<?php namespace App\Http\Controllers\Admin; use App\Http\Controllers\Controller; use App\Models\Node; use App\Models\Rule; use App\Models\RuleGroup; use App\Models\RuleGroupNode; use App\Models\RuleLog; use Exception; use Illuminate\Http\JsonResponse; use Illuminate\Http\Request; use Redirect; use Response; use Validator; class RuleController extends Controller { // 审计规则列表 public function ruleList(Request $request): \Illuminate\Http\Response { $type = $request->input('type'); $query = Rule::query(); if($type){ $query->whereType($type); } $view['rules'] = $query->paginate(15)->appends($request->except('page')); return Response::view('admin.rule.ruleList', $view); } // 添加审计规则 public function addRule(Request $request): ?JsonResponse { $validator = Validator::make($request->all(), [ 'type' => 'required|between:1,4', 'name' => 'required', 'pattern' => 'required', ]); if($validator->fails()){ return Response::json(['status' => 'fail', 'message' => $validator->errors()->all()]); } $obj = new Rule(); $obj->type = $request->input('type'); $obj->name = $request->input('name'); $obj->pattern = $request->input('pattern'); $obj->save(); if($obj->id){ return Response::json(['status' => 'success', 'message' => '提交成功']); } return Response::json(['status' => 'fail', 'message' => '操作失败']); } // 编辑审计规则 public function editRule(Request $request): ?JsonResponse { $validator = Validator::make($request->all(), [ 'id' => 'required|exists:rule,id', 'rule_name' => 'required', 'rule_pattern' => 'required', ]); if($validator->fails()){ return Response::json(['status' => 'fail', 'message' => $validator->errors()->all()]); } $ret = Rule::query()->whereId($request->input('id'))->update([ 'name' => $request->input('rule_name'), 'pattern' => $request->input('rule_pattern') ]); if($ret){ return Response::json(['status' => 'success', 'message' => '操作成功']); } return Response::json(['status' => 'fail', 'message' => '操作失败']); } // 删除审计规则 public function delRule(Request $request): JsonResponse { $id = $request->input('id'); try{ Rule::query()->whereId($id)->delete(); foreach(RuleGroup::all() as $RuleGroup){ $rules = explode(',', $RuleGroup->rules); if(in_array($id, $rules, true)){ $rules = implode(',', array_diff($rules, [$id])); RuleGroup::query()->whereId($RuleGroup->id)->update(['rules' => $rules]); } } }catch(Exception $e){ return Response::json(['status' => 'fail', 'message' => '操作失败, '.$e->getMessage()]); } return Response::json(['status' => 'success', 'message' => '操作成功']); } // 审计规则分组列表 public function ruleGroupList(Request $request): \Illuminate\Http\Response { $view['ruleGroupList'] = RuleGroup::query()->paginate(15)->appends($request->except('page')); return Response::view('admin.rule.ruleGroupList', $view); } // 添加审计规则分组 public function addRuleGroup(Request $request) { if($request->isMethod('POST')){ $validator = Validator::make($request->all(), [ 'name' => 'required', 'type' => 'required|boolean', 'rules' => 'required', ]); if($validator->fails()){ return Redirect::back()->withInput()->withErrors($validator->errors()); } $obj = new RuleGroup(); $obj->name = $request->input('name'); $obj->type = (int) $request->input('type'); $obj->rules = implode(',', $request->input('rules')); $obj->save(); if($obj->id){ return Redirect::back()->with('successMsg', '操作成功'); } return Redirect::back()->withInput()->withErrors('操作失败'); } $view['ruleList'] = Rule::all(); return Response::view('admin.rule.ruleGroupInfo', $view); } // 编辑审计规则分组 public function editRuleGroup(Request $request) { $id = $request->input('id'); if($request->isMethod('POST')){ $validator = Validator::make($request->all(), [ 'id' => 'required', 'name' => 'required', 'type' => 'required|boolean' ]); if($validator->fails()){ return Redirect::back()->withInput()->withErrors($validator->errors()); } $name = $request->input('name'); $type = (int) $request->input('type'); $rules = $request->input('rules'); $ruleGroup = RuleGroup::find($id); if(!$ruleGroup){ return Redirect::back()->withInput()->withErrors('未找到需要编辑的审计规则分组!'); } $data = []; if($ruleGroup->name != $name){ $data['name'] = $name; } if($ruleGroup->type != $type){ $data['type'] = $type; } if($rules){ $ruleStr = implode(',', $rules); if($ruleGroup->rules != $ruleStr){ $data['rules'] = $ruleStr; }elseif($data == []){ return Redirect::back()->with('successMsg', '检测为未修改,无变动!'); } }elseif(isset($ruleGroup->rules)){ $data['rules'] = $rules; } $ret = RuleGroup::query()->whereId($id)->update($data); if($ret){ return Redirect::back()->with('successMsg', '操作成功'); } return Redirect::back()->withInput()->withErrors('操作失败'); } $ruleGroup = RuleGroup::find($id); if(!$ruleGroup){ return Redirect::back(); } $view['ruleList'] = Rule::all(); return view('admin.rule.ruleGroupInfo', $view)->with(compact('ruleGroup')); } // 删除审计规则分组 public function delRuleGroup(Request $request): JsonResponse { $id = $request->input('id'); $ruleGroup = RuleGroup::query()->whereId($id)->get(); if(!$ruleGroup){ return Response::json(['status' => 'fail', 'message' => '删除失败,未找到审计规则分组']); } try{ RuleGroup::query()->whereId($id)->delete(); RuleGroupNode::query()->whereRuleGroupId($id)->delete(); }catch(Exception $e){ return Response::json(['status' => 'fail', 'message' => '删除失败,'.$e->getMessage()]); } return Response::json(['status' => 'success', 'message' => '清理成功']); } // 规则分组关联节点 public function assignNode(Request $request) { $id = $request->input('id'); if($request->isMethod('POST')){ $nodes = $request->input('nodes'); $validator = Validator::make($request->all(), [ 'id' => 'required', ]); if($validator->fails()){ return Redirect::back()->withInput()->withErrors($validator->errors()); } $ruleGroup = RuleGroup::find($id); if(!$ruleGroup){ return Redirect::back()->withInput()->withErrors('未找到审计规则分组!'); } try{ if($nodes){ $nodeStr = implode(',', $nodes); // 无变动 不改动 if($ruleGroup->nodes == $nodeStr){ return Redirect::back()->with('successMsg', '检测为未修改,无变动!'); } RuleGroup::query()->whereId($id)->update(['nodes' => $nodeStr]); RuleGroupNode::query()->whereRuleGroupId($id)->delete(); foreach($nodes as $nodeId){ $obj = new RuleGroupNode(); $obj->rule_group_id = $id; $obj->node_id = $nodeId; $obj->save(); } }else{ RuleGroup::query()->whereId($id)->update(['nodes' => $nodes]); RuleGroupNode::query()->whereRuleGroupId($id)->delete(); } }catch(Exception $e){ return Redirect::back()->withInput()->withErrors($e->getMessage()); } return Redirect::back()->with('successMsg', '操作成功'); } $view['ruleGroup'] = RuleGroup::find($id); $view['nodeList'] = Node::all(); return Response::view('admin.rule.assignNode', $view); } // 用户触发审计规则日志 public function ruleLogList(Request $request): \Illuminate\Http\Response { $uid = $request->input('uid'); $email = $request->input('email'); $nodeId = $request->input('node_id'); $ruleId = $request->input('rule_id'); $query = RuleLog::query(); if($uid){ $query->whereUserId($uid); } if(isset($email)){ $query->whereHas('user', static function($q) use ($email) { $q->where('email', 'like', '%'.$email.'%'); }); } if($nodeId){ $query->whereNodeId($nodeId); } if($ruleId){ $query->whereRuleId($ruleId); } $view['nodeList'] = Node::all(); $view['ruleList'] = Rule::all(); $view['ruleLogs'] = $query->latest()->paginate(15)->appends($request->except('page')); return Response::view('admin.rule.ruleLogList', $view); } // 清除所有审计触发日志 public function clearLog(): ?JsonResponse { try{ $ret = RuleLog::query()->delete(); }catch(Exception $e){ return Response::json(['status' => 'fail', 'message' => '清理失败, '.$e->getMessage()]); } $result = RuleLog::query()->doesntExist(); if($ret || $result){ return Response::json(['status' => 'success', 'message' => '清理成功']); } return Response::json(['status' => 'fail', 'message' => '清理失败']); } }