i don't believe i replaced a FQDN with blocked... I block out some URLs for the get requests. Showing the way i have the get request set up for the trender function would allow anyone to insert data into my data tables. I'm sure what i have going is not very secure but seems to be ok so far... I am going to add interlocks so that if someone was able to gain access they wouldn't be able to do much. I just hard code it so that the sump level will never drain below x inches, or fill over x inches. same with heater, and lighting. So the main page is generated from a couple of php files and javascript for the charts.AJAX makes server calls to update the server without refreshing. here are some example links of how i get the tables:
http://www.rareglitch.net/getTables.php?tables=TEMP_%
http://www.rareglitch.net/getTables.php?tables=LED_%
http://www.rareglitch.net/getTables.php?tables=LEVEL_%
if you guys know of,or find any vulnerabilities id hope you would let me know =). i hope my code will help, and i will try to answer any questions. I am no web developer, i just took the time to learn and understand what to do and piece it all together. as far as charting please see http://www.highcharts.com/. i used the highstock for plotting my points. It needs a json output to load the points. here is the json output of the temp_return table: http://www.rareglitch.net/get_json.php?&table=TEMP_RETURN
php file to generate the tables and format the table names and data to be more appealing:
<?php
include_once('connect.php');
$tables = $_GET['tables'];
$query = "SHOW TABLES LIKE '".$tables."'";
$result = mysql_query($query,$connect);
$out = "<table border='.5'>";
$out .= "<tr bgcolor='#9ACDFD'>";
$out .= "<td>Last Update:</td>";
$first = mysql_fetch_row($result);
$result = mysql_query($query,$connect);
while($row = mysql_fetch_row($result)){
$out .= "<td bgcolor='".getColor($row[0])."'>".getName($row[0])."</td>";
}
$out .= "</tr>";
$out .= "<tr>";
$dateQRY = "SELECT Date FROM ".$first[0]." ORDER BY Date DESC LIMIT 1";
$dateResult = mysql_query($dateQRY,$connect);
$out .= "<td>" .mysql_fetch_array($dateResult)[0] . "</td>";
$query = "SHOW TABLES LIKE '".$tables."'";
$result = mysql_query($query,$connect);
while($row = mysql_fetch_row($result)){
$iquery = "SELECT Value FROM ".$row[0]." ORDER BY Date DESC LIMIT 1";
$iresult = mysql_query($iquery,$connect);
$out .= "<td>" . formatData($row[0],mysql_fetch_array($iresult)[0]) . "</td>";
}
$out .= "</tr>";
$out .= "</table>";
echo $out;
function getColor($tablename){
switch($tablename){
case "TEMP_AOUT_HEATER":
return "red";
break;
case "TEMP_HEATER":
return "royalblue";
break;
case "TEMP_OVERFLOW":
return "green";
break;
case "TEMP_RETURN":
return "yellow";
break;
case "TEMP_ROOM":
return "cyan";
break;
case "LED_ABLUE":
return "royalblue";
break;
case "LED_XTEMP_LEFT":
return "lightgray";
break;
case "LED_XTEMP_RIGHT":
return "lightgray";
break;
case "TEMP_TANK":
return "pink";
break;
default:
return "white";
break;
}
}
function getName($tablename){
switch($tablename){
case "TEMP_AOUT_HEATER":
return "Heater Status";
break;
case "TEMP_HEATER":
return "Heater Temp";
break;
case "TEMP_OVERFLOW":
return "Overflow Temp";
break;
case "TEMP_RETURN":
return "Return Temp";
break;
case "TEMP_ROOM":
return "Room Temp";
break;
case "LED_ABLUE":
return "Blue LEDs";
break;
case "LED_AWHITE":
return "White LEDs";
break;
case "LED_XTEMP_LEFT":
return "Left LEDs";
break;
case "LED_XTEMP_RIGHT":
return "Right LEDs";
break;
case "TEMP_TANK":
return "Tank Temp";
break;
case "LED_FAN_LEFT":
return "Left Fan";
break;
case "LED_FAN_RIGHT":
return "Right Fan";
break;
case "LEVEL_FILL":
return "Fill Status";
break;
case "LEVEL_SUMP":
return "Sump Level";
break;
case "LEVEL_XPH":
return "PH Level";
break;
case "LEVEL_DRAIN":
return "Drain Status";
break;
case "ALARM_LEVEL_HIGH":
return "Level High Alarm";
break;
case "ALARM_LEVEL_LOW":
return "Level Low Alarm";
break;
case "ALARM_PH_HIGH":
return "PH High";
break;
case "ALARM_PH_LOW":
return "PH Low";
break;
case "ALARM_TEMP_AVG_HIGH":
return "AVG Temp High";
break;
case "ALARM_TEMP_AVG_LOW":
return "AVG Temp Low";
break;
default:
return $tablename;
break;
}
}
function formatData($table,$data){
switch($table){
case "LED_FAN_RIGHT":
case "LED_FAN_LEFT":
case "LEVEL_FILL":
case "TEMP_AOUT_HEATER":
case "LEVEL_DRAIN":
switch($data){
case 1:
return "On";
break;
case 0:
return "Off";
break;
default:
return $data;
break;
}
break;
case "LED_AWHITE":
case "LED_ABLUE":
if($data <= 0){
return "Off";
break;
}else{
return $data . "%";
break;
}
case "ALARM_LEVEL_HIGH":
case "ALARM_LEVEL_LOW":
case "ALARM_PH_HIGH":
case "ALARM_PH_LOW":
case "ALARM_TEMP_AVG_HIGH":
case "ALARM_TEMP_AVG_LOW":
switch($data){
case 1:
return "<center>ALARM</center>";
break;
case 0:
return "<center>GOOD</center>";
break;
default:
return $data;
break;
}
default:
return $data;
break;
}
}
connect.php
<?php
//CONNECT.PHP
$hostname = "blocked";
$database = "blocked";
$username = "blocked";
$password = "blocked";
if(!$connect = mysql_connect($hostname,$username,$password,$database)){
die('FAILED TO CONNECT' . mysql_error());
}
$bool = mysql_select_db($database,$connect);
if(!$bool){
die('FAILED DB SELECT' . mysql_error());
}
?>
json file to convert mysql table into json for charting:
<?php
include_once('connect.php');
$table = $_GET['table'];
if($table == "blocked"){
$qry = "SELECT * FROM ".$table;
$result = mysql_query($qry,$connect);
while($row = mysql_fetch_array($result)){
if($row['Setting'] == "blocked"){
}else{
echo "#" . $row['Setting'];
echo "@" . $row['Value'] . "$";
}
}
echo "!";
}else{
$shorten = false;
$count = 3;
$start = 0;
$qry = "SELECT * FROM ".$table." ORDER BY Date ASC";
$result = mysql_query($qry,$connect);
if(mysql_num_rows($result) > 100000 & mysql_num_rows($result) < 200000){
$shorten = true;
$count = 5;
}elseif(mysql_num_rows($result) > 200000){
$shorten = true;
$count = 10;
}else{
$shorten = false;
}
while($row = mysql_fetch_array($result)){
$dates = strtotime($row['Date']) * 1000;
switch($table){
case "TEMP_AOUT_HEATER":
$values = ((float)$row['Value'] * 5) + 85.00;
break;
case "LED_FAN_LEFT":
case "LED_FAN_RIGHT":
$values = ((float)$row['Value'] * 5) + 80.00;
break;
case "LEVEL_FILL":
$values = ((float)$row['Value'] * 5) + 5.00;
break;
case "LED_ABlUE":
case "LED_AWHITE":
$values = ((float)$row['Value'] * .1) + 0.00;
default:
$values = (float)$row['Value'];
break;
}
if($shorten){
if($start == $count){
$array[] = array($dates,$values);
$start = 0;
}else{
$start++;
}
}else{
$array[] = array($dates,$values);
}
}
echo json_encode($array);
}
?>
overview site:
<!DOCTYPE HTML>
<html>
<head>
<meta ***********="Content-Type" content="text/html; charset=utf-8">
<link rel="icon" type="icon" href="1_fish.ico"/>
<link rel="shortcut icon" type="icon" href="1_fish.ico"/>
<title>Fish Tank</title>
</head>
<body bgcolor="grey">
******** type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1.8.2/jquery.min.js"></script>
******** type="text/javascript">
<!--
//Browser Support Code
if(screen.width <=699){
document.location = "http://www.rareglitch.net/lite.htm";
}
function ajaxAlarm(){
var ajaxRequest; // The variable that makes Ajax possible!
try{
// Opera 8.0+, Firefox, Safari
ajaxRequest = new XMLHttpRequest();
} catch (e){
// Internet Explorer Browsers
try{
ajaxRequest = new ActiveXObject("Msxml2.XMLHTTP");
} catch (e) {
try{
ajaxRequest = new ActiveXObject("Microsoft.XMLHTTP");
} catch (e){
// Something went wrong
alert("Your browser broke!");
return false;
}
}
}
// Create a function that will receive data sent from the server
ajaxRequest.onreadystatechange = function(){
if(ajaxRequest.readyState == 4){
var ajaxDisplay = document.getElementById('ajaxAlarm');
ajaxDisplay.innerHTML = ajaxRequest.responseText;
}
}
ajaxRequest.open("GET", "getTables.php?&tables=ALARM_%", true);
ajaxRequest.send(null);
}
function ajaxLED(){
var ajaxRequest; // The variable that makes Ajax possible!
try{
// Opera 8.0+, Firefox, Safari
ajaxRequest = new XMLHttpRequest();
} catch (e){
// Internet Explorer Browsers
try{
ajaxRequest = new ActiveXObject("Msxml2.XMLHTTP");
} catch (e) {
try{
ajaxRequest = new ActiveXObject("Microsoft.XMLHTTP");
} catch (e){
// Something went wrong
alert("Your browser broke!");
return false;
}
}
}
// Create a function that will receive data sent from the server
ajaxRequest.onreadystatechange = function(){
if(ajaxRequest.readyState == 4){
var ajaxDisplay = document.getElementById('ajaxLED');
ajaxDisplay.innerHTML = ajaxRequest.responseText;
}
}
ajaxRequest.open("GET", "getTables.php?tables=LED_%", true);
ajaxRequest.send(null);
}
function ajaxTemp(){
var ajaxRequest; // The variable that makes Ajax possible!
try{
// Opera 8.0+, Firefox, Safari
ajaxRequest = new XMLHttpRequest();
} catch (e){
// Internet Explorer Browsers
try{
ajaxRequest = new ActiveXObject("Msxml2.XMLHTTP");
} catch (e) {
try{
ajaxRequest = new ActiveXObject("Microsoft.XMLHTTP");
} catch (e){
// Something went wrong
alert("Your browser broke!");
return false;
}
}
}
// Create a function that will receive data sent from the server
ajaxRequest.onreadystatechange = function(){
if(ajaxRequest.readyState == 4){
var ajaxDisplay = document.getElementById('ajaxTemp');
ajaxDisplay.innerHTML = ajaxRequest.responseText;
}
}
ajaxRequest.open("GET", "getTables.php?tables=TEMP_%", true);
ajaxRequest.send(null);
}
function ajaxLevel(){
var ajaxRequest; // The variable that makes Ajax possible!
try{
// Opera 8.0+, Firefox, Safari
ajaxRequest = new XMLHttpRequest();
} catch (e){
// Internet Explorer Browsers
try{
ajaxRequest = new ActiveXObject("Msxml2.XMLHTTP");
} catch (e) {
try{
ajaxRequest = new ActiveXObject("Microsoft.XMLHTTP");
} catch (e){
// Something went wrong
alert("Your browser broke!");
return false;
}
}
}
// Create a function that will receive data sent from the server
ajaxRequest.onreadystatechange = function(){
if(ajaxRequest.readyState == 4){
var ajaxDisplay = document.getElementById('ajaxLevel');
ajaxDisplay.innerHTML = ajaxRequest.responseText;
}
}
ajaxRequest.open("GET", "getTables.php?tables=LEVEL_%", true);
ajaxRequest.send(null);
}
function ajaxCFG(password){
var ajaxRequest; // The variable that makes Ajax possible!
try{
// Opera 8.0+, Firefox, Safari
ajaxRequest = new XMLHttpRequest();
} catch (e){
// Internet Explorer Browsers
try{
ajaxRequest = new ActiveXObject("Msxml2.XMLHTTP");
} catch (e) {
try{
ajaxRequest = new ActiveXObject("Microsoft.XMLHTTP");
} catch (e){
// Something went wrong
alert("Your browser broke!");
return false;
}
}
}
// Create a function that will receive data sent from the server
ajaxRequest.onreadystatechange = function(){
if(ajaxRequest.readyState == 4){
var ajaxDisplay = document.getElementById('ajaxCFG');
ajaxDisplay.innerHTML = ajaxRequest.responseText;
}
}
//var pass = document.getElementById("pass").value;
ajaxRequest.open("GET", "blocked, true);
ajaxRequest.send();
}
function updateConfig(name,value){
var ajaxRequest; // The variable that makes Ajax possible!
try{
// Opera 8.0+, Firefox, Safari
ajaxRequest = new XMLHttpRequest();
} catch (e){
// Internet Explorer Browsers
try{
ajaxRequest = new ActiveXObject("Msxml2.XMLHTTP");
} catch (e) {
try{
ajaxRequest = new ActiveXObject("Microsoft.XMLHTTP");
} catch (e){
// Something went wrong
alert("Your browser broke!");
return false;
}
}
}
// Create a function that will receive data sent from the server
//ajaxRequest.onreadystatechange = function(){
// if(ajaxRequest.readyState == 4){
// var ajaxDisplay = document.getElementById('ajaxCFG');
// ajaxDisplay.innerHTML = ajaxRequest.responseText;
// }
//}
ajaxRequest.open("GET","blocked, true);
ajaxRequest.send(null);
}
ajaxAlarm();
ajaxLevel();
ajaxTemp();
ajaxLED();
ajaxCFG(document.getElementById("pass"));
//window.setInterval("loadChart()",3000);
window.setInterval("ajaxTemp()",5000);
window.setInterval("ajaxLED()",5000);
window.setInterval("ajaxLevel()",5000);
window.setInterval("ajaxAlarm()",5000);
window.setInterval("ajaxCFG(document.getElementById('pass').value)",5000);
</script>
<table border="0" width="100%">
<tr align="center"><td><div id ='ajaxAlarm'></div></td></tr>
</table>
<table border="0" width="100%">
<tr align="center"><td><div id ='ajaxTemp'></div></td><td><div id ='ajaxLED'></div></td></tr>
<tr align="center"><td><iframe src="chart_Temp.htm" frameborder="0" width="100%" height="320"></iframe></td><td><iframe src="chart_LED.htm" frameborder="0" width="100%" height="320"></iframe></td></tr>
<tr align="center"><td valign="bottom"><form>Password:<input type="password" id="pass"></form></td><td><div id ='ajaxLevel'></div></td></tr>
<tr align="center"><td valign="top"><div id ='ajaxCFG'></div></td><td><iframe src="chart_Level.htm" frameborder="0" width="100%" height="320"></iframe></td></tr></table>
</div> </body>
</html>