NathanGibbs3 / BASE / 625

pending completion

Build # 625

Build Type

push

travis-ci-com

Committed by

NathanGibbs3

Commit Message

20230512 Standardized BASE Iconography.
         Using 3dicons from @realvjy
         https://github.com/realvjy/3dicons
         Thank You. :smile:

Run Details

33 of 33 new or added lines in 3 files covered. (100.0%)

648 of 10178 relevant lines covered (6.37%)

71.31 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

0.0

/base_graph_main.php

<?php
/*******************************************************************************
** Basic Analysis and Security Engine (BASE)
** Copyright (C) 2004 BASE Project Team
** Copyright (C) 2000 Carnegie Mellon University
**
** (see the file 'base_main.php' for license details)
**
** Project Leads: Kevin Johnson <kjohnson@secureideas.net>
**                Sean Muller <samwise_diver@users.sourceforge.net>
** Built upon work by Roman Danyliw <rdd@cert.org>, <roman@danyliw.com>
**
** Purpose: Input GET/POST variables
**   - submit:
**   - time:
**   - time_sep:
********************************************************************************
** Authors:
********************************************************************************
** Kevin Johnson <kjohnson@secureideas.net
**
********************************************************************************
*/

$sc = DIRECTORY_SEPARATOR;
require_once("includes$sc" . 'base_krnl.php');
include("$BASE_path/includes/base_include.inc.php");
include_once("$BASE_path/base_db_common.php");
include_once("$BASE_path/base_graph_common.php");

$EMPfx = __FILE__ . ': '; // Error Message Prefix.
if ( VerifyGraphingLib() ){ // Graphics Libs Check

function check_worldmap(){
        GLOBAL $debug_mode;
        $EMPfx = __FUNCTION__ . ': ';
        $ok = 0;
        $php_path_array = explode(PATH_SEPARATOR, ini_get('include_path'));
        if ( $debug_mode > 0 ){
                ErrorMessage( $EMPfx . 'Find the worldmap?','black',1);
        }
        $EMPfx .= 'ERROR: ';
        $sc = DIRECTORY_SEPARATOR;
        $MapLoc = implode( $sc, array('Image','Graph','Images','Maps') );
        $WMif = 'world_map6.png';
        $WMcf = 'world_map6.txt';
        foreach( $php_path_array as $single_path ){
                $WMapImg = implode( $sc, array($single_path, $MapLoc, $WMif) );
                if ( $debug_mode > 0 ){
                        ErrorMessage( "&quot;" . $WMapImg . "&quot;",'black',1);
                }
                $tmp = ChkAccess($WMapImg);
                $EMsg = '';
                if ( $tmp == 1 ){
                        // We ASSUME, that this is the correct worldmap file.
                        // Not necessarily true, though. A simplification, therefore.
                        $WMapCsf = implode( $sc, array($single_path, $MapLoc, $WMcf) );
                        $tmp = ChkAccess($WMapCsf);
                        if ( $tmp == 1 ){
                                        $ok = 1;
                                        break;
                        }else{
                                $EMsg = "$EMPfx Coordinates: $WMapCsf not ";
                                if ( $tmp == -1 ){
                                        $EMsg .= 'found';
                                }elseif ( $tmp == -2 ){
                                        $EMsg .= 'readable';
                                }
                                $$EMsg .= '.';
                                ErrorMessage($EMsg, 0, 1);
                        }
                }else{
                        if ( $tmp == -2 ){
                                $EMsg = "$EMPfx Image: $WMapImg not readable.";
                                ErrorMessage($EMsg, 0, 1);
                        }
                }
                if ( $EMsg != '' ){
                        $rv = ini_get("safe_mode");
                        if ( $rv == 1 ){
                                ErrorMessage(
                                        "In &quot;safe_mode&quot; both $WMif and $WMcf must be owned by the user under which the web server is running.",
                                        0, 1
                                );
                        }
                }
        }
        if ( $ok != 1 ){
                ErrorMessage(
                        $EMPfx . "Worldmap functions not available. Go into the \"PEAR directory\", as can be found by \"pear config-show\", and then into the subdirectory $MapLoc$sc. This is the location where $WMif and $WMcf must be installed.",
                        0, 1
                );
                $rv = ini_get("safe_mode");
                if ( $rv == 1 ){
                        ErrorMessage(
                                "In &quot;safe_mode&quot; both $WMif and $WMcf must be owned by the user under which the web server is running.",
                                0, 1
                        );
                }
                return 0;
        }
        return 1;
}

AuthorizedRole(10000);
$cs = new CriteriaState("base_stat_alerts.php");
$cs->ReadState();
$new = ImportHTTPVar("new", VAR_DIGIT);
$submit = ImportHTTPVar("submit", VAR_ALPHA | VAR_SPACE);
// Set default values if the submit button hasn't been pressed.
if ( $new == 1 && $submit == '' ){ // Totally new Graph
    $height            = 800;
    $width             = 600;
    $pmargin0          = 50;
    $pmargin1          = 50;
    $pmargin2          = 70;
    $pmargin3          = 80;
    $user_chart_title  = _CHRTTITLE;
    $min_size          = 0;
    $rotate_xaxis_lbl  = 0;
    $xaxis_label_inc   = 1;
    $yaxis_scale       = 0;
    $chart_style       = "bar";
    $use_alerts        = 0;
    $xaxis_grid        = 0;
    $yaxis_grid        = 1;
    $element_start     = 0;
}else{ // Retrieve data from submit and store for later use.
    $height       = ImportHTTPVar("height", VAR_DIGIT);
    $width        = ImportHTTPVar("width", VAR_DIGIT);  
    $pmargin0     = ImportHTTPVar("pmargin0", VAR_DIGIT);
    $pmargin1     = ImportHTTPVar("pmargin1", VAR_DIGIT);
    $pmargin2     = ImportHTTPVar("pmargin2", VAR_DIGIT);
    $pmargin3     = ImportHTTPVar("pmargin3", VAR_DIGIT);
    $user_chart_title = ImportHTTPVar("user_chart_title", VAR_ALPHA | VAR_SPACE);
    $min_size         = ImportHTTPVar("min_size", VAR_DIGIT);
    $rotate_xaxis_lbl = ImportHTTPVar("rotate_xaxis_lbl", VAR_DIGIT);
    $xaxis_label_inc  = ImportHTTPVar("xaxis_label_inc", VAR_DIGIT);
    $yaxis_scale      = ImportHTTPVar("yaxis_scale", VAR_DIGIT);
    $chart_style      = ImportHTTPVar("chart_style", VAR_ALPHA);
    $xaxis_grid       = ImportHTTPVar("xaxis_grid", VAR_DIGIT);
    $yaxis_grid       = ImportHTTPVar("yaxis_grid", VAR_DIGIT);
    $element_start    = ImportHTTPVar("element_start", VAR_DIGIT);
}
  $data_source       = ImportHTTPVar("data_source", VAR_DIGIT);
  $chart_type        = ImportHTTPVar("chart_type", VAR_DIGIT);
  $chart_interval    = ImportHTTPVar("chart_interval", VAR_DIGIT);
  $chart_begin_hour  = ImportHTTPVar("chart_begin_hour", VAR_DIGIT);
  $chart_begin_month = ImportHTTPVar("chart_begin_month", VAR_DIGIT);
  $chart_begin_day   = ImportHTTPVar("chart_begin_day", VAR_DIGIT);
  $chart_begin_year  = ImportHTTPVar("chart_begin_year", VAR_DIGIT);
  $chart_end_hour    = ImportHTTPVar("chart_end_hour", VAR_DIGIT);
  $chart_end_month   = ImportHTTPVar("chart_end_month", VAR_DIGIT);
  $chart_end_day     = ImportHTTPVar("chart_end_day", VAR_DIGIT);
  $chart_end_year    = ImportHTTPVar("chart_end_year", VAR_DIGIT);
  $aggregate_type    = ImportHTTPVar("aggregate_type", VAR_DIGIT);

$page_title = _GRAPHALERTDATA;
PrintBASESubHeader(
        $page_title, $page_title, $cs->GetBackLink(), $refresh_all_pages
);
$db = NewBASEDBConnection($DBlib_path, $DBtype); // Connect to the Alert DB.
$db->baseDBConnect(
        $db_connect_method,$alert_dbname, $alert_host, $alert_port, $alert_user,
        $alert_password
);
UpdateAlertCache($db);
include("$BASE_path/base_graph_form.php");
$data_pnt_cnt = 0;
if ( $submit != '' && $chart_type == ' ' ){ // Error Conditions.
        ErrorMessage('<b>'._ERRCHRTNOTYPE.'</b>.');
}elseif ( $submit != '' ){ // Calculate the data set.
        if ( $data_source == ' ' ){
                ErrorMessage(_ERRNOAGSPEC);
                $data_source = NULL;
        }
        unset($xdata);
        unset($xlabel);
        if ( $debug_mode > 1 ){
       echo "<H3>"._CHRTDATAIMPORT."...</H3>";
        }
        // Building Criteria.
        $criteria = array(2);
        if ( !empty($data_source) ){
        $criteria[0] = "LEFT JOIN acid_ag_alert ".
                      "ON (acid_event.sid=acid_ag_alert.ag_sid AND acid_event.cid=acid_ag_alert.ag_cid) ";
        $criteria[1] = "acid_ag_alert.ag_id = $data_source";
        }else{
                $criteria[0] = '';
                // $tmp = "acid_event.sid > 0 ";
                $tmp = " 1 = 1 "; // Shim SQL when not querying alert groups.
                $criteria[1] = $tmp;
        }
        // Adding Time Constraint
        $time_constraint = ProcessChartTimeConstraint(
                $chart_begin_hour, $chart_begin_day, $chart_begin_month, $chart_begin_year,
                $chart_end_hour, $chart_end_day, $chart_end_month, $chart_end_year
        );
        if ( !empty($time_constraint) ){
                $criteria[1] .= $time_constraint;
        }
        if ( $debug_mode > 0 ){
       echo "<H3>Chart criteria</H3><PRE>";
       print_r($criteria);
       echo "</PRE>";
        }
        $WorldMap = false;
        if ( $chart_type == 15 || $chart_type == 17 ){
                // CHARTTYPE_*_COUNTRY_ON_MAP
                $WorldMap = true;
        }
        switch ($chart_type){
                case CHARTTYPE_HOUR; // hours vs num of alerts
                case CHARTTYPE_DAY; // days vs num of alerts
                case CHARTTYPE_WEEK; // weeks vs num of alerts
                case CHARTTYPE_MONTH; // months vs num of alerts
                case CHARTTYPE_YEAR; // years vs num of alerts
            $chart_title = _CHRTTIMEVNUMBER;
            $xaxis_label = _CHRTTIME;
            $yaxis_label = _CHRTALERTOCCUR;
            $data_pnt_cnt = GetTimeDataSet($xdata, $chart_type, $data_source, $min_size, $criteria);
            /* Any kinds of special characters, like slashes, two points
             * and so on seem to NOT work with Image_Graph */
            //$chart_title = $chart_title."\n ( ".$xdata[0][0]." - ".$xdata[count($xdata)-1][0]." )";      
            //$xaxis_label .= " from ". $xdata[0][0] . " to " . $xdata[count($xdata)-1][0] . " ";
            break;
                case CHARTTYPE_SRC_IP;  // Src. IP vs. Num Alerts
            $chart_title = _CHRTSIPNUMBER;
            $xaxis_label = _CHRTSIP;
            $yaxis_label = _CHRTALERTOCCUR;
            $data_pnt_cnt = GetIPDataSet($xdata, $chart_type, $data_source, $min_size, $criteria);
            break;
                case CHARTTYPE_DST_IP; // Dst. IP vs. Num Alerts
            $chart_title = _CHRTDIPALERTS;
            $xaxis_label = _CHRTDIP;
            $yaxis_label = _CHRTALERTOCCUR;
            $data_pnt_cnt = GetIPDataSet($xdata, $chart_type, $data_source, $min_size, $criteria);
            break;
                case CHARTTYPE_DST_UDP_PORT; // UDP Port vs. Num Alerts
            $chart_title = _CHRTUDPPORTNUMBER;
            $xaxis_label = _CHRTDUDPPORT;
            $yaxis_label = _CHRTALERTOCCUR;
            $data_pnt_cnt = GetPortDataSet($xdata, $chart_type, $data_source, $min_size, $criteria);
            break;
                case CHARTTYPE_SRC_UDP_PORT; // UDP Port vs. Num Alerts
            $chart_title = _CHRTSUDPPORTNUMBER;
            $xaxis_label = _CHRTSUDPPORT;
            $yaxis_label = _CHRTALERTOCCUR;

            $data_pnt_cnt = GetPortDataSet($xdata, $chart_type, $data_source, $min_size, $criteria);
            break;
                case CHARTTYPE_DST_TCP_PORT; // TCP Port vs. Num Alerts
            $chart_title = _CHRTPORTDESTNUMBER;
            $xaxis_label = _CHRTPORTDEST;
            $yaxis_label = _CHRTALERTOCCUR;
            $data_pnt_cnt = GetPortDataSet($xdata, $chart_type, $data_source, $min_size, $criteria);
            break;
                case CHARTTYPE_SRC_TCP_PORT; // TCP Port vs. Num Alerts
            $chart_title = _CHRTPORTSRCNUMBER;
            $xaxis_label = _CHRTPORTSRC;
            $yaxis_label = _CHRTALERTOCCUR;
            $data_pnt_cnt = GetPortDataSet($xdata, $chart_type, $data_source, $min_size, $criteria);
            break;
                case CHARTTYPE_CLASSIFICATION; // Classification vs. Num Alerts
            $chart_title = _CHRTSIGNUMBER;
            $xaxis_label = _CHRTCLASS;
            $yaxis_label = _CHRTALERTOCCUR;
            $data_pnt_cnt = GetClassificationDataSet($xdata, $chart_type, $data_source, $min_size, $criteria);
            break;
                case CHARTTYPE_SENSOR; // Sensor vs. Num Alerts
            $chart_title = _CHRTSENSORNUMBER;
            $xaxis_label = _SENSOR;
            $yaxis_label = _CHRTALERTOCCUR;
            $data_pnt_cnt = GetSensorDataSet($xdata, $chart_type, $data_source, $min_size, $criteria);
            break;
                case CHARTTYPE_SRC_COUNTRY; // Src Countries vs. Num Alerts
                case CHARTTYPE_SRC_COUNTRY_ON_MAP; // dto., but on worldmap
                        if ( $WorldMap ){
           if (!check_worldmap())
           {
             return 0;
           }
                        }
         $chart_title = "Countries of origin vs. number of alerts";
         $xaxis_label = "Src countries";
         $yaxis_label = "Number of alerts";

         $data_pnt_cnt = GetCountryDataSet($xdata, $chart_type, $data_source, $min_size, $criteria);
         break;
                case CHARTTYPE_DST_COUNTRY; // Dst Countries vs. Num Alerts
                case CHARTTYPE_DST_COUNTRY_ON_MAP; // dto., but on worldmap
                        if ( $WorldMap ){
           if (!check_worldmap())
           {
             return 0;
           }
                        }
         $chart_title = "Destination Countries vs. number of alerts";
         $xaxis_label = "Dst countries";
         $yaxis_label = "Number of alerts";

         $data_pnt_cnt = GetCountryDataSet($xdata, $chart_type, $data_source, $min_size, $criteria);
         break;
                case CHARTTYPE_UNIQUE_SIGNATURE; // Unique alerts vs. number of alerts
         $chart_title = "Unique alerts vs. number of alerts";
         $xaxis_label = "Unique alerts";
         $yaxis_label = "Number of alerts";
         $data_pnt_cnt = GetUniqueDataSet($xdata, $chart_type, $data_source, $min_size, $criteria);
         break;
                default;
         print "WARNING: charttype \"$charttype\" is not supported. Returning.";
         return 0;
        }
        if ( $data_pnt_cnt > 0 ){
                $number_array_elements = count($xdata);
                if ( $debug_mode > 0 ){
        echo "chart_type = $chart_type<BR>
              data_source = $data_source<BR>
              chart_interval = $chart_interval<BR>
              element_start  = $element_start<BR>
              count(\$xdata) = $number_array_elements<BR>\n";
        echo "<H3>"._CHRTHANDLEPERIOD."...</H3>\n";
                }
                if ( $chart_interval || $number_array_elements ){
                        if ( $element_start >= $number_array_elements ){ 
                                // Validity check
                                if ( $debug_mode > 0 ){
                                        ErrorMessage("WARNING: i >= number_array_elements");
                                }
                                ErrorMessage(_ERRCHRTNODATAPOINTS);
                                PrintBASESubFooter();
                                return;
                        }

                        // From which element on should the "for"-loop start:
                        if (
                                ctype_digit($element_start) && $element_start > 0
                                && $element_start < $number_array_elements
                        ){
                                $i = $element_start;
                        }else{
                                $i = 0;
                        }
                        if ( $debug_mode > 0 ){
          print "i = $i<BR>";
          print "element_start = $element_start<BR>";
          print "number_array_elements = " . $number_array_elements . "<BR>";
          print "count(xdata) = " . count($xdata) . "<BR><BR>";
                        }
                        // set up array
                        for ( $j = 0; $i < $number_array_elements; $i++, $j++ ){
                                // How many columns/elements do you want to see?
                                if ( $chart_interval > 0 ){
                                        if ( $j >= $chart_interval ){
                                                break;
                                        }
                                }
                                if ( $debug_mode > 1 ){
            print $i . ": " . $xdata[$i][0] . " - " . $xdata[$i][1] . "<BR>";
                                }
                                // define x-axis value:
                                if ( isset($xdata[$i][0]) ){
                                        $chart_array [$j][0] = $xdata[$i][0];
                                }else{
                                        $chart_array[$j][0] = '';
                                }
                                // define y-axis value:
                                if ( isset($xdata[$i][1]) ){
                                        $chart_array [$j][1] = $xdata[$i][1];
                                }else{
                                        $chart_array[$j][1] = 0;
                                }
                        } // for-loop
                        if (
                                ($chart_style == "bar" || $chart_style == "line")
                                && count($chart_array) == 1
                        ){
        /* then there's is a bug in PEAR::Image_Graph; 
         * Cf. http://pear.php.net/bugs/bug.php?id=12763
         *     http://pear.php.net/bugs/7423
         *     https://pear.php.net/bugs/bug.php?id=16335
         * the following
         * appends one element, that does, of course, not really exist,
         * as a workaround: */
                                if ( $debug_mode > 0 ){
            print "WARNING: Workaround: Adding one dummy element, that does NOT really exist!<BR>\n";
                                }
                                $chart_array[1][0] = '';
                                $chart_array[1][1] = 0;
                        }
                        // finally, set up xdata
                        $xdata = $chart_array;
                } //  if ( $chart_interval || $number_array_elements) {
                if ( $debug_mode > 0 ){
        print "count(xdata) = " . count($xdata) . "<BR>\n";
        // disabled because does not work as expected
        //echo "<H3>"._CHRTDUMP." $xaxis_label_inc)</H3>";
                }
                for ( $i = 0; $i < count($xdata); $i++ ){
                        if ( $debug_mode > 0 ){
          echo $i." -- ".$xdata[$i][0]." - ".$xdata[$i][1]."<BR>";
                        }
       // The following does not work as expected with PEAR::Image_Graph-0.7.2
       // Although as many pieces of data are added to the plot
       // as count($xdata) suggests, in the end are only those
       // bars (lines) displayed, that do NOT have an empty string
       // in $xdata[$i][0] (and even not a space!). I'm inclined to
       // consider this as one more bug of Image_Graph library.
       /*  
       // Apply the X-Axis label clean-up -- 
       // only write every N axis labels (erase the rest)
       if (($xaxis_label_inc != 0) && ( ($i % $xaxis_label_inc ) != 0 ))
       {
         $xdata[$i][0] = "";
       }
       */
                }
                if ( $debug_mode > 0 ){
        echo "<H3>"._CHRTDRAW." ($width x $height)</H3>";
                }
                $et->Mark("Extracting data");
      echo '<CENTER>
            <TABLE BGCOLOR="#000000" CELLSPACING=0 CELLPADDING=2 BORDER=0 SUMMARY="table from base_graph_main.php">
            <TR>
            <TD>';

      $_SESSION['xdata'] = $xdata;
      echo "<CENTER>";
                if ( $WorldMap ){
        echo "<A HREF=\"base_graph_display.php?";
        echo "&amp;pmargin0=$pmargin0&pmargin1=$pmargin1".
             "&amp;pmargin2=$pmargin2&pmargin3=$pmargin3".
             "&amp;title=".rawurlencode($user_chart_title." \n".$chart_title).
             "&amp;xaxis_label=".rawurlencode($xaxis_label).
             "&amp;yaxis_label=".rawurlencode($yaxis_label).
             //         "&amp;yaxis_scale=".rawurlencode($yaxis_scale).
             "&amp;yaxis_scale=" . $yaxis_scale .
             "&amp;rotate_xaxis_lbl=".rawurlencode($rotate_xaxis_lbl).
             "&amp;xaxis_grid=".$xaxis_grid.
             "&amp;yaxis_grid=".$yaxis_grid.
             "&amp;chart_type=".$chart_type.
             "&amp;style=".$chart_style."\">";

        echo "<IMG WIDTH=600 HEIGHT=300 SRC=\"base_graph_display.php?";
                }else{
        echo "<IMG SRC=\"base_graph_display.php?width=$width&amp;height=$height";
                }
      echo "&amp;pmargin0=$pmargin0&pmargin1=$pmargin1".
           "&amp;pmargin2=$pmargin2&pmargin3=$pmargin3".
           "&amp;title=".rawurlencode($user_chart_title." \n".$chart_title).
           "&amp;xaxis_label=".rawurlencode($xaxis_label).
           "&amp;yaxis_label=".rawurlencode($yaxis_label).
           //         "&amp;yaxis_scale=".rawurlencode($yaxis_scale).
           "&amp;yaxis_scale=" . $yaxis_scale .
           "&amp;rotate_xaxis_lbl=".rawurlencode($rotate_xaxis_lbl).
           "&amp;xaxis_grid=".$xaxis_grid.
           "&amp;yaxis_grid=".$yaxis_grid.
           "&amp;chart_type=".$chart_type.
           "&amp;style=".$chart_style."\">";
                if ( $WorldMap ){
        echo "</A><BR>\n";
                }
      echo "</CENTER>";

        PrintFramedBoxFooter(1,2);
        NLIO('<br/>',2);
                if ( $WorldMap ){
        echo '(click at the image or - after it has been reloaded - click at it for a second time to get a bigger size of it)<BR><BR>';
                }
      echo '</CENTER>';
                        $et->Mark('Rendering graph.');
                }else{
                        ErrorMessage(_ERRCHRTNODATAPOINTS);
                }
        }
        PrintBASESubFooter();
}else{ // Graphics Libs Check failed.
        error_log($EMPfx . 'Graphics Libs check failed.');
        HTTP_header('Location: base_main.php');
}
?>

1	<?php
2	/*******************************************************************************
3	** Basic Analysis and Security Engine (BASE)
4	** Copyright (C) 2004 BASE Project Team
5	** Copyright (C) 2000 Carnegie Mellon University
6	**
7	** (see the file 'base_main.php' for license details)
8	**
9	** Project Leads: Kevin Johnson <kjohnson@secureideas.net>
10	** Sean Muller <samwise_diver@users.sourceforge.net>
11	** Built upon work by Roman Danyliw <rdd@cert.org>, <roman@danyliw.com>
12	**
13	** Purpose: Input GET/POST variables
14	** - submit:
15	** - time:
16	** - time_sep:
17	********************************************************************************
18	** Authors:
19	********************************************************************************
20	** Kevin Johnson <kjohnson@secureideas.net
21	**
22	********************************************************************************
23	*/
24
25	$sc = DIRECTORY_SEPARATOR;	×
26	require_once("includes$sc" . 'base_krnl.php');	×
27	include("$BASE_path/includes/base_include.inc.php");	×
28	include_once("$BASE_path/base_db_common.php");	×
29	include_once("$BASE_path/base_graph_common.php");	×
30
31	$EMPfx = __FILE__ . ': '; // Error Message Prefix.	×
32	if ( VerifyGraphingLib() ){ // Graphics Libs Check	×
33
34	function check_worldmap(){
35	GLOBAL $debug_mode;
36	$EMPfx = __FUNCTION__ . ': ';	×
37	$ok = 0;	×
38	$php_path_array = explode(PATH_SEPARATOR, ini_get('include_path'));	×
39	if ( $debug_mode > 0 ){	×
40	ErrorMessage( $EMPfx . 'Find the worldmap?','black',1);	×
41	}
42	$EMPfx .= 'ERROR: ';	×
43	$sc = DIRECTORY_SEPARATOR;	×
44	$MapLoc = implode( $sc, array('Image','Graph','Images','Maps') );	×
45	$WMif = 'world_map6.png';	×
46	$WMcf = 'world_map6.txt';	×
47	foreach( $php_path_array as $single_path ){	×
48	$WMapImg = implode( $sc, array($single_path, $MapLoc, $WMif) );	×
49	if ( $debug_mode > 0 ){	×
50	ErrorMessage( """ . $WMapImg . """,'black',1);	×
51	}
52	$tmp = ChkAccess($WMapImg);	×
53	$EMsg = '';	×
54	if ( $tmp == 1 ){	×
55	// We ASSUME, that this is the correct worldmap file.
56	// Not necessarily true, though. A simplification, therefore.
57	$WMapCsf = implode( $sc, array($single_path, $MapLoc, $WMcf) );	×
58	$tmp = ChkAccess($WMapCsf);	×
59	if ( $tmp == 1 ){	×
60	$ok = 1;	×
61	break;	×
62	}else{	×
63	$EMsg = "$EMPfx Coordinates: $WMapCsf not ";	×
64	if ( $tmp == -1 ){	×
65	$EMsg .= 'found';	×
66	}elseif ( $tmp == -2 ){	×
67	$EMsg .= 'readable';	×
68	}
69	$$EMsg .= '.';	×
70	ErrorMessage($EMsg, 0, 1);	×
71	}
72	}else{	×
73	if ( $tmp == -2 ){	×
74	$EMsg = "$EMPfx Image: $WMapImg not readable.";	×
75	ErrorMessage($EMsg, 0, 1);	×
76	}
77	}
78	if ( $EMsg != '' ){	×
79	$rv = ini_get("safe_mode");	×
80	if ( $rv == 1 ){	×
81	ErrorMessage(	×
82	"In "safe_mode" both $WMif and $WMcf must be owned by the user under which the web server is running.",	×
83	0, 1
84	);
85	}
86	}
87	}
88	if ( $ok != 1 ){	×
89	ErrorMessage(	×
90	$EMPfx . "Worldmap functions not available. Go into the \"PEAR directory\", as can be found by \"pear config-show\", and then into the subdirectory $MapLoc$sc. This is the location where $WMif and $WMcf must be installed.",	×
91	0, 1
92	);
93	$rv = ini_get("safe_mode");	×
94	if ( $rv == 1 ){	×
95	ErrorMessage(	×
96	"In "safe_mode" both $WMif and $WMcf must be owned by the user under which the web server is running.",	×
97	0, 1
98	);
99	}
100	return 0;	×
101	}
102	return 1;	×
103	}
104
105	AuthorizedRole(10000);	×
106	$cs = new CriteriaState("base_stat_alerts.php");	×
107	$cs->ReadState();	×
108	$new = ImportHTTPVar("new", VAR_DIGIT);	×
109	$submit = ImportHTTPVar("submit", VAR_ALPHA \| VAR_SPACE);	×
110	// Set default values if the submit button hasn't been pressed.
111	if ( $new == 1 && $submit == '' ){ // Totally new Graph	×
112	$height = 800;	×
113	$width = 600;	×
114	$pmargin0 = 50;	×
115	$pmargin1 = 50;	×
116	$pmargin2 = 70;	×
117	$pmargin3 = 80;	×
118	$user_chart_title = _CHRTTITLE;	×
119	$min_size = 0;	×
120	$rotate_xaxis_lbl = 0;	×
121	$xaxis_label_inc = 1;	×
122	$yaxis_scale = 0;	×
123	$chart_style = "bar";	×
124	$use_alerts = 0;	×
125	$xaxis_grid = 0;	×
126	$yaxis_grid = 1;	×
127	$element_start = 0;	×
128	}else{ // Retrieve data from submit and store for later use.	×
129	$height = ImportHTTPVar("height", VAR_DIGIT);	×
130	$width = ImportHTTPVar("width", VAR_DIGIT);	×
131	$pmargin0 = ImportHTTPVar("pmargin0", VAR_DIGIT);	×
132	$pmargin1 = ImportHTTPVar("pmargin1", VAR_DIGIT);	×
133	$pmargin2 = ImportHTTPVar("pmargin2", VAR_DIGIT);	×
134	$pmargin3 = ImportHTTPVar("pmargin3", VAR_DIGIT);	×
135	$user_chart_title = ImportHTTPVar("user_chart_title", VAR_ALPHA \| VAR_SPACE);	×
136	$min_size = ImportHTTPVar("min_size", VAR_DIGIT);	×
137	$rotate_xaxis_lbl = ImportHTTPVar("rotate_xaxis_lbl", VAR_DIGIT);	×
138	$xaxis_label_inc = ImportHTTPVar("xaxis_label_inc", VAR_DIGIT);	×
139	$yaxis_scale = ImportHTTPVar("yaxis_scale", VAR_DIGIT);	×
140	$chart_style = ImportHTTPVar("chart_style", VAR_ALPHA);	×
141	$xaxis_grid = ImportHTTPVar("xaxis_grid", VAR_DIGIT);	×
142	$yaxis_grid = ImportHTTPVar("yaxis_grid", VAR_DIGIT);	×
143	$element_start = ImportHTTPVar("element_start", VAR_DIGIT);	×
144	}
145	$data_source = ImportHTTPVar("data_source", VAR_DIGIT);	×
146	$chart_type = ImportHTTPVar("chart_type", VAR_DIGIT);	×
147	$chart_interval = ImportHTTPVar("chart_interval", VAR_DIGIT);	×
148	$chart_begin_hour = ImportHTTPVar("chart_begin_hour", VAR_DIGIT);	×
149	$chart_begin_month = ImportHTTPVar("chart_begin_month", VAR_DIGIT);	×
150	$chart_begin_day = ImportHTTPVar("chart_begin_day", VAR_DIGIT);	×
151	$chart_begin_year = ImportHTTPVar("chart_begin_year", VAR_DIGIT);	×
152	$chart_end_hour = ImportHTTPVar("chart_end_hour", VAR_DIGIT);	×
153	$chart_end_month = ImportHTTPVar("chart_end_month", VAR_DIGIT);	×
154	$chart_end_day = ImportHTTPVar("chart_end_day", VAR_DIGIT);	×
155	$chart_end_year = ImportHTTPVar("chart_end_year", VAR_DIGIT);	×
156	$aggregate_type = ImportHTTPVar("aggregate_type", VAR_DIGIT);	×
157
158	$page_title = _GRAPHALERTDATA;	×
159	PrintBASESubHeader(	×
160	$page_title, $page_title, $cs->GetBackLink(), $refresh_all_pages	×
161	);
162	$db = NewBASEDBConnection($DBlib_path, $DBtype); // Connect to the Alert DB.	×
163	$db->baseDBConnect(	×
164	$db_connect_method,$alert_dbname, $alert_host, $alert_port, $alert_user,
165	$alert_password
166	);
167	UpdateAlertCache($db);	×
168	include("$BASE_path/base_graph_form.php");	×
169	$data_pnt_cnt = 0;	×
170	if ( $submit != '' && $chart_type == ' ' ){ // Error Conditions.	×
171	ErrorMessage('<b>'._ERRCHRTNOTYPE.'</b>.');	×
172	}elseif ( $submit != '' ){ // Calculate the data set.	×
173	if ( $data_source == ' ' ){	×
174	ErrorMessage(_ERRNOAGSPEC);	×
175	$data_source = NULL;	×
176	}
177	unset($xdata);	×
178	unset($xlabel);	×
179	if ( $debug_mode > 1 ){	×
180	echo "<H3>"._CHRTDATAIMPORT."...</H3>";	×
181	}
182	// Building Criteria.
183	$criteria = array(2);	×
184	if ( !empty($data_source) ){	×
185	$criteria[0] = "LEFT JOIN acid_ag_alert ".	×
186	"ON (acid_event.sid=acid_ag_alert.ag_sid AND acid_event.cid=acid_ag_alert.ag_cid) ";
187	$criteria[1] = "acid_ag_alert.ag_id = $data_source";	×
188	}else{	×
189	$criteria[0] = '';	×
190	// $tmp = "acid_event.sid > 0 ";
191	$tmp = " 1 = 1 "; // Shim SQL when not querying alert groups.	×
192	$criteria[1] = $tmp;	×
193	}
194	// Adding Time Constraint
195	$time_constraint = ProcessChartTimeConstraint(	×
196	$chart_begin_hour, $chart_begin_day, $chart_begin_month, $chart_begin_year,
197	$chart_end_hour, $chart_end_day, $chart_end_month, $chart_end_year
198	);
199	if ( !empty($time_constraint) ){	×
200	$criteria[1] .= $time_constraint;	×
201	}
202	if ( $debug_mode > 0 ){	×
203	echo "<H3>Chart criteria</H3><PRE>";	×
204	print_r($criteria);	×
205	echo "</PRE>";	×
206	}
207	$WorldMap = false;	×
208	if ( $chart_type == 15 \|\| $chart_type == 17 ){	×
209	// CHARTTYPE_*_COUNTRY_ON_MAP
210	$WorldMap = true;	×
211	}
212	switch ($chart_type){	×
213	case CHARTTYPE_HOUR; // hours vs num of alerts	×
214	case CHARTTYPE_DAY; // days vs num of alerts	×
215	case CHARTTYPE_WEEK; // weeks vs num of alerts	×
216	case CHARTTYPE_MONTH; // months vs num of alerts	×
217	case CHARTTYPE_YEAR; // years vs num of alerts	×
218	$chart_title = _CHRTTIMEVNUMBER;	×
219	$xaxis_label = _CHRTTIME;	×
220	$yaxis_label = _CHRTALERTOCCUR;	×
221	$data_pnt_cnt = GetTimeDataSet($xdata, $chart_type, $data_source, $min_size, $criteria);	×
222	/* Any kinds of special characters, like slashes, two points
223	* and so on seem to NOT work with Image_Graph */
224	//$chart_title = $chart_title."\n ( ".$xdata[0][0]." - ".$xdata[count($xdata)-1][0]." )";
225	//$xaxis_label .= " from ". $xdata[0][0] . " to " . $xdata[count($xdata)-1][0] . " ";
226	break;	×
227	case CHARTTYPE_SRC_IP; // Src. IP vs. Num Alerts	×
228	$chart_title = _CHRTSIPNUMBER;	×
229	$xaxis_label = _CHRTSIP;	×
230	$yaxis_label = _CHRTALERTOCCUR;	×
231	$data_pnt_cnt = GetIPDataSet($xdata, $chart_type, $data_source, $min_size, $criteria);	×
232	break;	×
233	case CHARTTYPE_DST_IP; // Dst. IP vs. Num Alerts	×
234	$chart_title = _CHRTDIPALERTS;	×
235	$xaxis_label = _CHRTDIP;	×
236	$yaxis_label = _CHRTALERTOCCUR;	×
237	$data_pnt_cnt = GetIPDataSet($xdata, $chart_type, $data_source, $min_size, $criteria);	×
238	break;	×
239	case CHARTTYPE_DST_UDP_PORT; // UDP Port vs. Num Alerts	×
240	$chart_title = _CHRTUDPPORTNUMBER;	×
241	$xaxis_label = _CHRTDUDPPORT;	×
242	$yaxis_label = _CHRTALERTOCCUR;	×
243	$data_pnt_cnt = GetPortDataSet($xdata, $chart_type, $data_source, $min_size, $criteria);	×
244	break;	×
245	case CHARTTYPE_SRC_UDP_PORT; // UDP Port vs. Num Alerts	×
246	$chart_title = _CHRTSUDPPORTNUMBER;	×
247	$xaxis_label = _CHRTSUDPPORT;	×
248	$yaxis_label = _CHRTALERTOCCUR;	×
249
250	$data_pnt_cnt = GetPortDataSet($xdata, $chart_type, $data_source, $min_size, $criteria);	×
251	break;	×
252	case CHARTTYPE_DST_TCP_PORT; // TCP Port vs. Num Alerts	×
253	$chart_title = _CHRTPORTDESTNUMBER;	×
254	$xaxis_label = _CHRTPORTDEST;	×
255	$yaxis_label = _CHRTALERTOCCUR;	×
256	$data_pnt_cnt = GetPortDataSet($xdata, $chart_type, $data_source, $min_size, $criteria);	×
257	break;	×
258	case CHARTTYPE_SRC_TCP_PORT; // TCP Port vs. Num Alerts	×
259	$chart_title = _CHRTPORTSRCNUMBER;	×
260	$xaxis_label = _CHRTPORTSRC;	×
261	$yaxis_label = _CHRTALERTOCCUR;	×
262	$data_pnt_cnt = GetPortDataSet($xdata, $chart_type, $data_source, $min_size, $criteria);	×
263	break;	×
264	case CHARTTYPE_CLASSIFICATION; // Classification vs. Num Alerts	×
265	$chart_title = _CHRTSIGNUMBER;	×
266	$xaxis_label = _CHRTCLASS;	×
267	$yaxis_label = _CHRTALERTOCCUR;	×
268	$data_pnt_cnt = GetClassificationDataSet($xdata, $chart_type, $data_source, $min_size, $criteria);	×
269	break;	×
270	case CHARTTYPE_SENSOR; // Sensor vs. Num Alerts	×
271	$chart_title = _CHRTSENSORNUMBER;	×
272	$xaxis_label = _SENSOR;	×
273	$yaxis_label = _CHRTALERTOCCUR;	×
274	$data_pnt_cnt = GetSensorDataSet($xdata, $chart_type, $data_source, $min_size, $criteria);	×
275	break;	×
276	case CHARTTYPE_SRC_COUNTRY; // Src Countries vs. Num Alerts	×
277	case CHARTTYPE_SRC_COUNTRY_ON_MAP; // dto., but on worldmap	×
278	if ( $WorldMap ){	×
279	if (!check_worldmap())	×
280	{
281	return 0;	×
282	}
283	}
284	$chart_title = "Countries of origin vs. number of alerts";	×
285	$xaxis_label = "Src countries";	×
286	$yaxis_label = "Number of alerts";	×
287
288	$data_pnt_cnt = GetCountryDataSet($xdata, $chart_type, $data_source, $min_size, $criteria);	×
289	break;	×
290	case CHARTTYPE_DST_COUNTRY; // Dst Countries vs. Num Alerts	×
291	case CHARTTYPE_DST_COUNTRY_ON_MAP; // dto., but on worldmap	×
292	if ( $WorldMap ){	×
293	if (!check_worldmap())	×
294	{
295	return 0;	×
296	}
297	}
298	$chart_title = "Destination Countries vs. number of alerts";	×
299	$xaxis_label = "Dst countries";	×
300	$yaxis_label = "Number of alerts";	×
301
302	$data_pnt_cnt = GetCountryDataSet($xdata, $chart_type, $data_source, $min_size, $criteria);	×
303	break;	×
304	case CHARTTYPE_UNIQUE_SIGNATURE; // Unique alerts vs. number of alerts	×
305	$chart_title = "Unique alerts vs. number of alerts";	×
306	$xaxis_label = "Unique alerts";	×
307	$yaxis_label = "Number of alerts";	×
308	$data_pnt_cnt = GetUniqueDataSet($xdata, $chart_type, $data_source, $min_size, $criteria);	×
309	break;	×
310	default;	×
311	print "WARNING: charttype \"$charttype\" is not supported. Returning.";	×
312	return 0;	×
313	}
314	if ( $data_pnt_cnt > 0 ){	×
315	$number_array_elements = count($xdata);	×
316	if ( $debug_mode > 0 ){	×
317	echo "chart_type = $chart_type<BR>	×
318	data_source = $data_source<BR>
319	chart_interval = $chart_interval<BR>
320	element_start = $element_start<BR>
321	count(\$xdata) = $number_array_elements<BR>\n";
322	echo "<H3>"._CHRTHANDLEPERIOD."...</H3>\n";	×
323	}
324	if ( $chart_interval \|\| $number_array_elements ){	×
325	if ( $element_start >= $number_array_elements ){	×
326	// Validity check
327	if ( $debug_mode > 0 ){	×
328	ErrorMessage("WARNING: i >= number_array_elements");	×
329	}
330	ErrorMessage(_ERRCHRTNODATAPOINTS);	×
331	PrintBASESubFooter();	×
332	return;	×
333	}
334
335	// From which element on should the "for"-loop start:
336	if (	×
337	ctype_digit($element_start) && $element_start > 0	×
338	&& $element_start < $number_array_elements
339	){
340	$i = $element_start;	×
341	}else{	×
342	$i = 0;	×
343	}
344	if ( $debug_mode > 0 ){	×
345	print "i = $i<BR>";	×
346	print "element_start = $element_start<BR>";	×
347	print "number_array_elements = " . $number_array_elements . "<BR>";	×
348	print "count(xdata) = " . count($xdata) . "<BR><BR>";	×
349	}
350	// set up array
351	for ( $j = 0; $i < $number_array_elements; $i++, $j++ ){	×
352	// How many columns/elements do you want to see?
353	if ( $chart_interval > 0 ){	×
354	if ( $j >= $chart_interval ){	×
355	break;	×
356	}
357	}
358	if ( $debug_mode > 1 ){	×
359	print $i . ": " . $xdata[$i][0] . " - " . $xdata[$i][1] . "<BR>";	×
360	}
361	// define x-axis value:
362	if ( isset($xdata[$i][0]) ){	×
363	$chart_array [$j][0] = $xdata[$i][0];	×
364	}else{	×
365	$chart_array[$j][0] = '';	×
366	}
367	// define y-axis value:
368	if ( isset($xdata[$i][1]) ){	×
369	$chart_array [$j][1] = $xdata[$i][1];	×
370	}else{	×
371	$chart_array[$j][1] = 0;	×
372	}
373	} // for-loop
374	if (	×
375	($chart_style == "bar" \|\| $chart_style == "line")
376	&& count($chart_array) == 1	×
377	){
378	/* then there's is a bug in PEAR::Image_Graph;
379	* Cf. http://pear.php.net/bugs/bug.php?id=12763
380	* http://pear.php.net/bugs/7423
381	* https://pear.php.net/bugs/bug.php?id=16335
382	* the following
383	* appends one element, that does, of course, not really exist,
384	* as a workaround: */
385	if ( $debug_mode > 0 ){	×
386	print "WARNING: Workaround: Adding one dummy element, that does NOT really exist!<BR>\n";	×
387	}
388	$chart_array[1][0] = '';	×
389	$chart_array[1][1] = 0;	×
390	}
391	// finally, set up xdata
392	$xdata = $chart_array;	×
393	} // if ( $chart_interval \|\| $number_array_elements) {
394	if ( $debug_mode > 0 ){	×
395	print "count(xdata) = " . count($xdata) . "<BR>\n";	×
396	// disabled because does not work as expected
397	//echo "<H3>"._CHRTDUMP." $xaxis_label_inc)</H3>";
398	}
399	for ( $i = 0; $i < count($xdata); $i++ ){	×
400	if ( $debug_mode > 0 ){	×
401	echo $i." -- ".$xdata[$i][0]." - ".$xdata[$i][1]."<BR>";	×
402	}
403	// The following does not work as expected with PEAR::Image_Graph-0.7.2
404	// Although as many pieces of data are added to the plot
405	// as count($xdata) suggests, in the end are only those
406	// bars (lines) displayed, that do NOT have an empty string
407	// in $xdata[$i][0] (and even not a space!). I'm inclined to
408	// consider this as one more bug of Image_Graph library.
409	/*
410	// Apply the X-Axis label clean-up --
411	// only write every N axis labels (erase the rest)
412	if (($xaxis_label_inc != 0) && ( ($i % $xaxis_label_inc ) != 0 ))
413	{
414	$xdata[$i][0] = "";
415	}
416	*/
417	}
418	if ( $debug_mode > 0 ){	×
419	echo "<H3>"._CHRTDRAW." ($width x $height)</H3>";	×
420	}
421	$et->Mark("Extracting data");	×
422	echo '<CENTER>	×
423	<TABLE BGCOLOR="#000000" CELLSPACING=0 CELLPADDING=2 BORDER=0 SUMMARY="table from base_graph_main.php">
424	<TR>
425	<TD>';
426
427	$_SESSION['xdata'] = $xdata;	×
428	echo "<CENTER>";	×
429	if ( $WorldMap ){	×
430	echo "<A HREF=\"base_graph_display.php?";	×
431	echo "&pmargin0=$pmargin0&pmargin1=$pmargin1".	×
432	"&pmargin2=$pmargin2&pmargin3=$pmargin3".	×
433	"&title=".rawurlencode($user_chart_title." \n".$chart_title).	×
434	"&xaxis_label=".rawurlencode($xaxis_label).	×
435	"&yaxis_label=".rawurlencode($yaxis_label).	×
436	// "&yaxis_scale=".rawurlencode($yaxis_scale).
437	"&yaxis_scale=" . $yaxis_scale .
438	"&rotate_xaxis_lbl=".rawurlencode($rotate_xaxis_lbl).	×
439	"&xaxis_grid=".$xaxis_grid.
440	"&yaxis_grid=".$yaxis_grid.
441	"&chart_type=".$chart_type.
442	"&style=".$chart_style."\">";
443
444	echo "<IMG WIDTH=600 HEIGHT=300 SRC=\"base_graph_display.php?";	×
445	}else{	×
446	echo "<IMG SRC=\"base_graph_display.php?width=$width&height=$height";	×
447	}
448	echo "&pmargin0=$pmargin0&pmargin1=$pmargin1".	×
449	"&pmargin2=$pmargin2&pmargin3=$pmargin3".	×
450	"&title=".rawurlencode($user_chart_title." \n".$chart_title).	×
451	"&xaxis_label=".rawurlencode($xaxis_label).	×
452	"&yaxis_label=".rawurlencode($yaxis_label).	×
453	// "&yaxis_scale=".rawurlencode($yaxis_scale).
454	"&yaxis_scale=" . $yaxis_scale .
455	"&rotate_xaxis_lbl=".rawurlencode($rotate_xaxis_lbl).	×
456	"&xaxis_grid=".$xaxis_grid.
457	"&yaxis_grid=".$yaxis_grid.
458	"&chart_type=".$chart_type.
459	"&style=".$chart_style."\">";
460	if ( $WorldMap ){	×
461	echo "</A><BR>\n";	×
462	}
463	echo "</CENTER>";	×
464
465	PrintFramedBoxFooter(1,2);	×
466	NLIO('<br/>',2);	×
467	if ( $WorldMap ){	×
468	echo '(click at the image or - after it has been reloaded - click at it for a second time to get a bigger size of it)<BR><BR>';	×
469	}
470	echo '</CENTER>';	×
471	$et->Mark('Rendering graph.');	×
472	}else{	×
473	ErrorMessage(_ERRCHRTNODATAPOINTS);	×
474	}
475	}
476	PrintBASESubFooter();	×
477	}else{ // Graphics Libs Check failed.	×
478	error_log($EMPfx . 'Graphics Libs check failed.');	×
479	HTTP_header('Location: base_main.php');	×
480	}
481	?>

NathanGibbs3 / BASE / 625

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous