pfSense

/*

	diag_command.php

*/

/* ====================================================================

 *	Copyright (c)  2004-2015  Electric Sheep Fencing, LLC. All rights reserved.

 *

 *	Created by technologEase (http://www.technologEase.com)

 *	Some or all of this file is based on the m0n0wall project which is

 *

 *	Redistribution and use in source and binary forms, with or without modification,

 *

 *	1. Redistributions of source code must retain the above copyright notice,

 *

 *	2. Redistributions in binary form must reproduce the above copyright

 *

 *	3. All advertising materials mentioning features or use of this software

 *

 *	4. The names "pfSense" and "pfSense Project" must not be used to

 *

 *	5. Products derived from this software may not be called "pfSense"

 *

 *	6. Redistributions of any form whatsoever must retain the following

 *

 *	"This product includes software developed by the pfSense Project

 *

 *	THIS SOFTWARE IS PROVIDED BY THE pfSense PROJECT ``AS IS'' AND ANY

 *

 *	====================================================================

 *

##|+PRIV

##|*NAME=Diagnostics: Command

##|*DESCR=Allow access to the 'Diagnostics: Command' page.

##|*MATCH=diag_command.php*

##|-PRIV

$allowautocomplete = true;

require("guiconfig.inc");

if (($_POST['submit'] == "DOWNLOAD") && file_exists($_POST['dlPath'])) {

	session_cache_limiter('public');

	header("Content-Disposition: attachment; filename=\"" .

		trim(htmlentities(basename($_POST['dlPath']))) . "\"");

	if (isset($_SERVER['HTTPS'])) {

	fpassthru($fd);

} else if (($_POST['submit'] == "UPLOAD") && is_uploaded_file($_FILES['ulfile']['tmp_name'])) {

	move_uploaded_file($_FILES['ulfile']['tmp_name'], "/tmp/" . $_FILES['ulfile']['name']);

	$ulmsg = sprintf(gettext('Uploaded file to /tmp/%s.'), htmlentities($_FILES['ulfile']['name']));

	unset($_POST['txtCommand']);

if ($_POST) {

	conf_mount_rw();

}

// Function: is Blank

function isBlank($arg) {

	return preg_match("/^\s*$/", $arg);

}

function puts($arg) {

$Version = '';

$ScriptName = $REQUEST['SCRIPT_NAME'];

$arrDT = localtime();

$intYear = $arrDT[5] + 1900;

$pgtitle = array(gettext("Diagnostics"), gettext("Command Prompt"));

include("head.inc");

?>

<script type="text/javascript">

	// Create recall buffer array (of encoded strings).

<?php

if (isBlank($_POST['txtRecallBuffer'])) {

	puts("	 var arrRecallBuffer = new Array;");

} else {

	puts("	 var arrRecallBuffer = new Array(");

	$arrBuffer = explode("&", $_POST['txtRecallBuffer']);

		puts("		'" . htmlspecialchars($arrBuffer[$i], ENT_QUOTES | ENT_HTML401) . "',");

	}

	puts("		'" . htmlspecialchars($arrBuffer[count($arrBuffer) - 1], ENT_QUOTES | ENT_HTML401) . "'");

}

	// Set pointer to end of recall buffer.

	// Functions to extend String class.

		if (!isBlank(form.txtCommand.value)) {

			if (isBlank(form.txtRecallBuffer.value)) {

				form.txtRecallBuffer.value = form.txtCommand.value.encode();

			} else {

				form.txtRecallBuffer.value += '&' + form.txtCommand.value.encode();

			}

		}

	// Function: btnRecall onClick (event handler)

		// If nothing in recall buffer, then error.

			alert('<?=gettext("Nothing to recall"); ?>!');

			form.txtCommand.focus();

		// Increment recall buffer pointer in positive or negative direction

		// Make sure the buffer stays circular.

		// Recall the command.

	// Function: Reset onClick (event handler)

		// Reset recall buffer pointer.

		// Clear form (could have spaces in it) and return focus ready for cmd.

		return true;

//]]>

</script>

<?php

if (isBlank($_POST['txtCommand']) && isBlank($_POST['txtPHPCommand']) && isBlank($ulmsg)) {

	print_callout(gettext("The capabilities offered here can be dangerous. No support is available. Use them at your own risk!"), 'danger', gettext('Advanced Users Only'));

}

if (!isBlank($_POST['txtCommand'])):?>

		<div class="panel-heading"><h2 class="panel-title"><?=sprintf(gettext('Shell Output - %s'), htmlspecialchars($_POST['txtCommand']))?></h2></div>

		<div class="panel-body">

			<div class="content">

<?php

	putenv("PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin");

	$output = array();

?>

		</div>

<?php endif; ?>

<form action="diag_command.php" method="post" enctype="multipart/form-data" name="frmExecPlus" onsubmit="return frmExecPlus_onSubmit( this );">

	<div class="panel panel-default">

		<div class="panel-heading"><h2 class="panel-title"><?=gettext('Execute Shell Command')?></h2></div>

		<div class="panel-body">

			<div class="content">

				<input id="txtCommand" name="txtCommand" placeholder="Command" type="text" class="col-sm-7"	 value="<?=htmlspecialchars($_POST['txtCommand'])?>" />

				<br /><br />

					<button type="button" class="btn btn-success btn-sm" name="btnRecallPrev" onclick="btnRecall_onClick( this.form, -1 );" title="<?=gettext("Recall Previous Command")?>">

						<i class="fa fa-angle-double-left"></i>

					<button type="submit" class="btn btn-warning btn-sm" value="EXEC" title="<?=gettext("Execute the entered command")?>">

						<i class="fa fa-bolt"></i>

						<?=gettext("Execute"); ?>

					<button type="button" class="btn btn-success btn-sm" name="btnRecallNext" onclick="btnRecall_onClick( this.form,  1 );" title="<?=gettext("Recall Next Command")?>">

						<i class="fa fa-angle-double-right"></i>

					</button>

					<button style="margin-left: 10px;" type="button" class="btn btn-default btn-sm" onclick="return Reset_onClick( this.form );" title="<?=gettext("Clear command entry")?>">

						<i class="fa fa-undo"></i>

			</div>

		</div>

		<div class="panel-heading"><h2 class="panel-title"><?=gettext('Download File')?></h2></div>

		<div class="panel-body">

			<div class="content">

				<input name="dlPath" type="text" id="dlPath" placeholder="File to download" class="col-sm-4" value="<?=htmlspecialchars($_GET['dlPath']);?>"/>

				<br /><br />

				<button name="submit" type="submit" class="btn btn-primary btn-sm" id="download" value="DOWNLOAD">

			</div>

		</div>

<?php

	if ($ulmsg) {

		print_info_box($ulmsg, 'success', false);

	}

?>

		<div class="panel-heading"><h2 class="panel-title"><?=gettext('Upload File')?></h2></div>

		<div class="panel-body">

			<div class="content">

				<button name="submit" type="submit" class="btn btn-primary btn-sm" id="upload" value="UPLOAD">

			</div>

		</div>

	// Experimental version. Writes the user's php code to a file and executes it via a new instance of PHP

	if (!isBlank($_POST['txtPHPCommand'])) {

		puts("<div class=\"panel panel-success responsive\"><div class=\"panel-heading\"><h2 class=\"panel-title\">PHP Response</h2></div>");

		$tmpname = tempnam("/tmp", "");

		fwrite($phpfile, "<?php\n");

		$output = array();

		exec("/usr/local/bin/php " . $tmpname, $output);

		unlink($tmpname);

		$output = implode("\n", $output);

//		echo eval($_POST['txtPHPCommand']);

		puts("</div>");

?>

<script type="text/javascript">

	events.push(function() {

		// Scroll to the bottom of the page to more easily see the results of a PHP exec command

//]]>

</script>

}

?>

	<div class="panel panel-default responsive">

		<div class="panel-heading"><h2 class="panel-title"><?=gettext('Execute PHP Commands')?></h2></div>

		<div class="panel-body">

			<div class="content">

				<button type="submit" class="btn btn-warning btn-sm" value="<?=gettext("Execute")?>" title="<?=gettext("Execute this PHP Code")?>">

					<i class="fa fa-bolt"></i>

					<?=gettext("Execute")?>

				<?=gettext("Example"); ?>: <code>print("Hello World!");</code>

		</div>

</form>

include("foot.inc");

if ($_POST) {

	conf_mount_ro();

}