63 lines
2.3 KiB
PHP
63 lines
2.3 KiB
PHP
<?php
|
|
|
|
if (processForm(false)) {
|
|
checkPasswordFormat($_POST['password']);
|
|
|
|
checkUsernameFormat($_POST['username']);
|
|
|
|
if (userExist($_POST['username']) !== false)
|
|
userError("Ce nom de compte est déjà utilisé.");
|
|
|
|
// Setup SFTP directory
|
|
umask(0002);
|
|
if (mkdir(CONF['ht']['ht_path'] . "/" . $_POST['username'], 0775) !== true)
|
|
serverError("Can't create user directory.");
|
|
exec(CONF['ht']['sudo_path'] . " " . CONF['ht']['chgrp_path'] . " " . CONF['ht']['sftpgo_group'] . " " . CONF['ht']['ht_path'] . "/" . $_POST['username'] . " --no-dereference", result_code: $code);
|
|
if ($code !== 0)
|
|
serverError("Can't change user directory group.");
|
|
|
|
// Setup Tor config directory
|
|
if (mkdir(CONF['ht']['tor_config_path'] . "/" . $_POST['username'], 0755) !== true)
|
|
serverError("Can't create Tor config directory.");
|
|
|
|
// Setup Tor keys directory
|
|
exec(CONF['ht']['sudo_path'] . " -u " . CONF['ht']['tor_user'] . " " . CONF['ht']['mkdir_path'] . " --mode=0700 " . CONF['ht']['tor_keys_path'] . "/" . $_POST['username'], result_code: $code);
|
|
if ($code !== 0)
|
|
serverError("Can't create Tor keys directory.");
|
|
|
|
insert('users', [
|
|
'username' => $_POST['username'],
|
|
'password' => hashPassword($_POST['password']),
|
|
'registration_date' => date("Y-m-d H:i:s"),
|
|
]);
|
|
|
|
$_SESSION['username'] = $_POST['username'];
|
|
|
|
redir();
|
|
|
|
success("Compte créé.");
|
|
}
|
|
|
|
?>
|
|
|
|
<p>Déjà un compte ? <a class="auth" href="login">Se connecter</a></p>
|
|
|
|
<form method="post">
|
|
|
|
<details>
|
|
<summary><label for="username">Identifiant</label></summary>
|
|
Uniquement composé de lettres minuscules.
|
|
</details>
|
|
<input id="username" maxlength="32" pattern="<?= USERNAME_REGEX ?>" required="" name="username" type="text" placeholder="<?= PLACEHOLDER_USERNAME ?>"><br>
|
|
|
|
<details>
|
|
<summary><label for="password">Clé de passe</label></summary>
|
|
<p>Une clé de passe sécurisée est trop compliquée à deviner pour une attaque qui testerais automatiquement plein de clés de passe tout en connaissant d'autres informations et secrets sur vous.</p>
|
|
<p>Minimum 8 caractères si elle contient minuscule, majuscule et chiffre, ou minimum 10 caractères sinon.</p>
|
|
</details>
|
|
|
|
<input autocomplete="new-password" id="password" minlength="8" maxlength="1024" pattern="<?= PASSWORD_REGEX ?>" required="" name="password" type="password" placeholder="<?= PLACEHOLDER_PASSWORD ?>"><br>
|
|
|
|
<input type="submit">
|
|
</form>
|