1996-07-22 15:23:25 +00:00
|
|
|
"""CGI-savvy HTTP Server.
|
|
|
|
|
|
|
|
This module builds on SimpleHTTPServer by implementing GET and POST
|
|
|
|
requests to cgi-bin scripts.
|
|
|
|
|
2000-05-08 17:31:04 +00:00
|
|
|
If the os.fork() function is not present, this module will not work;
|
|
|
|
SystemError will be raised instead.
|
|
|
|
|
1996-07-22 15:23:25 +00:00
|
|
|
"""
|
|
|
|
|
|
|
|
|
|
|
|
__version__ = "0.3"
|
|
|
|
|
|
|
|
|
|
|
|
import os
|
|
|
|
import string
|
|
|
|
import urllib
|
|
|
|
import BaseHTTPServer
|
|
|
|
import SimpleHTTPServer
|
|
|
|
|
|
|
|
|
2000-05-08 17:31:04 +00:00
|
|
|
try:
|
|
|
|
os.fork
|
|
|
|
except AttributeError:
|
|
|
|
raise SystemError, __name__ + " requires os.fork()"
|
|
|
|
|
|
|
|
|
1996-07-22 15:23:25 +00:00
|
|
|
class CGIHTTPRequestHandler(SimpleHTTPServer.SimpleHTTPRequestHandler):
|
|
|
|
|
|
|
|
"""Complete HTTP server with GET, HEAD and POST commands.
|
|
|
|
|
|
|
|
GET and HEAD also support running CGI scripts.
|
|
|
|
|
|
|
|
The POST command is *only* implemented for CGI scripts.
|
|
|
|
|
|
|
|
"""
|
|
|
|
|
2000-09-01 19:25:51 +00:00
|
|
|
# Make rfile unbuffered -- we need to read one line and then pass
|
|
|
|
# the rest to a subprocess, so we can't use buffered input.
|
|
|
|
rbufsize = 0
|
|
|
|
|
1996-07-22 15:23:25 +00:00
|
|
|
def do_POST(self):
|
1998-03-26 22:14:20 +00:00
|
|
|
"""Serve a POST request.
|
1996-07-22 15:23:25 +00:00
|
|
|
|
1998-03-26 22:14:20 +00:00
|
|
|
This is only implemented for CGI scripts.
|
1996-07-22 15:23:25 +00:00
|
|
|
|
1998-03-26 22:14:20 +00:00
|
|
|
"""
|
1996-07-22 15:23:25 +00:00
|
|
|
|
1998-03-26 22:14:20 +00:00
|
|
|
if self.is_cgi():
|
|
|
|
self.run_cgi()
|
|
|
|
else:
|
|
|
|
self.send_error(501, "Can only POST to CGI scripts")
|
1996-07-22 15:23:25 +00:00
|
|
|
|
|
|
|
def send_head(self):
|
1998-03-26 22:14:20 +00:00
|
|
|
"""Version of send_head that support CGI scripts"""
|
|
|
|
if self.is_cgi():
|
|
|
|
return self.run_cgi()
|
|
|
|
else:
|
|
|
|
return SimpleHTTPServer.SimpleHTTPRequestHandler.send_head(self)
|
1996-07-22 15:23:25 +00:00
|
|
|
|
|
|
|
def is_cgi(self):
|
1998-03-26 22:14:20 +00:00
|
|
|
"""test whether PATH corresponds to a CGI script.
|
1996-07-22 15:23:25 +00:00
|
|
|
|
1998-03-26 22:14:20 +00:00
|
|
|
Return a tuple (dir, rest) if PATH requires running a
|
|
|
|
CGI script, None if not. Note that rest begins with a
|
|
|
|
slash if it is not empty.
|
1996-07-22 15:23:25 +00:00
|
|
|
|
1998-03-26 22:14:20 +00:00
|
|
|
The default implementation tests whether the path
|
|
|
|
begins with one of the strings in the list
|
|
|
|
self.cgi_directories (and the next character is a '/'
|
|
|
|
or the end of the string).
|
1996-07-22 15:23:25 +00:00
|
|
|
|
1998-03-26 22:14:20 +00:00
|
|
|
"""
|
1996-07-22 15:23:25 +00:00
|
|
|
|
1998-03-26 22:14:20 +00:00
|
|
|
path = self.path
|
1996-07-22 15:23:25 +00:00
|
|
|
|
1998-03-26 22:14:20 +00:00
|
|
|
for x in self.cgi_directories:
|
|
|
|
i = len(x)
|
|
|
|
if path[:i] == x and (not path[i:] or path[i] == '/'):
|
|
|
|
self.cgi_info = path[:i], path[i+1:]
|
|
|
|
return 1
|
|
|
|
return 0
|
1996-07-22 15:23:25 +00:00
|
|
|
|
|
|
|
cgi_directories = ['/cgi-bin', '/htbin']
|
|
|
|
|
|
|
|
def run_cgi(self):
|
1998-03-26 22:14:20 +00:00
|
|
|
"""Execute a CGI script."""
|
|
|
|
dir, rest = self.cgi_info
|
|
|
|
i = string.rfind(rest, '?')
|
|
|
|
if i >= 0:
|
|
|
|
rest, query = rest[:i], rest[i+1:]
|
|
|
|
else:
|
|
|
|
query = ''
|
|
|
|
i = string.find(rest, '/')
|
|
|
|
if i >= 0:
|
|
|
|
script, rest = rest[:i], rest[i:]
|
|
|
|
else:
|
|
|
|
script, rest = rest, ''
|
|
|
|
scriptname = dir + '/' + script
|
|
|
|
scriptfile = self.translate_path(scriptname)
|
|
|
|
if not os.path.exists(scriptfile):
|
|
|
|
self.send_error(404, "No such CGI script (%s)" % `scriptname`)
|
|
|
|
return
|
|
|
|
if not os.path.isfile(scriptfile):
|
|
|
|
self.send_error(403, "CGI script is not a plain file (%s)" %
|
|
|
|
`scriptname`)
|
|
|
|
return
|
|
|
|
if not executable(scriptfile):
|
|
|
|
self.send_error(403, "CGI script is not executable (%s)" %
|
|
|
|
`scriptname`)
|
|
|
|
return
|
|
|
|
nobody = nobody_uid()
|
|
|
|
self.send_response(200, "Script output follows")
|
|
|
|
self.wfile.flush() # Always flush before forking
|
|
|
|
pid = os.fork()
|
|
|
|
if pid != 0:
|
|
|
|
# Parent
|
|
|
|
pid, sts = os.waitpid(pid, 0)
|
|
|
|
if sts:
|
|
|
|
self.log_error("CGI script exit status x%x" % sts)
|
|
|
|
return
|
|
|
|
# Child
|
|
|
|
try:
|
|
|
|
# Reference: http://hoohoo.ncsa.uiuc.edu/cgi/env.html
|
|
|
|
# XXX Much of the following could be prepared ahead of time!
|
|
|
|
env = {}
|
|
|
|
env['SERVER_SOFTWARE'] = self.version_string()
|
|
|
|
env['SERVER_NAME'] = self.server.server_name
|
|
|
|
env['GATEWAY_INTERFACE'] = 'CGI/1.1'
|
|
|
|
env['SERVER_PROTOCOL'] = self.protocol_version
|
|
|
|
env['SERVER_PORT'] = str(self.server.server_port)
|
|
|
|
env['REQUEST_METHOD'] = self.command
|
|
|
|
uqrest = urllib.unquote(rest)
|
|
|
|
env['PATH_INFO'] = uqrest
|
|
|
|
env['PATH_TRANSLATED'] = self.translate_path(uqrest)
|
|
|
|
env['SCRIPT_NAME'] = scriptname
|
|
|
|
if query:
|
|
|
|
env['QUERY_STRING'] = query
|
|
|
|
host = self.address_string()
|
|
|
|
if host != self.client_address[0]:
|
|
|
|
env['REMOTE_HOST'] = host
|
|
|
|
env['REMOTE_ADDR'] = self.client_address[0]
|
|
|
|
# AUTH_TYPE
|
|
|
|
# REMOTE_USER
|
|
|
|
# REMOTE_IDENT
|
1998-08-12 02:38:11 +00:00
|
|
|
if self.headers.typeheader is None:
|
|
|
|
env['CONTENT_TYPE'] = self.headers.type
|
|
|
|
else:
|
|
|
|
env['CONTENT_TYPE'] = self.headers.typeheader
|
1998-03-26 22:14:20 +00:00
|
|
|
length = self.headers.getheader('content-length')
|
|
|
|
if length:
|
|
|
|
env['CONTENT_LENGTH'] = length
|
|
|
|
accept = []
|
|
|
|
for line in self.headers.getallmatchingheaders('accept'):
|
|
|
|
if line[:1] in string.whitespace:
|
|
|
|
accept.append(string.strip(line))
|
|
|
|
else:
|
1998-12-22 13:50:33 +00:00
|
|
|
accept = accept + string.split(line[7:], ',')
|
1998-03-26 22:14:20 +00:00
|
|
|
env['HTTP_ACCEPT'] = string.joinfields(accept, ',')
|
|
|
|
ua = self.headers.getheader('user-agent')
|
|
|
|
if ua:
|
|
|
|
env['HTTP_USER_AGENT'] = ua
|
2000-05-08 17:31:04 +00:00
|
|
|
co = filter(None, self.headers.getheaders('cookie'))
|
|
|
|
if co:
|
|
|
|
env['HTTP_COOKIE'] = string.join(co, ', ')
|
1998-03-26 22:14:20 +00:00
|
|
|
# XXX Other HTTP_* headers
|
|
|
|
decoded_query = string.replace(query, '+', ' ')
|
|
|
|
try:
|
|
|
|
os.setuid(nobody)
|
|
|
|
except os.error:
|
|
|
|
pass
|
|
|
|
os.dup2(self.rfile.fileno(), 0)
|
|
|
|
os.dup2(self.wfile.fileno(), 1)
|
|
|
|
print scriptfile, script, decoded_query
|
|
|
|
os.execve(scriptfile,
|
|
|
|
[script, decoded_query],
|
|
|
|
env)
|
|
|
|
except:
|
|
|
|
self.server.handle_error(self.request, self.client_address)
|
|
|
|
os._exit(127)
|
1996-07-22 15:23:25 +00:00
|
|
|
|
|
|
|
|
|
|
|
nobody = None
|
|
|
|
|
|
|
|
def nobody_uid():
|
|
|
|
"""Internal routine to get nobody's uid"""
|
|
|
|
global nobody
|
|
|
|
if nobody:
|
1998-03-26 22:14:20 +00:00
|
|
|
return nobody
|
1996-07-22 15:23:25 +00:00
|
|
|
import pwd
|
|
|
|
try:
|
1998-03-26 22:14:20 +00:00
|
|
|
nobody = pwd.getpwnam('nobody')[2]
|
2000-05-08 17:31:04 +00:00
|
|
|
except KeyError:
|
1998-03-26 22:14:20 +00:00
|
|
|
nobody = 1 + max(map(lambda x: x[2], pwd.getpwall()))
|
1996-07-22 15:23:25 +00:00
|
|
|
return nobody
|
|
|
|
|
|
|
|
|
|
|
|
def executable(path):
|
|
|
|
"""Test for executable file."""
|
|
|
|
try:
|
1998-03-26 22:14:20 +00:00
|
|
|
st = os.stat(path)
|
1996-07-22 15:23:25 +00:00
|
|
|
except os.error:
|
1998-03-26 22:14:20 +00:00
|
|
|
return 0
|
1996-07-22 15:23:25 +00:00
|
|
|
return st[0] & 0111 != 0
|
|
|
|
|
|
|
|
|
|
|
|
def test(HandlerClass = CGIHTTPRequestHandler,
|
1998-03-26 22:14:20 +00:00
|
|
|
ServerClass = BaseHTTPServer.HTTPServer):
|
1996-07-22 15:23:25 +00:00
|
|
|
SimpleHTTPServer.test(HandlerClass, ServerClass)
|
|
|
|
|
|
|
|
|
|
|
|
if __name__ == '__main__':
|
|
|
|
test()
|