admin-access.asp

<!--
Tomato GUI
Copyright (C) 2006-2010 Jonathan Zarate
http://www.polarcloud.com/tomato/

For use with Tomato Firmware only.
No part of this file may be used without permission.
--><title>Admin Access</title>
<content>
	<script type="text/javascript" src="js/interfaces.js"></script>
	<script type="text/javascript">
		// <% nvram("at_nav,at_nav_action,at_nav_state,http_enable,https_enable,http_lanport,https_lanport,remote_management,remote_mgt_https,web_wl_filter,web_css,web_dir,ttb_css,sshd_eas,sshd_pass,sshd_remote,telnetd_eas,http_wanport,sshd_authkeys,sshd_port,sshd_rport,sshd_forwarding,telnetd_port,rmgt_sip,https_crt_cn,https_crt_save,lan_ipaddr,ne_shlimit,sshd_motd,http_username,http_root"); %>
		changed = 0;
		tdup = parseInt("<% psup('telnetd'); %>");
		sdup = parseInt("<% psup('dropbear'); %>");
		shlimit = nvram.ne_shlimit.split(",");
		if (shlimit.length != 3) shlimit = [0,3,60];
		var xmenus = [["Status", "status"], ["Bandwidth", "bwm"], ["IP Traffic", "ipt"], ["Tools", "tools"], ["Basic", "basic"],
			["Advanced", "advanced"], ["Port Forwarding", "forward"], ["QoS", "qos"],
			/* USB-BEGIN */
			['USB and NAS', 'nas'],
			/* USB-END */
			/* VPN-BEGIN */
			['VPN Tunneling', 'vpn'],
			/* VPN-END */
			['Administration', 'admin']];
		function toggle(service, isup)
		{
			if (changed > 0) {
				if (!confirm("Unsaved changes will be lost. Continue anyway?")) return;
			}
			E("_" + service + "_button").disabled = true;
			$('#_' + service + "_button").after(' <div class="spinner"></div>');
			form.submitHidden("service.cgi", {
				_redirect: "/#admin-access.asp",
				_sleep: ((service == "sshd") && (!isup)) ? "7" : "3",
				_service: service + (isup ? "-stop" : "-start")
			});
		}
		function verifyFields(focused, quiet)
		{

			var ok = 1;
			var a, b, c;
			var i;
			var o = (E("_web_css").value == "online");
			var p = nvram.ttb_css;

			elem.display(PR("_ttb_css"), o);

			try {
				a = E("_web_css").value;
				if (a == "online") {
					E("guicss").href = "ext/" + p + ".css";
					nvram.web_css = a;
				} else {
					if (a != nvram.web_css) {
						E("guicss").href = a + ".css";
						nvram.web_css = a;
					}
				}
			}
			catch (ex) {
			}

			a = E("_f_http_local");
			b = E("_f_http_remote").value;
			if ((a.value != 3) && (b != 0) && (a.value != b)) {
				ferror.set(a, "The local http/https must also be enabled when using remote access.", quiet || !ok);
				ok = 0;
			}
			else {
				ferror.clear(a);
			}

			elem.display(PR("_http_lanport"), (a.value == 1) || (a.value == 3));
			c = (a.value == 2) || (a.value == 3);
			elem.display(PR("_https_lanport"), "row_sslcert", PR("_https_crt_cn"), PR("_f_https_crt_save"), PR("_f_https_crt_gen"), c);

			if (c) {
				a = E("_https_crt_cn");
				a.value = a.value.replace(/(,+|\s+)/g, " ").trim();
				if (a.value != nvram.https_crt_cn) E("_f_https_crt_gen").checked = 1;
			}

			if ((!v_port("_http_lanport", quiet || !ok)) || (!v_port("_https_lanport", quiet || !ok))) ok = 0;
			b = b != 0;
			a = E("_http_wanport");
			elem.display(PR(a), b);
			if ((b) && (!v_port(a, quiet || !ok))) ok = 0;
			if (!v_port("_telnetd_port", quiet || !ok)) ok = 0;
			a = E("_f_sshd_remote").checked;
			b = E("_sshd_rport");
			elem.display(PR(b), a);
			if ((a) && (!v_port(b, quiet || !ok))) ok = 0;
			a = E("_sshd_authkeys");
			if (!v_length(a, quiet || !ok, 0, 4096)) {
				ok = 0;
			}
			else if (a.value != "") {
				if (a.value.search(/^\s*ssh-(dss|rsa)/) == -1) {
					ferror.set(a, "Invalid SSH key.", quiet || !ok);
					ok = 0;
				}
			}
			a = E("_f_rmgt_sip");
			if ((a.value.length) && (!_v_iptaddr(a, quiet || !ok, 15, 1, 1))) return 0;
			ferror.clear(a);
			if (!v_range("_f_limit_hit", quiet || !ok, 1, 100)) return 0;
			if (!v_range("_f_limit_sec", quiet || !ok, 3, 3600)) return 0;
			a = E("_set_password_1");
			b = E("_set_password_2");
			a.value = a.value.trim();
			b.value = b.value.trim();
			if (a.value != b.value) {
				ferror.set(b, "Both passwords must match.", quiet || !ok);
				ok = 0;
			}
			else if (a.value == "") {
				ferror.set(a, "Password must not be empty.", quiet || !ok);
				ok = 0;
			}
			else {
				ferror.clear(a);
				ferror.clear(b);
			}
			changed |= ok;
			return ok;
		}

		function save()
		{
			var a, b, fom;
			if (!verifyFields(null, false)) return;
			fom = E("_fom");
			a = E("_f_http_local").value * 1;
			if (a == 0) {
				if (!confirm("Warning: Web Admin is about to be disabled. If you decide to re-enable Web Admin at a later time, it must be done manually via Telnet, SSH or by performing a hardware reset. Are you sure you want to do this?")) return;
				fom._nextpage.value = "about:blank";
			}
			fom.http_enable.value = (a & 1) ? 1 : 0;
			fom.https_enable.value = (a & 2) ? 1 : 0;
			nvram.lan_ipaddr = location.hostname;
			if ((a != 0) && (location.hostname == nvram.lan_ipaddr)) {
				if (location.protocol == "https:") {
					b = "s";
					if ((a & 2) == 0) b = "";
				}
				else {
					b = "";
					if ((a & 1) == 0) b = "s";
				}
				a = "http" + b + "://" + location.hostname;
				if (b == "s") {
					if (fom.https_lanport.value != 443) a += ":" + fom.https_lanport.value;
				}
				else {
					if (fom.http_lanport.value != 80) a += ":" + fom.http_lanport.value;
				}
				fom._nextpage.value = a + "/#admin-access.asp";
			}
			a = E("_f_http_remote").value;
			fom.remote_management.value = (a != 0) ? 1 : 0;
			fom.remote_mgt_https.value = (a == 2) ? 1 : 0;
			/*
			if ((a != 0) && (location.hostname != nvram.lan_ipaddr)) {
			if (location.protocol == "https:") {
			if (a != 2) fom._nextpage.value = "http://" + location.hostname + ":" + fom.http_wanport.value + "/admin-access.asp";
			}
			else {
			if (a == 2) fom._nextpage.value = "https://" + location.hostname + ":" + fom.http_wanport.value + "/admin-access.asp";
			}
			}
			*/
			fom.https_crt_gen.value = E("_f_https_crt_gen").checked ? 1 : 0;
			fom.https_crt_save.value = E("_f_https_crt_save").checked ? 1 : 0;
			fom.http_root.value = E('_f_http_root').checked ? 1 : 0;
			fom.web_wl_filter.value = E("_f_http_wireless").checked ? 0 : 1;
			fom.telnetd_eas.value = E("_f_telnetd_eas").checked ? 1 : 0;
			fom.sshd_eas.value = E("_f_sshd_eas").checked ? 1 : 0;
			fom.sshd_pass.value = E("_f_sshd_pass").checked ? 1 : 0;
			fom.sshd_remote.value = E("_f_sshd_remote").checked ? 1 : 0;
			fom.sshd_motd.value = E('_f_sshd_motd').checked ? 1 : 0;
			fom.sshd_forwarding.value = E("_f_sshd_forwarding").checked ? 1 : 0;
			fom.rmgt_sip.value = fom.f_rmgt_sip.value.split(/\s*,\s*/).join(",");
			fom.ne_shlimit.value = ((E("_f_limit_ssh").checked ? 1 : 0) | (E("_f_limit_telnet").checked ? 2 : 0)) +
			"," + E("_f_limit_hit").value + "," + E("_f_limit_sec").value;

			a = [];

			form.submit(fom, 0);
		}
		function init() {
			changed = 0;
		}
	</script>

	<form id="_fom" method="post" action="tomato.cgi">

		<input type="hidden" name="_nextpage" value="/#admin-access.asp">
		<input type="hidden" name="_nextwait" value="10">
		<input type="hidden" name="_service" value="admin-restart">

		<input type="hidden" name="http_enable">
		<input type="hidden" name="https_enable">
		<input type="hidden" name="https_crt_save">
		<input type="hidden" name="https_crt_gen">
		<input type="hidden" name="http_root">
		<input type="hidden" name="remote_management">
		<input type="hidden" name="remote_mgt_https">
		<input type="hidden" name="web_wl_filter">
		<input type="hidden" name="telnetd_eas">
		<input type="hidden" name="sshd_eas">
		<input type="hidden" name="sshd_pass">
		<input type="hidden" name="sshd_remote">
		<input type="hidden" name="sshd_motd">
		<input type="hidden" name="ne_shlimit">
		<input type="hidden" name="rmgt_sip">
		<input type="hidden" name="sshd_forwarding">
		<input type="hidden" name="web_mx">

		<div class="box" data-box="admin-access">
			<div class="heading">Admin Access Settings</div>
			<div class="content" id="section-gui">

				<script type="text/javascript">
					var m = [
						{ title: 'Local Access', name: 'f_http_local', type: 'select', options: [[0,'Disabled'],[1,'HTTP'],[2,'HTTPS'],[3,'HTTP &amp; HTTPS']],
							value: ((nvram.https_enable != 0) ? 2 : 0) | ((nvram.http_enable != 0) ? 1 : 0) },
						{ title: 'HTTP Port', indent: 2, name: 'http_lanport', type: 'text', maxlen: 5, size: 7, value: fixPort(nvram.http_lanport, 80) },
						{ title: 'HTTPS Port', indent: 2, name: 'https_lanport', type: 'text', maxlen: 5, size: 7, value: fixPort(nvram.https_lanport, 443) },
						{ title: '<h5>SSL Certificate</h5>', rid: 'row_sslcert' },
						{ title: 'Common Name (CN)', indent: 2, name: 'https_crt_cn', help: 'optional; space separated', type: 'text',
							maxlen: 64, size: 64, value: nvram.https_crt_cn },
						{ title: 'Regenerate', indent: 2, name: 'f_https_crt_gen', type: 'checkbox', value: 0 },
						{ title: 'Save In NVRAM', indent: 2, name: 'f_https_crt_save', type: 'checkbox', value: nvram.https_crt_save == 1 },
						{ title: 'Remote Access', name: 'f_http_remote', type: 'select', options: [[0,'Disabled'],[1,'HTTP'],[2,'HTTPS']],
							value:  (nvram.remote_management == 1) ? ((nvram.remote_mgt_https == 1) ? 2 : 1) : 0 },
						{ title: 'Port', indent: 2, name: 'http_wanport', type: 'text', maxlen: 5, size: 7, value:  fixPort(nvram.http_wanport, 8080) },
						{ title: 'Allow Wireless Access', name: 'f_http_wireless', type: 'checkbox', value:  nvram.web_wl_filter == 0 },
						{ title: '<h5>User Interface Settings</h5>' },
						{ title: 'Interface Theme', name: 'web_css', type: 'select', help: 'With AdvancedTomato you get very few built in skins, others are available on AdvancedTomato Themes Directory. This way we can save space on router for more important functions.',
							options: [['tomato','Default'],
							['css/schemes/green-scheme','Green Color Scheme'],
							['css/schemes/red-scheme','Red Color Scheme'],
							['css/schemes/torquoise-scheme','Torquoise Color Scheme'],
							['ext/custom','Custom (ext/custom.css)'],
							['online', 'On-line from ATTD']], value: nvram.web_css },
						{ title    : 'Navigation Reveal', name: 'at_nav_action', type: 'select', help: 'This option allows you to change the method you use navigation menu (on the left side).',
							options: [ [ 'click', 'Mouse Click' ], ['hover', 'Mouse Over'] ], value: nvram.at_nav_action },
						{ title: 'Default Navigation State', name: 'at_nav_state', type: 'select', help: 'You can always toggle navigation style by clicking an icon right to logo, but doing so won\'t change default state.',
							options: [['default', 'Default'], ['collapsed', 'Collapsed']], value: nvram.at_nav_state },
						{ title: 'ATTD ID#', indent: 2, name: 'ttb_css', type: 'text', maxlen: 25, size: 30, value: nvram.ttb_css, suffix: 'Theme ID# from <a href="http://advancedtomato.com/themes/" target="_blank"><u><i>ATTD themes gallery</i></u></a>' },
						{ title: 'Web GUI directory', name: 'web_dir', type: 'select', help: 'Experts only! This will change directory from which Tomato Web handler is reading the interface files from. You should only change this if you have another interface in specific directory',
							options: [['default','Default: /www'], ['jffs', 'Custom: /jffs/www (Experts Only!)'], ['opt', 'Custom: /opt/www (Experts Only!)'], ['tmp', 'Custom: /tmp/www (Experts Only!)']], value: nvram.web_dir, suffix: ' <small>Please be sure of your decision before change this settings!</small>' },
						{ title: 'Navigation Menu', help: "This option allows you to extend navigation menu javascript object (See Tomato.js source code for more info). This is advanced option so take care! Only JSON format accepted!",
							name: 'at_nav', type: 'textarea', style: 'width: 100%; height: 100px;', value: nvram.at_nav }
					];

					// createFieldTable('', m, '#section-gui', 'fields-table');
					$('#section-gui').forms(m);
				</script>
			</div>
		</div>

		<div class="box" data-box="admin-weblogin">
			<div class="heading">Authorization Settings</div>
			<div class="content" id="section-weblogin">
				<script type="text/javascript">
					$('#section-weblogin').forms([
						{ title: 'Username', name: 'http_username', type: 'text', value: nvram.http_username, suffix: '&nbsp;<small>(empty field means "admin")</small>' },
						{ title: 'Allow web login as "root"', name: 'f_http_root', type: 'checkbox', value: nvram.http_root == 1 },
						{ title: 'Password', name: 'set_password_1', type: 'password', value: '**********' },
						{ title: 'Repeat Password', indent: 2, name: 'set_password_2', type: 'password', value: '**********' }
					]);
				</script>
			</div>
		</div>


		<div class="box" id="section-ssh" data-box="access-ssh">
			<div class="heading">SSH Daemon <span class="ssh-status"></span></div>
			<div class="content">
				<script type="text/javascript">
					$('#section-ssh .content').forms([
						{ title: 'Enable at Startup', name: 'f_sshd_eas', type: 'checkbox', value: nvram.sshd_eas == 1 },
						{ title: 'Extended MOTD', name: 'f_sshd_motd', type: 'checkbox', value: nvram.sshd_motd == 1 },
						{ title: 'Remote Access', name: 'f_sshd_remote', type: 'checkbox', value: nvram.sshd_remote == 1 },
						{ title: 'Remote Port', indent: 2, name: 'sshd_rport', type: 'text', maxlen: 5, size: 7, value: nvram.sshd_rport },
						{ title: 'Remote Forwarding', name: 'f_sshd_forwarding', type: 'checkbox', value: nvram.sshd_forwarding == 1 },
						{ title: 'Port', name: 'sshd_port', type: 'text', maxlen: 5, size: 7, value: nvram.sshd_port },
						{ title: 'Allow Password Login', name: 'f_sshd_pass', type: 'checkbox', value: nvram.sshd_pass == 1 },
						{ title: 'Authorized Keys', name: 'sshd_authkeys', style: 'width: 100%; height: 100px;', type: 'textarea', value: nvram.sshd_authkeys }
					]);
					$('#section-ssh .heading').append('<a href="#" data-toggle="tooltip" class="pull-right" title="' + (sdup ? 'Stop' : 'Start') + ' SSH Daemon" onclick="toggle(\'sshd\', sdup)" id="_sshd_button">'
						+ (sdup ? '<i class="icon-stop"></i>' : '<i class="icon-play"></i>') + '</a>');
					$('.ssh-status').html((sdup ? '<small style="color: green;">(Running)</small>' : '<small style="color: red;">(Stopped)</small>'));
				</script>
			</div>
		</div>

		<div class="box" id="section-telnet" data-box="access-telnet">
			<div class="heading">Telnet Daemon <span class="telnet-status"></span></div>
			<div class="content">
				<script type="text/javascript">
					$('#section-telnet .content').forms([
						{ title: 'Enable at Startup', name: 'f_telnetd_eas', type: 'checkbox', value: nvram.telnetd_eas == 1 },
						{ title: 'Port', name: 'telnetd_port', type: 'text', maxlen: 5, size: 7, value: nvram.telnetd_port }
					]);
					$('#section-telnet .heading').append('<a href="#" data-toggle="tooltip" class="pull-right" title="' + (tdup ? 'Stop' : 'Start') + ' Telnet Daemon" onclick="toggle(\'telnetd\', tdup)" id="_telnetd_button">'
						+ (tdup ? '<i class="icon-stop"></i>' : '<i class="icon-play"></i>') + '</a>');
					$('.telnet-status').html((tdup ? '<small style="color: green;">(Running)</small>' : '<small style="color: red;">(Stopped)</small>'));
				</script>
			</div>
		</div>

		<div class="box" id="section-restrict" data-box="access-restrict">
			<div class="heading">Admin Restrictions</div>
			<div class="content">
				<script type="text/javascript">
					$('#section-restrict .content').forms([
						{ title: 'Allowed Remote IP Address', name: 'f_rmgt_sip', type: 'text', maxlen: 512, size: 64, value: nvram.rmgt_sip,
							suffix: '<small>(optional; ex: "1.1.1.1", "1.1.1.0/24", "1.1.1.1 - 2.2.2.2" or "me.example.com")</small>' },
						{ title: 'Limit Connection Attempts', multi: [
							{ suffix: ' SSH &nbsp; / &nbsp;', name: 'f_limit_ssh', type: 'checkbox', value: (shlimit[0] & 1) != 0 },
							{ suffix: ' Telnet &nbsp;', name: 'f_limit_telnet', type: 'checkbox', value: (shlimit[0] & 2) != 0 }
						] },
						{ title: '', indent: 2, multi: [
							{ name: 'f_limit_hit', type: 'text', maxlen: 4, size: 6, suffix: 'every ', value: shlimit[1] },
							{ name: 'f_limit_sec', type: 'text', maxlen: 4, size: 6, suffix: 'seconds', value: shlimit[2] }
						] }
					]);
				</script>
			</div>
		</div>

		<button type="button" value="Save" id="save-button" onclick="save();" class="btn btn-primary">Save <i class="icon-check"></i></button>
		<button type="button" value="Cancel" id="cancel-button" onclick="javascript:reloadPage();" class="btn">Cancel <i class="icon-cancel"></i></button>
		<span id="footer-msg" class="alert alert-warning" style="visibility: hidden;"></span>
	</form>

	<script type="text/javascript">init(); verifyFields(null, 1);</script>
</content>