This file is indexed.

/usr/share/zabbix/tr_comments.php is in zabbix-frontend-php 1:1.8.11-1.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
<?php
/*
** ZABBIX
** Copyright (C) 2000-2010 SIA Zabbix
**
** This program is free software; you can redistribute it and/or modify
** it under the terms of the GNU General Public License as published by
** the Free Software Foundation; either version 2 of the License, or
** (at your option) any later version.
**
** This program is distributed in the hope that it will be useful,
** but WITHOUT ANY WARRANTY; without even the implied warranty of
** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
** GNU General Public License for more details.
**
** You should have received a copy of the GNU General Public License
** along with this program; if not, write to the Free Software
** Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
**/
?>
<?php
require_once('include/config.inc.php');
require_once('include/triggers.inc.php');
require_once('include/forms.inc.php');

$page['title'] = 'S_TRIGGER_COMMENTS';
$page['file'] = 'tr_comments.php';

include_once('include/page_header.php');

?>
<?php

//		VAR			TYPE	OPTIONAL FLAGS	VALIDATION	EXCEPTION
	$fields=array(
		'triggerid'=>	array(T_ZBX_INT, O_MAND, P_SYS,	DB_ID, null),
		'comments'=>	array(T_ZBX_STR, O_OPT,  null,	null, 'isset({save})'),

		'save'=>		array(T_ZBX_STR, O_OPT, P_SYS|P_ACT,	null,	null),
		'cancel'=>		array(T_ZBX_STR, O_OPT, P_SYS|P_ACT,	null,	null),
/*
		"form"=>		array(T_ZBX_STR, O_OPT, P_SYS,	null,	null),
		"form_copy_to"=>	array(T_ZBX_STR, O_OPT, P_SYS,	null,	null),
		"form_refresh"=>	array(T_ZBX_INT, O_OPT,	null,	null,	null)
*/
	);
	check_fields($fields);
?>
<?php

	if(!isset($_REQUEST['triggerid'])) fatal_error(S_NO_TRIGGER_DEFINED);

	$options = array(
		'nodeids' => get_current_nodeid(true),
		'triggerids' => $_REQUEST['triggerid'],
		'output' => API_OUTPUT_EXTEND,
		'expandDescription' => true,
	);
	$trigger = CTrigger::get($options);
	$trigger = reset($trigger);
	
	if(!$trigger) access_deny();


	if(isset($_REQUEST['save'])){
		$result = update_trigger_comments($_REQUEST['triggerid'],$_REQUEST['comments']);
		show_messages($result, S_COMMENT_UPDATED, S_CANNOT_UPDATE_COMMENT);

		$trigger['comments'] = $_REQUEST['comments'];
		
		if($result){
			add_audit(AUDIT_ACTION_UPDATE,AUDIT_RESOURCE_TRIGGER,
				S_TRIGGER.' ['.$_REQUEST['triggerid'].'] ['.$trigger['description'].'] '.
				S_COMMENTS.' ['.$_REQUEST['comments'].']');
		}
	}
	else if(isset($_REQUEST['cancel'])){
		jsRedirect('tr_status.php');
		exit();
	}

	show_table_header(S_TRIGGER_COMMENTS_BIG);
	
	//if user has no permissions to edit comments, no "save" button for him
	$triggerEditable = CTrigger::get(array(
		'editable' => 1,
		'trigegrids' => $_REQUEST['triggerid'],
		'output' => API_OUTPUT_SHORTEN,
	));
	$triggerEditable = !empty($triggerEditable);
	
	$frmComent = new CFormTable(S_COMMENTS.' for "'.$trigger['description'].'"');
	$frmComent->addVar('triggerid', $_REQUEST['triggerid']);
	$frmComent->addRow(S_COMMENTS, new CTextArea('comments', $trigger['comments'], 100, 25, !$triggerEditable));
	
	if($triggerEditable){
		$frmComent->addItemToBottomRow(new CButton("save",S_SAVE));
	}

	$frmComent->addItemToBottomRow(new CButtonCancel('&triggerid='.$_REQUEST['triggerid']));

	$frmComent->show();
	
?>
<?php

include_once('include/page_footer.php');

?>