This is the default page for your website.
78 | 79 | 80 | `; 81 | 82 | fs.writeFile(filePath, defaultHtml, (err) => { 83 | if (err) { 84 | console.error("Error creating index.html:", err.message); 85 | return res.status(500).send("Error creating index.html."); 86 | } 87 | console.log(`Created default index.html for ${name}`); 88 | }); 89 | } 90 | 91 | // Creating the php.ini file 92 | const phpIniPath = path.join(folderPath, "php.ini"); 93 | const phpIniContent = ` 94 | disable_functions = exec,passthru,shell_exec,system,proc_open,popen 95 | display_errors = Off 96 | expose_php = Off 97 | memory_limit = 256M 98 | upload_max_filesize = 100M 99 | post_max_size = 100M 100 | `.trim(); 101 | 102 | fs.writeFile(phpIniPath, phpIniContent, (err) => { 103 | if (err) { 104 | console.error("Error writing php.ini:", err.message); 105 | return res.status(500).send("Failed to create php.ini."); 106 | } 107 | 108 | // Ajout du domaine nginx 109 | addDomain(name, folderPath, (err) => { 110 | if (err) { 111 | console.error(`Error adding domain for ${name}:`, err); 112 | return res.status(500).send("Failed to add domain."); 113 | } 114 | 115 | console.log( 116 | `New website : UUID=${uuid}, Domaine=${name}, Port=${port}, Disk=${diskLimit}MB` 117 | ); 118 | return res.redirect("/web/admin/subscriptions"); 119 | }); 120 | }); 121 | }); 122 | }); 123 | }); 124 | }); 125 | 126 | module.exports = router; 127 | module.exports.activeServers = activeServers; 128 | -------------------------------------------------------------------------------- /src/pages/auth/login.js: -------------------------------------------------------------------------------- 1 | console.log("pages/auth/login.js loaded"); // To confirm that the page has been loaded correctly 2 | const express = require("express"); 3 | const db = require("../../db.js"); 4 | const { authLimiter } = require("../../middleware/rate-limiter.js"); 5 | const router = express.Router(); 6 | 7 | // Route GET to display the login page 8 | router.get("/", (req, res) => { 9 | res.render("auth/login.ejs", { error: null }); 10 | }); 11 | 12 | // Route POST with limiter to handle login 13 | router.post("/login", (req, res) => { 14 | if (!req.body || !req.body.username || !req.body.password) { 15 | return res 16 | .status(400) 17 | .render("auth/login.ejs", { error: "All fields are required." }); 18 | } 19 | 20 | const { username, password } = req.body; 21 | 22 | db.get( 23 | "SELECT * FROM users WHERE username = ? AND password = ?", 24 | [username, password], 25 | (err, row) => { 26 | if (err) { 27 | console.error("ERROR SQL : " + err.message); 28 | res.status(500).send("Internal server error"); 29 | } else if (row) { 30 | req.session.user = { id: row.id, username: row.username }; 31 | console.log("User logged in :", req.session.user); 32 | res.redirect("/web/list"); 33 | } else { 34 | res.render("auth/login.ejs", { error: "Identifiants invalides." }); 35 | } 36 | } 37 | ); 38 | }); 39 | 40 | module.exports = router; 41 | -------------------------------------------------------------------------------- /src/pages/auth/logout.js: -------------------------------------------------------------------------------- 1 | console.log("pages/auth/logout.js loaded"); // To confirm that the page has been loaded correctly 2 | const express = require("express"); 3 | 4 | const router = express.Router(); 5 | 6 | // Route to handle logout 7 | router.get("/logout", (req, res) => { 8 | req.session.destroy((err) => { 9 | if (err) { 10 | console.error("Error while destroying the session: " + err.message); 11 | } 12 | res.redirect("/"); 13 | }); 14 | }); 15 | 16 | module.exports = router; 17 | -------------------------------------------------------------------------------- /src/pages/load.js: -------------------------------------------------------------------------------- 1 | console.log("pages/load.js loaded"); // To confirm that the page has been loaded correctly 2 | const express = require("express"); 3 | const router = express.Router(); 4 | 5 | // Route GET to /load/:x that redirects to /x 6 | router.get("/load/:x", (req, res) => { 7 | const x = req.params.x; 8 | 9 | if (x) { 10 | return res.redirect(`/${x}`); 11 | } 12 | 13 | res.render("load.ejs", { error: null }); 14 | }); 15 | 16 | // Optional fallback 17 | router.get("/load", (req, res) => { 18 | res.render("load.ejs", { error: null }); 19 | }); 20 | 21 | module.exports = router; 22 | -------------------------------------------------------------------------------- /src/pages/user/account.js: -------------------------------------------------------------------------------- 1 | console.log("pages/user/account.js loaded"); // To confirm that the page has been loaded correctly 2 | const express = require("express"); 3 | const db = require("../../db.js"); 4 | const router = express.Router(); 5 | const { isAuthenticated } = require("../../middleware/auth.js"); 6 | 7 | // Route for the user's account info 8 | router.get("/web/account", isAuthenticated, (req, res) => { 9 | const userId = req.session.user.id; 10 | 11 | db.get( 12 | "SELECT username, rank, created_at FROM users WHERE id = ?", 13 | [userId], 14 | (err, userInfo) => { 15 | if (err) { 16 | console.error("Error retrieving user info:", err.message); 17 | return res.status(500).send("Internal server error"); 18 | } 19 | 20 | if (!userInfo) { 21 | return res.status(404).send("User not found"); 22 | } 23 | 24 | const fullUser = { 25 | ...userInfo, 26 | id: userId, 27 | }; 28 | 29 | res.render("web/account.ejs", { 30 | user: fullUser, 31 | rank: userInfo.rank, 32 | rank: userInfo.rank, // Ensure rank is passed here 33 | error: null, 34 | succes: null, 35 | }); 36 | } 37 | ); 38 | }); 39 | 40 | // Route for change username 41 | router.post("/web/account/username/save", isAuthenticated, (req, res) => { 42 | const userId = req.session.user.id; 43 | const newUsername = req.body.username; 44 | 45 | if (!newUsername) { 46 | return res.render("web/account", { 47 | error: "Username cannot be empty", 48 | rank: req.session.user.rank, // Pass rank to the view 49 | user: req.session.user, 50 | }); 51 | } 52 | 53 | db.run( 54 | "UPDATE users SET username = ? WHERE id = ?", 55 | [newUsername, userId], 56 | function (err) { 57 | if (err) { 58 | console.error("Error updating username:", err.message); 59 | return res.render("web/account", { 60 | error: "Server Error", 61 | rank: req.session.user.rank, // Pass rank to the view 62 | user: req.session.user, 63 | }); 64 | } 65 | 66 | req.session.user.username = newUsername; 67 | res.render("web/account", { 68 | succes: "Username updated successfully", 69 | error: null, 70 | rank: req.session.user.rank, // Pass rank to the view 71 | user: req.session.user, 72 | }); 73 | } 74 | ); 75 | }); 76 | 77 | // Route for change password 78 | router.post("/web/account/password/save", isAuthenticated, (req, res) => { 79 | const userId = req.session.user.id; 80 | const { current_password, new_password, confirm_new_password } = req.body; 81 | 82 | if (!current_password || !new_password || !confirm_new_password) { 83 | return res.render("web/account", { 84 | error: "All fields are required", 85 | succes: null, 86 | user: req.session.user, 87 | rank: req.session.user.rank, // Pass rank to the view 88 | }); 89 | } 90 | 91 | if (new_password !== confirm_new_password) { 92 | return res.render("web/account", { 93 | error: "New passwords do not match", 94 | succes: null, 95 | user: req.session.user, 96 | rank: req.session.user.rank, // Pass rank to the view 97 | }); 98 | } 99 | 100 | db.get("SELECT password FROM users WHERE id = ?", [userId], (err, row) => { 101 | if (err) { 102 | console.error("Error fetching user password:", err.message); 103 | return res.render("web/account", { 104 | error: "Server Error", 105 | succes: null, 106 | user: req.session.user, 107 | rank: req.session.user.rank, // Pass rank to the view 108 | }); 109 | } 110 | 111 | if (!row) { 112 | return res.render("web/account", { 113 | error: "User not found", 114 | succes: null, 115 | user: req.session.user, 116 | rank: req.session.user.rank, // Pass rank to the view 117 | }); 118 | } 119 | 120 | if (row.password !== current_password) { 121 | return res.render("web/account", { 122 | error: "Current password is incorrect", 123 | user: req.session.user, 124 | succes: null, 125 | rank: req.session.user.rank, // Pass rank to the view 126 | }); 127 | } 128 | 129 | db.run( 130 | "UPDATE users SET password = ? WHERE id = ?", 131 | [new_password, userId], 132 | function (err) { 133 | if (err) { 134 | console.error("Error updating password:", err.message); 135 | return res.render("web/account", { 136 | error: "Server Error", 137 | succes: null, 138 | user: req.session.user, 139 | rank: req.session.user.rank, // Pass rank to the view 140 | }); 141 | } 142 | 143 | res.render("web/account", { 144 | succes: "Password updated successfully", 145 | error: null, 146 | user: req.session.user, 147 | rank: req.session.user.rank, // Pass rank to the view 148 | }); 149 | } 150 | ); 151 | }); 152 | }); 153 | 154 | module.exports = router; 155 | -------------------------------------------------------------------------------- /src/pages/user/edit/files.js: -------------------------------------------------------------------------------- 1 | console.log("pages/user/edit/files.js loaded"); // To confirm that the page has been loaded correctly 2 | const express = require("express"); 3 | const fs = require("fs"); 4 | const path = require("path"); 5 | const db = require("../../../db.js"); 6 | const router = express.Router(); 7 | const { checkSizeBeforeCreate } = require("../../../web/size-limit.js"); 8 | const app = express(); 9 | const { isAuthenticated } = require("../../../middleware/auth.js"); 10 | const { 11 | protectSensitiveFiles, 12 | } = require("../../../middleware/protect-sensitive-files.js"); 13 | app.use(express.json({ limit: "80mb" })); 14 | app.use(express.urlencoded({ limit: "80mb", extended: true })); 15 | 16 | // Function to calculate the total size of a folder 17 | function getFolderSize(folderPath, callback) { 18 | let totalSize = 0; 19 | 20 | const walk = (dir) => { 21 | return new Promise((resolve, reject) => { 22 | fs.readdir(dir, { withFileTypes: true }, async (err, entries) => { 23 | if (err) return reject(err); 24 | 25 | for (const entry of entries) { 26 | const fullPath = path.join(dir, entry.name); 27 | if (entry.isDirectory()) { 28 | await walk(fullPath); 29 | } else { 30 | const stats = fs.statSync(fullPath); 31 | totalSize += stats.size; 32 | } 33 | } 34 | resolve(); 35 | }); 36 | }); 37 | }; 38 | 39 | walk(folderPath) 40 | .then(() => callback(null, totalSize)) 41 | .catch((err) => callback(err)); 42 | } 43 | 44 | // Helper function to get the volume directory path (avoids repetition) 45 | function getVolumesDir() { 46 | return path.join(__dirname, "../../../../storage/volumes"); 47 | } 48 | 49 | // Route to display the file editor 50 | router.get( 51 | "/web/manage/:id/edit/:file", 52 | isAuthenticated, 53 | protectSensitiveFiles(getVolumesDir()), // Use the helper to avoid repetition 54 | (req, res) => { 55 | const userId = req.session.user.id; 56 | const websiteUuid = req.params.id; 57 | const fileName = req.params.file; 58 | 59 | console.log( 60 | `DEBUG: Edit route accessed - website: ${websiteUuid}, file: ${fileName}` 61 | ); 62 | 63 | db.get( 64 | "SELECT * FROM websites WHERE uuid = ? AND user_id = ?", 65 | [websiteUuid, userId], 66 | (err, website) => { 67 | if (err) { 68 | console.error("DATABASE ERROR:", err.message); 69 | return res.status(500).render("error/500.ejs"); 70 | } 71 | 72 | if (!website) { 73 | console.error( 74 | `Website not found: ${websiteUuid} for user: ${userId}` 75 | ); 76 | return res.status(404).render("error/404.ejs"); 77 | } 78 | 79 | const websiteDir = path.join(getVolumesDir(), websiteUuid); // Use the helper 80 | 81 | db.get("SELECT rank FROM users WHERE id = ?", [userId], (err, row) => { 82 | if (err) { 83 | console.error("Error recovering rank:", err.message); 84 | return res.status(500).render("error/500.ejs"); 85 | } 86 | 87 | fs.mkdir(websiteDir, { recursive: true }, (err) => { 88 | if (err && err.code !== "EEXIST") { 89 | console.error(`Error creating directory: ${websiteDir}`, err); 90 | return res.status(500).render("error/500.ejs"); 91 | } 92 | 93 | const filePath = path.join(websiteDir, fileName); 94 | console.log(`Looking for file at: ${filePath}`); 95 | 96 | fs.access(filePath, fs.constants.F_OK, (err) => { 97 | if (err) { 98 | console.error(`File not found: ${filePath}`); 99 | 100 | if (req.query.new === "true") { 101 | console.log(`Creating new file: ${filePath}`); 102 | 103 | // Calculate file size and check disk space 104 | const fileSize = 0; // size of the file, here 0 for an empty file 105 | checkSizeBeforeCreate(websiteUuid, fileSize, (err) => { 106 | if (err) { 107 | console.error("Disk limit exceeded: ", err.message); 108 | return res.render("web/edit/files.ejs", { 109 | user: req.session.user, 110 | error: err.message, // Sends error to view 111 | websiteUuid, 112 | fileName, 113 | fileContent: "", 114 | website, 115 | }); 116 | } 117 | 118 | fs.writeFile(filePath, "", "utf8", (err) => { 119 | if (err) { 120 | console.error( 121 | `Error creating new file: ${filePath}`, 122 | err 123 | ); 124 | return res.status(500).render("error/500.ejs"); 125 | } 126 | 127 | return res.render("web/edit/files.ejs", { 128 | user: req.session.user, 129 | rank: row ? row.rank : null, 130 | error: null, 131 | websiteUuid, 132 | fileName, 133 | fileContent: "", 134 | website, 135 | }); 136 | }); 137 | }); 138 | } else { 139 | return res.status(404).render("error/404.ejs", { 140 | message: `File '${fileName}' not found`, 141 | }); 142 | } 143 | return; 144 | } 145 | 146 | fs.readFile(filePath, "utf8", (err, fileContent) => { 147 | if (err) { 148 | console.error(`Error reading file: ${filePath}`, err); 149 | return res.status(500).render("error/500.ejs"); 150 | } 151 | 152 | res.render("web/edit/files.ejs", { 153 | user: req.session.user, 154 | rank: row ? row.rank : null, 155 | error: null, 156 | websiteUuid, 157 | fileName, 158 | fileContent, 159 | website, 160 | }); 161 | }); 162 | }); 163 | }); 164 | }); 165 | } 166 | ); 167 | } 168 | ); 169 | 170 | // Route to save file changes 171 | router.post( 172 | "/web/manage/:id/edit/:file", 173 | isAuthenticated, 174 | protectSensitiveFiles(getVolumesDir()), // Use the helper to avoid repetition 175 | (req, res) => { 176 | const userId = req.session.user.id; 177 | const websiteUuid = req.params.id; 178 | const fileName = req.params.file; 179 | const fileContent = req.body.content; 180 | 181 | console.log( 182 | `DEBUG: Save route accessed - website: ${websiteUuid}, file: ${fileName}` 183 | ); 184 | 185 | if (fileContent === undefined) { 186 | console.error("No content provided in request body"); 187 | return res.status(400).send("No content provided"); 188 | } 189 | 190 | db.get( 191 | "SELECT * FROM websites WHERE uuid = ? AND user_id = ?", 192 | [websiteUuid, userId], 193 | (err, website) => { 194 | if (err) { 195 | console.error("DATABASE ERROR:", err.message); 196 | return res.status(500).render("error/500.ejs"); 197 | } 198 | 199 | if (!website) { 200 | console.error( 201 | `Website not found: ${websiteUuid} for user: ${userId}` 202 | ); 203 | return res.status(404).render("error/500.ejs"); 204 | } 205 | 206 | const websiteDir = path.join(getVolumesDir(), websiteUuid); // Use the helper 207 | 208 | fs.mkdir(websiteDir, { recursive: true }, (err) => { 209 | if (err && err.code !== "EEXIST") { 210 | console.error(`Error creating directory: ${websiteDir}`, err); 211 | return res.status(500).render("error/500.ejs"); 212 | } 213 | 214 | const filePath = path.join(websiteDir, fileName); 215 | 216 | // Calculate file size to be added and check the size 217 | const fileSize = Buffer.byteLength(fileContent, "utf8"); // Calculate content size in bytes 218 | checkSizeBeforeCreate(websiteUuid, fileSize, (err) => { 219 | if (err) { 220 | console.error("Disk limit exceeded: ", err.message); 221 | 222 | // Pass error to the view 223 | return res.render("web/edit/files.ejs", { 224 | user: req.session.user, 225 | error: err.message, // Send error message to view 226 | websiteUuid, 227 | fileName, 228 | fileContent, 229 | website, 230 | }); 231 | } 232 | 233 | fs.writeFile(filePath, fileContent, "utf8", (err) => { 234 | if (err) { 235 | console.error(`Error writing file: ${filePath}`, err); 236 | return res.status(500).render("error/500.ejs"); 237 | } 238 | 239 | console.log(`File saved successfully: ${filePath}`); 240 | res.redirect(`/load?x=/web/manage/${websiteUuid}`); 241 | }); 242 | }); 243 | }); 244 | } 245 | ); 246 | } 247 | ); 248 | 249 | // Route to get the total size of the website's folder 250 | router.get( 251 | "/web/manage/:id/size", 252 | isAuthenticated, 253 | protectSensitiveFiles(getVolumesDir()), 254 | (req, res) => { 255 | const userId = req.session.user.id; 256 | const websiteUuid = req.params.id; 257 | 258 | console.log(`[DEBUG] GET /web/manage/${websiteUuid}/size`); 259 | 260 | db.get( 261 | "SELECT * FROM websites WHERE uuid = ? AND user_id = ?", 262 | [websiteUuid, userId], 263 | (err, website) => { 264 | if (err) { 265 | console.error("DATABASE ERROR:", err.message); 266 | return res.status(500).json({ error: "Database error" }); 267 | } 268 | 269 | if (!website) { 270 | console.error( 271 | `Website not found: ${websiteUuid} for user: ${userId}` 272 | ); 273 | return res.status(404).json({ error: "Website not found" }); 274 | } 275 | 276 | const websiteDir = path.join(getVolumesDir(), websiteUuid); 277 | 278 | getFolderSize(websiteDir, (err, size) => { 279 | if (err) { 280 | console.error(`Error getting folder size:`, err); 281 | return res.status(500).json({ error: "Failed to get folder size" }); 282 | } 283 | 284 | res.json({ size }); // returns { size: 123456 } (in bytes) 285 | }); 286 | } 287 | ); 288 | } 289 | ); 290 | 291 | module.exports = router; 292 | -------------------------------------------------------------------------------- /src/pages/user/home.js: -------------------------------------------------------------------------------- 1 | console.log("pages/user/home.js loaded"); // To confirm that the page has been loaded correctly 2 | const express = require("express"); 3 | const db = require("../../db.js"); 4 | const { isAuthenticated } = require("../../middleware/auth.js"); 5 | const router = express.Router(); 6 | 7 | // Route for the user's website list 8 | router.get("/web/list", isAuthenticated, (req, res) => { 9 | const userId = req.session.user.id; 10 | 11 | db.all( 12 | "SELECT name, port, disk_limit, uuid FROM websites WHERE user_id = ?", 13 | [userId], 14 | (err, websites) => { 15 | if (err) { 16 | console.error("Error retrieving websites:", err.message); 17 | return res.status(500).send("Internal server error"); 18 | } 19 | 20 | db.get("SELECT rank FROM users WHERE id = ?", [userId], (err, row) => { 21 | if (err) { 22 | console.error("Error while retrieving the rank: " + err.message); 23 | return res.status(500).send("Internal server error"); 24 | } 25 | 26 | res.render("web/list.ejs", { 27 | user: req.session.user, 28 | websites, 29 | rank: row ? row.rank : null, 30 | }); 31 | }); 32 | } 33 | ); 34 | }); 35 | 36 | module.exports = router; 37 | -------------------------------------------------------------------------------- /src/pages/user/manage.js: -------------------------------------------------------------------------------- 1 | console.log("pages/user/manage.js loaded"); // To confirm that the page has been loaded correctly 2 | const express = require("express"); 3 | const db = require("../../db.js"); 4 | const router = express.Router(); 5 | const fs = require("fs"); 6 | const path = require("path"); 7 | const { isAuthenticated } = require("../../middleware/auth.js"); 8 | const { 9 | protectSensitiveFiles, 10 | } = require("../../middleware/protect-sensitive-files.js"); 11 | const { checkSizeBeforeCreate } = require("../../web/size-limit.js"); // <- ajout du size check 12 | 13 | const filesPath = path.join(__dirname, "../../../storage/volumes"); 14 | const filesProtect = protectSensitiveFiles(filesPath); 15 | 16 | // Website management page route 17 | router.get("/web/manage/:id", isAuthenticated, (req, res) => { 18 | const userId = req.session.user.id; 19 | const websiteUuid = req.params.id; 20 | 21 | db.get( 22 | "SELECT * FROM websites WHERE uuid = ? AND user_id = ?", 23 | [websiteUuid, userId], 24 | (err, website) => { 25 | if (err) { 26 | console.error("DB error:", err.message); 27 | return res.status(500).render("error/500.ejs"); 28 | } 29 | if (!website) { 30 | return res.status(404).render("error/404.ejs"); 31 | } 32 | 33 | db.get("SELECT rank FROM users WHERE id = ?", [userId], (err, row) => { 34 | if (err) { 35 | console.error("Error retrieving rank:", err.message); 36 | return res.status(500).render("error/500.ejs"); 37 | } 38 | 39 | const filesPath = path.join( 40 | __dirname, 41 | "../../../storage/volumes", 42 | websiteUuid 43 | ); 44 | 45 | fs.readdir(filesPath, (err, fileList) => { 46 | if (err) { 47 | console.error("Error reading directory:", err.message); 48 | return res.status(500).render("error/500.ejs"); 49 | } 50 | 51 | const files = fileList.map((fileName) => { 52 | const fileFullPath = path.join(filesPath, fileName); 53 | const stats = fs.statSync(fileFullPath); 54 | return { 55 | name: fileName, 56 | size: (stats.size / 1024 / 1024).toFixed(2), // Taille en Mo 57 | }; 58 | }); 59 | 60 | res.render("web/manage.ejs", { 61 | user: req.session.user, 62 | website, 63 | rank: row ? row.rank : null, 64 | websiteUuid, 65 | files, 66 | }); 67 | }); 68 | }); 69 | } 70 | ); 71 | }); 72 | 73 | // Create file route 74 | router.post("/web/manage/:id/create-file", isAuthenticated, (req, res) => { 75 | const userId = req.session.user.id; 76 | const websiteUuid = req.params.id; 77 | const filename = req.body.filename; 78 | 79 | // Basic security check 80 | if ( 81 | !filename || 82 | filename.includes("..") || 83 | filename.includes("/") || 84 | filename.length > 100 85 | ) { 86 | return res.status(400).send("Invalid file name."); 87 | } 88 | 89 | db.get( 90 | "SELECT * FROM websites WHERE uuid = ? AND user_id = ?", 91 | [websiteUuid, userId], 92 | (err, website) => { 93 | if (err) { 94 | console.error("DB error:", err.message); 95 | return res.status(500).render("error/500.ejs"); 96 | } 97 | if (!website) { 98 | return res.status(404).render("error/404.ejs"); 99 | } 100 | 101 | const filePath = path.join( 102 | __dirname, 103 | "../../../storage/volumes", 104 | websiteUuid, 105 | filename 106 | ); 107 | 108 | // Vérifie la taille avant de créer 109 | checkSizeBeforeCreate(websiteUuid, 0, (err) => { 110 | if (err) { 111 | console.error("Disk quota error:", err.message); 112 | return res 113 | .status(403) 114 | .send("Disk limit exceeded, cannot create file."); 115 | } 116 | 117 | fs.writeFile(filePath, "", (err) => { 118 | if (err) { 119 | console.error("File creation error:", err.message); 120 | return res.status(500).render("error/500.ejs"); 121 | } 122 | 123 | res.redirect(`/web/manage/${websiteUuid}`); 124 | }); 125 | }); 126 | } 127 | ); 128 | }); 129 | 130 | // File deletion route with protection middleware 131 | router.get( 132 | "/web/manage/:id/delete/:file", 133 | isAuthenticated, 134 | filesProtect, 135 | (req, res) => { 136 | const userId = req.session.user.id; 137 | const websiteUuid = req.params.id; 138 | const fileToDelete = req.params.file; 139 | 140 | // Basic security check 141 | if ( 142 | !fileToDelete || 143 | fileToDelete.includes("..") || 144 | fileToDelete.includes("/") 145 | ) { 146 | return res.status(400).send("Invalid file name."); 147 | } 148 | 149 | db.get( 150 | "SELECT * FROM websites WHERE uuid = ? AND user_id = ?", 151 | [websiteUuid, userId], 152 | (err, website) => { 153 | if (err) { 154 | console.error("Database error:", err.message); 155 | return res.status(500).render("error/500.ejs"); 156 | } 157 | if (!website) { 158 | return res.status(404).render("error/404.ejs"); 159 | } 160 | 161 | const filePath = path.join( 162 | __dirname, 163 | "../../../storage/volumes", 164 | websiteUuid, 165 | fileToDelete 166 | ); 167 | 168 | fs.unlink(filePath, (err) => { 169 | if (err) { 170 | console.error("File deletion error:", err.message); 171 | return res.status(500).render("error/500.ejs"); 172 | } 173 | 174 | res.redirect(`/web/manage/${websiteUuid}`); 175 | }); 176 | } 177 | ); 178 | } 179 | ); 180 | 181 | module.exports = router; 182 | -------------------------------------------------------------------------------- /src/pages/user/statistics/domains.js: -------------------------------------------------------------------------------- 1 | console.log("pages/user/statistics/domains.js loaded"); // To confirm that the page has been loaded correctly 2 | const express = require("express"); 3 | const db = require("../../../db.js"); 4 | const router = express.Router(); 5 | const fs = require("fs"); 6 | const path = require("path"); 7 | const { isAuthenticated } = require("../../../middleware/auth.js"); 8 | 9 | // Route for the user's website list 10 | router.get("/web/statistics/list", isAuthenticated, (req, res) => { 11 | const userId = req.session.user.id; 12 | const statisticsFile = path.join( 13 | __dirname, 14 | "../../../../storage/statistics.json" 15 | ); 16 | 17 | db.all( 18 | "SELECT name, port, disk_limit, uuid FROM websites WHERE user_id = ?", 19 | [userId], 20 | (err, websites) => { 21 | if (err) { 22 | console.error("Error retrieving websites:", err.message); 23 | return res.status(500).send("Internal server error"); 24 | } 25 | 26 | db.get("SELECT rank FROM users WHERE id = ?", [userId], (err, row) => { 27 | if (err) { 28 | console.error("Error retrieving rank: " + err.message); 29 | return res.status(500).send("Internal server error"); 30 | } 31 | 32 | // Read the statistics file 33 | let stats = {}; 34 | if (fs.existsSync(statisticsFile)) { 35 | try { 36 | const data = fs.readFileSync(statisticsFile, "utf8"); 37 | stats = JSON.parse(data); 38 | } catch (e) { 39 | console.error("Error reading / parsing statistics.json:", e); 40 | } 41 | } 42 | 43 | websites.forEach((website) => { 44 | website.visitCount = stats[website.uuid] || 0; 45 | }); 46 | 47 | res.render("web/statistics/domains.ejs", { 48 | user: req.session.user, 49 | websites, 50 | rank: row ? row.rank : null, 51 | }); 52 | }); 53 | } 54 | ); 55 | }); 56 | 57 | module.exports = router; 58 | -------------------------------------------------------------------------------- /src/pages/user/statistics/statistics.js: -------------------------------------------------------------------------------- 1 | console.log("pages/user/statistics/statistics.js loaded"); // To confirm that the page has been loaded correctly 2 | const express = require("express"); 3 | const db = require("../../../db.js"); 4 | const router = express.Router(); 5 | const fs = require("fs"); 6 | const path = require("path"); 7 | const { isAuthenticated } = require("../../../middleware/auth.js"); 8 | 9 | // Website statistics page route 10 | router.get("/web/statistics/:id", isAuthenticated, (req, res) => { 11 | const userId = req.session.user.id; 12 | const websiteUuid = req.params.id; 13 | const statisticsFile = path.join( 14 | __dirname, 15 | "../../../../storage/statistics.json" 16 | ); 17 | 18 | db.get( 19 | "SELECT * FROM websites WHERE uuid = ? AND user_id = ?", 20 | [websiteUuid, userId], 21 | (err, website) => { 22 | if (err) { 23 | console.error("DB error:", err.message); 24 | return res.status(500).render("error/500.ejs"); 25 | } 26 | if (!website) { 27 | return res.status(404).render("error/404.ejs"); 28 | } 29 | 30 | db.get("SELECT rank FROM users WHERE id = ?", [userId], (err, row) => { 31 | if (err) { 32 | console.error("Error retrieving rank:", err.message); 33 | return res.status(500).render("error/500.ejs"); 34 | } 35 | 36 | let visitCount = 0; 37 | 38 | // Read the statistics file 39 | if (fs.existsSync(statisticsFile)) { 40 | try { 41 | const data = fs.readFileSync(statisticsFile, "utf8"); 42 | const stats = JSON.parse(data); 43 | visitCount = stats[websiteUuid] || 0; 44 | } catch (e) { 45 | console.error("Error reading/parsing statistics.json:", e); 46 | } 47 | } 48 | 49 | res.render("web/statistics/statistics.ejs", { 50 | user: req.session.user, 51 | website, 52 | rank: row ? row.rank : null, 53 | websiteUuid, 54 | visitCount, 55 | }); 56 | }); 57 | } 58 | ); 59 | }); 60 | 61 | module.exports = router; 62 | -------------------------------------------------------------------------------- /src/start-webserver.js: -------------------------------------------------------------------------------- 1 | console.log("start-webserver.js loaded"); 2 | 3 | const express = require("express"); 4 | const fs = require("fs"); 5 | const http = require("http"); 6 | const path = require("path"); 7 | const db = require("./db.js"); 8 | const router = express.Router(); 9 | const createWS = require("./pages/admin/subscriptions/create.js"); 10 | 11 | let activeServers = createWS.activeServers || {}; 12 | 13 | const statisticsFile = path.join(__dirname, "../storage/statistics.json"); 14 | 15 | function getContentType(filename) { 16 | const ext = path.extname(filename).toLowerCase(); 17 | switch (ext) { 18 | case ".html": 19 | return "text/html"; 20 | case ".css": 21 | return "text/css"; 22 | case ".js": 23 | return "application/javascript"; 24 | case ".json": 25 | return "application/json"; 26 | case ".png": 27 | return "image/png"; 28 | case ".jpg": 29 | case ".jpeg": 30 | return "image/jpeg"; 31 | case ".svg": 32 | return "image/svg+xml"; 33 | case ".ico": 34 | return "image/x-icon"; 35 | default: 36 | return "application/octet-stream"; 37 | } 38 | } 39 | 40 | function trackVisit(uuid, req, res) { 41 | const cookieHeader = req.headers.cookie || ""; 42 | const visitedKey = `visited_${uuid}`; 43 | const hasVisited = cookieHeader.includes(`${visitedKey}=true`); 44 | 45 | if (!hasVisited) { 46 | fs.readFile(statisticsFile, "utf8", (err, data) => { 47 | let stats = {}; 48 | if (!err && data) { 49 | try { 50 | stats = JSON.parse(data); 51 | } catch (e) { 52 | console.error("Failed to parse statistics.json:", e); 53 | } 54 | } 55 | 56 | if (!stats[uuid]) stats[uuid] = 0; 57 | stats[uuid] += 1; 58 | 59 | fs.writeFile(statisticsFile, JSON.stringify(stats, null, 2), (err) => { 60 | if (err) console.error("Error writing statistics file:", err); 61 | }); 62 | }); 63 | 64 | const expires = new Date(Date.now() + 86400000).toUTCString(); 65 | res.setHeader( 66 | "Set-Cookie", 67 | `${visitedKey}=true; Expires=${expires}; Path=/` 68 | ); 69 | } 70 | } 71 | 72 | router.post("/web/restart/:uuid", (req, res) => { 73 | const uuid = req.params.uuid; 74 | activeServers = createWS.activeServers; 75 | 76 | db.get("SELECT * FROM websites WHERE uuid = ?", [uuid], (err, row) => { 77 | if (err || !row) return res.status(404).json({ error: "Site not found." }); 78 | 79 | const folderPath = path.join(__dirname, "../storage/volumes", uuid); 80 | const indexPath = path.join(folderPath, "index.html"); 81 | 82 | fs.access(indexPath, fs.constants.F_OK, (err) => { 83 | if (err) { 84 | return res.status(404).json({ 85 | error: "index.html not found. Path searched: " + indexPath, 86 | }); 87 | } 88 | 89 | if (activeServers[uuid]) { 90 | activeServers[uuid].close(() => { 91 | console.log(`Old server for ${uuid} stopped.`); 92 | }); 93 | } 94 | 95 | const server = http.createServer((req2, res2) => { 96 | trackVisit(uuid, req2, res2); 97 | 98 | const requestedFile = 99 | req2.url === "/" 100 | ? "index.html" 101 | : decodeURIComponent(req2.url.slice(1)); 102 | const requestedFilePath = path.join(folderPath, requestedFile); 103 | 104 | fs.access(requestedFilePath, fs.constants.F_OK, (err) => { 105 | if (err) { 106 | res2.statusCode = 404; 107 | res2.setHeader("Content-Type", "text/plain"); 108 | res2.end(`File ${requestedFile} not found.`); 109 | return; 110 | } 111 | 112 | fs.readFile(requestedFilePath, (err, data) => { 113 | if (err) { 114 | res2.statusCode = 500; 115 | res2.setHeader("Content-Type", "text/plain"); 116 | res2.end("Internal server error."); 117 | return; 118 | } 119 | 120 | res2.statusCode = 200; 121 | res2.setHeader("Content-Type", getContentType(requestedFile)); 122 | res2.end(data); 123 | }); 124 | }); 125 | }); 126 | 127 | server.listen(row.port, () => { 128 | console.log(`Server for UUID=${uuid} restarted on port ${row.port}`); 129 | activeServers[uuid] = server; 130 | res.json({ success: true }); 131 | }); 132 | }); 133 | }); 134 | }); 135 | 136 | function startAllActiveServers() { 137 | db.all("SELECT * FROM websites", (err, rows) => { 138 | if (err) return console.error("Error retrieving sites:", err.message); 139 | 140 | rows.forEach((row) => { 141 | const folderPath = path.join(__dirname, "../storage/volumes", row.uuid); 142 | const filePath = path.join(folderPath, "index.html"); 143 | 144 | fs.exists(filePath, (exists) => { 145 | if (exists) { 146 | const server = http.createServer((req, res) => { 147 | trackVisit(row.uuid, req, res); 148 | 149 | const requestedFile = 150 | req.url === "/" 151 | ? "index.html" 152 | : decodeURIComponent(req.url.slice(1)); 153 | const requestedFilePath = path.join(folderPath, requestedFile); 154 | 155 | fs.access(requestedFilePath, fs.constants.F_OK, (err) => { 156 | if (err) { 157 | res.statusCode = 404; 158 | res.setHeader("Content-Type", "text/plain"); 159 | res.end(`File ${requestedFile} not found.`); 160 | return; 161 | } 162 | 163 | fs.readFile(requestedFilePath, (err, data) => { 164 | if (err) { 165 | res.statusCode = 500; 166 | res.setHeader("Content-Type", "text/plain"); 167 | res.end("Error reading file."); 168 | } else { 169 | res.statusCode = 200; 170 | res.setHeader("Content-Type", getContentType(requestedFile)); 171 | res.end(data); 172 | } 173 | }); 174 | }); 175 | }); 176 | 177 | activeServers[row.uuid] = server; 178 | server.listen(row.port, () => { 179 | console.log( 180 | `Server for UUID=${row.uuid} started on http://localhost:${row.port}` 181 | ); 182 | }); 183 | } else { 184 | console.log( 185 | `index.html missing for UUID=${row.uuid}, not starting server.` 186 | ); 187 | } 188 | }); 189 | }); 190 | }); 191 | } 192 | 193 | startAllActiveServers(); 194 | 195 | module.exports = router; 196 | module.exports.activeServers = activeServers; 197 | -------------------------------------------------------------------------------- /src/utils/version-checker.js: -------------------------------------------------------------------------------- 1 | console.log("utils/version-checker.js loaded"); // To confirm that the page has been loaded correctly 2 | const fs = require("fs"); 3 | const path = require("path"); 4 | const axios = require("axios"); 5 | 6 | const localConfigPath = path.join(__dirname, "../../config/config.json"); 7 | 8 | async function getLumenOneOverviewData() { 9 | const config = JSON.parse(fs.readFileSync(localConfigPath, "utf8")); 10 | const localVersion = config.version || "Unknown"; 11 | let latestVersion = "Unavailable"; 12 | let updateAvailable = false; 13 | 14 | try { 15 | const response = await axios.get( 16 | "https://lumenlabs.pro/version/lumenone.html" 17 | ); 18 | latestVersion = response.data.trim(); 19 | 20 | updateAvailable = localVersion !== latestVersion; 21 | } catch (err) { 22 | console.error("Error verifying version :", err.message); 23 | } 24 | 25 | return { 26 | localVersion, 27 | latestVersion, 28 | updateAvailable, 29 | }; 30 | } 31 | 32 | module.exports = getLumenOneOverviewData; 33 | -------------------------------------------------------------------------------- /src/web/domain.js: -------------------------------------------------------------------------------- 1 | const fs = require("fs"); 2 | const { exec } = require("child_process"); 3 | 4 | function addDomain(name, filepath, callback) { 5 | // Checks if PHP is installed 6 | exec("php -v", (phpErr, stdout, stderr) => { 7 | const phpInstalled = !phpErr; 8 | let phpBlock = ""; 9 | 10 | if (phpInstalled) { 11 | // Extract installed PHP version 12 | const match = stdout.match(/PHP (\d+\.\d+)/); 13 | const version = match ? match[1] : "8.1"; // fallback to 8.1 if not detected 14 | 15 | phpBlock = ` 16 | location ~ \\.php$ { 17 | fastcgi_split_path_info ^(.+\\.php)(/.+)$; 18 | fastcgi_pass unix:/run/php/php${version}-fpm.sock; 19 | fastcgi_index index.php; 20 | include fastcgi_params; 21 | fastcgi_param PHP_VALUE "upload_max_filesize = 100M \\n post_max_size=100M"; 22 | fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; 23 | fastcgi_param HTTP_PROXY ""; 24 | fastcgi_intercept_errors off; 25 | fastcgi_buffer_size 16k; 26 | fastcgi_buffers 4 16k; 27 | fastcgi_connect_timeout 300; 28 | fastcgi_send_timeout 300; 29 | fastcgi_read_timeout 300; 30 | }`; 31 | } 32 | 33 | const nginxConfig = ` 34 | server { 35 | listen 80; 36 | server_name ${name}; 37 | 38 | root ${filepath}; 39 | index index.php index.html index.htm; 40 | 41 | location / { 42 | try_files $uri $uri/ =404; 43 | }${phpBlock} 44 | }`; 45 | 46 | const configPath = `/etc/nginx/sites-enabled/${name}.conf`; 47 | 48 | fs.writeFile(configPath, nginxConfig, (err) => { 49 | if (err) { 50 | console.error("Failed to create nginx config:", err); 51 | if (callback) callback(err); 52 | return; 53 | } 54 | 55 | console.log(`Nginx config written to ${configPath}. Reloading Nginx...`); 56 | 57 | exec("nginx -s reload", (reloadErr, stdout, stderr) => { 58 | if (reloadErr) { 59 | console.error(`Reload error: ${reloadErr.message}`); 60 | if (callback) callback(reloadErr); 61 | return; 62 | } 63 | if (stderr) console.error(`Reload stderr: ${stderr}`); 64 | console.log("Nginx reloaded successfully."); 65 | if (callback) callback(null); 66 | }); 67 | }); 68 | }); 69 | } 70 | 71 | module.exports = { addDomain }; 72 | -------------------------------------------------------------------------------- /src/web/size-limit.js: -------------------------------------------------------------------------------- 1 | console.log("web/size-limit.js loaded"); // To confirm that the page has been loaded correctly 2 | const db = require("../db.js"); 3 | const fs = require("fs"); 4 | const path = require("path"); 5 | 6 | // Function to calculate the size of a folder 7 | function getFolderSize(folderPath) { 8 | let totalSize = 0; 9 | const files = fs.readdirSync(folderPath); 10 | 11 | for (const file of files) { 12 | const filePath = path.join(folderPath, file); 13 | const stats = fs.statSync(filePath); 14 | 15 | if (stats.isFile()) { 16 | totalSize += stats.size; 17 | } else if (stats.isDirectory()) { 18 | totalSize += getFolderSize(filePath); 19 | } 20 | } 21 | 22 | return totalSize; 23 | } 24 | 25 | // Checks if creating a file will exceed the disk limit 26 | function checkSizeBeforeCreate(websiteUuid, fileSize, callback) { 27 | db.get( 28 | "SELECT disk_limit FROM websites WHERE uuid = ?", 29 | [websiteUuid], 30 | (err, row) => { 31 | if (err) { 32 | console.error("Database error:", err.message); 33 | return callback(err); 34 | } 35 | 36 | if (!row) { 37 | return callback(new Error("Website not found")); 38 | } 39 | 40 | const diskLimitBytes = row.disk_limit * 1024 * 1024; // MB -> Bytes 41 | const folderPath = path.join( 42 | __dirname, 43 | "../../storage/volumes", 44 | websiteUuid 45 | ); 46 | 47 | // Check if the folder exists 48 | if (!fs.existsSync(folderPath)) { 49 | return callback(new Error("Directory not found")); 50 | } 51 | 52 | // Calculate the current used size of the folder 53 | const usedSize = getFolderSize(folderPath); 54 | 55 | // If adding the file exceeds the limit 56 | if (usedSize + fileSize > diskLimitBytes) { 57 | return callback(new Error("Disk limit exceeded, cannot create file")); 58 | } 59 | 60 | // If passed the check, the file can be created 61 | callback(null); 62 | } 63 | ); 64 | } 65 | 66 | module.exports = { 67 | checkSizeBeforeCreate, 68 | }; 69 | -------------------------------------------------------------------------------- /storage/statistics.json: -------------------------------------------------------------------------------- 1 | {} 2 | -------------------------------------------------------------------------------- /storage/volumes/test.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lumenlabss/LumenOne/e4d735f353aaa0b94014bd6b94a313b0bcc94a63/storage/volumes/test.txt -------------------------------------------------------------------------------- /views/auth/login.ejs: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 |Log in to your account
45 |<%= appVersion %> - Load in
28 | Bad request
26 |Forbidden
26 |Page not found
26 |Internal server error
26 |40 | Loading... 41 |
42 |Manage and monitor user accounts
63 |69 | <%= CPUname %> <%= CPUfrequence %> 70 |
71 |72 | <%= CPUCores %> Cores 73 | 74 |
75 |<%= RAMsize %> <%= RAMtype %>
87 |<%= RAMspeed %>
88 |<%= StorageSize %>
100 | <% if (StorageType !== "Unknown") { %> 101 |<%= StorageType %>
102 | <% } %> 103 |<%= OSname %>
115 |<%= Osversion %>
116 |IPv4: <%= NetworkIP %>
128 |<%= NetworkSpeed %>
129 |<%= SystemUptime %>
141 |<%= LastBoot %>
142 |Total Sites
106 |107 | <%= totalListWebsite %> 108 |
109 || 118 | Username 119 | | 120 |UUID | 121 |122 | Site Name 123 | | 124 |Port | 125 |126 | Disk Limit (MB) 127 | | 128 |129 | Actions 130 | | 131 |
|---|---|---|---|---|---|
| <%= site.username %> | 139 |<%= site.uuid %> | 140 |<%= site.name %> | 141 |<%= site.port %> | 142 |<%= site.disk_limit %> | 143 |144 | 149 | Delete 150 | 151 | | 152 |
12
66 |5.4GB total storage
67 |2h ago
77 |456MB
78 |22:00
88 |Automatic daily
89 |Created 2 hours ago • 456MB
163 |Created 1 day ago • 128MB
197 |Created 2 days ago • 342MB
231 |Created 3 days ago • 498MB
265 |78 | Start by creating your first website to begin building your online 79 | presence. 80 |
81 || 163 | File Name 164 | | 165 |166 | Actions 167 | | 168 |169 | Size (MB) 170 | | 171 |
|---|---|---|
| <%= file.name %> | 177 |
178 |
179 |
184 |
190 |
191 | |
192 | <%= file.size %> MB | 193 |
Last updated: SOON
124 |Access to statistics
129 |<%= visitCount %>
66 |SOON
76 |SOON
86 |SOON
96 |