mirror of
				https://github.com/librenms/librenms.git
				synced 2024-10-07 16:52:45 +00:00 
			
		
		
		
	* Security fix: unauthorized access Affects nginx users: Moved php files outside of public html directory (Apache was protected by .htaccess) Affects all users: Some files did not check for authentication and could disclose some info. Better checks before including files from user input * git mv html/includes/ includes/html git mv html/pages/ includes/html/
		
			
				
	
	
		
			122 lines
		
	
	
		
			5.6 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
			
		
		
	
	
			122 lines
		
	
	
		
			5.6 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
| <?php
 | |
| /*
 | |
|  * This program is free software: you can redistribute it and/or modify it
 | |
|  * under the terms of the GNU General Public License as published by the
 | |
|  * Free Software Foundation, either version 3 of the License, or (at your
 | |
|  * option) any later version.  Please see LICENSE.txt at the top level of
 | |
|  * the source code distribution for details.
 | |
|  *
 | |
|  * @package    LibreNMS
 | |
|  * @subpackage graphs
 | |
|  * @link       http://librenms.org
 | |
|  * @copyright  2017 LibreNMS
 | |
|  * @author     LibreNMS Contributors
 | |
| */
 | |
| 
 | |
| require 'includes/html/graphs/common.inc.php';
 | |
| 
 | |
| $stacked = generate_stacked_graphs();
 | |
| 
 | |
| $i = 0;
 | |
| 
 | |
| foreach ($rrd_filenames as $key => $rrd_filename) {
 | |
|     if ($rrd_inverted[$key]) {
 | |
|         $in = 'out';
 | |
|         $out = 'in';
 | |
|     } else {
 | |
|         $in = 'in';
 | |
|         $out = 'out';
 | |
|     }
 | |
| 
 | |
|     $rrd_options .= ' DEF:' . $in . 'octets' . $i . '=' . $rrd_filename . ':' . $ds_in . ':AVERAGE';
 | |
|     $rrd_options .= ' DEF:' . $out . 'octets' . $i . '=' . $rrd_filename . ':' . $ds_out . ':AVERAGE';
 | |
|     $in_thing .= $seperator . 'inoctets' . $i . ',UN,0,' . 'inoctets' . $i . ',IF';
 | |
|     $out_thing .= $seperator . 'outoctets' . $i . ',UN,0,' . 'outoctets' . $i . ',IF';
 | |
|     $pluses .= $plus;
 | |
|     $seperator = ',';
 | |
|     $plus = ',+';
 | |
| 
 | |
|     if ($_GET['previous']) {
 | |
|         $rrd_options .= ' DEF:' . $in . 'octets' . $i . 'X=' . $rrd_filename . ':' . $ds_in . ':AVERAGE:start=' . $prev_from . ':end=' . $from;
 | |
|         $rrd_options .= ' DEF:' . $out . 'octets' . $i . 'X=' . $rrd_filename . ':' . $ds_out . ':AVERAGE:start=' . $prev_from . ':end=' . $from;
 | |
|         $rrd_options .= ' SHIFT:' . $in . 'octets' . $i . "X:$period";
 | |
|         $rrd_options .= ' SHIFT:' . $out . 'octets' . $i . "X:$period";
 | |
|         $in_thingX .= $seperatorX . 'inoctets' . $i . 'X,UN,0,' . 'inoctets' . $i . 'X,IF';
 | |
|         $out_thingX .= $seperatorX . 'outoctets' . $i . 'X,UN,0,' . 'outoctets' . $i . 'X,IF';
 | |
|         $plusesX .= $plusX;
 | |
|         $seperatorX = ',';
 | |
|         $plusX = ',+';
 | |
|     }
 | |
| 
 | |
|     $i++;
 | |
| }
 | |
| 
 | |
| if ($i) {
 | |
|     if ($inverse) {
 | |
|         $in = 'out';
 | |
|         $out = 'in';
 | |
|     } else {
 | |
|         $in = 'in';
 | |
|         $out = 'out';
 | |
|     }
 | |
| 
 | |
|     $rrd_options .= ' CDEF:' . $in . 'octets=' . $in_thing . $pluses;
 | |
|     $rrd_options .= ' CDEF:' . $out . 'octets=' . $out_thing . $pluses;
 | |
|     $rrd_options .= ' CDEF:doutoctets=outoctets,' . $stacked['stacked'];
 | |
|     $rrd_options .= ' CDEF:inbits=inoctets,8,*';
 | |
|     $rrd_options .= ' CDEF:outbits=outoctets,8,*';
 | |
|     $rrd_options .= ' CDEF:doutbits=doutoctets,8,*';
 | |
|     $rrd_options .= ' VDEF:percentile_in=inbits,' . $config['percentile_value'] . ',PERCENT';
 | |
|     $rrd_options .= ' VDEF:percentile_out=outbits,' . $config['percentile_value'] . ',PERCENT';
 | |
|     $rrd_options .= ' CDEF:dpercentile_outn=doutbits,' . $stacked['stacked'];
 | |
|     $rrd_options .= ' VDEF:dpercentile_outnp=dpercentile_outn,' . $config['percentile_value'] . ',PERCENT';
 | |
|     $rrd_options .= ' CDEF:dpercentile_outnpn=doutbits,doutbits,-,dpercentile_outnp,-1,*,+';
 | |
|     $rrd_options .= ' VDEF:dpercentile_out=dpercentile_outnpn,FIRST';
 | |
| 
 | |
|     if ($_GET['previous'] == 'yes') {
 | |
|         $rrd_options .= ' CDEF:' . $in . 'octetsX=' . $in_thingX . $pluses;
 | |
|         $rrd_options .= ' CDEF:' . $out . 'octetsX=' . $out_thingX . $pluses;
 | |
|         $rrd_options .= ' CDEF:doutoctetsX=outoctetsX,' . $stacked['stacked'] . ',*';
 | |
|         $rrd_options .= ' CDEF:inbitsX=inoctetsX,8,*';
 | |
|         $rrd_options .= ' CDEF:outbitsX=outoctetsX,8,*';
 | |
|         $rrd_options .= ' CDEF:doutbitsX=doutoctetsX,8,*';
 | |
|         $rrd_options .= ' VDEF:percentile_inX=inbitsX,' . $config['percentile_value'] . ',PERCENT';
 | |
|         $rrd_options .= ' VDEF:percentile_outX=outbitsX,' . $config['percentile_value'] . ',PERCENT';
 | |
|         $rrd_options .= ' CDEF:dpercentile_outXn=doutbitsX,' . $stacked['stacked'] . ',*';
 | |
|         $rrd_options .= ' VDEF:dpercentile_outX=dpercentile_outXn,' . $config['percentile_value'] . ',PERCENT';
 | |
|         $rrd_options .= ' CDEF:dpercentile_outXn=doutbitsX,doutbitsX,-,dpercentile_outX,' . $stacked['stacked'] . ',*,+';
 | |
|         $rrd_options .= ' VDEF:dpercentile_outX=dpercentile_outXn,FIRST';
 | |
|     }
 | |
| 
 | |
|     if ($legend == 'no' || $legend == '1') {
 | |
|         $rrd_options .= ' AREA:inbits#' . $colour_area_in . $stacked['transparency'] . ':';
 | |
|         $rrd_options .= ' LINE1.25:inbits#' . $colour_line_in . ':';
 | |
|         $rrd_options .= ' AREA:doutbits#' . $colour_area_out . $stacked['transparency'] . ':';
 | |
|         $rrd_options .= ' LINE1.25:doutbits#' . $colour_line_out . ':';
 | |
|     } else {
 | |
|         $rrd_options .= ' AREA:inbits#' . $colour_area_in . $stacked['transparency'] . ':';
 | |
|         $rrd_options .= " COMMENT:'bps      Now       Ave      Max      " . $config['percentile_value'] . "th %\\n'";
 | |
|         $rrd_options .= ' LINE1.25:inbits#' . $colour_line_in . ':In\ ';
 | |
|         $rrd_options .= ' GPRINT:inbits:LAST:%6.2lf%s';
 | |
|         $rrd_options .= ' GPRINT:inbits:AVERAGE:%6.2lf%s';
 | |
|         $rrd_options .= ' GPRINT:inbits:MAX:%6.2lf%s';
 | |
|         $rrd_options .= " GPRINT:percentile_in:%6.2lf%s\\\\n";
 | |
|         $rrd_options .= ' AREA:doutbits#' . $colour_area_out . $stacked['transparency'] . ':';
 | |
|         $rrd_options .= ' LINE1.25:doutbits#' . $colour_line_out . ':Out';
 | |
|         $rrd_options .= ' GPRINT:outbits:LAST:%6.2lf%s';
 | |
|         $rrd_options .= ' GPRINT:outbits:AVERAGE:%6.2lf%s';
 | |
|         $rrd_options .= ' GPRINT:outbits:MAX:%6.2lf%s';
 | |
|         $rrd_options .= " GPRINT:percentile_out:%6.2lf%s\\\\n";
 | |
|     }
 | |
| 
 | |
|     $rrd_options .= ' LINE1:percentile_in#aa0000';
 | |
|     $rrd_options .= ' LINE1:dpercentile_out#aa0000';
 | |
| 
 | |
|     if ($_GET['previous'] == 'yes') {
 | |
|         $rrd_options .= ' AREA:inbitsX#9999966' . $stacked['transparency'] . ':';
 | |
|         $rrd_options .= ' AREA:doutbitsX#99999966' . $stacked['transparency'] . ':';
 | |
|     }
 | |
| }
 | |
| 
 | |
| unset($stacked);
 |