/*
cgi.c - Some simple routines for CGI programming
- Copyright (c) 1996-9,2007 Martin Schulze <joey@infodrom.org>
+ Copyright (c) 1996-9,2007,8 Martin Schulze <joey@infodrom.org>
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
- along with this program; if not, write to the Free Software
- Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111, USA.
+ along with this program; if not, write to the Free Software Foundation
+ Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
*/
#define _GNU_SOURCE 1
#include <cgi.h>
#include "aux.h"
+#ifndef HAVE_STRNDUP
+char *strndup(const char *s, size_t n);
+#endif
+
char *cgiHeaderString = NULL;
char *cgiType = NULL;
extern s_cookie **cgiReadCookies();
-int cgiSetHeader (char *name, char *value)
+int cgiSetHeader (const char *name, const char *value)
{
- char *cp, *vp, *pivot;
+ const char *cp, *vp;
+ char *pivot;
int len;
if (!name || !strlen (name) || !value || !strlen (value))
for (cp=name;*cp && *cp!=' ' && *cp!='\r' && *cp!='\n' && *cp!=':';cp++);
for (vp=value;*vp && *vp!='\r' && *vp!='\n';vp++);
+ if (cp-name == 0 || vp-value == 0)
+ return 0;
+
if (cgiHeaderString) {
- len = (strlen (cgiHeaderString) + cp-name + vp-value + 5) * sizeof (char);
+ len = (strlen (cgiHeaderString) + cp-name + vp-value + 4) * sizeof (char);
if ((pivot = (char *)realloc (cgiHeaderString,len)) == NULL)
return 0;
cgiHeaderString = pivot;
return 0;
pivot = cgiHeaderString;
}
+ memset(pivot+1, 0, (cp-name + vp-value + 4));
+
strncpy (pivot, name, cp-name);
strncat (pivot, ": ", 2);
strncat (pivot, value, vp-value);
return 1;
}
-int cgiSetType (char *type)
+int cgiSetType (const char *type)
{
int len;
- char *cp;
+ const char *cp;
if (!type || !strlen (type))
return 0;
return text;
}
+/* cgiReadFile()
+ *
+ * Read and save a file fro a multipart request
+ */
+#include <errno.h>
+char *cgiReadFile (FILE *stream, char *boundary)
+{
+ char *crlfboundary, *buf;
+ size_t boundarylen;
+ int c;
+ unsigned int pivot;
+ char *cp;
+ char template[]= "/tmp/cgilibXXXXXX";
+ FILE *tmpfile;
+ int fd;
+
+ boundarylen = strlen(boundary)+3;
+ if ((crlfboundary = (char *)malloc (boundarylen)) == NULL)
+ return NULL;
+ sprintf (crlfboundary, "\r\n%s", boundary);
+
+ if ((buf = (char *)malloc (boundarylen)) == NULL) {
+ free (crlfboundary);
+ return NULL;
+ }
+ memset (buf, 0, boundarylen);
+ pivot = 0;
+
+ if ((fd = mkstemp (template)) == -1) {
+ free (crlfboundary);
+ free (buf);
+ return NULL;
+ }
+
+ if ((tmpfile = fdopen (fd, "w")) == NULL) {
+ free (crlfboundary);
+ free (buf);
+ unlink (template);
+ return NULL;
+ }
+
+ while (!feof (stream)) {
+ c = fgetc (stream);
+
+ if (c == 0) {
+ if (strlen (buf)) {
+ for (cp=buf; *cp; cp++)
+ putc (*cp, tmpfile);
+ memset (buf, 0, boundarylen);
+ pivot = 0;
+ }
+ putc (c, tmpfile);
+ continue;
+ }
+
+ if (strlen (buf)) {
+ if (crlfboundary[pivot+1] == c) {
+ buf[++pivot] = c;
+
+ if (strlen (buf) == strlen (crlfboundary))
+ break;
+ else
+ continue;
+ } else {
+ for (cp=buf; *cp; cp++)
+ putc (*cp, tmpfile);
+ memset (buf, 0, boundarylen);
+ pivot = 0;
+ }
+ }
+
+ if (crlfboundary[0] == c) {
+ buf[0] = c;
+ } else {
+ fputc (c, tmpfile);
+ }
+ }
+
+ if (!feof (stream))
+ fgets (buf, boundarylen, stream);
+
+ fclose (tmpfile);
+
+ free (crlfboundary);
+ free (buf);
+
+ return strdup (template);
+}
+
/* cgiReadMultipart()
*
* Decode multipart/form-data
char *line;
char *cp, *xp;
char *name = NULL, *type = NULL;
+ char *fname = NULL;
+ char *tmpfile;
int header = 1;
s_var **result = NULL;
s_var **tmp;
int numresults = 0, current = 0;
+ s_file **files = NULL;
+ s_file **tmpf;
+ s_file *file;
int index = 0;
size_t len;
s_cgi *res;
if ((xp = strchr (cp, '\"')) == NULL)
continue;
name = strndup (cp, xp-cp);
+ cgiDecodeString (name);
cgiDebugOutput (2, "Found field name %s", name);
+
+ if ((cp = strstr (line, "filename=\"")) == NULL)
+ continue;
+ cp += 10;
+ if ((xp = strchr (cp, '\"')) == NULL)
+ continue;
+ fname = strndup (cp, xp-cp);
+ cgiDecodeString (fname);
+ cgiDebugOutput (2, "Found filename %s", fname);
}
} else if (!strncasecmp (line, "Content-Type: ", 14)) {
if (!type) {
cgiDebugOutput (2, "Found mime type %s", type);
}
} else if (header) {
- if (!strlen(line))
+ if (!strlen(line)) {
header = 0;
+
+ if (fname) {
+ header = 1;
+ tmpfile = cgiReadFile (stdin, boundary);
+
+ if (!tmpfile) {
+ free (name);
+ free (fname);
+ if (type)
+ free (type);
+ name = fname = type = NULL;
+ }
+
+ cgiDebugOutput (2, "Wrote %s (%s) to file: %s", name, fname, tmpfile);
+
+ if (!strlen (fname)) {
+ cgiDebugOutput (3, "Found empty filename, removing");
+ unlink (tmpfile);
+ free (tmpfile);
+ free (name);
+ free (fname);
+ if (type)
+ free (type);
+ name = fname = type = NULL;
+ } else {
+ if ((file = (s_file *)malloc (sizeof (s_file))) == NULL) {
+ cgiDebugOutput (3, "malloc failed, ignoring %s=%s", name, fname);
+ unlink (tmpfile);
+ free (tmpfile);
+ free (name);
+ free (fname);
+ if (type)
+ free (type);
+ name = fname = type = NULL;
+ continue;
+ }
+
+ file->name = name;
+ file->type = type;
+ file->tmpfile = tmpfile;
+ if ((cp = rindex (fname, '/')) == NULL)
+ file->filename = fname;
+ else {
+ file->filename = strdup (++cp);
+ free (fname);
+ }
+ name = type = fname = NULL;
+
+ if (!files) {
+ if ((files = (s_file **)malloc(2*sizeof (s_file *))) == NULL) {
+ cgiDebugOutput (3, "malloc failed, ignoring %s=%s", name, fname);
+ unlink (tmpfile);
+ free (tmpfile);
+ free (name);
+ name = NULL;
+ if (type) {
+ free (type);
+ type = NULL;
+ }
+ free (file->filename);
+ free (file);
+ continue;
+ }
+ memset (files, 0, 2*sizeof (s_file *));
+ index = 0;
+ } else {
+ for (index=0; files[index]; index++);
+ if ((tmpf = (s_file **)realloc(files, (index+2)*sizeof (s_file *))) == NULL) {
+ cgiDebugOutput (3, "realloc failed, ignoring %s=%s", name, fname);
+ unlink (tmpfile);
+ free (tmpfile);
+ free (name);
+ if (type)
+ free (type);
+ free (file->filename);
+ free (file);
+ name = type = fname = NULL;
+ continue;
+ }
+ files = tmpf;
+ memset (files + index, 0, 2*sizeof (s_file *));
+ }
+ files[index] = file;
+ }
+ }
+ }
} else {
- cgiDebugOutput (2, "Found data: %s", line);
if (name) {
/* try to find out if there's already such a variable */
if (index == current) {
if (!result) {
len = MULTIPART_DELTA * sizeof (s_var *);
- if ((result = (s_var **)malloc (len)) == NULL)
+ if ((result = (s_var **)malloc (len)) == NULL) {
+ free (name);
+ if (type)
+ free (type);
return NULL;
+ }
numresults = MULTIPART_DELTA;
memset (result, 0, len);
current = 0;
free (result[index]);
free (result);
free (name);
+ if (type)
+ free (type);
return NULL;
}
result = tmp;
free (result[index]);
free (result);
free (name);
+ if (type)
+ free (type);
return NULL;
}
current++;
cgiDebugOutput (3, "Set #%d to %s=%s", index, name, line);
result[index]->name = name; name = NULL;
result[index]->value = strdup (line);
+ cgiDecodeString (result[index]->value);
+ if (type) {
+ free (type);
+ type = NULL;
+ }
} else {
cgiDebugOutput (3, "Set #%d to %s=%s", index, name, line);
free (name);
- if ((name = (char *)realloc (result[index]->value, strlen(result[index]->value)+strlen(line)+2)) != NULL) {
- strcat(name, "\n");
- strcat(name, line);
- result[index]->value = name;
- name = NULL;
+ name = NULL;
+ if ((cp = (char *)realloc (result[index]->value, strlen(result[index]->value)+strlen(line)+2)) != NULL) {
+ strcat(cp, "\n");
+ strcat(cp, line);
+ result[index]->value = cp;
+ if (type) {
+ free (type);
+ type = NULL;
+ }
}
}
} else {
if (index > 0) {
- if ((name = (char *)malloc (strlen(result[index]->value)+strlen(line)+3)) == NULL) {
+ xp = strdup (line);
+ cgiDecodeString (xp);
+
+ if ((name = (char *)malloc (strlen(result[index]->value)+strlen(xp)+3)) == NULL) {
for (index=0; result[index]; index++)
free (result[index]);
free (result);
+ free (xp);
return NULL;
}
- sprintf (name, "%s\r\n%s", result[index]->value, line);
+ sprintf (name, "%s\r\n%s", result[index]->value, xp);
free (result[index]->value);
result[index]->value = name;
name = NULL;
+ free (xp);
}
}
}
-
}
if ((res = (s_cgi *)malloc (sizeof (s_cgi))) == NULL)
- return NULL;
+ return NULL;
res->vars = result;
res->cookies = NULL;
- res->files = NULL;
+ res->files = files;
return res;
}
s_cgi *res;
cp = getenv("CONTENT_TYPE");
- cgiDebugOutput (2, "Content-Type: %s", cp);
+ if (cp)
+ cgiDebugOutput (2, "Content-Type: %s", cp);
if (cp && strstr(cp, "multipart/form-data") && strstr(cp, "boundary=")) {
cp = strstr(cp, "boundary=") + strlen ("boundary=") - 2;
*cp = *(cp+1) = '-';
return cgiReadMultipart (cp);
}
+ if ((res = (s_cgi *)malloc (sizeof (s_cgi))) == NULL)
+ return NULL;
+
cp = getenv("REQUEST_METHOD");
- cgiDebugOutput (2, "REQUEST_METHOD: %s", cp);
+ if (cp)
+ cgiDebugOutput (2, "REQUEST_METHOD: %s", cp);
ip = getenv("CONTENT_LENGTH");
+ if (ip)
+ cgiDebugOutput (2, "CONTENT_LENGTH: %s", ip);
if (cp && !strcmp(cp, "POST")) {
if (ip) {
}
if (i<numargs) {
+ char *name;
+ char *value;
+
+ if ((name = (char *)malloc((esp-cp+1) * sizeof (char))) == NULL)
+ return NULL;
+ strncpy(name, cp, esp-cp);
+ name[esp-cp] = '\0';
+ cgiDecodeString (name);
+
+ cp = ++esp;
+
+ if ((value = (char *)malloc((ip-esp+1) * sizeof (char))) == NULL) {
+ free (name);
+ return NULL;
+ }
+ strncpy(value, cp, ip-esp);
+ value[ip-esp] = '\0';
+ cgiDecodeString (value);
/* try to find out if there's already such a variable */
- for (k=0; k<i && (strncmp (result[k]->name,cp, esp-cp) || !(strlen (result[k]->name) == esp-cp)); k++);
+ for (k=0; k<i && strcmp (result[k]->name, name); k++);
if (k == i) { /* No such variable yet */
if ((result[i] = (s_var *)malloc(sizeof(s_var))) == NULL)
return NULL;
- if ((result[i]->name = (char *)malloc((esp-cp+1) * sizeof(char))) == NULL)
- return NULL;
- memset (result[i]->name, 0, esp-cp+1);
- strncpy(result[i]->name, cp, esp-cp);
- cp = ++esp;
- if ((result[i]->value = (char *)malloc((ip-esp+1) * sizeof(char))) == NULL)
- return NULL;
- memset (result[i]->value, 0, ip-esp+1);
- strncpy(result[i]->value, cp, ip-esp);
- result[i]->value = cgiDecodeString(result[i]->value);
+ result[i]->name = name;
+ result[i]->value = value;
cgiDebugOutput (1, "%s: %s", result[i]->name, result[i]->value);
i++;
} else { /* There is already such a name, suppose a mutiple field */
- cp = ++esp;
- len = (strlen(result[k]->value)+(ip-esp)+2) * sizeof (char);
- if ((sptr = (char *)malloc(len)) == NULL)
+ free (name);
+ len = (strlen(result[k]->value)+strlen(value)+2) * sizeof (char);
+ if ((sptr = (char *)malloc(len)) == NULL) {
+ free (value);
return NULL;
+ }
memset (sptr, 0, len);
- sprintf (sptr, "%s\n", result[k]->value);
- strncat(sptr, cp, ip-esp);
- free(result[k]->value);
- result[k]->value = cgiDecodeString (sptr);
+ sprintf (sptr, "%s\n%s", result[k]->value, value);
+ free (result[k]->value);
+ free (value);
+ result[k]->value = sptr;
+ cgiDebugOutput (1, "%s: %s", result[i]->name, result[i]->value);
}
}
cp = ++ip;
}
- if ((res = (s_cgi *)malloc (sizeof (s_cgi))) == NULL)
- return NULL;
-
res->vars = result;
res->cookies = NULL;
res->files = NULL;
s_cgi *res;
res = cgiReadVariables ();
- res->cookies = cgiReadCookies ();
+ if (res)
+ res->cookies = cgiReadCookies ();
+ else
+ {
+ /* In some cases, we might have no other CGI results.
+ But we still have cookies! */
+ s_cookie **cookies;
+ cookies = cgiReadCookies();
+ if (cookies) {
+ /* We need to create a s_cgi structure. */
+ if ((res = (s_cgi *)malloc (sizeof (s_cgi))) == NULL)
+ return NULL;
+ res->vars = NULL;
+ res->cookies = cookies;
+ res->files = NULL;
+
+ } else {
+ return NULL;
+ }
+ }
if (!res->vars && !res->cookies && !res->files) {
free (res);
return res;
}
+/* cgiGetFiles
+ *
+ * Returns a list of names of all files.
+ */
+char **cgiGetFiles (s_cgi *parms)
+{
+ int i;
+ char **res = NULL;
+ int len;
+
+ if (!parms || !parms->files)
+ return NULL;
+
+ for (i=0;parms->files[i]; i++);
+ len = sizeof (char *) * ++i;
+ if ((res = (char **)malloc (len)) == NULL)
+ return NULL;
+ memset (res, 0, len);
+ for (i=0;parms->files[i]; i++) {
+ len = strlen (parms->files[i]->name) +1;
+ if ((res[i] = (char *)malloc (len)) == NULL)
+ return NULL;
+ memset (res[i], 0, len);
+ strcpy (res[i], parms->files[i]->name);
+ }
+ return res;
+}
+
+/* cgiGetFile
+ *
+ * Return data structure for CGI file variable
+ */
+s_file *cgiGetFile (s_cgi *parms, const char *name)
+{
+ int i;
+
+ if (!parms || !parms->files)
+ return NULL;
+
+ for (i=0;parms->files[i]; i++)
+ if (!strcmp(name,parms->files[i]->name)) {
+ cgiDebugOutput (1, "%s found as %s", name, parms->files[i]->filename);
+ return parms->files[i];
+ }
+ cgiDebugOutput (1, "%s not found", name);
+ return NULL;
+}
+
void cgiRedirect (const char *url)
{
if (url && strlen(url)) {
for (i=0; list[i] != NULL; i++)
free (list[i]);
- free (list);
+ free (list);
}
void cgiFree (s_cgi *parms)
}
free (parms->cookies);
}
+ if (parms->files) {
+ for (i=0;parms->files[i]; i++) {
+ if (parms->files[i]->name)
+ free (parms->files[i]->name);
+ if (parms->files[i]->type)
+ free (parms->files[i]->type);
+ if (parms->files[i]->filename)
+ free (parms->files[i]->filename);
+ if (parms->files[i]->tmpfile) {
+ unlink (parms->files[i]->tmpfile);
+ free (parms->files[i]->tmpfile);
+ }
+ free (parms->files[i]);
+ }
+ free (parms->files);
+ }
free (parms);
if (cgiHeaderString) {
}
}
+#ifndef HAVE_STRNDUP
+char *strndup(const char *s, size_t n) {
+ char *fnval;
+
+ if ((fnval = (char *)malloc (n + 1)) == NULL)
+ return NULL;
+ strncpy(fnval, s, n);
+ fnval[n] = '\0';
+ return fnval;
+}
+#endif
+
/*
* Local variables:
* c-indent-level: 4
projects / infodrom / cgilib / blobdiff