Files
librenms-librenms/html/includes/common/server-stats.inc.php
Tony Murray 32a7c50189 Use Laravel authentication (#8702)
* Use Laravel for authentication
Support legacy auth methods
Always create DB entry for users (segregate by auth method)

Port api auth to Laravel

restrict poller errors to devices the user has access to

Run checks on every page load.  But set a 5 minute (configurable) timer.
Only run some checks if the user is an admin

Move toastr down a few pixels so it isn't as annoying.

Fix menu not loaded on laravel pages when twofactor is enabled for the system, but disabled for the user.
Add two missing menu entries in the laravel menu

Rewrite 2FA code
Simplify some and verify code before applying

Get http-auth working
Handle legacy $_SESSION differently.  Allows Auth::once(), etc to work.

* Fix tests and mysqli extension check

* remove duplicate Toastr messages

* Fix new items

* Rename 266.sql to 267.sql
2018-09-11 07:51:35 -05:00

138 lines
5.6 KiB
PHP

<?php
use LibreNMS\Authentication\LegacyAuth;
$device_id = $widget_settings['device'];
$column = $widget_settings['columnsize'];
if (defined('SHOW_SETTINGS') || empty($widget_settings)) {
$cur_col_size = isset($widget_settings['columnsize']) ? $widget_settings['columnsize'] : '';
$cur_dev = isset($widget_settings['device']) ? $widget_settings['device'] : '';
$cur_title = isset($widget_settings['title']) ? $widget_settings['title'] : '';
$common_output[] = '
<form class="form" onsubmit="widget_settings(this); return false;">
<div class="form-group">
<div class="col-sm-4">
<label for="title" class="control-label availability-map-widget-header">Widget title</label>
</div>
<div class="col-sm-6">
<input type="text" class="form-control" name="title" placeholder="Custom title for widget" value="'.htmlspecialchars($cur_title).'">
</div>
</div>
<div class="form-group">
<div class="col-sm-4">
<label for="device" class="control-label availability-map-widget-header">Server</label>
</div>
<div class="col-sm-6">
<select id="device" name="device" class="form-control">';
if (LegacyAuth::user()->hasGlobalRead()) {
$sql = "SELECT `devices`.`device_id`, `hostname` FROM `devices` WHERE disabled = 0 AND `type` = 'server' ORDER BY `hostname` ASC";
$param = array();
} else {
$sql = "SELECT `devices`.`device_id`, `hostname` FROM `devices` LEFT JOIN `devices_perms` AS `DP` ON `devices`.`device_id` = `DP`.`device_id` WHERE disabled = 0 AND `type` = 'server' AND `DP`.`user_id`=? ORDER BY `hostname` ASC";
$param = array(LegacyAuth::id());
}
foreach (dbFetchRows($sql, $param) as $dev) {
if ($dev['device_id'] == $cur_dev) {
$selected = 'selected';
} else {
$selected = '';
}
$common_output[] = '<option value="'.$dev['device_id'].'" '.$selected.'>'.$dev['hostname'].'</option>';
}
$common_output[] ='</select>
</div>
</div>
<div class="form-group">
<div class="col-sm-4">
<label for="columnsize" class="control-label availability-map-widget-header">Column Size</label>
</div>
<div class="col-sm-6">
<select name="columnsize" class="form-control">
<option value="2"'.($cur_col_size == 2 ? ' selected' : ' ').'>2</option>
<option value="3"'.($cur_col_size == 3 ? ' selected' : ' ').'>3</option>
<option value="4"'.($cur_col_size == 4 ? ' selected' : ' ').'>4</option>
</select>
</div>
</div>
<div class="form-group">
<div class="col-sm-10">
<button type="submit" class="btn btn-default">Set</button>
</div>
</div>
</form>';
} else {
if (device_permitted($device_id)) {
$cpu = dbFetchCell("SELECT AVG(processor_usage) from processors WHERE device_id = ?", array($device_id));
$mem = dbFetchRows("SELECT mempool_descr,
ROUND(mempool_used / (1024*1024), 0) as used,
ROUND(mempool_total /(1024*1024), 0) as total
FROM mempools WHERE device_id = ?", array($device_id));
$disk = dbFetchRows("SELECT storage_descr,
ROUND(storage_used / (1024*1024), 0) as used,
ROUND(storage_size / (1024*1024), 0) as total
FROM storage WHERE device_id = ?", array($device_id));
$colno = 12 / $column;
if (!$cpu) {
$cpu = 0;
}
$common_output[] = '
<div class="col-sm-' . $colno . '">
<div id="cpu-' . $unique_id . '" ></div>
</div>';
$i = 0;
foreach ($mem as $m) {
$common_output[] = '<div class="col-sm-' . $colno . '">
<div id="mem-' . $i . '-' . $unique_id . '" ></div>
</div>';
$mem_js_output .= "var memgauge" . $i . " = new JustGage({
id: 'mem-" . $i . "-" . $unique_id . "',
value: " . $m['used'] . ",
min: 0,
max: " . $m['total'] . ",
label: 'Mbytes',
valueFontSize: '2px',
title: '" . $m['mempool_descr'] . " Usage'
});\n";
$i++;
}
$i = 0;
foreach ($disk as $d) {
$common_output[] = '<div class="col-sm-' . $colno . '">
<div id="disk-' . $i . '-' . $unique_id . '" ></div>
</div>';
$disk_js_output .= "var diskgauge" . $i . " = new JustGage({
id: 'disk-" . $i . "-" . $unique_id . "',
value: " . $d['used'] . ",
min: 0,
max: " . $d['total'] . ",
label: 'Mbytes',
valueFontSize: '2px',
title: '" . substr($d['storage_descr'], 0, 20) . " Usage'
});\n";
$i++;
}
$common_output[] = '<script src="js/raphael-min.js"></script>';
$common_output[] = '<script src="js/justgage.js"></script>';
$common_output[] = "<script>
var cpugauge = new JustGage({
id: 'cpu-" . $unique_id . "',
value: " . $cpu . ",
min: 0,
max: 100,
title: 'CPU Usage',
symbol: '%'
});\n";
$common_output[] = $mem_js_output;
$common_output[] = $disk_js_output;
$common_output[] = '</script>';
} else {
$common_output[] = 'You do not have permission to view this device';
}
}