Check your email for a verification code, and
enter it here:
\n";
if ($newuser) {
if (is_string($newuser)) {
$stuffing = $newuser;
}
else {
$stuffing = substr(GENHASH(), 0, 16);
}
mail($email, "Confirm your email to create your Experiment",
"Here is your user verification code. Please copy and\n".
"paste this code into the box on the experiment page.\n\n".
" $stuffing\n",
"From: $TBMAIL_OPS");
echo "";
}
echo "\n";
echo "\n";
}
if (!isset($create)) {
#
# Look for cookie that tells us who the user is.
#
$username = null;
$email = null;
$sshkey = null;
if (isset($_COOKIE['quickvm_user'])) {
$geniuser = GeniUser::Lookup("sa", $_COOKIE['quickvm_user']);
if ($geniuser) {
#
# Look for existing quickvm. User not allowed to create
# another one.
#
$quickvm = QuickVM::LookupByCreator($geniuser->uuid());
if ($quickvm && $quickvm->status() != "terminating") {
header("Location: quickvm_status.php?uuid=" . $quickvm->uuid());
return;
}
$username = $geniuser->name();
$email = $geniuser->email();
$sshkey = $geniuser->SSHKey();
}
}
SPITFORM($username, $email, $sshkey, null, false, null);
SPITFOOTER();
return;
}
#
# Otherwise, must validate and redisplay if errors
#
$errors = array();
$args = array();
if (!isset($email) || $email == "" || $email == $email_default) {
$errors["email"] = "Missing Field";
}
elseif (! TBvalid_email($email)) {
$errors["email"] = TBFieldErrorString();
}
if (!isset($username) || $username == "" || $username == $username_default) {
$errors["username"] = "Missing Field";
}
elseif (! TBvalid_uid($username)) {
$errors["username"] = TBFieldErrorString();
}
elseif (User::LookupByUid($username)) {
# Do not allow uid overlap with real users.
$errors["username"] = "Already in use";
}
if (!isset($imageid) || $imageid == "") {
$errors["imageid"] = "No selection made";
}
elseif (! array_key_exists($imageid, $imageid_array)) {
$errors["imageid"] = "Invalid Profile: $imageid";
}
elseif (! OSinfo::LookupByName($TBOPSPID, $imageid)) {
$errors["imageid"] = "Nonexistant Profile: $imageid";
}
if (count($errors)) {
SPITFORM($username, $email, $sshkey, $imageid, false, $errors);
SPITFOOTER();
return;
}
#
# More sanity checks.
#
$exists = GeniUser::LookupByEmail("sa", $email);
if ($exists) {
if ($exists->name() != $username) {
$errors["email"] = "Already in use by another user";
unset($exists);
}
}
# Existing users are allowed to resuse their ssh key, but can supply
# a new one if they want.
if (!isset($sshkey) || $sshkey == "" || $sshkey == $sshkey_default) {
if (!$exists) {
$errors["sshkey"] = "Missing Field";
}
}
else {
$args["sshkey"] = $sshkey;
}
if (count($errors)) {
SPITFORM($username, $email, $sshkey, $imageid, false, $errors);
SPITFOOTER();
return;
}
$args["username"] = $username;
$args["email"] = $email;
$args["imageid"] = $imageid;
#
# See if user exists and is verified. We send email with a code, which
# they have to paste back into a box we add to the form. See above.
#
# We also get here if the user exists, but the browser did not have
# the tokens, as will happen if switching to another browser. We
# force the user to repeat the verification with the same code we
# have stored in the DB.
#
if (!$exists || !isset($_COOKIE['quickvm_authkey']) ||
$_COOKIE['quickvm_authkey'] != $exists->auth_token()) {
if (isset($stuffing) && $stuffing != "") {
if (! (isset($verify) && $verify == $stuffing)) {
SPITFORM($username, $email, $sshkey, $imageid, $stuffing, $errors);
SPITFOOTER();
return;
}
#
# If this is an existing user and they give us the right code,
# we can check again for an existing VM and redirect to the
# status page, like we do above.
#
if ($exists) {
$quickvm = QuickVM::LookupByCreator($exists->uuid());
if ($quickvm && $quickvm->status() != "terminating") {
header("Location: quickvm_status.php?uuid=" . $quickvm->uuid());
return;
}
}
# Pass to backend to save in user object.
$args["auth_token"] = $stuffing;
}
else {
# Existing user, use existing auth token.
# New user, we create a new one.
$token = ($exists ? $exists->auth_token() : true);
SPITFORM($username, $email, $sshkey, $imageid, $token, $errors);
SPITFOOTER();
return;
}
}
# This is so we can look up the slice after the backend creates it.
$args["name"] = substr(GENHASH(), 0, 16);
#
# Generate a temporary file and write in the XML goo.
#
$xmlname = tempnam("/tmp", "quickvm");
if (! $xmlname) {
TBERROR("Could not create temporary filename", 0);
$errors["internal"] = "Transient error(1); please try again later.";
}
elseif (! ($fp = fopen($xmlname, "w"))) {
TBERROR("Could not open temp file $xmlname", 0);
$errors["internal"] = "Transient error(2); please try again later.";
}
else {
fwrite($fp, "\n");
foreach ($args as $name => $value) {
fwrite($fp, "");
fwrite($fp, " " . htmlspecialchars($value) . "");
fwrite($fp, "\n");
}
fwrite($fp, "\n");
fclose($fp);
chmod($xmlname, 0666);
}
if (count($errors)) {
SPITFORM($username, $email, $sshkey, $imageid, false, $errors);
SPITFOOTER();
return;
}
#
# Invoke the backend. This will create the user and the slice record
# in the SA database, and then fork off in the background. If the
# first part works, we can return to the user and use some nifty ajax
# and javascript to watch for progress. We use a cookie that holds
# the slice uuid so that the JS code can ask about it.
#
#
$retval = SUEXEC("nobody", "nobody", "webquickvm $xmlname",
SUEXEC_ACTION_CONTINUE);
if ($retval != 0) {
if ($retval < 0) {
$errors["internal"] = "Transient error(3); please try again later.";
}
else {
if (count($suexec_output_array)) {
$line = $suexec_output_array[$i];
$errors["internal"] = $line;
}
else {
$errors["internal"] = "Transient error(4); please try again later.";
}
}
SPITFORM($username, $email, $sshkey, $imageid, false, $errors);
SPITFOOTER();
return;
}
unlink($xmlname);
$quickvm = QuickVM::LookupByName($args["name"]);
if (!$quickvm) {
$errors["internal"] = "Transient error(5); please try again later.";
SPITFORM($username, $email, $sshkey, $imageid, false, $errors);
SPITFOOTER();
return;
}
$creator = GeniUser::Lookup("sa", $quickvm->creator_uuid());
if (! $creator) {
$errors["internal"] = "Transient error(6); please try again later.";
SPITFORM($username, $email, $sshkey, $imageid, false, $errors);
SPITFOOTER();
return;
}
#
# Remember the user and auth key so that we can verify.
#
# The cookie handling is a pain since we run this under the aptlab
# virtual host, but the config uses a different domain, and so the
# cookies do not work. So, we have to look at our SERVER_NAME and
# set the cookie appropriately.
#
if (stristr($_SERVER["SERVER_NAME"], $TBAUTHDOMAIN)) {
$cookiedomain = $TBAUTHDOMAIN;
}
else {
$cookiedomain = $_SERVER["SERVER_NAME"];
}
setcookie("quickvm_user",
$creator->uuid(), time() + (24 * 3600 * 30),
"/", $cookiedomain, 0);
setcookie("quickvm_authkey",
$creator->auth_token(), time() + (24 * 3600 * 30),
"/", $cookiedomain, 0);
header("Location: quickvm_status.php?uuid=" . $quickvm->uuid());
?>