- Potential vulnerability in RRDtool functions
- Adding validation to both dirpath and filepath, also verification of
executable status to files in RRDtool function.
- Spurious htmlspecialchars() to html_escape() calls
- Minor SQL formatting for readability
* Update cacti.sql
Added 2 entry for cn_full_name and cn_email
* Update cacti.sql
Change the size to 50
* Create 1_2_0.php
Added the change on table user_domains_ldap, to provide info for full_name and email
* Update global_settings.php
Added the 2 new entry as new section for LDAP settings:
ldap_cn_fullname
ldap_cn_email
* Update auth.php
Added the email address on user_copy function
* Update ldap.php
Added the ldap_search_cn to search 2 specific CN on LDAP server
* Update auth_login.php
Added the Get user CN part for new LDAP users
* Update ldap.php
little error on ldap_search inside Getcn function
* Update user_domains.php
Add option to manage Full name and email taken from LDAP server
* Update auth_login.php
Change for multidomain authentication
* Update global_settings.php
change the name ldap_cn_xxx to just cn_xxx
* Update ldap.php
Correction to the error number and message when the CN is not find
* Update settings.php
Added the visibility of CN fields only for LDAP authentication mode
* Update ldap.php
correct on line 729 missing $ before this->cn
* Update cacti.sql
column definitions consistent with the definitions under install/upgrades/1_2_0.php
* Update auth_login.php
correct tab, as space, and add {} in if else statment
* Update ldap.php
correction on cacti_log with $output['error_text'], correction on all error_num 99 as '99'
and made some correction int tab/space
* Update auth_login.php
add missing {} on else function
- Resolve randome apache segfault due to recursion.
- Also, remove additional references to export user
- Change the way the guest_account id is gathered.
- Change elseif format
- Remove trailing white-spaces
There are still three steps to go in this overall. The first is to
replace all the page filtering session storing and validation functions
and the second is to propagate those changes into various areas of the
lib directory that include the use of the various variables, lastly,
developer mode will have to be enable to see if there are any variables
used in the code that have not been sanitized. Note, at this point the
develop branch should be thought of as slightly unstable
this is part three of project to remove the use of $_GET, $_REQUEST, and
$_POST in the code. Parts one and two have already been completed.
Part one was to remove the use of $_GET throughout the code, part two
was the incorporation of wrapper functions to handle specific
validation, verification and sanitization cases. This third part will
remove the use of the get_request_var_request() from the code. Part
four, and beyond will include the removal of both $_REQUEST and $_POST
super globals from the code.
Insure ready function triggers all form dynamic logic.
Clear passwords in form display to prevent save errors.
Right align 'Send a Test Email'.
Minor correction to LDAP visibility logic.
Changes include:
- Convert some <br> to </li>
- Update ChangeLog per 0.8.8d release
- Fix Max Values on UCD/SNMP Memory Template
- Change Cacti Group Format to Modern Theme
- Fix Locking on Graphs
- Force Image format to PNG for Legacy Graph Image
- Correct form Logic on Settings to Fix Reverse Proxy's
- Shorten Uptime Display on Device Edit
- Force a Locale Setting for i18n on Graphs
- Fix Resizable Columns to resize only the current column
- Add DropIcon selectmenu Widget to modern theme
- Fix Issue where delete data source multi leaves orphan records
- Correct performance bug in Boost engine
- Optimize array_to_sql_or performance
- Correct and issue where pushing out data query objects to host cache
could leave orphan elements
- Add OID_REWRITE_PATTERN Feature on input
- Add VALUE/REGEXP Feature on output
- Optimize strip_quotes function to be more intellegent
- Escape shell arguments on Script Data Input types
- Allow Special Characters for LDAP passwords
- Correct LDAP class defect for anonymous binding
- Bypass php-snmp for now
- Correct rrdcleaner bytes units
- Fix loadavg_multi.pl to respect i18n
- Remove legacy row counters from snmpagent pages
1) Realtime integration complete
2) Added option to update sys OID's in spine and cmd.php
3) Updated poller as well
4) Made cmd.php argument processing sane
5) Remove one more 'rrdtool_graph' variant (aka Realtime)
6) Moved Realtime settings under Visual
7) Added some core Javascript utility functions
8) Added minimum width to dropdowns to make more appealing
9) Cleanup some redundant syntax in headers
10) Typos in format files
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.8@7678 860744bd-22fc-0310-8c96-e9fe5004b5ca
2) Insure that all form spacers can be collapsible, even with visibility
events tied to them
3) Set initial visibility of the general header to none
4) Fix auth_profile.php to behave as expected, (save,return)
5) Minor tweak to graph_settings.php
6) New button function
7) Add some core jQuery functions
git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/cacti/branches/0.8.8@7666 860744bd-22fc-0310-8c96-e9fe5004b5ca
cigamit