mirror of https://github.com/MISP/MISP
83 lines
2.5 KiB
PHP
83 lines
2.5 KiB
PHP
<?php
|
|
App::uses('AppModel', 'Model');
|
|
|
|
class EventBlocklist extends AppModel
|
|
{
|
|
public $useTable = 'event_blocklists';
|
|
|
|
public $recursive = -1;
|
|
|
|
public $actsAs = array(
|
|
'AuditLog',
|
|
'SysLogLogable.SysLogLogable' => array( // TODO Audit, logable
|
|
'userModel' => 'User',
|
|
'userKey' => 'user_id',
|
|
'change' => 'full'),
|
|
'Containable',
|
|
);
|
|
|
|
public $blocklistFields = array('event_uuid', 'comment', 'event_info', 'event_orgc');
|
|
|
|
public $blocklistTarget = 'event';
|
|
|
|
public $validate = array(
|
|
'event_uuid' => array(
|
|
'unique' => array(
|
|
'rule' => 'isUnique',
|
|
'message' => 'Event already blocklisted.'
|
|
),
|
|
'uuid' => array(
|
|
'rule' => 'uuid',
|
|
'message' => 'Please provide a valid RFC 4122 UUID'
|
|
),
|
|
)
|
|
);
|
|
|
|
public function beforeValidate($options = array())
|
|
{
|
|
parent::beforeValidate();
|
|
$schema = $this->schema();
|
|
if (!isset($schema['event_info'])) {
|
|
$this->updateDatabase('addEventBlocklistsContext');
|
|
}
|
|
if (empty($this->data['EventBlocklist']['id'])) {
|
|
$this->data['EventBlocklist']['date_created'] = date('Y-m-d H:i:s');
|
|
}
|
|
if (empty($this->data['EventBlocklist']['comment'])) {
|
|
$this->data['EventBlocklist']['comment'] = '';
|
|
}
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* @param array $eventArray
|
|
*/
|
|
public function removeBlockedEvents(array &$eventArray)
|
|
{
|
|
// When event array contains a lot events, it is more efficient to fetch all blocked events
|
|
$conditions = (count($eventArray) > 10000) ? [] : ['EventBlocklist.event_uuid' => array_column($eventArray, 'uuid')];
|
|
$blocklistHits = $this->find('column', [
|
|
'conditions' => $conditions,
|
|
'fields' => ['EventBlocklist.event_uuid'],
|
|
]);
|
|
if (empty($blocklistHits)) {
|
|
return;
|
|
}
|
|
$blocklistHits = array_flip($blocklistHits);
|
|
foreach ($eventArray as $k => $event) {
|
|
if (isset($blocklistHits[$event['uuid']])) {
|
|
unset($eventArray[$k]);
|
|
}
|
|
}
|
|
}
|
|
|
|
/**
|
|
* @param string $eventUuid
|
|
* @return bool
|
|
*/
|
|
public function isBlocked($eventUuid)
|
|
{
|
|
return $this->hasAny(['event_uuid' => $eventUuid]);
|
|
}
|
|
}
|