Features LDAP, Rights, Cables, Menu improvements and bug fixing
This commit is contained in:
73
submit.php
73
submit.php
@@ -329,11 +329,12 @@ if (isset($_POST['add'])) {
|
||||
$vlan_name = sanitize($_POST['vlan_name']);
|
||||
$vlan_number = sanitize($_POST['vlan_number']);
|
||||
$vlan_info = sanitize($_POST['vlan_info']);
|
||||
$vlan_color = sanitize($_POST['vlan_color']);
|
||||
|
||||
$sql = "INSERT INTO vlan (vlan_name, vlan_number, vlan_info)
|
||||
VALUE (?, ?, ?)";
|
||||
$sql = "INSERT INTO vlan (vlan_name, vlan_number, vlan_color, vlan_info)
|
||||
VALUE (?, ?, ?, ?)";
|
||||
$sth = $dbh->prepare($sql);
|
||||
$sth->execute([$vlan_name, $vlan_number, $vlan_info]);
|
||||
$sth->execute([$vlan_name, $vlan_number, $vlan_color, $vlan_info]);
|
||||
|
||||
header_location("vlanview.php?vlan_id=" . $dbh->lastInsertId());
|
||||
break;
|
||||
@@ -497,7 +498,7 @@ if (isset($_POST['del'])) {
|
||||
case ("vlan") :
|
||||
$vlan_id = sanitize($_POST['vlan_id']);
|
||||
|
||||
$sth = $dbh->prepare("DELETE FROM vlan WHERE vlan_id=");
|
||||
$sth = $dbh->prepare("DELETE FROM vlan WHERE vlan_id=?");
|
||||
$sth->execute([$vlan_id]);
|
||||
|
||||
header_location("vlan.php");
|
||||
@@ -623,31 +624,41 @@ if (isset($_POST['edit'])) {
|
||||
$dateformat = sanitize($_POST['user_dateformat']);
|
||||
$dns1suffix = sanitize($_POST['user_dns1suffix']);
|
||||
$dns2suffix = sanitize($_POST['user_dns2suffix']);
|
||||
$tooltips = sanitize($_POST['user_tooltips']);
|
||||
|
||||
$menu_assets = sanitize($_POST['user_menu_assets']);
|
||||
$menu_assetclasses = sanitize($_POST['user_menu_assetclasses']);
|
||||
$menu_assetclassgroups = sanitize($_POST['user_menu_assetclassgroups']);
|
||||
$menu_cables = sanitize($_POST['user_menu_cables']);
|
||||
$menu_locations = sanitize($_POST['user_menu_locations']);
|
||||
$menu_nodes = sanitize($_POST['user_menu_nodes']);
|
||||
$menu_subnets = sanitize($_POST['user_menu_subnets']);
|
||||
$menu_users = sanitize($_POST['user_menu_users']);
|
||||
$menu_vlans = sanitize($_POST['user_menu_vlans']);
|
||||
$menu_zones = sanitize($_POST['user_menu_zones']);
|
||||
$tooltips = sanitize($_POST['user_tooltips']);
|
||||
|
||||
// construct menu set
|
||||
$menu = array();
|
||||
if ($menu_assets) $menu[] = 'asset';
|
||||
if ($menu_assetclasses) $menu[] = 'class';
|
||||
if ($menu_assetclassgroups) $menu[] = 'group';
|
||||
if ($menu_cables) $menu[] = 'cable';
|
||||
if ($menu_locations) $menu[] = 'location';
|
||||
if ($menu_nodes) $menu[] = 'node';
|
||||
if ($menu_subnets) $menu[] = 'subnet';
|
||||
if ($menu_vlans) $menu[] = 'vlan';
|
||||
if ($menu_zones) $menu[] = 'zone';
|
||||
|
||||
$sql = "UPDATE user SET
|
||||
user_language=?, user_imagesize=?, user_imagecount=?, user_mac=?, user_dateformat=?,
|
||||
user_dns1suffix=?, user_dns2suffix=?, user_menu_assets=?, user_menu_assetclasses=?,
|
||||
user_menu_assetclassgroups=?, user_menu_locations=?, user_menu_nodes=?,
|
||||
user_menu_subnets=?, user_menu_users=?, user_menu_vlans=?, user_menu_zones=?,
|
||||
user_tooltips=?
|
||||
user_language=?, user_imagesize=?, user_imagecount=?,
|
||||
user_mac=?, user_dateformat=?, user_dns1suffix=?,
|
||||
user_dns2suffix=?, user_tooltips=?, user_menu=?
|
||||
WHERE
|
||||
user_id=?";
|
||||
$sth = $dbh->prepare($sql);
|
||||
$sth->execute([$language, $imagesize, $imagecount, $mac, $dateformat,
|
||||
$dns1suffix, $dns2suffix, $menu_assets, $menu_assetclasses,
|
||||
$menu_assetclassgroups, $menu_locations, $menu_nodes,
|
||||
$menu_subnets, $menu_users, $menu_vlans, $menu_zones,
|
||||
$tooltips, $id]);
|
||||
$sth->execute([$language, $imagesize, $imagecount,
|
||||
$mac, $dateformat, $dns1suffix,
|
||||
$dns2suffix, $tooltips, implode(',', $menu),
|
||||
$id]);
|
||||
|
||||
$_SESSION['suser_language'] = $language;
|
||||
$_SESSION['suser_imagesize'] = $imagesize;
|
||||
@@ -659,10 +670,10 @@ if (isset($_POST['edit'])) {
|
||||
$_SESSION['suser_menu_assets'] = $menu_assets;
|
||||
$_SESSION['suser_menu_assetclasses'] = $menu_assetclasses;
|
||||
$_SESSION['suser_menu_assetclassgroups'] = $menu_assetclassgroups;
|
||||
$_SESSION['suser_menu_cables'] = $menu_cables;
|
||||
$_SESSION['suser_menu_locations'] = $menu_locations;
|
||||
$_SESSION['suser_menu_nodes'] = $menu_nodes;
|
||||
$_SESSION['suser_menu_subnets'] = $menu_subnets;
|
||||
$_SESSION['suser_menu_users'] = $menu_users;
|
||||
$_SESSION['suser_menu_vlans'] = $menu_vlans;
|
||||
$_SESSION['suser_menu_zones'] = $menu_zones;
|
||||
$_SESSION['suser_tooltips'] = $tooltips;
|
||||
@@ -720,10 +731,29 @@ if (isset($_POST['edit'])) {
|
||||
$user_name = sanitize($_POST['user_name']);
|
||||
$user_displayname = sanitize($_POST['user_displayname']);
|
||||
$user_realm = sanitize($_POST['user_realm']);
|
||||
// roles
|
||||
$role_add = sanitize($_POST['role_add']);
|
||||
$role_edit = sanitize($_POST['role_edit']);
|
||||
$role_delete = sanitize($_POST['role_delete']);
|
||||
$role_manage = sanitize($_POST['role_manage']);
|
||||
$role_admin = sanitize($_POST['role_admin']);
|
||||
|
||||
$sql = "UPDATE user SET user_name=?, user_displayname=?, user_realm=? WHERE user_id=?";
|
||||
// construct menu set
|
||||
$role = array();
|
||||
if ($role_add) $role[] = 'add';
|
||||
if ($role_edit) $role[] = 'edit';
|
||||
if ($role_delete) $role[] = 'delete';
|
||||
if ($role_manage) $role[] = 'manage';
|
||||
if ($role_admin) $role[] = 'admin';
|
||||
|
||||
|
||||
$sql = "UPDATE user SET
|
||||
user_name=?, user_displayname=?, user_realm=?,
|
||||
user_role=?
|
||||
WHERE user_id=?";
|
||||
$sth = $dbh->prepare($sql);
|
||||
$sth->execute([$user_name ,$user_displayname, $user_realm, $user_id]);
|
||||
$sth->execute([$user_name ,$user_displayname, $user_realm,
|
||||
implode(',', $role), $user_id]);
|
||||
|
||||
header_location("userview.php?user_id=" . $user_id);
|
||||
break;
|
||||
@@ -733,10 +763,11 @@ if (isset($_POST['edit'])) {
|
||||
$vlan_name = sanitize($_POST['vlan_name']);
|
||||
$vlan_number = sanitize($_POST['vlan_number']);
|
||||
$vlan_info = sanitize($_POST['vlan_info']);
|
||||
$vlan_color = sanitize($_POST['vlan_color']);
|
||||
|
||||
$sql = "UPDATE vlan SET vlan_name=?, vlan_number=?, vlan_info=? WHERE vlan_id=?";
|
||||
$sql = "UPDATE vlan SET vlan_name=?, vlan_number=?, vlan_color=?, vlan_info=? WHERE vlan_id=?";
|
||||
$sth = $dbh->prepare($sql);
|
||||
$sth->execute([$vlan_name, $vlan_number, $vlan_info, $vlan_id]);
|
||||
$sth->execute([$vlan_name, $vlan_number, $vlan_color, $vlan_info, $vlan_id]);
|
||||
|
||||
header_location("vlanview.php?vlan_id=" . $vlan_id);
|
||||
break;
|
||||
|
||||
Reference in New Issue
Block a user