X-Git-Url: https://git.pterodactylus.net/?a=blobdiff_plain;f=src%2Fhttp%2Fipagehandler.cpp;h=560c9123758a7a725c39ef06c9ed1f0e4a6aa09e;hb=f2545574af789b63fc655decfe31a3d9f1b30504;hp=fc778158b7d4aebd9f2530587a793c626dc3e889;hpb=f208e33c29132aacaec448e74341edea1b925a2a;p=fms.git

diff --git a/src/http/ipagehandler.cpp b/src/http/ipagehandler.cpp
index fc77815..560c912 100644
--- a/src/http/ipagehandler.cpp
+++ b/src/http/ipagehandler.cpp
@@ -1,6 +1,16 @@
 #include "../../include/http/ipagehandler.h"
-#include "../../include/http/httpdefs.h"
 #include "../../include/stringfunctions.h"
+#include "../../include/http/multipartparser.h"
+#include "../../include/db/sqlite3db.h"
+
+#include <Poco/Net/HTMLForm.h>
+#include <Poco/UUIDGenerator.h>
+#include <Poco/UUID.h>
+#include <Poco/DateTime.h>
+#include <Poco/DateTimeFormatter.h>
+#include <Poco/Timespan.h>
+
+#include <cstring>
 
 #ifdef XMEM
 	#include <xmem.h>
@@ -12,7 +22,7 @@ void IPageHandler::CreateArgArray(const std::map<std::string,std::string> &vars,
 	{
 		if((*i).first.find(basename)==0 && (*i).first.find("[")!=std::string::npos && (*i).first.find("]")!=std::string::npos)
 		{
-			int index;
+			int index=0;
 			std::string indexstr;
 			std::string::size_type startpos;
 			std::string::size_type endpos;
@@ -31,117 +41,177 @@ void IPageHandler::CreateArgArray(const std::map<std::string,std::string> &vars,
 	}
 }
 
-const bool IPageHandler::Handle(shttpd_arg *arg)
+const std::string IPageHandler::CreateFormPassword()
 {
-	const char *uri=shttpd_get_env(arg,"REQUEST_URI");
-	const char *method=shttpd_get_env(arg,"REQUEST_METHOD");
-	std::string methodstr="";
-	if(method)
+	Poco::DateTime date;
+	Poco::UUIDGenerator uuidgen;
+	Poco::UUID uuid;
+	try
 	{
-		methodstr=method;
+		uuid=uuidgen.createRandom();
 	}
+	catch(...)
+	{
+	}
+
+	SQLite3DB::Statement st=SQLite3DB::DB::Instance()->Prepare("INSERT INTO tmpFormPassword(Date,Password) VALUES(?,?);");
+	st.Bind(0,Poco::DateTimeFormatter::format(date,"%Y-%m-%d %H:%M:%S"));
+	st.Bind(1,uuid.toString());
+	st.Step();
+
+	return "<input type=\"hidden\" name=\"formpassword\" value=\""+uuid.toString()+"\">";
+
+}
+
+const std::string IPageHandler::CreateTrueFalseDropDown(const std::string &name, const std::string &selected)
+{
+	std::string rval="";
 
-	if(uri && WillHandleURI(std::string(uri)))
+	rval+="<select name=\""+name+"\">";
+	rval+="<option value=\"true\"";
+	if(selected=="true")
 	{
-		httpstate *mystate=(httpstate *)arg->state;
-		// this is a new request - create a new arg object
-		if(arg->state==NULL)
-		{
-			arg->state=new httpstate;
-			memset(arg->state,0,sizeof(httpstate));
-			mystate=(httpstate *)arg->state;
+		rval+=" SELECTED";
+	}
+	rval+=">true</option>";
+	rval+="<option value=\"false\"";
+	if(selected=="false")
+	{
+		rval+=" SELECTED";
+	}
+	rval+=">false</option>";
+	rval+="</select>";
 
-			// if post then create input buffer
-			if(methodstr=="POST")
-			{
-				const char *lenstr=shttpd_get_header(arg,"Content-Length");
-				if(lenstr)
-				{
-					long len;
-					StringFunctions::Convert(std::string(lenstr),len);
-					mystate->m_indata=new char[len+1];
-					mystate->m_indata[len]=NULL;
-					mystate->m_indatalen=len;
-					mystate->m_indatapos=0;
-				}
-			}
-		}
+	return rval;
+}
 
-		// we have more POST data to get
-		if(arg->in.len>0)
+void IPageHandler::CreateQueryVarMap(Poco::Net::HTTPServerRequest &request, std::map<std::string,std::string> &vars)
+{
+	for(Poco::Net::HTTPServerRequest::ConstIterator i=request.begin(); i!=request.end(); i++)
+	{
+		vars[(*i).first]=(*i).second;
+	}
+
+	// handle HTMLForm and multiparts
+	MultiPartParser mpp;
+	Poco::Net::HTMLForm form(request,request.stream(),mpp);
+	for(Poco::Net::HTMLForm::ConstIterator i=form.begin(); i!=form.end(); i++)
+	{
+		vars[(*i).first]=(*i).second;
+	}
+
+	// for a POST method, the HTMLForm won't grab vars off the query string so we
+	// temporarily set the method to GET and parse with the HTMLForm again
+	if(request.getMethod()=="POST")
+	{
+		request.setMethod("GET");
+		Poco::Net::HTMLForm form1(request,request.stream(),mpp);
+		for(Poco::Net::HTMLForm::ConstIterator i=form1.begin(); i!=form1.end(); i++)
 		{
-			int pos=0;
-			while(pos<arg->in.len)
-			{
-				mystate->m_indata[mystate->m_indatapos++]=arg->in.buf[pos++];
-			}
-			arg->in.num_bytes=arg->in.len;
+			vars[(*i).first]=(*i).second;
 		}
+		request.setMethod("POST");
+	}
+
+	// get any multiparts
+	std::map<std::string,std::string> mpvars=mpp.GetVars();
+	for(std::map<std::string,std::string>::iterator i=mpvars.begin(); i!=mpvars.end(); i++)
+	{
+		vars[(*i).first]=(*i).second;
+	}
+
+}
+
+void IPageHandler::handleRequest(Poco::Net::HTTPServerRequest &request, Poco::Net::HTTPServerResponse &response)
+{
+	m_log->trace("IPageHandler::handleRequest from "+request.clientAddress().toString());
+
+	std::map<std::string,std::string> vars;
+
+	CreateQueryVarMap(request,vars);
 
-		// we have all POST data (or it was 0 to begin with) - generate the page
-		if(mystate->m_indatalen==mystate->m_indatapos && mystate->m_outdata==NULL)
+	if(request.getVersion()==Poco::Net::HTTPRequest::HTTP_1_1)
+	{
+		response.setChunkedTransferEncoding(true);
+	}
+	response.setContentType("text/html");
+
+	std::ostream &ostr = response.send();
+	ostr << GeneratePage(request.getMethod(),vars);
+
+}
+
+const std::string IPageHandler::SanitizeOutput(const std::string &input)
+{
+	// must do & first because all other elements have & in them!
+	std::string output=StringFunctions::Replace(input,"&","&amp;");
+	output=StringFunctions::Replace(output,"<","&lt;");
+	output=StringFunctions::Replace(output,">","&gt;");
+	output=StringFunctions::Replace(output,"\"","&quot;");
+	output=StringFunctions::Replace(output," ","&nbsp;");
+	return output;
+}
+
+const std::string IPageHandler::SanitizeTextAreaOutput(const std::string &input)
+{
+	// must do & first because all other elements have & in them!
+	std::string output=StringFunctions::Replace(input,"&","&amp;");
+	output=StringFunctions::Replace(output,"<","&lt;");
+	output=StringFunctions::Replace(output,">","&gt;");
+	output=StringFunctions::Replace(output,"\"","&quot;");
+	return output;
+}
+
+const bool IPageHandler::ValidateFormPassword(const std::map<std::string,std::string> &vars)
+{
+	Poco::DateTime date;
+	date-=Poco::Timespan(0,1,0,0,0);
+
+	SQLite3DB::Statement st=SQLite3DB::DB::Instance()->Prepare("DELETE FROM tmpFormPassword WHERE Date<?;");
+	st.Bind(0,Poco::DateTimeFormatter::format(date,"%Y-%m-%d %H:%M:%S"));
+	st.Step();
+
+	std::map<std::string,std::string>::const_iterator i=vars.find("formpassword");
+	if(i!=vars.end())
+	{
+		st=SQLite3DB::DB::Instance()->Prepare("SELECT COUNT(*) FROM tmpFormPassword WHERE Password=?;");
+		st.Bind(0,(*i).second);
+		st.Step();
+		if(st.RowReturned())
 		{
-			//TODO parse POST data and any QUERY_STRING before generating page
-			std::map<std::string,std::string> args;
-			std::vector<std::string> argparts;
-			
-			if(mystate->m_indata)
-			{
-				StringFunctions::Split(mystate->m_indata,"&",argparts);
-			}
-			if(shttpd_get_env(arg,"QUERY_STRING"))
-			{
-				StringFunctions::Split(shttpd_get_env(arg,"QUERY_STRING"),"&",argparts);
-			}
-			for(std::vector<std::string>::iterator argi=argparts.begin(); argi!=argparts.end(); argi++)
+			if(st.ResultNull(0)==false)
 			{
-				std::vector<std::string> parts;
-				StringFunctions::Split((*argi),"=",parts);
-				if(parts.size()>0)
+				int rval=0;
+				st.ResultInt(0,rval);
+				if(rval>0)
 				{
-					args[StringFunctions::UriDecode(parts[0])];
-					if(parts.size()>1)
-					{
-						args[StringFunctions::UriDecode(parts[0])]=StringFunctions::UriDecode(parts[1]);
-					}
+					return true;
+				}
+				else
+				{
+					return false;
 				}
 			}
-
-			std::string page=GeneratePage(methodstr,args);
-			mystate->m_outdata=new char[page.size()];
-			memcpy(mystate->m_outdata,page.c_str(),page.size());
-			mystate->m_outdatalen=page.size();
-			mystate->m_outdatapos=0;
-		}
-
-		// if we have output data, push next block of data onto out buffer
-		if(mystate->m_outdata && mystate->m_outdatapos<mystate->m_outdatalen)
-		{
-			int pos=0;
-			while(mystate->m_outdatapos<mystate->m_outdatalen && pos<arg->out.len)
+			else
 			{
-				arg->out.buf[pos++]=mystate->m_outdata[mystate->m_outdatapos++];
+				return false;
 			}
-			arg->out.num_bytes=pos;
 		}
-
-		// if we have no more output data to send - delete the data pointers and set end of output flag
-		if(mystate->m_outdata && mystate->m_outdatapos==mystate->m_outdatalen)
+		else
 		{
-			if(mystate->m_indata)
-			{
-				delete [] mystate->m_indata;
-			}
-			if(mystate->m_outdata)
-			{
-				delete [] mystate->m_outdata;
-			}
-			delete mystate;
-			arg->state=NULL;
-
-			arg->flags|=SHTTPD_END_OF_OUTPUT;
+			return false;
 		}
+	}
+	else
+	{
+		return false;
+	}
+}
 
+const bool IPageHandler::WillHandleURI(const std::string &uri)
+{
+	if(uri.find(m_pagename)!=std::string::npos)
+	{
 		return true;
 	}
 	else