{{#     var lang001 = {"ch": "情报源", "en": "Source"},     lang003 = {"ch": "启用|禁用", "en": "on|off"},     lang004 = {"ch": "请选择需要操作的情报类型", "en": "Select the type first"},     lang006 = {"ch": "确定要清空命中次数吗？", "en": "confirm to clear hit times?"},     lang007 = {"ch": "了解", "en": "OK"},     lang008 = {"ch": "序号", "en": "No."},     lang009 = {"ch": "情报类型", "en": "Type"},     lang010 = {"ch": "成员数量", "en": "Number"},     lang012 = {"ch": "命中次数", "en": "Hit Account"},     lang013 = {"ch": "操作", "en": "Action"},     lang014 = {"ch": "请输入大于0的有效数字", "en": "Please enter a number > 0"},     lang015 = {"ch": "命中次数", "en": "Hit Times"},     lang016 = {"ch": "监测阈值", "en": "Monitor Threshold"},     lang017 = {"ch": "保存阈值", "en": "Save Threshold"}, lang018 = {"ch": "阈值为0表示不进行告警", "en": "Threshold 0 means no alert"};     var is_ntm = (g_sys_env.oem == "pa" || (g_sys_env.oem == "pro" || g_sys_env.oem == "ngntm" || g_sys_env.oem == "ngnode")) && g_sys_env.ntm == 1 ? 1 : 0; }}  <style> /* 阈值输入框美化：常态化显示，聚焦变色，移除数字微调箭头 */ .malc-threshold-input {     height: 28px;     line-height: 28px;     padding: 0 10px;     border: 1px solid #d2d2d2;     background-color: #fbfbfb;     border-radius: 4px;     width: 90%;     color: #333;     font-weight: 600;     transition: all 0.2s ease-in-out; } .malc-threshold-input:focus {     border-color: #1e9fff !important;     background-color: #fff;     box-shadow: 0 0 5px rgba(30, 159, 255, 0.2);     outline: none; } .malc-threshold-input::-webkit-inner-spin-button, .malc-threshold-input::-webkit-outer-spin-button {     -webkit-appearance: none;     margin: 0; } </style>  {{# if(!d.hide_title) { }} <div class="layui-tab layui-tab-brief"> <div class="layui-tab-content"> <div class="layui-tab-item layui-show"> {{# } }}             <form class="layui-form layui-form-pane paui-table-form" lay-filter="form_malcalert_search">                 <div class="layui-form-item paui-table-form-left">                     <label class="layui-form-label">{{ lang001[g_lang] || "情报源" }}</label>                     <div class="layui-input-inline" style="width: 160px;">                         <select name="id" lay-filter="select_malcalert_select" id="select_malcalert_vendor"></select>                     </div>                 </div>                 <div class="layui-form-item paui-table-form-right">                     <div class="layui-form-mid" style="margin-right:0px">                         <span class="abtn" malc_event="btnevt_save_threshold">                             <i class="layui-icon layui-icon-add-1"></i>{{ lang017[g_lang] || "保存阈值" }}                         </span>                     </div>                 </div>             </form>             <div class="paui-table-card paui-threat-alert-list-box">                 <table id="tab_malcalert_list" lay-filter="tab_malcalert_list"></table>             </div> {{# if(!d.hide_title) { }}         </div> </div> </div> {{# } }}   <script id="tpl_malc_enable" type="text/html">     <input         type="checkbox"         name="stat"         lay-skin="switch"         lay-filter="switch_set_malcalert"         obj-key="{% d.key %}"         obj-name="{% d.name %}"         lay-text='{{ lang003[g_lang] || "启用|禁用"}}' {% d[d.key] == 1 ? 'checked' : '' %}     > </script>  <script id="tpl_malc_td_action" type="text/html">     {%# if(d.id == 0) { %}         <span class="abtn" lay-event="tabevt_tips">             <i class="layui-icon layui-icon-tips"></i>         </span>         &nbsp;     {%# } %}     <span class="abtn" lay-event="tabevt_clear">         <i class="pa-icon pa-clear"></i>     </span> </script>  <script> layui.use(function(){     var $ = layui.$,     util = layui.util,     form = layui.form,     table = layui.table,     patpl = layui.patpl,     upload = layui.upload,     element = layui.element;          var pa_table = new Paui_table();     var pa_timer = new Paui_timer();     var l_chart_data = {};      var api = '/cgi-bin/flowcontrol/ajax_malc';     var l_dbkey = "Paui_malc_vendor_first_show";     var l_vendor = paui_db.get(l_dbkey) || (g_sys_env.oem == "qax_tintm" ? 1 : g_sys_env.default_malc);     var pdata = JSON.parse('{{- JSON.stringify(d) }}');      if(pdata.id) l_vendor = pdata.id;      if(g_lang == "ch"){         var db_type_desc = {             "digiccy": "数字货币是一种基于节点网络和数字加密算法的虚拟货币。包括全球千余种数字货币的相关信息，具体包括矿池地址、矿池域名和IP信息，挖矿软件的hash值等。",             "c2": "C2节点是感染或传播木马病毒等其他类型恶意软件的网络设备的节点地址。通常用来和控制终端进行通信。包括各种恶意软件回连的命令&控制端IP地址等信息。",             "apt": "APT指高级持续性威胁，通常指利用先进的攻击手段对特定目标进行长期持续性网络攻击的攻击形式。APT情报指全球范围内黑客组织进行APT攻击活动相关的情报。可包括组织名称，攻击目标，攻击方式，利用工具等其它信息。",             "phishing": "钓鱼网址指为了窃取金融帐号、密码等敏感信息而伪装成合法的商业网站进行欺诈活动的网站。",             "bot": "僵尸网络指由多个被某种恶意软件感染和控制的主机设备组成的被控网络。包括组成僵尸网络的被控主机的IP地址等信息。",             "malware": "恶意软件是指在未经用户许可的情况下，在计算机或其他终端上安装运行、损害服务器或客户端的系统和网络、对用户造成危害的软件。恶意软件包含故意在计算机系统上执行恶意任务的后门、间谍软件、欺诈软件等其它形式的各种恶意软件。",             "scanner": "扫描器节点主要指未经授权进行的网络扫描行为的IP地址。",             "tor": "Tor（The Onion Router）是洋葱路由器的缩写，是实现匿名通信的软件套件。Tor节点指匿名网络通信系统分散在全世界的服务器节点信息。",             "proxy": "Proxy代理可用于访问因地理位置或其它原因而被阻止的网站。Proxy代理由于可隐藏主机的源地址信息，可被攻击者利用进行恶意活动，具有一定的潜在风险。",             "downloader": "恶意软件下载链接指能直接或隐藏下载各类恶意软件的网站链接。",             "mc_website": "恶意网站指被植入恶意代码以实现攻击者目标的网站。包括植入各种恶意代码的欺诈类网站，漏洞利用网站、攻击链上的跳转、传输网站等。",             "porn": "色情网站指提供、展示、传播色情及相关内容的网站。",             "gambling": "赌博网站指提供赌博信息或者支持在线赌博的各类网站。",             "spam": "垃圾邮件一般指未经用户许可就强行发送到用户邮箱中的各种电子邮件。包括垃圾邮件的发送方、邮件内容里的spam链接，邮件服务器及其中转服务器的IP信息等，也包括黑客组织注册或利用的邮箱信息。",             "webshell": "黑客植入的后门，它可以帮助黑客控制网站。",             "webad": "在各种互联网平台上投放的广告",             "suspicious": "攻击程序或者病毒常用的一些网络访问，例如：获取外网ip地址，单次的可疑行为并不意味着已经被恶意程序感染控制，因为正常程序偶尔也会有这类访问，但是持续不断的使用则需要引起用户重视。"         };     }else {         var db_type_desc = {             "digiccy": "Digital currency is a kind of virtual currency based on node network and digital encryption algorithm. It includes information related to more than a thousand digital currencies around the world, including mining pool address, mining pool domain name and IP information, hash value of mining software, etc.",             "c2": "C2 nodes are the node addresses of network devices that infect or spread other types of malware such as Trojan viruses. Usually used to communicate with the control terminal. It includes information such as IP address of command & control side that all kinds of malware link back.",             "apt": "APT refers to advanced persistent threat, which usually refers to the use of advanced attack means to carry out long-term sustained network attacks on specific targets. APT intelligence refers to the intelligence related to APT attacks carried out by hacker organizations worldwide. It can include the name of the organization, the target of the attack, the method of attack, the tools used and other information.",             "phishing": "Phishing websites are those that disguise themselves as legitimate commercial websites in order to steal sensitive information such as financial accounts and passwords.",             "bot": "A botnet is a controlled network consisting of multiple host devices that are infected and controlled by some type of malicious software. The information includes the IP addresses of the controlled hosts that form the botnet.",             "malware": "Malicious software refers to software installed on a computer or other terminal without the user's permission, which damages the system and network of the server or client and causes harm to users. Malware consists of various forms of malicious software, such as backdoors, spyware, and scams, that intentionally perform malicious tasks on a computer system.",             "scanner": "A scanner node is an IP address for unauthorized network scanning.",             "tor": "Tor (The Onion Router), short for Onion router, is a software suite that implements anonymous communication. Tor nodes are anonymous network communication systems scattered around the world server node information.",             "proxy": "Proxy A proxy can be used to access websites that are blocked due to geographical location or other reasons. Proxy proxy has potential risks because it can hide the source address information of the host and be used by attackers for malicious activities.",             "downloader": "Malware download links refer to links to websites that directly or hide the downloading of various types of malware.",             "mc_website": "A malicious website is a website that is implanted with malicious code to achieve an attacker's goal. Including implantation of a variety of malicious code fraud websites, exploit websites, attack chain jump, transmission websites.",             "porn": "Pornographic websites refer to websites that provide, display and disseminate pornography and related content.",             "gambling": "Gambling website refers to all kinds of websites that provide gambling information or support online gambling.",             "spam": "Spam refers to all kinds of e-mails that are forcibly sent to users' mailboxes without their permission. It includes the sender of the spam, the links in the spam content, the IP information of the mail server and its transfer server, and the email information registered or used by the hacker organization.",             "webshell": "Hackers inserted a backdoor that helps hackers take control of websites.",             "webad": "Advertisements placed on various Internet platforms",             "suspicious": "Attack programs or viruses commonly used some network access, such as: access to the Internet ip address, a single suspicious behavior does not mean that has been malicious program infection control, because normal programs occasionally have such access, but continuous use needs to cause user attention."         };     }       var event_center = {         btnevt_save_threshold: function(){             var keys = "";             var vals = "";             var is_valid = true;              /* 获取当前页面中所有可见的阈值输入框 */             var $inputs = $(".malc-threshold-input");             if($inputs.length === 0) return;              $inputs.each(function(){                 var name = $(this).attr("data-name");                 var val = $(this).val();                  /* 正则校验：必须是大于等于0的正整数 */                 if(!/^[0-9]\d*$/.test(val)){                     $(this).css("border-color", "#FF5722");                     is_valid = false;                 } else {                     $(this).css("border-color", "#d2d2d2");                 }                  keys += name + " ";                 vals += val + " ";             });              if(!is_valid){                 layer.msg('{{ lang014[g_lang] || "请输入大于0的有效数字" }}', {icon: 5});                 return;             }              pa_ajax({                 url: api,                 type: 'POST',                 data: {                     action: 'save_threshold_all',                     id: l_vendor,                      keys: keys.trim(),                     vals: vals.trim()                 },                 success: function(json) {                     if (json.code != 0) {                         alert_err(json.msg);                     } else {                         layer.msg('{{ lang017[g_lang] || "保存阈值" }}', {icon: 1, time: 800});                         table_search();                      }                 }             });         },          switch_set_malcalert: function(obj){             var key = obj.elem.getAttribute('obj-key');             var name = obj.elem.getAttribute('obj-name');             var enable = obj.elem.checked ? 1 : 0;              pa_ajax({                 url: api,                 data: {'action': 'set_'+key, name: name, enable: enable, id: l_vendor},                 success: function(json){                     table_search();                     if(json.code != 0)                         alert_err(json.msg);                     else                         alert_ok(json.msg);                 }             });         },          tabevt_clear: function(obj){             pa_confirm('{{ lang006[g_lang] || "确定要清空命中次数吗？" }}', function(index){                 layer.close(index);                 obj.data.id = l_vendor;                 obj.data.action = "clear_malcdb_data";                 pa_ajax({                     url: api,                     data: obj.data,                     success: function(json){                         if(json.code != 0)                             alert_err(json.msg);                         else {                             alert_ok(json.msg);                             table_search();                         }                     }                 });             });         },          tabevt_tips: function(obj){             paopen({                 content: '<div style="padding: 20px;">'+ db_type_desc[obj.data.name] +'</div>',                 area: ['400px', '240px'],                 btn: ['{{ lang007[g_lang] || "了解" }}'],                 title: (g_lang == "ch" ? obj.data.cname : obj.data.name)             });         }     };       /* 列渲染逻辑 */     var col_render = function(r){         switch(this.field){             case 'cname':                 return '<span class="abtn" lay-event="tabevt_cname">'+ (g_lang == "ch" ? r.cname : r.name) +'</span>';             case 'enable':                 return patpl($("#tpl_malc_enable").html()).render({name: r.name, enable: r.enable, key: 'enable'});             case 'threshold':                 var v = (r.threshold > 0) ? r.threshold : 0;                 return '<input type="number" min="1" class="malc-threshold-input" data-name="'+ r.name +'" value="'+ v +'">';             case 'act':                 return patpl($("#tpl_malc_td_action").html()).render({id: l_vendor});         }     };       var table_search = function(){         var search = form.getValue('form_malcalert_search');         pa_table.reload({             where: search         });     };      var load_loglist_env = function(){                 pa_ajax({             url: api,             data: {'action': 'list_vendor'},             success: function(json){                 var dom = $("#select_malcalert_vendor");                 dom.html('');                 layui.each(json.data, function(index, elem){                     var opt = new Option((g_lang == "ch" ? elem.cname : elem.name), elem.id);                     dom.append(opt);                 });                 form.val('form_malcalert_search', {id: l_vendor});             }         });     };           /* 页面渲染 */     form.render();     load_loglist_env();          pa_table.render({         elem: '#tab_malcalert_list',         height: 'full-145',         url: api,         where: {'action': 'load_malc_list', 'id': l_vendor},         cols: [[             {type: 'checkbox'}             ,{type: 'numbers', title: '{{ lang008[g_lang] || "序号" }}'}             ,{field: 'cname', title: '{{ lang009[g_lang] || "情报类型" }}', templet: col_render}             ,{field: 'item_num', title: '{{ lang010[g_lang] || "成员数量" }}', sort: true}             ,{ field: 'threshold',  title: '{{ lang016[g_lang] || "监测阈值" }}' +                      '<span style="color:#999; font-size:12px; margin-left:5px;">({{ lang018[g_lang] || "Threshold 0 means no alert" }})</span>',  width: 200,  templet: col_render }             ,{field: 'match_num', title: '{{ lang012[g_lang] || "命中次数" }}', width: 100, sort: true}             ,{field: 'act', title: '{{ lang013[g_lang] || "操作" }}', width: 100, align: 'center', templet: col_render}         ]],         done: function(json){  right_copy_evt($(".layui-table-body .layui-table-cell"));          }     });      /* 事件绑定 */     util.event('malc_event', event_center);      table.on('tool(tab_malcalert_list)', function(obj){         event_center[obj.event](obj);     });      form.on('switch(switch_set_malcalert)', function(obj){         event_center['switch_set_malcalert'](obj);     });      form.on('select(select_malcalert_select)', function(obj){         l_vendor = obj.value;         paui_db.save(l_dbkey, l_vendor);         /*layer.load();*/         table_search();     });  }); </script>