1a7502952c
Agent-Logs-Url: https://github.com/GameServerPanel/GSP/sessions/a08c8b94-1b12-4eec-86c6-770cb435bb06 Co-authored-by: iaretechnician <2749183+iaretechnician@users.noreply.github.com>
1348 lines
51 KiB
PHP
1348 lines
51 KiB
PHP
<?php
|
|
/*
|
|
*
|
|
* OGP - Open Game Panel
|
|
* Copyright (C) 2008 - 2018 The OGP Development Team
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation; either version 2
|
|
* of the License, or any later version.
|
|
*
|
|
* GSP Panel Update System
|
|
* Provides safe, admin-only panel updates from GitHub with pre-update backup
|
|
* and a revert capability.
|
|
*
|
|
*/
|
|
|
|
// Panel root is two directories up from this file (modules/administration/panel_update.php)
|
|
defined('GSP_PANEL_DIR') || define('GSP_PANEL_DIR', realpath(dirname(__FILE__) . '/../../'));
|
|
defined('GSP_BACKUP_BASE') || define('GSP_BACKUP_BASE', GSP_PANEL_DIR . '/backups');
|
|
defined('GSP_UPDATE_LOG') || define('GSP_UPDATE_LOG', GSP_PANEL_DIR . '/logs/panel_updates.log');
|
|
defined('GSP_VERSION_FILE') || define('GSP_VERSION_FILE', GSP_PANEL_DIR . '/includes/panel_version.php');
|
|
defined('GSP_VERSION_JSON') || define('GSP_VERSION_JSON', GSP_PANEL_DIR . '/version.json');
|
|
|
|
// ---------------------------------------------------------------------------
|
|
// Helper: write a line to the panel update log
|
|
// ---------------------------------------------------------------------------
|
|
function gsp_update_log($message)
|
|
{
|
|
$log_dir = dirname(GSP_UPDATE_LOG);
|
|
if (!is_dir($log_dir)) {
|
|
@mkdir($log_dir, 0750, true);
|
|
}
|
|
$line = '[' . date('Y-m-d H:i:s') . '] ' . $message . PHP_EOL;
|
|
@file_put_contents(GSP_UPDATE_LOG, $line, FILE_APPEND | LOCK_EX);
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
// Helper: insert a row into gsp_panel_update_log (silently skips on failure)
|
|
// ---------------------------------------------------------------------------
|
|
function gsp_log_update_to_db($channel, $branch, $status, $message, $backup_path = null, $db_backup_path = null, $file_backup_path = null, $started_at = null, $finished_at = null)
|
|
{
|
|
global $db;
|
|
if (!isset($db) || !is_object($db)) {
|
|
return;
|
|
}
|
|
if ($started_at === null) {
|
|
$started_at = date('Y-m-d H:i:s');
|
|
}
|
|
$channel = $db->real_escape_string((string) $channel);
|
|
$branch = $branch !== null ? "'" . $db->real_escape_string((string) $branch) . "'" : 'NULL';
|
|
$status = $db->real_escape_string((string) $status);
|
|
$message_esc = $message !== null ? "'" . $db->real_escape_string((string) $message) . "'" : 'NULL';
|
|
$backup_path_esc = $backup_path !== null ? "'" . $db->real_escape_string((string) $backup_path) . "'" : 'NULL';
|
|
$db_backup_esc = $db_backup_path !== null ? "'" . $db->real_escape_string((string) $db_backup_path) . "'" : 'NULL';
|
|
$file_backup_esc = $file_backup_path !== null ? "'" . $db->real_escape_string((string) $file_backup_path) . "'" : 'NULL';
|
|
$started_esc = "'" . $db->real_escape_string($started_at) . "'";
|
|
$finished_esc = $finished_at !== null ? "'" . $db->real_escape_string((string) $finished_at) . "'" : 'NULL';
|
|
$db->query(
|
|
"INSERT INTO OGP_DB_PREFIXpanel_update_log"
|
|
. " (channel, branch, status, message, backup_path, db_backup_path, file_backup_path, started_at, finished_at)"
|
|
. " VALUES ('{$channel}', {$branch}, '{$status}', {$message_esc},"
|
|
. " {$backup_path_esc}, {$db_backup_esc}, {$file_backup_esc}, {$started_esc}, {$finished_esc})"
|
|
);
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
// Helper: read the installed version / branch from panel_version.php
|
|
// ---------------------------------------------------------------------------
|
|
function gsp_get_current_version()
|
|
{
|
|
if (file_exists(GSP_VERSION_FILE)) {
|
|
$code = file_get_contents(GSP_VERSION_FILE);
|
|
if (preg_match("/define\('GSP_VERSION',\s*'([^']+)'\)/", $code, $m)) {
|
|
return $m[1];
|
|
}
|
|
}
|
|
return 'unknown';
|
|
}
|
|
|
|
function gsp_get_current_branch()
|
|
{
|
|
if (file_exists(GSP_VERSION_FILE)) {
|
|
$code = file_get_contents(GSP_VERSION_FILE);
|
|
if (preg_match("/define\('GSP_BRANCH',\s*'([^']+)'\)/", $code, $m)) {
|
|
return $m[1];
|
|
}
|
|
}
|
|
// Fall back to reading .git/HEAD
|
|
$git_head = GSP_PANEL_DIR . '/.git/HEAD';
|
|
if (file_exists($git_head)) {
|
|
$content = trim(file_get_contents($git_head));
|
|
if (preg_match('/^ref: refs\/heads\/(.+)$/', $content, $m)) {
|
|
return $m[1];
|
|
}
|
|
}
|
|
return 'unknown';
|
|
}
|
|
|
|
function gsp_get_git_commit()
|
|
{
|
|
$git_head = GSP_PANEL_DIR . '/.git/HEAD';
|
|
if (!file_exists($git_head)) {
|
|
return null;
|
|
}
|
|
$content = trim(file_get_contents($git_head));
|
|
if (preg_match('/^ref: refs\/heads\/(.+)$/', $content, $m)) {
|
|
$branch_file = GSP_PANEL_DIR . '/.git/refs/heads/' . $m[1];
|
|
if (file_exists($branch_file)) {
|
|
return trim(file_get_contents($branch_file));
|
|
}
|
|
} elseif (preg_match('/^[0-9a-f]{40}$/i', $content)) {
|
|
return $content;
|
|
}
|
|
return null;
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
// Helper: write/update includes/panel_version.php
|
|
// ---------------------------------------------------------------------------
|
|
function gsp_write_version_file($version, $branch_or_type)
|
|
{
|
|
$content = "<?php\n";
|
|
$content .= "// GSP Panel Version - written by the panel update system. Do not edit manually.\n";
|
|
$content .= "define('GSP_VERSION', " . var_export($version, true) . ");\n";
|
|
$content .= "define('GSP_BRANCH', " . var_export($branch_or_type, true) . ");\n";
|
|
$content .= "define('GSP_UPDATE_TIME', " . var_export(date('Y-m-d H:i:s'), true) . ");\n";
|
|
@file_put_contents(GSP_VERSION_FILE, $content);
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
// Helper: read version.json and return its data as an array (or null)
|
|
// ---------------------------------------------------------------------------
|
|
function gsp_read_version_json()
|
|
{
|
|
if (!file_exists(GSP_VERSION_JSON)) {
|
|
return null;
|
|
}
|
|
$data = json_decode(file_get_contents(GSP_VERSION_JSON), true);
|
|
return is_array($data) ? $data : null;
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
// Helper: write version.json with canonical installed-version metadata
|
|
// ---------------------------------------------------------------------------
|
|
function gsp_write_version_json($installed_type, $installed_source, $installed_version, $installed_commit = null)
|
|
{
|
|
$allowed_types = ['release', 'development', 'cutting-edge'];
|
|
if (!in_array($installed_type, $allowed_types, true)) {
|
|
$installed_type = 'unknown';
|
|
}
|
|
$data = [
|
|
'installed_type' => $installed_type,
|
|
'installed_source' => $installed_source,
|
|
'installed_version' => $installed_version,
|
|
'installed_commit' => $installed_commit,
|
|
'installed_at' => date('Y-m-d H:i:s'),
|
|
];
|
|
@file_put_contents(GSP_VERSION_JSON, json_encode($data, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES));
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
// Helper: generate a cryptographically strong random hex token
|
|
// ---------------------------------------------------------------------------
|
|
function gsp_random_token($bytes = 16)
|
|
{
|
|
try {
|
|
return bin2hex(random_bytes($bytes));
|
|
} catch (\Throwable $e) {
|
|
// Fallback for environments where random_bytes() is unavailable
|
|
return bin2hex(openssl_random_pseudo_bytes($bytes));
|
|
}
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
// GitHub API: fetch list of releases (newest first)
|
|
// ---------------------------------------------------------------------------
|
|
function gsp_fetch_github_releases($repo_owner, $repo_name)
|
|
{
|
|
$url = "https://api.github.com/repos/{$repo_owner}/{$repo_name}/releases?per_page=30";
|
|
|
|
if (function_exists('curl_init')) {
|
|
$ch = curl_init($url);
|
|
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
|
|
curl_setopt($ch, CURLOPT_USERAGENT, 'GSP-Panel-Updater');
|
|
curl_setopt($ch, CURLOPT_TIMEOUT, 10);
|
|
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, true);
|
|
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
|
|
$data = curl_exec($ch);
|
|
$code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
|
|
curl_close($ch);
|
|
if ($code === 200 && $data) {
|
|
return json_decode($data, true);
|
|
}
|
|
} else {
|
|
$ctx = stream_context_create([
|
|
'http' => [
|
|
'method' => 'GET',
|
|
'header' => "User-Agent: GSP-Panel-Updater\r\n",
|
|
'timeout' => 10,
|
|
],
|
|
'ssl' => [
|
|
'verify_peer' => true,
|
|
'verify_peer_name' => true,
|
|
],
|
|
]);
|
|
$data = @file_get_contents($url, false, $ctx);
|
|
if ($data) {
|
|
return json_decode($data, true);
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
// Helper: read DB credentials from includes/config.inc.php using an
|
|
// isolated scope so the caller's variables are not polluted and side effects
|
|
// from the config file (e.g. debug.php inclusion) stay contained.
|
|
// Returns an array with keys host/port/user/pass/name, or null on failure.
|
|
// ---------------------------------------------------------------------------
|
|
function load_panel_db_config()
|
|
{
|
|
$config_file = GSP_PANEL_DIR . '/includes/config.inc.php';
|
|
if (!is_readable($config_file)) {
|
|
return null;
|
|
}
|
|
|
|
// Static closure gives an isolated variable scope; the @ suppresses any
|
|
// non-fatal errors from transitive includes (e.g. debug.php).
|
|
$capture = static function ($__file) {
|
|
$db_host = 'localhost';
|
|
$db_port = '3306';
|
|
$db_user = '';
|
|
$db_pass = '';
|
|
$db_name = '';
|
|
@include $__file;
|
|
return [
|
|
'host' => (string) $db_host,
|
|
'port' => (string) $db_port,
|
|
'user' => (string) $db_user,
|
|
'pass' => (string) $db_pass,
|
|
'name' => (string) $db_name,
|
|
];
|
|
};
|
|
|
|
$cfg = $capture($config_file);
|
|
|
|
if (empty($cfg['user']) || empty($cfg['name'])) {
|
|
return null;
|
|
}
|
|
|
|
return $cfg;
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
// Backup: dump the MySQL database into $backup_dir/database.sql
|
|
// Returns ['success'=>bool, 'error'=>string, 'file'=>string]
|
|
// ---------------------------------------------------------------------------
|
|
function create_database_backup($backup_dir, $db_config)
|
|
{
|
|
// Verify mysqldump is available before attempting anything
|
|
$check_out = [];
|
|
$check_ret = 0;
|
|
exec('command -v mysqldump 2>/dev/null', $check_out, $check_ret);
|
|
if ($check_ret !== 0 || empty($check_out[0])) {
|
|
return [
|
|
'success' => false,
|
|
'error' => 'mysqldump is not installed or not in PATH. '
|
|
. 'Install the mysql-client package and ensure it is on the PATH.',
|
|
];
|
|
}
|
|
|
|
$sql_file = $backup_dir . '/database.sql';
|
|
$creds_file = tempnam(sys_get_temp_dir(), 'gsp_db_');
|
|
if ($creds_file === false) {
|
|
return ['success' => false, 'error' => 'Cannot create temporary credentials file.'];
|
|
}
|
|
|
|
// Build MySQL option-file content; addcslashes protects backslashes and
|
|
// newlines so values are safe inside the ini-style [client] section.
|
|
// The password never appears in the process list this way.
|
|
$creds = "[client]\n"
|
|
. "user=" . addcslashes($db_config['user'], "\\\n") . "\n"
|
|
. "password=" . addcslashes($db_config['pass'], "\\\n") . "\n";
|
|
if (!empty($db_config['host'])) {
|
|
$creds .= "host=" . addcslashes($db_config['host'], "\\\n") . "\n";
|
|
}
|
|
if (!empty($db_config['port']) && $db_config['port'] !== '3306') {
|
|
$creds .= "port=" . addcslashes($db_config['port'], "\\\n") . "\n";
|
|
}
|
|
file_put_contents($creds_file, $creds);
|
|
chmod($creds_file, 0600);
|
|
|
|
// Redirect stderr to a separate temp file so it never pollutes the SQL dump
|
|
$err_tmp = tempnam(sys_get_temp_dir(), 'gsp_db_err_');
|
|
if ($err_tmp === false) {
|
|
@unlink($creds_file);
|
|
return ['success' => false, 'error' => 'Cannot create temporary file for mysqldump error capture.'];
|
|
}
|
|
$command = 'mysqldump --defaults-extra-file=' . escapeshellarg($creds_file)
|
|
. ' --skip-opt --single-transaction --add-drop-table'
|
|
. ' --create-options --extended-insert --quick --set-charset'
|
|
. ' ' . escapeshellarg($db_config['name'])
|
|
. ' > ' . escapeshellarg($sql_file)
|
|
. ' 2> ' . escapeshellarg($err_tmp);
|
|
|
|
$unused = [];
|
|
$ret = 0;
|
|
exec($command, $unused, $ret);
|
|
@unlink($creds_file);
|
|
|
|
// Collect stderr; strip lines mentioning "password" or "passwd" as a
|
|
// defensive measure (mysqldump error output does not normally include the
|
|
// password, but we filter anyway in case of unusual configurations).
|
|
$err_output = '';
|
|
if (file_exists($err_tmp)) {
|
|
$raw = trim(file_get_contents($err_tmp));
|
|
@unlink($err_tmp);
|
|
if ($raw !== '') {
|
|
$err_output = implode("\n", array_filter(
|
|
explode("\n", $raw),
|
|
static function ($line) {
|
|
return stripos($line, 'password') === false
|
|
&& stripos($line, 'passwd') === false;
|
|
}
|
|
));
|
|
}
|
|
}
|
|
|
|
if ($ret !== 0) {
|
|
@unlink($sql_file);
|
|
$msg = 'mysqldump failed (exit code ' . $ret . ').';
|
|
if ($err_output !== '') {
|
|
$msg .= ' Error: ' . $err_output;
|
|
}
|
|
return ['success' => false, 'error' => $msg];
|
|
}
|
|
|
|
if (!file_exists($sql_file) || filesize($sql_file) < 100) {
|
|
@unlink($sql_file);
|
|
return ['success' => false, 'error' => 'Database dump file is missing or empty after mysqldump.'];
|
|
}
|
|
|
|
return ['success' => true, 'file' => $sql_file];
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
// Backup: tar-gzip the panel root into $backup_dir/panel-files.tar.gz
|
|
// Returns ['success'=>bool, 'error'=>string, 'file'=>string]
|
|
// ---------------------------------------------------------------------------
|
|
function create_panel_files_archive($backup_dir, $panel_root)
|
|
{
|
|
// Verify tar is available
|
|
$check_out = [];
|
|
$check_ret = 0;
|
|
exec('command -v tar 2>/dev/null', $check_out, $check_ret);
|
|
if ($check_ret !== 0 || empty($check_out[0])) {
|
|
return ['success' => false, 'error' => 'tar is not installed or not in PATH.'];
|
|
}
|
|
|
|
$tar_file = $backup_dir . '/panel-files.tar.gz';
|
|
|
|
// Top-level directories are anchored with ./ so they only match at the
|
|
// archive root; wildcard patterns match at any depth.
|
|
$exclude_dirs = ['./backups', './.git', './logs', './cache', './tmp', './node_modules', './vendor'];
|
|
$exclude_globs = ['*.log', '*.sql'];
|
|
|
|
$exclude_args = '';
|
|
foreach ($exclude_dirs as $dir) {
|
|
$exclude_args .= ' --exclude=' . escapeshellarg($dir);
|
|
}
|
|
foreach ($exclude_globs as $glob) {
|
|
$exclude_args .= ' --exclude=' . escapeshellarg($glob);
|
|
}
|
|
|
|
// -C panel_root . preserves relative paths (./home.php, ./modules/…)
|
|
$command = 'tar -czf ' . escapeshellarg($tar_file)
|
|
. $exclude_args
|
|
. ' -C ' . escapeshellarg($panel_root)
|
|
. ' . 2>&1';
|
|
|
|
$out = [];
|
|
$ret = 0;
|
|
exec($command, $out, $ret);
|
|
|
|
if ($ret !== 0) {
|
|
@unlink($tar_file);
|
|
return [
|
|
'success' => false,
|
|
'error' => 'tar failed (exit code ' . $ret . '). ' . implode(' | ', $out),
|
|
];
|
|
}
|
|
|
|
if (!file_exists($tar_file) || filesize($tar_file) < 100) {
|
|
@unlink($tar_file);
|
|
return ['success' => false, 'error' => 'Panel archive file is missing or empty after tar.'];
|
|
}
|
|
|
|
return ['success' => true, 'file' => $tar_file];
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
// Backup: write backup.json metadata into $backup_dir
|
|
// Returns true on success, false on failure.
|
|
// ---------------------------------------------------------------------------
|
|
function write_backup_metadata($backup_dir, $metadata)
|
|
{
|
|
return file_put_contents(
|
|
$backup_dir . '/backup.json',
|
|
json_encode($metadata, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES)
|
|
) !== false;
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
// Backup: create a full timestamped backup (DB + files + metadata + log)
|
|
// ---------------------------------------------------------------------------
|
|
function gsp_create_full_backup($update_target_type, $update_target_version)
|
|
{
|
|
$ts = date('Y-m-d_H-i-s');
|
|
$backup_dir = GSP_BACKUP_BASE . '/' . $ts;
|
|
|
|
// Helper that writes a timestamped line to backup.log inside $backup_dir
|
|
$append_log = static function ($msg) use ($backup_dir) {
|
|
$line = '[' . date('Y-m-d H:i:s') . '] ' . $msg . PHP_EOL;
|
|
@file_put_contents($backup_dir . '/backup.log', $line, FILE_APPEND | LOCK_EX);
|
|
};
|
|
|
|
// 1. Ensure backup base directory exists (0755 so the web server can write)
|
|
if (!is_dir(GSP_BACKUP_BASE)) {
|
|
$mkdir_ok = @mkdir(GSP_BACKUP_BASE, 0755, true);
|
|
if (!$mkdir_ok) {
|
|
$last_err = error_get_last();
|
|
$detail = ($last_err && !empty($last_err['message'])) ? ' (' . $last_err['message'] . ')' : '';
|
|
return [
|
|
'success' => false,
|
|
'error' => 'Cannot create backup base directory: ' . GSP_BACKUP_BASE . $detail
|
|
. '. Ensure the web server user has write access to: '
|
|
. dirname(GSP_BACKUP_BASE),
|
|
];
|
|
}
|
|
}
|
|
|
|
// 2. Create timestamped backup directory
|
|
if (!@mkdir($backup_dir, 0755, true)) {
|
|
$last_err = error_get_last();
|
|
$detail = ($last_err && !empty($last_err['message'])) ? ' (' . $last_err['message'] . ')' : '';
|
|
return [
|
|
'success' => false,
|
|
'error' => 'Cannot create backup directory: ' . $backup_dir . $detail
|
|
. '. Ensure the web server user has write access to: ' . GSP_BACKUP_BASE,
|
|
];
|
|
}
|
|
|
|
$append_log("Backup started. Target: {$update_target_type} / {$update_target_version}");
|
|
$append_log("Panel root: " . GSP_PANEL_DIR);
|
|
$append_log("Backup directory: {$backup_dir}");
|
|
|
|
// 3. Load DB configuration from includes/config.inc.php
|
|
$db_config = load_panel_db_config();
|
|
if ($db_config === null) {
|
|
$append_log("ERROR: Cannot load database configuration from includes/config.inc.php");
|
|
return [
|
|
'success' => false,
|
|
'error' => 'Cannot load database configuration. '
|
|
. 'Ensure includes/config.inc.php exists and contains valid DB credentials.',
|
|
];
|
|
}
|
|
$append_log("DB config loaded. Host: {$db_config['host']}, Database: {$db_config['name']}");
|
|
|
|
// 4. Database backup — stops the update if it fails
|
|
$append_log("Starting database backup (mysqldump)...");
|
|
$db_result = create_database_backup($backup_dir, $db_config);
|
|
if (!$db_result['success']) {
|
|
$append_log("ERROR: Database backup failed: " . $db_result['error']);
|
|
return ['success' => false, 'error' => $db_result['error']];
|
|
}
|
|
$append_log("Database backup complete: database.sql (" . filesize($db_result['file']) . " bytes)");
|
|
|
|
// 5. Panel files archive — stops the update if it fails
|
|
$append_log("Starting panel files archive (tar gzip)...");
|
|
$tar_result = create_panel_files_archive($backup_dir, GSP_PANEL_DIR);
|
|
if (!$tar_result['success']) {
|
|
$append_log("ERROR: Panel files archive failed: " . $tar_result['error']);
|
|
return ['success' => false, 'error' => $tar_result['error']];
|
|
}
|
|
$append_log("Panel files archive complete: panel-files.tar.gz (" . filesize($tar_result['file']) . " bytes)");
|
|
|
|
// 6. Write backup.json metadata
|
|
$vinfo = gsp_read_version_json();
|
|
$metadata = [
|
|
'backup_timestamp' => $ts,
|
|
'panel_root' => GSP_PANEL_DIR,
|
|
'database_host' => $db_config['host'],
|
|
'database_name' => $db_config['name'],
|
|
'installed_version' => $vinfo
|
|
? ($vinfo['installed_version'] ?? gsp_get_current_version())
|
|
: gsp_get_current_version(),
|
|
'git_branch' => gsp_get_current_branch(),
|
|
'git_commit' => gsp_get_git_commit(),
|
|
'update_target_type' => $update_target_type,
|
|
'update_target_version' => $update_target_version,
|
|
'backup_status' => 'complete',
|
|
];
|
|
write_backup_metadata($backup_dir, $metadata);
|
|
$append_log("Backup metadata written (backup.json).");
|
|
|
|
// 7. Final validation — both required files must be present and non-empty
|
|
$sql_file = $backup_dir . '/database.sql';
|
|
$tar_file = $backup_dir . '/panel-files.tar.gz';
|
|
|
|
if (!file_exists($sql_file) || filesize($sql_file) < 100) {
|
|
$append_log("ERROR: Validation failed — database.sql is missing or empty.");
|
|
return ['success' => false, 'error' => 'Backup validation failed: database.sql is missing or empty.'];
|
|
}
|
|
if (!file_exists($tar_file) || filesize($tar_file) < 100) {
|
|
$append_log("ERROR: Validation failed — panel-files.tar.gz is missing or empty.");
|
|
return ['success' => false, 'error' => 'Backup validation failed: panel-files.tar.gz is missing or empty.'];
|
|
}
|
|
|
|
$append_log("Backup validated and complete.");
|
|
|
|
return [
|
|
'success' => true,
|
|
'backup_dir' => $backup_dir,
|
|
'backup_ts' => $ts,
|
|
];
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
// Update: download the GitHub archive ZIP for a given ref (tag or branch)
|
|
// ---------------------------------------------------------------------------
|
|
function gsp_download_zip($repo_owner, $repo_name, $ref, $temp_dir)
|
|
{
|
|
// GitHub returns a redirect from /zipball/ to the actual download URL
|
|
$url = "https://api.github.com/repos/{$repo_owner}/{$repo_name}/zipball/{$ref}";
|
|
$zip_file = $temp_dir . '/gsp_update.zip';
|
|
|
|
if (function_exists('curl_init')) {
|
|
$ch = curl_init($url);
|
|
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
|
|
curl_setopt($ch, CURLOPT_USERAGENT, 'GSP-Panel-Updater');
|
|
curl_setopt($ch, CURLOPT_TIMEOUT, 180);
|
|
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, true);
|
|
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
|
|
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
|
|
$data = curl_exec($ch);
|
|
$code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
|
|
curl_close($ch);
|
|
if ($code !== 200 || !$data) {
|
|
return false;
|
|
}
|
|
file_put_contents($zip_file, $data);
|
|
} else {
|
|
$ctx = stream_context_create([
|
|
'http' => [
|
|
'method' => 'GET',
|
|
'header' => "User-Agent: GSP-Panel-Updater\r\n",
|
|
'timeout' => 180,
|
|
'follow_location' => 1,
|
|
],
|
|
'ssl' => [
|
|
'verify_peer' => true,
|
|
'verify_peer_name' => true,
|
|
],
|
|
]);
|
|
$data = @file_get_contents($url, false, $ctx);
|
|
if (!$data) {
|
|
return false;
|
|
}
|
|
file_put_contents($zip_file, $data);
|
|
}
|
|
|
|
if (!file_exists($zip_file) || filesize($zip_file) < 1000) {
|
|
return false;
|
|
}
|
|
return $zip_file;
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
// Update: apply the downloaded zip to the panel directory
|
|
// ---------------------------------------------------------------------------
|
|
function gsp_apply_update($zip_file)
|
|
{
|
|
$panel_dir = GSP_PANEL_DIR;
|
|
|
|
// Files to never overwrite when applying an update
|
|
$preserve = [
|
|
'includes/config.inc.php',
|
|
'modules/gamemanager/rsync_sites_local.list',
|
|
'install.php',
|
|
];
|
|
|
|
// Merge with the DB update-blacklist (strip leading slash from stored paths)
|
|
global $db;
|
|
$blacklisted = $db->resultQuery('SELECT file_path FROM `OGP_DB_PREFIXupdate_blacklist`;');
|
|
if ($blacklisted !== false) {
|
|
foreach ((array)$blacklisted as $bf) {
|
|
$preserve[] = ltrim($bf['file_path'], '/');
|
|
}
|
|
}
|
|
|
|
// Extract ZIP to a temporary directory
|
|
$temp_dir = sys_get_temp_dir() . '/gsp_upd_' . time();
|
|
if (!@mkdir($temp_dir, 0750)) {
|
|
return ['success' => false, 'error' => 'Cannot create temporary extraction directory.'];
|
|
}
|
|
|
|
require_once($panel_dir . '/modules/update/unzip.php');
|
|
$result = extractZip($zip_file, $temp_dir);
|
|
if (!is_array($result)) {
|
|
gsp_rmdir_recursive($temp_dir);
|
|
return ['success' => false, 'error' => 'ZIP extraction failed: ' . $result];
|
|
}
|
|
|
|
// GitHub archives place all files under a single subdirectory (e.g. "Owner-Repo-sha/")
|
|
// Detect that prefix directory
|
|
$src_dir = $temp_dir;
|
|
$subdirs = glob($temp_dir . '/*', GLOB_ONLYDIR);
|
|
if ($subdirs && count($subdirs) === 1) {
|
|
$src_dir = $subdirs[0];
|
|
}
|
|
|
|
// Copy files from the extracted source into the panel directory
|
|
$copied = 0;
|
|
$iter = new RecursiveIteratorIterator(
|
|
new RecursiveDirectoryIterator($src_dir, RecursiveDirectoryIterator::SKIP_DOTS),
|
|
RecursiveIteratorIterator::SELF_FIRST
|
|
);
|
|
|
|
foreach ($iter as $item) {
|
|
$rel = str_replace('\\', '/', substr($item->getPathname(), strlen($src_dir) + 1));
|
|
|
|
// Skip preserved/blacklisted files
|
|
if (in_array($rel, $preserve)) {
|
|
continue;
|
|
}
|
|
|
|
$dst = $panel_dir . '/' . $rel;
|
|
|
|
if ($item->isDir()) {
|
|
if (!is_dir($dst)) {
|
|
@mkdir($dst, 0755, true);
|
|
}
|
|
} else {
|
|
$dst_parent = dirname($dst);
|
|
if (!is_dir($dst_parent)) {
|
|
@mkdir($dst_parent, 0755, true);
|
|
}
|
|
if (@copy($item->getPathname(), $dst)) {
|
|
$copied++;
|
|
}
|
|
}
|
|
}
|
|
|
|
gsp_rmdir_recursive($temp_dir);
|
|
return ['success' => true, 'files_copied' => $copied];
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
// Helper: recursively remove a directory
|
|
// ---------------------------------------------------------------------------
|
|
function gsp_rmdir_recursive($dir)
|
|
{
|
|
if (!is_dir($dir)) {
|
|
return;
|
|
}
|
|
$iter = new RecursiveIteratorIterator(
|
|
new RecursiveDirectoryIterator($dir, RecursiveDirectoryIterator::SKIP_DOTS),
|
|
RecursiveIteratorIterator::CHILD_FIRST
|
|
);
|
|
foreach ($iter as $item) {
|
|
if ($item->isDir()) {
|
|
@rmdir($item->getPathname());
|
|
} else {
|
|
@unlink($item->getPathname());
|
|
}
|
|
}
|
|
@rmdir($dir);
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
// Post-update helpers
|
|
// ---------------------------------------------------------------------------
|
|
function gsp_fix_permissions($panel_dir)
|
|
{
|
|
// Restore sane defaults in a single find traversal: files 644, directories 755
|
|
@system(
|
|
'find ' . escapeshellarg($panel_dir)
|
|
. ' -maxdepth 10 \( -name "*.php" -exec chmod 644 {} + \)'
|
|
. ' -o \( -type d -exec chmod 755 {} + \)'
|
|
. ' 2>/dev/null'
|
|
);
|
|
}
|
|
|
|
function gsp_clear_panel_cache($panel_dir)
|
|
{
|
|
foreach (['cache', 'temp'] as $dir) {
|
|
$cache = $panel_dir . '/' . $dir;
|
|
if (!is_dir($cache)) {
|
|
continue;
|
|
}
|
|
foreach (glob($cache . '/*.php') ?: [] as $f) {
|
|
@unlink($f);
|
|
}
|
|
foreach (glob($cache . '/*.cache') ?: [] as $f) {
|
|
@unlink($f);
|
|
}
|
|
}
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
// List available backup timestamps under GSP_BACKUP_BASE
|
|
// ---------------------------------------------------------------------------
|
|
function gsp_get_available_backups()
|
|
{
|
|
$backups = [];
|
|
if (!is_dir(GSP_BACKUP_BASE)) {
|
|
return $backups;
|
|
}
|
|
foreach ((array)scandir(GSP_BACKUP_BASE) as $entry) {
|
|
if ($entry === '.' || $entry === '..') {
|
|
continue;
|
|
}
|
|
if (!is_dir(GSP_BACKUP_BASE . '/' . $entry)) {
|
|
continue;
|
|
}
|
|
if (!preg_match('/^\d{4}-\d{2}-\d{2}_\d{2}-\d{2}-\d{2}$/', $entry)) {
|
|
continue;
|
|
}
|
|
$meta_file = GSP_BACKUP_BASE . '/' . $entry . '/backup.json';
|
|
$meta = [];
|
|
if (file_exists($meta_file)) {
|
|
$meta = json_decode(file_get_contents($meta_file), true) ?: [];
|
|
}
|
|
$backups[] = ['ts' => $entry, 'meta' => $meta];
|
|
}
|
|
// Newest first
|
|
usort($backups, function ($a, $b) {
|
|
return strcmp($b['ts'], $a['ts']);
|
|
});
|
|
return $backups;
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
// Update: attempt a git-based update (fetch + checkout + reset --hard)
|
|
// Returns an array on success or null if git is unavailable / fails.
|
|
// ---------------------------------------------------------------------------
|
|
function gsp_try_git_update($branch)
|
|
{
|
|
if (!function_exists('exec') || !is_dir(GSP_PANEL_DIR . '/.git')) {
|
|
return null;
|
|
}
|
|
|
|
$panel_arg = escapeshellarg(GSP_PANEL_DIR);
|
|
$branch_arg = escapeshellarg($branch);
|
|
$origin_ref = escapeshellarg('origin/' . $branch);
|
|
|
|
$out = [];
|
|
$ret = 0;
|
|
|
|
exec("git -C {$panel_arg} fetch origin {$branch_arg} --tags 2>&1", $out, $ret);
|
|
if ($ret !== 0) {
|
|
gsp_update_log("Git fetch for branch {$branch} failed (exit {$ret}): " . implode(' | ', $out));
|
|
return null;
|
|
}
|
|
|
|
exec("git -C {$panel_arg} checkout {$branch_arg} 2>&1", $out, $ret);
|
|
exec("git -C {$panel_arg} reset --hard {$origin_ref} 2>&1", $out, $ret);
|
|
if ($ret !== 0) {
|
|
gsp_update_log("Git checkout/reset for branch {$branch} failed (exit {$ret}): " . implode(' | ', $out));
|
|
return null;
|
|
}
|
|
|
|
$commit_out = [];
|
|
$ret2 = 0;
|
|
exec("git -C {$panel_arg} rev-parse HEAD 2>&1", $commit_out, $ret2);
|
|
$commit = ($ret2 === 0 && !empty($commit_out[0]) && preg_match('/^[0-9a-f]{40,64}$/i', trim($commit_out[0])))
|
|
? trim($commit_out[0])
|
|
: null;
|
|
|
|
return [
|
|
'success' => true,
|
|
'method' => 'git',
|
|
'commit' => $commit,
|
|
'output' => implode("\n", $out),
|
|
];
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
// Orchestrate a full update
|
|
// ---------------------------------------------------------------------------
|
|
function gsp_do_update($repo_owner, $repo_name, $ref, $update_type)
|
|
{
|
|
global $db;
|
|
$panel_dir = GSP_PANEL_DIR;
|
|
|
|
// Step 1 — backup
|
|
$backup = gsp_create_full_backup($update_type, $ref);
|
|
if (!$backup['success']) {
|
|
return $backup; // contains 'error'
|
|
}
|
|
gsp_update_log("Backup created at {$backup['backup_ts']} before {$update_type} update to {$ref}");
|
|
|
|
// Step 2 — try git for branch updates; fall back to ZIP download
|
|
$commit_after = null;
|
|
$files_copied = 0;
|
|
$used_git = false;
|
|
|
|
if ($update_type !== 'release') {
|
|
$git_result = gsp_try_git_update($ref);
|
|
if ($git_result && $git_result['success']) {
|
|
$commit_after = $git_result['commit'];
|
|
$used_git = true;
|
|
gsp_update_log("Updated via git to {$ref}: " . $git_result['output']);
|
|
} else {
|
|
gsp_update_log("Git update not available or failed for {$ref}; falling back to ZIP download");
|
|
}
|
|
}
|
|
|
|
if (!$used_git) {
|
|
$temp_dir = sys_get_temp_dir() . '/gsp_dl_' . time();
|
|
@mkdir($temp_dir, 0750);
|
|
$zip_file = gsp_download_zip($repo_owner, $repo_name, $ref, $temp_dir);
|
|
if (!$zip_file) {
|
|
@rmdir($temp_dir);
|
|
return [
|
|
'success' => false,
|
|
'error' => 'Failed to download update ZIP from GitHub. Check network connectivity.',
|
|
];
|
|
}
|
|
gsp_update_log("Downloaded update ZIP for ref={$ref}");
|
|
|
|
$apply = gsp_apply_update($zip_file);
|
|
@unlink($zip_file);
|
|
@rmdir($temp_dir);
|
|
if (!$apply['success']) {
|
|
return $apply;
|
|
}
|
|
$files_copied = $apply['files_copied'];
|
|
$commit_after = gsp_get_git_commit();
|
|
gsp_update_log("Applied update via ZIP: {$apply['files_copied']} files written");
|
|
}
|
|
|
|
// Step 3 — housekeeping
|
|
gsp_fix_permissions($panel_dir);
|
|
gsp_clear_panel_cache($panel_dir);
|
|
gsp_write_version_file($ref, $update_type);
|
|
|
|
// Write version.json with canonical type/source/version data
|
|
$vsource = ($update_type === 'release') ? 'GitHub Releases' : $ref;
|
|
$vversion = ($update_type === 'release') ? $ref : ($commit_after ?? $ref);
|
|
gsp_write_version_json($update_type, $vsource, $vversion, $commit_after);
|
|
|
|
$db->setSettings(['ogp_version' => $ref, 'version_type' => $update_type]);
|
|
|
|
// Step 4 — post-update module handling (mirrors updating.php behaviour)
|
|
if (file_exists($panel_dir . '/modules/modulemanager/module_handling.php')) {
|
|
require_once($panel_dir . '/modules/modulemanager/module_handling.php');
|
|
}
|
|
if (function_exists('updateAllPanelModules')) {
|
|
updateAllPanelModules();
|
|
}
|
|
if (function_exists('runPostUpdateOperations')) {
|
|
runPostUpdateOperations();
|
|
}
|
|
|
|
gsp_update_log("Update to {$ref} (type={$update_type}) complete");
|
|
return ['success' => true, 'files_copied' => $files_copied, 'backup_dir' => $backup['backup_dir']];
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
// Orchestrate a revert to a previous backup
|
|
// ---------------------------------------------------------------------------
|
|
function gsp_do_revert($backup_ts)
|
|
{
|
|
global $db;
|
|
$panel_dir = GSP_PANEL_DIR;
|
|
$backup_dir = GSP_BACKUP_BASE . '/' . $backup_ts;
|
|
|
|
if (!is_dir($backup_dir)) {
|
|
return ['success' => false, 'error' => 'Backup directory not found: ' . htmlspecialchars($backup_ts)];
|
|
}
|
|
|
|
// Detect backup format: new (panel-files.tar.gz) or legacy (files/ directory)
|
|
$tar_archive = $backup_dir . '/panel-files.tar.gz';
|
|
$legacy_files_dir = $backup_dir . '/files';
|
|
$use_tar = file_exists($tar_archive);
|
|
|
|
if (!$use_tar && !is_dir($legacy_files_dir)) {
|
|
return ['success' => false, 'error' => 'Backup files not found (expected panel-files.tar.gz or files/ directory).'];
|
|
}
|
|
|
|
// Detect SQL file: new (database.sql) or legacy glob *.sql
|
|
$sql_file = $backup_dir . '/database.sql';
|
|
if (!file_exists($sql_file)) {
|
|
$sql_candidates = glob($backup_dir . '/*.sql') ?: [];
|
|
$sql_file = !empty($sql_candidates) ? $sql_candidates[0] : null;
|
|
}
|
|
if (!$sql_file || !file_exists($sql_file)) {
|
|
return ['success' => false, 'error' => 'No SQL dump found in backup.'];
|
|
}
|
|
|
|
// Enable maintenance mode for the duration of the revert
|
|
$had_maintenance = isset($db->getSettings()['maintenance_mode'])
|
|
&& $db->getSettings()['maintenance_mode'] == '1';
|
|
if (!$had_maintenance) {
|
|
$db->setSettings([
|
|
'maintenance_mode' => '1',
|
|
'maintenance_title' => 'Reverting...',
|
|
'maintenance_message' => 'The panel is being reverted to a previous version. Please wait.',
|
|
]);
|
|
}
|
|
|
|
// Restore files
|
|
$files_restored = 0;
|
|
if ($use_tar) {
|
|
// New format: extract tar archive back to the panel root
|
|
$out = [];
|
|
$ret = 0;
|
|
exec('tar -xzf ' . escapeshellarg($tar_archive) . ' -C ' . escapeshellarg($panel_dir) . ' 2>&1', $out, $ret);
|
|
if ($ret === 0) {
|
|
// tar restores files in place; it does not provide a count,
|
|
// so use 0 here — callers should not rely on an exact file count for the tar path.
|
|
$files_restored = 0;
|
|
gsp_update_log("Revert: extracted panel-files.tar.gz to {$panel_dir}");
|
|
} else {
|
|
gsp_update_log("Revert warning: tar extraction exited with code {$ret}: " . implode(' | ', $out));
|
|
}
|
|
} else {
|
|
// Legacy format: recursive copy from files/ directory
|
|
$iter = new RecursiveIteratorIterator(
|
|
new RecursiveDirectoryIterator($legacy_files_dir, RecursiveDirectoryIterator::SKIP_DOTS),
|
|
RecursiveIteratorIterator::SELF_FIRST
|
|
);
|
|
foreach ($iter as $item) {
|
|
$rel = substr($item->getPathname(), strlen($legacy_files_dir));
|
|
$dst = $panel_dir . $rel;
|
|
if ($item->isDir()) {
|
|
if (!is_dir($dst)) {
|
|
@mkdir($dst, 0755, true);
|
|
}
|
|
} else {
|
|
$dst_parent = dirname($dst);
|
|
if (!is_dir($dst_parent)) {
|
|
@mkdir($dst_parent, 0755, true);
|
|
}
|
|
if (@copy($item->getPathname(), $dst)) {
|
|
$files_restored++;
|
|
}
|
|
}
|
|
}
|
|
gsp_update_log("Revert: restored {$files_restored} files from legacy backup {$backup_ts}");
|
|
}
|
|
|
|
// Restore database using credentials from config
|
|
$db_config = load_panel_db_config();
|
|
if ($db_config !== null) {
|
|
$creds_file = tempnam(sys_get_temp_dir(), 'gsp_db_');
|
|
if ($creds_file !== false) {
|
|
$creds = "[client]\n"
|
|
. "user=" . addcslashes($db_config['user'], "\\\n") . "\n"
|
|
. "password=" . addcslashes($db_config['pass'], "\\\n") . "\n";
|
|
if (!empty($db_config['host'])) {
|
|
$creds .= "host=" . addcslashes($db_config['host'], "\\\n") . "\n";
|
|
}
|
|
if (!empty($db_config['port']) && $db_config['port'] !== '3306') {
|
|
$creds .= "port=" . addcslashes($db_config['port'], "\\\n") . "\n";
|
|
}
|
|
file_put_contents($creds_file, $creds);
|
|
chmod($creds_file, 0600);
|
|
$cmd = 'mysql --defaults-extra-file=' . escapeshellarg($creds_file)
|
|
. ' ' . escapeshellarg($db_config['name'])
|
|
. ' < ' . escapeshellarg($sql_file)
|
|
. ' 2>&1';
|
|
$unused_out = [];
|
|
$ret = 0;
|
|
exec($cmd, $unused_out, $ret);
|
|
@unlink($creds_file);
|
|
if ($ret !== 0) {
|
|
gsp_update_log("Revert warning: database restore exited with code {$ret}");
|
|
}
|
|
}
|
|
} else {
|
|
gsp_update_log("Revert warning: could not load DB config; database was not restored.");
|
|
}
|
|
|
|
// Housekeeping
|
|
gsp_fix_permissions($panel_dir);
|
|
gsp_clear_panel_cache($panel_dir);
|
|
|
|
// Turn off maintenance mode (unless it was already on before we started)
|
|
if (!$had_maintenance) {
|
|
$db->setSettings(['maintenance_mode' => '0']);
|
|
}
|
|
|
|
gsp_update_log("Revert to backup {$backup_ts} complete");
|
|
return ['success' => true, 'files_restored' => $files_restored];
|
|
}
|
|
|
|
// ---------------------------------------------------------------------------
|
|
// Main entry point — render the "Panel Updates" section
|
|
// ---------------------------------------------------------------------------
|
|
function gsp_panel_update_section()
|
|
{
|
|
global $db, $settings;
|
|
|
|
// Guard: admins only
|
|
if ($_SESSION['users_group'] !== 'admin') {
|
|
return;
|
|
}
|
|
|
|
// GitHub repository settings (with GSP defaults)
|
|
$repo_owner = !empty($settings['gsp_repo_owner']) ? $settings['gsp_repo_owner'] : 'GameServerPanel';
|
|
$repo_name = !empty($settings['gsp_repo_name']) ? $settings['gsp_repo_name'] : 'GSP';
|
|
$stable_branch = !empty($settings['gsp_stable_branch']) ? $settings['gsp_stable_branch'] : 'Panel-stable';
|
|
$unstable_branch= !empty($settings['gsp_unstable_branch'])? $settings['gsp_unstable_branch']: 'Panel-unstable';
|
|
|
|
// Per-session CSRF token
|
|
if (empty($_SESSION['gsp_update_csrf'])) {
|
|
$_SESSION['gsp_update_csrf'] = gsp_random_token();
|
|
}
|
|
$csrf_token = $_SESSION['gsp_update_csrf'];
|
|
|
|
// ---- Handle POST actions ------------------------------------------------
|
|
if (isset($_POST['gsp_update_action'])) {
|
|
$submitted_csrf = isset($_POST['gsp_update_csrf']) ? $_POST['gsp_update_csrf'] : '';
|
|
if (!hash_equals($csrf_token, $submitted_csrf)) {
|
|
print_failure('Invalid security token. Please reload the page and try again.');
|
|
} else {
|
|
$action = $_POST['gsp_update_action'];
|
|
set_time_limit(0);
|
|
|
|
$user_label = htmlspecialchars($_SESSION['users_login'])
|
|
. ' (IP: ' . htmlspecialchars($_SERVER['REMOTE_ADDR']) . ')';
|
|
|
|
if ($action === 'backup_only') {
|
|
$started_at = date('Y-m-d H:i:s');
|
|
$result = gsp_create_full_backup('backup-only', 'manual');
|
|
$finished_at = date('Y-m-d H:i:s');
|
|
if ($result['success']) {
|
|
$bk_dir = htmlspecialchars($result['backup_dir']);
|
|
print_success('Backup created successfully at <code>' . $bk_dir . '</code>.');
|
|
gsp_update_log("Admin {$user_label} created manual backup at {$result['backup_dir']}");
|
|
gsp_log_update_to_db(
|
|
'backup-only', null, 'success',
|
|
'Manual backup by ' . $_SESSION['users_login'],
|
|
$result['backup_dir'],
|
|
$result['backup_dir'] . '/database.sql',
|
|
$result['backup_dir'] . '/panel-files.tar.gz',
|
|
$started_at, $finished_at
|
|
);
|
|
} else {
|
|
print_failure('Backup failed: ' . htmlspecialchars($result['error']));
|
|
gsp_update_log("Admin {$user_label} manual backup FAILED: {$result['error']}");
|
|
gsp_log_update_to_db(
|
|
'backup-only', null, 'failed',
|
|
'Manual backup failed: ' . $result['error'],
|
|
null, null, null, $started_at, $finished_at
|
|
);
|
|
}
|
|
|
|
} elseif ($action === 'update_release') {
|
|
$version = isset($_POST['gsp_release_version']) ? trim($_POST['gsp_release_version']) : '';
|
|
if (!preg_match('/^[a-zA-Z0-9._\-]+$/', $version) || strlen($version) > 80) {
|
|
print_failure('Invalid release tag selected.');
|
|
} else {
|
|
$started_at = date('Y-m-d H:i:s');
|
|
$result = gsp_do_update($repo_owner, $repo_name, $version, 'release');
|
|
$finished_at = date('Y-m-d H:i:s');
|
|
if ($result['success']) {
|
|
print_success(
|
|
'Panel updated to release <strong>' . htmlspecialchars($version) . '</strong>. '
|
|
. intval($result['files_copied']) . ' file(s) updated. Source: <strong>GitHub Releases</strong>'
|
|
);
|
|
gsp_update_log("Admin {$user_label} updated panel to release {$version}");
|
|
gsp_log_update_to_db(
|
|
'release', $version, 'success',
|
|
'Updated to release ' . $version . ' by ' . $_SESSION['users_login'],
|
|
$result['backup_dir'] ?? null,
|
|
isset($result['backup_dir']) ? $result['backup_dir'] . '/database.sql' : null,
|
|
isset($result['backup_dir']) ? $result['backup_dir'] . '/panel-files.tar.gz': null,
|
|
$started_at, $finished_at
|
|
);
|
|
} else {
|
|
print_failure('Update failed: ' . htmlspecialchars($result['error']));
|
|
gsp_update_log("Admin {$user_label} update to release {$version} FAILED: {$result['error']}");
|
|
gsp_log_update_to_db(
|
|
'release', $version, 'failed',
|
|
'Update to release ' . $version . ' failed: ' . $result['error'],
|
|
null, null, null, $started_at, $finished_at
|
|
);
|
|
}
|
|
}
|
|
|
|
} elseif ($action === 'update_stable') {
|
|
$started_at = date('Y-m-d H:i:s');
|
|
$result = gsp_do_update($repo_owner, $repo_name, $stable_branch, 'development');
|
|
$finished_at = date('Y-m-d H:i:s');
|
|
if ($result['success']) {
|
|
print_success(
|
|
'Panel updated to development version (<strong>' . htmlspecialchars($stable_branch) . '</strong>). '
|
|
. intval($result['files_copied']) . ' file(s) updated. Source: <strong>'
|
|
. htmlspecialchars($stable_branch) . '</strong>'
|
|
);
|
|
gsp_update_log("Admin {$user_label} updated panel to stable branch {$stable_branch}");
|
|
gsp_log_update_to_db(
|
|
'development', $stable_branch, 'success',
|
|
'Updated to stable branch ' . $stable_branch . ' by ' . $_SESSION['users_login'],
|
|
$result['backup_dir'] ?? null,
|
|
isset($result['backup_dir']) ? $result['backup_dir'] . '/database.sql' : null,
|
|
isset($result['backup_dir']) ? $result['backup_dir'] . '/panel-files.tar.gz': null,
|
|
$started_at, $finished_at
|
|
);
|
|
} else {
|
|
print_failure('Update failed: ' . htmlspecialchars($result['error']));
|
|
gsp_update_log("Admin {$user_label} update to stable branch {$stable_branch} FAILED: {$result['error']}");
|
|
gsp_log_update_to_db(
|
|
'development', $stable_branch, 'failed',
|
|
'Update to stable branch ' . $stable_branch . ' failed: ' . $result['error'],
|
|
null, null, null, $started_at, $finished_at
|
|
);
|
|
}
|
|
|
|
} elseif ($action === 'update_unstable') {
|
|
$started_at = date('Y-m-d H:i:s');
|
|
$result = gsp_do_update($repo_owner, $repo_name, $unstable_branch, 'cutting-edge');
|
|
$finished_at = date('Y-m-d H:i:s');
|
|
if ($result['success']) {
|
|
print_success(
|
|
'Panel updated to cutting edge version (<strong>' . htmlspecialchars($unstable_branch) . '</strong>). '
|
|
. intval($result['files_copied']) . ' file(s) updated. Source: <strong>'
|
|
. htmlspecialchars($unstable_branch) . '</strong>'
|
|
);
|
|
gsp_update_log("Admin {$user_label} updated panel to unstable branch {$unstable_branch}");
|
|
gsp_log_update_to_db(
|
|
'cutting-edge', $unstable_branch, 'success',
|
|
'Updated to cutting-edge branch ' . $unstable_branch . ' by ' . $_SESSION['users_login'],
|
|
$result['backup_dir'] ?? null,
|
|
isset($result['backup_dir']) ? $result['backup_dir'] . '/database.sql' : null,
|
|
isset($result['backup_dir']) ? $result['backup_dir'] . '/panel-files.tar.gz': null,
|
|
$started_at, $finished_at
|
|
);
|
|
} else {
|
|
print_failure('Update failed: ' . htmlspecialchars($result['error']));
|
|
gsp_update_log("Admin {$user_label} update to unstable branch {$unstable_branch} FAILED: {$result['error']}");
|
|
gsp_log_update_to_db(
|
|
'cutting-edge', $unstable_branch, 'failed',
|
|
'Update to cutting-edge branch ' . $unstable_branch . ' failed: ' . $result['error'],
|
|
null, null, null, $started_at, $finished_at
|
|
);
|
|
}
|
|
|
|
} elseif ($action === 'revert') {
|
|
$backup_ts = isset($_POST['gsp_revert_backup']) ? trim($_POST['gsp_revert_backup']) : '';
|
|
if (!preg_match('/^\d{4}-\d{2}-\d{2}_\d{2}-\d{2}-\d{2}$/', $backup_ts)) {
|
|
print_failure('Invalid backup timestamp selected.');
|
|
} else {
|
|
$started_at = date('Y-m-d H:i:s');
|
|
$result = gsp_do_revert($backup_ts);
|
|
$finished_at = date('Y-m-d H:i:s');
|
|
if ($result['success']) {
|
|
print_success(
|
|
'Panel reverted to backup from <strong>' . htmlspecialchars($backup_ts) . '</strong>. '
|
|
. intval($result['files_restored']) . ' file(s) restored.'
|
|
);
|
|
gsp_update_log("Admin {$user_label} reverted panel to backup {$backup_ts}");
|
|
gsp_log_update_to_db(
|
|
'revert', $backup_ts, 'success',
|
|
'Reverted to backup ' . $backup_ts . ' by ' . $_SESSION['users_login'],
|
|
GSP_BACKUP_BASE . '/' . $backup_ts,
|
|
GSP_BACKUP_BASE . '/' . $backup_ts . '/database.sql',
|
|
GSP_BACKUP_BASE . '/' . $backup_ts . '/panel-files.tar.gz',
|
|
$started_at, $finished_at
|
|
);
|
|
} else {
|
|
print_failure('Revert failed: ' . htmlspecialchars($result['error']));
|
|
gsp_update_log("Admin {$user_label} revert to backup {$backup_ts} FAILED: {$result['error']}");
|
|
gsp_log_update_to_db(
|
|
'revert', $backup_ts, 'failed',
|
|
'Revert to backup ' . $backup_ts . ' failed: ' . $result['error'],
|
|
null, null, null, $started_at, $finished_at
|
|
);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
// Rotate CSRF token after every submission
|
|
$_SESSION['gsp_update_csrf'] = gsp_random_token();
|
|
$csrf_token = $_SESSION['gsp_update_csrf'];
|
|
}
|
|
// ---- End POST handling --------------------------------------------------
|
|
|
|
// Gather display data
|
|
$current_version = gsp_get_current_version();
|
|
$current_branch = gsp_get_current_branch();
|
|
$git_commit = gsp_get_git_commit();
|
|
$vinfo = gsp_read_version_json();
|
|
$releases = gsp_fetch_github_releases($repo_owner, $repo_name);
|
|
$latest_release = (is_array($releases) && !empty($releases))
|
|
? htmlspecialchars($releases[0]['tag_name'] ?? 'N/A')
|
|
: 'N/A (could not reach GitHub)';
|
|
$backups = gsp_get_available_backups();
|
|
|
|
// ---- Render UI ----------------------------------------------------------
|
|
echo "<h2>Panel Updates</h2>\n";
|
|
echo "<table class='administration-table'><tr><td>\n";
|
|
|
|
// Current status table
|
|
echo "<h3>Current Installation</h3>\n";
|
|
echo "<table class='center'>\n";
|
|
if ($vinfo) {
|
|
echo "<tr><td><strong>Installed Type:</strong></td><td>" . htmlspecialchars($vinfo['installed_type'] ?? 'N/A') . "</td></tr>\n";
|
|
echo "<tr><td><strong>Installed Source:</strong></td><td>" . htmlspecialchars($vinfo['installed_source'] ?? 'N/A') . "</td></tr>\n";
|
|
echo "<tr><td><strong>Installed Version:</strong></td><td>" . htmlspecialchars($vinfo['installed_version'] ?? 'N/A') . "</td></tr>\n";
|
|
if (!empty($vinfo['installed_commit'])) {
|
|
echo "<tr><td><strong>Installed Commit:</strong></td><td>"
|
|
. htmlspecialchars(substr($vinfo['installed_commit'], 0, 12)) . "</td></tr>\n";
|
|
}
|
|
echo "<tr><td><strong>Installed / Updated At:</strong></td><td>" . htmlspecialchars($vinfo['installed_at'] ?? 'N/A') . "</td></tr>\n";
|
|
} else {
|
|
echo "<tr><td><strong>Installed Version:</strong></td><td>" . htmlspecialchars($current_version) . "</td></tr>\n";
|
|
echo "<tr><td><strong>Current Branch / Type:</strong></td><td>" . htmlspecialchars($current_branch) . "</td></tr>\n";
|
|
if ($git_commit) {
|
|
echo "<tr><td><strong>Git Commit:</strong></td><td>"
|
|
. htmlspecialchars(substr($git_commit, 0, 12)) . "</td></tr>\n";
|
|
}
|
|
}
|
|
echo "<tr><td><strong>Latest Release on GitHub:</strong></td><td>" . $latest_release . "</td></tr>\n";
|
|
echo "<tr><td><strong>Repository:</strong></td><td>"
|
|
. htmlspecialchars("{$repo_owner}/{$repo_name}") . "</td></tr>\n";
|
|
// Backup status rows
|
|
echo "<tr><td><strong>Backup Directory:</strong></td><td><code>"
|
|
. htmlspecialchars(GSP_BACKUP_BASE) . "</code></td></tr>\n";
|
|
if (!empty($backups)) {
|
|
$last_bk = $backups[0];
|
|
$last_ts = htmlspecialchars($last_bk['ts']);
|
|
$last_status = !empty($last_bk['meta']['backup_status'])
|
|
? htmlspecialchars($last_bk['meta']['backup_status'])
|
|
: 'unknown';
|
|
echo "<tr><td><strong>Last Backup:</strong></td><td>"
|
|
. $last_ts . " — status: " . $last_status . "</td></tr>\n";
|
|
} else {
|
|
echo "<tr><td><strong>Last Backup:</strong></td><td><em>None yet</em></td></tr>\n";
|
|
}
|
|
echo "</table>\n<br>\n";
|
|
|
|
// ---- Backup Only --------------------------------------------------------
|
|
echo "<h3>Create Backup</h3>\n";
|
|
echo "<form method='POST'>\n";
|
|
echo "<input type='hidden' name='gsp_update_action' value='backup_only'>\n";
|
|
echo "<input type='hidden' name='gsp_update_csrf' value='" . htmlspecialchars($csrf_token) . "'>\n";
|
|
echo "<button type='submit'"
|
|
. " onclick='return confirm(\"Create a backup of panel files and the database now (no update). Continue?\");'>"
|
|
. "Create Backup Now</button>\n";
|
|
echo "<span style='margin-left:10px;color:#666;'>Saves to: <code>"
|
|
. htmlspecialchars(GSP_BACKUP_BASE) . "</code></span>\n";
|
|
echo "</form>\n";
|
|
|
|
echo "<br>\n";
|
|
|
|
// ---- Numbered Releases --------------------------------------------------
|
|
echo "<h3>Numbered Releases</h3>\n";
|
|
if (is_array($releases) && !empty($releases)) {
|
|
echo "<form method='POST'>\n";
|
|
echo "<input type='hidden' name='gsp_update_action' value='update_release'>\n";
|
|
echo "<input type='hidden' name='gsp_update_csrf' value='" . htmlspecialchars($csrf_token) . "'>\n";
|
|
echo "<select name='gsp_release_version'>\n";
|
|
foreach ($releases as $rel) {
|
|
$tag = htmlspecialchars($rel['tag_name'] ?? '');
|
|
$name = htmlspecialchars($rel['name'] ?? $rel['tag_name'] ?? $tag);
|
|
echo "<option value='{$tag}'>{$name}</option>\n";
|
|
}
|
|
echo "</select>\n";
|
|
echo " <button type='submit'"
|
|
. " onclick='return confirm(\"Back up and update the panel to this release. Continue?\");'>"
|
|
. "Update to Selected Release</button>\n";
|
|
echo "</form>\n";
|
|
} else {
|
|
echo "<p>No releases available (GitHub API unreachable or no releases published).</p>\n";
|
|
}
|
|
|
|
echo "<br>\n";
|
|
|
|
// ---- Development Version ------------------------------------------------
|
|
echo "<h3>Development Version</h3>\n";
|
|
echo "<form method='POST'>\n";
|
|
echo "<input type='hidden' name='gsp_update_action' value='update_stable'>\n";
|
|
echo "<input type='hidden' name='gsp_update_csrf' value='" . htmlspecialchars($csrf_token) . "'>\n";
|
|
echo "<button type='submit'"
|
|
. " onclick='return confirm(\"Back up and update the panel to the "
|
|
. htmlspecialchars($stable_branch, ENT_QUOTES)
|
|
. " branch. Continue?\");'>"
|
|
. "Update to Development Version</button>";
|
|
echo " <span style='margin-left:10px;color:#666;'>Branch: "
|
|
. htmlspecialchars($stable_branch) . "</span>\n";
|
|
echo "</form>\n";
|
|
|
|
echo "<br>\n";
|
|
|
|
// ---- Cutting Edge Version -----------------------------------------------
|
|
echo "<h3>Cutting Edge Version</h3>\n";
|
|
echo "<p class='failure' style='display:inline-block;padding:5px 10px;'>"
|
|
. "⚠ Warning: The cutting edge version may be unstable or contain bugs. Use with caution in production.</p><br><br>\n";
|
|
echo "<form method='POST'>\n";
|
|
echo "<input type='hidden' name='gsp_update_action' value='update_unstable'>\n";
|
|
echo "<input type='hidden' name='gsp_update_csrf' value='" . htmlspecialchars($csrf_token) . "'>\n";
|
|
echo "<button type='submit'"
|
|
. " onclick='return confirm(\"WARNING: This is the cutting-edge (unstable) branch and may contain bugs.\\n\\nBack up and update anyway?\");'>"
|
|
. "Update to Cutting Edge Version</button>";
|
|
echo " <span style='margin-left:10px;color:#666;'>Branch: "
|
|
. htmlspecialchars($unstable_branch) . "</span>\n";
|
|
echo "</form>\n";
|
|
|
|
// ---- Revert Section -----------------------------------------------------
|
|
if (!empty($backups)) {
|
|
echo "<br>\n<h3>Revert Panel Update</h3>\n";
|
|
echo "<p>Available backups in <code>" . htmlspecialchars(GSP_BACKUP_BASE) . "</code>:</p>\n";
|
|
echo "<form method='POST'>\n";
|
|
echo "<input type='hidden' name='gsp_update_action' value='revert'>\n";
|
|
echo "<input type='hidden' name='gsp_update_csrf' value='" . htmlspecialchars($csrf_token) . "'>\n";
|
|
echo "<select name='gsp_revert_backup'>\n";
|
|
foreach ($backups as $bk) {
|
|
$ts = htmlspecialchars($bk['ts']);
|
|
$label = $ts;
|
|
// Support both new metadata keys (update_target_type/update_target_version)
|
|
// and legacy keys (update_type/update_target) for backward compatibility
|
|
$bk_type = $bk['meta']['update_target_type'] ?? $bk['meta']['update_type'] ?? '';
|
|
$bk_target = $bk['meta']['update_target_version'] ?? $bk['meta']['update_target'] ?? '';
|
|
if (!empty($bk_type) && !empty($bk_target)) {
|
|
$label .= ' (before ' . htmlspecialchars($bk_type)
|
|
. ': ' . htmlspecialchars($bk_target) . ')';
|
|
}
|
|
if (!empty($bk['meta']['installed_version'])) {
|
|
$label .= ' [was v' . htmlspecialchars($bk['meta']['installed_version']) . ']';
|
|
}
|
|
echo "<option value='" . htmlspecialchars($bk['ts']) . "'>{$label}</option>\n";
|
|
}
|
|
echo "</select>\n";
|
|
echo " <button type='submit'"
|
|
. " onclick='return confirm(\"This will RESTORE panel files AND the database from the selected backup.\\n\\nAll changes since that backup will be lost. Are you sure?\");'>"
|
|
. "Revert Panel Update</button>\n";
|
|
echo "</form>\n";
|
|
}
|
|
|
|
echo "</td></tr></table>\n";
|
|
}
|
|
?>
|