mirror of
				https://github.com/librenms/librenms.git
				synced 2024-10-07 16:52:45 +00:00 
			
		
		
		
	* Security fix: unauthorized access Affects nginx users: Moved php files outside of public html directory (Apache was protected by .htaccess) Affects all users: Some files did not check for authentication and could disclose some info. Better checks before including files from user input * git mv html/includes/ includes/html git mv html/pages/ includes/html/
		
			
				
	
	
		
			35 lines
		
	
	
		
			888 B
		
	
	
	
		
			PHP
		
	
	
	
	
	
			
		
		
	
	
			35 lines
		
	
	
		
			888 B
		
	
	
	
		
			PHP
		
	
	
	
	
	
<?php
 | 
						|
 | 
						|
require 'includes/html/graphs/common.inc.php';
 | 
						|
 | 
						|
$scale_min    = 0;
 | 
						|
$nototal      = (($width < 224) ? 1 : 0);
 | 
						|
$unit_text    = 'Packets';
 | 
						|
$rrd_filename = rrd_name($device['hostname'], array('app', 'ntp-server', $app['app_id']));
 | 
						|
$array        = array(
 | 
						|
    'packets_drop'   => array(
 | 
						|
        'descr'  => 'Dropped',
 | 
						|
        'colour' => '880000FF',
 | 
						|
    ),
 | 
						|
    'packets_ignore' => array(
 | 
						|
        'descr'  => 'Ignored',
 | 
						|
        'colour' => 'FF8800FF',
 | 
						|
    ),
 | 
						|
);
 | 
						|
 | 
						|
$i = 0;
 | 
						|
 | 
						|
if (rrdtool_check_rrd_exists($rrd_filename)) {
 | 
						|
    foreach ($array as $ds => $var) {
 | 
						|
        $rrd_list[$i]['filename'] = $rrd_filename;
 | 
						|
        $rrd_list[$i]['descr']    = $var['descr'];
 | 
						|
        $rrd_list[$i]['ds']       = $ds;
 | 
						|
        $rrd_list[$i]['colour']   = $var['colour'];
 | 
						|
        $i++;
 | 
						|
    }
 | 
						|
} else {
 | 
						|
    echo "file missing: $file";
 | 
						|
}
 | 
						|
 | 
						|
require 'includes/html/graphs/generic_multi_simplex_seperated.inc.php';
 |