-
Type:
Problem report
-
Resolution: Unresolved
-
Priority:
Trivial
-
Affects Version/s: 8.0.0rc1 (master)
-
Component/s: Frontend (F)
-
S26-W38/39
-
1
Steps to reproduce:
- Open Data collection => Hosts => Discovery => Trigger prototypes
- Open any Trigger prototype edit form
- Check link and alter invalid value for "parent_discoveryid"/ "triggerid" and press Enter
Result: Along with the "Access denied" error in frontend, the following runtime error is observed in PHP error logs:
pg_query(): Query failed: ERROR: invalid input syntax for type bigint: "test"
LINE 1: ...=id.itemid WHERE t.flags IN (2,6) AND t.triggerid='test' AND...
^ [zabbix.php:17 -> require_once() -> ZBase->run() -> ZBase->processRequest() -> CController->run() -> CControllerPopup->checkPermissions() -> CControllerTriggerPrototypeEdit->checkPermissions() -> CApiWrapper->__call() -> CFrontendApiWrapper->callMethod() -> CApiWrapper->callMethod() -> CApiWrapper->callClientMethod() -> CLocalApiClient->callMethod() -> CTriggerPrototype->get() -> DBselect() -> pg_query() -> CConfigFile->{closure}() in include/db.inc.php:206]
Error in query [SELECT DISTINCT t.triggerid,t.expression,t.description,t.url,t.status,t.priority,t.comments,t.templateid,t.type,t.state,t.flags,t.recovery_mode,t.recovery_expression,t.correlation_mode,t.correlation_tag,t.manual_close,t.opdata,t.event_name,t.url_name,t.discover FROM triggers t JOIN functions f ON t.triggerid=f.triggerid JOIN item_discovery id ON f.itemid=id.itemid WHERE t.flags IN (2,6) AND t.triggerid='test' AND id.lldruleid=66355] [ERROR: invalid input syntax for type bigint: "test"
LINE 1: ...=id.itemid WHERE t.flags IN (2,6) AND t.triggerid='test' AND...
^] [zabbix.php:17 -> require_once() -> ZBase->run() -> ZBase->processRequest() -> CController->run() -> CControllerPopup->checkPermissions() -> CControllerTriggerPrototypeEdit->checkPermissions() -> CApiWrapper->__call() -> CFrontendApiWrapper->callMethod() -> CApiWrapper->callMethod() -> CApiWrapper->callClientMethod() -> CLocalApiClient->callMethod() -> CTriggerPrototype->get() -> DBselect() -> trigger_error() -> CConfigFile->{closure}() in include/db.inc.php:207]
Expected: No runtime errors appear in PHP error log file
NOTE: Same runtime errors are triggered for:
Data collection => Hosts => Triggers => Open any trigger edit form, check link and alter invalid value for "triggerid" and/or "hostid"
