json_api.php 44 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142
  1. <?php
  2. /*
  3. edit/alias => POST data:
  4. {
  5. address: {a, b, c}, (where a, b, c represent alias addresses)
  6. active: 1 (0 or 1)
  7. }
  8. delete/alias => POST data:
  9. {
  10. address: {a, b, c}, (where a, b, c represent alias addresses)
  11. }
  12. */
  13. header('Content-Type: application/json');
  14. require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/prerequisites.inc.php';
  15. error_reporting(0);
  16. function api_log($postarray) {
  17. global $redis;
  18. $data_var = array();
  19. foreach ($postarray as $data => &$value) {
  20. if ($data == 'csrf_token') {
  21. continue;
  22. }
  23. if ($value = json_decode($value, true)) {
  24. unset($value["csrf_token"]);
  25. foreach ($value as $key => &$val) {
  26. if(preg_match("/pass/i", $key)) {
  27. $val = '********';
  28. }
  29. }
  30. $value = json_encode($value);
  31. }
  32. $data_var[] = $data . "='" . $value . "'";
  33. }
  34. try {
  35. $log_line = array(
  36. 'time' => time(),
  37. 'uri' => $_SERVER['REQUEST_URI'],
  38. 'method' => $_SERVER['REQUEST_METHOD'],
  39. 'remote' => $_SERVER['REMOTE_ADDR'],
  40. 'data' => implode(', ', $data_var)
  41. );
  42. $redis->lPush('API_LOG', json_encode($log_line));
  43. }
  44. catch (RedisException $e) {
  45. $_SESSION['return'] = array(
  46. 'type' => 'danger',
  47. 'msg' => 'Redis: '.$e
  48. );
  49. return false;
  50. }
  51. }
  52. api_log($_POST);
  53. if (isset($_SESSION['mailcow_cc_role']) || isset($_SESSION['pending_mailcow_cc_username'])) {
  54. if (isset($_GET['query'])) {
  55. $query = explode('/', $_GET['query']);
  56. $action = (isset($query[0])) ? $query[0] : null;
  57. $category = (isset($query[1])) ? $query[1] : null;
  58. $object = (isset($query[2])) ? $query[2] : null;
  59. $extra = (isset($query[3])) ? $query[3] : null;
  60. $request_incomplete = json_encode(array(
  61. 'type' => 'error',
  62. 'msg' => 'Cannot find attributes in post data'
  63. ));
  64. switch ($action) {
  65. case "add":
  66. function process_add_return($return) {
  67. $generic_failure = json_encode(array(
  68. 'type' => 'error',
  69. 'msg' => 'Cannot add item'
  70. ));
  71. $generic_success = json_encode(array(
  72. 'type' => 'success',
  73. 'msg' => 'Task completed'
  74. ));
  75. if ($return === false) {
  76. echo isset($_SESSION['return']) ? json_encode($_SESSION['return']) : $generic_failure;
  77. }
  78. else {
  79. echo isset($_SESSION['return']) ? json_encode($_SESSION['return']) : $generic_success;
  80. }
  81. }
  82. if (!isset($_POST['attr'])) {
  83. echo $request_incomplete;
  84. exit;
  85. }
  86. else {
  87. $attr = (array)json_decode($_POST['attr'], true);
  88. }
  89. switch ($category) {
  90. case "time_limited_alias":
  91. process_add_return(mailbox('add', 'time_limited_alias', $attr));
  92. break;
  93. case "relayhost":
  94. process_add_return(relayhost('add', $attr));
  95. break;
  96. case "rsetting":
  97. process_add_return(rsettings('add', $attr));
  98. break;
  99. case "mailbox":
  100. process_add_return(mailbox('add', 'mailbox', $attr));
  101. break;
  102. case "domain":
  103. process_add_return(mailbox('add', 'domain', $attr));
  104. break;
  105. case "domain":
  106. process_add_return(mailbox('add', 'resource', $attr));
  107. break;
  108. case "alias":
  109. process_add_return(mailbox('add', 'alias', $attr));
  110. break;
  111. case "filter":
  112. process_add_return(mailbox('add', 'filter', $attr));
  113. break;
  114. case "domain-policy":
  115. process_add_return(policy('add', 'domain', $attr));
  116. break;
  117. case "mailbox-policy":
  118. process_add_return(policy('add', 'mailbox', $attr));
  119. break;
  120. case "alias-domain":
  121. process_add_return(mailbox('add', 'alias_domain', $attr));
  122. break;
  123. case "fwdhost":
  124. process_add_return(fwdhost('add', $attr));
  125. break;
  126. case "dkim":
  127. process_add_return(dkim('add', $attr));
  128. break;
  129. case "dkim_import":
  130. process_add_return(dkim('import', $attr));
  131. break;
  132. case "domain-admin":
  133. process_add_return(domain_admin('add', $attr));
  134. break;
  135. case "syncjob":
  136. process_add_return(mailbox('add', 'syncjob', $attr));
  137. break;
  138. case "bcc":
  139. process_add_return(bcc('add', $attr));
  140. break;
  141. case "recipient_map":
  142. process_add_return(recipient_map('add', $attr));
  143. break;
  144. }
  145. break;
  146. case "get":
  147. function process_get_return($data) {
  148. echo (!isset($data) || empty($data)) ? '{}' : json_encode($data, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT);
  149. }
  150. switch ($category) {
  151. case "rspamd":
  152. switch ($object) {
  153. case "actions":
  154. $curl = curl_init();
  155. curl_setopt($curl, CURLOPT_UNIX_SOCKET_PATH, '/rspamd-sock/rspamd.sock');
  156. curl_setopt($curl, CURLOPT_URL,"http://rspamd/stat");
  157. curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
  158. $data = curl_exec($curl);
  159. if ($data) {
  160. $return = array();
  161. $stats_array = json_decode($data, true)['actions'];
  162. $stats_array['soft reject'] = $stats_array['soft reject'] + $stats_array['greylist'];
  163. unset($stats_array['greylist']);
  164. foreach ($stats_array as $action => $count) {
  165. $return[] = array($action, $count);
  166. }
  167. echo json_encode($return, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT);
  168. }
  169. elseif (!isset($data) || empty($data)) {
  170. echo '{}';
  171. }
  172. break;
  173. case "stat":
  174. $data = file_get_contents('http://rspamd-mailcow:11334/stat');
  175. process_get_return($data);
  176. break;
  177. case "graph":
  178. switch ($extra) {
  179. case "hourly":
  180. $data = file_get_contents('http://rspamd-mailcow:11334/graph?type=hourly');
  181. if (!empty($data)) {
  182. $data_array = json_decode($data, true);
  183. $rejected['label'] = "reject";
  184. foreach ($data_array[0] as $dataset) {
  185. $rejected['data'][] = $dataset;
  186. }
  187. $temp_reject['label'] = "temp_reject";
  188. foreach ($data_array[1] as $dataset) {
  189. $temp_reject['data'][] = $dataset;
  190. }
  191. $add_header['label'] = "add_header";
  192. foreach ($data_array[2] as $dataset) {
  193. $add_header['data'][] = $dataset;
  194. }
  195. $prob_spam['label'] = "prob_spam";
  196. foreach ($data_array[3] as $dataset) {
  197. $prob_spam['data'][] = $dataset;
  198. }
  199. $greylist['label'] = "greylist";
  200. foreach ($data_array[4] as $dataset) {
  201. $greylist['data'][] = $dataset;
  202. }
  203. $clean['label'] = "clean";
  204. $clean['pointStyle'] = "cross";
  205. foreach ($data_array[5] as $dataset) {
  206. $clean['data'][] = $dataset;
  207. }
  208. echo json_encode(array($rejected, $temp_reject, $add_header, $prob_spam, $greylist, $clean), JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT);
  209. }
  210. elseif (!isset($data) || empty($data)) {
  211. echo '{}';
  212. }
  213. break;
  214. case "daily":
  215. $data = file_get_contents('http://rspamd-mailcow:11334/graph?type=daily');
  216. if (!empty($data)) {
  217. $data_array = json_decode($data, true);
  218. $rejected['label'] = "reject";
  219. foreach ($data_array[0] as $dataset) {
  220. $rejected['data'][] = $dataset;
  221. }
  222. $temp_reject['label'] = "temp_reject";
  223. foreach ($data_array[1] as $dataset) {
  224. $temp_reject['data'][] = $dataset;
  225. }
  226. $add_header['label'] = "add_header";
  227. foreach ($data_array[2] as $dataset) {
  228. $add_header['data'][] = $dataset;
  229. }
  230. $prob_spam['label'] = "prob_spam";
  231. foreach ($data_array[3] as $dataset) {
  232. $prob_spam['data'][] = $dataset;
  233. }
  234. $greylist['label'] = "greylist";
  235. foreach ($data_array[4] as $dataset) {
  236. $greylist['data'][] = $dataset;
  237. }
  238. $clean['label'] = "clean";
  239. $clean['pointStyle'] = "cross";
  240. foreach ($data_array[5] as $dataset) {
  241. $clean['data'][] = $dataset;
  242. }
  243. echo json_encode(array($rejected, $temp_reject, $add_header, $prob_spam, $greylist, $clean), JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT);
  244. }
  245. elseif (!isset($data) || empty($data)) {
  246. echo '{}';
  247. }
  248. break;
  249. case "weekly":
  250. $data = file_get_contents('http://rspamd-mailcow:11334/graph?type=weekly');
  251. if (!empty($data)) {
  252. $data_array = json_decode($data, true);
  253. $rejected['label'] = "reject";
  254. foreach ($data_array[0] as $dataset) {
  255. $rejected['data'][] = $dataset;
  256. }
  257. $temp_reject['label'] = "temp_reject";
  258. foreach ($data_array[1] as $dataset) {
  259. $temp_reject['data'][] = $dataset;
  260. }
  261. $add_header['label'] = "add_header";
  262. foreach ($data_array[2] as $dataset) {
  263. $add_header['data'][] = $dataset;
  264. }
  265. $prob_spam['label'] = "prob_spam";
  266. foreach ($data_array[3] as $dataset) {
  267. $prob_spam['data'][] = $dataset;
  268. }
  269. $greylist['label'] = "greylist";
  270. foreach ($data_array[4] as $dataset) {
  271. $greylist['data'][] = $dataset;
  272. }
  273. $clean['label'] = "clean";
  274. $clean['pointStyle'] = "cross";
  275. foreach ($data_array[5] as $dataset) {
  276. $clean['data'][] = $dataset;
  277. }
  278. echo json_encode(array($rejected, $temp_reject, $add_header, $prob_spam, $greylist, $clean), JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT);
  279. }
  280. elseif (!isset($data) || empty($data)) {
  281. echo '{}';
  282. }
  283. break;
  284. case "monthly":
  285. $data = file_get_contents('http://rspamd-mailcow:11334/graph?type=monthly');
  286. if (!empty($data)) {
  287. $data_array = json_decode($data, true);
  288. $rejected['label'] = "reject";
  289. foreach ($data_array[0] as $dataset) {
  290. $rejected['data'][] = $dataset;
  291. }
  292. $temp_reject['label'] = "temp_reject";
  293. foreach ($data_array[1] as $dataset) {
  294. $temp_reject['data'][] = $dataset;
  295. }
  296. $add_header['label'] = "add_header";
  297. foreach ($data_array[2] as $dataset) {
  298. $add_header['data'][] = $dataset;
  299. }
  300. $prob_spam['label'] = "prob_spam";
  301. foreach ($data_array[3] as $dataset) {
  302. $prob_spam['data'][] = $dataset;
  303. }
  304. $greylist['label'] = "greylist";
  305. foreach ($data_array[4] as $dataset) {
  306. $greylist['data'][] = $dataset;
  307. }
  308. $clean['label'] = "clean";
  309. $clean['pointStyle'] = "cross";
  310. foreach ($data_array[5] as $dataset) {
  311. $clean['data'][] = $dataset;
  312. }
  313. echo json_encode(array($rejected, $temp_reject, $add_header, $prob_spam, $greylist, $clean), JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT);
  314. }
  315. elseif (!isset($data) || empty($data)) {
  316. echo '{}';
  317. }
  318. break;
  319. }
  320. break;
  321. }
  322. break;
  323. case "domain":
  324. switch ($object) {
  325. case "all":
  326. $domains = mailbox('get', 'domains');
  327. if (!empty($domains)) {
  328. foreach ($domains as $domain) {
  329. if ($details = mailbox('get', 'domain_details', $domain)) {
  330. $data[] = $details;
  331. }
  332. else {
  333. continue;
  334. }
  335. }
  336. process_get_return($data);
  337. }
  338. else {
  339. echo '{}';
  340. }
  341. break;
  342. default:
  343. $data = mailbox('get', 'domain_details', $object);
  344. process_get_return($data);
  345. break;
  346. }
  347. break;
  348. case "relayhost":
  349. switch ($object) {
  350. case "all":
  351. $relayhosts = relayhost('get');
  352. if (!empty($relayhosts)) {
  353. foreach ($relayhosts as $relayhost) {
  354. if ($details = relayhost('details', $relayhost['id'])) {
  355. $data[] = $details;
  356. }
  357. else {
  358. continue;
  359. }
  360. }
  361. process_get_return($data);
  362. }
  363. else {
  364. echo '{}';
  365. }
  366. break;
  367. default:
  368. $data = relayhost('details', $object);
  369. process_get_return($data);
  370. break;
  371. }
  372. break;
  373. case "rsetting":
  374. switch ($object) {
  375. case "all":
  376. $rsettings = rsettings('get');
  377. if (!empty($rsettings)) {
  378. foreach ($rsettings as $rsetting) {
  379. if ($details = rsettings('details', $rsetting['id'])) {
  380. $data[] = $details;
  381. }
  382. else {
  383. continue;
  384. }
  385. }
  386. process_get_return($data);
  387. }
  388. else {
  389. echo '{}';
  390. }
  391. break;
  392. default:
  393. $data = rsetting('details', $object);
  394. process_get_return($data);
  395. break;
  396. }
  397. break;
  398. case "oauth2-client":
  399. switch ($object) {
  400. case "all":
  401. $clients = oauth2('get', 'clients');
  402. if (!empty($clients)) {
  403. foreach ($clients as $client) {
  404. if ($details = oauth2('details', 'client', $client)) {
  405. $data[] = $details;
  406. }
  407. else {
  408. continue;
  409. }
  410. }
  411. process_get_return($data);
  412. }
  413. else {
  414. echo '{}';
  415. }
  416. break;
  417. default:
  418. $data = oauth2('details', 'client', $object);
  419. process_get_return($data);
  420. break;
  421. }
  422. break;
  423. case "logs":
  424. switch ($object) {
  425. case "dovecot":
  426. // 0 is first record, so empty is fine
  427. if (isset($extra)) {
  428. $extra = preg_replace('/[^\d\-]/i', '', $extra);
  429. $logs = get_logs('dovecot-mailcow', $extra);
  430. }
  431. else {
  432. $logs = get_logs('dovecot-mailcow');
  433. }
  434. echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';
  435. break;
  436. case "netfilter":
  437. // 0 is first record, so empty is fine
  438. if (isset($extra)) {
  439. $extra = preg_replace('/[^\d\-]/i', '', $extra);
  440. $logs = get_logs('netfilter-mailcow', $extra);
  441. }
  442. else {
  443. $logs = get_logs('netfilter-mailcow');
  444. }
  445. echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';
  446. break;
  447. case "postfix":
  448. // 0 is first record, so empty is fine
  449. if (isset($extra)) {
  450. $extra = preg_replace('/[^\d\-]/i', '', $extra);
  451. $logs = get_logs('postfix-mailcow', $extra);
  452. }
  453. else {
  454. $logs = get_logs('postfix-mailcow');
  455. }
  456. echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';
  457. break;
  458. case "autodiscover":
  459. // 0 is first record, so empty is fine
  460. if (isset($extra)) {
  461. $extra = preg_replace('/[^\d\-]/i', '', $extra);
  462. $logs = get_logs('autodiscover-mailcow', $extra);
  463. }
  464. else {
  465. $logs = get_logs('autodiscover-mailcow');
  466. }
  467. echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';
  468. break;
  469. case "sogo":
  470. // 0 is first record, so empty is fine
  471. if (isset($extra)) {
  472. $extra = preg_replace('/[^\d\-]/i', '', $extra);
  473. $logs = get_logs('sogo-mailcow', $extra);
  474. }
  475. else {
  476. $logs = get_logs('sogo-mailcow');
  477. }
  478. echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';
  479. break;
  480. case "watchdog":
  481. // 0 is first record, so empty is fine
  482. if (isset($extra)) {
  483. $extra = preg_replace('/[^\d\-]/i', '', $extra);
  484. $logs = get_logs('watchdog-mailcow', $extra);
  485. }
  486. else {
  487. $logs = get_logs('watchdog-mailcow');
  488. }
  489. echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';
  490. break;
  491. case "acme":
  492. // 0 is first record, so empty is fine
  493. if (isset($extra)) {
  494. $extra = preg_replace('/[^\d\-]/i', '', $extra);
  495. $logs = get_logs('acme-mailcow', $extra);
  496. }
  497. else {
  498. $logs = get_logs('acme-mailcow');
  499. }
  500. echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';
  501. break;
  502. case "api":
  503. // 0 is first record, so empty is fine
  504. if (isset($extra)) {
  505. $extra = preg_replace('/[^\d\-]/i', '', $extra);
  506. $logs = get_logs('api-mailcow', $extra);
  507. }
  508. else {
  509. $logs = get_logs('api-mailcow');
  510. }
  511. echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';
  512. break;
  513. case "rspamd-history":
  514. // 0 is first record, so empty is fine
  515. if (isset($extra)) {
  516. $extra = preg_replace('/[^\d\-]/i', '', $extra);
  517. $logs = get_logs('rspamd-history', $extra);
  518. }
  519. else {
  520. $logs = get_logs('rspamd-history');
  521. }
  522. echo (isset($logs) && !empty($logs)) ? json_encode($logs, JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT) : '{}';
  523. break;
  524. }
  525. break;
  526. case "mailbox":
  527. switch ($object) {
  528. case "all":
  529. $domains = mailbox('get', 'domains');
  530. if (!empty($domains)) {
  531. foreach ($domains as $domain) {
  532. $mailboxes = mailbox('get', 'mailboxes', $domain);
  533. if (!empty($mailboxes)) {
  534. foreach ($mailboxes as $mailbox) {
  535. if ($details = mailbox('get', 'mailbox_details', $mailbox)) {
  536. $data[] = $details;
  537. }
  538. else {
  539. continue;
  540. }
  541. }
  542. }
  543. }
  544. process_get_return($data);
  545. }
  546. else {
  547. echo '{}';
  548. }
  549. break;
  550. default:
  551. $data = mailbox('get', 'mailbox_details', $object);
  552. process_get_return($data);
  553. break;
  554. }
  555. break;
  556. case "syncjobs":
  557. switch ($object) {
  558. case "all":
  559. $domains = mailbox('get', 'domains');
  560. if (!empty($domains)) {
  561. foreach ($domains as $domain) {
  562. $mailboxes = mailbox('get', 'mailboxes', $domain);
  563. if (!empty($mailboxes)) {
  564. foreach ($mailboxes as $mailbox) {
  565. $syncjobs = mailbox('get', 'syncjobs', $mailbox);
  566. if (!empty($syncjobs)) {
  567. foreach ($syncjobs as $syncjob) {
  568. if (isset($extra)) {
  569. $details = mailbox('get', 'syncjob_details', $syncjob, explode(',', $extra));
  570. }
  571. else {
  572. $details = mailbox('get', 'syncjob_details', $syncjob);
  573. }
  574. if ($details) {
  575. $data[] = $details;
  576. }
  577. else {
  578. continue;
  579. }
  580. }
  581. }
  582. }
  583. }
  584. }
  585. process_get_return($data);
  586. }
  587. else {
  588. echo '{}';
  589. }
  590. break;
  591. default:
  592. $syncjobs = mailbox('get', 'syncjobs', $object);
  593. if (!empty($syncjobs)) {
  594. foreach ($syncjobs as $syncjob) {
  595. if (isset($extra)) {
  596. $details = mailbox('get', 'syncjob_details', $syncjob, explode(',', $extra));
  597. }
  598. else {
  599. $details = mailbox('get', 'syncjob_details', $syncjob);
  600. }
  601. if ($details) {
  602. $data[] = $details;
  603. }
  604. else {
  605. continue;
  606. }
  607. }
  608. }
  609. process_get_return($data);
  610. break;
  611. }
  612. break;
  613. case "active-user-sieve":
  614. if (isset($object)) {
  615. $sieve_filter = mailbox('get', 'active_user_sieve', $object);
  616. if (!empty($sieve_filter)) {
  617. $data[] = $sieve_filter;
  618. }
  619. }
  620. process_get_return($data);
  621. break;
  622. case "filters":
  623. switch ($object) {
  624. case "all":
  625. $domains = mailbox('get', 'domains');
  626. if (!empty($domains)) {
  627. foreach ($domains as $domain) {
  628. $mailboxes = mailbox('get', 'mailboxes', $domain);
  629. if (!empty($mailboxes)) {
  630. foreach ($mailboxes as $mailbox) {
  631. $filters = mailbox('get', 'filters', $mailbox);
  632. if (!empty($filters)) {
  633. foreach ($filters as $filter) {
  634. if ($details = mailbox('get', 'filter_details', $filter)) {
  635. $data[] = $details;
  636. }
  637. else {
  638. continue;
  639. }
  640. }
  641. }
  642. }
  643. }
  644. }
  645. process_get_return($data);
  646. }
  647. else {
  648. echo '{}';
  649. }
  650. break;
  651. default:
  652. $filters = mailbox('get', 'filters', $object);
  653. if (!empty($filters)) {
  654. foreach ($filters as $filter) {
  655. if ($details = mailbox('get', 'filter_details', $filter)) {
  656. $data[] = $details;
  657. }
  658. else {
  659. continue;
  660. }
  661. }
  662. }
  663. process_get_return($data);
  664. break;
  665. }
  666. break;
  667. case "bcc":
  668. switch ($object) {
  669. case "all":
  670. $bcc_items = bcc('get');
  671. if (!empty($bcc_items)) {
  672. foreach ($bcc_items as $bcc_item) {
  673. if ($details = bcc('details', $bcc_item)) {
  674. $data[] = $details;
  675. }
  676. else {
  677. continue;
  678. }
  679. }
  680. }
  681. process_get_return($data);
  682. break;
  683. default:
  684. $data = bcc('details', $object);
  685. if (!empty($data)) {
  686. $data[] = $details;
  687. }
  688. process_get_return($data);
  689. break;
  690. }
  691. break;
  692. case "recipient_map":
  693. switch ($object) {
  694. case "all":
  695. $recipient_map_items = recipient_map('get');
  696. if (!empty($recipient_map_items)) {
  697. foreach ($recipient_map_items as $recipient_map_item) {
  698. if ($details = recipient_map('details', $recipient_map_item)) {
  699. $data[] = $details;
  700. }
  701. else {
  702. continue;
  703. }
  704. }
  705. }
  706. process_get_return($data);
  707. break;
  708. default:
  709. $data = recipient_map('details', $object);
  710. if (!empty($data)) {
  711. $data[] = $details;
  712. }
  713. process_get_return($data);
  714. break;
  715. }
  716. break;
  717. case "policy_wl_mailbox":
  718. switch ($object) {
  719. default:
  720. $data = policy('get', 'mailbox', $object)['whitelist'];
  721. process_get_return($data);
  722. break;
  723. }
  724. break;
  725. case "policy_bl_mailbox":
  726. switch ($object) {
  727. default:
  728. $data = policy('get', 'mailbox', $object)['blacklist'];
  729. process_get_return($data);
  730. break;
  731. }
  732. break;
  733. case "policy_wl_domain":
  734. switch ($object) {
  735. default:
  736. $data = policy('get', 'domain', $object)['whitelist'];
  737. process_get_return($data);
  738. break;
  739. }
  740. break;
  741. case "policy_bl_domain":
  742. switch ($object) {
  743. default:
  744. $data = policy('get', 'domain', $object)['blacklist'];
  745. process_get_return($data);
  746. break;
  747. }
  748. break;
  749. case "time_limited_aliases":
  750. switch ($object) {
  751. default:
  752. $data = mailbox('get', 'time_limited_aliases', $object);
  753. process_get_return($data);
  754. break;
  755. }
  756. break;
  757. case "resource":
  758. switch ($object) {
  759. case "all":
  760. $domains = mailbox('get', 'domains');
  761. if (!empty($domains)) {
  762. foreach ($domains as $domain) {
  763. $resources = mailbox('get', 'resources', $domain);
  764. if (!empty($resources)) {
  765. foreach ($resources as $resource) {
  766. if ($details = mailbox('get', 'resource_details', $resource)) {
  767. $data[] = $details;
  768. }
  769. else {
  770. continue;
  771. }
  772. }
  773. }
  774. }
  775. process_get_return($data);
  776. }
  777. else {
  778. echo '{}';
  779. }
  780. break;
  781. default:
  782. $data = mailbox('get', 'resource_details', $object);
  783. process_get_return($data);
  784. break;
  785. }
  786. break;
  787. case "fwdhost":
  788. switch ($object) {
  789. case "all":
  790. process_get_return(fwdhost('get'));
  791. break;
  792. default:
  793. process_get_return(fwdhost('details', $object));
  794. break;
  795. }
  796. break;
  797. case "quarantine":
  798. // "all" will not print details
  799. switch ($object) {
  800. case "all":
  801. process_get_return(quarantine('get'));
  802. break;
  803. default:
  804. process_get_return(quarantine('details', $object));
  805. break;
  806. }
  807. break;
  808. case "alias-domain":
  809. switch ($object) {
  810. case "all":
  811. $alias_domains = mailbox('get', 'alias_domains');
  812. if (!empty($alias_domains)) {
  813. foreach ($alias_domains as $alias_domain) {
  814. if ($details = mailbox('get', 'alias_domain_details', $alias_domain)) {
  815. $data[] = $details;
  816. }
  817. else {
  818. continue;
  819. }
  820. }
  821. }
  822. process_get_return($data);
  823. break;
  824. default:
  825. process_get_return(mailbox('get', 'alias_domain_details', $object));
  826. break;
  827. }
  828. break;
  829. case "alias":
  830. switch ($object) {
  831. case "all":
  832. $domains = array_merge(mailbox('get', 'domains'), mailbox('get', 'alias_domains'));
  833. if (!empty($domains)) {
  834. foreach ($domains as $domain) {
  835. $aliases = mailbox('get', 'aliases', $domain);
  836. if (!empty($aliases)) {
  837. foreach ($aliases as $alias) {
  838. if ($details = mailbox('get', 'alias_details', $alias)) {
  839. $data[] = $details;
  840. }
  841. else {
  842. continue;
  843. }
  844. }
  845. }
  846. }
  847. process_get_return($data);
  848. }
  849. else {
  850. echo '{}';
  851. }
  852. break;
  853. default:
  854. process_get_return(mailbox('get', 'alias_details', $object));
  855. break;
  856. }
  857. break;
  858. case "domain-admin":
  859. switch ($object) {
  860. case "all":
  861. $domain_admins = domain_admin('get');
  862. if (!empty($domain_admins)) {
  863. foreach ($domain_admins as $domain_admin) {
  864. if ($details = domain_admin('details', $domain_admin)) {
  865. $data[] = $details;
  866. }
  867. else {
  868. continue;
  869. }
  870. }
  871. process_get_return($data);
  872. }
  873. else {
  874. echo '{}';
  875. }
  876. break;
  877. default:
  878. process_get_return(domain_admin('details', $object));
  879. break;
  880. }
  881. break;
  882. case "u2f-registration":
  883. header('Content-Type: application/javascript');
  884. if (($_SESSION["mailcow_cc_role"] == "admin" || $_SESSION["mailcow_cc_role"] == "domainadmin") && $_SESSION["mailcow_cc_username"] == $object) {
  885. list($req, $sigs) = $u2f->getRegisterData(get_u2f_registrations($object));
  886. $_SESSION['regReq'] = json_encode($req);
  887. $_SESSION['regSigs'] = json_encode($sigs);
  888. echo 'var req = ' . json_encode($req) . ';';
  889. echo 'var registeredKeys = ' . json_encode($sigs) . ';';
  890. echo 'var appId = req.appId;';
  891. echo 'var registerRequests = [{version: req.version, challenge: req.challenge}];';
  892. }
  893. else {
  894. return;
  895. }
  896. break;
  897. case "u2f-authentication":
  898. header('Content-Type: application/javascript');
  899. if (isset($_SESSION['pending_mailcow_cc_username']) && $_SESSION['pending_mailcow_cc_username'] == $object) {
  900. $auth_data = $u2f->getAuthenticateData(get_u2f_registrations($object));
  901. $challenge = $auth_data[0]->challenge;
  902. $appId = $auth_data[0]->appId;
  903. foreach ($auth_data as $each) {
  904. $key = array(); // Empty array
  905. $key['version'] = $each->version;
  906. $key['keyHandle'] = $each->keyHandle;
  907. $registeredKey[] = $key;
  908. }
  909. $_SESSION['authReq'] = json_encode($auth_data);
  910. echo 'var appId = "' . $appId . '";';
  911. echo 'var challenge = ' . json_encode($challenge) . ';';
  912. echo 'var registeredKeys = ' . json_encode($registeredKey) . ';';
  913. }
  914. else {
  915. return;
  916. }
  917. break;
  918. default:
  919. echo '{}';
  920. break;
  921. }
  922. break;
  923. case "delete":
  924. function process_delete_return($return) {
  925. $generic_failure = json_encode(array(
  926. 'type' => 'error',
  927. 'msg' => 'Cannot delete item'
  928. ));
  929. $generic_success = json_encode(array(
  930. 'type' => 'success',
  931. 'msg' => 'Task completed'
  932. ));
  933. if ($return === false) {
  934. echo isset($_SESSION['return']) ? json_encode($_SESSION['return']) : $generic_failure;
  935. }
  936. else {
  937. echo isset($_SESSION['return']) ? json_encode($_SESSION['return']) : $generic_success;
  938. }
  939. }
  940. if (!isset($_POST['items'])) {
  941. echo $request_incomplete;
  942. exit;
  943. }
  944. else {
  945. $items = (array)json_decode($_POST['items'], true);
  946. }
  947. switch ($category) {
  948. case "alias":
  949. process_delete_return(mailbox('delete', 'alias', array('address' => $items)));
  950. break;
  951. case "relayhost":
  952. process_delete_return(relayhost('delete', array('id' => $items)));
  953. break;
  954. case "rsetting":
  955. process_delete_return(rsettings('delete', array('id' => $items)));
  956. break;
  957. case "syncjob":
  958. process_delete_return(mailbox('delete', 'syncjob', array('id' => $items)));
  959. break;
  960. case "filter":
  961. process_delete_return(mailbox('delete', 'filter', array('id' => $items)));
  962. break;
  963. case "qitem":
  964. process_delete_return(quarantine('delete', array('id' => $items)));
  965. break;
  966. case "bcc":
  967. process_delete_return(bcc('delete', array('id' => $items)));
  968. break;
  969. case "recipient_map":
  970. process_delete_return(recipient_map('delete', array('id' => $items)));
  971. break;
  972. case "fwdhost":
  973. process_delete_return(fwdhost('delete', array('forwardinghost' => $items)));
  974. break;
  975. case "dkim":
  976. process_delete_return(dkim('delete', array('domains' => $items)));
  977. break;
  978. case "domain":
  979. file_put_contents('/tmp/dssaa', $items);
  980. process_delete_return(mailbox('delete', 'domain', array('domain' => $items)));
  981. break;
  982. case "alias-domain":
  983. process_delete_return(mailbox('delete', 'alias_domain', array('alias_domain' => $items)));
  984. break;
  985. case "mailbox":
  986. process_delete_return(mailbox('delete', 'mailbox', array('username' => $items)));
  987. break;
  988. case "resource":
  989. process_delete_return(mailbox('delete', 'resource', array('name' => $items)));
  990. break;
  991. case "mailbox-policy":
  992. process_delete_return(policy('delete', 'mailbox', array('prefid' => $items)));
  993. break;
  994. case "domain-policy":
  995. process_delete_return(policy('delete', 'domain', array('prefid' => $items)));
  996. break;
  997. case "time_limited_alias":
  998. process_delete_return(mailbox('delete', 'time_limited_alias', array('address' => $items)));
  999. break;
  1000. case "eas_cache":
  1001. process_delete_return(mailbox('delete', 'eas_cache', array('username' => $items)));
  1002. break;
  1003. case "domain-admin":
  1004. process_delete_return(domain_admin('delete', array('username' => $items)));
  1005. break;
  1006. }
  1007. break;
  1008. case "edit":
  1009. function process_edit_return($return) {
  1010. $generic_failure = json_encode(array(
  1011. 'type' => 'error',
  1012. 'msg' => 'Cannot edit item'
  1013. ));
  1014. $generic_success = json_encode(array(
  1015. 'type' => 'success',
  1016. 'msg' => 'Task completed'
  1017. ));
  1018. if ($return === false) {
  1019. echo isset($_SESSION['return']) ? json_encode($_SESSION['return']) : $generic_failure;
  1020. }
  1021. else {
  1022. echo isset($_SESSION['return']) ? json_encode($_SESSION['return']) : $generic_success;
  1023. }
  1024. }
  1025. if (!isset($_POST['attr'])) {
  1026. echo $request_incomplete;
  1027. exit;
  1028. }
  1029. else {
  1030. $attr = (array)json_decode($_POST['attr'], true);
  1031. $items = isset($_POST['items']) ? (array)json_decode($_POST['items'], true) : null;
  1032. }
  1033. switch ($category) {
  1034. case "bcc":
  1035. process_edit_return(bcc('edit', array_merge(array('id' => $items), $attr)));
  1036. break;
  1037. case "oauth2-client":
  1038. process_edit_return(oauth2('edit', 'client', array_merge(array('id' => $items), $attr)));
  1039. break;
  1040. case "recipient_map":
  1041. process_edit_return(recipient_map('edit', array_merge(array('id' => $items), $attr)));
  1042. break;
  1043. case "alias":
  1044. process_edit_return(mailbox('edit', 'alias', array_merge(array('address' => $items), $attr)));
  1045. break;
  1046. case "app_links":
  1047. process_edit_return(customize('edit', 'app_links', $attr));
  1048. break;
  1049. case "relayhost":
  1050. process_edit_return(relayhost('edit', array_merge(array('id' => $items), $attr)));
  1051. break;
  1052. case "rsetting":
  1053. process_edit_return(rsettings('edit', array_merge(array('id' => $items), $attr)));
  1054. break;
  1055. case "delimiter_action":
  1056. process_edit_return(mailbox('edit', 'delimiter_action', array_merge(array('username' => $items), $attr)));
  1057. break;
  1058. case "tls_policy":
  1059. process_edit_return(mailbox('edit', 'tls_policy', array_merge(array('username' => $items), $attr)));
  1060. break;
  1061. case "qitem":
  1062. process_edit_return(quarantine('edit', array_merge(array('id' => $items), $attr)));
  1063. break;
  1064. case "quarantine":
  1065. process_edit_return(quarantine('edit', $attr));
  1066. break;
  1067. case "time_limited_alias":
  1068. process_edit_return(mailbox('edit', 'time_limited_alias', array_merge(array('address' => $items), $attr)));
  1069. break;
  1070. case "mailbox":
  1071. process_edit_return(mailbox('edit', 'mailbox', array_merge(array('username' => $items), $attr)));
  1072. break;
  1073. case "syncjob":
  1074. process_edit_return(mailbox('edit', 'syncjob', array_merge(array('id' => $items), $attr)));
  1075. break;
  1076. case "filter":
  1077. process_edit_return(mailbox('edit', 'filter', array_merge(array('id' => $items), $attr)));
  1078. break;
  1079. case "resource":
  1080. process_edit_return(mailbox('edit', 'resource', array_merge(array('name' => $items), $attr)));
  1081. break;
  1082. case "domain":
  1083. process_edit_return(mailbox('edit', 'domain', array_merge(array('domain' => $items), $attr)));
  1084. break;
  1085. case "ratelimit":
  1086. process_edit_return(mailbox('edit', 'ratelimit', array_merge(array('object' => $items), $attr)));
  1087. break;
  1088. case "alias-domain":
  1089. process_edit_return(mailbox('edit', 'alias_domain', array_merge(array('alias_domain' => $items), $attr)));
  1090. break;
  1091. case "spam-score":
  1092. process_edit_return(mailbox('edit', 'spam_score', array_merge(array('username' => $items), $attr)));
  1093. break;
  1094. case "domain-admin":
  1095. process_edit_return(domain_admin('edit', array_merge(array('username' => $items), $attr)));
  1096. break;
  1097. case "fwdhost":
  1098. process_edit_return(fwdhost('edit', array_merge(array('fwdhost' => $items), $attr)));
  1099. break;
  1100. case "fail2ban":
  1101. process_edit_return(fail2ban('edit', $attr));
  1102. break;
  1103. case "ui_texts":
  1104. process_edit_return(customize('edit', 'ui_texts', $attr));
  1105. break;
  1106. case "self":
  1107. if ($_SESSION['mailcow_cc_role'] == "domainadmin") {
  1108. process_edit_return(domain_admin('edit', $attr));
  1109. }
  1110. elseif ($_SESSION['mailcow_cc_role'] == "user") {
  1111. process_edit_return(edit_user_account($attr));
  1112. }
  1113. elseif ($_SESSION['mailcow_cc_role'] == "admin") {
  1114. process_edit_return(edit_admin_account($attr));
  1115. }
  1116. break;
  1117. }
  1118. break;
  1119. }
  1120. }
  1121. }