Subject: [Pkg-cacti-maint] Bug#807599: Fix for broken cacti image on 0.8.7g-1+squeeze9+deb6u11

From: Marcel Meckel <[email-masked]>
Date: Mon, 28 Dec 2015 11:47:51 +0100

The much better solution to fix this would be keeping the
include block over the input_validate_* calls in graph.php
(which without more modifications would reopen the sql injection vuln)
and then fix this in

   /usr/share/cacti/site/include/top_graph_header.php

where you just have to add the line

   input_validate_input_regex(get_request_var("rra_id"), 
"^([0-9]+|all)$");

in the input validation block.