| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149 |
- <?php
- namespace App\Controllers\Admin;
- use App\Models\DetectLog;
- use App\Models\DetectRule;
- use App\Utils\Telegram;
- use App\Controllers\AdminController;
- use Ozdemir\Datatables\Datatables;
- use App\Utils\DatatablesHelper;
- class DetectController extends AdminController
- {
- public function index($request, $response, $args)
- {
- $table_config['total_column'] = array("op" => "操作", "id" => "ID", "name" => "名称",
- "text" => "介绍", "regex" => "正则表达式",
- "type" => "类型");
- $table_config['default_show_column'] = array();
- foreach ($table_config['total_column'] as $column => $value) {
- array_push($table_config['default_show_column'], $column);
- }
- $table_config['ajax_url'] = 'detect/ajax';
- return $this->view()->assign('table_config', $table_config)->display('admin/detect/index.tpl');
- }
- public function log($request, $response, $args)
- {
- $table_config['total_column'] = array("id" => "ID", "user_id" => "用户ID",
- "user_name" => "用户名", "node_id" => "节点ID",
- "node_name" => "节点名", "rule_id" => "规则ID",
- "rule_name" => "规则名", "rule_text" => "规则描述",
- "rule_regex" => "规则正则表达式", "rule_type" => "规则类型",
- "datetime" => "时间");
- $table_config['default_show_column'] = array();
- foreach ($table_config['total_column'] as $column => $value) {
- array_push($table_config['default_show_column'], $column);
- }
- $table_config['ajax_url'] = 'log/ajax';
- return $this->view()->assign('table_config', $table_config)->display('admin/detect/log.tpl');
- }
- public function create($request, $response, $args)
- {
- return $this->view()->display('admin/detect/add.tpl');
- }
- public function add($request, $response, $args)
- {
- $rule = new DetectRule();
- $rule->name = $request->getParam('name');
- $rule->text = $request->getParam('text');
- $rule->regex = $request->getParam('regex');
- $rule->type = $request->getParam('type');
- if (!$rule->save()) {
- $rs['ret'] = 0;
- $rs['msg'] = "添加失败";
- return $response->getBody()->write(json_encode($rs));
- }
- Telegram::SendMarkdown("有新的审计规则:".$rule->name);
- $rs['ret'] = 1;
- $rs['msg'] = "添加成功";
- return $response->getBody()->write(json_encode($rs));
- }
- public function edit($request, $response, $args)
- {
- $id = $args['id'];
- $rule = DetectRule::find($id);
- return $this->view()->assign('rule', $rule)->display('admin/detect/edit.tpl');
- }
- public function update($request, $response, $args)
- {
- $id = $args['id'];
- $rule = DetectRule::find($id);
- $rule->name = $request->getParam('name');
- $rule->text = $request->getParam('text');
- $rule->regex = $request->getParam('regex');
- $rule->type = $request->getParam('type');
- if (!$rule->save()) {
- $rs['ret'] = 0;
- $rs['msg'] = "修改失败";
- return $response->getBody()->write(json_encode($rs));
- }
- Telegram::SendMarkdown("规则更新:".PHP_EOL.$request->getParam('name'));
- $rs['ret'] = 1;
- $rs['msg'] = "修改成功";
- return $response->getBody()->write(json_encode($rs));
- }
- public function delete($request, $response, $args)
- {
- $id = $request->getParam('id');
- $rule = DetectRule::find($id);
- if (!$rule->delete()) {
- $rs['ret'] = 0;
- $rs['msg'] = "删除失败";
- return $response->getBody()->write(json_encode($rs));
- }
- $rs['ret'] = 1;
- $rs['msg'] = "删除成功";
- return $response->getBody()->write(json_encode($rs));
- }
- public function ajax_rule($request, $response, $args)
- {
- $datatables = new Datatables(new DatatablesHelper());
- $datatables->query('Select id as op,id,name,text,regex,type from detect_list');
- $datatables->edit('op', function ($data) {
- return '<a class="btn btn-brand" href="/admin/detect/'.$data['id'].'/edit">编辑</a>
- <a class="btn btn-brand-accent" id="delete" value="'.$data['id'].'" href="javascript:void(0);" onClick="delete_modal_show(\''.$data['id'].'\')">删除</a>';
- });
- $datatables->edit('type', function ($data) {
- return $data['type'] == 1 ? '数据包明文匹配' : '数据包十六进制匹配';
- });
- $body = $response->getBody();
- $body->write($datatables->generate());
- }
- public function ajax_log($request, $response, $args)
- {
- $datatables = new Datatables(new DatatablesHelper());
- $datatables->query('Select detect_log.id,user_id,user.user_name,node_id,node.name as node_name,list.id as rule_id,list.name as rule_name,list.text as rule_text,list.regex as rule_regex,list.type as rule_type,detect_log.datetime from detect_log,user,ss_node as node,detect_list as list where user.id=detect_log.user_id and node.id = detect_log.node_id and list.id = detect_log.list_id');
- $datatables->edit('rule_type', function ($data) {
- return $data['rule_type'] == 1 ? '数据包明文匹配' : '数据包十六进制匹配';
- });
- $datatables->edit('datetime', function ($data) {
- return date('Y-m-d H:i:s', $data['datetime']);
- });
- $body = $response->getBody();
- $body->write($datatables->generate());
- }
- }
|