blob: 544ac605cd1e5fa2f2354be09972f66b250d7022 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
|
import os
import re
def DisplayLogin():
print 'Content-Type: text/html\n'
print '<html><body>'
print """
<div id="container">
<form action="login.py" method="get">
<label for="username">Username:</label>
<input type="text" id="username" name="username">
<label for="password">Password:</label>
<input type="password" id="password" name="password">
<div id="lower">
<input type="submit" value="Login">
</div><!--/ lower-->
</form>
</div>
"""
print '</body></html>'
exit(0)
def PrintMessages():
print 'Content-Type: text/html\n'
print '<html><body>'
with open("messages", "r") as m_file:
s = m_file.read()
l = s.split('\n')
for i in l:
if len(i) == 0:
continue
i.replace('\\n','\n')
print i
print '<br><br>'
print """
<br><br>
<form action="post.py" method="post" style="display:inline">
<input type="hidden" name="csrfToken" value="""
# csrf protection -- session token sendoff
s_id = os.environ.get('HTTP_COOKIE').split('=')[1] # for reading cookies
with open('sessions', 'r') as s_file:
for line in s_file:
if s_id in line:
print line.split()[2]
print """
<label for="message">Message:</label><br>
<textarea rows="4" cols="50" name="message"></textarea>
<br>
<input type="submit" value="Post"></form>
"""
print """
<form action="logout.py" style="display:inline">
<input type="submit" value="Logout" />
</form>
"""
print '</body></html>'
def ShowError():
print 'Content-Type: text/html\n'
print '<html><body>'
print '<h2> Error ocured :P </h2>'
print '</body></html>'
exit(0)
def Login():
cookie_string = os.environ.get('HTTP_COOKIE') # for reading cookies
g = re.search('session_id=(\w+)', cookie_string) # if g==None -- no cookie
if not g:
return False
with open('sessions', 'r') as s_file:
s = s_file.read()
sid = g.group(1)
g = re.search(sid + ' ' + '(\w+)', s)
if not g:
return False
return g.group(1)
def RedirectToBoard():
#go back to board.py
print 'Content-Type: text/html\n'
print '<meta http-equiv="refresh" content="0; url=board.py" />'
exit(0)
def RemoveAllUserSessions(user):
tmp = ''
f = open('sessions', 'r')
for line in f:
if user not in line:
tmp += line
f.close()
with open('sessions','w') as f:
f.write(tmp)
|
