Commit Graph
301 Commits
Author SHA1 Message Date
TheWitness 82b229db9e Updating Copyright to 2022. 2022-02-06 17:16:20 -05:00
TheWitness be7960c210 Fixing Issue #4540 - Template Account Editing
Administrators can cause issues when editing a template account
2022-02-03 15:52:10 -05:00
TheWitness d809a368d7 Adding three minor features associated with user management
* Allow the get_template_account() function to be hookable by third party plugin
* Allow The User Management interface to be filterable by Realm
* Prevent Template User Accounts from being Removed
* Move the get_guest_account() and get_template_account() functions into lib/auth.php
2022-01-30 11:57:18 -05:00
TheWitness 86e0bcef80 Fixing Issue #4475
Running cacti with PHP8.1 shows lots of warnings in the log
2021-11-30 17:46:54 -05:00
Jimmy Conner 6a945c4b47 Update sql injection fix to use prepared statements 2021-11-29 13:10:53 -06:00
Jimmy Conner 33b894c7c1 Resolve issues with SQL injections in user_admin.php 2021-11-29 00:48:33 -06:00
TheWitness 80909e388b Fixing Issue #4181 - Realm naming
- Cacti over editing Realm names removing critical wording
2021-03-19 20:04:53 -04:00
TheWitness 2ec71ee159 Fix two framing issues with midwinter 2021-03-05 23:21:59 -05:00
browniebraun e47a73ec90 ensure that leading blanks will be removed
make Larry happy ;)
2021-03-04 15:49:24 +01:00
TheWitness 02c86ad4f5 Fixing Issue #4056
"Show Exceptions" checkbox appears to behave as if it were "Only Show Exceptions"
2021-01-18 11:17:39 -05:00
TheWitness df54a4a3f3 Updating copright years 2021-01-01 20:28:58 -05:00
ed737c45ee More fixing #1985 to clean user_auth_cache during user management action (#3473)
* Fixed #1985: more fixing to clean user_auth_cache when Cacti Admin change password by someone request

* Minor formating changes

Co-authored-by: Jing Chen <three_chenjing@sohu.com>
Co-authored-by: South Park Neo <thewitness@cacti.net>
2020-04-18 08:57:16 -04:00
TheWitness 68b2dac89e Fixing Issue #1990
Plugin Realm should have a 'role' to help maintain changes between plugins
2020-03-19 18:54:34 -04:00
cigamit 4cbb045e03 Resolving Issue #3191
* Vulnerability report: Lack of escaping on some pages can lead
to XSS exposure
* Also cleaning up additional copyrights
* Make the way filter headers are escaped consistent
2020-01-15 19:56:32 -06:00
netniV 4fa9a68fb3 Update copyright to 2020 2020-01-12 12:19:49 +00:00
cigamit 510ad57c83 Resolving Issue #3068
Input Validation Not Performed for id Backtrace: user_admin.php
2019-11-09 09:29:59 -06:00
cigamit 972a18d426 SQL error when searching for a template 2019-09-22 13:31:31 -05:00
cigamit b87747c38b Resolving Issue #2839
Non regular expression search filters don't support international characters
2019-07-24 18:05:17 -05:00
cigamit 1ee746965d Resolving Issue #2742
Resolve a number of QA issues in various files
2019-06-22 09:04:37 -05:00
cigamit d0bddc99cc Remove debugging 2019-03-16 14:37:51 -05:00
cigamit eca4ec0fa4 Resolving Issues #2464, #2465
* User Admin - Effective Permissions - Disable Devices should show denied
* User Admin - Effective Permissions - Too many groups hide effective permission column
2019-03-03 15:57:03 -06:00
ddb4github fe159c2e65 Fixed #2346 (#2349)
Move  "Legacy 1.x Plugins" Permission to a proper cell
2019-01-26 12:29:12 +00:00
netniV b8c579b129 Update copyright notices for 2019 2019-01-25 08:06:11 +00:00
cigamit c82c8249c7 Missing one untranslated string and look and feel inconsistent 2019-01-19 12:54:30 -06:00
ddb4github c7de94c8cc Fixed #2323 (#2325) 2019-01-19 08:51:18 -06:00
cigamit e1dad073ba Properly display "No XXX Found" rows 2019-01-12 09:48:29 -06:00
cigamit 44ef68fe7f Additional loose ends on issue #2219
More cases.  There may be more, but expect that they have minor or no
impact.
2018-12-20 17:15:09 -06:00
cigamit 80c2a88fb2 Resolving Issues #2213, #2214, #2215 and Additional
Multiple XSS vectors associated with un-escaped strings.  Introduce new
function, audit all calls, remove inline styles for classes, some i18n
missed.
2018-12-16 09:54:11 -06:00
cigamit 35b184c1f0 Minor wording and format issues 2018-12-08 14:53:37 -06:00
YongBoLiu 6b1cc1d0b5 To compatible with old plugins, better to support char '_' for tab names. (#2157)
As no check for tab name in old cacti, to compatible with old plugins, better to support '_' for tab names.
2018-11-09 09:03:53 +00:00
cigamit 44190227f4 Resolving Issue #1926
This is easy enough.  Not a major change actually.
Some line ending fixes as well
2018-09-24 20:52:19 -05:00
cigamit 56fbaba138 Dont' over escape forms 2018-09-17 07:26:03 -05:00
Mark Brugnoli-Vinten 07150a3643 Resolving issue #1927 (#1929) 2018-09-15 08:47:00 -04:00
Mark Brugnoli-Vinten 1ca32862a9 Resolving issue #1920 (#1922)
* Resolving issue #1920

* Minor QA issue
2018-09-14 20:59:52 -05:00
cigamit 3869abeb33 Resolving Issue #1916
1.2.0] Cannot save User Settings
2018-09-12 21:13:10 -05:00
cigamit 2b8097c060 Resolving Issue #1882
Bypass output validation in select cases
2018-08-30 19:29:27 -05:00
cigamit 90385b84d5 Allow permissions to be modified again. 2018-08-16 21:09:03 -05:00
cigamit 2de208331f Resolving multiple issues with guest and template accounts 2018-08-07 18:22:31 -05:00
cigamit f90e7a552e Correct two minor issues
The likelihood of an XSS is quite low
Always use AS when aliasing column
2018-06-10 11:29:34 -05:00
Petr Macek 80f7ccd86b fix issue #1639 (#1640)
* fix issue #1639

* Fix issue #1639 - better way with apostrophes
2018-05-30 06:28:29 -05:00
cigamit d14c50285b Resolving Issue #1590
User Admin generates SQL error if user is not part of any groups
2018-05-10 19:10:19 -05:00
cigamit 86641b1be2 Pre-apply jQueryUI styles to input objects 2018-05-09 20:58:37 -05:00
Mark Brugnoli-Vinten c70642b93f feature #1400: User settings should have checkbox to enable overriding of default settings (#1577)
* feature #1400: User settings should have checkbox to enable overriding of global settings

* Fix for enable/disable styles

* QA fix for settings not being cleared

* QA fix to prevent double saving
2018-04-29 10:08:46 -05:00
Tony Roman 1ce66b5fde Merge branch 'develop' into feature/1.2.x 2018-02-25 20:12:19 -05:00
Patrick 10f8f893a3 Updated Dutch Translations (#1402)
* Updated Dutch Translations

* Updated Dutch Translations

Merge conflict, needed to re-compile the .mo

* Updated Dutch Translations with latest Cacti.pot

* Fixed some inconsistencies

* Fixed obsolete code

* Updated Dutch Translations
2018-02-25 12:26:22 -06:00
cigamit 5d7bb410e0 Some pages missing colspan's for no rows found
Issue with message text wrapping when no rows found on some pages
2018-02-24 17:43:48 -06:00
cigamit 7e70e27940 Merge remote-tracking branch 'refs/remotes/origin/develop' into feature/1.2.x
# Conflicts:
#	docs/CHANGELOG
#	include/themes/modern/main.css
#	tree.php
2018-02-18 16:26:26 -06:00
cigamit 7343c8e4c1 Resolve Issue #1366
Improve error/info message display
2018-02-18 14:20:50 -06:00
cigamit 333d6a5460 Resolve two minor user and group admin issues
-issue: Remove spurious php code from checkbox area in user admin
-issue: Minor plugin permissions format change
2018-02-14 18:03:11 -06:00
cigamit 50103c2708 Correct spelling mistake 2018-01-14 21:06:10 -06:00