pfSense

<?php

	diag_backup.php

	All rights reserved.

	All rights reserved.

	modification, are permitted provided that the following conditions are met:

	   this list of conditions and the following disclaimer.

	   notice, this list of conditions and the following disclaimer in the

	   documentation and/or other materials provided with the distribution.

	INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY

	AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE

	AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,

	OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF

	SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS

	INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN

	CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)

	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE

	POSSIBILITY OF SUCH DAMAGE.

*/

##|*IDENT=page-diagnostics-backup/restore

##|*NAME=Diagnostics: Backup/restore page

##|*DESCR=Allow access to the 'Diagnostics: Backup/restore' page.

##|*MATCH=diag_backup.php*

##|-PRIV

ini_set('max_execution_time', '3600');

ini_set('max_input_time', '3600');

$omit_nocacheheaders = true;

	return preg_replace('/[^a-z|_|0-9]/i','',$string);

}

	global $config;

	if(is_array($config[$section]))

		return true;

	return false;

}

				   "dnsmasq" => "DNS Forwarder",				

				   "dhcpd" => "DHCP Server",

				   "ovpn" => "OpenVPN",

				   "cron" => "Scheduled Tasks",				

				   "system" => "System",

				   "sysctl" => "System tunables",

				   "snmpd" => "SNMP Server",

				   "shaper" => "Traffic Shaper",

				   "vlans" => "VLANS",

				   "wol" => "Wake on LAN"

		foreach($areas as $area => $areaname)

			$select .= "<option value='{$area}'>{$areaname}</option>\n";

		foreach($areas as $area => $areaname)

			if(check_and_returnif_section_exists($area) == true)

				$select .= "<option value='{$area}'>{$areaname}</option>\n";

	$select .= "</select>\n";

}

	unset($input_errors);

		$mode = "reinstallpackages";

		$mode = "download";

		$mode = "restore_ver";

		$ver2restore = $_POST["ver"];

			if ($_POST['encrypt']) {

				if(!$_POST['encrypt_password'] || !$_POST['encrypt_passconf'])

					$input_errors[] = "You must supply and confirm the password for encryption.";

				if($_POST['encrypt_password'] != $_POST['encrypt_passconf'])

					$input_errors[] = "The supplied 'Password' and 'Confirm' field values must match.";

			if (!$input_errors) {

				config_lock();

				$host = "{$config['system']['hostname']}.{$config['system']['domain']}";

				$name = "config-{$host}-".date("YmdHis").".xml";

				$data = "";

				if($options == "nopackages") {

					$sfn = "/tmp/config.xml.nopkg";

					exec("sed '/<installedpackages>/,/<\/installedpackages>/d' /conf/config.xml > {$sfn}");

					$data = file_get_contents($sfn);

				} else {

					if(!$_POST['backuparea']) {

						/* backup entire configuration */

						$data = file_get_contents("{$g['conf_path']}/config.xml");

					} else {

						/* backup specific area of configuration */

						$data = backup_config_section($_POST['backuparea']);

						$name = "{$_POST['backuparea']}-{$name}";

					}

				if ($_POST['encrypt']) {

					$data = encrypt_data($data, $_POST['encrypt_password']);

					tagfile_reformat($data, $data, "config.xml");

				 *  Backup RRD Data

				 */

				if(!$_POST['donotbackuprrd']) {

					$data = str_replace("</pfsense>", "\t<rrddata>", $data);

					$rrd_files_var_db_rrd = split("\n",`cd /var/db/rrd && ls *.rrd`);

					foreach($rrd_files_var_db_rrd as $rrd) {

						if($rrd) {

							$rrd_data = file_get_contents("{$g['vardb_path']}/rrd/{$rrd}");

							if($rrd_data) {

								$data .= "\t\t<rrddatafile>\n";

								$data .= "\t\t\t<filename>{$rrd}</filename>\n";

								$data .= "\t\t\t<data>" . base64_encode($rrd_data) . "</data>\n";

								$data .= "\t\t</rrddatafile>\n";

							}

						}

					}

					$data .= "\t</rrddata>\n";

					$data .= "</pfsense>\n";

				}

				header("Content-Type: application/octet-stream");

				header("Content-Disposition: attachment; filename={$name}");

				header("Content-Length: $size");

				echo $data;

				config_unlock();

				exit;

			}

		}

		if ($mode == "restore") {

			if ($_POST['decrypt']) {

				if(!$_POST['decrypt_password'] || !$_POST['decrypt_passconf'])

					$input_errors[] = "You must supply and confirm the password for decryption.";

				if($_POST['decrypt_password'] != $_POST['decrypt_passconf'])

					$input_errors[] = "The supplied 'Password' and 'Confirm' field values must match.";

			}

			if (!$input_errors) {

				if (is_uploaded_file($_FILES['conffile']['tmp_name'])) {

					/* read the file contents */

					$data = file_get_contents($_FILES['conffile']['tmp_name']);

					if(!$data) {

						log_error("Warning, could not read file " . $_FILES['conffile']['tmp_name']);

						return 1;

					if ($_POST['decrypt']) {

						if (!tagfile_deformat($data, $data, "config.xml")) {

							$input_errors[] = "The uploaded file does not appear to contain an encrypted pfsense configuration.";

							return 1;

						}

						$data = decrypt_data($data, $_POST['decrypt_password']);

					}

					if(stristr($data, "m0n0wall")) {

						log_error("Upgrading m0n0wall configuration to pfsense.");

						/* m0n0wall was found in config.  convert it. */

						$data = str_replace("m0n0wall", "pfsense", $data);

						$m0n0wall_upgrade = true;

					}

					if($_POST['restorearea']) {

						/* restore a specific area of the configuration */

						if(!stristr($data, $_POST['restorearea'])) {

							$input_errors[] = "You have selected to restore a area but we could not locate the correct xml tag.";

						} else {

							restore_config_section($_POST['restorearea'], $data);

							filter_configure();

							$savemsg = "The configuration area has been restored.  You may need to reboot the firewall.";

						}

							$input_errors[] = "You have selected to restore the full configuration but we could not locate a pfsense tag.";

						} else {

							/* restore the entire configuration */

							file_put_contents($_FILES['conffile']['tmp_name'], $data);

							if (config_install($_FILES['conffile']['tmp_name']) == 0) {

								/* this will be picked up by /index.php */

								conf_mount_rw();

								if($g['platform'] <> "cdrom")

									touch("/needs_package_sync");

								/* remove cache, we will force a config reboot */

								if(file_exists("/tmp/config.cache"))

									unlink("/tmp/config.cache");

								$config = parse_config(true);

								if($config['rrddata']) {

									foreach($config['rrddata']['rrddatafile'] as $rrd) {

										$rrd_fd = fopen("{$g['vardb_path']}/rrd/{$rrd['filename']}", "w");

									}

									unlink_if_exists("/tmp/config.cache");

									write_config();

									conf_mount_ro();

									if($config['system']['gateway'] <> "")

										$config['interfaces']['wan']['gateway'] = $config['system']['gateway'];

									unset($config['shaper']);

									/* optional if list */

									$ifdescrs = get_configured_interface_list(true, true);

									/* remove special characters from interface descriptions */

									if(is_array($ifdescrs))

										foreach($ifdescrs as $iface)

											$config['interfaces'][$iface]['descr'] = remove_bad_chars($config['interfaces'][$iface]['descr']);

									unlink_if_exists("/tmp/config.cache");

									write_config();

									conf_mount_ro();

									$savemsg = "The m0n0wall configuration has been restored and upgraded to pfSense.<p>The firewall is now rebooting.";

									$reboot_needed = true;

								}

								if(isset($config['captiveportal']['enable'])) {

									/* for some reason ipfw doesn't init correctly except on bootup sequence */

									$savemsg = "The configuration has been restored.<p>The firewall is now rebooting.";

									$reboot_needed = true;

								}

								setup_serial_port();

								if(is_interface_mismatch() == true) {

									touch("/var/run/interface_mismatch_reboot_needed");

									$reboot_needed = false;

									header("Location: interfaces_assign.php");

							} else {

								$input_errors[] = "The configuration could not be restored.";

					$input_errors[] = "The configuration could not be restored (file upload error).";

		if ($mode == "reinstallpackages") {

			exit;

			$input_errors[] = "XXX - this feature may hose your config (do NOT backrev configs!) - billm";

			if ($ver2restore <> "") {

				$conf_file = "{$g['cf_conf_path']}/bak/config-" . strtotime($ver2restore) . ".xml";

                                if (config_install($conf_file) == 0) {

                                    $savemsg = "The configuration has been restored. The firewall is now rebooting.";

                        } else {

                                $input_errors[] = "No version selected.";

                        }

	}

}

$mth = ini_get('upload_progress_meter.store_method');

$dir = ini_get('upload_progress_meter.file.filename_template');

<body link="#0000CC" vlink="#0000CC" alink="#0000CC">

<?php include("fbegin.inc"); ?>

<!--

function encrypt_change() {

	if (!document.iform.encrypt.checked)

		document.getElementById("encrypt_opts").style.display="none";

	else

		document.getElementById("encrypt_opts").style.display="";

}

function decrypt_change() {

	if (!document.iform.decrypt.checked)

		document.getElementById("decrypt_opts").style.display="none";

	else

		document.getElementById("decrypt_opts").style.display="";

}

//-->

</script>

<form action="diag_backup.php" method="post" name="iform" enctype="multipart/form-data">

<?php if ($savemsg) print_info_box($savemsg); ?>

<table width="100%" border="0" cellspacing="0" cellpadding="0">

	<tr>

		<td>

		$tab_array[1] = array("Backup/Restore", true, "diag_backup.php");

	</tr>

	<tr>

		<td>

			<div id="mainarea">

			<table class="tabcont" align="center" width="100%" border="0" cellpadding="6" cellspacing="0">

				<tr>

					<td colspan="2" class="listtopic">Backup configuration</td>

				</tr>

				<tr>

					<td width="22%" valign="baseline" class="vncell">&nbsp;</td>

					<td width="78%" class="vtable">

							<tr>

								<td>

									<input name="nopackages" type="checkbox" class="formcheckbox" id="nopackages">

								</td>

								<td>

									<span class="vexpl">Do not backup package information.</span>

								</td>

							</tr>

						</table>

						<table>

							<tr>

								<td>

									<input name="encrypt" type="checkbox" class="formcheckbox" id="nopackages" onClick="encrypt_change()">

								</td>

								<td>

									<span class="vexpl">Encrypt this configuration file.</span>

								</td>

							</tr>

								<td>

									<input name="donotbackuprrd" type="checkbox" class="formcheckbox" id="dotnotbackuprrd">

								</td>

								<td>

									<span class="vexpl">Do not backup RRD data (NOTE: RRD Data can consume 4+ megabytes of config.xml space!)</span>

								</td>

							</tr>

						<table id="encrypt_opts">

							<tr>

								<td>

									<span class="vexpl">Password :</span>

								</td>

								<td>

									<input name="encrypt_password" type="password" class="formfld pwd" size="20" value="" />

								</td>

							</tr>

							<tr>

								<td>

									<span class="vexpl">confirm :</span>

								</td>

								<td>

									<input name="encrypt_passconf" type="password" class="formfld pwd" size="20" value="" />

								</td>

							</tr>

						</table>

					</td>

				</tr>

				<tr>

					<td colspan="2" class="list" height="12">&nbsp;</td>

				</tr>

				<tr>

					<td width="22%" valign="baseline" class="vncell">&nbsp;</td>

					<td width="78%" class="vtable">

							<tr>

								<td>

									<input name="decrypt" type="checkbox" class="formcheckbox" id="nopackages" onClick="decrypt_change()">

								</td>

								<td>

									<span class="vexpl">Configuration file is encrypted.</span>

								</td>

							</tr>

						</table>

						<table id="decrypt_opts">

							<tr>

								<td>

									<span class="vexpl">Password :</span>

								</td>

								<td>

									<input name="decrypt_password" type="password" class="formfld pwd" size="20" value="" />

								</td>

							</tr>

							<tr>

								<td>

									<span class="vexpl">confirm :</span>

								</td>

								<td>

									<input name="decrypt_passconf" type="password" class="formfld pwd" size="20" value="" />

								</td>

							</tr>

						</table>

				</tr>

				<?php if($config['installedpackages']['package'] != "") { ?>

				<tr>

					<td colspan="2" class="list" height="12">&nbsp;</td>

				</tr>

				<tr>

					<td colspan="2" class="listtopic">Reinstall packages</td>

				</tr>

				<tr>

					<td width="22%" valign="baseline" class="vncell">&nbsp;</td>

					<td width="78%" class="vtable">

						<p>Click this button to reinstall all system packages.  This may take a while. <br /><br />

		  				<input name="Submit" type="submit" class="formbtn" id="reinstallpackages" value="Reinstall packages">

					</td>

				</tr>

				<?php } ?>

			</table>

			</div>

</table>

</form>

<!--

encrypt_change();

decrypt_change();

//-->

</script>

</body>

<?php

	flush();

	sleep(5);

	while(file_exists("{$g['varrun_path']}/config.lock"))

		sleep(3);

	mwexec("/sbin/shutdown -r now");

}