pandorafms/pandora_console/godmode/groups/configure_group.php

<?php
// Pandora FMS - the Free monitoring system
// ========================================
// Copyright (c) 2004-2007 Sancho Lerena, slerena@gmail.com
// Main PHP/SQL code development and project architecture and management
// Copyright (c) 2004-2007 Raul Mateos Martin, raulofpandora@gmail.com
// CSS and some PHP additions
// Copyright (c) 2006-2007 Jonathan Barajas, jonathan.barajas[AT]gmail[DOT]com
// Javascript Active Console code.
// Copyright (c) 2006 Jose Navarro <contacto@indiseg.net>
// Additions to Pandora FMS 1.2 graph code and new XML reporting template management
// Copyright (c) 2005-2007 Artica Soluciones Tecnologicas, info@artica.es
//
// This program is free software; you can redistribute it and/or
// modify it under the terms of the GNU General Public License
// as published by the Free Software Foundation; version 2
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU General Public License for more details.
// You should have received a copy of the GNU General Public License
// along with this program; if not, write to the Free Software
// Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
// Load global vars
require("include/config.php");

if (comprueba_login() == 0)
   $id_user = $_SESSION["id_usuario"];
   if (give_acl($id_user, 0, "PM")==1) {
	// Inic vars
	$id_grupo = "";
	$nombre = "";
	$id_parent = "";	
 	$disabled = 0;
	
	if (isset($_GET["create_g"])){ //
		$create_g = entrada_limpia($_GET["create_g"]);
	} else
		$create_g = 0;
		
	if (isset($_GET["id_grupo"])){
		// Conecto con la BBDD
		$id_grupo = entrada_limpia($_GET["id_grupo"]);
		$sql1='SELECT * FROM tgrupo WHERE id_grupo = '.$id_grupo;
		$result=mysql_query($sql1);
		if ($row=mysql_fetch_array($result)){
			$nombre = $row["nombre"];
			$icono = $row["icon"];
			$disabled = $row["disabled"];
			$id_parent = entrada_limpia($row["parent"]);
		} else
			{
			echo "<h3 class='error'>".$lang_label["group_error"]."</h3>";
			echo "</table>";                                        
			include ("general/footer.php");                       
			exit;
			}
	}

	echo "<h2>".$lang_label["group_management"]." &gt; ";
	if (isset($_GET["create_g"])) {
		echo $lang_label["create_group"]."<a href='help/".$help_code."/chap3.php#31' target='_help' class='help'>&nbsp;<span>".$lang_label["help"]."</span></a></h2>";
	}
	if (isset($_GET["id_grupo"])) {
		echo $lang_label["update_group"]."<a href='help/".$help_code."/chap3.php#31' target='_help' class='help'>&nbsp;<span>".$lang_label["help"]."</span></a></h2>";
	}
	
?>
<table width="450" cellpadding=4 cellspacing=4 class='databox_color'>

<form name="grupo" method="post" action="index.php?sec=gagente&
sec2=godmode/groups/group_list">

<?php
	if ($create_g == 1)
		echo "<input type='hidden' name='create_g' value='1'>";
	else {
		echo "<input type='hidden' name='update_g' value='1'>";
		echo "<input type='hidden' name='id_grupo' value='".$id_grupo."'>";
	}
?>
<tr><td class="datos"><?php echo $lang_label["group_name"] ?></td>
<td class="datos">
<input type="text" name="nombre" size="35" value="<?php echo $nombre ?>">
</td></tr>
<tr><td class='datos2'>
<?PHP
	echo $lang_label["icon"];
	echo '<td class="datos2">';
	
	echo '<select name="icon">';

	if ($icono != ""){
		echo '<option>' . $icono;
	}
	
	$ficheros = list_files ('images/groups_small/', "png", 1, 0);
	$size = count ($ficheros);
	for ($i = 0; $i < $size; $i++) {
		echo "<option>".substr($ficheros[$i],0,strlen($ficheros[$i])-4);
	}
	echo '</select>';

	//  Parent 

	echo "<tr><td class='datos'>";
        echo $lang_label["parent"];
        echo '<td class="datos">';
        echo '<select name="parent">';
        if ($id_parent != ""){
        	echo "<option value=$id_parent>".dame_nombre_grupo($id_parent);
                $sql1='SELECT * FROM tgrupo WHERE id_grupo != '.$id_grupo;
        } else {
                $sql1='SELECT * FROM tgrupo';
        } 
        $result=mysql_query($sql1);
        while ($row=mysql_fetch_array($result)){
                $nombre = $row["nombre"];
                $id_grupo2 = $row["id_grupo"];
                echo "<option value=$id_grupo2>" . $nombre;
        }
        echo '</select>';

	// Disabled
	echo "<tr><td class='datos2'>";
        echo $lang_label["alerts"];
        echo '<td class="datos2">';
        echo '<select name="disabled">';
        if ($disabled == 1){
                echo "<option value=1>".$lang_label["disabled"];
		echo "<option value=0>".$lang_label["enabled"];
        } else {
		echo "<option value=0>".$lang_label["enabled"];
		echo "<option value=1>".$lang_label["disabled"];
	}
	
	echo "</select>";
	
	echo "</table>";
	echo "<table width=450>";
	echo '<tr><td align="right">';
	if (isset($_GET["create_g"]))
		echo "<input name='crtbutton' type='submit' class='sub wand' value='".$lang_label["create"]."'>";
	else 
		echo "<input name='uptbutton' type='submit' class='sub upd' value='".$lang_label["update"]."'>";
	 
	echo "</form></table>";

} else {
	audit_db($id_user,$REMOTE_ADDR, "ACL Violation",
	"Trying to access Group Management2");
	require ("general/noaccess.php");
	}
?>