Files
librenms-librenms/html/pages/search/packages.inc.php
T
Tony Murray 32a7c50189 Use Laravel authentication (#8702)
* Use Laravel for authentication
Support legacy auth methods
Always create DB entry for users (segregate by auth method)

Port api auth to Laravel

restrict poller errors to devices the user has access to

Run checks on every page load.  But set a 5 minute (configurable) timer.
Only run some checks if the user is an admin

Move toastr down a few pixels so it isn't as annoying.

Fix menu not loaded on laravel pages when twofactor is enabled for the system, but disabled for the user.
Add two missing menu entries in the laravel menu

Rewrite 2FA code
Simplify some and verify code before applying

Get http-auth working
Handle legacy $_SESSION differently.  Allows Auth::once(), etc to work.

* Fix tests and mysqli extension check

* remove duplicate Toastr messages

* Fix new items

* Rename 266.sql to 267.sql
2018-09-11 07:51:35 -05:00

197 lines
6.6 KiB
PHP

<?php
/* Copyright (C) 2014 Daniel Preussker <f0o@devilcode.org>
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
/**
* Package Search
* @author Daniel Preussker <f0o@devilcode.org>
* @copyright 2014 f0o, LibreNMS
* @license GPL
* @package LibreNMS
* @subpackage Search
*/
use LibreNMS\Authentication\LegacyAuth;
print_optionbar_start(28);
?>
<form method="post" action="" class="form-inline" role="form">
<div class="form-group">
<label for="package">Package</label>
<input type="text" name="package" id="package" size=20 value="<?php echo($_POST['package']); ?>" class="form-control input-sm" placeholder="Any" />
</div>
<div class="form-group">
<label for="version">Version</label>
<input type="text" name="version" id="version" size=20 value="<?php echo($_POST['version']); ?>" class="form-control input-sm" placeholder="Any" />
</div>
<div class="form-group">
<label for="version">Arch</label>
<input type="text" name="arch" id="arch" size=20 value="<?php echo($_POST['arch']); ?>" class="form-control input-sm" placeholder="Any" />
</div>
<button type="submit" class="btn btn-default input-sm">Search</button>
</form>
<?php
print_optionbar_end();
if (isset($_POST['results_amount']) && $_POST['results_amount'] > 0) {
$results = $_POST['results'];
} else {
$results = 50;
}
?>
<form method="post" action="search/search=packages/" id="result_form">
<table class="table table-hover table-condensed table-striped">
<tr>
<td colspan="3"><strong>Packages</strong></td>
<td><select name="results" id="results" class="form-control input-sm" onChange="updateResults(this);">
<?php
$result_options = array('10','50','100','250','500','1000','5000');
foreach ($result_options as $option) {
echo "<option value='$option'";
if ($results == $option) {
echo " selected";
}
echo ">$option</option>";
}
?>
</select></td>
</tr>
<?php
$count_query = "SELECT COUNT(*) FROM ( ";
$full_query = "";
$query = 'SELECT packages.name FROM packages,devices ';
$param = array();
if (!LegacyAuth::user()->hasGlobalRead()) {
$query .= " LEFT JOIN `devices_perms` AS `DP` ON `devices`.`device_id` = `DP`.`device_id`";
$sql_where .= " AND `DP`.`user_id`=?";
$param[] = LegacyAuth::id();
}
$query .= " WHERE packages.device_id = devices.device_id AND packages.name LIKE '%".mres($_POST['package'])."%' $sql_where GROUP BY packages.name";
$where = '';
$ver = "";
$opt = "";
if (!empty($_POST['arch'])) {
$where .= ' AND packages.arch = ?';
$param[] = mres($_POST['arch']);
}
if (is_numeric($_REQUEST['device_id'])) {
$where .= " AND packages.device_id = ?";
$param[] = $_REQUEST['device_id'];
}
$count_query .= $query." ) sub";
$query .= $where." ORDER BY packages.name, packages.arch, packages.version";
$count = dbFetchCell($count_query, $param);
if (!isset($_POST['page_number']) && $_POST['page_number'] < 1) {
$page_number = 1;
} else {
$page_number = $_POST['page_number'];
}
$start = ($page_number - 1) * $results;
$full_query = $full_query . $query . " LIMIT $start,$results";
?>
<tr>
<th>Package</th>
<th>Version</th>
<th>Arch</th>
<th>Device</th>
</tr>
<?php
$ordered = array();
foreach (dbFetchRows($full_query, $param) as $entry) {
$tmp = dbFetchRows("SELECT packages.*,devices.hostname FROM packages,devices WHERE packages.device_id=devices.device_id AND packages.name = ?", array($entry['name']));
foreach ($tmp as $entry) {
if (!is_array($ordered[$entry['name']])) {
$ordered[$entry['name']] = array( $entry );
} else {
$ordered[$entry['name']][] = $entry;
}
}
}
if (!empty($_POST['version'])) {
list($opt, $ver) = explode(" ", $_POST['version']);
}
foreach ($ordered as $name => $entry) {
$vers = array();
$arch = array();
$devs = array();
foreach ($entry as $variation) {
$variation['version'] = str_replace(":", ".", $variation['version']);
if (!in_array($variation['version'], $vers) && (empty($ver) || version_compare($variation['version'], $ver, $opt))) {
$vers[] = $variation['version'];
}
if (!in_array($variation['arch'], $arch)) {
$arch[] = $variation['arch'];
}
if (!in_array($variation['hostname'], $devs)) {
unset($variation['version']);
$devs[] = generate_device_link($variation);
}
}
if (sizeof($arch) > 0 && sizeof($vers) > 0) {
?>
<tr>
<td><a href="<?php echo(generate_url(array('page'=>'packages','name'=>$name))); ?>"><?php echo $name; ?></a></td>
<td><?php echo implode('<br/>', $vers); ?></td>
<td><?php echo implode('<br/>', $arch); ?></td>
<td><?php echo implode('<br/>', $devs); ?></td>
</tr>
<?php
}
}
if ((int) ($count / $results) > 0 && $count != $results) {
?>
<tr>
<td colspan="6" align="center"><?php echo generate_pagination($count, $results, $page_number); ?></td>
</tr>
<?php
}
?>
</table>
<input type="hidden" name="page_number" id="page_number" value="<?php echo $page_number; ?>">
<input type="hidden" name="results_amount" id="results_amount" value="<?php echo $results; ?>">
<input type="hidden" name="package" id="results_packages" value="<?php echo $_POST['package']; ?>">
<input type="hidden" name="version" id="results_version" value="<?php echo $_POST['version']; ?>">
<input type="hidden" name="arch" id="results_arch" value="<?php echo $_POST['arch']; ?>">
</form>
<script type="text/javascript">
function updateResults(results) {
$('#results_amount').val(results.value);
$('#page_number').val(1);
$('#result_form').submit();
}
function changePage(page,e) {
e.preventDefault();
$('#page_number').val(page);
$('#result_form').submit();
}
</script>