コード例 #1
0
    def get(self, page=None):

        self.clear_cookie("user")
        template = "public/login.html"
        context = {'login': None}

        server_data = multi.get_stats_for_servers()
        server_list = []

        for key, value in server_data.items():
            server_list.append(value)

        context['server_data'] = server_list

        self.render(template, data=context)
コード例 #2
0
    def post(self):
        entered_user = bleach.clean(self.get_argument('username'))
        entered_password = bleach.clean(self.get_argument('password'))

        remote_ip = self.request.headers.get("X-Real-IP") or \
                    self.request.headers.get("X-Forwarded-For") or \
                    self.request.remote_ip

        try:
            user_data = Users.get(Users.username == entered_user)

            if user_data:
                # if the login is good and the pass verified, we go to the dashboard
                login_result = helper.verify_pass(entered_password,
                                                  user_data.password)
                if login_result:
                    self.set_current_user(entered_user)

                    logger.info("User: {} Logged in from IP: {}".format(
                        entered_user, remote_ip))

                    if helper.check_file_exists(helper.new_install_file):
                        next_page = "/setup/step1"
                    else:
                        next_page = '/admin/dashboard'

                    self.redirect(next_page)
        except:
            pass

        template = "public/login.html"
        context = {'login': None}

        server_data = multi.get_stats_for_servers()
        server_list = []

        for key, value in server_data.items():
            server_list.append(value)

        context['server_data'] = server_list

        self.render(template, data=context)
コード例 #3
0
ファイル: api.py プロジェクト: insuusvenerati/crafty-web
    def get(self):
        token = self.get_argument('token')
        user = self.authenticate_user(token)

        if user is None:
            self.access_denied('unknown')

        if not check_role_permission(
                user, 'api_access') and not check_role_permission(
                    user, 'logs'):
            self.access_denied(user)

        stats = multi.get_stats_for_servers()
        data = []

        for server in stats:
            server = stats[server]
            server.pop('time')  # We dont need the request time
            data.append(server)

        self.return_response(200, {}, data, {})
コード例 #4
0
    def do_show_stats(self, line):
        multi.do_host_status()
        host_stats = multi.get_host_status()
        server_stats = multi.get_stats_for_servers()

        websettings = Webserver.get()

        port_number = websettings.port_number

        console.info("/" * 75)
        console.info("#\t\t Crafty Controller Server Stats \t\t\t#")
        console.info("/" * 75)

        console.info("Boot Time:\t {}".format(host_stats['boot_time']))
        console.info("Webconsole at:\t https://{}:{}".format(
            helper.get_local_ip(), port_number))
        console.info("-" * 75)

        console.info("CPU Usage:\t {}".format(host_stats['cpu_usage']))
        console.info("CPU Cores:\t {}".format(host_stats['cpu_cores']))
        console.info("Mem Percent:\t {}".format(host_stats['mem_percent']))
        console.info("Mem Usage: \t {} / {}".format(host_stats['mem_usage'],
                                                    host_stats['mem_total']))
        console.info("Disk Percent:\t {}".format(host_stats['disk_percent']))
        console.info("Disk Usage: \t {} / {}".format(host_stats['disk_usage'],
                                                     host_stats['disk_total']))

        console.info("-" * 75)
        console.info(" --- Minecraft Servers --- ")
        console.info("-" * 75)

        s = 1
        while s <= len(server_stats):
            data = server_stats[s]
            console.info("Server ID {}".format(data['server_id']))
            console.info("Running {}".format(data['server_running']))
            console.info("Players: {}/{}".format(data['online_players'],
                                                 data['max_players']))
            s += 1
        console.help("Use the list_servers command to get more detailed data")
コード例 #5
0
    def post(self, page):

        name = tornado.escape.json_decode(self.current_user)
        user_data = get_perms_for_user(name)

        # server_data = self.get_server_data()
        context = {
            'user_data':
            user_data,
            'version_data':
            helper.get_version(),
            'servers_defined':
            multi.list_servers(),
            'managed_server':
            self.session.get_data(self.current_user, 'managed_server'),
            'servers_running':
            multi.list_running_servers(),
            'mc_servers_data':
            multi.get_stats_for_servers()
        }

        if page == 'change_password':
            entered_password = bleach.clean(self.get_argument('password'))
            encoded_pass = helper.encode_pass(entered_password)

            q = Users.update({
                Users.password: encoded_pass
            }).where(Users.username == user_data['username'])
            q.execute()

            self.clear_cookie("user")
            self.redirect("/")

        elif page == 'schedules':
            action = bleach.clean(self.get_argument('action', ''))
            interval = bleach.clean(self.get_argument('interval', ''))
            interval_type = bleach.clean(self.get_argument('type', ''))
            sched_time = bleach.clean(self.get_argument('time', ''))
            command = bleach.clean(self.get_argument('command', ''))
            comment = bleach.clean(self.get_argument('comment', ''))
            server_id = int(self.get_argument('server_id', ''))

            result = (Schedules.insert(
                enabled=True,
                action=action,
                interval=interval,
                interval_type=interval_type,
                start_time=sched_time,
                command=command,
                comment=comment,
                server_id=server_id).on_conflict('replace').execute())

            self._reload_schedules()

            self.redirect("/admin/schedules?id={}".format(server_id))

        elif page == 'config':

            config_type = bleach.clean(self.get_argument('config_type'))

            if config_type == 'mc_settings':

                # Define as variables to eliminate multiple function calls, slowing the processing down
                server_path = self.get_argument('server_path')
                server_jar = self.get_argument('server_jar')
                java_path = self.get_argument('java_path')
                server_path_exists = helper.check_directory_exist(server_path)

                # Use pathlib to join specified server path and server JAR file then check if it exists
                jar_exists = helper.check_file_exists(
                    os.path.join(server_path, server_jar))

                # Check if custom Java path is specified and if it exists
                if java_path == 'java':
                    java_path_exists = True
                else:
                    java_path_exists = helper.check_file_exists(java_path)

                if server_path_exists and jar_exists and java_path_exists:
                    q = MC_settings.update({
                        MC_settings.server_name:
                        self.get_argument('server_name'),
                        MC_settings.server_path:
                        server_path,
                        MC_settings.server_jar:
                        server_jar,
                        MC_settings.memory_max:
                        self.get_argument('memory_max'),
                        MC_settings.memory_min:
                        self.get_argument('memory_min'),
                        MC_settings.additional_args:
                        self.get_argument('additional_args'),
                        MC_settings.pre_args:
                        self.get_argument('pre_args'),
                        MC_settings.java_path:
                        java_path,
                        MC_settings.auto_start_server:
                        int(self.get_argument('auto_start_server')),
                        MC_settings.server_port:
                        self.get_argument('server_port'),
                        MC_settings.server_ip:
                        self.get_argument('server_ip'),
                        MC_settings.jar_url:
                        self.get_argument('jar_url'),
                        MC_settings.crash_detection:
                        self.get_argument('crash_detection')
                    }).where(MC_settings.id == 1)

                    q.execute()
                    self.mcserver.reload_settings()

                # Restructure things a bit and add Java path check
                elif not server_path_exists:
                    # Redirect to "config invalid" page and log an event
                    logger.error('Minecraft server directory does not exist')
                    self.redirect("/admin/config?invalid=True")

                elif not jar_exists:
                    logger.error(
                        'Minecraft server JAR does not exist at {}'.format(
                            server_path))
                    self.redirect("/admin/config?invalid=True")

                else:
                    logger.error('Minecraft server Java path does not exist')
                    self.redirect("/admin/config?invalid=True")

            elif config_type == 'ftp_settings':
                ftp_user = bleach.clean(self.get_argument('ftp_user'))
                ftp_pass = bleach.clean(self.get_argument('ftp_pass'))
                ftp_port = bleach.clean(self.get_argument('ftp_port'))

                Ftp_Srv.update({
                    Ftp_Srv.user: ftp_user,
                    Ftp_Srv.password: ftp_pass,
                    Ftp_Srv.port: ftp_port,
                }).execute()

            elif config_type == 'crafty_settings':
                interval = bleach.clean(
                    self.get_argument('historical_interval'))
                max_age = bleach.clean(self.get_argument('history_max_age'))
                lang = bleach.clean(self.get_argument('language'))
                web_port = int(float(self.get_argument('port_number')))

                q = Crafty_settings.update({
                    Crafty_settings.history_interval: interval,
                    Crafty_settings.history_max_age: max_age,
                    Crafty_settings.language: lang,
                }).where(Crafty_settings.id == 1).execute()

                q = Webserver.update({
                    Webserver.port_number: web_port
                }).execute()

                # reload the history settings
                multi.reload_history_settings()

            self.redirect("/admin/config?saved=True")

        elif page == "server_config":
            # Define as variables to eliminate multiple function calls, slowing the processing down
            server_path = bleach.clean(self.get_argument('server_path'))
            server_jar = bleach.clean(self.get_argument('server_jar'))
            server_id = bleach.clean(self.get_argument('server_id'))
            server_name = bleach.clean(self.get_argument('server_name'))
            java_path = bleach.clean(self.get_argument('java_path'))
            errors = bleach.clean(self.get_argument('errors', ''))

            context['errors'] = errors

            server_path_exists = helper.check_directory_exist(server_path)

            # Use pathlib to join specified server path and server JAR file then check if it exists
            jar_exists = helper.check_file_exists(
                os.path.join(server_path, server_jar))

            # Check if Java executable exists if custom path is specified
            if java_path == 'java':
                java_path_exists = True
            else:
                java_path_exists = helper.check_file_exists(java_path)

            if server_path_exists and jar_exists and java_path_exists:
                MC_settings.update({
                    MC_settings.server_name:
                    server_name,
                    MC_settings.server_path:
                    server_path,
                    MC_settings.server_jar:
                    server_jar,
                    MC_settings.memory_max:
                    bleach.clean(self.get_argument('memory_max')),
                    MC_settings.memory_min:
                    bleach.clean(self.get_argument('memory_min')),
                    MC_settings.additional_args:
                    bleach.clean(self.get_argument('additional_args')),
                    MC_settings.pre_args:
                    bleach.clean(self.get_argument('pre_args')),
                    MC_settings.java_path:
                    java_path,
                    MC_settings.auto_start_server:
                    int(float(self.get_argument('auto_start_server'))),
                    MC_settings.auto_start_delay:
                    int(float(self.get_argument('auto_start_delay'))),
                    MC_settings.auto_start_priority:
                    int(float(self.get_argument('auto_start_priority'))),
                    MC_settings.crash_detection:
                    int(float(self.get_argument('crash_detection'))),
                    MC_settings.server_port:
                    int(float(self.get_argument('server_port'))),
                    MC_settings.server_ip:
                    bleach.clean(self.get_argument('server_ip')),
                    MC_settings.jar_url:
                    bleach.clean(self.get_argument('jar_url')),
                }).where(MC_settings.id == server_id).execute()

                srv_obj = multi.get_first_server_object()
                srv_obj.reload_settings()

                self.redirect("/admin/dashboard")

            # Restructure things a bit and add Java path check
            elif not server_path_exists:
                # Redirect to "config invalid" page and log an event
                logger.error('Minecraft server directory not exist')
                self.redirect("/admin/server_config?id={}&errors={}".format(
                    server_id, "Server Path Does Not Exists"))

            elif not jar_exists:
                logger.error(
                    'Minecraft server JAR does not exist at {}'.format(
                        server_path))
                self.redirect("/admin/server_config?id={}&errors={}".format(
                    server_id, "Server Jar Does Not Exists"))

            else:
                logger.error('Minecraft server Java path does not exist')
                self.redirect("/admin/server_config?id={}&errors={}".format(
                    server_id, "Java Path Does Not Exist"))

        elif page == 'files':

            next_dir = bleach.clean(self.get_argument('next_dir'))
            server_id = bleach.clean(self.get_argument('server_id'))
            path = Path(next_dir)

            template = "admin/files.html"
            context['pwd'] = next_dir

            context['server_id'] = server_id

            context['listing'] = helper.scan_dirs_in_path(context['pwd'])

            mc_data = MC_settings.get_by_id(server_id)
            mc_settings = model_to_dict(mc_data)

            mc_settings['server_path'] = str(
                mc_settings['server_path']).replace("\\", '/')

            # let's remove the server directory from the path...
            asked_for_dir = next_dir.replace(mc_settings['server_path'], '')

            # if the server directory plus the directory asked for doesn't exits...
            # this must be an attempt to do path traversal...so we set them back to server path.
            if not helper.check_directory_exist(mc_settings['server_path'] +
                                                asked_for_dir):
                context['pwd'] = mc_settings['server_path']
                context['listing'] = helper.scan_dirs_in_path(
                    mc_settings['server_path'])
                next_dir = mc_settings['server_path']

            if next_dir == mc_settings['server_path']:
                context['parent'] = None
            else:
                context['parent'] = path.parent
                context['parent'] = str(context['parent']).replace("\\", '/')

            context['ext_list'] = [
                ".txt", ".yml", "ties", "json", '.conf', '.cfg', '.toml'
            ]

            self.render(template, data=context)

        elif page == 'add_server':
            server_name = bleach.clean(self.get_argument('server_name', ''))
            server_path = bleach.clean(self.get_argument('server_path', ''))
            server_jar = bleach.clean(self.get_argument('server_jar', ''))
            max_mem = bleach.clean(self.get_argument('max_mem', ''))
            min_mem = bleach.clean(self.get_argument('min_mem', ''))
            auto_start = bleach.clean(self.get_argument('auto_start', ''))

            samename = MC_settings.select().where(
                MC_settings.server_name == server_name)
            if samename.exists():
                logger.error(
                    "2 servers can't have the same name - Can't add server")
                error = "Another server is already called: {}".format(
                    server_name)

            samepath = MC_settings.select().where(
                MC_settings.server_path == server_path)
            if samepath.exists():
                logger.error(
                    "2 servers can't have the same path - Can't add server")
                error = "Another server is already using: {}".format(
                    server_path)

            error = None

            # does this server path / jar exist?
            server_path_exists = helper.check_directory_exist(server_path)

            if not server_path_exists:
                logger.error(
                    "Server path {} doesn't exist - Can't add server".format(
                        server_path))
                error = "Server Path Does Not Exists"

            # Use pathlib to join specified server path and server JAR file then check if it exists
            jar_exists = helper.check_file_exists(
                os.path.join(server_path, server_jar))

            if not jar_exists and error is None:
                logger.error(
                    "Server jar {} doesn't exist - Can't add server".format(
                        os.path.join(server_path, server_jar)))
                error = "Server Jar Does Not Exists"

            # does a server with this name already exists?
            existing = MC_settings.select(MC_settings.server_name).where(
                MC_settings.server_name == server_name)
            if existing and error is None:
                logger.error(
                    "A server with that name already exists - Can't add server {}"
                    .format(server_name))
                error = "A server with that name already exists"

            if error is None:
                new_server_id = MC_settings.insert({
                    MC_settings.server_name:
                    server_name,
                    MC_settings.server_path:
                    server_path,
                    MC_settings.server_jar:
                    server_jar,
                    MC_settings.memory_max:
                    max_mem,
                    MC_settings.memory_min:
                    min_mem,
                    MC_settings.additional_args:
                    "",
                    MC_settings.java_path:
                    "java",
                    MC_settings.auto_start_server:
                    auto_start,
                    MC_settings.auto_start_delay:
                    10,
                    MC_settings.auto_start_priority:
                    1,
                    MC_settings.crash_detection:
                    0,
                    MC_settings.server_port:
                    25565,
                    MC_settings.server_ip:
                    "127.0.0.1"
                }).execute()

                #add a backup folder
                directories = [
                    server_path,
                ]
                backup_directory = json.dumps(directories)

                # default backup settings
                Backups.insert({
                    Backups.directories:
                    backup_directory,
                    Backups.storage_location:
                    os.path.abspath(os.path.join(helper.crafty_root,
                                                 'backups')),
                    Backups.max_backups:
                    7,
                    Backups.server_id:
                    new_server_id
                }).execute()

                logger.info("Added ServerID: {} - {}".format(
                    new_server_id, server_name))

                multi.setup_new_server_obj(new_server_id)
                multi.do_stats_for_servers()
                self.redirect("/admin/dashboard")
            else:
                self.redirect("/admin/dashboard?errors={}".format(error))

        elif page == 'backups':
            checked = self.get_arguments('backup')
            max_backups = int(self.get_argument('max_backups', 1))
            backup_storage = bleach.clean(
                self.get_argument('storage_location', ''))
            server_id = bleach.clean(self.get_argument('server_id', ''))

            if len(checked) == 0 or len(backup_storage) == 0:
                logger.error(
                    'Backup settings Invalid: Checked: {}, max_backups: {}, backup_storage: {}'
                    .format(checked, max_backups, backup_storage))
                self.redirect("/admin/config?invalid=True")

            else:
                logger.info("Backup directories set to: {}".format(checked))
                json_dirs = json.dumps(list(checked))

                Backups.update({
                    Backups.directories: json_dirs,
                    Backups.max_backups: max_backups,
                    Backups.storage_location: backup_storage,
                    Backups.server_id: int(server_id)
                }).where(Backups.server_id == int(server_id)).execute()

            self.redirect("/admin/backups?id={}".format(server_id))

        elif page == 'upload':
            server_id = bleach.clean(self.get_argument('server_id', ''))
            file1 = self.request.files['file1'][0]
            pwd = bleach.clean(self.get_argument('pwd'))

            template = "admin/files.html"
            original_fname = file1['filename']

            path = Path(pwd)

            mc_data = MC_settings.get_by_id(server_id)
            mc_settings = model_to_dict(mc_data)

            mc_settings['server_path'] = str(
                mc_settings['server_path']).replace("\\", '/')

            # let's remove the server directory from the path...
            asked_for_dir = pwd.replace(mc_settings['server_path'], '')

            file_path = mc_settings['server_path'] + asked_for_dir
            file_data = file1['body']

            result = self._upload_file(file_data, file_path, original_fname)

            context['upload_success'] = result
            context['pwd'] = pwd
            context['server_id'] = server_id

            # if the server directory plus the directory asked for doesn't exits...
            # this must be an attempt to do path traversal...so we set them back to server path.
            if not helper.check_directory_exist(mc_settings['server_path'] +
                                                asked_for_dir):
                context['pwd'] = mc_settings['server_path']

            context['listing'] = helper.scan_dirs_in_path(
                mc_settings['server_path'])
            next_dir = mc_settings['server_path']

            if next_dir == mc_settings['server_path']:
                context['parent'] = None
            else:
                context['parent'] = path.parent
                context['parent'] = str(context['parent']).replace("\\", '/')

            context['ext_list'] = [
                ".txt", ".yml", "ties", "json", '.conf', '.cfg'
            ]

            self.render(template, data=context)
コード例 #6
0
    def get(self, page):

        name = tornado.escape.json_decode(self.current_user)
        user_data = get_perms_for_user(name)

        context = {
            'user_data':
            user_data,
            'version_data':
            helper.get_version(),
            'servers_defined':
            multi.list_servers(),
            'managed_server':
            self.session.get_data(self.current_user, 'managed_server'),
            'servers_running':
            multi.list_running_servers(),
            'mc_servers_data':
            multi.get_stats_for_servers()
        }

        if page == 'unauthorized':
            template = "admin/denied.html"

        elif page == "reload_web":
            template = "admin/reload_web_settings.html"

            web_data = Webserver.get()
            context['user_data'] = user_data
            context['web_settings'] = model_to_dict(web_data)

            self.render(template, data=context)
            # reload web server
            Remote.insert({
                Remote.command: 'restart_web_server',
                Remote.server_id:
                1,  # this doesn't really matter as we are not tying to a server
                Remote.command_source: 'local'
            }).execute()

        elif page == 'reload_mc_settings':
            Remote.insert({
                Remote.command: 'reload_mc_settings',
                Remote.server_id:
                1,  # this doesn't really matter as we are not tying to a server
                Remote.command_source: 'local'
            }).execute()

            self.redirect("/admin/config")

        elif page == 'dashboard':
            errors = bleach.clean(self.get_argument('errors', ''))
            context['errors'] = errors
            context['host_stats'] = multi.get_host_status()

            template = "admin/dashboard.html"

        elif page == 'change_password':
            template = "admin/change_pass.html"

        elif page == 'virtual_console':
            if not check_role_permission(user_data['username'], 'svr_console'):
                self.redirect('/admin/unauthorized')

            context['server_id'] = bleach.clean(self.get_argument('id', ''))

            mc_data = MC_settings.get_by_id(context['server_id'])

            context['server_name'] = mc_data.server_name

            template = "admin/virt_console.html"

        elif page == "backups":
            if not check_role_permission(user_data['username'], 'backups'):
                self.redirect('/admin/unauthorized')

            server_id = bleach.clean(self.get_argument('id', ''))
            mc_data = MC_settings.get_by_id(server_id)

            template = "admin/backups.html"

            backup_data = Backups.get_by_id(server_id)

            backup_data = model_to_dict(backup_data)

            backup_path = backup_data['storage_location']
            backup_dirs = json.loads(backup_data['directories'])

            context['backup_data'] = json.loads(backup_data['directories'])
            context['backup_config'] = backup_data

            # get a listing of directories in the server path.
            context['directories'] = helper.scan_dirs_in_path(
                mc_data.server_path)

            context['server_root'] = mc_data.server_path

            context['server_name'] = mc_data.server_name
            context['server_id'] = mc_data.id
            context['backup_paths'] = backup_dirs
            context['backup_path'] = backup_path
            context['current_backups'] = backupmgr.list_backups_for_server(
                server_id)

            context['saved'] = False
            context['invalid'] = False

        elif page == "all_backups":
            if not check_role_permission(user_data['username'], 'backups'):
                self.redirect('/admin/unauthorized')

            template = "admin/backups.html"
            # END

            backup_list = Backups.get()
            backup_data = model_to_dict(backup_list)
            backup_path = backup_data['storage_location']
            backup_dirs = json.loads(backup_data['directories'])

            context['backup_paths'] = backup_dirs
            context['backup_path'] = backup_path
            context['current_backups'] = backupmgr.list_all_backups()
            context['server_name'] = "All Servers"

        elif page == "schedules":
            if not check_role_permission(user_data['username'], 'schedules'):
                self.redirect('/admin/unauthorized')

            saved = bleach.clean(self.get_argument('saved', ''))
            server_id = int(bleach.clean(self.get_argument('id', 1)))

            db_data = Schedules.select().where(
                Schedules.server_id == server_id)

            template = "admin/schedules.html"
            context['db_data'] = db_data
            context['saved'] = saved
            context['server_id'] = server_id

        elif page == "schedule_disable":
            if not check_role_permission(user_data['username'], 'schedules'):
                self.redirect('/admin/unauthorized')

            schedule_id = self.get_argument('taskid', 1)
            server_id = self.get_argument('id', 1)

            q = Schedules.update(enabled=0).where(Schedules.id == schedule_id)
            q.execute()

            self._reload_schedules()

            self.redirect("/admin/schedules?id={}".format(server_id))

        elif page == "schedule_enable":
            if not check_role_permission(user_data['username'], 'schedules'):
                self.redirect('/admin/unauthorized')

            schedule_id = self.get_argument('taskid', 1)
            server_id = self.get_argument('id', 1)

            q = Schedules.update(enabled=1).where(Schedules.id == schedule_id)
            q.execute()

            self._reload_schedules()

            self.redirect("/admin/schedules?id={}".format(server_id))

        elif page == 'config':
            if not check_role_permission(user_data['username'], 'config'):
                self.redirect('/admin/unauthorized')

            saved = bleach.clean(self.get_argument('saved', ''))
            invalid = bleach.clean(self.get_argument('invalid', ''))

            template = "admin/config.html"
            crafty_data = Crafty_settings.get()
            # ftp_data = Ftp_Srv.get()
            web_data = Webserver.get()
            users = Users.select()
            roles = Roles.select()

            # context['ftp_user'] = ftp_data.user
            # context['ftp_pass'] = ftp_data.password
            # context['ftp_port'] = ftp_data.port

            context['saved'] = saved
            context['invalid'] = invalid

            context['crafty_settings'] = model_to_dict(crafty_data)
            context['web_settings'] = model_to_dict(web_data)

            context['users'] = users
            context['users_count'] = len(users)
            context['roles'] = roles

        elif page == 'server_config':
            if not check_role_permission(user_data['username'], 'config'):
                self.redirect('/admin/unauthorized')

            saved = bleach.clean(self.get_argument('saved', ''))
            invalid = bleach.clean(self.get_argument('invalid', ''))
            server_id = bleach.clean(self.get_argument('id', 1))
            errors = bleach.clean(self.get_argument('errors', ''))

            context['errors'] = errors

            if server_id is None:
                self.redirect("/admin/dashboard")

            template = "admin/server_config.html"

            mc_data = MC_settings.get_by_id(server_id)

            page_data = {}
            context['saved'] = saved
            context['invalid'] = invalid
            context['mc_settings'] = model_to_dict(mc_data)

            context['server_root'] = context['mc_settings']['server_path']

            srv_obj = multi.get_server_obj(server_id)
            context['server_running'] = srv_obj.check_running()

            host_data = Host_Stats.get()
            context['max_memory'] = host_data.mem_total

        elif page == 'downloadbackup':
            if not check_role_permission(user_data['username'], 'backups'):
                self.redirect('/admin/unauthorized')

            path = bleach.clean(self.get_argument("file", None, True))
            server_id = bleach.clean(self.get_argument("id", None, True))

            # only allow zip files
            if path[-3:] != "zip":
                self.redirect("/admin/backups?id={}".format(server_id))

            backup_folder = backupmgr.get_backup_folder_for_server(server_id)

            # Grab our backup path from the DB
            backup_list = Backups.get(Backups.server_id == int(server_id))
            base_folder = backup_list.storage_location

            # get full path of our backups
            server_backup_folder = os.path.join(base_folder, backup_folder)
            server_backup_file = os.path.join(server_backup_folder, path)

            # get list of zip files in the backup directory
            files = [f for f in glob.glob(server_backup_folder + "**/*.zip")]

            # for each file, see if it matches the file we are trying to download
            for f in files:

                # if we find a match
                if f == server_backup_file and helper.check_file_exists(
                        server_backup_file):

                    file_name = os.path.basename(server_backup_file)
                    self.set_header('Content-Type', 'application/octet-stream')
                    self.set_header('Content-Disposition',
                                    'attachment; filename=' + file_name)

                    with open(server_backup_file, 'rb') as f:
                        while 1:
                            data = f.read(
                                16384)  # or some other nice-sized chunk
                            if not data:
                                break
                            self.write(data)
                    self.finish()

            self.redirect("/admin/backups?id={}".format(server_id))

        elif page == "server_control":
            if not check_role_permission(user_data['username'], 'svr_control'):
                self.redirect('/admin/unauthorized')

            server_id = bleach.clean(self.get_argument('id', 1))

            if server_id is None:
                self.redirect("/admin/dashboard")

            template = "admin/server_control.html"
            logfile = helper.get_crafty_log_file()

            mc_data = MC_settings.get_by_id(server_id)

            srv_obj = multi.get_server_obj(server_id)
            context['server_running'] = srv_obj.check_running()
            context['mc_settings'] = model_to_dict(mc_data)
            context['server_updating'] = self.mcserver.check_updating()
            context['players'] = context['mc_servers_data'][int(
                server_id)]['players'].split(',')
            context['players_online'] = context['mc_servers_data'][int(
                server_id)]['online_players']
            context['world_info'] = srv_obj.get_world_info()

        elif page == 'commands':
            if not check_role_permission(user_data['username'], 'svr_console'):
                self.redirect('/admin/unauthorized')

            command = bleach.clean(self.get_argument("command", None, True))
            id = self.get_argument("id", None, True)

            # grab any defined server object and reload the settings
            any_serv_obj = multi.get_first_server_object()
            any_serv_obj.reload_settings()

            if command == "server_stop":
                Remote.insert({
                    Remote.command: 'stop_mc_server',
                    Remote.server_id: id,
                    Remote.command_source: "localhost"
                }).execute()
                next_page = "/admin/virtual_console?id={}".format(id)

            elif command == "server_start":
                Remote.insert({
                    Remote.command: 'start_mc_server',
                    Remote.server_id: id,
                    Remote.command_source: "localhost"
                }).execute()
                next_page = "/admin/virtual_console?id={}".format(id)

            elif command == "server_restart":
                Remote.insert({
                    Remote.command: 'restart_mc_server',
                    Remote.server_id: id,
                    Remote.command_source: "localhost"
                }).execute()
                next_page = "/admin/virtual_console?id={}".format(id)

            elif command == "ftp_server_start":
                Remote.insert({
                    Remote.command: 'start_ftp',
                    Remote.server_id: id,
                    Remote.command_source: 'localhost'
                }).execute()
                time.sleep(2)
                next_page = "/admin/files?id={}".format(id)

            elif command == 'ftp_server_stop':
                Remote.insert({
                    Remote.command: 'stop_ftp',
                    Remote.server_id: id,
                    Remote.command_source: 'localhost'
                }).execute()
                time.sleep(2)
                next_page = "/admin/files?id={}".format(id)

            elif command == "backup":
                backupmgr.backup_server(id)
                time.sleep(4)
                next_page = '/admin/backups?id={}'.format(id)

            elif command == "backup_all":
                backupmgr.backup_all_servers()
                time.sleep(4)
                next_page = '/admin/backups'

            elif command == 'update_jar':
                Remote.insert({
                    Remote.command: 'update_server_jar',
                    Remote.server_id: id,
                    Remote.command_source: 'localhost'
                }).execute()
                time.sleep(2)
                next_page = "/admin/server_control?id={}".format(id)

            elif command == 'revert_jar':
                Remote.insert({
                    Remote.command: 'revert_server_jar',
                    Remote.server_id: id,
                    Remote.command_source: 'localhost'
                }).execute()
                time.sleep(2)
                next_page = "/admin/server_control?id={}".format(id)

            elif command == 'destroy_world':
                Remote.insert({
                    Remote.command: 'destroy_world',
                    Remote.server_id: id,
                    Remote.command_source: "localhost"
                }).execute()
                next_page = "/admin/virtual_console?id={}".format(id)

            self.redirect(next_page)

        elif page == 'get_logs':
            if not check_role_permission(user_data['username'], 'logs'):
                self.redirect('/admin/unauthorized')

            server_id = bleach.clean(self.get_argument('id', None))
            mc_data = MC_settings.get_by_id(server_id)

            context['server_name'] = mc_data.server_name
            context['server_id'] = server_id

            srv_object = multi.get_server_obj(server_id)

            data = []

            server_log = os.path.join(mc_data.server_path, 'logs',
                                      'latest.log')

            if server_log is not None:
                data = helper.tail_file(server_log, 500)
                data.insert(0,
                            "Lines trimmed to ~500 lines for speed sake \n ")
            else:
                data.insert(
                    0, "Unable to find {} \n ".format(
                        os.path.join(mc_data.server_path, 'logs',
                                     'latest.log')))

            crafty_data = helper.tail_file(helper.crafty_log_file, 100)
            crafty_data.insert(
                0, "Lines trimmed to ~100 lines for speed sake \n ")

            scheduler_data = helper.tail_file(
                os.path.join(helper.logs_dir, 'schedule.log'), 100)
            scheduler_data.insert(
                0, "Lines trimmed to ~100 lines for speed sake \n ")

            access_data = helper.tail_file(
                os.path.join(helper.logs_dir, 'tornado-access.log'), 100)
            access_data.insert(
                0, "Lines trimmed to ~100 lines for speed sake \n ")

            ftp_data = helper.tail_file(
                os.path.join(helper.logs_dir, 'ftp.log'), 100)
            ftp_data.insert(0,
                            "Lines trimmed to ~100 lines for speed sake \n ")

            errors = srv_object.search_for_errors()
            template = "admin/logs.html"

            context['log_data'] = data
            context['errors'] = errors
            context['crafty_log'] = crafty_data
            context['scheduler'] = scheduler_data
            context['access'] = access_data
            context['ftp'] = ftp_data

        elif page == "files":
            if not check_role_permission(user_data['username'], 'files'):
                self.redirect('/admin/unauthorized')

            template = "admin/files.html"

            server_id = bleach.clean(self.get_argument('id', 1))
            context['server_id'] = server_id

            srv_object = multi.get_server_obj(server_id)
            context['pwd'] = srv_object.server_path

            context['listing'] = helper.scan_dirs_in_path(context['pwd'])
            context['parent'] = None

            context['ext_list'] = [
                ".txt", ".yml", "ties", "json", '.conf', 'cfg'
            ]

        else:
            # 404
            template = "public/404.html"
            context = {}

        self.render(template, data=context)
コード例 #7
0
    def get(self, page):

        if page == 'server_log':
            server_id = bleach.clean(self.get_argument('id'))

            if server_id is None:
                logger.warning("Server ID not found in server_log ajax call")
                return False

            server_path = multi.get_server_root_path(server_id)

            server_log = os.path.join(server_path, 'logs', 'latest.log')
            data = helper.tail_file(server_log, 40)

            for d in data:
                self.write(d.encode("utf-8"))

        elif page == 'history':
            server_id = bleach.clean(self.get_argument("server_id", ''))

            db_data = History.select().where(History.server_id == server_id)
            return_data = []
            for d in db_data:
                row_data = {
                    'time': d.time.strftime("%m/%d/%Y %H:%M:%S"),
                    'cpu': d.cpu,
                    'mem': d.memory,
                    'players': d.players
                }
                return_data.append(row_data)

            self.write(json.dumps(return_data))

        elif page == 'update_check':

            context = {
                'master': helper.check_version('master'),
                'beta': helper.check_version('beta'),
                'snaps': helper.check_version('snapshot'),
                'current': helper.get_version()
            }

            self.render('ajax/version.html', data=context)

        elif page == 'host_cpu_infos':

            name = tornado.escape.json_decode(self.current_user)
            user_data = get_perms_for_user(name)

            context = {'host_stats': multi.get_host_status()}

            self.render('ajax/host_cpu_infos.html', data=context)

        elif page == 'host_ram_infos':

            name = tornado.escape.json_decode(self.current_user)
            user_data = get_perms_for_user(name)

            context = {'host_stats': multi.get_host_status()}

            self.render('ajax/host_ram_infos.html', data=context)

        elif page == 'host_disk_infos':

            name = tornado.escape.json_decode(self.current_user)
            user_data = get_perms_for_user(name)

            context = {'host_stats': multi.get_host_status()}

            self.render('ajax/host_disk_infos.html', data=context)

        elif page == 'host_running_servers':

            name = tornado.escape.json_decode(self.current_user)
            user_data = get_perms_for_user(name)

            context = {
                'servers_running': multi.list_running_servers(),
                'servers_defined': multi.list_servers(),
            }

            self.render('ajax/host_running_servers.html', data=context)

        elif page == 'server_status':

            name = tornado.escape.json_decode(self.current_user)
            user_data = get_perms_for_user(name)

            context = {
                'user_data': user_data,
                'mc_servers_data': multi.get_stats_for_servers()
            }

            server_id = bleach.clean(self.get_argument('id'))
            srv_obj = multi.get_server_obj(server_id)

            context['srv'] = {
                'id': srv_obj.server_id,
                'name': srv_obj.get_mc_server_name(),
                'running': srv_obj.check_running(),
                'crashed': srv_obj.check_crashed(),
                'auto_start': srv_obj.settings.auto_start_server
            }

            self.render('ajax/server_status.html', data=context)

        elif page == 'server_infos':

            name = tornado.escape.json_decode(self.current_user)
            user_data = get_perms_for_user(name)

            context = {
                'user_data': user_data,
                'mc_servers_data': multi.get_stats_for_servers()
            }

            server_id = bleach.clean(self.get_argument('id', 1))
            srv_obj = multi.get_server_obj(server_id)

            context['srv'] = {
                'id': srv_obj.server_id,
                'name': srv_obj.get_mc_server_name(),
                'running': srv_obj.check_running(),
                'crashed': srv_obj.check_crashed(),
                'auto_start': srv_obj.settings.auto_start_server
            }

            self.render('ajax/server_infos.html', data=context)

        elif page == 'get_file':
            file_path = bleach.clean(self.get_argument('file_name'))
            server_id = bleach.clean(self.get_argument('server_id'))

            mc_data = MC_settings.get_by_id(server_id)
            mc_settings = model_to_dict(mc_data)

            mc_settings['server_path'] = str(
                mc_settings['server_path']).replace("\\", '/')

            # let's remove the server directory from the path...
            asked_for_path = file_path.replace(mc_settings['server_path'], '')
            built_path = mc_settings['server_path'] + asked_for_path

            # if the server directory plus the path asked for doesn't exits...
            # this must be an attempt to do path traversal...so we bomb out.
            if not helper.check_file_exists(built_path):
                raise Exception(
                    "possible file traversal detected {}".format(file_path))

            else:
                f = open(file_path, "r")
                file_data = f.read()
                context = {
                    "file_data": file_data,
                    "file_path": file_path,
                    "server_id": server_id
                }

                self.render('ajax/edit_file.html', data=context)