1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
|
<?php
// Gentoaster web interface config processor
// Licensed under GPL v3, see COPYING file
require_once "config.php";
$ipaddress = filter_input(
INPUT_SERVER,
"REMOTE_ADDR",
FILTER_VALIDATE_IP
);
if (RECAPTCHA_ENABLED) {
require_once "recaptcha.php";
$challenge = filter_input(
INPUT_POST,
"recaptcha_challenge_field",
FILTER_UNSAFE_RAW
);
$response = filter_input(
INPUT_POST,
"recaptcha_response_field",
FILTER_UNSAFE_RAW
);
$resp = recaptcha_check_answer(
RECAPTCHA_PRIVATE_KEY,
$ipaddress,
$challenge,
$response
);
if (!$resp->is_valid) {
die("CAPTCHA was incorrect");
}
}
function sanitize_shellarg($arg)
{
$arg = str_replace("\r\n", " ", $arg);
$arg = str_replace("\n", " ", $arg);
return escapeshellarg($arg);
}
$sfi = array("options" => "sanitize_shellarg");
$buildID = uniqid();
$bootMegabytes = filter_input(INPUT_POST, "boot_size", FILTER_VALIDATE_INT);
$swapMegabytes = filter_input(INPUT_POST, "swap_size", FILTER_VALIDATE_INT);
$rootMegabytes = filter_input(INPUT_POST, "root_size", FILTER_VALIDATE_INT);
$timezone = filter_input(INPUT_POST, "timezone", FILTER_CALLBACK, $sfi);
$keyboard = filter_input(INPUT_POST, "keyboard", FILTER_CALLBACK, $sfi);
$hostname = filter_input(INPUT_POST, "hostname", FILTER_CALLBACK, $sfi);
$username = filter_input(INPUT_POST, "username", FILTER_CALLBACK, $sfi);
$password = filter_input(INPUT_POST, "password", FILTER_CALLBACK, $sfi);
$rootPass = filter_input(INPUT_POST, "rootpassword", FILTER_CALLBACK, $sfi);
$packagesList = filter_input(INPUT_POST, "packages", FILTER_CALLBACK, $sfi);
$use = filter_input(INPUT_POST, "use", FILTER_CALLBACK, $sfi);
$puse = filter_input(INPUT_POST, "puse", FILTER_CALLBACK, $sfi);
$features = filter_input(INPUT_POST, "features", FILTER_CALLBACK, $sfi);
$keywords = filter_input(INPUT_POST, "keywords", FILTER_CALLBACK, $sfi);
$outputFormat = filter_input(INPUT_POST, "format", FILTER_CALLBACK, $sfi);
$email = filter_input(INPUT_POST, "email", FILTER_VALIDATE_EMAIL);
$iniString = "[vmconfig]
BUILD_ID='$buildID'
BOOT_MEGABYTES='$bootMegabytes'
SWAP_MEGABYTES='$swapMegabytes'
ROOT_MEGABYTES='$rootMegabytes'
TIMEZONE=$timezone
KEYBOARD=$keyboard
HOSTNAME=$hostname
ROOT_PASSWORD=$rootPass
DEFAULT_USERNAME=$username
DEFAULT_PASSWORD=$password
USE_FLAGS=$use
PACKAGE_USE=$puse
FEATURES=$features
PACKAGE_ACCEPT_KEYWORDS=$keywords
PACKAGES_LIST=$packagesList
OUTPUT_FORMAT=$outputFormat";
$client = new GearmanClient();
$client->addServer();
$handle = $client->doBackground("invoke_image_build", $iniString);
$db = new mysqli(
MYSQL_HOSTNAME,
MYSQL_USERNAME,
MYSQL_PASSWORD,
MYSQL_DATABASE
);
if (mysqli_connect_errno()) {
die("Could not connect to database ".mysqli_connect_error());
}
$query = "INSERT INTO builds (id, handle, ipaddress, email) ".
"VALUES(?, ?, ?, ?)";
$stmt = $db->prepare($query);
$stmt->bind_param("ssss", $buildID, $handle, $ipaddress, $email);
$stmt->execute();
$stmt->close();
$db->close();
header("Location: finished.php?uuid=".$buildID);
|