1 |
wakaba |
1.1 |
use strict; |
2 |
|
|
|
3 |
|
|
my $user_data_dir_name = 'data/'; |
4 |
|
|
my $user_prop_file_suffix = '.user'; |
5 |
|
|
|
6 |
|
|
my $group_data_dir_name = 'data/'; |
7 |
|
|
my $group_prop_file_suffix = '.group'; |
8 |
|
|
|
9 |
|
|
my $htpasswd_file_name = 'data/htpasswd'; |
10 |
|
|
my $htgroup_file_name = 'data/htgroup'; |
11 |
|
|
|
12 |
|
|
my $lock_file_name = $user_data_dir_name . '.lock'; |
13 |
|
|
|
14 |
|
|
use Fcntl ':flock'; |
15 |
|
|
my $Lock; |
16 |
|
|
|
17 |
|
|
sub lock_start () { |
18 |
|
|
return if $Lock; |
19 |
|
|
|
20 |
|
|
open $Lock, '>', $lock_file_name or die "$0: $lock_file_name: $!"; |
21 |
|
|
flock $Lock, LOCK_EX; |
22 |
|
|
} # lock_start |
23 |
|
|
|
24 |
|
|
sub get_prop_hash ($) { |
25 |
|
|
my $user_prop_file_name = shift; |
26 |
|
|
|
27 |
|
|
return undef unless -f $user_prop_file_name; |
28 |
|
|
|
29 |
|
|
my $r = {}; |
30 |
|
|
|
31 |
|
|
open my $user_prop_file, '<:encoding(utf8)', $user_prop_file_name |
32 |
|
|
or die "$0: $user_prop_file_name: $!"; |
33 |
|
|
while (<$user_prop_file>) { |
34 |
|
|
tr/\x0D\x0A//d; |
35 |
|
|
my ($n, $v) = split /:/, $_, 2; |
36 |
|
|
if ($n =~ s/^\@//) { |
37 |
|
|
push @{$r->{$n} ||= []}, $v // ''; |
38 |
|
|
} elsif ($n =~ s/^%//) { |
39 |
|
|
$r->{$n}->{$v // ''} = 1; |
40 |
|
|
} else { |
41 |
|
|
$n =~ s/^\$//; |
42 |
|
|
$r->{$n} = $v // ''; |
43 |
|
|
} |
44 |
|
|
} |
45 |
|
|
|
46 |
|
|
return $r; |
47 |
|
|
} # get_prop_hash |
48 |
|
|
|
49 |
|
|
sub set_prop_hash ($$) { |
50 |
|
|
my $user_prop_file_name = shift;; |
51 |
|
|
my $prop = shift; |
52 |
|
|
|
53 |
|
|
my $has_file = -f $user_prop_file_name; |
54 |
|
|
|
55 |
|
|
open my $user_prop_file, '>:encoding(utf8)', $user_prop_file_name |
56 |
|
|
or die "$0: $user_prop_file_name: $!"; |
57 |
|
|
for my $prop_name (sort {$a cmp $b} keys %$prop) { |
58 |
|
|
if (ref $prop->{$prop_name} eq 'ARRAY') { |
59 |
|
|
my $v = '@' . $prop_name; |
60 |
|
|
$v =~ tr/\x0D\x0A://d; |
61 |
|
|
for (@{$prop->{$prop_name}}) { |
62 |
|
|
my $pv = $_; |
63 |
|
|
$pv =~ tr/\x0D\x0A/ /; |
64 |
|
|
print $user_prop_file $v . ':' . $pv . "\x0A"; |
65 |
|
|
} |
66 |
|
|
} elsif (ref $prop->{$prop_name} eq 'HASH') { |
67 |
|
|
my $v = '%' . $prop_name; |
68 |
|
|
$v =~ tr/\x0D\x0A://d; |
69 |
|
|
for (sort {$a cmp $b} keys %{$prop->{$prop_name}}) { |
70 |
|
|
next unless $prop->{$prop_name}->{$_}; |
71 |
|
|
my $pv = $_; |
72 |
|
|
$pv =~ tr/\x0D\x0A/ /; |
73 |
|
|
print $user_prop_file $v . ':' . $pv . "\x0A"; |
74 |
|
|
} |
75 |
|
|
} else { |
76 |
|
|
my $v = '$' . $prop_name; |
77 |
|
|
$v =~ tr/\x0D\x0A://d; |
78 |
|
|
my $pv = $prop->{$prop_name}; |
79 |
|
|
$pv =~ tr/\x0D\x0A/ /; |
80 |
|
|
print $user_prop_file $v . ':' . $pv . "\x0A"; |
81 |
|
|
} |
82 |
|
|
} |
83 |
|
|
close $user_prop_file_name; |
84 |
|
|
|
85 |
|
|
system_ ('cvs', 'add', $user_prop_file_name) unless $has_file; |
86 |
|
|
} # set_prop_hash |
87 |
|
|
|
88 |
|
|
sub commit ($) { |
89 |
|
|
my $msg = shift // $0; |
90 |
|
|
system_ ('cvs', 'commit', -m => $msg, $user_data_dir_name); |
91 |
|
|
} # commit |
92 |
|
|
|
93 |
|
|
sub get_user_prop ($) { |
94 |
|
|
my $user_id = shift; |
95 |
|
|
return get_prop_hash ($user_data_dir_name . $user_id . $user_prop_file_suffix); |
96 |
|
|
} # get_user_prop |
97 |
|
|
|
98 |
|
|
sub set_user_prop ($$) { |
99 |
|
|
my ($user_id, $prop) = @_; |
100 |
|
|
return set_prop_hash ($user_data_dir_name . $user_id . $user_prop_file_suffix, |
101 |
|
|
$prop); |
102 |
|
|
} # set_user_prop |
103 |
|
|
|
104 |
|
|
sub get_group_prop ($) { |
105 |
|
|
my $group_id = shift; |
106 |
|
|
return get_prop_hash ($group_data_dir_name . |
107 |
|
|
$group_id . $group_prop_file_suffix); |
108 |
|
|
} # get_group_prop |
109 |
|
|
|
110 |
|
|
sub set_group_prop ($$) { |
111 |
|
|
my ($group_id, $prop) = @_; |
112 |
|
|
return set_prop_hash ($group_data_dir_name . |
113 |
|
|
$group_id . $group_prop_file_suffix, |
114 |
|
|
$prop); |
115 |
|
|
} # set_group_prop |
116 |
|
|
|
117 |
|
|
sub get_all_users () { |
118 |
|
|
my @r; |
119 |
|
|
opendir my $user_data_dir, $user_data_dir_name; |
120 |
|
|
for (readdir $user_data_dir) { |
121 |
|
|
if (/^([0-9a-z-]+)\Q$user_prop_file_suffix\E$/) { |
122 |
|
|
push @r, $1; |
123 |
|
|
} |
124 |
|
|
} |
125 |
|
|
return @r; |
126 |
|
|
} # get_all_users |
127 |
|
|
|
128 |
|
|
sub get_all_groups () { |
129 |
|
|
my @r; |
130 |
|
|
opendir my $group_data_dir, $group_data_dir_name; |
131 |
|
|
for (readdir $group_data_dir) { |
132 |
|
|
if (/^([0-9a-z-]+)\Q$group_prop_file_suffix\E$/) { |
133 |
|
|
push @r, $1; |
134 |
|
|
} |
135 |
|
|
} |
136 |
|
|
return @r; |
137 |
|
|
} # get_all_groups |
138 |
|
|
|
139 |
|
|
sub regenerate_htpasswd_and_htgroup () { |
140 |
|
|
my %htpasswd; |
141 |
|
|
my %htgroup; |
142 |
|
|
|
143 |
|
|
my @group = get_all_groups (); |
144 |
|
|
|
145 |
|
|
for my $user_id (get_all_users ()) { |
146 |
|
|
my $user_prop = get_user_prop ($user_id); |
147 |
|
|
next if $user_prop->{disabled}; |
148 |
|
|
next unless $user_prop->{pass_crypted}; |
149 |
|
|
|
150 |
|
|
$htpasswd{$user_id} = $user_prop->{pass_crypted}; |
151 |
|
|
|
152 |
|
|
for (@group) { |
153 |
|
|
if ($user_prop->{'group.' . $_}->{member}) { |
154 |
|
|
$htgroup{$_}->{$user_id} = 1; |
155 |
|
|
} |
156 |
|
|
} |
157 |
|
|
} |
158 |
|
|
|
159 |
|
|
open my $file, '>', $htpasswd_file_name or die "$0: $htpasswd_file_name: $!"; |
160 |
|
|
for (sort {$a cmp $b} keys %htpasswd) { |
161 |
|
|
print $file $_, ':', $htpasswd{$_}, "\x0A"; |
162 |
|
|
} |
163 |
|
|
|
164 |
|
|
open my $file, '>', $htgroup_file_name or die "$0: $htgroup_file_name: $!"; |
165 |
|
|
for my $group_id (sort {$a cmp $b} keys %htgroup) { |
166 |
|
|
print $file $group_id, ': ', |
167 |
|
|
join ' ', sort {$a cmp $b} keys %{$htgroup{$group_id}}; |
168 |
|
|
print $file "\x0A"; |
169 |
|
|
} |
170 |
|
|
} # regenerate_htpasswd_and_htgroup |
171 |
|
|
|
172 |
|
|
sub print_error ($$) { |
173 |
|
|
my ($code, $text) = @_; |
174 |
|
|
binmode STDOUT, ':encoding(utf-8)'; |
175 |
|
|
print qq[Status: $code $text |
176 |
|
|
Content-Type: text/html; charset=utf-8 |
177 |
|
|
|
178 |
|
|
<!DOCTYPE HTML> |
179 |
|
|
<html lang=en> |
180 |
|
|
<title>$code @{[htescape ($text)]}</title> |
181 |
|
|
<h1>Error</h1> |
182 |
|
|
<p>@{[htescape ($text)]}.<!--]; |
183 |
|
|
print 0 for 0..511; # for WinIE |
184 |
|
|
print q[-->]; |
185 |
|
|
} # print_error |
186 |
|
|
|
187 |
|
|
sub check_password ($) { |
188 |
|
|
my $cgi = shift; |
189 |
|
|
|
190 |
|
|
my $user_pass = $cgi->get_parameter ('user-pass'); |
191 |
|
|
my $user_pass2 = $cgi->get_parameter ('user-pass2'); |
192 |
|
|
if ($user_pass ne $user_pass2) { |
193 |
|
|
print_error (400, 'Two passwords you input are different'); |
194 |
|
|
exit; |
195 |
|
|
} |
196 |
|
|
|
197 |
|
|
if (4 > length $user_pass) { |
198 |
|
|
print_error (400, 'Password must be longer than 3 characters'); |
199 |
|
|
exit; |
200 |
|
|
} |
201 |
|
|
|
202 |
|
|
my $pass_crypted = crypt $user_pass, |
203 |
|
|
join '', (0..9, 'A'..'Z', 'a'..'z')[rand 64, rand 64]; |
204 |
|
|
return $pass_crypted; |
205 |
|
|
} # check_password |
206 |
|
|
|
207 |
|
|
sub system_ (@) { |
208 |
|
|
(system join (' ', map {quotemeta $_} @_) . " > /dev/null") == 0 |
209 |
|
|
or die "$0: $?"; |
210 |
|
|
} # system_ |
211 |
|
|
|
212 |
|
|
sub htescape ($) { |
213 |
|
|
my $s = shift; |
214 |
|
|
$s =~ s/&/&/g; |
215 |
|
|
$s =~ s/</</g; |
216 |
|
|
$s =~ s/>/>/g; |
217 |
|
|
$s =~ s/"/"/g; |
218 |
|
|
return $s; |
219 |
|
|
} # htescape |
220 |
|
|
|
221 |
|
|
1; |