mirror of
https://github.com/librenms/librenms.git
synced 2024-10-07 16:52:45 +00:00
36b38a50cc
https://github.com/librenms/librenms/security/advisories/GHSA-rwwc-2v8q-gc9v Create html programmatically to prevent printing user input out.
215 lines
9.3 KiB
PHP
215 lines
9.3 KiB
PHP
<?php
|
|
/*
|
|
* LibreNMS
|
|
*
|
|
* Copyright (c) 2017 Aldemir Akpinar <https://github.com/aldemira>
|
|
*
|
|
* This program is free software: you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License as published by the
|
|
* Free Software Foundation, either version 3 of the License, or (at your
|
|
* option) any later version. Please see LICENSE.txt at the top level of
|
|
* the source code distribution for details.
|
|
*/
|
|
|
|
$no_refresh = true;
|
|
|
|
$pagetitle[] = 'Device Dependencies';
|
|
|
|
require_once 'includes/html/modal/delete_host_dependency.inc.php';
|
|
require_once 'includes/html/modal/edit_host_dependency.inc.php';
|
|
require_once 'includes/html/modal/manage_host_dependencies.inc.php';
|
|
?>
|
|
<div class="row">
|
|
<div class="col-sm-12">
|
|
<span id="message"></span>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="table-responsive">
|
|
<table id="hostdeps" class="table table-hover table-condensed table-striped">
|
|
<thead>
|
|
<tr>
|
|
<th data-column-id="id" data-type="int" data-formatter="id" data-sortable="true" data-visible="true">Id</th>
|
|
<th data-column-id="hostname" data-type="string" data-css-class="childhost" data-formatter="hostname">Hostname</th>
|
|
<th data-column-id="sysname" data-type="string" data-visible="false">Sysname</th>
|
|
<th data-column-id="parent" data-type="string" data-css-class="parenthost" data-formatter="parent">Parent Device(s)</th>
|
|
<th data-column-id="parentid" data-visible="false">Parent ID</th>
|
|
<th data-column-id="actions" data-sortable="false" data-searchable="false" data-formatter="actions">Actions</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
<script>
|
|
var grid = $("#hostdeps").bootgrid({
|
|
rowCount: [50, 100, 250, -1],
|
|
ajax: true,
|
|
post: function() {
|
|
return {
|
|
type: "get-host-dependencies",
|
|
viewtype: "fulllist",
|
|
format: "mainpage"
|
|
};
|
|
},
|
|
url: "ajax_form.php",
|
|
templates: {
|
|
header: '<div id="{{ctx.id}}" class="{{css.header}}"> \
|
|
<div class="row"> \
|
|
<?php if (Auth::user()->hasGlobalAdmin()) { ?>
|
|
<div class="col-sm-8 actionBar"> \
|
|
<span class="pull-left"> \
|
|
<button type="button" class="btn btn-primary btn-sm command-manage" data-toggle="modal" data-target="#manage-dependencies" data-template_id="">Manage Device Dependencies</button> \
|
|
</span> \
|
|
</div> \
|
|
<div class="col-sm-4 actionBar"><p class="{{css.search}}"></p><p class="{{css.actions}}"></p></div></div></div>'
|
|
<?php } else { ?>
|
|
<div class="actionBar"><p class="{{css.search}}"></p><p class="{{css.actions}}"></p></div></div></div>'
|
|
|
|
<?php } ?>
|
|
},
|
|
formatters: {
|
|
"actions": function(column, row) {
|
|
var content = document.createElement('div');
|
|
content.style.whiteSpace = "nowrap";
|
|
|
|
var edit_button = document.createElement('button');
|
|
edit_button.setAttribute('type', 'button');
|
|
edit_button.setAttribute('class', 'btn btn-primary btn-sm command-edit');
|
|
edit_button.setAttribute('aria-label', 'Edit');
|
|
edit_button.setAttribute('data-toggle', 'modal');
|
|
edit_button.setAttribute('data-target', '#edit-dependency');
|
|
edit_button.setAttribute('name', 'edit-host-dependency');
|
|
edit_button.setAttribute('data-device_id', row.deviceid);
|
|
edit_button.setAttribute('data-host_name', row.hostname);
|
|
edit_button.setAttribute('data-parent_id', row.parentid);
|
|
var edit_button_label = document.createElement('i');
|
|
edit_button_label.setAttribute('class', 'fa fa-pencil');
|
|
edit_button_label.setAttribute('aria-hidden', 'true');
|
|
edit_button.appendChild(edit_button_label);
|
|
content.appendChild(edit_button);
|
|
|
|
content.appendChild(document.createTextNode(' '))
|
|
|
|
var delete_button = document.createElement('button');
|
|
delete_button.setAttribute('type', 'button');
|
|
delete_button.setAttribute('class', 'btn btn-danger btn-sm command-delete');
|
|
delete_button.setAttribute('aria-label', 'Delete');
|
|
delete_button.setAttribute('data-toggle', 'modal');
|
|
delete_button.setAttribute('data-target', '#confirm-delete');
|
|
delete_button.setAttribute('name', 'delete-host-dependency');
|
|
delete_button.setAttribute('data-device_id', row.deviceid);
|
|
delete_button.setAttribute('data-host_name', row.hostname);
|
|
delete_button.setAttribute('data-device_parent', row.parentid);
|
|
delete_button.disabled = row.parent == 'None';
|
|
var delete_button_label = document.createElement('i');
|
|
delete_button_label.setAttribute('class', 'fa fa-trash');
|
|
delete_button_label.setAttribute('aria-hidden', 'true');
|
|
delete_button.appendChild(delete_button_label);
|
|
content.appendChild(delete_button)
|
|
|
|
return content.outerHTML;
|
|
},
|
|
"id": function(column, row) {
|
|
return row.deviceid;
|
|
},
|
|
"hostname": function(column, row) {
|
|
var content = document.createElement('div');
|
|
var link = document.createElement('a');
|
|
link.setAttribute('href', '<?php echo route('device', ['device' => ':device_id']) ?>'.replace(':device_id', row.deviceid));
|
|
link.setAttribute('class', 'list-device');
|
|
link.appendChild(document.createTextNode(row.hostname));
|
|
content.appendChild(link);
|
|
content.appendChild(document.createElement('br'));
|
|
content.appendChild(document.createTextNode(row.sysname));
|
|
|
|
return content.innerHTML;
|
|
},
|
|
"parent": function(column, row) {
|
|
if (row.parent == 'None') {
|
|
return 'None';
|
|
}
|
|
|
|
var temp = row.parent.split(',');
|
|
var tempids = row.parentid.split(',');
|
|
var retstr = '';
|
|
for (i=0; i < temp.length; i++) {
|
|
var link = document.createElement('a');
|
|
link.setAttribute('href', '<?php echo route('device', ['device' => ':device_id']) ?>'.replace(':device_id', tempids[i]));
|
|
link.setAttribute('class', 'list-device');
|
|
link.appendChild(document.createTextNode(temp[i]));
|
|
retstr = retstr + link.outerHTML + ', ';
|
|
}
|
|
return retstr.slice(0, -2);
|
|
}
|
|
},
|
|
}).on("loaded.rs.jquery.bootgrid", function(e) {
|
|
e.preventDefault();
|
|
/* Executes after data is loaded and rendered */
|
|
grid.find(".command-edit").on("click", function(e) {
|
|
$('#edit-row_id').val($(this).parent().parent().parent().data('row-id'));
|
|
$("#edit-device_id").val($(this).data("device_id"));
|
|
$("#edit-parent_id").val($(this).data("parent_id"));
|
|
$('#edit-dependency').modal('show');
|
|
$('.modalhostname').text($(this).data("host_name"));
|
|
}).end().find(".command-delete").on("click", function(e) {
|
|
$('#delete-row_id').val($(this).parent().parent().parent().data('row-id'));
|
|
$("#delete-device_id").val($(this).data("device_id"));
|
|
$("#delete-parent_id").val($(this).data("device_parent"));
|
|
$('#confirm-delete').modal('show');
|
|
$('.modalhostname').text($(this).data("host_name"));
|
|
}).end().find(".command-manage").on("click", function(e) {
|
|
$('#manage-dependencies').modal('show');
|
|
});
|
|
});
|
|
|
|
$(document).ready(function() {
|
|
var editSelect = $('#availableparents').select2({
|
|
dropdownParent: $('#edit-dependency'),
|
|
width: 'resolve'
|
|
|
|
});
|
|
|
|
var manParentDevstoClr = $('#manclearchildren').select2({
|
|
dropdownParent: $('#manage-dependencies'),
|
|
width: 'resolve'
|
|
});
|
|
|
|
var manParentDevs = $('#manavailableparents').select2({
|
|
dropdownParent: $('#manage-dependencies'),
|
|
width: 'resolve'
|
|
});
|
|
|
|
var manAllDevs = $('#manalldevices').select2({
|
|
dropdownParent: $('#manage-dependencies'),
|
|
width: 'resolve'
|
|
});
|
|
|
|
$.ajax({
|
|
type: "POST",
|
|
url: 'ajax_form.php',
|
|
data: {type: 'get-host-dependencies', "viewtype": 'fulllist' },
|
|
dataType: "json",
|
|
success: function(output) {
|
|
if (output.status == 0) {
|
|
manParentDevs.append($('<option>', { value: 0, text: 'None'}));
|
|
editSelect.append($('<option>', { value: 0, text: 'None'}));
|
|
manParentDevstoClr.append($('<option>', { value: 0, text: 'None'}));
|
|
$.each(output.deps, function (i,elem) {
|
|
var devtext = elem.hostname + ' (' + elem.sysName + ')';
|
|
manParentDevs.append($('<option>',{value:elem.id, text:devtext}));
|
|
editSelect.append($('<option>',{value:elem.id, text:devtext}));
|
|
manAllDevs.append($('<option>',{value:elem.id, text:devtext}));
|
|
manParentDevstoClr.append($('<option>',{value:elem.id, text:devtext}));
|
|
});
|
|
} else {
|
|
toastr.error('Device dependencies could not be retrieved from the database');
|
|
}
|
|
},
|
|
error: function() {
|
|
toastr.error('Device dependencies could not be retrieved from the database');
|
|
}
|
|
});
|
|
});
|
|
</script>
|