12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142 |
- <?php
- /*
- edit/alias => POST data:
- {
- address: {a, b, c}, (where a, b, c represent alias addresses)
- active: 1 (0 or 1)
- }
- delete/alias => POST data:
- {
- address: {a, b, c}, (where a, b, c represent alias addresses)
- }
- */
- header('Content-Type: application/json');
- require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/prerequisites.inc.php';
- error_reporting(0);
- function api_log($postarray) {
- global $redis;
- $data_var = array();
- foreach ($postarray as $data => &$value) {
- if ($data == 'csrf_token') {
- continue;
- }
- if ($value = json_decode($value, true)) {
- unset($value["csrf_token"]);
- foreach ($value as $key => &$val) {
- if(preg_match("/pass/i", $key)) {
- $val = '********';
- }
- }
- $value = json_encode($value);
- }
- $data_var[] = $data . "='" . $value . "'";
- }
- try {
- $log_line = array(
- 'time' => time(),
- 'uri' => $_SERVER['REQUEST_URI'],
- 'method' => $_SERVER['REQUEST_METHOD'],
- 'remote' => $_SERVER['REMOTE_ADDR'],
- 'data' => implode(', ', $data_var)
- );
- $redis->lPush('API_LOG', json_encode($log_line));
- }
- catch (RedisException $e) {
- $_SESSION['return'] = array(
- 'type' => 'danger',
- 'msg' => 'Redis: '.$e
- );
- return false;
- }
- }
- api_log($_POST);
- if (isset($_SESSION['mailcow_cc_role']) || isset($_SESSION['pending_mailcow_cc_username'])) {
- if (isset($_GET['query'])) {
- $query = explode('/', $_GET['query']);
- $action = (isset($query[0])) ? $query[0] : null;
- $category = (isset($query[1])) ? $query[1] : null;
- $object = (isset($query[2])) ? $query[2] : null;
- $extra = (isset($query[3])) ? $query[3] : null;
- $request_incomplete = json_encode(array(
- 'type' => 'error',
- 'msg' => 'Cannot find attributes in post data'
- ));
- switch ($action) {
- case "add":
- function process_add_return($return) {
- $generic_failure = json_encode(array(
- 'type' => 'error',
- 'msg' => 'Cannot add item'
- ));
- $generic_success = json_encode(array(
- 'type' => 'success',
- 'msg' => 'Task completed'
- ));
- if ($return === false) {
- echo isset($_SESSION['return']) ? json_encode($_SESSION['return']) : $generic_failure;
- }
- else {
- echo isset($_SESSION['return']) ? json_encode($_SESSION['return']) : $generic_success;
- }
- }
- if (!isset($_POST['attr'])) {
- echo $request_incomplete;
- exit;
- }
- else {
- $attr = (array)json_decode($_POST['attr'], true);
- }
- switch ($category) {
- case "time_limited_alias":
- process_add_return(mailbox('add', 'time_limited_alias', $attr));
- break;
- case "relayhost":
- process_add_return(relayhost('add', $attr));
- break;
- case "rsetting":
- process_add_return(rsettings('add', $attr));
- break;
- case "mailbox":
- process_add_return(mailbox('add', 'mailbox', $attr));
- break;
- case "domain":
- process_add_return(mailbox('add', 'domain', $attr));
- break;
- case "domain":
- process_add_return(mailbox('add', 'resource', $attr));
- break;
- case "alias":
- process_add_return(mailbox('add', 'alias', $attr));
- break;
- case "filter":
- process_add_return(mailbox('add', 'filter', $attr));
- break;
- case "domain-policy":
- process_add_return(policy('add', 'domain', $attr));
- break;
- case "mailbox-policy":
- process_add_return(policy('add', 'mailbox', $attr));
- break;
- case "alias-domain":
- process_add_return(mailbox('add', 'alias_domain', $attr));
- break;
- case "fwdhost":
- process_add_return(fwdhost('add', $attr));
- break;
- case "dkim":
- process_add_return(dkim('add', $attr));
- break;
- case "dkim_import":
- process_add_return(dkim('import', $attr));
- break;
- case "domain-admin":
- process_add_return(domain_admin('add', $attr));
- break;
- case "syncjob":
- process_add_return(mailbox('add', 'syncjob', $attr));
- break;
- case "bcc":
- process_add_return(bcc('add', $attr));
- break;
- case "recipient_map":
- process_add_return(recipient_map('add', $attr));
- break;
- }
- break;
- case "get":
- function process_get_return($data) {
- echo (!isset($data) || empty($data)) ? '{}' : json_encode($data, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT);
- }
- switch ($category) {
- case "rspamd":
- switch ($object) {
- case "actions":
- $curl = curl_init();
- curl_setopt($curl, CURLOPT_UNIX_SOCKET_PATH, '/rspamd-sock/rspamd.sock');
- curl_setopt($curl, CURLOPT_URL,"http://rspamd/stat");
- curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
- $data = curl_exec($curl);
- if ($data) {
- $return = array();
- $stats_array = json_decode($data, true)['actions'];
- $stats_array['soft reject'] = $stats_array['soft reject'] + $stats_array['greylist'];
- unset($stats_array['greylist']);
- foreach ($stats_array as $action => $count) {
- $return[] = array($action, $count);
- }
- echo json_encode($return, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT);
- }
- elseif (!isset($data) || empty($data)) {
- echo '{}';
- }
- break;
- case "stat":
- $data = file_get_contents('http://rspamd-mailcow:11334/stat');
- process_get_return($data);
- break;
- case "graph":
- switch ($extra) {
- case "hourly":
- $data = file_get_contents('http://rspamd-mailcow:11334/graph?type=hourly');
- if (!empty($data)) {
- $data_array = json_decode($data, true);
- $rejected['label'] = "reject";
- foreach ($data_array[0] as $dataset) {
- $rejected['data'][] = $dataset;
- }
- $temp_reject['label'] = "temp_reject";
- foreach ($data_array[1] as $dataset) {
- $temp_reject['data'][] = $dataset;
- }
- $add_header['label'] = "add_header";
- foreach ($data_array[2] as $dataset) {
- $add_header['data'][] = $dataset;
- }
- $prob_spam['label'] = "prob_spam";
- foreach ($data_array[3] as $dataset) {
- $prob_spam['data'][] = $dataset;
- }
- $greylist['label'] = "greylist";
- foreach ($data_array[4] as $dataset) {
- $greylist['data'][] = $dataset;
- }
- $clean['label'] = "clean";
- $clean['pointStyle'] = "cross";
- foreach ($data_array[5] as $dataset) {
- $clean['data'][] = $dataset;
- }
- echo json_encode(array($rejected, $temp_reject, $add_header, $prob_spam, $greylist, $clean), JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT);
- }
- elseif (!isset($data) || empty($data)) {
- echo '{}';
- }
- break;
- case "daily":
- $data = file_get_contents('http://rspamd-mailcow:11334/graph?type=daily');
- if (!empty($data)) {
- $data_array = json_decode($data, true);
- $rejected['label'] = "reject";
- foreach ($data_array[0] as $dataset) {
- $rejected['data'][] = $dataset;
- }
- $temp_reject['label'] = "temp_reject";
- foreach ($data_array[1] as $dataset) {
- $temp_reject['data'][] = $dataset;
- }
- $add_header['label'] = "add_header";
- foreach ($data_array[2] as $dataset) {
- $add_header['data'][] = $dataset;
- }
- $prob_spam['label'] = "prob_spam";
- foreach ($data_array[3] as $dataset) {
- $prob_spam['data'][] = $dataset;
- }
- $greylist['label'] = "greylist";
- foreach ($data_array[4] as $dataset) {
- $greylist['data'][] = $dataset;
- }
- $clean['label'] = "clean";
- $clean['pointStyle'] = "cross";
- foreach ($data_array[5] as $dataset) {
- $clean['data'][] = $dataset;
- }
- echo json_encode(array($rejected, $temp_reject, $add_header, $prob_spam, $greylist, $clean), JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT);
- }
- elseif (!isset($data) || empty($data)) {
- echo '{}';
- }
- break;
- case "weekly":
- $data = file_get_contents('http://rspamd-mailcow:11334/graph?type=weekly');
- if (!empty($data)) {
- $data_array = json_decode($data, true);
- $rejected['label'] = "reject";
- foreach ($data_array[0] as $dataset) {
- $rejected['data'][] = $dataset;
- }
- $temp_reject['label'] = "temp_reject";
- foreach ($data_array[1] as $dataset) {
- $temp_reject['data'][] = $dataset;
- }
- $add_header['label'] = "add_header";
- foreach ($data_array[2] as $dataset) {
- $add_header['data'][] = $dataset;
- }
- $prob_spam['label'] = "prob_spam";
- foreach ($data_array[3] as $dataset) {
- $prob_spam['data'][] = $dataset;
- }
- $greylist['label'] = "greylist";
- foreach ($data_array[4] as $dataset) {
- $greylist['data'][] = $dataset;
- }
- $clean['label'] = "clean";
- $clean['pointStyle'] = "cross";
- foreach ($data_array[5] as $dataset) {
- $clean['data'][] = $dataset;
- }
- echo json_encode(array($rejected, $temp_reject, $add_header, $prob_spam, $greylist, $clean), JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT);
- }
- elseif (!isset($data) || empty($data)) {
- echo '{}';
- }
- break;
- case "monthly":
- $data = file_get_contents('http://rspamd-mailcow:11334/graph?type=monthly');
- if (!empty($data)) {
- $data_array = json_decode($data, true);
- $rejected['label'] = "reject";
- foreach ($data_array[0] as $dataset) {
- $rejected['data'][] = $dataset;
- }
- $temp_reject['label'] = "temp_reject";
- foreach ($data_array[1] as $dataset) {
- $temp_reject['data'][] = $dataset;
- }
- $add_header['label'] = "add_header";
- foreach ($data_array[2] as $dataset) {
- $add_header['data'][] = $dataset;
- }
- $prob_spam['label'] = "prob_spam";
- foreach ($data_array[3] as $dataset) {
- $prob_spam['data'][] = $dataset;
- }
- $greylist['label'] = "greylist";
- foreach ($data_array[4] as $dataset) {
- $greylist['data'][] = $dataset;
- }
- $clean['label'] = "clean";
- $clean['pointStyle'] = "cross";
- foreach ($data_array[5] as $dataset) {
- $clean['data'][] = $dataset;
- }
- echo json_encode(array($rejected, $temp_reject, $add_header, $prob_spam, $greylist, $clean), JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT);
- }
- elseif (!isset($data) || empty($data)) {
- echo '{}';
- }
- break;
- }
- break;
- }
- break;
- case "domain":
- switch ($object) {
- case "all":
- $domains = mailbox('get', 'domains');
- if (!empty($domains)) {
- foreach ($domains as $domain) {
- if ($details = mailbox('get', 'domain_details', $domain)) {
- $data[] = $details;
- }
- else {
- continue;
- }
- }
- process_get_return($data);
- }
- else {
- echo '{}';
- }
- break;
- default:
- $data = mailbox('get', 'domain_details', $object);
- process_get_return($data);
- break;
- }
- break;
- case "relayhost":
- switch ($object) {
- case "all":
- $relayhosts = relayhost('get');
- if (!empty($relayhosts)) {
- foreach ($relayhosts as $relayhost) {
- if ($details = relayhost('details', $relayhost['id'])) {
- $data[] = $details;
- }
- else {
- continue;
- }
- }
- process_get_return($data);
- }
- else {
- echo '{}';
- }
- break;
- default:
- $data = relayhost('details', $object);
- process_get_return($data);
- break;
- }
- break;
- case "rsetting":
- switch ($object) {
- case "all":
- $rsettings = rsettings('get');
- if (!empty($rsettings)) {
- foreach ($rsettings as $rsetting) {
- if ($details = rsettings('details', $rsetting['id'])) {
- $data[] = $details;
- }
- else {
- continue;
- }
- }
- process_get_return($data);
- }
- else {
- echo '{}';
- }
- break;
- default:
- $data = rsetting('details', $object);
- process_get_return($data);
- break;
- }
- break;
- case "oauth2-client":
- switch ($object) {
- case "all":
- $clients = oauth2('get', 'clients');
- if (!empty($clients)) {
- foreach ($clients as $client) {
- if ($details = oauth2('details', 'client', $client)) {
- $data[] = $details;
- }
- else {
- continue;
- }
- }
- process_get_return($data);
- }
- else {
- echo '{}';
- }
- break;
- default:
- $data = oauth2('details', 'client', $object);
- process_get_return($data);
- break;
- }
- break;
- case "logs":
- switch ($object) {
- case "dovecot":
- // 0 is first record, so empty is fine
- if (isset($extra)) {
- $extra = preg_replace('/[^\d\-]/i', '', $extra);
- $logs = get_logs('dovecot-mailcow', $extra);
- }
- else {
- $logs = get_logs('dovecot-mailcow');
- }
- echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';
- break;
- case "netfilter":
- // 0 is first record, so empty is fine
- if (isset($extra)) {
- $extra = preg_replace('/[^\d\-]/i', '', $extra);
- $logs = get_logs('netfilter-mailcow', $extra);
- }
- else {
- $logs = get_logs('netfilter-mailcow');
- }
- echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';
- break;
- case "postfix":
- // 0 is first record, so empty is fine
- if (isset($extra)) {
- $extra = preg_replace('/[^\d\-]/i', '', $extra);
- $logs = get_logs('postfix-mailcow', $extra);
- }
- else {
- $logs = get_logs('postfix-mailcow');
- }
- echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';
- break;
- case "autodiscover":
- // 0 is first record, so empty is fine
- if (isset($extra)) {
- $extra = preg_replace('/[^\d\-]/i', '', $extra);
- $logs = get_logs('autodiscover-mailcow', $extra);
- }
- else {
- $logs = get_logs('autodiscover-mailcow');
- }
- echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';
- break;
- case "sogo":
- // 0 is first record, so empty is fine
- if (isset($extra)) {
- $extra = preg_replace('/[^\d\-]/i', '', $extra);
- $logs = get_logs('sogo-mailcow', $extra);
- }
- else {
- $logs = get_logs('sogo-mailcow');
- }
- echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';
- break;
- case "watchdog":
- // 0 is first record, so empty is fine
- if (isset($extra)) {
- $extra = preg_replace('/[^\d\-]/i', '', $extra);
- $logs = get_logs('watchdog-mailcow', $extra);
- }
- else {
- $logs = get_logs('watchdog-mailcow');
- }
- echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';
- break;
- case "acme":
- // 0 is first record, so empty is fine
- if (isset($extra)) {
- $extra = preg_replace('/[^\d\-]/i', '', $extra);
- $logs = get_logs('acme-mailcow', $extra);
- }
- else {
- $logs = get_logs('acme-mailcow');
- }
- echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';
- break;
- case "api":
- // 0 is first record, so empty is fine
- if (isset($extra)) {
- $extra = preg_replace('/[^\d\-]/i', '', $extra);
- $logs = get_logs('api-mailcow', $extra);
- }
- else {
- $logs = get_logs('api-mailcow');
- }
- echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';
- break;
- case "rspamd-history":
- // 0 is first record, so empty is fine
- if (isset($extra)) {
- $extra = preg_replace('/[^\d\-]/i', '', $extra);
- $logs = get_logs('rspamd-history', $extra);
- }
- else {
- $logs = get_logs('rspamd-history');
- }
- echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';
- break;
- }
- break;
- case "mailbox":
- switch ($object) {
- case "all":
- $domains = mailbox('get', 'domains');
- if (!empty($domains)) {
- foreach ($domains as $domain) {
- $mailboxes = mailbox('get', 'mailboxes', $domain);
- if (!empty($mailboxes)) {
- foreach ($mailboxes as $mailbox) {
- if ($details = mailbox('get', 'mailbox_details', $mailbox)) {
- $data[] = $details;
- }
- else {
- continue;
- }
- }
- }
- }
- process_get_return($data);
- }
- else {
- echo '{}';
- }
- break;
- default:
- $data = mailbox('get', 'mailbox_details', $object);
- process_get_return($data);
- break;
- }
- break;
- case "syncjobs":
- switch ($object) {
- case "all":
- $domains = mailbox('get', 'domains');
- if (!empty($domains)) {
- foreach ($domains as $domain) {
- $mailboxes = mailbox('get', 'mailboxes', $domain);
- if (!empty($mailboxes)) {
- foreach ($mailboxes as $mailbox) {
- $syncjobs = mailbox('get', 'syncjobs', $mailbox);
- if (!empty($syncjobs)) {
- foreach ($syncjobs as $syncjob) {
- if (isset($extra)) {
- $details = mailbox('get', 'syncjob_details', $syncjob, explode(',', $extra));
- }
- else {
- $details = mailbox('get', 'syncjob_details', $syncjob);
- }
- if ($details) {
- $data[] = $details;
- }
- else {
- continue;
- }
- }
- }
- }
- }
- }
- process_get_return($data);
- }
- else {
- echo '{}';
- }
- break;
- default:
- $syncjobs = mailbox('get', 'syncjobs', $object);
- if (!empty($syncjobs)) {
- foreach ($syncjobs as $syncjob) {
- if (isset($extra)) {
- $details = mailbox('get', 'syncjob_details', $syncjob, explode(',', $extra));
- }
- else {
- $details = mailbox('get', 'syncjob_details', $syncjob);
- }
- if ($details) {
- $data[] = $details;
- }
- else {
- continue;
- }
- }
- }
- process_get_return($data);
- break;
- }
- break;
- case "active-user-sieve":
- if (isset($object)) {
- $sieve_filter = mailbox('get', 'active_user_sieve', $object);
- if (!empty($sieve_filter)) {
- $data[] = $sieve_filter;
- }
- }
- process_get_return($data);
- break;
- case "filters":
- switch ($object) {
- case "all":
- $domains = mailbox('get', 'domains');
- if (!empty($domains)) {
- foreach ($domains as $domain) {
- $mailboxes = mailbox('get', 'mailboxes', $domain);
- if (!empty($mailboxes)) {
- foreach ($mailboxes as $mailbox) {
- $filters = mailbox('get', 'filters', $mailbox);
- if (!empty($filters)) {
- foreach ($filters as $filter) {
- if ($details = mailbox('get', 'filter_details', $filter)) {
- $data[] = $details;
- }
- else {
- continue;
- }
- }
- }
- }
- }
- }
- process_get_return($data);
- }
- else {
- echo '{}';
- }
- break;
- default:
- $filters = mailbox('get', 'filters', $object);
- if (!empty($filters)) {
- foreach ($filters as $filter) {
- if ($details = mailbox('get', 'filter_details', $filter)) {
- $data[] = $details;
- }
- else {
- continue;
- }
- }
- }
- process_get_return($data);
- break;
- }
- break;
- case "bcc":
- switch ($object) {
- case "all":
- $bcc_items = bcc('get');
- if (!empty($bcc_items)) {
- foreach ($bcc_items as $bcc_item) {
- if ($details = bcc('details', $bcc_item)) {
- $data[] = $details;
- }
- else {
- continue;
- }
- }
- }
- process_get_return($data);
- break;
- default:
- $data = bcc('details', $object);
- if (!empty($data)) {
- $data[] = $details;
- }
- process_get_return($data);
- break;
- }
- break;
- case "recipient_map":
- switch ($object) {
- case "all":
- $recipient_map_items = recipient_map('get');
- if (!empty($recipient_map_items)) {
- foreach ($recipient_map_items as $recipient_map_item) {
- if ($details = recipient_map('details', $recipient_map_item)) {
- $data[] = $details;
- }
- else {
- continue;
- }
- }
- }
- process_get_return($data);
- break;
- default:
- $data = recipient_map('details', $object);
- if (!empty($data)) {
- $data[] = $details;
- }
- process_get_return($data);
- break;
- }
- break;
- case "policy_wl_mailbox":
- switch ($object) {
- default:
- $data = policy('get', 'mailbox', $object)['whitelist'];
- process_get_return($data);
- break;
- }
- break;
- case "policy_bl_mailbox":
- switch ($object) {
- default:
- $data = policy('get', 'mailbox', $object)['blacklist'];
- process_get_return($data);
- break;
- }
- break;
- case "policy_wl_domain":
- switch ($object) {
- default:
- $data = policy('get', 'domain', $object)['whitelist'];
- process_get_return($data);
- break;
- }
- break;
- case "policy_bl_domain":
- switch ($object) {
- default:
- $data = policy('get', 'domain', $object)['blacklist'];
- process_get_return($data);
- break;
- }
- break;
- case "time_limited_aliases":
- switch ($object) {
- default:
- $data = mailbox('get', 'time_limited_aliases', $object);
- process_get_return($data);
- break;
- }
- break;
- case "resource":
- switch ($object) {
- case "all":
- $domains = mailbox('get', 'domains');
- if (!empty($domains)) {
- foreach ($domains as $domain) {
- $resources = mailbox('get', 'resources', $domain);
- if (!empty($resources)) {
- foreach ($resources as $resource) {
- if ($details = mailbox('get', 'resource_details', $resource)) {
- $data[] = $details;
- }
- else {
- continue;
- }
- }
- }
- }
- process_get_return($data);
- }
- else {
- echo '{}';
- }
- break;
- default:
- $data = mailbox('get', 'resource_details', $object);
- process_get_return($data);
- break;
- }
- break;
- case "fwdhost":
- switch ($object) {
- case "all":
- process_get_return(fwdhost('get'));
- break;
- default:
- process_get_return(fwdhost('details', $object));
- break;
- }
- break;
- case "quarantine":
- // "all" will not print details
- switch ($object) {
- case "all":
- process_get_return(quarantine('get'));
- break;
- default:
- process_get_return(quarantine('details', $object));
- break;
- }
- break;
- case "alias-domain":
- switch ($object) {
- case "all":
- $alias_domains = mailbox('get', 'alias_domains');
- if (!empty($alias_domains)) {
- foreach ($alias_domains as $alias_domain) {
- if ($details = mailbox('get', 'alias_domain_details', $alias_domain)) {
- $data[] = $details;
- }
- else {
- continue;
- }
- }
- }
- process_get_return($data);
- break;
- default:
- process_get_return(mailbox('get', 'alias_domain_details', $object));
- break;
- }
- break;
- case "alias":
- switch ($object) {
- case "all":
- $domains = array_merge(mailbox('get', 'domains'), mailbox('get', 'alias_domains'));
- if (!empty($domains)) {
- foreach ($domains as $domain) {
- $aliases = mailbox('get', 'aliases', $domain);
- if (!empty($aliases)) {
- foreach ($aliases as $alias) {
- if ($details = mailbox('get', 'alias_details', $alias)) {
- $data[] = $details;
- }
- else {
- continue;
- }
- }
- }
- }
- process_get_return($data);
- }
- else {
- echo '{}';
- }
- break;
- default:
- process_get_return(mailbox('get', 'alias_details', $object));
- break;
- }
- break;
- case "domain-admin":
- switch ($object) {
- case "all":
- $domain_admins = domain_admin('get');
- if (!empty($domain_admins)) {
- foreach ($domain_admins as $domain_admin) {
- if ($details = domain_admin('details', $domain_admin)) {
- $data[] = $details;
- }
- else {
- continue;
- }
- }
- process_get_return($data);
- }
- else {
- echo '{}';
- }
- break;
- default:
- process_get_return(domain_admin('details', $object));
- break;
- }
- break;
- case "u2f-registration":
- header('Content-Type: application/javascript');
- if (($_SESSION["mailcow_cc_role"] == "admin" || $_SESSION["mailcow_cc_role"] == "domainadmin") && $_SESSION["mailcow_cc_username"] == $object) {
- list($req, $sigs) = $u2f->getRegisterData(get_u2f_registrations($object));
- $_SESSION['regReq'] = json_encode($req);
- $_SESSION['regSigs'] = json_encode($sigs);
- echo 'var req = ' . json_encode($req) . ';';
- echo 'var registeredKeys = ' . json_encode($sigs) . ';';
- echo 'var appId = req.appId;';
- echo 'var registerRequests = [{version: req.version, challenge: req.challenge}];';
- }
- else {
- return;
- }
- break;
- case "u2f-authentication":
- header('Content-Type: application/javascript');
- if (isset($_SESSION['pending_mailcow_cc_username']) && $_SESSION['pending_mailcow_cc_username'] == $object) {
- $auth_data = $u2f->getAuthenticateData(get_u2f_registrations($object));
- $challenge = $auth_data[0]->challenge;
- $appId = $auth_data[0]->appId;
- foreach ($auth_data as $each) {
- $key = array(); // Empty array
- $key['version'] = $each->version;
- $key['keyHandle'] = $each->keyHandle;
- $registeredKey[] = $key;
- }
- $_SESSION['authReq'] = json_encode($auth_data);
- echo 'var appId = "' . $appId . '";';
- echo 'var challenge = ' . json_encode($challenge) . ';';
- echo 'var registeredKeys = ' . json_encode($registeredKey) . ';';
- }
- else {
- return;
- }
- break;
- default:
- echo '{}';
- break;
- }
- break;
- case "delete":
- function process_delete_return($return) {
- $generic_failure = json_encode(array(
- 'type' => 'error',
- 'msg' => 'Cannot delete item'
- ));
- $generic_success = json_encode(array(
- 'type' => 'success',
- 'msg' => 'Task completed'
- ));
- if ($return === false) {
- echo isset($_SESSION['return']) ? json_encode($_SESSION['return']) : $generic_failure;
- }
- else {
- echo isset($_SESSION['return']) ? json_encode($_SESSION['return']) : $generic_success;
- }
- }
- if (!isset($_POST['items'])) {
- echo $request_incomplete;
- exit;
- }
- else {
- $items = (array)json_decode($_POST['items'], true);
- }
- switch ($category) {
- case "alias":
- process_delete_return(mailbox('delete', 'alias', array('address' => $items)));
- break;
- case "relayhost":
- process_delete_return(relayhost('delete', array('id' => $items)));
- break;
- case "rsetting":
- process_delete_return(rsettings('delete', array('id' => $items)));
- break;
- case "syncjob":
- process_delete_return(mailbox('delete', 'syncjob', array('id' => $items)));
- break;
- case "filter":
- process_delete_return(mailbox('delete', 'filter', array('id' => $items)));
- break;
- case "qitem":
- process_delete_return(quarantine('delete', array('id' => $items)));
- break;
- case "bcc":
- process_delete_return(bcc('delete', array('id' => $items)));
- break;
- case "recipient_map":
- process_delete_return(recipient_map('delete', array('id' => $items)));
- break;
- case "fwdhost":
- process_delete_return(fwdhost('delete', array('forwardinghost' => $items)));
- break;
- case "dkim":
- process_delete_return(dkim('delete', array('domains' => $items)));
- break;
- case "domain":
- file_put_contents('/tmp/dssaa', $items);
- process_delete_return(mailbox('delete', 'domain', array('domain' => $items)));
- break;
- case "alias-domain":
- process_delete_return(mailbox('delete', 'alias_domain', array('alias_domain' => $items)));
- break;
- case "mailbox":
- process_delete_return(mailbox('delete', 'mailbox', array('username' => $items)));
- break;
- case "resource":
- process_delete_return(mailbox('delete', 'resource', array('name' => $items)));
- break;
- case "mailbox-policy":
- process_delete_return(policy('delete', 'mailbox', array('prefid' => $items)));
- break;
- case "domain-policy":
- process_delete_return(policy('delete', 'domain', array('prefid' => $items)));
- break;
- case "time_limited_alias":
- process_delete_return(mailbox('delete', 'time_limited_alias', array('address' => $items)));
- break;
- case "eas_cache":
- process_delete_return(mailbox('delete', 'eas_cache', array('username' => $items)));
- break;
- case "domain-admin":
- process_delete_return(domain_admin('delete', array('username' => $items)));
- break;
- }
- break;
- case "edit":
- function process_edit_return($return) {
- $generic_failure = json_encode(array(
- 'type' => 'error',
- 'msg' => 'Cannot edit item'
- ));
- $generic_success = json_encode(array(
- 'type' => 'success',
- 'msg' => 'Task completed'
- ));
- if ($return === false) {
- echo isset($_SESSION['return']) ? json_encode($_SESSION['return']) : $generic_failure;
- }
- else {
- echo isset($_SESSION['return']) ? json_encode($_SESSION['return']) : $generic_success;
- }
- }
- if (!isset($_POST['attr'])) {
- echo $request_incomplete;
- exit;
- }
- else {
- $attr = (array)json_decode($_POST['attr'], true);
- $items = isset($_POST['items']) ? (array)json_decode($_POST['items'], true) : null;
- }
- switch ($category) {
- case "bcc":
- process_edit_return(bcc('edit', array_merge(array('id' => $items), $attr)));
- break;
- case "oauth2-client":
- process_edit_return(oauth2('edit', 'client', array_merge(array('id' => $items), $attr)));
- break;
- case "recipient_map":
- process_edit_return(recipient_map('edit', array_merge(array('id' => $items), $attr)));
- break;
- case "alias":
- process_edit_return(mailbox('edit', 'alias', array_merge(array('address' => $items), $attr)));
- break;
- case "app_links":
- process_edit_return(customize('edit', 'app_links', $attr));
- break;
- case "relayhost":
- process_edit_return(relayhost('edit', array_merge(array('id' => $items), $attr)));
- break;
- case "rsetting":
- process_edit_return(rsettings('edit', array_merge(array('id' => $items), $attr)));
- break;
- case "delimiter_action":
- process_edit_return(mailbox('edit', 'delimiter_action', array_merge(array('username' => $items), $attr)));
- break;
- case "tls_policy":
- process_edit_return(mailbox('edit', 'tls_policy', array_merge(array('username' => $items), $attr)));
- break;
- case "qitem":
- process_edit_return(quarantine('edit', array_merge(array('id' => $items), $attr)));
- break;
- case "quarantine":
- process_edit_return(quarantine('edit', $attr));
- break;
- case "time_limited_alias":
- process_edit_return(mailbox('edit', 'time_limited_alias', array_merge(array('address' => $items), $attr)));
- break;
- case "mailbox":
- process_edit_return(mailbox('edit', 'mailbox', array_merge(array('username' => $items), $attr)));
- break;
- case "syncjob":
- process_edit_return(mailbox('edit', 'syncjob', array_merge(array('id' => $items), $attr)));
- break;
- case "filter":
- process_edit_return(mailbox('edit', 'filter', array_merge(array('id' => $items), $attr)));
- break;
- case "resource":
- process_edit_return(mailbox('edit', 'resource', array_merge(array('name' => $items), $attr)));
- break;
- case "domain":
- process_edit_return(mailbox('edit', 'domain', array_merge(array('domain' => $items), $attr)));
- break;
- case "ratelimit":
- process_edit_return(mailbox('edit', 'ratelimit', array_merge(array('object' => $items), $attr)));
- break;
- case "alias-domain":
- process_edit_return(mailbox('edit', 'alias_domain', array_merge(array('alias_domain' => $items), $attr)));
- break;
- case "spam-score":
- process_edit_return(mailbox('edit', 'spam_score', array_merge(array('username' => $items), $attr)));
- break;
- case "domain-admin":
- process_edit_return(domain_admin('edit', array_merge(array('username' => $items), $attr)));
- break;
- case "fwdhost":
- process_edit_return(fwdhost('edit', array_merge(array('fwdhost' => $items), $attr)));
- break;
- case "fail2ban":
- process_edit_return(fail2ban('edit', $attr));
- break;
- case "ui_texts":
- process_edit_return(customize('edit', 'ui_texts', $attr));
- break;
- case "self":
- if ($_SESSION['mailcow_cc_role'] == "domainadmin") {
- process_edit_return(domain_admin('edit', $attr));
- }
- elseif ($_SESSION['mailcow_cc_role'] == "user") {
- process_edit_return(edit_user_account($attr));
- }
- elseif ($_SESSION['mailcow_cc_role'] == "admin") {
- process_edit_return(edit_admin_account($attr));
- }
- break;
- }
- break;
- }
- }
- }
|