Da

✏️ Editing: InstallLswsInput.php

<?php

/** ******************************************
 * LiteSpeed Web Server Plugin for Plesk
 *
 * @author    LiteSpeed Technologies, Inc.
 * @copyright 2020-2025 LiteSpeed Technologies, Inc.
 * @since     1.4
 * ******************************************* */

use Modules_Litespeed_PleskExtensionException as PleskExtensionException;
use Modules_Litespeed_Util as Util;

/**
 * @since 1.4
 */
class Modules_Litespeed_InstallLswsInput
{

/**
     * @since 1.4
     * @var   string
     */
    const INPUT_ADMIN_EMAIL = 'adminEmail';

/**
     * @since 1.4
     * @var   string
     */
    const INPUT_ADMIN_LOGIN = 'adminLogin';

/**
     * @since 1.4
     * @var   string
     */
    const INPUT_ADMIN_PASS = 'adminPass';

/**
     * @since 1.4
     * @var   string
     */
    const INPUT_ADMIN_PASS1 = 'adminPass1';

/**
     * @since 1.4
     * @var   string
     */
    const INPUT_INSTALL_TYPE = 'installType';

/**
     * @since 1.4
     * @var   string
     */
    const INPUT_LICENSE_AGREE = 'licenseAgree';

/**
     * @since 1.4
     * @var   string
     */
    const INPUT_LSWS_HOME = 'lswsHome';

/**
     * @since 1.4
     * @var   string
     */
    const INPUT_OPEN_QUIC_PORT = 'openQuicPort';

/**
     * @since 1.4
     * @var   string
     */
    const INPUT_OPEN_WEBADMIN_PORT = 'openWebAdminPort';

/**
     * @since 1.4
     * @var   string
     */
    const INPUT_PORT_OFFSET = 'portOffset';

/**
     * @since 1.4
     * @var   string
     */
    const INPUT_SERIAL_NO = 'serialNo';

/**
     * @since 1.4
     * @var   string
     */
    const INPUT_SET_CACHE_ROOTS = 'setCacheRoots';

/**
     * @since 1.4
     * @var   string
     */
    const INPUT_SWITCH_TO_LSWS = 'switchToLsws';

/**
     * @since 1.4
     * @var   array
     */
    private $input = array();

/**
     * @since 1.4
     * @var   string[]
     */
    private $errors = array();

/**
     *
     * @since 1.4
     */
    public function __construct() {}

/**
     *
     * @since 1.4
     */
    public function setDefaultValues()
    {
        $email = Util::getPleskAdminEmail();

$this->input[self::INPUT_ADMIN_EMAIL]        =
            ($email != '') ? $email : 'root@localhost';
        $this->input[self::INPUT_ADMIN_LOGIN]        = 'admin';
        $this->input[self::INPUT_ADMIN_PASS]         = '';
        $this->input[self::INPUT_ADMIN_PASS1]        = '';
        $this->input[self::INPUT_INSTALL_TYPE]       = '';
        $this->input[self::INPUT_LICENSE_AGREE]      = '';
        $this->input[self::INPUT_LSWS_HOME]          = '/usr/local/lsws';
        $this->input[self::INPUT_OPEN_QUIC_PORT]     = '';
        $this->input[self::INPUT_OPEN_WEBADMIN_PORT] = 'agree';
        $this->input[self::INPUT_PORT_OFFSET]        = 0;
        $this->input[self::INPUT_SERIAL_NO]          = '';
        $this->input[self::INPUT_SET_CACHE_ROOTS]    = 'agree';
        $this->input[self::INPUT_SWITCH_TO_LSWS]     = '';
    }

/**
     *
     * @since 1.4
     *
     * @throws PleskExtensionException  Thrown indirectly by
     *     $this->validateInstallInput() call.
     */
    public function populateSubmittedValues()
    {
        $this->input[self::INPUT_ADMIN_EMAIL]        = implode(
            ', ',
            array_map(
                'trim',
                preg_split(
                    "/\s*,\s*/",
                    Util::get_request_var('admin_email'),
                    -1,
                    PREG_SPLIT_NO_EMPTY
                )
            )
        );
        $this->input[self::INPUT_ADMIN_LOGIN]        =
                Util::get_request_var('admin_login');
        $this->input[self::INPUT_ADMIN_PASS]         =
                Util::get_request_var('admin_pass');
        $this->input[self::INPUT_ADMIN_PASS1]        =
                Util::get_request_var('admin_pass1');
        $this->input[self::INPUT_INSTALL_TYPE]       =
                Util::get_request_var('install_type');
        $this->input[self::INPUT_LICENSE_AGREE]      =
                Util::get_request_var('license_agree');
        $this->input[self::INPUT_LSWS_HOME]          =
                Util::get_request_var('lsws_home_input');
        $this->input[self::INPUT_OPEN_QUIC_PORT]     =
                Util::get_request_var('open_quic_port');
        $this->input[self::INPUT_OPEN_WEBADMIN_PORT] =
                Util::get_request_var('open_webadmin_port');
        $this->input[self::INPUT_PORT_OFFSET]        =
                Util::get_request_var('port_offset');
        $this->input[self::INPUT_SERIAL_NO]          =
                Util::get_request_var('serial_no');
        $this->input[self::INPUT_SET_CACHE_ROOTS]    =
                Util::get_request_var('set_cache_roots');
        $this->input[self::INPUT_SWITCH_TO_LSWS]     =
                Util::get_request_var('switch_to_lsws');

$this->validateInstallInput();
    }

/**
     *
     * @since 1.4
     */
    public function setTrialSerialNo()
    {
        $this->input[self::INPUT_SERIAL_NO] = 'TRIAL';
    }

/**
     *
     * @since 1.4
     *
     * @param string $field
     *
     * @return mixed|null
     */
    public function getInput( $field )
    {
        if ( !isset($this->input[$field]) ) {
            return null;
        }

return $this->input[$field];
    }

/**
     *
     * @since 1.4
     *
     * @param null|string $field
     *
     * @return string[]|string
     */
    public function getErrors( $field = null )
    {
        if ( $field == null ) {
            return $this->errors;
        }

if ( !isset($this->errors[$field]) ) {
            return '';
        }

return $this->errors[$field];
    }

/**
     *
     * @since 1.4
     *
     * @throws PleskExtensionException  Thrown when preg_split() call fails on
     *     admin email input.
     */
    private function validateInstallInput()
    {
        $this->validateLicenseType();
        $this->validateLswsHome();
        $this->validatePortOffset();

$adminLogin = $this->input[self::INPUT_ADMIN_LOGIN];
        $adminPass  = $this->input[self::INPUT_ADMIN_PASS];
        $adminPass1 = $this->input[self::INPUT_ADMIN_PASS1];
        $adminEmail = $this->input[self::INPUT_ADMIN_EMAIL];

if ( $adminLogin == '' ) {
            $this->errors[self::INPUT_ADMIN_LOGIN] = 'Missing login ID!';
        }
        elseif ( !preg_match('/^[a-zA-Z0-9_\-]+$/', $adminLogin) ) {
            $this->errors[self::INPUT_ADMIN_LOGIN] =
                'Accepted characters for login ID are [a-zA-Z0-9_\-]';
        }

if ( $adminPass == '' ) {
            $this->errors[self::INPUT_ADMIN_PASS] = 'Missing login password';
        }
        elseif ( $adminPass1 == '' ) {
            $this->errors[self::INPUT_ADMIN_PASS1] = 'Missing login password';
        }
        elseif ( $adminPass != $adminPass1 ) {
            $this->errors[self::INPUT_ADMIN_PASS1] = 'Passwords do not match!';
        }
        elseif ( strlen($adminPass) < 6 ) {
            $this->errors[self::INPUT_ADMIN_PASS] =
                'Password must be at least 6 characters!';
        }
        elseif ( strlen($adminPass) > 64 ) {
            $this->errors[self::INPUT_ADMIN_PASS] =
                'Password is too long, must be less than 64 characters!';
        }
        elseif ( strpos($adminPass, ' ') !== false ) {
            $this->errors[self::INPUT_ADMIN_PASS] =
                'Password cannot contain space!';
        }

if ( $adminEmail == '' ) {
            $this->errors[self::INPUT_ADMIN_EMAIL] = 'Missing Admin Email!';
        }
        else {
            $emails = preg_split("/, /", $adminEmail, -1, PREG_SPLIT_NO_EMPTY);

if ( $emails === false ) {
                throw new PleskExtensionException(
                    'validateInstallInput(): Error encountered when calling '
                        . 'preg_split() on '
                        . '$this->input[self::INPUT_ADMIN_EMAIL].'
                );
            }

foreach ( $emails as $em ) {

if ( !preg_match("/^[[:alnum:]._-]+@[[:alnum:]._-]+$/", $em) ) {
                    $this->errors[self::INPUT_ADMIN_EMAIL] =
                        "invalid email format - $em";
                    break;
                }
            }
        }
    }

/**
     *
     * @since 1.4
     */
    private function validateLicenseType()
    {
        if ( $this->input[self::INPUT_LICENSE_AGREE] != 'agree' ) {
            $this->errors[self::INPUT_LICENSE_AGREE] =
                'Cannot proceed without agreement to EULA';
        }

$installType  = $this->input[self::INPUT_INSTALL_TYPE];

switch ( $installType ) {

case 'prod':
                $this->validateSerialNo();
                break;

case 'trial':

if ( $this->input[self::INPUT_SERIAL_NO] != '' ) {
                    $this->errors[self::INPUT_SERIAL_NO] =
                        'Cannot select trial license with serial number.';
                }

break;

case '':
                $this->errors[self::INPUT_INSTALL_TYPE] = 'Please select one';
                break;

default:
                $this->errors[self::INPUT_INSTALL_TYPE] = 'Invalid type';
        }
    }

/**
     *
     * @since 1.4
     */
    private function validateSerialNo()
    {
        $serialNo = $this->input[self::INPUT_SERIAL_NO];

if ( $serialNo == "" ) {
            $this->errors[self::INPUT_SERIAL_NO] = 'Missing serial number!';
        }
        else {
            $pattern         = '[a-zA-Z0-9/+]{4}';
            $isSerialNoValid = (
                strlen($serialNo) == 19
                &&
                preg_match("%^$pattern-$pattern-$pattern-$pattern$%", $serialNo)
            );

if ( !$isSerialNoValid ) {
                $this->errors[self::INPUT_SERIAL_NO] = 'Invalid serial number';
            }
        }
    }

/**
     *
     * @since 1.4
     */
    private function validateLswsHome()
    {
        $lswsHome = $this->input[self::INPUT_LSWS_HOME];

if ( $lswsHome == '' ) {
            $this->errors[self::INPUT_LSWS_HOME] = 'Missing input!';
            return;
        }

if ( strpos($lswsHome, ' ') !== false ) {
            $this->errors[self::INPUT_LSWS_HOME] =
                'Do not allow space in the path!';
            return;
        }

$forbiddenDirs = array(
            '/etc',
            '/usr/sbin',
            '/usr/bin',
            '/usr/lib',
            '/usr/local/bin',
            '/usr/local/sbin',
            '/usr/local/lib'
        );

foreach ( $forbiddenDirs as $dir ) {

if ( strpos($lswsHome, $dir) !== false ) {
                $this->errors[self::INPUT_LSWS_HOME] =
                    'It is not safe to install under this system directory';
                return;
            }
        }
    }

/**
     *
     * @since 1.4
     */
    private function validatePortOffset()
    {
        $portOffset = $this->input[self::INPUT_PORT_OFFSET];

if ( !preg_match('/^[0-9]+$/', "$portOffset") ) {
            $this->errors[self::INPUT_PORT_OFFSET] = 'Invalid number.';
            return;
        }

$port = intval($portOffset);

if ( $port < 0 || $port > 65535 ) {
            $this->errors[self::INPUT_PORT_OFFSET] =
                'Number out of range (0~65535)';
        }
    }

}

📁 Sid Gifari File Manager