janis/ma
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

adding incident infrastructure

Browse Source
This commit is contained in:
jakani24
2024-06-20 15:31:46 +02:00
parent 568ce373b1
commit a379d739c8
3 changed files with 112 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

109
src/server/cyberhex-code/system/secure_zone/php/incident_list.php Normal file
View File

@@ -0,0 +1,109 @@
<?php
session_start();
// Check if the user is logged in
if (!isset($_SESSION['username']) or !isset($_SESSION["login"])) {
// Redirect to the login page or handle unauthorized access
header("Location: /login.php");
exit();
}
$username = $_SESSION['username'];
$perms = $_SESSION["perms"];
$email = $_SESSION["email"];
if($perms[9]!=="1" && $perms[10]!=="1"){
header("location:/system/insecure_zone/php/no_access.php");
$block=1;
exit();
}else{
$block=0;
}
include "../../../api/php/log/add_server_entry.php"; //to log things
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta name="viewport" content="width=device-width, initial-scale=1">
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC" crossorigin="anonymous">
<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js" integrity="sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM" crossorigin="anonymous"></script>
<title>Change Password</title>
</head>
<body>
<div class="container mt-5">
<div class="row justify-content-center">
<div class="col-md-12">
<div class="card">
<div class="card-header">
<h4>Incident list</h4>
</div>
<div class="card-body">
<?php
//include db pw
include "../../../config.php";
$conn = new mysqli($DB_SERVERNAME, $DB_USERNAME, $DB_PASSWORD, $DB_DATABASE);
if ($conn->connect_error) {
die("Connection failed: " . $conn->connect_error);
}
//get count of users
$sql = "SELECT count(*) AS incident_count FROM incidents";
$stmt = $conn->prepare($sql);
// Execute the statement
$stmt->execute();
// Get the result
$result = $stmt->get_result();
$row = $result->fetch_assoc();
$num_of_incidents=$row["incident_count"];
$stmt->close();
// Create a connection
$conn = new mysqli($DB_SERVERNAME, $DB_USERNAME, $DB_PASSWORD, $DB_DATABASE);
// Check the connection
if ($conn->connect_error) {
die("Connection failed: " . $conn->connect_error);
}
$last_id=-1;
//create the table header
echo('<table class="table">');
echo('<thead>');
echo('<tr>');
echo('<th>Incident Id</th><th>Status</th><th>Goto Incident</th>');
echo('</tr>');
echo('</thead>');
echo('<tbody>');
while($num_of_incidents!=0){
$sql = "SELECT * FROM incidents where id > $last_id";
$stmt = $conn->prepare($sql);
// Execute the statement
$stmt->execute();
// Get the result
$result = $stmt->get_result();
$row = $result->fetch_assoc();
$last_id=$row["id"];
$status=$row["status"];
if($last_id!=1){ //number 1 is the unauthenticated user
echo('<tr>');
echo('<td>'.$last_id.'</td>');
echo('<td>'.$status.'</td>');
echo('<td><a href="manage_incident.php?incident_id='.$last_id.'">Goto Incident</a></td>');
echo('</tr>');
}
$stmt->close();
$num_of_incidents--;
}
echo('</tbody>');
echo('</table>');
$conn->close();
?>
</div>
</div>
</div>
</div>
</div>
</body>
</html>

6
src/server/cyberhex-code/system/secure_zone/php/index.php
View File

@@ -116,12 +116,10 @@ if(isset($_GET["page"])){
?>
<ul>
<?php
if($perms[9]=="1")
if($perms[9]=="1" or $perms[10]=="1")
echo('<li><a href="index.php?page=manage_incident.php">View Incidents</a></li>');
?>
<?php
if($perms[10]=="1")
echo('<li><a href="index.php?page=manage_incident.php">Manage Incidents</a></li>');
echo('<li><a href="index.php?page=add_incident.php">Add Incident</a></li>');
?>
</ul>

2
src/server/cyberhex-code/system/secure_zone/php/manage_incident.php
View File

@@ -44,7 +44,7 @@ include "../../../api/php/log/add_server_entry.php"; //to log things
<div class="col-md-12">
<div class="card">
<div class="card-header">
<h4>Client settings</h4>
<h4>Incident</h4>
</div>
<div class="card-body">
<ul class="nav nav-tabs">