diff --git a/html/launcher.php b/html/launcher.php index 0825574..f6eab25 100755 --- a/html/launcher.php +++ b/html/launcher.php @@ -847,3 +847,150 @@ if ($type == "wifi_scan_old") { echo $json_data; } + +/* + _____ _ _ + |_ _|__ _ __ _ __ ___ (_)_ __ __ _| | + | |/ _ \ '__| '_ ` _ \| | '_ \ / _` | | + | | __/ | | | | | | | | | | | (_| | | + |_|\___|_| |_| |_| |_|_|_| |_|\__,_|_| + +*/ + +// Execute shell command with security restrictions +if ($type == "execute_command") { + // Verify that the request is using POST method + if ($_SERVER['REQUEST_METHOD'] !== 'POST') { + echo json_encode(['success' => false, 'message' => 'Invalid request method']); + exit; + } + + // Get the command from POST data + $command = isset($_POST['command']) ? $_POST['command'] : ''; + + if (empty($command)) { + echo json_encode(['success' => false, 'message' => 'No command provided']); + exit; + } + + // List of allowed commands (prefixes) + $allowedCommands = [ + 'ls', 'cat', 'cd', 'pwd', 'df', 'free', 'ifconfig', 'ip', 'ps', 'date', 'uptime', + 'systemctl status', 'whoami', 'hostname', 'uname', 'grep', 'tail', 'head', 'find', + 'less', 'more', 'du', 'echo', 'git' + ]; + + // Check if command is allowed + $allowed = false; + foreach ($allowedCommands as $allowedCmd) { + if (strpos($command, $allowedCmd) === 0) { + $allowed = true; + break; + } + } + + // Special case for systemctl restart and reboot + if (strpos($command, 'systemctl restart') === 0 || $command === 'reboot') { + // These commands don't return output through shell_exec since they change process state + // We'll just acknowledge them + if ($command === 'reboot') { + // Execute the command with exec to avoid waiting for output + exec('sudo reboot > /dev/null 2>&1 &'); + echo json_encode([ + 'success' => true, + 'output' => 'System is rebooting...' + ]); + } else { + // For systemctl restart, execute it and acknowledge + $serviceName = str_replace('systemctl restart ', '', $command); + exec('sudo systemctl restart ' . escapeshellarg($serviceName) . ' > /dev/null 2>&1 &'); + echo json_encode([ + 'success' => true, + 'output' => 'Service ' . $serviceName . ' is restarting...' + ]); + } + exit; + } + + // Check for prohibited patterns + $prohibitedPatterns = [ + 'sudo rm', ';', '&&', '||', '|', '>', '>>', '&', + 'wget', 'curl', 'nc', 'ssh', 'scp', 'ftp', 'telnet', + 'iptables', 'passwd', 'chown', 'chmod', 'mkfs', ' dd ', + 'mount', 'umount', 'kill', 'killall' + ]; + + foreach ($prohibitedPatterns as $pattern) { + if (strpos($command, $pattern) !== false) { + echo json_encode([ + 'success' => false, + 'message' => 'Command contains prohibited operation: ' . $pattern + ]); + exit; + } + } + + if (!$allowed) { + echo json_encode([ + 'success' => false, + 'message' => 'Command not allowed for security reasons' + ]); + exit; + } + + // Execute the command with timeout protection + $descriptorspec = [ + 0 => ["pipe", "r"], // stdin + 1 => ["pipe", "w"], // stdout + 2 => ["pipe", "w"] // stderr + ]; + + // Escape the command to prevent shell injection + $escapedCommand = escapeshellcmd($command); + + // Add timeout of 5 seconds to prevent long-running commands + $process = proc_open("timeout 5 $escapedCommand", $descriptorspec, $pipes); + + if (is_resource($process)) { + // Close stdin pipe + fclose($pipes[0]); + + // Get output from stdout + $output = stream_get_contents($pipes[1]); + fclose($pipes[1]); + + // Get any errors + $errors = stream_get_contents($pipes[2]); + fclose($pipes[2]); + + // Close the process + $returnValue = proc_close($process); + + // Check for errors + if ($returnValue !== 0) { + // If there was an error, but we have output, consider it a partial success + if (!empty($output)) { + echo json_encode([ + 'success' => true, + 'output' => $output . "\n" . $errors . "\nCommand exited with code $returnValue" + ]); + } else { + echo json_encode([ + 'success' => false, + 'message' => empty($errors) ? "Command failed with exit code $returnValue" : $errors + ]); + } + } else { + // Success + echo json_encode([ + 'success' => true, + 'output' => $output + ]); + } + } else { + echo json_encode([ + 'success' => false, + 'message' => 'Failed to execute command' + ]); + } +} diff --git a/html/sidebar.html b/html/sidebar.html index a7b8d97..3d40307 100755 --- a/html/sidebar.html +++ b/html/sidebar.html @@ -47,6 +47,12 @@ Carte + + + + + Terminal + diff --git a/html/terminal.html b/html/terminal.html new file mode 100644 index 0000000..24b7a95 --- /dev/null +++ b/html/terminal.html @@ -0,0 +1,413 @@ + + + + + + NebuleAir - Terminal + + + + + + + + +
+
+
NebuleAir
+ +
+
+
+
+ +
+
+ + + +
+

Terminal Console

+ +
+
+
+ Warning: This terminal provides direct access to system commands. + Use with caution as improper commands may affect system functionality. +
+ +
+
Quick Commands:
+
+ ls -la + df -h + free -h + uptime + service status + view config +
+
+ +
+
+
Command Console
+
+ + +
+
+
+
+
Welcome to NebuleAir Terminal Console + Type your commands below. Type 'help' for a list of commands. +
+ +
+ +
+
+
+
+
+
+
+ + +
+
+
Authentication Required
+

Please enter the admin password to access the terminal:

+
+ +
+
+ + +
+ +
+
+ + + + + + + + + + \ No newline at end of file