process_post.php

<?php
    require_once 'globals.php';

    /* Global initializers */
    if (!initialize()) {
        http_response_code(500);
        return;
    }


    #$DOMAINHUNTER_PY="./daemon_wrapper.sh python3 ./domainhunter2.py";
    $DOMAINHUNTER_PY="PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin ./domainhunter2.py";
    $PROCESS_POST_PHP="process_post.php";
    $extention = ".svg";


    if ($_SERVER['REQUEST_METHOD'] === 'POST') {
        /* Start processing */
        $domain = trim($_POST["domain"]);
        if (array_key_exists("scopecreep", $_POST)) {
            // $scopecreep = trim($_POST["scopecreep"]);
            $scopecreep = "yes";
        } else {
            $scopecreep = "no";
        }

        $sideload = "no";
        $otherfqdns = "";
        if (array_key_exists("otherfqdns", $_POST) and !empty($_POST["otherfqdns"])) {
            $otherfqdns = $_POST["otherfqdns"];
            $sideload = "yes";
        }

        /* Sanitizer */
        if(preg_match('/[^\.a-zA-Z\-0-9]/i', $domain)) {
            header("refresh:4;url=index.html");
            print("Not a valid FQAN. No special characters allowed.\n");
            print("You typed: ");
            print($domain);
            return;
        }


        /* Create UUID HUNT */
        $uuid = guidv4();

        $data = array("uuid_hunt" => $uuid,
                      "domain" => $domain,
                      "scopecreep" => $scopecreep,
                      "wrapper" => "yes",
                      "sideload" => $sideload,
                      "otherfqdns" => $otherfqdns);
        $data_string = json_encode($data);

        $ch = curl_init("http://localhost:5000/domainhunter");
        curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "POST");
        curl_setopt($ch, CURLOPT_POST,count($data_string));
        curl_setopt($ch, CURLOPT_POSTFIELDS, $data_string);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        curl_setopt($ch, CURLOPT_HTTPHEADER, array(
            'Content-Type: application/json',
            'Content-Length: ' . strlen($data_string))
        );
        $result = curl_exec($ch);
        $httpcode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
        curl_close($ch);


        if ($httpcode == 200) {
            /* Store domainhunt */
            $sql = 'INSERT INTO domainhunts (uuid_hunt, fqdn, status, scopecreep, sideload)'.
                   '     VALUES (:uuid_hunt, :fqdn, :status, :scopecreep, :sideload)';


            $GLOBALS['db']->begintransaction();
            $statement = $GLOBALS['db']->prepare($sql);
            $statement->execute(array(
                                "uuid_hunt" => $uuid,
                                "fqdn" => $domain,
                                "status" => "processing",
                                "scopecreep" => $scopecreep,
                                "sideload" => $sideload
                               ));
            $GLOBALS['db']->commit();

            header("refresh:1;url=index.html");
            print "Processing...\n<br>";
            print $result;
        } else {
            header("refresh:3;url=index.html");
            print $result;
        }

        return;
    }
    if ($_SERVER['REQUEST_METHOD'] === 'GET') {
        if (! isset($_GET['uuid'])) {
            print "No uuid";
            header("refresh:4;url=index.html");
        } else {
            $uuid = $_GET['uuid'];

            print("results/" . $uuid . $extention);
            if (file_exists("results/" . $uuid . $extention)) {
                /* Redirect to end result */

                /* header("refresh:1;url=temp/" . $uuid . $extention); */
                header("refresh:1;url=results/" . $uuid . ".html");
            } else {
                print("<br>\nProcessing...\n");
                /* header("refresh:5;url=" . $PROCESS_POST_PHP . "?uuid=" . $uuid); */
                header("refresh:1;url=index.php");
            }
            return;
        }
    }
?>