pfSense

/* $Id$ */

/*

	system_firmware.php

	Copyright (C) 2008 Scott Ullrich <sullrich@gmail.com>

	originally part of m0n0wall (http://m0n0.ch/wall)

	Copyright (C) 2003-2004 Manuel Kasper <mk@neon1.net>.

*/

/*

##|+PRIV

$d_isfwfile = 1;

$nocsrf = true;

require_once("globals.inc");

require_once("functions.inc");

require_once("guiconfig.inc");

$kerneltypes = array(

	'SMP' => gettext("Standard Kernel"),

);

require_once("xmlrpc_client.inc");

/* Allow additional execution time 0 = no limit. */

ini_set('max_execution_time', '9999');

function file_is_for_platform($filename, $ul_name) {

	global $g;

	if($g['platform'] == "nanobsd") {

		if(stristr($ul_name, "nanobsd"))

			return true;

	exec("/usr/bin/tar xzf $filename -C /tmp/ etc/platform");

	if(!file_exists("/tmp/etc/platform")) 

	if($g['platform'] == $upgrade_is_for_platform) {

		unlink("/tmp/etc/platform");

		return true;

function file_upload_error_message($error_code) {

            return gettext('The uploaded file exceeds the upload_max_filesize directive in php.ini');

        case UPLOAD_ERR_FORM_SIZE:

            return gettext('The uploaded file exceeds the MAX_FILE_SIZE directive that was specified in the HTML form');

        case UPLOAD_ERR_PARTIAL:

            return gettext('The uploaded file was only partially uploaded');

        case UPLOAD_ERR_NO_FILE:

            return gettext('No file was uploaded');

        case UPLOAD_ERR_NO_TMP_DIR:

            return gettext('Missing a temporary folder');

        case UPLOAD_ERR_CANT_WRITE:

            return gettext('Failed to write file to disk');

        case UPLOAD_ERR_EXTENSION:

            return gettext('File upload stopped by extension');

        default:

            return gettext('Unknown upload error');

    }

/* if upgrade in progress, alert user */

if(is_subsystem_dirty('firmwarelock')) {

	$pgtitle = array(gettext("System"),gettext("Firmware"),gettext("Manual Update"));

	include("head.inc");

	print_info_box(gettext("An upgrade is currently in progress.<p>The firewall will reboot when the operation is complete.") . "<p><img src='/themes/{$g['theme']}/images/icons/icon_fw-update.gif'>");

	echo "</div>\n";

if($_POST['backupbeforeupgrade']) 

if($_POST['kerneltype'] && in_array($_POST['kerneltype'], array_keys($kerneltypes))) {

	if($_POST['kerneltype'] == "single") 

		touch("/boot/kernel/pfsense_kernel.txt");

	else 

		file_put_contents("/boot/kernel/pfsense_kernel.txt", $_POST['kerneltype']);

}

/* Handle manual upgrade */

if ($_POST && !is_subsystem_dirty('firmwarelock')) {

	unset($input_errors);

	if (stristr($_POST['Submit'], gettext("Enable")))

		$mode = "enable";

	else if (stristr($_POST['Submit'], gettext("Disable")))

		$mode = "disable";

	else if (stristr($_POST['Submit'], gettext("Upgrade")) || $_POST['sig_override'])

		$mode = "upgrade";

		if(file_exists("{$g['upload_path']}/firmware.tgz"))

	}

			conf_mount_rw();

			mark_subsystem_dirty('firmware');

		} else if ($mode == "disable") {

			conf_mount_ro();

			clear_subsystem_dirty('firmware');

		} else if ($mode == "upgrade") {

			if ($_FILES['ulfile']['error'])

			if (is_uploaded_file($_FILES['ulfile']['tmp_name'])) {

				if (file_is_for_platform($_FILES['ulfile']['tmp_name'], $_FILES['ulfile']['name']) == false && !$_POST['sig_override'])

					$input_errors[] = gettext("The uploaded image file is not for this platform.");

				else if (!file_exists($_FILES['ulfile']['tmp_name'])) {

					$input_errors[] = gettext("Image upload failed (out of memory?)");

					mwexec("/etc/rc.firmware disable");

					clear_subsystem_dirty('firmware');

				} else {

					rename($_FILES['ulfile']['tmp_name'], "{$g['upload_path']}/firmware.tgz");

					$sigchk = verify_digital_signature("{$g['upload_path']}/firmware.tgz");

						$sig_warning = gettext("The digital signature on this image is invalid.");

					else if ($sigchk == 2 && !isset($config['system']['firmware']['allowinvalidsig']))

						$sig_warning = gettext("This image is not digitally signed.");

					else if (($sigchk >= 3))

						$sig_warning = gettext("There has been an error verifying the signature on this image.");

					if (!verify_gzip_file("{$g['upload_path']}/firmware.tgz")) {

						$input_errors[] = gettext("The image file is corrupt.");

						unlink("{$g['upload_path']}/firmware.tgz");

					}

			run_plugins("/usr/local/pkg/firmware_upgrade");

            /* Check for input errors, firmware locks, warnings, then check for firmware if sig_override is set */

            if (!$input_errors && !is_subsystem_dirty('firmwarelock') && (!$sig_warning || $_POST['sig_override'])) {

                    if (file_exists("{$g['upload_path']}/firmware.tgz")) {

							mark_subsystem_dirty('firmwarelock');

                            $savemsg = gettext("The firmware is now being updated. The firewall will reboot automatically.");

							if(stristr($_FILES['ulfile']['name'],"nanobsd") or $_POST['isnano'] == "yes")

								mwexec_bg("/etc/rc.firmware pfSenseNanoBSDupgrade {$g['upload_path']}/firmware.tgz");

							else if(stristr($_FILES['ulfile']['name'],"bdiff"))

                            	mwexec_bg("/etc/rc.firmware delta_update {$g['upload_path']}/firmware.tgz");

                    } else {

                            $savemsg = sprintf(gettext("Firmware image missing or other error, please try again %s."),$errortext);

                    }

		}

}

$pgtitle = array(gettext("System"),gettext("Firmware"));

include("head.inc");

?>

<body link="#0000CC" vlink="#0000CC" alink="#0000CC">	

<form action="system_firmware.php" method="post" enctype="multipart/form-data">

	if (!session_id())

?>

<?php include("fbegin.inc"); ?>

<?php if ($savemsg) print_info_box($savemsg); ?>

<?php if ($fwinfo <> "") print_info_box($fwinfo); ?>

<?php if ($sig_warning && !$input_errors): ?>

<?php

	$sig_warning = "<strong>" . $sig_warning . "</strong><br>" . gettext("This means that the image you uploaded " .

		"is not an official/supported image and may lead to unexpected behavior or security " .

		"that the image has not been tampered with.") . "<br><br>".

print_info_box($sig_warning);

if(stristr($_FILES['ulfile']['name'],"nanobsd"))

?>

<input name="sig_override" type="submit" class="formbtn" id="sig_override" value=" <?=gettext("Yes");?> ">

<?php else: ?>

<?php if (!is_subsystem_dirty('firmwarelock')): ?>

	<table width="100%" border="0" cellpadding="0" cellspacing="0">

		<tr>

<?php

	$tab_array[] = array(gettext("Manual Update"), true, "system_firmware.php");

	display_top_tabs($tab_array);

			</td>

		</tr>

		<tr>

						<td colspan="2" class="listtopic"><?=gettext("Invoke") ." ". $g['product_name'] ." ".  gettext("Manual Upgrade"); ?></td>

					</tr>

						<?php if (!is_subsystem_dirty('rebootreq')): ?>

						<input name="Submit" type="submit" class="formbtn" value="<?=gettext("Enable firmware upload");?>">

							<?php printf(gettext('Click "Enable firmware upload" to begin.'),$g['firmware_update_text']);?>

						<br/>

						<?php else: ?>

				  			<input name="Submit" type="submit" class="formbtn" value="<?=gettext("Disable firmware upload");?>">

					</td>

							<input name="ulfile" type="file" class="formfld">

							<br>

							<?php

										echo gettext("Please select kernel type") , ": ";

										echo "<select name='kerneltype'>";

										foreach($kerneltypes as $kerntype => $kerndescr) {

										echo "</select>";

										echo "<br>";

									}

							<input type="checkbox" name='backupbeforeupgrade' id='backupbeforeupgrade'> <?=gettext("Perform full backup prior to upgrade");?>

							<br>

							<input name="Submit" type="submit" class="formbtn" value="<?=gettext("Upgrade firmware");?>">

							<?=gettext('Click "Upgrade firmware" to start the upgrade process.');?>

						<?php endif; else: ?>

							<strong><?=gettext("You must reboot the system before you can upgrade the firmware.");?></strong>

						<?php endif; ?>

				</td>

			</tr>

				<td width="78%">

						</span>

					<span class="vexpl">

						<?php endif; ?>

				</td>

			</table>

		</div>

	</tr>

</table>

<?php endif; endif; ?>

<?php include("fend.inc"); ?>