mirror/librenms-librenms
1
0
Fork 0
mirror of https://github.com/librenms/librenms.git synced 2024-10-07 16:52:45 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Security fix: unauthorized access (#10091)

Browse Source 
* Security fix: unauthorized access
Affects nginx users:
Moved php files outside of public html directory (Apache was protected by .htaccess)

Affects all users:
Some files did not check for authentication and could disclose some info.
Better checks before including files from user input

* git mv html/includes/ includes/html
git mv html/pages/ includes/html/
This commit is contained in:
Tony Murray
2019-04-11 23:26:42 -05:00
committed by GitHub
parent b81af32ed2
commit 36431dd296
1301 changed files with 1443 additions and 1439 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
includes/html/graphs/device/cambium_250_transmitPower.inc.php Normal file
View File

@@ -0,0 +1,23 @@
<?php
/*
* LibreNMS
*
* This program is free software: you can redistribute it and/or modify it
* under the terms of the GNU General Public License as published by the
* Free Software Foundation, either version 3 of the License, or (at your
* option) any later version. Please see LICENSE.txt at the top level of
* the source code distribution for details.
*/
require 'includes/html/graphs/common.inc.php';
$rrdfilename = rrd_name($device['hostname'], 'cambium-250-transmitPower');
if (rrdtool_check_rrd_exists($rrdfilename)) {
$rrd_options .= " COMMENT:'dBm Now Ave Max \\n'";
$rrd_options .= ' DEF:transmitPower='.$rrdfilename.':transmitPower:AVERAGE ';
$rrd_options .= " LINE2:transmitPower#FF0000:'Transmit Power ' ";
$rrd_options .= " -l 0 ";
$rrd_options .= ' GPRINT:transmitPower:LAST:%0.2lf%s ';
$rrd_options .= ' GPRINT:transmitPower:MIN:%0.2lf%s ';
$rrd_options .= ' GPRINT:transmitPower:MAX:%0.2lf%s\\\l ';
}