mirror of
https://github.com/librenms/librenms.git
synced 2024-10-07 16:52:45 +00:00
Security fix: unauthorized access (#10091)
* Security fix: unauthorized access Affects nginx users: Moved php files outside of public html directory (Apache was protected by .htaccess) Affects all users: Some files did not check for authentication and could disclose some info. Better checks before including files from user input * git mv html/includes/ includes/html git mv html/pages/ includes/html/
This commit is contained in:
Tony Murray
GitHub
396
includes/html/modal/alert_schedule.inc.php
Normal file
396
includes/html/modal/alert_schedule.inc.php
Normal file
@@ -0,0 +1,396 @@
|
||||
<?php
|
||||
|
||||
/*
|
||||
* LibreNMS
|
||||
*
|
||||
* Copyright (c) 2014 Neil Lathwood <https://github.com/laf/ http://www.lathwood.co.uk/fa>
|
||||
*
|
||||
* This program is free software: you can redistribute it and/or modify it
|
||||
* under the terms of the GNU General Public License as published by the
|
||||
* Free Software Foundation, either version 3 of the License, or (at your
|
||||
* option) any later version. Please see LICENSE.txt at the top level of
|
||||
* the source code distribution for details.
|
||||
*/
|
||||
|
||||
if (\Auth::user()->hasGlobalAdmin()) {
|
||||
?>
|
||||
|
||||
<div class="modal fade bs-example-modal-sm" id="schedule-maintenance" tabindex="-1" role="dialog" aria-labelledby="Create" aria-hidden="true">
|
||||
<div class="modal-dialog">
|
||||
<div class="modal-content">
|
||||
<div class="modal-header">
|
||||
<button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
|
||||
<h5 class="modal-title" id="Create">Create maintenance</h5>
|
||||
</div>
|
||||
<div class="modal-body">
|
||||
<form method="post" role="form" id="sched-form" class="form-horizontal schedule-maintenance-form">
|
||||
<input type="hidden" name="schedule_id" id="schedule_id">
|
||||
<input type="hidden" name="type" id="type" value="schedule-maintenance">
|
||||
<input type="hidden" name="sub_type" id="sub_type" value="new-maintenance">
|
||||
<div class="row">
|
||||
<div class="col-md-12">
|
||||
<span id="response"></span>
|
||||
</div>
|
||||
</div>
|
||||
<div class="form-group">
|
||||
<label for="title" class="col-sm-4 control-label">Title <exp>*</exp>: </label>
|
||||
<div class="col-sm-8">
|
||||
<input type="text" class="form-control" id="title" name="title" placeholder="Maintenance title">
|
||||
</div>
|
||||
</div>
|
||||
<div class="form-group">
|
||||
<label for="notes" class="col-sm-4 control-label">Notes: </label>
|
||||
<div class="col-sm-8">
|
||||
<textarea class="form-control" id="notes" name="notes" placeholder="Maintenance notes"></textarea>
|
||||
</div>
|
||||
</div>
|
||||
<div class="form-group">
|
||||
<label for="recurring" class="col-sm-4 control-label">Recurring <strong class="text-danger">*</strong>: </label>
|
||||
<div class="col-sm-8">
|
||||
<label class="radio-inline">
|
||||
<input type="radio" id="recurring0" name="recurring" value="0" checked="checked"/> No
|
||||
</label>
|
||||
<label class="radio-inline">
|
||||
<input type="radio" id="recurring1" name="recurring" value="1"/> Yes
|
||||
</label>
|
||||
</div>
|
||||
</div>
|
||||
<div id="norecurringgroup">
|
||||
<div class="form-group">
|
||||
<label for="start" class="col-sm-4 control-label">Start <exp>*</exp>: </label>
|
||||
<div class="col-sm-8">
|
||||
<input type="text" class="form-control date" id="start" name="start" value="" data-date-format="YYYY-MM-DD HH:mm">
|
||||
</div>
|
||||
</div>
|
||||
<div class="form-group">
|
||||
<label for="end" class="col-sm-4 control-label">End <exp>*</exp>: </label>
|
||||
<div class="col-sm-8">
|
||||
<input type="text" class="form-control date" id="end" name="end" value="" data-date-format="YYYY-MM-DD HH:mm">
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div id="recurringgroup" style="display:none;">
|
||||
<div class="form-group">
|
||||
<label for="start_recurring_dt" class="col-sm-4 control-label">Start date <exp>*</exp>: </label>
|
||||
<div class="col-sm-8">
|
||||
<input type="text" class="form-control date" id="start_recurring_dt" name="start_recurring_dt" value="" data-date-format="YYYY-MM-DD">
|
||||
</div>
|
||||
</div>
|
||||
<div class="form-group">
|
||||
<label for="end_recurring_dt" class="col-sm-4 control-label">End date: </label>
|
||||
<div class="col-sm-8">
|
||||
<input type="text" class="form-control date" id="end_recurring_dt" name="end_recurring_dt" value="" data-date-format="YYYY-MM-DD">
|
||||
</div>
|
||||
</div>
|
||||
<div class="form-group">
|
||||
<label for="start_recurring_hr" class="col-sm-4 control-label">Start hour <exp>*</exp>: </label>
|
||||
<div class="col-sm-8">
|
||||
<input type="text" class="form-control date" id="start_recurring_hr" name="start_recurring_hr" value="" data-date-format="HH:mm">
|
||||
</div>
|
||||
</div>
|
||||
<div class="form-group">
|
||||
<label for="end_recurring_hr" class="col-sm-4 control-label">End hour <exp>*</exp>: </label>
|
||||
<div class="col-sm-8">
|
||||
<input type="text" class="form-control date" id="end_recurring_hr" name="end_recurring_hr" value="" data-date-format="HH:mm">
|
||||
</div>
|
||||
</div>
|
||||
<div class="form-group">
|
||||
<label for="recurring_day" class="col-sm-4 control-label">Only on weekday: </label>
|
||||
<div class="col-sm-8">
|
||||
<div style="float: left;"><label><input type="checkbox" style="width: 20px;" class="form-control" id="recurring_day" name="recurring_day[]" value="1" />Mo</label></div>
|
||||
<div style="float: left;padding-left: 20px;"><label><input type="checkbox" style="width: 20px;" class="form-control" id="recurring_day" name="recurring_day[]" value="2" />Tu</label></div>
|
||||
<div style="float: left;padding-left: 20px;"><label><input type="checkbox" style="width: 20px;" class="form-control" id="recurring_day" name="recurring_day[]" value="3" />We</label></div>
|
||||
<div style="float: left;padding-left: 20px;"><label><input type="checkbox" style="width: 20px;" class="form-control" id="recurring_day" name="recurring_day[]" value="4" />Th</label></div>
|
||||
<div style="float: left;padding-left: 20px;"><label><input type="checkbox" style="width: 20px;" class="form-control" id="recurring_day" name="recurring_day[]" value="5" />Fr</label></div>
|
||||
<div style="float: left;padding-left: 20px;"><label><input type="checkbox" style="width: 20px;" class="form-control" id="recurring_day" name="recurring_day[]" value="6" />Sa</label></div>
|
||||
<div style="float: left;padding-left: 20px;"><label><input type="checkbox" style="width: 20px;" class="form-control" id="recurring_day" name="recurring_day[]" value="0" />Su</label></div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div class="form-group">
|
||||
<label for='maps' class='col-sm-4 control-label'>Map To <exp>*</exp>: </label>
|
||||
<div class="col-sm-8">
|
||||
<select id="maps" name="maps[]" class="form-control" multiple="multiple"></select>
|
||||
</div>
|
||||
</div>
|
||||
<div class="form-group">
|
||||
<div class="col-sm-offset-3 col-sm-3">
|
||||
<button class="btn btn-success" type="submit" name="sched-submit" id="sched-submit" value="save">Schedule maintenance</button>
|
||||
</div>
|
||||
</div>
|
||||
</form>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<script>
|
||||
$('#schedule-maintenance').on('hide.bs.modal', function (event) {
|
||||
$('#maps').val(null).trigger('change');
|
||||
$('#schedule_id').val('');
|
||||
$('#title').val('');
|
||||
$('#notes').val('');
|
||||
$('#recurring').val('');
|
||||
$('#start').val(moment().format('YYYY-MM-DD HH:mm')).data("DateTimePicker").maxDate(false).minDate(moment());
|
||||
$('#end').val(moment().add(1, 'hour').format('YYYY-MM-DD HH:mm')).data("DateTimePicker").maxDate(false).minDate(moment());
|
||||
var $startRecurringDt = $('#start_recurring_dt');
|
||||
$startRecurringDt.val('').data("DateTimePicker").maxDate(false).minDate(moment());
|
||||
var $endRecurringDt = $('#end_recurring_dt');
|
||||
$endRecurringDt.data("DateTimePicker").date(moment()).maxDate(false).minDate(moment());
|
||||
$endRecurringDt.val('');
|
||||
$startRecurringDt.data("DateTimePicker").maxDate(false);
|
||||
|
||||
$('#start_recurring_hr').val('').data("DateTimePicker").minDate(false).maxDate(false);
|
||||
$('#end_recurring_hr').val('').data("DateTimePicker").minDate(false).maxDate(false);
|
||||
$("#recurring0").prop("checked", true);
|
||||
$('#recurring_day').prop('checked', false);
|
||||
$('#norecurringgroup').show();
|
||||
$('#recurringgroup').hide();
|
||||
$('#schedulemodal-alert').remove();
|
||||
});
|
||||
|
||||
$('#schedule-maintenance').on('show.bs.modal', function (event) {
|
||||
var schedule_id = $('#schedule_id').val();
|
||||
if (schedule_id > 0) {
|
||||
$.ajax({
|
||||
type: "POST",
|
||||
url: "ajax_form.php",
|
||||
data: { type: "schedule-maintenance", sub_type: "parse-maintenance", schedule_id: schedule_id },
|
||||
dataType: "json",
|
||||
success: function(output) {
|
||||
var maps = $('#maps');
|
||||
var selected = [];
|
||||
$.each ( output['targets'], function( key, item ) {
|
||||
// create options if they don't exist
|
||||
if (maps.find("option[value='" + item.id + "']").length === 0) {
|
||||
var newOption = new Option(item.text, item.id, true, true);
|
||||
maps.append(newOption);
|
||||
}
|
||||
selected.push(item.id);
|
||||
});
|
||||
maps.val(selected).trigger('change');
|
||||
|
||||
$('#title').val(output['title']);
|
||||
$('#notes').val(output['notes']);
|
||||
if (output['recurring'] == 0){
|
||||
var start = $('#start').data("DateTimePicker");
|
||||
if (output['start']) {
|
||||
start.minDate(output['start']);
|
||||
}
|
||||
start.date(output['start']);
|
||||
$('#end').data("DateTimePicker").date(output['end']);
|
||||
|
||||
$('#norecurringgroup').show();
|
||||
$('#recurringgroup').hide();
|
||||
|
||||
$('#start_recurring_dt').val('');
|
||||
$('#end_recurring_dt').val('');
|
||||
$('#start_recurring_hr').val('');
|
||||
$('#end_recurring_hr').val('');
|
||||
$("#recurring0").prop("checked", true);
|
||||
$('#recurring_day').prop('checked', false);
|
||||
}else{
|
||||
var start_recurring_dt = $('#start_recurring_dt').data("DateTimePicker");
|
||||
if (output['start_recurring_dt']) {
|
||||
start_recurring_dt.minDate(output['start_recurring_dt']);
|
||||
}
|
||||
start_recurring_dt.date(output['start_recurring_dt']);
|
||||
$('#end_recurring_dt').data("DateTimePicker").date(output['end_recurring_dt']);
|
||||
|
||||
var start_recurring_hr = $('#start_recurring_hr').data("DateTimePicker");
|
||||
if (output['start_recurring_dt']) {
|
||||
start_recurring_dt.minDate(output['start_recurring_dt']);
|
||||
}
|
||||
start_recurring_hr.date(output['start_recurring_hr']);
|
||||
$('#end_recurring_hr').data("DateTimePicker").date(output['end_recurring_hr']);
|
||||
|
||||
$("#recurring1").prop("checked", true);
|
||||
|
||||
var recdayupd = output['recurring_day'];
|
||||
if (recdayupd){
|
||||
var arrayrecdayupd = recdayupd.split(',');
|
||||
$.each(arrayrecdayupd, function(indexcheckedday, checkedday){
|
||||
$("input[name='recurring_day[]'][value="+checkedday+"]").prop('checked', true);
|
||||
});
|
||||
}else{
|
||||
$('#recurring_day').prop('checked', false);
|
||||
}
|
||||
|
||||
$('#norecurringgroup').hide();
|
||||
$('#recurringgroup').show();
|
||||
|
||||
$('#start').val('');
|
||||
$('#end').val('');
|
||||
}
|
||||
|
||||
}
|
||||
});
|
||||
}
|
||||
});
|
||||
|
||||
$('#sched-form input[name=recurring]').on('change', function() {
|
||||
var isrecurring = $('input[name=recurring]:checked', '#sched-form').val();
|
||||
if (isrecurring == 1){
|
||||
$('#norecurringgroup').hide();
|
||||
$('#recurringgroup').show();
|
||||
}else{
|
||||
$('#norecurringgroup').show();
|
||||
$('#recurringgroup').hide();
|
||||
}
|
||||
});
|
||||
|
||||
|
||||
$('#sched-submit').click('', function(e) {
|
||||
e.preventDefault();
|
||||
$.ajax({
|
||||
type: "POST",
|
||||
url: "ajax_form.php",
|
||||
data: $('form.schedule-maintenance-form').serialize(),
|
||||
dataType: "json",
|
||||
success: function(data){
|
||||
if(data.status == 'ok') {
|
||||
$("#message").html('<div id="schedulemsg" class="alert alert-info"><button type="button" class="close" data-dismiss="alert" aria-label="Close"><span aria-hidden="true">×</span></button>'+data.message+'</div>');
|
||||
window.setTimeout(function() { $('#schedulemsg').fadeOut().slideUp(); } , 5000);
|
||||
$("#schedule-maintenance").modal('hide');
|
||||
$("#schedulemodal-alert").remove();
|
||||
$("#alert-schedule").bootgrid('reload');
|
||||
} else {
|
||||
$("#response").html('<div id="schedulemodal-alert" class="alert alert-danger">'+data.message+'</div>');
|
||||
}
|
||||
},
|
||||
error: function(){
|
||||
$("#response").html('<div id="schedulemodal-alert" class="alert alert-danger">An error occurred.</div>');
|
||||
}
|
||||
});
|
||||
});
|
||||
|
||||
$("#maps").select2({
|
||||
width: '100%',
|
||||
placeholder: "Devices or Groups",
|
||||
ajax: {
|
||||
url: 'ajax_list.php',
|
||||
delay: 250,
|
||||
data: function (params) {
|
||||
return {
|
||||
type: 'devices_groups',
|
||||
search: params.term
|
||||
};
|
||||
}
|
||||
}
|
||||
});
|
||||
|
||||
$(function () {
|
||||
$("#start").datetimepicker({
|
||||
defaultDate: moment(),
|
||||
minDate: moment().format('YYYY-MM-DD'),
|
||||
icons: {
|
||||
time: 'fa fa-clock-o',
|
||||
date: 'fa fa-calendar',
|
||||
up: 'fa fa-chevron-up',
|
||||
down: 'fa fa-chevron-down',
|
||||
previous: 'fa fa-chevron-left',
|
||||
next: 'fa fa-chevron-right',
|
||||
today: 'fa fa-calendar-check-o',
|
||||
clear: 'fa fa-trash-o',
|
||||
close: 'fa fa-close'
|
||||
}
|
||||
});
|
||||
$("#end").datetimepicker({
|
||||
defaultDate: moment().add(1, 'hour'),
|
||||
minDate: moment().format('YYYY-MM-DD'),
|
||||
icons: {
|
||||
time: 'fa fa-clock-o',
|
||||
date: 'fa fa-calendar',
|
||||
up: 'fa fa-chevron-up',
|
||||
down: 'fa fa-chevron-down',
|
||||
previous: 'fa fa-chevron-left',
|
||||
next: 'fa fa-chevron-right',
|
||||
today: 'fa fa-calendar-check-o',
|
||||
clear: 'fa fa-trash-o',
|
||||
close: 'fa fa-close'
|
||||
}
|
||||
});
|
||||
$("#start").on("dp.change", function (e) {
|
||||
$("#end").data("DateTimePicker").minDate(e.date);
|
||||
});
|
||||
$("#end").on("dp.change", function (e) {
|
||||
$("#start").data("DateTimePicker").maxDate(e.date);
|
||||
});
|
||||
$("#start_recurring_dt").datetimepicker({
|
||||
defaultDate: moment(),
|
||||
minDate: moment().format('YYYY-MM-DD'),
|
||||
icons: {
|
||||
time: 'fa fa-clock-o',
|
||||
date: 'fa fa-calendar',
|
||||
up: 'fa fa-chevron-up',
|
||||
down: 'fa fa-chevron-down',
|
||||
previous: 'fa fa-chevron-left',
|
||||
next: 'fa fa-chevron-right',
|
||||
today: 'fa fa-calendar-check-o',
|
||||
clear: 'fa fa-trash-o',
|
||||
close: 'fa fa-close'
|
||||
}
|
||||
});
|
||||
$("#end_recurring_dt").datetimepicker({
|
||||
minDate: moment().format('YYYY-MM-DD'),
|
||||
icons: {
|
||||
time: 'fa fa-clock-o',
|
||||
date: 'fa fa-calendar',
|
||||
up: 'fa fa-chevron-up',
|
||||
down: 'fa fa-chevron-down',
|
||||
previous: 'fa fa-chevron-left',
|
||||
next: 'fa fa-chevron-right',
|
||||
today: 'fa fa-calendar-check-o',
|
||||
clear: 'fa fa-trash-o',
|
||||
close: 'fa fa-close'
|
||||
}
|
||||
});
|
||||
$("#start_recurring_dt").on("dp.change", function (e) {
|
||||
var $endRecurringDt = $("#end_recurring_dt");
|
||||
var val = $endRecurringDt.val();
|
||||
$endRecurringDt.data("DateTimePicker").minDate(e.date);
|
||||
// work around annoying event interaction
|
||||
if (!val) {
|
||||
$endRecurringDt.val('');
|
||||
$("#start_recurring_dt").data("DateTimePicker").maxDate(false);
|
||||
}
|
||||
});
|
||||
$("#end_recurring_dt").on("dp.change", function (e) {
|
||||
$("#start_recurring_dt").data("DateTimePicker").maxDate(e.date);
|
||||
});
|
||||
$("#start_recurring_hr").datetimepicker({
|
||||
icons: {
|
||||
time: 'fa fa-clock-o',
|
||||
date: 'fa fa-calendar',
|
||||
up: 'fa fa-chevron-up',
|
||||
down: 'fa fa-chevron-down',
|
||||
previous: 'fa fa-chevron-left',
|
||||
next: 'fa fa-chevron-right',
|
||||
today: 'fa fa-calendar-check-o',
|
||||
clear: 'fa fa-trash-o',
|
||||
close: 'fa fa-close'
|
||||
}
|
||||
});
|
||||
$("#end_recurring_hr").datetimepicker({
|
||||
icons: {
|
||||
time: 'fa fa-clock-o',
|
||||
date: 'fa fa-calendar',
|
||||
up: 'fa fa-chevron-up',
|
||||
down: 'fa fa-chevron-down',
|
||||
previous: 'fa fa-chevron-left',
|
||||
next: 'fa fa-chevron-right',
|
||||
today: 'fa fa-calendar-check-o',
|
||||
clear: 'fa fa-trash-o',
|
||||
close: 'fa fa-close'
|
||||
}
|
||||
});
|
||||
$("#start_recurring_hr").on("dp.change", function (e) {
|
||||
$("#end_recurring_hr").data("DateTimePicker").minDate(e.date);
|
||||
});
|
||||
$("#end_recurring_hr").on("dp.change", function (e) {
|
||||
$("#start_recurring_hr").data("DateTimePicker").maxDate(e.date);
|
||||
});
|
||||
});
|
||||
|
||||
</script>
|
||||
<?php
|
||||
}
|
||||
Reference in New Issue
Block a user