<?php

error_reporting(E_ALL);
ini_set('display_errors', '1');
ini_set('display_startup_errors', '1');

include_once 'config.php';

$fileNameRegex = '/^[^<>:\/|?]+$/';

$name = filter_input(INPUT_GET, 'name', FILTER_VALIDATE_REGEXP, ['options' => ['regexp' => $fileNameRegex], "flags" => FILTER_NULL_ON_FAILURE]);
if (!$name) {
  die("Paramètre manquant ou incorrect : name");
}

$path = "$SCANSDIR/$name.xml";
if (!file_exists($path)) {
  die("Scan inconnu : $name");
}

$xml = simplexml_load_file($path);
$cmd = $xml["args"];
if (substr( $cmd, 0, 5 ) != "nmap ") {
  die("Erreur : $path n'est pas un fichier de scan nmap");
}

$cmd = $NMAP . substr($xml["args"], 4);

header('Content-type: text/xml');
system("$cmd", $retcode);

exit();