mirror of
https://github.com/ZoneMinder/zoneminder.git
synced 2026-03-27 18:23:00 -04:00
e6ace6fcf4
Add a new AUDIT logging level (-5) between PANIC (-4) and NOLOG (shifted to -6) across C++, PHP, and Perl loggers. AUDIT entries use code 'AUD' and syslog priority LOG_NOTICE. They record who changed what, from where, for monitors, filters, users, config, roles, groups, zones, states, servers, storage, events, snapshots, control caps, and login/logout. AUDIT entries have their own retention period (ZM_LOG_AUDIT_DATABASE_LIMIT, default 1 year) separate from regular log pruning. The log pruning in zmstats.pl and zmaudit.pl now excludes AUDIT rows from regular pruning and prunes them independently. Critical safety: the C++ termination logic is changed from 'if (level <= FATAL)' to 'if (level == FATAL || level == PANIC)' to prevent AUDIT-level log calls from killing the process. Includes db migration zm_update-1.39.1.sql to shift any stored NOLOG config values from -5 to -6. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
77 lines
3.0 KiB
PHP
77 lines
3.0 KiB
PHP
<?php
|
|
//
|
|
// ZoneMinder web action file
|
|
// Copyright (C) 2019 ZoneMinder LLC
|
|
//
|
|
// This program is free software; you can redistribute it and/or
|
|
// modify it under the terms of the GNU General Public License
|
|
// as published by the Free Software Foundation; either version 2
|
|
// of the License, or (at your option) any later version.
|
|
//
|
|
// This program is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU General Public License
|
|
// along with this program; if not, write to the Free Software
|
|
// Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
//
|
|
|
|
// Monitor edit actions, require a monitor id and edit permissions for that monitor
|
|
if ( !empty($_REQUEST['mid']) && canEdit('Monitors', $_REQUEST['mid']) ) {
|
|
$mid = validInt($_REQUEST['mid']);
|
|
if ( ($action == 'zone') && isset($_REQUEST['zid']) ) {
|
|
$zid = validInt($_REQUEST['zid']);
|
|
$monitor = new ZM\Monitor($mid);
|
|
|
|
if ( !empty($zid) ) {
|
|
$zone = dbFetchOne('SELECT * FROM Zones WHERE MonitorId=? AND Id=?', NULL, array($mid, $zid));
|
|
} else {
|
|
$zone = array();
|
|
}
|
|
|
|
if ( $_REQUEST['newZone']['Units'] == 'Percent' ) {
|
|
// Convert percentage thresholds to pixel counts using actual monitor pixel area
|
|
$pixelArea = $monitor->ViewWidth() * $monitor->ViewHeight();
|
|
foreach (array(
|
|
'MinAlarmPixels','MaxAlarmPixels',
|
|
'MinFilterPixels','MaxFilterPixels',
|
|
'MinBlobPixels','MaxBlobPixels'
|
|
) as $field ) {
|
|
if ( isset($_REQUEST['newZone'][$field]) and $_REQUEST['newZone'][$field] )
|
|
$_REQUEST['newZone'][$field] = intval(($_REQUEST['newZone'][$field]*$pixelArea)/100);
|
|
}
|
|
}
|
|
|
|
unset($_REQUEST['newZone']['Points']);
|
|
|
|
# convert these fields to integer e.g. NULL -> 0
|
|
$types = array(
|
|
'OverloadFrames' => 'integer',
|
|
'ExtendAlarmFrames' => 'integer',
|
|
);
|
|
|
|
$changes = getFormChanges($zone, $_REQUEST['newZone'], $types);
|
|
|
|
if ( count($changes) ) {
|
|
if ( $zid > 0 ) {
|
|
dbQuery('UPDATE Zones SET '.implode(', ', $changes).' WHERE MonitorId=? AND Id=?', array($mid, $zid));
|
|
} else {
|
|
dbQuery('INSERT INTO Zones SET MonitorId=?, '.implode(', ', $changes), array($mid));
|
|
}
|
|
ZM\AuditAction(($zid > 0 ? 'update' : 'create'), 'zone', $zid, 'MonitorId: '.$mid);
|
|
if ( daemonCheck() && ($monitor->Type() != 'WebSite') ) {
|
|
$monitor->zmcControl('reload');
|
|
}
|
|
if ( ($_REQUEST['newZone']['Type'] == 'Privacy') && $monitor->Controllable() ) {
|
|
$monitor->sendControlCommand('quit');
|
|
}
|
|
} // end if changes
|
|
# HTTP_REFERER will typically be ?view=zone so no good.
|
|
# if a referer is passed in $_REQUEST then use it otherwise go to ?view=zones
|
|
$redirect = isset($_REQUEST['REFERER']) ? $_REQUEST['REFERER'] : '?view=zones';
|
|
} // end if action
|
|
} // end if $mid and canEdit($mid)
|
|
?>
|