mirror of
https://github.com/optim-enterprises-bv/control-pane.git
synced 2025-10-29 17:12:20 +00:00
68 lines
2.0 KiB
PHP
68 lines
2.0 KiB
PHP
<?php
|
|
if(!isset($_GET['jname'])){
|
|
echo 'You forgot to specify a name of jail!';
|
|
exit;
|
|
}
|
|
|
|
function clonos_syslog($msg)
|
|
{
|
|
file_put_contents('/tmp/clonos.log', date("j.n.Y").":".$msg . "\n", FILE_APPEND);
|
|
return 0;
|
|
}
|
|
|
|
function runVNC($jname)
|
|
{
|
|
$res = (new Db('base','local'))->selectOne("SELECT vnc_password FROM bhyve WHERE jname=?", array([$jname]));
|
|
|
|
$pass = ($res !== false) ? $res['vnc_password'] : 'cbsd';
|
|
|
|
$permit=$_SERVER['REMOTE_ADDR'];
|
|
|
|
// clonos_syslog("vnc.php run: vm_vncwss jname={$jname} permit={$permit}");
|
|
|
|
$res=CBSD::run("vm_vncwss jname={$jname} permit={$permit}",array());
|
|
// , array($jname, $_SERVER['REMOTE_ADDR']));
|
|
|
|
// HTTP_HOST is preferred for href
|
|
if (isset($_SERVER['HTTP_HOST']) && !empty(trim($_SERVER['HTTP_HOST']))){
|
|
$nodeip = $_SERVER['HTTP_HOST'];
|
|
$nodeip = parse_url($nodeip, PHP_URL_HOST);
|
|
} else {
|
|
# use localhost as fallback in case the HTTP_HOST header is not set
|
|
$nodeip = '127.0.0.1';
|
|
}
|
|
|
|
// HTTP_HOST is IP, try to check SERVER_NAME
|
|
if (filter_var($nodeip, FILTER_VALIDATE_IP)) {
|
|
$nodeip = $_SERVER['SERVER_ADDR'];
|
|
// https://www.php.net/manual/en/reserved.variables.server.php
|
|
// Note: Under Apache 2, you must set UseCanonicalName = On and ServerName.
|
|
// handle when 'server_name _;' - use IP instead
|
|
if(isset($_SERVER['SERVER_NAME']) && !empty(trim($_SERVER['SERVER_NAME'])) && (strcmp($_SERVER['SERVER_NAME'], "_") != 0)){
|
|
$nodeip = $_SERVER['SERVER_NAME'];
|
|
}
|
|
} else {
|
|
$nodeip = $_SERVER['SERVER_ADDR'];
|
|
}
|
|
|
|
# TODO: This will send the pass in clear text
|
|
header('Location: http://'.$nodeip.':6081/vnc_lite.html?scale=true&host='.$nodeip.'&port=6081?password='.$pass);
|
|
exit;
|
|
}
|
|
|
|
$rp = realpath('../');
|
|
require_once($rp.'/php/db.php');
|
|
require_once($rp.'/php/cbsd.php');
|
|
require_once($rp.'/php/validate.php');
|
|
|
|
|
|
$jname = trim(preg_replace('/\t+|\r|\n/', '', $_GET['jname']));
|
|
|
|
if ($jname != escapeshellcmd($jname)){
|
|
Utils::clonos_syslog("cmd.php SHELL ESCAPE:". $jname);
|
|
die("Shell escape attempt");
|
|
}
|
|
|
|
//runVNC(Validate::long_string($jname));
|
|
runVNC($jname);
|