313 lines
12 KiB
Python
313 lines
12 KiB
Python
#coding: utf-8
|
||
# +-------------------------------------------------------------------
|
||
# | YakPanel
|
||
# +-------------------------------------------------------------------
|
||
# | Copyright (c) 2015-2020 YakPanel(https://www.yakpanel.com) All rights reserved.
|
||
# +-------------------------------------------------------------------
|
||
# | Author: baozi <baozi@yakpanel.com>
|
||
# | Author: baozi
|
||
# +-------------------------------------------------------------------
|
||
import sys,os,re,json
|
||
|
||
import public,panelPush, time
|
||
from datetime import datetime, timedelta
|
||
|
||
try:
|
||
from YakPanel import cache
|
||
except :
|
||
from cachelib import SimpleCache
|
||
cache = SimpleCache()
|
||
|
||
class base_push:
|
||
|
||
# 版本信息 目前无作用
|
||
def get_version_info(self, get=None):
|
||
raise NotImplementedError
|
||
|
||
# 格式化返回执行周期， 目前无作用
|
||
def get_push_cycle(self, data: dict):
|
||
return data
|
||
|
||
# 获取模块推送参数
|
||
def get_module_config(self, get: public.dict_obj):
|
||
raise NotImplementedError
|
||
|
||
# 获取模块配置项
|
||
def get_push_config(self, get: public.dict_obj):
|
||
# 其实就是配置信息，没有也会从全局配置文件push.json中读取
|
||
raise NotImplementedError
|
||
|
||
# 写入推送配置文件
|
||
def set_push_config(self, get: public.dict_obj):
|
||
raise NotImplementedError
|
||
|
||
# 删除推送配置
|
||
def del_push_config(self, get: public.dict_obj):
|
||
# 从配置中删除信息，并做一些您想做的事，如记日志
|
||
raise NotImplementedError
|
||
|
||
# 无意义？？？
|
||
def get_total(self):
|
||
return True
|
||
|
||
# 检查并获取推送消息，返回空时，不做推送, 传入的data是配置项
|
||
def get_push_data(self, data, total):
|
||
# data 内容
|
||
# index : 时间戳 time.time()
|
||
# 消息 以类型为key， 以内容为value， 内容中包含title 和msg
|
||
# push_keys： 列表，发送了信息的推送任务的id，用来验证推送任务次数（） 意义不大
|
||
raise NotImplementedError
|
||
|
||
class tamper_push(base_push):
|
||
__tamper_path = "{}/tamper".format(public.get_setup_path())
|
||
__total_path = "{}/total/total.json".format(__tamper_path)
|
||
__config_file = "{}/tamper.conf".format(__tamper_path)
|
||
__push_conf = "{}/class/push/push.json".format(public.get_panel_path())
|
||
__logs_path = "{}/logs".format(__tamper_path)
|
||
|
||
def __init__(self) -> None:
|
||
self.__push = panelPush.panelPush()
|
||
try:
|
||
config = public.readFile(self.__config_file)
|
||
config_dict = json.loads(config)
|
||
self.__config = {}
|
||
for i in config_dict["paths"]:
|
||
self.__config[i["pid"]] = i
|
||
except:
|
||
self.__config = None
|
||
|
||
|
||
# 版本信息 目前无作用
|
||
def get_version_info(self, get=None):
|
||
data = {}
|
||
data['ps'] = 'Tamper-proof for Enterprise'
|
||
data['version'] = '1.0'
|
||
data['date'] = '2023-03-24'
|
||
data['author'] = 'YakPanel'
|
||
data['help'] = 'http://www.yakpanel.com/bbs'
|
||
return data
|
||
|
||
# 获取模块推送参数
|
||
def get_module_config(self, get: public.dict_obj):
|
||
data = []
|
||
item = self.__push.format_push_data(push = ["mail",'dingding','weixin',"feishu", "wx_account", "tg"], project = 'tamper',type = '')
|
||
item['cycle'] = 30
|
||
item['title'] = 'Tamper-proof for Enterprise'
|
||
data.append(item)
|
||
return data
|
||
|
||
|
||
# 获取模块配置项
|
||
def get_push_config(self, get: public.dict_obj):
|
||
id = get.id
|
||
# 其实就是配置信息，没有也会从全局配置文件push.json中读取
|
||
push_list = self.__push._get_conf()
|
||
|
||
if not id in push_list["tamper_push"]:
|
||
res_data = public.returnMsg(False, 'The specified configuration was not found.')
|
||
res_data['code'] = 100
|
||
return res_data
|
||
result = push_list["tamper_push"][id]
|
||
return result
|
||
|
||
|
||
# 写入推送配置文件
|
||
def set_push_config(self, get: public.dict_obj):
|
||
if self.__config is None:
|
||
return public.returnMsg(False, public.lang('Configuration error, cannot be set, please try use the command fix: "bash /www/server/panel/plugin/tamper_core/install.sh install"')
|
||
)
|
||
try:
|
||
id = int(get.id)
|
||
if id != 0 and id not in self.__config:
|
||
return public.returnMsg(False, public.lang("No protection directory specified"))
|
||
except ValueError:
|
||
return public.returnMsg(False, public.lang("No protection directory specified"))
|
||
|
||
pdata = json.loads(get.data)
|
||
data = self.__push._get_conf()
|
||
if "tamper_push" not in data: data["tamper_push"] = {}
|
||
if not str(id) in data["tamper_push"]:
|
||
if id != 0:
|
||
public.WriteLog("Tamper-proof for Enterprise","Protected directory: {} set tampering alarm ".format(self.__config[id]["path"]))
|
||
else:
|
||
public.WriteLog("Tamper-proof for Enterprise","All directory is set, tampering alarm ")
|
||
else:
|
||
if id != 0:
|
||
public.WriteLog("Tamper-proof for Enterprise","Protected directory: {} Changed alert config".format(self.__config[id]["path"]))
|
||
else:
|
||
public.WriteLog("Tamper-proof for Enterprise"," All directory alarm config changed")
|
||
self._del_today_push_count(id)
|
||
pdata["status"] = True
|
||
pdata["pid"] = id
|
||
pdata["project"] = "tamper_core"
|
||
data["tamper_push"][str(id)] = pdata
|
||
return data
|
||
|
||
# 删除推送配置
|
||
def del_push_config(self, get: public.dict_obj):
|
||
# 从配置中删除信息，并做一些您想做的事，如记日志
|
||
id = get.id
|
||
data = self.__push._get_conf()
|
||
if str(id).strip() in data["tamper_push"]:
|
||
del data["tamper_push"][id]
|
||
public.writeFile(self.__push_conf,json.dumps(data))
|
||
return public.returnMsg(True, public.lang("successfully deleted."))
|
||
|
||
# 无意义？？？
|
||
def get_total(self):
|
||
return True
|
||
|
||
# 检查并获取推送消息，返回空时，不做推送, 传入的data是配置项
|
||
def get_push_data(self, data, total):
|
||
# 返回内容
|
||
# index : 时间戳 time.time()
|
||
# 消息 以类型为key， 以内容为value， 内容中包含title 和msg
|
||
# push_keys： 列表，发送了信息的推送任务的id，用来验证推送任务次数（） 意义不大
|
||
"""
|
||
@检测推送数据
|
||
@data dict 推送数据
|
||
title:标题
|
||
count:触发次数
|
||
cycle:周期 天、小时
|
||
keys:检测键值
|
||
"""
|
||
if not self._log_check(data["id"], data["cycle"], data["count"]): return None
|
||
if data["push_count"] <= self._get_today_push_count(data["id"]):return None
|
||
result = {'index': time.time(), }
|
||
tamper_path = "All protected directory " if not int(data["id"]) else "Protected Directory:{}".format(self.__config[int(data["id"])]["path"])
|
||
for m_module in data['module'].split(','):
|
||
if m_module == 'sms': continue
|
||
s_list = [">Notification: Tamper-proof for Enterprise alarm", ">Alarm content: <font color=#ff0000>Last {} minutes, {} has been tampered with more than {} times, and it has been successfully intercepted, please pay attention to the website situation , and deal with it in timely manner.</font> ".format(data['cycle'], tamper_path, data['count'])]
|
||
sdata = public.get_push_info('Tamper-proof for Enterprise alarm', s_list)
|
||
result[m_module] = sdata
|
||
self._set_total()
|
||
self._set_today_push_count(data["id"])
|
||
return result
|
||
|
||
def _log_check(self, id, cycle, count):
|
||
target_time = datetime.now() - timedelta(minutes=cycle)
|
||
tday, yday = datetime.now().strftime('%Y-%m-%d'), (datetime.now() - timedelta(days=1)).strftime('%Y-%m-%d')
|
||
files = []
|
||
if id == "0":
|
||
for i in self.__config.keys():
|
||
files.append("{}/{}/{}.log".format(self.__logs_path,i,tday))
|
||
files.append("{}/{}/{}.log".format(self.__logs_path,i,yday))
|
||
else:
|
||
files.append("{}/{}/{}.log".format(self.__logs_path,id,tday))
|
||
files.append("{}/{}/{}.log".format(self.__logs_path,id,yday))
|
||
|
||
_count = 0
|
||
public.print_log(files)
|
||
_f = '%Y-%m-%d %H:%M:%S'
|
||
for i in self._get_logs(files):
|
||
if _count >= count:
|
||
return True
|
||
if datetime.strptime(i, _f) > target_time:
|
||
_count += 1
|
||
else:
|
||
return _count >= count
|
||
return _count >= count
|
||
|
||
def _get_logs(self, files):
|
||
def the_generator(self):
|
||
_buf = b""
|
||
for fp in self._get_fp():
|
||
is_start = True
|
||
while is_start:
|
||
buf = b''
|
||
while True:
|
||
pos = fp.tell()
|
||
read_size = pos if pos <= 38 else 38
|
||
fp.seek(-read_size, 1)
|
||
_buf = fp.read(read_size) + _buf
|
||
fp.seek(-read_size, 1)
|
||
nl_idx = _buf.rfind(ord('\n'))
|
||
if nl_idx == -1:
|
||
if pos <= 38:
|
||
buf, _buf = _buf, b''
|
||
is_start = False
|
||
break
|
||
else:
|
||
buf = _buf[nl_idx+1:]
|
||
_buf = _buf[:nl_idx]
|
||
break
|
||
yield self._get_time(buf.decode("utf-8"))
|
||
|
||
def the_init(self,log_files):
|
||
self.log_files = log_files
|
||
|
||
def the_get_fp(self):
|
||
for i in self.log_files:
|
||
if not os.path.exists(i): continue
|
||
with open(i, 'rb') as fp:
|
||
fp.seek(-1, 2)
|
||
yield fp
|
||
|
||
def the_get_time(self, log: str):
|
||
return log.split("] [", 1)[0].strip("[").strip()
|
||
|
||
attr = {
|
||
"__init__": the_init,
|
||
"_get_fp": the_get_fp,
|
||
"__iter__": the_generator,
|
||
"_get_time": the_get_time,
|
||
}
|
||
return type("LogContent", (object, ), attr)(files)
|
||
|
||
def _set_total(self):
|
||
try:
|
||
total = json.loads(public.readFile(self.__total_path))
|
||
if "warning_msg" not in total:
|
||
total["warning_msg"] = 1
|
||
else:
|
||
total["warning_msg"] += 1
|
||
public.writeFile(self.__total_path, json.dumps(total))
|
||
except:
|
||
pass
|
||
|
||
def _get_today_push_count(self, id):
|
||
t_day = datetime.now().strftime('%Y-%m-%d')
|
||
today_tip = '{}/data/push/tips/tamper_today.json'.format(public.get_panel_path())
|
||
if os.path.exists(today_tip):
|
||
tip = json.loads(public.readFile(today_tip))
|
||
if tip["t_day"] != t_day:
|
||
tip = {"t_day": t_day}
|
||
res = 0
|
||
elif id in tip:
|
||
res = tip[id]
|
||
else:
|
||
res = 0
|
||
else:
|
||
tip = {"t_day": t_day}
|
||
res = 0
|
||
|
||
public.writeFile(today_tip, json.dumps(tip))
|
||
setattr(self, "_tip_", tip)
|
||
return res
|
||
|
||
|
||
def _set_today_push_count(self, id):
|
||
today_tip = '{}/data/push/tips/tamper_today.json'.format(public.get_panel_path())
|
||
if hasattr(self, "_tip_"):
|
||
tip = getattr(self, "_tip_")
|
||
else:
|
||
tip = json.loads(public.readFile(today_tip))
|
||
if id in tip:
|
||
tip[id] += 1
|
||
else:
|
||
tip[id] = 1
|
||
|
||
public.writeFile(today_tip, json.dumps(tip))
|
||
|
||
def _del_today_push_count(self, id):
|
||
t_day = datetime.now().strftime('%Y-%m-%d')
|
||
today_tip = '{}/data/push/tips/tamper_today.json'.format(public.get_panel_path())
|
||
if os.path.exists(today_tip):
|
||
tip = json.loads(public.readFile(today_tip))
|
||
if tip["t_day"] != t_day:
|
||
tip = {"t_day": t_day}
|
||
elif id in tip:
|
||
del tip[id]
|
||
|
||
public.writeFile(today_tip, json.dumps(tip))
|
||
|