mirror of
https://github.com/myronblair/novacpx
synced 2026-06-30 17:50:41 -05:00
myron
6fdccc6dbd
#9 auth.php: add self-service change-password action (current+new+confirm) accounts.php: fix admin change-password — accept account_id, fetch username for chpasswd (was using int ID), add Auth::require('admin') guard user.js: add Change Password page + navItem + submitChangePassword() #10 EmailManager: store AES-256-CBC enc_password alongside SHA512-CRYPT hash webmail.php: rewrite login-url to use webmail_sso_tokens table novacpx-sso.php: Roundcube SSO bridge (validate token, decrypt, autosubmit) Migration 005: add enc_password column + webmail_sso_tokens table #11 opendkim: installed, configured (/etc/opendkim.conf, signing.table, key.table, trusted.hosts), socket at /var/spool/postfix/opendkim/, Postfix milter wired, service enabled+running, key generation verified #12 files.php: fix safe_path() for non-existent paths (write/mkdir), add safe_path_new() helper using parent-dir realpath check, fix delete guard (block deleting account root dirs), fix rename destination, clamp chmod to 0777 #13 nova.js: api() handles network errors, 429 rate-limit with retry-after, non-JSON responses (PHP fatal pages) — graceful error instead of throw admin/user/reseller index.php: filemtime-based cache-busting on all assets Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
60 lines
2.6 KiB
SQL
60 lines
2.6 KiB
SQL
-- Migration 002: Features #14-17 (WordPress, Backup, Cloudflare, TOTP)
|
|
|
|
-- #17 TOTP columns on users (ignore errors if columns already exist)
|
|
ALTER TABLE users ADD COLUMN totp_secret VARCHAR(64) DEFAULT NULL;
|
|
ALTER TABLE users ADD COLUMN totp_enabled TINYINT(1) DEFAULT 0;
|
|
ALTER TABLE users ADD COLUMN totp_backup_codes TEXT DEFAULT NULL;
|
|
|
|
-- #16 Cloudflare columns on accounts
|
|
ALTER TABLE accounts ADD COLUMN cf_api_key VARCHAR(255) DEFAULT NULL;
|
|
ALTER TABLE accounts ADD COLUMN cf_api_email VARCHAR(255) DEFAULT NULL;
|
|
ALTER TABLE accounts ADD COLUMN cf_zone_id VARCHAR(64) DEFAULT NULL;
|
|
|
|
-- #16 Cloudflare zone_id on dns_zones
|
|
ALTER TABLE dns_zones ADD COLUMN cf_zone_id VARCHAR(64) DEFAULT NULL;
|
|
|
|
-- #14 WordPress installs
|
|
CREATE TABLE IF NOT EXISTS wordpress_installs (
|
|
id INT AUTO_INCREMENT PRIMARY KEY,
|
|
account_id INT NOT NULL,
|
|
domain VARCHAR(255) NOT NULL,
|
|
path VARCHAR(255) DEFAULT '/',
|
|
db_name VARCHAR(64) DEFAULT NULL,
|
|
db_user VARCHAR(64) DEFAULT NULL,
|
|
db_pass VARCHAR(128) DEFAULT NULL,
|
|
wp_version VARCHAR(20) DEFAULT NULL,
|
|
admin_user VARCHAR(64) DEFAULT NULL,
|
|
admin_email VARCHAR(255) DEFAULT NULL,
|
|
status ENUM('active','updating','suspended') DEFAULT 'active',
|
|
staging_of INT DEFAULT NULL,
|
|
created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
|
|
updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
|
|
INDEX (account_id)
|
|
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
|
|
|
|
-- #15 Backups
|
|
CREATE TABLE IF NOT EXISTS backups (
|
|
id INT AUTO_INCREMENT PRIMARY KEY,
|
|
account_id INT NOT NULL,
|
|
filename VARCHAR(255) NOT NULL,
|
|
size BIGINT DEFAULT 0,
|
|
type ENUM('full','files','database') DEFAULT 'full',
|
|
status ENUM('pending','running','complete','failed') DEFAULT 'pending',
|
|
storage VARCHAR(50) DEFAULT 'local',
|
|
remote_path VARCHAR(500) DEFAULT NULL,
|
|
created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
|
|
INDEX (account_id),
|
|
INDEX (status)
|
|
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
|
|
|
|
CREATE TABLE IF NOT EXISTS backup_schedules (
|
|
id INT AUTO_INCREMENT PRIMARY KEY,
|
|
account_id INT NOT NULL UNIQUE,
|
|
frequency ENUM('hourly','daily','weekly','monthly') DEFAULT 'daily',
|
|
type ENUM('full','files','database') DEFAULT 'full',
|
|
retain_count INT DEFAULT 7,
|
|
last_run TIMESTAMP NULL,
|
|
created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
|
|
INDEX (account_id)
|
|
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
|