security fixes and some juniper graphing stuff.

git-svn-id: http://www.observium.org/svn/observer/trunk@245 61d68cd4-352d-0410-923a-c4978735b2b8
This commit is contained in:
Adam Amstrong
2008-07-22 08:24:34 +00:00
parent 0ee570b762
commit 96cc0308fd
20 changed files with 85 additions and 24 deletions

View File

@@ -3,8 +3,8 @@
$updated = '1';
$sql = "INSERT INTO `services` (`service_host`,`service_ip`,`service_type`,`service_desc`,`service_param`,`service_ignore`)
VALUES ('" . $_POST['device']. "','" . $_POST['ip'] . "','" . $_POST['type'] . "',
'" . $_POST['descr'] . "','" . $_POST['params'] . "','0')";
VALUES ('" . mres($_POST['device']). "','" . mres($_POST['ip']) . "','" . mres($_POST['type']) . "',
'" . mres($_POST['descr']) . "','" . mres($_POST['params']) . "','0')";
$query = mysql_query($sql);
$affected = mysql_affected_rows() . "records affected";

View File

@@ -22,7 +22,7 @@ if($_GET['logout']) {
}
$sql = "select username, level, user_id from users where username='" . $_SESSION['username'] . "' and password='" . $_SESSION['encrypted'] . "'";
$sql = "select username, level, user_id from users where username='" . mres($_SESSION['username']) . "' and password='" . mres($_SESSION['encrypted']) . "'";
$query = mysql_query($sql);
$row = mysql_fetch_row($query);

View File

@@ -2,7 +2,7 @@
$updated = '1';
$sql = "DELETE FROM `services` WHERE service_id = '" . $_POST['service']. "'";
$sql = "DELETE FROM `services` WHERE service_id = '" . mres($_POST['service']). "'";
$query = mysql_query($sql);
$rows = mysql_affected_rows();