2015-09-03 21:09:35 +00:00
|
|
|
import http.server
|
2016-07-05 07:24:08 +00:00
|
|
|
import mimetypes
|
2015-10-03 23:29:52 +00:00
|
|
|
import os
|
2016-07-05 07:24:08 +00:00
|
|
|
import urllib.parse
|
|
|
|
|
import random
|
|
|
|
|
import sys
|
|
|
|
|
|
2016-07-10 04:38:49 +00:00
|
|
|
sys.path.append('C:\\git\\else\\Bytestring'); import bytestring
|
|
|
|
|
sys.path.append('C:\\git\\else\\Ratelimiter'); import ratelimiter
|
2015-09-03 21:09:35 +00:00
|
|
|
|
|
|
|
|
f = open('favicon.png', 'rb')
|
|
|
|
|
FAVI = f.read()
|
|
|
|
|
f.close()
|
2016-07-05 07:24:08 +00:00
|
|
|
CWD = os.getcwd()
|
|
|
|
|
|
|
|
|
|
# The paths which the user may access
|
|
|
|
|
# Attempting to access anything outside will 403
|
|
|
|
|
OKAY_PATHS = set(x.lower() for x in ['/files', '/favicon.ico'])
|
|
|
|
|
OPENDIR_TEMPLATE = '''
|
|
|
|
|
<html>
|
|
|
|
|
<body>
|
|
|
|
|
<meta charset="UTF-8">
|
|
|
|
|
<style type="text/css">Body {{font-family:Consolas}}</style>
|
|
|
|
|
<table style="width: 95%">
|
|
|
|
|
{entries}
|
|
|
|
|
</table>
|
|
|
|
|
|
|
|
|
|
</body>
|
|
|
|
|
</html>
|
|
|
|
|
'''
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
class Multipart:
|
|
|
|
|
def __init__(stream, boundary):
|
|
|
|
|
self.parts = []
|
|
|
|
|
|
|
|
|
|
class Path:
|
|
|
|
|
def __init__(self, path):
|
|
|
|
|
path = path.replace('\\', '/')
|
|
|
|
|
if len(path) == 0 or path[0] != '/':
|
|
|
|
|
path = '/' + path
|
|
|
|
|
self.path = path
|
|
|
|
|
|
|
|
|
|
def __repr__(self):
|
|
|
|
|
return 'Path(%s)' % self.path
|
|
|
|
|
|
|
|
|
|
def __str__(self):
|
|
|
|
|
return self.path
|
|
|
|
|
|
|
|
|
|
def anchor(self, display_name=None):
|
|
|
|
|
if display_name is None:
|
|
|
|
|
display_name = self.basename
|
|
|
|
|
if self.is_dir:
|
|
|
|
|
# Folder emoji
|
|
|
|
|
icon = '\U0001F4C1'
|
|
|
|
|
else:
|
|
|
|
|
# Diamond emoji, because there's not one for files.
|
|
|
|
|
icon = '\U0001F48E'
|
2016-07-10 04:38:49 +00:00
|
|
|
|
|
|
|
|
quoted_path = urllib.parse.quote(self.path)
|
|
|
|
|
a = '<a href="{full}">{icon} {display}</a>'.format(
|
|
|
|
|
full=quoted_path,
|
|
|
|
|
icon=icon,
|
|
|
|
|
display=display_name,
|
|
|
|
|
)
|
|
|
|
|
return a
|
2016-07-05 07:24:08 +00:00
|
|
|
|
|
|
|
|
@property
|
|
|
|
|
def basename(self):
|
|
|
|
|
return os.path.basename(self.path)
|
|
|
|
|
|
|
|
|
|
@property
|
|
|
|
|
def is_dir(self):
|
|
|
|
|
return os.path.isdir(self.os_path)
|
|
|
|
|
|
2016-07-10 04:38:49 +00:00
|
|
|
@property
|
|
|
|
|
def is_file(self):
|
|
|
|
|
return os.path.isfile(self.os_path)
|
|
|
|
|
|
2016-07-05 07:24:08 +00:00
|
|
|
@property
|
|
|
|
|
def os_path(self):
|
|
|
|
|
abspath = os.path.join(CWD, self.relative_path)
|
|
|
|
|
#print(abspath)
|
|
|
|
|
return abspath
|
|
|
|
|
|
|
|
|
|
@property
|
|
|
|
|
def parent(self):
|
|
|
|
|
parts = self.path.split('/')[:-1]
|
|
|
|
|
parts = '/'.join(parts)
|
|
|
|
|
return Path(parts)
|
|
|
|
|
|
|
|
|
|
@property
|
|
|
|
|
def relative_path(self):
|
|
|
|
|
return self.path.lstrip('/')
|
|
|
|
|
|
|
|
|
|
@property
|
|
|
|
|
def size(self):
|
|
|
|
|
if self.is_dir:
|
|
|
|
|
return -1
|
|
|
|
|
return os.path.getsize(self.os_path)
|
|
|
|
|
|
|
|
|
|
def table_row(self, display_name=None, shaded=False):
|
|
|
|
|
form = '<tr style="background-color:#{bg}"><td>{anchor}</td><td>{size}</td></tr>'
|
|
|
|
|
bg = 'ddd' if shaded else 'fff';
|
|
|
|
|
size = bytestring.bytestring(self.size) if self.size != -1 else ''
|
2016-07-10 04:38:49 +00:00
|
|
|
row = form.format(
|
|
|
|
|
bg=bg,
|
|
|
|
|
anchor=self.anchor(display_name=display_name),
|
|
|
|
|
size=size,
|
|
|
|
|
)
|
2016-07-05 07:24:08 +00:00
|
|
|
return row
|
2015-09-03 21:09:35 +00:00
|
|
|
|
2015-10-03 23:29:52 +00:00
|
|
|
|
2015-09-03 21:09:35 +00:00
|
|
|
class RequestHandler(http.server.BaseHTTPRequestHandler):
|
|
|
|
|
def write(self, string):
|
|
|
|
|
if isinstance(string, str):
|
|
|
|
|
string = string.encode('utf-8')
|
|
|
|
|
self.wfile.write(string)
|
|
|
|
|
|
2015-10-03 23:29:52 +00:00
|
|
|
def read_filebytes(self, path):
|
|
|
|
|
#print(path)
|
2016-07-05 07:24:08 +00:00
|
|
|
if os.path.isfile(path.relative_path):
|
|
|
|
|
f = open(path.relative_path, 'rb')
|
2015-10-03 23:29:52 +00:00
|
|
|
fr = f.read()
|
|
|
|
|
f.close()
|
|
|
|
|
return fr
|
2016-07-05 07:24:08 +00:00
|
|
|
|
|
|
|
|
if os.path.isdir(path.relative_path):
|
|
|
|
|
text = generate_opendir(path)
|
|
|
|
|
text = text.encode('utf-8')
|
|
|
|
|
return text
|
|
|
|
|
|
2015-10-03 23:29:52 +00:00
|
|
|
self.send_error(404)
|
2016-07-05 07:24:08 +00:00
|
|
|
return bytes()
|
2015-10-03 23:29:52 +00:00
|
|
|
|
2015-09-03 21:09:35 +00:00
|
|
|
def do_GET(self):
|
|
|
|
|
#print(dir(self))
|
2016-07-10 04:38:49 +00:00
|
|
|
path = normalize_path(self.path)
|
|
|
|
|
if self.send_path_validation_error(path):
|
2015-10-03 23:29:52 +00:00
|
|
|
return
|
2016-07-05 07:24:08 +00:00
|
|
|
|
|
|
|
|
path = Path(path)
|
|
|
|
|
|
|
|
|
|
self.send_response(200)
|
|
|
|
|
mime = mimetypes.guess_type(path.path)[0]
|
|
|
|
|
if mime is not None:
|
|
|
|
|
#print(mime)
|
|
|
|
|
self.send_header('Content-type', mime)
|
2016-07-10 04:38:49 +00:00
|
|
|
|
|
|
|
|
if path.is_file:
|
|
|
|
|
self.send_header('Content-length', path.size)
|
2016-07-05 07:24:08 +00:00
|
|
|
|
2015-10-03 23:29:52 +00:00
|
|
|
d = self.read_filebytes(path)
|
2016-07-10 04:38:49 +00:00
|
|
|
#print('write')
|
|
|
|
|
self.end_headers()
|
2015-10-03 23:29:52 +00:00
|
|
|
self.write(d)
|
2015-09-03 21:09:35 +00:00
|
|
|
|
2016-07-10 04:38:49 +00:00
|
|
|
def do_HEAD(self):
|
|
|
|
|
path = normalize_path(self.path)
|
|
|
|
|
if self.send_path_validation_error(path):
|
|
|
|
|
return
|
|
|
|
|
|
|
|
|
|
path = Path(path)
|
|
|
|
|
self.send_response(200)
|
|
|
|
|
|
|
|
|
|
if path.is_dir:
|
|
|
|
|
mime = 'text/html'
|
|
|
|
|
else:
|
|
|
|
|
mime = mimetypes.guess_type(path.path)[0]
|
|
|
|
|
|
|
|
|
|
if mime is not None:
|
|
|
|
|
self.send_header('Content-type', mime)
|
|
|
|
|
|
|
|
|
|
if path.is_file:
|
|
|
|
|
self.send_header('Content-length', path.size)
|
|
|
|
|
|
|
|
|
|
self.end_headers()
|
|
|
|
|
|
|
|
|
|
def path_validation(self, path):
|
|
|
|
|
path = path.lstrip('/')
|
|
|
|
|
absolute_path = os.path.join(CWD, path)
|
|
|
|
|
absolute_path = os.path.abspath(absolute_path)
|
|
|
|
|
path = absolute_path.replace(CWD, '')
|
|
|
|
|
path = path.lstrip('/')
|
|
|
|
|
path = path.replace('\\', '/')
|
|
|
|
|
#if '..' in path:
|
|
|
|
|
# return (403, 'I\'m not going to play games with you.')
|
|
|
|
|
#print(path)
|
|
|
|
|
print(path)
|
|
|
|
|
if not any(path.startswith(okay) for okay in OKAY_PATHS):
|
|
|
|
|
self.send_error(403, 'Stop that!')
|
|
|
|
|
return
|
|
|
|
|
|
|
|
|
|
def send_path_validation_error(self, path):
|
|
|
|
|
error = self.path_validation(path)
|
|
|
|
|
if error:
|
|
|
|
|
self.send_error(*error)
|
|
|
|
|
return True
|
|
|
|
|
return False
|
|
|
|
|
|
2016-07-05 07:24:08 +00:00
|
|
|
# def do_POST(self):
|
|
|
|
|
# path = self.path.lower()
|
|
|
|
|
# path = urllib.parse.unquote(path).rstrip('/')
|
|
|
|
|
|
|
|
|
|
# error = path_validation(path)
|
|
|
|
|
# if error:
|
|
|
|
|
# self.send_error(*error)
|
|
|
|
|
# return
|
|
|
|
|
|
|
|
|
|
# path = Path(path)
|
|
|
|
|
# content_type = self.headers.get('Content-Type', '')
|
|
|
|
|
# if not any (req in content_type for req in ['multipart/form-data', 'boundary=']):
|
|
|
|
|
# self.send_error(400, 'Bad request')
|
|
|
|
|
# return
|
|
|
|
|
|
|
|
|
|
# boundary = content_type.split('boundary=')[1]
|
|
|
|
|
# boundary = boundary.split(';')[0]
|
|
|
|
|
# boundary = boundary.strip()
|
|
|
|
|
# print('B:', self.headers.get_boundary())
|
|
|
|
|
# print('F:', self.headers.get_filename())
|
|
|
|
|
|
|
|
|
|
# incoming_size = int(self.headers.get('Content-Length', 0))
|
|
|
|
|
# received_bytes = 0
|
|
|
|
|
# remaining_bytes = incoming_size
|
|
|
|
|
# while remaining_bytes > 0:
|
|
|
|
|
# chunk_size = min(remaining_bytes, 16*1024)
|
|
|
|
|
# chunk = self.rfile.read(chunk_size)
|
|
|
|
|
# remaining_bytes -= chunk_size
|
|
|
|
|
# received_bytes += chunk_size
|
|
|
|
|
# print(chunk)
|
|
|
|
|
# self.send_response(200)
|
|
|
|
|
# self.send_header('Content-Type', 'text/html')
|
|
|
|
|
# self.end_headers()
|
|
|
|
|
# print(dir(self.request))
|
|
|
|
|
# self.write('Thanks')
|
|
|
|
|
|
|
|
|
|
def generate_opendir(path):
|
2016-07-10 04:38:49 +00:00
|
|
|
#print('Listdir:', path)
|
2016-07-05 07:24:08 +00:00
|
|
|
items = os.listdir(path.relative_path)
|
|
|
|
|
items = [os.path.join(path.relative_path, f) for f in items]
|
2016-07-10 04:38:49 +00:00
|
|
|
|
|
|
|
|
# This places directories above files, each ordered alphabetically
|
|
|
|
|
items.sort(key=str.lower)
|
2016-07-05 07:24:08 +00:00
|
|
|
directories = []
|
|
|
|
|
files = []
|
|
|
|
|
for item in items:
|
|
|
|
|
if os.path.isdir(item):
|
|
|
|
|
directories.append(item)
|
|
|
|
|
else:
|
|
|
|
|
files.append(item)
|
2016-07-10 04:38:49 +00:00
|
|
|
|
|
|
|
|
items = directories + files
|
|
|
|
|
items = [Path(f) for f in items]
|
2016-07-05 07:24:08 +00:00
|
|
|
entries = []
|
|
|
|
|
if not any(okay == path.path for okay in OKAY_PATHS):
|
2016-07-10 04:38:49 +00:00
|
|
|
# If the user is on one of the OKAY_PATHS, then he can't step up
|
|
|
|
|
# because that would be outside the OKAY area.
|
2016-07-05 07:24:08 +00:00
|
|
|
entries.append(path.parent.table_row(display_name='up'))
|
2016-07-10 04:38:49 +00:00
|
|
|
|
2016-07-05 07:24:08 +00:00
|
|
|
shaded = True
|
2016-07-10 04:38:49 +00:00
|
|
|
for item in items:
|
|
|
|
|
entry = item.table_row(shaded=shaded)
|
2016-07-05 07:24:08 +00:00
|
|
|
entries.append(entry)
|
|
|
|
|
shaded = not shaded
|
2016-07-10 04:38:49 +00:00
|
|
|
|
2016-07-05 07:24:08 +00:00
|
|
|
entries = '\n'.join(entries)
|
|
|
|
|
text = OPENDIR_TEMPLATE.format(entries=entries)
|
|
|
|
|
return text
|
|
|
|
|
|
|
|
|
|
def generate_random_filename(original_filename='', length=8):
|
|
|
|
|
import random
|
|
|
|
|
bits = length * 4
|
|
|
|
|
bits = random.getrandbits(bits)
|
|
|
|
|
identifier = '{:x}'.format(bits).rjust(length, '0')
|
|
|
|
|
return identifier
|
|
|
|
|
|
2016-07-10 04:38:49 +00:00
|
|
|
def normalize_path(path):
|
|
|
|
|
#path = path.lower()
|
|
|
|
|
path = urllib.parse.unquote(path).rstrip('/')
|
|
|
|
|
return path
|
|
|
|
|
|
2016-07-05 07:24:08 +00:00
|
|
|
|
|
|
|
|
server = http.server.HTTPServer(('', 32768), RequestHandler)
|
2015-09-03 21:09:35 +00:00
|
|
|
print('server starting')
|
2016-07-05 07:24:08 +00:00
|
|
|
server.serve_forever()
|
