|
|
| version 1.34.2.7, 2003/02/26 11:29:55 | version 1.54, 2026/10/16 15:16:21 |
|---|---|
| Line 1 | Line 1 |
| /** @file | /** @file |
| Parser: @b form parser class. | Parser: @b form parser class. |
| Copyright (c) 2001-2003 ArtLebedev Group (http://www.artlebedev.com) | Copyright (c) 2001-2026 Art. Lebedev Studio (https://www.artlebedev.com) |
| Author: Alexandr Petrosian <paf@design.ru> (http://paf.design.ru) | Authors: Konstantin Morshnev <moko@design.ru>, Alexandr Petrosian <paf@design.ru> |
| */ | */ |
| static const char* IDENT_FORM_C="$Date$"; | |
| #include "classes.h" | #include "classes.h" |
| #include "pa_vmethod_frame.h" | #include "pa_vmethod_frame.h" |
| #include "pa_request.h" | #include "pa_request.h" |
| #include "pa_vform.h" | #include "pa_vform.h" |
| /// $LIMITS.max_post_size default 10M | volatile const char * IDENT_FORM_C="$Id$"; |
| const size_t MAX_POST_SIZE_DEFAULT=10*0x400*0x400; | |
| // class | // class |
| class MForm : public Methoded { | class MForm : public Methoded { |
| public: | |
| MForm(Pool& pool); | |
| public: // Methoded | public: // Methoded |
| bool used_directly() { return false; } | bool used_directly() { return false; } |
| Line 34 public: | Line 29 public: |
| // global variable | // global variable |
| DECLARE_CLASS_VAR(form, 0/*fictive*/, new MForm); | DECLARE_CLASS_VAR(form, new MForm); |
| // defines for statics | |
| #define LIMITS_NAME "LIMITS" | |
| #define MAX_POST_SIZE_NAME "post_max_size" | |
| // statics | |
| StringPtr max_post_size_name(new String(MAX_POST_SIZE_NAME)); | |
| StringPtr limits_name(new String(LIMITS_NAME)); | |
| // methods | // methods |
| // constructor & configurator | // constructor & configurator |
| void MForm::configure_admin(Request& r) { | void MForm::configure_admin(Request& r) { |
| Pool& pool=r.pool(); | |
| ValuePtr limits=r.main_class->get_element(limits_name, *r.main_class, false); | if(r.request_info.can_have_body()){ |
| if(r.request_info.method && StrEqNc(r.request_info.method, "post", true)) { | if(r.request_info.content_length>pa_post_max_size) |
| // $limits.max_post_size default 10M | throw Exception(PARSER_RUNTIME, 0, "posted content_length(%s) > $LIMITS.post_max_size(%s)", pa_uitoa(r.request_info.content_length), pa_uitoa(pa_post_max_size)); |
| ValuePtr element=limits?limits->get_element(max_post_size_name, *limits, false) | |
| :ValuePtr(0); | |
| size_t value=element?(size_t)element->as_double():0; | |
| size_t max_post_size=value?value:MAX_POST_SIZE_DEFAULT; | |
| if(r.request_info.content_length>max_post_size) | |
| throw Exception("parser.runtime", | |
| Exception::undefined_source, | |
| "posted content_length(%u) > max_post_size(%u)", | |
| r.request_info.content_length, max_post_size); | |
| if(r.request_info.content_length<0) | |
| throw Exception(Exception::undefined_type, | |
| Exception::undefined_source, | |
| "posted content_length(%u) < 0", | |
| r.request_info.content_length); | |
| // read POST data | // read POST data |
| if(r.request_info.content_length) { | if(r.request_info.content_length) { |
| char *post_data=new(pool) char[r.request_info.content_length]; | char *post_data=new(PointerFreeGC) char[r.request_info.content_length+1/*terminating zero*/]; |
| r.request_info.post_size=SAPI::read_post(r.sapi_info, | size_t post_size=SAPI::read_post(r.sapi_info, post_data, r.request_info.content_length); |
| post_data, r.request_info.content_length); | post_data[post_size]=0; // terminating zero |
| r.request_info.post_data=post_data; | r.request_info.post_data=post_data; |
| r.request_info.post_size=post_size; | |
| } else { | |
| r.request_info.post_data=0; | |
| r.request_info.post_size=0; | |
| } | } |
| if(r.request_info.post_size!=r.request_info.content_length) | if(r.request_info.post_size!=r.request_info.content_length) |
| throw Exception(Exception::undefined_type, | throw Exception(0, 0, "post_size(%s) != content_length(%s)", pa_uitoa(r.request_info.post_size), pa_uitoa(r.request_info.content_length)); |
| Exception::undefined_source, | |
| "post_size(%u) != content_length(%u)", | |
| r.request_info.post_size, r.request_info.content_length); | |
| } | } |
| } | } |