mirror of
https://github.com/Cacti/cacti.git
synced 2026-10-23 03:27:02 +09:00
TheWitness
0055dd00cc
* security: consolidate verified GHSA fixes for develop (batch 3) Develop counterparts of the 1.2.x fixes in #8138, each re-verified against develop HEAD. - GHSA-77pr-g949-4v5f: spikekill.php also requires is_graph_allowed() on the target graph, not just the Spike Kill realm. - GHSA-w3qw-762w-6g9v: the include/global.php GET action guard fails closed on an array-form action[] before the scalar denylist comparison. - GHSA-xhpr-w454-cc9w: update_poller_cache() casts the stored output_type to int before interpolation. - GHSA-j3px-vw6r-g25x: graphs_new.php escapes stored snmp_index via db_qstr() in the data-query IN() pivot. - GHSA-h745-3r76-g253: graphs_new.php escapes the data-query and field names in the XML parse error messages (__ -> __esc). GHSA-297h-95ff-r767 does not apply on develop: the clog log-file selector renders through the drop_array filter framework, which escapes. tests/Unit/Security/ConsolidatedBatch3Test.php adds source-scanning regression guards. CHANGELOG (1.3.0-dev) updated; php -l, the security baselines, and check-changelog.py all pass. * chore: lead 1.3.0-dev security CHANGELOG entries with the GHSA id Normalize the 1.3.0-dev -security entries to the approved "-security: GHSA-xxxx [CVE-xxxx] Description" form, moving the advisory id to the front. CVE tokens are omitted because none of these advisories have a CVE issued yet (verified via the repository security-advisories API). Covers the five batch-3 entries plus the pre-existing entries that still used the trailing (GHSA-xxxx) form. * chore: use the -security#GHSA-xxxx: form for the 1.3.0-dev CHANGELOG entries Correct the batch-3 and reconciled 1.3.0-dev -security entries to the approved "-security#GHSA-xxxx: CVE-yyyy Description" form (GHSA id in the prefix). No CVE tokens are added because none of these advisories have a CVE issued yet (verified via the repository security-advisories API). * test: split batch-3 security guards into vulnerability-class files; reconcile CHANGELOG - Move the ConsolidatedBatch3Test.php guards into the matching Auth, Csrf, SqlInjection and Xss folders with behavior-based filenames, and strengthen them per review: the GET-guard test asserts the array branch actually returns 405 and exits; the snmp_index test rejects both raw concatenation branches; the parse-error test asserts every name-bearing message uses __esc(). - Append this pull request number to the five new 1.3.0-dev security entries. - Add issued CVE identifiers to the older -security#GHSA CHANGELOG entries (verified via the repository security-advisories API). Entries with no CVE yet, entries that already carried a CVE, and non-GHSA lines are unchanged.
1044 lines
34 KiB
PHP
1044 lines
34 KiB
PHP
<?php
|
|
/*
|
|
+-------------------------------------------------------------------------+
|
|
| Copyright (C) 2004-2026 The Cacti Group |
|
|
| |
|
|
| This program is free software; you can redistribute it and/or |
|
|
| modify it under the terms of the GNU General Public License |
|
|
| as published by the Free Software Foundation; either version 2 |
|
|
| of the License, or (at your option) any later version. |
|
|
| |
|
|
| This program is distributed in the hope that it will be useful, |
|
|
| but WITHOUT ANY WARRANTY; without even the implied warranty of |
|
|
| MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|
|
| GNU General Public License for more details. |
|
|
+-------------------------------------------------------------------------+
|
|
| Cacti: The Complete RRDtool-based Graphing Solution |
|
|
+-------------------------------------------------------------------------+
|
|
| This code is designed, written, and maintained by the Cacti Group. See |
|
|
| about.php and/or the AUTHORS file for specific developer information. |
|
|
+-------------------------------------------------------------------------+
|
|
| http://www.cacti.net/ |
|
|
+-------------------------------------------------------------------------+
|
|
*/
|
|
|
|
require('./include/auth.php');
|
|
require_once(CACTI_PATH_LIBRARY . '/api_data_source.php');
|
|
require_once(CACTI_PATH_LIBRARY . '/api_graph.php');
|
|
require_once(CACTI_PATH_LIBRARY . '/api_tree.php');
|
|
require_once(CACTI_PATH_LIBRARY . '/data_query.php');
|
|
require_once(CACTI_PATH_LIBRARY . '/html_form_template.php');
|
|
require_once(CACTI_PATH_LIBRARY . '/html_graph.php');
|
|
require_once(CACTI_PATH_LIBRARY . '/sort.php');
|
|
require_once(CACTI_PATH_LIBRARY . '/snmp.php');
|
|
require_once(CACTI_PATH_LIBRARY . '/poller.php');
|
|
require_once(CACTI_PATH_LIBRARY . '/template.php');
|
|
require_once(CACTI_PATH_LIBRARY . '/utility.php');
|
|
require_once(CACTI_PATH_LIBRARY . '/CactiValidator.php');
|
|
|
|
use Symfony\Component\Validator\Constraints as Assert;
|
|
|
|
// set default action
|
|
set_default_action();
|
|
|
|
switch (grv('action')) {
|
|
case 'save':
|
|
form_save();
|
|
|
|
break;
|
|
case 'query_reload':
|
|
host_reload_query();
|
|
|
|
header('Location: graphs_new.php?host_id=' . grv('host_id'));
|
|
|
|
break;
|
|
case 'ajax_hosts':
|
|
get_allowed_ajax_hosts(false, false);
|
|
|
|
break;
|
|
case 'ajax_hosts_noany':
|
|
get_allowed_ajax_hosts(false);
|
|
|
|
break;
|
|
case 'ajax_save':
|
|
save_default_query_option();
|
|
|
|
break;
|
|
case 'ajax_save_filter':
|
|
save_user_filter();
|
|
|
|
break;
|
|
default:
|
|
top_header();
|
|
graphs();
|
|
bottom_footer();
|
|
|
|
break;
|
|
}
|
|
|
|
function save_default_query_option() : void {
|
|
$data_query = gfrv('query');
|
|
$default = gfrv('item');
|
|
|
|
set_user_setting('default_sgg_' . $data_query, $default);
|
|
|
|
print __('Default Settings Saved') . "\n";
|
|
}
|
|
|
|
function save_user_filter() : void {
|
|
$rows = gfrv('rows');
|
|
|
|
if ($rows == -1) {
|
|
$rows = read_config_option('num_rows_table');
|
|
}
|
|
|
|
$graph_type = gfrv('graph_type');
|
|
|
|
set_user_setting('num_rows_table', $rows);
|
|
set_user_setting('graph_type', $graph_type);
|
|
}
|
|
|
|
function store_get_selected_dq_index(int $snmp_query_id) : mixed {
|
|
// Always restore the last used filter, otherwise, use the default
|
|
if ($snmp_query_id <= 0) {
|
|
return false;
|
|
}
|
|
|
|
if (isrv('sgg_' . $snmp_query_id)) {
|
|
$selected = gfrv('sgg_' . $snmp_query_id);
|
|
} elseif (isset($_SESSION['sess_sgg_' . $snmp_query_id])) {
|
|
$selected = $_SESSION['sess_sgg_' . $snmp_query_id];
|
|
} else {
|
|
$selected = read_user_setting('default_sgg_' . $snmp_query_id);
|
|
}
|
|
|
|
$_SESSION['sess_sgg_' . $snmp_query_id] = $selected;
|
|
|
|
return $selected;
|
|
}
|
|
|
|
function form_save() : void {
|
|
if (isrv('save_component_graph')) {
|
|
$form_data = [];
|
|
|
|
// summarize the 'create graph from host template/snmp index' stuff into an array
|
|
foreach ($_POST as $var => $val) {
|
|
// save form data
|
|
$form_data[$var] = $val;
|
|
|
|
if (preg_match('/^cg_(\d+)$/', $var, $matches)) {
|
|
$selected_graphs['cg'][$matches[1]][$matches[1]] = true;
|
|
} elseif (preg_match('/^cg_g$/', $var)) {
|
|
if (gnrv('cg_g') > 0) {
|
|
$selected_graphs['cg'][gnrv('cg_g')][gnrv('cg_g')] = true;
|
|
}
|
|
} elseif (preg_match('/^sg_(\d+)_([a-f0-9]{32})$/', $var, $matches)) {
|
|
$selected_graphs['sg'][$matches[1]][gnrv('sgg_' . $matches[1])][$matches[2]] = true;
|
|
}
|
|
|
|
if (str_contains($var, 'sgg_')) {
|
|
$snmp_query_id = intval(str_replace('sgg_', '', $var));
|
|
|
|
input_validate_input_number($snmp_query_id, 'sgg');
|
|
|
|
store_get_selected_dq_index($snmp_query_id);
|
|
}
|
|
}
|
|
|
|
// save the json_encoded form data in case of an error
|
|
$form_data['header'] = false;
|
|
|
|
// every $_POST key lands in $form_data and it is replayed into an
|
|
// inline <script> on the error path, so encode for that context
|
|
$_SESSION['sess_graphs_new_form'] = cacti_js_encode($form_data);
|
|
$_SESSION['sess_grn_returnto'] = 'graphs_new.php';
|
|
|
|
if (!isrv('host_id')) {
|
|
$host_id = 0;
|
|
} else {
|
|
$host_id = gfrv('host_id');
|
|
}
|
|
|
|
if (!isrv('host_template_id')) {
|
|
$host_template_id = 0;
|
|
} else {
|
|
$host_template_id = gfrv('host_template_id');
|
|
}
|
|
|
|
if (isset($selected_graphs)) {
|
|
top_header();
|
|
html_graph_new_graphs('graphs_new.php', $host_id, $host_template_id, $selected_graphs);
|
|
bottom_footer();
|
|
|
|
exit;
|
|
}
|
|
|
|
header('Location: graphs_new.php?host_id=' . $host_id);
|
|
}
|
|
|
|
if (isrv('save_component_new_graphs')) {
|
|
host_new_graphs_save(gfrv('host_id'));
|
|
|
|
header('Location: graphs_new.php?host_id=' . gfrv('host_id'));
|
|
}
|
|
}
|
|
|
|
function host_reload_query() : void {
|
|
// ================= input validation =================
|
|
gfrv('id');
|
|
gfrv('host_id');
|
|
// ====================================================
|
|
|
|
run_data_query(grv('host_id'), grv('id'));
|
|
}
|
|
|
|
function host_new_graphs_save(int $host_id) : void {
|
|
$selected_graphs_array = cacti_unserialize(stripslashes(gnrv('selected_graphs_array')));
|
|
|
|
$values = [];
|
|
$form_data = [];
|
|
|
|
// form an array that contains all of the data on the previous form
|
|
foreach ($_POST as $var => $val) {
|
|
if (preg_match('/^g_(\d+)_(\d+)_(\w+)/', $var, $matches)) { // 1: snmp_query_id, 2: graph_template_id, 3: field_name
|
|
if (empty($matches[1])) { // this is a new graph from template field
|
|
$values['cg'][$matches[2]]['graph_template'][$matches[3]] = $val;
|
|
} else { // this is a data query field
|
|
$values['sg'][$matches[1]][$matches[2]]['graph_template'][$matches[3]] = $val;
|
|
}
|
|
} elseif (preg_match('/^gi_(\d+)_(\d+)_(\d+)_(\w+)/', $var, $matches)) { // 1: snmp_query_id, 2: graph_template_id, 3: graph_template_input_id, 4:field_name
|
|
// ================= input validation =================
|
|
input_validate_input_number($matches[3], 'gi[3]');
|
|
// ====================================================
|
|
|
|
// we need to find out which graph items will be affected by saving this particular item
|
|
$item_list = db_fetch_assoc_prepared('SELECT
|
|
graph_template_item_id
|
|
FROM graph_template_input_defs
|
|
WHERE graph_template_input_id = ?',
|
|
[$matches[3]]);
|
|
|
|
// loop through each item affected and update column data
|
|
if (cacti_sizeof($item_list)) {
|
|
foreach ($item_list as $item) {
|
|
if (empty($matches[1])) { // this is a new graph from template field
|
|
$values['cg'][$matches[2]]['graph_template_item'][$item['graph_template_item_id']][$matches[4]] = $val;
|
|
} else { // this is a data query field
|
|
$values['sg'][$matches[1]][$matches[2]]['graph_template_item'][$item['graph_template_item_id']][$matches[4]] = $val;
|
|
}
|
|
}
|
|
}
|
|
} elseif (preg_match('/^d_(\d+)_(\d+)_(\d+)_(\w+)/', $var, $matches)) { // 1: snmp_query_id, 2: graph_template_id, 3: data_template_id, 4:field_name
|
|
if (empty($matches[1])) { // this is a new graph from template field
|
|
$values['cg'][$matches[2]]['data_template'][$matches[3]][$matches[4]] = $val;
|
|
} else { // this is a data query field
|
|
$values['sg'][$matches[1]][$matches[2]]['data_template'][$matches[3]][$matches[4]] = $val;
|
|
}
|
|
} elseif (preg_match('/^c_(\d+)_(\d+)_(\d+)_(\d+)/', $var, $matches)) {
|
|
/**
|
|
* Custom Data. Need to validate these against the input regular expressions
|
|
*
|
|
* Index offsets
|
|
* 1: snmp_query_id, 2: graph_template_id, 3: data_template_id, 4:data_input_field_id
|
|
*/
|
|
$input_field_id = $matches[4];
|
|
$idata = db_fetch_row_prepared('SELECT *
|
|
FROM data_input_fields
|
|
WHERE id = ?',
|
|
[$input_field_id]);
|
|
|
|
$constraints = [];
|
|
|
|
if ($idata['allow_nulls'] != 'on') {
|
|
$constraints[] = new Assert\NotBlank();
|
|
}
|
|
|
|
if (!empty($idata['regexp_match'])) {
|
|
$constraints[] = new Assert\Regex('/' . $idata['regexp_match'] . '/');
|
|
}
|
|
|
|
$val = CactiValidator::validateInput($val, $var, $constraints, 3);
|
|
|
|
if (empty($matches[1])) { // this is a new graph from template field
|
|
$values['cg'][$matches[2]]['custom_data'][$matches[3]][$matches[4]] = $val;
|
|
} else { // this is a data query field
|
|
$values['sg'][$matches[1]][$matches[2]]['custom_data'][$matches[3]][$matches[4]] = $val;
|
|
}
|
|
} elseif (preg_match('/^di_(\d+)_(\d+)_(\d+)_(\d+)_(\w+)/', $var, $matches)) { // 1: snmp_query_id, 2: graph_template_id, 3: data_template_id, 4:local_data_template_rrd_id, 5:field_name
|
|
if (empty($matches[1])) { // this is a new graph from template field
|
|
$values['cg'][$matches[2]]['data_template_item'][$matches[4]][$matches[5]] = $val;
|
|
} else { // this is a data query field
|
|
$values['sg'][$matches[1]][$matches[2]]['data_template_item'][$matches[4]][$matches[5]] = $val;
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!is_error_message()) {
|
|
debug_log_clear('new_graphs');
|
|
|
|
foreach ($selected_graphs_array as $form_type => $form_array) {
|
|
$current_form_type = $form_type;
|
|
|
|
foreach ($form_array as $form_id1 => $form_array2) {
|
|
// enumerate information from the arrays stored in post variables
|
|
create_save_graph($host_id, $form_type, $form_id1, $form_array2, $values);
|
|
}
|
|
}
|
|
} else {
|
|
$form_data = $_SESSION['sess_graphs_new_form'];
|
|
kill_session_var('sess_graphs_new_form');
|
|
|
|
?>
|
|
<script type='text/javascript'>
|
|
var formData=<?php print $form_data; ?>;
|
|
|
|
$(function() {
|
|
loadPageUsingPost('graphs_new.php', formData);
|
|
});
|
|
</script>
|
|
<?php
|
|
|
|
exit;
|
|
}
|
|
}
|
|
|
|
function create_graphs_new_filter(array $host, array $snmp_queries) : array {
|
|
global $item_rows;
|
|
|
|
$all = ['-2' => __('All')];
|
|
$gt = ['-1' => __('Graph Template Based')];
|
|
|
|
if (!cacti_sizeof($host)) {
|
|
$host['id'] = '';
|
|
$host['description'] = __('Select a Device');
|
|
}
|
|
|
|
$graph_types = array_rekey($snmp_queries, 'id', 'name');
|
|
|
|
$graph_types = $all + $gt + $graph_types;
|
|
|
|
$filters = [
|
|
'rows' => [
|
|
[
|
|
'host_id' => [
|
|
'method' => 'drop_callback',
|
|
'friendly_name' => __('Device'),
|
|
'filter' => FILTER_VALIDATE_INT,
|
|
'default' => '',
|
|
'pageset' => true,
|
|
'sql' => 'SELECT DISTINCT id, description AS name FROM host ORDER BY description',
|
|
'action' => 'ajax_hosts',
|
|
'id' => $host['id'],
|
|
'value' => $host['description'],
|
|
'on_change' => 'applyFilter()'
|
|
],
|
|
'graph_type' => [
|
|
'method' => 'drop_array',
|
|
'friendly_name' => __('Graph Type'),
|
|
'filter' => FILTER_CALLBACK,
|
|
'filter_options' => ['options' => 'sanitize_search_string'],
|
|
'default' => read_user_setting('graph_type', read_config_option('default_graphs_new_dropdown'), true),
|
|
'pageset' => true,
|
|
'array' => $graph_types,
|
|
'value' => '-1'
|
|
]
|
|
],
|
|
[
|
|
'filter' => [
|
|
'method' => 'textbox',
|
|
'friendly_name' => __('Search'),
|
|
'filter' => FILTER_DEFAULT,
|
|
'placeholder' => __('Enter a search term'),
|
|
'size' => '30',
|
|
'default' => '',
|
|
'pageset' => true,
|
|
'max_length' => '120',
|
|
'value' => ''
|
|
],
|
|
'rows' => [
|
|
'method' => 'drop_array',
|
|
'friendly_name' => __('Rows'),
|
|
'filter' => FILTER_VALIDATE_INT,
|
|
'default' => '-1',
|
|
'pageset' => true,
|
|
'array' => $item_rows,
|
|
'value' => '-1'
|
|
]
|
|
]
|
|
],
|
|
'buttons' => [
|
|
'go' => [
|
|
'method' => 'submit',
|
|
'display' => __('Go'),
|
|
'title' => __('Apply Filter to Table'),
|
|
],
|
|
'clear' => [
|
|
'method' => 'button',
|
|
'display' => __('Clear'),
|
|
'title' => __('Reset Filter to Default Values'),
|
|
],
|
|
'save' => [
|
|
'method' => 'button',
|
|
'display' => __('Save'),
|
|
'title' => __('Save the Filter for the User'),
|
|
'url' => 'graphs_new.php?action=ajax_save_filter',
|
|
'status' => __('Filter Settings Saved')
|
|
]
|
|
],
|
|
'links' => [
|
|
[
|
|
'display' => __('Edit this Device'),
|
|
'url' => 'host.php?action=edit&id=' . grv('host_id'),
|
|
'class' => 'ti ti-tool newDevice'
|
|
],
|
|
[
|
|
'display' => __('Create New Device'),
|
|
'url' => 'host.php?action=edit',
|
|
'class' => 'fa-solid fa-gear editDevice'
|
|
],
|
|
]
|
|
];
|
|
|
|
// process plugin links
|
|
ob_start();
|
|
|
|
/**
|
|
* Prototype - We will convert links into nice glyphs potentially
|
|
*
|
|
* <span class="linkMarker">*</span>
|
|
* <a
|
|
* class="autocreate linkEditMain"
|
|
* href="plugins/thold/thold.php?action=autocreate&host_id=99"
|
|
* >Auto-create Thresholds</a>
|
|
* <br>';
|
|
*/
|
|
api_plugin_hook('graphs_new_top_links');
|
|
|
|
$new_links = ob_get_clean();
|
|
|
|
/**
|
|
* Now that we have anchors, let's add them to the
|
|
* filter array.
|
|
*/
|
|
if ($new_links != '') {
|
|
$links = new DOMDocument();
|
|
$links->loadHTML($new_links);
|
|
$anchors = $links->getElementsByTagName('a');
|
|
|
|
if (cacti_sizeof($anchors)) {
|
|
foreach ($anchors as $a) {
|
|
$name = $a->textContent;
|
|
$href = $a->getAttribute('href');
|
|
|
|
$filters['links'][] = [
|
|
'display' => $name,
|
|
'url' => $href,
|
|
'class' => 'fa fa-funny'
|
|
];
|
|
}
|
|
}
|
|
}
|
|
|
|
return $filters;
|
|
}
|
|
|
|
function draw_graphs_new_filter(bool $render = false, string $header_label = '', array $host = [], array $snmp_queries = []) : void {
|
|
$filters = create_graphs_new_filter($host, $snmp_queries);
|
|
|
|
// create the page filter
|
|
$pageFilter = new CactiTableFilter($header_label, 'graphs_new.php', 'form_gn', 'sess_gn', '', '', false);
|
|
|
|
$pageFilter->set_filter_array($filters);
|
|
|
|
if ($render) {
|
|
$pageFilter->render();
|
|
} else {
|
|
$pageFilter->sanitize();
|
|
}
|
|
}
|
|
|
|
function graphs() : void {
|
|
global $item_rows;
|
|
|
|
if (isrv('host_id') && gfrv('host_id') > 0) {
|
|
$host = db_fetch_row_prepared('SELECT id, description, hostname, host_template_id
|
|
FROM host
|
|
WHERE id = ?',
|
|
[gfrv('host_id')]);
|
|
} else {
|
|
$host = db_fetch_row('SELECT id, description, hostname, host_template_id
|
|
FROM host
|
|
ORDER BY description ASC
|
|
LIMIT 1');
|
|
|
|
if (cacti_sizeof($host)) {
|
|
srv('host_id', $host['id']);
|
|
} else {
|
|
srv('host_id', '0');
|
|
}
|
|
}
|
|
|
|
if (cacti_sizeof($host)) {
|
|
$name = db_fetch_cell_prepared('SELECT name
|
|
FROM host_template
|
|
WHERE id = ?',
|
|
[$host['host_template_id']]);
|
|
|
|
$header_label = __esc('New Graphs [ %s - %s ] [ %s ]', $host['description'], $host['hostname'], (!empty($host['host_template_id']) ? $name : ''));
|
|
} else {
|
|
$header_label = __('New Graphs [ Search for a Device First ]');
|
|
}
|
|
|
|
$snmp_queries = db_fetch_assoc_prepared('SELECT sq.id, sq.name
|
|
FROM snmp_query AS sq
|
|
INNER JOIN host_snmp_query AS hsq
|
|
ON hsq.snmp_query_id = sq.id
|
|
WHERE hsq.host_id = ?
|
|
ORDER BY sq.name',
|
|
[grv('host_id')]);
|
|
|
|
draw_graphs_new_filter(true, $header_label, $host, $snmp_queries);
|
|
|
|
if (grv('rows') == '-1') {
|
|
$rows = read_user_setting('num_rows_table', read_config_option('num_rows_table'), true);
|
|
} else {
|
|
$rows = gfrv('rows');
|
|
}
|
|
|
|
form_start('graphs_new.php', 'chk');
|
|
|
|
$total_rows = cacti_sizeof(db_fetch_assoc_prepared('SELECT graph_template_id
|
|
FROM host_graph
|
|
WHERE host_id = ?',
|
|
[grv('host_id')]));
|
|
|
|
$i = 0;
|
|
|
|
if (grv('changed')) {
|
|
foreach ($snmp_queries as $query) {
|
|
kill_session_var('sess_grn_page' . $query['id']);
|
|
unsrv('page' . $query['id']);
|
|
load_current_session_value('page' . $query['id'], 'sess_grn_page' . $query['id'], '1');
|
|
}
|
|
}
|
|
|
|
if (grv('graph_type') > 0) {
|
|
// validate the page filter
|
|
if (isrv('page' . grv('graph_type'))) {
|
|
gfrv('page' . grv('graph_type'));
|
|
}
|
|
|
|
load_current_session_value('page' . grv('graph_type'), 'sess_grn_page' . grv('graph_type'), '1');
|
|
} elseif (grv('graph_type') == -2) {
|
|
foreach ($snmp_queries as $query) {
|
|
// validate the page filter
|
|
if (isrv('page' . $query['id'])) {
|
|
gfrv('page' . $query['id']);
|
|
}
|
|
|
|
load_current_session_value('page' . $query['id'], 'sess_grn_page' . $query['id'], '1');
|
|
}
|
|
}
|
|
|
|
$script = "<script type='text/javascript'>\nvar created_graphs = new Array();\n";
|
|
|
|
if (grv('graph_type') < 0) {
|
|
html_start_box(__('New Graph Template'), '100%', false, 3, 'center', '');
|
|
|
|
$available_graph_templates = db_fetch_assoc_prepared('SELECT gt.id, gt.name
|
|
FROM graph_templates AS gt
|
|
LEFT JOIN snmp_query_graph AS sqg
|
|
ON sqg.graph_template_id = gt.id
|
|
WHERE sqg.name IS NULL
|
|
AND gt.id NOT IN (SELECT graph_template_id FROM host_graph WHERE host_id = ?)
|
|
AND gt.multiple = ""
|
|
UNION
|
|
SELECT id, name
|
|
FROM graph_templates AS gt
|
|
WHERE multiple = "on"
|
|
ORDER BY name',
|
|
[grv('host_id')]
|
|
);
|
|
|
|
// create a row at the bottom that lets the user create any graph they choose
|
|
print "<tr class='even'>
|
|
<td class='left' style='width:1%'>";
|
|
|
|
form_dropdown('cg_g', $available_graph_templates, 'name', 'id', '', __('(Select a graph type to create)'), '', 'textArea');
|
|
|
|
print '</td>
|
|
<td class="left">
|
|
<button type="submit" class="create ui-button ui-corner-all ui-widget ui-state-active" id="submit" role="button">' . __('Create') . '</button>
|
|
</td>
|
|
</tr>';
|
|
|
|
html_end_box();
|
|
|
|
html_start_box(__('Graph Templates'), '100%', false, 3, 'center', '');
|
|
|
|
print "<tr class='tableHeader'>
|
|
<th class='tableSubHeaderColumn'>" . __('Graph Template Name') . "</th>
|
|
<th class='tableSubHeaderCheckbox'><input class='checkbox' type='checkbox' id='all_cg' title='" . __esc('Select All') . "' onClick='selectAll(\"sg\",this.checked)'><label class='formCheckboxLabel' title='" . __esc('Select All Rows') . "' for='all_cg'></label></th>
|
|
</tr>";
|
|
|
|
if (grv('filter') != '') {
|
|
$sql_where = 'AND gt.name LIKE ' . db_qstr('%' . grv('filter') . '%');
|
|
} else {
|
|
$sql_where = '';
|
|
}
|
|
|
|
if (!ierv('host_id')) {
|
|
$template_graphs = db_fetch_assoc_prepared('SELECT
|
|
DISTINCT gl.graph_template_id
|
|
FROM graph_local AS gl
|
|
INNER JOIN graph_templates AS gt
|
|
ON gt.id=gl.graph_template_id
|
|
WHERE gl.host_id = ?
|
|
AND gt.multiple = ""
|
|
AND gl.snmp_query_id = 0
|
|
GROUP BY gl.graph_template_id',
|
|
[grv('host_id')]);
|
|
|
|
if (cacti_sizeof($template_graphs)) {
|
|
$script .= 'var gt_created_graphs = new Array(';
|
|
|
|
$cg_ctr = 0;
|
|
|
|
foreach ($template_graphs as $template_graph) {
|
|
$script .= (($cg_ctr > 0) ? ',' : '') . "'" . $template_graph['graph_template_id'] . "'";
|
|
|
|
$cg_ctr++;
|
|
}
|
|
|
|
$script .= ");\n";
|
|
} else {
|
|
$script .= 'var gt_created_graphs = new Array();';
|
|
}
|
|
}
|
|
|
|
$graph_templates = db_fetch_assoc_prepared("SELECT
|
|
gt.id AS graph_template_id,
|
|
gt.name AS graph_template_name
|
|
FROM host_graph AS hg
|
|
INNER JOIN graph_templates AS gt
|
|
ON hg.graph_template_id=gt.id
|
|
WHERE hg.host_id = ?
|
|
$sql_where
|
|
ORDER BY gt.name",
|
|
[grv('host_id')]
|
|
);
|
|
|
|
// create a row for each graph template associated with the host template
|
|
if (cacti_sizeof($graph_templates)) {
|
|
foreach ($graph_templates as $graph_template) {
|
|
$query_row = $graph_template['graph_template_id'];
|
|
|
|
print "<tr id='gt_line$query_row' style='display:table-row' class='selectable " . (($i % 2 == 0) ? 'odd' : 'even') . "'>";
|
|
|
|
$i++;
|
|
|
|
print "<td>
|
|
<span id='gt_text$query_row" . "_0'>" . filter_value($graph_template['graph_template_name'], grv('filter')) . "</span>
|
|
</td>
|
|
<td class='checkbox' style='width:1%;'>
|
|
<input class='checkbox' type='checkbox' name='cg_$query_row' id='cg_$query_row'>
|
|
<label class='formCheckboxLabel' for='cg_$query_row'></label>
|
|
</td>
|
|
</tr>";
|
|
}
|
|
}
|
|
|
|
html_end_box();
|
|
}
|
|
|
|
if (grv('graph_type') != -1 && !ierv('host_id')) {
|
|
$params = [];
|
|
$params[] = $host['id'];
|
|
|
|
if (grv('graph_type') != -2) {
|
|
$params[] = grv('graph_type');
|
|
$sql = ' AND sq.id = ?';
|
|
} else {
|
|
$sql = '';
|
|
}
|
|
|
|
$snmp_queries = db_fetch_assoc_prepared("SELECT sq.id, sq.name
|
|
FROM snmp_query AS sq
|
|
INNER JOIN host_snmp_query AS hsq
|
|
ON hsq.snmp_query_id = sq.id
|
|
WHERE hsq.host_id = ?
|
|
$sql
|
|
ORDER BY sq.name",
|
|
$params);
|
|
|
|
if (cacti_sizeof($snmp_queries)) {
|
|
foreach ($snmp_queries as $snmp_query) {
|
|
unset($total_rows);
|
|
|
|
if (!grv('changed')) {
|
|
$page = gfrv('page' . $snmp_query['id']);
|
|
} else {
|
|
$page = 1;
|
|
}
|
|
|
|
$xml_array = get_data_query_array($snmp_query['id']);
|
|
|
|
$num_input_fields = 0;
|
|
$num_visible_fields = 0;
|
|
$message_raised = false;
|
|
|
|
if (cacti_sizeof($xml_array)) {
|
|
// loop through once so we can find out how many input fields there are
|
|
if (isset($xml_array['fields'])) {
|
|
foreach ($xml_array['fields'] as $field_name => $field_array) {
|
|
if (!is_array($field_array)) {
|
|
if (!$message_raised) {
|
|
raise_message('xmlerror', __('Error Parsing Data Query Resource XML file for Data Query \'%s\' with id of \'%s\'', $snmp_query['id']), MESSAGE_LEVEL_ERROR);
|
|
$message_raised = true;
|
|
}
|
|
} elseif (isset($field_array['direction'])) {
|
|
if ($field_array['direction'] == 'input' || $field_array['direction'] == 'input-output') {
|
|
$num_input_fields++;
|
|
|
|
if (!isset($total_rows)) {
|
|
$total_rows = db_fetch_cell_prepared('SELECT COUNT(*)
|
|
FROM host_snmp_cache
|
|
WHERE host_id = ?
|
|
AND snmp_query_id = ?
|
|
AND field_name = ?',
|
|
[$host['id'], $snmp_query['id'], $field_name]);
|
|
}
|
|
}
|
|
} else {
|
|
raise_message('xmlfielderr' . $field_name, __esc('Error Parsing Data Query Resource XML file for Data Query \'%s\' with id \'%s\'. Field Name \'%s\' missing a \'direction\' attribute', $snmp_query['name'], $snmp_query['id'], $field_name), MESSAGE_LEVEL_ERROR);
|
|
}
|
|
}
|
|
} elseif (!$message_raised) {
|
|
raise_message('xmlerror', __esc('Error Parsing Data Query Resource XML file for Data Query \'%s\' with id \'%s\'', $snmp_query['name'], $snmp_query['id']), MESSAGE_LEVEL_ERROR);
|
|
$message_raised = true;
|
|
}
|
|
}
|
|
|
|
if (!isset($total_rows)) {
|
|
$total_rows = 0;
|
|
}
|
|
|
|
$snmp_query_graphs = db_fetch_assoc_prepared('SELECT id, name
|
|
FROM snmp_query_graph
|
|
WHERE snmp_query_id = ?
|
|
ORDER BY name',
|
|
[$snmp_query['id']]);
|
|
|
|
if (cacti_sizeof($snmp_query_graphs)) {
|
|
foreach ($snmp_query_graphs as $snmp_query_graph) {
|
|
$created_graphs = db_fetch_assoc_prepared('SELECT DISTINCT snmp_index
|
|
FROM graph_local
|
|
WHERE snmp_query_graph_id = ?
|
|
AND host_id = ?',
|
|
[$snmp_query_graph['id'], $host['id']]);
|
|
|
|
$script .= 'created_graphs[' . $snmp_query_graph['id'] . '] = new Array(';
|
|
|
|
$cg_ctr = 0;
|
|
|
|
if (cacti_sizeof($created_graphs)) {
|
|
foreach ($created_graphs as $created_graph) {
|
|
$script .= ($cg_ctr > 0 ? ',' : '') . "'" . encode_data_query_index($created_graph['snmp_index']) . "'";
|
|
++$cg_ctr;
|
|
}
|
|
}
|
|
|
|
$script .= ")\n";
|
|
}
|
|
}
|
|
|
|
print "<div class='cactiTable'>
|
|
<div class='cactiTableTitleRow'>
|
|
<div class='cactiTableTitle'>
|
|
<span>" . __esc('Data Query [%s]', $snmp_query['name']) . "</span>
|
|
</div>
|
|
<div class='cactiTableButton'>
|
|
<span class='reloadquery ti ti-refresh' id='reload" . $snmp_query['id'] . "' title='" . __esc('Reload Query') . "' data-id='" . $snmp_query['id'] . "'></span>
|
|
</div>
|
|
</div>
|
|
</div>";
|
|
|
|
if (cacti_sizeof($xml_array)) {
|
|
$html_dq_header = '';
|
|
|
|
// if there is a where clause, get the matching snmp_indexes
|
|
$sql_where = '';
|
|
$indexes = [];
|
|
|
|
if (grv('filter') != '') {
|
|
$sql_where = '';
|
|
$indexes = db_fetch_assoc_prepared('SELECT DISTINCT snmp_index
|
|
FROM host_snmp_cache
|
|
WHERE field_value LIKE ?
|
|
AND snmp_query_id = ?
|
|
AND host_id = ?',
|
|
['%' . grv('filter') . '%', $snmp_query['id'], $host['id']]);
|
|
|
|
if (cacti_sizeof($indexes)) {
|
|
foreach ($indexes as $index) {
|
|
// GHSA-j3px-vw6r-g25x: snmp_index is stored host_snmp_cache
|
|
// data; quote and escape it so a crafted index cannot break
|
|
// out of this IN() list.
|
|
if ($sql_where != '') {
|
|
$sql_where .= ', ' . db_qstr($index['snmp_index']);
|
|
} else {
|
|
$sql_where .= ' AND snmp_index IN(' . db_qstr($index['snmp_index']);
|
|
}
|
|
}
|
|
|
|
$sql_where .= ')';
|
|
}
|
|
}
|
|
|
|
if (grv('filter') == '' || (grv('filter') != '' && cacti_sizeof($indexes))) {
|
|
// determine the sort order
|
|
if (isset($xml_array['index_order_type'])) {
|
|
if ($xml_array['index_order_type'] == 'numeric') {
|
|
$sql_order = 'ORDER BY CAST(snmp_index AS unsigned)';
|
|
} elseif ($xml_array['index_order_type'] == 'alphabetic') {
|
|
$sql_order = 'ORDER BY snmp_index';
|
|
} elseif ($xml_array['index_order_type'] == 'natural') {
|
|
$sql_order = 'ORDER BY INET_ATON(snmp_index)';
|
|
} else {
|
|
$sql_order = '';
|
|
}
|
|
} else {
|
|
$sql_order = '';
|
|
}
|
|
|
|
// get the unique field values from the database
|
|
$field_names = db_fetch_assoc_prepared('SELECT DISTINCT field_name
|
|
FROM host_snmp_cache
|
|
WHERE host_id = ?
|
|
AND snmp_query_id = ?',
|
|
[$host['id'], $snmp_query['id']]);
|
|
|
|
// build magic query
|
|
$sql_query = 'SELECT host_id, snmp_query_id, snmp_index';
|
|
$num_visible_fields = cacti_sizeof($field_names);
|
|
$i = 0;
|
|
|
|
if (cacti_sizeof($field_names)) {
|
|
foreach ($field_names as $column) {
|
|
$field_name = $column['field_name'];
|
|
$sql_query .= ", MAX(CASE WHEN field_name='$field_name' THEN field_value ELSE NULL END) AS '$field_name'";
|
|
$i++;
|
|
}
|
|
}
|
|
|
|
$sql_query_worder = $sql_query . ' FROM host_snmp_cache
|
|
WHERE host_id=' . $host['id'] . '
|
|
AND snmp_query_id=' . $snmp_query['id'] . "
|
|
$sql_where
|
|
GROUP BY host_id, snmp_query_id, snmp_index
|
|
$sql_order
|
|
LIMIT " . ($rows * ($page - 1)) . ',' . $rows;
|
|
|
|
$sql_query .= ' FROM host_snmp_cache
|
|
WHERE host_id=' . $host['id'] . '
|
|
AND snmp_query_id=' . $snmp_query['id'] . "
|
|
$sql_where
|
|
GROUP BY host_id, snmp_query_id, snmp_index
|
|
LIMIT " . ($rows * ($page - 1)) . ',' . $rows;
|
|
|
|
$rows_query = 'SELECT host_id, snmp_query_id, snmp_index
|
|
FROM host_snmp_cache
|
|
WHERE host_id=' . $host['id'] . '
|
|
AND snmp_query_id=' . $snmp_query['id'] . "
|
|
$sql_where
|
|
GROUP BY host_id, snmp_query_id, snmp_index";
|
|
|
|
$snmp_query_indexes = db_fetch_assoc($sql_query);
|
|
|
|
if (cacti_sizeof($snmp_query_indexes)) {
|
|
$snmp_query_indexes = db_fetch_assoc($sql_query_worder);
|
|
}
|
|
|
|
$total_rows = cacti_sizeof(db_fetch_assoc($rows_query));
|
|
|
|
if (($page - 1) * $rows > $total_rows) {
|
|
$page = 1;
|
|
srv('page' . $snmp_query['id'], $page);
|
|
load_current_session_value('page' . $snmp_query['id'], 'sess_grn_page' . $snmp_query['id'], '1');
|
|
}
|
|
|
|
$nav = html_nav_bar('graphs_new.php?host_id=' . grv('host_id'), MAX_DISPLAY_PAGES, $page, $rows, $total_rows, 15, __('Items'), 'page' . $snmp_query['id']);
|
|
|
|
print $nav;
|
|
|
|
html_start_box('', '100%', false, 3, 'center', '');
|
|
|
|
foreach ($xml_array['fields'] as $field_name => $field_array) {
|
|
if (($field_array['direction'] == 'input' || $field_array['direction'] == 'input-output') && cacti_sizeof($field_names)) {
|
|
foreach ($field_names as $row) {
|
|
if ($row['field_name'] == $field_name) {
|
|
$html_dq_header .= "<th class='tableSubHeaderColumn'>" . $field_array['name'] . '</th>';
|
|
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!cacti_sizeof($snmp_query_indexes)) {
|
|
print "<tr class='odd'><td>" . __('This Data Query returned 0 rows, perhaps there was a problem executing this Data Query.') . "<a href='" . htmle('host.php?action=query_verbose&id=' . $snmp_query['id'] . '&host_id=' . $host['id']) . "'>" . __('You can run this Data Query in debug mode') . '</a> ' . __('From there you can get more information.') . '</td></tr>';
|
|
} else {
|
|
print "<tr class='tableHeader'>
|
|
$html_dq_header
|
|
<th class='tableSubHeaderCheckbox'><input class='checkbox' id='all_" . $snmp_query['id'] . "' type='checkbox' name='all_" . $snmp_query['id'] . "' title='" . __esc('Select All') . "' onClick='selectAll(\"sg_" . $snmp_query['id'] . "\",this.checked)'><label class='formCheckboxLabel' title='" . __esc('Select All Rows') . "' for='all_" . $snmp_query['id'] . "'></label></th>
|
|
</tr>";
|
|
}
|
|
|
|
// disable graph creation if there are no associated Graph Templates
|
|
$enabled = db_fetch_cell_prepared('SELECT COUNT(*)
|
|
FROM snmp_query_graph
|
|
WHERE snmp_query_id = ?',
|
|
[$snmp_query['id']]);
|
|
|
|
if (!$enabled) {
|
|
$disabled_text = __esc('The index is disabled due to the Data Query having no associated Graph Templates.');
|
|
} else {
|
|
$disabled_text = '';
|
|
}
|
|
|
|
$row_counter = 0;
|
|
$column_counter = 0;
|
|
$fields = array_rekey($field_names, 'field_name', 'field_name');
|
|
|
|
if (cacti_sizeof($snmp_query_indexes)) {
|
|
foreach ($snmp_query_indexes as $row) {
|
|
$query_row = $snmp_query['id'] . '_' . encode_data_query_index($row['snmp_index']);
|
|
|
|
if ($enabled) {
|
|
print "<tr id='dqline$query_row' class='selectable " . (($row_counter % 2 == 0) ? 'odd' : 'even') . "'>";
|
|
$i++;
|
|
} else {
|
|
print "<tr id='nodqline$query_row' title='$disabled_text' class='selectable notemplate " . (($row_counter % 2 == 0) ? 'odd' : 'even') . "'>";
|
|
$i++;
|
|
}
|
|
|
|
$column_counter = 0;
|
|
|
|
foreach ($xml_array['fields'] as $field_name => $field_array) {
|
|
if ($field_array['direction'] == 'input' || $field_array['direction'] == 'input-output') {
|
|
if (in_array($field_name, $fields, true)) {
|
|
if (isset($row[$field_name])) {
|
|
print "<td><span class='textOverflow' id='text$query_row" . '_' . $column_counter . "'>" . filter_value($row[$field_name], grv('filter')) . '</span></td>';
|
|
} else {
|
|
print "<td><span class='textOverflow' id='text$query_row" . '_' . $column_counter . "'></span></td>";
|
|
}
|
|
|
|
$column_counter++;
|
|
}
|
|
}
|
|
}
|
|
|
|
print "<td style='width:1%;' class='checkbox'>";
|
|
|
|
if ($enabled) {
|
|
print "<input class='checkbox' type='checkbox' name='sg_$query_row' id='sg_$query_row'><label class='formCheckboxLabel' for='sg_$query_row'></label>";
|
|
} else {
|
|
print "<input class='checkbox' type='checkbox' disabled name='sg_$query_row' id='sg_$query_row'><label class='formCheckboxLabel' for='sg_$query_row'></label>";
|
|
}
|
|
print '</td>';
|
|
print '</tr>';
|
|
|
|
$row_counter++;
|
|
}
|
|
}
|
|
} else {
|
|
html_start_box('', '100%', false, 3, 'center', '');
|
|
|
|
print "<tr class='odd'><td class='textError'>" . __('Search Returned no Rows.') . '</td></tr>';
|
|
}
|
|
} else {
|
|
html_start_box('', '100%', false, 3, 'center', '');
|
|
|
|
print "<tr class='odd'><td class='textError'>" . __('Error in Data Query. This could be due to the following: File Permissions, or a missing or improperly formatted Data Query XML file.') . '</td></tr>';
|
|
}
|
|
|
|
html_end_box();
|
|
|
|
// draw the graph template drop down here
|
|
$data_query_graphs = db_fetch_assoc_prepared('SELECT id, name
|
|
FROM snmp_query_graph
|
|
WHERE snmp_query_id = ?
|
|
ORDER BY name',
|
|
[$snmp_query['id']]);
|
|
|
|
if (cacti_sizeof($data_query_graphs) == 1) {
|
|
print "<input type='hidden' id='sgg_" . $snmp_query['id'] . "' name='sgg_" . $snmp_query['id'] . "' value='" . $data_query_graphs[0]['id'] . "'>";
|
|
} elseif (cacti_sizeof($data_query_graphs) > 1) {
|
|
print "<div class='break'></div>";
|
|
|
|
html_start_box('', '100%', false, 3, 'center', '');
|
|
|
|
$selected = store_get_selected_dq_index($snmp_query['id']);
|
|
|
|
print "<tr>
|
|
<td>
|
|
<img src='" . CACTI_PATH_URL . "images/arrow.gif' alt=''>
|
|
</td>
|
|
<td class='right' style='width:100%'>
|
|
" . __('Select a Graph Type to Create') . "
|
|
</td>
|
|
<td class='right'>
|
|
<button type='button' class='ui-button ui-corner-all ui-widget default' id='default_" . $snmp_query['id'] . "' title='" . __esc('Make selection default') . "'>" . __esc('Set Default') . "</button>
|
|
</td>
|
|
<td class='right'>
|
|
<select class='dqselect' name='sgg_" . $snmp_query['id'] . "' id='sgg_" . $snmp_query['id'] . "' onChange='dqUpdateDeps(" . $snmp_query['id'] . ',' . (isset($column_counter) ? $column_counter : '') . ");'>
|
|
";
|
|
html_create_list($data_query_graphs, 'name', 'id', $selected);
|
|
print '
|
|
</select>
|
|
</td>
|
|
</tr>';
|
|
|
|
html_end_box();
|
|
}
|
|
|
|
$script .= 'dqUpdateDeps(' . $snmp_query['id'] . ',' . $num_visible_fields . ");\n";
|
|
}
|
|
}
|
|
}
|
|
|
|
if ($script != '') {
|
|
$script .= "$(function() {
|
|
$('[id^=\'reload\']').click(function(data) {
|
|
$(this).addClass('fa-spin');
|
|
loadUrl({url:'graphs_new.php?action=query_reload&id='+$(this).attr('data-id')+'&host_id='+$('#host_id').val()})
|
|
});
|
|
});";
|
|
|
|
$script .= "$('.default').click(function() { $.get('graphs_new.php?action=ajax_save&query=" . (isset($snmp_query['id']) ? $snmp_query['id'] : '') . "'+'&item='+$(\".dqselect\").val()).fail(function(data) { getPresentHTTPError(data); });}); $('tr.notemplate').tooltip();</script>";
|
|
|
|
print $script;
|
|
}
|
|
|
|
form_hidden_box('save_component_graph', '1', '');
|
|
|
|
if (!ierv('host_id')) {
|
|
form_hidden_box('host_id', $host['id'], '0');
|
|
form_hidden_box('host_template_id', $host['host_template_id'], '0');
|
|
}
|
|
|
|
if (isset($_SERVER['HTTP_REFERER'])) {
|
|
set_request_var('returnto', validate_redirect_url($_SERVER['HTTP_REFERER'], 'host.php'));
|
|
} elseif (isset_request_var('returnto')) {
|
|
set_request_var('returnto', validate_redirect_url(get_nfilter_request_var('returnto'), 'host.php'));
|
|
}
|
|
|
|
load_current_session_value('returnto', 'sess_grn_returnto', '');
|
|
|
|
if (!str_contains(gnrv('returnto'), 'host.php')) {
|
|
srv('returnto', '');
|
|
}
|
|
|
|
form_save_button(gnrv('returnto'), 'create');
|
|
}
|