adminandClaude Opus 5
768520cedd
actorDetails.php, sensorDetails.php, fillActorDD.php und fillSensorDD.php fragten die homeMesh-Datenbank ab und gaben Geraetenamen samt Steuer-URLs (command_url, command_parameters.url) aus - ohne jede Zugriffspruefung. Alle vier pruefen jetzt checkLogin(), bevor sie etwas ausgeben. Aufgerufen werden sie ausschliesslich aus js/solar/autoActionFuncs.js auf der Home-Seite, also aus einer angemeldeten Sitzung; der Regeleditor funktioniert unveraendert. Die SQL war bereits sauber (intval), es fehlte nur die Autorisierung. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
76 lines
2.6 KiB
PHP
76 lines
2.6 KiB
PHP
<?php
|
|
require_once("../helper.php");
|
|
|
|
// Der Endpunkt gibt Geraetenamen und Steuer-URLs aus der homeMesh-
|
|
// Datenbank aus und war bisher ohne Anmeldung erreichbar.
|
|
if (!checkLogin()) {
|
|
http_response_code(403);
|
|
exit;
|
|
}
|
|
if(isset($_GET["sensorID"])){
|
|
$sensorID = intval($_GET["sensorID"]);
|
|
$qry = "SELECT state_name, url, state_types.type, unit, current_value, possible_values FROM actor_states LEFT JOIN state_types ON state_type = state_types.id WHERE actor_id=".$sensorID;
|
|
$mysql = new mysqli($mysql_server, $mysql_MeshUser, $mysql_MeshPass, $mysql_MeshDB);
|
|
$result = mysqli_query($mysql, $qry);
|
|
$operators = "";
|
|
echo '{"parameters": [';
|
|
$iterated = 0;
|
|
$items = "[]";
|
|
while($row = $result->fetch_assoc()){
|
|
switch($row["type"]){
|
|
case "integer":
|
|
$operators = '["=","≠",">","<"]';
|
|
$type = "number";
|
|
break;
|
|
case "float":
|
|
$operators = '["=","≠",">","<"]';
|
|
$type = "number";
|
|
break;
|
|
case "time":
|
|
$operators = '["=","≠"]';
|
|
$type = "time";
|
|
break;
|
|
case "deltatime":
|
|
$operators = '["+","-"]';
|
|
$type = "time";
|
|
break;
|
|
case "date":
|
|
$operators = '["=","≠"]';
|
|
$type = "date";
|
|
break;
|
|
case "datetime":
|
|
$operators = '["=","≠"]';
|
|
$type = "datetime-local";
|
|
break;
|
|
case "bool":
|
|
$operators = '["= JA","= NEIN"]';
|
|
$type = "button";
|
|
break;
|
|
case "string":
|
|
$operators = '["=","≠"]';
|
|
if($row["possible_values"]){
|
|
$items = $row["possible_values"];
|
|
$type = "dropdown";
|
|
}else{
|
|
$operators = '["=","≠"]';
|
|
$type = "text";
|
|
}
|
|
break;
|
|
default:
|
|
$operators = '["=","≠"]';
|
|
$type = "text";
|
|
break;
|
|
}
|
|
if($iterated++){
|
|
echo ", ";
|
|
}
|
|
if($row["current_value"]){
|
|
$row["state_name"] .= " (=".$row["current_value"].")";
|
|
}
|
|
echo '{"name" : "'.$row["state_name"].'", "operators" : '.$operators.', "url" : "'.$row["url"].'", "type" : "'.$type.'", "options" : '.$items.'}';
|
|
}
|
|
echo "]}";
|
|
}
|
|
|
|
|
|
?>
|