luci-mod-admin-full: protect iptables counter reset and restart with token
[project/luci.git] / modules / luci-mod-admin-full / luasrc / view / admin_status / iptables.htm
index d6997f8..f49469a 100644 (file)
@@ -1,16 +1,7 @@
 <%#
-LuCI - Lua Configuration Interface
-Copyright 2008-2009 Steven Barth <steven@midlink.org>
-Copyright 2008-2011 Jo-Philipp Wich <xm@subsignal.org>
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-       http://www.apache.org/licenses/LICENSE-2.0
-
-$Id$
-
+ Copyright 2008-2009 Steven Barth <steven@midlink.org>
+ Copyright 2008-2015 Jo-Philipp Wich <jow@openwrt.org>
+ Licensed to the public under the Apache License 2.0.
 -%>
 
 <%-
@@ -46,7 +37,7 @@ $Id$
                local net = wba.iface_get_network(i)
                if net and i ~= "lo" then
                        return '<a href="%s">%s</a>' %{
-                               luci.dispatcher.build_url("admin", "network", "network", net), i
+                               url("admin/network/network", net), i
                        }
 
                end
@@ -68,91 +59,88 @@ $Id$
        }
 </style>
 
-<h2><a id="content" name="content"><%:Firewall Status%></a></h2>
+<h2 name="content"><%:Firewall Status%></h2>
+<br />
 
 <% if has_ip6tables then %>
 <ul class="cbi-tabmenu">
-       <li class="cbi-tab<%= mode ~= 4 and "-disabled" %>"><a href="<%=luci.dispatcher.build_url("admin/status/iptables/4")%>"><%:IPv4 Firewall%></a></li>
-       <li class="cbi-tab<%= mode ~= 6 and "-disabled" %>"><a href="<%=luci.dispatcher.build_url("admin/status/iptables/6")%>"><%:IPv6 Firewall%></a></li>
+       <li class="cbi-tab<%= mode ~= 4 and "-disabled" %>"><a href="<%=url("admin/status/iptables/4")%>"><%:IPv4 Firewall%></a></li>
+       <li class="cbi-tab<%= mode ~= 6 and "-disabled" %>"><a href="<%=url("admin/status/iptables/6")%>"><%:IPv6 Firewall%></a></li>
 </ul>
 <% end %>
 
-<form method="post" action="<%=REQUEST_URI%>">
-       <div class="cbi-map">
-               <fieldset class="cbi-section">
-                       <h3><%:Actions%></h3>
-                       <ul>
-                               <li><a href="<%=REQUEST_URI%>?zero=<%=mode%>"><%:Reset Counters%></a></li>
-                               <li><a href="<%=REQUEST_URI%>?restart=1"><%:Restart Firewall%></a></li>
-                       </ul>
-                       <br /><br />
-
-                       <% for _, tbl in ipairs(tables) do chaincnt = 0 %>
-                               <h3><%:Table%>: <%=tbl%></h3>
-                               <table class="cbi-section-table" style="font-size:90%">
-                                       <% for _, chain in ipairs(ipt:chains(tbl)) do
-                                               rowcnt    = 0
-                                               chaincnt  = chaincnt + 1
-                                               chaininfo = ipt:chain(tbl, chain)
-                                       %>
-                                               <tr class="cbi-section-table-titles cbi-rowstyle-<%=rowstyle()%>">
-                                                       <th class="cbi-section-table-cell" style="text-align:left" colspan="11">
-                                                               <br /><span id="rule_<%=tbl:lower()%>_<%=chain%>">
-                                                               <%:Chain%> <em><%=chain%></em>
-                                                               (<%- if chaininfo.policy then -%>
-                                                                       <%:Policy%>: <em><%=chaininfo.policy%></em>, <%:Packets%>: <%=chaininfo.packets%>, <%:Traffic%>: <%=wba.byte_format(chaininfo.bytes)-%>
-                                                               <%- else -%>
-                                                                       <%:References%>: <%=chaininfo.references-%>
-                                                               <%- end -%>)</span>
-                                                       </th>
-                                               </tr>
-                                               <tr class="cbi-section-table-descr">
-                                                       <th class="cbi-section-table-cell"><%:Rule #%></th>
-                                                       <th class="cbi-section-table-cell"><%:Pkts.%></th>
-                                                       <th class="cbi-section-table-cell"><%:Traffic%></th>
-                                                       <th class="cbi-section-table-cell"><%:Target%></th>
-                                                       <th class="cbi-section-table-cell"><%:Prot.%></th>
-                                                       <th class="cbi-section-table-cell"><%:Flags%></th>
-                                                       <th class="cbi-section-table-cell"><%:In%></th>
-                                                       <th class="cbi-section-table-cell"><%:Out%></th>
-                                                       <th class="cbi-section-table-cell"><%:Source%></th>
-                                                       <th class="cbi-section-table-cell"><%:Destination%></th>
-                                                       <th class="cbi-section-table-cell" style="width:30%"><%:Options%></th>
+<div class="cbi-map" style="position: relative">
+
+       <form method="post" action="<%=url("admin/status/iptables_action")%>" style="position: absolute; right: 0">
+               <input type="hidden" name="token" value="<%=token%>" />
+               <input type="hidden" name="family" value="<%=mode%>" />
+               <input type="submit" class="cbi-button" name="zero" value="<%:Reset Counters%>" />
+               <input type="submit" class="cbi-button" name="restart" value="<%:Restart Firewall%>" />
+       </form>
+
+       <fieldset class="cbi-section">
+
+               <% for _, tbl in ipairs(tables) do chaincnt = 0 %>
+                       <h3><%:Table%>: <%=tbl%></h3>
+                       <table class="cbi-section-table" style="font-size:90%">
+                               <% for _, chain in ipairs(ipt:chains(tbl)) do
+                                       rowcnt    = 0
+                                       chaincnt  = chaincnt + 1
+                                       chaininfo = ipt:chain(tbl, chain)
+                               %>
+                                       <tr class="cbi-section-table-titles cbi-rowstyle-<%=rowstyle()%>">
+                                               <th class="cbi-section-table-cell" style="text-align:left" colspan="11">
+                                                       <br /><span id="rule_<%=tbl:lower()%>_<%=chain%>">
+                                                       <%:Chain%> <em><%=chain%></em>
+                                                       (<%- if chaininfo.policy then -%>
+                                                               <%:Policy%>: <em><%=chaininfo.policy%></em>, <%:Packets%>: <%=chaininfo.packets%>, <%:Traffic%>: <%=wba.byte_format(chaininfo.bytes)-%>
+                                                       <%- else -%>
+                                                               <%:References%>: <%=chaininfo.references-%>
+                                                       <%- end -%>)</span>
+                                               </th>
+                                       </tr>
+                                       <tr class="cbi-section-table-descr">
+                                               <th class="cbi-section-table-cell"><%:Pkts.%></th>
+                                               <th class="cbi-section-table-cell"><%:Traffic%></th>
+                                               <th class="cbi-section-table-cell"><%:Target%></th>
+                                               <th class="cbi-section-table-cell"><%:Prot.%></th>
+                                               <th class="cbi-section-table-cell"><%:In%></th>
+                                               <th class="cbi-section-table-cell"><%:Out%></th>
+                                               <th class="cbi-section-table-cell"><%:Source%></th>
+                                               <th class="cbi-section-table-cell"><%:Destination%></th>
+                                               <th class="cbi-section-table-cell" style="width:30%"><%:Options%></th>
+                                       </tr>
+
+                                       <% for _, rule in ipairs(ipt:find({table=tbl, chain=chain})) do %>
+                                               <tr class="cbi-section-table-row cbi-rowstyle-<%=rowstyle()%>">
+                                                       <td><%=rule.packets%></td>
+                                                       <td style="white-space: nowrap"><%=wba.byte_format(rule.bytes)%></td>
+                                                       <td><%=rule.target and link_target(tbl, rule.target) or "-"%></td>
+                                                       <td><%=rule.protocol%></td>
+                                                       <td><%=link_iface(rule.inputif)%></td>
+                                                       <td><%=link_iface(rule.outputif)%></td>
+                                                       <td><%=rule.source%></td>
+                                                       <td><%=rule.destination%></td>
+                                                       <td style="width:30%"><small><%=#rule.options > 0 and luci.util.pcdata(table.concat(rule.options, " ")) or "-"%></small></td>
                                                </tr>
-
-                                               <% for _, rule in ipairs(ipt:find({table=tbl, chain=chain})) do %>
-                                                       <tr class="cbi-section-table-row cbi-rowstyle-<%=rowstyle()%>">
-                                                               <td><%=rule.index%></td>
-                                                               <td><%=rule.packets%></td>
-                                                               <td><%=wba.byte_format(rule.bytes)%></td>
-                                                               <td><%=rule.target and link_target(tbl, rule.target) or "-"%></td>
-                                                               <td><%=rule.protocol%></td>
-                                                               <td><%=rule.flags%></td>
-                                                               <td><%=link_iface(rule.inputif)%></td>
-                                                               <td><%=link_iface(rule.outputif)%></td>
-                                                               <td><%=rule.source%></td>
-                                                               <td><%=rule.destination%></td>
-                                                               <td style="width:30%"><small><%=#rule.options > 0 and luci.util.pcdata(table.concat(rule.options, " ")) or "-"%></small></td>
-                                                       </tr>
-                                               <% end %>
-
-                                               <% if rowcnt == 1 then %>
-                                                       <tr class="cbi-section-table-titles cbi-rowstyle-<%=rowstyle()%>">
-                                                               <td colspan="11"><em><%:No rules in this chain%></em></td>
-                                                       </tr>
-                                               <% end %>
                                        <% end %>
 
-                                       <% if chaincnt == 0 then %>
+                                       <% if rowcnt == 1 then %>
                                                <tr class="cbi-section-table-titles cbi-rowstyle-<%=rowstyle()%>">
-                                                       <td colspan="11"><em><%:No chains in this table%></em></td>
+                                                       <td colspan="9"><em><%:No rules in this chain%></em></td>
                                                </tr>
                                        <% end %>
-                               </table>
-                               <br /><br />
-                       <% end %>
-               </fieldset>
-       </div>
-</form>
+                               <% end %>
+
+                               <% if chaincnt == 0 then %>
+                                       <tr class="cbi-section-table-titles cbi-rowstyle-<%=rowstyle()%>">
+                                               <td colspan="9"><em><%:No chains in this table%></em></td>
+                                       </tr>
+                               <% end %>
+                       </table>
+                       <br /><br />
+               <% end %>
+       </fieldset>
+</div>
 
 <%+footer%>