Files
librenms-librenms/includes/html/pages/routing.inc.php
Tony Murray 36431dd296 Security fix: unauthorized access (#10091)
* Security fix: unauthorized access
Affects nginx users:
Moved php files outside of public html directory (Apache was protected by .htaccess)

Affects all users:
Some files did not check for authentication and could disclose some info.
Better checks before including files from user input

* git mv html/includes/ includes/html
git mv html/pages/ includes/html/
2019-04-11 23:26:42 -05:00

64 lines
1.4 KiB
PHP

<?php
$pagetitle[] = 'Routing';
if ($_GET['optb'] == 'graphs' || $_GET['optc'] == 'graphs') {
$graphs = 'graphs';
} else {
$graphs = 'nographs';
}
// $datas[] = 'overview';
// $routing_count is populated by print-menubar.inc.php
// $type_text['overview'] = "Overview";
$type_text['bgp'] = 'BGP';
$type_text['cef'] = 'CEF';
$type_text['ospf'] = 'OSPF';
$type_text['vrf'] = 'VRFs';
$type_text['cisco-otv'] = 'OTV';
print_optionbar_start();
// if (!$vars['protocol']) { $vars['protocol'] = "overview"; }
echo "<span style='font-weight: bold;'>Routing</span> &#187; ";
unset($sep);
foreach ($routing_count as $type => $value) {
if (!$vars['protocol']) {
$vars['protocol'] = $type;
}
echo $sep;
unset($sep);
if ($vars['protocol'] == $type) {
echo '<span class="pagemenu-selected">';
}
if ($routing_count[$type]) {
echo generate_link($type_text[$type].' ('.$routing_count[$type].')', array('page' => 'routing', 'protocol' => $type));
$sep = ' | ';
}
if ($vars['protocol'] == $type) {
echo '</span>';
}
}//end foreach
print_optionbar_end();
switch ($vars['protocol']) {
case 'overview':
case 'bgp':
case 'vrf':
case 'cef':
case 'ospf':
case 'cisco-otv':
include 'includes/html/pages/routing/'.$vars['protocol'].'.inc.php';
break;
default:
echo report_this('Unknown protocol '.$vars['protocol']);
break;
}