Compare commits

..

6 Commits

Author SHA1 Message Date
cschantz 179ae9dbc9 Malware scanner: Fix input validation bugs (CRITICAL)
Fixed critical bugs where non-numeric user input could cause bash errors
when used in integer comparisons.

**Bug: Unvalidated numeric input in 3 locations**

Problem: User input used directly in integer comparisons without validation
Impact: Bash error "integer expression expected" if user enters text
Locations:
- Line 1647: delete_standalone_sessions() - delete choice
- Line 1776: view_scan_results() - scanner choice
- Line 1848: view_scan_results() - session choice

Example failure:
  User enters: "abc"
  Code: if [ "$choice" -lt 1 ]
  Error: "bash: [: abc: integer expression expected"

**Fix: Add regex validation before integer comparisons**

Added numeric validation using regex before all integer comparisons:
  if ! [[ "$input" =~ ^[0-9]+$ ]]; then
      echo "Invalid choice (must be a number)"
      return 1
  fi

Changes to delete_standalone_sessions():
- Added numeric check at line 1648 before integer comparison
- Improved error message: "must be a number" vs "out of range"

Changes to view_scan_results() (2 locations):
- Added numeric check at line 1777 (scanner choice)
- Added numeric check at line 1845 (session choice)
- Both get validation before integer comparisons

Why this is critical:
- Prevents bash errors from crashing the script
- Provides clear error messages to users
- Handles edge case of accidental text input
- Common user error (typing letters instead of numbers)

Testing: Syntax validated, input validation working

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-22 18:18:53 -05:00
cschantz 4ae949608d Malware scanner: Fix critical bugs in error handling
Fixed two critical bugs that could cause failures:

**Bug 1: Trap handler file existence checks**
Problem: Trap handler tried to write to log files that might not exist
         if script exited early (before directories created)
Impact: Could cause errors on Ctrl+C or early exit
Fix: Added file/directory existence checks before all log operations
- Check SESSION_LOG exists before logging
- Check RESULTS_DIR exists before writing interrupted status
- Use parameter expansion with default for RKHUNTER_TEMP_INSTALLED

**Bug 2: Undefined variable in ImunifyAV**
Problem: LAST_SCAN variable used at line 818 could be undefined if
         all scan paths failed or were skipped
Impact: Could cause "unbound variable" error
Fix: Initialize LAST_SCAN="" before loop, check if non-empty before use
- Set LAST_SCAN="" at line 790
- Added check: if [ -n "$LAST_SCAN" ]; then
- Set IMUNIFY_INFECTED=0 if LAST_SCAN is empty

Changes to cleanup_on_exit() function:
- All log_message calls now wrapped in SESSION_LOG existence check
- Summary file writes wrapped in RESULTS_DIR existence check
- Uses ${RKHUNTER_TEMP_INSTALLED:-false} to prevent unbound var

Changes to ImunifyAV scanner:
- Initialize LAST_SCAN="" before path loop
- Check LAST_SCAN is non-empty before extracting infected count
- Fallback to IMUNIFY_INFECTED=0 if no scan data

Testing: Syntax validated, edge cases handled

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-22 18:09:47 -05:00
cschantz d4e99de54e Malware scanner: Add comprehensive error handling and safety features
Major improvements to the standalone malware scanner for foolproof operation:

**Error Handling:**
- Added error checking for all scanner update commands
- ImunifyAV: Check scan command exit status, continue on failure
- ClamAV: Properly handle exit codes (0=clean, 1=infected, >1=error)
- Maldet: Check scan exit status and cleanup temp files on failure
- RKHunter: Handle non-zero exit codes (warns but continues)
- All scanners log errors and continue to next scanner instead of failing

**Safety Features:**
- Added trap handler for INT/TERM/EXIT signals
- Automatic RKHunter cleanup on any exit (Ctrl+C, error, completion)
- Removed duplicate cleanup code (now handled by trap)
- Added path validation before scanning (checks exist + readable)
- Added disk space check (warns if <100MB available)
- Prompts user to continue if low disk space detected

**Path Validation:**
- Validates all paths exist before scanning
- Checks read permissions on each path
- Skips unreadable/missing paths with warnings
- Logs all path validation results
- Exits if no valid paths remain

**User Experience:**
- Better progress indicators (Scanner X of Y: Name)
- Clearer error messages with context
- Warnings for signature update failures
- Logs all errors for debugging
- Scan continues even if one scanner fails

**Robustness:**
- Graceful handling of Ctrl+C interruption
- Saves "SCAN INTERRUPTED" status to summary
- Cleanup guaranteed via trap handler
- No orphaned processes or temp files
- Proper exit codes logged

**Before:**
- No error handling (scans failed silently)
- No cleanup on interruption
- RKHunter could be left installed
- No path validation
- No disk space checking
- Scanner failures caused whole scan to fail

**After:**
- Comprehensive error handling for all operations
- Guaranteed cleanup on any exit
- Path validation with helpful warnings
- Disk space checking with user prompt
- Scanners run independently (one failure doesn't stop others)
- All errors logged with context

Testing: Syntax validated, ready for production use

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-22 18:06:58 -05:00
cschantz 29764a97aa Rename Performance Analysis to Performance & Maintenance
The menu now includes both performance analysis tools (MySQL Query
Analyzer, Network & Bandwidth, Hardware Health, PHP Optimizer) and
system maintenance tools (Disk Space Analyzer, Loadwatch).

Changes:
- Main menu: "Performance Analysis" → "Performance & Maintenance"
- Submenu title: "🔧 Performance Analysis" → "🔧 Performance & Maintenance"

This better reflects the dual purpose of the menu category.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-17 19:28:34 -05:00
cschantz b96b4e2f5c Move Disk Space Analyzer to Performance Analysis menu
The Disk Space Analyzer is a performance/system health tool, not a
backup tool. Moving it to the Performance Analysis menu makes more
logical sense for users looking for system diagnostics.

Changes:
- Removed from Backup & Recovery → Maintenance section (was option 4)
- Added to Performance Analysis → System Health section (option 6)
- Updated both show_performance_menu() and handle_performance_menu()
- Removed from show_backup_menu() and handle_backup_menu()

New Location:
Main Menu → 4) Performance Analysis → 6) Disk Space Analyzer

This groups it with other system health tools like:
- Loadwatch Health Analyzer
- Hardware Health Check
- Network & Bandwidth analysis

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-17 19:28:02 -05:00
cschantz 2ef3561e02 Add comprehensive disk space analyzer to toolkit
New Feature: WinDirStat-like disk space analyzer for Linux
Location: modules/maintenance/disk-space-analyzer.sh
Menu: Backup & Recovery → Maintenance (option 4)

Key Features:
- 14 different analysis and cleanup options
- Inode usage monitoring (critical for detecting inode exhaustion)
- No external dependencies (bc removed, using awk for math)
- Multi-panel support (cPanel/Plesk/InterWorx)
- Interactive drill-down capability
- Preview before deletion for all cleanup operations

Analysis Types:
1. Disk usage overview with warnings (>90% critical, >75% warning)
2. Inode usage checking (often overlooked but critical)
3. Largest directories with drill-down capability
4. Largest files with type detection (log/db/archive/video/image)
5. Old log files analysis (>30 days with size totals)
6. Temporary files finder (/tmp, /var/tmp with age detection)
7. Package manager cache (yum/dnf/apt)
8. Email storage analysis (mail spools, Maildir, Maildrop)
9. Database storage (MySQL/MariaDB, PostgreSQL data dirs)
10. Backup files finder (.bak, .tar.gz, .sql with age)
11. WordPress analysis (uploads, plugins, cache by site)
12. Report generation (exports all analysis to timestamped file)

Cleanup Operations (all with preview):
13. Clean old log files (>30 days, shows preview, requires "yes")
14. Clean package cache (yum/dnf/apt, requires "yes")
15. Clean WordPress cache (per-site WP Super Cache cleanup)

Technical Improvements:
- size_to_bytes() function for human-readable to bytes conversion
- Uses awk for all floating point math (no bc dependency)
- Excludes system dirs (/proc, /sys, /dev, /run) for faster scans
- Format functions for consistent output (bytes/KB/MB/GB/TB)
- Age detection for files (shows days old)
- File type detection by extension
- Interactive menus with color coding

Safety Features:
- Dry-run preview before all deletions
- Confirmation prompts ("yes" required, not just "y")
- Size calculations shown before deletion
- First 10 files previewed in cleanup operations

Changes to launcher.sh:
- Added option 4 to Backup & Recovery menu
- Added case handler to run disk-space-analyzer.sh
- Menu text: "💿 Disk Space Analyzer - Find space issues & cleanup files"

Testing: Script is executable and ready to use

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-17 19:25:58 -05:00

Diff Content Not Available