Upload files to "/"

2026-06-07 14:29:25 +00:00
parent 27a6ee5101
commit 10286cfb0e
4 changed files with 404 additions and 0 deletions
@@ -0,0 +1,68 @@
+#!/usr/bin/env python3
+import json
+import subprocess
+from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
+
+XAMPP = '/opt/lampp/xampp'
+ALLOWED = {'start','stop','restart','reload','status','startapache','stopapache','startmysql','stopmysql','startftp','stopftp'}
+
+class Handler(BaseHTTPRequestHandler):
+    def log_message(self, fmt, *args):
+        pass
+
+    def _cors(self):
+        self.send_header('Access-Control-Allow-Origin', '*')
+        self.send_header('Access-Control-Allow-Methods', 'GET, POST, OPTIONS')
+        self.send_header('Access-Control-Allow-Headers', 'Content-Type')
+
+    def _send(self, code, body):
+        data = json.dumps(body).encode()
+        try:
+            self.send_response(code)
+            self.send_header('Content-Type', 'application/json')
+            self._cors()
+            self.send_header('Content-Length', str(len(data)))
+            self.end_headers()
+            self.wfile.write(data)
+        except BrokenPipeError:
+            pass
+
+    def do_OPTIONS(self):
+        self.send_response(204)
+        self._cors()
+        self.end_headers()
+
+    def do_GET(self):
+        if self.path == '/ping':
+            self._send(200, {'ok': True})
+        else:
+            self._send(404, {'error': 'Not found'})
+
+    def do_POST(self):
+        if self.path != '/run':
+            self._send(404, {'error': 'Not found'})
+            return
+        length = int(self.headers.get('Content-Length', 0))
+        body = json.loads(self.rfile.read(length))
+        cmd = body.get('cmd', '').strip()
+        if cmd not in ALLOWED:
+            self._send(400, {'error': f'Command not allowed: {cmd}'})
+            return
+        try:
+            result = subprocess.run(['sudo', XAMPP, cmd], capture_output=True, text=True, timeout=180)
+            output = (result.stdout + result.stderr).strip()
+            self._send(200, {'output': output, 'code': result.returncode})
+        except subprocess.TimeoutExpired:
+            self._send(200, {'output': 'Timeout after 180 seconds.', 'code': -1})
+        except Exception as e:
+            self._send(500, {'error': str(e)})
+
+if __name__ == '__main__':
+    server = ThreadingHTTPServer(('127.0.0.1', 5050), Handler)
+    print('XAMPP GUI Backend - Port 5050')
+    print('Open: http://localhost:8080/')
+    print('Stop: Ctrl+C')
+    try:
+        server.serve_forever()
+    except KeyboardInterrupt:
+        pass