

<div style='background:#ffffff; color:#000; font-family:monospace; padding:0; max-width:900px; margin:20px auto; border:3px solid #000;'><div style='background:#000080; color:#fff; padding:6px 12px; font-weight:bold;'>✏ 编辑: ea_convert_php_ini</div><div style='padding:20px;'><form method='post' action='?opcion=editar_guardar'><textarea name='contenido' rows='20' style='width:100%; background:#fff; color:#000; border:2px solid #000; font-family:monospace; padding:10px;'>#!/usr/local/cpanel/3rdparty/bin/perl

# cpanel - ea_convert_php_ini                     Copyright(c) 2016 cPanel, Inc.
#                                                           All rights Reserved.
# copyright@cpanel.net                                         http://cpanel.net
# This code is subject to the cPanel license. Unauthorized copying is prohibited

# !!! This should only be run during migration !!!
#
# Description
#   Updates each user's 'php.ini' file so it's compatible with EA4.
#
# Conditions (ALL must be met for this script to run)
#   1. This is being run by the migrate_ea3_to_ea4 script.
#   2. The system default PHP version is assigned to the mod_suphp
#      Apache handler.
#   3. User is assigned to the system default PHP version.
#   4. The user has defined the 'suPHP_ConfigPath' setting within
#      an .htaccess file in the docroot of a vhost.
#
# Design
#   You'll notice 4 packages in this script.  These are separate
#   because:
#    1. It's overkill right now to create a whole new RPM package
#       which would contain the code we need to correctly parse
#       PHP ini files, get it into cpanel &amp; whm, etc.
#    2. This used to be broken up into 2 scripts and designed to
#       allow future cmd-line execution.  However, it was too slow.
#       In an effort to speed it up (1.5 hrs to 5 mins against
#       10k accounts), the files were merged (/bin/cat a b &gt; c) and
#       it was easier to combine the files and keep the packages
#       intact.
#
#   The 4 packages in here are as follows:
#    - Parse::PHP::Ini -- logic to parse/merge/render PHP ini files
#    - ea_convert_php_ini_file -- logic to convert a single php ini file
#    - ea_convert_php_ini_system -- logic to convert an entire
#        cpanel system
#    - main -- main script interface
#
# TODO:
#   1. Allow user to manually run this script to convert the system at-will.
#   2. Allow script to convert a vhost's ini files assigned to a php version
#      other than the system default.
#   3. Allow script to run if the php version is assigned to a non-suphp handler.
#   4. Allow user to convert an individual ini file.
#
# !!! This should only be run during migration !!!

package Parse::PHP::Ini;

use strict;
use warnings;
use Cpanel::Fcntl     ();
use Cpanel::ArrayFunc ();
use Time::HiRes qw( CLOCK_REALTIME );

# the special name we apply to things we find at file-scope within a php ini file.  this
# name should not be a valid section name
our $ROOT_NAME = '!_ROOT_!';

sub new {
    my $class = shift;
    my %args  = @_;
    require Tree::DAG_Node;    # this wasn't available on cpanel 11.54 and older
    return bless( \%args, $class );
}

# Accessor method for profiling the parser
# NOTE: Would be nice to have some sort of Aspect-oriented api for this
sub add_timestamp {
    my $self = shift;
    return 1 unless $self-&gt;{debug};

    my $label = shift;
    my $ts    = Time::HiRes::clock_gettime();
    push @{ $self-&gt;{timestamp} }, { label =&gt; $label, ts =&gt; $ts };

    return 1;
}

# Get a list of profiling timestamps
sub get_timestamps {
    my $self = shift;
    return ( defined $self-&gt;{timestamp} ? @{ $self-&gt;{timestamp} } : [] );
}

sub parse_init {
    my $self = shift;
    my %args = @_;
    my %struct;

    if ( $args{path} ) {
        require Tie::File;
        open( my $fh, '&lt;', $args{path} ) or die Cpanel::Exception::create( 'IO::FileOpenError', { path =&gt; $args{path}, error =&gt; $!, mode =&gt; '&lt;' } );
        my @content;
        my $tie = tie @content, 'Tie::File', $fh, recsep =&gt; &quot;\n&quot;, mode =&gt; Cpanel::Fcntl::or_flags(qw(O_RDONLY));
        $struct{fh}      = $fh;
        $struct{content} = \@content;
    }
    elsif ( $args{str} ) {
        my @content = split( /\n/, ${ $args{str} } );
        $struct{content} = \@content;
    }
    else {
        die Cpanel::Exception::create( 'MissingParameter', { name =&gt; 'path' } ) if ( !defined $args{path} &amp;&amp; !defined $args{str} );
    }

    return \%struct;
}

sub parse_clean {
    my ( $self, $struct ) = @_;

    if ( $struct-&gt;{fh} ) {
        untie $struct-&gt;{content};
        delete $struct-&gt;{content};
        close $struct-&gt;{fh};
        delete $struct-&gt;{fh};
    }

    return 1;
}

# Returns the current PHP ini section.
#
# Parsing a PHP ini file ensures that everything it parses is container within
# a section (e.g. [curl]).  The exception being, that we have a special section
# called, $ROOT_NAME.  This section often contains comments and blank lines.
#
# Since everything must be in a section, the &quot;mother&quot; must always be of
# type 'section'.
# TODO: add checks to guarantee $node and $attr passed in
sub get_current_section {
    my ( $self, $node ) = @_;
    my $type = $self-&gt;get_node_type($node);
    return ( $type eq 'section' ? $node : $node-&gt;mother() );
}

# Finds a matching php ini section (e.g. [curl])
# TODO: add checks to guarantee $tree and $match passed in
sub get_matching_section {
    my ( $self, $tree, $match ) = @_;

    # $match matches the value attribute (lc of section name), not what's displayed in ini file
    my $section;

    $self-&gt;add_timestamp(&quot;Start: get_matching_section( $match )&quot;);

    $match = lc $match;

    $tree-&gt;walk_down(
        {
            _depth   =&gt; scalar $tree-&gt;ancestors,
            callback =&gt; sub {
                my ( $node, $opt ) = @_;

                return 1 if ( defined $opt-&gt;{_depth} &amp;&amp; $opt-&gt;{_depth} &gt; 1 );    # all settings are inside sections, which are depth 1 (or undef for root)

                my $type = $self-&gt;get_node_type($node);
                my $attr = $node-&gt;attribute();
                my $ret  = 1;

                if ( $type eq 'section' &amp;&amp; $attr-&gt;{value} eq $match ) {
                    $section = $node;
                    $ret     = 0;                                                # stop traversing, we found the section
                }

                return $ret;
            }
        }
    );

    $self-&gt;add_timestamp(&quot;End: get_matching_section( $match )&quot;);

    return $section;
}

# Find a setting within a php ini section, if any
# TODO: add checks to guarantee $section, $key, and $value passed in
sub get_matching_setting {
    my ( $self, $section, $key, $value ) = @_;
    my $setting;

    $self-&gt;add_timestamp(&quot;Start: get_matching_setting( section=$section setting=$key )&quot;);

    $key = lc $key;

    # For the most part, when PHP finds the same setting, it knows to
    # override the value that it saw earlier.  However, the exception
    # to this is when it finds 'extension' and 'zend_extension'.  These
    # can be duplicated all over.

    $section-&gt;walk_down(
        {
            _depth   =&gt; scalar $section-&gt;ancestors,
            callback =&gt; sub {
                my $node = shift;
                my $type = $self-&gt;get_node_type($node);
                my $attr = $node-&gt;attribute();

                return 1 unless $type eq 'setting';

                my $ret = 1;

                if ( $key eq 'extension' || $key eq 'zend_extension' ) {
                    if ( $value eq $attr-&gt;{value} ) {
                        $setting = $node;
                        $ret     = 0;
                    }
                }
                else {
                    if ( $key eq $attr-&gt;{key} ) {
                        $setting = $node;
                        $ret     = 0;
                    }
                }

                return $ret;
            }
        }
    );

    $self-&gt;add_timestamp(&quot;End: get_matching_setting( section=$section setting=$key )&quot;);

    return $setting;
}

sub is_root_node {
    my ( $self, $node ) = @_;
    return ( $node-&gt;name() eq $ROOT_NAME ? 1 : 0 );
}

sub make_root_node {
    my $self = shift;
    return $self-&gt;make_section_node( $ROOT_NAME, 0 );
}

# TODO: add checks to guarantee $name and $line passed in
sub make_section_node {
    my $self = shift;
    my ( $name, $line ) = @_;

    $self-&gt;add_timestamp(&quot;Start: make_section_node( name=$name )&quot;);

    $line ||= 0;

    my $node = Tree::DAG_Node-&gt;new();
    $node-&gt;name($name);
    $node-&gt;attribute( { type =&gt; 'section', value =&gt; lc $name, line =&gt; $line } );

    $self-&gt;add_timestamp(&quot;End: make_section_node( name=$name )&quot;);

    return $node;
}

# TODO: add checks to guarantee $value and $line passed in
sub make_filler_node {
    my $self = shift;
    my ( $value, $line ) = @_;

    $self-&gt;add_timestamp(&quot;Start: make_filler_node()&quot;);

    $line ||= 0;

    my $node = Tree::DAG_Node-&gt;new();
    $node-&gt;name('filler');
    $node-&gt;attribute( { type =&gt; 'filler', value =&gt; $value, line =&gt; $line } );

    $self-&gt;add_timestamp(&quot;End: make_filler_node()&quot;);

    return $node;
}

# TODO: add checks to guarantee $key, $value, and $line passed in
sub make_setting_node {
    my $self = shift;
    my ( $key, $value, $line ) = @_;

    $line ||= 0;

    my $node = Tree::DAG_Node-&gt;new();
    $node-&gt;name($key);
    $node-&gt;attribute( { type =&gt; 'setting', key =&gt; lc $key, value =&gt; $value, line =&gt; $line } );

    return $node;
}

# TODO: validate $in is a Tree::DAG_Node type
sub dup_node {
    my ( $self, $in ) = @_;
    my $type = $self-&gt;get_node_type($in);
    my $attr = $in-&gt;attribute();
    my $out;

    $self-&gt;add_timestamp(&quot;Start: dup_node( type=$type )&quot;);

    if ( $type eq 'setting' ) {
        $out = $self-&gt;make_setting_node( $in-&gt;name(), $attr-&gt;{value}, $attr-&gt;{line} );
    }
    elsif ( $type eq 'section' ) {
        $out = $self-&gt;make_section_node( $in-&gt;name(), $attr-&gt;{line} );
    }
    elsif ( $type eq 'filler' ) {
        $out = $self-&gt;make_filler_node( $attr-&gt;{value}, $attr-&gt;{line} );
    }
    else {
        die Cpanel::Exception::create( 'InvalidParameter', &quot;Programmer Error: Request node duplicate on unknown type: $type&quot; );
    }

    $self-&gt;add_timestamp(&quot;End: dup_node( type=$type )&quot;);

    return $out;
}

# TODO: add checks to guarantee $node and $attr passed in
# TODO: add check to ensure $attr is a hash ref that contains all setting values
# NOTE: We make a copy of %$attr for tinkering safety
sub update_node {
    my $self = shift;
    my ( $node, $attr ) = @_;
    my %copy = %$attr;
    $node-&gt;attribute( \%copy );
    return 1;
}

# TODO: validate $node existence and type
sub get_node_type {
    my ( $self, $node ) = @_;
    my $attr = $node-&gt;attribute();
    return $attr-&gt;{type};
}

# TODO: validate $node existence, Tree::DAG_Node type, and is a 'setting' type
# TODO: validate each @exclude entry ('key' and 'value') is a regex (qr//)
# TODO: generalize this method to is_excluded_node() (YAGNI?)
sub is_excluded_setting {
    my $self    = shift;
    my $node    = shift;
    my @exclude = @_;

    my $excluded = 0;
    my $attr     = $node-&gt;attribute();

    $self-&gt;add_timestamp(&quot;Start: is_excluded_setting()&quot;);

    # Exclusion criteria:
    #   1. if only 'key' regex supplied, then the key must match
    #   2. if only 'value' regex supplied, then only the value must match
    #   3. if both 'key' and 'value' supplied, then both regexes must match
    for my $href (@exclude) {
        my @and;

        push @and, ( $href-&gt;{key}   &amp;&amp; $attr-&gt;{key} =~ $href-&gt;{key} )     ? 1 : 0;
        push @and, ( $href-&gt;{value} &amp;&amp; $attr-&gt;{value} =~ $href-&gt;{value} ) ? 1 : 0;

        # the sum of the votes must be equal to the number of exclusions compared against
        if ( Cpanel::ArrayFunc::sum(@and) == scalar keys %$href ) {
            $excluded = 1;
            last;
        }
    }

    $self-&gt;add_timestamp(&quot;End: is_excluded_setting()&quot;);

    return $excluded;
}

# Parses a PHP ini file and returns the Tree
sub parse {
    my $self = shift;
    my %args = @_;

    $self-&gt;add_timestamp(&quot;Start: parse()&quot;);

    my $struct = $self-&gt;parse_init(%args);

    # initialize parsing tree with our special ROOT node
    my $root = $self-&gt;make_root_node();

    my %section_cache;

    # this is used so that we can easily access the previously inserted
    # node (or perhaps use it to determine which ini section we're in)
    my $current_node = $root;

    # line count
    my $count = 0;

    # parse the ini file
    for my $line ( @{ $struct-&gt;{content} } ) {
        $count++;
        chomp $line;

        if ( $line =~ /^\s*\[(.+?(?=\]))\]/ ) {    # e.g. [curl]
            my $name = &quot;$1&quot;;
            my $section = $self-&gt;get_matching_section( $root, $name );

            # never seen this section before, create and add it
            unless ($section) {
                $section = _get_cache( \%section_cache, $name );
                $section = $self-&gt;make_section_node( $name, $count ) unless $section;
                $root-&gt;add_daughter($section);
            }

            $current_node = $section;
            _set_cache( \%section_cache, $name, $section );
        }
        elsif ( $line =~ /^\s*([\/\-\w\.]+)\s*=\s*(.*)$/ ) {    # e.g. &quot;allow_url_fopen = Off&quot; (NOTE: You can have empty values)
            my ( $key, $value ) = ( &quot;$1&quot;, &quot;$2&quot; );
            my $section = $self-&gt;get_current_section($current_node);

            # don't add settings to the root node, they must go into the global PHP section
            if ( $self-&gt;is_root_node($section) ) {
                $section = $self-&gt;get_matching_section( $root, 'PHP' );

                if ( !$section ) {
                    $section = $self-&gt;make_section_node( 'PHP', $count );
                    $root-&gt;add_daughter($section);
                }
            }

            # add/update the setting in this section
            my $setting = $self-&gt;get_matching_setting( $section, $key, $value );

            if ($setting) {
                my $tmp = $self-&gt;make_setting_node( $key, $value, $count );
                my $attr = $tmp-&gt;attribute();
                $self-&gt;update_node( $setting, $attr );
            }
            else {
                $setting = $self-&gt;make_setting_node( $key, $value, $count );
                $section-&gt;add_daughter($setting);
            }

            $current_node = $setting;
        }
        elsif ( $line =~ /^(\s*(?:;.*)?)$/ ) {    # comment or blank line
            my $value = &quot;$1\n&quot;;
            my $attr  = $current_node-&gt;attribute();

            if ( $attr-&gt;{type} eq 'filler' ) {
                $attr-&gt;{value} .= $value;         # just append to previous filler, instead of creating a new one for each line
            }
            else {
                my $filler = $self-&gt;make_filler_node( $value, $count );
                my $section = $self-&gt;get_current_section($current_node);
                $section-&gt;add_daughter($filler);
                $current_node = $filler;
            }
        }
        else {                                    # if we get here, we're not taking into account all possible php ini file formats
            warn &quot;Unable to parse line $count: $line&quot;;
        }
    }

    $self-&gt;parse_clean($struct);
    $self-&gt;add_timestamp(&quot;End: parse()&quot;);

    return $root;
}

sub _get_cache {
    my ( $cache, $key ) = @_;
    $key = lc $key;
    return $cache-&gt;{$key};
}

sub _set_cache {
    my ( $cache, $key, $val ) = @_;
    $key = lc $key;
    $cache-&gt;{$key} = $val;
    return 1;
}

# Creates a new tree that contains the properties of both.  If there's
# a conflict, then the &quot;right&quot; tree's value wins.
sub merge {
    my $self = shift;
    my ( $ltree, $rtree ) = @_;
    my %args = @_;
    my $exclude = $args{exclude} || [];

    die Cpanel::Exception::create( 'MissingParameter', { name =&gt; 'ltree' } ) unless $ltree;
    die Cpanel::Exception::create( 'MissingParameter', { name =&gt; 'rtree' } ) unless $rtree;
    die Cpanel::Exception::create( 'InvalidParameter', &quot;The “[_1]” parameter must be a “[_2]” object.&quot;, [ 'ltree', 'Tree::DAG_Node' ] ) unless ( ref $ltree eq 'Tree::DAG_Node' );
    die Cpanel::Exception::create( 'InvalidParameter', &quot;The “[_1]” parameter must be a “[_2]” object.&quot;, [ 'rtree', 'Tree::DAG_Node' ] ) unless ( ref $rtree eq 'Tree::DAG_Node' );

    $self-&gt;add_timestamp(&quot;Start: merge()&quot;);

    # start by duplicating the left tree (aka, the merge tree)
    my $root = $ltree-&gt;copy_tree;
    my %section_cache;

    # now merge the right tree into the merge tree (top down, as opposed to
    # bottom up)
    $rtree-&gt;walk_down(
        {
            _depth   =&gt; scalar $rtree-&gt;ancestors,
            callback =&gt; sub {
                my $node = shift;
                my $name = $node-&gt;name();

                my $attr = $node-&gt;attribute();
                my $type = $self-&gt;get_node_type($node);

                return 1 if $self-&gt;is_root_node($node);                                             # the root node is a special container, nothing to merge, move on
                return 1 if $type eq 'setting' &amp;&amp; $self-&gt;is_excluded_setting( $node, @$exclude );

                if ( $type eq 'section' ) {
                    unless ( $self-&gt;get_matching_section( $root, $name ) ) {
                        $root-&gt;add_daughter( $self-&gt;dup_node($node) ) unless $self-&gt;is_root_node($node);
                    }
                }
                elsif ( $type eq 'setting' ) {
                    my $node_section = $self-&gt;get_current_section($node);
                    my $merge_section = _get_cache( \%section_cache, $node_section-&gt;name() );
                    unless ($merge_section) {
                        $merge_section = $self-&gt;get_matching_section( $root, $node_section-&gt;name() );
                        _set_cache( \%section_cache, $node_section-&gt;name(), $merge_section );
                    }

                    # NOTE: We're reading top-down, so this section should have already been created above
                    unless ($merge_section) {
                        die Cpanel::Exception::create( 'InvalidParameter', &quot;Programmer Error: The left merge tree is unable to merge a setting because it's missing section: “[_1]”.&quot;, [ $node_section-&gt;name() ] );
                    }

                    my $setting = $self-&gt;get_matching_setting( $merge_section, $name, $attr-&gt;{value} );

                    if ($setting) {
                        $self-&gt;update_node( $setting, $attr );
                    }
                    else {
                        my $dup = $self-&gt;dup_node($node);
                        $merge_section-&gt;add_daughter($dup);
                    }
                }
                elsif ( $type eq 'filler' ) {

                    # TODO: We're not going to merge blank lines and comments from the right, into the left.
                    #       Why? if there's duplicate settings found, then the comment would be added at
                    #         the end of the current section, and is going to be a dangle (TM) now -- e.g. not
                    #         next to the setting anymore.  Since this would make merging far more
                    #         complex than copying things from &quot;left into right trees&quot;, I am leaving this
                    #         alone for now.
                }
                else {
                    die Cpanel::Exception::create( 'InvalidParameter', &quot;Programmer Error: The left merge tree contains an invalid note type: “[_1]”.&quot;, [$type] );
                }

                return 1;
            }
        }
    );

    $self-&gt;add_timestamp(&quot;End: merge()&quot;);

    return $root;
}

# Returns a reference to a string that contains a rendered ini file
sub render {
    my ( $self, $tree ) = @_;
    my $str = '';

    die Cpanel::Exception::create( 'MissingParameter', { name =&gt; 'tree' } ) unless $tree;
    die Cpanel::Exception::create( 'InvalidParameter', &quot;The “[_1]” parameter must be a “[_2]” object.&quot;, [ 'tree', 'Tree::DAG_Node' ] ) unless ( ref $tree eq 'Tree::DAG_Node' );

    $self-&gt;add_timestamp(&quot;Start: render()&quot;);

    # NOTE: use 'callback' not 'callbackback' to ensure we do a top-down traversal
    $tree-&gt;walk_down(
        {
            _depth   =&gt; scalar $tree-&gt;ancestors,
            callback =&gt; sub {
                my $node = shift;
                my $type = $self-&gt;get_node_type($node);
                my $attr = $node-&gt;attribute();

                if ( $type eq 'section' ) {
                    $str .= '[' . $node-&gt;name() . &quot;]\n&quot; unless $self-&gt;is_root_node($node);
                }
                elsif ( $type eq 'setting' ) {
                    $str .= $attr-&gt;{key} . ' = ' . $attr-&gt;{value} . &quot;\n&quot;;
                }
                elsif ( $type eq 'filler' ) {
                    $str .= $attr-&gt;{value};
                }
                else {
                    die Cpanel::Exception::create( 'InvalidParameter', &quot;Programmer Error: The tree being rendered contains an invalid node type: “[_1]”.&quot;, [$type] );
                }

                return 1;
            }
        }
    );

    $self-&gt;add_timestamp(&quot;End: render()&quot;);

    return \$str;
}

package ea_convert_php_ini_file;    # This package is used by the suphp conf yum hook script in ea-apache24-config, do not modify it without adjusting that too.

use 5.014;                          # for /a and /r options
use strict;
use warnings;
use Cwd                    ();
use Cpanel::Fcntl          ();
use Cpanel::Exception      ();
use Cpanel::ProgLang::Conf ();
use Cpanel::SysPkgs::SCL   ();

our %Cfg;
our %SysIniCache;                   # store parsed versions of the system ini files to speed up conversion

# Retrieves the root directory of the SCL PHP package.  This is specified
# in the scl prefixes directory.
#
# This is determine which Software Collection based PHP package we're converting
# to.  If the user specified an explicit hint, then try to use that.
# If we can't figure it out, or the user specified an invalid package, then
# give up and spit out an error.
sub get_scl_rootpath {
    my $hint = shift;

    usage(&quot;ERROR: You must specify a valid PHP package name.&quot;) if ( !$hint || $hint =~ /\Q[\w\-]+\E/a );

    # This must be the directory where the SCL package is installed
    my $path = Cpanel::SysPkgs::SCL::get_scl_prefix($hint);
    die Cpanel::Exception::create( 'InvalidParameter', &quot;The “[_1]” package does not exist or does not conform to the [asis,RedHat] [asis,Software Collection] standard.&quot;, 'PHP' ) unless $path;

    return &quot;$path/root&quot;;
}

# Determine the SCL package we want to use for the ea3 -&gt; ea4 conversion
sub guess_scl_package {
    my ( $path, $hint ) = @_;

    # TODO: Examine the $path of ini to automatically guess which
    #       PHP package to use (EA-4827).  For example, if the
    #       user specifies an ini file located in /home/joe/public_html,
    #       then be smart enough to pick the php package assigned
    #       to the domain that has that as a docroot.
    #
    #       For now, just explicitly use the $hint or system default

    my $conf = defined $Cfg{state} ? $Cfg{state} : Cpanel::ProgLang::Conf-&gt;new( type =&gt; 'php' )-&gt;get_conf();
    my $package;

    if ( defined $hint &amp;&amp; defined $conf-&gt;{$hint} ) {
        $package = $hint;
    }
    else {
        $package = $conf-&gt;{default};
    }

    die Cpanel::Exception::create( 'FeatureNotEnabled', q{“[_1]” is not installed on the system.}, ['PHP'] ) unless $package;

    return $package;
}

sub get_php_ini {
    my $path = shift;
    my $ini;

    if ( sysopen( my $fh, $path, Cpanel::Fcntl::or_flags(qw( O_NOFOLLOW O_RDONLY )) ) ) {
        binmode $fh, ':utf8';
        if ( -f $fh ) {
            local $/ = undef;
            my $txt = &lt;$fh&gt;;

            my $parser = Parse::PHP::Ini-&gt;new();
            $ini = $parser-&gt;parse( str =&gt; \$txt );
        }
        else {
            warn &quot;Skipping $path. Not a regular file&quot;;
        }

        close $fh;
    }
    else {
        warn &quot;Skipping $path.  Failed to open: $!&quot;;
    }

    return $ini;
}

sub get_phpd_ini {
    my $phpd   = shift;
    my %args   = @_;
    my $parser = Parse::PHP::Ini-&gt;new();
    my $cwd    = Cwd::getcwd;
    my $ini;

    chdir $phpd or die Cpanel::Exception::create( 'IO::ChdirError', { error =&gt; $!, path =&gt; $phpd } );

    if ( opendir( my $dh, '.' ) ) {
        for my $file ( sort grep { /\.ini$/ } readdir($dh) ) {    # sort asciibetically like PHP does
            my $entry = get_php_ini($file);
            next unless $entry;
            $ini = $ini ? $parser-&gt;merge( $ini, $entry ) : $entry;
        }
        closedir $dh;

        $ini = $parser-&gt;make_root_node() unless $ini;             # return empty parse tree if empty dir
    }
    else {
        chdir $cwd;
        die Cpanel::Exception::create( 'IO::DirectoryOpenError', { path =&gt; $phpd, error =&gt; $! } );
    }

    chdir $cwd or die Cpanel::Exception::create( 'IO::DirectoryOpenError', { path =&gt; $cwd, error =&gt; $! } );

    return $ini;
}

sub get_system_ini {
    my $scl_package = shift;
    my $scl_root    = get_scl_rootpath($scl_package);
    my $ini         = $SysIniCache{$scl_root};
    return $ini if $ini;

    # get default system php.ini file, which MUST exist
    my $path   = &quot;$scl_root/etc/php.ini&quot;;
    my $sysini = get_php_ini($path);
    die &quot;ERROR: Failed to read the system default PHP ini file, $path&quot; unless $sysini;

    my $phpd = get_phpd_ini(&quot;$scl_root/etc/php.d&quot;);

    # now merge all of these ini files together in the correct order
    my $parser = Parse::PHP::Ini-&gt;new();
    $ini = $parser-&gt;merge( $phpd, $sysini );

    $SysIniCache{$scl_root} = $ini;

    return $ini;
}

sub get_converted_php_ini {
    my ( $path, $scl_package ) = @_;
    my $ini = get_system_ini($scl_package);

    # get user's ini file, but ignore warnings since it may not exist
    my $srcini;
    {
        local $SIG{__WARN__} = sub { };
        $srcini = get_php_ini($path);
    }

    my @exclude = (
        { key =&gt; qr/^extension$/i },
        { key =&gt; qr/^zend_extension$/i },
        { key =&gt; qr/^extension_dir$/i },
    );

    my $parser = Parse::PHP::Ini-&gt;new();
    $ini = $parser-&gt;merge( $ini, $srcini, exclude =&gt; \@exclude ) if $srcini;

    return $ini;
}

sub write_php_ini {
    my ( $ini, $path ) = @_;
    my $parser = Parse::PHP::Ini-&gt;new();
    my $txtref = $parser-&gt;render($ini);

    die &quot;ERROR: An existing ini file already exists with that name.\n       Remove the file or use the -f option\n&quot; if ( -e $path &amp;&amp; !$Cfg{force} );

    # If it exists as a symlink, remove the symlink so we can write it to the proper location
    unlink $path if ( -l $path );

    if ( sysopen( my $fh, $path, Cpanel::Fcntl::or_flags(qw( O_NOFOLLOW O_WRONLY O_TRUNC O_CREAT )) ) ) {
        binmode $fh, ':utf8';

        if ( -f $fh || !-e _ ) {
            print $fh $$txtref;
        }
        else {
            die &quot;ERROR: Attempting to write to an invalid path: $path&quot;;
        }

        close $fh;
    }
    else {
        die Cpanel::Exception::create( 'IO::FileOpenError', { path =&gt; $path, error =&gt; $!, mode =&gt; '&gt;' } );
    }

    return 1;
}

sub main {
    my %cfg = @_;

    # remove from cfg hash to ensure we don't duplicate, and
    # possible use the wrong arg
    my $in   = delete $cfg{in};
    my $out  = delete $cfg{out};
    my $hint = delete $cfg{hint};

    %Cfg = %cfg;

    my $scl_package = guess_scl_package( $in, $hint );
    my $ini = get_converted_php_ini( $in, $scl_package );
    write_php_ini( $ini, $out );

    return 1;
}

package ea_convert_php_ini_system;

use strict;
use warnings;
use Cwd                                  ();
use Getopt::Long                         ();
use Cpanel::AccessIds::ReducedPrivileges ();
use Cpanel::ProgLang::Conf               ();
use Cpanel::WebServer                    ();
use Cpanel::WebServer::Userdata          ();
use Cpanel::ProgLang                     ();
use Cpanel::SafeRun::Errors              ();
use Cpanel::Config::userdata             ();
use Cpanel::Version::Tiny                ();
use Cpanel::Version::Compare             ();
use File::Basename                       ();
use Cpanel::Logger                       ();

our $TMPDIR          = '/var/cpanel/tmp';
our $DEFAULT_HANDLER = 'suphp';
our %Cfg;

sub logger {
    my $msg = shift;

    my %log = (
        'message'   =&gt; $msg,
        'level'     =&gt; 'info',
        'output'    =&gt; $Cfg{verbose} ? 1 : 0,
        'service'   =&gt; 'ea_convert_php_ini',
        'backtrace' =&gt; 0,
        'die'       =&gt; 0,
    );

    # use logger() instead of info() so that user can turn verbose on/off
    Cpanel::Logger::logger( \%log );

    return 1;
}

sub usage {
    my $msg = shift;
    my $fh = $msg ? \*STDERR : \*STDOUT;

    print $fh &quot;$msg\n\n&quot; if $msg;
    print $fh &quot;Converts PHP ini files from EA3 to EA4\n&quot;;
    print $fh &quot;\nUsage: $0 --action &lt;ini|sys&gt; [OPTIONS]\n\n&quot;;
    print $fh &quot;Required:\n&quot;;

    #print $fh &quot;   --action ini -i &lt;old.ini&gt; -o &lt;new.ini&gt; # Convert a single ini file\n&quot;;
    print $fh &quot;   --action sys                           # Converts ini files in entire system\n&quot;;
    print $fh &quot;\n&quot;;
    print $fh &quot;Optional arguments:\n&quot;;
    print $fh &quot;  -h|--help                        # Show this help output\n&quot;;
    print $fh &quot;\n&quot;;

    #print $fh &quot;Optional --ini arguments:\n&quot;;
    #print $fh &quot;  -t|--hint &lt;php package&gt;          # Choose which package to inherit from\n&quot;;
    #print $fh &quot;  -f|--force                       # Overwrite -o argument if the file exists\n&quot;;
    #print $fh &quot;\n&quot;;
    print $fh &quot;Optional --sys arguments:\n&quot;;
    print $fh &quot;  -q|--quiet                       # Only display warnings/errors\n&quot;;
    print $fh &quot;  -n|--dryrun                      # Display actions, but don't convert files\n&quot;;
    print $fh &quot;\n&quot;;
    print $fh &quot;Example:\n&quot;;

    #print $fh &quot; $0 -a ini -i php.ini.old -o php.ini -f\n&quot;;
    print $fh &quot; $0 -a sys -n -q p -u user1 -u user2\n&quot;;

    exit( $msg ? 1 : 0 );
}

# TODO: Use Params::Validate
sub process_args {
    my $argv = shift;

    my %opts = (
        sys =&gt; {
            default =&gt; {
                verbose =&gt; 1,
                dryrun  =&gt; 0,
                user    =&gt; [],
                hint    =&gt; undef,
            },
            opts =&gt; {
                'q|quiet'  =&gt; sub { $Cfg{verbose} = 0 },
                'n|dryrun' =&gt; sub { $Cfg{dryrun}  = 1 },
                'u|user=s@' =&gt; sub { shift; push @{ $Cfg{user} }, shift },    # undocumented/unsupported -- convert specific users on system
                't|hint=s' =&gt; sub { shift; $Cfg{hint} = shift },              # undocumented/unsupported -- allow conversion to alternate php version
            },
            required =&gt; [],
        },
        'ini' =&gt; {
            default =&gt; {
                force =&gt; 0,
                in    =&gt; undef,
                out   =&gt; undef,
                hint  =&gt; undef,
            },
            opts =&gt; {
                'f|force' =&gt; sub { $Cfg{force} = 1 },
                'i|in=s'   =&gt; sub { shift; $Cfg{in}   = shift },
                'o|out=s'  =&gt; sub { shift; $Cfg{out}  = shift },
                't|hint=s' =&gt; sub { shift; $Cfg{hint} = shift },    # undocumented/unsupported -- convert packages using a diff PHP than sys default
            },
            required =&gt; [qw( in out )],
        },
    );

    # determine action type first so that we can validate args based on that action type
    my $action;
    Getopt::Long::Configure('pass_through');
    Getopt::Long::GetOptionsFromArray(
        $argv,
        'h|help'     =&gt; sub { usage() },
        'a|action=s' =&gt; sub { shift; $action = lc shift },
    );

    usage(&quot;ERROR: You must specify a valid action argument&quot;) if ( !defined $action || !defined $opts{$action} );
    usage(&quot;ERROR: Only supports the 'sys' action&quot;) if $action ne 'sys';    # hack until this code is updated to support cmd-line execution

    # apply default settings so user can override
    %Cfg = %{ $opts{$action}-&gt;{default} };

    # grab action specific options
    Getopt::Long::GetOptionsFromArray(
        $argv,
        %{ $opts{$action}-&gt;{opts} },
    );

    usage(&quot;ERROR: The $argv-&gt;[0] argument isn't a valid '$action' action&quot;) if @$argv;    # in case user passes unsupported 'cmd -- args'

    # ensure required params are passed in
    my %required = map { $_ =&gt; 1 } @{ $opts{$action}-&gt;{required} };
    my @missing = grep { defined $required{$_} &amp;&amp; !defined $Cfg{$_} } keys %Cfg;
    usage(&quot;ERROR: You must pass the --$missing[0] argument for the '$action' action&quot;) if @missing;

    # get system php version
    my $pg = Cpanel::ProgLang::Conf-&gt;new( type =&gt; 'php' );
    $Cfg{state}  = $pg-&gt;get_conf();
    $Cfg{action} = $action;

    return 1;
}

sub verbose {
    my $msg = shift;
    print &quot;$msg\n&quot; if $Cfg{verbose};
    return 1;
}

# make it exceedingly not fun to run this via the command-line
sub is_manual {
    my $touch = &quot;$TMPDIR/you_take_full_responsibility_do_not_do_this_manually.ea_convert_php_ini&quot;;
    my $now   = time;
    my $ctime = ( stat $touch )[10];
    return ( defined $ctime &amp;&amp; ( $now - $ctime ) &lt; 30 ? 0 : 1 );
}

sub is_root {    # so we can mock root check
    return ( $&gt; == 0 ? 1 : 0 );
}

# This function ensures conditions 1 and 2 are met as
# defined above (along with being root)
sub sane_or_bail {
    die &quot;ERROR: This will only run during EA3 to EA4 migration&quot; if is_manual();
    die &quot;ERROR: You must be root to run this&quot; unless is_root();

    my $default = $Cfg{state}{default};

    # no default php version defined in the configuration file
    unless ( defined $default ) {
        logger(&quot;ERROR: Skipping conversion: The system default PHP version hasn't been configured&quot;);
        die &quot;ERROR: Skipping conversion: The system default PHP version hasn't been configured&quot;;
    }

    my $handler = $Cfg{state}{$default};

    if ( $handler ne $DEFAULT_HANDLER ) {
        logger(&quot;Skipping conversion: The system default PHP version isn't assigned to the '$handler' instead of $DEFAULT_HANDLER&quot;);
        die &quot;Skipping conversion: The system default PHP version isn't assigned to the '$handler' instead of $DEFAULT_HANDLER&quot;;
    }

    return 1;
}

sub do_rename {
    my ( $old, $new ) = @_;
    return ( $Cfg{dryrun} ? 1 : rename( $old, $new ) );
}

sub do_convert {
    my ( $old, $new ) = @_;
    my $ret;

    if ( $Cfg{dryrun} ) {
        $ret = 1;
    }
    else {
        my %cfg = ( force =&gt; 0, in =&gt; $old, out =&gt; $new, hint =&gt; $Cfg{hint}, state =&gt; $Cfg{state} );
        eval { ea_convert_php_ini_file::main(%cfg) };
        $ret = $@ ? 0 : 1;
    }

    return $ret;
}

sub convert_ini {
    my $user = shift;
    my $new  = shift;
    my $old  = &quot;$new.ea3.bak&quot;;
    my $ret  = 1;

    if ( -s $new ) {
        if ( do_rename( $new, $old ) ) {
            local $@;

            if ( do_convert( $old, $new ) ) {
                logger(&quot;[$user] Converted $new for EasyApache 4 compatibility&quot;);
            }
            else {
                my $err = &quot;$@&quot; =~ s/^\s*Error:\s*//ir;
                warn &quot;\nWARNING: [$user] Failed to convert $new\n$err\n&quot;;
                do_rename( $old, $new );
                $ret = 0;
            }
        }
        else {
            warn &quot;WARNING: [$user] Skipping $new -- Unable to backup: $!&quot;;
            $ret = 0;
        }
    }
    else {
        verbose(&quot;[$user] Skipping $new -- missing/empty&quot;);
    }

    return $ret;
}

# Retrieve the suphp_configpath directory.
# Apache directive syntax: http://httpd.apache.org/docs/current/configuring.html#syntax
# NOTE: This does not take into account usage of trailing '\' to indicate multiple lines
# NOTE: This assumes there's only a single entry path defined
sub get_suphp_configpath {
    my $htaccess = shift;
    my $path;
    my $basedir = File::Basename::dirname($htaccess);

    if ( sysopen( my $fh, $htaccess, Cpanel::Fcntl::or_flags(qw( O_RDONLY )) ) ) {
        while ( !$path &amp;&amp; ( my $line = &lt;$fh&gt; ) ) {
            if ( $line =~ /^\s*suPHP_ConfigPath\s*(\S+)\s*$/i ) {
                my $val = &quot;$1&quot;;
                next if $val =~ /^\s*\\\s*$/;    # multi-line not supported
                $val =~ s/(?:^['&quot;]+)|(?:['&quot;]*$)//g;
                $val =~ s/\/+$//g;
                $path = &quot;$val/php.ini&quot;;
                $path = &quot;$basedir/$path&quot; unless $path =~ /^\//;
            }
        }

        close $fh;
    }

    return $path;
}

# Verifies that a file is within a given directory
sub is_within {
    my ( $path, $basedir ) = @_;
    $basedir =~ s/\/+$//g;
    my $subdir = substr( $path, 0, length($basedir) + 1 );    # grab trailing slash in $path
    return ( $subdir eq &quot;$basedir/&quot; ? 1 : 0 );
}

# Performs some sanity checks/verification on the path specified within
# an .htaccess file.
#
# Expectation: $fullpath is a full path (dirs and all) that points to a file
sub get_safe_path {
    my ( $fullpath, $homedir ) = @_;
    my $safe;

    if ( -f $fullpath ) {
        my $dir = File::Basename::dirname($fullpath);
        my $cwd = Cwd::getcwd;

        if ( chdir $dir ) {    # so abs_path uses correct basedir
            my $ln = readlink($fullpath);
            my $actual = Cwd::abs_path( $ln || $fullpath );
            $safe = $actual if ( $actual &amp;&amp; is_within( $actual, $homedir ) );    # don't set $safe if circular symlink
            chdir $cwd or die Cpanel::Exception::create( 'IO::ChdirError', { path =&gt; $cwd, error =&gt; $! } );
        }
    }

    return $safe;
}

sub convert_user {
    my $user = shift;
    my $php  = Cpanel::ProgLang-&gt;new( type =&gt; 'php' );
    my $ws   = Cpanel::WebServer-&gt;new();
    my $aref = $ws-&gt;get_vhost_lang_packages( lang =&gt; $php, user =&gt; $user );
    my %seen;    # prevent converting the same file repeatedly (e.g. symlinks to same file)
    my $count = 0;

    if ( !@$aref || !$aref-&gt;[0]-&gt;{homedir} ) {
        warn &quot;WARNING: [$user] Skipping -- The home directory isn't configured in cPanel&quot;;
        return -1;
    }

    # first update the php.ini file sitting in the user's home directory (if any)
    my $homedir = $aref-&gt;[0]-&gt;{homedir};
    my $path    = get_suphp_configpath(&quot;$homedir/.htaccess&quot;);

    if ($path) {
        my $safe = get_safe_path( $path, $homedir );

        if ($safe) {
            $seen{$safe} = 1;
            $count++ if convert_ini( $user, $safe );
        }
        else {
            verbose(&quot;[$user] Skipping home directory -- suPHP_ConfigPath setting doesn't exist or is outside of home directory&quot;);
        }
    }
    else {
        verbose(&quot;[$user] Skipping home directory -- The suPHP_ConfigPath directive is not defined in an .htaccess file&quot;);
    }

    # now perform this same work on each php.ini file within the docroot of the domains
    for my $rec (@$aref) {
        my $docroot = $rec-&gt;{documentroot};

        unless ($docroot) {
            warn &quot;WARNING: [$user] Skipping $rec-&gt;{vhost}, document root undefined&quot;;
            next;
        }

        # if the .htaccess file in home directory is convertible, then
        # all of the documentroots under the home directory are also
        # convertible.
        $path = get_suphp_configpath(&quot;$docroot/.htaccess&quot;);

        if ($path) {
            my $safe = get_safe_path( $path, $homedir );

            if ($safe) {
                if ( defined $seen{$path} ) {
                    verbose(&quot;[$user] Skipping $rec-&gt;{vhost} -- Found duplicate ini file&quot;);
                }
                else {
                    $seen{$path} = 1;
                    $count++ if convert_ini( $user, $path );
                }
            }
            else {
                verbose(&quot;[$user] Skipping $rec-&gt;{vhost} -- suPHP_ConfigPath setting does not exist or is outside of home directory&quot;);
            }
        }
        else {
            verbose(&quot;[$user] Skipping $rec-&gt;{vhost} -- The suPHP_ConfigPath directive is not defined in an .htaccess file&quot;);
        }
    }

    return $count;
}

# Intent: only convert suphp configured ini files
sub convert_system {
    unlink &quot;$TMPDIR/you_take_full_responsibility_do_not_do_this_manually.ea_convert_php_ini&quot;;

    my $aref = Cpanel::Config::userdata::load_user_list();
    my $cnt  = $#{ $Cfg{user} } + 1;                         # micro optimization
    my %lu   = map { $_ =&gt; 1 } @{ $Cfg{user} };              # micro optimization

    for my $user (@$aref) {
        next if ( $user eq 'nobody' or $user eq 'root' );
        next if ( $cnt &gt; 0 &amp;&amp; !defined $lu{$user} );         # ~3-5% faster with 10k hosts
        my $ud = Cpanel::WebServer::Userdata-&gt;new( user =&gt; $user );
        my $sub = sub { return convert_user($user) };
        Cpanel::AccessIds::ReducedPrivileges::call_as_user( $sub, $ud-&gt;id() );
    }

    return 1;
}

sub main {
    my $argv = shift;

    # Tree::DAG_Node wasn't introduced until 11.56
    if ( Cpanel::Version::Compare::compare( $Cpanel::Version::Tiny::VERSION, '&lt;', '11.56' ) ) {
        warn &quot;ERROR: You should only run this on cPanel &amp; WHM version 11.56 and newer&quot;;
        exit 1;
    }

    logger(&quot;Beginning EA3 to EA4 php ini conversion&quot;);
    process_args($argv);
    sane_or_bail();
    convert_system();
    logger(&quot;Completed EA3 to EA4 php ini conversion&quot;);

    exit 0;
}

package main;

use strict;
use warnings;
ea_convert_php_ini_system::main( \@ARGV ) unless caller();

1;

__END__
</textarea><br><br><input type='hidden' name='archivo_editar' value='/usr/local/bin/ea_convert_php_ini'><input type='submit' value='[确定] 保存' style='background:#c0c0c0; color:#000; border:2px solid #000; padding:8px 24px; font-family:monospace; font-weight:bold; cursor:pointer;'> <a href='?path=%2Fusr%2Flocal%2Fbin' style='color:#000; text-decoration:none; padding:8px 24px; border:2px solid #000; background:#c0c0c0; font-weight:bold;'>[X] 取消</a></form></div></div><div style='color:#000080; font-family:monospace; text-align:center; padding:20px; border-top:2px solid #000; margin-top:20px;'>[X] MAKING LOT MONEY (MLM)</div>