utilitiesrcontool.php

<?php
/* vim: set expandtab tabstop=4 shiftwidth=4 softtabstop=4: */

/**
 * LICENSE:
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 *
 *
 * @categories	Games/Entertainment, Systems Administration
 * @package		Bright Game Panel
 * @author		warhawk3407 <warhawk3407@gmail.com> @NOSPAM
 * @copyleft	2013
 * @license		GNU General Public License version 3.0 (GPLv3)
 * @version		(Release 0) DEVELOPER BETA 5
 * @link		http://www.bgpanel.net/
 */




$page = 'utilitiesrcontool';
$tab = 4;
$return = 'utilitiesrcontool.php';

require("configuration.php");
require("include.php");

$title = T_('RCON Tool');

//---------------------------------------------------------+

if (isset($_GET['serverid']) && is_numeric($_GET['serverid']))
{
	if (query_numrows( "SELECT `name` FROM `".DBPREFIX."server` WHERE `serverid` = '".$_GET['serverid']."'" ) == 0)
	{
		exit('Error: Server is invalid.');
	}
	else
	{
		$serverid = $_GET['serverid'];
		$step = 'rcon';
	}
}
else
{
	$step = 'selectserver';
}

//---------------------------------------------------------+


switch ($step)
{

//------------------------------------------------------------------------------------------------------------+



	case 'selectserver':


		include("./bootstrap/header.php");


		/**
		 * Notifications
		 */
		if (isset($_SESSION['msg1']) && isset($_SESSION['msg2']) && isset($_SESSION['msg-type']))
		{
?>
			<div class="alert alert-<?php
			switch ($_SESSION['msg-type'])
			{
				case 'block':
					echo 'block';
					break;

				case 'error':
					echo 'error';
					break;

				case 'success':
					echo 'success';
					break;

				case 'info':
					echo 'info';
					break;
			}
?>">
				<a class="close" data-dismiss="alert">&times;</a>
				<h4 class="alert-heading"><?php echo $_SESSION['msg1']; ?></h4>
				<?php echo $_SESSION['msg2']; ?>
			</div>
<?php
			unset($_SESSION['msg1']);
			unset($_SESSION['msg2']);
			unset($_SESSION['msg-type']);
		}
		/**
		 *
		 */


		$groups = getClientGroups($_SESSION['clientid']);

		if ($groups != FALSE)
		{
			foreach($groups as $value)
			{
				if (getGroupServers($value) != FALSE)
				{
					$groupServers[] = getGroupServers($value); // Multi- dimensional array
				}
			}
		}

		// Build NEW single dimention array
		if (!empty($groupServers))
		{
			foreach($groupServers as $key => $value)
			{
				foreach($value as $subkey => $subvalue)
				{
					$servers[] = $subvalue;
				}
			}
			unset($groupServers);
		}

?>
			<div class="well">
<?php
		if (!empty($servers))
		{
?>
				<form method="get" action="utilitiesrcontool.php">
					<label><?php echo T_('Available servers for RCON :'); ?></label>
						<select name="serverid">
<?php
			foreach($servers as $key => $value)
			{
				if ( ($value['status'] == 'Active') && ($value['panelstatus'] == 'Started') )
				{
?>
							<option value="<?php echo $value['serverid']; ?>">#<?php echo $value['serverid']; ?> - <?php echo htmlspecialchars($value['name'], ENT_QUOTES); ?></option>
<?php
				}
			}
			unset($servers);
?>
						</select>
					<div style="text-align: center; margin-top: 19px;">
						<button type="submit" class="btn btn-primary btn-large"><?php echo T_('RCON Console'); ?></button>
					</div>
				</form>
<?php
		}
?>
				<div style="text-align: center; margin-top: 19px;">
					<ul class="pager">
						<li>
							<a href="index.php"><?php echo T_('Back to Home'); ?></a>
						</li>
					</ul>
				</div>
			</div>
<?php
		break;



//------------------------------------------------------------------------------------------------------------+



	case 'rcon':
		require_once("./libs/phpseclib/SSH2.php");
		require_once("./libs/phpseclib/Crypt/AES.php");
		###
		$error = '';
		###
		if (empty($serverid))
		{
			$error .= T_('No ServerID specified for server validation !');
		}
		else
		{
			if (!is_numeric($serverid))
			{
				$error .= T_('Invalid ServerID. ');
			}
			else if (query_numrows( "SELECT `name` FROM `".DBPREFIX."server` WHERE `serverid` = '".$serverid."'" ) == 0)
			{
				$error .= T_('Invalid ServerID. ');
			}
		}
		###
		if (!empty($error))
		{
			$_SESSION['msg1'] = T_('Validation Error!');
			$_SESSION['msg2'] = $error;
			$_SESSION['msg-type'] = 'error';
			unset($error);
			header( 'Location: index.php' );
			die();
		}
		###
		$panelstatus = query_fetch_assoc( "SELECT `panelstatus` FROM `".DBPREFIX."server` WHERE `serverid` = '".$serverid."' LIMIT 1" );
		if ($panelstatus['panelstatus'] != 'Started')
		{
			$_SESSION['msg1'] = T_('Validation Error!');
			$_SESSION['msg2'] = T_('The server is not running!');
			$_SESSION['msg-type'] = 'error';
			header( 'Location: index.php' );
			die();
		}
		###
		$status = query_fetch_assoc( "SELECT `status` FROM `".DBPREFIX."server` WHERE `serverid` = '".$serverid."' LIMIT 1" );
		if ($status['status'] != 'Active')
		{
			$_SESSION['msg1'] = T_('Validation Error!');
			$_SESSION['msg2'] = T_('The server is disabled or pending!');
			$_SESSION['msg-type'] = 'error';
			header( 'Location: index.php' );
			die();
		}
		else
		{
			$server = query_fetch_assoc( "SELECT * FROM `".DBPREFIX."server` WHERE `serverid` = '".$serverid."' LIMIT 1" );
			$box = query_fetch_assoc( "SELECT `ip`, `login`, `password`, `sshport` FROM `".DBPREFIX."box` WHERE `boxid` = '".$server['boxid']."' LIMIT 1" );
			###
			// Rights
			$checkGroup = checkClientGroup($server['groupid'], $_SESSION['clientid']);
			if ($checkGroup == FALSE)
			{
				$_SESSION['msg1'] = T_('Error!');
				$_SESSION['msg2'] = T_('This is not your server!');
				$_SESSION['msg-type'] = 'error';
				header( 'Location: index.php' );
				die();
			}
			###
			$ssh = new Net_SSH2($box['ip'].':'.$box['sshport']);
			$aes = new Crypt_AES();
			$aes->setKeyLength(256);
			$aes->setKey(CRYPT_KEY);
			if (!$ssh->login($box['login'], $aes->decrypt($box['password'])))
			{
				$_SESSION['msg1'] = T_('Connection Error!');
				$_SESSION['msg2'] = T_('Unable to connect to box with SSH.');
				$_SESSION['msg-type'] = 'error';
				header( 'Location: index.php' );
				die();
			}

			if (!empty($_GET['cmd']))
			{
				$cmdRcon = $_GET['cmd'];

				//We retrieve the content of the screen
				$cmd = "cd ".$server['homedir']."; cat screenlog.0";
				$outputScreenContent = $ssh->exec($cmd."\n");
				unset($cmd);

				//We retrieve screen name ($session)
				$output = $ssh->exec("screen -ls | grep ".$server['screen']."\n");
				$output = trim($output);
				$session = explode("\t", $output);
				unset($output);

				//We prepare and we send the command into the screen
				$cmd = "screen -S ".$session[0]." -p 0 -X stuff \"".$cmdRcon."\"`echo -ne '\015'`";
				$ssh->exec($cmd."\n");
				unset($cmd);

				//Adding event to the database
				$message = 'RCON command ('.mysql_real_escape_string($cmdRcon).') sent to : '.mysql_real_escape_string($server['name']);
				query_basic( "INSERT INTO `".DBPREFIX."log` SET `serverid` = '".$serverid."', `message` = '".$message."', `name` = '".mysql_real_escape_string($_SESSION['clientusername'])."', `ip` = '".$_SERVER['REMOTE_ADDR']."'" );
				unset($cmdRcon);

				// Check if the output has been updated

				$cmd = "cd ".$server['homedir']."; cat screenlog.0";
				$i = 0; //Security counter

				$updated = FALSE;

				while ($updated != TRUE)
				{
					$output = $ssh->exec($cmd."\n");
					###
					if ((md5($output) != md5($outputScreenContent)) || ($i == 20))
					{
						$outputScreenContent = $output;
						$updated = TRUE;
					}
					###
					sleep(1);
					$i++;
				}

				unset($output, $updated, $cmd);

				header( 'Location: utilitiesrcontool.php?serverid='.urlencode($serverid) );
				die();
			}

			//We retrieve the content of the screen
			$cmd = "cd ".$server['homedir']."; cat screenlog.0";
			$outputScreenContent = $ssh->exec($cmd."\n");
			unset($cmd);
		}


		include("./bootstrap/header.php");


		/**
		 * Notifications
		 */
		if (isset($_SESSION['msg1']) && isset($_SESSION['msg2']) && isset($_SESSION['msg-type']))
		{
?>
			<div class="alert alert-<?php
			switch ($_SESSION['msg-type'])
			{
				case 'block':
					echo 'block';
					break;

				case 'error':
					echo 'error';
					break;

				case 'success':
					echo 'success';
					break;

				case 'info':
					echo 'info';
					break;
			}
?>">
				<a class="close" data-dismiss="alert">&times;</a>
				<h4 class="alert-heading"><?php echo $_SESSION['msg1']; ?></h4>
				<?php echo $_SESSION['msg2']; ?>
			</div>
<?php
			unset($_SESSION['msg1']);
			unset($_SESSION['msg2']);
			unset($_SESSION['msg-type']);
		}
		/**
		 *
		 */


?>
			<script type="text/javascript">
			$(document).ready(function() {
				prettyPrint();
			});
			</script>
			<div class="page-header">
				<h1><small><?php echo htmlspecialchars($server['name'], ENT_QUOTES); ?></small></h1>
			</div>
<pre class="prettyprint">
<?php

		//We will output the last 25 rows

		$rows = $outputScreenContent;
		unset($outputScreenContent);

		//Each lines are a value of rowsTable
		$rowsTable = explode("\r\n", $rows);

		//Count number of lines of rowsTable
		$n = count($rowsTable);

		$x = $n - 25; //Number of lines to delete

		$rowsTable = array_splice($rowsTable, $x, $n);
		unset($x, $n);

		//Output
		foreach ($rowsTable as $key => $value)
		{
			echo htmlentities($value, ENT_QUOTES)."\r\n";
		}

?>
</pre>
				<div class="modal hide fade" id="console">
					<div class="modal-header">
						<button type="button" class="close" data-dismiss="modal" aria-hidden="true">&times;</button>
						<h3><?php echo T_('BrightGamePanel RCON Tool'); ?></h3>
					</div>
					<div class="modal-body">
						<p>
							<div class="page-header">
								<h1>
									<small>
									<?php echo T_('Target:'); ?> <?php echo htmlspecialchars($server['name'], ENT_QUOTES); ?><br />
									<?php echo T_('Box:'); ?> <?php echo $box['ip'].':'.$box['sshport']."\r\n"; ?>
									</small>
								</h1>
							</div><br />
							<form class="well form-inline" method="get" action="utilitiesrcontool.php">
								<label><?php echo T_('RCON Command:'); ?></label>
								<input type="hidden" name="serverid" value="<?php echo $server['serverid']; ?>" />
								<input type="text" name="cmd" class="input-xlarge" placeholder="Your RCON Command">
								<button type="submit" class="btn"><?php echo T_('Send'); ?></button>
							</form>
						</p>
					</div>
					<div class="modal-footer">
						<a href="#" data-dismiss="modal" aria-hidden="true" class="btn btn-primary"><?php echo T_('Close'); ?></a>
					</div>
				</div>
				<div style="text-align: center;">
					<a class="btn btn-primary btn-large" data-toggle="modal" href="#console"><?php echo T_('Send RCON Command'); ?></a>
					<button class="btn btn-large" onclick="window.location.reload();"><?php echo T_('Refresh'); ?></button>
				</div>
				<div style="text-align: center; margin-top: 19px;">
					<ul class="pager">
						<li>
							<a href="utilitiesrcontool.php"><?php echo T_('Back to RCON Tool Servers List'); ?></a>
							<a href="server.php?id=<?php echo $serverid; ?>"><?php echo T_('Go to Server Summary'); ?></a>
						</li>
					</ul>
				</div>
<?php
		break;



//------------------------------------------------------------------------------------------------------------+

}


include("./bootstrap/footer.php");
?>