pfSense

<?php

 *	Exec+ v1.02-000 - Copyright 2001-2003, All rights reserved

 *	(modified for m0n0wall by Manuel Kasper <mk@neon1.net>)\

 *

 *	Copyright (c)  2004 Manuel Kasper (BSD 2 clause)

 *	are permitted provided that the following conditions are met:

 *		this list of conditions and the following disclaimer.

 *		notice, this list of conditions and the following disclaimer in

 *		the documentation and/or other materials provided with the

 *		distribution.

 *		must display the following acknowledgment:

 *		"This product includes software developed by the pfSense Project

 *		 for use in the pfSense software distribution. (http://www.pfsense.org/).

 *		 endorse or promote products derived from this software without

 *		 prior written permission. For written permission, please contact

 *		 coreteam@pfsense.org.

 *		nor may "pfSense" appear in their names without prior written

 *		permission of the Electric Sheep Fencing, LLC.

 *		acknowledgment:

 *	for use in the pfSense software distribution (http://www.pfsense.org/).

 *	EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

 *	IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR

 *	PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE pfSense PROJECT OR

 *	ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,

 *	SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT

 *	NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;

 *	LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)

 *	HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,

 *	STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)

 *	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED

 *	OF THE POSSIBILITY OF SUCH DAMAGE.

 */

##|*IDENT=page-diagnostics-command

##|*NAME=Diagnostics: Command page

##|*DESCR=Allow access to the 'Diagnostics: Command' page.

##|*MATCH=exec.php*

##|-PRIV

	$fd = fopen($_POST['dlPath'], "rb");

	header("Content-Type: application/octet-stream");

	header("Content-Length: " . filesize($_POST['dlPath']));

		header('Pragma: ');

		header('Cache-Control: ');

	} else {

		header("Pragma: private");

		header("Cache-Control: private, must-revalidate");

	}

	exit;

	$ulmsg = "Uploaded file to /tmp/" . htmlentities($_FILES['ulfile']['name']);

	unset($_POST['txtCommand']);

}

// Returns true or false depending on blankness of argument.

// Function: Puts

// Put string, Ruby-style.

	echo "$arg\n";

}

// "Constants".

// Get year.

	// Create recall buffer array (of encoded strings).

	for ($i = 0; $i < (count($arrBuffer) - 1); $i++) {

	puts("	 );");

?>

	var intRecallPtr = arrRecallBuffer.length-1;

	function str_encode() { return escape( this ) }

	function str_decode() { return unescape( this ) }

	// Extend string class to include encode() and decode() functions.

	String.prototype.encode = str_encode

	String.prototype.decode = str_decode

	// Function: is Blank

	// Returns boolean true or false if argument is blank.

	function isBlank( strArg ) { return strArg.match( /^\s*$/ ) }

	// Function: frmExecPlus onSubmit (event handler)

	// Builds the recall buffer from the command string on submit.

	function frmExecPlus_onSubmit( form ) {

			// If this command is repeat of last command, then do not store command.

			if (form.txtCommand.value.encode() == arrRecallBuffer[arrRecallBuffer.length-1]) { return true }

			// Stuff encoded command string into the recall buffer.

		return true;

	}

	// Recalls command buffer going either up or down.

	function btnRecall_onClick( form, n ) {

		if (!arrRecallBuffer.length) {

			return;

		}

		// according to <n>.

		intRecallPtr += n;

		if (intRecallPtr < 0) { intRecallPtr = arrRecallBuffer.length - 1 }

		if (intRecallPtr > (arrRecallBuffer.length - 1)) { intRecallPtr = 0 }

		form.txtCommand.value = arrRecallBuffer[intRecallPtr].decode();

	}

	// Resets form on reset button click event.

	function Reset_onClick( form ) {

		intRecallPtr = arrRecallBuffer.length;

		form.txtCommand.value = '';

		form.txtCommand.focus();

	}

	print('<div class="alert alert-warning" role="alert">'.gettext("The capabilities offered here can be dangerous. No support is available. Use them at your own risk!").'</div>');

	<div class="panel panel-success responsive">

			<pre>

	putenv("SCRIPT_FILENAME=" . strtok($_POST['txtCommand'], " "));

	exec($_POST['txtCommand'] . ' 2>&1', $output);

	foreach($output as $line)

		print(htmlspecialchars($line) . "\r\n");

	</div>

<? endif ?>

	<div class="panel panel-default">

			<input id="txtCommand" name="txtCommand" placeholder="Command" type="text" class="col-sm-4"	 value="<?=htmlspecialchars($_POST['txtCommand'])?>" />

			<br /><br />

			<input type="hidden" name="txtRecallBuffer" value="<?=htmlspecialchars($_POST['txtRecallBuffer']) ?>" />

			<input type="button" class="btn btn-default btn-sm" name="btnRecallPrev" value="<" onclick="btnRecall_onClick( this.form, -1 );" />

	</div>

	<div class="panel panel-default">

	</div>

	if ($ulmsg)

		print('<div class="alert alert-success" role="alert">' . $ulmsg .'</div>');

?>

	<div class="panel panel-default">

			<input name="ulfile" type="file" class="btn btn-default btn-sm btn-file" id="ulfile" />

			<br />

		</div>

	</div>

<?php

	// This is intended to prevent bad code from breaking the GUI

		puts("<div class=\"panel panel-success responsive\"><div class=\"panel-heading\">PHP response</div>");

		puts("<pre>");

		$phpfile = fopen($tmpname, "w");

		fwrite($phpfile, "require_once(\"/etc/inc/config.inc\");\n");

		fwrite($phpfile, "require_once(\"/etc/inc/functions.inc\");\n\n");

		fwrite($phpfile, $_POST['txtPHPCommand'] . "\n");

		fwrite($phpfile, "?>\n");

		fclose($phpfile);

		for ($i=0; $i < count($output); $i++) {

			print($output[$i] . "\n");

		}

//		echo eval($_POST['txtPHPCommand']);

		puts("</div>");

<script>

	events.push(function(){

		// Scroll to the bottom of the page to more easily see the results of a PHP exec command

		$("html, body").animate({ scrollTop: $(document).height() }, 1000);

	});

</script>

<?php

			<textarea id="txtPHPCommand" placeholder="Command" name="txtPHPCommand" rows="9" cols="80"><?=htmlspecialchars($_POST['txtPHPCommand'])?></textarea>

			<br />

			<input type="submit" class="btn btn-default btn-sm" value="<?=gettext("Execute")?>" />

			<?=gettext("Example"); ?>: <code>print("Hello World!");</code>

		</div>

	</div>

<?php