9bb77da9a4
- Add Arch Linux (pacman) support to server operations: CheckUpdates, InstallDocker, InstallPrerequisites, UpdatePackage - Implement parsePacmanOutput() to parse 'pacman -Qu' output format - Add security improvement: package name sanitization to prevent command injection - Initialize variables in CheckUpdates to prevent undefined variable errors in catch block - Use proper Arch pacman flags: -Syu for full system upgrade before operations 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
70 lines
2.5 KiB
PHP
70 lines
2.5 KiB
PHP
<?php
|
|
|
|
namespace App\Actions\Server;
|
|
|
|
use App\Models\Server;
|
|
use Lorisleiva\Actions\Concerns\AsAction;
|
|
use Spatie\Activitylog\Contracts\Activity;
|
|
|
|
class UpdatePackage
|
|
{
|
|
use AsAction;
|
|
|
|
public string $jobQueue = 'high';
|
|
|
|
public function handle(Server $server, string $osId, ?string $package = null, ?string $packageManager = null, bool $all = false): Activity|array
|
|
{
|
|
try {
|
|
if ($server->serverStatus() === false) {
|
|
return [
|
|
'error' => 'Server is not reachable or not ready.',
|
|
];
|
|
}
|
|
|
|
// Sanitize package name to prevent command injection
|
|
// Only allow alphanumeric characters, hyphens, underscores, periods, plus signs, and colons
|
|
// These are valid characters in package names across most package managers
|
|
$sanitizedPackage = '';
|
|
if ($package !== null && ! $all) {
|
|
if (! preg_match('/^[a-zA-Z0-9._+:-]+$/', $package)) {
|
|
return [
|
|
'error' => 'Invalid package name. Package names can only contain alphanumeric characters, hyphens, underscores, periods, plus signs, and colons.',
|
|
];
|
|
}
|
|
$sanitizedPackage = escapeshellarg($package);
|
|
}
|
|
|
|
switch ($packageManager) {
|
|
case 'zypper':
|
|
$commandAll = 'zypper update -y';
|
|
$commandInstall = 'zypper install -y '.$sanitizedPackage;
|
|
break;
|
|
case 'dnf':
|
|
$commandAll = 'dnf update -y';
|
|
$commandInstall = 'dnf update -y '.$sanitizedPackage;
|
|
break;
|
|
case 'apt':
|
|
$commandAll = 'apt update && apt upgrade -y';
|
|
$commandInstall = 'apt install -y '.$sanitizedPackage;
|
|
break;
|
|
case 'pacman':
|
|
$commandAll = 'pacman -Syu --noconfirm';
|
|
$commandInstall = 'pacman -S --noconfirm '.$sanitizedPackage;
|
|
break;
|
|
default:
|
|
return [
|
|
'error' => 'OS not supported',
|
|
];
|
|
}
|
|
if ($all) {
|
|
return remote_process([$commandAll], $server);
|
|
}
|
|
|
|
return remote_process([$commandInstall], $server);
|
|
} catch (\Exception $e) {
|
|
return [
|
|
'error' => $e->getMessage(),
|
|
];
|
|
}
|
|
}
|
|
}
|