Scan subnet and add host as normal User phpipam#546

Author: phpipam

app/subnets/scan/subnet-scan-icmp-result.php

@@ -9,7 +9,7 @@
 # initialize user object
 $Database 	= new Database_PDO;
 $User 		= new User ($Database);
-$Admin	 	= new Admin ($Database);
+$Admin	 	= new Admin ($Database, false);
 $Subnets	= new Subnets ($Database);
 $Addresses	= new Addresses ($Database);
 $Tools      = new Tools ($Database);

app/subnets/scan/subnet-scan-telnet.php

@@ -16,6 +16,8 @@
 }
 $_POST['port'] = str_replace(";",",",$_POST['port']);
 
+# create csrf token
+$csrf = $User->csrf_cookie ("create", "scan");
 
 # invoke CLI with threading support
 $cmd = $Scan->php_exec." ".dirname(__FILE__) . "/../../../functions/scan/subnet-scan-telnet-execute.php $_POST[subnetId] '$_POST[port]'";
@@ -73,6 +75,7 @@
 		//hostname
 		print "<td>";
 		print "	<input type='text' class='form-control input-sm' name='dns_name$m' value='".@$hostname['name']."'>";
+		print " <input type='hidden' name='csrf_cookie' value='$csrf'>";
 		print "</td>";
 		//remove button
 		print 	"<td><a href='' class='btn btn-xs btn-danger resultRemove' data-target='result$m'><i class='fa fa-times'></i></a></td>";

app/subnets/scan/subnet-scan.php

@@ -10,7 +10,7 @@
 # initialize user object
 $Database 	= new Database_PDO;
 $User 		= new User ($Database);
-$Admin	 	= new Admin ($Database);
+$Admin	 	= new Admin ($Database, false);
 $Subnets	= new Subnets ($Database);
 $Result 	= new Result ();