| rev | 
   line source | 
| 
bsw/jbe@4
 | 
     1 #include <stdlib.h>
 | 
| 
bsw/jbe@4
 | 
     2 #include <stdio.h>
 | 
| 
bsw/jbe@4
 | 
     3 #include <libpq-fe.h>
 | 
| 
bsw/jbe@4
 | 
     4 #include <string.h>
 | 
| 
bsw/jbe@4
 | 
     5 #include <regex.h>
 | 
| 
bsw/jbe@4
 | 
     6 #include <sys/types.h>
 | 
| 
bsw/jbe@4
 | 
     7 #include <sys/stat.h>
 | 
| 
bsw/jbe@4
 | 
     8 #include <unistd.h>
 | 
| 
bsw/jbe@4
 | 
     9 
 | 
| 
bsw/jbe@4
 | 
    10 #ifndef GETPIC_CONNINFO
 | 
| 
bsw/jbe@4
 | 
    11 #define GETPIC_CONNINFO "dbname=liquid_feedback"
 | 
| 
bsw/jbe@4
 | 
    12 #endif
 | 
| 
bsw/jbe@4
 | 
    13 
 | 
| 
bsw/jbe@4
 | 
    14 #ifndef GETPIC_DEFAULT_AVATAR
 | 
| 
bsw/jbe@4
 | 
    15 #define GETPIC_DEFAULT_AVATAR "/opt/liquid_feedback_testing/app/static/avatar.jpg"
 | 
| 
bsw/jbe@4
 | 
    16 #endif
 | 
| 
bsw/jbe@4
 | 
    17 
 | 
| 
bsw/jbe@4
 | 
    18 int main(int argc, const char * const *argv) {
 | 
| 
bsw/jbe@4
 | 
    19 
 | 
| 
bsw/jbe@4
 | 
    20   char *args_string;
 | 
| 
bsw/jbe@4
 | 
    21   char *member_id;
 | 
| 
bsw/jbe@4
 | 
    22   char *image_type;
 | 
| 
bsw/jbe@4
 | 
    23   char *sql_member_image_params[2];
 | 
| 
bsw/jbe@4
 | 
    24 
 | 
| 
bsw/jbe@5
 | 
    25   char *cookies;
 | 
| 
bsw/jbe@5
 | 
    26   regex_t session_ident_regex;
 | 
| 
bsw/jbe@4
 | 
    27   ssize_t start, length;
 | 
| 
bsw/jbe@5
 | 
    28   regmatch_t session_ident_regmatch[3];
 | 
| 
bsw/jbe@4
 | 
    29   char *session_ident;
 | 
| 
bsw/jbe@5
 | 
    30   char *sql_session_params[1];
 | 
| 
bsw/jbe@4
 | 
    31 
 | 
| 
bsw/jbe@5
 | 
    32   PGconn *conn;
 | 
| 
bsw/jbe@5
 | 
    33   PGresult *dbr;
 | 
| 
bsw/jbe@4
 | 
    34 
 | 
| 
bsw/jbe@4
 | 
    35   args_string = getenv("QUERY_STRING");
 | 
| 
bsw/jbe@5
 | 
    36   cookies = getenv("HTTP_COOKIE");
 | 
| 
bsw/jbe@5
 | 
    37   if (!args_string || !cookies) {
 | 
| 
bsw/jbe@4
 | 
    38     fputs("Status: 403 Access Denied\n\n", stdout);
 | 
| 
bsw/jbe@4
 | 
    39     return 0;
 | 
| 
bsw/jbe@4
 | 
    40   }
 | 
| 
bsw/jbe@4
 | 
    41 
 | 
| 
bsw/jbe@4
 | 
    42   member_id   = strtok(args_string, "+");
 | 
| 
bsw/jbe@4
 | 
    43   image_type  = strtok(NULL, "+");
 | 
| 
bsw/jbe@4
 | 
    44   sql_member_image_params[0] = member_id;
 | 
| 
bsw/jbe@4
 | 
    45   sql_member_image_params[1] = image_type;
 | 
| 
bsw/jbe@4
 | 
    46 
 | 
| 
bsw/jbe@5
 | 
    47   if (regcomp(&session_ident_regex, "(^|[; \t])liquid_feedback_session=([0-9A-Za-z]+)", REG_EXTENDED) != 0) {
 | 
| 
bsw/jbe@4
 | 
    48     // shouldn't happen
 | 
| 
bsw/jbe@4
 | 
    49     abort();
 | 
| 
bsw/jbe@4
 | 
    50   }
 | 
| 
bsw/jbe@4
 | 
    51   if (regexec(&session_ident_regex, cookies, 2, session_ident_regmatch, 0) != 0) {
 | 
| 
bsw/jbe@4
 | 
    52     fputs("Status: 403 Access Denied\n\n", stdout);
 | 
| 
bsw/jbe@4
 | 
    53     return 0;
 | 
| 
bsw/jbe@4
 | 
    54   }
 | 
| 
bsw/jbe@5
 | 
    55   start = session_ident_regmatch[2].rm_so;
 | 
| 
bsw/jbe@5
 | 
    56   length = session_ident_regmatch[2].rm_eo - session_ident_regmatch[2].rm_so;
 | 
| 
bsw/jbe@4
 | 
    57   session_ident = malloc(length + 1);
 | 
| 
bsw/jbe@5
 | 
    58   if (!session_ident) abort();  // shouldn't happen
 | 
| 
bsw/jbe@4
 | 
    59   strncpy(session_ident, cookies + start, length);
 | 
| 
bsw/jbe@4
 | 
    60   session_ident[length] = 0;
 | 
| 
bsw/jbe@4
 | 
    61   sql_session_params[0] = session_ident;
 | 
| 
bsw/jbe@4
 | 
    62 
 | 
| 
bsw/jbe@4
 | 
    63   conn = PQconnectdb(GETPIC_CONNINFO);
 | 
| 
bsw/jbe@4
 | 
    64   if (!conn) {
 | 
| 
bsw/jbe@4
 | 
    65     fputs("Could not create PGconn structure.\n", stderr);
 | 
| 
bsw/jbe@4
 | 
    66     return 1;
 | 
| 
bsw/jbe@4
 | 
    67   }
 | 
| 
bsw/jbe@4
 | 
    68   if (PQstatus(conn) != CONNECTION_OK) {
 | 
| 
bsw/jbe@4
 | 
    69     fputs(PQerrorMessage(conn), stderr);
 | 
| 
bsw/jbe@5
 | 
    70     PQfinish(conn);
 | 
| 
bsw/jbe@4
 | 
    71     return 1;
 | 
| 
bsw/jbe@4
 | 
    72   }
 | 
| 
bsw/jbe@4
 | 
    73 
 | 
| 
bsw/jbe@4
 | 
    74   dbr = PQexecParams(conn,
 | 
| 
bsw/jbe@4
 | 
    75     "SELECT NULL FROM session JOIN member ON member.id = session.member_id WHERE session.ident = $1 AND member.active",
 | 
| 
bsw/jbe@4
 | 
    76     1, NULL, sql_session_params, NULL, NULL, 0
 | 
| 
bsw/jbe@4
 | 
    77   );
 | 
| 
bsw/jbe@4
 | 
    78   if (PQresultStatus(dbr) != PGRES_TUPLES_OK) {
 | 
| 
bsw/jbe@4
 | 
    79     fputs(PQresultErrorMessage(dbr), stderr);
 | 
| 
bsw/jbe@5
 | 
    80     PQfinish(conn);
 | 
| 
bsw/jbe@4
 | 
    81     return 1;
 | 
| 
bsw/jbe@4
 | 
    82   }
 | 
| 
bsw/jbe@4
 | 
    83   if (PQntuples(dbr) != 1) {
 | 
| 
bsw/jbe@4
 | 
    84     fputs("Status: 403 Access Denied\n\n", stdout);
 | 
| 
bsw/jbe@5
 | 
    85     PQfinish(conn);
 | 
| 
bsw/jbe@4
 | 
    86     return 0;
 | 
| 
bsw/jbe@4
 | 
    87   }
 | 
| 
bsw/jbe@4
 | 
    88 
 | 
| 
bsw/jbe@4
 | 
    89   dbr = PQexecParams(conn,
 | 
| 
bsw/jbe@4
 | 
    90     "SELECT content_type, data "
 | 
| 
bsw/jbe@4
 | 
    91     "FROM member_image "
 | 
| 
bsw/jbe@4
 | 
    92     "WHERE member_id = $1 "
 | 
| 
bsw/jbe@4
 | 
    93     "AND image_type = $2 "
 | 
| 
bsw/jbe@4
 | 
    94     "AND scaled "
 | 
| 
bsw/jbe@4
 | 
    95     "LIMIT 1;",
 | 
| 
bsw/jbe@4
 | 
    96     2, NULL, sql_member_image_params, NULL, NULL, 1
 | 
| 
bsw/jbe@4
 | 
    97   );
 | 
| 
bsw/jbe@4
 | 
    98   if (PQresultStatus(dbr) != PGRES_TUPLES_OK) {
 | 
| 
bsw/jbe@4
 | 
    99     fputs(PQresultErrorMessage(dbr), stderr);
 | 
| 
bsw/jbe@5
 | 
   100     PQfinish(conn);
 | 
| 
bsw/jbe@4
 | 
   101     return 1;
 | 
| 
bsw/jbe@4
 | 
   102   }
 | 
| 
bsw/jbe@4
 | 
   103   if (PQntuples(dbr) == 0) {
 | 
| 
bsw/jbe@4
 | 
   104     struct stat sb;
 | 
| 
bsw/jbe@4
 | 
   105     PQclear(dbr);
 | 
| 
bsw/jbe@4
 | 
   106     PQfinish(conn);
 | 
| 
bsw/jbe@4
 | 
   107     fputs("Content-Type: image/jpeg\n\n", stdout);
 | 
| 
bsw/jbe@4
 | 
   108     if (stat(GETPIC_DEFAULT_AVATAR, &sb)) return 1;
 | 
| 
bsw/jbe@5
 | 
   109     fprintf(stdout, "Content-Length: %i\n", (int)sb.st_size);
 | 
| 
bsw/jbe@4
 | 
   110     execl("/bin/cat", "cat", GETPIC_DEFAULT_AVATAR, NULL);
 | 
| 
bsw/jbe@4
 | 
   111     return 1;
 | 
| 
bsw/jbe@4
 | 
   112   } else {
 | 
| 
bsw/jbe@4
 | 
   113     if (PQnfields(dbr) < 0) {
 | 
| 
bsw/jbe@4
 | 
   114       fputs("Too few columns returned by database.\n", stderr);
 | 
| 
bsw/jbe@5
 | 
   115       PQfinish(conn);
 | 
| 
bsw/jbe@4
 | 
   116       return 1;
 | 
| 
bsw/jbe@4
 | 
   117     }
 | 
| 
bsw/jbe@4
 | 
   118     if (PQfformat(dbr, 0) != 1 || PQfformat(dbr, 1) != 1) {
 | 
| 
bsw/jbe@4
 | 
   119       fputs("Database did not return data in binary format.\n", stderr);
 | 
| 
bsw/jbe@5
 | 
   120       PQfinish(conn);
 | 
| 
bsw/jbe@4
 | 
   121       return 1;
 | 
| 
bsw/jbe@4
 | 
   122     }
 | 
| 
bsw/jbe@4
 | 
   123     if (PQgetisnull(dbr, 0, 0) || PQgetisnull(dbr, 0, 1)) {
 | 
| 
bsw/jbe@4
 | 
   124       fputs("Unexpected NULL in database result.\n", stderr);
 | 
| 
bsw/jbe@5
 | 
   125       PQfinish(conn);
 | 
| 
bsw/jbe@4
 | 
   126       return 1;
 | 
| 
bsw/jbe@4
 | 
   127     }
 | 
| 
bsw/jbe@4
 | 
   128     fputs("Content-Type: ", stdout);
 | 
| 
bsw/jbe@4
 | 
   129     fprintf(stdout, "Content-Length: %i\n", PQgetlength(dbr, 0, 1));
 | 
| 
bsw/jbe@4
 | 
   130     fwrite(PQgetvalue(dbr, 0, 0), PQgetlength(dbr, 0, 0), 1, stdout);
 | 
| 
bsw/jbe@4
 | 
   131     fputs("\n\n", stdout);
 | 
| 
bsw/jbe@4
 | 
   132     fwrite(PQgetvalue(dbr, 0, 1), PQgetlength(dbr, 0, 1), 1, stdout);
 | 
| 
bsw/jbe@4
 | 
   133   }
 | 
| 
bsw/jbe@4
 | 
   134   PQfinish(conn);
 | 
| 
bsw/jbe@4
 | 
   135   return 0;
 | 
| 
bsw/jbe@5
 | 
   136 
 | 
| 
bsw/jbe@4
 | 
   137 }
 |