Initial commit.

5 files changed, 528 insertions, 0 deletions

diff --git a/blog/sbs_2/cgi-src/cgiutils.hpp b/blog/sbs_2/cgi-src/cgiutils.hpp
new file mode 100644
index 0000000..3eca4dc
--- /dev/null
+++ b/blog/sbs_2/cgi-src/cgiutils.hpp
@@ -0,0 +1,245 @@
+/*
+ * Copyright 2017 Chris Xiong
+ * 
+ * Permission is hereby granted, free of charge, to any person obtaining
+ * a copy of this software and associated documentation files (the
+ * "Software"), to deal in the Software without restriction, including
+ * without limitation the rights to use, copy, modify, merge, publish,
+ * distribute, sublicense, and/or sell copies of the Software, and to
+ * permit persons to whom the Software is furnished to do so, subject to
+ * the following conditions:
+ * 
+ * The above copyright notice and this permission notice shall be
+ * included in all copies or substantial portions of the Software.
+ * 
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+ * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+ * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+ * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
+ * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
+ * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+ * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+ * SOFTWARE.
+ */
+#ifndef CGILIB_HPP
+#define CGILIB_HPP
+#include <cstdlib>
+#include <map>
+#include <string>
+#include <vector>
+const char* base64_table="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";
+std::string base64_encode(std::string s)
+{
+	std::string r="";
+	for(unsigned i=0;i<s.length();i+=3)
+	{
+		int b=(s[i]&0xFC)>>2;
+		r+=base64_table[b];
+		b=(s[i]&0x03)<<4;
+		if(i+1<s.length())
+		{
+			b|=(s[i+1]&0xF0)>>4;
+			r+=base64_table[b];
+			b=(s[i+1]&0x0F)<<2;
+			if(i+2<s.length())
+			{
+				b|=(s[i+2]&0xC0)>>6;
+				r+=base64_table[b];
+				b=s[i+2]&0x3F;
+				r+=base64_table[b];
+			}else r+=base64_table[b],r+='=';
+		}else r+=base64_table[b],r+="==";
+	}
+	return r;
+}
+void split(std::string s,char c,std::vector<std::string>& v)
+{
+	v.clear();
+	for(size_t anch=0;;)
+	{
+		std::string sec;
+		if(s.find(c,anch)==std::string::npos)
+		sec=s.substr(anch);
+		else sec=s.substr(anch,s.find(c,anch)-anch);
+		v.push_back(sec);
+		if(s.find(c,anch)==std::string::npos)break;
+		anch=s.find(c,anch)+1;
+	}
+}
+std::string trim(std::string s)
+{
+	int l=0;for(;isblank(s[l]);++l)
+	s=s.substr(l);
+	while(isblank(s.back()))s.pop_back();
+	return s;
+}
+class QueryStrParser
+{
+	private:
+		std::map<std::string,std::string> q;
+		void parse(std::string es)
+		{
+			for(size_t anch=0;;)
+			{
+				std::string sec;
+				if(es.find('&',anch)==std::string::npos)
+				sec=es.substr(anch);
+				else sec=es.substr(anch,es.find('&',anch)-anch);
+				if(sec.find('=')==std::string::npos)
+				q[sec.substr(0)]="";
+				else
+				q[sec.substr(0,sec.find('='))]=sec.substr(sec.find('=')+1);
+				if(es.find('&',anch)==std::string::npos)break;
+				anch=es.find('&',anch)+1;
+			}
+		}
+	public:
+		QueryStrParser()
+		{
+			char* e=getenv("QUERY_STRING");
+			if(!e)return;
+			parse(std::string(e));
+		}
+		QueryStrParser(std::string s)
+		{
+			parse(s);
+		}
+		bool exist(std::string s)
+		{
+			return q.find(s)!=q.end();
+		}
+		std::string value(std::string s)
+		{
+			if(!exist(s))return "";
+			return q.find(s)->second;
+		}
+};
+class RequestCookies
+{
+	private:
+		std::map<std::string,std::string> m;
+		void parse(std::string cookie)
+		{
+			std::vector<std::string> v;
+			split(cookie,';',v);
+		}
+	public:
+		RequestCookies()
+		{
+			char* e=getenv("HTTP_COOKIE");
+			if(!e)return;
+			parse(std::string(e));
+		}
+};
+class DOMAttrib
+{
+	private:
+		std::map<std::string,std::string> m;
+	public:
+		DOMAttrib(std::string s="")
+		{
+			for(size_t anch=0;;)
+			{
+				std::string sec;
+				if(s.find('"',anch)==std::string::npos)
+				sec=s.substr(anch);
+				else sec=s.substr(anch,s.find('"',s.find('"',anch)+1)-anch+1);
+				if(sec.find('=')==std::string::npos)
+				m[sec.substr(0)]="";
+				else
+				m[sec.substr(0,sec.find('='))]=sec.substr(sec.find('=')+2),
+				m[sec.substr(0,sec.find('='))].pop_back();
+				if(s.find(' ',anch+sec.length())==std::string::npos)break;
+				anch=s.find(' ',anch+sec.length())+1;
+			}
+		}
+		void setAttrib(std::string a,std::string v){m[a]=v;}
+		void eraseAttrib(std::string a){if(existAttrib(a))m.erase(m.find(a));}
+		bool existAttrib(std::string a){return m.find(a)!=m.end();}
+		std::string getAttrib(std::string a){if(!existAttrib(a))return "";return m[a];}
+		std::string to_string()
+		{
+			std::string r;bool cf=false;
+			for(auto i=m.begin();i!=m.end();++i)
+			{
+				if(cf)r+=' ';else cf=true;
+				r+=i->first+"=\""+i->second+"\"";
+			}
+			return r;
+		}
+};
+static const char* twoxx[]={
+	"OK",
+	"Created",
+	"Accepted",
+	"Non-Authoritative Information",
+	"No Content",
+	"Reset Content",
+	"Partial Content",
+	"Multi-Status",
+	"Already Reported"
+};
+static const char* threexx[]={
+	"Multiple Choices",
+	"Moved Permanently",
+	"Found",
+	"See Other",
+	"Not Modified",
+	"Use Proxy",
+	"???",
+	"Temporary Redirect"
+};
+static const char* fourxx[]={
+	"Bad Request",
+	"Unauthorized",
+	"Payment Required",
+	"Forbidden",
+	"Not Found",
+	"Method Not Allowed",
+	"Not Acceptable",
+	"Proxy Authentication Required",
+	"Request Timeout",
+	"Conflict",
+	"Gone",
+	"Length Required",
+	"Precondition Failed",
+	"Request Entity Too Large",
+	"Request-URI Too Long",
+	"Unsupported Media Type",
+	"Requested Range Not Satisfiable",
+	"Expectation Failed"
+};
+static const char* fivexx[]={
+	"Internal Server Error",
+	"Not Implemented",
+	"Bad Gateway",
+	"Service Unavailable",
+	"Gateway Timeout",
+	"HTTP Version Not Supported"
+};
+class HTTPHeader
+{
+private:
+	int status;
+	std::vector<std::string> hdr;
+public:
+	HTTPHeader(){status=200;}
+	void setStatusCode(int c){status=c;}
+	int statusCode(){return status;}
+	void appendHeader(std::string s){hdr.push_back(s);}
+	void print()
+	{
+		if(status>=200&&status<=208)
+		printf("Status: %d %s\r\n",status,twoxx[status-200]);
+		if(status>=300&&status<=307)
+		printf("Status: %d %s\r\n",status,threexx[status-300]);
+		if(status>=400&&status<=417)
+		printf("Status: %d %s\r\n",status,fourxx[status-400]);
+		if(status>=500&&status<=505)
+		printf("Status: %d %s\r\n",status,fivexx[status-500]);
+		for(unsigned i=0;i<hdr.size();++i)
+		printf("%s\r\n",hdr[i].c_str());
+		printf("\r\n");
+	}
+};
+#endif
diff --git a/blog/sbs_2/cgi-src/get-archive-list b/blog/sbs_2/cgi-src/get-archive-list
new file mode 100755
index 0000000..4285a4d
--- /dev/null
+++ b/blog/sbs_2/cgi-src/get-archive-list
diff --git a/blog/sbs_2/cgi-src/get-archive-list.cpp b/blog/sbs_2/cgi-src/get-archive-list.cpp
new file mode 100644
index 0000000..28f316d
--- /dev/null
+++ b/blog/sbs_2/cgi-src/get-archive-list.cpp
@@ -0,0 +1,200 @@
+/*
+ * Copyright 2017 Chris Xiong
+ * 
+ * Permission is hereby granted, free of charge, to any person obtaining
+ * a copy of this software and associated documentation files (the
+ * "Software"), to deal in the Software without restriction, including
+ * without limitation the rights to use, copy, modify, merge, publish,
+ * distribute, sublicense, and/or sell copies of the Software, and to
+ * permit persons to whom the Software is furnished to do so, subject to
+ * the following conditions:
+ * 
+ * The above copyright notice and this permission notice shall be
+ * included in all copies or substantial portions of the Software.
+ * 
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+ * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+ * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+ * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
+ * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
+ * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+ * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+ * SOFTWARE.
+ */
+/*
+ * Get list of archives
+ * query parameters:
+ * pn=<int>: page number, defaults to 0
+ * pp=<int>: number of posts per page, defaults to 20
+ * pc: if exists, gets how many pages are there from the current pp value
+ * f: tag filter.
+ * gt: get a list of tags used by posts instead.
+ * qn=<filename>: query the neibouring posts of the given post.
+ * returned object:
+ * A number if pc exists denoting number of pages.
+ * Or the following JSON object if gf exists.
+ * ["tag1","tag2",...]
+ * Or the following JSON object if qn exists.
+ * {
+ * 	"prev": <last post>
+ * 	"succ": <next post>
+ * }
+ * Otherwise returns archive list in JSON:
+ * {
+ * 	"postsPerPage": <requested pp>
+ * 	"postsOnPage": <number of posts on this page>
+ * 	"page": <requested pn>
+ * 	"posts": [
+ * 		{
+ * 			"filename": ...
+ * 			"title": ...
+ * 			"date": ...
+ * 			"tags": ...
+ * 		},
+ * 		...
+ * 	]
+ * }
+ */
+#include <dirent.h>
+#include <sys/types.h>
+#include <sys/stat.h>
+#include <unistd.h>
+#include <cstdio>
+#include <cstring>
+#include <algorithm>
+#include <functional>
+#include <vector>
+#include <map>
+#include <set>
+#include <string>
+#include "cgiutils.hpp"
+#define stripr(s) s[strlen(s)-1]=='\n'?s[strlen(s)-1]=0:0
+struct post
+{
+	std::string t,d,tg;
+};
+std::map<std::string,post,std::greater<std::string>> f;
+char buf[65536];
+int main(int argc,char** argv,char** envp)
+{
+	struct stat idxs,cdirs;
+	stat("/var/www/html/blog/content/pindex",&idxs);
+	stat("/var/www/html/blog/content",&cdirs);
+	if(cdirs.st_mtim.tv_sec>idxs.st_mtim.tv_sec)
+	system("/var/www/html/blog/content/util/indexer > /dev/null 2> /dev/null");
+	QueryStrParser a;
+	FILE *fidx=fopen("/var/www/html/blog/content/pindex","r");
+	while(fgets(buf,65536,fidx))
+	{
+		stripr(buf);std::vector<std::string> v;
+		split(std::string(buf),'\t',v);
+		if(v.size()==4)
+		f[v[0]]=post{v[1],v[2],v[3]};
+	}
+	fclose(fidx);
+	HTTPHeader h;
+	if(a.exist("gt"))
+	{
+		std::set<std::string> s;
+		std::vector<std::string> v;
+		for(auto i=f.begin();i!=f.end();++i)
+		{
+			split(i->second.tg,',',v);
+			for(size_t j=0;j<v.size();++j)
+			s.insert("\"#"+v[j]+"\"");
+		}
+		h.appendHeader("Content-type: text/plain; charset=utf-8");
+		h.print();
+		printf("[");
+		auto it=s.begin();
+		printf("%s",it->c_str());
+		while(++it!=s.end())printf(",%s",it->c_str());
+		printf("]");
+	}
+	else
+	{
+		if(a.exist("f"))
+		for(auto i=f.begin();i!=f.end();)
+		{
+			std::vector<std::string> v;
+			split(i->second.tg,',',v);
+			std::set<std::string> sv=std::set<std::string>(v.begin(),v.end());
+			if(sv.find(a.value("f"))==sv.end()){auto t=i++;f.erase(t);}
+			else i++;
+		}
+		if(a.exist("pc"))
+		{
+			int pp=0;
+			if(!a.exist("pp"))pp=20;
+			else{
+				try{
+					pp=std::stoi(a.value("pp"));
+				}catch(std::exception e){h.setStatusCode(400);}
+			}
+			if(!pp)h.setStatusCode(400);
+			h.appendHeader("Content-type: text/plain; charset=utf-8");
+			h.print();
+			printf("%lu\n",f.size()/pp+((f.size()%pp)?1:0));
+			return 0;
+		}
+		else if(a.exist("qn"))
+		{
+			if(f.find(a.value("qn"))==f.end())
+			h.setStatusCode(400);
+			h.print();if(h.statusCode()>=400)return 0;
+			auto i=f.find(a.value("qn"));
+			std::string pr="",sc="";
+			auto t=i;if(t!=f.begin())pr=(--t)->first;
+			t=i;if(!(++t==f.end()))sc=t->first;
+			printf("{\"prev\":\"%s\",\"succ\":\"%s\"}",sc.c_str(),pr.c_str());
+			return 0;
+		}
+		else
+		{
+			unsigned pp=20,pn=0;
+			if(!a.exist("pp"))pp=20;
+			else{
+				try{
+					pp=std::stoi(a.value("pp"));
+				}catch(std::exception e){h.setStatusCode(400);}
+			}
+			if(!a.exist("pn"))pn=0;
+			else{
+				try{
+					pn=std::stoi(a.value("pn"));
+				}catch(std::exception e){h.setStatusCode(400);}
+			}
+			if(!pp)h.setStatusCode(400);
+			if(pn>=f.size()/pp+((f.size()%pp)?1:0))h.setStatusCode(400);
+			int rpp=(pn!=f.size()/pp+((f.size()%pp)?1:0)-1)?pp:
+			f.size()-pp*(f.size()/pp+((f.size()%pp)?1:0)-1);
+			h.appendHeader("Content-type: text/plain; charset=utf-8");
+			h.print();
+			if(h.statusCode()>=400)return 0;
+			puts("{");
+			printf("\t\"postsPerPage\":%d,\n",pp);
+			printf("\t\"postsOnPage\":%d,\n",rpp);
+			printf("\t\"page\":%d,\n",pn);
+			puts("\t\"posts\": [");
+			auto it=f.begin();std::advance(it,pn*pp);
+			for(int i=0;i<rpp-1;++i)
+			{
+				puts("\t\t{");
+				printf("\t\t\t\"filename\":\"%s\",\n",it->first.c_str());
+				printf("\t\t\t\"title\":\"%s\",\n",it->second.t.c_str());
+				printf("\t\t\t\"date\":\"%s\",\n",it->second.d.c_str());
+				printf("\t\t\t\"tags\":\"%s\"\n",it->second.tg.c_str());
+				puts("\t\t},");++it;
+			}
+			puts("\t\t{");
+			printf("\t\t\t\"filename\":\"%s\",\n",it->first.c_str());
+			printf("\t\t\t\"title\":\"%s\",\n",it->second.t.c_str());
+			printf("\t\t\t\"date\":\"%s\",\n",it->second.d.c_str());
+			printf("\t\t\t\"tags\":\"%s\"\n",it->second.tg.c_str());
+			puts("\t\t}");
+			puts("\t]");
+			puts("}");
+		}
+	}
+	return 0;
+}
diff --git a/blog/sbs_2/cgi-src/get-post-content b/blog/sbs_2/cgi-src/get-post-content
new file mode 100755
index 0000000..e6701c8
--- /dev/null
+++ b/blog/sbs_2/cgi-src/get-post-content
diff --git a/blog/sbs_2/cgi-src/get-post-content.cpp b/blog/sbs_2/cgi-src/get-post-content.cpp
new file mode 100644
index 0000000..62cd5d8
--- /dev/null
+++ b/blog/sbs_2/cgi-src/get-post-content.cpp
@@ -0,0 +1,83 @@
+/*
+ * Copyright 2017 Chris Xiong
+ * 
+ * Permission is hereby granted, free of charge, to any person obtaining
+ * a copy of this software and associated documentation files (the
+ * "Software"), to deal in the Software without restriction, including
+ * without limitation the rights to use, copy, modify, merge, publish,
+ * distribute, sublicense, and/or sell copies of the Software, and to
+ * permit persons to whom the Software is furnished to do so, subject to
+ * the following conditions:
+ * 
+ * The above copyright notice and this permission notice shall be
+ * included in all copies or substantial portions of the Software.
+ * 
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+ * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+ * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+ * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
+ * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
+ * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+ * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+ * SOFTWARE.
+ */
+/*
+ * Get content of a post
+ * query parameters:
+ * p=<string>: post file name
+ * returned object:
+ * HTML fragment of the post
+ */
+#include <dirent.h>
+#include <cstdio>
+#include <cstring>
+#include <algorithm>
+#include <functional>
+#include <vector>
+#include <string>
+#include "cgiutils.hpp"
+#define stripr(s) s[strlen(s)-1]=='\n'?s[strlen(s)-1]=0:0
+std::vector<std::string> fn;
+char buf[262144];
+size_t sz;
+void encrypt()
+{
+	std::string b(buf,sz);
+	for(size_t p=b.find("<encrypted"),i=0;p!=std::string::npos;p=b.find("<encrypted",p),++i)
+	{
+		size_t tag_end=b.find(">",p);
+		std::string attrib=b.substr(p+11,tag_end-p-11);
+		DOMAttrib a(attrib);
+		std::string cont=b.substr(tag_end+1,b.find("</encrypted>",p)-tag_end-1);
+		unsigned hash=5381;
+		std::string key=a.getAttrib("key");
+		a.eraseAttrib("key");
+		for(size_t j=0;j<cont.length();++j)
+		{
+			hash=((hash<<5)+hash)+*reinterpret_cast<unsigned char*>(&cont[j]);
+			cont[j]^=key[j%key.length()];
+		}
+		a.setAttrib("encont",base64_encode(cont));
+		a.setAttrib("hash",std::to_string(hash));
+		a.setAttrib("id","encrypted"+std::to_string(i));
+		cont="Encrypted content here. Click <a href=\"javascript:void(0)\" onclick=\"decryptui("+std::to_string(i)+")\">here</a> to decrypt.";
+		b.replace(p,b.find("</encrypted>",p)-p,"<encrypted "+a.to_string()+">"+cont);
+		p=b.find("</encrypted>",p);
+	}
+	memcpy(buf,b.c_str(),b.length());sz=b.length();
+}
+int main(int argc,char** argv,char** envp)
+{
+	QueryStrParser a;
+	HTTPHeader h;
+	if(!a.exist("p")){h.setStatusCode(400);h.print();return 0;}
+	FILE* f=fopen(("/var/www/html/blog/content/"+a.value("p")+".txt").c_str(),"r");
+	if(!f){h.setStatusCode(400);h.print();return 0;}
+	h.appendHeader("Content-type: text/plain; charset=utf-8");
+	h.print();
+	sz=fread(buf,sizeof(char),262144,f);
+	encrypt();
+	fwrite(buf,sizeof(char),sz,stdout);
+	fclose(f);
+	return 0;
+}