hotspotbilling/phpnuxbill
1
1
Fork 0
mirror of https://github.com/hotspotbilling/phpnuxbill.git synced 2024-09-20 14:56:23 +08:00
Code Issues Packages Projects Releases Wiki Activity
phpnuxbill/radius.php

463 lines
21 KiB
PHP
Raw Normal View History

Radius Rest API
2024-07-06 23:49:02 +08:00
<?php
/**
* PHP Mikrotik Billing (https://github.com/hotspotbilling/phpnuxbill)
* by https://t.me/ibnux
*
* Authorize
* - Voucher activation
* Authenticate
* - is it allow to login
* Accounting
* - log
**/
header("Content-Type: application/json");
include "init.php";
$action = $_SERVER['HTTP_X_FREERADIUS_SECTION'];
if (empty($action)) {
$action = _get('action');
}
$code = 200;
add realm
2024-07-12 14:45:32 +08:00
//debug
// if (!empty($action)) {
// file_put_contents("$action.json", json_encode([
// 'header' => $_SERVER,
// 'get' => $_GET,
// 'post' => $_POST,
// 'time' => time()
// ]));
// }
Radius Rest API
2024-07-06 23:49:02 +08:00
try {
switch ($action) {
case 'authenticate':
$username = _req('username');
$password = _req('password');
simplify Chap verify RadiusRest
2024-08-07 12:10:43 +08:00
$CHAPassword = _req('CHAPassword');
$CHAPchallenge = _req('CHAPchallenge');
radius rest, check pppoe_username and pppoe_password. allow empty password for voucher
2024-08-13 11:32:34 +08:00
$isCHAP = false;
simplify Chap verify RadiusRest
2024-08-07 12:10:43 +08:00
if (!empty($CHAPassword)) {
radius rest, check pppoe_username and pppoe_password. allow empty password for voucher
2024-08-13 11:32:34 +08:00
$c = ORM::for_table('tbl_customers')->select('password')->select('pppoe_password')->whereRaw("BINARY `username` = '$username'")->find_one();
if ($c) {
if (Password::chap_verify($c['password'], $CHAPassword, $CHAPchallenge)) {
$password = $c['password'];
$isVoucher = false;
$isCHAP = true;
} else if (!empty($c['pppoe_password']) && Password::chap_verify($c['pppoe_password'], $CHAPassword, $CHAPchallenge)) {
$password = $c['pppoe_password'];
$isVoucher = false;
$isCHAP = true;
simplify Chap verify RadiusRest
2024-08-07 12:10:43 +08:00
} else {
radius rest, check pppoe_username and pppoe_password. allow empty password for voucher
2024-08-13 11:32:34 +08:00
// check if voucher
if (Password::chap_verify($username, $CHAPassword, $CHAPchallenge)) {
$isVoucher = true;
$password = $username;
} else {
// no password is voucher
if (Password::chap_verify('', $CHAPassword, $CHAPchallenge)) {
$isVoucher = true;
$password = $username;
} else {
show_radius_result(['Reply-Message' => 'Username or Password is wrong'], 401);
}
}
}
} else {
$c = ORM::for_table('tbl_customers')->select('password')->select('pppoe_password')->whereRaw("BINARY `pppoe_username` = '$username'")->find_one();
if ($c) {
if (Password::chap_verify($c['password'], $CHAPassword, $CHAPchallenge)) {
$password = $c['password'];
$isVoucher = false;
$isCHAP = true;
} else if (!empty($c['pppoe_password']) && Password::chap_verify($c['pppoe_password'], $CHAPassword, $CHAPchallenge)) {
$password = $c['pppoe_password'];
$isVoucher = false;
$isCHAP = true;
} else {
// check if voucher
if (Password::chap_verify($username, $CHAPassword, $CHAPchallenge)) {
$isVoucher = true;
$password = $username;
} else {
// no password is voucher
if (Password::chap_verify('', $CHAPassword, $CHAPchallenge)) {
$isVoucher = true;
$password = $username;
} else {
show_radius_result(['Reply-Message' => 'Username or Password is wrong'], 401);
}
}
}
simplify Chap verify RadiusRest
2024-08-07 12:10:43 +08:00
}
}
} else {
radius rest, check pppoe_username and pppoe_password. allow empty password for voucher
2024-08-13 11:32:34 +08:00
if (!empty($username) && empty($password)) {
// Voucher with empty password
$isVoucher = true;
$password = $username;
} else if (empty($username) || empty($password)) {
simplify Chap verify RadiusRest
2024-08-07 12:10:43 +08:00
show_radius_result([
"control:Auth-Type" => "Reject",
"reply:Reply-Message" => 'Login invalid......'
], 401);
}
add realm
2024-07-12 14:45:32 +08:00
}
Radius Rest API
2024-07-06 23:49:02 +08:00
if ($username == $password) {
case sensitive voucher check
2024-08-11 20:54:33 +08:00
$username = Text::alphanumeric($username, "-_.,");
$d = ORM::for_table('tbl_voucher')->whereRaw("BINARY `code` = '$username'")->find_one();
Radius Rest API
2024-07-06 23:49:02 +08:00
} else {
fix logic password. case sensitive username
2024-08-12 14:34:19 +08:00
$d = ORM::for_table('tbl_customers')->whereRaw("BINARY `username` = '$username'")->find_one();
add realm
2024-07-12 14:45:32 +08:00
if ($d['password'] != $password) {
if ($d['pppoe_password'] != $password) {
unset($d);
}
}
Radius Rest API
2024-07-06 23:49:02 +08:00
}
if ($d) {
header("HTTP/1.1 204 No Content");
die();
} else {
show_radius_result([
"control:Auth-Type" => "Reject",
"reply:Reply-Message" => 'Login invalid......'
], 401);
}
break;
case 'authorize':
$username = _req('username');
$password = _req('password');
$isVoucher = ($username == $password);
simplify Chap verify RadiusRest
2024-08-07 12:10:43 +08:00
$CHAPassword = _req('CHAPassword');
$CHAPchallenge = _req('CHAPchallenge');
radius rest, check pppoe_username and pppoe_password. allow empty password for voucher
2024-08-13 11:32:34 +08:00
$isCHAP = false;
simplify Chap verify RadiusRest
2024-08-07 12:10:43 +08:00
if (!empty($CHAPassword)) {
radius rest, check pppoe_username and pppoe_password. allow empty password for voucher
2024-08-13 11:32:34 +08:00
$c = ORM::for_table('tbl_customers')->select('password')->select('pppoe_password')->whereRaw("BINARY `username` = '$username'")->find_one();
if ($c) {
if (Password::chap_verify($c['password'], $CHAPassword, $CHAPchallenge)) {
$password = $c['password'];
$isVoucher = false;
$isCHAP = true;
} else if (!empty($c['pppoe_password']) && Password::chap_verify($c['pppoe_password'], $CHAPassword, $CHAPchallenge)) {
$password = $c['pppoe_password'];
$isVoucher = false;
$isCHAP = true;
simplify Chap verify RadiusRest
2024-08-07 12:10:43 +08:00
} else {
radius rest, check pppoe_username and pppoe_password. allow empty password for voucher
2024-08-13 11:32:34 +08:00
// check if voucher
if (Password::chap_verify($username, $CHAPassword, $CHAPchallenge)) {
$isVoucher = true;
$password = $username;
} else {
// no password is voucher
if (Password::chap_verify('', $CHAPassword, $CHAPchallenge)) {
$isVoucher = true;
$password = $username;
} else {
show_radius_result(['Reply-Message' => 'Username or Password is wrong'], 401);
}
}
}
} else {
$c = ORM::for_table('tbl_customers')->select('password')->select('pppoe_password')->whereRaw("BINARY `pppoe_username` = '$username'")->find_one();
if ($c) {
if (Password::chap_verify($c['password'], $CHAPassword, $CHAPchallenge)) {
$password = $c['password'];
$isVoucher = false;
$isCHAP = true;
} else if (!empty($c['pppoe_password']) && Password::chap_verify($c['pppoe_password'], $CHAPassword, $CHAPchallenge)) {
$password = $c['pppoe_password'];
$isVoucher = false;
$isCHAP = true;
} else {
// check if voucher
if (Password::chap_verify($username, $CHAPassword, $CHAPchallenge)) {
$isVoucher = true;
$password = $username;
} else {
// no password is voucher
if (Password::chap_verify('', $CHAPassword, $CHAPchallenge)) {
$isVoucher = true;
$password = $username;
} else {
show_radius_result(['Reply-Message' => 'Username or Password is wrong'], 401);
}
}
}
simplify Chap verify RadiusRest
2024-08-07 12:10:43 +08:00
}
add acctinputoctets acctoutputoctets
2024-08-06 17:25:36 +08:00
}
radius rest, check pppoe_username and pppoe_password. allow empty password for voucher
2024-08-13 11:32:34 +08:00
} else {
if (!empty($username) && empty($password)) {
// Voucher with empty password
$isVoucher = true;
$password = $username;
} else if (empty($username) || empty($password)) {
add acctinputoctets acctoutputoctets
2024-08-06 17:25:36 +08:00
show_radius_result([
"control:Auth-Type" => "Reject",
"reply:Reply-Message" => 'Login invalid......'
], 401);
}
}
fix logic password. case sensitive username
2024-08-12 14:34:19 +08:00
$tur = ORM::for_table('tbl_user_recharges')->whereRaw("BINARY `username` = '$username'")->find_one();
Radius Rest API
2024-07-06 23:49:02 +08:00
if ($tur) {
radius rest, check pppoe_username and pppoe_password. allow empty password for voucher
2024-08-13 11:32:34 +08:00
if (!$isVoucher && !$isCHAP) {
$d = ORM::for_table('tbl_customers')->select('password')->select('pppoe_password')->whereRaw("BINARY `username` = '$username'")->find_one();
if ($d) {
if ($d['password'] != $password) {
if ($d['pppoe_password'] != $password) {
show_radius_result(['Reply-Message' => 'Username or Password is wrong'], 401);
}
}
} else {
$d = ORM::for_table('tbl_customers')->select('password')->select('pppoe_password')->whereRaw("BINARY `pppoe_username` = '$username'")->find_one();
if ($d) {
if ($d['password'] != $password) {
if ($d['pppoe_password'] != $password) {
show_radius_result(['Reply-Message' => 'Username or Password is wrong'], 401);
}
}
add realm
2024-07-12 14:45:32 +08:00
}
Radius Rest API
2024-07-06 23:49:02 +08:00
}
}
process_radiust_rest($tur, $code);
} else {
if ($isVoucher) {
case sensitive voucher check
2024-08-11 20:54:33 +08:00
$username = Text::alphanumeric($username, "-_.,");
$v = ORM::for_table('tbl_voucher')->whereRaw("BINARY `code` = '$username'")->where('routers', 'radius')->find_one();
Radius Rest API
2024-07-06 23:49:02 +08:00
if ($v) {
if ($v['status'] == 0) {
Hotspot Radius Voucher Only done
2024-07-10 16:47:31 +08:00
if (Package::rechargeUser(0, $v['routers'], $v['id_plan'], "Voucher", $username)) {
Radius Rest API
2024-07-06 23:49:02 +08:00
$v->status = "1";
used date for voucher
2024-07-24 09:56:40 +08:00
$v->used_date = date('Y-m-d H:i:s');
Radius Rest API
2024-07-06 23:49:02 +08:00
$v->save();
Update radius.php
2024-08-14 20:27:06 +08:00
$tur = ORM::for_table('tbl_user_recharges')->whereRaw("BINARY `username` = '$username'")->find_one();
Radius Rest API
2024-07-06 23:49:02 +08:00
if ($tur) {
process_radiust_rest($tur, $code);
} else {
show_radius_result(['Reply-Message' => 'Voucher activation failed'], 401);
}
} else {
show_radius_result(['Reply-Message' => 'Voucher activation failed.'], 401);
}
} else {
show_radius_result(['Reply-Message' => 'Voucher Expired...'], 401);
}
} else {
show_radius_result(['Reply-Message' => 'Voucher Expired..'], 401);
}
} else {
show_radius_result(['Reply-Message' => 'Internet Plan Expired..'], 401);
}
}
break;
case 'accounting':
$username = _req('username');
if (empty($username)) {
add realm
2024-07-12 14:45:32 +08:00
show_radius_result([
"control:Auth-Type" => "Reject",
"reply:Reply-Message" => 'Username empty'
], 200);
Radius Rest API
2024-07-06 23:49:02 +08:00
die();
}
header("HTTP/1.1 200 ok");
$d = ORM::for_table('rad_acct')
Fix rad_acct
2024-08-14 10:11:11 +08:00
->whereRaw("BINARY `username` = '$username'")
Radius Rest API
2024-07-06 23:49:02 +08:00
->where('acctstatustype', _post('acctStatusType'))
->findOne();
if (!$d) {
$d = ORM::for_table('rad_acct')->create();
}
add 0 default
2024-08-09 15:09:34 +08:00
$acctOutputOctets = _post('acctOutputOctets', 0);
$acctInputOctets = _post('acctInputOctets', 0);
radius rest, check pppoe_username and pppoe_password. allow empty password for voucher
2024-08-13 11:32:34 +08:00
if (_post('acctStatusType') == 'Stop') {
log data usage in th start status
2024-08-09 15:33:43 +08:00
// log in the Start only
$start = ORM::for_table('rad_acct')
Fix rad_acct
2024-08-14 10:11:11 +08:00
->whereRaw("BINARY `username` = '$username'")
log data usage in th start status
2024-08-09 15:33:43 +08:00
->where('acctstatustype', 'Start')
->findOne();
if (!$start) {
$start = ORM::for_table('rad_acct')->create();
}
if ($acctOutputOctets !== false && $acctInputOctets !== false) {
Fix calculate data
2024-08-09 17:25:39 +08:00
$start->acctOutputOctets += intval($acctOutputOctets);
$start->acctInputOctets += intval($acctInputOctets);
log data usage in th start status
2024-08-09 15:33:43 +08:00
} else {
$start->acctOutputOctets = 0;
$start->acctInputOctets = 0;
}
Fix rad_acct
2024-08-14 10:11:11 +08:00
$start->acctsessionid = _post('acctSessionId');
$start->username = $username;
$start->realm = _post('realm');
$start->nasipaddress = _post('nasip');
$start->nasid = _post('nasid');
$start->nasportid = _post('nasPortId');
$start->nasporttype = _post('nasPortType');
$start->framedipaddress = _post('framedIPAddress');
$start->acctstatustype = _post('acctStatusType');
$start->macaddr = _post('macAddr');
$start->dateAdded = date('Y-m-d H:i:s');
log data usage in th start status
2024-08-09 15:33:43 +08:00
$start->save();
add acctinputoctets acctoutputoctets
2024-08-06 17:25:36 +08:00
$d->acctOutputOctets = 0;
$d->acctInputOctets = 0;
radius rest, check pppoe_username and pppoe_password. allow empty password for voucher
2024-08-13 11:32:34 +08:00
} else {
log data usage in th start status
2024-08-09 15:33:43 +08:00
if ($acctOutputOctets !== false && $acctInputOctets !== false) {
Fix calculate data
2024-08-09 17:25:39 +08:00
$d->acctOutputOctets += intval($acctOutputOctets);
$d->acctInputOctets += intval($acctInputOctets);
log data usage in th start status
2024-08-09 15:33:43 +08:00
} else {
$d->acctOutputOctets = 0;
$d->acctInputOctets = 0;
}
add acctinputoctets acctoutputoctets
2024-08-06 17:25:36 +08:00
}
Radius Rest API
2024-07-06 23:49:02 +08:00
$d->acctsessionid = _post('acctSessionId');
$d->username = $username;
add realm
2024-07-12 14:45:32 +08:00
$d->realm = _post('realm');
Radius Rest API
2024-07-06 23:49:02 +08:00
$d->nasipaddress = _post('nasip');
$d->nasid = _post('nasid');
$d->nasportid = _post('nasPortId');
$d->nasporttype = _post('nasPortType');
$d->framedipaddress = _post('framedIPAddress');
$d->acctstatustype = _post('acctStatusType');
$d->macaddr = _post('macAddr');
$d->dateAdded = date('Y-m-d H:i:s');
$d->save();
radius rest, check pppoe_username and pppoe_password. allow empty password for voucher
2024-08-13 11:32:34 +08:00
if ($d->acctstatustype == 'Start') {
Update radius.php
2024-08-14 20:27:06 +08:00
$tur = ORM::for_table('tbl_user_recharges')->whereRaw("BINARY `username` = '$username'")->where('status', 'on')->where('routers', 'radius')->find_one();
update acctOutputOctets for limiting data usage
2024-08-06 17:39:03 +08:00
$plan = ORM::for_table('tbl_plans')->where('id', $tur['plan_id'])->find_one();
if ($plan['limit_type'] == "Data_Limit" || $plan['limit_type'] == "Both_Limit") {
$totalUsage = $d['acctOutputOctets'] + $d['acctInputOctets'];
$attrs['reply:Mikrotik-Total-Limit'] = Text::convertDataUnit($plan['data_limit'], $plan['data_unit']) - $totalUsage;
if ($attrs['reply:Mikrotik-Total-Limit'] < 0) {
$attrs['reply:Mikrotik-Total-Limit'] = 0;
show_radius_result(["control:Auth-Type" => "Accept", 'Reply-Message' => 'You have exceeded your data limit.'], 401);
}
}
}
add realm
2024-07-12 14:45:32 +08:00
show_radius_result([
"control:Auth-Type" => "Accept",
"reply:Reply-Message" => 'Saved'
], 200);
Radius Rest API
2024-07-06 23:49:02 +08:00
break;
}
die();
} catch (Throwable $e) {
Message::sendTelegram(
"Sistem Error.\n" .
$e->getMessage() . "\n" .
2024.7.15
2024-07-15 15:40:36 +08:00
$e->getTraceAsString()
Radius Rest API
2024-07-06 23:49:02 +08:00
);
add realm
2024-07-12 14:45:32 +08:00
show_radius_result(['Reply-Message' => 'Command Failed : ' . $action], 401);
Radius Rest API
2024-07-06 23:49:02 +08:00
} catch (Exception $e) {
Message::sendTelegram(
"Sistem Error.\n" .
$e->getMessage() . "\n" .
2024.7.15
2024-07-15 15:40:36 +08:00
$e->getTraceAsString()
Radius Rest API
2024-07-06 23:49:02 +08:00
);
add realm
2024-07-12 14:45:32 +08:00
show_radius_result(['Reply-Message' => 'Command Failed : ' . $action], 401);
Radius Rest API
2024-07-06 23:49:02 +08:00
}
add realm
2024-07-12 14:45:32 +08:00
show_radius_result(['Reply-Message' => 'Invalid Command : ' . $action], 401);
Radius Rest API
2024-07-06 23:49:02 +08:00
function process_radiust_rest($tur, $code)
{
global $config;
$plan = ORM::for_table('tbl_plans')->where('id', $tur['plan_id'])->find_one();
$bw = ORM::for_table("tbl_bandwidth")->find_one($plan['id_bw']);
if ($bw['rate_down_unit'] == 'Kbps') {
$unitdown = 'K';
} else {
$unitdown = 'M';
}
if ($bw['rate_up_unit'] == 'Kbps') {
$unitup = 'K';
} else {
$unitup = 'M';
}
$rate = $bw['rate_up'] . $unitup . "/" . $bw['rate_down'] . $unitdown;
$rates = explode('/', $rate);
if (!empty(trim($bw['burst']))) {
$ratos = $rate . ' ' . $bw['burst'];
} else {
$ratos = $rates[0] . '/' . $rates[1];
}
$attrs = [];
$timeexp = strtotime($tur['expiration'] . ' ' . $tur['time']);
$attrs['reply:Reply-Message'] = 'success';
$attrs['Simultaneous-Use'] = $plan['shared_users'];
$attrs['reply:Mikrotik-Wireless-Comment'] = $plan['name_plan'] . ' | ' . $tur['expiration'] . ' ' . $tur['time'];
$attrs['reply:Ascend-Data-Rate'] = str_replace('M', '000000', str_replace('K', '000', $rates[1]));
$attrs['reply:Ascend-Xmit-Rate'] = str_replace('M', '000000', str_replace('K', '000', $rates[0]));
$attrs['reply:Mikrotik-Rate-Limit'] = $ratos;
$attrs['reply:WISPr-Bandwidth-Max-Up'] = str_replace('M', '000000', str_replace('K', '000', $rates[0]));
$attrs['reply:WISPr-Bandwidth-Max-Down'] = str_replace('M', '000000', str_replace('K', '000', $rates[1]));
$attrs['reply:expiration'] = date('d M Y H:i:s', $timeexp);
$attrs['reply:WISPr-Session-Terminate-Time'] = date('Y-m-d', $timeexp) . 'T' . date('H:i:sP', $timeexp);
pppoe support
2024-07-10 15:58:30 +08:00
if ($plan['type'] == 'PPPOE') {
$attrs['reply:Framed-Pool'] = $plan['pool'];
}
Radius Rest API
2024-07-06 23:49:02 +08:00
if ($plan['typebp'] == "Limited") {
update acctOutputOctets for limiting data usage
2024-08-06 17:39:03 +08:00
if ($plan['limit_type'] == "Data_Limit" || $plan['limit_type'] == "Both_Limit") {
Fix rad_acct
2024-08-14 10:11:11 +08:00
$raddact = ORM::for_table('rad_acct')->whereRaw("BINARY `username` = '$tur[username]'")->where('acctstatustype', 'Start')->find_one();
intval acctInputOctets
2024-08-09 18:36:45 +08:00
$totalUsage = intval($raddact['acctOutputOctets']) + intval($raddact['acctInputOctets']);
update acctOutputOctets for limiting data usage
2024-08-06 17:39:03 +08:00
$attrs['reply:Mikrotik-Total-Limit'] = Text::convertDataUnit($plan['data_limit'], $plan['data_unit']) - $totalUsage;
if ($attrs['reply:Mikrotik-Total-Limit'] < 0) {
$attrs['reply:Mikrotik-Total-Limit'] = 0;
show_radius_result(["control:Auth-Type" => "Accept", 'Reply-Message' => 'You have exceeded your data limit.'], 401);
}
}
Radius Rest API
2024-07-06 23:49:02 +08:00
if ($plan['limit_type'] == "Time_Limit") {
if ($plan['time_unit'] == 'Hrs')
$timelimit = $plan['time_limit'] * 60 * 60;
else
$timelimit = $plan['time_limit'] * 60;
$attrs['reply:Max-All-Session'] = $timelimit;
$attrs['reply:Expire-After'] = $timelimit;
} else if ($plan['limit_type'] == "Data_Limit") {
if ($plan['data_unit'] == 'GB')
$datalimit = $plan['data_limit'] . "000000000";
else
$datalimit = $plan['data_limit'] . "000000";
$attrs['reply:Max-Data'] = $datalimit;
$attrs['reply:Mikrotik-Recv-Limit-Gigawords'] = $datalimit;
$attrs['reply:Mikrotik-Xmit-Limit-Gigawords'] = $datalimit;
} else if ($plan['limit_type'] == "Both_Limit") {
if ($plan['time_unit'] == 'Hrs')
$timelimit = $plan['time_limit'] * 60 * 60;
else
$timelimit = $plan['time_limit'] * 60;
if ($plan['data_unit'] == 'GB')
$datalimit = $plan['data_limit'] . "000000000";
else
$datalimit = $plan['data_limit'] . "000000";
$attrs['reply:Max-All-Session'] = $timelimit;
$attrs['reply:Max-Data'] = $datalimit;
$attrs['reply:Mikrotik-Recv-Limit-Gigawords'] = $datalimit;
$attrs['reply:Mikrotik-Xmit-Limit-Gigawords'] = $datalimit;
}
}
$result = array_merge([
"control:Auth-Type" => "Accept",
"reply" => ["Reply-Message" => ['value' => 'success']]
], $attrs);
show_radius_result($result, $code);
}
function show_radius_result($array, $code = 200)
{
if ($code == 401) {
header("HTTP/1.1 401 Unauthorized");
} else if ($code == 200) {
header("HTTP/1.1 200 OK");
} else if ($code == 204) {
header("HTTP/1.1 204 No Content");
die();
}
die(json_encode($array));
}
Reference in a new issue Copy permalink