cgi_isapi.c

Go to the documentation of this file.

/******************************************************************************/
/* cgi_isap.c © Copyright 1998-2005 by Raosoft Inc. All Rights Reserved.      */
/*                                                                            */
/* You may use and modify this file for your own use, but may not distribute  */
/* it or derivative works without the prior written consent of Raosoft, Inc.  */
/*                                                                            */
/* If you choose to share your modifications with Raosoft, Inc. the company   */
/* will attempt to incorporate them into future versions of this file.        */
/*                                                                            */
/* This software is provided "as is," and Raosoft makes no warranty, express  */
/* or implied, of fitness for a particular application. Every measure has been*/
/* taken to anticipate risks inherent to computer networks, but we cannot     */
/* guarantee safety or reliability of this program in every situation.        */
/*                                                                            */
/* This code was tested on Apache 1.3.4. If you encounter problems with other */
/* servers, send email to raosoft@raosoft.com and we will endeavor to make    */
/* corrections.                                                               */
/*                                                                            */
/******************************************************************************/

#include "cgi.h"

#ifdef ISAPICGI
#include <httpext.h>

#ifdef __BORLANDC__
#pragma warn -par
#endif

int CountChars(char * c, int comp)
{
 int i = 0;
 while (*c) { if (*c == comp) i++; c++;}
 return i;
}

int ExpandUrl(char *url);
/* in cgi_cgi.c */

void swapchars(char * str, char find, char repl);
/* in cgi_cgi.c */

void SetupCGIData(STREAM htmlout,CGINameValue *data)
{
/* Date/Time format: 19960214 124253 */
 char Date[14],Time[14];
 char temp[256];
 DWORD size = 256;

 temp[0]=0;
 htmlout->ecb->GetServerVariable(
             htmlout->ecb->ConnID, "REMOTE_ADDR",temp,&size);

 if (temp[0]==0) /* Apache */
 htmlout->ecb->GetServerVariable(
             htmlout->ecb->ConnID, "REMOTE_HOST",temp,&size);

 if (temp[0]==0) /* Apache */
 htmlout->ecb->GetServerVariable(
             htmlout->ecb->ConnID, "HTTP_ADDR",temp,&size);

 if (temp[0]==0) /* Apache */
 htmlout->ecb->GetServerVariable(
             htmlout->ecb->ConnID, "HTTP_HOST",temp,&size);

 data[0].value=strdup(temp);
 data[0].name=strdup("HOST");

 GetTime(Date,Time,0);

 data[1].value = strdup(Date);
 data[1].name = strdup("DATE");

 data[2].value = strdup(Time);
 data[2].name = strdup("TIME");
}

CGINameValue * DecodeTextBlock(int start, char * in_datap, int length, int extra)
{
 CGINameValue * argv;
 int x;
 int i;
 char *c, *d, *e, *datap;

 if (in_datap == NULL) return NULL;
 if (length == 0) return NULL;

 datap = strndup(in_datap,length);

 /* count how many data entries there are, and allocate one extra */
 i = start + extra + CountChars(datap,'&') + 1;

 argv = NewNVP(i);

 if (argv == NULL) {CGIFREE(datap); return NULL;}

 for (i=0; i<extra; i++)
 {
  argv[start+i].name = strdup("");
  argv[start+i].value = strdup("");
 }

 x = start + extra;

 /* read the input fields */
 /* datap must be null-terminated. Both IIS and Apache do this. */
 i=0;
 d = datap;

 while (i < length)
      {
       e = strchr(d,'&'); /* end */
       if (e != NULL) *e = 0;

       i += strlen(d);
       i++;

       swapchars(d,'+',' '); /*plus to space*/

       c = strchr(d,'='); /* divider */
       if (c != NULL) { *c = 0; c++; }
       else           { c = NULLSTR; }

       ExpandUrl(d);
       swapchars(d,'\t',' '); /*remove tabs*/
       swapchars(d,'\r',' '); /*remove carriage-returns*/
       swapchars(d,'\n',' '); /*remove linefeeds*/

       if (c != NULL)
       {
        ExpandUrl(c);
        swapchars(c,'\t',' '); /*remove tabs*/
        swapchars(c,'\r',' '); /*remove carriage-returns*/
        swapchars(c,'\n',' '); /*remove linefeeds*/
       }

       if (d[0])
       {
        argv[x].name = strdup(d);
        argv[x].value = strdup(c);
        x++;
       }

       if (e == NULL) break;
       d = e + 1;
       while (i < length && datap[i] == '&') i++;
      }

 CGIFREE(datap);
 return argv;
}

HINSTANCE hInstance;

BOOL WINAPI DllEntryPoint(
    HINSTANCE hinstDLL,
    DWORD reason,
    LPVOID reserved
   )
{
 hInstance = hinstDLL;
 return TRUE;
}

char ISAPIenv[256];

char * GetEnvironment(STREAM htmlout,char* key)
{
 unsigned long size=256;
 if (htmlout->ecb->GetServerVariable(htmlout->ecb->ConnID, key,ISAPIenv,&size) == TRUE)
  return ISAPIenv;
 return NULL;
}

int SendCGIHeader(STREAM htmlout,char * hdr)
{
 DWORD size = 6;
 if (hdr == NULL || !strlen(hdr)) hdr = CGI_DEFAULT_HEADER;

 if (strstr(hdr,"Location:"))
 {
   hdr += 9;
   while (hdr[0] == ' ') hdr++;
   size = strlen(hdr);
     htmlout->ecb->ServerSupportFunction(
    htmlout->ecb->ConnID, HSE_REQ_SEND_URL_REDIRECT_RESP,
    hdr,&size,0);
 }
 else
 {
   htmlout->ecb->ServerSupportFunction(
    htmlout->ecb->ConnID, HSE_REQ_SEND_RESPONSE_HEADER,
    "200 OK",&size,(DWORD*)(void*)hdr);
 }
 return 1;
}

/* main callback function */
#ifdef __BORLANDC__
DWORD WINAPI _export HttpExtensionProc(EXTENSION_CONTROL_BLOCK* ecb)
#elif defined(__MWERKS__)
DWORD WINAPI export HttpExtensionProc(EXTENSION_CONTROL_BLOCK* ecb)
#else
DWORD WINAPI HttpExtensionProc(EXTENSION_CONTROL_BLOCK* ecb)
#endif
{
    char argv0[MAXPATH],scriptname[MAXPATH];
    DWORD size;
    char temp[128];
    char host[128];
    int argc =0;
    int i;
    CGINameValue * argv =NULL;
    EZSSTREAM htmlout;

    htmlout.ecb = ecb;
    htmlout.pos = 0;
    htmlout.t = 0;
    htmlout.f = 0;

    host[0]=0;
    size=sizeof(host);
    ecb->GetServerVariable(ecb->ConnID, "REMOTE_ADDR",host,&size);

    if (!host[0])
    {
     size=sizeof(host);
     ecb->GetServerVariable(ecb->ConnID, "HTTP_ADDR",host,&size);
    }
    if (!host[0])
    {
     size=sizeof(host);
     ecb->GetServerVariable(ecb->ConnID, "REMOTE_HOST",host,&size);
    }
    if (!host[0])
    {
     size=sizeof(host);
     ecb->GetServerVariable(ecb->ConnID, "HTTP_HOST",host,&size);
    }
    /* The Apache group uses HTTP_HOST instead. */

    /* GetModuleFileName(GetModuleHandle(NULL),argv0,MAXPATH);*/
    /* GetModuleFileName(hInstance,argv0,MAXPATH);*/

    /* is it get GET or POST ? */

    temp[0]=0;
    size=sizeof(temp);
    ecb->GetServerVariable(
             ecb->ConnID, "REQUEST_METHOD",temp,&size);

    if (stricmp(temp,"POST") == 0)
    {/* It's post data. */
     /* Is it the right format? We don't read AcroForm data. */
     size=sizeof(temp);

     ecb->GetServerVariable(
              ecb->ConnID, "CONTENT_TYPE",temp,&size);

     if (strnicmp(temp,"application/x-www-form-urlencoded",33) != 0)
       return HSE_STATUS_ERROR;

        /* Parse the incoming data, up to 48k worth */

     if (ecb->cbTotalBytes && ecb->cbAvailable < ecb->cbTotalBytes && ecb->cbTotalBytes < 1024*512)
     {
      char* c = malloc(ecb->cbTotalBytes+1);
      size_t offset = ecb->cbAvailable;
      if (!c) return HSE_STATUS_ERROR;
      memcpy(c,(char*)ecb->lpbData,offset);
      while (offset < ecb->cbTotalBytes)
      {
       DWORD size=4096;
       if (!ecb->ReadClient(ecb->ConnID,c+offset,&size)) break;
       if (!size) break;
       offset += size;
      }
      c[offset]=0;
      argv = DecodeTextBlock(3,c,offset,64);
     }
     else
     {
      argv = DecodeTextBlock(3,(char*)ecb->lpbData,ecb->cbAvailable,64);
     }
     //3 for HOST,DATE,TIME, 4 for _PAGENEXT,_PAGEBACK, ...
    }
    else if (stricmp(temp,"GET") == 0)
    {/* It's get or an extended path. Either way, it's the same parser. */
     char * c = ecb->lpszQueryString;
     if (c != NULL && c[0]) /* blank queries ignored */
      {
       if (strchr(c,'&')==NULL) swapchars(c,'/','&');
        /* breaks up extended path variables into tokens */
       argv = DecodeTextBlock(3,c,strlen(c),64);
      }
    }

    if (argv != NULL)
      {
       SetupCGIData(&htmlout,argv);
       while (argv[argc].name) argc++;
      }

    size = sizeof(argv0);
    argv0[0]=0;

    {/* get the directory from the registry */
     HKEY Key;
     DWORD len=size,type;
     char * database = GetFieldValue(argv,"DATABASE");
     if (!*database) database = GetFieldValue(argv,"FILE"); /* for dbadmin.dll */

     if (RegOpenKey(HKEY_LOCAL_MACHINE,
                    "SOFTWARE\\Raosoft\\CGI\\Directories",
                    &Key) == ERROR_SUCCESS)
     {
      RegQueryValueEx(Key,database,0,&type,(LPBYTE)(char*)argv0,&len);
      RegCloseKey(Key); /* that should give a working directory */
      size = strlen(argv0);
      if (argv0[size-1] != '\\')
       strcat(argv0,"\\");
     }
    }

    /* we have a directory, now get the script name */
    size = sizeof(scriptname);
    scriptname[0]=0;

    ecb->GetServerVariable(    /* apache */
             ecb->ConnID, "SCRIPT_FILENAME",scriptname,&size);

    if (scriptname[0] == 0)
    ecb->GetServerVariable(    /* iis */
             ecb->ConnID, "SCRIPT_NAME",scriptname,&size);

    if (argv0 == 0)
    {
      strcpy(argv0,scriptname);
    }
    else if (scriptname[0] != 0)
    {
      char * end;
      swapchars(scriptname,'/','\\');
      end = strrchr(scriptname,'\\');
      if (end != NULL) strcat(argv0,end+1);
      else strcat(argv0,scriptname);
    }
    else
    {
      SendCGIHeader(&htmlout,NULL);
      HTMLWrite(&htmlout,"Error: Unable to determine the server working directory");
      LogError("\nISAPI: Unable to determine the working directory and script name ");
      LogError(host);

      if (argv != NULL) DeleteNVP(argv);
      return HSE_STATUS_SUCCESS;
    }

    /* ta da! Now we have a complete file name. */


    /* turn forward slashes into backslashes
    Security = GetSecurityFlags(argv0,host,GetFieldValue(argv,"DATABASE"),
                                           GetFieldValue(argv,"_PASSWORD"));

    */
#ifndef CGI_FAST
    LogStartup(&htmlout,argv0);
    LogConnection(argv0,host);
    if (argv) LogTrx(argv);
#endif

    if (argv == NULL)
     argv = NewNVP(1);

    i = CGImain(argv0,argv,&htmlout);

    if (argv != NULL)
     DeleteNVP(argv);


    if (i)
    {
        char file[MAXPATH];
        ExpandLocalPath(argv0,file,"error.html",NULLSTR);
        HTMLWriteFile(&htmlout,file);
    }

    if (i == 101) /* security violation */
     {
      HTMLWrite(&htmlout,"Error: Access denied.");
      LogConnection(argv0,host);
      LogMessage(",ERROR=Access denied");
      return HSE_STATUS_SUCCESS;
     }
    else if (i != 0)
     {
      ecb->dwHttpStatusCode = i;
      HTMLPrintf(&htmlout,
      "<P><A href=http://www.raosoft.com/help/cgi/ezs/error.html#s%d>Error %d</a>\n",i,i);
      HTMLWrite(&htmlout,"<!-- Raosoft CGI " RAOSOFT_CGI_VERSION " -->");
     }

    if (htmlout.pos)
      htmlout.ecb->WriteClient(htmlout.ecb->ConnID, (PVOID)htmlout.buffer, &htmlout.pos, 0 );

    return HSE_STATUS_SUCCESS;
    /* apache can't deal with error returns */
    /* return HSE_STATUS_ERROR;*/
}

#ifdef __BORLANDC__
BOOL WINAPI _export GetExtensionVersion(OUT HSE_VERSION_INFO * pVer)
#elif defined(__MWERKS__)
BOOL WINAPI export GetExtensionVersion(OUT HSE_VERSION_INFO * pVer)
#else
BOOL WINAPI GetExtensionVersion(OUT HSE_VERSION_INFO * pVer)
#endif
{
 pVer->dwExtensionVersion = MAKELONG(HSE_VERSION_MINOR, HSE_VERSION_MAJOR);
 lstrcpyn((LPSTR) pVer->lpszExtensionDesc,
          "EZSURVEY - Raosoft CGI extensions",
          HSE_MAX_EXT_DLL_NAME_LEN);
 return TRUE;
}

#ifdef __BORLANDC__
BOOL WINAPI _export TerminateExtension(DWORD foo)
#elif defined(__MWERKS__)
BOOL WINAPI export GetExtensionVersion(OUT HSE_VERSION_INFO * pVer)
#else
BOOL WINAPI TerminateExtension(DWORD foo)
#endif
{
    return TRUE;
}


#endif

Raosoft EZReport, EZSurvey, InterForm, RapidReport, Raosoft, and SurveyWin are registered trademarks of Raosoft, Inc. Page contents © 1996-2007 by Raosoft, Inc. You may use and modify this file for your own use, but may not distribute it or derivative works without the prior written consent of Raosoft, Inc. This software is provided "as is," and Raosoft makes no warranty, express or implied, of fitness for a particular application. Every measure has been taken to anticipate risks inherent to computer networks, but we cannot guarantee safety or reliability of this program in every situation.

Tel: 206-525-4025 (US) Email: raosoft@raosoft.com
http://www.raosoft.com/