X-Git-Url: http://git.plutz.net/?p=cgilite;a=blobdiff_plain;f=cgi.sh;h=3ad0e8b3a9f7c5301122f577bf9e0fc413b55074;hp=c70c4d26cd841e0757d51b2c6833aa41baeeea58;hb=9b62da2cc5552e018fe8c48360c770446a9a6b55;hpb=914662b3dbecfe34126991cfdb2a9049f2a9a29a diff --git a/cgi.sh b/cgi.sh index c70c4d2..3ad0e8b 100755 --- a/cgi.sh +++ b/cgi.sh @@ -1,58 +1,88 @@ #!/bin/zsh -# Copyright 2014 Paul Hänsch +# Copyright 2014,2015 Paul Hänsch # -# This file is part of Serve0. +# This file is part of shcgi. # -# Serve0 is free software: you can redistribute it and/or modify +# shcgi is free software: you can redistribute it and/or modify # it under the terms of the GNU Affero General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # -# Serve0 is distributed in the hope that it will be useful, +# shcgi is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU Affero General Public License for more details. # # You should have received a copy of the GNU Affero General Public License -# along with Serve0. If not, see . +# along with shcgi. If not, see . declare -A _GET declare -A _POST declare -A _REF +declare -A _COOKIE + +[ -z "$HTTP_REFERER" ] && HTTP_REFERER="./" cgi_get() { # parse HTTP GET string - echo "$QUERY_STRING" |tr '&' '\n' |while read query; do - key="$(echo "$query" |sed -r 's:^([a-zA-Z0-9_-]*)=(.*)$:\1:')" - val="$(echo "$query" |sed -r 's:^([a-zA-Z0-9_-]*)=(.*)$:\2:')" - _GET["$key"]="$(echo -e "$(echo "$val" |sed 's:+: :g;s:%:\\x:g')")" + debug "== CGI DATA: GET ==" + printf '%s\n' "$QUERY_STRING" |tr '&' '\n' |while read query; do + key="$(printf %s "$query" |sed -r 's:^([a-zA-Z0-9_-]+)=(.*)$:\1:')" + val="$(printf %s "$query" |sed -r 's:^([a-zA-Z0-9_-]+)=(.*)$:\2:')" + _GET[$key]="$(printf "$(printf %s "$val" |sed 's:+: :g;s:\\:\\\\:g;s:%:\\x:g')")" + debug "_GET[$key] => $val" done } cgi_post() { # parse HTTP POST string + debug "== CGI DATA: POST ==" sed -u 1q |tr '&' '\n' |while read query; do - key="$(echo "$query" |sed -r 's:^([a-zA-Z0-9_-]*)=(.*)$:\1:')" - val="$(echo "$query" |sed -r 's:^([a-zA-Z0-9_-]*)=(.*)$:\2:')" - value="$(echo -e "$(echo "$val" |sed 's:+: :g;s:%:\\x:g')")" - if [ -n "$_POST[\"$key\"]" ]; then + key="$(printf %s "$query" |sed -r 's:^([a-zA-Z0-9_-]+)=(.*)$:\1:')" + val="$(printf %s "$query" |sed -r 's:^([a-zA-Z0-9_-]+)=(.*)$:\2:')" + value="$(printf "$(printf %s "$val" |sed 's:+: :g;s:\\:\\\\:g;s:%:\\x:g;')")" + if [ -n "${_POST[$key]}" ]; then n=0 - while [ -n "$_POST[\"$key$n\"]" ]; do n=$(($n + 1)); done - _POST["$key$n"]="$value" + while [ -n "${_POST[$key$n]}" ]; do n=$(($n + 1)); done + _POST[$key$n]="$value" else - _POST["$key"]="$value" + _POST[$key]="$value" fi - #debug "_POST[$key] => $value" + debug "_POST[$key] => $value" done } cgi_refdata() { # Parse GET data from referer - echo "$HTTP_REFERER" |cut -d'?' -f2- |tr '&' '\n' |while read query; do - key="$(echo "$query" |sed -r 's:^([a-zA-Z0-9_-]*)=(.*)$:\1:')" - val="$(echo "$query" |sed -r 's:^([a-zA-Z0-9_-]*)=(.*)$:\2:')" - _REF["$key"]="$(echo -e "$(echo "$val" |sed 's:+: :g;s:%:\\x:g')")" + debug "== CGI DATA: REFERER ==" + printf '%s\n' "$HTTP_REFERER" |cut -d'?' -f2- |tr '&' '\n' |while read query; do + key="$(printf %s "$query" |sed -r 's:^([a-zA-Z0-9_-]+)=(.*)$:\1:')" + val="$(printf %s "$query" |sed -r 's:^([a-zA-Z0-9_-]+)=(.*)$:\2:')" + _REF[$key]="$(printf "$(printf %s "$val" |sed 's:+: :g;s:\\:\\\\:g;s:%:\\x:g')")" + debug "_REF[$key] => $val" + done +} + +cgi_cookie() { # Parse GET data from referer + debug "== CGI DATA: COOKIE ==" + printf '%s\n' "$HTTP_COOKIE" |tr ';' '\n' |while read query; do + key="$(printf %s "$query" |sed -r 's:^ *([a-zA-Z0-9_-]+)=(.*)$:\1:')" + val="$(printf %s "$query" |sed -r 's:^ *([a-zA-Z0-9_-]+)=(.*)$:\2:')" + _COOKIE[$key]="$(printf "$(printf %s "$val" |sed 's:+: :g;s:\\:\\\\:g;s:%:\\x:g')")" + debug "_COOKIE[$key] => $val" done } urlsave(){ - echo -E "$*" |sed 's:%:\%25:g;s:\?:\%3F:g;s:&:\%26:g;s:'\'':\%27:g;s: :\%20:g;s:!:\%21:g;s:(:\%28:g;s:):\%29:g;s:":\%22:g;' + printf %s "$*" \ + | sed 's; ;%20;g; + s;!;%21;g; + s;";%22;g; + s;%;%25;g; + s;&;%26;g; + s;(;%28;g; + s;);%29;g; + s;:;%3a;g + s;<;%3c;g; + s;>;%3e;g; + s;'\'';%27;g; + s;\?;%3f;g;' }