Sync with development-SDXPINN

ipk-source/sdxpinn-quecmanager/root/www/cgi-bin/about/fetch-about.sh

@@ -0,0 +1,66 @@
+#!/bin/sh
+
+# Set content-type for JSON response
+echo "Content-type: application/json"
+echo ""
+
+# Define the lock file
+LOCK_FILE="/tmp/home_data.lock"
+
+# Acquire the lock (wait if needed)
+exec 200>$LOCK_FILE
+flock -x 200
+
+# Temporary files for input/output and AT port
+INPUT_FILE="/tmp/input_$$.txt"
+OUTPUT_FILE="/tmp/output_$$.txt"
+AT_PORT="/dev/smd11"
+
+# Debug file path
+DEBUG_FILE="/tmp/debug-json-result.txt"
+
+# Function to escape JSON strings (handling quotes and newlines)
+escape_json() {
+    # Escape newlines and double quotes
+    echo "$1" | sed ':a;N;$!ba;s/\n/\\n/g; s/"/\\"/g'
+}
+
+# Initialize JSON response array
+JSON_RESPONSE="["
+
+# List of AT commands to run, one by one
+for COMMAND in 'AT+CGMI' 'AT+CGMM' 'AT+CGMR' 'AT+CNUM' 'AT+CIMI' 'AT+ICCID' 'AT+CGSN' 'AT+QMAP="LANIP"' 'AT+QMAP="WWAN"'; do
+    # Write the command to the input file
+    echo "$COMMAND" > "$INPUT_FILE"
+
+    # Run the command using atinout
+    atinout "$INPUT_FILE" "$AT_PORT" "$OUTPUT_FILE"
+
+    # Read the output from the output file
+    OUTPUT=$(cat "$OUTPUT_FILE")
+
+    # Escape special characters for JSON (escape only output)
+    ESCAPED_OUTPUT=$(escape_json "$OUTPUT")
+
+    # Append the response as an object to the JSON response array
+    JSON_RESPONSE="${JSON_RESPONSE}{\"response\":\"$ESCAPED_OUTPUT\"},"
+done
+
+# Remove the trailing comma and close the JSON array
+if [ "${JSON_RESPONSE: -1}" = "," ]; then
+    JSON_RESPONSE="${JSON_RESPONSE%,}]"
+else
+    JSON_RESPONSE="${JSON_RESPONSE}]"
+fi
+
+# Write the JSON response to the debug file for troubleshooting
+echo "$JSON_RESPONSE" > "$DEBUG_FILE"
+
+# Return the output as a valid JSON response
+echo "$JSON_RESPONSE"
+
+# Clean up temporary files
+rm "$INPUT_FILE" "$OUTPUT_FILE"
+
+# Release the lock
+flock -u 200

ipk-source/sdxpinn-quecmanager/root/www/cgi-bin/advance/advanced_settings.sh

@@ -0,0 +1,66 @@
+#!/bin/sh
+
+# Set content-type for JSON response
+echo "Content-type: application/json"
+echo ""
+
+# Define the lock file
+LOCK_FILE="/tmp/home_data.lock"
+
+# Acquire the lock (wait if needed)
+exec 200>$LOCK_FILE
+flock -x 200
+
+# Temporary files for input/output and AT port
+INPUT_FILE="/tmp/input_$$.txt"
+OUTPUT_FILE="/tmp/output_$$.txt"
+AT_PORT="/dev/smd11"
+
+# Debug file path
+DEBUG_FILE="/tmp/debug-json-result.txt"
+
+# Function to escape JSON strings (handling quotes and newlines)
+escape_json() {
+    # Escape newlines and double quotes
+    echo "$1" | sed ':a;N;$!ba;s/\n/\\n/g; s/"/\\"/g'
+}
+
+# Initialize JSON response array
+JSON_RESPONSE="["
+
+# List of AT commands to run, one by one
+for COMMAND in 'AT+QMAP="MPDN_RULE"' 'AT+QMAP="DHCPV4DNS"' 'AT+QCFG="usbnet"'; do
+    # Write the command to the input file
+    echo "$COMMAND" > "$INPUT_FILE"
+
+    # Run the command using atinout
+    atinout "$INPUT_FILE" "$AT_PORT" "$OUTPUT_FILE"
+
+    # Read the output from the output file
+    OUTPUT=$(cat "$OUTPUT_FILE")
+
+    # Escape special characters for JSON (escape only output)
+    ESCAPED_OUTPUT=$(escape_json "$OUTPUT")
+
+    # Append the response as an object to the JSON response array
+    JSON_RESPONSE="${JSON_RESPONSE}{\"response\":\"$ESCAPED_OUTPUT\"},"
+done
+
+# Remove the trailing comma and close the JSON array
+if [ "${JSON_RESPONSE: -1}" = "," ]; then
+    JSON_RESPONSE="${JSON_RESPONSE%,}]"
+else
+    JSON_RESPONSE="${JSON_RESPONSE}]"
+fi
+
+# Write the JSON response to the debug file for troubleshooting
+echo "$JSON_RESPONSE" > "$DEBUG_FILE"
+
+# Return the output as a valid JSON response
+echo "$JSON_RESPONSE"
+
+# Clean up temporary files
+rm "$INPUT_FILE" "$OUTPUT_FILE"
+
+# Release the lock
+flock -u 200

ipk-source/sdxpinn-quecmanager/root/www/cgi-bin/advance/fetch_macs.sh

@@ -0,0 +1,49 @@
+#!/bin/sh
+echo "Content-type: application/json"
+echo ""
+
+# Create a temporary file to store the processed data
+temp_file=$(mktemp)
+
+# Process ARP entries and store in temporary file
+arp -a | while IFS= read -r line; do
+    if [ -n "$line" ]; then
+        # Extract hostname (or IP if hostname is "?"), IP, and MAC
+        hostname=$(echo "$line" | awk '{print $1}')
+        ip=$(echo "$line" | awk -F '[()]' '{print $2}')
+        mac=$(echo "$line" | awk '{print $4}')
+        
+        # Skip entries without valid MAC addresses
+        if [ "$mac" = "<incomplete>" ]; then
+            continue
+        fi
+
+        # If hostname is "?", use the IP address instead
+        if [ "$hostname" = "?" ]; then
+            hostname="$ip"
+        fi
+
+        # Store each entry in the temp file
+        echo "$hostname:$ip:$mac" >> "$temp_file"
+    fi
+done
+
+# Initialize JSON array
+echo -n "["
+
+# Process the temporary file to create JSON
+first=true
+while IFS=: read -r hostname ip mac; do
+    if [ "$first" = true ]; then
+        first=false
+    else
+        echo -n ","
+    fi
+    echo -n "{\"hostname\":\"$hostname\",\"ip\":\"$ip\",\"mac\":\"$mac\"}"
+done < "$temp_file"
+
+# Close the JSON array
+echo "]"
+
+# Clean up
+rm -f "$temp_file"

ipk-source/sdxpinn-quecmanager/root/www/cgi-bin/advance/ttl.sh

@@ -0,0 +1,94 @@
+#!/bin/sh
+
+echo "Content-type: application/json"
+echo ""
+
+ttl_file="/etc/firewall.user.ttl"
+lan_utils_script="/etc/data/lanUtils.sh"
+
+setup_persistent_config() {
+    if [ ! -f "$lan_utils_script" ]; then
+        echo "{\"success\": false, \"error\": \"lanUtils.sh not found\"}"
+        return 1
+    fi
+
+    # Backup the original script if not already done
+    if [ ! -f "${lan_utils_script}.bak" ]; then
+        cp "$lan_utils_script" "${lan_utils_script}.bak"
+    fi
+
+    # Add the local ttl_firewall_file line if it's not already present
+    if ! grep -q "local ttl_firewall_file" "$lan_utils_script"; then
+        sed -i '/local tcpmss_firewall_filev6/a \  local ttl_firewall_file=/etc/firewall.user.ttl' "$lan_utils_script"
+    fi
+
+    # Add the condition to include the ttl_firewall_file if it's not already present
+    if ! grep -q "if \[ -f \"\$ttl_firewall_file\" \]; then" "$lan_utils_script"; then
+        sed -i '/if \[ -f "\$tcpmss_firewall_filev6" \]; then/i \  if [ -f "\$ttl_firewall_file" ]; then\n    cat \$ttl_firewall_file >> \$firewall_file\n  fi' "$lan_utils_script"
+    fi
+}
+
+clear_existing_rules() {
+    local current_ttl=$1
+    if [ -n "$current_ttl" ]; then
+        iptables -t mangle -D POSTROUTING -o rmnet+ -j TTL --ttl-set "$current_ttl" 2>/dev/null
+        ip6tables -t mangle -D POSTROUTING -o rmnet+ -j HL --hl-set "$current_ttl" 2>/dev/null
+    fi
+}
+
+case "$REQUEST_METHOD" in
+    GET)
+        # Ensure consistent JSON format for GET requests
+        if [ -s "$ttl_file" ]; then
+            ttl_value=$(grep 'iptables -t mangle -A POSTROUTING' "$ttl_file" | awk '{for(i=1;i<=NF;i++){if($i=="--ttl-set"){print $(i+1)}}}')
+            # Ensure ttl_value is a number, default to 0 if not
+            if ! [[ "$ttl_value" =~ ^[0-9]+$ ]]; then
+                ttl_value=0
+            fi
+            echo "{\"isEnabled\": true, \"currentValue\": $ttl_value}"
+        else
+            echo "{\"isEnabled\": false, \"currentValue\": 0}"
+        fi
+        ;;
+    POST)
+        read -r post_data
+        ttl_value=$(echo "$post_data" | sed 's/ttl=//')
+        
+        # Ensure ttl_file exists
+        touch "$ttl_file" 2>/dev/null
+        if [ ! -f "$ttl_file" ]; then
+            echo "{\"success\": false, \"error\": \"Cannot create TTL file\"}"
+            exit 1
+        fi
+
+        # Setup persistent configuration
+        setup_persistent_config
+        
+        # Get current TTL value for cleanup
+        current_ttl=$(grep 'iptables -t mangle -A POSTROUTING' "$ttl_file" | awk '{for(i=1;i<=NF;i++){if($i=="--ttl-set"){print $(i+1)}}}')
+        
+        if ! [[ "$ttl_value" =~ ^[0-9]+$ ]]; then
+            echo "{\"success\": false, \"error\": \"Invalid TTL value\"}"
+        elif [ "$ttl_value" = "0" ]; then
+            clear_existing_rules "$current_ttl"
+            > "$ttl_file"
+            echo "{\"success\": true}"
+        else
+            # Clear existing rules
+            clear_existing_rules "$current_ttl"
+            
+            # Set new rules
+            echo "iptables -t mangle -A POSTROUTING -o rmnet+ -j TTL --ttl-set $ttl_value" > "$ttl_file"
+            echo "ip6tables -t mangle -A POSTROUTING -o rmnet+ -j HL --hl-set $ttl_value" >> "$ttl_file"
+            
+            # Apply the rules
+            iptables -t mangle -A POSTROUTING -o rmnet+ -j TTL --ttl-set "$ttl_value"
+            ip6tables -t mangle -A POSTROUTING -o rmnet+ -j HL --hl-set "$ttl_value"
+            
+            echo "{\"success\": true}"
+        fi
+        ;;
+    *)
+        echo "{\"success\": false, \"error\": \"Invalid request method\"}"
+        ;;
+esac

ipk-source/sdxpinn-quecmanager/root/www/cgi-bin/advanced_settings.sh

@@ -0,0 +1,66 @@
+#!/bin/sh
+
+# Set content-type for JSON response
+echo "Content-type: application/json"
+echo ""
+
+# Define the lock file
+LOCK_FILE="/tmp/home_data.lock"
+
+# Acquire the lock (wait if needed)
+exec 200>$LOCK_FILE
+flock -x 200
+
+# Temporary files for input/output and AT port
+INPUT_FILE="/tmp/input_$$.txt"
+OUTPUT_FILE="/tmp/output_$$.txt"
+AT_PORT="/dev/smd11"
+
+# Debug file path
+DEBUG_FILE="/tmp/debug-json-result.txt"
+
+# Function to escape JSON strings (handling quotes and newlines)
+escape_json() {
+    # Escape newlines and double quotes
+    echo "$1" | sed ':a;N;$!ba;s/\n/\\n/g; s/"/\\"/g'
+}
+
+# Initialize JSON response array
+JSON_RESPONSE="["
+
+# List of AT commands to run, one by one
+for COMMAND in 'AT+QMAP="MPDN_RULE"' 'AT+QMAP="DHCPV4DNS"' 'AT+QCFG="usbnet"'; do
+    # Write the command to the input file
+    echo "$COMMAND" > "$INPUT_FILE"
+
+    # Run the command using atinout
+    atinout "$INPUT_FILE" "$AT_PORT" "$OUTPUT_FILE"
+
+    # Read the output from the output file
+    OUTPUT=$(cat "$OUTPUT_FILE")
+
+    # Escape special characters for JSON (escape only output)
+    ESCAPED_OUTPUT=$(escape_json "$OUTPUT")
+
+    # Append the response as an object to the JSON response array
+    JSON_RESPONSE="${JSON_RESPONSE}{\"response\":\"$ESCAPED_OUTPUT\"},"
+done
+
+# Remove the trailing comma and close the JSON array
+if [ "${JSON_RESPONSE: -1}" = "," ]; then
+    JSON_RESPONSE="${JSON_RESPONSE%,}]"
+else
+    JSON_RESPONSE="${JSON_RESPONSE}]"
+fi
+
+# Write the JSON response to the debug file for troubleshooting
+echo "$JSON_RESPONSE" > "$DEBUG_FILE"
+
+# Return the output as a valid JSON response
+echo "$JSON_RESPONSE"
+
+# Clean up temporary files
+rm "$INPUT_FILE" "$OUTPUT_FILE"
+
+# Release the lock
+flock -u 200

ipk-source/sdxpinn-quecmanager/root/www/cgi-bin/apn-profile.sh

@@ -0,0 +1,153 @@
+#!/bin/sh
+
+# Parse POST data
+read -r QUERY_STRING
+
+# Function to urldecode
+urldecode() {
+    echo -e "$(echo "$1" | sed 's/+/ /g;s/%\([0-9A-F][0-9A-F]\)/\\x\1/g')"
+}
+
+# Extract values from POST data
+iccidProfile1=$(echo "$QUERY_STRING" | grep -o 'iccidProfile1=[^&]*' | cut -d= -f2)
+apnProfile1=$(echo "$QUERY_STRING" | grep -o 'apnProfile1=[^&]*' | cut -d= -f2)
+pdpType1=$(echo "$QUERY_STRING" | grep -o 'pdpType1=[^&]*' | cut -d= -f2)
+iccidProfile2=$(echo "$QUERY_STRING" | grep -o 'iccidProfile2=[^&]*' | cut -d= -f2)
+apnProfile2=$(echo "$QUERY_STRING" | grep -o 'apnProfile2=[^&]*' | cut -d= -f2)
+pdpType2=$(echo "$QUERY_STRING" | grep -o 'pdpType2=[^&]*' | cut -d= -f2)
+
+# URL decode the values
+iccidProfile1=$(urldecode "$iccidProfile1")
+apnProfile1=$(urldecode "$apnProfile1")
+pdpType1=$(urldecode "$pdpType1")
+iccidProfile2=$(urldecode "$iccidProfile2")
+apnProfile2=$(urldecode "$apnProfile2")
+pdpType2=$(urldecode "$pdpType2")
+
+echo "Content-type: application/json"
+echo ""
+
+# Validate required first profile
+if [ -z "$iccidProfile1" ] || [ -z "$apnProfile1" ] || [ -z "$pdpType1" ]; then
+    echo '{"status": "error", "message": "Profile 1 is required"}'
+    exit 1
+fi
+
+# Create the directory structure
+mkdir -p /etc/quecmanager
+
+# Create a configuration file to store APN profiles (as plain text)
+cat > /etc/quecmanager/apn_config.txt << EOF
+iccidProfile1=$iccidProfile1
+apnProfile1=$apnProfile1
+pdpType1=$pdpType1
+EOF
+
+# Add second profile only if ICCID is provided
+if [ -n "$iccidProfile2" ]; then
+    cat >> /etc/quecmanager/apn_config.txt << EOF
+iccidProfile2=$iccidProfile2
+apnProfile2=$apnProfile2
+pdpType2=$pdpType2
+EOF
+fi
+
+# Create the apnProfiles.sh script
+cat > /etc/quecmanager/apnProfiles.sh << 'EOF'
+#!/bin/sh
+
+# Function to read config values
+get_config_value() {
+    local key=$1
+    grep "^${key}=" /etc/quecmanager/apn_config.txt | cut -d'=' -f2
+}
+
+# Read configuration
+iccidProfile1=$(get_config_value "iccidProfile1")
+apnProfile1=$(get_config_value "apnProfile1")
+pdpType1=$(get_config_value "pdpType1")
+iccidProfile2=$(get_config_value "iccidProfile2")
+apnProfile2=$(get_config_value "apnProfile2")
+pdpType2=$(get_config_value "pdpType2")
+
+# Function to get current ICCID
+get_current_iccid() {
+    local input_file="/tmp/inputICCID.txt"
+    local output_file="/tmp/outputICCID.txt"
+    
+    echo "AT+ICCID" > "$input_file"
+    atinout "$input_file" /dev/smd11 "$output_file"
+    
+    iccid=$(cat "$output_file" | grep "+ICCID:" | cut -d' ' -f2)
+    
+    rm -f "$input_file" "$output_file"
+    echo "$iccid"
+}
+
+# Function to set APN
+set_apn() {
+    local pdp_type="$1"
+    local apn="$2"
+    local input_file="/tmp/inputAPN.txt"
+    local output_file="/tmp/outputAPN.txt"
+    
+    echo "AT+CGDCONT=1,\"$pdp_type\",\"$apn\";+COPS=2;+COPS=0" > "$input_file"
+    atinout "$input_file" /dev/smd11 "$output_file"
+    
+    local result=$(cat "$output_file")
+    rm -f "$input_file" "$output_file"
+    
+    if echo "$result" | grep -q "OK"; then
+        return 0
+    else
+        return 1
+    fi
+}
+
+# Get current ICCID
+current_iccid=$(get_current_iccid)
+success=false
+
+# Check ICCID against profile 1 (required)
+if [ "$current_iccid" = "$iccidProfile1" ]; then
+    if set_apn "$pdpType1" "$apnProfile1"; then
+        success=true
+    fi
+# Check ICCID against profile 2 (optional)
+elif [ -n "$iccidProfile2" ] && [ "$current_iccid" = "$iccidProfile2" ]; then
+    if set_apn "$pdpType2" "$apnProfile2"; then
+        success=true
+    fi
+fi
+
+if [ "$success" = "true" ]; then
+    echo "APN set successfully" > /tmp/apn_result.txt
+else
+    echo "Failed to set APN" > /tmp/apn_result.txt
+fi
+EOF
+
+# Make the script executable
+chmod +x /etc/quecmanager/apnProfiles.sh
+
+# Add to rc.local if not already present
+if ! grep -q "/etc/quecmanager/apnProfiles.sh" /etc/rc.local; then
+    sed -i '/^exit 0/i /etc/quecmanager/apnProfiles.sh' /etc/rc.local
+fi
+
+# Run the script immediately
+/etc/quecmanager/apnProfiles.sh
+
+# Check the result
+if [ -f /tmp/apn_result.txt ]; then
+    result=$(cat /tmp/apn_result.txt)
+    rm -f /tmp/apn_result.txt
+    
+    if [ "$result" = "APN set successfully" ]; then
+        echo '{"status": "success", "message": "APN profiles saved and applied successfully"}'
+    else
+        echo '{"status": "error", "message": "APN profiles saved but failed to apply"}'
+    fi
+else
+    echo '{"status": "error", "message": "Something went wrong while processing APN profiles"}'
+fi

ipk-source/sdxpinn-quecmanager/root/www/cgi-bin/atinout_handler.sh

@@ -0,0 +1,52 @@
+#!/bin/sh
+
+# Function to URL-decode the input
+urldecode() {
+    local data="$1"
+    echo -e "$(echo "$data" | sed 's/+/ /g;s/%\(..\)/\\x\1/g;')"
+}
+
+# Set content-type for JSON response
+echo "Content-type: application/json"
+echo ""
+
+# Read the input from POST data
+read INPUT_DATA
+
+# Extract the command from the input data (format: command=AT+COMMAND)
+RAW_COMMAND=$(echo "$INPUT_DATA" | sed 's/command=//g')
+
+# URL-decode the command
+COMMAND=$(urldecode "$RAW_COMMAND")
+
+# Define unique input/output files and AT port
+INPUT_FILE="/tmp/custom_input_$$.txt"
+OUTPUT_FILE="/tmp/custom_output_$$.txt"
+AT_PORT="/dev/smd7"
+
+# Write the command directly to the input file
+echo "$COMMAND" > "$INPUT_FILE"
+
+# Run the command using atinout
+atinout "$INPUT_FILE" "$AT_PORT" "$OUTPUT_FILE"
+
+# Read the output from output.txt
+OUTPUT=$(cat "$OUTPUT_FILE")
+
+# Escape special characters (like newlines and double quotes) for JSON compatibility
+ESCAPED_OUTPUT=$(echo "$OUTPUT" | sed ':a;N;$!ba;s/\n/\\n/g; s/"/\\"/g')
+
+# Escape double quotes in the command for JSON compatibility
+ESCAPED_COMMAND=$(echo "$COMMAND" | sed 's/"/\\"/g')
+
+# Create the JSON response
+JSON_RESPONSE=$(printf "{\"command\":\"%s\",\"output\":\"%s\"}" "$ESCAPED_COMMAND" "$ESCAPED_OUTPUT")
+
+# Log the JSON response to the debug log
+echo "$JSON_RESPONSE" >> /tmp/cgi_debug.log
+
+# Return the output as a valid JSON response
+echo "$JSON_RESPONSE"
+
+# Clean up temporary files
+rm "$INPUT_FILE" "$OUTPUT_FILE"

ipk-source/sdxpinn-quecmanager/root/www/cgi-bin/auth.sh

@@ -0,0 +1,45 @@
+#!/bin/sh
+
+# Set Content-Type for CGI script
+echo "Content-type: application/json"
+echo ""
+
+# Read POST data
+read POST_DATA
+
+# Extract the password from POST data (URL encoded)
+USER="root"
+INPUT_PASSWORD=$(echo "$POST_DATA" | sed -n 's/^.*password=\([^&]*\).*$/\1/p')
+
+# URL-decode the password (replace + with space and decode %XX)
+INPUT_PASSWORD=$(echo "$INPUT_PASSWORD" | sed 's/+/ /g;s/%\(..\)/\\x\1/g' | xargs -0 printf "%b")
+
+# Log received password for debugging (remove in production)
+# echo "Received password: $INPUT_PASSWORD" >&2
+
+# Extract the hashed password from /etc/shadow for the specified user
+USER_SHADOW_ENTRY=$(grep "^$USER:" /etc/shadow)
+
+if [ -z "$USER_SHADOW_ENTRY" ]; then
+    echo '{"state":"failed", "message":"User not found"}'
+    exit 1
+fi
+
+# Extract the password hash (it's the second field, colon-separated)
+USER_HASH=$(echo "$USER_SHADOW_ENTRY" | cut -d: -f2)
+
+# Extract the salt (MD5 uses the $1$ prefix followed by the salt)
+SALT=$(echo "$USER_HASH" | cut -d'$' -f3)
+
+# Generate a hash from the input password using the same salt
+GENERATED_HASH=$(echo "$INPUT_PASSWORD" | openssl passwd -1 -salt "$SALT" -stdin)
+
+# Log generated hash for debugging
+echo "Generated hash: $GENERATED_HASH" >&2
+
+# Compare the generated hash with the one in the shadow file
+if [ "$GENERATED_HASH" = "$USER_HASH" ]; then
+    echo '{"state":"success", "hashed_password":"'"$GENERATED_HASH"'"}'
+else
+    echo '{"state":"failed", "hashed_password":"'"$GENERATED_HASH"'"}'
+fi

ipk-source/sdxpinn-quecmanager/root/www/cgi-bin/cell-settings.sh

@@ -0,0 +1,66 @@
+#!/bin/sh
+
+# Set content-type for JSON response
+echo "Content-type: application/json"
+echo ""
+
+# Define the lock file
+LOCK_FILE="/tmp/home_data.lock"
+
+# Acquire the lock (wait if needed)
+exec 200>$LOCK_FILE
+flock -x 200
+
+# Temporary files for input/output and AT port
+INPUT_FILE="/tmp/input_$$.txt"
+OUTPUT_FILE="/tmp/output_$$.txt"
+AT_PORT="/dev/smd11"
+
+# Debug file path
+DEBUG_FILE="/tmp/debug-json-result.txt"
+
+# Function to escape JSON strings (handling quotes and newlines)
+escape_json() {
+    # Escape newlines and double quotes
+    echo "$1" | sed ':a;N;$!ba;s/\n/\\n/g; s/"/\\"/g'
+}
+
+# Initialize JSON response array
+JSON_RESPONSE="["
+
+# List of AT commands to run, one by one
+for COMMAND in 'AT+CGDCONT?' 'AT+QNWPREFCFG="mode_pref"' 'AT+QNWPREFCFG="nr5g_disable_mode"'; do
+    # Write the command to the input file
+    echo "$COMMAND" > "$INPUT_FILE"
+
+    # Run the command using atinout
+    atinout "$INPUT_FILE" "$AT_PORT" "$OUTPUT_FILE"
+
+    # Read the output from the output file
+    OUTPUT=$(cat "$OUTPUT_FILE")
+
+    # Escape special characters for JSON (escape only output)
+    ESCAPED_OUTPUT=$(escape_json "$OUTPUT")
+
+    # Append the response as an object to the JSON response array
+    JSON_RESPONSE="${JSON_RESPONSE}{\"response\":\"$ESCAPED_OUTPUT\"},"
+done
+
+# Remove the trailing comma and close the JSON array
+if [ "${JSON_RESPONSE: -1}" = "," ]; then
+    JSON_RESPONSE="${JSON_RESPONSE%,}]"
+else
+    JSON_RESPONSE="${JSON_RESPONSE}]"
+fi
+
+# Write the JSON response to the debug file for troubleshooting
+echo "$JSON_RESPONSE" > "$DEBUG_FILE"
+
+# Return the output as a valid JSON response
+echo "$JSON_RESPONSE"
+
+# Clean up temporary files
+rm "$INPUT_FILE" "$OUTPUT_FILE"
+
+# Release the lock
+flock -u 200

ipk-source/sdxpinn-quecmanager/root/www/cgi-bin/cell-settings/apn-profile.sh

@@ -0,0 +1,153 @@
+#!/bin/sh
+
+# Parse POST data
+read -r QUERY_STRING
+
+# Function to urldecode
+urldecode() {
+    echo -e "$(echo "$1" | sed 's/+/ /g;s/%\([0-9A-F][0-9A-F]\)/\\x\1/g')"
+}
+
+# Extract values from POST data
+iccidProfile1=$(echo "$QUERY_STRING" | grep -o 'iccidProfile1=[^&]*' | cut -d= -f2)
+apnProfile1=$(echo "$QUERY_STRING" | grep -o 'apnProfile1=[^&]*' | cut -d= -f2)
+pdpType1=$(echo "$QUERY_STRING" | grep -o 'pdpType1=[^&]*' | cut -d= -f2)
+iccidProfile2=$(echo "$QUERY_STRING" | grep -o 'iccidProfile2=[^&]*' | cut -d= -f2)
+apnProfile2=$(echo "$QUERY_STRING" | grep -o 'apnProfile2=[^&]*' | cut -d= -f2)
+pdpType2=$(echo "$QUERY_STRING" | grep -o 'pdpType2=[^&]*' | cut -d= -f2)
+
+# URL decode the values
+iccidProfile1=$(urldecode "$iccidProfile1")
+apnProfile1=$(urldecode "$apnProfile1")
+pdpType1=$(urldecode "$pdpType1")
+iccidProfile2=$(urldecode "$iccidProfile2")
+apnProfile2=$(urldecode "$apnProfile2")
+pdpType2=$(urldecode "$pdpType2")
+
+echo "Content-type: application/json"
+echo ""
+
+# Validate required first profile
+if [ -z "$iccidProfile1" ] || [ -z "$apnProfile1" ] || [ -z "$pdpType1" ]; then
+    echo '{"status": "error", "message": "Profile 1 is required"}'
+    exit 1
+fi
+
+# Create the directory structure
+mkdir -p /etc/quecmanager
+
+# Create a configuration file to store APN profiles (as plain text)
+cat > /etc/quecmanager/apn_config.txt << EOF
+iccidProfile1=$iccidProfile1
+apnProfile1=$apnProfile1
+pdpType1=$pdpType1
+EOF
+
+# Add second profile only if ICCID is provided
+if [ -n "$iccidProfile2" ]; then
+    cat >> /etc/quecmanager/apn_config.txt << EOF
+iccidProfile2=$iccidProfile2
+apnProfile2=$apnProfile2
+pdpType2=$pdpType2
+EOF
+fi
+
+# Create the apnProfiles.sh script
+cat > /etc/quecmanager/apnProfiles.sh << 'EOF'
+#!/bin/sh
+
+# Function to read config values
+get_config_value() {
+    local key=$1
+    grep "^${key}=" /etc/quecmanager/apn_config.txt | cut -d'=' -f2
+}
+
+# Read configuration
+iccidProfile1=$(get_config_value "iccidProfile1")
+apnProfile1=$(get_config_value "apnProfile1")
+pdpType1=$(get_config_value "pdpType1")
+iccidProfile2=$(get_config_value "iccidProfile2")
+apnProfile2=$(get_config_value "apnProfile2")
+pdpType2=$(get_config_value "pdpType2")
+
+# Function to get current ICCID
+get_current_iccid() {
+    local input_file="/tmp/inputICCID.txt"
+    local output_file="/tmp/outputICCID.txt"
+    
+    echo "AT+ICCID" > "$input_file"
+    atinout "$input_file" /dev/smd11 "$output_file"
+    
+    iccid=$(cat "$output_file" | grep "+ICCID:" | cut -d' ' -f2)
+    
+    rm -f "$input_file" "$output_file"
+    echo "$iccid"
+}
+
+# Function to set APN
+set_apn() {
+    local pdp_type="$1"
+    local apn="$2"
+    local input_file="/tmp/inputAPN.txt"
+    local output_file="/tmp/outputAPN.txt"
+    
+    echo "AT+CGDCONT=1,\"$pdp_type\",\"$apn\";+COPS=2;+COPS=0" > "$input_file"
+    atinout "$input_file" /dev/smd11 "$output_file"
+    
+    local result=$(cat "$output_file")
+    rm -f "$input_file" "$output_file"
+    
+    if echo "$result" | grep -q "OK"; then
+        return 0
+    else
+        return 1
+    fi
+}
+
+# Get current ICCID
+current_iccid=$(get_current_iccid)
+success=false
+
+# Check ICCID against profile 1 (required)
+if [ "$current_iccid" = "$iccidProfile1" ]; then
+    if set_apn "$pdpType1" "$apnProfile1"; then
+        success=true
+    fi
+# Check ICCID against profile 2 (optional)
+elif [ -n "$iccidProfile2" ] && [ "$current_iccid" = "$iccidProfile2" ]; then
+    if set_apn "$pdpType2" "$apnProfile2"; then
+        success=true
+    fi
+fi
+
+if [ "$success" = "true" ]; then
+    echo "APN set successfully" > /tmp/apn_result.txt
+else
+    echo "Failed to set APN" > /tmp/apn_result.txt
+fi
+EOF
+
+# Make the script executable
+chmod +x /etc/quecmanager/apnProfiles.sh
+
+# Add to rc.local if not already present
+if ! grep -q "/etc/quecmanager/apnProfiles.sh" /etc/rc.local; then
+    sed -i '/^exit 0/i /etc/quecmanager/apnProfiles.sh' /etc/rc.local
+fi
+
+# Run the script immediately
+/etc/quecmanager/apnProfiles.sh
+
+# Check the result
+if [ -f /tmp/apn_result.txt ]; then
+    result=$(cat /tmp/apn_result.txt)
+    rm -f /tmp/apn_result.txt
+    
+    if [ "$result" = "APN set successfully" ]; then
+        echo '{"status": "success", "message": "APN profiles saved and applied successfully"}'
+    else
+        echo '{"status": "error", "message": "APN profiles saved but failed to apply"}'
+    fi
+else
+    echo '{"status": "error", "message": "Something went wrong while processing APN profiles"}'
+fi

ipk-source/sdxpinn-quecmanager/root/www/cgi-bin/cell-settings/cell-settings.sh

@@ -0,0 +1,66 @@
+#!/bin/sh
+
+# Set content-type for JSON response
+echo "Content-type: application/json"
+echo ""
+
+# Define the lock file
+LOCK_FILE="/tmp/home_data.lock"
+
+# Acquire the lock (wait if needed)
+exec 200>$LOCK_FILE
+flock -x 200
+
+# Temporary files for input/output and AT port
+INPUT_FILE="/tmp/input_$$.txt"
+OUTPUT_FILE="/tmp/output_$$.txt"
+AT_PORT="/dev/smd11"
+
+# Debug file path
+DEBUG_FILE="/tmp/debug-json-result.txt"
+
+# Function to escape JSON strings (handling quotes and newlines)
+escape_json() {
+    # Escape newlines and double quotes
+    echo "$1" | sed ':a;N;$!ba;s/\n/\\n/g; s/"/\\"/g'
+}
+
+# Initialize JSON response array
+JSON_RESPONSE="["
+
+# List of AT commands to run, one by one
+for COMMAND in 'AT+CGDCONT?' 'AT+QNWPREFCFG="mode_pref"' 'AT+QNWPREFCFG="nr5g_disable_mode"'; do
+    # Write the command to the input file
+    echo "$COMMAND" > "$INPUT_FILE"
+
+    # Run the command using atinout
+    atinout "$INPUT_FILE" "$AT_PORT" "$OUTPUT_FILE"
+
+    # Read the output from the output file
+    OUTPUT=$(cat "$OUTPUT_FILE")
+
+    # Escape special characters for JSON (escape only output)
+    ESCAPED_OUTPUT=$(escape_json "$OUTPUT")
+
+    # Append the response as an object to the JSON response array
+    JSON_RESPONSE="${JSON_RESPONSE}{\"response\":\"$ESCAPED_OUTPUT\"},"
+done
+
+# Remove the trailing comma and close the JSON array
+if [ "${JSON_RESPONSE: -1}" = "," ]; then
+    JSON_RESPONSE="${JSON_RESPONSE%,}]"
+else
+    JSON_RESPONSE="${JSON_RESPONSE}]"
+fi
+
+# Write the JSON response to the debug file for troubleshooting
+echo "$JSON_RESPONSE" > "$DEBUG_FILE"
+
+# Return the output as a valid JSON response
+echo "$JSON_RESPONSE"
+
+# Clean up temporary files
+rm "$INPUT_FILE" "$OUTPUT_FILE"
+
+# Release the lock
+flock -u 200

ipk-source/sdxpinn-quecmanager/root/www/cgi-bin/cell-settings/fetch-apn-profiles.sh

@@ -0,0 +1,45 @@
+#!/bin/sh
+
+echo "Content-type: application/json"
+echo ""
+
+CONFIG_FILE="/etc/quecmanager/apn_config.txt"
+
+if [ ! -f "$CONFIG_FILE" ]; then
+    echo '{"status": "error", "message": "No APN profiles found", "profiles": {}}'
+    exit 0
+fi
+
+# Function to read config values
+get_config_value() {
+    local key=$1
+    local value=$(grep "^${key}=" "$CONFIG_FILE" | cut -d'=' -f2)
+    echo "$value"
+}
+
+# Read all profile values
+iccidProfile1=$(get_config_value "iccidProfile1")
+apnProfile1=$(get_config_value "apnProfile1")
+pdpType1=$(get_config_value "pdpType1")
+iccidProfile2=$(get_config_value "iccidProfile2")
+apnProfile2=$(get_config_value "apnProfile2")
+pdpType2=$(get_config_value "pdpType2")
+
+# Construct JSON response
+cat << EOF
+{
+    "status": "success",
+    "profiles": {
+        "profile1": {
+            "iccid": "${iccidProfile1:-}",
+            "apn": "${apnProfile1:-}",
+            "pdpType": "${pdpType1:-}"
+        },
+        "profile2": {
+            "iccid": "${iccidProfile2:-}",
+            "apn": "${apnProfile2:-}",
+            "pdpType": "${pdpType2:-}"
+        }
+    }
+}
+EOF

ipk-source/sdxpinn-quecmanager/root/www/cgi-bin/check_net.sh

@@ -0,0 +1,14 @@
+#!/bin/sh
+
+# Set the content type to JSON
+echo "Content-Type: application/json"
+echo ""
+
+# Ping 8.8.8.8 and capture the result
+if ping -c 1 8.8.8.8 > /dev/null 2>&1; then
+    # Ping was successful
+    echo '{"connection": "ACTIVE"}'
+else
+    # Ping failed
+    echo '{"connection": "INACTIVE"}'
+fi

ipk-source/sdxpinn-quecmanager/root/www/cgi-bin/fetch-apn-profiles.sh

@@ -0,0 +1,45 @@
+#!/bin/sh
+
+echo "Content-type: application/json"
+echo ""
+
+CONFIG_FILE="/etc/quecmanager/apn_config.txt"
+
+if [ ! -f "$CONFIG_FILE" ]; then
+    echo '{"status": "error", "message": "No APN profiles found", "profiles": {}}'
+    exit 0
+fi
+
+# Function to read config values
+get_config_value() {
+    local key=$1
+    local value=$(grep "^${key}=" "$CONFIG_FILE" | cut -d'=' -f2)
+    echo "$value"
+}
+
+# Read all profile values
+iccidProfile1=$(get_config_value "iccidProfile1")
+apnProfile1=$(get_config_value "apnProfile1")
+pdpType1=$(get_config_value "pdpType1")
+iccidProfile2=$(get_config_value "iccidProfile2")
+apnProfile2=$(get_config_value "apnProfile2")
+pdpType2=$(get_config_value "pdpType2")
+
+# Construct JSON response
+cat << EOF
+{
+    "status": "success",
+    "profiles": {
+        "profile1": {
+            "iccid": "${iccidProfile1:-}",
+            "apn": "${apnProfile1:-}",
+            "pdpType": "${pdpType1:-}"
+        },
+        "profile2": {
+            "iccid": "${iccidProfile2:-}",
+            "apn": "${apnProfile2:-}",
+            "pdpType": "${pdpType2:-}"
+        }
+    }
+}
+EOF

ipk-source/sdxpinn-quecmanager/root/www/cgi-bin/fetch_macs.sh

@@ -0,0 +1,49 @@
+#!/bin/sh
+echo "Content-type: application/json"
+echo ""
+
+# Create a temporary file to store the processed data
+temp_file=$(mktemp)
+
+# Process ARP entries and store in temporary file
+arp -a | while IFS= read -r line; do
+    if [ -n "$line" ]; then
+        # Extract hostname (or IP if hostname is "?"), IP, and MAC
+        hostname=$(echo "$line" | awk '{print $1}')
+        ip=$(echo "$line" | awk -F '[()]' '{print $2}')
+        mac=$(echo "$line" | awk '{print $4}')
+        
+        # Skip entries without valid MAC addresses
+        if [ "$mac" = "<incomplete>" ]; then
+            continue
+        fi
+
+        # If hostname is "?", use the IP address instead
+        if [ "$hostname" = "?" ]; then
+            hostname="$ip"
+        fi
+
+        # Store each entry in the temp file
+        echo "$hostname:$ip:$mac" >> "$temp_file"
+    fi
+done
+
+# Initialize JSON array
+echo -n "["
+
+# Process the temporary file to create JSON
+first=true
+while IFS=: read -r hostname ip mac; do
+    if [ "$first" = true ]; then
+        first=false
+    else
+        echo -n ","
+    fi
+    echo -n "{\"hostname\":\"$hostname\",\"ip\":\"$ip\",\"mac\":\"$mac\"}"
+done < "$temp_file"
+
+# Close the JSON array
+echo "]"
+
+# Clean up
+rm -f "$temp_file"

ipk-source/sdxpinn-quecmanager/root/www/cgi-bin/home/check_net.sh

@@ -0,0 +1,14 @@
+#!/bin/sh
+
+# Set the content type to JSON
+echo "Content-Type: application/json"
+echo ""
+
+# Ping 8.8.8.8 and capture the result
+if ping -c 1 8.8.8.8 > /dev/null 2>&1; then
+    # Ping was successful
+    echo '{"connection": "ACTIVE"}'
+else
+    # Ping failed
+    echo '{"connection": "INACTIVE"}'
+fi

ipk-source/sdxpinn-quecmanager/root/www/cgi-bin/home/home_data.sh

@@ -0,0 +1,66 @@
+#!/bin/sh
+
+# Set content-type for JSON response
+echo "Content-type: application/json"
+echo ""
+
+# Define the lock file
+LOCK_FILE="/tmp/home_data.lock"
+
+# Acquire the lock (wait if needed)
+exec 200>$LOCK_FILE
+flock -x 200
+
+# Temporary files for input/output and AT port
+INPUT_FILE="/tmp/input_$$.txt"
+OUTPUT_FILE="/tmp/output_$$.txt"
+AT_PORT="/dev/smd11"
+
+# Debug file path
+DEBUG_FILE="/tmp/debug-json-result.txt"
+
+# Function to escape JSON strings (handling quotes and newlines)
+escape_json() {
+    # Escape newlines and double quotes
+    echo "$1" | sed ':a;N;$!ba;s/\n/\\n/g; s/"/\\"/g'
+}
+
+# Initialize JSON response array
+JSON_RESPONSE="["
+
+# List of AT commands to run, one by one
+for COMMAND in "AT+QUIMSLOT?" "AT+CNUM" "AT+COPS?" "AT+CIMI" "AT+ICCID" "AT+CGSN" "AT+CPIN?" "AT+CGDCONT?" "AT+CREG?" "AT+CFUN?" "AT+QENG=\"servingcell\"" "AT+QTEMP" "AT+CGCONTRDP" "AT+QCAINFO" "AT+QRSRP" 'AT+QMAP="WWAN"'; do
+    # Write the command to the input file
+    echo "$COMMAND" > "$INPUT_FILE"
+
+    # Run the command using atinout
+    atinout "$INPUT_FILE" "$AT_PORT" "$OUTPUT_FILE"
+
+    # Read the output from the output file
+    OUTPUT=$(cat "$OUTPUT_FILE")
+
+    # Escape special characters for JSON (escape only output)
+    ESCAPED_OUTPUT=$(escape_json "$OUTPUT")
+
+    # Append the response as an object to the JSON response array
+    JSON_RESPONSE="${JSON_RESPONSE}{\"response\":\"$ESCAPED_OUTPUT\"},"
+done
+
+# Remove the trailing comma and close the JSON array
+if [ "${JSON_RESPONSE: -1}" = "," ]; then
+    JSON_RESPONSE="${JSON_RESPONSE%,}]"
+else
+    JSON_RESPONSE="${JSON_RESPONSE}]"
+fi
+
+# Write the JSON response to the debug file for troubleshooting
+echo "$JSON_RESPONSE" > "$DEBUG_FILE"
+
+# Return the output as a valid JSON response
+echo "$JSON_RESPONSE"
+
+# Clean up temporary files
+rm "$INPUT_FILE" "$OUTPUT_FILE"
+
+# Release the lock
+flock -u 200

ipk-source/sdxpinn-quecmanager/root/www/cgi-bin/home/traffic_stats.sh

@@ -0,0 +1,16 @@
+#!/bin/sh
+echo "Content-type: application/json"
+echo ""
+
+# Get RX and TX bytes from ifconfig eth0
+data=$(ifconfig eth0 | grep "RX bytes")
+
+# Extract download (RX) and upload (TX) values using awk
+download=$(echo $data | awk '{print $2}' | cut -d':' -f2)
+upload=$(echo $data | awk '{print $6}' | cut -d':' -f2)
+
+# Return JSON response
+echo "{"
+echo "  \"download\": \"$download\","
+echo "  \"upload\": \"$upload\""
+echo "}"

ipk-source/sdxpinn-quecmanager/root/www/cgi-bin/home_data.sh

@@ -0,0 +1,66 @@
+#!/bin/sh
+
+# Set content-type for JSON response
+echo "Content-type: application/json"
+echo ""
+
+# Define the lock file
+LOCK_FILE="/tmp/home_data.lock"
+
+# Acquire the lock (wait if needed)
+exec 200>$LOCK_FILE
+flock -x 200
+
+# Temporary files for input/output and AT port
+INPUT_FILE="/tmp/input_$$.txt"
+OUTPUT_FILE="/tmp/output_$$.txt"
+AT_PORT="/dev/smd11"
+
+# Debug file path
+DEBUG_FILE="/tmp/debug-json-result.txt"
+
+# Function to escape JSON strings (handling quotes and newlines)
+escape_json() {
+    # Escape newlines and double quotes
+    echo "$1" | sed ':a;N;$!ba;s/\n/\\n/g; s/"/\\"/g'
+}
+
+# Initialize JSON response array
+JSON_RESPONSE="["
+
+# List of AT commands to run, one by one
+for COMMAND in "AT+QUIMSLOT?" "AT+CNUM" "AT+COPS?" "AT+CIMI" "AT+ICCID" "AT+CGSN" "AT+CPIN?" "AT+CGDCONT?" "AT+CREG?" "AT+CFUN?" "AT+QENG=\"servingcell\"" "AT+QTEMP" "AT+CGCONTRDP" "AT+QCAINFO" "AT+QRSRP" 'AT+QMAP="WWAN"'; do
+    # Write the command to the input file
+    echo "$COMMAND" > "$INPUT_FILE"
+
+    # Run the command using atinout
+    atinout "$INPUT_FILE" "$AT_PORT" "$OUTPUT_FILE"
+
+    # Read the output from the output file
+    OUTPUT=$(cat "$OUTPUT_FILE")
+
+    # Escape special characters for JSON (escape only output)
+    ESCAPED_OUTPUT=$(escape_json "$OUTPUT")
+
+    # Append the response as an object to the JSON response array
+    JSON_RESPONSE="${JSON_RESPONSE}{\"response\":\"$ESCAPED_OUTPUT\"},"
+done
+
+# Remove the trailing comma and close the JSON array
+if [ "${JSON_RESPONSE: -1}" = "," ]; then
+    JSON_RESPONSE="${JSON_RESPONSE%,}]"
+else
+    JSON_RESPONSE="${JSON_RESPONSE}]"
+fi
+
+# Write the JSON response to the debug file for troubleshooting
+echo "$JSON_RESPONSE" > "$DEBUG_FILE"
+
+# Return the output as a valid JSON response
+echo "$JSON_RESPONSE"
+
+# Clean up temporary files
+rm "$INPUT_FILE" "$OUTPUT_FILE"
+
+# Release the lock
+flock -u 200

ipk-source/sdxpinn-quecmanager/root/www/cgi-bin/traffic_stats.sh

@@ -0,0 +1,16 @@
+#!/bin/sh
+echo "Content-type: application/json"
+echo ""
+
+# Get RX and TX bytes from ifconfig eth0
+data=$(ifconfig eth0 | grep "RX bytes")
+
+# Extract download (RX) and upload (TX) values using awk
+download=$(echo $data | awk '{print $2}' | cut -d':' -f2)
+upload=$(echo $data | awk '{print $6}' | cut -d':' -f2)
+
+# Return JSON response
+echo "{"
+echo "  \"download\": \"$download\","
+echo "  \"upload\": \"$upload\""
+echo "}"

ipk-source/sdxpinn-quecmanager/root/www/cgi-bin/ttl.sh

@@ -0,0 +1,94 @@
+#!/bin/sh
+
+echo "Content-type: application/json"
+echo ""
+
+ttl_file="/etc/firewall.user.ttl"
+lan_utils_script="/etc/data/lanUtils.sh"
+
+setup_persistent_config() {
+    if [ ! -f "$lan_utils_script" ]; then
+        echo "{\"success\": false, \"error\": \"lanUtils.sh not found\"}"
+        return 1
+    fi
+
+    # Backup the original script if not already done
+    if [ ! -f "${lan_utils_script}.bak" ]; then
+        cp "$lan_utils_script" "${lan_utils_script}.bak"
+    fi
+
+    # Add the local ttl_firewall_file line if it's not already present
+    if ! grep -q "local ttl_firewall_file" "$lan_utils_script"; then
+        sed -i '/local tcpmss_firewall_filev6/a \  local ttl_firewall_file=/etc/firewall.user.ttl' "$lan_utils_script"
+    fi
+
+    # Add the condition to include the ttl_firewall_file if it's not already present
+    if ! grep -q "if \[ -f \"\$ttl_firewall_file\" \]; then" "$lan_utils_script"; then
+        sed -i '/if \[ -f "\$tcpmss_firewall_filev6" \]; then/i \  if [ -f "\$ttl_firewall_file" ]; then\n    cat \$ttl_firewall_file >> \$firewall_file\n  fi' "$lan_utils_script"
+    fi
+}
+
+clear_existing_rules() {
+    local current_ttl=$1
+    if [ -n "$current_ttl" ]; then
+        iptables -t mangle -D POSTROUTING -o rmnet+ -j TTL --ttl-set "$current_ttl" 2>/dev/null
+        ip6tables -t mangle -D POSTROUTING -o rmnet+ -j HL --hl-set "$current_ttl" 2>/dev/null
+    fi
+}
+
+case "$REQUEST_METHOD" in
+    GET)
+        # Ensure consistent JSON format for GET requests
+        if [ -s "$ttl_file" ]; then
+            ttl_value=$(grep 'iptables -t mangle -A POSTROUTING' "$ttl_file" | awk '{for(i=1;i<=NF;i++){if($i=="--ttl-set"){print $(i+1)}}}')
+            # Ensure ttl_value is a number, default to 0 if not
+            if ! [[ "$ttl_value" =~ ^[0-9]+$ ]]; then
+                ttl_value=0
+            fi
+            echo "{\"isEnabled\": true, \"currentValue\": $ttl_value}"
+        else
+            echo "{\"isEnabled\": false, \"currentValue\": 0}"
+        fi
+        ;;
+    POST)
+        read -r post_data
+        ttl_value=$(echo "$post_data" | sed 's/ttl=//')
+        
+        # Ensure ttl_file exists
+        touch "$ttl_file" 2>/dev/null
+        if [ ! -f "$ttl_file" ]; then
+            echo "{\"success\": false, \"error\": \"Cannot create TTL file\"}"
+            exit 1
+        fi
+
+        # Setup persistent configuration
+        setup_persistent_config
+        
+        # Get current TTL value for cleanup
+        current_ttl=$(grep 'iptables -t mangle -A POSTROUTING' "$ttl_file" | awk '{for(i=1;i<=NF;i++){if($i=="--ttl-set"){print $(i+1)}}}')
+        
+        if ! [[ "$ttl_value" =~ ^[0-9]+$ ]]; then
+            echo "{\"success\": false, \"error\": \"Invalid TTL value\"}"
+        elif [ "$ttl_value" = "0" ]; then
+            clear_existing_rules "$current_ttl"
+            > "$ttl_file"
+            echo "{\"success\": true}"
+        else
+            # Clear existing rules
+            clear_existing_rules "$current_ttl"
+            
+            # Set new rules
+            echo "iptables -t mangle -A POSTROUTING -o rmnet+ -j TTL --ttl-set $ttl_value" > "$ttl_file"
+            echo "ip6tables -t mangle -A POSTROUTING -o rmnet+ -j HL --hl-set $ttl_value" >> "$ttl_file"
+            
+            # Apply the rules
+            iptables -t mangle -A POSTROUTING -o rmnet+ -j TTL --ttl-set "$ttl_value"
+            ip6tables -t mangle -A POSTROUTING -o rmnet+ -j HL --hl-set "$ttl_value"
+            
+            echo "{\"success\": true}"
+        fi
+        ;;
+    *)
+        echo "{\"success\": false, \"error\": \"Invalid request method\"}"
+        ;;
+esac