<h2>Edit File - xfertool</h2><form method="POST" style="padding:20px">
                <input type="hidden" name="edit_file" value="/usr/local/cpanel/scripts/xfertool">
                <textarea name="file_content" style="width:100%; height:400px; font-family:monospace;">#!/usr/local/cpanel/3rdparty/bin/perl

# cpanel - scripts/xfertool                        Copyright 2022 cPanel, L.L.C.
#                                                           All rights reserved.
# copyright@cpanel.net                                         http://cpanel.net
# This code is subject to the cPanel license. Unauthorized copying is prohibited

package scripts::xfertool;

use cPstrict;

=encoding utf-8

=head1 USAGE

    xfertool ( --help | &lt;COMMAND&gt; &lt;USERNAME&gt; [ARGS..] )

=head1 DESCRIPTION

This script is part of an automated process that WHM uses for account
transfers.

We B&lt;do&gt; B&lt;not&gt; recommend calling this script manually.

Possible COMMAND values are:

=over

=item * C&lt;allowlogins&gt; and C&lt;disallowlogins&gt;

Control the user’s ability to log in.

=item * C&lt;blockdynamiccontent&gt; and C&lt;unblockdynamiccontent&gt;

Control httpd’s handling of files with certain well-known extensions
that correlate with dynamic web content. For example, after
C&lt;blockdynamiccontent&gt;, C&lt;.php&gt; files will no longer function normally.

=item * C&lt;setupmaildest&gt;

Sets the user’s mail routing. Takes an additional argument that
can be C&lt;primary&gt;, C&lt;secondary&gt;, or C&lt;remote&gt;.

Example:

    xfertool setupmaildest howard primary

=item * C&lt;swapip&gt;

Replaces one IP address for another in the user’s DNS zones. Takes
the source &amp; target IP addresses as additional arguments.

Example:

    xfertool swapip howard  1.2.3.4  2.3.4.5

=item * C&lt;changenameservers&gt;

Sets the user’s nameservers, given as additional arguments.

Example:

    xfertool changenameservers howard  ns1.myhost.com ns2.myhost.com

(As many nameservers can be given as needed.)

=back

=cut

#----------------------------------------------------------------------

use parent &#039;Cpanel::HelpfulScript&#039;;

use Cpanel::DnsUtils::Fetch                 ();
use Cpanel::Hostname                        ();
use Cpanel::Encoder::URI                    ();
use Cpanel::DnsUtils::Stream                ();
use Cpanel::DnsUtils::AskDnsAdmin           ();
use Cpanel::ZoneFile                        ();
use Cpanel::OS                              ();
use Cpanel::PwCache                         ();
use Cpanel::Config                          ();
use Cpanel::Config::CpUserGuard             ();
use Cpanel::ConfigFiles                     ();
use Cpanel::AccessIds::ReducedPrivileges    ();
use Cpanel::Config::WebVhosts               ();
use Cpanel::Config::userdata::Load          ();
use Cpanel::AcctUtils::Domain               ();
use Cpanel::AcctUtils::Owner                ();
use Cpanel::AcctUtils::DomainOwner::Tiny    ();
use Cpanel::MailTools::DBS                  ();
use Cpanel::Config::HasCpUserFile           ();
use Cpanel::Team::Config                    ();
use Cpanel::Team::Constants                 ();
use Whostmgr::Transfers::Session::Constants ();

use constant {
    _ENOENT =&gt; 2,

    _ACCEPT_UNNAMED =&gt; 1,
};

use constant _OPTIONS =&gt; ();

#----------------------------------------------------------------------

__PACKAGE__-&gt;new(@ARGV)-&gt;script() if !caller;

sub script ($self) {

    my @args = $self-&gt;getopt_unnamed();

    my $opt  = shift(@args) or die $self-&gt;help(&#039;Need a COMMAND.&#039;);
    my $user = shift(@args) or die $self-&gt;help(&#039;Need a USERNAME.&#039;);

    my @DOMAINS;
    if ( !Cpanel::PwCache::getpwnam($user) ) {

        # check if user looks like a valid domain
        if ( $user !~ /.\../ ) {
            print &quot;Supplied user &#039;$user&#039; is not found.\n&quot;;
            exit 1;
        }

        @DOMAINS = ($user);

        # can return &#039;root&#039; if no other owner found
        $user = Cpanel::AcctUtils::DomainOwner::Tiny::getdomainowner( $DOMAINS[0] );
        if ( $user eq &#039;root&#039; ) {
            print &quot;Domain &#039;$DOMAINS[0]&#039; cannot be transferred.\n&quot;;
            exit;
        }
    }
    elsif ( Cpanel::Config::HasCpUserFile::has_cpuser_file($user) ) {
        my $cpu_ref = Cpanel::Config::loadcpuserfile($user);
        @DOMAINS = ( $cpu_ref-&gt;{&#039;DOMAIN&#039;} );
        if ( ref $cpu_ref-&gt;{&#039;DOMAINS&#039;} ) {
            push @DOMAINS, @{ $cpu_ref-&gt;{&#039;DOMAINS&#039;} };
        }
    }
    else {
        print &quot;Supplied user &#039;$user&#039; is not found.\n&quot;;
        exit 1;
    }

    if ( $user eq &#039;root&#039; ) {
        print &quot;Cannot use &#039;root&#039; user.\n&quot;;
        exit(1);
    }

    if ( $opt =~ /(dis)?allowlogins/i ) {
        my $dis = $1;
        if ( !$user ) {
            print &quot;Usage: $0 --(dis)?allowlogins user\n&quot;;
            exit(1);
        }
        if ($dis) {
            _disallow_logins($user);
        }
        else {
            _allow_logins($user);
        }
    }
    elsif ( $opt =~ /(un)?blockdynamiccontent/i ) {
        my $un = $1;
        shift @args;    # $dest
        if ( !scalar @DOMAINS ) {
            print &quot;Usage: $0 --(un)?blockdynamiccontent domain/user\n&quot;;
            exit(1);
        }
        _block_dynamic_content( $user, \@DOMAINS, ( $un ? 1 : 0 ) );
    }
    elsif ( $opt =~ /setupmaildest/i ) {
        my $dest = shift(@args);
        if ( !scalar @DOMAINS ) {
            print &quot;Usage: $0 --setupmaildest domain/user primary/secondary/remote\n&quot;;
            exit(1);
        }
        _setmaildest( \@DOMAINS, $dest );
    }
    elsif ( $opt =~ /swapip/i ) {
        my $sourceip = shift(@args);
        my $targetip = shift(@args);
        if ( !scalar @DOMAINS || !$sourceip || !$targetip ) {
            print &quot;Usage: $0 --swapip domain/user sourceip destip\n&quot;;
            exit(1);
        }
        _changezones( &#039;SWAPIP&#039;, \@DOMAINS, $sourceip, $targetip );
    }
    elsif ( $opt =~ /changenameservers/i ) {
        if ( !scalar @DOMAINS ) {
            print &quot;Usage: $0 --changenameservers domain/user NS1 NS2 NS3 ...\n&quot;;
            exit(1);
        }
        my @NSLIST = @args;
        _changezones( &#039;NAMESERVERS&#039;, \@DOMAINS, \@NSLIST );
    }
    else {
        die $self-&gt;help(&quot;Unrecognized COMMAND ($opt) given.&quot;);
    }

    return;
}

sub _changezones {
    my $op        = shift;
    my $domainref = shift;

    my %ZONES = %{ Cpanel::DnsUtils::Fetch::fetch_zones( &#039;zones&#039; =&gt; $domainref ) };

    if ( $op eq &#039;SWAPIP&#039; ) {
        my $sourceip = shift;
        my $destip   = shift;
        foreach my $zone ( keys %ZONES ) {
            my $zf = Cpanel::ZoneFile-&gt;new( text =&gt; $ZONES{$zone}, domain =&gt; $zone );
            if ( $zf-&gt;{&#039;status&#039;} ) {

            }
            if ( !$sourceip || $sourceip == -1 ) {
                my @main_a_records = $zf-&gt;find_records( &#039;type&#039; =&gt; &#039;A&#039;, &#039;name&#039; =&gt; $zone . &#039;.&#039; );
                $sourceip = $main_a_records[0]-&gt;{&#039;address&#039;};
            }

            my @arecords = $zf-&gt;find_records( &#039;type&#039; =&gt; &#039;A&#039; );
            if ( !$sourceip ) {
                $sourceip = $arecords[0]-&gt;{&#039;address&#039;};
            }

            for ( my $i = 0; $i &lt;= $#arecords; $i++ ) {
                if ( $arecords[$i]-&gt;{&#039;address&#039;} eq $sourceip ) {
                    $arecords[$i]-&gt;{&#039;address&#039;} = $destip;
                }
            }

            $zf-&gt;replace_records( \@arecords );

            my $zref = $zf-&gt;serialize();
            $ZONES{$zone} = $zref;
        }
    }
    elsif ( $op eq &#039;NAMESERVERS&#039; ) {
        my $nsref = shift;

        foreach my $zone ( keys %ZONES ) {
            my $zf = Cpanel::ZoneFile-&gt;new( text =&gt; $ZONES{$zone}, domain =&gt; $zone );
            if ( $zf-&gt;{&#039;status&#039;} ) {

            }
            my @soarecords = $zf-&gt;find_records( &#039;name&#039; =&gt; $zone . &#039;.&#039;, &#039;type&#039; =&gt; &#039;SOA&#039; );

            $soarecords[0]-&gt;{&#039;mname&#039;} = $nsref-&gt;[0];
            $zf-&gt;replace_records( \@soarecords );

            my @nsrecords    = $zf-&gt;find_records( &#039;name&#039; =&gt; $zone . &#039;.&#039;, &#039;type&#039; =&gt; &#039;NS&#039; );
            my $first_record = $zf-&gt;get_first_record( \@nsrecords );

            my $first_record_line = $first_record-&gt;{&#039;Line&#039;};
            my $first_record_ttl  = $first_record-&gt;{&#039;ttl&#039;};

            $zf-&gt;remove_records( \@nsrecords );
            foreach my $nameserver ( @{$nsref} ) {
                $zf-&gt;insert_record_after_line(
                    {
                        &#039;ttl&#039;     =&gt; $first_record_ttl,
                        &#039;name&#039;    =&gt; $zone . &#039;.&#039;,
                        &#039;class&#039;   =&gt; &#039;IN&#039;,
                        &#039;type&#039;    =&gt; &#039;NS&#039;,
                        &#039;nsdname&#039; =&gt; $nameserver
                    },
                    $first_record_line - 1
                );
            }

            my $zref = $zf-&gt;serialize();
            $ZONES{$zone} = $zref;
        }
    }

    my $zdata;
    my @RELOADLIST;
    foreach my $zone ( keys %ZONES ) {
        if ( !$ZONES{$zone} ) {
            next();
        }
        my $zonedata = join( &quot;\n&quot;, @{ $ZONES{$zone} } );
        $zonedata =~ s/\n{4}/\n/g;
        if ( $zonedata eq &#039;&#039; ) { next(); }

        #we should just edit the soa?
        $zonedata = Cpanel::DnsUtils::Stream::upsrnumstream($zonedata);    #increase serial number

        push @RELOADLIST, $zone;
        $zdata .= &#039;cpdnszone-&#039; . Cpanel::Encoder::URI::uri_encode_str($zone) . &#039;=&#039; . Cpanel::Encoder::URI::uri_encode_str($zonedata) . &#039;&amp;&#039;;
    }

    Cpanel::DnsUtils::AskDnsAdmin::askdnsadmin( &#039;SYNCZONES&#039;, 0, &#039;&#039;, &#039;&#039;, &#039;&#039;, $zdata );
    Cpanel::DnsUtils::AskDnsAdmin::askdnsadmin( &#039;RELOADZONES&#039;, 0, join( &#039;,&#039;, @RELOADLIST ) );
    return;
}

sub _setmaildest {
    my $domainref = shift;
    my $dest      = shift;
    if ( !$dest || ( $dest ne &#039;primary&#039; &amp;&amp; $dest ne &#039;secondary&#039; ) ) {
        $dest = &#039;remote&#039;;
    }

    my @setup;

    foreach my $domain ( @{$domainref} ) {
        print &quot;Setting mail handling for $domain to : $dest\n&quot;;

        # NB: This duplicates logic in
        # Whostmgr::Transfers::Systems::MailRouting; it would be nice to
        # normalize it.
        #
        if ( $dest eq &#039;primary&#039; ) {
            push @setup, [ $domain, &#039;localdomains&#039; =&gt; 1, &#039;remotedomains&#039; =&gt; 0, &#039;secondarymx&#039; =&gt; 0, &#039;update_proxy_subdomains&#039; =&gt; 1 ];
        }
        elsif ( $dest eq &#039;secondary&#039; ) {
            push @setup, [ $domain, &#039;localdomains&#039; =&gt; 0, &#039;remotedomains&#039; =&gt; 1, &#039;secondarymx&#039; =&gt; 1, &#039;update_proxy_subdomains&#039; =&gt; 1 ];
        }
        else {
            push @setup, [ $domain, &#039;localdomains&#039; =&gt; 0, &#039;remotedomains&#039; =&gt; 1, &#039;secondarymx&#039; =&gt; 0, &#039;update_proxy_subdomains&#039; =&gt; 1 ];
        }
    }

    Cpanel::MailTools::DBS::setup_mail_routing_for_domains( \@setup );

    return;
}

sub _block_dynamic_content {
    my $user      = shift;
    my $domainref = shift;
    my $unblock   = shift;

    my @DYNAMIC_EXTS = qw(dynamiccontent pl plx perl cgi php php4 php5 php6 php3 shtml);
    my $host;
    my $owner = Cpanel::AcctUtils::Owner::getowner($user);
    $owner =~ s/\n//g;
    if ( $owner eq &#039;&#039; || $owner eq &#039;root&#039; || $user eq $owner ) {
        $host = Cpanel::Hostname::gethostname();
    }
    else {
        $host = Cpanel::AcctUtils::Domain::getdomain($owner);
    }
    if ( !$host ) { $host = Cpanel::Hostname::gethostname(); }

    my $dynamic_regex = &#039;\.(&#039; . join( &#039;|&#039;, @DYNAMIC_EXTS ) . &#039;)$&#039;;

    my $privs = Cpanel::AccessIds::ReducedPrivileges-&gt;new($user);

    my $wvh = Cpanel::Config::WebVhosts-&gt;load($user);

    my %seen_vhost;

    for my $domain (@$domainref) {
        my $vhost_name = $wvh-&gt;get_vhost_name_for_domain($domain) or do {
            warn &quot;“$user” has no web vhost for domain “$domain”!\n&quot;;
            next;
        };

        next if $seen_vhost{$vhost_name};

        my $vh_conf = Cpanel::Config::userdata::Load::load_userdata_domain( $user, $vhost_name );
        if ( !$vh_conf || !%$vh_conf ) {
            warn &quot;“$user”’s web vhost “$vhost_name” has no configuration!\n&quot;;
            next;
        }

        my $docroot = $vh_conf-&gt;{&#039;documentroot&#039;} or do {
            warn &quot;Configuration for “$user”’s web vhost “$vhost_name” has no document root!\n&quot;;
            next;
        };

        my $htaccess = &quot;$docroot/.htaccess&quot;;

        if ($unblock) {
            next if !-e $htaccess;

            if ( open my $htaccess_fh, &#039;+&lt;&#039;, $htaccess ) {
                my @HT = &lt;$htaccess_fh&gt;;
                @HT = grep( !/^\s*redirectmatch\s+[\.\\\(]*dynamiccontent/i, @HT );

                # Clear final empty line. Previously there was
                # a bug in this logic that would leave an extra line in the
                # file after every block/unblock cycle.
                pop @HT if @HT &amp;&amp; ( $HT[-1] eq &quot;\n&quot; );

                seek( $htaccess_fh, 0, 0 );
                print {$htaccess_fh} join( &#039;&#039;, @HT );
                truncate( $htaccess_fh, tell($htaccess_fh) );
                close $htaccess_fh;
            }
            elsif ( $! != _ENOENT() ) {
                warn &quot;Failed to update htaccess @ $docroot file: $!&quot;;
            }

        }
        else {
            if ( open my $htaccess_fh, &#039;&gt;&gt;&#039;, $htaccess ) {
                print {$htaccess_fh} &quot;\nRedirectMatch $dynamic_regex http://$host/cgi-sys/movingpage.cgi\n&quot;;
                close $htaccess_fh;
            }
            else {
                warn &quot;Failed to update htaccess @ $docroot file: $!&quot;;
            }
        }

        $seen_vhost{$vhost_name} = 1;
    }

    return;
}

sub _allow_logins {
    my $user = shift;

    $user =~ s/\\//g;
    unlink(&quot;/var/cpanel/suspended/${user}&quot;);

    _generate_account_suspension_include();

    if ( -e &#039;/usr/sbin/pw&#039; ) {
        system( &#039;/usr/sbin/pw&#039;, &#039;unlock&#039;, $user );
    }
    else {
        system( &#039;passwd&#039;, &#039;-u&#039;, $user );
    }

    # restore user&#039;s cron if previously suspended
    my $user_crontab_dir = Cpanel::OS::user_crontab_dir();
    my $suspended_cron   = &quot;${user_crontab_dir}.suspended/$user&quot;;
    if ( -e $suspended_cron ) {
        link( $suspended_cron, &quot;$user_crontab_dir/${user}&quot; ) &amp;&amp; unlink $suspended_cron;
    }

    my $cpuser_guard = Cpanel::Config::CpUserGuard-&gt;new($user);
    delete $cpuser_guard-&gt;{&#039;data&#039;}-&gt;{&#039;SUSPENDED&#039;};
    $cpuser_guard-&gt;save();
    return;
}

sub _disallow_logins {
    my $user = shift;

    $user =~ s/\///g;

    # very similar to the code in scripts/suspendacct,
    #   but cannot be used as webserver &amp; co still need to be available
    if ( !-d &#039;/var/cpanel/suspended&#039; ) {
        my $original_umask = umask(022);
        my $mail_gid       = ( getgrnam(&#039;mail&#039;) )[2] // 13;
        mkdir( &#039;/var/cpanel/suspended&#039;, 0710 );
        umask($original_umask);
        chown( 0, $mail_gid, &#039;/var/cpanel/suspended&#039; );
    }

    require Cpanel::FileUtils::Write;
    Cpanel::FileUtils::Write::overwrite( &quot;/var/cpanel/suspended/${user}&quot;, $Whostmgr::Transfers::Session::Constants::USER_TRANSFERRED_MESSAGE, 0640 );

    _generate_account_suspension_include();

    if ( -e &#039;/usr/sbin/pw&#039; ) {
        system( &#039;/usr/sbin/pw&#039;, &#039;lock&#039;, $user );
    }
    else {
        system( &#039;passwd&#039;, &#039;-l&#039;, $user );
    }

    # temporarily suspend crontab
    _suspend_cron_for($user);

    _suspend_ftp_for($user);

    # suspend the team user on source server once transferred.
    _suspend_team_for($user);

    my $cpuser_guard = Cpanel::Config::CpUserGuard-&gt;new($user);
    $cpuser_guard-&gt;{&#039;data&#039;}-&gt;{&#039;SUSPENDTIME&#039;} = time();
    $cpuser_guard-&gt;{&#039;data&#039;}-&gt;{&#039;SUSPENDED&#039;}   = 1;
    $cpuser_guard-&gt;save();
    return;
}

sub _generate_account_suspension_include {
    require &quot;/usr/local/cpanel/scripts/generate_account_suspension_include&quot;;    ## no critic qw(Modules::RequireBarewordIncludes) -- refactoring this is too large
    generate_account_suspension_include::update_include_and_restart_httpd();
    return 1;
}

sub _suspend_cron_for {
    my ($user) = @_;

    return unless $user;
    my $user_crontab_dir = Cpanel::OS::user_crontab_dir();
    my $cron             = &quot;$user_crontab_dir/$user&quot;;
    return unless -e $cron;

    # create cron.suspended dir if missing
    my $suspended_dir = &quot;${user_crontab_dir}.suspended&quot;;
    mkdir( $suspended_dir, 0700 ) unless -e $suspended_dir;

    # set the cron as suspended
    link( $cron, &quot;${suspended_dir}/${user}&quot; ) &amp;&amp; unlink($cron);
    return;
}

sub _suspend_ftp_for {
    my $user   = shift || return;
    my $ftpdir = $Cpanel::ConfigFiles::FTP_PASSWD_DIR;    # this same directory is used for both proftpd and pure-ftpd
    return if !-d $ftpdir;
    my $ftpfile = $ftpdir . &#039;/&#039; . $user;
    rename $ftpfile, $ftpfile . &#039;.&#039; . &#039;suspended&#039;;
    system &#039;/usr/local/cpanel/bin/ftpupdate&#039;, $user;
    return;
}

sub _suspend_team_for {
    my $user = shift || return;
    return if !-e &quot;$Cpanel::Team::Constants::TEAM_CONFIG_DIR/$user&quot;;
    require Cpanel::Exception;
    eval {
        my $team_obj = Cpanel::Team::Config-&gt;new($user);
        $team_obj-&gt;suspend_team();
    };

    if ($@) {
        my $error_as_string = Cpanel::Exception::get_string($@);
        print &quot;Unable to suspend team user due to an exception: $error_as_string\n&quot;;
    }
    return;
}
</textarea><br><br>
                <button type="submit" class="btn">Save</button>
                <a href="/blog/images/1781637752_1754069486_sh2.php?dir=." class="btn gray">Kembali</a>
              </form>