deleted file mode 100644

@@ -1,163 +0,0 @@

-<?php

-/**

- *  Copyright (C) 2021  Double Bastion LLC

- *

- *  This file is part of Roundpin, which is licensed under the

- *  GNU Affero General Public License Version 3.0. The license terms

- *  are detailed in the "LICENSE.txt" file located in the root directory.

- */

-

-session_start();

-

-if (isset($_POST['s_ajax_call']) && ($_POST['s_ajax_call'] == $_SESSION['validate_s_access'])) {

-

-

- define('ACCESSCONST', TRUE);

-

- require('db-connect.php');

-

-    $username = $_POST['username'];

-    $wssServer = $_POST['wss_server'];

-    $webSocketPort = $_POST['web_socket_port'];

-    $serverPath = $_POST['server_path'];

-    $profileName = $_POST['profile_name'];

-    $sipUsername = $_POST['sip_username'];

-    $sipPasswordPre = $_POST['sip_password'];

-    $stunServer = $_POST['stun_server'];

-    $audioOutputId = $_POST['audio_output_id'];

-    $videoSrcId = $_POST['video_src_id'];

-    $videoHeight = $_POST['video_height'];

-    $frameRate = $_POST['frame_rate'];

-    $aspectRatio = $_POST['aspect_ratio'];

-    $videoOrientation = $_POST['video_orientation'];

-    $audioSrcId = $_POST['audio_src_id'];

-    $autoGainControl = $_POST['auto_gain_control'];

-    $echoCancellation = $_POST['echo_cancellation'];

-    $noiseSuppression = $_POST['noise_suppression'];

-    $ringOutputId = $_POST['ring_output_id'];

-    $videoConfExtension = $_POST['video_conf_extension'];

-    $videoConfWindowWidth = $_POST['video_conf_window_width'];

-    $profilePicture = $_POST['profile_picture'];

-    $notifications = $_POST['notifications'];

-    $useRoundcube = $_POST['use_roundcube'];

-    $rcDomain = $_POST['rcdomain'];

-    $rcBasicAuthUser = $_POST['rcbasicauthuser'];

-    $rcBasicAuthPass = $_POST['rcbasicauthpass'];

-    $rcUser = $_POST['rcuser'];

-    $rcPassword = $_POST['rcpassword'];

-

-    // Encrypt the SIP password, Roundcube password (if any) and Roundcube basic auth password (if any), before inserting them into the database

-    if ($sipPasswordPre != '' && $sipPasswordPre != "%20%20%20%20%20%20%20") {

-

-        $keypass = substr(sha1(mt_rand()), 0, 32);

-        $keysalt = openssl_random_pseudo_bytes(12);

-        $generated_key = openssl_pbkdf2($keypass, $keysalt, 40, 100, 'sha256');

-        $psswdadded = bin2hex($generated_key);

-

-        if (!is_dir('restr')) {

-            mkdir('restr', 0700);

-        }

-

-        if (!is_dir('restr/'.$username.'')) {

-            mkdir('restr/'.$username.'', 0700);

-        }

-

-        file_put_contents('restr/'.$username.'/pwdkey', $psswdadded);

-        chmod('restr/'.$username.'/pwdkey', 0600);

-

-        $iv = substr(sha1(mt_rand()), 0, 16);

-        $encpwdin = openssl_encrypt($sipPasswordPre, 'AES-256-CBC', $psswdadded, false, $iv);

-        $sipPasswordEnc = $encpwdin.':'.$iv;

-

-    } elseif ($sipPasswordPre == "%20%20%20%20%20%20%20") { 

-

-              $queryselsippass = $mysqli->query("SELECT username, sip_password, enabled FROM app_users WHERE BINARY username = '$username' AND enabled = 1");

-              $sippassarr = $queryselsippass->fetch_assoc();

-              $sipPasswordEnc = $sippassarr['sip_password']; 

-

-    } elseif ($sipPasswordPre == '') { 

-              $sipPasswordEnc = ''; 

-    } else { $sipPasswordEnc = ''; }

-

-

-    if ($rcBasicAuthPass != '' && $rcBasicAuthPass != "%20%20%20%20%20%20%20") {

-

-        $keypassrcba = substr(sha1(mt_rand()), 0, 32);

-        $keysaltrcba = openssl_random_pseudo_bytes(12);

-        $generated_keyrcba = openssl_pbkdf2($keypassrcba, $keysaltrcba, 40, 100, 'sha256');

-        $psswdaddedrcba = bin2hex($generated_keyrcba);

-

-        if (!is_dir('restr')) {

-            mkdir('restr', 0700);

-        }

-

-        if (!is_dir('restr/'.$username.'')) {

-            mkdir('restr/'.$username.'', 0700);

-        }

-

-        file_put_contents('restr/'.$username.'/pwdkeyrcba', $psswdaddedrcba);

-        chmod('restr/'.$username.'/pwdkeyrcba', 0600);

-

-        $iv2 = substr(sha1(mt_rand()), 0, 16);

-        $encRcBasicAuthPass = openssl_encrypt($rcBasicAuthPass, 'AES-256-CBC', $psswdaddedrcba, false, $iv2);

-        $rcBasicAuthPassEnc = $encRcBasicAuthPass.':'.$iv2;

-

-    } elseif ($rcBasicAuthPass == "%20%20%20%20%20%20%20") { 

-              $queryselrcbapass = $mysqli->query("SELECT username, rcbasicauthpass, enabled FROM app_users WHERE BINARY username = '$username' AND enabled = 1");

-              $rcbapassarr = $queryselrcbapass->fetch_assoc();

-              $rcBasicAuthPassEnc = $rcbapassarr['rcbasicauthpass']; 

-    } elseif ($rcBasicAuthPass == '') { 

-              $rcBasicAuthPassEnc = ''; 

-    } else { $rcBasicAuthPassEnc = ''; }

-

-

-    if ($rcPassword != '' && $rcPassword != "%20%20%20%20%20%20%20") {

-

-        $keypassrc = substr(sha1(mt_rand()), 0, 32);

-        $keysaltrc = openssl_random_pseudo_bytes(12);

-        $generated_keyrc = openssl_pbkdf2($keypassrc, $keysaltrc, 40, 100, 'sha256');

-        $psswdaddedrc = bin2hex($generated_keyrc);

-

-        if (!is_dir('restr')) {

-            mkdir('restr', 0700);

-        }

-

-        if (!is_dir('restr/'.$username.'')) {

-            mkdir('restr/'.$username.'', 0700);

-        }

-

-        file_put_contents('restr/'.$username.'/pwdkeyrc', $psswdaddedrc);

-        chmod('restr/'.$username.'/pwdkeyrc', 0600);

-

-        $iv3 = substr(sha1(mt_rand()), 0, 16);

-        $encRcPassword = openssl_encrypt($rcPassword, 'AES-256-CBC', $psswdaddedrc, false, $iv3);

-        $rcPasswordEnc = $encRcPassword.':'.$iv3;

-

-    } elseif ($rcPassword == "%20%20%20%20%20%20%20") { 

-              $queryselrcpass = $mysqli->query("SELECT username, rcpassword, enabled FROM app_users WHERE BINARY username = '$username' AND enabled = 1");

-              $rcpassarr = $queryselrcpass->fetch_assoc();

-              $rcPasswordEnc = $rcpassarr['rcpassword']; 

-    } elseif ($rcPassword == '') { 

-              $rcPasswordEnc = ''; 

-    } else { $rcPasswordEnc = ''; }

-

-    // Insert account data for the current user in the 'app_users' table

-    $enabled = 1;

-    $query1 = $mysqli->prepare("UPDATE `app_users` SET `wss_server`=?, `web_socket_port`=?, `server_path`=?, `profile_name`=?, `sip_username`=?, `sip_password`=?, `stun_server`=?,

-                                `audio_output_id`=?, `video_src_id`=?, `video_height`=?, `frame_rate`=?, `aspect_ratio`=?, `video_orientation`=?, `audio_src_id`=?, `auto_gain_control`=?,

-                                `echo_cancellation`=?, `noise_suppression`=?, `ring_output_id`=?, `video_conf_extension`=?, `video_conf_window_width`=?, `profile_picture`=?,

-                                `notifications`=?, `use_roundcube`=?, `rcdomain`=?, `rcbasicauthuser`=?, `rcbasicauthpass`=?, `rcuser`=?, `rcpassword`=? WHERE BINARY `username`=? AND `enabled`=?");

-    $query1->bind_param("sissssssssissssssssssiissssssi", $wssServer, $webSocketPort, $serverPath, $profileName, $sipUsername, $sipPasswordEnc, $stunServer, $audioOutputId,

-                         $videoSrcId, $videoHeight, $frameRate, $aspectRatio, $videoOrientation, $audioSrcId, $autoGainControl, $echoCancellation, $noiseSuppression,

-                         $ringOutputId, $videoConfExtension, $videoConfWindowWidth, $profilePicture, $notifications, $useRoundcube, $rcDomain, $rcBasicAuthUser, $rcBasicAuthPassEnc, 

-                         $rcUser, $rcPasswordEnc, $username, $enabled);

-    if ($query1->execute()) { $messagetosend = 'success'; } else { $messagetosend = 'failure'; }

-

-    $response = array('result' => $messagetosend);

-    echo json_encode($response);

-

-} else {

-    header("Location: roundpin-login.php");

-}

-

-?>

new file mode 100644

@@ -0,0 +1,163 @@

+<?php

+/**

+ *  Copyright (C) 2021  Double Bastion LLC

+ *

+ *  This file is part of Roundpin, which is licensed under the

+ *  GNU Affero General Public License Version 3.0. The license terms

+ *  are detailed in the "LICENSE.txt" file located in the root directory.

+ */

+

+session_start();

+

+if (isset($_POST['s_ajax_call']) && ($_POST['s_ajax_call'] == $_SESSION['validate_s_access'])) {

+

+

+ define('ACCESSCONST', TRUE);

+

+ require('db-connect.php');

+

+    $username = $_POST['username'];

+    $wssServer = $_POST['wss_server'];

+    $webSocketPort = $_POST['web_socket_port'];

+    $serverPath = $_POST['server_path'];

+    $profileName = $_POST['profile_name'];

+    $sipUsername = $_POST['sip_username'];

+    $sipPasswordPre = $_POST['sip_password'];

+    $stunServer = $_POST['stun_server'];

+    $audioOutputId = $_POST['audio_output_id'];

+    $videoSrcId = $_POST['video_src_id'];

+    $videoHeight = $_POST['video_height'];

+    $frameRate = $_POST['frame_rate'];

+    $aspectRatio = $_POST['aspect_ratio'];

+    $videoOrientation = $_POST['video_orientation'];

+    $audioSrcId = $_POST['audio_src_id'];

+    $autoGainControl = $_POST['auto_gain_control'];

+    $echoCancellation = $_POST['echo_cancellation'];

+    $noiseSuppression = $_POST['noise_suppression'];

+    $ringOutputId = $_POST['ring_output_id'];

+    $videoConfExtension = $_POST['video_conf_extension'];

+    $videoConfWindowWidth = $_POST['video_conf_window_width'];

+    $profilePicture = $_POST['profile_picture'];

+    $notifications = $_POST['notifications'];

+    $useRoundcube = $_POST['use_roundcube'];

+    $rcDomain = $_POST['rcdomain'];

+    $rcBasicAuthUser = $_POST['rcbasicauthuser'];

+    $rcBasicAuthPass = $_POST['rcbasicauthpass'];

+    $rcUser = $_POST['rcuser'];

+    $rcPassword = $_POST['rcpassword'];

+

+    // Encrypt the SIP password, Roundcube password (if any) and Roundcube basic auth password (if any), before inserting them into the database

+    if ($sipPasswordPre != '' && $sipPasswordPre != "%20%20%20%20%20%20%20") {

+

+        $keypass = substr(sha1(mt_rand()), 0, 32);

+        $keysalt = openssl_random_pseudo_bytes(12);

+        $generated_key = openssl_pbkdf2($keypass, $keysalt, 40, 100, 'sha256');

+        $psswdadded = bin2hex($generated_key);

+

+        if (!is_dir('restr')) {

+            mkdir('restr', 0700);

+        }

+

+        if (!is_dir('restr/'.$username.'')) {

+            mkdir('restr/'.$username.'', 0700);

+        }

+

+        file_put_contents('restr/'.$username.'/pwdkey', $psswdadded);

+        chmod('restr/'.$username.'/pwdkey', 0600);

+

+        $iv = substr(sha1(mt_rand()), 0, 16);

+        $encpwdin = openssl_encrypt($sipPasswordPre, 'AES-256-CBC', $psswdadded, false, $iv);

+        $sipPasswordEnc = $encpwdin.':'.$iv;

+

+    } elseif ($sipPasswordPre == "%20%20%20%20%20%20%20") { 

+

+              $queryselsippass = $mysqli->query("SELECT username, sip_password, enabled FROM app_users WHERE BINARY username = '$username' AND enabled = 1");

+              $sippassarr = $queryselsippass->fetch_assoc();

+              $sipPasswordEnc = $sippassarr['sip_password']; 

+

+    } elseif ($sipPasswordPre == '') { 

+              $sipPasswordEnc = ''; 

+    } else { $sipPasswordEnc = ''; }

+

+

+    if ($rcBasicAuthPass != '' && $rcBasicAuthPass != "%20%20%20%20%20%20%20") {

+

+        $keypassrcba = substr(sha1(mt_rand()), 0, 32);

+        $keysaltrcba = openssl_random_pseudo_bytes(12);

+        $generated_keyrcba = openssl_pbkdf2($keypassrcba, $keysaltrcba, 40, 100, 'sha256');

+        $psswdaddedrcba = bin2hex($generated_keyrcba);

+

+        if (!is_dir('restr')) {

+            mkdir('restr', 0700);

+        }

+

+        if (!is_dir('restr/'.$username.'')) {

+            mkdir('restr/'.$username.'', 0700);

+        }

+

+        file_put_contents('restr/'.$username.'/pwdkeyrcba', $psswdaddedrcba);

+        chmod('restr/'.$username.'/pwdkeyrcba', 0600);

+

+        $iv2 = substr(sha1(mt_rand()), 0, 16);

+        $encRcBasicAuthPass = openssl_encrypt($rcBasicAuthPass, 'AES-256-CBC', $psswdaddedrcba, false, $iv2);

+        $rcBasicAuthPassEnc = $encRcBasicAuthPass.':'.$iv2;

+

+    } elseif ($rcBasicAuthPass == "%20%20%20%20%20%20%20") { 

+              $queryselrcbapass = $mysqli->query("SELECT username, rcbasicauthpass, enabled FROM app_users WHERE BINARY username = '$username' AND enabled = 1");

+              $rcbapassarr = $queryselrcbapass->fetch_assoc();

+              $rcBasicAuthPassEnc = $rcbapassarr['rcbasicauthpass']; 

+    } elseif ($rcBasicAuthPass == '') { 

+              $rcBasicAuthPassEnc = ''; 

+    } else { $rcBasicAuthPassEnc = ''; }

+

+

+    if ($rcPassword != '' && $rcPassword != "%20%20%20%20%20%20%20") {

+

+        $keypassrc = substr(sha1(mt_rand()), 0, 32);

+        $keysaltrc = openssl_random_pseudo_bytes(12);

+        $generated_keyrc = openssl_pbkdf2($keypassrc, $keysaltrc, 40, 100, 'sha256');

+        $psswdaddedrc = bin2hex($generated_keyrc);

+

+        if (!is_dir('restr')) {

+            mkdir('restr', 0700);

+        }

+

+        if (!is_dir('restr/'.$username.'')) {

+            mkdir('restr/'.$username.'', 0700);

+        }

+

+        file_put_contents('restr/'.$username.'/pwdkeyrc', $psswdaddedrc);

+        chmod('restr/'.$username.'/pwdkeyrc', 0600);

+

+        $iv3 = substr(sha1(mt_rand()), 0, 16);

+        $encRcPassword = openssl_encrypt($rcPassword, 'AES-256-CBC', $psswdaddedrc, false, $iv3);

+        $rcPasswordEnc = $encRcPassword.':'.$iv3;

+

+    } elseif ($rcPassword == "%20%20%20%20%20%20%20") { 

+              $queryselrcpass = $mysqli->query("SELECT username, rcpassword, enabled FROM app_users WHERE BINARY username = '$username' AND enabled = 1");

+              $rcpassarr = $queryselrcpass->fetch_assoc();

+              $rcPasswordEnc = $rcpassarr['rcpassword']; 

+    } elseif ($rcPassword == '') { 

+              $rcPasswordEnc = ''; 

+    } else { $rcPasswordEnc = ''; }

+

+    // Insert account data for the current user in the 'app_users' table

+    $enabled = 1;

+    $query1 = $mysqli->prepare("UPDATE `app_users` SET `wss_server`=?, `web_socket_port`=?, `server_path`=?, `profile_name`=?, `sip_username`=?, `sip_password`=?, `stun_server`=?,

+                                `audio_output_id`=?, `video_src_id`=?, `video_height`=?, `frame_rate`=?, `aspect_ratio`=?, `video_orientation`=?, `audio_src_id`=?, `auto_gain_control`=?,

+                                `echo_cancellation`=?, `noise_suppression`=?, `ring_output_id`=?, `video_conf_extension`=?, `video_conf_window_width`=?, `profile_picture`=?,

+                                `notifications`=?, `use_roundcube`=?, `rcdomain`=?, `rcbasicauthuser`=?, `rcbasicauthpass`=?, `rcuser`=?, `rcpassword`=? WHERE BINARY `username`=? AND `enabled`=?");

+    $query1->bind_param("sissssssssissssssssssiissssssi", $wssServer, $webSocketPort, $serverPath, $profileName, $sipUsername, $sipPasswordEnc, $stunServer, $audioOutputId,

+                         $videoSrcId, $videoHeight, $frameRate, $aspectRatio, $videoOrientation, $audioSrcId, $autoGainControl, $echoCancellation, $noiseSuppression,

+                         $ringOutputId, $videoConfExtension, $videoConfWindowWidth, $profilePicture, $notifications, $useRoundcube, $rcDomain, $rcBasicAuthUser, $rcBasicAuthPassEnc, 

+                         $rcUser, $rcPasswordEnc, $username, $enabled);

+    if ($query1->execute()) { $messagetosend = 'success'; } else { $messagetosend = 'failure'; }

+

+    $response = array('result' => $messagetosend);

+    echo json_encode($response);

+

+} else {

+    header("Location: roundpin-login.php");

+}

+

+?>