Cacti CHANGELOG

0.8.8f
-bug:0002599: 0.8.8e Poller Script Parser is Broken
-bug:0002600: cli/upgrade_database.php is missing releases
-bug:0002603: Graph managment graphs.php save button does not work
-bug:0002599: Poller Script Parser is Broken

0.8.8e
-bug: Fixed issue with graph zooming failing to work
-bug: Fixed various SQL Injection vectors
-bug#0002569: Impossible to have a URL pointing directly to a graph
-bug#0002574: SQL Injection Vulnerabilities in graph items and graph template items
-bug#0002577: CVE-2015-4634 - SQL injection in graphs.php
-bug#0002579: SQL Injection Vulnerabilities in data sources
-bug#0002580: SQL Injection in cdef.php
-bug#0002582: SQL Injection in data_templates.php
-bug#0002583: SQL Injection in graph_templates.php
-bug#0002584: SQL Injection in host_templates.php
-bug#0002586: Cannot delete data sources from the GUI
-bug#0002592: graph_view.php - viewing host in new tab - Undefined index: nodeid
-bug#0002594: status_fail_date and status_rec_date are set incorrectly after host is marked down
-bug#0002597: Incorrect value in Hosts column on Host Templates page
-bug#0002598: Incorrect row number in Devices -> (Edit) page

0.8.8d
-feature: Remove un-needed fonts and javascript files
-bug: Fixed XSS VN: JVN#78187936 / TN:JPCERT#98968540
-bug#0002261: PHP 5.4.0 added new error_reporting variable, causing cacti to show errors 
-bug#0002391: Odd Behaviour on ReIndex of Data Query Data 
-bug#0002393: Broken thumbnail images for graph templates 
-bug#0002402: Subtree must not have the same header as the parent header 
-bug#0002474: CLI add_device.php dows not set availability_method correctly 
-bug#0002449: The Save button does not work: Invalid html on page Console -> Cacti Settings: empty form tag 
-bug#0002428: Fail to delete all data input items when removing more than 1000 data sources
-bug#0002439: Password with special character don't work with LDAP authentication 
-bug#0002461: invalid bn with ldap and anonymous bind 
-bug#0002465: Graph Export return empty CSV file 
-bug#0002484: Incorrect SQL request in cli script repair_database.php 
-bug#0002485: Broken pagenation on graph viewing
-bug#0002489: SNMP - Get Mounted Partitions using Re-index method of Index Count Changed causes recache event every time 
-bug#0002490: Can not select page for multiple datasources per device
-bug#0002494: CSV export always shows last day 
-bug#0002504: Data template search not functional 
-bug#0002542: [FG-VD-15-017] Cacti Cross-Site Scripting Vulnerability Notification 
-bug#0002543: Unable to switch pages within graphs_new.php due to invalid URL generation 
-bug#0002544: Duplicate entry in $nav_url during list view 
-bug#0002571: SQL Injection and Location header injection from cdef id CVE-2015-4342
-bug#0002572: SQL injection in graph templates

0.8.8c
-bug#0002228: GPL incompatible files included in Cacti project in include/treeview
-bug#0002383: Sanitize the step and id variables CVE-2013-5588, CVE-2013-5589
-bug#0002385: Cannot export host templates while including dependencies
-bug#0002386: cli/upgrade_database.php is missing the last two releases
-bug#0002390: Poller/script issue with slash and backslash
-bug#0002405: SQL injection in graph_xport.php
-bug#0002431: CVE-2014-2326 Unspecified HTML Injection Vulnerability
-bug#0002432: CVE-2014-2327 Cross Site Request Forgery Vulnerability - Special Thanks to Deutsche Telekom CERT
-bug#0002433: CVE-2014-2328 Unspecified Remote Command Execution Vulnerability
-bug#0002434: Suppress SNMP UNITS Suffix from cacti_snmp_get() output
-bug#0002438: Down Host Detection issue when using SNMP Desc or SNMP getNext
-bug#0002446: Subtract plugin processing time from Poller sleep time
-bug#0002453: CVE-2014-4002 Cross-Site Scripting Vulnerability - Special Thanks to G. Geshev (munmap)
-bug#0002455: Incomplete and incorrect input parsing leads to remote code execution and SQL injection attack scenarios
-bug#0002456: CVE-2014-5025 / CVE-2014-5026 - Cross-Site Scripting Vulnerability - Special Thanks to Adan Alvarez and Paul Gevers
-bug#0002495: Graph Filter Date Range 
-bug: Fix COMMENT handling, even in case COMMENT is empty, with or without HR and with variable substitution
-bug: Fix issues when SNMP data holds a "="; "explode" must be treated accordingly
-bug: Fix filter highlighting on data sources for the data template field
-bug: correct description of SNMP V3 parameters
-feature: Added native jquery, jqueryui, and jstree
-feature: Fixed issues with 'Clear' under preview not working
-feature: Added new Tree navigation
-feature: Added Columns and Thumbnails to Preview
-feature: Added Columns to Tree (Preview only)
-feature: Both Graphs and Columns default to 'Default'
-feature: Resolved Left hand navigation taking entire page
-feature: Added new graph zoom to tree view and preview offering a "quick" (default) and an "advanced" mode

0.8.8b
-bug: Fixed issue with custom data source information being lost when saved from edit
-bug: Repopulate the poller cache on new installations
-bug: Fix issue with poller not escaping the script query path correctly
-bug: Allow snmpv3 priv proto none
-bug: Fix issue where host activate may flush the entire poller item cache
-security: SQL injection and shell escaping issues

0.8.8a
-bug#0002207: cannot export graph templates
-bug#0002208: Graphs with CDEFs fail to generate
-bug#0002209: External auth does not work behind a reverse proxy
-bug#0002211: creating an index USING BTREE fails ony MySQL < 5.0.60
-bug#0002213: CLI upgrade script is missing 0.8.7i as a target
-bug#0002214: SQL error during non-PIA upgrade to 088 when giving a default for a text field in plugin_realms
-bug#0002216: use of define_syslog_variables() gone in PHP 5.4
-bug#0002217: url_path should default to /cacti/
-bug#0002221: Missing plugin directory causes endless loop in plugins.php
-bug#0002222: tail_logfile hangs when cacti.log not readable, filling apache log with fgets warnings

0.8.8
-bug#0002056: un-initialized datetime used for host status (was: Zero length string != NULL)
-bug#0002081: In Graph Management, search display graph title breaks when using pattern symbol "/"
-bug#0002132: need to include pa.sql with the 0.8.7i and future releases
-bug#0002134: rebuild_poller_cache.php --host-id deletes table poller_item completely
-bug#0002141: cacti.sql missing BTREE PRIMARY KEY for poller_output
-bug#0002146: Utilities -> View Log File -> refresh does not work
-bug#0002150: usort_data_query_index() is broken -> graph order for hosts with data query sort option fails
-bug#0002151: When building HTML forms with sub_checkbox on_change parameter is not used
-bug#0002152: Issue with filter on graphs_new.php
-bug#0002153: Cant search for patterns containing a forward-slash
-bug#0002156: CDEF strings are not escaped before passed to rrdtool command
-bug#0002158: Minor changes to grammar of displayed messages
-bug#0002165: Using data input field in data source name (related to 2079 in 0.8.7i)
-bug#0002167: New poller hook poller_finishing
-bug#0002172: structure_rra_paths.php does not handle disabled data sources
-bug#0002174: poller_item.host_id has wrong type
-bug#0002178: typo in include/global_form.php: Mimimum -> Minimum
-bug#0002181: session_unregister (use in functions.php) doesn't exist anymore in PHP 5.4
-bug#0002182: When there is no suitable (unique) index, graphs are not shown in data query ordering on host leafs
-bug#0002189: Proper graph hooks
-bug#0002191: Refresh issues
-bug#0002194: changing data query XML <index_order> does not propagate to existing data sources
-bug: Fix input validation on cli/api_device.php
-bug: Fix issue with data source template associate command line script inserting incorrect rra information
-bug: Fix minor display issue on data source pages
-bug: Fix minor issue with counting items in the poller_output table
-bug: Graph settings and settings check boxes do not allow unchecking to be saved
-bug: Fix minor issue with plugin library caused by non-session
-bug: Fix SQL error on data input save for non-templated graphs
-bug: user_log index added to increase performance
-feature: Merge Plugin Architecture into Cacti
-feature: Added index to data_template_data to increase performance

0.8.7i
-bug#0001963: Bandwidth summation "total in" and "total out" are always 0
-bug#0002040: ICMP ping errors for Windows 7 with PHP 5.3
-bug#0002062: Multiple security vulnerabilities
-bug#0002063: Multiple value poller output incorrectly interpreted as hexadecimal value
-bug#0002064: Removing "~" (tilde) by sanitize_uri() conflicts with Apache UserDir translation
-bug#0002066: Graph without host id "Notice: Undefined variable: host_id"
-bug#0002067: Custom time range filter not working
-bug#0002068: Missing header include in analyze_database.php
-bug#0002071: MySQL table poller_item is dropped always when "Data Input Method" is changed or added.
-bug#0002079: Using input field of a script in graph title does not work
-bug#0002080: Database password containing "@" does not connect
-bug#0002083: Adding a new users generates errors in apache logs
-bug#0002084: Incorrect normalization of hrStorageTable values over 2^31
-bug#0002086: Incorrect usage of mysql custom tcp port
-bug#0002087: PHP recache problems due to missing slashes in reindex table
-bug#0002093: Unit exponent value of 0 not imported with graph template
-bug#0002094: CDEF: "another cdef" references not included in template export
-bug#0002106: Command line add device does not accept "None" for host template
-bug: Update host template cli script help to fix incorrect options
-bug: Refresh of Cacti log viewer not working
-bug: Problems saving User Graph Permissions in IE9
-bug: Bandwidth summation fails if NAN values are present
-bug: Special Type Code "host_id" available in Data Queries by Not Data Input Methods
-bug: Do not generate error messages when creating non host based graphs
-bug: Wrong index used for Data Queries using VALUE/REGEXP
-bug: Fix issue with title variable replacement failing when no host is associated with graph
-bug: Cacti generating MySQL 1100 Errors when modifying the tree
-bug: Resolved "Fatal error: Cannot use string offset as an array" in lib/data_query.php
-feature: Properly support ifHighSpeed replacement variable
-feature: Increase granularity of availability options to correct spine bug
-feature: Replace "event count" with last changed date for host availability

0.8.7h
-bug#0001403: Reapply Suggested Names does not work correctly for graphs and data sources not associated with Data Queries
-bug#0001568: Remove PHP 5.3 deprecated functions
-bug#0001584: Concurrent changes to graph tree ordering can corrupt sort values
-bug#0001626: Symbol ($) does not appear in labels/gprint strings to rrdtool during graph generation
-bug#0001632: Script server treats quoted arguments with spaces incorrectly as multiple separate arguments
-bug#0001646: MySQL SSL connection support
-bug#0001660: Modifying data template values does not propagate as expected
-bug#0001678: Adding graphs to a device fails to add entries to poller_item if using the script server
-bug#0001768: Perform consistency check on ds maximum vs. ds minimum
-bug#0001783: Graph Export export date is incorrect
-bug#0001812: Data template copying ignores some item templating
-bug#0001814: Command line device add script fails when SNMP default is disabled
-bug#0001815: One minute polling not working correctly
-bug#0001816: Cannot export graph data to CSV with IE 8
-bug#0001819: MySQL "TYPE=" command deprecated since MySQL 4.1 removed in MySQL 5.4.4
-bug#0001826: Zoomed graph views should auto refresh
-bug#0001828: Reapply Suggested Name prompt as spelling problems
-bug#0001835: Graph edit page has more than one html form tag
-bug#0001847: Graph export API function has required argument not defined
-bug#0001851: Graph creation selector does not work with data query that has no associated graph templates
-bug#0001855: Improper formatting of data queries can result in SQL errors
-bug#0001862: Ping script does not process output of update ping utility
-bug#0001867: RRDtool Cacti fetch function does not work for some locales
-bug#0001876: PHP function strip_quotes causes HEX values to be truncated
-bug#0001880: Form validation error message does not highlight text area control
-bug#0001882: Cacti snmp_walk function fails if max_oids is an empty value
-bug#0001890: Default tree view mode set to single pane mode not working
-bug#0001893: Data input method description text does not make sense
-bug#0001900: Equal sign not correctly parsed in snmp data results
-bug#0001903: Undefined variable: mode in lib/ldap.php on line 375
-bug#0001918: Script server does not accept more than one blank space before the function name
-bug#0001926: Importing templates "using defaults for this installation" associates all rra's defined
-bug#0001928: graph_image.php does not check local_graph_id
-bug#0001929: Error when exporting templates are not properly reported
-bug#0001930: No error reporting for wrong RRA
-bug#0001934: Poller does not process SIGTERM signal correctly
-bug#0001936: Removing multiple data sources is inefficient
-bug#0001937: Technical support page uses check table which waits for table lock
-bug#0001939: Do not query for number or items per host if concurrent polling processes is set to one
-bug#0001954: Usage of PHP_SELF without basename in html.php (at least partly fixed)
-bug#0001956: Attempts to update existing tree item fail
-bug#0001967: Reflected XSS on Cacti 0.8.7g
-bug#0001989: IE9 breaks Cacti when objects are hidden using 'display:none;' style tag
-bug#0001993: Undefined index in lib/html.php
-bug#0001995: REQUEST_URI not properly escaped in graph_view.php for preview mode
-bug#0002005: Saving Script Server or Script Data Input Method Results in SQL Error
-bug#0002060: NAN values in hdd utilisation graphs (Poller Output Table not Empty)
-bug: Fix SQL injection issues in login page
-bug: RRDtool fetch in Cacti fails to function properly on rrdtool files with NaN values in the output
-bug: Accept "Connection refused" on TCP ping tests
-bug: Add missing row selection javascript to graph preview
-bug: Script server throws "undefined variable" error when in debug mode
-bug: Removing graphs does not take advantage of bulk deletes
-bug: Fixed issue with multiple "U" results for a data input method with multiple output parameters
-bug: SNMP v3 use AuthNoPriv when privacy passphrase is empty
-bug: Fixed sql errors when using template and search filter on graph management
-bug: Delete Data Source multi fails to perform bulk deletes on Data Source items
-bug: Allow Timespan Selector to work with $_REQUEST as well as $_POST
-bug: While in the mrtg view of Cacti Graphs, or in viewing graph properties zoom fails
-bug: The filepath api call should trim the filename before checking for the files existance
-bug: Fix issues with IE9 while editing templates
-bug: Form action in graph_items.php incorrect
-bug: Initial drawing of tree causing Next/Previous with malformed URI
-feature#0001519: Spine enhancement for parallel collection of data at device level
-feature#0001667: Get values of |host_*| variables in graph elements from data source
-feature#0001922: Reindex method "Index Count Changed" requires that OID_NUM_INDEXES is given for SNMP Data Queries
-feature#0001923: Implement counting for script (server) data queries just like OID_NUM_INDEXES
-feature#0001924: Allow for reindex method "Index Count Changed" to apply to script (server) queries as well
-feature#0001952: Ability to use input field of a script in graph title
-feature: Make reindexing and repopulating the poller cache a lossless process
-feature: Change default font sizes
-feature: Add analyze database and push out host cli scripts

0.8.7g
-bug: RRDTool 1.4.x not recognized during installation
-bug: Implement windows-aware shell escaping
-bug: Fixed multiple cross site scripting vulnerabilities reported by Tomas Hoger of the Red Hat Security Response Team
-bug#0001292: Over 8TByte Partition in Windows cant get correct data from snmp
-bug#0001486: Unable to login after redirection to access denied page
-bug#0001516: "Show the page that user pointed their browser" does not seem to work
-bug#0001561: Over zelous HTML excaping on filter strings
-bug#0001575: LDAP-Authentifications does not work due to ldap_host being set incorrect
-bug#0001587: Feature from bug#0001271 breaks on large values
-bug#0001607: Web Basic authentication does not work with fastcgi
-bug#0001620: Max OID's max value reported incorrectly in Web UI
-bug#0001747: oid_suffix do not work correctly for input direction on data queries
-bug#0001756: Alternate font styles do not work correctly
-bug#0001757: LDAP realm authentication outputs warning for undefined index
-bug#0001763: Unable to add graph permissions on a user
-bug#0001765: Tech support does not work correctly with RRDTool 1.4.x
-bug#0001766: Page refresh setting not being honored
-bug#0001771: "index count changed" not implemented for query_unix_partitions.pl, query_host_partitions.pl, query_cpu_partitions.pl, ss_host_cpu.php and ss_host_disk.php
-bug#0001773: Character encoding problem after upgrade to 0.8.7f
-bug#0001775: Tech support page does account for no memory limit set for PHP
-bug#0001776: Simultaneous databases connections are not supported

0.8.7f
-security: SQL injection and shell escaping issues reported by Bonsai Information Security (http://www.bonsai-sec.com)
-security: Cross-site scripting issues reported by VUPEN Security (http://www.vupen.com)
-security: MOPS-2010-023: Cacti Graph Viewer SQL Injection Vulnerability (http://php-security.org)
-bug#0001125: XML parse error on template import with degree symbol
-bug#0001311: Access denied for graph-only users when accessing index.php directly
-bug#0001366: Exported data templates do not import special characters properly
-bug#0001416: Graph Export fails with EXPORT FATAL ERROR: Export path /some/path/root/export is within a system path /root. Can not continue.
-bug#0001452: Missing "<" and ">" in "Collection Methods=>Data Input Methods=>"Input String" after importing template
-bug#0001461: Data query export/import fails
-bug#0001492: RRDTool 1.3 series fonts (fontconfig) support
-bug#0001506: Reindexing fails due to global include issue in lib/snmp.php
-bug#0001522: Special characters break parsing of template data
-bug#0001524: Export graphs and Classical Presentation does not honor per graph export rules
-bug#0001528: ICMP Ping availabilty broken in UI for Windows Servers using IIS
-bug#0001535: No display of parent ID in tree nodes for CLI tree add script
-bug#0001543: All graphs are exported dispite graph export rules
-bug#0001549: Function array_to_sql_or creates poor sql where clauses
-bug#0001557: Quotes in Text Format graph template field break graph rendering
-bug#0001587: 64bit HEX Strings do not convert to Decimal on 32bit Systems
-bug#0001604: HEX Counter values enclosed in quotes not recognized as HEX
-bug#0001609: Script server timeout too aggressive with 10 second poller interval
-bug#0001628: Inconsistent message for Change SNMP Options related to available buttons
-bug#0001695: Suppress deprecated warnings in Cacti code
-bug#0001725: PHP Fatal Error while trying to add a tree node via cli
-bug: When creating new graphs without a data source, print error to user instead of throwing php error
-bug: Browser query string does not contain arguments
-bug: Function inject_form_variables does not operate if more than 1 variable needs replacing
-bug: Script imposed memory limits cause issues with some scripts
-bug: Turn off process leveling if there are not enough poller items to substantiate it
-bug: Add device should allow no-snmp type devices
-bug: Firefox Autocomplete causes issues with password validation
-bug: Access Denied messages do not allow re-direction to login page
-bug: When clearing filter on new-graphs do not clear host or template
-bug: When clearing filter, reset page to 1 for all queries
-bug: Graph List selectors do not persist between pages
-bug: allow empty [upper|lower]_limit even without autoscaling
-bug: Availability method Ping or SNMP generates meaningless warnings
-feature: Add logging to SQL Save error handling
-feature: Add utility to convert database to InnoDB
-feature: Return nav as the title for the page
-feature: Detect and correct for RRDtool segfaults
-feature: Add rra_id for hosts and graphs to be used during tree export
-feature: Make the Graphs pages render like the rest of Cacti
-feature: Convert base Cacti UI to use buttons and not images
-feature: Make poller sane so that it can be used by other cacti processes
-feature: Add snmp timeout warnings for lib/snmp.php

0.8.7e
-bug#0001044: Creating a DS, Output field can't be selected for DT with a DIM when "Use Per-Data Source Value" is on
-bug#0001341: SNMP query: add oid_suffix for weird SNMP queries
-bug#0001345: Overwriting $snmp_index in query_snmp_host() breaks SNMP Data query if using get method
-bug#0001346: Strip out noisy 'No Such Instance currently exists at this OID'
-bug#0001404: timeout in "function ping_icmp" (lib/ping.php)
-bug#0001405: Spaces in DS when .rrd file is created, so it fails
-bug#0001407: Place graph thumbnail into div to lower page length changes on load graphs
-bug#0001410: Thumbnail Columns is not honored for host display with snmp index group style
-bug#0001411: Graph searching issue
-bug#0001413: strip_quotes fails
-bug#0001426: multiple form opening due to bug in draw_edit_form()
-bug#0001436: CSV Export Start Date and End Date are always 1970-01-01 01:00:00
-bug#0001443: format_snmp_string can return a number with a leading space
-bug#0001446: Wrong dates override in CSV export
-bug#0001456: oid_uptime is not parsed correctly
-bug#0001460: Skiping input parameters in data_query_field_list() may lead to SQL errors
-bug#0001464: Typo in install/index.php
-bug#0001467: Customisable oid index parse regexp for weird MIBs
-bug#0001468: Tree is not expanded correctly
-bug#0001469: Tree is not being expanded if user followed link outside of cacti
-bug#0001476: Mark stacked columns in rrdtool_function_xport() output
-bug#0001477: Spelling error in a variable in html_tree.php
-bug#0001478: Combo boxes on Graph Management page produce URLs with leading spaces
-bug: Top Graph Header Breaks When Plugins Used
-bug: SNMP v3 Password issue caused by Firefox's Password AutoFill
-bug: Strip Quotes does not properly handle the value 'U'
-bug: Changes to the graph tree would not show up immediately for current user

0.8.7d
-bug#0001336: Allow to specify on_change handler for checkbox_group
-bug#0001338: When Using Web Basic Authentication HTML Bookmarks Do Not Work
-bug#0001388: Spine uses illegal flag for ping on Mac OS X
-bug#0001351: Deleting 1000 graphs along with their Data Sources crashes the Server
-bug#0001361: SNMP query: 'No more variables left in this MIB View' instead of value of input field
-bug#0001374: ss_host_disk.php etc. error corrected when using SNMP V3 (index off by 1)
-bug#0001376: graph_items.php variable $id defined in wrong place
-bug#0001377: Several bugs in new cli script "structured_rra_paths"
-bug#0001378: ping.pl script fails when using tcp:hostname
-bug#0001382: cdef.php error due to wrong function name
-bug#0001383: syntax error in lib/rrd.php with PHP 4.4.4
-bug#0001384: utilities.php does not handle view_snmp_cache when host_id = -1 (Any)
-bug#0001385: LDAP Error: Group DN could not be found
-bug#0001391: parsing snmp string with "=" ?? --> WARNING: Result from SNMP not valid
-bug#0001392: Problem on CDEF function ALL|SIMILAR_DATA_SOURCES_(NO)?DUPS
-bug#0001394: Error of variable in lib/html_tree.php
-bug#0001398: Cross site scripting checking is overly protective on search filters
-bug#0001400: LDAP authentication results in PHP warning message
-bug: Resolved issue with reapply suggested names not working for data sources under certain conditions
-bug: Correct missing db_conn argument issue
-bug: Deleting large number of hosts results in SQL errors due to MySQL buffer overrun
-feature: SNMP cli version information added to tech support page

0.8.7c
-bug#0000157: Dual pane tree does not have the option of not rendering all trees in one page
-bug#0000486: RRA template edit allows invalid XFF values
-bug#0000626: Setting "Default Graph Tree" does not work with dual pane view
-bug#0000828: Truncated IOS description in |query_ifAlias|
-bug#0000909: ALL_DATA_SOURCES_NODUPS breaks graphing when using "Consolidation Function" MAX
-bug#0000943: scripts/ping.pl has incorrect response when "icmp hop redirect" occurs
-bug#0000948: Exporting graphs to a local path does not work correctly in some cases
-bug#0000986: Graphs that are done by graph type are not exported when using the tree view
-bug#0001022: strip_quotes incorrectly parses script output
-bug#0001090: LDAP authentication fails when using quote character in password
-bug#0001135: Graph export feature not exporting as per user level selected
-bug#0001136: Regex ambiguous for mbstring
-bug#0001138: Lack of error checking causes graphs to not update when rrdtool crashes
-bug#0001141: Script server appears broken for "index" and "query" requests (Documentation Fix)
-bug#0001145: Save Failed error when changing Graph Details
-bug#0001153: Undefined variable: local_graph_id in graphs.php on line 201
-bug#0001166: Installer does not properly handle disabled guest_user conversion
-bug#0001174: Unidentified index warning
-bug#0001175: Hide hosts in Graph Permissions that you already have access to
-bug#0001176: Problem validating IPv6 addresses
-bug#0001188: Graph export issues in tree mode
-bug#0001191: Faulty IP address validation by ping.php script
-bug#0001180: Graph Export to CSV failed by using IE 6 SP2
-bug#0001194: RRDtool URL is incorrect on the about page
-bug#0001204: Since upgrade to 0.87b the hosts with ip address with 255 are down and have no datas
-bug#0001206: Graphs are not zoom-able with PHP warnings turned on
-bug#0001211: Allow use of "REMOTE_USER" if "PHP_AUTH_USER" is not set for authentication
-bug#0001213: Template Copy does not hash copied template_items
-bug#0001215: Impossible to define a none availability with the client cli/add_device.php
-bug#0001216: CSV Export for zoomed graph, results in Validation error
-bug#0001217: Default Graph Tree is not reflected in Left Pane of the graph page
-bug#0001223: Missing Hard return on last GPRINT causes bad formatting
-bug#0001228: LDAP server port not honored
-bug#0001230: Poller stops updating rrd files
-bug#0001236: Set 'stats_recache' to zero when no re-index is present
-bug#0001238: Guest user has access to change password
-bug#0001239: Using the TOTAL_ALL_DATA_SOURCES in a graph where all item are using the MAX CF yields an invalid(empty) CDEF
-bug#0001240: SNMP string cleanup removes too many '=' signs
-bug#0001244: Missing closing </form> on host.php
-bug#0001247: Snmp ping won't work for snmp v3
-bug#0001256: Spine-poller.c : Bug in size string sysUptime
-bug#0001258: "Remove Verification" is an ambiguous definition, leads to data loss
-bug#0001259: LDAP Authentication using Solaris 10 standard ldap client fails
-bug#0001262: Do not allow deletion of Graph Export User
-bug#0001264: CDEFs can't recognize |query_*|
-bug#0001268: resource/snmp_queries/net-snmp_disk.xml has incorrect name for "Percent Available"
-bug#0001271: Hex string to decimal conversion for proper RRDtool storage
-bug#0001273: Escape windows paths to accommodate spaces
-bug#0001281: ICMP Ping fails if an octet == 255
-bug#0001283: graph_image.php causes PHP Notice errors on view
-bug#0001286: poller_item cache is not updated when "Data Input Method" is changed
-bug#0001288: A host with ICMP ping selected as method does not properly perform ping
-bug#0001291: Reapply Suggested Names fails on Script Queries
-bug#0001293: When Creating Data Query Graphs, Performing Search will Cause List to Disappear
-bug#0001294: Stack overflow if database is not correctly initialized
-bug#0001295: Division by zero when rrd_step < poller_interval
-bug#0001296: add_graphs.php does not add the graph template to the host
-bug#0001299: When creating graphs the entire poller cache is recreated for a host
-bug#0001314: Use Data Query variables as HRULE input for graph templates
-bug#0001318: Graph Export with 1 minute poller re-exports graphs 5 times
-bug#0001320: Invalid PHP_SELF Path
-bug#0001326: If a user's password contains a single quote the login fails
-bug#0001342: VRULE printed as HRULE on graph_templates.php graph template item list
-bug#0001380: Expand description of ping retries
-bug: Remove include/html files to mitigate XSS issues
-bug: IE generates errors on both the host and graph settings pages
-bug: Host save failed in FireFox 3 for non-SNMP V3 hosts, complaining about "password mismatch"
-bug: Initialization of snmp_auth when using SNMP=NONE
-bug: Speed up add_graphs.php in most cases (still slow only if --input-fields is used)
-bug: If the poller_output table is not empty, do not flood the log
-bug: Remove warnings appear in the httpd log relative to reset attempts on settings array
-bug: Add API Automation tool quietMode to additional functions
-bug: When Cacti is launched from within an iframe, cookies are dropped from IE6
-bug: Database upgrade and cacti.sql differ
-bug: drop color setting background on FF does not work
-bug: cli/add_tree.php requires as least a host-id for --list-graphs
-bug: add_tree.php did not allow nodes with propagating sort options
-bug: When adding a tree node via the api numeric and natural were reversed
-bug: When saving a data query based data templates, their data sources would become corrupt
-bug: If your system contains INNODB tables, the Technical Support page would hang
-bug: The default user tree link icon would not be properly highlighted when opening graphs
-bug: Severe performance problems when adding data query based graphs.
-bug: Default refresh on Cacti Log was too quick
-bug: Some users do not like the idea of automatic page refreshes
-bug: Allow more rows to be visible in Cacti pages
-bug: Ping and SNMP should test both conditions
-bug: When step is less than poller interval, item will stop polling for long period of time
-bug: When using Web Basic authentication, user is directed to default page and not REQUEST URI
-feature#0000284: Custom <path_rra> for each device
-feature#0000431: Add php-xml to requirements, verify required PHP extensions
-feature#0000852: Have "Previous" and "Next" disappear when not in use (only for graph display)
-feature#0001082: Mirror Graph Rename based on template function to work with Data Sources
-feature#0001140: CLI-Script to associate a graph template to a host
-feature#0001162: WEB UI now accepts max_oids on SNMP bulkwalks
-feature#0001177: CLI Reindexing - poller_reindex_hosts.php: allow filter on "host description"
-feature#0001189: Introducing |data_source_title| variable
-feature#0001195: Add graph title to graphs page
-feature#0001201: Reapply Suggested Names for Data Sources and cli/poller_data_sources_reapply_names.php
-feature#0001205: Add filtering and pagination to cdef management; add "Duplicate CDEF"
-feature#0001220: Disable snmpbulkwalk if max OIDS is less than 2
-feature#0001233: Move $export_types variable definition from templates_export.php to include/global_form.php
-feature#0001233: Move $export_types variable definition from templates_export.php to include/global_form.php
-feature#0001235: CLI script needs to activate a query: add_data_query.php
-feature#0001250: Dispatching job in poller can lead to unbalanced threads
-feature#0001249: New pseudo CDEF variables for "Count All|Similar Data Sources (NO)?DUPS"
-feature#0001289: Add "Graph Properties" wrench to tree+preview mode
-feature#0001323: List all graph template associated with a host template
-feature#0001306: Add Blank Line as possible graph item
-feature: Paginate Treeview Dual Pane
-feature: Allow user to specify maximum graphs per page from Treeview Dual Pane
-feature: Allow Treeview Dual Pane to be filtered for graph titles
-feature: Allow the user to add or remove graph text from page for searching with the browser
-feature: Add links to Graph Management and Data Sources to Device Edit Screen
-feature: Add links to Graph Template and Host Edit to Graph Edit Screen
-feature: Add links to Data Template and Host Edit to Data Source Edit Screen
-feature: Support using the cacti database api with more than one connection
-feature: Add some more debug lines to Data Query debugging (Verbose Query)
-feature: Fix compatibility issues for RRDTool 1.3
-feature: Make the tabs section work a little better with existing plugins
-feature: Add additional options to speed data query graph automation process
-feature: Add additional indexes to speed data query graph creation
-feature: Allow the cli reindexing of hosts to be limited to a single query
-feature: New cli command host_update_template to allow re-templating of hosts using an updated template
-feature: When reindexing hosts, allow a queryid to be specified
-feature: Add command line Database upgrade script
-feature: Add api call to associate graphs with their data sources
-feature: Move the notes field to bottom of page
-feature: New availability option "Ping or SNMP"
-feature: Allow for specification of a default reindex method
-feature: Show more colors on a single color's page
-feature: Exit is either a database or table does not exist
-feature: Add developer debug level to reduce SQL messages in DEBUG
-feature: Add support for group membership for LDAP authenication

0.8.7b
-bug#0000855: Unnecessary (and faulty) DEF generation for CF:AVERAGE
-bug#0001083: Small visual fix for Cacti in "View Cacti Log File"
-bug#0001089: Graph xport modification to increase default rows output
-bug#0001091: Poller incorrectly identifies unique hosts
-bug#0001093: CLI Scripts bring MySQL down on large installations
-bug#0001094: Filtering broken on Data Sources page
-bug#0001103: Fix looping poller recache events
-bug#0001107: ss_fping.php 100% "Pkt Loss" does not work properly
-bug#0001114: Graphs with no template and/or no host cause filtering errors on Graph Management page
-bug#0001115: View Poller Cache does not show Data Sources that have no host
-bug#0001118: Graph Generation fails if e.g. ifDescr contains some blanks
-bug#0001132: TCP/UDP ping port ignored
-bug#0001133: Downed Device Detection: None leads to database errors
-bug#0001134: update_host_status handles ping_availability incorrectly
-bug#0001143: "U" not allowed as min/max RRD value
-bug#0001158: Deleted user causes error on user log viewer
-bug#0001161: Re-assign duplicate radio button IDs
-bug#0001164: Add HTML title attributes for certain pages
-bug#0001168: ALL_DATA_SOURCES_NODUPS includes DUPs? SIMILAR_DATA_SOURCES_DUPS is available again
-bug: Cacti does not guarentee RRA consolidation functions exist in RRA's
-bug: Alert on changing logarithmic scaling removed
-bug: add_hosts.php did not accept privacy protocol
-security: Fix several security vulnerabilities
-feature: show basic RRDtool graph options on Graph Template edit
-feature: Add additional logging to Graph Xport
-feature: Add rows dropdown to devices, graphs and data sources
-feature: Add device_id and event count to devices
-feature: Add ids to devices, graphs and data sources pages
-feature: Add database repair utility
-feature: Default Script Server/Script Queries now accept host specific ping_retries, max_oids
-feature: Support for new variables |host_ping_retries| and |host_max_oids|

0.8.7a
-bug#0000895: "Use Per-Data Source Value (Ignore this Value)" runs only when when checking "Allow Empty Input"
-bug#0001029: Add --autoscale-min (rrdtool 1.2.x only) and --autoscale-max (using upper AND lower limit)
-bug#0001035: Allow for --logarithmic scaling without autoscaling
-bug#0001038: Data sources in RRAs have random order, messing up predefined CDEFs
-bug#0001043: Graph Templates drop down populates with duplicates
-bug#0001046: Upgrade from 0.8.6j to 0.8.7 defaults to Authentication Method NONE
-bug#0001052: Graph template - GRINT creates CF function DEF
-bug#0001055: Invalid date format - "half hour" not the GNU Date format
-bug#0001057: SQL error when using 'Auth Method' None when no 'guest' user exists
-bug#0001058: Graph Filter dropdowns do not respect user graph permissions
-bug#0001059: Potential SQL injection vulnerability
-bug#0001060: RRDtool 1.2.15 complain for garbage characters when rrdtool_function_xport is used
-bug#0001061: cmd.php: potential call to invalid "availability_method" key on wrong hash
-bug#0001064: Log file viewer inefficient filtering uses excess memory
-bug#0001066: doc change for using COUNTERs as integers only
-bug#0001067: Fixed extra spaces in GPRINT. Better Alignment for Autopadding
-bug#0001068: doc change for patching cacti when running SELinux
-bug#0001070: Cron interval detection causes multiple pollers to run
-bug#0001073: Max OIDS is not saved in device view
-bug#0001078: Undefined variable: rra in graph.php on line 241
-bug#0001079: Dates are not stored in host table using correct format
-bug#0001080: Graph Export Generates SQL Errors
-bug#0001081: Usernames with spaces and dashes are not able to save
-feature#0001035: Allow for --units=si on logarithmic scaled graphs (rrdtool-1.2.x only).
-feature#0001069: add opacity/alpha channel to graph items (rrdtool-1.2.x only).
-feature#0001065: Move to Top for List and Tree View. Omit boring scrolling
-feature: add availability pings to host interface

0.8.7
-bug#0000480: Fix error after altering graphs displayed per page
-bug#0000740: Add support for setting the PHP session name of Cacti
-bug#0000829: Add support for an specifying an uptime OID for SNMP queries
-bug#0000830: Add filtering graphs by Graph Template
-bug#0000833: Add favicon.ico support
-bug#0000850: Add Select All for graph list view
-bug#0000854: Move "Downed Host Detection" into the device edit screen
-bug#0000873: Fix issues with the poller hanging in certain situations
-bug#0000876: Add ability to search for host with a not UP status
-bug#0000898: Selecting a CUSTOM timespan and then CLEARing yields "LAST HALF HOUR" preset
-bug#0000899: Add local checking to the Paths tab on the Settings page
-bug#0000902: Fix issues with cmd.php and PHP 4.4.1 under windows
-bug#0000903: snmpgetnext function does not exist in PHP less than 5.0
-bug#0000904: Data Source creation fails without php-snmp
-bug#0000906: Every tenth host does not show on tree during console edit
-bug#0000907: Sorting of data sources when interface numbers are used without leading zeros are incorrectly sorted
-bug#0000908: Graphs created by SNMP data queries are losing their specific names if the template is modified
-bug#0000910: Cacti complains when trying to set the data source "maximum value" to any number with a decimal point
-bug#0000912: Nth Percentile thumbnail graphs fail with RRDtool 1.2.15, 1.2.18
-bug#0000913: Allow direct linking to specific graph pages
-bug#0000919: Fix problem with ping_tcp function
-bug#0000920: Improved handling of rrdtool --font parameter
-bug#0000921: Improvement to ping.pl script
-bug#0000925: Support for host_* variables in the legend
-bug#0000926: Stop removing useful characters when searching
-bug#0000927: Classic export does not recognize thumbnail columns properly
-bug#0000931: New rrdtool fails on empty comment
-bug#0000934: Column 'status_last_error' in table 'host' too short.
-bug#0000937: System output in hosts.php poor for Alcatel
-bug#0000946: Timetick of zero returns down for device
-bug#0000947: Trailing blank on OID in form causes problems
-bug#0000953: SNMP Passphrase is displayed in cleartext
-bug#0000954: Y-grid lables are not informative when using --alt-autoscale
-bug#0000955: Fixed possible denial of service attack by modifying graph image URL
-bug#0000956: Additional editing help with tree management
-bug#0000957: Script server output's beginning/trailing data during "Include" causing a synchronization issue
-bug#0000958: Slope Mode is now selectable
-bug#0000959: Alarming added when poller output table is not empty
-bug#0000963: TCP/UDP capitalization
-bug#0000965: When setting filters under utilities, pressing enter takes you back to the main page
-bug#0000966: Log file viewing utility has no ability to filter
-bug#0000969: In some versions of PHP, the graph tree will not view properly
-bug#0000970: Incorrect debug messages in lib/ping.php for failed UDP ping
-bug#0000974: No graphs on Fedora core6 using sunone/iplanet 6.1 SP5
-bug#0000975: Add Nth Percentile aggregate_current - Summing Multiple Data Sources with like names for Nth Percentile
-bug#0000982: Remove invalid references to the "output_string" column in the "data_input" table
-bug#0000983: Bad SQL: snmp_query_graph_rrd.snmp_query_graph_id=
-bug#0000984: Poller does not correctly flush poller_output table after a memory error
-bug#0000989: hyphen - host description used with Data Source Path
-bug#0001001: "Purge User Log" keeps invalid entries
-bug#0001002: Cacti reports incomplete interface status
-bug#0001007: SNMPv3 password field allows command injection
-bug: ss_sql.php causes the script server to crash
-bug: Timeshifter added to base code
-bug: Allow query_ and host_ substitution in COMMENT and CDEF's.
-bug: Command line interface scripts to add devices, graphs, tree's and permissions.
-bug: Correct index error when creating graphs when you have no hosts on your system.
-bug: More recent versions of net-snmp broke SNMP walk functions.
-bug: Adjust for problematic responses from some SNMP agents (IBM AIX).
-bug: Improve logging in cmd.php and poller.php when parameters are not specified correctly.
-bug: Reduce the total number of SQL queries called
-bug: Replace inefficient strip function in process_poller_output
-bug: Some php_snmp implementations return strings as "Hex-STRING:".  In these cases properly resolve the string
-bug: Correctly assign right and left click actions for Opera
-bug: Fix SQL error when viewing an invalid Data Source via the Log Viewer
-bug: Fix command line user copy utility
-feature: Paginate the Graph Creation Page
-feature: Add SNMPv3 Support to Cacti
-feature: Add a Notes field to the Device that can contain arbitrary information
-feature: Add Availability Methods to Cacti including per Host Ping Methods and Timeouts
-feature: Add Max OID's to te Host Level
-feature: Allow CSV Export from the various Graphs page
-feature: Add rra_path as a global.php config variable
-feature: Add drop down actions to data queries
-feature: Add drop down actions to data input methods
-feature: Add drop down actions to user administration
-feature: Add filtering and pagination to data queries
-feature: Add filtering and pagination to data input methods
-feature: Add filtering and pagination to host templates
-feature: Add filtering and pagination to user administration
-feature: Add extended LDAP authentication support
-feature: Add Web Basic authentication
-feature: Add authentication realm to modifiable user parameters
-feature: Add multiple polling intervals
-feature: Moved command line scripts to cli sub directory
-feature: include/config.php now only includes database configuration
-feature: include/config_* have been renamed to include/global_*. Note: Script servers need to be updated.
-feature: Allow VRULE's in Cacti to specify an absolute timestamp in addition to [+/-]HH:MM
-feature: Add 1 minute RRA
-feature: Add item select highlighting to main pages
-feature: Let poller.php be more intelligent about poller intervals less than 60 seconds
-feature: Add consistency to Filters by adding nowrap to td items
-feature: Add Graph and Data Source counts to Device page
-feature: Add Poller Interval to Data Sources page
-feature: Keep filters aligned with main page content on window resize
-feature: Add Enable/Disable user
-feature: Add copy and batch copy of users
-feature: Reduce ADODB memory consumption during polling
-feature: Add new RRDtool Function to facilitate CSV export
-feature: Add the ability to ignore custom RRA settings when importing templates and use this behavior by default
-feature: Add technical support output to System Utilities
-compat: Add additional checking due to php-snmp changes in Windows
-compat: Remove GIF as a supported file type for RRDTool 1.2.x and added SVG file type

0.8.6j
-bug#0000842: SNMPv3 password field does not check if entered passwords match.
-bug#0000848: Fix "PHP Script Server communications lost" error in the poller under high network load.
-bug#0000859: User log "purge" now keeps the last successful login.
-bug#0000861: Use downed host detection even when the SNMP community is blank.
-bug#0000864: Apply natural sort to graph items in the tree.
-bug#0000867: Apply various cleanups to poller.php and lib/poller.php.
-bug#0000870: Add sorting to the graph templates list on the "Change Graph Template" page.
-bug#0000877: Fix issue that caused PHP 5.2.0 to break the Windows cmd.php poller.
-bug#0000882: Add "collapsible" branches to the graph tree editor.
-bug#0000883: Fix exploit in cmd.php with register_argc_argv enabled in PHP.
-bug#0000884: Add bottom navigation bar to graph viewing.
-bug#0000885: Fix issue causing spaces to be removed when importing/exporting data input methods.
-bug#0000886: Allow SNMP ping to utilize the snmpgetnext call instead of snmpget.
-bug#0000890: Fix issue with dec-vulnerability-poller patch breaking graph_view.php.
-bug#0000892: Fix hostname sorting on the devices page for IP addresses.
-bug#0000894: poller.php does not give any output with MySQL disabled in CLI's php.ini.
-bug: Template export produces invalid XML escaped character encoding.
-bug: Data queries were not sorted properly during initial display.
-bug: Apply various graph changes required for Boost plugin.
-bug: If your system has no hosts or graphs, you would get a warning when creating new graphs.
-bug: If using the CGI version of PHP, the script server risked not starting properly.

0.8.6i
-bug#0000188: Add ability to sort columns by selecting column headers.
-bug#0000199: Exported thumbnail graphics shows limited time range only.
-bug#0000207: Correct unit size displayed in the default 'Localhost - Memory Usage' graph.
-bug#0000286: Fix issue with bandwidth summation on exported graphs.
-bug#0000313/#0000561: Don't print menu/titlebar by using CSS class noprint.
-bug#0000316: Take the unit value field into account when creating graphs.
-bug#0000395: Fix graph export FTP functionality in Unix environments.
-bug#0000430: Add natural sort order option for graph trees.
-bug#0000433: Remove script server restriction on varying case path names.
-bug#0000488: Remove reliance on HTTP_USER_AGENT to prevent possible notices.
-bug#0000527: Fix issue updating the RRA for a graph tree item.
-bug#0000584: Add barometer decimal fix to scripts/weatherbug.pl.
-bug#0000624: Generate DEFs for graph items other than AREA, STACK, and LINE.
-bug#0000643: Always display a human readable sysUpTime in the device edit page.
-bug#0000665: Invalid index error on empty or 0 return set from rrdfetch with Nth Percentile.
-bug#0000672: When creating a device, the Host Template was not properly validated.
-bug#0000678: Allow graph export to a Cacti sub directory.
-bug#0000681: Increase the size of the arg1, arg2, and arg3 fields in the poller_item table.
-bug#0000692: Fix problems with FTP and the tree export method.
-bug#0000693: Fix problems with the "Expand Host" option and the tree export method.
-bug#0000698: Make arguments to 'df' more compatible with FreeBSD 6.0 in the "Get Unix Partitions" data query.
-bug#0000705: Fix problem with the current selected data source item and SIMILAR_DATA_SOURCES_NODUPS (again).
-bug#0000709: Fix problems with FTP and the tree export method (duplicate).
-bug#0000720: Fix undefined variable message in script_server.php.
-bug#0000721: SNMPv2 Query has issues with ifAlias & ifName when none present.
-bug#0000727: Allow a user with specific graph permissions to be used when exporting graphs.
-bug#0000730: Allow non-standard MySQL ports to be specified.
-bug#0000731: Use proper defaults when adding a device to a tree from the Devices page.
-bug#0000739: Stop ignoring the "Unit value" parameter in the graph template.
-bug#0000741: Fix issue with links getting mismatched after using zoom on a graph.
-bug#0000746: Make sure clearing Cacti log file from web interface preserves file permissions.
-bug#0000752: Allow OID's greater than 255 characters except for the index OID because of MySQL index limitations.
-bug#0000758: LDAP user with non-alphanumeric characters in the password failed to authenticate.
-bug#0000761: Correct input validation to allow all possible numbers in the RRAs form.
-bug#0000766: Increase the size of the id field in the graph tree items table.
-bug#0000769: Use only selected RRA's when exporting graphs.
-bug#0000775: Add pagination to the SNMP cache viewer to handle large numbers of items.
-bug#0000779: Scale down the size of text when viewing thumbnail graphs.
-bug#0000781: Add an "enabled" filter status item in the devices list.
-bug#0000785: Fix issue with Graph Tree View and Data Query Index Sorting showing "Non Indexed" even if empty.
-bug#0000786: Expose the SNMP port field to data sources that use SNMP.
-bug#0000789: Remove use of "action" attribute on graph tree image which is incompatible with newer Opera browsers and HTML4.
-bug#0000797: Fix issue with filtering on multiple fields on the Data Sources and Graph Management pages.
-bug#0000809: Add an option to "purge" the user_log table.
-bug#0000814: Prevent Apache from segfaulting if the database permissions are not correct.
-bug#0000815: Paginated the Cacti log file viewer to handle large numbers of items.
-bug#0000821: Add missing menuarrow.gif image.
-bug#0000823: Prevent Cacti from overwriting data during the creation of a new data template.
-bug: Do not allow the device filter on the graph items editor to clear the selected data source.
-bug: SQL query incorrectly formatted causing SQL queries to fail in preview mode.
-bug: Setting a host template filter in devices, followed by moving off and then back on the page generated an error.
-bug: PHP 5.1 snmpwalks utilize the bulk method by default.  Therefore, prefer them over the bulkwalk binary.
-bug: Allow read_config_option to force a database refresh when one is wanted.
-bug: Fix to resolve script server script not returning data as expected.
-bug: Make load average script compatible with Mac OS X systems.
-bug: Correct an issue where under certain circumstances, |query_ifSize| was being implemented as the maximum value for an RRD.
-bug: Correct issue where DHTML caching was not working with expand hosts enabled.
-bug: Add SNMP retries option to Cacti's SNMP functions.
-bug: Once Graph Export has been enabled, do not allow Cacti to run even after it has been disabled.
-bug: Correct alphabetic tree sorting to be more natural.
-bug: Fix meta refresh tags to use proper URL syntax.
-bug: Do not allow the graphs setting page to use the refresh interval, which can cause it to refresh while the user is inputting data.
-bug: Make sure that data query index ordering with the "index_order" XML field is always respected.
-bug: Limit the number of rows retrieved from the poller_output table to minimize the impact low memory system configurations.

0.8.6h
-bug#0000383: Add more verbose RRDtool debug output from Graph Management.
-bug#0000522: Take 'oid_index_parse' into consideration when handling 'OID/REGEXP:' data query fields.
-bug#0000528: Allow template_import.php to return without error when XML file is invalid in PHP 4.4 and above.
-bug#0000557: Changing filter value resulted in invalid page/row selection.
-bug#0000572: Added $database_port to config.php.
-bug#0000570: Grammar edit for text about already up-to-date.
-bug#0000571: Misleading diagnostic error messages during install have been updated.
-bug#0000582: Ampersand present in graph template graph name causes XML import to fail.
-bug#0000585: Graphing fails using AREA/STACK/LINE/HRULE/VRULE without defined color.
-bug#0000586: Remove static reference to RRA ID #1.
-bug#0000596: Proper escape of ' in graph titles.
-bug#0000599: Add filtering to graphs and data templates.
-bug#0000601: Add ability to add multiple hosts to a tree.
-bug#0000603: user_log.ip field not ipv6 compatible.
-bug#0000608: Minor coding error in lib/poller.php with a erroneous pclose statement.
-bug#0000615: Add sysContact and sysLocation output to device edit page.
-bug#0000619: Host templates not alphabetized on device creation form.
-bug#0000625: Cannot modify/create a user with a period in the username.
-bug#0000631: Invalid information concerning delimiter for index_order in SNMP Query documentation.
-bug#0000650: Clicking Cancel in Create Graphs for this Host does nothing.
-bug#0000656: Perl scripts using back ticks is not portable.
-bug: Stop MySQL connect messages from appearing in user interface.
-bug: Allow primary keys other than "ID" to work in sql_save and in HTML code.
-bug: Save statistics even when the poller times out.
-bug: Only call poller_commands.php or poller_export.php if they require calling.
-bug: Incorporate a timeout to ss_fping.php so that a host that takes to long to finish at least returns data.
-bug: Correct the display of custom data under data input methods to follow the proper order.
-bug: Change the default behavior of ping.php to mark a host as up if either SNMP or ping are successful.
-bug: Don't allow graph_export to delete your web site.
-bug: Correct issue where SNMP was not returning both hex and text data under certain circumstances.
-bug: Prevent a never ending table lock in lib/tree.php.
-bug: Correct issue where either AREA or LINEx without color were causing RRD_NL without any elements in rrdtool_graph.
-bug: Allow hostname to include the TCP: prefix for TCP based snmp and keep tcp, icmp, udp ping functional
-bug: Better error reporting for Clear Cacti Log File in Utilities
-bug: Graphs with items having Legend text defined but no color will fail under RRDtool 1.2.x.
-feature: Add MySQL 5.x support.
-feature: Add IPv6 support to lib/ping.php.
-feature: When utilizing cmd.php, do not run the script_server if it is not required for a process.
-feature: Incorporate snmpbulkwalk binary path to user interface to speed snmpv2 and snmpv3 walk calls.
-feature: Incorporate snmpgetnext binary path to user interface to make available for certain plugins.
-feature; Add support for Nth percentile functions, not just 95th.
-feature: Add support for new Nth percentile variables: aggregate, aggregate_max, aggregate_sum.
-feature: Allow additional filtering for graph item adding while creating graphs.
-feature: Add Command line script to copy users: copy_cacti_user.php.
-feature: Add Command line script to reindex hosts: poller_reindex_hosts.php.
-feature: Add Command line script to rebuild the poller cache: rebuild_poller_cache.php.

0.8.6g
-bug#0000351: Fix zooming capability in Safari.
-bug#0000491: Allow underscore, dash, and forward slash characters through search string validation.
-bug#0000498: Fix issue where editing data input methods damaged portions of the database.
-bug#0000502: Fix Syslog support in unix.
-bug#0000506/#0000517: Properly handle special XML characters when importing/exporting templates.
-bug#0000508: Fix issues where filter functionality would not work in preview mode.
-bug#0000512: Increase script server buffer size for large output.
-bug#0000520: Fix issue where LDAP authentication causes crash/abort.
-bug#0000521: Add graph/data source title mouseover support.
-bug#0000525: Make sure that all files in the Cacti distribution contain an EOF character.
-bug#0000530: Remove 132 character limitation for OID's during polling.
-bug#0000531: Make sure that quote characters in suggested value fields are properly escaped.
-bug#0000535: Fix template export support for PHP 4.4.
-bug#0000536: Fix printing of zoomed graphs where in IE where a white box would appear over the graph.
-bug#0000537: Re-implement functional SNMPv3 support (authNoPriv only)
-bug#0000543: Always allow non-templated graph/data template fields to be blank.
-bug#0000544: See graph tree export contrib below.
-bug#0000547: Fix issue with escaping certain control characters, causing the graph tree to break.
-bug#0000552: Fix typo on the Settings page.
-bug: Fix multiple output support in the script server.
-bug: Fix incompatible binary SNMP calling parameter issue with NET-SNMP versions earlier than 5.1.
-bug: Fix issues encountered when polling invalid data sources.
-bug: Fix issue where if a host was deleted, re-indexing would continue to attempt to be performed on it.
-bug: Allow lib/ping.php to be included in user script server scripts.
-bug: Eliminate the need to run php-win.exe in Windows environment.  Will now work with just php.exe.
-feature: Add a great new graph export format "Tree Presentation", thanks to our friend from Toulouse France (forums user: jaybob).
-feature: Allow data query |query_*| variables to be used within a CDEF string.
-feature: Force export functions into a separate poller process.
-feature: Force re-caching of data queries into a separate poller process.
-feature: Added filter capability to graph list view mode.
-feature: Enhanced ss_fping.php and ping.php to inclue ICMP, TCP and UDP ping functionality and to specify a port.

0.8.6f
-security: Hardened PHP Project Advisory #042005 - Cacti Authentification/Addslashes Bypass Vulnerability
-security: Hardened PHP Project Advisory #022005 - Cacti Multiple SQL Injection Vulnerabilities
-security: Hardened PHP Project Advisory #032005 - Cacti Remote Command Execution Vulnerability

0.8.6e
-bug#0000143: Allow the user to enter 'U' for unknown minimum and maximum data source input values.
-bug#0000377: Fix logarithmic graph creation issues.
-bug#0000392: Implement caching to reduce the number of SQL queries needed to render the graph tree.
-bug#0000402/#0000457: Allow bounds to be set properly for logarithmic graph creation.
-bug#0000428: Unable to try login again after Access Denied.
-bug#0000450: Force strict checking for data query parsing to prevent numeric values from being incorrectly handled.
-bug#0000453: SPAN tag between each character of GraphTitle in Graph Management.
-bug#0000458: Generate and error message and exit poller.php if the cactid binary path is invalid.
-bug#0000463: Fix Syslog logging of poller statistics.
-bug#0000464: Remove dates from Syslog generated messages.
-bug#0000465: Allow for the mass resize of graphs.
-bug#0000471: Remove the graph 'Settings' tab if the user is not allowed to save graph settings.
-bug#0000478: Validate field input values on the Data Templates page. Prevent duplicate data template items from appearing as a result of this bug.
-bug#0000481: Add several checks to prevent PHP errors when parsing data query XML files.
-bug: Graph zoom feature had incorrect bounding box when using RRD 1.2.x
-bug: Speed the generation of the Tree View Dual Pane by caching the Tree to a local session variable.
-bug: Handle STACK graph items properly in RRDtool 1.2.
-bug: Prevent data query recaches if the device returns empty input.
-bug: Fix potential issues with graph gaps when using a large number of poller processes.
-bug: Fix issues when zooming with new RRDtool 1.2 title fonts with a point size other than 10
-bug: Fix issues when zooming outside of the select areas causing a broken graph
-bug: Fix issues experienced when users attempted to create custom graphs and thousands of data sources exist
-feature: Add ability to filter by host status as well as add ability to filter accross both description and hostname
-feature: Add additional options to control RRDtool 1.2 fonts.
-feature: Allow the user to Enable/Disable Data Sources from the user interface and automatically disable hosts when deleting a device.
-feature: Add Data Source information to the Cacti Log File to assist with troubleshooting.
-feature: Add html links to both hosts and data sources in the Cacti Log File.
-security: Fix several remote inclusion bugs that were exploitable when PHP's 'register_global' feature is turned on [IDEF0941], [IDEF1023], [IDEF1024].
-security: Fix several SQL injection bugs due to improper input validation [IDEF1001].

0.8.6d
-bug#0000416: Speed up binary net-snmp calls by removing MIB lookup requirement.
-bug#0000434/#0000403: Allow for periods in script return variable names.
-bug#0000436: Made snmp.php more like version 0.9 code base.
-bug#0000419: Fixed session initialization problems with some browsers.
-bug#0000394: Fixed a web server crash when reordering items in a graph tree.
-bug#0000390: Remove deep linking in Cacti.
-bug#0000389: Implement directory security in Cacti.
-bug#0000443: Add SNMP port/timeout to the Host MIB CPU/disk script queries.
-bug: Corrected issues encountered when creating multiple graphs from a single graph template.
-bug: Corrected a problem where no graphs are displayed in the graph tree when authentication is turned off.
-bug: Allow RRDTool fetch command to retrieve negative numbers.
-bug: Increased some field lengths for very long OID's.
-bug: Removed references to non-existing code when attempting to make database connections.
-bug: Give poller cache more time to process entries during a clear operation, give it more memory.
-bug: Changed default value in Unix ping script to correct for template bug.
-bug: Fixed page refresh issue.
-bug: Fixed include ordering in config.php to accommodate MySQL bugs and logging.
-bug: Changed SNMP ping OID to be sysUptime because it is more common.
-bug: Increased PHP timeout to accommodate for long running recache events causing poller issues.
-bug: LDAP Auth with no DN specified and blank username would allow login.
-feature: Basic support for RRDTool 1.2 including specifying a default True Type Font.
-feature: Added support for spike suppression within the cmd.php poller.
-feature: Support php_snmp version 2 builtin functions.

0.8.6c
-bug#0000354: User Name field always displays "admin" in Mozilla web browser.
-bug#0000293: JavaScript selection bug on the "New Graphs" page.
-bug#0000352: Problem with the current data source item when using the "Similar Data Sources" special data source.
-bug#0000348: Scale problems with the "ucd/net - Memory Usage" graph template.
-bug#0000358: Problems adding the same graph to more than one graph tree.
-bug#0000355: Allow scientific and negative numbers to be returned from a script.
-bug#0000347: Change Order of Graph Templates and Data Queries in Host.
-bug#0000339: LDAP description misspell 'allow'.
-bug: Maximum runtime issues with the script server.
-bug: User could select a data query graph type from "Graph Templates", causing duplicate data source items.
-bug: Auto-recache failed and caused the poller to crash under specific circumstances.
-bug: Problems saving a user's graph settings from the user admin page.
-bug: Poller cache not being updated properly for some host types upon change.
-bug: Hope it's final this time: 95th percentile and bandwidth summation fixes.
-bug: Added more verbose error handling with template XML importing.
-bug: Sort host templates when creating a host.
-bug: Corrected user form edit array problem that didn't show the graph options for an edited user.
-bug: Access Denied error when user doesn't have console access.
-bug: Return type bug in cacti_snmp_walk() which could cause extra blank data query rows.
-feature: Data queries now support indexes that span multiple OIDs (see the manual).
-feature: Re-apply suggested naming to graphs from the user interface.
-feature: TreeView-specific feature to speed up rendering the tree for large databases.
-feature: Added retry logic to the MySQL connect statements.
-feature: Changed default connect method to a 'pconnect' from a 'connect' to improve performance with large implementations.
-feature: Add support for Safari on the graph zoom page.

0.8.6b
-bug#0000318: Only delete the Cacti system user when uninstalling the RPM package rather than during each upgrade.
-bug: Problems with the 95th percentile and bandwidth summation graph variables.
-bug: Problem with random gaps in some or all graphs caused by staggered RRDTool update times.

0.8.6a
-bug#0000287: Non-host based scripts failing to populate the poller cache (0.8.6).
-bug#0000285: Data query variables on graphs should reflect the data source of each individual graph item (0.8.6).
-bug#0000289: Check the value of PHP's "magic_quotes_gpc" setting to prevent potential security holes (0.8.6).
-bug#0000295: Problem with the DHTML tree when Cacti is included inside of a parent frame.
-bug#0000311: Set PHP's "max_execution_time" to "0" during all upgrades.
-bug#0000303: Correct the logic that checks if the export path directory exists or not.
-bug#0000310: Problems viewing data templates with the "Data Input Method" set to "None".
-bug#0000304: Problems displaying duplicate data templates on the main "Data Templates" screen.
-bug#0000302: Update the Windows install documentation to mention the "PHPRC" environment variable.
-bug#0000293: Problem with the JavaScript that grays out already created graphs on the "New Graphs" page.
-bug#0000312: Make sure that the "host_graph" table is populated in the installer for users coming from a version less than 0.8.4.
-bug#0000296: Remove references to PHP's ob_flush() function it doesn't exist until verion 4.2.
-bug#0000314: Respect graph export timing settings.
-bug: Problem saving a templated graph or data source that contained a checkbox field that had a value different from the default.
-bug: Typo in graphs.php when placing graph(s) on a tree.
-bug: Make sure that there is a user logged in before trying to read a per-user graph configuration value.
-bug: Fix support for multiple cmd.php/cactid polling sessions in a single poller.php session.
-bug: Revert back to older RRDTool update method as to correct several poller related issues with 0.8.6.
-bug: Fix PHP-SNMP support in cmd.php.
-bug: Fix multiple graph/data template corruption issues when converting from graphs or data sources.

0.8.6
-bug#0000051: HTTP header caching problems (0.8.5).
-bug#0000121: It is no longer possible to add the same graph twice to a single graph tree branch.
-bug#0000123: Several UI fixes on the tree item edit page (0.8.5).
-bug#0000124: Select all check boxes would actually invert the selection.
-bug#0000128: Graph template item corruption issues (0.8.5a).
-bug#0000139: Graph tree deletion corruption issue (0.8.5a).
-bug#0000140: Replaced the 'None' option in several host drop downs with 'Any' and redefined 'None' to mean host = 0 (0.8.5a).
-bug#0000144: Possible corruption issues when deleting tree items from the root of the tree.
-bug#0000149: Error using the 'total' type for 95th percentile or bandwidth summation.
-bug#0000151: Added the ability to duplicate a host template.
-bug#0000160: A change in Mozilla 1.5+ caused extra vertical space to appear on many table rows throughout the console.
-bug#0000164: HostMIB scripts do not respect SNMP port and timeout parameters.
-bug#0000173: Increase the number of characters dedicated to each tier from 2 to 3 which increases the item per tier/branch limit to 999.
-bug#0000174: Broken thumbnail graphs that contained a 95th percentile HRULE item.
-bug#0000175: Strip quotes from SNMP output to prevent UI escaping issues.
-bug#0000176: Added the '-P' argument to 'df' to prevent multi-line output for the query_unix_partitions.pl script.
-bug#0000179: Updated ADODB to version 4.23 which enabled Cacti work with PHP 5.
-bug#0000198: Strip greater and less than characters from SNMP output to prevent UI escaping issues.
-bug#0000214: Rename 'Utilities' to 'System Utilities' and move it under the 'Utilities' menu heading.
-bug#0000235: Limit the number of pages displayed for graph management, data sources, and devices.
-bug#0000244: Prevent PHP errors from being displayed during summation/95th percentile calculation when the .rrd file does not exist.
-bug#0000253: Fixed recursive CDEFs.
-bug#0000254: CDEF dropdown list in adding another CDEF is not sorted.
-bug#0000265: Removed "CANNOT FIND GUEST USER" error message.
-bug#0000273: Fixed 'rrdtool fetch' parsing for RRDTool 1.0.9.
-bug: A hash was not being generated for duplicated graph and data templates which would cause import/export for those templates to fail.
-bug: A user's graph permissions may fail to delete properly after removing that user.
-bug: The "Export Every x Times" feature did not work correctly.
-bug: Work correctly with PHP's get_magic_quotes_gpc() turned off.
-bug: Eliminated potential password injection attack in auth_login.php.
-bug: Eliminated popen issues in cactid win32 with threads > 1.
-feature/bug#0000118: Data source screen UI enhancements (0.8.5).
-feature/bug#0000120: Deleting a tree header should delete all child items (0.8.4).
-feature/bug#0000125: A forced sort type can be specified for data query indexes which will be used to sort data query results in the UI.
-feature/bug#0000152: Added filter/search/pagination capabilities to the Devices page.
-feature/bug#0000155: Allow hosts on the graph tree to be grouped by data query index (ie. switch port, partition, etc) instead of only graph template.
-feature/bug#0000156: Added the ability to sort a graph tree branch alphabetically or numerically.
-feature/bug#0000161: Removing a graph now gives the user the option to remove all associated data sources.
-feature/bug#0000172: Added the ability to control which graph viewing areas should display thumbnail graphs and which ones should display full sized graphs.
-feature/bug#0000185: Deleting a device gives the user the option of deleting all associated graphs and data sources.
-feature/bug#0000187: Add host availability and device enabled/disable controls to the main devices page.
-feature/bug#0000189: Add a system-wide defaults for SNMP community, version, port, timeout and retries configurable under 'Cacti Settings'.
-feature/bug#0000192: Add the ability to log poller runtime statistics to the log.
-feature/bug#0000194: Add host availability capability which allows Cacti to track of downed devices as well as a device's uptime history.
-feature/bug#0000200: Implement three different auto re-index methods which allow Cacti to automatically 'refresh' a data query when an indexes changes.
-feature/bug#0000213: Add a 'Clear' button to all filter forms which resets the form to its default state.
-feature/bug#0000240: Add moonman's SIMILAR_DATA_SOURCES_NODUPS CDEF patch.
-feature/bug#0000250: Allow host/graph tree items to change parents.
-feature: Data query index types are now automatically selected which eliminates the need to prompt the user for this information at graph creation time.
-feature: Better message handling on the "New Graphs" page.
-feature: Get rid of the "Data Input Method" box from the data query edit screen as this data can be automatically derived.
-feature: Customizable log levels.
-feature: Ability to log to syslog (Unix) and event log (Windows) in addition to the log file.
-feature: UDP/ICMP/SNMP ping support used to determine a host's availability status.
-feature: A PHP script server which enables PHP script to be interpreted by the poller without spawning a separate PHP process for each item. See the manual for more details.
-feature: Ability to choose the type of poller (cmd.php, cactid) and number of threads (cactid only) from the UI.
-feature: Ability to spawn multiple simultaneous cmd.php/cactid processes to speed up the polling process.
-feature: Allow data templates and data sources that use SNMP to override host fields (hostname, snmp port, etc) in the poller cache.
-feature: Added Eric Steffen's Bonsai patch which enables users to zoom a graph by dragging a box around the area of interest.
-feature: Added branix's graph export enhancements patch which adds many more graph export configuration options including remote FTP support.
-feature: Ability to view/clear the log file from the console.
-feature: Use a single RRDTool stdin pipe for all update, create, and graph export actions.
-feature: Advanced timespan selector which provides a large number of presets and a calendar control for custom timespans.
-feature: Better support for SNMP v2 from UI.  Speed up some UI queries.
-feature: Enable/Disable Poller from UI.
-feature: Added ifOperStatus to Graph Creation page to show either Up or Down.
-feature: Rearchitected poller subsystem to prepare for multiple poller architecture in future releases.
-feature: Added validation logic in the pollers to prevent system and log anomalies.
-feature: Removed SNMP v3 options until SNMP v3 is supported.

0.8.5a
-bug#84: Updated internal CDEF caching to take CFs into account.
-bug#86: Updated the LDAP code to correctly copy template users.
-bug#136: Inaccurate total bandwidth readings for RRAs with a step > 1.
-bug#138: Typo on install/index.php
-bug#141: Incorrect pre-requisite file check when doing a graph export.
-bug#142: Added the '-t' option when calling ucd-snmp or net-snmp to support numeric timeticks.
-bug#145: phpMyAdmin was choking on the import of cacti.sql.
-bug#146: Minor HTML fix in lib/form.php
-bug: Fixed potential graph item input corruption when saving a graph template item.
-bug: Fixed problem saving a data source using a template that had more than one item.
-bug: Correctly display the console menu when authentication has been turned off.
-bug: Correctly display the two pane tree when authentication has been turned off.
-bug: Support regular expression characters in passwords: \+*?[^]$(){}=!<>|:
-bug: Fixed certain re-ordering problems when deleting branches from a graph tree.
-bug: Add support for a 3 digit exponents in RRDTool fetch output on Windows.
-bug: Correctly escape community strings with a quotation mark under Windows.
-bug: 95th percentile and bandwidth summation code should result in less errors when things don't go as planned.
-bug: Fix 'data_input_data_fcache' orphan when deleting a data source.
-feature: Make the 'None' option on the graph management and data sources host filter dropdowns only display items with no host assigned. Add an 'Any' option to display items assigned to all hosts.
-cactid: Fix segfault problems on all platforms when performing SNMP queries.
-cactid: Fix deadlock issues on Windows and Solaris when making popen calls.

0.8.5
-bug#102: Fix problem with SNMP community strings that contain certain variable shell characters.
-bug#103: Under "New Graphs", make sure to highlight the host template line when the right-hand checkbox is selected.
-bug#104: Typo in the usage for the query_unix_partitions.pl script.
-bug#105: On the data query edit page, only display compatible items in the "Data Input Method" dropdown.
-bug#106: Render the main menu based on a user's permissions so graph-only users cannot see a list of menu options when attempting to view 'index.php'.
-bug#109: Replaced all instances of 'ifDesc' with the correct 'ifDescr' when dealing with the IF MIB.
-bug#110: Be smarter about redirecting the user to the correct page when the user's login option is set to "Show the page that user pointed their browser to".
-bug#111: Take host permissions into account when rendering the left-hand pane in tree view.
-bug#112: Every 10th tree item was not being displayed.
-bug#115: Fixed a bunch of misspellings of the word 'substitute' throughout the code.
-bug#116: Restructured the edit screens for CDEF items and tree items, making them less confusing to users.
-bug#119: Added a "Search:" label to the filter textboxes on the "Graph Management" and "Data Sources" pages.
-bug#127: Added an HTML "title" tag to the three graph mode images.
-bug#129: Added support for correctly parsing timeticks in both cmd.php and cactid.
-bug#130: Users are sometimes redirected to the incorrect host when selecting the "Create Graphs for this Host" link under "Polling Hosts".
-bug#131: Load averages above '10' were not being returned correctly from the loadavg_multi.pl script.
-bug#133: Non-SNMP data sources were not being removed from the poller cache when a host became 'disabled'.
-bug#134: Make sure to delete associated 'host' tree items when deleting a host.
-bug#135: Fix the navigation display so it doesn't display errors when directly linking to a graph.
-bug#137: Remove the 'td.shadow' CSS class as it isn't being used and contains an incorrect image reference.
-bug: Allow the user to enter a "Unit Exponent Value" of '0'.
-bug: Remove all references to $_SERVER["HTTP_REFERER"] for web servers that do not include this variable.
-bug: Extend the "Maximum JavaScript Rows" feature to work for host templates as well.
-bug: Fixed a few parsing problems that were causing problems for users including a '\' or '/' in their script's input string.
-bug: The correct representation of memory usage using net-snmp should be 'free memory + cache memory + buffered memory'.
-bug: Fixed a problem importing CDEF items correctly from an XML file.
-bug: Deleting a GPRINT preset now correctly displays the name of the item about to be removed.
-bug: Problems importing XML that contained a host template with more than one associated graph template.
-bug: Added a potential workaround for the PHP session/popen bug which occurs on Windows systems using PHP in ISAPI mode.
-feature: Data query variables such as |query_ifAlias| can now be included on the actual graph in the "Text Format" or "Value" field.
-feature: Added two new special data sources to CDEFs, which enable users to use the data source's maximum or minimum value in a CDEF.
-feature: Added a new SNMP query source type, "VALUE/REGEXP", which enables users to parse the SNMP value with a regular expression before passing it onto Cacti.
-feature: Hide the "Console" tab from users that only have rights to view graphs.
-feature: Added a new 95th percentile type, "max", which calculates 95th percentile based on the maximum of either inbound or outbound for each sample. This is how most co-location facilities calculate 95th percentile for billing purposes.
-feature: Update ADODB to version 4.05.
-feature: Data source graph inputs are automatically added and maintained by Cacti for new graph templates as to reduce user confusion.
-feature: The "Graph Management" and "Data Sources" edit pages are much improved when using a template.
-feature: Renamed "Polling Hosts" to "Devices" since polling hosts technically implies that you are managing the hosts that poll data, which could be reserved for later use.
-feature: If you enter a value for a "host field" in the data template, Cacti will use that value rather than always defaulting to the host. If you leave it blank, Cacti will use the value from the host.
-feature: Data input method type codes 'snmp_timeout' and 'snmp_port' are now supported.
-feature: Users will only see tabs for the graph viewing modes that they have access to.
-doc: Completely re-written manual in SGML/Docbook so HTML, PDF, and ASCII versions of the manual are now possible. The new manual also includes a better introduction to Cacti for new users and makes use of screen shots to illustrate various portions of the user interface.
-cactid: Fixed segfault problems using cactid on Solaris platforms.

0.8.4
-bug#87: Deleting top level branches without children on the tree caused ordering problems.
-bug#88: Possibly popen/pclose concurrency problem with cactid.
-bug#89: Missing "check all" checkbox on polling hosts page when an empty column was drawn.
-bug#91: Fix undefined index errors on data source checkbox popups.
-bug#92: Fix undefined index errors on graph management checkbox popups.
-bug#96: Problems creating graphs from data queries where there was only row row total in the query result.
-bug#97: Typo in cmd.php
-bug#98: Creating a data source or graph with no host or template, would result in an extra empty item.
-bug#99: Deleting a graph or data template that was still attached to one or more items would cause the graph/data source to appear to still have the deleted template still attached.
-bug: Removed size limits on Linux memory data template.
-bug: Undefined variable errors when creating new graphs/data sources without a template.
-bug: multiple problems that caused the Windows disk space and CPU graphs to stop working.
-bug: Broken images for bandwidth summation graphs that were less than a day old.
-bug: Graph order changes on the tree would affect other graph trees.
-bug: Problem with the "Host MIB - Hard Drive Space" data template that broke Windows disk spaces graphs.
-bug: Fixed the LDAP authentication code, which was partially broken in 0.8.3.
-bug: Fixed a cmd.php parsing problem when input and output fields are sharing the same name.
-bug: Added basename() to all PHP_SELF references to make sure all hrefs stay absolute.
-bug: The RRA field is now honored for the dual pane tree view.
-bug: The |date_time| graph variable now displays the current day of the month.
-feature: The "Total All Items" CDEF is now able to total NaN's without becoming 'U'.
-feature: Data query results are now grayed out if they have already been created.
-feature: The "cacti Web Root" and "Web Server Document Root" settings are completely auto-detected now.
-feature: Add SNMP port and SNMP timeout fields to each host.
-feature: Removed the "Management IP" field in polling hosts in favor of "Hostname".
-feature: Re-organized the menus expand/contract for less used items to help save vertical space.
-feature: Added complete template to XML import and export support.
-feature: Moved the graph creation features of "Polling Hosts" to a new menu item,"New Graphs".
-feature: Added verbose debugging support for data queries.
-doc: Added a FAQ.
-cactid: Removed lots of potential buffer overflows.
-cactid: Several libz/openssl autoconf fixes that improve FreeBSD 5.x support.
-cactid: Fixed some potential segfaults on FreeBSD when reading information from the targets table.
-cactid: The snmp_get() function now respects the SNMP version chosen under "Polling Hosts", so 64-bit counters should work.

0.8.3a
-bug#81: Partial/complete poller cache rebuild failure after an upgrade.
-bug#82: Undefined variable error messages under win32/IIS.
-bug: Problems with overlapping graph permissions with multiple users.

0.8.3
-bug#50: When viewing a graph, only display it for the RRAs used on the graph.
-bug#66: Users can see a list of all hosts in graph preview mode.
-bug#71: Extra escape characters in the |date_time| variable output.
-bug#72: Disk space graph for ucd/net was broken for original 0.8 users.
-bug#75: Problems monitoring more than one CPU with query_host_cpu.php.
-bug#76: Cactid segfault on Solaris caused by unchecked use of NULL with sprintf.
-bug#77: Cactid segfault upon a MySQL connect error.
-bug#79: Check for unique/valid data when the user selects a field to index their new data sources off of.
-bug: Redirect user to the correct page after a forced password change.
-bug: Problems entering negative numbers for upper/lower limit fields on graph pages.
-bug: Never try to use internal SNMP support if SNMP version 2 or 3 is selected.
-bug: Adding or removing data source items in a data template should update attached data sources as well.
-bug: Problems updating certain fields when switching or turning off both graph and data templates.
-bug: Got rid of the "Use Per-Data Source Value" checkbox where it isn't usable.
-bug: Strange sequence/ordering behavior after updating an already created tree item.
-bug: Error message displayed instead of 'Access Denied' message.
-feature: Added host and graph template permissions for graph viewing users.
-feature: Added a new 'dual pane' tree view type that draws the graph trees on a DHTML tree on the left side of the page.
-feature: Added the ability to add hosts to a tree.
-feature: Added a 'timespan' field to "Round Robin Archives" to determine the timespan (in seconds) of graphs using each RRA.
-feature: Completely replaced the header images/layout for both the console and graph viewing pages
-feature: Added a navigation bar in the header so you can keep track of you location in the UI.
-feature: Added bandwidth summation support. See the manual for more information.
-feature: Made the installer more verbose about SQL it runs during an upgrade.
-cactid: Changed threading strategy to spawn threads based on hosts.
-cactid: Created header files for each source file and moved precasts out of cactid.h.
-cactid: A bunch of autoconf updates.

0.8.2a
-bug: Fixed various problems updating the poller cache.
-bug: Fixed the Weatherbug script to work under Redhat 9.
-cactid: Updated poller to use detached threads based on each host.

0.8.2
-bug#47: The 'cacti_server_os' variable is now auto-detected.
-bug#56: Possible endless loop for non 0.8 users in version upgrade loop.
-bug#57: Cacti does not take the 'graph_tree_id' column into account when re-ordering trees which can cause unexpected results.
-bug#59: Regular expression bug that caused 'query_unix_partitions.pl' not to function on FreeBSD.
-bug#60: Incorrect index OID in the (currently unused) 'host_disk.xml' SNMP query.
-bug#61: Problems adding additional graph items to an input after the template is in use by graphs.
-bug#64: Cactid now checks for the RRDTool path in the 'settings' table.\
-bug#67: Problems with wrapping and 'diskfree.pl'.
-bug: Problems deleting GPRINT presets.
-bug: Undefined variable errors on the graph settings page if built in user authentication was turned off.
-bug: Kill cached field value when messages are displayed.
-bug: Graph trees now honor the RRA selected when creating the tree (andyfud.org.nz)
-bug: Graph and data source titles are now properly updated when making changes to graph or data templates.
-bug: Unexpected results when trying to delete top level branches from a graph tree.
-bug: Problems expanding/contracting trees when two or more nested branches had the hidden flag set.
-feature: Added ability to turn off checks for an entire host.
-feature: Added SNMP and operating system variable printout to the about page.
-feature: Added 95th percentile support. See the manual for more information.
-feature: Added setting for data query maximum field length.
-cactid: Added downed host detection.
-cactid: Code cleanup: formatting, compiler warnings, and removal of unused functions.
-cactid: Daemon support has been removed from cactid for the time being, it must be run out of CRON.
-cactid: Have autoconf detect net-snmp before trying ucd-snmp to prevent failure on default Redhat installs.

0.8.1
-bug#40: Fixed OIDs in serveral Netware data templates.
-bug#41: Data source and graph names are lost when created from a  template.
-bug#44: Fixed Host MIB logged in users OID in data template.
-bug#46: Fixed an RRDTool/PHP binary variable mixup on the install page for win32 users.
-bug#48: Changed the "Create" button on the settings page to "Save".
-bug#52: Make sure the data source/graph names are pulled down after clicking "Create", so the user can press cancel.
-bug: Changed references from $_SERVER["SCRIPT_NAME"] to $_SERVER["PHP_SELF"] because of strange behavior on PHP 4.3.2 under Windows.
-bug: Make sure to filter on the "cached title" for on both the data sources and graph management pages.
-bug: Fixed error when debug mode was on and the user tried to add a new graph or data source.
-bug: Take tree permissions into account when displaying the "Default Tree" dropdown on the graph settings page.
-bug: Incorrect graph title was displayed on graph tree delete confirmation.
-bug: Win32: Graphs were being exported even when the graph export path was left blank.
-bug: Exported graphs were displayed in the incorrect order.
-bug: Legends were not displayed on exported graphs.
-bug: HRULE items caused graphs to break.
-feature: You can now use negative VRULE items, such as '-12:00' to display a line 12 hours ago.
-bug: Data queries that had a non-integer index would not render graph/data source titles properly.
-auth: LDAP authentication updates

0.8
-feature: Added support for graph, data source, and host templates.
-feature: Added a stricter concept of hosts which enables better organization and easier graph creation.
-feature: Created data queries which enable the retrieval of indexable data in the form of a query.
-feature: Revised the entire UI creating more functional and attractive forms.
-feature: New generic poller interface enables other pollers to handle the data gathering for Cacti.
-feature: Added support for net-snmp 5.x.
-docs: Revised the install documentation and re-wrote the manual for this version.
-feature: The beginnings of a threaded c-based poller (cactid), which is not completely function at this point.
-feature: And much much more...

0.6.8a
-bug: Unchecked string being passed to rrdtool caused a potential security problem.
-bug: The logout funtionality was broken for some users because of a missing fourth argument.
-bug: Fixed some SNMP parsing problems.
-bug: Fixed a problem with using quotes for data source input.

0.6.8
-feature: Added the following new rrdtool graph options: --units-exponent value, --unit, and --logarithmic.
-feature: Added the ability to show exact numbers in GPRINT, users can now specify a custom GPRINT string on a per-graph item basis.
-bug: Any data input source with more than one output would be added as a multi-data source .rrd file.
-bug: Some data source file name issues.
-bug: Cacti now checks to see if a host exists when adding it to be graphed.
-feature: There is now an optional "remove verification" for most of cacti's dialogs.
-feature: There is a "logout" button when viewing graphs (not for the guest user).
-docs: Updated the Win32 docs (thanks Larry).
-bug: Fixed some rare HTML "multipart/form" bugs with PHP.
-feature: Added a "Default View Mode" for each user when viewing graphs.
-bug: Fixed some bugs where you would change a parent graph item to a child or a child graph item to a parent when graph grouping was turned on.
-bug: Fixed some potential security bugs by eliminating cacti's use of cookies.

0.6.7
-feature: Added a "none" option for a data source when creating a CDEF. This can be used if you check the "Use the current data source being used on the graph instead of a preset one" box.
-feature: Each user has a default graph policy: ALLOW or DENY for their graph permissions.
-bug: Unique .rrd filename/data source name issues for SNMP "Make Graph" have been fixed.
-feature: Changing the data source for a graph group parent will change the data sources for each of the child items.
-bug: Logging has been fixed so errors do not show up in the Apache error_log any more.
-bug: VRULE's work correctly now. Enter a time in the "value" field to use them, such as "00:00" or "14:00".
-feature: If you select a graph to be added to the graph hierarchy, the "This Item is a Graph" checkbox is automatically selected.
-docs: Install docs have been updated for Unix/Win32, documentation on upgrading cacti has been added. See the 'docs/' directory for more information.
-bug: SNMP can function on win32/unix without snmpwalk/snmpget binaries. This will only work if you have php-snmp support compiled into both your php binary and web server modules. This is already the case for win32.
-bug: A bug when more than one data source was created using the same data input source with multiple outputs has been fixed.
-feature: The default install/upgrade screen has been revised.

0.6.6
-feature: Multiple data sources per .rrd is supported. To use this feature, simply create a data input source with multiple outputs that 'Update RRA'.
-feature: Graph item grouping, which enables you to delete/reorder groups of similair graph items.
-feature: Graph preview and output preview in the console, which allows you to preview what a graph will look like/what rrdtool's output is.
-feature: Graph-based permissions have added, you can also show/hide certain hierarchies per user.
-feature: Multiple data source per .rrd file support, read the docs for more information.
-feature: You can now export graphs to static png's/html's every n times.
-feature: By default, SNMP data source names come from <IP>_<IFNUM>, instead of just <IFDESC> which is more unique.
-feature: More options for users such as where to go when the user logs in and whether the user can have their own settings or not.

0.6.5
-bug: Fixed some of the data source naming issues. You can now use any data source name you want; cacti will take care of making the name "rrdtool friendly".
-feature: Cacti will use PHP's builtin SNMP support if detected, SNMP is overall faster now too. NOTE: PHP's SNMP support may not work with all of your MIB names, you may have to use the OID instead!
-feature: Basic high speed counter support has been added, use 'hcin'/'hcout' to use it. Also may not work with PHP's builtin SNMP support yet.
-bug: Using the MAX consolidation function with graph data works better now. You can make graphs that look like the MRTG ones (5 minute maximum). This code still needs a little work though.

0.6.4
-bug: You can now add the same CDEF to multiple data sources in the same graph.
-feature: Ability to "sync" changes with the .rrd file with rrdtool's TUNE function. Cacti also tries to fill in internal data source path and name information to keep graphs from "breaking" when possible.
-settings: You can now change the PHP Binary path from within cacti.
-feature: Cacti can now export static images/html files when it gathers data like MRTG did.
-feature: Multiple graph hierarchies are supported.
-feature: You can now "zoom in" on any portion of the graph hierarchy by clicking on a header item.
-bug: Some changes were made to make cacti more win32 complaint; a tutorial on how to setup cacti on win32 can be found on the raXnet page.
-feature: You can now create all graphs for an SNMP host with one click.
-feature: You can customize the graph title when creating graphs using the 'Make Graph' or 'Make All Graphs' link.
-feature: Data sources in cacti are no longer limited to 19 characters. If you create a data source name that rrdtool will not like, cacti will automatically modify the name and save it internally for rrdtool-only use.

0.6.3
-feature: Put limits (HTML 'maxlength') on fields that have a maximum length.
-feature: Added 'cacti Settings' and 'User Administration' to the cacti menu.
-feature: Added a 'Step' field for Data Sources to graph data at non-300 second intervals.
-feature: Added a '--rigid' on/off option, plus the ability to choose between '--alt-autoscale' and '--alt-autoscale-max' when using auto scale.
-feature: Added a 'Base Value' field to the graphs to adjust how the vertical axis is displayed.
-feature: Updated the menu/header graphics for a smoother look and easier navigation.
-feature: cacti now stores its settings in the database instead of config.php, so they can be manipulated under 'cacti Settings'. Database credentials are still located in config.php however.
-feature: Added a preview of the rrdtool source when creating data sources.
-feature: Added a "data source duplicate" function and moved "graph duplicate" to "Graphs" on the cacti menu.
-settings: You can now turn on/off cacti's builtin authentication.
-settings: You can control what is logged (create, graph, snmp, update).
-feature: Added a "Total All Data Sources" CDEF, which can be used to represent the total of all of the data on a graph.
-bug: Fixed a few add/edit/delete form-related bugs.
-docs: Added some more content to the documentation and made it more visible from within cacti.

0.6.2
-bug: Fixed some bugs when creating CDEF's using multiple data sources.
-bug: Fixed more SNMP parsing bugs with some versions of net-snmp.
-feature: added an "auto-refresh" feature to the graphs (thanks Nossie).
-bug: HRULE's and VRULE's acually work now.
-docs: the beginnings of some real documentation.
-bug: you can select the color black now.

0.6.1
-bug: Fixed a parsing bug with snmp, more parsing is done in cacti's code and not via arguments passed to snmpget.
-auth: Updated the function used to hash passwords (more compatible with older MySQL versions), more strict on document caching.
-feature: Easier installation: cacti now checks for common problems and gives suggestions. Database updates are also done at this time.
-bug: Fixed a problem with adding new data input sources.
-bug: Problem saving the wrong numbers for 'Round Robin Archives'.
-feature: Ability to preview the output of the cron script from a web browser under 'Cron Printout'.
-feature: Added 'Logout User' to the menu.
-bug: Removed some occurances of /var/www/html and replaced them with more dynamic variables.

0.6
-new tree code
-some html table issues in graph view mode
-fixed the settings code for saved graph-view data

0.5
-initial release