Tony Murray 36431dd296 Security fix: unauthorized access (#10091) ... * Security fix: unauthorized access Affects nginx users: Moved php files outside of public html directory (Apache was protected by .htaccess) Affects all users: Some files did not check for authentication and could disclose some info. Better checks before including files from user input * git mv html/includes/ includes/html git mv html/pages/ includes/html/		2019-04-11 23:26:42 -05:00
..
apps	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
bill	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
device	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
front	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
health	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
peering	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
plugin	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
pollers	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
ports	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
routing	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
search	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
settings	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
tools	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
wireless	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
about.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
addhost.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
addsrv.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
adduser.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
alert-log.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
alert-rules.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
alert-schedule.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
alert-stats.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
alert-transports.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
alerts.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
api-access.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
api-docs.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
apps.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
authlog.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
availability-map.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
bill.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
bills.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
customers.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
delhost.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
deluser.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
device-dependencies.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
device-groups.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
device.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
devices.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
edituser.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
eventlog.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
fullscreenmap.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
graphs.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
graylog.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
health.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
iftype.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
inventory.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
map.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
mib_assoc.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
mibs.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
notifications.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
oxidized.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
packages.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
peering.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
plugin.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
pollers.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
ports.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
preferences.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
pseudowires.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
purgeports.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
ripenccapi.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
routing.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
search.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
services.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
settings.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
syslog.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
templates.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
tools.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
validate.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
vminfo.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00
wireless.inc.php	Security fix: unauthorized access (#10091)	2019-04-11 23:26:42 -05:00