Fix graph when range includes negative infinity.

When a threshold or range contains negative infinity (~)
the graph failes. The routine drawing the threshold line
outputs a rrdgraph line in the form 'HRULE:~#FF0000:"...."'.
rrdtool can not the interpret ~ sign.
This fix just skips the HRULE for negative infinity.
Update check_mssql_health.php

- Graphing for select-sql-queries implemented
- Graphing for Backup-Age implemented
Merge pull request #70 from mzenk/patch-1

Update check_mssql_health.php
Version Nagios Core 4.0.2 Error-No pattern match in function _parse(\n ) - solved
Changelog
gitignore change
This issue was detected by Peter Österberg at Hexbit AB in a security assessment of op5 Monitor 6.3 on assignment by op5 AB.
prep for new release
docs update
pnp/views/kohana_error_page: plug another XSS hole

By issuing the request
GET pnp/$item?996fb"><script>alert(1)</script><"951e1=1
an alert is triggered in the meta refresh tag.

The hole is plugged by not setting the URL of the meta refresh.
The default behavior is to refresh the current page, which is what
we want anyway.

Change-Id: I6af0b15c929f95d651a576d46b99d2e1a88fe601

Signed-off-by: Mikael Falkvidd <mfalkvidd@op5.com>
Plug potential XSS hole in views/template.php

REQUEST_URI needs to be sanitized if used. Since we want to refresh
to the same page there is no need to set the URI.

Signed-off-by: Mikael Falkvidd <mfalkvidd@op5.com>
Fix for imgAreaSelect: Use graph_height & graph_width from URL

Fix for imgAreaSelect as already described in https://github.com/lingej/pnp4nagios/pull/64. The fix uses $input->get as requested in #64.
Merge pull request #76 from gitmopp/patch-2

Fix for imgAreaSelect: Use graph_height & graph_width from URL
Merge pull request #75 from mfalkvidd/master

Cleaning up meta refresh and fixing potential XSS hole at the same time
views/timerange_select: escape keys and values

Escape keys and values of GET parameters before adding them
as hidden inputs in the time range form.

Without escaping, an XSS attack can be performed:
http://example.com/pnp/graph?host=a&srv=b&view=0"><script>alert("busted")</script>
(the host a with service b must exist)

Signed-off-by: Mikael Falkvidd <mfalkvidd@op5.com>
Merge pull request #77 from mfalkvidd/master

views/timerange_select: escape keys and values
Merge pull request #73 from krbu/master

Version Nagios Core 4.0.2 Error-No pattern match in function _parse(\n )...
Merge pull request #69 from fries/master

Fix graph when range includes negative infinity.
more input fields sanitized if used
Changelog update