Commit Graph

592 Commits (e577d587fd137633bf9b427bc8e5cc2994761f69)

Author SHA1 Message Date
iglocska 96170dae29 Fixed an issue with siteadmin contact e-mails resetting passwords of non existing users
- a site admin could issue a password reset to a non-existing user
2013-07-25 14:45:34 +02:00
Christophe Vandeplas bd61f73bd2 fixed a newly created bug in memberslist 2013-07-18 12:18:10 +02:00
iglocska 7486f478e0 Merge branch 'develop' of https://github.com/MISP/MISP into develop 2013-07-18 11:33:11 +02:00
iglocska 7fb1e6f70e Some bugs fixed
- Resetting the auth key for a user that doesn't exist created an empty
user 

- change_pw showed an admin menu on the side

- rerouting after an incorrect auth request fixed (users/index doesn't
exist)

- temporarily disabled the redirect after login
2013-07-18 11:32:26 +02:00
Christophe Vandeplas 4bca5b9e30 memberslist based on orgc, is more logic to reflect the contributions 2013-07-18 11:14:11 +02:00
Christophe Vandeplas 00d8d24434 minor NIDS export performance improvement 2013-07-18 11:04:00 +02:00
iglocska 58f72ab4d1 Merge branch 'develop' of https://github.com/MISP/MISP into develop 2013-07-18 10:58:54 +02:00
iglocska dde52f124a Initial refactoring of the event view / xml exports
- event view and xml exports all use __fetchEvent now

- unified the permission checks

- same output for event/id.xml and the xml exports
2013-07-18 10:58:10 +02:00
Christophe Vandeplas 8e8f41ab13 Fixes in server push 2013-07-17 14:27:51 +02:00
Christophe Vandeplas 2424cbbf26 Server push lower memory footprint solving OoM problem.
Enabled per-id push like pull
2013-07-17 14:06:24 +02:00
Christophe Vandeplas e13c2e883c fixing problems in pull with distribution data validation 2013-07-16 15:28:04 +02:00
iglocska 30d6bebcf8 Change of domain type in IOC Export fixes #134 2013-07-16 08:45:36 +02:00
iglocska 85a7e8c97c OpenIOC issue
- Attribute type domain exported into the wrong ioc term.
2013-07-15 17:23:53 +02:00
iglocska 1f5aa5420f Security issue fixed with UsersController
- users could view other user profiles

- users could view other user profiles through edit user
2013-07-15 16:46:44 +02:00
iglocska 32a6c61938 Removed quotation marks from csv export
- Not needed, linebreaks are removed anyway
2013-07-15 11:35:15 +02:00
Christophe Vandeplas ca30cf006f Import ThreatConnect attributes into event, see issue #119 2013-07-15 09:10:18 +02:00
Christophe Vandeplas 130f470c90 Revert "fix bug in removing remote attributes if push is not enabled"
This reverts commit c4d5344153.
2013-07-13 08:22:37 +02:00
Christophe Vandeplas c4d5344153 fix bug in removing remote attributes if push is not enabled 2013-07-13 08:21:42 +02:00
Christophe Vandeplas a0dabb83dc cleanup: hidden functions to _function and removed unnecessary function 2013-07-13 07:39:46 +02:00
Christophe Vandeplas 2a8efc5770 minor admin tools improvements 2013-07-12 15:35:00 +02:00
Christophe Vandeplas e328dc948e huge performance increase in generateCount 2013-07-12 14:55:56 +02:00
Christophe Vandeplas b314a04e58 fixes bug introduced in commit 2334599f3d 2013-07-12 12:59:10 +02:00
Christophe Vandeplas 66ce874b99 do not change 'info' field upon pull (was: Imported from $url) 2013-07-12 10:34:59 +02:00
Christophe Vandeplas 2334599f3d redirects to filtered events page upon delete 2013-07-12 09:36:04 +02:00
iglocska 3e9a967188 Removal of some references to the old private flag 2013-07-11 17:25:47 +02:00
iglocska 53675fe3a3 Some UI changes and reattached the regexp for the admin validation tool
- org only events have a redish background in the event index

- org only events and attributes have their distribution level marked in
red
2013-07-11 16:38:39 +02:00
Christophe Vandeplas ff2f08f60d fixes bug in previous commit. 2013-07-11 14:28:12 +02:00
Christophe Vandeplas 7949181fbc improved password generation algorithm in reset password 2013-07-11 14:26:28 +02:00
iglocska 6818d55a0d Merge branch 'develop' of https://github.com/MISP/MISP into develop 2013-07-11 13:44:25 +02:00
iglocska 7c04a116ac First refactoring of the regexp 2013-07-11 13:43:36 +02:00
Christophe Vandeplas 7cda2a5dc2 minor change in reportValidationIssueAttributes() 2013-07-11 12:47:46 +02:00
iglocska 0b807a2666 Some cleanup
- removal of references to the old blacklist
2013-07-11 10:47:44 +02:00
iglocska 23017fd9a8 Change to the GFI import and the attachment downloads
- GFI import issue fixed with attribute ID 1 not existing causing the
import to fail for several attributes

- GFI import change: registry keys with binary value are now artifacts
dropped instead of persistance mechanism

- GFI import change: files with size of 0 will be omitted

- file attachment download change: moved away from the deprecated media
view in favour of cakeresponse->file()
2013-07-10 17:31:18 +02:00
iglocska 1f411c74cf Some UI fixes related to the debug/nondebug alignment 2013-07-09 10:05:19 +02:00
iglocska 0104f7956b Continued rework of the regexp
- Regular expressions are now only checked for attributes

- Regular expressions are now defined and checked on a type by type
basis, with the setting "ALL" affecting all attributes

- creation / deletion of several attributes in one edit to accommodate
for several checked type options

- perform on all admin option now only saves attributes that actually
get changed by the regexp, making the function usable again for larger
databases

- Some feedback on what got changed during a perform on all

- UI changes in the index / regexp add / edit views to reflect the type
sensitivity changes
2013-07-08 17:15:04 +02:00
iglocska 7e6f73a776 Removal of the blacklist
- Since regexp can be used to blacklist things, there's no need to have
two separate features that accomplish the same thing

- Add a regexp named /1.1.1.1/ with nothing as replacement and it will
behave the same as adding a blacklist for 1.1.1.1 in the old system.
2013-07-05 14:34:32 +02:00
iglocska 10f895e641 bug in a previous commit
- left in some debug used to escape php encryption during testing
2013-07-05 11:12:55 +02:00
iglocska eeac31bee8 Regexp changes, UI changes
- first cleanup of regexp

- some changes left off from the UI changes that were not in the views
themselves
2013-07-04 15:45:11 +02:00
iglocska abde2a47af Several fixes
- Fixed the search pagination beyond the first page

- Hard coded routing of the menues in the global actions area
2013-06-28 14:28:58 +02:00
iglocska 5948a7c329 Several copy paste failures fixed in the previous commit
- /facepalm
2013-06-27 17:57:33 +02:00
iglocska 8cdf97ff66 ACL checks changed
- until now checkAction was used to check permissions of a user

- but since all of the role permissions are checked beforefilter in
appcontroller and saved into a public array, doing a lookup of the
array saves an SQL call for each permission check.
2013-06-27 17:53:36 +02:00
iglocska 7cd742dce4 Fix to users not being able to edit attributes 2013-06-27 16:43:03 +02:00
iglocska f730661979 Small change to the xml search download 2013-06-27 14:11:58 +02:00
iglocska 3812d02309 Search result downloads (CSV format)
- added the button for the CSV download
- fixed a bug with the csv search result downloader blocking non IOC
results even if the search terms did not specify IOCs only.
2013-06-27 13:53:49 +02:00
iglocska c604241487 Bugfix for the creation of several attributes with the same UUID
- SHA256 and SHA1 hash attributes that get auto-generated on malware
sample upload had the same hash as the filename|md5. Fixed.
2013-06-26 17:25:38 +02:00
iglocska 39e99554c9 Views updated to include CSV in the menues
- CSV and also IOC downloads on events are now hidden if the event is
not published
2013-06-26 17:20:56 +02:00
iglocska 5e9d19196d Update to the exports
- export page updated to include the CSV export

- some changes to the CSV export and incorrect handling of data for
admins
2013-06-26 16:58:20 +02:00
iglocska 1283451efc More changes to the whitelists, exports 2013-06-26 16:30:37 +02:00
iglocska e87c28863e Firther work on the exports
- Some refactoring of the whitelist checks
- tighter rules for published / to_ids on certain exports
- attribute search now has the IOC checkbox
2013-06-26 15:31:28 +02:00
iglocska 776ef3ae07 Changes to export validation, CSV export, Whitelist redesign
- CSV export for individual events, all events, search results
- Whitelists are now preg_matches instead of simple string matches
- whitelist checks are to be applied on almost all exports
(implementation in progress)
- the exception will be the search result exports, if the (to be
implemented) to_ids only checkbox isn't checked
2013-06-26 14:48:25 +02:00