Fixing #5782 - Problem with External Links

Function file_get_contents() instead of include_once() in file link.php
Cacti · Jun 29, 2024 · c6c6601 · c6c6601
1 parent f364ec3
commit c6c6601
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/CHANGELOG b/CHANGELOG
@@ -107,6 +107,7 @@ Cacti CHANGELOG
 -issue#5772: Login log message unification - add client IP adress
 -issue#5773: Update rrd.php missing variable $okpos
 -issue#5780: Undefined array key "default" in file html_form.php
+-issue#5782: Function file_get_contents in file link.php
 
 1.2.27
 -security#GHSA-37x7-mfjv-mm7m: Authentication Bypass when using using older password hashes

diff --git a/link.php b/link.php
@@ -81,7 +81,7 @@
 			$file     = realpath($basepath . '/' . $page['contentfile']);
 
 			if ($file !== false && substr($file, 0, strlen($basepath)) == $basepath) {
-				print file_get_contents($file);
+				include_once($file);
 			} else {
 				print '<h1>The file \'' . html_escape($page['contentfile']) . '\' does not exist!!</h1>';
 			}