pandorafms/pandora_console/godmode/admin_access_logs.php

<?php

// Pandora - The Free Monitoring System
// This code is protected by GPL license.
// Este codigo esta protegido por la licencia GPL.
// Sancho Lerena <slerena@gmail.com>, 2003-2005
// Raul Mateos <raulofpandora@gmail.com>, 2005-2006

// Load global vars
require("include/config.php");
//require("include/functions.php");
//require("include/functions_db.php");
if (comprueba_login() == 0) 
   	$id_usuario= $_SESSION["id_usuario"];
   	if ( (dame_admin($id_user)==1) OR (give_acl($id_usuario, 0, "PM")==1)){ 
	 	echo "<h2>".$lang_label["audit_title"]."</h2>";
	 	if (isset($_GET["offset"]))
			$offset=$_GET["offset"];
		else
			$offset=0;

		// Manage GET/POST parameter for subselect on action type. POST parameter are proccessed before GET parameter (if passed)
		if (isset($_GET["tipo_log"])){
			$tipo_log = $_GET["tipo_log"];
			$tipo_log_select = " WHERE accion='".$tipo_log."' ";
		} elseif (isset($_POST["tipo_log"])){
			$tipo_log = $_POST["tipo_log"];
			if ($tipo_log == "-1"){
				$tipo_log_select = "";
				unset($tipo_log);
			} else
				$tipo_log_select = " WHERE accion='".$tipo_log."' ";
		}
		else $tipo_log_select= "";

	// generate select 
	
	echo "<h3>".$lang_label["filter"]."</h3>"; 
	echo "<form name='query_sel' method='post' action='index.php?sec=godmode&sec2=godmode/admin_access_logs'>";
	echo "<table border='0'><tr><td valign='middle'>";
	echo "<select name='tipo_log' onChange='javascript:this.form.submit();'>";
	if (isset($tipo_log))
		echo "<option>".$tipo_log;
	echo "<option value='-1'>".$lang_label["all"];
	$sql3="SELECT DISTINCT (accion) FROM `tsesion`"; 
	// Prepare index for pagination
	$result3=mysql_query($sql3);
	while ($row3=mysql_fetch_array($result3)){
		if (isset($tipo_log)) {
			if ($tipo_log != $row3[0])
				echo "<option value='".$row3[0]."'>".$row3[0];
		} else
		echo "<option value='".$row3[0]."'>".$row3[0];
	}
	echo "</select>";
	echo "<td valign='middle'><noscript><input name='uptbutton' type='submit' class='sub' value='".$lang_label["show"]."'></noscript>";
	echo "</table></form>";

	$sql2="SELECT COUNT(*) FROM tsesion ".$tipo_log_select." ORDER BY fecha DESC";
	$result2=mysql_query($sql2);
	$row2=mysql_fetch_array($result2);
	$counter = $row2[0];
	if (isset ($tipo_log))
		$url = "index.php?sec=godmode&sec2=godmode/admin_access_logs&tipo_log=".$tipo_log;
	else
		$url = "index.php?sec=godmode&sec2=godmode/admin_access_logs";

	//echo "URLTipolog  $tipo_log";	
		pagination ($counter, $url, $offset);
		echo '<br>';
	// table header
		echo '<table cellpadding="3" cellspacing="3" width=700>'; 
		echo '<tr>';
		echo '<th class="w70">'.$lang_label["user"].'</th>'; 
		echo '<th>'.$lang_label["action"].'</th>';
		echo '<th class="w130">'.$lang_label["date"].'</th>'; 
		echo '<th class="w100">'.$lang_label["src_address"].'</th>'; 
		echo '<th class="w200">'.$lang_label["comments"].'</th>'; 
	
	// Skip offset records
		$query1="SELECT * FROM tsesion ".$tipo_log_select." ORDER BY fecha DESC"; 
		$result=mysql_query($query1);  
		$offset_counter = 0;
		while ($offset_counter < $offset){
			if ($row=mysql_fetch_array($result))
				$offset_counter++;
			else
				$offset_counter = $offset; //exit condition
		}
		
		$offset_counter = 0;	

	// Get data
		while ($row=mysql_fetch_array($result) and ($offset_counter < $block_size) ){  
		   $usuario=$row["ID_usuario"];
		   echo '<tr><td class="datos_id">'.$usuario;
		   echo '<td class="datos">'.$row["accion"];
		   echo '<td class="datosf9">'.$row["fecha"];
		   echo '<td class="datosf9">'.$row["IP_origen"];
		   echo '<td class="datos">'.$row["descripcion"];
		   echo '</tr>';
		   $offset_counter++;
		}	 
	
	// end table
		echo "<tr><td colspan='5'><div class='raya'></div></td></tr></table>"; 

	} // End security control
	else {
		audit_db($id_user,$REMOTE_ADDR, "ACL Violation","Trying to access Access Logs section ");
		require ("general/noaccess.php");
	}
?>