cfb1ddb4e5
- Firewall endpoints now use /firewall/{interface}/ where interface is
"primary" or "secondary" (was missing the interface segment)
- Add applyFirewallRulesets() method for applying predefined rulesets by ID
- Add firewallApplyRulesets client endpoint (comma-separated ruleset IDs)
- Add sanitizeFirewallInterface() helper for input validation
- All firewall methods now accept optional interface parameter (default: primary)
- Document that VirtFusion uses ruleset-based firewall (no individual rule CRUD)
- Update README with correct API paths and ruleset documentation
https://claude.ai/code/session_01TCsJ4WZCGuEX3zqh1tQ2zx
889 lines
29 KiB
PHP
889 lines
29 KiB
PHP
<?php
|
|
|
|
namespace WHMCS\Module\Server\VirtFusionDirect;
|
|
|
|
class Module
|
|
{
|
|
public function __construct()
|
|
{
|
|
Database::schema();
|
|
}
|
|
|
|
/**
|
|
* @param bool $exitOnError
|
|
* @return string
|
|
*/
|
|
public function validateAction($exitOnError = true)
|
|
{
|
|
if (!isset($_GET['action'])) {
|
|
$this->output(['success' => false, 'errors' => 'no action specified'], true, $exitOnError, 400);
|
|
}
|
|
return preg_replace('/[^a-zA-Z0-9_]/', '', $_GET['action']);
|
|
}
|
|
|
|
/**
|
|
* @param bool $exitOnError
|
|
* @return int
|
|
*/
|
|
public function validateServiceID($exitOnError = true)
|
|
{
|
|
if (!isset($_GET['serviceID']) || !is_numeric($_GET['serviceID'])) {
|
|
$this->output(['success' => false, 'errors' => 'no valid serviceID specified'], true, $exitOnError, 400);
|
|
}
|
|
return (int) $_GET['serviceID'];
|
|
}
|
|
|
|
/**
|
|
* @param int $serviceID
|
|
* @param bool $exitOnError
|
|
* @return int|false
|
|
*/
|
|
public function validateUserOwnsService($serviceID, $exitOnError = true)
|
|
{
|
|
$serviceID = (int) $serviceID;
|
|
$currentUser = new \WHMCS\Authentication\CurrentUser;
|
|
$client = $currentUser->client();
|
|
|
|
if (!$client) {
|
|
return false;
|
|
}
|
|
|
|
if (Database::userWhmcsService($serviceID, $client->id)) {
|
|
return $client->id;
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* @param int $serviceID
|
|
* @return false|string
|
|
*/
|
|
public function fetchLoginTokens($serviceID)
|
|
{
|
|
$serviceID = (int) $serviceID;
|
|
$service = Database::getSystemService($serviceID);
|
|
|
|
if ($service) {
|
|
$whmcsService = Database::getWhmcsService($serviceID);
|
|
|
|
$cp = $this->getCP($whmcsService->server);
|
|
$request = $this->initCurl($cp['token']);
|
|
$data = $request->post($cp['url'] . '/users/' . (int) $whmcsService->userid . '/serverAuthenticationTokens/' . (int) $service->server_id);
|
|
|
|
Log::insert(__FUNCTION__, $request->getRequestInfo(), $data);
|
|
|
|
if ($request->getRequestInfo('http_code') == '200') {
|
|
$data = json_decode($data);
|
|
if (isset($data->data->authentication->endpoint_complete)) {
|
|
return $cp['base_url'] . $data->data->authentication->endpoint_complete;
|
|
}
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
public function updateWhmcsServiceParamsOnServerObject($serviceId, $data)
|
|
{
|
|
$output = [];
|
|
|
|
$serverResource = (new ServerResource())->process($data);
|
|
|
|
$dedicatedIpv4 = null;
|
|
|
|
if (count($serverResource['primaryNetwork']['ipv4Unformatted'])) {
|
|
$dedicatedIpv4 = $serverResource['primaryNetwork']['ipv4Unformatted'][0];
|
|
}
|
|
|
|
if ($serverResource['hostname'] == '-') {
|
|
if ($serverResource['name'] == '-') {
|
|
$name = '';
|
|
} else {
|
|
$name = $serverResource['name'];
|
|
}
|
|
} else {
|
|
$name = $serverResource['hostname'];
|
|
}
|
|
|
|
$output['tblhosting'] = ["dedicatedip" => $dedicatedIpv4, "domain" => $name, "username" => $serverResource['username'], "password" => $serverResource['password']];
|
|
|
|
Database::updateWhmcsServiceParams($serviceId, $output);
|
|
}
|
|
|
|
public function updateWhmcsServiceParamsOnDestroy($serviceId)
|
|
{
|
|
$output['tblhosting'] = ["dedicatedip" => null];
|
|
|
|
Database::updateWhmcsServiceParams($serviceId, $output);
|
|
}
|
|
|
|
public function fetchServerData($serviceID)
|
|
{
|
|
$serviceID = (int) $serviceID;
|
|
$service = Database::getSystemService($serviceID);
|
|
|
|
if ($service) {
|
|
$whmcsService = Database::getWhmcsService($serviceID);
|
|
$cp = $this->getCP($whmcsService->server);
|
|
$request = $this->initCurl($cp['token']);
|
|
$data = $request->get($cp['url'] . '/servers/' . (int) $service->server_id);
|
|
|
|
Log::insert(__FUNCTION__, $request->getRequestInfo(), $data);
|
|
|
|
if ($request->getRequestInfo('http_code') == '200') {
|
|
return json_decode($data);
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* Execute a power action on a server.
|
|
*
|
|
* @param int $serviceID
|
|
* @param string $action One of: boot, shutdown, restart, poweroff
|
|
* @return object|false
|
|
*/
|
|
public function serverPowerAction($serviceID, $action)
|
|
{
|
|
$serviceID = (int) $serviceID;
|
|
$allowedActions = ['boot', 'shutdown', 'restart', 'poweroff'];
|
|
if (!in_array($action, $allowedActions, true)) {
|
|
return false;
|
|
}
|
|
|
|
$service = Database::getSystemService($serviceID);
|
|
|
|
if ($service) {
|
|
$whmcsService = Database::getWhmcsService($serviceID);
|
|
$cp = $this->getCP($whmcsService->server);
|
|
$request = $this->initCurl($cp['token']);
|
|
$data = $request->post($cp['url'] . '/servers/' . (int) $service->server_id . '/power/' . $action);
|
|
|
|
Log::insert(__FUNCTION__ . ':' . $action, $request->getRequestInfo(), $data);
|
|
|
|
$httpCode = $request->getRequestInfo('http_code');
|
|
if ($httpCode == 200 || $httpCode == 204) {
|
|
return json_decode($data) ?: (object) ['success' => true];
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* Rebuild/reinstall a server with a new OS.
|
|
*
|
|
* @param int $serviceID
|
|
* @param int $osId Operating system template ID
|
|
* @param string|null $hostname Optional new hostname
|
|
* @return object|false
|
|
*/
|
|
public function rebuildServer($serviceID, $osId, $hostname = null)
|
|
{
|
|
$serviceID = (int) $serviceID;
|
|
$osId = (int) $osId;
|
|
|
|
if ($osId <= 0) {
|
|
return false;
|
|
}
|
|
|
|
$service = Database::getSystemService($serviceID);
|
|
|
|
if ($service) {
|
|
$whmcsService = Database::getWhmcsService($serviceID);
|
|
$cp = $this->getCP($whmcsService->server);
|
|
$request = $this->initCurl($cp['token']);
|
|
|
|
$buildData = [
|
|
'operatingSystemId' => $osId,
|
|
'email' => true,
|
|
];
|
|
|
|
if ($hostname !== null && $hostname !== '') {
|
|
$buildData['hostname'] = $hostname;
|
|
}
|
|
|
|
$request->addOption(CURLOPT_POSTFIELDS, json_encode($buildData));
|
|
$data = $request->post($cp['url'] . '/servers/' . (int) $service->server_id . '/build');
|
|
|
|
Log::insert(__FUNCTION__, $request->getRequestInfo(), $data);
|
|
|
|
$httpCode = $request->getRequestInfo('http_code');
|
|
if ($httpCode == 200 || $httpCode == 201) {
|
|
return json_decode($data) ?: (object) ['success' => true];
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* Rename a server.
|
|
*
|
|
* @param int $serviceID
|
|
* @param string $newName
|
|
* @return bool
|
|
*/
|
|
public function renameServer($serviceID, $newName)
|
|
{
|
|
$serviceID = (int) $serviceID;
|
|
$newName = trim($newName);
|
|
|
|
if (empty($newName) || strlen($newName) > 255) {
|
|
return false;
|
|
}
|
|
|
|
$service = Database::getSystemService($serviceID);
|
|
|
|
if ($service) {
|
|
$whmcsService = Database::getWhmcsService($serviceID);
|
|
$cp = $this->getCP($whmcsService->server);
|
|
$request = $this->initCurl($cp['token']);
|
|
|
|
$request->addOption(CURLOPT_POSTFIELDS, json_encode(['name' => $newName]));
|
|
$data = $request->patch($cp['url'] . '/servers/' . (int) $service->server_id . '/name');
|
|
|
|
Log::insert(__FUNCTION__, $request->getRequestInfo(), $data);
|
|
|
|
$httpCode = $request->getRequestInfo('http_code');
|
|
return ($httpCode == 200 || $httpCode == 204);
|
|
}
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* Fetch available OS templates for a server's package.
|
|
*
|
|
* @param int $serviceID
|
|
* @return array|false
|
|
*/
|
|
public function fetchOsTemplates($serviceID)
|
|
{
|
|
$serviceID = (int) $serviceID;
|
|
$service = Database::getSystemService($serviceID);
|
|
|
|
if ($service) {
|
|
$whmcsService = Database::getWhmcsService($serviceID);
|
|
$cp = $this->getCP($whmcsService->server);
|
|
|
|
$product = \WHMCS\Database\Capsule::table('tblproducts')->where('id', $whmcsService->packageid)->first();
|
|
if (!$product || !$product->configoption2) {
|
|
return false;
|
|
}
|
|
|
|
$request = $this->initCurl($cp['token']);
|
|
$data = $request->get($cp['url'] . '/media/templates/fromServerPackageSpec/' . (int) $product->configoption2);
|
|
|
|
Log::insert(__FUNCTION__, $request->getRequestInfo(), $data);
|
|
|
|
if ($request->getRequestInfo('http_code') == '200') {
|
|
$templates = json_decode($data, true);
|
|
$result = [];
|
|
if (isset($templates['data'])) {
|
|
foreach ($templates['data'] as $osCategory) {
|
|
foreach ($osCategory['templates'] as $template) {
|
|
$result[] = [
|
|
'id' => $template['id'],
|
|
'name' => $template['name'] . ' ' . $template['version'] . ' ' . $template['variant'],
|
|
];
|
|
}
|
|
}
|
|
usort($result, function ($a, $b) {
|
|
return strcmp($a['name'], $b['name']);
|
|
});
|
|
}
|
|
return $result;
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
// =========================================================================
|
|
// Firewall Management
|
|
//
|
|
// VirtFusion uses a ruleset-based firewall system. Individual rules cannot
|
|
// be created or deleted via the API. Instead, predefined rulesets (created
|
|
// in the VirtFusion admin panel) are applied to servers by ID.
|
|
//
|
|
// The {interface} parameter is "primary" or "secondary".
|
|
// =========================================================================
|
|
|
|
/**
|
|
* Get firewall status and rules for a server.
|
|
*
|
|
* @param int $serviceID
|
|
* @param string $interface Network interface: "primary" or "secondary"
|
|
* @return array|false
|
|
*/
|
|
public function getFirewallStatus($serviceID, $interface = 'primary')
|
|
{
|
|
$serviceID = (int) $serviceID;
|
|
$interface = $this->sanitizeFirewallInterface($interface);
|
|
$service = Database::getSystemService($serviceID);
|
|
|
|
if ($service) {
|
|
$whmcsService = Database::getWhmcsService($serviceID);
|
|
$cp = $this->getCP($whmcsService->server);
|
|
$request = $this->initCurl($cp['token']);
|
|
$data = $request->get($cp['url'] . '/servers/' . (int) $service->server_id . '/firewall/' . $interface);
|
|
|
|
Log::insert(__FUNCTION__, $request->getRequestInfo(), $data);
|
|
|
|
if ($request->getRequestInfo('http_code') == 200) {
|
|
return json_decode($data, true);
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* Enable firewall on a server.
|
|
*
|
|
* @param int $serviceID
|
|
* @param string $interface Network interface: "primary" or "secondary"
|
|
* @return object|false
|
|
*/
|
|
public function enableFirewall($serviceID, $interface = 'primary')
|
|
{
|
|
$serviceID = (int) $serviceID;
|
|
$interface = $this->sanitizeFirewallInterface($interface);
|
|
$service = Database::getSystemService($serviceID);
|
|
|
|
if ($service) {
|
|
$whmcsService = Database::getWhmcsService($serviceID);
|
|
$cp = $this->getCP($whmcsService->server);
|
|
$request = $this->initCurl($cp['token']);
|
|
$data = $request->post($cp['url'] . '/servers/' . (int) $service->server_id . '/firewall/' . $interface . '/enable');
|
|
|
|
Log::insert(__FUNCTION__, $request->getRequestInfo(), $data);
|
|
|
|
$httpCode = $request->getRequestInfo('http_code');
|
|
if ($httpCode == 200 || $httpCode == 204) {
|
|
return json_decode($data) ?: (object) ['success' => true];
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* Disable firewall on a server.
|
|
*
|
|
* @param int $serviceID
|
|
* @param string $interface Network interface: "primary" or "secondary"
|
|
* @return object|false
|
|
*/
|
|
public function disableFirewall($serviceID, $interface = 'primary')
|
|
{
|
|
$serviceID = (int) $serviceID;
|
|
$interface = $this->sanitizeFirewallInterface($interface);
|
|
$service = Database::getSystemService($serviceID);
|
|
|
|
if ($service) {
|
|
$whmcsService = Database::getWhmcsService($serviceID);
|
|
$cp = $this->getCP($whmcsService->server);
|
|
$request = $this->initCurl($cp['token']);
|
|
$data = $request->post($cp['url'] . '/servers/' . (int) $service->server_id . '/firewall/' . $interface . '/disable');
|
|
|
|
Log::insert(__FUNCTION__, $request->getRequestInfo(), $data);
|
|
|
|
$httpCode = $request->getRequestInfo('http_code');
|
|
if ($httpCode == 200 || $httpCode == 204) {
|
|
return json_decode($data) ?: (object) ['success' => true];
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* Apply firewall rulesets to a server.
|
|
*
|
|
* VirtFusion uses predefined rulesets (created in admin panel).
|
|
* Individual rules cannot be added/deleted via the API.
|
|
*
|
|
* @param int $serviceID
|
|
* @param array $rulesetIds Array of ruleset IDs to apply
|
|
* @param string $interface Network interface: "primary" or "secondary"
|
|
* @return object|false
|
|
*/
|
|
public function applyFirewallRulesets($serviceID, array $rulesetIds, $interface = 'primary')
|
|
{
|
|
$serviceID = (int) $serviceID;
|
|
$interface = $this->sanitizeFirewallInterface($interface);
|
|
|
|
// Validate and sanitize ruleset IDs
|
|
$rulesetIds = array_values(array_filter(array_map('intval', $rulesetIds), function ($id) {
|
|
return $id > 0;
|
|
}));
|
|
|
|
if (empty($rulesetIds)) {
|
|
return false;
|
|
}
|
|
|
|
$service = Database::getSystemService($serviceID);
|
|
|
|
if ($service) {
|
|
$whmcsService = Database::getWhmcsService($serviceID);
|
|
$cp = $this->getCP($whmcsService->server);
|
|
$request = $this->initCurl($cp['token']);
|
|
$request->addOption(CURLOPT_POSTFIELDS, json_encode(['rulesets' => $rulesetIds]));
|
|
$data = $request->post($cp['url'] . '/servers/' . (int) $service->server_id . '/firewall/' . $interface . '/rules');
|
|
|
|
Log::insert(__FUNCTION__, $request->getRequestInfo(), $data);
|
|
|
|
$httpCode = $request->getRequestInfo('http_code');
|
|
if ($httpCode == 200 || $httpCode == 201 || $httpCode == 204) {
|
|
return json_decode($data) ?: (object) ['success' => true];
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* Backward-compatible wrapper for applying firewall rules.
|
|
* Syncs/applies existing ruleset assignments on the server.
|
|
*
|
|
* @param int $serviceID
|
|
* @param string $interface Network interface: "primary" or "secondary"
|
|
* @return object|false
|
|
*/
|
|
public function applyFirewallRules($serviceID, $interface = 'primary')
|
|
{
|
|
// Fetch current firewall status to get assigned rulesets
|
|
$status = $this->getFirewallStatus($serviceID, $interface);
|
|
if ($status && isset($status['data']['rulesets'])) {
|
|
$rulesetIds = array_column($status['data']['rulesets'], 'id');
|
|
if (!empty($rulesetIds)) {
|
|
return $this->applyFirewallRulesets($serviceID, $rulesetIds, $interface);
|
|
}
|
|
}
|
|
|
|
// If no rulesets found, try a direct re-apply via the enable cycle
|
|
$serviceID = (int) $serviceID;
|
|
$interface = $this->sanitizeFirewallInterface($interface);
|
|
$service = Database::getSystemService($serviceID);
|
|
|
|
if ($service) {
|
|
$whmcsService = Database::getWhmcsService($serviceID);
|
|
$cp = $this->getCP($whmcsService->server);
|
|
$request = $this->initCurl($cp['token']);
|
|
$request->addOption(CURLOPT_POSTFIELDS, json_encode(['rulesets' => []]));
|
|
$data = $request->post($cp['url'] . '/servers/' . (int) $service->server_id . '/firewall/' . $interface . '/rules');
|
|
|
|
Log::insert(__FUNCTION__, $request->getRequestInfo(), $data);
|
|
|
|
$httpCode = $request->getRequestInfo('http_code');
|
|
if ($httpCode == 200 || $httpCode == 201 || $httpCode == 204) {
|
|
return json_decode($data) ?: (object) ['success' => true];
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* Sanitize firewall interface parameter.
|
|
*
|
|
* @param string $interface
|
|
* @return string "primary" or "secondary"
|
|
*/
|
|
private function sanitizeFirewallInterface($interface)
|
|
{
|
|
return in_array($interface, ['primary', 'secondary'], true) ? $interface : 'primary';
|
|
}
|
|
|
|
// =========================================================================
|
|
// IP Address Management
|
|
// =========================================================================
|
|
|
|
/**
|
|
* Add an IPv4 address to a server.
|
|
*
|
|
* @param int $serviceID
|
|
* @return object|false
|
|
*/
|
|
public function addIPv4($serviceID)
|
|
{
|
|
$serviceID = (int) $serviceID;
|
|
$service = Database::getSystemService($serviceID);
|
|
|
|
if ($service) {
|
|
$whmcsService = Database::getWhmcsService($serviceID);
|
|
$cp = $this->getCP($whmcsService->server);
|
|
$request = $this->initCurl($cp['token']);
|
|
$data = $request->post($cp['url'] . '/servers/' . (int) $service->server_id . '/ipv4');
|
|
|
|
Log::insert(__FUNCTION__, $request->getRequestInfo(), $data);
|
|
|
|
$httpCode = $request->getRequestInfo('http_code');
|
|
if ($httpCode == 200 || $httpCode == 201) {
|
|
return json_decode($data) ?: (object) ['success' => true];
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* Remove an IPv4 address from a server.
|
|
*
|
|
* @param int $serviceID
|
|
* @param string $ipAddress The IPv4 address to remove
|
|
* @return object|false
|
|
*/
|
|
public function removeIPv4($serviceID, $ipAddress)
|
|
{
|
|
$serviceID = (int) $serviceID;
|
|
$ipAddress = filter_var($ipAddress, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4);
|
|
if (!$ipAddress) {
|
|
return false;
|
|
}
|
|
|
|
$service = Database::getSystemService($serviceID);
|
|
|
|
if ($service) {
|
|
$whmcsService = Database::getWhmcsService($serviceID);
|
|
$cp = $this->getCP($whmcsService->server);
|
|
$request = $this->initCurl($cp['token']);
|
|
$request->addOption(CURLOPT_POSTFIELDS, json_encode(['address' => $ipAddress]));
|
|
$data = $request->delete($cp['url'] . '/servers/' . (int) $service->server_id . '/ipv4');
|
|
|
|
Log::insert(__FUNCTION__, $request->getRequestInfo(), $data);
|
|
|
|
$httpCode = $request->getRequestInfo('http_code');
|
|
if ($httpCode == 200 || $httpCode == 204) {
|
|
return json_decode($data) ?: (object) ['success' => true];
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* Add an IPv6 subnet to a server.
|
|
*
|
|
* @param int $serviceID
|
|
* @return object|false
|
|
*/
|
|
public function addIPv6($serviceID)
|
|
{
|
|
$serviceID = (int) $serviceID;
|
|
$service = Database::getSystemService($serviceID);
|
|
|
|
if ($service) {
|
|
$whmcsService = Database::getWhmcsService($serviceID);
|
|
$cp = $this->getCP($whmcsService->server);
|
|
$request = $this->initCurl($cp['token']);
|
|
$data = $request->post($cp['url'] . '/servers/' . (int) $service->server_id . '/ipv6');
|
|
|
|
Log::insert(__FUNCTION__, $request->getRequestInfo(), $data);
|
|
|
|
$httpCode = $request->getRequestInfo('http_code');
|
|
if ($httpCode == 200 || $httpCode == 201) {
|
|
return json_decode($data) ?: (object) ['success' => true];
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* Remove an IPv6 subnet from a server.
|
|
*
|
|
* @param int $serviceID
|
|
* @param string $subnet The IPv6 subnet to remove
|
|
* @return object|false
|
|
*/
|
|
public function removeIPv6($serviceID, $subnet)
|
|
{
|
|
$serviceID = (int) $serviceID;
|
|
$subnet = trim($subnet);
|
|
if (empty($subnet)) {
|
|
return false;
|
|
}
|
|
|
|
$service = Database::getSystemService($serviceID);
|
|
|
|
if ($service) {
|
|
$whmcsService = Database::getWhmcsService($serviceID);
|
|
$cp = $this->getCP($whmcsService->server);
|
|
$request = $this->initCurl($cp['token']);
|
|
$request->addOption(CURLOPT_POSTFIELDS, json_encode(['subnet' => $subnet]));
|
|
$data = $request->delete($cp['url'] . '/servers/' . (int) $service->server_id . '/ipv6');
|
|
|
|
Log::insert(__FUNCTION__, $request->getRequestInfo(), $data);
|
|
|
|
$httpCode = $request->getRequestInfo('http_code');
|
|
if ($httpCode == 200 || $httpCode == 204) {
|
|
return json_decode($data) ?: (object) ['success' => true];
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
// =========================================================================
|
|
// Backup Management
|
|
// =========================================================================
|
|
|
|
/**
|
|
* Assign a backup plan to a server.
|
|
*
|
|
* @param int $serviceID
|
|
* @param int $planId Backup plan ID (0 to remove)
|
|
* @return object|false
|
|
*/
|
|
public function assignBackupPlan($serviceID, $planId)
|
|
{
|
|
$serviceID = (int) $serviceID;
|
|
$planId = (int) $planId;
|
|
|
|
$service = Database::getSystemService($serviceID);
|
|
|
|
if ($service) {
|
|
$whmcsService = Database::getWhmcsService($serviceID);
|
|
$cp = $this->getCP($whmcsService->server);
|
|
$request = $this->initCurl($cp['token']);
|
|
$request->addOption(CURLOPT_POSTFIELDS, json_encode(['planId' => $planId]));
|
|
|
|
if ($planId > 0) {
|
|
$data = $request->post($cp['url'] . '/servers/' . (int) $service->server_id . '/backup/plan');
|
|
} else {
|
|
$data = $request->delete($cp['url'] . '/servers/' . (int) $service->server_id . '/backup/plan');
|
|
}
|
|
|
|
Log::insert(__FUNCTION__, $request->getRequestInfo(), $data);
|
|
|
|
$httpCode = $request->getRequestInfo('http_code');
|
|
if ($httpCode == 200 || $httpCode == 204) {
|
|
return json_decode($data) ?: (object) ['success' => true];
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
// =========================================================================
|
|
// VNC Console
|
|
// =========================================================================
|
|
|
|
/**
|
|
* Get VNC console connection details for a server.
|
|
*
|
|
* @param int $serviceID
|
|
* @return array|false
|
|
*/
|
|
public function getVncConsole($serviceID)
|
|
{
|
|
$serviceID = (int) $serviceID;
|
|
$service = Database::getSystemService($serviceID);
|
|
|
|
if ($service) {
|
|
$whmcsService = Database::getWhmcsService($serviceID);
|
|
$cp = $this->getCP($whmcsService->server);
|
|
$request = $this->initCurl($cp['token']);
|
|
$data = $request->get($cp['url'] . '/servers/' . (int) $service->server_id . '/vnc');
|
|
|
|
Log::insert(__FUNCTION__, $request->getRequestInfo(), $data);
|
|
|
|
if ($request->getRequestInfo('http_code') == 200) {
|
|
return json_decode($data, true);
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
// =========================================================================
|
|
// Resource Modification
|
|
// =========================================================================
|
|
|
|
/**
|
|
* Modify a server resource (memory, cpuCores, or traffic).
|
|
*
|
|
* @param int $serviceID
|
|
* @param string $resource One of: memory, cpuCores, traffic
|
|
* @param int $value New value for the resource
|
|
* @return object|false
|
|
*/
|
|
public function modifyResource($serviceID, $resource, $value)
|
|
{
|
|
$serviceID = (int) $serviceID;
|
|
$allowedResources = ['memory', 'cpuCores', 'traffic'];
|
|
if (!in_array($resource, $allowedResources, true)) {
|
|
return false;
|
|
}
|
|
|
|
$value = (int) $value;
|
|
if ($value < 0) {
|
|
return false;
|
|
}
|
|
|
|
$service = Database::getSystemService($serviceID);
|
|
|
|
if ($service) {
|
|
$whmcsService = Database::getWhmcsService($serviceID);
|
|
$cp = $this->getCP($whmcsService->server);
|
|
$request = $this->initCurl($cp['token']);
|
|
$request->addOption(CURLOPT_POSTFIELDS, json_encode([$resource => $value]));
|
|
$data = $request->put($cp['url'] . '/servers/' . (int) $service->server_id . '/modify/' . $resource);
|
|
|
|
Log::insert(__FUNCTION__ . ':' . $resource, $request->getRequestInfo(), $data);
|
|
|
|
$httpCode = $request->getRequestInfo('http_code');
|
|
if ($httpCode == 200 || $httpCode == 204) {
|
|
return json_decode($data) ?: (object) ['success' => true];
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
// =========================================================================
|
|
// Dry Run Validation
|
|
// =========================================================================
|
|
|
|
/**
|
|
* Validate server creation parameters without actually creating a server.
|
|
*
|
|
* @param array $options Server creation options
|
|
* @param int $serverId WHMCS server ID for API credentials
|
|
* @return array ['valid' => bool, 'errors' => array]
|
|
*/
|
|
public function validateServerCreation($options, $serverId)
|
|
{
|
|
$cp = $this->getCP($serverId, !$serverId);
|
|
if (!$cp) {
|
|
return ['valid' => false, 'errors' => ['No control server found']];
|
|
}
|
|
|
|
$request = $this->initCurl($cp['token']);
|
|
$request->addOption(CURLOPT_POSTFIELDS, json_encode($options));
|
|
$data = $request->post($cp['url'] . '/servers?dryRun=true');
|
|
|
|
Log::insert(__FUNCTION__, $request->getRequestInfo(), $data);
|
|
|
|
$httpCode = $request->getRequestInfo('http_code');
|
|
$response = json_decode($data, true);
|
|
|
|
if ($httpCode == 200 || $httpCode == 201) {
|
|
return ['valid' => true, 'errors' => []];
|
|
}
|
|
|
|
$errors = [];
|
|
if (isset($response['errors']) && is_array($response['errors'])) {
|
|
$errors = $response['errors'];
|
|
} elseif (isset($response['msg'])) {
|
|
$errors = [$response['msg']];
|
|
} else {
|
|
$errors = ['Validation failed with HTTP ' . $httpCode];
|
|
}
|
|
|
|
return ['valid' => false, 'errors' => $errors];
|
|
}
|
|
|
|
public function resetUserPassword($serviceID, $clientID)
|
|
{
|
|
$serviceID = (int) $serviceID;
|
|
$clientID = (int) $clientID;
|
|
$service = Database::getSystemService($serviceID);
|
|
|
|
if ($service) {
|
|
$whmcsService = Database::getWhmcsService($serviceID);
|
|
$cp = $this->getCP($whmcsService->server);
|
|
$request = $this->initCurl($cp['token']);
|
|
$data = $request->post($cp['url'] . '/users/' . $clientID . '/byExtRelation/resetPassword');
|
|
|
|
Log::insert(__FUNCTION__, $request->getRequestInfo(), $data);
|
|
|
|
if ($request->getRequestInfo('http_code') == '201') {
|
|
return json_decode($data);
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* @param $data
|
|
* @param bool $json
|
|
* @param bool $exit
|
|
* @param int $rspCode
|
|
*/
|
|
public function output($data, $json = true, $exit = true, $rspCode = 200)
|
|
{
|
|
http_response_code($rspCode);
|
|
|
|
if ($json) {
|
|
header('Content-Type: application/json; charset=utf-8');
|
|
echo json_encode($data);
|
|
} else {
|
|
echo $data;
|
|
}
|
|
|
|
if ($exit) {
|
|
exit();
|
|
}
|
|
}
|
|
|
|
/**
|
|
* @param $server
|
|
* @return array|false
|
|
*/
|
|
public function getCP($server, $any = false)
|
|
{
|
|
$cp = Database::getWhmcsServer($server, $any);
|
|
|
|
if ($cp) {
|
|
return [
|
|
'url' => 'https://' . $cp->hostname . '/api/v1',
|
|
'base_url' => 'https://' . $cp->hostname,
|
|
'token' => decrypt($cp->password)];
|
|
}
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* @return bool|void
|
|
*/
|
|
public function adminOnly()
|
|
{
|
|
if ((new \WHMCS\Authentication\CurrentUser)->isAuthenticatedAdmin()) {
|
|
return true;
|
|
}
|
|
|
|
$this->output(['success' => false, 'errors' => 'unauthenticated'], true, true, 401);
|
|
}
|
|
|
|
/**
|
|
* @return bool|void
|
|
*/
|
|
public function isAuthenticated()
|
|
{
|
|
if ((new \WHMCS\Authentication\CurrentUser)->isAuthenticatedUser()) {
|
|
return true;
|
|
}
|
|
|
|
$this->output(['success' => false, 'errors' => 'unauthenticated'], true, true, 401);
|
|
}
|
|
|
|
/**
|
|
* @param $token
|
|
* @return \WHMCS\Module\Server\VirtFusionDirect\Curl
|
|
*/
|
|
public function initCurl($token)
|
|
{
|
|
$curl = new Curl();
|
|
|
|
$curl->addOption(CURLOPT_HTTPHEADER, [
|
|
'Accept: application/json',
|
|
'Content-type: application/json; charset=utf-8',
|
|
'authorization: Bearer ' . $token
|
|
]);
|
|
|
|
return $curl;
|
|
}
|
|
|
|
/**
|
|
* Decodes a response from JSON into an associative array.
|
|
*
|
|
* @param string $response
|
|
*
|
|
* @return array
|
|
* @throws \JsonException
|
|
*/
|
|
public function decodeResponseFromJson(string $response): array
|
|
{
|
|
return json_decode($response, true, 512, JSON_THROW_ON_ERROR);
|
|
}
|
|
}
|