\n");
if (REQUEST["selector"] != "") {
for (var in CGIVAR)
printf ("%s: %s
\n", var, CGIVAR[var]);
printf ("
\n");
}
for (name in var) {
printf ("%s: %s
\n", name, var[name]);
wantp = 1
}
return (0);
}
#
# P A R T 3 - S E R V I N G R E Q U E S T S
# -------------------------------------------------
#
#
# Remove `/../' and `/./' from the given path.
#
function rewritepath(path, i, k, n, x, y) {
n = split(path, x, /\/+/);
k = 0;
for (i=1; i<=n; i++) {
if (x[i] == "") {
if (i == n)
y[k++] = "";
continue;
}
if (x[i] == ".")
continue;
else if (x[i] == "..") {
if (k >= 1)
k--;
}
else
y[k++] = x[i];
}
path = y[0];
for (i=1; i < k; i++)
path = path "/" y[i];
return (path);
}
function checkcgi(path) {
if (match(path, /\.cgi$/) > 0) {
var["PATH_INFO"] = "";
var["SCRIPT_NAME"] = "/" path;
}
else if (match(path, /\.cgi\//) > 0) {
var["PATH_INFO"] = substr(path, RSTART + RLENGTH - 1);
path = substr(path, 1, RSTART + RLENGTH - 2);
var["SCRIPT_NAME"] = "/" path;
}
if (var["SCRIPT_NAME"] != "") {
var["PATH_TRANSLATED"] = var["DOCUMENT_ROOT"] var["PATH_INFO"];
}
return (path);
}
function stat(path, sbuf, gettime, cmd, line, filename, i, n, x, y, z) {
cmd = sprintf ("/bin/ls -fld %s 2>/dev/null", path);
cmd | getline line;
close (cmd);
if ((n = split(line, x, /[ \t]+/)) == 9)
; # ok - "old style" ls
else if (n == 8 && x[6] ~ /-[0-9][0-9]-/)
; # also ok - "modern style"
else {
# other output means `does not exist'.
return (1);
}
#
# Take some data from the `ls' output.
#
sbuf["type"] = substr(x[1], 1, 1) == "d"? "dir": "file";
sbuf["perm"] = x[1];
gsub(/\/+/, "/", x[n]);
sbuf["filename"] = filename = x[n];
sbuf["size"] = x[5];
if (gettime != 0) {
#
# Try to compute the last-modification time.
#
if (n == 8) {
#
# Yes, "modern style" simplyfies things.
#
split(x[6], z, "-");
split(x[7], y, ":");
line = sprintf ("%04d %02d %02d %02d %02d %02d",
z[1], z[2], z[3],
y[1], y[2], y[3]);
}
else {
n = split("jan feb mar apr may jun jul aug sep oct nov dec", y, " ");
for (i=1; i <= n; i++)
z[y[i]] = sprintf ("%d", i);
if (x[8] !~ /:/)
line = sprintf ("%04d %02d %02d 00 00 00", x[8], z[tolower(x[6])], x[7]);
else {
split(x[8], y, ":");
line = sprintf ("%04d %02d %02d %02d %02d %02d",
strftime("%Y", systime()), z[tolower(x[6])], x[7],
y[1], y[2], y[3]);
}
}
sbuf["rawtime"] = line;
sbuf["mtime"] = mktime(line);
sbuf["lastmod"] = strftime("%a, %d %b %Y %H:%M:%S %z", sbuf["mtime"]);
}
return (0);
}
function getmimetype(filename, type, ext) {
sub(/^.*\//, "", filename);
if (match(filename, /\.[^\.]+(\.gz)?/) == 0) {
# No extension is `text/plain'
type = "text/plain";
}
else {
ext = substr(filename, RSTART);
sub(/\.gz$/, "", ext);
#
# Set MIME type for some well known extensions.
#
if (ext == ".html" || ext == ".htm")
type = "text/html";
else if (ext == ".txt" || ext == ".text")
type = "text/plain";
else if (ext == ".gif")
type = "image/gif";
else if (ext == ".jpg" || ext == ".jpeg")
type = "image/jpg";
else if (ext == ".png")
type = "image/png";
else if (ext == ".css")
type = "text/css";
else if (ext == ".js")
type = "text/javascript";
else if (ext == ".cgi")
type = "cgi";
else
type = "application/octet-stream";
}
return (type);
}
function checkfile(basedir, path, sbuf, i, n, filename, x) {
sbuf["path"] = path;
#
# Check if path refers to a dot-file and deny access.
#
if (path ~ /^\./ || path ~ /\/\./)
return (403);
#
# Check if path contains any invalid characters.
#
if (path == "")
; # Refers to the "homepage".
else if (path !~ /^[-_a-zA-Z0-9,+\.\/]+$/)
return (403);
#
# As far as we know the request is valid. Does the requested
# item exist and, if yes, what is it?
#
if (path != "" && path !~ /\/$/)
filename = sprintf ("'%s/%s'", basedir, path);
else {
#
# If the request points to a directory (trailing slash)
# we have to look for a list of files.
#
n = split("index.html index.htm", x, " ");
for (i=1; i <= n; i++)
filename = filename " " sprintf ("'%s/%s/%s'", basedir, path, x[i]);
filename = substr(filename, 2) " " sprintf("'%s/%s/.'", basedir, path);
}
if (stat(filename, sbuf, 1) != 0)
return (404); # File not found.
if (sbuf["type"] == "dir") {
#
# If the filename has a trailing dot it's a directory
# without default file and the request was done with
# a trailing slash. If not redirect.
#
if (match(sbuf["filename"], /\/\.$/) == 0) {
sbuf["location"] = "/" path "/";
return (302);
}
}
if (sbuf["type"] == "file")
sbuf["mimetype"] = getmimetype(sbuf["filename"]);
if (sbuf["mimetype"] == "cgi")
sbuf["script"] = sbuf["filename"];
return (sbuf["type"]);
}
function listdir(dir, path, i, n, cmd, line, x, filename, data) {
data = sprintf ("
%s:\n"; return (data); } function runcgi(script, sbuf, resp, status, cmd, line, v, x, data) { status = 0; # # Construct the shell command, pass parameters as environment # variables. # cmd = "/usr/bin/env"; for (v in var) cmd = cmd " " v "=" shellquote(var[v]); cmd = cmd " " script " 2>/dev/null"; while (cmd | getline line > 0) { if (line == "") break; if (match(line, /^([^:]+): (.*)$/, x) == 0) continue; if (tolower(x[1]) == "status") status = x[2] + 0; else resp[tolower(x[1])] = x[2]; } while (cmd | getline line > 0) data = data line RT; sbuf["data"] = data; if (status == 0) status = "500 Server error"; return (status); } function nextarg(par, arg) { if (argi >= ARGC) { printf ("%s: missing argument: %s\n", program, par) >>STDERR; exit (1); } arg = ARGV[argi]; ARGV[argi++] = ""; return (arg); } BEGIN { program = "www-server"; STDERR = "/dev/stderr"; argi = 1; while (argi < ARGC && substr(ARGV[argi], 1, 1) == "-") { options = nextarg("option"); if (options == "--") break; for (i = 2; i<=length(options); i++) { c = substr(options, i, 1); if (c == "d") debug = 1; else if (c == "l") logfile = nextarg("logfile"); else if (c == "t") testmode = 1; else { printf ("%s: unkown option: -%s\n", program, c) >>STDERR; exit (1); } } } basedir = (argi >= ARGC)? "/tmp/www": nextarg("base directory"); var["DOCUMENT_ROOT"] = basedir; if ((var["REMOTE_ADDR"] = ENVIRON["CONNECT_CLIENT"]) == "") var["REMOTE_ADDR"] = "-"; if ((path = readrequest()) == "") exit (1); path = rewritepath(path); path = checkcgi(path); if (testmode != 0) { printtest(); exit (0); } type = checkfile(basedir, path, sbuf); if (type+0 > 0) { if (type == 302) sendredirect(302, sbuf["location"]); else if (type == 403) senderror(type, "Access denied"); else if (type == 404) senderror(type, "Bad request"); else senderror(500, "Server error."); sbuf["size"] = 0; sbuf["mimetype"] = "text/html"; exit (0); } status = 200; resp[""] = ""; if (sbuf["type"] == "dir") { p = sbuf["filename"]; sbuf["data"] = listdir(p, "/" path); resp["content-type"] = "text/html"; resp["content-length"] = length(sbuf["data"]); sbuf["filename"] = "."; } else if (sbuf["mimetype"] == "cgi") { script = sbuf["filename"]; status = runcgi(script, sbuf, resp); resp["content-length"] = length(sbuf["data"]); sbuf["filename"] = "."; } else { resp["content-type"] = sbuf["mimetype"]; resp["content-length"] = sbuf["size"]; resp["last-modified"] = sbuf["lastmod"]; } if (status+0 != 200) { httpheader(status, "", "text/html", resp); exit (0); } httpheader(status, "OK", resp["content-type"], resp); if ((filename = sbuf["filename"]) == ".") { print sbuf["data"]; } else { while (getline buffer
\n", path); data = data sprintf ("..\n"); cmd = sprintf ("/bin/ls -l '%s'", dir); while (cmd | getline line > 0) { if (split(line, x, /[ \t]+/) < 9) continue; filename = x[9]; if (filename ~ /^\./) continue; if (substr(x[1], 1, 1) == "d") filename = filename "/"; line = sprintf ("%s", filename, filename); line = line substr(" ", length(filename)); line = line sprintf ("%10d %s %02d %s", x[5], x[6], x[7], x[8]); data = data line "\n"; } data = data "