mirror of
https://github.com/librenms/librenms.git
synced 2024-10-07 16:52:45 +00:00
* Security fix: unauthorized access Affects nginx users: Moved php files outside of public html directory (Apache was protected by .htaccess) Affects all users: Some files did not check for authentication and could disclose some info. Better checks before including files from user input * git mv html/includes/ includes/html git mv html/pages/ includes/html/
168 lines
6.4 KiB
PHP
168 lines
6.4 KiB
PHP
<?php
|
|
|
|
use LibreNMS\Authentication\LegacyAuth;
|
|
|
|
$no_refresh = true;
|
|
|
|
?>
|
|
<div class="row">
|
|
<div class="col-sm-12">
|
|
<span id="message"></span>
|
|
</div>
|
|
</div>
|
|
<?php
|
|
|
|
require_once 'includes/html/modal/edit_alert_transport.inc.php';
|
|
require_once 'includes/html/modal/edit_transport_group.inc.php';
|
|
|
|
?>
|
|
|
|
<div class="table-responsive">
|
|
<table class="table table-hover table-condensed">
|
|
<tr>
|
|
<th>#</th>
|
|
<th>Transport Name</th>
|
|
<th>Transport Type</th>
|
|
<th>Default</th>
|
|
<th>Details</th>
|
|
<th style="width:126px;">Action</th>
|
|
</tr>
|
|
<td colspan="6">
|
|
<?php
|
|
if (LegacyAuth::user()->hasGlobalAdmin()) {
|
|
echo "<button type='button' class='btn btn-primary btn-sm' data-toggle='modal' data-target='#edit-alert-transport'><i class='fa fa-plus'></i> Create alert transport</button>";
|
|
}
|
|
|
|
echo "</td>";
|
|
|
|
// Iterate through each alert transport
|
|
$query = "SELECT `transport_id` AS `id`, `transport_name` AS `name`, `transport_type` AS `type`, `is_default`, `transport_config` AS `config` FROM `alert_transports`";
|
|
foreach (dbFetchRows($query) as $transport) {
|
|
echo "<tr id=\"alert-transport-{$transport['id']}\">";
|
|
echo "<td><i>#".((int)$transport['id'])."</i></td>";
|
|
echo "<td>".$transport['name']."</td>";
|
|
echo "<td>".$transport['type']."</td>";
|
|
if ($transport['is_default'] == true) {
|
|
echo "<td>Yes</td>";
|
|
} else {
|
|
echo "<td>No</td>";
|
|
}
|
|
|
|
echo "<td class='col-sm-4'>";
|
|
|
|
// Iterate through transport config template to display config details
|
|
$class = 'LibreNMS\\Alert\\Transport\\'.ucfirst($transport['type']);
|
|
if (!method_exists($class, 'configTemplate')) {
|
|
//skip
|
|
continue;
|
|
}
|
|
$tmp = call_user_func($class.'::configTemplate');
|
|
$transport_config = json_decode($transport['config'], true);
|
|
|
|
foreach ($tmp['config'] as $item) {
|
|
if ($item['type'] == 'oauth') {
|
|
continue;
|
|
}
|
|
|
|
$val = $transport_config[$item['name']];
|
|
|
|
// Match value to key name for select inputs
|
|
if ($item['type'] == 'select') {
|
|
$val = array_search($val, $item['options']);
|
|
}
|
|
|
|
echo "<i>".$item['title'].": ".$val."<br/></i>";
|
|
}
|
|
|
|
echo "</td>";
|
|
echo "<td>";
|
|
|
|
// Add action buttons for admin users only
|
|
if (Auth::user()->hasGlobalAdmin()) {
|
|
echo "<div class='btn-group btn-group-sm' role='group'>";
|
|
echo "<button type='button' class='btn btn-primary' data-toggle='modal' data-target='#edit-alert-transport' data-transport_id='".$transport['id']."' name='edit-alert-rule' data-container='body' data-toggle='popover' data-content='Edit transport'><i class='fa fa-lg fa-pencil' aria-hidden='true'></i></button> ";
|
|
echo "<button type='button' class='btn btn-danger' aria-label='Delete' data-toggle='modal' data-target='#delete-alert-transport' data-transport_id='".$transport['id']."' name='delete-alert-transport' data-container='body' data-toggle='popover' data-content='Delete transport'><i class='fa fa-lg fa-trash' aria-hidden='true'></i></button>";
|
|
echo "<button type='button' class='btn btn-warning' data-transport_id='".$transport['id']."' data-transport='{$transport['type']}' name='test-transport' id='test-transport' data-toggle='popover' data-content='Test transport'><i class='fa fa-lg fa-check' aria-hidden='true'></i></button> ";
|
|
echo "</div>";
|
|
}
|
|
echo "</td>";
|
|
echo "</tr>\r\n";
|
|
}
|
|
?>
|
|
</table>
|
|
</div>
|
|
<div class="table-responsive">
|
|
<table class="table table-hover table-condensed">
|
|
<tr>
|
|
<th>#</th>
|
|
<th>Transport Group</th>
|
|
<th>Size</th>
|
|
<th>Members</th>
|
|
<th style="width:86px;">Action</th>
|
|
</tr>
|
|
<td colspan="5">
|
|
<?php
|
|
if (Auth::user()->hasGlobalAdmin()) {
|
|
echo "<button type='button' class='btn btn-primary btn-sm' data-toggle='modal' data-target='#edit-transport-group'><i class='fa fa-plus'></i> Create transport group</button>";
|
|
}
|
|
echo "</td>";
|
|
|
|
//Iterate through alert groups
|
|
$query = "SELECT `transport_group_id` AS `id`, `transport_group_name` AS `name` FROM `alert_transport_groups`";
|
|
foreach (dbFetchRows($query) as $group) {
|
|
echo "<tr id=\"alert-transport-group-{$group['id']}\">";
|
|
echo "<td><i>#".((int)$group['id'])."</i></td>";
|
|
echo "<td>".$group['name']."</td>";
|
|
|
|
//List out the members of each group
|
|
$query = "SELECT `transport_type`, `transport_name` FROM `transport_group_transport` AS `a` LEFT JOIN `alert_transports` AS `b` ON `a`.`transport_id`=`b`.`transport_id` WHERE `transport_group_id`=?";
|
|
$members = dbFetchRows($query, [$group['id']]);
|
|
echo "<td>".sizeof($members)."</td>";
|
|
echo "<td>";
|
|
foreach ($members as $member) {
|
|
echo "<i>".ucfirst($member['transport_type']).": ".$member['transport_name']."<br /></i>";
|
|
}
|
|
echo "</td>";
|
|
echo "<td>";
|
|
if (Auth::user()->hasGlobalAdmin()) {
|
|
echo "<div class='btn-group btn-group-sm' role='group'>";
|
|
echo "<button type='button' class='btn btn-primary' data-toggle='modal' data-target='#edit-transport-group' data-group_id='".$group['id']."' data-container='body' data-toggle='popover' data-content='Edit transport group'><i class='fa fa-lg fa-pencil' aria-hidden='true'></i></button> ";
|
|
echo "<button type='button' class='btn btn-danger' aria-label='Delete' data-toggle='modal' data-target='#delete-transport-group' data-group_id='".$group['id']."' data-container='body' data-toggle='popover' data-content='Delete transport group'><i class='fa fa-lg fa-trash' aria-hidden='true'></i></button>";
|
|
echo "</div>";
|
|
}
|
|
echo "</td>";
|
|
echo "</tr>";
|
|
}
|
|
?>
|
|
</table>
|
|
</div>
|
|
|
|
<script>
|
|
$("button#test-transport").click(function() {
|
|
var $this = $(this);
|
|
var transport_id = $this.data("transport_id");
|
|
var transport = $this.data("transport");
|
|
$.ajax({
|
|
type: 'POST',
|
|
url: 'ajax_form.php',
|
|
data: { type: "test-transport", transport_id: transport_id },
|
|
dataType: "json",
|
|
success: function(data){
|
|
if (data.status === 'ok') {
|
|
toastr.success('Test to ' + transport + ' ok');
|
|
} else {
|
|
toastr.error('Test to ' + transport + ' failed<br />' + data.message);
|
|
}
|
|
},
|
|
error: function(){
|
|
toastr.error('Test to ' + transport + ' failed - general error');
|
|
}
|
|
});
|
|
});
|
|
|
|
$("[data-toggle='popover']").popover({
|
|
trigger: 'hover',
|
|
placement: 'top'
|
|
});
|
|
</script>
|