/usr/share/zabbix/imgstore.php is in zabbix-frontend-php 1:2.4.7+dfsg-2ubuntu2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 | <?php
/*
** Zabbix
** Copyright (C) 2001-2015 Zabbix SIA
**
** This program is free software; you can redistribute it and/or modify
** it under the terms of the GNU General Public License as published by
** the Free Software Foundation; either version 2 of the License, or
** (at your option) any later version.
**
** This program is distributed in the hope that it will be useful,
** but WITHOUT ANY WARRANTY; without even the implied warranty of
** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
** GNU General Public License for more details.
**
** You should have received a copy of the GNU General Public License
** along with this program; if not, write to the Free Software
** Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
**/
define('ZBX_PAGE_NO_AUTHERIZATION', 1);
require_once dirname(__FILE__).'/include/config.inc.php';
require_once dirname(__FILE__).'/include/maps.inc.php';
$page['file'] = 'imgstore.php';
$page['type'] = detect_page_type(PAGE_TYPE_IMAGE);
require_once dirname(__FILE__).'/include/page_header.php';
// VAR TYPE OPTIONAL FLAGS VALIDATION EXCEPTION
$fields = array(
'css' => array(T_ZBX_INT, O_OPT, P_SYS, null, null),
'imageid' => array(T_ZBX_STR, O_OPT, P_SYS, null, null),
'iconid' => array(T_ZBX_INT, O_OPT, P_SYS, DB_ID, null),
'width' => array(T_ZBX_INT, O_OPT, P_SYS, BETWEEN(1, 2000), null),
'height' => array(T_ZBX_INT, O_OPT, P_SYS, BETWEEN(1, 2000), null),
);
check_fields($fields);
$resize = false;
if (isset($_REQUEST['width']) || isset($_REQUEST['height'])) {
$resize = true;
$width = getRequest('width', 0);
$height = getRequest('height', 0);
}
if (isset($_REQUEST['css'])) {
$css = 'div.sysmap_iconid_0 {'.
' height: 50px;'.
' width: 50px;'.
' background-image: url("images/general/no_icon.png"); }'."\n";
$images = API::Image()->get(array(
'output' => array('imageid'),
'filter' => array('imagetype' => IMAGE_TYPE_ICON),
'select_image' => true
));
foreach ($images as $image) {
$image['image'] = base64_decode($image['image']);
$ico = imagecreatefromstring($image['image']);
if ($resize) {
$ico = imageThumb($ico, $width, $height);
}
$w = imagesx($ico);
$h = imagesy($ico);
$css .= 'div.sysmap_iconid_'.$image['imageid'].'{'.
' height: '.$h.'px;'.
' width: '.$w.'px;'.
' background: url("imgstore.php?iconid='.$image['imageid'].'&width='.$w.'&height='.$h.'") no-repeat center center;}'."\n";
}
echo $css;
}
elseif (isset($_REQUEST['iconid'])) {
$iconid = getRequest('iconid', 0);
if ($iconid > 0) {
$image = get_image_by_imageid($iconid);
$source = $image['image'] ? imageFromString($image['image']) : get_default_image();
}
else {
$source = get_default_image();
}
if ($resize) {
$source = imageThumb($source, $width, $height);
}
imageOut($source);
}
elseif (isset($_REQUEST['imageid'])) {
$imageid = getRequest('imageid', 0);
session_start();
if (isset($_SESSION['image_id'][$imageid])) {
echo $_SESSION['image_id'][$imageid];
unset($_SESSION['image_id'][$imageid]);
}
session_write_close();
}
require_once dirname(__FILE__).'/include/page_footer.php';
|