'; } else { $message = __esc("External Link ID '%s' with Title '%s' attempted to inject an invalid URL and was blocked!", $page['id'], $page['title']); cacti_log($message, false, 'SECURITY'); raise_message('invalid_url', $message, MESSAGE_LEVEL_ERROR); } } else { print '

'; $basepath = realpath(CACTI_PATH_INCLUDE . '/content'); $file = ($basepath !== false) ? realpath($basepath . '/' . $page['contentfile']) : false; if ($file && is_file($file) && str_starts_with($file, $basepath . DIRECTORY_SEPARATOR)) { require_once($file); } else { print '

The file \'' . htmle($page['contentfile']) . '\' does not exist!!

'; } print '

'; } bottom_footer(); } else { raise_message('permission_denied'); header('Location: ' . $referer); exit; } }