1 |
#!/usr/bin/perl |
2 |
use strict; |
3 |
|
4 |
use lib qw[/home/httpd/html/www/markup/html/whatpm |
5 |
/home/wakaba/work/manakai2/lib]; |
6 |
|
7 |
use CGI::Carp qw[fatalsToBrowser]; |
8 |
require Message::CGI::Carp; |
9 |
|
10 |
require 'users.pl'; |
11 |
require 'texts.pl'; |
12 |
|
13 |
our $subject_prefix; |
14 |
|
15 |
require Message::CGI::HTTP; |
16 |
require Encode; |
17 |
my $cgi = Message::CGI::HTTP->new; |
18 |
$cgi->{decoder}->{'#default'} = sub { |
19 |
return Encode::decode ('utf-8', $_[1]); |
20 |
}; |
21 |
|
22 |
our $Lang = 'ja' |
23 |
if $cgi->get_meta_variable ('HTTP_ACCEPT_LANGUAGE') =~ /\bja\b/; ## TODO: ... |
24 |
|
25 |
require Message::DOM::DOMImplementation; |
26 |
my $dom = Message::DOM::DOMImplementation->new; |
27 |
|
28 |
my $path = $cgi->path_info; |
29 |
$path = '' unless defined $path; |
30 |
|
31 |
my @path = split m#/#, percent_decode ($path), -1; |
32 |
shift @path; |
33 |
|
34 |
if (@path == 1 and $path[0] eq 'new-user') { |
35 |
if ($cgi->request_method eq 'POST') { |
36 |
lock_start (); |
37 |
binmode STDOUT, ':encoding(utf-8)'; |
38 |
|
39 |
my $user_id = $cgi->get_parameter ('user-id'); |
40 |
|
41 |
if ($user_id !~ /\A[0-9a-z-]{4,20}\z/) { |
42 |
print_error (400, |
43 |
q[User id %s is invalid; use characters [0-9a-z-]{4,20}], |
44 |
$user_id); |
45 |
exit; |
46 |
} |
47 |
|
48 |
if (get_user_prop ($user_id)) { |
49 |
print_error (400, q[User id %s is already used], $user_id); |
50 |
exit; |
51 |
} |
52 |
|
53 |
my $pass_crypted = check_password ($cgi); |
54 |
|
55 |
my $user_prop = {id => $user_id, pass_crypted => $pass_crypted}; |
56 |
set_user_prop ($user_id, $user_prop); |
57 |
|
58 |
send_mail ("$subject_prefix User $user_id created", |
59 |
"User: $user_id\nStatus: User registered\n"); |
60 |
|
61 |
regenerate_htpasswd_and_htgroup (); |
62 |
commit (); |
63 |
|
64 |
my $user_url = get_absolute_url ('../edit/users/' . $user_id . '/'); |
65 |
|
66 |
print qq[Status: 201 User registered |
67 |
Location: $user_url |
68 |
Content-Type: text/html; charset=utf-8 |
69 |
|
70 |
<!DOCTYPE HTML> |
71 |
<html lang=en class=account-user-misc> |
72 |
<title>]; |
73 |
print_text ('User %s registered', sub { print '', htescape ($user_id) }); |
74 |
print q[</title> |
75 |
<link rel=stylesheet href="/admin/style/common"> |
76 |
<h1>]; |
77 |
print_text ('User %s registered', sub { print '', htescape ($user_id) }); |
78 |
print q[</h1><p>]; |
79 |
print_text ('Your user account is created successfully.'); |
80 |
print q[<p>]; |
81 |
print_text ('See %s.', sub { |
82 |
print qq[<a href="@{[htescape ($user_url)]}">]; |
83 |
print_text ('your user account information page'); |
84 |
print q[</a>]; |
85 |
}); |
86 |
exit; |
87 |
} else { |
88 |
binmode STDOUT, ":encoding(utf-8)"; |
89 |
print q[Content-Type: text/html; charset=utf-8 |
90 |
|
91 |
<!DOCTYPE HTML> |
92 |
<html lang=en class=account-user-misc> |
93 |
<title>]; |
94 |
print_text ('Create a new user account'); |
95 |
print q[</title> |
96 |
<link rel=stylesheet href="/admin/style/common"> |
97 |
<h1>]; |
98 |
print_text ('Create a new user account'); |
99 |
print q[</h1> |
100 |
|
101 |
<form action=new-user accept-charset=utf-8 method=post> |
102 |
|
103 |
<p><strong>]; |
104 |
print_text ('User id'); |
105 |
print q[</strong>: <input type=text name=user-id |
106 |
maxlength=20 size=10 required pattern="[0-9a-z-]{4,20}"> (]; |
107 |
print_text ('Use [0-9a-z-]{4,20}.'); |
108 |
print q[)<p><strong>]; |
109 |
print_text ('Password'); |
110 |
print q[</strong>: <input type=password name=user-pass |
111 |
size=10 required pattern=".{4,}"> (]; |
112 |
print_text ('Type 4 characters at minimum'); |
113 |
print q[)<p><strong>]; |
114 |
print_text ('Password'); |
115 |
print q[</strong> (]; |
116 |
print_text ('type again'); |
117 |
print q[): <input type=password |
118 |
name=user-pass2 size=10 required pattern=".{4,}"> |
119 |
|
120 |
<p><input type=submit value="]; |
121 |
print_text ('Create'); |
122 |
print q["></form>]; |
123 |
exit; |
124 |
} |
125 |
} elsif (@path == 0) { |
126 |
my $root_url = get_absolute_url ('add/new-user'); |
127 |
|
128 |
print qq[Status: 301 Moved permanently |
129 |
Location: $root_url |
130 |
Content-Type: text/html; charset=us-ascii |
131 |
|
132 |
See <a href="@{[htescape ($root_url)]}">other page</a>.]; |
133 |
exit; |
134 |
} |
135 |
|
136 |
print_error (404, 'Not found'); |
137 |
exit; |
138 |
|
139 |
sub percent_decode ($) { |
140 |
return $dom->create_uri_reference ($_[0]) |
141 |
->get_iri_reference |
142 |
->uri_reference; |
143 |
} # percent_decode |
144 |
|
145 |
sub get_absolute_url ($) { |
146 |
return $dom->create_uri_reference ($_[0]) |
147 |
->get_absolute_reference ($cgi->request_uri) |
148 |
->get_iri_reference |
149 |
->uri_reference; |
150 |
} # get_absolute_url |