Cacti call api_device new called with wrong id

[Rno]

Hello,
I have strange stituation, one of my plug in receive a call on api_device_new with an ID that dosen't exist on cacti database, how is it possible?

EXTENDDB Enter Extenddb:(3)

And the code for this part is just:
function extenddb_api_device_new($hostrecord_array) {
extdb_log('Enter Extenddb:'.$host['description'].'('.$hostrecord_array['id'].')' );


If I look the order the plugin are called it's the following:
Thold
Monitor
Syslog
Weathermap
Extenddb

So if the id is changed before my plugin it's one of the previous!!

How can I find how this happen and who did it?

[TheWitness]

Someone pen testing the interface and using an bogus id. Happens all the time.

[Rno]

Hello,
I don't think so, since it's not really possible to call this function just like that!
And even if it's a pen testing, how can I be sure that the information received on a api_device_new is correct ?

Even if it's call to add a device, the ID shouldn't be a random number!

[TheWitness]

Any more feedback on this one Rno?

[Rno]

No and no record of it anymore.

[TheWitness]

Okay, cool!