Viewing file: 
manage.cgi (11.5 KB) -rwxr-xr-xSelect action/file-type:
(
+) |
(
+) |
(
+) |
Code (
+) |
Session (
+) |
(
+) |
SDB (
+) |
(
+) |
(
+) |
(
+) |
(
+) |
(
+) |
#!/usr/bin/perl
use DBI();
use CGI qw(:standard);
use CGI::Cookie;
$mpp = "15";
$euser = param("edit");
$page = param("page");
$show = param("show");
$nlogin = param("login");
$nuser = param("user");
$ndom = param("dom");
$npass = param("pass");
$nquota = param("quota");
$nmaildir = param("maildir");
$nexp = param("exp");
$nav = param("av");
$nas = param("as");
$ncom = param("comment");
$edt = param("edt");
$delete = param("delete");
$fnn=0;
$authl = param("authl");
$authp = param("authp");
system "./auth.cgi manage.cgi $authl $authp";
$retcode = $? / 256;
if ($retcode ne "1") {exit;}
$dshow = $show;
if ($page eq "") {$page = "0";}
$page = $page * $mpp;
my $cooke = cookie('mail.miranet');
if ($cooke eq "") {print "<html><meta http-equiv=\"refresh\" content=\"0\"></html>"; exit;}
if ($cooke eq "0") {print "<html><body><h1>Forbidden</h1><hr>Недостаточно прав"; exit;}
#print "Content-type: text/html\n\n";
print "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">
";
system("./ustat $rip |grep 1 > $rip");
open(patt,"<./patt_n1.html")||die "Pattern file 1 not found";
while(<patt>)
{
print;
}
close(patt);
$database="mail";
$hostname="127.0.0.1";
$port="3306";
$dbuser="root";
$dbpasswd="zopa25703";
$dsn = "DBI:mysql:database=$database;host=$hostname;port=$port";
$dbh = DBI->connect_cached($dsn, $dbuser, $dbpasswd) || die;
if ($euser eq "") {
if ($nuser ne "")
{
$login = sprintf("%s@%s", $nlogin, $ndom);
$nquota = $nquota * 1024 * 1024;
if ($delete eq "") {
$dbh->do("UPDATE users SET `email`='$login',`login`='$nuser',`passwd`='$npass',`quota`='${nquota}S',`maildir`='$nmaildir',`expired`='$nexp',`antivirus`='$nav',`antispam`='$nas',`comment`='$ncom' WHERE `email`='$edt'");
}
if ($delete eq "on") {
$dbh->do("DELETE FROM users WHERE `email`='$edt'");
}
}
if ($cooke eq "0") {$alev = "Нулевой";}
if ($cooke eq "1") {$alev = "Полный";}
if ($cooke ne "0" and $cooke ne "1" and $cooke ne "") {$alev = "Ограниченный ($cooke)";}
print "<center><table border=0 cellspacing=0 bgcolor=#005090><tr><td bgcolor=#003060>
<font face=\"arial\" color=#ffffff>  Уровень доступа:  <font color=#ffff00> $alev
  <a href=\"logout.cgi\"><font color=#ffffff>[Выход]</font></a>
</td></tr><tr><td bgcolor=#004070>
<table border=0 cellspacing=1 valign=top align=center cellpadding=6>";
if ($cooke ne "1") {$dshow = $cooke; $show = $cooke;}
if ($cooke eq "1")
{
print "<tr><td>
<form name=\"form1\" action=\"manage.cgi\" method=\"POST\">
<font color=#ffffff face=\"arial\">Показать:</td><td> <select name=\"show\">";
print "<option value=$domain >Всё</option>";
$sth = $dbh->prepare("SELECT * FROM transport");
$sth->execute();
while (my ($domain) = $sth->fetchrow_array())
{
if ($show eq $domain) {$dsel = "selected";} else {$dsel = "";}
print "<option value=$domain $dsel>$domain</option>";
}
print "</select><input type=\"submit\" value=\" > \" />";
print "</td></tr>";
}
print "<tr>
<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Просмотр</font></b></td>
<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Почтовый ящик</font></b></td>
<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Имя пользователя</font></b></td>";
if ($cooke eq "1") {print "<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Пароль</font></b></td>";}
print "<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Объём (МБ)</font></b></td>
<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Каталог</font></b></td>
<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Состояние</font></b></td>
<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Антивирус</font></b></td>
<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Антиспам</font></b></td>
<td bgcolor=#005090><b><font color=#ffff00 face=\"arial\">Коментарий</font></b></td>
</tr>";
if ($cooke ne "1")
{
$sth = $dbh->prepare("SELECT COUNT(*) FROM transport WHERE domain=\"$cooke\"");
$sth->execute();
my ($cnt) = $sth->fetchrow_array();
$dcount = $cnt;
if ($dcount == "0")
{
print "</table><h3><font face=\"arial\" color=#dd4400>Ошибка: Домен $cooke не обслуживается</font></h3></table>";
$dbh->disconnect();
system("./ustat $rip |grep 1 > $rip");
open(patt,"<./patt_n2.html")||die "Pattern file 2 not found";
while(<patt>)
{
print;
}
close(patt);
exit(0);
}
}
if ($show eq "")
{
$sth = $dbh->prepare("SELECT COUNT(*) FROM users");
$sth->execute();
my ($cnt) = $sth->fetchrow_array();
$count = $cnt;
# print ("$cnt");
$sth = $dbh->prepare("SELECT * FROM users ORDER BY email LIMIT $page,$mpp");
$sth->execute();
}
else
{
$show = sprintf ("@%s", $show);
$sth = $dbh->prepare("SELECT COUNT(*) FROM users WHERE email LIKE '%$show'");
$sth->execute();
my ($cnt) = $sth->fetchrow_array();
$count = $cnt;
$sth = $dbh->prepare("SELECT * FROM users WHERE email LIKE '%$show' ORDER BY email LIMIT $page,$mpp");
$sth->execute();
}
while (my ($login, $user, $pass, $quota, $maildir, $exp, $av, $as, $comment) = $sth->fetchrow_array())
{
$quota = sprintf("%.3f",(($quota/1024)/1024));
$exp1 = $exp;
if ($exp eq "0") {$exp = "Активен"; $fc="#ffffff"; $fc1="#00ddff";} else {$exp = "Блокирован"; $fc="#ff7777"; $fc1="#eeaacc";}
if ($av eq "1") {$av = "Да";} else {$av = "Нет";}
if ($as eq "1") {$as = "Да";} else {$as = "Нет";}
# <td bgcolor=#005797><a href=./open.cgi?login=$user><font color=$fc1 face=\"arial\">Просмотр</font></a></td>
$fn=sprintf("form%03d",$fnn);
$fnn++;
@chars = ( "a" .. "f", 0 .. 9 );
$token = join("", @chars[ map{ rand @chars }(1 .. 32) ]);
print "<tr>
<td bgcolor=#005797>";
if ($exp1 eq "0")
{
print "<form name=\"$fn\" id=\"$fn\" action=\"http://mail.miranet.ru/\" method=\"post\">
<input type=\"hidden\" name=\"_user\" value=\"$user\" id=\"rcmloginuser\">
<input type=\"hidden\" name=\"_pass\" value=\"$pass\" id=\"rcmloginpwd\">
<input type=\"hidden\" name=\"_task\" value=\"login\">
<input type=\"hidden\" name=\"_action\" value=\"login\">
<input type=\"hidden\" name=\"_timezone\" id=\"rcmlogintz\" value=\"_default_\" />
<input type=\"hidden\" name=\"_dstactive\" id=\"rcmlogindst\" value=\"_default_\" />
<input type=\"hidden\" name=\"_url\" id=\"rcmloginurl\" value=\"\" />
<input type=\"hidden\" name=\"_token\" value=\"$token\" />
<a href=\"#click\" onClick=document.getElementById('$fn').submit();><font color=$fc1 face=\"arial\">Просмотр</font></a></form>"
}
print "</td>
<td bgcolor=#005797><a href=./manage.cgi?edit=$login><font color=$fc1 face=\"arial\">$login</font></a></td>
<td bgcolor=#005797><font color=$fc face=\"arial\">$user</font></td>";
if ($cooke eq "1") {print "<td bgcolor=#005797><font color=$fc face=\"arial\"><acronym title=\"$pass\">********</acronym></font></td>";}
print "<td bgcolor=#005797 align=right><font color=$fc face=\"arial\">$quota</font></td>
<td bgcolor=#005797><font color=$fc face=\"arial\">$maildir</font></td>
<td bgcolor=#005797 align=center><font color=$fc face=\"arial\">$exp</font></td>
<td bgcolor=#005797 align=center><font color=$fc face=\"arial\">$av</font></td>
<td bgcolor=#005797 align=center><font color=$fc face=\"arial\">$as</font></td>
<td bgcolor=#005797><font color=$fc face=\"arial\">$comment</font></td>
</tr>";
}
print "</td></tr><tr><td><font color=#ffffff face=\"arial\">Всего $count</td></tr> </table>";
$pagecnt = int($count / $mpp);
$pcn = ($count / $mpp);
if ($pagecnt ne $pcn) {$pagecnt++;}
$i="1";
print "</td></tr><tr><td><font color=#ffffff face=\"arial\">Страници: ";
while ($i ne $pagecnt+1)
{
$pgn = $i-1;
print "<a href=\"manage.cgi?page=$pgn&show=$dshow\">";
if ($i eq ($page/$mpp)+1)
{
print ("<b><font color=#00ddff>[ $i ]</font></b>");
}
else
{
print ("<font color=#ffffff>[ $i ]</font>");
}
print "</a>  ";
$i++;
}
print "</table>";
print "<hr></center><b>";
if ($cooke eq "1") {print "| <a href=\"domain.cgi\">Настройка доменов</a> | <a href=\"users.cgi\">Пользователи</a> ";}
print "| <a href=\"mail.cgi\">Регистрация нового ящика</a> |</b>";
$sth->finish();
}
if ($euser ne "" and $nuser eq "")
{
$sth = $dbh->prepare("SELECT * FROM users WHERE email=\"$euser\"");
$sth->execute();
($login, $user, $pass, $quota, $maildir, $exp, $av, $as, $comment) = $sth->fetchrow_array();
$sth->finish();
($l1, $l2) = split("@", $login);
print "<center><table border=0 cellspacing=0 bgcolor=#005090><tr><td>
<tr><td bgcolor=#004070><center><font color=#ffff00 face=\"arial\" size=4><b>Редактирование $login</b></font></td></tr><tr><td>
<table border=0><form name=\"form1\" action=\"manage.cgi\" method=\"POST\">
<tr><td><font color=#ffffff face=\"arial\">Почтовый ящик</font></td><td><b><input type=\"text\" name=\"login\" value=\"$l1\"><font color=#ffffff face=\"arial\"> \@ </font><select name=\"dom\">";
$sth = $dbh->prepare("SELECT * FROM transport");
$sth->execute();
while (my ($domain) = $sth->fetchrow_array())
{
if ($cooke eq "1"){
$dop="";
if ($domain eq $l2) {$dop="selected";}
print "<option value=$domain $dop>$domain</option>";
}
else {
if ($cooke eq $domain) {print "<option value=$domain>$domain</option>";}
}
}
$quota = sprintf("%.0f",(($quota/1024)/1024));
if ($exp eq "0") {$exp1 = "selected";} else {$exp2 = "selected";}
if ($av eq "1") {$av1 = "selected";} else {$av2 = "selected";}
if ($as eq "1") {$as1 = "selected";} else {$as2 = "selected";}
print "</select></td></tr>
<tr><td><font color=#ffffff face=\"arial\">Имя пользователя</font></td><td><input type=\"text\" name=\"user\" value=\"$user\"></td></tr>
<tr><td><font color=#ffffff face=\"arial\">Пароль</font></td><td><input type=\"password\" name=\"pass\" value=\"$pass\"></td></tr>
<tr><td><font color=#ffffff face=\"arial\">Объём</font></td><td><input type=\"text\" name=\"quota\" value=\"$quota\"><font color=#ffffff face=\"arial\">  МБ (не более 1024)</font></td></tr>
<tr><td><font color=#ffffff face=\"arial\">Домашний каталог</font></td><td><input type=\"text\" name=\"maildir\" value=\"$maildir\"></td></tr>
<tr><td><font color=#ffffff face=\"arial\">Состояние</font></td><td><select name=\"exp\"><option value=\"0\" $exp1>Активен</option><option value=\"1\" $exp2>Блокирован</option></select></td></tr>
<tr><td><font color=#ffffff face=\"arial\">Антивирус</font></td><td><select name=\"av\"><option value=\"1\" $av1>Да</option><option value=\"0\" $av2>Нет</option></select></td></tr>
<tr><td><font color=#ffffff face=\"arial\">Антиспам</font></td><td><select name=\"as\"><option value=\"1\" $as1>Да</option><option value=\"0\" $as2>Нет</option></select></td></tr>
<tr><td><font color=#ffffff face=\"arial\">Коментарий</font></td><td><input type=\"text\" name=\"comment\" value=\"$comment\"></td></tr>
<input type=\"hidden\" name=\"edt\" value=\"$euser\">
<tr><td><hr></td><td><hr></td></tr>
<tr><td></td><td><input type=\"submit\" name=\"chg\" value=\"Изменить\" />
<br><font color=#ffffff face=\"arial\"><input type=\"checkbox\" name=\"delete\"> Удалить</font>
</td></tr>
</table></table>";
print "<hr></center><b>| <a href=\"manage.cgi\">Учётные записи</a> |";
if ($cooke eq "1") {print " <a href=\"domain.cgi\">Настройка доменов</a> |";}
print "</b>";
}
$dbh->disconnect();
system("./ustat $rip |grep 1 > $rip");
open(patt,"<./patt_n2.html")||die "Pattern file 2 not found";
while(<patt>)
{
print;
}
close(patt);
