MISP/app/Controller/Component/BlockListComponent.php

<?php

/**
 * create, read, update and delete (CRUD)
 */

class BlocklistComponent extends Component
{
    public $settings = array();
    public $defaultModel = '';

    public $components = array('RestResponse');

    public function index($rest = false, $filters = array())
    {
        if (!empty($filters)) {
            $this->controller->paginate['conditions'] = $filters;
        }
        if ($rest) {
            $blocklist = $this->controller->paginate();
            $blocklist= array();
            foreach ($blocklist as $item) {
                $blocklist[] = $item[$this->controller->defaultModel];
            }
            return $this->RestResponse->viewData($blocklist);
        } else {
            $this->controller->set('response', $this->controller->paginate());
        }
    }

    public function add($rest = false)
    {
        if ($this->controller->request->is('post')) {
            if ($rest) {
                if ($this->controller->response->type() === 'application/json') {
                    $isJson = true;
                    $data = $this->controller->request->input('json_decode', true);
                } else {
                    $data = $this->controller->request->data;
                }
                if (isset($data['request'])) {
                    $data = $data['request'];
                }
            } else {
                $data = $this->controller->request->data;
            }
            if (!isset($data[$this->controller->defaultModel])) {
                $data = [$this->controller->defaultModel => $data];
            }
            if (!isset($data[$this->controller->defaultModel])) {
                throw new InvalidArgumentException(__('Pass a list of uuids via the "uuids" key in the request object.'));
            }
            if (is_array($data[$this->controller->defaultModel]['uuids'])) {
                $uuids = $data[$this->controller->defaultModel]['uuids'];
            } else {
                $uuids = explode(PHP_EOL, trim($data[$this->controller->defaultModel]['uuids']));
            }
            $successes = array();
            $fails = array();
            foreach ($uuids as $uuid) {
                $uuid = trim($uuid);
                if (strlen($uuid) == 36) {
                    $this->controller->{$this->controller->defaultModel}->create();
                    $object = array();
                    foreach ($this->controller->{$this->controller->defaultModel}->blocklistFields as $f) {
                        if ($f === $this->controller->{$this->controller->defaultModel}->blocklistTarget . '_uuid') {
                            $object[$f] = $uuid;
                        } else {
                            $object[$f] = !empty($data[$this->controller->defaultModel][$f]) ? $data[$this->controller->defaultModel][$f] : '';
                        }
                    }
                    if ($this->controller->{$this->controller->defaultModel}->save($object)) {
                        $successes[] = $uuid;
                    } else {
                        $fails[] = $uuid;
                    }
                } else {
                    $fails[] = $uuid;
                }
            }
            $message = sprintf(__('Done. Added %d new entries to the blocklist. %d entries could not be saved.'), count($successes), count($fails));
            if ($rest) {
                $result = [
                    'result' => [
                        'successes' => $successes,
                        'fails' => $fails
                    ],
                    'message' => $message
                ];
                return $this->RestResponse->viewData($result);
            } else {
                $this->controller->Session->setFlash($message);
                $this->controller->redirect(array('action' => 'index'));
            }
        }
    }

    public function edit($rest = false, $id)
    {
        if (Validation::uuid($id)) {
            $blockEntry = $this->controller->{$this->controller->defaultModel}->find('first', [
                'conditions' => array(
                    $this->controller->{$this->controller->defaultModel}->blocklistTarget . '_uuid' => $id
                )
            ]);
        } else {
            $blockEntry = $this->controller->{$this->controller->defaultModel}->find('first', array('conditions' => array('id' => $id)));
        }
        if (empty($blockEntry)) {
            throw new NotFoundException('Blocklist item not found.');
        }
        $this->controller->set('blockEntry', $blockEntry);
        if ($this->controller->request->is('post')) {
            if ($rest) {
                if ($this->controller->response->type() === 'application/json') {
                    $isJson = true;
                    $data = $this->controller->request->input('json_decode', true);
                } else {
                    $data = $this->controller->request->data;
                }
                if (isset($data['request'])) {
                    $data = $data['request'];
                }
                if (!isset($data[$this->controller->defaultModel])) {
                    $data = [$this->controller->defaultModel => $data];
                }
            } else {
                $data = $this->controller->request->data;
            }
            $fields = $this->controller->{$this->controller->defaultModel}->blocklistFields;
            foreach ($fields as $f) {
                if ($f == 'uuid') {
                    continue;
                }
                if (isset($data[$this->controller->defaultModel][$f])) {
                    $blockEntry[$this->controller->defaultModel][$f] = $data[$this->controller->defaultModel][$f];
                }
            }
            if ($this->controller->{$this->controller->defaultModel}->save($blockEntry)) {
                if ($rest) {
                    return $this->RestResponse->viewData(
                        $this->controller->{$this->controller->defaultModel}->find('first', [
                            'recursive' => -1,
                            'conditions' => [
                                'id' => $this->controller->{$this->controller->defaultModel}->id
                            ]
                        ])
                    );
                } else {
                    $this->controller->Session->setFlash(__('Blocklist item added.'));
                    $this->controller->redirect(array('action' => 'index'));
                }
            } else {
                if ($rest) {
                    throw new MethodNotAllowedException('Could not save the blocklist item.');
                } else {
                    $this->controller->Session->setFlash(__('Could not save the blocklist item'));
                    $this->controller->redirect(array('action' => 'index'));
                }
            }
        }
    }

    public function delete($rest = false, $id)
    {
        if (Validation::uuid($id)) {
            $blockEntry = $this->controller->{$this->controller->defaultModel}->find('first', [
                'conditions' => array(
                    $this->controller->{$this->controller->defaultModel}->blocklistTarget . '_uuid' => $id
                )
            ]);
        } else {
            $blockEntry = $this->controller->{$this->controller->defaultModel}->find('first', array('conditions' => array('id' => $id)));
        }
        if (empty($blockEntry)) {
            throw new NotFoundException(__('Invalid blocklist entry'));
        }

        if ($this->controller->{$this->controller->defaultModel}->delete($blockEntry[$this->controller->defaultModel]['id'])) {
            $message = __('Blocklist entry removed');
            if ($rest) {
                return $this->RestResponse->saveSuccessResponse($this->controller->defaultModel, 'delete', $id, false, $message);
            }
            $this->controller->Flash->success($message);
        } else {
            $message = __('Could not remove the blocklist entry');
            if ($rest) {
                return $this->RestResponse->saveFailResponse($this->controller->defaultModel, 'delete', $id, $message);
            }
            $this->controller->error($message);
        }
        $this->controller->redirect(array('action' => 'index'));
    }

    public $controller;

    public function initialize(Controller $controller)
    {
        $this->controller = $controller;
    }

    public function startup(Controller $controller)
    {
        $this->controller = $controller;
    }

    public function __construct(ComponentCollection $collection, $settings = array())
    {
        $this->settings = Set::merge($this->settings, $settings);
        parent::__construct($collection, $this->settings);
    }
}