| 12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142 | <?php/*edit/alias => POST data:  {    address: {a, b, c},   (where a, b, c represent alias addresses)    active: 1             (0 or 1)  }delete/alias => POST data:  {    address: {a, b, c},   (where a, b, c represent alias addresses)  }*/header('Content-Type: application/json');require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/prerequisites.inc.php';error_reporting(0);function api_log($postarray) {  global $redis;  $data_var = array();  foreach ($postarray as $data => &$value) {    if ($data == 'csrf_token') {      continue;    }    if ($value = json_decode($value, true)) {      unset($value["csrf_token"]);      foreach ($value as $key => &$val) {        if(preg_match("/pass/i", $key)) {          $val = '********';        }      }      $value = json_encode($value);    }    $data_var[] = $data . "='" . $value . "'";  }  try {    $log_line = array(      'time' => time(),      'uri' => $_SERVER['REQUEST_URI'],      'method' => $_SERVER['REQUEST_METHOD'],      'remote' => $_SERVER['REMOTE_ADDR'],      'data' => implode(', ', $data_var)    );    $redis->lPush('API_LOG', json_encode($log_line));  }  catch (RedisException $e) {    $_SESSION['return'] = array(      'type' => 'danger',      'msg' => 'Redis: '.$e    );    return false;  }}api_log($_POST);if (isset($_SESSION['mailcow_cc_role']) || isset($_SESSION['pending_mailcow_cc_username'])) {  if (isset($_GET['query'])) {    $query = explode('/', $_GET['query']);    $action =     (isset($query[0])) ? $query[0] : null;    $category =   (isset($query[1])) ? $query[1] : null;    $object =     (isset($query[2])) ? $query[2] : null;    $extra =      (isset($query[3])) ? $query[3] : null;    $request_incomplete = json_encode(array(    'type' => 'error',    'msg' => 'Cannot find attributes in post data'    ));    switch ($action) {      case "add":        function process_add_return($return) {          $generic_failure = json_encode(array(            'type' => 'error',            'msg' => 'Cannot add item'          ));          $generic_success = json_encode(array(            'type' => 'success',            'msg' => 'Task completed'          ));          if ($return === false) {            echo isset($_SESSION['return']) ? json_encode($_SESSION['return']) : $generic_failure;          }          else {            echo isset($_SESSION['return']) ? json_encode($_SESSION['return']) : $generic_success;          }        }        if (!isset($_POST['attr'])) {          echo $request_incomplete;          exit;        }        else {          $attr = (array)json_decode($_POST['attr'], true);        }        switch ($category) {          case "time_limited_alias":            process_add_return(mailbox('add', 'time_limited_alias', $attr));          break;          case "relayhost":            process_add_return(relayhost('add', $attr));          break;          case "rsetting":            process_add_return(rsettings('add', $attr));          break;          case "mailbox":            process_add_return(mailbox('add', 'mailbox', $attr));          break;          case "domain":            process_add_return(mailbox('add', 'domain', $attr));          break;          case "resource":            process_add_return(mailbox('add', 'resource', $attr));          break;          case "alias":            process_add_return(mailbox('add', 'alias', $attr));          break;          case "filter":            process_add_return(mailbox('add', 'filter', $attr));          break;          case "domain-policy":            process_add_return(policy('add', 'domain', $attr));          break;          case "mailbox-policy":            process_add_return(policy('add', 'mailbox', $attr));          break;          case "alias-domain":            process_add_return(mailbox('add', 'alias_domain', $attr));          break;          case "fwdhost":            process_add_return(fwdhost('add', $attr));          break;          case "dkim":            process_add_return(dkim('add', $attr));          break;          case "dkim_import":            process_add_return(dkim('import', $attr));          break;          case "domain-admin":            process_add_return(domain_admin('add', $attr));          break;          case "syncjob":            process_add_return(mailbox('add', 'syncjob', $attr));          break;          case "bcc":            process_add_return(bcc('add', $attr));          break;          case "recipient_map":            process_add_return(recipient_map('add', $attr));          break;        }      break;      case "get":        function process_get_return($data) {          echo (!isset($data) || empty($data)) ? '{}' : json_encode($data, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT);        }        switch ($category) {          case "rspamd":            switch ($object) {              case "actions":                $curl = curl_init();                curl_setopt($curl, CURLOPT_UNIX_SOCKET_PATH, '/rspamd-sock/rspamd.sock');                curl_setopt($curl, CURLOPT_URL,"http://rspamd/stat");                curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);                $data = curl_exec($curl);                if ($data) {                  $return = array();                  $stats_array = json_decode($data, true)['actions'];                  $stats_array['soft reject'] = $stats_array['soft reject'] + $stats_array['greylist'];                  unset($stats_array['greylist']);                  foreach ($stats_array as $action => $count) {                    $return[] = array($action, $count);                  }                  echo json_encode($return, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT);                }                elseif (!isset($data) || empty($data)) {                  echo '{}';                }              break;              case "stat":                $data = file_get_contents('http://rspamd-mailcow:11334/stat');                process_get_return($data);              break;              case "graph":                switch ($extra) {                  case "hourly":                    $data = file_get_contents('http://rspamd-mailcow:11334/graph?type=hourly');                    if (!empty($data)) {                      $data_array = json_decode($data, true);                      $rejected['label'] = "reject";                      foreach ($data_array[0] as $dataset) {                        $rejected['data'][] = $dataset;                      }                      $temp_reject['label'] = "temp_reject";                      foreach ($data_array[1] as $dataset) {                        $temp_reject['data'][] = $dataset;                      }                      $add_header['label'] = "add_header";                      foreach ($data_array[2] as $dataset) {                        $add_header['data'][] = $dataset;                      }                      $prob_spam['label'] = "prob_spam";                      foreach ($data_array[3] as $dataset) {                        $prob_spam['data'][] = $dataset;                      }                      $greylist['label'] = "greylist";                      foreach ($data_array[4] as $dataset) {                        $greylist['data'][] = $dataset;                      }                      $clean['label'] = "clean";                      $clean['pointStyle'] = "cross";                      foreach ($data_array[5] as $dataset) {                        $clean['data'][] = $dataset;                      }                      echo json_encode(array($rejected, $temp_reject, $add_header, $prob_spam, $greylist, $clean), JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT);                    }                    elseif (!isset($data) || empty($data)) {                      echo '{}';                    }                  break;                  case "daily":                    $data = file_get_contents('http://rspamd-mailcow:11334/graph?type=daily');                    if (!empty($data)) {                      $data_array = json_decode($data, true);                      $rejected['label'] = "reject";                      foreach ($data_array[0] as $dataset) {                        $rejected['data'][] = $dataset;                      }                      $temp_reject['label'] = "temp_reject";                      foreach ($data_array[1] as $dataset) {                        $temp_reject['data'][] = $dataset;                      }                      $add_header['label'] = "add_header";                      foreach ($data_array[2] as $dataset) {                        $add_header['data'][] = $dataset;                      }                      $prob_spam['label'] = "prob_spam";                      foreach ($data_array[3] as $dataset) {                        $prob_spam['data'][] = $dataset;                      }                      $greylist['label'] = "greylist";                      foreach ($data_array[4] as $dataset) {                        $greylist['data'][] = $dataset;                      }                      $clean['label'] = "clean";                      $clean['pointStyle'] = "cross";                      foreach ($data_array[5] as $dataset) {                        $clean['data'][] = $dataset;                      }                      echo json_encode(array($rejected, $temp_reject, $add_header, $prob_spam, $greylist, $clean), JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT);                    }                    elseif (!isset($data) || empty($data)) {                      echo '{}';                    }                  break;                  case "weekly":                    $data = file_get_contents('http://rspamd-mailcow:11334/graph?type=weekly');                    if (!empty($data)) {                      $data_array = json_decode($data, true);                      $rejected['label'] = "reject";                      foreach ($data_array[0] as $dataset) {                        $rejected['data'][] = $dataset;                      }                      $temp_reject['label'] = "temp_reject";                      foreach ($data_array[1] as $dataset) {                        $temp_reject['data'][] = $dataset;                      }                      $add_header['label'] = "add_header";                      foreach ($data_array[2] as $dataset) {                        $add_header['data'][] = $dataset;                      }                      $prob_spam['label'] = "prob_spam";                      foreach ($data_array[3] as $dataset) {                        $prob_spam['data'][] = $dataset;                      }                      $greylist['label'] = "greylist";                      foreach ($data_array[4] as $dataset) {                        $greylist['data'][] = $dataset;                      }                      $clean['label'] = "clean";                      $clean['pointStyle'] = "cross";                      foreach ($data_array[5] as $dataset) {                        $clean['data'][] = $dataset;                      }                      echo json_encode(array($rejected, $temp_reject, $add_header, $prob_spam, $greylist, $clean), JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT);                    }                    elseif (!isset($data) || empty($data)) {                      echo '{}';                    }                  break;                  case "monthly":                    $data = file_get_contents('http://rspamd-mailcow:11334/graph?type=monthly');                    if (!empty($data)) {                      $data_array = json_decode($data, true);                      $rejected['label'] = "reject";                      foreach ($data_array[0] as $dataset) {                        $rejected['data'][] = $dataset;                      }                      $temp_reject['label'] = "temp_reject";                      foreach ($data_array[1] as $dataset) {                        $temp_reject['data'][] = $dataset;                      }                      $add_header['label'] = "add_header";                      foreach ($data_array[2] as $dataset) {                        $add_header['data'][] = $dataset;                      }                      $prob_spam['label'] = "prob_spam";                      foreach ($data_array[3] as $dataset) {                        $prob_spam['data'][] = $dataset;                      }                      $greylist['label'] = "greylist";                      foreach ($data_array[4] as $dataset) {                        $greylist['data'][] = $dataset;                      }                      $clean['label'] = "clean";                      $clean['pointStyle'] = "cross";                      foreach ($data_array[5] as $dataset) {                        $clean['data'][] = $dataset;                      }                      echo json_encode(array($rejected, $temp_reject, $add_header, $prob_spam, $greylist, $clean), JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT);                    }                    elseif (!isset($data) || empty($data)) {                      echo '{}';                    }                  break;                }              break;            }          break;          case "domain":            switch ($object) {              case "all":                $domains = mailbox('get', 'domains');                if (!empty($domains)) {                  foreach ($domains as $domain) {                    if ($details = mailbox('get', 'domain_details', $domain)) {                      $data[] = $details;                    }                    else {                      continue;                    }                  }                  process_get_return($data);                }                else {                  echo '{}';                }              break;              default:                $data = mailbox('get', 'domain_details', $object);                process_get_return($data);              break;            }          break;          case "relayhost":            switch ($object) {              case "all":                $relayhosts = relayhost('get');                if (!empty($relayhosts)) {                  foreach ($relayhosts as $relayhost) {                    if ($details = relayhost('details', $relayhost['id'])) {                      $data[] = $details;                    }                    else {                      continue;                    }                  }                  process_get_return($data);                }                else {                  echo '{}';                }              break;              default:                $data = relayhost('details', $object);                process_get_return($data);              break;            }          break;          case "rsetting":            switch ($object) {              case "all":                $rsettings = rsettings('get');                if (!empty($rsettings)) {                  foreach ($rsettings as $rsetting) {                    if ($details = rsettings('details', $rsetting['id'])) {                      $data[] = $details;                    }                    else {                      continue;                    }                  }                  process_get_return($data);                }                else {                  echo '{}';                }              break;              default:                $data = rsetting('details', $object);                process_get_return($data);              break;            }          break;          case "oauth2-client":            switch ($object) {              case "all":                $clients = oauth2('get', 'clients');                if (!empty($clients)) {                  foreach ($clients as $client) {                    if ($details = oauth2('details', 'client', $client)) {                      $data[] = $details;                    }                    else {                      continue;                    }                  }                  process_get_return($data);                }                else {                  echo '{}';                }              break;              default:                $data = oauth2('details', 'client', $object);                process_get_return($data);              break;            }          break;          case "logs":            switch ($object) {              case "dovecot":                // 0 is first record, so empty is fine                if (isset($extra)) {                  $extra = preg_replace('/[^\d\-]/i', '', $extra);                  $logs = get_logs('dovecot-mailcow', $extra);                }                else {                  $logs = get_logs('dovecot-mailcow');                }                echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';              break;              case "netfilter":                // 0 is first record, so empty is fine                if (isset($extra)) {                  $extra = preg_replace('/[^\d\-]/i', '', $extra);                  $logs = get_logs('netfilter-mailcow', $extra);                }                else {                  $logs = get_logs('netfilter-mailcow');                }                echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';              break;              case "postfix":                // 0 is first record, so empty is fine                if (isset($extra)) {                  $extra = preg_replace('/[^\d\-]/i', '', $extra);                  $logs = get_logs('postfix-mailcow', $extra);                }                else {                  $logs = get_logs('postfix-mailcow');                }                echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';              break;              case "autodiscover":                // 0 is first record, so empty is fine                if (isset($extra)) {                  $extra = preg_replace('/[^\d\-]/i', '', $extra);                  $logs = get_logs('autodiscover-mailcow', $extra);                }                else {                  $logs = get_logs('autodiscover-mailcow');                }                echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';              break;              case "sogo":                // 0 is first record, so empty is fine                if (isset($extra)) {                  $extra = preg_replace('/[^\d\-]/i', '', $extra);                  $logs = get_logs('sogo-mailcow', $extra);                }                else {                  $logs = get_logs('sogo-mailcow');                }                echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';              break;              case "watchdog":                // 0 is first record, so empty is fine                if (isset($extra)) {                  $extra = preg_replace('/[^\d\-]/i', '', $extra);                  $logs = get_logs('watchdog-mailcow', $extra);                }                else {                  $logs = get_logs('watchdog-mailcow');                }                echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';              break;              case "acme":                // 0 is first record, so empty is fine                if (isset($extra)) {                  $extra = preg_replace('/[^\d\-]/i', '', $extra);                  $logs = get_logs('acme-mailcow', $extra);                }                else {                  $logs = get_logs('acme-mailcow');                }                echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';              break;              case "api":                // 0 is first record, so empty is fine                if (isset($extra)) {                  $extra = preg_replace('/[^\d\-]/i', '', $extra);                  $logs = get_logs('api-mailcow', $extra);                }                else {                  $logs = get_logs('api-mailcow');                }                echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';              break;              case "rspamd-history":                // 0 is first record, so empty is fine                if (isset($extra)) {                  $extra = preg_replace('/[^\d\-]/i', '', $extra);                  $logs = get_logs('rspamd-history', $extra);                }                else {                  $logs = get_logs('rspamd-history');                }                echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';              break;            }          break;          case "mailbox":            switch ($object) {              case "all":                $domains = mailbox('get', 'domains');                if (!empty($domains)) {                  foreach ($domains as $domain) {                    $mailboxes = mailbox('get', 'mailboxes', $domain);                    if (!empty($mailboxes)) {                      foreach ($mailboxes as $mailbox) {                        if ($details = mailbox('get', 'mailbox_details', $mailbox)) {                          $data[] = $details;                        }                        else {                          continue;                        }                      }                    }                  }                  process_get_return($data);                }                else {                  echo '{}';                }              break;              default:                $data = mailbox('get', 'mailbox_details', $object);                process_get_return($data);              break;            }          break;          case "syncjobs":            switch ($object) {              case "all":                $domains = mailbox('get', 'domains');                if (!empty($domains)) {                  foreach ($domains as $domain) {                    $mailboxes = mailbox('get', 'mailboxes', $domain);                    if (!empty($mailboxes)) {                      foreach ($mailboxes as $mailbox) {                        $syncjobs = mailbox('get', 'syncjobs', $mailbox);                        if (!empty($syncjobs)) {                          foreach ($syncjobs as $syncjob) {                            if (isset($extra)) {                              $details = mailbox('get', 'syncjob_details', $syncjob, explode(',', $extra));                            }                            else {                              $details = mailbox('get', 'syncjob_details', $syncjob);                            }                            if ($details) {                              $data[] = $details;                            }                            else {                              continue;                            }                          }                        }                      }                    }                  }                  process_get_return($data);                }                else {                  echo '{}';                }              break;              default:                $syncjobs = mailbox('get', 'syncjobs', $object);                if (!empty($syncjobs)) {                  foreach ($syncjobs as $syncjob) {                    if (isset($extra)) {                      $details = mailbox('get', 'syncjob_details', $syncjob, explode(',', $extra));                    }                    else {                      $details = mailbox('get', 'syncjob_details', $syncjob);                    }                    if ($details) {                      $data[] = $details;                    }                    else {                      continue;                    }                  }                }                process_get_return($data);              break;            }          break;          case "active-user-sieve":            if (isset($object)) {              $sieve_filter = mailbox('get', 'active_user_sieve', $object);              if (!empty($sieve_filter)) {                $data[] = $sieve_filter;              }            }            process_get_return($data);          break;          case "filters":            switch ($object) {              case "all":                $domains = mailbox('get', 'domains');                if (!empty($domains)) {                  foreach ($domains as $domain) {                    $mailboxes = mailbox('get', 'mailboxes', $domain);                    if (!empty($mailboxes)) {                      foreach ($mailboxes as $mailbox) {                        $filters = mailbox('get', 'filters', $mailbox);                        if (!empty($filters)) {                          foreach ($filters as $filter) {                            if ($details = mailbox('get', 'filter_details', $filter)) {                              $data[] = $details;                            }                            else {                              continue;                            }                          }                        }                      }                    }                  }                  process_get_return($data);                }                else {                  echo '{}';                }              break;              default:                $filters = mailbox('get', 'filters', $object);                if (!empty($filters)) {                  foreach ($filters as $filter) {                    if ($details = mailbox('get', 'filter_details', $filter)) {                      $data[] = $details;                    }                    else {                      continue;                    }                  }                }                process_get_return($data);              break;            }          break;          case "bcc":            switch ($object) {              case "all":                $bcc_items = bcc('get');                if (!empty($bcc_items)) {                  foreach ($bcc_items as $bcc_item) {                    if ($details = bcc('details', $bcc_item)) {                      $data[] = $details;                    }                    else {                      continue;                    }                  }                }                process_get_return($data);              break;              default:                $data = bcc('details', $object);                if (!empty($data)) {                  $data[] = $details;                }                process_get_return($data);              break;            }          break;          case "recipient_map":            switch ($object) {              case "all":                $recipient_map_items = recipient_map('get');                if (!empty($recipient_map_items)) {                  foreach ($recipient_map_items as $recipient_map_item) {                    if ($details = recipient_map('details', $recipient_map_item)) {                      $data[] = $details;                    }                    else {                      continue;                    }                  }                }                process_get_return($data);              break;              default:                $data = recipient_map('details', $object);                if (!empty($data)) {                  $data[] = $details;                }                process_get_return($data);              break;            }          break;          case "policy_wl_mailbox":            switch ($object) {              default:                $data = policy('get', 'mailbox', $object)['whitelist'];                process_get_return($data);              break;            }          break;          case "policy_bl_mailbox":            switch ($object) {              default:                $data = policy('get', 'mailbox', $object)['blacklist'];                process_get_return($data);              break;            }          break;          case "policy_wl_domain":            switch ($object) {              default:                $data = policy('get', 'domain', $object)['whitelist'];                process_get_return($data);              break;            }          break;          case "policy_bl_domain":            switch ($object) {              default:                $data = policy('get', 'domain', $object)['blacklist'];                process_get_return($data);              break;            }          break;          case "time_limited_aliases":            switch ($object) {              default:                $data = mailbox('get', 'time_limited_aliases', $object);                process_get_return($data);              break;            }          break;          case "resource":            switch ($object) {              case "all":                $domains = mailbox('get', 'domains');                if (!empty($domains)) {                  foreach ($domains as $domain) {                    $resources = mailbox('get', 'resources', $domain);                    if (!empty($resources)) {                      foreach ($resources as $resource) {                        if ($details = mailbox('get', 'resource_details', $resource)) {                          $data[] = $details;                        }                        else {                          continue;                        }                      }                    }                  }                  process_get_return($data);                }                else {                  echo '{}';                }              break;              default:                $data = mailbox('get', 'resource_details', $object);                process_get_return($data);              break;            }          break;          case "fwdhost":            switch ($object) {              case "all":                process_get_return(fwdhost('get'));              break;              default:                process_get_return(fwdhost('details', $object));              break;            }          break;          case "quarantine":            // "all" will not print details            switch ($object) {              case "all":                process_get_return(quarantine('get'));              break;              default:                process_get_return(quarantine('details', $object));              break;            }          break;          case "alias-domain":            switch ($object) {              case "all":                $alias_domains = mailbox('get', 'alias_domains');                if (!empty($alias_domains)) {                  foreach ($alias_domains as $alias_domain) {                    if ($details = mailbox('get', 'alias_domain_details', $alias_domain)) {                      $data[] = $details;                    }                    else {                      continue;                    }                  }                }                process_get_return($data);              break;              default:                process_get_return(mailbox('get', 'alias_domain_details', $object));              break;            }          break;          case "alias":            switch ($object) {              case "all":                $domains = array_merge(mailbox('get', 'domains'), mailbox('get', 'alias_domains'));                if (!empty($domains)) {                  foreach ($domains as $domain) {                    $aliases = mailbox('get', 'aliases', $domain);                    if (!empty($aliases)) {                      foreach ($aliases as $alias) {                        if ($details = mailbox('get', 'alias_details', $alias)) {                          $data[] = $details;                        }                        else {                          continue;                        }                      }                    }                  }                  process_get_return($data);                }                else {                  echo '{}';                }              break;              default:                process_get_return(mailbox('get', 'alias_details', $object));              break;            }          break;          case "domain-admin":            switch ($object) {              case "all":                $domain_admins = domain_admin('get');                if (!empty($domain_admins)) {                  foreach ($domain_admins as $domain_admin) {                    if ($details = domain_admin('details', $domain_admin)) {                      $data[] = $details;                    }                    else {                      continue;                    }                  }                  process_get_return($data);                }                else {                  echo '{}';                }              break;              default:                process_get_return(domain_admin('details', $object));              break;            }          break;          case "u2f-registration":            header('Content-Type: application/javascript');            if (($_SESSION["mailcow_cc_role"] == "admin" || $_SESSION["mailcow_cc_role"] == "domainadmin") && $_SESSION["mailcow_cc_username"] == $object) {              list($req, $sigs) = $u2f->getRegisterData(get_u2f_registrations($object));              $_SESSION['regReq'] = json_encode($req);              $_SESSION['regSigs'] = json_encode($sigs);              echo 'var req = ' . json_encode($req) . ';';              echo 'var registeredKeys = ' . json_encode($sigs) . ';';              echo 'var appId = req.appId;';              echo 'var registerRequests = [{version: req.version, challenge: req.challenge}];';            }            else {              return;            }          break;          case "u2f-authentication":            header('Content-Type: application/javascript');            if (isset($_SESSION['pending_mailcow_cc_username']) && $_SESSION['pending_mailcow_cc_username'] == $object) {              $auth_data = $u2f->getAuthenticateData(get_u2f_registrations($object));              $challenge = $auth_data[0]->challenge;              $appId = $auth_data[0]->appId;              foreach ($auth_data as $each) {                $key = array(); // Empty array                $key['version']   = $each->version;                $key['keyHandle'] = $each->keyHandle;                $registeredKey[]  = $key;              }              $_SESSION['authReq']  = json_encode($auth_data);              echo 'var appId = "' . $appId . '";';              echo 'var challenge = ' . json_encode($challenge) . ';';              echo 'var registeredKeys = ' . json_encode($registeredKey) . ';';            }            else {              return;            }          break;          default:            echo '{}';          break;        }      break;      case "delete":        function process_delete_return($return) {          $generic_failure = json_encode(array(            'type' => 'error',            'msg' => 'Cannot delete item'          ));          $generic_success = json_encode(array(            'type' => 'success',            'msg' => 'Task completed'          ));          if ($return === false) {            echo isset($_SESSION['return']) ? json_encode($_SESSION['return']) : $generic_failure;          }          else {            echo isset($_SESSION['return']) ? json_encode($_SESSION['return']) : $generic_success;          }        }        if (!isset($_POST['items'])) {          echo $request_incomplete;          exit;        }        else {          $items = (array)json_decode($_POST['items'], true);        }        switch ($category) {          case "alias":            process_delete_return(mailbox('delete', 'alias', array('address' => $items)));          break;          case "relayhost":            process_delete_return(relayhost('delete', array('id' => $items)));          break;          case "rsetting":            process_delete_return(rsettings('delete', array('id' => $items)));          break;          case "syncjob":            process_delete_return(mailbox('delete', 'syncjob', array('id' => $items)));          break;          case "filter":            process_delete_return(mailbox('delete', 'filter', array('id' => $items)));          break;          case "qitem":            process_delete_return(quarantine('delete', array('id' => $items)));          break;          case "bcc":            process_delete_return(bcc('delete', array('id' => $items)));          break;          case "recipient_map":            process_delete_return(recipient_map('delete', array('id' => $items)));          break;          case "fwdhost":            process_delete_return(fwdhost('delete', array('forwardinghost' => $items)));          break;          case "dkim":            process_delete_return(dkim('delete', array('domains' => $items)));          break;          case "domain":            file_put_contents('/tmp/dssaa', $items);            process_delete_return(mailbox('delete', 'domain', array('domain' => $items)));          break;          case "alias-domain":            process_delete_return(mailbox('delete', 'alias_domain', array('alias_domain' => $items)));          break;          case "mailbox":            process_delete_return(mailbox('delete', 'mailbox', array('username' => $items)));          break;          case "resource":            process_delete_return(mailbox('delete', 'resource', array('name' => $items)));          break;          case "mailbox-policy":            process_delete_return(policy('delete', 'mailbox', array('prefid' => $items)));          break;          case "domain-policy":            process_delete_return(policy('delete', 'domain', array('prefid' => $items)));          break;          case "time_limited_alias":            process_delete_return(mailbox('delete', 'time_limited_alias', array('address' => $items)));          break;          case "eas_cache":            process_delete_return(mailbox('delete', 'eas_cache', array('username' => $items)));          break;          case "domain-admin":            process_delete_return(domain_admin('delete', array('username' => $items)));          break;        }      break;      case "edit":        function process_edit_return($return) {          $generic_failure = json_encode(array(            'type' => 'error',            'msg' => 'Cannot edit item'          ));          $generic_success = json_encode(array(            'type' => 'success',            'msg' => 'Task completed'          ));          if ($return === false) {            echo isset($_SESSION['return']) ? json_encode($_SESSION['return']) : $generic_failure;          }          else {            echo isset($_SESSION['return']) ? json_encode($_SESSION['return']) : $generic_success;          }        }        if (!isset($_POST['attr'])) {          echo $request_incomplete;          exit;        }        else {          $attr = (array)json_decode($_POST['attr'], true);          $items = isset($_POST['items']) ? (array)json_decode($_POST['items'], true) : null;        }        switch ($category) {          case "bcc":            process_edit_return(bcc('edit', array_merge(array('id' => $items), $attr)));          break;          case "oauth2-client":            process_edit_return(oauth2('edit', 'client', array_merge(array('id' => $items), $attr)));          break;          case "recipient_map":            process_edit_return(recipient_map('edit', array_merge(array('id' => $items), $attr)));          break;          case "alias":            process_edit_return(mailbox('edit', 'alias', array_merge(array('address' => $items), $attr)));          break;          case "app_links":            process_edit_return(customize('edit', 'app_links', $attr));          break;          case "relayhost":            process_edit_return(relayhost('edit', array_merge(array('id' => $items), $attr)));          break;          case "rsetting":            process_edit_return(rsettings('edit', array_merge(array('id' => $items), $attr)));          break;          case "delimiter_action":            process_edit_return(mailbox('edit', 'delimiter_action', array_merge(array('username' => $items), $attr)));          break;          case "tls_policy":            process_edit_return(mailbox('edit', 'tls_policy', array_merge(array('username' => $items), $attr)));          break;          case "qitem":            process_edit_return(quarantine('edit', array_merge(array('id' => $items), $attr)));          break;          case "quarantine":            process_edit_return(quarantine('edit', $attr));          break;          case "time_limited_alias":            process_edit_return(mailbox('edit', 'time_limited_alias', array_merge(array('address' => $items), $attr)));          break;          case "mailbox":            process_edit_return(mailbox('edit', 'mailbox', array_merge(array('username' => $items), $attr)));          break;          case "syncjob":            process_edit_return(mailbox('edit', 'syncjob', array_merge(array('id' => $items), $attr)));          break;          case "filter":            process_edit_return(mailbox('edit', 'filter', array_merge(array('id' => $items), $attr)));          break;                    case "resource":            process_edit_return(mailbox('edit', 'resource', array_merge(array('name' => $items), $attr)));          break;          case "domain":            process_edit_return(mailbox('edit', 'domain', array_merge(array('domain' => $items), $attr)));          break;          case "ratelimit":            process_edit_return(mailbox('edit', 'ratelimit', array_merge(array('object' => $items), $attr)));          break;          case "alias-domain":            process_edit_return(mailbox('edit', 'alias_domain', array_merge(array('alias_domain' => $items), $attr)));          break;          case "spam-score":            process_edit_return(mailbox('edit', 'spam_score', array_merge(array('username' => $items), $attr)));          break;          case "domain-admin":            process_edit_return(domain_admin('edit', array_merge(array('username' => $items), $attr)));          break;          case "fwdhost":            process_edit_return(fwdhost('edit', array_merge(array('fwdhost' => $items), $attr)));          break;          case "fail2ban":            process_edit_return(fail2ban('edit', array_merge(array('network' => $items), $attr)));          break;          case "ui_texts":            process_edit_return(customize('edit', 'ui_texts', $attr));          break;          case "self":            if ($_SESSION['mailcow_cc_role'] == "domainadmin") {              process_edit_return(domain_admin('edit', $attr));            }            elseif ($_SESSION['mailcow_cc_role'] == "user") {              process_edit_return(edit_user_account($attr));            }            elseif ($_SESSION['mailcow_cc_role'] == "admin") {              process_edit_return(edit_admin_account($attr));            }          break;        }      break;    }  }}
 |