71 Commits
Author SHA1 Message Date
TheWitness 7653480aca Fixing #5182 - Graph Image and Remote Agent
Graph Image does not have check for Remote Agent
2023-01-21 13:52:55 -05:00
Mark Brugnoli-Vinten d2a94dc3b3 Update copyright year for 2023 2023-01-03 22:46:09 +00:00
TheWitness 82b229db9e Updating Copyright to 2022. 2022-02-06 17:16:20 -05:00
TheWitness df54a4a3f3 Updating copright years 2021-01-01 20:28:58 -05:00
TheWitness ced9f430f4 Partial resolution to low lighthouse score for performance #3402
* Cacti scores low on performance audit on lighthouse audit
* This change enables generic caching of pages, but with a very short age for RRDtool generated graphics.
* It increses the SEO score through the use of specialty tags on anchors leveraging the _blank target attribute value
* It removes and unnecessary tooltip on the document element

There may be additional changes forthcoming.  However, these changes raised the score from 0 to the mid twenties.

Some of the changes, like minification of JavaScript we do not do due to the nature of the project, but could be done by customers.  Once the page is first rendered, it's in the browsers memory and cached for a good time, so this is not a big deal.
2020-04-04 09:09:58 -04:00
TheWitness d65f40d2bf Abstract Cacti session handler 2020-03-29 19:08:29 -04:00
netniV b41014219e Unix timestamps after Sep 13 2020 are rejected as graph start/end arguments
Closes #3245
2020-02-22 00:43:56 +00:00
netniV 4fa9a68fb3 Update copyright to 2020 2020-01-12 12:19:49 +00:00
netniV 4cecb19f6b PHP Fatal error: Uncaught Error: Cannot pass parameter 5 by reference in graph_json.php:158
Closes #3104
2019-11-27 23:09:59 +00:00
ddb4github d5f98679a0 Fixed #3049(due to #2964) to add missed argv for most rrdtool_function_graph caller (#3087)
* Fixed: #2964 to add missed argv for all rrd_function_graph caller

* Fixed #2964: Apply security solution to aggregate graph preview and graph impage page
2019-11-17 14:15:41 -06:00
cigamit cfb0733597 Fixing Issue #2964 Differently
* CVE-2019-16723 Security issue allows to view all graphs
* Thischange restores the check inside of lib/rrr.php and updates all but on calling of the graph function to include the user.
2019-10-19 08:01:39 -05:00
cigamit 7a6a17252a Resolving Issue #2954
Security issue allows to view all graphs
2019-09-22 13:15:41 -05:00
netniV 308292e2d7 Update copyright notices for 2019 2019-01-25 08:05:00 +00:00
cigamit 2a1b980271 Resolving Issue #1428
Graphs: Add more information to error image
2018-05-11 18:31:20 -05:00
cigamit 9b48dfc4a8 Resolving Issue #1309
Provide meaningful authentication errors in graph_json.php and
graph_image.php
2018-02-06 19:28:29 -06:00
Tony Roman 519b35f5cd Update copyright to 2018 2018-01-06 09:10:15 -05:00
Wolfgang Stöggl 4a1a15d72c Correct spelling of RRDtool (#1038)
- Change RRDTool -> RRDtool with a lowercase t.
- Replace in all files except *.mo, *.po, *.pot
2017-10-16 11:32:05 -04:00
Tony Roman 8a179d7d7f Fix up to move if elseif else blocks to PSR 2017-05-07 19:57:36 -04:00
cigamit 68565a1536 Undefined variable warnings 2017-03-18 20:05:31 -05:00
cigamit a7b8c6fb20 Resolving Issue #407
The RRDfile does not exist message is misleading
2017-03-18 13:31:20 -05:00
cigamit 5597e07e81 Resolving Issue #199 2017-01-11 07:08:17 -06:00
Tony Roman 35a5988f41 Update source code files copyright to new year 2017-01-01 13:45:29 -05:00
cigamit b523f1dea5 remove addslashes, prepared statements, wc3 validation, double to single quote
this is required for preparation of magic_quotes_gpc.
2016-08-28 15:27:48 -05:00
cigamit c59b0a7e12 add theme support to reports 2016-02-14 12:12:25 -06:00
cigamit 22478523f3 default the graph type and remove developer mode log messages. 2016-02-13 09:28:44 -06:00
cigamit bf33b51819 more request variable debug
no need for developer log messages under some circumstances
2016-02-13 09:14:46 -06:00
cigamit 2387bd4a08 removing many $_GET, $_REQUEST, and $_POST variable usage
There are still three steps to go in this overall.  The first is to
replace all the page filtering session storing and validation functions
and the second is to propagate those changes into various areas of the
lib directory that include the use of the various variables, lastly,
developer mode will have to be enable to see if there are any variables
used in the code that have not been sanitized.  Note, at this point the
develop branch should be thought of as slightly unstable
2016-02-07 12:51:49 -06:00
cigamit da34108e21 remove use of deprecated function get_request_var_request(). replace it with get_request_var()
this is part three of project to remove the use of $_GET, $_REQUEST, and
$_POST in the code.  Parts one and two have already been completed.
Part one was to remove the use of $_GET throughout the code, part two
was the incorporation of wrapper functions to handle specific
validation, verification and sanitization cases.  This third part will
remove the use of the get_request_var_request() from the code.  Part
four, and beyond will include the removal of both $_REQUEST and $_POST
super globals from the code.
2016-01-30 15:53:08 -06:00
Micke2k d188f1631d Change Copyright year 2015 -> 2016 2016-01-29 21:46:02 +04:00
cigamit d2ab6ff1b3 properly render svg in reports output
properly parse $_REQUEST['image_format'] and properly force to 'png' for
reports.
2015-04-25 09:57:27 -05:00
cigamit abdc1e3d55 Merging 0.8.8d Updates with GitHub
Changes include:
- Convert some <br> to </li>
- Update ChangeLog per 0.8.8d release
- Fix Max Values on UCD/SNMP Memory Template
- Change Cacti Group Format to Modern Theme
- Fix Locking on Graphs
- Force Image format to PNG for Legacy Graph Image
- Correct form Logic on Settings to Fix Reverse Proxy's
- Shorten Uptime Display on Device Edit
- Force a Locale Setting for i18n on Graphs
- Fix Resizable Columns to resize only the current column
- Add DropIcon selectmenu Widget to modern theme
- Fix Issue where delete data source multi leaves orphan records
- Correct performance bug in Boost engine
- Optimize array_to_sql_or performance
- Correct and issue where pushing out data query objects to host cache
could leave orphan elements
- Add OID_REWRITE_PATTERN Feature on input
- Add VALUE/REGEXP Feature on output
- Optimize strip_quotes function to be more intellegent
- Escape shell arguments on Script Data Input types
- Allow Special Characters for LDAP passwords
- Correct LDAP class defect for anonymous binding
- Bypass php-snmp for now
- Correct rrdcleaner bytes units
- Fix loadavg_multi.pl to respect i18n
- Remove legacy row counters from snmpagent pages
2015-03-23 17:02:45 -05:00
cigamit 3913c7fa98 Graph View Cog works and more
Graph View Cog works
CSV Output from Cog View
Render SVG Correctly
Properly Save Cookie in all pages
2015-03-01 20:34:48 -06:00
Jimmy Conner 455d855894 1) Convert double quotes to single quotes
2) Remove references to $_GET replace with $_REQUEST
3) Remove some inline styles

git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.8@7706 860744bd-22fc-0310-8c96-e9fe5004b5ca
2015-01-17 16:53:24 +00:00
Jimmy Conner 5bde3da972 1) Update Copyright Years Correct a few minor CY Issues
2) Allow Locking/UnLocking of Graphs
3) ToolTips
4) Correct Minor Issues with Login/Out/Permission associated with Theme JS
5) Upgrade jQuery which has Fixes for Major issue in Safari 7/8.1

git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.8@7662 860744bd-22fc-0310-8c96-e9fe5004b5ca
2015-01-04 01:52:50 +00:00
Jimmy Conner 5646c33484 A little bit of cleanup
Change double quotes to single quotes where possible
Move to prepared statements were possible
Fix line endings on a few files

git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.8@7609 860744bd-22fc-0310-8c96-e9fe5004b5ca
2014-12-25 07:00:57 +00:00
Tony Roman 65be30ffe0 Update copyright to 2014
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.8@7437 860744bd-22fc-0310-8c96-e9fe5004b5ca
2014-03-30 19:54:50 +00:00
Tony Roman ce40281901 Update copyright to 2013 for 0.8.8
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.8@7386 860744bd-22fc-0310-8c96-e9fe5004b5ca
2013-07-21 23:00:42 +00:00
Reinhard Scheck 6039d954c6 -bug#0002189: Proper graph hooks
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.7@7059 860744bd-22fc-0310-8c96-e9fe5004b5ca
2012-03-13 18:23:15 +00:00
Tony Roman a257958a0b Update copyright to 2012
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.7@7016 860744bd-22fc-0310-8c96-e9fe5004b5ca
2012-02-27 07:04:37 +00:00
Tony Roman 2d039dd7db Merge PIA into 0.8.7 branch
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.7@7006 860744bd-22fc-0310-8c96-e9fe5004b5ca
2012-02-27 01:14:45 +00:00
Larry Adams 86334ab8b0 -bug#0001928: graph_image.php does not check local_graph_id
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.7@6243 860744bd-22fc-0310-8c96-e9fe5004b5ca
2011-01-28 20:36:14 +00:00
Tony Roman 9acba795fe Update copyright to 2011
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.7@6233 860744bd-22fc-0310-8c96-e9fe5004b5ca
2011-01-27 03:44:05 +00:00
Larry Adams c0c25dc640 QA: Additional PHP4 compatibility fixes.
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.7@5830 860744bd-22fc-0310-8c96-e9fe5004b5ca
2010-05-02 16:59:23 +00:00
Larry Adams c5403f3844 QA: Update copyrights
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.7@5806 860744bd-22fc-0310-8c96-e9fe5004b5ca
2010-04-28 03:48:09 +00:00
Tony Roman 26d1957d62 Update copyright to 2009
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.7@4931 860744bd-22fc-0310-8c96-e9fe5004b5ca
2009-02-11 22:53:50 +00:00
Jeff Pasnak dce2132939 #0001283 - graph_image.php and graph.php cause PHP Notices errors on view
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.7@4804 860744bd-22fc-0310-8c96-e9fe5004b5ca
2008-11-10 19:49:18 +00:00
Larry Adams 22f9e12ddb Update Copyright Notice for 2008.
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.7@4434 860744bd-22fc-0310-8c96-e9fe5004b5ca
2008-01-29 00:40:43 +00:00
Larry Adams 1df64a3777 -bug#0000974: No graphs on Fedora core6 using sunone/iplanet 6.1 SP5
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/branches/BRANCH_0_8_6/cacti@4059 860744bd-22fc-0310-8c96-e9fe5004b5ca
2007-08-09 12:53:19 +00:00
Jimmy Conner 7944d94932 0000955: Possibility to create a denial of service by modifying graph image url
This patch ignores dates after 9/13/2020 and also stops from creating overly huge graphs (larger than 3000x3000).  By setting exceedingly large dates, the rrdtool process can take 100% CPU for minutes at a time.  By setting large graphs (60000x40000) rrdtool can take 100% for 20 seconds on my machine

git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/branches/BRANCH_0_8_6/cacti@3956 860744bd-22fc-0310-8c96-e9fe5004b5ca
2007-06-04 06:41:13 +00:00
Tony Roman e625781ec6 Typos suck and I'm glad I have a script to update copyrights
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/branches/BRANCH_0_8_6/cacti@3898 860744bd-22fc-0310-8c96-e9fe5004b5ca
2007-03-04 20:17:57 +00:00