Forum GLPI-Project

Daoud Ghannam

Member

Registered: 2011-02-24

Posts: 3

Security attack ..! - on Statistics \ Graphs

Hello There,

Thank you for Opening my Topic,

I have Recently Upgraded my GLPI v0.72 to v0.78.2.   

Every thing Seems Great , But i Opened the Statistics Page (Graphs)

then i Got }{> Security attack ..!  <}{ ??

I think Its a PHP Thing ,

but im sure you can Help ^_^

Thank you !

MoYo

GLPI - Lead

From: Poitiers

Registered: 2004-09-13

Posts: 14,513

Website

Re: Security attack ..! - on Statistics \ Graphs

more informations about your environnement ?
http://www.glpi-project.org/forum/viewt … p?id=10279

---

MoYo - Julien Dombre - Association INDEPNET
Contribute to GLPI :    Support     Contribute     References     Freshmeat

Daoud Ghannam

Member

Registered: 2011-02-24

Posts: 3

Re: Security attack ..! - on Statistics \ Graphs

more informations about your environnement ?
http://www.glpi-project.org/forum/viewt … p?id=10279

Sorry !   

OS : RHEL 5

PHP 5.1

glpi version 0.78.2

Old glpi version 0.72

Daoud Ghannam

Member

Registered: 2011-02-24

Posts: 3

Re: Security attack ..! - on Statistics \ Graphs

Any Assistance ! 

JMD

GLPI - Lead

Registered: 2004-09-13

Posts: 9,180

Website

Re: Security attack ..! - on Statistics \ Graphs

We are on sunday... Sometimes the glpi community  take care about it's family or other things...

Your problem does'nt  seems  to
be relevant to GLPI but with a sysadmin problem.

I think you would probably find more help in a RHEL forum...

---

JMD / Jean-Mathieu Doléans - Glpi-project.org - Association Indepnet
Apportez votre pierre au  projet GLPI   : Soutenir

gabrieldepaula

Member

Registered: 2011-04-12

Posts: 3

Re: Security attack ..! - on Statistics \ Graphs

Hellow...

The same problem here, but i using Fedora 14, PHP 5.3.5 and MySQL 5.1.55. My GLPI is the 0.78.3...

Can anyone help us?

Thanks!

gabrieldepaula

Member

Registered: 2011-04-12

Posts: 3

Re: Security attack ..! - on Statistics \ Graphs

OK, here is my solution...

I located in the file /inc/commons.function.php the function "sendFile" and in the first IF, the first condition i removed the: "../"

Now my condition is: if (strstr($tmpfile, "") || strstr($tmpfile, "..\\") {...

The graphics now appear, but if there were any negative result, I will know later! But i do not believe this will generate some negative result, because this IF, in this function only checks if the GLPI is looking for a file outside of your installation directory ...

I hope it will be useful to someone!

Sorry for my english..

Cheers from Brazil!

Last edited by gabrieldepaula (2011-04-12 21:14:08)

corit

Member

Registered: 2012-10-19

Posts: 1

Re: Security attack ..! - on Statistics \ Graphs

OK, here is my solution...

I located in the file /inc/commons.function.php the function "sendFile" and in the first IF, the first condition i removed the: "../"

Now my condition is: if (strstr($tmpfile, "") || strstr($tmpfile, "..\\") {...

The graphics now appear, but if there were any negative result, I will know later! But i do not believe this will generate some negative result, because this IF, in this function only checks if the GLPI is looking for a file outside of your installation directory ...

I hope it will be useful to someone!

Sorry for my english..

Cheers from Brazil!

Had the same issue in when upgrading to version 0.83.6, however it was also located in the file /inc/toolboxclass.php under the same function name "sendFile".