|
|
| version 1.246, 2016/08/02 14:36:48 | version 1.276, 2023/09/26 20:49:05 |
|---|---|
| Line 1 | Line 1 |
| /** @file | /** @file |
| Parser: @b file parser class. | Parser: @b file parser class. |
| Copyright (c) 2001-2015 Art. Lebedev Studio (http://www.artlebedev.com) | Copyright (c) 2001-2023 Art. Lebedev Studio (http://www.artlebedev.com) |
| Author: Alexandr Petrosian <paf@design.ru> (http://paf.design.ru) | Authors: Konstantin Morshnev <moko@design.ru>, Alexandr Petrosian <paf@design.ru> |
| */ | */ |
| #include "pa_config_includes.h" | #include "pa_config_includes.h" |
| #include "classes.h" | #include "classes.h" |
| #include "pa_vmethod_frame.h" | #include "pa_vmethod_frame.h" |
| #include "pa_base64.h" | |
| #include "pa_request.h" | #include "pa_request.h" |
| #include "pa_vfile.h" | #include "pa_vfile.h" |
| Line 118 static const char* suexec_safe_env_lst[] | Line 119 static const char* suexec_safe_env_lst[] |
| // statics | // statics |
| static const String::Body size_name("size"); | |
| static const String::Body adate_name("adate"); | static const String::Body adate_name("adate"); |
| static const String::Body mdate_name("mdate"); | static const String::Body mdate_name("mdate"); |
| static const String::Body cdate_name("cdate"); | static const String::Body cdate_name("cdate"); |
| Line 133 static void _save(Request& r, MethodPara | Line 135 static void _save(Request& r, MethodPara |
| if(HashStringValue* options=params.as_hash(2)){ | if(HashStringValue* options=params.as_hash(2)){ |
| int valid_options=0; | int valid_options=0; |
| if(Value* vcharset_name=options->get(PA_CHARSET_NAME)){ | if(Value* vcharset_name=options->get(PA_CHARSET_NAME)){ |
| asked_charset=&::charsets.get(vcharset_name->as_string()); | asked_charset=&pa_charsets.get(vcharset_name->as_string()); |
| valid_options++; | valid_options++; |
| } | } |
| if(valid_options != options->count()) | if(valid_options != options->count()) |
| Line 141 static void _save(Request& r, MethodPara | Line 143 static void _save(Request& r, MethodPara |
| } | } |
| // save | // save |
| GET_SELF(r, VFile).save(r.charsets, r.absolute(vfile_name.as_string()), is_text, asked_charset); | GET_SELF(r, VFile).save(r.charsets, r.full_disk_path(vfile_name.as_string()), is_text, asked_charset); |
| } | } |
| static void _delete(Request& r, MethodParams& params) { | static void _delete(Request& r, MethodParams& params) { |
| Line 153 static void _delete(Request& r, MethodPa | Line 155 static void _delete(Request& r, MethodPa |
| if(HashStringValue* options=params.as_hash(1)){ | if(HashStringValue* options=params.as_hash(1)){ |
| int valid_options=0; | int valid_options=0; |
| if(Value* vkeep_empty_dirs=options->get(KEEP_EMPTY_DIRS_NAME)){ | if(Value* vkeep_empty_dirs=options->get(KEEP_EMPTY_DIRS_NAME)){ |
| keep_empty_dirs=r.process_to_value(*vkeep_empty_dirs).as_bool(); | keep_empty_dirs=r.process(*vkeep_empty_dirs).as_bool(); |
| valid_options++; | valid_options++; |
| } | } |
| if(Value* vsuppress_exception=options->get(SUPPRESS_EXCEPTION_NAME)){ | if(Value* vsuppress_exception=options->get(SUPPRESS_EXCEPTION_NAME)){ |
| fail_on_problem=r.process_to_value(*vsuppress_exception).as_bool(); | fail_on_problem=r.process(*vsuppress_exception).as_bool(); |
| valid_options++; | valid_options++; |
| } | } |
| if(valid_options != options->count()) | if(valid_options != options->count()) |
| Line 165 static void _delete(Request& r, MethodPa | Line 167 static void _delete(Request& r, MethodPa |
| } | } |
| // unlink | // unlink |
| file_delete(r.absolute(file_name), fail_on_problem, keep_empty_dirs); | file_delete(r.full_disk_path(file_name), fail_on_problem, keep_empty_dirs); |
| } | } |
| static void _move(Request& r, MethodParams& params) { | static void _move(Request& r, MethodParams& params) { |
| Line 177 static void _move(Request& r, MethodPara | Line 179 static void _move(Request& r, MethodPara |
| if(HashStringValue* options=params.as_hash(2)){ | if(HashStringValue* options=params.as_hash(2)){ |
| int valid_options=0; | int valid_options=0; |
| if(Value* vkeep_empty_dirs=options->get(KEEP_EMPTY_DIRS_NAME)){ | if(Value* vkeep_empty_dirs=options->get(KEEP_EMPTY_DIRS_NAME)){ |
| keep_empty_dirs=r.process_to_value(*vkeep_empty_dirs).as_bool(); | keep_empty_dirs=r.process(*vkeep_empty_dirs).as_bool(); |
| valid_options++; | valid_options++; |
| } | } |
| if(valid_options != options->count()) | if(valid_options != options->count()) |
| Line 186 static void _move(Request& r, MethodPara | Line 188 static void _move(Request& r, MethodPara |
| // move | // move |
| file_move( | file_move( |
| r.absolute(vfrom_file_name.as_string()), | r.full_disk_path(vfrom_file_name.as_string()), |
| r.absolute(vto_file_name.as_string()), | r.full_disk_path(vto_file_name.as_string()), |
| keep_empty_dirs); | keep_empty_dirs); |
| } | } |
| static void copy_process_source(struct stat& , int from_file, const String&, void *context) { | static void copy_process_source(struct stat&, int from_file, const String&, void *context) { |
| int& to_file=*static_cast<int *>(context); | int& to_file=*static_cast<int *>(context); |
| int nCount=0; | int nCount=0; |
| Line 216 static void _copy(Request& r, MethodPara | Line 218 static void _copy(Request& r, MethodPara |
| Value& vfrom_file_name=params.as_no_junction(0, "from file name must not be code"); | Value& vfrom_file_name=params.as_no_junction(0, "from file name must not be code"); |
| Value& vto_file_name=params.as_no_junction(1, "to file name must not be code"); | Value& vto_file_name=params.as_no_junction(1, "to file name must not be code"); |
| String from_spec = r.absolute(vfrom_file_name.as_string()); | bool append=false; |
| const String& to_spec = r.absolute(vto_file_name.as_string()); | if(params.count()>2) |
| if(HashStringValue* options=params.as_hash(2)){ | |
| int valid_options=0; | |
| if(Value* vappend=options->get("append")){ | |
| append=r.process(*vappend).as_bool(); | |
| valid_options++; | |
| } | |
| if(valid_options != options->count()) | |
| throw Exception(PARSER_RUNTIME, 0, CALLED_WITH_INVALID_OPTION); | |
| } | |
| String from_spec = r.full_disk_path(vfrom_file_name.as_string()); | |
| const String& to_spec = r.full_disk_path(vto_file_name.as_string()); | |
| file_write_action_under_lock( | file_write_action_under_lock( |
| to_spec, | to_spec, |
| "copy", | "copy", |
| copy_open_target, | copy_open_target, |
| &from_spec); | &from_spec, |
| false /*as text*/, | |
| append); | |
| } | } |
| static void _load_pass_param( | static void _load_pass_param( |
| Line 235 static void _load_pass_param( | Line 251 static void _load_pass_param( |
| static void _load(Request& r, MethodParams& params) { | static void _load(Request& r, MethodParams& params) { |
| bool as_text=VFile::is_text_mode(params.as_string(0, MODE_MUST_NOT_BE_CODE)); | bool as_text=VFile::is_text_mode(params.as_string(0, MODE_MUST_NOT_BE_CODE)); |
| const String& lfile_name=r.absolute(params.as_string(1, FILE_NAME_MUST_NOT_BE_CODE)); | const String& lfile_name=r.full_disk_path(params.as_string(1, FILE_NAME_MUST_NOT_BE_CODE)); |
| size_t param_index=params.count()-1; | size_t param_index=params.count()-1; |
| Value* param_value=param_index>1?¶ms.as_no_junction(param_index, "file name or options must not be code"):0; | Value* param_value=param_index>1?¶ms.as_no_junction(param_index, "file name or options must not be code"):0; |
| Line 256 static void _load(Request& r, MethodPara | Line 272 static void _load(Request& r, MethodPara |
| if(!user_file_name) | if(!user_file_name) |
| user_file_name=&lfile_name; | user_file_name=&lfile_name; |
| size_t offset=0; | File_read_result file=file_load(r, lfile_name, as_text, options, true); |
| size_t limit=0; | |
| if(options){ | |
| options=new HashStringValue(*options); | |
| if(Value *voffset=(Value *)options->get(sql_offset_name)){ | |
| offset=r.process_to_value(*voffset).as_int(); | |
| } | |
| if(Value *vlimit=(Value *)options->get(sql_limit_name)){ | |
| limit=r.process_to_value(*vlimit).as_int(); | |
| } | |
| // no check on options count here, see file_read | |
| } | |
| File_read_result file=file_load(r, lfile_name, | |
| as_text, options, true, 0, offset, limit | |
| ); | |
| Value* vcontent_type=0; | Value* vcontent_type=0; |
| if(file.headers){ | if(file.headers){ |
| Line 285 static void _load(Request& r, MethodPara | Line 286 static void _load(Request& r, MethodPara |
| if(file.headers){ | if(file.headers){ |
| file.headers->for_each<HashStringValue*>(_load_pass_param, &self.fields()); | file.headers->for_each<HashStringValue*>(_load_pass_param, &self.fields()); |
| } else { | } else { |
| size_t size; | uint64_t size; |
| time_t atime, mtime, ctime; | time_t atime, mtime, ctime; |
| file_stat(lfile_name, size, atime, mtime, ctime); | file_stat(lfile_name, size, atime, mtime, ctime); |
| Line 335 static void _create(Request& r, MethodPa | Line 336 static void _create(Request& r, MethodPa |
| } | } |
| } | } |
| if(Value* vcharset_name=options->get("to-charset")) { | if(Value* vcharset_name=options->get("to-charset")) { |
| to_charset=&::charsets.get(vcharset_name->as_string()); | to_charset=&pa_charsets.get(vcharset_name->as_string()); |
| valid_options++; | valid_options++; |
| } | } |
| if(Value* vcharset_name=options->get("from-charset")) { | if(Value* vcharset_name=options->get("from-charset")) { |
| from_charset=&::charsets.get(vcharset_name->as_string()); | from_charset=&pa_charsets.get(vcharset_name->as_string()); |
| valid_options++; | valid_options++; |
| } | } |
| if(Value* vcharset_name=options->get(PA_CHARSET_NAME)) { | if(Value* vcharset_name=options->get(PA_CHARSET_NAME)) { |
| if(to_charset) | if(to_charset) |
| throw Exception(PARSER_RUNTIME, 0, "charset option can not be used with to-charset"); | throw Exception(PARSER_RUNTIME, 0, "charset option can not be used with to-charset"); |
| to_charset=&::charsets.get(vcharset_name->as_string()); | to_charset=&pa_charsets.get(vcharset_name->as_string()); |
| valid_options++; | valid_options++; |
| } | } |
| if(Value* value=options->get(CONTENT_TYPE_NAME)) { | if(Value* value=options->get(CONTENT_TYPE_NAME)) { |
| Line 364 static void _create(Request& r, MethodPa | Line 365 static void _create(Request& r, MethodPa |
| String::Body body=content_str->cstr_to_string_body_untaint(String::L_AS_IS, r.connection(false), &r.charsets); // explode content, honor tainting changes | String::Body body=content_str->cstr_to_string_body_untaint(String::L_AS_IS, r.connection(false), &r.charsets); // explode content, honor tainting changes |
| self.set(true/*tainted*/, is_text, body.cstrm(), body.length(), file_name, vcontent_type, &r); | self.set(true/*tainted*/, is_text, body.cstrm(), body.length(), file_name, vcontent_type, &r); |
| } else { | } else { |
| VFile& fcontent=*vcontent.as_vfile(String::L_AS_IS); // can't be null | VFile& fcontent=*vcontent.as_vfile(); // can't be null |
| self.set(fcontent, mode != 0, is_text, file_name, vcontent_type, &r); | if(mode){ |
| if(is_text && !fcontent.is_text_mode()) | self.set(fcontent, &is_text, file_name, vcontent_type, &r); |
| from_charset=self.detect_binary_charset(from_charset); | if(is_text && !fcontent.is_text_mode()) |
| from_charset=self.detect_binary_charset(from_charset); | |
| } else { | |
| self.set(fcontent, 0, file_name, vcontent_type, &r); | |
| is_text=fcontent.is_text_mode(); | |
| } | |
| } | } |
| if(to_charset || from_charset) | if(to_charset || from_charset) |
| Line 380 static void _create(Request& r, MethodPa | Line 386 static void _create(Request& r, MethodPa |
| static void _stat(Request& r, MethodParams& params) { | static void _stat(Request& r, MethodParams& params) { |
| const String& lfile_name=params.as_string(0, FILE_NAME_MUST_NOT_BE_CODE); | const String& lfile_name=params.as_string(0, FILE_NAME_MUST_NOT_BE_CODE); |
| size_t size; | uint64_t size; |
| time_t atime, mtime, ctime; | time_t atime, mtime, ctime; |
| file_stat(r.absolute(lfile_name), size, atime, mtime, ctime); | file_stat(r.full_disk_path(lfile_name), size, atime, mtime, ctime); |
| VFile& self=GET_SELF(r, VFile); | VFile& self=GET_SELF(r, VFile); |
| self.set_binary(true/*tainted*/, 0/*no bytes*/, size, &lfile_name, 0, &r); | self.set_binary(true/*tainted*/, 0 /*no bytes*/, 0 /*fake size*/, &lfile_name, 0, &r); |
| HashStringValue& ff=self.fields(); | HashStringValue& ff=self.fields(); |
| ff.put(size_name, new VDouble((double)size) /*real size*/); | |
| ff.put(adate_name, new VDate((pa_time_t)atime)); | ff.put(adate_name, new VDate((pa_time_t)atime)); |
| ff.put(mdate_name, new VDate((pa_time_t)mtime)); | ff.put(mdate_name, new VDate((pa_time_t)mtime)); |
| ff.put(cdate_name, new VDate((pa_time_t)ctime)); | ff.put(cdate_name, new VDate((pa_time_t)ctime)); |
| Line 475 static void _exec_cgi(Request& r, Method | Line 482 static void _exec_cgi(Request& r, Method |
| if(param_index>=params.count()) | if(param_index>=params.count()) |
| throw Exception(PARSER_RUNTIME, 0, FILE_NAME_MUST_BE_SPECIFIED); | throw Exception(PARSER_RUNTIME, 0, FILE_NAME_MUST_BE_SPECIFIED); |
| const String& script_name=r.absolute(params.as_string(param_index++, FILE_NAME_MUST_NOT_BE_CODE)); | const String& script_name=r.full_disk_path(params.as_string(param_index++, FILE_NAME_MUST_NOT_BE_CODE)); |
| HashStringString env; | HashStringString env; |
| #define ECSTR(name, value_cstr) if(value_cstr) env.put(#name, value_cstr); | #define ECSTR(name, value_cstr) if(value_cstr) env.put(#name, value_cstr); |
| Line 498 static void _exec_cgi(Request& r, Method | Line 505 static void _exec_cgi(Request& r, Method |
| env.put("SCRIPT_NAME", script_name); | env.put("SCRIPT_NAME", script_name); |
| // environment & stdin from param | // environment & stdin from param |
| String *in=new String(); | bool in_is_text_mode=true; |
| String::C in; | |
| Charset *charset=0; // default script works raw_in 'source' charset = no transcoding needed | Charset *charset=0; // default script works raw_in 'source' charset = no transcoding needed |
| if(param_index < params.count()) { | if(param_index < params.count()) { |
| if(HashStringValue* user_env=params.as_hash(param_index++, "env")) { | if(HashStringValue* user_env=params.as_hash(param_index++, "env")) { |
| // $.charset [previewing to handle URI pieces] | // $.charset [previewing to handle URI pieces] |
| if(Value* vcharset=user_env->get(CHARSET_EXEC_PARAM_NAME)) | if(Value* vcharset=user_env->get(CHARSET_EXEC_PARAM_NAME)) |
| charset=&charsets.get(vcharset->as_string()); | charset=&pa_charsets.get(vcharset->as_string()); |
| // $.others | // $.others |
| Append_env_pair_info info={&r.charsets, &env, 0}; | Append_env_pair_info info={&r.charsets, &env, 0}; |
| Line 518 static void _exec_cgi(Request& r, Method | Line 526 static void _exec_cgi(Request& r, Method |
| if(info.vstdin) { | if(info.vstdin) { |
| if(const String* sstdin=info.vstdin->get_string()) { | if(const String* sstdin=info.vstdin->get_string()) { |
| // untaint stdin | // untaint stdin |
| in = new String(sstdin->cstr_to_string_body_untaint(String::L_AS_IS, r.connection(false), &r.charsets), String::L_AS_IS); | in = String::C(sstdin->cstr_to_string_body_untaint(String::L_AS_IS, r.connection(false), &r.charsets)); |
| } else | } else |
| if(VFile* vfile=static_cast<VFile *>(info.vstdin->as("file"))) | if(VFile* vfile=static_cast<VFile *>(info.vstdin->as("file"))){ |
| in->append_know_length((const char* )vfile->value_ptr(), vfile->value_size(), String::L_TAINTED); | in = String::C((const char* )vfile->value_ptr(), vfile->value_size()); |
| else | in_is_text_mode = vfile->is_text_mode(); |
| throw Exception(PARSER_RUNTIME, | } else |
| 0, | throw Exception(PARSER_RUNTIME, 0, STDIN_EXEC_PARAM_NAME " parameter must be string or file"); |
| STDIN_EXEC_PARAM_NAME " parameter must be string or file"); | |
| } | } |
| } | } |
| } | } |
| Line 544 static void _exec_cgi(Request& r, Method | Line 551 static void _exec_cgi(Request& r, Method |
| } else { | } else { |
| Table* table=param.get_table(); | Table* table=param.get_table(); |
| if(table){ | if(table){ |
| for(size_t i=0; i<table->count(); i++) { | for(size_t j=0; j<table->count(); j++) |
| append_to_argv(r, argv, table->get(i)->get(0)); | append_to_argv(r, argv, table->get(j)->get(0)); |
| } | |
| } else { | } else { |
| throw Exception(PARSER_RUNTIME, | throw Exception(PARSER_RUNTIME, 0, "param must be string or table"); |
| 0, | |
| "param must be string or table"); | |
| } | } |
| } | } |
| } | } |
| Line 561 static void _exec_cgi(Request& r, Method | Line 565 static void _exec_cgi(Request& r, Method |
| if(charset) { | if(charset) { |
| Charset::transcode(env, r.charsets.source(), *charset); | Charset::transcode(env, r.charsets.source(), *charset); |
| Charset::transcode(argv, r.charsets.source(), *charset); | Charset::transcode(argv, r.charsets.source(), *charset); |
| in=&Charset::transcode(*in, r.charsets.source(), *charset); | if(in_is_text_mode) |
| in=Charset::transcode(in, r.charsets.source(), *charset); | |
| } | } |
| // @todo | // @todo |
| // ifdef WIN32 do OEM->ANSI transcode on some(.cmd?) programs to | // ifdef WIN32 do OEM->ANSI transcode on some(.cmd?) programs to |
| // match silent conversion in OS | // match silent conversion in OS |
| // exec! | // exec! |
| PA_exec_result execution=pa_exec(false/*forced_allow*/, script_name, &env, argv, *in); | PA_exec_result execution=pa_exec(false/*forced_allow*/, script_name, &env, argv, in); |
| File_read_result *file_out=&execution.out; | File_read_result *file_out=&execution.out; |
| String *real_err=&execution.err; | String *real_err=&execution.err; |
| Line 647 static void _exec_cgi(Request& r, Method | Line 652 static void _exec_cgi(Request& r, Method |
| // $fields << header | // $fields << header |
| if(header) { | if(header) { |
| ArrayString rows; | ArrayString rows; |
| size_t pos_after=0; | header->split(rows, 0, eol_marker); |
| header->split(rows, pos_after, eol_marker); | |
| Pass_cgi_header_attribute_info info={0, 0, 0}; | Pass_cgi_header_attribute_info info={0, 0, 0}; |
| info.charset=&r.charsets.source(); | info.charset=&r.charsets.source(); |
| info.fields=&self.fields(); | info.fields=&self.fields(); |
| Line 658 static void _exec_cgi(Request& r, Method | Line 662 static void _exec_cgi(Request& r, Method |
| } | } |
| } else { // ^file::exec | } else { // ^file::exec |
| // $body | // $body |
| self.set(false/*not tainted*/, is_text, file_out->str, file_out->length); | self.set(false/*not tainted*/, is_text, file_out->str ? file_out->str : pa_strdup("") /*to distinguish from stat-ed file*/, file_out->length); |
| } | } |
| // $status | // $status |
| Line 689 static void _list(Request& r, MethodPara | Line 693 static void _list(Request& r, MethodPara |
| if(HashStringValue* options=voption.get_hash()) { | if(HashStringValue* options=voption.get_hash()) { |
| int valid_options=0; | int valid_options=0; |
| if(Value* vstat=options->get("stat")) { | if(Value* vstat=options->get("stat")) { |
| stat=r.process_to_value(*vstat).as_bool(); | stat=r.process(*vstat).as_bool(); |
| valid_options++; | valid_options++; |
| } | } |
| if(Value* value=options->get("filter")) { | if(Value* value=options->get("filter")) { |
| Line 717 static void _list(Request& r, MethodPara | Line 721 static void _list(Request& r, MethodPara |
| } | } |
| } | } |
| const char* absolute_path_cstr=r.absolute(relative_path.as_string()).taint_cstr(String::L_FILE_SPEC); | const char* absolute_path_cstr=r.full_disk_path(relative_path.as_string()).taint_cstr(String::L_FILE_SPEC); |
| Table::Action_options table_options; | Table::Action_options table_options; |
| Table& table=*new Table(file_list_table_template, table_options); | Table& table=*new Table(file_list_table_template, table_options); |
| Line 726 static void _list(Request& r, MethodPara | Line 730 static void _list(Request& r, MethodPara |
| int ovector[ovector_size]; | int ovector[ovector_size]; |
| LOAD_DIR(absolute_path_cstr, | LOAD_DIR(absolute_path_cstr, |
| const char* file_name_cstr=ffblk.ff_name; | const char* file_name_cstr=ffblk.name(); |
| size_t file_name_size=strlen(file_name_cstr); | size_t file_name_size=strlen(file_name_cstr); |
| if(!vregex || vregex->exec(ffblk.ff_name, file_name_size, ovector, ovector_size)>=0) { | if(!vregex || vregex->exec(file_name_cstr, file_name_size, ovector, ovector_size)>=0) { |
| Table::element_type row(new ArrayString); | Table::element_type row(new ArrayString); |
| *row+=new String(pa_strdup(file_name_cstr, file_name_size), String::L_TAINTED); | *row+=new String(pa_strdup(file_name_cstr, file_name_size), String::L_TAINTED); |
| *row+=new String(String::Body::Format(ffblk.is_dir(stat) ? 1 : 0), String::L_CLEAN); | *row+=new String(String::Body::Format(ffblk.is_dir(stat) ? 1 : 0), String::L_CLEAN); |
| Line 744 static void _list(Request& r, MethodPara | Line 748 static void _list(Request& r, MethodPara |
| ); | ); |
| // write out result | // write out result |
| r.write_no_lang(*new VTable(&table)); | r.write(*new VTable(&table)); |
| } | } |
| #ifndef DOXYGEN | #ifndef DOXYGEN |
| Line 757 struct Lock_execute_body_info { | Line 761 struct Lock_execute_body_info { |
| static void lock_execute_body(int , void *ainfo) { | static void lock_execute_body(int , void *ainfo) { |
| Lock_execute_body_info& info=*static_cast<Lock_execute_body_info *>(ainfo); | Lock_execute_body_info& info=*static_cast<Lock_execute_body_info *>(ainfo); |
| // execute body | // execute body |
| info.r->write_assign_lang(info.r->process(*info.body_code)); | info.r->write(info.r->process(*info.body_code)); |
| } | } |
| static void _lock(Request& r, MethodParams& params) { | static void _lock(Request& r, MethodParams& params) { |
| const String& file_spec=r.absolute(params.as_string(0, FILE_NAME_MUST_BE_STRING)); | const String& file_spec=r.full_disk_path(params.as_string(0, FILE_NAME_MUST_BE_STRING)); |
| Lock_execute_body_info info={ | Lock_execute_body_info info={ |
| &r, | &r, |
| ¶ms.as_junction(1, "body must be code") | ¶ms.as_junction(1, "body must be code") |
| Line 796 static void _find(Request& r, MethodPara | Line 800 static void _find(Request& r, MethodPara |
| file_spec=&r.relative(r.request_info.uri, file_name); | file_spec=&r.relative(r.request_info.uri, file_name); |
| // easy way | // easy way |
| if(file_exist(r.absolute(*file_spec))) { | if(file_exist(r.full_disk_path(*file_spec))) { |
| r.write_assign_lang(*file_spec); | r.write(*file_spec); |
| return; | return; |
| } | } |
| Line 814 static void _find(Request& r, MethodPara | Line 818 static void _find(Request& r, MethodPara |
| String test_name; | String test_name; |
| test_name << dirname.mid(0, slash+1); | test_name << dirname.mid(0, slash+1); |
| test_name << basename; | test_name << basename; |
| if(file_exist(r.absolute(test_name))) { | if(file_exist(r.full_disk_path(test_name))) { |
| r.write_assign_lang(test_name); | r.write(test_name); |
| return; | return; |
| } | } |
| rpos=slash; | rpos=slash; |
| Line 823 static void _find(Request& r, MethodPara | Line 827 static void _find(Request& r, MethodPara |
| // no way, not found | // no way, not found |
| if(not_found_code) | if(not_found_code) |
| r.write_pass_lang(r.process(*not_found_code)); | r.write(r.process(*not_found_code)); |
| } | } |
| static void _dirname(Request& r, MethodParams& params) { | static void _dirname(Request& r, MethodParams& params) { |
| Line 841 static void _dirname(Request& r, MethodP | Line 845 static void _dirname(Request& r, MethodP |
| // file > . | // file > . |
| if(file_spec.is_empty()) { | if(file_spec.is_empty()) { |
| r.write_assign_lang(String(".")); | r.write(String(".")); |
| return; | return; |
| } | } |
| size_t p; | size_t p; |
| size_t slash; | size_t slash; |
| if((p=file_spec.rskipchars("/\\"))==STRING_NOT_FOUND) | if((p=file_spec.rskipchars("/\\"))==STRING_NOT_FOUND) |
| r.write_assign_lang(String("/")); | r.write(String("/")); |
| else { | else { |
| if((slash=file_spec.strrpbrk("/\\", 0, p))!=STRING_NOT_FOUND) { | if((slash=file_spec.strrpbrk("/\\", 0, p))!=STRING_NOT_FOUND) { |
| if((p=file_spec.rskipchars("/\\", 0, slash))==STRING_NOT_FOUND) | if((p=file_spec.rskipchars("/\\", 0, slash))==STRING_NOT_FOUND) |
| p=slash; | p=slash; |
| r.write_assign_lang(file_spec.mid(0, p+1)); | r.write(file_spec.mid(0, p+1)); |
| return; | return; |
| } | } |
| r.write_assign_lang(String(".")); | r.write(String(".")); |
| } | } |
| } | } |
| Line 875 static void _basename(Request& r, Method | Line 879 static void _basename(Request& r, Method |
| // file > file | // file > file |
| if(file_spec.is_empty()) { | if(file_spec.is_empty()) { |
| r.write_assign_lang(String(".")); | r.write(String(".")); |
| return; | return; |
| } | } |
| size_t p=file_spec.rskipchars("/\\"); | size_t p=file_spec.rskipchars("/\\"); |
| if(p==STRING_NOT_FOUND) | if(p==STRING_NOT_FOUND) |
| r.write_assign_lang(String("/")); | r.write(String("/")); |
| else | else |
| r.write_assign_lang(file_spec.mid(afterlastslash(file_spec, p), p+1)); | r.write(file_spec.mid(afterlastslash(file_spec, p), p+1)); |
| } | } |
| static void _justname(Request& r, MethodParams& params) { | static void _justname(Request& r, MethodParams& params) { |
| Line 893 static void _justname(Request& r, Method | Line 897 static void _justname(Request& r, Method |
| // /a/b.c > b | // /a/b.c > b |
| size_t pos=afterlastslash(file_spec); | size_t pos=afterlastslash(file_spec); |
| size_t dotpos=file_spec.strrpbrk(".", pos); | size_t dotpos=file_spec.strrpbrk(".", pos); |
| r.write_assign_lang(file_spec.mid(pos, dotpos!=STRING_NOT_FOUND?dotpos:file_spec.length())); | r.write(file_spec.mid(pos, dotpos!=STRING_NOT_FOUND?dotpos:file_spec.length())); |
| } | } |
| static void _justext(Request& r, MethodParams& params) { | static void _justext(Request& r, MethodParams& params) { |
| Line 903 static void _justext(Request& r, MethodP | Line 907 static void _justext(Request& r, MethodP |
| size_t pos=afterlastslash(file_spec); | size_t pos=afterlastslash(file_spec); |
| size_t dotpos=file_spec.strrpbrk(".", pos); | size_t dotpos=file_spec.strrpbrk(".", pos); |
| if(dotpos!=STRING_NOT_FOUND) | if(dotpos!=STRING_NOT_FOUND) |
| r.write_assign_lang(file_spec.mid(dotpos+1, file_spec.length())); | r.write(file_spec.mid(dotpos+1, file_spec.length())); |
| } | } |
| static void _fullpath(Request& r, MethodParams& params) { | static void _fullpath(Request& r, MethodParams& params) { |
| Line 913 static void _fullpath(Request& r, Method | Line 917 static void _fullpath(Request& r, Method |
| result=&file_spec; | result=&file_spec; |
| else { | else { |
| // /some/page.html: ^file:fullpath[a.gif] => /some/a.gif | // /some/page.html: ^file:fullpath[a.gif] => /some/a.gif |
| const String& full_disk_path=r.absolute(file_spec); | const String& full_disk_path=r.full_disk_path(file_spec); |
| size_t document_root_length=strlen(r.request_info.document_root); | size_t document_root_length=strlen(r.request_info.document_root); |
| if(document_root_length>0) { | if(document_root_length>0) { |
| Line 923 static void _fullpath(Request& r, Method | Line 927 static void _fullpath(Request& r, Method |
| } | } |
| result=&full_disk_path.mid(document_root_length, full_disk_path.length()); | result=&full_disk_path.mid(document_root_length, full_disk_path.length()); |
| } | } |
| r.write_assign_lang(*result); | r.write(*result); |
| } | } |
| static void _sql_string(Request& r, MethodParams&) { | static void _sql_string(Request& r, MethodParams&) { |
| VFile& self=GET_SELF(r, VFile); | VFile& self=GET_SELF(r, VFile); |
| const char *quoted=r.connection()->quote(self.value_ptr(), self.value_size()); | const char *quoted=r.connection()->quote(self.value_ptr(), self.value_size()); |
| r.write_assign_lang(*new String(quoted)); | r.write(*new String(quoted)); |
| } | } |
| #ifndef DOXYGEN | #ifndef DOXYGEN |
| class File_sql_event_handlers: public SQL_Driver_query_event_handlers { | class File_sql_event_handlers: public SQL_Driver_query_event_handlers { |
| const String& statement_string; const char* statement_cstr; | |
| int got_columns; | int got_columns; |
| int got_cells; | int got_cells; |
| public: | public: |
| Line 943 public: | Line 946 public: |
| const String* user_file_name; | const String* user_file_name; |
| const String* user_content_type; | const String* user_content_type; |
| public: | public: |
| File_sql_event_handlers( | File_sql_event_handlers(): |
| const String& astatement_string, const char* astatement_cstr): | |
| statement_string(astatement_string), statement_cstr(astatement_cstr), | |
| got_columns(0), | got_columns(0), |
| got_cells(0), | got_cells(0), |
| user_file_name(0), | user_file_name(0), |
| Line 953 public: | Line 954 public: |
| bool add_column(SQL_Error& error, const char* /*str*/, size_t /*length*/) { | bool add_column(SQL_Error& error, const char* /*str*/, size_t /*length*/) { |
| if(got_columns++==3) { | if(got_columns++==3) { |
| error=SQL_Error(PARSER_RUNTIME, "result must contain not more then 3 columns"); | error=SQL_Error("result must contain not more then 3 columns"); |
| return true; | return true; |
| } | } |
| return false; | return false; |
| Line 975 public: | Line 976 public: |
| user_content_type=new String(str, String::L_TAINTED); | user_content_type=new String(str, String::L_TAINTED); |
| break; | break; |
| default: | default: |
| error=SQL_Error(PARSER_RUNTIME, "result must not contain more then one row, three columns"); | error=SQL_Error("result must not contain more then one row, three columns"); |
| return true; | return true; |
| } | } |
| return false; | return false; |
| } catch(...) { | } catch(...) { |
| error=SQL_Error("exception occured in File_sql_event_handlers::add_row_cell"); | error=SQL_Error("exception occurred in File_sql_event_handlers::add_row_cell"); |
| return true; | return true; |
| } | } |
| } | } |
| Line 989 public: | Line 990 public: |
| static void _sql(Request& r, MethodParams& params) { | static void _sql(Request& r, MethodParams& params) { |
| Value& statement=params.as_junction(0, "statement must be code"); | Value& statement=params.as_junction(0, "statement must be code"); |
| Temp_lang temp_lang(r, String::L_SQL); | |
| const String& statement_string=r.process_to_string(statement); | const String& statement_string=r.process_to_string(statement); |
| const char* statement_cstr=statement_string.untaint_cstr(r.flang, r.connection()); | const char* statement_cstr=statement_string.untaint_cstr(String::L_SQL, r.connection()); |
| File_sql_event_handlers handlers(statement_string, statement_cstr); | File_sql_event_handlers handlers; |
| ulong limit=SQL_NO_LIMIT; | ulong limit=SQL_NO_LIMIT; |
| ulong offset=0; | ulong offset=0; |
| Line 1011 static void _sql(Request& r, MethodParam | Line 1011 static void _sql(Request& r, MethodParam |
| } | } |
| if(Value* vlimit=options->get(sql_limit_name)) { | if(Value* vlimit=options->get(sql_limit_name)) { |
| valid_options++; | valid_options++; |
| limit=(ulong)r.process_to_value(*vlimit).as_double(); | limit=(ulong)r.process(*vlimit).as_double(); |
| } | } |
| if(Value* voffset=options->get(sql_offset_name)) { | if(Value* voffset=options->get(sql_offset_name)) { |
| valid_options++; | valid_options++; |
| offset=(ulong)r.process_to_value(*voffset).as_double(); | offset=(ulong)r.process(*voffset).as_double(); |
| } | } |
| if(valid_options!=options->count()) | if(valid_options!=options->count()) |
| throw Exception(PARSER_RUNTIME, 0, CALLED_WITH_INVALID_OPTION); | throw Exception(PARSER_RUNTIME, 0, CALLED_WITH_INVALID_OPTION); |
| } | } |
| r.connection()->query( | r.connection()->query(statement_cstr, 0, 0, offset, limit, handlers, statement_string); |
| statement_cstr, | |
| 0, 0, | |
| offset, limit, | |
| handlers, | |
| statement_string); | |
| if(!handlers.value.str) | if(!handlers.value.str) |
| throw Exception(PARSER_RUNTIME, 0, "produced no result"); | throw Exception(PARSER_RUNTIME, 0, "produced no result"); |
| Line 1039 static void _sql(Request& r, MethodParam | Line 1034 static void _sql(Request& r, MethodParam |
| , &r); | , &r); |
| } | } |
| extern Base64Options base64_encode_options(Request& r, HashStringValue* options); | |
| Base64Options base64_decode_options(Request& r, HashStringValue* options, VString** vcontent_type) { | |
| Base64Options result; | |
| if(options) { | |
| int valid_options=0; | |
| for(HashStringValue::Iterator i(*options); i; i.next() ) { | |
| String::Body key=i.key(); | |
| Value* value=i.value(); | |
| if(key == "pad") { | |
| result.pad=r.process(*value).as_bool(); | |
| valid_options++; | |
| } else if(key == "strict") { | |
| result.strict=r.process(*value).as_bool(); | |
| valid_options++; | |
| } else if(key == CONTENT_TYPE_NAME) { | |
| *vcontent_type=new VString(value->as_string()); | |
| valid_options++; | |
| } else if(key == "url-safe") { | |
| if(r.process(*value).as_bool()) | |
| result.set_url_safe_abc(); | |
| valid_options++; | |
| } | |
| } | |
| if(valid_options != options->count()) | |
| throw Exception(PARSER_RUNTIME, 0, CALLED_WITH_INVALID_OPTION); | |
| } | |
| return result; | |
| } | |
| static void _base64(Request& r, MethodParams& params) { | static void _base64(Request& r, MethodParams& params) { |
| bool dynamic=!(&r.get_self() == file_class); | bool dynamic=!(&r.get_self() == file_class); |
| if(dynamic) { | if(dynamic) { |
| VFile& self=GET_SELF(r, VFile); | VFile& self=GET_SELF(r, VFile); |
| if(params.count()) { | if(params.count()>1 || params.count()==1 && params[0].is_string()) { |
| // decode: | // decode: |
| // ^file::base64[encoded] // backward | // ^file::base64[encoded] // backward |
| // ^file::base64[mode;user-file-name;encoded[;$.content-type[...] $.strict(true|false)]] | // ^file::base64[mode;user-file-name;encoded[;$.content-type[...] $.strict(true|false)]] |
| bool is_text=false; | bool is_text=false; |
| bool strict=false; | |
| VString* vcontent_type=0; | |
| const String* user_file_name=0; | const String* user_file_name=0; |
| VString* vcontent_type=0; | |
| Base64Options options; | |
| size_t param_index=0; | size_t param_index=0; |
| if(params.count() > 1) { | if(params.count() > 1) { |
| if(params.count() < 3) | if(params.count() < 3) |
| throw Exception(PARSER_RUNTIME, | throw Exception(PARSER_RUNTIME, 0, "constructor can not have less then 3 parameters (has %d parameters)", params.count()); // actually it accepts 1 parameter (backward) |
| 0, | |
| "constructor can not have less then 3 parameters (has %d parameters)", | |
| params.count()); // actually it accepts 1 parameter (backward) | |
| is_text=VFile::is_text_mode(params.as_string(0, MODE_MUST_NOT_BE_CODE)); | is_text=VFile::is_text_mode(params.as_string(0, MODE_MUST_NOT_BE_CODE)); |
| user_file_name=¶ms.as_string(1, FILE_NAME_MUST_BE_STRING); | user_file_name=¶ms.as_string(1, FILE_NAME_MUST_BE_STRING); |
| if(params.count() == 4) | if(params.count() == 4) |
| if(HashStringValue* options=params.as_hash(3)) { | options=base64_decode_options(r, params.as_hash(3), &vcontent_type); |
| int valid_options=0; | |
| if(Value* value=options->get(CONTENT_TYPE_NAME)) { | |
| vcontent_type=new VString(value->as_string()); | |
| valid_options++; | |
| } | |
| if(Value* vstrict=options->get(BASE64_STRICT_OPTION_NAME)) { | |
| strict=r.process_to_value(*vstrict).as_bool(); | |
| valid_options++; | |
| } | |
| if(valid_options!=options->count()) | |
| throw Exception(PARSER_RUNTIME, 0, CALLED_WITH_INVALID_OPTION); | |
| } | |
| param_index=2; | param_index=2; |
| } | } |
| Line 1084 static void _base64(Request& r, MethodPa | Line 1096 static void _base64(Request& r, MethodPa |
| const char* encoded=params.as_string(param_index, PARAMETER_MUST_BE_STRING).cstr(); | const char* encoded=params.as_string(param_index, PARAMETER_MUST_BE_STRING).cstr(); |
| char* decoded=0; | char* decoded=0; |
| size_t length=0; | size_t length=pa_base64_decode(encoded, strlen(encoded), decoded, options); |
| pa_base64_decode(encoded, strlen(encoded), decoded, length, strict); | |
| self.set(true/*tainted*/, is_text, decoded, length, user_file_name, vcontent_type, &r); | self.set(true/*tainted*/, is_text, decoded, length, user_file_name, vcontent_type, &r); |
| } else { | } else { |
| // encode: ^f.base64[] | // encode: ^f.base64[options] |
| const char* encoded=pa_base64_encode(self.value_ptr(), self.value_size()); | Base64Options options = base64_encode_options(r, params.count() > 0 ? params.as_hash(0) : NULL); |
| r.write_assign_lang(*new String(encoded, String::L_TAINTED/*once ?param=base64(something) was needed**/)); | const char* encoded=pa_base64_encode(self.value_ptr(), self.value_size(), options); |
| r.write(*new String(encoded, String::L_TAINTED /*once ?param=base64(something) was needed**/ )); | |
| } | } |
| } else { | } else { |
| // encode: ^file:base64[filespec] | // encode: ^file:base64[filespec[;options]] |
| const String& file_spec=params.as_string(0, FILE_NAME_MUST_BE_STRING); | if(params.count() > 2) |
| const char* encoded=pa_base64_encode(r.absolute(file_spec)); | throw Exception(PARSER_RUNTIME, 0, "accepts maximum 2 parameter(s) (has %d parameters)", params.count()); |
| r.write_assign_lang(*new String(encoded, String::L_TAINTED/*once ?param=base64(something) was needed*/)); | |
| const String& file_spec = params.as_string(0, FILE_NAME_MUST_BE_STRING); | |
| File_read_result data = file_read_binary(r.full_disk_path(file_spec), true /*fail on problem*/); | |
| Base64Options options = base64_encode_options(r, params.count() > 1 ? params.as_hash(1) : NULL); | |
| const char* encoded = pa_base64_encode(data.str, data.length, options); | |
| r.write(*new String(encoded, String::L_TAINTED /*once ?param=base64(something) was needed*/ )); | |
| } | } |
| } | } |
| Line 1107 static void _crc32(Request& r, MethodPar | Line 1125 static void _crc32(Request& r, MethodPar |
| // ^file:crc32[file-name] | // ^file:crc32[file-name] |
| if(params.count()) { | if(params.count()) { |
| const String& file_spec=params.as_string(0, FILE_NAME_MUST_BE_STRING); | const String& file_spec=params.as_string(0, FILE_NAME_MUST_BE_STRING); |
| crc32=pa_crc32(r.absolute(file_spec)); | crc32=pa_crc32(r.full_disk_path(file_spec)); |
| } else { | } else { |
| throw Exception(PARSER_RUNTIME, 0, FILE_NAME_MUST_BE_SPECIFIED); | throw Exception(PARSER_RUNTIME, 0, FILE_NAME_MUST_BE_SPECIFIED); |
| } | } |
| Line 1116 static void _crc32(Request& r, MethodPar | Line 1134 static void _crc32(Request& r, MethodPar |
| VFile& self=GET_SELF(r, VFile); | VFile& self=GET_SELF(r, VFile); |
| crc32=pa_crc32(self.value_ptr(), self.value_size()); | crc32=pa_crc32(self.value_ptr(), self.value_size()); |
| } | } |
| r.write_no_lang(*new VInt(crc32)); | r.write(*new VInt(crc32)); |
| } | } |
| Line 1163 static void _md5(Request& r, MethodParam | Line 1181 static void _md5(Request& r, MethodParam |
| // ^file:md5[file-name] | // ^file:md5[file-name] |
| if(params.count()) { | if(params.count()) { |
| const String& file_spec=params.as_string(0, FILE_NAME_MUST_BE_STRING); | const String& file_spec=params.as_string(0, FILE_NAME_MUST_BE_STRING); |
| md5=pa_md5(r.absolute(file_spec)); | md5=pa_md5(r.full_disk_path(file_spec)); |
| } else { | } else { |
| throw Exception(PARSER_RUNTIME, 0, FILE_NAME_MUST_BE_SPECIFIED); | throw Exception(PARSER_RUNTIME, 0, FILE_NAME_MUST_BE_SPECIFIED); |
| } | } |
| Line 1173 static void _md5(Request& r, MethodParam | Line 1191 static void _md5(Request& r, MethodParam |
| md5=pa_md5(self.value_ptr(), self.value_size()); | md5=pa_md5(self.value_ptr(), self.value_size()); |
| } | } |
| r.write_no_lang(*new String(md5)); | r.write(*new String(md5)); |
| } | } |
| // constructor | // constructor |
| Line 1263 MFile::MFile(): Methoded("file") { | Line 1281 MFile::MFile(): Methoded("file") { |
| add_native_method("md5", Method::CT_ANY, _md5, 0, 1); | add_native_method("md5", Method::CT_ANY, _md5, 0, 1); |
| // ^file:copy[from-file-name;to-file-name] | // ^file:copy[from-file-name;to-file-name] |
| add_native_method("copy", Method::CT_STATIC, _copy, 2, 2); | // ^file:copy[from-file-name;to-file-name;$.append(false)] |
| add_native_method("copy", Method::CT_STATIC, _copy, 2, 3); | |
| } | } |