730 lines
		
	
	
		
			24 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
			
		
		
	
	
			730 lines
		
	
	
		
			24 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
<?php
 | 
						|
//Check if user is logged in
 | 
						|
  session_start();
 | 
						|
 | 
						|
  if(!isset($_SESSION['loggedin']) && $_SESSION['loggedin'] !== true) {
 | 
						|
    header("Location: login.php");
 | 
						|
    die;
 | 
						|
  }
 | 
						|
 | 
						|
	if(isset($_GET["logout"])) {
 | 
						|
    session_destroy();
 | 
						|
    header('Location: login.php');
 | 
						|
  }
 | 
						|
?>
 | 
						|
 | 
						|
<?php
 | 
						|
//Get datas from database
 | 
						|
include('config.php');
 | 
						|
$con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
if ( mysqli_connect_errno() ) {
 | 
						|
    exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
}
 | 
						|
 | 
						|
$role = mysqli_fetch_assoc(mysqli_query($con, "SELECT role FROM accounts WHERE id='".mysqli_real_escape_string($con, $_SESSION['id'])."'"))["role"];
 | 
						|
$instancename = mysqli_fetch_assoc(mysqli_query($con, "SELECT value FROM settings WHERE type='instancename'"))["value"];
 | 
						|
$privacy = mysqli_fetch_assoc(mysqli_query($con, "SELECT value FROM settings WHERE type='privacy'"))["value"];
 | 
						|
$impressum = mysqli_fetch_assoc(mysqli_query($con, "SELECT value FROM settings WHERE type='impressum'"))["value"];
 | 
						|
$newtab = mysqli_fetch_assoc(mysqli_query($con, "SELECT value FROM settings WHERE type='newtab'"))["value"];
 | 
						|
 | 
						|
if($role == "administrator") {
 | 
						|
  $autoreload_setting = mysqli_fetch_assoc(mysqli_query($con, "SELECT value FROM settings WHERE type='autoreload'"))["value"];
 | 
						|
}
 | 
						|
 | 
						|
?>
 | 
						|
 | 
						|
<?php
 | 
						|
//Define all users in a $users variable
 | 
						|
if($role == "administrator") {
 | 
						|
  include('config.php');
 | 
						|
 | 
						|
  $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
  if ( mysqli_connect_errno() ) {
 | 
						|
        exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
  }
 | 
						|
 | 
						|
  $users = mysqli_query($con, "SELECT username,id,role FROM accounts");
 | 
						|
}
 | 
						|
?>
 | 
						|
 | 
						|
<?php
 | 
						|
//Define all groups and services in a $groups and $services variable
 | 
						|
  include('config.php');
 | 
						|
 | 
						|
  $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
  if ( mysqli_connect_errno() ) {
 | 
						|
        exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
  }
 | 
						|
 | 
						|
  $groups = mysqli_query($con, "SELECT priority, name, id FROM groups ORDER BY priority DESC");
 | 
						|
  $services = mysqli_query($con, "SELECT priority, groupid, name, id, status FROM services ORDER BY priority DESC");
 | 
						|
  $incidents = mysqli_query($con, "SELECT id, status, services, text, date, childof FROM incidents ORDER BY id ASC");
 | 
						|
  $incidents2 = mysqli_query($con, "SELECT id, status, services, text, date, childof FROM incidents ORDER BY id ASC");
 | 
						|
 | 
						|
?>
 | 
						|
 | 
						|
<?php
 | 
						|
//Update Username for user
 | 
						|
if(isset($_GET["updateusername"]) && isset($_POST['username'])) {
 | 
						|
  include('config.php');
 | 
						|
 | 
						|
  $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
  if ( mysqli_connect_errno() ) {
 | 
						|
      exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
  }
 | 
						|
 | 
						|
 | 
						|
 | 
						|
  $query="SELECT * FROM accounts WHERE username='".mysqli_real_escape_string($con,$_POST['username'])."'";
 | 
						|
  if($result=mysqli_query($con,$query)){
 | 
						|
    if(mysqli_num_rows($result)>0){
 | 
						|
      header("Location: admin.php?userexist#account");
 | 
						|
    }else{
 | 
						|
      $statement =   mysqli_query($con,"UPDATE accounts SET username='".mysqli_real_escape_string($con,$_POST['username'])."' WHERE ID='".$_SESSION['id']."'");
 | 
						|
        header('Location: worker.php?logout');
 | 
						|
    }
 | 
						|
  }
 | 
						|
}
 | 
						|
?>
 | 
						|
 | 
						|
<?php
 | 
						|
//Update Password for user
 | 
						|
if(isset($_GET["updatepassword"]) && isset($_POST['password1']) && isset($_POST['password2'])) {
 | 
						|
 | 
						|
  include('config.php');
 | 
						|
 | 
						|
if($_POST['password1'] == $_POST['password2']) {
 | 
						|
 | 
						|
  $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
  if ( mysqli_connect_errno() ) {
 | 
						|
        exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
  }
 | 
						|
 | 
						|
 | 
						|
  if ($stmt = $con->prepare('SELECT id, password FROM accounts WHERE username = ?')) {
 | 
						|
          $stmt->bind_param('s', $_SESSION['name']);
 | 
						|
          $stmt->execute();
 | 
						|
 | 
						|
          $stmt->store_result();
 | 
						|
 | 
						|
          if ($stmt->num_rows > 0) {
 | 
						|
                  $stmt->bind_result($id, $password);
 | 
						|
                  $stmt->fetch();
 | 
						|
 | 
						|
                  if (password_verify($_POST['oldpassword'], $password)) {
 | 
						|
                    $npassword = password_hash($_POST['password1'], PASSWORD_DEFAULT);
 | 
						|
                    $statement = mysqli_query($con,"UPDATE accounts SET password='".mysqli_real_escape_string($con,$npassword)."' WHERE ID='".$_SESSION['id']."'");
 | 
						|
                    if($statement) {
 | 
						|
                      header("Location: admin.php?pwupdated#account");
 | 
						|
                    }
 | 
						|
                  } else {
 | 
						|
                    header("Location: admin.php?pwrong#account");
 | 
						|
                  }
 | 
						|
 | 
						|
          } else {
 | 
						|
            header("Location: admin.php?pwrong#account");
 | 
						|
          }
 | 
						|
 | 
						|
          $stmt->close();
 | 
						|
  }
 | 
						|
 | 
						|
  } else {
 | 
						|
    header("Location: admin.php?pwnotmatch#account");
 | 
						|
  }
 | 
						|
}
 | 
						|
?>
 | 
						|
 | 
						|
<?php
 | 
						|
//Create a new user
 | 
						|
if($role == "administrator") {
 | 
						|
  if(isset($_GET["newuser"]) && isset($_POST['username']) && isset($_POST['password'])) {
 | 
						|
    include('config.php');
 | 
						|
 | 
						|
    $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
    if ( mysqli_connect_errno() ) {
 | 
						|
        exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
      }
 | 
						|
 | 
						|
      $query="SELECT * FROM accounts WHERE username='".mysqli_real_escape_string($con,$_POST['username'])."'";
 | 
						|
      if($result=mysqli_query($con,$query)){
 | 
						|
        if(mysqli_num_rows($result)>0){
 | 
						|
          header("Location: admin.php?userexist#users");
 | 
						|
        }else{
 | 
						|
          $newpw = password_hash($_POST['password'], PASSWORD_DEFAULT);
 | 
						|
 | 
						|
          $statement = mysqli_query($con, "INSERT INTO accounts (username, password, role) VALUES ('".mysqli_real_escape_string($con,$_POST['username'])."',
 | 
						|
             '".mysqli_real_escape_string($con,$newpw)."', '".mysqli_real_escape_string($con, $_POST['role'])."')");
 | 
						|
          if($statement) {
 | 
						|
            header("Location: admin.php?usercreated#users");
 | 
						|
          }
 | 
						|
        }
 | 
						|
      }
 | 
						|
  }
 | 
						|
}
 | 
						|
?>
 | 
						|
 | 
						|
<?php
 | 
						|
//Update password for another user
 | 
						|
if($role == "administrator") {
 | 
						|
  if(isset($_GET["updatepwfor"]) && isset($_POST['password1']) && isset($_POST['password2'])) {
 | 
						|
 | 
						|
 | 
						|
    include('config.php');
 | 
						|
 | 
						|
    if($_POST['password1'] == $_POST['password2']) {
 | 
						|
 | 
						|
    $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
    if ( mysqli_connect_errno() ) {
 | 
						|
          exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
    }
 | 
						|
 | 
						|
      $npassword = password_hash($_POST['password1'], PASSWORD_DEFAULT);
 | 
						|
      $statement = mysqli_query($con,"UPDATE accounts SET password='".mysqli_real_escape_string($con,$npassword)."'
 | 
						|
        WHERE username='".mysqli_real_escape_string($con,$_GET["updatepwfor"])."'");
 | 
						|
 | 
						|
      if($statement) {
 | 
						|
  	     header("Location: admin.php?edit=".$_GET["updatepwfor"]."&pwupdated#edit");
 | 
						|
      }
 | 
						|
    } else {
 | 
						|
      header("Location: admin.php?edit=".$_GET["updatepwfor"]."&pwnotmatch#edit");
 | 
						|
    }
 | 
						|
  }
 | 
						|
}
 | 
						|
 ?>
 | 
						|
 | 
						|
<?php
 | 
						|
//Update username for another user
 | 
						|
if($role == "administrator") {
 | 
						|
 if(isset($_GET["updateunfor"]) && isset($_POST['username'])) {
 | 
						|
 | 
						|
 | 
						|
   include('config.php');
 | 
						|
 | 
						|
   $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
   if ( mysqli_connect_errno() ) {
 | 
						|
         exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
   }
 | 
						|
 | 
						|
    $statement = mysqli_query($con,"UPDATE accounts SET username='".mysqli_real_escape_string($con,$_POST['username'])."'
 | 
						|
      WHERE username='".mysqli_real_escape_string($con, $_GET["updateunfor"])."'");
 | 
						|
 | 
						|
    if($statement) {
 | 
						|
 	    header("Location: admin.php?edit=".$_POST['username']."&unupdated#edit");
 | 
						|
    }
 | 
						|
 }
 | 
						|
}
 | 
						|
  ?>
 | 
						|
 | 
						|
<?php
 | 
						|
//Update role for some user
 | 
						|
if($role == "administrator") {
 | 
						|
  if(isset($_GET["updaterole"])) {
 | 
						|
 | 
						|
 | 
						|
    include('config.php');
 | 
						|
 | 
						|
    $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
    if ( mysqli_connect_errno() ) {
 | 
						|
          exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
    }
 | 
						|
 | 
						|
    if($_POST['role'] == "administrator") {
 | 
						|
      $statement = mysqli_query($con,"UPDATE accounts SET role='".mysqli_real_escape_string($con, $_POST['role'])."'
 | 
						|
        WHERE username='".mysqli_real_escape_string($con, $_GET["updaterole"])."'");
 | 
						|
 | 
						|
      if($statement) {
 | 
						|
        header("Location: admin.php?edit=".$_GET["updaterole"]."&roleupdated#edit");
 | 
						|
      }
 | 
						|
    } else if($_POST['role'] == "moderator") {
 | 
						|
      $statement = mysqli_query($con,"UPDATE accounts SET role='".mysqli_real_escape_string($con, $_POST['role'])."'
 | 
						|
        WHERE username='".mysqli_real_escape_string($con, $_GET["updaterole"])."'");
 | 
						|
 | 
						|
      if($statement) {
 | 
						|
        header("Location: admin.php?edit=".$_GET["updaterole"]."&roleupdated#edit");
 | 
						|
      }
 | 
						|
    }
 | 
						|
  }
 | 
						|
}
 | 
						|
?>
 | 
						|
 | 
						|
<?php
 | 
						|
//Deleter user
 | 
						|
  if($role == "administrator") {
 | 
						|
    if(isset($_GET["deluser"])) {
 | 
						|
      include('config.php');
 | 
						|
 | 
						|
      $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
      if ( mysqli_connect_errno() ) {
 | 
						|
            exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
      }
 | 
						|
 | 
						|
      $statement = mysqli_query($con, "DELETE FROM accounts WHERE username='".mysqli_real_escape_string($con, $_GET["deluser"])."'");
 | 
						|
      if($statement) {
 | 
						|
        header("Location: admin.php?userdeleted#users");
 | 
						|
      }
 | 
						|
    }
 | 
						|
  }
 | 
						|
?>
 | 
						|
 | 
						|
<?php
 | 
						|
//Change instance name
 | 
						|
  if($role == "administrator") {
 | 
						|
    if(isset($_GET["upname"]) && isset($_POST['iname'])) {
 | 
						|
      include ('config.php');
 | 
						|
 | 
						|
      $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
      if ( mysqli_connect_errno() ) {
 | 
						|
            exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
      }
 | 
						|
 | 
						|
      $statement = mysqli_query($con,"UPDATE settings SET value='".mysqli_real_escape_string($con, $_POST['iname'])."'
 | 
						|
        WHERE type='instancename'");
 | 
						|
 | 
						|
      if($statement) {
 | 
						|
        header("Location: admin.php?nameupdated#settings");
 | 
						|
      }
 | 
						|
    }
 | 
						|
  }
 | 
						|
 ?>
 | 
						|
 | 
						|
 <?php
 | 
						|
 //Change autoreload setting
 | 
						|
   if($role == "administrator") {
 | 
						|
     if(isset($_GET["upautoreload"]) && isset($_POST['autoreload'])) {
 | 
						|
       include ('config.php');
 | 
						|
 | 
						|
       $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
       if ( mysqli_connect_errno() ) {
 | 
						|
             exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
       }
 | 
						|
 | 
						|
       $statement = mysqli_query($con,"UPDATE settings SET value='".mysqli_real_escape_string($con, $_POST['autoreload'])."'
 | 
						|
         WHERE type='autoreload'");
 | 
						|
 | 
						|
       if($statement) {
 | 
						|
         header("Location: admin.php?reloadupdated=".$_POST['autoreload']."#settings");
 | 
						|
       }
 | 
						|
     }
 | 
						|
   }
 | 
						|
  ?>
 | 
						|
 | 
						|
  <?php
 | 
						|
  //Set Impressum link
 | 
						|
    if($role == "administrator") {
 | 
						|
      if(isset($_GET["upimpressum"]) && isset($_POST['impressum'])) {
 | 
						|
        include ('config.php');
 | 
						|
 | 
						|
        $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
        if ( mysqli_connect_errno() ) {
 | 
						|
              exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
        }
 | 
						|
 | 
						|
        $statement = mysqli_query($con,"UPDATE settings SET value='".mysqli_real_escape_string($con, $_POST['impressum'])."'
 | 
						|
          WHERE type='impressum'");
 | 
						|
 | 
						|
        if($statement) {
 | 
						|
          header("Location: admin.php?impressumset=".$_POST['impressum']."#settings");
 | 
						|
        }
 | 
						|
      }
 | 
						|
    }
 | 
						|
   ?>
 | 
						|
 | 
						|
   <?php
 | 
						|
   //Set Privacy policity link
 | 
						|
     if($role == "administrator") {
 | 
						|
       if(isset($_GET["upprivacy"]) && isset($_POST['privacy'])) {
 | 
						|
         include ('config.php');
 | 
						|
 | 
						|
         $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
         if ( mysqli_connect_errno() ) {
 | 
						|
               exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
         }
 | 
						|
 | 
						|
         $statement = mysqli_query($con,"UPDATE settings SET value='".mysqli_real_escape_string($con, $_POST['privacy'])."'
 | 
						|
           WHERE type='privacy'");
 | 
						|
 | 
						|
         if($statement) {
 | 
						|
           header("Location: admin.php?privacyset=".$_POST['privacy']."#settings");
 | 
						|
         }
 | 
						|
       }
 | 
						|
     }
 | 
						|
    ?>
 | 
						|
 | 
						|
    <?php
 | 
						|
    //Set new tab policy
 | 
						|
      if($role == "administrator") {
 | 
						|
        if(isset($_GET["uptabpolicy"]) && isset($_POST['newtab'])) {
 | 
						|
          include ('config.php');
 | 
						|
 | 
						|
          $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
          if ( mysqli_connect_errno() ) {
 | 
						|
                exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
          }
 | 
						|
 | 
						|
          $statement = mysqli_query($con,"UPDATE settings SET value='".mysqli_real_escape_string($con, $_POST['newtab'])."'
 | 
						|
            WHERE type='newtab'");
 | 
						|
 | 
						|
          if($statement) {
 | 
						|
            header("Location: admin.php?newtabset#settings");
 | 
						|
          }
 | 
						|
        }
 | 
						|
      }
 | 
						|
     ?>
 | 
						|
 | 
						|
   <?php
 | 
						|
   //Create new service
 | 
						|
     if(isset($_GET["createservice"]) && isset($_POST['priority']) && isset($_POST['group']) && isset($_POST['name'])) {
 | 
						|
       include ('config.php');
 | 
						|
 | 
						|
       $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
       if ( mysqli_connect_errno() ) {
 | 
						|
             exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
       }
 | 
						|
 | 
						|
        $statement = mysqli_query($con, "INSERT INTO services (priority, groupid, name, status, cmaintenance, sname) VALUES ('".mysqli_real_escape_string($con,$_POST['priority'])."',
 | 
						|
          '".mysqli_real_escape_string($con,$_POST['group'])."', '".mysqli_real_escape_string($con, $_POST['name'])."', 'Online', '0',
 | 
						|
           '".mysqli_real_escape_string($con, $_POST['sname'])."')");
 | 
						|
 | 
						|
          if($statement) {
 | 
						|
            header("Location: admin.php?serviceadded#services");
 | 
						|
          }
 | 
						|
      }
 | 
						|
   ?>
 | 
						|
 | 
						|
 <?php
 | 
						|
    //Create new group
 | 
						|
 | 
						|
    if(isset($_GET["creategroup"]) && isset($_POST['priority']) && isset($_POST['name'])) {
 | 
						|
      include ('config.php');
 | 
						|
 | 
						|
      $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
      if ( mysqli_connect_errno() ) {
 | 
						|
            exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
      }
 | 
						|
 | 
						|
      $statement = mysqli_query($con, "INSERT INTO groups (priority, name) VALUES ('".mysqli_real_escape_string($con,$_POST['priority'])."',
 | 
						|
        '".mysqli_real_escape_string($con, $_POST['name'])."')");
 | 
						|
 | 
						|
      if($statement) {
 | 
						|
        header("Location: admin.php?groupadded#services");
 | 
						|
      }
 | 
						|
    }
 | 
						|
?>
 | 
						|
 | 
						|
<?php
 | 
						|
//Delete service
 | 
						|
  if(isset($_GET["delservice"])) {
 | 
						|
    include('config.php');
 | 
						|
 | 
						|
    $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
    if ( mysqli_connect_errno() ) {
 | 
						|
          exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
    }
 | 
						|
 | 
						|
    $statement = mysqli_query($con, "DELETE FROM services WHERE id='".mysqli_real_escape_string($con, $_GET["delservice"])."'");
 | 
						|
    if($statement) {
 | 
						|
      header("Location: admin.php?servicedeleted#services");
 | 
						|
    }
 | 
						|
  }
 | 
						|
?>
 | 
						|
 | 
						|
<?php
 | 
						|
//Delete group
 | 
						|
  if(isset($_GET["delgroup"])) {
 | 
						|
    include('config.php');
 | 
						|
 | 
						|
    $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
    if ( mysqli_connect_errno() ) {
 | 
						|
          exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
    }
 | 
						|
 | 
						|
    $statement = mysqli_query($con, "DELETE FROM groups WHERE id='".mysqli_real_escape_string($con, $_GET['delgroup'])."'");
 | 
						|
    $statement2 = mysqli_query($con, "DELETE FROM services WHERE groupid='".mysqli_real_escape_string($con, $_GET['delgroup'])."'");
 | 
						|
    if($statement) {
 | 
						|
      header("Location: admin.php?groupdeleted#services");
 | 
						|
    }
 | 
						|
  }
 | 
						|
?>
 | 
						|
 | 
						|
<?php
 | 
						|
//Update Service Status
 | 
						|
  if(isset($_GET["updatest"])) {
 | 
						|
    include('config.php');
 | 
						|
 | 
						|
    $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
    if ( mysqli_connect_errno() ) {
 | 
						|
          exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
    }
 | 
						|
 | 
						|
    $statement = mysqli_query($con, "UPDATE services SET status = '".mysqli_real_escape_string($con, $_GET['status'])."'
 | 
						|
     WHERE id = '".mysqli_real_escape_string($con, $_GET['updatest'])."'");
 | 
						|
 | 
						|
    if($statement) {
 | 
						|
      header("Location: admin.php?manageservice=".$_GET['updatest']."&statusupdated#mservice");
 | 
						|
    }
 | 
						|
  }
 | 
						|
?>
 | 
						|
 | 
						|
<?php
 | 
						|
//Create Incident
 | 
						|
  if(isset($_GET["createincident"])) {
 | 
						|
    include('config.php');
 | 
						|
 | 
						|
    $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
    if ( mysqli_connect_errno() ) {
 | 
						|
          exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
    }
 | 
						|
 | 
						|
    $services = "".implode(",",$_POST['services'])."";
 | 
						|
 | 
						|
    $statement = mysqli_query($con, "INSERT INTO incidents (status, services, text, date, childof) VALUES ('new',
 | 
						|
      '".mysqli_real_escape_string($con, $services)."', '".mysqli_real_escape_string($con, $_POST['text'])."', '".mysqli_real_escape_string($con, $_POST['date'])."'
 | 
						|
    , '-1')");
 | 
						|
 | 
						|
    if($statement) {
 | 
						|
      header("Location: admin.php?incidentcreated#incidents");
 | 
						|
    } else {
 | 
						|
    }
 | 
						|
  }
 | 
						|
?>
 | 
						|
 | 
						|
<?php
 | 
						|
//Create Incident Message
 | 
						|
  if(isset($_GET["addmessage"])) {
 | 
						|
    include('config.php');
 | 
						|
 | 
						|
    $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
    if ( mysqli_connect_errno() ) {
 | 
						|
          exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
    }
 | 
						|
 | 
						|
    $statement = mysqli_query($con, "INSERT INTO incidents (status, services, text, date, childof) VALUES ('".mysqli_real_escape_string($con, $_POST['state'])."',
 | 
						|
      '-1', '".mysqli_real_escape_string($con, $_POST['text'])."', '2021-02-02'
 | 
						|
    , '".mysqli_real_escape_string($con, $_POST['childof'])."')");
 | 
						|
 | 
						|
    if($statement) {
 | 
						|
      header("Location: admin.php?messagecreated#incidents");
 | 
						|
    }
 | 
						|
  }
 | 
						|
?>
 | 
						|
 | 
						|
<?php
 | 
						|
//Delete Incident
 | 
						|
  if(isset($_GET["rmincident"])) {
 | 
						|
    include('config.php');
 | 
						|
 | 
						|
    $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
    if ( mysqli_connect_errno() ) {
 | 
						|
          exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
    }
 | 
						|
 | 
						|
    $statement = mysqli_query($con, "DELETE FROM incidents WHERE id='".mysqli_real_escape_string($con, $_GET['rmincident'])."'");
 | 
						|
    $statement2 = mysqli_query($con, "DELETE FROM incidents WHERE childof='".mysqli_real_escape_string($con, $_GET['rmincident'])."'");
 | 
						|
    if($statement) {
 | 
						|
      header("Location: admin.php?incidentdeleted#incidents");
 | 
						|
    }
 | 
						|
  }
 | 
						|
?>
 | 
						|
 | 
						|
<?php
 | 
						|
//Flush Incidents
 | 
						|
  if(isset($_GET["flushincidents"])) {
 | 
						|
    include('config.php');
 | 
						|
 | 
						|
    $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
    if ( mysqli_connect_errno() ) {
 | 
						|
          exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
    }
 | 
						|
 | 
						|
    $statement = mysqli_query($con, "DELETE FROM incidents");
 | 
						|
    if($statement) {
 | 
						|
      header("Location: admin.php?incidentsflushed#incidents");
 | 
						|
    } else {
 | 
						|
      die("no!");
 | 
						|
    }
 | 
						|
  }
 | 
						|
?>
 | 
						|
 | 
						|
<?php
 | 
						|
//Update Group Name
 | 
						|
  if(isset($_GET["upgroupname"])) {
 | 
						|
    include('config.php');
 | 
						|
 | 
						|
    $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
    if ( mysqli_connect_errno() ) {
 | 
						|
          exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
    }
 | 
						|
 | 
						|
    $statement = mysqli_query($con, "UPDATE groups SET name = '".mysqli_real_escape_string($con, $_POST['name'])."'
 | 
						|
     WHERE id = '".mysqli_real_escape_string($con, $_GET['upgroupname'])."'");
 | 
						|
 | 
						|
    if($statement) {
 | 
						|
      header("Location: admin.php?editgroup=".$_GET['upgroupname']."&nameupdated#groupedit");
 | 
						|
    }
 | 
						|
  }
 | 
						|
?>
 | 
						|
 | 
						|
<?php
 | 
						|
//Update Group Priority
 | 
						|
  if(isset($_GET["upgrouppriority"])) {
 | 
						|
    include('config.php');
 | 
						|
 | 
						|
    $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
    if ( mysqli_connect_errno() ) {
 | 
						|
          exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
    }
 | 
						|
 | 
						|
    $statement = mysqli_query($con, "UPDATE groups SET priority = '".mysqli_real_escape_string($con, $_POST['priority'])."'
 | 
						|
     WHERE id = '".mysqli_real_escape_string($con, $_GET['upgrouppriority'])."'");
 | 
						|
 | 
						|
    if($statement) {
 | 
						|
      header("Location: admin.php?editgroup=".$_GET['upgrouppriority']."&priorityupdated#groupedit");
 | 
						|
    }
 | 
						|
  }
 | 
						|
?>
 | 
						|
 | 
						|
<?php
 | 
						|
//Update Service Priority
 | 
						|
  if(isset($_GET["upservicepriority"])) {
 | 
						|
    include('config.php');
 | 
						|
 | 
						|
    $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
    if ( mysqli_connect_errno() ) {
 | 
						|
          exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
    }
 | 
						|
 | 
						|
    $statement = mysqli_query($con, "UPDATE services SET priority = '".mysqli_real_escape_string($con, $_POST['priority'])."'
 | 
						|
     WHERE id = '".mysqli_real_escape_string($con, $_GET['upservicepriority'])."'");
 | 
						|
 | 
						|
    if($statement) {
 | 
						|
      header("Location: admin.php?manageservice=".$_GET['upservicepriority']."&priorityupdated#mservice");
 | 
						|
    }
 | 
						|
  }
 | 
						|
?>
 | 
						|
 | 
						|
<?php
 | 
						|
//Update Service Name
 | 
						|
  if(isset($_GET["upservicename"])) {
 | 
						|
    include('config.php');
 | 
						|
 | 
						|
    $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
    if ( mysqli_connect_errno() ) {
 | 
						|
          exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
    }
 | 
						|
 | 
						|
    $statement = mysqli_query($con, "UPDATE services SET name = '".mysqli_real_escape_string($con, $_POST['name'])."'
 | 
						|
     WHERE id = '".mysqli_real_escape_string($con, $_GET['upservicename'])."'");
 | 
						|
 | 
						|
    if($statement) {
 | 
						|
      header("Location: admin.php?manageservice=".$_GET['upservicename']."&nameupdated#mservice");
 | 
						|
    }
 | 
						|
  }
 | 
						|
?>
 | 
						|
 | 
						|
<?php
 | 
						|
//Functions
 | 
						|
function getStatus($id) {
 | 
						|
  include('config.php');
 | 
						|
 | 
						|
  $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
  if ( mysqli_connect_errno() ) {
 | 
						|
        exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
  }
 | 
						|
 | 
						|
  return mysqli_fetch_assoc(mysqli_query($con, "SELECT status FROM services WHERE id='".mysqli_real_escape_string($con, $id)."'"))["status"];
 | 
						|
}
 | 
						|
 | 
						|
function getGroupName($id) {
 | 
						|
  include('config.php');
 | 
						|
 | 
						|
  $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
  if ( mysqli_connect_errno() ) {
 | 
						|
        exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
  }
 | 
						|
 | 
						|
  return mysqli_fetch_assoc(mysqli_query($con, "SELECT name FROM groups WHERE id='".mysqli_real_escape_string($con, $id)."'"))["name"];
 | 
						|
}
 | 
						|
 | 
						|
function getGroupPriority($id) {
 | 
						|
  include('config.php');
 | 
						|
 | 
						|
  $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
  if ( mysqli_connect_errno() ) {
 | 
						|
        exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
  }
 | 
						|
 | 
						|
  return mysqli_fetch_assoc(mysqli_query($con, "SELECT priority FROM groups WHERE id='".mysqli_real_escape_string($con, $id)."'"))["priority"];
 | 
						|
}
 | 
						|
 | 
						|
function getServiceName($id) {
 | 
						|
  include('config.php');
 | 
						|
 | 
						|
  $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
  if ( mysqli_connect_errno() ) {
 | 
						|
        exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
  }
 | 
						|
 | 
						|
  return mysqli_fetch_assoc(mysqli_query($con, "SELECT name FROM services WHERE id='".mysqli_real_escape_string($con, $id)."'"))["name"];
 | 
						|
}
 | 
						|
 | 
						|
function getServicePriority($id) {
 | 
						|
  include('config.php');
 | 
						|
 | 
						|
  $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
  if ( mysqli_connect_errno() ) {
 | 
						|
        exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
  }
 | 
						|
 | 
						|
  return mysqli_fetch_assoc(mysqli_query($con, "SELECT priority FROM services WHERE id='".mysqli_real_escape_string($con, $id)."'"))["priority"];
 | 
						|
}
 | 
						|
 | 
						|
function debug_to_console($data) {
 | 
						|
    $output = $data;
 | 
						|
    if (is_array($output))
 | 
						|
        $output = implode(',', $output);
 | 
						|
 | 
						|
    echo "<script>console.log('Debug Objects: " . $output . "' );</script>";
 | 
						|
}
 | 
						|
 | 
						|
function sMaintenance() {
 | 
						|
  include('config.php');
 | 
						|
 | 
						|
  $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
  if ( mysqli_connect_errno() ) {
 | 
						|
        exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
  }
 | 
						|
 | 
						|
  $services = mysqli_query($con, "SELECT priority, groupid, name, id, status FROM services ORDER BY priority DESC");
 | 
						|
 | 
						|
  $find = False;
 | 
						|
  while($servicelist = mysqli_fetch_array($services)){
 | 
						|
    if(strpos($servicelist['status'], "Maintenance") !== false) {
 | 
						|
      $find = True;
 | 
						|
    }
 | 
						|
  }
 | 
						|
 | 
						|
  return $find;
 | 
						|
}
 | 
						|
 | 
						|
function sOffline() {
 | 
						|
  include('config.php');
 | 
						|
 | 
						|
  $con = mysqli_connect($config['DBHOST'], $config['DBUSER'], $config['DBPWD'], $config['DBNAME']);
 | 
						|
  if ( mysqli_connect_errno() ) {
 | 
						|
        exit('MySQl Connection failed with error: ' . mysqli_connect_error());
 | 
						|
  }
 | 
						|
 | 
						|
  $services = mysqli_query($con, "SELECT priority, groupid, name, id, status FROM services ORDER BY priority DESC");
 | 
						|
 | 
						|
  $find = False;
 | 
						|
  while($servicelist = mysqli_fetch_array($services)){
 | 
						|
    if(strpos($servicelist['status'], "Offline") !== false) {
 | 
						|
      $find = True;
 | 
						|
    }
 | 
						|
  }
 | 
						|
 | 
						|
  return $find;
 | 
						|
}
 | 
						|
 | 
						|
?>
 |