#!/usr/bin/perl -w #----------------------------------------------------------------------------- # # Copyright (C) 2000 Ryan C. Gordon (icculus@linuxgames.com) # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA # #----------------------------------------------------------------------------- #----------------------------------------------------------------------------- # Revision history: # 1.0.0 : First release # 1.0.2 : Minor bugfixes. # 1.1.0 : Prints version in , more customizable, optionally allows # fingering to arbitrary sites for use as a web interface to finger, # supports VirtualHost sites, better error output. # 1.1.1 : Highlights URLs and email addresses. # 1.2.0 : Changed email address. Moved script name to $script_link. # Reads [title], [url], and [img] tags. #----------------------------------------------------------------------------- # TODO: Let [img] tags nest inside [link] tags. use strict; # Version of IcculusFinger. Change this if you are forking the code. my $version = "v1.2.0"; # This is the default title for the webpage. The user can override it with # the [title] tag in their .plan file. my $title = "IcculusFinger $version"; # Location where the server can find the finger client it will be using # to get information. This string is executed and what it writes to stdout # is read in by this script. my $fingerprog = "/usr/local/bin/finger"; # Uncomment this to always do finger requests to the same host. # Define which host the finger request goes to. If you don't define $host, # then users may finger any system on the internet by specifying a hostname: # user=dimwit@doofus.com, for example. Not setting $host at all like that # could leave a mild exploit available. #my $host = undef; # Makes this script work as a web interface to finger. #my $host = "icculus.org"; # limit queries to users@icculus.org my $host = $ENV{SERVER_NAME}; # This is good for VirtualHost setups. # This is the URL to where the script can be obtained. Feel free to change # it if you like. Leave it undef'd to not supply a link at all in the # final HTML output. #my $scripturl = undef; #my $scripturl = "/misc/finger.pl"; my $scripturl = "http://icculus.org/IcculusFinger/"; # This is printed after the credits at the bottom change it to whatever you # like. Obviously, HTML in the string is acceptable, as is an empty string # (""), but undef doesn't fly here. my $wittyremark = "<br><i>Stick it in the camel and go.</i>"; #-----------------------------------------------------------------------------# # The rest is probably okay without you laying yer dirty mits on it. # #-----------------------------------------------------------------------------# my $script_link = (defined $scripturl) ? "<a href=\"$scripturl\">IcculusFinger $version</a>" : "IcculusFinger $version" ; sub output_start { print <<__EOF__; Content-type: text/html <html> <head> <title> $title __EOF__ } sub output_ending { print <<__EOF__;

$script_link was written by Ryan C. Gordon. $wittyremark __EOF__ } # Mainline. my $user; $host =~ tr/A-Z/a-z/ if defined $host; if ((defined $ENV{GATEWAY_INTERFACE}) and ($ENV{GATEWAY_INTERFACE} ne "")) { my $QueryString = $ENV{QUERY_STRING}; if ($QueryString =~ /user=(.*)/) { $user = $1; $user =~ s/&.*//; $user =~ tr/A-Z/a-z/; } } else { print("\n\nRun this as a cgi-bin: $0?user=login[\@hostname]\n\n\n"); exit 1; } my $requested_host = undef; if ((defined $user) && ($user =~ s/\@(.*)//)) { $requested_host = $1; $requested_host =~ tr/A-Z/a-z/; } my $errormsg = undef; if (not defined $user) { $errormsg = "No user specified."; } elsif ((not defined $host) and (not defined $requested_host)) { $errormsg = "No host specified."; } elsif ((defined $host) and (defined $requested_host)) { if ($host ne $requested_host) { $errormsg = "You aren't permitted to specify a hostname, just a user."; } } elsif (length($user) > 20) { # The 20 char limit is just for safety against potential buffer overflows # in finger servers, but it's more or less arbitrary. # !!! TODO FIXME: Check for bogus characters in username/host. $errormsg = "Bogus user specified."; } if (defined $errormsg) { output_start(); print("

$errormsg

\n"); } else { if (not defined $host) { $host = $requested_host; } if (not open(FINGER, "$fingerprog $user\@$host |")) { output_start(); print("

Couldn't run finger program: $!.

\n\n"); } else { my $output_text = ""; while () { $output_text = $output_text . $_; } close(FINGER); # Change [title][/title] tags. while ($output_text =~ s/\[title\](.*?)\[\/title\]//is) { $title = $1; } # Change [link][/link] tags. 1 while ($output_text =~ s/\[link=\"(.*?)\"\](.*?)\[\/link\]/$2<\/a>/is); # Change [img][/img] tags. 1 while ($output_text =~ s/\[img=\"(.*?)\"\](.*?)\[\/img\]/<\/pre> $\"$2\"$

/is);

        # try to make URLs into hyperlinks in the HTML output.
        1 while ($output_text =~ s/(?)\b([a-zA-z]+?:\/\/[\S]+)/$1<\/a>/);

        # try to make email addresses into hyperlinks in the HTML output.
        1 while ($output_text =~ s/\b(?)\b([\w\.]+?\@[\w\.]+)/$1<\/a>/);

        output_start();
        print("    Finger info for $user\@$host...\n");
        print("    
\n\n\n\n");
        print("$output_text");
        print("\n\n");
    }
}

output_ending();

exit 0;

# end of finger.pl ...