cgi_cgi.c

Go to the documentation of this file.

/******************************************************************************/
/* cgi_cgi.c © Copyright 1998-2005 by Raosoft Inc. All Rights Reserved.       */
/*                                                                            */
/* You may use and modify this file for your own use, but may not distribute  */
/* it or derivative works without the prior written consent of Raosoft, Inc.  */
/*                                                                            */
/* If you choose to share your modifications with Raosoft, Inc. the company   */
/* will attempt to incorporate them into future versions of this file.        */
/*                                                                            */
/* This software is provided "as is," and Raosoft makes no warranty, express  */
/* or implied, of fitness for a particular application. Every measure has been*/
/* taken to anticipate risks inherent to computer networks, but we cannot     */
/* guarantee safety or reliability of this program in every situation.        */
/*                                                                            */
/******************************************************************************/

#include "cgi.h"

#ifndef VPWSCGI

#ifdef EBCDIC
static unsigned char ebcdic2ascii[] = {
0,  1,  2,  3, 55, 45, 46, 47, 22,  5, 21, 11, 12, 13, 14,
15,16, 17, 18, 19, 60, 61, 50, 38, 24, 25, 63, 39, 28, 29, 30,
31,64, 90,127,123, 91,108, 80,125, 77, 93, 92, 78,107, 96,
75,97,240,241,242,243,244,245,246,247,248,249,122,
94,76,126,110,111,124,193,194,195,196,197,198,199,200,201,209,210,211,212,213,
214,215,216,217,226,227,228,229,230,231,232,233,173,224,189,
95,109,121,129,130,131,132,133,134,135,136,137,145,146,147,148,149,150,151,152,
153,162,163,164,165,166,167,168,169,192,79,208,161,
7,32, 33, 34, 35, 36, 37,  6, 23, 40, 41, 42, 43, 44,  9, 10,27,48, 49,
26, 51, 52, 53, 54,  8, 56, 57, 58, 59,  4,
20,62,255,65,170,74,177,159,178,106,181,187,180,154,138,176,202,175,188,144,
143,234,250,190,160,182,179,157,218,155,139,183,184,185,171,100,101,
98,102,99,103,158,104,116,113,114,115,120,117,118,119,172,105,237,238,235,
239,236,191,128,253,254,251,252,186,174,
89,68, 69, 66, 70, 67, 71,156, 72, 84, 81, 82, 83, 88, 85,
86,87,140,73,205,206,203,207,204,225,112,221,222,219,220,141,142,223
};

static unsigned char ascii2ebcdic[] = {
0,1,2,3,236,9,202,127,226,210,211,11,12,13,14,169,16,17,18,19,
239,197,8,203,24,25,220,216,28,29,30,31,183,184,185,187,196,10,23,27,
204,205,207,208,209,5,6,7,217,218,22,221,222,223,224,4,227,229,233,235,
176,177,158,26,32,201,131,132,133,160,242,134,135,164,213,46,60,40,43,179,
38,130,136,137,138,161,140,139,141,225,33,36,42,41,59,94,45,47,178,142,
180,181,182,143,128,165,124,44,37,95,62,63,186,144,188,189,190,243,192,193,
194,96,58,35,64,39,61,34,195,97,98,99,100,101,102,103,104,105,174,175,
198,199,200,241,248,106,107,108,109,110,111,112,113,114,166,167,145,206,146,15,
230,126,115,116,117,118,119,120,121,122,173,168,212,91,214,215,155,156,157,250,
159,21,20,172,171,252,170,254,228,93,191,231,123,65,66,67,68,69,70,71,
72,73,232,147,148,149,162,237,125,74,75,76,77,78,79,80,81,82,238,150,
129,151,163,152,92,240,83,84,85,86,87,88,89,90,253,245,153,247,246,249,
48,49,50,51,52,53,54,55,56,57,219,251,154,244,234,255
};
#endif

void Translate(char*s,unsigned char* list)
{
  unsigned char * x = (unsigned char*)s;
  while (*x) {*x = list[*x]; x++;}
}

void LogConnection(char* program,char* host)
{
 char Date[14],Time[14];

 GetTime(Date,Time,0);
 LogMessage("Run\tPROGRAM=");
 LogMessage(program);
 LogMessage(",HOST=");
 LogMessage(host);
 LogMessage(",DATE=");
 LogMessage(Date);
 LogMessage(",TIME=");
 LogMessage(Time);
 LogMessage("\n");
}

#ifdef WINCGI

char WinCGIFile[1024];

int InitWindowsCGI(char * setupfile,STREAM htmlin, STREAM htmlout)
{
 char file[256];

 if (setupfile)
   strcpy(WinCGIFile,setupfile);
 else
   {
    *WinCGIFile = 0;
   }

 htmlin->t = htmlout->t = NULL;

#ifdef CONSOLECGI
 htmlin->f = stdin;
 htmlout->f = stdout;
#else
 htmlin->f = NULL;
 htmlout->f = NULL;
#endif

 if (!*WinCGIFile) return 0;

 if (GetPrivateProfileString("System","Output File",NULLSTR,file,256,WinCGIFile))
 {
  htmlout->f = CGIFOPEN(file,"wt");
 }

 if (GetPrivateProfileString("System","Content File",NULLSTR,file,256,WinCGIFile))
 {
  htmlin->f = CGIFOPEN(file,"rt");
 }

#ifdef CONSOLECGI
 if (!htmlin->f) htmlin->f = stdin;
 if (!htmlout->f) htmlout->f = stdout;
#endif
 if (!htmlout->f && !htmlin->f) return 0;

 return 1;
}

void DoneWindowsCGI(STREAM htmlin, STREAM htmlout)
{
#ifdef CONSOLECGI
 if (htmlin->f) if (htmlin->f != stdin)    CGIFCLOSE(htmlin->f);
 if (htmlout->f) if (htmlout->f != stdout) CGIFCLOSE(htmlout->f);
#else
 if (htmlin->f)    CGIFCLOSE(htmlin->f);
 if (htmlout->f) CGIFCLOSE(htmlout->f);
#endif
}
#endif

#ifndef ISAPICGI
#if defined(WINCGI)
int PASCAL WinMain (HINSTANCE hInstance, HINSTANCE hPrevInstance,
                    LPSTR lpszCmdLine, int nShow)
{
 int argc;
 char *argv[128];
 int IsCGI = 1; /* Programs can only be invoked through CGI */
#else
int main(int argc, char *argv[])
{
#ifdef FASTCGI
 int fcgiCount = 0;
 FCGISTREAM chtmlin,chtmlerr,chtmlout;
 STREAM htmlerr;
#else
 EZSSTREAM ehtmlin, ehtmlout;
#endif /* FASTCGI */
#endif /* WINCGI */
 CGINameValue * Params;
 int i;
 STREAM htmlin;
 STREAM htmlout;
 char * host;

#ifdef FASTCGI
 htmlin=&chtmlin;
 htmlout=&chtmlout;
 htmlerr=&chtmlerr;
 htmlin->envp = htmlout->envp = htmlerr->envp = NULL;
 while (FCGX_Accept(&htmlin->strp, &htmout->strp, &htmlerr->strp, &htmlout.envp) >= 0)
 {
   htmlin->envp = htmlerr->envp = htmlout->envp;
   fcgiCount++;
 }
#else
 htmlin = &ehtmlin; htmlout = &ehtmlout;
#ifdef WINCGI
  argc = SplitArgs(lpszCmdLine, argv,128);
  if (!InitWindowsCGI(argv[1],htmlin,htmlout)) return 1;
#else /* assume UNIX, or at least win32 console. ISAPI never got this far. */

#ifdef XP_WIN
swapchars(argv[0],'/','\\'); /* Apache 1.3.6 needs this */
setmode(fileno(stdout),O_BINARY); /* Apache hack to be able to send images */
#endif

 htmlin->t = NULL;
 htmlin->f = stdin;

 htmlout->t = NULL;
 htmlout->f = stdout;
#endif
#endif

  switch ( CheckCGISendMethod(htmlin) )
  {
   case 0: Params = ReadCGIPostData(htmlin,64);  break;
   case 1: Params = ReadCGIGetData(htmlin,64); break;
   case 2: Params = 0; break;
   default:Params = argc ? ReadPairedValues(argc-1,argv+1,64) : 0;
  };

 host = Params != NULL ? GetFieldValue(Params,"HOST") : "unknown";

#ifndef CGI_FAST
 LogStartup(htmlout,argv[0]);
 LogConnection(argv[0],host);
 if (Params) LogTrx(Params);
#endif

 if (!Params) Params = NewNVP(1);

 i = CGImain(argv[0],Params,htmlout);

 if (i)
 {
        char file[MAXPATH];
        ExpandLocalPath(argv[0],file,"error.html",NULLSTR);
        HTMLWriteFile(htmlout,file);
 }

 if (i == 101) /* security violation */
  {
   HTMLWrite(htmlout,"<P>Error: Access denied.\n");
   HTMLWrite(htmlout,"<!-- Raosoft CGI " RAOSOFT_CGI_VERSION " -->");
   LogMessage(",ERROR=Access denied");
  }
 else if (i != 0)
  {
   char err[128];
   HTMLPrintf(htmlout,
   "<P><A href=http://www.raosoft.com/help/cgi/ezs/error.html#s%d>Error %d</a>\n",i,i);
   HTMLWrite(htmlout,"<!-- Raosoft CGI " RAOSOFT_CGI_VERSION " -->");
   sprintf(err,"\nCGImain returned %d",i);
   LogError(err);
#ifndef CGI_FAST
   LogError("\nCGI parameters");
   for (i=0;Params[i].name; i++)
   {
      if (!Params[i].name[0]) continue;
       LogError("\n");LogError(Params[i].name);LogError("=");LogError(Params[i].value);
   }
   LogError("\nEnvironment\nContent_type=");
   LogError(GetEnvironment(htmlout,"CONTENT_TYPE"));
   LogError("\nQUERY_STRING=");
   LogError(GetEnvironment(htmlout,"QUERY_STRING"));
   LogError("\nREQUEST_METHOD=");
   LogError(GetEnvironment(htmlout,"REQUEST_METHOD"));
   LogError("\nCONTENT_LENGTH=");
   LogError(GetEnvironment(htmlout,"CONTENT_LENGTH"));
#endif
  }

#ifdef WINCGI
 DoneWindowsCGI(htmlin,htmlout);
#endif
 if (Params) DeleteNVP(Params);

 return 0;
}
#endif

#ifndef ISAPICGI
int SendCGIHeader(STREAM htmlout,char * header)
{
 if (header != NULL)
  if (strlen(header))
  { HTMLWrite(htmlout,header); return 1;}
 HTMLWrite(htmlout,CGI_DEFAULT_HEADER);
 return 1;
}
#endif

/* CGI data translation */
#define NEWALLOCSIZE 128

#ifdef FASTCGI
#define NEXTCHAR(s) FCGX_GetChar(s->strp)
#define TESTEOF(s) FCGX_HasSeenEOF(s->strp)
#else
#define NEXTCHAR(s) fgetc(s->f)
#define TESTEOF(s) feof(s->f)
#endif

#define MAXSIZE 65535
#ifndef ISAPICGI
/* only works on FILE streams */
char *fmakeword(STREAM in, char stop, int *cl) {
    int wsize;
    char *word;
    int ll;

    wsize = NEWALLOCSIZE;
    ll=0;
    word = (char *) CGIMALLOC(sizeof(char) * (wsize + 1));

    while(1) {
        word[ll] = (char)NEXTCHAR(in);
        if(ll==wsize) {
            word[ll+1] = 0;
            wsize+=NEWALLOCSIZE;
            if (wsize > MAXSIZE)
             break;
            else
            {
             char* W2 = (char *)realloc(word,sizeof(char)*(wsize+1));
             if (!W2) break;
             word = W2;
            }
        }
        --(*cl);
        if((word[ll] == stop) || (TESTEOF(in)) || (!(*cl))) {
            if(word[ll] != stop) ll++;
            word[ll] = '\0';
            return word; /* success */
        }
        ++ll;
    }
/* error recovery */
    free(word);
    return 0;
}

#endif

/* we can't save tabs in a database, so convert to spaces */

#ifndef ISAPICGI
#ifdef WINCGI
char WINCGIenv[256];
#endif

/* from cgi_util.c */
extern int CGILogLevel;

char * GetEnvironment(STREAM htmlout,char* key)
{
#ifdef WINCGI
 GetPrivateProfileString("System",key,NULLSTR,WINCGIenv,256,WinCGIFile);
 return WINCGIenv;
#elif defined(FASTCGI)
 return FCGX_GetParam(key,htmlout->envp);
#else
 return getenv(key);
#endif
}

void SetupCGIData(STREAM htmlin,CGINameValue *data)
{
/* Date/Time format: 19960214 124253 */
 char Date[14],Time[14];
 char * host;
 char temp[256];
 temp[0]=0;

 /*RenameField(data,"","HOST");   */

#ifdef WINCGI
 GetPrivateProfileString("System","Remote Address",NULLSTR,temp,256,WinCGIFile);
 SetFieldValue(data,"HOST",temp);
#else
 host = GetEnvironment(htmlin,"REMOTE_ADDR");
 if (host == NULL || host[0] == 0) host = GetEnvironment(htmlin,"HTTP_ADDR");
 if (host == NULL || host[0] == 0) host = GetEnvironment(htmlin,"REMOTE_HOST");
 if (host == NULL || host[0] == 0) host = GetEnvironment(htmlin,"HTTP_HOST");
 if (host == NULL || host[0] == 0) host = "unknown";
 SetFieldValue(data,"HOST",host);
#endif

 GetTime(Date,Time,0);
/* RenameField(data,"","DATE");  */
 SetFieldValue(data,"DATE",Date);

/* RenameField(data,"","TIME");   */
 SetFieldValue(data,"TIME",Time);
}

CGINameValue* ReadCGIGetData(STREAM htmlin,int extra)
{
 char * c;
 CGINameValue* data;
 int x;
#ifdef WINCGI
 c = CGIMALLOC(65535);
 GetPrivateProfileString("CGI","Query String",NULLSTR,c,65535,WinCGIFile);
#else
 c = GetEnvironment(htmlin,"QUERY_STRING");
#endif

 if (c && *c)
  {
#ifdef EBCDIC
    Translate(c,ascii2ebcdic);
#endif
   /*2005 this is really old code, before web browsers were standardized.
   if (!strchr(c,'&')) data = ReadPairedString(c,'/',3+extra);
   else */
   data = ReadPairedString(c,'&',3+extra);
  }
 else
 {
#ifdef WINCGI
  GetPrivateProfileString("CGI","Logical Path",NULLSTR,c,65535,WinCGIFile);
#else
  c = GetEnvironment(htmlin,"PATH_INFO");
#endif
  if (c &&*c)
   {
#ifdef EBCDIC
    Translate(c,ascii2ebcdic);
#endif
    if (*c=='/') c++;
    if (!strchr(c,'&')) data = ReadPairedString(c,'/',3+extra);
    else data = ReadPairedString(c,'&',3+extra);
   }
  else return 0;
 }

 if (!data) return 0;
 SetupCGIData(htmlin,data);

#ifndef WINCGI
 for (x = 3+extra; data[x].name; x++)
  {
    swapchars(data[x].name,'+',' '); /*plus to space*/
    swapchars(data[x].value,'+',' '); /*plus to space*/
    ExpandUrl(data[x].name);
    ExpandUrl(data[x].value);

    if (strstr(data[x].name,"+AAA"))
    {
      UTF7toUTF8(data[x].name);
      UTF7toUTF8(data[x].value);
    }
    else if (ContainsANSIChars(data[x].value))
    {
     char* c = data[x].value;
     data[x].value = ANSItoUTF8(c);
     free(c);
    }
     swapchars(data[x].name,'\t',' '); /*remove tabs*/
     swapchars(data[x].name,'\r',' '); /*remove carriage-returns*/
     swapchars(data[x].name,'\n',' '); /*remove linefeeds*/
     swapchars(data[x].value,'\t',' '); /*remove tabs*/
     swapchars(data[x].value,'\r',' '); /*remove carriage-returns*/
     swapchars(data[x].value,'\n',' '); /*remove linefeeds*/
  }
#endif

#ifdef WINCGI
 CGIFREE(c);
#endif
 return data;
}

#ifdef WINCGI
CGINameValue* ReadCGIPostData(STREAM htmlin,int extra)
{
CGINameValue * data = 0;
 data = ReadINIFileSection(WinCGIFile,"Form Literal",3 + extra);
  if (data)
    SetupCGIData(htmlin,data);
 return data;
}
#else

#define MAX_ENTRIES 1000
CGINameValue* ReadCGIPostData(STREAM htmlin,int reserve)
{int cl;
 register int x;
 char * c;
 int maxsize = MAX_ENTRIES + reserve;
 int growcount = 0; /* that should do the trick! */
 #ifdef EBCDIC
 char stopstr[2];
 #endif

 CGINameValue* data;

 #ifdef EBCDIC
 stopstr[0]='&';
 stopstr[1]=0;
 Translate(stopstr,ebcdic2ascii);
 #endif

 c = getenv("CONTENT_LENGTH");
 cl = c ? atoi(c) : 0;

 if (cl == 0) return NULL;
 if (!htmlin->f) return NULL;
 /* Read the host information */

 data = NewNVP(maxsize);

 for (x=0; x<reserve; x++)
  {
   data[x].name=strdup(NULLSTR);
   data[x].value=strdup(NULLSTR);
  }

 SetupCGIData(htmlin,data);
 x=reserve;

 while((cl > 0) && (!feof(htmlin->f)) && (growcount  < 64 ))
 {
 /* Convert the CGI data back to ASCII, read from stdin */
     if (x == maxsize) /* running out of space? grow the list */
     {
      CGINameValue* newdata = NewNVP(maxsize+ MAX_ENTRIES);
      if (newdata == NULL) return data;
      memcpy(newdata,data,maxsize * sizeof(CGINameValue));
      CGIFREE(data);
      data = newdata;
      maxsize += MAX_ENTRIES;
      growcount++;
     }

#ifdef EBCDIC
/* Translate binary data to EBCDIC text before doing anything. */
     c = fmakeword(htmlin,stopstr[0],&cl);
#else
     c = fmakeword(htmlin,'&',&cl);
#endif

#ifdef EBCDIC
     Translate(c,ascii2ebcdic);
#endif

     if (!c) {DeleteNVP(data); return NULL;}
     swapchars(c,'+',' '); /*plus to space*/
     ExpandUrl(c);      /*converts %xx to characters*/
     /* swapchars(c,'\t',' '); remove tabs*/
     data[x].name = c;

     c = strchr(c,'=');
     if ((c) && (*c))
      {
       *c++ = 0;
       data[x].value = strdup(c);
      }
     else
      {
       data[x].value = strdup(NULLSTR);
      }

     if (strstr(data[x].name,"+AAA"))
     {
      UTF7toUTF8(data[x].name);
      UTF7toUTF8(data[x].value);
     } /*application/x-www-form-urlencoded*/
     else if (ContainsANSIChars(data[x].value))
     {
      char* c = data[x].value;
      data[x].value = ANSItoUTF8(c);
      free(c);
     }

     swapchars(data[x].name,'\t',' '); /*remove tabs*/
     swapchars(data[x].name,'\r',' '); /*remove carriage-returns*/
     swapchars(data[x].name,'\n',' '); /*remove linefeeds*/
     swapchars(data[x].value,'\t',' '); /*remove tabs*/
     swapchars(data[x].value,'\r',' '); /*remove carriage-returns*/
     swapchars(data[x].value,'\n',' '); /*remove linefeeds*/
     /*not all compilers reliably increment x after for loops*/
     x++;
 }
 return data;
} /* end of ReadCGIData */

#endif

/* 0 = POST, 1 = GET, 2 = POST_ERROR, 3=CONSOLE */
int CheckCGISendMethod(STREAM htmlin)
{
#ifdef WINCGI
 char c[256],host[256];
 if (!*WinCGIFile) return 3;
 GetPrivateProfileString("CGI","Request Method",NULLSTR,c,256,WinCGIFile);
#else
 char * c;

 c = GetEnvironment(htmlin,"REQUEST_METHOD");
#endif

 if (!c) return 3; /* not cgi */

if (c && (stricmp(c,"GET") == 0))
   {
    return 1;
   }

#ifndef WINCGI
if (c && (stricmp(c,"POST") == 0))
   {
     c =  getenv("CONTENT_TYPE");

    if(c && strnicmp(c,"application/x-www-form-urlencoded",33))
     {
      return 2;
     }
    return 0;
   }
return 0;
#else
return 0;
#endif
}
#endif

#endif /* VPWSCGI */

Raosoft EZReport, EZSurvey, InterForm, RapidReport, Raosoft, and SurveyWin are registered trademarks of Raosoft, Inc. Page contents © 1996-2007 by Raosoft, Inc. You may use and modify this file for your own use, but may not distribute it or derivative works without the prior written consent of Raosoft, Inc. This software is provided "as is," and Raosoft makes no warranty, express or implied, of fitness for a particular application. Every measure has been taken to anticipate risks inherent to computer networks, but we cannot guarantee safety or reliability of this program in every situation.

Tel: 206-525-4025 (US) Email: raosoft@raosoft.com
http://www.raosoft.com/