X-Git-Url: http://git.plutz.net/?p=cgilite;a=blobdiff_plain;f=index.cgi;h=d83cb2ad944a5cf26cd2494f04a6854e9c0546c5;hp=b406bc9e827ff43b36e19bf6d7cd9a48efd01614;hb=3c2a130cdaeadf1a67eb37ab70a298fa756a3c01;hpb=2030c27378891fc2d26091303269f7b9c228611b

diff --git a/index.cgi b/index.cgi
index b406bc9..d83cb2a 100755
--- a/index.cgi
+++ b/index.cgi
@@ -1,6 +1,6 @@
 #!/bin/zsh
 
-# Copyright 2014, 2015 Paul Hänsch
+# Copyright 2014 - 2016 Paul Hänsch
 #
 # This file is part of shcgi.
 # 
@@ -29,6 +29,7 @@ _DATA="$(dirname "$call")"  #storage directory
 _EXEC="${real%/shcgi/index.cgi}"  #execution directory
 
 . "$_EXEC/shcgi/misc.sh"
+
 # put debug options in the local.opts file
 . "$_EXEC/shcgi/debug.sh"
 [ -r "$_DATA/local.opts" ] && . "$_DATA/local.opts"
@@ -37,8 +38,18 @@ _EXEC="${real%/shcgi/index.cgi}"  #execution directory
 
 [ -x "$_EXEC/globals.sh" ] && . "$_EXEC/globals.sh"
 
-if [ -n "${_GET[action]}" ]; then
-  . "$_EXEC/shcgi/action.sh"
+  PAGE=$(validate   "${PAGE:-${_GET[page]}}"   '[a-zA-Z0-9_-]+' '')
+ACTION=$(validate "${ACTION:-${_GET[action]}}" '[a-zA-Z0-9_-]+' '')
+STATIC=$(invalidate "${STATIC:-${_GET[static]}}" '(^|.*/)\.\./.*' '')
+
+if [ -n "$STATIC" -a -e "${_EXEC}/static/${STATIC}" ]; then
+  . "$_EXEC/shcgi/static.sh"
+elif [ -n "$ACTION" -a -x "${_EXEC}/actions/${ACTION}.sh" ]; then
+  . "${_EXEC}/actions/${ACTION}.sh"
+elif   [ -n "$PAGE"   -a -x "${_EXEC}/pages/${PAGE}.sh" ]; then
+  . "$_EXEC/shcgi/page.sh"
 else
+  printf 'HTTP/1.1 404 Not Found\r\n'
+  PAGE=error
   . "$_EXEC/shcgi/page.sh"
 fi