17728 Commits

Author SHA1 Message Date
32f72bc1ab Fix SQL injections in ajax_table.php (#11920)
* Fix SQL injections via searchPhrase parameter

* Fix SQL injections via address parameter

* Fix sort injection

Co-authored-by: Tony Murray <murraytony@gmail.com>
2020-07-10 09:17:09 -05:00
290398bd9b Fix missing doc OpenWRT (#11924) 2020-07-10 08:35:17 -05:00
6e6fde94c3 Fix sql injection (#11923)
in custom oid code

Thanks to loginsoft p.v.t l.t.d india for the report!
Website: https://www.loginsoft.com/
2020-07-10 10:45:39 +02:00
8af976a951 Mult graphs bits spacing (#11907)
* Make Multiport-Bits-Separated graph Description field wider for larger and medium graphs

* Fix Aggregate Graph In/Out Alignment; make Consistent with Interface I/O Alignment

* Remove misplaced slashes

* Align headers...

* Fix Total units

* Fix code climate gripe
2020-07-10 10:45:01 +02:00
8899ad6d5a Initial Release, wireless sensor support for Openwrt (#11768)
* Initial Release, wireless sensor support for Openwrt

* Extend Openwrt support, add more sensors

* Add documentation for Openwrt Wireless Sensor support

* Moved location of Openwrt.md

* Update openwrt.json

Co-authored-by: Tony Murray <murraytony@gmail.com>
2020-07-09 16:13:58 -05:00
0c334f130d Fix users that set a non-array for cors (#11921)
* Fix users that set a non-array for cors
combine two Env util classes

* Used the wrong thing.
2020-07-09 15:03:12 -05:00
a3ae3805d1 Sanitize graph title input (#11919) 2020-07-09 12:48:36 -05:00
98d6fc1ace Fix graphing with generic_v3_multiline_float (#11916)
#11853 introduced a bug which broke graphing (e.g. for the pi-hole app)
2020-07-09 08:29:56 -05:00
d075915a75 Dell included a typo in their sysDescr (#11917)
The latest firmware revision drops the 'T' from COMPELLENT. Maybe it'll come back at some point, but for now it's gone.
2020-07-09 08:27:47 -05:00
f526ba326b Laravel 7.x Shift (#11676)
* Shift bindings

PHP 5.5.9+ adds the new static `class` property which provides the fully qualified class name. This is preferred over using class name strings as these references are checked by the parser.

* Shift core files

* Shift to Throwable

* Shift Laravel dependencies
Add laravel/ui dependency
Use our fork of string-blade-compiler

* Shift config files

Default config files

In an effort to make upgrading the constantly changing config files
easier, Shift defaulted them so you can review the commit diff for
changes. Moving forward, you should use ENV variables or create a
separate config file to allow the core config files to remain
automatically upgradeable.

Restore config header comment

* Remove duplicate named routes

* add basic trust host middleware

* Trusted proxies should be default null

* Fix missed rename

* wip

* Rename routes

* Update trustedproxy.php

* Update Kernel.php

* revert trustedproxy.php

It only accepted '*' and not ['*']

* Fix tests

fake request was causing the error

Co-authored-by: Laravel Shift <shift@laravelshift.com>
Co-authored-by: Tony Murray <murraytony@gmail.com>
2020-07-09 08:22:50 -05:00
e5bb6d80bc Fix settings access (#11915)
normal users could access
2020-07-08 18:04:48 -05:00
a30fcbde0a Support NetMan 204 (#11913)
* Update riello.yaml

Fix NetMan 204 snm cards not always identified as Power bug Generic devices

* Update riello.snmprec
2020-07-08 22:32:22 +02:00
a3cd90da05 newdevice: Added support for Fortinet FortiVoice devices (#11914)
* newdevice: added supprot for Fortinet FortiVoice

* Renamed fortivoice yaml file

* Added test date for FortiVoice OS

* Matching Fortinet to be like FortiSwitch

* Corrected test data...
2020-07-08 17:55:50 +02:00
db7ac390b2 Added check for incorrect ifConnectorPresent truth values, if invalid… (#11634)
* Added check for incorrect ifConnectorPresent truth values, if invalid, save it as false

* Added space after comma line 629

* Update ports.inc.php

Updated per murrant and tested.

* Update ports.inc.php

* Update ports.inc.php

Changed to check if ifConnector is set and if the response is not true or false, set it to null.

* Update ports.inc.php

* Update ports.inc.php

Fixed the codeclimate space issue

* Update test data

* fix differing escapes

* fix ciena-sds eol

* Revert timos.json

Co-authored-by: Tony Murray <murraytony@gmail.com>
2020-07-08 08:44:45 -05:00
560fd71ef6 CORS settings in webui (#11912)
* Change CORS implementation
allows for upstream integration of Laravel 7

* migrate config

* skip implementing patterns for now

* Expose settings to the webui

* Make db settings apply
2020-07-08 07:36:51 -05:00
726a762944 newdevice: Added support for Eltek SmartPack2 Touch (#11909)
* newdevice: Added support for Eltek SmartPack2 Touch

* Remove test data

* Added test data.
2020-07-08 13:41:02 +02:00
e4b2d98222 only try to optimize port polling when it is enable by the global setting. (#11908) 2020-07-06 19:31:45 -05:00
d5e0c6ca57 Add Divisors to Eaton Matrix sensors (#11906)
* Add Divisors to Eaton Matrix sensors

* Fix tests

* Update sensor_limits
2020-07-06 18:14:19 +02:00
465372b28d Correct interface names in response to the SNMP query of cpwVcName (#11851)
* Update cisco-pw.inc.php

To correct Interface names that use escaped '/' e.g. GigabitEthernet0_4_0_12 
and translate the underscore back to a slash - e.g. GigabitEthernet0/4/0/12

* Update cisco-pw.inc.php

* Update cisco-pw.inc.php

* Update cisco-pw.inc.php

* Update cisco-pw.inc.php
2020-07-06 15:59:53 +02:00
23368faa61 Ciena SDS (#11857)
* Added discovery for temp/dbm graphs for LEOS mibs.

* Cleaned up Typo on Index lines for LEOS MIBs

* Cleaned up Typo for LEOS System MIB

* Added CPU Util graphs for LEOS MIBs

* Added test data and a MIB

* Shortened Index fields

* Update ciena-sds.yaml

* Update ciena-sds.json

* Update ciena-sds.yaml

Co-authored-by: Tony Murray <murraytony@gmail.com>
2020-07-06 15:40:43 +02:00
249b343c64 Simplify Chinese lang Translation (#11905)
* Add files via upload

* Create auth.php

* Add files via upload
2020-07-06 11:23:45 +02:00
a82018698e Restore device alert tab 2020-07-05 20:05:30 +01:00
505ab86471 Update italian translation (#11901)
* Update it.json

Removed all  \'/  single quote, very common in italian , to avoid problem on page loading

* Update it.json

small fix
2020-07-05 14:14:51 +02:00
af14b6a73d OS detection for Dell PowerVault MD arrays (#11509)
* OS detection for Dell PowerVault MD arrays

I'm not 100% sure it was worth Dell implementing SNMP - the array
exposes 6 OID's outside of MIBII, and we poll both the useful ones.

At least we get an icon.

* Test data

* Remove polling and discovery module filters
2020-07-05 13:49:16 +02:00
8e30541c95 Add support for Aten PE8216 PDU (#11887)
* Add support for Aten PE8216 PDU

* Add support for Aten PE8216 PDU

* Add support for Aten PE8216 PDU

* Revert "Add support for Aten PE8216 PDU"

This reverts commit 5d2f195f282438c0076a37969b331056201a4f80.

* Revert "Add support for Aten PE8216 PDU"

This reverts commit ebfd659775ecda10048b6db03d263c1b87c45b38.

* Fixed integer issue with skip_values

* More integer changes

* Add json file

* Fix yaml file

* Setting modules like that reduces user control

Co-authored-by: Tony Murray <murraytony@gmail.com>
2020-07-05 00:20:12 -05:00
a94f11a911 Add support SNR Memory pool, dBm, voltage, current, fan speed and status (#11888)
* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload
2020-07-04 23:50:28 -05:00
9ca7e91a37 Fix route tests (#11898)
route does not have a poller module
2020-07-04 23:27:20 -05:00
ddab4153bc Modifies find_device_id (#11804)
* modifies find_device_id

* Removed host name validation check for RFC. Some devices and OS allow you
  to set a name that contains characters that are prohibited by the RFC.
  Such devices can be added using their IP address, their sysName will be
  written to the database. If the device is already in the database, then it
  should be possible to find it, even if the name is unacceptable according
  to RFC requirements.
* Additional search options for sysName have been added using the default
  domain. This was needed to improve LLDP detection - a short name was used in
  the PDU, and the full name with the domain was stored in the sysName field
  in the database.

* modifies find_device_id

* reordering checks
* handling situations with duplicate sysName

* modifies find_device_id (fix style errors)
2020-07-04 22:23:11 -05:00
ad6348af42 Add alert rule error on invert map selected but no selection in device, group or location list (#11894)
* error on invert map selected but no selection

* error on invert map selected but no selection

* error on invert map selected but no selection
2020-07-03 11:54:12 +02:00
8a6de3ef23 Bump version to 1.65 1.65 2020-07-03 00:50:46 -05:00
be2d4a2e75 Changelog for 1.65 2020-07-03 00:50:44 -05:00
44549ae63e Show poller settings even if distributed polling is disabled (#11893) 2020-07-03 00:37:37 -05:00
eb74af5756 Fix device up/down sort (#11891) 2020-07-03 00:36:01 -05:00
014928accd Release wording change (#11892) 2020-07-03 00:15:05 -05:00
a312436bca Edit maintenance schedule, handle timezone properly (#11889)
Was not properly formatting to user's timezone
Also handle the case where the browser and server timezone don't match
don't show incorrect values in dialog then pop to the correct ones.
Update title on modal to be appropriate
2020-07-02 17:46:16 -05:00
9c80d0baa7 Remove the last node from the arbor sysObjectId (#11890)
Arbor seem to change the sysObject ID for each variant. There don't seem to be any functional differences, so rather than add the 3 other object ID's I've got, it seems sensible to just trim the objectID.

There don't seem to be any functional differences from the perspective of SNMP.
2020-07-02 21:39:17 +02:00
8a851eda9f Auth AD URL (#11884)
* Missing auth_ad_url

WIP

* add auth_ad_filter

* Pluralize

* Remove Translation, and add translations generation.
2020-07-01 13:23:35 -05:00
98502325db fix devices missing from graph view (#11886)
devices without a location were not showing
2020-07-01 17:47:23 +02:00
dd8844980f Move qnap to yaml discovery + extended discovery (#11882)
* Move qnap to yaml discovery + extended discovery

* Fix pre-cache
2020-07-01 06:53:59 -05:00
5cf5627ff5 Simpler fix for 659325d5d0883efd4806953259c303a8784cfabd (#11883) 2020-06-30 18:36:13 -05:00
d38ce9dbf3 Update FAQ.md 2020-06-30 18:28:11 -05:00
b9f80d32bd Fix unauthenticated graphs (#11879)
broken with security fix
2020-06-30 09:25:01 -05:00
c606659e11 Added support for Integra E radios (#11871)
* Added support for Integra E radios

* Update saf-integra-e.json

* Update saf-integra-e.inc.php

Co-authored-by: Tony Murray <murraytony@gmail.com>
2020-06-30 16:12:00 +02:00
eb7fde70b2 Merge pull request #11880 from Jellyfrog/bug/python34
Python 3.4 is the minimum requirement
2020-06-30 09:09:37 -05:00
2fb1594348 Python 3.4 is the minimum requirement
And not 3.5
2020-06-30 16:01:22 +02:00
b36ab394a8 Merge pull request #11878 from Jellyfrog/bug/security-fixes
Prevent unauthorized access to device graphs
2020-06-30 07:55:35 -05:00
659325d5d0 Prevent unauthorized access to device graphs
Users could access info for the wrong device by piggyback on port permissions
2020-06-30 13:35:45 +02:00
4da411c839 Merge pull request #11764 from karrots/patch-1
Add APC Cooler detection
2020-06-29 23:45:31 -05:00
9fbc3cbb05 Merge branch 'master' into patch-1 2020-06-29 23:28:27 -05:00
bbe4625f8a Merge pull request #11876 from murrant/install-change-all-tabs
Install change all tabs
2020-06-29 22:46:08 -05:00