path sanitizing for card parameter

[confetti] / index.cgi

diff --git a/index.cgi b/index.cgi
index 12f59b299db03c715539a229c965f0e63e73cc59..43abf5ddcc288383965904aeb496eb5cd94e3a15 100755 (executable)
--- a/index.cgi
+++ b/index.cgi
@@ -10,15 +10,20 @@ esac; done
 [ -z "${_DATA%/}" ] && _DATA=. || _DATA="${_DATA%/}"
 
 . "$_EXEC/cgilite/cgilite.sh"
+. "$_EXEC/cgilite/session.sh"
 
 _PATH="$(PATH "/${PATH_INFO}")"
 ACTION="$(GET a)"
 
+message="$(COOKIE message)"
+[ "$message" ] && SET_COOKIE 0 message=''
+
 yield_page() {
   local class="$1" style="$2"
   printf 'Content-Type: text/html; charset=utf-8\r\n\r\n'
   { printf '
        [html [head
+          [title Confetti]
          [meta name="viewport" content="width=device-width"]
          [link rel="stylesheet" type="text/css" href="/style.css"]
     '
@@ -29,13 +34,14 @@ yield_page() {
        ] [body class="%s"
     ' "$class"
     cat
+    [ "$message" ] && printf '[p #message\n%s\n]' $(l10n "$message")
     printf '] ]'
   } \
   | "${_EXEC}/cgilite/html-sh.sed"
 }
 
-if   [   -d "${_EXEC}/${_PATH}" -a -x "${_EXEC}/${_PATH}/main.cgi" ]; then
-  . "${_EXEC}/${_PATH}/main.cgi"
+if   [   -d "${_EXEC}/${_PATH}" -a -x "${_EXEC}/${_PATH}/index.cgi" ]; then
+  . "${_EXEC}/${_PATH}/index.cgi"
 elif [ ! -d "${_EXEC}/${_PATH}" -a -x "${_EXEC}/${_PATH}" ]; then
   . "${_EXEC}/${_PATH}"
 elif [ ! -x "${_EXEC}/${_PATH}" -a -r "${_EXEC}/${_PATH}" ]; then