btcloud/app/lib/BtPlugins.php

<?php

namespace app\lib;

use Exception;
use ZipArchive;

class BtPlugins
{
    private $btapi;
    private $os;

    //需屏蔽的插件名称列表
    public static $block_plugins = ['dns', 'bt_boce', 'ssl_verify', 'firewall', 'KylinOperatingSystem', 'KingdeeApusicDistributedCache', 'BorlandCacheServer', 'GBase8s', 'KingdeeApusicLoadBalancer', 'BorlandWebServer'];
    public static $skip_plugins = ['php_filter', 'enterprise_backup', 'tamper_drive'];

    public function __construct($os){
        $this->os = $os;
        if($os == 'en'){
            $bt_url = config_get('enbt_url');
            $bt_key = config_get('enbt_key');
        }elseif($os == 'Windows'){
            $bt_url = config_get('wbt_url');
            $bt_key = config_get('wbt_key');
        }else{
            $bt_url = config_get('bt_url');
            $bt_key = config_get('bt_key');
        }
        if(!$bt_url || !$bt_key) throw new Exception('请先配置好宝塔面板接口信息');
        $this->btapi = new Btapi($bt_url, $bt_key);
    }

    //获取插件列表
    public function get_plugin_list(){
        $result = $this->btapi->get_plugin_list();
        if($result && isset($result['list']) && isset($result['type'])){
            if(empty($result['list']) || empty($result['type'])){
                throw new Exception('获取插件列表失败：插件列表为空');
            }
            $newlist = [];
            foreach($result['list'] as $item){
                if(!in_array($item['name'], self::$block_plugins)) $newlist[] = $item;
            }
            $result['list'] = $newlist;
            return $result;
        }else{
            throw new Exception('获取插件列表失败：'.(isset($result['msg'])?$result['msg']:'面板连接失败'));
        }
    }

    //下载插件（自动判断是否第三方）
    public function download_plugin($plugin_name, $version, $plugin_info){
        if($plugin_info['type'] == 10 && isset($plugin_info['versions'][0]['download'])){
            if($plugin_info['price'] == 0){
                $this->btapi->create_plugin_other_order($plugin_info['id']);
            }
            $fname = $plugin_info['versions'][0]['download'];
            $filemd5 = $plugin_info['versions'][0]['md5'];
            $this->download_plugin_other($fname, $filemd5);
            if(isset($plugin_info['min_image']) && strpos($plugin_info['min_image'], 'fname=')){
                $fname = substr($plugin_info['min_image'], strpos($plugin_info['min_image'], '?fname=')+7);
                $this->download_plugin_other($fname);
            }
        }else{
            $this->download_plugin_package($plugin_name, $version);
        }
    }

    //下载插件包
    private function download_plugin_package($plugin_name, $version){
        $filepath = get_data_dir($this->os).'plugins/package/'.$plugin_name.'-'.$version.'.zip';
        $result = $this->btapi->get_plugin_filename($plugin_name, $version);
        if($result && isset($result['status'])){
            if($result['status'] == true){
                $filename = $result['filename'];
                $this->download_file($filename, $filepath);
                if(file_exists($filepath)){
                    $zip = new ZipArchive;
                    if ($zip->open($filepath) === true)
                    {
                        $plugins_dir = get_data_dir($this->os).'plugins/folder/'.$plugin_name.'-'.$version;
                        $zip->extractTo($plugins_dir, $plugin_name.'/'.$plugin_name.'_main.py');
                        $zip->close();
                        $main_filepath = $plugins_dir.'/'.$plugin_name.'/'.$plugin_name.'_main.py';
                        if(file_exists($main_filepath) && filesize($main_filepath)>10){
                            if(!strpos(file_get_contents($main_filepath), 'import ')){ //加密py文件，需要解密
                                $this->decode_plugin_main($plugin_name, $version, $main_filepath);
                                $this->noauth_plugin_main($main_filepath);
                                $zip->open($filepath, ZipArchive::CREATE);
                                $zip->addFile($main_filepath, $plugin_name.'/'.$plugin_name.'_main.py');
                                $zip->close();
                            }
                        }
                        deleteDir($plugins_dir);
                    }else{
                        unlink($filepath);
                        throw new Exception('插件包解压缩失败');
                    }
                    return true;
                }else{
                    throw new Exception('下载插件包失败，本地文件不存在');
                }
            }else{
                throw new Exception('下载插件包失败：'.($result['msg']?$result['msg']:'未知错误'));
            }
        }else{
            throw new Exception('下载插件包失败，接口返回错误');
        }
    }

    //下载插件主程序文件
    public function download_plugin_main($plugin_name, $version){
        $filepath = get_data_dir($this->os).'plugins/main/'.$plugin_name.'-'.$version.'.dat';
        $result = $this->btapi->get_plugin_main_filename($plugin_name, $version);
        if($result && isset($result['status'])){
            if($result['status'] == true){
                $filename = $result['filename'];
                $this->download_file($filename, $filepath);
                if(file_exists($filepath)){
                    return true;
                }else{
                    throw new Exception('下载插件主程序文件失败，本地文件不存在');
                }
            }else{
                throw new Exception('下载插件主程序文件失败：'.($result['msg']?$result['msg']:'未知错误'));
            }
        }else{
            throw new Exception('下载插件主程序文件失败，接口返回错误');
        }
    }

    //解密并下载插件主程序文件
    private function decode_plugin_main($plugin_name, $version, $main_filepath){
        if($this->decode_plugin_main_local($main_filepath)) return true;
        $result = $this->btapi->get_decode_plugin_main($plugin_name, $version);
        if($result && isset($result['status'])){
            if($result['status'] == true){
                $filename = $result['filename'];
                $this->download_file($filename, $main_filepath);
                return true;
            }else{
                throw new Exception('解密插件主程序文件失败：'.($result['msg']?$result['msg']:'未知错误'));
            }
        }else{
            throw new Exception('解密插件主程序文件失败，接口返回错误');
        }
    }

    //本地解密插件主程序文件
    public function decode_plugin_main_local($main_filepath){
        $userinfo = $this->btapi->get_user_info();
        if(isset($userinfo['uid'])){
            $src = file_get_contents($main_filepath);
            if($src===false)throw new Exception('文件打开失败');
            if(!$src || strpos($src, 'import ')!==false)return true;
            $uid = $userinfo['uid'];
            $serverid = $userinfo['serverid'];
            $key = md5(substr($serverid, 10, 16).$uid.$serverid);
            $iv = md5($key.$serverid);
            $key = substr($key, 8, 16);
            $iv = substr($iv, 8, 16);
            $data_arr = explode("\n", $src);
            $de_text = '';
            foreach($data_arr as $data){
                $data = trim($data);
                if(!empty($data)){
                    $tmp = openssl_decrypt($data, 'aes-128-cbc', $key, 0, $iv);
                    if($tmp !== false) $de_text .= $tmp;
                }
            }
            if(!empty($de_text) && strpos($de_text, 'import ')!==false){
                file_put_contents($main_filepath, $de_text);
                return true;
            }
            return false;
        }else{
            throw new Exception('解密插件主程序文件失败，获取用户信息失败');
        }
    }

    //去除插件主程序文件授权校验
    private function noauth_plugin_main($main_filepath){
        $data = file_get_contents($main_filepath);
        if(!$data) return false;

        $data = str_replace('\'http://www.bt.cn/api/panel/get_soft_list_test', 'public.GetConfigValue(\'home\')+\'/api/panel/get_soft_list_test', $data);
        $data = str_replace('\'https://www.bt.cn/api/panel/get_soft_list_test', 'public.GetConfigValue(\'home\')+\'/api/panel/get_soft_list_test', $data);
        $data = str_replace('\'http://www.bt.cn/api/panel/get_soft_list', 'public.GetConfigValue(\'home\')+\'/api/panel/get_soft_list', $data);
        $data = str_replace('\'https://www.bt.cn/api/panel/get_soft_list', 'public.GetConfigValue(\'home\')+\'/api/panel/get_soft_list', $data);
        $data = str_replace('\'http://www.bt.cn/api/panel/notpro', 'public.GetConfigValue(\'home\')+\'/api/panel/notpro', $data);
        $data = str_replace('\'https://www.bt.cn/api/panel/notpro', 'public.GetConfigValue(\'home\')+\'/api/panel/notpro', $data);

        $data = str_replace('\'http://www.bt.cn/api/wpanel/get_soft_list_test', 'public.GetConfigValue(\'home\')+\'/api/wpanel/get_soft_list_test', $data);
        $data = str_replace('\'https://www.bt.cn/api/wpanel/get_soft_list_test', 'public.GetConfigValue(\'home\')+\'/api/wpanel/get_soft_list_test', $data);
        $data = str_replace('\'http://www.bt.cn/api/wpanel/get_soft_list', 'public.GetConfigValue(\'home\')+\'/api/wpanel/get_soft_list', $data);
        $data = str_replace('\'https://www.bt.cn/api/wpanel/get_soft_list', 'public.GetConfigValue(\'home\')+\'/api/wpanel/get_soft_list', $data);
        $data = str_replace('\'http://www.bt.cn/api/wpanel/notpro', 'public.GetConfigValue(\'home\')+\'/api/wpanel/notpro', $data);
        $data = str_replace('\'https://www.bt.cn/api/wpanel/notpro', 'public.GetConfigValue(\'home\')+\'/api/wpanel/notpro', $data);

        $data = str_replace('"https://www.bt.cn/api/bt_waf/get_malicious', 'public.GetConfigValue(\'home\')+"/api/bt_waf/get_malicious', $data);
        $data = str_replace('\'http://www.bt.cn/api/bt_waf/getSpiders', 'public.GetConfigValue(\'home\')+\'/api/bt_waf/getSpiders', $data);
        $data = str_replace('\'https://www.bt.cn/api/bt_waf/getSpiders', 'public.GetConfigValue(\'home\')+\'/api/bt_waf/getSpiders', $data);
        $data = str_replace('\'http://www.bt.cn/api/bt_waf/addSpider', 'public.GetConfigValue(\'home\')+\'/api/bt_waf/addSpider', $data);
        $data = str_replace('\'https://www.bt.cn/api/bt_waf/addSpider', 'public.GetConfigValue(\'home\')+\'/api/bt_waf/addSpider', $data);
        $data = str_replace('\'https://www.bt.cn/api/bt_waf/getVulScanInfoList', 'public.GetConfigValue(\'home\')+\'/api/bt_waf/getVulScanInfoList', $data);
        $data = str_replace('\'https://www.bt.cn/api/bt_waf/reportInterceptFail', 'public.GetConfigValue(\'home\')+\'/api/bt_waf/reportInterceptFail', $data);
        $data = str_replace('"https://www.bt.cn/api/bt_waf/reportInterceptFail', 'public.GetConfigValue(\'home\')+"/api/bt_waf/reportInterceptFail', $data);
        $data = str_replace('\'https://www.bt.cn/api/v2/contact/nps/questions', 'public.GetConfigValue(\'home\')+\'/panel/notpro', $data);
        $data = str_replace('\'https://www.bt.cn/api/v2/contact/nps/submit', 'public.GetConfigValue(\'home\')+\'/panel/notpro', $data);
        $data = str_replace('\'http://www.bt.cn/api/Auth', 'public.GetConfigValue(\'home\')+\'/api/Auth', $data);
        $data = str_replace('\'https://www.bt.cn/api/Auth', 'public.GetConfigValue(\'home\')+\'/api/Auth', $data);

        $data = str_replace('\'https://brandnew.aapanel.com/api/panel/getSoftList', 'public.OfficialApiBase()+\'/api/panel/getSoftList', $data);

        file_put_contents($main_filepath, $data);
    }

    //下载插件其他文件
    private function download_plugin_other($fname, $filemd5 = null){
        $filepath = get_data_dir().'plugins/other/'.$fname;
        @mkdir(dirname($filepath), 0777, true);
        $result = $this->btapi->get_plugin_other_filename($fname);
        if($result && isset($result['status'])){
            if($result['status'] == true){
                $filename = $result['filename'];
                $this->download_file($filename, $filepath);
                if(file_exists($filepath)){
                    if($filemd5 && md5_file($filepath) != $filemd5){
                        $msg = filesize($filepath) < 300 ? file_get_contents($filepath) : '插件文件MD5校验失败';
                        @unlink($filepath);
                        throw new Exception($msg);
                    }
                    return true;
                }else{
                    throw new Exception('下载插件文件失败，本地文件不存在');
                }
            }else{
                throw new Exception('下载插件文件失败：'.($result['msg']?$result['msg']:'未知错误'));
            }
        }else{
            throw new Exception('下载插件文件失败，接口返回错误');
        }
    }

    //下载文件
    private function download_file($filename, $filepath){
        try{
            $this->btapi->download($filename, $filepath);
        }catch(Exception $e){
            @unlink($filepath);
            //宝塔bug小文件下载失败，改用base64下载
            $result = $this->btapi->get_file($filename);
            if($result && isset($result['status']) && $result['status']==true){
                $filedata = base64_decode($result['data']);
                if(strlen($filedata) < 4096 && substr($filedata,0,1)=='{' && substr($filedata,-1,1)=='}'){
                    $arr = json_decode($filedata, true);
                    if($arr){
                        throw new Exception('获取文件失败：'.($arr['msg']?$arr['msg']:'未知错误'));
                    }
                }
                if(!$filedata){
                    throw new Exception('获取文件失败：文件内容为空');
                }
                file_put_contents($filepath, $filedata);
            }elseif($result){
                throw new Exception('获取文件失败：'.($result['msg']?$result['msg']:'未知错误'));
            }else{
                throw new Exception('获取文件失败：未知错误');
            }
        }
    }

    //获取一键部署列表
    public function get_deplist(){
        $result = $this->btapi->get_deplist();
        if($result && isset($result['list']) && isset($result['type'])){
            if(empty($result['list']) || empty($result['type'])){
                throw new Exception('获取一键部署列表失败：一键部署列表为空');
            }
            return $result;
        }else{
            throw new Exception('获取一键部署列表失败：'.(isset($result['msg'])?$result['msg']:'面板连接失败'));
        }
    }

    //获取蜘蛛IP列表
    public function btwaf_getspiders(){
        $result = $this->btapi->btwaf_getspiders();
        if(isset($result['status']) && $result['status']){
            return $result['data'];
        }else{
            throw new Exception(isset($result['msg'])?$result['msg']:'获取失败');
        }
    }

    //获取堡塔恶意情报IP库
    public function btwaf_getmalicious(){
        $result = $this->btapi->btwaf_getmalicious();
        if(isset($result['success'])){
            return $result;
        }elseif(isset($result['msg'])){
            throw new Exception($result['msg']);
        }else{
            throw new Exception(isset($result['res'])?$result['res']:'获取失败');
        }
    }

}