2014-02-12 10:44:00 +01:00
|
|
|
<?php
|
2015-07-09 14:26:07 +02:00
|
|
|
session_start();
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
require(dirname(__FILE__) . '/include/functions.php');
|
|
|
|
|
require(dirname(__FILE__) . '/include/connect.php');
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
// Disconnecting ?
|
|
|
|
|
if(isset($_GET['logout'])){
|
|
|
|
|
session_destroy();
|
|
|
|
|
header("Location: .");
|
|
|
|
|
exit -1;
|
|
|
|
|
}
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
// Get the configuration files ?
|
|
|
|
|
if(isset($_POST['configuration_get'], $_POST['configuration_username'], $_POST['configuration_pass'], $_POST['configuration_os'])
|
|
|
|
|
&& !empty($_POST['configuration_pass'])) {
|
|
|
|
|
$req = $bdd->prepare('SELECT * FROM user WHERE user_id = ?');
|
|
|
|
|
$req->execute(array($_POST['configuration_username']));
|
|
|
|
|
$data = $req->fetch();
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
// Error ?
|
|
|
|
|
if($data && passEqual($_POST['configuration_pass'], $data['user_pass'])) {
|
|
|
|
|
// Thanks http://stackoverflow.com/questions/4914750/how-to-zip-a-whole-folder-using-php
|
|
|
|
|
if($_POST['configuration_os'] == "gnu_linux") {
|
|
|
|
|
$conf_dir = 'gnu-linux';
|
|
|
|
|
}
|
|
|
|
|
else {
|
|
|
|
|
$conf_dir = 'windows';
|
|
|
|
|
}
|
|
|
|
|
$rootPath = realpath("./client-conf/$conf_dir");
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
// Initialize archive object
|
|
|
|
|
$archive_name = "openvpn-$conf_dir.zip";
|
|
|
|
|
$archive_path = "./client-conf/$archive_name";
|
|
|
|
|
$zip = new ZipArchive();
|
|
|
|
|
$zip->open($archive_path, ZipArchive::CREATE | ZipArchive::OVERWRITE);
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
$files = new RecursiveIteratorIterator(
|
|
|
|
|
new RecursiveDirectoryIterator($rootPath),
|
|
|
|
|
RecursiveIteratorIterator::LEAVES_ONLY
|
|
|
|
|
);
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
foreach ($files as $name => $file) {
|
|
|
|
|
// Skip directories (they would be added automatically)
|
|
|
|
|
if (!$file->isDir()) {
|
|
|
|
|
// Get real and relative path for current file
|
|
|
|
|
$filePath = $file->getRealPath();
|
|
|
|
|
$relativePath = substr($filePath, strlen($rootPath) + 1);
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
// Add current file to archive
|
|
|
|
|
$zip->addFile($filePath, $relativePath);
|
|
|
|
|
}
|
|
|
|
|
}
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
// Zip archive will be created only after closing object
|
|
|
|
|
$zip->close();
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
//then send the headers to foce download the zip file
|
2016-08-24 17:35:32 +02:00
|
|
|
header("Content-type: application/zip");
|
|
|
|
|
header("Content-Disposition: attachment; filename=$archive_name");
|
|
|
|
|
header("Pragma: no-cache");
|
|
|
|
|
header("Expires: 0");
|
2015-07-09 14:26:07 +02:00
|
|
|
readfile($archive_path);
|
|
|
|
|
}
|
|
|
|
|
else {
|
|
|
|
|
$error = true;
|
2014-02-12 10:44:00 +01:00
|
|
|
}
|
2015-07-09 14:26:07 +02:00
|
|
|
}
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
// Admin login attempt ?
|
|
|
|
|
else if(isset($_POST['admin_login'], $_POST['admin_username'], $_POST['admin_pass']) && !empty($_POST['admin_pass'])){
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
$req = $bdd->prepare('SELECT * FROM admin WHERE admin_id = ?');
|
|
|
|
|
$req->execute(array($_POST['admin_username']));
|
|
|
|
|
$data = $req->fetch();
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
// Error ?
|
|
|
|
|
if($data && passEqual($_POST['admin_pass'], $data['admin_pass'])) {
|
|
|
|
|
$_SESSION['admin_id'] = $data['admin_id'];
|
|
|
|
|
header("Location: index.php?admin");
|
|
|
|
|
exit -1;
|
2014-02-12 10:44:00 +01:00
|
|
|
}
|
2015-07-09 14:26:07 +02:00
|
|
|
else {
|
|
|
|
|
$error = true;
|
|
|
|
|
}
|
|
|
|
|
}
|
2014-02-12 10:44:00 +01:00
|
|
|
?>
|
|
|
|
|
|
|
|
|
|
<!DOCTYPE html>
|
|
|
|
|
<html>
|
2015-07-09 14:26:07 +02:00
|
|
|
<head>
|
|
|
|
|
<meta charset="utf-8" />
|
2016-08-24 17:35:32 +02:00
|
|
|
|
|
|
|
|
<title>OpenVPN-Admin</title>
|
|
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
<link rel="stylesheet" href="vendor/bootstrap/dist/css/bootstrap.min.css" type="text/css" />
|
|
|
|
|
<link rel="stylesheet" href="css/index.css" type="text/css"/>
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
<link rel="stylesheet" href="vendor/slickgrid/slick.grid.css" type="text/css" />
|
|
|
|
|
<link rel="stylesheet" href="vendor/slickgrid/slick-default-theme.css" type="text/css" />
|
|
|
|
|
<link rel="stylesheet" href="vendor/slickgrid/css/smoothness/jquery-ui-1.8.16.custom.css" type="text/css" />
|
|
|
|
|
<link rel="stylesheet" href="vendor/slickgrid-enhancement-pager/libs/dropkick.css" type="text/css" />
|
|
|
|
|
<link rel="stylesheet" href="vendor/slickgrid-enhancement-pager/libs/enhancementpager.css" type="text/css" />
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
</head>
|
|
|
|
|
<body class='container-fluid'>
|
|
|
|
|
<?php
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
// --------------- INSTALLATION ---------------
|
|
|
|
|
if(isset($_GET['installation'])) {
|
|
|
|
|
if(isInstalled($bdd) == true) {
|
|
|
|
|
printError('OpenVPN-admin is already installed.');
|
|
|
|
|
exit -1;
|
|
|
|
|
}
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
// If the user sent the installation form
|
|
|
|
|
if(isset($_POST['admin_username'])) {
|
|
|
|
|
$admin_username = $_POST['admin_username'];
|
|
|
|
|
$admin_pass = $_POST['admin_pass'];
|
|
|
|
|
$admin_repeat_pass = $_POST['repeat_admin_pass'];
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
if($admin_pass != $admin_repeat_pass) {
|
|
|
|
|
printError('The passwords do not correspond.');
|
|
|
|
|
exit -1;
|
|
|
|
|
}
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
// Create the tables or die
|
|
|
|
|
$sql_file = dirname(__FILE__) . '/sql/import.sql';
|
|
|
|
|
try {
|
|
|
|
|
$sql = file_get_contents($sql_file);
|
|
|
|
|
$bdd->exec($sql);
|
|
|
|
|
}
|
|
|
|
|
catch (PDOException $e) {
|
|
|
|
|
printError($e->getMessage());
|
|
|
|
|
exit -1;
|
|
|
|
|
}
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
// Generate the hash
|
|
|
|
|
$hash_pass = hashPass($admin_pass);
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
// Insert the new admin
|
|
|
|
|
$req = $bdd->prepare('INSERT INTO admin (admin_id, admin_pass) VALUES (?, ?)');
|
|
|
|
|
$req->execute(array($admin_username, $hash_pass));
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
unlink($sql_file);
|
|
|
|
|
rmdir(dirname(__FILE__) . '/sql');
|
|
|
|
|
printSuccess('Well done, OpenVPN-Admin is installed.');
|
|
|
|
|
}
|
|
|
|
|
// Print the installation form
|
|
|
|
|
else {
|
|
|
|
|
require(dirname(__FILE__) . '/include/html/menu.php');
|
|
|
|
|
require(dirname(__FILE__) . '/include/html/form/installation.php');
|
|
|
|
|
}
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
exit -1;
|
|
|
|
|
}
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
// --------------- CONFIGURATION ---------------
|
|
|
|
|
if(!isset($_GET['admin'])) {
|
|
|
|
|
if(isset($error) && $error == true)
|
|
|
|
|
printError('Login error');
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
require(dirname(__FILE__) . '/include/html/menu.php');
|
|
|
|
|
require(dirname(__FILE__) . '/include/html/form/configuration.php');
|
|
|
|
|
}
|
2016-08-24 17:35:32 +02:00
|
|
|
|
|
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
// --------------- LOGIN ---------------
|
|
|
|
|
else if(!isset($_SESSION['admin_id'])){
|
|
|
|
|
if(isset($error) && $error == true)
|
|
|
|
|
printError('Login error');
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
require(dirname(__FILE__) . '/include/html/menu.php');
|
|
|
|
|
require(dirname(__FILE__) . '/include/html/form/login.php');
|
|
|
|
|
}
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
// --------------- GRIDS ---------------
|
|
|
|
|
else{
|
|
|
|
|
?>
|
|
|
|
|
<nav class="navbar navbar-default">
|
2016-08-24 17:35:32 +02:00
|
|
|
<p class="navbar-text">Signed as <?php echo $_SESSION['admin_id']; ?> /
|
2015-07-09 14:26:07 +02:00
|
|
|
<a class="navbar-link" href="index.php?logout" title="Logout ?">logout ?</a>
|
|
|
|
|
</p>
|
|
|
|
|
</nav>
|
2016-08-24 17:35:32 +02:00
|
|
|
|
2015-07-09 14:26:07 +02:00
|
|
|
<?php
|
|
|
|
|
require(dirname(__FILE__) . '/include/html/grids.php');
|
|
|
|
|
}
|
|
|
|
|
?>
|
|
|
|
|
</body>
|
2014-02-12 10:44:00 +01:00
|
|
|
</html>
|
