#!/usr/bin/perl -w
$DEBUG = 0;
$path = "/home/httpd/html/pablotron";
$url="http://www.pablotron.org";
print "Content-type: text/html\n\n";
# get get method args
$qs = $ENV{'QUERY_STRING'};
@qargs = split /&/,$qs;
foreach (@qargs) {
tr/+/ /;
@temp = split /=/,$_;
$query{$temp[0]} = $temp[1];
}
# get post method args
$qs = "";
$qs .= $_ while (<>);
@qargs = split /&/,$qs;
foreach (@qargs) {
tr/+/ /;
@temp = split /=/,$_;
$temp[1] =~ s/%([a-fA-F0-9]{2})/chr(hex($1))/ge;
$query{$temp[0]} = $temp[1];
}
chdir "$path";
chroot "$path";
#$path = $query{ PATH };
$hdr = $query{ HEADER };
$hdr =~ s/\/// if ($hdr =~ /^\//);
if ($hdr =~ /(\.\.\/)+/) {
$naughty++;
#$hdr =~ s#\.\./##g;
$hdr = "";
}
if ($hdr) {
open HEADER, "$hdr" or print "Couldn't open HEADER file $url/$hdr.
\n";
}
$bdy = $query{ BODY };
if ($bdy =~ /(\.\.\/)+/) {
$naughty++;
$bdy =~ s#\.\./##g;
$bdy = "";
}
$bdy .= "index.shtml" if ($bdy =~ /\/$/ );
$bdy =~ s/\/// if ($bdy =~ /^\//);
if ($bdy) {
open BODY, "$bdy" or print "Couldn't open BODY file $url/$bdy.
\n";
}
$ftr = $query{ FOOTER };
$ftr =~ s/\/// if ($ftr =~ /^\//);
if ($ftr =~ /(\.\.\/)+/) {
$naughty++;
$ftr =~ s#\.\./##g;
$ftr = "";
}
if ($ftr) {
open FOOTER, "$ftr" or print "Couldn't open FOOTER file $url/$ftr.
\n";
}
if ($naughty) {
print "Thanks for trying to break into my server
![](\"/code/view/mickey-finger.jpg\")
Nope, but thanks for trying!
Your information ($ENV{REMOTE_ADDR}, $ENV{HTTP_USER_AGENT}) has been logged.
Please drive through...
\n
";
} else {
print "$_" while ();
while () {
#s/__([A-Z0-9a-z_\-\.]+)__/$query{$1}/g;
s/\&/\&\;/g;
s//\>\;/g;
s#href="/(.*?)"#href="/$1"#i;
s#virtual="/(.*?)"#virtual="/$1"#i;
s#(src)="(.*?)"#$1="$2"#ig;
s#(background)="(.*?)"#$1="$2"#ig;
s#href="mailto:(.*?)"#href="mailto:$1"#ig;
print "$1" if ($DEBUG);
print "$_
";
}
if ($DEBUG) {
print "
";
print "$_=$query{$_}
\n" foreach (sort keys %query);
}
print "$_" while (