librenms-librenms/html/includes/forms/save-host-dependency.inc.php

<?php

/*
 * LibreNMS
 *
 * Copyright (c) 2017 Aldemir Akpinar <https://github.com/aldemira/>
 *
 * This program is free software: you can redistribute it and/or modify it
 * under the terms of the GNU General Public License as published by the
 * Free Software Foundation, either version 3 of the License, or (at your
 * option) any later version.  Please see LICENSE.txt at the top level of
 * the source code distribution for details.
 */

use LibreNMS\Authentication\Auth;

if (!Auth::user()->hasGlobalAdmin()) {
    $status = array('status' => 1, 'message' => 'You need to be admin');
} else {
    foreach ($_POST['parent_ids'] as $parent) {
        if (!is_numeric($parent)) {
            $status = array('status' => 1, 'message' => 'Parent ID must be an integer!');
            break;
        }
    }

    if (count($_POST['parent_ids']) > 1 && in_array('0', $_POST['parent_ids'])) {
        $status = array('status' => 1, 'message' => 'Multiple parents cannot contain None-Parent!');
    }

    // A bit of an effort to reuse this code with dependency editing and the dependency wizard (editing multiple hosts at the same time)
    $device_arr = array();
    foreach ($_POST['device_ids'] as $dev) {
        if (!is_numeric($dev)) {
            $status = array('status' => 1, 'message' => 'Device ID must be an integer!');
            break;
        } elseif (in_array($dev, $_POST['parent_ids'])) {
            $status = array('status' => 1, 'message' => 'A device cannot depend itself');
            break;
        }
        $insert = array();
        foreach ($_POST['parent_ids'] as $parent) {
            if (is_numeric($parent) && $parent != 0) {
                $insert[] = array('parent_device_id' => $parent, 'child_device_id' => $dev);
            } elseif ($parent == 0) {
                // In case we receive a mixed array with $parent = 0 (which shouldn't happen)
                // Empty the insert array so we remove any previous dependency so 'None' takes precedence
                $insert = array();
                break;
            }
        }
        dbDelete('device_relationships', '`child_device_id` = ?', array($dev));
        if (!empty($insert)) {
            dbBulkInsert($insert, 'device_relationships');
        }
        $status = array('status' => 0, 'message' => 'Device dependencies have been saved');
    }
}
header('Content-Type: application/json');
echo _json_encode($status);