janis/ma
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update export_log.php

Browse Source
This commit is contained in:
jakani24
2024-03-09 15:36:35 +01:00
parent a8282e835d
commit 0e98e3f368
1 changed files with 5 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
src/server/cyberhex-code/system/secure_zone/php/export_log.php
View File

@@ -60,16 +60,16 @@ if ($perms[2] !== "1") {
$filter_query = ""; $filter_query = "";
// Apply filters if present // Apply filters if present
if (isset($_GET["loglevel"])) { if (isset($_GET["loglevel"])) {
$filter_query .= "&loglevel=" . urlencode($_GET["loglevel"]); $filter_query .= " AND loglevel LIKE '%" . $conn->real_escape_string($_GET["loglevel"]) . "%'";
} }
if (isset($_GET["logtext"])) { if (isset($_GET["logtext"])) {
$filter_query .= "&logtext=" . urlencode($_GET["logtext"]); $filter_query .= " AND logtext LIKE '%" . $conn->real_escape_string($_GET["logtext"]) . "%'";
} }
if (isset($_GET["machine_id"])) { if (isset($_GET["machine_id"])) {
$filter_query .= "&machine_id=" . urlencode($_GET["machine_id"]); $filter_query .= " AND machine_id LIKE '%" . $conn->real_escape_string($_GET["machine_id"]) . "%'";
} }
if (isset($_GET["time"])) { if (isset($_GET["time"])) {
$filter_query .= "&time=" . urlencode($_GET["time"]); $filter_query .= " AND time LIKE '%" . $conn->real_escape_string($_GET["time"]) . "%'";
} }
$export_file = fopen($export_file_path, 'w'); $export_file = fopen($export_file_path, 'w');
@@ -80,16 +80,7 @@ if ($perms[2] !== "1") {
} else { } else {
fwrite($export_file, "id;loglevel;logtext;machine_id;time\r\n"); fwrite($export_file, "id;loglevel;logtext;machine_id;time\r\n");
$sql = "SELECT * FROM log"; $sql = "SELECT * FROM log WHERE 1=1 $filter_query";
// Apply filters if present
if (!empty($filter_query)) {
$sql .= " WHERE 1=1";
parse_str(substr($filter_query, 1), $filter_array);
foreach ($filter_array as $key => $value) {
$sql .= " AND $key LIKE '%" . $conn->real_escape_string($value) . "%'";
}
}
$result = $conn->query($sql); $result = $conn->query($sql);