dbxe
/
fusionpbx
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update exec.php

This commit is contained in:
FusionPBX 2019-04-25 10:34:57 -06:00 committed by GitHub
parent bb6df33d1a
commit 3057910dcc
1 changed files with 43 additions and 24 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

67
app/exec/exec.php
View File

@ -53,7 +53,16 @@
//get the html values and set them as variables //get the html values and set them as variables
$handler = ($_REQUEST["handler"] != '') ? trim($_REQUEST["handler"]) : ((permission_exists('exec_switch')) ? 'switch' : null); $handler = ($_REQUEST["handler"] != '') ? trim($_REQUEST["handler"]) : ((permission_exists('exec_switch')) ? 'switch' : null);
$cmd = trim($_POST["cmd"]); $code = trim($_POST["code"]);
$command = trim($_POST["command"]);
//check the captcha
$command_authorized = false;
if (strlen($code) > 0) {
if (strtolower($_SESSION['captcha']) == strtolower($code)) {
$command_authorized = true;
}
}
//set editor moder //set editor moder
switch ($handler) { switch ($handler) {
@ -75,13 +84,13 @@
?> ?>
<script language="JavaScript" type="text/javascript"> <script language="JavaScript" type="text/javascript">
function submit_check() { function submit_check() {
document.getElementById('cmd').value = editor.getSession().getValue(); document.getElementById('command').value = editor.getSession().getValue();
if (document.getElementById('mode').value == 'sql') { if (document.getElementById('mode').value == 'sql') {
$('#frm').prop('target', 'iframe').prop('action', 'sql_query_result.php'); $('#frm').prop('target', 'iframe').prop('action', 'sql_query_result.php?code='+ document.getElementById('code').value);
$('#sql_response').show(); $('#sql_response').show();
} }
else { else {
if (document.getElementById('cmd').value == '') { if (document.getElementById('command').value == '') {
focus_editor(); focus_editor();
return false; return false;
} }
@ -178,7 +187,7 @@
function reset_editor() { function reset_editor() {
editor.getSession().setValue(''); editor.getSession().setValue('');
$('#cmd').val(''); $('#command').val('');
$('#response').hide(); $('#response').hide();
<?php if (permission_exists('exec_sql')) { ?> <?php if (permission_exists('exec_sql')) { ?>
$('#iframe').prop('src',''); $('#iframe').prop('src','');
@ -211,6 +220,12 @@
<?php <?php
//gnerate the captcha image
$_SESSION['captcha'] = generate_password(7, 2);
$captcha = new captcha;
$captcha->code = $_SESSION['captcha'];
$image_base64 = $captcha->image_base64();
//show the header //show the header
echo "<form method='post' name='frm' id='frm' action='exec.php' style='margin: 0;' onsubmit='return submit_check();'>\n"; echo "<form method='post' name='frm' id='frm' action='exec.php' style='margin: 0;' onsubmit='return submit_check();'>\n";
echo "<table cellpadding='0' cellspacing='0' border='0' width='100%'>"; echo "<table cellpadding='0' cellspacing='0' border='0' width='100%'>";
@ -220,6 +235,10 @@
echo " </td>"; echo " </td>";
echo " <td valign='top' align='right' nowrap='nowrap'>"; echo " <td valign='top' align='right' nowrap='nowrap'>";
//add the captcha
echo " <img src=\"data:image/png;base64, ".$image_base64."\" /><input type='text' class='txt' style='width: 150px; margin-left: 15px;' name='code' id='code' value=''>\n";
echo " &nbsp; &nbsp; &nbsp;\n";
if (permission_exists('exec_switch') || permission_exists('exec_php') || permission_exists('exec_command') || permission_exists('exec_sql')) { if (permission_exists('exec_switch') || permission_exists('exec_php') || permission_exists('exec_command') || permission_exists('exec_sql')) {
echo " <select name='handler' id='handler' class='formfld' style='width:100px;' onchange=\"handler=this.value;set_handler(this.value);\">\n"; echo " <select name='handler' id='handler' class='formfld' style='width:100px;' onchange=\"handler=this.value;set_handler(this.value);\">\n";
if (permission_exists('exec_switch')) { echo "<option value='switch' ".(($handler == 'switch') ? "selected='selected'" : null).">".$text['label-switch']."</option>\n"; } if (permission_exists('exec_switch')) { echo "<option value='switch' ".(($handler == 'switch') ? "selected='selected'" : null).">".$text['label-switch']."</option>\n"; }
@ -245,7 +264,7 @@
$result = $prep_statement->fetchAll(PDO::FETCH_NAMED); $result = $prep_statement->fetchAll(PDO::FETCH_NAMED);
foreach ($result as &$row) { foreach ($result as &$row) {
$row = array_values($row); $row = array_values($row);
echo " <option value='".escape($row[0])."'>".escape($row[0])."</option>\n"; echo " <option value='".$row[0]."'>".$row[0]."</option>\n";
} }
echo " </select>\n"; echo " </select>\n";
//echo " <br /><br />\n"; //echo " <br /><br />\n";
@ -277,8 +296,8 @@
echo "<br>"; echo "<br>";
//html form //html form
echo "<input type='hidden' name='id' value='".escape($_REQUEST['id'])."'>\n"; //sql db id echo "<input type='hidden' name='id' value='".$_REQUEST['id']."'>\n"; //sql db id
echo "<textarea name='cmd' id='cmd' style='display: none;'></textarea>"; echo "<textarea name='command' id='command' style='display: none;'></textarea>";
echo "<table cellpadding='0' cellspacing='0' border='0' style='width: 100%;'>\n"; echo "<table cellpadding='0' cellspacing='0' border='0' style='width: 100%;'>\n";
echo " <tr>"; echo " <tr>";
echo " <td style='width: 210px;' valign='top' nowrap>"; echo " <td style='width: 210px;' valign='top' nowrap>";
@ -323,7 +342,7 @@
$preview = "onmouseover=\"editor.getSession().setMode(".(($value == 'php') ? "{path:'ace/mode/php', inline:true}" : "'ace/mode/' + this.value").");\""; $preview = "onmouseover=\"editor.getSession().setMode(".(($value == 'php') ? "{path:'ace/mode/php', inline:true}" : "'ace/mode/' + this.value").");\"";
} }
$selected = ($value == $mode) ? 'selected' : null; $selected = ($value == $mode) ? 'selected' : null;
echo "<option value='".escape($value)."' ".escape($selected)." ".escape($preview).">".escape($label)."</option>\n"; echo "<option value='".$value."' ".$selected." ".$preview.">".$label."</option>\n";
} }
?> ?>
</select> </select>
@ -334,12 +353,12 @@
$sizes = explode(',','9px,10px,11px,12px,14px,16px,18px,20px'); $sizes = explode(',','9px,10px,11px,12px,14px,16px,18px,20px');
$preview = ($setting_preview == 'true') ? "onmouseover=\"document.getElementById('editor').style.fontSize = this.value;\"" : null; $preview = ($setting_preview == 'true') ? "onmouseover=\"document.getElementById('editor').style.fontSize = this.value;\"" : null;
if (!in_array($setting_size, $sizes)) { if (!in_array($setting_size, $sizes)) {
echo "<option value='".escape($setting_size)."' ".escape($preview).">".escape($setting_size)."</option>\n"; echo "<option value='".$setting_size."' ".$preview.">".$setting_size."</option>\n";
echo "<option value='' disabled='disabled'></option>\n"; echo "<option value='' disabled='disabled'></option>\n";
} }
foreach ($sizes as $size) { foreach ($sizes as $size) {
$selected = ($size == $setting_size) ? 'selected' : null; $selected = ($size == $setting_size) ? 'selected' : null;
echo "<option value='".escape($size)."' ".$selected." ".escape($preview).">".escape($size)."</option>\n"; echo "<option value='".$size."' ".$selected." ".$preview.">".$size."</option>\n";
} }
?> ?>
</select> </select>
@ -386,7 +405,7 @@
echo "<optgroup label='".$optgroup."'>\n"; echo "<optgroup label='".$optgroup."'>\n";
foreach ($theme as $value => $label) { foreach ($theme as $value => $label) {
$selected = (strtolower($label) == strtolower($setting_theme)) ? 'selected' : null; $selected = (strtolower($label) == strtolower($setting_theme)) ? 'selected' : null;
echo "<option value='".escape($value)."' ".$selected." ".escape($preview).">".escape($label)."</option>\n"; echo "<option value='".$value."' ".$selected." ".$preview.">".$label."</option>\n";
} }
echo "</optgroup>\n"; echo "</optgroup>\n";
} }
@ -395,7 +414,7 @@
</td> </td>
</tr> </tr>
</table> </table>
<div id='editor'><?php echo escape($cmd); ?></div> <div id='editor'><?php echo htmlentities($command); ?></div>
<?php <?php
echo " </td>"; echo " </td>";
@ -427,7 +446,7 @@
<?php if ($mode == 'php') { ?> <?php if ($mode == 'php') { ?>
editor.getSession().setMode({path:'ace/mode/php', inline:true}); editor.getSession().setMode({path:'ace/mode/php', inline:true});
<?php } ?> <?php } ?>
document.getElementById('editor').style.fontSize='<?php echo escape($setting_size);?>'; document.getElementById('editor').style.fontSize='<?php echo $setting_size;?>';
focus_editor(); focus_editor();
//keyboard shortcut to execute command //keyboard shortcut to execute command
@ -443,28 +462,28 @@
//show the result //show the result
if (is_array($_POST)) { if (is_array($_POST)) {
if ($cmd != '') { if ($command != '') {
$result = ''; $result = '';
switch ($handler) { switch ($handler) {
case 'shell': case 'shell':
if (permission_exists('exec_command')) { if (permission_exists('exec_command') && $command_authorized) {
$result = shell_exec($cmd . " 2>&1"); $result = htmlentities(shell_exec($command . " 2>&1"));
} }
break; break;
case 'php': case 'php':
if (permission_exists('exec_php')) { if (permission_exists('exec_php') && $command_authorized) {
ob_start(); ob_start();
eval($cmd); eval($command);
$result = ob_get_contents(); $result = ob_get_contents();
ob_end_clean(); ob_end_clean();
} }
break; break;
case 'switch': case 'switch':
if (permission_exists('exec_switch')) { if (permission_exists('exec_switch') && $command_authorized) {
$fp = event_socket_create($_SESSION['event_socket_ip_address'], $_SESSION['event_socket_port'], $_SESSION['event_socket_password']); $fp = event_socket_create($_SESSION['event_socket_ip_address'], $_SESSION['event_socket_port'], $_SESSION['event_socket_password']);
if ($fp) { if ($fp) {
$result = event_socket_request($fp, 'api '.$cmd); $result = event_socket_request($fp, 'api '.$command);
$result = utf8_encode($result); $result = htmlspecialchars(utf8_encode($result), ENT_QUOTES);
} }
} }
break; break;
@ -473,7 +492,7 @@
echo "<span id='response'>"; echo "<span id='response'>";
echo "<b>".$text['label-response']."</b>\n"; echo "<b>".$text['label-response']."</b>\n";
echo "<br /><br />\n"; echo "<br /><br />\n";
echo ($handler == 'switch') ? "<textarea style='width: 100%; height: 450px; font-family: monospace; padding: 15px;' wrap='off'>".escape($result)."</textarea>\n" : "<pre>".escape($result)."</pre>"; echo ($handler == 'switch') ? "<textarea style='width: 100%; height: 450px; font-family: monospace; padding: 15px;' wrap='off'>".$result."</textarea>\n" : "<pre>".$result."</pre>";
echo "</span>"; echo "</span>";
} }
} }