From cdcfc7b644abea59b46ccbbfbefc87b34d2442d4 Mon Sep 17 00:00:00 2001 From: jakani24 Date: Thu, 8 Feb 2024 21:18:42 +0100 Subject: [PATCH] u --- .../system/secure_zone/php/index.php | 7 +- .../secure_zone/php/rtp_client_settings.php | 328 ++++++++++++++++++ 2 files changed, 330 insertions(+), 5 deletions(-) create mode 100644 src/server/cyberhex-code/system/secure_zone/php/rtp_client_settings.php diff --git a/src/server/cyberhex-code/system/secure_zone/php/index.php b/src/server/cyberhex-code/system/secure_zone/php/index.php index 28e9390..f674132 100644 --- a/src/server/cyberhex-code/system/secure_zone/php/index.php +++ b/src/server/cyberhex-code/system/secure_zone/php/index.php @@ -66,11 +66,8 @@ if(isset($_GET["page"])){

Cyberhex settings

Clients

diff --git a/src/server/cyberhex-code/system/secure_zone/php/rtp_client_settings.php b/src/server/cyberhex-code/system/secure_zone/php/rtp_client_settings.php new file mode 100644 index 0000000..af51daa --- /dev/null +++ b/src/server/cyberhex-code/system/secure_zone/php/rtp_client_settings.php @@ -0,0 +1,328 @@ +connect_error) { + $success=0; + die("Connection failed: " . $conn->connect_error); + } +if(isset($_GET["update"])){ + safe_settings(); +} +if(isset($_GET["delete"])){ + delete_item($_GET["db"],$_GET["delete"]); +} +if(isset($_GET["add"])){ + add_item($_GET["add"],$_GET["value"],$_GET["field"]); +} +load_settings(); +function delete_item($db,$id){ + include "../../../config.php"; + $conn = new mysqli($DB_SERVERNAME, $DB_USERNAME, $DB_PASSWORD,$DB_DATABASE); + if ($conn->connect_error) { + $success=0; + die("Connection failed: " . $conn->connect_error); + } + $db=htmlspecialchars($db); + $id=htmlspecialchars($id); + $stmt = $conn->prepare("delete from $db where id=$id;"); + $stmt->execute(); + $stmt->close(); + $conn -> close(); +} +function add_item($db,$value,$field){ + include "../../../config.php"; + $conn = new mysqli($DB_SERVERNAME, $DB_USERNAME, $DB_PASSWORD,$DB_DATABASE); + if ($conn->connect_error) { + $success=0; + die("Connection failed: " . $conn->connect_error); + } + $db=htmlspecialchars($db); + $field=htmlspecialchars($field); + $stmt = $conn->prepare("INSERT INTO $db ($field) VALUES(?);"); + $stmt->bind_param("s",$value); + $stmt->execute(); + $stmt->close(); + $conn -> close(); +} +function safe_settings(){ + include "../../../config.php"; + $conn = new mysqli($DB_SERVERNAME, $DB_USERNAME, $DB_PASSWORD,$DB_DATABASE); + if ($conn->connect_error) { + $success=0; + die("Connection failed: " . $conn->connect_error); + } + $value=htmlspecialchars($_GET["value"]); + $name=htmlspecialchars($_GET["update"]); + //update what should be done if a virus is found + if($_GET["update"]=="setting_virus_ctrl_virus_found_action"){ + $stmt = $conn->prepare("INSERT INTO settings (name,value) VALUES (?,?) ON DUPLICATE KEY UPDATE value = ?;"); + //$stmt = $conn->prepare("UPDATE settings set value=? WHERE name='virus_ctrl:virus_found:action';"); + $stmt->bind_param("sss",$name,$value,$value); + $stmt->execute(); + $stmt->close(); + } + + if($_GET["update"]=="setting_server_server_url"){ + $stmt = $conn->prepare("INSERT INTO settings (name,value) VALUES (?,?) ON DUPLICATE KEY UPDATE value = ?;"); + $stmt->bind_param("sss",$name,$value,$value); + $stmt->execute(); + $stmt->close(); + } + if($_GET["update"]=="setting_rtp_folder_scan_status"){ + $stmt = $conn->prepare("INSERT INTO settings (name,value) VALUES (?,?) ON DUPLICATE KEY UPDATE value = ?;"); + $stmt->bind_param("sss",$name,$value,$value); + $stmt->execute(); + $stmt->close(); + } + if($_GET["update"]=="rtp_included"){ + $id=htmlspecialchars($_GET["id"]); + $stmt = $conn->prepare("UPDATE rtp_included set path= ? WHERE id=$id"); + $stmt->bind_param("s",$value); + $stmt->execute(); + $stmt->close(); + } + if($_GET["update"]=="rtp_excluded"){ + $id=htmlspecialchars($_GET["id"]); + $stmt = $conn->prepare("UPDATE rtp_excluded set path= ? WHERE id=$id"); + $stmt->bind_param("s",$value); + $stmt->execute(); + $stmt->close(); + } + $conn->close(); + +} +function load_settings(){ + global $setting_virus_ctrl_virus_found_action ; + global $setting_server_server_url; + global $setting_rtp_folder_scan_status; + include "../../../config.php"; + $conn = new mysqli($DB_SERVERNAME, $DB_USERNAME, $DB_PASSWORD, $DB_DATABASE); + if ($conn->connect_error) { + die("Connection failed: " . $conn->connect_error); + } + //get setting: setting_virus_ctrl_virus_found_action + $sql = "SELECT * FROM settings WHERE name = 'setting_virus_ctrl_virus_found_action'"; + $stmt = $conn->prepare($sql); + // Execute the statement + $stmt->execute(); + // Get the result + $result = $stmt->get_result(); + $row = $result->fetch_assoc(); + if($result->num_rows > 0){ + $setting_virus_ctrl_virus_found_action=$row["value"]; + } + $stmt -> close(); + + //get setting: setting_rtp_folder_scan_status + $sql = "SELECT * FROM settings WHERE name = 'setting_rtp_folder_scan_status'"; + $stmt = $conn->prepare($sql); + // Execute the statement + $stmt->execute(); + // Get the result + $result = $stmt->get_result(); + $row = $result->fetch_assoc(); + if($row!==null){ + $setting_rtp_folder_scan_status=$row["value"]; + } + $stmt -> close(); + + + //get setting: setting_server_server_url + $sql = "SELECT * FROM settings WHERE name = 'setting_server_server_url'"; + $stmt = $conn->prepare($sql); + // Execute the statement + $stmt->execute(); + // Get the result + $result = $stmt->get_result(); + $row = $result->fetch_assoc(); + if($row!==null){ + $setting_server_server_url=$row["value"]; + } + $stmt -> close(); + $conn -> close(); +} +?> + + + + + + + Change Password + + + +
+
+
+
+
+

Client settings

+
+
+ +
What should be done, if the scanner finds a virus?
+
+ + +
+
+
What is the URL of this server? (url or ip address where the clients connect to)
+ +
+
RTP: folderscanner on/off
+
+ "); + else + echo (""); + ?> + +
+
+
Included folders for RTP folderscanner
+ + + + + + + + + + + + + + + prepare($sql); + // Execute the statement + $stmt->execute(); + // Get the result + $result = $stmt->get_result(); + while ($row = $result->fetch_assoc()){ + //print out the items + echo(""); + echo(""); + echo(""); + echo(""); + echo(""); + } + + $stmt -> close(); + ?> + +
#PathAdd / Delete
000
".$row["id"]."
+
Excluded folders for RTP folderscanner
+ + + + + + + + + + + + + + + prepare($sql); + // Execute the statement + $stmt->execute(); + // Get the result + $result = $stmt->get_result(); + while ($row = $result->fetch_assoc()){ + //print out the items + echo(""); + echo(""); + echo(""); + echo(""); + echo(""); + } + + $stmt -> close(); + ?> + +
#PathAdd / Delete
000
".$row["id"]."
+
+
+
+
+
+ +