/* $NetBSD: dir-index-bozo.c,v 1.32.2.1 2021/03/05 13:34:19 martin Exp $ */ /* $eterna: dir-index-bozo.c,v 1.20 2011/11/18 09:21:15 mrg Exp $ */ /* * Copyright (c) 1997-2020 Matthew R. Green * All rights reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer and * dedication in the documentation and/or other materials provided * with the distribution. * * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF * SUCH DAMAGE. * */ /* this code implements directory index generation for bozohttpd */ #ifndef NO_DIRINDEX_SUPPORT #include #include #include #include #include #include #include #include #include #include "bozohttpd.h" /* * output a directory index. return 1 if it actually did something.. */ int bozo_dir_index(bozo_httpreq_t *request, const char *dirpath, int isindex) { bozohttpd_t *httpd = request->hr_httpd; struct stat sb; struct dirent **de, **deo; DIR *dp; char buf[MAXPATHLEN]; char *file = NULL, *printname = NULL, *p; int k, j, fd; ssize_t rlen; if (!isindex || !httpd->dir_indexing) return 0; if (strlen(dirpath) <= strlen(httpd->index_html)) dirpath = "."; else { file = bozostrdup(httpd, request, dirpath); file[strlen(file) - strlen(httpd->index_html)] = '\0'; dirpath = file; } debug((httpd, DEBUG_FAT, "bozo_dir_index: dirpath '%s'", dirpath)); if (stat(dirpath, &sb) < 0 || (dp = opendir(dirpath)) == NULL) { if (errno == EPERM) bozo_http_error(httpd, 403, request, "no permission to open directory"); else if (errno == ENOENT) bozo_http_error(httpd, 404, request, "no file"); else bozo_http_error(httpd, 500, request, "open directory"); goto done; /* NOTREACHED */ } bozo_printf(httpd, "%s 200 OK\r\n", request->hr_proto); if (request->hr_proto != httpd->consts.http_09) { bozo_print_header(request, NULL, "text/html", ""); bozo_printf(httpd, "\r\n"); } bozo_flush(httpd, stdout); if (request->hr_method == HTTP_HEAD) { closedir(dp); goto done; } #ifndef NO_USER_SUPPORT if (request->hr_user) { bozoasprintf(httpd, &printname, "~%s/%s", request->hr_user, request->hr_file); } else printname = bozostrdup(httpd, request, request->hr_file); #else printname = bozostrdup(httpd, request, request->hr_file); #endif /* !NO_USER_SUPPORT */ if ((p = strstr(printname, httpd->index_html)) != NULL) { if (strcmp(printname, httpd->index_html) == 0) strcpy(printname, "/"); /* is ``slashdir'' */ else *p = '\0'; /* strip unwanted ``index_html'' */ } if ((p = bozo_escape_html(httpd, printname)) != NULL) { free(printname); printname = p; } bozo_printf(httpd, "\r\n" "\r\n" "\r\n"); bozo_printf(httpd, "Index of %s\r\n", printname); bozo_printf(httpd, "

Index of %s

\r\n", printname); bozo_printf(httpd, "\r\n\r\n" "\r\n"); for (j = k = scandir(dirpath, &de, NULL, alphasort), deo = de; j--; de++) { int nostat = 0; char *name = (*de)->d_name; char *urlname, *htmlname; if (strcmp(name, ".") == 0 || (strcmp(name, "..") != 0 && httpd->hide_dots && name[0] == '.')) continue; if (bozo_check_special_files(request, name, false)) continue; snprintf(buf, sizeof buf, "%s/%s", dirpath, name); if (stat(buf, &sb)) nostat = 1; urlname = bozo_escape_rfc3986(httpd, name, 0); htmlname = bozo_escape_html(httpd, name); if (htmlname == NULL) htmlname = name; bozo_printf(httpd, "
NameLast modifiedSize\r\n" "
"); if (strcmp(name, "..") == 0) { bozo_printf(httpd, ""); bozo_printf(httpd, "Parent Directory"); } else if (!nostat && S_ISDIR(sb.st_mode)) { bozo_printf(httpd, "", urlname); bozo_printf(httpd, "%s/", htmlname); } else if (strchr(name, ':') != NULL) { /* RFC 3986 4.2 */ bozo_printf(httpd, "", urlname); bozo_printf(httpd, "%s", htmlname); } else { bozo_printf(httpd, "", urlname); bozo_printf(httpd, "%s", htmlname); } if (htmlname != name) free(htmlname); bozo_printf(httpd, ""); if (nostat) bozo_printf(httpd, "??\r\n"); else { unsigned long long len; strftime(buf, sizeof buf, "%d-%b-%Y %R", gmtime(&sb.st_mtime)); bozo_printf(httpd, "%s", buf); len = ((unsigned long long)sb.st_size + 1023) / 1024; bozo_printf(httpd, "%llukB", len); } bozo_printf(httpd, "\r\n"); } closedir(dp); while (k--) free(deo[k]); free(deo); bozo_printf(httpd, "
\r\n"); if (httpd->dir_readme != NULL) { if (httpd->dir_readme[0] == '/') snprintf(buf, sizeof buf, "%s", httpd->dir_readme); else snprintf(buf, sizeof buf, "%s/%s", dirpath, httpd->dir_readme); fd = open(buf, O_RDONLY); if (fd != -1) { bozo_flush(httpd, stdout); do { rlen = read(fd, buf, sizeof buf); if (rlen <= 0) break; bozo_write(httpd, STDOUT_FILENO, buf, rlen); } while (1); close(fd); } } bozo_printf(httpd, "\r\n\r\n"); bozo_flush(httpd, stdout); done: free(file); free(printname); return 1; } #endif /* NO_DIRINDEX_SUPPORT */