La Documentation de JFGG

Recuperer parametres HTML POST

Pgm pour recuperer les parametres issus d'une page HTML en POST

• le script pour l'utiliser

• Le source

#include <stdio.h> #include <stdlib.h> #include <time.h> #define MAX_ENTRIES 10000 typedef struct { char *name; char *val; } entry; char *makeword(char *line, char stop); char *fmakeword(FILE *f, char stop, int *len); char x2c(char *what); void unescape_url(char *url); void plustospace(char *str); main(int argc, char *argv[]) { entry entries[MAX_ENTRIES]; register int x,m=0; int cl; FILE *logfile; struct timeval *time; struct timezone *tzp; /* printf("Content-type: text/html%c%c",10,10); */ if(strcmp(getenv("REQUEST_METHOD"),"POST")) { printf("Ce script doit etre reference par METHOD=POST.\n"); exit(1); } if(strcmp(getenv("CONTENT_TYPE"),"application/x-www-form-urlencoded")) { printf("Ce script decode seulement les resultats de FORM.\n"); exit(1); } /* lecture date et temps */ time = malloc(sizeof(time)); tzp = malloc(sizeof(tzp)); gettimeofday(time,tzp); cl = atoi(getenv("CONTENT_LENGTH")); for(x=0;cl && (!feof(stdin));x++) { m=x; entries[x].val = fmakeword(stdin,'&',&cl); plustospace(entries[x].val); unescape_url(entries[x].val); entries[x].name = makeword(entries[x].val,'='); } /* printf("<H2>Exemple de formulaire</H2>"); printf("Vous avez tapez les renseignements suivants:<P>%c",10); printf("<FONT SIZE=+1><UL>%c",10); */ for(x=0; x <= m; x++) { printf("export %s=\"%s\"\n",entries[x].name, entries[x].val,10); fprintf(logfile, "%s=\"%s\"\n",entries[x].name,entries[x].val); } /* printf("</UL></FONT>%c",10); */ fclose (logfile); } #define LF 10 #define CR 13 void getword(char *word, char *line, char stop) { int x = 0,y; for(x=0;((line[x]) && (line[x] != stop));x++) word[x] = line[x]; word[x] = '\0'; if(line[x]) ++x; y=0; while(line[y++] = line[x++]); } char *makeword(char *line, char stop) { int x = 0,y; char *word = (char *) malloc(sizeof(char) * (strlen(line) + 1)); for(x=0;((line[x]) && (line[x] != stop));x++) word[x] = line[x]; word[x] = '\0'; if(line[x]) ++x; y=0; while(line[y++] = line[x++]); return word; } char *fmakeword(FILE *f, char stop, int *cl) { int wsize; char *word; int ll; wsize = 102400; ll=0; word = (char *) malloc(sizeof(char) * (wsize + 1)); while(1) { word[ll] = (char)fgetc(f); if(ll==wsize) { word[ll+1] = '\0'; wsize+=102400; word = (char *)realloc(word,sizeof(char)*(wsize+1)); } --(*cl); if((word[ll] == stop) || (feof(f)) || (!(*cl))) { if(word[ll] != stop) ll++; word[ll] = '\0'; word = (char *) realloc(word, ll+1); return word; } ++ll; } } char x2c(char *what) { register char digit; digit = (what[0] >= 'A' ? ((what[0] & 0xdf) - 'A')+10 : (what[0] - '0')); digit *= 16; digit += (what[1] >= 'A' ? ((what[1] & 0xdf) - 'A')+10 : (what[1] - '0')); return(digit); } void unescape_url(char *url) { register int x,y; for(x=0,y=0;url[y];++x,++y) { if((url[x] = url[y]) == '%') { url[x] = x2c(&url[y+1]); y+=2; } } url[x] = '\0'; } void plustospace(char *str) { register int x; for(x=0;str[x];x++) if(str[x] == '+') str[x] = ' '; } int rind(char *s, char c) { register int x; for(x=strlen(s) - 1;x != -1; x--) if(s[x] == c) return x; return -1; } int getline(char *s, int n, FILE *f) { register int i=0; while(1) { s[i] = (char)fgetc(f); if(s[i] == CR) s[i] = fgetc(f); if((s[i] == 0x4) || (s[i] == LF) || (i == (n-1))) { s[i] = '\0'; return (feof(f) ? 1 : 0); } ++i; } } void send_fd(FILE *f, FILE *fd) { int num_chars=0; char c; while (1) { c = fgetc(f); if(feof(f)) return; fputc(c,fd); } } int ind(char *s, char c) { register int x; for(x=0;s[x];x++) if(s[x] == c) return x; return -1; } void escape_shell_cmd(char *cmd) { register int x,y,l; l=strlen(cmd); for(x=0;cmd[x];x++) { if(ind("&;`'\"|*?~<>^()[]{}$\\",cmd[x]) != -1){ for(y=l+1;y>x;y--) cmd[y] = cmd[y-1]; l++; /* length has been increased */ cmd[x] = '\\'; x++; /* skip the character */ } } }

• le script pour l'utiliser

#=============================================================================== #========== Recuperer les parametres d une FORM en POST ou GET # les parametres saisie dans la FORM vont devenir # Name_FORM="value" #=============================================================================== #======== debug=1 pour lister env if test -z "${Debug}" then export Debug=0 fi ## export Debug=1 export RfIcTmp="/tmp/Recup_Parm_$$" case ${REQUEST_METHOD} in POST|post) ${Emplacement}/Recup_Parm_Form.exe | sort > ${RfIcTmp} if [ $? -eq 0 ] then if [ -s ${RfIcTmp} ] then #Retrait metacaracteres dans la ligne de cde sed "s/;//g;s/\'//g;s/\\\//g;s/\`//g;s/\"//g;s/\$//g;s/=/=\"/;s/$/\"/" ${RfIcTmp} > ${RfIcTmp}_OK . ${RfIcTmp}_OK if [ ${Debug} -eq 0 ]; then rm ${RfIcTmp} rm ${RfIcTmp}_OK fi fi fi ;; GET|get) #Recuperer les parametres en GET ifs=${IFS} ; IFS="&" ; set "--" ${QUERY_STRING} ; IFS=${ifs} while [ $# -gt 0 ]; do val=$( echo $1 | sed 's/^/export /' ) ####eval $val echo $val >> ${RfIcTmp} shift done if [ -s ${RfIcTmp} ] then #Retrait metacaracteres dans la ligne de cde sed "s/%20/ /g;s/;//g;s/\'//g;s/\\\//g;s/\`//g;s/\"//g;s/\$//g;s/=/=\"/;s/$/\"/" ${RfIcTmp} > ${RfIcTmp}_OK . ${RfIcTmp}_OK if [ ${Debug} -eq 0 ]; then rm ${RfIcTmp} rm ${RfIcTmp}_OK fi fi ;; esac if [ ${Debug} -eq 1 ]; then cat << @EOFF <textarea COLS=100% ROWS=10% READONLY> #======== REQUEST_METHOD=${REQUEST_METHOD} #======== Parametres recus $( cat ${RfIcTmp} 2>/dev/null ) #======== Parametres recus et transformes retrait metacaracteres $( cat ${RfIcTmp}_OK 2>/dev/null ) #======== Profile $( env ) </textarea> @EOFF fi

---