1
|
|
|
<?php |
2
|
|
|
|
3
|
|
|
// Copyright (C) 2014-2023 Universitätsbibliothek Mannheim |
4
|
|
|
// See file LICENSE for license details. |
5
|
|
|
|
6
|
|
|
function confValue(string $name): ?string |
7
|
|
|
{ |
8
|
|
|
// Try setting constants from a configuration file. |
9
|
|
|
static $conf = null; |
10
|
|
|
if (is_null($conf)) { |
11
|
|
|
$conf_fn = 'palma.ini'; |
12
|
|
|
if (!file_exists($conf_fn)) { |
13
|
|
|
$conf_fn = '/etc/palma.ini'; |
14
|
|
|
} |
15
|
|
|
$conf = parse_ini_file($conf_fn); |
16
|
|
|
} |
17
|
|
|
if (array_key_exists($name, $conf)) { |
18
|
|
|
return $conf[$name]; |
19
|
|
|
} |
20
|
|
|
return null; |
21
|
|
|
} |
22
|
|
|
|
23
|
|
|
// Entries in group 'display'. |
24
|
|
|
define('CONFIG_DISPLAY', confValue('id') ?? ':1'); |
25
|
|
|
define('CONFIG_SSH', confValue('ssh')); |
26
|
|
|
|
27
|
|
|
// Entries in group 'general'. |
28
|
|
|
define('CONFIG_PASSWORD', confValue('password') ?? false); |
29
|
|
|
define('CONFIG_PIN', confValue('pin') ?? true); |
30
|
|
|
define('CONFIG_STATIONNAME', confValue('stationname') ?? |
31
|
|
|
str_replace(array("\r", "\n", " "), '', `hostname -f`)); |
32
|
|
|
define('CONFIG_THEME', confValue('theme') ?? 'demo/simple'); |
33
|
|
|
define('CONFIG_BROWSER', confValue('browser')); |
34
|
|
|
define('CONFIG_DEBUG', confValue('debug') ?? false); |
35
|
|
|
|
36
|
|
|
// Entries in group 'path'. |
37
|
|
|
define('CONFIG_START_URL', confValue('start_url') ?? |
38
|
|
|
'http://' . str_replace(array("\r", "\n", " "), '', `hostname -f`) . '/'); |
39
|
|
|
define('CONFIG_POLICY', confValue('policy')); |
40
|
|
|
define('CONFIG_CONTROL_FILE', confValue('control_file') ?? CONFIG_START_URL . 'control.php'); |
41
|
|
|
define('CONFIG_UPLOAD_DIR', confValue('upload_dir') ?? '/tmp/palma'); |
42
|
|
|
define('CONFIG_INSTITUTION_URL', confValue('institution_url') ?? ''); |
43
|
|
|
|
44
|
|
|
// Entries in group 'monitoring'. |
45
|
|
|
define('CONFIG_MONITOR_URL', confValue('monitor_url') ?? null); |
46
|
|
|
|
47
|
|
|
function getDevice(): string |
48
|
|
|
{ |
49
|
|
|
// Try to determine the user's device type. The device which is |
50
|
|
|
// returned is used to select the matching icon for the user list. |
51
|
|
|
$agent = $_SERVER["HTTP_USER_AGENT"]; |
52
|
|
|
if (preg_match('/iPad/', $agent)) { |
53
|
|
|
$device = 'tablet'; |
54
|
|
|
} elseif (preg_match('/iPhone/', $agent)) { |
55
|
|
|
$device = 'mobile'; |
56
|
|
|
} elseif (preg_match('/Android/', $agent)) { |
57
|
|
|
$device = 'android'; |
58
|
|
|
} elseif (preg_match('/Linux/', $agent)) { |
59
|
|
|
$device = 'linux'; |
60
|
|
|
} elseif (preg_match('/OS X/', $agent)) { |
61
|
|
|
$device = 'apple'; |
62
|
|
|
} elseif (preg_match('/Windows/', $agent)) { |
63
|
|
|
$device = 'windows'; |
64
|
|
|
} else { |
65
|
|
|
$device = 'laptop'; |
66
|
|
|
} |
67
|
|
|
return $device; |
68
|
|
|
} |
69
|
|
|
|
70
|
|
|
function checkCredentials(string $username, string $password): bool |
71
|
|
|
{ |
72
|
|
|
// Check username + password against fixed internal value and |
73
|
|
|
// external proxy with authentisation. |
74
|
|
|
|
75
|
|
|
global $errtext; |
76
|
|
|
|
77
|
|
|
$remote = $_SERVER['REMOTE_ADDR']; |
78
|
|
|
if ($username == 'chef' && $password == 'chef') { |
79
|
|
|
if ( |
80
|
|
|
$remote == '::1' || $remote == '127.0.0.1' || |
81
|
|
|
preg_match('/^134[.]155[.]36[.]/', $remote) && |
82
|
|
|
$remote != '134.155.36.48' |
83
|
|
|
) { |
84
|
|
|
// Allow test access for restricted remote hosts (localhost, |
85
|
|
|
// UB Mannheim library staff, but not via proxy server). |
86
|
|
|
// TODO: PalMA installations which are accessible from |
87
|
|
|
// the Internet may want to remove this test access. |
88
|
|
|
return true; |
89
|
|
|
} else { |
90
|
|
|
trace("checkCredentials: Test access not allowed for IP address $remote"); |
91
|
|
|
return false; |
92
|
|
|
} |
93
|
|
|
} |
94
|
|
|
|
95
|
|
|
if ($username == '' || $password == '') { |
96
|
|
|
// Don't allow empty user name or password. |
97
|
|
|
// Proxy authentisation can fail with empty values. |
98
|
|
|
trace("checkCredentials: access denied for user '$username'"); |
99
|
|
|
return false; |
100
|
|
|
} |
101
|
|
|
// TODO: testurl sollte auf einem lokalen Server liegen. |
102
|
|
|
$testurl = 'http://www.weilnetz.de/proxytest'; |
103
|
|
|
$proxy = 'proxy.bib.uni-mannheim.de:3150'; |
104
|
|
|
$curl = curl_init($testurl); |
105
|
|
|
curl_setopt($curl, CURLOPT_HEADER, true); |
106
|
|
|
curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); |
107
|
|
|
curl_setopt($curl, CURLOPT_PROXY, $proxy); |
108
|
|
|
curl_setopt($curl, CURLOPT_PROXYAUTH, CURLAUTH_ANY); |
109
|
|
|
curl_setopt($curl, CURLOPT_PROXYUSERPWD, "$username:$password"); |
110
|
|
|
//~ trace("checkCredentials: Start curl"); |
111
|
|
|
$out = curl_exec($curl); |
112
|
|
|
curl_close($curl); |
113
|
|
|
|
114
|
|
|
if (!$out) { |
115
|
|
|
trace("checkCredentials: curl failed for user '$username'"); |
116
|
|
|
$errtext = addslashes(__('Invalid credentials!')); |
|
|
|
|
117
|
|
|
} elseif (preg_match('/404 Not Found/', $out)) { |
|
|
|
|
118
|
|
|
return true; |
119
|
|
|
} elseif (preg_match('/Could not resolve proxy/', $out)) { |
120
|
|
|
trace('checkCredentials: proxy authentication was not possible'); |
121
|
|
|
$errtext = addslashes(__('Cannot check credentials, sorry!')); |
122
|
|
|
} elseif (preg_match('/Cache Access Denied/', $out)) { |
123
|
|
|
trace("checkCredentials: access denied for user '$username'"); |
124
|
|
|
$errtext = addslashes(__('Invalid credentials!')); |
125
|
|
|
} else { |
126
|
|
|
trace("checkCredentials: access not possible for user '$username'"); |
127
|
|
|
$errtext = addslashes(__('Invalid credentials!')); |
128
|
|
|
} |
129
|
|
|
return false; |
130
|
|
|
} |
131
|
|
|
|
132
|
|
|
function showLogin(): void |
133
|
|
|
{ |
134
|
|
|
//if (isset($_SERVER['HTTP_REFERER'])) { |
135
|
|
|
// error_log("auth.php referred by " . $_SERVER['HTTP_REFERER']); |
136
|
|
|
//} |
137
|
|
|
$header = 'Location: login.php'; |
138
|
|
|
$separator = '?'; |
139
|
|
|
if (isset($_REQUEST['lang'])) { |
140
|
|
|
$header = $header . $separator . 'lang=' . $_REQUEST['lang']; |
141
|
|
|
$separator = '&'; |
142
|
|
|
} |
143
|
|
|
if (isset($_REQUEST['pin'])) { |
144
|
|
|
$header = $header . $separator . 'pin=' . $_REQUEST['pin']; |
145
|
|
|
$separator = '&'; |
|
|
|
|
146
|
|
|
} |
147
|
|
|
header($header); |
148
|
|
|
|
149
|
|
|
exit; |
150
|
|
|
} |
151
|
|
|
|
152
|
|
|
function trace(string $text): void |
153
|
|
|
{ |
154
|
|
|
static $firstRun = true; |
155
|
|
|
if ($firstRun) { |
156
|
|
|
$firstRun = false; |
157
|
|
|
openlog("palma", LOG_PID, LOG_USER); |
158
|
|
|
} |
159
|
|
|
syslog(LOG_NOTICE, $text); |
160
|
|
|
} |
161
|
|
|
|
162
|
|
|
function debug(string $text): void |
163
|
|
|
{ |
164
|
|
|
if (CONFIG_DEBUG) { |
165
|
|
|
trace($text); |
166
|
|
|
} |
167
|
|
|
} |
168
|
|
|
|
169
|
|
|
function monitor(string $action): void |
170
|
|
|
{ |
171
|
|
|
if (is_null(CONFIG_MONITOR_URL)) { |
172
|
|
|
return; |
173
|
|
|
} |
174
|
|
|
|
175
|
|
|
debug("monitor $action"); |
176
|
|
|
|
177
|
|
|
$ch = curl_init(); |
178
|
|
|
$url = CONFIG_MONITOR_URL; |
|
|
|
|
179
|
|
|
|
180
|
|
|
curl_setopt_array( |
181
|
|
|
$ch, |
182
|
|
|
array( |
183
|
|
|
CURLOPT_RETURNTRANSFER => 1, |
184
|
|
|
CURLOPT_URL => CONFIG_MONITOR_URL . '/' . CONFIG_STATIONNAME . '/' . base64_encode($action), |
185
|
|
|
CURLOPT_USERAGENT => 'PalMA cURL Request' |
186
|
|
|
) |
187
|
|
|
); |
188
|
|
|
$resp = curl_exec($ch); |
|
|
|
|
189
|
|
|
curl_close($ch); |
190
|
|
|
} |
191
|
|
|
|
192
|
|
|
function displayCommand(string $cmd): ?string |
193
|
|
|
{ |
194
|
|
|
if (is_null(CONFIG_SSH)) { |
195
|
|
|
$cmd = "DISPLAY=" . CONFIG_DISPLAY . " HOME=/var/www $cmd"; |
196
|
|
|
} else { |
197
|
|
|
$cmd = CONFIG_SSH . " 'DISPLAY=" . CONFIG_DISPLAY . " $cmd'"; |
198
|
|
|
} |
199
|
|
|
|
200
|
|
|
monitor("control.php: displayCommand $cmd"); |
201
|
|
|
|
202
|
|
|
// add directories with palma-browser to PATH |
203
|
|
|
$result = shell_exec('PATH=/usr/lib/palma:./scripts:$PATH ' . $cmd); |
204
|
|
|
trace("displayCommand: $cmd, result=$result"); |
205
|
|
|
return $result; |
206
|
|
|
} |
207
|
|
|
|
208
|
|
|
function wmClose(string $id): void |
209
|
|
|
{ |
210
|
|
|
monitor("control.php: wmClose"); |
211
|
|
|
// Close window gracefully. |
212
|
|
|
displayCommand("wmctrl -i -c $id"); |
213
|
|
|
} |
214
|
|
|
|
215
|
|
|
function wmHide(string $id): void |
216
|
|
|
{ |
217
|
|
|
monitor("control.php: wmHide"); |
218
|
|
|
// Hide window. This is done by moving it to desktop 1. |
219
|
|
|
displayCommand("wmctrl -i -r $id -t 1"); |
220
|
|
|
} |
221
|
|
|
|
222
|
|
|
function wmShow(string $id): void |
223
|
|
|
{ |
224
|
|
|
monitor("control.php: wmShow"); |
225
|
|
|
// Show window on current desktop. |
226
|
|
|
displayCommand("wmctrl -i -R $id"); |
227
|
|
|
} |
228
|
|
|
|
229
|
|
|
/** @return array<string> */ |
230
|
|
|
function windowListOnScreen(): array |
231
|
|
|
{ |
232
|
|
|
monitor("control.php: windowListOnScreen"); |
233
|
|
|
$list = array(); |
234
|
|
|
$windows = explode("\n", displayCommand('wmctrl -l')); |
235
|
|
|
foreach ($windows as $w) { |
236
|
|
|
$field = explode(' ', $w); |
237
|
|
|
$id = $field[0]; |
238
|
|
|
if ($id != '') { |
239
|
|
|
array_push($list, $id); |
240
|
|
|
} |
241
|
|
|
} |
242
|
|
|
return $list; |
243
|
|
|
} |
244
|
|
|
|
245
|
|
|
// simple list with content from database |
246
|
|
|
|
247
|
|
|
/** @return array<string> */ |
248
|
|
|
function windowList(): array |
249
|
|
|
{ |
250
|
|
|
monitor("control.php: windowList"); |
251
|
|
|
|
252
|
|
|
require_once 'DBConnector.class.php'; |
253
|
|
|
$db = palma\DBConnector::getInstance(); |
254
|
|
|
|
255
|
|
|
$list = array(); |
256
|
|
|
|
257
|
|
|
// Get ordered list of all windows from the database. |
258
|
|
|
$windows = $db->getWindows(); |
259
|
|
|
foreach ($windows as $w) { |
260
|
|
|
$id = $w['win_id']; |
261
|
|
|
if ($id != '') { |
262
|
|
|
array_push($list, $id); |
263
|
|
|
} |
264
|
|
|
} |
265
|
|
|
return $list; |
266
|
|
|
} |
267
|
|
|
|
268
|
|
|
function closeAll(): void |
269
|
|
|
{ |
270
|
|
|
monitor("control.php: closeAll"); |
271
|
|
|
|
272
|
|
|
require_once 'DBConnector.class.php'; |
273
|
|
|
$db = palma\DBConnector::getInstance(); |
274
|
|
|
|
275
|
|
|
$windows_on_screen = windowListOnScreen(); |
276
|
|
|
|
277
|
|
|
foreach ($windows_on_screen as $id) { |
278
|
|
|
wmClose($id); |
279
|
|
|
if ($db->getWindowState($id) != null) { |
280
|
|
|
$db->deleteWindow($id); |
281
|
|
|
} |
282
|
|
|
} |
283
|
|
|
|
284
|
|
|
// Remove any remaining window entries in database. |
285
|
|
|
$db->exec('DELETE FROM window'); |
286
|
|
|
|
287
|
|
|
// Remove any remaining files in the upload directory. |
288
|
|
|
clearUploadDir(); |
289
|
|
|
} |
290
|
|
|
|
291
|
|
|
function doLogout(string $username): void |
292
|
|
|
{ |
293
|
|
|
monitor("control.php: doLogout"); |
294
|
|
|
|
295
|
|
|
require_once 'DBConnector.class.php'; |
296
|
|
|
$db = palma\DBConnector::getInstance(); |
297
|
|
|
|
298
|
|
|
if ($username == 'ALL') { |
299
|
|
|
// Terminate all user connections and reset system. |
300
|
|
|
closeAll(); |
301
|
|
|
$db->resetTables(); |
302
|
|
|
} |
303
|
|
|
} |
304
|
|
|
|
305
|
|
|
function clearUploadDir(): void |
306
|
|
|
{ |
307
|
|
|
monitor("control.php: clearUploadDir"); |
308
|
|
|
# Remove all files in the upload directory. |
309
|
|
|
if (is_dir(CONFIG_UPLOAD_DIR)) { |
310
|
|
|
if ($dh = opendir(CONFIG_UPLOAD_DIR)) { |
311
|
|
|
while (($file = readdir($dh)) !== false) { |
312
|
|
|
if ($file != "." and $file != "..") { |
313
|
|
|
unlink(CONFIG_UPLOAD_DIR . "/$file"); |
314
|
|
|
} |
315
|
|
|
} |
316
|
|
|
closedir($dh); |
317
|
|
|
} |
318
|
|
|
} |
319
|
|
|
} |
320
|
|
|
|
321
|
|
|
function setLayout(?string $layout = null): void |
322
|
|
|
{ |
323
|
|
|
monitor("control.php: setLayout $layout"); |
324
|
|
|
// Set layout of team display. Layouts are specified by their name. |
325
|
|
|
// We use names like g1x1, g2x1, g1x2, ... |
326
|
|
|
// Restore the last layout if the function is called with a null argument. |
327
|
|
|
|
328
|
|
|
trace("setLayout: $layout"); |
329
|
|
|
|
330
|
|
|
require_once 'DBConnector.class.php'; |
331
|
|
|
$db = palma\DBConnector::getInstance(); |
332
|
|
|
|
333
|
|
|
$geom = array(); |
334
|
|
|
$geom['g1x1'] = array( |
335
|
|
|
array(0, 0, 1, 1) |
336
|
|
|
); |
337
|
|
|
$geom['g2x1'] = array( |
338
|
|
|
array(0, 0, 2, 1), array(1, 0, 2, 1) |
339
|
|
|
); |
340
|
|
|
$geom['g1x2'] = array( |
341
|
|
|
array(0, 0, 1, 2), array(0, 1, 1, 2) |
342
|
|
|
); |
343
|
|
|
$geom['g1a2'] = array( |
344
|
|
|
array(0, 0, 2, 1), array(1, 0, 2, 2), |
345
|
|
|
array(1, 1, 2, 2) |
346
|
|
|
); |
347
|
|
|
$geom['g2x2'] = array( |
348
|
|
|
array(0, 0, 2, 2), array(1, 0, 2, 2), |
349
|
|
|
array(0, 1, 2, 2), array(1, 1, 2, 2) |
350
|
|
|
); |
351
|
|
|
|
352
|
|
|
if ($layout == null) { |
|
|
|
|
353
|
|
|
$layout = $db->querySingle("SELECT value FROM setting WHERE key='layout'"); |
354
|
|
|
} |
355
|
|
|
|
356
|
|
|
// Make sure $layout is valid |
357
|
|
|
if (!array_key_exists($layout, $geom)) { |
358
|
|
|
trace("setLayout: layout invalid!"); |
359
|
|
|
} else { |
360
|
|
|
$db->exec("UPDATE setting SET value='$layout' WHERE key='layout'"); |
361
|
|
|
$dim = $geom[$layout]; |
362
|
|
|
|
363
|
|
|
// Make sure that desktop 0 is selected. |
364
|
|
|
displayCommand('wmctrl -s 0'); |
365
|
|
|
|
366
|
|
|
// Get width and height of desktop. |
367
|
|
|
$desktops = displayCommand("wmctrl -d"); |
368
|
|
|
// $desktop looks like this. |
369
|
|
|
// 0 * DG: 1600x900 VP: 0,0 WA: 0,27 1600x873 Arbeitsfläche 1 |
370
|
|
|
$fields = preg_split("/[\n ]+/", $desktops); |
371
|
|
|
$geom = preg_split("/x/", $fields[3]); |
372
|
|
|
$screenWidth = intval($geom[0]); |
373
|
|
|
$screenHeight = intval($geom[1]); |
374
|
|
|
|
375
|
|
|
// Show all windows for the current layout which are not disabled. |
376
|
|
|
|
377
|
|
|
$maxSection = count($dim); |
378
|
|
|
// Get ordered list of all windows from the database. |
379
|
|
|
$windows = $db->getWindows(); |
380
|
|
|
foreach ($windows as $w) { |
381
|
|
|
$id = $w['win_id']; |
382
|
|
|
$enabled = $w['state'] == 'active'; |
383
|
|
|
$section = intval($w['section']); |
384
|
|
|
if ($section >= 1 && $section <= $maxSection && $enabled) { |
385
|
|
|
// Show window, set size and position. |
386
|
|
|
$wi = $section - 1; |
387
|
|
|
$dx = $screenWidth / $dim[$wi][2]; |
388
|
|
|
$dy = $screenHeight / $dim[$wi][3]; |
389
|
|
|
$x = $dim[$wi][0] * $dx; |
390
|
|
|
$y = $dim[$wi][1] * $dy; |
391
|
|
|
wmShow($id); |
392
|
|
|
displayCommand("wmctrl -i -r $id -e 0,$x,$y,$dx,$dy"); |
393
|
|
|
} else { |
394
|
|
|
// Hide window. |
395
|
|
|
wmHide($id); |
396
|
|
|
} |
397
|
|
|
} |
398
|
|
|
} |
399
|
|
|
} |
400
|
|
|
|
401
|
|
|
function activateControls(string $windowhex): void |
402
|
|
|
{ |
403
|
|
|
require_once 'DBConnector.class.php'; |
404
|
|
|
$db = palma\DBConnector::getInstance(); |
405
|
|
|
|
406
|
|
|
$fhandler = $db->querySingle("SELECT handler FROM window WHERE win_id='$windowhex'"); |
407
|
|
|
trace("activateControls: handler $fhandler"); |
408
|
|
|
monitor("control.php: activateControls $fhandler"); |
409
|
|
|
} |
410
|
|
|
|
411
|
|
|
/** |
412
|
|
|
* @param array<string,string> $new |
413
|
|
|
*/ |
414
|
|
|
function addNewWindow(array $new): void |
415
|
|
|
{ |
416
|
|
|
// Add a new window to the monitor. This window either uses the first |
417
|
|
|
// unused section or it will be hidden. |
418
|
|
|
|
419
|
|
|
monitor('control.php: addNewWindow ' . serialize($new)); |
420
|
|
|
trace('addNewWindow: ' . serialize($new)); |
421
|
|
|
|
422
|
|
|
require_once 'DBConnector.class.php'; |
423
|
|
|
$db = palma\DBConnector::getInstance(); |
424
|
|
|
|
425
|
|
|
// '$new' already contains 'file', 'handler' and 'date', as well as the |
426
|
|
|
// username for VNC connections only. |
427
|
|
|
// 'win_id', 'section' have to be defined afterwards. |
428
|
|
|
|
429
|
|
|
// Get new window. Wait up to 10 s for it. |
430
|
|
|
$t_total = 0; |
431
|
|
|
do { |
432
|
|
|
$window_ids_on_screen = windowListOnScreen(); |
433
|
|
|
$windows_in_db = $db->getWindows(); |
434
|
|
|
|
435
|
|
|
$existing_ids = array(); |
436
|
|
|
$new_window_id = ''; |
437
|
|
|
|
438
|
|
|
if (count($windows_in_db) > 0) { |
439
|
|
|
// Add db windows to existing_ids. |
440
|
|
|
foreach ($windows_in_db as $win) { |
441
|
|
|
$existing_ids[] = $win['win_id']; |
442
|
|
|
} |
443
|
|
|
|
444
|
|
|
$new_window = array_diff($window_ids_on_screen, $existing_ids); |
445
|
|
|
foreach ($new_window as $win_id) { |
446
|
|
|
if ($win_id != "") { |
447
|
|
|
$new_window_id = $win_id; |
448
|
|
|
} |
449
|
|
|
} |
450
|
|
|
} elseif (!empty($window_ids_on_screen)) { |
451
|
|
|
$new_window_id = $window_ids_on_screen[0]; |
452
|
|
|
} |
453
|
|
|
} while (!$new_window_id && $t_total++ <= 10 && !sleep(1)); |
454
|
|
|
|
455
|
|
|
if (!$new_window_id) { |
456
|
|
|
trace('addNewWindow: warning: no new window found'); |
457
|
|
|
return; |
458
|
|
|
} |
459
|
|
|
|
460
|
|
|
trace("addNewWindow: new window $new_window_id"); |
461
|
|
|
|
462
|
|
|
// Determine last assigned monitor section. |
463
|
|
|
//~ $max_section = $db->querySingle('SELECT MAX(section) FROM window'); |
464
|
|
|
|
465
|
|
|
// Get first unused monitor section. |
466
|
|
|
$section = $db->nextID(); |
467
|
|
|
|
468
|
|
|
// If all information is available, create window object. |
469
|
|
|
|
470
|
|
|
$new['id'] = $section; |
471
|
|
|
$new['section'] = $section; |
472
|
|
|
|
473
|
|
|
if ($section <= 4) { |
474
|
|
|
$new['state'] = "active"; |
475
|
|
|
} else { |
476
|
|
|
// All sections are used, so there is no free one for the new window. |
477
|
|
|
$new['state'] = "inactive"; |
478
|
|
|
// We could hide the new window immediately, but don't do it here: |
479
|
|
|
// Each new window will be shown in the middle of the screen. |
480
|
|
|
//~ wmHide($new_window_id); |
481
|
|
|
//~ trace("addNewWindow: hide new window $new_window_id"); |
482
|
|
|
} |
483
|
|
|
|
484
|
|
|
// $new['file'] = $active_window; (?) |
485
|
|
|
|
486
|
|
|
// TODO: check how to insert the userid for all content, not just vnc. |
487
|
|
|
// Perhaps better add to array in upload.php ? |
488
|
|
|
$userid = ""; |
489
|
|
|
$queryid = $db->querySingle('SELECT user.userid FROM user WHERE user.name="' . $new['userid'] . '"'); |
490
|
|
|
if (!empty($queryid)) { |
491
|
|
|
$userid = $queryid; |
492
|
|
|
} else { |
493
|
|
|
$userid = "all"; |
494
|
|
|
} |
495
|
|
|
|
496
|
|
|
$myWindow = array( |
497
|
|
|
$new['id'], |
498
|
|
|
$new_window_id, |
499
|
|
|
$new['section'], |
500
|
|
|
$new['state'], |
501
|
|
|
$new['file'], |
502
|
|
|
$new['handler'], |
503
|
|
|
$userid, |
504
|
|
|
$new['date'] |
505
|
|
|
); |
506
|
|
|
|
507
|
|
|
// Save window in database. |
508
|
|
|
$db->insertWindow($myWindow); |
509
|
|
|
|
510
|
|
|
setLayout(); |
511
|
|
|
} |
512
|
|
|
|
513
|
|
|
/** |
514
|
|
|
* @param array<string,string> $w |
515
|
|
|
*/ |
516
|
|
|
function createNewWindowSafe(array $w): void |
517
|
|
|
{ |
518
|
|
|
require_once 'DBConnector.class.php'; |
519
|
|
|
$db = palma\DBConnector::getInstance(); |
|
|
|
|
520
|
|
|
|
521
|
|
|
$inFile = $w['file']; |
522
|
|
|
if (!file_exists($inFile)) { |
523
|
|
|
trace("createNewWindowSafe: " . escapeshellarg($inFile) . " is not a file, aborting display"); |
524
|
|
|
return; |
525
|
|
|
} |
526
|
|
|
|
527
|
|
|
require_once 'FileHandler.class.php'; |
528
|
|
|
list ($handler, $targetFile) = |
529
|
|
|
palma\FileHandler::getFileHandler($inFile); |
530
|
|
|
trace("createNewWindowSafe: file is now $targetFile, its handler is $handler"); |
531
|
|
|
|
532
|
|
|
$window = array( |
533
|
|
|
"id" => "", |
534
|
|
|
"win_id" => "", |
535
|
|
|
"name" => "", |
536
|
|
|
"state" => "", |
537
|
|
|
"file" => $targetFile, |
538
|
|
|
"handler" => $handler, |
539
|
|
|
"userid" => "", |
540
|
|
|
"date" => $w['date']); |
541
|
|
|
|
542
|
|
|
createNewWindow($window); |
543
|
|
|
} |
544
|
|
|
|
545
|
|
|
/** |
546
|
|
|
* @param array<string,string> $w |
547
|
|
|
*/ |
548
|
|
|
function createNewWindow($w): void |
549
|
|
|
{ |
550
|
|
|
// '$w' already contains 'file', 'handler' and 'date'. |
551
|
|
|
// 'win_id', 'section' have to be defined afterwards. |
552
|
|
|
|
553
|
|
|
require_once 'DBConnector.class.php'; |
554
|
|
|
$db = palma\DBConnector::getInstance(); |
|
|
|
|
555
|
|
|
|
556
|
|
|
$handler = $w['handler']; |
557
|
|
|
// TODO: use escapeshellarg() for filename. |
558
|
|
|
$filename = $w['file']; |
559
|
|
|
|
560
|
|
|
$cmd = "$handler " . escapeshellarg($filename); |
561
|
|
|
displayCommand("/usr/bin/nohup $cmd >/dev/null 2>&1 &"); |
562
|
|
|
|
563
|
|
|
addNewWindow($w); |
564
|
|
|
monitor("control.php: createNewWindow"); |
565
|
|
|
} |
566
|
|
|
|
567
|
|
|
function processRequests(): void |
568
|
|
|
{ |
569
|
|
|
monitor("control.php: processRequests"); |
570
|
|
|
|
571
|
|
|
require_once 'DBConnector.class.php'; |
572
|
|
|
$db = palma\DBConnector::getInstance(); |
573
|
|
|
|
574
|
|
|
if (array_key_exists('window', $_REQUEST)) { |
575
|
|
|
// All windows related commands must start with window=. |
576
|
|
|
|
577
|
|
|
$windownumber = escapeshellcmd($_REQUEST['window']); |
578
|
|
|
$windowname = false; |
579
|
|
|
$windowhex = 0; |
580
|
|
|
// TODO: $win_id und $windowname können vermutlich zusammengefasst werden. |
581
|
|
|
$win_id = 0; |
582
|
|
|
|
583
|
|
|
if ($windownumber != 'vncwin') { |
584
|
|
|
// This is the normal case. |
585
|
|
|
// Special handling is needed when called with window=vncwin, see below. |
586
|
|
|
$window = intval($windownumber) - 1; |
587
|
|
|
|
588
|
|
|
$win_id = $db->getWindowIDBySection($windownumber); |
589
|
|
|
$windowlist = windowList(); |
590
|
|
|
|
591
|
|
|
if (count($windowlist) == 0) { |
592
|
|
|
trace("processRequests: no window found for command"); |
593
|
|
|
} elseif (is_numeric($window) && count($windowlist) <= $window) { |
594
|
|
|
trace("processRequests: window $window is out of bounds"); |
595
|
|
|
} elseif (!is_numeric($window)) { |
596
|
|
|
trace("processRequests: unhandled window $window"); |
597
|
|
|
} else { |
598
|
|
|
trace("processRequests: command window"); |
599
|
|
|
$windowname = $windowlist[$window]; |
600
|
|
|
$windowhex = hexdec($windowname); |
601
|
|
|
} |
602
|
|
|
} |
603
|
|
|
|
604
|
|
|
if ($windowname && array_key_exists('key', $_REQUEST)) { |
605
|
|
|
$key = escapeshellcmd($_REQUEST['key']); |
606
|
|
|
trace("processRequests: key '$key' in window '$windownumber'"); |
607
|
|
|
wmShow($windowname); |
608
|
|
|
// activateControls($windowhex); |
609
|
|
|
// displayCommand("xdotool windowfocus $windowhex key $key"); |
610
|
|
|
|
611
|
|
|
// trying mousemove and click for better vnc control |
612
|
|
|
displayCommand("xdotool mousemove --window $windowhex 100 100 " . |
613
|
|
|
"key $key"); |
614
|
|
|
} |
615
|
|
|
|
616
|
|
|
if ($windowname && array_key_exists('keydown', $_REQUEST)) { |
617
|
|
|
// TODO: keydown is currently mapped to key because we had problems |
618
|
|
|
// with sticking keys (no keyup seen). This should be fixed by a |
619
|
|
|
// better event handling. |
620
|
|
|
$key = escapeshellcmd($_REQUEST['keydown']); |
621
|
|
|
trace("processRequests: keydown '$key' in window '$windownumber'"); |
622
|
|
|
wmShow($windowname); |
623
|
|
|
// activateControls($windowhex); |
624
|
|
|
// displayCommand("xdotool windowfocus $windowhex key $key"); |
625
|
|
|
|
626
|
|
|
// trying mousemove and click for better vnc control |
627
|
|
|
displayCommand("xdotool mousemove --window $windowhex 100 100 " . |
628
|
|
|
"key $key"); |
629
|
|
|
//~ displayCommand("xdotool windowfocus $windowhex keydown $key"); |
630
|
|
|
} |
631
|
|
|
|
632
|
|
|
if ($windowname && array_key_exists('keyup', $_REQUEST)) { |
633
|
|
|
// TODO: keyup is currently ignored, see comment above. |
634
|
|
|
$key = escapeshellcmd($_REQUEST['keyup']); |
635
|
|
|
trace("processRequests: keyup '$key' in window '$windownumber'"); |
636
|
|
|
// activateControls($windowhex); |
637
|
|
|
//~ wmShow($windowname); |
638
|
|
|
//~ displayCommand("xdotool windowfocus $windowhex keyup $key"); |
639
|
|
|
} |
640
|
|
|
|
641
|
|
|
if (array_key_exists('delete', $_REQUEST)) { |
642
|
|
|
$delete = addslashes($_REQUEST['delete']); |
643
|
|
|
trace("processRequests: delete='$delete', close window $windownumber"); |
644
|
|
|
|
645
|
|
|
if ($delete == "VNC") { |
646
|
|
|
trace("processRequests: delete vnc window"); |
647
|
|
|
// call via daemon: ?window=vncwin&delete=VNC&vncid=123 |
648
|
|
|
$win_id = escapeshellcmd($_REQUEST['vncid']); // = hexWindow in database, but not on screen |
649
|
|
|
trace("VNC via Daemon ... id=$win_id"); |
650
|
|
|
} elseif (strstr($delete, "http")) { |
651
|
|
|
trace("processRequests: delete browser window"); |
652
|
|
|
} elseif (preg_match('/(^\w{3,}@\w{1,})/', $delete)) { |
653
|
|
|
trace("processRequests: delete vnc client from webinterface"); |
654
|
|
|
// call via webinterface |
655
|
|
|
$win_id = $db->querySingle("SELECT win_id FROM window WHERE file='$delete' AND handler='vnc'"); |
656
|
|
|
} else { |
657
|
|
|
// Restrict deletion to files known in the db. |
658
|
|
|
// TODO: check if given file and section match the values in the DB, |
659
|
|
|
// but currently, both those values can be ambiguous |
660
|
|
|
$file_in_db = $db->querySingle("SELECT id FROM window WHERE file='$delete'"); |
661
|
|
|
$delete = str_replace(" ", "\ ", $delete); |
662
|
|
|
trace("processRequests: file in db: $file_in_db"); |
663
|
|
|
if ($file_in_db) { |
664
|
|
|
if(file_exists($delete)) { |
665
|
|
|
trace("processRequests: delete file $delete"); |
666
|
|
|
unlink($delete); |
667
|
|
|
} |
668
|
|
|
} else { |
669
|
|
|
trace("processRequests: given file not present in database!"); |
670
|
|
|
} |
671
|
|
|
} |
672
|
|
|
wmClose($win_id); |
|
|
|
|
673
|
|
|
$db->deleteWindow($win_id); |
|
|
|
|
674
|
|
|
} |
675
|
|
|
|
676
|
|
|
if (array_key_exists('closeOrphans', $_REQUEST)) { |
677
|
|
|
// win_ids in db |
678
|
|
|
$windows_in_db = $db->getWindows(); |
679
|
|
|
$db_ids = array(); |
680
|
|
|
|
681
|
|
|
if (count($windows_in_db) > 0) { |
682
|
|
|
foreach ($windows_in_db as $win) { |
683
|
|
|
array_push($db_ids, $win['win_id']); |
684
|
|
|
} |
685
|
|
|
} |
686
|
|
|
|
687
|
|
|
// win_ids on screen |
688
|
|
|
$screen_ids = windowListOnScreen(); |
689
|
|
|
|
690
|
|
|
// orphaned windows |
691
|
|
|
$orphan_ids = array_diff($screen_ids, $db_ids); |
692
|
|
|
|
693
|
|
|
if (count($orphan_ids) > 0) { |
694
|
|
|
// close windows on screen not existing in database |
695
|
|
|
foreach ($orphan_ids as $id) { |
696
|
|
|
wmClose($id); |
697
|
|
|
} |
698
|
|
|
} |
699
|
|
|
} |
700
|
|
|
|
701
|
|
|
if (array_key_exists('toggle', $_REQUEST)) { |
702
|
|
|
// Change window state from visible to invisible and vice versa. |
703
|
|
|
$state = $db->getWindowState($win_id); |
704
|
|
|
trace("processRequests: toggle window $windownumber, id=$win_id, state=$state"); |
705
|
|
|
if ($state == "active") { |
706
|
|
|
wmHide($win_id); |
707
|
|
|
$db->setWindowState($win_id, "inactive"); |
708
|
|
|
} else { |
709
|
|
|
wmShow($win_id); |
710
|
|
|
$db->setWindowState($win_id, "active"); |
711
|
|
|
} |
712
|
|
|
} |
713
|
|
|
} elseif (array_key_exists('layout', $_REQUEST)) { |
714
|
|
|
setLayout(escapeshellcmd($_REQUEST['layout'])); |
715
|
|
|
} elseif (array_key_exists('logout', $_REQUEST)) { |
716
|
|
|
doLogout($_REQUEST['logout']); |
717
|
|
|
} elseif (array_key_exists('newVncWindow', $_REQUEST)) { |
718
|
|
|
// TODO: Better write new code for VNC window. |
719
|
|
|
addNewWindow(unserialize(urldecode($_REQUEST['newVncWindow']))); |
720
|
|
|
} elseif (array_key_exists('newWindow', $_REQUEST)) { |
721
|
|
|
createNewWindowSafe(unserialize(urldecode($_REQUEST['newWindow']))); |
722
|
|
|
} |
723
|
|
|
|
724
|
|
|
if (array_key_exists('switchWindows', $_REQUEST)) { |
725
|
|
|
$before = escapeshellcmd($_REQUEST['before']); |
726
|
|
|
$after = escapeshellcmd($_REQUEST['after']); |
727
|
|
|
trace("processRequests: switchWindows $before -> $after"); |
728
|
|
|
|
729
|
|
|
// exchange section |
730
|
|
|
$win_id1 = $db->getWindowIDBySection($before); |
731
|
|
|
$win_id2 = $db->getWindowIDBySection($after); |
732
|
|
|
|
733
|
|
|
$db->updateWindow($win_id1, 'section', $after); |
734
|
|
|
$db->updateWindow($win_id2, 'section', $before); |
735
|
|
|
|
736
|
|
|
debug("processRequests: updating database $win_id1 section=$after"); |
737
|
|
|
debug("processRequests: updating database $win_id2 section=$before"); |
738
|
|
|
|
739
|
|
|
// Update display (no layout change). |
740
|
|
|
setLayout(); |
741
|
|
|
} |
742
|
|
|
|
743
|
|
|
if (array_key_exists('openURL', $_REQUEST)) { |
744
|
|
|
$openURL = escapeshellcmd($_REQUEST['openURL']); |
745
|
|
|
trace("processRequests: openURL $openURL"); |
746
|
|
|
|
747
|
|
|
// If URL leads to pdf file, download it and treat as upload |
748
|
|
|
$headers = get_headers($openURL, PHP_MAJOR_VERSION < 8 ? 1 : true); |
|
|
|
|
749
|
|
|
if ($headers["Content-Type"] == "application/pdf") { |
750
|
|
|
debug("processRequests: url seems to lead to a pdf file, so downloading it..."); |
751
|
|
|
$temp_name = basename($openURL); |
752
|
|
|
$temp_dir = "/tmp"; |
753
|
|
|
file_put_contents("$temp_dir/$temp_name", file_get_contents($openURL)); |
754
|
|
|
$mimetype = mime_content_type("$temp_dir/$temp_name"); |
755
|
|
|
debug("processRequests: mimetype is $mimetype"); |
756
|
|
|
if ($mimetype == "application/pdf") { |
757
|
|
|
$_FILES['file']['name'] = "$temp_name"; |
758
|
|
|
$_FILES['file']['tmp_name'] = "$temp_dir/$temp_name"; |
759
|
|
|
$_FILES['file']['error'] = "downloaded_from_url"; |
760
|
|
|
debug("processRequests: handing over to upload.php"); |
761
|
|
|
include 'upload.php'; |
762
|
|
|
} else { |
763
|
|
|
debug("processRequests: deleting file"); |
764
|
|
|
unlink("$temp_dir/$temp_name"); |
765
|
|
|
} |
766
|
|
|
} else { |
767
|
|
|
$dt = new DateTime(); |
768
|
|
|
$date = $dt->format('Y-m-d H:i:s'); |
769
|
|
|
$window = array( |
770
|
|
|
"id" => "", |
771
|
|
|
"win_id" => "", |
772
|
|
|
"section" => "", |
773
|
|
|
"state" => "", |
774
|
|
|
"file" => $openURL, |
775
|
|
|
"handler" => "palma-browser", |
776
|
|
|
"userid" => "", |
777
|
|
|
"date" => $date |
778
|
|
|
); |
779
|
|
|
createNewWindow($window); |
780
|
|
|
} |
781
|
|
|
} |
782
|
|
|
|
783
|
|
|
// TODO: check if query redundant? |
784
|
|
|
if (array_key_exists('closeAll', $_REQUEST)) { |
785
|
|
|
$close = $_REQUEST['closeAll']; |
786
|
|
|
trace("processRequests: closeAll $close"); |
787
|
|
|
closeAll(); |
788
|
|
|
} |
789
|
|
|
} |
790
|
|
|
|