Contents of /trunk/mkinitrd-magellan/busybox/networking/httpd_index_cgi_example

#!/bin/sh
# This CGI creates directory index.
# Put it into cgi-bin/index.cgi and chmod 0755.
#
# Problems:
# * Unsafe wrt weird filenames with <>"'& etc...
# * Not efficient: calls stat (program, not syscall) for each file
# * Probably requires bash
#
# If you want speed and safety, you need to code it in C

# Must start with '/'
test "${QUERY_STRING:0:1}" = "/" || exit 1
# /../ is not allowed
test "${QUERY_STRING%/../*}" = "$QUERY_STRING" || exit 1
test "${QUERY_STRING%/..}" = "$QUERY_STRING" || exit 1

# Outta cgi-bin...
cd .. 2>/dev/null || exit 1
# Strip leading '/', go to target dir
cd "${QUERY_STRING:1}" 2>/dev/null || exit 1

f=`dirname "$QUERY_STRING"`
test "$f" = "/" && f=""

# Pipe thru dd (need to write header as single write(),
# or else httpd doesn't see "Content-type: text/html"
# in first read() and decides that it is not html)
{
printf "%s" \
$'HTTP/1.0 200 OK\r\n'\
$'Content-type: text/html\r\n\r\n'\
"<html><head><title>Index of $QUERY_STRING</title></head>"$'\r\n'\
"<body><h1>Index of $QUERY_STRING</h1><pre>"$'\r\n'\
$'<table width=100%>\r\n'\
$'<col><col><col width=0*>\r\n'\
$'<tr><th>Name<th align=right>Last modified<th align=right>Size\r\n'\
\
"<tr><td><a href='$f/'>..</a><td><td>"$'\r\n'

IFS='#'
for f in *; do
    # Guard against empty dirs...
    test -e "$f" && \
    stat -c "%F#%s#%z" "$f" | {
	read type size cdt junk
	dir=''
	test "$type" = "directory" && dir='/'
	cdt="${cdt//.*}" # no fractional seconds
	cdt="${cdt// /&nbsp;}" # prevent wrapping around space
	printf "%s" "<tr><td><a href='$f$dir'>$f</a><td align=right>$cdt<td align=right>$size"$'\r\n'
    }
done
printf "</table></pre><hr></body></html>"$'\r\n'
} | dd bs=4k
1	#!/bin/sh
2	# This CGI creates directory index.
3	# Put it into cgi-bin/index.cgi and chmod 0755.
4	#
5	# Problems:
6	# * Unsafe wrt weird filenames with <>"'& etc...
7	# * Not efficient: calls stat (program, not syscall) for each file
8	# * Probably requires bash
9	#
10	# If you want speed and safety, you need to code it in C
11
12	# Must start with '/'
13	test "${QUERY_STRING:0:1}" = "/" \|\| exit 1
14	# /../ is not allowed
15	test "${QUERY_STRING%/../*}" = "$QUERY_STRING" \|\| exit 1
16	test "${QUERY_STRING%/..}" = "$QUERY_STRING" \|\| exit 1
17
18	# Outta cgi-bin...
19	cd .. 2>/dev/null \|\| exit 1
20	# Strip leading '/', go to target dir
21	cd "${QUERY_STRING:1}" 2>/dev/null \|\| exit 1
22
23	f=`dirname "$QUERY_STRING"`
24	test "$f" = "/" && f=""
25
26	# Pipe thru dd (need to write header as single write(),
27	# or else httpd doesn't see "Content-type: text/html"
28	# in first read() and decides that it is not html)
29	{
30	printf "%s" \
31	$'HTTP/1.0 200 OK\r\n'\
32	$'Content-type: text/html\r\n\r\n'\
33	"<html><head><title>Index of $QUERY_STRING</title></head>"$'\r\n'\
34	"<body><h1>Index of $QUERY_STRING</h1><pre>"$'\r\n'\
35	$'<table width=100%>\r\n'\
36	$'<col><col><col width=0*>\r\n'\
37	$'<tr><th>Name<th align=right>Last modified<th align=right>Size\r\n'\
38	\
39	"<tr><td><a href='$f/'>..</a><td><td>"$'\r\n'
40
41	IFS='#'
42	for f in *; do
43	# Guard against empty dirs...
44	test -e "$f" && \
45	stat -c "%F#%s#%z" "$f" \| {
46	read type size cdt junk
47	dir=''
48	test "$type" = "directory" && dir='/'
49	cdt="${cdt//.*}" # no fractional seconds
50	cdt="${cdt// / }" # prevent wrapping around space
51	printf "%s" "<tr><td><a href='$f$dir'>$f</a><td align=right>$cdt<td align=right>$size"$'\r\n'
52	}
53	done
54	printf "</table></pre><hr></body></html>"$'\r\n'
55	} \| dd bs=4k