mirror/librenms-librenms
1
0
Fork 0
mirror of https://github.com/librenms/librenms.git synced 2024-10-07 16:52:45 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix unauthenticated graphs (#11879)

Browse Source 
broken with security fix
This commit is contained in:
Tony Murray
2020-06-30 09:25:01 -05:00
committed by GitHub
parent c606659e11
commit b9f80d32bd
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
html/graph.php
View File

@@ -17,8 +17,12 @@ $start = microtime(true);
$init_modules = array('web', 'graphs', 'auth');
require realpath(__DIR__ . '/..') . '/includes/init.php';
if (!(Auth::check() || is_client_authorized($_SERVER['REMOTE_ADDR']))) {
die('Unauthorized');
if (!Auth::check()) {
// check for unauthenticated graphs and set auth
$auth = is_client_authorized($_SERVER['REMOTE_ADDR']);
if (!$auth) {
die('Unauthorized');
}
}
set_debug(isset($_GET['debug']));