mirror of
https://github.com/Cacti/cacti.git
synced 2026-10-23 03:27:02 +09:00
* style(php): wrap CLI and poller calls without changing execution Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * fix(ci): review security inventories after poller wrapping Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * test(boost): compare handoff source contracts by PHP tokens Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * style(php): wrap poller constant strings without changing values Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * style(php): wrap poller concatenations with token-preserving source contracts Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * test(cli): assert CDEF repair queries after constant folding Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> * test: verify PHP formatting preserves parsed behavior Signed-off-by: Thomas Vincent <thomasvincent@gmail.com> --------- Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
559 lines
15 KiB
PHP
559 lines
15 KiB
PHP
#!/usr/bin/env php
|
|
<?php
|
|
/*
|
|
+-------------------------------------------------------------------------+
|
|
| Copyright (C) 2004-2026 The Cacti Group |
|
|
| |
|
|
| This program is free software; you can redistribute it and/or |
|
|
| modify it under the terms of the GNU General Public License |
|
|
| as published by the Free Software Foundation; either version 2 |
|
|
| of the License, or (at your option) any later version. |
|
|
| |
|
|
| This program is distributed in the hope that it will be useful, |
|
|
| but WITHOUT ANY WARRANTY; without even the implied warranty of |
|
|
| MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|
|
| GNU General Public License for more details. |
|
|
+-------------------------------------------------------------------------+
|
|
| Cacti: The Complete RRDtool-based Graphing Solution |
|
|
+-------------------------------------------------------------------------+
|
|
| This code is designed, written, and maintained by the Cacti Group. See |
|
|
| about.php and/or the AUTHORS file for specific developer information. |
|
|
+-------------------------------------------------------------------------+
|
|
| http://www.cacti.net/ |
|
|
+-------------------------------------------------------------------------+
|
|
*/
|
|
|
|
if (function_exists('pcntl_async_signals')) {
|
|
pcntl_async_signals(true);
|
|
} else {
|
|
declare(ticks = 100);
|
|
}
|
|
|
|
$parent_pid = '';
|
|
|
|
if (function_exists('posix_getppid')) {
|
|
$parent_pid = posix_getppid();
|
|
}
|
|
|
|
if (function_exists('pcntl_signal')) {
|
|
pcntl_signal(SIGTERM, 'sig_handler');
|
|
pcntl_signal(SIGINT, 'sig_handler');
|
|
pcntl_signal(SIGABRT, 'sig_handler');
|
|
pcntl_signal(SIGQUIT, 'sig_handler');
|
|
pcntl_signal(SIGSEGV, 'sig_handler');
|
|
}
|
|
|
|
error_reporting(0);
|
|
|
|
// define STDOUT/STDIN file descriptors if not running under CLI
|
|
if (php_sapi_name() != 'cli') {
|
|
define('STDIN', fopen('php://stdin', 'r'));
|
|
define('STDOUT', fopen('php://stdout', 'w'));
|
|
}
|
|
|
|
// make sure data is flushed immediately
|
|
ob_implicit_flush();
|
|
ini_set('output_buffering', 'Off');
|
|
|
|
global $environ, $poller_id, $connection;
|
|
|
|
// some debugging
|
|
$pid = getmypid();
|
|
$ctr = 0;
|
|
$poller_id = 1;
|
|
$environ = 'cmd';
|
|
$conn_mode = 'online';
|
|
$legacy = true;
|
|
$options = [];
|
|
$help = false;
|
|
$version = false;
|
|
|
|
$called_by_script_server = false;
|
|
|
|
$shortopts = 'VvHh';
|
|
|
|
$longopts = [
|
|
'environ::',
|
|
'poller::',
|
|
'mode::',
|
|
'version',
|
|
'help'
|
|
];
|
|
|
|
$options = getopt($shortopts, $longopts);
|
|
|
|
if (sizeof($options)) {
|
|
foreach ($options as $arg => $value) {
|
|
$allow_multi = false;
|
|
|
|
switch($arg) {
|
|
case 'enviorn':
|
|
$environ = $value;
|
|
|
|
break;
|
|
case 'poller':
|
|
$poller_id = $value;
|
|
|
|
break;
|
|
case 'mode':
|
|
$conn_mode = $value;
|
|
|
|
break;
|
|
case 'help':
|
|
$help = true;
|
|
|
|
break;
|
|
case 'version':
|
|
$version = true;
|
|
|
|
break;
|
|
}
|
|
}
|
|
} elseif ($_SERVER['argc'] >= 2) {
|
|
if (in_array('spine', $_SERVER['argv'], true)) {
|
|
$environ = 'spine';
|
|
} elseif (in_array('realtime', $_SERVER['argv'], true)) {
|
|
$environ = 'realtime';
|
|
} elseif (in_array('cmd', $_SERVER['argv'], true) || in_array('cmd.php', $_SERVER['argv'], true)) {
|
|
$environ = 'cmd';
|
|
} else {
|
|
$environ = 'other';
|
|
}
|
|
|
|
if ($_SERVER['argc'] == 3) {
|
|
$poller_id = $_SERVER['argv'][2];
|
|
} else {
|
|
$poller_id = 1;
|
|
}
|
|
}
|
|
|
|
require(__DIR__ . '/include/cli_check.php');
|
|
|
|
if ($help) {
|
|
display_help();
|
|
|
|
exit(0);
|
|
}
|
|
|
|
if ($version) {
|
|
display_version();
|
|
|
|
exit(0);
|
|
}
|
|
|
|
// record the script start time
|
|
$start = microtime(true);
|
|
|
|
$include_file = '';
|
|
|
|
if (CACTI_SERVER_OS == 'win32') {
|
|
cacti_log('DEBUG: GETCWD: ' . cacti_strtolower(strtr((string) getcwd(),'\\','/')),
|
|
false,
|
|
'PHPSVR',
|
|
POLLER_VERBOSITY_DEBUG);
|
|
cacti_log('DEBUG: DIRNAM: ' . cacti_strtolower(strtr(__DIR__,'\\','/')), false, 'PHPSVR', POLLER_VERBOSITY_DEBUG);
|
|
} else {
|
|
cacti_log('DEBUG: GETCWD: ' . strtr((string) getcwd(),'\\','/'), false, 'PHPSVR', POLLER_VERBOSITY_DEBUG);
|
|
cacti_log('DEBUG: DIRNAM: ' . strtr(__DIR__,'\\','/'), false, 'PHPSVR', POLLER_VERBOSITY_DEBUG);
|
|
}
|
|
|
|
cacti_log('DEBUG: SERVER: ' . $environ . ' PARENT: ' . $parent_pid, false, 'PHPSVR', POLLER_VERBOSITY_DEBUG);
|
|
cacti_log('DEBUG: FILENM: ' . __FILE__, false, 'PHPSVR', POLLER_VERBOSITY_DEBUG);
|
|
|
|
// if multiple polling intervals are defined, compensate for them
|
|
$polling_interval = read_config_option('poller_interval');
|
|
|
|
if (!empty($polling_interval)) {
|
|
define('MAX_POLLER_RUNTIME', $polling_interval);
|
|
} else {
|
|
define('MAX_POLLER_RUNTIME', 300);
|
|
}
|
|
|
|
// Let PHP only run 1 second longer than the max runtime
|
|
ini_set('max_execution_time', MAX_POLLER_RUNTIME + 1);
|
|
|
|
// send status back to the server
|
|
cacti_log('PHP Script Server has Started - Parent is ' . $environ, false, 'PHPSVR', POLLER_VERBOSITY_HIGH);
|
|
|
|
fputs(STDOUT, 'PHP Script Server has Started - Parent is ' . $environ . "\n");
|
|
fflush(STDOUT);
|
|
|
|
require_once(__DIR__ . '/lib/snmp.php');
|
|
snmp_auth_cache_load();
|
|
|
|
// process waits for input and then calls functions as required
|
|
while (1) {
|
|
$result = '';
|
|
|
|
$input_string = fgets(STDIN, 1024);
|
|
$function = '';
|
|
$parameters = '';
|
|
$parameter_array = [];
|
|
|
|
$isParentRunning = true;
|
|
|
|
if (empty($input_string)) {
|
|
if (!empty($parent_pid)) {
|
|
if (cacti_strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') {
|
|
$out = [];
|
|
$ppid = intval($parent_pid);
|
|
exec("TASKLIST /FO LIST /FI \"PID eq $ppid\"", $out);
|
|
|
|
$isParentRunning = (cacti_count($out) > 1);
|
|
} elseif (function_exists('posix_kill')) {
|
|
$isParentRunning = posix_kill(intval($parent_pid), 0);
|
|
}
|
|
}
|
|
|
|
if ($isParentRunning) {
|
|
if (!empty($parent_pid)) {
|
|
cacti_log('WARNING: Input Expected, parent process ' . $parent_pid . ' should have sent non-blank line',
|
|
false,
|
|
'PHPSVR',
|
|
POLLER_VERBOSITY_DEBUG);
|
|
} else {
|
|
cacti_log('WARNING: Input Expected, unable to check parent process', false, 'PHPSVR', POLLER_VERBOSITY_MEDIUM);
|
|
}
|
|
} else {
|
|
cacti_log('WARNING: Parent (' . $parent_pid . ') of Script Server (' . getmypid() . ') has been lost, forcing exit',
|
|
false,
|
|
'PHPSVR',
|
|
POLLER_VERBOSITY_HIGH);
|
|
$input_string = 'quit';
|
|
}
|
|
}
|
|
|
|
if (!empty($input_string)) {
|
|
$input_string = trim($input_string);
|
|
|
|
if (substr($input_string,0,4) == 'quit') {
|
|
if (!$called_by_script_server) {
|
|
fputs(STDOUT, 'PHP Script Server Shutdown request received, exiting' . PHP_EOL);
|
|
fflush(STDOUT);
|
|
cacti_log('DEBUG: PHP Script Server Shutdown request received, exiting', false, 'PHPSVR', POLLER_VERBOSITY_DEBUG);
|
|
}
|
|
db_close();
|
|
|
|
exit(0);
|
|
}
|
|
|
|
if ($input_string != '') {
|
|
// pull off the parameters
|
|
$i = 0;
|
|
|
|
while (true) {
|
|
$pos = strpos($input_string, ' ');
|
|
|
|
if ($pos > 0) {
|
|
switch ($i) {
|
|
case 0:
|
|
// cut off include file as first part of input string and keep rest for further parsing
|
|
$include_file = trim(substr($input_string,0,$pos));
|
|
$input_string = trim((string) strchr($input_string, ' ')) . ' ';
|
|
|
|
break;
|
|
case 1:
|
|
// cut off function as second part of input string and keep rest for further parsing
|
|
$function = trim(substr($input_string,0,$pos), "' ");
|
|
$input_string = trim((string) strchr($input_string, ' ')) . ' ';
|
|
|
|
break;
|
|
case 2:
|
|
// take the rest as parameter(s) to the function stripped off previously
|
|
$parameters = trim($input_string);
|
|
|
|
break 2;
|
|
}
|
|
} else {
|
|
break;
|
|
}
|
|
|
|
$i++;
|
|
}
|
|
|
|
if (!parseArgs($parameters, $parameter_array)) {
|
|
cacti_log("WARNING: Script Server count not parse '$parameters' for $function", false, 'PHPSVR');
|
|
fputs(STDOUT, "U\n");
|
|
fflush(STDOUT);
|
|
|
|
continue;
|
|
}
|
|
|
|
cacti_log("DEBUG: PID[$pid] CTR[$ctr] INC: '" . basename($include_file) .
|
|
"' FUNC: '$function' PARMS: '" . implode('\', \'',$parameter_array) .
|
|
"'", false, 'PHPSVR', POLLER_VERBOSITY_DEBUG);
|
|
|
|
// validate the existence of the function, and include if applicable
|
|
if (!function_exists($function)) {
|
|
if (file_exists($include_file)) {
|
|
/**
|
|
* quirk in php on Windows, believe it or not....
|
|
* path must be lower case
|
|
*/
|
|
if (CACTI_SERVER_OS == 'win32') {
|
|
$include_file = cacti_strtolower($include_file);
|
|
}
|
|
|
|
/**
|
|
* set this variable so the calling script can determine if it was called
|
|
* by the script server or stand-alone
|
|
*/
|
|
$called_by_script_server = true;
|
|
|
|
// turn on output buffering to avoid problems with nasty scripts
|
|
ob_start();
|
|
require_once($include_file);
|
|
ob_end_clean();
|
|
|
|
error_reporting(0);
|
|
} else {
|
|
cacti_log('WARNING: PHP Script File to be included, does not exist', false, 'PHPSVR');
|
|
}
|
|
}
|
|
|
|
if (function_exists($function)) {
|
|
error_reporting(0);
|
|
|
|
if ($parameters == '') {
|
|
$result = call_user_func($function);
|
|
} else {
|
|
$result = call_user_func_array($function, $parameter_array);
|
|
}
|
|
|
|
fputs(STDOUT, trim($result) . "\n");
|
|
fflush(STDOUT);
|
|
|
|
cacti_log("DEBUG: PID[$pid] CTR[$ctr] RESPONSE:'$result'", false, 'PHPSVR', POLLER_VERBOSITY_DEBUG);
|
|
|
|
$ctr++;
|
|
} else {
|
|
cacti_log("WARNING: Function does not exist INC: '" .
|
|
basename($include_file) .
|
|
"' FUNC: '" .
|
|
$function .
|
|
"' PARMS: '" .
|
|
$parameters .
|
|
"'",
|
|
false,
|
|
'PHPSVR');
|
|
fputs(STDOUT, "U\n");
|
|
fflush(STDOUT);
|
|
}
|
|
}
|
|
}
|
|
|
|
// end the process if the runtime exceeds MAX_POLLER_RUNTIME
|
|
if (($start + MAX_POLLER_RUNTIME) < time()) {
|
|
cacti_log('Maximum runtime of ' . MAX_POLLER_RUNTIME . ' seconds exceeded for the Script Server. Exiting.',
|
|
true,
|
|
'PHPSVR');
|
|
|
|
exit(-1);
|
|
}
|
|
}
|
|
|
|
function parseArgs(string $string, array &$str_list, bool $debug = false) : bool {
|
|
$delimiters = ["'", '"'];
|
|
$delimited = false;
|
|
$str_list = [];
|
|
|
|
if ($debug) {
|
|
print "String: '" . $string . "'\n";
|
|
}
|
|
|
|
foreach ($delimiters as $delimiter) {
|
|
if (str_contains($string, $delimiter)) {
|
|
$delimited = true;
|
|
|
|
break;
|
|
}
|
|
}
|
|
|
|
// process the simple case
|
|
if (!$delimited) {
|
|
$str_list = explode(' ', $string);
|
|
|
|
if ($debug) {
|
|
print "Output: '" . implode(',', $str_list) . "'\n";
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
// Break str down into an array of characters and process
|
|
$char_array = str_split($string);
|
|
$escaping = false;
|
|
$indelim = false;
|
|
$parse_ok = true;
|
|
$curstr = '';
|
|
|
|
foreach ($char_array as $char) {
|
|
switch ($char) {
|
|
case '\'':
|
|
case '"':
|
|
if (!$indelim) {
|
|
if (!$escaping) {
|
|
$indelim = true;
|
|
} else {
|
|
$curstr .= $char;
|
|
$escaping = false;
|
|
}
|
|
} elseif (!$escaping) {
|
|
$str_list[] = $curstr;
|
|
$curstr = '';
|
|
$indelim = false;
|
|
} elseif ($escaping) {
|
|
$curstr .= $char;
|
|
$escaping = false;
|
|
}
|
|
|
|
break;
|
|
case '\\':
|
|
if ($indelim) {
|
|
$curstr .= $char;
|
|
} elseif ($escaping) {
|
|
$curstr .= $char;
|
|
$escaping = false;
|
|
} else {
|
|
$escaping = true;
|
|
}
|
|
|
|
break;
|
|
case ' ':
|
|
if ($escaping) {
|
|
$parse_ok = false;
|
|
$msg = 'Parse error attempting to parse string';
|
|
} elseif ($indelim) {
|
|
$curstr .= $char;
|
|
} elseif ($curstr != '') {
|
|
$str_list[] = $curstr;
|
|
$curstr = '';
|
|
}
|
|
|
|
break;
|
|
case '`':
|
|
$parse_ok = false;
|
|
$msg = 'Backtic (`) characters not allowed';
|
|
|
|
break;
|
|
default:
|
|
if ($escaping) {
|
|
$parse_ok = false;
|
|
$msg = 'Parse error attempting to parse string';
|
|
} else {
|
|
$curstr .= $char;
|
|
}
|
|
|
|
break;
|
|
}
|
|
|
|
if (!$parse_ok) {
|
|
break;
|
|
}
|
|
}
|
|
|
|
// Add the last str to the string array
|
|
$msg = 'Unknown error message';
|
|
|
|
if ($indelim || $escaping) {
|
|
$parse_ok = false;
|
|
$msg = 'Parse error attempting to parse string';
|
|
}
|
|
|
|
if (!$parse_ok) {
|
|
print 'ERROR: ' . $msg . " '" . $string . "'\n";
|
|
} elseif ($curstr != '') {
|
|
$str_list[] = $curstr;
|
|
}
|
|
|
|
if ($debug) {
|
|
print "Output: '" . implode(',', $str_list) . "'\n";
|
|
}
|
|
|
|
return $parse_ok;
|
|
}
|
|
|
|
/**
|
|
* sig_handler - properly handle signals and shutdown
|
|
*
|
|
* @param int $signo
|
|
*
|
|
* @return void
|
|
*/
|
|
function sig_handler(int $signo) : void {
|
|
global $include_file, $function, $parameters;
|
|
|
|
switch ($signo) {
|
|
case SIGTERM:
|
|
case SIGINT:
|
|
case SIGABRT:
|
|
case SIGQUIT:
|
|
case SIGSEGV:
|
|
cacti_log("WARNING: Script Server terminated with signal '$signo' in file:'" .
|
|
basename($include_file) .
|
|
"', function:'$function', params:'$parameters'",
|
|
false,
|
|
'PHPSVR',
|
|
POLLER_VERBOSITY_MEDIUM);
|
|
db_close();
|
|
|
|
exit;
|
|
default:
|
|
cacti_log("WARNING: Script Server received signal '$signo' in file:'$include_file', function:'$function', params:'$parameters'",
|
|
false,
|
|
'PHPSVR',
|
|
POLLER_VERBOSITY_HIGH);
|
|
|
|
break;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* display_version - displays version information
|
|
*
|
|
* @return void
|
|
*/
|
|
function display_version() : void {
|
|
$version = get_cacti_version();
|
|
print "Cacti Script Server, Version $version " . COPYRIGHT_YEARS . PHP_EOL;
|
|
}
|
|
|
|
/**
|
|
* display_help - displays help information
|
|
*
|
|
* @return void
|
|
*/
|
|
function display_help() : void {
|
|
display_version();
|
|
|
|
print PHP_EOL;
|
|
print ('usage: script_server.php [environ poller_id] | [ --environ=S ' .
|
|
'--poller=N --mode [--force-level=N] ]') . PHP_EOL . PHP_EOL;
|
|
print 'Cacti\'s Script Server. The Script Server provides a memory resident server for executing php' . PHP_EOL;
|
|
print ('scripts saving reducing the time to process the scripts through ' .
|
|
'pre-compiling them for all consumers.') . PHP_EOL;
|
|
print ('The Script Server can be called using two methods. The first method ' .
|
|
'is the legacy method. When using') . PHP_EOL;
|
|
print ('the legacy method, the first argument will be the environment, and ' .
|
|
'the second will be the poller id.') . PHP_EOL . PHP_EOL;
|
|
|
|
print ('The modern calling method has multiple options processed by getopt. ' .
|
|
'Those options include:') . PHP_EOL . PHP_EOL;
|
|
|
|
print ' --environ=S The default being \'cmd\', and options being \'spine\', \'cmd\', and \'realtime\'' . PHP_EOL;
|
|
print ' --poller=N The poller id for the Data Collector in use' . PHP_EOL;
|
|
print ' --force-level=N Force the logging at the level specified.' . PHP_EOL;
|
|
print ' --mode=S Force a Database mode \'online\' or \'offline\'. This is only relevant for' . PHP_EOL;
|
|
print ' Remote Data Collectors.' . PHP_EOL . PHP_EOL;
|
|
|
|
print ('If no options are passed to the Script Server, it assumes that the ' .
|
|
'environ is \'cmd\' and the poller id') . PHP_EOL;
|
|
print 'is 1 or the Main Data Collector.' . PHP_EOL . PHP_EOL;
|
|
|
|
print 'It is common that when developing Cacti Data Input methods one will use the Script Server to test' . PHP_EOL;
|
|
print 'scripts prior to creating thousands of Graphs using them. To to that simply create at least' . PHP_EOL;
|
|
print 'one Data Source, start the Script Server, and then copy the Poller Cache entry into a running' . PHP_EOL;
|
|
print 'Script Server. When doing so you should see the output you expect printed to standard output. When' . PHP_EOL;
|
|
print 'running the Script Server, simply enter \'quit\' to exit.' . PHP_EOL . PHP_EOL;
|
|
}
|