svragv/sakisafe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fixed the shit lol

Browse source
This commit is contained in:
qorg11 2021-10-17 19:00:54 +02:00
parent d041a216f7
commit 6e67fb78ed
No known key found for this signature in database
GPG key ID: 343FC20A4ACA62B9
1 changed files with 12 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
http/upload.cgi
View file

@ -1,4 +1,4 @@
#!/usr/bin/perl #!/usr/local/bin/perl
# This file is part of lainsafe. # This file is part of lainsafe.
# lainsafe is free software: you can redistribute it and/or modify # lainsafe is free software: you can redistribute it and/or modify
@ -16,14 +16,13 @@
use CGI; use CGI;
use CGI::Carp qw(fatalsToBrowser); use CGI::Carp qw(fatalsToBrowser);
use Time::HiRes qw(gettimeofday);
my $q = CGI->new; my $q = CGI->new;
my $filename = $q->param('file'); my $filename = $q->param('file');
my $url = $q->param('url'); my $url = $q->param('url');
my $upload_dir = "files/"; my $upload_dir = "files/";
print $q->header();
$size = $ENV{CONTENT_LENGTH}; $size = $ENV{CONTENT_LENGTH};
@ -34,6 +33,8 @@ our $MAX_SIZE_MB = $MAX_SIZE / 1024 / 1024; # Don't change this
our @not_allowed_extensions = qw(sh out exe); our @not_allowed_extensions = qw(sh out exe);
print $q->header();
# do something better # do something better
if ($url ne "") { if ($url ne "") {
goto url_shorter; goto url_shorter;
@ -74,8 +75,8 @@ if ($filename) {
} }
} }
if ($filename eq "-") { if($filename eq "-") {
$filename .= ".txt"; # for pastes $filename .= ".txt"; # for pastes
} }
if ($allowed_extension) { if ($allowed_extension) {
@ -88,6 +89,7 @@ if ($filename) {
close FILE; close FILE;
$filename =~ s/ /%20/g; $filename =~ s/ /%20/g;
print $prot. "://" . $ENV{HTTP_HOST} . "/$upload_dir$dirname/$filename" . "\n"; print $prot. "://" . $ENV{HTTP_HOST} . "/$upload_dir$dirname/$filename" . "\n";
} else { } else {
print "The file extension .$extension is not allowed in this instance."; print "The file extension .$extension is not allowed in this instance.";
@ -95,13 +97,14 @@ if ($filename) {
exit; exit;
} elsif ($url != "" && !$filename) { } elsif ($url != "" && !$filename) {
url_shorter: url_shorter:
my $template = "<meta http-equiv='Refresh' content='0; url='$url'/>"; my $template = "<meta http-equiv=\"Refresh\" content=\"0; url='$url'\"/>";
my @chars = ("A"..."z","a"..."z",1..9);
my @chars = ("A"..."z","a"..."z");
my $dirname; my $dirname;
$dirname .= $chars[rand @chars] for 1..8; $dirname .= $chars[rand @chars] for 1..4;
mkdir($dirname); mkdir($dirname);
open(my $fh, ">$dirname/index.html"); open(my $fh, ">$dirname/index.html");
print $fh $template; print $fh $template;
my $prot = length $ENV{HTTPS} ? "https" : "http";
print $prot. "://" . $ENV{HTTP_HOST} . "/$dirname" . "\n";
exit; exit;
} }