]> git.ipfire.org Git - thirdparty/sarg.git/blob - dansguardian_report.c
Protect a few buffers against overflows
[thirdparty/sarg.git] / dansguardian_report.c
1 /*
2 * SARG Squid Analysis Report Generator http://sarg.sourceforge.net
3 * 1998, 2011
4 *
5 * SARG donations:
6 * please look at http://sarg.sourceforge.net/donations.php
7 * Support:
8 * http://sourceforge.net/projects/sarg/forums/forum/363374
9 * ---------------------------------------------------------------------
10 *
11 * This program is free software; you can redistribute it and/or modify
12 * it under the terms of the GNU General Public License as published by
13 * the Free Software Foundation; either version 2 of the License, or
14 * (at your option) any later version.
15 *
16 * This program is distributed in the hope that it will be useful,
17 * but WITHOUT ANY WARRANTY; without even the implied warranty of
18 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
19 * GNU General Public License for more details.
20 *
21 * You should have received a copy of the GNU General Public License
22 * along with this program; if not, write to the Free Software
23 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111, USA.
24 *
25 */
26
27 #include "include/conf.h"
28 #include "include/defs.h"
29
30 static void show_ignored_dansguardian(FILE *fp_ou,int count)
31 {
32 char ignored[80];
33
34 snprintf(ignored,sizeof(ignored),ngettext("%d more dansguardian entry not shown here…","%d more dansguardian entries not shown here…",count),count);
35 fprintf(fp_ou,"<tr><td class=\"data\"></td><td class=\"data\"></td><td class=\"data\"></td><td class=\"data2 more\">%s</td><td class=\"data\"></td></tr>\n",ignored);
36 }
37
38 void dansguardian_report(void)
39 {
40 FILE *fp_in = NULL, *fp_ou = NULL;
41
42 char buf[MAXLEN];
43 char *url;
44 char dansguardian_in[MAXLEN];
45 char report[MAXLEN];
46 char ip[MAXLEN];
47 char rule[255];
48 char oip[MAXLEN];
49 char user[MAXLEN];
50 char ouser[MAXLEN];
51 char date[15];
52 char date2[15];
53 char hour[15];
54 char ouser2[255];
55 int z=0;
56 int count=0;
57 struct getwordstruct gwarea;
58
59 ouser[0]='\0';
60
61 snprintf(dansguardian_in,sizeof(dansguardian_in),"%s/dansguardian.log",tmp);
62 if(!dansguardian_count) {
63 unlink(dansguardian_in);
64 return;
65 }
66
67 sprintf(report,"%s/dansguardian.html",outdirname);
68
69 if((fp_in=MY_FOPEN(dansguardian_in,"r"))==NULL) {
70 debuga(_("(dansguardian_report) Cannot open log file %s\n"),dansguardian_in);
71 exit(EXIT_FAILURE);
72 }
73
74 if((fp_ou=MY_FOPEN(report,"w"))==NULL) {
75 debuga(_("(dansguardian_report) Cannot open log file %s\n"),report);
76 exit(EXIT_FAILURE);
77 }
78
79 write_html_header(fp_ou,(IndexTree == INDEX_TREE_DATE) ? 3 : 1,_("DansGuardian"),HTML_JS_NONE);
80 fputs("<tr><td class=\"header_c\">",fp_ou);
81 fprintf(fp_ou,_("Period: %s"),period.html);
82 fputs("</td></tr>\n",fp_ou);
83 fprintf(fp_ou,"<tr><th class=\"header_c\">%s</th></tr>\n",_("DansGuardian"));
84 close_html_header(fp_ou);
85
86 fputs("<div class=\"report\"><table cellpadding=\"1\" cellspacing=\"2\">\n",fp_ou);
87 fprintf(fp_ou,"<tr><th class=\"header_l\">%s</th><th class=\"header_l\">%s</th><th class=\"header_l\">%s</th><th class=\"header_l\">%s</th><th class=\"header_l\">%s</th></tr>\n",_("USERID"),_("IP/NAME"),_("DATE/TIME"),_("ACCESSED SITE"),_("CAUSE"));
88
89 while(fgets(buf,sizeof(buf),fp_in)!=NULL) {
90 getword_start(&gwarea,buf);
91 if (getword(user,sizeof(user),&gwarea,'\t')<0 || getword(date2,sizeof(date2),&gwarea,'\t')<0 ||
92 getword(hour,sizeof(hour),&gwarea,'\t')<0 || getword(ip,sizeof(ip),&gwarea,'\t')<0) {
93 debuga(_("Maybe you have a broken record or garbage in your %s file\n"),dansguardian_in);
94 exit(EXIT_FAILURE);
95 }
96 if (getword_ptr(buf,&url,&gwarea,'\t')<0) {
97 debuga(_("Maybe you have a broken url in your %s file\n"),dansguardian_in);
98 exit(EXIT_FAILURE);
99 }
100 if (getword(rule,sizeof(rule),&gwarea,'\n')<0) {
101 debuga(_("Maybe you have a broken rule in your %s file\n"),dansguardian_in);
102 exit(EXIT_FAILURE);
103 }
104
105 if(UserIp)
106 strcpy(user,ip);
107
108 bzero(date, 15);
109 if(strncmp(df,"u",1) != 0) {
110 strncpy(date,date2+6,2);
111 strcat(date,"/");
112 strncat(date,date2+4,2);
113 strcat(date,"/");
114 strncat(date,date2,4);
115 } else {
116 strncpy(date,date2+4,2);
117 strcat(date,"/");
118 strncat(date,date2+6,2);
119 strcat(date,"/");
120 strncat(date,date2,4);
121 }
122
123 if(Ip2Name)
124 ip2name(ip,sizeof(ip));
125
126 if(!z) {
127 strcpy(ouser,user);
128 strcpy(oip,ip);
129 z++;
130 } else {
131 if(strcmp(ouser,user) == 0)
132 user[0]='\0';
133 if(user[0] != '\0')
134 strcpy(ouser,user);
135 if(strcmp(oip,ip) == 0)
136 ip[0]='\0';
137 if(ip[0] != '\0')
138 strcpy(oip,ip);
139 }
140
141 user_find(name, sizeof(name), user);
142
143 if(DansGuardianReportLimit) {
144 if(strcmp(ouser2,name) == 0) {
145 count++;
146 } else {
147 if(count>DansGuardianReportLimit && DansGuardianReportLimit>0)
148 show_ignored_dansguardian(fp_ou,count-DansGuardianReportLimit);
149 count=1;
150 strcpy(ouser2,name);
151 }
152 if(count > DansGuardianReportLimit)
153 continue;
154 }
155
156 fprintf(fp_ou,"<tr><td class=\"data2\">%s</td><td class=\"data2\">%s</td><td class=\"data2\">%s-%s</td><td class=\"data2\">",name,ip,date,hour);
157 output_html_link(fp_ou,url,100);
158 fprintf(fp_ou,"</td><td class=\"data2\">%s</td></tr>\n",rule);
159 }
160 fclose(fp_in);
161
162 if(count>DansGuardianReportLimit && DansGuardianReportLimit>0)
163 show_ignored_dansguardian(fp_ou,count-DansGuardianReportLimit);
164
165 fputs("</table></div>\n",fp_ou);
166 if (write_html_trailer(fp_ou)<0)
167 debuga(_("Write error in file %s\n"),report);
168 if (fclose(fp_ou)==EOF)
169 debuga(_("Failed to close file %s - %s\n"),report,strerror(errno));
170
171 if (unlink(dansguardian_in)) {
172 debuga(_("Cannot delete %s - %s\n"),dansguardian_in,strerror(errno));
173 exit(EXIT_FAILURE);
174 }
175
176 return;
177 }