diff --git a/pandora_console/godmode/agentes/configurar_agente.php b/pandora_console/godmode/agentes/configurar_agente.php index 3a208e1f7c..793db54308 100644 --- a/pandora_console/godmode/agentes/configurar_agente.php +++ b/pandora_console/godmode/agentes/configurar_agente.php @@ -929,8 +929,9 @@ if ($update_agent) { // if modified some agent paramenter enterprise_hook ('update_agent', array ($id_agente)); ui_print_success_message (__('Successfully updated')); + $unsafe_alias = io_safe_output($alias); db_pandora_audit("Agent management", - "Updated agent $alias", false, false, $info); + "Updated agent $unsafe_alias", false, false, $info); } } @@ -1431,7 +1432,7 @@ if ($update_module) { $edit_module = true; db_pandora_audit("Agent management", - "Fail to try update module '$name' for agent " . $agent["alias"]); + "Fail to try update module '".io_safe_output($name)."' for agent " . io_safe_output($agent["alias"])); } else { if ($prediction_module == 3) { @@ -1449,7 +1450,7 @@ if ($update_module) { $agent = db_get_row ('tagente', 'id_agente', $id_agente); db_pandora_audit("Agent management", - "Updated module '$name' for agent ".$agent["alias"], false, false, io_json_mb_encode($values)); + "Updated module '".io_safe_output($name)."' for agent ". io_safe_output($agent["alias"]), false, false, io_json_mb_encode($values)); } } @@ -1590,7 +1591,7 @@ if ($create_module) { $edit_module = true; $moduletype = $id_module; db_pandora_audit("Agent management", - "Fail to try added module '$name' for agent ".$agent["alias"]); + "Fail to try added module '".io_safe_output($name)."' for agent ".io_safe_output($agent["alias"])); } else { if ($prediction_module == 3) { @@ -1608,7 +1609,7 @@ if ($create_module) { $agent = db_get_row ('tagente', 'id_agente', $id_agente); db_pandora_audit("Agent management", - "Added module '$name' for agent ".$agent["alias"], false, true, io_json_mb_encode($values)); + "Added module '".io_safe_output($name)."' for agent ".io_safe_output($agent["alias"]), false, true, io_json_mb_encode($values)); } } @@ -1731,7 +1732,7 @@ if ($delete_module) { // DELETE agent module ! $agent = db_get_row ('tagente', 'id_agente', $id_agente); db_pandora_audit("Agent management", - "Deleted module '".$module_data["nombre"]."' for agent ".$agent["alias"]); + "Deleted module '".io_safe_output($module_data["nombre"])."' for agent ".io_safe_output($agent["alias"])); } @@ -1764,11 +1765,11 @@ if (!empty($duplicate_module)) { // DUPLICATE agent module ! if ($result) { db_pandora_audit("Agent management", - "Duplicate module '".$id_duplicate_module."' for agent " . $agent["alias"] . " with the new id for clon " . $result); + "Duplicate module '".$id_duplicate_module."' for agent " . io_safe_output($agent["alias"]) . " with the new id for clon " . $result); } else { db_pandora_audit("Agent management", - "Fail to try duplicate module '".$id_duplicate_module."' for agent " . $agent["alias"]); + "Fail to try duplicate module '".$id_duplicate_module."' for agent " . io_safe_output($agent["alias"])); } } diff --git a/pandora_console/godmode/massive/massive_add_profiles.php b/pandora_console/godmode/massive/massive_add_profiles.php index 253992b7f5..559ffa6291 100644 --- a/pandora_console/godmode/massive/massive_add_profiles.php +++ b/pandora_console/godmode/massive/massive_add_profiles.php @@ -48,7 +48,7 @@ if ($create_profiles) { // If the profile doesnt exist, we create it if ($profile_data === false) { db_pandora_audit("User management", - "Added profile for user ".io_safe_input($user)); + "Added profile for user ".io_safe_output($user)); $return = profile_create_user_profile ($user, $profile, $group); if ($return !== false) { $n_added ++; diff --git a/pandora_console/godmode/users/configure_user.php b/pandora_console/godmode/users/configure_user.php index cd8c981c8e..6bc2e973e4 100644 --- a/pandora_console/godmode/users/configure_user.php +++ b/pandora_console/godmode/users/configure_user.php @@ -405,7 +405,7 @@ if ($update_user) { } - db_pandora_audit("User management", "Updated user ".io_safe_input($id), + db_pandora_audit("User management", "Updated user ".io_safe_output($id), false, false, $info); ui_print_result_message ($res1, @@ -463,7 +463,7 @@ if ($add_profile) { $tags = implode(',', $tags); db_pandora_audit("User management", - "Added profile for user ".io_safe_input($id2), false, false, 'Profile: ' . $profile2 . ' Group: ' . $group2 . ' Tags: ' . $tags); + "Added profile for user ".io_safe_output($id2), false, false, 'Profile: ' . $profile2 . ' Group: ' . $group2 . ' Tags: ' . $tags); $return = profile_create_user_profile($id2, $profile2, $group2, false, $tags, $no_hierarchy); ui_print_result_message ($return, __('Profile added successfully'), @@ -479,7 +479,7 @@ if ($delete_profile) { $perfil = db_get_row('tperfil', 'id_perfil', $id_perfil); db_pandora_audit("User management", - "Deleted profile for user ".io_safe_input($id2), false, false, 'The profile with id ' . $id_perfil . ' in the group ' . $perfilUser['id_grupo']); + "Deleted profile for user ".io_safe_output($id2), false, false, 'The profile with id ' . $id_perfil . ' in the group ' . $perfilUser['id_grupo']); $return = profile_delete_user_profile ($id2, $id_up); ui_print_result_message ($return,