pandorafms/pandora_console/include/functions.php

<?php

// Pandora FMS - the Free Monitoring System
// ========================================
// Copyright (c) 2004-2008 Sancho Lerena, slerena@gmail.com
// Main PHP/SQL code development, project architecture and management.
// Copyright (c) 2004-2007 Raul Mateos Martin, raulofpandora@gmail.com
// CSS and some PHP code additions
// Please see http://pandora.sourceforge.net for full contribution list


function pandora_help ($id, $return = false) {
    global $config;
    $output = '<img src="'.$config['homeurl'].'images/help.png" onClick="pandora_help(\''.$id.'\')">';
    if ($return)
        return $return;
    echo $output;
}
// ---------------------------------------------------------------
// safe_output()
// Write a string to screen, deleting all kind of problematic characters
// This should be safe for XSS.
// --------------------------------------------------------------- 

function safe_output ($string) {
        return preg_replace('/[^\x09\x0A\x0D\x20-\x7F]/e', '"&#".ord($0).";"', $string);
}

// ---------------------------------------------------------------
// safe_input()
// Get parameter, using UTF8 encoding, and cleaning bad codes
// --------------------------------------------------------------- 

function safe_input ($string) {
        return htmlentities(utf8_decode($string), ENT_QUOTES); 
}

// ---------------------------------------------------------------
// salida_sql: Parse \' for replace to ' character, prearing
// SQL sentences to execute.
// --------------------------------------------------------------- 

function salida_sql ($string) {
    $body = str_replace("\'", "'", $string);
    return $body;
}


// input: var, string. 
//          mesg, mesage to show, var content. 
// --------------------------------------------------------------- 

function midebug($var, $mesg){ 
	echo "[DEBUG (".$var."]: (".$mesg.")"; 
	echo "<br>";
} 

// --------------------------------------------------------------- 
// array_in
// Search "item" in a given array, return 1 if exists, 0 if not
// ---------------------------------------------------------------

function array_in($exampleArray, $item){
	$result = 0;
	foreach ($exampleArray as $key => $value){
  		if ($value == $item){
   			$result = 1;
		}
  	}
	return $result;
}


// ---------------------------------------------------------------
// parse and clear string
// --------------------------------------------------------------- 

function salida_limpia ($string){
	$quote_style=ENT_QUOTES;
	static $trans;
	if (!isset($trans)) {
		$trans = get_html_translation_table(HTML_ENTITIES, $quote_style);
		foreach ($trans as $key => $value)
			$trans[$key] = '&#'.ord($key).';';
		// dont translate the '&' in case it is part of &xxx;
		$trans[chr(38)] = '&';
	}
	// after the initial translation, _do_ map standalone '&' into '&#38;'
	return preg_replace("/&(?![A-Za-z]{0,4}\w{2,3};|#[0-9]{2,3};)/","&#38;" , strtr($string, $trans));
}

function clean_output_breaks ($string){
	$myoutput = salida_limpia($string);
	return preg_replace ('/\n/',"<br>", $myoutput);
	
}


function output_clean_strict ($string){
	$string = preg_replace('/[\|\@\$\%\/\(\)\=\?\*\&\#]/','',$string);
	return $string;
}

// ---------------------------------------------------------------
// This function reads a string and returns it "clean"
// for use in DB, againts string XSS and so on
// ---------------------------------------------------------------

function entrada_limpia ($texto){
	$filtro0 = utf8_decode($texto);
	$filtro1 =  htmlentities($filtro0, ENT_QUOTES); 
	return $filtro1;
}

// ---------------------------------------------------------------
// Esta funcion lee una cadena y la da "limpia", para su uso con 
// parametros pasados a funcion de abrir fichero. Usados en sec y sec2
// ---------------------------------------------------------------

function parametro_limpio($texto){
	// Metemos comprobaciones de seguridad para los includes de paginas pasados por parametro
	// Gracias Raul (http://seclists.org/lists/incidents/2004/Jul/0034.html)
	// Consiste en purgar los http:// de las cadenas
	$pos = strpos($texto,"://");	// quitamos la parte "fea" de http:// o ftp:// o telnet:// :-)))
	if ($pos <> 0)
	$texto = substr_replace($texto,"",$pos,+3);   
	// limitamos la entrada de datos por parametros a 125 caracteres
	$texto = substr_replace($texto,"",125);
	$safe = preg_replace('/[^a-z0-9_\/]/i','',$texto);
	return $safe;
}

// ---------------------------------------------------------------
// Esta funcion se supone que cierra todos los tags HTML abiertos y no cerrados
// ---------------------------------------------------------------

// string closeOpenTags(string string [, string beginChar [, stringEndChar [, string CloseChar]]]);

function closeOpenTags($str, $open = "<", $close = ">", $end = "/", $tokens = "_abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ")
{ $chars = array();
	for ($i = 0; $i < strlen($tokens); $i++)
	{ $chars[] = substr($tokens, $i, 1); }

	$openedTags = array();
	$closedTags = array();
	$tag = FALSE;
	$closeTag = FALSE;
	$tagName = "";

	for ($i = 0; $i < strlen($str); $i++)
	{ $char = substr($str, $i, 1);
	if ($char == $open)
	{ $tag = TRUE; continue; }
	if ($char == $end)
	{ $closeTag = TRUE; continue; }
	if ($tag && in_array($char, $chars))
	{ $tagName .= $char; }
	else
	{if ($closeTag)
		{if (isset($closedTags[$tagName]))
			{ $closedTags[$tagName]++; }
		else
			{ $closedTags[$tagName] = 1; } }
		elseif ($tag)
			{if (isset($openedTags[$tagName]))
			{ $openedTags[$tagName]++; }
			else
			{ $openedTags[$tagName] = 1; } }
		$tag = FALSE; $closeTag = FALSE; $tagName = ""; } 
	 }

	while(list($tag, $count) = each($openedTags))
	{
	$closedTags[$tag] = isset($closedTags[$tag]) ? $closedTags[$tag] : 0;
	$count -= $closedTags[$tag];
	if ($count < 1) continue;
	$str .= str_repeat($open.$end.$tag.$close, $count);
	}
	return $str;

	}

// ---------------------------------------------------------------
// Return string with time-threshold in secs, mins, days or weeks
// ---------------------------------------------------------------

function give_human_time ($int_seconds){
   $key_suffix = 's';
   $periods = array(
                   'year'        => 31556926,
                   'month'        => 2629743,
                   'day'        => 86400,
                   'hour'        => 3600,
                   'minute'    => 60,
                   'second'    => 1
                   );

   // used to hide 0's in higher periods
   $flag_hide_zero = true;

   // do the loop thang
   foreach( $periods as $key => $length )
   {
       // calculate
       $temp = floor( $int_seconds / $length );

       // determine if temp qualifies to be passed to output
       if( !$flag_hide_zero || $temp > 0 )
       {
           // store in an array
           $build[] = $temp.' '.$key.($temp!=1?'s':null);

           // set flag to false, to allow 0's in lower periods
           $flag_hide_zero = false;
       }

       // get the remainder of seconds
       $int_seconds = fmod($int_seconds, $length);
   }

   // return output, if !empty, implode into string, else output $if_reached
   return ( !empty($build)?implode(', ', $build):$if_reached );
}

// ---------------------------------------------------------------
// This function show a popup window using a help_id (unused)
// ---------------------------------------------------------------

function popup_help ($help_id){
	echo "<a href='javascript:help_popup(".$help_id.")'>[H]</a>";
}

// ---------------------------------------------------------------
// no_permission () - Display no perm. access
// ---------------------------------------------------------------

function no_permission () {
	require("config.php");
	require ("include/languages/language_".$config["language"].".php");
	echo "<h3 class='error'>".$lang_label["no_permission_title"]."</h3>";
	echo "<img src='images/noaccess.png' alt='No access' width='120'><br><br>";
	echo "<table width=550>";
	echo "<tr><td>";
	echo $lang_label["no_permission_text"];
	echo "</table>";
	echo "<tr><td><td><td><td>";
	include "general/footer.php";
	exit;
}

// ---------------------------------------------------------------
// unmanaged_error -  Display generic error message and stop execution
// ---------------------------------------------------------------

function unmanaged_error ($error = "") {
    require("config.php");
    require ("include/languages/language_".$config["language"].".php");
    echo "<h3 class='error'>".lang_string("Unmanaged error")."</h3>";
    echo "<img src='images/errror.png' alt='error'><br><br>";
    echo "<table width=550>";
    echo "<tr><td>";
    echo lang_string("Unmanaged error_text");
    echo "<tr><td>";
    echo $error;
    echo "</table>";
    echo "<tr><td><td><td><td>";
    include "general/footer.php";
    exit;
}

function list_files($directory, $stringSearch, $searchHandler, $outputHandler) {
 	$errorHandler = false;
 	$result = array();
 	if (! $directoryHandler = @opendir ($directory)) {
  		echo ("<pre>\nerror: directory \"$directory\" doesn't exist!\n</pre>\n");
 		return $errorHandler = true;
 	}
 	if ($searchHandler == 0) {
		while (false !== ($fileName = @readdir ($directoryHandler))) {
			@array_push ($result, $fileName);
		}
 	}
 	if ($searchHandler == 1) {
  		while(false !== ($fileName = @readdir ($directoryHandler))) {
   			if(@substr_count ($fileName, $stringSearch) > 0) {
   				@array_push ($result, $fileName);
   			}
  		}
 	}
 	if (($errorHandler == true) &&  (@count ($result) === 0)) {
  		echo ("<pre>\nerror: no filetype \"$fileExtension\" found!\n</pre>\n");
 	}
 	else {
  		sort ($result);
  		if ($outputHandler == 0) {
   			return $result;
  		}
  		if ($outputHandler == 1) {
  	 		echo ("<pre>\n");
   			print_r ($result);
   			echo ("</pre>\n");
  		}
 	}
}


function pagination ($count, $url, $offset ) {
	global $config;
	require ("include/languages/language_".$config["language"].".php");
	
	/* 	URL passed render links with some parameter
			&offset - Offset records passed to next page
	  		&counter - Number of items to be blocked 
	   	Pagination needs $url to build the base URL to render links, its a base url, like 
	   " http://pandora/index.php?sec=godmode&sec2=godmode/admin_access_logs "
	   
	*/
	$block_limit = 15; // Visualize only $block_limit blocks
	if ($count > $config["block_size"]){
		// If exists more registers than I can put in a page, calculate index markers
		$index_counter = ceil($count/$block_size); // Number of blocks of block_size with data
		$index_page = ceil($offset/$block_size)-(ceil($block_limit/2)); // block to begin to show data;
		if ($index_page < 0)
			$index_page = 0;

		// This calculate index_limit, block limit for this search.
		if (($index_page + $block_limit) > $index_counter)
			$index_limit = $index_counter;
		else
			$index_limit = $index_page + $block_limit;

		// This calculate if there are more blocks than visible (more than $block_limit blocks)
		if ($index_counter > $block_limit )
			$paginacion_maxima = 1; // If maximum blocks ($block_limit), show only 10 and "...."
		else
			$paginacion_maxima = 0;

		// This setup first block of query
		if ( $paginacion_maxima == 1)
			if ($index_page == 0)
				$inicio_pag = 0;
			else
				$inicio_pag = $index_page;
		else
			$inicio_pag = 0;

		echo "<div>";
		// Show GOTO FIRST button
		echo '<a href="'.$url.'&offset=0">';
		echo "<img src='images/control_start_blue.png' class='bot'>";
		echo "</a>";
		echo "&nbsp;";
		// Show PREVIOUS button
		if ($index_page > 0){
			$index_page_prev= ($index_page-(floor($block_limit/2)))*$block_size;
			if ($index_page_prev < 0)
				$index_page_prev = 0;
			echo '<a href="'.$url.'&offset='.$index_page_prev.'"><img src="images/control_rewind_blue.png" class="bot"></a>';
		}
		echo "&nbsp;";echo "&nbsp;";
		// Draw blocks markers
		// $i stores number of page
		for ($i = $inicio_pag; $i < $index_limit; $i++) {
			$inicio_bloque = ($i * $block_size);
			$final_bloque = $inicio_bloque + $block_size;
			if ($final_bloque > $count){ // if upper limit is beyond max, this shouldnt be possible !
				$final_bloque = ($i-1)*$block_size + $count-(($i-1) * $block_size);
			}
			echo "<span>";
			
			$inicio_bloque_fake = $inicio_bloque + 1;
			// To Calculate last block (doesnt end with round data,
			// it must be shown if not round to block limit)
			echo '<a href="'.$url.'&offset='.$inicio_bloque.'">';
			if ($inicio_bloque == $offset)
				echo "<b>[ $i ]</b>";
			else
				echo "[ $i ]";
			echo '</a> ';	
			echo "</span>";
		}
		echo "&nbsp;";echo "&nbsp;";
		// Show NEXT PAGE (fast forward)
		// Index_counter stores max of blocks
		if (($paginacion_maxima == 1) AND (($index_counter - $i) > 0)) {
				$prox_bloque = ($i+ceil($block_limit/2))*$block_size;
				if ($prox_bloque > $count)
					$prox_bloque = ($count -1) - $block_size;
				echo '<a href="'.$url.'&offset='.$prox_bloque.'">';
				echo "<img class='bot' src='images/control_fastforward_blue.png'></a> ";
				$i = $index_counter;
		}
		// if exists more registers than i can put in a page (defined by $block_size config parameter)
		// get offset for index calculation
		// Draw "last" block link, ajust for last block will be the same
		// as painted in last block (last integer block).	
		if (($count - $block_size) > 0){
			$myoffset = floor(($count-1)/ $block_size)* $block_size;
			echo '<a href="'.$url.'&offset='.$myoffset.'">';
			echo "<img class='bot' src='images/control_end_blue.png'>";
			echo "</a>";
		}
	// End div and layout
	echo "</div>";
	}
}


// ---------------------------------------------------------------
// Render data in a fashion way :-)
// ---------------------------------------------------------------
function format_numeric ( $number, $decimals=2, $dec_point=".", $thousands_sep=",") {
	if ($number == 0)
		return 0;
	// If has decimals
	if (fmod($number , 1) > 0)
		return number_format ($number, $decimals, $dec_point, $thousands_sep);
	else
		return number_format ($number, 0, $dec_point, $thousands_sep);
}

// ---------------------------------------------------------------
// Render numeric data in a easy way to the user
// ---------------------------------------------------------------
function format_for_graph ( $number , $decimals=2, $dec_point=".", $thousands_sep=",") {
	if ($number > "1000000")
		if (fmod ($number, 1000000) > 0)
			return number_format ($number/1000000, $decimals, $dec_point, $thousands_sep)." M";
		else
			return number_format ($number/1000000, 0, $dec_point, $thousands_sep)." M";
			
	if ($number > "1000")
		if (fmod ($number, 1000) > 0)
			return number_format ($number/1000, $decimals, $dec_point, $thousands_sep )." K";
		else
			return number_format ($number/1000, 0, $dec_point, $thousands_sep )." K";
	// If has decimals
	if (fmod ($number , 1)> 0)
			return number_format ($number, $decimals, $dec_point, $thousands_sep);
	else
			return number_format ($number, 0, $dec_point, $thousands_sep);
}

function give_parameter_get ( $name, $default = "" ){
	$output = $default;
	if (isset ($_GET[$name])){
		$output = $_GET[$name];
	}
	return $output;
}

function give_parameter_post ( $name, $default = "" ){
	$output = $default;
	if (isset ($_POST[$name])){
		$output = $_POST[$name];
	}
	return $output;
}

function give_parameter_get_numeric ( $name, $default = "-1" ){
	$output = $default;
	if (isset ($_GET[$name])){
		$output = $_GET[$name];
	}
	if (is_numeric($output))
		return $output;
	else
		return -1;
}

function give_parameter_post_numeric ( $name, $default = "" ){
	$output = $default;
	if (isset ($_POST[$name])){
		$output = $_POST[$name];
	}
	if (is_numeric($output))
		return $output;
	else
		return -1;
}

function human_time_comparation ( $timestamp ){
	global $lang_label;
	if ($timestamp != ""){
		$ahora=date("Y/m/d H:i:s");
		$seconds = strtotime($ahora) - strtotime($timestamp);
	} else
		$seconds = 0;

	if ($seconds < 3600)
		$render = format_numeric($seconds/60,1)." ".$lang_label["minutes"];
	elseif (($seconds >= 3600) and ($seconds < 86400))
		$render = format_numeric ($seconds/3600,1)." ".$lang_label["hours"];
	elseif (($seconds >= 86400) and ($seconds < 2592000))
		$render = format_numeric ($seconds/86400,1)." ".$lang_label["days"];
	elseif (($seconds >= 2592000)  and ($seconds < 15552000))
		$render = format_numeric ($seconds/2592000,1)." ".$lang_label["months"];
	elseif ($seconds >= 15552000)
		$render = " +6 ".$lang_label["months"];
	return $render;
}

function human_time_description_raw ($seconds){
	global $lang_label;
	if ($seconds < 3600)
		$render = format_numeric($seconds/60,2)." ".$lang_label["minutes"];
	elseif (($seconds >= 3600) and ($seconds < 86400))
		$render = format_numeric ($seconds/3600,2)." ".$lang_label["hours"];
	elseif ($seconds >= 86400)
		$render = format_numeric ($seconds/86400,2)." ".$lang_label["days"];
	return $render;	
}

function human_time_description ($period){
	global $lang_label;
	switch ($period) {
	case 3600: 	$period_label = $lang_label["hour"];
			break;
	case 7200: 	$period_label = $lang_label["2_hours"];
			break;
	case 21600: 	$period_label = $lang_label["6_hours"];
			break;
	case 43200: 	$period_label = $lang_label["12_hours"];
			break;
	case 86400: 	$period_label = $lang_label["last_day"];
			break;
	case 172800: 	$period_label = $lang_label["two_days"];
			break;
	case 432000: 	$period_label = $lang_label["five_days"];
			break;
	case 604800: 	$period_label = $lang_label["last_week"];
			break;
	case 1296000: 	$period_label = $lang_label["15_days"];
			break;
	case 2592000: 	$period_label = $lang_label["last_month"];
			break;
	case 5184000: 	$period_label = $lang_label["two_month"];
			break;
	case 15552000: 	$period_label = $lang_label["six_months"];
			break;
	default: 	$period_label = human_time_description_raw ($period);
	}
	return $period_label;
}

// This function returns MYSQL Date from now - seconds passed as parameter

function human_date_relative ( $seconds ) {
	$ahora=date("Y/m/d H:i:s");
	$ahora_s = date("U");
	$ayer = date ("Y/m/d H:i:s", $ahora_s - $seconds);
	return $ayer;
}

function render_time ($lapse) {
	$myhour = intval(($lapse*30)/60);
	if ($myhour == 0)
		$output = "00";
	else
		$output = $myhour;
	$output .=":";
	$mymin = fmod(($lapse*30),60);
	if ($mymin == 0)
		$output .= "00";
	else
		$output .= $mymin;
	return $output;
}

function get_parameter ($name, $default = '') {
        // POST has precedence
        if (isset($_POST[$name]))
                return get_parameter_post ($name, $default);
        
        if (isset($_GET[$name]))
                return get_parameter_get ($name, $default);
        
        return $default;
}

function get_parameter_get ($name, $default = "") {
    if ((isset ($_GET[$name])) && ($_GET[$name] != ""))
        return safe_input ($_GET[$name]);
    
    return $default;
}

function get_parameter_post ( $name, $default = "" ){
    if ((isset ($_POST[$name])) && ($_POST[$name] != ""))
        return safe_input ($_POST[$name]);
    
    return $default;
}





?>