234 lines
9.2 KiB
PHP
234 lines
9.2 KiB
PHP
<?php
|
|
/**
|
|
* D-Star reflector link manager — admin-only POST handler + form.
|
|
*
|
|
* Loaded inline by /index.php only on the admin path
|
|
* (`$_SERVER["PHP_SELF"] == "/admin/index.php"` gate at the top).
|
|
* Two responsibilities:
|
|
*
|
|
* 1. POST handler. Accepts form fields:
|
|
* - Link ("LINK" or "UNLINK")
|
|
* - RefName (7-char reflector name, e.g. REF001 / DCS007)
|
|
* - Letter (single-letter reflector module, A-Z)
|
|
* - Module (8-char repeater callsign+band, e.g. "MW0MWZ B")
|
|
* Each is validated by a preg_match whitelist (unsetting on bad
|
|
* input) before being interpolated into a `sudo remotecontrold ...`
|
|
* shell command. Refer to the security pass for hardening — the
|
|
* validation is the only barrier to command injection.
|
|
*
|
|
* 2. Form rendering. Drop-downs for Module (from repeaterBand1..4),
|
|
* RefName (DCS_Hosts.txt + DPlus_Hosts.txt + DExtra_Hosts.txt),
|
|
* Letter (A-Z), and a LINK / UNLINK radio pair. Uses the
|
|
* alternative `if (...): ... else: ?> ...HTML... <?php endif; ?>`
|
|
* template syntax — preserve the colons.
|
|
*
|
|
* Also surfaces a "PiStar-Keeper Logbook" panel below the form when
|
|
* /usr/local/sbin/pistar-keeper is running (last 5 entries from
|
|
* /var/pistar-keeper/pistar-keeper.log + a download link).
|
|
*/
|
|
|
|
|
|
require_once($_SERVER['DOCUMENT_ROOT'] . '/config/security_headers.php');
|
|
setSecurityHeaders();
|
|
|
|
if ($_SERVER["PHP_SELF"] == "/admin/index.php") {
|
|
include_once $_SERVER['DOCUMENT_ROOT'].'/config/language.php'; // Translation Code
|
|
|
|
if (!empty($_POST) && isset($_POST["dstrMgrSubmit"])):
|
|
//if (!empty($_POST)):
|
|
if (preg_match('/[^A-Z]/',$_POST["Link"])) { unset ($_POST["Link"]);}
|
|
if ($_POST["Link"] == "LINK") {
|
|
if (preg_match('/[^A-Za-z0-9 ]/',$_POST["RefName"])) { unset ($_POST["RefName"]);}
|
|
if (preg_match('/[^A-Z]/',$_POST["Letter"])) { unset ($_POST["Letter"]);}
|
|
if (preg_match('/[^A-Z0-9 ]/',$_POST["Module"])) { unset ($_POST["Module"]);}
|
|
}
|
|
if ($_POST["Link"] == "UNLINK") {
|
|
if (preg_match('/[^A-Z0-9 ]/',$_POST["Module"])) { unset ($_POST["Module"]);}
|
|
}
|
|
|
|
if (empty($_POST["RefName"]) || empty($_POST["Letter"]) || empty($_POST["Module"])) { echo "Somthing wrong with your input, try again";}
|
|
|
|
|
|
else {
|
|
if (strlen($_POST["RefName"]) != 7) {
|
|
$targetRef = str_pad($_POST["RefName"], 7, " ");
|
|
} else {
|
|
$targetRef = $_POST["RefName"];
|
|
}
|
|
$targetRef = $targetRef.$_POST["Letter"];
|
|
$targetRef = strtoupper($targetRef);
|
|
$module = $_POST["Module"];
|
|
|
|
if (strlen($module) != 8) { //Fix the length of the module information
|
|
$moduleFixedCs = strlen($module) - 1; //Length of the string, -1
|
|
$moduleFixedBand = substr($module, -1); //Single Band Letter in the 8th position
|
|
$moduleFixedCallPad = str_pad(substr($module, 0, $moduleFixedCs), 7); //Pad the callsign area to 7 chars
|
|
$module = $moduleFixedCallPad.$moduleFixedBand; //Re add the band information
|
|
};
|
|
|
|
$unlinkCommand = "sudo remotecontrold \"".$module."\" unlink";
|
|
$linkCommand = "sudo remotecontrold \"".$module."\" link never \"".$targetRef."\"";
|
|
|
|
if ($module != $targetRef && $_POST["Link"] == "LINK") { // Sanity check that we are not connecting to ourself
|
|
echo "<b>D-Star Link Manager</b>\n";
|
|
echo "<table>\n<tr><th>Command Output</th></tr>\n<tr><td>";
|
|
echo htmlspecialchars((string)exec($linkCommand), ENT_QUOTES, 'UTF-8');
|
|
echo "</td></tr>\n</table>\n";
|
|
}
|
|
if ($module == $targetRef && $_POST["Link"] == "LINK") { // Sanity Check Failed
|
|
echo "<b>D-Star Link Manager</b>\n";
|
|
echo "<table>\n<tr><th>Command Output</th></tr>\n<tr><td>";
|
|
echo "Cannot link to myself - Aborting link request!";
|
|
echo "</td></tr>\n</table>\n";
|
|
}
|
|
if ($_POST["Link"] == "UNLINK") { // Allow Unlink no matter what
|
|
echo "<b>D-Star Link Manager</b>\n";
|
|
echo "<table>\n<tr><th>Command Output</th></tr>\n<tr><td>";
|
|
echo htmlspecialchars((string)exec($unlinkCommand), ENT_QUOTES, 'UTF-8');
|
|
echo "</td></tr>\n</table>\n";
|
|
}
|
|
}
|
|
|
|
unset($_POST);
|
|
echo '<script type="text/javascript">setTimeout(function() { window.location=window.location;},2000);</script>';
|
|
|
|
else: ?>
|
|
<b><?php echo $lang['d-star_link_manager'];?></b>
|
|
<form action="//<?php echo htmlentities($_SERVER['HTTP_HOST']).htmlentities($_SERVER['PHP_SELF']); ?>" method="post">
|
|
<?php csrf_field(); ?>
|
|
<table>
|
|
<tr>
|
|
<th width="150"><a class="tooltip" href="#">Radio Module<span><b>Radio Module</b></span></a></th>
|
|
<th width="180"><a class="tooltip" href="#">Reflector<span><b>Reflector</b></span></a></th>
|
|
<th width="150"><a class="tooltip" href="#">Link / Un-Link<span><b>Link / Un-Link</b></span></a></th>
|
|
<th><a class="tooltip" href="#">Action<span><b>Action</b></span></a></th>
|
|
</tr>
|
|
<tr>
|
|
<td>
|
|
<select name="Module">
|
|
<?php
|
|
$ci = 0;
|
|
for($i = 1;$i < 5; $i++){
|
|
$param="repeaterBand" . $i;
|
|
if((isset($configs[$param])) && strlen($configs[$param]) == 1) {
|
|
$ci++;
|
|
if($ci > 1) { $ci = 0; }
|
|
$module = $configs[$param];
|
|
$rcall = sprintf("%-7.7s%-1.1s",$MYCALL,$module);
|
|
$param="repeaterCall" . $i;
|
|
if(isset($configs[$param])) { $rptrcall=sprintf("%-7.7s%-1.1s",$configs[$param],$module); } else { $rptrcall = $rcall;}
|
|
print "<option>$rptrcall</option>\n";
|
|
}
|
|
} ?>
|
|
</select>
|
|
</td>
|
|
<td>
|
|
<select name="RefName"
|
|
onchange="if (this.options[this.selectedIndex].value == 'customOption') {
|
|
toggleField(this,this.nextSibling);
|
|
this.selectedIndex='0';
|
|
} ">
|
|
<?php
|
|
$dcsFile = fopen("/usr/local/etc/DCS_Hosts.txt", "r");
|
|
$dplusFile = fopen("/usr/local/etc/DPlus_Hosts.txt", "r");
|
|
$dextraFile = fopen("/usr/local/etc/DExtra_Hosts.txt", "r");
|
|
|
|
echo " <option value=\"".substr($configs['reflector1'], 0, 6)."\" selected=\"selected\">".substr($configs['reflector1'], 0, 6)."</option>\n";
|
|
echo " <option value=\"customOption\">Text Entry</option>\n";
|
|
|
|
while (!feof($dcsFile)) {
|
|
$dcsLine = fgets($dcsFile);
|
|
if (strpos($dcsLine, 'DCS') !== FALSE && strpos($dcsLine, '#') === FALSE) {
|
|
echo " <option value=\"".substr($dcsLine, 0, 6)."\">".substr($dcsLine, 0, 6)."</option>\n";
|
|
}
|
|
if (strpos($dcsLine, 'XLX') !== FALSE && strpos($dcsLine, '#') === FALSE) {
|
|
echo " <option value=\"".substr($dcsLine, 0, 6)."\">".substr($dcsLine, 0, 6)."</option>\n";
|
|
}
|
|
}
|
|
fclose($dcsFile);
|
|
|
|
while (!feof($dplusFile)) {
|
|
$dplusLine = fgets($dplusFile);
|
|
if (strpos($dplusLine, 'REF') !== FALSE && strpos($dplusLine, '#') === FALSE) {
|
|
echo " <option value=\"".substr($dplusLine, 0, 6)."\">".substr($dplusLine, 0, 6)."</option>\n";
|
|
}
|
|
if (strpos($dplusLine, 'XRF') !== FALSE && strpos($dplusLine, '#') === FALSE) {
|
|
echo " <option value=\"".substr($dplusLine, 0, 6)."\">".substr($dplusLine, 0, 6)."</option>\n";
|
|
}
|
|
}
|
|
fclose($dplusFile);
|
|
|
|
while (!feof($dextraFile)) {
|
|
$dextraLine = fgets($dextraFile);
|
|
if (strpos($dextraLine, 'XRF') !== FALSE && strpos($dextraLine, '#') === FALSE)
|
|
echo " <option value=\"".substr($dextraLine, 0, 6)."\">".substr($dextraLine, 0, 6)."</option>\n";
|
|
}
|
|
fclose($dextraFile);
|
|
|
|
?>
|
|
</select><input name="RefName" style="display:none;" disabled="disabled" type="text" size="7" maxlength="7"
|
|
onblur="if(this.value==''){toggleField(this,this.previousSibling);}" />
|
|
<select name="Letter">
|
|
<?php echo " <option value=\"".substr($configs['reflector1'], 7)."\" selected=\"selected\">".substr($configs['reflector1'], 7)."</option>\n"; ?>
|
|
<option>A</option>
|
|
<option>B</option>
|
|
<option>C</option>
|
|
<option>D</option>
|
|
<option>E</option>
|
|
<option>F</option>
|
|
<option>G</option>
|
|
<option>H</option>
|
|
<option>I</option>
|
|
<option>J</option>
|
|
<option>K</option>
|
|
<option>L</option>
|
|
<option>M</option>
|
|
<option>N</option>
|
|
<option>O</option>
|
|
<option>P</option>
|
|
<option>Q</option>
|
|
<option>R</option>
|
|
<option>S</option>
|
|
<option>T</option>
|
|
<option>U</option>
|
|
<option>V</option>
|
|
<option>W</option>
|
|
<option>X</option>
|
|
<option>Y</option>
|
|
<option>Z</option>
|
|
</select>
|
|
</td>
|
|
<td>
|
|
<input type="radio" name="Link" value="LINK" checked="checked" />Link
|
|
<input type="radio" name="Link" value="UNLINK" />UnLink
|
|
</td>
|
|
<td>
|
|
<input type="submit" name="dstrMgrSubmit" value="Request Change" />
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
</form>
|
|
<?php endif; ?>
|
|
|
|
<?php
|
|
exec ("pgrep pistar-keeper", $pids);
|
|
if (!empty($pids))
|
|
{
|
|
echo "<br />\n";
|
|
echo "<b>PiStar-Keeper Logbook</b><input type=button onClick=\"location.href='/admin/pistar-keeper-download.php'\" value=\"Download Logbook\">\n";
|
|
echo "<table>\n";
|
|
echo " <tr>\n";
|
|
echo " <th><a class=\"tooltip\" href=\"#\">PiStar-Keeper Log Entries (UTC)<span><b>PiStar-Keeper Log Entries (UTC)</b></span></th>\n";
|
|
echo " </tr>\n";
|
|
|
|
exec ("tail -n 5 /var/pistar-keeper/pistar-keeper.log", $lines);
|
|
$counter = 0;
|
|
foreach ($lines as $line) {
|
|
echo "<tr><td align=\"left\">".$lines[$counter]."</td></tr>\n";
|
|
$counter++;
|
|
}
|
|
|
|
echo "</table>\n";
|
|
}
|
|
}
|