From 895530ce718d1994301b7ab6d360b657fe063abb Mon Sep 17 00:00:00 2001 From: FusionPBX Date: Mon, 14 Nov 2022 17:39:31 -0700 Subject: [PATCH] Create access_control_import.php --- app/access_controls/access_control_import.php | 452 ++++++++++++++++++ 1 file changed, 452 insertions(+) create mode 100644 app/access_controls/access_control_import.php diff --git a/app/access_controls/access_control_import.php b/app/access_controls/access_control_import.php new file mode 100644 index 0000000000..a7da4bc07d --- /dev/null +++ b/app/access_controls/access_control_import.php @@ -0,0 +1,452 @@ + + Portions created by the Initial Developer are Copyright (C) 2022 + the Initial Developer. All Rights Reserved. + + Contributor(s): + Mark J Crane +*/ + +//set the include path + $conf = glob("{/usr/local/etc,/etc}/fusionpbx/config.conf", GLOB_BRACE); + set_include_path(parse_ini_file($conf[0])['document.root']); + +//includes files + require_once "resources/require.php"; + require_once "resources/check_auth.php"; + +//check permissions + if (permission_exists('access_control_node_add')) { + //access granted + } + else { + echo "access denied"; + exit; + } + +//add multi-lingual support + $language = new text; + $text = $language->get(); + +//built in str_getcsv requires PHP 5.3 or higher, this function can be used to reproduct the functionality but requirs PHP 5.1.0 or higher + if (!function_exists('str_getcsv')) { + function str_getcsv($input, $delimiter = ",", $enclosure = '"', $escape = "\\") { + $fp = fopen("php://memory", 'r+'); + fputs($fp, $input); + rewind($fp); + $data = fgetcsv($fp, null, $delimiter, $enclosure); // $escape only got added in 5.3.0 + fclose($fp); + return $data; + } + } + +//set the max php execution time + ini_set('max_execution_time', 7200); + +//get the http get values and set them as php variables + $action = $_POST["action"]; + $from_row = $_POST["from_row"]; + $delimiter = $_POST["data_delimiter"]; + $enclosure = $_POST["data_enclosure"]; + +//save the data to the csv file + if (isset($_POST['data'])) { + $file = $_SESSION['server']['temp']['dir']."/access_control_nodes-".$_SESSION['domain_name'].".csv"; + file_put_contents($file, $_POST['data']); + $_SESSION['file'] = $file; + } + +//copy the csv file + //$_POST['submit'] == "Upload" && + if ( is_uploaded_file($_FILES['ulfile']['tmp_name']) && permission_exists('contact_upload')) { + if ($_POST['type'] == 'csv') { + move_uploaded_file($_FILES['ulfile']['tmp_name'], $_SESSION['server']['temp']['dir'].'/'.$_FILES['ulfile']['name']); + $save_msg = "Uploaded file to ".$_SESSION['server']['temp']['dir']."/". htmlentities($_FILES['ulfile']['name']); + //system('chmod -R 744 '.$_SESSION['server']['temp']['dir'].'*'); + $file = $_SESSION['server']['temp']['dir'].'/'.$_FILES['ulfile']['name']; + $_SESSION['file'] = $file; + } + } + +//get the schema + if (strlen($delimiter) > 0) { + //get the first line + $line = fgets(fopen($_SESSION['file'], 'r')); + $line_fields = explode($delimiter, $line); + + //get the schema + $x = 0; + include "app/access_controls/app_config.php"; + $i = 0; + foreach ($apps[0]['db'] as $table) { + //get the table name and parent name + $table_name = $table["table"]['name']; + $parent_name = $table["table"]['parent']; + + //remove the v_ table prefix + if (substr($table_name, 0, 2) == 'v_') { + $table_name = substr($table_name, 2); + } + if (substr($parent_name, 0, 2) == 'v_') { + $parent_name = substr($parent_name, 2); + } + + if ($table_name == 'access_control_nodes') { + $schema[$i]['table'] = $table_name; + $schema[$i]['parent'] = $parent_name; + foreach ($table['fields'] as $row) { + if ($row['deprecated'] !== 'true') { + if (is_array($row['name'])) { + $field_name = $row['name']['text']; + } + else { + $field_name = $row['name']; + } + $schema[$i]['fields'][] = $field_name; + } + } + } + $i++; + } + } + +//match the column names to the field names + if (strlen($delimiter) > 0 && file_exists($_SESSION['file']) && $action != 'import') { + + //validate the token + $token = new token; + if (!$token->validate($_SERVER['PHP_SELF'])) { + message::add($text['message-invalid_token'],'negative'); + header('Location: access_control_edit.php?id='.$_GET['id']); + exit; + } + + //create token + $object = new token; + $token = $object->create($_SERVER['PHP_SELF']); + + //include header + $document['title'] = $text['label-import']; + require_once "resources/header.php"; + + //form to match the fields to the column names + echo "
\n"; + + echo "
\n"; + echo "
".$text['header-import']."
\n"; + echo "
\n"; + echo button::create(['type'=>'button','label'=>$text['button-back'],'icon'=>$_SESSION['theme']['button_icon_back'],'id'=>'btn_back','style'=>'margin-right: 15px;','link'=>'access_control_node_edit.php?id='.$_GET['id']]); + echo button::create(['type'=>'submit','label'=>$text['button-import'],'icon'=>$_SESSION['theme']['button_icon_import'],'id'=>'btn_save']); + echo "
\n"; + echo "
\n"; + echo "
\n"; + + echo $text['description-import']."\n"; + echo "\n"; + + //loop through the lines and fields + $x = 0; + foreach ($line_fields as $line_field) { + $line_field = trim(trim($line_field), $enclosure); + echo "\n"; + echo " \n"; + echo " \n"; + echo "\n"; + $x++; + } + + echo "
\n"; + echo $line_field; + echo " \n"; + echo " \n"; + echo "
\n"; + echo "

\n"; + + echo "\n"; + echo "\n"; + echo "\n"; + echo "\n"; + echo "\n"; + + echo "
\n"; + + require_once "resources/footer.php"; + + //end the script + exit; + } + +//get the parent table + function get_parent($schema,$table_name) { + foreach ($schema as $row) { + if ($row['table'] == $table_name) { + return $row['parent']; + } + } + } + +//upload the csv + if (file_exists($_SESSION['file']) && $action == 'import') { + + //validate the token + $token = new token; + if (!$token->validate($_SERVER['PHP_SELF'])) { + message::add($text['message-invalid_token'],'negative'); + header('Location: access_control_edit.php?id='.$_GET['id']); + exit; + } + + //user selected fields, labels + $fields = $_POST['fields']; + $labels = $_POST['labels']; + + //set the domain_uuid + $domain_uuid = $_SESSION['domain_uuid']; + + //get the contents of the csv file and convert them into an array + $handle = @fopen($_SESSION['file'], "r"); + if ($handle) { + //set the starting identifiers + $row_id = 0; + $row_number = 1; + + //loop through the array + while (($line = fgets($handle, 4096)) !== false) { + if ($from_row <= $row_number) { + //format the data + $y = 0; + foreach ($fields as $key => $value) { + //get the line + $result = str_getcsv($line, $delimiter, $enclosure); + + //get the table and field name + $field_array = explode(".",$value); + $table_name = $field_array[0]; + $field_name = $field_array[1]; + //echo "value: $value
\n"; + //echo "table_name: $table_name
\n"; + //echo "field_name: $field_name
\n"; + + //get the parent table name + $parent = get_parent($schema, $table_name); + + //count the field names + if (isset($field_count[$table_name][$field_name])) { + $field_count[$table_name][$field_name]++; + } + else { + $field_count[$table_name][$field_name] = 0; + } + + //set the ordinal ID + $id = $field_count[$table_name][$field_name]; + + //remove formatting from the phone number + if ($field_name == "node_cidr") { + if (isset($result[$key]) && $result[$key] != '') { + $cidr_array = explode("/", str_replace("\\", "/", $result[$key])); + if (filter_var($cidr_array[0], FILTER_VALIDATE_IP, FILTER_FLAG_IPV4)) { + if (isset($cidr_array[1]) && is_numeric($cidr_array[1])) { + //valid IPv4 address and cidr notation + //$result[$key] = $result[$key]; + } + else { + //valid IPv4 address add the missing cidr notation + $result[$key] = $result[$key].'/32'; + } + } + elseif(filter_var($cidr_array[0], FILTER_VALIDATE_IP, FILTER_FLAG_IPV6)) { + //valid IPv6 address + } + } + } + + //build the data array + if (strlen($table_name) > 0) { + $array[$table_name][$row_id]['access_control_node_uuid'] = uuid(); + $array[$table_name][$row_id]['access_control_uuid'] = $_GET['id']; + $array[$table_name][$row_id][$field_name] = $result[$key]; + } + if (is_array($array[$parent][$row_id])) { $y++; } + } + + //debug information + //view_array($field_count); + + //process a chunk of the array + if ($row_id === 1000) { + //save to the data + $database = new database; + $database->app_name = 'access_controls'; + $database->app_uuid = '1416a250-f6e1-4edc-91a6-5c9b883638fd'; + $database->save($array); + + //clear the array + unset($array); + + //set the row id back to 0 + $row_id = 0; + } + + } //if ($from_row <= $row_number) + unset($field_count); + $row_number++; + $row_id++; + } //end while + fclose($handle); + + //debug information + //view_array($array); + + //save to the data + if (is_array($array)) { + $database = new database; + $database->app_name = 'access_controls'; + $database->app_uuid = '1416a250-f6e1-4edc-91a6-5c9b883638fd'; + $database->save($array); + unset($array); + } + + //send the redirect header + header("Location: access_control_edit.php?id=".$_GET['id']); + exit; + } + } + +//create token + $object = new token; + $token = $object->create($_SERVER['PHP_SELF']); + +//include the header + $document['title'] = $text['title-import']; + require_once "resources/header.php"; + +//show content + echo "
\n"; + + echo "
\n"; + echo "
".$text['header-import']."
\n"; + echo "
\n"; + echo button::create(['type'=>'button','label'=>$text['button-back'],'icon'=>$_SESSION['theme']['button_icon_back'],'id'=>'btn_back','style'=>'margin-right: 15px;','link'=>'access_control_edit.php?id='.$_GET['id']]); + echo button::create(['type'=>'submit','label'=>$text['button-continue'],'icon'=>$_SESSION['theme']['button_icon_upload'],'id'=>'btn_save']); + echo "
\n"; + echo "
\n"; + echo "
\n"; + + echo $text['description-import']."\n"; + echo "

\n"; + + echo "\n"; + + echo "\n"; + echo "\n"; + echo "\n"; + echo "\n"; + + echo "\n"; + echo "\n"; + echo "\n"; + echo "\n"; + + echo "\n"; + echo "\n"; + echo "\n"; + echo "\n"; + + echo "\n"; + echo "\n"; + echo "\n"; + echo "\n"; + + echo "\n"; + echo "\n"; + echo "\n"; + echo "\n"; + + echo "
\n"; + echo " ".$text['label-import_data']."\n"; + echo "\n"; + echo " \n"; + echo "
\n"; + echo $text['description-import_data']."\n"; + echo "
\n"; + echo " ".$text['label-from_row']."\n"; + echo "\n"; + echo " \n"; + echo "
\n"; + echo $text['description-from_row']."\n"; + echo "
\n"; + echo " ".$text['label-import_delimiter']."\n"; + echo "\n"; + echo " \n"; + echo "
\n"; + echo $text['description-import_delimiter']."\n"; + echo "
\n"; + echo " ".$text['label-import_enclosure']."\n"; + echo "\n"; + echo " \n"; + echo "
\n"; + echo $text['description-import_enclosure']."\n"; + echo "
\n"; + echo " ".$text['label-import_file_upload']."\n"; + echo "\n"; + echo " \n"; + echo "
\n"; + echo "
\n"; + echo "
\n"; + echo "
\n"; + + echo "\n"; + echo "\n"; + + echo "
"; + +//include the footer + require_once "resources/footer.php"; + +?>