web/scripts/pi-hole/php/teleporter.php

<?php
/* Pi-hole: A black hole for Internet advertisements
*  (c) 2017 Pi-hole, LLC (https://pi-hole.net)
*  Network-wide ad blocking via your own hardware.
*
*  This file is copyright under the latest version of the EUPL.
*  Please see LICENSE file for your rights under this license. */

require "password.php";
require "auth.php"; // Also imports func.php

if (php_sapi_name() !== "cli") {
	if(!$auth) die("Not authorized");
	check_csrf(isset($_POST["token"]) ? $_POST["token"] : "");
}

function archive_add_file($path,$name)
{
	global $archive;
	if(file_exists($path.$name))
		$archive[$name] = file_get_contents($path.$name);
}

function archive_add_directory($path)
{
	global $zip;
	if($dir = opendir($path))
	{
		while(false !== ($entry = readdir($dir)))
		{
			if($entry !== "." && $entry !== "..")
			{
				archive_add_file($path,$entry);
			}
		}
		closedir($dir);
	}
}

function limit_length(&$item, $key)
{
	// limit max length for a domain entry to 253 chars
	// return only a part of the string if it is longer
	$item = substr($item, 0, 253);
}

function process_zip($name)
{
	global $zip;
	$zippointer = $zip->getStream($name);
	if(!$zippointer)
	{
		echo "$name not found in provided ZIP file, skipping...<br>";
		return;
	}
	$contents = "";
	while (!feof($zippointer)) {
		$contents .= fread($zippointer, 4096);
	}
	fclose($zippointer);
	$domains = array_filter(explode("\n",$contents));

	// Walk array and apply a max string length
	// function to every member of the array of domains
	array_walk($domains, "limit_length");

	// Check validity of domains (after possible clipping)
	check_domains($domains);
	return $domains;
}

function check_domains($domains)
{
	foreach($domains as $domain)
	{
		if(!is_valid_domain_name($domain)){
			die(htmlspecialchars($domain).' is not a valid domain');
		}
	}
}

function getWildcardListContent() {
	if(file_exists("/etc/dnsmasq.d/03-pihole-wildcard.conf"))
	{
		$rawList = file_get_contents("/etc/dnsmasq.d/03-pihole-wildcard.conf");
		$wclist = explode("\n", $rawList);
		$list = [];

		foreach ($wclist as $entry) {
			$expl = explode("/", $entry);
			if(count($expl) == 3)
			{
				array_push($list,$expl[1]);
			}
		}

		return implode("\n",array_unique($list));
	}

	return "";
}

if(isset($_POST["action"]))
{
	if($_FILES["zip_file"]["name"] && $_POST["action"] == "in")
	{
		$filename = $_FILES["zip_file"]["name"];
		$source = $_FILES["zip_file"]["tmp_name"];
		$type = mime_content_type($source);

		$name = explode(".", $filename);
		$accepted_types = array('application/gzip', 'application/tar', 'application/x-compressed');
		$okay = false;
		foreach($accepted_types as $mime_type) {
			if($mime_type == $type) {
				$okay = true;
				break;
			}
		}

		$continue = strtolower($name[1]) == 'tar' && strtolower($name[1]) == 'gz' ? true : false;
		if(!$continue || !$okay) {
			die("The file you are trying to upload is not a .tar.gz file (filename: ".$filename.", type: ".$type."). Please try again.");
		}

		$zip = new ZipArchive();
		$x = $zip->open($source);
		if ($x === true) {
			if(isset($_POST["blacklist"]))
			{
				$blacklist = process_zip("blacklist.txt");
				exec("sudo pihole -b -q ".implode(" ", $blacklist));
			}

			if(isset($_POST["whitelist"]))
			{
				$whitelist = process_zip("whitelist.txt");
				exec("sudo pihole -w -q ".implode(" ", $whitelist));
			}

			if(isset($_POST["wildlist"]))
			{
				$wildlist = process_zip("wildcardblocking.txt");
				exec("sudo pihole -wild -q ".implode(" ", $wildlist));
			}

			echo "OK";

			$zip->close();
		}
		else
		{
			die("Error opening uploaded archive!");
		}
	}
	else
	{
		die("No file transmitted or parameter error.");
	}
}
else
{
	$tarname = "pi-hole-teleporter_".date("Y-m-d_h-i-s").".tar";
	$filename = $tarname.".gz";
	// $archive_file_name = tempnam("/tmp", "Teleporter");
	$archive_file_name = sys_get_temp_dir() ."/". $tarname;
	// touch($archive_file_name);
	$archive = new PharData($archive_file_name);

	if ($archive->isWritable() !== TRUE) {
		exit("cannot open/create $archive_file_name<br>PHP user: ".exec('whoami')."\n");
	}

	archive_add_file("/etc/pihole/","whitelist.txt");
	archive_add_file("/etc/pihole/","blacklist.txt");
	archive_add_file("/etc/pihole/","adlists.list");
	archive_add_file("/etc/pihole/","setupVars.conf");
	archive_add_directory("/etc/dnsmasq.d/");

	$archive["wildcardblocking.txt"] = getWildcardListContent();
	$archive->compress(Phar::GZ); // Creates a gziped copy
	unlink($archive_file_name); // Unlink original tar file as it is not needed anymore
	$archive_file_name .= ".gz"; // Append ".gz" extension to ".tar"

	header("Content-type: application/zip");
	header('Content-Transfer-Encoding: binary');
	header("Content-Disposition: attachment; filename=".$filename);
	header("Content-length: " . filesize($archive_file_name));
	header("Pragma: no-cache");
	header("Expires: 0");
	if(ob_get_length() > 0) ob_end_clean();
	readfile($archive_file_name);
	ignore_user_abort(true);
	unlink($archive_file_name);
	exit;
}

?>