mirror of
https://github.com/samba-team/samba.git
synced 2025-01-14 19:24:43 +03:00
moved cgi.c and swat.c into a source/web/ directory. Note that you
won't see a cvs add in the web directory or these files as I added them by directly copying in the repository. This keeps the history of the files intact. (This used to be commit abe0379cf99f63116ea6f61337134ad5c228f933)
This commit is contained in:
Andrew Tridgell
parent
2e68682069
commit
cc4e595473
631
source3/cgi.c
631
source3/cgi.c
@ -1,631 +0,0 @@
|
||||
/*
|
||||
some simple CGI helper routines
|
||||
Copyright (C) Andrew Tridgell 1997-1998
|
||||
|
||||
This program is free software; you can redistribute it and/or modify
|
||||
it under the terms of the GNU General Public License as published by
|
||||
the Free Software Foundation; either version 2 of the License, or
|
||||
(at your option) any later version.
|
||||
|
||||
This program is distributed in the hope that it will be useful,
|
||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
GNU General Public License for more details.
|
||||
|
||||
You should have received a copy of the GNU General Public License
|
||||
along with this program; if not, write to the Free Software
|
||||
Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
||||
*/
|
||||
|
||||
|
||||
#include "includes.h"
|
||||
#include "smb.h"
|
||||
|
||||
#define MAX_VARIABLES 10000
|
||||
|
||||
/* set the expiry on fixed pages */
|
||||
#define EXPIRY_TIME (60*60*24*7)
|
||||
|
||||
#define CGI_LOGGING 0
|
||||
|
||||
#ifdef DEBUG_COMMENTS
|
||||
extern void print_title(char *fmt, ...);
|
||||
#endif
|
||||
|
||||
struct var {
|
||||
char *name;
|
||||
char *value;
|
||||
};
|
||||
|
||||
static struct var variables[MAX_VARIABLES];
|
||||
static int num_variables;
|
||||
static int content_length;
|
||||
static int request_post;
|
||||
static int request_get;
|
||||
static char *query_string;
|
||||
static char *baseurl;
|
||||
|
||||
static void unescape(char *buf)
|
||||
{
|
||||
char *p=buf;
|
||||
|
||||
while ((p=strchr(p,'+')))
|
||||
*p = ' ';
|
||||
|
||||
p = buf;
|
||||
|
||||
while (p && *p && (p=strchr(p,'%'))) {
|
||||
int c1 = p[1];
|
||||
int c2 = p[2];
|
||||
|
||||
if (c1 >= '0' && c1 <= '9')
|
||||
c1 = c1 - '0';
|
||||
else if (c1 >= 'A' && c1 <= 'F')
|
||||
c1 = 10 + c1 - 'A';
|
||||
else if (c1 >= 'a' && c1 <= 'f')
|
||||
c1 = 10 + c1 - 'a';
|
||||
else {p++; continue;}
|
||||
|
||||
if (c2 >= '0' && c2 <= '9')
|
||||
c2 = c2 - '0';
|
||||
else if (c2 >= 'A' && c2 <= 'F')
|
||||
c2 = 10 + c2 - 'A';
|
||||
else if (c2 >= 'a' && c2 <= 'f')
|
||||
c2 = 10 + c2 - 'a';
|
||||
else {p++; continue;}
|
||||
|
||||
*p = (c1<<4) | c2;
|
||||
|
||||
memcpy(p+1, p+3, strlen(p+3)+1);
|
||||
p++;
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
static char *grab_line(FILE *f, int *cl)
|
||||
{
|
||||
char *ret;
|
||||
int i = 0;
|
||||
int len = 1024;
|
||||
|
||||
ret = (char *)malloc(len);
|
||||
if (!ret) return NULL;
|
||||
|
||||
|
||||
while ((*cl)) {
|
||||
int c = fgetc(f);
|
||||
(*cl)--;
|
||||
|
||||
if (c == EOF) {
|
||||
(*cl) = 0;
|
||||
break;
|
||||
}
|
||||
|
||||
if (c == '\r') continue;
|
||||
|
||||
if (strchr("\n&", c)) break;
|
||||
|
||||
ret[i++] = c;
|
||||
|
||||
if (i == len-1) {
|
||||
char *ret2;
|
||||
ret2 = (char *)realloc(ret, len*2);
|
||||
if (!ret2) return ret;
|
||||
len *= 2;
|
||||
ret = ret2;
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
ret[i] = 0;
|
||||
return ret;
|
||||
}
|
||||
|
||||
/***************************************************************************
|
||||
load all the variables passed to the CGI program. May have multiple variables
|
||||
with the same name and the same or different values. Takes a file parameter
|
||||
for simulating CGI invocation eg loading saved preferences.
|
||||
***************************************************************************/
|
||||
void cgi_load_variables(FILE *f1)
|
||||
{
|
||||
FILE *f = f1;
|
||||
static char *line;
|
||||
char *p, *s, *tok;
|
||||
int len;
|
||||
|
||||
#ifdef DEBUG_COMMENTS
|
||||
char dummy[100]="";
|
||||
print_title(dummy);
|
||||
printf("<!== Start dump in cgi_load_variables() %s ==>\n",__FILE__);
|
||||
#endif
|
||||
|
||||
if (!f1) {
|
||||
f = stdin;
|
||||
if (!content_length) {
|
||||
p = getenv("CONTENT_LENGTH");
|
||||
len = p?atoi(p):0;
|
||||
} else {
|
||||
len = content_length;
|
||||
}
|
||||
} else {
|
||||
fseek(f, 0, SEEK_END);
|
||||
len = ftell(f);
|
||||
fseek(f, 0, SEEK_SET);
|
||||
}
|
||||
|
||||
|
||||
if (len > 0 &&
|
||||
(f1 || request_post ||
|
||||
((s=getenv("REQUEST_METHOD")) &&
|
||||
strcasecmp(s,"POST")==0))) {
|
||||
while (len && (line=grab_line(f, &len))) {
|
||||
p = strchr(line,'=');
|
||||
if (!p) continue;
|
||||
|
||||
*p = 0;
|
||||
|
||||
variables[num_variables].name = strdup(line);
|
||||
variables[num_variables].value = strdup(p+1);
|
||||
|
||||
free(line);
|
||||
|
||||
if (!variables[num_variables].name ||
|
||||
!variables[num_variables].value)
|
||||
continue;
|
||||
|
||||
unescape(variables[num_variables].value);
|
||||
unescape(variables[num_variables].name);
|
||||
|
||||
#ifdef DEBUG_COMMENTS
|
||||
printf("<!== POST var %s has value \"%s\" ==>\n",
|
||||
variables[num_variables].name,
|
||||
variables[num_variables].value);
|
||||
#endif
|
||||
|
||||
num_variables++;
|
||||
if (num_variables == MAX_VARIABLES) break;
|
||||
}
|
||||
}
|
||||
|
||||
if (f1) {
|
||||
#ifdef DEBUG_COMMENTS
|
||||
printf("<!== End dump in cgi_load_variables() ==>\n");
|
||||
#endif
|
||||
return;
|
||||
}
|
||||
|
||||
fclose(stdin);
|
||||
|
||||
if ((s=query_string) || (s=getenv("QUERY_STRING"))) {
|
||||
for (tok=strtok(s,"&;");tok;tok=strtok(NULL,"&;")) {
|
||||
p = strchr(tok,'=');
|
||||
if (!p) continue;
|
||||
|
||||
*p = 0;
|
||||
|
||||
variables[num_variables].name = strdup(tok);
|
||||
variables[num_variables].value = strdup(p+1);
|
||||
|
||||
if (!variables[num_variables].name ||
|
||||
!variables[num_variables].value)
|
||||
continue;
|
||||
|
||||
unescape(variables[num_variables].value);
|
||||
unescape(variables[num_variables].name);
|
||||
|
||||
#ifdef DEBUG_COMMENTS
|
||||
printf("<!== Commandline var %s has value \"%s\" ==>\n",
|
||||
variables[num_variables].name,
|
||||
variables[num_variables].value);
|
||||
#endif
|
||||
num_variables++;
|
||||
if (num_variables == MAX_VARIABLES) break;
|
||||
}
|
||||
|
||||
}
|
||||
#ifdef DEBUG_COMMENTS
|
||||
printf("<!== End dump in cgi_load_variables() ==>\n");
|
||||
#endif
|
||||
}
|
||||
|
||||
|
||||
/***************************************************************************
|
||||
find a variable passed via CGI
|
||||
Doesn't quite do what you think in the case of POST text variables, because
|
||||
if they exist they might have a value of "" or even " ", depending on the
|
||||
browser. Also doesn't allow for variables[] containing multiple variables
|
||||
with the same name and the same or different values.
|
||||
***************************************************************************/
|
||||
char *cgi_variable(char *name)
|
||||
{
|
||||
int i;
|
||||
|
||||
for (i=0;i<num_variables;i++)
|
||||
if (strcmp(variables[i].name, name) == 0)
|
||||
return variables[i].value;
|
||||
return NULL;
|
||||
}
|
||||
|
||||
/***************************************************************************
|
||||
return a particular cgi variable
|
||||
***************************************************************************/
|
||||
char *cgi_vnum(int i, char **name)
|
||||
{
|
||||
if (i < 0 || i >= num_variables) return NULL;
|
||||
*name = variables[i].name;
|
||||
return variables[i].value;
|
||||
}
|
||||
|
||||
/***************************************************************************
|
||||
return the value of a CGI boolean variable.
|
||||
***************************************************************************/
|
||||
int cgi_boolean(char *name, int def)
|
||||
{
|
||||
char *p = cgi_variable(name);
|
||||
|
||||
if (!p) return def;
|
||||
|
||||
return strcmp(p, "1") == 0;
|
||||
}
|
||||
|
||||
/***************************************************************************
|
||||
like strdup() but quotes < > and &
|
||||
***************************************************************************/
|
||||
char *quotedup(char *s)
|
||||
{
|
||||
int i, n=0;
|
||||
int len;
|
||||
char *ret;
|
||||
char *d;
|
||||
|
||||
if (!s) return strdup("");
|
||||
|
||||
len = strlen(s);
|
||||
|
||||
for (i=0;i<len;i++)
|
||||
if (s[i] == '<' || s[i] == '>' || s[i] == '&')
|
||||
n++;
|
||||
|
||||
ret = malloc(len + n*6 + 1);
|
||||
|
||||
if (!ret) return NULL;
|
||||
|
||||
d = ret;
|
||||
|
||||
for (i=0;i<len;i++) {
|
||||
switch (s[i]) {
|
||||
case '<':
|
||||
strcpy(d, "<");
|
||||
d += 4;
|
||||
break;
|
||||
|
||||
case '>':
|
||||
strcpy(d, ">");
|
||||
d += 4;
|
||||
break;
|
||||
|
||||
case '&':
|
||||
strcpy(d, "&");
|
||||
d += 5;
|
||||
break;
|
||||
|
||||
default:
|
||||
*d++ = s[i];
|
||||
}
|
||||
}
|
||||
|
||||
*d = 0;
|
||||
|
||||
return ret;
|
||||
}
|
||||
|
||||
|
||||
/***************************************************************************
|
||||
like strdup() but quotes a wide range of characters
|
||||
***************************************************************************/
|
||||
char *urlquote(char *s)
|
||||
{
|
||||
int i, n=0;
|
||||
int len;
|
||||
char *ret;
|
||||
char *d;
|
||||
char *qlist = "\"\n\r'&<> \t+;";
|
||||
|
||||
if (!s) return strdup("");
|
||||
|
||||
len = strlen(s);
|
||||
|
||||
for (i=0;i<len;i++)
|
||||
if (strchr(qlist, s[i])) n++;
|
||||
|
||||
ret = malloc(len + n*2 + 1);
|
||||
|
||||
if (!ret) return NULL;
|
||||
|
||||
d = ret;
|
||||
|
||||
for (i=0;i<len;i++) {
|
||||
if (strchr(qlist,s[i])) {
|
||||
sprintf(d, "%%%02X", (int)s[i]);
|
||||
d += 3;
|
||||
} else {
|
||||
*d++ = s[i];
|
||||
}
|
||||
}
|
||||
|
||||
*d = 0;
|
||||
|
||||
return ret;
|
||||
}
|
||||
|
||||
|
||||
/***************************************************************************
|
||||
like strdup() but quotes " characters
|
||||
***************************************************************************/
|
||||
char *quotequotes(char *s)
|
||||
{
|
||||
int i, n=0;
|
||||
int len;
|
||||
char *ret;
|
||||
char *d;
|
||||
|
||||
if (!s) return strdup("");
|
||||
|
||||
len = strlen(s);
|
||||
|
||||
for (i=0;i<len;i++)
|
||||
if (s[i] == '"')
|
||||
n++;
|
||||
|
||||
ret = malloc(len + n*6 + 1);
|
||||
|
||||
if (!ret) return NULL;
|
||||
|
||||
d = ret;
|
||||
|
||||
for (i=0;i<len;i++) {
|
||||
switch (s[i]) {
|
||||
case '"':
|
||||
strcpy(d, """);
|
||||
d += 6;
|
||||
break;
|
||||
|
||||
default:
|
||||
*d++ = s[i];
|
||||
}
|
||||
}
|
||||
|
||||
*d = 0;
|
||||
|
||||
return ret;
|
||||
}
|
||||
|
||||
|
||||
/***************************************************************************
|
||||
quote spaces in a buffer
|
||||
***************************************************************************/
|
||||
void quote_spaces(char *buf)
|
||||
{
|
||||
while (*buf) {
|
||||
if (*buf == ' ') *buf = '+';
|
||||
buf++;
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
|
||||
/***************************************************************************
|
||||
tell a browser about a fatal error in the http processing
|
||||
***************************************************************************/
|
||||
static void cgi_setup_error(char *err, char *header, char *info)
|
||||
{
|
||||
printf("HTTP/1.1 %s\r\n%sConnection: close\r\nContent-Type: text/html\r\n\r\n<HTML><HEAD><TITLE>%s</TITLE></HEAD><BODY><H1>%s</H1>%s<p></BODY></HTML>\r\n", err, header, err, err, info);
|
||||
exit(0);
|
||||
}
|
||||
|
||||
|
||||
/***************************************************************************
|
||||
decode a base64 string in-place - simple and slow algorithm
|
||||
***************************************************************************/
|
||||
static void base64_decode(char *s)
|
||||
{
|
||||
char *b64 = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
|
||||
int bit_offset, byte_offset, idx, i;
|
||||
unsigned char *d = (unsigned char *)s;
|
||||
char *p;
|
||||
|
||||
i=0;
|
||||
|
||||
while (*s && (p=strchr(b64,*s))) {
|
||||
idx = (int)(p - b64);
|
||||
byte_offset = (i*6)/8;
|
||||
bit_offset = (i*6)%8;
|
||||
d[byte_offset] &= ~((1<<(8-bit_offset))-1);
|
||||
if (bit_offset < 3) {
|
||||
d[byte_offset] |= (idx << (2-bit_offset));
|
||||
} else {
|
||||
d[byte_offset] |= (idx >> (bit_offset-2));
|
||||
d[byte_offset+1] = 0;
|
||||
d[byte_offset+1] |= (idx << (8-(bit_offset-2))) & 0xFF;
|
||||
}
|
||||
s++; i++;
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
/***************************************************************************
|
||||
handle a http authentication line
|
||||
***************************************************************************/
|
||||
static int cgi_handle_authorization(char *line)
|
||||
{
|
||||
char *p, *user, *pass;
|
||||
|
||||
if (strncasecmp(line,"Basic ", 6)) {
|
||||
cgi_setup_error("401 Bad Authorization", "",
|
||||
"Only basic authorization is understood");
|
||||
}
|
||||
line += 6;
|
||||
while (line[0] == ' ') line++;
|
||||
base64_decode(line);
|
||||
if (!(p=strchr(line,':'))) {
|
||||
cgi_setup_error("401 Bad Authorization", "",
|
||||
"username/password must be supplied");
|
||||
}
|
||||
*p = 0;
|
||||
user = line;
|
||||
pass = p+1;
|
||||
|
||||
/* currently only allow connections as root */
|
||||
if (strcmp(user,"root")) {
|
||||
cgi_setup_error("401 Bad Authorization", "",
|
||||
"incorrect username/password");
|
||||
}
|
||||
|
||||
|
||||
return password_ok(user, pass, strlen(pass), NULL);
|
||||
}
|
||||
|
||||
|
||||
/***************************************************************************
|
||||
handle a file download
|
||||
***************************************************************************/
|
||||
static void cgi_download(char *file)
|
||||
{
|
||||
struct stat st;
|
||||
char buf[1024];
|
||||
int fd, l, i;
|
||||
char *p;
|
||||
|
||||
/* sanitise the filename */
|
||||
for (i=0;file[i];i++) {
|
||||
if (!isalnum(file[i]) && !strchr("/.-_", file[i])) {
|
||||
cgi_setup_error("404 File Not Found","",
|
||||
"Illegal character in filename");
|
||||
}
|
||||
}
|
||||
|
||||
if (!file_exist(file, &st)) {
|
||||
cgi_setup_error("404 File Not Found","",
|
||||
"The requested file was not found");
|
||||
}
|
||||
fd = open(file,O_RDONLY);
|
||||
if (fd == -1) {
|
||||
cgi_setup_error("404 File Not Found","",
|
||||
"The requested file was not found");
|
||||
}
|
||||
printf("HTTP/1.1 200 OK\r\n");
|
||||
if ((p=strrchr(file,'.'))) {
|
||||
if (strcmp(p,".gif")==0) {
|
||||
printf("Content-Type: image/gif\r\n");
|
||||
} else if (strcmp(p,".jpg")==0) {
|
||||
printf("Content-Type: image/jpeg\r\n");
|
||||
} else {
|
||||
printf("Content-Type: text/html\r\n");
|
||||
}
|
||||
}
|
||||
printf("Expires: %s\r\n", http_timestring(time(NULL)+EXPIRY_TIME));
|
||||
|
||||
printf("Content-Length: %d\r\n\r\n", (int)st.st_size);
|
||||
while ((l=read(fd,buf,sizeof(buf)))>0) {
|
||||
fwrite(buf, 1, l, stdout);
|
||||
}
|
||||
close(fd);
|
||||
exit(0);
|
||||
}
|
||||
|
||||
|
||||
/***************************************************************************
|
||||
setup the cgi framework, handling the possability that this program is either
|
||||
run as a true cgi program by a web browser or is itself a mini web server
|
||||
***************************************************************************/
|
||||
void cgi_setup(char *rootdir, int auth_required)
|
||||
{
|
||||
int authenticated = 0;
|
||||
char line[1024];
|
||||
char *url=NULL;
|
||||
char *p;
|
||||
#if CGI_LOGGING
|
||||
FILE *f = fopen("/tmp/cgi.log", "a");
|
||||
|
||||
fprintf(f,"\n[Date: %s]\n", http_timestring(time(NULL)));
|
||||
#endif
|
||||
|
||||
if (chdir(rootdir)) {
|
||||
cgi_setup_error("400 Server Error", "",
|
||||
"chdir failed - the server is not configured correctly");
|
||||
}
|
||||
|
||||
if (getenv("CONTENT_LENGTH") || getenv("REQUEST_METHOD")) {
|
||||
/* assume we are running under a real web server */
|
||||
return;
|
||||
}
|
||||
|
||||
/* we are a mini-web server. We need to read the request from stdin
|
||||
and handle authentication etc */
|
||||
while (fgets(line, sizeof(line)-1, stdin)) {
|
||||
#if CGI_LOGGING
|
||||
fputs(line, f);
|
||||
#endif
|
||||
if (line[0] == '\r' || line[0] == '\n') break;
|
||||
if (strncasecmp(line,"GET ", 4)==0) {
|
||||
request_get = 1;
|
||||
url = strdup(&line[4]);
|
||||
} else if (strncasecmp(line,"POST ", 5)==0) {
|
||||
request_post = 1;
|
||||
url = strdup(&line[5]);
|
||||
} else if (strncasecmp(line,"PUT ", 4)==0) {
|
||||
cgi_setup_error("400 Bad Request", "",
|
||||
"This server does not accept PUT requests");
|
||||
} else if (strncasecmp(line,"Authorization: ", 15)==0) {
|
||||
authenticated = cgi_handle_authorization(&line[15]);
|
||||
} else if (strncasecmp(line,"Content-Length: ", 16)==0) {
|
||||
content_length = atoi(&line[16]);
|
||||
}
|
||||
/* ignore all other requests! */
|
||||
}
|
||||
#if CGI_LOGGING
|
||||
fclose(f);
|
||||
#endif
|
||||
|
||||
if (auth_required && !authenticated) {
|
||||
cgi_setup_error("401 Authorization Required",
|
||||
"WWW-Authenticate: Basic realm=\"root\"\r\n",
|
||||
"You must be authenticated to use this service");
|
||||
}
|
||||
|
||||
if (!url) {
|
||||
cgi_setup_error("400 Bad Request", "",
|
||||
"You must specify a GET or POST request");
|
||||
}
|
||||
|
||||
/* trim the URL */
|
||||
if ((p = strchr(url,' ')) || (p=strchr(url,'\t'))) {
|
||||
*p = 0;
|
||||
}
|
||||
while (*url && strchr("\r\n",url[strlen(url)-1])) {
|
||||
url[strlen(url)-1] = 0;
|
||||
}
|
||||
|
||||
/* anything following a ? in the URL is part of the query string */
|
||||
if ((p=strchr(url,'?'))) {
|
||||
query_string = p+1;
|
||||
*p = 0;
|
||||
}
|
||||
|
||||
if (strstr(url+1,"..")==0 && file_exist(url+1, NULL)) {
|
||||
cgi_download(url+1);
|
||||
}
|
||||
|
||||
printf("HTTP/1.1 200 OK\r\nConnection: close\r\n");
|
||||
printf("Date: %s\r\n", http_timestring(time(NULL)));
|
||||
baseurl = url+1;
|
||||
}
|
||||
|
||||
|
||||
/***************************************************************************
|
||||
return the current pages URL
|
||||
***************************************************************************/
|
||||
char *cgi_baseurl(void)
|
||||
{
|
||||
return baseurl;
|
||||
}
|
||||
595
source3/swat.c
595
source3/swat.c
@ -1,595 +0,0 @@
|
||||
/*
|
||||
Unix SMB/Netbios implementation.
|
||||
Version 1.9.
|
||||
html smb.conf editing - prototype only
|
||||
Copyright (C) Andrew Tridgell 1997-1998
|
||||
|
||||
This program is free software; you can redistribute it and/or modify
|
||||
it under the terms of the GNU General Public License as published by
|
||||
the Free Software Foundation; either version 2 of the License, or
|
||||
(at your option) any later version.
|
||||
|
||||
This program is distributed in the hope that it will be useful,
|
||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
GNU General Public License for more details.
|
||||
|
||||
You should have received a copy of the GNU General Public License
|
||||
along with this program; if not, write to the Free Software
|
||||
Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
||||
*/
|
||||
|
||||
#ifdef SYSLOG
|
||||
#undef SYSLOG
|
||||
#endif
|
||||
|
||||
#include "includes.h"
|
||||
#include "smb.h"
|
||||
|
||||
#define GLOBALS_SNUM -2
|
||||
#define DEFAULTS_SNUM -1
|
||||
|
||||
static pstring servicesf = CONFIGFILE;
|
||||
|
||||
|
||||
/* we need these because we link to locking*.o */
|
||||
void become_root(BOOL save_dir) {}
|
||||
void unbecome_root(BOOL restore_dir) {}
|
||||
connection_struct Connections[MAX_CONNECTIONS];
|
||||
files_struct Files[MAX_OPEN_FILES];
|
||||
struct current_user current_user;
|
||||
|
||||
|
||||
/* start the page with standard stuff */
|
||||
static void print_header(void)
|
||||
{
|
||||
printf("Expires: 0\r\n");
|
||||
printf("Content-type: text/html\r\n\r\n");
|
||||
printf("<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 3.2//EN\">\n");
|
||||
printf("<HTML>\n<HEAD>\n<TITLE>Samba Web Administration Tool</TITLE>\n</HEAD>\n<BODY>\n\n");
|
||||
}
|
||||
|
||||
|
||||
/* finish off the page */
|
||||
static void print_footer(void)
|
||||
{
|
||||
printf("\n</BODY>\n</HTML>\n");
|
||||
}
|
||||
|
||||
/* include a lump of html in a page */
|
||||
static void include_html(char *fname)
|
||||
{
|
||||
FILE *f = fopen(fname,"r");
|
||||
char buf[1024];
|
||||
int ret;
|
||||
|
||||
if (!f) {
|
||||
printf("ERROR: Can't open %s\n", fname);
|
||||
return;
|
||||
}
|
||||
|
||||
while (!feof(f)) {
|
||||
ret = fread(buf, 1, sizeof(buf), f);
|
||||
if (ret <= 0) break;
|
||||
fwrite(buf, 1, ret, stdout);
|
||||
}
|
||||
|
||||
fclose(f);
|
||||
}
|
||||
|
||||
|
||||
/* display one editable parameter in a form */
|
||||
static void show_parameter(int snum, struct parm_struct *parm)
|
||||
{
|
||||
int i;
|
||||
void *ptr = parm->ptr;
|
||||
|
||||
if (parm->class == P_LOCAL) {
|
||||
ptr = lp_local_ptr(snum, ptr);
|
||||
}
|
||||
|
||||
printf("<tr><td><A HREF=\"help/parameters.html#%s\">?</A> %s</td><td>",
|
||||
parm->label, parm->label);
|
||||
|
||||
switch (parm->type) {
|
||||
case P_CHAR:
|
||||
printf("<input type=text size=2 name=\"parm_%s\" value=\"%c\">",
|
||||
parm->label, *(char *)ptr);
|
||||
break;
|
||||
|
||||
case P_STRING:
|
||||
case P_USTRING:
|
||||
printf("<input type=text size=40 name=\"parm_%s\" value=\"%s\">",
|
||||
parm->label, *(char **)ptr);
|
||||
break;
|
||||
|
||||
case P_GSTRING:
|
||||
case P_UGSTRING:
|
||||
printf("<input type=text size=40 name=\"parm_%s\" value=\"%s\">",
|
||||
parm->label, (char *)ptr);
|
||||
break;
|
||||
|
||||
case P_BOOL:
|
||||
printf("<input type=radio name=\"parm_%s\" value=Yes %s>yes ", parm->label, (*(BOOL *)ptr)?"CHECKED":"");
|
||||
printf("<input type=radio name=\"parm_%s\" value=No %s>no", parm->label, (*(BOOL *)ptr)?"":"CHECKED");
|
||||
break;
|
||||
|
||||
case P_BOOLREV:
|
||||
printf("<input type=radio name=\"parm_%s\" value=Yes %s>yes ", parm->label, (*(BOOL *)ptr)?"":"CHECKED");
|
||||
printf("<input type=radio name=\"parm_%s\" value=No %s>no", parm->label, (*(BOOL *)ptr)?"CHECKED":"");
|
||||
break;
|
||||
|
||||
case P_INTEGER:
|
||||
printf("<input type=text size=8 name=\"parm_%s\" value=%d>", parm->label, *(int *)ptr);
|
||||
break;
|
||||
|
||||
case P_OCTAL:
|
||||
printf("<input type=text size=8 name=\"parm_%s\" value=0%o>", parm->label, *(int *)ptr);
|
||||
break;
|
||||
|
||||
case P_ENUM:
|
||||
for (i=0;parm->enum_list[i].name;i++)
|
||||
printf("<input type=radio name=\"parm_%s\" value=%s %s>%s ",
|
||||
parm->label, parm->enum_list[i].name,
|
||||
(*(int *)ptr)==parm->enum_list[i].value?"CHECKED":"",
|
||||
parm->enum_list[i].name);
|
||||
break;
|
||||
|
||||
}
|
||||
printf("</td></tr>\n");
|
||||
}
|
||||
|
||||
/* display a set of parameters for a service */
|
||||
static void show_parameters(int snum, int allparameters, int advanced, int printers)
|
||||
{
|
||||
int i = 0;
|
||||
struct parm_struct *parm;
|
||||
|
||||
printf("<table>\n");
|
||||
|
||||
while ((parm = lp_next_parameter(snum, &i, allparameters))) {
|
||||
if (parm->flags & FLAG_HIDE) continue;
|
||||
if (!advanced) {
|
||||
if (!printers && !(parm->flags & FLAG_BASIC)) continue;
|
||||
if (printers && !(parm->flags & FLAG_PRINT)) continue;
|
||||
}
|
||||
show_parameter(snum, parm);
|
||||
}
|
||||
printf("</table>\n");
|
||||
}
|
||||
|
||||
|
||||
/* save and reoad the smb.conf config file */
|
||||
static int save_reload(void)
|
||||
{
|
||||
FILE *f;
|
||||
|
||||
f = fopen(servicesf,"w");
|
||||
if (!f) {
|
||||
printf("failed to open %s for writing\n", servicesf);
|
||||
return 0;
|
||||
}
|
||||
|
||||
fprintf(f, "# Samba config file created using SWAT\n");
|
||||
|
||||
lp_dump(f);
|
||||
|
||||
fclose(f);
|
||||
|
||||
lp_killunused(NULL);
|
||||
|
||||
if (!lp_load(servicesf,False)) {
|
||||
printf("Can't reload %s\n", servicesf);
|
||||
return 0;
|
||||
}
|
||||
|
||||
return 1;
|
||||
}
|
||||
|
||||
|
||||
|
||||
/* commit a set of parameters for a service */
|
||||
static void commit_parameters(int snum)
|
||||
{
|
||||
int i = 0;
|
||||
struct parm_struct *parm;
|
||||
pstring label;
|
||||
char *v;
|
||||
|
||||
while ((parm = lp_next_parameter(snum, &i, 1))) {
|
||||
sprintf(label, "parm_%s", parm->label);
|
||||
if ((v = cgi_variable(label))) {
|
||||
lp_do_parameter(snum, parm->label, v);
|
||||
}
|
||||
}
|
||||
|
||||
save_reload();
|
||||
}
|
||||
|
||||
|
||||
/* load the smb.conf file into loadparm. */
|
||||
static void load_config(void)
|
||||
{
|
||||
if (!lp_load(servicesf,False)) {
|
||||
printf("<b>Can't load %s - using defaults</b><p>\n",
|
||||
servicesf);
|
||||
}
|
||||
}
|
||||
|
||||
/* spit out the html for a link with an image */
|
||||
static void image_link(char *name,char *hlink, char *src, int width, int height)
|
||||
{
|
||||
printf("<A HREF=\"%s\"><img width=%d height=%d src=\"%s\" alt=\"%s\"></A>\n", hlink, width, height, src, name);
|
||||
}
|
||||
|
||||
/* display the main navigation controls at the top of each page along
|
||||
with a title */
|
||||
static void show_main_buttons(void)
|
||||
{
|
||||
printf("<H2 align=center>Samba Web Administration Tool</H2>\n");
|
||||
|
||||
image_link("Home", "", "images/home.gif", 50, 50);
|
||||
image_link("Globals", "globals", "images/globals.gif", 50, 50);
|
||||
image_link("Shares", "shares", "images/shares.gif", 50, 50);
|
||||
image_link("Printers", "printers", "images/printers.gif", 50, 50);
|
||||
image_link("Status", "status", "images/status.gif", 50, 50);
|
||||
|
||||
printf("<HR>\n");
|
||||
}
|
||||
|
||||
/* display a welcome page */
|
||||
static void welcome_page(void)
|
||||
{
|
||||
include_html("help/welcome.html");
|
||||
}
|
||||
|
||||
|
||||
/* display a globals editing page */
|
||||
static void globals_page(void)
|
||||
{
|
||||
int advanced = 0;
|
||||
|
||||
printf("<H2>Global Variables</H2>\n");
|
||||
|
||||
if (cgi_variable("Advanced") && !cgi_variable("Basic"))
|
||||
advanced = 1;
|
||||
|
||||
if (cgi_variable("Commit")) {
|
||||
commit_parameters(GLOBALS_SNUM);
|
||||
}
|
||||
|
||||
printf("<FORM method=post>\n");
|
||||
|
||||
printf("<input type=submit name=\"Commit\" value=\"Commit Changes\">\n");
|
||||
if (advanced == 0) {
|
||||
printf("<input type=submit name=\"Advanced\" value=\"Advanced View\">\n");
|
||||
} else {
|
||||
printf("<input type=submit name=\"Basic\" value=\"Basic View\">\n");
|
||||
}
|
||||
printf("<p>\n");
|
||||
|
||||
show_parameters(GLOBALS_SNUM, 1, advanced, 0);
|
||||
|
||||
if (advanced) {
|
||||
printf("<input type=hidden name=\"Advanced\" value=1>\n");
|
||||
}
|
||||
|
||||
printf("</form>\n");
|
||||
}
|
||||
|
||||
/* display a shares editing page */
|
||||
static void shares_page(void)
|
||||
{
|
||||
char *share = cgi_variable("share");
|
||||
char *s;
|
||||
int snum=-1;
|
||||
int i;
|
||||
int advanced = 0;
|
||||
|
||||
if (share)
|
||||
snum = lp_servicenumber(share);
|
||||
|
||||
printf("<H2>Share Parameters</H2>\n");
|
||||
|
||||
if (cgi_variable("Advanced") && !cgi_variable("Basic"))
|
||||
advanced = 1;
|
||||
|
||||
if (cgi_variable("Commit") && snum >= 0) {
|
||||
commit_parameters(snum);
|
||||
}
|
||||
|
||||
if (cgi_variable("Delete") && snum >= 0) {
|
||||
lp_remove_service(snum);
|
||||
save_reload();
|
||||
share = NULL;
|
||||
snum = -1;
|
||||
}
|
||||
|
||||
if (cgi_variable("createshare") && (share=cgi_variable("newshare"))) {
|
||||
lp_copy_service(DEFAULTS_SNUM, share);
|
||||
save_reload();
|
||||
snum = lp_servicenumber(share);
|
||||
}
|
||||
|
||||
printf("<FORM method=post>\n");
|
||||
|
||||
printf("<table>\n");
|
||||
printf("<tr><td><input type=submit name=selectshare value=\"Choose Share\"></td>\n");
|
||||
printf("<td><select name=share>\n");
|
||||
if (snum < 0)
|
||||
printf("<option value=\" \"> \n");
|
||||
for (i=0;i<lp_numservices();i++) {
|
||||
s = lp_servicename(i);
|
||||
if (s && (*s) && strcmp(s,"IPC$") && !lp_print_ok(i)) {
|
||||
printf("<option %s value=\"%s\">%s\n",
|
||||
(share && strcmp(share,s)==0)?"SELECTED":"",
|
||||
s, s);
|
||||
}
|
||||
}
|
||||
printf("</select></td></tr><p>");
|
||||
|
||||
printf("<tr><td><input type=submit name=createshare value=\"Create Share\"></td>\n");
|
||||
printf("<td><input type=text size=30 name=newshare></td></tr>\n");
|
||||
printf("</table>");
|
||||
|
||||
|
||||
if (snum >= 0) {
|
||||
printf("<input type=submit name=\"Commit\" value=\"Commit Changes\">\n");
|
||||
printf("<input type=submit name=\"Delete\" value=\"Delete Share\">\n");
|
||||
if (advanced == 0) {
|
||||
printf("<input type=submit name=\"Advanced\" value=\"Advanced View\">\n");
|
||||
} else {
|
||||
printf("<input type=submit name=\"Basic\" value=\"Basic View\">\n");
|
||||
}
|
||||
printf("<p>\n");
|
||||
}
|
||||
|
||||
if (snum >= 0) {
|
||||
show_parameters(snum, 1, advanced, 0);
|
||||
}
|
||||
|
||||
if (advanced) {
|
||||
printf("<input type=hidden name=\"Advanced\" value=1>\n");
|
||||
}
|
||||
|
||||
printf("</FORM>\n");
|
||||
}
|
||||
|
||||
|
||||
/* display a printers editing page */
|
||||
static void printers_page(void)
|
||||
{
|
||||
char *share = cgi_variable("share");
|
||||
char *s;
|
||||
int snum=-1;
|
||||
int i;
|
||||
int advanced = 0;
|
||||
|
||||
if (share)
|
||||
snum = lp_servicenumber(share);
|
||||
|
||||
printf("<H2>Printer Parameters</H2>\n");
|
||||
|
||||
if (cgi_variable("Advanced") && !cgi_variable("Basic"))
|
||||
advanced = 1;
|
||||
|
||||
if (cgi_variable("Commit") && snum >= 0) {
|
||||
commit_parameters(snum);
|
||||
}
|
||||
|
||||
if (cgi_variable("Delete") && snum >= 0) {
|
||||
lp_remove_service(snum);
|
||||
save_reload();
|
||||
share = NULL;
|
||||
snum = -1;
|
||||
}
|
||||
|
||||
if (cgi_variable("createshare") && (share=cgi_variable("newshare"))) {
|
||||
lp_copy_service(DEFAULTS_SNUM, share);
|
||||
snum = lp_servicenumber(share);
|
||||
lp_do_parameter(snum, "print ok", "Yes");
|
||||
save_reload();
|
||||
snum = lp_servicenumber(share);
|
||||
}
|
||||
|
||||
printf("<FORM method=post>\n");
|
||||
|
||||
printf("<table>\n");
|
||||
printf("<tr><td><input type=submit name=selectshare value=\"Choose Printer\"></td>\n");
|
||||
printf("<td><select name=share>\n");
|
||||
if (snum < 0 || !lp_print_ok(snum))
|
||||
printf("<option value=\" \"> \n");
|
||||
for (i=0;i<lp_numservices();i++) {
|
||||
s = lp_servicename(i);
|
||||
if (s && (*s) && strcmp(s,"IPC$") && lp_print_ok(i)) {
|
||||
printf("<option %s value=\"%s\">%s\n",
|
||||
(share && strcmp(share,s)==0)?"SELECTED":"",
|
||||
s, s);
|
||||
}
|
||||
}
|
||||
printf("</select></td></tr><p>");
|
||||
|
||||
printf("<tr><td><input type=submit name=createshare value=\"Create Printer\"></td>\n");
|
||||
printf("<td><input type=text size=30 name=newshare></td></tr>\n");
|
||||
printf("</table>");
|
||||
|
||||
|
||||
if (snum >= 0) {
|
||||
printf("<input type=submit name=\"Commit\" value=\"Commit Changes\">\n");
|
||||
printf("<input type=submit name=\"Delete\" value=\"Delete Printer\">\n");
|
||||
if (advanced == 0) {
|
||||
printf("<input type=submit name=\"Advanced\" value=\"Advanced View\">\n");
|
||||
} else {
|
||||
printf("<input type=submit name=\"Basic\" value=\"Basic View\">\n");
|
||||
}
|
||||
printf("<p>\n");
|
||||
}
|
||||
|
||||
if (snum >= 0) {
|
||||
show_parameters(snum, 1, advanced, 1);
|
||||
}
|
||||
|
||||
if (advanced) {
|
||||
printf("<input type=hidden name=\"Advanced\" value=1>\n");
|
||||
}
|
||||
|
||||
printf("</FORM>\n");
|
||||
}
|
||||
|
||||
|
||||
static void print_share_mode(share_mode_entry *e, char *fname)
|
||||
{
|
||||
printf("<tr><td>%d</td>",e->pid);
|
||||
printf("<td>");
|
||||
switch ((e->share_mode>>4)&0xF) {
|
||||
case DENY_NONE: printf("DENY_NONE"); break;
|
||||
case DENY_ALL: printf("DENY_ALL "); break;
|
||||
case DENY_DOS: printf("DENY_DOS "); break;
|
||||
case DENY_READ: printf("DENY_READ "); break;
|
||||
case DENY_WRITE:printf("DENY_WRITE "); break;
|
||||
}
|
||||
printf("</td>");
|
||||
|
||||
printf("<td>");
|
||||
switch (e->share_mode&0xF) {
|
||||
case 0: printf("RDONLY "); break;
|
||||
case 1: printf("WRONLY "); break;
|
||||
case 2: printf("RDWR "); break;
|
||||
}
|
||||
printf("</td>");
|
||||
|
||||
printf("<td>");
|
||||
if((e->op_type &
|
||||
(EXCLUSIVE_OPLOCK|BATCH_OPLOCK)) ==
|
||||
(EXCLUSIVE_OPLOCK|BATCH_OPLOCK))
|
||||
printf("EXCLUSIVE+BATCH ");
|
||||
else if (e->op_type & EXCLUSIVE_OPLOCK)
|
||||
printf("EXCLUSIVE ");
|
||||
else if (e->op_type & BATCH_OPLOCK)
|
||||
printf("BATCH ");
|
||||
else
|
||||
printf("NONE ");
|
||||
printf("</td>");
|
||||
|
||||
printf("<td>%s</td><td>%s</td></tr>\n",
|
||||
fname,asctime(LocalTime((time_t *)&e->time.tv_sec)));
|
||||
}
|
||||
|
||||
|
||||
/* show the current server status */
|
||||
static void status_page(void)
|
||||
{
|
||||
struct connect_record crec;
|
||||
pstring fname;
|
||||
FILE *f;
|
||||
|
||||
printf("<H2>Server Status</H2>\n");
|
||||
|
||||
pstrcpy(fname,lp_lockdir());
|
||||
standard_sub_basic(fname);
|
||||
trim_string(fname,"","/");
|
||||
strcat(fname,"/STATUS..LCK");
|
||||
|
||||
f = fopen(fname,"r");
|
||||
if (!f) {
|
||||
printf("Couldn't open status file %s\n",fname);
|
||||
if (!lp_status(-1))
|
||||
printf("You need to have status=yes in your smb config file\n");
|
||||
return;
|
||||
}
|
||||
|
||||
|
||||
printf("\nSamba version %s\n<p>",VERSION);
|
||||
|
||||
printf("<h3>Active Connections</h3>\n");
|
||||
printf("<table border=1>\n");
|
||||
printf("<tr><th>Share</th><th>User</th><th>Group</th><th>PID</th><th>Client</th><th>Date</th></tr>\n\n");
|
||||
|
||||
while (!feof(f)) {
|
||||
if (fread(&crec,sizeof(crec),1,f) != 1)
|
||||
break;
|
||||
if (crec.magic == 0x280267 && process_exists(crec.pid)) {
|
||||
printf("<tr><td>%s</td><td>%s</td><td>%s</td><td>%d</td><td>%s (%s)</td><td>%s</td></tr>\n",
|
||||
crec.name,uidtoname(crec.uid),
|
||||
gidtoname(crec.gid),crec.pid,
|
||||
crec.machine,crec.addr,
|
||||
asctime(LocalTime(&crec.start)));
|
||||
}
|
||||
}
|
||||
|
||||
printf("</table><p>\n");
|
||||
|
||||
printf("<h3>Open Files</h3>\n");
|
||||
printf("<table border=1>\n");
|
||||
printf("<tr><th>PID</th><th>Sharing</th><th>R/W</th><th>Oplock</th><th>File</th><th>Date</th></tr>\n");
|
||||
|
||||
locking_init(1);
|
||||
share_mode_forall(print_share_mode);
|
||||
locking_end();
|
||||
printf("</table>\n");
|
||||
|
||||
fclose(f);
|
||||
}
|
||||
|
||||
|
||||
int main(int argc, char *argv[])
|
||||
{
|
||||
extern char *optarg;
|
||||
extern int optind;
|
||||
extern FILE *dbf;
|
||||
int opt;
|
||||
char *page;
|
||||
int auth_required = 1;
|
||||
|
||||
/* just in case it goes wild ... */
|
||||
alarm(300);
|
||||
|
||||
dbf = fopen("/dev/null", "w");
|
||||
|
||||
if (!dbf) dbf = stderr;
|
||||
|
||||
while ((opt = getopt(argc, argv,"s:a")) != EOF) {
|
||||
switch (opt) {
|
||||
case 's':
|
||||
pstrcpy(servicesf,optarg);
|
||||
break;
|
||||
case 'a':
|
||||
auth_required = 0;
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
cgi_setup(SWATDIR, auth_required);
|
||||
|
||||
print_header();
|
||||
|
||||
charset_initialise();
|
||||
|
||||
/* if this binary is setuid then run completely as root */
|
||||
setuid(0);
|
||||
|
||||
load_config();
|
||||
|
||||
cgi_load_variables(NULL);
|
||||
|
||||
show_main_buttons();
|
||||
|
||||
page = cgi_baseurl();
|
||||
|
||||
if (strcmp(page, "globals")==0) {
|
||||
globals_page();
|
||||
} else if (strcmp(page,"shares")==0) {
|
||||
shares_page();
|
||||
} else if (strcmp(page,"printers")==0) {
|
||||
printers_page();
|
||||
} else if (strcmp(page,"status")==0) {
|
||||
status_page();
|
||||
} else {
|
||||
welcome_page();
|
||||
}
|
||||
|
||||
print_footer();
|
||||
return 0;
|
||||
}
|
||||
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user