mirror of
https://github.com/Vateron-Media/XC_VM.git
synced 2026-10-03 12:02:29 +02:00
66 lines
2.5 KiB
PHP
66 lines
2.5 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Provision the administrator the E2E suite logs in as — or re-key it.
|
||
|
|
*
|
||
|
|
* Runs ON the panel host, with the panel's own PHP, and creates the account the
|
||
|
|
* way the first-run setup page does (Views/admin/setup.php): the `users` row
|
||
|
|
* defaults from the schema, the panel's password hash, the Administrators group.
|
||
|
|
* The password is read from stdin so it never appears in a process list or a
|
||
|
|
* shell history:
|
||
|
|
*
|
||
|
|
* /home/xc_vm/bin/php/bin/php create-admin.php e2e_admin < password.txt
|
||
|
|
*
|
||
|
|
* Running it again for an existing username resets that account's password and
|
||
|
|
* puts it back in the Administrators group, enabled. XC_VM_HOME overrides the
|
||
|
|
* install path (default /home/xc_vm).
|
||
|
|
*/
|
||
|
|
|
||
|
|
use XcVm\Core\Auth\Authenticator;
|
||
|
|
use XcVm\Core\Database\QueryHelper;
|
||
|
|
|
||
|
|
if (PHP_SAPI !== 'cli') {
|
||
|
|
exit(1);
|
||
|
|
}
|
||
|
|
|
||
|
|
$rUsername = (string) ($argv[1] ?? '');
|
||
|
|
$rPassword = rtrim((string) stream_get_contents(STDIN), "\r\n");
|
||
|
|
// The setup page's own floor for the first administrator.
|
||
|
|
if (strlen($rUsername) < 8 || strlen($rPassword) < 8) {
|
||
|
|
fwrite(STDERR, "usage: php create-admin.php <username, 8+ chars> (password, 8+ chars, on stdin)\n");
|
||
|
|
exit(2);
|
||
|
|
}
|
||
|
|
|
||
|
|
$rHome = rtrim(getenv('XC_VM_HOME') ?: '/home/xc_vm', '/');
|
||
|
|
require_once $rHome . '/bootstrap.php';
|
||
|
|
XC_Bootstrap::boot(XC_Bootstrap::CONTEXT_CLI, ['process' => 'XC_VM[E2E admin]']);
|
||
|
|
|
||
|
|
global $db;
|
||
|
|
// group_id 1 is the seeded Administrators group (bin/install/database.sql).
|
||
|
|
$rAdminGroup = 1;
|
||
|
|
$rHash = Authenticator::hashPassword($rPassword);
|
||
|
|
|
||
|
|
// fetchOne() answers an empty array, not false, when nothing matches.
|
||
|
|
$rExisting = $db->fetchOne('SELECT `id` FROM `users` WHERE `username` = ?', $rUsername);
|
||
|
|
if (!empty($rExisting['id'])) {
|
||
|
|
$db->query('UPDATE `users` SET `password` = ?, `member_group_id` = ?, `status` = 1 WHERE `id` = ?', $rHash, $rAdminGroup, $rExisting['id']);
|
||
|
|
echo 'Updated administrator ' . $rUsername . ' (id ' . $rExisting['id'] . ")\n";
|
||
|
|
exit(0);
|
||
|
|
}
|
||
|
|
|
||
|
|
$rArray = QueryHelper::verifyPostTable('users');
|
||
|
|
$rArray['username'] = $rUsername;
|
||
|
|
$rArray['password'] = $rHash;
|
||
|
|
$rArray['email'] = '';
|
||
|
|
$rArray['date_registered'] = time();
|
||
|
|
$rArray['last_login'] = null;
|
||
|
|
$rArray['member_group_id'] = $rAdminGroup;
|
||
|
|
$rArray['ip'] = '';
|
||
|
|
$rArray['notes'] = 'E2E test administrator (tests/e2e/tools/create-admin.php)';
|
||
|
|
$rPrepare = QueryHelper::prepareArray($rArray);
|
||
|
|
if (!$db->query('INSERT INTO `users`(' . $rPrepare['columns'] . ') VALUES(' . $rPrepare['placeholder'] . ');', ...$rPrepare['data'])) {
|
||
|
|
fwrite(STDERR, "Insert failed.\n");
|
||
|
|
exit(1);
|
||
|
|
}
|
||
|
|
echo 'Created administrator ' . $rUsername . ' (id ' . $db->last_insert_id() . ")\n";
|