diff --git a/src/server/cyberhex-code/install/create_admin.php b/src/server/cyberhex-code/install/create_admin.php index 8a84289..f53aab0 100644 --- a/src/server/cyberhex-code/install/create_admin.php +++ b/src/server/cyberhex-code/install/create_admin.php @@ -42,7 +42,7 @@ include "../api/php/log/add_server_entry.php"; //to log things $email=htmlspecialchars($_POST["email"]); $username=htmlspecialchars($_POST["username"]); $password=htmlspecialchars($_POST["password"]); - $permissions="1111111111"; + $permissions="11111111111"; // Create connection $conn = new mysqli($DB_SERVERNAME, $DB_USERNAME, $DB_PASSWORD,$DB_DATABASE); @@ -64,7 +64,7 @@ include "../api/php/log/add_server_entry.php"; //to log things $email=htmlspecialchars($_POST["email"]); $username=htmlspecialchars($_POST["username"]); $password=$_POST["password"]; - $permissions="1111111111"; + $permissions="11111111111"; $hash=password_hash($password, PASSWORD_BCRYPT); $stmt->execute(); diff --git a/src/server/cyberhex-code/system/secure_zone/php/add_user.php b/src/server/cyberhex-code/system/secure_zone/php/add_user.php index 065da39..6837e79 100644 --- a/src/server/cyberhex-code/system/secure_zone/php/add_user.php +++ b/src/server/cyberhex-code/system/secure_zone/php/add_user.php @@ -108,6 +108,16 @@ include "../../../api/php/log/add_server_entry.php"; //to log things Delete/list clients + + 9 + View Incidents + + + + 9 + Manage Incidents + + diff --git a/src/server/cyberhex-code/system/secure_zone/php/index.php b/src/server/cyberhex-code/system/secure_zone/php/index.php index 8c60b0e..c369c07 100644 --- a/src/server/cyberhex-code/system/secure_zone/php/index.php +++ b/src/server/cyberhex-code/system/secure_zone/php/index.php @@ -109,6 +109,17 @@ if(isset($_GET["page"])){ echo('
  • Client List
  • '); ?> + + Incidents

    "); + ?> + diff --git a/src/server/cyberhex-code/system/secure_zone/php/manage_user.php b/src/server/cyberhex-code/system/secure_zone/php/manage_user.php index 57ca3c3..a19d840 100644 --- a/src/server/cyberhex-code/system/secure_zone/php/manage_user.php +++ b/src/server/cyberhex-code/system/secure_zone/php/manage_user.php @@ -171,6 +171,26 @@ include "../../../api/php/log/add_server_entry.php"; //to log things echo(''); ?> + + 10 + View Incidents + '); + else + echo(''); + ?> + + + 11 + Manage Incidents + '); + else + echo(''); + ?> + diff --git a/src/server/cyberhex-code/system/secure_zone/php/perms_functions.php b/src/server/cyberhex-code/system/secure_zone/php/perms_functions.php index 9e349d7..2fbbb96 100644 --- a/src/server/cyberhex-code/system/secure_zone/php/perms_functions.php +++ b/src/server/cyberhex-code/system/secure_zone/php/perms_functions.php @@ -12,7 +12,9 @@ function get_perm_str(){ $p7 = isset( $_POST["database_settings"]); $p8 = isset($_POST["add_clients"]); $p9 = isset($_POST["delete_clients"]); - $p10 = "0"; + $p10 = isset($_POST["view_incidents"]); + $p11 = isset($_POST["manage_incidents"]); + //$p10 = "0"; //init the permission string $perms_str=""; @@ -57,6 +59,10 @@ function get_perm_str(){ $perms_str.="1"; else $perms_str.="0"; + if($p11==1) + $perms_str.="1"; + else + $perms_str.="0"; return $perms_str; } diff --git a/src/server/cyberhex-code/system/secure_zone/php/profile.php b/src/server/cyberhex-code/system/secure_zone/php/profile.php index 09f72a5..12f83e5 100644 --- a/src/server/cyberhex-code/system/secure_zone/php/profile.php +++ b/src/server/cyberhex-code/system/secure_zone/php/profile.php @@ -155,7 +155,8 @@ if ($_SERVER["REQUEST_METHOD"] == "POST") { 1 Database Settings
    1 Add Clients
    1 Client List (manage)
    - 1 Reserved for later use + 1 View Incidents
    + 1 Manage Incidents