1068 lines
27 KiB
C
1068 lines
27 KiB
C
#if defined(ENABLE_WWW)
|
|
|
|
#include <microhttpd.h>
|
|
#include <string.h>
|
|
#include <stdlib.h>
|
|
#include <sys/stat.h>
|
|
#include <fcntl.h>
|
|
#include <b64/cdecode.h>
|
|
#include <sys/socket.h>
|
|
#include <arpa/inet.h>
|
|
#include <libgen.h>
|
|
#if defined(__FreeBSD__) || defined(__DragonFly__) || defined(__OpenBSD__)
|
|
#include <netinet/in.h>
|
|
#endif
|
|
#include "bbs.h"
|
|
|
|
#define GET 1
|
|
#define POST 2
|
|
|
|
#define POSTBUFFERSIZE 65536
|
|
|
|
extern struct bbs_config conf;
|
|
extern char *ipaddress;
|
|
|
|
struct mime_type {
|
|
char *ext;
|
|
char *mime;
|
|
};
|
|
|
|
static struct mime_type **mime_types;
|
|
static int mime_types_count;
|
|
|
|
struct connection_info_s {
|
|
int connection_type;
|
|
struct user_record *user;
|
|
char *url;
|
|
struct ptr_vector keys;
|
|
struct ptr_vector values;
|
|
int count;
|
|
struct MHD_PostProcessor *pp;
|
|
};
|
|
|
|
void *www_logger(void *cls, const char *uri, struct MHD_Connection *con) {
|
|
struct sockaddr *so = (struct sockaddr *)MHD_get_connection_info(con, MHD_CONNECTION_INFO_CLIENT_ADDRESS)->client_addr;
|
|
char *ipaddr;
|
|
if (so->sa_family == AF_INET) {
|
|
ipaddr = (char *)malloz(INET_ADDRSTRLEN + 1);
|
|
inet_ntop(AF_INET, &((struct sockaddr_in *)so)->sin_addr, ipaddr, INET_ADDRSTRLEN);
|
|
} else if (so->sa_family == AF_INET6) {
|
|
ipaddr = (char *)malloz(INET6_ADDRSTRLEN + 1);
|
|
inet_ntop(AF_INET6, &((struct sockaddr_in6 *)so)->sin6_addr, ipaddr, INET6_ADDRSTRLEN);
|
|
}
|
|
dolog_www(ipaddr, "%s", uri);
|
|
free(ipaddr);
|
|
|
|
return NULL;
|
|
}
|
|
|
|
void www_request_completed(void *cls, struct MHD_Connection *connection, void **con_cls, enum MHD_RequestTerminationCode toe) {
|
|
struct connection_info_s *con_info = *con_cls;
|
|
int i;
|
|
if (con_info == NULL) {
|
|
return;
|
|
}
|
|
|
|
if (con_info->connection_type == POST) {
|
|
|
|
if (con_info->count > 0) {
|
|
ptr_vector_apply(&con_info->values, free);
|
|
ptr_vector_apply(&con_info->keys, free);
|
|
destroy_ptr_vector(&con_info->values);
|
|
destroy_ptr_vector(&con_info->keys);
|
|
}
|
|
|
|
if (con_info->pp != NULL) {
|
|
MHD_destroy_post_processor(con_info->pp);
|
|
}
|
|
}
|
|
if (con_info->user != NULL) {
|
|
free(con_info->user->loginname);
|
|
free(con_info->user->password);
|
|
free(con_info->user->firstname);
|
|
free(con_info->user->lastname);
|
|
free(con_info->user->email);
|
|
free(con_info->user->location);
|
|
free(con_info->user->sec_info);
|
|
free(con_info->user->signature);
|
|
free(con_info->user);
|
|
}
|
|
|
|
free(con_info->url);
|
|
free(con_info);
|
|
}
|
|
|
|
static int iterate_post(void *coninfo_cls, enum MHD_ValueKind kind,
|
|
const char *key, const char *filename,
|
|
const char *content_type, const char *transfer_encoding,
|
|
const char *data, uint64_t off, size_t size) {
|
|
struct connection_info_s *con_info = coninfo_cls;
|
|
|
|
if (size == 0)
|
|
return MHD_NO;
|
|
if (con_info == NULL)
|
|
return MHD_NO;
|
|
if (con_info->connection_type != POST)
|
|
return MHD_NO;
|
|
for (int i = 0; i < con_info->count; i++) {
|
|
if (strcmp(ptr_vector_get(&con_info->keys, i), key) == 0) {
|
|
char *value = ptr_vector_get(&con_info->values, i);
|
|
size_t newsize = strlen(value) + size + 1;
|
|
char *newvalue = realloc(value, newsize);
|
|
strlcat(newvalue, data, newsize);
|
|
ptr_vector_put(&con_info->values, newvalue, i);
|
|
return MHD_YES;
|
|
}
|
|
}
|
|
|
|
ptr_vector_append(&con_info->keys, strdup(key));
|
|
ptr_vector_append(&con_info->values, strdup(data));
|
|
con_info->count++;
|
|
return MHD_YES;
|
|
}
|
|
|
|
void www_init() {
|
|
FILE *fptr;
|
|
char buffer[PATH_MAX];
|
|
struct ptr_vector vec = EMPTY_PTR_VECTOR;
|
|
|
|
snprintf(buffer, sizeof buffer, "%s/mime.types", conf.www_path);
|
|
fptr = fopen(buffer, "r");
|
|
if (!fptr) {
|
|
return;
|
|
}
|
|
fgets(buffer, sizeof buffer, fptr);
|
|
while (!feof(fptr)) {
|
|
chomp(buffer);
|
|
|
|
for (char *p = buffer; *p != '\0'; ++p) {
|
|
if (*p == ' ') {
|
|
*p = '\0';
|
|
struct mime_type *atype = (struct mime_type *)malloz(sizeof(struct mime_type));
|
|
atype->mime = strdup(buffer);
|
|
atype->ext = strdup(p + 1);
|
|
ptr_vector_append(&vec, atype);
|
|
break;
|
|
}
|
|
}
|
|
|
|
fgets(buffer, sizeof buffer, fptr);
|
|
}
|
|
fclose(fptr);
|
|
|
|
mime_types_count = ptr_vector_len(&vec);
|
|
mime_types = (struct mime_type **)consume_ptr_vector(&vec);
|
|
}
|
|
|
|
char *www_get_mime_type(const char *extension) {
|
|
static char default_mime_type[] = "application/octet-stream";
|
|
|
|
if (extension != NULL)
|
|
for (int i = 0; i < mime_types_count; i++)
|
|
if (strcasecmp(extension, mime_types[i]->ext) == 0)
|
|
return mime_types[i]->mime;
|
|
return default_mime_type;
|
|
}
|
|
|
|
int www_401(char *header, char *footer, struct MHD_Connection *connection) {
|
|
char buffer[PATH_MAX];
|
|
char *page, *page_tmp;
|
|
char *whole_page;
|
|
struct MHD_Response *response;
|
|
int ret;
|
|
FILE *fptr;
|
|
|
|
snprintf(buffer, PATH_MAX, "%s/401.tpl", conf.www_path);
|
|
|
|
page_tmp = file2str(buffer);
|
|
|
|
if (page_tmp == NULL) {
|
|
page_tmp = strdup("Missing Content");
|
|
if (page_tmp == NULL) {
|
|
return -1;
|
|
}
|
|
}
|
|
|
|
page = str_replace(page_tmp, "@@WWW_URL@@", conf.www_url);
|
|
free(page_tmp);
|
|
|
|
whole_page = str3dup(header, page, footer);
|
|
|
|
response = MHD_create_response_from_buffer(strlen(whole_page), (void *)whole_page, MHD_RESPMEM_MUST_FREE);
|
|
|
|
MHD_add_response_header(response, "WWW-Authenticate", "Basic realm=\"BBS Area\"");
|
|
|
|
ret = MHD_queue_response(connection, 401, response);
|
|
MHD_destroy_response(response);
|
|
free(page);
|
|
|
|
return 0;
|
|
}
|
|
|
|
int www_404(char *header, char *footer, struct MHD_Connection *connection) {
|
|
char buffer[PATH_MAX];
|
|
char *page, *page_tmp;
|
|
struct stat s;
|
|
char *whole_page;
|
|
struct MHD_Response *response;
|
|
int ret;
|
|
FILE *fptr;
|
|
|
|
snprintf(buffer, PATH_MAX, "%s/404.tpl", conf.www_path);
|
|
|
|
page_tmp = file2str(buffer);
|
|
|
|
if (page_tmp == NULL) {
|
|
page_tmp = (char *)strdup("Missing Content");
|
|
if (page_tmp == NULL) {
|
|
return -1;
|
|
}
|
|
}
|
|
|
|
page = str_replace(page_tmp, "@@WWW_URL@@", conf.www_url);
|
|
free(page_tmp);
|
|
|
|
whole_page = str3dup(header, page, footer);
|
|
|
|
response = MHD_create_response_from_buffer(strlen(whole_page), (void *)whole_page, MHD_RESPMEM_MUST_FREE);
|
|
|
|
ret = MHD_queue_response(connection, MHD_HTTP_NOT_FOUND, response);
|
|
MHD_destroy_response(response);
|
|
free(page);
|
|
|
|
return 0;
|
|
}
|
|
|
|
int www_403(char *header, char *footer, struct MHD_Connection *connection) {
|
|
char buffer[PATH_MAX];
|
|
char *page, *page_tmp;
|
|
struct stat s;
|
|
char *whole_page;
|
|
struct MHD_Response *response;
|
|
int ret;
|
|
FILE *fptr;
|
|
char *endptr;
|
|
|
|
snprintf(buffer, PATH_MAX, "%s/403.tpl", conf.www_path);
|
|
|
|
page_tmp = file2str(buffer);
|
|
|
|
if (page_tmp == NULL) {
|
|
page_tmp = strdup("Missing Content");
|
|
if (page_tmp == NULL) {
|
|
return -1;
|
|
}
|
|
}
|
|
|
|
page = str_replace(page_tmp, "@@WWW_URL@@", conf.www_url);
|
|
free(page_tmp);
|
|
|
|
whole_page = str3dup(header, page, footer);
|
|
|
|
response = MHD_create_response_from_buffer(strlen(whole_page), (void *)whole_page, MHD_RESPMEM_MUST_FREE);
|
|
|
|
ret = MHD_queue_response(connection, MHD_HTTP_NOT_FOUND, response);
|
|
MHD_destroy_response(response);
|
|
free(page);
|
|
|
|
return 0;
|
|
}
|
|
|
|
struct user_record *www_auth_ok(struct MHD_Connection *connection, const char *url) {
|
|
const char *ptr = MHD_lookup_connection_value(connection, MHD_HEADER_KIND, "Authorization");
|
|
char *user_password;
|
|
base64_decodestate state;
|
|
char decoded_pass[34];
|
|
int len;
|
|
char *username;
|
|
char *password;
|
|
int i;
|
|
struct user_record *u;
|
|
|
|
if (ptr == NULL) {
|
|
return NULL;
|
|
}
|
|
|
|
user_password = strdup(ptr);
|
|
|
|
if (strncasecmp(user_password, "basic ", 6) == 0) {
|
|
if (strlen(&user_password[6]) <= 48) {
|
|
base64_init_decodestate(&state);
|
|
len = base64_decode_block(&user_password[6], strlen(&user_password[6]), decoded_pass, &state);
|
|
decoded_pass[len] = '\0';
|
|
|
|
username = decoded_pass;
|
|
for (i = 0; i < strlen(decoded_pass); i++) {
|
|
if (decoded_pass[i] == ':') {
|
|
decoded_pass[i] = '\0';
|
|
password = &decoded_pass[i + 1];
|
|
break;
|
|
}
|
|
}
|
|
u = check_user_pass(username, password);
|
|
free(user_password);
|
|
|
|
return u;
|
|
}
|
|
}
|
|
free(user_password);
|
|
return NULL;
|
|
}
|
|
|
|
int www_handler(void *cls, struct MHD_Connection *connection, const char *url, const char *method, const char *version, const char *upload_data, size_t *upload_data_size, void **ptr) {
|
|
struct MHD_Response *response;
|
|
|
|
int ret;
|
|
char *page, *page_tmp;
|
|
char buffer[PATH_MAX];
|
|
struct stat s;
|
|
char *header, *header_tmp;
|
|
char *footer, *footer_tmp;
|
|
char *whole_page;
|
|
FILE *fptr;
|
|
char *mime;
|
|
int i;
|
|
int fno;
|
|
const char *url_ = url;
|
|
char *subj, *to, *body;
|
|
struct connection_info_s *con_inf;
|
|
int conference, area, msg;
|
|
char *url_copy;
|
|
char *aptr;
|
|
const char *val;
|
|
int skip;
|
|
char *replyid;
|
|
char *filename;
|
|
int email;
|
|
char *endptr;
|
|
int file_dir;
|
|
int file_sub;
|
|
char *filen;
|
|
// char *static_buffer;
|
|
|
|
page = NULL;
|
|
|
|
if (strcmp(method, "GET") == 0) {
|
|
if (*ptr == NULL) {
|
|
con_inf = (struct connection_info_s *)malloz(sizeof(struct connection_info_s));
|
|
if (!con_inf) {
|
|
return MHD_NO;
|
|
}
|
|
con_inf->connection_type = GET;
|
|
con_inf->user = NULL;
|
|
con_inf->count = 0;
|
|
con_inf->url = strdup(url);
|
|
con_inf->pp = NULL;
|
|
init_ptr_vector(&con_inf->values);
|
|
init_ptr_vector(&con_inf->keys);
|
|
*ptr = con_inf;
|
|
return MHD_YES;
|
|
}
|
|
} else if (strcmp(method, "POST") == 0) {
|
|
if (*ptr == NULL) {
|
|
con_inf = (struct connection_info_s *)malloz(sizeof(struct connection_info_s));
|
|
if (!con_inf) {
|
|
return MHD_NO;
|
|
}
|
|
con_inf->connection_type = POST;
|
|
con_inf->user = NULL;
|
|
con_inf->count = 0;
|
|
con_inf->url = strdup(url);
|
|
con_inf->pp = NULL;
|
|
init_ptr_vector(&con_inf->values);
|
|
init_ptr_vector(&con_inf->keys);
|
|
*ptr = con_inf;
|
|
return MHD_YES;
|
|
}
|
|
} else {
|
|
return MHD_NO;
|
|
}
|
|
|
|
con_inf = *ptr;
|
|
|
|
snprintf(buffer, PATH_MAX, "%s/header.tpl", conf.www_path);
|
|
|
|
header_tmp = file2str(buffer);
|
|
|
|
if (header_tmp == NULL) {
|
|
header_tmp = str5dup("<HTML>\n<HEAD>\n<TITLE>", conf.bbs_name, "</TITLE>\n</HEAD>\n<BODY>\n<H1>", conf.bbs_name, "</H1><HR />");
|
|
if (header_tmp == NULL) {
|
|
return MHD_NO;
|
|
}
|
|
}
|
|
|
|
header = str_replace(header_tmp, "@@WWW_URL@@", conf.www_url);
|
|
free(header_tmp);
|
|
|
|
snprintf(buffer, PATH_MAX, "%s/footer.tpl", conf.www_path);
|
|
|
|
footer_tmp = file2str(buffer);
|
|
|
|
if (footer_tmp == NULL) {
|
|
footer_tmp = strdup("<HR />Powered by Magicka BBS</BODY></HTML>");
|
|
if (footer_tmp == NULL) {
|
|
free(header);
|
|
return MHD_NO;
|
|
}
|
|
}
|
|
|
|
footer = str_replace(footer_tmp, "@@WWW_URL@@", conf.www_url);
|
|
free(footer_tmp);
|
|
|
|
if (strcmp(method, "GET") == 0) {
|
|
if (strcasecmp(url, "/") == 0) {
|
|
|
|
snprintf(buffer, PATH_MAX, "%s/index.tpl", conf.www_path);
|
|
|
|
page_tmp = file2str(buffer);
|
|
|
|
if (page_tmp == NULL) {
|
|
page_tmp = strdup("Missing Content");
|
|
if (page_tmp == NULL) {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
}
|
|
|
|
page = str_replace(page_tmp, "@@WWW_URL@@", conf.www_url);
|
|
free(page_tmp);
|
|
|
|
whole_page = str3dup(header, page, footer);
|
|
} else if (strcasecmp(url, "/last10/") == 0 || strcasecmp(url, "/last10") == 0) {
|
|
page = www_last10();
|
|
if (page == NULL) {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
whole_page = str3dup(header, page, footer);
|
|
} else if (strcasecmp(url, "/blog") == 0 || strcasecmp(url, "/blog/") == 0) {
|
|
page = www_blog();
|
|
if (page == NULL) {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
whole_page = str3dup(header, page, footer);
|
|
} else if (strcasecmp(url, "/email/") == 0 || strcasecmp(url, "/email") == 0) {
|
|
con_inf->user = www_auth_ok(connection, url_);
|
|
|
|
if (con_inf->user == NULL) {
|
|
www_401(header, footer, connection);
|
|
free(header);
|
|
free(footer);
|
|
return MHD_YES;
|
|
}
|
|
page = www_email_summary(con_inf->user);
|
|
if (page == NULL) {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
whole_page = str3dup(header, page, footer);
|
|
} else if (strcasecmp(url, "/email/new") == 0) {
|
|
con_inf->user = www_auth_ok(connection, url_);
|
|
|
|
if (con_inf->user == NULL) {
|
|
www_401(header, footer, connection);
|
|
free(header);
|
|
free(footer);
|
|
return MHD_YES;
|
|
}
|
|
page = www_new_email();
|
|
if (page == NULL) {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
whole_page = str3dup(header, page, footer);
|
|
} else if (strncasecmp(url, "/email/delete/", 14) == 0) {
|
|
con_inf->user = www_auth_ok(connection, url_);
|
|
|
|
if (con_inf->user == NULL) {
|
|
www_401(header, footer, connection);
|
|
free(header);
|
|
free(footer);
|
|
return MHD_YES;
|
|
}
|
|
email = strtol(&url[14], &endptr, 10);
|
|
if (email == -1 || !www_email_delete(con_inf->user, email)) {
|
|
page = strdup("<h1>Error Deleting Email.</h1>");
|
|
if (page == NULL) {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
} else {
|
|
page = strdup("<h1>Email Deleted!</h1>");
|
|
if (page == NULL) {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
}
|
|
if (page == NULL) {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
whole_page = str3dup(header, page, footer);
|
|
} else if (strncasecmp(url, "/email/", 7) == 0) {
|
|
con_inf->user = www_auth_ok(connection, url_);
|
|
|
|
if (con_inf->user == NULL) {
|
|
www_401(header, footer, connection);
|
|
free(header);
|
|
free(footer);
|
|
return MHD_YES;
|
|
}
|
|
email = strtol(&url[7], &endptr, 10);
|
|
if (email == -1) {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
page = www_email_display(con_inf->user, email);
|
|
if (page == NULL) {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
whole_page = str3dup(header, page, footer);
|
|
} else if (strcasecmp(url, "/msgs/") == 0 || strcasecmp(url, "/msgs") == 0) {
|
|
con_inf->user = www_auth_ok(connection, url_);
|
|
|
|
if (con_inf->user == NULL) {
|
|
www_401(header, footer, connection);
|
|
free(header);
|
|
free(footer);
|
|
return MHD_YES;
|
|
}
|
|
page = www_msgs_arealist(con_inf->user);
|
|
if (page == NULL) {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
whole_page = str3dup(header, page, footer);
|
|
} else if (strncasecmp(url, "/msgs/flag/", 11) == 0) {
|
|
con_inf->user = www_auth_ok(connection, url_);
|
|
|
|
if (con_inf->user == NULL) {
|
|
www_401(header, footer, connection);
|
|
free(header);
|
|
free(footer);
|
|
return MHD_YES;
|
|
}
|
|
conference = -1;
|
|
area = -1;
|
|
msg = -1;
|
|
url_copy = strdup(&url[11]);
|
|
|
|
aptr = strtok(url_copy, "/");
|
|
if (aptr != NULL) {
|
|
conference = strtol(aptr, &endptr, 10);
|
|
if (endptr == aptr) {
|
|
conference = -1;
|
|
}
|
|
aptr = strtok(NULL, "/");
|
|
if (aptr != NULL) {
|
|
area = strtol(aptr, &endptr, 10);
|
|
if (endptr == aptr) {
|
|
area = -1;
|
|
}
|
|
aptr = strtok(NULL, "/");
|
|
if (aptr != NULL) {
|
|
msg = strtol(aptr, &endptr, 10);
|
|
if (endptr == aptr) {
|
|
msg = -1;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
free(url_copy);
|
|
|
|
if (conference != -1 && area != -1 && msg != -1) {
|
|
msgbase_flag_unflag(con_inf->user, conference, area, msg);
|
|
response = MHD_create_response_from_buffer(0, (void *)"", MHD_RESPMEM_PERSISTENT);
|
|
snprintf(buffer, PATH_MAX, "%smsgs/%d/%d/%d", conf.www_url, conference, area, msg);
|
|
|
|
MHD_add_response_header(response, "Location", buffer);
|
|
MHD_queue_response(connection, MHD_HTTP_FOUND, response);
|
|
MHD_destroy_response(response);
|
|
free(header);
|
|
free(footer);
|
|
return MHD_YES;
|
|
}
|
|
www_404(header, footer, connection);
|
|
free(header);
|
|
free(footer);
|
|
return MHD_YES;
|
|
} else if (strncasecmp(url, "/msgs/new/", 10) == 0) {
|
|
con_inf->user = www_auth_ok(connection, url_);
|
|
|
|
if (con_inf->user == NULL) {
|
|
www_401(header, footer, connection);
|
|
free(header);
|
|
free(footer);
|
|
return MHD_YES;
|
|
}
|
|
conference = -1;
|
|
area = -1;
|
|
url_copy = strdup(&url[10]);
|
|
|
|
aptr = strtok(url_copy, "/");
|
|
if (aptr != NULL) {
|
|
conference = strtol(aptr, &endptr, 10);
|
|
if (endptr == aptr) {
|
|
conference = -1;
|
|
}
|
|
aptr = strtok(NULL, "/");
|
|
if (aptr != NULL) {
|
|
area = strtol(aptr, &endptr, 10);
|
|
if (endptr == aptr) {
|
|
area = -1;
|
|
}
|
|
}
|
|
}
|
|
free(url_copy);
|
|
|
|
if (area != -1 && conference != -1) {
|
|
page = www_new_msg(con_inf->user, conference, area);
|
|
} else {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
whole_page = str3dup(header, page, footer);
|
|
} else if (strncasecmp(url, "/msgs/", 6) == 0) {
|
|
con_inf->user = www_auth_ok(connection, url_);
|
|
|
|
if (con_inf->user == NULL) {
|
|
www_401(header, footer, connection);
|
|
free(header);
|
|
free(footer);
|
|
return MHD_YES;
|
|
}
|
|
conference = -1;
|
|
area = -1;
|
|
msg = -1;
|
|
url_copy = strdup(&url[6]);
|
|
|
|
aptr = strtok(url_copy, "/");
|
|
if (aptr != NULL) {
|
|
conference = strtol(aptr, &endptr, 10);
|
|
if (endptr == aptr) {
|
|
conference = -1;
|
|
}
|
|
aptr = strtok(NULL, "/");
|
|
if (aptr != NULL) {
|
|
area = strtol(aptr, &endptr, 10);
|
|
if (endptr == aptr) {
|
|
area = -1;
|
|
}
|
|
aptr = strtok(NULL, "/");
|
|
if (aptr != NULL) {
|
|
msg = strtol(aptr, &endptr, 10);
|
|
if (endptr == aptr) {
|
|
msg = -1;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
free(url_copy);
|
|
|
|
val = MHD_lookup_connection_value(connection, MHD_GET_ARGUMENT_KIND, "skip");
|
|
|
|
if (val != NULL) {
|
|
skip = atoi(val);
|
|
} else {
|
|
skip = 0;
|
|
}
|
|
|
|
if (conference != -1 && area != -1 && msg == -1) {
|
|
page = www_msgs_messagelist(con_inf->user, conference, area, skip);
|
|
} else if (conference != -1 && area != -1 && msg != -1) {
|
|
page = www_msgs_messageview(con_inf->user, conference, area, msg);
|
|
}
|
|
|
|
if (page == NULL) {
|
|
if (www_403(header, footer, connection) != 0) {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
free(header);
|
|
free(footer);
|
|
return MHD_YES;
|
|
}
|
|
whole_page = str3dup(header, page, footer);
|
|
} else if (strncasecmp(url, "/static/", 8) == 0) {
|
|
// sanatize path
|
|
if (strstr(url, "/..") != NULL) {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
|
|
mime = NULL;
|
|
// get mimetype
|
|
for (i = strlen(url); i > 0; --i) {
|
|
if (url[i] == '.') {
|
|
mime = www_get_mime_type(&url[i + 1]);
|
|
break;
|
|
}
|
|
if (url[i] == '/') {
|
|
mime = www_get_mime_type(NULL);
|
|
break;
|
|
}
|
|
}
|
|
|
|
if (mime = NULL) {
|
|
mime = www_get_mime_type(NULL);
|
|
}
|
|
|
|
// load file
|
|
|
|
snprintf(buffer, sizeof buffer, "%s%s", conf.www_path, url);
|
|
if (stat(buffer, &s) == 0 && S_ISREG(s.st_mode)) {
|
|
fno = open(buffer, O_RDONLY);
|
|
if (fno != -1) {
|
|
//static_buffer = (char *)malloz(s.st_size + 1);
|
|
//read(fno, static_buffer, s.st_size);
|
|
response = MHD_create_response_from_fd(s.st_size, fno);
|
|
//response = MHD_create_response_from_buffer (s.st_size, (void*) static_buffer, MHD_RESPMEM_MUST_FREE);
|
|
MHD_add_response_header(response, MHD_HTTP_HEADER_CONTENT_TYPE, mime);
|
|
ret = MHD_queue_response(connection, MHD_HTTP_OK, response);
|
|
MHD_destroy_response(response);
|
|
free(header);
|
|
free(footer);
|
|
return ret;
|
|
} else {
|
|
if (www_403(header, footer, connection) != 0) {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
free(header);
|
|
free(footer);
|
|
return MHD_YES;
|
|
}
|
|
} else {
|
|
if (www_404(header, footer, connection) != 0) {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
free(header);
|
|
free(footer);
|
|
return MHD_YES;
|
|
}
|
|
} else if (strcasecmp(url, "/files/areas/") == 0 || strcasecmp(url, "/files/areas") == 0) {
|
|
page = www_files_areas();
|
|
whole_page = str3dup(header, page, footer);
|
|
} else if (strncasecmp(url, "/files/areas/", 13) == 0) {
|
|
file_dir = -1;
|
|
file_sub = -1;
|
|
filen = NULL;
|
|
url_copy = strdup(&url[13]);
|
|
|
|
aptr = strtok(url_copy, "/");
|
|
if (aptr != NULL) {
|
|
file_dir = strtol(aptr, &endptr, 10);
|
|
if (endptr == aptr) {
|
|
file_dir = -1;
|
|
}
|
|
aptr = strtok(NULL, "/");
|
|
if (aptr != NULL) {
|
|
file_sub = strtol(aptr, &endptr, 10);
|
|
if (endptr == aptr) {
|
|
file_sub = -1;
|
|
}
|
|
aptr = strtok(NULL, "/");
|
|
if (aptr != NULL) {
|
|
filen = strdup(aptr);
|
|
}
|
|
}
|
|
}
|
|
free(url_copy);
|
|
|
|
if (file_dir != -1 && file_sub != -1 && filen == NULL) {
|
|
if (file_dir >= 0 && file_dir < ptr_vector_len(&conf.file_directories)) {
|
|
struct file_directory *dir = ptr_vector_get(&conf.file_directories, file_dir);
|
|
assert(dir != NULL);
|
|
if (dir->display_on_web && file_sub >= 0 && file_sub < ptr_vector_len(&dir->file_subs)) {
|
|
page = www_files_display_listing(file_dir, file_sub);
|
|
}
|
|
}
|
|
} else if (file_dir != -1 && file_sub != -1 && filen != NULL) {
|
|
if (file_dir >= 0 && file_dir < ptr_vector_len(&conf.file_directories)) {
|
|
struct file_directory *dir = ptr_vector_get(&conf.file_directories, file_dir);
|
|
if (dir->display_on_web && file_sub >= 0 && file_sub < ptr_vector_len(&dir->file_subs)) {
|
|
// send file
|
|
filename = www_files_get_from_area(file_dir, file_sub, filen);
|
|
free(filen);
|
|
if (filename != NULL) {
|
|
mime = NULL;
|
|
// get mimetype
|
|
for (i = strlen(filename); i > 0; --i) {
|
|
if (filename[i] == '.') {
|
|
mime = www_get_mime_type(&filename[i + 1]);
|
|
break;
|
|
}
|
|
if (filename[i] == '/') {
|
|
mime = www_get_mime_type(NULL);
|
|
break;
|
|
}
|
|
}
|
|
|
|
if (mime = NULL) {
|
|
mime = www_get_mime_type(NULL);
|
|
}
|
|
if (stat(filename, &s) == 0 && S_ISREG(s.st_mode)) {
|
|
fno = open(filename, O_RDONLY);
|
|
if (fno != -1) {
|
|
|
|
response = MHD_create_response_from_fd(s.st_size, fno);
|
|
MHD_add_response_header(response, MHD_HTTP_HEADER_CONTENT_TYPE, mime);
|
|
snprintf(buffer, sizeof buffer, "%ld", s.st_size);
|
|
MHD_add_response_header(response, MHD_HTTP_HEADER_CONTENT_LENGTH, buffer);
|
|
|
|
snprintf(buffer, PATH_MAX, "attachment; filename=\"%s\"", basename(filename));
|
|
MHD_add_response_header(response, MHD_HTTP_HEADER_CONTENT_DISPOSITION, buffer);
|
|
ret = MHD_queue_response(connection, MHD_HTTP_OK, response);
|
|
MHD_destroy_response(response);
|
|
free(header);
|
|
free(footer);
|
|
free(filename);
|
|
return ret;
|
|
}
|
|
}
|
|
free(filename);
|
|
}
|
|
if (www_404(header, footer, connection) != 0) {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
free(header);
|
|
free(footer);
|
|
return MHD_YES;
|
|
} else {
|
|
free(filen);
|
|
}
|
|
} else {
|
|
free(filen);
|
|
}
|
|
}
|
|
if (page == NULL) {
|
|
if (www_403(header, footer, connection) != 0) {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
free(header);
|
|
free(footer);
|
|
return MHD_YES;
|
|
}
|
|
whole_page = str3dup(header, page, footer);
|
|
} else if (strncasecmp(url, "/files/", 7) == 0) {
|
|
filename = www_decode_hash(&url[7]);
|
|
if (filename != NULL) {
|
|
mime = NULL;
|
|
// get mimetype
|
|
for (i = strlen(filename); i > 0; --i) {
|
|
if (filename[i] == '.') {
|
|
mime = www_get_mime_type(&filename[i + 1]);
|
|
break;
|
|
}
|
|
if (filename[i] == '/') {
|
|
mime = www_get_mime_type(NULL);
|
|
break;
|
|
}
|
|
}
|
|
|
|
if (mime = NULL) {
|
|
mime = www_get_mime_type(NULL);
|
|
}
|
|
|
|
if (stat(filename, &s) == 0 && S_ISREG(s.st_mode)) {
|
|
fno = open(filename, O_RDONLY);
|
|
if (fno != -1) {
|
|
|
|
response = MHD_create_response_from_fd(s.st_size, fno);
|
|
MHD_add_response_header(response, MHD_HTTP_HEADER_CONTENT_TYPE, mime);
|
|
snprintf(buffer, sizeof buffer, "%ld", s.st_size);
|
|
MHD_add_response_header(response, MHD_HTTP_HEADER_CONTENT_LENGTH, buffer);
|
|
|
|
snprintf(buffer, PATH_MAX, "attachment; filename=\"%s\"", basename(filename));
|
|
MHD_add_response_header(response, MHD_HTTP_HEADER_CONTENT_DISPOSITION, buffer);
|
|
ret = MHD_queue_response(connection, MHD_HTTP_OK, response);
|
|
MHD_destroy_response(response);
|
|
free(header);
|
|
free(footer);
|
|
free(filename);
|
|
return ret;
|
|
}
|
|
}
|
|
free(filename);
|
|
}
|
|
if (www_404(header, footer, connection) != 0) {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
free(header);
|
|
free(footer);
|
|
return MHD_YES;
|
|
} else {
|
|
if (www_404(header, footer, connection) != 0) {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
free(header);
|
|
free(footer);
|
|
return MHD_YES;
|
|
}
|
|
} else if (strcmp(method, "POST") == 0) {
|
|
if (strcasecmp(url, "/email/") == 0 || strcasecmp(url, "/email") == 0) {
|
|
con_inf->user = www_auth_ok(connection, url_);
|
|
|
|
if (con_inf->user == NULL) {
|
|
www_401(header, footer, connection);
|
|
free(header);
|
|
free(footer);
|
|
return MHD_YES;
|
|
}
|
|
if (con_inf->pp == NULL) {
|
|
con_inf->pp = MHD_create_post_processor(connection, POSTBUFFERSIZE, iterate_post, (void *)con_inf);
|
|
}
|
|
if (*upload_data_size != 0) {
|
|
|
|
MHD_post_process(con_inf->pp, upload_data, *upload_data_size);
|
|
*upload_data_size = 0;
|
|
|
|
return MHD_YES;
|
|
}
|
|
subj = NULL;
|
|
to = NULL;
|
|
body = NULL;
|
|
for (i = 0; i < con_inf->count; i++) {
|
|
const char *key = ptr_vector_get(&con_inf->keys, i);
|
|
char *value = ptr_vector_get(&con_inf->values, i);
|
|
if (strcmp(key, "recipient") == 0) {
|
|
to = value;
|
|
} else if (strcmp(key, "subject") == 0) {
|
|
subj = value;
|
|
} else if (strcmp(key, "body") == 0) {
|
|
body = value;
|
|
}
|
|
}
|
|
if (!www_send_email(con_inf->user, to, subj, body)) {
|
|
page = strdup("<h1>Error Sending Email (Check User Exists?)</h1>");
|
|
if (page == NULL) {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
} else {
|
|
page = strdup("<h1>Email Sent!</h1>");
|
|
if (page == NULL) {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
}
|
|
whole_page = str3dup(header, page, footer);
|
|
} else if (strcasecmp(url, "/msgs/") == 0 || strcasecmp(url, "/msgs") == 0) {
|
|
con_inf->user = www_auth_ok(connection, url_);
|
|
|
|
if (con_inf->user == NULL) {
|
|
www_401(header, footer, connection);
|
|
free(header);
|
|
free(footer);
|
|
return MHD_YES;
|
|
}
|
|
if (con_inf->pp == NULL) {
|
|
con_inf->pp = MHD_create_post_processor(connection, POSTBUFFERSIZE, iterate_post, (void *)con_inf);
|
|
}
|
|
|
|
if (*upload_data_size != 0) {
|
|
MHD_post_process(con_inf->pp, upload_data, *upload_data_size);
|
|
*upload_data_size = 0;
|
|
|
|
return MHD_YES;
|
|
}
|
|
subj = NULL;
|
|
to = NULL;
|
|
body = NULL;
|
|
replyid = NULL;
|
|
conference = -1;
|
|
area = -1;
|
|
|
|
for (i = 0; i < con_inf->count; i++) {
|
|
const char *key = ptr_vector_get(&con_inf->keys, i);
|
|
char *value = ptr_vector_get(&con_inf->values, i);
|
|
if (strcmp(key, "recipient") == 0) {
|
|
to = value;
|
|
} else if (strcmp(key, "subject") == 0) {
|
|
subj = value;
|
|
} else if (strcmp(key, "body") == 0) {
|
|
body = value;
|
|
} else if (strcmp(key, "conference") == 0) {
|
|
conference = strtol(value, &endptr, 10);
|
|
if (endptr == value) {
|
|
conference = -1;
|
|
}
|
|
} else if (strcmp(key, "area") == 0) {
|
|
area = strtol(value, &endptr, 10);
|
|
if (endptr == value) {
|
|
area = -1;
|
|
}
|
|
} else if (strcmp(key, "replyid") == 0) {
|
|
replyid = value;
|
|
}
|
|
}
|
|
|
|
if (!www_send_msg(con_inf->user, to, subj, conference, area, replyid, body)) {
|
|
page = strdup("<h1>Error Sending Message</h1>");
|
|
if (page == NULL) {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
} else {
|
|
page = strdup("<h1>Message Sent!</h1>");
|
|
if (page == NULL) {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
}
|
|
whole_page = str3dup(header, page, footer);
|
|
} else {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
} else {
|
|
free(header);
|
|
free(footer);
|
|
return MHD_NO;
|
|
}
|
|
response = MHD_create_response_from_buffer(strlen(whole_page), (void *)whole_page, MHD_RESPMEM_MUST_FREE);
|
|
|
|
MHD_add_response_header(response, MHD_HTTP_HEADER_CONTENT_TYPE, "text/html");
|
|
|
|
ret = MHD_queue_response(connection, MHD_HTTP_OK, response);
|
|
MHD_destroy_response(response);
|
|
free(page);
|
|
free(header);
|
|
free(footer);
|
|
|
|
return ret;
|
|
}
|
|
#endif
|