]>
git.ipfire.org Git - people/teissler/ipfire-2.x.git/blob - html/cgi-bin/webaccess.cgi
2 ###############################################################################
4 # IPFire.org - A linux based firewall #
5 # Copyright (C) 2007 Michael Tremer & Christian Schmidt #
7 # This program is free software: you can redistribute it and/or modify #
8 # it under the terms of the GNU General Public License as published by #
9 # the Free Software Foundation, either version 3 of the License, or #
10 # (at your option) any later version. #
12 # This program is distributed in the hope that it will be useful, #
13 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
15 # GNU General Public License for more details. #
17 # You should have received a copy of the GNU General Public License #
18 # along with this program. If not, see <http://www.gnu.org/licenses/>. #
20 ###############################################################################
24 my $swroot = "/var/ipfire";
25 my $apdir = "$swroot/proxy/advanced";
26 my $group_def_file = "$apdir/cre/classrooms";
27 my $svhosts_file = "$apdir/cre/supervisors";
28 my $acl_src_noaccess_ips = "$apdir/acls/src_noaccess_ip.acl";
29 my $acl_src_noaccess_mac = "$apdir/acls/src_noaccess_mac.acl";
31 my $banner = "A D V A N C E D P R O X Y - W E B A C C E S S M A N A G E R";
40 ### Initialize environment
41 &readhash
("${swroot}/main/settings", \
%mainsettings);
42 &readhash
("${swroot}/proxy/advanced/settings", \
%proxysettings);
43 $language = $mainsettings{'LANGUAGE'};
45 ### Initialize language
46 if ($language =~ /^(\w+)$/) {$language = $1;}
48 # Uncomment this to force a certain language:
51 require "${swroot}/langs/en.pl";
52 require "${swroot}/langs/${language}.pl";
54 &getcgihash
(\
%cgiparams);
61 if ($cgiparams{$_} eq $tr{'advproxy mode deny'}) { $acl{$_}='on'; }
62 if ($cgiparams{$_} eq $tr{'advproxy mode allow'}) { $acl{$_}='off'; }
69 if ((-e
$svhosts_file) && (!-z
$svhosts_file))
71 open (FILE
, $svhosts_file);
75 if ($ENV{'REMOTE_ADDR'} eq $_) { $is_supervisor=1; }
79 } else { $is_supervisor=1; }
81 if (($cgiparams{'ACTION'} eq 'submit') && ($is_supervisor))
83 if ( ($cgiparams{'PASSWORD'} eq $proxysettings{'SUPERVISOR_PASSWORD'}) && (!($proxysettings{'SUPERVISOR_PASSWORD'} eq '')) ||
84 ((defined($proxysettings{'SUPERVISOR_PASSWORD'})) && ($proxysettings{'SUPERVISOR_PASSWORD'} eq '')))
87 system("/usr/local/bin/squidctrl restart >/dev/null 2>&1");
95 # -------------------------------------------------------------------
99 Cache-control: no-cache
101 Content-type: text/html
103 <!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN' 'http://www.w3.org/TR/html4/loose.dtd'>
106 <meta http-equiv='Content-Type' content='text/html; charset=UTF-8'>
107 <title>Advanced Proxy - Web Access Manager</title>
108 <style type='text/css'>
109 a:link { text-decoration:none; font-family:verdana,arial,helvetica; font-weight:bold; color:#ffffff; }
110 a:visited { text-decoration:none; font-family:verdana,arial,helvetica; font-weight:bold; color:#ffffff; }
111 a:hover { text-decoration:none; font-family:verdana,arial,helvetica; font-weight:bold; color:#000000; }
112 a:active { text-decoration:none; font-family:verdana,arial,helvetica; font-weight:bold; color:#000000; }
113 a:focus { text-decoration:none; font-family:verdana,arial,helvetica; font-weight:bold; color:#ffffff; }
116 <body bgcolor='#FFFFFF'>
120 <form method='post' action='$ENV{'SCRIPT_NAME'}'>
122 <table width='720' cellspacing='10' cellpadding='5' border='0'>
125 <td bgcolor='#C0C0C0' height='20'></td>
129 <td bgcolor='#F4F4F4' align='center'>
130 <table width='100%' cellspacing='10' cellpadding='10' border='0'>
133 <td nowrap bgcolor='#FFFFFF' align='center'>
134 <font face='verdana,arial,helvetica' color='#000000' size='3'>$banner</font>
140 if ($proxysettings{'CLASSROOM_EXT'} eq 'on')
147 <table width='70%' cellspacing='2' cellpadding='2' border='0' align='center'>
148 <tr><td><input type='hidden' name='ACTION' value='submit'></td></tr>
152 if (($is_supervisor) && ((defined($proxysettings{'SUPERVISOR_PASSWORD'})) && (!($proxysettings{'SUPERVISOR_PASSWORD'} eq ''))))
156 <font face='verdana,arial,helvetica' color='#000000' size='2'>$tr{'advproxy supervisor password'}:</font>
158 <td align='center'><input type='password' name='PASSWORD' size='15'></td>
174 print"<table width='65%' cellspacing='2' cellpadding='2' border='0' align='center' rules='groups'>";
176 print"<table width='50%' cellspacing='2' cellpadding='6' border='0' align='center' rules='groups'>";
179 if ((defined($acl{$_})) && ($acl{$_} eq 'on'))
181 print " <td bgcolor='#D00000' align='center'><font face='verdana,arial,helvetica' color='#FFFFFF' size='2'>$_</font>";
182 } else { print " <td bgcolor='#00A000' align='center'><font face='verdana,arial,helvetica' color='#FFFFFF' size='2'>$_</font>"; }
185 if ((defined($acl{$_})) && ($acl{$_} eq 'on'))
187 print "</td><td width='120' align='center'>";
188 print "<input type='submit' name='$_' value=' $tr{'advproxy mode allow'} '>";
189 print "</td><td width='16' bgcolor='#D00000'> </td>\n";
191 print "</td><td width='120' align='center'>";
192 print "<input type='submit' name='$_' value=' $tr{'advproxy mode deny'} '>";
193 print "</td><td width='16' bgcolor='#00A000'> </td>\n";
198 print"<table width='65%' cellspacing='2' cellpadding='2' border='0' align='center'>";
199 print "<tr><td></td></tr>\n";
210 print " <td align='center'>\n";
211 print " <font face='verdana,arial,helvetica' color='#000000' size='2'>$tr{'advproxy no cre groups'}</font>\n";
217 print " <td align='center'>\n";
218 print " <font face='verdana,arial,helvetica' color='#000000' size='2'>$tr{'advproxy cre disabled'}</font>\n";
231 <td bgcolor='#C0C0C0' align='right'>
232 <font face='verdana,arial,helvetica' color='#FFFFFF' size='1'>
233 <a href='http://www.advproxy.net' target='_blank'>Advanced Proxy</a> running on
234 <a href='http://www.ipfire.org' target='_blank'>IPFire</a>
251 # -------------------------------------------------------------------
255 my $filename = $_[0];
261 open(FILE
, $filename) or die "Unable to read file $filename";
265 ($var, $val) = split /=/, $_, 2;
271 # Untaint variables read from hash
272 $var =~ /([A-Za-z0-9_-]*)/; $var = $1;
273 $val =~ /([\w\W]*)/; $val = $1;
274 $hash->{$var} = $val;
281 # -------------------------------------------------------------------
285 my ($hash, $params) = @_;
286 my $cgi = CGI
->new ();
287 return if ($ENV{'REQUEST_METHOD'} ne 'POST');
288 if (!$params->{'wantfile'}) {
289 $CGI::DISABLE_UPLOADS
= 1;
290 $CGI::POST_MAX
= 512 * 1024;
292 $CGI::POST_MAX
= 10 * 1024 * 1024;
295 $cgi->referer() =~ m/^https?\:\/\
/([^\/]+)/;
297 $cgi->url() =~ m/^https?\:\/\
/([^\/]+)/;
299 return if ($referer ne $servername);
301 ### Modified for getting multi-vars, split by |
302 %temp = $cgi->Vars();
303 foreach my $key (keys %temp) {
304 $hash->{$key} = $temp{$key};
305 $hash->{$key} =~ s/\0/|/g;
306 $hash->{$key} =~ s/^\s*(.*?)\s*$/$1/;
309 if (($params->{'wantfile'})&&($params->{'filevar'})) {
310 $hash->{$params->{'filevar'}} = $cgi->upload
311 ($params->{'filevar'});
316 # -------------------------------------------------------------------
321 open (FILE
,"$acl_src_noaccess_ips");
322 my @aclgroups = <FILE
>;
335 # -------------------------------------------------------------------
341 open (FILE
,"$group_def_file");
342 @group_defs = <FILE
>;
346 foreach (@group_defs)
349 if (/^\s*\[.*\]\s*$/)
352 $grpstr =~ s/^\s*\[\s*//;
353 $grpstr =~ s/\s*\]\s*$//;
354 push(@groups,$grpstr);
359 # -------------------------------------------------------------------
365 open (FILE_IPS
,">$acl_src_noaccess_ips");
366 open (FILE_MAC
,">$acl_src_noaccess_mac");
369 foreach (@group_defs)
371 if (/^\s*\[.*\]\s*$/)
375 if ((defined($acl{$_})) && ($acl{$_} eq 'on'))
377 print FILE_IPS
"# $_\n";
378 print FILE_MAC
"# $_\n";
380 } else { $is_blocked=0; }
381 } elsif (($is_blocked) && ($_))
383 s/^\s+//g; s/\s+$//g;
384 /^[0-9a-f]{2}:[0-9a-f]{2}:[0-9a-f]{2}:[0-9a-f]{2}:[0-9a-f]{2}:[0-9a-f]{2}$/i ?
print FILE_MAC
"$_\n" : print FILE_IPS
"$_\n";
392 # -------------------------------------------------------------------