modules/Command.pm

   1 package Command;
   2
   3 #
   4 # Dev-Editor - Module Command
   5 #
   6 # Execute Dev-Editor's commands
   7 #
   8 # Author:        Patrick Canterino <patrick@patshaping.de>
   9 # Last modified: 2010-10-26
  10 #
  11 # Copyright (C) 1999-2000 Roland Bluethgen, Frank Schoenmann
  12 # Copyright (C) 2003-2009 Patrick Canterino
  13 # All Rights Reserved.
  14 #
  15 # This file can be distributed and/or modified under the terms of
  16 # of the Artistic License 1.0 (see also the LICENSE file found at
  17 # the top level of the Dev-Editor distribution).
  18 #
  19
  20 use strict;
  21
  22 use vars qw(@EXPORT);
  23
  24 use Fcntl;
  25 use File::Access;
  26 use File::Copy;
  27 use File::Path;
  28
  29 use Digest::MD5 qw(md5_hex);
  30 use POSIX qw(strftime);
  31 use Tool;
  32
  33 use CGI qw(header
  34            escape);
  35
  36 use Output;
  37 use Template;
  38
  39 my $script = encode_html($ENV{'SCRIPT_NAME'});
  40 my $users  = eval('getpwuid(0)') && eval('getgrgid(0)');
  41
  42 my %dispatch = ('show'         => \&exec_show,
  43                 'beginedit'    => \&exec_beginedit,
  44                 'endedit'      => \&exec_endedit,
  45                 'download'     => \&exec_download,
  46                 'mkdir'        => \&exec_mkdir,
  47                 'mkfile'       => \&exec_mkfile,
  48                 'upload'       => \&exec_upload,
  49                 'unpack'       => \&exec_unpack,
  50                 'copy'         => \&exec_copy,
  51                 'rename'       => \&exec_rename,
  52                 'remove'       => \&exec_remove,
  53                 'remove_multi' => \&exec_remove_multi,
  54                 'chprop'       => \&exec_chprop,
  55                 'about'        => \&exec_about
  56                );
  57
  58 ### Export ###
  59
  60 use base qw(Exporter);
  61
  62 @EXPORT = qw(exec_command);
  63
  64 # exec_command()
  65 #
  66 # Execute the specified command
  67 #
  68 # Params: 1. Command to execute
  69 #         2. Reference to user input hash
  70 #         3. Reference to config hash
  71 #
  72 # Return: Output of the command (Scalar Reference)
  73
  74 sub exec_command($$$)
  75 {
  76  my ($command,$data,$config) = @_;
  77
  78  foreach(keys(%dispatch))
  79  {
  80   if(lc($_) eq lc($command))
  81   {
  82    my $output = &{$dispatch{$_}}($data,$config);
  83    return $output;
  84   }
  85  }
  86
  87  return error($config->{'errors'}->{'command_unknown'},'/',{COMMAND => encode_html($command)});
  88 }
  89
  90 # exec_show()
  91 #
  92 # View a directory or a file
  93 #
  94 # Params: 1. Reference to user input hash
  95 #         2. Reference to config hash
  96 #
  97 # Return: Output of the command (Scalar Reference)
  98
  99 sub exec_show($$)
 100 {
 101  my ($data,$config) = @_;
 102  my $physical       = $data->{'physical'};
 103  my $virtual        = $data->{'virtual'};
 104  my $upper_path     = multi_string(upper_path($virtual));
 105
 106  my $tpl = new Template;
 107
 108  if(-d $physical && not -l $physical)
 109  {
 110   # Create directory listing
 111
 112   return error($config->{'errors'}->{'no_dir_access'},$upper_path->{'normal'}) unless(-r $physical && -x $physical);
 113
 114   my $direntries = dir_read($physical);
 115   return error($config->{'errors'}->{'dir_read_failed'},$upper_path->{'normal'},{DIR => encode_html($virtual)}) unless($direntries);
 116
 117   my $files = $direntries->{'files'};
 118   my $dirs  = $direntries->{'dirs'};
 119
 120   my $dirlist = '';
 121
 122   my $count = 0;
 123
 124   my $filter1 = $data->{'cgi'}->param('filter') || '*';        # The real wildcard
 125   my $filter2 = ($filter1 && $filter1 ne '*') ? $filter1 : ''; # Wildcard for output
 126
 127   # Create the link to the upper directory
 128   # (only if the current directory is not the root directory)
 129
 130   unless($virtual eq '/')
 131   {
 132    $count++;
 133
 134    my @stat  = stat($physical.'/..');
 135
 136    my $udtpl = new Template;
 137    $udtpl->read_file($config->{'templates'}->{'dirlist_up'});
 138
 139    $udtpl->fillin('UPPER_DIR',$upper_path->{'html'});
 140    $udtpl->fillin('UPPER_DIR_URL',$upper_path->{'url'});
 141    $udtpl->fillin('DATE',encode_html(strftime($config->{'timeformat'},($config->{'use_gmt'}) ? gmtime($stat[9]) : localtime($stat[9]))));
 142
 143    $dirlist .= $udtpl->get_template;
 144   }
 145
 146   # Directories
 147
 148   foreach my $dir(@$dirs)
 149   {
 150    next if($config->{'hide_dot_files'} && substr($dir,0,1) eq '.');
 151    next unless(dos_wildcard_match($filter1,$dir));
 152
 153    $count++;
 154
 155    my $phys_path = $physical.'/'.$dir;
 156    my $virt_path = multi_string($virtual.$dir.'/');
 157
 158    my @stat      = stat($phys_path);
 159
 160    my $dtpl = new Template;
 161    $dtpl->read_file($config->{'templates'}->{'dirlist_dir'});
 162
 163    $dtpl->fillin('DIR',$virt_path->{'html'});
 164    $dtpl->fillin('DIR_URL',$virt_path->{'url'});
 165    $dtpl->fillin('DIR_NAME',encode_html($dir));
 166    $dtpl->fillin('DATE',encode_html(strftime($config->{'timeformat'},($config->{'use_gmt'}) ? gmtime($stat[9]) : localtime($stat[9]))));
 167    $dtpl->fillin('URL',equal_url(encode_html($config->{'httproot'}),$virt_path->{'html'}));
 168
 169    $dtpl->parse_if_block('forbidden',is_forbidden_file($config->{'forbidden'},$virt_path->{'normal'}));
 170    $dtpl->parse_if_block('readable',-r $phys_path && -x $phys_path);
 171    $dtpl->parse_if_block('users',$users && -o $phys_path);
 172    $dtpl->parse_if_block('even',($count % 2) == 0);
 173
 174    $dirlist .= $dtpl->get_template;
 175   }
 176
 177   # Files
 178
 179   foreach my $file(@$files)
 180   {
 181    next if($config->{'hide_dot_files'} && substr($file,0,1) eq '.');
 182    next unless(dos_wildcard_match($filter1,$file));
 183
 184    $count++;
 185
 186    my $phys_path = $physical.'/'.$file;
 187    my $virt_path = multi_string($virtual.$file);
 188
 189    my @stat      = lstat($phys_path);
 190    my $too_large = $config->{'max_file_size'} && $stat[7] > $config->{'max_file_size'};
 191
 192    my $ftpl = new Template;
 193    $ftpl->read_file($config->{'templates'}->{'dirlist_file'});
 194
 195    $ftpl->fillin('FILE',$virt_path->{'html'});
 196    $ftpl->fillin('FILE_URL',$virt_path->{'url'});
 197    $ftpl->fillin('FILE_NAME',encode_html($file));
 198    $ftpl->fillin('FILE_URL',$virt_path->{'url'});
 199    $ftpl->fillin('SIZE',$stat[7]);
 200    $ftpl->fillin('DATE',encode_html(strftime($config->{'timeformat'},($config->{'use_gmt'}) ? gmtime($stat[9]) : localtime($stat[9]))));
 201    $ftpl->fillin('URL',equal_url(encode_html($config->{'httproot'}),$virt_path->{'html'}));
 202
 203    $ftpl->parse_if_block('link',-l $phys_path);
 204    $ftpl->parse_if_block('readable',-r $phys_path);
 205    $ftpl->parse_if_block('writeable',-w $phys_path);
 206    $ftpl->parse_if_block('binary',-B $phys_path);
 207
 208    $ftpl->parse_if_block('forbidden',is_forbidden_file($config->{'forbidden'},$virt_path->{'normal'}));
 209    $ftpl->parse_if_block('viewable',(-r $phys_path && -T $phys_path && not $too_large) || -l $phys_path);
 210    $ftpl->parse_if_block('editable',(-r $phys_path && -w $phys_path && -T $phys_path && not $too_large) && not -l $phys_path);
 211
 212    $ftpl->parse_if_block('too_large',$config->{'max_file_size'} && $stat[7] > $config->{'max_file_size'});
 213
 214    $ftpl->parse_if_block('users',$users && -o $phys_path);
 215
 216    $ftpl->parse_if_block('archive',$File::Access::has_archive_extract && is_archive($file));
 217
 218    $ftpl->parse_if_block('even',($count % 2) == 0);
 219
 220    $dirlist .= $ftpl->get_template;
 221   }
 222
 223   $tpl->read_file($config->{'templates'}->{'dirlist'});
 224
 225   $tpl->fillin('DIRLIST',$dirlist);
 226   $tpl->fillin('DIR',encode_html($virtual));
 227   $tpl->fillin('DIR_URL',escape($virtual));
 228   $tpl->fillin('SCRIPT',$script);
 229   $tpl->fillin('URL',encode_html(equal_url($config->{'httproot'},$virtual)));
 230
 231   $tpl->fillin('FILTER',encode_html($filter2));
 232   $tpl->fillin('FILTER_URL',escape($filter2));
 233
 234   $tpl->parse_if_block('empty',$dirlist eq '');
 235   $tpl->parse_if_block('dir_writeable',-w $physical);
 236   $tpl->parse_if_block('filter',$filter2);
 237   $tpl->parse_if_block('gmt',$config->{'use_gmt'});
 238  }
 239  elsif(-l $physical)
 240  {
 241   # Show the target of a symbolic link
 242
 243   my $link_target = readlink($physical);
 244
 245   $tpl->read_file($config->{'templates'}->{'viewlink'});
 246
 247   $tpl->fillin('FILE',encode_html($virtual));
 248   $tpl->fillin('DIR',$upper_path->{'html'});
 249   $tpl->fillin('DIR_URL',$upper_path->{'url'});
 250   $tpl->fillin('URL',encode_html(equal_url($config->{'httproot'},$virtual)));
 251   $tpl->fillin('SCRIPT',$script);
 252
 253   $tpl->fillin('LINK_TARGET',encode_html($link_target));
 254  }
 255  else
 256  {
 257   # View a file
 258
 259   return error($config->{'errors'}->{'no_view'},$upper_path->{'normal'}) unless(-r $physical);
 260
 261   # Check on binary files
 262   # We have to do it in this way or empty files will be recognized
 263   # as binary files
 264
 265   return error($config->{'errors'}->{'binary_file'},$upper_path->{'normal'}) unless(-T $physical);
 266
 267   # Is the file too large?
 268
 269   return error($config->{'errors'}->{'file_too_large'},$upper_path->{'normal'},{SIZE => $config->{'max_file_size'}}) if($config->{'max_file_size'} && -s $physical > $config->{'max_file_size'});
 270
 271   # View the file
 272
 273   my $content =  file_read($physical);
 274   $$content   =~ s/\015\012|\012|\015/\n/g;
 275
 276   $tpl->read_file($config->{'templates'}->{'viewfile'});
 277
 278   $tpl->fillin('FILE',encode_html($virtual));
 279   $tpl->fillin('FILE_URL',escape($virtual));
 280   $tpl->fillin('DIR',$upper_path->{'html'});
 281   $tpl->fillin('DIR_URL',$upper_path->{'url'});
 282   $tpl->fillin('URL',encode_html(equal_url($config->{'httproot'},$virtual)));
 283   $tpl->fillin('SCRIPT',$script);
 284
 285   $tpl->parse_if_block('editable',-w $physical);
 286
 287   $tpl->fillin('CONTENT',encode_html($$content));
 288  }
 289
 290  my $output  = header(-type => 'text/html');
 291  $output    .= $tpl->get_template;
 292
 293  return \$output;
 294 }
 295
 296 # exec_beginedit
 297 #
 298 # Lock a file and display a form to edit it
 299 #
 300 # Params: 1. Reference to user input hash
 301 #         2. Reference to config hash
 302 #
 303 # Return: Output of the command (Scalar Reference)
 304
 305 sub exec_beginedit($$)
 306 {
 307  my ($data,$config) = @_;
 308  my $physical       = $data->{'physical'};
 309  my $virtual        = $data->{'virtual'};
 310  my $dir            = upper_path($virtual);
 311
 312  return error($config->{'errors'}->{'link_edit'},$dir) if(-l $physical);
 313  return error($config->{'errors'}->{'dir_edit'}, $dir) if(-d $physical);
 314  return error($config->{'errors'}->{'no_edit'},  $dir) unless(-r $physical && -w $physical);
 315
 316  # Check on binary files
 317
 318  return error($config->{'errors'}->{'binary_file'},$dir) unless(-T $physical);
 319
 320  # Is the file too large?
 321
 322  return error($config->{'errors'}->{'file_too_large'},$dir,{SIZE => $config->{'max_file_size'}}) if($config->{'max_file_size'} && -s $physical > $config->{'max_file_size'});
 323
 324  # Show the editing form
 325
 326  my $content =  file_read($physical);
 327  my $md5sum  =  md5_hex($$content);
 328  $$content   =~ s/\015\012|\012|\015/\n/g;
 329
 330  my $tpl = new Template;
 331  $tpl->read_file($config->{'templates'}->{'editfile'});
 332
 333  $tpl->fillin('FILE',encode_html($virtual));
 334  $tpl->fillin('FILE_URL',escape($virtual));
 335  $tpl->fillin('DIR',encode_html($dir));
 336  $tpl->fillin('DIR_URL',escape($dir));
 337  $tpl->fillin('URL',encode_html(equal_url($config->{'httproot'},$virtual)));
 338  $tpl->fillin('SCRIPT',$script);
 339  $tpl->fillin('MD5SUM',$md5sum);
 340  $tpl->fillin('CONTENT',encode_html($$content));
 341
 342  $tpl->parse_if_block('error',0);
 343
 344  my $output = header(-type => 'text/html');
 345  $output   .= $tpl->get_template;
 346
 347  return \$output;
 348 }
 349
 350 # exec_endedit()
 351 #
 352 # Save a file, unlock it and return to directory view
 353 #
 354 # Params: 1. Reference to user input hash
 355 #         2. Reference to config hash
 356 #
 357 # Return: Output of the command (Scalar Reference)
 358
 359 sub exec_endedit($$)
 360 {
 361  my ($data,$config) = @_;
 362  my $physical       = $data->{'physical'};
 363  my $virtual        = $data->{'virtual'};
 364  my $dir            = upper_path($virtual);
 365  my $cgi            = $data->{'cgi'};
 366  my $content        = $cgi->param('filecontent');
 367  my $md5sum         = $cgi->param('md5sum');
 368  my $output;
 369
 370  if(defined $content && $md5sum)
 371  {
 372   # Normalize newlines
 373
 374   $content =~ s/\015\012|\012|\015/\n/g;
 375
 376   if($cgi->param('saveas') && $data->{'new_physical'} ne '' && $data->{'new_virtual'} ne '')
 377   {
 378    # Create the new filename
 379
 380    $physical = $data->{'new_physical'};
 381    $virtual  = $data->{'new_virtual'};
 382   }
 383
 384   return error($config->{'errors'}->{'link_edit'},$dir)      if(-l $physical);
 385   return error($config->{'errors'}->{'dir_edit'},$dir)       if(-d $physical);
 386   return error($config->{'errors'}->{'no_edit'},$dir)        if(-e $physical && !(-r $physical && -w $physical));
 387   return error($config->{'errors'}->{'text_to_binary'},$dir) if(-e $physical && not -T $physical);
 388
 389   # For technical reasons, we can't use file_save() for
 390   # saving the file...
 391
 392   local *FILE;
 393
 394   sysopen(FILE,$physical,O_RDWR | O_CREAT) or return error($config->{'errors'}->{'edit_failed'},$dir,{FILE => encode_html($virtual)});
 395   file_lock(*FILE,LOCK_EX)                 or do { close(FILE); return error($config->{'errors'}->{'edit_failed'},$dir,{FILE => encode_html($virtual)}) };
 396
 397   my $md5 = new Digest::MD5;
 398   $md5->addfile(*FILE);
 399
 400   my $md5file = $md5->hexdigest;
 401   my $md5data = md5_hex($content);
 402
 403   if($md5file ne $md5sum && $md5data ne $md5file && not $cgi->param('saveas'))
 404   {
 405    # The file changed meanwhile
 406
 407    my $tpl = new Template;
 408    $tpl->read_file($config->{'templates'}->{'editfile'});
 409
 410    $tpl->fillin('ERROR',$config->{'errors'}->{'edit_file_changed'});
 411
 412    $tpl->fillin('FILE',encode_html($virtual));
 413    $tpl->fillin('FILE_URL',escape($virtual));
 414    $tpl->fillin('DIR',encode_html($dir));
 415    $tpl->fillin('DIR_URL',escape($dir));
 416    $tpl->fillin('URL',encode_html(equal_url($config->{'httproot'},$virtual)));
 417    $tpl->fillin('SCRIPT',$script);
 418    $tpl->fillin('MD5SUM',$md5file);
 419    $tpl->fillin('CONTENT',encode_html($content));
 420
 421    $tpl->parse_if_block('error',1);
 422
 423    my $data = header(-type => 'text/html');
 424    $data   .= $tpl->get_template;
 425
 426    $output  = \$data;
 427   }
 428   else
 429   {
 430    if($md5data ne $md5file)
 431    {
 432     seek(FILE,0,0);
 433     truncate(FILE,0);
 434
 435     print FILE $content;
 436    }
 437
 438    $output = ($cgi->param('continue'))
 439            ? devedit_reload({command => 'beginedit', file => $virtual})
 440            : devedit_reload({command => 'show', file => $dir});
 441   }
 442
 443   close(FILE);
 444
 445   return $output;
 446  }
 447
 448  return devedit_reload({command => 'beginedit', file => $virtual});
 449 }
 450
 451 # exec_download()
 452 #
 453 # Execute a HTTP download of a file
 454 #
 455 # Params: 1. Reference to user input hash
 456 #         2. Reference to config hash
 457 #
 458 # Return: Output of the command (Scalar Reference)
 459
 460 sub exec_download($$)
 461 {
 462  my ($data,$config) = @_;
 463  my $physical       = $data->{'physical'};
 464  my $virtual        = $data->{'virtual'};
 465  my $dir            = upper_path($virtual);
 466
 467  return return error($config->{'errors'}->{'no_download'},$dir,{FILE => $virtual}) if((not -r $physical) || (-d $physical || -l $physical));
 468
 469  my $filename = file_name($virtual);
 470
 471  my $output = header(-type => 'application/octet-stream', -attachment => $filename);
 472  $output   .= ${ file_read($physical,1) };
 473
 474  return \$output;
 475 }
 476
 477 # exec_mkfile()
 478 #
 479 # Create a file and return to directory view
 480 #
 481 # Params: 1. Reference to user input hash
 482 #         2. Reference to config hash
 483 #
 484 # Return: Output of the command (Scalar Reference)
 485
 486 sub exec_mkfile($$)
 487 {
 488  my ($data,$config) = @_;
 489  my $new_physical   = $data->{'new_physical'};
 490  my $new_virtual    = $data->{'new_virtual'};
 491  my $dir            = upper_path($new_virtual);
 492  $new_virtual       = encode_html($new_virtual);
 493
 494  if($new_physical)
 495  {
 496   return error($config->{'errors'}->{'file_exists'},$dir,{FILE => $new_virtual}) if(-e $new_physical);
 497
 498   file_create($new_physical) or return error($config->{'errors'}->{'mkfile_failed'},$dir,{FILE => $new_virtual});
 499
 500   if($data->{'cgi'}->param('edit'))
 501   {
 502    return devedit_reload({command => 'beginedit', file => $new_virtual});
 503   }
 504   else
 505   {
 506    return devedit_reload({command => 'show', file => $dir});
 507   }
 508  }
 509  else
 510  {
 511   my $tpl = new Template;
 512   $tpl->read_file($config->{'templates'}->{'mkfile'});
 513
 514   $tpl->fillin('DIR','/');
 515   $tpl->fillin('SCRIPT',$script);
 516
 517   my $output = header(-type => 'text/html');
 518   $output   .= $tpl->get_template;
 519
 520   return \$output;
 521  }
 522 }
 523
 524 # exec_mkdir()
 525 #
 526 # Create a directory and return to directory view
 527 #
 528 # Params: 1. Reference to user input hash
 529 #         2. Reference to config hash
 530 #
 531 # Return: Output of the command (Scalar Reference)
 532
 533 sub exec_mkdir($$)
 534 {
 535  my ($data,$config) = @_;
 536  my $new_physical   = $data->{'new_physical'};
 537  my $new_virtual    = $data->{'new_virtual'};
 538  my $dir            = upper_path($new_virtual);
 539  $new_virtual       = encode_html($new_virtual);
 540
 541  if($new_physical)
 542  {
 543   return error($config->{'errors'}->{'file_exists'},$dir,{FILE => $new_virtual}) if(-e $new_physical);
 544
 545   mkdir($new_physical,0777) or return error($config->{'errors'}->{'mkdir_failed'},$dir,{DIR => $new_virtual});
 546   return devedit_reload({command => 'show', file => $dir});
 547  }
 548  else
 549  {
 550   my $tpl = new Template;
 551   $tpl->read_file($config->{'templates'}->{'mkdir'});
 552
 553   $tpl->fillin('DIR','/');
 554   $tpl->fillin('SCRIPT',$script);
 555
 556   my $output = header(-type => 'text/html');
 557   $output   .= $tpl->get_template;
 558
 559   return \$output;
 560  }
 561 }
 562
 563 # exec_upload()
 564 #
 565 # Process a file upload
 566 #
 567 # Params: 1. Reference to user input hash
 568 #         2. Reference to config hash
 569 #
 570 # Return: Output of the command (Scalar Reference)
 571
 572 sub exec_upload($$)
 573 {
 574  my ($data,$config) = @_;
 575  my $physical       = $data->{'physical'};
 576  my $virtual        = $data->{'virtual'};
 577  my $cgi            = $data->{'cgi'};
 578
 579  return error($config->{'errors'}->{'no_directory'},upper_path($virtual),{FILE => encode_html($virtual)}) unless(-d $physical && not -l $physical);
 580  return error($config->{'errors'}->{'dir_no_create'},$virtual,{DIR => encode_html($virtual)})             unless(-w $physical);
 581
 582  if(my $uploaded_file = $cgi->param('uploaded_file'))
 583  {
 584   if($cgi->param('remote_file'))
 585   {
 586    $uploaded_file = $cgi->param('remote_file');
 587
 588    $uploaded_file =~ s!/!!g;
 589    $uploaded_file =~ s!\\!!g;
 590   }
 591
 592   # Process file upload
 593
 594   my $filename  = file_name($uploaded_file);
 595   my $file_phys = $physical.'/'.$filename;
 596   my $file_virt = encode_html($virtual.$filename);
 597
 598   if(-e $file_phys)
 599   {
 600    return error($config->{'errors'}->{'link_replace'},$virtual)                        if(-l $file_phys);
 601    return error($config->{'errors'}->{'dir_replace'},$virtual)                         if(-d $file_phys);
 602    return error($config->{'errors'}->{'exist_no_write'},$virtual,{FILE => $file_virt}) unless(-w $file_phys);
 603    return error($config->{'errors'}->{'file_exists'},$virtual,{FILE => $file_virt})    unless($cgi->param('overwrite'));
 604   }
 605
 606   my $ascii  = $cgi->param('ascii');
 607   my $handle = $cgi->upload('uploaded_file');
 608
 609   return error($config->{'errors'}->{'invalid_upload'},$virtual) unless($handle);
 610
 611   # Read transferred file and write it to disk
 612
 613   read($handle, my $data, -s $handle);
 614   $data =~ s/\015\012|\012|\015/\n/g if($ascii); # Replace line separators if transferring in ASCII mode
 615   file_save($file_phys,\$data,not $ascii) or return error($config->{'errors'}->{'mkfile_failed'},$virtual,{FILE => $file_virt});
 616
 617   return devedit_reload({command => 'show', file => $virtual});
 618  }
 619  else
 620  {
 621   my $tpl = new Template;
 622   $tpl->read_file($config->{'templates'}->{'upload'});
 623
 624   $tpl->fillin('DIR',encode_html($virtual));
 625   $tpl->fillin('DIR_URL',escape($virtual));
 626   $tpl->fillin('URL',encode_html(equal_url($config->{'httproot'},$virtual)));
 627   $tpl->fillin('SCRIPT',$script);
 628
 629   my $output = header(-type => 'text/html');
 630   $output   .= $tpl->get_template;
 631
 632   return \$output;
 633  }
 634 }
 635
 636 # exec_unpack()
 637 #
 638 # Unpack an archive
 639 #
 640 # Params: 1. Reference to user input hash
 641 #         2. Reference to config hash
 642 #
 643 # Return: Output of the command (Scalar Reference)
 644
 645 sub exec_unpack($$)
 646 {
 647  my ($data,$config) = @_;
 648  my $physical       = $data->{'physical'};
 649  my $virtual        = $data->{'virtual'};
 650  my $dir            = upper_path($virtual);
 651  my $new_physical   = $data->{'new_physical'};
 652  my $new_virtual    = $data->{'new_virtual'};
 653  my $cgi            = $data->{'cgi'};
 654
 655  if($new_physical)
 656  {
 657   archive_unpack($physical,$new_physical);
 658   return devedit_reload({command => 'show', file => $new_virtual});
 659  }
 660  else
 661  {
 662   my $tpl = new Template;
 663   $tpl->read_file($config->{'templates'}->{'unpack'});
 664
 665   $tpl->fillin('FILE',encode_html($virtual));
 666   $tpl->fillin('DIR',encode_html($dir));
 667   $tpl->fillin('DIR_URL',escape($dir));
 668   $tpl->fillin('URL',encode_html(equal_url($config->{'httproot'},$virtual)));
 669   $tpl->fillin('SCRIPT',$script);
 670
 671   my $output = header(-type => 'text/html');
 672   $output   .= $tpl->get_template;
 673
 674   return \$output;
 675  }
 676 }
 677
 678 # exec_copy()
 679 #
 680 # Copy a file and return to directory view
 681 #
 682 # Params: 1. Reference to user input hash
 683 #         2. Reference to config hash
 684 #
 685 # Return: Output of the command (Scalar Reference)
 686
 687 sub exec_copy($$)
 688 {
 689  my ($data,$config) = @_;
 690  my $physical       = $data->{'physical'};
 691  my $virtual        = $data->{'virtual'};
 692  my $dir            = upper_path($virtual);
 693  my $new_physical   = $data->{'new_physical'};
 694
 695  return error($config->{'errors'}->{'link_copy'},$dir) if(-l $physical);
 696  return error($config->{'errors'}->{'no_copy'},$dir)   unless(-r $physical);
 697
 698  if($new_physical)
 699  {
 700   my $new_virtual = multi_string($data->{'new_virtual'});
 701   my $new_dir     = upper_path($new_virtual->{'normal'});
 702
 703   if(-d $physical)
 704   {
 705    return error($config->{'errors'}->{'no_copy'},$dir)                                      unless(-x $physical);
 706    return error($config->{'errors'}->{'file_exists'},$dir,{FILE => $new_virtual->{'html'}}) if(-e $new_physical);
 707    return error($config->{'errors'}->{'dir_copy_self'},$dir)                                if(index($new_virtual->{'normal'},$virtual) == 0);
 708
 709    dir_copy($physical,$new_physical) or return error($config->{'errors'}->{'copy_failed'},$dir,{FILE => encode_html($virtual), NEW_FILE => $new_virtual->{'html'}});
 710    return devedit_reload({command => 'show', file => $new_dir});
 711   }
 712   else
 713   {
 714    if(-e $new_physical)
 715    {
 716     return error($config->{'errors'}->{'link_replace'},$new_dir)                                    if(-l $new_physical);
 717     return error($config->{'errors'}->{'dir_replace'},$new_dir)                                     if(-d $new_physical);
 718     return error($config->{'errors'}->{'exist_no_write'},$new_dir,{FILE => $new_virtual->{'html'}}) unless(-w $new_physical);
 719
 720     if(not $data->{'cgi'}->param('confirmed'))
 721     {
 722      my $tpl = new Template;
 723      $tpl->read_file($config->{'templates'}->{'confirm_replace'});
 724
 725      $tpl->fillin('FILE',encode_html($virtual));
 726      $tpl->fillin('NEW_FILE',$new_virtual->{'html'});
 727      $tpl->fillin('NEW_FILENAME',file_name($new_virtual->{'html'}));
 728      $tpl->fillin('NEW_DIR',encode_html($new_dir));
 729      $tpl->fillin('DIR',encode_html($dir));
 730      $tpl->fillin('DIR_URL',escape($dir));
 731
 732      $tpl->fillin('COMMAND','copy');
 733      $tpl->fillin('URL',encode_html(equal_url($config->{'httproot'},$virtual)));
 734      $tpl->fillin('SCRIPT',$script);
 735
 736      my $output = header(-type => 'text/html');
 737      $output   .= $tpl->get_template;
 738
 739      return \$output;
 740     }
 741    }
 742
 743    copy($physical,$new_physical) or return error($config->{'errors'}->{'copy_failed'},$dir,{FILE => encode_html($virtual), NEW_FILE => $new_virtual->{'html'}});
 744    return devedit_reload({command => 'show', file => $new_dir});
 745   }
 746  }
 747  else
 748  {
 749   if(-d $physical)
 750   {
 751    my $tpl = new Template;
 752    $tpl->read_file($config->{'templates'}->{'copydir'});
 753
 754    $tpl->fillin('FILE',encode_html($virtual));
 755    $tpl->fillin('DIR',encode_html($dir));
 756    $tpl->fillin('DIR_URL',escape($dir));
 757    $tpl->fillin('URL',encode_html(equal_url($config->{'httproot'},$virtual)));
 758    $tpl->fillin('SCRIPT',$script);
 759
 760    my $output = header(-type => 'text/html');
 761    $output   .= $tpl->get_template;
 762
 763    return \$output;
 764   }
 765   else
 766   {
 767    my $tpl = new Template;
 768    $tpl->read_file($config->{'templates'}->{'copyfile'});
 769
 770    $tpl->fillin('FILE',encode_html($virtual));
 771    $tpl->fillin('DIR',encode_html($dir));
 772    $tpl->fillin('DIR_URL',escape($dir));
 773    $tpl->fillin('URL',encode_html(equal_url($config->{'httproot'},$virtual)));
 774    $tpl->fillin('SCRIPT',$script);
 775
 776    my $output = header(-type => 'text/html');
 777    $output   .= $tpl->get_template;
 778
 779    return \$output;
 780   }
 781  }
 782 }
 783
 784 # exec_rename()
 785 #
 786 # Rename/move a file and return to directory view
 787 #
 788 # Params: 1. Reference to user input hash
 789 #         2. Reference to config hash
 790 #
 791 # Return: Output of the command (Scalar Reference)
 792
 793 sub exec_rename($$)
 794 {
 795  my ($data,$config) = @_;
 796  my $physical       = $data->{'physical'};
 797  my $virtual        = $data->{'virtual'};
 798  my $dir            = upper_path($virtual);
 799  my $new_physical   = $data->{'new_physical'};
 800
 801  return error($config->{'errors'}->{'rename_root'},'/') if($virtual eq '/');
 802  return error($config->{'errors'}->{'no_rename'},$dir)  unless(-w upper_path($physical));
 803
 804  if($new_physical)
 805  {
 806   my $new_virtual = multi_string($data->{'new_virtual'});
 807   my $new_dir     = upper_path($new_virtual->{'normal'});
 808
 809   if(-e $new_physical)
 810   {
 811    return error($config->{'errors'}->{'dir_replace'},$new_dir)                           if(-d $new_physical && not -l $new_physical);
 812    return error($config->{'errors'}->{'exist_no_write'},$new_dir,{FILE => $new_virtual}) unless(-w $new_physical);
 813
 814    if(not $data->{'cgi'}->param('confirmed'))
 815    {
 816     my $tpl = new Template;
 817     $tpl->read_file($config->{'templates'}->{'confirm_replace'});
 818
 819     $tpl->fillin('FILE',encode_html($virtual));
 820     $tpl->fillin('NEW_FILE',$new_virtual->{'html'});
 821     $tpl->fillin('NEW_FILENAME',file_name($new_virtual->{'html'}));
 822     $tpl->fillin('NEW_DIR',encode_html($new_dir));
 823     $tpl->fillin('DIR',encode_html($dir));
 824
 825     $tpl->fillin('COMMAND','rename');
 826     $tpl->fillin('URL',encode_html(equal_url($config->{'httproot'},$virtual)));
 827     $tpl->fillin('SCRIPT',$script);
 828
 829     my $output = header(-type => 'text/html');
 830     $output   .= $tpl->get_template;
 831
 832     return \$output;
 833    }
 834   }
 835
 836   move($physical,$new_physical) or return error($config->{'errors'}->{'rename_failed'},$dir,{FILE => encode_html($virtual), NEW_FILE => $new_virtual->{'html'}});
 837   return devedit_reload({command => 'show', file => $new_dir});
 838  }
 839  else
 840  {
 841   my $tpl = new Template;
 842   $tpl->read_file($config->{'templates'}->{'renamefile'});
 843
 844   $tpl->fillin('FILE',encode_html($virtual));
 845   $tpl->fillin('DIR',encode_html($dir));
 846   $tpl->fillin('DIR_URL',escape($dir));
 847   $tpl->fillin('URL',encode_html(equal_url($config->{'httproot'},$virtual)));
 848   $tpl->fillin('SCRIPT',$script);
 849
 850   my $output = header(-type => 'text/html');
 851   $output   .= $tpl->get_template;
 852
 853   return \$output;
 854  }
 855 }
 856
 857 # exec_remove()
 858 #
 859 # Remove a file or a directory and return to directory view
 860 #
 861 # Params: 1. Reference to user input hash
 862 #         2. Reference to config hash
 863 #
 864 # Return: Output of the command (Scalar Reference)
 865
 866 sub exec_remove($$)
 867 {
 868  my ($data,$config) = @_;
 869  my $physical       = $data->{'physical'};
 870  my $virtual        = $data->{'virtual'};
 871  my $dir            = upper_path($virtual);
 872
 873  return error($config->{'errors'}->{'remove_root'},'/') if($virtual eq '/');
 874  return error($config->{'errors'}->{'no_delete'},$dir)  unless(-w upper_path($physical));
 875
 876  if(-d $physical && not -l $physical)
 877  {
 878   # Remove a directory
 879
 880   if($data->{'cgi'}->param('confirmed'))
 881   {
 882    rmtree($physical);
 883    return devedit_reload({command => 'show', file => $dir});
 884   }
 885   else
 886   {
 887    my $tpl = new Template;
 888    $tpl->read_file($config->{'templates'}->{'confirm_rmdir'});
 889
 890    $tpl->fillin('DIR',encode_html($virtual));
 891    $tpl->fillin('DIR_URL',escape($virtual));
 892    $tpl->fillin('UPPER_DIR',encode_html($dir));
 893    $tpl->fillin('UPPER_DIR_URL',escape($dir));
 894    $tpl->fillin('URL',encode_html(equal_url($config->{'httproot'},$virtual)));
 895    $tpl->fillin('SCRIPT',$script);
 896
 897    my $output = header(-type => 'text/html');
 898    $output   .= $tpl->get_template;
 899
 900    return \$output;
 901   }
 902  }
 903  else
 904  {
 905   # Remove a file
 906
 907   if($data->{'cgi'}->param('confirmed'))
 908   {
 909    unlink($physical) or return error($config->{'errors'}->{'delete_failed'},$dir,{FILE => $virtual});
 910    return devedit_reload({command => 'show', file => $dir});
 911   }
 912   else
 913   {
 914    my $tpl = new Template;
 915    $tpl->read_file($config->{'templates'}->{'confirm_rmfile'});
 916
 917    $tpl->fillin('FILE',encode_html($virtual));
 918    $tpl->fillin('FILE_URL',escape($virtual));
 919    $tpl->fillin('DIR',encode_html($dir));
 920    $tpl->fillin('DIR_URL',escape($dir));
 921    $tpl->fillin('URL',encode_html(equal_url($config->{'httproot'},$virtual)));
 922    $tpl->fillin('SCRIPT',$script);
 923
 924    my $output = header(-type => 'text/html');
 925    $output   .= $tpl->get_template;
 926
 927    return \$output;
 928   }
 929  }
 930 }
 931
 932 # exec_remove_multi()
 933 #
 934 # Remove a file or a directory and return to directory view
 935 #
 936 # Params: 1. Reference to user input hash
 937 #         2. Reference to config hash
 938 #
 939 # Return: Output of the command (Scalar Reference)
 940
 941 sub exec_remove_multi($$)
 942 {
 943  my ($data,$config) = @_;
 944  my $physical       = $data->{'physical'};
 945  my $virtual        = $data->{'virtual'};
 946  my $cgi            = $data->{'cgi'};
 947
 948  my @files = $cgi->param('files');#
 949  my @new_files;
 950
 951  if(@files)
 952  {
 953   foreach my $file(@files)
 954   {
 955    # Filter out some "bad" files (e.g. files going up in the
 956    # directory hierarchy or files containing slashes (it's too
 957    # dangerous...)
 958
 959    next if($file =~ m!^\.+$!);
 960    next if($file =~ m!/!);
 961    next if($file =~ m!\\!);
 962
 963    push(@new_files,$file);
 964   }
 965  }
 966
 967  if(@new_files)
 968  {
 969   if($cgi->param('confirmed'))
 970   {
 971    my @success;
 972    my @failed;
 973
 974    foreach my $file(@new_files)
 975    {
 976     my $file_path = clean_path($physical.'/'.$file);
 977
 978     if(-e $file_path)
 979     {
 980      if(-d $file_path && not -l $file_path)
 981      {
 982       # Remove a directory
 983
 984       if(rmtree($file_path))
 985       {
 986        push(@success,clean_path($file));
 987       }
 988       else
 989       {
 990        push(@failed,clean_path($file));
 991       }
 992      }
 993      else
 994      {
 995       # Remove a file
 996
 997       if(unlink($file_path))
 998       {
 999        push(@success,clean_path($file));
1000       }
1001       else
1002       {
1003        push(@failed,clean_path($file));
1004       }
1005      }
1006     }
1007     else
1008     {
1009      push(@failed,clean_path($file));
1010     }
1011    }
1012
1013    my $tpl = new Template;
1014    $tpl->read_file($config->{'templates'}->{'rmmulti'});
1015
1016    if(scalar(@success) > 0)
1017    {
1018     if(scalar(@success) == scalar(@new_files) && scalar(@failed) == 0)
1019     {
1020      return devedit_reload({command => 'show', file => $virtual});
1021     }
1022     else
1023     {
1024      $tpl->parse_if_block('success',1);
1025
1026      foreach my $file_success(@success)
1027      {
1028       $tpl->add_loop_data('SUCCESS',{FILE => encode_html($file_success),
1029                                      FILE_PATH => encode_html(clean_path($virtual.'/'.$file_success))});
1030      }
1031
1032      $tpl->parse_loop('SUCCESS');
1033     }
1034    }
1035    else
1036    {
1037     $tpl->parse_if_block('success',0);
1038    }
1039
1040    if(scalar(@failed) > 0)
1041    {
1042     $tpl->parse_if_block('failed',1);
1043
1044     foreach my $file_failed(@failed)
1045     {
1046      $tpl->add_loop_data('FAILED',{FILE => encode_html($file_failed),
1047                                    FILE_PATH => encode_html(clean_path($virtual.'/'.$file_failed))});
1048     }
1049
1050     $tpl->parse_loop('FAILED');
1051    }
1052    else
1053    {
1054     $tpl->parse_if_block('failed',0);
1055    }
1056
1057
1058    $tpl->fillin('DIR',encode_html($virtual));
1059    $tpl->fillin('SCRIPT',$script);
1060
1061    my $output = header(-type => 'text/html');
1062    $output   .= $tpl->get_template;
1063
1064    return \$output;
1065   }
1066   else
1067   {
1068    my $tpl = new Template;
1069    $tpl->read_file($config->{'templates'}->{'confirm_rmmulti'});
1070
1071    foreach my $file(@new_files)
1072    {
1073     $tpl->add_loop_data('FILES',{FILE => encode_html($file),
1074                                  FILE_PATH => encode_html(clean_path($virtual.'/'.$file))});
1075    }
1076
1077    $tpl->parse_loop('FILES');
1078
1079    $tpl->fillin('COUNT',scalar(@new_files));
1080
1081    $tpl->fillin('DIR',encode_html($virtual));
1082    $tpl->fillin('SCRIPT',$script);
1083
1084    my $output = header(-type => 'text/html');
1085    $output   .= $tpl->get_template;
1086
1087    return \$output;
1088   }
1089  }
1090  else
1091  {
1092   return devedit_reload({command => 'show', file => $virtual});
1093  }
1094 }
1095
1096 # exec_chprop()
1097 #
1098 # Change the mode and the group of a file or a directory
1099 #
1100 # Params: 1. Reference to user input hash
1101 #         2. Reference to config hash
1102 #
1103 # Return: Output of the command (Scalar Reference)
1104
1105 sub exec_chprop($$)
1106 {
1107  my ($data,$config) = @_;
1108  my $physical       = $data->{'physical'};
1109  my $virtual        = $data->{'virtual'};
1110  my $dir            = upper_path($virtual);
1111
1112  return error($config->{'errors'}->{'no_users'},$dir,{FILE => encode_html($virtual)})  unless($users);
1113  return error($config->{'errors'}->{'chprop_root'},'/')                                if($virtual eq '/');
1114  return error($config->{'errors'}->{'not_owner'},$dir,{FILE => encode_html($virtual)}) unless(-o $physical);
1115  return error($config->{'errors'}->{'chprop_link'},$dir)                               if(-l $physical);
1116
1117  my $cgi   = $data->{'cgi'};
1118  my $mode  = $cgi->param('mode');
1119  my $group = $cgi->param('group');
1120
1121  if($mode || $group)
1122  {
1123   if($mode)
1124   {
1125    # Change the mode
1126
1127    return error($config->{'errors'}->{'invalid_mode'},$dir) unless($mode =~ /^[0-7]{3,}$/);
1128    chmod(oct($mode),$physical);
1129   }
1130
1131   if($group)
1132   {
1133    # Change the group using the `chgrp` system command
1134
1135    return error($config->{'errors'}->{'invalid_group'},$dir,{GROUP => encode_html($group)}) unless($group =~ /^[a-z0-9_]+[a-z0-9_-]*$/i);
1136    system('chgrp',$group,$physical);
1137   }
1138
1139   return devedit_reload({command => 'show', file => $dir});
1140  }
1141  else
1142  {
1143   # Display the form
1144
1145   my @stat = stat($physical);
1146   my $mode = $stat[2];
1147   my $gid  = $stat[5];
1148
1149   my $tpl = new Template;
1150   $tpl->read_file($config->{'templates'}->{'chprop'});
1151
1152   # Insert file properties into the template
1153
1154   $tpl->fillin('MODE_OCTAL',substr(sprintf('%04o',$mode),-4));
1155   $tpl->fillin('MODE_STRING',mode_string($mode));
1156   $tpl->fillin('GID',$gid);
1157
1158   if(my $group = getgrgid($gid))
1159   {
1160    $tpl->fillin('GROUP',encode_html($group));
1161    $tpl->parse_if_block('group_detected',1);
1162   }
1163   else
1164   {
1165    $tpl->parse_if_block('group_detected',0);
1166   }
1167
1168   # Insert other information
1169
1170   $tpl->fillin('FILE',encode_html($virtual));
1171   $tpl->fillin('FILE_URL',escape($virtual));
1172   $tpl->fillin('DIR',encode_html($dir));
1173   $tpl->fillin('DIR_URL',escape($dir));
1174   $tpl->fillin('URL',encode_html(equal_url($config->{'httproot'},$virtual)));
1175   $tpl->fillin('SCRIPT',$script);
1176
1177   my $output = header(-type => 'text/html');
1178   $output   .= $tpl->get_template;
1179
1180   return \$output;
1181  }
1182 }
1183
1184 # exec_about()
1185 #
1186 # Display some information about Dev-Editor
1187 #
1188 # Params: 1. Reference to user input hash
1189 #         2. Reference to config hash
1190 #
1191 # Return: Output of the command (Scalar Reference)
1192
1193 sub exec_about($$)
1194 {
1195  my ($data,$config) = @_;
1196
1197  my $tpl = new Template;
1198  $tpl->read_file($config->{'templates'}->{'about'});
1199
1200  $tpl->fillin('SCRIPT',$script);
1201
1202  # Dev-Editor's version number
1203
1204  $tpl->fillin('VERSION',$data->{'version'});
1205
1206  # Some path information
1207
1208  $tpl->fillin('SCRIPT_PHYS',encode_html($ENV{'SCRIPT_FILENAME'}));
1209  $tpl->fillin('CONFIG_PATH',encode_html($data->{'configfile'}));
1210  $tpl->fillin('FILE_ROOT',  encode_html($config->{'fileroot'}));
1211  $tpl->fillin('HTTP_ROOT',  encode_html($config->{'httproot'}));
1212
1213  # Perl
1214
1215  $tpl->fillin('PERL_PROG',encode_html($^X));
1216  $tpl->fillin('PERL_VER', sprintf('%vd',$^V));
1217
1218  # Information about the server
1219
1220  $tpl->fillin('HTTPD',encode_html($ENV{'SERVER_SOFTWARE'}));
1221  $tpl->fillin('OS',   encode_html($^O));
1222  $tpl->fillin('TIME', encode_html(strftime($config->{'timeformat'},($config->{'use_gmt'}) ? gmtime : localtime)));
1223
1224  $tpl->parse_if_block('gmt',$config->{'use_gmt'});
1225
1226  # Process information
1227
1228  $tpl->fillin('PID',$$);
1229
1230  # The following information is only available on systems supporting
1231  # users and groups
1232
1233  if($users)
1234  {
1235   # Dev-Editor is running on a system which allows users and groups
1236   # So we display the user and the group of our process
1237
1238   my $uid = POSIX::getuid;
1239   my $gid = POSIX::getgid;
1240
1241   $tpl->parse_if_block('users',1);
1242
1243   # IDs of user and group
1244
1245   $tpl->fillin('UID',$uid);
1246   $tpl->fillin('GID',$gid);
1247
1248   # Names of user and group
1249
1250   if(my $user = getpwuid($uid))
1251   {
1252    $tpl->fillin('USER',encode_html($user));
1253    $tpl->parse_if_block('user_detected',1);
1254   }
1255   else
1256   {
1257    $tpl->parse_if_block('user_detected',0);
1258   }
1259
1260   if(my $group = getgrgid($gid))
1261   {
1262    $tpl->fillin('GROUP',encode_html($group));
1263    $tpl->parse_if_block('group_detected',1);
1264   }
1265   else
1266   {
1267    $tpl->parse_if_block('group_detected',0);
1268   }
1269
1270   # Process umask
1271
1272   $tpl->fillin('UMASK',sprintf('%04o',umask));
1273  }
1274  else
1275  {
1276   $tpl->parse_if_block('users',0);
1277  }
1278
1279  my $output = header(-type => 'text/html');
1280  $output   .= $tpl->get_template;
1281
1282  return \$output;
1283 }
1284
1285 # it's true, baby ;-)
1286
1287 1;
1288
1289 #
1290 ### End ###