diff -ur cacti-0.8.7g.orig/data_input.php cacti-0.8.7g/data_input.php
--- cacti-0.8.7g.orig/data_input.php 2010-07-10 00:33:46.000000000 +0200
+++ cacti-0.8.7g/data_input.php 2011-04-14 21:10:24.658500117 +0200
@@ -386,7 +386,7 @@
html_end_box();
if (!empty($_GET["id"])) {
- html_start_box("Input Fields", "100%", $colors["header"], "3", "center", "data_input.php?action=field_edit&type=in&data_input_id=" . $_GET["id"]);
+ html_start_box("Input Fields", "100%", $colors["header"], "3", "center", "data_input.php?action=field_edit&type=in&data_input_id=" . htmlspecialchars(get_request_var("id")));
print "
";
DrawMatrixHeaderItem("Name",$colors["header_text"],1);
DrawMatrixHeaderItem("Field Order",$colors["header_text"],1);
diff -ur cacti-0.8.7g.orig/graphs.php cacti-0.8.7g/graphs.php
--- cacti-0.8.7g.orig/graphs.php 2010-07-10 00:33:46.000000000 +0200
+++ cacti-0.8.7g/graphs.php 2011-04-14 21:13:55.043000147 +0200
@@ -1118,7 +1118,7 @@
Graph Management", "100%", $colors["header"], "3", "center", "graphs.php?action=graph_edit&host_id=" . get_request_var_request("host_id"));
+ html_start_box("Graph Management", "100%", $colors["header"], "3", "center", "graphs.php?action=graph_edit&host_id=" . htmlspecialchars(get_request_var_request("host_id")));
?>
">
diff -ur cacti-0.8.7g.orig/graph_templates.php cacti-0.8.7g/graph_templates.php
--- cacti-0.8.7g.orig/graph_templates.php 2010-07-10 00:33:46.000000000 +0200
+++ cacti-0.8.7g/graph_templates.php 2011-04-14 21:12:45.854000138 +0200
@@ -302,12 +302,12 @@
$header_label = "[edit: " . db_fetch_cell("select name from graph_templates where id=" . $_GET["id"]) . "]";
}
-
- html_start_box("Graph Template Items " . htmlspecialchars($header_label), "100%", $colors["header"], "3", "center", "graph_templates_items.php?action=item_edit&graph_template_id=" . $_GET["id"]);
+
+ html_start_box("Graph Template Items " . htmlspecialchars($header_label), "100%", $colors["header"], "3", "center", "graph_templates_items.php?action=item_edit&graph_template_id=" . htmlspecialchars(get_request_var("id")));
draw_graph_items_list($template_item_list, "graph_templates_items.php", "graph_template_id=" . $_GET["id"], false);
html_end_box();
- html_start_box("Graph Item Inputs", "100%", $colors["header"], "3", "center", "graph_templates_inputs.php?action=input_edit&graph_template_id=" . $_GET["id"]);
+ html_start_box("Graph Item Inputs", "100%", $colors["header"], "3", "center", "graph_templates_inputs.php?action=input_edit&graph_template_id=" . htmlspecialchars(get_request_var("id")));
print "
";
DrawMatrixHeaderItem("Name",$colors["header_text"],2);
diff -ur cacti-0.8.7g.orig/host.php cacti-0.8.7g/host.php
--- cacti-0.8.7g.orig/host.php 2010-07-10 00:33:46.000000000 +0200
+++ cacti-0.8.7g/host.php 2011-04-14 21:07:38.703500166 +0200
@@ -333,7 +333,7 @@
/* add a list of tree names to the actions dropdown */
add_tree_names_to_actions_array();
- html_start_box("" . $device_actions{$_POST["drp_action"]} . "", "60%", $colors["header_panel"], "3", "center", "");
+ html_start_box("" . $device_actions[get_request_var_post("drp_action")] . "", "60%", $colors["header_panel"], "3", "center", "");
print "