From 5abb32402d73b19e074b3ee67b0bf2d09dd325ed Mon Sep 17 00:00:00 2001
From: Daniel Winzen <daniel@danwin1210.me>
Date: Sat, 11 Jan 2020 13:18:50 +0100
Subject: [PATCH] Added options to enable/disable account upgrades and
 coinpayments

---
 var/www/common.php                |  2 ++
 var/www/html/coinpayments_ipn.php | 11 ++++++-----
 var/www/html/home.php             |  4 ++--
 var/www/html/index.php            |  2 +-
 var/www/html/upgrade.php          |  4 ++++
 5 files changed, 15 insertions(+), 8 deletions(-)

diff --git a/var/www/common.php b/var/www/common.php
index 04324ed..1d72241 100644
--- a/var/www/common.php
+++ b/var/www/common.php
@@ -119,6 +119,7 @@ const SKIP_USER_CHROOT_UPDATE = true; //skips updating user chroots when running
 const DEFAULT_QUOTA_SIZE = 1024 * 1024; //per user disk quota in kb - Defaults to 1 GB
 const DEFAULT_QUOTA_FILES = 100000; //per user file quota - by default allow no more than 100000 files
 const NUM_GUARDS = 50; //number of tor guard relays to distribute the load on
+const ENABLE_UPGRADES = true; //enable users to upgrade their account againt payment? true/false
 //Optional paid upgrades in format of 'identifier' => ['name', 'usd_price']
 const ACCOUNT_UPGRADES = [
 	'1g_quota' => ['name' => '+1GB disk Quota', 'usd_price' => 10],
@@ -127,6 +128,7 @@ const ACCOUNT_UPGRADES = [
 	'20g_quota' => ['name' => '+20GB disk Quota', 'usd_price' => 40],
 	'100k_files_quota' => ['name' => '+100k files Quota', 'usd_price' => 10],
 ];
+const COINPAYMENTS_ENABLED = true; //enable CoinPayments as payment processor true/false
 const COINPAYMENTS_PRIVATE = 'COINPAYMENTS_PRIVATE'; //Coinpayments private API key
 const COINPAYMENTS_PUBLIC = 'COINPAYMENTS_PUBLIC'; //Coinpayments public API key
 const COINPAYMENTS_MERCHANT_ID = 'COINPAYMENTS_MERCHANT_ID'; //Coinpayments merchant ID
diff --git a/var/www/html/coinpayments_ipn.php b/var/www/html/coinpayments_ipn.php
index c589c88..59abff1 100644
--- a/var/www/html/coinpayments_ipn.php
+++ b/var/www/html/coinpayments_ipn.php
@@ -1,29 +1,30 @@
 <?php
 require('../common.php');
 
+if(!ENABLE_UPGRADES){
+	die('Upgrades disabled');
+}
+if(!COINPAYMENTS_ENABLED){
+	die('CoinPayments disabled');
+}
 if(empty($_SERVER['HTTP_HMAC'])){
 	die("No HMAC signature sent");
 }
-
 $merchant = $_POST['merchant'] ?? '';
 if(empty($merchant)){
 	die("No Merchant ID passed");
 }
-
 if($merchant !== COINPAYMENTS_MERCHANT_ID){
 	die("Invalid Merchant ID");
 }
-
 $request = file_get_contents('php://input');
 if(empty($request)){
 	die("Error reading POST data");
 }
-
 $hmac = hash_hmac("sha512", $request, COINPAYMENTS_IPN_SECRET);
 if($hmac !== $_SERVER['HTTP_HMAC']){
 	die("HMAC signature does not match");
 }
-
 $db = get_db_instance();
 $status = 0;
 if($_POST['status'] < 0){
diff --git a/var/www/html/home.php b/var/www/html/home.php
index c63b36f..0ecbf0a 100644
--- a/var/www/html/home.php
+++ b/var/www/html/home.php
@@ -324,8 +324,8 @@ $quota_files_usage = $quota['quota_files_used'] / $quota['quota_files'];
 $usage_text = bytes_to_human_readable($quota['quota_size_used'] * 1024) . ' of ' . bytes_to_human_readable($quota['quota_size'] * 1024) . ' - ' . round($quota_usage * 100, 2).'%';
 $usage_files_text = "$quota[quota_files_used]  of $quota[quota_files] - " . round($quota_files_usage * 100, 2).'%';
 ?>
-<p>Your disk usage: <meter value="<?php echo round($quota_usage, 2); ?>"><?php echo $usage_text; ?></meter> - <?php echo $usage_text; ?> (updated hourly) <a href="upgrade.php?upgrade=1g_quota">Upgrade</a></p>
-<p>Your file number usage: <meter value="<?php echo round($quota_files_usage, 2); ?>"><?php echo $usage_files_text; ?></meter> - <?php echo $usage_files_text; ?> (updated hourly) <a href="upgrade.php?upgrade=100k_files_quota">Upgrade</a></p>
+<p>Your disk usage: <meter value="<?php echo round($quota_usage, 2); ?>"><?php echo $usage_text; ?></meter> - <?php echo $usage_text; ?> (updated hourly) <?php echo ENABLE_UPGRADE ? '<a href="upgrade.php?upgrade=1g_quota">Upgrade</a>' : ''; ?></p>
+<p>Your file number usage: <meter value="<?php echo round($quota_files_usage, 2); ?>"><?php echo $usage_files_text; ?></meter> - <?php echo $usage_files_text; ?> (updated hourly) <?php echo ENABLE_UPGRADE ? '<a href="upgrade.php?upgrade=100k_files_quota">Upgrade</a>' : ''; ?></p>
 <h3>Logs</h3>
 <table border="1">
 <tr><th>Date</th><th>access.log</th><th>error.log</th></tr>
diff --git a/var/www/html/index.php b/var/www/html/index.php
index cfdb024..b82dc6b 100644
--- a/var/www/html/index.php
+++ b/var/www/html/index.php
@@ -24,7 +24,7 @@ header('X-Accel-Expires: 60');
 <li>Web-based file manager</li>
 <li>FTP and SFTP access</li>
 <li>command line access to shell via SSH</li>
-<li>1GB disk quota and a maximum of 100.000 files. - upgradable</li>
+<li>1GB disk quota and a maximum of 100.000 files<?php echo ENABLE_UPGRADES ? ' - upgradable' : ''; ?></li>
 <li>mail() can send e-mails from your_system_account@<?php echo ADDRESS; ?> (your_system_account@hosting.danwin1210.me for clearnet)</li>
 <li>Webmail and IMAP, POP3 and SMTP access to your mail account</li>
 <li>Mail sent to anything@your.onion gets automatically redirected to your inbox</li>
diff --git a/var/www/html/upgrade.php b/var/www/html/upgrade.php
index 76e44c8..072e40f 100644
--- a/var/www/html/upgrade.php
+++ b/var/www/html/upgrade.php
@@ -1,5 +1,9 @@
 <?php
 require('../common.php');
+if(!ENABLE_UPGRADES || !COINPAYMENTS_ENABLED){
+	header('Location: home.php');
+	exit;
+}
 $user=check_login();
 use chillerlan\QRCode\QRCode;
 use chillerlan\QRCode\QROptions;