From c582ff3766f624ccf1bc8b9a9ef4c97f23bfd45d Mon Sep 17 00:00:00 2001
From: Anton Reutov <a.reutov@outlook.com>
Date: Tue, 27 Jul 2021 22:19:45 +0300
Subject: [PATCH] Checking period value in /list/rrd/

---
 web/list/rrd/index.php | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/web/list/rrd/index.php b/web/list/rrd/index.php
index 7a13b78b3..2c30b530a 100644
--- a/web/list/rrd/index.php
+++ b/web/list/rrd/index.php
@@ -11,6 +11,10 @@ if ($_SESSION['user'] != 'admin') {
     exit;
 }
 
+if (!empty($_GET['period'])) {
+    if ($_GET['period']!="daily" && $_GET['period']!="weekly" && $_GET['period']!="monthly" && $_GET['period']!="yearly") unset($_GET['period']);
+}
+
 // Data
 exec (VESTA_CMD."v-list-sys-rrd json", $output, $return_var);
 $data = json_decode(implode('', $output), true);