JNۗ h d dl mZ d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl
Z
d dl Z d dl Z d dl
Z
d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlmZmZmZ d dlmZ d dlm Z d dl m Z d dl m Z m!Z!m"Z"m#Z# d dl$m%Z% d dl&Z&d d lm'Z' d d
l(m)Z)m*Z* d d l+m,Z, d d l-m-Z-m.Z.m/Z/ d d
lm0Z0m1Z1m2Z2m3Z3m4Z4 d dl5Z5d dl6m7Z7m8Z8 d dl9m:Z: d dl;mm?Z? d dl@mAZAmBZB d dlCmDZDmEZE d dlFmGZGmHZH d dlImJZJmKZK d dlLmMZM d dlNmOZOmPZPmQZQmRZRmSZSmTZT d dlUmVZVmWZWmXZX d dlYm Z mZZZ d dl[m\Z\m]Z]m^Z^m_Z_m`Z` d dlambZb d d lcmdZdmeZe d d lfmgZg d d lNmhZh d d limjZj d d!lkmlZl d d"lmmnZnmoZompZpmqZqmrZrmsZsmtZtmuZumvZvmwZwmxZxmyZymzZzm{Z{m|Z| d d#l}m~Z~mZ d d$lmZ d d%lmZ ej rd d&lmZ dad' Z G d( d)ej Zdd+ed,efd-Zdd+ed.ed/efd0Zdd+ed2efd3Zd4efd5Zd6efd7Zd4efd8Zd9ej fd:Zd; ZddZdd?d.func_wrapper| s >"8,,F M4.t...v.. . 4= 9)(+ +
4 4 4! /00
$q!!!! ####$9 aiXXHy
0&'i# 4=( 3 3 3 3 3 3 3 3 3 M M M Q 4=bCFF*K*K L L L L L L L L L Ms- *
E(A""
E/BC::
E?E E )rl rn s ` rm catch_errorrp w s)
M M M M M2 c ( e Zd ZdZ fdZd Z xZS )ExtendedJSONEncoderzz
Makes it easier to use ENUMs and DATACLASSes in program,
automatically converting them when json is printed.
c D d|d< t j di | d S )NF ensure_asciiro )super__init__)rg ri __class__s rm rw z ExtendedJSONEncoder.__init__ s0 !&~ ""6"""""rq c t |t r|j S t |t j t j f r| S t |t rt | S t j | rt j
| S t j
| | S N)rc r valuedatetimedate isoformatr rf dataclasses is_dataclassr json JSONEncoderdefault)rg objs rm r zExtendedJSONEncoder.default s c4 +9
hmX-> ?
@
@ +==?? "
W
%
% +s88O
%c
*
* + %c** * ''c222rq )r^
__module__ __qualname____doc__rw r
__classcell__)rx s @rm rs rs sQ # # # # # 3 3 3 3 3 3 3rq rs Fis_json is_prettyc |rY|r,t t j | ddt dS t t j | dt dS t | dS )z
Print specified dictionary
:param data_dict: data dictionary to print
:param is_json: True - print in JSON, False - in text
:param is_pretty: True - pretty json print, False - none (default)
:return: None
T)indent sort_keyscls)r r N)printr dumpsrs ) data_dictr r s rm _print_dictionaryr sy R $*YqDFYZZZ [ [ [ [ [ $*Y$ r= WPOSro rq rm is_wpos_supportedr s &gl 3 33rq user_pwc t j | j t }t j | st
|d dS dS )z@
Creates {homedir}/.clwpos directory if it's not exists
i )modeN)r pathjoinpw_dirrB isdirr )r
clwpos_dirs rm create_clwpos_dir_if_not_existsr sT gnm<6 E E E X-;@ X Xk X X X E|( E El.> E E E I~* I I0B I I I R|( R Rl.> R R R R A{' A AKO A A A K+ K K0E K K K
Q 6 8 8rq wp_config_pathc t j | }t j | st | t j | s t
t d d| i dS )z
Check that wp-config.php exists inside Wordpress directory.
:param wp_config_path: absolute path to Wordpress config file
:raises: WposError
z)Wordpress config file %(file)s is missingfilera rX N)r r dirnameexistsr8 isfiler5 r )r wp_paths rm check_wp_config_existancer s goon--G
7>>' " " #'"""
7>>. ) ) :(S T T!' 8: : : :: :rq abs_wp_pathc t t j | }t | t dt dt
ffd } t j | }t t || }t d
| |d dS # t t f$ r}t || d}~ww xY w)z
Clear cloudlinux section with redis object cach config from docroot's wp-config.php
:param abs_wp_path: Absolute path to WordPress
:raises: WposError
liner c | vod| vS )zn
Filter function that should delete CL config options from the `redis_cache_config_section()`
r ro )r lines_to_filters rm __config_filterz1clear_redis_cache_config..__config_filter s ?*L/@/LLrq N)rf r4 r r r boolreadlistfilterr r r r r9 )r r r" wp_config_linescleared_wp_configrj r! s @rm clear_redis_cache_configr+ s 4455N n---022OMc Md M M M M M M 5#.55 !I!I J J (9 : :NERRRRR W 5 5 5!.!4445s AB, ,C=C
Cc b t st | nt j S )z
Run code under user's privileges if we are root; otherwise do nothing.
Used by cleanup/migration routines which should not perform filesystem writes as root.
)r r
contextlib nullcontextr s rm
_drop_to_userr/ s+
->,?,? ]?8 $ $ $ZE[E]E]]rq c t t j | }t | d t D }t j | }t
d |D }g }|D ]^fd| D }|s|s dS t
fdt D s| _|d gt |dd }t d | |d dS # t t f$ r}t || d}~ww xY w)
z
Create config for redis-cache.
Updates wp-config.php by inserting CloudLinux redis-cache section when needed.
:param abs_wp_path: absolute path to WordPress
:raises: WposError
c ( i | ]}|j |j S ro )r r ).0constants rm
z-create_redis_cache_config.. s ___HHM8<___rq c 3 K | ]}d |v V dS )WP_REDIS_IGNORED_GROUPSNro )r2 r s rm z,create_redis_cache_config.. s( #b#b$$=$E#b#b#b#b#b#brq c , i | ]\ }}d | dv
||S )r 'ro )r2 kvr s rm r4 z-create_redis_cache_config.. s3 i i iA_XY___dhMhMh1MhMhMhrq Nc 3 2 K | ]}d |j dv V dS )r r9 Nr )r2 redis_constantr s rm r7 z,create_redis_cache_config.. s7 nn^8."5888D@nnnnnnrq r r@ r# r$ )rf r4 r r rE r& anyitemsappendr r r r r r9 ) r r absent_constantsr) add_cli_directive
cleaned_linesupdated_configrj r s @rm create_redis_cache_configrE s 4455N n---5__H^___#.55 ##b#bRa#b#b#b b b b
# + +D i i i i1A1G1G1I1I i i i #
,=
nnnnWmnnnnn
+ $$T***
!
'
)
)
122
7 7 OOOOO W 5 5 5!.!4445s A*D A;D E-D==Ec
t pt j t } dx}}ddlm}m} ddlm} | D ]} d || D }n.# t $ r!}|
d|| Y d}~@d}~ww xY wt | } |D ]}
t | 5 t ||
| } ddd n # 1 swxY w Y n/# t $ r"}|
d|
|| Y d}~md}~ww xY w| D ]} | d v rd
n| } t | t s|d z
}&t j | s2t j | d r |d z
}| d
| ||
t j |
| d }
t t/ j |
}| d}t j | s t | 5 t j | r\t j | t j |
t j z st5 d| t j | ddd n # 1 swxY w Y |d z
}# t $ r'}|d z
}| d|| Y d}~ d}~ww xY w t9 j | j }n'# t> $ r |
d| Y #w xY w|r%|dk s t j | s| d|| gt j |t@ dd } t | 5 t j | s ddd t j! | }tE j# |j$ rtK j& | nt j | ddd n # 1 swxY w Y ;# tN $ r8}|j( tP j) k r| d||| Y d}~xd}~wt $ r#}| d||| Y d}~d}~ww xY w| * d|| dS )z
Cleanup for old customers:
- Remove legacy backups created next to wp-config.php (docroot):
/wp-config.php.backup
- Remove old per-user backup directory:
/.clwpos/backups/wp-config
r )cpusers userdomains)
find_wp_pathsc g | ]\ }}|S ro ro )r2 _r s rm
z4cleanup_legacy_wp_config_backups.. s >>>uq">>>rq z>legacy wp-config backup cleanup: can't get docroots for %s: %sN)excludeszAlegacy wp-config backup cleanup: can't scan docroot %s for %s: %s)r# .z./r# r@ z..zLlegacy wp-config backup cleanup: suspicious wp_rel=%r for user=%s docroot=%sr z.backupz"refuse to delete outside docroot: z.legacy wp-config backup cleanup failed: %s: %sz:legacy wp-config backup cleanup: can't resolve home for %sz8legacy wp-config backup cleanup: invalid home for %s: %rbackupsz wp-configz;legacy wp-config backup cleanup: can't remove %s for %s: %sz;legacy wp-config backup cleanup done: removed=%d skipped=%d)+r] logging getLoggerr^ clcommon.cpapirG rH clcommon.clwpos_librI re debugr' r/ rc rf r r isabsnormpathr r[ r rstripr4 lexistssep
ValueErrorunlinkr r r r rB lstatstatS_ISDIRst_modeshutilrmtreer errnoENOENTinfo)_logremovedskippedrG rH rI r docrootsrj rM docroot_pathwp_pathswp_relr r
legacy_backuphometargetsts rm cleanup_legacy_wp_config_backupsrp s 0W&x00DGg33333333111111GII Im Im >> H(=(=>>>HH JJWYacd e e e HHHH >> $ ' e ' eL
"8,, T T #MM,$R$R$R S SHT T T T T T T T T T T T T T T
^ )8Q8 8 8
#
e
e % 8 8f!&#.. qLG 7==(( BG,<,.wrapper8 s2 '$&& &tT$V$$$rq )r )rl rs s ` rm check_license_decoratorrt 4 s5 4[[% % % % [% Nrq r c t | \ }}||fS # t $ r! t t d d| i w xY w)z
Validates domain, determines it's owner and docroot or exit with error
:param domain: Domain name to check
:return: Tuple (username, docroot)
zNo such domain: %(domain)s.r r )r+ r r5 r )r
document_rootowners rm check_domainrx B se d &v
um## d d d(E F FQY[aPbccccds +Ar attemptsc t j }||t j z } t | d }t |pd D ]O} t j | | n@# t $ r t j d Y Lw xY wt t d n*# t $ r t t d w xY w|S )zE
Try to take lock on file with specified number of attempts.
Nza+r@ g333333?zwAnother utility instance is already running. Try again later or contact system administrator in case if issue persists.z%IO error happened while getting lock.)
fcntlLOCK_EXLOCK_NBopenrangeflockfilenor r sleepLockFailedExceptionr r )r ry lock_typelock_fdrK s rm lock_filer P s
IU]"
TtT""x}1%% M MA
GNN , ,i888
3
&g /K 'L 'L M M
M T T T!'*Q"R"RSSST Ns/ #B- 'A,*B- , B
B- B
B- -'Cc d}d}t j | }t j | }|s!|s t | dt d i d}|rW t j ddgddd
}|j pd |j pd z }d |v rd}n"# t t
j
t f$ r Y nw xY wd}|r t j d
}|s#|s#t | dt d i dS dS dS )zb
Validate that MAx Cache is installed and its module is loaded
(Apache and/or nginx).
z!/opt/cloudlinux/maxcache/.versionz'/opt/cloudlinux/maxcache/.nginx-versionrY zMAx Cache is not installed.F apachectlz-MT )capture_outputtexttimeoutr# maxcache_modulez0/etc/nginx/conf.d/modules/ea-nginx-maxcache.confz;MAx Cache module is not enabled (neither Apache nor nginx).N) r r r r_ rK
subprocessrunstdoutstderrr SubprocessErrorr ) r apache_version_pathnginx_version_pathapache_installednginx_installedapache_module_okprocoutputnginx_module_oks rm ensure_maxcache_availabler i st
>Bw~~&9::gnn%788O NO Nw1-J+K+K LMMM > d# # D k'RDK,=2>F F**#' !:#=wG D O
'.. >
O
qVWW X
s +3B B>=B>c e Zd ZdZdS )r z,
Exception when failed to take lock
N)r^ r r r ro rq rm r r s Drq r
resource_pathc # V K t | dz | }dV t | dS )z
Lock a file, than do something.
Make specified number of attempts to acquire the lock,
if attempts is None, wait until the lock is released.
Usage:
with acquire_lock(path, attempts=1):
... do something with files ...
z.lockN)r release_lock)r ry r s rm acquire_lockr s9
/::G EEErq c t j | t j n# t $ r Y nw xY w| dS )z
Releases lock file
N)r{ r r LOCK_UNr close)
descriptors rm r r sd
J%%'' 7777
s 14
A A php_versionrU c d}d| j k r5| | r"t t d d|i dS dS )zX
Ensures wp-cli is compatible, e.g some
php modules may prevent stable work
snuffleupaguszea-php74zSeems like ea-php74 %(module)s module is enabled. It may cause instabilities while managing Object Caching. Disable it and try againmoduler N)
identifieris_extension_loadedr7 r )r dangerous_modules rm wp_cli_compatibility_checkr sw '[+++//0@AA ,' 9c 1d 1d 2:;K0LN N N N ,+++rq hidec v ddt j ddd| iii dg}t t | \ }}||fS )zf
Call cloudlinux-config utility
to hide/show WPOS icon in user's control panel interface.
setz--dataoptions
uiSettingshideAccelerateWPAppz--json)r r r1 rD )r params
returncoder s rm set_wpos_icon_visibilityr sS
I /Dd.K LMNN F &&6??J v rq r c F t | d S )zP
Check the current state of WPOS icon in user's control panel interface
r )r: get_param icon_names rm is_ui_icon_hiddenr s :: < 8 88rq c h t t j t | g S )z[
1. xray utility exists = alt-php-xray package installed
2. feature is visible
)allr r r rO )feature_visibles rm should_xray_user_agent_enabledr s/
344 ! " " "rq c t t j t t j t
t
d g S )z
1. xray utility exists = alt-php-xray installed
2. xray socket exists
3. end-user plugin was not enabled by admin = hidden in UI
hideXrayAppr )r r r r rO rP r ro rq rm should_xray_user_agent_disabledr sP 344GNN#344%
>>>@ A A Arq c l e Zd ZU ee Zee ed< ee Z ee ed< dS )WHMCSServerWideOptionsdefault_factoryallowed_suitesvisible_suitesN)
r^ r r r r' r r r __annotations__r ro rq rm r r sT %*U4%@%@%@NHTN@@@%*U4%@%@%@NHTN@@@@@rq r c n e Zd ZU dZeed< eed< eed< eed< eed< eed< ee Z eed < d
Z
e e ed < d
Z e e ed < d
Z
e e ed
< d
Ze e ed< d
Ze e ed< d
Ze e ed< ddZed Zed Zed Zed Zd
S )ServerWideOptionsz
Options holder representing server-wide option
available for reading for any user on server.
Only can be changed by root.
show_iconr r supported_suitessupported_featureshidden_featuresr
whmcs_optionsNr "disable_smart_advice_notifications%disable_smart_advice_wordpress_plugin disable_smart_advice_reminders upgrade_urlupgrade_url_cdn object_cachec ddl m m i fd j D fdj D }||vrdS d}| j v r| j dS | j }|j v r| j dS | j }|dS t
t | }t t |d }|
t || |t dd|| d t | |d< t | S )
z
Append some needed arguments to upgrade url to make it specific for user.
Please pay attention that we add *customer_name* instead of system user,
that may be different on plesk.
r ) PremiumSuite CDNSuiteProc i | ]
}|j S ro r )r2 featurer s rm r4 z>ServerWideOptions.get_upgrade_url_for_user.. s WWWgw )WWWrq c i | ]
}|j S ro r )r2 r r s rm r4 z>ServerWideOptions.get_upgrade_url_for_user.. s UUUWw (UUUrq Nr cloudlinux_advantage provisioning)r r server_ipmactionsuite)clwpos.feature_suitesr r primary_featuresr r r' r r r r r, r- r
r
)
rg r r r feature_to_suite
target_url url_partsqueryr r s
@@rm get_upgrade_url_for_userz*ServerWideOptions.get_upgrade_url_for_user sd DCCCCCCC
WWWW 9VWWW
UUUU 8TUUU
* * *4
l3 3 3 't )J k2 2 2#+t -J 4*--.. Yy|,,--
(6:: & '$%g.
!'' ! )$$$rq c t t t | j t | j j z S rz )r' r r r r s rm allowed_suites_listz%ServerWideOptions.allowed_suites_list9 6 CT 011D9K9Z4[4[[\\]]]rq c t t t | j t | j j z S rz )r' r r r r s rm visible_suites_listz%ServerWideOptions.visible_suites_list= r rq c ddl m} t } j D ].}| fd|| j D /|S )Nr@
ALL_SUITESc & h | ]
}|j v |S ro r r2 r rg s rm z5ServerWideOptions.allowed_features..G 3 &M &M &M')0D4K)K)K '.)K)K)Krq )feature_suitesr r r r feature_set)rg r _allowed_featuresr s ` rm allowed_featuresz"ServerWideOptions.allowed_featuresA s /..... EE- N NE $ $ &M &M &M &MZ=N=Z &M &M &M
N
N
N
N rq c ddl m} t } j D ].}| fd|| j D /|S )Nr@ r c & h | ]
}|j v |S ro r r s rm r z5ServerWideOptions.visible_features..P r rq )r r r r r r )rg r _visible_featuresr s ` rm visible_featuresz"ServerWideOptions.visible_featuresK s ...... EE- N NE $ $ &M &M &M &MZ=N=Z &M &M &M
N
N
N
N rq )r )r^ r r r r% r r r r r r r r r r r rf r r propertyr r r r ro rq rm r r s OOO ,1EBX,Y,Y,YM)YYY37 (4.7779=&===<@)8D>@@@59"HTN999!%K# %%%%)OXc]))).% .% .% .%` ^ ^ X^ ^ ^ X^ ! ! X! ! ! X! ! !rq r )maxsizec ddl m} t d| j i }|d |d }}n# t $ r d\ }}Y nw xY w||fS )Nr
WposDaemoncommandaccelerate_wp_premiumaccelerate_wp_cdnFF)
clwpos.daemonr r &DAEMON_GET_SUPPORTED_SUITES_BY_LICENSEr5 )r suites_statuses_by_licenseawp_premium_statusawp_cdn_statuss rm .get_suites_status_from_license_daemon_fallbackr
U s ((((((
>%7:L
&
&
" /II`.a.HI\.] + > > >1=. . . .> 1 11s &/ A Ac ddl m}m}m} t j st
\ }}nt \ }}|j ||j ||j |i | d S )Nr )r r CDNSuiteT)
r r r r r r get_suites_status_from_licenser
r r )r r r r r r s rm is_feature_supported_by_licenser f s IIIIIIIIII
:<< ^-K-M-M*NN-[-]-]*N-
~.
c% rq c ddl m} t }| D ]:\ }}|j D ]-}|j rt
| r| | .;|S )Nr@ r )r r r r? features IS_BILLABLEr add)r r
suite_name
suite_item
suite_features rm get_supported_featuresr r s ****** ","2"2"4"4 6 6
J ' 0 6 6M ,
60OPZ0[0[
6"&&}555 6 rq c
ddl m} m}m}m}m} t
dd }g }g }|j | j |j |j fD ]W}t j
t | s-|
| |
| Xt | ||t | t t! g S )zw
Return default content of /opt/clwpos/public_config.json.
This file is accessible by all users on server.
r@ )AWPSuiter r r SUPPORTED_SUITESr r )r r r r r r )r r r r r r r: r r r r r rN r@ r r' r ) r r r r r is_icon_hiddenr r r s rm get_default_server_wide_optionsr { s `_____________ ZZ))*? NNNNN
#X]HM;CST % %w~~nU 344 e$$$ e$$$$ $$%% .// 6 8 899
rq c ddl m} m}m}m} t \ }}t
j | |||gdd||g }d |D S )zY
Get list of supported suites taking
into account license and status on CLN.
r@ )r r r r Tc g | ] }|j
S ro r )r2 r s rm rL z(get_supported_suites.. s + + +5EJ + + +rq )r r r r r r itertoolscompress)r r r r is_awp_premium_allowedis_awp_cdn_allowedsuitess rm get_supported_suitesr& s
2P1Q1Q. .
<;7
t');< F
, +F + + ++rq c t d x} }t j t r:t }| d| } | d| }| |fS )NTr r# r$ )r r r r r& _get_jwt_payloadr )r# r$ jwts rm r r st 2Fd2S2S2SS / w~~()) O !$)ACY!Z!Z WW%9;M N N !#5 55rq c t t } t | d }n,# t $ r }t dt d| d}~ww xY w|S )z1
Read jwt, verify it and return payload.
F)
verify_expz)Unable to detect edition from jwt token: z-. Please, make sure it is not broken, error: N)r$ r& r% r( r# )tokenr) rj s rm r( r( s
' ( (EY5111 Y Y Y% 'XRd 'X 'XTU'X 'X Y Y YY Js (
AA Ac f t | j t r| j S t di | j S )Nro )rc r r )server_wide_optionss rm get_whcms_server_wide_optionsr/ s: %35KLL 1"00 ! F F$7$E F FFrq c b ddl m} t }t j t s|S dh t t d 5 }| } t j
| }dD ]}||vr| | }t || }t t t |t t | t | z }t# ||| |j fd| D t+ | |_ t/ } |j dd D ] }
|
| vr|j |
!n# t4 $ r
d|_ Y nw xY w|cddd S # t j j $ r8} t; t= d t? | d t i
d} ~ ww xY w# 1 swxY w Y dS ) zL
Gets server wide options which apply
as defaults for all users
r@ r r r)r r r c $ i | ] \ }}|v ||
S ro ro )r2 r: r; non_overridable_fieldss rm r4 z+get_server_wide_options.. s7 -Q -Q -Qda019O0O0O ./0O0O0Orq NzZFile is corrupted: Please, delete file %(config_file)s or fix the line provided in details config_filer ) r r r r r r rM r~ r& r loadsr getattrr' sortedr intersectionsetattr__dict__r r? r/ r r& r removePermissionErrordecoderJSONDecodeErrorr5 rK rf )
r default_optionsfcontent
configurationoption_to_mergesuites_from_configsuites_from_defaults
merged_valuesserver_suites_allowedr errr3 s
@rm r r s
+*****577O
7>>. ) ) 2 3
nc " " *9a&&((' 9"&*W"5"5M $\
I
I"-77 %2%6%6%G%G"'.'P'P$ !%VC0DtC&M( M((4 S__(E(EHG HG 1G -H -H &I &I !J !J
-HHHH
$ + + -Q -Q -Q -Qm>Q>Q>S>S -Q -Q -Q
R
R
R,I/,Z,ZO )
G(<(>(>% - =aaa @ G GE $999'8??FFFG #
8
8
8 48000
8 #I*9 *9 *9 *9 *9 *9 *9 *9J |+ 9 9 9 A B BC&7 9 9 9
9 9K*9 *9 *9 *9 *9 *9 *9 *9 *9 *9sU H$*DG1F0?1G0GGGGH!)3H H!!H$$H(+H(c # K t j t st dt d t } | V t
t 5 t t d 5 }t j
t | | ddd n # 1 swxY w Y ddd dS # 1 swxY w Y dS )z1Set icon visibility in clwpos public options filez6Can't write public options as configuration directory z does not existwN) r r r rH r r r rM r~ r dumpr )public_config_datar@ s rm write_public_optionsrM sH 7>>. ) )
d^ d d d
122
n % % 1 1 % %1)* &+,,a0001 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1s6 %C;#B* C*B. .C1B. 2CC Cc t }d|v r
|r ||d d< t j dt | t | d t st
t j sHt j
| fddddt t j
t j d|S t j
dk r t t! d | z
t# | t rt$ d z | z }n t$ d g| z }t j
|ft t j
t j ddddd
|S )z
Wrapper for subprocess to enter cagefs
do not enter cagefs if:
- CloudLinux Solo
- if process already started as user in cagefs
envLANG*Executing command: %s with environment: %sTzutf-8replace)r r encodingrb
preexec_fnr zInternal error: command %s must not be run as root. Please contact support if you have questions: https://cloudlinux.zendesk.comra z --no-io-and-memory-limit --no-io-and-memory-limit)rT r r rS rb )r? rP rd rf r r; r> r= CAGEFSr r r3 r r getegidr5 r rc rG )r ri localewith_cagefs_enters rm run_in_cagefs_if_neededr[ s $
%
%F 6 &u
f L=W VZZ&&'') ) ) {{ (4W^DD (~g (#'-1'.%.)/
bjll)K)K ( ( !'
( ( ( :<<1 G -M %N %NPW%X Y Y Y
Y gs # # Z 14P PSZ Z !24N ORY Y ~ / ()/
bjll)K)K#'-1'.%. ( ( !'
( ( (rq c r t | S # t j $ r Y dS w xY w)z
Returns uid for user
N)r get_uidNoSuchUserExceptionr s rm uid_by_namer_ = sB wwt$$$ $ tts # 66c D t | S # t $ r Y d S w xY wrz )r re )uids rm name_by_uidrb F s7 "3''' tts
c e Zd ZdZddZd Zd Zdedee fdZ dd Z
d d Z d d Z ded
e
e fdZd Zdedee d
efdZed Zd dZd Zdedee d
efdZdede
e d
efdZdede
e d
efdZdS ) PhpIniConfigz>
Helper class to update extensions in php .ini files.
Nc 4 || _ t j d | _ t j d | _ t j d | _ |pt
j t | _ t d| j j d f| _ d S )Nz-^;\s*extension\s*=\s*(?P\w+)\.soz,^\s*extension\s*=\s*(?P\w+)\.soz1^\s*;?\s*extension\s*=\s*(?P\w+)\.soz /var/cagefs/*/*/etc/cl.php.d/c 8 | d d S )Nr r )split)r s rm z'PhpIniConfig.__init__..[ s 4::c??1#5 rq )r user)
r recompiledisabled_patternenabled_pattern extensionrP rQ r^ r] r r wildcard_ini_user_locations)rg r
custom_loggers rm rw zPhpIniConfig.__init__Q s & "
+[ \ \ !z*Y Z Z $XYY#Bw'8'B'B
Sd6F6QSS55
7
7
7,
(((rq c | d d d d S # t $ r4}| j d|t | Y d}~dS d}~ww xY w)z-
Parse .so extensions safely
=r@ z.sor z4Cannot parse extension name from line: %s, error: %sN)rg re r] r[ rf )rg r rj s rm _parse_extension_namez"PhpIniConfig._parse_extension_name^ s ::c??1%++E2215 5 K V $ #A
(
(
( 44444 s 36
A4 )A//A4c z t j | j j | }t j | sg S t
| 5 }| }d d d n # 1 swxY w Y g }|D ]/}| | }|s| | 0|S rz )
r r r r dirr r~ readlinesrs r@ )rg ini_path full_pathr@ ini_contentmodulesextraw_module_names rm get_ini_contentz PhpIniConfig.get_ini_contentj s GLL!1!5x@@ w~~i(( I
)__ (++--K ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( , ,C " 8 8 = =O"
NN? + + + +s A<<B B r rz c t j | j j | }t j | s| ||d d S | || d S )NFr )r r r r ru r _write_modulesenable_modules)rg r rz rx s rm create_custom_iniz PhpIniConfig.create_custom_ini| st GLL!1!5t<< w~~i(( / 75 A A A A A
g . . . . .rq c . |rzt j | j j | }t j | r1| j d| t j | | dg d d S )NzCustom ini to be removed: zacceleratewp.iniT)r; )
r r r r ru r r] rT r[ update_user_ini)rg r all_inirx s rm remove_custom_iniz PhpIniConfig.remove_custom_ini s % T%5%94@@Iw~~i((
% !!"Jy"J"JKKK )$$$ /D AAAAArq Fc | j D ]`}t |d }|D ]F} | ||||| # t $ r | j d Y Cw xY wad S )Nr z&Error updating single acceleratewp.ini)ro r _update_single_inire r] rd )rg ini_filenamerz r; location cagefs_pathsdir_paths rm r z PhpIniConfig.update_user_ini s 8 H &!122L (
++Hh W]^^^^ K))*RSSS H
s >$A%$A%c |d | }t j || }t | 5 t 5 |rOt j | r/| j d| t j | n5| ||t j | d d d n # 1 swxY w Y d d d d S # 1 swxY w Y d S )Nri z#Custom user ini: %s will be removedr )
r r r r r r r] rT r[ r )rg r r rz r r; r r s rm r z PhpIniConfig._update_single_ini s #8F#H--w||Hl33
X
&
& P P P P
P7>>$'' $K%%&KTRRRIdOOO##D'"'..:N:N#OOO P P P P P P P P P P P P P P P P P P P P P P P P P P P P P P P P Ps7 C;BC# C;#C' 'C;*C' +C;;C?C?r c t t |d 5 } fd|D cddd S # 1 swxY w Y dS )zU
Return enabled modules.
:param path: full path to .ini file
r1 c h | ]I}j | j | d JS N module_namerm matchgroupr2 r rg s rm r z0PhpIniConfig._enabled_modules.. s[ E E Ed+11$77C (..t44::=IICCCrq Nr~ rg r r@ s ` rm _enabled_modulesz PhpIniConfig._enabled_modules s
$__ EE E E EVW E E E E E E E E E E E E E E E E E E E E E -11c t t |d 5 } fd|D cd d d S # 1 swxY w Y d S )Nr1 c h | ]I}j | j | d JS r )rn r r r s rm r z0PhpIniConfig._extensions_list.. sV ? ? ?~++D11= N((..44]CC===rq r r s ` rm _extensions_listz PhpIniConfig._extensions_list s
$__ ?? ? ? ?PQ ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ?r c $ t j | j j | }t j | sdS | j d| t | }|r| || dS )z
Enable specified modules in .ini php file.
:param path: path to .ini file related to php directory
:param modules: list of modules that should be enabled
FzEnable such extensions: T)
r r r r ru r r] rT r r )rg r rz rx modules_to_enables rm r zPhpIniConfig.enable_modules s GLL!1!5t<< w~~i(( 5 >W>>??? LL > +< = = =trq c d| dS )z-
redis -> extension=redis.so
z
extension=z.so
ro )r s rm _format_as_ini_extz PhpIniConfig._format_as_ini_ext s
*F))))rq Tc g } j d| |rt | }t | 5 }| D ]U t fd|D r" j d d| d @| V d d d n # 1 swxY w Y t | }d|v r| d |D ]I} | } j d | | | J|rE j d
| t d | |d d
d S d S )Nz,Such extensions are required to be enabled: c 3 F K | ]} | v V d S rz )r )r2 r{ r rg s rm r7 z.PhpIniConfig._write_modules.. s6 ]]C4223774?]]]]]]rq zSkip z, z will be added furtherredisc , | d S Nr )endswith)xs rm rh z-PhpIniConfig._write_modules.. s ajj.A.A rq keyz Appending lines to be written: zPath to write: r# T)
copy_owner) r] rT r r~ rv r> r@ r7 sortr r r )
rg rx r r
new_ini_linesr@ sorted_modulesr extension_liner s
` @rm r zPhpIniConfig._write_modules s
\IZ\\]]] / #$5 6 6 i
/A KKMM / /D]]]]]K\]]]]] ! ))*c$*c*c:K*c*c*cddd !((.... /
/
/
/
/
/
/
/
/
/
/
/
/
/
/
/ 122 n $ $ $A$A B B B$ 1 1F ! 4 4V < B>c t j | j j | }t j | sg S t
| | }| j d| d| |S )zH
Reads .ini file and loads all required extensions
zRequired extensions for z are: )
r r r r ru r r' r r] rT )rg r rx required_moduless rm get_required_modulesz!PhpIniConfig.get_required_modules s GLL!1!5t<< w~~i(( I 5 5i @ @AA STSSAQSSTTT rq c t j j j | }t j | sdS t
| | z rlt | 5 } fd| D }ddd n # 1 swxY w Y t d | |d dS )z
Disable specified modules in .ini php file.
:param path: path to .ini file related to php directory
:param modules: list of modules that should be disabled
Fc < g | ]} | S ro )_disable_module)r2 r modules_to_disablerg s rm rL z0PhpIniConfig.disable_modules.. s: !< !< !<%) "&!5!5d r= rW r r5 r rF r argvr; r< r rG r? rP rd rf r Popenr r communicater r )ri cmdrO ps rm _run_clwpos_as_user_in_cagefsr sI &gn 5 5 <G1% %
%)x|$&)hqrrl3 [[ /Y[[ A A A "<=H )++
,C L=s3xxSRRRSZsy " " "AMMOOOHQ\rq c Z e Zd ZdZdeddfdZd
dZd
dZdefdZ e
de fd Z dS ) RedisConfigurePidFilezm
Helper class that provides methods to work with
pid files of php redis configuration processes.
php_prefixr Nc X | d| _ t t | j | _ d S )Nz-cloudlinux.pid)_pid_file_namer rH r )rg r s rm rw z RedisConfigurePidFile.__init__C s+ !+ < < < )<== rq c | j d 5 }| t t j d d d d S # 1 swxY w Y d S )NrJ )r r~ writerf r getpidrg r@ s rm createz RedisConfigurePidFile.createG s
Y^^C
&A
GGC $$ % % % & & & & & & & & & & & & & & & & & &s 4A A #A c n | j r| j d S d S rz )r is_filer[ r s rm r; z RedisConfigurePidFile.removeK s< 9 I rq c 4 | j S rz )r r r s rm r z RedisConfigurePidFile.existsO s y """rq c 6 | sdS | j 5 } t | cd d d S # t $ r Y nw xY w d d d n # 1 swxY w Y dS )N)r r r~ intr& striprZ r s rm pidzRedisConfigurePidFile.pidR s {{}} 2
Y^^
16688>>++,,
rs. B2A11
A>;B=A>>BBBr N)
r^ r r r rf rw r r; r% r r r r ro rq rm r r = s
>3 >4 > > > >& & & & # # # # # S X rq r r c # K t | } | dV | dS # | w xY w)za
Context manager for creating pid file of current process.
Removes pid file on exit.
N)r r r; )r pid_files rm create_pid_filer ^ s_ %Z00H
s A Ac t | }t j dk r| S t j |j }d| v S # t t j f$ r Y dS w xY w)z
Find out if PHP redis configuration process is running.
Based on looking for presence of pid files.
For root also checks process existence.
r enable_redisF)
r r r r psutilProcessr r rZ
NoSuchProcess)r r processs rm "is_php_redis_configuration_runningr l s %Z00H z||q . .. // , - uus .A+ +BBc * t t S )zE
Find out if alt-PHP redis configuration process is running.
)r rI ro rq rm &is_alt_php_redis_configuration_runningr | s .n = ==rq c * t t S zD
Find out if ea-PHP redis configuration process is running.
)r rJ ro rq rm %is_ea_php_redis_configuration_runningr s .m < < ? ??rq c V t pt p
t S )za
Find out if redis configuration process
is running for any PHP (ea-php or alt-php).
)r r r ro rq rm is_redis_configuration_runningr s.
2 3 3 6 0 2 2 6 3 5 56rq new_userold_userc t j 5 }| }ddd n # 1 swxY w Y fd|D }t d | j d dS )z;
Replace user's wpos directory path in redis.conf.
Nc P g | ]"}| j j #S ro )rR r r2 r r r s rm rL z%update_redis_conf.. s: ?C X&(9:: rq r# r$ )r~ r rv r r )r r r@ redis_conf_lines
updated_liness `` rm update_redis_confr s
h! " " )a ;;==) ) ) ) ) ) ) ) ) ) ) ) ) ) ) GW M BGGM 2 2H4GOOOOOs 8<<c 2 t j | }n9# t $ r,}t d| d| t j Y d}~dS d}~ww xY wfd|D }t
d | t j | d dS )z<
Replace user's redis socket path in wp-config.php.
z=Error occurred during opening wp-config.php located in path "z": )r Nc f g | ]-}j |v r | j j n|.S ro )r rR r s rm rL z$update_wp_config.. sU
D ( (
X*H,ABBB.2 rq r# r$ ) r4 r& r r r r r r r )r r r r) rj r s `` rm update_wp_configr s #.55
6"-6 6236 6")++ & &D 99;;rq c D t g dd \ } }}| dk rdS dS )z`
Detect CL WPOS daemon presence in system
:return: True - daemon works / False - No
)
/sbin/serviceclwpos_monitoringstatusTreturn_full_outputr Fr2 )r rK s rm _is_monitoring_daemon_existsr s8 ##S#S#ShlmmmJ1Qu 4rq c t j d| t g dd \ }}}|st ddgd \ }}}|||fS )z5
Update systemd unit file and reload systemd
//usr/share/cloudlinux/clwpos_monitoring.service)/usr/bin/systemctlenable --no-reloadclwpos_monitoring.serviceTr r
daemon-reload)r` copyr2 )systemd_unit_fileretcoder r s rm $_update_clwpos_daemon_config_systemdr
sx KACTUUU )*v*v*v=A C C CGVV p"-/C_.Ujn"o"o"o FF ""rq c t j }t | d 5 t fdd D ]}| | d d d n # 1 swxY w Y | S )Nrbc . d S )Ni )r& )r@ s rm rh z _sha256_file.. s !&&"5"5 rq rq )hashlibsha256r~ iterr hexdigest)r hchunkr@ s @rm _sha256_filer s A
dD Q5555s;; E
HHUOOOO
;;==s ,A A"%A"path_apath_bc t j | }t j | }|j |j k rdS t | t | k S # t $ r Y dS w xY w)z
Best-effort content comparison. We use it to decide whether shipped systemd unit
needs to be copied into /etc (and thus requires daemon-reload).
F)r r] st_sizer r )r r st_ast_bs rm _files_identicalr sr
wvwv <4< ' '5F##|F';';;; uus 8A A
A*)A* service_namec > t dd| gd \ }}}|dk S )Nr z
is-enabledTr r r )r r rK s rm _systemd_service_is_enabledr! s3 !5|\ R379 9 9MGQ a<rq unit_namec $ t dddd| gd \ }}}|dk rdS | }|d k rdS d
|v r-| d
d \ }}| }| }|d k rdS |d k S )
z
Returns:
- True/False if systemd reports it explicitly
- None if the property is unsupported/unknown (depends on systemd version)
r showz-pNeedDaemonReloadTr r Nr# rr r@ yes)r2 r rg lower)r" r r rK r{ rhss rm !_systemd_unit_needs_daemon_reloadr) s % vt-?K GVQ !||t
LLNNE {{t
e||S!$$3 KKMME {{t E>rq r is_module_allowed_on_serverc d\ }}}dt j v rt g dd \ }}}n|rt | \ }}}|st g dd \ }}}|||fS )z4
Install WPOS daemon to system and start it
)r NNel6)z/sbin/chkconfigz--addr Tr )r r start)platformreleaser2 r
)r r* r r r s rm _install_daemon_internalr0 s ,GVV """""-._._._AE#G #G #G ' ^ 'KK\&]&] #GVV G"-.].].]AE#G #G #G FF ""rq c t pt j t }d}d}t j | rd}t || }t | }t | }|p|du }|du o| } t }
| d|
|||| d\ } } }
|r)| d t | \ } } }
ny|r/| d | t d
d d |gd
\ } } }
| s/|r-| d t d
dgd
\ } } }
n| r| d | r| | |
fS t rdS t || S )a
Install WPOS daemon to server if need:
- if daemon already present - do nothing;
- on CL Shared Pro install daemon if module allowed
On solo and if /etc/systemd/system/clwpos_monitoring.service present it will be updated always
We do not need restart installed daemon here, it's done in rpm_posttrans.sh
:param is_module_allowed_on_server: True/False
z-/etc/systemd/system/clwpos_monitoring.servicer r TNzinstall_monitoring_daemon: unit_exists=1 daemon_exists=%s needs_unit_update=%s needs_enable=%s need_daemon_reload=%s need_daemon_reload_unknown=%s)r r# r# zPinstall_monitoring_daemon: updating unit file from shipped and reloading systemdz2install_monitoring_daemon: enabling %s (no-reload)r r r r zQinstall_monitoring_daemon: running systemctl daemon-reload (NeedDaemonReload=yes)r zXinstall_monitoring_daemon: skipping daemon-reload (NeedDaemonReload unsupported/unknown))r] rP rQ r^ r r r r r! r) r rd r
r2 r0 )r* re r shipped_unit_filer" needs_unit_update needs_enableneed_reload_flagneeds_daemon_reloadneeds_daemon_reload_unknown
daemon_existsr r r s rm install_monitoring_daemonr9 ) s 0W&x00DGI
w~~'(( )+/ 01BDU V V V6yAAA &XGXCX#466
R '
#, v IIh i i i&JK\&]&] #GVVV
NPYZZZ*5)8]IN'++ + +'
v 2
v mnnn*5)?;'++ + +' -
v tuuu +FF* *#%% y #$57R S SSrq c dd| di} t | }n# t $ r Y dS w xY w| d S )Nr zget-z-statusFr )r r5 r )service command_get_service_status_dict
daemon_results rm get_status_from_daemonr> g sd '02I2I2I2I&J#*+JKK
uu X & &&s
((c t d S r r> ro rq rm redis_is_runningrA p !' * **rq c t d S )N litespeedr@ ro rq rm litespeed_is_runningrE u s !+ . ..rq c t d S )Nnginxr@ ro rq rm nginx_is_runningrH z rB rq c t d S )N apache2nginxr@ ro rq rm apache2nginx_is_runningrK s !. 1 11rq attributec ddl m} |t }t j |d } t
| 5 }t j | | cddd S # 1 swxY w Y dS # t t j
f$ r6}t j d| t t d d}~wt $ r t t d w xY w)z7
Return attribute's value from info.json file.
r )get_admin_config_directoryz info.jsonNz,Error during reading of "info.json" file: %szFailed to retrieve data about php version which is currently used. Daemon is not available and cache data is malformed, please try again and contact your administrator if the issue persists.zFailed to retrieve data about php version which is currently used. Daemon is not available and cache data is not available. Contact your administrator if the issue persists.)r rN r r r r r~ r loadr r> rP rd r5 rK r )rL rN admin_config_dir info_jsonr@ rj s rm _get_data_from_info_jsonrR sm A@@@@@11(**== -{;;I P
)__ +9Q<< * + + + + + + + + + + + + + + + + + + d* + Q Q QJANNN O P P Q Q Q P P P N O O P P PPs; B A5( B 5A99B <A9=B C31C *C3c d t }t j r t j } || S rz )r r r r- r. )r rX s rm drop_permissions_if_neededrT s/ G z|| ) ( 78 rq r r r c ddl m} || | v rdnd} t |j |d d }n# t
$ r d}Y nw xY w|rd}|S )Nr r activeno)r r pendingF)r r r r !DAEMON_GET_UPGRADE_ATTEMPT_STATUSr5 )r r r r subscription_status
is_pendings rm get_subscription_statusr\ s ((((((&-1A1E1Ee1L1L&L&L((RV '!C )
)
( ' s A AAc \ d\ } }} t t }n4# t t f$ r dd t dfcY S w xY w t | nG# t j $ r d\ } }}Y n0t j $ r d\ } }}Y nt j $ r d\ } }}Y nw xY w| ||fS )z
JWT token check. Mostly copied from cllib, but with some accelerate-wp tunes, including:
- clsolo, cladmin tokens are now valid
- no need to check for shared, because our tools just don't work on shared
)TOKNFzJWT file {} read errorN)FzJWT token issuer is invalidN)FzJWT token expiredN)FzJWT token format errorN)
r$ r' r r formatr% r) InvalidIssuerErrorExpiredSignatureErrorr( ) success_flag
error_message token_strings rm jwt_token_checkre s 1A-L- W 9:: W W W W.556OPPRVVVVVWZ< ( _ _ _4^1 m\\\ + U U U4T1 m\\\ Z Z Z4Y1 m\\\Z 44s- .A
AA" "B&9B&B&%B&c d} t j | sd S t | 5 }| cd d d S # 1 swxY w Y d S )Nz+/usr/share/cloudlinux/accelerate-wp.version)r r r r~ r& r ) version_filer@ s rm get_accelerate_wp_versionrh s @L
7>>, ' ' t
l qvvxx~~ s &A&&A*-A*c |st j dk r-t | d d d }t | S t | S )zE
Returns True/False whether target user is owned by reseller
r )reseller)cpuserkeyls)r r r. r/ )is_user_owned_by_reseller_daemon_fallback)r
force_as_root
user_owners rm is_user_owned_by_resellerrp sX
C
))8=AAA!DQG
J''''8BBBrq c p ddl m} t d|j i d }n# t $ r Y dS w xY w|S )Nr r r is_owned_by_resellerT)r r r DAEMON_IS_USER_OWNED_BY_RESELLERr5 )r r rr s rm rm rm sm (((((( 1:F
! "
tt s %
33c t j dk rt | S t | }i }|D ]}|j ||j < t | d }|D ]'t fd|D r
| c S (t j | j S )Nr c , | d S )Nr )count)ds rm rh z%get_username_by_uid.. s QWWS\\ rq r c 3 T K | ]"}|k | d z V #dS )r N)r )r2 rm main_homes rm r7 z&get_username_by_uid.. s> aatW`O`O`4??9s?33O`O`O`O`aarq ) r r r0 r
get_pw_by_uidr r r7 r r> r getpwuid)ra pwd_list home_dirsuser_pwd sorted_dirsry s @rm r r s z||q',,,77((-- : :H)1)9Iho & & Y^^ - -3I3IJJJ $ , ,Iaaaa aaaaa
, ++++
,|C ((rq c ddl m} t j dk r
| S ddlm} t
d|j i d S # t $ r Y dS w xY w)Nr )is_wp2_environmentr r is_wp2F) rR r r r r r r DAEMON_IS_WP2_ENVIRONMENTr5 )r r s rm is_wp2_environment_safer s 111111 z||q!!###,,,,,, %y*2V&WXXYab b 55 s A
AAr )r@ )r rz r )r )r rU )r r )
__future__r r- r r| rb r! r rP r rj r` r] r r r r r typingr{ r r r r r globr enumr r rK urllib.parser
r r r
packaging.versionr r r functoolsr r pathlibr r r r r r r r r r. secureior r clcommon.cpapi.cpapiexceptionsr clcommon.clpwdr r clcommon.clcaptainr clcommon.lib.cleditionr" r# clcommon.lib.jwt_tokenr$ r% clcommon.lib.constsr& r' r) r( r) cllicenselibr* rR r+ r, r- r. r/ r0 clcommon.utilsr1 r2 r3 clwposr4 clwpos.cl_wpos_exceptionsr5 r6 r7 r8 r9 clcommon.ui_configr: clcommon.clcagefsr; r< clcommon.constr= r> rS r? logsetuprA clwpos.constantsrB rC rD rE rF rG rH rI rJ rK rL rM rN rO rP socket_utilsrQ rR user.website_check.errorsrS clwpos.scoped_cacherT
TYPE_CHECKINGclwpos.php.baserU r] rp r rs r% r r r r_ r r r r
struct_passwdr r rf r r r r r r r r r+ r/ rE rp rt rx r r re r r r r r r r r r r r
r r r r& r r( r/ r rM r[ r_ rb rd r r r r r r r r r r r r r
r r r! r) r0 r9 r> rA rE rH rK rR rT r\ re rh rp rm r r ro rq rm r s ' & & & & &
0 0 0 0 0 0 0 0 0 0 & % % % % %
% % % % % % & & & & & & & & / / / / / / / / / / = = = = = = = = = = = = = = ; ; ; ; ; ; ; ; 3 3 3 3 3 3 1 1 1 1 1 1 1 1 $ $ $ $ $ $ 8 7 7 7 7 7 7 7 M M M M M M M M & & & & & & & & & & & & & & = < < < < < < < < < % % % % % % % % ( ' ' ' ' ' ; ; ; ; ; ; ; ; " " " " " " 5 5 5 5 5 5 6 6 6 6 6 6 # # # # # # $ X W W W W W W W 8 8 8 8 8 8 / / / / / / $######
B3 3 3 3 3$* 3 3 3* $ 4 & D 4 S * 5 5 5D 5 5 5 5 4 44 4 4 4 4&S-> & & & &) ) ) s c
3 !% , , ,# , , , , , # & & & & & & & * _ _(4. _ _ _ _B 8DI 8 8 8 8D :c :d : : : : 5# 5$ 5 5 5 50^C ^ ^ ^ ^#53 #54 #5 #5 #5 #5L\ \ \ \~ d dsCx d d d d C 8C= 2'
t '
'
'
'
T ) x}
N N N N 4 E#s(O 9 9$ 9 9 9 9 " " "A A A A A A A A A A A
`! `! `! `! `! `! `! `!F 4
2
2
2
): >, , ,(6 6 6
G:P G G G G
69!2 69 69 69 69r 1n-> ? 1 1 1 1"&( &( &(R L L L L L L L L^ D B
3
4
> > > > >=t = = = =@$ @ @ @ @6 6 6 6 6
P
PH
P
P
P
P
PX# X XX XRV X X X X& d
#uS#s]?S
#
#
#
#s s S # $ c d $ 6# #RV #[`adfiknan[o # # # #&;T4 ;TE#sTW-DX ;T ;T ;T ;T|' ' ' +$ + + + + /d / / / / +$ + + + + 2 2 2 2 2P P P P P P. d 3 ,5 5 5. 4C C C C C C 4
) ) )" 4
rq