222 lines
6.8 KiB
C
222 lines
6.8 KiB
C
/**
|
|
* sesimos - secure, simple, modern web server
|
|
* @brief URI and path handlers
|
|
* @file src/lib/uri.c
|
|
* @author Lorenz Stechauner
|
|
* @date 2020-12-13
|
|
*/
|
|
|
|
#include "uri.h"
|
|
#include "utils.h"
|
|
|
|
#include <errno.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
|
|
|
|
int path_is_directory(const char *path) {
|
|
int e = errno;
|
|
struct stat stat_buf;
|
|
int ret = stat(path, &stat_buf);
|
|
errno = e;
|
|
return ret == 0 && S_ISDIR(stat_buf.st_mode) != 0;
|
|
}
|
|
|
|
int path_is_file(const char *path) {
|
|
int e = errno;
|
|
struct stat stat_buf;
|
|
int ret = stat(path, &stat_buf);
|
|
errno = e;
|
|
return ret == 0 && S_ISDIR(stat_buf.st_mode) == 0;
|
|
}
|
|
|
|
int path_exists(const char *path) {
|
|
int e = errno;
|
|
struct stat stat_buf;
|
|
int ret = stat(path, &stat_buf);
|
|
errno = e;
|
|
return ret == 0;
|
|
}
|
|
|
|
int uri_init(http_uri *uri, const char *webroot, const char *uri_str, int dir_mode) {
|
|
char buf0[1024], buf1[1024], buf2[1024], buf3[1024], buf4[1024];
|
|
int p_len;
|
|
|
|
uri->webroot = NULL;
|
|
uri->req_path = NULL;
|
|
uri->path = NULL;
|
|
uri->pathinfo = NULL;
|
|
uri->query = NULL;
|
|
uri->filename = NULL;
|
|
uri->uri = NULL;
|
|
uri->meta = NULL;
|
|
uri->is_static = 1;
|
|
uri->is_dir = 0;
|
|
|
|
if (uri_str[0] != '/')
|
|
return 1;
|
|
|
|
uri->webroot = malloc(strlen(webroot) + 1);
|
|
strcpy(uri->webroot, webroot);
|
|
|
|
char *query = strchr(uri_str, '?');
|
|
if (query == NULL) {
|
|
uri->query = NULL;
|
|
} else {
|
|
query[0] = 0;
|
|
query++;
|
|
long size = (long) strlen(query) + 1;
|
|
uri->query = malloc(size);
|
|
strcpy(uri->query, query);
|
|
}
|
|
|
|
long size = (long) strlen(uri_str) + 1;
|
|
uri->req_path = malloc(size);
|
|
url_decode(uri_str, uri->req_path, &size);
|
|
if (query != NULL) query[-1] = '?';
|
|
|
|
if (strcontains(uri->req_path, "/../") || strcontains(uri->req_path, "/./"))
|
|
return 2;
|
|
|
|
size = (long) strlen(uri->req_path) + 1;
|
|
uri->path = malloc(size);
|
|
uri->pathinfo = malloc(size);
|
|
|
|
char last = 0;
|
|
for (int i = 0, j = 0; i < size - 1; i++) {
|
|
char ch = uri->req_path[i];
|
|
if (last != '/' || ch != '/') {
|
|
uri->path[j++] = ch;
|
|
uri->path[j] = 0;
|
|
}
|
|
last = ch;
|
|
}
|
|
|
|
if (dir_mode == URI_DIR_MODE_NO_VALIDATION)
|
|
return 0;
|
|
|
|
if (uri->path[strlen(uri->path) - 1] == '/') {
|
|
uri->path[strlen(uri->path) - 1] = 0;
|
|
strcpy(uri->pathinfo, "/");
|
|
} else {
|
|
strcpy(uri->pathinfo, "");
|
|
}
|
|
|
|
if (!path_exists(uri->webroot))
|
|
return 3;
|
|
|
|
while (1) {
|
|
sprintf(buf0, "%s%s", uri->webroot, uri->path);
|
|
p_len = snprintf(buf1, sizeof(buf1), "%s.xhtml", buf0);
|
|
if (p_len < 0 || p_len >= sizeof(buf1)) return -1;
|
|
p_len = snprintf(buf2, sizeof(buf2), "%s.html", buf0);
|
|
if (p_len < 0 || p_len >= sizeof(buf2)) return -1;
|
|
p_len = snprintf(buf3, sizeof(buf3), "%s.php", buf0);
|
|
if (p_len < 0 || p_len >= sizeof(buf3)) return -1;
|
|
|
|
if (strlen(uri->path) <= 1 || path_exists(buf0) || path_is_file(buf1) || path_is_file(buf2) || path_is_file(buf3))
|
|
break;
|
|
|
|
char *ptr;
|
|
parent_dir:
|
|
ptr = strrchr(uri->path, '/');
|
|
size = (long) strlen(ptr);
|
|
sprintf(buf4, "%.*s%s", (int) size, ptr, uri->pathinfo);
|
|
strcpy(uri->pathinfo, buf4);
|
|
ptr[0] = 0;
|
|
}
|
|
if (uri->pathinfo[0] != 0) {
|
|
sprintf(buf4, "%s", uri->pathinfo + 1);
|
|
strcpy(uri->pathinfo, buf4);
|
|
}
|
|
|
|
if (path_is_file(buf0)) {
|
|
uri->filename = malloc(strlen(buf0) + 1);
|
|
strcpy(uri->filename, buf0);
|
|
long len = (long) strlen(uri->path);
|
|
if (strends(uri->path, ".xhtml")) {
|
|
uri->path[len - 6] = 0;
|
|
} else if (strends(uri->path, ".html")) {
|
|
uri->path[len - 5] = 0;
|
|
} else if (strends(uri->path, ".php")) {
|
|
uri->path[len - 4] = 0;
|
|
uri->is_static = 0;
|
|
}
|
|
} else if (path_is_file(buf1)) {
|
|
uri->filename = malloc(strlen(buf1) + 1);
|
|
strcpy(uri->filename, buf1);
|
|
} else if (path_is_file(buf2)) {
|
|
uri->filename = malloc(strlen(buf2) + 1);
|
|
strcpy(uri->filename, buf2);
|
|
} else if (path_is_file(buf3)) {
|
|
uri->filename = malloc(strlen(buf3) + 1);
|
|
strcpy(uri->filename, buf3);
|
|
uri->is_static = 0;
|
|
} else {
|
|
uri->is_dir = 1;
|
|
strcpy(uri->path + strlen(uri->path), "/");
|
|
sprintf(buf1, "%s%s" "index.xhtml", uri->webroot, uri->path);
|
|
sprintf(buf2, "%s%s" "index.html", uri->webroot, uri->path);
|
|
sprintf(buf3, "%s%s" "index.php", uri->webroot, uri->path);
|
|
if (path_is_file(buf3) && uri->pathinfo[0] != 0) {
|
|
uri->filename = malloc(strlen(buf3) + 1);
|
|
strcpy(uri->filename, buf3);
|
|
uri->is_static = 0;
|
|
} else if (path_is_file(buf1)) {
|
|
uri->filename = malloc(strlen(buf1) + 1);
|
|
strcpy(uri->filename, buf1);
|
|
} else if (path_is_file(buf2)) {
|
|
uri->filename = malloc(strlen(buf2) + 1);
|
|
strcpy(uri->filename, buf2);
|
|
} else if (path_is_file(buf3)) {
|
|
uri->filename = malloc(strlen(buf3) + 1);
|
|
strcpy(uri->filename, buf3);
|
|
uri->is_static = 0;
|
|
} else {
|
|
if (dir_mode == URI_DIR_MODE_FORBIDDEN) {
|
|
uri->is_static = 1;
|
|
} else if (dir_mode == URI_DIR_MODE_LIST) {
|
|
uri->is_static = 0;
|
|
} else if (dir_mode == URI_DIR_MODE_INFO) {
|
|
if (strlen(uri->path) > 1) {
|
|
uri->path[strlen(uri->path) - 1] = 0;
|
|
sprintf(buf0, "/%s", uri->pathinfo);
|
|
strcpy(uri->pathinfo, buf0);
|
|
goto parent_dir;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
if (strends(uri->path, "/index"))
|
|
uri->path[strlen(uri->path) - 5] = 0;
|
|
|
|
if (streq(uri->pathinfo, "index.php") || streq(uri->pathinfo, "index.html") || streq(uri->pathinfo, "index.xhtml"))
|
|
uri->pathinfo[0] = 0;
|
|
|
|
sprintf(buf4, "%s%s%s%s%s", uri->path,
|
|
(strlen(uri->pathinfo) == 0 || uri->path[strlen(uri->path) - 1] == '/') ? "" : "/",
|
|
uri->pathinfo, uri->query != NULL ? "?" : "", uri->query != NULL ? uri->query : "");
|
|
uri->uri = malloc(strlen(buf4) + 1);
|
|
strcpy(uri->uri, buf4);
|
|
|
|
return 0;
|
|
}
|
|
|
|
void uri_free(http_uri *uri) {
|
|
if (uri->webroot != NULL) free(uri->webroot);
|
|
if (uri->req_path != NULL) free(uri->req_path);
|
|
if (uri->path != NULL) free(uri->path);
|
|
if (uri->pathinfo != NULL) free(uri->pathinfo);
|
|
if (uri->query != NULL) free(uri->query);
|
|
if (uri->filename != NULL) free(uri->filename);
|
|
if (uri->uri != NULL) free(uri->uri);
|
|
uri->webroot = NULL;
|
|
uri->req_path = NULL;
|
|
uri->path = NULL;
|
|
uri->pathinfo = NULL;
|
|
uri->query = NULL;
|
|
uri->filename = NULL;
|
|
uri->uri = NULL;
|
|
}
|