mirror of
				https://github.com/librenms/librenms.git
				synced 2024-10-07 16:52:45 +00:00 
			
		
		
		
	* Security fix: unauthorized access Affects nginx users: Moved php files outside of public html directory (Apache was protected by .htaccess) Affects all users: Some files did not check for authentication and could disclose some info. Better checks before including files from user input * git mv html/includes/ includes/html git mv html/pages/ includes/html/
		
			
				
	
	
		
			40 lines
		
	
	
		
			903 B
		
	
	
	
		
			PHP
		
	
	
	
	
	
			
		
		
	
	
			40 lines
		
	
	
		
			903 B
		
	
	
	
		
			PHP
		
	
	
	
	
	
| <?php
 | |
| 
 | |
| require 'memcached.inc.php';
 | |
| require 'includes/html/graphs/common.inc.php';
 | |
| 
 | |
| $scale_min = 0;
 | |
| $colours   = 'mixed';
 | |
| $nototal   = 0;
 | |
| $unit_text = 'Hits/Misses';
 | |
| $array     = array(
 | |
|     'get_hits'   => array(
 | |
|         'descr'  => 'Hits',
 | |
|         'colour' => '555555',
 | |
|     ),
 | |
|     'get_misses' => array(
 | |
|         'descr'  => 'Misses',
 | |
|         'colour' => 'cc0000',
 | |
|     ),
 | |
| );
 | |
| 
 | |
| $i = 0;
 | |
| 
 | |
| if (rrdtool_check_rrd_exists($rrd_filename)) {
 | |
|     foreach ($array as $ds => $var) {
 | |
|         $rrd_list[$i]['filename'] = $rrd_filename;
 | |
|         $rrd_list[$i]['descr']    = $var['descr'];
 | |
|         $rrd_list[$i]['ds']       = $ds;
 | |
|         $rrd_list[$i]['colour']   = $var['colour'];
 | |
|         if (!empty($var['areacolour'])) {
 | |
|             $rrd_list[$i]['areacolour'] = $var['areacolour'];
 | |
|         }
 | |
| 
 | |
|         $i++;
 | |
|     }
 | |
| } else {
 | |
|     echo "file missing: $file";
 | |
| }
 | |
| 
 | |
| require 'includes/html/graphs/generic_multi_line.inc.php';
 |