lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix: Purge of audit events

Browse Source
This commit is contained in:
Laurent Destailleur 2011-11-30 20:18:49 +01:00
parent 70ab87c210
commit 397fa3cee3
3 changed files with 13 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
htdocs/admin/tools/listevents.php
View File

@ -1,5 +1,5 @@
<?php
/* Copyright (C) 2004-2010 Laurent Destailleur <eldy@users.sourceforge.net>
/* Copyright (C) 2004-2011 Laurent Destailleur <eldy@users.sourceforge.net>
* Copyright (C) 2005-2009 Regis Houssin <regis@dolibarr.fr>
*
* This program is free software; you can redistribute it and/or modify
@ -24,8 +24,10 @@
require("../../main.inc.php");
require_once(DOL_DOCUMENT_ROOT.'/core/class/events.class.php');
if (! $user->admin)
accessforbidden();
$action=GETPOST('action');
if (! $user->admin) accessforbidden();
// Security check
if ($user->societe_id > 0)
@ -55,6 +57,7 @@ $search_user = GETPOST("search_user");
$search_desc = GETPOST("search_desc");
$search_ua = GETPOST("search_ua");
/*
* Actions
*/
@ -62,7 +65,7 @@ $search_ua = GETPOST("search_ua");
$now=dol_now();
// Purge audit events
if ($_REQUEST['action'] == 'confirm_purge' && $_REQUEST['confirm'] == 'yes' && $user->admin)
if ($action == 'confirm_purge' && $_REQUEST['confirm'] == 'yes' && $user->admin)
{
$error=0;
@ -72,12 +75,15 @@ if ($_REQUEST['action'] == 'confirm_purge' && $_REQUEST['confirm'] == 'yes' && $
// Delete events
$sql = "DELETE FROM ".MAIN_DB_PREFIX."events";
$sql.= " WHERE entity = ".$conf->entity;
dol_syslog("listevents purge sql=".$sql);
$resql = $db->query($sql);
if (! $resql)
{
$error++;
$mesg='<div class="error">'.$db->lasterror().'</div>';
}
// Add event purge
$text=$langs->trans("SecurityEventsPurged");
$securityevent=new Events($db);
@ -87,6 +93,7 @@ if ($_REQUEST['action'] == 'confirm_purge' && $_REQUEST['confirm'] == 'yes' && $
$result=$securityevent->create($user);
if ($result > 0)
{
$db->commit();
dol_syslog($text, LOG_WARNING);
}
else

1
htdocs/langs/en_US/admin.lang
View File

@ -789,6 +789,7 @@ LogEvents=Security audit events
Audit=Audit
ListEvents=Audit events
ListOfSecurityEvents=List of Dolibarr security events
SecurityEventsPurged=Security events purged
LogEventDesc=You can enable here the logging for Dolibarr security events. Administrators can then see its content via menu <b>System tools - Audit</b>. Warning, this feature can consume a large amount of data in database.
AreaForAdminOnly=Those features can be used by <b>administrator users</b> only.
SystemInfoDesc=System information is miscellaneous technical information you get in read only mode and visible for administrators only.

1
htdocs/langs/fr_FR/admin.lang
View File

@ -797,6 +797,7 @@ LogEvents= Événements d'audit de sécurité
Audit= Audit
ListEvents= Audit événements
ListOfSecurityEvents= Liste des événements de sécurité Dolibarr
SecurityEventsPurged=Evenement de sécurité purgés
LogEventDesc= Vous pouvez activer ici, le traçage des événements d'audit de sécurité. Cet historique est consultable aux administrateurs dans le menu <b>Outils systèmes - Audit</b>. Attention, cette fonctionnalité peut consommer un gros volume de données.
AreaForAdminOnly= Ces fonctions ne sont accessibles qu'à un utilisateur administrateur.
SystemInfoDesc= Les informations systèmes sont des informations techniques diverses accessibles en lecture seule aux administrateurs uniquement.