zoneminder/web/ajax/alarm.php

<?php
define( "MSG_TIMEOUT", 2.0 );
define( "MSG_DATA_SIZE", 4+256 );

if ( canEdit( 'Monitors' ) )
{
    $zmuCommand = getZmuCommand( " -m ".validInt($_REQUEST['id']) );

    switch ( validJsStr($_REQUEST['command']) )
    {
        case "disableAlarms" :
        {
            $zmuCommand .= " -n"; 
            break;
        }
        case "enableAlarms" :
        {
            $zmuCommand .= " -c"; 
            break;
        }
        case "forceAlarm" :
        {
            $zmuCommand .= " -a"; 
            break;
        }
        case "cancelForcedAlarm" :
        {
            $zmuCommand .= " -c"; 
            break;
        }
        default :
        {
            ajaxError( "Unexpected command '".validJsStr($_REQUEST['command'])."'" );
        }
    }
    ajaxResponse( exec( escapeshellcmd( $zmuCommand ) ) );
} else {
  ajaxError( 'Insufficient permissions' );
}
?>