Tony Murray 36431dd296 Security fix: unauthorized access (#10091)
* Security fix: unauthorized access
Affects nginx users:
Moved php files outside of public html directory (Apache was protected by .htaccess)

Affects all users:
Some files did not check for authentication and could disclose some info.
Better checks before including files from user input

* git mv html/includes/ includes/html
git mv html/pages/ includes/html/
2019-04-11 23:26:42 -05:00

27 lines
630 B
PHP

<?php
// Cycle through dot3stats OIDs and build list of RRAs to pass to multi simplex grapher
$oids = array(
'drop',
'punt',
'hostpunt',
);
$i = 0;
if (rrdtool_check_rrd_exists($rrd_filename)) {
foreach ($oids as $oid) {
$oid = str_replace('dot3Stats', '', $oid);
$oid_ds = substr($oid, 0, 19);
$rrd_list[$i]['filename'] = $rrd_filename;
$rrd_list[$i]['descr'] = $oid;
$rrd_list[$i]['ds'] = $oid_ds;
$i++;
}
}
$colours = 'mixed';
$nototal = 1;
$unit_text = 'Errors';
require 'includes/html/graphs/generic_multi_simplex_seperated.inc.php';