All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */ /* pfSense_BUILDER_BINARIES: /sbin/ifconfig pfSense_MODULE: pkgs */ ##|+PRIV ##|*IDENT=page-package-edit ##|*NAME=Package: Edit page ##|*DESCR=Allow access to the 'Package: Edit' page. ##|*MATCH=pkg_edit.php* ##|-PRIV ini_set('max_execution_time', '0'); require("guiconfig.inc"); require_once("functions.inc"); require_once("filter.inc"); require_once("shaper.inc"); require_once("pkg-utils.inc"); /* dummy stubs needed by some code that was MFC'd */ function pfSenseHeader($location) { header("Location: " . $location); } function gentitle_pkg($pgname) { global $pfSense_config; return $pfSense_config['system']['hostname'] . "." . $pfSense_config['system']['domain'] . " - " . $pgname; } function domTT_title($title_msg){ if (!empty($title_msg)){ $title_msg=preg_replace("/\s+/"," ",$title_msg); $title_msg=preg_replace("/'/","\'",$title_msg); return "onmouseout=\"this.style.color = ''; domTT_mouseout(this, event);\" onmouseover=\"domTT_activate(this, event, 'content', '{$title_msg}', 'trail', true, 'delay', 0, 'fade', 'both', 'fadeMax', 93, 'styleClass', 'niceTitle');\""; } } $xml = htmlspecialchars($_GET['xml']); if($_POST['xml']) $xml = htmlspecialchars($_POST['xml']); if($xml == "") { print_info_box_np(gettext("ERROR: No package defined.")); die; } else { $pkg = parse_xml_config_pkg("/usr/local/pkg/" . $xml, "packagegui"); } if($pkg['include_file'] <> "") { require_once($pkg['include_file']); } if (!isset($pkg['adddeleteeditpagefields'])) $only_edit = true; else $only_edit = false; $package_name = $pkg['menu'][0]['name']; $section = $pkg['menu'][0]['section']; $config_path = $pkg['configpath']; $name = $pkg['name']; $title = $pkg['title']; $pgtitle = $title; $id = $_GET['id']; if (isset($_POST['id'])) $id = htmlspecialchars($_POST['id']); // Not posting? Then user is editing a record. There must be a valid id // when editing a record. if(!$id && !$_POST) $id = "0"; if(!is_numeric($id)) { Header("Location: /"); exit; } if($pkg['custom_php_global_functions'] <> "") eval($pkg['custom_php_global_functions']); // grab the installedpackages->package_name section. if(!is_array($config['installedpackages'][xml_safe_fieldname($pkg['name'])]['config'])) $config['installedpackages'][xml_safe_fieldname($pkg['name'])]['config'] = array(); // If the first entry in the array is an empty tag, kill it. if ((count($config['installedpackages'][xml_safe_fieldname($pkg['name'])]['config']) > 0) && ($config['installedpackages'][xml_safe_fieldname($pkg['name'])]['config'][0] == "")) array_shift($config['installedpackages'][xml_safe_fieldname($pkg['name'])]['config']); $a_pkg = &$config['installedpackages'][xml_safe_fieldname($pkg['name'])]['config']; if($_GET['savemsg'] <> "") $savemsg = htmlspecialchars($_GET['savemsg']); if($pkg['custom_php_command_before_form'] <> "") eval($pkg['custom_php_command_before_form']); if ($_POST) { if($_POST['act'] == "del") { if($pkg['custom_delete_php_command']) { if($pkg['custom_php_command_before_form'] <> "") eval($pkg['custom_php_command_before_form']); eval($pkg['custom_delete_php_command']); } write_config($pkg['delete_string']); // resync the configuration file code if defined. if($pkg['custom_php_resync_config_command'] <> "") { if($pkg['custom_php_command_before_form'] <> "") eval($pkg['custom_php_command_before_form']); eval($pkg['custom_php_resync_config_command']); } } else { if($pkg['custom_add_php_command']) { if($pkg['donotsave'] <> "" or $pkg['preoutput'] <> "") { ?> "; eval($pkg['custom_add_php_command']); if($pkg['preoutput']) echo ""; } } // donotsave is enabled. lets simply exit. if($pkg['donotsave'] <> "") exit; $firstfield = ""; $rows = 0; $input_errors = array(); $reqfields = array(); $reqfieldsn = array(); foreach ($pkg['fields']['field'] as $field) { if (($field['type'] == 'input') && isset($field['required'])) { if($field['fieldname']) $reqfields[] = $field['fieldname']; if($field['fielddescr']) $reqfieldsn[] = $field['fielddescr']; } } do_input_validation($_POST, $reqfields, $reqfieldsn, &$input_errors); if ($pkg['custom_php_validation_command']) eval($pkg['custom_php_validation_command']); // store values in xml configration file. if (!$input_errors) { $pkgarr = array(); foreach ($pkg['fields']['field'] as $fields) { switch($fields['type']){ case "sorting": case "listtopic": continue; break; case "rowhelper": // save rowhelper items. #$rowhelpername=($fields['fieldname'] ? $fields['fieldname'] : "row"); $rowhelpername="row"; foreach($fields['rowhelper']['rowhelperfield'] as $rowhelperfield) foreach($_POST as $key => $value){ if (preg_match("/^{$rowhelperfield['fieldname']}(\d+)$/",$key,$matches)) $pkgarr[$rowhelpername][$matches[1]][$rowhelperfield['fieldname']]=$value; } break; default: $fieldname = $fields['fieldname']; if ($fieldname == "interface_array") { $fieldvalue = $_POST[$fieldname]; } elseif (is_array($_POST[$fieldname])) { $fieldvalue = implode(',', $_POST[$fieldname]); } else { $fieldvalue = trim($_POST[$fieldname]); if ($fields['encoding'] == 'base64') $fieldvalue = base64_encode($fieldvalue); } if($fieldname) $pkgarr[$fieldname] = $fieldvalue; } } if (isset($id) && $a_pkg[$id]) $a_pkg[$id] = $pkgarr; else $a_pkg[] = $pkgarr; write_config($pkg['addedit_string']); // late running code if($pkg['custom_add_php_command_late'] <> "") { eval($pkg['custom_add_php_command_late']); } if (isset($pkg['filter_rules_needed'])) filter_configure(); // resync the configuration file code if defined. if($pkg['custom_php_resync_config_command'] <> "") { eval($pkg['custom_php_resync_config_command']); } parse_package_templates(); /* if start_command is defined, restart w/ this */ if($pkg['start_command'] <> "") exec($pkg['start_command'] . ">/dev/null 2&>1"); /* if restart_command is defined, restart w/ this */ if($pkg['restart_command'] <> "") exec($pkg['restart_command'] . ">/dev/null 2&>1"); if($pkg['aftersaveredirect'] <> "") { pfSenseHeader($pkg['aftersaveredirect']); } elseif(!$pkg['adddeleteeditpagefields']) { pfSenseHeader("pkg_edit.php?xml={$xml}&id=0"); } elseif(!$pkg['preoutput']) { pfSenseHeader("pkg.php?xml=" . $xml); } exit; } else { $get_from_post = true; } } if($pkg['title'] <> "") { $edit = ($only_edit ? '' : ": " . gettext("Edit")); $title = $pkg['title'] . $edit; } else $title = gettext("Package Editor"); $pgtitle = $title; include("head.inc"); if ($pkg['custom_php_after_head_command']) eval($pkg['custom_php_after_head_command']); ?> "") { ?>
"") { $tab_array = array(); foreach($pkg['tabs']['tab'] as $tab) { if($tab['tab_level']) $tab_level = $tab['tab_level']; else $tab_level = 1; if(isset($tab['active'])) { $active = true; } else { $active = false; } if(isset($tab['no_drop_down'])) $no_drop_down = true; $urltmp = ""; if($tab['url'] <> "") $urltmp = $tab['url']; if($tab['xml'] <> "") $urltmp = "pkg_edit.php?xml=" . $tab['xml']; $addresswithport = getenv("HTTP_HOST"); $colonpos = strpos($addresswithport, ":"); if ($colonpos !== False) { //my url is actually just the IP address of the pfsense box $myurl = substr($addresswithport, 0, $colonpos); } else { $myurl = $addresswithport; } // eval url so that above $myurl item can be processed if need be. $url = str_replace('$myurl', $myurl, $urltmp); $tab_array[$tab_level][] = array( $tab['text'], $active, $url ); } ksort($tab_array); foreach($tab_array as $tab) { echo ''; } } ?>
'; display_top_tabs($tab, $no_drop_down); echo '
"") $savevalue = $pkg['savetext']; /* If a package's XML has configured, then setup * the table rows for the fields that have set. * These fields will be placed below other fields in a seprate area titled 'Advanced Features'. * These advanced fields are not normally configured and generally left to default to 'default settings'. */ if ($pkg['advanced_options'] == "enabled") { $adv_filed_count = 0; $advanced = ""; $advanced .= "\n"; } foreach ($pkg['fields']['field'] as $pkga) { if ($pkga['type'] == "sorting") continue; if ($pkga['type'] == "listtopic") { $input = ""; $input .= "\n"; if(isset($pkga['advancedfield']) && isset($adv_filed_count)) { $advanced .= $input; $adv_filed_count++; } else echo $input; continue; } if($pkga['combinefields']=="begin"){ $input=""; if(isset($pkga['advancedfield']) && isset($adv_filed_count)) $advanced .= $input; else echo $input; } $size = ""; if (isset($pkga['dontdisplayname'])){ $input=""; if(!isset($pkga['combinefields'])) $input .= ""; if(isset($pkga['usecolspan2'])) $colspan="colspan='2'"; else $input .= ""; if(isset($pkga['advancedfield']) && isset($adv_filed_count)) { $advanced .= $input; $adv_filed_count++; } else echo $input; } else{ unset($req); if (isset($pkga['required'])) $req = 'req'; $input= ""; if(isset($pkga['advancedfield']) && isset($adv_filed_count)) { $advanced .= $input; $adv_filed_count++; } else echo $input; } if($pkga['combinefields']=="begin"){ $input=""; } else{ $input= ""; if($pkga['usecolspan2']) $input.= "
"; } if(isset($pkga['advancedfield']) && isset($adv_filed_count)) $advanced .= "{$input}\n"; else echo "{$input}\n"; #increment counter $i++; } #print advanced settings if any after reading all fields if (isset($advanced) && $adv_filed_count > 0) echo $advanced; ?>
 
". gettext("Advanced features") . "
 
{$pkga['name']}
 "; $input .= fixup_string($pkga['fielddescr']); $input .= ""; if(isset($pkga['advancedfield']) && isset($adv_filed_count)) $advanced .= $input; else echo $input; } if(!isset($pkga['dontcombinecells'])){ $input="
"; if(isset($pkga['advancedfield']) && isset($adv_filed_count)){ $advanced .= $input; $adv_filed_count++; } else echo $input; } // if user is editing a record, load in the data. $fieldname = $pkga['fieldname']; if ($get_from_post) { $value = $_POST[$fieldname]; if (is_array($value)) $value = implode(',', $value); } else { if (isset($id) && $a_pkg[$id]) $value = $a_pkg[$id][$fieldname]; else $value = $pkga['default_value']; } switch($pkga['type']){ case "input": $size = ($pkga['size'] ? " size='{$pkga['size']}' " : ""); $input = "\n"; $input .= "
" . fixup_string($pkga['description']) . "\n"; if(isset($pkga['advancedfield']) && isset($adv_filed_count)) { $js_array[] = $pkga['fieldname']; $advanced .= display_advanced_field($pkga['fieldname']).$input ."\n"; } else echo $input; break; case "password": $size = ($pkga['size'] ? " size='{$pkga['size']}' " : ""); $input = "\n"; $input .= "
" . fixup_string($pkga['description']) . "\n"; if(isset($pkga['advancedfield']) && isset($adv_filed_count)) { $js_array[] = $pkga['fieldname']; $advanced .= display_advanced_field($pkga['fieldname']).$input ."\n"; } else echo $input; break; case "info": $input = fixup_string($pkga['description']) . "\n"; if(isset($pkga['advancedfield']) && isset($adv_filed_count)) { $js_array[] = $pkga['fieldname']; $advanced .= display_advanced_field($pkga['fieldname']).$input ."\n"; } else echo $input; break; case "select": $fieldname = $pkga['fieldname']; if (isset($pkga['multiple'])) { $multiple = 'multiple="multiple"'; $items = explode(',', $value); $fieldname .= "[]"; } else { $multiple = ''; $items = array($value); } $size = ($pkga['size'] ? " size='{$pkga['size']}' " : ""); $onchange = (isset($pkga['onchange']) ? "onchange=\"{$pkga['onchange']}\"" : ''); $input = "\n
\n" . fixup_string($pkga['description']) . "\n"; $advanced .= "\n"; } else echo $input; break; case "select_source": $fieldname = $pkga['fieldname']; if (isset($pkga['multiple'])) { $multiple = 'multiple="multiple"'; $items = explode(',', $value); $fieldname .= "[]"; } else { $multiple = ''; $items = array($value); } $size = (isset($pkga['size']) ? "size=\"{$pkga['size']}\"" : ''); $onchange = (isset($pkga['onchange']) ? "onchange=\"{$pkga['onchange']}\"" : ''); $input = "\n
\n" . fixup_string($pkga['description']) . "\n"; if(isset($pkga['advancedfield']) && isset($adv_filed_count)) $advanced .= $input; else echo $input; } break; case "vpn_selection" : $input = "\n"; $input .= "
" . fixup_string($pkga['description']) . "\n"; if(isset($pkga['advancedfield']) && isset($adv_filed_count)) { $js_array[] = $pkga['fieldname']; $advanced .= display_advanced_field($pkga['fieldname']).$input; $advanced .= "\n"; } else echo $input; break; case "checkbox": $checkboxchecked =($value == "on" ? " CHECKED" : ""); if (isset($pkga['enablefields']) || isset($pkga['checkenablefields'])) $onclick = ' onclick="javascript:enablechange();"'; $input = "\n"; $input .= "
" . fixup_string($pkga['description']) . "\n"; if(isset($pkga['advancedfield']) && isset($adv_filed_count)) { $js_array[] = $pkga['fieldname']; $advanced .= display_advanced_field($pkga['fieldname']).$input; $advanced .= "\n"; } else echo $input; break; case "textarea": if($pkga['rows']) $rows = " rows='{$pkga['rows']}' "; if($pkga['cols']) $cols = " cols='{$pkga['cols']}' "; if (($pkga['encoding'] == 'base64') && !$get_from_post && !empty($value)) $value = base64_decode($value); $wrap =($pkga['wrap'] == "off" ? 'wrap="off" style="white-space:nowrap;"' : ''); $input = "\n"; $input .= "
" . fixup_string($pkga['description']) . "\n"; if(isset($pkga['advancedfield']) && isset($adv_filed_count)) { $js_array[] = $pkga['fieldname']; $advanced .= display_advanced_field($pkga['fieldname']).$input; $advanced .= "\n"; } else echo $input; break; case "interfaces_selection": $size = ($pkga['size'] ? "size=\"{$pkga['size']}\"" : ''); $multiple = ''; $fieldname = $pkga['fieldname']; if (isset($pkga['multiple'])) { $fieldname .= '[]'; $multiple = 'multiple'; } $input = "\n
" . fixup_string($pkga['description']) . "\n"; if(isset($pkga['advancedfield']) && isset($adv_filed_count)) $advanced .= $input."\n"; else echo $input; break; case "radio": $input = ""; if(isset($pkga['advancedfield']) && isset($adv_filed_count)) $advanced .= $input; else echo $input; break; case "rowhelper": #$rowhelpername=($fields['fieldname'] ? $fields['fieldname'] : "row"); $rowhelpername="row"; ?> '> " . fixup_string($rowhelper['fielddescr']) . "\n"; } $rowcounter = 0; $trc = 0; //Use assigned $a_pkg or create an empty array to enter loop if(isset($a_pkg[$id][$rowhelpername])) $saved_rows=$a_pkg[$id][$rowhelpername]; else $saved_rows[]=array(); foreach($saved_rows as $row) { echo "\n\n"; foreach($pkga['rowhelper']['rowhelperfield'] as $rowhelper) { unset($value); if($rowhelper['value'] <> "") $value = $rowhelper['value']; $fieldname = $rowhelper['fieldname']; // if user is editing a record, load in the data. if (isset($id) && $a_pkg[$id]) { $value = $row[$fieldname]; } $options = ""; $type = $rowhelper['type']; $description = $rowhelper['description']; $fieldname = $rowhelper['fieldname']; if($type == "option") $options = &$rowhelper['options']['option']; if($rowhelper['size']) $size = $rowhelper['size']; else if ($pkga['size']) $size = $pkga['size']; else $size = "8"; display_row($rowcounter, $value, $fieldname, $type, $rowhelper, $size); // javascript helpers for row_helper_dynamic.js echo "\n"; echo "\n"; $text = ""; $trc++; } $rowcounter++; echo "\n"; echo "\n"; } ?>
"; #echo ""; echo ""; echo "


"; if ($pkga['combinefields']=="end") $input.="
 
  " . gettext("Note") . ": {$pkg['note']}

"; //if (isset($id) && $a_pkg[$id]) // We'll always have a valid ID in our hands echo ""; ?> " onclick="history.back()">
\n"; foreach($js_array as $advfieldname) { echo "function show_" . $advfieldname . "() {\n"; echo "\tjQuery('#showadv_{$advfieldname}').empty();\n"; echo "\tjQuery('#show_{$advfieldname}').css('display', 'block');\n"; echo "}\n\n"; } echo "\n"; } ?> \n"; switch($type){ case "input": echo "\n"; break; case "checkbox": echo "\n"; break; case "password": echo "\n"; break; case "textarea": echo "\n"; case "select": echo "\n"; break; case "interfaces_selection": $size = ($size ? "size=\"{$size}\"" : ''); $multiple = ''; if (isset($rowhelper['multiple'])) { $fieldname .= '[]'; $multiple = 'multiple'; } echo "\n"; break; case "select_source": echo "\n"; break; } } function fixup_string($string) { global $config; // fixup #1: $myurl -> http[s]://ip_address:port/ $https = ""; $port = $config['system']['webguiport']; if($port <> "443" and $port <> "80") $urlport = ":" . $port; else $urlport = ""; if($config['system']['webgui']['protocol'] == "https") $https = "s"; $myurl = "http" . $https . "://" . getenv("HTTP_HOST") . $urlport; $newstring = str_replace("\$myurl", $myurl, $string); $string = $newstring; // fixup #2: $wanip $curwanip = get_interface_ip(); $newstring = str_replace("\$wanip", $curwanip, $string); $string = $newstring; // fixup #3: $lanip $lancfg = $config['interfaces']['lan']; $lanip = $lancfg['ipaddr']; $newstring = str_replace("\$lanip", $lanip, $string); $string = $newstring; // fixup #4: fix'r'up here. return $newstring; } /* * Parse templates if they are defined */ function parse_package_templates() { global $pkg, $config; $rows = 0; if($pkg['templates']['template'] <> "") foreach($pkg['templates']['template'] as $pkg_template_row) { $filename = $pkg_template_row['filename']; $template_text = $pkg_template_row['templatecontents']; $firstfield = ""; /* calculate total row helpers count and */ /* change fields defined as fieldname_fieldvalue to their value */ foreach ($pkg['fields']['field'] as $fields) { switch($fields['type']){ case "rowhelper": // save rowhelper items. $row_helper_total_rows = 0; $row_helper_data = ""; foreach($fields['rowhelper']['rowhelperfield'] as $rowhelperfield) foreach($_POST as $key => $value){ if (preg_match("/^{$rowhelperfield['fieldname']}(\d+)$/",$key,$matches)){ $row_helper_total_rows++; $row_helper_data .= $value; $sep = ""; ereg($rowhelperfield['fieldname'] . "_fieldvalue\[(.*)\]", $template_text, $sep); foreach ($sep as $se) $seperator = $se; if($seperator <> "") { $row_helper_data = ereg_replace(" ", $seperator, $row_helper_data); $template_text = ereg_replace("\[{$seperator}\]", "", $template_text); } $template_text = str_replace($rowhelperfield['fieldname'] . "_fieldvalue", $row_helper_data, $template_text); } } break; default: $fieldname = $fields['fieldname']; $fieldvalue = $_POST[$fieldname]; $template_text = str_replace($fieldname . "_fieldvalue", $fieldvalue, $template_text); } } /* replace $domain_total_rows with total rows */ $template_text = str_replace("$domain_total_rows", $row_helper_total_rows, $template_text); /* replace cr's */ $template_text = str_replace("\\n", "\n", $template_text); /* write out new template file */ $fout = fopen($filename,"w"); fwrite($fout, $template_text); fclose($fout); } } /* Return html div fields */ function display_advanced_field($fieldname) { $div = "
\n"; $div .= " - " . gettext("Show advanced option") ."
\n"; $div .= "