servcheck_credential.php

<?php
/*
 +-------------------------------------------------------------------------+
 | Copyright (C) 2004-2026 The Cacti Group                                 |
 |                                                                         |
 | This program is free software; you can redistribute it and/or           |
 | modify it under the terms of the GNU General Public License             |
 | as published by the Free Software Foundation; either version 2          |
 | of the License, or (at your option) any later version.                  |
 |                                                                         |
 | This program is distributed in the hope that it will be useful,         |
 | but WITHOUT ANY WARRANTY; without even the implied warranty of          |
 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the           |
 | GNU General Public License for more details.                            |
 +-------------------------------------------------------------------------+
 | Cacti: The Complete RRDtool-based Graphing Solution                     |
 +-------------------------------------------------------------------------+
 | This code is designed, written, and maintained by the Cacti Group. See  |
 | about.php and/or the AUTHORS file for specific developer information.   |
 +-------------------------------------------------------------------------+
 | http://www.cacti.net/                                                   |
 +-------------------------------------------------------------------------+
*/

chdir('../../');
require_once('./include/auth.php');

global $config;

require_once($config['base_path'] . '/plugins/servcheck/includes/functions.php');
require($config['base_path'] . '/plugins/servcheck/includes/arrays.php');

$servcheck_actions_menu = [
	1 => __('Delete', 'servcheck'),
	2 => __('Duplicate', 'servcheck'),
];

set_default_action();

switch (get_request_var('action')) {
	case 'save':
		form_save();

		break;
	case 'actions':
		form_actions();

		break;
	case 'edit':
		top_header();
		servcheck_data_edit();
		bottom_footer();

		break;
	default:
		top_header();
		data_list();
		bottom_footer();

		break;
}

/**
 * Handles the bulk-actions form for the Credentials list (delete/
 * duplicate). On first display, renders the confirmation dialog listing
 * the selected credentials; once confirmed, applies the chosen action
 * to each selected row (delete unlinks referencing tests/proxies;
 * duplicate creates copies with blanked username/password). Invoked from
 * this file's dispatcher when the request's 'action' is 'actions'.
 *
 * @return void Either redirects back to this page after applying the
 *              action, or prints the confirmation dialog and returns
 *              nothing.
 *
 * @global array $servcheck_actions_menu Map of bulk-action ids to their
 *                                       display labels, used for the
 *                                       confirmation dialog title.
 */
function form_actions(): void {
	global $servcheck_actions_menu;

	// ================= input validation =================
	get_filter_request_var('drp_action', FILTER_VALIDATE_REGEXP, ['options' => ['regexp' => '/^([a-zA-Z0-9_]+)$/']]);
	// ====================================================

	// if we are to save this form, instead of display it
	if (isset_request_var('selected_items')) {
		$selected_items = sanitize_unserialize_selected_items(get_nfilter_request_var('selected_items'));

		if ($selected_items != false) {
			if (get_filter_request_var('drp_action') == 1) {
				if (cacti_sizeof($selected_items)) {
					foreach ($selected_items as $item) {
						db_execute_prepared('DELETE FROM plugin_servcheck_credential WHERE id = ?', [$item]);
						db_execute_prepared('UPDATE plugin_servcheck_test SET cred_id = 0 WHERE cred_id = ?', [$item]);
						db_execute_prepared('UPDATE plugin_servcheck_proxy SET cred_id = 0 WHERE cred_id = ?', [$item]);
					}
				}
			} elseif (get_filter_request_var('drp_action') == 2) { // duplicate
				$newid = 1;

				foreach ($selected_items as $id) {
					$save             = db_fetch_row_prepared('SELECT * FROM plugin_servcheck_credential WHERE id = ?', [$id]);

					if (!is_array($save)) {
						continue;
					}

					$save['id']       = 0;
					$save['name']     = 'New Credential (' . $newid . ')';
					$save['type']     = 'userpass';
					$save['username'] = '';
					$save['password'] = '';

					$id = sql_save($save, 'plugin_servcheck_credential');

					$newid++;
				}
			}
		}

		header('Location: ' . htmlspecialchars(basename($_SERVER['PHP_SELF'])) . '?header=false');
		exit;
	}

	// setup some variables
	$item_list   = '';
	$items_array = [];
	$save_html   = '';

	// loop through each of the graphs selected on the previous page and get more info about them
	foreach ($_POST as $var => $val) {
		if (preg_match('/^chk_([0-9]+)$/', $var, $matches)) {
			// ================= input validation =================
			input_validate_input_number($matches[1]);
			// ====================================================

			$item_list .= '<li>' . db_fetch_cell_prepared('SELECT name FROM plugin_servcheck_credential WHERE id = ?', [$matches[1]]) . '</li>';
			$items_array[] = $matches[1];
		}
	}

	top_header();

	form_start(htmlspecialchars(basename($_SERVER['PHP_SELF'])));

	html_start_box($servcheck_actions_menu[get_filter_request_var('drp_action')], '60%', false, 3, 'center', '');

	if (cacti_sizeof($items_array) > 0) {
		if (get_filter_request_var('drp_action') == 1) { // delete
			print "	<tr>
					<td class='topBoxAlt'>
						<p>" . __n('Click \'Continue\' to delete the following items.', 'Click \'Continue\' to delete following items.', cacti_sizeof($items_array)) . "</p>
						<div class='itemlist'><ul>$item_list</ul></div>
					</td>
				</tr>";

			$save_html = "<input class='cactiReturnTo' type='button' value='" . __esc('Cancel') . "'>&nbsp;<input type='submit' value='" . __esc('Continue') . "' title='" . __esc_n('Delete item', 'Delete items', cacti_sizeof($items_array)) . "'>";
		} elseif (get_filter_request_var('drp_action') == 2) { // duplicate
			print "<tr>
				<td class='topBoxAlt'>
					<p>" . __n('Click \'Continue\' to Duplicate the following Credential.', 'Click \'Continue\' to Duplicate following Credential.', cacti_sizeof($items_array)) . "</p><div class='itemlist'><ul>$item_list</ul></div>
				</td>
			</tr>";

			$save_html = "<input class='cactiReturnTo' type='button' value='" . __esc('Cancel') . "'>&nbsp;<input type='submit' value='" . __esc('Continue') . "' title='" . __esc_n('Duplicate Credential', 'Duplicate Credential', cacti_sizeof($items_array)) . "'>";
		}
	} else {
		raise_message(40);
		header('Location: ' . htmlspecialchars(basename($_SERVER['PHP_SELF'])) . '?header=false');
		exit;
	}

	print "<tr>
		<td class='saveRow'>
			<input type='hidden' name='action' value='actions'>
			<input type='hidden' name='selected_items' value='" . serialize($items_array) . "'>
			<input type='hidden' name='drp_action' value='" . get_request_var('drp_action') . "'>
			$save_html
		</td>
	</tr>";

	html_end_box();

	form_end();

	bottom_footer();
}

/**
 * Validates and saves a single credential record, whose required fields
 * vary by credential type (username/password, HTTP Basic, API key,
 * OAuth2 client credentials, cookie-based login, SNMPv1/v2 community,
 * SNMPv3 security parameters, or SSH key), encrypting the type-specific
 * fields before storage. Invoked from this file's dispatcher when the
 * request's 'action' is 'save'.
 *
 * @return void This function always terminates script execution via
 *              exit (after redirecting), and therefore never returns
 *              normally.
 *
 * @global array $credential_types        Valid credential type keys,
 *                                        used to validate the submitted
 *                                        'type'.
 * @global array $snmp_security_levels    Valid SNMPv3 security level
 *                                        keys, used to validate
 *                                        'snmp_security_level' for the
 *                                        'snmp3' type.
 * @global array $snmp_auth_protocols     Valid SNMPv3 auth protocol
 *                                        keys, used to validate
 *                                        'snmp_auth_protocol' for the
 *                                        'snmp3' type.
 * @global array $snmp_priv_protocols     Valid SNMPv3 privacy protocol
 *                                        keys, used to validate
 *                                        'snmp_priv_protocol' for the
 *                                        'snmp3' type.
 * @global array $rest_api_apikey_option  Valid API-key placement option
 *                                        keys, used to validate
 *                                        'option_apikey' for the
 *                                        'apikey' type.
 * @global array $rest_api_cookie_option  Valid cookie placement option
 *                                        keys, used to validate
 *                                        'option_cookie' for the
 *                                        'cookie' type.
 */
function form_save(): void {
	global $credential_types, $snmp_security_levels, $snmp_auth_protocols, $snmp_priv_protocols, $rest_api_apikey_option, $rest_api_cookie_option;

	if (isset_request_var('save_component')) {
		// ================= input validation =================
		get_filter_request_var('id');
		// ====================================================

		$save['id']         = get_nfilter_request_var('id');
		$cred               = [];

		if (isset_request_var('name') && get_nfilter_request_var('name') != '') {
			$save['name'] = get_filter_request_var('name', FILTER_DEFAULT);
		} else {
			$_SESSION['sess_error_fields']['name'] = 'name';
			raise_message(3);
		}

		if (isset_request_var('type') && array_key_exists(get_nfilter_request_var('type'), $credential_types)) {
			$save['type'] = get_nfilter_request_var('type');
		} else {
			$_SESSION['sess_error_fields']['type'] = 'type';
			raise_message(3);
		}

		switch(get_nfilter_request_var('type')) {
			case 'userpass':

				if (isset_request_var('username') && get_nfilter_request_var('username') != '') {
					$cred['username'] = get_filter_request_var('username', FILTER_DEFAULT);
				} else {
					$_SESSION['sess_error_fields']['username'] = 'username';
					raise_message(3);
				}

				if (isset_request_var('password') && get_nfilter_request_var('password') != '') {
					$cred['password'] = get_filter_request_var('password', FILTER_DEFAULT);
				} else {
					$_SESSION['sess_error_fields']['password'] = 'password';
					raise_message(3);
				}

				break;
			case 'basic':
				if (isset_request_var('username') && get_nfilter_request_var('username') != '') {
					$cred['username'] = get_filter_request_var('username', FILTER_DEFAULT);
				} else {
					$_SESSION['sess_error_fields']['username'] = 'username';
					raise_message(3);
				}

				if (isset_request_var('password') && get_nfilter_request_var('password') != '') {
					$cred['password'] = get_filter_request_var('password', FILTER_DEFAULT);
				} else {
					$_SESSION['sess_error_fields']['password'] = 'password';
					raise_message(3);
				}

				if (isset_request_var('data_url') && get_nfilter_request_var('data_url') != '' && get_filter_request_var('data_url', FILTER_VALIDATE_URL)) {
					$cred['data_url'] = get_nfilter_request_var('data_url');
				} else {
					$_SESSION['sess_error_fields']['data_url'] = 'data_url';
					raise_message(3);
				}

				break;
			case 'apikey':
				if (isset_request_var('token_name') && get_nfilter_request_var('token_name') != '') {
					$cred['token_name'] = get_filter_request_var('token_name', FILTER_DEFAULT);
				} else {
					$_SESSION['sess_error_fields']['token_name'] = 'token_name';
					raise_message(3);
				}

				if (isset_request_var('token_value') && get_nfilter_request_var('token_value') != '') {
					$cred['token_value'] = get_filter_request_var('token_value', FILTER_DEFAULT);
				} else {
					$_SESSION['sess_error_fields']['token_value'] = 'token_value';
					raise_message(3);
				}

				if (isset_request_var('data_url') && get_nfilter_request_var('data_url') != '' && get_filter_request_var('data_url', FILTER_VALIDATE_URL)) {
					$cred['data_url'] = get_nfilter_request_var('data_url');
				} else {
					$_SESSION['sess_error_fields']['data_url'] = 'data_url';
					raise_message(3);
				}

				if (isset_request_var('option_apikey') && array_key_exists(get_nfilter_request_var('option_apikey'), $rest_api_apikey_option)) {
					$cred['option_apikey'] = get_nfilter_request_var('option_apikey');
				} else {
					$_SESSION['sess_error_fields']['option_apikey'] = 'option_apikey';
					raise_message(3);
				}

				break;
			case 'oauth2':
				if (isset_request_var('oauth_client_id') && get_nfilter_request_var('oauth_client_id') != '') {
					$cred['oauth_client_id'] = get_filter_request_var('oauth_client_id', FILTER_DEFAULT);
				} else {
					$_SESSION['sess_error_fields']['oauth_client_id'] = 'oauth_client_id';
					raise_message(3);
				}

				if (isset_request_var('oauth_client_secret') && get_nfilter_request_var('oauth_client_secret') != '') {
					$cred['oauth_client_secret'] = get_filter_request_var('oauth_client_secret', FILTER_DEFAULT);
				} else {
					$_SESSION['sess_error_fields']['oauth_client_secret'] = 'oauth_client_secret';
					raise_message(3);
				}

				if (isset_request_var('data_url') && get_nfilter_request_var('data_url') != '' && get_filter_request_var('data_url', FILTER_VALIDATE_URL)) {
					$cred['data_url'] = get_nfilter_request_var('data_url');
				} else {
					$_SESSION['sess_error_fields']['data_url'] = 'data_url';
					raise_message(3);
				}

				if (isset_request_var('login_url') && get_nfilter_request_var('login_url') != '' && get_filter_request_var('login_url', FILTER_VALIDATE_URL)) {
					$cred['login_url'] = get_nfilter_request_var('login_url');
				} else {
					$_SESSION['sess_error_fields']['login_url'] = 'login_url';
					raise_message(3);
				}

				if (isset_request_var('token_name') && get_nfilter_request_var('token_name') != '') {
					$cred['token_name'] = get_filter_request_var('token_name', FILTER_DEFAULT);
				} else {
					$_SESSION['sess_error_fields']['token_name'] = 'token_name';
					raise_message(3);
				}

				if (get_nfilter_request_var('token_value') != '') {
					if (isset_request_var('token_value') && (get_nfilter_request_var('token_value') != '')) {
						$cred['token_value'] = get_filter_request_var('token_value', FILTER_DEFAULT);
					} else {
						$_SESSION['sess_error_fields']['token_value'] = 'token_value';
						raise_message(3);
					}
				}

				break;
			case 'cookie':
				if (isset_request_var('username') && get_nfilter_request_var('username') != '') {
					$cred['username'] = get_filter_request_var('username', FILTER_DEFAULT);
				} else {
					$_SESSION['sess_error_fields']['username'] = 'username';
					raise_message(3);
				}

				if (isset_request_var('password') && get_nfilter_request_var('password') != '') {
					$cred['password'] = get_filter_request_var('password', FILTER_DEFAULT);
				} else {
					$_SESSION['sess_error_fields']['password'] = 'password';
					raise_message(3);
				}

				if (isset_request_var('data_url') && get_nfilter_request_var('data_url') != '' && get_filter_request_var('data_url', FILTER_VALIDATE_URL)) {
					$cred['data_url'] = get_nfilter_request_var('data_url');
				} else {
					$_SESSION['sess_error_fields']['data_url'] = 'data_url';
					raise_message(3);
				}

				if (isset_request_var('login_url') && get_nfilter_request_var('login_url') != '' && get_filter_request_var('login_url', FILTER_VALIDATE_URL)) {
					$cred['login_url'] = get_nfilter_request_var('login_url');
				} else {
					$_SESSION['sess_error_fields']['login_url'] = 'login_url';
					raise_message(3);
				}

				if (isset_request_var('option_cookie') && array_key_exists(get_nfilter_request_var('option_cookie'), $rest_api_cookie_option)) {
					$cred['option_cookie'] = get_nfilter_request_var('option_cookie');
				} else {
					$_SESSION['sess_error_fields']['option_cookie'] = 'option';
					raise_message(3);
				}

				break;
			case 'snmp':
				if (isset_request_var('community') && get_nfilter_request_var('community') != '') {
					$cred['community'] = get_filter_request_var('community', FILTER_DEFAULT);
				} else {
					$_SESSION['sess_error_fields']['community'] = 'community';
					raise_message(3);
				}

				break;
			case 'snmp3':
				if (isset_request_var('snmp_security_level') && array_key_exists(get_nfilter_request_var('snmp_security_level'), $snmp_security_levels)) {
					$cred['snmp_security_level'] = get_nfilter_request_var('snmp_security_level');
				} else {
					$_SESSION['sess_error_fields']['snmp_security_level'] = 'snmp_security_level';
					raise_message(3);
				}

				if (isset_request_var('snmp_auth_protocol') && array_key_exists(get_nfilter_request_var('snmp_auth_protocol'), $snmp_auth_protocols)) {
					$cred['snmp_auth_protocol'] = get_nfilter_request_var('snmp_auth_protocol');
				} else {
					$_SESSION['sess_error_fields']['snmp_auth_protocol'] = 'snmp_auth_protocol';
					raise_message(3);
				}

				if (isset_request_var('snmp_priv_protocol') && array_key_exists(get_nfilter_request_var('snmp_priv_protocol'), $snmp_priv_protocols)) {
					$cred['snmp_priv_protocol'] = get_nfilter_request_var('snmp_priv_protocol');
				} else {
					$_SESSION['sess_error_fields']['snmp_priv_protocol'] = 'snmp_priv_protocol';
					raise_message(3);
				}

				$cred['snmp_username'] = get_nfilter_request_var('snmp_username');
				$cred['snmp_password'] = get_nfilter_request_var('snmp_password');

				$cred['snmp_priv_passphrase'] = get_nfilter_request_var('snmp_priv_passphrase');
				$cred['snmp_context']         = get_nfilter_request_var('snmp_context');
				$cred['snmp_engine_id']       = get_nfilter_request_var('snmp_engine_id');

				break;
			case 'sshkey':
				if (isset_request_var('ssh_username') && get_nfilter_request_var('ssh_username') != '') {
					$cred['ssh_username'] = get_filter_request_var('ssh_username', FILTER_DEFAULT);
				} else {
					$_SESSION['sess_error_fields']['ssh_username'] = 'ssh_username';
					raise_message(3);
				}

				if (isset_request_var('sshkey') && get_nfilter_request_var('sshkey') != '' && get_filter_request_var('sshkey', FILTER_VALIDATE_REGEXP, ['options' => ['regexp' => '/^-----BEGIN OPENSSH PRIVATE KEY-----.*/']])) {
					$cred['sshkey'] = get_nfilter_request_var('sshkey');
				} else {
					$_SESSION['sess_error_fields']['sshkey'] = 'sshkey';
					raise_message(3);
				}

				if (isset_request_var('sshkey_passphrase') && get_nfilter_request_var('sshkey_passphrase') != '') {
					$cred['sshkey_passphrase'] = get_filter_request_var('sshkey_passphrase', FILTER_DEFAULT);
				} else {
					$_SESSION['sess_error_fields']['sshkey_passphrase'] = 'sshkey_passphrase';
					raise_message(3);
				}

				break;
		}

		$save['data'] = servcheck_encrypt_credential($cred);

		if (!is_error_message()) {
			$saved_id = sql_save($save, 'plugin_servcheck_credential');

			if ($saved_id) {
				raise_message(1);
			} else {
				raise_message(2);
			}
		}

		if (is_error_message()) {
			header('Location: ' . htmlspecialchars(basename($_SERVER['PHP_SELF'])) . '?header=false&action=edit&id=' . get_nfilter_request_var('id'));
		} else {
			header('Location: ' . htmlspecialchars(basename($_SERVER['PHP_SELF'])) . '?header=false');
		}
	}
	exit;
}

/**
 * Renders the add/edit form for a single credential, pre-populating and
 * decrypting its type-specific fields when editing an existing
 * credential. Invoked from this file's dispatcher when the request's
 * 'action' is 'edit'.
 *
 * @return void Outputs the edit form HTML directly.
 *
 * @global array $servcheck_credential_fields The edit form's field
 *                                            definitions, filled in
 *                                            here with the credential's
 *                                            current (decrypted) values.
 * @global array $servcheck_help_credential   Per-field help text shown
 *                                            on the edit form.
 */
function servcheck_data_edit(): void {
	global $servcheck_credential_fields, $servcheck_help_credential;

	// ================= input validation =================
	get_filter_request_var('id');
	// ====================================================

	$data = [];

	if (!isempty_request_var('id')) {
		$data = db_fetch_row_prepared('SELECT *
			FROM plugin_servcheck_credential
			WHERE id = ?',
			[get_request_var('id')]);

		if (!is_array($data)) {
			$data = [];
		}

		$header_label = __('Credential [edit: %s]', $data['name'] ?? '');

		$decrypted = servcheck_decrypt_credential($data['id'] ?? 0);

		if (is_array($decrypted)) {
			$data += $decrypted;
		}
	} else {
		$header_label = __('Credential [new]');
	}

	form_start(htmlspecialchars(basename($_SERVER['PHP_SELF'])));

	html_start_box($header_label, '100%', true, 3, 'center', '');

	draw_edit_form(
		[
			'config' => ['no_form_tag' => true],
			'fields' => inject_form_variables($servcheck_credential_fields, $data)
		]
	);

	print '<div name="specific_help" id="specific_help" class="left"></div>';

	form_hidden_box('save_component', '1', '');

	html_end_box(true, true);

	form_save_button(htmlspecialchars(basename($_SERVER['PHP_SELF'])));

	?>
	<script type='text/javascript' <?php print plugin_servcheck_csp_nonce(); ?>>

	<?php
	print 'if (typeof servcheck_help === "undefined") {' . PHP_EOL;
	print 'var servcheck_help = {};' . PHP_EOL;

	foreach ($servcheck_help_credential as $key => $value) {
		print 'servcheck_help["' . $key . '"] = "' . $value . '";' . PHP_EOL;
	}
	print '}' . PHP_EOL;
	?>

	$(function() {
		setCredential();
	});

	function setCredential() {
		var credential_type = $('#type').val();

		$('#row_username').hide();
		$('#row_password').hide();
		$('#row_cred_value').hide();
		$('#row_cred_name').hide();
		$('#row_login_url').hide();
		$('#row_data_url').hide();
		$('#row_community').hide();
		$('#row_ssh_username').hide();
		$('#row_sshkey').hide();
		$('#row_sshkey_passphrase').hide();
		$('#row_snmp_security_level').hide();
		$('#row_snmp_username').hide();
		$('#row_snmp_password').hide();
		$('#row_snmp_auth_protocol').hide();
		$('#row_snmp_priv_passphrase').hide();
		$('#row_snmp_priv_protocol').hide();
		$('#row_snmp_context').hide();
		$('#row_snmp_engine_id').hide();
		$('#row_oauth_client_id').hide();
		$('#row_oauth_client_secret').hide();
		$('#row_token_name').hide();
		$('#row_token_value').hide();
		$('#row_option_apikey').hide();
		$('#row_option_cookie').hide();

		$('#specific_help').html(servcheck_help[credential_type]);

		switch(credential_type) {
			case 'no':
				break;
			case 'userpass':
				$('#row_username').show();
				$('#row_password').show();
				$('#password').attr('type', 'password');
				break
			case 'basic':
				$('#row_username').show();
				$('#row_password').show();
				$('#row_data_url').show();
				$('#password').attr('type', 'password');
				break;
			case 'apikey':
				$('#row_token_name').show();
				$('#row_token_value').show();
				$('#row_option_apikey').show();
				$('#row_data_url').show();
				break;
			case 'oauth2':
				$('#row_oauth_client_id').show();
				$('#row_oauth_client_secret').show();
				$('#row_token_name').show();
				$('#row_token_value').show();
				$('#row_login_url').show();
				$('#row_data_url').show();
				break;
			case 'cookie':
				$('#row_username').show();
				$('#row_password').show();
				$('#row_option_cookie').show();
				$('#row_data_url').show();
				$('#row_login_url').show();
				$('#password').attr('type', 'password');
				break;
			case 'snmp':
				$('#row_community').show();
				break;
			case 'snmp3':
				$('#row_snmp_security_level').show();
				$('#row_snmp_username').show();
				$('#row_snmp_password').show();
				$('#row_snmp_auth_protocol').show();
				$('#row_snmp_priv_passphrase').show();
				$('#row_snmp_priv_protocol').show();
				$('#row_snmp_context').show();
				$('#row_snmp_engine_id').show();

				if ($('#snmp_security_level').val() == 'noAuthNoPriv') {
					$('#snmp_auth_protocol option[value*="None"').prop('disabled', false);
					$('#snmp_priv_protocol option[value*="None"').prop('disabled', false);

					if ($('#snmp_auth_protocol').val() != '[None]') {
						snmp_auth_protocol   = $('#snmp_auth_protocol').val();
						snmp_password        = $('#snmp_password').val();
					}

					if ($('#snmp_priv_protocol').val() != '[None]') {
						snmp_priv_protocol   = $('#snmp_priv_protocol').val();
						snmp_priv_passphrase = $('#snmp_priv_passphrase').val();
					}

					$('#snmp_auth_protocol').val('[None]');
					$('#snmp_priv_protocol').val('[None]');
					$('#row_snmp_auth_protocol').hide();
					$('#row_snmp_priv_protocol').hide();
					$('#row_snmp_password').hide();
					$('#row_snmp_priv_passphrase').hide();
				} else if ($('#snmp_security_level').val() == 'authNoPriv') {
					$('#snmp_auth_protocol option[value*="None"').prop('disabled', false);
					$('#snmp_priv_protocol option[value*="None"').prop('disabled', false);

					if ($('#snmp_priv_protocol').val() != '[None]') {
						snmp_priv_protocol   = $('#snmp_priv_protocol').val();
						snmp_priv_passphrase = $('#snmp_priv_passphrase').val();
					}

					if (snmp_auth_protocol != '[None]' && snmp_auth_protocol != '' && $('#snmp_auth_protocol').val() == '[None]') {
						$('#snmp_auth_protocol').val(snmp_auth_protocol);
						$('#snmp_password').val(snmp_password);
						$('#snmp_password_confirm').val(snmp_password);
					} else if ($('#snmp_auth_protocol').val() == '[None]' || $('#snmp_auth_protocol').val() == '') {
						if (defaultSNMPAuthProtocol == '' || defaultSNMPAuthProtocol == '[None]') {
							$('#snmp_auth_protocol').val('MD5');
						} else {
							$('#snmp_auth_protocol').val(defaultSNMPAuthProtocol);
						}
					}

					$('#snmp_priv_protocol').val('[None]');
					$('#row_snmp_priv_protocol').hide();
					$('#row_snmp_priv_passphrase').hide();

					$('#snmp_auth_protocol option[value*="None"').prop('disabled', true);
					$('#snmp_priv_protocol option[value*="None"').prop('disabled', false);
					checkSNMPPassphrase('auth');
				} else {
					$('#snmp_auth_protocol option[value*="None"').prop('disabled', false);
					$('#snmp_priv_protocol option[value*="None"').prop('disabled', false);

					if (snmp_auth_protocol != '' && $('#snmp_auth_protocol').val() == '[None]') {
						$('#snmp_auth_protocol').val(snmp_auth_protocol);
						$('#snmp_password').val(snmp_password);
						$('#snmp_password_confirm').val(snmp_password);
					} else if ($('#snmp_auth_protocol').val() == '[None]' || $('#snmp_auth_protocol').val() == '') {
						if (defaultSNMPAuthProtocol == '' || defaultSNMPAuthProtocol == '[None]') {
							$('#snmp_auth_protocol').val('MD5');
						} else {
							$('#snmp_auth_protocol').val(defaultSNMPAuthProtocol);
						}
					}

					if (snmp_priv_protocol != '' && $('#snmp_priv_protocol').val() == '[None]') {
						$('#snmp_priv_protocol').val(snmp_priv_protocol);
						$('#snmp_priv_passphrase').val(snmp_priv_passphrase);
						$('#snmp_priv_passphrase_confirm').val(snmp_priv_passphrase);
					} else if ($('#snmp_priv_protocol').val() == '[None]' || $('#snmp_priv_protocol').val() == '') {
						if (defaultSNMPPrivProtocol == '' || defaultSNMPPrivProtocol == '[None]') {
							$('#snmp_priv_protocol').val('DES');
						} else {
							$('#snmp_priv_protocol').val(defaultSNMPPrivProtocol);
						}
					}

					$('#snmp_auth_protocol option[value*="None"').prop('disabled', true);
					$('#snmp_priv_protocol option[value*="None"').prop('disabled', true);
				}

				if ($('#snmp_auth_protocol').val() == '[None]') {
					$('#row_snmp_password').hide();
					$('#snmp_password').val('');
					$('#snmp_password_confirm').val('');
				}

				if ($('#snmp_priv_protocol').val() == '[None]') {
					$('#row_snmp_priv_passphrase').hide();
					$('#snmp_priv_passphrase').val('');
					$('#snmp_priv_passphrase_confirm').val('');
				}

				selectmenu = ($('#snmp_security_level').selectmenu('instance') !== undefined);
				if (selectmenu) {
					$('#snmp_security_level').selectmenu('refresh');
					$('#snmp_auth_protocol').selectmenu('refresh');
					$('#snmp_priv_protocol').selectmenu('refresh');
				}

				break;

			case 'sshkey':
				$('#row_ssh_username').show();
				$('#row_sshkey').show();
				$('#row_sshkey_passphrase').show();
				$('#sshkey_passphrase').attr('type', 'password');

				break;
		}
	}
	</script>
	<?php
}

/**
 * Validates and stores the Credentials list's filter/sort/pagination
 * variables (free-text search, sort column/direction) in the session.
 * Called from data_list() before rendering the list.
 *
 * @return void
 */
function request_validation(): void {
	$filters = [
		'rows' => [
			'filter'  => FILTER_VALIDATE_INT,
			'pageset' => true,
			'default' => '-1'
			],
		'page' => [
			'filter'  => FILTER_VALIDATE_INT,
			'default' => '1'
			],
		'filter' => [
			'filter'  => FILTER_CALLBACK,
			'pageset' => true,
			'options' => ['options' => 'sanitize_search_string'],
			'default' => ''
			],
		'sort_column' => [
			'filter'  => FILTER_CALLBACK,
			'default' => 'name',
			'options' => ['options' => 'sanitize_search_string']
			],
		'sort_direction' => [
			'filter'  => FILTER_CALLBACK,
			'default' => 'ASC',
			'options' => ['options' => 'sanitize_search_string']
			]
	];

	validate_store_request_vars($filters, 'sess_servcheck_credential');
}

/**
 * Renders the main Credentials list page: validates the request, draws
 * the filter toolbar, and prints the paginated, sortable table of
 * configured credentials. Invoked from this file's dispatcher for the
 * default (no 'action') request.
 *
 * @return void Outputs the list page HTML directly.
 *
 * @global array $servcheck_actions_menu Map of bulk-action ids to their
 *                                       display labels, used to populate
 *                                       the actions dropdown.
 * @global array $credential_types       Map of credential type keys to
 *                                       their display labels, used to
 *                                       show each credential's type.
 */
function data_list(): void {
	global $servcheck_actions_menu, $credential_types;

	request_validation();

	if (get_request_var('rows') == '-1') {
		$rows = read_config_option('num_rows_table');
	} else {
		$rows = get_filter_request_var('rows');
	}

	servcheck_show_tab(htmlspecialchars(basename($_SERVER['PHP_SELF'])));

	servcheck_filter();

	$sql_where = '';

	if (get_request_var('filter') != '') {
		$sql_where .= ($sql_where == '' ? 'WHERE ' : ' AND ') . ' name LIKE ' . db_qstr('%' . get_request_var('filter') . '%');
	}

	$sql_order = get_order_string();
	$sql_limit = ' LIMIT ' . ($rows * (get_request_var('page') - 1)) . ',' . $rows;

	$total_rows = db_fetch_cell("SELECT COUNT(id)
		FROM plugin_servcheck_credential
		$sql_where");

	$result = db_fetch_assoc("SELECT * FROM plugin_servcheck_credential
		$sql_where
		$sql_order
		$sql_limit");

	$display_text = [
		'name' => [
			'display' => __('Name', 'servcheck'),
			'sort'    => 'ASC'
		],
		'type' => [
			'display' => __('Type', 'servcheck'),
			'sort'    => 'ASC'
		],
		'used' => [
			'display' => __('Used', 'servcheck'),
			'sort'    => 'ASC'
		],
	];

	$columns = cacti_sizeof($display_text);

	$nav = html_nav_bar(htmlspecialchars(basename($_SERVER['PHP_SELF'])) . '?filter=' . get_request_var('filter'), MAX_DISPLAY_PAGES, get_request_var('page'), $rows, $total_rows, $columns, __('Credentials', 'servcheck'), 'page', 'main');

	form_start(htmlspecialchars(basename($_SERVER['PHP_SELF'])), 'chk');

	print $nav;

	html_start_box('', '100%', false, 3, 'center', '');

	html_header_sort_checkbox($display_text, get_request_var('sort_column'), get_request_var('sort_direction'), false);

	if (cacti_sizeof($result)) {
		foreach ($result as $row) {
			$row['used'] = 0;
			$row['used'] += db_fetch_cell_prepared('SELECT COUNT(*) FROM plugin_servcheck_proxy WHERE cred_id = ?',
				[$row['id']]);
			$row['used'] += db_fetch_cell_prepared('SELECT COUNT(*) FROM plugin_servcheck_test WHERE cred_id = ?',
				[$row['id']]);

			if ($row['used'] == 0) {
				$disabled = false;
			} else {
				$disabled = true;
			}

			form_alternate_row('line' . $row['id'], false, $disabled);

			form_selectable_cell("<a class='linkEditMain' href='" . html_escape(htmlspecialchars(basename($_SERVER['PHP_SELF'])) . '?header=false&action=edit&id=' . $row['id']) . "'>" . $row['name'] . '</a>', $row['id']);
			form_selectable_cell($credential_types[$row['type']], $row['id']);
			form_selectable_cell($row['used'], $row['id']);
			form_checkbox_cell($row['name'], $row['id'], $disabled);

			form_end_row();
		}
	} else {
		print "<tr class='tableRow'><td colspan='" . $columns . "'><em>" . __('No Credentials Found', 'servcheck') . "</em></td></tr>\n";
	}

	html_end_box(false);

	if (cacti_sizeof($result)) {
		print $nav;
	}

	draw_actions_dropdown($servcheck_actions_menu, 1);

	form_end();
}

/**
 * Renders the Credentials list's filter toolbar (free-text search,
 * rows-per-page) and its client-side JavaScript. Called from data_list()
 * before the credentials table itself is rendered.
 *
 * @return void Outputs HTML and JavaScript directly.
 *
 * @global array $item_rows Rows-per-page options offered by Cacti core,
 *                          used to populate the 'rows' select list.
 */
function servcheck_filter(): void {
	global $item_rows;

	html_start_box(__('Servcheck Credential Management', 'servcheck') , '100%', false, 3, 'center', htmlspecialchars(basename($_SERVER['PHP_SELF'])) . '?action=edit');

	?>
	<tr class='even'>
		<td>
		<form id='form_servcheck_item' action='<?php print htmlspecialchars(basename($_SERVER['PHP_SELF'])); ?>'>
			<table class='filterTable'>
				<tr>
					<td>
						<?php print __('Search', 'servcheck'); ?>
					</td>
					<td>
						<input type='text' class='ui-state-default ui-corner-all' id='filter' name='filter' size='25' value='<?php print html_escape_request_var('filter'); ?>'>
					</td>
					<td>
						<?php print __('Credentials', 'servcheck'); ?>
					</td>
					<td>
						<select id='rows'>
							<?php
							print "<option value='-1'" . (get_request_var('rows') == -1 ? ' selected' : '') . '>' . __('Default', 'servcheck') . '</option>';

	if (cacti_sizeof($item_rows)) {
		foreach ($item_rows as $key => $value) {
			print "<option value='" . $key . "'";

			if (get_request_var('rows') == $key) {
				print ' selected';
			} print '>' . htmlspecialchars($value) . '</option>';
		}
	}
	?>
						</select>
					</td>
					<td>
						<span class='nowrap'>
							<input type='button' class='ui-button ui-corner-all ui-widget' id='refresh' value='<?php print __esc('Go'); ?>' title='<?php print __esc('Set/Refresh Filters', 'servcheck'); ?>'>
							<input type='button' class='ui-button ui-corner-all ui-widget' id='clear' value='<?php print __esc('Clear'); ?>' title='<?php print __esc('Clear Filters', 'servcheck'); ?>'>
						</span>
					</td>
				</tr>
			</table>
		</form>
		<script type='text/javascript' <?php print plugin_servcheck_csp_nonce(); ?>>

		function applyFilter() {
			strURL  = '<?php print htmlspecialchars(basename($_SERVER['PHP_SELF'])); ?>?header=false';
			strURL += '&filter=' + $('#filter').val();
			strURL += '&rows=' + $('#rows').val();
			loadPageNoHeader(strURL);
		}

		function clearFilter() {
			strURL = '<?php print htmlspecialchars(basename($_SERVER['PHP_SELF'])); ?>?clear=1&header=false';
			loadPageNoHeader(strURL);
		}

		$(function() {
			$('#rows').change(function() {
				applyFilter();
			});

			$('#refresh').click(function() {
				applyFilter();
			});

			$('#clear').click(function() {
				clearFilter();
			});

			$('#form_servcheck_item').submit(function(event) {
				event.preventDefault();
				applyFilter();
			});
		});

		</script>
		</td>
	</tr>
	<?php
	html_end_box();
}