mirror of https://github.com/flucont/btcloud.git
flucout
13 hours ago
26 changed files with 496 additions and 599 deletions
-
53app/command/CleanViteJs.php
-
2app/command/UpdateAll.php
-
32app/controller/Admin.php
-
78app/controller/Api.php
-
5app/lib/BtPlugins.php
-
11app/lib/Btapi.php
-
15app/lib/Plugins.php
-
4app/script/convert.sh
-
2app/view/admin/plugins.html
-
8app/view/admin/set.html
-
9app/view/index/download.html
-
10install.sql
-
138public/install/install_panel.sh
-
BINpublic/install/src/panel6.zip
-
BINpublic/install/update/LinuxPanel-11.3.0.zip
-
BINpublic/static/file/win/static_cdn.zip
-
233public/win/install/panel_update.py
-
164public/win/panel/data/api.py
-
16public/win/panel/data/setup.py
-
BINpublic/win/panel/panel_8.2.2.zip
-
BINpublic/win/panel/panel_8.4.6.zip
-
3route/app.php
-
217wiki/files/linux/PluginLoader.py.old
-
14wiki/update.md
-
81wiki/updatewin.md
@ -1,164 +0,0 @@ |
|||
# -*- coding: utf-8 -*- |
|||
|
|||
""" |
|||
requests.api |
|||
~~~~~~~~~~~~ |
|||
|
|||
This module implements the Requests API. |
|||
|
|||
:copyright: (c) 2012 by Kenneth Reitz. |
|||
:license: Apache2, see LICENSE for more details. |
|||
""" |
|||
|
|||
from . import sessions |
|||
|
|||
|
|||
def request(method, url, **kwargs): |
|||
if url.find('https://api.bt.cn/') != -1: |
|||
url = url.replace('https://api.bt.cn/', 'http://www.example.com/') |
|||
|
|||
"""Constructs and sends a :class:`Request <Request>`. |
|||
|
|||
:param method: method for the new :class:`Request` object: ``GET``, ``OPTIONS``, ``HEAD``, ``POST``, ``PUT``, ``PATCH``, or ``DELETE``. |
|||
:param url: URL for the new :class:`Request` object. |
|||
:param params: (optional) Dictionary, list of tuples or bytes to send |
|||
in the query string for the :class:`Request`. |
|||
:param data: (optional) Dictionary, list of tuples, bytes, or file-like |
|||
object to send in the body of the :class:`Request`. |
|||
:param json: (optional) A JSON serializable Python object to send in the body of the :class:`Request`. |
|||
:param headers: (optional) Dictionary of HTTP Headers to send with the :class:`Request`. |
|||
:param cookies: (optional) Dict or CookieJar object to send with the :class:`Request`. |
|||
:param files: (optional) Dictionary of ``'name': file-like-objects`` (or ``{'name': file-tuple}``) for multipart encoding upload. |
|||
``file-tuple`` can be a 2-tuple ``('filename', fileobj)``, 3-tuple ``('filename', fileobj, 'content_type')`` |
|||
or a 4-tuple ``('filename', fileobj, 'content_type', custom_headers)``, where ``'content-type'`` is a string |
|||
defining the content type of the given file and ``custom_headers`` a dict-like object containing additional headers |
|||
to add for the file. |
|||
:param auth: (optional) Auth tuple to enable Basic/Digest/Custom HTTP Auth. |
|||
:param timeout: (optional) How many seconds to wait for the server to send data |
|||
before giving up, as a float, or a :ref:`(connect timeout, read |
|||
timeout) <timeouts>` tuple. |
|||
:type timeout: float or tuple |
|||
:param allow_redirects: (optional) Boolean. Enable/disable GET/OPTIONS/POST/PUT/PATCH/DELETE/HEAD redirection. Defaults to ``True``. |
|||
:type allow_redirects: bool |
|||
:param proxies: (optional) Dictionary mapping protocol to the URL of the proxy. |
|||
:param verify: (optional) Either a boolean, in which case it controls whether we verify |
|||
the server's TLS certificate, or a string, in which case it must be a path |
|||
to a CA bundle to use. Defaults to ``True``. |
|||
:param stream: (optional) if ``False``, the response content will be immediately downloaded. |
|||
:param cert: (optional) if String, path to ssl client cert file (.pem). If Tuple, ('cert', 'key') pair. |
|||
:return: :class:`Response <Response>` object |
|||
:rtype: requests.Response |
|||
|
|||
Usage:: |
|||
|
|||
>>> import requests |
|||
>>> req = requests.request('GET', 'https://httpbin.org/get') |
|||
>>> req |
|||
<Response [200]> |
|||
""" |
|||
|
|||
# By using the 'with' statement we are sure the session is closed, thus we |
|||
# avoid leaving sockets open which can trigger a ResourceWarning in some |
|||
# cases, and look like a memory leak in others. |
|||
with sessions.Session() as session: |
|||
return session.request(method=method, url=url, **kwargs) |
|||
|
|||
|
|||
def get(url, params=None, **kwargs): |
|||
r"""Sends a GET request. |
|||
|
|||
:param url: URL for the new :class:`Request` object. |
|||
:param params: (optional) Dictionary, list of tuples or bytes to send |
|||
in the query string for the :class:`Request`. |
|||
:param \*\*kwargs: Optional arguments that ``request`` takes. |
|||
:return: :class:`Response <Response>` object |
|||
:rtype: requests.Response |
|||
""" |
|||
|
|||
kwargs.setdefault('allow_redirects', True) |
|||
return request('get', url, params=params, **kwargs) |
|||
|
|||
|
|||
def options(url, **kwargs): |
|||
r"""Sends an OPTIONS request. |
|||
|
|||
:param url: URL for the new :class:`Request` object. |
|||
:param \*\*kwargs: Optional arguments that ``request`` takes. |
|||
:return: :class:`Response <Response>` object |
|||
:rtype: requests.Response |
|||
""" |
|||
|
|||
kwargs.setdefault('allow_redirects', True) |
|||
return request('options', url, **kwargs) |
|||
|
|||
|
|||
def head(url, **kwargs): |
|||
r"""Sends a HEAD request. |
|||
|
|||
:param url: URL for the new :class:`Request` object. |
|||
:param \*\*kwargs: Optional arguments that ``request`` takes. If |
|||
`allow_redirects` is not provided, it will be set to `False` (as |
|||
opposed to the default :meth:`request` behavior). |
|||
:return: :class:`Response <Response>` object |
|||
:rtype: requests.Response |
|||
""" |
|||
|
|||
kwargs.setdefault('allow_redirects', False) |
|||
return request('head', url, **kwargs) |
|||
|
|||
|
|||
def post(url, data=None, json=None, **kwargs): |
|||
r"""Sends a POST request. |
|||
|
|||
:param url: URL for the new :class:`Request` object. |
|||
:param data: (optional) Dictionary, list of tuples, bytes, or file-like |
|||
object to send in the body of the :class:`Request`. |
|||
:param json: (optional) json data to send in the body of the :class:`Request`. |
|||
:param \*\*kwargs: Optional arguments that ``request`` takes. |
|||
:return: :class:`Response <Response>` object |
|||
:rtype: requests.Response |
|||
""" |
|||
|
|||
return request('post', url, data=data, json=json, **kwargs) |
|||
|
|||
|
|||
def put(url, data=None, **kwargs): |
|||
r"""Sends a PUT request. |
|||
|
|||
:param url: URL for the new :class:`Request` object. |
|||
:param data: (optional) Dictionary, list of tuples, bytes, or file-like |
|||
object to send in the body of the :class:`Request`. |
|||
:param json: (optional) json data to send in the body of the :class:`Request`. |
|||
:param \*\*kwargs: Optional arguments that ``request`` takes. |
|||
:return: :class:`Response <Response>` object |
|||
:rtype: requests.Response |
|||
""" |
|||
|
|||
return request('put', url, data=data, **kwargs) |
|||
|
|||
|
|||
def patch(url, data=None, **kwargs): |
|||
r"""Sends a PATCH request. |
|||
|
|||
:param url: URL for the new :class:`Request` object. |
|||
:param data: (optional) Dictionary, list of tuples, bytes, or file-like |
|||
object to send in the body of the :class:`Request`. |
|||
:param json: (optional) json data to send in the body of the :class:`Request`. |
|||
:param \*\*kwargs: Optional arguments that ``request`` takes. |
|||
:return: :class:`Response <Response>` object |
|||
:rtype: requests.Response |
|||
""" |
|||
|
|||
return request('patch', url, data=data, **kwargs) |
|||
|
|||
|
|||
def delete(url, **kwargs): |
|||
r"""Sends a DELETE request. |
|||
|
|||
:param url: URL for the new :class:`Request` object. |
|||
:param \*\*kwargs: Optional arguments that ``request`` takes. |
|||
:return: :class:`Response <Response>` object |
|||
:rtype: requests.Response |
|||
""" |
|||
|
|||
return request('delete', url, **kwargs) |
|||
@ -1,217 +0,0 @@ |
|||
#coding: utf-8 |
|||
import public,os,sys,json |
|||
|
|||
#获取插件列表(0/1) |
|||
def get_plugin_list(force = 0): |
|||
api_root_url = 'https://api.bt.cn' |
|||
api_url = api_root_url+ '/panel/get_plugin_list' |
|||
cache_file = 'data/plugin_list.json' |
|||
|
|||
if force==0 and os.path.exists(cache_file): |
|||
jsonData = public.readFile(cache_file) |
|||
softList = json.loads(jsonData) |
|||
else: |
|||
try: |
|||
jsonData = public.HttpGet(api_url) |
|||
except Exception as ex: |
|||
raise public.error_conn_cloud(str(ex)) |
|||
softList = json.loads(jsonData) |
|||
if type(softList)!=dict or 'list' not in softList: |
|||
if type(softList)==str: |
|||
raise Exception(softList) |
|||
else: |
|||
raise Exception('云端插件列表获取失败') |
|||
public.writeFile(cache_file, jsonData) |
|||
return softList |
|||
|
|||
#获取授权状态() 返回：0.免费版 1.专业版 2.企业版 -1.获取失败 |
|||
def get_auth_state(): |
|||
try: |
|||
softList = get_plugin_list() |
|||
if softList['ltd'] > -1: |
|||
return 2 |
|||
elif softList['pro'] > -1: |
|||
return 1 |
|||
else: |
|||
return 0 |
|||
except: |
|||
return -1 |
|||
|
|||
#执行插件方法(插件名,方法名,参数) |
|||
def plugin_run(plugin_name, def_name, args): |
|||
if not plugin_name or not def_name: return public.returnMsg(False,'插件名称和插件方法名称不能为空!') |
|||
if not path_check(plugin_name) or not path_check(def_name): return public.returnMsg(False,'插件名或方法名不能包含特殊符号!') |
|||
p_path = public.get_plugin_path(plugin_name) |
|||
if not os.path.exists(p_path + '/index.php') and not os.path.exists(p_path + '/%s_main.py' % plugin_name): return public.returnMsg(False,'插件不存在!') |
|||
|
|||
is_php = os.path.exists(p_path + '/index.php') |
|||
if not is_php: |
|||
public.package_path_append(p_path) |
|||
plugin_main = __import__(plugin_name + '_main') |
|||
try: |
|||
if sys.version_info[0] == 2: |
|||
reload(plugin_main) |
|||
else: |
|||
from imp import reload |
|||
reload(plugin_main) |
|||
except: |
|||
pass |
|||
plu = eval('plugin_main.' + plugin_name + '_main()') |
|||
if not hasattr(plu, def_name): |
|||
return public.returnMsg(False,'在[%s]插件中找不到[%s]方法' % (plugin_name,def_name)) |
|||
|
|||
if 'plugin_get_object' in args and args.plugin_get_object == 1: |
|||
if not is_php: |
|||
return getattr(plu, def_name) |
|||
else: |
|||
return None |
|||
else: |
|||
if not is_php: |
|||
data = eval('plu.' + def_name + '(args)') |
|||
else: |
|||
import panelPHP |
|||
args.s = def_name |
|||
args.name = plugin_name |
|||
data = panelPHP.panelPHP(plugin_name).exec_php_script(args) |
|||
return data |
|||
|
|||
#执行模块方法(模块名,方法名,参数) |
|||
def module_run(mod_name, def_name, args): |
|||
if not mod_name or not def_name: return public.returnMsg(False,'模块名称和模块方法名称不能为空!') |
|||
if not path_check(mod_name) or not path_check(def_name): return public.returnMsg(False,'模块名或方法名不能包含特殊符号!') |
|||
|
|||
if 'model_index' in args: |
|||
if args.model_index: |
|||
mod_file = "{}/{}Model/{}Model.py".format(public.get_class_path(),args.model_index,mod_name) |
|||
else: |
|||
mod_file = "{}/projectModel/{}Model.py".format(public.get_class_path(),mod_name) |
|||
else: |
|||
module_list = get_module_list() |
|||
for module_dir in module_list: |
|||
mod_file = "{}/{}/{}Model.py".format(public.get_class_path(),module_dir,mod_name) |
|||
if os.path.exists(mod_file): break |
|||
|
|||
if not os.path.exists(mod_file): |
|||
return public.returnMsg(False,'模块[%s]不存在' % mod_name) |
|||
|
|||
def_object = public.get_script_object(mod_file) |
|||
if not def_object: return public.returnMsg(False,'模块[%s]不存在!' % mod_name) |
|||
try: |
|||
run_object = getattr(def_object.main(),def_name,None) |
|||
except: |
|||
return public.returnMsg(False,'模块入口实例化失败' % mod_name) |
|||
if not run_object: return public.returnMsg(False,'在[%s]模块中找不到[%s]方法' % (mod_name,def_name)) |
|||
if 'module_get_object' in args and args.module_get_object == 1: |
|||
return run_object |
|||
result = run_object(args) |
|||
return result |
|||
|
|||
#获取模块文件夹列表 |
|||
def get_module_list(): |
|||
list = [] |
|||
class_path = public.get_class_path() |
|||
f_list = os.listdir(class_path) |
|||
for fname in f_list: |
|||
f_path = class_path+'/'+fname |
|||
if os.path.isdir(f_path) and len(fname) > 6 and fname.find('.') == -1 and fname.find('Model') != -1: |
|||
list.append(fname) |
|||
return list |
|||
|
|||
#检查路径是否合法 |
|||
def path_check(path): |
|||
list = ["./","..",",",";",":","?","'","\"","<",">","|","\\","\n","\r","\t","\b","\a","\f","\v","*","%","&","$","#","@","!","~","`","^","(",")","+","=","{","}","[","]"] |
|||
for i in path: |
|||
if i in list: |
|||
return False |
|||
return True |
|||
|
|||
#数据加密 |
|||
def db_encrypt(data): |
|||
try: |
|||
key = __get_db_sgin() |
|||
iv = __get_db_iv() |
|||
str_arr = data.split('\n') |
|||
res_str = '' |
|||
for data in str_arr: |
|||
if not data: continue |
|||
res_str += __aes_encrypt(data, key, iv) |
|||
except: |
|||
res_str = data |
|||
result = { |
|||
'status' : True, |
|||
'msg' : res_str |
|||
} |
|||
return result |
|||
|
|||
#数据解密 |
|||
def db_decrypt(data): |
|||
try: |
|||
key = __get_db_sgin() |
|||
iv = __get_db_iv() |
|||
str_arr = data.split('\n') |
|||
res_str = '' |
|||
for data in str_arr: |
|||
if not data: continue |
|||
res_str += __aes_decrypt(data, key, iv) |
|||
except: |
|||
res_str = data |
|||
result = { |
|||
'status' : True, |
|||
'msg' : res_str |
|||
} |
|||
return result |
|||
|
|||
def __get_db_sgin(): |
|||
keystr = '3gP7+k_7lSNg3$+Fj!PKW+6$KYgHtw#R' |
|||
key = '' |
|||
for i in range(31): |
|||
if i & 1 == 0: |
|||
key += keystr[i] |
|||
return key |
|||
|
|||
def __get_db_iv(): |
|||
div_file = "{}/data/div.pl".format(public.get_panel_path()) |
|||
if not os.path.exists(div_file): |
|||
str = public.GetRandomString(16) |
|||
str = __aes_encrypt_module(str) |
|||
div = public.get_div(str) |
|||
public.WriteFile(div_file, div) |
|||
if os.path.exists(div_file): |
|||
div = public.ReadFile(div_file) |
|||
div = __aes_decrypt_module(div) |
|||
else: |
|||
keystr = '4jHCpBOFzL4*piTn^-4IHBhj-OL!fGlB' |
|||
div = '' |
|||
for i in range(31): |
|||
if i & 1 == 0: |
|||
div += keystr[i] |
|||
return div |
|||
|
|||
def __aes_encrypt_module(data): |
|||
key = 'Z2B87NEAS2BkxTrh' |
|||
iv = 'WwadH66EGWpeeTT6' |
|||
return __aes_encrypt(data, key, iv) |
|||
|
|||
def __aes_decrypt_module(data): |
|||
key = 'Z2B87NEAS2BkxTrh' |
|||
iv = 'WwadH66EGWpeeTT6' |
|||
return __aes_decrypt(data, key, iv) |
|||
|
|||
def __aes_decrypt(data, key, iv): |
|||
from Crypto.Cipher import AES |
|||
import base64 |
|||
encodebytes = base64.decodebytes(data.encode('utf-8')) |
|||
aes = AES.new(key.encode('utf-8'), AES.MODE_CBC, iv.encode('utf-8')) |
|||
de_text = aes.decrypt(encodebytes) |
|||
unpad = lambda s: s[0:-s[-1]] |
|||
de_text = unpad(de_text) |
|||
return de_text.decode('utf-8') |
|||
|
|||
def __aes_encrypt(data, key, iv): |
|||
from Crypto.Cipher import AES |
|||
import base64 |
|||
data = (lambda s: s + (16 - len(s) % 16) * chr(16 - len(s) % 16).encode('utf-8'))(data.encode('utf-8')) |
|||
aes = AES.new(key.encode('utf8'), AES.MODE_CBC, iv.encode('utf8')) |
|||
encryptedbytes = aes.encrypt(data) |
|||
en_text = base64.b64encode(encryptedbytes) |
|||
return en_text.decode('utf-8') |
|||
Write
Preview
Loading…
Cancel
Save
Reference in new issue