@@ -1,4 +1,7 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | +/** |
|
| 3 | + * @param string $header |
|
| 4 | + */ |
|
| 2 | 5 | function getIP($header,$mxserver,$msa) { |
| 3 | 6 | /* Get submission server's IP from header's mail */ |
| 4 | 7 | /* Each line must end with /r/n */ |
@@ -28,11 +31,23 @@ discard block |
||
| 28 | 31 | return array($ip,$host,$dateR,$dateC['date'],$mid['mid']); |
| 29 | 32 | } |
| 30 | 33 | |
| 34 | +/** |
|
| 35 | + * @param string $hostname |
|
| 36 | + * @param string $dateC |
|
| 37 | + * @param string|null $msgid |
|
| 38 | + * @param string|false $dateL |
|
| 39 | + */ |
|
| 31 | 40 | function updateReport ($ip,$uid,$ipcount,$uidcount,$hostname,$dateC,$msgid,$dateL) { |
| 32 | 41 | |
| 33 | 42 | return sprintf ('<tr><td nowrap>%s</td><td nowrap>%s</td><td>%s</td><td>%s</td><td>%u</td><td>%u</td><td>%s</td><td>%s</td></tr>'."\n",$dateL,$dateC,$uid,$ip,$uidcount,$ipcount,$hostname,htmlentities($msgid) ); |
| 34 | 43 | } |
| 35 | 44 | |
| 45 | +/** |
|
| 46 | + * @param string $dateC |
|
| 47 | + * @param string|null $msgid |
|
| 48 | + * @param false|string $dateL |
|
| 49 | + * @param string $text |
|
| 50 | + */ |
|
| 36 | 51 | function updatebadReport ( $uid,$dateC,$msgid,$dateL,$text ) { |
| 37 | 52 | return sprintf ('<tr><td nowrap>%s</td><td nowrap>%s</td><td>%s</td><td>%s</td><td nowrap>%s</td></tr>'."\n",$dateL,$dateC,$uid,htmlentities($msgid),$text ); |
| 38 | 53 | } |
@@ -84,6 +99,10 @@ discard block |
||
| 84 | 99 | } |
| 85 | 100 | |
| 86 | 101 | |
| 102 | +/** |
|
| 103 | + * @param null|mysqli $myconn |
|
| 104 | + * @param string $key |
|
| 105 | + */ |
|
| 87 | 106 | function summaryReportAndList ($cf,$myconn,$tables,$category,$vet,$key) { |
| 88 | 107 | $nk = $vet['count']; |
| 89 | 108 | |
@@ -160,6 +179,10 @@ discard block |
||
| 160 | 179 | } |
| 161 | 180 | |
| 162 | 181 | |
| 182 | +/** |
|
| 183 | + * @param string $message_id |
|
| 184 | + * @param string $date |
|
| 185 | + */ |
|
| 163 | 186 | function splunksearch ($service,$message_id,$date) { |
| 164 | 187 | |
| 165 | 188 | // Run a blocking search |
@@ -272,6 +295,9 @@ discard block |
||
| 272 | 295 | } |
| 273 | 296 | /***********************************/ |
| 274 | 297 | |
| 298 | +/** |
|
| 299 | + * @param string $text |
|
| 300 | + */ |
|
| 275 | 301 | function getDomains ($text,$exclude) { |
| 276 | 302 | /* Pattern from https://mathiasbynens.be/demo/url-regex */ |
| 277 | 303 | /* Current choice: @gruber */ |
@@ -330,6 +356,9 @@ discard block |
||
| 330 | 356 | return array(); |
| 331 | 357 | } |
| 332 | 358 | |
| 359 | +/** |
|
| 360 | + * @return string |
|
| 361 | + */ |
|
| 333 | 362 | function humanKey($key) { |
| 334 | 363 | switch($key) { |
| 335 | 364 | case 'ip': |
@@ -340,6 +369,11 @@ discard block |
||
| 340 | 369 | return $key; |
| 341 | 370 | } |
| 342 | 371 | |
| 372 | +/** |
|
| 373 | + * @param resource $f |
|
| 374 | + * @param string $key |
|
| 375 | + * @param string $rtime |
|
| 376 | + */ |
|
| 343 | 377 | function writeFileHeader($f,$conf,$key,$type,$rtime) { |
| 344 | 378 | fwrite( $f, file_get_contents(dirname(__FILE__) . '/' . $conf['report']['reportTemplateHeader']) ); |
| 345 | 379 | fwrite( $f,sprintf('<h1> Report of %s %s</h1><h5>%s</h5><h2>Detailed Report</h2>',$type, strtoupper(humanKey($key)),$rtime) ); |
@@ -12,14 +12,14 @@ discard block |
||
| 12 | 12 | # print "Examine ".$received[0][$i]."\n"; |
| 13 | 13 | if ( preg_match($msa,$received['host'][$i]) ) |
| 14 | 14 | $dateR = $received['date'][$i]; |
| 15 | - foreach ($mxserver as $mx) { |
|
| 16 | - if (!$ip) |
|
| 15 | + foreach ($mxserver as $mx) { |
|
| 16 | + if (!$ip) |
|
| 17 | 17 | if ($mx == $received['host'][$i]) { |
| 18 | 18 | $host = $received['host'][$i]; |
| 19 | 19 | $ip = $received['ip'][$i]; |
| 20 | - } |
|
| 21 | - } |
|
| 22 | - } |
|
| 20 | + } |
|
| 21 | + } |
|
| 22 | + } |
|
| 23 | 23 | } |
| 24 | 24 | if ( preg_match ('/\r\nDate:\s(?P<date>.*)\r\n/',$header,$dateC) != 1) |
| 25 | 25 | $dateC['date'] = 'Not found'; |
@@ -39,15 +39,15 @@ discard block |
||
| 39 | 39 | |
| 40 | 40 | |
| 41 | 41 | function summaryBadReport ($uidvet) { |
| 42 | - $nuid = $uidvet['count']; |
|
| 43 | - if ( empty($uidvet) ) return NULL; |
|
| 44 | - $return = '<hr><h3>Statistics by UID</h3><table><tr><th>UID</th><th>Learned times</th></tr>'."\n"; |
|
| 42 | + $nuid = $uidvet['count']; |
|
| 43 | + if ( empty($uidvet) ) return NULL; |
|
| 44 | + $return = '<hr><h3>Statistics by UID</h3><table><tr><th>UID</th><th>Learned times</th></tr>'."\n"; |
|
| 45 | 45 | |
| 46 | - /* Remove count index */ |
|
| 47 | - $uids = array_keys($uidvet['uid']); |
|
| 46 | + /* Remove count index */ |
|
| 47 | + $uids = array_keys($uidvet['uid']); |
|
| 48 | 48 | $totlearn = 0; |
| 49 | 49 | |
| 50 | - foreach ( $uids as $uid ) { |
|
| 50 | + foreach ( $uids as $uid ) { |
|
| 51 | 51 | $totlearn += $uidvet['uid']["$uid"]['count'];; |
| 52 | 52 | $return .= sprintf ('<tr><td>%s</td><td>%u</td></tr>',$uid,$uidvet['uid']["$uid"]['count']); |
| 53 | 53 | } |
@@ -60,26 +60,26 @@ discard block |
||
| 60 | 60 | |
| 61 | 61 | function array_msort($array, $cols) |
| 62 | 62 | { |
| 63 | - $colarr = array(); |
|
| 64 | - foreach ($cols as $col => $order) { |
|
| 65 | - $colarr[$col] = array(); |
|
| 66 | - foreach ($array as $k => $row) { $colarr[$col]['_'.$k] = strtolower($row[$col]); } |
|
| 67 | - } |
|
| 68 | - $eval = 'array_multisort('; |
|
| 69 | - foreach ($cols as $col => $order) { |
|
| 70 | - $eval .= '$colarr[\''.$col.'\'],'.$order.','; |
|
| 71 | - } |
|
| 72 | - $eval = substr($eval,0,-1).');'; |
|
| 73 | - eval($eval); |
|
| 74 | - $ret = array(); |
|
| 75 | - foreach ($colarr as $col => $arr) { |
|
| 76 | - foreach ($arr as $k => $v) { |
|
| 77 | - $k = substr($k,1); |
|
| 78 | - if (!isset($ret[$k])) $ret[$k] = $array[$k]; |
|
| 79 | - if (isset ($array[$k][$col])) $ret[$k][$col] = $array[$k][$col]; |
|
| 80 | - } |
|
| 81 | - } |
|
| 82 | - return $ret; |
|
| 63 | + $colarr = array(); |
|
| 64 | + foreach ($cols as $col => $order) { |
|
| 65 | + $colarr[$col] = array(); |
|
| 66 | + foreach ($array as $k => $row) { $colarr[$col]['_'.$k] = strtolower($row[$col]); } |
|
| 67 | + } |
|
| 68 | + $eval = 'array_multisort('; |
|
| 69 | + foreach ($cols as $col => $order) { |
|
| 70 | + $eval .= '$colarr[\''.$col.'\'],'.$order.','; |
|
| 71 | + } |
|
| 72 | + $eval = substr($eval,0,-1).');'; |
|
| 73 | + eval($eval); |
|
| 74 | + $ret = array(); |
|
| 75 | + foreach ($colarr as $col => $arr) { |
|
| 76 | + foreach ($arr as $k => $v) { |
|
| 77 | + $k = substr($k,1); |
|
| 78 | + if (!isset($ret[$k])) $ret[$k] = $array[$k]; |
|
| 79 | + if (isset ($array[$k][$col])) $ret[$k][$col] = $array[$k][$col]; |
|
| 80 | + } |
|
| 81 | + } |
|
| 82 | + return $ret; |
|
| 83 | 83 | |
| 84 | 84 | } |
| 85 | 85 | |
@@ -95,8 +95,8 @@ discard block |
||
| 95 | 95 | |
| 96 | 96 | foreach ( $values as $value ) { |
| 97 | 97 | if ( $value == 'count' ) continue; |
| 98 | - $nlearn = $vet["$key"]["$value"]['count']; |
|
| 99 | - unset($vet["$key"]["$value"]['count']); |
|
| 98 | + $nlearn = $vet["$key"]["$value"]['count']; |
|
| 99 | + unset($vet["$key"]["$value"]['count']); |
|
| 100 | 100 | $quantity = $cf["listing$key"]['quantity']["$category"]; /* In searchAndList this value is |
| 101 | 101 | passed by reference and modified */ |
| 102 | 102 | $nuid = count($vet["$key"]["$value"]); |
@@ -127,9 +127,9 @@ discard block |
||
| 127 | 127 | $return .='<tr><td rowspan="'.$nuid.'">'.$value.'</td>'; |
| 128 | 128 | $return .= sprintf ('<td>%s</td><td rowspan="'.$nuid.'">%u</td><td rowspan="'.$nuid.'" '.$nowlist["$listed"]['style'].'>%s</td></tr>',$vet["$key"]["$value"][0],$nlearn,$nowlist["$listed"]['name']); |
| 129 | 129 | $rowuid=NULL; |
| 130 | - for ($j=1;$j<$nuid;$j++) $rowuid .= '<tr><td>%s</td></tr>'; |
|
| 130 | + for ($j=1;$j<$nuid;$j++) $rowuid .= '<tr><td>%s</td></tr>'; |
|
| 131 | 131 | array_shift($vet["$key"]["$value"]); |
| 132 | - $return .= vsprintf ($rowuid,$vet["$key"]["$value"]); |
|
| 132 | + $return .= vsprintf ($rowuid,$vet["$key"]["$value"]); |
|
| 133 | 133 | |
| 134 | 134 | } |
| 135 | 135 | $return .= sprintf ('<tr><th title="unique %s">%u</th><th title="unique uids">%u</th><th>%u</th></table>',$key,$vet["$key"]['count'],$vet['uid']['count'],$nk); |
@@ -139,20 +139,20 @@ discard block |
||
| 139 | 139 | /* Not used for listing purpose, but useful to you! */ |
| 140 | 140 | $return .= sprintf('<h3>Statistics by UID</h3><table><tr><th>UID</th><th>%s learned</th><th>Learned times</th></tr>'."\n",$key); |
| 141 | 141 | $uids = array_keys($vet['uid']); |
| 142 | - foreach ( $uids as $uid ) { |
|
| 142 | + foreach ( $uids as $uid ) { |
|
| 143 | 143 | if ( $uid == 'count' ) continue; |
| 144 | - $nlearn = $vet['uid']["$uid"]['count']; |
|
| 145 | - unset ( $vet['uid']["$uid"]['count'] ); |
|
| 144 | + $nlearn = $vet['uid']["$uid"]['count']; |
|
| 145 | + unset ( $vet['uid']["$uid"]['count'] ); |
|
| 146 | 146 | $nip = count($vet['uid']["$uid"]); |
| 147 | 147 | $return .='<tr><td rowspan="'.$nip.'">'.$uid.'</td>'; |
| 148 | 148 | $return .= sprintf ('<td>%s</td><td rowspan="'.$nip.'">%u</td></tr>',$vet['uid']["$uid"][0],$nlearn); |
| 149 | - $rowuid=NULL; |
|
| 150 | - for ($j=1;$j<$nip;$j++) $rowuid .= '<tr><td>%s</td></tr>'; |
|
| 151 | - array_shift($vet['uid']["$uid"]); |
|
| 152 | - $return .= vsprintf ($rowuid,$vet['uid']["$uid"]); |
|
| 149 | + $rowuid=NULL; |
|
| 150 | + for ($j=1;$j<$nip;$j++) $rowuid .= '<tr><td>%s</td></tr>'; |
|
| 151 | + array_shift($vet['uid']["$uid"]); |
|
| 152 | + $return .= vsprintf ($rowuid,$vet['uid']["$uid"]); |
|
| 153 | 153 | |
| 154 | - } |
|
| 155 | - $return .= sprintf ('<tr><th title="unique uids">%u</th><th title="unique %s">%u</th><th>%u</th></table>', |
|
| 154 | + } |
|
| 155 | + $return .= sprintf ('<tr><th title="unique uids">%u</th><th title="unique %s">%u</th><th>%u</th></table>', |
|
| 156 | 156 | $vet['uid']['count'],$key,$vet["$key"]['count'],$nk); |
| 157 | 157 | |
| 158 | 158 | |
@@ -181,50 +181,50 @@ discard block |
||
| 181 | 181 | */ |
| 182 | 182 | |
| 183 | 183 | // A one shot search |
| 184 | - $searchParams = array( |
|
| 185 | - 'earliest_time' => date("c",strtotime ($date)-120), |
|
| 186 | - 'latest_time' => date("c",strtotime ($date)+60) |
|
| 187 | - ); |
|
| 184 | + $searchParams = array( |
|
| 185 | + 'earliest_time' => date("c",strtotime ($date)-120), |
|
| 186 | + 'latest_time' => date("c",strtotime ($date)+60) |
|
| 187 | + ); |
|
| 188 | 188 | |
| 189 | - // Run a oneshot search that returns the job's results |
|
| 190 | - $resultsStream = $service->oneshotSearch($searchQueryBlocking, $searchParams); |
|
| 191 | - $resultSearch = new Splunk_ResultsReader($resultsStream); |
|
| 189 | + // Run a oneshot search that returns the job's results |
|
| 190 | + $resultsStream = $service->oneshotSearch($searchQueryBlocking, $searchParams); |
|
| 191 | + $resultSearch = new Splunk_ResultsReader($resultsStream); |
|
| 192 | 192 | |
| 193 | 193 | // Use the built-in XML parser to display the job results |
| 194 | 194 | foreach ($resultSearch as $result) |
| 195 | 195 | { |
| 196 | - if ($result instanceof Splunk_ResultsFieldOrder) |
|
| 197 | - { |
|
| 198 | - // More than one field attribute returned by search |
|
| 199 | - // You must redefine the search |
|
| 200 | - if ( count($result->getFieldNames()) > 1 ) return FALSE; |
|
| 201 | - } |
|
| 202 | - else if ($result instanceof Splunk_ResultsMessage) |
|
| 203 | - { |
|
| 204 | - // I don't want messages in my search |
|
| 205 | - return FALSE; |
|
| 206 | - } |
|
| 207 | - else if (is_array($result)) |
|
| 208 | - { |
|
| 209 | - // Process a row |
|
| 210 | - foreach ($result as $key => $valueOrValues) |
|
| 211 | - { |
|
| 212 | - if (is_array($valueOrValues)) |
|
| 213 | - { |
|
| 214 | - return FALSE; |
|
| 215 | - } |
|
| 216 | - else |
|
| 217 | - { |
|
| 218 | - return $valueOrValues; |
|
| 219 | - #print " {$key} => {$value}\r\n"; |
|
| 220 | - } |
|
| 221 | - } |
|
| 222 | - } |
|
| 223 | - else |
|
| 224 | - { |
|
| 225 | - #print "Unknow result type"; |
|
| 226 | - return FALSE; |
|
| 227 | - } |
|
| 196 | + if ($result instanceof Splunk_ResultsFieldOrder) |
|
| 197 | + { |
|
| 198 | + // More than one field attribute returned by search |
|
| 199 | + // You must redefine the search |
|
| 200 | + if ( count($result->getFieldNames()) > 1 ) return FALSE; |
|
| 201 | + } |
|
| 202 | + else if ($result instanceof Splunk_ResultsMessage) |
|
| 203 | + { |
|
| 204 | + // I don't want messages in my search |
|
| 205 | + return FALSE; |
|
| 206 | + } |
|
| 207 | + else if (is_array($result)) |
|
| 208 | + { |
|
| 209 | + // Process a row |
|
| 210 | + foreach ($result as $key => $valueOrValues) |
|
| 211 | + { |
|
| 212 | + if (is_array($valueOrValues)) |
|
| 213 | + { |
|
| 214 | + return FALSE; |
|
| 215 | + } |
|
| 216 | + else |
|
| 217 | + { |
|
| 218 | + return $valueOrValues; |
|
| 219 | + #print " {$key} => {$value}\r\n"; |
|
| 220 | + } |
|
| 221 | + } |
|
| 222 | + } |
|
| 223 | + else |
|
| 224 | + { |
|
| 225 | + #print "Unknow result type"; |
|
| 226 | + return FALSE; |
|
| 227 | + } |
|
| 228 | 228 | } |
| 229 | 229 | } |
| 230 | 230 | |
@@ -235,38 +235,38 @@ discard block |
||
| 235 | 235 | |
| 236 | 236 | function flattenParts($messageParts, $flattenedParts = array(), $prefix = '', $index = 1, $fullPrefix = true) { |
| 237 | 237 | |
| 238 | - foreach($messageParts as $part) { |
|
| 239 | - $flattenedParts[$prefix.$index] = $part; |
|
| 240 | - if(isset($part->parts)) { |
|
| 241 | - if($part->type == 2) { |
|
| 242 | - $flattenedParts = flattenParts($part->parts, $flattenedParts, $prefix.$index.'.', 0, false); |
|
| 243 | - } |
|
| 244 | - elseif($fullPrefix) { |
|
| 245 | - $flattenedParts = flattenParts($part->parts, $flattenedParts, $prefix.$index.'.'); |
|
| 246 | - } |
|
| 247 | - else { |
|
| 248 | - $flattenedParts = flattenParts($part->parts, $flattenedParts, $prefix); |
|
| 249 | - } |
|
| 250 | - unset($flattenedParts[$prefix.$index]->parts); |
|
| 251 | - } |
|
| 252 | - $index++; |
|
| 253 | - } |
|
| 254 | - |
|
| 255 | - return $flattenedParts; |
|
| 238 | + foreach($messageParts as $part) { |
|
| 239 | + $flattenedParts[$prefix.$index] = $part; |
|
| 240 | + if(isset($part->parts)) { |
|
| 241 | + if($part->type == 2) { |
|
| 242 | + $flattenedParts = flattenParts($part->parts, $flattenedParts, $prefix.$index.'.', 0, false); |
|
| 243 | + } |
|
| 244 | + elseif($fullPrefix) { |
|
| 245 | + $flattenedParts = flattenParts($part->parts, $flattenedParts, $prefix.$index.'.'); |
|
| 246 | + } |
|
| 247 | + else { |
|
| 248 | + $flattenedParts = flattenParts($part->parts, $flattenedParts, $prefix); |
|
| 249 | + } |
|
| 250 | + unset($flattenedParts[$prefix.$index]->parts); |
|
| 251 | + } |
|
| 252 | + $index++; |
|
| 253 | + } |
|
| 254 | + |
|
| 255 | + return $flattenedParts; |
|
| 256 | 256 | |
| 257 | 257 | } |
| 258 | 258 | |
| 259 | 259 | function getPart($connection, $messageNumber, $partNumber, $encoding) { |
| 260 | 260 | |
| 261 | - $data = imap_fetchbody($connection, $messageNumber, $partNumber); |
|
| 262 | - switch($encoding) { |
|
| 263 | - case 0: return $data; // 7BIT |
|
| 264 | - case 1: return $data; // 8BIT |
|
| 265 | - case 2: return $data; // BINARY |
|
| 266 | - case 3: return base64_decode($data); // BASE64 |
|
| 267 | - case 4: return quoted_printable_decode($data); // QUOTED_PRINTABLE |
|
| 268 | - case 5: return $data; // OTHER |
|
| 269 | - } |
|
| 261 | + $data = imap_fetchbody($connection, $messageNumber, $partNumber); |
|
| 262 | + switch($encoding) { |
|
| 263 | + case 0: return $data; // 7BIT |
|
| 264 | + case 1: return $data; // 8BIT |
|
| 265 | + case 2: return $data; // BINARY |
|
| 266 | + case 3: return base64_decode($data); // BASE64 |
|
| 267 | + case 4: return quoted_printable_decode($data); // QUOTED_PRINTABLE |
|
| 268 | + case 5: return $data; // OTHER |
|
| 269 | + } |
|
| 270 | 270 | |
| 271 | 271 | |
| 272 | 272 | } |
@@ -341,16 +341,16 @@ discard block |
||
| 341 | 341 | } |
| 342 | 342 | |
| 343 | 343 | function writeFileHeader($f,$conf,$key,$type,$rtime) { |
| 344 | - fwrite( $f, file_get_contents(dirname(__FILE__) . '/' . $conf['report']['reportTemplateHeader']) ); |
|
| 345 | - fwrite( $f,sprintf('<h1> Report of %s %s</h1><h5>%s</h5><h2>Detailed Report</h2>',$type, strtoupper(humanKey($key)),$rtime) ); |
|
| 346 | - if ($conf["listing$key"]['onlyReport']["$type"]) { |
|
| 347 | - fwrite( $f,sprintf('<p>None of the below %s have been listed because listing is not active in configuration.</p>', |
|
| 344 | + fwrite( $f, file_get_contents(dirname(__FILE__) . '/' . $conf['report']['reportTemplateHeader']) ); |
|
| 345 | + fwrite( $f,sprintf('<h1> Report of %s %s</h1><h5>%s</h5><h2>Detailed Report</h2>',$type, strtoupper(humanKey($key)),$rtime) ); |
|
| 346 | + if ($conf["listing$key"]['onlyReport']["$type"]) { |
|
| 347 | + fwrite( $f,sprintf('<p>None of the below %s have been listed because listing is not active in configuration.</p>', |
|
| 348 | 348 | strtoupper(humanKey($key))) ); |
| 349 | 349 | syslog(LOG_INFO, sprintf('%s: Report only for %s %s: no listing activated in configuration.', |
| 350 | 350 | $conf['syslog']['user'],$type,humanKey($key)) |
| 351 | 351 | ); |
| 352 | 352 | } |
| 353 | - fwrite( $f,sprintf('<table><tr><th title="taken from Received header" nowrap>Date of Learn</th><th title="taken from Date header" nowrap>Date of Write</th><th nowrap>UID</th><th nowrap>%s</th><th title="How many times this uid learns">#UID</th><th title="Number of times this learned %s appears in different mails">#%s</th><th nowrap>Received by</th><th>Message-Id</th></tr>', |
|
| 353 | + fwrite( $f,sprintf('<table><tr><th title="taken from Received header" nowrap>Date of Learn</th><th title="taken from Date header" nowrap>Date of Write</th><th nowrap>UID</th><th nowrap>%s</th><th title="How many times this uid learns">#UID</th><th title="Number of times this learned %s appears in different mails">#%s</th><th nowrap>Received by</th><th>Message-Id</th></tr>', |
|
| 354 | 354 | strtoupper($key),strtoupper($key),strtoupper($key)) ); |
| 355 | 355 | } |
| 356 | 356 | |
@@ -360,25 +360,25 @@ discard block |
||
| 360 | 360 | $filed = dirname(__FILE__) . '/' . $cf['report']['reportDomFile']["$type"]; |
| 361 | 361 | $fileb= dirname(__FILE__) . '/' . $cf['report']['badreportFile']["$type"]; |
| 362 | 362 | $m_mail = imap_open('{'.$cf['imap']['mailhost'].':143/imap/novalidate-cert/authuser='.$cf['imap']['authuser'].'}'.$cf['imap']['folder']["$type"], $cf['imap']['account'],$cf['imap']['authpassword'], OP_READONLY) |
| 363 | - or syslog (LOG_EMERG, $cf['syslog']['user'].': Error in IMAP connection to <'.$cf['imap']['mailhost'].'>: ' . imap_last_error()); |
|
| 363 | + or syslog (LOG_EMERG, $cf['syslog']['user'].': Error in IMAP connection to <'.$cf['imap']['mailhost'].'>: ' . imap_last_error()); |
|
| 364 | 364 | if ( !$m_mail ) exit(254); |
| 365 | 365 | |
| 366 | 366 | |
| 367 | 367 | syslog (LOG_INFO,$cf['syslog']['user'].': Successfully connected to <'.$cf['imap']['mailhost'].">; Reading $type messages of last ".$cf['imap']['oldestday'].' days...'); |
| 368 | 368 | //get all messages |
| 369 | 369 | $dateTh = date ( "d-M-Y", strToTime ( '-'.$cf['imap']['oldestday'].' days' ) ); |
| 370 | - $dateN = date ( "d-M-Y", strToTime ( "now" ) ); |
|
| 371 | - $m_search=imap_search ($m_mail, "SINCE \"$dateTh\" BEFORE \"$dateN\"" ); |
|
| 370 | + $dateN = date ( "d-M-Y", strToTime ( "now" ) ); |
|
| 371 | + $m_search=imap_search ($m_mail, "SINCE \"$dateTh\" BEFORE \"$dateN\"" ); |
|
| 372 | 372 | |
| 373 | 373 | // Order results starting from newest message |
| 374 | 374 | if ( empty($m_search) ) { |
| 375 | 375 | syslog (LOG_INFO,$cf['syslog']['user'].": No mail found in $type folder. No reports written for $type."); |
| 376 | - if ( $ierr = imap_errors() ) |
|
| 377 | - foreach ( $ierr as $thiserr ) |
|
| 378 | - syslog (LOG_ERR, $cf['syslog']['user'].": IMAP Error: $thiserr"); |
|
| 379 | - if ( $ierr = imap_alerts() ) |
|
| 380 | - foreach ( $ierr as $thiserr ) |
|
| 381 | - syslog (LOG_ALERT, $cf['syslog']['user'].": IMAP Alert: $thiserr"); |
|
| 376 | + if ( $ierr = imap_errors() ) |
|
| 377 | + foreach ( $ierr as $thiserr ) |
|
| 378 | + syslog (LOG_ERR, $cf['syslog']['user'].": IMAP Error: $thiserr"); |
|
| 379 | + if ( $ierr = imap_alerts() ) |
|
| 380 | + foreach ( $ierr as $thiserr ) |
|
| 381 | + syslog (LOG_ALERT, $cf['syslog']['user'].": IMAP Alert: $thiserr"); |
|
| 382 | 382 | imap_close( $m_mail ); |
| 383 | 383 | if ( file_exists( $file ) ) unlink ($file); |
| 384 | 384 | if ( file_exists( $filed ) ) unlink ($filed); |
@@ -418,16 +418,16 @@ discard block |
||
| 418 | 418 | $uidbad['count'] = 0; |
| 419 | 419 | $uidbad['uid'] = array(); |
| 420 | 420 | |
| 421 | - // loop for each message |
|
| 421 | + // loop for each message |
|
| 422 | 422 | foreach ($m_search as $onem) { |
| 423 | 423 | |
| 424 | - //get imap header info for obj thang |
|
| 425 | - //$headers = imap_headerinfo($m_mail, $onem); |
|
| 426 | - //$head = imap_fetchheader($m_mail, $headers->Msgno); |
|
| 424 | + //get imap header info for obj thang |
|
| 425 | + //$headers = imap_headerinfo($m_mail, $onem); |
|
| 426 | + //$head = imap_fetchheader($m_mail, $headers->Msgno); |
|
| 427 | 427 | $head = imap_fetchheader($m_mail, $onem ); |
| 428 | - //$obj = imap_rfc822_parse_headers( $head); |
|
| 428 | + //$obj = imap_rfc822_parse_headers( $head); |
|
| 429 | 429 | |
| 430 | - list ($ip,$host,$dateReceived,$dateClient,$mid) = getIP( $head,$cf['mx_hostname']['mx'],$cf['msa']['msalearn'] ); |
|
| 430 | + list ($ip,$host,$dateReceived,$dateClient,$mid) = getIP( $head,$cf['mx_hostname']['mx'],$cf['msa']['msalearn'] ); |
|
| 431 | 431 | if (empty($mid)) { |
| 432 | 432 | $uid='NA'; |
| 433 | 433 | syslog (LOG_ERR, $cf['syslog']['user'].": Error retrieving data for empty Message-ID."); |
@@ -445,11 +445,11 @@ discard block |
||
| 445 | 445 | /* Extract domains url in body */ |
| 446 | 446 | $domains = parseURL ($m_mail,$onem,$cf['listingdom']['exclude']); |
| 447 | 447 | |
| 448 | - /* Update count of each ip */ |
|
| 449 | - if ($host and ($uid!='NA') and ($uid!='unauthenticated') and ($uid!='unknown')) { /* IP is received by MX servers and learned by valid uid */ |
|
| 448 | + /* Update count of each ip */ |
|
| 449 | + if ($host and ($uid!='NA') and ($uid!='unauthenticated') and ($uid!='unknown')) { /* IP is received by MX servers and learned by valid uid */ |
|
| 450 | 450 | $ipuid['count']++; //number of right messages |
| 451 | 451 | |
| 452 | - if (in_array($uid,array_keys($ipuid['uid']))) { |
|
| 452 | + if (in_array($uid,array_keys($ipuid['uid']))) { |
|
| 453 | 453 | $ipuid['uid']["$uid"]['count']++; //number of learn by this uid |
| 454 | 454 | if (!in_array($ip,$ipuid['uid']["$uid"])) |
| 455 | 455 | $ipuid['uid']["$uid"][]=$ip; //ips learned by this uid |
@@ -460,16 +460,16 @@ discard block |
||
| 460 | 460 | $ipuid['uid']['count']++; //number of unique uids |
| 461 | 461 | } |
| 462 | 462 | |
| 463 | - if (in_array($ip,array_keys($ipuid['ip']))) { |
|
| 464 | - $ipuid['ip']["$ip"]['count']++; //number of time this ip appears in different messages |
|
| 463 | + if (in_array($ip,array_keys($ipuid['ip']))) { |
|
| 464 | + $ipuid['ip']["$ip"]['count']++; //number of time this ip appears in different messages |
|
| 465 | 465 | if (!in_array($uid,$ipuid['ip']["$ip"])) |
| 466 | 466 | $ipuid['ip']["$ip"][]=$uid; //uids that learned this ip |
| 467 | 467 | } |
| 468 | - else { |
|
| 469 | - $ipuid['ip']["$ip"]['count'] = 1; |
|
| 468 | + else { |
|
| 469 | + $ipuid['ip']["$ip"]['count'] = 1; |
|
| 470 | 470 | $ipuid['ip']["$ip"][]=$uid; |
| 471 | 471 | $ipuid['ip']['count']++; //number of unique ips |
| 472 | - } |
|
| 472 | + } |
|
| 473 | 473 | |
| 474 | 474 | foreach ($domains as $dom) { |
| 475 | 475 | $domuid['count']++; |
@@ -504,18 +504,18 @@ discard block |
||
| 504 | 504 | ); |
| 505 | 505 | } |
| 506 | 506 | |
| 507 | - /* Update HTML report */ |
|
| 508 | - fwrite($fp,updateReport ( $ip,$uid,$ipuid['ip']["$ip"]['count'],$ipuid['uid']["$uid"]['count'],$host,$dateClient,$mid,$dateReceived) ); |
|
| 507 | + /* Update HTML report */ |
|
| 508 | + fwrite($fp,updateReport ( $ip,$uid,$ipuid['ip']["$ip"]['count'],$ipuid['uid']["$uid"]['count'],$host,$dateClient,$mid,$dateReceived) ); |
|
| 509 | 509 | } |
| 510 | - else { /* Bad learn */ |
|
| 510 | + else { /* Bad learn */ |
|
| 511 | 511 | |
| 512 | - if (in_array($uid,array_keys($uidbad['uid']))) |
|
| 513 | - $uidbad['uid']["$uid"]['count']++; //number of bad learn by this uid |
|
| 514 | - else { |
|
| 515 | - $uidbad['uid']["$uid"]['count'] = 1; |
|
| 512 | + if (in_array($uid,array_keys($uidbad['uid']))) |
|
| 513 | + $uidbad['uid']["$uid"]['count']++; //number of bad learn by this uid |
|
| 514 | + else { |
|
| 515 | + $uidbad['uid']["$uid"]['count'] = 1; |
|
| 516 | 516 | $uidbad['uid']["$uid"][]=$uid; |
| 517 | - $uidbad['count']++; //numeber of unique bad uids |
|
| 518 | - } |
|
| 517 | + $uidbad['count']++; //numeber of unique bad uids |
|
| 518 | + } |
|
| 519 | 519 | /* The reason of bad report */ |
| 520 | 520 | if ($host === FALSE) $reason = 'This mail was not received by recognized MX host'; |
| 521 | 521 | if ($dateReceived === FALSE) $reason = 'This mail was not submitted to recognized MSA for learn'; |
@@ -541,17 +541,17 @@ discard block |
||
| 541 | 541 | fwrite($fp, '<hr><h2>Summary Report</h2><h5>Listing policy: ip must be learned at least '.$cf['listingip']['threshold']["$type"].' times from at least '.$cf['listingip']['thresholduid']["$type"].' different valid uids.</h5>' ); |
| 542 | 542 | fwrite($fpd, '<hr><h2>Summary Report</h2><h5>Listing policy: domains must be learned at least '.$cf['listingdom']['threshold']["$type"].' times from at least '.$cf['listingdom']['thresholduid']["$type"].' different valid uids.</h5>' ); |
| 543 | 543 | |
| 544 | - /* Make MYSQL connection */ |
|
| 544 | + /* Make MYSQL connection */ |
|
| 545 | 545 | if ( $cf['listingip']['onlyReport']["$type"] && $cf['listingdom']['onlyReport']["$type"] ) |
| 546 | 546 | $mysqli = NULL; |
| 547 | 547 | else { |
| 548 | - $mysqli = new mysqli($myconnArray['dbhost'], $myconnArray['userdb'], $myconnArray['pwd'], $myconnArray['db'], $myconnArray['dbport']); |
|
| 549 | - if ($mysqli->connect_error) { |
|
| 550 | - syslog (LOG_EMERG, $cf['syslog']['user'].': Connect Error (' . $mysqli->connect_errno . ') ' |
|
| 551 | - . $mysqli->connect_error); |
|
| 552 | - exit (254); |
|
| 553 | - } |
|
| 554 | - syslog(LOG_INFO, $cf['syslog']['user'].': Successfully mysql connected to ' . $mysqli->host_info) ; |
|
| 548 | + $mysqli = new mysqli($myconnArray['dbhost'], $myconnArray['userdb'], $myconnArray['pwd'], $myconnArray['db'], $myconnArray['dbport']); |
|
| 549 | + if ($mysqli->connect_error) { |
|
| 550 | + syslog (LOG_EMERG, $cf['syslog']['user'].': Connect Error (' . $mysqli->connect_errno . ') ' |
|
| 551 | + . $mysqli->connect_error); |
|
| 552 | + exit (254); |
|
| 553 | + } |
|
| 554 | + syslog(LOG_INFO, $cf['syslog']['user'].': Successfully mysql connected to ' . $mysqli->host_info) ; |
|
| 555 | 555 | } |
| 556 | 556 | /***********************/ |
| 557 | 557 | |
@@ -576,8 +576,8 @@ discard block |
||
| 576 | 576 | foreach ( $ierr as $thiserr ) |
| 577 | 577 | syslog (LOG_ERR, $cf['syslog']['user'].": IMAP Error: $thiserr"); |
| 578 | 578 | if ( $ierr = imap_alerts() ) |
| 579 | - foreach ( $ierr as $thiserr ) |
|
| 580 | - syslog (LOG_ALERT, $cf['syslog']['user'].": IMAP Alert: $thiserr"); |
|
| 579 | + foreach ( $ierr as $thiserr ) |
|
| 580 | + syslog (LOG_ALERT, $cf['syslog']['user'].": IMAP Alert: $thiserr"); |
|
| 581 | 581 | imap_close($m_mail); |
| 582 | 582 | } |
| 583 | 583 | ?> |
@@ -1,5 +1,5 @@ discard block |
||
| 1 | 1 | <?php |
| 2 | -function getIP($header,$mxserver,$msa) { |
|
| 2 | +function getIP($header, $mxserver, $msa) { |
|
| 3 | 3 | /* Get submission server's IP from header's mail */ |
| 4 | 4 | /* Each line must end with /r/n */ |
| 5 | 5 | /* IP is the first one written by your mxserver */ |
@@ -7,10 +7,10 @@ discard block |
||
| 7 | 7 | $ip = FALSE; |
| 8 | 8 | $host = FALSE; |
| 9 | 9 | $dateR = FALSE; |
| 10 | - if ( preg_match_all('/^Received:\sfrom(?:.|\r\n\s)*?[\[\(]\s*(?P<ip>\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})[\]\)](?:.|\r\n\s)+\s+by(?:\s|\r\n\s+)(?P<host>\S+).*(?:\s|\r\n\s\s)+.*;\s+(?P<date>.*)/m',$header,$received) ) { |
|
| 11 | - for ($i = count($received[0])-1;$i>=0;$i--) { |
|
| 10 | + if (preg_match_all('/^Received:\sfrom(?:.|\r\n\s)*?[\[\(]\s*(?P<ip>\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})[\]\)](?:.|\r\n\s)+\s+by(?:\s|\r\n\s+)(?P<host>\S+).*(?:\s|\r\n\s\s)+.*;\s+(?P<date>.*)/m', $header, $received)) { |
|
| 11 | + for ($i = count($received[0])-1; $i>=0; $i--) { |
|
| 12 | 12 | # print "Examine ".$received[0][$i]."\n"; |
| 13 | - if ( preg_match($msa,$received['host'][$i]) ) |
|
| 13 | + if (preg_match($msa, $received['host'][$i])) |
|
| 14 | 14 | $dateR = $received['date'][$i]; |
| 15 | 15 | foreach ($mxserver as $mx) { |
| 16 | 16 | if (!$ip) |
@@ -21,38 +21,38 @@ discard block |
||
| 21 | 21 | } |
| 22 | 22 | } |
| 23 | 23 | } |
| 24 | - if ( preg_match ('/\r\nDate:\s(?P<date>.*)\r\n/',$header,$dateC) != 1) |
|
| 24 | + if (preg_match('/\r\nDate:\s(?P<date>.*)\r\n/', $header, $dateC) != 1) |
|
| 25 | 25 | $dateC['date'] = 'Not found'; |
| 26 | - if ( preg_match ('/\r\nMessage\-I(?:D|d):\s(?P<mid>.*)\r\n/',$header,$mid) != 1) |
|
| 26 | + if (preg_match('/\r\nMessage\-I(?:D|d):\s(?P<mid>.*)\r\n/', $header, $mid) != 1) |
|
| 27 | 27 | $mid['mid'] = NULL; |
| 28 | - return array($ip,$host,$dateR,$dateC['date'],$mid['mid']); |
|
| 28 | + return array($ip, $host, $dateR, $dateC['date'], $mid['mid']); |
|
| 29 | 29 | } |
| 30 | 30 | |
| 31 | -function updateReport ($ip,$uid,$ipcount,$uidcount,$hostname,$dateC,$msgid,$dateL) { |
|
| 31 | +function updateReport($ip, $uid, $ipcount, $uidcount, $hostname, $dateC, $msgid, $dateL) { |
|
| 32 | 32 | |
| 33 | - return sprintf ('<tr><td nowrap>%s</td><td nowrap>%s</td><td>%s</td><td>%s</td><td>%u</td><td>%u</td><td>%s</td><td>%s</td></tr>'."\n",$dateL,$dateC,$uid,$ip,$uidcount,$ipcount,$hostname,htmlentities($msgid) ); |
|
| 33 | + return sprintf('<tr><td nowrap>%s</td><td nowrap>%s</td><td>%s</td><td>%s</td><td>%u</td><td>%u</td><td>%s</td><td>%s</td></tr>'."\n", $dateL, $dateC, $uid, $ip, $uidcount, $ipcount, $hostname, htmlentities($msgid)); |
|
| 34 | 34 | } |
| 35 | 35 | |
| 36 | -function updatebadReport ( $uid,$dateC,$msgid,$dateL,$text ) { |
|
| 37 | - return sprintf ('<tr><td nowrap>%s</td><td nowrap>%s</td><td>%s</td><td>%s</td><td nowrap>%s</td></tr>'."\n",$dateL,$dateC,$uid,htmlentities($msgid),$text ); |
|
| 36 | +function updatebadReport($uid, $dateC, $msgid, $dateL, $text) { |
|
| 37 | + return sprintf('<tr><td nowrap>%s</td><td nowrap>%s</td><td>%s</td><td>%s</td><td nowrap>%s</td></tr>'."\n", $dateL, $dateC, $uid, htmlentities($msgid), $text); |
|
| 38 | 38 | } |
| 39 | 39 | |
| 40 | 40 | |
| 41 | -function summaryBadReport ($uidvet) { |
|
| 41 | +function summaryBadReport($uidvet) { |
|
| 42 | 42 | $nuid = $uidvet['count']; |
| 43 | - if ( empty($uidvet) ) return NULL; |
|
| 43 | + if (empty($uidvet)) return NULL; |
|
| 44 | 44 | $return = '<hr><h3>Statistics by UID</h3><table><tr><th>UID</th><th>Learned times</th></tr>'."\n"; |
| 45 | 45 | |
| 46 | 46 | /* Remove count index */ |
| 47 | 47 | $uids = array_keys($uidvet['uid']); |
| 48 | 48 | $totlearn = 0; |
| 49 | 49 | |
| 50 | - foreach ( $uids as $uid ) { |
|
| 51 | - $totlearn += $uidvet['uid']["$uid"]['count'];; |
|
| 52 | - $return .= sprintf ('<tr><td>%s</td><td>%u</td></tr>',$uid,$uidvet['uid']["$uid"]['count']); |
|
| 50 | + foreach ($uids as $uid) { |
|
| 51 | + $totlearn += $uidvet['uid']["$uid"]['count']; ; |
|
| 52 | + $return .= sprintf('<tr><td>%s</td><td>%u</td></tr>', $uid, $uidvet['uid']["$uid"]['count']); |
|
| 53 | 53 | } |
| 54 | - $return .= sprintf ('<tr><th>%s</th><th>%u</th></tr></table>','TOT',$totlearn); |
|
| 55 | - $return .= sprintf ('<p>%s : %u</p>','Unique UID',$nuid); |
|
| 54 | + $return .= sprintf('<tr><th>%s</th><th>%u</th></tr></table>', 'TOT', $totlearn); |
|
| 55 | + $return .= sprintf('<p>%s : %u</p>', 'Unique UID', $nuid); |
|
| 56 | 56 | |
| 57 | 57 | return $return; |
| 58 | 58 | } |
@@ -69,12 +69,12 @@ discard block |
||
| 69 | 69 | foreach ($cols as $col => $order) { |
| 70 | 70 | $eval .= '$colarr[\''.$col.'\'],'.$order.','; |
| 71 | 71 | } |
| 72 | - $eval = substr($eval,0,-1).');'; |
|
| 72 | + $eval = substr($eval, 0, -1).');'; |
|
| 73 | 73 | eval($eval); |
| 74 | 74 | $ret = array(); |
| 75 | 75 | foreach ($colarr as $col => $arr) { |
| 76 | 76 | foreach ($arr as $k => $v) { |
| 77 | - $k = substr($k,1); |
|
| 77 | + $k = substr($k, 1); |
|
| 78 | 78 | if (!isset($ret[$k])) $ret[$k] = $array[$k]; |
| 79 | 79 | if (isset ($array[$k][$col])) $ret[$k][$col] = $array[$k][$col]; |
| 80 | 80 | } |
@@ -84,33 +84,33 @@ discard block |
||
| 84 | 84 | } |
| 85 | 85 | |
| 86 | 86 | |
| 87 | -function summaryReportAndList ($cf,$myconn,$tables,$category,$vet,$key) { |
|
| 87 | +function summaryReportAndList($cf, $myconn, $tables, $category, $vet, $key) { |
|
| 88 | 88 | $nk = $vet['count']; |
| 89 | 89 | |
| 90 | - if ( empty($vet) ) return NULL; |
|
| 90 | + if (empty($vet)) return NULL; |
|
| 91 | 91 | |
| 92 | - $return = sprintf('<h3>Statistics by %s</h3><table><tr><th>%s</th><th>Learned by</th><th>Learned times</th><th title="This field doesn\'t say if this %s is currently listed, but it says if this %s has listed now!">Listed Now</th></tr>'."\n", strtoupper($key),strtoupper($key),$key,$key); |
|
| 92 | + $return = sprintf('<h3>Statistics by %s</h3><table><tr><th>%s</th><th>Learned by</th><th>Learned times</th><th title="This field doesn\'t say if this %s is currently listed, but it says if this %s has listed now!">Listed Now</th></tr>'."\n", strtoupper($key), strtoupper($key), $key, $key); |
|
| 93 | 93 | |
| 94 | 94 | $values = array_keys($vet["$key"]); |
| 95 | 95 | |
| 96 | - foreach ( $values as $value ) { |
|
| 97 | - if ( $value == 'count' ) continue; |
|
| 96 | + foreach ($values as $value) { |
|
| 97 | + if ($value == 'count') continue; |
|
| 98 | 98 | $nlearn = $vet["$key"]["$value"]['count']; |
| 99 | 99 | unset($vet["$key"]["$value"]['count']); |
| 100 | 100 | $quantity = $cf["listing$key"]['quantity']["$category"]; /* In searchAndList this value is |
| 101 | 101 | passed by reference and modified */ |
| 102 | 102 | $nuid = count($vet["$key"]["$value"]); |
| 103 | - if ( !$cf["listing$key"]['onlyReport']["$category"] ) { |
|
| 104 | - if ( ($nlearn >= $cf["listing$key"]['threshold']["$category"])&&($nuid >= $cf["listing$key"]['thresholduid']["$category"]) ) { |
|
| 103 | + if (!$cf["listing$key"]['onlyReport']["$category"]) { |
|
| 104 | + if (($nlearn>=$cf["listing$key"]['threshold']["$category"]) && ($nuid>=$cf["listing$key"]['thresholduid']["$category"])) { |
|
| 105 | 105 | $reason = sprintf( |
| 106 | 106 | 'The %s <%s> has been listed because was marked %u times as %s by %u different accounts during last %u days.', |
| 107 | - strtoupper($key),$value,$nlearn,$category,$nuid,$cf['imap']['oldestday']); |
|
| 108 | - $listed = searchAndList ($myconn,$cf['syslog']['user'],$tables,$cf["listing$key"]['list']["$category"],$value,$cf["listing$key"]['unit']["$category"],$quantity,$reason); |
|
| 107 | + strtoupper($key), $value, $nlearn, $category, $nuid, $cf['imap']['oldestday']); |
|
| 108 | + $listed = searchAndList($myconn, $cf['syslog']['user'], $tables, $cf["listing$key"]['list']["$category"], $value, $cf["listing$key"]['unit']["$category"], $quantity, $reason); |
|
| 109 | 109 | } |
| 110 | 110 | else $listed = FALSE; |
| 111 | 111 | } |
| 112 | 112 | else $listed = FALSE; |
| 113 | - $nowlist = array( TRUE => array( |
|
| 113 | + $nowlist = array(TRUE => array( |
|
| 114 | 114 | 'style' => 'id=\'ipfound\'', |
| 115 | 115 | 'name' => 'YES', |
| 116 | 116 | ), |
@@ -124,46 +124,46 @@ discard block |
||
| 124 | 124 | ) |
| 125 | 125 | ); |
| 126 | 126 | |
| 127 | - $return .='<tr><td rowspan="'.$nuid.'">'.$value.'</td>'; |
|
| 128 | - $return .= sprintf ('<td>%s</td><td rowspan="'.$nuid.'">%u</td><td rowspan="'.$nuid.'" '.$nowlist["$listed"]['style'].'>%s</td></tr>',$vet["$key"]["$value"][0],$nlearn,$nowlist["$listed"]['name']); |
|
| 129 | - $rowuid=NULL; |
|
| 130 | - for ($j=1;$j<$nuid;$j++) $rowuid .= '<tr><td>%s</td></tr>'; |
|
| 127 | + $return .= '<tr><td rowspan="'.$nuid.'">'.$value.'</td>'; |
|
| 128 | + $return .= sprintf('<td>%s</td><td rowspan="'.$nuid.'">%u</td><td rowspan="'.$nuid.'" '.$nowlist["$listed"]['style'].'>%s</td></tr>', $vet["$key"]["$value"][0], $nlearn, $nowlist["$listed"]['name']); |
|
| 129 | + $rowuid = NULL; |
|
| 130 | + for ($j = 1; $j<$nuid; $j++) $rowuid .= '<tr><td>%s</td></tr>'; |
|
| 131 | 131 | array_shift($vet["$key"]["$value"]); |
| 132 | - $return .= vsprintf ($rowuid,$vet["$key"]["$value"]); |
|
| 132 | + $return .= vsprintf($rowuid, $vet["$key"]["$value"]); |
|
| 133 | 133 | |
| 134 | 134 | } |
| 135 | - $return .= sprintf ('<tr><th title="unique %s">%u</th><th title="unique uids">%u</th><th>%u</th></table>',$key,$vet["$key"]['count'],$vet['uid']['count'],$nk); |
|
| 135 | + $return .= sprintf('<tr><th title="unique %s">%u</th><th title="unique uids">%u</th><th>%u</th></table>', $key, $vet["$key"]['count'], $vet['uid']['count'], $nk); |
|
| 136 | 136 | |
| 137 | 137 | |
| 138 | 138 | /* Statistics by UID */ |
| 139 | 139 | /* Not used for listing purpose, but useful to you! */ |
| 140 | - $return .= sprintf('<h3>Statistics by UID</h3><table><tr><th>UID</th><th>%s learned</th><th>Learned times</th></tr>'."\n",$key); |
|
| 140 | + $return .= sprintf('<h3>Statistics by UID</h3><table><tr><th>UID</th><th>%s learned</th><th>Learned times</th></tr>'."\n", $key); |
|
| 141 | 141 | $uids = array_keys($vet['uid']); |
| 142 | - foreach ( $uids as $uid ) { |
|
| 143 | - if ( $uid == 'count' ) continue; |
|
| 142 | + foreach ($uids as $uid) { |
|
| 143 | + if ($uid == 'count') continue; |
|
| 144 | 144 | $nlearn = $vet['uid']["$uid"]['count']; |
| 145 | - unset ( $vet['uid']["$uid"]['count'] ); |
|
| 145 | + unset ($vet['uid']["$uid"]['count']); |
|
| 146 | 146 | $nip = count($vet['uid']["$uid"]); |
| 147 | - $return .='<tr><td rowspan="'.$nip.'">'.$uid.'</td>'; |
|
| 148 | - $return .= sprintf ('<td>%s</td><td rowspan="'.$nip.'">%u</td></tr>',$vet['uid']["$uid"][0],$nlearn); |
|
| 149 | - $rowuid=NULL; |
|
| 150 | - for ($j=1;$j<$nip;$j++) $rowuid .= '<tr><td>%s</td></tr>'; |
|
| 147 | + $return .= '<tr><td rowspan="'.$nip.'">'.$uid.'</td>'; |
|
| 148 | + $return .= sprintf('<td>%s</td><td rowspan="'.$nip.'">%u</td></tr>', $vet['uid']["$uid"][0], $nlearn); |
|
| 149 | + $rowuid = NULL; |
|
| 150 | + for ($j = 1; $j<$nip; $j++) $rowuid .= '<tr><td>%s</td></tr>'; |
|
| 151 | 151 | array_shift($vet['uid']["$uid"]); |
| 152 | - $return .= vsprintf ($rowuid,$vet['uid']["$uid"]); |
|
| 152 | + $return .= vsprintf($rowuid, $vet['uid']["$uid"]); |
|
| 153 | 153 | |
| 154 | 154 | } |
| 155 | - $return .= sprintf ('<tr><th title="unique uids">%u</th><th title="unique %s">%u</th><th>%u</th></table>', |
|
| 156 | - $vet['uid']['count'],$key,$vet["$key"]['count'],$nk); |
|
| 155 | + $return .= sprintf('<tr><th title="unique uids">%u</th><th title="unique %s">%u</th><th>%u</th></table>', |
|
| 156 | + $vet['uid']['count'], $key, $vet["$key"]['count'], $nk); |
|
| 157 | 157 | |
| 158 | 158 | |
| 159 | 159 | return $return; |
| 160 | 160 | } |
| 161 | 161 | |
| 162 | 162 | |
| 163 | -function splunksearch ($service,$message_id,$date) { |
|
| 163 | +function splunksearch($service, $message_id, $date) { |
|
| 164 | 164 | |
| 165 | 165 | // Run a blocking search |
| 166 | - $searchQueryBlocking = 'search (message_id="'. addslashes( $message_id ) . |
|
| 166 | + $searchQueryBlocking = 'search (message_id="'.addslashes($message_id). |
|
| 167 | 167 | '" OR sasl_username) | transaction message_id queue_id maxspan=3m maxpause=2m | search sasl_username message_id=* | table sasl_username'; |
| 168 | 168 | |
| 169 | 169 | /* Doesn't work on Splunk 6.6 for HTTP exceptions |
@@ -182,8 +182,8 @@ discard block |
||
| 182 | 182 | |
| 183 | 183 | // A one shot search |
| 184 | 184 | $searchParams = array( |
| 185 | - 'earliest_time' => date("c",strtotime ($date)-120), |
|
| 186 | - 'latest_time' => date("c",strtotime ($date)+60) |
|
| 185 | + 'earliest_time' => date("c", strtotime($date)-120), |
|
| 186 | + 'latest_time' => date("c", strtotime($date)+60) |
|
| 187 | 187 | ); |
| 188 | 188 | |
| 189 | 189 | // Run a oneshot search that returns the job's results |
@@ -197,7 +197,7 @@ discard block |
||
| 197 | 197 | { |
| 198 | 198 | // More than one field attribute returned by search |
| 199 | 199 | // You must redefine the search |
| 200 | - if ( count($result->getFieldNames()) > 1 ) return FALSE; |
|
| 200 | + if (count($result->getFieldNames())>1) return FALSE; |
|
| 201 | 201 | } |
| 202 | 202 | else if ($result instanceof Splunk_ResultsMessage) |
| 203 | 203 | { |
@@ -235,13 +235,13 @@ discard block |
||
| 235 | 235 | |
| 236 | 236 | function flattenParts($messageParts, $flattenedParts = array(), $prefix = '', $index = 1, $fullPrefix = true) { |
| 237 | 237 | |
| 238 | - foreach($messageParts as $part) { |
|
| 238 | + foreach ($messageParts as $part) { |
|
| 239 | 239 | $flattenedParts[$prefix.$index] = $part; |
| 240 | - if(isset($part->parts)) { |
|
| 241 | - if($part->type == 2) { |
|
| 240 | + if (isset($part->parts)) { |
|
| 241 | + if ($part->type == 2) { |
|
| 242 | 242 | $flattenedParts = flattenParts($part->parts, $flattenedParts, $prefix.$index.'.', 0, false); |
| 243 | 243 | } |
| 244 | - elseif($fullPrefix) { |
|
| 244 | + elseif ($fullPrefix) { |
|
| 245 | 245 | $flattenedParts = flattenParts($part->parts, $flattenedParts, $prefix.$index.'.'); |
| 246 | 246 | } |
| 247 | 247 | else { |
@@ -259,7 +259,7 @@ discard block |
||
| 259 | 259 | function getPart($connection, $messageNumber, $partNumber, $encoding) { |
| 260 | 260 | |
| 261 | 261 | $data = imap_fetchbody($connection, $messageNumber, $partNumber); |
| 262 | - switch($encoding) { |
|
| 262 | + switch ($encoding) { |
|
| 263 | 263 | case 0: return $data; // 7BIT |
| 264 | 264 | case 1: return $data; // 8BIT |
| 265 | 265 | case 2: return $data; // BINARY |
@@ -272,16 +272,16 @@ discard block |
||
| 272 | 272 | } |
| 273 | 273 | /***********************************/ |
| 274 | 274 | |
| 275 | -function getDomains ($text,$exclude) { |
|
| 275 | +function getDomains($text, $exclude) { |
|
| 276 | 276 | /* Pattern from https://mathiasbynens.be/demo/url-regex */ |
| 277 | 277 | /* Current choice: @gruber */ |
| 278 | 278 | $pattern = '#\b(([\w-]+://?|www[.])[^\s()<>]+(?:\([\w\d]+\)|([^[:punct:]\s]|/)))#iS'; |
| 279 | 279 | $ret = array(); |
| 280 | 280 | $num_found = preg_match_all($pattern, $text, $out); |
| 281 | - if ( ($num_found !== FALSE) && ($num_found>0) ) { |
|
| 281 | + if (($num_found !== FALSE) && ($num_found>0)) { |
|
| 282 | 282 | foreach ($out[0] as $url) { |
| 283 | - $dom=parse_url($url, PHP_URL_HOST); |
|
| 284 | - if (!( empty($dom) || in_array($dom,$exclude) )) |
|
| 283 | + $dom = parse_url($url, PHP_URL_HOST); |
|
| 284 | + if (!(empty($dom) || in_array($dom, $exclude))) |
|
| 285 | 285 | $ret[] = $dom; |
| 286 | 286 | } |
| 287 | 287 | } |
@@ -289,14 +289,14 @@ discard block |
||
| 289 | 289 | return array_values(array_unique($ret)); |
| 290 | 290 | } |
| 291 | 291 | |
| 292 | -function parseURL ($connection,$messageNumber, $exclusionList) { |
|
| 292 | +function parseURL($connection, $messageNumber, $exclusionList) { |
|
| 293 | 293 | $message = ''; |
| 294 | 294 | $structure = imap_fetchstructure($connection, $messageNumber); |
| 295 | 295 | if (isset($structure->parts)) { |
| 296 | 296 | $flattenedParts = flattenParts($structure->parts); |
| 297 | - foreach($flattenedParts as $partNumber => $part) { |
|
| 297 | + foreach ($flattenedParts as $partNumber => $part) { |
|
| 298 | 298 | |
| 299 | - switch($part->type) { |
|
| 299 | + switch ($part->type) { |
|
| 300 | 300 | |
| 301 | 301 | case 0: |
| 302 | 302 | // the HTML or plain text part of the email |
@@ -325,13 +325,13 @@ discard block |
||
| 325 | 325 | else |
| 326 | 326 | $message = getPart($connection, $messageNumber, 1, $structure->encoding); |
| 327 | 327 | |
| 328 | - if ( !empty($message) ) |
|
| 328 | + if (!empty($message)) |
|
| 329 | 329 | return getDomains($message, $exclusionList); |
| 330 | 330 | return array(); |
| 331 | 331 | } |
| 332 | 332 | |
| 333 | 333 | function humanKey($key) { |
| 334 | - switch($key) { |
|
| 334 | + switch ($key) { |
|
| 335 | 335 | case 'ip': |
| 336 | 336 | return 'ips'; |
| 337 | 337 | case 'dom': |
@@ -340,67 +340,67 @@ discard block |
||
| 340 | 340 | return $key; |
| 341 | 341 | } |
| 342 | 342 | |
| 343 | -function writeFileHeader($f,$conf,$key,$type,$rtime) { |
|
| 344 | - fwrite( $f, file_get_contents(dirname(__FILE__) . '/' . $conf['report']['reportTemplateHeader']) ); |
|
| 345 | - fwrite( $f,sprintf('<h1> Report of %s %s</h1><h5>%s</h5><h2>Detailed Report</h2>',$type, strtoupper(humanKey($key)),$rtime) ); |
|
| 343 | +function writeFileHeader($f, $conf, $key, $type, $rtime) { |
|
| 344 | + fwrite($f, file_get_contents(dirname(__FILE__).'/'.$conf['report']['reportTemplateHeader'])); |
|
| 345 | + fwrite($f, sprintf('<h1> Report of %s %s</h1><h5>%s</h5><h2>Detailed Report</h2>', $type, strtoupper(humanKey($key)), $rtime)); |
|
| 346 | 346 | if ($conf["listing$key"]['onlyReport']["$type"]) { |
| 347 | - fwrite( $f,sprintf('<p>None of the below %s have been listed because listing is not active in configuration.</p>', |
|
| 348 | - strtoupper(humanKey($key))) ); |
|
| 347 | + fwrite($f, sprintf('<p>None of the below %s have been listed because listing is not active in configuration.</p>', |
|
| 348 | + strtoupper(humanKey($key)))); |
|
| 349 | 349 | syslog(LOG_INFO, sprintf('%s: Report only for %s %s: no listing activated in configuration.', |
| 350 | - $conf['syslog']['user'],$type,humanKey($key)) |
|
| 350 | + $conf['syslog']['user'], $type, humanKey($key)) |
|
| 351 | 351 | ); |
| 352 | 352 | } |
| 353 | - fwrite( $f,sprintf('<table><tr><th title="taken from Received header" nowrap>Date of Learn</th><th title="taken from Date header" nowrap>Date of Write</th><th nowrap>UID</th><th nowrap>%s</th><th title="How many times this uid learns">#UID</th><th title="Number of times this learned %s appears in different mails">#%s</th><th nowrap>Received by</th><th>Message-Id</th></tr>', |
|
| 354 | - strtoupper($key),strtoupper($key),strtoupper($key)) ); |
|
| 353 | + fwrite($f, sprintf('<table><tr><th title="taken from Received header" nowrap>Date of Learn</th><th title="taken from Date header" nowrap>Date of Write</th><th nowrap>UID</th><th nowrap>%s</th><th title="How many times this uid learns">#UID</th><th title="Number of times this learned %s appears in different mails">#%s</th><th nowrap>Received by</th><th>Message-Id</th></tr>', |
|
| 354 | + strtoupper($key), strtoupper($key), strtoupper($key))); |
|
| 355 | 355 | } |
| 356 | 356 | |
| 357 | 357 | |
| 358 | -function imapReport ($cf,$myconnArray,$splunkconn,$tables,$type) { |
|
| 359 | - $file = dirname(__FILE__) . '/' . $cf['report']['reportFile']["$type"]; |
|
| 360 | - $filed = dirname(__FILE__) . '/' . $cf['report']['reportDomFile']["$type"]; |
|
| 361 | - $fileb= dirname(__FILE__) . '/' . $cf['report']['badreportFile']["$type"]; |
|
| 362 | - $m_mail = imap_open('{'.$cf['imap']['mailhost'].':143/imap/novalidate-cert/authuser='.$cf['imap']['authuser'].'}'.$cf['imap']['folder']["$type"], $cf['imap']['account'],$cf['imap']['authpassword'], OP_READONLY) |
|
| 363 | - or syslog (LOG_EMERG, $cf['syslog']['user'].': Error in IMAP connection to <'.$cf['imap']['mailhost'].'>: ' . imap_last_error()); |
|
| 364 | - if ( !$m_mail ) exit(254); |
|
| 358 | +function imapReport($cf, $myconnArray, $splunkconn, $tables, $type) { |
|
| 359 | + $file = dirname(__FILE__).'/'.$cf['report']['reportFile']["$type"]; |
|
| 360 | + $filed = dirname(__FILE__).'/'.$cf['report']['reportDomFile']["$type"]; |
|
| 361 | + $fileb = dirname(__FILE__).'/'.$cf['report']['badreportFile']["$type"]; |
|
| 362 | + $m_mail = imap_open('{'.$cf['imap']['mailhost'].':143/imap/novalidate-cert/authuser='.$cf['imap']['authuser'].'}'.$cf['imap']['folder']["$type"], $cf['imap']['account'], $cf['imap']['authpassword'], OP_READONLY) |
|
| 363 | + or syslog(LOG_EMERG, $cf['syslog']['user'].': Error in IMAP connection to <'.$cf['imap']['mailhost'].'>: '.imap_last_error()); |
|
| 364 | + if (!$m_mail) exit(254); |
|
| 365 | 365 | |
| 366 | 366 | |
| 367 | - syslog (LOG_INFO,$cf['syslog']['user'].': Successfully connected to <'.$cf['imap']['mailhost'].">; Reading $type messages of last ".$cf['imap']['oldestday'].' days...'); |
|
| 367 | + syslog(LOG_INFO, $cf['syslog']['user'].': Successfully connected to <'.$cf['imap']['mailhost'].">; Reading $type messages of last ".$cf['imap']['oldestday'].' days...'); |
|
| 368 | 368 | //get all messages |
| 369 | - $dateTh = date ( "d-M-Y", strToTime ( '-'.$cf['imap']['oldestday'].' days' ) ); |
|
| 370 | - $dateN = date ( "d-M-Y", strToTime ( "now" ) ); |
|
| 371 | - $m_search=imap_search ($m_mail, "SINCE \"$dateTh\" BEFORE \"$dateN\"" ); |
|
| 369 | + $dateTh = date("d-M-Y", strToTime('-'.$cf['imap']['oldestday'].' days')); |
|
| 370 | + $dateN = date("d-M-Y", strToTime("now")); |
|
| 371 | + $m_search = imap_search($m_mail, "SINCE \"$dateTh\" BEFORE \"$dateN\""); |
|
| 372 | 372 | |
| 373 | 373 | // Order results starting from newest message |
| 374 | - if ( empty($m_search) ) { |
|
| 375 | - syslog (LOG_INFO,$cf['syslog']['user'].": No mail found in $type folder. No reports written for $type."); |
|
| 376 | - if ( $ierr = imap_errors() ) |
|
| 377 | - foreach ( $ierr as $thiserr ) |
|
| 378 | - syslog (LOG_ERR, $cf['syslog']['user'].": IMAP Error: $thiserr"); |
|
| 379 | - if ( $ierr = imap_alerts() ) |
|
| 380 | - foreach ( $ierr as $thiserr ) |
|
| 381 | - syslog (LOG_ALERT, $cf['syslog']['user'].": IMAP Alert: $thiserr"); |
|
| 382 | - imap_close( $m_mail ); |
|
| 383 | - if ( file_exists( $file ) ) unlink ($file); |
|
| 384 | - if ( file_exists( $filed ) ) unlink ($filed); |
|
| 385 | - if ( file_exists( $fileb ) ) unlink ($fileb); |
|
| 374 | + if (empty($m_search)) { |
|
| 375 | + syslog(LOG_INFO, $cf['syslog']['user'].": No mail found in $type folder. No reports written for $type."); |
|
| 376 | + if ($ierr = imap_errors()) |
|
| 377 | + foreach ($ierr as $thiserr) |
|
| 378 | + syslog(LOG_ERR, $cf['syslog']['user'].": IMAP Error: $thiserr"); |
|
| 379 | + if ($ierr = imap_alerts()) |
|
| 380 | + foreach ($ierr as $thiserr) |
|
| 381 | + syslog(LOG_ALERT, $cf['syslog']['user'].": IMAP Alert: $thiserr"); |
|
| 382 | + imap_close($m_mail); |
|
| 383 | + if (file_exists($file)) unlink($file); |
|
| 384 | + if (file_exists($filed)) unlink($filed); |
|
| 385 | + if (file_exists($fileb)) unlink($fileb); |
|
| 386 | 386 | return FALSE; |
| 387 | 387 | } |
| 388 | - $nmes = count ($m_search); |
|
| 389 | - syslog (LOG_INFO,$cf['syslog']['user'].": Found $nmes mail in $type folder."); |
|
| 388 | + $nmes = count($m_search); |
|
| 389 | + syslog(LOG_INFO, $cf['syslog']['user'].": Found $nmes mail in $type folder."); |
|
| 390 | 390 | if ($nmes>0) rsort($m_search); |
| 391 | 391 | |
| 392 | 392 | // Create report file |
| 393 | 393 | |
| 394 | 394 | $fp = fopen($file, 'w'); |
| 395 | - $fpd= fopen($filed, 'w'); |
|
| 396 | - $fpb= fopen($fileb, 'w'); |
|
| 397 | - $lastup = "Last Update: " . date ("d F Y H:i", time()); |
|
| 398 | - writeFileHeader($fp,$cf,'ip',$type,$lastup); |
|
| 399 | - writeFileHeader($fpd,$cf,'dom',$type,$lastup); |
|
| 395 | + $fpd = fopen($filed, 'w'); |
|
| 396 | + $fpb = fopen($fileb, 'w'); |
|
| 397 | + $lastup = "Last Update: ".date("d F Y H:i", time()); |
|
| 398 | + writeFileHeader($fp, $cf, 'ip', $type, $lastup); |
|
| 399 | + writeFileHeader($fpd, $cf, 'dom', $type, $lastup); |
|
| 400 | 400 | |
| 401 | - fwrite( $fpb,file_get_contents(dirname(__FILE__) . '/' . $cf['report']['reportTemplateHeader']) ); |
|
| 402 | - fwrite( $fpb,"<h1> Report of bad reported $type mails</h1><h5>$lastup</h5><h2>Detailed Report</h2>" ); |
|
| 403 | - fwrite( $fpb,'<table><tr><th title="taken from Received header" nowrap>Date Learn</th><th title="taken from Date header" nowrap>Date Received</th><th nowrap>UID</th><th>Message-Id</th><th title="Why is this a bad report?">Reason</th></tr>' ); |
|
| 401 | + fwrite($fpb, file_get_contents(dirname(__FILE__).'/'.$cf['report']['reportTemplateHeader'])); |
|
| 402 | + fwrite($fpb, "<h1> Report of bad reported $type mails</h1><h5>$lastup</h5><h2>Detailed Report</h2>"); |
|
| 403 | + fwrite($fpb, '<table><tr><th title="taken from Received header" nowrap>Date Learn</th><th title="taken from Date header" nowrap>Date Received</th><th nowrap>UID</th><th>Message-Id</th><th title="Why is this a bad report?">Reason</th></tr>'); |
|
| 404 | 404 | |
| 405 | 405 | $ipuid = array(); |
| 406 | 406 | $ipuid['count'] = 0; |
@@ -424,105 +424,105 @@ discard block |
||
| 424 | 424 | //get imap header info for obj thang |
| 425 | 425 | //$headers = imap_headerinfo($m_mail, $onem); |
| 426 | 426 | //$head = imap_fetchheader($m_mail, $headers->Msgno); |
| 427 | - $head = imap_fetchheader($m_mail, $onem ); |
|
| 427 | + $head = imap_fetchheader($m_mail, $onem); |
|
| 428 | 428 | //$obj = imap_rfc822_parse_headers( $head); |
| 429 | 429 | |
| 430 | - list ($ip,$host,$dateReceived,$dateClient,$mid) = getIP( $head,$cf['mx_hostname']['mx'],$cf['msa']['msalearn'] ); |
|
| 430 | + list ($ip, $host, $dateReceived, $dateClient, $mid) = getIP($head, $cf['mx_hostname']['mx'], $cf['msa']['msalearn']); |
|
| 431 | 431 | if (empty($mid)) { |
| 432 | - $uid='NA'; |
|
| 433 | - syslog (LOG_ERR, $cf['syslog']['user'].": Error retrieving data for empty Message-ID."); |
|
| 434 | - } else { |
|
| 432 | + $uid = 'NA'; |
|
| 433 | + syslog(LOG_ERR, $cf['syslog']['user'].": Error retrieving data for empty Message-ID."); |
|
| 434 | + }else { |
|
| 435 | 435 | if ($dateReceived === FALSE) { |
| 436 | - $uid='unauthenticated'; |
|
| 437 | - syslog (LOG_ERR, $cf['syslog']['user'].": Error retrieving date for $mid. Maybe this mail was not submitted to Learner MSA"); |
|
| 438 | - } else |
|
| 439 | - if ( !($uid = splunksearch ($splunkconn, trim($mid,'<>'), $dateReceived)) ) { |
|
| 440 | - syslog (LOG_ERR, $cf['syslog']['user'].": Error retrieving uid from Splunk log for $mid."); |
|
| 441 | - $uid='unknown'; |
|
| 436 | + $uid = 'unauthenticated'; |
|
| 437 | + syslog(LOG_ERR, $cf['syslog']['user'].": Error retrieving date for $mid. Maybe this mail was not submitted to Learner MSA"); |
|
| 438 | + }else |
|
| 439 | + if (!($uid = splunksearch($splunkconn, trim($mid, '<>'), $dateReceived))) { |
|
| 440 | + syslog(LOG_ERR, $cf['syslog']['user'].": Error retrieving uid from Splunk log for $mid."); |
|
| 441 | + $uid = 'unknown'; |
|
| 442 | 442 | } |
| 443 | 443 | } |
| 444 | 444 | |
| 445 | 445 | /* Extract domains url in body */ |
| 446 | - $domains = parseURL ($m_mail,$onem,$cf['listingdom']['exclude']); |
|
| 446 | + $domains = parseURL($m_mail, $onem, $cf['listingdom']['exclude']); |
|
| 447 | 447 | |
| 448 | 448 | /* Update count of each ip */ |
| 449 | - if ($host and ($uid!='NA') and ($uid!='unauthenticated') and ($uid!='unknown')) { /* IP is received by MX servers and learned by valid uid */ |
|
| 450 | - $ipuid['count']++; //number of right messages |
|
| 449 | + if ($host and ($uid != 'NA') and ($uid != 'unauthenticated') and ($uid != 'unknown')) { /* IP is received by MX servers and learned by valid uid */ |
|
| 450 | + $ipuid['count']++; //number of right messages |
|
| 451 | 451 | |
| 452 | - if (in_array($uid,array_keys($ipuid['uid']))) { |
|
| 453 | - $ipuid['uid']["$uid"]['count']++; //number of learn by this uid |
|
| 454 | - if (!in_array($ip,$ipuid['uid']["$uid"])) |
|
| 455 | - $ipuid['uid']["$uid"][]=$ip; //ips learned by this uid |
|
| 452 | + if (in_array($uid, array_keys($ipuid['uid']))) { |
|
| 453 | + $ipuid['uid']["$uid"]['count']++; //number of learn by this uid |
|
| 454 | + if (!in_array($ip, $ipuid['uid']["$uid"])) |
|
| 455 | + $ipuid['uid']["$uid"][] = $ip; //ips learned by this uid |
|
| 456 | 456 | } |
| 457 | 457 | else { |
| 458 | 458 | $ipuid['uid']["$uid"]['count'] = 1; |
| 459 | - $ipuid['uid']["$uid"][]=$ip; |
|
| 460 | - $ipuid['uid']['count']++; //number of unique uids |
|
| 459 | + $ipuid['uid']["$uid"][] = $ip; |
|
| 460 | + $ipuid['uid']['count']++; //number of unique uids |
|
| 461 | 461 | } |
| 462 | 462 | |
| 463 | - if (in_array($ip,array_keys($ipuid['ip']))) { |
|
| 464 | - $ipuid['ip']["$ip"]['count']++; //number of time this ip appears in different messages |
|
| 465 | - if (!in_array($uid,$ipuid['ip']["$ip"])) |
|
| 466 | - $ipuid['ip']["$ip"][]=$uid; //uids that learned this ip |
|
| 463 | + if (in_array($ip, array_keys($ipuid['ip']))) { |
|
| 464 | + $ipuid['ip']["$ip"]['count']++; //number of time this ip appears in different messages |
|
| 465 | + if (!in_array($uid, $ipuid['ip']["$ip"])) |
|
| 466 | + $ipuid['ip']["$ip"][] = $uid; //uids that learned this ip |
|
| 467 | 467 | } |
| 468 | 468 | else { |
| 469 | 469 | $ipuid['ip']["$ip"]['count'] = 1; |
| 470 | - $ipuid['ip']["$ip"][]=$uid; |
|
| 471 | - $ipuid['ip']['count']++; //number of unique ips |
|
| 470 | + $ipuid['ip']["$ip"][] = $uid; |
|
| 471 | + $ipuid['ip']['count']++; //number of unique ips |
|
| 472 | 472 | } |
| 473 | 473 | |
| 474 | 474 | foreach ($domains as $dom) { |
| 475 | 475 | $domuid['count']++; |
| 476 | - if (in_array($uid,array_keys($domuid['uid']))) { |
|
| 477 | - $domuid['uid']["$uid"]['count']++; //number of learn by this uid |
|
| 478 | - if (!in_array($dom,$domuid['uid']["$uid"])) |
|
| 479 | - $domuid['uid']["$uid"][]=$dom; //domains learned by this uid |
|
| 476 | + if (in_array($uid, array_keys($domuid['uid']))) { |
|
| 477 | + $domuid['uid']["$uid"]['count']++; //number of learn by this uid |
|
| 478 | + if (!in_array($dom, $domuid['uid']["$uid"])) |
|
| 479 | + $domuid['uid']["$uid"][] = $dom; //domains learned by this uid |
|
| 480 | 480 | } |
| 481 | 481 | else { |
| 482 | 482 | $domuid['uid']["$uid"]['count'] = 1; |
| 483 | - $domuid['uid']["$uid"][]=$dom; |
|
| 484 | - $domuid['uid']['count']++; //number of unique uids |
|
| 483 | + $domuid['uid']["$uid"][] = $dom; |
|
| 484 | + $domuid['uid']['count']++; //number of unique uids |
|
| 485 | 485 | } |
| 486 | 486 | |
| 487 | - if (in_array($dom,array_keys($domuid['dom']))) { |
|
| 488 | - $domuid['dom']["$dom"]['count']++; //number of learn with this domain |
|
| 489 | - if (!in_array($uid,$domuid['dom']["$dom"])) |
|
| 490 | - $domuid['dom']["$dom"][]=$uid; //uids that learned this domain |
|
| 487 | + if (in_array($dom, array_keys($domuid['dom']))) { |
|
| 488 | + $domuid['dom']["$dom"]['count']++; //number of learn with this domain |
|
| 489 | + if (!in_array($uid, $domuid['dom']["$dom"])) |
|
| 490 | + $domuid['dom']["$dom"][] = $uid; //uids that learned this domain |
|
| 491 | 491 | } |
| 492 | 492 | else { |
| 493 | 493 | $domuid['dom']["$dom"]['count'] = 1; |
| 494 | - $domuid['dom']["$dom"][]=$uid; |
|
| 495 | - $domuid['dom']['count']++; //number of unique domains |
|
| 494 | + $domuid['dom']["$dom"][] = $uid; |
|
| 495 | + $domuid['dom']['count']++; //number of unique domains |
|
| 496 | 496 | } |
| 497 | 497 | |
| 498 | 498 | fwrite($fpd, |
| 499 | - updateReport ( |
|
| 500 | - $dom,$uid,$domuid['dom']["$dom"]['count'], |
|
| 501 | - $domuid['uid']["$uid"]['count'],$host, |
|
| 502 | - $dateClient,$mid,$dateReceived |
|
| 499 | + updateReport( |
|
| 500 | + $dom, $uid, $domuid['dom']["$dom"]['count'], |
|
| 501 | + $domuid['uid']["$uid"]['count'], $host, |
|
| 502 | + $dateClient, $mid, $dateReceived |
|
| 503 | 503 | ) |
| 504 | 504 | ); |
| 505 | 505 | } |
| 506 | 506 | |
| 507 | 507 | /* Update HTML report */ |
| 508 | - fwrite($fp,updateReport ( $ip,$uid,$ipuid['ip']["$ip"]['count'],$ipuid['uid']["$uid"]['count'],$host,$dateClient,$mid,$dateReceived) ); |
|
| 508 | + fwrite($fp, updateReport($ip, $uid, $ipuid['ip']["$ip"]['count'], $ipuid['uid']["$uid"]['count'], $host, $dateClient, $mid, $dateReceived)); |
|
| 509 | 509 | } |
| 510 | 510 | else { /* Bad learn */ |
| 511 | 511 | |
| 512 | - if (in_array($uid,array_keys($uidbad['uid']))) |
|
| 513 | - $uidbad['uid']["$uid"]['count']++; //number of bad learn by this uid |
|
| 512 | + if (in_array($uid, array_keys($uidbad['uid']))) |
|
| 513 | + $uidbad['uid']["$uid"]['count']++; //number of bad learn by this uid |
|
| 514 | 514 | else { |
| 515 | 515 | $uidbad['uid']["$uid"]['count'] = 1; |
| 516 | - $uidbad['uid']["$uid"][]=$uid; |
|
| 517 | - $uidbad['count']++; //numeber of unique bad uids |
|
| 516 | + $uidbad['uid']["$uid"][] = $uid; |
|
| 517 | + $uidbad['count']++; //numeber of unique bad uids |
|
| 518 | 518 | } |
| 519 | 519 | /* The reason of bad report */ |
| 520 | 520 | if ($host === FALSE) $reason = 'This mail was not received by recognized MX host'; |
| 521 | 521 | if ($dateReceived === FALSE) $reason = 'This mail was not submitted to recognized MSA for learn'; |
| 522 | - if ($uid=='unknown') $reason = 'The uid of this mail was not found in splunk log'; |
|
| 522 | + if ($uid == 'unknown') $reason = 'The uid of this mail was not found in splunk log'; |
|
| 523 | 523 | if (!isset($reason)) $reason = '?'; |
| 524 | 524 | |
| 525 | - fwrite( $fpb,updatebadReport ( $uid,$dateClient,$mid,$dateReceived,$reason ) ); |
|
| 525 | + fwrite($fpb, updatebadReport($uid, $dateClient, $mid, $dateReceived, $reason)); |
|
| 526 | 526 | } |
| 527 | 527 | } |
| 528 | 528 | |
@@ -530,54 +530,54 @@ discard block |
||
| 530 | 530 | //close report file and mailbox |
| 531 | 531 | |
| 532 | 532 | /* Summary Report */ |
| 533 | - $ipuid['ip'] = array_msort( $ipuid['ip'], array('count'=>SORT_DESC) ); |
|
| 534 | - $ipuid['uid'] = array_msort( $ipuid['uid'], array('count'=>SORT_DESC) ); |
|
| 535 | - $domuid['dom'] = array_msort( $domuid['dom'], array('count'=>SORT_DESC) ); |
|
| 536 | - $domuid['uid'] = array_msort( $domuid['uid'], array('count'=>SORT_DESC) ); |
|
| 537 | - $uidbad['uid'] = array_msort( $uidbad['uid'], array('count'=>SORT_DESC) ); |
|
| 533 | + $ipuid['ip'] = array_msort($ipuid['ip'], array('count'=>SORT_DESC)); |
|
| 534 | + $ipuid['uid'] = array_msort($ipuid['uid'], array('count'=>SORT_DESC)); |
|
| 535 | + $domuid['dom'] = array_msort($domuid['dom'], array('count'=>SORT_DESC)); |
|
| 536 | + $domuid['uid'] = array_msort($domuid['uid'], array('count'=>SORT_DESC)); |
|
| 537 | + $uidbad['uid'] = array_msort($uidbad['uid'], array('count'=>SORT_DESC)); |
|
| 538 | 538 | |
| 539 | 539 | fwrite($fp, '</table>'); |
| 540 | 540 | fwrite($fpd, '</table>'); |
| 541 | - fwrite($fp, '<hr><h2>Summary Report</h2><h5>Listing policy: ip must be learned at least '.$cf['listingip']['threshold']["$type"].' times from at least '.$cf['listingip']['thresholduid']["$type"].' different valid uids.</h5>' ); |
|
| 542 | - fwrite($fpd, '<hr><h2>Summary Report</h2><h5>Listing policy: domains must be learned at least '.$cf['listingdom']['threshold']["$type"].' times from at least '.$cf['listingdom']['thresholduid']["$type"].' different valid uids.</h5>' ); |
|
| 541 | + fwrite($fp, '<hr><h2>Summary Report</h2><h5>Listing policy: ip must be learned at least '.$cf['listingip']['threshold']["$type"].' times from at least '.$cf['listingip']['thresholduid']["$type"].' different valid uids.</h5>'); |
|
| 542 | + fwrite($fpd, '<hr><h2>Summary Report</h2><h5>Listing policy: domains must be learned at least '.$cf['listingdom']['threshold']["$type"].' times from at least '.$cf['listingdom']['thresholduid']["$type"].' different valid uids.</h5>'); |
|
| 543 | 543 | |
| 544 | 544 | /* Make MYSQL connection */ |
| 545 | - if ( $cf['listingip']['onlyReport']["$type"] && $cf['listingdom']['onlyReport']["$type"] ) |
|
| 545 | + if ($cf['listingip']['onlyReport']["$type"] && $cf['listingdom']['onlyReport']["$type"]) |
|
| 546 | 546 | $mysqli = NULL; |
| 547 | 547 | else { |
| 548 | 548 | $mysqli = new mysqli($myconnArray['dbhost'], $myconnArray['userdb'], $myconnArray['pwd'], $myconnArray['db'], $myconnArray['dbport']); |
| 549 | 549 | if ($mysqli->connect_error) { |
| 550 | - syslog (LOG_EMERG, $cf['syslog']['user'].': Connect Error (' . $mysqli->connect_errno . ') ' |
|
| 550 | + syslog(LOG_EMERG, $cf['syslog']['user'].': Connect Error ('.$mysqli->connect_errno.') ' |
|
| 551 | 551 | . $mysqli->connect_error); |
| 552 | 552 | exit (254); |
| 553 | 553 | } |
| 554 | - syslog(LOG_INFO, $cf['syslog']['user'].': Successfully mysql connected to ' . $mysqli->host_info) ; |
|
| 554 | + syslog(LOG_INFO, $cf['syslog']['user'].': Successfully mysql connected to '.$mysqli->host_info); |
|
| 555 | 555 | } |
| 556 | 556 | /***********************/ |
| 557 | 557 | |
| 558 | - fwrite($fp, summaryReportAndList ($cf,$mysqli,$tables,$type,$ipuid, 'ip') ); |
|
| 559 | - fwrite($fp,file_get_contents(dirname(__FILE__) . '/' . $cf['report']['reportTemplateFooter'])); |
|
| 558 | + fwrite($fp, summaryReportAndList($cf, $mysqli, $tables, $type, $ipuid, 'ip')); |
|
| 559 | + fwrite($fp, file_get_contents(dirname(__FILE__).'/'.$cf['report']['reportTemplateFooter'])); |
|
| 560 | 560 | fclose($fp); |
| 561 | 561 | |
| 562 | - fwrite($fpd, summaryReportAndList ($cf,$mysqli,$tables,$type,$domuid, 'dom') ); |
|
| 563 | - fwrite($fpd,file_get_contents(dirname(__FILE__) . '/' . $cf['report']['reportTemplateFooter'])); |
|
| 562 | + fwrite($fpd, summaryReportAndList($cf, $mysqli, $tables, $type, $domuid, 'dom')); |
|
| 563 | + fwrite($fpd, file_get_contents(dirname(__FILE__).'/'.$cf['report']['reportTemplateFooter'])); |
|
| 564 | 564 | fclose($fpd); |
| 565 | 565 | |
| 566 | - if ( !($cf['listingip']['onlyReport']["$type"] && $cf['listingdom']['onlyReport']["$type"]) ) |
|
| 566 | + if (!($cf['listingip']['onlyReport']["$type"] && $cf['listingdom']['onlyReport']["$type"])) |
|
| 567 | 567 | $mysqli->close(); |
| 568 | 568 | |
| 569 | 569 | fwrite($fpb, '</table>'); |
| 570 | - fwrite( $fpb,summaryBadReport( $uidbad ) ); |
|
| 571 | - fwrite($fpb,file_get_contents(dirname(__FILE__) . '/' . $cf['report']['reportTemplateFooter'])); |
|
| 570 | + fwrite($fpb, summaryBadReport($uidbad)); |
|
| 571 | + fwrite($fpb, file_get_contents(dirname(__FILE__).'/'.$cf['report']['reportTemplateFooter'])); |
|
| 572 | 572 | fclose($fpb); |
| 573 | - syslog (LOG_INFO,$cf['syslog']['user'].': Report files written. Listing job for '.$type.' terminated.'); |
|
| 574 | - |
|
| 575 | - if ( $ierr = imap_errors() ) |
|
| 576 | - foreach ( $ierr as $thiserr ) |
|
| 577 | - syslog (LOG_ERR, $cf['syslog']['user'].": IMAP Error: $thiserr"); |
|
| 578 | - if ( $ierr = imap_alerts() ) |
|
| 579 | - foreach ( $ierr as $thiserr ) |
|
| 580 | - syslog (LOG_ALERT, $cf['syslog']['user'].": IMAP Alert: $thiserr"); |
|
| 573 | + syslog(LOG_INFO, $cf['syslog']['user'].': Report files written. Listing job for '.$type.' terminated.'); |
|
| 574 | + |
|
| 575 | + if ($ierr = imap_errors()) |
|
| 576 | + foreach ($ierr as $thiserr) |
|
| 577 | + syslog(LOG_ERR, $cf['syslog']['user'].": IMAP Error: $thiserr"); |
|
| 578 | + if ($ierr = imap_alerts()) |
|
| 579 | + foreach ($ierr as $thiserr) |
|
| 580 | + syslog(LOG_ALERT, $cf['syslog']['user'].": IMAP Alert: $thiserr"); |
|
| 581 | 581 | imap_close($m_mail); |
| 582 | 582 | } |
| 583 | 583 | ?> |
@@ -10,21 +10,25 @@ discard block |
||
| 10 | 10 | if ( preg_match_all('/^Received:\sfrom(?:.|\r\n\s)*?[\[\(]\s*(?P<ip>\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})[\]\)](?:.|\r\n\s)+\s+by(?:\s|\r\n\s+)(?P<host>\S+).*(?:\s|\r\n\s\s)+.*;\s+(?P<date>.*)/m',$header,$received) ) { |
| 11 | 11 | for ($i = count($received[0])-1;$i>=0;$i--) { |
| 12 | 12 | # print "Examine ".$received[0][$i]."\n"; |
| 13 | - if ( preg_match($msa,$received['host'][$i]) ) |
|
| 14 | - $dateR = $received['date'][$i]; |
|
| 13 | + if ( preg_match($msa,$received['host'][$i]) ) { |
|
| 14 | + $dateR = $received['date'][$i]; |
|
| 15 | + } |
|
| 15 | 16 | foreach ($mxserver as $mx) { |
| 16 | - if (!$ip) |
|
| 17 | - if ($mx == $received['host'][$i]) { |
|
| 17 | + if (!$ip) { |
|
| 18 | + if ($mx == $received['host'][$i]) { |
|
| 18 | 19 | $host = $received['host'][$i]; |
| 20 | + } |
|
| 19 | 21 | $ip = $received['ip'][$i]; |
| 20 | 22 | } |
| 21 | 23 | } |
| 22 | 24 | } |
| 23 | 25 | } |
| 24 | - if ( preg_match ('/\r\nDate:\s(?P<date>.*)\r\n/',$header,$dateC) != 1) |
|
| 25 | - $dateC['date'] = 'Not found'; |
|
| 26 | - if ( preg_match ('/\r\nMessage\-I(?:D|d):\s(?P<mid>.*)\r\n/',$header,$mid) != 1) |
|
| 27 | - $mid['mid'] = NULL; |
|
| 26 | + if ( preg_match ('/\r\nDate:\s(?P<date>.*)\r\n/',$header,$dateC) != 1) { |
|
| 27 | + $dateC['date'] = 'Not found'; |
|
| 28 | + } |
|
| 29 | + if ( preg_match ('/\r\nMessage\-I(?:D|d):\s(?P<mid>.*)\r\n/',$header,$mid) != 1) { |
|
| 30 | + $mid['mid'] = NULL; |
|
| 31 | + } |
|
| 28 | 32 | return array($ip,$host,$dateR,$dateC['date'],$mid['mid']); |
| 29 | 33 | } |
| 30 | 34 | |
@@ -40,7 +44,9 @@ discard block |
||
| 40 | 44 | |
| 41 | 45 | function summaryBadReport ($uidvet) { |
| 42 | 46 | $nuid = $uidvet['count']; |
| 43 | - if ( empty($uidvet) ) return NULL; |
|
| 47 | + if ( empty($uidvet) ) { |
|
| 48 | + return NULL; |
|
| 49 | + } |
|
| 44 | 50 | $return = '<hr><h3>Statistics by UID</h3><table><tr><th>UID</th><th>Learned times</th></tr>'."\n"; |
| 45 | 51 | |
| 46 | 52 | /* Remove count index */ |
@@ -75,8 +81,12 @@ discard block |
||
| 75 | 81 | foreach ($colarr as $col => $arr) { |
| 76 | 82 | foreach ($arr as $k => $v) { |
| 77 | 83 | $k = substr($k,1); |
| 78 | - if (!isset($ret[$k])) $ret[$k] = $array[$k]; |
|
| 79 | - if (isset ($array[$k][$col])) $ret[$k][$col] = $array[$k][$col]; |
|
| 84 | + if (!isset($ret[$k])) { |
|
| 85 | + $ret[$k] = $array[$k]; |
|
| 86 | + } |
|
| 87 | + if (isset ($array[$k][$col])) { |
|
| 88 | + $ret[$k][$col] = $array[$k][$col]; |
|
| 89 | + } |
|
| 80 | 90 | } |
| 81 | 91 | } |
| 82 | 92 | return $ret; |
@@ -87,14 +97,18 @@ discard block |
||
| 87 | 97 | function summaryReportAndList ($cf,$myconn,$tables,$category,$vet,$key) { |
| 88 | 98 | $nk = $vet['count']; |
| 89 | 99 | |
| 90 | - if ( empty($vet) ) return NULL; |
|
| 100 | + if ( empty($vet) ) { |
|
| 101 | + return NULL; |
|
| 102 | + } |
|
| 91 | 103 | |
| 92 | 104 | $return = sprintf('<h3>Statistics by %s</h3><table><tr><th>%s</th><th>Learned by</th><th>Learned times</th><th title="This field doesn\'t say if this %s is currently listed, but it says if this %s has listed now!">Listed Now</th></tr>'."\n", strtoupper($key),strtoupper($key),$key,$key); |
| 93 | 105 | |
| 94 | 106 | $values = array_keys($vet["$key"]); |
| 95 | 107 | |
| 96 | 108 | foreach ( $values as $value ) { |
| 97 | - if ( $value == 'count' ) continue; |
|
| 109 | + if ( $value == 'count' ) { |
|
| 110 | + continue; |
|
| 111 | + } |
|
| 98 | 112 | $nlearn = $vet["$key"]["$value"]['count']; |
| 99 | 113 | unset($vet["$key"]["$value"]['count']); |
| 100 | 114 | $quantity = $cf["listing$key"]['quantity']["$category"]; /* In searchAndList this value is |
@@ -106,10 +120,12 @@ discard block |
||
| 106 | 120 | 'The %s <%s> has been listed because was marked %u times as %s by %u different accounts during last %u days.', |
| 107 | 121 | strtoupper($key),$value,$nlearn,$category,$nuid,$cf['imap']['oldestday']); |
| 108 | 122 | $listed = searchAndList ($myconn,$cf['syslog']['user'],$tables,$cf["listing$key"]['list']["$category"],$value,$cf["listing$key"]['unit']["$category"],$quantity,$reason); |
| 123 | + } else { |
|
| 124 | + $listed = FALSE; |
|
| 109 | 125 | } |
| 110 | - else $listed = FALSE; |
|
| 126 | + } else { |
|
| 127 | + $listed = FALSE; |
|
| 111 | 128 | } |
| 112 | - else $listed = FALSE; |
|
| 113 | 129 | $nowlist = array( TRUE => array( |
| 114 | 130 | 'style' => 'id=\'ipfound\'', |
| 115 | 131 | 'name' => 'YES', |
@@ -127,7 +143,9 @@ discard block |
||
| 127 | 143 | $return .='<tr><td rowspan="'.$nuid.'">'.$value.'</td>'; |
| 128 | 144 | $return .= sprintf ('<td>%s</td><td rowspan="'.$nuid.'">%u</td><td rowspan="'.$nuid.'" '.$nowlist["$listed"]['style'].'>%s</td></tr>',$vet["$key"]["$value"][0],$nlearn,$nowlist["$listed"]['name']); |
| 129 | 145 | $rowuid=NULL; |
| 130 | - for ($j=1;$j<$nuid;$j++) $rowuid .= '<tr><td>%s</td></tr>'; |
|
| 146 | + for ($j=1;$j<$nuid;$j++) { |
|
| 147 | + $rowuid .= '<tr><td>%s</td></tr>'; |
|
| 148 | + } |
|
| 131 | 149 | array_shift($vet["$key"]["$value"]); |
| 132 | 150 | $return .= vsprintf ($rowuid,$vet["$key"]["$value"]); |
| 133 | 151 | |
@@ -140,14 +158,18 @@ discard block |
||
| 140 | 158 | $return .= sprintf('<h3>Statistics by UID</h3><table><tr><th>UID</th><th>%s learned</th><th>Learned times</th></tr>'."\n",$key); |
| 141 | 159 | $uids = array_keys($vet['uid']); |
| 142 | 160 | foreach ( $uids as $uid ) { |
| 143 | - if ( $uid == 'count' ) continue; |
|
| 161 | + if ( $uid == 'count' ) { |
|
| 162 | + continue; |
|
| 163 | + } |
|
| 144 | 164 | $nlearn = $vet['uid']["$uid"]['count']; |
| 145 | 165 | unset ( $vet['uid']["$uid"]['count'] ); |
| 146 | 166 | $nip = count($vet['uid']["$uid"]); |
| 147 | 167 | $return .='<tr><td rowspan="'.$nip.'">'.$uid.'</td>'; |
| 148 | 168 | $return .= sprintf ('<td>%s</td><td rowspan="'.$nip.'">%u</td></tr>',$vet['uid']["$uid"][0],$nlearn); |
| 149 | 169 | $rowuid=NULL; |
| 150 | - for ($j=1;$j<$nip;$j++) $rowuid .= '<tr><td>%s</td></tr>'; |
|
| 170 | + for ($j=1;$j<$nip;$j++) { |
|
| 171 | + $rowuid .= '<tr><td>%s</td></tr>'; |
|
| 172 | + } |
|
| 151 | 173 | array_shift($vet['uid']["$uid"]); |
| 152 | 174 | $return .= vsprintf ($rowuid,$vet['uid']["$uid"]); |
| 153 | 175 | |
@@ -197,14 +219,14 @@ discard block |
||
| 197 | 219 | { |
| 198 | 220 | // More than one field attribute returned by search |
| 199 | 221 | // You must redefine the search |
| 200 | - if ( count($result->getFieldNames()) > 1 ) return FALSE; |
|
| 201 | - } |
|
| 202 | - else if ($result instanceof Splunk_ResultsMessage) |
|
| 222 | + if ( count($result->getFieldNames()) > 1 ) { |
|
| 223 | + return FALSE; |
|
| 224 | + } |
|
| 225 | + } else if ($result instanceof Splunk_ResultsMessage) |
|
| 203 | 226 | { |
| 204 | 227 | // I don't want messages in my search |
| 205 | 228 | return FALSE; |
| 206 | - } |
|
| 207 | - else if (is_array($result)) |
|
| 229 | + } else if (is_array($result)) |
|
| 208 | 230 | { |
| 209 | 231 | // Process a row |
| 210 | 232 | foreach ($result as $key => $valueOrValues) |
@@ -212,15 +234,13 @@ discard block |
||
| 212 | 234 | if (is_array($valueOrValues)) |
| 213 | 235 | { |
| 214 | 236 | return FALSE; |
| 215 | - } |
|
| 216 | - else |
|
| 237 | + } else |
|
| 217 | 238 | { |
| 218 | 239 | return $valueOrValues; |
| 219 | 240 | #print " {$key} => {$value}\r\n"; |
| 220 | 241 | } |
| 221 | 242 | } |
| 222 | - } |
|
| 223 | - else |
|
| 243 | + } else |
|
| 224 | 244 | { |
| 225 | 245 | #print "Unknow result type"; |
| 226 | 246 | return FALSE; |
@@ -240,11 +260,9 @@ discard block |
||
| 240 | 260 | if(isset($part->parts)) { |
| 241 | 261 | if($part->type == 2) { |
| 242 | 262 | $flattenedParts = flattenParts($part->parts, $flattenedParts, $prefix.$index.'.', 0, false); |
| 243 | - } |
|
| 244 | - elseif($fullPrefix) { |
|
| 263 | + } elseif($fullPrefix) { |
|
| 245 | 264 | $flattenedParts = flattenParts($part->parts, $flattenedParts, $prefix.$index.'.'); |
| 246 | - } |
|
| 247 | - else { |
|
| 265 | + } else { |
|
| 248 | 266 | $flattenedParts = flattenParts($part->parts, $flattenedParts, $prefix); |
| 249 | 267 | } |
| 250 | 268 | unset($flattenedParts[$prefix.$index]->parts); |
@@ -281,8 +299,9 @@ discard block |
||
| 281 | 299 | if ( ($num_found !== FALSE) && ($num_found>0) ) { |
| 282 | 300 | foreach ($out[0] as $url) { |
| 283 | 301 | $dom=parse_url($url, PHP_URL_HOST); |
| 284 | - if (!( empty($dom) || in_array($dom,$exclude) )) |
|
| 285 | - $ret[] = $dom; |
|
| 302 | + if (!( empty($dom) || in_array($dom,$exclude) )) { |
|
| 303 | + $ret[] = $dom; |
|
| 304 | + } |
|
| 286 | 305 | } |
| 287 | 306 | } |
| 288 | 307 | print_r($out[0]); |
@@ -321,12 +340,13 @@ discard block |
||
| 321 | 340 | } |
| 322 | 341 | |
| 323 | 342 | } |
| 343 | + } else { |
|
| 344 | + $message = getPart($connection, $messageNumber, 1, $structure->encoding); |
|
| 324 | 345 | } |
| 325 | - else |
|
| 326 | - $message = getPart($connection, $messageNumber, 1, $structure->encoding); |
|
| 327 | 346 | |
| 328 | - if ( !empty($message) ) |
|
| 329 | - return getDomains($message, $exclusionList); |
|
| 347 | + if ( !empty($message) ) { |
|
| 348 | + return getDomains($message, $exclusionList); |
|
| 349 | + } |
|
| 330 | 350 | return array(); |
| 331 | 351 | } |
| 332 | 352 | |
@@ -361,7 +381,9 @@ discard block |
||
| 361 | 381 | $fileb= dirname(__FILE__) . '/' . $cf['report']['badreportFile']["$type"]; |
| 362 | 382 | $m_mail = imap_open('{'.$cf['imap']['mailhost'].':143/imap/novalidate-cert/authuser='.$cf['imap']['authuser'].'}'.$cf['imap']['folder']["$type"], $cf['imap']['account'],$cf['imap']['authpassword'], OP_READONLY) |
| 363 | 383 | or syslog (LOG_EMERG, $cf['syslog']['user'].': Error in IMAP connection to <'.$cf['imap']['mailhost'].'>: ' . imap_last_error()); |
| 364 | - if ( !$m_mail ) exit(254); |
|
| 384 | + if ( !$m_mail ) { |
|
| 385 | + exit(254); |
|
| 386 | + } |
|
| 365 | 387 | |
| 366 | 388 | |
| 367 | 389 | syslog (LOG_INFO,$cf['syslog']['user'].': Successfully connected to <'.$cf['imap']['mailhost'].">; Reading $type messages of last ".$cf['imap']['oldestday'].' days...'); |
@@ -373,21 +395,31 @@ discard block |
||
| 373 | 395 | // Order results starting from newest message |
| 374 | 396 | if ( empty($m_search) ) { |
| 375 | 397 | syslog (LOG_INFO,$cf['syslog']['user'].": No mail found in $type folder. No reports written for $type."); |
| 376 | - if ( $ierr = imap_errors() ) |
|
| 377 | - foreach ( $ierr as $thiserr ) |
|
| 398 | + if ( $ierr = imap_errors() ) { |
|
| 399 | + foreach ( $ierr as $thiserr ) |
|
| 378 | 400 | syslog (LOG_ERR, $cf['syslog']['user'].": IMAP Error: $thiserr"); |
| 379 | - if ( $ierr = imap_alerts() ) |
|
| 380 | - foreach ( $ierr as $thiserr ) |
|
| 401 | + } |
|
| 402 | + if ( $ierr = imap_alerts() ) { |
|
| 403 | + foreach ( $ierr as $thiserr ) |
|
| 381 | 404 | syslog (LOG_ALERT, $cf['syslog']['user'].": IMAP Alert: $thiserr"); |
| 405 | + } |
|
| 382 | 406 | imap_close( $m_mail ); |
| 383 | - if ( file_exists( $file ) ) unlink ($file); |
|
| 384 | - if ( file_exists( $filed ) ) unlink ($filed); |
|
| 385 | - if ( file_exists( $fileb ) ) unlink ($fileb); |
|
| 407 | + if ( file_exists( $file ) ) { |
|
| 408 | + unlink ($file); |
|
| 409 | + } |
|
| 410 | + if ( file_exists( $filed ) ) { |
|
| 411 | + unlink ($filed); |
|
| 412 | + } |
|
| 413 | + if ( file_exists( $fileb ) ) { |
|
| 414 | + unlink ($fileb); |
|
| 415 | + } |
|
| 386 | 416 | return FALSE; |
| 387 | 417 | } |
| 388 | 418 | $nmes = count ($m_search); |
| 389 | 419 | syslog (LOG_INFO,$cf['syslog']['user'].": Found $nmes mail in $type folder."); |
| 390 | - if ($nmes>0) rsort($m_search); |
|
| 420 | + if ($nmes>0) { |
|
| 421 | + rsort($m_search); |
|
| 422 | + } |
|
| 391 | 423 | |
| 392 | 424 | // Create report file |
| 393 | 425 | |
@@ -451,10 +483,11 @@ discard block |
||
| 451 | 483 | |
| 452 | 484 | if (in_array($uid,array_keys($ipuid['uid']))) { |
| 453 | 485 | $ipuid['uid']["$uid"]['count']++; //number of learn by this uid |
| 454 | - if (!in_array($ip,$ipuid['uid']["$uid"])) |
|
| 455 | - $ipuid['uid']["$uid"][]=$ip; //ips learned by this uid |
|
| 456 | - } |
|
| 457 | - else { |
|
| 486 | + if (!in_array($ip,$ipuid['uid']["$uid"])) { |
|
| 487 | + $ipuid['uid']["$uid"][]=$ip; |
|
| 488 | + } |
|
| 489 | + //ips learned by this uid |
|
| 490 | + } else { |
|
| 458 | 491 | $ipuid['uid']["$uid"]['count'] = 1; |
| 459 | 492 | $ipuid['uid']["$uid"][]=$ip; |
| 460 | 493 | $ipuid['uid']['count']++; //number of unique uids |
@@ -462,10 +495,11 @@ discard block |
||
| 462 | 495 | |
| 463 | 496 | if (in_array($ip,array_keys($ipuid['ip']))) { |
| 464 | 497 | $ipuid['ip']["$ip"]['count']++; //number of time this ip appears in different messages |
| 465 | - if (!in_array($uid,$ipuid['ip']["$ip"])) |
|
| 466 | - $ipuid['ip']["$ip"][]=$uid; //uids that learned this ip |
|
| 467 | - } |
|
| 468 | - else { |
|
| 498 | + if (!in_array($uid,$ipuid['ip']["$ip"])) { |
|
| 499 | + $ipuid['ip']["$ip"][]=$uid; |
|
| 500 | + } |
|
| 501 | + //uids that learned this ip |
|
| 502 | + } else { |
|
| 469 | 503 | $ipuid['ip']["$ip"]['count'] = 1; |
| 470 | 504 | $ipuid['ip']["$ip"][]=$uid; |
| 471 | 505 | $ipuid['ip']['count']++; //number of unique ips |
@@ -475,10 +509,11 @@ discard block |
||
| 475 | 509 | $domuid['count']++; |
| 476 | 510 | if (in_array($uid,array_keys($domuid['uid']))) { |
| 477 | 511 | $domuid['uid']["$uid"]['count']++; //number of learn by this uid |
| 478 | - if (!in_array($dom,$domuid['uid']["$uid"])) |
|
| 479 | - $domuid['uid']["$uid"][]=$dom; //domains learned by this uid |
|
| 480 | - } |
|
| 481 | - else { |
|
| 512 | + if (!in_array($dom,$domuid['uid']["$uid"])) { |
|
| 513 | + $domuid['uid']["$uid"][]=$dom; |
|
| 514 | + } |
|
| 515 | + //domains learned by this uid |
|
| 516 | + } else { |
|
| 482 | 517 | $domuid['uid']["$uid"]['count'] = 1; |
| 483 | 518 | $domuid['uid']["$uid"][]=$dom; |
| 484 | 519 | $domuid['uid']['count']++; //number of unique uids |
@@ -486,10 +521,11 @@ discard block |
||
| 486 | 521 | |
| 487 | 522 | if (in_array($dom,array_keys($domuid['dom']))) { |
| 488 | 523 | $domuid['dom']["$dom"]['count']++; //number of learn with this domain |
| 489 | - if (!in_array($uid,$domuid['dom']["$dom"])) |
|
| 490 | - $domuid['dom']["$dom"][]=$uid; //uids that learned this domain |
|
| 491 | - } |
|
| 492 | - else { |
|
| 524 | + if (!in_array($uid,$domuid['dom']["$dom"])) { |
|
| 525 | + $domuid['dom']["$dom"][]=$uid; |
|
| 526 | + } |
|
| 527 | + //uids that learned this domain |
|
| 528 | + } else { |
|
| 493 | 529 | $domuid['dom']["$dom"]['count'] = 1; |
| 494 | 530 | $domuid['dom']["$dom"][]=$uid; |
| 495 | 531 | $domuid['dom']['count']++; //number of unique domains |
@@ -506,21 +542,30 @@ discard block |
||
| 506 | 542 | |
| 507 | 543 | /* Update HTML report */ |
| 508 | 544 | fwrite($fp,updateReport ( $ip,$uid,$ipuid['ip']["$ip"]['count'],$ipuid['uid']["$uid"]['count'],$host,$dateClient,$mid,$dateReceived) ); |
| 509 | - } |
|
| 510 | - else { /* Bad learn */ |
|
| 545 | + } else { /* Bad learn */ |
|
| 511 | 546 | |
| 512 | - if (in_array($uid,array_keys($uidbad['uid']))) |
|
| 513 | - $uidbad['uid']["$uid"]['count']++; //number of bad learn by this uid |
|
| 547 | + if (in_array($uid,array_keys($uidbad['uid']))) { |
|
| 548 | + $uidbad['uid']["$uid"]['count']++; |
|
| 549 | + } |
|
| 550 | + //number of bad learn by this uid |
|
| 514 | 551 | else { |
| 515 | 552 | $uidbad['uid']["$uid"]['count'] = 1; |
| 516 | 553 | $uidbad['uid']["$uid"][]=$uid; |
| 517 | 554 | $uidbad['count']++; //numeber of unique bad uids |
| 518 | 555 | } |
| 519 | 556 | /* The reason of bad report */ |
| 520 | - if ($host === FALSE) $reason = 'This mail was not received by recognized MX host'; |
|
| 521 | - if ($dateReceived === FALSE) $reason = 'This mail was not submitted to recognized MSA for learn'; |
|
| 522 | - if ($uid=='unknown') $reason = 'The uid of this mail was not found in splunk log'; |
|
| 523 | - if (!isset($reason)) $reason = '?'; |
|
| 557 | + if ($host === FALSE) { |
|
| 558 | + $reason = 'This mail was not received by recognized MX host'; |
|
| 559 | + } |
|
| 560 | + if ($dateReceived === FALSE) { |
|
| 561 | + $reason = 'This mail was not submitted to recognized MSA for learn'; |
|
| 562 | + } |
|
| 563 | + if ($uid=='unknown') { |
|
| 564 | + $reason = 'The uid of this mail was not found in splunk log'; |
|
| 565 | + } |
|
| 566 | + if (!isset($reason)) { |
|
| 567 | + $reason = '?'; |
|
| 568 | + } |
|
| 524 | 569 | |
| 525 | 570 | fwrite( $fpb,updatebadReport ( $uid,$dateClient,$mid,$dateReceived,$reason ) ); |
| 526 | 571 | } |
@@ -542,9 +587,9 @@ discard block |
||
| 542 | 587 | fwrite($fpd, '<hr><h2>Summary Report</h2><h5>Listing policy: domains must be learned at least '.$cf['listingdom']['threshold']["$type"].' times from at least '.$cf['listingdom']['thresholduid']["$type"].' different valid uids.</h5>' ); |
| 543 | 588 | |
| 544 | 589 | /* Make MYSQL connection */ |
| 545 | - if ( $cf['listingip']['onlyReport']["$type"] && $cf['listingdom']['onlyReport']["$type"] ) |
|
| 546 | - $mysqli = NULL; |
|
| 547 | - else { |
|
| 590 | + if ( $cf['listingip']['onlyReport']["$type"] && $cf['listingdom']['onlyReport']["$type"] ) { |
|
| 591 | + $mysqli = NULL; |
|
| 592 | + } else { |
|
| 548 | 593 | $mysqli = new mysqli($myconnArray['dbhost'], $myconnArray['userdb'], $myconnArray['pwd'], $myconnArray['db'], $myconnArray['dbport']); |
| 549 | 594 | if ($mysqli->connect_error) { |
| 550 | 595 | syslog (LOG_EMERG, $cf['syslog']['user'].': Connect Error (' . $mysqli->connect_errno . ') ' |
@@ -563,8 +608,9 @@ discard block |
||
| 563 | 608 | fwrite($fpd,file_get_contents(dirname(__FILE__) . '/' . $cf['report']['reportTemplateFooter'])); |
| 564 | 609 | fclose($fpd); |
| 565 | 610 | |
| 566 | - if ( !($cf['listingip']['onlyReport']["$type"] && $cf['listingdom']['onlyReport']["$type"]) ) |
|
| 567 | - $mysqli->close(); |
|
| 611 | + if ( !($cf['listingip']['onlyReport']["$type"] && $cf['listingdom']['onlyReport']["$type"]) ) { |
|
| 612 | + $mysqli->close(); |
|
| 613 | + } |
|
| 568 | 614 | |
| 569 | 615 | fwrite($fpb, '</table>'); |
| 570 | 616 | fwrite( $fpb,summaryBadReport( $uidbad ) ); |
@@ -572,12 +618,14 @@ discard block |
||
| 572 | 618 | fclose($fpb); |
| 573 | 619 | syslog (LOG_INFO,$cf['syslog']['user'].': Report files written. Listing job for '.$type.' terminated.'); |
| 574 | 620 | |
| 575 | - if ( $ierr = imap_errors() ) |
|
| 576 | - foreach ( $ierr as $thiserr ) |
|
| 621 | + if ( $ierr = imap_errors() ) { |
|
| 622 | + foreach ( $ierr as $thiserr ) |
|
| 577 | 623 | syslog (LOG_ERR, $cf['syslog']['user'].": IMAP Error: $thiserr"); |
| 578 | - if ( $ierr = imap_alerts() ) |
|
| 579 | - foreach ( $ierr as $thiserr ) |
|
| 624 | + } |
|
| 625 | + if ( $ierr = imap_alerts() ) { |
|
| 626 | + foreach ( $ierr as $thiserr ) |
|
| 580 | 627 | syslog (LOG_ALERT, $cf['syslog']['user'].": IMAP Alert: $thiserr"); |
| 628 | + } |
|
| 581 | 629 | imap_close($m_mail); |
| 582 | 630 | } |
| 583 | 631 | ?> |