411 lines
14 KiB
PHP
411 lines
14 KiB
PHP
<?php
|
|
// phpcs:disable Squiz.NamingConventions.ValidVariableName.MemberNotCamelCaps
|
|
/**
|
|
* Controller for Audit Logs
|
|
*
|
|
* @category Controller
|
|
* @package Pandora FMS
|
|
* @subpackage Community
|
|
* @version 1.0.0
|
|
* @license See below
|
|
*
|
|
* ______ ___ _______ _______ ________
|
|
* | __ \.-----.--.--.--| |.-----.----.-----. | ___| | | __|
|
|
* | __/| _ | | _ || _ | _| _ | | ___| |__ |
|
|
* |___| |___._|__|__|_____||_____|__| |___._| |___| |__|_|__|_______|
|
|
*
|
|
* ============================================================================
|
|
* Copyright (c) 2005-2022 Artica Soluciones Tecnologicas
|
|
* Please see http://pandorafms.org for full contribution list
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation for version 2.
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
* ============================================================================
|
|
*/
|
|
// Begin.
|
|
global $config;
|
|
|
|
// Necessary classes for extends.
|
|
require_once $config['homedir'].'/include/class/HTML.class.php';
|
|
enterprise_include_once('godmode/admin_access_logs.php');
|
|
|
|
/**
|
|
* Class AuditLog
|
|
*/
|
|
class AuditLog extends HTML
|
|
{
|
|
|
|
/**
|
|
* Allowed methods to be called using AJAX request.
|
|
*
|
|
* @var array
|
|
*/
|
|
public $AJAXMethods = [ 'draw' ];
|
|
|
|
/**
|
|
* Ajax page.
|
|
*
|
|
* @var string
|
|
*/
|
|
private $ajaxController;
|
|
|
|
|
|
/**
|
|
* Class constructor
|
|
*
|
|
* @param string $ajaxController Ajax controller.
|
|
*/
|
|
public function __construct(string $ajaxController)
|
|
{
|
|
global $config;
|
|
|
|
check_login();
|
|
|
|
if (check_acl($config['id_user'], 0, 'PM') === false
|
|
&& is_user_admin($config['id_user']) === true
|
|
) {
|
|
db_pandora_audit(
|
|
AUDIT_LOG_ACL_VIOLATION,
|
|
'Trying to access Audit Logs'
|
|
);
|
|
include 'general/noaccess.php';
|
|
return;
|
|
}
|
|
|
|
// Set the ajax controller.
|
|
$this->ajaxController = $ajaxController;
|
|
|
|
}
|
|
|
|
|
|
/**
|
|
* Run view
|
|
*
|
|
* @return void
|
|
*/
|
|
public function run()
|
|
{
|
|
// Javascript.
|
|
ui_require_jquery_file('pandora');
|
|
// CSS.
|
|
ui_require_css_file('wizard');
|
|
ui_require_css_file('discovery');
|
|
// Datatables list.
|
|
try {
|
|
$columns = [
|
|
'id_usuario',
|
|
'accion',
|
|
'fecha',
|
|
'ip_origen',
|
|
'descripcion',
|
|
];
|
|
|
|
$column_names = [
|
|
__('User'),
|
|
__('Action'),
|
|
__('Date'),
|
|
__('Source IP'),
|
|
__('Comments'),
|
|
];
|
|
|
|
if (enterprise_installed() === true) {
|
|
array_push(
|
|
$columns,
|
|
[
|
|
'text' => 'security',
|
|
'class' => 'w80px action_buttons show_security_info',
|
|
],
|
|
[
|
|
'text' => 'action',
|
|
'class' => 'w80px action_buttons show_extended_info',
|
|
]
|
|
);
|
|
|
|
array_push($column_names, __('S.'), __('A.'));
|
|
}
|
|
|
|
$this->tableId = 'audit_logs';
|
|
|
|
// Header (only in Node).
|
|
if (is_metaconsole() === false) {
|
|
ui_print_standard_header(
|
|
__('%s audit', get_product_name()).' » '.__('Review Logs'),
|
|
'images/gm_log.png',
|
|
false,
|
|
'',
|
|
false,
|
|
[],
|
|
[
|
|
[
|
|
'link' => '',
|
|
'label' => __('Admin Tools'),
|
|
],
|
|
[
|
|
'link' => '',
|
|
'label' => __('System Audit log'),
|
|
],
|
|
]
|
|
);
|
|
}
|
|
|
|
if (is_metaconsole() === true) {
|
|
// Only in case of Metaconsole, format the frame.
|
|
open_meta_frame();
|
|
}
|
|
|
|
// Load datatables user interface.
|
|
ui_print_datatable(
|
|
[
|
|
'id' => $this->tableId,
|
|
'class' => 'info_table',
|
|
'style' => 'width: 100%',
|
|
'columns' => $columns,
|
|
'column_names' => $column_names,
|
|
'ajax_url' => $this->ajaxController,
|
|
'ajax_data' => ['method' => 'draw'],
|
|
'ajax_postprocces' => 'process_datatables_item(item)',
|
|
'no_sortable_columns' => [-1],
|
|
'order' => [
|
|
'field' => 'date',
|
|
'direction' => 'asc',
|
|
],
|
|
'search_button_class' => 'sub filter float-right',
|
|
'form' => [
|
|
'inputs' => [
|
|
[
|
|
'label' => __('Search'),
|
|
'type' => 'text',
|
|
'class' => 'w200px',
|
|
'id' => 'filter_text',
|
|
'name' => 'filter_text',
|
|
],
|
|
[
|
|
'label' => __('Max. hours old'),
|
|
'type' => 'text',
|
|
'class' => 'w100px',
|
|
'id' => 'filter_period',
|
|
'name' => 'filter_period',
|
|
],
|
|
[
|
|
'label' => __('IP'),
|
|
'type' => 'text',
|
|
'class' => 'w100px',
|
|
'id' => 'filter_ip',
|
|
'name' => 'filter_ip',
|
|
],
|
|
[
|
|
'label' => __('Action'),
|
|
'type' => 'select_from_sql',
|
|
'nothing' => __('All'),
|
|
'nothing_value' => '-1',
|
|
'sql' => 'SELECT DISTINCT(accion), accion AS text FROM tsesion',
|
|
'class' => 'mw250px',
|
|
'id' => 'filter_type',
|
|
'name' => 'filter_type',
|
|
],
|
|
[
|
|
'label' => __('User'),
|
|
'type' => 'select_from_sql',
|
|
'nothing' => __('All'),
|
|
'nothing_value' => '-1',
|
|
'sql' => 'SELECT id_user, id_user AS text FROM tusuario',
|
|
'class' => 'mw250px',
|
|
'id' => 'filter_user',
|
|
'name' => 'filter_user',
|
|
],
|
|
],
|
|
],
|
|
]
|
|
);
|
|
} catch (Exception $e) {
|
|
echo $e->getMessage();
|
|
}
|
|
|
|
if (is_metaconsole() === true) {
|
|
// Close the frame.
|
|
close_meta_frame();
|
|
}
|
|
|
|
// Load own javascript file.
|
|
echo $this->loadJS();
|
|
|
|
}
|
|
|
|
|
|
/**
|
|
* Get the data for draw the table.
|
|
*
|
|
* @return void.
|
|
*/
|
|
public function draw()
|
|
{
|
|
global $config;
|
|
// Initialice filter.
|
|
$filter = '1=1';
|
|
// Init data.
|
|
$data = [];
|
|
// Count of total records.
|
|
$count = 0;
|
|
// Catch post parameters.
|
|
$start = get_parameter('start', 0);
|
|
$length = get_parameter('length', $config['block_size']);
|
|
$order = get_datatable_order();
|
|
$filters = get_parameter('filter', []);
|
|
$this->filterType = $filters['filter_type'];
|
|
$this->filterUser = $filters['filter_user'];
|
|
$this->filterText = $filters['filter_text'];
|
|
$this->filterPeriod = (empty($filters['filter_period']) === false) ? $filters['filter_period'] : 24;
|
|
$this->filterIp = $filters['filter_ip'];
|
|
|
|
if (empty($this->filterType) === false && $this->filterType !== '-1') {
|
|
$filter .= sprintf(" AND accion = '%s'", $this->filterType);
|
|
}
|
|
|
|
if (empty($this->filterUser) === false && $this->filterUser !== '-1') {
|
|
$filter .= sprintf(" AND id_usuario = '%s'", $this->filterUser);
|
|
}
|
|
|
|
if (empty($this->filterText) === false) {
|
|
$filter .= sprintf(
|
|
" AND (accion LIKE '%%%s%%' OR descripcion LIKE '%%%s%%')",
|
|
$this->filterText,
|
|
$this->filterText
|
|
);
|
|
}
|
|
|
|
if (empty($this->filterIp) === false) {
|
|
$filter .= sprintf(" AND ip_origen LIKE '%%%s%%'", $this->filterIp);
|
|
}
|
|
|
|
if (empty($this->filterPeriod) === false) {
|
|
$filter .= sprintf(' AND fecha >= DATE_ADD(NOW(), INTERVAL -%d HOUR)', $this->filterPeriod);
|
|
}
|
|
|
|
$count = (int) db_get_value_sql(sprintf('SELECT COUNT(*) as "total" FROM tsesion WHERE %s', $filter));
|
|
|
|
$sql = sprintf(
|
|
'SELECT *
|
|
FROM tsesion
|
|
WHERE %s
|
|
ORDER BY %s
|
|
LIMIT %d, %d',
|
|
$filter,
|
|
$order,
|
|
$start,
|
|
$length
|
|
);
|
|
$data = db_get_all_rows_sql($sql);
|
|
|
|
if (empty($data) === false) {
|
|
$data = array_reduce(
|
|
$data,
|
|
function ($carry, $item) {
|
|
global $config;
|
|
// Transforms array of arrays $data into an array
|
|
// of objects, making a post-process of certain fields.
|
|
$tmp = (object) $item;
|
|
|
|
$tmp->id_usuario = io_safe_output($tmp->id_usuario);
|
|
$tmp->ip_origen = io_safe_output($tmp->ip_origen);
|
|
$tmp->descripcion = io_safe_output($tmp->descripcion);
|
|
$tmp->accion = ui_print_session_action_icon($tmp->accion, true).$tmp->accion;
|
|
$tmp->utimestamp = ui_print_help_tip(
|
|
date(
|
|
$config['date_format'],
|
|
$tmp->utimestamp
|
|
),
|
|
true
|
|
).ui_print_timestamp($tmp->utimestamp, true);
|
|
|
|
if (enterprise_installed() === true) {
|
|
$tmp->security = enterprise_hook('cell1EntepriseAudit', [$tmp->id_sesion]);
|
|
$tmp->action = enterprise_hook('cell2EntepriseAudit', []);
|
|
$tmp->extendedInfo = enterprise_hook('rowEnterpriseAudit', [$tmp->id_sesion]);
|
|
}
|
|
|
|
$carry[] = $tmp;
|
|
return $carry;
|
|
}
|
|
);
|
|
}
|
|
|
|
echo json_encode(
|
|
[
|
|
'data' => $data,
|
|
'recordsTotal' => $count,
|
|
'recordsFiltered' => $count,
|
|
]
|
|
);
|
|
}
|
|
|
|
|
|
/**
|
|
* Checks if target method is available to be called using AJAX.
|
|
*
|
|
* @param string $method Target method.
|
|
*
|
|
* @return boolean True allowed, false not.
|
|
*/
|
|
public function ajaxMethod(string $method)
|
|
{
|
|
return in_array($method, $this->AJAXMethods);
|
|
}
|
|
|
|
|
|
/**
|
|
* Load Javascript code.
|
|
*
|
|
* @return string.
|
|
*/
|
|
public function loadJS()
|
|
{
|
|
// Nothing for this moment.
|
|
ob_start();
|
|
|
|
// Javascript content.
|
|
?>
|
|
<script type="text/javascript">
|
|
function format ( d ) {
|
|
var output = '';
|
|
|
|
if (d.extendedInfo === '') {
|
|
output = "<?php echo __('There is no additional information to display'); ?>";
|
|
} else {
|
|
output = d.extendedInfo;
|
|
}
|
|
|
|
return output;
|
|
}
|
|
|
|
$(document).ready(function() {
|
|
// Add event listener for opening and closing details
|
|
$('#audit_logs tbody').on('click', 'td.show_extended_info', function () {
|
|
var tr = $(this).closest('tr');
|
|
var table = <?php echo 'dt_'.$this->tableId; ?>;
|
|
var row = table.row( tr );
|
|
|
|
if ( row.child.isShown() ) {
|
|
// This row is already open - close it
|
|
row.child.hide();
|
|
tr.removeClass('shown');
|
|
}
|
|
else {
|
|
// Open this row
|
|
row.child( format(row.data()) ).show();
|
|
tr.addClass('shown');
|
|
}
|
|
} );
|
|
} );
|
|
</script>
|
|
<?php
|
|
// EOF Javascript content.
|
|
return ob_get_clean();
|
|
}
|
|
|
|
|
|
}
|