diff --git a/sql/sql.sql b/sql/sql.sql new file mode 100644 index 0000000..a7c20d3 --- /dev/null +++ b/sql/sql.sql @@ -0,0 +1,32 @@ +#----------------------------------------------- +# Nettoyage des tables dans la base de données +#----------------------------------------------- + +DROP TABLE IF EXISTS alertes; + +#----------------------------------------------- +# Table: alertes +#---------------------------------------------- + +CREATE TABLE alertes ( + id SERIAL PRIMARY KEY, -- Identifiant unique pour chaque alerte + cef_version VARCHAR(10) DEFAULT 'CEF:1', -- Version du format CEF utilisé + date_alerte TIMESTAMP(3) NOT NULL, -- Date et heure de l'alerte avec une précision de millisecondes + agent_severity INT CHECK (agent_severity >= 0 AND agent_severity <= 10), -- Niveau de gravité de l'alerte sur une échelle de 0 à 10 + device_event_class_id VARCHAR(1023), -- Identifiant de la signature permettant d'aider les moteurs de corrélations + device_product VARCHAR(63), -- Nom du produit à l'origine de l'alerte + device_vendor VARCHAR(63), -- Nom du fournisseur ou fabricant du produit + device_version VARCHAR(31), -- Version du produit ou dispositif ayant généré l'alerte + name VARCHAR(512), -- Nom descriptif de l'alerte + -- Champ d'extension du CEF + dst VARCHAR(45), -- Adresse IP de destination impliquée dans l'alerte + src VARCHAR(45), -- Adresse IP source impliquée dans l'alerte + dpt INT, -- Port de destination utilisé pour l'événement ou l'alerte + spt INT, -- Port source de l'événement ou de l'alerte + msg VARCHAR(1023), -- Champ texte pour des notes ou commentaires additionnels concernant l'alerte + proto VARCHAR(10), -- Protocole réseau impliqué (ex : TCP, UDP) + bytesin INT, -- Quantité de bytes (8 bits ici) entrant (cas de flood ou DOS) + bytesout INT, -- Quantité des bytes (8 bits ici) sortants + reason VARCHAR(1023), -- Description de la raison de l'alerte expliquant pourquoi elle a été générée + act VARCHAR(50) -- Action entreprise en réponse à l'alerte (ex : bloqué, alerté uniquement, ...) +); \ No newline at end of file diff --git a/web/class/Alerts.class.php b/web1/class/Alerts.class.php similarity index 100% rename from web/class/Alerts.class.php rename to web1/class/Alerts.class.php diff --git a/web/class/Database.class.php b/web1/class/Database.class.php similarity index 100% rename from web/class/Database.class.php rename to web1/class/Database.class.php diff --git a/web/css/styles.css b/web1/css/styles.css similarity index 100% rename from web/css/styles.css rename to web1/css/styles.css diff --git a/web/css/styles2.css b/web1/css/styles2.css similarity index 100% rename from web/css/styles2.css rename to web1/css/styles2.css diff --git a/web/index.php b/web1/index.php similarity index 100% rename from web/index.php rename to web1/index.php diff --git a/web/tmp.html b/web1/tmp.html similarity index 100% rename from web/tmp.html rename to web1/tmp.html diff --git a/web2/index.php b/web2/index.php new file mode 100644 index 0000000..1c010be --- /dev/null +++ b/web2/index.php @@ -0,0 +1,172 @@ + + + + + + + + + + IDPS visualization + + + + + + + + + + + + + + + + + +
+
+

Alertes systemes

+

meilleur outil de surveillance du monde

+ Alertes +
+
+ +
+
+
+
+

Liste des Attaques

+

veuillez selectionner les filtres de recherche ou parcourez la liste ci-dessous

+ + +
+ +
+ +
+ +
+ +
+ + +
+ +
+
+ + + + + + + + + + + + + + + + + + +
N°DateNom alerteAppareil de détectionAdresse sourceNiveau d'alerte
+ + + + + +
+
+
+
+ + + + + + + + + + \ No newline at end of file diff --git a/web2/js/ajax.js b/web2/js/ajax.js new file mode 100644 index 0000000..ab9cab2 --- /dev/null +++ b/web2/js/ajax.js @@ -0,0 +1,68 @@ +'use strict'; + +//------------------------------------------------------------------------------ +//--- ajaxRequest -------------------------------------------------------------- +//------------------------------------------------------------------------------ +// Perform an Ajax request. +// \param type The type of the request (GET, DELETE, POST, PUT). +// \param url The url with the data. +// \param callback The callback to call where the request is successful. +// \param data The data associated with the request. +function ajaxRequest(type, url, callback, data = null) +{ + let xhr; + + // Create XML HTTP request. + xhr = new XMLHttpRequest(); + if (type == 'GET' && data != null) + url += '?' + data; + xhr.open(type, url); + xhr.setRequestHeader('Content-Type', 'application/x-www-form-urlencoded'); + + // Add the onload function. + xhr.onload = () => + { + switch (xhr.status) + { + case 200: + case 201: + console.log(xhr.responseText); + callback(JSON.parse(xhr.responseText)); + break; + default: + httpErrors(xhr.status); + } + }; + + // Send XML HTTP request. + xhr.send(data); +} + +//------------------------------------------------------------------------------ +//--- httpErrors --------------------------------------------------------------- +//------------------------------------------------------------------------------ +// Display an error message accordingly to an error code. +// \param errorCode The error code (HTTP status for example). +function httpErrors(errorCode) +{ + let messages = + { + 400: 'Requête incorrecte', + 401: 'Authentifiez vous', + 403: 'Accès refusé', + 404: 'Page non trouvée', + 500: 'Erreur interne du serveur', + 503: 'Service indisponible' + }; + + // Display error. + if (errorCode in messages) + { + $('#errors').html('' + messages[errorCode] + ''); + $('#errors').show(); + setTimeout(() => + { + $('#errors').hide(); + }, 5000); + } +} diff --git a/web2/js/tweets.js b/web2/js/tweets.js new file mode 100644 index 0000000..6a825a6 --- /dev/null +++ b/web2/js/tweets.js @@ -0,0 +1,72 @@ +'use strict'; + +let login = 'cir2'; +let currentTitle = 'Liste des tweets'; + +ajaxRequest('GET', 'php/request.php/tweets/', displayTweets); + +$('#all-button').click(() => + { + currentTitle = 'Liste des tweets'; + ajaxRequest('GET', 'php/request.php/tweets/', displayTweets); + } +); + +$('#my-button').click(() => + { + currentTitle = 'Liste de mes tweets'; + ajaxRequest('GET', 'php/request.php/tweets/?login=' + login, displayTweets); + } +); + +$('#tweet-add').submit((event) => + { + event.preventDefault(); + ajaxRequest('POST', 'php/request.php/tweets/', () => + { + ajaxRequest('GET', 'php/request.php/tweets/', displayTweets); + }, 'login=' + login + '&text=' + $('#tweet').val()); + $('#tweet').val(''); + } +); + +$('#tweets').on('click', '.mod', () => + { + ajaxRequest('PUT', 'php/request.php/tweets/' + + $(event.target).closest('.mod').attr('value'), () => + { + ajaxRequest('GET', 'php/request.php/tweets/', displayTweets); + }, 'login=' + login + '&text=' + prompt('Nouveau tweet :')); + } +); +$('#tweets').on('click', '.del', () => + { + console.log('delete'); + ajaxRequest('DELETE', 'php/request.php/tweets/' + + $(event.target).closest('.del').attr('value') +'?login=' + login, () => + { + ajaxRequest('GET', 'php/request.php/tweets/', displayTweets); + } + ); + } +); + +//------------------------------------------------------------------------------ +//--- displayTweets ------------------------------------------------------------ +//------------------------------------------------------------------------------ +// Display tweets. +// \param tweets The tweets data received via the Ajax request. +function displayTweets(tweets) +{ + // Fill tweets. + $('#tweets').html('

' + currentTitle + '

'); + for (let tweet of tweets) + $('#tweets').append('
' + + tweet.login + ' : ' + tweet.text + + '
' + + '' + + '' + + '
'); +} diff --git a/web2/php/constants.php b/web2/php/constants.php new file mode 100644 index 0000000..01c9577 --- /dev/null +++ b/web2/php/constants.php @@ -0,0 +1,7 @@ + diff --git a/web2/php/database.php b/web2/php/database.php new file mode 100644 index 0000000..6fa928b --- /dev/null +++ b/web2/php/database.php @@ -0,0 +1,127 @@ +setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); + } + catch (PDOException $exception) + { + error_log('Connection error: '.$exception->getMessage()); + return false; + } + return $db; + } + + //---------------------------------------------------------------------------- + //--- dbRequestAlertes -------------------------------------------------------- + //---------------------------------------------------------------------------- + // Function to get all alertes + // \param db The connected database. + // \return The list of alertes. + function dbRequestAlerts($db) + { + try + { + $request = 'SELECT * FROM alertes'; + $statement = $db->prepare($request); + $statement->execute(); + $result = $statement->fetchAll(PDO::FETCH_ASSOC); + } + catch (PDOException $exception) + { + error_log('Request error: '.$exception->getMessage()); + return false; + } + return $result; + } + + //---------------------------------------------------------------------------- + //--- dbAddCTweet ------------------------------------------------------------ + //---------------------------------------------------------------------------- + // Add a tweet. + // \param db The connected database. + // \param login The login of the user. + // \param text The tweet to add. + // \return True on success, false otherwise. + function dbAddTweet($db, $login, $text) + { + try + { + $request = 'INSERT INTO tweets(login, text) VALUES(:login, :text)'; + $statement = $db->prepare($request); + $statement->bindParam(':login', $login, PDO::PARAM_STR, 20); + $statement->bindParam(':text', $text, PDO::PARAM_STR, 80); + $statement->execute(); + } + catch (PDOException $exception) + { + error_log('Request error: '.$exception->getMessage()); + return false; + } + return true; + } + + //---------------------------------------------------------------------------- + //--- dbModifyTweet ---------------------------------------------------------- + //---------------------------------------------------------------------------- + // Function to modify a tweet. + // \param db The connected database. + // \param id The id of the tweet to update. + // \param login The login of the user. + // \param text The new tweet. + // \return True on success, false otherwise. + function dbModifyTweet($db, $id, $login, $text) + { + try + { + $request = 'UPDATE tweets SET text=:text WHERE id=:id AND login=:login '; + $statement = $db->prepare($request); + $statement->bindParam(':id', $id, PDO::PARAM_INT); + $statement->bindParam(':login', $login, PDO::PARAM_STR, 20); + $statement->bindParam(':text', $text, PDO::PARAM_STR, 80); + $statement->execute(); + } + catch (PDOException $exception) + { + error_log('Request error: '.$exception->getMessage()); + return false; + } + return true; + } + + //---------------------------------------------------------------------------- + //--- dbDeleteTweet ---------------------------------------------------------- + //---------------------------------------------------------------------------- + // Delete a tweet. + // \param db The connected database. + // \param id The id of the tweet. + // \param login The login of the user. + // \return True on success, false otherwise. + function dbDeleteTweet($db, $id, $login) + { + try + { + $request = 'DELETE FROM tweets WHERE id=:id AND login=:login'; + $statement = $db->prepare($request); + $statement->bindParam(':id', $id, PDO::PARAM_INT); + $statement->bindParam(':login', $login, PDO::PARAM_STR, 20); + $statement->execute(); + } + catch (PDOException $exception) + { + error_log('Request error: '.$exception->getMessage()); + return false; + } + return true; + } +?> diff --git a/web2/php/request.php b/web2/php/request.php new file mode 100644 index 0000000..000664f --- /dev/null +++ b/web2/php/request.php @@ -0,0 +1,46 @@ +