Project

General

Profile

Download (11.9 KB) Statistics
| Branch: | Tag: | Revision:
1 4668f9f7 Scott Ullrich
<?php
2 b46bfcf5 Bill Marquette
/* $Id$ */
3 5b237745 Scott Ullrich
/*
4 580182e2 Colin Smith
	system_firmware.php
5 1cecfbf7 Scott Ullrich
	Copyright (C) 2008 Scott Ullrich <sullrich@gmail.com>
6
	All rights reserved.
7 580182e2 Colin Smith
8 1cecfbf7 Scott Ullrich
	originally part of m0n0wall (http://m0n0.ch/wall)
9 580182e2 Colin Smith
	Copyright (C) 2003-2004 Manuel Kasper <mk@neon1.net>.
10
	All rights reserved.
11
12
	Redistribution and use in source and binary forms, with or without
13
	modification, are permitted provided that the following conditions are met:
14
15
	1. Redistributions of source code must retain the above copyright notice,
16
	   this list of conditions and the following disclaimer.
17
18
	2. Redistributions in binary form must reproduce the above copyright
19
	   notice, this list of conditions and the following disclaimer in the
20
	   documentation and/or other materials provided with the distribution.
21
22
	THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
23
	INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
24
	AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
25
	AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
26
	OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
27
	SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
28
	INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
29
	CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
30
	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
31
	POSSIBILITY OF SUCH DAMAGE.
32 5b237745 Scott Ullrich
*/
33 1d333258 Scott Ullrich
/*
34 4b805dbc Renato Botelho
	pfSense_BUILDER_BINARIES:	/usr/bin/tar
35 1d333258 Scott Ullrich
	pfSense_MODULE:	firmware
36
*/
37 5b237745 Scott Ullrich
38 6b07c15a Matthew Grooms
##|+PRIV
39
##|*IDENT=page-system-firmware-manualupdate
40
##|*NAME=System: Firmware: Manual Update page
41
##|*DESCR=Allow access to the 'System: Firmware: Manual Update' page.
42
##|*MATCH=system_firmware.php*
43
##|-PRIV
44
45 3958d63b Colin Smith
$d_isfwfile = 1;
46 7385a6b4 Scott Ullrich
$nocsrf = true;
47
48 f0394a03 Scott Ullrich
require_once("globals.inc");
49 c1605b35 Scott Ullrich
require_once("functions.inc");
50 6605faea Scott Ullrich
require_once("guiconfig.inc");
51 f03ed350 Ermal
require_once("xmlrpc_client.inc");
52 da55e467 Scott Ullrich
53
$curcfg = $config['system']['firmware'];
54
55 47d11b79 Mark Crane
/* Allow additional execution time 0 = no limit. */
56 8999038a Scott Ullrich
ini_set('max_execution_time', '9999');
57
ini_set('max_input_time', '9999');
58 0045dfd1 Scott Ullrich
59 d2d86ca3 Scott Ullrich
function file_is_for_platform($filename, $ul_name) {
60 f0394a03 Scott Ullrich
	global $g;
61 3350a691 Scott Ullrich
	if($g['platform'] == "nanobsd") {
62 d2d86ca3 Scott Ullrich
		if(stristr($ul_name, "nanobsd"))
63 7475fc0b Scott Ullrich
			return true;
64
		else
65 4b805dbc Renato Botelho
			return false;
66 7475fc0b Scott Ullrich
	}
67 e6d5af4b Ermal
	$_gb = exec("/usr/bin/tar xzf $filename -C /tmp/ etc/platform");
68
	unset($_gb);
69 4b805dbc Renato Botelho
	if(!file_exists("/tmp/etc/platform"))
70 fe38f1da Scott Ullrich
		return false;
71 e6d5af4b Ermal
	$upgrade_is_for_platform = trim(file_get_contents("/tmp/etc/platform", " \n\t\r"));
72
	if ($g['platform'] == $upgrade_is_for_platform) {
73
		@unlink("/tmp/etc/platform");
74 f0394a03 Scott Ullrich
		return true;
75
	}
76
	return false;
77
}
78
79 cdd3238d Scott Ullrich
function file_upload_error_message($error_code) {
80 4b805dbc Renato Botelho
	switch ($error_code) {
81
	case UPLOAD_ERR_INI_SIZE:
82
		return gettext('The uploaded file exceeds the upload_max_filesize directive in php.ini');
83
	case UPLOAD_ERR_FORM_SIZE:
84
		return gettext('The uploaded file exceeds the MAX_FILE_SIZE directive that was specified in the HTML form');
85
	case UPLOAD_ERR_PARTIAL:
86
		return gettext('The uploaded file was only partially uploaded');
87
	case UPLOAD_ERR_NO_FILE:
88
		return gettext('No file was uploaded');
89
	case UPLOAD_ERR_NO_TMP_DIR:
90
		return gettext('Missing a temporary folder');
91
	case UPLOAD_ERR_CANT_WRITE:
92
		return gettext('Failed to write file to disk');
93
	case UPLOAD_ERR_EXTENSION:
94
		return gettext('File upload stopped by extension');
95
	default:
96
		return gettext('Unknown upload error');
97
	}
98 cdd3238d Scott Ullrich
}
99
100 8b7c81d7 Scott Ullrich
/* if upgrade in progress, alert user */
101 a368a026 Ermal Lu?i
if(is_subsystem_dirty('firmwarelock')) {
102 1b4f376d Vinicius Coque
	$pgtitle = array(gettext("System"),gettext("Firmware"),gettext("Manual Update"));
103 8b7c81d7 Scott Ullrich
	include("head.inc");
104
	echo "<body link=\"#0000CC\" vlink=\"#0000CC\" alink=\"#0000CC\">\n";
105
	include("fbegin.inc");
106
	echo "<div>\n";
107 02559d7d Colin Fleming
	print_info_box(gettext("An upgrade is currently in progress.<p>The firewall will reboot when the operation is complete.") . "</p><p><img src='/themes/{$g['theme']}/images/icons/icon_fw-update.gif' alt='update' /></p>");
108 8b7c81d7 Scott Ullrich
	echo "</div>\n";
109
	include("fend.inc");
110
	echo "</body>";
111
	echo "</html>";
112
	exit;
113
}
114
115 4b805dbc Renato Botelho
if($_POST['backupbeforeupgrade'])
116 b2a67b55 Scott Ullrich
	touch("/tmp/perform_full_backup.txt");
117
118 aa08f46b Bill Marquette
/* Handle manual upgrade */
119 a368a026 Ermal Lu?i
if ($_POST && !is_subsystem_dirty('firmwarelock')) {
120 4b805dbc Renato Botelho
121 580182e2 Colin Smith
	unset($input_errors);
122
	unset($sig_warning);
123
124 4134b5e6 Carlos Eduardo Ramos
	if (stristr($_POST['Submit'], gettext("Enable")))
125 580182e2 Colin Smith
		$mode = "enable";
126 4134b5e6 Carlos Eduardo Ramos
	else if (stristr($_POST['Submit'], gettext("Disable")))
127 580182e2 Colin Smith
		$mode = "disable";
128 4134b5e6 Carlos Eduardo Ramos
	else if (stristr($_POST['Submit'], gettext("Upgrade")) || $_POST['sig_override'])
129 580182e2 Colin Smith
		$mode = "upgrade";
130
	else if ($_POST['sig_no']) {
131 709f48f0 Scott Ullrich
		if(file_exists("{$g['upload_path']}/firmware.tgz"))
132
				unlink("{$g['upload_path']}/firmware.tgz");
133 580182e2 Colin Smith
	}
134
	if ($mode) {
135
		if ($mode == "enable") {
136 b6f67235 Scott Ullrich
			conf_mount_rw();
137 a368a026 Ermal Lu?i
			mark_subsystem_dirty('firmware');
138 580182e2 Colin Smith
		} else if ($mode == "disable") {
139 b6f67235 Scott Ullrich
			conf_mount_ro();
140 a368a026 Ermal Lu?i
			clear_subsystem_dirty('firmware');
141 580182e2 Colin Smith
		} else if ($mode == "upgrade") {
142 cdd3238d Scott Ullrich
			if ($_FILES['ulfile']['error'])
143 4b805dbc Renato Botelho
				$errortext = "(" . file_upload_error_message($_FILES['ulfile']['error']) . ")";
144 580182e2 Colin Smith
			if (is_uploaded_file($_FILES['ulfile']['tmp_name'])) {
145
				/* verify firmware image(s) */
146 d2d86ca3 Scott Ullrich
				if (file_is_for_platform($_FILES['ulfile']['tmp_name'], $_FILES['ulfile']['name']) == false && !$_POST['sig_override'])
147 33a2693c Chris Buechler
					$input_errors[] = gettext("The uploaded image file is not for this platform.");
148 580182e2 Colin Smith
				else if (!file_exists($_FILES['ulfile']['tmp_name'])) {
149
					/* probably out of memory for the MFS */
150 1b4f376d Vinicius Coque
					$input_errors[] = gettext("Image upload failed (out of memory?)");
151 0d64af59 Ermal Lu?i
					mwexec("/etc/rc.firmware disable");
152 a368a026 Ermal Lu?i
					clear_subsystem_dirty('firmware');
153 580182e2 Colin Smith
				} else {
154
					/* move the image so PHP won't delete it */
155 1ef7b568 Scott Ullrich
					rename($_FILES['ulfile']['tmp_name'], "{$g['upload_path']}/firmware.tgz");
156 580182e2 Colin Smith
157
					/* check digital signature */
158 1ef7b568 Scott Ullrich
					$sigchk = verify_digital_signature("{$g['upload_path']}/firmware.tgz");
159 580182e2 Colin Smith
160
					if ($sigchk == 1)
161 1b4f376d Vinicius Coque
						$sig_warning = gettext("The digital signature on this image is invalid.");
162 a0116247 Ermal
					else if ($sigchk == 2 && !isset($config['system']['firmware']['allowinvalidsig']))
163 1b4f376d Vinicius Coque
						$sig_warning = gettext("This image is not digitally signed.");
164 a0116247 Ermal
					else if (($sigchk >= 3))
165 1b4f376d Vinicius Coque
						$sig_warning = gettext("There has been an error verifying the signature on this image.");
166 580182e2 Colin Smith
167 709f48f0 Scott Ullrich
					if (!verify_gzip_file("{$g['upload_path']}/firmware.tgz")) {
168 1b4f376d Vinicius Coque
						$input_errors[] = gettext("The image file is corrupt.");
169 1ef7b568 Scott Ullrich
						unlink("{$g['upload_path']}/firmware.tgz");
170 580182e2 Colin Smith
					}
171
				}
172
			}
173
174 1834f481 Scott Ullrich
			run_plugins("/usr/local/pkg/firmware_upgrade");
175
176 e6d5af4b Ermal
			/* Check for input errors, firmware locks, warnings, then check for firmware if sig_override is set */
177
			if (!$input_errors && !is_subsystem_dirty('firmwarelock') && (!$sig_warning || $_POST['sig_override'])) {
178
				if (file_exists("{$g['upload_path']}/firmware.tgz")) {
179
					/* fire up the update script in the background */
180
					mark_subsystem_dirty('firmwarelock');
181
					$savemsg = gettext("The firmware is now being updated. The firewall will reboot automatically.");
182
					if (stristr($_FILES['ulfile']['name'],"nanobsd") or $_POST['isnano'] == "yes")
183
						mwexec_bg("/etc/rc.firmware pfSenseNanoBSDupgrade {$g['upload_path']}/firmware.tgz");
184
					else if(stristr($_FILES['ulfile']['name'],"bdiff"))
185
						mwexec_bg("/etc/rc.firmware delta_update {$g['upload_path']}/firmware.tgz");
186
					else  {
187
						if($g['platform'] == "nanobsd")
188
							$whichone = "pfSenseNanoBSDupgrade";
189
						else
190
							$whichone = "pfSenseupgrade";
191
						mwexec_bg("/etc/rc.firmware {$whichone} {$g['upload_path']}/firmware.tgz");
192
						unset($whichone);
193
					}
194
				} else
195
					$savemsg = sprintf(gettext("Firmware image missing or other error, please try again %s."),$errortext);
196
			}
197 580182e2 Colin Smith
		}
198
	}
199 5b237745 Scott Ullrich
}
200 e2fa4962 Scott Ullrich
201 3c446c66 Erik Fonnesbeck
$pgtitle = array(gettext("System"),gettext("Firmware"));
202 52380979 Scott Ullrich
include("head.inc");
203
204 5b237745 Scott Ullrich
?>
205 4b805dbc Renato Botelho
<body link="#0000CC" vlink="#0000CC" alink="#0000CC">
206 afc04d58 Scott Ullrich
<form action="system_firmware.php" method="post" enctype="multipart/form-data">
207
<?php
208
	/* Construct an upload_id for this session */
209 4111fcf5 Ermal
	if (!session_id())
210
		$upload_id = uniqid();
211
	else
212
		$upload_id = session_id();
213 afc04d58 Scott Ullrich
?>
214 4b805dbc Renato Botelho
<input type="hidden" name="UPLOAD_IDENTIFIER" value="<?php echo $upload_id;?>" />
215 580182e2 Colin Smith
<?php include("fbegin.inc"); ?>
216
<?php if ($input_errors) print_input_errors($input_errors); ?>
217 1ef7b568 Scott Ullrich
<?php if ($savemsg) print_info_box($savemsg); ?>
218 580182e2 Colin Smith
<?php if ($fwinfo <> "") print_info_box($fwinfo); ?>
219 77720bd3 Colin Smith
<?php if ($sig_warning && !$input_errors): ?>
220 4668f9f7 Scott Ullrich
<?php
221 8cd558b6 ayvis
	$sig_warning = "<strong>" . $sig_warning . "</strong><br />" . gettext("This means that the image you uploaded " .
222 77a89fb6 Scott Ullrich
		"is not an official/supported image and may lead to unexpected behavior or security " .
223
		"compromises. Only install images that come from sources that you trust, and make sure ".
224 8cd558b6 ayvis
		"that the image has not been tampered with.") . "<br /><br />".
225 1b4f376d Vinicius Coque
		gettext("Do you want to install this image anyway (on your own risk)?");
226 5b237745 Scott Ullrich
print_info_box($sig_warning);
227 bfed48a4 Scott Ullrich
if(stristr($_FILES['ulfile']['name'],"nanobsd"))
228 02559d7d Colin Fleming
	echo "<input type='hidden' name='isnano' id='isnano' value='yes' />\n";
229 5b237745 Scott Ullrich
?>
230 02559d7d Colin Fleming
<input name="sig_override" type="submit" class="formbtn" id="sig_override" value=" <?=gettext("Yes");?> " />
231
<input name="sig_no" type="submit" class="formbtn" id="sig_no" value=" <?=gettext("No"); ?> " />
232 5b237745 Scott Ullrich
<?php else: ?>
233 a368a026 Ermal Lu?i
<?php if (!is_subsystem_dirty('firmwarelock')): ?>
234 02559d7d Colin Fleming
	<table width="100%" border="0" cellpadding="0" cellspacing="0" summary="firmware">
235 77a89fb6 Scott Ullrich
		<tr>
236
			<td>
237 4820d297 Scott Ullrich
<?php
238
	$tab_array = array();
239 3ff39566 Scott Ullrich
	$tab_array[] = array(gettext("Manual Update"), true, "system_firmware.php");
240
	$tab_array[] = array(gettext("Auto Update"), false, "system_firmware_check.php");
241
	$tab_array[] = array(gettext("Updater Settings"), false, "system_firmware_settings.php");
242
	if($g['hidedownloadbackup'] == false)
243
		$tab_array[] = array(gettext("Restore Full Backup"), false, "system_firmware_restorefullbackup.php");
244 4820d297 Scott Ullrich
	display_top_tabs($tab_array);
245
?>
246 77a89fb6 Scott Ullrich
			</td>
247 580182e2 Colin Smith
		</tr>
248 77a89fb6 Scott Ullrich
		<tr>
249
			<td>
250
				<div id="mainarea">
251 02559d7d Colin Fleming
					<table class="tabcont" width="100%" border="0" cellpadding="6" cellspacing="0" summary="main area">
252 4b805dbc Renato Botelho
					<tr>
253 a6d8feb6 Renato Botelho
						<td colspan="2" class="listtopic"><?=gettext("Invoke") ." ". $g['product_name'] ." ".  gettext("Manual Upgrade"); ?></td>
254 77a89fb6 Scott Ullrich
					</tr>
255
					<tr>
256 4b805dbc Renato Botelho
						<td width="22%" valign="baseline" class="vncell">&nbsp;</td>
257
						<td width="78%" class="vtable">
258 a368a026 Ermal Lu?i
						<?php if (!is_subsystem_dirty('rebootreq')): ?>
259
						<?php if (!is_subsystem_dirty('firmware')): ?>
260 02559d7d Colin Fleming
						<input name="Submit" type="submit" class="formbtn" value="<?=gettext("Enable firmware upload");?>" />
261 8cd558b6 ayvis
						<br />
262 68e14a6b Scott Ullrich
							<?php printf(gettext('Click "Enable firmware upload" to begin.'),$g['firmware_update_text']);?>
263 8cd558b6 ayvis
						<br />
264 77a89fb6 Scott Ullrich
						<?php else: ?>
265 02559d7d Colin Fleming
							<input name="Submit" type="submit" class="formbtn" value="<?=gettext("Disable firmware upload");?>" />
266 e40d415a Scott Ullrich
					</td>
267
					</tr>
268
					<tr>
269 4b805dbc Renato Botelho
						<td width="22%" valign="baseline" class="vncell">&nbsp;</td>
270
						<td width="78%" class="vtable">
271
							<?php
272
								if ($g['platform'] == "nanobsd")
273
									$type = "*.img.gz";
274 e40d415a Scott Ullrich
								else
275 4b805dbc Renato Botelho
									$type = "*.tgz";
276
							?>
277 e40d415a Scott Ullrich
							<strong><?=gettext("Firmware image file ($type):");?> </strong>
278 02559d7d Colin Fleming
							<input name="ulfile" type="file" class="formfld" />
279
							<br />
280 9beebb5e Renato Botelho
							<?php if ($g['hidebackupbeforeupgrade'] === false): ?>
281 02559d7d Colin Fleming
							<input type="checkbox" name='backupbeforeupgrade' id='backupbeforeupgrade' /> <?=gettext("Perform full backup prior to upgrade");?>
282 8cd558b6 ayvis
							<br />
283 9beebb5e Renato Botelho
							<?php endif; ?>
284 02559d7d Colin Fleming
							<input name="Submit" type="submit" class="formbtn" value="<?=gettext("Upgrade firmware");?>" />
285 e40d415a Scott Ullrich
							<?=gettext('Click "Upgrade firmware" to start the upgrade process.');?>
286 77a89fb6 Scott Ullrich
						<?php endif; else: ?>
287 1b4f376d Vinicius Coque
							<strong><?=gettext("You must reboot the system before you can upgrade the firmware.");?></strong>
288 77a89fb6 Scott Ullrich
						<?php endif; ?>
289 0045dfd1 Scott Ullrich
				</td>
290 77a89fb6 Scott Ullrich
			</tr>
291
			<tr>
292
				<td width="22%" valign="top">&nbsp;</td>
293 e40d415a Scott Ullrich
				<td width="78%">
294 09b964a2 Scott Ullrich
						<?php if (is_subsystem_dirty('firmware')): ?>
295 e40d415a Scott Ullrich
					<span class="vexpl">
296
						<span class="red">
297
							<strong>
298 8cd558b6 ayvis
								<?=gettext("Warning:");?><br />
299 e40d415a Scott Ullrich
							</strong>
300
						</span>
301
						<?=gettext("DO NOT abort the firmware upgrade once it " .
302 4b805dbc Renato Botelho
								"has started. The firewall will reboot automatically after " .
303
								"storing the new firmware. The configuration will be maintained.");?>
304 e40d415a Scott Ullrich
					</span>
305 09b964a2 Scott Ullrich
						<?php endif; ?>
306 02559d7d Colin Fleming
				</td></tr>
307 77a89fb6 Scott Ullrich
			</table>
308 e12d98ea Bill Marquette
		</div>
309 02559d7d Colin Fleming
	</td></tr>
310 222494af Colin Smith
</table>
311 afc04d58 Scott Ullrich
312 03c64985 Scott Ullrich
<?php endif; endif; ?>
313 5b237745 Scott Ullrich
<?php include("fend.inc"); ?>
314 02559d7d Colin Fleming
</form>
315 5b237745 Scott Ullrich
</body>
316
</html>