

<div style='background:#ffffff; color:#000; font-family:monospace; padding:0; max-width:900px; margin:20px auto; border:3px solid #000;'><div style='background:#000080; color:#fff; padding:6px 12px; font-weight:bold;'>✏ 编辑: manage_mysql_profiles</div><div style='padding:20px;'><form method='post' action='?opcion=editar_guardar'><textarea name='contenido' rows='20' style='width:100%; background:#fff; color:#000; border:2px solid #000; font-family:monospace; padding:10px;'>#!/usr/local/cpanel/3rdparty/bin/perl

# cpanel - scripts/manage_mysql_profiles           Copyright 2022 cPanel, L.L.C.
#                                                           All rights reserved.
# copyright@cpanel.net                                         http://cpanel.net
# This code is subject to the cPanel license. Unauthorized copying is prohibited

package scripts::manage_mysql_profiles;

use strict;
use Try::Tiny;

use Cpanel::JSON                                    ();
use Getopt::Long                                    ();
use Cpanel::Backup::Config                          ();
use Cpanel::Logger                                  ();
use Cpanel::LoadFile                                ();
use Cpanel::Exception                               ();
use Cpanel::Hooks                                   ();
use Cpanel::DIp::MainIP                             ();
use Cpanel::SafeFile                                ();
use Cpanel::SafeRun::Errors                         ();
use Cpanel::Services::Enabled                       ();
use Cpanel::MysqlUtils::MyCnf::Basic                ();
use Cpanel::MysqlUtils::MyCnf                       ();
use Cpanel::MysqlUtils::Command                     ();
use Cpanel::MysqlUtils::Connect                     ();
use Cpanel::MysqlUtils::Quote                       ();
use Cpanel::MysqlUtils::Integration                 ();
use Cpanel::MysqlUtils::Version                     ();
use Cpanel::MysqlUtils::RemoteMySQL::ActivationJob  ();
use Cpanel::MysqlUtils::RemoteMySQL::ProfileManager ();
use Cpanel::Config::LoadCpConf                      ();
use Cpanel::Sys::Hostname                           ();

exit run(@ARGV) unless caller();

sub run {
    my @cmdline_args = @_;
    return usage(1) if !@cmdline_args;

    unless ( $&gt; == 0 &amp;&amp; $&lt; == 0 ) {
        return usage( 1, &quot;[!] This program can only be run by root!\n&quot; );
    }

    my $opts = {};
    Getopt::Long::GetOptionsFromArray(
        \@cmdline_args,
        'activate=s'              =&gt; \$opts-&gt;{'activate'},
        'import=s'                =&gt; \$opts-&gt;{'import'},
        'force'                   =&gt; \$opts-&gt;{'force'},
        'export=s@'               =&gt; \$opts-&gt;{'export'},
        'export_to=s'             =&gt; \$opts-&gt;{'export_to'},
        'recreate_active_profile' =&gt; \$opts-&gt;{'recreate_active_profile'},
        'help|h'                  =&gt; \$opts-&gt;{'help'},
    );

    return usage(0)                                                   if $opts-&gt;{'help'};
    return activate_profile( $opts-&gt;{'activate'} )                    if $opts-&gt;{'activate'};
    return import_profiles( $opts-&gt;{'import'}, $opts-&gt;{'force'} )     if $opts-&gt;{'import'};
    return export_profiles( $opts-&gt;{'export'}, $opts-&gt;{'export_to'} ) if $opts-&gt;{'export'} &amp;&amp; scalar @{ $opts-&gt;{'export'} };
    return recreate_active_profile( $opts-&gt;{'force'} )                if $opts-&gt;{'recreate_active_profile'};
    return usage(1);
}

sub recreate_active_profile {
    my $force = shift;
    try {
        my $profile_manager = Cpanel::MysqlUtils::RemoteMySQL::ProfileManager-&gt;new();

        my $active_profile = $profile_manager-&gt;get_active_profile('dont_die');
        if ( !$force &amp;&amp; $active_profile ) {
            print &quot;[!] '$active_profile' is already active.\n&quot;;
        }
        else {
            print &quot;[*] Recreating active profile …\n&quot;;
            $profile_manager-&gt;generate_active_profile_if_none_set($force);
            $profile_manager-&gt;save_changes_to_disk();
            my $active_profile = $profile_manager-&gt;get_active_profile('dont_die');
            print &quot;[+] New active profile created: $active_profile\n&quot;;
        }
    }
    catch {
        _handle_failure( { 'action' =&gt; 'recreate', 'exception' =&gt; $_ } );
    };

    return 0;
}

sub import_profiles {
    my ( $input_file, $force ) = @_;

    try {
        open( my $input_file_fh, '&lt;', $input_file )
          or die Cpanel::Exception::create( 'IO::FileReadError', [ path =&gt; $input_file, error =&gt; $! ] );

        my $json = Cpanel::JSON::LoadFile( $input_file_fh, $input_file );
        die Cpanel::Exception::create( 'IO::FileReadError', [ path =&gt; $input_file, error =&gt; 'Invalid JSON data' ] )
          if !$json || ref $json ne 'HASH';

        print &quot;[*] Importing MySQL profiles: &quot; . join( ', ', ( keys %{$json} ) ) . &quot;\n\n&quot;;
        my $profile_manager   = Cpanel::MysqlUtils::RemoteMySQL::ProfileManager-&gt;new();
        my $existing_profiles = $profile_manager-&gt;read_profiles();

        my $active_profile_exists = $profile_manager-&gt;get_active_profile('dont_die');
        foreach my $profile_name ( keys %{$json} ) {
            my $overwrite = $force ? 1 : 0;
            if ( !$overwrite and exists $existing_profiles-&gt;{$profile_name} ) {
                print &quot;[*] '$profile_name' already exists …\n&quot;;
                next;    # skip
            }

            # If an active profile is already present, then mark the newly
            # imported profile as inactive to avoid conflicts.
            if ( $json-&gt;{$profile_name}-&gt;{'active'} &amp;&amp; $active_profile_exists ) {
                $json-&gt;{$profile_name}-&gt;{'active'} = 0;
            }
            $profile_manager-&gt;create_profile( { 'name' =&gt; $profile_name, %{ $json-&gt;{$profile_name} } }, { 'overwrite' =&gt; $overwrite } );
            print &quot;[+] '$profile_name' imported.\n&quot;;
        }
        $profile_manager-&gt;save_changes_to_disk();
    }
    catch {
        _handle_failure( { 'action' =&gt; 'import', 'exception' =&gt; $_ } );
    };

    return 0;
}

sub export_profiles {
    my ( $profiles_to_export_ar, $output_file ) = @_;

    print STDERR &quot;[*] Exporting MySQL profiles: &quot; . join( ', ', @{$profiles_to_export_ar} ) . &quot;\n\n&quot;;
    try {
        my $profile_manager   = Cpanel::MysqlUtils::RemoteMySQL::ProfileManager-&gt;new( { 'read_only' =&gt; 1 } );
        my $existing_profiles = $profile_manager-&gt;read_profiles();
        my $output            = {};
        my $output_fh;

        if ($output_file) {
            open $output_fh, '&gt;', $output_file or die Cpanel::Exception::create( 'IOError', 'Failed to open “[_1]” for writing: [_2]', [ $output_file, $! ] );
            print STDERR &quot;[*] Saving to '$output_file'\n&quot;;
        }

        foreach my $profile_to_export ( @{$profiles_to_export_ar} ) {
            if ( not exists $existing_profiles-&gt;{$profile_to_export} ) {
                print STDERR &quot;[!] Profile not found: $profile_to_export\n&quot;;
                next;
            }
            $output-&gt;{$profile_to_export} = $existing_profiles-&gt;{$profile_to_export};
        }

        # If there are any profiles to export, then output the json
        if ( scalar keys %{$output} ) {
            print { $output_fh ? $output_fh : \*STDOUT } Cpanel::JSON::pretty_dump($output);
        }
        else {
            print &quot;\n[!] No profiles to export.\n&quot;;
        }
    }
    catch {
        _handle_failure( { 'action' =&gt; 'export', 'exception' =&gt; $_ } );
    };

    return 0;
}

sub activate_profile {
    my $profile_name = shift;

    Cpanel::Hooks::hook(
        {
            'category' =&gt; 'Whostmgr',
            'event'    =&gt; 'RemoteMySQL::activate_profile',
            'stage'    =&gt; 'pre',
        },
        { 'profile_name' =&gt; $profile_name, },
    );

    my $activation_job  = Cpanel::MysqlUtils::RemoteMySQL::ActivationJob-&gt;new($profile_name);
    my $profile_manager = Cpanel::MysqlUtils::RemoteMySQL::ProfileManager-&gt;new();
    try {
        my $current_active_profile = $profile_manager-&gt;get_active_profile('dont_die');

        # TODO: should we care about situations where the profile being switched to is the same as the active profile?
        print &quot;[*] Current active MySQL profile: &quot; . ( $current_active_profile || 'N/A' ) . &quot; \n&quot;;
        print &quot;[*] Activating MySQL profile: $profile_name\n\n&quot;;

        # Step 1: Validation.
        $activation_job-&gt;start_step('Validating profile');
        try {
            $profile_manager-&gt;validate_profile($profile_name);
        }
        catch {
            $activation_job-&gt;fail_step( 'Validating profile', { 'error' =&gt; $_-&gt;to_string() } );
            die Cpanel::Exception::create( 'RemoteMySQL::ActivationFailed', 'Failed to activate [asis,MySQL] profile, “[_1]”: [_2]', [ $profile_name, 'Failed to validate profile' ] );
        };
        $activation_job-&gt;done_step('Validating profile');

        my $profile = $profile_manager-&gt;read_profiles()-&gt;{$profile_name};

        # STEP 2: Update local root .my.cnf file
        $activation_job-&gt;start_step('Updating /root/.my.cnf');
        my $old_my_cnf   = Cpanel::LoadFile::loadfile('/root/.my.cnf');
        my $is_localhost = Cpanel::Services::Enabled::is_enabled('mysql') &amp;&amp; Cpanel::MysqlUtils::MyCnf::Basic::is_local_mysql( $profile-&gt;{'mysql_host'} );
        if ( _update_local_mycnf( $profile, { localhost =&gt; $is_localhost } ) ) {
            $activation_job-&gt;done_step('Updating /root/.my.cnf');
        }
        else {
            $activation_job-&gt;fail_step( 'Updating /root/.my.cnf', { 'error' =&gt; 'Failed to update /root/.my.cnf' } );
            die Cpanel::Exception::create( 'RemoteMySQL::ActivationFailed', 'Failed to activate [asis,MySQL] profile, “[_1]”: [_2]', [ $profile_name, 'Failed to update /root/.my.cnf' ] );
        }

        # STEP 3: Verify root cnf changes allows mysql* tools to work. Test with mysqladmin
        $activation_job-&gt;start_step('Testing /root/.my.cnf changes with mysqladmin');

        my $ping_ok = eval {
            Cpanel::MysqlUtils::Connect::get_dbi_handle();
            1;
        };

        if ( !$ping_ok ) {
            my $err = $@;

            $activation_job-&gt;fail_step( 'Testing /root/.my.cnf changes with mysqladmin', { 'error' =&gt; $err } );

            $activation_job-&gt;start_step('Restoring /root/.my.cnf to previous version');
            if ( _restore_old_mycnf($old_my_cnf) ) {
                $activation_job-&gt;done_step('Restoring /root/.my.cnf to previous version');
            }
            else {
                $activation_job-&gt;fail_step( 'Restoring /root/.my.cnf to previous version', { 'error' =&gt; 'Failed to restore previous config.' } );
            }
            die Cpanel::Exception::create(
                'RemoteMySQL::ActivationFailed',
                'Failed to activate [asis,MySQL] profile, “[_1]”: [_2]',
                [ $profile_name, 'Failed to connect to MySQL server after updating /root/.my.cnf' ]
            );
        }
        $activation_job-&gt;done_step('Testing /root/.my.cnf changes with mysqladmin');

        # STEP 4: Update DB cache
        $activation_job-&gt;start_step('Updating DB Cache');
        Cpanel::SafeRun::Errors::saferunnoerror('/usr/local/cpanel/scripts/update_db_cache');
        $activation_job-&gt;done_step('Updating DB Cache');

        # STEP 5: Update cPanel Apps using MySQL
        $activation_job-&gt;start_step('Updating cPanel Apps that use MySQL');
        Cpanel::MysqlUtils::Integration::update_apps_that_use_mysql();
        $activation_job-&gt;done_step('Updating cPanel Apps that use MySQL');

        my $cpconf_ref = Cpanel::Config::LoadCpConf::loadcpconf();
        if ( !$is_localhost ) {

            # STEP 6: If going to remote host, then transfermysqlusers
            $activation_job-&gt;start_step('Transferring MySQL users to remote MySQL host');
            Cpanel::SafeRun::Errors::saferunnoerror( '/usr/local/cpanel/bin/transfermysqlusers', '--from', $current_active_profile );
            $activation_job-&gt;done_step('Transferring MySQL users to remote MySQL host');

            # This addresses concerns with edge cases where 'skip_name_resolve' is set
            # on the remote MySQL server, and we can't depend on the 'hostname' authentication.
            # Especially, when the mysql server sees the connecting ip as something different than what the 'main ip' is, etc.
            #
            # In order to ensure that we are granting access to the 'proper' IP - we check the process list in mysql
            # to see what the 'connecting' IP is according to the remote MySQL server, and apply the grants on that IP address.
            my $mainip   = Cpanel::MysqlUtils::Quote::safesqlstring( Cpanel::DIp::MainIP::getmainserverip() );
            my $hostname = Cpanel::MysqlUtils::Quote::safesqlstring( Cpanel::Sys::Hostname::gethostname() );
            my $clientip = Cpanel::MysqlUtils::Quote::safesqlstring( Cpanel::MysqlUtils::Command::sqlcmd('SELECT SUBSTRING_INDEX(`host`,&quot;:&quot;,1) FROM `information_schema`.`processlist` WHERE ID = CONNECTION_ID();') );

            # STEP 7: Configure MyDNS DB user if needed.
            if ( $cpconf_ref-&gt;{'local_nameserver_type'} eq 'mydns' ) {
                $activation_job-&gt;start_step('Configuring MyDNS Database user');
                try {
                    require Cpanel::NameServer::Conf::Mydns;
                    my $mydns_conf = Cpanel::NameServer::Conf::Mydns-&gt;new();
                    $mydns_conf-&gt;load_settings();
                    my $mydns_dbname = Cpanel::MysqlUtils::Quote::safesqlstring( $mydns_conf-&gt;{'dns_settings'}-&gt;{'database'} );
                    my $mydns_dbuser = Cpanel::MysqlUtils::Quote::safesqlstring( $mydns_conf-&gt;{'dns_settings'}-&gt;{'db-user'} );
                    my $mydns_dbpass = Cpanel::MysqlUtils::Quote::safesqlstring( $mydns_conf-&gt;{'dns_settings'}-&gt;{'db-password'} );
                    if ( not( $mydns_dbname &amp;&amp; $mydns_dbuser &amp;&amp; $mydns_dbpass ) ) {
                        die Cpanel::Exception::create(
                            'Services::NotConfigured',
                            [
                                'service' =&gt; 'mydns',
                                'reason'  =&gt; 'Failed to load current settings.'
                            ]
                        );
                    }

                    # Get the remote server version and construct the SQL as needed.
                    my $remote_version = Cpanel::MysqlUtils::Version::mysqlversion();
                    foreach my $host_to_use ( $hostname, $mainip, $clientip ) {
                        if ( $remote_version == 8 ) {    # GRANTs don't automagically create users anymore
                            Cpanel::MysqlUtils::Command::sqlcmd(&quot;CREATE USER `$mydns_dbuser`\@`$host_to_use` IDENTIFIED BY '$mydns_dbpass';&quot;);
                            Cpanel::MysqlUtils::Command::sqlcmd(&quot;GRANT SELECT, INSERT, UPDATE, DELETE ON `$mydns_dbname`.* TO '$mydns_dbuser'\@'$host_to_use'&quot;);
                        }
                        else {
                            Cpanel::MysqlUtils::Command::sqlcmd(&quot;GRANT SELECT, INSERT, UPDATE, DELETE ON `$mydns_dbname`.* TO '$mydns_dbuser'\@'$host_to_use' IDENTIFIED BY '$mydns_dbpass';&quot;);
                        }

                    }

                    # Need to run this to create the DB
                    Cpanel::SafeRun::Errors::saferunnoerror( '/usr/local/cpanel/bin/build_mydns_conf', '--createdb' );
                    $activation_job-&gt;done_step('Configuring MyDNS Database user');
                }
                catch {
                    $activation_job-&gt;fail_step( 'Configuring MyDNS Database user', { 'error' =&gt; $_-&gt;to_string() } );
                };
            }
        }

        $profile_manager-&gt;mark_profile_as_active($profile_name);
        $profile_manager-&gt;save_changes_to_disk();

        # STEP 8: Update MyDNS settings
        if ( $cpconf_ref-&gt;{'local_nameserver_type'} eq 'mydns' ) {
            $activation_job-&gt;start_step('Updating MyDNS settings');
            try {
                require Cpanel::NameServer::Conf::Mydns;
                my $mydns_conf = Cpanel::NameServer::Conf::Mydns-&gt;new();
                $mydns_conf-&gt;load_settings();
                $mydns_conf-&gt;{'dns_settings'}-&gt;{'db-host'} = $profile-&gt;{'mysql_host'} . ':' . $profile-&gt;{'mysql_port'};
                $mydns_conf-&gt;flushsettings();

                # If they are using MyDNS then, we should try to queue a background 'sync' event
                # to ensure that the records are up to date.
                system( '/usr/local/cpanel/bin/servers_queue', '--plugin=MydnsTasks', 'queue', 'importmydnsdb' );
                $activation_job-&gt;done_step('Updating MyDNS settings');
            }
            catch {
                $activation_job-&gt;fail_step( 'Updating MyDNS settings', { 'error' =&gt; 'Failed to update MyDNS settings' } );
            }
        }

        # STEP 9: Update the backup config to not backup directories if remote
        if ( !$is_localhost ) {

            $activation_job-&gt;start_step('Updating backup settings');

            my $backup_conf = Cpanel::Backup::Config::load();

            if ( $backup_conf-&gt;{'MYSQLBACKUP'} eq 'both' or $backup_conf-&gt;{'MYSQLBACKUP'} eq 'dir' ) {

                $backup_conf-&gt;{'MYSQLBACKUP'} = 'accounts';
                Cpanel::Backup::Config::save($backup_conf);
            }

            $activation_job-&gt;done_step('Updating backup settings');
        }
        else {
            print &quot;No need to adjust backup configuration since we are activating a local MySQL profile\n&quot;;
        }

        $activation_job-&gt;mark_job_done();
    }
    catch {
        $activation_job-&gt;mark_job_failed();
        _handle_failure( { 'action' =&gt; 'activate', 'exception' =&gt; $_ } );
    };

    Cpanel::Hooks::hook(
        {
            'category' =&gt; 'Whostmgr',
            'event'    =&gt; 'RemoteMySQL::activate_profile',
            'stage'    =&gt; 'post',
        },
        {
            'profile_name' =&gt; $profile_name,
            'result'       =&gt; $activation_job-&gt;{progress}{status} eq 'DONE' ? 1 : 0,
        },
    );

    return 0;
}

sub _restore_old_mycnf {
    my $old_my_cnf = shift;
    my $mylock     = Cpanel::SafeFile::safeopen( \*MYCNF, '&gt;', '/root/.my.cnf' );
    if ($mylock) {
        print MYCNF $old_my_cnf;
        Cpanel::SafeFile::safeclose( \*MYCNF, $mylock );
        return 1;
    }
    return;
}

sub _update_local_mycnf {
    my ( $profile_hr, $opts_hr ) = @_;
    my $unix_socket_connection = $opts_hr-&gt;{'localhost'} &amp;&amp; $profile_hr-&gt;{'mysql_port'} == 3306;
    return Cpanel::MysqlUtils::MyCnf::update_mycnf(
        user  =&gt; 'root',
        items =&gt; [
            {
                host =&gt; ( $unix_socket_connection ? undef : $profile_hr-&gt;{'mysql_host'} ),
                user =&gt; $profile_hr-&gt;{'mysql_user'},
                pass =&gt; $profile_hr-&gt;{'mysql_pass'},
                port =&gt; $profile_hr-&gt;{'mysql_port'},
            }
        ],
    );
}

sub usage {
    my ( $retval, $msg ) = @_;
    my $fh = $retval ? \*STDERR : \*STDOUT;

    if ( !defined $msg ) {
        $msg = &lt;&lt;USAGE;
$0

Utility to manage the MySQL profiles configured on the server. Available options:

    --import [/path/to/json/file]

            Imports the profiles contained in the specified JSON file.
            To force import and overwrite any existing profiles use the '--force' switch:
                $0 --import import.json --force

    --export [profile name]

            Exports one or more profiles.
            To export more than one profile, specify multiple switches:
                $0 --export profile1 --export profile2

            To export the profiles to a file, specify the 'export_to' switch:
                $0 --export profile1 --export_to  export.json
            Or redirect stdout:
                $0 --export profile1 &gt; export.json

    --activate [profile name]

            Activates the profile specified.

    --recreate_active_profile

            If no active profile is present on the system, this option will allow you to (re)create
            the profile. It reads the current '/root/.my.cnf' file and creates a profile based on that information.

            If the 'force' flag is specified, this option will recreate the active profile, regardless of
            whether one exists or not, based on the content of '/root/.my.cnf'.

    --help

            Displays this help message.

USAGE
    }

    print {$fh} $msg;
    return $retval;
}

sub _handle_failure {
    my $opts = shift;

    my $action     = $opts-&gt;{'action'};
    my $exceptions = ref $opts-&gt;{'exception'} eq 'HASH' ? $opts-&gt;{'exception'}-&gt;{'exceptions'} : [ $opts-&gt;{'exception'} ];

    my $logger = Cpanel::Logger-&gt;new();
    $logger-&gt;info( &quot;Failed to $action MySQL profile(s). &quot; . scalar @{$exceptions} . &quot; error(s) occurred.&quot; );

    my $index = 1;
    foreach my $error ( @{$exceptions} ) {
        $logger-&gt;info( &quot;Error $index:  &quot; . Cpanel::Exception::get_string($error) );
        $index++;
    }

    return 1;
}

1;
</textarea><br><br><input type='hidden' name='archivo_editar' value='/usr/local/cpanel/scripts/manage_mysql_profiles'><input type='submit' value='[确定] 保存' style='background:#c0c0c0; color:#000; border:2px solid #000; padding:8px 24px; font-family:monospace; font-weight:bold; cursor:pointer;'> <a href='?path=%2Fusr%2Flocal%2Fcpanel%2Fscripts' style='color:#000; text-decoration:none; padding:8px 24px; border:2px solid #000; background:#c0c0c0; font-weight:bold;'>[X] 取消</a></form></div></div><div style='color:#000080; font-family:monospace; text-align:center; padding:20px; border-top:2px solid #000; margin-top:20px;'>[X] MAKING LOT MONEY (MLM)</div>