This file is indexed.

/usr/share/zabbix/imgstore.php is in zabbix-frontend-php 1:1.8.11-1.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
<?php
/*
** ZABBIX
** Copyright (C) 2000-2009 SIA Zabbix
**
** This program is free software; you can redistribute it and/or modify
** it under the terms of the GNU General Public License as published by
** the Free Software Foundation; either version 2 of the License, or
** (at your option) any later version.
**
** This program is distributed in the hope that it will be useful,
** but WITHOUT ANY WARRANTY; without even the implied warranty of
** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
** GNU General Public License for more details.
**
** You should have received a copy of the GNU General Public License
** along with this program; if not, write to the Free Software
** Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
**/
?>
<?php
define('ZBX_PAGE_NO_AUTHERIZATION', 1);

require_once('include/config.inc.php');
require_once('include/maps.inc.php');

$page['file'] = 'imgstore.php';
$page['type'] = detect_page_type(PAGE_TYPE_IMAGE);

include_once('include/page_header.php');

?>
<?php
//		VAR			TYPE	OPTIONAL FLAGS	VALIDATION	EXCEPTION
	$fields=array(
		'css'=>			array(T_ZBX_INT, O_OPT,	P_SYS,	null,		null),
		'imageid'=>		array(T_ZBX_STR, O_OPT,	P_SYS,	null,		null),
		'iconid'=>		array(T_ZBX_INT, O_OPT,	P_SYS,	DB_ID,		null),
	);

	check_fields($fields);
?>
<?php
	if(isset($_REQUEST['css'])){
		$css= 'div.sysmap_iconid_0{'.
				' height: 50px; '.
				' width: 50px; '.
				' background-image: url("images/general/no_icon.png"); }'."\n";

		$options = array(
			'filter'=> array('imagetype'=> IMAGE_TYPE_ICON),
			'output'=> API_OUTPUT_EXTEND,
			'select_image'=> 1
		);
		$images = CImage::get($options);
		foreach($images as $inum => $image){
//SDI($image['image']);
			$image['image'] = base64_decode($image['image']);

			$ico = imagecreatefromstring($image['image']);
			$w = imagesx($ico);
			$h = imagesy($ico);

			$css.= 'div.sysmap_iconid_'.$image['imageid'].'{'.
						' height: '.$h.'px; '.
						' width: '.$w.'px; '.
						' background-image: url("imgstore.php?iconid='.$image['imageid'].'");'.
						' background-repeat:no-repeat; }'."\n";
		}

		print($css);
	}
	else if(isset($_REQUEST['iconid'])){
		$iconid = get_request('iconid',0);

		if($iconid > 0){
			$image = get_image_by_imageid($iconid);
			print($image['image']);
		}
		else{
			$image = get_default_image(true);
			ImageOut($image);
		}
	}
	else if(isset($_REQUEST['imageid'])){
		session_start();
		$imageid = get_request('imageid',0);

		if(isset($_SESSION['image_id'][$imageid])){
			echo $_SESSION['image_id'][$imageid];
			unset($_SESSION['image_id'][$imageid]);
		}
	}
?>
<?php

include_once('include/page_footer.php');

?>