function select_profile()
{
global $sid, $username, $dbconn, $version, $nessus_path;
$used_sids = array();
if (preg_match("/omp\\s*\$/i", $nessus_path)) {
$omp = new OMP();
$used_sids = $omp->get_used_sids();
}
$entities_nt = array();
$query = "SELECT ae.id as eid, ae.name as ename, aet.name as etype FROM acl_entities AS ae, acl_entities_types AS aet WHERE ae.type = aet.id";
$result_entities = $dbconn->Execute($query);
while (!$result_entities->EOF) {
$entities_nt[$result_entities->fields['eid']] = $result_entities->fields['ename'] . " [" . $result_entities->fields['etype'] . "]";
$result_entities->MoveNext();
}
$query = "";
$normal_user_pro = false;
if ($username == "admin") {
$query = "SELECT id, name, description, owner, type FROM vuln_nessus_settings \n WHERE deleted != '1' ORDER BY name";
} else {
if (preg_match("/pro|demo/i", $version)) {
if (Acl::am_i_proadmin()) {
$pro_users = array();
$entities_list = array();
//list($entities_admin,$num) = Acl::get_entities_admin($dbconn,Session::get_session_user());
//$entities_list = array_keys($entities_admin);
$entities_list = Acl::get_user_entities($current_user);
$users = Acl::get_my_users($dbconn, Session::get_session_user());
foreach ($users as $us) {
$pro_users[] = $us["login"];
}
$query = "SELECT id, name, description, owner, type FROM vuln_nessus_settings \n WHERE deleted != '1' and (name='Default' or owner in ('0','" . implode("', '", array_merge($entities_list, $pro_users)) . "')) ORDER BY name";
} else {
$tmp = array();
$entities = Acl::get_user_entities($username);
foreach ($entities as $entity) {
$tmp[] = "'" . $entity . "'";
}
if (count($tmp) > 0) {
$user_where = "owner in ('0','{$username}'," . implode(", ", $tmp) . ")";
} else {
$user_where = "owner in ('0','{$username}')";
}
$query = "SELECT id, name, description, owner, type FROM vuln_nessus_settings \n WHERE deleted != '1' and (name='Default' or {$user_where}) ORDER BY name";
$normal_user_pro = true;
}
} else {
$query = "SELECT id, name, description, owner, type FROM vuln_nessus_settings \n WHERE deleted != '1' and (name='Default' or owner in ('0','{$username}')) ORDER BY name";
}
}
//var_dump($query);
$result = $dbconn->execute($query);
//echo $query;
echo "<CENTER>";
echo "<table cellspacing=\"0\" cellpadding=\"0\" border=\"0\" width=\"800\"><tr><td class=\"headerpr\" style=\"border:0;\">" . _("Vulnerability Scan Profiles") . "</td></tr></table>";
echo "<table cellspacing=\"0\" cellpadding=\"0\" border=\"0\" width=\"800\"><tr><td class=\"noborder\">";
echo "<p>";
echo _("Please select a profile to edit") . ":";
echo "</p>";
echo "<table align='center'>";
echo "<tr>";
if ($username == "admin" || Session::am_i_admin()) {
echo "<th>" . _("Available for") . "</th>";
}
echo " <th>" . _("Profile") . "</th>";
echo " <th>" . _("Description") . "</th>";
echo " <th>" . _("Action") . "</th>";
echo "</tr>";
while (!$result->EOF) {
//<td>$sowner</td>
//<td>$stype</td>
list($sid, $sname, $sdescription, $sowner, $stype) = $result->fields;
echo "<tr>";
if ($username == "admin" || Session::am_i_admin()) {
if ($sowner == "0") {
echo "<td>" . _("All") . "</td>";
} elseif (is_numeric($sowner)) {
echo "<td style='padding:0px 2px 0px 2px;'>" . $entities_nt[$sowner] . "</td>";
} else {
echo "<td>" . html_entity_decode($sowner) . "</td>";
}
}
echo "<td>" . html_entity_decode($sname) . "</td>";
echo "<td>" . html_entity_decode($sdescription) . "</td>";
echo "<td>";
//var_dump($normal_user_pro);
//var_dump($sowner);
//var_dump($username);
//var_dump($used_sids);
if ($normal_user_pro && $sowner != $username && $sname != "Default") {
echo " ";
} elseif ($username == "admin" || Session::am_i_admin()) {
if (!in_array($sid, $used_sids)) {
echo "<a href=\"settings.php?disp=edit&&sid={$sid}\"><img src=\"images/pencil.png\"></a>";
echo "<a href=\"settings.php?disp=edit&op=delete&sid={$sid}\" onclick=\"return confirmDelete();\"><img src=\"images/delete.gif\"></a>";
} else {
echo "<img src=\"images/pencil.png\" title=\"" . _("This profile is being used by a running job now") . "\" style=\"filter:alpha(opacity=50);-moz-opacity:0.5;-khtml-opacity: 0.5;opacity: 0.5;\">";
echo "<img src=\"images/delete.gif\" title=\"" . _("This profile is being used by a running job now") . "\" style=\"filter:alpha(opacity=50);-moz-opacity:0.5;-khtml-opacity: 0.5;opacity: 0.5;\">";
}
} elseif ($sname == "Default") {
echo "[" . _("edit by admin") . "]";
} elseif ($sname != "Default") {
if (!in_array($sid, $used_sids)) {
echo "<a href=\"settings.php?disp=edit&&sid={$sid}\"><img src=\"images/pencil.png\"></a>";
echo "<a href=\"settings.php?disp=edit&op=delete&sid={$sid}\" onclick=\"return confirmDelete();\"><img src=\"images/delete.gif\"></a>";
} else {
echo "<img title=\"" . _("This profile is being used by a running job now") . "\" style=\"filter:alpha(opacity=50);-moz-opacity:0.5;-khtml-opacity: 0.5;opacity: 0.5;\" src=\"images/pencil.png\">";
echo "<img title=\"" . _("This profile is being used by a running job now") . "\" style=\"filter:alpha(opacity=50);-moz-opacity:0.5;-khtml-opacity: 0.5;opacity: 0.5;\" src=\"images/delete.gif\">";
}
}
echo "</td>";
echo "</tr>";
$result->MoveNext();
}
echo "</table>";
echo "<center>";
echo "<p>";
echo "<form>";
echo "<input type=button onclick=\"document.location.href='settings.php?disp=new'\" value=\"" . _("Create New Profile") . "\" class=\"button\"> ";
if ($username == "admin" || Session::am_i_admin()) {
echo "<input type=button onclick=\"document.location.href='defaults.php'\" value=\"" . _("Edit default profile") . "\" class=\"button\">";
}
echo "</form>";
echo "</p>";
echo "</center>";
echo "<br><br>";
echo "</td></tr></table></center>";
// end else
}
$query = "DELETE FROM vuln_nessus_latest_results WHERE report_id in (" . $_SESSION["_dreport_ids"] . ")";
$result = $dbconn->execute($query);
unset($_SESSION["_dreport_ids"]);
}
$conf = $GLOBALS["CONF"];
$version = $conf->get_conf("ossim_server_version", FALSE);
$arruser = array();
if (!preg_match("/pro|demo/i", $version)) {
$user = Session::get_session_user();
$arruser[] = $user;
if (Session::get_session_user() != ACL_DEFAULT_OSSIM_ADMIN && Session::am_i_admin()) {
$arruser[] = ACL_DEFAULT_OSSIM_ADMIN;
}
} else {
$entities = array();
$entities = Acl::get_user_entities();
$entities[] = Session::get_session_user();
// add current user
if (Session::get_session_user() != ACL_DEFAULT_OSSIM_ADMIN && Session::am_i_admin()) {
$entities[] = ACL_DEFAULT_OSSIM_ADMIN;
}
$arruser = $entities;
$user = implode("', '", $entities);
}
if ($delete != "") {
$query = "SELECT report_id, sid, username FROM vuln_nessus_latest_reports WHERE report_key='{$delete}' and scantime='{$scantime}'";
$result = $dbconn->execute($query);
$dreport_id = $result->fields["report_id"];
$dsid = $result->fields["sid"];
$dusername = $result->fields["username"];
$query = "DELETE FROM vuln_nessus_latest_reports WHERE report_key='{$delete}' and scantime='{$scantime}'";
function tab_discovery()
{
global $component, $uroles, $editdata, $scheduler, $username, $useremail, $dbconn, $disp, $enScanRequestImmediate, $enScanRequestRecur, $timeout, $smethod, $SVRid, $sid, $ip_list, $ip_exceptions_list, $schedule_type, $ROYEAR, $ROday, $ROMONTH, $time_hour, $time_min, $dayofweek, $dayofmonth, $sname, $user, $entity, $hosts_alive, $scan_locally, $version, $nthweekday, $semail, $not_resolve;
global $pluginOptions, $enComplianceChecks, $profileid;
$conf = $GLOBALS["CONF"];
$pre_scan_locally_status = $conf->get_conf("nessus_pre_scan_locally", FALSE);
$user_selected = $user;
$entity_selected = $entity;
$SVRid_selected = $SVRid;
$sid_selected = $sid != "" ? $sid : $editdata['meth_VSET'];
$timeout_selected = $editdata["meth_TIMEOUT"];
$ip_list_selected = str_replace("\\r\\n", "\n", str_replace(";;", "\n", $ip_list));
if (count($ip_exceptions_list) > 0) {
$ip_list_selected .= "\n" . implode("\n", $ip_exceptions_list);
}
$ROYEAR_selected = $ROYEAR;
$ROday_selected = $ROday;
$ROMONTH_selected = $ROMONTH;
$time_hour_selected = $time_hour;
$time_min_selected = $time_min;
$dayofweek_selected = $dayofweek;
$dayofmonth_selected = $dayofmonth;
$sname_selected = $sname;
//print_r($editdata);
if ($schedule_type != "") {
$editdata['schedule_type'] = $schedule_type;
}
$cquery_like = "";
if ($component != "") {
$cquery_like = " AND component='{$component}'";
}
$today = date("Ymd");
$tyear = substr($today, 0, 4);
$nyear = $tyear + 1;
$tmonth = substr($today, 4, 2);
$tday = substr($today, 6, 2);
#SET VALUES UP IF EDIT SCHEDULER
if (isset($editdata['notify'])) {
$enotify = $editdata['notify'];
} else {
$enotify = "{$useremail}";
}
if (isset($editdata['time'])) {
list($time_hour, $time_min, $time_sec) = split(':', $editdata['time']);
}
$arrTypes = array("N", "O", "D", "W", "M", "NW");
foreach ($arrTypes as $type) {
$sTYPE[$type] = "";
}
$arrJobTypes = array("C", "M", "R", "S");
foreach ($arrJobTypes as $type) {
$sjTYPE[$type] = "";
}
if (isset($editdata['schedule_type'])) {
$sTYPE[$editdata['schedule_type']] = "CHECKED";
if ($editdata['schedule_type'] == 'D') {
$ni = 2;
} elseif ($editdata['schedule_type'] == 'O') {
$ni = 3;
} elseif ($editdata['schedule_type'] == 'W') {
$ni = 4;
} elseif ($editdata['schedule_type'] == 'NW') {
$ni = 6;
} else {
$ni = 5;
}
$show = "<br><script language=javascript>showLayer('idSched', {$ni});</script>";
} else {
if ($enScanRequestImmediate) {
$sTYPE['N'] = "CHECKED";
$show = "<br><script language=javascript>showLayer('idSched', 1);</script>";
} else {
$sTYPE['O'] = "checked";
$show = "<br><script language=javascript>showLayer('idSched', 3);</script>";
}
}
if ($schedule_type != "") {
if ($schedule_type == "N") {
$show .= "<br><script language=javascript>showLayer('idSched', 1);</script>";
}
if ($schedule_type == "O") {
$show .= "<br><script language=javascript>showLayer('idSched', 3);</script>";
}
if ($schedule_type == "D") {
$show .= "<br><script language=javascript>showLayer('idSched', 2);</script>";
}
if ($schedule_type == "W") {
$show .= "<br><script language=javascript>showLayer('idSched', 4);</script>";
}
if ($schedule_type == "M") {
$show .= "<br><script language=javascript>showLayer('idSched', 5);</script>";
}
if ($schedule_type == "NW") {
$show .= "<br><script language=javascript>showLayer('idSched', 6);</script>";
}
}
if (isset($editdata['job_TYPE'])) {
$sjTYPE[$editdata['job_TYPE']] = "SELECTED";
} else {
$sjTYPE['M'] = "SELECTED";
}
if (isset($editdata['day_of_month'])) {
$dayofmonth = $editdata['day_of_month'];
}
if (isset($editdata['day_of_week'])) {
$day[$editdata['day_of_week']] = "SELECTED";
}
if ($dayofweek_selected != "") {
$day[$dayofweek_selected] = "SELECTED";
}
if (!$uroles['nessus']) {
$name = "sr-" . substr($username, 0, 6) . "-" . time();
$name = $editdata['name'] == "" ? $name : $editdata['name'];
$nameout = $name . "<input type=hidden style='width:200px' name='sname' value='{$name}'>";
} else {
$nameout = "<input type=text style='width:200px' name='sname' value='" . ($sname_selected != "" ? "{$sname_selected}" : "{$editdata['name']}") . "'>";
}
$discovery = "<input type=\"hidden\" name=\"cred_type\" value=\"N\">";
$discovery .= "<table width=\"80%\">";
$discovery .= "<tr>";
$discovery .= "<input type=\"hidden\" name=\"smethod\" value=\"{$smethod}\">";
$discovery .= "<td align=\"Right\" width=\"30%\">" . _("Job Name") . ":</td>";
$discovery .= "<td style=\"text-align:left;\">{$nameout}</td>";
$discovery .= "</tr>";
$query = "SELECT id, name, hostname\n FROM vuln_nessus_servers\n WHERE enabled='1' AND status='A'";
$result = $dbconn->execute($query);
$discovery .= "<tr>";
$discovery .= "<td align=\"right\">" . _("Select Server") . ":</td>";
$discovery .= "<td style=\"text-align:left;\"><select name=\"SVRid\">";
//if($SVRid=="" || $SVRid_selected=="Null") {
$discovery .= "<option value=\"Null\">" . _("First Available Server-Distributed") . "</option>";
//}
while (!$result->EOF) {
list($SVRid, $sname, $shostIP) = $result->fields;
if (Session::am_i_admin() || Session::sensorAllowed($shostIP)) {
// $shostIP=="localhost" ||
$discovery .= "<option value=\"{$SVRid}\" ";
if ($editdata['scan_ASSIGNED'] != "" && $editdata['scan_ASSIGNED'] == $SVRid) {
$discovery .= " SELECTED";
}
if ($SVRid_selected == $SVRid) {
$discovery .= " SELECTED";
}
$discovery .= ">" . strtoupper($sname) . " [{$shostIP}] </option>";
}
$result->MoveNext();
}
$discovery .= <<<EOT
</select>
</td>
</tr>
<tr>
EOT;
$discovery .= "<td align='right' width='25%'>" . _("Profile") . ":</td>";
$discovery .= "<td style='text-align:left;'><select name='sid'>";
//$query = "SELECT distinct(t1.id), t1.name, t1.description
// FROM vuln_nessus_settings t1
// LEFT JOIN vuln_nessus_settings_users t2 ON t1.id = t2.sid
// WHERE t1.type = 'G' OR t2.username='******'
// ORDER BY t1.name";
$query = "";
if ($username == "admin" || Session::am_i_admin()) {
$query = "SELECT distinct(t1.id), t1.name, t1.description \n FROM vuln_nessus_settings t1 WHERE deleted='0'\n ORDER BY t1.name";
} else {
if (preg_match("/pro|demo/i", $version)) {
if (Acl::am_i_proadmin()) {
$pro_users = array();
$entities_list = Acl::get_user_entities($current_user);
//list($entities_admin,$num) = Acl::get_entities_admin($dbconn,Session::get_session_user());
//$entities_list = array_keys($entities_admin);
$users = Acl::get_my_users($dbconn, Session::get_session_user());
foreach ($users as $us) {
$pro_users[] = $us["login"];
}
$query = "SELECT distinct(t1.id), t1.name, t1.description FROM vuln_nessus_settings t1\n WHERE deleted = '0' and (name='Default' or owner in ('0','" . implode("','", array_merge($entities_list, $pro_users)) . "')) ORDER BY t1.name";
} else {
$tmp = array();
$entities = Acl::get_user_entities($username);
foreach ($entities as $entity) {
$tmp[] = "'" . $entity . "'";
}
if (count($tmp) > 0) {
$user_where = "owner in ('0','{$username}'," . implode(", ", $tmp) . ")";
} else {
$user_where = "owner in ('0','{$username}')";
}
$query = "SELECT distinct(t1.id), t1.name, t1.description FROM vuln_nessus_settings t1\n WHERE deleted = '0' and (name='Default' or {$user_where}) ORDER BY t1.name";
}
} else {
$query = "SELECT distinct(t1.id), t1.name, t1.description FROM vuln_nessus_settings t1\n WHERE deleted = '0' and (name='Default' or owner in ('0','{$username}')) ORDER BY t1.name";
}
}
//var_dump($query);
$result = $dbconn->execute($query);
$job_profiles = array();
$id_found = false;
$ipr = 0;
while (!$result->EOF) {
list($sid, $sname, $sdescription) = $result->fields;
if ($sid_selected == $sid) {
$id_found = true;
}
$job_profiles[$ipr]["sid"] = $sid;
$job_profiles[$ipr]["sname"] = $sname;
$job_profiles[$ipr]["sdescription"] = $sdescription;
$ipr++;
$result->MoveNext();
}
foreach ($job_profiles as $profile_data) {
$sid = $profile_data["sid"];
$sname = $profile_data["sname"];
$sdescription = $profile_data["sdescription"];
$discovery .= "<option value=\"{$sid}\" ";
if ($sid_selected == $sid) {
if ($sdescription != "") {
$discovery .= "selected>{$sname} - {$sdescription}</option>";
} else {
$discovery .= "selected>{$sname}</option>";
}
} else {
if ($sdescription != "") {
$discovery .= (preg_match("/default/i", $sname) && !$id_found ? 'selected="selected"' : "") . ">{$sname} - {$sdescription}</option>";
} else {
$discovery .= (preg_match("/default/i", $sname) && !$id_found ? 'selected="selected"' : "") . ">{$sname}</option>";
}
}
}
$discovery .= "</select>  [<a href=\"settings.php?hmenu=Vulnerabilities&smenu=ScanProfiles\">" . _("Edit Profiles") . "</a>]</td>";
$discovery .= "</tr>";
$discovery .= "<tr>";
$discovery .= "<td align='right'>" . _("Timeout") . "</td>";
$discovery .= "<td style=\"text-align:left;\" nowrap><input type='text' style='width:80px' name='timeout' value='" . ($timeout_selected == "" ? "{$timeout}" : "{$timeout_selected}") . "'>";
$discovery .= "<font color='black'> " . _("Max scan run time in seconds") . " </font></td>";
$discovery .= "</tr>";
if ($smethod == "inmediately") {
$discovery .= "<tr>";
$discovery .= "<td style=\"text-align:center;\" nowrap>" . _("Schedule Method") . ":</td>";
$discovery .= "<td style=\"text-align:left;\" nowrap>" . _("Inmediately") . "<td>";
$discovery .= "</tr>";
$discovery .= "<tr style='display:none'>";
} else {
$discovery .= "<tr>";
}
$discovery .= "<td style=\"text-align:left;padding-left:35px;\">" . _("Schedule Method") . ":<br>";
if (!$scheduler && $enScanRequestImmediate) {
$discovery .= "<input type=\"radio\" name=\"schedule_type\" value=\"N\" onClick=\"showLayer('idSched', 1)\" {$sTYPE['N']}>" . _("Immediately") . "</input><br>";
}
if (!$scheduler) {
$discovery .= "<input type=\"radio\" name=\"schedule_type\" value=\"O\" onClick=\"showLayer('idSched', 3)\" {$sTYPE['O']}>" . _("Run Once") . "</input><br>";
}
if ($scheduler || $enScanRequestRecur) {
$discovery .= "<input type=\"radio\" name=\"schedule_type\" value=\"D\" onClick=\"showLayer('idSched', 2)\" {$sTYPE['D']}>" . _("Daily") . "</input><br>";
$discovery .= "<input type=\"radio\" name=\"schedule_type\" value=\"W\" onClick=\"showLayer('idSched', 4)\" {$sTYPE['W']}>" . _("Day of the Week") . "</input><br>";
$discovery .= "<input type=\"radio\" name=\"schedule_type\" value=\"M\" onClick=\"showLayer('idSched', 5)\" {$sTYPE['M']}>" . _("Day of the Month") . "</input><br>";
$discovery .= "<input type=\"radio\" name=\"schedule_type\" value=\"NW\" onClick=\"showLayer('idSched', 6)\" {$sTYPE['NW']}>" . _("N<sup>th</sup> weekday of the month") . "</input><br>";
}
$discovery .= <<<EOT
</td>
<td><div>
<div id="idSched1" class="forminput">
</div>
<div id="idSched3" class="forminput">
<table cellspacing="2" cellpadding="0" width="100%">
EOT;
$discovery .= "<tr><td colspan='7' class='noborder'>" . gettext("Year") . " <select name='ROYEAR'>";
$discovery .= "<option value=\"{$tyear}\" " . ($ROYEAR_selected == "" || $ROYEAR_selected == $tyear ? "selected" : "") . ">{$tyear}</option>";
$discovery .= "<option value=\"{$nyear}\" " . ($ROYEAR_selected == $nyear ? "selected" : "") . ">{$nyear}</option>";
$discovery .= "</select> " . gettext("Month") . " <select name='ROMONTH'>";
/* $discovery .= <<<EOT
</td>
<td><div>
<div id="idSched1" class="forminput">
</div>
<div id="idSched3" class="forminput">
<table cellspacing="2" cellpadding="0" width="100%">
<tr><td colspan="7" class="noborder">Year <select name="ROYEAR">
<option value="$tyear" selected>$tyear</option>";
<option value="$nyear">$nyear</option>";
</select> Month <select name="ROMONTH">";
EOT;*/
for ($i = 1; $i <= 12; $i++) {
$discovery .= "<option value=\"{$i}\" ";
if ($i == $tmonth && $ROMONTH_selected == "" || $ROMONTH_selected == $i) {
$discovery .= "selected";
}
$discovery .= ">{$i}</option>";
}
$discovery .= "</select> " . gettext("Day") . " <select name=\"ROday\">";
for ($i = 1; $i <= 31; $i++) {
$discovery .= "<option value=\"{$i}\" ";
if ($i == $tday && $ROday_selected == "" || $ROday_selected == $i) {
$discovery .= "selected";
}
$discovery .= ">{$i}</option>";
}
$discovery .= <<<EOT
</select></td>
</tr>
</table>
</div>
<div id="idSched4" class="forminput" >
<table width="100%">
<tr>
EOT;
$discovery .= "<th align=\"right\">" . _("Weekly") . "</td><td colspan=\"2\" class=\"noborder\">";
$discovery .= "<select name=\"dayofweek\">";
$discovery .= "<option value=\"Su\" SELECTED >" . gettext("Select week day to run") . "</option>";
$discovery .= "<option value=\"Su\" {$day['Su']} >" . gettext("Sunday") . "</option>";
$discovery .= "<option value=\"Mo\" {$day['Mo']} >" . gettext("Monday") . "</option>";
$discovery .= "<option value=\"Tu\" {$day['Tu']} >" . gettext("Tuesday") . "</option>";
$discovery .= "<option value=\"We\" {$day['We']} >" . gettext("Wednesday") . "</option>";
$discovery .= "<option value=\"Th\" {$day['Th']} >" . gettext("Thursday") . "</option>";
$discovery .= "<option value=\"Fr\" {$day['Fr']} >" . gettext("Friday") . "</option>";
$discovery .= "<option value=\"Sa\" {$day['Sa']} >" . gettext("Saturday") . "</option>";
$discovery .= "</select>";
$discovery .= "</td>";
$discovery .= <<<EOT
</tr>
</table>
</div>
<div id="idSched5" class="forminput">
<table width="100%">
<tr>
EOT;
$discovery .= "<th align='right'>" . gettext("Select Day") . "</td>";
$discovery .= <<<EOT
<td colspan="2" class="noborder"><select name="dayofmonth">"
EOT;
for ($i = 1; $i <= 31; $i++) {
$discovery .= "<option value=\"{$i}\"";
if ($dayofmonth == $i && $dayofmonth_selected == "" || $dayofmonth_selected == $i) {
$discovery .= " selected";
}
$discovery .= ">{$i}</option>";
}
$discovery .= <<<EOT
</select></td>
</tr>
</table>
</div>
<div id="idSched6" class="forminput">
<table width="100%">
<tr>
EOT;
$discovery .= "<th align=\"right\">" . gettext("Day of week") . "</th><td colspan=\"2\" class=\"noborder\">";
$discovery .= "<select name=\"nthdayofweek\">";
$discovery .= "<option value=\"Su\" SELECTED >" . gettext("Select week day to run") . "</option>";
$discovery .= "<option value=\"Su\" {$day['Su']} >" . gettext("Sunday") . "</option>";
$discovery .= "<option value=\"Mo\" {$day['Mo']} >" . gettext("Monday") . "</option>";
$discovery .= "<option value=\"Tu\" {$day['Tu']} >" . gettext("Tuesday") . "</option>";
$discovery .= "<option value=\"We\" {$day['We']} >" . gettext("Wednesday") . "</option>";
$discovery .= "<option value=\"Th\" {$day['Th']} >" . gettext("Thursday") . "</option>";
$discovery .= "<option value=\"Fr\" {$day['Fr']} >" . gettext("Friday") . "</option>";
$discovery .= "<option value=\"Sa\" {$day['Sa']} >" . gettext("Saturday") . "</option>";
$discovery .= "</select>";
$discovery .= "</td>";
$discovery .= <<<EOT
</tr>
</table>
<br>
<table width="100%">
<tr>
EOT;
$discovery .= "<th align='right'>" . gettext("N<sup>th</sup> weekday") . "</th><td colspan='2' class='noborder'>";
$discovery .= "<select name='nthweekday'>";
$discovery .= "<option value='1'>" . gettext("Select nth weekday to run") . "</option>";
$discovery .= "<option value='1'" . ($dayofmonth == 1 ? " selected" : "") . ">" . gettext("First") . "</option>";
$discovery .= "<option value='2'" . ($dayofmonth == 2 ? " selected" : "") . ">" . gettext("Second") . "</option>";
$discovery .= "<option value='3'" . ($dayofmonth == 3 ? " selected" : "") . ">" . gettext("Third") . "</option>";
$discovery .= "<option value='4'" . ($dayofmonth == 4 ? " selected" : "") . ">" . gettext("Fourth") . "</option>";
$discovery .= "<option value='5'" . ($dayofmonth == 5 ? " selected" : "") . ">" . gettext("Fifth") . "</option>";
$discovery .= <<<EOT
</select>
</td>
</tr>
</table>
</div>
<div id="idSched2" class="forminput">
<table width="100%">
EOT;
$discovery .= "<tr>";
$discovery .= "<th rowspan='2' align='right' width='30%'>" . gettext("Time") . "</td>";
$discovery .= "<td align='right'>" . gettext("Hour") . "</td><td>" . gettext("Minutes") . "</td>";
$discovery .= "</tr>";
$discovery .= <<<EOT
<tr>
<td align="right" class="noborder"><select name="time_hour">
EOT;
for ($i = 0; $i <= 23; $i++) {
$discovery .= "<option align=\"right\" value=\"{$i}\"";
if ($time_hour == $i && $time_hour_selected == "" || $time_hour_selected == $i) {
$discovery .= " selected";
}
$discovery .= ">{$i}</option>";
}
$discovery .= <<<EOT
</select></td>
<td class="noborder"><select name="time_min">
EOT;
for ($i = 0; $i < 60; $i = $i + 15) {
$discovery .= "<option value=\"{$i}\"";
if ($time_min == $i && $time_min_selected == "" || $time_min_selected == $i) {
$discovery .= " selected";
}
$discovery .= ">{$i}</option>";
}
$discovery .= <<<EOT
</select></td>
</tr>
</table>
</div>
</tr>
EOT;
$conf = $GLOBALS["CONF"];
$version = $conf->get_conf("ossim_server_version", FALSE);
$pro = preg_match("/pro|demo/i", $version) ? true : false;
$users = Session::get_users_to_assign($dbconn);
$entities = Session::get_entities_to_assign($dbconn);
$discovery .= "<tr>\n\t\t\t\t\t\t<td>" . _("Make this scan job visible for:") . "</td>\n\t\t\t\t\t\t<td style='text-align: left'>\n\t\t\t\t\t\t\t<table cellspacing='0' cellpadding='0' class='transparent' style='margin: 5px 0px;'>\n\t\t\t\t\t\t\t\t<tr>\n\t\t\t\t\t\t\t\t\t<td class='nobborder'><span style='margin-right:3px'>" . _('User:'******'nobborder'>\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t<select name='user' id='user' onchange=\"switch_user('user');return false;\">";
$num_users = 0;
foreach ($users as $k => $v) {
$login = $v->get_login();
$selected = $editdata["username"] == $login || $user_selected == $login ? "selected='selected'" : "";
$options .= "<option value='" . $login . "' {$selected}>{$login}</option>\n";
$num_users++;
}
if ($num_users == 0) {
$discovery .= "<option value='' style='text-align:center !important;'>- " . _("No users found") . " -</option>";
} else {
$discovery .= "<option value='' style='text-align:center !important;'>- " . _("Select one user") . " -</option>\n";
$discovery .= $options;
}
$discovery .= "\t\t\t\t\t\t</select>\n\t\t\t\t\t\t\t\t\t</td>";
if (!empty($entities)) {
$discovery .= "\t \t\t\t<td style='text-align:center; border:none; !important'><span style='padding:5px;'>" . _("OR") . "<span></td>\n\t\t\t\t\t\t\t\t\t<td class='nobborder'><span style='margin-right:3px'>" . _("Entity:") . "</span></td>\n\t\t\t\t\t\t\t\t\t<td class='nobborder'>\t\n\t\t\t\t\t\t\t\t\t\t<select name='entity' id='entity' onchange=\"switch_user('entity');return false;\">\n\t\t\t\t\t\t\t\t\t\t\t<option value='' style='text-align:center !important;'>-" . _("Select one entity") . "-</option>";
foreach ($entities as $k => $v) {
$selected = $editdata["username"] == $k || $entity_selected == $k ? "selected='selected'" : "";
$discovery .= "<option value='{$k}' {$selected}>{$v}</option>";
}
$discovery .= "\t\t\t\t\t</select>\n\t\t\t\t\t\t\t\t\t</td>";
}
$discovery .= " \t \t</tr>\n\t\t\t\t\t\t\t</table>\n\t\t\t\t\t\t</td>\n\t\t\t\t\t</tr>";
$discovery .= "<tr><td>" . _("Send an email notification when finished:");
$discovery .= "</td>";
$discovery .= "<td style=\"text-align:left;\">";
$discovery .= "<input type=\"radio\" name=\"semail\" value=\"0\"" . (count($editdata) <= 1 && intval($semail) == 0 || intval($editdata['meth_Wfile']) == 0 ? " checked" : "") . "/>" . _("No");
$discovery .= "<input type=\"radio\" name=\"semail\" value=\"1\"" . (count($editdata) <= 1 && intval($semail) == 1 || intval($editdata['meth_Wfile']) == 1 ? " checked" : "") . "/>" . _("Yes");
$discovery .= "</td></tr>";
$targets_message = _("Targets") . "<br>" . _("(Hosts/Networks)") . "<br>";
$discovery .= "<tr><td valign=\"top\" style=\"text-align:left;padding-left:50px;\" width=\"20%\" class=\"noborder\"><br>";
$discovery .= "<input type=\"checkbox\" name=\"hosts_alive\" value=\"1\"" . (count($editdata) <= 1 && intval($hosts_alive) == 1 || intval($editdata['meth_CRED']) == 1 ? " checked" : "") . ">" . _("Only scan hosts that are alive") . "<br>(" . _("greatly speeds up the scanning process") . ")<br><br>";
//if (Session::am_i_admin())
$discovery .= "<input type=\"checkbox\" name=\"scan_locally\" value=\"1\"" . ($pre_scan_locally_status == 0 ? " disabled=\"disabled\"" : "") . ($pre_scan_locally_status == 1 && (count($editdata) <= 1 && intval($scan_locally) == 1 || intval($editdata['authorized']) == 1) ? " checked" : "") . ">" . _("Pre-Scan locally") . "<br>(" . _("do not pre-scan from scanning sensor") . ")<br><br>";
$discovery .= "<input type=\"checkbox\" name=\"not_resolve\" value=\"1\" " . ($editdata['resolve_names'] === "0" || $not_resolve == "1" ? "checked=\"checked\"" : "") . "/>" . _("Do not resolve names");
//else
// $discovery .= "<input type=\"hidden\" name=\"scan_locally\" value=\"0\">";
$discovery .= <<<EOT
<select name="tarSel" style="display:none;" onClick="if (this.options[this.selectedIndex].value != 'null') {
showLayer('idTarget', this.options[this.selectedIndex].value ) }">
<option name="schedule" value="1" {$sjTYPE['M']} selected>IP List</option>
<option name="schedule" value="2">IP Range</option>
<option name="schedule" value="3" >Named Target List</option>
<option name="schedule" value="4">CIDR</option>
<option name="schedule" value="5" {$sjTYPE['C']} >Subnet</option>
<option name="schedule" value="6" {$sjTYPE['S']} >Asset List/System</option>
</select><br><br><br><br><br><br><br><br><br></td>
<td class="noborder" style="text-align:left" valign="top">
<div align="left">
<div id="idTarget1">
\t\t\t<table class="noborder"><tr>
<td style="text-align:center;padding-bottom:3px;" class="nobborder">{$targets_message}</td>
</tr>
<tr>
\t\t\t<td valign="top" class="noborder">
<table class="transparent" width="100%">
<tr>
<td class='nobborder'>
EOT;
$discovery .= "<textarea name=\"ip_list\" id=\"ip_list\" cols=\"32\" rows=\"8\">" . ($ip_list_selected == "" ? "{$editdata['meth_TARGET']}" : "{$ip_list_selected}") . "</textarea>";
$discovery .= "</td></tr>";
$discovery .= "<tr><td style='text-align:left;' class='nobborder'>";
$discovery .= "<div id='lassets' style='display:none'>";
$discovery .= "<img width=\"16\" align=\"absmiddle\" src=\"./images/loading.gif\" border=\"0\" alt=\"" . _("Loading assets...") . "\" title=\"" . _("Loading assets...") . "\">";
$discovery .= "<span style='margin-left:4px;'>" . _("Loading assets, please wait few seconds...") . "</span>";
$discovery .= <<<EOT
</div>
<td>
</tr>
</table>
\t\t\t</td>
\t\t\t<td valign="top" style="text-align:left" class="noborder">
\t\t\t\t<div id="htree" style="width:450px"></div>
\t\t\t</td>
\t\t\t</tr></table>
</div>
<div id="idTarget2" class="forminput">
<table width="100%" style="border:0;">
<tr>
<td align="Right" width="30%" >Range Start</td>
<td><input type="text" name="ip_start" value=""></td>
</tr>
<tr>
<td align="Right" width="30%" >Range End</td>
<td><input type="text" name="ip_end" value=""></td>
</tr>
</table>
</div>
<div id="idTarget3" class="forminput">
<textarea name="named_list" cols="32" rows="8"></textarea>
</div>
<div id="idTarget4" class="forminput">
<input type="text" name="cidr" value="">
</div>
<div id="idTarget5" class="forminput">
<table width="100%" style="border:0;">
<tr>
<td align="Right" width="30%" ></td>
<td><select name="subnet">
<option value="" >Select A Subnet to Scan</option>
EOT;
if ($uroles['admin'] || $uroles['auditAll']) {
$discovery .= "<option value='ALL' >Audit All Subnets - (SINGLE JOB)!!!</option>";
$query_filter = "AND t1.tiScanApproval='1'";
} else {
$query_filter = "AND t4.pn_uname = '{$username}'";
}
#$query = "SELECT distinct t1.id, t1.site_code, t1.CIDR
# FROM vuln_subnets t1
# LEFT JOIN vuln_sites t2 ON t1.site_code = t2.site_code
# LEFT JOIN vuln_org_sites t3 ON t2.id = t3.siteID
# LEFT JOIN vuln_org_users t4 ON t3.orgID = t4.orgID
# WHERE t1.status != 'available' $query_filter
# ORDER BY t1.site_code, CIDR";
//$result=$dbconn->execute($query);
//while (!$result->EOF) {
// list($subid, $scode, $sname)=$result->fields;
// if ( $editdata['fk_name'] == $sname ) { $selected= "SELECTED"; } else { $selected=""; }
// $discovery .= "<option value=\"$sname\" $selected >[$scode] $sname</option>";
// $result->MoveNext();
//}
$discovery .= <<<EOT
</select></td>
</tr>
</table>
</div>
<div id="idTarget6" class="forminput">
<table width="100%" style="border:0;">
<tr>
<td align="Right" width="30%" ></td>
<td><select name="system">
<option value="" >Select A System to Scan</option>
EOT;
if ($uroles['admin'] || $uroles['auditAll']) {
} else {
$query_filter = "AND t2.pn_uname = '{$username}'";
}
#$query = "SELECT distinct t1.id, t1.acronym, t1.name
# FROM vuln_systems t1
# LEFT JOIN vuln_system_users t2 ON t2.sysID = t1.id
# WHERE t1.deleted='0' $cquery_like AND t1.status='assigned' $query_filter
# ORDER BY t1.site_code, acronym";
#$result=$dbconn->execute($query);
#while (!$result->EOF) {
# list($subid, $scode, $sname)=$result->fields;
# if ( $editdata['fk_name'] == $scode ) { $selected= "SELECTED"; } else { $selected=""; }
# $discovery .= "<option value=\"$scode\" $selected>[$scode] $sname</option>";
# $result->MoveNext();
#}
$discovery .= <<<EOT
</select></td>
</tr>
</table>
</div>
</div>
</div>
</td>
</tr>
</table>
</tr></td></table>
EOT;
//if(!$scheduler && !$enScanRequestImmediate) {
// $discovery .= "<script language=javascript>showLayer('idSched', 3);</script>";
//}
$discovery .= $show;
return $discovery;
}
function showSubCategoryHTML()
{
// get list reports
$db = new ossim_db();
$dbconn = $db->connect();
$creports = array();
$subreports_ac = array();
$sql_search = "";
if ($search != "") {
$sql_search = "AND name like '%{$search}%'";
}
$result = $dbconn->Execute("SELECT login, name, value FROM user_config where category='custom_report' {$sql_search} ORDER BY name ASC");
$hi = 0;
while (!$result->EOF) {
$available = false;
$unserializedata = unserialize($result->fields["value"]);
$available_for_user = $unserializedata["user"];
$available_for_entity = $unserializedata["entity"];
// check if this report is available for session user
if (Session::am_i_admin()) {
$available = true;
} else {
if ($available_for_user == "0") {
$available = true;
} else {
if ($available_for_user != "" && $available_for_user == $session_user || $result->fields["login"] == $session_user) {
$available = true;
} else {
if (preg_match("/pro|demo/i", $version)) {
if (Acl::am_i_proadmin()) {
$entities_list = Acl::get_entities_admin($dbconn, Session::get_session_user());
$entities = array_keys($entities_list[0]);
$users = Acl::get_my_users($dbconn, Session::get_session_user());
$users_login = array();
foreach ($users as $user) {
$users_login[] = $user["login"];
}
if (in_array($available_for_entity, $entities) || in_array($available_for_user, $users_login) || in_array($result->fields["login"], $users_login)) {
$available = true;
}
} else {
$entities = Acl::get_user_entities(Session::get_session_user());
if (in_array($available_for_entity, $entities)) {
$available = true;
}
}
}
}
}
}
// save report if is available
$maxpag = 20;
$to = $pag * $maxpag;
$from = $to - $maxpag;
if ($available) {
if ($from <= $hi && $hi < $to) {
$creports[] = $result->fields;
}
// autocomplete
$key = base64_encode($result->fields["name"] . "###" . $result->fields["login"]);
$subreports_ac[$key] = trim($result->fields["name"]);
$hi++;
}
$result->MoveNext();
}
$dbconn->disconnect();
//
$html = '<table style="margin:0;padding:0;width:100%;font-size:11px">
<tr>
<td colspan="2">' . _('Properties report') . ':</td>
</tr>
<tr>
<td>' . _('Report Name') . ':</td>
<td>
<select name="run">';
foreach ($subreports_ac as $key => $value) {
$html .= '<option value="' . $key . '"';
$html .= $this->get('run') == $key ? ' selected="selected"' : "";
$html .= '>' . $value . '</option>';
}
$html .= ' </select>
</td>
</tr>
<tr>
<td>' . _('Refresh report') . ':</td>
<td><input name="refresh" value="false" ';
if ($this->get('refresh') == 'false') {
$html .= 'checked="checked" ';
}
$html .= 'type="radio">' . _('No') . '
<input name="refresh" value="true" ';
if ($this->get('refresh') == 'true') {
$html .= 'checked="checked" ';
}
$html .= 'type="radio">' . _('Yes') . '
<input style="width:80px" type="text" name="secondRefresh" value="' . $this->get('secondRefresh') . '" /> ' . _('seconds') . '</td>
</tr>
</table>';
return $html;
}
if (ossim_error()) {
die(ossim_error());
}
$db = new ossim_db();
$dbconn = $db->connect();
$conf = $GLOBALS["CONF"];
$version = $conf->get_conf("ossim_server_version", FALSE);
// check username
$user = "";
$user_name_filter = "";
if (!Session::am_i_admin()) {
if (!preg_match("/pro|demo/i", $version)) {
$user = Session::get_session_user();
} else {
$entities_and_users = array();
$entities_and_users = Acl::get_user_entities();
$entities_and_users[] = Session::get_session_user();
// add current user
$users_pro_admin = Acl::get_my_users($dbconn, Session::get_session_user());
foreach ($users_pro_admin as $us) {
$entities_and_users[] = $us["login"];
}
$user = implode("', '", $entities_and_users);
}
}
if ($user != "") {
$user_name_filter = "and username in ('{$user}')";
}
$result = $dbconn->Execute("select name, scan_PID from vuln_jobs where id={$job_id} {$user_name_filter}");
$name = "";
$name = $result->fields["name"];