index.php

<?php

/* pfSense login check */
include_once("auth.inc");
include_once("priv.inc");

/* Authenticate user - exit if failed */
if (!session_auth()) {
    require_once("authgui.inc");
    display_login_form();
    exit;
}
/* ------------------- */

error_reporting(E_ALL & ~E_NOTICE & ~E_DEPRECATED);
date_default_timezone_set('Europe/Istanbul');

require 'lib/limonade.php';
require 'lib/idiorm.php';
require 'lib/paris.php';
require 'lib/validate.class.php';
require 'models/user.php';
require 'models/group.php';

// örnek dosyalardan asıl dosyaları oluştur
if (!file_exists(dirname(__FILE__) . '/db/hotspot.db')) {
    copy(dirname(__FILE__) . '/db/hotspot.sample.db', dirname(__FILE__) . '/db/hotspot.db');
}
if (!file_exists(dirname(__FILE__) . '/hotspot.ini')) {
    copy(dirname(__FILE__) . '/hotspot.sample.ini', dirname(__FILE__) . '/hotspot.ini');
}
if (!file_exists(dirname(__FILE__) . '/settings.inc')) {
    copy(dirname(__FILE__) . '/settings.sample.inc', dirname(__FILE__) . '/settings.inc');
}
if (!file_exists(dirname(__FILE__) . '/lang/tr.inc')) {
    copy(dirname(__FILE__) . '/lang/tr.sample.inc', dirname(__FILE__) . '/lang/tr.inc');
}
if (!file_exists(dirname(__FILE__) . '/lang/en.inc')) {
    copy(dirname(__FILE__) . '/lang/en.sample.inc', dirname(__FILE__) . '/lang/en.inc');
}
$settings = include 'settings.inc';
$hotspot = parse_ini_file('hotspot.ini');

function configure()
{
    $dir = dirname(__FILE__);

    ORM::configure('sqlite:'.$dir.'/db/hotspot.db');

    option('views_dir', $dir.'/views');

    layout('layouts/admin.html.php');
    error_layout('layouts/admin.html.php');

    global $hotspot;
    set('hotspot', $hotspot);
}

dispatch('/', 'home');
dispatch('users*', 'admin_user_index');
dispatch('filter*', 'admin_user_filter');
dispatch('permissions*', 'admin_permission_index');
dispatch('user/add', 'admin_user_add_page');
dispatch_post('user/add', 'admin_user_add');
dispatch('user/:id', 'admin_user_view');
dispatch('user/:id/update', 'admin_user_update_page');
dispatch_post('/user/:id/update', 'admin_user_update');
dispatch('user/:id/delete', 'admin_user_delete');
dispatch('groups*', 'admin_group_index');
dispatch('group/add', 'admin_group_add_page');
dispatch_post('group/add', 'admin_group_add');
dispatch('group/:id', 'admin_group_view');
dispatch('group/:id/update', 'admin_group_update_page');
dispatch_post('/group/:id/update', 'admin_group_update');
dispatch('group/:id/delete', 'admin_group_delete');
dispatch('sms*', 'admin_sms_index');
dispatch('settings', 'admin_settings');
dispatch_post('settings', 'admin_settings_save');
dispatch('lang/*', 'admin_lang');
dispatch_post('lang/*', 'admin_lang_save');
dispatch('logout', 'admin_logout');

function home()
{
    redirect_to('users');
}

function admin_user_filter()
{
    unset($_GET['filter']);
    redirect_to('users', $_GET);
}

function admin_user_index()
{
    global $settings;

    parse_str(params(0), $get);

    $users = ORM::for_table('user');
    if (!empty($get['id_number'])) {
        $users->where_like('id_number', '%'.$get['id_number'].'%');
    }
    if (!empty($get['name'])) {
        $users->where_like('name', '%'.$get['name'].'%');
    }
    if (!empty($get['surname'])) {
        $users->where_like('surname', '%'.$get['surname'].'%');
    }
    if (!empty($get['gsm'])) {
        $users->where_like('gsm', '%'.$get['gsm'].'%');
    }
    if (!empty($get['last_sms'])) {
        $users->where_raw("strftime('%d.%m.%Y', datetime(last_sms, 'unixepoch', 'localtime')) = ?", array($get['last_sms']));
    }
    if (!empty($get['expires'])) {
        $users->where_raw("strftime('%d.%m.%Y', datetime(expires, 'unixepoch', 'localtime')) = ?", array($get['expires']));
    }
    if (!empty($get['username'])) {
        $users->where_like('username', '%'.$get['username'].'%');
    }
    if (isset($get['gsm_permission']) && strlen($get['gsm_permission']) == 1) {
        $users->where('gsm_permission', $get['gsm_permission']);
    }
    if (isset($get['email_permission']) && strlen($get['email_permission']) == 1) {
        $users->where('email_permission', $get['email_permission']);
    }
    $total = $users->count();

    $users->select('user.*');

    $columns = array('id_number', 'gsm', 'last_sms', 'last_login', 'expires', 'daily_limit', 'weekly_limit', 'monthly_limit', 'yearly_limit');
    if ($settings['custom_fields']) {
        foreach (explode("\n", $settings['custom_fields']) as $field) {
            $field = explode('|', $field);
            $columns[] = $field[0];
        }
    }
    if (!empty($get['order']) && in_array($get['order'], $columns)) {
        $col = $get['order'];
    } else {
        $col = 'user.last_login';
    }
    if (!empty($get['dir']) && in_array($get['dir'], array('asc', 'desc'))) {
        $dir = $get['dir'];
    } else {
        $dir = 'desc';
    }

    $offset = (int)$settings['items_per_page'];
    if (!!empty($get['page'])) {
        $start = 0;
    } else {
        $start = $offset * ($get['page'] - 1);
    }

    $order_by_method = 'order_by_' . $dir;
    $users->$order_by_method($col)->limit($start.','.$offset);
    $users = $users->find_many();

    foreach ($users as $user) {
        $sms = ORM::for_table('sms');
        $sms->select_expr("sum(case
            when date(timestamp, 'unixepoch', 'localtime') = date('now') then 1
            else 0
            end)", 'day');
        $sms->select_expr("sum(case
            when date(timestamp, 'unixepoch', 'localtime') >= date('now', 'weekday 0', '-7 days') then 1
            else 0
            end)", 'week');
        $sms->select_expr("sum(case
            when strftime('%Y-%m', date(timestamp, 'unixepoch', 'localtime')) = strftime('%Y-%m', 'now') then 1
            else 0
            end)", 'month');
        $sms->select_expr("sum(case
            when strftime('%Y', date(timestamp, 'unixepoch', 'localtime')) = strftime('%Y', 'now') then 1
            else 0
            end)", 'year');
        $sms->where('user_id', $user->id);
        $sms = $sms->find_one();
        $user->sms = $sms;
    }

    set('users', $users);
    set('pager', pager($start, $offset, $total, 'users'));
    set('get', $get);
    set('settings', $settings);
    set('rowspan', (isset($settings['authentication']['sms']) || strpos($settings['custom_fields'], 'gsm') !== false) ? 2 : 1);
    return html('user/index.html.php');
}

function admin_user_add_page()
{
    global $settings;
    $user = Model::factory('User')->create();
    $user->fillDefaults();
    $user->password = mt_rand(100000, 999999);
    $user->expires = strtotime('+' . $settings['valid_for'] . ' ' . (isset($settings['valid_for_unit']) ? $settings['valid_for_unit'] : 'days'));
    set('user', $user);
    set('settings', $settings);
    set('title', 'Kullanıcı ekle');
    return html('user/_form.html.php');
}

function admin_user_add()
{
    global $settings;
    $user = Model::factory('User')->create();
    $user->fill($_POST['user']);

    if ($errors = $user->validate($_POST['user'], true)) {
        set('errors', $errors);
        set('user', $user);
        set('settings', $settings);
        return html('user/_form.html.php');
    }
    if ($user->save()) {
        $_SESSION['message'] = 'Kullanıcı eklendi.';
        redirect_to('user', $user->id());
    } else {
        halt(SERVER_ERROR, "Kullanıcı oluşturulması sırasında bir hata oluştu.");
    }
}

function admin_user_view($id)
{
    global $settings;
    $id = params('id');
    if (!$id) {
        halt(NOT_FOUND);
    }
    $user = Model::factory('User')->find_one($id);
    if ($user->id) {
        set('user', $user);
        set('settings', $settings);
        return html('user/view.html.php');
    } else {
        halt(NOT_FOUND, "Böyle bir kullanıcı yok.");
    }
}

function admin_user_update_page($id)
{
    global $settings;
    $user = Model::factory('User')->find_one($id);
    if ($user->id) {
        set('user', $user);
        set('settings', $settings);
        return html('user/_form.html.php');
    } else {
        halt(NOT_FOUND, 'Böyle bir kullanıcı yok.');
    }
}

function admin_user_update($id)
{
    global $settings;
    $user = Model::factory('User')->find_one($id);
    $user->fill($_POST['user']);

    if ($errors = $user->validate($_POST['user'])) {
        set('user', $user);
        set('errors', $errors);
        set('settings', $settings);
        return html('user/_form.html.php');
    }
    if ($user->save()) {
        $_SESSION['message'] = 'Kullanıcı bilgileri güncellendi.';
        redirect_to('user', $id);
    } else {
        halt(SERVER_ERROR, "Kullanıcı bilgilerinin güncellenmesi sırasında bir hata oluştu. (id:" . params('id') . ")");
    }
}

function admin_user_delete($id)
{
    $user = Model::factory('User')->find_one($id);
    $user->delete();
    $_SESSION['message'] = 'Kullanıcı silindi.';
    redirect_to('users');
}

function admin_group_index()
{
    $groups = ORM::for_table('group');

    $groups->select('group.*');
    $groups = $groups->find_many();

    set('groups', $groups);

    return html('group/index.html.php');
}

function admin_group_add_page()
{
    global $settings, $hotspot;

    $group = Model::factory('Group')->create();
    $group->fillDefaults();

    set('settings', $settings);
    set('title', 'Grup ekle');
    set('group', $group);
    set('authentication_settings_enabled', isset($hotspot['mac_grup_ayarlari']) && in_array('authentication', $hotspot['mac_grup_ayarlari']));
    set('general_settings_enabled', isset($hotspot['mac_grup_ayarlari']) && in_array('general', $hotspot['mac_grup_ayarlari']));

    return html('group/_form.html.php');
}

function admin_group_add()
{
    global $settings;
    $group = Model::factory('Group')->create();
    $group->fill($_POST['group']);

    if ($errors = $group->validate($_POST['group'], true)) {
        set('errors', $errors);
        set('group', $group);
        set('settings', $settings);
        return html('group/_form.html.php');
    }
    if ($group->save() && $group->saveSettings($_POST)) {
        $_SESSION['message'] = 'Grup eklendi.';
        redirect_to('groups');
    } else {
        halt(SERVER_ERROR, "Grup oluşturulması sırasında bir hata oluştu.");
    }
}

function admin_group_update_page($id)
{
    global $hotspot;

    $group = Model::factory('Group')->find_one($id);
    if ($group->id) {
        $settings = $group->getSettings();

        set('group', $group);
        set('settings', $settings);
        set('hotspot', $hotspot);
        set('authentication_settings_enabled', isset($hotspot['mac_grup_ayarlari']) && in_array('authentication', $hotspot['mac_grup_ayarlari']));
        set('general_settings_enabled', isset($hotspot['mac_grup_ayarlari']) && in_array('general', $hotspot['mac_grup_ayarlari']));

        return html('group/_form.html.php');
    } else {
        halt(NOT_FOUND, 'Böyle bir grup yok.');
    }
}

function admin_group_update($id)
{
    global $hotspot;

    $group = Model::factory('Group')->find_one($id);
    $group->fill($_POST['group']);

    if ($errors = $group->validate($_POST['group'])) {
        $posted_settings = $_POST;
        unset($posted_settings['group']);

        $settings = $group->getSettings($posted_settings);

        set('group', $group);
        set('errors', $errors);
        set('settings', $settings);
        set('hotspot', $hotspot);
        return html('group/_form.html.php');
    }
    if ($group->save() && $group->saveSettings($_POST)) {
        $_SESSION['message'] = 'Grup bilgileri güncellendi.';
        redirect_to('groups');
    } else {
        halt(SERVER_ERROR, "Grup bilgilerinin güncellenmesi sırasında bir hata oluştu. (id:" . params('id') . ")");
    }
}

function admin_group_delete($id)
{
    $group = Model::factory('Group')->find_one($id);
    $group->delete();
    $group->deleteSettings();
    $_SESSION['message'] = 'Grup silindi.';
    redirect_to('groups');
}

function admin_sms_index()
{
    global $settings;

    parse_str(params(0), $get);

    $orm = ORM::for_table('sms')->join('user', array('user.id', '=', 'sms.user_id'));
    if (!empty($get['gsm'])) {
        $orm->where_like('user.gsm', '%'.$get['gsm'].'%');
    }
    if (!empty($get['mac'])) {
        $orm->where_like('mac', '%'.$get['mac'].'%');
    }
    if (!empty($get['timestamp_1'])) {
        $orm->where_raw("strftime('%d.%m.%Y', datetime(timestamp, 'unixepoch', 'localtime')) between ? and ?", array($get['timestamp_1'], $get['timestamp_2']));
    }

    $total = $orm->count();

    $columns = array('gsm', 'timestamp');
    if (!empty($get['order']) && in_array($get['order'], $columns)) {
        $col = $get['order'];
    } else {
        $col = 'timestamp';
    }
    if (!empty($get['dir']) && in_array($get['dir'], array('asc', 'desc'))) {
        $dir = $get['dir'];
    } else {
        $dir = 'desc';
    }

    $offset = (int)$settings['items_per_page'];
    if (empty($get['page'])) {
        $start = 0;
    } else {
        $start = $offset * ($get['page'] - 1);
    }

    $order_by_method = 'order_by_' . $dir;
    $smss = $orm->$order_by_method($col)->limit($start.','.$offset)->find_many();

    set('smss', $smss);
    set('pager', pager($start, $offset, $total, 'smss'));
    set('get', $get);
    set('settings', $settings);
    return html('sms/index.html.php');
}

function admin_permission_index()
{
    global $settings;

    parse_str(params(0), $get);

    $orm = ORM::for_table('permission');
    if (!empty($get['gsm'])) {
        $orm->where_like('gsm', '%'.$get['gsm'].'%');
    }
    if (!empty($get['email'])) {
        $orm->where_like('email', '%'.$get['email'].'%');
    }
    if (!empty($get['mac'])) {
        $orm->where_like('mac', '%'.$get['mac'].'%');
    }
    if (!empty($get['ip'])) {
        $orm->where_like('ip', '%'.$get['ip'].'%');
    }
    if (!empty($get['timestamp_1'])) {
        $orm->where_raw("strftime('%d.%m.%Y', datetime(timestamp, 'unixepoch', 'localtime')) between ? and ?", array($get['timestamp_1'], $get['timestamp_2']));
    }

    $total = $orm->count();

    $columns = array('gsm', 'email', 'timestamp');
    if (!empty($get['order']) && in_array($get['order'], $columns)) {
        $col = $get['order'];
    } else {
        $col = 'timestamp';
    }
    if (!empty($get['dir']) && in_array($get['dir'], array('asc', 'desc'))) {
        $dir = $get['dir'];
    } else {
        $dir = 'desc';
    }

    $offset = (int)$settings['items_per_page'];
    if (empty($get['page'])) {
        $start = 0;
    } else {
        $start = $offset * ($get['page'] - 1);
    }

    $order_by_method = 'order_by_' . $dir;
    $permissions = $orm->$order_by_method($col)->limit($start.','.$offset)->find_many();

    set('permissions', $permissions);
    set('pager', pager($start, $offset, $total, 'permissions'));
    set('get', $get);
    set('settings', $settings);
    return html('permission/index.html.php');
}

function admin_settings()
{
    global $hotspot, $HTTP_SERVER_VARS;
    $username = $HTTP_SERVER_VARS['AUTH_USER'];
    $user = getUserEntry($username);
    $groups = local_user_get_groups($user);
    if (in_array($hotspot['kisitli_grup'], $groups)) {
        $_SESSION['message'] = 'Bu sayfaya erişim yetkiniz yok.';
        redirect_to('users');
    }

    global $settings;
    require 'update.php';

    set('settings', $settings);
    set('authentication_settings_enabled', true);
    set('general_settings_enabled', true);

    return html('settings.html.php');
}

function admin_settings_save()
{
    $halt = false;

    unset($_POST['__csrf_magic']);
    if ($errors = validate_settings($_POST)) {
        set('errors', $errors);
        $halt = true;
    }

    if (!$halt) {
        global $config;
        $cpzone = key($config['captiveportal']);
        if (!$cpzone) {
            $message = 'Captive Portal için "zone" kaydı oluşturulmamış!';
            $halt = true;
        }
    }

    if (!$halt) {
        if (!isset($config['captiveportal'][$cpzone]['interface'])) {
            $message = 'Captive Portal için "interface" belirlenmemiş!';
            $halt = true;
        }
    }

    if (!$halt) {
        $interfaces = explode(',', $config['captiveportal'][$cpzone]['interface']);
        $config['captiveportal'][$cpzone]['timeout'] = $_POST['session_timeout'];
        foreach ($interfaces as $interface) {
            $config['dhcpd'][$interface]['defaultleasetime'] = $_POST['session_timeout'] * 60;
            $config['dhcpd'][$interface]['maxleasetime'] = $_POST['session_timeout'] * 60 + 60;
        }
        write_config();
    }

    if ($_POST['custom_fields']) {
        $result = ORM::for_table('')->raw_query('PRAGMA table_info(user)')->find_many();
        $columns = array();
        foreach ($result as $column) {
            $columns[] = $column->name;
        }

        $custom_fields = str_replace("\r\n", "\n", $_POST['custom_fields']);

        $lang['tr'] = include 'lang/tr.inc';
        $lang['en'] = include 'lang/en.inc';

        foreach (explode("\n", $custom_fields) as $field) {
            $field = explode('|', $field);
            if (!in_array($field[0], $columns)) {
                $result = ORM::for_table('user')->raw_execute('ALTER TABLE user ADD COLUMN ' . $field[0] . ' TEXT');
            }

            foreach (array('tr', 'en') as $code) {
                if (!array_key_exists($field[0], $lang[$code])) {
                    $lang[$code][$field[0]] = $field[1];
                }
            }
        }

        file_put_contents('lang/tr.inc', '<?php' . "\n\n" . 'return ' . var_export($lang['tr'], true) . ';');
        file_put_contents('lang/en.inc', '<?php' . "\n\n" . 'return ' . var_export($lang['en'], true) . ';');
    }

    if (!$halt) {
        file_put_contents('settings.inc', '<?php' . "\n\n" . 'return ' . var_export($_POST, true) . ';');
        $settings = $_POST;
        set('settings', $settings);
        set('message', 'Ayarlar kaydedildi.');
        set('status', 'success');
    } else {
        set('settings', $_POST);
        if ($message) {
            set('message', $message);
            set('status', 'error');
        }
    }
    set('authentication_settings_enabled', true);
    set('general_settings_enabled', true);
    return html('settings.html.php');
}

function admin_lang($code)
{
    global $settings;
    set('settings', $settings);

    $lang = include 'lang/' . $code . '.inc';
    set('lang', $lang);
    set('code', $code);

    return html('lang.html.php');
}

function admin_lang_save($code)
{
    global $settings;
    set('settings', $settings);

    unset($_POST['__csrf_magic']);
    file_put_contents('lang/' . $code . '.inc', '<?php' . "\n\n" . 'return ' . var_export($_POST, true) . ';');

    $lang = include 'lang/' . $code . '.inc';
    set('lang', $lang);
    set('code', $code);

    $_SESSION['message'] = 'Ayarlar kaydedildi.';

    return html('lang.html.php');
}

function admin_logout()
{
    // unset cookies
    if (isset($_SERVER['HTTP_COOKIE'])) {
        $cookies = explode(';', $_SERVER['HTTP_COOKIE']);
        foreach ($cookies as $cookie) {
            $parts = explode('=', $cookie);
            $name = trim($parts[0]);
            setcookie($name, '', time()-1000);
            setcookie($name, '', time()-1000, '/');
        }
    }

    // redirect to index.php
    header('Location: ' . $_SERVER['REQUEST_SCHEME'] . '://' . $_SERVER['HTTP_HOST'] . ':' . $_SERVER['SERVER_PORT'] . '/index.php');
}

run();


/* Functions */

function format_date($timestamp)
{
    return $timestamp ? date('d.m.Y - H:i', $timestamp) : '';
}

function pager($start, $offset, $total, $url)
{
    parse_str(params(0), $get);

    $html = '<div id="pager">';
    $html .= '<p>Toplam: ' . $total . '</p>';
    if ($offset < $total) {
        $n = ceil($total/$offset);
        for ($i=1; $i<=$n; $i++) {
            $get['page'] = $i;
            $html .= '<a href="' . url_for($url, $get) . '"' . ($start == ($i-1)*$offset ? ' class="disabled"' : '') . '>' . $i . '</a>';
        }
    }
    $html .= '</div>';
    return $html;
}

function order_link($url, $column, $label)
{
    $dir_reverse = array(
        'asc' => 'desc',
        'desc' => 'asc',
    );
    $dir_arrows = array(
        'asc' => ' &darr;',
        'desc' => ' &uarr;',
    );
    parse_str(params(0), $get);
    unset($get['page']);
    $dir = !empty($get['order']) && $get['order'] == $column ? $dir_reverse[$get['dir']] : default_sort($column);
    $arrow = !empty($get['order']) && $get['order'] == $column ? $dir_arrows[$dir] : '';
    $get['order'] = $column;
    $get['dir'] = $dir;
    $link = '<a href="' . url_for($url, $get) . '">' . $label . '</a>' . $arrow;
    return $link;
}

function default_sort($column)
{
    $desc = array('expires', 'last_sms', 'timestamp');
    if (in_array($column, $desc)) {
        return 'desc';
    } // last_login zaten sayfa ilk açıldığında azalan olarak sıralanıyor
    else {
        return 'asc';
    }
}

function validate_settings($post)
{
    global $settings;

    $val = new Validation;

    $fields = array(
        'valid_for' => array(
            'rules' => 'required|integer',
            'label' => 'Oturum Geçerlilik Süresi',
        ),
    );

    if ($settings['authentication'] == 'sms') {
        $fields['daily_global_limit'] = array(
            'rules' => 'required|integer',
            'label' => 'Günlük SMS limiti',
        );
        $fields['daily_limit'] = array(
            'rules' => 'required|integer',
            'label' => 'Günlük SMS limiti',
        );
        $fields['weekly_limit'] = array(
            'rules' => 'required|integer',
            'label' => 'Haftalık SMS limiti',
        );
        $fields['monthly_limit'] = array(
            'rules' => 'required|integer',
            'label' => 'Aylık SMS limiti',
        );
        $fields['yearly_limit'] = array(
            'rules' => 'required|integer',
            'label' => 'Yıllık SMS limiti',
        );
        $fields['min_interval'] = array(
            'rules' => 'required|integer',
            'label' => 'İki SMS arası minimum süre',
        );
    }

    $errors = $val->validate($fields, $post);
    return $errors;
}