. */ namespace Fisharebest\Webtrees; use Fisharebest\Webtrees\Controller\PageController; use Fisharebest\Webtrees\Functions\FunctionsEdit; use PDO; /** * Defined in session.php * * @global Tree $WT_TREE */ global $WT_TREE; define('WT_SCRIPT_NAME', 'admin_site_logs.php'); require './includes/session.php'; $controller = new PageController; $controller ->restrictAccess(Auth::isManager($WT_TREE)) ->setPageTitle(I18N::translate('Website logs')); $earliest = Database::prepare("SELECT IFNULL(DATE(MIN(log_time)), CURDATE()) FROM `##log`")->execute(array())->fetchOne(); $latest = Database::prepare("SELECT IFNULL(DATE(MAX(log_time)), CURDATE()) FROM `##log`")->execute(array())->fetchOne(); // Filtering $action = Filter::get('action'); $from = Filter::get('from', '\d\d\d\d-\d\d-\d\d', $earliest); $to = Filter::get('to', '\d\d\d\d-\d\d-\d\d', $latest); $type = Filter::get('type', 'auth|change|config|debug|edit|error|media|search'); $text = Filter::get('text'); $ip = Filter::get('ip'); $user = Filter::get('user'); $search = Filter::get('search'); $search = isset($search['value']) ? $search['value'] : null; if (Auth::isAdmin()) { // Administrators can see all logs $gedc = Filter::get('gedc'); } else { // Managers can only see logs relating to this gedcom $gedc = $WT_TREE->getName(); } $sql_select = "SELECT SQL_CACHE SQL_CALC_FOUND_ROWS log_id, log_time, log_type, log_message, ip_address, IFNULL(user_name, '') AS user_name, IFNULL(gedcom_name, '') AS gedcom_name" . " FROM `##log`" . " LEFT JOIN `##user` USING (user_id)" . // user may be deleted " LEFT JOIN `##gedcom` USING (gedcom_id)"; // gedcom may be deleted $where = " WHERE 1"; $args = array(); if ($search) { $where .= " AND log_message LIKE CONCAT('%', :search, '%')"; $args['search'] = $search; } if ($from) { $where .= " AND log_time >= :from"; $args['from'] = $from; } if ($to) { $where .= " AND log_time < TIMESTAMPADD(DAY, 1 , :to)"; // before end of the day $args['to'] = $to; } if ($type) { $where .= " AND log_type = :type"; $args['type'] = $type; } if ($text) { $where .= " AND log_message LIKE CONCAT('%', :text, '%')"; $args['text'] = $text; } if ($ip) { $where .= " AND ip_address LIKE CONCAT('%', :ip, '%')"; $args['ip'] = $ip; } if ($user) { $where .= " AND user_name LIKE CONCAT('%', :user, '%')"; $args['user'] = $user; } if ($gedc) { $where .= " AND gedcom_name LIKE CONCAT('%', :gedc, '%')"; $args['gedc'] = $gedc; } switch ($action) { case 'delete': $sql_delete = "DELETE `##log` FROM `##log`" . " LEFT JOIN `##user` USING (user_id)" . // user may be deleted " LEFT JOIN `##gedcom` USING (gedcom_id)"; // gedcom may be deleted Database::prepare($sql_delete . $where)->execute($args); break; case 'export': header('Content-Type: text/csv'); header('Content-Disposition: attachment; filename="webtrees-logs.csv"'); $rows = Database::prepare($sql_select . $where . ' ORDER BY log_id')->execute($args)->fetchAll(); foreach ($rows as $row) { echo '"', $row->log_time, '",', '"', $row->log_type, '",', '"', str_replace('"', '""', $row->log_message), '",', '"', $row->ip_address, '",', '"', str_replace('"', '""', $row->user_name), '",', '"', str_replace('"', '""', $row->gedcom_name), '"', "\n"; } return; case 'load_json': $start = Filter::getInteger('start'); $length = Filter::getInteger('length'); $order = Filter::getArray('order'); if ($order) { $order_by = " ORDER BY "; foreach ($order as $key => $value) { if ($key > 0) { $order_by .= ','; } // Datatables numbers columns 0, 1, 2 // MySQL numbers columns 1, 2, 3 switch ($value['dir']) { case 'asc': $order_by .= (1 + $value['column']) . " ASC "; break; case 'desc': $order_by .= (1 + $value['column']) . " DESC "; break; } } } else { $order_by = " ORDER BY 1 ASC"; } if ($length) { Auth::user()->setPreference('admin_site_log_page_size', $length); $limit = " LIMIT :limit OFFSET :offset"; $args['limit'] = $length; $args['offset'] = $start; } else { $limit = ""; } // This becomes a JSON list, not array, so need to fetch with numeric keys. $data = Database::prepare($sql_select . $where . $order_by . $limit)->execute($args)->fetchAll(PDO::FETCH_NUM); foreach ($data as &$datum) { $datum[2] = Filter::escapeHtml($datum[2]); $datum[3] = '' . Filter::escapeHtml($datum[3]) . ''; $datum[4] = '' . Filter::escapeHtml($datum[4]) . ''; $datum[5] = '' . Filter::escapeHtml($datum[5]) . ''; $datum[6] = '' . Filter::escapeHtml($datum[6]) . ''; } // Total filtered/unfiltered rows $recordsFiltered = (int) Database::prepare("SELECT FOUND_ROWS()")->fetchOne(); $recordsTotal = (int) Database::prepare("SELECT COUNT(*) FROM `##log`")->fetchOne(); header('Content-type: application/json'); // See http://www.datatables.net/usage/server-side echo json_encode(array( 'draw' => Filter::getInteger('draw'), 'recordsTotal' => $recordsTotal, 'recordsFiltered' => $recordsFiltered, 'data' => $data, )); return; } $controller ->pageHeader() ->addExternalJavascript(WT_JQUERY_DATATABLES_JS_URL) ->addExternalJavascript(WT_DATATABLES_BOOTSTRAP_JS_URL) ->addExternalJavascript(WT_MOMENT_JS_URL) ->addExternalJavascript(WT_BOOTSTRAP_DATETIMEPICKER_JS_URL) ->addInlineJavascript(' jQuery(".table-site-logs").dataTable( { processing: true, serverSide: true, ajax: "' . WT_BASE_URL . WT_SCRIPT_NAME . '?action=load_json&from=' . $from . '&to=' . $to . '&type=' . $type . '&text=' . rawurlencode($text) . '&ip=' . rawurlencode($ip) . '&user=' . rawurlencode($user) . '&gedc=' . rawurlencode($gedc) . '", ' . I18N::datatablesI18N(array(10, 20, 50, 100, 500, 1000, -1)) . ', sorting: [[ 0, "desc" ]], pageLength: ' . Auth::user()->getPreference('admin_site_log_page_size', 10) . ', columns: [ /* log_id */ { visible: false }, /* Timestamp */ { sort: 0 }, /* Type */ { }, /* message */ { }, /* IP address */ { }, /* User */ { }, /* Family tree */ { } ] }); jQuery("#from,#to").parent("div").datetimepicker({ format: "YYYY-MM-DD", minDate: "' . $earliest . '", maxDate: "' . $latest . '", locale: "' . WT_LOCALE . '", icons: { time: "fa fa-clock-o", date: "fa fa-calendar", up: "fa fa-arrow-up", down: "fa fa-arrow-down", previous: "fa fa-arrow-' . (I18N::direction() === 'rtl' ? 'right' : 'left') . '", next: "fa fa-arrow-' . (I18N::direction() === 'rtl' ? 'left' : 'right') . '", today: "fa fa-trash-o", clear: "fa fa-trash-o" } }); '); $users_array = array(); foreach (User::all() as $tmp_user) { $users_array[$tmp_user->getUserName()] = $tmp_user->getUserName(); } ?>

getPageTitle() ?>

getPageTitle() ?>