forked from phpipam/phpipam
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathCHANGELOG
executable file
·1051 lines (961 loc) · 47.9 KB
/
CHANGELOG
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
== 1.7.0
New features:
------------
+ Full php8.3 compatibility;
+ Added support for passkeys / passwordless logins;
+ API:
+ Added API changelog;
Bugfixes:
----------------------------
+ Fixed Use UTF-16LE encoding for XLS sheet names, and UTF-8 as input encoding (#3977);
+ Fixed Update login_form.php for installation inside subdir (#3954);
+ Fixed php8 constructor fix for radius class (#3985);
+ Fixed Force mac address update during status update scan (#3791);
+ Fixed RADIUS authentication fails on 1.6.0 (#3986);
+ Fixed cannot add NAT issue (#3993);
+ Fixed Various Linked Addresses issues (#3275, #4188, #4189, #3274);
+ Fixed Duplicates tool not finding ALL duplicates (#4161);
+ Fixes fetch_favourite_subnets function returns empty array instead of false (#4182);
+ Fixed Dashboard widget widths are not correct percentage (#4176);
+ Fixed remove_offline_addresses.php can't execute (#4173);
+ Fixed Searches do not properly organize results (#3917)
+ Fixed Expand/compress all folders not working properly (#3583);
+ Fixed Bug when adding a user to a group (#4137);
+ Fixed Password validation errors (#4099,#2423);
+ Fixed Ripe import results in jQuery error (#4007);
+ Fixed Ripe import crashes if too many subnets are found (#4180);
+ Fixed Devices with height 0 crash Rack image generation (#4193);
+ Fixed Custom field not working in Routing module (#4174);
+ Fixed Circuit Type showing differently in two windows (#4104);
+ Fixed Vault Item Custom Field not writable (#4058);
+ Fixed Undefined variable when adding nameserver (#4230);
+ Fixed Tag Management Color Picker (#3629);
+ Fixed Arrows for linked addresses do not match between themes (#4216);
* Fixed Captcha and invalid login checks (#3480, #4198);
+ Fixed 2FA TOTP validation issues (#3724);
Enhancements, changes:
----------------------------
+ Added support for redundant PowerDNS databases (#3981);
+ Added option to export data for VLAN,VRF and Devices directly from tools page;
+ Added option to disable OpenStreetMap address geoip lookups;
+ Added $api_stringify_results config.php option for <PHP81 API backwards compatibility;
+ Added support for newly added widgets to be sortable with jQuery (#4711);
+ Added support for using widget parameters; added recent_logins widget (#4184);
Security Fixes:
----------------------------
+ Upgraded jQuery to 3.7.1;
+ Upgraded bootstrap to 3.4.1;
+ Upgraded jQuery-ui to 1.13.3;
+ Cookies set without Secure attribute;
+ Multiple XSS injections (#4145,#4146,#4147,#4148,#4149.#4150,#4151);
+ HTML DOM XSS injection via filenames when uploading (#4160);
+ Escape loaded database strings by default, stored XSS defense;
+ Increase minimum 2FA secret length to 32 (160bit);
== 1.6.0
Enhancements, changes:
----------------------------
+ Partial php8.3 compatibility;
+ MySQL 5.7.7+ is now required (support for utf8mb4);
Security Fixes:
----------------------------
+ SQL injection in custom field enum/set types;
+ Directory traversal possible in RIPE query;
+ XSS (reflected) in 'bw-calculator-result.php';
+ XSS (reflected) by invalid email address response;
+ XSS (reflected) by /app/tools/subnet-masks/popup.php (#3738);
+ XSS (stored) in user widget settings;
+ XSS and LDAP injection in ad-search-result.php;
+ XSS and LDAP injection in ad-search-group-result.php;
+ Restrict find_full_subnets.php to CLI;
+ Ensure confidentiality of database password;
== 1.5.0
New features:
------------
+ Mark subnet as isPool to allocate network and broadcast addresses;
+ Optionally hide section subnet menus;
+ L2 Domains user permissions;
+ Add scanPingType=="none" option to disable scanning;
+ Custom fields on IP request forms (#2956);
+ Added subnet free space map for each possible subnet mask;
+ Added Vaults (Certificate and password storing);
+ Added Tools->Duplicate subnets & IP page;
+ Added config.php offline_mode to disable server-side Internet lookups (#3462);
+ Added MAC vendor lookup widget;
Enhancements, changes:
----------------------------
+ php7.4 compatibility;
+ SameSite attribute enabled for site cookies;
+ SAML2
+ php-saml updated to 3.4.1 (#3055);
+ Removal of php-mcrypt dependency;
+ Drop support for idpcertfingerprint;
+ MAP_SAML_USER and SAML_USERNAME config.php configuration moved to db;
+ php-saml protocol debugging;
+ Support for signed assertions;
+ SAML usernames can be extracted from assertion attributes (#2948);
+ JIT auto-provisioning of accounts (#3389);
+ Selectable mask for number of subnets/hosts in subnet masks;
+ Switch from Google Maps to OpenStreeMap and Nominatim;
Bugfixes:
----------------------------
+ Fixed upgrade queries issues from 1.3.x to 1.4+ (#3130);
+ Fixed boolean printout in footer (#2625);
+ Fixed BGP Admin isn't working (#2631);
+ do not show statistics in dashboard widget for disabled modules (#2602);
+ MySQL 8.0 compatibility. (#2646,#2239,#3036);
+ MariaDB Galera Cluster compatibility (#2498,#3413);
+ Permit non-numeric postcodes for customers (#2393);
+ Bandwidth calculator - 400 Bad Request (#1807,#2648);
+ Table layout not aligned (#2656,#3105,#3113);
+ Improve scanning requirement checks (#1183);
+ Date picker hidden (#2673);
+ PDNS Add/Edit DNS record not working for normal users (#2686);
+ Unable to save settings with link addresses = text custom field (#2702);
+ Kea MAC address display issue (#2704);
+ Returned custom fields to devices table (#2572);
+ Invalid scan agent key warning;
+ Subnet filter issue when IP contains 0 octet. (#2748);
+ Add VLAN button not working (#2741);
+ Incorrect subnet links in /tools/vrf/ view. (#2774);
+ Location data missing in exports. (#2833);
+ Check mysqldump path when exporting database;
+ Current rack position missing when editing a device. (#2545);
+ Permit colon in firewall zone interface names (#2737);
+ Fixed PowerDNS txt SPF editing (#1641);
+ Blank 'MAC' on SNMP-ARP and SNMP-MAC scans (#2911);
+ Incorrect network/broadcast calculation for IPv6 (#2879);
+ Increase allowed email and password lengths (#3021);
+ Wrong unit location for dual-sided racks (#3086);
+ Linked ip_addr shows integer notation (#3100);
+ Invalid scan type () error (#2785);
+ Invalid CSRF cookie editing rack items (#2556);
+ FPing discovery marks all addresses as alive (#2888);
+ Subnet usage calculation updated for nested subnets;
+ SNMP, number of discovered hosts exceed maximum warning (#3279);
+ Exclude IPv6 from Ping and Discovery scans (#3354);
+ Fix for SAML/2FA/login redirections (#3492, #3435, #3517);
+ php_sessions table doesn't exist error when upgrading (#3417);
+ Changelog data too long for column errors (#3376,#3398);
+ RFC 6265 compliant cookies (#3452);
+ Require unique subnets not working as intended (#3529);
+ API:
+ Fixed /user/ calls for SSL with app code (static app code);
+ Address IP field not displayed when using filter_by (#2934);
+ Addresses first_free & Subnets first/last_subnet thread safety (#2960);
Security Fixes:
----------------------------
+ SQL injections processing `tableName` (#2738);
+ SQL injections processing `ftype` (#2751);
+ All circuits map, PHP object injection (#2937);
+ Upgraded jQuery to 3.5.1 (#3119);
+ Stored XSS in instructions widgets (#3025, #3360);
+ PHP session ID fixation (#3342);
+ XSS (reflected) in IP calculator (#3351);
+ XSS in pass-change/result.php (#3373);
+ SQL injection in edit-bgp-mapping-search.php;
+ Stored XSS in the "Site title" parameter;
+ XSS while uploading CVS files;
+ XSS (reflected) in 'find subnets';
+ Incorrect privilege assignments (#3506);
+ XXS (reflected) in ripe-arin-query;
+ XSS (reflected) in import previews;
Translations:
----------------------------
+ Update Traditional Chinese support to version 1.5 (#2658);
+ Update Simplified Chinese Translation (#2725);
+ Italian (it_IT) translation added (#2813);
+ Updated German translation (#2970, #3065);
+ Updated Russian translation (#3028, #3367);
== 1.4.0
New features:
------------
+ Configurable password policy;
+ Sessions can be now stored in database (#516);
+ Two-factor authentication - otp (Google Authenticator);
+ Customers module (#694);
+ Routing module (BGP) (#2135);
+ Search for free subnet inside whole section;
Enhancements, changes:
----------------------------
+ Circuits enhancements (Virtual Circuits);
+ Dropped support for 32bit systems;
+ PHP 5.4 is now required;
+ Added compressed actions dropdown;
+ SNMP module no longer requires MIB files;
+ Performance enhancements running under Azure/Amazon;
+ Added option to disable user (#1327);
+ Added policy NAT option;
+ Added custom NAT fields;
+ Rack module enhancements (#1325):
+ Dynamic rack sizes;
+ Top-down / Bottom-up racks;
+ Custom rack devices independent of devices (power, patch panel);
+ Customized user permissions for modules:
+ VLAN module;
+ VRF module;
+ PowerDNS module;
+ Circuits module;
+ Customers module;
+ Devices module;
+ Rack module;
+ NAT module;
+ PSTN module;
+ Locations module;
+ API:
+ New API security type - SSL with app code (static app code);
+ New config.php option $api_allow_unsafe to allow non-SSL API queries;
+ Added last access field to api;
+ Add Mac Search for Addresses controller (#2005);
+ New overlapping API call;
+ New global API parameter filter_match = full,partial,regex;
+ Add Tools API customers submodule;
+ Fix filtered results to always return data as array (#2558);
+ Widgets:
+ New user instruction widget (#2383);
Translations:
----------------------------
+ Japanese (ja_JP) translation added;
+ Traditional Chinese (zh_TW) translation added;
Bugfixes:
----------------------------
+ Fix appended " U" in Rack description (#2046);
+ Fix Bandwidth calculator - 400 Bad Request. (#1807);
+ Fix bad DNS reverse zone for /23 subnet (#666);
+ Fix Add missing standard field (#2153);
+ Fix Consistency of VARCHAR Size on 'owner' column across tables (#2136);
+ Fix Subnet details - Filter button missing when compressed range is used (#2353);
+ Fix slow page load times with linked addresses (#2324);
+ Fix " - is required" error when adding IPs with an empty IP filter set (#2334);
+ Fix column 'masterSubnetId' cannot be null error when adding subnets (#1977);
+ Fix logical circuits add/delete errors (#2381);
+ Fix adding new VLANs to an empty L2Domain (#2400);
+ Fix Nested child subnets with "na" permissions visible (#2223);
+ Fix translations containing apostrophes break functionality (#2504);
+ Set requestedAuthnContext to false for SAML (#2457);
+ API:
+ Fix inconsistent API success value returned (#2045);
+ Fix filter_by functionality (#2392);
+ Fix PATCH functionality (#2470, #2481);
Security Fixes:
----------------------------
+ Hide SNMP community (#2197);
+ Hide LDAP/AD/Radius username / password and secret from logs and syslog (#2006);
+ XSS in phpipamredirect cookie (#2338);
+ XSS in print-user.php, CSRF in user-edit.php (#2326);
+ Possible SQL injection in nat/item-add-submit.php (#2344);
+ Fixed possible file inclusion in editing authentication methods;
+ XSS in subnet-scan-telnet.php, CSRF in subnet-scan-execute.php (#2327);
== 1.3.2
Enhancements, changes:
----------------------------
+ Dark theme added;
+ Full php7.2 compatibility;
+ url_rewrite has changed, please use new rewrite scheme (https://phpipam.net/news/new_rewrite_scheme/);
+ Search for matching subnet in all VRFs feature enabled when importing addresses;
+ Added new config option to show custom fields separated from standard fields when editing IP address;
+ Added Required fields subpage to define IP address fields that must be filled in;
+ Performance + bug fixes (#1660, #1657);
+ MasterSubnet dropdown list is dynamically generated via AJAX call;
+ Bandwidth calculator;
+ Support 8U rack sizes. (#1891);
+ API:
+ New last_subnet API calls (#1655);
Translations:
----------------------------
+ German translation updated to version 1.3.1;
+ French translations updated. (#1881);
Bugfixes:
----------------------------
+ Fixed uncaught error if vlan number exceeds max permitted (#1455);
+ Fixed Illegal string offset 'dns_name' in pingCheck.php errors (#1461);
+ Performance fix for subnet_dropdown_print_available (#1562);
+ Fixed logo updater for apache v2.4 (#1582);
+ Fixed section names containing spaces are not included in exports (#1566);
+ Allow DNS wildcard records (#1571);
+ Fixed slow mac address vendor decoding for subnet detail view (#1658);
+ Performance fix for detecting overlapping subnets. (#1052, #1426, #1533);
+ Performance fix for slow mac address vendor decoding (#1658);
+ Performance fix for subnet API first_subnet & all_subnets calls;
+ Performance fix for delegating subnet permissions;
+ Convert to UTF-8 encoding on import/export to preserve dialectics (#1659, #1700, #1728);
+ Importing IPs loose Mac Addresses (#1607);
+ Section names containing spaces are not included in exports. (#1566);
+ Bug with section and dashboard (#1593);
+ Fixed improper contents in plain text part of notification e-mails (#1707);
+ Reduce size of email notifications (#1643);
+ PHP 5.3 compatibility fixes (#1594, #1730);
+ PHP 7.2 compatibility fixes (#1683, #1714);
+ Fixed notification e-mails contain a broken link. (#1708);
+ Allow dots to be used in domain names. (#1747);
+ Use multi-byte compatible functions when shortening text. (#1753);
+ Scan subnet reports/selects invalid php path. (#1757);
+ Small code refactoring (#1699);
+ Rack device start position overwritten. (#1545);
+ Sections with folders returns no subnets using API. (#1883);
+ Add custom_ prefix to Prefix controller custom fields. (#1836);
+ Non-Admins missing the button to Add circuit. (#1902);
+ Wrong field name of deviceTypes table when checking device type. (#1910);
+ SNMPv3 improvements;
+ Misc IPv6 fixes;
Security Fixes:
----------------------------
+ Code injection in Name field. (#1667);
+ XSS (reflected) in SubnetID param. (#1702);
+ CSRF enables open mail relay. (#1703);
+ Reflected XSS requiring user interaction on search. (#1705);
+ XSS reflected via CSRF in preview.php. (#1706);
+ Reflected XSS via CSV upload. (#1742);
+ Reflected XSS on 'mac' parameter. (#1903);
== 1.3.1
New features:
------------
+ Circuits module (circuits, providers, map, ...) (#731);
Enhancements, changes:
----------------------------
+ Racks:
+ Automatic location assignment when device added to rack (#1230);
+ Rack map showing map of all racks in location;
+ Rack back side;
+ Compact menu layout (per-user setting, showing only icons);
+ Network to network static nat;
+ Selectable logo size (from config.php) (#952);
+ Added default option for permissions propagations (#1351);
+ API:
+ Added Circuits controller;
+ Encrypyted requests can now also be form-encoded (#1191);
+ Introduce mcrypt AES compatibility (#1516);
+ Fixed field ip not displayed when filters applied (#1529);
+ New resolve hostnames option for subnet (#1222):
+ Updates hostnames via pingCheck.php script (if parameter set for subnet);
+ Updates hostnames via resolveIPaddresses.php script (if parameter set for subnet);
+ On-the-fly empty hostname update if resolved (if parameter set for subnet and enabled globally);
+ Added this infor to tools > scanned networks;
+ Added custom_ prefix to custom field names to avoid duplication with custom fields (#1387);
+ Added option to hide IP requests for unauthenticated users on login page (#1394);
+ Performance optimizations for locations and subnet usage calculation;
+ Added user groups custom fields;
Translations:
----------------------------
+ French translation updated to version 1.3;
+ German translation updated to version 1.3;
Bugfixes:
----------------------------
+ Fixed RACK images not displayed if not root location (#1204);
+ Fixed import gateway ip (#1240);
+ Fixed JSON_UNESCAPED_UNICODE for PHP 5.3 (#1135, #1245);
+ Rename class Thread to PingThread to avoid naming conflict with pthreads Thread class (#1254);
+ Fixed custom fields integer on subnet (#1266);
+ Fixed Import IP-address doesn't update location (#1284);
+ Fixed json_error for logo upload (#1256);
+ Fixed CSRF error when moving orphaned addresses (#1303);
+ Fixed VRF fetching via API by Id;
+ Fixed map issues when quotes are in name/description (#1384);
+ Fixed item not removed from NAT when deleted (#1378);
+ Fixed Error when error_reporting = E_ALL about strict standards when importing IP addresses (#1372);
+ Fixed Apostrophe errors in text custom fields (#1375);
+ Fixed API error when creating address under folder (#1507);
+ Fixed SNMPv3 (#1119);
Security Fixes:
----------------------------
+ Fixed XSS issues (#1403, #1521, #1500);
== 1.3.0
New features:
------------
+ Multicast module (RFC1112, RFC2464) with IP to MAC mapping and multicast networks overview;
+ Threshold module for subnets;
+ Racks module (Rack drawing) for devices;
+ Address linking by selected field;
+ Custom logo for site and mails;
+ PSTN number management module;
+ SNMP module:
+ Subnets discovery from route table (all subnets, nested subnets, add new subnet);
+ Hosts discovery scans via ARP check/interface check;
+ Hosts discovery scans via ARP + MAC address check (detects interface);
+ VLAN discovery;
+ VRF discovery;
+ Status update scans via ARP check;
+ NAT module
+ Source / static / destination NAT;
+ Linking subnet to NAT
+ Show bindings under tools and next to IP address / subnet
+ Locations module
+ Map devices / racks / subnets to location;
+ Google maps integration;
+ SAML2 authentication (SSO)
Enhancements, changes:
----------------------------
+ Folders can now contain addresses;
+ API:
- Api v1 removed;
+ If subnet gateway defined gatewayId is returned in subnet details;
+ Automatically added nameservers to subnet results;
+ Added subnet usage result for each subnet in section;
+ Added custom fields for all controllers;
+ New subnets automatically get parent permissions;
+ Added IP calculation to subnet;
+ Changed all not_found when searching objects to 404 and all invalid parameters to 409 (conflict);
+ If new item is created id will be available in response field “id”;
+ New parameter $time_response in api/index.php that will return execution time in field “time";
+ Extensive first_free subnet calls search speedup;
+ POST transaction locking;
+ All first_free and first_address responses are now "data" instead of "ip" and "subnet" for consistency;
+ Subnet splitting now copies over custom fields values by default (user custom_fields=no to revert);
+ Added API option to nest custom_fields to assure correct structure;
+ Added option to show/hide links in api by default for each app;
+ Changed API http response codes;
+ New methods:
+ users:
GET /user/expires/ // returns token expiration date
GET /user/token-expires/ // returns token expiration date
GET /user/users/ // returns all users (rwa app permissions required)
GET /user/admins/ // returns all admin users (rwa app permissions required)
+ addresses:
GET /addresses/first_free/{subnetId}/ // returns first available address (subnetId can be provided with parameters)
GET /addresses/{ip}/{subnetId}/ // returns IP address from subnet
GET /addresses/search/{hostname}/ // Will search addresses by hostname
DELETE /addresses/{ip}/{subnetId}/ // deletes IP address from subnet
POST /addresses/first_free/{subnetId}/ // will search for first free address in subnet, creating new address
+ subnets:
GET /subnets/{id}/addresses/{ip}/ // returns IP address from subnet
GET /subnets/{id}/first_free/ // returns first free address in subnet
GET /subnets/{id}/first_subnet/{mask}/ // returns first available subnets with specified mask
GET /subnets/{id}/all_subnets/{mask}/ // returns all available subnets with specified mask
POST /subnets/{id}/first_subnet/{mask}/ // creates first free subnet under master with specified mask
DELETE /subnets/{id}/permissions/ // removes permissions
PATCH /subnets/{id}/permissions/ // sets subnet permissions (?grouname1=ro&groupname2=3&43=1)
+ New controller Prefix;
+ New controller Devices;
+ New subcontrollers:
+ /tools/nat/
+ /tools/racks/
+ /tools/locations/
+ Widgets:
+ New threshold widget;
+ New inactive hosts widget;
+ New Locations widget;
+ PowerDNS:
+ Default domain for PTR records (if hostname is not set);
+ When removing IP address additional option that removes all associated PDNS records (ip and hostname);
+ Permit normal users to manage VLANs / VRFs;
+ Inactive (offline) hosts tools page;
+ MAC address normalization;
+ jQuery tables;
+ Permission delegation now only delegates changes not whole permission set;
+ Users with RWA permission can manage IP requests and receive IP request mails + changelog mails for subnet;
+ IPv4 subnet link to IPv6 for dual-stack info;
+ Removed inaccessible DNS servers if timeout to prevent page load timeouts;
+ Added option to only show supernets to limit pageload [#844 #816 #736];
+ Added last scan info to subnet details;
+ Added option to update address tags when address state change occurs (pingCheck) [#840];
+ Added maintenance mode;
+ Added inactive addresses removal script;
+ Subnet overlapping now checked also inside folders to prevent duplicates;
+ Subnet overlapping now checked also between sections if VRF defined;
+ Added new settings directive that requires unique subnets across sections;
+ Added index check in verify database to detect and fix possible missing DB indexes;
+ Added MAC address vendor display option;
Bugfixes:
----------------------------
+ PowerDNS regenerate PTR records now only updates current subnet (before whole zone);
+ Fixed visual bug on 32-bit systems;
+ Normal users with RWA permissions can scan subnets;
+ Changed default timestamp from 0000-00-00 00:00:00 to 1970-01-01 00:00:01 to avoid SQL install errors if strict mode;
+ Fixed https access on non-standard ports;
+ Extended username to 255 chars for LDAP logins;
+ Fixed search export invalid encoding and data may have been lost XLS file error;
+ Fixed invalid character encoding in API responses;
+ PowerDNS records cannot be created on slave zone;
+ Fixed subnet resizing bug if subnet contained slaves;
+ Added separate CSRF cookies for each address/subnet/pstn object;
+ Deleted items are now shown and searchable from changelog;
== 1.20.1
Translations:
----------------------------
+ French translation updated to version 1.2;
+ German translation updated to version 1.2;
Bugfixes:
----------------------------
+ Fixed upgrade bug that selected invalid auth method for AD/LDAP users;
+ Fixed LDAP problems after 1.2 upgrade;
+ Fixed PowerDNS Slave with multiple masters delimiter error;
+ Fixed PowerDNS PTR records not being updated automatically;
+ Fixed csrf cookie bug when editing folder;
+ Fixed csrf cookie bug when truncating subnet;
+ Fixed invalid code for API crypt method;
+ Fixed strange headings font display in Firefox;
+ Fixed invalid proxy settings in config.dist.php;
+ Fixed search same hostnames in db link form address table;
+ Fixed import subnet bug caused by fw object;
+ Fixed Subnet Import (Preview button > no action);
== 1.20
New features:
------------
+ Added multiple simultaneous authentication methods (Apache, AD, LDAP, Radius, NetIQ);
+ Added fping scanning support;
+ Added selectable scanning type (ping/pear/fping);
+ Added L2 domains;
+ Added option to define address as default GW for subnet;
+ Added customizable address tags with compressed option;
+ Added temporary subnet / address shares;
+ Added quick subnet masks;
+ Added nameserver sets per subnets (jonashauge);
+ Added optional syslog as log location;
+ REST API:
+ documentation: http://phpipam.net/api-documentation/
+ API v2, old v1 support added
+ Complete rewrite of all API calls;
+ New security models (crypt, ssl, none);
+ Support for custom fields;
+ JSON / XML output
+ Full read/write controllers (Sections, Subnets/Folders, Addresses, Vlans, Vrfs);
+ PowerDNS integration:
+ Automatic reverse records creation (PTR) - IPv4 and IPv6;
+ Automatic SOA, NS record creation;
+ DNS domain management;
+ Added Scan agents to scan subnets remotely;
+ Added firewall zone mappings and module;
+ Added per-subnet DNS resolvers;
+ Added option to mark subnet as utilized (full);
Enhancements:
----------------------------
+ All tables are now InnoDB by default;
+ Upgraded jQuery to 2.1.3;
+ All functions rewritten to classes/methods;
+ Parameterized all SQL queries, moved from MySQLI to PDO;
+ Added VLAN/VRF to search and to search results export;
+ Redesigned admin and tools menu;
+ Added scanned/discovered subnets to tools for faster overview;
+ Per-user display settings;
+ New widget - tools shortcuts;
+ New widget - IP calculator;
+ New widget - request IP address;
+ Clickable links for subnet fields;
+ Custom VRF fields;
+ Subnets can be now linked to devices;
+ Import/export enhancements;
+ Fast user switching for admins to impersonate user;
+ Opened folders and subnets in tree menu are saved on page reload;
+ RWA users can now process IP requests;
+ Added auto-suggest for possible slave subnets;
+ SSL option for MySQL connections;
+ Enum custom field support;
+ Added password reset script;
+ Set sections to display VRF in;
Security Fixes:
----------------------------
+ Parameterized all MySQL querries;
+ Fixed plainpass being logged on user update;
+ Fixed XSS exploit on /error/;
+ Added CSRF protection to forms;
Translations:
----------------------------
+ Added Czech translation;
Bugfixes:
----------------------------
+ Fixed bug with SSL/TLS smtp servers;
+ Fixed visual subnet display issues on 32bit systems;
+ Fixed IPv6 split subnets bug;
+ Fixed /31 ping bug scanning out of boundaries;
+ Fixed nested broadcast not counted to used percentage;
+ Fixed invalid redirect after timeout;
+ Fixed discovery script index overridden;
+ Fixed dashboard graphs links to subnets;
+ Fixed Invalid ID on subnet scan of large subnets;
== 1.1.010
Bugfixes:
----------------------------
+ Fixed login fails with LDAP when escape characters are in password;
+ Fixed login not working with spaces in password for AD login;
+ Fixed Ivalid action when adding vlans from subnet popup menu;
+ Fixed custom fields not appearing properly on IP request editing;
+ Fixed Invalid ID error for IP address details on sorting;
+ Fixed warnings if no VLAN search results are present;
+ Fixed test mail not sending;
+ Fixed unable to login if $phpsessname not defined;
+ Fixed unable to login after upgrade;
== 1.1
Enhancements:
----------------------------
+ Caching of SQL results to avoid multiple queries;
+ Reduced number of DB queries;
+ Added selected mail notifications to admins to be notified on IP/subnet change;
+ Added new subnetId index to ipaddresses table that significantly improves network loading;
+ Now using only 1 network connection towards MySQL server;
+ Updated pagination;
+ mod_rewrite no longer required, selectable URL structure under settings;
+ Added option not to display free ranges;
+ Added option to set maximum VLAN number;
+ Selectable custom fields to be visible/hidden in tables view and updated device/VLAN view;
+ Added additional confirmation before section, subnet, folder and IP address deletion;
+ New script added for cron checks that discovers new hosts for selected networks;
+ Added inactivity timeout to settings;
+ Changed install procedure and updated install scripts;
+ Added PEAR check for installation;
+ Added free range display for VLANs;
+ Addes SSL/TLS option for SMTP mail;
+ API:
+ Bugfixes;
+ Added API admin permissions;
+ read/delete actions for IP addresses;
+ read/delete actions for Vlans;
+ read/delete actions for VRFs;
Security Fixes:
----------------------------
+ Fixed known command injection vulnerabilities in the scan functions;
+ Fixed known SQL injection vulnerabilities;
+ Fixed known XSS vulnerabilities;
+ Fixed known action XSS events;
+ Moved to crypt method for storing password in database with salting;
+ Added option to force user to change pass after first login;
+ Admin password must be changed after installation;
+ Added captcha code request after 5x unsuccesfull login to prevent brute-force attacks;
Translations:
----------------------------
+ Added es_ES translation;
Bugfixes:
----------------------------
+ Fixed top 10 widgets not escaping strings;
+ Fixed section parent can be set to self that caused section to disappear;
+ Fixed username instead of password being sent to smtp server;
+ Fixed IE search bug with workaround;
+ Fixed subnet and bcast not showing on strict mode disabled;
+ Fixed top subnets missing on dashboard for non-admin users;
+ Fixed bug when installation was silently failing because pf missing _() function (missing gettext extension)
+ Fixed device custom field not populated on adding device;
+ Fixed XLS export silently failed when description longer than 31 characters;
+ Fixed overlapping check not working;
+ Fixed subnet free space calculation;
+ Fixed visual subnet display not showing on /31 and /32 networks;
+ Fixed custom fields display on folder edit;
+ Fixed unable to edit IP addresses when fields are sorted;
+ Fixde ordering of custom fields defaults to varchar 256;
+ Fixed IPv6 subnet / broadcast calculation bug and next subnet suggestion;
== 1.0
New features:
----------------------------
+ IP address page with IP address details and IP history (Changelog);
+ IP address changelog, subnet and section changelogs with full changelog under tools;
+ Favourite subnets for quick access;
+ Adding subnets from free space with automatic mask provided;
+ Automatic database validity check after upgrading and automatic field/table fix under administration;
+ Automatic weekly check for new phpipam version;
Enhancements:
----------------------------
+ Bootstrap 3;
+ UI enhancements;
+ Improved views based on browser width;
+ Widget order can now be set;
+ Widgets can be reordered (dragged) directly on dashboard;
+ Subnet can now be splitted to max 256 new subnets (16 before);
+ Scan settings are moved to Administration;
+ Widget management has moved to administration, which allows creation of new widgets;
+ Improved ICMP error detection;
+ Mail settings can now be set on gui (localhost / smtp);
+ Popup windows are now draggable;
+ VLAN adding in the fly enhancements;
+ Master section now shows all subnets in subsections;
+ Tools > devices redone;
+ DeviceTypes can now be edited/set/added;
+ Ping subnet enhancements;
+ Custom field types are now definable (int/varchar/date/datetime/text/bool/set);
+ Date and timepicker popups if type = date/datetime;
+ For `set` and boolean custom fields dropdown is presented that users can pick;
+ Favourite subnets widget;
+ IP requests widget;
+ Changelog widget;
Translations:
----------------------------
+ Added Brazil translation (Michel Braga Guimarães);
Bugfixes:
--------
+ UI fixes;
+ Fixed bug where last page of IP addresses was inaccessible;
+ IP address state change is now sent to all admins;
+ Fixed subnet displaying as 0.0.0.0/0 in details;
+ Fixed links to subnets form vlans and vrfs;
+ Fixed search result showing all folders if searched item is not IP address;
+ Fixed disappearing section when L2 section was selected as master section;
+ Fixed device ID showing in mail notification instead of hostname;
+ Fixed device ID showing in search results and export instead of hostname;
+ Fixed search for subnet name returned no results;
+ Fixed apostrophe in IP address description throws SQL error for scan results and XLS import;
+ Fixed requester email gets cut if longer than 32 chars;
+ Fixed admin folder edit appearing as subnet;
+ Fixed missing device/port in import;
+ Fixed master section delete did not delete subsections and belonging subnets/ips;
+ Fixed online status was not updated when running Ping status scans;
+ Fixed Folder name not appearing when deleting folder;
== 0.9
New features:
----------------------------
+ Support for ICMP network discovery;
+ Cron script to check status for selected subnets/hosts with threading suport (pcntl php extension required);
+ ICMP check IP status in demand;
+ Compressed (grouped) DHCP IP ranges;
+ API server version 0.1;
+ Option to show and group subnets by VLAN in subnets list;
+ Option to show and group subnets by VRF in subnets list;
+ Added subsections;
+ Added AD username search;
+ Added folders;
Enhancements:
----------------------------
+ Added error catching/displaying for ajax-loaded php scripts;
+ Added default language for login/requests display and new users;
+ Added direct links to different pages in IP address table;
+ Subnets can now be edited directly from nested subnets list;
+ When adding nested subnets default vlan/vrf is selected from parent;
+ Added Section ordering;
+ Added per/section subnet ordering (overrides default form settings);
+ Clicking on section now shows all subnets and belonging details;
+ If session timeouts after re-login last requested page will be opened;
+ Searh for IP address now returns also subnet, even if IP is not existing;
+ Per-user selection of widgets to display;
+ Added description and required field checkbox for custom IP/Subnet Fields;
+ Added custom device fields;
+ Mails are now sent through phpmailer;
+ Admin user cannot be deleted;
Translations:
----------------------------
+ Added French translation (Denis Darré);
+ Added Dutch translation (Michiel Visser);
+ Added German translation (Carsten Brückner);
Bugfixes:
----------------------------
+ Fixed wrong VLAN display in tools;
+ Fixed subnet/section links from VLANS if base not /;
+ Fixed warning in apache log on subnet editing if no VRFs are configured;
+ Fixed admin menu off-screen overflow;
+ Fixed firefox error when selecting rights for section/subnets was not possible;
+ Fixed subnet description in Cyrillic problem;
+ Fixed errors on no permissions for user;
+ Fixed Inaccurate Free Space Calculation (and Chart);
+ Fixed VLAN permissions where VLAN was not displayed;
== 0.8
New features:
----------------------------
+ New group and permission management;
+ Support for translations;
+ Subnet resizing;
+ Subnet splitting into smaller subnets;
+ Added free space display for nested subnets;
+ Added visual display of subnet usage per IP address;
+ Added truncate network option that deletes all IP addresses in subnet;
+ Added button the updates subnet with RIPE information;
Enhancements:
----------------------------
+ Added add nested subnet under subnet details to simplify master subnet selection in hierarchy;
+ Added edit subnet link from search results;
+ Added reverse IPv6 DNS entries to IPCalc (Vincent Boisard);
+ Added option for plain-text emails;
+ Added ckEditor to write instructions;
+ StrictMode is not set globally anymore but set per section;
+ Added custom user fields;
+ Added option to verify that hostname is unique;
+ Improved MySQL exception handling;
+ Added mod_rewrite error detection on installation and upgrade;
+ Added hostname validation;
+ Added Hostfile dump of IP addresses;
+ Search also searches in custom fields;
+ jQuery updated to v 1.9.1;
Bugfixes:
------------------------
+ Fixed overlay on second popup;
+ Fixed IE search bug;
+ Fixed support for non-standard ports;
+ Fixed permitting overlapping subnets if vrfs are different;
+ Fixed dates in logging appearing in 12h format;
+ Fixed broken subnets link in tools > subnets if installation is not at document root;
+ Fixed error when adding new subnet if checkboxes are not selected in newer MySQL servers;
+ Fixed bad display of multilined navigation bar;
+ Fixed wrong output of tools > VLAN list when using Duplicate VLANs;
+ Fixed wrong link for upgrade script;
+ On VRF change all child subnets are updated also;
+ Fixed wrong maximum on dashboard top10 percentage;
+ Fixed Adding a vlan while editing a subnet resets the edit subnet form;
+ Fixed wrong free space calculation for nested subnets;
+ Fixed IP use statistics not cumulative up the hierarchy if subnets has slaves;
== 0.7
New features:
----------------------------
+ Completely rewritten UI using twitter's bootstrap as base;
+ Using mod_rewrite apache module to handle GET requests (new install requirements!);
+ Unlimited number of subnetting levels;
+ OpenLDAP authentication support;
+ New URL structure;
+ Sorting of IP addresses;
+ Custom subnet fields;
+ Custom VLAN fields and admin option to allow duplicate VLAN names (metro area VLANs);
+ Script to automatically update IP <-> hostname, run via cron (functions/scripts/resolveIPaddresses.php);
+ Show Subnet name instead of subnet IP address option;
+ Strict mode option in config files that controls overlapping checks;
+ New subnet menu;
+ Added printLimit feature to break IP addresses into pages;
Enhancements:
----------------------------
+ Lots of UI changes;
+ Less Ajax usage to display websites and details;
+ Hierarchy display under subnet details (breadcrumbs);
+ Search results covering VLANs;
+ Custom IP fields ordering;
+ VLAN creation from adding/editing subnets;
+ IP addresses can now be edited;
+ Collapsed switch list;
+ Removing VLANs also removes references from subnet list;
+ Removing VRFs also removes references from subnet list;
+ Logs for admin on dashboard;
+ Search via GET;
+ Support for range networks (allows use of subnet and broadcast as IP);
+ Import of custom IP fields;
+ Ability to move subnets between sections;
+ Improved display of nested subnets now shows all IP addresses from nested subnets and orphaned IPs;
+ Hides display of custom fields in subnet if none is filled in whole subnet;
+ Replaced Highcharts with Flot because of licencing issues;
Bugfixes:
------------------------
+ Fixed error with missing custom IP fields when adding new IP address;
+ Fixed bug when deleting root subnet only deleted directly nested subnets (now whole tree);
+ Fixed checkboxes not working in various browsers;
+ Fixed change in switch details causing IP address associations to switch to be lost;
+ Fixed subnet description display in under subnet administration;
+ Fixed depricated error when showing XLS files;
+ Fixed error when custom fields were not updated on adding IP address;
+ Fixed error when custom fields were with spaces in name were not updated;
+ Fixed error when providing already requested IP address;
+ Search available also to viewer user types;
+ Fixed /127 and /128 IPv6 subnets;
+ Fixed /31 and /32 IPv4 subnets;
+ Significantly reduced php processing for dashboard statistics;
+ Fixed importing of if quote is present;
== 0.6
New features:
----------------------------
+ Selectable IP address list display fields;
+ Custom IP address fields;
+ Search and replace IP fields function;
+ Full page width theme;
Enhancements:
----------------------------
+ Independant VLAN management;
+ Added additional level of subnet nesting;
+ Added option to clear and export log files;
+ Export of search results to XLS;
+ Clickable search results;
+ Selectable export fields when exporting subnet;
+ Subnet can be deleted from ip address edit subnet;
+ IP Requests for locked subnets and viewer users can be placed from ip address list;
+ jQuery updated to v 1.7.1;
+ HighCharts updated to v 2.2.0;
Bugfixes:
------------------------
+ Upgrade is supported only for versions 0.4 and higher;
+ Fixed broken UTF-8 support;
+ Fixed wrong logging when authenticating via AD;
+ Fixed issues where external attacker might get information about internal hosts through resolvedns script;
+ Fixed wrong subnet nesting under administration/manage subnets;
+ Fixed editing subnet can be outside of its own root subnet;
+ Fixed errors when adding new switch auto-adds itself to all hosts without no switch defined;
+ Fixed removing switch not removed in ip address list;
+ Vlan1 can now be used;
+ Fixed mail sending settings with missing information;
+ Fixed errors on adding switch with no sections;
+ Fixed version check;
+ Removed masterSubnets from subnets available for IP requests;
+ Fixed error when non-admin user could not open dashboard;
+ Added how subnet list switch when list hidden;
== 0.5
New features:
-------------
+ Importing subnets from RIPE by AS in admin section;
+ Added switch management and changed switch logic;
+ Added VRF support;
+ Added AD domain authentication;
+ Added MAC address field to ip address;
+ Added database table and belonging fields check under admin;
Bugfixes / enhancements:
------------------------
+ Added DNS resolving when editing/adding IP address;
+ Added IE compatibility meta tag and IE UI improvements for IE >= 8;
+ Search returns also subnets and MAC searches;
+ Added mac address and IP status to XLS import/export scripts;
+ jQuery update from 1.6.2 to 1.7;
+ Highcharts update from 2.1.2 to 2.1.8;
+ Fixed dashboard errors if no IPv4/IPv6 subnets configured;
+ Fixed errors with viewing / modifying IP addresses for Operator users;
+ Fixed session cookie error on hosts;
+ Fixed error when saving settings;
+ Fixed instructions errors when inserting html code;
+ Fixed first free IP address not displaying in IP request;
== 0.4
New features:
-------------
+ Massive add / edit / delete by specifying IP range (e.g. 10.10.0.1 - 10.10.0.254);
+ Database upgrade / install from browser -> simplified installation/update procedure;
+ New usertype viewer - can only view IP address list;
+ Subnets can now be edited directly from IP address list;
+ Option to lock subnet for writing to no-admin users;
+ Device and Host list;
+ Option to specify which subnet can have IP requests when editing / adding subnet if module is enabled;
+ Latest version check on admin page;
Bugfixes / enhancements:
------------------------
+ Fixed overspanning of multiple sections;
+ Admin menu and add subnet now shown only to admins;
+ Fixed VLAN table to show nesting and IP request option and statistics;
+ Fixed subnet table to show nesting and IP request option;
+ Subnet Adding shows only master subnets in section not in all sections;
+ Tooltips and button hovers are now in separate javascript file;
+ Graphs show only subnets with non-0 ip addresses;
+ Various code enhancements + improved error handling;
+ Fixed URL links not updating after few clicks;
+ If loading slave subnet directly the subnet menu drops down and shows active slave subnet;
+ Clicking on master subnet shows all nested subnets and statistics;
+ Redesigned log table;
+ Fixed search;
== 0.3
New features:
-------------