diff options
author | stbuehler <stbuehler@152afb58-edef-0310-8abb-c4023f1b3aa9> | 2015-09-18 15:15:18 +0000 |
---|---|---|
committer | stbuehler <stbuehler@152afb58-edef-0310-8abb-c4023f1b3aa9> | 2015-09-18 15:15:18 +0000 |
commit | 8b2630a82fbecfd57fa38aebb397a755936690e5 (patch) | |
tree | a9cfcd7bb5bea87d63fc8ef81c8456a130a249bc /src/mod_userdir.c | |
parent | e57c8295ebe92b58ca3e68fa8ea8f70d4b0b4cee (diff) | |
download | lighttpd-8b2630a82fbecfd57fa38aebb397a755936690e5.tar.gz |
git-svn-id: svn://svn.lighttpd.net/lighttpd/trunk@3041 152afb58-edef-0310-8abb-c4023f1b3aa9
Diffstat (limited to 'src/mod_userdir.c')
-rw-r--r-- | src/mod_userdir.c | 325 |
1 files changed, 0 insertions, 325 deletions
diff --git a/src/mod_userdir.c b/src/mod_userdir.c deleted file mode 100644 index 8ee91295..00000000 --- a/src/mod_userdir.c +++ /dev/null @@ -1,325 +0,0 @@ -#include <sys/types.h> - -#include <stdlib.h> -#include <string.h> - -#include "base.h" -#include "log.h" -#include "buffer.h" - -#include "response.h" - -#include "plugin.h" -#include "sys-files.h" - -#ifdef HAVE_PWD_H -#include <pwd.h> -#endif - -/* plugin config for all request/connections */ -typedef struct { - array *exclude_user; - array *include_user; - buffer *path; - buffer *basepath; - unsigned short letterhomes; -} plugin_config; - -typedef struct { - PLUGIN_DATA; - - buffer *username; - buffer *temp_path; - - plugin_config **config_storage; - - plugin_config conf; -} plugin_data; - -/* init the plugin data */ -INIT_FUNC(mod_userdir_init) { - plugin_data *p; - - UNUSED(srv); - - p = calloc(1, sizeof(*p)); - - p->username = buffer_init(); - p->temp_path = buffer_init(); - - return p; -} - -/* detroy the plugin data */ -FREE_FUNC(mod_userdir_free) { - plugin_data *p = p_d; - - if (!p) return HANDLER_GO_ON; - - if (p->config_storage) { - size_t i; - - for (i = 0; i < srv->config_context->used; i++) { - plugin_config *s = p->config_storage[i]; - - array_free(s->include_user); - array_free(s->exclude_user); - buffer_free(s->path); - buffer_free(s->basepath); - - free(s); - } - free(p->config_storage); - } - - buffer_free(p->username); - buffer_free(p->temp_path); - - free(p); - - return HANDLER_GO_ON; -} - -/* handle plugin config and check values */ - -SETDEFAULTS_FUNC(mod_userdir_set_defaults) { - plugin_data *p = p_d; - size_t i; - - config_values_t cv[] = { - { "userdir.path", NULL, T_CONFIG_STRING, T_CONFIG_SCOPE_CONNECTION }, /* 0 */ - { "userdir.exclude-user", NULL, T_CONFIG_ARRAY, T_CONFIG_SCOPE_CONNECTION }, /* 1 */ - { "userdir.include-user", NULL, T_CONFIG_ARRAY, T_CONFIG_SCOPE_CONNECTION }, /* 2 */ - { "userdir.basepath", NULL, T_CONFIG_STRING, T_CONFIG_SCOPE_CONNECTION }, /* 3 */ - { "userdir.letterhomes", NULL, T_CONFIG_BOOLEAN,T_CONFIG_SCOPE_CONNECTION }, /* 4 */ - { NULL, NULL, T_CONFIG_UNSET, T_CONFIG_SCOPE_UNSET } - }; - - if (!p) return HANDLER_ERROR; - - p->config_storage = calloc(1, srv->config_context->used * sizeof(specific_config *)); - - for (i = 0; i < srv->config_context->used; i++) { - plugin_config *s; - - s = calloc(1, sizeof(plugin_config)); - s->exclude_user = array_init(); - s->include_user = array_init(); - s->path = buffer_init(); - s->basepath = buffer_init(); - s->letterhomes = 0; - - cv[0].destination = s->path; - cv[1].destination = s->exclude_user; - cv[2].destination = s->include_user; - cv[3].destination = s->basepath; - cv[4].destination = &(s->letterhomes); - - p->config_storage[i] = s; - - if (0 != config_insert_values_global(srv, ((data_config *)srv->config_context->data[i])->value, cv)) { - return HANDLER_ERROR; - } - } - - return HANDLER_GO_ON; -} - -static int mod_userdir_patch_connection(server *srv, connection *con, plugin_data *p) { - size_t i, j; - plugin_config *s = p->config_storage[0]; - - PATCH_OPTION(path); - PATCH_OPTION(exclude_user); - PATCH_OPTION(include_user); - PATCH_OPTION(basepath); - PATCH_OPTION(letterhomes); - - /* skip the first, the global context */ - for (i = 1; i < srv->config_context->used; i++) { - data_config *dc = (data_config *)srv->config_context->data[i]; - s = p->config_storage[i]; - - /* condition didn't match */ - if (!config_check_cond(srv, con, dc)) continue; - - /* merge config */ - for (j = 0; j < dc->value->used; j++) { - data_unset *du = dc->value->data[j]; - - if (buffer_is_equal_string(du->key, CONST_STR_LEN("userdir.path"))) { - PATCH_OPTION(path); - } else if (buffer_is_equal_string(du->key, CONST_STR_LEN("userdir.exclude-user"))) { - PATCH_OPTION(exclude_user); - } else if (buffer_is_equal_string(du->key, CONST_STR_LEN("userdir.include-user"))) { - PATCH_OPTION(include_user); - } else if (buffer_is_equal_string(du->key, CONST_STR_LEN("userdir.basepath"))) { - PATCH_OPTION(basepath); - } else if (buffer_is_equal_string(du->key, CONST_STR_LEN("userdir.letterhomes"))) { - PATCH_OPTION(letterhomes); - } - } - } - - return 0; -} - -URIHANDLER_FUNC(mod_userdir_docroot_handler) { - plugin_data *p = p_d; - int uri_len; - size_t k; - char *rel_url; -#ifdef HAVE_PWD_H - struct passwd *pwd = NULL; -#endif - - if (con->uri.path->used == 0) return HANDLER_GO_ON; - - mod_userdir_patch_connection(srv, con, p); - - uri_len = con->uri.path->used - 1; - - /* /~user/foo.html -> /home/user/public_html/foo.html */ - - if (con->uri.path->ptr[0] != '/' || - con->uri.path->ptr[1] != '~') return HANDLER_GO_ON; - - if (NULL == (rel_url = strchr(con->uri.path->ptr + 2, '/'))) { - /* / is missing -> redirect to .../ as we are a user - DIRECTORY ! :) */ - http_response_redirect_to_directory(srv, con); - - return HANDLER_FINISHED; - } - - /* /~/ is a empty username, catch it directly */ - if (0 == rel_url - (con->uri.path->ptr + 2)) { - return HANDLER_GO_ON; - } - - buffer_copy_string_len(p->username, con->uri.path->ptr + 2, rel_url - (con->uri.path->ptr + 2)); - - if (buffer_is_empty(p->conf.basepath) -#ifdef HAVE_PWD_H - && NULL == (pwd = getpwnam(p->username->ptr)) -#endif - ) { - /* user not found */ - return HANDLER_GO_ON; - } - - - for (k = 0; k < p->conf.exclude_user->used; k++) { - data_string *ds = (data_string *)p->conf.exclude_user->data[k]; - - if (buffer_is_equal(ds->value, p->username)) { - /* user in exclude list */ - return HANDLER_GO_ON; - } - } - - if (p->conf.include_user->used) { - int found_user = 0; - for (k = 0; k < p->conf.include_user->used; k++) { - data_string *ds = (data_string *)p->conf.include_user->data[k]; - - if (buffer_is_equal(ds->value, p->username)) { - /* user in include list */ - found_user = 1; - break; - } - } - - if (!found_user) return HANDLER_GO_ON; - } - - /* we build the physical path */ - - if (buffer_is_empty(p->conf.basepath)) { -#ifdef HAVE_PWD_H - buffer_copy_string(p->temp_path, pwd->pw_dir); -#endif - } else { - char *cp; - /* check if the username is valid - * a request for /~../ should lead to a directory traversal - * limiting to [-_a-z0-9.] should fix it */ - - for (cp = p->username->ptr; *cp; cp++) { - char c = *cp; - - if (!(c == '-' || - c == '_' || - c == '.' || - (c >= 'a' && c <= 'z') || - (c >= 'A' && c <= 'Z') || - (c >= '0' && c <= '9'))) { - - return HANDLER_GO_ON; - } - } - if (con->conf.force_lowercase_filenames) { - buffer_to_lower(p->username); - } - - buffer_copy_string_buffer(p->temp_path, p->conf.basepath); - PATHNAME_APPEND_SLASH(p->temp_path); - if (p->conf.letterhomes) { - buffer_append_string_len(p->temp_path, p->username->ptr, 1); - PATHNAME_APPEND_SLASH(p->temp_path); - } - buffer_append_string_buffer(p->temp_path, p->username); - } - PATHNAME_APPEND_SLASH(p->temp_path); - buffer_append_string_buffer(p->temp_path, p->conf.path); - - if (buffer_is_empty(p->conf.basepath)) { - struct stat st; - int ret; - - ret = stat(p->temp_path->ptr, &st); - if (ret < 0 || S_ISDIR(st.st_mode) != 1) { - return HANDLER_GO_ON; - } - } - - /* the physical rel_path is basically the same as uri.path; - * but it is converted to lowercase in case of force_lowercase_filenames and some special handling - * for trailing '.', ' ' and '/' on windows - * we assume that no docroot/physical handler changed this - * (docroot should only set the docroot/server name, phyiscal should only change the phyiscal.path; - * the exception mod_secure_download doesn't work with userdir anyway) - */ - PATHNAME_APPEND_SLASH(p->temp_path); - /* if no second '/' is found, we assume that it was stripped from the uri.path for the special handling - * on windows. - * we do not care about the trailing slash here on windows, as we already ensured it is a directory - * - * TODO: what to do with trailing dots in usernames on windows? they may result in the same directory - * as a username without them. - */ - if (NULL != (rel_url = strchr(con->physical.rel_path->ptr + 2, '/'))) { - buffer_append_string(p->temp_path, rel_url + 1); /* skip the / */ - } - buffer_copy_string_buffer(con->physical.path, p->temp_path); - - buffer_reset(p->temp_path); - - return HANDLER_GO_ON; -} - -/* this function is called at dlopen() time and inits the callbacks */ - -LI_EXPORT int mod_userdir_plugin_init(plugin *p); -LI_EXPORT int mod_userdir_plugin_init(plugin *p) { - p->version = LIGHTTPD_VERSION_ID; - p->name = buffer_init_string("userdir"); - - p->init = mod_userdir_init; - p->handle_physical = mod_userdir_docroot_handler; - p->set_defaults = mod_userdir_set_defaults; - p->cleanup = mod_userdir_free; - - p->data = NULL; - - return 0; -} |