1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
|
<?
include("aur.inc"); # access AUR common functions
include("submit_po.inc"); # use some form of this for i18n support
set_lang(); # this sets up the visitor's language
check_sid(); # see if they're still logged in
html_header(); # print out the HTML header
print "<center>\n";
# this is the directory that new packages will be uploaded to
#
$UPLOAD_DIR = "/tmp/aur/temp/";
$INCOMING_DIR = "/tmp/aur/incoming/";
if ($_COOKIE["AURSID"]) {
# track upload errors
#
$error = "";
if ($_REQUEST["pkgsubmit"]) {
$pkg_name = escapeshellarg($_FILES["pfile"]["name"]);
# first, see if this package already exists, and if it can be overwritten
#
$pkg_exists = package_exists($pkg_name);
if ($pkg_exists) {
# ok, it exists - should it be overwritten, and does the user have
# the permissions to do so?
#
if (can_overwrite_pkg($pkg_name, $_COOKIE["AURSID"])) {
if (!$_REQUEST["overwrite"]) {
$error = __("You did not tag the 'overwrite' checkbox.");
}
} else {
$error = __("You are not allowed to overwrite the %h%s%h package.",
array("<b>", $pkg_name, "</b>"));
}
}
if (!$error) {
# no errors checking upload permissions, go ahead and try to process
# the uploaded package file.
#
$upload_file = $UPLOAD_DIR . $pkg_name;
if (move_uploaded_file($_FILES["pfile"]["tmp_name"], $upload_file)) {
# ok, we can proceed
#
if (file_exists($INCOMING_DIR . $pkg_name)) {
# blow away the existing file/dir and contents
#
rm_rf($INCOMING_DIR . $pkg_name);
}
} else {
# errors uploading file...
#
$error = __("Error trying to upload file - please try again.");
}
}
# at this point, we can safely unpack the uploaded file and parse
# its contents.
#
if (!mkdir($INCOMING_DIR.$pkg_name)) {
$error = __("Could not create incoming directory: %s.",
array($INCOMING_DIR.$pkg_name));
} else {
if (!chdir($INCOMING_DIR.$pkg_name)) {
$error = __("Could not change directory to %s.",
array($INCOMING_DIR.$pkg_name));
} else {
# try .gz first
#
exec("/bin/sh -c 'tar xzf ".$upload_file."'", $retval);
if (!$retval) {
# now try .bz2 format
#
exec("/bin/sh -c 'tar xjf ".$upload_file."'", $retval);
}
if (!$retval) {
$error = __("Unknown file format for uploaded file.");
}
}
}
# At this point, if no error exists, the package has been extracted
# There should be a $INCOMING_DIR.$pkg_name."/".$pkg_name directory
# if the user packaged it correctly. However, the final sub-directory
# may not exist, in which case, the files will live in,
# $INCOMING_DIR.$pkg_name.
#
if (is_dir($INCOMING_DIR.$pkg_name."/".$pkg_name) &&
is_file($INCOMING_DIR.$pkg_name."/".$pkg_name."/PKGBUILD")) {
# the files were packaged correctly
#
if (!chdir($INCOMING_DIR.$pkg_name."/".$pkg_name)) {
$error = __("Could not change to directory %s.",
array($INCOMING_DIR.$pkg_name."/".$pkg_name));
}
$pkg_dir = $INCOMING_DIR.$pkg_name."/".$pkg_name;
} elseif (is_file($INCOMING_DIR.$pkg_name."/PKGBUILD")) {
# not packaged correctly, but recovery is possible
#
if (!mkdir($INCOMING_DIR.$pkg_name."/".$pkg_name)) {
$error = __("Could not create directory %s.",
array($INCOMING_DIR.$pkg_name."/".$pkg_name));
} else {
exec("/bin/sh -c 'mv * ".$pkg_name."'");
if (!file_exists($INCOMING_DIR.$pkg_name."/".$pkg_name."/PKGBUILD")) {
$error = __("Error exec'ing the mv command.");
}
}
if (!chdir($INCOMING_DIR.$pkg_name."/".$pkg_name)) {
$error = __("Could not change to directory %s.",
array($INCOMING_DIR.$pkg_name."/".$pkg_name));
}
$pkg_dir = $INCOMING_DIR.$pkg_name."/".$pkg_name;
} else {
# some wierd packaging/extraction error - baal
#
$error = __("Error trying to unpack upload - PKGBUILD does not exist.");
}
# if no error, get list of directory contents and process PKGBUILD
#
if (!$error) {
# get list of files
#
$d = dir($pkg_dir);
$pkg_contents = array();
while ($f = $d->read()) {
if ($f != "." && $f != "..") {
$pkg_contents[$f] = filesize($f);
}
}
$d->close();
# process PKGBIULD
#
$pkgbuild = array();
$fp = fopen($pkg_dir."/PKGBUILD", "r");
$seen_build = 0;
while (!feof($fp)) {
$line = trim(fgets($fp));
$lparts = explode("=", $line);
if (count($lparts) == 2) {
# this is a variable/value pair
#
$pkgbuild[$lparts[0]] = $lparts[1];
} else {
# either a comment, blank line, or build function
#
if (substr($lparts[0], 0, 5) == "build") {
$seen_build = 1;
}
}
if ($seen_build) {break;}
}
fclose($fp);
# some error checking on PKGBUILD contents
#
if (!$seen_build) {
$error = __("Missing build function in PKGBUILD.");
}
if (!array_key_exists("md5sums", $pkgbuild)) {
$error = __("Missing md5sums variable in PKGBUILD.");
}
if (!array_key_exists("source", $pkgbuild)) {
$error = __("Missing source variable in PKGBUILD.");
}
if (!array_key_exists("url", $pkgbuild)) {
$error = __("Missing url variable in PKGBUILD.");
}
if (!array_key_exists("pkgdesc", $pkgbuild)) {
$error = __("Missing pkgdesc variable in PKGBUILD.");
}
if (!array_key_exists("pkgrel", $pkgbuild)) {
$error = __("Missing pkgrel variable in PKGBUILD.");
}
if (!array_key_exists("pkgver", $pkgbuild)) {
$error = __("Missing pkgver variable in PKGBUILD.");
}
if (!array_key_exists("pkgname", $pkgbuild)) {
$error = __("Missing pkgname variable in PKGBUILD.");
}
}
# update the backend database if there are no errors
#
if (!$error) {
$dbh = db_connect();
if ($pkg_exists) {
# this is an overwrite of an existing package, the database ID
# needs to be preserved so that any votes are retained. However,
# PackageDepends, PackageSources, and PackageContents can be
# purged.
#
$q = "SELECT * FROM Packages ";
$q.= "WHERE Name = '".mysql_escape_string($_FILES["pfile"]["name"])."'";
$result = db_query($q, $dbh);
$pdata = mysql_fetch_assoc($result);
# flush out old data that will be replaced with new data
#
$q = "DELETE FROM PackageContents WHERE PackageID = ".$pdata["ID"];
db_query($q, $dbh);
$q = "DELETE FROM PackageDepends WHERE PackageID = ".$pdata["ID"];
db_query($q, $dbh);
$q = "DELETE FROM PackageSources WHERE PackageID = ".$pdata["ID"];
db_query($q, $dbh);
# TODO
# $q = "UPDATE Packages ..."
} else {
# this is a brand new package
#
# TODO
# $q = "INSERT ..."
}
}
# TODO clean up on error? How much cleaning to do?
#
if ($error) {
# TODO clean house (filesystem/database)
#
}
}
if (!$_REQUEST["pkgsubmit"] || $error) {
# give the visitor the default upload form
#
if (ini_get("file_uploads")) {
if ($error) {
print "<span class='error'>".$error."</span><br />\n";
print "<br /> <br />\n";
}
print "<form action='/pkgsubmit.php' method='post'";
print " enctype='multipart/form-data'>\n";
print "<input type='hidden' name='pkgsubmit' value='1' />\n";
print "<input type='hidden' name='MAX_FILE_SIZE' value='";
print initeger(ini_get("upload_max_filesize"))."' />\n";
print "<table border='0' cellspacing='5'>\n";
print "<tr>\n";
print " <td span='f4' align='right'>";
print __("Upload package").":</td>\n";
print " <td span='f4' align='left'>";
print "<input type='file' name='pfile' size='30' />\n";
print " </td>\n";
print "</tr>\n";
print "<tr>\n";
print " <td span='f4' align='right'>";
print __("Overwrite existing package?");
print " </td>\n";
print " <td span='f4' align='left'>";
print "<input type='checkbox' name='overwrite' value='1'> ".__("Yes");
print " ";
print "<input type='checkbox' name='overwrite' value='0' checked> ";
print __("No");
print " </td>\n";
print "</tr>\n";
print "<tr>\n";
print " <td> </td>\n";
print " <td align='left'>";
print "<input class='button' type='submit' value='".__("Upload")."' />\n";
print "</td>\n";
print "</tr>\n";
print "</table>\n";
print "</form>\n";
} else {
print __("Sorry, uploads are not permitted by this server.");
print "<br />\n";
}
}
} else {
# visitor is not logged in
#
print __("You must create an account before you can upload packages.");
print "<br />\n";
}
print "</center>\n";
html_footer("\$Id$");
?>
|
