mirror of
https://github.com/itflow-org/itflow
synced 2026-11-11 15:07:24 +00:00
57 lines
3.0 KiB
PHP
57 lines
3.0 KiB
PHP
<?php
|
|
|
|
/*
|
|
* ITFlow - Database update to version 3.3.3 (from 3.3.2)
|
|
* Included by admin/database_updates.php - do not access directly
|
|
*/
|
|
|
|
defined('FROM_DB_UPDATER') || die("Direct file access is not allowed");
|
|
|
|
// App logs, retention and forwarding (functions/app_log.php, functions/log_forward.php).
|
|
//
|
|
// Each step checks first, so it can run again.
|
|
$itflow_has_column = function ($column) use ($mysqli) {
|
|
$result = mysqli_query($mysqli, "SELECT 1 FROM information_schema.COLUMNS
|
|
WHERE TABLE_SCHEMA = DATABASE() AND TABLE_NAME = 'settings' AND COLUMN_NAME = '" . mysqli_real_escape_string($mysqli, $column) . "' LIMIT 1");
|
|
return $result && mysqli_num_rows($result) > 0;
|
|
};
|
|
|
|
// 1. The app logs are kept for their own number of days, starting from
|
|
// what the audit log keeps, as both were kept for that until now. For
|
|
// both, 0 is now keep forever.
|
|
if (!$itflow_has_column('config_app_log_retention')) {
|
|
mysqli_query($mysqli, "ALTER TABLE `settings` ADD COLUMN `config_app_log_retention` int(11) NOT NULL DEFAULT 90");
|
|
mysqli_query($mysqli, "UPDATE `settings` SET `config_app_log_retention` = `config_log_retention`");
|
|
}
|
|
|
|
// 2. Sending log entries on to a syslog server or SIEM as they are
|
|
// written: on or off, where to (host, port, and UDP, TCP or TLS), how
|
|
// (JSON, CEF or plain text), what (the audit log, and the app logs from
|
|
// a level up - '' for none) and, over TLS, whether the server's
|
|
// certificate is checked.
|
|
$itflow_columns = [
|
|
'config_log_forward_enabled' => "tinyint(1) NOT NULL DEFAULT 0",
|
|
'config_log_forward_host' => "varchar(200) DEFAULT NULL",
|
|
'config_log_forward_port' => "int(11) NOT NULL DEFAULT 514",
|
|
'config_log_forward_protocol' => "varchar(10) NOT NULL DEFAULT 'udp'",
|
|
'config_log_forward_format' => "varchar(10) NOT NULL DEFAULT 'json'",
|
|
'config_log_forward_audit' => "tinyint(1) NOT NULL DEFAULT 1",
|
|
'config_log_forward_app_level' => "varchar(10) NOT NULL DEFAULT 'warning'",
|
|
'config_log_forward_tls_verify' => "tinyint(1) NOT NULL DEFAULT 1",
|
|
];
|
|
foreach ($itflow_columns as $itflow_column => $itflow_definition) {
|
|
if (!$itflow_has_column($itflow_column)) {
|
|
mysqli_query($mysqli, "ALTER TABLE `settings` ADD COLUMN `$itflow_column` $itflow_definition");
|
|
}
|
|
}
|
|
|
|
// 3. The app logs are listed and cleared by date, and nightly deletes the
|
|
// old ones by date - a key on it.
|
|
$itflow_index = mysqli_query($mysqli, "SELECT 1 FROM information_schema.STATISTICS
|
|
WHERE TABLE_SCHEMA = DATABASE() AND TABLE_NAME = 'app_logs' AND INDEX_NAME = 'app_log_created_at' LIMIT 1");
|
|
if (!$itflow_index || mysqli_num_rows($itflow_index) === 0) {
|
|
mysqli_query($mysqli, "ALTER TABLE `app_logs` ADD KEY `app_log_created_at` (`app_log_created_at`)");
|
|
}
|
|
|
|
unset($itflow_has_column, $itflow_columns, $itflow_column, $itflow_definition, $itflow_index);
|