302 lines
14 KiB
PHP
302 lines
14 KiB
PHP
<?php
|
|
/*
|
|
BSD-2-Clause License
|
|
Copyright (C) 2022-2023 Mark J Crane <markjcrane@fusionpbx.com>
|
|
|
|
Redistribution and use in source and binary forms, with or without
|
|
modification, are permitted provided that the following conditions are met:
|
|
1. Redistributions of source code must retain the above copyright notice,
|
|
this list of conditions and the following disclaimer.
|
|
2. Redistributions in binary form must reproduce the above copyright
|
|
notice, this list of conditions and the following disclaimer in the
|
|
documentation and/or other materials provided with the distribution.
|
|
|
|
THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
|
|
INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
|
|
AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
|
|
AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
|
|
OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
|
SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
|
|
INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
|
|
CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
|
ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
|
|
POSSIBILITY OF SUCH DAMAGE.
|
|
*/
|
|
|
|
//includes files
|
|
require_once dirname(__DIR__, 2) . "/resources/require.php";
|
|
require_once "resources/check_auth.php";
|
|
require_once "resources/paging.php";
|
|
|
|
//check permissions
|
|
if (permission_exists('event_guard_log_view')) {
|
|
//access granted
|
|
}
|
|
else {
|
|
echo "access denied";
|
|
exit;
|
|
}
|
|
|
|
//add multi-lingual support
|
|
$language = new text;
|
|
$text = $language->get();
|
|
|
|
//get the http post data
|
|
if (!empty($_POST['event_guard_logs']) && is_array($_POST['event_guard_logs'])) {
|
|
$action = $_POST['action'];
|
|
$search = $_POST['search'];
|
|
$event_guard_logs = $_POST['event_guard_logs'];
|
|
}
|
|
|
|
//process the http post data by action
|
|
if (!empty($action) && !empty($event_guard_logs) && is_array($event_guard_logs) && @sizeof($event_guard_logs) != 0) {
|
|
|
|
switch ($action) {
|
|
case 'copy':
|
|
if (permission_exists('event_guard_log_add')) {
|
|
$obj = new event_guard;
|
|
$obj->copy($event_guard_logs);
|
|
}
|
|
break;
|
|
case 'toggle':
|
|
//if (permission_exists('event_guard_log_edit')) {
|
|
// $obj = new event_guard;
|
|
// $obj->toggle($event_guard_logs);
|
|
//}
|
|
//break;
|
|
case 'delete':
|
|
if (permission_exists('event_guard_log_delete')) {
|
|
$obj = new event_guard;
|
|
$obj->unblock($event_guard_logs);
|
|
}
|
|
break;
|
|
}
|
|
|
|
//redirect the user
|
|
header('Location: event_guard_logs.php'.($search != '' ? '?search='.urlencode($search) : null));
|
|
exit;
|
|
}
|
|
|
|
//get order and order by
|
|
$order_by = $_GET["order_by"] ?? null;
|
|
$order = $_GET["order"] ?? null;
|
|
|
|
//add the search
|
|
if (!empty($_GET["search"])) {
|
|
$search = $_GET["search"];
|
|
}
|
|
|
|
//get the count
|
|
$sql = "select count(event_guard_log_uuid) ";
|
|
$sql .= "from v_event_guard_logs ";
|
|
$sql .= "where true ";
|
|
if (isset($search)) {
|
|
$sql .= "and (";
|
|
$sql .= " lower(hostname) like :search ";
|
|
$sql .= " or filter like :search ";
|
|
$sql .= " or ip_address like :search ";
|
|
$sql .= " or extension like :search ";
|
|
$sql .= " or lower(user_agent) like :search ";
|
|
$sql .= " or lower(log_status) like :search ";
|
|
$sql .= ") ";
|
|
$parameters['search'] = '%'.strtolower($search).'%';
|
|
}
|
|
if (isset($_GET["filter"]) && $_GET["filter"] != '') {
|
|
$sql .= "and filter = :filter ";
|
|
$parameters['filter'] = $_GET["filter"];
|
|
}
|
|
$database = new database;
|
|
$num_rows = $database->select($sql, $parameters ?? null, 'column');
|
|
unset($sql, $parameters);
|
|
|
|
//prepare to page the results
|
|
$rows_per_page = ($_SESSION['domain']['paging']['numeric'] != '') ? $_SESSION['domain']['paging']['numeric'] : 50;
|
|
$param = !empty($search) ? "&search=".$search : null;
|
|
$page = !empty($_GET['page']) && is_numeric($_GET['page']) ? $_GET['page'] : 0;
|
|
list($paging_controls, $rows_per_page) = paging($num_rows, $param, $rows_per_page);
|
|
list($paging_controls_mini, $rows_per_page) = paging($num_rows, $param, $rows_per_page, true);
|
|
$offset = $rows_per_page * $page;
|
|
|
|
//set the time zone
|
|
if (isset($_SESSION['domain']['time_zone']['name'])) {
|
|
$time_zone = $_SESSION['domain']['time_zone']['name'];
|
|
}
|
|
else {
|
|
$time_zone = date_default_timezone_get();
|
|
}
|
|
$parameters['time_zone'] = $time_zone;
|
|
|
|
//get the list
|
|
$sql = "select ";
|
|
$sql .= "event_guard_log_uuid, ";
|
|
$sql .= "hostname, ";
|
|
$sql .= "log_date, ";
|
|
$sql .= "to_char(timezone(:time_zone, log_date), 'DD Mon YYYY') as log_date_formatted, \n";
|
|
$sql .= "to_char(timezone(:time_zone, log_date), 'HH12:MI:SS am') as log_time_formatted, \n";
|
|
$sql .= "filter, ";
|
|
$sql .= "ip_address, ";
|
|
$sql .= "extension, ";
|
|
$sql .= "user_agent, ";
|
|
$sql .= "log_status ";
|
|
$sql .= "from v_event_guard_logs ";
|
|
$sql .= "where true ";
|
|
if (!empty($search)) {
|
|
$sql .= "and (";
|
|
$sql .= " lower(hostname) like :search ";
|
|
$sql .= " or filter like :search ";
|
|
$sql .= " or ip_address like :search ";
|
|
$sql .= " or extension like :search ";
|
|
$sql .= " or lower(user_agent) like :search ";
|
|
$sql .= " or lower(log_status) like :search ";
|
|
$sql .= ") ";
|
|
$parameters['search'] = '%'.strtolower($search).'%';
|
|
}
|
|
if (!empty($_GET["filter"])) {
|
|
$sql .= "and filter = :filter ";
|
|
$parameters['filter'] = $_GET["filter"];
|
|
}
|
|
$sql .= order_by($order_by, $order, 'log_date', 'desc');
|
|
$sql .= limit_offset($rows_per_page, $offset);
|
|
$database = new database;
|
|
$event_guard_logs = $database->select($sql, $parameters ?? null, 'all');
|
|
unset($sql, $parameters);
|
|
|
|
//create token
|
|
$object = new token;
|
|
$token = $object->create($_SERVER['PHP_SELF']);
|
|
|
|
//additional includes
|
|
$document['title'] = $text['title-event_guard_logs'];
|
|
require_once "resources/header.php";
|
|
|
|
//show the content
|
|
echo "<div class='action_bar' id='action_bar'>\n";
|
|
echo " <div class='heading'><b>".$text['title-event_guard_logs']."</b><div class='count'>".number_format($num_rows)."</div></div>\n";
|
|
echo " <div class='actions'>\n";
|
|
if (permission_exists('event_guard_log_add')) {
|
|
echo button::create(['type'=>'button','label'=>$text['button-add'],'icon'=>$_SESSION['theme']['button_icon_add'],'id'=>'btn_add','name'=>'btn_add','link'=>'event_guard_log_edit.php']);
|
|
}
|
|
if (permission_exists('event_guard_log_add') && $event_guard_logs) {
|
|
echo button::create(['type'=>'button','label'=>$text['button-copy'],'icon'=>$_SESSION['theme']['button_icon_copy'],'id'=>'btn_copy','name'=>'btn_copy','style'=>'display:none;','onclick'=>"modal_open('modal-copy','btn_copy');"]);
|
|
}
|
|
//if (permission_exists('event_guard_log_edit') && $event_guard_logs) {
|
|
// echo button::create(['type'=>'button','label'=>$text['button-toggle'],'icon'=>$_SESSION['theme']['button_icon_toggle'],'id'=>'btn_toggle','name'=>'btn_toggle','style'=>'display:none;','onclick'=>"modal_open('modal-toggle','btn_toggle');"]);
|
|
//}
|
|
if (permission_exists('event_guard_log_delete') && $event_guard_logs) {
|
|
echo button::create(['type'=>'button','label'=>$text['button-unblock'],'icon'=>$_SESSION['theme']['button_icon_delete'],'id'=>'btn_delete','name'=>'btn_delete','style'=>'display:none;','onclick'=>"modal_open('modal-delete','btn_delete');"]);
|
|
}
|
|
echo "<form id='form_search' class='inline' method='get'>\n";
|
|
echo " <select class='formfld' name='filter'>\n";
|
|
echo " <option value='' selected='selected' disabled='disabled'>".$text['label-filter']."...</option>";
|
|
echo " <option value=''>".$text['label-all']."</option>\n";
|
|
echo " <option value='sip-auth-ip' ".(isset($_GET["filter"]) && $_GET["filter"] == "sip-auth-ip" ? "selected='selected'" : null).">".$text['option-ip']."</option>\n";
|
|
echo " <option value='sip-auth-fail' ".(isset($_GET["filter"]) && $_GET["filter"] == "sip-auth-fail" ? "selected='selected'" : null).">".$text['option-authentication']."</option>\n";
|
|
echo " </select>\n";
|
|
echo "<input type='text' class='txt list-search' name='search' id='search' value=\"".escape($search ?? '')."\" placeholder=\"".$text['label-search']."\" onkeydown='list_search_reset();'>";
|
|
echo button::create(['label'=>$text['button-search'],'icon'=>$_SESSION['theme']['button_icon_search'],'type'=>'submit','id'=>'btn_search','style'=>(!empty($search) ? 'display: none;' : null)]);
|
|
echo button::create(['label'=>$text['button-reset'],'icon'=>$_SESSION['theme']['button_icon_reset'],'type'=>'button','id'=>'btn_reset','link'=>'event_guard_logs.php','style'=>(empty($search) ? 'display: none;' : null)]);
|
|
if ($paging_controls_mini != '') {
|
|
echo "<span style='margin-left: 15px;'>".$paging_controls_mini."</span>\n";
|
|
}
|
|
echo " </form>\n";
|
|
echo " </div>\n";
|
|
echo " <div style='clear: both;'></div>\n";
|
|
echo "</div>\n";
|
|
|
|
if (permission_exists('event_guard_log_add') && $event_guard_logs) {
|
|
echo modal::create(['id'=>'modal-copy','type'=>'copy','actions'=>button::create(['type'=>'button','label'=>$text['button-continue'],'icon'=>'check','id'=>'btn_copy','style'=>'float: right; margin-left: 15px;','collapse'=>'never','onclick'=>"modal_close(); list_action_set('copy'); list_form_submit('form_list');"])]);
|
|
}
|
|
if (permission_exists('event_guard_log_edit') && $event_guard_logs) {
|
|
echo modal::create(['id'=>'modal-toggle','type'=>'toggle','actions'=>button::create(['type'=>'button','label'=>$text['button-continue'],'icon'=>'check','id'=>'btn_toggle','style'=>'float: right; margin-left: 15px;','collapse'=>'never','onclick'=>"modal_close(); list_action_set('toggle'); list_form_submit('form_list');"])]);
|
|
}
|
|
if (permission_exists('event_guard_log_delete') && $event_guard_logs) {
|
|
echo modal::create(['id'=>'modal-delete','type'=>'delete','actions'=>button::create(['type'=>'button','label'=>$text['button-continue'],'icon'=>'check','id'=>'btn_delete','style'=>'float: right; margin-left: 15px;','collapse'=>'never','onclick'=>"modal_close(); list_action_set('delete'); list_form_submit('form_list');"])]);
|
|
}
|
|
|
|
echo $text['title_description-event_guard_logs']."\n";
|
|
echo "<br /><br />\n";
|
|
|
|
echo "<form id='form_list' method='post'>\n";
|
|
echo "<input type='hidden' id='action' name='action' value=''>\n";
|
|
echo "<input type='hidden' name='search' value=\"".escape($search ?? '')."\">\n";
|
|
|
|
echo "<div class='card'>\n";
|
|
echo "<table class='list'>\n";
|
|
echo "<tr class='list-header'>\n";
|
|
if (permission_exists('event_guard_log_add') || permission_exists('event_guard_log_edit') || permission_exists('event_guard_log_delete')) {
|
|
echo " <th class='checkbox'>\n";
|
|
echo " <input type='checkbox' id='checkbox_all' name='checkbox_all' onclick='list_all_toggle(); checkbox_on_change(this);' ".(empty($event_guard_logs) ? "style='visibility: hidden;'" : null).">\n";
|
|
echo " </th>\n";
|
|
}
|
|
echo "<th class='hide-md-dn'>".$text['label-hostname']."</th>\n";
|
|
echo "<th>".$text['label-date']."</th>\n";
|
|
echo "<th class='hide-md-dn'>".$text['label-time']."</th>\n";
|
|
echo th_order_by('filter', $text['label-filter'], $order_by, $order, null, "style='text-align: center;'");
|
|
echo th_order_by('ip_address', $text['label-ip_address'], $order_by, $order);
|
|
echo th_order_by('extension', $text['label-extension'], $order_by, $order);
|
|
echo "<th class='hide-md-dn'>".$text['label-user_agent']."</th>\n";
|
|
echo th_order_by('log_status', $text['label-log_status'], $order_by, $order);
|
|
if (permission_exists('event_guard_log_edit') && !empty($_SESSION['theme']['list_row_edit_button']['boolean']) && $_SESSION['theme']['list_row_edit_button']['boolean'] == 'true') {
|
|
echo " <td class='action-button'> </td>\n";
|
|
}
|
|
echo "</tr>\n";
|
|
|
|
if (is_array($event_guard_logs) && @sizeof($event_guard_logs) != 0) {
|
|
$x = 0;
|
|
foreach ($event_guard_logs as $row) {
|
|
$list_row_url = '';
|
|
if (permission_exists('event_guard_log_edit')) {
|
|
$list_row_url = "event_guard_log_edit.php?id=".urlencode($row['event_guard_log_uuid']);
|
|
if ($row['domain_uuid'] != $_SESSION['domain_uuid'] && permission_exists('domain_select')) {
|
|
$list_row_url .= '&domain_uuid='.urlencode($row['domain_uuid']).'&domain_change=true';
|
|
}
|
|
}
|
|
echo "<tr class='list-row'>\n";
|
|
if (permission_exists('event_guard_log_add') || permission_exists('event_guard_log_edit') || permission_exists('event_guard_log_delete')) {
|
|
echo " <td class='checkbox'>\n";
|
|
echo " <input type='checkbox' name='event_guard_logs[$x][checked]' id='checkbox_".$x."' value='true' onclick=\"checkbox_on_change(this); if (!this.checked) { document.getElementById('checkbox_all').checked = false; }\">\n";
|
|
echo " <input type='hidden' name='event_guard_logs[$x][event_guard_log_uuid]' value='".escape($row['event_guard_log_uuid'])."' />\n";
|
|
echo " </td>\n";
|
|
}
|
|
echo " <td class='hide-md-dn'>\n";
|
|
if (permission_exists('event_guard_log_edit')) {
|
|
echo " <a href='".$list_row_url."' title=\"".$text['button-edit']."\">".escape($row['hostname'])."</a>\n";
|
|
}
|
|
else {
|
|
echo " ".escape($row['hostname']);
|
|
}
|
|
echo " </td>\n";
|
|
echo " <td><a href='".$list_row_url."' title=\"".$text['button-edit']."\">".escape($row['log_date_formatted'])."</a></td>\n";
|
|
echo " <td class='hide-md-dn'><a href='".$list_row_url."' title=\"".$text['button-edit']."\">".escape($row['log_time_formatted'])."</a></td>\n";
|
|
switch($row['filter']) {
|
|
case 'sip-auth-ip': $filter = $text['option-ip']; break;
|
|
case 'sip-auth-fail': $filter = $text['option-authentication']; break;
|
|
}
|
|
echo " <td style='text-align: center;'><a href='".$list_row_url."' title=\"".$text['button-edit']."\">".escape($filter)."</a></td>\n";
|
|
echo " <td><a href=\"https://search.arin.net/rdap/?query=".escape($row['ip_address'])."\" target=\"_blank\">".escape($row['ip_address'])."</a></td>\n";
|
|
echo " <td>".escape($row['extension'])."</td>\n";
|
|
echo " <td class='hide-md-dn'>".escape($row['user_agent'])."</td>\n";
|
|
echo " <td>".escape($text['label-'.$row['log_status']])."</td>\n";
|
|
if (permission_exists('event_guard_log_edit') && !empty($_SESSION['theme']['list_row_edit_button']['boolean']) && $_SESSION['theme']['list_row_edit_button']['boolean'] == 'true') {
|
|
echo " <td class='action-button'>\n";
|
|
echo button::create(['type'=>'button','title'=>$text['button-edit'],'icon'=>$_SESSION['theme']['button_icon_edit'],'link'=>$list_row_url]);
|
|
echo " </td>\n";
|
|
}
|
|
echo "</tr>\n";
|
|
$x++;
|
|
}
|
|
unset($event_guard_logs);
|
|
}
|
|
|
|
echo "</table>\n";
|
|
echo "</div>\n";
|
|
echo "<br />\n";
|
|
echo "<div align='center'>".$paging_controls."</div>\n";
|
|
echo "<input type='hidden' name='".$token['name']."' value='".$token['hash']."'>\n";
|
|
echo "</form>\n";
|
|
|
|
//include the footer
|
|
require_once "resources/footer.php";
|
|
|
|
?>
|