Zabbix

<?php declare(strict_types = 0);

/*

** Zabbix

** Copyright (C) 2001-2022 Zabbix SIA

**

** This program is free software; you can redistribute it and/or modify

** it under the terms of the GNU General Public License as published by

** the Free Software Foundation; either version 2 of the License, or

** (at your option) any later version.

**

** This program is distributed in the hope that it will be useful,

** but WITHOUT ANY WARRANTY; without even the implied warranty of

** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

** GNU General Public License for more details.

**

** You should have received a copy of the GNU General Public License

** along with this program; if not, write to the Free Software

** Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.

**/

​

​

class CControllerActionOperationValidate extends CController {

​

    protected function checkInput() {

        $fields = [

            'operation' => 'array',

            'actionid'  => 'db actions.actionid'

        ];

​

        $ret = $this->validateInput($fields) && $this->validateOperation();

​

        if (!$ret) {

            $this->setResponse(

                new CControllerResponseData(['main_block' => json_encode([

                    'error' => [

                        'messages' => array_column(get_and_clear_messages(), 'message')

                    ]

                ])])

            );

        }

​

        return $ret;

    }

​

    protected function validateOperation(): bool {

        $operation = $this->getInput('operation', []);

        $required_fields = ['eventsource', 'recovery', 'operationtype'];

​

        foreach ($required_fields as $field) {

            if (!array_key_exists($field, $operation)) {

                error(_s('Field "%1$s" is mandatory.', $field));

​

                return false;

            }

        }

​

        $eventsource = $operation['eventsource'];

        $recovery = $operation['recovery'];

        $operationtype = $operation['operationtype'];

        $allowed_operations = getAllowedOperations($eventsource);

​

        if (!array_key_exists($recovery, $allowed_operations)

                || !in_array($operationtype, $allowed_operations[$recovery])) {