BE: linting fixes 2

Signed-off-by: jokob-sk <jokob.sk@gmail.com>

front/plugins/__template/rename_me.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import os
 import sys

front/plugins/__test/test.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 # Just a testing library plugin for development purposes
 import os
 import sys

front/plugins/_publisher_apprise/apprise.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import json
 import subprocess

front/plugins/_publisher_email/email_smtp.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 import os
 import sys
 import re

front/plugins/_publisher_mqtt/mqtt.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import json
 import os

front/plugins/_publisher_ntfy/ntfy.py

@@ -1,5 +1,5 @@
 
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import json
 import os

front/plugins/_publisher_pushover/pushover.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python3
+#!/usr/bin/env python3
 import conf
 from const import confFileName, logPath
 from pytz import timezone

front/plugins/_publisher_pushsafer/pushsafer.py

@@ -1,5 +1,5 @@
 
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import json
 import os

front/plugins/_publisher_telegram/tg.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import subprocess
 import os

front/plugins/_publisher_webhook/webhook.py

@@ -1,5 +1,5 @@
 
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import json
 import subprocess

front/plugins/arp_scan/script.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 import os
 import time
 import argparse

front/plugins/asuswrt_import/script.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 import os
 import sys
 

front/plugins/avahi_scan/avahi_scan.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python3
+#!/usr/bin/env python3
 import os
 import sys
 import socket

front/plugins/csv_backup/script.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import os
 import argparse

front/plugins/db_cleanup/script.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import os
 import sys

front/plugins/ddns_update/script.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import os
 import argparse

front/plugins/dhcp_leases/script.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 from __future__ import unicode_literals
 import argparse

front/plugins/dhcp_servers/script.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 # Based on the work of https://github.com/leiweibau/Pi.Alert
 
 import subprocess

front/plugins/dig_scan/digscan.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 import os
 import sys
 import subprocess

front/plugins/freebox/freebox.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import os
 import sys

front/plugins/icmp_scan/icmp.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 # test script by running:
 # tbc
 

front/plugins/internet_ip/script.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import os
 import time

front/plugins/internet_speedtest/script.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import os
 import sys

front/plugins/ipneigh/ipneigh.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import os
 import sys

front/plugins/luci_import/script.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 import os
 import sys
 

front/plugins/maintenance/maintenance.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import os
 import sys

front/plugins/mikrotik_scan/mikrotik.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import os
 import sys

front/plugins/nbtscan_scan/nbtscan.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import os
 import sys

front/plugins/nmap_dev_scan/nmap_dev.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 # test script by running:
 # tbc
 

front/plugins/nmap_scan/script.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import os
 import argparse

front/plugins/nslookup_scan/nslookup.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 # test script by running:
 # tbc
 

front/plugins/omada_sdn_imp/omada_sdn.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 __author__ = "ffsb"
 __version__ = "0.1"  # initial
 __version__ = "0.2"  # added logic to retry omada api call once as it seems to sometimes fail for some reasons, and error handling logic...
@@ -134,7 +134,7 @@ def callomada(myargs):
 
     omada_output = ""
     retries = 2
-    while omada_output == "" and retries > 1:
+    while omada_output == "" and retries > 0:
         retries = retries - 1
         try:
             mf = io.StringIO()
@@ -183,51 +183,71 @@ def add_uplink(
     sadevices_linksbymac,
     port_byswitchmac_byclientmac,
 ):
-    # Ensure switch_mac exists in device_data_bymac
+    # Ensure switch exists
     if switch_mac not in device_data_bymac:
         mylog("none", [f"[{pluginName}] switch_mac '{switch_mac}' not found in device_data_bymac"])
         return
 
-    # Ensure SWITCH_AP key exists in the dictionary
-    if SWITCH_AP not in device_data_bymac[switch_mac]:
-        mylog("none", [f"[{pluginName}] Missing key '{SWITCH_AP}' in device_data_bymac[{switch_mac}]"])
+    dev_switch = device_data_bymac[switch_mac]
+
+    # Ensure list is long enough to contain SWITCH_AP index
+    if len(dev_switch) <= SWITCH_AP:
+        mylog("none", [f"[{pluginName}] SWITCH_AP index {SWITCH_AP} missing in record for {switch_mac}"])
         return
 
-    # Check if uplink should be added
-    if device_data_bymac[switch_mac][SWITCH_AP] in [None, "null"]:
-        device_data_bymac[switch_mac][SWITCH_AP] = uplink_mac
+    # Add uplink only if empty
+    if dev_switch[SWITCH_AP] in (None, "null"):
+        dev_switch[SWITCH_AP] = uplink_mac
 
-        # Ensure uplink_mac exists in device_data_bymac
+        # Validate uplink_mac exists
         if uplink_mac not in device_data_bymac:
             mylog("none", [f"[{pluginName}] uplink_mac '{uplink_mac}' not found in device_data_bymac"])
             return
 
-        # Determine port to uplink
-        if (
-            device_data_bymac[switch_mac].get(TYPE) == "Switch" and device_data_bymac[uplink_mac].get(TYPE) == "Switch"
-        ):
+        dev_uplink = device_data_bymac[uplink_mac]
+
+        # Get TYPE safely
+        switch_type = dev_switch[TYPE] if len(dev_switch) > TYPE else None
+        uplink_type = dev_uplink[TYPE] if len(dev_uplink) > TYPE else None
+
+        # Switch-to-switch link → use port mapping
+        if switch_type == "Switch" and uplink_type == "Switch":
             port_to_uplink = port_byswitchmac_byclientmac.get(switch_mac, {}).get(uplink_mac)
             if port_to_uplink is None:
-                mylog("none", [f"[{pluginName}] Missing port info for switch_mac '{switch_mac}' and uplink_mac '{uplink_mac}'"])
+                mylog("none", [
+                    f"[{pluginName}] Missing port info for {switch_mac} → {uplink_mac}"
+                ])
                 return
         else:
-            port_to_uplink = device_data_bymac[uplink_mac].get(PORT_SSID)
+            # Other device types → read PORT_SSID index
+            if len(dev_uplink) <= PORT_SSID:
+                mylog("none", [
+                    f"[{pluginName}] PORT_SSID index missing for uplink {uplink_mac}"
+                ])
+                return
+            port_to_uplink = dev_uplink[PORT_SSID]
 
-        # Assign port to switch_mac
-        device_data_bymac[switch_mac][PORT_SSID] = port_to_uplink
+        # Assign port to switch
+        if len(dev_switch) > PORT_SSID:
+            dev_switch[PORT_SSID] = port_to_uplink
+        else:
+            mylog("none", [
+                f"[{pluginName}] PORT_SSID index missing in switch {switch_mac}"
+            ])
 
-    # Recursively add uplinks for linked devices
+    # Process children recursively
     for link in sadevices_linksbymac.get(switch_mac, []):
         if (
-            link in device_data_bymac and device_data_bymac[link].get(SWITCH_AP) in [None, "null"] and device_data_bymac[switch_mac].get(TYPE) == "Switch"
+            link in device_data_bymac and len(device_data_bymac[link]) > SWITCH_AP and device_data_bymac[link][SWITCH_AP] in (None, "null") and len(dev_switch) > TYPE
         ):
-            add_uplink(
-                switch_mac,
-                link,
-                device_data_bymac,
-                sadevices_linksbymac,
-                port_byswitchmac_byclientmac,
-            )
+            if dev_switch[TYPE] == "Switch":
+                add_uplink(
+                    switch_mac,
+                    link,
+                    device_data_bymac,
+                    sadevices_linksbymac,
+                    port_byswitchmac_byclientmac,
+                )
 
 
 # ----------------------------------------------

front/plugins/omada_sdn_openapi/script.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 """
 This plugin imports devices and clients from Omada Controller using their OpenAPI.
@@ -296,7 +296,7 @@ class OmadaAPI:
             OmadaHelper.verbose(f"{method} request error: {str(ex)}")
             return OmadaHelper.response("error", f"{method} request failed to endpoint '{endpoint}' with error: {str(ex)}")
 
-    def authenticate(self) -> Dict[str, any]:
+    def authenticate(self) -> Dict[str, Any]:
         """Make an endpoint request to get access token."""
         OmadaHelper.verbose("Starting authentication process")
 

front/plugins/pihole_api_scan/pihole_api_scan.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 """
 NetAlertX plugin: PIHOLEAPI
 Imports devices from Pi-hole v6 API (Network endpoints) into NetAlertX plugin results.

front/plugins/snmp_discovery/script.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 from __future__ import unicode_literals
 import subprocess

front/plugins/sync/sync.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import os
 import sys

front/plugins/unifi_api_import/unifi_api_import.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import os
 import sys

front/plugins/unifi_import/script.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 # Inspired by https://github.com/stevehoek/Pi.Alert
 
 from __future__ import unicode_literals

front/plugins/vendor_update/script.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import os
 import sys

front/plugins/wake_on_lan/wake_on_lan.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import os
 import sys

front/plugins/website_monitor/script.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 # Based on the work of https://github.com/leiweibau/Pi.Alert
 
 import requests

install/production-filesystem/entrypoint.d/10-mounts.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python3
+#!/usr/bin/env python3
 
 import os
 import sys

ruff.toml

@@ -0,0 +1,4 @@
+[lint]
+select = ["E", "F"]  # or whatever you are using
+# Add E402 so Ruff knows the noqa is legitimate
+extend-select = ["E402"]

scripts/checkmk/script.py

@@ -1,5 +1,5 @@
 
-# !/usr/bin/env python3
+#!/usr/bin/env python3
 # -*- coding: utf-8 -*-
 """
 NetAlertX-New-Devices-Checkmk-Script

scripts/db_cleanup/db_cleanup.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python3
+#!/usr/bin/env python3
 import subprocess
 import os
 

scripts/opnsense_leases/opnsense_leases.py

@@ -30,7 +30,8 @@ def parse_timestamp(date_str):
         dt = datetime.strptime(clean_date, '%Y/%m/%d %H:%M:%S')
         return int(dt.timestamp())
     except Exception as e:
-        logger.error(f"Failed to parse timestamp: {date_str} ({e})")
+        if logger:
+            logger.error(f"Failed to parse timestamp: {date_str} ({e})")
         return None
 
 
@@ -83,9 +84,8 @@ def get_lease_file(hostname, username, password=None, key_filename=None, port=22
 
         # Clean up the output by removing the command echo and shell prompts
         lines = output.split('\n')
+
         # Remove first line (command echo) and any lines containing shell prompts
-        # cleaned_lines = [line for line in lines
-        #     if not line.strip().startswith(command.strip()) and not line.strip().endswith('> ') and not line.strip().endswith('# ')]
         cmd = command.strip()
 
         cleaned_lines = []

server/__main__.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 #
 # -------------------------------------------------------------------------------
 #  NetAlertX  v2.70  /  2021-02-01

server/api.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 import json
 import time
 import threading

server/api_server/dbquery_endpoint.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import os
 import base64

server/api_server/device_endpoint.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import os
 import sys

server/api_server/devices_endpoint.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import os
 import base64

server/api_server/events_endpoint.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import os
 import sys

server/api_server/history_endpoint.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import os
 import sys

server/api_server/sessions_endpoint.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 import os
 import sqlite3

server/db/db_upgrade.py

@@ -136,23 +136,6 @@ def ensure_views(sql) -> bool:
         """CREATE VIEW Sessions_Devices AS SELECT * FROM Sessions LEFT JOIN "Devices" ON ses_MAC = devMac;"""
     )
 
-    sql.execute(""" CREATE VIEW IF NOT EXISTS LatestEventsPerMAC AS
-                                WITH RankedEvents AS (
-                                    SELECT
-                                        e.*,
-                                        ROW_NUMBER() OVER (PARTITION BY e.eve_MAC ORDER BY e.eve_DateTime DESC) AS row_num
-                                    FROM Events AS e
-                                )
-                                SELECT
-                                    e.*,
-                                    d.*,
-                                    c.*
-                                FROM RankedEvents AS e
-                                LEFT JOIN Devices AS d ON e.eve_MAC = d.devMac
-                                INNER JOIN CurrentScan AS c ON e.eve_MAC = c.cur_MAC
-                                WHERE e.row_num = 1;
-                            """)
-
     # handling the Convert_Events_to_Sessions / Sessions screens
     sql.execute("""DROP VIEW IF EXISTS Convert_Events_to_Sessions;""")
     sql.execute("""CREATE VIEW Convert_Events_to_Sessions AS  SELECT EVE1.eve_MAC,

server/helper.py

@@ -624,6 +624,11 @@ def extract_ip_addresses(text):
 # Helper function to determine if a MAC address is random
 def is_random_mac(mac):
     """Determine if a MAC address is random, respecting user-defined prefixes not to mark as random."""
+
+    # Validate input
+    if not mac or len(mac) < 2:
+        return False
+
     # Check if second character matches "2", "6", "A", "E" (case insensitive)
     is_random = mac[1].upper() in ["2", "6", "A", "E"]
 
@@ -631,7 +636,7 @@ def is_random_mac(mac):
     if is_random:
         not_random_prefixes = get_setting_value("UI_NOT_RANDOM_MAC")
         for prefix in not_random_prefixes:
-            if mac.startswith(prefix):
+            if mac.upper().startswith(prefix.upper()):
                 is_random = False
                 break
     return is_random

server/initialise.py

@@ -10,7 +10,7 @@ import re
 # Register NetAlertX libraries
 import conf
 from const import fullConfPath, fullConfFolder, default_tz
-from helper import getBuildTimeStampAndVersion, fixPermissions, collect_lang_strings, updateSubnets, generate_random_string
+from helper import getBuildTimeStampAndVersion, collect_lang_strings, updateSubnets, generate_random_string
 from utils.datetime_utils import timeNowDB
 from app_state import updateState
 from logger import mylog
@@ -680,10 +680,11 @@ def importConfigs(pm, db, all_plugins):
         ccd('VERSION', new_version , c_d, '_KEEP_', '_KEEP_', '_KEEP_', '_KEEP_', None, "_KEEP_", None, None, True)
 
         write_notification(f'[Upgrade]: App upgraded from <code>{prev_version}</code> to \
-            <code>{new_version}</ code> 🚀 Please clear the cache: \
-            <ol> <li>Click OK below</li>  <li>Clear the browser cache (shift + \
-             browser refresh button)</li> <li> Clear app cache with the <i class="fa-solid fa-rotate"></i> \
-            (reload) button in the header</li><li>Go to Settings and click Save</li> </ol>\
+            <code>{new_version}</code> 🚀 Please clear the cache: \
+            <ol> <li>Click OK below</li>  \
+                <li>Clear the browser cache (shift + browser refresh button)</li> \
+                <li> Clear app cache with the <i class="fa-solid fa-rotate"></i> (reload) button in the header</li>\
+                <li>Go to Settings and click Save</li> </ol>\
             Check out new features and what has changed in the \
             <a href="https://github.com/jokob-sk/NetAlertX/releases" target="_blank">📓 release notes</a>.',
             'interrupt',
@@ -804,8 +805,6 @@ def renameSettings(config_file):
             str(config_file) + "_temp", str(config_file)
         )  # Convert config_file to a string
 
-        # ensure correct ownership
-        fixPermissions()
     else:
         mylog(
             "debug", "[Config] No old setting names found in the file. No changes made."

server/utils/datetime_utils.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python
+#!/usr/bin/env python
 
 # from datetime import datetime
 from dateutil import parser

test/api_endpoints/test_devices_endpoints.py

@@ -199,7 +199,7 @@ def test_devices_by_status(client, api_token, test_mac):
     assert "&#9733" in fav_data["title"]
 
 
-def test_delete_test_devices(client, api_token, test_mac):
+def test_delete_test_devices(client, api_token):
 
     # Delete by MAC
     resp = client.delete("/devices", json={"macs": ["AA:BB:CC:*"]}, headers=auth_headers(api_token))

test/backend/test_sql_injection_prevention.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python3
+#!/usr/bin/env python3
 """
 Comprehensive SQL Injection Prevention Tests for NetAlertX
 

test/backend/test_sql_security.py

@@ -210,7 +210,6 @@ class TestDatabaseParameterSupport(unittest.TestCase):
         # This should not cause SQL injection
         malicious_input = "'; DROP TABLE test_table; --"
         cursor.execute("SELECT * FROM test_table WHERE name = :name", {'name': malicious_input})
-        # results = cursor.fetchall()
 
         # The table should still exist and be queryable
         cursor.execute("SELECT COUNT(*) FROM test_table")

test/docker_tests/test_mount_diagnostics_pytest.py

@@ -1,4 +1,4 @@
-# !/usr/bin/env python3
+#!/usr/bin/env python3
 """
 Pytest-based Mount Diagnostic Tests for NetAlertX
 

test/integration/integration_test.py

@@ -19,7 +19,8 @@ from messaging.reporting import get_notifications  # noqa: E402 [flake8 lint sup
 
 @pytest.fixture
 def test_db_path():
-    path = tempfile.mktemp(suffix=".db")
+    with tempfile.NamedTemporaryFile(suffix=".db", delete=False) as tmp:
+        path = tmp.name
     yield path
     if os.path.exists(path):
         os.remove(path)