1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
|
<?php
// this is the file that cleans up a chroot and makes sure it's owned by nobody
// TODO This doesn't seem to work correctly...
function ssh_account_generate()
{
// make sure we change all files to be owned by nobody, so that they can't escalate privelages
global $pro_mysql_domain_table;
global $pro_mysql_admin_table;
global $pro_mysql_subdomain_table;
global $conf_db_version;
global $conf_unix_type;
global $conf_apache_vhost_path;
global $conf_generated_file_path;
global $conf_dtcshared_path;
global $conf_dtcadmin_path;
global $conf_dtcclient_path;
global $conf_dtcdoc_path;
global $conf_dtcemail_path;
global $conf_main_site_ip;
global $conf_use_multiple_ip;
global $conf_site_addrs;
global $conf_php_library_path;
global $conf_php_additional_library_path;
global $conf_administrative_site;
$num_generated_vhosts=0;
$query = "SELECT * FROM $pro_mysql_domain_table WHERE 1 ORDER BY name;";
$result = mysql_query ($query)or die("Cannot execute query \"$query\"");
$num_rows = mysql_num_rows($result);
if($num_rows < 1){
die("No account to generate : database has to contain AT LEAST one domain name");
}
for($i=0;$i<$num_rows;$i++){
$row = mysql_fetch_array($result) or die ("Cannot fetch user");
$web_name = $row["name"];
$web_owner = $row["owner"];
// Get the owner informations
$query2 = "SELECT * FROM $pro_mysql_admin_table WHERE adm_login='$web_owner';";
$result2 = mysql_query ($query2)or die("Cannot execute query \"$query2\"");
$num_rows2 = mysql_num_rows($result2);
if($num_rows2 != 1){
die("No user of that name !");
}
$webadmin = mysql_fetch_array($result2) or die ("Cannot fetch user");
$web_path = $webadmin["path"];
/* $query2 = "SELECT * FROM $pro_mysql_subdomain_table WHERE domain_name='$web_name' AND ip='default' ORDER BY subdomain_name;";
$result2 = mysql_query ($query2)or die("Cannot execute query \"$query2\"");
$num_rows2 = mysql_num_rows($result2);
for ($j=0; $j < $num_rows2; $j++)
{
$subdomain = mysql_fetch_array($result2) or die ("Cannot fetch user");
$web_subname = $subdomain["subdomain_name"];
// now for each of these subdomains, we need to edit the etc/shadow etc and add the users
$directory = "$web_path/$web_name/subdomains/$web_subname/";
recurse_chown_chgrp($directory, $conf_nobody_user_id, $conf_nobody_group_id) ;
//$query3 = "SELECT * FROM $pro_mysql_ssh_table WHERE hostname='$web_name' ORDER BY login LIMIT 800";
}*/
}
}
?>
|
