query("SELECT d.*, u.first_name, u.last_name, u.email, u.role, sa.name as service_name, sa.url as service_url FROM devices d JOIN users u ON d.user_id = u.id JOIN services_available sa ON d.service_id = sa.id WHERE d.device_token = :token", ['token' => $token]); $device = $db->fetch(); if (!$device) { $error = 'Token non valido o device già attivato'; } elseif ($device['status'] === 'revoked') { $error = 'Device revocato. Contatta amministratore.'; } elseif ($device['status'] === 'active') { $error = 'Device già attivato in precedenza'; } else { // ATTIVA DEVICE! $client_ip = get_client_ip(); // Update device status try { $result = $db->update('devices', [ 'status' => 'active', 'ip_address' => $client_ip, 'activated_at' => date('Y-m-d H:i:s') ], ['id' => $device['id']]); if (!$result) { error_log("Device update failed for ID: {$device['id']}"); } } catch (Exception $e) { error_log("Device update exception: " . $e->getMessage()); } // ===================================================== // AGGIUNGI IP A MODSECURITY WHITELIST AUTOMATICAMENTE // ===================================================== if ($success) { $service_name = $device['service_name']; $script = "/usr/local/bin/usermanager-modsec-whitelist.sh"; // Comando: add-service $cmd = escapeshellcmd($script) . " add-service " . escapeshellarg($service_name) . " " . escapeshellarg($client_ip) . " " . escapeshellarg($device['id']); exec($cmd . " 2>&1", $output, $return_code); if ($return_code === 0) { error_log("SUCCESS: IP $client_ip added to ModSec whitelist for {$service_name}, Device #{$device['id']}"); } else { error_log("WARNING: ModSec whitelist script failed: " . implode("\n", $output)); } } // Audit log $db->insert('audit_log', [ // Audit log $db->insert('audit_log', [ 'user_id' => $device['user_id'], 'action' => 'device_activated', 'ip_address' => $client_ip, 'user_agent' => get_user_agent(), 'created_at' => date('Y-m-d H:i:s') ]); // TODO: Add IP to ModSecurity whitelist for this service log_audit("Device activated: ID {$device['id']}, Service {$device['service_name']}, IP $client_ip"); $success = true; } } ?> Attivazione Device
✅

🎉 Device Attivato!

Il tuo dispositivo è stato autorizzato.

📱 Device

Nome:
Servizio:
IP:
🚀 Vai al Servizio
❌

⚠️ Errore

© User Manager v4.0