Files
cacti/color_templates.php
TheWitness 41e6d9e033 security: consolidate verified GHSA fixes for develop (batch 4) (#8145)
* security: consolidate verified GHSA fixes for develop (batch 4)

Develop counterparts of the 1.2.x batch-4 fixes in #8144, re-verified against
current develop HEAD.

- GHSA-4rmr-wvjq-qxc2: include/auth.php Basic Auth and guest branches fall
  through to the per-page realm check instead of returning early.
- GHSA-j67j-wpm4-9g3x: the pre-dispatch update_policy branch in user_admin.php
  and user_group_admin.php requires a CSRF-token POST. The denylist -> allowlist
  redesign is tracked for 1.3 in #8143.
- GHSA-2p3x-f5jm-rg6p: the View-Graphs -> poller RCE chain is broken by the
  realm check (4rmr), the update_policy guard (j67j) and shell-free webhits (x5pw).
- GHSA-x5pw-cg7j-mj4r: scripts/webhits.pl runs wc through a shell-free list-form open.
- GHSA-9737-rqh3-h7fh: names interpolated into raise_message() now use __esc()
  across the UI; URL- and HTML-bearing messages are excluded.
- GHSA-9x9h-2577-9w86: the colordropdown input is built as a node and the label
  is no longer round-tripped through parseHTML (the list item already used
  createTextNode on develop).
- GHSA-h96j-8xhc-2p3w: remote_agent.php authorizes on $_SERVER['REMOTE_ADDR'],
  not get_client_addr(), which honours client-settable proxy headers.

Regression guards under tests/Unit/Security/{Auth,Csrf,Xss,ShellInjection}.
php -l, check-changelog.py and the sink/architectural baselines all pass.

* chore: reference PR #8145 on the batch-4 1.3.0-dev CHANGELOG entries

* security: resolve develop merge - keep id-only xmlerror unescaped (matches #8141 h745 test)

* security(GHSA-j67j): use REQUEST_METHOD POST guard instead of raw \ (hardening-pattern-guard)

* security(GHSA-9737): fix review findings - drop double-encoding in __esc, escape missed name sinks, correct plugins format-arg count
2026-10-02 13:10:42 -04:00

920 lines
29 KiB
PHP

<?php
/*
+-------------------------------------------------------------------------+
| Copyright (C) 2004-2026 The Cacti Group |
| |
| This program is free software; you can redistribute it and/or |
| modify it under the terms of the GNU General Public License |
| as published by the Free Software Foundation; either version 2 |
| of the License, or (at your option) any later version. |
| |
| This program is distributed in the hope that it will be useful, |
| but WITHOUT ANY WARRANTY; without even the implied warranty of |
| MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| GNU General Public License for more details. |
+-------------------------------------------------------------------------+
| Cacti: The Complete RRDtool-based Graphing Solution |
+-------------------------------------------------------------------------+
| This code is designed, written, and maintained by the Cacti Group. See |
| about.php and/or the AUTHORS file for specific developer information. |
+-------------------------------------------------------------------------+
| http://www.cacti.net/ |
+-------------------------------------------------------------------------+
*/
require_once('./include/auth.php');
require_once(CACTI_PATH_LIBRARY . '/CactiValidator.php');
use Symfony\Component\Validator\Constraints as Assert;
$actions = [
1 => __('Delete'),
2 => __('Duplicate'),
3 => __('Sync Aggregates')
];
// set default action
set_default_action();
switch (grv('action')) {
case 'save':
form_save();
break;
case 'actions':
form_actions();
break;
case 'template_edit':
top_header();
color_template_edit();
bottom_footer();
break;
case 'ajax_dnd':
color_templates_item_dnd();
break;
case 'item_remove_confirm':
color_item_remove_confirm();
break;
case 'item_remove':
gfrv('color_template_id');
color_item_remove();
header('Location: color_templates.php?action=template_edit&color_template_id=' . grv('id'));
break;
case 'item_movedown':
gfrv('color_template_id');
color_item_movedown();
header('Location: color_templates.php?action=template_edit&color_template_id=' . grv('color_template_id'));
break;
case 'item_moveup':
gfrv('color_template_id');
color_item_moveup();
header('Location: color_templates.php?action=template_edit&color_template_id=' . grv('color_template_id'));
break;
case 'item_edit':
top_header();
color_item_edit();
bottom_footer();
break;
case 'item':
top_header();
color_item();
bottom_footer();
break;
default:
top_header();
color_template();
bottom_footer();
break;
}
/**
* draw_color_template_items_list Draws a nicely formatted list of color items for display
* on an edit form
*
* @param array $item_list An array representing the list of color items. this array should
* come directly from the output of db_fetch_assoc()
* @param string $filename The filename to use when referencing any external url
* @param string $url_data Any extra GET url information to pass on when referencing any
* external url
* @param bool $disable_controls Whether to hide all edit/delete functionality on this form
*/
function draw_color_template_items_list(array $item_list, string $filename, string $url_data, bool $disable_controls) : void {
global $struct_color_template_item;
$display_text = [
['display' => __('Color Item'), 'align' => 'left', 'nohide' => true],
['display' => __('Color'), 'align' => 'left', 'nohide' => true],
['display' => __('Hex'), 'align' => 'left', 'nohide' => true],
];
html_header($display_text, 2);
$i = 1;
$total_items = cacti_sizeof($item_list);
if (cacti_sizeof($item_list)) {
foreach ($item_list as $item) {
// alternating row color
form_alternate_row('line' . $item['color_template_item_id'], true);
print '<td>';
if ($disable_controls == false) {
print "<a class='linkEditMain' href='" . htmle($filename . '?action=item_edit&color_template_item_id=' . $item['color_template_item_id'] . "&$url_data") . "'>";
}
print __('Item # %d', $i);
if ($disable_controls == false) {
print '</a>';
}
print "</td>\n";
print "<td style='" . ((isset($item['hex'])) ? 'background-color:#' . $item['hex'] . ";'" : '') . "></td>\n";
print '<td>' . $item['hex'] . "</td>\n";
if ($disable_controls == false) {
print "<td class='right nowrap'>";
if (read_config_option('drag_and_drop') == '') {
if ($i < $total_items) {
print '<a class="pic ti ti-caret-down-filled moveArrow cactiPostAction" href="#" data-url="' . html_escape_url('color_templates.php?action=item_movedown&color_template_item_id=' . $item['color_template_item_id'] . '&color_template_id=' . $item['color_template_id']) . '" title="' . __esc('Move Down') . '"></a>';
} else {
print '<span class="moveArrowNone"></span>';
}
if ($i > 1 && $i <= $total_items) {
print '<a class="pic ti ti-caret-up-filled moveArrow cactiPostAction" href="#" data-url="' . html_escape_url('color_templates.php?action=item_moveup&color_template_item_id=' . $item['color_template_item_id'] . '&color_template_id=' . $item['color_template_id']) . '" title="' . __esc('Move Up') . '"></a>';
} else {
print '<span class="moveArrowNone"></span>';
}
}
print "<a class='delete deleteMarker ti ti-x' id='" . $item['color_template_id'] . '_' . $item['color_template_item_id'] . "' title='" . __esc('Delete') . "'></a>";
print "</td>\n";
}
form_end_row();
$i++;
}
} else {
print "<tr class='tableRow odd'><td colspan='7'><em>" . __('No Items') . '</em></td></tr>';
}
}
/**
* form_save - The save function
*/
function form_save() : void {
if (isrv('save_component_color')) {
if (isrv('color_template_id')) {
$save1['color_template_id'] = gfrv('color_template_id');
} else {
$save1['color_template_id'] = 0;
}
$save1['name'] = CactiValidator::validateInput(gfrv('name', FILTER_SANITIZE_SPECIAL_CHARS), 'name', [new Assert\NotBlank()], 3);
cacti_log('Saved ID: ' . $save1['color_template_id'] . ' Name: ' . $save1['name'], false, 'AGGREGATE', POLLER_VERBOSITY_DEBUG);
$color_template_id = null;
if (!is_error_message()) {
$color_template_id = sql_save($save1, 'color_templates', 'color_template_id');
cacti_log('Saved ID: ' . $color_template_id, false, 'AGGREGATE', POLLER_VERBOSITY_DEBUG);
if ($color_template_id) {
raise_message(1);
} else {
raise_message(2);
}
}
header('Location: color_templates.php?action=template_edit&color_template_id=' . ($color_template_id === null ? gfrv('color_template_id') : $color_template_id));
} elseif (isrv('save_component_item')) {
// ================= input validation =================
gfrv('color_template_id');
gfrv('color_template_item_id');
gfrv('sequence');
// ====================================================
$items[0] = [];
$sequence = gnrv('sequence');
$color_template_item_id = null;
foreach ($items as $item) {
// generate a new sequence if needed
if (empty($sequence)) {
$sequence = get_next_sequence($sequence, 'sequence', 'color_template_items', 'color_template_id=' . gnrv('color_template_id'), 'color_template_id');
}
$save['color_template_item_id'] = gfrv('color_template_item_id');
$save['color_template_id'] = gfrv('color_template_id');
$save['color_id'] = CactiValidator::validateInput(gnrv('color_id'), 'color_id', [new Assert\Type('numeric')], 3);
$save['sequence'] = $sequence;
if (!is_error_message()) {
$color_template_item_id = sql_save($save, 'color_template_items', 'color_template_item_id');
if ($color_template_item_id) {
raise_message(1);
} else {
raise_message(2);
}
}
$sequence = 0;
}
if (is_error_message()) {
header('Location: color_templates.php?action=item_edit&color_template_item_id=' . ($color_template_item_id === null ? gnrv('color_template_item_id') : $color_template_item_id) . '&color_template_id=' . gnrv('color_template_id'));
exit;
} else {
header('Location: color_templates.php?action=template_edit&color_template_id=' . gnrv('color_template_id'));
exit;
}
}
}
/**
* form_actions the action function
*/
function form_actions() : void {
global $actions;
require_once(CACTI_PATH_LIBRARY . '/api_aggregate.php');
// ================= input validation =================
gfrv('drp_action');
// ====================================================
// if we are to save this form, instead of display it
if (isrv('selected_items')) {
$selected_items = sanitize_unserialize_selected_items(gnrv('selected_items'));
if ($selected_items != false) {
if (grv('drp_action') == '1') { // delete
db_execute('DELETE FROM color_templates WHERE ' . array_to_sql_or($selected_items, 'color_template_id'));
db_execute('DELETE FROM color_template_items WHERE ' . array_to_sql_or($selected_items, 'color_template_id'));
} elseif (gnrv('drp_action') == '2') { // duplicate
for ($i = 0; ($i < cacti_count($selected_items)); $i++) {
duplicate_color_template($selected_items[$i], gnrv('title_format'));
}
} elseif (gnrv('drp_action') == '3') { // sync templates
for ($i = 0; ($i < cacti_count($selected_items)); $i++) {
sync_color_templates($selected_items[$i]);
}
}
}
header('Location: color_templates.php');
exit;
} else {
$ilist = '';
$iarray = [];
// loop through each of the color templates selected on the previous page and get more info about them
foreach ($_POST as $var => $val) {
if (preg_match('/^chk_([0-9]+)$/', $var, $matches)) {
// ================= input validation =================
input_validate_input_number($matches[1], 'chk[1]');
// ====================================================
$name = db_fetch_cell_prepared('SELECT name
FROM color_templates
WHERE color_template_id = ?',
[$matches[1]]);
$ilist .= '<li>' . htmle($name) . '</li>';
$iarray[] = $matches[1];
}
}
$form_data = [
'general' => [
'page' => 'color_templates.php',
'actions' => $actions,
'optvar' => 'drp_action',
'item_array' => $iarray,
'item_list' => $ilist
],
'options' => [
1 => [
'smessage' => __('Click \'Continue\' to Delete the following Color Template.'),
'pmessage' => __('Click \'Continue\' to Delete following Color Templates.'),
'scont' => __('Delete Color Template'),
'pcont' => __('Delete Color Templates')
],
2 => [
'smessage' => __('Click \'Continue\' to Duplicate the following Color Template.'),
'pmessage' => __('Click \'Continue\' to Duplicate following Color Templates.'),
'scont' => __('Duplicate Color Template'),
'pcont' => __('Duplicate Color Templates'),
'extra' => [
'title_format' => [
'method' => 'textbox',
'title' => __('Title Format'),
'default' => '<template_title> (1)',
'width' => 25
]
]
],
3 => [
'smessage' => __('Click \'Continue\' to Synchronize the following Color Template to its Aggregates.'),
'pmessage' => __('Click \'Continue\' to Synchronize the following Color Templates to its Aggregates.'),
'scont' => __('Synchronize Color Template'),
'pcont' => __('Synchronize Color Templates')
],
]
];
form_continue_confirmation($form_data);
}
}
function color_templates_item_dnd() : void {
// ================= Input validation =================
gfrv('id');
// ================= Input validation =================
if (isrv('color_item') && is_array(gnrv('color_item'))) {
$color_items = gnrv('color_item');
if (cacti_sizeof($color_items)) {
$sequence = 1;
foreach ($color_items as $option_id) {
$option = str_replace('line', '', $option_id);
db_execute_prepared('UPDATE color_template_items
SET sequence = ?
WHERE color_template_item_id = ?',
[$sequence, $option]);
$sequence++;
}
}
}
header('Location: color_templates.php?action=template_edit&color_template_id=' . grv('id'));
exit;
}
/**
* color_item_movedown move item down
*/
function color_item_movedown() : void {
// ================= input validation =================
gfrv('color_template_item_id');
gfrv('color_template_id');
// ====================================================
$current_sequence = db_fetch_row_prepared('SELECT color_template_item_id, sequence
FROM color_template_items
WHERE color_template_item_id = ?',
[grv('color_template_item_id')]);
cacti_log('movedown Id: ' . $current_sequence['color_template_item_id'] . ' Seq:' . $current_sequence['sequence'],
false, 'WEBUI', POLLER_VERBOSITY_DEBUG);
$next_sequence = db_fetch_row_prepared('SELECT color_template_item_id, sequence
FROM color_template_items
WHERE sequence > ?
AND color_template_id = ?
ORDER BY sequence ASC limit 1',
[$current_sequence['sequence'], grv('color_template_id')]);
cacti_log('movedown Id: ' . $next_sequence['color_template_item_id'] . ' Seq:' . $next_sequence['sequence'],
false, 'WEBUI', POLLER_VERBOSITY_DEBUG);
db_execute_prepared('UPDATE color_template_items
SET sequence = ?
WHERE color_template_id = ?
AND color_template_item_id = ?',
[$next_sequence['sequence'], grv('color_template_id'), $current_sequence['color_template_item_id']]);
db_execute_prepared('UPDATE color_template_items
SET sequence = ?
WHERE color_template_id = ?
AND color_template_item_id = ?',
[$current_sequence['sequence'], grv('color_template_id'), $next_sequence['color_template_item_id']]);
}
/**
* color_item_moveup move item up
*/
function color_item_moveup() : void {
// ================= input validation =================
gfrv('color_template_item_id');
gfrv('color_template_id');
// ====================================================
$current_sequence = db_fetch_row_prepared('SELECT color_template_item_id, sequence
FROM color_template_items
WHERE color_template_item_id = ?',
[grv('color_template_item_id')]);
cacti_log('moveup Id: ' . $current_sequence['color_template_item_id'] . ' Seq:' . $current_sequence['sequence'],
false, 'AGGREGATE', POLLER_VERBOSITY_DEBUG);
$previous_sequence = db_fetch_row_prepared('SELECT color_template_item_id, sequence
FROM color_template_items
WHERE sequence < ?
AND color_template_id = ?
ORDER BY sequence DESC limit 1',
[$current_sequence['sequence'], grv('color_template_id')]);
cacti_log('moveup Id: ' . $previous_sequence['color_template_item_id'] . ' Seq:' . $previous_sequence['sequence'],
false, 'AGGREGATE', POLLER_VERBOSITY_DEBUG);
db_execute_prepared('UPDATE color_template_items
SET sequence = ?
WHERE color_template_id = ?
AND color_template_item_id = ?',
[$previous_sequence['sequence'], grv('color_template_id'), $current_sequence['color_template_item_id']]);
db_execute_prepared('UPDATE color_template_items
SET sequence = ?
WHERE color_template_id = ?
AND color_template_item_id = ?',
[$current_sequence['sequence'], grv('color_template_id'), $previous_sequence['color_template_item_id']]);
}
function color_item_remove_confirm() : void {
// ================= input validation =================
gfrv('id');
gfrv('color_id');
// ====================================================
form_start('color_templates.php');
html_start_box('', '100%', false, 3, 'center', '');
$template = db_fetch_row_prepared('SELECT *
FROM color_templates
WHERE color_template_id = ?',
[grv('id')]);
$color_item = db_fetch_row_prepared('SELECT *
FROM color_template_items
WHERE color_template_item_id = ?',
[grv('color_id')]);
$color_hex = db_fetch_cell_prepared('SELECT hex
FROM colors
WHERE id = ?',
[$color_item['color_id']]);
?>
<tr>
<td class='topBoxAlt'>
<p><?php print __('Click \'Continue\' to delete the following Color Template Color.'); ?></p>
<p><?php print __('Color Name:'); ?> '<?php print htmle($template['name']); ?>'<br>
<?php print __('Color Hex:'); ?><strong><?php print htmle($color_hex); ?></p>
</td>
</tr>
<tr>
<td class='right'>
<button type='button' class='ui-button ui-corner-all ui-widget' id='cancel' onClick='$("#cdialog").dialog("close");' name='cancel'><?php print __esc('Cancel'); ?></button>
<button type='button' class='ui-button ui-corner-all ui-widget' id='continue' name='continue' title='<?php print __esc('Remove Color Item'); ?>'><?php print __esc('Continue'); ?></button>
</td>
</tr>
<?php
html_end_box();
form_end();
?>
<script type='text/javascript'>
$(function() {
$('#continue').click(function(data) {
var options = {
url: 'color_templates.php?action=item_remove',
redirect: 'color_templates.php?action=template_edit&color_template_id=<?php print (int) grv('id'); ?>'
}
var data = {
__csrf_magic: csrfMagicToken,
color_id: <?php print (int) grv('color_id'); ?>,
id: <?php print (int) grv('id'); ?>
}
postUrl(options, data);
});
});
</script>
<?php
}
/**
* color_item_remove remove item
*/
function color_item_remove() : void {
// ================= input validation =================
gfrv('id');
gfrv('color_id');
// ====================================================
db_execute_prepared('DELETE FROM color_template_items
WHERE color_template_item_id = ?',
[grv('color_id')]);
}
/**
* color_item_edit edit item
*/
function color_item_edit() : void {
global $struct_color_template_item;
// ================= input validation =================
gfrv('color_template_item_id');
gfrv('color_template_id');
// ====================================================
$template = db_fetch_row_prepared('SELECT *
FROM color_templates
WHERE color_template_id = ?',
[grv('color_template_id')]);
if (isrv('color_template_item_id') && (grv('color_template_item_id') > 0)) {
$template_item = db_fetch_row_prepared('SELECT *
FROM color_template_items
WHERE color_template_item_id = ?',
[grv('color_template_item_id')]);
$header_label = __esc('Color Template Items [edit Report Item: %s]', $template['name']);
} else {
$template_item = [];
$header_label = __esc('Color Template Items [new Report Item: %s]', $template['name']);
}
form_start('color_templates.php', 'aggregate_color_item_edit');
html_start_box($header_label, '100%', true, 3, 'center', '');
draw_edit_form([
'config' => ['no_form_tag' => true],
'fields' => inject_form_variables($struct_color_template_item, $template_item)
]);
html_end_box(true, true);
form_hidden_box('color_template_item_id', (array_key_exists('color_template_item_id', $template_item) ? $template_item['color_template_item_id'] : '0'), '');
form_hidden_box('color_template_id', grv('color_template_id'), '0');
form_hidden_box('sequence', (array_key_exists('sequence', $template_item) ? $template_item['sequence'] : '0'), '');
form_hidden_box('save_component_item', '1', '');
form_save_button('color_templates.php?action=template_edit&color_template_id=' . grv('color_template_id'), '', 'color_template_item_id');
}
/**
* color_item show all color template items
*/
function color_item() : void {
// ================= input validation =================
gfrv('color_template_id');
// ====================================================
if (ierv('color_template_id')) {
$template_item_list = [];
$header_label = __('Color Template Items [new]');
} else {
$template_item_list = db_fetch_assoc_prepared('SELECT
cti.color_template_id, cti.color_template_item_id, cti.sequence, colors.hex
FROM color_template_items AS cti
LEFT JOIN colors
ON cti.color_id=colors.id
WHERE cti.color_template_id = ?
ORDER BY cti.sequence ASC',
[grv('color_template_id')]);
$name = db_fetch_cell_prepared('SELECT name
FROM color_templates
WHERE color_template_id = ?',
[grv('color_template_id')]);
$header_label = __esc('Color Template Items [edit: %s]', $name);
}
html_start_box($header_label, '100%', false, 3, 'center', 'color_templates.php?action=item_edit&color_template_id=' . htmlerv('color_template_id'));
draw_color_template_items_list($template_item_list, 'color_templates.php', 'color_template_id=' . htmlerv('color_template_id'), false);
html_end_box();
?>
<script type='text/javascript'>
$(function() {
$('#color_templates_template_edit2_child').attr('id', 'color_item');
$('.cdialog').remove();
$('#main').append("<div class='cdialog' id='cdialog'></div>");
<?php if (read_config_option('drag_and_drop') == 'on') { ?>
$('#color_item').tableDnD({
onDrop: function(table, row) {
loadUrl({url:'color_templates.php?action=ajax_dnd&id=<?php isrv('color_template_id') ? print grv('color_template_id') : print 0; ?>&'+$.tableDnD.serialize()})
}
});
<?php } ?>
$('.delete').click(function (event) {
event.preventDefault();
id = $(this).attr('id').split('_');
request = 'color_templates.php?action=item_remove_confirm&id='+id[0]+'&color_id='+id[1];
$.get(request)
.done(function(data) {
$('#cdialog').html(data);
applySkin();
$('#cdialog').dialog({
title: '<?php print __('Delete Color Item'); ?>',
close: function () { $('.delete').blur(); $('.selectable').removeClass('selected'); },
minHeight: 80,
minWidth: 500
});
})
.fail(function(data) {
getPresentHTTPError(data);
});
}).css('cursor', 'pointer');
});
</script>
<?php
}
/**
* color_template_edit edit the color template
*/
function color_template_edit() : void {
global $image_types, $fields_color_template_template_edit, $struct_aggregate;
require_once(CACTI_PATH_LIBRARY . '/api_aggregate.php');
// ================= input validation =================
gfrv('color_template_id');
// ====================================================
if (!ierv('color_template_id')) {
$template = db_fetch_row_prepared('SELECT * FROM color_templates WHERE color_template_id = ?', [grv('color_template_id')]);
$header_label = __esc('Color Template [edit: %s]', $template['name']);
} else {
$header_label = __('Color Template [new]');
}
form_start('color_templates.php', 'color_template_edit');
html_start_box($header_label, '100%', true, 3, 'center', '');
draw_edit_form(
[
'config' => ['no_form_tag' => true],
'fields' => inject_form_variables($fields_color_template_template_edit, (isset($template) ? $template : []))
]
);
html_end_box(true, true);
form_hidden_box('color_template_id', (isset($template['color_template_id']) ? $template['color_template_id'] : '0'), '');
form_hidden_box('save_component_color', '1', '');
// color item list goes here
if (!ierv('color_template_id')) {
color_item();
}
form_save_button('color_templates.php', 'return', 'color_template_id');
}
function sync_color_templates(int $color_template) : void {
require_once(CACTI_PATH_LIBRARY . '/api_aggregate.php');
$name = db_fetch_cell_prepared('SELECT name
FROM color_templates
WHERE color_template_id = ?',
[$color_template]);
$aggregate_templates = array_rekey(
db_fetch_assoc_prepared('SELECT DISTINCT aggregate_template_id
FROM aggregate_graph_templates_item
WHERE color_template = ?',
[$color_template]),
'aggregate_template_id', 'aggregate_template_id'
);
$found = false;
$templates = 0;
$graphs = 0;
$failed = 0;
if (cacti_sizeof($aggregate_templates)) {
$found = true;
$templates = cacti_sizeof($aggregate_templates);
foreach ($aggregate_templates as $id) {
if (!push_out_aggregates($id)) {
$failed++;
}
}
}
$aggregate_graphs = db_fetch_assoc_prepared('SELECT DISTINCT ag.aggregate_template_id, ag.local_graph_id
FROM aggregate_graphs_graph_item AS agi
LEFT JOIN aggregate_graphs AS ag
ON ag.id=agi.aggregate_graph_id
WHERE (ag.aggregate_template_id > 0 AND ag.template_propogation = "")
OR ag.aggregate_template_id = 0
AND agi.color_template = ?',
[$color_template]);
if (cacti_sizeof($aggregate_graphs)) {
$found = true;
$graphs = cacti_sizeof($aggregate_graphs);
foreach ($aggregate_graphs as $id) {
if (!push_out_aggregates($id['aggregate_template_id'], $id['local_graph_id'])) {
$failed++;
}
}
}
if ($failed > 0) {
raise_message('color_template_sync', __esc('Color Template \'%s\' failed to push out %d Aggregate Templates or Graphs', $name, $failed), MESSAGE_LEVEL_ERROR);
} elseif ($found) {
raise_message('color_template_sync', __esc('Color Template \'%s\' had %d Aggregate Templates pushed out and %d Non-Templated Aggregates pushed out', $name, $templates, $graphs), MESSAGE_LEVEL_INFO);
} else {
raise_message('color_template_sync', __esc('Color Template \'%s\' had no Aggregate Templates or Graphs using this Color Template.', $name, $templates, $graphs), MESSAGE_LEVEL_INFO);
}
}
/**
* color_template maintain color templates
*/
function color_template() : void {
global $actions, $item_rows;
require_once(CACTI_PATH_LIBRARY . '/api_aggregate.php');
// create the page filter
$pageFilter = new CactiTableFilter(__('Color Templates'), 'color_templates.php', 'form_template', 'sess_ct', 'color_templates.php?action=template_edit');
$pageFilter->rows_label = __('Templates');
$pageFilter->has_graphs = true;
$pageFilter->render();
if (grv('rows') == -1) {
$rows = read_config_option('num_rows_table');
} else {
$rows = grv('rows');
}
// form the 'where' clause for our main sql query
$sql_where = '';
if (grv('filter') != '') {
$sql_where = 'WHERE (ct.name LIKE ' . db_qstr('%' . grv('filter') . '%') . ')';
}
if (grv('has_graphs') == 'true') {
$sql_where .= ($sql_where != '' ? ' AND ' : 'WHERE ') . ' (templates>0 OR graphs>0)';
}
$total_rows = db_fetch_cell("SELECT COUNT(*)
FROM color_templates AS ct
$sql_where");
$sql_order = get_order_string();
$sql_limit = ' LIMIT ' . ((int) $rows * ((int) grv('page') - 1)) . ',' . (int) $rows;
$template_list = db_fetch_assoc("SELECT *
FROM color_templates AS ct
$sql_where
$sql_order
$sql_limit");
$nav = html_nav_bar('color_templates.php', MAX_DISPLAY_PAGES, (int) grv('page'), $rows, $total_rows, 5, __('Color Templates'), 'page', 'main');
form_start('color_templates.php', 'chk');
print $nav;
html_start_box('', '100%', false, 3, 'center', '');
$display_text = [
'name' => [
'display' => __('Template Title'),
'sort' => 'ASC'
],
'nosort' => [
'display' => __('Deletable'),
'align' => 'right',
'tip' => __('Color Templates that are in use cannot be Deleted. In use is defined as being referenced by an Aggregate Template.')
],
'graphs' => [
'display' => __('Graphs'),
'align' => 'right',
'sort' => 'DESC'
],
'templates' => [
'display' => __('Templates'),
'align' => 'right',
'sort' => 'DESC'
]
];
html_header_sort_checkbox($display_text, grv('sort_column'), grv('sort_direction'), false);
if (cacti_sizeof($template_list)) {
foreach ($template_list as $template) {
if ($template['templates'] > 0) {
$disabled = true;
} else {
$disabled = false;
}
form_alternate_row('line' . $template['color_template_id'], true);
form_selectable_cell(filter_value($template['name'], grv('filter'), 'color_templates.php?action=template_edit&color_template_id=' . $template['color_template_id'] . '&page=1'), $template['color_template_id']);
form_selectable_cell($disabled ? __('No') : __('Yes'), $template['color_template_id'], '', 'right');
form_selectable_cell(number_format_i18n($template['graphs']), $template['color_template_id'], '', 'right');
form_selectable_cell(number_format_i18n($template['templates']), $template['color_template_id'], '', 'right');
form_checkbox_cell($template['name'], $template['color_template_id'], $disabled);
form_end_row();
}
} else {
print "<tr class='tableRow'><td colspan='" . (cacti_sizeof($display_text) + 1) . "'><em>" . __('No Color Templates Found') . "</em></td></tr>\n";
}
html_end_box(false);
if (cacti_sizeof($template_list)) {
print $nav;
}
// draw the dropdown containing a list of available actions for this form
draw_actions_dropdown($actions);
form_end();
?>
<script type='text/javascript'>
function applyFilter() {
strURL = 'color_templates.php';
strURL += '?rows=' + $('#rows').val();
strURL += '&filter=' + $('#filter').val();
strURL += '&has_graphs=' + $('#has_graphs').is(':checked');
loadUrl({url:strURL})
}
function clearFilter() {
strURL = 'color_templates.php?clear=1';
loadUrl({url:strURL})
}
$(function() {
$('#clear').click(function() {
clearFilter();
});
$('#form_template').submit(function(event) {
event.preventDefault();
applyFilter();
});
});
</script>
<?php
}