librenms-librenms/html/pages/devices.inc.php
Tony Murray 32a7c50189 Use Laravel authentication (#8702)
* Use Laravel for authentication
Support legacy auth methods
Always create DB entry for users (segregate by auth method)

Port api auth to Laravel

restrict poller errors to devices the user has access to

Run checks on every page load.  But set a 5 minute (configurable) timer.
Only run some checks if the user is an admin

Move toastr down a few pixels so it isn't as annoying.

Fix menu not loaded on laravel pages when twofactor is enabled for the system, but disabled for the user.
Add two missing menu entries in the laravel menu

Rewrite 2FA code
Simplify some and verify code before applying

Get http-auth working
Handle legacy $_SESSION differently.  Allows Auth::once(), etc to work.

* Fix tests and mysqli extension check

* remove duplicate Toastr messages

* Fix new items

* Rename 266.sql to 267.sql
2018-09-11 07:51:35 -05:00

479 lines
19 KiB
PHP

<?php
/*
* This program is free software: you can redistribute it and/or modify it
* under the terms of the GNU General Public License as published by the
* Free Software Foundation, either version 3 of the License, or (at your
* option) any later version. Please see LICENSE.txt at the top level of
* the source code distribution for details.
*
* @package LibreNMS
* @subpackage webui
* @link http://librenms.org
* @copyright 2017 LibreNMS
* @author LibreNMS Contributors
*/
use LibreNMS\Authentication\LegacyAuth;
$pagetitle[] = "Devices";
if (!isset($vars['format'])) {
$vars['format'] = "list_detail";
}
$listoptions = '<span class="devices-font-bold">Lists: </span>';
$menu_options = array('basic' => 'Basic', 'detail' => 'Detail');
$sep = "";
foreach ($menu_options as $option => $text) {
$listoptions .= $sep;
if ($vars['format'] == "list_" . $option) {
$listoptions .= '<span class="pagemenu-selected">';
}
$listoptions .= '<a href="' . generate_url($vars, array('format' => "list_" . $option)) . '">' . $text . '</a>';
if ($vars['format'] == "list_" . $option) {
$listoptions .= '</span>';
}
$sep = " | ";
}
$listoptions .= '&nbsp;&nbsp;&nbsp;<span class="devices-font-bold">Graphs: </span>';
$menu_options = array('bits' => 'Bits',
'processor' => 'CPU',
'ucd_load' => 'Load',
'mempool' => 'Memory',
'uptime' => 'Uptime',
'storage' => 'Storage',
'diskio' => 'Disk I/O',
'poller_perf' => 'Poller',
'ping_perf' => 'Ping',
'temperature' => 'Temperature'
);
$sep = "";
foreach ($menu_options as $option => $text) {
$listoptions .= $sep;
if ($vars['format'] == 'graph_' . $option) {
$listoptions .= '<span class="pagemenu-selected">';
}
$listoptions .= '<a href="' . generate_url($vars, array('format' => 'graph_' . $option, 'from' => '-24h', 'to' => 'now')) . '">' . $text . '</a>';
if ($vars['format'] == 'graph_' . $option) {
$listoptions .= '</span>';
}
$sep = " | ";
}
$headeroptions = '<select name="type" id="type" onchange="window.open(this.options[this.selectedIndex].value,\'_top\')" class="devices-graphs-select">';
$type = 'device';
foreach (get_graph_subtypes($type) as $avail_type) {
$display_type = is_mib_graph($type, $avail_type) ? $avail_type : nicecase($avail_type);
if ('graph_' . $avail_type == $vars['format']) {
$is_selected = 'selected';
} else {
$is_selected = '';
}
$headeroptions .= '<option value="' . generate_url($vars, array('format' => 'graph_' . $avail_type, 'from' => $vars['from'] ?: $config['time']['day'], 'to' => $vars['to'] ?: $config['time']['now'])) . '" ' . $is_selected . '>' . $display_type . '</option>';
}
$headeroptions .= '</select>';
if (isset($vars['searchbar']) && $vars['searchbar'] == "hide") {
$headeroptions .= '<a href="' . generate_url($vars, array('searchbar' => '')) . '">Restore Search</a>';
} else {
$headeroptions .= '<a href="' . generate_url($vars, array('searchbar' => 'hide')) . '">Remove Search</a>';
}
$headeroptions .= ' | ';
if (isset($vars['bare']) && $vars['bare'] == "yes") {
$headeroptions .= '<a href="' . generate_url($vars, array('bare' => '')) . '">Restore Header</a>';
} else {
$headeroptions .= '<a href="' . generate_url($vars, array('bare' => 'yes')) . '">Remove Header</a>';
}
list($format, $subformat) = explode("_", $vars['format'], 2);
if ($format == "graph") {
if (empty($vars['from'])) {
$graph_array['from'] = $config['time']['day'];
} else {
$graph_array['from'] = $vars['from'];
}
if (empty($vars['to'])) {
$graph_array['to'] = $config['time']['now'];
} else {
$graph_array['to'] = $vars['to'];
}
echo '<div class="panel panel-default panel-condensed">';
echo '<div class="panel-heading">';
echo '<div class="row" style="padding: 0px 10px 0px 10px;">';
echo '<div class="pull-left">' . $listoptions . '</div>';
echo '<div class="pull-right">' . $headeroptions . '</div>';
echo '<div class="col-md-12" style="padding: 10px 0px 0px 0px;">';
include_once 'includes/print-date-selector.inc.php';
echo '</div>';
echo '</div>';
echo '</div>';
echo '<div class="panel-body">';
$sql_param = array();
if (isset($vars['state'])) {
if ($vars['state'] == 'up') {
$state = '1';
} elseif ($vars['state'] == 'down') {
$state = '0';
}
}
if (!empty($vars['searchquery'])) {
$where .= ' AND (sysName LIKE ? OR hostname LIKE ? OR hardware LIKE ? OR os LIKE ? OR location LIKE ?)';
$sql_param += array_fill(count($param), 5, '%' . $vars['searchquery'] . '%');
}
if (!empty($vars['os'])) {
$where .= " AND os = ?";
$sql_param[] = $vars['os'];
}
if (!empty($vars['version'])) {
$where .= " AND version = ?";
$sql_param[] = $vars['version'];
}
if (!empty($vars['hardware'])) {
$where .= " AND hardware = ?";
$sql_param[] = $vars['hardware'];
}
if (!empty($vars['features'])) {
$where .= " AND features = ?";
$sql_param[] = $vars['features'];
}
if (!empty($vars['type'])) {
if ($vars['type'] == 'generic') {
$where .= " AND ( type = ? OR type = '')";
$sql_param[] = $vars['type'];
} else {
$where .= " AND type = ?";
$sql_param[] = $vars['type'];
}
}
if (!empty($vars['state'])) {
$where .= " AND status= ?";
$sql_param[] = $state;
$where .= " AND disabled='0' AND `ignore`='0'";
$sql_param[] = '';
}
if (!empty($vars['disabled'])) {
$where .= " AND disabled= ?";
$sql_param[] = $vars['disabled'];
}
if (!empty($vars['ignore'])) {
$where .= " AND `ignore`= ?";
$sql_param[] = $vars['ignore'];
}
if (!empty($vars['location']) && $vars['location'] == "Unset") {
$location_filter = '';
}
if (!empty($vars['location'])) {
$location_filter = $vars['location'];
}
if (!empty($vars['group'])) {
require_once('../includes/device-groups.inc.php');
$where .= " AND ( ";
foreach (GetDevicesFromGroup($vars['group']) as $dev) {
$where .= "device_id = ? OR ";
$sql_param[] = $dev;
}
$where = substr($where, 0, strlen($where) - 3);
$where .= " )";
}
$query = "SELECT * FROM `devices` WHERE 1 ";
if (isset($where)) {
$query .= $where;
}
$query .= " ORDER BY hostname";
$row = 1;
foreach (dbFetchRows($query, $sql_param) as $device) {
if (is_integer($row / 2)) {
$row_colour = $config['list_colour']['even'];
} else {
$row_colour = $config['list_colour']['odd'];
}
if (device_permitted($device['device_id'])) {
if (!$location_filter || $device['location'] == $location_filter) {
$graph_type = "device_" . $subformat;
if ($_SESSION['widescreen']) {
$width = 270;
} else {
$width = 315;
}
$graph_array_new = array();
$graph_array_new['type'] = $graph_type;
$graph_array_new['device'] = $device['device_id'];
$graph_array_new['height'] = '110';
$graph_array_new['width'] = $width;
$graph_array_new['legend'] = 'no';
$graph_array_new['title'] = 'yes';
$graph_array_new['from'] = $graph_array['from'];
$graph_array_new['to'] = $graph_array['to'];
$graph_array_zoom = $graph_array_new;
$graph_array_zoom['height'] = '150';
$graph_array_zoom['width'] = '400';
$graph_array_zoom['legend'] = 'yes';
$link_array = $graph_array;
$link_array['page'] = 'graphs';
$link_array['type'] = $graph_type;
$link_array['device'] = $device['device_id'];
unset($link_array['height'], $link_array['width']);
$overlib_link = generate_url($link_array);
echo '<div class="devices-overlib-box" style="min-width:' . ($width + 90) . '; max-width: ' . ($width + 90) . '">';
echo '<div class="panel panel-default">';
echo overlib_link($overlib_link, generate_lazy_graph_tag($graph_array_new), generate_graph_tag($graph_array_zoom), null);
echo "</div></div>\n\n";
}
}
}
echo '</div>';
} else {
if (LegacyAuth::user()->hasGlobalRead()) {
$os = "SELECT `os` FROM `devices` AS D WHERE 1 GROUP BY `os` ORDER BY `os`";
$ver = "SELECT `version` FROM `devices` AS D WHERE 1 GROUP BY `version` ORDER BY `version`";
$platform = "SELECT `hardware` FROM `devices` AS D WHERE 1 GROUP BY `hardware` ORDER BY `hardware`";
$features = "SELECT `features` FROM `devices` AS D WHERE 1 GROUP BY `features` ORDER BY `features`";
$types = "SELECT `type` FROM `devices` AS D WHERE 1 GROUP BY `type` ORDER BY `type`";
} else {
$os = "SELECT `os` FROM `devices` AS `D`, `devices_perms` AS `P` WHERE `P`.`user_id` = ? AND `P`.`device_id` = `D`.`device_id` GROUP BY `os` ORDER BY `os`";
$ver = "SELECT `version` FROM `devices` AS `D`, `devices_perms` AS `P` WHERE `P`.`user_id` = ? AND `P`.`device_id` = `D`.`device_id` GROUP BY `version` ORDER BY `version`";
$platform = "SELECT `hardware` FROM `devices` AS `D`, `devices_perms` AS `P` WHERE `P`.`user_id` = ? AND `P`.`device_id` = `D`.`device_id` GROUP BY `hardware` ORDER BY `hardware`";
$features = "SELECT `features` FROM `devices` AS `D`, `devices_perms` AS `P` WHERE `P`.`user_id` = ? AND `P`.`device_id` = `D`.`device_id` GROUP BY `features` ORDER BY `features`";
$types = "SELECT `type` FROM `devices` AS `D`, `devices_perms` AS `P` WHERE `P`.`user_id` = ? AND `P`.`device_id` = `D`.`device_id` GROUP BY `type` ORDER BY `type`";
$param[] = LegacyAuth::id();
}
$os_options = "<select name='os' id='os' class='form-control input-sm'>";
$os_options .= "<option value=''>All OSes</option>";
foreach (dbFetch($os, $param) as $data) {
if ($data['os']) {
$tmp_os = clean_bootgrid($data['os']);
if ($tmp_os == $vars['os']) {
$os_selected = 'selected';
} else {
$os_selected = '';
}
$os_options .= "<option value='" . $tmp_os . "' " . $os_selected . ">" . $config['os'][$tmp_os]['text'] . "</option>";
}
}
$os_options .= "<select>";
$ver_options = "<select name='version' id='version' class='form-control input-sm'>";
$ver_options .= "<option value=''>All Versions</option>";
foreach (dbFetch($ver, $param) as $data) {
if ($data['version']) {
$tmp_version = clean_bootgrid($data['version']);
if ($tmp_version == $vars['version']) {
$ver_selected = 'selected';
} else {
$ver_selected = '';
}
$ui_version = strlen($tmp_version) > 15 ? substr($tmp_version, 0, 15) . "..." : $tmp_version;
$ver_options .= "<option value='" . $tmp_version . "' " . $ver_selected . ">" . $ui_version . "</option>";
}
}
$ver_options .= "</select>";
$platform_options = "<select name='hardware' id='hardware' class='form-control input-sm'>";
$platform_options .= "<option value=''>All Platforms</option>";
foreach (dbFetch($platform, $param) as $data) {
if ($data['hardware']) {
$tmp_hardware = clean_bootgrid($data['hardware']);
if ($tmp_hardware == $vars['hardware']) {
$platform_selected = 'selected';
} else {
$platform_selected = '';
}
$platform_options .= "<option value='" . $tmp_hardware . "' " . $platform_selected . ">" . $tmp_hardware . "</option>";
}
}
$platform_options .= "</select>";
$features_options = "<select name='features' id='features' class='form-control input-sm'>";
$features_options .= "<option value=''>All Featuresets</option>";
foreach (dbFetch($features, $param) as $data) {
if ($data['features']) {
$tmp_features = clean_bootgrid($data['features']);
if ($tmp_features == $vars['features']) {
$feature_selected = 'selected';
} else {
$feature_selected = '';
}
$features_options .= "<option value='" . $tmp_features . "' " . $feature_selected . ">" . $tmp_features . "</option>";
}
}
$features_options .= "</select>";
$locations_options = "<select name='location' id='location' class='form-control input-sm'>";
$locations_options .= "<option value=''>All Locations</option>";
foreach (getlocations() as $location) {
if ($location) {
$location = clean_bootgrid($location);
if ($location == $vars['location']) {
$location_selected = 'selected';
} else {
$location_selected = '';
}
$ui_location = strlen($location) > 15 ? substr($location, 0, 15) . "..." : $location;
$locations_options .= "<option value='" . $location . "' " . $location_selected . ">" . $ui_location . "</option>";
}
}
$locations_options .= "</select>";
$types_options = "<select name='type' id='type' class='form-control input-sm'>";
$types_options .= "<option value=''>All Device Types</option>";
foreach (dbFetch($types, $param) as $data) {
if ($data['type']) {
if ($data['type'] == $vars['type']) {
$type_selected = 'selected';
} else {
$type_selected = '';
}
$types_options .= "<option value='" . $data['type'] . "' " . $type_selected . ">" . ucfirst($data['type']) . "</option>";
}
}
$types_options .= "</select>";
echo '
<div class="panel panel-default panel-condensed">
<div class="panel-heading">
<div class="row" style="padding: 0px 10px 0px 10px;">
<div class="pull-left">
' . $listoptions . '
</div>
<div class="pull-right">
' . $headeroptions . '
</div>
</div>
</div>
<div class="table-responsive">
<table id="devices" class="table table-hover table-condensed table-striped">
<thead>
<tr>
';
if ($subformat == "detail") {
echo '<th data-column-id="status" data-formatter="status" data-width="7px" data-searchable="false">&nbsp;</th>';
echo '<th data-column-id="icon" data-width="70px" data-searchable="false" data-formatter="icon">Vendor</th>';
}
if ($subformat != "detail") {
echo '<th data-column-id="status" data-formatter="status" data-width="7px" data-searchable="false">&nbsp;</th>';
echo '<th data-column-id="hostname" data-order="asc" data-formatter="device">Device</th>';
} else {
echo '<th data-column-id="hostname" data-order="asc">Device</th>';
}
if ($subformat == "detail") {
echo '<th data-column-id="ports" data-width="100px" data-sortable="false" data-searchable="false">Metrics</th>';
}
echo '
<th data-column-id="hardware">Platform</th>
<th data-column-id="os">Operating System</th>
<th data-column-id="uptime">Uptime</th>
';
if ($subformat == "detail") {
echo '<th data-column-id="location">Location</th>';
}
echo '
<th data-column-id="actions" data-width="90px" data-sortable="false" data-searchable="false" data-header-css-class="device-table-header-actions">Actions</th>
</tr>
</thead>
</table>
</div>
</div>
';
?>
<script>
var grid = $("#devices").bootgrid({
ajax: true,
rowCount: [50, 100, 250, -1],
columnSelection: true,
formatters: {
"status": function (column, row) {
return "<span class=\"alert-status " + row.extra + "\"></span>";
},
"icon": function (column, row) {
return "<span class=\"device-table-icon\">" + row.icon + "</span>";
},
"device": function (column, row) {
return "<span>" + row.hostname + "</span>";
},
},
templates: {
header: "<div class=\"devices-headers-table-menu\" style=\"padding:6px 6px 0px 0px;\"><p class=\"{{css.actions}}\"></p></div><div class=\"row\"></div>"
},
post: function () {
return {
id: "devices",
format: ' <?php echo mres($vars['format']); ?>',
searchquery: '<?php echo htmlspecialchars($vars['searchquery']); ?>',
os: '<?php echo mres($vars['os']); ?>',
version: '<?php echo mres($vars['version']); ?>',
hardware: '<?php echo mres($vars['hardware']); ?>',
features: '<?php echo mres($vars['features']); ?>',
location: '<?php echo mres($vars['location']); ?>',
type: '<?php echo mres($vars['type']); ?>',
state: '<?php echo mres($vars['state']); ?>',
disabled: '<?php echo mres($vars['disabled']); ?>',
ignore: '<?php echo mres($vars['ignore']); ?>',
group: '<?php echo mres($vars['group']); ?>',
};
},
url: "ajax_table.php"
});
<?php
if (!isset($vars['searchbar']) && $vars['searchbar'] != "hide") {
?>
$(".devices-headers-table-menu").append(
"<div class='pull-left'>" +
"<form method='post' action='' class='form-inline devices-search-header' role='form'>" +
"<div class='form-group'>" +
"<input type='text' name='searchquery' id='searchquery' value=''<?php echo $vars['searchquery']; ?>'' class='form-control input-sm' placeholder='Search'>" +
"</div>" +
"<div class='form-group'><?php echo $os_options; ?></div>" +
"<div class='form-group'><?php echo $ver_options; ?></div>" +
"<div class='form-group'><?php echo $platform_options; ?></div>" +
"<div class='form-group'><?php echo $features_options; ?></div>" +
"<div class='form-group'><?php echo $locations_options; ?></div>" +
"<div class='form-group'><?php echo $types_options; ?></div>" +
"<input type='submit' class='btn btn-default input-sm devices-input-small' value='Search'>" +
"<a href='<?php echo generate_url($vars) ?>' title='Update the browser URL to reflect the search criteria.' class='btn btn-default input-sm devices-input-small'>Update URL</a>" +
"<a href='<?php echo generate_url(array('page' => 'devices', 'section' => $vars['section'], 'bare' => $vars['bare'])) ?>' title='Reset criteria to default.' class='btn btn-default input-sm devices-input-small'>Reset</a>" +
"</form>" +
"</div>"
);
<?php
}
?>
</script>
<?php
}