CVE可修改

Hunter_ht/hunter/static/hunter/style.css

@@ -494,6 +494,7 @@ ul:after{
 .li_right{
     float: right !important;
     font-size:14px;
+    margin-left:10px;
 }
 .middle_text{
     font-size: 14px;
@@ -720,7 +721,12 @@ li svg{
     height: 20px;
     margin: 5px 0;
     background-image: url("/static/hunter/images/delete.png");
-
+}
+.edit_img{
+    width: 20px;
+    height: 20px;
+    margin: 5px 0;
+    background-image: url("/static/hunter/images/edit.png");
 }
 .add_one button svg{
     margin:8px 5px;

Hunter_ht/hunter/templates/hunter/user.html

@@ -55,7 +55,7 @@
     </div>
 </nav>
 
-<section id="publish" style="padding-top:100px;">
+<section id="publish" style="padding-top:190px;">
     <div class="smaller_box"></div>
     <div class="left-bar smaller_bar">
         <span>
@@ -122,9 +122,10 @@
                     <ul id="cveid{{ cve.identifier }}">
                         <li class="cve_big_text"><a href="{{ cve.url }}" target="_blank">{{ cve.identifier }}</a></li>
                         <li class="li_right"><button class="dele_img" onclick="deleCVE({{ cve.identifier }})"></button></li>
+                        <li class="li_right"><button class="edit_img" onclick="create_cve_edit_html(this)"></button></li>
                         <li class="li_right">{{ cve.datetime }}</li>
-                        <li class="li_right">{{ cve.software }}</li>
                         <li class="li_right">{{ cve.bugType }}</li>
+                        <li class="li_right">{{ cve.software }}</li>
                         <li class="li_long li_small_text">{{ cve.description }}</li>
                     </ul>
                 {% endfor %}
@@ -166,9 +167,8 @@
                 <li>{{ art.author }}</li>
                 <li class="right"><button onclick="deleArt({{ art.articleID }})"><svg t="1587713476030" class="icon" viewBox="0 0 1024 1024" version="1.1" xmlns="http://www.w3.org/2000/svg" p-id="4730" width="20" height="20"><path d="M864 128H544v-16a32 32 0 0 0-64 0v16H160a32 32 0 0 0 0 64h704a32 32 0 0 0 0-64z m-64 128a32 32 0 0 0-32 32v592H256V288a32 32 0 0 0-64 0v624a32 32 0 0 0 32 32h576a32 32 0 0 0 32-32V288a32 32 0 0 0-32-32zM416 784V304a32 32 0 0 0-64 0v480a32 32 0 0 0 64 0z m128 0V304a32 32 0 0 0-64 0v480a32 32 0 0 0 64 0z m128 0V304a32 32 0 0 0-64 0v480a32 32 0 0 0 64 0z" fill="#b34340" p-id="4731"></path></svg>
                 </button></li>
-                    <li class="right"><a href="{% url 'hunter:edit_art' art.articleID %}" target="_blank">编辑</a></li>
+                    <li class="right"><a href="{% url 'hunter:edit_art' art.articleID %}" target="_blank" class="edit_img" style="display:block"></a></li>
                     <li class="middle_text right">{{ art.editDateTime }}</li>
-                    <li class="small_text right">{{ art.authorID }}</li>
                     <li class="small_text right"><a target="_blank" download="{{ art.attachment }}" href="{% static 'hunter/articles/' %}{{ art.attachment }}">{{ art.attachment }}</a></li>
                 </ul>
             {% endfor %}
@@ -405,7 +405,7 @@
         let bugtype = $('input[name="bugtype"]').val();
         let date = $('#date_input').val();
         let software = $("input[name='software']").val();
-        let url_cve = $("input[name='url_cve]").val();
+        let url_cve = $("input[name='url_cve']").val();
         let formatData = new FormData();
         formatData.append("owner", owner);
         formatData.append("cve_id", cve_id);
@@ -546,7 +546,72 @@
             '                </div>\n';
         $('#edit_content').append(input_html);
 
+    }
+    function create_cve_edit_html(thisBtn){
+        show_edit();
+        let html =
+            '            <button id="cancel_btn" onclick="hide_edit()">\n' +
+            '                取消\n' +
+            '            </button>\n' +
+            '            <button id="submit_btn" onclick="submit_edit_cve()">\n' +
+            '                提交\n' +
+            '            </button>\n';
+        $('#btn_edit').empty();
+        $('#btn_edit').append(html);
+        $('#edit_content').empty();
+        let input_html = '<div>\n' +
+            '                    <label for="identifier">编号：</label>\n' +
+            '                    <input type="text" placeholder="" name="identifier">\n' +
+            '                </div>\n' +
+            '                <div>\n' +
+            '                    <label for="url_cve">链接：</label>\n' +
+            '                    <input type="text" placeholder="http://xx.xx.xx" name="url_cve" required>\n' +
+            '                </div>\n' +
+            '                <div>\n' +
+            '                    <label for="softwore">存在于</label>\n' +
+            '                    <input type="text"  name="software" placeholder="xx软件/系统/..." required>\n' +
+            '                </div>\n' +
+            '                <div>\n' +
+            '                    <label for="bugtype">漏洞类型</label>\n' +
+            '                    <input type="text"  name="bugtype" placeholder="内存泄漏/溢出/..." required>\n' +
+            '                </div>\n';
+        $('#edit_content').append(input_html);
+        $('input[name="identifier"]').val(thisBtn.parentElement.parentElement.children[0].children[0].innerText);
+        console.log($(thisBtn.parentElement.parentElement.children[0].children[0]));
+        console.log(thisBtn.parentElement.parentElement.children[2].innerHTML);
+        console.log(thisBtn.parentElement.parentElement.children[1].innerText);
+        $('input[name="identifier"]').prop('disabled',true);
+        $('input[name="bugtype"]').val(thisBtn.parentElement.parentElement.children[4].innerText);
+        $("input[name='software']").val(thisBtn.parentElement.parentElement.children[5].innerText);
+        $("input[name='url_cve']").val($(thisBtn.parentElement.parentElement.children[0].children[0]).attr('href'));
+
+    }
+    function submit_edit_cve(){
+        let cve_id = $('input[name="identifier"]').val();
+        let bugtype = $('input[name="bugtype"]').val();
+        let software = $("input[name='software']").val();
+        let url_cve = $("input[name='url_cve']").val();
+        let formatData = new FormData();
+        formatData.append("cve_id", cve_id);
+        formatData.append("bugType", bugtype);
+        formatData.append("software", software);
+        formatData.append("url",url_cve);
 
+        $.ajax({
+            url:"{% url 'hunter:edit_cve' %} ",
+            type: 'post',
+            data:formatData,
+            contentType: false,
+            processData: false,
+            success: function (response){
+                if(response['message']){
+                    hide_edit();
+                       window.location.reload();
+                }else{
+                    $('#error_log').append(response['error']);
+                }
+            }
+        });
     }
     function create_publication_html(){
         $('#edit_content').empty();

Hunter_ht/hunter/urls.py

@@ -26,5 +26,6 @@ urlpatterns = [
     path('delete/article/', views.delete_article, name='delete_article'),
     path('add/publication/', views.add_publication, name='add_publication'),
     path('add/cve/', views.add_cve, name='add_cve'),
+    path('edit/cve/', views.edit_cve, name='edit_cve'),
     path('add/article/', views.add_article, name='add_article'),
 ]
\ No newline at end of file

Hunter_ht/hunter/views.py

@@ -526,6 +526,23 @@ def add_cve(request):
 
 
 @csrf_exempt
+def edit_cve(request):
+    bugType = request.POST['bugType']
+    identifier = request.POST['cve_id']
+    software = request.POST['software']
+    url = request.POST['url']
+    if Bugs.objects.filter(identifier=identifier).count() <= 0:
+        return JsonResponse({'message': 0, "error": "CVE不存在"})
+    try:
+        Bugs.objects.filter(identifier=identifier).update(bugType=bugType, software=software, url=url)
+        response = JsonResponse({"message": 1})
+        return response
+    except ProgrammingError as e:
+        response = JsonResponse({"message": 0})
+        return response
+
+
+@csrf_exempt
 def add_article(request):
     return 0