
|
|
if ( !$socket || !$OK )
|
|
{
|
|
$this->error[] = "Can't create socket connection to $this->remote_host:$this->remote_port.";
|
|
return 0;
|
|
}
|
|
|
|
// if we have a username and password, add the header
|
|
if ( isset($this->remote_uname) && isset($this->remote_passwd) )
|
|
{
|
|
$array_headers['Authorization'] = 'Basic '.base64_encode("$this->remote_uname:$this->remote_passwd");
|
|
}
|
|
|
|
// for DA skins: if $this->remote_passwd is NULL, try to use the login key system
|
|
if ( isset($this->remote_uname) && $this->remote_passwd == NULL )
|
|
{
|
|
$array_headers['Cookie'] = "session={$_SERVER['SESSION_ID']}; key={$_SERVER['SESSION_KEY']}";
|
|
}
|
|
|
|
// if method is POST, add content length & type headers
|
|
if ( $this->method == 'POST' )
|
|
{
|
|
$array_headers['Content-type'] = 'application/x-www-form-urlencoded';
|
|
$array_headers['Content-length'] = strlen($content);
|
|
}
|
|
// else method is GET or HEAD. we don't support anything else right now.
|
|
else
|
|
{
|
|
if ($content)
|
|
{
|
|
$request .= "?$content";
|
|
}
|
|
}
|
|
|
|
// prepare query
|
|
$query = "$this->method $request HTTP/1.0\r\n";
|
|
foreach ( $array_headers as $key => $value )
|
|
{
|
|
$query .= "$key: $value\r\n";
|
|
}
|
|
$query .= "\r\n";
|
|
|
|
// if POST we need to append our content
|
|
if ( $this->method == 'POST' && $content )
|
|
{
|
|
$query .= "$content\r\n\r\n";
|
|
}
|
|
|
|
// query connection
|
|
if ($this->bind_host)
|
|
{
|
|
socket_write($socket,$query);
|
|
|
|
// now load results
|
|
while ( $out = socket_read($socket,2048) )
|
|
{
|
|
$this->result .= $out;
|
|
}
|
|
}
|
|
else
|
|
{
|
|
fwrite( $socket, $query, strlen($query) );
|
|
|
|
// now load results
|
|
$this->lastTransferSpeed = 0;
|
|
$status = socket_get_status($socket);
|
|
$startTime = time();
|
|
$length = 0;
|
|
while ( !feof($socket) && !$status['timed_out'] )
|
|
{
|
|
$chunk = fgets($socket,1024);
|
|
$length += strlen($chunk);
|
|
$this->result .= $chunk;
|
|
|
|
$elapsedTime = time() - $startTime;
|
|
|
|
if ( $elapsedTime > 0 )
|
|
{
|
|
$this->lastTransferSpeed = ($length/1024)/$elapsedTime;
|
|
}
|
|
|
|
if ( $doSpeedCheck > 0 && $elapsedTime > 5 && $this->lastTransferSpeed < $doSpeedCheck )
|
|
{
|
|
$this->warn[] = "kB/s for last 5 seconds is below 50 kB/s (~".( ($length/1024)/$elapsedTime )."), dropping connection...";
|
|
$this->result_status_code = 503;
|
|
break;
|
|
}
|
|
|
|
}
|
|
|
|
if ( $this->lastTransferSpeed == 0 )
|
|
{
|
|
$this->lastTransferSpeed = $length/1024;
|
|
}
|
|
|
|
}
|
|
|
|
list($this->result_header,$this->result_body) = preg_split("/\r\n\r\n/",$this->result,2);
|
|
|
|
if ($this->bind_host)
|
|
{
|
|
socket_close($socket);
|
|
}
|
|
else
|
|
{
|
|
fclose($socket);
|
|
}
|
|
|
|
$this->query_cache[] = $query;
|
|
|
|
|
|
$headers = $this->fetch_header();
|
|
|
|
// what return status did we get?
|
|
if (!$this->result_status_code)
|
|
{
|
|
preg_match("#HTTP/1\.. (\d+)#",$headers[0],$matches);
|
|
$this->result_status_code = $matches[1];
|
|
}
|
|
|
|
// did we get the full file?
|
|
if ( !empty($headers['content-length']) && $headers['content-length'] != strlen($this->result_body) )
|
|
{
|
|
$this->result_status_code = 206;
|
|
}
|
|
|
|
// now, if we're being passed a location header, should we follow it?
|
|
if ($this->doFollowLocationHeader)
|
|
{
|
|
if ($headers['location'])
|
|
{
|
|
$this->redirectURL = $headers['location'];
|
|
$this->query($headers['location']);
|
|
}
|
|
}
|
|
}
|
|
|
|
function getTransferSpeed()
|
|
{
|
|
return $this->lastTransferSpeed;
|
|
}
|
|
|
|
/**
|
|
* The quick way to get a URL's content :)
|
|
*
|
|
* @param string URL
|
|
* @param boolean return as array? (like PHP's file() command)
|
|
* @return string result body
|
|
*/
|
|
function get($location, $asArray = FALSE )
|
|
{
|
|
$this->query($location);
|
|
|
|
if ( $this->get_status_code() == 200 )
|
|
{
|
|
if ($asArray)
|
|
{
|
|
return preg_split("/\n/",$this->fetch_body());
|
|
}
|
|
|
|
return $this->fetch_body();
|
|
}
|
|
|
|
return FALSE;
|
|
}
|
|
|
|
/**
|
|
* Returns the last status code.
|
|
* 200 = OK;
|
|
* 403 = FORBIDDEN;
|
|
* etc.
|
|
*
|
|
* @return int status code
|
|
*/
|
|
function get_status_code()
|
|
{
|
|
return $this->result_status_code;
|
|
}
|
|
|
|
/**
|
|
* Adds a header, sent with the next query.
|
|
*
|
|
* @param string header name
|
|
* @param string header value
|
|
*/
|
|
function add_header($key,$value)
|
|
{
|
|
$this->extra_headers[$key] = $value;
|
|
}
|
|
|
|
/**
|
|
* Clears any extra headers.
|
|
*
|
|
*/
|
|
function clear_headers()
|
|
{
|
|
$this->extra_headers = array();
|
|
}
|
|
|
|
/**
|
|
* Return the result of a query.
|
|
*
|
|
* @return string result
|
|
*/
|
|
function fetch_result()
|
|
{
|
|
return $this->result;
|
|
}
|
|
|
|
/**
|
|
* Return the header of result (stuff before body).
|
|
*
|
|
* @param string (optional) header to return
|
|
* @return array result header
|
|
*/
|
|
function fetch_header( $header = '' )
|
|
{
|
|
$array_headers = preg_split("/\r\n/",$this->result_header);
|
|
$array_return = array( 0 => $array_headers[0] );
|
|
unset($array_headers[0]);
|
|
|
|
foreach ( $array_headers as $pair )
|
|
{
|
|
list($key,$value) = preg_split("/: /",$pair,2);
|
|
$array_return[strtolower($key)] = $value;
|
|
}
|
|
|
|
if ( $header != '' )
|
|
{
|
|
return $array_return[strtolower($header)];
|
|
}
|
|
|
|
return $array_return;
|
|
}
|
|
|
|
/**
|
|
* Return the body of result (stuff after header).
|
|
*
|
|
* @return string result body
|
|
*/
|
|
function fetch_body()
|
|
{
|
|
return $this->result_body;
|
|
}
|
|
|
|
/**
|
|
* Return parsed body in array format.
|
|
*
|
|
* @return array result parsed
|
|
*/
|
|
function fetch_parsed_body()
|
|
{
|
|
parse_str($this->result_body,$x);
|
|
return $x;
|
|
}
|
|
|
|
}
|