ExternalVendorCode/devilbox
1
0
Fork 0
mirror of https://github.com/cytopia/devilbox.git synced 2024-12-21 13:47:47 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
c8de832210
devilbox/.tests/tests/vendor-phpmyadmin.sh
cytopia 5d9f396b14
Ensure Vendor login works
2019-11-21 14:55:16 +01:00

395 lines
13 KiB
Bash
Executable File
Raw Blame History

#!/usr/bin/env bash
# NOTE: Parsing curl to tac to circumnvent "failed writing body"
# https://stackoverflow.com/questions/16703647/why-curl-return-and-error-23-failed-writing-body
set -e
set -u
set -o pipefail
SCRIPT_PATH="$( cd "$(dirname "$0")" && pwd -P )"
DVLBOX_PATH="$( cd "${SCRIPT_PATH}/../.." && pwd -P )"
# shellcheck disable=SC1090
. "${SCRIPT_PATH}/../scripts/.lib.sh"
RETRIES=10
DISABLED_VERSIONS=("")
echo
echo "# --------------------------------------------------------------------------------------------------"
echo "# [Vendor] phpMyAdmin"
echo "# --------------------------------------------------------------------------------------------------"
echo
# -------------------------------------------------------------------------------------------------
# Pre-check
# -------------------------------------------------------------------------------------------------
PHP_VERSION="$( get_php_version "${DVLBOX_PATH}" )"
if [[ ${DISABLED_VERSIONS[*]} =~ ${PHP_VERSION} ]]; then
printf "[SKIP] Skipping all checks for PHP %s\\n" "${PHP_VERSION}"
exit 0
fi
# -------------------------------------------------------------------------------------------------
# ENTRYPOINT
# -------------------------------------------------------------------------------------------------
###
### Get required env values
###
HOST_PORT_HTTPD="$( "${SCRIPT_PATH}/../scripts/env-getvar.sh" "HOST_PORT_HTTPD" )"
MYSQL_ROOT_PASSWORD="$( "${SCRIPT_PATH}/../scripts/env-getvar.sh" "MYSQL_ROOT_PASSWORD" )"
DEVILBOX_VENDOR_PHPMYADMIN_AUTOLOGIN="$( "${SCRIPT_PATH}/../scripts/env-getvar.sh" "DEVILBOX_VENDOR_PHPMYADMIN_AUTOLOGIN" )"
# -------------------------------------------------------------------------------------------------
# ENTRYPOINT: Version
# -------------------------------------------------------------------------------------------------
# Retrieve URL for current PHP version.
# Older PHP versions are presented a link with a different version due to compatibility.
printf "[TEST] Retrieve phpMyAdmin URL"
if ! URL="$( run "\
curl -sS --fail 'http://localhost:${HOST_PORT_HTTPD}/index.php' \
| tac \
| tac \
| grep -Eo '/vendor/phpmyadmin-[.0-9]+/index\\.php'" \
"${RETRIES}" "" "0" )"; then
printf "\\r[FAILED] Retrieve phpMyAdmin URL\\n"
run "curl -sS 'http://localhost:${HOST_PORT_HTTPD}/index.php' || true"
exit 1
else
printf "\\r[OK] Retrieve phpMyAdmin URL: %s\\n" "${URL}"
fi
# -------------------------------------------------------------------------------------------------
# ENTRYPOINT: Configuration file
# -------------------------------------------------------------------------------------------------
SCRIPTPATH="$( cd "$(dirname "$0")" ; pwd -P )"
DVLBOXPATH="${SCRIPTPATH}/../../"
CONFIGPATH="${DVLBOXPATH}/.devilbox/www/htdocs${URL%index\.php}config.inc.php"
printf "[TEST] config.inc.php exists"
if [ ! -f "${CONFIGPATH}" ]; then
printf "\\r[FAIL] config.inc.php exists: no\\n"
exit 1
else
printf "\\r[OK] config.inc.php exists: yes\\n"
fi
# error_reporting(-1);
printf "[TEST] config.inc.php check: error_reporting(-1);"
if ! grep -E "^error_reporting\\(-1\\);" "${CONFIGPATH}" >/dev/null; then
printf "\\r[FAIL] config.inc.php check: error_reporting(-1);\\n"
if ! grep 'error_reporting' "${CONFIGPATH}"; then
cat "${CONFIGPATH}"
fi
exit 1
else
printf "\\r[OK] config.inc.php check: error_reporting(-1);\\n"
fi
# $cfg['TempDir'] = '/tmp';
printf "[TEST] config.inc.php check: \$cfg['TempDir'] = '/tmp';"
if ! grep -E "^\\\$cfg\\['TempDir'\\][[:space:]]*=[[:space:]]*'/tmp';" "${CONFIGPATH}" >/dev/null; then
printf "\\r[FAIL] config.inc.php check: \$cfg['TempDir'] = '/tmp';\\n"
if ! grep 'TempDir' "${CONFIGPATH}"; then
cat "${CONFIGPATH}"
fi
exit 1
else
printf "\\r[OK] config.inc.php check: \$cfg['TempDir'] = '/tmp';\\n"
fi
# $cfg['CheckConfigurationPermissions'] = false;
printf "[TEST] config.inc.php check: \$cfg['CheckConfigurationPermissions'] = false;"
if ! grep -E "^\\\$cfg\\['CheckConfigurationPermissions'\\][[:space:]]*=[[:space:]]*false;" "${CONFIGPATH}" >/dev/null; then
printf "\\r[FAIL] config.inc.php check: \$cfg['CheckConfigurationPermissions'] = false;\\n"
if ! grep 'CheckConfigurationPermissions' "${CONFIGPATH}"; then
cat "${CONFIGPATH}"
fi
exit 1
else
printf "\\r[OK] config.inc.php check: \$cfg['CheckConfigurationPermissions'] = false;\\n"
fi
# $cfg['blowfish_secret'] = '...'
printf "[TEST] config.inc.php check: \$cfg['blowfish_secret'] = '...';"
if ! grep -E "^\\\$cfg\\['blowfish_secret'\\][[:space:]]*=[[:space:]]*'.{32,}';" "${CONFIGPATH}" >/dev/null; then
printf "\\r[FAIL] config.inc.php check: \$cfg['blowfish_secret'] = '...';\\n"
if ! grep 'blowfish_secret' "${CONFIGPATH}"; then
cat "${CONFIGPATH}"
fi
exit 1
else
printf "\\r[OK] config.inc.php check: \$cfg['blowfish_secret'] = '...';\\n"
fi
# $cfg['SendErrorReports'] = 'never';
printf "[TEST] config.inc.php check: \$cfg['SendErrorReports'] = 'never';"
if ! grep "^\\\$cfg\\['SendErrorReports'\\][[:space:]]*=[[:space:]]*'never';" "${CONFIGPATH}" >/dev/null; then
printf "\\r[FAIL] config.inc.php check: \$cfg['SendErrorReports'] = 'never';\\n"
if ! grep 'SendErrorReports' "${CONFIGPATH}"; then
cat "${CONFIGPATH}"
fi
exit 1
else
printf "\\r[OK] config.inc.php check: \$cfg['SendErrorReports'] = 'never';\\n"
fi
# $cfg['Servers'][$i]['host'] = 'mysql';
printf "[TEST] config.inc.php check: \$cfg['Servers'][\$i]['host'] = 'mysql';"
if ! grep "^\\\$cfg\\['Servers'\\]\\[\$i\\]\\['host'\\][[:space:]]*=[[:space:]]*'mysql';" "${CONFIGPATH}" >/dev/null; then
printf "\\r[FAIL] config.inc.php check: \$cfg['Servers'][\$i]['host'] = 'mysql';\\n"
if ! grep 'Servers' "${CONFIGPATH}" | grep 'host'; then
cat "${CONFIGPATH}"
fi
exit 1
else
printf "\\r[OK] config.inc.php check: \$cfg['Servers'][\$i]['host'] = 'mysql';\\n"
fi
# $cfg['Servers'][$i]['connect_type'] = 'tcp';
printf "[TEST] config.inc.php check: \$cfg['Servers'][\$i]['connect_type'] = 'tcp';"
if ! grep "^\\\$cfg\\['Servers'\\]\\[\$i\\]\\['connect_type'\\][[:space:]]*=[[:space:]]*'tcp';" "${CONFIGPATH}" >/dev/null; then
printf "\\r[FAIL] config.inc.php check: \$cfg['Servers'][\$i]['connect_type'] = 'tcp';\\n"
if ! grep 'Servers' "${CONFIGPATH}" | grep 'connect_type'; then
cat "${CONFIGPATH}"
fi
exit 1
else
printf "\\r[OK] config.inc.php check: \$cfg['Servers'][\$i]['connect_type'] = 'tcp';\\n"
fi
# $cfg['Servers'][$i]['compress'] = false;
printf "[TEST] config.inc.php check: \$cfg['Servers'][\$i]['compress'] = false;"
if ! grep "^\\\$cfg\\['Servers'\\]\\[\$i\\]\\['compress'\\][[:space:]]*=[[:space:]]*false;" "${CONFIGPATH}" >/dev/null; then
printf "\\r[FAIL] config.inc.php check: \$cfg['Servers'][\$i]['compress'] = false;\\n"
if ! grep 'Servers' "${CONFIGPATH}" | grep 'compress'; then
cat "${CONFIGPATH}"
fi
exit 1
else
printf "\\r[OK] config.inc.php check: \$cfg['Servers'][\$i]['compress'] = false;\\n"
fi
# $cfg['Servers'][$i]['AllowNoPassword'] = true;
printf "[TEST] config.inc.php check: \$cfg['Servers'][\$i]['AllowNoPassword'] = false;"
if ! grep "^\\\$cfg\\['Servers'\\]\\[\$i\\]\\['AllowNoPassword'\\][[:space:]]*=[[:space:]]*true;" "${CONFIGPATH}" >/dev/null; then
printf "\\r[FAIL] config.inc.php check: \$cfg['Servers'][\$i]['AllowNoPassword'] = true;\\n"
if ! grep 'Servers' "${CONFIGPATH}" | grep 'AllowNoPassword'; then
cat "${CONFIGPATH}"
fi
exit 1
else
printf "\\r[OK] config.inc.php check: \$cfg['Servers'][\$i]['AllowNoPassword'] = true;\\n"
fi
# -------------------------------------------------------------------------------------------------
# ENTRYPOINT: Login Check
# -------------------------------------------------------------------------------------------------
###
### Autologin disabled
###
if [ "${DEVILBOX_VENDOR_PHPMYADMIN_AUTOLOGIN}" != "1" ]; then
###
### Ensure given phpMyAdmin version works
###
printf "[TEST] Fetch %s" "${URL}"
if ! run "curl -sS --fail 'http://localhost:${HOST_PORT_HTTPD}${URL}' | tac | tac | grep -Ei 'welcome to.+phpMyAdmin' >/dev/null" "${RETRIES}" "" "0"; then
printf "\\r[FAIL] Fetch %s\\n" "${URL}"
run "curl -sS 'http://localhost:${HOST_PORT_HTTPD}${URL}' || true"
run "curl -sSI 'http://localhost:${HOST_PORT_HTTPD}${URL}' || true"
exit 1
else
printf "\\r[OK] Fetch %s\\n" "${URL}"
fi
###
### Login
###
TOKEN=
printf "[TEST] Retrieve phpMyAdmin login page"
while true; do
# Try again until it succeeds
if ! CONTENT="$( curl -sS --fail -c cookie.txt "http://localhost:${HOST_PORT_HTTPD}${URL}" )"; then
rm -f cookie.txt
printf "e"
continue;
fi
# Extract the token
if ! TOKEN="$( echo "${CONTENT}" \
| grep -Eo "name=\"token\" value=\".+\"" \
| head -1 \
| grep -Eo "value=\".+\"" \
| sed -e 's/^value="//g' -e 's/"$//g' )"; then
rm -f cookie.txt
printf "w"
continue;
fi
# Ensure Token does not contain '!'
if echo "${TOKEN}" | grep -q "!"; then
rm -f cookie.txt
printf "!"
continue;
fi
# Ensure Token does not contain '&'
if echo "${TOKEN}" | grep -q "&"; then
rm -f cookie.txt
printf "&"
continue;
fi
# Ensure Token does not contain '?'
if echo "${TOKEN}" | grep -q "?"; then
rm -f cookie.txt
printf "?"
continue;
fi
# Ensure Token does not contain '"'
if echo "${TOKEN}" | grep -q "\""; then
rm -f cookie.txt
printf "\""
continue;
fi
# Ensure Token does not contain '
if echo "${TOKEN}" | grep -q "'"; then
rm -f cookie.txt
printf "'"
continue;
fi
# Ensure Token does not contain '@'
if echo "${TOKEN}" | grep -q "@"; then
rm -f cookie.txt
printf "@"
continue;
fi
# Ensure Token does not contain '\'
if echo "${TOKEN}" | grep -q "\\\\"; then
rm -f cookie.txt
printf "\\"
continue;
fi
# Ensure Token does not contain '='
if echo "${TOKEN}" | grep -q "="; then
rm -f cookie.txt
printf "="
continue;
fi
# Ensure Token does not contain '`'
if echo "${TOKEN}" | grep -q "\`"; then
rm -f cookie.txt
printf "\`"
continue;
fi
# Ensure Token does not contain '+'
if echo "${TOKEN}" | grep -q "+"; then
rm -f cookie.txt
printf "+"
continue;
fi
# Ensure Token does not contain ';'
if echo "${TOKEN}" | grep -q ";"; then
rm -f cookie.txt
printf ";"
continue;
fi
# Ensure Token does not contain '%'
if echo "${TOKEN}" | grep -q "%"; then
rm -f cookie.txt
printf "%%"
continue;
fi
# Ensure Token does not contain ']'
if echo "${TOKEN}" | grep -q "\\]"; then
rm -f cookie.txt
printf "\\]"
continue;
fi
# Ensure Token does not contain '['
if echo "${TOKEN}" | grep -q "\\["; then
rm -f cookie.txt
printf "\\["
continue;
fi
# Ensure Token does not contain '$'
if echo "${TOKEN}" | grep -q '\$'; then
rm -f cookie.txt
printf '\$'
continue;
fi
# All set
break
done
printf "\\r[OK] Retrieve phpMyAdmin login page\\r\\n"
printf "[TEST] Exract phpMyAdmin login token"
if ! TOKEN="$( echo "${CONTENT}" \
| grep -Eo "name=\"token\" value=\".+\"" \
| head -1 \
| grep -Eo "value=\".+\"" \
| sed -e 's/^value="//g' -e 's/"$//g' )"; then
printf "\\r[FAIL] Exract phpMyAdmin login token\\n"
rm -f cookie.txt || true
echo "${CONTENT}"
exit 1
fi
printf "\\r[OK] Exract phpMyAdmin login token: \"%s\"\\n" "${TOKEN}"
printf "[TEST] Extract phpMyAdmin login session"
if ! SESSION="$( echo "${CONTENT}" \
| grep -Eo "name=\"set_session\" value=\"[A-Fa-f0-9]+\"" \
| grep -Eo "value=\"[A-Fa-f0-9]+\"" \
| sed -e 's/^value="//g' -e 's/"$//g' )"; then
printf "\\r[OK] Extract phpMyAdmin login session (not available)\\n"
SESSION=""
else
printf "\\r[OK] Extract phpMyAdmin login session: \"%s\"\\n" "${SESSION}"
fi
printf "[TEST] Submit phpMyAdmin POST login"
if ! run "curl -sS --fail -c cookie.txt -b cookie.txt -d 'pma_username=root&pma_password=${MYSQL_ROOT_PASSWORD}&server=1&target=index.php&token=${TOKEN}&set_session=${SESSION}' 'http://localhost:${HOST_PORT_HTTPD}${URL}'" "${RETRIES}" "" "0"; then
printf "\\r[FAIL] Submit phpMyAdmin POST login\\n"
run "curl -sS -c cookie.txt -b cookie.txt 'http://localhost:${HOST_PORT_HTTPD}${URL}' || true"
run "curl -sSI -c cookie.txt -b cookie.txt 'http://localhost:${HOST_PORT_HTTPD}${URL}' || true"
rm -f cookie.txt || true
exit 1
else
printf "\\r[OK] Submit phpMyAdmin POST login\\n"
fi
fi
###
### Check if login works
###
printf "[TEST] Evaluate successful phpMyAdmin login"
if [ "$( run "\
curl -sS --fail -c cookie.txt -b cookie.txt 'http://localhost:${HOST_PORT_HTTPD}${URL}' \
| tac \
| tac \
| grep -Ec '(Databases<.+SQL<.+Status<.+Users<.+Export<)|(\"User accounts\")'" \
"${RETRIES}" "" "0" )" != "1" ]; then
printf "\\r[FAIL] Evaluate successful phpMyAdmin login\\n"
run "curl -sS -c cookie.txt -b cookie.txt 'http://localhost:${HOST_PORT_HTTPD}${URL}' || true"
run "curl -sS -I -c cookie.txt -b cookie.txt 'http://localhost:${HOST_PORT_HTTPD}${URL}' || true"
rm -f cookie.txt || true
exit 1
else
printf "\\r[OK] Evaluate successful phpMyAdmin login\\n"
fi
rm -f cookie.txt || true
Reference in New Issue View Git Blame Copy Permalink