Commit Graph

151 Commits (2.4)

Author SHA1 Message Date
iglocska 4e5fcbcbc2 fix: [UI] Contributor list fixed 2019-02-28 08:30:17 +01:00
Christophe Vandeplas 67efc70bf5 fix: [style] consistent space indentation 2019-02-10 13:08:55 +01:00
Hannah Ward c883a7b6d6
new: Add upload/download for attachments 2018-08-15 14:07:44 +01:00
iglocska a81894f14c chg: [CS] Changed to PSR-2
- to make contributions easier, adopted PSR-2
- used php-cs-fixer to rework the style
- *sniff sniff* Goodbye tab indentation
2018-07-19 11:48:22 +02:00
iglocska 025b2a4e5d fix: valueNotEmpty() switched to stringNotEmpty for the attribute value validation
- Core 1+2 of the new laptop
2018-04-09 13:58:24 +02:00
iglocska 2e24f86bca fix: Further fixes to the new zmq system 2017-10-27 12:16:57 +02:00
Kevin Allix 2248846706 attachments_dir: Default value queried through a function to workaround PHP inability to have anything useful stored in a class property 2017-07-10 12:42:23 +02:00
Kevin Allix 1ea33e811a Add an optional setting attachments_dir, and adapt existing code to use that setting 2017-07-07 17:29:13 +02:00
iglocska 1e61074115 fix: Relaxed UUID4 requirement for UUID validation
- we shouldn't enforce anything beyond the basic format
2017-06-12 22:39:02 +02:00
Ángel González 620bb6dad0 Change feedback about email notification on sending proposals
Move from a “Failed for at least one recipient” warning notification
to warn when it was not sent to anyone, which is more interesting for
the user sending the proposal.

Fixes #2158
2017-05-05 01:26:12 +02:00
iglocska 59c1db5312 fix: Fixed an issue where a proposal not having an assigned organisation broke the synchronisation on a pull 2017-04-13 21:51:20 +02:00
iglocska c603607cd0 fix: Added default value to proposal_to_delete 2017-03-06 09:57:32 +01:00
iglocska 4801b47a8a fix: On newer MySQL versions proposing a deletion to an attribute failed, fixes #1741 2016-12-09 09:26:58 +01:00
Iglocska 12c3acede2 fix: Don't correlate shadow attributes to attributes in the same event 2016-10-21 13:55:10 +02:00
Andreas Ziegler 25e52a6786 chg: remove some references to variables 2016-09-15 17:08:58 +02:00
iglocska 822b0bf8fa chg: Cleanup of the controllers and models
- removed incorrect, useless boiler plate comments
- kept useful comments intact
- added some missing line breaks to make the codebase a bit more uniform
- removed some obviously obsolete TODO comments
2016-08-25 11:38:37 +02:00
Andreas Ziegler fb655c2ff9 chg: use 1/0 not true/false for conditions & other boolean sqlquery elements 2016-08-17 18:52:22 +02:00
iglocska 7b6604de5b chg: Added the tracking to all queued jobs 2016-08-15 16:30:37 +02:00
Iglocska f2e99cfbb9 fix: Allow correlations between a proposal and attributes in the same event 2016-07-19 15:38:47 +02:00
Andreas Ziegler dd30621155 chg: use CASE WHEN instead of IF in $virtualFields 2016-07-11 21:26:25 +02:00
Andreas Ziegler ff7a7de938 chg: use 1/0 not true/false for conditions & other boolean sqlquery elements 2016-07-11 21:26:16 +02:00
Iglocska 9522c96d54 Revert "Revert "chg: remove obsolete uuid() wrapper""
This reverts commit bae6eadfe7.
2016-07-11 00:59:47 +02:00
Iglocska bae6eadfe7 Revert "chg: remove obsolete uuid() wrapper"
This reverts commit 77ca0f8dd4.
2016-07-08 14:50:00 +02:00
Andreas Ziegler 81ab0774f5 fix: use different variable name in sub-loop 2016-07-07 15:38:27 +02:00
Andreas Ziegler 77ca0f8dd4 chg: remove obsolete uuid() wrapper 2016-07-07 15:13:16 +02:00
Andreas Ziegler da4d005cc6 chg: remove obsolete upload function from ShadowAttribute 2016-06-22 01:16:43 +02:00
Andreas Ziegler 89e8307c1a chg: remove some obsolete FIXME notes
the lines have been checked, only secure values are used as part of filenames and paths
2016-06-20 22:30:57 +02:00
Andreas Ziegler 4dd5df53c8 Merge pull request #1255 from rotanid/bugfix
fix: case-insensitive functions calls
2016-06-12 05:41:05 +02:00
Andreas Ziegler 5a701e7ded fix: case-insensitive functions calls 2016-06-12 05:33:34 +02:00
Andreas Ziegler 03f71dc213 chg: use escapeshellarg() instead of addslashes() with exec() 2016-06-12 04:43:05 +02:00
Iglocska 6275e4fcd4 fix: reverted the change from addslashes -> escapeshellargs. Will revisit the reason it was causing the uploads to fail at a later point in time 2016-06-09 15:02:10 +02:00
Andreas Ziegler f6948a83a4 chg: use escapeshellarg() instead of addslashes() with exec() 2016-06-06 15:48:01 +02:00
Andras Iklody fa8c66f6a6 Merge pull request #1218 from rotanid/newlines
chg: add newline character before EOF to non-minified (text-)files
2016-06-06 10:21:15 +02:00
Andreas Ziegler 1d06f25b38 chg: add newline character before EOF to non-minified (text-)files 2016-06-06 10:09:55 +02:00
Andras Iklody 97772c3cee Merge pull request #1217 from rotanid/zip-exec-error-handling
Zip exec error handling
2016-06-06 09:43:45 +02:00
Andreas Ziegler 8cdbafa4a5 chg: error handling after zip execution 2016-06-06 09:38:52 +02:00
Andreas Ziegler 629e8ee7b9 chg: remove comment: there is no exec wrapper in cakephp 2016-06-06 09:35:34 +02:00
Andreas Ziegler 0117555a99 chg: remove handling of unsupported OS Windows 2016-06-06 09:14:34 +02:00
Andras Iklody ca057e877b Merge pull request #1207 from rotanid/semicolon
remove obsolete semicolon after closing curly bracket
2016-06-04 09:17:56 +02:00
Andreas Ziegler 81d197ed16 remove obsolete semicolon after closing curly bracket 2016-06-04 02:21:23 +02:00
Andreas Ziegler 0fe692c56a remove whitespace at end of line 2016-06-04 01:10:45 +02:00
Andreas Ziegler 898ea1d97c remove whitespace (space/tab) from empty lines 2016-06-04 01:08:16 +02:00
Andreas Ziegler 8a9ffc1f9b remove obsolete space from: File ( 2016-05-31 18:03:59 +02:00
Andreas Ziegler dc0974a55b misc cleanup 2016-05-21 05:10:49 +02:00
Andras Iklody 6d068e4928 Merge pull request #1151 from rotanid/filechecks
small change to file checks
2016-05-20 17:05:27 +02:00
Andreas Ziegler e21fa21de8 small change to file checks, use readable() instead of exists() 2016-05-20 16:57:34 +02:00
Andreas Ziegler 9db0777533 improve some text passages 2016-05-20 16:46:06 +02:00
Andreas Ziegler 7ae4c37f0b progressive removal of commented out if-statements 2016-05-20 00:48:54 +02:00
iglocska 73375042e6 Merge branch '2.4' of https://github.com/MISP/MISP into 2.4 2016-05-13 20:47:10 +02:00
iglocska 9434a2364f fix: Fixes to issues with MYSQL >= 5.7 2016-05-13 20:44:16 +02:00
Iglocska b75cfb842b chg: Prevent attribute edit on deleted attributes, prevent proposal correlation on deleted attributes 2016-05-11 10:38:35 +02:00
devnull- bd6f5f8b20 Add 'certif_public' in the fields 2016-04-05 18:01:50 +02:00
Iglocska daeaee6483 Merge branch '2.4' into feature/enrichment
Conflicts:
	app/Model/Event.php
2016-03-19 16:55:42 +01:00
Iglocska d66a43aad1 Set proposal's deleted field to 0 if nothing is set before saving, fixes #988 2016-03-09 14:34:35 +01:00
Iglocska d111a9dc8d Fixed an issue where a proposal correlation would fail 2016-02-23 14:59:59 +01:00
Iglocska 70eebafa9f Fixed an issue where a proposal correlation would fail 2016-02-23 14:51:50 +01:00
Iglocska 2a2aaa9d1b Fix to setting the job progress before initialising the model when correlating proposals 2016-02-17 14:51:17 +01:00
Iglocska 926a5fabeb Fixed a copy paste fail 2016-02-17 14:49:38 +01:00
Iglocska 1ba8d1c1f0 Added correlations on a proposal level
- tied into automatic datamodel updates
- correlation is one way only (from proposal to attribute)
- proposals don't correlate with one another

- all distribution rules are adhered to
- further improvements on the upgrade mechanism pipeline
2016-02-17 14:43:33 +01:00
Iglocska d6c0b6d853 Fixes to several permission issues with the e-mailer
- contact e-mail recipients were incorrectly set resulting in the e-mails landing at the wrong recipient
- disabled users were not excluded from certain e-mails
2016-02-02 15:30:23 +01:00
Iglocska 2566d49278 Fix to the Proposal alerts not going out to users after one has failed 2016-01-29 14:28:42 +01:00
Iglocska a9c07371ca Fixes to the proposal system
- proposals were not synchronised during pulls due to a bug
  - affects both 2.3 and 2.4, the bug comes from the switch to json
  - missing JSON view for proposal interface
  - Also, 2.4->2.4 the organisation objects were incorrectly ommited from the sync
  - Fixes:
    - reverted back to XML for the old style proposal exchange
    - 2.3->2.4 is now fixed
    - 2.4->2.4 below 2.4.7 version will still not synchronise proposals on pull

- Proposal pull reworked
  - requires 2.4.7 on both ends or higher
  - proposals are now synced in one go
  - massive increase in speed and reduction of log entries

- Proposal e-mailing reworked
  - tied into the new 2.4 e-mailer, which was left out on 2.4's release by accident
  - triggers correctly now when a proposal is added (also on pull)
2016-01-14 02:46:10 +01:00
iglocska fea225c409 Rework of the contributor field, some MYSQL.sql tweaks
- added indeces to the MYSQL.sql file
- contributors now looks for shadow attributes instead of log entries (should make the event view much faster and resolve some timeout issues on sync when the log is massive)
2015-12-27 19:00:35 +01:00
Iglocska 5dbbe84069 Merge branch 'master' into 2.4-beta
Conflicts:
	VERSION.json
	app/Controller/EventsController.php
	app/Controller/ShadowAttributesController.php
	app/Model/Event.php
	app/View/Elements/side_menu.ctp
2015-11-30 09:37:22 +01:00
iglocska b30bfab0a5 Delete proposal attachment if the proposal was accepted / discarded
- there is no need to keep retransfering the actual attached file if all we want to convey is that the proposal is gone.
2015-11-27 09:16:17 +01:00
iglocska 91c4f67ebd Fix to an issue where a proposal with an attachment could not be correctly accepted 2015-11-27 08:49:13 +01:00
Iglocska 7a686a2718 Merge branch 'master' into 2.4-beta
Also, reworked a lot of remaining distribution checks not handled by the main fetch methods

Conflicts:
	VERSION.json
	app/Controller/AttributesController.php
	app/Controller/ShadowAttributesController.php
	app/View/ShadowAttributes/add.ctp
	app/View/ShadowAttributes/edit.ctp
2015-10-30 13:39:12 +01:00
iglocska ef1d3949e7 Merge branch 'master' into feature/sg
Conflicts:
	VERSION.json
	app/Controller/ShadowAttributesController.php
	app/Lib/Tools/JSONConverterTool.php
	app/Lib/Tools/XMLConverterTool.php
	app/Model/User.php
	app/View/Elements/eventattribute.ctp
2015-10-22 09:59:00 +02:00
iglocska 6fa27d659a Reverted change in proposal file storage path that wasn't needed 2015-10-22 09:51:31 +02:00
iglocska 61e865956b Fixes to several issues, fixes #693
- Fixed a critical bug in the XML export
  - As of recently XML exports include relations as they were missing before
  - the sanitisation of the event info field in related attributes was incorrectly sanitized of unicode characters
  - this can lead to the XML export breaking and also for affected events to be blocked from synchronisation

- Proposal fixes
  - fixed an invalid uuid generation that lead to an exception
  - fixed the attachments for proposals still using the old attachment system that disallows most filenames
  - added the automatic creation of hashes for attachment proposals
2015-10-21 23:44:07 +02:00
Iglocska 044996bdb5 New feature: Proposal to delete attribute, fixes #315
- Users can now propose a deletion to an attribute
  - also tied into the mass accept mechanism
  - new UI elements to go along with this

- Code refactoring for category list retrievals
  - Until now, several methods got the list of categories from the validation code
  - Was awkward with a fake empty element that had to be removed
  - altered the validation code to read the categoryDefinitions array instead
2015-10-16 23:49:04 +02:00
Iglocska 328c666e3a Merge branch 'master' into feature/sg
Merging all the new changes from master

Conflicts:
	VERSION.json
	app/Console/Command/AdminShell.php
	app/Controller/AttributesController.php
	app/Controller/EventsController.php
	app/Model/Attribute.php
	app/Model/Event.php
	app/Model/Log.php
	app/Model/Server.php
	app/Model/User.php
	app/View/Elements/side_menu.ctp
	app/View/Pages/administration.ctp
	app/View/Users/admin_index.ctp
2015-10-12 09:41:20 +02:00
Iglocska dc638adac2 Upgrade to CakePHP 2.7, fixes #684
- cakephp submodule updated to 2.7
- make sure that you update your instance!

- not updating will not break compatibility
2015-10-09 15:59:25 +02:00
iglocska 656a391223 Progress on the sync
- pull from 2.3 -> 2.4 should work correctly now
2015-09-21 14:55:40 +02:00
Iglocska 038ccd99bd Work on the new attribute types 2015-07-06 18:19:51 +02:00
Iglocska 28069a0a0f Further work and some cleanup
- decision to be revised: exports don't expose Sharing groups / org uuids to users unless they are admin (for the future: at least sync users have to be added for the new sync)
2015-04-13 16:20:21 +02:00
iglocska 6763159e87 Security fix
- filenames are now enclosed by quotes instead of double quotes while executing the zip command via exec
2015-03-10 10:58:15 +01:00
iglocska 504527d36b Fixes to the proposal ajax mechanism for newer cakephp versions 2014-10-15 15:39:28 +02:00
iglocska bd6b206ac5 Further work on the sync
- changed the pull implementation for proposals
2014-08-14 11:33:33 +02:00
iglocska 0363a251e2 Merge branch 'hotfix-2.2.35' into feature/proposalfix 2014-08-13 16:14:48 +02:00
iglocska cf3809ef74 Further work on the previous patch 2014-08-13 16:13:38 +02:00
iglocska 76fec60fdc Merge branch 'hotfix-2.2.35' into feature/proposalfix 2014-08-13 15:50:17 +02:00
iglocska 97eba22b46 Fix to the previous commit 2014-08-13 15:35:22 +02:00
iglocska 26a4f97adb Proposal validation now calls the Attribute validation method instead of using the (incorrect) duplication in ShadowAttribute 2014-08-13 15:24:22 +02:00
iglocska d0e121846c Missing validation for http-method in Shadow-Attributes 2014-08-13 15:21:16 +02:00
iglocska 9799c1d9dd More work on the sync fix 2014-08-12 17:25:09 +02:00
iglocska 99c04afa85 First round of fixes 2014-08-11 15:11:57 +02:00
iglocska c5644e5757 Some UI changes and other minor changes
- images updated in user manual

- fixed validation issues with named pipe (at the moment it's very loose)

- Fixed an issue with shadow attriubutes not showing for events that have no attributes

- some minor UI changes to make MISP a bit prettier
2014-03-06 17:21:57 +01:00
iglocska d19398999d SHA256 based shadowattribute validation added
- it was missing before
2014-03-04 10:23:52 +01:00
iglocska 2740da9094 Changes to the log system
- View Event history now shows the logo of the org whose action triggered the log entry
- View Event History now shows different fields than before
- Proposals now logged
- Accepting / Discarding a proposal now doesn't create junk edit / delete entries as before.
- Creators of an event can now see all of the log entries altering an event in the event history log. This includes deleted events.
2014-01-28 16:27:58 +01:00
iglocska 50096504f6 Small change to CVE notation fixes #186 2014-01-14 10:38:16 +01:00
Chris Clark a6999597f1 Tweak to allow IOC Export of events you don't own but are shared
Conflicts:
	app/Controller/Component/IOCExportComponent.php
2014-01-09 10:35:25 +01:00
iglocska df40448be0 post merge changes
- some changes to remove strict messages caused by an update to cakephp

- added missing changes to the sql files - all changes from the merge are reflected in ROLECHANGE.sql, import that to upgrade your instance!
2013-11-06 10:35:51 +01:00
Alexandre Dulaunoy 5f70af34b0 Typo fixed (missing comma) between 2 attributes 2013-09-05 11:50:14 +02:00
Alexandre Dulaunoy e8f37f6480 New attributes added to the shadow attributes
sha256, http-method, named-pipe and mutex added to the
shadow attributes. Fixing #170

This is not solving the core issue of having duplicate
attributes declaration in MISP but this is fixing the
consistency issue between attributes and shadow attributes.
2013-09-04 16:24:56 +02:00
iglocska 070c3664c2 Two files left off 2013-09-03 15:32:12 +02:00
iglocska 7e6f73a776 Removal of the blacklist
- Since regexp can be used to blacklist things, there's no need to have
two separate features that accomplish the same thing

- Add a regexp named /1.1.1.1/ with nothing as replacement and it will
behave the same as adding a blacklist for 1.1.1.1 in the old system.
2013-07-05 14:34:32 +02:00
iglocska 0b834464ac Changes to the event view
- reworked the way events are loaded and reloaded to check for
privileges
2013-06-03 17:23:34 +02:00
iglocska 5522578f68 Update to the shadow attributes
- UI changes
- changed the relationship between shadowattributes and events to be
hasMany
2013-06-03 16:25:43 +02:00
Andras Iklody b98818ebfb Small errors with the merge corrected
- some errors managed to slip through during the merge, should be fixed
2013-04-25 15:37:49 +02:00