1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
|
<?php
/*
+-------------------------------------------------------------------------+
| Copyright (C) 2004-2024 The Cacti Group |
| |
| This program is free software; you can redistribute it and/or |
| modify it under the terms of the GNU General Public License |
| as published by the Free Software Foundation; either version 2 |
| of the License, or (at your option) any later version. |
| |
| This program is distributed in the hope that it will be useful, |
| but WITHOUT ANY WARRANTY; without even the implied warranty of |
| MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| GNU General Public License for more details. |
+-------------------------------------------------------------------------+
| Cacti: The Complete RRDTool-based Graphing Solution |
+-------------------------------------------------------------------------+
| This code is designed, written, and maintained by the Cacti Group. See |
| about.php and/or the AUTHORS file for specific developer information. |
+-------------------------------------------------------------------------+
| http://www.cacti.net/ |
+-------------------------------------------------------------------------+
*/
require_once($config['include_path'] .'/vendor/csrf/csrf-conf.php');
/* cross site request forgery library */
function csrf_startup() {
global $config;
if ($config['is_web']) {
/* If you need to debug CSRF, uncomment the following line */
//csrf_conf('log_file', dirname(read_config_option('path_cactilog')) . '/csrf.log');
if (!empty($config['path_csrf_secret'])) {
csrf_conf('path_secret', $config['path_csrf_secret']);
}
csrf_conf('rewrite-js', $config['url_path'] . 'include/vendor/csrf/csrf-magic.js');
csrf_conf('callback', 'csrf_error_callback');
csrf_conf('expires', 7200);
} else {
csrf_conf('disable',true);
}
}
function csrf_error_callback() {
//Resolve session fixation for PHP 5.4
session_regenerate_id();
raise_message('csrf_timeout');
ob_end_clean();
header('Location: ' . sanitize_uri($_SERVER['REQUEST_URI']));
csrf_log(__FUNCTION__, 'Timeout, redirecting to ' . sanitize_uri($_SERVER['REQUEST_URI']));
exit;
}
include_once($config['include_path'] . '/vendor/csrf/csrf-magic.php');
|
