一键登录到WHM

如何解决一键登录到WHM

我正在尝试为WHM生成一键式登录URL。

下面的代码是一个基于cPanel登录的代码（我将为WHM进行更改），但是它根本不起作用。访问被拒绝的错误。

这是我尝试过的：

$whmusername = 'root';
$whmpassword = 'password';
$hostname = 'server.example.com';
$cpanel_user = 'cpaneluser';
$query = "https://$hostname/json-api/create_user_session?api.version=1&user=$cpanel_user&service=cpaneld";
   
$curl = curl_init();                                     // Create Curl Object.
curl_setopt($curl,CURLOPT_SSL_VERIFYPEER,false);       // Allow self-signed certificates...
curl_setopt($curl,CURLOPT_SSL_VERIFYHOST,false);       // and certificates that don't match the hostname.
curl_setopt($curl,CURLOPT_HEADER,false);               // Do not include header in output
curl_setopt($curl,CURLOPT_RETURNTRANSFER,true);        // Return contents of transfer on curl_exec.
$header[0] = "Authorization: Basic " . base64_encode($whmusername.":".$whmpassword) . "\n\r";
curl_setopt($curl,CURLOPT_HTTPHEADER,$header);         // Set the username and password.
curl_setopt($curl,CURLOPT_URL,$query);                 // Execute the query.
$result = curl_exec($curl);
if ($result == false) {
    error_log("curl_exec threw error \"" . curl_error($curl) . "\" for $query");
}

$decoded_response = json_decode( $result,true );
  
$session_url = $decoded_response['data']['url'];
$cookie_jar = 'cookie.txt';
  
curl_setopt($curl,null);             // Unset the authentication header.
curl_setopt($curl,CURLOPT_COOKIESESSION,true);          // Initiate a new cookie session.
curl_setopt($curl,CURLOPT_COOKIEJAR,$cookie_jar);       // Set the cookie jar.
curl_setopt($curl,CURLOPT_COOKIEFILE,$cookie_jar);      // Set the cookie file.
curl_setopt($curl,$session_url);            // Set the query url to the session login url.
  
$result = curl_exec($curl);                               // Execute the session login call.
if ($result == false) {
    error_log("curl_exec threw error \"" . curl_error($curl) . "\" for $query");
                                                    // Log an error if curl_exec fails.
}
  
$session_url = preg_replace( '{/login(?:/)??.*}','',$session_url );
  
$query = "$session_url/execute/Ftp/list_ftp";
  
curl_setopt($curl,$query);  // Change the query url to use the UAPI call.
$result = curl_exec($curl);               // Execute the UAPI call.
if ($result == false) {
    error_log("curl_exec threw error \"" . curl_error($curl) . "\" for $query");
                                                    // log error if curl exec fails
}
  
curl_close($curl);
print $result;
   

解决方法

通过使用以下代码，我能够做到这一点。该代码最初是在WHM API示例中使用的，但为此我重新应用了它。

$user = "root";
$token = "API Token";

$query = "https://server.example.com:2087/json-api/create_user_session?api.version=1&user=root&service=whostmgrd";

$curl = curl_init();
curl_setopt($curl,CURLOPT_SSL_VERIFYHOST,0);
curl_setopt($curl,CURLOPT_SSL_VERIFYPEER,CURLOPT_RETURNTRANSFER,1);

$header[0] = "Authorization: whm $user:$token";
curl_setopt($curl,CURLOPT_HTTPHEADER,$header);
curl_setopt($curl,CURLOPT_URL,$query);

$result = curl_exec($curl);

$http_status = curl_getinfo($curl,CURLINFO_HTTP_CODE);

if ($http_status != 200) {
    echo "[!] Error: " . $http_status . " returned\n";
} else {
    $json = json_decode($result,true);
    $login_url = $json['data']['url'];
    echo $login_url;
}
curl_close($curl);

不要使用WHM用户名/密码，而只需使用用户并使用可以在WHM->管理API令牌中创建的API令牌登录。

然后获取json数据并仅输出URL。