xXx

Hexid M1n1 5h3ll MobiLe

opt/cpinst/cpinst/plugins/modSecurity-control/_[ Not.Writable ]

File://opt/cpinst/cpinst/plugins/modSecurity-control/enable-path-rule-id.live.php

<?php

require __DIR__ . '/config.php';
require __DIR__ . '/functions.php';

$user = $_POST['user'];
$ruleId = $_POST['ruleId'];
$domain = $_POST['domain'];
$path = $_POST['path'];

if (empty($user))
    exit('Error: The username is empty.');
elseif (empty($ruleId))
    exit('Error: The rule ID is empty.');
elseif (empty($domain))
    exit('Error: The domain is empty.');
elseif (empty($path))
    exit('Error: The path is empty.');

$confPathList = ['std' => STD_PATH.'/'.$user.'/'.$domain.'/modsec.conf',
                 'ssl' => SSL_PATH.'/'.$user.'/'.$domain.'/modsec.conf'];

foreach ($confPathList as $cplKey => $curPath) {
    // Get the config of the domain.
    $params = ['config' => $curPath];
    $result = callWhmApi('modsec_get_config_text', $params);
    $ruleIdList = [];
    $uriList = [];  // List of URIs which remove the specified rule IDs.
    
    if (!$result['metadata']['result'])
        exit('Error: Call the WHM API "modsec_get_config_text" '.$result['metadata']['reason']);
    
    if (!empty($result['data']['text'])) {
        $noUriText = preg_replace('/<LocationMatch.+<\/LocationMatch>/sU', '', $result['data']['text']);  // Exclude URIs.
        
        if (!empty($noUriText) && preg_match_all('/SecRuleRemoveById (\d+)/', $noUriText, $matches) > 0) {
                foreach ($matches[1] as $ruleIdA) {
                    $ruleIdList[] = $ruleIdA;
                }
        }
    
        // Get the list of URIs which remove the specified rule IDs.
        if (preg_match_all('/<LocationMatch "(.+)">\s*SecRuleRemoveById (\d+)\s*<\/LocationMatch>/sU', $result['data']['text'], $uriMatches) > 0) {  // URIs
                foreach ($uriMatches[2] as $key => $curRuleId) {
                    if (!($curRuleId == $ruleId && $uriMatches[1][$key] == $path))  // Exclude the target rule ID and path.
                        $uriList[] = ['uri' => $uriMatches[1][$key], 'ruleId' => $curRuleId];
                }
        }
    }
    
    // Update the config of the domain.
    $newContent = "<IfModule mod_security2.c>\n# Start cmc block)\n";
    
        foreach ($ruleIdList as $ruleIdA) {
            $newContent .= "    SecRuleRemoveById ".$ruleIdA."\n";
        }
    
        foreach ($uriList as $ul) {
            $newContent .= '<LocationMatch "'.$ul['uri'].'">'."\n    SecRuleRemoveById ".$ul['ruleId']."\n</LocationMatch>\n";
        }
    
    $newContent .= "# End cmc block)\n</IfModule>\n";
    
    $params = ['config' => $curPath,
               'text' => $newContent,
               'deploy' => 1];
    $return = callWhmApi('modsec_set_config_text', $params);
    
    if (!$return['metadata']['result'])
        exit('Error: Call the WHM API "modsec_set_config_text" ('.$cplKey.') '.$return['metadata']['reason']);
}

// Deploy all the configs of the domain.
$deployReturn = callWhmApi('modsec_deploy_all_rule_changes');

if (!$deployReturn['metadata']['result'])
    exit('Error: Call the WHM API "modsec_deploy_all_rule_changes" '.$deployReturn['metadata']['reason']);

echo 'success';

Your Access Expired	Date. in : 16-09-2025
Regist : 09-12-2024	Expired : 01-12-2027