|
|
| version 1.111, 2003/07/24 11:31:19 | version 1.161, 2007/11/14 09:45:21 |
|---|---|
| Line 1 | Line 1 |
| /** @file | /** @file |
| Parser: @b file parser class. | Parser: @b file parser class. |
| Copyright (c) 2001-2003 ArtLebedev Group (http://www.artlebedev.com) | Copyright (c) 2001-2005 ArtLebedev Group (http://www.artlebedev.com) |
| Author: Alexandr Petrosian <paf@design.ru> (http://paf.design.ru) | Author: Alexandr Petrosian <paf@design.ru> (http://paf.design.ru) |
| */ | */ |
| static const char* IDENT_FILE_C="$Date$"; | static const char * const IDENT_FILE_C="$Date$"; |
| #include "pa_config_includes.h" | #include "pa_config_includes.h" |
| Line 24 static const char* IDENT_FILE_C="$Date$" | Line 24 static const char* IDENT_FILE_C="$Date$" |
| #include "pa_vtable.h" | #include "pa_vtable.h" |
| #include "pa_charset.h" | #include "pa_charset.h" |
| #include "pa_charsets.h" | #include "pa_charsets.h" |
| #include "pa_sql_connection.h" | |
| #include "pa_md5.h" | |
| // defines | // defines |
| #define TEXT_MODE_NAME "text" | #define TEXT_MODE_NAME "text" |
| #define BINARY_MODE_NAME "binary" | |
| #define STDIN_EXEC_PARAM_NAME "stdin" | #define STDIN_EXEC_PARAM_NAME "stdin" |
| #define CHARSET_EXEC_PARAM_NAME "charset" | #define CHARSET_EXEC_PARAM_NAME "charset" |
| #define NAME_NAME "name" | |
| // externs | |
| extern String sql_limit_name; | |
| extern String sql_offset_name; | |
| // class | // class |
| class MFile: public Methoded { | class MFile: public Methoded { |
| public: // VStateless_class | public: // VStateless_class |
| Value* create_new_value() { return new VFile(); } | Value* create_new_value(Pool&, HashStringValue&) { return new VFile(); } |
| public: // Methoded | public: // Methoded |
| bool used_directly() { return true; } | bool used_directly() { return true; } |
| Line 98 static const char* suexec_safe_env_lst[] | Line 108 static const char* suexec_safe_env_lst[] |
| // statics | // statics |
| static const StringBody adate_name("adate"); | static const String::Body adate_name("adate"); |
| static const StringBody mdate_name("mdate"); | static const String::Body mdate_name("mdate"); |
| static const StringBody cdate_name("cdate"); | static const String::Body cdate_name("cdate"); |
| // methods | // methods |
| static bool is_valid_mode (const String& mode) { | |
| return (mode==TEXT_MODE_NAME || mode==BINARY_MODE_NAME); | |
| } | |
| static bool is_text_mode(const String& mode) { | |
| if(mode==TEXT_MODE_NAME) | |
| return true; | |
| if(mode==BINARY_MODE_NAME) | |
| return false; | |
| throw Exception(PARSER_RUNTIME, | |
| &mode, | |
| "is invalid mode, must be either '"TEXT_MODE_NAME"' or '"BINARY_MODE_NAME"'"); | |
| } | |
| static void _save(Request& r, MethodParams& params) { | static void _save(Request& r, MethodParams& params) { |
| Value& vmode_name=params. as_no_junction(0, "mode must not be code"); | Value& vmode_name=params.as_no_junction(0, MODE_MUST_NOT_BE_CODE); |
| Value& vfile_name=params.as_no_junction(1, "file name must not be code"); | Value& vfile_name=params.as_no_junction(1, FILE_NAME_MUST_NOT_BE_CODE); |
| // save | // save |
| GET_SELF(r, VFile).save(r.absolute(vfile_name.as_string()), | GET_SELF(r, VFile).save(r.absolute(vfile_name.as_string()), |
| vmode_name.as_string()==TEXT_MODE_NAME); | is_text_mode(vmode_name.as_string())); |
| } | } |
| static void _delete(Request& r, MethodParams& params) { | static void _delete(Request& r, MethodParams& params) { |
| Value& vfile_name=params.as_no_junction(0, "file name must not be code"); | Value& vfile_name=params.as_no_junction(0, FILE_NAME_MUST_NOT_BE_CODE); |
| // unlink | // unlink |
| file_delete(r.absolute(vfile_name.as_string())); | file_delete(r.absolute(vfile_name.as_string())); |
| Line 130 static void _move(Request& r, MethodPara | Line 154 static void _move(Request& r, MethodPara |
| r.absolute(vto_file_name.as_string())); | r.absolute(vto_file_name.as_string())); |
| } | } |
| static void copy_process_source( | |
| struct stat& , | |
| int from_file, | |
| const String& , const char* /*fname*/, bool, | |
| void *context) { | |
| int& to_file=*static_cast<int *>(context); | |
| int nCount=0; | |
| do { | |
| unsigned char buffer[FILE_BUFFER_SIZE]; | |
| nCount = file_block_read(from_file, buffer, sizeof(buffer)); | |
| int written=write(to_file, buffer, nCount); | |
| if( written < 0 ) | |
| throw Exception(0, | |
| 0, | |
| "write failed: %s (%d)", strerror(errno), errno); | |
| } while(nCount > 0); | |
| } | |
| static void copy_open_target(int f, void *from_spec) { | |
| String& file_spec=*static_cast<String *>(from_spec); | |
| file_read_action_under_lock(file_spec, "copy", copy_process_source, &f); | |
| }; | |
| static void _copy(Request& r, MethodParams& params) { | |
| Value& vfrom_file_name=params.as_no_junction(0, "from file name must not be code"); | |
| Value& vto_file_name=params.as_no_junction(1, "to file name must not be code"); | |
| String from_spec = r.absolute(vfrom_file_name.as_string()); | |
| const String& to_spec = r.absolute(vto_file_name.as_string()); | |
| file_write_action_under_lock( | |
| to_spec, | |
| "copy", | |
| copy_open_target, | |
| &from_spec); | |
| } | |
| static void _load_pass_param( | static void _load_pass_param( |
| HashStringValue::key_type key, | HashStringValue::key_type key, |
| HashStringValue::value_type value, | HashStringValue::value_type value, |
| Line 137 static void _load_pass_param( | Line 200 static void _load_pass_param( |
| dest->put(key, value); | dest->put(key, value); |
| } | } |
| static void _load(Request& r, MethodParams& params) { | static void _load(Request& r, MethodParams& params) { |
| Value& vmode_name=params. as_no_junction(0, "mode must not be code"); | Value& vmode_name=params.as_no_junction(0, MODE_MUST_NOT_BE_CODE); |
| const String& lfile_name=r.absolute(params.as_no_junction(1, "file name must not be code").as_string()); | const String& lfile_name=r.absolute(params.as_no_junction(1, FILE_NAME_MUST_NOT_BE_CODE).as_string()); |
| Value* third_param=params.count()>2?¶ms.as_no_junction(2, "filename or options must not be code") | Value* third_param=params.count()>2?¶ms.as_no_junction(2, "filename or options must not be code") |
| :0; | :0; |
| HashStringValue* third_param_hash=third_param?third_param->get_hash():0; | HashStringValue* third_param_hash=third_param?third_param->get_hash():0; |
| Line 146 static void _load(Request& r, MethodPara | Line 209 static void _load(Request& r, MethodPara |
| if(third_param_hash) | if(third_param_hash) |
| alt_filename_param_index++; | alt_filename_param_index++; |
| HashStringValue* options=third_param_hash; | |
| size_t offset=0; | |
| size_t limit=0; | |
| if(options) { | |
| options=new HashStringValue(*options); | |
| if(Value *voffset=(Value *)options->get(sql_offset_name)) { | |
| offset=r.process_to_value(*voffset).as_int(); | |
| } | |
| if(Value *vlimit=(Value *)options->get(sql_limit_name)) { | |
| limit=r.process_to_value(*vlimit).as_int(); | |
| } | |
| // no check on options count here, see file_read | |
| } | |
| File_read_result file=file_read(r.charsets, lfile_name, | File_read_result file=file_read(r.charsets, lfile_name, |
| vmode_name.as_string()==TEXT_MODE_NAME, | is_text_mode(vmode_name.as_string()), |
| third_param_hash | options, true, 0, offset, limit |
| ); | ); |
| const char *user_file_name=params.count()>alt_filename_param_index? | const char *user_file_name=params.count()>alt_filename_param_index? |
| params.as_string(alt_filename_param_index, "filename must be string").cstr() | params.as_string(alt_filename_param_index, FILE_NAME_MUST_BE_STRING).cstr() |
| :lfile_name.cstr(String::L_FILE_SPEC); | :lfile_name.cstr(String::L_FILE_SPEC); |
| Value* vcontent_type=0; | Value* vcontent_type=0; |
| if(file.headers) | if(file.headers) |
| vcontent_type=file.headers->get(content_type_name); | { |
| if(Value* remote_content_type=file.headers->get("CONTENT-TYPE")) | |
| vcontent_type=new VString(*new String(remote_content_type->as_string().cstr())); | |
| } | |
| if(!vcontent_type) | if(!vcontent_type) |
| vcontent_type=new VString(r.mime_type_of(user_file_name)); | vcontent_type=new VString(r.mime_type_of(user_file_name)); |
| VFile& self=GET_SELF(r, VFile); | VFile& self=GET_SELF(r, VFile); |
| self.set(true/*tainted*/, file.str, file.length, user_file_name, vcontent_type); | self.set(true/*tainted*/, file.str, file.length, user_file_name, vcontent_type); |
| if(file.headers) | if(file.headers) |
| file.headers->for_each(_load_pass_param, &self.fields()); | file.headers->for_each<HashStringValue*>(_load_pass_param, &self.fields()); |
| } | |
| static void _create(Request& r, MethodParams& params) { | |
| Value& vmode_name=params.as_no_junction(0, MODE_MUST_NOT_BE_CODE); | |
| if(!is_text_mode(vmode_name.as_string())) | |
| throw Exception(PARSER_RUNTIME, | |
| 0, | |
| "only text mode is currently supported"); | |
| const char* user_file_name_cstr=r.absolute( | |
| params.as_no_junction(1, FILE_NAME_MUST_NOT_BE_CODE).as_string()).cstr(String::L_FILE_SPEC); | |
| const String& content=params.as_string(2, "content must be string"); | |
| const char* content_cstr=content.cstr(String::L_UNSPECIFIED); // explode content, honor tainting changes | |
| VString* vcontent_type=new VString(r.mime_type_of(user_file_name_cstr)); | |
| VFile& self=GET_SELF(r, VFile); | |
| self.set(true/*tainted*/, content_cstr, strlen(content_cstr), user_file_name_cstr, vcontent_type); | |
| } | } |
| static void _stat(Request& r, MethodParams& params) { | static void _stat(Request& r, MethodParams& params) { |
| Value& vfile_name=params.as_no_junction(0, "file name must not be code"); | Value& vfile_name=params.as_no_junction(0, FILE_NAME_MUST_NOT_BE_CODE); |
| const String& lfile_name=vfile_name.as_string(); | const String& lfile_name=vfile_name.as_string(); |
| Line 205 static bool is_safe_env_key(const char* | Line 303 static bool is_safe_env_key(const char* |
| } | } |
| #ifndef DOXYGEN | #ifndef DOXYGEN |
| struct Append_env_pair_info { | struct Append_env_pair_info { |
| Request_charsets* charsets; | |
| HashStringString* env; | HashStringString* env; |
| Value* vstdin; | Value* vstdin; |
| Value* vcharset; | |
| }; | }; |
| #endif | #endif |
| static void append_env_pair( | static void append_env_pair( |
| Line 217 static void append_env_pair( | Line 315 static void append_env_pair( |
| if(akey==STDIN_EXEC_PARAM_NAME) { | if(akey==STDIN_EXEC_PARAM_NAME) { |
| info->vstdin=avalue; | info->vstdin=avalue; |
| } else if(akey==CHARSET_EXEC_PARAM_NAME) { | } else if(akey==CHARSET_EXEC_PARAM_NAME) { |
| info->vcharset=avalue; | // ignore, already processed |
| } else { | } else { |
| if(!is_safe_env_key(akey.cstr())) | if(!is_safe_env_key(akey.cstr())) |
| throw Exception("parser.runtime", | throw Exception(PARSER_RUNTIME, |
| new String(akey, String::L_TAINTED), | new String(akey, String::L_TAINTED), |
| "not safe environment variable"); | "not safe environment variable"); |
| info->env->put(akey, avalue->as_string()); | info->env->put(akey, avalue->as_string().cstr_to_string_body(String::L_UNSPECIFIED, 0, info->charsets)); |
| } | } |
| } | } |
| #ifndef DOXYGEN | #ifndef DOXYGEN |
| Line 237 static void pass_cgi_header_attribute( | Line 335 static void pass_cgi_header_attribute( |
| ArrayString::element_type astring, | ArrayString::element_type astring, |
| Pass_cgi_header_attribute_info* info) { | Pass_cgi_header_attribute_info* info) { |
| size_t colon_pos=astring->pos(':'); | size_t colon_pos=astring->pos(':'); |
| if(colon_pos==STRING_NOT_FOUND) { | if(colon_pos!=STRING_NOT_FOUND) { |
| const String& key=astring->mid(0, colon_pos).change_case( | const String& key=astring->mid(0, colon_pos).change_case( |
| *info->charset, String::CC_UPPER); | *info->charset, String::CC_UPPER); |
| Value* value=new VString(astring->mid(colon_pos+1, astring->length())); | Value* value=new VString(astring->mid(colon_pos+1, astring->length()).trim()); |
| info->fields->put(key, value); | info->fields->put(key, value); |
| if(key=="CONTENT-TYPE") | if(key=="CONTENT-TYPE") |
| info->content_type=value; | info->content_type=value; |
| } | } |
| } | } |
| static void append_to_argv(Request& r, ArrayString& argv, const String* str){ | |
| if( str->length() ){ | |
| argv+=new String(str->cstr_to_string_body(String::L_UNSPECIFIED, 0, &r.charsets), String::L_AS_IS); | |
| } | |
| } | |
| /// @todo fix `` in perl - they produced flipping consoles and no output to perl | /// @todo fix `` in perl - they produced flipping consoles and no output to perl |
| static void _exec_cgi(Request& r, MethodParams& params, | static void _exec_cgi(Request& r, MethodParams& params, |
| bool cgi) { | bool cgi) { |
| Value& vfile_name=params.as_no_junction(0, "file name must not be code"); | Value& vfile_name=params.as_no_junction(0, FILE_NAME_MUST_NOT_BE_CODE); |
| const String& script_name=r.absolute(vfile_name.as_string()); | const String& script_name=r.absolute(vfile_name.as_string()); |
| Line 258 static void _exec_cgi(Request& r, Method | Line 363 static void _exec_cgi(Request& r, Method |
| #define ECSTR(name, value_cstr) \ | #define ECSTR(name, value_cstr) \ |
| if(value_cstr) \ | if(value_cstr) \ |
| env.put( \ | env.put( \ |
| StringBody(#name), \ | String::Body(#name), \ |
| StringBody(value_cstr, 0)); \ | String::Body(value_cstr, 0)); \ |
| // passing SAPI::environment | // passing SAPI::environment |
| if(const char *const *pairs=SAPI::environment(r.sapi_info)) { | if(const char *const *pairs=SAPI::environment(r.sapi_info)) { |
| while(const char* pair=*pairs++) | while(const char* pair=*pairs++) |
| Line 284 static void _exec_cgi(Request& r, Method | Line 389 static void _exec_cgi(Request& r, Method |
| //String content_length(content_length_cstr); | //String content_length(content_length_cstr); |
| ECSTR(CONTENT_LENGTH, content_length_cstr); | ECSTR(CONTENT_LENGTH, content_length_cstr); |
| // SCRIPT_* | // SCRIPT_* |
| env.put(StringBody("SCRIPT_NAME"), script_name); | env.put(String::Body("SCRIPT_NAME"), script_name); |
| //env.put(StringBody("SCRIPT_FILENAME"), ??&script_name); | //env.put(String::Body("SCRIPT_FILENAME"), ??&script_name); |
| bool stdin_specified=false; | bool stdin_specified=false; |
| // environment & stdin from param | // environment & stdin from param |
| Line 294 static void _exec_cgi(Request& r, Method | Line 399 static void _exec_cgi(Request& r, Method |
| if(params.count()>1) { | if(params.count()>1) { |
| Value& venv=params.as_no_junction(1, "env must not be code"); | Value& venv=params.as_no_junction(1, "env must not be code"); |
| if(HashStringValue* user_env=venv.get_hash()) { | if(HashStringValue* user_env=venv.get_hash()) { |
| Append_env_pair_info info={&env}; | // $.charset [previewing to handle URI pieces] |
| user_env->for_each(append_env_pair, &info); | if(Value* vcharset=user_env->get(CHARSET_EXEC_PARAM_NAME)) |
| charset=&charsets.get(vcharset->as_string() | |
| .change_case(r.charsets.source(), String::CC_UPPER)); | |
| // $.others | |
| Append_env_pair_info info={&r.charsets, &env, 0}; | |
| { | |
| // influence tainting | |
| // main target -- $.QUERY_STRING -- URLencoding of tainted pieces to String::L_URI lang | |
| Temp_client_charset temp(r.charsets, charset? *charset: r.charsets.source()); | |
| user_env->for_each<Append_env_pair_info*>(append_env_pair, &info); | |
| } | |
| // $.stdin | // $.stdin |
| if(info.vstdin) { | if(info.vstdin) { |
| stdin_specified=true; | stdin_specified=true; |
| Line 305 static void _exec_cgi(Request& r, Method | Line 421 static void _exec_cgi(Request& r, Method |
| if(VFile* vfile=static_cast<VFile *>(info.vstdin->as("file", false))) | if(VFile* vfile=static_cast<VFile *>(info.vstdin->as("file", false))) |
| in->append_know_length((const char* )vfile->value_ptr(), vfile->value_size(), String::L_TAINTED); | in->append_know_length((const char* )vfile->value_ptr(), vfile->value_size(), String::L_TAINTED); |
| else | else |
| throw Exception("parser.runtime", | throw Exception(PARSER_RUNTIME, |
| 0, | 0, |
| STDIN_EXEC_PARAM_NAME " parameter must be string or file"); | STDIN_EXEC_PARAM_NAME " parameter must be string or file"); |
| } | } |
| // $.charset | |
| if(info.vcharset) | |
| charset=&charsets.get(info.vcharset->as_string() | |
| .change_case(r.charsets.source(), String::CC_UPPER)); | |
| } | } |
| } | } |
| // argv from params | // argv from params |
| ArrayString argv; | ArrayString argv; |
| if(params.count()>2) { | if(params.count()>2) { |
| for(size_t i=2; i<params.count(); i++) | // influence tainting |
| argv+=¶ms.as_string(i, "parameter must be string"); | // main target -- URLencoding of tainted pieces to String::L_URI lang |
| Temp_client_charset temp(r.charsets, charset? *charset: r.charsets.source()); | |
| for(size_t i=2; i<params.count(); i++) { | |
| Value& param=params.as_no_junction(i, PARAM_MUST_NOT_BE_CODE); | |
| if(param.is_defined()){ | |
| if(param.is_string()){ | |
| append_to_argv(r, argv, param.get_string()); | |
| } else { | |
| Table* table=param.get_table(); | |
| if(table){ | |
| for(size_t i=0; i<table->count(); i++) { | |
| append_to_argv(r, argv, table->get(i)->get(0)); | |
| } | |
| } else { | |
| throw Exception(PARSER_RUNTIME, | |
| 0, | |
| "parameter must be string or table"); | |
| } | |
| } | |
| } | |
| } | |
| } | } |
| // transcode if necessary | // transcode if necessary |
| Line 348 static void _exec_cgi(Request& r, Method | Line 481 static void _exec_cgi(Request& r, Method |
| VFile& self=GET_SELF(r, VFile); | VFile& self=GET_SELF(r, VFile); |
| const String* body=real_out; // ^file:exec | const String* body=real_out; // ^file:exec |
| Value* content_type=0; | |
| const char* eol_marker=0; size_t eol_marker_size; | const char* eol_marker=0; size_t eol_marker_size; |
| const String* header=0; | const String* header=0; |
| if(cgi) { // ^file:cgi | if(cgi) { // ^file:cgi |
| Line 399 static void _exec_cgi(Request& r, Method | Line 531 static void _exec_cgi(Request& r, Method |
| ArrayString rows; | ArrayString rows; |
| size_t pos_after=0; | size_t pos_after=0; |
| header->split(rows, pos_after, eol_marker); | header->split(rows, pos_after, eol_marker); |
| Pass_cgi_header_attribute_info info={0}; | Pass_cgi_header_attribute_info info={0, 0, 0}; |
| info.charset=&r.charsets.source(); | info.charset=&r.charsets.source(); |
| info.fields=&self.fields(); | info.fields=&self.fields(); |
| rows.for_each(pass_cgi_header_attribute, &info); | rows.for_each(pass_cgi_header_attribute, &info); |
| Line 413 static void _exec_cgi(Request& r, Method | Line 545 static void _exec_cgi(Request& r, Method |
| // $stderr | // $stderr |
| if(real_err->length()) | if(real_err->length()) |
| self.fields().put( | self.fields().put( |
| StringBody("stderr"), | String::Body("stderr"), |
| new VString(*real_err)); | new VString(*real_err)); |
| } | } |
| static void _exec(Request& r, MethodParams& params) { | static void _exec(Request& r, MethodParams& params) { |
| Line 444 static void _list(Request& r, MethodPara | Line 576 static void _list(Request& r, MethodPara |
| throw Exception(0, | throw Exception(0, |
| ®exp->mid(erroffset, regexp->length()), | ®exp->mid(erroffset, regexp->length()), |
| "regular expression syntax error - %s", errptr); | "regular expression syntax error - %s", errptr); |
| } else | } else { |
| regexp=0; // not used, just to calm down compiler | |
| regexp_code=0; | regexp_code=0; |
| } | |
| const char* absolute_path_cstr=r.absolute(relative_path.as_string()).cstr(String::L_FILE_SPEC); | const char* absolute_path_cstr=r.absolute(relative_path.as_string()).cstr(String::L_FILE_SPEC); |
| Line 500 static void lock_execute_body(int , void | Line 634 static void lock_execute_body(int , void |
| info.r->write_assign_lang(info.r->process(*info.body_code)); | info.r->write_assign_lang(info.r->process(*info.body_code)); |
| }; | }; |
| static void _lock(Request& r, MethodParams& params) { | static void _lock(Request& r, MethodParams& params) { |
| Lock_execute_body_info info={0}; | const String& file_spec=r.absolute(params.as_string(0, FILE_NAME_MUST_BE_STRING)); |
| info.r=&r; | Lock_execute_body_info info={ |
| const String& file_spec=r.absolute(params.as_string(0, "file name must be string")); | &r, |
| info.body_code=¶ms.as_junction(1, "body must be code"); | ¶ms.as_junction(1, "body must be code") |
| }; | |
| file_write_action_under_lock(file_spec, "lock", lock_execute_body, &info); | |
| file_write_action_under_lock( | |
| file_spec, | |
| "lock", | |
| lock_execute_body, | |
| &info); | |
| } | } |
| static int lastposafter(const String& s, size_t after, const char* substr, size_t substr_size, bool beforelast=false) { | static int lastposafter(const String& s, size_t after, const char* substr, size_t substr_size, bool beforelast=false) { |
| size_t size; | size_t size=0; // just to calm down compiler |
| if(beforelast) | if(beforelast) |
| size=s.length(); | size=s.length(); |
| int at; | size_t at; |
| while((at=s.pos(StringBody(substr, substr_size), after))!=STRING_NOT_FOUND) { | while((at=s.pos(String::Body(substr, substr_size), after))!=STRING_NOT_FOUND) { |
| size_t newafter=at+substr_size/*skip substr*/; | size_t newafter=at+substr_size/*skip substr*/; |
| if(beforelast && newafter==size) | if(beforelast && newafter==size) |
| break; | break; |
| Line 524 static int lastposafter(const String& s, | Line 663 static int lastposafter(const String& s, |
| } | } |
| static void _find(Request& r, MethodParams& params) { | static void _find(Request& r, MethodParams& params) { |
| const String& file_name=params.as_no_junction(0, "file name must not be code").as_string(); | const String& file_name=params.as_no_junction(0, FILE_NAME_MUST_NOT_BE_CODE).as_string(); |
| const String* file_spec; | const String* file_spec; |
| if(file_name.first_char()=='/') | if(file_name.first_char()=='/') |
| file_spec=&file_name; | file_spec=&file_name; |
| Line 532 static void _find(Request& r, MethodPara | Line 671 static void _find(Request& r, MethodPara |
| file_spec=&r.relative(r.request_info.uri, file_name); | file_spec=&r.relative(r.request_info.uri, file_name); |
| // easy way | // easy way |
| if(file_readable(r.absolute(*file_spec))) { | if(file_exist(r.absolute(*file_spec))) { |
| r.write_assign_lang(*file_spec); | r.write_assign_lang(*file_spec); |
| return; | return; |
| } | } |
| Line 547 static void _find(Request& r, MethodPara | Line 686 static void _find(Request& r, MethodPara |
| String test_name; | String test_name; |
| test_name<<*(dirname=&dirname->mid(0, after_monkey_slash)); | test_name<<*(dirname=&dirname->mid(0, after_monkey_slash)); |
| test_name<<basename; | test_name<<basename; |
| if(file_readable(r.absolute(test_name))) { | if(file_exist(r.absolute(test_name))) { |
| r.write_assign_lang(test_name); | r.write_assign_lang(test_name); |
| return; | return; |
| } | } |
| Line 561 static void _find(Request& r, MethodPara | Line 700 static void _find(Request& r, MethodPara |
| } | } |
| static void _dirname(Request& r, MethodParams& params) { | static void _dirname(Request& r, MethodParams& params) { |
| const String& file_spec=params.as_string(0, "file name must be string"); | const String& file_spec=params.as_string(0, FILE_NAME_MUST_BE_STRING); |
| // /a/some.tar.gz > /a | // /a/some.tar.gz > /a |
| // /a/b/ > /a | // /a/b/ > /a |
| int afterslash=lastposafter(file_spec, 0, "/", 1, true); | int afterslash=lastposafter(file_spec, 0, "/", 1, true); |
| Line 572 static void _dirname(Request& r, MethodP | Line 711 static void _dirname(Request& r, MethodP |
| } | } |
| static void _basename(Request& r, MethodParams& params) { | static void _basename(Request& r, MethodParams& params) { |
| const String& file_spec=params.as_string(0, "file name must be string"); | const String& file_spec=params.as_string(0, FILE_NAME_MUST_BE_STRING); |
| // /a/some.tar.gz > some.tar.gz | // /a/some.tar.gz > some.tar.gz |
| int afterslash=lastposafter(file_spec, 0, "/", 1); | int afterslash=lastposafter(file_spec, 0, "/", 1); |
| r.write_assign_lang(file_spec.mid(afterslash, file_spec.length())); | r.write_assign_lang(file_spec.mid(afterslash, file_spec.length())); |
| } | } |
| static void _justname(Request& r, MethodParams& params) { | static void _justname(Request& r, MethodParams& params) { |
| const String& file_spec=params.as_string(0, "file name must be string"); | const String& file_spec=params.as_string(0, FILE_NAME_MUST_BE_STRING); |
| // /a/some.tar.gz > some.tar | // /a/some.tar.gz > some.tar |
| int afterslash=lastposafter(file_spec, 0, "/", 1); | int afterslash=lastposafter(file_spec, 0, "/", 1); |
| int afterdot=lastposafter(file_spec, afterslash, ".", 1); | int afterdot=lastposafter(file_spec, afterslash, ".", 1); |
| r.write_assign_lang(file_spec.mid(afterslash, afterdot!=afterslash?afterdot-1:file_spec.length())); | r.write_assign_lang(file_spec.mid(afterslash, afterdot!=afterslash?afterdot-1:file_spec.length())); |
| } | } |
| static void _justext(Request& r, MethodParams& params) { | static void _justext(Request& r, MethodParams& params) { |
| const String& file_spec=params.as_string(0, "file name must be string"); | const String& file_spec=params.as_string(0, FILE_NAME_MUST_BE_STRING); |
| // /a/some.tar.gz > gz | // /a/some.tar.gz > gz |
| int afterdot=lastposafter(file_spec, 0, ".", 1); | int afterdot=lastposafter(file_spec, 0, ".", 1); |
| if(afterdot>0) | if(afterdot>0) |
| Line 594 static void _justext(Request& r, MethodP | Line 733 static void _justext(Request& r, MethodP |
| } | } |
| static void _fullpath(Request& r, MethodParams& params) { | static void _fullpath(Request& r, MethodParams& params) { |
| const String& file_spec=params.as_string(0, "file name must be string"); | const String& file_spec=params.as_string(0, FILE_NAME_MUST_BE_STRING); |
| const String* result; | const String* result; |
| if(file_spec.first_char()=='/') | if(file_spec.first_char()=='/') |
| result=&file_spec; | result=&file_spec; |
| Line 613 static void _fullpath(Request& r, Method | Line 752 static void _fullpath(Request& r, Method |
| r.write_assign_lang(*result); | r.write_assign_lang(*result); |
| } | } |
| static void _sql_string(Request& r, MethodParams&) { | |
| VFile& self=GET_SELF(r, VFile); | |
| const char *quoted=r.connection()->quote(self.value_ptr(), self.value_size()); | |
| r.write_assign_lang(*new String(quoted)); | |
| } | |
| #ifndef DOXYGEN | |
| class File_sql_event_handlers: public SQL_Driver_query_event_handlers { | |
| const String& statement_string; const char* statement_cstr; | |
| int got_columns; | |
| int got_cells; | |
| public: | |
| String::C value; | |
| const String* user_file_name; | |
| const String* user_content_type; | |
| public: | |
| File_sql_event_handlers( | |
| const String& astatement_string, const char* astatement_cstr): | |
| statement_string(astatement_string), statement_cstr(astatement_cstr), | |
| got_columns(0), | |
| got_cells(0), | |
| user_file_name(0), | |
| user_content_type(0) {} | |
| bool add_column(SQL_Error& error, const char* /*str*/, size_t /*length*/) { | |
| if(got_columns++==3) { | |
| error=SQL_Error(PARSER_RUNTIME, "result must contain not more then 3 columns"); | |
| return true; | |
| } | |
| return false; | |
| } | |
| bool before_rows(SQL_Error& /*error*/ ) { /* ignore */ return false; } | |
| bool add_row(SQL_Error& /*error*/) { /* ignore */ return false; } | |
| bool add_row_cell(SQL_Error& error, const char* str, size_t length) { | |
| try { | |
| switch(got_cells++) { | |
| case 0: | |
| value=String::C(str, length); | |
| break; | |
| case 1: | |
| if(!user_file_name) // user not specified? | |
| user_file_name=new String(str, length, true); | |
| break; | |
| case 2: | |
| if(!user_content_type) // user not specified? | |
| user_content_type=new String(str, length, true); | |
| break; | |
| default: | |
| error=SQL_Error(PARSER_RUNTIME, "result must not contain more then one row, three rows"); | |
| return true; | |
| } | |
| return false; | |
| } catch(...) { | |
| error=SQL_Error("exception occured in File_sql_event_handlers::add_row_cell"); | |
| return true; | |
| } | |
| } | |
| }; | |
| #endif | |
| static void _sql(Request& r, MethodParams& params) { | |
| Value& statement=params.as_junction(0, "statement must be code"); | |
| Temp_lang temp_lang(r, String::L_SQL); | |
| const String& statement_string=r.process_to_string(statement); | |
| const char* statement_cstr= | |
| statement_string.cstr(String::L_UNSPECIFIED, r.connection()); | |
| File_sql_event_handlers handlers(statement_string, statement_cstr); | |
| if(params.count()>1) | |
| if(HashStringValue* options= | |
| params.as_no_junction(1, PARAM_MUST_NOT_BE_CODE).get_hash()) { | |
| int valid_options=0; | |
| if(Value* vfilename=options->get(NAME_NAME)) { | |
| valid_options++; | |
| handlers.user_file_name=&vfilename->as_string(); | |
| } | |
| if(Value* vcontent_type=options->get(CONTENT_TYPE_NAME)) { | |
| valid_options++; | |
| handlers.user_content_type=&vcontent_type->as_string(); | |
| } | |
| if(valid_options!=options->count()) | |
| throw Exception(PARSER_RUNTIME, | |
| 0, | |
| "called with invalid option"); | |
| } | |
| r.connection()->query( | |
| statement_cstr, | |
| 0, 0, | |
| 0, 0, | |
| handlers, | |
| statement_string); | |
| if(!handlers.value) | |
| throw Exception(PARSER_RUNTIME, | |
| 0, | |
| "produced no result"); | |
| const char* user_file_name_cstr=handlers.user_file_name? handlers.user_file_name->cstr(): 0; | |
| VString* vcontent_type=handlers.user_content_type? | |
| new VString(*handlers.user_content_type) | |
| : user_file_name_cstr? | |
| new VString(r.mime_type_of(user_file_name_cstr)) | |
| : 0; | |
| VFile& self=GET_SELF(r, VFile); | |
| self.set(true/*tainted*/, handlers.value.str, handlers.value.length, user_file_name_cstr, vcontent_type); | |
| } | |
| static void _base64(Request& r, MethodParams& params) { | |
| bool dynamic = !(&r.get_self() == file_class); | |
| if ( dynamic ){ | |
| VFile& self=GET_SELF(r, VFile); | |
| if(params.count()) { | |
| // decode | |
| const char* cstr=params.as_string(0, PARAMETER_MUST_BE_STRING).cstr(); | |
| char* decoded_cstr=0; | |
| size_t decoded_size=0; | |
| pa_base64_decode(cstr, strlen(cstr), decoded_cstr, decoded_size); | |
| if(decoded_cstr && decoded_size) | |
| self.set(true/*tainted*/, decoded_cstr, decoded_size); | |
| } else { | |
| // encode | |
| const char* encoded=pa_base64_encode(self.value_ptr(), self.value_size()); | |
| r.write_assign_lang(*new String(encoded, 0, true/*once ?param=base64(something) was needed*/)); | |
| } | |
| } else { | |
| // encode | |
| const String& file_spec=params.as_string(0, FILE_NAME_MUST_BE_STRING); | |
| const char* encoded=pa_base64_encode(r.absolute(file_spec)); | |
| r.write_assign_lang(*new String(encoded, 0, true/*once ?param=base64(something) was needed*/)); | |
| } | |
| } | |
| static void _crc32(Request& r, MethodParams& params) { | |
| unsigned long crc32 = 0; | |
| if(&r.get_self() == file_class) { | |
| // ^file:crc32[file-name] | |
| if(params.count()) { | |
| const String& file_spec=params.as_string(0, FILE_NAME_MUST_BE_STRING); | |
| crc32=pa_crc32(r.absolute(file_spec)); | |
| } else { | |
| throw Exception(PARSER_RUNTIME, | |
| 0, | |
| "file name must be defined"); | |
| } | |
| } else { | |
| // ^file.crc32[] | |
| VFile& self=GET_SELF(r, VFile); | |
| crc32=pa_crc32(self.value_ptr(), self.value_size()); | |
| } | |
| r.write_no_lang(*new VInt(crc32)); | |
| } | |
| static void file_md5_file_action( | |
| struct stat& finfo, | |
| int f, | |
| const String& , const char* /*fname*/, bool, | |
| void *context) | |
| { | |
| PA_MD5_CTX& md5context=*static_cast<PA_MD5_CTX *>(context); | |
| if(finfo.st_size) { | |
| int nCount=0; | |
| do { | |
| unsigned char buffer[FILE_BUFFER_SIZE]; | |
| nCount = file_block_read(f, buffer, sizeof(buffer)); | |
| if ( nCount ){ | |
| pa_MD5Update(&md5context, (const unsigned char*)buffer, nCount); | |
| } | |
| } while(nCount > 0); | |
| } | |
| } | |
| const char* pa_md5(const String& file_spec) | |
| { | |
| PA_MD5_CTX context; | |
| unsigned char digest[16]; | |
| pa_MD5Init(&context); | |
| file_read_action_under_lock(file_spec, "md5", file_md5_file_action, &context); | |
| pa_MD5Final(digest, &context); | |
| return hex_string(digest, sizeof(digest), false); | |
| } | |
| const char* pa_md5(const char *in, size_t in_size) | |
| { | |
| PA_MD5_CTX context; | |
| unsigned char digest[16]; | |
| pa_MD5Init(&context); | |
| pa_MD5Update(&context, (const unsigned char*)in, in_size); | |
| pa_MD5Final(digest, &context); | |
| return hex_string(digest, sizeof(digest), false); | |
| } | |
| static void _md5(Request& r, MethodParams& params) { | |
| const char* md5; | |
| if(&r.get_self() == file_class) { | |
| // ^file:md5[file-name] | |
| if(params.count()) { | |
| const String& file_spec=params.as_string(0, FILE_NAME_MUST_BE_STRING); | |
| md5=pa_md5(r.absolute(file_spec)); | |
| } else { | |
| throw Exception(PARSER_RUNTIME, | |
| 0, | |
| "file name must be defined"); | |
| } | |
| } else { | |
| // ^file.md5[] | |
| VFile& self=GET_SELF(r, VFile); | |
| md5=pa_md5(self.value_ptr(), self.value_size()); | |
| } | |
| r.write_no_lang(*new String(md5)); | |
| } | |
| // constructor | // constructor |
| MFile::MFile(): Methoded("file") { | MFile::MFile(): Methoded("file") { |
| // ^save[mode;file-name] | // ^file::create[text;user-name;string] |
| // ^file::create[binary;user-name;SOMEDAY SOMETHING] | |
| add_native_method("create", Method::CT_DYNAMIC, _create, 3, 3); | |
| // ^file.save[mode;file-name] | |
| add_native_method("save", Method::CT_DYNAMIC, _save, 2, 2); | add_native_method("save", Method::CT_DYNAMIC, _save, 2, 2); |
| // ^delete[file-name] | // ^file:delete[file-name] |
| add_native_method("delete", Method::CT_STATIC, _delete, 1, 1); | add_native_method("delete", Method::CT_STATIC, _delete, 1, 1); |
| // ^move[from-file-name;to-file-name] | // ^file:move[from-file-name;to-file-name] |
| add_native_method("move", Method::CT_STATIC, _move, 2, 2); | add_native_method("move", Method::CT_STATIC, _move, 2, 2); |
| // ^load[mode;disk-name] | // ^file::load[mode;disk-name] |
| // ^load[mode;disk-name;user-name] | // ^file::load[mode;disk-name;user-name] |
| add_native_method("load", Method::CT_DYNAMIC, _load, 2, 3); | add_native_method("load", Method::CT_DYNAMIC, _load, 2, 3); |
| // ^stat[disk-name] | // ^file::stat[disk-name] |
| add_native_method("stat", Method::CT_DYNAMIC, _stat, 1, 1); | add_native_method("stat", Method::CT_DYNAMIC, _stat, 1, 1); |
| // ^cgi[file-name] | // ^file::cgi[file-name] |
| // ^cgi[file-name;env hash] | // ^file::cgi[file-name;env hash] |
| // ^cgi[file-name;env hash;1cmd;2line;3ar;4g;5s] | // ^file::cgi[file-name;env hash;1cmd;2line;3ar;4g;5s] |
| add_native_method("cgi", Method::CT_DYNAMIC, _cgi, 1, 2+10); | add_native_method("cgi", Method::CT_DYNAMIC, _cgi, 1, 2+50); |
| // ^exec[file-name] | // ^file::exec[file-name] |
| // ^exec[file-name;env hash] | // ^file::exec[file-name;env hash] |
| // ^exec[file-name;env hash;1cmd;2line;3ar;4g;5s] | // ^file::exec[file-name;env hash;1cmd;2line;3ar;4g;5s] |
| add_native_method("exec", Method::CT_DYNAMIC, _exec, 1, 2+10); | add_native_method("exec", Method::CT_DYNAMIC, _exec, 1, 2+50); |
| // ^file:list[path] | // ^file:list[path] |
| // ^file:list[path][regexp] | // ^file:list[path][regexp] |
| Line 650 MFile::MFile(): Methoded("file") { | Line 1011 MFile::MFile(): Methoded("file") { |
| // ^file:lock[path]{code} | // ^file:lock[path]{code} |
| add_native_method("lock", Method::CT_STATIC, _lock, 2, 2); | add_native_method("lock", Method::CT_STATIC, _lock, 2, 2); |
| // ^find[file-name] | // ^file:find[file-name] |
| // ^find[file-name]{when-not-found} | // ^file:find[file-name]{when-not-found} |
| add_native_method("find", Method::CT_STATIC, _find, 1, 2); | add_native_method("find", Method::CT_STATIC, _find, 1, 2); |
| // ^file:dirname[/a/some.tar.gz]=/a | // ^file:dirname[/a/some.tar.gz]=/a |
| Line 665 MFile::MFile(): Methoded("file") { | Line 1026 MFile::MFile(): Methoded("file") { |
| add_native_method("justext", Method::CT_STATIC, _justext, 1, 1); | add_native_method("justext", Method::CT_STATIC, _justext, 1, 1); |
| // /some/page.html: ^file:fullpath[a.gif] => /some/a.gif | // /some/page.html: ^file:fullpath[a.gif] => /some/a.gif |
| add_native_method("fullpath", Method::CT_STATIC, _fullpath, 1, 1); | add_native_method("fullpath", Method::CT_STATIC, _fullpath, 1, 1); |
| // ^file.sql-string[] | |
| add_native_method("sql-string", Method::CT_DYNAMIC, _sql_string, 0, 0); | |
| // ^file::sql[[alt_name]]{} | |
| add_native_method("sql", Method::CT_DYNAMIC, _sql, 1, 2); | |
| // ^file::base64[string] << decode | |
| // ^file.base64[] << encode | |
| // ^file:base64[file-name] << encode | |
| add_native_method("base64", Method::CT_ANY, _base64, 0, 1); | |
| // ^file.crc32[] | |
| // ^file:crc32[file-name] | |
| add_native_method("crc32", Method::CT_ANY, _crc32, 0, 1); | |
| // ^file.md5[] | |
| // ^file:md5[file-name] | |
| add_native_method("md5", Method::CT_ANY, _md5, 0, 1); | |
| // ^file:copy[from-file-name;to-file-name] | |
| add_native_method("copy", Method::CT_STATIC, _copy, 2, 2); | |
| } | } |