Syed Jahanzaib – Personal Blog to Share Knowledge !

August 12, 2015

Passing PHP variables to Shell Script with CAPTCHA code [Example renew account via web]

Filed under: Linux Related, Radius Manager — Tags: , , , , — Syed Jahanzaib / Pinochio~:) @ 2:05 PM

For my personnel archive purpose only:

All of these tests were made in lab and later on tested on production network as well and worked perfectly. BUT before deploying it in production, one must ensure security , specially try to host it on https server, MUST add captcha in form to prevent BOTS attack, + one should consider BASH security and trimming + some functions to match with real live environment. all can be done easily if you have some knowledge on html/php/bash.

 

Scenario:

A simple portal page is required where user can input there user name and refill code in order to renew there internet account on billing system [in this example radius manager is being used]. then this html page will pass the user name and card number variable to php page which will execute an shell script to trigger renewal action based on the supplied variables. The shell script will check for following

  • Check for Valid Users name in Billing
  • Check for Valid Card number in billing refill card database
  • Check if card is used or not
  • Check the user current package and compare it with the card value
  • If all OK, renew the user account for next 30 days (or whatever actions is required)
  • Output the result to browser

 

 

Following file will present FORM where user can enter there user name and pin code/refill code.

input.html

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Refill your account ! </title>
</head>
<body>
<h1>Refill your account using scratch code:</h1>
<form method="post" action="function.php">
User Name: <br />
<input type="text" name="USERNAME" size="35" />
<br />
Card No: <br />
<input type="text" name="CARDNO" size="35" />
<br /> <br />
<input type="submit" value="Submit:" />
<br />
</form>
</body>
</html>

Following file will execute the SHELL script with the supplied username and pincode variable and echo there result in the browser.

function.php

<?php
$USERNAME = $_POST[‘USERNAME’];
$CARDNO = $_POST[‘CARDNO’];

if(empty($USERNAME ) || empty($CARDNO )) {
echo “<h2>You must fill in all fields</h2>\n” ;
die (“Click Back to start again.”);
}
echo “<h2>You have entered the following information:</h2>”;
echo “<pre>Customer name\t=\t$USERNAME <br></pre> “;
echo “<pre>Card No\t\t=\t$CARDNO</pre>”;

echo “<h2>BILLING RESPONSE</h2>”;
echo “======================”;
$var = shell_exec(“TERM=xterm /var/www/html/renew.sh $USERNAME $CARDNO”);
echo “<pre>$var</pre>”;
?>







BASH Shell script which will be executed by the function.php file 


Contents of /var/www/html/renew.sh


{lab testing version, working ok, it may contain lot of junk or it can be trimmed, it’s upto you to make it look pro}


#!/bin/bash

#set -x

# SCRIPT TO RENEW USER ACCOUNT IN RADIUS MANAGER VIA WEB PORTAL

SQLUSER=”root”

SQLPASS=”zaib1234″

echo $1 $2 > /tmp/user-card

USR=`cat /tmp/user-card | awk {‘ print $1 ‘}`

CARD=`cat /tmp/user-card | awk {‘ print $2 ‘}`

NEXTEXPIRYADD=$(date +”%Y-%m-%d” -d “+31 days”)


#LOOK FOR EMPTY CARD NO IF ENTERED , EXIT

if [ “$1” == “” ]; then

echo -e “ERROR: ENTER USER NAME WITH CARD NUMBER PLEASE!”

exit 0

fi


#LOOK FOR VALID USER IN RADIUS

USRVALID=`mysql -u$SQLUSER -p$SQLPASS -e “use radius; SELECT srvid FROM radius.rm_users WHERE rm_users.username = ‘$USR’;”`

if [ “$USRVALID” == “” ]; then

echo -e “ERROR: USER NOT FOUND IN BILLING SYSTEM!!”

exit 0

fi


#LOOK FOR EMPTY CARD NO IF ENTERED , EXIT

if [ “$2” == “” ]; then

echo -e “ERROR: PLEASE ENTER CARD NUMBER!!”

exit 0

fi


# LOOK FOR USED CARDS

CARDSTATUS=`mysql -u$SQLUSER -p$SQLPASS -e “use radius; SELECT SQL_CALC_FOUND_ROWS cardnum, used, revoked, expiration, value, date, owner FROM rm_cards WHERE cardtype = ‘1’ AND cardnum = ‘$2’  ORDER BY cardnum ASC LIMIT 0, 50;” |  awk {‘print $8}’`

if [ -n “$CARDSTATUS” ]; then

echo -e “CARD IS ALREADY USED”

exit 0

fi


######################

# ACCOUNT EXPIRY CHECK

######################


TODAY=$(date +”%Y-%m-%d”)

TODAYDIGIT=`echo $TODAY  | sed -e ‘s/-//g’`

MONTH=$(date +”-%m”)

CMONTH=`echo $MONTH  | sed -e ‘s/-//g’`

MONTHYEAR=$(date +”%B-%Y”)

ALPHAMONTHYEAR=`echo $MONTHYEAR #| sed -e ‘s/-//g’`

SRVEXPIRYFULL=`mysql -u$SQLUSER -p$SQLPASS -e “use radius; SELECT expiration FROM radius.rm_users WHERE username = ‘$USR’;” |awk ‘FNR == 2’`

SRVEXPIRYFULLD=`mysql -u$SQLUSER -p$SQLPASS -e “use radius; SELECT expiration FROM radius.rm_users WHERE username = ‘$USR’;” |awk ‘{print $1}’ | sed ‘s/expiration//’`

SRVEXPIRY=`mysql -u$SQLUSER -p$SQLPASS -e “use radius; SELECT expiration FROM radius.rm_users WHERE username = ‘$USR’;” |awk ‘FNR == 2’ | sed -e ‘s/-//g’ | sed ‘s/00:.*//’`

LOGOFFDATE=`mysql -u$SQLUSER -p$SQLPASS -e “use radius; SELECT lastlogoff FROM radius.rm_users WHERE username = ‘$USR’;”  |awk ‘FNR == 2 {print $1,$2}’`

SRVID=`mysql -u$SQLUSER -p$SQLPASS -e “use radius; SELECT srvid FROM radius.rm_users WHERE rm_users.username = ‘$USR’;” |awk ‘FNR == 2 {print $1}’`

SRVPRICE=`mysql -u$SQLUSER -p$SQLPASS -e “use radius;  SELECT unitprice FROM radius.rm_services WHERE rm_services.srvid = $SRVID;” |awk ‘FNR == 2 {print $1}’ | cut -f1 -d”.”`

CARDPRICE=`mysql -u$SQLUSER -p$SQLPASS -e “use radius;  SELECT value FROM rm_cards WHERE cardnum = $CARD;” |awk ‘FNR == 2 {print $1}’ | cut -f1 -d”.”`

#LOOK FOR USER ACTUAL SERVICE NAME

PKGNAME=`mysql -u$SQLUSER -p$SQLPASS -e “use radius; SELECT srvname FROM radius.rm_services WHERE rm_services.srvid = ‘$SRVID’;” |awk ‘FNR == 2’`

# Look for Pakacge Quota trafficunitcomb

PKGQUOTA=`mysql -u$SQLUSER -p$SQLPASS -e “use radius; SELECT trafficunitcomb FROM rm_services WHERE srvid= ‘$SRVID’;” |awk ‘FNR == 2’`

PKGQUOTAB=$(($PKGQUOTA / 1024))

# Acount Registration FIRST n LAST NAME

USERFLNAME=`mysql -u$SQLUSER -p$SQLPASS -e “use radius; SELECT firstname,lastname FROM radius.rm_users WHERE rm_users.username = ‘$1’;” |awk ‘FNR == 2 {print $1,$2,$3}’;`


# LOOK FOR VALID REFILL CARD CODE IN RADIUS CARDS LIST

CARDVALIDATION=`mysql -u$SQLUSER -p$SQLPASS -e “use radius; SELECT value, expiration FROM rm_cards WHERE cardnum = ‘$CARD’ AND used = ‘0000-00-00 00:00:00’;”`

if [ “$CARDVALIDATION” == “” ]; then

echo -e “ERROR: INVALID CARD NUMBER!”

exit 0

else


# IF CARD VALUE IS LESS THEN CURRENT PACKAGE PRICE THEN PRINT ERROR AND GOTO END

if [ $CARDPRICE -lt $SRVPRICE ]

then

echo -e “ERROR: CARD PRICE IS NOT SUFFICIENT TO REFRESH $PKGNAME SERVICE”

exit 0

else


# IF CARD VALUE IS EQUAL OR HIGHER  THEN CURRENT PACKAGE PRICE THEN OK

if [ $CARDPRICE -eq $SRVPRICE ]

then

echo

fi


########### ACCOUNT STATUS EXPIRED TODAY ACTION ############

if [ $SRVEXPIRY -eq $TODAYDIGIT ]

then

echo “Account have been EXPIRED TODAY! Last LOGOUT date was $LOGOFFDATE”

NEXTEXPIRYADD=$(date +”%Y-%m-%d” -d “+31 days”)


# PRINT FETCHED VALUES , JUST FOR INFO / ZAIB

echo User Account  = $USR

echo User Actual Package at Billing = $PKGNAME PKR

echo Service Price at Billing = $SRVPRICE PKR

echo This Card Value is    = $CARDPRICE PKR

echo -e “Next Expiry =  $NEXTEXPIRYADD”


# ADD 30 DAYS VALUE TO EXPIRED USER ACCOUNT

mysql -u$SQLUSER -p$SQLPASS -e “use radius; UPDATE rm_users SET expiration = ‘$NEXTEXPIRYADD’ WHERE username = ‘$USR’;”


# ADD COMMENTS

mysql -u$SQLUSER -p$SQLPASS -e “use radius; UPDATE rm_users SET comment = ‘This account was last refresh from scratch code by SMS’ WHERE username = ‘$USR’;”


# ADD SYSLOG ENTRY

mysql -u$SQLUSER -p$SQLPASS -e “use radius; INSERT INTO rm_syslog (datetime, ip, name, eventid, data1) VALUES (NOW(), ‘n/a’, ‘SMSUSER_$USR’, ‘$USR’, ‘$USR renewd service > $PKGNAME’);”


# ADD ENTRY FOR CURRENT DATE TIME IN REFIL CARD TO PREVENT RE-USAGE OF SAME CARD NUMBER

mysql -u$SQLUSER -p$SQLPASS -e “use radius; UPDATE rm_cards SET owner = ‘$USR’, used = NOW() WHERE cardnum = ‘$CARD’;”


########### ACCOUNT STATUS EXPIRED IN PAST ACTION ############


elif [ $SRVEXPIRY -lt $TODAYDIGIT ]

then

echo “ACCOUNT WAS EXPIRED on $SRVEXPIRYFULL !  Last LOGOUT date was $LOGOFFDATE”

NEXTEXPIRYADD=$(date +”%Y-%m-%d” -d “+31 days”)


# PRINT FETCHED VALUES , JUST FOR INFO / ZAIB

echo User Account  = $USR

echo User Actual Package at Billing = $PKGNAME PKR

echo Service Price at Billing = $SRVPRICE PKR

echo This Card Value is    = $CARDPRICE PKR

echo -e “Next Expiry =  $NEXTEXPIRYADD”


# ADD 30 DAYS VALUE TO EXPIRED USER ACCOUNT

mysql -u$SQLUSER -p$SQLPASS -e “use radius; UPDATE rm_users SET expiration = ‘$NEXTEXPIRYADD’ WHERE username = ‘$USR’;”


# ADD COMMENTS

mysql -u$SQLUSER -p$SQLPASS -e “use radius; UPDATE rm_users SET comment = ‘This account was last refresh from scratch code by SMS’;”


# ADD SYSLOG ENTRY

mysql -u$SQLUSER -p$SQLPASS -e “use radius; INSERT INTO rm_syslog (datetime, ip, name, eventid, data1) VALUES (NOW(), ‘n/a’, ‘SMSUSER_$USR’, ‘$USR’, ‘$USR renewd service > $PKGNAME’);”


# ADD ENTRY FOR CURRENT DATE TIME IN REFIL CARD TO PREVENT RE-USAGE OF SAME CARD NUMBER

mysql -u$SQLUSER -p$SQLPASS -e “use radius; UPDATE rm_cards SET owner = ‘$USR’, used = NOW() WHERE cardnum = ‘$CARD’;”


# Update QUOTA for the USER

mysql -u$SQLUSER -p$SQLPASS -e “use radius; UPDATE rm_users SET comblimit = ‘$PKGQUOTAB’ WHERE username = ‘$USR’;”


else

########### ACCOUNT STATUS OK! ACTION ############


echo -e “User Billing Info:”

echo “Account STATUS= OK!”


NEXTEXPIRYADD=`mysql -u$SQLUSER -p$SQLPASS -e “use radius; select DATE_ADD(expiration, INTERVAL 31 DAY) as x from rm_users where username= ‘$USR’;” |awk ‘FNR == 2’`


# PRINT FETCHED VALUES , JUST FOR INFO / ZAIB

echo User Account  = $USR

echo Owner = $USERFLNAME

echo User Actual Package at Billing = $PKGNAME PKR

echo Service Price at Billing = $SRVPRICE PKR

echo This Card Value is    = $CARDPRICE PKR

echo -e “Next Expiry =  $NEXTEXPIRYADD”


NEXTEXPIRYADD=`mysql -u$SQLUSER -p$SQLPASS -e “use radius; select DATE_ADD(expiration, INTERVAL 31 DAY) as x from rm_users where username= ‘$USR’;” |awk ‘FNR == 2’`


# ADD 30 DAYS VALUE TO EXPIRED USER ACCOUNT

mysql -u$SQLUSER -p$SQLPASS -e “use radius; UPDATE rm_users SET expiration = ‘$NEXTEXPIRYADD’ WHERE username = ‘$USR’;”


# ADD COMMENTS

mysql -u$SQLUSER -p$SQLPASS -e “use radius; UPDATE rm_users SET comment = ‘This account was last refresh from scratch code by SMS’ WHERE username = ‘$USR’;”


# ADD SYSLOG ENTRY

mysql -u$SQLUSER -p$SQLPASS -e “use radius; INSERT INTO rm_syslog (datetime, ip, name, eventid, data1) VALUES (NOW(), ‘n/a’, ‘SMSUSER_$USR’, ‘$USR’, ‘$USR renewd service > $PKGNAME’);”


# ADD ENTRY FOR CURRENT DATE TIME IN REFIL CARD TO PREVENT RE-USAGE OF SAME CARD NUMBER

mysql -u$SQLUSER -p$SQLPASS -e “use radius; UPDATE rm_cards SET owner = ‘$USR’, used = NOW() WHERE cardnum = ‘$CARD’;”


fi

fi

fi


########### ACCOUNT STATUS EXPIRED TODAY ACTION ############

if [ $PKGQUOTA -eq 0 ]

then

echo -e “Total Quota Allowed = No Quota”

else

echo -e “Total Quota Allowed = $PKGQUOTAB GB”

fi

echo -e “Done/Note: Card Number $CARD is marked as used in DB to prevent re-usege”




 


RESULTS:


1- enter details




 


If the script found that the user name not valid in the billing , spit the error


0- user not found




 


If the script found that the card number is not available in the billing , spit the error


2- invalid number




 


If the script found that the card number entered is already used , spit the error


3- card already used




 


If the script found both fields blank, spit the error


4- you must fill in all fields




 


If the script found user name and card matches, then proceed to renew the account


5- if all ok renew the account


You can also take different actions like send Email / SMS to ADMIN, and user both or any other action.




 




 




 




 




 


re-captcha


ADDING CAPTCHA SECURITY IN FORM


To add captcha security in html form, (which should be must in my opinion for security reasons)


Download secureimage and unzip in your web folder like /var/www/html/secureimage


mkdir /temp


cd /temp


wget https://www.phpcaptcha.org/latest.tar.gz


tar zxvf latest.tar.gz


mv securimage/ /var/www/html/


Now edit the html form to add the captcha facility


TEST.HTML [Red highlighted are our code for captcha]


<html>

<head>

<meta http-equiv=”Content-Type” content=”text/html; charset=utf-8″ />

<title>Refill your account ! </title>

</head>

<body>

<h1>Refill your account using scratch code:</h1>

<form method=”post” action=”test.php”>

User Name: <br />

<input type=”text” name=”USERNAME” size=”35″ />

<br />

Card No: <br />

<input type=”text” name=”CARDNO” size=”35″ />

<br /> <br />

<input type=”submit” value=”Submit:” />

<br />

</body>

<img id=”captcha” src=”/securimage/securimage_show.php” alt=”CAPTCHA Image” />

<input type=”text” name=”captcha_code” size=”10″ maxlength=”6″ />

<a href=”#” onclick=”document.getElementById(‘captcha’).src = ‘/securimage/securimage_show.php?’ + Math.random(); return false”>[ Different Image ]</a>

</form>

</html>


TEST.PHP [Red highlighted are our code for captcha]


<?php

include_once $_SERVER[‘DOCUMENT_ROOT’] . ‘/securimage/securimage.php’;

$securimage = new Securimage();

if ($securimage->check($_POST[‘captcha_code’]) == false) {

  echo “The CAPTCHA security code entered was incorrect. Make Sure You are HUMAN  zaib!<br /><br />”;

  echo “Please go <a href=’javascript:history.go(-1)’>back</a> and try again.”;

  exit;

}

$USERNAME = $_POST[‘USERNAME’];

$CARDNO = $_POST[‘CARDNO’];

if(empty($USERNAME ) || empty($CARDNO )) {

echo “<h2>You must fill in all fields</h2>\n” ;

die (“Click Back to start again.”);

}

echo “<h2>You have entered the following information: zaib</h2>”;

echo “<pre>Customer name\t=\t$USERNAME <br></pre> “;

echo “<pre>Card No\t\t=\t$CARDNO</pre>”;

echo “<h2>BILLING RESPONSE</h2>”;

echo “======================”;

$var = shell_exec(“TERM=xterm /var/www/html/renew.sh $USERNAME $CARDNO”);

echo “<pre>$var</pre>”;

?>


Now result would be as follow


captcha


captcha-wrong




Regard’s

 Syed JAHANZAIB