| config . '';
}
$output .= '';
}
$include['cli_config_diff'] = $output;
}
}
if (!empty($include['ip'])) {
$count = count($include['ip']);
for ($i = 0; $i < $count; $i++) {
$include['ip'][$i]->ip_padded = $include['ip'][$i]->ip;
$include['ip'][$i]->ip = ip_address_from_db($include['ip'][$i]->ip);
}
}
if (empty($resp_include) or in_array('server', $resp_include)) {
$sql = "SELECT server.*, certificate.id AS `certificate.id` FROM `server` LEFT JOIN certificate ON (server.certificates = certificate.name and server.device_id = certificate.device_id and certificate.current = 'y') WHERE server.device_id = ? and server.current = 'y'";
$query = $this->db->query($sql, $id);
$result = $query->getResult();
if (!empty($result)) {
$include['server'] = $result;
}
}
$no_current = array('attachment', 'audit_log', 'change_log', 'credential', 'edit_log', 'image');
foreach ($no_current as $table) {
if (empty($resp_include) or in_array($table, $resp_include)) {
$sql = "SELECT `$table`.*, devices.name AS `devices.name` FROM `$table` LEFT JOIN devices ON (`$table`.device_id = devices.id) WHERE device_id = ?";
$query = $this->db->query($sql, $id);
$result = $query->getResult();
if (!empty($result)) {
$include[$table] = $result;
}
}
}
if (empty($resp_include) or in_array('rack', $resp_include)) {
$sql = "SELECT `rack_devices`.*, devices.name AS `devices.name`, racks.name AS `racks.name`, locations.name AS `locations.name`, locations.id AS `locations.id` FROM `rack_devices` LEFT JOIN devices ON (rack_devices.device_id = devices.id) LEFT JOIN `racks` ON (rack_devices.rack_id = racks.id) LEFT JOIN `locations` ON (racks.location_id = locations.id) WHERE device_id = ?";
$query = $this->db->query($sql, $id);
$result = $query->getResult();
if (!empty($result)) {
$include['rack_devices'] = $result;
} else {
$blank_rack = new stdClass();
$blank_rack->{'rack_id'} = 0;
$blank_rack->{'position'} = 0;
$blank_rack->{'racks.name'} = 'Not in a rack';
$blank_rack->{'locations.name'} = '';
$blank_rack->{'locations.id'} = 0;
$include['rack_devices'][] = $blank_rack;
}
}
if (empty($resp_include) or in_array('application', $resp_include)) {
$sql = "SELECT `application`.*, applications.name AS `applications.name`, applications.description AS `applications.description` FROM `application` LEFT JOIN applications ON (`application`.application_id = applications.id) WHERE application.device_id = ?";
$query = $this->db->query($sql, $id);
$result = $query->getResult();
if (!empty($result)) {
$include['application'] = $result;
}
}
if (empty($resp_include) or in_array('cluster', $resp_include)) {
$sql = "SELECT `clusters`.*, `cluster`.`role`, `cluster`.`id` AS `cluster.id` FROM `clusters` RIGHT JOIN `cluster` ON `clusters`.`id` = `cluster`.`cluster_id` WHERE `cluster`.`device_id` = ?";
$query = $this->db->query($sql, $id);
$result = $query->getResult();
if (!empty($result)) {
$include['cluster'] = $result;
}
}
if (empty($resp_include) or in_array('discovery_log', $resp_include)) {
$sql = "SELECT discovery_log.*, discoveries.name AS `discoveries.name` FROM `discovery_log` LEFT JOIN discoveries ON discovery_log.discovery_id = discoveries.id WHERE discovery_log.device_id = ?";
$query = $this->db->query($sql, [$id]);
$result = $query->getResult();
if (!empty($result)) {
$include['discovery_log'] = $result;
}
}
$orgsModel = new \App\Models\OrgsModel();
$instance = & get_instance();
$user = $instance->user;
$orgsList = implode(',', $orgsModel->getUserDescendants(explode(',', $user->org_list)));
if (empty($resp_include) or in_array('field', $resp_include) or in_array('fields', $resp_include) or $instance->resp->meta->format === 'html') {
$sql = "SELECT fields.*, field.id AS `field.id`, field.value AS `field.value`, field.device_id AS `field.device_id` FROM fields LEFT JOIN field on (field.field_id = fields.id AND field.device_id = ?) WHERE fields.org_id IN (" . $orgsList . ")";
$query = $this->db->query($sql, [$id]);
$result = $query->getResult();
if (!empty($result)) {
$include['fields'] = $result;
}
}
if (empty($resp_include) or in_array('location', $resp_include) or $instance->resp->meta->format === 'html') {
$sql = "SELECT * FROM locations WHERE org_id IN (" . $orgsList . ")";
$query = $this->db->query($sql);
$result = $query->getResult();
if (!empty($result)) {
$include['locations'] = format_data($result, 'locations');
}
}
if (empty($resp_include) or in_array('attributes', $resp_include) or $instance->resp->meta->format === 'html') {
$attributesModel = new \App\Models\AttributesModel();
$attributes = $attributesModel->listUser(['attributes.resource' => 'devices', 'attributes.type' => 'class']);
$include['class'] = $attributes;
$attributes = $attributesModel->listUser(['attributes.resource' => 'devices', 'attributes.type' => 'environment']);
$include['environment'] = $attributes;
$attributes = $attributesModel->listUser(['attributes.resource' => 'devices', 'attributes.type' => 'status']);
$include['status'] = $attributes;
$attributes = $attributesModel->listUser(['attributes.resource' => 'devices', 'attributes.type' => 'type']);
$include['type'] = $attributes;
$attributes = $attributesModel->listUser(['attributes.resource' => 'devices', 'attributes.type' => 'criticality']);
$include['criticality'] = $attributes;
$attributes = $attributesModel->listUser(['attributes.resource' => 'devices', 'attributes.type' => 'sensitivity']);
$include['sensitivity'] = $attributes;
}
if ($instance->config->product === 'enterprise' and $this->db->fieldExists('cve', 'devices')) {
$sql = "SELECT `cve` FROM devices WHERE id = ?";
$query = $this->db->query($sql, [$id]);
$result = $query->getResult();
if (!empty($result[0]->cve)) {
$cves = explode(',', $result[0]->cve);
$cves = "'" . implode("','", $cves) . "'";
$sql = "SELECT id, name, base_severity, cve, vendor FROM vulnerabilities WHERE cve IN ($cves)";
$query = $this->db->query($sql);
$include['vulnerabilities'] = $query->getResult();
}
}
if (empty($resp_include) or in_array('nmis', $resp_include) or in_array('firstwave', $resp_include) or $instance->resp->meta->format === 'html') {
$include['nmis_business_services'] = array();
$include['nmis_groups'] = array();
$include['nmis_roles'] = array();
$include['nmis_customers'] = array();
$include['nmis_pollers'] = array();
$integrationsModel = new \App\Models\IntegrationsModel();
$integrations = $integrationsModel->listUser(['integrations.type' => 'nmis']);
if (!empty($integrations)) {
foreach ($integrations as $integration) {
if (!empty($integration->attributes->additional_items->business_services)) {
foreach ($integration->attributes->additional_items->business_services as $item) {
$entry = new \stdClass();
$entry->id = $item;
$entry->type = 'nmis';
$entry->attributes = new \stdClass();
$entry->attributes->name = $item;
$include['nmis_business_services'][] = $entry;
}
}
if (!empty($integration->attributes->additional_items->groups)) {
foreach ($integration->attributes->additional_items->groups as $item) {
$entry = new \stdClass();
$entry->id = $item;
$entry->type = 'nmis';
$entry->attributes = new \stdClass();
$entry->attributes->name = $item;
$include['nmis_groups'][] = $entry;
}
}
if (!empty($integration->attributes->additional_items->roles)) {
foreach ($integration->attributes->additional_items->roles as $item) {
$entry = new \stdClass();
$entry->id = $item;
$entry->type = 'nmis';
$entry->attributes = new \stdClass();
$entry->attributes->name = $item;
$include['nmis_roles'][] = $entry;
}
}
if (!empty($integration->attributes->additional_items->customers)) {
foreach ($integration->attributes->additional_items->customers as $item) {
$entry = new \stdClass();
$entry->id = $item;
$entry->type = 'nmis';
$entry->attributes = new \stdClass();
$entry->attributes->name = $item;
$include['nmis_customers'][] = $entry;
}
}
if (!empty($integration->attributes->additional_items->pollers)) {
foreach ($integration->attributes->additional_items->pollers as $item) {
$entry = new \stdClass();
$entry->id = $item->cluster_id;
$entry->type = 'nmis';
$entry->attributes = new \stdClass();
$entry->attributes->name = $item->server_name;
$include['nmis_pollers'][] = $entry;
}
}
}
}
}
return $include;
}
/**
* Return an array containing arrays of related items to be stored in resp->included
*
* @param int $id The ID of the requested item
* @return array An array of anything needed for screen output
*/
public function includedCreateForm(int $id = 0): array
{
$include = array();
$attributesModel = new \App\Models\AttributesModel();
$attributes = $attributesModel->listUser(['attributes.resource' => 'devices', 'attributes.type' => 'type']);
$include['type'] = $attributes;
$locationsModel = new \App\Models\LocationsModel();
$include['locations'] = $locationsModel->listUser();
return $include;
}
/**
* Read the entire collection from the database that the user is allowed to read
*
* @return array An array of formatted entries
*/
public function listUser($where = array(), $orgs = array()): array
{
if (empty($orgs)) {
$instance = & get_instance();
$orgs = array_unique(array_merge($instance->user->orgs, $instance->orgsModel->getUserDescendants($instance->user->orgs, $instance->orgs)));
$orgs[] = 1;
$orgs = array_unique($orgs);
}
$properties = array();
$properties[] = 'devices.*';
$properties[] = 'orgs.name as `orgs.name`';
$this->builder->select($properties, false);
$this->builder->join('orgs', 'devices.org_id = orgs.id', 'left');
$this->builder->whereIn('orgs.id', $orgs);
$this->builder->where($where);
$this->builder->orderBy('devices.name', 'ASC');
$query = $this->builder->get();
if ($this->sqlError($this->db->error())) {
return array();
}
return format_data($query->getResult(), 'devices');
}
/**
* Read the entire collection from the database
*
* @return array An array of all entries
*/
public function listAll(): array
{
$query = $this->builder->get();
if ($this->sqlError($this->db->error())) {
return array();
}
return $query->getResult();
}
/**
* Read an individual item from the database, by ID
*
* @param int $id The ID of the requested item
*
* @return array The array containing the requested item
*/
public function read(int $id = 0): array
{
$query = $this->builder->getWhere(['id' => intval($id)]);
if ($this->sqlError($this->db->error())) {
return array();
}
$device = $query->getResult();
if (isset($device[0]->tags)) {
if (!empty($device[0]->tags)) {
try {
$device[0]->tags = json_decode($device[0]->tags, false, 512, JSON_THROW_ON_ERROR);
} catch (\JsonException $e) {
log_message('error', 'Could not decode JSON. File:' . basename(__FILE__) . ', Line:' . __LINE__ . ', Error: ' . $e->getMessage());
}
}
if (empty($device[0]->tags)) {
$device[0]->tags = array();
}
}
if (!empty($device[0]->instance_tags)) {
try {
$device[0]->instance_tags = json_decode($device[0]->instance_tags, false, 512, JSON_THROW_ON_ERROR);
} catch (\JsonException $e) {
log_message('error', 'Could not decode JSON. File:' . basename(__FILE__) . ', Line:' . __LINE__ . ', Error: ' . $e->getMessage());
}
}
if (!empty($device[0]->instance_options)) {
try {
$device[0]->instance_options = json_decode($device[0]->instance_options, false, 512, JSON_THROW_ON_ERROR);
} catch (\JsonException $e) {
log_message('error', 'Could not decode JSON. File:' . basename(__FILE__) . ', Line:' . __LINE__ . ', Error: ' . $e->getMessage());
}
}
return format_data($device, 'devices');
}
/**
* Reset a table
*
* @return bool Did it work or not?
*/
public function reset(string $table = ''): bool
{
$instance = get_instance();
$status = '';
$orgs = array();
foreach ($instance->resp->meta->filter as $filter) {
if ($filter->name === 'status') {
$status = $filter->value;
}
if ($filter->name === 'devices.org_id') {
$orgs = $filter->value;
}
}
if (!empty($status) and !empty($orgs)) {
$sql = "DELETE FROM devices WHERE status = ? AND org_id IN (" . implode(',', $orgs) . ")";
$query = $this->db->query($sql, [$status]);
$message = "Deleted " . $this->db->affectedRows() . " devices with status: $status.";
\Config\Services::session()->setFlashdata('error', $message);
log_message('info', $message);
} else {
if (empty($status)) {
log_message('error', 'No devices deleted because status not provided.');
\Config\Services::session()->setFlashdata('error', 'No devices deleted because status not provided.');
}
if (empty($orgs)) {
log_message('error', 'No devices deleted because Orgs not calculated.');
\Config\Services::session()->setFlashdata('error', 'No devices deleted because Orgs not calculated.');
}
}
return true;
}
/**
* Read the entire collection from the database that the user is allowed to read
*
* @return array An array of formatted entries
*/
public function summary(): array
{
$instance = & get_instance();
$orgs = array_unique(array_merge($instance->user->orgs, $instance->orgsModel->getUserDescendants($instance->user->orgs, $instance->orgs)));
$orgs[] = 1;
$orgs = array_unique($orgs);
$include = array();
$properties = array();
$properties[] = 'devices.type AS `type`';
$properties[] = 'COUNT(devices.type) AS `count`';
$properties[] = 'devices.icon AS `icon`';
$this->builder->select($properties, false);
$this->builder->join('orgs', 'devices.org_id = orgs.id', 'left');
$this->builder->whereIn('orgs.id', $orgs);
$this->builder->groupBy('devices.type');
$this->builder->orderBy('devices.type');
$query = $this->builder->get();
if ($this->sqlError($this->db->error())) {
return array();
}
$include['devices'] = format_data($query->getResult(), 'devices');
$properties = array();
$properties[] = 'devices.os_family';
$properties[] = 'COUNT(devices.type) AS `count`';
$properties[] = 'devices.icon AS `icon`';
$this->builder->select($properties, false);
$this->builder->join('orgs', 'devices.org_id = orgs.id', 'left');
$this->builder->where('devices.os_family !=', '');
$this->builder->whereIn('orgs.id', $orgs);
$this->builder->groupBy('devices.os_family');
$this->builder->orderBy('devices.os_family');
$query = $this->builder->get();
if ($this->sqlError($this->db->error())) {
return array();
}
$include['os'] = format_data($query->getResult(), 'devices');
for ($i = 0; $i < count($include['os']); $i++) {
if (file_exists(ROOTPATH . 'public/device_images/' . strtolower(str_replace(' ', '_', $include['os'][$i]->attributes->os_family)) . '.svg')) {
$include['os'][$i]->attributes->icon = strtolower(str_replace(' ', '_', $include['os'][$i]->attributes->os_family));
}
}
return $include;
}
/**
* Update an individual item in the database
*
* @param int $id The device id
* @param object $data The data attributes
*
* @return bool true || false depending on success
*/
public function update($id = null, $data = null): bool
{
if (empty($data->id) and empty($id)) {
// Something went wrong - we SHOULD have an ID in an update routine
// Possibly removed via audit_format_system (if the supplied ID belonged to a device with status == deleted)
log_message('error', 'DevicesModel::update not supplied a device ID. ' . json_encode($data));
return false;
}
if (empty($data)) {
log_message('error', 'DevicesModel::update called, but no $data object supplied.');
return false;
}
$instance = get_instance();
$user_id = 0;
if (!empty($instance->user->id)) {
$user_id = intval($instance->user->id);
}
$log = new \stdClass();
$log->severity = 7;
$log->file = 'DevicesModel';
$log->function = 'DevicesModel::update';
$log->status = 'notice';
$log->command_status = 'notice';
$log->command = 'process audit';
$log->summary = 'start function';
if (!empty($id)) {
$id = intval($id);
$log->device_id = $id;
$data->id = $id;
} else {
$log->device_id = $data->id;
$id = intval($data->id);
}
$log->ip = '';
if (!empty($data->ip)) {
$data->ip = ip_address_to_db($data->ip);
$log->ip = ip_address_from_db($data->ip);
}
$log->discovery_id = '';
if (!empty($data->discovery_id)) {
$log->discovery_id = $data->discovery_id;
$GLOBALS['discovery_id'] = $data->discovery_id;
} elseif (!empty($GLOBALS['discovery_id'])) {
$log->discovery_id = $GLOBALS['discovery_id'];
}
$log->message = "System update start for ID: $id";
$source = 'user';
if (!empty($data->last_seen_by)) {
$source = $data->last_seen_by;
}
if (empty($data->os_cpe)) {
$cpe = cpe_create($data);
if (!empty($cpe)) {
$data->os_cpe = $cpe;
}
}
if (empty($data->discovery_id)) {
unset($data->discovery_id);
}
// Get the existing device data
$query = $this->builder->getWhere(['id' => intval($id)]);
$db_entry = $query->getRow();
// Cater for a short hostname
if (isset($data->last_seen_by) and ($data->last_seen_by === 'audit' or $data->last_seen_by === 'snmp')) {
if (!empty($db_entry)) {
if (strlen($db_entry->hostname) > 15 && isset($data->hostname) && strlen($data->hostname) === 15) {
unset($data->hostname);
}
}
}
$data->original_last_seen_by = (!empty($db_entry->last_seen_by)) ? $db_entry->last_seen_by : '';
$data->original_last_seen = (!empty($db_entry->last_seen)) ? $db_entry->last_seen : '';
$data->original_timestamp = (!empty($db_entry->last_seen)) ? $db_entry->last_seen : '';
if (empty($data->timestamp) and !empty($data->last_seen)) {
$data->timestamp = $data->last_seen;
}
if (empty($data->timestamp)) {
$data->timestamp = $instance->config->timestamp;
}
$lower = array('hostname', 'domain', 'fqdn', 'dns_hostname', 'dns_domain', 'dns_fqdn');
foreach ($lower as $column) {
if (!empty($data->{$column})) {
$data->{$column} = strtolower($data->{$column});
}
}
// Get the latest edit_log data
$sql = "SELECT weight, db_column, MAX(timestamp) as `timestamp`, value, previous_value, source FROM edit_log WHERE device_id = ? AND `db_table` = 'devices' GROUP BY db_column, weight, value, previous_value, source ORDER BY id";
$query = $this->db->query($sql, [$id]);
$edit_log = $query->getResult();
// if (in_array($source, ['audit', 'audit_ssh', 'audit_wmi', 'audit_windows', 'windows', 'wmi', 'cloud', 'nmis', 'snmp', 'ssh', 'integrations'])) {
// $name = $this->deriveName($data);
// if (!empty($name)) {
// $data->name = $name;
// }
// }
if ($source !== 'user' and $source !== 'rules') {
$data->name = $this->deriveName($data);
}
// Get the database column names
$fields = $this->db->getFieldNames('devices');
// We do not compare these with the edit_log data
$disallowed_fields = array('id', 'icon', 'sysUpTime', 'uptime', 'last_seen', 'last_seen_by', 'first_seen', 'instance_options', 'credentials');
$update_device = new \stdClass();
foreach ($data as $key => $value) {
if (!empty($key)) {
if ((isset($value) and $value !== '') or $source === 'user') {
// need to iterate through available columns and only insert where $key == valid column name
if (!in_array($key, $disallowed_fields) && in_array($key, $fields)) {
$previous_value = (!empty($db_entry->{$key})) ? $db_entry->{$key} : '';
// get the current weight from the edit_log
$previous_weight = 10000;
$count = count($edit_log);
for ($i = 0; $i < $count; $i++) {
if ($edit_log[$i]->db_column === $key) {
$previous_weight = intval($edit_log[$i]->weight);
}
}
// calculate the weight
$weight = intval(weight($source));
if (!is_string($value)) {
$value = json_encode($value);
}
if ($weight <= $previous_weight && (string)$value !== (string)$previous_value) {
$update_device->$key = $value;
$sql = "INSERT INTO edit_log VALUES (NULL, ?, ?, 'Data was changed', ?, ?, 'devices', ?, ?, ?, ?)";
$query = $this->db->query($sql, [$user_id, $id, $source, $weight, $key, $data->timestamp, $value, $previous_value]);
} else {
// We have an existing edit_log entry with a more important change - don't touch the `devices`.`$key` value
}
}
}
}
}
$statuses = array('deleted', 'lost', 'retired');
if (in_array($source, ['nmap', 'ssh', 'snmp', 'cloud', 'wmi', 'windows', 'audit_wmi', 'audit_windows', 'audit']) and in_array($db_entry->status, $statuses)) {
// We discovered a device, set its status to production
$update_device->status = 'production';
$sql = "INSERT INTO edit_log VALUES (NULL, ?, ?, 'Data was changed', ?, ?, 'devices', ?, ?, ?, ?)";
$query = $this->db->query($sql, [$user_id, $id, $source, 2000, 'status', $data->timestamp, 'production', $db_entry->status]);
}
// Add our non-edit_log compared attributes to the data to be updated
foreach ($data as $key => $value) {
if ($key !== 'id' && in_array($key, $disallowed_fields)) {
$update_device->$key = (string)$value;
}
}
$update = $this->updateFieldData('devices', $update_device);
$this->builder->where('id', intval($id));
if (count((array)$update_device) > 0) {
$this->builder->update($update_device);
}
if ($this->sqlError($this->db->error())) {
return false;
}
reset_icons($id);
if (isset($data->mac_address) && $data->mac_address !== '' && isset($data->ip) && $data->ip !== '' && isset($data->subnet) && $data->subnet !== '') {
// we need to check if we have an entry in `network` if we do not, but we have details (ex- an nmap device that previously existed but did not have a MAC, but now does)
// we need to insert it. ideally this would have already been done when the device was initially discovered, but we cannot count on that.
// need to check if an entry in `network` exists and if it does not AND we have details, insert something search for any entries in `ip`
$sql = "SELECT * FROM ip WHERE device_id = ? AND mac = ? AND current = 'y' AND ip = ?";
$query = $this->db->query($sql, [intval($id), "{$data->mac_address}", "{$data->ip}"]);
$result = $query->getResult();
$count = $query->getNumRows();
if ($count === 0) {
// no match - insert
$sql = "INSERT INTO ip (id, device_id, current, first_seen, last_seen, mac, net_index, ip, netmask, version, network, set_by) VALUES(NULL, ?, 'y', ?, ?, ?, '', ?, ?, '', '', '')";
$query = $this->db->query($sql, [intval($id), "{$data->timestamp}", "{$data->timestamp}", "{$data->mac_address}", "{$data->ip}", "{$data->subnet}"]);
} else {
// match - update timestamp only
$sql = "UPDATE ip SET last_seen = ? WHERE device_id = ? AND mac = ? AND current = 'y' AND ip = ?";
$query = $this->db->query($sql, ["{$data->timestamp}", $id, "{$data->mac_address}", "{$data->ip}"]);
}
}
if (empty($data->vm_uuid)) {
$data->vm_uuid = $this->create_vm_uuid($data);
}
// Check if we have a matching entry in the vm table and update it if required
if (!empty($data->uuid) and !empty($data->vm_uuid)) {
$sql = "SELECT vm.id AS `vm.id`, vm.device_id AS `vm.device_id`, devices.hostname AS `devices.hostname` FROM vm, devices WHERE (LOWER(vm.uuid) = LOWER(?) OR LOWER(vm.uuid) = LOWER(?)) AND vm.uuid != '' AND vm.current = 'y' AND vm.device_id = devices.id";
$query = $this->db->query($sql, [$data->uuid, $data->vm_uuid]);
if ($query->getNumRows() > 0) {
$row = $query->getRow();
$temp_vm_id = $row->{'vm.id'};
$data->vm_device_id = $row->{'vm.device_id'};
$data->vm_server_name = $row->{'devices.hostname'};
$sql = "SELECT icon, 'vm' FROM devices WHERE id = ?";
$query = $this->db->query($sql, [$id]);
$row = $query->getRow();
$data->icon = $row->icon;
$myName = (!empty($data->name)) ? $data->name : '';
if (empty($myName) and !empty($data->hostname)) {
$myName = $data->hostname;
}
$sql = 'UPDATE vm SET guest_device_id = ?, icon = ?, name = ? WHERE id = ?';
$query = $this->db->query($sql, [$id, $data->icon, $myName, intval($temp_vm_id)]);
$sql = 'UPDATE devices SET vm_device_id = ?, vm_server_name = ? WHERE id = ?';
$query = $this->db->query($sql, [$data->vm_device_id, $data->vm_server_name, $data->id]);
}
}
// Ensure we have an OrgID
if (empty($data->org_id)) {
$sql = 'SELECT org_id FROM devices WHERE id = ?';
$query = $this->db->query($sql, [$id]);
$row = $query->getRow();
$data->org_id = $row->org_id;
}
// Check and update any custom fields, if the supplied data key name == the fields.name
$fieldsModel = new \App\Models\FieldsModel();
// TODO - can we restrict this to only those fields from discoveries.org_id and lower by populating listUser([], $orgs) ?
// - The incoming data may be from a user (web interface) a discovery or an audit.
$fields = $fieldsModel->listAll();
$sql = "SELECT * FROM field WHERE device_id = ?";
$deviceFields = $this->db->query($sql, [$id])->getResult();
foreach ($fields as $field) {
foreach ($data as $key => $value) {
if ($key === $field->name) {
// We have a matching field - check for an existing value
$updated = false;
if (!empty($deviceFields)) {
foreach ($deviceFields as $deviceField) {
if (intval($field->id) === intval($deviceField->field_id)) {
$previous_value = (!empty($deviceField->value)) ? $deviceField->value : '';
$updated = true;
$sql = "UPDATE field SET value = ?, `timestamp` = NOW() WHERE id = ?";
$this->db->query($sql, [$value, $deviceField->id]);
$sql = "INSERT INTO edit_log VALUES (null, ?, ?, 'Field data was updated', ?, ?, 'field', ?, NOW(), ?, ?)";
$this->db->query($sql, [$user_id, $id, $source, 1000, $field->name, $value, $previous_value]);
}
}
}
if ($updated === false) {
// A new field - insert it
$sql = "INSERT INTO field VALUES (null, ?, ?, NOW(), ?)";
$this->db->query($sql, [$id, $field->id, $value]);
$sql = "INSERT INTO edit_log VALUES (null, ?, ?, 'Field data was created', ?, ?, 'field', ?, NOW(), ?, '')";
$this->db->query($sql, [$user_id, $id, $source, 1000, $field->name, $value]);
}
}
}
}
$log->message = 'System update end for ID: ' . $id;
$log->summary = 'finish function';
return true;
}
public function create_vm_uuid($data)
{
$vm_uuid = '';
if (!empty($data->uuid) and !empty($data->serial) and stripos($data->serial, 'vmware-') !== false) {
// because Windows doesn't supply an identical UUID, but it does supply the required digits, make a UUID from the serial
// As at VMWare ESXi 7, this works for Linux as well
// serial is taken from Win32_ComputerSystemProduct.IdentifyingNumber
// Vmware supplies - 564d3739-b4cb-1a7e-fbb1-b10dcc0335e1
// audit_windows supples - VMware-56 4d 37 39 b4 cb 1a 7e-fb b1 b1 0d cc 03 35 e1
$vm_uuid = str_ireplace('VMware-', '', $data->serial);
$vm_uuid = str_ireplace('-', ' ', $vm_uuid);
$vm_uuid = strtolower($vm_uuid);
$vm_uuid = str_ireplace(' ', '', $vm_uuid);
$vm_uuid = substr($vm_uuid, 0, 8);
$vm_uuid .= '-';
$vm_uuid .= substr($vm_uuid, 8, 4);
$vm_uuid .= '-';
$vm_uuid .= substr($vm_uuid, 12, 4);
$vm_uuid .= '-';
$vm_uuid .= substr($vm_uuid, 16, 4);
$vm_uuid .= '-';
$vm_uuid .= substr($vm_uuid, 20, 12);
}
if (!empty($data->uuid) and empty($vm_uuid) and !empty($data->manufacturer) and $data->manufacturer === 'Microsoft Corporation' and !empty($data->form_factor) and $data->form_factor === 'Virtual') {
// For Windows Hyper-V, convert the guest UUID into the UUID Hyper-V supplied.
// Ubuntu Guest supplies - 8334790d-7077-ff40-9df0-1e9f35e8fef7
// Windows Hyper-V supplies - 0D793483-7770-40FF-9DF0-1E9F35E8FEF7
$vm_uuid = substr($data->uuid, 6, 2);
$vm_uuid .= substr($data->uuid, 4, 2);
$vm_uuid .= substr($data->uuid, 2, 2);
$vm_uuid .= substr($data->uuid, 0, 2);
$vm_uuid .= '-';
$vm_uuid .= substr($data->uuid, 11, 2);
$vm_uuid .= substr($data->uuid, 9, 2);
$vm_uuid .= '-';
$vm_uuid .= substr($data->uuid, 16, 2);
$vm_uuid .= substr($data->uuid, 14, 2);
$vm_uuid .= '-';
$vm_uuid .= substr($data->uuid, 19);
log_message('debug', 'VM UUID: ' . $vm_uuid);
}
if (!empty($data->uuid) && empty($vm_uuid)) {
$vm_uuid = $data->uuid;
}
return $vm_uuid;
}
/**
* The dictionary item
*
* @return object The stdClass object containing the dictionary
*/
public function dictionary(): object
{
$instance = & get_instance();
// TODO - When running cli -> queue_start -> ip_audit, the $instance->dictionary is not populated.
// - Hence the @'s below. Fix this and remove the @'s.
$collection = 'devices';
$dictionary = new stdClass();
$dictionary->table = $collection;
$dictionary->columns = new stdClass();
$dictionary->attributes = new stdClass();
$dictionary->attributes->collection = explode(',', $instance->config->devices_default_display_columns);
$dictionary->attributes->fields = $this->db->getFieldNames($collection); # All field names for this table
$dictionary->attributes->create = array('name','org_id'); # We MUST have each of these present and assigned a value
$dictionary->attributes->update = $this->updateFields($collection); # We MAY update any of these listed fields
$dictionary->attributes->fieldsMeta = $this->db->getFieldData($collection); # The meta data about all fields - name, type, max_length, primary_key, nullable, default
$dictionary->sentence = 'Open-AudIT tracks every device on your network. Change a device - see it. Move a device - see it. Remove a device - see it.';
$dictionary->about = ' Devices on your network need to be managed. But how do you keep your records up to date? A spreadsheet - defintley not. That will be out of date in hours, if not days. Why manually try to keep up. Use Open-AudIT to automatically scan your networks and record your devices - manufacturer, model, serial and more than 100 other attributes. Full lists of software, services, disks, open ports, users, etc. Automatically see if an attribute has been added, removed or changed. |