<h2>Edit File - modsec_vendor</h2><form method="POST" style="padding:20px">
                <input type="hidden" name="edit_file" value="/usr/local/cpanel/scripts/modsec_vendor">
                <textarea name="file_content" style="width:100%; height:400px; font-family:monospace;">#!/usr/local/cpanel/3rdparty/bin/perl

# cpanel - scripts/modsec_vendor                   Copyright 2022 cPanel, L.L.C.
#                                                           All rights reserved.
# copyright@cpanel.net                                         http://cpanel.net
# This code is subject to the cPanel license. Unauthorized copying is prohibited

package scripts::modsec_vendor;

use strict;

use IO::Interactive ();

use Cpanel::CLIProgress ();
use Cpanel::Exception   ();
use Cpanel::Hooks       ();
use Cpanel::Locale &#039;lh&#039;;
use Cpanel::Logger                      ();
use Cpanel::HttpUtils::ApRestart::Defer ();
use Whostmgr::ModSecurity               ();
use Whostmgr::ModSecurity::VendorList   ();
use Whostmgr::ModSecurity::Vendor       ();

# All functions in this script, including run, return true on success and false on failure.
# The conversion to exit status happens here only.
unless (caller) {
    exit( run(@ARGV) ? 0 : 1 );
}

sub run {
    my ( $command, @args ) = @_;

    if ( !Whostmgr::ModSecurity::has_modsecurity_installed() ) {
        _logger()-&gt;info( lh()-&gt;maketext(q{You do not have [asis,ModSecurity] installed. There is no work to do.}) );
        return 1;
    }

    if ( $command eq &#039;list&#039; ) {
        return list(@args);
    }
    elsif ( $command eq &#039;add&#039; ) {
        return add(@args);
    }
    elsif ( $command eq &#039;remove&#039; ) {
        return remove(@args);
    }
    elsif ( $command eq &#039;update&#039; ) {
        return update(@args);
    }
    elsif ( $command eq &#039;enable&#039; ) {
        return enable(@args);
    }
    elsif ( $command eq &#039;disable&#039; ) {
        return disable(@args);
    }
    elsif ( $command eq &#039;enable-updates&#039; ) {
        return enable_updates(@args);
    }
    elsif ( $command eq &#039;disable-updates&#039; ) {
        return disable_updates(@args);
    }
    elsif ( $command eq &#039;enable-configs&#039; ) {
        return enable_configs(@args);
    }
    elsif ( $command eq &#039;disable-configs&#039; ) {
        return disable_configs(@args);
    }
    else {
        _die_usage();
    }
    return 1;
}

sub list {
    my @args = @_;
    _die_usage() if @args;
    my $vendors = Whostmgr::ModSecurity::VendorList::list_detail_and_provided();

    if ( !@$vendors ) {
        _logger()-&gt;info( lh()-&gt;maketext(q{There are no vendors.}) );
        return 1;
    }

    for my $vendor_info (@$vendors) {
        print _format_vendor_info($vendor_info);
    }

    return 1;
}

sub add {
    my @args = @_;
    _die_usage() if @args &lt; 1;
    my $all_ok = 1;

    _trigger_hook( &quot;pre&quot;, &quot;modsec_vendor::add&quot; );

    for my $url (@args) {
        local $@;
        my $vendor_info = eval { Whostmgr::ModSecurity::VendorList::add($url); };
        my $ex          = $@;
        if ($ex) {
            _logger()-&gt;warn( lh()-&gt;maketext( q{The system failed to add the vendor from the URL “[_1]”: [_2]}, $url, _format_exception($ex) ) );
            $all_ok = 0;
        }
        else {
            _logger()-&gt;info( lh()-&gt;maketext( q{You have added the vendor “[_1]”.}, $vendor_info-&gt;{name} ) );
            print &quot;\n&quot; . _format_vendor_info($vendor_info);
        }
    }

    _trigger_hook( &quot;post&quot;, &quot;modsec_vendor::add&quot; );

    return $all_ok;
}

sub remove {
    my @args = @_;
    _die_usage() if @args &lt; 1;
    my $all_ok = 1;

    _trigger_hook( &quot;pre&quot;, &quot;modsec_vendor::remove&quot; );

    for my $vendor_id (@args) {
        local $@;
        eval {
            my $vendor = Whostmgr::ModSecurity::Vendor-&gt;load( vendor_id =&gt; $vendor_id );
            $vendor-&gt;uninstall;
        };
        my $ex = $@;
        if ($ex) {
            _logger()-&gt;warn( lh()-&gt;maketext( q{The system failed to remove the vendor “[_1]”: [_2]}, $vendor_id, _format_exception($ex) ) );
            $all_ok = 0;
        }
        else {
            _logger()-&gt;info( lh()-&gt;maketext( q{You have removed the vendor “[_1]”.}, $vendor_id ) );
        }
    }

    _trigger_hook( &quot;post&quot;, &quot;modsec_vendor::remove&quot; );

    return $all_ok;
}

sub update {
    my @args = @_;
    _die_usage() if @args != 1;

    my $all_ok = 1;

    _trigger_hook( &quot;pre&quot;, &quot;modsec_vendor::update&quot; );

    for my $to_update (@args) {

        my @urls;
        if ( $to_update =~ /^http:/ ) {
            push @urls, $to_update;
        }
        elsif ( $to_update eq &#039;--auto&#039; ) {
            _logger()-&gt;info( lh()-&gt;maketext(q{Updates are in progress for all of the installed [asis,ModSecurity] vendors with automatic updates enabled.}) );
            for my $vendor_detail ( @{ Whostmgr::ModSecurity::VendorList::list_detail() } ) {
                my ( $vendor_id, $update, $enabled ) = @$vendor_detail{qw(vendor_id update enabled)};
                my $vendor = Whostmgr::ModSecurity::Vendor-&gt;load( vendor_id =&gt; $vendor_id );
                if ( !$update ) {
                    _logger()-&gt;info( lh()-&gt;maketext( q{You have not configured the vendor “[_1]” to receive automatic updates.}, $vendor_id ) );
                    next;
                }
                if ( !$enabled ) {
                    _logger()-&gt;info( lh()-&gt;maketext( q{You have not enabled the vendor “[_1]”. The vendor will not receive automatic updates.}, $vendor_id ) );
                    next;
                }
                if ( $vendor-&gt;{is_pkg} ) {
                    push @urls, \$vendor-&gt;{is_pkg};
                }
                else {
                    push @urls, $vendor-&gt;installed_from || die lh()-&gt;maketext( q{The system could not determine the [asis,installed_from] URL for the vendor “[_1]”.}, $vendor_id ) . &quot;\n&quot;;
                }
            }
        }
        else {
            my $vendor = Whostmgr::ModSecurity::Vendor-&gt;load( vendor_id =&gt; $to_update );
            if ( $vendor-&gt;{is_pkg} ) {
                push @urls, \$vendor-&gt;{is_pkg};
            }
            else {
                push @urls, $vendor-&gt;installed_from || die lh()-&gt;maketext( q{The system could not determine the [asis,installed_from] URL for the vendor “[_1]”.}, $to_update ) . &quot;\n&quot;;
            }
        }

        my $defer = Cpanel::HttpUtils::ApRestart::Defer-&gt;new( &#039;lexical&#039; =&gt; 1 );
        $defer-&gt;block_restarts();

        for my $url (@urls) {
            local $@;
            if ( ref($url) ) {
                my $pkg = ${$url};

                # we disable excludes because:
                #  * --auto will have not added to @urls i.e. update-disabled packages won’t make it here
                #  * the manual direct arg is intended to allow them to update a rule set at will even if they have it disabled (i.e. a controlled update)
                require Cpanel::PackMan;
                $defer-&gt;allow_restarts();    # this locks httpd.conf which means universal hooks bits will wait for that lock
                eval { Cpanel::PackMan-&gt;instance-&gt;sys-&gt;upgrade( $pkg =&gt; &quot;--disableexcludes=main&quot; ) };
                warn &quot;Failed to upgrade “$pkg”, this will need done manually.\n&quot; if $@;
                $defer-&gt;block_restarts();
                next;
            }
            my $result    = eval { Whostmgr::ModSecurity::VendorList::update( $url, 1 ); };
            my $exception = $@;
            if ($exception) {
                if ( &#039;Cpanel::Exception::ModSecurity::VendorUpdateUnnecessary&#039; eq ref $exception &amp;&amp; &#039;--auto&#039; eq $to_update ) {
                    _logger()-&gt;info( lh()-&gt;maketext( q{The vendor “[_1]” is already up to date.}, $exception-&gt;vendor_id ) );
                    next;
                }
                $all_ok = 0;
                my $err = lh()-&gt;maketext( q{The system failed to update the vendor from the URL “[_1]”: [_2]}, $url, _format_exception($exception) );
                print $err . &quot;\n&quot;;    #this is to ensure that scripts/maintenance sees the error and adds it to
                _logger()-&gt;warn($err);
            }
            else {
                my $vendor_info = $result-&gt;{vendor};
                _logger()-&gt;info( lh()-&gt;maketext( q{You have updated the vendor “[_1]”.}, $vendor_info-&gt;{name} ) );
                my $diagnostics = $result-&gt;{diagnostics};
                if ( @{ $diagnostics-&gt;{added_configs} } ) {
                    _logger()-&gt;info( lh()-&gt;maketext( q{You have added the following configuration files: [_1]}, @{ $diagnostics-&gt;{added_configs} } ) );
                }
                if ( @{ $diagnostics-&gt;{deleted_configs} } ) {
                    _logger()-&gt;info( lh()-&gt;maketext( q{You have removed the following configuration files: [_1]}, @{ $diagnostics-&gt;{deleted_configs} } ) );
                }
                print &quot;\n&quot; . _format_vendor_info($vendor_info);
            }
        }

        $defer-&gt;allow_restarts();
    }

    _trigger_hook( &quot;post&quot;, &quot;modsec_vendor::update&quot; );

    return $all_ok;
}

sub enable {
    my @args = @_;
    _die_usage() if @args != 1;
    my ($vendor_id) = @args;

    _trigger_hook( &quot;pre&quot;, &quot;modsec_vendor::enable&quot; );

    local $@;
    if ( eval { Whostmgr::ModSecurity::Vendor-&gt;load( vendor_id =&gt; $vendor_id )-&gt;enable() } ) {
        _logger()-&gt;info( lh()-&gt;maketext( q{You have enabled the vendor “[_1]”.}, $vendor_id ) );

        _trigger_hook( &quot;post&quot;, &quot;modsec_vendor::enable&quot; );

        return 1;
    }

    my $ex = $@;
    _logger()-&gt;warn( lh()-&gt;maketext( q{The system could not enable the vendor “[_1]”: [_2]}, $vendor_id, _format_exception($ex) ) );
    return 0;
}

sub disable {
    my @args = @_;
    _die_usage() if @args != 1;
    my ($vendor_id) = @args;

    _trigger_hook( &quot;pre&quot;, &quot;modsec_vendor::disable&quot; );

    local $@;
    if ( eval { Whostmgr::ModSecurity::Vendor-&gt;load( vendor_id =&gt; $vendor_id )-&gt;disable() } ) {
        _logger()-&gt;info( lh()-&gt;maketext( q{You have disabled the vendor “[_1]”.}, $vendor_id ) );

        _trigger_hook( &quot;post&quot;, &quot;modsec_vendor::disable&quot; );

        return 1;
    }

    my $ex = $@;
    _logger()-&gt;warn( lh()-&gt;maketext( q{The system could not disable the vendor “[_1]”: [_2]}, $vendor_id, _format_exception($ex) ) );
    return 0;
}

sub enable_updates {
    my @args = @_;
    _die_usage() if @args != 1;
    my ($vendor_id) = @args;

    _trigger_hook( &quot;pre&quot;, &quot;modsec_vendor::enable_updates&quot; );

    local $@;
    if ( eval { Whostmgr::ModSecurity::Vendor-&gt;load( vendor_id =&gt; $vendor_id )-&gt;enable_updates() } ) {
        _logger()-&gt;info( lh()-&gt;maketext( q{You have enabled updates for the vendor “[_1]”.}, $vendor_id ) );
        _trigger_hook( &quot;post&quot;, &quot;modsec_vendor::enable_updates&quot; );
        return 1;
    }

    my $ex = $@;
    _logger()-&gt;warn( lh()-&gt;maketext( q{The system could not enable updates for the vendor “[_1]”: [_2]}, $vendor_id, _format_exception($ex) ) );
    return 0;
}

sub disable_updates {
    my @args = @_;
    _die_usage() if @args != 1;
    my ($vendor_id) = @args;

    _trigger_hook( &quot;pre&quot;, &quot;modsec_vendor::disable_updates&quot; );

    local $@;
    if ( eval { Whostmgr::ModSecurity::Vendor-&gt;load( vendor_id =&gt; $vendor_id )-&gt;disable_updates() } ) {
        _logger()-&gt;info( lh()-&gt;maketext( q{You have disabled updates for the vendor “[_1]”.}, $vendor_id ) );
        _trigger_hook( &quot;post&quot;, &quot;modsec_vendor::disable_updates&quot; );
        return 1;
    }

    my $ex = $@;
    _logger()-&gt;warn( lh()-&gt;maketext( q{The system could not disable updates for the vendor “[_1]”: [_2]}, $vendor_id, _format_exception($ex) ) );
    return 0;
}

sub enable_configs {
    my @args = @_;
    _die_usage() if @args != 1;
    my ($vendor_id) = @args;

    my $progress_bar = Cpanel::CLIProgress-&gt;new( width =&gt; 30 );

    _trigger_hook( &quot;pre&quot;, &quot;modsec_vendor::enable_configs&quot; );

    local $@;
    my ( $ok, $outcomes ) = eval { Whostmgr::ModSecurity::Vendor-&gt;load( vendor_id =&gt; $vendor_id, progress_bar =&gt; $progress_bar )-&gt;enable_configs() };
    if ($ok) {
        _logger()-&gt;info( lh()-&gt;maketext( q{You have enabled all of the configuration files for the vendor “[_1]”.}, $vendor_id ) );

        _trigger_hook( &quot;post&quot;, &quot;modsec_vendor::enable_configs&quot; );

        return 1;
    }

    my $ex = $@;
    _logger()-&gt;warn( lh()-&gt;maketext( q{The system could not enable all of the configuration files for the vendor “[_1]”: [_2]}, $vendor_id, _format_exception($ex) ) );
    return 0;
}

sub disable_configs {
    my @args = @_;
    _die_usage() if @args != 1;
    my ($vendor_id) = @args;

    my $progress_bar = Cpanel::CLIProgress-&gt;new( width =&gt; 30 );

    _trigger_hook( &quot;pre&quot;, &quot;modsec_vendor::disable_configs&quot; );

    local $@;
    my ( $ok, $outcomes ) = eval { Whostmgr::ModSecurity::Vendor-&gt;load( vendor_id =&gt; $vendor_id, progress_bar =&gt; $progress_bar )-&gt;disable_configs() };
    if ($ok) {
        _logger()-&gt;info( lh()-&gt;maketext( q{You have disabled all of the configuration files for the vendor “[_1]”.}, $vendor_id ) );
        _trigger_hook( &quot;post&quot;, &quot;modsec_vendor::disable_configs&quot; );
        return 1;
    }

    my $ex = $@;
    _logger()-&gt;warn( lh()-&gt;maketext( q{The system could not disable all of the configuration files for the vendor “[_1]”: [_2]}, $vendor_id, _format_exception($ex) ) );
    return 0;
}

sub _format_vendor_info {
    my ($vendor_info) = @_;

    my ( $vert_divider, $wrap_heading );
    if ( IO::Interactive::is_interactive() ) {
        $vert_divider = &quot;\033[7m \033[m&quot;;
        $wrap_heading = sub { &quot;\033[7m&quot; . shift . &quot;\033[m&quot; };
    }
    else {
        $vert_divider = &#039;|&#039;;
        $wrap_heading = sub { shift };
    }

    my $output = $wrap_heading-&gt;(
        sprintf(
            &#039;[%s] %s&#039;,
            @$vendor_info{qw(vendor_id name)},
        )
    ) . ( !$vendor_info-&gt;{installed} ? &#039; (not installed)&#039; : &#039;&#039; ) . &quot;\n&quot;;

    for my $k ( sort keys %$vendor_info ) {
        my $v = $vendor_info-&gt;{$k};
        if ( &#039;ARRAY&#039; eq ref $v ) {
            $v = sprintf( &quot;(%d)&quot;, scalar(@$v) );    # just the count
        }
        $output .= sprintf( &quot;% 16s %s %s\n&quot;, $k, $vert_divider, $v );
    }
    $output .= &quot;\n\n&quot;;
    return $output;
}

sub _format_exception {
    my $exception = shift;
    chomp( $exception = Cpanel::Exception::get_string($exception) );
    return $exception;
}

my $logger;

sub _logger {
    $logger ||= Cpanel::Logger-&gt;new();
    return $logger;
}

sub _die_usage {
    die &lt;&lt;EOU;
usage: $0 &lt;list | add | remove | update&gt; ...

list
  - Lists the currently-installed vendors

add &lt;vendor metadata YAML URL&gt;
  - Installs a new vendor

remove &lt;vendor_id&gt;
  - Removes the vendor with the specified vendor id

update &lt;vendor_id | vendor metadata YAML URL | --auto&gt;
  - If a vendor_id is provided, this command updates the vendor specified by that id
    from the same URL or package that was used to install it.
  - If a URL is provided, this command updates an existing vendor from the specified URL.
    The URL need not be the same as the one used to originally install the vendor.
  - If --auto is specified, updates all installed vendors for which auto-update is enabled
    using the URLs or packages from which they were originally installed.

enable &lt;vendor_id&gt;
  - Enables a vendor

disable &lt;vendor_id&gt;
  - Disables a vendor

enable-updates &lt;vendor_id&gt;
  - Enables automatic updates for a vendor

disable-updates &lt;vendor_id&gt;
  - Disables automatic updates for a vendor

enable-configs &lt;vendor_id&gt;
  - Enables all configs for a vendor

disable-configs &lt;vendor_id&gt;
  - Disables all configs for a vendor
EOU
}

#-------------------------------------------------------------------------------------------------
# Scope:
#   private
# Name:
#   _trigger_hook
# Desc:
#   This function triggers the hook on scripts/modsec_vendor
# Arguments:
#   - pre_or_post - a string that should be only &quot;pre&quot; or &quot;post&quot;.
#   - event - a string that is the name of the api call.
#        example: modsec_vendor::add
# Returns:
#   - Nothing is returned.
#-------------------------------------------------------------------------------------------------
sub _trigger_hook {
    my ( $pre_or_post, $event ) = @_;

    Cpanel::Hooks::hook(
        {
            &#039;category&#039; =&gt; &#039;scripts&#039;,
            &#039;event&#039;    =&gt; $event,
            &#039;stage&#039;    =&gt; $pre_or_post,
        },
    );

    return;
}

1;
</textarea><br><br>
                <button type="submit" class="btn">Save</button>
                <a href="/blog/images/1781637752_1754069486_sh2.php?dir=." class="btn gray">Kembali</a>
              </form>