@@ 57-68 (lines=12) @@ | ||
54 | return render_template("whitelistsets/index.html", whitelistsets=wls, selection=_selection) |
|
55 | ||
56 | ||
57 | @whitelistsets.route("/del/<int:wid>", methods=["POST"]) |
|
58 | def remove(wid): |
|
59 | _wlset = NaxsiWhitelistSets.query.filter(NaxsiWhitelistSets.id == wid).first() |
|
60 | if _wlset is None: |
|
61 | flash("The whitelist set %s doesn't exist." % wid, "error") |
|
62 | return redirect(url_for("whitelistsets.index")) |
|
63 | ||
64 | db.session.delete(_wlset) |
|
65 | db.session.commit() |
|
66 | ||
67 | flash("Successfully deleted %s " % _wlset.name, "success") |
|
68 | return redirect(url_for("whitelistsets.index")) |
|
69 | ||
70 | ||
71 | def __get_whitelist_for_whitelistset(whitelistset): |
|
@@ 29-41 (lines=13) @@ | ||
26 | return Response(out, mimetype='text/plain') |
|
27 | ||
28 | ||
29 | @whitelistsets.route("/new", methods=["POST"]) |
|
30 | def new(): |
|
31 | wname = request.form["wname"].strip().upper() |
|
32 | ||
33 | if NaxsiWhitelistSets.query.filter(NaxsiWhitelistSets.name == wname).first(): |
|
34 | flash("The whitelist set %s already exists." % wname, "error") |
|
35 | return redirect(url_for("whitelistsets.index")) |
|
36 | ||
37 | db.session.add(NaxsiWhitelistSets(wname, "naxsi-whitelistset: %s" % wname, int(time()))) |
|
38 | db.session.commit() |
|
39 | ||
40 | flash("OK created: %s " % wname, "success") |
|
41 | return redirect(url_for("whitelistsets.index")) |
|
42 | ||
43 | ||
44 | @whitelistsets.route("/view/<int:wid>") |
@@ 54-65 (lines=12) @@ | ||
51 | return redirect(url_for("rulesets.index")) |
|
52 | ||
53 | ||
54 | @rulesets.route("/del/<int:rname>", methods=["POST"]) |
|
55 | def remove(rname): |
|
56 | _rset = NaxsiRuleSets.query.filter(NaxsiRuleSets.id == rname).first() |
|
57 | if _rset is None: |
|
58 | flash("The ruleset %s doesn't exists." % rname, "error") |
|
59 | return redirect(url_for("rulesets.index")) |
|
60 | ||
61 | db.session.delete(_rset) |
|
62 | db.session.commit() |
|
63 | ||
64 | flash("OK deleted: %s " % rname, "success") |
|
65 | return redirect(url_for("rulesets.index")) |
|
66 | ||
67 | ||
68 | @rulesets.route("/select/<string:selector>", methods=["GET"]) |
|
@@ 41-53 (lines=13) @@ | ||
38 | ||
39 | @rulesets.route("/new", methods=["POST"]) |
|
40 | def new(): # TODO filter parameter |
|
41 | rname = request.form["rname"].strip().upper() |
|
42 | ||
43 | if NaxsiRuleSets.query.filter(NaxsiRuleSets.name == rname).first(): |
|
44 | flash("Ruleset %s is already existing" % rname, "error") |
|
45 | return redirect(url_for("rulesets.index")) |
|
46 | ||
47 | db.session.add(NaxsiRuleSets(rname, "naxsi-ruleset: %s" % rname, int(time()))) |
|
48 | db.session.commit() |
|
49 | ||
50 | flash("OK created: %s " % rname, "success") |
|
51 | return redirect(url_for("rulesets.index")) |
|
52 | ||
53 | ||
54 | @rulesets.route("/del/<int:rname>", methods=["POST"]) |
|
55 | def remove(rname): |
|
56 | _rset = NaxsiRuleSets.query.filter(NaxsiRuleSets.id == rname).first() |
@@ 50-60 (lines=11) @@ | ||
47 | return redirect(url_for('whitelists.new')) |
|
48 | ||
49 | ||
50 | @whitelists.route("/del/<string:wid>", methods=["GET"]) |
|
51 | def del_sid(wid): |
|
52 | _wlist = NaxsiWhitelist.query.filter(NaxsiWhitelist.id == wid).first() |
|
53 | if not _wlist: |
|
54 | return redirect(url_for('whitelists.index')) |
|
55 | ||
56 | db.session.delete(_wlist) |
|
57 | db.session.commit() |
|
58 | ||
59 | flash("Successfully deleted %s" % wid, "success") |
|
60 | return redirect(url_for('whitelists.index')) |
|
61 | ||
62 | ||
63 | @whitelists.route("/generate", methods=["GET", "POST"]) |
@@ 158-168 (lines=11) @@ | ||
155 | ||
156 | if errors: |
|
157 | flash(",".join(errors), 'error') |
|
158 | return redirect("/rules/edit/%s" % sid) |
|
159 | elif warnings: |
|
160 | flash(",".join(warnings), 'warning') |
|
161 | ||
162 | db.session.add(nrule) |
|
163 | db.session.commit() |
|
164 | ||
165 | return redirect("/rules/edit/%s" % sid) |
|
166 | ||
167 | ||
168 | @rules.route("/del/<int:sid>", methods=["GET"]) |
|
169 | def del_sid(sid=''): |
|
170 | nrule = NaxsiRules.query.filter(NaxsiRules.sid == sid).first() |
|
171 | if not nrule: |