Security improvements: - Enable SSL/TLS certificate verification by default (was disabled, MITM risk) - Remove error_reporting(0) that silenced all errors - Add input sanitization on all user parameters (int casting, regex filtering) - Return proper HTTP status codes (401, 403, 400, 500) instead of always 200 - Add XSS protection with htmlspecialchars and encodeURIComponent - Add null checks on API response data before property access New features: - Power management: boot, shutdown, restart, and force power off controls - Server rebuild: reinstall with any available OS template from client area - Server rename: change server display name via PATCH API - OS template fetching: client-side endpoint for rebuild OS selection - TestConnection: validate API credentials from WHMCS server settings - ServiceSingleSignOn: native WHMCS SSO integration for VirtFusion panel - Server status badge: visual indicator of server state in overview - Traffic usage display: show bandwidth used vs allocated - Checkout validation: ShoppingCartValidateCheckout hook ensures OS selection Ordering process improvements: - Add default "Select Operating System" placeholder option - Add "No SSH Key (Optional)" default for SSH dropdown - Hide SSH key field/container when no keys available - Wrap hook in try/catch to prevent checkout page breakage - Sanitize template names with htmlspecialchars - Use JSON_HEX_* flags for safe script injection Theme compatibility: - Properly formatted Smarty templates with readable indentation - Dual panel/card CSS classes for Bootstrap 3/4/5 compatibility - Responsive power button layout with mobile breakpoint - Framework-agnostic HTML that works with Six, Twenty-One, Lagom, and custom themes - Suspended service state messaging Code quality: - Readable, unminified JavaScript with JSDoc header - Structured CSS with logical section organization - Improved error messages throughout all provisioning functions - Added PATCH method support to Curl wrapper - Added curl error capture on connection failures - Added connection and request timeouts (10s/30s) - Fixed memory conversion to check key name instead of display name Documentation: - Complete README rewrite with installation, configuration, and troubleshooting guides - API endpoint reference table - Configurable options mapping documentation - Theme override instructions - Security considerations section https://claude.ai/code/session_01TCsJ4WZCGuEX3zqh1tQ2zx
218 lines
5.0 KiB
PHP
218 lines
5.0 KiB
PHP
<?php
|
|
|
|
namespace WHMCS\Module\Server\VirtFusionDirect;
|
|
|
|
class Curl
|
|
{
|
|
private $ch;
|
|
private $data;
|
|
private $customOptions = [];
|
|
private $defaultOptions = [
|
|
CURLOPT_SSL_VERIFYPEER => true,
|
|
CURLOPT_SSL_VERIFYHOST => 2,
|
|
CURLOPT_RETURNTRANSFER => true,
|
|
CURLOPT_USERAGENT => 'VirtFusion-WHMCS/2.0',
|
|
CURLOPT_HEADER => false,
|
|
CURLOPT_NOBODY => false,
|
|
CURLOPT_TIMEOUT => 30,
|
|
CURLOPT_CONNECTTIMEOUT => 10,
|
|
];
|
|
|
|
|
|
public function __construct()
|
|
{
|
|
$this->ch = curl_init();
|
|
}
|
|
|
|
public function useCookies()
|
|
{
|
|
$cookiesFile = tempnam(sys_get_temp_dir(), 'virtfusion_cookies');
|
|
$this->defaultOptions[CURLOPT_COOKIEFILE] = $cookiesFile;
|
|
$this->defaultOptions[CURLOPT_COOKIEJAR] = $cookiesFile;
|
|
}
|
|
|
|
public function setLog()
|
|
{
|
|
$log = fopen(__DIR__ . '/CURL.log', 'a');
|
|
if ($log) {
|
|
fwrite($log, str_repeat('=', 80) . PHP_EOL);
|
|
$this->addOption(CURLOPT_STDERR, $log);
|
|
$this->addOption(CURLOPT_VERBOSE, true);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* @param $name
|
|
* @param $value
|
|
*/
|
|
public function addOption($name, $value)
|
|
{
|
|
$this->customOptions[$name] = $value;
|
|
}
|
|
|
|
/**
|
|
* @param null $url
|
|
* @return bool|string|void
|
|
*/
|
|
public function put($url = null)
|
|
{
|
|
return $this->send('PUT', $url);
|
|
}
|
|
|
|
/**
|
|
* @param null $url
|
|
* @return bool|string|void
|
|
*/
|
|
public function patch($url = null)
|
|
{
|
|
return $this->send('PATCH', $url);
|
|
}
|
|
|
|
/**
|
|
* @param $method
|
|
* @param $url
|
|
* @return bool|string|void
|
|
*/
|
|
private function send($method, $url)
|
|
{
|
|
if ($url === null) {
|
|
if (!isset($this->customOptions[CURLOPT_URL]) || empty($this->customOptions[CURLOPT_URL])) {
|
|
exit('empty url');
|
|
}
|
|
}
|
|
$this->addOption(CURLOPT_CUSTOMREQUEST, $method);
|
|
$this->addOption(CURLOPT_URL, $url);
|
|
|
|
return $this->exec();
|
|
}
|
|
|
|
/**
|
|
* @return bool|string
|
|
*/
|
|
private function exec()
|
|
{
|
|
$this->setOptions();
|
|
$response = curl_exec($this->ch);
|
|
|
|
$this->data['info'] = curl_getinfo($this->ch);
|
|
|
|
if ($response === false) {
|
|
$this->data['info']['curl_error'] = curl_error($this->ch);
|
|
$this->data['info']['curl_errno'] = curl_errno($this->ch);
|
|
}
|
|
|
|
if (isset($this->customOptions[CURLOPT_HEADER]) && $this->customOptions[CURLOPT_HEADER]) {
|
|
$this->data['info']['request_header'] = trim($this->data['info']['request_header']);
|
|
$this->processHeaders($response);
|
|
}
|
|
|
|
curl_close($this->ch);
|
|
|
|
return $response;
|
|
}
|
|
|
|
private function setOptions()
|
|
{
|
|
if (isset($this->customOptions[CURLOPT_HEADER]) && $this->customOptions[CURLOPT_HEADER]) {
|
|
$this->addOption(CURLINFO_HEADER_OUT, true);
|
|
}
|
|
|
|
$options = $this->customOptions + $this->defaultOptions;
|
|
curl_setopt_array($this->ch, $options);
|
|
}
|
|
|
|
/**
|
|
* @param $data
|
|
*/
|
|
private function processHeaders(&$data)
|
|
{
|
|
$tmp = explode("\r\n\r\n", $data, 2);
|
|
|
|
$this->data['info']['response_header'] = $tmp[0];
|
|
$this->data['info']['response_body'] = $data = trim($tmp[1]);
|
|
|
|
$tmp = explode("\r\n", $this->data['info']['response_header']);
|
|
$this->data['data']['Message'] = $tmp[0];
|
|
for ($i = 1, $size = count($tmp); $i < $size; ++$i) {
|
|
$string = explode(': ', $tmp[$i], 2);
|
|
$this->data['data'][$string[0]] = $string[1];
|
|
}
|
|
}
|
|
|
|
/**
|
|
* @param null $url
|
|
* @return bool|string|void
|
|
*/
|
|
public function get($url = null)
|
|
{
|
|
return $this->send('GET', $url);
|
|
}
|
|
|
|
/**
|
|
* @param null $url
|
|
* @return bool|string|void
|
|
*/
|
|
public function delete($url = null)
|
|
{
|
|
return $this->send('DELETE', $url);
|
|
}
|
|
|
|
/**
|
|
* @param null $url
|
|
* @return bool|string|void
|
|
*/
|
|
public function post($url = null)
|
|
{
|
|
return $this->send('POST', $url);
|
|
}
|
|
|
|
/**
|
|
* @param null $url
|
|
* @return bool|string|void
|
|
*/
|
|
public function head($url = null)
|
|
{
|
|
return $this->send('HEAD', $url);
|
|
}
|
|
|
|
/**
|
|
* @param false $param
|
|
* @return mixed|null
|
|
*/
|
|
public function getRequestInfo($param = false)
|
|
{
|
|
if ($param) {
|
|
return $this->getDataItem('info', $param);
|
|
} else {
|
|
return $this->data['info'];
|
|
}
|
|
}
|
|
|
|
/**
|
|
* @param $what
|
|
* @param $name
|
|
* @return mixed|null
|
|
*/
|
|
private function getDataItem($what, $name)
|
|
{
|
|
if (isset($this->data[$what][$name])) {
|
|
return $this->data[$what][$name];
|
|
} else {
|
|
return null;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* @param false $param
|
|
* @return mixed|null
|
|
*/
|
|
public function getHeadersData($param = false)
|
|
{
|
|
if ($param) {
|
|
return $this->getDataItem('data', $param);
|
|
}
|
|
|
|
return $this->data['data'];
|
|
}
|
|
}
|