refactor handling web logs && fix issues
This commit is contained in:
275
web/admin/admin.php
Normal file
275
web/admin/admin.php
Normal file
@@ -0,0 +1,275 @@
|
||||
<?php
|
||||
// FACINUS Admin Panel
|
||||
session_start();
|
||||
$admin_password = "ADMIN_PASSWORD_PLACEHOLDER"; // Will be replaced during installation
|
||||
|
||||
// Handle login/logout
|
||||
if (isset($_POST['password'])) {
|
||||
if ($_POST['password'] === $admin_password) {
|
||||
$_SESSION['authenticated'] = true;
|
||||
} else {
|
||||
$login_error = "Invalid password";
|
||||
}
|
||||
}
|
||||
|
||||
if (isset($_GET['logout'])) {
|
||||
session_destroy();
|
||||
header("Location: " . $_SERVER['PHP_SELF']);
|
||||
exit;
|
||||
}
|
||||
|
||||
// Check authentication
|
||||
$authenticated = isset($_SESSION['authenticated']) && $_SESSION['authenticated'] === true;
|
||||
|
||||
// Directories
|
||||
$logs_dir = __DIR__ . "/logs";
|
||||
$secrets_dir = __DIR__ . "/secrets";
|
||||
|
||||
// Get list of hosts
|
||||
$hosts = [];
|
||||
if ($authenticated && is_dir($logs_dir)) {
|
||||
$dir_content = scandir($logs_dir);
|
||||
foreach ($dir_content as $item) {
|
||||
if ($item != "." && $item != ".." && is_dir($logs_dir . "/" . $item)) {
|
||||
$hosts[] = $item;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// View specific log if requested
|
||||
$current_log = null;
|
||||
$log_content = "";
|
||||
if ($authenticated && isset($_GET['log']) && isset($_GET['host'])) {
|
||||
// Fix path traversal by sanitizing inputs
|
||||
$host = basename($_GET['host']);
|
||||
$log = basename($_GET['log']);
|
||||
$log_path = $logs_dir . "/" . $host . "/" . $log;
|
||||
if (file_exists($log_path) && is_file($log_path)) {
|
||||
$current_log = $log;
|
||||
$log_content = file_get_contents($log_path);
|
||||
}
|
||||
}
|
||||
|
||||
// View system info if requested
|
||||
$system_info = null;
|
||||
if ($authenticated && isset($_GET['info']) && $_GET['info'] === 'system' && isset($_GET['host'])) {
|
||||
$host = basename($_GET['host']);
|
||||
$info_path = $logs_dir . "/" . $host . "/system_info.json";
|
||||
if (file_exists($info_path) && is_file($info_path)) {
|
||||
$system_info = json_decode(file_get_contents($info_path), true);
|
||||
}
|
||||
}
|
||||
|
||||
// View secrets if requested
|
||||
$secrets = [];
|
||||
if ($authenticated && isset($_GET['secrets']) && isset($_GET['host'])) {
|
||||
$host = basename($_GET['host']);
|
||||
$host_secrets_dir = $secrets_dir . "/" . $host;
|
||||
if (is_dir($host_secrets_dir)) {
|
||||
$secret_files = scandir($host_secrets_dir);
|
||||
foreach ($secret_files as $file) {
|
||||
if ($file != "." && $file != ".." && is_file($host_secrets_dir . "/" . $file)) {
|
||||
$type = pathinfo($file, PATHINFO_FILENAME);
|
||||
$value = file_get_contents($host_secrets_dir . "/" . $file);
|
||||
$secrets[$type] = $value;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
$host_logs = [];
|
||||
if ($authenticated && isset($_GET['host'])) {
|
||||
$host = basename($_GET['host']);
|
||||
$host_logs_dir = $logs_dir . "/" . $host;
|
||||
if (is_dir($host_logs_dir)) {
|
||||
$log_files = scandir($host_logs_dir);
|
||||
foreach ($log_files as $file) {
|
||||
if ($file != "." && $file != ".." && is_file($host_logs_dir . "/" . $file)) {
|
||||
$host_logs[] = $file;
|
||||
}
|
||||
}
|
||||
// Sort logs by most recent first
|
||||
usort($host_logs, function($a, $b) use ($host_logs_dir) {
|
||||
$file_b = $host_logs_dir . "/" . $b;
|
||||
$file_a = $host_logs_dir . "/" . $a;
|
||||
|
||||
$time_b = file_exists($file_b) ? filemtime($file_b) : 0;
|
||||
$time_a = file_exists($file_a) ? filemtime($file_a) : 0;
|
||||
|
||||
return $time_b - $time_a;
|
||||
});
|
||||
}
|
||||
}
|
||||
?>
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<title>FACINUS - Admin</title>
|
||||
<link rel="stylesheet" href="styles.css">
|
||||
</head>
|
||||
<body>
|
||||
<div class="container">
|
||||
<div class="header">
|
||||
<a href="admin.php" class="logo">
|
||||
<pre class="ascii-header">
|
||||
█████▒▄▄▄ ▄████▄ ██▓ ███▄ █ █ ██ ██████
|
||||
▓██ ▒▒████▄ ▒██▀ ▀█ ▓██▒ ██ ▀█ █ ██ ▓██▒▒██ ▒
|
||||
▒████ ░▒██ ▀█▄ ▒▓█ ▄ ▒██▒▓██ ▀█ ██▒▓██ ▒██░░ ▓██▄
|
||||
░▓█▒ ░░██▄▄▄▄██ ▒▓▓▄ ▄██▒░██░▓██▒ ▐▌██▒▓▓█ ░██░ ▒ ██▒
|
||||
░▒█░ ▓█ ▓██▒▒ ▓███▀ ░░██░▒██░ ▓██░▒▒█████▓ ▒██████▒▒
|
||||
▒ ░ ▒▒ ▓▒█░░ ░▒ ▒ ░░▓ ░ ▒░ ▒ ▒ ░▒▓▒ ▒ ▒ ▒ ▒▓▒ ▒ ░
|
||||
░ ▒ ▒▒ ░ ░ ▒ ▒ ░░ ░░ ░ ▒░░░▒░ ░ ░ ░ ░▒ ░ ░
|
||||
░ ░ ░ ▒ ░ ▒ ░ ░ ░ ░ ░░░ ░ ░ ░ ░ ░
|
||||
░ ░░ ░ ░ ░ ░ ░
|
||||
░
|
||||
admin panel
|
||||
</pre>
|
||||
</a>
|
||||
<?php if ($authenticated): ?>
|
||||
<a href="?logout=1" class="logout">logout</a>
|
||||
<?php endif; ?>
|
||||
</div>
|
||||
|
||||
<?php if (!$authenticated): ?>
|
||||
<div class="login">
|
||||
<h2>> login</h2>
|
||||
<?php if (isset($login_error)): ?>
|
||||
<div class="alert"><?php echo $login_error; ?></div>
|
||||
<?php endif; ?>
|
||||
<form method="post">
|
||||
<label for="password">password:</label>
|
||||
<input type="password" id="password" name="password" required autofocus>
|
||||
<button type="submit">access</button>
|
||||
</form>
|
||||
</div>
|
||||
<?php else: ?>
|
||||
<div class="dashboard">
|
||||
<div class="sidebar">
|
||||
<div class="panel">
|
||||
<div class="panel-header">
|
||||
<h3>> hosts</h3>
|
||||
</div>
|
||||
<?php if (count($hosts) > 0): ?>
|
||||
<input type="text" id="hostSearch" placeholder="search..." class="search-box">
|
||||
<ul class="host-list">
|
||||
<?php foreach ($hosts as $host): ?>
|
||||
<li>
|
||||
<a href="?host=<?php echo urlencode($host); ?>" class="<?php echo isset($_GET['host']) && $_GET['host'] === $host ? 'active' : ''; ?>">
|
||||
<?php echo htmlspecialchars($host); ?>
|
||||
</a>
|
||||
</li>
|
||||
<?php endforeach; ?>
|
||||
</ul>
|
||||
<?php else: ?>
|
||||
<div class="welcome">
|
||||
<p>no connected hosts</p>
|
||||
</div>
|
||||
<?php endif; ?>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div class="content">
|
||||
<?php if (isset($_GET['host'])): ?>
|
||||
<div class="panel">
|
||||
<div class="panel-header">
|
||||
<h2>> <?php echo htmlspecialchars(basename($_GET['host'])); ?></h2>
|
||||
<?php if ($current_log): ?>
|
||||
<button class="action-btn" id="downloadBtn">download</button>
|
||||
<button class="action-btn" id="refreshBtn">refresh</button>
|
||||
<?php endif; ?>
|
||||
</div>
|
||||
|
||||
<div class="tabs">
|
||||
<a href="?host=<?php echo urlencode(basename($_GET['host'])); ?>" class="tab <?php echo !isset($_GET['info']) && !isset($_GET['secrets']) ? 'active' : ''; ?>">
|
||||
logs
|
||||
</a>
|
||||
<a href="?host=<?php echo urlencode(basename($_GET['host'])); ?>&info=system" class="tab <?php echo isset($_GET['info']) && $_GET['info'] === 'system' ? 'active' : ''; ?>">
|
||||
system
|
||||
</a>
|
||||
<a href="?host=<?php echo urlencode(basename($_GET['host'])); ?>&secrets=1" class="tab <?php echo isset($_GET['secrets']) ? 'active' : ''; ?>">
|
||||
secrets
|
||||
</a>
|
||||
</div>
|
||||
|
||||
<?php if (isset($_GET['secrets'])): ?>
|
||||
<div class="secrets">
|
||||
<?php if (count($secrets) > 0): ?>
|
||||
<?php foreach ($secrets as $type => $value): ?>
|
||||
<div class="secret">
|
||||
<div class="secret-title">
|
||||
> <?php echo htmlspecialchars(str_replace('_', ' ', $type)); ?>
|
||||
</div>
|
||||
<div class="command">
|
||||
<?php echo htmlspecialchars($value); ?>
|
||||
<button class="copy-btn" data-clipboard="<?php echo htmlspecialchars($value); ?>">
|
||||
copy
|
||||
</button>
|
||||
</div>
|
||||
</div>
|
||||
<?php endforeach; ?>
|
||||
<?php else: ?>
|
||||
<div class="welcome">
|
||||
<p>no secrets collected from this host</p>
|
||||
</div>
|
||||
<?php endif; ?>
|
||||
</div>
|
||||
<?php elseif (isset($_GET['info']) && $_GET['info'] === 'system'): ?>
|
||||
<div class="system-info">
|
||||
<?php if ($system_info): ?>
|
||||
<table class="info-table">
|
||||
<?php foreach ($system_info as $key => $value): ?>
|
||||
<tr>
|
||||
<td class="info-label"><?php echo htmlspecialchars(str_replace('_', ' ', $key)); ?></td>
|
||||
<td><?php echo htmlspecialchars($value); ?></td>
|
||||
</tr>
|
||||
<?php endforeach; ?>
|
||||
</table>
|
||||
<?php else: ?>
|
||||
<div class="welcome">
|
||||
<p>no system information collected</p>
|
||||
</div>
|
||||
<?php endif; ?>
|
||||
</div>
|
||||
<?php else: ?>
|
||||
<?php if ($current_log): ?>
|
||||
<div class="logs">
|
||||
<?php echo htmlspecialchars($log_content); ?>
|
||||
</div>
|
||||
<?php elseif (count($host_logs) > 0): ?>
|
||||
<input type="text" id="logSearch" placeholder="search..." class="search-box">
|
||||
<ul class="log-list">
|
||||
<?php foreach ($host_logs as $log_file): ?>
|
||||
<?php
|
||||
$host = basename($_GET['host']);
|
||||
$log_time = filemtime($logs_dir . "/" . $host . "/" . $log_file);
|
||||
$log_date = date("Y-m-d H:i:s", $log_time);
|
||||
?>
|
||||
<li>
|
||||
<a href="?host=<?php echo urlencode($host); ?>&log=<?php echo urlencode($log_file); ?>">
|
||||
<?php echo htmlspecialchars($log_file); ?>
|
||||
<span class="log-date"><?php echo $log_date; ?></span>
|
||||
</a>
|
||||
</li>
|
||||
<?php endforeach; ?> </ul>
|
||||
<?php else: ?>
|
||||
<div class="welcome">
|
||||
<p>no logs available</p>
|
||||
</div>
|
||||
<?php endif; ?>
|
||||
<?php endif; ?>
|
||||
</div>
|
||||
<?php else: ?>
|
||||
<div class="welcome">
|
||||
<p>select a host to view details</p>
|
||||
</div>
|
||||
<?php endif; ?>
|
||||
</div>
|
||||
</div>
|
||||
<?php endif; ?>
|
||||
</div>
|
||||
|
||||
<script src="scripts.js"></script>
|
||||
</body>
|
||||
</html>
|
||||
63
web/admin/scripts.js
Normal file
63
web/admin/scripts.js
Normal file
@@ -0,0 +1,63 @@
|
||||
// Copy to clipboard functionality
|
||||
document.addEventListener('click', function(e) {
|
||||
if (e.target && e.target.classList.contains('copy-btn')) {
|
||||
const text = e.target.getAttribute('data-clipboard');
|
||||
navigator.clipboard.writeText(text).then(function() {
|
||||
const originalText = e.target.innerText;
|
||||
e.target.innerText = "copied!";
|
||||
setTimeout(() => {
|
||||
e.target.innerText = originalText;
|
||||
}, 1000);
|
||||
});
|
||||
}
|
||||
});
|
||||
|
||||
// Search functionality
|
||||
function setupSearch(inputId, itemsSelector) {
|
||||
const searchInput = document.getElementById(inputId);
|
||||
if (searchInput) {
|
||||
searchInput.addEventListener('input', function() {
|
||||
const query = this.value.toLowerCase();
|
||||
const items = document.querySelectorAll(itemsSelector);
|
||||
|
||||
items.forEach(item => {
|
||||
const text = item.textContent.toLowerCase();
|
||||
item.parentNode.style.display = text.includes(query) ? 'block' : 'none';
|
||||
});
|
||||
});
|
||||
}
|
||||
}
|
||||
|
||||
// Setup search functionality if elements exist
|
||||
setupSearch('hostSearch', '.host-list a');
|
||||
setupSearch('logSearch', '.log-list a');
|
||||
|
||||
// Download button functionality
|
||||
const downloadBtn = document.getElementById('downloadBtn');
|
||||
if (downloadBtn) {
|
||||
downloadBtn.addEventListener('click', function() {
|
||||
const logContent = document.querySelector('.logs');
|
||||
if (logContent) {
|
||||
const content = logContent.innerText;
|
||||
const blob = new Blob([content], {type: 'text/plain'});
|
||||
const url = URL.createObjectURL(blob);
|
||||
|
||||
const a = document.createElement('a');
|
||||
a.href = url;
|
||||
const urlParams = new URLSearchParams(window.location.search);
|
||||
a.download = urlParams.get('log') || "log";
|
||||
document.body.appendChild(a);
|
||||
a.click();
|
||||
document.body.removeChild(a);
|
||||
URL.revokeObjectURL(url);
|
||||
}
|
||||
});
|
||||
}
|
||||
|
||||
// Refresh button functionality
|
||||
const refreshBtn = document.getElementById('refreshBtn');
|
||||
if (refreshBtn) {
|
||||
refreshBtn.addEventListener('click', function() {
|
||||
location.reload();
|
||||
});
|
||||
}
|
||||
276
web/admin/styles.css
Normal file
276
web/admin/styles.css
Normal file
@@ -0,0 +1,276 @@
|
||||
:root {
|
||||
--bg: #111111;
|
||||
--text: #33ff33;
|
||||
--text-dim: #1a991a;
|
||||
--secondary: #aaaaaa;
|
||||
--accent: #ff5555;
|
||||
--border: #333333;
|
||||
--hover: #222222;
|
||||
--panel: #191919;
|
||||
}
|
||||
|
||||
* {
|
||||
box-sizing: border-box;
|
||||
margin: 0;
|
||||
padding: 0;
|
||||
}
|
||||
|
||||
body {
|
||||
font-family: 'Courier New', monospace;
|
||||
background-color: var(--bg);
|
||||
color: var(--text);
|
||||
line-height: 1.5;
|
||||
}
|
||||
|
||||
.container {
|
||||
width: 95%;
|
||||
max-width: 1400px;
|
||||
margin: 0 auto;
|
||||
padding: 10px;
|
||||
}
|
||||
|
||||
.header {
|
||||
border-bottom: 1px solid var(--border);
|
||||
padding: 10px 0;
|
||||
margin-bottom: 20px;
|
||||
display: flex;
|
||||
justify-content: space-between;
|
||||
align-items: center;
|
||||
}
|
||||
|
||||
pre {
|
||||
font-family: 'Courier New', monospace;
|
||||
overflow-x: auto;
|
||||
white-space: pre;
|
||||
}
|
||||
|
||||
.ascii-header {
|
||||
font-size: 12px;
|
||||
line-height: 1.2;
|
||||
}
|
||||
|
||||
.logo {
|
||||
text-decoration: none;
|
||||
color: var(--text);
|
||||
}
|
||||
|
||||
.logout {
|
||||
color: var(--text);
|
||||
text-decoration: none;
|
||||
border: 1px solid var(--border);
|
||||
padding: 5px 10px;
|
||||
}
|
||||
|
||||
.logout:hover {
|
||||
background: var(--hover);
|
||||
}
|
||||
|
||||
.dashboard {
|
||||
display: flex;
|
||||
gap: 20px;
|
||||
}
|
||||
|
||||
.sidebar {
|
||||
width: 280px;
|
||||
flex-shrink: 0;
|
||||
}
|
||||
|
||||
.content {
|
||||
flex-grow: 1;
|
||||
}
|
||||
|
||||
.panel {
|
||||
border: 1px solid var(--border);
|
||||
background: var(--panel);
|
||||
margin-bottom: 20px;
|
||||
}
|
||||
|
||||
.panel-header {
|
||||
border-bottom: 1px solid var(--border);
|
||||
padding: 10px;
|
||||
display: flex;
|
||||
justify-content: space-between;
|
||||
align-items: center;
|
||||
}
|
||||
|
||||
.host-list, .log-list {
|
||||
list-style: none;
|
||||
}
|
||||
|
||||
.host-list a, .log-list a, .tab {
|
||||
display: block;
|
||||
padding: 8px 10px;
|
||||
color: var(--secondary);
|
||||
text-decoration: none;
|
||||
border-bottom: 1px solid var(--border);
|
||||
}
|
||||
|
||||
.host-list a:hover, .log-list a:hover, .tab:hover {
|
||||
background: var(--hover);
|
||||
color: var(--text);
|
||||
}
|
||||
|
||||
.host-list a.active, .log-list a.active, .tab.active {
|
||||
color: var(--text);
|
||||
background: rgba(51, 255, 51, 0.1);
|
||||
}
|
||||
|
||||
.tabs {
|
||||
display: flex;
|
||||
border-bottom: 1px solid var(--border);
|
||||
}
|
||||
|
||||
.tab {
|
||||
padding: 8px 15px;
|
||||
border-right: 1px solid var(--border);
|
||||
border-bottom: none;
|
||||
}
|
||||
|
||||
.logs {
|
||||
padding: 10px;
|
||||
max-height: 600px;
|
||||
overflow: auto;
|
||||
white-space: pre-wrap;
|
||||
font-family: 'Courier New', monospace;
|
||||
font-size: 14px;
|
||||
background: rgba(0, 0, 0, 0.2);
|
||||
}
|
||||
|
||||
.log-date {
|
||||
float: right;
|
||||
color: var(--text-dim);
|
||||
font-size: 0.9em;
|
||||
}
|
||||
|
||||
.login {
|
||||
max-width: 400px;
|
||||
margin: 50px auto;
|
||||
padding: 20px;
|
||||
border: 1px solid var(--border);
|
||||
background: var(--panel);
|
||||
}
|
||||
|
||||
input[type="password"], .search-box {
|
||||
width: 100%;
|
||||
padding: 8px;
|
||||
margin: 10px 0;
|
||||
background: var(--bg);
|
||||
border: 1px solid var(--border);
|
||||
color: var(--text);
|
||||
font-family: 'Courier New', monospace;
|
||||
}
|
||||
|
||||
button, .action-btn {
|
||||
padding: 8px 15px;
|
||||
background: transparent;
|
||||
color: var(--text);
|
||||
border: 1px solid var(--text);
|
||||
cursor: pointer;
|
||||
font-family: 'Courier New', monospace;
|
||||
}
|
||||
|
||||
button:hover, .action-btn:hover {
|
||||
background: rgba(51, 255, 51, 0.1);
|
||||
}
|
||||
|
||||
.welcome {
|
||||
text-align: center;
|
||||
padding: 50px 20px;
|
||||
color: var(--secondary);
|
||||
}
|
||||
|
||||
.secrets {
|
||||
padding: 10px;
|
||||
}
|
||||
|
||||
.secret {
|
||||
margin-bottom: 10px;
|
||||
border: 1px solid var(--border);
|
||||
background: rgba(255, 255, 0, 0.05);
|
||||
}
|
||||
|
||||
.secret-title {
|
||||
border-bottom: 1px dashed var(--border);
|
||||
padding: 5px 8px;
|
||||
font-size: 0.9em;
|
||||
color: var(--text-dim);
|
||||
}
|
||||
|
||||
.command {
|
||||
padding: 8px;
|
||||
position: relative;
|
||||
overflow-x: auto;
|
||||
white-space: pre;
|
||||
font-family: 'Courier New', monospace;
|
||||
}
|
||||
|
||||
.copy-btn {
|
||||
position: absolute;
|
||||
right: 5px;
|
||||
top: 5px;
|
||||
background: transparent;
|
||||
color: var(--secondary);
|
||||
border: 1px solid var(--border);
|
||||
padding: 2px 5px;
|
||||
cursor: pointer;
|
||||
font-size: 12px;
|
||||
width: auto;
|
||||
}
|
||||
|
||||
.copy-btn:hover {
|
||||
background: var(--hover);
|
||||
color: var(--text);
|
||||
}
|
||||
|
||||
.alert {
|
||||
border-left: 3px solid var(--accent);
|
||||
padding: 10px;
|
||||
margin-bottom: 15px;
|
||||
color: var(--accent);
|
||||
}
|
||||
|
||||
.system-info {
|
||||
padding: 10px;
|
||||
}
|
||||
|
||||
.info-table {
|
||||
width: 100%;
|
||||
border-collapse: collapse;
|
||||
}
|
||||
|
||||
.info-table tr {
|
||||
border-bottom: 1px solid var(--border);
|
||||
}
|
||||
|
||||
.info-table td {
|
||||
padding: 8px 10px;
|
||||
}
|
||||
|
||||
.info-label {
|
||||
color: var(--secondary);
|
||||
width: 150px;
|
||||
}
|
||||
|
||||
.action-btn {
|
||||
padding: 3px 8px;
|
||||
font-size: 12px;
|
||||
margin-left: 5px;
|
||||
}
|
||||
|
||||
@media (max-width: 800px) {
|
||||
.dashboard {
|
||||
flex-direction: column;
|
||||
}
|
||||
|
||||
.sidebar {
|
||||
width: 100%;
|
||||
}
|
||||
|
||||
.ascii-header {
|
||||
font-size: 10px;
|
||||
}
|
||||
|
||||
.tabs {
|
||||
flex-wrap: wrap;
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user