<?php
require "config.php";
$dsn  = 'Driver='    . DB_DRIVER;
$dsn .= ';Server='   . DB_HOST;
$dsn .= ';Port='     . DB_PORT;
$dsn .= ';Database=' . DB_DATABASE;
$db_conn = odbc_connect("$dsn",$_SERVER['PHP_AUTH_USER'],$_SERVER['PHP_AUTH_PW'],SQL_CUR_USE_ODBC);
     $report = '';                                                                                                                                                    
$from='2011-03-17';                                                                                                                                                      
$to='2011-03-18';

	    $query = "select * from mis.get_report_zero_false_positive('$from','$to',100,173987589) as (\"Guid\" character(32), \"SigId\" integer, \"SampleSha1\" character(40),
		\"FilePath\" character varying(1000), \"IsHidden\" boolean, 
		\"CallerTypeId\" integer, \"IsSigned\" boolean,\"CursePoints\" integer,\"CAV_Heur_Name\" character varying(40),
		\"CAV_Heur_Level\" character varying(40),\"RPDTC_Verdict\" character varying(40),\"LastSectionEntropy\" real, 
		\"LastSectionAttributes\" integer,\"EpSectionEntropy\" real, \"EpSectionAttributes\" integer, 
		\"Peid_Entropy\" real, \"Peid_Packer\" character varying(100), \"AddedTs\" timestamp without time zone)";
print $query;
	    $res = odbc_exec($db_conn, $query);
		while(odbc_fetch_row($res))
		{
			$report .= odbc_result($res,"Guid");
			$report .= "|";	
			$report .= odbc_result($res,"SigId");
			$report .= "|";	
			$report .= odbc_result($res,"SampleSha1");
			$report .= "|";	
			if(odbc_result($res,"FilePath")){$fname = explode("\\",odbc_result($res,"FilePath"));
			$report .= $fname[count($fname)-1];}
			else {$report .= "";}
			$report .= "|";	
			$report .= odbc_result($res,"FilePath");
			$report .= "|";	
			if(odbc_result($res,"IsHidden")==1){$report .= 'true';}
			else{$report .= 'false';}
			$report .= "|";	
			switch(odbc_result($res,"CallerTypeId")){
			case 1:
			      $report .= "On-Access";
			      break;
			case 2:
			      $report .= "On-Demand";
			      break;
			case 3:
			      $report .= "Sandbox";
			      break;
			default:
			      $report .= odbc_result($res,"CallerTypeId");
			      break;
			}
			$report .= "|";	
			if(odbc_result($res,"IsSigned")==1){$report .= 'true';}
			else{$report .= 'false';}
			$report .= "|";	
			$report .= odbc_result($res,"CursePoints");
			$report .= "|";	
			$report .= odbc_result($res,"CAV_Heur_Name");
			$report .= "|";	
			$report .= odbc_result($res,"CAV_Heur_Level");
			$report .= "|";	
			$report .= odbc_result($res,"RPDTC_Verdict");
			$report .= "|";	
			$report .= odbc_result($res,"LastSectionEntropy");
			$report .= "|";	
			$report .= odbc_result($res,"LastSectionAttributes");
			$report .= "|";	
			$report .= odbc_result($res,"EpSectionEntropy");
			$report .= "|";	
			$report .= odbc_result($res,"EpSectionAttributes");
			$report .= "|";	
			$report .= odbc_result($res,"Peid_Entropy");
			$report .= "|";	
			$report .= odbc_result($res,"Peid_Packer");
			$report .= "|";	
			if(preg_match("/program files/i",odbc_result($res,"FilePath")) ||preg_match("/program files (x86)/i",odbc_result($res,"FilePath")))
			{$prog= 'true';}
			else{$prog = 'false';}
			$report .= $prog;
			$report .= "|";	
			if(preg_match("/windows/i",odbc_result($res,"FilePath"))){$win= 'true';}
			else{$win = 'false';}
			$report .= $win;
			$report .= "|";	
			if ($prog =='false' || $win == 'false'){$nostand = 'true';}
			else{$nostand = 'false';}
			$report .= $nostand;
			$report .= "|";	
			if(odbc_result($res,"Peid_Entropy")>=7){
			$report .= 'true';}
			else{$report .= 'false';}
			$report .= "\n";
		}
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               
print "<pre>".$report."</pre>";


?>