Yu1709$!%yuyu!$%wutu!5=126+

                
____  ___       .__                 
\   \/  /  _____|  |   ______  _  __
 \     /  /  ___/  |  /  _ \ \/ \/ /
 /     \  \___ \|  |_(  <_> )     / 
/___/\  \/____  >____/\____/ \/\_/  
      \_/     \/    @ligmakokz

Editing: cpguard.sh

#!/bin/bash

#Install-Uninstall script for  cPGuard Checker plugin for cPanel / WHM / DirectAdmin
#Developed by https://www.OpsShield.com

echo "########################"
echo "########################"
echo "#####cPGuard manage script"
echo "#####Written and maintained by https://www.OpsShield.com"
echo "#####Please email sales@OpsShield.com for any questions regarding this software"
echo "########################"
echo "########################"
sleep 1

function cpanelinstall() {

HTTP=`which httpd`
ARC=`uname -i`
if [ ! $ARC = "x86_64" ]; then
        echo -ne "\r${red}cPGuard does not support 32 bit systems..Exiting installation [ ERROR ] ${NC}"
        exit
fi

if ! /usr/local/cpanel/3rdparty/bin/php -v | grep ionCube ; then
        echo -ne "\r${red}Please enable ionCube Module in cPanel PHP and try again[ ERROR ] ${NC}"
        echo -ne "\r${red}Please refer https://manage.opsshield.com/index.php/plugin/support_manager/knowledgebase/view/57/enable-ioncube-in-cpanel-php/1/ ${NC}"
        exit
fi

if [ $OS -eq 7 ]; then
        if [ ! -f /etc/yum.repos.d/epel.repo ]; then
                yum -y install epel-release
                sed -i -e "s/enabled=1/enabled=0/g" /etc/yum.repos.d/epel.repo
        fi
        echo "fs.inotify.max_user_watches = 5000000" > /etc/sysctl.d/cpguard.conf
        sysctl -p /etc/sysctl.d/cpguard.conf
elif [ $OS -eq 6 ]; then
        if [ ! -f /etc/yum.repos.d/epel.repo ]; then
                yum -y install epel-release.noarch
                sed -i -e "s/enabled=1/enabled=0/g" /etc/yum.repos.d/epel.repo
        fi
        if ! grep -w "fs.inotify.max_user_watches = 5000000" /etc/sysctl.conf  >/dev/null 2>&1; then
                echo "fs.inotify.max_user_watches = 5000000" >> /etc/sysctl.conf
                sysctl -p
        fi
        ln -s /lib64/libpcre.so.0 /lib64/libpcre.so.1

if [ $OS -eq 6 ]; then
        yum install pcre2  json-c -y
else
        yum install pcre2 -y
fi

yum --enablerepo=epel -y install  rkhunter ipset rsync

chmod 000 /etc/cron.daily/rkhunter

yum install pcre pcre2 libtool-ltdl wget rsync tar compat-openssl10 openssl-libs  -y
rm -rf /usr/local/src/cpg
mkdir -p /usr/local/src/cpg
cd /usr/local/src/cpg
wget https://cpgdownload.s3.us-west-2.amazonaws.com/rpms/cpguard-core-3.73-1.x86_64.rpm
wget https://cpgdownload.s3.us-west-2.amazonaws.com/rpms/cpguard-cpanel-3.73-1.x86_64.rpm
wget https://cpgdownload.s3.us-west-2.amazonaws.com/rpms/cpguard-whm-3.73-1.x86_64.rpm
if [ -f /etc/redhat-release ] && [ ! -f /etc/os-release ]; then
        wget https://cpgdownload.s3.us-west-2.amazonaws.com/rpms6/cpg-clamav-libs_1.0_x86_64.rpm
else
	wget https://cpgdownload.s3.us-west-2.amazonaws.com/rpms/cpg-clamav-libs_1.0_x86_64.rpm
fi
rpm -Uvh cpg-clamav-libs_1.0_x86_64.rpm --force
rpm -Uvh cpguard-core-3.73-1.x86_64.rpm --force
rpm -Uvh cpguard-cpanel-3.73-1.x86_64.rpm --force
rpm -Uvh cpguard-whm-3.73-1.x86_64.rpm --force

if [ ! -d /usr/local/cpanel/whostmgr/docroot/cgi/cpguard ] && [ ! -d /etc/cpguard ] && [ ! -f /opt/cpguard/cpg-clamav/lib64/libclamav.so ]; then
        echo -ne "\r${red}cPGuard Installation has been failed..please contact Support for further assistance ${NC}"
        echo -ne '\n'
        exit
fi

if $HTTP -M | grep security2 > /dev/null 2>&1; then
        if [ -f /etc/cpanel/ea4/is_ea4 ]; then
                EA=4
                CONFFILE="/etc/apache2/conf.d/modsec/modsec2.user.conf"
        else
                EA=3
                CONFFILE="/usr/local/apache/conf/modsec2.user.conf"
        fi

grep -v  cpguard_modsec $CONFFILE  > /root/cpg_modsec_conf.tmp
        cat /root/cpg_modsec_conf.tmp > $CONFFILE
        if ! grep cpguard_modsec100 $CONFFILE > /dev/null; then
                echo "Include /etc/cpguard/cpguard_modsec100.conf" >> $CONFFILE
        fi
        rm -f /root/cpg_modsec_conf.tmp
else
        echo  -ne "\r${red}You should install ModSecurity First to make the HTTP Tools Working [ ERROR ]  ${NC}"
        echo -ne '\n'
fi

if [ ! -d /var/cpanel/apps ]; then
        mkdir /var/cpanel/apps
        chmod 755 /var/cpanel/apps
fi

mkdir /var/cpanel/rbl_info/  >/dev/null 2>&1
cp -p  /usr/local/cpanel/whostmgr/docroot/cgi/cpguard/rbl/abuseat.yaml /var/cpanel/rbl_info/
cp -p /usr/local/cpanel/whostmgr/docroot/cgi/cpguard/rbl/barracuda.yaml /var/cpanel/rbl_info/
cp -p /usr/local/cpanel/whostmgr/docroot/cgi/cpguard/rbl/spameatingmonkey.yaml /var/cpanel/rbl_info/
cp -p /usr/local/cpanel/whostmgr/docroot/cgi/cpguard/rbl/srbl_cpguard.yaml /var/cpanel/rbl_info/
echo "acl_abuseat_rbl=0" >> /etc/exim.conf.localopts
echo "acl_barracuda_rbl=0" >> /etc/exim.conf.localopts
echo "acl_spameatingmonkey_rbl=0" >> /etc/exim.conf.localopts
echo "acl_cpguardsrbl_rbl=0" >> /etc/exim.conf.localopts

mv /etc/cpguard/cron /etc/cron.d/cpguard
mv /usr/local/cpanel/whostmgr/docroot/cgi/cpguard/cpguard_modsec100.conf /etc/cpguard/cpguard_modsec100.conf
mv /usr/local/cpanel/whostmgr/docroot/cgi/cpguard/cpguard_modsec101.conf /etc/cpguard/cpguard_modsec101.conf

mv /usr/local/cpanel/whostmgr/docroot/cgi/cpguard/wafurls.txt /etc/cpguard/
mv /usr/local/cpanel/whostmgr/docroot/cgi/cpguard/bfurls.txt /etc/cpguard/

mkdir -p /opt/cpguard/
mkdir -p /opt/cpguard/common
touch /opt/cpguard/tmpdb.txt

touch /etc/cpguard/cpguard.log
touch /opt/cpguard/blacklistips.txt
touch /opt/cpguard/whitelistips.txt
touch /opt/cpguard/whitelistdomains.txt
chown root.nobody /etc/cpguard/cpguard.log
chown root.nobody /opt/cpguard/blacklistips.txt
chmod 664 /etc/cpguard/cpguard.log
chmod 664 /opt/cpguard/blacklistips.txt
chmod 755 /etc/cpguard/scripts/meSamples.php
chmod 755 /etc/cpguard/scripts/bforce.php
chmod 777 /etc/cpguard/reports/load

mkdir /etc/cpguard/tmp
chmod 755 /etc/cpguard/tmp

if [ -d /etc/cagefs/conf.d ]; then
        mv /etc/cpguard/cagefs.cpanel.cpguard.cfg /etc/cagefs/conf.d/cpguard.cfg
fi

cp -p /usr/local/cpanel/whostmgr/docroot/cgi/cpguard/includes/email_templates/cms_version_sample.html /usr/local/cpanel/whostmgr/docroot/cgi/cpguard/includes/email_templates/cms_version.html

touch /etc/cpguard/whitelistusers.txt
touch /etc/cpguard/userwatch.txt
touch /etc/cpguard/whitelistfiles.txt
touch /etc/cpguard/blacklistfiles.txt
echo "mysql.sock" >> /etc/cpguard/whitelistfiles.txt
echo "plugins/getastra/astra/libraries/plugins/astra-gk/var/db" >> /etc/cpguard/whitelistfiles.txt
echo "1.sh" >> /etc/cpguard/blacklistfiles.txt
echo "libworker.so" >> /etc/cpguard/blacklistfiles.txt

cp -p /usr/local/cpanel/base/frontend/paper_lantern/cpguard/cpguard_paperlattern/install.json_sample /usr/local/cpanel/base/frontend/paper_lantern/cpguard/cpguard_paperlattern/install.json
chmod 755 /usr/local/cpanel/whostmgr/docroot/cgi/cpguard/cms/wp-cli

touch /etc/cpguard/updations.txt

echo "Resgistering WHM Plugin..."
/usr/local/cpanel/bin/register_appconfig /etc/cpguard/whm.cpguard.conf

echo "Resgistering cPanel Plugin..."
/usr/local/cpanel/scripts/install_plugin /usr/local/cpanel/base/frontend/paper_lantern/cpguard/cpguard_paperlattern  --theme paper_lantern
ln -s /usr/local/cpanel/whostmgr/docroot/cgi/cpguard/assets/plugins /usr/local/cpanel/base/frontend/paper_lantern/cpguard/assets/plugins
/etc/cpguard/scripts/cpgbin enjupiter

/usr/local/cpanel/3rdparty/bin/php /usr/local/cpanel/whostmgr/docroot/cgi/cpguard/setup/install.php

sed -i -e "s/ErrorDocument 406/#ErrorDocument 406/g" /etc/apache2/conf.d/includes/errordocument.conf

echo "ALLOWIPCPROC=/usr/bin/postgres" >> /etc/rkhunter.conf

cd /usr/local/cpanel/whostmgr/docroot/cgi/cpguard/includes/geoip
tar -xvzf all-zones.tar.gz >/dev/null 2>&1

/scripts/restartsrv httpd > /dev/null

/usr/sbin/csf -a 104.248.44.154 "cPGuard" > /dev/null 2>&1
/usr/sbin/csf -a 168.119.180.141 "cPGuard" > /dev/null 2>&1
/usr/sbin/csf -a 94.237.29.205 "cPGuard" > /dev/null 2>&1
/usr/sbin/csf -a 37.97.190.233 "cPGuard" > /dev/null 2>&1
/usr/sbin/csf -a 72.14.186.130 "cPGuard" > /dev/null 2>&1
/usr/sbin/csf -a 188.116.8.88 "cPGuard" > /dev/null 2>&1
/usr/sbin/csf -a 45.77.35.77 "cPGuard" > /dev/null 2>&1
/usr/sbin/csf -a 94.130.24.31 "cPGuard" > /dev/null 2>&1
/usr/sbin/csf -a 37.97.189.139 "cPGuard" > /dev/null 2>&1

rm -f /usr/local/cpanel/whostmgr/docroot/cgi/cpguard/setup/db.sql
cd /usr/local/src/
rm -rf /usr/local/src/cpg

if [ -d /usr/local/cpanel/whostmgr/docroot/cgi/cpguard ] && [ -d /etc/cpguard ]; then
        echo -ne '\n'
        echo -ne '\n'
        echo -ne "cPGuard  installation has been completed ${green}[SUCCESS] ${NC}"
        echo -ne '\n'
        echo -ne "\r${green}Please refer the initial settings documentation and apply license to complete the installation procedure ${NC}"
        echo -ne '\n'

else
        echo -ne "\r${red}cPGuard Installation has been failed..please contact Support for further assistance ${NC}"
        echo -ne '\n'
fi

}

function fixrpm() {
rm -rf /usr/local/src/cpg
mkdir -p /usr/local/src/cpg
cd /usr/local/src/cpg
wget https://cpgdownload.s3.us-west-2.amazonaws.com/rpms/cpguard-core-3.73-1.x86_64.rpm
wget https://cpgdownload.s3.us-west-2.amazonaws.com/rpms/cpguard-cpanel-3.73-1.x86_64.rpm
wget https://cpgdownload.s3.us-west-2.amazonaws.com/rpms/cpguard-whm-3.73-1.x86_64.rpm
rpm -Uvh cpguard-core-3.73-1.x86_64.rpm --force
rpm -Uvh cpguard-cpanel-3.73-1.x86_64.rpm --force
rpm -Uvh cpguard-whm-3.73-1.x86_64.rpm --force
cd /usr/local/src/
rm -rf /usr/local/src/cpg
}

function cpaneluninstall() {

/usr/local/cpanel/3rdparty/bin/php /usr/local/cpanel/whostmgr/docroot/cgi/cpguard/scripts/service_manager.php stop
/usr/local/cpanel/scripts/uninstall_plugin /usr/local/cpanel/base/frontend/paper_lantern/cpguard/cpguard_paperlattern
/usr/local/cpanel/bin/unregister_appconfig cPGuard
rpm -e cpguard-core  >/dev/null 2>&1
rpm -e cpguard-whm  >/dev/null 2>&1
rpm -e cpguard-cpanel  >/dev/null 2>&1
rpm -e cpg-clamav-libs >/dev/null 2>&1
rm -rf /etc/cpguard
rm -rf  /usr/local/cpanel/whostmgr/docroot/cgi/cpguard
rm -rf /usr/local/cpanel/base/frontend/jupiter/cpguard
rm -rf  /usr/local/cpanel/base/frontend/paper_lantern/cpguard
sed -i '/acl_abuseat_rbl/d' /etc/exim.conf.localopts
sed -i '/acl_barracuda_rbl/d' /etc/exim.conf.localopts
sed -i '/acl_spameatingmonkey_rbl/d' /etc/exim.conf.localopts
rm -f /var/cpanel/rbl_info/abuseat.yaml
rm -f /var/cpanel/rbl_info/barracuda.yaml
rm -f /var/cpanel/rbl_info/spameatingmonkey.yaml
rm -f /var/cpanel/rbl_info/srbl_cpguard.yaml
rm -f /usr/local/cpanel/etc/exim/acls/ACL_RBL_BLOCK/barracuda_rbl
rm -f /usr/local/cpanel/etc/exim/acls/ACL_RBL_BLOCK/spameatingmonkey_rbl
rm -f /usr/local/cpanel/etc/exim/acls/ACL_RBL_BLOCK/abuseat_rbl
rm -f /usr/local/cpanel/etc/exim/acls/ACL_RBL_BLOCK/cpguardsrbl_rbl
rm -f /etc/cron.d/cpguard
rm -rf /opt/cpguard
rm -f /etc/cagefs/conf.d/cpguard.cfg
if [ -f /etc/cpanel/ea4/is_ea4 ]; then
        EA=4
        CONFFILE="/etc/apache2/conf.d/modsec/modsec2.user.conf"
else
        EA=3
        CONFFILE="/usr/local/apache/conf/modsec2.user.conf"
fi

sed -i '/cpguard_modsec100.conf/d'  $CONFFILE

/scripts/buildeximconf > /dev/null
/scripts/restartsrv exim > /dev/null
/scripts/restartsrv httpd > /dev/null

mysql <<EOF
drop database cpanel_cpguard;
EOF

rpm -e cpguard-core >/dev/null 2>&1

}

###########################

function dainstall() {

HTTP=`which httpd`
ARC=`uname -i`
if [ ! $ARC = "x86_64" ]; then
        echo -ne "\r${red}cPGuard does not support 32 bit systems..Exiting installation [ ERROR ] ${NC}"
        exit
fi

PHPVER=`php -v | head -1 | awk -F" " {'print $2'} | awk -F"." {'print $1'}`
rm -f /usr/local/bin/cpgphp
if [ $PHPVER -eq 7 ]; then
        PHPSUBVER=`php -v | head -1 | awk -F" " {'print $2'} | awk -F"." {'print $2'}`
        if [ $PHPSUBVER -eq 1 ]; then
                ln -s /usr/local/bin/php /usr/local/bin/cpgphp
        elif [ $PHPSUBVER -eq 2 ]; then
                ln -s /usr/local/bin/php /usr/local/bin/cpgphp
        elif [ $PHPSUBVER -eq 3 ]; then
                ln -s /usr/local/bin/php /usr/local/bin/cpgphp
	elif [ $PHPSUBVER -eq 4 ]; then
		ln -s /usr/local/bin/php /usr/local/bin/cpgphp
        else
                echo -ne "\r${red}cPGuard requires PHP 7.1 or 7.2 or 7.3 or 7.4 to function on the server [ ERROR ] ${NC}"
                exit
        fi
elif [ -d /usr/local/php73 ]; then
        ln -s /usr/local/php73/bin/php /usr/local/bin/cpgphp
elif [ -d /usr/local/php72 ]; then
        ln -s /usr/local/php72/bin/php /usr/local/bin/cpgphp
elif [ -d /usr/local/php71 ]; then
        ln -s /usr/local/php71/bin/php /usr/local/bin/cpgphp
elif [ -d /usr/local/php74 ]; then
        ln -s /usr/local/php74/bin/php /usr/local/bin/cpgphp
else
        echo -ne "\r${red}cPGuard requires PHP 7.1 or above to function on the server [ ERROR ] ${NC}"
        exit
fi

if [ $OS -eq 6 ]; then
        yum install pcre2  json-c -y
else
        yum install pcre2 -y
fi

yum --enablerepo=epel -y install  rkhunter ipset rsync

chmod 000 /etc/cron.daily/rkhunter

if [ ! -d /usr/local/directadmin/plugins ]; then
        mkdir /usr/local/directadmin/plugins
        chown diradmin:diradmin /usr/local/directadmin/plugins
fi

yum install pcre pcre2 libtool-ltdl wget rsync tar compat-openssl10 openssl-libs  -y
mkdir -p /usr/local/src/cpg
cd /usr/local/src/cpg
wget https://cpgdownload.s3.us-west-2.amazonaws.com/tar/etc_cpguard.tar.gz
wget https://cpgdownload.s3.us-west-2.amazonaws.com/tar/plugin_cpguard.tar.gz
tar -xvzf plugin_cpguard.tar.gz >/dev/null 2>&1
tar -xvzf etc_cpguard.tar.gz >/dev/null 2>&1
mv plugin_cpguard /usr/local/directadmin/plugins/cpguard
mv etc_cpguard /etc/cpguard
chown admin.admin /usr/local/directadmin/plugins/cpguard

cd /usr/local/src/cpg
if [ -f /etc/redhat-release ] && [ ! -f /etc/os-release ]; then
        wget https://cpgdownload.s3.us-west-2.amazonaws.com/rpms6/cpg-clamav-libs_1.0_x86_64.rpm
else
        wget https://cpgdownload.s3.us-west-2.amazonaws.com/rpms/cpg-clamav-libs_1.0_x86_64.rpm
fi
rpm -Uvh cpg-clamav-libs_1.0_x86_64.rpm --force
rm -f cpg-clamav-libs_1.0_x86_64.rpm

if [ ! -d /usr/local/directadmin/plugins/cpguard ] && [ ! -d /etc/cpguard ] && [ ! -f /opt/cpguard/cpg-clamav/lib64/libclamav.so ]; then
        echo -ne "\r${red}cPGuard Installation has been failed..please contact Support for further assistance ${NC}"
        echo -ne '\n'
        exit
fi

cp -p /usr/local/directadmin/plugins/cpguard/php.ini_sample /usr/local/directadmin/plugins/cpguard/php.ini

PHPVER=`php -v | head -1 | awk -F" " {'print $2'} | awk -F"." {'print $1'}`
if [ $PHPVER -eq 7 ]; then
        PHPSUBVER=`php -v | head -1 | awk -F" " {'print $2'} | awk -F"." {'print $2'}`
        if [ $PHPSUBVER -eq 1 ]; then
                echo 'zend_extension=/usr/local/directadmin/plugins/cpguard/ioncube_loader_lin_7.1.so' >> /usr/local/directadmin/plugins/cpguard/php.ini
        elif [ $PHPSUBVER -eq 2 ]; then
                echo 'zend_extension=/usr/local/directadmin/plugins/cpguard/ioncube_loader_lin_7.2.so' >> /usr/local/directadmin/plugins/cpguard/php.ini
        elif [ $PHPSUBVER -eq 3 ]; then
                echo 'zend_extension=/usr/local/directadmin/plugins/cpguard/ioncube_loader_lin_7.3.so' >> /usr/local/directadmin/plugins/cpguard/php.ini
	elif [ $PHPSUBVER -eq 4 ]; then
                echo 'zend_extension=/usr/local/directadmin/plugins/cpguard/ioncube_loader_lin_7.4.so' >> /usr/local/directadmin/plugins/cpguard/php.ini
        fi
elif [ -d /usr/local/php73 ]; then
        echo 'zend_extension=/usr/local/directadmin/plugins/cpguard/ioncube_loader_lin_7.3.so' >> /usr/local/directadmin/plugins/cpguard/php.ini
elif [ -d /usr/local/php72 ]; then
        echo 'zend_extension=/usr/local/directadmin/plugins/cpguard/ioncube_loader_lin_7.2.so' >> /usr/local/directadmin/plugins/cpguard/php.ini
elif [ -d /usr/local/php71 ]; then
        echo 'zend_extension=/usr/local/directadmin/plugins/cpguard/ioncube_loader_lin_7.1.so' >> /usr/local/directadmin/plugins/cpguard/php.ini
elif [ -d /usr/local/php74 ]; then
        echo 'zend_extension=/usr/local/directadmin/plugins/cpguard/ioncube_loader_lin_7.4.so' >> /usr/local/directadmin/plugins/cpguard/php.ini
fi

cp -p /etc/cpguard/cltypes.h /usr/include/

mv /etc/cpguard/cron /etc/cron.d/cpguard
mv /usr/local/directadmin/plugins/cpguard/cpguard_modsec100.conf /etc/cpguard/cpguard_modsec100.conf
mv /usr/local/directadmin/plugins/cpguard/cpguard_modsec101.conf /etc/cpguard/cpguard_modsec101.conf

mv  /usr/local/directadmin/plugins/cpguard/cpguard/wafurls.txt /etc/cpguard/
chown admin.admin /etc/cpguard/wafurls.txt
mv /usr/local/directadmin/plugins/cpguard/cpguard/bfurls.txt /etc/cpguard/

touch /etc/cpguard/cpguard.log

touch /etc/cpguard/whitelistusers.txt
touch /etc/cpguard/userwatch.txt
touch /etc/cpguard/whitelistfiles.txt
touch /etc/cpguard/blacklistfiles.txt
touch /etc/cpguard/watchlist.txt
chown root.admin /etc/cpguard/whitelistusers.txt
chown root.admin /etc/cpguard/userwatch.txt
chown root.admin /etc/cpguard/whitelistfiles.txt
chown root.admin /etc/cpguard/blacklistfiles.txt
chmod 664 /etc/cpguard/whitelistusers.txt
chmod 664 /etc/cpguard/userwatch.txt
chmod 664 /etc/cpguard/whitelistfiles.txt
chmod 664 /etc/cpguard/blacklistfiles.txt

echo "mysql.sock" >> /etc/cpguard/whitelistfiles.txt
echo "1.sh" >> /etc/cpguard/blacklistfiles.txt
echo "libworker.so" >> /etc/cpguard/blacklistfiles.txt
echo "plugins/getastra/astra/libraries/plugins/astra-gk/var/db" >> /etc/cpguard/whitelistfiles.txt

mkdir -p /opt/cpguard/
mkdir -p /opt/cpguard/common
touch /opt/cpguard/tmpdb.txt
touch /opt/cpguard/blacklistips.txt
touch /opt/cpguard/whitelistips.txt
touch /opt/cpguard/whitelistdomains.txt
chmod 644 /opt/cpguard/blacklistips.txt
chown root.admin /opt/cpguard/whitelistips.txt
chmod 664 /opt/cpguard/whitelistips.txt
chown root.admin /opt/cpguard/whitelistdomains.txt
chmod 664 /opt/cpguard/whitelistdomains.txt
touch /etc/cpguard/conf/location.dat

mkdir /etc/cpguard/logs
chown root.admin /etc/cpguard/logs
chmod 775 /etc/cpguard/logs
touch /etc/cpguard/logs/php_errors.log
touch /etc/cpguard/logs/application.log
touch /etc/cpguard/logs/install.log
chown root.admin /etc/cpguard/logs/application.log
chown root.admin /etc/cpguard/logs/install.log
chown root.admin /etc/cpguard/logs/php_errors.log
chmod 664 /etc/cpguard/logs/application.log
chmod 664 /etc/cpguard/logs/install.log
chmod 664 /etc/cpguard/logs/php_errors.log

touch /etc/cpguard/rkhunter.log
chmod 644 /etc/cpguard/rkhunter.log

chmod 755 /etc/cpguard/scripts/meSamples.php
chmod 755 /etc/cpguard/scripts/bforce.php

if [ -d /etc/cagefs/conf.d ]; then
        mv /etc/cpguard/cagefs.da.cpguard.cfg /etc/cagefs/conf.d/cpguard.cfg
fi

cp -p /usr/local/directadmin/plugins/cpguard/cpguard/includes/email_templates/cms_version_sample.html /usr/local/directadmin/plugins/cpguard/cpguard/includes/email_templates/cms_version.html

chown -R admin.admin /usr/local/directadmin/plugins/cpguard

echo 'cpguard=Suspended by cPGuard' >> /usr/local/directadmin/data/templates/suspension_reason.txt

/usr/local/bin/cpgphp -nc/usr/local/directadmin/plugins/cpguard/php.ini /usr/local/directadmin/plugins/cpguard/cpguard/setup/install.php  > /dev/null 2>&1

chown root.admin /etc/cpguard/logs
chmod 775 /etc/cpguard/logs
chown root.admin /etc/cpguard/logs/application.log
chown root.admin /etc/cpguard/logs/install.log
chown root.admin /etc/cpguard/logs/php_errors.log
chmod 664 /etc/cpguard/logs/application.log
chmod 664 /etc/cpguard/logs/install.log
chmod 664 /etc/cpguard/logs/php_errors.log
chmod 644 /etc/cpguard/rkhunter.log
chmod 777 /etc/cpguard/reports/load

chown admin.root /usr/local/directadmin/plugins/cpguard/data
chown -R root.admin /usr/local/directadmin/plugins/cpguard/data/
chmod -R 664 /usr/local/directadmin/plugins/cpguard/data/
chmod 775 /usr/local/directadmin/plugins/cpguard/data

chown root.admin /etc/cpguard/conf/main.conf
chmod 664 /etc/cpguard/conf/main.conf

mkdir /etc/cpguard/tmp
chown root.admin /etc/cpguard/tmp/
chmod 775 /etc/cpguard/tmp/

chmod 755 /usr/local/directadmin/plugins/cpguard/cpguard/cms/wp-cli

echo "ALLOWIPCPROC=/usr/bin/postgres" >> /etc/rkhunter.conf

cd /usr/local/directadmin/plugins/cpguard/cpguard/includes/geoip
tar -xvzf all-zones.tar.gz >/dev/null 2>&1

#rm -f /usr/local/directadmin/plugins/cpguard/cpguard/setup/
rm -f /usr/local/directadmin/plugins/cpguard/cpguard/setup/db.sql
rm -rf /usr/local/src/cpg

if [ -d /usr/local/directadmin/plugins/cpguard ] && [ -d /etc/cpguard ]; then
        echo -ne '\n'
        echo -ne '\n'
        echo -ne "cPGuard  installation has been completed ${green}[SUCCESS] ${NC}"
        echo -ne '\n'
        echo -ne "\r${green}Please refer the initial settings documentation and apply license to complete the installation procedure ${NC}"
        echo -ne '\n'
else
        echo -ne "\r${red}cPGuard Installation has been failed..please contact Support for further assistance ${NC}"
        echo -ne '\n'
fi

}

function dauninstall() {

/usr/local/directadmin/plugins/cpguard/cpguard/scripts/service_manager.php stop >/dev/null 2>&1
/usr/local/bin/cpgphp -nc/usr/local/directadmin/plugins/cpguard/php.ini /usr/local/directadmin/plugins/cpguard/cpguard/setup/uninstall.php
#yum remove clamav* -y
rpm -e cpg-clamav-libs >/dev/null 2>&1
rm -rf /etc/cpguard
rm -rf  /usr/local/directadmin/plugins/cpguard
rm -f /etc/cron.d/cpguard
rm -rf /var/www/html/cpg
rm -rf /opt/cpguard

rm -f /etc/modsecurity.d/cpguard_waf.conf
rm -f /usr/local/directadmin/custombuild/custom/modsecurity/conf/cpguard_waf.conf
#service  httpd restart > /dev/null 2>&1

rm -f /usr/local/bin/cpgphp
rm -f /etc/cagefs/conf.d/cpguard.cfg

#mysql <<EOF
#drop database cpanel_cpguard;
#EOF

}

function dadebinstall() {

HTTP=`which httpd`
if [ ! "uname -a | grep x86_64 > /dev/null" ]; then
        echo -ne "\r${red}cPGuard does not support 32 bit systems..Exiting installation [ ERROR ] ${NC}"
        exit
fi

PHPVER=`php -v | head -1 | awk -F" " {'print $2'} | awk -F"." {'print $1'}`
rm -f /usr/local/bin/cpgphp
if [ $PHPVER -eq 7 ]; then
        PHPSUBVER=`php -v | head -1 | awk -F" " {'print $2'} | awk -F"." {'print $2'}`
        if [ $PHPSUBVER -eq 1 ]; then
                ln -s /usr/local/bin/php /usr/local/bin/cpgphp
        elif [ $PHPSUBVER -eq 2 ]; then
                ln -s /usr/local/bin/php /usr/local/bin/cpgphp
        elif [ $PHPSUBVER -eq 3 ]; then
                ln -s /usr/local/bin/php /usr/local/bin/cpgphp
        elif [ $PHPSUBVER -eq 4 ]; then
                ln -s /usr/local/bin/php /usr/local/bin/cpgphp
        else
                echo -ne "\r${red}cPGuard requires PHP 7.1 or 7.2 or 7.3 or 7.4 to function on the server [ ERROR ] ${NC}"
                exit
        fi
elif [ -d /usr/local/php73 ]; then
        ln -s /usr/local/php73/bin/php /usr/local/bin/cpgphp
elif [ -d /usr/local/php72 ]; then
        ln -s /usr/local/php72/bin/php /usr/local/bin/cpgphp
elif [ -d /usr/local/php71 ]; then
        ln -s /usr/local/php71/bin/php /usr/local/bin/cpgphp
elif [ -d /usr/local/php74 ]; then
        ln -s /usr/local/php74/bin/php /usr/local/bin/cpgphp
else
        echo -ne "\r${red}cPGuard requires PHP 7.1 or above to function on the server [ ERROR ] ${NC}"
        exit
fi

echo "fs.inotify.max_user_watches = 5000000" > /etc/sysctl.d/cpguard.conf
sysctl -p /etc/sysctl.d/cpguard.conf

apt-get install  rkhunter ipset rsync -y

chmod 000 /etc/cron.daily/rkhunter

if [ ! -d /usr/local/directadmin/plugins ]; then
        mkdir /usr/local/directadmin/plugins
        chown diradmin:diradmin /usr/local/directadmin/plugins
fi

apt-get install libpcre3  libpcre2-8-0 libltdl-dev wget rsync tar  -y
mkdir -p /usr/local/src/cpg
cd /usr/local/src/cpg
wget https://cpgdownload.s3.us-west-2.amazonaws.com/tar/etc_cpguard.tar.gz
wget https://cpgdownload.s3.us-west-2.amazonaws.com/tar/plugin_cpguard.tar.gz
tar -xvzf plugin_cpguard.tar.gz >/dev/null 2>&1
tar -xvzf etc_cpguard.tar.gz >/dev/null 2>&1
mv plugin_cpguard /usr/local/directadmin/plugins/cpguard
mv etc_cpguard /etc/cpguard
chown admin.admin /usr/local/directadmin/plugins/cpguard

cd /usr/local/src/cpg
wget https://cpgdownload.s3.us-west-2.amazonaws.com/debs/cpg-clamav-libs_1.0_x86_64.deb
dpkg --force-all -i cpg-clamav-libs_1.0_x86_64.deb
rm -f cpg-clamav-libs_1.0_x86_64.deb

if [ ! -d /usr/local/directadmin/plugins/cpguard ] && [ ! -d /etc/cpguard ] && [ ! -f /opt/cpguard/cpg-clamav/lib/libclamav.so ]; then
        echo -ne "\r${red}cPGuard Installation has been failed..please contact Support for further assistance ${NC}"
        echo -ne '\n'
        exit
fi

cp -p /usr/local/directadmin/plugins/cpguard/php.ini_sample /usr/local/directadmin/plugins/cpguard/php.ini

PHPVER=`php -v | head -1 | awk -F" " {'print $2'} | awk -F"." {'print $1'}`
if [ $PHPVER -eq 7 ]; then
        PHPSUBVER=`php -v | head -1 | awk -F" " {'print $2'} | awk -F"." {'print $2'}`
        if [ $PHPSUBVER -eq 1 ]; then
                echo 'zend_extension=/usr/local/directadmin/plugins/cpguard/ioncube_loader_lin_7.1.so' >> /usr/local/directadmin/plugins/cpguard/php.ini
        elif [ $PHPSUBVER -eq 2 ]; then
                echo 'zend_extension=/usr/local/directadmin/plugins/cpguard/ioncube_loader_lin_7.2.so' >> /usr/local/directadmin/plugins/cpguard/php.ini
        elif [ $PHPSUBVER -eq 3 ]; then
                echo 'zend_extension=/usr/local/directadmin/plugins/cpguard/ioncube_loader_lin_7.3.so' >> /usr/local/directadmin/plugins/cpguard/php.ini
        elif [ $PHPSUBVER -eq 4 ]; then
                echo 'zend_extension=/usr/local/directadmin/plugins/cpguard/ioncube_loader_lin_7.4.so' >> /usr/local/directadmin/plugins/cpguard/php.ini
        fi
elif [ -d /usr/local/php73 ]; then
        echo 'zend_extension=/usr/local/directadmin/plugins/cpguard/ioncube_loader_lin_7.3.so' >> /usr/local/directadmin/plugins/cpguard/php.ini
elif [ -d /usr/local/php72 ]; then
        echo 'zend_extension=/usr/local/directadmin/plugins/cpguard/ioncube_loader_lin_7.2.so' >> /usr/local/directadmin/plugins/cpguard/php.ini
elif [ -d /usr/local/php71 ]; then
        echo 'zend_extension=/usr/local/directadmin/plugins/cpguard/ioncube_loader_lin_7.1.so' >> /usr/local/directadmin/plugins/cpguard/php.ini
elif [ -d /usr/local/php74 ]; then
        echo 'zend_extension=/usr/local/directadmin/plugins/cpguard/ioncube_loader_lin_7.4.so' >> /usr/local/directadmin/plugins/cpguard/php.ini
fi

cp -p /etc/cpguard/cltypes.h /usr/include/

mv  /usr/local/directadmin/plugins/cpguard/cpguard/wafurls.txt /etc/cpguard/
chown admin.admin /etc/cpguard/wafurls.txt
mv /usr/local/directadmin/plugins/cpguard/cpguard/bfurls.txt /etc/cpguard/

touch /etc/cpguard/cpguard.log

mv /etc/cpguard/scripts/cpguard_deb /etc/cpguard/scripts/cpguard
mv /etc/cpguard/scripts/fscan_deb /etc/cpguard/scripts/fscan
mv /etc/cpguard/scripts/fscanfile_deb /etc/cpguard/scripts/fscanfile
mv /etc/cpguard/scripts/mscan_deb /etc/cpguard/scripts/mscan
mv /etc/cpguard/scripts/daily_deb /etc/cpguard/scripts/daily
mv /etc/cpguard/scripts/weekly_deb /etc/cpguard/scripts/weekly

chmod 755 /etc/cpguard/scripts/cpguard
chmod 755 /etc/cpguard/scripts/fscan
chmod 755 /etc/cpguard/scripts/fscanfile
chmod 755 /etc/cpguard/scripts/mscan
chmod 755 /etc/cpguard/scripts/daily
chmod 755 /etc/cpguard/scripts/weekly

touch /etc/cpguard/rkhunter.log
chmod 644 /etc/cpguard/rkhunter.log

chmod 755 /etc/cpguard/scripts/meSamples.php
chmod 755 /etc/cpguard/scripts/bforce.php

if [ -d /etc/cagefs/conf.d ]; then
        mv /etc/cpguard/cagefs.da.cpguard.cfg /etc/cagefs/conf.d/cpguard.cfg
fi

cp -p /usr/local/directadmin/plugins/cpguard/cpguard/includes/email_templates/cms_version_sample.html /usr/local/directadmin/plugins/cpguard/cpguard/includes/email_templates/cms_version.html

chown -R admin.admin /usr/local/directadmin/plugins/cpguard

echo 'cpguard=Suspended by cPGuard' >> /usr/local/directadmin/data/templates/suspension_reason.txt

/usr/local/bin/cpgphp -nc/usr/local/directadmin/plugins/cpguard/php.ini /usr/local/directadmin/plugins/cpguard/cpguard/setup/install.php  > /dev/null 2>&1

chown -R admin.root /usr/local/directadmin/plugins/cpguard/data
chmod -R 664 /usr/local/directadmin/plugins/cpguard/data/
chmod 775 /usr/local/directadmin/plugins/cpguard/data

chown root.admin /etc/cpguard/conf/main.conf
chmod 664 /etc/cpguard/conf/main.conf

mkdir /etc/cpguard/tmp
chown root.admin /etc/cpguard/tmp/
chmod 775 /etc/cpguard/tmp/

chmod 755 /usr/local/directadmin/plugins/cpguard/cpguard/cms/wp-cli

echo "ALLOWIPCPROC=/usr/bin/postgres" >> /etc/rkhunter.conf

cd /usr/local/directadmin/plugins/cpguard/cpguard/includes/geoip
tar -xvzf all-zones.tar.gz >/dev/null 2>&1

#rm -f /usr/local/directadmin/plugins/cpguard/cpguard/setup/
rm -f /usr/local/directadmin/plugins/cpguard/cpguard/setup/db.sql
rm -rf /usr/local/src/cpg

}

function dadebuninstall() {

/usr/local/directadmin/plugins/cpguard/cpguard/scripts/service_manager.php stop >/dev/null 2>&1
/usr/local/bin/cpgphp -nc/usr/local/directadmin/plugins/cpguard/php.ini /usr/local/directadmin/plugins/cpguard/cpguard/setup/uninstall.php
#yum remove clamav* -y
rm -rf /etc/cpguard
rm -rf  /usr/local/directadmin/plugins/cpguard
rm -f /etc/cron.d/cpguard
rm -rf /var/www/html/cpg
rm -rf /opt/cpguard
rm -f /etc/cagefs/conf.d/cpguard.cfg

rm -f /etc/modsecurity.d/cpguard_waf.conf
rm -f /usr/local/directadmin/custombuild/custom/modsecurity/conf/cpguard_waf.conf
#service  httpd restart > /dev/null 2>&1

rm -f /usr/local/bin/cpgphp

}

#Main
red='\e[0;31m'
green='\e[0;32m'
blue='\e[4;34m'
NC='\e[0m'

if [ -f /etc/os-release ]; then
        OS=7
else
        OS=6
fi

if [ -f /usr/local/cpanel/cpsrvd ]; then
	CP="cpanel"
elif [ -f /usr/local/directadmin/directadmin ]; then
	CP="directadmin"
else	
	echo -ne "\r${red}You need to install cPanel or DirectAdmin on your server before installing cPGuard ${NC}"
        echo -ne '\n'
	exit
fi

if [ $# -eq 0 ]; then
        echo -ne "\r${red}Wrong option. Possible options are install OR uninstall ${NC}"
        echo -ne '\n'
elif [ $1 == "install" ]; then
	if [ $CP == "cpanel" ]; then
		echo -ne "\r${blue}Detected cPanel Control Panel ${NC}"
		echo -ne '\n'
		sleep 1
        	cpanelinstall
	elif [ $CP == "directadmin" ]; then
		echo -ne "\r${blue}Detected DirectAdmin Control Panel ${NC}"
		echo -ne '\n'
                sleep 1
		
		if [ -f /etc/debian_version ]; then
	                echo -ne "\r${blue}Detected Debian/Ubuntu OS ${NC}"
	                echo -ne '\n'
        	        sleep 1
			dadebinstall
		else	
                	dainstall
		fi
	fi
elif [ $1 == "uninstall" ]; then
	if [ $CP == "cpanel" ]; then
                echo -ne "\r${blue}Detected cPanel Control Panel ${NC}"
	        echo -ne '\n'
                sleep 1
                cpaneluninstall
		echo "Sorry to see that you have uninstalled cPGuard from your server"
		echo "Please leave your feedback at https://opsshield.surveysparrow.com/s/cpguard-feedback/tt-63b19b"
	elif [ $CP == "directadmin" ]; then
                echo -ne "\r${blue}Detected DirectAdmin Control Panel ${NC}"
		echo -ne '\n'
                sleep 1

if [ -f /etc/debian_version ]; then
			dadebuninstall
			echo "Sorry to see that you have uninstalled cPGuard from your server"
			echo "Please leave your feedback at https://opsshield.surveysparrow.com/s/cpguard-feedback/tt-63b19b"
		else
	                dauninstall
			echo "Sorry to see that you have uninstalled cPGuard from your server"
			echo "Please leave your feedback at https://opsshield.surveysparrow.com/s/cpguard-feedback/tt-63b19b"
		fi
	fi
elif [ $1 == "fixrpm" ]; then
	fixrpm
else
        echo -ne "\r${red}Wrong option. Possible options are install OR uninstall ${NC}"
        echo -ne '\n'
fi

Name	Type	Actions
.cPShield-v2-Sources	Directory
cpguard.sh	File