Files
librenms-librenms/includes/html/graphs/device/ntp_stratum.inc.php
Tony Murray 36431dd296 Security fix: unauthorized access (#10091)
* Security fix: unauthorized access
Affects nginx users:
Moved php files outside of public html directory (Apache was protected by .htaccess)

Affects all users:
Some files did not check for authentication and could disclose some info.
Better checks before including files from user input

* git mv html/includes/ includes/html
git mv html/pages/ includes/html/
2019-04-11 23:26:42 -05:00

53 lines
1.9 KiB
PHP

<?php
/*
* LibreNMS module to display captured NTP statistics
*
* Copyright (c) 2016 Aaron Daniels <aaron@daniels.id.au>
*
* This program is free software: you can redistribute it and/or modify it
* under the terms of the GNU General Public License as published by the
* Free Software Foundation, either version 3 of the License, or (at your
* option) any later version. Please see LICENSE.txt at the top level of
* the source code distribution for details.
*/
$component = new LibreNMS\Component();
$options = array();
$options['filter']['type'] = array('=','ntp');
$components = $component->getComponents($device['device_id'], $options);
// We only care about our device id.
$components = $components[$device['device_id']];
include "includes/html/graphs/common.inc.php";
$rrd_options .= " -l 0 -u 16 -E ";
$rrd_options .= " COMMENT:'Stratum Now Min Max\\n'";
$rrd_additions = "";
$count = 0;
foreach ($components as $id => $array) {
$rrd_filename = rrd_name($device['hostname'], array('ntp', $array['peer']));
if (rrdtool_check_rrd_exists($rrd_filename)) {
// Grab a color from the array.
if (isset($config['graph_colours']['mixed'][$count])) {
$color = $config['graph_colours']['mixed'][$count];
} else {
$color = $config['graph_colours']['oranges'][$count-7];
}
$rrd_additions .= " DEF:DS" . $count . "=" . $rrd_filename . ":stratum:AVERAGE ";
$rrd_additions .= " LINE1.25:DS" . $count . "#" . $color . ":'" . str_pad(substr($array['peer'], 0, 15), 15) . "'" . $stack;
$rrd_additions .= " GPRINT:DS" . $count . ":LAST:%5.0lf ";
$rrd_additions .= " GPRINT:DS" . $count . ":MIN:%7.0lf ";
$rrd_additions .= " GPRINT:DS" . $count . ":MAX:%7.0lf\\l ";
$count++;
}
}
if ($rrd_additions == "") {
// We didn't add any data points.
} else {
$rrd_options .= $rrd_additions;
}