Access denied

\n"; - -#print "start querysub: query '$query'\n"; -# this may happen with more than one subcategory. Unlikely, but possible. - - # Calculate start point for LIMIT clause - my $offset = ($webvar{page}-1)*$RESULTS_PER_PAGE; - -# Possible cases: -# 1) Partial IP/subnet. Treated as "first-three-octets-match" in old IPDB, -# I should be able to handle it similarly here. -# 2a) CIDR subnet. Treated more or less as such in old IPDB. -# 2b) CIDR netmask. Not sure how it's treated. -# 3) Customer ID. Not handled in old IPDB -# 4) Description. -# 5) Invalid data which might be interpretable as an IP or something, but -# which probably shouldn't be for reasons of sanity. - - if ($category eq 'all') { - - print qq(

Showing all netblock and static-IP allocations

\n); - - # Need to assemble SQL query in this order to avoid breaking things. - $sql = "select cidr,custid,type,city,description from searchme"; - my $count = countRows("select count(*) from ($sql) foo"); - $sql .= " order by cidr limit $RESULTS_PER_PAGE offset $offset"; - queryResults($sql, $webvar{page}, $count); - - } elsif ($category eq 'cust') { - - print qq(

Searching for Customer IDs containing '$query'

\n); - - # Query for a customer ID. Note that we can't restrict to "numeric-only" - # as we have non-numeric custIDs in the legacy data. :/ - $sql = "select cidr,custid,type,city,description from searchme where custid ilike '%$query%'"; - my $count = countRows("select count(*) from ($sql) foo"); - $sql .= " order by cidr limit $RESULTS_PER_PAGE offset $offset"; - queryResults($sql, $webvar{page}, $count); - - } elsif ($category eq 'desc') { - - print qq(

Searching for descriptions containing '$query'

\n); - # Query based on description (includes "name" from old DB). - $sql = "select cidr,custid,type,city,description from searchme where description ilike '%$query%'"; - my $count = countRows("select count(*) from ($sql) foo"); - $sql .= " order by cidr limit $RESULTS_PER_PAGE offset $offset"; - queryResults($sql, $webvar{page}, $count); - - } elsif ($category =~ /ipblock/) { - - # Query is for a partial IP, a CIDR block in some form, or a flat IP. - print qq(

Searching for IP-based matches on '$query'

\n); - - $query =~ s/\s+//g; - if ($query =~ /\//) { - # 209.91.179/26 should show all /26 subnets in 209.91.179 - my ($net,$maskbits) = split /\//, $query; - if ($query =~ /^(\d{1,3}\.){3}\d{1,3}\/\d{2}$/) { - # /0->/9 are silly to worry about right now. I don't think - # we'll be getting a class A anytime soon. - $sql = "select cidr,custid,type,city,description from searchme where cidr='$query'"; - queryResults($sql, $webvar{page}, 1); - } else { - print "Finding all blocks with netmask /$maskbits, leading octet(s) $net
\n"; - # Partial match; beginning of subnet and maskbits are provided - $sql = "select cidr,custid,type,city,description from searchme where ". - "text(cidr) like '$net%' and text(cidr) like '%$maskbits'"; - my $count = countRows("select count(*) from ($sql) foo"); - $sql .= " order by cidr limit $RESULTS_PER_PAGE offset $offset"; - queryResults($sql, $webvar{page}, $count); - } - } elsif ($query =~ /^(\d{1,3}\.){3}\d{1,3}$/) { - # Specific IP address match - my $sfor = new NetAddr::IP $query; -# We do this convoluted roundabout way of finding things in order -# to bring up matches for single IPs that are within a static block; -# we want to show both the "container" block and the static IP itself. - $sth = $ip_dbh->prepare("select cidr from searchme where cidr >>= '$sfor'"); - $sth->execute; - while (my @data = $sth->fetchrow_array()) { - my $cidr = new NetAddr::IP $data[0]; - queryResults("select cidr,custid,type,city,description from searchme where ". - "cidr='$cidr'", $webvar{page}, 1); - } - } elsif ($query =~ /^\d{1,3}\.\d{1,3}\.\d{1,3}\.?$/) { - print "Finding matches where the first three octets are $query
\n"; - $sql = "select cidr,custid,type,city,description from searchme where ". - "text(cidr) like '$query%'"; - my $count = countRows("select count(*) from ($sql) foo"); - $sql .= " order by cidr limit $RESULTS_PER_PAGE offset $offset"; - queryResults($sql, $webvar{page}, $count); - } else { - # This shouldn't happen, but if it does, whoever gets it deserves what they get... - printError("Invalid query."); - } - } else { - # This shouldn't happen, but if it does, whoever gets it deserves what they get... - printError("Invalid searchfor."); - } -} # viewBy - - # args are: a reference to an array with the row to be printed and the # class(stylesheet) to use for formatting. @@ -313,59 +204,4 @@ -# Display certain types of search query. Note that this can't be -# cleanly reused much of anywhere else as the data isn't neatly tabulated. -# This is tied to the search sub tightly enough I may just gut it and provide -# more appropriate tables directly as needed. -sub queryResults($$$) { - my ($sql, $pageNo, $rowCount) = @_; - my $offset = 0; - $offset = $1 if($sql =~ m/.*limit\s+(.*),.*/); - - my $sth = $ip_dbh->prepare($sql); - $sth->execute(); - - startTable('Allocation','CustID','Type','City','Description/Name'); - my $count = 0; - - while (my @data = $sth->fetchrow_array) { - # cidr,custid,type,city,description - # Prefix subblocks with "Sub " - my @row = ( (($data[2] =~ /^.r$/) ? 'Sub ' : ''). - qq($data[0]), - $data[1], $disp_alloctypes{$data[2]}, $data[3], $data[4]); - # Allow listing of pool if desired/required. - if ($data[2] =~ /^.[pd]$/) { - $row[0] .= ' List IPs"; - } - printRow(\@row, 'color1', 1) if ($count%2==0); - printRow(\@row, 'color2', 1) if ($count%2!=0); - $count++; - } - - # Have to think on this call, it's primarily to clean up unfetched rows from a select. - # In this context it's probably a good idea. - $sth->finish(); - - my $upper = $offset+$count; - print "Records found: $rowCount
Displaying: $offset - $upper\n"; - print "\n"; - - # print the page thing.. - if ($rowCount > $RESULTS_PER_PAGE) { - my $pages = ceil($rowCount/$RESULTS_PER_PAGE); - print qq(

Page: ); - for (my $i = 1; $i <= $pages; $i++) { - if ($i == $pageNo) { - print "$i \n"; - } else { - print qq($i \n); - } - } - print "

"; - } -} # queryResults - - # Prints table headings. Accepts any number of arguments; # each argument is a table heading. @@ -380,18 +216,6 @@ -# Return first element of passed SQL query -sub countRows($) { - my $sth = $ip_dbh->prepare($_[0]); - $sth->execute(); - my @a = $sth->fetchrow_array(); - $sth->finish(); - return $a[0]; -} - - # Initial display: Show master blocks with total allocated subnets, total free subnets sub showSummary { - # this is horrible-ugly-bad and will Go Away real soon now(TM) - print "Content-type: text/html\n\n"; startTable('Master netblock', 'Routed netblocks', 'Allocated netblocks', @@ -420,5 +244,6 @@ # Count the free blocks. - $sth = $ip_dbh->prepare("select count(*) from freeblocks where cidr <<= ?"); + $sth = $ip_dbh->prepare("select count(*) from freeblocks where cidr <<= ? and ". + "(routed='y' or routed='n')"); foreach my $master (@masterblocks) { $sth->execute("$master"); @@ -428,5 +253,6 @@ # Find the largest free block in each master - $sth = $ip_dbh->prepare("select maskbits from freeblocks where cidr <<= ? order by maskbits limit 1"); + $sth = $ip_dbh->prepare("select maskbits from freeblocks where cidr <<= ? and ". + "(routed='y' or routed='n') order by maskbits limit 1"); foreach my $master (@masterblocks) { $sth->execute("$master"); @@ -448,5 +274,7 @@ } print "\n"; - print qq(Add new master block

\n); + if ($IPDBacl{$authuser} =~ /a/) { + print qq(Add new master block

\n); + } print "Note: Free blocks noted here include both routed and unrouted blocks.\n"; @@ -460,5 +288,4 @@ # else should follow. YMMV.) sub showMaster { - printHeader(''); print qq(

Summarizing routed blocks for ). @@ -502,5 +329,6 @@ # Count the free blocks. - $sth = $ip_dbh->prepare("select count(*) from freeblocks where cidr <<= ?"); + $sth = $ip_dbh->prepare("select count(*) from freeblocks where cidr <<= ? and ". + "(routed='y' or routed='n')"); foreach my $master (@localmasters) { $sth->execute("$master"); @@ -510,5 +338,6 @@ # Get the size of the largest free block - $sth = $ip_dbh->prepare("select maskbits from freeblocks where cidr <<= ? order by maskbits limit 1"); + $sth = $ip_dbh->prepare("select maskbits from freeblocks where cidr <<= ? and ". + "(routed='y' or routed='n') order by maskbits limit 1"); foreach my $master (@localmasters) { $sth->execute("$master"); @@ -534,10 +363,12 @@ print qq(

No allocations in ). qq($master.

\n). - qq(\n); + ($IPDBacl{$authuser} =~ /d/ ? + qq(

\n) : + ''); } # end check for existence of routed blocks in master @@ -573,5 +404,4 @@ # not have anything useful to spew. sub showRBlock { - printHeader(''); my $master = new NetAddr::IP $webvar{block}; @@ -621,10 +451,12 @@ print qq(

No allocations in ). qq($master.

\n). - qq(\n); + ($IPDBacl{$authuser} =~ /d/ ? + qq(\n) : + ''); } @@ -645,5 +477,5 @@ # Include some HairyPerl(TM) to prefix subblocks with "Sub " my @row = ((($data[1] ne 'y' && $data[1] ne 'n') ? 'Sub ' : ''). - qq($cidr), + ($IPDBacl{$authuser} =~ /a/ ? qq($cidr) : $cidr), $cidr->range); printRow(\@row, 'color1') if ($count%2 == 0); @@ -658,5 +490,4 @@ # List the IPs used in a pool sub listPool { - printHeader(''); my $cidr = new NetAddr::IP $webvar{pool}; @@ -704,5 +535,5 @@ my @row = ( qq($data[0]), $data[1],$data[2],$data[3], - ( ($data[2] eq 'n') ? + ( (($data[2] eq 'n') && ($IPDBacl{$authuser} =~ /d/)) ? ("Unassign this IP") : @@ -721,5 +552,9 @@ # be one of two templates, and the lists come from the database. sub assignBlock { - printHeader(''); + + if ($IPDBacl{$authuser} !~ /a/) { + printError("You shouldn't have been able to get here. Access denied."); + return; + } my $html; @@ -799,5 +634,8 @@ # Take info on requested IP assignment and see what we can provide. sub confirmAssign { - printHeader(''); + if ($IPDBacl{$authuser} !~ /a/) { + printError("You shouldn't have been able to get here. Access denied."); + return; + } my $cidr; @@ -958,6 +796,9 @@ # Do the work of actually inserting a block in the database. sub insertAssign { + if ($IPDBacl{$authuser} !~ /a/) { + printError("You shouldn't have been able to get here. Access denied."); + return; + } # Some things are done more than once. - printHeader(''); return if !validateInput(); @@ -973,7 +814,7 @@ print qq(

The IP $msg has been allocated to customer $webvar{custid}

); # Notify tech@example.com - mailNotify('tech@example.com',"ADDED: $disp_alloctypes{$webvar{alloctype}} allocation", - "$disp_alloctypes{$webvar{alloctype}} $msg allocated to customer $webvar{custid}\n". - "Description: $webvar{desc}\n\nAllocated by: $authuser\n"); +# mailNotify('tech@example.com',"ADDED: $disp_alloctypes{$webvar{alloctype}} allocation", +# "$disp_alloctypes{$webvar{alloctype}} $msg allocated to customer $webvar{custid}\n". +# "Description: $webvar{desc}\n\nAllocated by: $authuser\n"); } else { print qq(

Username	Add new	Change	Delete	Admin user
$data[0]	). + # Now for the fun bit. We have to pull apart the ACL field and + # output a bunch of checkboxes. + "					". + "". + qq(

$_
Changes to the IPDB
03/10/2005	Finally! Support for "container"/"reserve" netblocks to make tracking superblocks like +209.91.191.0/24 easier. Also supports "dynamically routed DSL netblocks"; ie, +netblock-aligned chunks of static DSL IPs with netblock-ish subnet masks such as +209.91.186.0/25. +
02/09/2005	Pool handling has been cleaned up - all PPP-ish pools (modem, DSL, WiFi) now generate a +full list of IPs rather than reserving the network, gateway, and broadcast IPs necessary on +a "real" subnet. They will also not display this incorrect and useless information. +
01/27/2005

Match on:All +Any +
Exclude?	IP/netblock:
Exclude?	CustID:
Exclude?	Description:
Exclude?	Notes:
Exclude?	Types:	Show all types +$$TYPELIST$$
Exclude?	Cities:	Show all cities +$$CITYLIST$$

Master block to add: (CIDR)

Master block to add: (CIDR)