Zabbix

<?php declare(strict_types = 0);

/*

** Copyright (C) 2001-2025 Zabbix SIA

**

** This program is free software: you can redistribute it and/or modify it under the terms of

** the GNU Affero General Public License as published by the Free Software Foundation, version 3.

**

** This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;

** without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

** See the GNU Affero General Public License for more details.

**

** You should have received a copy of the GNU Affero General Public License along with this program.

** If not, see <https://www.gnu.org/licenses/>.

**/

​

​

class CControllerPopupActionOperationEdit extends CController {

​

    protected function init() {

        $this->disableCsrfValidation();

    }

​

    protected function checkInput(): bool {

        $fields = [

            'eventsource' =>    'required|db actions.eventsource|in '.implode(',', [

                                    EVENT_SOURCE_TRIGGERS, EVENT_SOURCE_DISCOVERY, EVENT_SOURCE_AUTOREGISTRATION,

                                    EVENT_SOURCE_INTERNAL, EVENT_SOURCE_SERVICE

                                ]),

            'recovery' =>       'db operations.recovery',

            'actionid' =>       'db actions.actionid',

            'operationid' =>    'db operations.operationid',

            'operationtype' =>  'db operations.operationtype',

            'data' =>           'array',

            'row_index' =>      'int32'

        ];

​

        $ret = $this->validateInput($fields) && $this->validateInputConstraints();

​

        if (!$ret) {

            $this->setResponse(

                new CControllerResponseData(['main_block' => json_encode([

                    'error' => [

                        'messages' => array_column(get_and_clear_messages(), 'message')

                    ]

                ])])

            );

        }

​

        return $ret;

    }

​

    protected function validateInputConstraints(): bool {

        $eventsource = $this->getInput('eventsource');

        $recovery = $this->getInput('recovery');

        $allowed_operations = getAllowedOperations($eventsource);

​

        if (!array_key_exists($recovery, $allowed_operations)) {

            error(_('Unsupported operation.'));

            return false;

        }

​

        return true;

    }