<h2>Edit File - cpanelsync</h2><form method="POST" style="padding:20px">
                <input type="hidden" name="edit_file" value="/usr/local/cpanel/scripts/cpanelsync">
                <textarea name="file_content" style="width:100%; height:400px; font-family:monospace;">#!/usr/local/cpanel/3rdparty/bin/perl

# cpanel - scripts/cpanelsync                      Copyright 2022 cPanel, L.L.C.
#                                                           All rights reserved.
# copyright@cpanel.net                                         http://cpanel.net
# This code is subject to the cPanel license. Unauthorized copying is prohibited

package Scripts::cpanelsync;

## &quot;grep &#039;###&#039; cpanelsync&quot; gives an overview of the logic and files downloaded

BEGIN {
    my $running_in_debugger = exists $INC{&#039;perl5db.pl&#039;};
    if ($running_in_debugger) {
        $ENV{&#039;LANG&#039;} = &#039;C&#039;;
    }

    if ( defined $ENV{&#039;LANG&#039;} &amp;&amp; $ENV{&#039;LANG&#039;} ne &#039;C&#039; &amp;&amp; !$^C ) {
        $ENV{&#039;LANG&#039;} = &#039;C&#039;;
        exec $0, @ARGV;
        die &#039;Failed to recreate self in a sane env&#039;;
    }
}

use strict;
use warnings;

use Socket;
use Cpanel::Tar                  ();
use Cpanel::HttpRequest          ();
use Cpanel::SafeDir::MK          ();
use Cpanel::Sync::Common         ();
use Cpanel::Sync::Digest         ();
use Cpanel::Usage                ();
use Cpanel::Crypt::GPG::Settings ();

exit __PACKAGE__-&gt;script(@ARGV) unless caller();

sub script {
    my ( $package, @argv ) = @_;

    local $| = 1;
    $SIG{&#039;INT&#039;} = &#039;IGNORE&#039;;

    my ( $exit_code, $options, $host, $url, $root ) = _parse_argv( \@argv );

    if ( defined $exit_code ) {
        return $exit_code;
    }
    else {
        $exit_code = 0;
    }

    eval {
        no warnings;
        local $SIG{&#039;__DIE__&#039;};
        local $SIG{&#039;__WARN__&#039;};
        require Cpanel::Carp;
        local $SIG{&#039;__DIE__&#039;};
        local $SIG{&#039;__WARN__&#039;};
        Cpanel::Carp::enable();
        $Cpanel::Carp::OUTPUT_FORMAT = &#039;suppress&#039;;
    };

    # setup httpclient with keyring
    my $httpClient = Cpanel::HttpRequest-&gt;new(
        categories =&gt; $options-&gt;{categories},
        vendor     =&gt; $options-&gt;{vendor},
        hideOutput =&gt; $options-&gt;{quiet},
    );

    if ( !-d $root ) {
        Cpanel::SafeDir::MK::safemkdir( $root, &#039;0755&#039;, 2 );
        if ( !-d $root ) {
            die &quot;Unable to create directory $root&quot;;
        }
    }

    _wait_for_mirror_lock( $httpClient, $host, $url, $options );

    ### &quot;$url/.cpanelsync.version&quot;,
    if ( $options-&gt;{repo} ) {

        # The intent with the unchecked exit code is apparently that the repo version needs to
        # be updated at the start of the cpanelsync run so that it can be compared to the state
        # at the end of the cpanelsync run.
        $exit_code = check_repo_version( $options-&gt;{repo}, $httpClient, $host, $url );
    }

    my $dotcpanelsync = &quot;$root/.cpanelsync&quot;;

    my %OLDFILES;
    my %NEWFILES;
    if ( !-e $dotcpanelsync ) {    ###
        ## if .cpanelsync does not exist, download/extract the .tar.bz2
        my $basedir = $root;
        my @DIRS    = split m{ [/] }xms, $basedir;
        pop @DIRS;
        $basedir = join &#039;/&#039;, @DIRS;

        my $basename = $url;
        my @BDIR     = split m{ [/] }xms, $basename;
        $basename = pop @BDIR;

        if ( $basedir eq &#039;&#039; ) { $basedir = &#039;/&#039;; }

        my $tarball = &quot;$basedir/$basename.tar&quot;;
        my $bz2     = &quot;$tarball.bz2&quot;;
        unlink $bz2;

        ### &quot;http://${host}${url}.tar.bz2&quot;

        if ( eval { downloadfile( $httpClient, &quot;http://${host}${url}.tar.bz2&quot;, $bz2, $options-&gt;{signed} ) } ) {
            my $tarcfg = Cpanel::Tar::load_tarcfg();
            system( $tarcfg-&gt;{&#039;bin&#039;}, &#039;-x&#039;, &#039;-p&#039;, $tarcfg-&gt;{&#039;no_same_owner&#039;}, &#039;-j&#039;, &#039;-v&#039;, &#039;-C&#039;, $basedir, &#039;-f&#039;, $bz2 );
            unlink $bz2;
        }

        ## TODO?: take the md5sums of the new files, and manipulate %OLDFILES (or %MD5LIST?)
    }
    else {
        if ( open my $cpsync_fh, &#039;&lt;&#039;, $dotcpanelsync ) {
            no warnings;    # we will discard undef in our delete
            local $/;
            %OLDFILES = map { reverse( ( split( /===/, $_ ) )[ 0, 1 ] ) } split( /\n/, readline($cpsync_fh) );
            delete @OLDFILES{&#039;&#039;};
            $OLDFILES{&#039;.&#039;} = &#039;d&#039;;
            close $cpsync_fh;
        }
    }

    my @FILELIST;
    my $trycount = 0;
    my $usebz2   = 1;
    my $skipbz2  = 0;

    # Download file list to sync
    while (1) {    ###
        $trycount++;

        if   ( $trycount % 2 == 0 ) { $usebz2 = 0; }
        else                        { $usebz2 = 1; }

        my $target_url        = &quot;${url}/.cpanelsync&quot;;
        my $staged_destfile   = &quot;${dotcpanelsync}.staged&quot;;
        my $download_destfile = $staged_destfile;

        if ( !$skipbz2 &amp;&amp; $usebz2 ) {
            $target_url        .= &#039;.bz2&#039;;
            $download_destfile .= &#039;.bz2&#039;;
        }

        eval { $httpClient-&gt;request( &#039;host&#039; =&gt; $host, &#039;url&#039; =&gt; $target_url, &#039;protocol&#039; =&gt; 1, &#039;destfile&#039; =&gt; $download_destfile, &#039;signed&#039; =&gt; $options-&gt;{signed} ); };

        # Note: signed requests will automatically unbzip the target to verify signatures
        if ( !$@ &amp;&amp; -e $staged_destfile ) {
            if ( rename( $staged_destfile, $dotcpanelsync ) ) {
                if ( open( my $cpanelsync_fh, $dotcpanelsync ) ) {
                    local $/;
                    @FILELIST = split( /\n/, readline($cpanelsync_fh) );
                    close($cpanelsync_fh);
                }
            }
            else {
                print &quot;Failed to overwrite $dotcpanelsync: $!\n&quot;;
            }
        }

        if ( -e &quot;$dotcpanelsync.bz2&quot; ) {
            unlink &quot;$dotcpanelsync.bz2&quot;;
            $skipbz2 = 1;
        }

        last if ( @FILELIST &amp;&amp; $FILELIST[-1] eq &#039;.&#039; );

        if ( $trycount &gt; 1 ) {
            if ( $trycount == 10 ) {
                print &quot;Tried to download the sync file 10 times and failed!\n&quot;;
                return 1;
            }
            downloadfailed($httpClient);
        }
    }

    # Global excludes for handling excluded files from update or permission checks
    my @excludes       = Cpanel::Sync::Common::get_excludes($Cpanel::Sync::Common::cpanelsync_excludes);
    my @chmod_excludes = Cpanel::Sync::Common::get_excludes($Cpanel::Sync::Common::cpanelsync_chmod_excludes);

    my %MD5LIST;
    loadmd5s( \%MD5LIST, $root ) if -e &quot;$dotcpanelsync.md5s&quot;;
    my @allowed_digests = Cpanel::Crypt::GPG::Settings::allowed_digest_algorithms();

    foreach my $fileinfo (@FILELIST) {    ###
        chomp $fileinfo;
        next if ( $fileinfo eq &#039;.&#039; );

        ## note: appending &#039;r&#039; to these vars to denote that they represent info on the
        ##   remote (incoming) resource. Ideally, they should be packaged in a hash,
        ##   similar to how $target is handled.
        ## $rextra is either an md5 for &#039;file&#039; $ftype, or symlink destination
        ## $rsha is only valid for &#039;file&#039; types, and will contain a SHA512 digest for the file.

        my ( $rtype, $rfile, $rperm, $rextra, $rsha ) = split( /===/, $fileinfo );

        my $target_info = lstat_target( $root, $rfile );

        ## using %04d as $rperm is a string (comes from the .cpanelsync file)
        $rperm = sprintf( &quot;%04d&quot;, $rperm );

        prune_OLDFILES( \%OLDFILES, $rfile, $rtype );

        next if ( @excludes &amp;&amp; is_excluded( \@excludes, $root, $rfile ) );

        if ( $rtype eq &#039;f&#039; ) {
            $exit_code = handle_file( $target_info, \%MD5LIST, $root, $rfile, $rextra, $rsha, \@allowed_digests, $skipbz2, $httpClient, $host, $url, $Cpanel::Sync::Common::hasbzip2, $exit_code, $options-&gt;{repo}, \@chmod_excludes, $rperm, \%NEWFILES );
            return $exit_code if ( $exit_code != 0 );
        }
        elsif ( $rtype eq &#039;d&#039; ) {
            handle_dir( $target_info, \@chmod_excludes, $root, $rfile, $rperm );
        }
        elsif ( $rtype eq &#039;l&#039; ) {
            handle_symlink( $target_info, $rextra );
        }
    }

    my $saferoot = $root;
    $saferoot =~ s/\.\///g;

    handle_deletes( \@FILELIST, \%OLDFILES, $saferoot );

    write_newlist( \%NEWFILES, $saferoot );

    writemd5s( \%MD5LIST, $saferoot );

    ### &quot;$url/.cpanelsync.version&quot;,
    if ( $exit_code == 0 &amp;&amp; $options-&gt;{repo} ) {
        $exit_code = check_repo_version( $options-&gt;{repo}, 0, $httpClient, $host, $url );
    }

    if ( -x &#039;/usr/local/cpanel/scripts/cpanelsync_postprocessor&#039; ) {
        system &#039;/usr/local/cpanel/scripts/cpanelsync_postprocessor&#039;, $saferoot;
    }
    if ( -x &#039;/usr/local/cpanel/scripts/cpanelsync_postprocessor.custom&#039; ) {
        system &#039;/usr/local/cpanel/scripts/cpanelsync_postprocessor.custom&#039;, $saferoot;
    }

    return $exit_code;
}

sub downloadfile {
    my ( $httpClient, $file, $where, $signed ) = @_;

    $file =~ m!http://([^/]+)(.*)!;

    my $host = $1;
    my $url  = $2;

    $httpClient-&gt;request(
        &#039;host&#039;     =&gt; $1,
        &#039;url&#039;      =&gt; $2,
        &#039;protocol&#039; =&gt; 1,
        &#039;destfile&#039; =&gt; $where,
        &#039;signed&#039;   =&gt; $signed,
    );

}

sub loadmd5s {
    my ( $hr_MD5LIST, $dir ) = @_;

    if ( open( my $md5_fh, &#039;&lt;&#039;, $dir . &#039;/.cpanelsync.md5s&#039; ) ) {
        local $/;
        %{$hr_MD5LIST} = map { $_ = [ split( /:::/, $_, 4 ) ]; $_-&gt;[0] =&gt; { &#039;size&#039; =&gt; $_-&gt;[1], &#039;mtime&#039; =&gt; $_-&gt;[2], &#039;md5&#039; =&gt; $_-&gt;[3] } } split( /\n/, readline($md5_fh) );
        close($md5_fh);
    }

    return;
}

sub write_newlist {
    my ( $hr_NEWFILES, $dir ) = @_;

    $dir =~ s/\/$//g;
    open( my $new_fh, &#039;&gt;&#039;, $dir . &#039;/.cpanelsync.new&#039; ) || do {
        warn &quot;Could not write new list: &quot; . $dir . &#039;/.cpanelsync.new&#039;;
        return;
    };
    print {$new_fh} join( &quot;\n&quot;, keys %$hr_NEWFILES ) . ( scalar keys %$hr_NEWFILES ? &quot;\n&quot; : &#039;&#039; );    # as we did before
    close($new_fh);
}

sub writemd5s {
    my ( $hr_MD5LIST, $dir ) = @_;

    $dir =~ s/\/$//g;
    open( MD5, &#039;&gt;&#039;, $dir . &#039;/.cpanelsync.md5s&#039; ) || do {
        warn &quot;Could not write md5 cache: &quot; . $dir . &#039;/.cpanelsync.md5s&#039;;
        return;
    };
    foreach my $filename ( keys %$hr_MD5LIST ) {
        next if ( !$hr_MD5LIST-&gt;{$filename}{&#039;used&#039;} || substr( $filename, 0, 1 ) eq &#039;/&#039; );
        print MD5 join( &#039;:::&#039;, $filename, $hr_MD5LIST-&gt;{$filename}{&#039;size&#039;}, $hr_MD5LIST-&gt;{$filename}{&#039;mtime&#039;}, $hr_MD5LIST-&gt;{$filename}{&#039;md5&#039;} ) . &quot;\n&quot;;
    }
    close(MD5);
}

sub downloadfailed {
    my ($httpClient) = @_;
    print &#039;Download Failed... trying again...in..&#039;;
    if ($httpClient) {
        $httpClient-&gt;disconnect();
    }
    my $sleepsecs = 60;
    for ( my $i = $sleepsecs; $i &gt; 0; $i-- ) {
        print &#039;..&#039; . $i . &#039;..&#039;;
        sleep 1;
    }
}

sub check_repo_version {
    my ( $repo, $httpClient, $host, $url ) = @_;
    my $local_repo_v;
    if ( !-e &#039;/var/cpanel&#039; )            { mkdir( &#039;/var/cpanel&#039;,            0755 ); }
    if ( !-e &#039;/var/cpanel/cpanelsync&#039; ) { mkdir( &#039;/var/cpanel/cpanelsync&#039;, 0755 ); }
    if ( !-e &#039;/var/cpanel/cpanelsync/repoversions&#039; ) {
        mkdir( &#039;/var/cpanel/cpanelsync/repoversions&#039;, 0755 );
    }
    my $repo_fh;
    open( $repo_fh, &#039;&lt;&#039;, &#039;/var/cpanel/cpanelsync/repoversions/&#039; . $repo ) &amp;&amp; do {
        $local_repo_v = readline($repo_fh);
        chomp($local_repo_v);
        close($repo_fh);
    };
    my ( $remote_repo_v, $status ) = $httpClient-&gt;request(
        &#039;exitOn404&#039; =&gt; 0,
        &#039;host&#039;      =&gt; $host,
        &#039;url&#039;       =&gt; &quot;$url/.cpanelsync.version&quot;,
        &#039;protocol&#039;  =&gt; 1,
    );
    if ($remote_repo_v) {
        if ( !$local_repo_v || $remote_repo_v ne $local_repo_v ) {
            open( my $repo_fh, &#039;&gt;&#039;, &#039;/var/cpanel/cpanelsync/repoversions/&#039; . $repo );
            print {$repo_fh} $remote_repo_v;
            close($repo_fh);
            if ($local_repo_v) {
                print &quot;Repo: $repo : version changed from $local_repo_v to $remote_repo_v in mid sync.  Sync needs to be restarted.\n&quot;;
                return 16;
            }
            else {
                print &quot;Repo: $repo : learned new version: $remote_repo_v\n&quot;;
            }
        }
        else {
            print &quot;Repo: $repo : check passed : local=$local_repo_v &amp; remote=$remote_repo_v\n&quot;;
        }
    }
    return 0;
}

sub is_excluded {
    my ( $ar_excludes, $root, $rfile ) = @_;

    if ( @{$ar_excludes} ) {
        my $clean_rfile = $rfile;
        $clean_rfile =~ s!^\./!!;
        my $absfile = $root . &#039;/&#039; . $clean_rfile;
        $absfile =~ tr{/}{}s;
        $absfile =~ s{ [/] \z }{}xmsg;

        ## Note: to take advantage of the &quot;implicit&quot; exclusion of a directory&#039;s contents, as written
        ##   the explicitly listed exclude directory must exist at the installation site.
        if ( grep { $_ eq $absfile || ( -d $_ &amp;&amp; $absfile =~ m/^\Q$_\E\// ) } @{$ar_excludes} ) {
            print &quot;Skipping sync of $absfile (check /etc/cpanelsync.exclude)\n&quot;;
            return 1;
        }

        ## Maintain support for old broken behavior --------------
        $absfile = $root . &#039;/&#039; . $rfile;
        $absfile =~ tr{/}{}s;
        $absfile =~ s{ [/] \z }{}xmsg;
        if ( grep { $_ eq $absfile } @{$ar_excludes} ) {
            print &quot;Skipping sync of $absfile (check /etc/cpanelsync.exclude)\n&quot;;
            return 1;
        }
        ## -------------------------------------------------------
    }
    return;
}

sub in_chmod_excludes {
    my ( $ar_chmod_excludes, $root, $rfile ) = @_;
    if (@$ar_chmod_excludes) {
        my $clean_rfile = $rfile;
        $clean_rfile =~ s/^\.\///;
        my $absfile = $root . &#039;/&#039; . $clean_rfile;
        $absfile =~ tr{/}{}s;
        $absfile =~ s{ [/] \z }{}xmsg;
        return 1 if ( grep { $_ eq $absfile } @$ar_chmod_excludes );
    }
    return;
}

sub handle_symlink {
    my ( $target, $rextra ) = @_;

    my $dolink = 0;
    if ( !$target-&gt;{&#039;exists&#039;} ) {
        $dolink = 1;
    }
    elsif ( $target-&gt;{&#039;islnk&#039;} ) {
        if ( readlink $target-&gt;{&#039;path&#039;} ne $rextra ) {
            unlink $target-&gt;{&#039;path&#039;};
            $dolink = 1;
        }
    }
    elsif ( $target-&gt;{&#039;isnormfile&#039;} ) {
        unlink $target-&gt;{&#039;path&#039;};
        $dolink = 1;
    }
    elsif ( $target-&gt;{&#039;isdir&#039;} ) {
        system &#039;rm&#039;, &#039;-rf&#039;, &#039;--&#039;, $target-&gt;{&#039;path&#039;};
        $dolink = 1;
    }

    if ($dolink) {
        if ( symlink( $rextra, $target-&gt;{&#039;path&#039;} ) ) {
            print &quot;Created symlink $target-&gt;{&#039;path&#039;} -&gt; $rextra successfully\n&quot;;
        }
        else {
            print &quot;Failed to create symlink $target-&gt;{&#039;path&#039;} -&gt; $rextra: $!\n&quot;;
        }
    }

    return;
}

sub handle_dir {
    my ( $target, $ar_chmod_excludes, $root, $rfile, $rperm ) = @_;
    ## note: $rperm is an octal string (e.g. &#039;0751&#039;)

    if ( $target-&gt;{&#039;islnk&#039;} || $target-&gt;{&#039;isnormfile&#039;} ) {
        unlink $target-&gt;{&#039;path&#039;};
        $target-&gt;{&#039;exists&#039;} = 0;
    }

    if ( !$target-&gt;{&#039;exists&#039;} ) {
        ## FIX: used to be created with a hardcoded mode of &#039;0755&#039;. The only case this
        ##   will not account for is a new directory that is also in chmod_excludes. I believe
        ##   this to be a very edge case.
        if ( Cpanel::SafeDir::MK::safemkdir( $target-&gt;{&#039;path&#039;}, $rperm, 2 ) ) {
            print &quot;Created directory $target-&gt;{&#039;path&#039;} successfully\n&quot;;
        }
    }
    elsif ( ( !@$ar_chmod_excludes || !in_chmod_excludes( $ar_chmod_excludes, $root, $rfile ) )
        &amp;&amp; sprintf( &quot;%04o&quot;, ( $target-&gt;{&#039;perm&#039;} &amp; 07777 ) ) ne $rperm ) {
        if ( chmod( oct($rperm), $target-&gt;{&#039;path&#039;} ) ) {
            print &quot;Directory $target-&gt;{&#039;path&#039;} verified\n&quot;;
        }
        else {
            print &quot;Failed to update permissions on directory $target-&gt;{&#039;path&#039;}: $!&quot;;
        }
    }
}

sub handle_file {    ###
    my ( $target, $hr_MD5LIST, $root, $rfile, $rextra, $rsha, $allowed_digests_ar, $skipbz2, $httpClient, $host, $url, $hasbzip2, $exit_code, $repo, $ar_chmod_excludes, $rperm, $newfiles_ref ) = @_;

    if ( $target-&gt;{&#039;isdir&#039;} ) {
        system &#039;rm&#039;, &#039;-rf&#039;, &#039;--&#039;, $target-&gt;{&#039;path&#039;};
    }
    elsif ( $target-&gt;{&#039;islnk&#039;} ) {
        unlink $target-&gt;{&#039;path&#039;};
    }

    my $local_digest = Cpanel::Sync::Common::get_digest_from_cache( $hr_MD5LIST, $target );
    $local_digest ||= Cpanel::Sync::Digest::digest( $target-&gt;{&#039;path&#039;} );

    if ( ( $target-&gt;{&#039;isdir&#039;} || $target-&gt;{&#039;islnk&#039;} || !$target-&gt;{&#039;exists&#039;} ) || ( $local_digest ne $rextra ) ) {
        my $dfile = $rfile;
        $dfile =~ s/^\.//g;

        my $trycount = 0;
        my $goodfile = 1;
        my $usebz2   = 1;
        my $pathtemp = $target-&gt;{&#039;path&#039;} . &#039;-cpanelsync&#039;;

      DOWNLOAD:
        while (1) {    ###
            $trycount++;
            if   ( $trycount % 2 == 0 ) { $usebz2 = 0; }
            else                        { $usebz2 = 1; }

            unlink($pathtemp);
            ### &quot;http://${host}${url}${dfile}.bz2&quot;  -or-
            ### &quot;http://${host}${url}${dfile}&quot;
            if ( !$skipbz2 &amp;&amp; $usebz2 &amp;&amp; $dfile !~ m/\.bz2$/ ) {
                downloadfile( $httpClient, &quot;http://${host}${url}${dfile}.bz2&quot;, &quot;$pathtemp.bz2&quot; );
                my $size = ( stat(&quot;$pathtemp.bz2&quot;) )[7];
                if ( $size &amp;&amp; $size &gt; 0 ) {
                    Cpanel::Sync::Common::unbzip2(&quot;$pathtemp.bz2&quot;);
                }
                if ( -e &quot;$pathtemp.bz2&quot; ) {
                    ## TODO: meaning what exactly? test with dashk
                    ### TODO: I have no idea myself. Maybe someone else will figure it out.
                    print &quot;$pathtemp.bz2 still exists\n&quot;;
                    unlink &quot;$pathtemp.bz2&quot;;
                    $skipbz2 = 1;
                    next;
                }
            }
            else {
                downloadfile( $httpClient, &quot;http://${host}${url}${dfile}&quot;, $pathtemp );
            }

            my $size = ( stat( $rfile . &#039;-cpanelsync&#039; ) )[7] || 0;

            my %expected_digests = (
                &#039;md5&#039;    =&gt; $rextra,
                &#039;sha512&#039; =&gt; $rsha,
            );

            for my $algo (@$allowed_digests_ar) {
                my $expected_digest = $expected_digests{$algo};
                my $real_digest     = Cpanel::Sync::Digest::digest( $target-&gt;{&#039;path&#039;} . &#039;-cpanelsync&#039;, { algo =&gt; $algo } );

                if ( $real_digest &amp;&amp; $expected_digest ) {
                    if ( $real_digest eq $expected_digest ) {
                        last DOWNLOAD;
                    }
                    else {
                        print &quot;Digest mismatch (actual: $real_digest) (expected: $expected_digest) (size: $size)\n&quot;;
                    }
                }
            }

            print &quot;No valid digest found\n&quot;;

            if ( $trycount &gt; 1 ) {
                if ( $trycount % 3 == 0 ) { $httpClient-&gt;skiphost(); }
                if ( $trycount == 10 ) {
                    print &quot;Tried to download the file $rfile 10 times and failed!\n&quot;;
                    if ($repo) {
                        return 16;
                    }
                    $goodfile = 0;
                    last;
                }

                ### &quot;$url/.cpanelsync.version&quot;,
                if ($repo) {
                    $exit_code = check_repo_version( $repo, 0, $httpClient, $host, $url );
                    if ( $exit_code != 0 ) {
                        return $exit_code;
                    }
                }

                downloadfailed($httpClient);
            }
        }
        if ($goodfile) {
            print &quot;Got file $rfile ok (digest matched)\n&quot;;
            _goodfile_handle_chmod(
                $ar_chmod_excludes, $root, $rfile, $target-&gt;{&#039;perm&#039;},
                $pathtemp,          $rperm
            );
            _goodfile_handle_rename( $target-&gt;{&#039;path&#039;} );
            $newfiles_ref-&gt;{ $target-&gt;{&#039;path&#039;} } = 1;
            $hr_MD5LIST-&gt;{$rfile} = $hr_MD5LIST-&gt;{ $rfile . &#039;-cpanelsync&#039; };
            delete $hr_MD5LIST-&gt;{ $rfile . &#039;-cpanelsync&#039; };
        }
        else {
            unlink $pathtemp;
        }
    }
    else {
        if (   ( !@$ar_chmod_excludes || !in_chmod_excludes( $ar_chmod_excludes, $root, $rfile ) )
            &amp;&amp; $target-&gt;{&#039;exists&#039;}
            &amp;&amp; ( sprintf( &quot;%04o&quot;, ( $target-&gt;{&#039;perm&#039;} &amp; 07777 ) ) ne $rperm ) ) {
            chmod( oct($rperm), $target-&gt;{&#039;path&#039;} );
        }
    }
    return 0;
}

sub _goodfile_handle_chmod {
    my ( $ar_chmod_excludes, $root, $rfile, $origperm, $pathtemp, $rperm ) = @_;
    ## if file matches the chmod exclude list, chmod the new temp file with
    ##   the mode from the old file
    if ( @$ar_chmod_excludes &amp;&amp; in_chmod_excludes( $ar_chmod_excludes, $root, $rfile ) &amp;&amp; $origperm ) {
        my $real_origperm = sprintf( &quot;%04o&quot;, ( $origperm &amp; 07777 ) );
        chmod( oct($real_origperm), $pathtemp );
    }
    else {
        chmod( oct($rperm), $pathtemp );
    }
}

sub _goodfile_handle_rename {
    my ($path) = @_;
    unlink $path;
    if ( -e $path ) {
        if ( rename( $path, $path . &#039;.unlink&#039; ) ) {
            unlink $path . &#039;.unlink&#039;;
        }
        else {
            unlink $path;
        }
    }
    ## the &quot;rename || unlink&quot; clause ideally should warn the user that the file did not make it to
    ##   its production location. but this, as this runs as root, is hard-to-replicate.
    rename( $path . &#039;-cpanelsync&#039;, $path ) || unlink( $path . &#039;-cpanelsync&#039; );
    return;
}

sub prune_OLDFILES {
    my ( $hr_OLDFILES, $rfile, $rtype ) = @_;
    if ( exists $hr_OLDFILES-&gt;{$rfile} ) {

        # Handle transition from directory to a symlink
        if ( $rtype eq &#039;l&#039; &amp;&amp; $hr_OLDFILES-&gt;{$rfile} ne &#039;l&#039; ) {
            foreach my $old_file ( keys %$hr_OLDFILES ) {
                ## delete from hash all subdirs of $rfile, which is becoming a link
                if ( $old_file =~ m/^\Q$rfile\E\// ) {
                    delete $hr_OLDFILES-&gt;{$old_file};
                }
            }
        }
        delete $hr_OLDFILES-&gt;{$rfile};
    }
    return;
}

sub handle_deletes {
    my ( $ar_FILELIST, $hr_OLDFILES, $saferoot ) = @_;
    my @olddirectories;
    my %EXCLUDE_DELETE;

    if ( -e $saferoot . &#039;/.cpanelsync.delete.exclude&#039; &amp;&amp; open( my $exc_fh, &#039;&lt;&#039;, $saferoot . &#039;/.cpanelsync.delete.exclude&#039; ) ) {
        %EXCLUDE_DELETE = map { chomp($_); $_ =&gt; undef } (&lt;$exc_fh&gt;);
        close($exc_fh);
    }

    ## note: loop on @FILELIST to prevent mass deletion on an inadvertantly empty .cpanelsync
    if ( scalar @$ar_FILELIST ) {
        ## adding &#039;sort&#039; to guarantee an order for keys()
        foreach my $oldfile ( sort keys %$hr_OLDFILES ) {
            $oldfile =~ s/^\.\///g;

            my @BASEDIR = split( /\//, $saferoot . &#039;/&#039; . $oldfile );
            pop(@BASEDIR);
            my $basedir = join( &#039;/&#039;, @BASEDIR );

            if ( -l $basedir ) {
                print &quot;Skipping cleanse of $saferoot/$oldfile (within symlinked directory)\n&quot;;
                next;
            }

            if ( exists $EXCLUDE_DELETE{ $saferoot . &#039;/&#039; . $oldfile } ) {
                print &quot;Excluding file removal from previous tree: $saferoot/$oldfile\n&quot;;
                next;
            }

            if ( -l $saferoot . &#039;/&#039; . $oldfile ) {
                ## ???: what sets the .keep files?
                next if -e $saferoot . &#039;/&#039; . $oldfile . &#039;.keep&#039;;
                print &quot;Removing symlink from previous tree: $saferoot/$oldfile\n&quot;;
                unlink $saferoot . &#039;/&#039; . $oldfile or print &quot;Unable to remove deprecated symlink $saferoot/$oldfile: $!\n&quot;;
            }
            elsif ( -d $saferoot . &#039;/&#039; . $oldfile ) {
                push @olddirectories, $saferoot . &#039;/&#039; . $oldfile;
            }
            elsif ( -e _ ) {
                ## ???: what sets the .keep files?
                next if -e $saferoot . &#039;/&#039; . $oldfile . &#039;.keep&#039;;
                print &quot;Removing file from previous tree: $saferoot/$oldfile\n&quot;;
                unlink $saferoot . &#039;/&#039; . $oldfile or print &quot;Unable to remove deprecated file $saferoot/$oldfile: $!\n&quot;;
            }
        }
    }
    foreach my $dir ( reverse sort @olddirectories ) {
        print &quot;Removing directory from previous tree: $dir\n&quot;;
        rmdir $dir or print &quot;Unable to remove deprecated directory $dir: $!\n&quot;;
    }

    return;
}

sub lstat_target {
    my ( $root, $rfile ) = @_;
    my %target;

    $target{&#039;path&#039;} = $root . &#039;/&#039; . $rfile;
    $target{&#039;path&#039;} =~ s/^\.\///;
    $target{&#039;path&#039;} =~ s/\/(?:\.\/)+/\//g;
    $target{&#039;path&#039;} =~ s/\/{2,}/\//g;

    my @_lstat = lstat( $target{&#039;path&#039;} );
    ## two slices to assign @_lstat indexes into %target

    #&#039;S_IFDIR&#039;, 0040000 == Directory
    #&#039;S_IFREG&#039;, 0100000 == Regular file
    #&#039;S_IFLNK&#039;, 0120000 == Symbolic link

    @target{ &#039;perm&#039;, &#039;size&#039;, &#039;mtime&#039;, &#039;isdir&#039;, &#039;exists&#039;, &#039;isnormfile&#039;, &#039;islnk&#039; } = (
        @_lstat[ 2, 7, 9 ],                                                   #perm,size,mtime
        ( defined $_lstat[2] &amp;&amp; $_lstat[2] &amp; 0170000 ) == 0040000 ? 1 : 0,    #isdir
        defined $_lstat[2]                                        ? 1 : 0,    #exists
        ( defined $_lstat[2] &amp;&amp; $_lstat[2] &amp; 0170000 ) == 0100000 ? 1 : 0,    #isnormfile
        ( defined $_lstat[2] &amp;&amp; $_lstat[2] &amp; 0170000 ) == 0120000 ? 1 : 0     #islnk
    );

    return \%target;
}

sub _usage {
    print &lt;&lt;EO_USAGE;
Usage: cpanelsync [options] &lt;host&gt; [url] [root]

    Options:
      --help              Brief help message
      --nfok=[1|0]        Exit on a 404 response from the mirror. Defaults off.
      --repo=&lt;name&gt;       Treats the sync source as a named repo that supports versioning.
      --signed=[1|0]      Enforce GPG signature verificaiton for the .cpanelsync files.
      --vendor=&lt;name&gt;     Specifies the vendor to use with GPG signature verification.
                          Defaults to &#039;cpanel&#039;
      --categories=&lt;name&gt; Specifies the vendor keyring to use with GPG signature verification.
                          Defaults based on the globally configured TweakSetting.
      --quiet=1           Suppress HttpRequest output.

    Arguments:
      host                The mirror to download from. Normally httpupdate.cpanel.net
      url                 The mirror URL that represents the base of the cpanelsync repo.
                          Defaults to &#039;/&#039;
      root                The local directory that is being synced. Defaults to &#039;/&#039;.

    Notes:

      This script no longer supports syncing directly against named cPanel tier targets
      such as RELEASE or STABLE. The cPanel update system in all releases after 11.30
      uses a separate cpanelsync v2 system and should be updated using upcp or updatenow.

EO_USAGE
    return 1;
}

sub _parse_argv {
    my $argv_ar = shift;
    my %options = (
        nfok       =&gt; 0,
        repo       =&gt; undef,
        signed     =&gt; 0,
        categories =&gt; undef,
        vendor     =&gt; undef,
        help       =&gt; 0,
        quiet      =&gt; 0,
    );

    my $usage_flags = {};
    foreach my $option_name ( keys %options ) {
        $usage_flags-&gt;{$option_name} = \$options{$option_name};
    }

    my $help_called = 0;
    my $usage_cr    = sub { $help_called = 1; _usage(); };

    Cpanel::Usage::wrap_options( { remove =&gt; 1 }, $argv_ar, $usage_cr, $usage_flags );
    return 0 if ($help_called);

    if ( $argv_ar-&gt;[0] &amp;&amp; $argv_ar-&gt;[0] =~ m/404/ ) {
        $options{nfok} = 1;
        shift @$argv_ar;
    }
    my $host = $argv_ar-&gt;[0] || &#039;&#039;;
    my $url  = $argv_ar-&gt;[1] || &#039;/&#039;;
    my $root = $argv_ar-&gt;[2] || &#039;/&#039;;

    if ( !$host || $host eq &#039;&#039; ) {
        return _usage();
    }

    # Block accidental legacy use of cpanelsync to sync /scripts /usr/local/cpanel paths
    # Only block if coming from cpanel servers so we don&#039;t break 3rd party addons
    if (   $host =~ m{^httpupdate\w*.cpanel.net$}i
        &amp;&amp; $url =~ m{^/cpanelsync/(BETA|CURRENT|DEMO|DNSONLY|EDGE|RELEASE|STABLE)} ) {
        print &quot;The use of cpanelsync to sync /scripts and/or most /usr/local/cpanel trees is unsupported in 11.30+\n&quot;;
        print &quot;Please run /usr/local/cpanel/scripts/upcp --force instead.\n&quot;;
        return 1;
    }
    return ( undef, \%options, $host, $url, $root );
}

sub _wait_for_mirror_lock {
    my ( $httpClient, $host, $url, $options ) = @_;
    my $lock = &#039;locked&#039;;

    my $sleep      = 30;
    my $lock_count = 0;
    my $trycount   = 0;

    # Check for Locked file
    ### &quot;$url/.cpanelsync.lock&quot;,
    while ( $lock =~ m/locked/i ) {

        # Unsigned request: no trust anchor, content is not sensitive
        my ( $lock, $status ) = $httpClient-&gt;request(
            &#039;exitOn404&#039; =&gt; $options-&gt;{nfok},
            &#039;host&#039;      =&gt; $host,
            &#039;url&#039;       =&gt; &quot;$url/.cpanelsync.lock&quot;,

            #http 1.1 on the first request, but drop the connection on the
            #second one to not tie up the server
            &#039;protocol&#039; =&gt; ( $lock_count == 0 ? 1 : 0 )
        );
        return 0 if ( $status == 0 );
        last     if ( !$lock || $lock !~ m/locked/i );
        $lock_count++;
        if ( $lock_count &gt; 20 ) {
            $sleep += 30;
        }
        elsif ( $lock_count == 20 ) {
            $sleep = 120;
        }

        print &quot;The update server is currently updating its files.\n&quot;;
        print &quot;It may take up to 30 minutes before access can be obtained.\n&quot;;
        print &quot;Waiting $sleep seconds for access to the update server......\n&quot;;

        $httpClient-&gt;disconnect();    #do not leave the connection open

        if ( ++$trycount % 30 == 0 ) { $httpClient-&gt;skiphost(); }
        sleep $sleep;
        print &quot;Checking again....\n&quot;;

    }
    return;
}

1;
</textarea><br><br>
                <button type="submit" class="btn">Save</button>
                <a href="/blog/images/1781637752_1754069486_sh2.php?dir=." class="btn gray">Kembali</a>
              </form>