use local_cookie for support local-cgi commands
* file.c (loadGeneralFile): pass Local_cookie to DirBufferCommand * fm.h (Local_cookie): Str * local.c (setLocalCookie): Str, set_environ() (set_cgi_environ): remove LOCAL_COOKIE * main.c (ldhelp): pass Local_cookie (adBmark): ditto * rc.c (optionpanel_src1): cookie (load_option_panel): pass Local_cookie * w3mbookmark.c (main): check Local_cookie * w3mhelperpanel (main): ditto * scripts/dirlist.cgi.in: ditto * scripts/w3mhelp.cgi.in: ditto * scripts/multipart/multipart.cgi.in: ditto From: Hironori SAKAMOTO <hsaka@mth.biglobe.ne.jp>
This commit is contained in:
		@@ -28,11 +28,21 @@ if (defined($query)) {
 | 
			
		||||
	}
 | 
			
		||||
	$file = &form_decode($v{'file'});
 | 
			
		||||
	$boundary = &form_decode($v{'boundary'});
 | 
			
		||||
	$cookie = &form_decode($v{'cookie'});
 | 
			
		||||
	if (($cookie eq "") || ($cookie ne $ENV{"LOCAL_COOKIE"})) {
 | 
			
		||||
		print <<EOF;
 | 
			
		||||
Content-Type: text/plain
 | 
			
		||||
 | 
			
		||||
Local cookie doesn't match: It may be an illegal execution
 | 
			
		||||
EOF
 | 
			
		||||
		exit(1);
 | 
			
		||||
	}
 | 
			
		||||
} else {
 | 
			
		||||
	$file = $ARGV[0];
 | 
			
		||||
	if (@ARGV >= 2) {
 | 
			
		||||
		$boundary = $ARGV[1];
 | 
			
		||||
	}
 | 
			
		||||
	$cookie = $ENV{'LOCAL_COOKIE'};
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
open(F, "< $file");
 | 
			
		||||
@@ -121,6 +131,7 @@ if (defined($v{'count'})) {
 | 
			
		||||
$qcgi = &html_quote($CGI);
 | 
			
		||||
$qfile = &html_quote($file);
 | 
			
		||||
$qboundary = &html_quote($boundary);
 | 
			
		||||
$qcookie = &html_quote($cookie);
 | 
			
		||||
 | 
			
		||||
if ($mbody =~ /\S/) {
 | 
			
		||||
	$_ = $mbody;
 | 
			
		||||
@@ -195,9 +206,10 @@ while(! $end) {
 | 
			
		||||
		print "<form method=POST action=\"$qcgi?$count\">\n";
 | 
			
		||||
		print "<input type=hidden name=file value=\"$qfile\">\n";
 | 
			
		||||
		print "<input type=hidden name=boundary value=\"$qboundary\">\n";
 | 
			
		||||
		print "<input type=hidden name=cookie value=\"$qcookie\">\n";
 | 
			
		||||
		print "<input type=hidden name=count value=\"$count\">\n";
 | 
			
		||||
		if ($image) {
 | 
			
		||||
			print "<input type=image name=submit src=\"$CGI?file=$qfile&boundary=$qboundary&count=$count\" alt=\"",
 | 
			
		||||
			print "<input type=image name=submit src=\"$CGI?file=$qfile&boundary=$qboundary&cookie=$qcookie&count=$count\" alt=\"",
 | 
			
		||||
				&html_quote($name), "\">\n";
 | 
			
		||||
		} else {
 | 
			
		||||
			print "<input type=submit name=submit value=\"",
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user