mirror of https://github.com/midoks/mdserver-web
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
399 lines
15 KiB
399 lines
15 KiB
# coding: utf-8
|
|
|
|
import psutil
|
|
import time
|
|
import os
|
|
import sys
|
|
import public
|
|
import re
|
|
import json
|
|
import pwd
|
|
|
|
|
|
class site_api:
|
|
siteName = None # 网站名称
|
|
sitePath = None # 根目录
|
|
sitePort = None # 端口
|
|
phpVersion = None # PHP版本
|
|
setupPath = None # 安装路径
|
|
isWriteLogs = None # 是否写日志
|
|
|
|
def __init__(self):
|
|
self.setupPath = public.getServerDir()
|
|
path = self.setupPath + '/openresty/nginx/conf/vhost'
|
|
if not os.path.exists(path):
|
|
public.execShell("mkdir -p " + path + " && chmod -R 755 " + path)
|
|
path = self.setupPath + '/openresty/nginx/conf/rewrite'
|
|
if not os.path.exists(path):
|
|
public.execShell("mkdir -p " + path + " && chmod -R 755 " + path)
|
|
|
|
# 域名编码转换
|
|
def toPunycode(self, domain):
|
|
import re
|
|
if sys.version_info[0] == 2:
|
|
domain = domain.encode('utf8')
|
|
tmp = domain.split('.')
|
|
newdomain = ''
|
|
for dkey in tmp:
|
|
# 匹配非ascii字符
|
|
match = re.search(u"[\x80-\xff]+", dkey)
|
|
if not match:
|
|
newdomain += dkey + '.'
|
|
else:
|
|
newdomain += 'xn--' + \
|
|
dkey.decode('utf-8').encode('punycode') + '.'
|
|
return newdomain[0:-1]
|
|
|
|
# 中文路径处理
|
|
def toPunycodePath(self, path):
|
|
if sys.version_info[0] == 2:
|
|
path = path.encode('utf-8')
|
|
if os.path.exists(path):
|
|
return path
|
|
import re
|
|
match = re.search(u"[\x80-\xff]+", path)
|
|
if not match:
|
|
return path
|
|
npath = ''
|
|
for ph in path.split('/'):
|
|
npath += '/' + self.toPunycode(ph)
|
|
return npath.replace('//', '/')
|
|
|
|
# 路径处理
|
|
def getPath(self, path):
|
|
if path[-1] == '/':
|
|
return path[0:-1]
|
|
return path
|
|
|
|
def getHostConf(self, siteName):
|
|
return public.getServerDir() + '/openresty/nginx/conf/vhost/' + siteName + '.conf'
|
|
|
|
def getRewriteConf(self, siteName):
|
|
return public.getServerDir() + '/openresty/nginx/conf/rewrite/' + siteName + '.conf'
|
|
|
|
def getIndexConf(self):
|
|
return public.getServerDir() + '/openresty/nginx/conf/nginx.conf'
|
|
|
|
def list(self):
|
|
_list = public.M('sites').where('', ()).field(
|
|
'id,name,path,status,ps,addtime,edate').limit('0,5').order('id desc').select()
|
|
_ret = {}
|
|
_ret['data'] = _list
|
|
|
|
count = public.M('sites').where('', ()).count()
|
|
_page = {}
|
|
_page['count'] = count
|
|
_page['tojs'] = 'getWeb'
|
|
|
|
_ret['page'] = public.getPage(_page)
|
|
return public.getJson(_ret)
|
|
|
|
def getDomain(self, pid):
|
|
_list = public.M('domain').where("pid=?", (pid,)).field(
|
|
'id,pid,name,port,addtime').select()
|
|
return public.getJson(_list)
|
|
|
|
def getLogs(self, siteName):
|
|
logPath = public.getLogsDir() + '/' + siteName + '.log'
|
|
if not os.path.exists(logPath):
|
|
return public.returnJson(False, '日志为空')
|
|
return public.returnJson(True, public.getNumLines(logPath, 1000))
|
|
|
|
def getSitePhpVersion(self, siteName):
|
|
conf = public.readFile(self.getHostConf(siteName))
|
|
rep = "enable-php-([0-9]{2,3})\.conf"
|
|
tmp = re.search(rep, conf).groups()
|
|
data = {}
|
|
data['phpversion'] = tmp[0]
|
|
return public.getJson(data)
|
|
|
|
def getIndex(self, sid):
|
|
print sid
|
|
siteName = public.M('sites').where("id=?", (sid,)).getField('name')
|
|
file = self.getHostConf(siteName)
|
|
conf = public.readFile(file)
|
|
rep = "\s+index\s+(.+);"
|
|
tmp = re.search(rep, conf).groups()
|
|
return tmp[0].replace(' ', ',')
|
|
|
|
def setIndex(self, sid, index):
|
|
if index.find('.') == -1:
|
|
return public.returnJson(False, '默认文档格式不正确，例：index.html')
|
|
|
|
index = index.replace(' ', '')
|
|
index = index.replace(',,', ',')
|
|
|
|
if len(index) < 3:
|
|
return public.returnJson(False, '默认文档不能为空!')
|
|
|
|
siteName = public.M('sites').where("id=?", (sid,)).getField('name')
|
|
index_l = index.replace(",", " ")
|
|
file = self.getHostConf(siteName)
|
|
conf = public.readFile(file)
|
|
if conf:
|
|
rep = "\s+index\s+.+;"
|
|
conf = re.sub(rep, "\n\tindex " + index_l + ";", conf)
|
|
public.writeFile(file, conf)
|
|
|
|
public.writeLog('TYPE_SITE', 'SITE_INDEX_SUCCESS', (siteName, index_l))
|
|
return public.returnJson(True, '设置成功!')
|
|
|
|
def getLimitNet(self, sid):
|
|
siteName = public.M('sites').where("id=?", (sid,)).getField('name')
|
|
filename = self.getHostConf(siteName)
|
|
# 站点总并发
|
|
data = {}
|
|
conf = public.readFile(filename)
|
|
try:
|
|
rep = "\s+limit_conn\s+perserver\s+([0-9]+);"
|
|
tmp = re.search(rep, conf).groups()
|
|
data['perserver'] = int(tmp[0])
|
|
|
|
# IP并发限制
|
|
rep = "\s+limit_conn\s+perip\s+([0-9]+);"
|
|
tmp = re.search(rep, conf).groups()
|
|
data['perip'] = int(tmp[0])
|
|
|
|
# 请求并发限制
|
|
rep = "\s+limit_rate\s+([0-9]+)\w+;"
|
|
tmp = re.search(rep, conf).groups()
|
|
data['limit_rate'] = int(tmp[0])
|
|
except:
|
|
data['perserver'] = 0
|
|
data['perip'] = 0
|
|
data['limit_rate'] = 0
|
|
|
|
return public.getJson(data)
|
|
|
|
def checkIndexConf(self):
|
|
limit = self.getIndexConf()
|
|
nginxConf = public.readFile(limit)
|
|
limitConf = "limit_conn_zone $binary_remote_addr zone=perip:10m;\n\t\tlimit_conn_zone $server_name zone=perserver:10m;"
|
|
nginxConf = nginxConf.replace(
|
|
"#limit_conn_zone $binary_remote_addr zone=perip:10m;", limitConf)
|
|
public.writeFile(limit, nginxConf)
|
|
|
|
def saveLimitNet(self, sid, perserver, perip, limit_rate):
|
|
|
|
str_perserver = 'limit_conn perserver ' + perserver + ';'
|
|
str_perip = 'limit_conn perip ' + perip + ';'
|
|
str_limit_rate = 'limit_rate ' + limit_rate + 'k;'
|
|
|
|
siteName = public.M('sites').where("id=?", (sid,)).getField('name')
|
|
filename = self.getHostConf(siteName)
|
|
|
|
conf = public.readFile(filename)
|
|
if(conf.find('limit_conn perserver') != -1):
|
|
# 替换总并发
|
|
rep = "limit_conn\s+perserver\s+([0-9]+);"
|
|
conf = re.sub(rep, str_perserver, conf)
|
|
|
|
# 替换IP并发限制
|
|
rep = "limit_conn\s+perip\s+([0-9]+);"
|
|
conf = re.sub(rep, str_perip, conf)
|
|
|
|
# 替换请求流量限制
|
|
rep = "limit_rate\s+([0-9]+)\w+;"
|
|
conf = re.sub(rep, str_limit_rate, conf)
|
|
else:
|
|
conf = conf.replace('#error_page 404/404.html;', "#error_page 404/404.html;\n " +
|
|
str_perserver + "\n " + str_perip + "\n " + str_limit_rate)
|
|
|
|
public.writeFile(filename, conf)
|
|
public.restartWeb()
|
|
public.writeLog('TYPE_SITE', 'SITE_NETLIMIT_OPEN_SUCCESS', (siteName,))
|
|
return public.returnJson(True, '设置成功!')
|
|
|
|
def closeLimitNet(self, sid):
|
|
siteName = public.M('sites').where("id=?", (sid,)).getField('name')
|
|
filename = self.getHostConf(siteName)
|
|
conf = public.readFile(filename)
|
|
# 清理总并发
|
|
rep = "\s+limit_conn\s+perserver\s+([0-9]+);"
|
|
conf = re.sub(rep, '', conf)
|
|
|
|
# 清理IP并发限制
|
|
rep = "\s+limit_conn\s+perip\s+([0-9]+);"
|
|
conf = re.sub(rep, '', conf)
|
|
|
|
# 清理请求流量限制
|
|
rep = "\s+limit_rate\s+([0-9]+)\w+;"
|
|
conf = re.sub(rep, '', conf)
|
|
public.writeFile(filename, conf)
|
|
public.restartWeb()
|
|
public.writeLog(
|
|
'TYPE_SITE', 'SITE_NETLIMIT_CLOSE_SUCCESS', (siteName,))
|
|
return public.returnJson(True, '已关闭流量限制!')
|
|
|
|
def getSecurity(self, sid, name):
|
|
filename = self.getHostConf(name)
|
|
conf = public.readFile(filename)
|
|
data = {}
|
|
if conf.find('SECURITY-START') != -1:
|
|
rep = "#SECURITY-START(\n|.){1,500}#SECURITY-END"
|
|
tmp = re.search(rep, conf).group()
|
|
data['fix'] = re.search(
|
|
"\(.+\)\$", tmp).group().replace('(', '').replace(')$', '').replace('|', ',')
|
|
data['domains'] = ','.join(re.search(
|
|
"valid_referers\s+none\s+blocked\s+(.+);\n", tmp).groups()[0].split())
|
|
data['status'] = True
|
|
else:
|
|
data['fix'] = 'jpg,jpeg,gif,png,js,css'
|
|
domains = public.M('domain').where(
|
|
'pid=?', (sid,)).field('name').select()
|
|
tmp = []
|
|
for domain in domains:
|
|
tmp.append(domain['name'])
|
|
data['domains'] = ','.join(tmp)
|
|
data['status'] = False
|
|
return public.getJson(data)
|
|
|
|
def setSecurity(self, sid, name, fix, domains, status):
|
|
if len(fix) < 2:
|
|
return public.returnJson(False, 'URL后缀不能为空!')
|
|
file = self.getHostConf(name)
|
|
if os.path.exists(file):
|
|
conf = public.readFile(file)
|
|
if conf.find('SECURITY-START') != -1:
|
|
rep = "\s{0,4}#SECURITY-START(\n|.){1,500}#SECURITY-END\n?"
|
|
conf = re.sub(rep, '', conf)
|
|
public.writeLog('网站管理', '站点[' + name + ']已关闭防盗链设置!')
|
|
else:
|
|
rconf = '''#SECURITY-START 防盗链配置
|
|
location ~ .*\.(%s)$
|
|
{
|
|
expires 30d;
|
|
access_log /dev/null;
|
|
valid_referers none blocked %s;
|
|
if ($invalid_referer){
|
|
return 404;
|
|
}
|
|
}
|
|
#SECURITY-END
|
|
include enable-php-''' % (fix.strip().replace(',', '|'), domains.strip().replace(',', ' '))
|
|
conf = re.sub("include\s+enable-php-", rconf, conf)
|
|
public.writeLog('网站管理', '站点[' + name + ']已开启防盗链!')
|
|
public.writeFile(file, conf)
|
|
public.restartWeb()
|
|
return public.returnJson(True, '设置成功!')
|
|
|
|
def getPhpVersion(self):
|
|
phpVersions = ('00', '52', '53', '54', '55',
|
|
'56', '70', '71', '72', '73', '74')
|
|
data = []
|
|
for val in phpVersions:
|
|
tmp = {}
|
|
if val == '00':
|
|
tmp['name'] = '纯静态'
|
|
data.append(tmp)
|
|
|
|
checkPath = public.getServerDir() + '/php/' + val + '/bin/php'
|
|
if os.path.exists(checkPath):
|
|
tmp['version'] = val
|
|
tmp['name'] = 'PHP-' + val
|
|
data.append(tmp)
|
|
|
|
return public.getJson(data)
|
|
|
|
def getRewriteList(self):
|
|
rewriteList = {}
|
|
rewriteList['rewrite'] = []
|
|
rewriteList['rewrite'].append('0.当前')
|
|
for ds in os.listdir('rewrite/nginx'):
|
|
rewriteList['rewrite'].append(ds[0:len(ds) - 5])
|
|
rewriteList['rewrite'] = sorted(rewriteList['rewrite'])
|
|
return rewriteList
|
|
|
|
def createRootDir(self, path):
|
|
if not os.path.exists(path):
|
|
os.makedirs(path)
|
|
if not public.isAppleSystem():
|
|
public.execShell('chown -R www:www ' + path)
|
|
public.execShell('chmod -R 755 ' + path)
|
|
|
|
def addDomain(self, domain, webname, pid):
|
|
pass
|
|
|
|
def nginxAddConf(self):
|
|
source_tpl = public.getRunDir() + '/data/tpl/nginx.conf'
|
|
vhost_file = self.setupPath + '/openresty/nginx/conf/vhost/' + self.siteName + '.conf'
|
|
content = public.readFile(source_tpl)
|
|
|
|
content = content.replace('{$PORT}', self.sitePort)
|
|
content = content.replace('{$SERVER_NAME}', self.siteName)
|
|
content = content.replace('{$ROOT_DIR}', self.sitePath)
|
|
content = content.replace('{$PHPVER}', self.phpVersion)
|
|
|
|
or_rewrite = self.setupPath + '/openresty/nginx/conf/rewrite'
|
|
content = content.replace('{$OR_REWRITE}', or_rewrite)
|
|
|
|
logsPath = public.getLogsDir()
|
|
content = content.replace('{$LOGPATH}', logsPath)
|
|
public.writeFile(vhost_file, content)
|
|
|
|
rewrite_file = self.setupPath + \
|
|
'/openresty/nginx/conf/rewrite/' + self.siteName + '.conf'
|
|
public.writeFile(rewrite_file, '')
|
|
|
|
def add(self, webname, port, ps, path, version):
|
|
|
|
siteMenu = json.loads(webname)
|
|
self.siteName = self.toPunycode(
|
|
siteMenu['domain'].strip().split(':')[0]).strip()
|
|
self.sitePath = self.toPunycodePath(
|
|
self.getPath(path.replace(' ', '')))
|
|
self.sitePort = port.strip().replace(' ', '')
|
|
self.phpVersion = version
|
|
|
|
siteM = public.M('sites')
|
|
if siteM.where("name=?", (self.siteName,)).count():
|
|
return public.returnJson(False, '您添加的站点已存在!')
|
|
|
|
# 写入数据库
|
|
pid = siteM.add('name,path,status,ps,edate,addtime',
|
|
(self.siteName, self.sitePath, '1', ps, '0000-00-00', public.getDate()))
|
|
opid = public.M('domain').where(
|
|
"name=?", (self.siteName,)).getField('pid')
|
|
if opid:
|
|
if public.M('sites').where('id=?', (opid,)).count():
|
|
return public.returnJson(False, '您添加的域名已存在!')
|
|
public.M('domain').where('pid=?', (opid,)).delete()
|
|
|
|
# 添加更多域名
|
|
for domain in siteMenu['domainlist']:
|
|
sdomain = domain
|
|
swebname = self.siteName
|
|
spid = str(get.pid)
|
|
# self.addDomain(domain, webname, pid)
|
|
|
|
public.M('domain').add('pid,name,port,addtime',
|
|
(pid, self.siteName, self.sitePort, public.getDate()))
|
|
|
|
self.createRootDir(self.sitePath)
|
|
|
|
self.nginxAddConf()
|
|
|
|
data = {}
|
|
data['siteStatus'] = False
|
|
public.restartWeb()
|
|
return public.getJson(data)
|
|
|
|
def delete(self, sid, webname):
|
|
|
|
confFile = self.setupPath + '/openresty/nginx/conf/vhost/' + webname + '.conf'
|
|
if os.path.exists(confFile):
|
|
os.remove(confFile)
|
|
|
|
rewriteFile = self.setupPath + '/openresty/nginx/conf/rewrite/' + webname + '.conf'
|
|
if os.path.exists(rewriteFile):
|
|
os.remove(rewriteFile)
|
|
|
|
public.M('sites').where("id=?", (sid,)).delete()
|
|
return public.returnJson(True, '站点删除成功!')
|
|
|
|
def setEndDate(self, sid, edate):
|
|
result = public.M('sites').where(
|
|
'id=?', (sid,)).setField('edate', edate)
|
|
siteName = public.M('sites').where('id=?', (sid,)).getField('name')
|
|
public.writeLog('TYPE_SITE', '设置成功,站点到期后将自动停止!', (siteName, edate))
|
|
return public.returnJson(True, '设置成功,站点到期后将自动停止!')
|
|
|