Files
cacti/tests/security/baselines/sink_inventory.baseline.tsv
T
1e5329dd89 security: consolidate verified GHSA-rjvj win32 cmd.exe hardening for develop (#8056)
* fix(win32): harden the cmd.exe shell sinks on develop (GHSA-rjvj-r52f-8v5q)

Forward-port of the 1.2.x win32 command-injection remediation. On Windows the
SNMP/ping/data-query/trap commands run through cmd.exe, which ignores the \"
escape and toggles quoting on every ", so cacti_escapeshellarg cannot stop
& | ^ < > ( ).

- add cacti_escapeshellarg_cmd(), stripping those operators on win32 before
  quoting (a Unix pass-through)
- snmp_escape_string(): strip the operators in the win32 branch
- route the SNMP binary hostname, the data-query device values
  (get_script_query_path), the data-input arg builders, the Windows ping
  hostname, and the SNMP trap notification arguments through the strip

get_script_query_path is device-reachable (a rogue monitored device supplies an
SNMP index/system field that executes on the Windows poller); the rest are
post-auth.

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* fix(win32): strip %VAR% from the hostname on Windows (GHSA-rjvj-r52f-8v5q)

cmd.exe expands %VAR% even inside quotes, so a device hostname of %USERNAME%
would expand into the SNMP/ping command line. Add an opt-in $strip_env flag to
cacti_escapeshellarg_cmd() and set it for the SNMP binary and ping hostnames,
which never legitimately contain a percent. Community and credential values are
left untouched because they can legitimately contain %.

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* docs(changelog): note win32 cmd.exe hardening for develop

* security: require Package Management permission to trust new package signers

package_accept_key() (reachable via the repository-based package import flow)
inserted new keys into package_public_keys, the global trust store consulted
by import_validate_signature() for every future import by every user,
without checking for the Package Management (realm 29) permission that
gates package_keys.php/package.php/package_repos.php for the same table.
An Import Templates (realm 17) user could therefore add themselves as a
trusted signer for the whole install. Also add the 'accept' action to the
CSRF-protected bad_actions list so the acceptance step requires POST plus a
valid token like every other state-changing action.

GHSA-gxgm-8rhv-r7jv

* docs(changelog): note package-signer trust authorization fix

* security: close tab-based open redirect bypass in CSRF timeout handler

sanitize_uri()'s guard (20298c6cd) models the WHATWG rule that browsers
strip leading C0 controls/whitespace before resolving a redirect, but
Chromium separately strips an embedded tab from anywhere in the target.
A request target of /%09/evil.example passes the guard (no leading control
char, not two leading slashes) but Chromium reduces the resulting
'Location: /<TAB>/evil.example' header to a network-path reference and
navigates off-site. 1.2.x already uses validate_redirect_url() for this
same sink (3338a63e1), which resolves the URL via parse_url() and checks
host/port against the server-configured values, so it isn't bypassable this
way. Switch develop's CSRF timeout handler to match.

GHSA-c725-4jm5-9fx5

* security: authorize single-item Report actions against ownership

reports.php sets \ = true, so include/auth.php grants an
implicit guest session (when the Guest User feature is enabled) without
ever evaluating the realm 22 gate declared for this page. The single-item
action handlers reports_item_remove()/_moveup()/_movedown() relied solely
on that page-level gate and performed no independent ownership check, so an
unauthenticated guest-bound request could delete or reorder reports_items
rows belonging to any report, including ones owned by an administrator.
reports_form_actions() already gained an equivalent \
check; add the same authorization (Reports admin realm 21, or the
requesting user owns the item's report) to the three single-item handlers.

Same underlying chain as the 1.2.31 fix for reports_user.php (guest bind
removed + cacti_authorize_resource() added to reports_item_remove()); the
rewritten develop reports.php/lib/html_reports.php did not carry either
half of that fix forward.

GHSA-j5jh-fhwg-r56x

* security: authorize tree node CRUD actions against per-tree access

tree.php dispatches create_node/delete_node/move_node/rename_node/copy_node
directly to api_tree_*() with no is_tree_allowed() check, even though the
normal tree-view path already enforces that boundary. A non-admin user with
the Trees realm but no explicit grant on a given tree_id could still create,
delete, move, rename or copy nodes on that tree by calling these actions
directly, bypassing the authorization boundary enforced elsewhere.

GHSA-prxj-84qq-v5jq

* security: remove shell from Realtime RRD create and validate DS bounds

poller_realtime.php built the Realtime-graph RRD 'create' command line
(including the SNMP-sourced ifSpeed/ifHighSpeed interface speed, substituted
in verbatim as the DS maximum) and ran it through shell_exec(). A hostile or
spoofed monitored device could return an ifSpeed value such as
'1000000000\uid=197608(ladams) gid=197121 groups=197121' and get arbitrary OS command execution as the web/poller
user the next time any user with the Realtime Graphs permission (or an
unauthenticated guest, where configured) viewed a realtime graph for an
affected data source.

- lib/rrd.php: rrdtool_function_interface_speed() now casts ifHighSpeed/
  ifSpeed to int before they become the DS maximum.
- lib/rrd.php: rrdtool_function_create() now rejects any non-numeric
  rrd_minimum/rrd_maximum right before they are concatenated onto the
  rrdtool command line, forcing them to 'U' and logging instead.
- poller_realtime.php: the RRD create is now routed through the same
  shell-free rrdtool_execute()/proc_open(bypass_shell) path every other
  RRDtool invocation already uses, matching the pattern 1.2.x already uses
  for this exact call site, instead of shell_exec().

GHSA-f88m-q789-g22j

* security: authorize Report save/edit against report ownership

reports_form_save()'s update path fetched the existing report's owner from
the database but never compared it to the session user before calling
sql_save(), so any user holding only the Reports realm could overwrite
another user's report by POSTing its id. reports_edit() had the same gap on
the read side: it fetched a report by id with no ownership check, so the
same user could view any other user's report configuration (recipients,
schedule, etc.). 1.2.x already guards both call sites with
cacti_authorize_resource(..., 'reports'); develop had lost that check.

GHSA-8f5c-3h59-q7gc

* security: reject ORDER BY sort_column subquery bypass

sanitize_sql_column()'s allowlist regex kept parentheses to support the
INET_ATON(col)/NATURAL_SORT_KEY(col) sort wrappers, but that also let
MySQL subquery syntax through unchanged, since a subquery like
(SELECT(0)FROM(SELECT(SLEEP(5)))a) needs only alphanumerics and
parentheses. get_order_string() then detects the '(' and disables its
backtick quoting, so the payload reaches ORDER BY verbatim, giving any
user with realm 2-5 a blind, time-based SQL injection via sort_column.

sanitize_sql_column() now only allows '(' through when the whole value is
exactly one of the two known safe wrapper forms around a plain identifier;
anything else containing '(' -- including subquery syntax -- now falls
back to the default. Added regression tests covering the reported
subquery and REGEXP-exfiltration payloads.

GHSA-8j73-cvf6-jrvx

* security: confine Reports format_file to a bare filename

reports_form_save() wrote the POST-supplied format_file value verbatim
into reports.format_file, and reports_load_format_file() concatenated it
onto CACTI_PATH_FORMATS with no directory-component check, so a value
such as ../../../../etc/passwd escaped the formats directory and any
Reports-realm user could read arbitrary files readable by the web
server. 1.2.x already fixed the same sink (GHSA-g37j-39f4-6r4j /
CVE-2026-41884, GHSA-mjvw-mhj5-9jcj / CVE-2026-40084); develop had lost
the guard. format_file is now confined to basename() at both the save
site and the load site, with the load site additionally rejecting a
bare '.'/'..'/empty result before any file IO. Added regression tests.

GHSA-5x27-wqpm-m24v

* security: authorize Data Source enable/disable against owning device

ds_enable()/ds_disable() and the bulk drp_action enable/disable loops in
form_actions() passed a user-controlled local_data_id straight into
api_data_source_enable()/api_data_source_disable() with no object-level
authorization check, so any user holding the Sites/Devices/Data realm
could toggle the enabled state of a data source belonging to a device
outside their assigned Device Permissions.

Added data_source_authorized(\), which allows
host-independent data sources (data_local.host_id = 0) and otherwise
defers to is_device_allowed(\), and applied it to both the
single-item and bulk action paths.

GHSA-2fhv-c794-v433

* security: authorize bulk Change Data Source Profile against owning device

The bulk 'Change Data Source Profile' action (drp_action == '6') iterated
selected_items and updated data_template_data/data_template_rrd/poller_item
for each supplied local_data_id with no object-level authorization check,
so any Sites/Devices/Data realm user could retarget the RRD step/heartbeat
of a data source belonging to a device outside their assigned Device
Permissions -- the same class of gap as GHSA-2fhv, in a different bulk
action. Guarded with the data_source_authorized() helper added for that
fix. This action does not exist on 1.2.x (develop-only feature).

GHSA-fc82-w6xq-4jg7

* security: grant AllowOverride All in docker/apache.conf

The packaged docker/apache.conf granted only 'AllowOverride FileInfo
Options=FollowSymLinks' for the Cacti document root. Cacti's shipped
.htaccess deny rules (log/, cache/*, scripts/, cli/, bin/, mibs/, rra/,
contrib/, tests/) rely on 'Require all denied' (Apache 2.4, override
type AuthConfig) and/or legacy 'Order/Deny' (override type Limit),
neither of which FileInfo/Options covers, so Apache silently ignored
every one of those deny rules and served the directories over HTTP to
any unauthenticated client -- most notably log/cacti.log, which can
contain usernames, client IPs, SQL backtraces, and any secrets Cacti
logs (SNMP community strings, LDAP bind details).

AllowOverride All lets every shipped .htaccess apply as intended. Added
a regression test. docker/ does not exist on 1.2.x (develop-only).

GHSA-fxfg-j995-j69j

* docs: add security advisory / CVE policy to Copilot instructions

Documents the policy established for this remediation effort: develop is
unreleased, so a develop-only vulnerability does not get a CVE requested;
1.2.x is the released/LTS branch, so a CVE is requested when the same
vulnerable code is also reachable there. Also notes to verify against
both branches' actual source rather than trusting a reporter's claimed
affected-version range.

* fix(security): update stale test harnesses and address review findings

CI fixes:
- CsrfCheckContractProbe.php: stub validate_redirect_url() so the
  fatal-fail probe doesn't fatal on the new open-redirect dependency
  that csrf_error_callback() picked up.
- InstallerCsrfRecoveryTest.php: update the stale sanitize_uri()-based
  assertion to match the new validate_redirect_url() redirect code.
- psalm-baseline.xml: drop the TaintedHeader suppression for
  include/csrf.php now that validate_redirect_url() resolves it.

Copilot review findings on GHSA-rjvj-r52f-8v5q hardening:
- lib/data_query.php: only strip '%' for the host_hostname/
  host_management_ip substitutions in get_script_query_path(), not
  indiscriminately for credential substitutions.
- lib/functions.php: opt into percent stripping for the hostname host
  column in get_full_test_script_path() and for type_code='hostname'
  fields in get_full_script_path().
- lib/snmpagent.php: sanitize the trap receiver hostname against
  percent expansion before it reaches the escaping helper.
- tests/security/baselines/*.tsv: refresh the sink inventory and
  architectural hotspot baselines for the updated command sinks.
- tests/Unit/DataCollection/Snmp/SnmpCoverageTest.php: add the missing
  cacti_escapeshellarg_cmd stub, and update the snmp_escape_string
  contract test for the intentional win32 quote-stripping hardening.
- tests/Unit/Security/Shell/CmdMetacharHelperTest.php +
  tests/fixtures/CmdMetacharHelperWin32Probe.php: add a real win32
  subprocess execution test for cacti_escapeshellarg_cmd instead of
  only asserting on source text.
- CHANGELOG: add the pull-request reference to the new entry.

* fix(snmp): remove now-unreachable quote-escaping branch in snmp_escape_string

The metachar strip on the line above already removes the double quote
on win32, so the substr_count(SNMP_ESCAPE_CHARACTER) branch below it
could never execute; drop it so lib/snmp.php reaches 100% coverage
again.

* style: fix pre-existing php-cs-fixer blank-line drift blocking CI

data_sources.php and lib/html_reports.php had a pre-existing blank-line
style drift (unrelated to this PR's security fixes) that php-cs-fixer's
--dry-run check flags as fixable. Since "PHP 8.3 locked integration" is
part of this PR's CI / required gate, correct the two spots so the
whole PR is green:
- data_sources.php: collapse a double blank line before form_actions().
- lib/html_reports.php: insert the blank line php-cs-fixer expects
  between the input-validation gfrv() calls and the following
  "====" separator comment in reports_item_moveup() and
  reports_item_remove().

No behavior change; purely CI/style formatting.

* style: refresh phpstan baseline for pre-existing, unrelated findings

Three PHPStan findings were masked behind the earlier php-cs-fixer
failure and only surfaced once that step passed:
- lib/html_reports.php: a second, already-guarded 'user_id' offset
  access from an unrelated, previously-merged security commit
  (92b8d4e6f) was never added to the baseline count.
- cli/splice_rrd.php, poller_realtime.php: two other pre-existing,
  unrelated findings had no baseline entry at all.

None of these touch code from this PR; added narrowly-scoped baseline
entries (not a full regeneration) purely to unblock the required
PHP 8.3 locked integration check.

* fix(security): address follow-up review findings on consolidated PR

Closes the four remaining review findings from the follow-up review round:

- package_import.php: trustSigner() now POSTs with a CSRF token instead of
  $.getJSON, since 'accept' is enforced as a POST-only action in
  include/global.php's bad_actions list (GHSA-gxgm-8rhv-r7jv).

- lib/html_reports.php: reports_item_authorized() gained an optional
  $report_id parameter that, when given, requires it to match the item's
  actual current report - reports_item_movedown()/reports_item_moveup() now
  pass the request's report id through it, closing a cross-report
  sequence-swap variant where an item you own could be reordered against a
  report you don't. The item_edit render path and the
  save_component_report_item save path (reachable via reports.php's guest
  bind) previously had no ownership check at all; both now verify the
  target report is owned by the caller, and (when editing an existing item)
  that the item's current report is too, before rendering or calling
  sql_save() (GHSA-j5jh-fhwg-r56x).

- tree.php + include/global.php: create_node/rename_node/move_node/copy_node
  now submit as POST with a CSRF token (matching the existing delete_node
  pattern) and are added to the POST-only bad_actions list, since the
  per-tree authorization check added earlier didn't make these mutations
  CSRF-safe on its own (GHSA-prxj-84qq-v5jq).

Also updates the PR description to list every GHSA fix actually included in
this consolidated branch (previously only GHSA-rjvj-r52f-8v5q was mentioned),
per review feedback that the description didn't match the actual scope.

* fix: resolve CI failures on PR #8056 (docblock alignment, sink baseline)

- lib/html_reports.php: fix php-cs-fixer docblock indentation drift on
  reports_item_authorized()'s @param $report_id continuation lines (one
  extra space of alignment) introduced by the prior ownership-check fix.
- tests/security/baselines/sink_inventory.baseline.tsv: refresh to track
  the 4 new header('Location: ' . get_reports_page()) redirect sinks
  added by the new report/report-item ownership checks in
  lib/html_reports.php. Verified via
  tests/security/verify_sink_inventory.sh and confirmed
  tests/security/verify_architectural_hotspots.sh still reports no new
  hotspots.

* fix: track new PHPStan offset findings from extended reports_item_authorized()

phpstan-baseline.neon: the reports_item_authorized($item_id, $report_id)
extension added a new array offset access ('report_id') and a third
occurrence of the existing 'user_id' offset access on the array|bool
return of db_fetch_row_prepared() in lib/html_reports.php. Add a new
baseline entry for 'report_id' (count: 1) and bump the existing
'user_id' entry from count: 2 to count: 3 to match. Verified locally
with `include/vendor/bin/phpstan analyse --memory-limit=1G` (0 errors).

---------

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
Co-authored-by: Thomas Vincent <thomasvincent@gmail.com>
Co-authored-by: TheWitness <copilot@users.noreply.github.com>
2026-09-23 09:45:42 -04:00

67 KiB

1categorylocationmatch
2cmd_exec./cactid.phpexec('pgrep -a php | grep cactid.php', $output);
3cmd_exec./cli/audit_database.phpexec('php ' . CACTI_PATH_PLUGINS . '/' . $pname . '/database_upgrade.php --type=large --force-ver=' . $old, $output, $return_var);
4cmd_exec./cli/audit_database.php$db_shell = trim((string) shell_exec('which mysql'));
5cmd_exec./cli/audit_database.phpexec($cmd, $output, $error);
6cmd_exec./cli/audit_database.phpexec('php ' . CACTI_PATH_CLI . '/upgrade_database.php --debug', $output, $return_var);
7cmd_exec./cli/batchgapfix.phpexec($command, $output, $return_var);
8cmd_exec./cli/float_rrdfiles.php$response = exec($command, $output, $return);
9cmd_exec./cli/float_rrdfiles.php$response = exec($command, $output, $return);
10cmd_exec./cli/push_out_hosts.phppassthru($php_binary . ' ' . CACTI_PATH_CLI . '/rebuild_poller_cache.php ' . $parameters);
11cmd_exec./cli/remove_broken_graphs.php$stty = shell_exec('stty size');
12cmd_exec./cli/rrdresize.php$process = proc_open($path_rrdtool . ' -', $fds, $pipes);
13cmd_exec./cli/splice_rrd.php$result = exec($command, $output, $return_var);
14cmd_exec./cli/splice_rrd.php$response = shell_exec(cacti_escapeshellcmd($rrdtool));
15cmd_exec./cli/splice_rrd.phpshell_exec(cacti_escapeshellcmd($rrdtool) . ' dump ' . cacti_escapeshellarg($newrrd) . ' > ' . cacti_escapeshellarg($newxmlfile));
16cmd_exec./cli/splice_rrd.phpshell_exec(cacti_escapeshellcmd($rrdtool) . ' dump ' . cacti_escapeshellarg($oldrrd) . ' > ' . cacti_escapeshellarg($oldxmlfile));
17cmd_exec./cli/update_heartbeat.php$result = exec($command, $output, $return_code);
18cmd_exec./cmd.php$cactiphp = proc_open($command, $cactides, $pipes);
19cmd_exec./cmd_realtime.php$cactiphp = proc_open(read_config_option('path_php_binary') . ' -q ' . CACTI_PATH_BASE . '/script_server.php realtime ' . cacti_escapeshellarg($poller_id), $cactides, $pipes);
20cmd_exec./graph_realtime.phpshell_exec($php_binary . ' -q ' . $script_path . ' ' . $args);
21cmd_exec./host.phpshell_exec(cacti_escapeshellcmd((string) read_config_option('path_php_binary')) . ' -q ' . cacti_escapeshellarg(CACTI_PATH_CLI . '/poller_reindex_hosts.php') . ' --qid=all --id=' . $host_id);
22cmd_exec./lib/dsstats.php$process = proc_open($command, $fds, $pipes);
23cmd_exec./lib/functions.php$output = shell_exec($script_path);
24cmd_exec./lib/functions.php$output = shell_exec($script_path);
25cmd_exec./lib/functions.php$shell = shell_exec(cacti_escapeshellcmd(read_config_option('path_rrdtool')) . ' -v 2>&1');
26cmd_exec./lib/functions.php$shell = shell_exec(cacti_escapeshellcmd(read_config_option('path_rrdtool')) . ' -v');
27cmd_exec./lib/functions.phpshell_exec($killCmd);
28cmd_exec./lib/functions.php$cpu_cores = shell_exec('/bin/nproc');
29cmd_exec./lib/functions.php$cpu_cores = shell_exec('/usr/bin/nproc');
30cmd_exec./lib/functions.php$output = shell_exec('nproc');
31cmd_exec./lib/functions.phpexec('id -nu', $o, $r);
32cmd_exec./lib/functions.php$cpu_cores = shell_exec('sysctl -n hw.ncpu');
33cmd_exec./lib/functions.php$processExists = trim((string) shell_exec($checkProcessCmd));
34cmd_exec./lib/functions.phpexec($command_line, $out, $return_code);
35cmd_exec./lib/functions.phpreturn exec('whoami') ?: '';
36cmd_exec./lib/functions.php * On Windows, exec()/shell_exec()/popen() route through cmd.exe, which ignores
37cmd_exec./lib/installer.php$output = shell_exec(
38cmd_exec./lib/installer.php$output = shell_exec(cacti_escapeshellcmd(str_replace('\\', '/', $path)) . ' --version 2>&1');
39cmd_exec./lib/installer.php$process = proc_open(
40cmd_exec./lib/ping.php$result = shell_exec('ping -6 -W ' . ceil($this->timeout / 1000) . ' -c ' . $this->retries . ' -p ' . $pattern . ' ' . cacti_escapeshellarg_cmd($this->host['hostname'], true, true));
41cmd_exec./lib/ping.php$result = shell_exec('ping -W ' . ceil($this->timeout / 1000) . ' -c ' . $this->retries . ' -p ' . $pattern . ' ' . cacti_escapeshellarg_cmd($this->host['hostname'], true, true) . ' 2>&1');
42cmd_exec./lib/ping.php$result = shell_exec('ping -t ' . ceil($this->timeout / 1000) . ' -c ' . $this->retries . ' ' . cacti_escapeshellarg_cmd($this->host['hostname'], true, true));
43cmd_exec./lib/ping.php$result = shell_exec('ping6 -t ' . ceil($this->timeout / 1000) . ' -c ' . $this->retries . ' ' . cacti_escapeshellarg_cmd($this->host['hostname'], true, true));
44cmd_exec./lib/ping.php$result = shell_exec('chcp 437 && ping -w ' . $this->timeout . ' -n ' . $this->retries . ' ' . cacti_escapeshellarg_cmd($this->host['hostname'], true, true));
45cmd_exec./lib/ping.php$result = shell_exec('ping ' . cacti_escapeshellarg_cmd($this->host['hostname'], true, true));
46cmd_exec./lib/ping.php$result = shell_exec('ping -i ' . ceil($this->timeout / 1000) . ' -c ' . $this->retries . ' ' . cacti_escapeshellarg_cmd($this->host['hostname'], true, true));
47cmd_exec./lib/ping.php$result = shell_exec('ping -m ' . ceil($this->timeout / 1000) . ' -n ' . $this->retries . ' ' . cacti_escapeshellarg_cmd($this->host['hostname'], true, true));
48cmd_exec./lib/ping.php$result = shell_exec('ping -t ' . ceil($this->timeout / 1000) . ' -c ' . $this->retries . ' ' . cacti_escapeshellarg_cmd($this->host['hostname'], true, true));
49cmd_exec./lib/ping.php$result = shell_exec('ping -t ' . ceil($this->timeout / 1000) . ' -c ' . $this->retries . ' ' . cacti_escapeshellarg_cmd($this->host['hostname'], true, true));
50cmd_exec./lib/ping.php$result = shell_exec('ping -w ' . ceil($this->timeout / 1000) . ' -c ' . $this->retries . ' ' . cacti_escapeshellarg_cmd($this->host['hostname'], true, true));
51cmd_exec./lib/ping.php$result = shell_exec(cacti_escapeshellarg($fping) . ' -q -t ' . $this->timeout . ' -c 1 -r ' . $this->retries . ' ' . cacti_escapeshellarg_cmd($this->host['hostname'], true, true) . ' 2>&1');
52cmd_exec./lib/poller.php$output = system($php_path . ' -l ' . $tmpfile, $exit);
53cmd_exec./lib/poller.php$fp = popen($command, 'r');
54cmd_exec./lib/poller.php$fp = popen($command, 'rb');
55cmd_exec./lib/poller.phpexec($filename . ' ' . $args . ' ' . $redirect_args . ' &');
56cmd_exec./lib/poller.phpexec($filename . ' ' . $args . ' > /dev/null 2>&1 &');
57cmd_exec./lib/poller.php$output = shell_exec($command);
58cmd_exec./lib/poller.php$setsid_path = trim(shell_exec('which setsid 2>/dev/null') ?? '');
59cmd_exec./lib/poller.php$process = @proc_open($command, $descriptors, $pipes, null, null, ['bypass_shell' => true]);
60cmd_exec./lib/poller.php$process = proc_open('exec ' . $cmd_full, $descriptors, $pipes);
61cmd_exec./lib/poller.php * of the proc_open() and proc_close() functions (php 4.3+)
62cmd_exec./lib/poller.php * @param array $pipes The array of r/w pipes returned from proc_open()
63cmd_exec./lib/poller.php * @param mixed $proc_fd The file descriptor returned from proc_open()
64cmd_exec./lib/rrd.php$process = proc_open([$path, '-'], $descriptors, $pipes, null, null, ['bypass_shell' => true]);
65cmd_exec./lib/rrdcheck.php$process = proc_open($command, $fds, $pipes);
66cmd_exec./lib/snmp.php// exec() does not capture, so the walk output can never contain either.
67cmd_exec./lib/snmp.phpexec($command, $snmp_value, $return_var);
68cmd_exec./lib/snmp.phpexec($command, $snmp_value, $return_var);
69cmd_exec./lib/snmp.phpexec($command, $snmp_value, $return_var);
70cmd_exec./lib/snmpagent.php// add pollers of a distributed system (future)
71cmd_exec./lib/spikekill.php$dump_output = shell_exec(cacti_escapeshellcmd(read_config_option('path_rrdtool')) . ' dump ' . cacti_escapeshellarg($this->rrdfile) . ' 2>&1 > ' . cacti_escapeshellarg($xmlfile));
72cmd_exec./lib/spikekill.php$response = shell_exec(cacti_escapeshellcmd(read_config_option('path_rrdtool')) . ' restore -f -r ' . cacti_escapeshellarg($xmlfile) . ' ' . cacti_escapeshellarg($rrdfile));
73cmd_exec./lib/utility.php$nproc = system('nproc');
74cmd_exec./lib/utility.phpexec('/usr/bin/free', $output, $exit_code);
75cmd_exec./lib/utility.phpexec('wmic os get FreePhysicalMemory', $memInfo['FreePhysicalMemory']);
76cmd_exec./lib/utility.phpexec('wmic os get FreeSpaceInPagingFiles', $memInfo['FreeSpaceInPagingFiles']);
77cmd_exec./lib/utility.phpexec('wmic os get FreeVirtualMemory', $memInfo['FreeVirtualMemory']);
78cmd_exec./lib/utility.phpexec('wmic os get SizeStoredInPagingFiles', $memInfo['SizeStoredInPagingFiles']);
79cmd_exec./lib/utility.phpexec('wmic os get TotalVirtualMemorySize', $memInfo['TotalVirtualMemorySize']);
80cmd_exec./lib/utility.phpexec('wmic os get TotalVisibleMemorySize', $memInfo['TotalVisibleMemorySize']);
81cmd_exec./lib/utility.php$json = shell_exec($php . ' -q ' . $php_file);
82cmd_exec./lib/utility.php$json = shell_exec($php . ' -q ' . $php_file);
83cmd_exec./lib/utility.php$json = shell_exec($php . ' -q ' . $php_file);
84cmd_exec./poller_spikekill.php$response = exec(cacti_escapeshellcmd((string) read_config_option('path_php_binary')) . ' -q ' .
85cmd_exec./remote_agent.php$cactiphp = proc_open(read_config_option('path_php_binary') . ' -q ' . CACTI_PATH_BASE . '/script_server.php realtime ' . cacti_escapeshellarg($poller_id), $cactides, $pipes);
86cmd_exec./scripts/sql.php$sql = shell_exec($cmd);
87cmd_exec./scripts/ss_netsnmp_lmsensors.php$virtual = intval(shell_exec('/usr/bin/hostnamectl 2> /dev/null | grep -i virtual | wc -l'));
88cmd_exec./scripts/ss_sql.php$result = shell_exec($cmd) ?? '';
89cmd_exec./snmpagent_mibcache.phpexec($php . ' ' . $extra_args . ' > /dev/null &');
90cmd_exec./snmpagent_persist.phpexec($php . ' ' . $extra_args . ' > /dev/null &');
91cmd_exec./support.php$out = shell_exec(cacti_escapeshellarg($path) . ' ' . $arg . ' 2>&1');
92cmd_exec./support.phpprint '<td>' . tech_env_status(DB_STATUS_WARNING, __('Version unavailable: shell_exec() is disabled')) . '</td>';
93cmd_exec./support.phpexec(cacti_escapeshellcmd(read_config_option('path_rrdtool')), $out_array);
94cmd_exec./support.php$cli_json = shell_exec(cacti_escapeshellcmd($php_binary) . ' -q ' . cacti_escapeshellarg(CACTI_PATH_INSTALL . '/cli_check.php') . ' extensions');
95cmd_exec./support.php$snmp_version = (string) shell_exec(cacti_escapeshellcmd($snmpget_path) . ' -V 2>&1');
96cmd_exec./support.phpexec(cacti_escapeshellcmd(read_config_option('path_spine')) . ' --version', $out_array);
97deserialize./lib/functions.php$items = unserialize($unstripped, ['allowed_classes' => false]);
98deserialize./lib/functions.php$items = unserialize($unstripped, ['allowed_classes' => false]);
99deserialize./lib/functions.phpreturn unserialize($strobj, ['allowed_classes' => false]);
100deserialize./lib/reports.php$items = unserialize($unstripped, ['allowed_classes' => false]);
101dynamic_include./cli/audit_database.phprequire_once($plugin . '/includes/database.php');
102dynamic_include./cli/audit_database.phprequire_once($plugin . '/setup.php');
103dynamic_include./cli/upgrade_database.phpinclude($upgrade_file);
104dynamic_include./include/global.phprequire_once($vendor_autoload);
105dynamic_include./include/global_languages.phprequire_once($providerFull);
106dynamic_include./index.phprequire_once($file);
107dynamic_include./lib/installer.phpinclude_once($upgrade_file);
108dynamic_include./lib/plugins.phpinclude_once($full_path);
109dynamic_include./lib/plugins.phprequire_once($setup_file);
110dynamic_include./lib/renderer.phpinclude $__cacti_template_file;
111dynamic_include./lib/rrd.phpinclude($rrdtheme);
112dynamic_include./lib/rrd.phpinclude($themefile);
113dynamic_include./link.phprequire_once($file);
114dynamic_include./plugins.phprequire_once($setup_file);
115dynamic_include./reports.phprequire_once($reportit_api);
116dynamic_include./script_server.phprequire_once($include_file);
117dynamic_include./scripts/ss_mikrotik_snmpget.phpinclude_once($config['base_path'] . '/lib/snmp.php');
118dynamic_include./scripts/ss_netsnmp_lmsensors.phpinclude($config['base_path'] . '/lib/snmp.php');
119dynamic_include./snmpagent_persist.phprequire($path_mibcache);
120fs_write./cactid.php$STDERR = fopen('/dev/null', 'wb');
121fs_write./cactid.php$STDERR = fopen('null', 'wb');
122fs_write./cli/audit_database.phpif (file_put_contents($path, $contents) === false) {
123fs_write./cli/clone_device_template.php$fin = fopen('php://stdin', 'r');
124fs_write./cli/float_rrdfiles.php$lf = fopen(sys_get_temp_dir() . '/cacti_float_rrdfiles.log', 'a');
125fs_write./cli/float_rrdfiles.php$fp = fopen($tmp_file, 'w');
126fs_write./cli/import_package.php$fp = fopen($filename, 'r');
127fs_write./cli/import_template.php$fp = fopen($filename,'r');
128fs_write./cli/input_whitelist.php$filesystem->writeFile($config['input_whitelist'], json_encode($input));
129fs_write./cli/md5sum.php$filesystem->writeFile($md5_file, $output);
130fs_write./cli/rrdresize.phpif (!file_put_contents($tmp_xml_file, $rrd_new_header . $rrd_new_body . '</rrd>')) {
131fs_write./cli/rrdresize.php$log_handle = fopen($tmp_backup_folder . 'tmp_rrdresize.log', 'w');
132fs_write./cli/splice_rrd.phpif (($f = @fopen($path, 'a'))) {
133fs_write./cli/splice_rrd.phpif (($f = @fopen($path, 'w'))) {
134fs_write./cli/splice_rrd.phpreturn file_put_contents($xmlfile, $output);
135fs_write./cli/splice_rrd.phpfile_put_contents($newxmlfile, $new_xml);
136fs_write./host.php$stdout = fopen('php://output', 'w');
137fs_write./include/csrf.php$fh = fopen($file, 'w');
138fs_write./include/csrf.php$fh = @fopen($path, 'a');
139fs_write./include/csrf.php$fh = @fopen($path, 'w');
140fs_write./include/global_languages.phpfile_put_contents($config['i18n_log'], $text . $eol, $mode);
141fs_write./include/global_languages.phpfile_put_contents($config['i18n_text_log'], $text . $eol, $mode);
142fs_write./include/themes/midwinter/update_hash.phpfile_put_contents($cssFile, $fileUpdated);
143fs_write./install/functions.php$fp = fopen($config_file, 'w');
144fs_write./install/functions.php$fh = fopen($file, 'w');
145fs_write./install/functions.phpfile_put_contents($cacheFile, '<[version]> ' . $cacti_upgrade_version . ' <[status]> ' . $status . ' <[sql]> ' . clean_up_lines($sql) . ' <[error]> ' . $database_last_error . PHP_EOL, FILE_APPEND);
146fs_write./install/functions.phpfile_put_contents(CACTI_PATH_LOG . '/' . $logfile . '.log', sprintf($format_log1, $day, $time, $levelname, $data, PHP_EOL), $flags);
147fs_write./install/functions.phpfile_put_contents(CACTI_PATH_LOG . '/install-complete.log', sprintf($format_log2, $day, $time, $sectionname, $levelname, $data, PHP_EOL), $flags);
148fs_write./lib/CactiFilesystem.php$this->filesystem->dumpFile($filename, $content);
149fs_write./lib/CactiFilesystem.phpself::default()->writeFile($filename, $content);
150fs_write./lib/api_device.phpif (file_put_contents($new_xmlfile, $data) === false) {
151fs_write./lib/boost.phpif ($fileptr = fopen($cache_file, 'rb')) {
152fs_write./lib/boost.php$fileptr = fopen($temp_file, 'wb');
153fs_write./lib/clog_webapi.php$log_fh = fopen($logfile, 'w');
154fs_write./lib/csp_report_endpoint.php$inputStream = fopen('php://input', 'rb');
155fs_write./lib/database.phpfile_put_contents(sys_get_temp_dir() . '/cacti-option.log',
156fs_write./lib/database.phpfile_put_contents(sys_get_temp_dir() . '/cacti-option.log',
157fs_write./lib/database.phpfile_put_contents(sys_get_temp_dir() . '/cacti-sql.log', get_debug_prefix() . $line, FILE_APPEND);
158fs_write./lib/functions.phpfile_put_contents(sys_get_temp_dir() . '/cacti-option.log', get_debug_prefix() .
159fs_write./lib/functions.phpfile_put_contents($tmp_file, 'cacti');
160fs_write./lib/functions.phpfile_put_contents(sys_get_temp_dir() . '/cacti-option.log', get_debug_prefix() .
161fs_write./lib/functions.php$fp = @fopen($logfile, 'a');
162fs_write./lib/functions.phpif ($f = @fopen($path, 'a')) {
163fs_write./lib/functions.phpif ($f = @fopen($path, 'w')) {
164fs_write./lib/functions.php$f = fopen($file, 'r');
165fs_write./lib/functions.php$fp = fopen($file_name, 'r');
166fs_write./lib/import.php$file = fopen($filename, 'wb');
167fs_write./lib/import.php$f = fopen($filename, 'r');
168fs_write./lib/installer.php$file = fopen($cacheFile, 'r');
169fs_write./lib/package.phpfile_put_contents($xmlfile, $template);
170fs_write./lib/plugins.phpfile_put_contents($restore_path . '/' . $basefile, $output);
171fs_write./lib/plugins.php$fh = fopen($file, 'w');
172fs_write./lib/plugins.phpfile_put_contents($tmpfile, $file_data);
173fs_write./lib/poller.phpfile_put_contents($mypath, $contents);
174fs_write./lib/poller.phpif (file_put_contents($tmpfile, $contents) !== false) {
175fs_write./lib/poller.phpfile_put_contents($mypath, $contents);
176fs_write./lib/rrd.php$written = file_put_contents($temporary, $contents, LOCK_EX);
177fs_write./lib/spikekill.phpreturn file_put_contents($xmlfile, $output);
178fs_write./package_import.phpfile_put_contents($xmlfile, $data);
179fs_write./package_import.phpfile_put_contents($xmlfile, $data);
180fs_write./package_import.phpfile_put_contents($xmlfile, $data);
181fs_write./package_import.phpfile_put_contents($xmlfile, $data);
182fs_write./package_import.phpfile_put_contents($xmlfile, $_SESSION['sess_import_package']);
183fs_write./package_import.phpfile_put_contents($xmlfile, $data);
184fs_write./package_import.phpfile_put_contents($xmlfile, $_SESSION['sess_import_package']);
185fs_write./package_import.phpfile_put_contents($xmlfile, $_SESSION['sess_import_package']);
186fs_write./package_import.phpfile_put_contents($xmlfile, $_SESSION['sess_import_package']);
187fs_write./script_server.phpdefine('STDIN', fopen('php://stdin', 'r'));
188fs_write./script_server.phpdefine('STDOUT', fopen('php://stdout', 'w'));
189fs_write./snmpagent_mibcachechild.phpfile_put_contents($path_mibcache, '<?php $cache = ' . var_export($cache, true) . ';', LOCK_EX);
190fs_write./snmpagent_mibcachechild.php$lock = fopen($path_mibcache_lock, 'w');
191fs_write./support.php$fp = @fopen($file, 'rb');
192fs_write./templates_import.php$fp = fopen($_FILES['import_file']['tmp_name'],'r');
193fs_write./utilities.php$log_fh = fopen($logfile, 'w');
194header_redirect./aggregate_graphs.phpheader('Location: aggregate_graphs.php');
195header_redirect./aggregate_graphs.phpheader('Location: aggregate_graphs.php');
196header_redirect./aggregate_graphs.phpheader('Location: aggregate_graphs.php');
197header_redirect./aggregate_graphs.phpheader('Location: aggregate_graphs.php');
198header_redirect./aggregate_graphs.phpheader('Location: aggregate_graphs.php');
199header_redirect./aggregate_graphs.phpheader('Location: aggregate_graphs.php?action=edit&tab=items&id=' . $local_graph_id);
200header_redirect./aggregate_graphs.phpheader('Location: aggregate_graphs.php?action=edit&tab=items&id=' . $local_graph_id);
201header_redirect./aggregate_graphs.phpheader('Location: ' . CACTI_PATH_URL . 'aggregate_graphs.php?action=edit&id=' . gfrv('local_graph_id'));
202header_redirect./aggregate_graphs.phpheader('Location: ' . CACTI_PATH_URL . 'aggregate_graphs.php?action=item_edit&graph_template_item_id=' . ($graph_template_item_id === null ? gfrv('graph_template_item_id') : $graph_template_item_id) . '&id=' . gfrv('local_graph_id'));
203header_redirect./aggregate_graphs.phpheader('Location: aggregate_graphs.php?action=edit&id=' . $local_graph_id);
204header_redirect./aggregate_graphs.phpheader('Location: aggregate_graphs.php?action=edit&id=' . $local_graph_id);
205header_redirect./aggregate_graphs.phpheader('Location: ' . $referer);
206header_redirect./aggregate_graphs.phpheader('Location: ' . CACTI_PATH_URL . $location_failure);
207header_redirect./aggregate_graphs.phpheader('Location: ' . CACTI_PATH_URL . $location_success);
208header_redirect./aggregate_graphs.phpheader('Location: aggregate_graphs.php');
209header_redirect./aggregate_graphs.phpheader('Location: aggregate_graphs.php?action=edit&id=' . $local_graph_id);
210header_redirect./aggregate_graphs.phpheader('Location: aggregate_graphs.php?action=edit&id=' . gfrv('id'));
211header_redirect./aggregate_graphs.phpheader('Location: aggregate_graphs.php?action=edit&id=' . gfrv('local_graph_id'));
212header_redirect./aggregate_graphs.phpheader('Location: aggregate_graphs.php?action=edit&id=' . gfrv('local_graph_id'));
213header_redirect./aggregate_graphs.phpheader('Location: aggregate_graphs.php?action=edit&id=' . gfrv('local_graph_id'));
214header_redirect./aggregate_templates.phpheader('Location: aggregate_templates.php');
215header_redirect./aggregate_templates.phpheader('Location: aggregate_templates.php?action=edit&id=' . gnrv('id'));
216header_redirect./aggregate_templates.phpheader('Location: aggregate_templates.php?action=edit&id=' . gnrv('id'));
217header_redirect./aggregate_templates.phpheader('Location: aggregate_templates.php?action=edit&id=' . gnrv('id'));
218header_redirect./aggregate_templates.phpheader('Location: aggregate_templates.php?action=edit&id=' . $id);
219header_redirect./auth_2fa.phpheader('Location: logout.php');
220header_redirect./auth_changepassword.phpheader('Location: logout.php');
221header_redirect./auth_changepassword.phpheader('Location:index.php');
222header_redirect./auth_changepassword.phpheader('Location: graph_view.php');
223header_redirect./auth_profile.phpheader('Location: auth_profile.php' . $tab);
224header_redirect./auth_resetpassword.phpheader('Location: index.php');
225header_redirect./automation_devices.phpheader('Location: automation_devices.php');
226header_redirect./automation_devices.phpheader('Location: automation_devices.php');
227header_redirect./automation_graph_rules.phpheader('Location: automation_graph_rules.php?header=false&action=edit&id=' . grv('id'));
228header_redirect./automation_graph_rules.phpheader('Location: automation_graph_rules.php?action=edit&id=' . grv('id') . '&rule_type=' . AUTOMATION_RULE_TYPE_GRAPH_ACTION);
229header_redirect./automation_graph_rules.phpheader('Location: automation_graph_rules.php?action=edit&id=' . grv('id') . '&rule_type=' . AUTOMATION_RULE_TYPE_GRAPH_MATCH);
230header_redirect./automation_graph_rules.phpheader('Location: automation_graph_rules.php?action=item_edit&id=' . grv('id') . '&item_id=' . ($item_id === null ? grv('item_id') : $item_id) . '&rule_type=' . AUTOMATION_RULE_TYPE_GRAPH_ACTION);
231header_redirect./automation_graph_rules.phpheader('Location: automation_graph_rules.php?action=item_edit&id=' . grv('id') . '&item_id=' . ($item_id === null ? grv('item_id') : $item_id) . '&rule_type=' . AUTOMATION_RULE_TYPE_GRAPH_MATCH);
232header_redirect./automation_graph_rules.phpheader('Location: automation_graph_rules.php?header=false&action=edit&id=' . grv('id') . '&rule_type=' . AUTOMATION_RULE_TYPE_GRAPH_ACTION);
233header_redirect./automation_graph_rules.phpheader('Location: automation_graph_rules.php');
234header_redirect./automation_graph_rules.phpheader('Location: automation_graph_rules.php');
235header_redirect./automation_graph_rules.phpheader('Location: automation_graph_rules.php');
236header_redirect./automation_graph_rules.phpheader('Location: automation_graph_rules.php');
237header_redirect./automation_graph_rules.phpheader('Location: automation_graph_rules.php?action=edit&id=' . (empty($rule_id) ? gnrv('id') : $rule_id));
238header_redirect./automation_graph_rules.phpheader('Location: automation_graph_rules.php?action=edit&id=' . gfrv('id'));
239header_redirect./automation_graph_rules.phpheader('Location: automation_graph_rules.php?action=edit&id=' . gfrv('id'));
240header_redirect./automation_graph_rules.phpheader('Location: automation_graph_rules.php?action=edit&id=' . gfrv('id'));
241header_redirect./automation_graph_rules.phpheader('Location: automation_graph_rules.php?action=edit&name=' . grv('name') . '&id=' . gfrv('id') . '&snmp_query_id=' . grv('snmp_query_id'));
242header_redirect./automation_graph_rules.phpheader('Location: automation_graph_rules.php?action=import');
243header_redirect./automation_networks.phpheader('Location: automation_networks.php');
244header_redirect./automation_networks.phpheader('Location: automation_networks.php?action=edit&id=' . (empty($network_id) ? gnrv('id') : $network_id));
245header_redirect./automation_networks.phpheader('Location: automation_networks.php?action=import');
246header_redirect./automation_snmp.phpheader('Location: automation_snmp.php?action=edit&id=' . gnrv('id'));
247header_redirect./automation_snmp.phpheader('Location: automation_snmp.php?action=item_edit&id=' . gnrv('id') . '&item_id=' . ($item_id === null ? gfrv('id') : $item_id));
248header_redirect./automation_snmp.phpheader('Location: automation_snmp.php');
249header_redirect./automation_snmp.phpheader('Location: automation_snmp.php');
250header_redirect./automation_snmp.phpheader('Location: automation_snmp.php?action=edit&id=' . (empty($id) ? gnrv('id') : $id));
251header_redirect./automation_snmp.phpheader('Location: automation_snmp.php?action=edit&id=' . grv('id'));
252header_redirect./automation_snmp.phpheader('Location: automation_snmp.php?action=edit&id=' . grv('id'));
253header_redirect./automation_snmp.phpheader('Location: automation_snmp.php?action=edit&id=' . grv('id'));
254header_redirect./automation_snmp.phpheader('Location: automation_snmp.php?action=edit&id=' . grv('id'));
255header_redirect./automation_snmp.phpheader('Location: automation_snmp.php?action=import');
256header_redirect./automation_templates.phpheader('Location: automation_templates.php');
257header_redirect./automation_templates.phpheader('Location: automation_templates.php?id=' . (empty($template_id) ? gnrv('id') : $template_id));
258header_redirect./automation_templates.phpheader('Location: automation_templates.php');
259header_redirect./automation_templates.phpheader('Location: automation_templates.php');
260header_redirect./automation_templates.phpheader('Location: automation_templates.php');
261header_redirect./automation_templates.phpheader('Location: automation_templates.php');
262header_redirect./automation_templates.phpheader('Location: automation_templates.php?action=edit&id=' . gfrv('id'));
263header_redirect./automation_templates.phpheader('Location: automation_templates.php?action=edit&id=' . gfrv('template_id'));
264header_redirect./automation_templates.phpheader('Location: automation_templates.php?action=edit&id=' . gfrv('template_id'));
265header_redirect./automation_templates.phpheader('Location: automation_templates.php?action=edit&id=' . gfrv('template_id'));
266header_redirect./automation_templates.phpheader('Location: automation_templates.php?action=edit&id=' . gfrv('template_id'));
267header_redirect./automation_templates.phpheader('Location: automation_templates.php?action=edit&id=' . gfrv('template_id'));
268header_redirect./automation_templates.phpheader('Location: automation_templates.php?action=edit&id=' . gfrv('template_id'));
269header_redirect./automation_templates.phpheader('Location: automation_templates.php?action=edit&id=' . gfrv('template_id'));
270header_redirect./automation_templates.phpheader('Location: automation_templates.php');
271header_redirect./automation_templates.phpheader('Location: automation_templates.php?action=edit&id=' . $template_id);
272header_redirect./automation_templates.phpheader('Location: automation_templates.php?action=edit&id=' . grv('id'));
273header_redirect./automation_templates.phpheader('Location: automation_templates.php?action=edit&id=' . grv('id'));
274header_redirect./automation_templates.phpheader('Location: automation_templates.php?action=import');
275header_redirect./automation_tree_rules.phpheader('Location: automation_tree_rules.php?header=false&action=edit&id=' . get_request_var('id'));
276header_redirect./automation_tree_rules.phpheader('Location: automation_tree_rules.php?action=edit&id=' . grv('id') . '&rule_type=' . AUTOMATION_RULE_TYPE_TREE_ACTION);
277header_redirect./automation_tree_rules.phpheader('Location: automation_tree_rules.php?action=edit&id=' . grv('id') . '&rule_type=' . AUTOMATION_RULE_TYPE_TREE_MATCH);
278header_redirect./automation_tree_rules.phpheader('Location: automation_tree_rules.php?action=item_edit&id=' . grv('id') . '&item_id=' . ($automation_graph_rule_item_id === null ? grv('item_id') : $automation_graph_rule_item_id) . '&rule_type=' . AUTOMATION_RULE_TYPE_TREE_ACTION);
279header_redirect./automation_tree_rules.phpheader('Location: automation_tree_rules.php?action=item_edit&id=' . grv('id') . '&item_id=' . grv('item_id') . '&rule_type=' . AUTOMATION_RULE_TYPE_TREE_MATCH);
280header_redirect./automation_tree_rules.phpheader('Location: automation_tree_rules.php?header=false&action=item_edit&id=' . grv('id') . '&item_id=' . grv('item_id') . '&rule_type=' . AUTOMATION_RULE_TYPE_TREE_MATCH);
281header_redirect./automation_tree_rules.phpheader('Location: automation_tree_rules.php');
282header_redirect./automation_tree_rules.phpheader('Location: automation_tree_rules.php');
283header_redirect./automation_tree_rules.phpheader('Location: automation_tree_rules.php');
284header_redirect./automation_tree_rules.phpheader('Location: automation_tree_rules.php');
285header_redirect./automation_tree_rules.phpheader('Location: automation_tree_rules.php?action=edit&id=' . (empty($rule_id) ? grv('id') : $rule_id));
286header_redirect./automation_tree_rules.phpheader('Location: automation_tree_rules.php?action=edit&id=' . grv('id'));
287header_redirect./automation_tree_rules.phpheader('Location: automation_tree_rules.php?action=edit&id=' . grv('id'));
288header_redirect./automation_tree_rules.phpheader('Location: automation_tree_rules.php?action=edit&id=' . grv('id'));
289header_redirect./automation_tree_rules.phpheader('Location: automation_tree_rules.php?action=edit&id=' . grv('id'));
290header_redirect./automation_tree_rules.phpheader('Location: automation_tree_rules.php?action=import');
291header_redirect./cache/boost/index.phpheader('Location:../index.php');
292header_redirect./cache/index.phpheader('Location:../index.php');
293header_redirect./cache/mibcache/index.phpheader('Location:../../index.php');
294header_redirect./cache/realtime/index.phpheader('Location:../index.php');
295header_redirect./cache/spikekill/index.phpheader('Location:../index.php');
296header_redirect./cdef.phpheader('Location: cdef.php?action=edit&id=' . gnrv('cdef_id'));
297header_redirect./cdef.phpheader('Location: cdef.php?action=item_edit&cdef_id=' . gnrv('cdef_id') . '&id=' . ($cdef_item_id === null ? gnrv('id') : $cdef_item_id));
298header_redirect./cdef.phpheader('Location: cdef.php');
299header_redirect./cdef.phpheader('Location: cdef.php?action=edit&id=' . (empty($cdef_id) ? gnrv('id') : $cdef_id));
300header_redirect./cdef.phpheader('Location: cdef.php?action=edit&id=' . grv('cdef_id'));
301header_redirect./cdef.phpheader('Location: cdef.php?action=edit&id=' . grv('cdef_id'));
302header_redirect./cdef.phpheader('Location: cdef.php?action=edit&id=' . grv('cdef_id'));
303header_redirect./cdef.phpheader('Location: cdef.php?action=edit&id=' . grv('id'));
304header_redirect./cli/index.phpheader('Location:../index.php');
305header_redirect./clog.phpheader('Location: logout.php?action=remote');
306header_redirect./clog.phpheader('Location: permission_denied.php');
307header_redirect./clog_user.phpheader('Location: logout.php?action=remote');
308header_redirect./clog_user.phpheader('Location: permission_denied.php');
309header_redirect./color.phpheader('Location: color.php?action=import');
310header_redirect./color.phpheader('Location: color.php');
311header_redirect./color.phpheader('Location: color.php?action=edit&id=' . (empty($color_id) ? gnrv('id') : $color_id));
312header_redirect./color.phpheader('Location: color.php?action=import');
313header_redirect./color.phpheader('Location: color.php');
314header_redirect./color_templates.phpheader('Location: color_templates.php?action=item_edit&color_template_item_id=' . ($color_template_item_id === null ? gnrv('color_template_item_id') : $color_template_item_id) . '&color_template_id=' . gnrv('color_template_id'));
315header_redirect./color_templates.phpheader('Location: color_templates.php?action=template_edit&color_template_id=' . gnrv('color_template_id'));
316header_redirect./color_templates.phpheader('Location: color_templates.php');
317header_redirect./color_templates.phpheader('Location: color_templates.php?action=template_edit&color_template_id=' . ($color_template_id === null ? gfrv('color_template_id') : $color_template_id));
318header_redirect./color_templates.phpheader('Location: color_templates.php?action=template_edit&color_template_id=' . grv('color_template_id'));
319header_redirect./color_templates.phpheader('Location: color_templates.php?action=template_edit&color_template_id=' . grv('color_template_id'));
320header_redirect./color_templates.phpheader('Location: color_templates.php?action=template_edit&color_template_id=' . grv('id'));
321header_redirect./color_templates.phpheader('Location: color_templates.php?action=template_edit&color_template_id=' . grv('id'));
322header_redirect./contrib/index.phpheader('Location:../index.php');
323header_redirect./data_debug.phpheader('Location: data_debug.php?debug=-1');
324header_redirect./data_debug.phpheader('Location: data_debug.php?debug=1');
325header_redirect./data_debug.phpheader('Location: data_debug.php?action=view&id=' . gfrv('id'));
326header_redirect./data_debug.phpheader('Location: data_debug.php?action=view&id=' . gfrv('id'));
327header_redirect./data_input.phpheader('Location: data_input.php');
328header_redirect./data_input.phpheader('Location: data_input.php?action=edit&id=' . grv('data_input_id'));
329header_redirect./data_input.phpheader('Location: data_input.php?action=field_edit&data_input_id=' . grv('data_input_id') . '&id=' . ($data_input_field_id === null ? grv('id') : $data_input_field_id) . (!ierv('input_output') ? '&type=' . grv('input_output') : ''));
330header_redirect./data_input.phpheader('Location: data_input.php');
331header_redirect./data_input.phpheader('Location: data_input.php?action=edit&id=' . (empty($data_input_id) ? gnrv('id') : $data_input_id));
332header_redirect./data_input.phpheader('Location: data_input.php?action=edit&id=' . gfrv('data_input_id'));
333header_redirect./data_input.phpheader('Location: data_input.php?action=edit&id=' . gfrv('data_input_id'));
334header_redirect./data_queries.phpheader('Location: data_queries.php?action=item_edit&id=' . grv('id') . '&snmp_query_id=' . grv('snmp_query_id'));
335header_redirect./data_queries.phpheader('Location: data_queries.php?action=item_edit&id=' . grv('id') . '&snmp_query_id=' . grv('snmp_query_id'));
336header_redirect./data_queries.phpheader('Location: data_queries.php');
337header_redirect./data_queries.phpheader('Location: data_queries.php?action=item_edit&id=' . grv('id') . '&snmp_query_id=' . grv('snmp_query_id'));
338header_redirect./data_queries.phpheader('Location: data_queries.php?action=item_edit&id=' . grv('id') . '&snmp_query_id=' . grv('snmp_query_id'));
339header_redirect./data_queries.phpheader('Location: data_queries.php?action=item_edit&id=' . grv('id') . '&snmp_query_id=' . grv('snmp_query_id'));
340header_redirect./data_queries.phpheader('Location: data_queries.php');
341header_redirect./data_queries.phpheader('Location: data_queries.php?action=edit&id=' . (empty($snmp_query_id) ? grv('id') : $snmp_query_id));
342header_redirect./data_queries.phpheader('Location: data_queries.php?action=edit&id=' . gfrv('snmp_query_id'));
343header_redirect./data_queries.phpheader('Location: data_queries.php?action=item_edit&id=' . (empty($snmp_query_graph_id) ? grv('id') : $snmp_query_graph_id) . '&snmp_query_id=' . grv('snmp_query_id'));
344header_redirect./data_queries.phpheader('Location: data_queries.php?action=item_edit&id=' . gfrv('snmp_query_graph_id') . '&snmp_query_id=' . gfrv('snmp_query_id'));
345header_redirect./data_queries.phpheader('Location: data_queries.php?action=item_edit&id=' . gfrv('snmp_query_graph_id') . '&snmp_query_id=' . gfrv('snmp_query_id'));
346header_redirect./data_queries.phpheader('Location: data_queries.php?action=item_edit&id=' . gfrv('snmp_query_graph_id') . '&snmp_query_id=' . gfrv('snmp_query_id'));
347header_redirect./data_queries.phpheader('Location: data_queries.php?action=item_edit&id=' . gfrv('snmp_query_graph_id') . '&snmp_query_id=' . gfrv('snmp_query_id'));
348header_redirect./data_queries.phpheader('Location: data_queries.php?action=item_edit&id=' . gfrv('snmp_query_graph_id') . '&snmp_query_id=' . gfrv('snmp_query_id'));
349header_redirect./data_queries.phpheader('Location: data_queries.php?action=item_edit&id=' . gfrv('snmp_query_graph_id') . '&snmp_query_id=' . gfrv('snmp_query_id'));
350header_redirect./data_queries.phpheader('Location: data_queries.php?action=item_edit&id=' . grv('id') . '&snmp_query_id=' . grv('snmp_query_id'));
351header_redirect./data_source_profiles.phpheader('Location: data_source_profiles.php?action=edit&id=' . grv('profile_id'));
352header_redirect./data_source_profiles.phpheader('Location: data_source_profiles.php?action=item_edit&profile_id=' . grv('profile_id') . '&id=' . ($profile_rra_id === null ? grv('id') : $profile_rra_id));
353header_redirect./data_source_profiles.phpheader('Location: data_source_profiles.php');
354header_redirect./data_source_profiles.phpheader('Location: data_source_profiles.php?action=edit&id=' . (empty($profile_id) ? grv('id') : $profile_id));
355header_redirect./data_source_profiles.phpheader('Location: data_source_profiles.php?action=import');
356header_redirect./data_sources.phpheader('Location: data_sources.php?action=ds_edit&id=' . (empty($local_data_id) ? gfrv('local_data_id') : $local_data_id) . '&host_id=' . grv('host_id') . '&view_rrd=' . (isrv('current_rrd') ? gnrv('current_rrd') : '0'));
357header_redirect./data_sources.phpheader('Location: data_sources.php');
358header_redirect./data_sources.phpheader('Location: data_sources.php');
359header_redirect./data_sources.phpheader('Location: data_sources.php');
360header_redirect./data_sources.phpheader('Location: data_sources.php');
361header_redirect./data_sources.phpheader('Location: data_sources.php');
362header_redirect./data_sources.phpheader('Location: data_sources.php?action=ds_edit&host_id=' . grv('host_id') . '&new=1');
363header_redirect./data_sources.phpheader('Location: data_sources.php?action=ds_edit&id=' . (empty($local_data_id) ? gfrv('local_data_id') : $local_data_id) . '&host_id=' . grv('host_id') . '&view_rrd=' . (isrv('current_rrd') ? gnrv('current_rrd') : '0'));
364header_redirect./data_sources.phpheader('Location: data_sources.php?action=ds_edit&id=' . grv('id'));
365header_redirect./data_sources.phpheader('Location: data_sources.php?action=ds_edit&id=' . grv('id'));
366header_redirect./data_sources.phpheader('Location: data_sources.php?action=ds_edit&id=' . grv('local_data_id'));
367header_redirect./data_templates.phpheader('Location: ' . $location);
368header_redirect./data_templates.phpheader('Location: data_templates.php');
369header_redirect./data_templates.phpheader('Location: data_templates.php?action=template_edit&id=' . (empty($data_template_id) ? grv('data_template_id') : $data_template_id) . (ierv('current_rrd') ? '' : '&view_rrd=' . (gnrv('current_rrd') ? gnrv('current_rrd') : $data_template_rrd_id)));
370header_redirect./data_templates.phpheader('Location: data_templates.php?action=template_edit&id=' . grv('data_template_id'));
371header_redirect./docs/index.phpheader('Location: https://github.com/Cacti/documentation/blob/develop/README.md');
372header_redirect./formats/index.phpheader('Location:../index.php');
373header_redirect./gprint_presets.phpheader('Location: gprint_presets.php');
374header_redirect./gprint_presets.phpheader('Location: gprint_presets.php?action=edit&id=' . ($gprint_preset_id === null ? gnrv('id') : $gprint_preset_id));
375header_redirect./gprint_presets.phpheader('Location: gprint_presets.php');
376header_redirect./graph_templates.phpheader('Location: graph_templates.php');
377header_redirect./graph_templates.phpheader('Location: graph_templates.php?action=template_edit&id=' . gfrv('id'));
378header_redirect./graph_templates.phpheader('Location: graph_templates.php?action=template_edit&id=' . grv('graph_template_id'));
379header_redirect./graph_templates.phpheader('Location: graph_templates.php?action=template_edit&id=' . grv('graph_template_id'));
380header_redirect./graph_templates.phpheader('Location: graph_templates.php?action=template_edit&id=' . grv('graph_template_id'));
381header_redirect./graph_templates.phpheader('Location: graph_templates.php?action=template_edit&id=' . grv('graph_template_id'));
382header_redirect./graphs.phpheader('Location: graphs.php');
383header_redirect./graphs.phpheader('Location: graphs.php');
384header_redirect./graphs.phpheader('Location: graphs.php?template_id=-1');
385header_redirect./graphs.phpheader('Location: graphs.php?action=graph_edit&id=' . gfrv('id'));
386header_redirect./graphs.phpheader('Location: graphs.php?action=graph_edit&id=' . grv('local_graph_id'));
387header_redirect./graphs.phpheader('Location: graphs.php?action=graph_edit&id=' . grv('local_graph_id'));
388header_redirect./graphs.phpheader('Location: graphs.php?action=graph_edit&id=' . grv('local_graph_id'));
389header_redirect./graphs_new.phpheader('Location: graphs_new.php?host_id=' . $host_id);
390header_redirect./graphs_new.phpheader('Location: graphs_new.php?host_id=' . gfrv('host_id'));
391header_redirect./graphs_new.phpheader('Location: graphs_new.php?host_id=' . grv('host_id'));
392header_redirect./host.phpheader('Location: host.php');
393header_redirect./host.phpheader('Location: host.php?action=edit&id=' . (empty($host_id) ? gnrv('id') : $host_id));
394header_redirect./host.phpheader('Location: host.php?action=edit&id=' . grv('host_id') . '&display_dq_details=true');
395header_redirect./host.phpheader('Location: host.php?action=edit&id=' . grv('host_id'));
396header_redirect./host.phpheader('Location: host.php?action=edit&id=' . grv('host_id'));
397header_redirect./host.phpheader('Location: host.php?action=edit&id=' . grv('host_id'));
398header_redirect./host.phpheader('Location: host.php?action=edit&id=' . grv('host_id'));
399header_redirect./host.phpheader('Location: host.php?action=edit&id=' . grv('host_id'));
400header_redirect./host.phpheader('Location: host.php?action=edit&id=' . grv('host_id'));
401header_redirect./host.phpheader('Location: host.php?action=edit&id=' . grv('host_id'));
402header_redirect./host.phpheader('Location: host.php?action=edit&id=' . grv('host_id'));
403header_redirect./host.phpheader('Location: host.php?action=edit&id=' . grv('host_id'));
404header_redirect./host.phpheader('Location: host.php?action=edit&id=' . grv('host_id'));
405header_redirect./host_templates.phpheader('Location: host_templates.php?action=archives');
406header_redirect./host_templates.phpheader('Location: host_templates.php?action=templates&action=templates');
407header_redirect./host_templates.phpheader('Location: host_templates.php?action=edit&id=' . (empty($host_template_id) ? gnrv('id') : $host_template_id));
408header_redirect./host_templates.phpheader('Location: host_templates.php?action=edit&id=' . gfrv('host_template_id'));
409header_redirect./host_templates.phpheader('Location: host_templates.php?action=edit&id=' . gfrv('host_template_id'));
410header_redirect./host_templates.phpheader('Location: host_templates.php?action=edit&id=' . gfrv('host_template_id'));
411header_redirect./host_templates.phpheader('Location: host_templates.php?action=edit&id=' . gfrv('host_template_id'));
412header_redirect./images/index.phpheader('Location:../index.php');
413header_redirect./include/auth.phpheader('Location: ' . CACTI_PATH_URL . 'auth_2fa.php');
414header_redirect./include/auth.phpheader('Location: ' . CACTI_PATH_URL . 'auth_changepassword.php?ref=' . rawurlencode(validate_redirect_url($_SERVER['HTTP_REFERER'] ?? '', 'index.php')));
415header_redirect./include/auth.phpheader('Location: ' . CACTI_PATH_URL . 'install/');
416header_redirect./include/content/index.phpheader('Location:../index.php');
417header_redirect./include/csrf.phpheader('Location: ' . $redirect_target);
418header_redirect./include/fa/css/index.phpheader('Location:../index.php');
419header_redirect./include/fa/index.phpheader('Location:../index.php');
420header_redirect./include/fa/js/index.phpheader('Location:../index.php');
421header_redirect./include/fa/less/index.phpheader('Location:../index.php');
422header_redirect./include/fa/metadata/index.phpheader('Location:../index.php');
423header_redirect./include/fa/scss/index.phpheader('Location:../index.php');
424header_redirect./include/fa/sprites/index.phpheader('Location:../index.php');
425header_redirect./include/fa/svgs/brands/index.phpheader('Location:../index.php');
426header_redirect./include/fa/svgs/index.phpheader('Location:../index.php');
427header_redirect./include/fa/svgs/regular/index.phpheader('Location:../index.php');
428header_redirect./include/fa/svgs/solid/index.phpheader('Location:../index.php');
429header_redirect./include/fa/webfonts/index.phpheader('Location:../index.php');
430header_redirect./include/global.phpheader('Location: ' . $location);
431header_redirect./include/index.phpheader('Location:../index.php');
432header_redirect./include/js/LC_MESSAGES/index.phpheader('Location:../index.php');
433header_redirect./include/js/index.phpheader('Location:../index.php');
434header_redirect./include/themes/cacti/default/index.phpheader('Location:../index.php');
435header_redirect./include/themes/cacti/images/index.phpheader('Location:../index.php');
436header_redirect./include/themes/cacti/index.phpheader('Location:../index.php');
437header_redirect./include/themes/carrot/default/index.phpheader('Location:../index.php');
438header_redirect./include/themes/carrot/images/index.phpheader('Location:../index.php');
439header_redirect./include/themes/carrot/index.phpheader('Location:../index.php');
440header_redirect./include/themes/dark/default/index.phpheader('Location:../index.php');
441header_redirect./include/themes/dark/images/index.phpheader('Location:../index.php');
442header_redirect./include/themes/dark/index.phpheader('Location:../index.php');
443header_redirect./include/themes/hollyberry/default/index.phpheader('Location:../index.php');
444header_redirect./include/themes/hollyberry/images/index.phpheader('Location:../index.php');
445header_redirect./include/themes/hollyberry/index.phpheader('Location:../index.php');
446header_redirect./include/themes/index.phpheader('Location:../index.php');
447header_redirect./include/themes/midwinter/default/index.phpheader('Location:../index.php');
448header_redirect./include/themes/midwinter/images/index.phpheader('Location:../index.php');
449header_redirect./include/themes/midwinter/index.phpheader('Location:../index.php');
450header_redirect./include/themes/modern/default/index.phpheader('Location:../index.php');
451header_redirect./include/themes/modern/images/index.phpheader('Location:../index.php');
452header_redirect./include/themes/modern/index.phpheader('Location:../index.php');
453header_redirect./include/themes/paper-plane/default/index.phpheader('Location:../index.php');
454header_redirect./include/themes/paper-plane/images/index.phpheader('Location:../index.php');
455header_redirect./include/themes/paper-plane/index.phpheader('Location:../index.php');
456header_redirect./include/themes/paw/default/index.phpheader('Location:../index.php');
457header_redirect./include/themes/paw/images/index.phpheader('Location:../index.php');
458header_redirect./include/themes/paw/index.phpheader('Location:../index.php');
459header_redirect./include/themes/raspberry/default/index.phpheader('Location:../index.php');
460header_redirect./include/themes/raspberry/images/index.phpheader('Location:../index.php');
461header_redirect./include/themes/raspberry/index.phpheader('Location:../index.php');
462header_redirect./include/themes/sunrise/default/index.phpheader('Location:../index.php');
463header_redirect./include/themes/sunrise/images/index.phpheader('Location:../index.php');
464header_redirect./include/themes/sunrise/index.phpheader('Location:../index.php');
465header_redirect./include/views/index.phpheader('Location:../index.php');
466header_redirect./install/upgrades/index.phpheader('Location:../../index.php');
467header_redirect./lib/auth.phpheader('Location: ' . $referer);
468header_redirect./lib/auth.phpheader('Location: ' . CACTI_PATH_URL . 'graph_view.php' . ($newtheme ? '?newtheme=1' : ''));
469header_redirect./lib/auth.phpheader('Location: ' . CACTI_PATH_URL . 'index.php' . ($newtheme ? '?newtheme=1' : ''));
470header_redirect./lib/auth.phpheader('Location: graph_view.php');
471header_redirect./lib/auth.phpheader('Location: index.php');
472header_redirect./lib/auth.phpheader('Location: ' . CACTI_PATH_URL . 'graph_view.php' . ($newtheme ? '?newtheme=1' : ''));
473header_redirect./lib/auth.phpheader('Location: auth_changepassword.php');
474header_redirect./lib/auth.phpheader('Location: ' . CACTI_PATH_URL . 'auth_changepassword.php?action=force&ref=' . urlencode(validate_redirect_url($_SERVER['HTTP_REFERER'] ?? 'index.php')));
475header_redirect./lib/clog_webapi.phpheader('Location: clog.php?filename=' . basename($logfile));
476header_redirect./lib/clog_webapi.phpheader('Location: ' . get_current_page());
477header_redirect./lib/functions.phpheader('Location: ' . cacti_url(sanitize_redirect_path($path), $params));
478header_redirect./lib/html_form.phpheader('Location: ' . $page);
479header_redirect./lib/html_form.phpheader('Location: ' . $page);
480header_redirect./lib/html_graph.phpheader('Location: ' . $page . '?host_id=' . $host_id);
481header_redirect./lib/html_graph.phpheader('Location: permission_denied.php');
482header_redirect./lib/html_graph.phpheader('Location: permission_denied.php');
483header_redirect./lib/html_graph.phpheader('Location: permission_denied.php');
484header_redirect./lib/html_graph.phpheader('Location: graph_view.php?action=list');
485header_redirect./lib/html_reports.phpheader('Location: ' . get_reports_page());
486header_redirect./lib/html_reports.phpheader('Location: ' . get_reports_page());
487header_redirect./lib/html_reports.phpheader('Location: ' . get_reports_page());
488header_redirect./lib/html_reports.phpheader('Location: ' . get_reports_page());
489header_redirect./lib/html_reports.phpheader('Location: ' . get_reports_page());
490header_redirect./lib/html_reports.phpheader('Location: ' . get_reports_page());
491header_redirect./lib/html_reports.phpheader('Location: ' . get_reports_page() . '?action=item_edit&id=' . gnrv('report_id') . '&item_id=' . (empty($item_id) ? gnrv('id') : $item_id));
492header_redirect./lib/html_reports.phpheader('Location: ' . get_reports_page());
493header_redirect./lib/html_reports.phpheader('Location: ' . get_reports_page());
494header_redirect./lib/html_reports.phpheader('Location: ' . reports_redirect_url(get_reports_page(), (empty($id) ? $post['id'] : $id)));
495header_redirect./lib/html_tree.phpheader('Location: permission_denied.php');
496header_redirect./lib/html_tree.phpheader('Location: permission_denied.php');
497header_redirect./lib/index.phpheader('Location:../index.php');
498header_redirect./lib/plugins.phpheader('Location: plugins.php');
499header_redirect./lib/plugins.phpheader('Location: plugins.php');
500header_redirect./lib/plugins.phpheader('Location: plugins.php');
501header_redirect./lib/plugins.phpheader('Location: plugins.php');
502header_redirect./lib/plugins.phpheader('Location: plugins.php');
503header_redirect./lib/plugins.phpheader('Location: plugins.php');
504header_redirect./lib/plugins.phpheader('Location: plugins.php');
505header_redirect./lib/plugins.phpheader('Location: plugins.php');
506header_redirect./lib/plugins.phpheader('Location: plugins.php');
507header_redirect./link.phpheader('Location: ' . $referer);
508header_redirect./link.phpheader('Location: ' . $referer);
509header_redirect./links.phpheader('Location: links.php');
510header_redirect./links.phpheader('Location: links.php?action=edit&id=' . (isrv('id') ? gfrv('id') : ''));
511header_redirect./links.phpheader('Location: links.php');
512header_redirect./links.phpheader('Location: links.php');
513header_redirect./links.phpheader('Location: links.php');
514header_redirect./links.phpheader('Location: links.php');
515header_redirect./links.phpheader('Location: links.php');
516header_redirect./locales/index.phpheader('Location:../index.php');
517header_redirect./log/index.phpheader('Location:../index.php');
518header_redirect./logout.phpheader('Location: index.php');
519header_redirect./managers.phpheader('Location: managers.php');
520header_redirect./managers.phpheader('Location: managers.php?action=edit&id=' . gnrv('id') . '&tab=notifications');
521header_redirect./managers.phpheader('Location: managers.php?action=edit&tab=notifications&id=' . grv('id'));
522header_redirect./managers.phpheader('Location: managers.php?action=edit&id=' . (empty($manager_id) ? gnrv('id') : $manager_id));
523header_redirect./mibs/index.phpheader('Location:../index.php');
524header_redirect./oauth2.phpheader('Location: ' . $authUrl);
525header_redirect./package.phpheader('Location: package.php');
526header_redirect./package_import.phpheader('Location: package_import.php?package_location=' . $package_location);
527header_redirect./package_import.phpheader('Location: package_import.php');
528header_redirect./package_import.phpheader('Location: package_import.php');
529header_redirect./package_import.phpheader('Location: package_import.php');
530header_redirect./package_import.phpheader('Location: package_import.php');
531header_redirect./package_import.phpheader('Location: package_import.php?package_location=0');
532header_redirect./package_import.phpheader('Location: package_import.php');
533header_redirect./package_import.phpheader('Location: package_import.php');
534header_redirect./package_import.phpheader('Location: package_import.php?package_location=' . $package_location);
535header_redirect./package_keys.phpheader('Location: package_keys.php?header=false');
536header_redirect./package_keys.phpheader('Location: package_keys.php?header=false');
537header_redirect./package_repos.phpheader('Location: package_repos.php?header=false');
538header_redirect./package_repos.phpheader('Location: package_repos.php?header=false');
539header_redirect./package_repos.phpheader('Location: package_repos.php?header=false&action=edit&id=' . (empty($id) ? gnrv('id') : $id));
540header_redirect./plugins.phpheader('Location: plugins.php');
541header_redirect./plugins.phpheader('Location: plugins.php');
542header_redirect./plugins.phpheader('Location: plugins.php');
543header_redirect./plugins.phpheader('Location: plugins.php?state=5');
544header_redirect./plugins.phpheader('Location: plugins.php');
545header_redirect./plugins.phpheader('Location: plugins.php');
546header_redirect./plugins.phpheader('Location: plugins.php');
547header_redirect./plugins.phpheader('Location: plugins.php');
548header_redirect./plugins.phpheader('Location: plugins.php');
549header_redirect./plugins.phpheader('Location: plugins.php');
550header_redirect./plugins.phpheader('Location: plugins.php');
551header_redirect./plugins.phpheader('Location: plugins.php');
552header_redirect./plugins.phpheader('Location: plugins.php');
553header_redirect./plugins.phpheader('Location: plugins.php');
554header_redirect./plugins.phpheader('Location: plugins.php');
555header_redirect./plugins.phpheader('Location: plugins.php');
556header_redirect./plugins.phpheader('Location: plugins.php');
557header_redirect./plugins.phpheader('Location: plugins.php');
558header_redirect./plugins.phpheader('Location: plugins.php');
559header_redirect./plugins.phpheader('Location: plugins.php');
560header_redirect./pollers.phpheader('Location: pollers.php');
561header_redirect./pollers.phpheader('Location: pollers.php?action=edit&id=' . (empty($poller_id) ? gnrv('id') : $poller_id));
562header_redirect./reports.phpheader('Location: reports.php?action=edit&tab=' . grv('tab') . '&id=' . grv('id'));
563header_redirect./reports.phpheader('Location: reports.php?action=edit&tab=items&id=' . grv('id'));
564header_redirect./reports.phpheader('Location: reports.php?action=edit&tab=items&id=' . grv('id'));
565header_redirect./reports.phpheader('Location: reports.php?action=edit&tab=items&id=' . grv('id'));
566header_redirect./reports.phpheader('Location: reports.php?action=edit&tab=items&id=' . grv('id'));
567header_redirect./reports.phpheader('Location: reports.php?action=edit&tab=preview&rdate=-1&id=' . $report_id);
568header_redirect./resource/index.phpheader('Location:../index.php');
569header_redirect./resource/script_queries/index.phpheader('Location:../index.php');
570header_redirect./resource/script_server/index.phpheader('Location:../index.php');
571header_redirect./resource/snmp_queries/index.phpheader('Location:../index.php');
572header_redirect./scripts/index.phpheader('Location:../index.php');
573header_redirect./service/index.phpheader('Location:../index.php');
574header_redirect./settings.phpheader('Location: settings.php?header=false&tab=' . grv('tab'));
575header_redirect./settings.phpheader('Location: settings.php?tab=' . grv('tab'));
576header_redirect./settings.phpheader('Location: settings.php?tab=' . urlencode($tab));
577header_redirect./sites.phpheader('Location: sites.php');
578header_redirect./sites.phpheader('Location: sites.php?action=edit&id=' . (empty($site_id) ? gnrv('id') : $site_id));
579header_redirect./support.phpheader('Location: support.php?tab=summary');
580header_redirect./support.phpheader('Location: support.php?tab=summary');
581header_redirect./templates_export.phpheader('Location: templates_export.php');
582header_redirect./templates_import.phpheader('Location: templates_import.php');
583header_redirect./templates_import.phpheader('Location: templates_import.php');
584header_redirect./tests/index.phpheader('Location:../index.php');
585header_redirect./tree.phpheader('Location: tree.php');
586header_redirect./tree.phpheader('Location: tree.php');
587header_redirect./tree.phpheader('Location: tree.php');
588header_redirect./tree.phpheader('Location: tree.php');
589header_redirect./tree.phpheader('Location: tree.php');
590header_redirect./tree.phpheader('Location: tree.php');
591header_redirect./tree.phpheader('Location: tree.php');
592header_redirect./tree.phpheader('Location: tree.php');
593header_redirect./tree.phpheader('Location: tree.php?action=edit&id=' . (isset($tree_id) ? $tree_id : ''));
594header_redirect./tree.phpheader('Location: tree.php');
595header_redirect./tree.phpheader('Location: tree.php');
596header_redirect./tree.phpheader('Location: tree.php');
597header_redirect./user_admin.phpheader('Location: user_admin.php');
598header_redirect./user_admin.phpheader('Location: user_admin.php');
599header_redirect./user_admin.phpheader('Location: user_admin.php');
600header_redirect./user_admin.phpheader('Location: user_admin.php');
601header_redirect./user_admin.phpheader('Location: user_admin.php');
602header_redirect./user_admin.phpheader('Location: user_admin.php?action=user_edit&tab=graph_perms_edit&id=' . gnrv('id'));
603header_redirect./user_admin.phpheader('Location: user_admin.php');
604header_redirect./user_admin.phpheader('Location: user_admin.php?action=user_edit&tab=permsd&id=' . gnrv('id'));
605header_redirect./user_admin.phpheader('Location: user_admin.php?action=user_edit&tab=permsg&id=' . gnrv('id'));
606header_redirect./user_admin.phpheader('Location: user_admin.php?action=user_edit&tab=permsgr&id=' . gnrv('id'));
607header_redirect./user_admin.phpheader('Location: user_admin.php?action=user_edit&tab=permste&id=' . gnrv('id'));
608header_redirect./user_admin.phpheader('Location: user_admin.php?action=user_edit&tab=permstr&id=' . gnrv('id'));
609header_redirect./user_admin.phpheader('Location: user_admin.php?action=user_edit&id=' . (empty($user_id) ? gfrv('id') : $user_id));
610header_redirect./user_admin.phpheader('Location: user_admin.php?action=user_edit&tab=' . gnrv('tab') . '&id=' . gnrv('id'));
611header_redirect./user_admin.phpheader('Location: user_admin.php?action=user_edit&tab=graph_perms_edit&id=' . grv('user_id'));
612header_redirect./user_domains.phpheader('Location: user_domains.php');
613header_redirect./user_domains.phpheader('Location: user_domains.php?action=edit&domain_id=' . (empty($domain_id) ? gnrv('domain_id') : $domain_id));
614header_redirect./user_group_admin.phpheader('Location: user_group_admin.php');
615header_redirect./user_group_admin.phpheader('Location: user_group_admin.php');
616header_redirect./user_group_admin.phpheader('Location: user_group_admin.php');
617header_redirect./user_group_admin.phpheader('Location: user_group_admin.php');
618header_redirect./user_group_admin.phpheader('Location: user_group_admin.php');
619header_redirect./user_group_admin.phpheader('Location: user_group_admin.php?action=edit&tab=general&id=' . (isset($group_id) && $group_id > 0 ? $group_id : gnrv('id')));
620header_redirect./user_group_admin.phpheader('Location: user_group_admin.php?action=edit&tab=members&id=' . gnrv('id'));
621header_redirect./user_group_admin.phpheader('Location: user_group_admin.php?action=edit&tab=permsd&id=' . gnrv('id'));
622header_redirect./user_group_admin.phpheader('Location: user_group_admin.php?action=edit&tab=permsg&id=' . gnrv('id'));
623header_redirect./user_group_admin.phpheader('Location: user_group_admin.php?action=edit&tab=permste&id=' . gnrv('id'));
624header_redirect./user_group_admin.phpheader('Location: user_group_admin.php?action=edit&tab=permstr&id=' . gnrv('id'));
625header_redirect./user_group_admin.phpheader('Location: user_group_admin.php?action=edit&tab=realms&id=' . grv('id'));
626header_redirect./user_group_admin.phpheader('Location: user_group_admin.php?action=edit&tab=settings&id=' . gnrv('id'));
627header_redirect./user_group_admin.phpheader('Location: user_group_admin.php?action=edit&tab=' . gnrv('tab') . '&id=' . gnrv('id'));
628header_redirect./user_group_admin.phpheader('Location: user_group_admin.php?action=edit&tab=general&id=' . gnrv('id'));
629header_redirect./user_group_admin.phpheader('Location: user_group_admin.php?action=edit&tab=gperms&id=' . grv('group_id'));
630header_redirect./utilities.phpheader('Location: support.php?tab=summary');
631header_redirect./utilities.phpheader('Location: utilities.php');
632header_redirect./utilities.phpheader('Location: utilities.php');
633header_redirect./utilities.phpheader('Location: utilities.php?action=view_poller_cache');
634header_redirect./utilities.phpheader('Location: utilities.php?action=view_snmpagent_cache');
635xml_parse./cli/genmanifest.php$xmldata = simplexml_load_string($data);
636xml_parse./cli/rrdresize.php$rrd_data = json_decode(json_encode(simplexml_load_string($file_dump)), true);
637xml_parse./install/functions.php$xmlget = simplexml_load_string($xml);
638xml_parse./lib/import.php$xmlget = simplexml_load_string($data);
639xml_parse./lib/import.php$xmlget = simplexml_load_string($xml);