janis/ma
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update manage_incident.php

Browse Source
This commit is contained in:
jakani24
2024-06-25 20:42:28 +02:00
parent aceabc8834
commit f08d82a7ab
1 changed files with 20 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
src/server/cyberhex-code/system/secure_zone/php/manage_incident.php
View File

@@ -70,15 +70,10 @@ if(isset($_GET["update_box_id"])){
if(isset($_GET["upload_evidence"])){ if(isset($_GET["upload_evidence"])){
$incident_id=htmlspecialchars($_GET["incident_id"]); $incident_id=htmlspecialchars($_GET["incident_id"]);
$target_dir = "/var/www/html/incidents/$incident_id/evidence"; $target_dir = "/var/www/html/incidents/$incident_id/evidence";
$original_filename = basename($_FILES["fileToUpload"]["name"]); $original_filename = basename($_FILES["fileToUpload"]["name"]);
$new_filename = $original_filename . ".evidence"; $new_filename = $original_filename . ".evidence";
$target_file = $target_dir . $new_filename; $target_file = $target_dir . $new_filename;
if (move_uploaded_file($_FILES["fileToUpload"]["tmp_name"], $target_file)) { move_uploaded_file($_FILES["fileToUpload"]["tmp_name"], $target_file);
echo "The file " . htmlspecialchars($original_filename) . " has been uploaded as ";
} else {
echo "Sorry, there was an error uploading your file.";
}
} }
?> ?>
<!DOCTYPE html> <!DOCTYPE html>
@@ -146,16 +141,33 @@ if(isset($_GET["upload_evidence"])){
</div> </div>
<div id="evidence" style="display:none"> <div id="evidence" style="display:none">
<p>Files uploaded here can not be deleted. You can upload important files that might help authoritys here.</p> <p>Files uploaded here can not be deleted. You can upload important files that might help authoritys here.</p>
<form action="manage_incident.php?show=todo&upload_evidence=true&incident_id=<?php echo($_GET["incident_id"]); ?>" method="post" enctype="multipart/form-data"> <form action="manage_incident.php?show=evidence&upload_evidence=true&incident_id=<?php echo($_GET["incident_id"]); ?>" method="post" enctype="multipart/form-data">
<div class="form-group"> <div class="form-group">
<label for="fileToUpload">Select file to upload:</label> <label for="fileToUpload">Select file to upload:</label>
<input type="file" class="form-control-file" name="fileToUpload" id="fileToUpload" required> <input type="file" class="form-control-file" name="fileToUpload" id="fileToUpload" required>
</div> </div>
<button type="submit" class="btn btn-primary">Upload file</button> <button type="submit" class="btn btn-primary">Upload file</button>
</form> </form>
<table class="table">
<tr><th>File</th><th>Download</th></tr>
<?php <?php
//list files for download $incident_id=htmlspecialchars($_GET["incident_id"]);
$directory = '/var/www/html/incidents/$incident_id/evidence';
$csvFiles = glob($directory . '*.evidence');
$fileCreationTimes = [];
//sort the files
foreach ($csvFiles as $file) {
$fileCreationTimes[$file] = filectime($file);
}
arsort($fileCreationTimes);
// Loop through each file and print its name
foreach ($fileCreationTimes as $file=> $creationTime) {
echo("<tr><td>".basename($file)."</td><td><a href='/backup/".basename($file)."' download>Download</a></td></tr>");
}
?> ?>
</table>
</div> </div>
<div id="chat" style="display:none"> <div id="chat" style="display:none">