mdserver-web/class/core/config_api.py

# coding: utf-8

import psutil
import time
import os
import sys
import public
import re
import json
import pwd

from flask import session
from flask import request


class config_api:

    __version = '0.0.5'

    def __init__(self):
        pass

    ##### ----- start ----- ###

    def syncDateApi(self):
        if public.isAppleSystem():
            return public.returnJson(True, '开发系统不必同步时间!')

        data = public.execShell('ntpdate -s time.nist.gov')
        if data[0] == '':
            return public.returnJson(True, '同步成功!')
        return public.returnJson(False, '同步失败:' + data[0])

    def setPasswordApi(self):
        password1 = request.form.get('password1', '')
        password2 = request.form.get('password2', '')
        if password1 != password2:
            return public.returnJson(False, '两次输入的密码不一致，请重新输入!')
        if len(password1) < 5:
            return public.returnJson(False, '用户密码不能小于5位!')
        public.M('users').where("username=?", (session['username'],)).setField(
            'password', public.md5(password1.strip()))
        return public.returnJson(True, '密码修改成功!')

    def setNameApi(self):
        name1 = request.form.get('name1', '')
        name2 = request.form.get('name2', '')
        if name1 != name2:
            return public.returnJson(False, '两次输入的用户名不一致，请重新输入!')
        if len(name1) < 3:
            return public.returnJson(False, '用户名长度不能少于3位')

        public.M('users').where("username=?", (session['username'],)).setField(
            'username', name1.strip())

        session['username'] = name1
        return public.returnJson(True, '用户修改成功!')

    def setApi(self):
        webname = request.form.get('webname', '')
        port = request.form.get('port', '')
        host_ip = request.form.get('host_ip', '')
        domain = request.form.get('domain', '')
        sites_path = request.form.get('sites_path', '')
        backup_path = request.form.get('backup_path', '')

        if domain != '':
            reg = "^([\w\-\*]{1,100}\.){1,4}(\w{1,10}|\w{1,10}\.\w{1,10})$"
            if not re.match(reg, domain):
                return public.returnJson(False, '主域名格式不正确')

        if int(port) >= 65535 or int(port) < 100:
            return public.returnJson(False, '端口范围不正确!')

        if webname != public.getConfig('title'):
            public.setConfig('title', webname)

        if sites_path != public.getWwwDir():
            public.setWwwDir(sites_path)

        if backup_path != public.getWwwDir():
            public.setBackupDir(backup_path)

        if port != public.getHostPort():
            import system_api
            public.setHostPort(port)
            system_api.system_api().restartMw()

        if host_ip != public.getHostAddr():
            public.setHostAddr(host_ip)

        mhost = public.getHostAddr()
        info = {
            'uri': '/config',
            'host': mhost + ':' + port
        }
        return public.returnJson(True, '保存成功!', info)

    def setAdminPathApi(self):
        admin_path = request.form.get('admin_path', '').strip()
        admin_path_checks = ['/', '/close', '/login', '/site',
                             '/sites',
                             '/download_file', '/control',
                             '/crontab', '/firewall', '/files',
                             'config', '/soft', '/ajax',
                             '/system', '/code',
                             '/ssl', '/plugin']
        if admin_path == '':
            admin_path = '/'
        if admin_path != '/':
            if len(admin_path) < 6:
                return public.returnJson(False, '安全入口地址长度不能小于6位!')
            if admin_path in admin_path_checks:
                return public.returnJson(False, '该入口已被面板占用,请使用其它入口!')
            if not re.match("^/[\w\./-_]+$", admin_path):
                return public.returnJson(False, '入口地址格式不正确,示例: /my_panel')
        else:
            domain = public.readFile('data/domain.conf')
            if not domain:
                domain = ''
            limitip = public.readFile('data/limitip.conf')
            if not limitip:
                limitip = ''
            if not domain.strip() and not limitip.strip():
                return public.returnJson(False, '警告，关闭安全入口等于直接暴露你的后台地址在外网，十分危险，至少开启以下一种安全方式才能关闭：<a style="color:red;"><br>1、绑定访问域名<br>2、绑定授权IP</a>')

        admin_path_file = 'data/admin_path.pl'
        admin_path_old = '/'
        if os.path.exists(admin_path_file):
            admin_path_old = public.readFile(admin_path_file).strip()

        if admin_path_old != admin_path:
            public.writeFile(admin_path_file, admin_path)
            public.restartMw()
        return public.returnJson(True, '修改成功!')

    def closePanelApi(self):
        filename = 'data/close.pl'
        if os.path.exists(filename):
            os.remove(filename)
            return public.returnJson(True, '开启成功')
        public.writeFile(filename, 'True')
        public.execShell("chmod 600 " + filename)
        public.execShell("chown root.root " + filename)
        return public.returnJson(True, '面板已关闭!')

    ##### ----- end ----- ###

    def getVersion(self):
        return self.__version

    def get(self):

        data = {}
        data['title'] = public.getConfig('title')
        data['site_path'] = public.getWwwDir()
        data['backup_path'] = public.getBackupDir()
        sformat = 'date +"%Y-%m-%d %H:%M:%S %Z %z"'
        data['systemdate'] = public.execShell(sformat)[0].strip()

        data['port'] = public.getHostPort()
        data['ip'] = public.getHostAddr()

        admin_path_file = 'data/admin_path.pl'
        if not os.path.exists(admin_path_file):
            data['admin_path'] = '/'
        else:
            data['admin_path'] = public.readFile(admin_path_file)

        data['username'] = public.M('users').where(
            "id=?", (1,)).getField('username')

        return data