Files
librenms-librenms/includes/html/pages/device/apps/portactivity.inc.php
Tony Murray 36431dd296 Security fix: unauthorized access (#10091)
* Security fix: unauthorized access
Affects nginx users:
Moved php files outside of public html directory (Apache was protected by .htaccess)

Affects all users:
Some files did not check for authentication and could disclose some info.
Better checks before including files from user input

* git mv html/includes/ includes/html
git mv html/pages/ includes/html/
2019-04-11 23:26:42 -05:00

79 lines
1.7 KiB
PHP

<?php
global $config;
$ports=get_portactivity_ports($device['device_id']);
sort($ports);
$link_array = array(
'page' => 'device',
'device' => $device['device_id'],
'tab' => 'apps',
'app' => 'portactivity',
);
print_optionbar_start();
echo 'Ports:';
$ports_int=0;
while (isset($ports[$ports_int])) {
$port=$ports[$ports_int];
$label=$ports[$ports_int];
if ($vars['port'] == $port) {
$label='>>'.$port.'<<';
}
$ports_int++;
$append='';
if (isset($ports[$ports_int])) {
$append=', ';
}
echo generate_link($label, $link_array, array('port'=>$port)).$append;
}
print_optionbar_end();
if (!isset($vars['port'])) {
echo "Please select a port.\n";
$graphs = array(
# No useful bits to display with out selecting anything.
);
} else {
$graphs = array(
'portactivity_totals'=>'Total Connections',
'portactivity_total_details'=>'Total Connections Details',
'portactivity_to'=>'Connections To Server',
'portactivity_from'=>'Connections From Server',
);
}
foreach ($graphs as $key => $text) {
$graph_type = $key;
$graph_array['height'] = '100';
$graph_array['width'] = '215';
$graph_array['to'] = $config['time']['now'];
$graph_array['id'] = $app['app_id'];
$graph_array['type'] = 'application_'.$key;
if (isset($vars['port'])) {
$graph_array['port']=$vars['port'];
}
echo '<div class="panel panel-default">
<div class="panel-heading">
<h3 class="panel-title">'.$text.'</h3>
</div>
<div class="panel-body">
<div class="row">';
include 'includes/html/print-graphrow.inc.php';
echo '</div>';
echo '</div>';
echo '</div>';
}