Merge pull request from GHSA-cr28-x256-xf5m

Cacti · Apr 7, 2024 · 28bb620 · 28bb620
1 parent 1ac2065
commit 28bb620
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/include/global.php b/include/global.php
@@ -285,6 +285,11 @@
 $config['is_web'] = !defined('CACTI_CLI_ONLY');
 if ((isset($no_http_headers) && $no_http_headers == true) || in_array($filename, $no_http_header_files, true)) {
 	$config['is_web'] = false;
+
+	if (isset($_REQUEST) && cacti_sizeof($_REQUEST) || !isset($_SERVER['argv'])) {
+		print 'FATAL: This file can only be called from the command line.' . PHP_EOL;
+		exit;
+	}
 }
 
 $auto_start = ini_get('session.auto_start');