ensure the ID is int vall

Author: callcenter-magnus

protected/commands/BDServiceCommand.php

@@ -1,4 +1,5 @@
 <?php
+
 /**
  * =======================================
  * ###################################
@@ -26,7 +27,7 @@ public function run($args)
         define('LOGFILE', 'protected/runtime/BDServicePid.log');
         define('DEBUG', 0);
 
-        if ( ! defined('PID')) {
+        if (! defined('PID')) {
             define("PID", "/var/run/magnus/BDServicePid.php");
         }
 
@@ -41,7 +42,6 @@ public function run($args)
         $this->tanaSend();
 
         $this->ezzeapi();
-
     }
 
     public function tanaSend()
@@ -60,15 +60,17 @@ public function tanaSend()
 
         foreach ($modelSendCreditSummary as $key => $sendCredit) {
             $url = "http://takasend.org/ezzeapi/status?id=" . $sendCredit->id . "&user=" . $userBD . "&key=" . $keyBD . "";
-            if ( ! $result = @file_get_contents($url, false)) {
+            if (! $result = @file_get_contents($url, false)) {
                 $result = '';
             }
             echo $result . " $sendCredit->id \n";
-            $modelRefill = Refill::model()->find('invoice_number = :key AND id_user = :key1',
+            $modelRefill = Refill::model()->find(
+                'invoice_number = :key AND id_user = :key1',
                 [
                     ':key'  => $sendCredit->id,
                     ':key1' => $sendCredit->id_user,
-                ]);
+                ]
+            );
 
             if (preg_match("/ERROR|CANCELLED/", strtoupper($result))) {
 
@@ -84,49 +86,43 @@ public function tanaSend()
                     try {
                         $modelRefill->save();
                     } catch (Exception $e) {
-
                     }
 
-                    $modelUser         = User::model()->findByPk($sendCredit->id_user);
+                    $modelUser         = User::model()->findByPk((int) $sendCredit->id_user);
                     $modelUser->credit = $modelUser->credit + ($modelRefill->credit * -1);
                     try {
                         $modelUser->save();
                     } catch (Exception $e) {
-
                     }
 
                     if ($modelUser->id_user > 1) {
                         echo "is agent \n";
                         $id_agent         = $modelUser->id_user;
-                        $modelRefillAgent = Refill::model()->find('invoice_number = :key AND id_user = :key1',
+                        $modelRefillAgent = Refill::model()->find(
+                            'invoice_number = :key AND id_user = :key1',
                             [
                                 ':key'  => $sendCredit->id,
                                 ':key1' => $id_agent,
-                            ]);
+                            ]
+                        );
 
                         if (isset($modelRefillAgent->id)) {
                             $modelRefillAgent->description = $modelRefillAgent->description . '. Status: ' . $result[0] . '. Ref:' . $result[1];
                             $modelRefillAgent->payment     = 0;
                             try {
                                 $modelRefillAgent->save();
                             } catch (Exception $e) {
-
                             }
 
-                            $modelUser         = User::model()->findByPk($id_agent);
+                            $modelUser         = User::model()->findByPk((int) $id_agent);
                             $modelUser->credit = $modelUser->credit + ($modelRefillAgent->credit * -1);
                             try {
                                 $modelUser->save();
                             } catch (Exception $e) {
-
                             }
-
                         }
-
                     }
-
                 }
-
             } else if (preg_match("/SUCCESS|COMPLETED|ERROR/", $result)) {
 
                 $result = explode(':', $result);
@@ -141,33 +137,29 @@ public function tanaSend()
                     try {
                         $modelRefill->save();
                     } catch (Exception $e) {
-
                     }
-                    $modelUser = User::model()->findByPk($sendCredit->id_user);
+                    $modelUser = User::model()->findByPk((int) $sendCredit->id_user);
                     if ($modelUser->id_user > 1) {
                         echo "is agent \n";
                         $id_agent         = $modelUser->id_user;
-                        $modelRefillAgent = Refill::model()->find('invoice_number = :key AND id_user = :key1',
+                        $modelRefillAgent = Refill::model()->find(
+                            'invoice_number = :key AND id_user = :key1',
                             [
                                 ':key'  => $sendCredit->id,
                                 ':key1' => $id_agent,
-                            ]);
+                            ]
+                        );
 
                         $modelRefillAgent->description = @$modelRefillAgent->description . '. Status: ' . $result[0] . '. Ref:' . $result[1];
                         $modelRefillAgent->payment     = 1;
                         try {
                             $modelRefillAgent->save();
                         } catch (Exception $e) {
-
                         }
-
                     }
                 }
-
             }
-
         }
-
     }
     public function ezzeapi()
     {
@@ -184,12 +176,15 @@ public function ezzeapi()
         $BDService_url = $config['global']['BDService_url'];
 
         $url = $BDService_url . "/ezzeapi/balance?user=$userBD&key=$keyBD";
-        if ( ! $result = @file_get_contents($url, false)) {
+        if (! $result = @file_get_contents($url, false)) {
             $result = '';
         }
 
-        Configuration::model()->updateAll(['config_value' => $result], 'config_key = :key',
-            [':key' => 'BDService_credit_provider']);
+        Configuration::model()->updateAll(
+            ['config_value' => $result],
+            'config_key = :key',
+            [':key' => 'BDService_credit_provider']
+        );
 
         $modelSendCreditSummary = SendCreditSummary::model()->findAll('confirmed = 0 AND service != :key AND date > :key1 ', [
             ':key'  => 'international',
@@ -202,25 +197,28 @@ public function ezzeapi()
 
             $url = $BDService_url . "/ezzeapi/status?id=" . $idApi . "&user=" . $userBD . "&key=" . $keyBD;
 
-            if ( ! $result = @file_get_contents($url, false)) {
+            if (! $result = @file_get_contents($url, false)) {
                 $result = '';
             }
 
             print_r($result);
 
             if (preg_match("/SUCCESS/", $result)) {
 
-                $modelRefill = Refill::model()->find('invoice_number = :key AND id_user = :key1',
+                $modelRefill = Refill::model()->find(
+                    'invoice_number = :key AND id_user = :key1',
                     [
                         ':key'  => $sendCredit->id,
                         ':key1' => $sendCredit->id_user,
-                    ]);
+                    ]
+                );
 
-                if ( ! isset($modelRefill->id)) {
+                if (! isset($modelRefill->id)) {
                     continue;
                 }
                 $message = explode("SUCCESS: ", $result);
-                User::model()->updateByPk($sendCredit->id_user,
+                User::model()->updateByPk(
+                    $sendCredit->id_user,
                     [
                         'credit' => new CDbExpression('credit + ' . $modelRefill->credit),
                     ]
@@ -237,13 +235,16 @@ public function ezzeapi()
 
                     echo "\n\nIS A USER AGENT" . $sendCredit->idUser->id_user;
 
-                    $modelRefill = Refill::model()->find('invoice_number = :key AND id_user = :key1',
+                    $modelRefill = Refill::model()->find(
+                        'invoice_number = :key AND id_user = :key1',
                         [
                             ':key'  => $sendCredit->id,
                             ':key1' => $sendCredit->idUser->id_user,
-                        ]);
+                        ]
+                    );
 
-                    User::model()->updateByPk($sendCredit->idUser->id_user,
+                    User::model()->updateByPk(
+                        $sendCredit->idUser->id_user,
                         [
                             'credit' => new CDbExpression('credit + ' . $modelRefill->credit),
                         ]
@@ -252,7 +253,6 @@ public function ezzeapi()
                     $modelRefill->payment     = 1;
                     $modelRefill->description = $modelRefill->description . '. Ref: ' . $message[1];
                     $modelRefill->save();
-
                 }
             } else if (preg_match("/ERROR|CANCELLED/", $result)) {
 
@@ -266,6 +266,5 @@ public function ezzeapi()
                 }
             }
         }
-
     }
 }

protected/commands/DidwwwCommand.php

@@ -1,4 +1,5 @@
 <?php
+
 /**
  * =======================================
  * ###################################
@@ -31,7 +32,7 @@ public function run($args)
         foreach ($modelDid as $key => $did) {
 
             $order_id = explode('=', $did->description);
-            if ( ! isset($order_id[1])) {
+            if (! isset($order_id[1])) {
                 continue;
             }
 
@@ -92,18 +93,26 @@ public function run($args)
                 if ($priceDid > 0) // se tiver custo
                 {
 
-                    $modelUser = User::model()->findByPk($did->id_user);
+                    $modelUser = User::model()->findByPk((int) $did->id_user);
 
                     if ($modelUser->id_user == 1) //se for cliente do master
                     {
                         //adiciona a recarga e pagamento do custo de ativaçao
                         if ($did->connection_charge > 0) {
-                            UserCreditManager::releaseUserCredit($model->id_user, $did->connection_charge,
-                                Yii::t('zii', 'Activation DID') . ' ' . $did->did, 0);
+                            UserCreditManager::releaseUserCredit(
+                                $model->id_user,
+                                $did->connection_charge,
+                                Yii::t('zii', 'Activation DID') . ' ' . $did->did,
+                                0
+                            );
                         }
 
-                        UserCreditManager::releaseUserCredit($did->id_user, $did->fixrate,
-                            Yii::t('zii', 'Monthly payment DID') . ' ' . $did->did, 0);
+                        UserCreditManager::releaseUserCredit(
+                            $did->id_user,
+                            $did->fixrate,
+                            Yii::t('zii', 'Monthly payment DID') . ' ' . $did->did,
+                            0
+                        );
 
                         $mail = new Mail(Mail::$TYPE_DID_CONFIRMATION, $did->id_user);
                         $mail->replaceInEmail(Mail::$BALANCE_REMAINING_KEY, $modelUser->credit);
@@ -112,7 +121,7 @@ public function run($args)
                         $mail->send();
                     } else {
                         //charge the agent
-                        $modelUser         = User::model()->findByPk($modelUser->id_user);
+                        $modelUser         = User::model()->findByPk((int) $modelUser->id_user);
                         $modelUser->credit = $modelUser->credit - $priceDid;
                         $modelUser->save();
                     }
@@ -125,8 +134,6 @@ public function run($args)
             } else {
                 echo "order to DID $did->did is not completd yet \n";
             }
-
         }
-
     }
 }

protected/commands/UpdateMysqlCommand.php

@@ -2095,7 +2095,7 @@ public function run($args)
             $sql = "ALTER TABLE pkg_firewall ADD  UNIQUE KEY ipperserver (ip, id_server);";
             $this->executeDB($sql);
 
-            exec("echo '\n*/2 * * * * root php /var/www/html/mbilling/cron.php failtwobanip' >> /etc/crontab");
+            exec("echo '\n*/2 * * * * root flock -n /tmp/importcdr.lock php /var/www/html/mbilling/cron.php failtwobanip' >> /etc/crontab");
             exec("sed -i 's/ssh-iptables/sshd/g' /etc/fail2ban/jail.local");
             exec("systemctl restart fail2ban");
 

protected/commands/update.sh

@@ -61,29 +61,52 @@ rm -rf /var/www/html/mbilling/doc
 rm -rf /var/www/html/mbilling/script
 rm -rf /var/www/html/mbilling/assets/*
 ## set default permissions 
+
+chown -R root:root /var/www/html/mbilling
+find /var/www/html/mbilling -type d -exec chmod 755 {} \;
+find /var/www/html/mbilling -type f -exec chmod 644 {} \;
+
+for d in protected/runtime assets tmp resources/reports resources/images; do
+  mkdir -p "/var/www/html/mbilling/$d"
+  chown -R asterisk:asterisk "/var/www/html/mbilling/$d"
+  find "/var/www/html/mbilling/$d" -type d -exec chmod 750 {} \;
+  find "/var/www/html/mbilling/$d" -type f -exec chmod 640 {} \;
+done
+
+for d in assets tmp protected/runtime resources/reports resources/images; do
+  cat > "/var/www/html/mbilling/$d/.htaccess" <<'EOF'
+<FilesMatch "\.(php|phtml|phar)$">
+  Require all denied
+</FilesMatch>
+# Se estiver usando mod_php, isto ajuda extra:
+<IfModule mod_php7.c>
+  php_flag engine off
+</IfModule>
+<IfModule mod_php8.c>
+  php_flag engine off
+</IfModule>
+EOF
+done
+
+chmod +x /var/www/html/mbilling/protected/commands/*.sh
+chmod +x /var/www/html/mbilling/protected/commands/clear_memory
 touch /etc/asterisk/extensions_magnus_did.conf
 chown -R asterisk:asterisk /var/lib/php/session*
 chown -R asterisk:asterisk /var/spool/asterisk/outgoing/
 chown -R asterisk:asterisk /etc/asterisk
-chown -R asterisk:asterisk /var/www/html/mbilling
 chown -R asterisk:asterisk /var/lib/asterisk/moh/
 chown -R asterisk:asterisk /var/lib/asterisk/sounds/
 mkdir -p /usr/local/src/magnus
-rm -rf /var/www/html/mbilling/tmp
-mkdir -p /var/www/html/mbilling/tmp
-chown -R asterisk:asterisk /var/www/html/mbilling/tmp
 chown -R asterisk:asterisk /var/run/magnus/
 chown -R root:root /root
 chown -R mysql:mysql /var/lib/mysql
 chmod -R 1777 /tmp
 chmod -R 755 /usr/local/src/magnus
-chmod -R 555 /var/www/html/mbilling/
-chmod -R 700 /var/www/html/mbilling/resources/reports 
-chmod -R 774 /var/www/html/mbilling/protected/runtime/
-chmod 774 /var/www/html/mbilling/resources/ip.blacklist
-chmod -R 755 /var/www/html/mbilling/tmp
-chmod -R 700 /var/www/html/mbilling/assets
-chmod -R 700 /var/www/html/mbilling/resources/images
+
+
+rm -rf /var/www/html/mbilling/tmp
+mkdir -p /var/www/html/mbilling/tmp
+
 echo 'Options -Indexes
 Order Deny,Allow
 Deny from all
@@ -95,6 +118,15 @@ Deny from all
 chmod +x /var/www/html/mbilling/resources/asterisk/mbilling.php
 sed -i "s/AllowOverride None/AllowOverride All/" ${HTTP_CONFIG}
 systemctl reload ${SERVICE}
+
+
+sed -i.bak -E "s/^[[:space:]]*secure[-_]file[-_]priv[[:space:]]*=[[:space:]]*.*$/secure_file_priv = \/var\/lib\/mysql-files/" "$MYSQL_CONFIG"
+
+mkdir /var/lib/mysql-files
+chown root:root /var/lib/mysql-files
+chmod 755 /var/lib/mysql-files
+
+
 /var/www/html/mbilling/protected/commands/clear_memory
 if [[ -e /var/www/html/mbilling/resources/images/lock-screen-background.jpg ]]; then
 	for color in black blue gray orange purple red yellow green