#!/usr/bin/perl -T -w
#
# Addendat version 0.5
#
# Copyright 2001 Deekoo L., released under GPL v2.
#
# http://deekoo.net/technocracy/addendat/
delete($ENV{PATH});
use CGI -debug;
use Fcntl qw(:DEFAULT :flock); # import LOCK_* constants
use IPC::Open3;
use MIME::Base64;
# Your Addendat config file
# Configure this to point at where your Addendat config file will be
# stored.
$configfile='/home/YOUR_USERNAME/addendat.cfg';
# Uncomment this to enable debugging.
#$DEBUG=1;
# End config. Below this point, it's safe to leave everything unchanged.
$addendat_version='0.5';
$CGI::POST_MAX=1024 * 100; # max 100K posts
$CGI::DISABLE_UPLOADS = 1; # no uploads
@months=('January','February','March','April','May','June',
'July','August','September','October','November','December');
$query=new CGI;
$hublog=$query->param('publicize');
$preview=$query->param('preview');
$blog=$query->param('blog');
if (!defined($blog)) {
$blog='';
}
$debug=$query->param('debug');
if (!defined($debug)) {
$debug=0;
}
undef ($/);
{
package DefaultedHash;
use Tie::Hash;
sub TIEHASH()
{
my $self=shift;
$hash{entryadded}='
Addendat: Entry added
Entry added to %blogurl%.
Publicization:
%response%
';
my %h=@_;
my $k;
foreach $k (keys(%h)) {
$hash{$k}=$h{$k};
}
return bless \%hash, $self;
}
sub FETCH()
{
my $self=shift;
my $key=shift;
my $blog=$main::blog;
while (defined($blog)) {
if (exists($$self{"$key($blog)"})) {
return $$self{"$key($blog)"};
}
if ($blog=~/\/./s) {
$blog=~s/\/(.*?)$/\//s;
} else {
undef($blog);
}
}
return $$self{$key};
}
sub EXISTS()
{
my $self=shift;
my $key=shift;
my $blog=$main::blog;
while (defined($blog)) {
if (exists($$self{"$key($blog)"})) {
return exists($$self{"$key($blog)"});
}
if ($blog=~/\/./s) {
$blog=~s/\/(.*?)$/\//s;
} else {
undef($blog);
}
}
return exists($$self{$key});
}
}
tie (%template,'DefaultedHash',&read_config_file());
&init_runtime_mcis();
$action=$query->param('action');
if (defined($action)) {
if ($action eq 'comment') {
print "Content-type: text/html\n\n";
print &expand_mcis($template{commentform});
print "\n";
exit;
}
}
$accesscode=$query->param('accesscode');
if (!exists($template{accesscode})) {
$template{accesscode}='';
}
if (!defined($accesscode)) {
$accesscode='';
}
if ($accesscode ne $template{accesscode}) {
&fatalerror("Invalid access code.");
}
&add_entry();
exit;
sub read_config_file()
{
local *CFG;
local $file;
local $tag;
local %template;
open(CFG,"<$configfile") || &fatalerror("Cannot open $configfile.");
$file=;
close(CFG);
while ($file=~/\<%(.*?)%\>(.*?)\<\/%(.*?)%\>/s) {
$tag=$1;
if ($file=~/\<%\Q$tag\E%\>(.*?)\<\/%\Q$tag\E%\>/s) {
$template{$tag}=$1;
$file=~s/\<%\Q$tag\E%\>(.*?)\<\/%\Q$tag\E%\>//s;
} else {
&fatalerror("Malformed pseudotag $tag");
}
}
return %template;
}
sub fatalerror()
{
print "Content-type: text/plain\n\nFatal error: $_[0]\n\n";
print "Debug information: blog is $blog.\n";
die;
}
sub open_html_file()
{
# local *FILE;
local $err=1;
local $file=&expand_mcis($template{blogfile});
if ($file=~/^([-\/a-zA-Z.0-9_~]+)$/s) {
if ($file=~/\.\./s) {
&fatalerror("'..' found in blog filename '$file'. Aborting.");
}
$file=$1;
} else {
&fatalerror("Invalid characters in filename '$file'. Supported characters\n
are -, /, a-z, A-Z, 0-9, ., _, and ~. If you think the character you wanted\n
to use that's not in this set should be considered safe, please email a bug\n
report to deekoo\@tentacle.net.\n");
}
if (sysopen(FILE,$file,O_RDWR|O_NOFOLLOW)) {
if (flock(FILE,LOCK_EX)) {
$err=0;
} else {
&fatalerror("Cannot lock $file");
}
} else {
if (exists($template{blankfile})) {
if (sysopen(FILE,$file,O_CREAT|O_RDWR|O_NOFOLLOW|O_EXCL)) {
if (flock(FILE,LOCK_EX)) {
if (print FILE &expand_mcis($template{blankfile})) {
if (seek(FILE,0,0)) {
# Only try to chmod the file if you're running as a UID who should.
if (exists($template{chmodusers}) && (getpwuid($<)=~/$template{chmodusers}/s)) {
# Sanitize mode to ensure that config files don't make suid
# or executable bloglets.
chmod(oct($template{newfilemode}) & 0666,$file)
|| &fatalerror("Could not chmod the new file sanely.");
}
$err=0;
} else {
&fatalerror("seek($file,0,0) failed.");
}
} else {
&fatalerror("Cannot write new file to '$file'.");
}
} else {
&fatalerror("Cannot lock $file");
}
} else {
&fatalerror("Unable to create blog file '$file'. Check the perms on\nthe directory to ensure that addendat script is allowed\nto create files in it.\n");
}
} else {
&fatalerror("Cannot open $file".
' and no blankfile specified in template.');
}
}
if ($err) {
&fatalerror("Cannot open ".&expand_mcis($template{blogfile}));
}
$file=;
# close(FILE);
@entries=();
if ($file=~/^(.*?)\$item\n";
foreach $item (@entries) {
$html.="$template{entryseparator}$item\n";
}
} else {
$html.="\n";
}
$html.=$footer;
# sysopen(FILE,&expand_mcis($template{blogfile}),O_NOFOLLOW|O_RDWR) ||
# &fatalerror("Cannot write blog file '".&expand_mcis($template{blogfile})."'.");
# flock(FILE,LOCK_EX)||&fatalerror("Cannot lock blog.");
seek(FILE,0,0);
print FILE $html;
$htmllen=length($html);
if ($htmllen=~/([0-9]+)/) {
$htmllen=$1;
} else {
&fatalerror("Cannot untaint '$htmllen'. Should be a number.\n");
}
truncate(FILE,$htmllen);
flock(FILE,LOCK_UN);
close(FILE);
$blog=$oldblog;
}
sub trim_entries()
{
local $maxlen=$template{length};
if ((!defined($maxlen)) || ($maxlen eq '')) {
return @_;
}
local $numlen;
if ($maxlen=~/^([0-9]+)/) {
$numlen=$1;
} else {
return @_;
}
$maxlen=~s/$numlen //s;
if ($maxlen eq 'characters') {
return &trim_entries_characters($numlen,@_);
} else {
&fatalerror("Invalid entry list trim type: '$template{length}'");
}
}
sub trim_entries_characters()
{
local $entry;
local $len=0;
local $maxlen=shift;
foreach $entry (@_) {
$len+=length($entry);
}
if ($template{add} eq 'top') {
while ($len>$maxlen) {
$len-=length(pop(@_));
}
} elsif ($template{add} eq 'bottom') {
while ($len>$maxlen) {
$len-=length(shift(@_));
}
} else {
&fatalerror("%add% must be top or bottom.");
}
return @_;
}