22

✏️ Editing: restrict

#!/bin/bash

#1.CONSTANTS FOR COLORS:

RED_COLOR=$'\033[31;1m'
GREEN_COLOR=$'\033[32;1m'
YELLOW_COLOR=$'\033[33;1m'
DEFAULT_COLOR=$'\033[0m'

#2.INPUT DOMAIN NAME:

printf "%sTYPE THE DOMAIN NAME THAT YOU WISH TO BE RESTICTED.%s\\n" "$GREEN_COLOR" "$DEFAULT_COLOR"

#2.1.CHECK IF INPUT DOMAIN EXISTS AND ASK FOR INPUT UNTIL EXISTING DOMAIN IS PROVIDED:

current_user=$(whoami)
counter=0

while [ -z "$doc_root" ]; do

if [ "$counter" != 0 ]; then

printf "%sINVALID DOMAIN! TYPE THE DOMAIN AGAIN:%s\\n" "$RED_COLOR" "$DEFAULT_COLOR"

read -e -r -p $'\e[36mDomain/Subdomain:\e[0m ' input_domain;

#2.1.1.CONVERT INPUT TO LOWERCASE:

input_domain="${input_domain,,}"

#2.1.2.REMOVE ANY '/' AT THE END OF THE INPUT:

last_char="${input_domain: -1}"

while [ "$last_char" = '/' ]; do

input_domain=${input_domain%?};
  last_char="${input_domain: -1}"

done

sub_folder=$( echo "${input_domain}" | cut -d '/' -s -f 2- )
 domain_name=$( echo "$input_domain" | cut -d '/' -f 1 )

if [ "$current_user" = 'root' ]; then

cpanel_user=$( /scripts/whoowns "$domain_name" )

if [ -n "$cpanel_user" ]; then

doc_root=$( uapi --user="$cpanel_user"  DomainInfo single_domain_data domain="$domain_name" | grep 'documentroot:' | cut -d ' ' -f 6 )

else

doc_root=$( uapi DomainInfo single_domain_data domain="$domain_name" | grep 'documentroot:' | cut -d ' ' -f 6 )

if [ -n "$doc_root" ]; then
  if [ -n "$sub_folder" ]; then

doc_root=${doc_root}/${sub_folder}

fi
 fi

((counter++))

done

#3.NAVIGATE TO DOCUMENT ROOT OF THE DOMAIN AND DENY ACCESS

cd "$doc_root" 2> /dev/null || ( printf "%sDOCUMENT ROOT DOES NOT EXIST! EXITING ...%s\\n" "$RED_COLOR" "$DEFAULT_COLOR"; exit; )

if [[ -f .htaccess && -s .htaccess ]]; then
 if [[ "$current_user" = 'root' && -n $(lsattr .htaccess | grep 'a\|i' | awk '{print$1}') ]]; then
  
  chattr -ai .htaccess

sed -i '1s/^/ErrorDocument 403 default\nDeny from All\n/' .htaccess

else 
 
 printf 'ErrorDocument 403 default\nDeny from All' > .htaccess

if [ "$current_user" = 'root' ]; then

chown "$cpanel_user": .htaccess

fi
fi

counter=0

#4.CHECK RECURSIVLY FOR .HTACCESS FILES WITH ALLOW FROM ALL RULES

read -r -a files <<< "$(find "$doc_root" -type f -name '.htaccess' -exec grep -w -l -i 'allow from all' {} \; | grep -v 'akismet' | tr '\n' ' ')"

number_of_files=${#files[@]}

if [ "$number_of_files" -gt 0 ]; then

printf "%sAllow From All FOUND IN THE FOLLOWING FILES:%s\\n" "$RED_COLOR" "$DEFAULT_COLOR"
 printf "%s\\n" "${files[@]}"

#5.REMOVE ALL ENTRIES OF ALLOW FROM ALL

read -e -r -p $'\e[36mWould you like to remove the rule from all files?(y/n):\e[0m ' remove;

if [ "$remove" = 'y' ]; then

for file in "${files[@]}"; do

sed -i '/Allow From All/Id' "$file"

line_removed=$(grep -w -l -i 'allow from all' "$file")

if [ -z "$line_removed" ]; then

printf "%sRule removed from "$file"%s\\n" "$GREEN_COLOR" "$DEFAULT_COLOR"

else

printf "%sRule NOT removed from "$file"%s\\n" "$RED_COLOR" "$DEFAULT_COLOR"

fi
  done

else

printf "%sRule NOT removed from the files.%s\\n" "$RED_COLOR" "$DEFAULT_COLOR"

fi
fi

#6.CHATTR .HTACCESS IF POSSIBLE

if [ "$current_user" = 'root' ]; then

chattr +ai .htaccess

if [ -n $(lsattr .htaccess | grep 'ia' | awk '{print$1}') ]; then
 
  printf "%sChattr added to "$doc_root"/.htaccess.%s\\n" "$GREEN_COLOR" "$DEFAULT_COLOR"
 
 fi
fi

MR SKB