mirror of
https://github.com/librenms/librenms.git
synced 2024-10-07 16:52:45 +00:00
security fixes and some juniper graphing stuff.
git-svn-id: http://www.observium.org/svn/observer/trunk@245 61d68cd4-352d-0410-923a-c4978735b2b8
This commit is contained in:
@@ -3,8 +3,8 @@
|
||||
$updated = '1';
|
||||
|
||||
$sql = "INSERT INTO `services` (`service_host`,`service_ip`,`service_type`,`service_desc`,`service_param`,`service_ignore`)
|
||||
VALUES ('" . $_POST['device']. "','" . $_POST['ip'] . "','" . $_POST['type'] . "',
|
||||
'" . $_POST['descr'] . "','" . $_POST['params'] . "','0')";
|
||||
VALUES ('" . mres($_POST['device']). "','" . mres($_POST['ip']) . "','" . mres($_POST['type']) . "',
|
||||
'" . mres($_POST['descr']) . "','" . mres($_POST['params']) . "','0')";
|
||||
|
||||
$query = mysql_query($sql);
|
||||
$affected = mysql_affected_rows() . "records affected";
|
||||
|
@@ -22,7 +22,7 @@ if($_GET['logout']) {
|
||||
}
|
||||
|
||||
|
||||
$sql = "select username, level, user_id from users where username='" . $_SESSION['username'] . "' and password='" . $_SESSION['encrypted'] . "'";
|
||||
$sql = "select username, level, user_id from users where username='" . mres($_SESSION['username']) . "' and password='" . mres($_SESSION['encrypted']) . "'";
|
||||
$query = mysql_query($sql);
|
||||
$row = mysql_fetch_row($query);
|
||||
|
||||
|
@@ -2,7 +2,7 @@
|
||||
|
||||
$updated = '1';
|
||||
|
||||
$sql = "DELETE FROM `services` WHERE service_id = '" . $_POST['service']. "'";
|
||||
$sql = "DELETE FROM `services` WHERE service_id = '" . mres($_POST['service']). "'";
|
||||
|
||||
$query = mysql_query($sql);
|
||||
$rows = mysql_affected_rows();
|
||||
|
Reference in New Issue
Block a user