mirror of
https://github.com/librenms/librenms.git
synced 2024-10-07 16:52:45 +00:00
32a7c50189
* Use Laravel for authentication Support legacy auth methods Always create DB entry for users (segregate by auth method) Port api auth to Laravel restrict poller errors to devices the user has access to Run checks on every page load. But set a 5 minute (configurable) timer. Only run some checks if the user is an admin Move toastr down a few pixels so it isn't as annoying. Fix menu not loaded on laravel pages when twofactor is enabled for the system, but disabled for the user. Add two missing menu entries in the laravel menu Rewrite 2FA code Simplify some and verify code before applying Get http-auth working Handle legacy $_SESSION differently. Allows Auth::once(), etc to work. * Fix tests and mysqli extension check * remove duplicate Toastr messages * Fix new items * Rename 266.sql to 267.sql
313 lines
19 KiB
PHP
313 lines
19 KiB
PHP
<?php
|
|
|
|
/*
|
|
* LibreNMS
|
|
*
|
|
* Copyright (c) 2014 Neil Lathwood <https://github.com/laf/ http://www.lathwood.co.uk/fa>
|
|
*
|
|
* This program is free software: you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License as published by the
|
|
* Free Software Foundation, either version 3 of the License, or (at your
|
|
* option) any later version. Please see LICENSE.txt at the top level of
|
|
* the source code distribution for details.
|
|
*/
|
|
|
|
use LibreNMS\Authentication\LegacyAuth;
|
|
|
|
header('Content-type: application/json');
|
|
|
|
if (!LegacyAuth::user()->hasGlobalAdmin()) {
|
|
$response = array(
|
|
'status' => 'error',
|
|
'message' => 'Need to be admin',
|
|
);
|
|
echo _json_encode($response);
|
|
exit;
|
|
}
|
|
|
|
$action = mres($_POST['action']);
|
|
$config_group = mres($_POST['config_group']);
|
|
$config_sub_group = mres($_POST['config_sub_group']);
|
|
$config_name = mres($_POST['config_name']);
|
|
$config_value = mres($_POST['config_value']);
|
|
$config_extra = mres($_POST['config_extra']);
|
|
$config_room_id = mres($_POST['config_room_id']);
|
|
$config_from = mres($_POST['config_from']);
|
|
$config_userkey = mres($_POST['config_userkey']);
|
|
$config_user = mres($_POST['config_user']);
|
|
$config_to = mres($_POST['config_to']);
|
|
$config_token = mres($_POST['config_token']);
|
|
$status = 'error';
|
|
$message = 'Error with config';
|
|
|
|
if ($action == 'remove' || preg_match('/^remove-.*$/', $action)) {
|
|
$config_id = mres($_POST['config_id']);
|
|
if (empty($config_id)) {
|
|
$message = 'No config id passed';
|
|
} else {
|
|
if (dbDelete('config', '`config_id`=?', array($config_id))) {
|
|
if ($action == 'remove-slack') {
|
|
dbDelete('config', "`config_name` LIKE 'alert.transports.slack.$config_id.%'");
|
|
} elseif ($action == 'remove-discord') {
|
|
dbDelete('config', "`config_name` LIKE 'alert.transports.discord.$config_id.%'");
|
|
} elseif ($action == 'remove-rocket') {
|
|
dbDelete('config', "`config_name` LIKE 'alert.transports.rocket.$config_id.%'");
|
|
} elseif ($action == 'remove-hipchat') {
|
|
dbDelete('config', "`config_name` LIKE 'alert.transports.hipchat.$config_id.%'");
|
|
} elseif ($action == 'remove-pushover') {
|
|
dbDelete('config', "`config_name` LIKE 'alert.transports.pushover.$config_id.%'");
|
|
} elseif ($action == 'remove-boxcar') {
|
|
dbDelete('config', "`config_name` LIKE 'alert.transports.boxcar.$config_id.%'");
|
|
} elseif ($action == 'remove-telegram') {
|
|
dbDelete('config', "`config_name` LIKE 'alert.transports.telegram.$config_id.%'");
|
|
} elseif ($action == 'remove-clickatell') {
|
|
dbDelete('config', "`config_name` LIKE 'alert.transports.clickatell.$config_id.%'");
|
|
} elseif ($action == 'remove-playsms') {
|
|
dbDelete('config', "`config_name` LIKE 'alert.transports.playsms.$config_id.%'");
|
|
} elseif ($action == 'remove-smseagle') {
|
|
dbDelete('config', "`config_name` LIKE 'alert.transports.smseagle.$config_id.%'");
|
|
}
|
|
$status = 'ok';
|
|
$message = 'Config item removed';
|
|
} else {
|
|
$message = 'General error, could not remove config';
|
|
}
|
|
}
|
|
} elseif ($action == 'add-slack') {
|
|
if (empty($config_value)) {
|
|
$message = 'No Slack url provided';
|
|
} else {
|
|
$config_id = dbInsert(array('config_name' => 'alert.transports.slack.', 'config_value' => $config_value, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $config_value, 'config_descr' => 'Slack Transport'), 'config');
|
|
if ($config_id > 0) {
|
|
dbUpdate(array('config_name' => 'alert.transports.slack.'.$config_id.'.url'), 'config', 'config_id=?', array($config_id));
|
|
$status = 'ok';
|
|
$message = 'Config item created';
|
|
$extras = explode('\n', $config_extra);
|
|
foreach ($extras as $option) {
|
|
list($k,$v) = explode('=', $option, 2);
|
|
if (!empty($k) || !empty($v)) {
|
|
dbInsert(array('config_name' => 'alert.transports.slack.'.$config_id.'.'.$k, 'config_value' => $v, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $v, 'config_descr' => 'Slack Transport'), 'config');
|
|
}
|
|
}
|
|
} else {
|
|
$message = 'Could not create config item';
|
|
}
|
|
}
|
|
} elseif ($action == 'add-discord') {
|
|
if (empty($config_value)) {
|
|
$message = 'No Discord url provided';
|
|
} else {
|
|
$config_id = dbInsert(array('config_name' => 'alert.transports.discord.', 'config_value' => $config_value, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $config_value, 'config_descr' => 'Discord Transport'), 'config');
|
|
if ($config_id > 0) {
|
|
dbUpdate(array('config_name' => 'alert.transports.discord.'.$config_id.'.url'), 'config', 'config_id=?', array($config_id));
|
|
$status = 'ok';
|
|
$message = 'Config item created';
|
|
$extras = explode('\n', $config_extra);
|
|
foreach ($extras as $option) {
|
|
list($k,$v) = explode('=', $option, 2);
|
|
if (!empty($k) || !empty($v)) {
|
|
dbInsert(array('config_name' => 'alert.transports.discord.'.$config_id.'.'.$k, 'config_value' => $v, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $v, 'config_descr' => 'Discord Transport'), 'config');
|
|
}
|
|
}
|
|
} else {
|
|
$message = 'Could not create config item';
|
|
}
|
|
}
|
|
} elseif ($action == 'add-rocket') {
|
|
if (empty($config_value)) {
|
|
$message = 'No Rocket.Chat url provided';
|
|
} else {
|
|
$config_id = dbInsert(array('config_name' => 'alert.transports.rocket.', 'config_value' => $config_value, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $config_value, 'config_descr' => 'Rocket.Chat Transport'), 'config');
|
|
if ($config_id > 0) {
|
|
dbUpdate(array('config_name' => 'alert.transports.rocket.'.$config_id.'.url'), 'config', 'config_id=?', array($config_id));
|
|
$status = 'ok';
|
|
$message = 'Config item created';
|
|
$extras = explode('\n', $config_extra);
|
|
foreach ($extras as $option) {
|
|
list($k,$v) = explode('=', $option, 2);
|
|
if (!empty($k) || !empty($v)) {
|
|
dbInsert(array('config_name' => 'alert.transports.rocket.'.$config_id.'.'.$k, 'config_value' => $v, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $v, 'config_descr' => 'Rocket.Chat Transport'), 'config');
|
|
}
|
|
}
|
|
} else {
|
|
$message = 'Could not create config item';
|
|
}
|
|
}
|
|
} elseif ($action == 'add-hipchat') {
|
|
if (empty($config_value) || empty($config_room_id) || empty($config_from)) {
|
|
$message = 'No hipchat url, room id or from provided';
|
|
} else {
|
|
$config_id = dbInsert(array('config_name' => 'alert.transports.hipchat.', 'config_value' => $config_value, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $config_value, 'config_descr' => 'Hipchat Transport'), 'config');
|
|
if ($config_id > 0) {
|
|
dbUpdate(array('config_name' => 'alert.transports.hipchat.'.$config_id.'.url'), 'config', 'config_id=?', array($config_id));
|
|
$additional_id['room_id'] = dbInsert(array('config_name' => 'alert.transports.hipchat.'.$config_id.'.room_id', 'config_value' => $config_room_id, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $config_room_id, 'config_descr' => 'Hipchat URL'), 'config');
|
|
$additional_id['from'] = dbInsert(array('config_name' => 'alert.transports.hipchat.'.$config_id.'.from', 'config_value' => $config_from, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $config_from, 'config_descr' => 'Hipchat From'), 'config');
|
|
$status = 'ok';
|
|
$message = 'Config item created';
|
|
$extras = explode('\n', $config_extra);
|
|
foreach ($extras as $option) {
|
|
list($k,$v) = explode('=', $option, 2);
|
|
if (!empty($k) || !empty($v)) {
|
|
dbInsert(array('config_name' => 'alert.transports.hipchat.'.$config_id.'.'.$k, 'config_value' => $v, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $v, 'config_descr' => 'Hipchat '.$v), 'config');
|
|
}
|
|
}
|
|
} else {
|
|
$message = 'Could not create config item';
|
|
}
|
|
}//end if
|
|
} elseif ($action == 'add-pushover') {
|
|
if (empty($config_value) || empty($config_userkey)) {
|
|
$message = 'No pushover appkey or userkey provided';
|
|
} else {
|
|
$config_id = dbInsert(array('config_name' => 'alert.transports.pushover.', 'config_value' => $config_value, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $config_value, 'config_descr' => 'Pushover Transport'), 'config');
|
|
if ($config_id > 0) {
|
|
dbUpdate(array('config_name' => 'alert.transports.pushover.'.$config_id.'.appkey'), 'config', 'config_id=?', array($config_id));
|
|
$additional_id['userkey'] = dbInsert(array('config_name' => 'alert.transports.pushover.'.$config_id.'.userkey', 'config_value' => $config_userkey, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $config_userkey, 'config_descr' => 'Pushver Userkey'), 'config');
|
|
$status = 'ok';
|
|
$message = 'Config item created';
|
|
$extras = explode('\n', $config_extra);
|
|
foreach ($extras as $option) {
|
|
list($k,$v) = explode('=', $option, 2);
|
|
if (!empty($k) || !empty($v)) {
|
|
dbInsert(array('config_name' => 'alert.transports.pushover.'.$config_id.'.'.$k, 'config_value' => $v, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $v, 'config_descr' => 'Pushover '.$v), 'config');
|
|
}
|
|
}
|
|
} else {
|
|
$message = 'Could not create config item';
|
|
}
|
|
}
|
|
} elseif ($action == 'add-boxcar') {
|
|
if (empty($config_value)) {
|
|
$message = 'No Boxcar access token provided';
|
|
} else {
|
|
$config_id = dbInsert(array('config_name' => 'alert.transports.boxcar.', 'config_value' => $config_value, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $config_value, 'config_descr' => 'Boxcar Transport'), 'config');
|
|
if ($config_id > 0) {
|
|
dbUpdate(array('config_name' => 'alert.transports.boxcar.'.$config_id.'.access_token'), 'config', 'config_id=?', array($config_id));
|
|
$status = 'ok';
|
|
$message = 'Config item created';
|
|
$extras = explode('\n', $config_extra);
|
|
foreach ($extras as $option) {
|
|
list($k,$v) = explode('=', $option, 2);
|
|
if (!empty($k) || !empty($v)) {
|
|
dbInsert(array('config_name' => 'alert.transports.boxcar.'.$config_id.'.'.$k, 'config_value' => $v, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $v, 'config_descr' => 'Boxcar '.$v), 'config');
|
|
}
|
|
}
|
|
} else {
|
|
$message = 'Could not create config item';
|
|
}
|
|
}
|
|
} elseif ($action == 'add-telegram') {
|
|
if (empty($config_value)) {
|
|
$message = 'No Telegram chat id provided';
|
|
} else {
|
|
$config_id = dbInsert(array('config_name' => 'alert.transports.telegram.', 'config_value' => $config_value, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $config_value, 'config_descr' => 'Telegram Transport'), 'config');
|
|
if ($config_id > 0) {
|
|
dbUpdate(array('config_name' => 'alert.transports.telegram.'.$config_id.'.chat_id'), 'config', 'config_id=?', array($config_id));
|
|
dbInsert(array('config_name' => 'alert.transports.telegram.'.$config_id.'.token', 'config_value' => $config_extra, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $config_extra, 'config_descr' => 'Telegram token'), 'config');
|
|
$status = 'ok';
|
|
$message = 'Config item created';
|
|
} else {
|
|
$message = 'Could not create config item';
|
|
}
|
|
}
|
|
} elseif ($action == 'add-clickatell') {
|
|
if (empty($config_value)) {
|
|
$message = 'No Clickatell token provided';
|
|
} elseif (empty($config_to)) {
|
|
$message = 'No mobile numbers provided';
|
|
} else {
|
|
$config_id = dbInsert(array('config_name' => 'alert.transports.clickatell.', 'config_value' => $config_value, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $config_value, 'config_descr' => 'Clickatell Transport'), 'config');
|
|
if ($config_id > 0) {
|
|
dbUpdate(array('config_name' => 'alert.transports.clickatell.'.$config_id.'.token'), 'config', 'config_id=?', array($config_id));
|
|
$status = 'ok';
|
|
$message = 'Config item created';
|
|
$mobiles = explode('\n', $config_to);
|
|
$x=0;
|
|
foreach ($mobiles as $mobile) {
|
|
if (!empty($mobile)) {
|
|
dbInsert(array('config_name' => 'alert.transports.clickatell.'.$config_id.'.to.'.$x, 'config_value' => $mobile, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $v, 'config_descr' => 'Clickatell mobile'), 'config');
|
|
$x++;
|
|
}
|
|
}
|
|
} else {
|
|
$message = 'Could not create config item';
|
|
}
|
|
}
|
|
} elseif ($action == 'add-playsms') {
|
|
if (empty($config_value)) {
|
|
$message = 'No PlaySMS URL provided';
|
|
} elseif (empty($config_user)) {
|
|
$message = 'No PlaySMS User provided';
|
|
} elseif (empty($config_to)) {
|
|
$message = 'No mobile numbers provided';
|
|
} else {
|
|
$config_id = dbInsert(array('config_name' => 'alert.transports.playsms.', 'config_value' => $config_value, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $config_value, 'config_descr' => 'PlaySMS Transport'), 'config');
|
|
if ($config_id > 0) {
|
|
dbUpdate(array('config_name' => 'alert.transports.playsms.'.$config_id.'.url'), 'config', 'config_id=?', array($config_id));
|
|
$additional_id['from'] = dbInsert(array('config_name' => 'alert.transports.playsms.'.$config_id.'.from', 'config_value' => $config_from, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $config_from, 'config_descr' => 'PlaySMS From'), 'config');
|
|
$additional_id['user'] = dbInsert(array('config_name' => 'alert.transports.playsms.'.$config_id.'.user', 'config_value' => $config_user, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $config_user, 'config_descr' => 'PlaySMS User'), 'config');
|
|
$additional_id['token'] = dbInsert(array('config_name' => 'alert.transports.playsms.'.$config_id.'.token', 'config_value' => $config_token, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $config_token, 'config_descr' => 'PlaySMS Token'), 'config');
|
|
$status = 'ok';
|
|
$message = 'Config item created';
|
|
$mobiles = explode('\n', $config_to);
|
|
$x=0;
|
|
foreach ($mobiles as $mobile) {
|
|
if (!empty($mobile)) {
|
|
dbInsert(array('config_name' => 'alert.transports.playsms.'.$config_id.'.to.'.$x, 'config_value' => $mobile, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $v, 'config_descr' => 'PlaySMS mobile'), 'config');
|
|
$x++;
|
|
}
|
|
}
|
|
} else {
|
|
$message = 'Could not create config item';
|
|
}
|
|
}
|
|
} elseif ($action == 'add-smseagle') {
|
|
if (empty($config_value)) {
|
|
$message = 'No SMSEagle URL provided';
|
|
} elseif (empty($config_user)) {
|
|
$message = 'No SMSEagle User provided';
|
|
} elseif (empty($config_to)) {
|
|
$message = 'No mobile numbers provided';
|
|
} else {
|
|
$config_id = dbInsert(array('config_name' => 'alert.transports.smseagle.', 'config_value' => $config_value, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $config_value, 'config_descr' => 'SMSEagle Transport'), 'config');
|
|
if ($config_id > 0) {
|
|
dbUpdate(array('config_name' => 'alert.transports.smseagle.'.$config_id.'.url'), 'config', 'config_id=?', array($config_id));
|
|
$additional_id['user'] = dbInsert(array('config_name' => 'alert.transports.smseagle.'.$config_id.'.user', 'config_value' => $config_user, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $config_user, 'config_descr' => 'SMSEagle User'), 'config');
|
|
$additional_id['token'] = dbInsert(array('config_name' => 'alert.transports.smseagle.'.$config_id.'.token', 'config_value' => $config_token, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $config_token, 'config_descr' => 'SMSEagle Token'), 'config');
|
|
$status = 'ok';
|
|
$message = 'Config item created';
|
|
$mobiles = explode('\n', $config_to);
|
|
$x=0;
|
|
foreach ($mobiles as $mobile) {
|
|
if (!empty($mobile)) {
|
|
dbInsert(array('config_name' => 'alert.transports.smseagle.'.$config_id.'.to.'.$x, 'config_value' => $mobile, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $v, 'config_descr' => 'SMSEagle mobile'), 'config');
|
|
$x++;
|
|
}
|
|
}
|
|
} else {
|
|
$message = 'Could not create config item';
|
|
}
|
|
}
|
|
} else {
|
|
if (empty($config_group) || empty($config_sub_group) || empty($config_name) || empty($config_value)) {
|
|
$message = 'Missing config name or value';
|
|
} else {
|
|
$config_id = dbInsert(array('config_name' => $config_name, 'config_value' => $config_value, 'config_group' => $config_group, 'config_sub_group' => $config_sub_group, 'config_default' => $config_value, 'config_descr' => 'API Transport'), 'config');
|
|
if ($config_id > 0) {
|
|
dbUpdate(array('config_name' => $config_name.$config_id), 'config', 'config_id=?', array($config_id));
|
|
$status = 'ok';
|
|
$message = 'Config item created';
|
|
} else {
|
|
$message = 'Could not create config item';
|
|
}
|
|
}
|
|
}//end if
|
|
|
|
$response = array(
|
|
'status' => $status,
|
|
'message' => $message,
|
|
'config_id' => $config_id,
|
|
'additional_id' => $additional_id,
|
|
);
|
|
echo _json_encode($response);
|