File CVE-2016-3659.patch of Package cacti
--- cacti-0.8.8f/lib/functions.php 2015-07-20 15:42:23.000000000 +0200
+++ cacti-0.8.8f/lib/functions.php 2016-05-09 13:20:35.217994036 +0200
@@ -2138,8 +2138,8 @@
@arg $string - the original raw search string
@returns - the sanitized search string */
function sanitize_search_string($string) {
- static $drop_char_match = array('^', '$', '<', '>', '`', '\'', '"', '|', ',', '?', '+', '[', ']', '{', '}', '#', ';', '!', '=', '*');
- static $drop_char_replace = array(' ', ' ', ' ', ' ', '', '', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ');
+ static $drop_char_match = array('(',')','^', '$', '<', '>', '`', '\'', '"', '|', ',', '?', '+', '[', ']', '{', '}', '#', ';', '!', '=', '*');
+ static $drop_char_replace = array('','',' ', ' ', ' ', ' ', '', '', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ');
/* Replace line endings by a space */
$string = preg_replace('/[\n\r]/is', ' ', $string);