zfc@sdZdZddlmZddlZddlZddlZddlZddlm Z m Z m Z e Iej re dde e dde nddlZddlZWdQXydd lmZWn!ek rdd lmZnXd d d d ddddddddddddddgZdZeadZdZdZead aeejd d ed!Zd d ed"Zd d eed#Zd$Z d%Z!d&Z"d fd'YZ#d fd(YZ$d ejfd)YZ%d e%fd*YZ&de&fd+YZ'de%fd,YZ(ejd-Z)eeeed.Z*ejd/Z+d0Z,d1Z-d2Z.d3Z/ed4Z0d5d6Z1e2d7kre)ndS(8sSupport module for CGI (Common Gateway Interface) scripts. This module defines a number of utilities for use by CGI scripts written in Python. s2.6i(t attrgetterN(tfilterwarningstcatch_warningstwarntignores.*mimetools has been removeds.*rfc822 has been removed(tStringIOtMiniFieldStoraget FieldStoragetFormContentDicttSvFormContentDicttInterpFormContentDictt FormContenttparsetparse_qst parse_qsltparse_multipartt parse_headertprint_exceptiont print_environt print_formtprint_directorytprint_argumentstprint_environ_usagetescapetcGsZtr7t r7yttdaWq7tk r3q7XntsFtantat|dS(sWrite a log message, if there is a log file. Even though this function is called initlog(), you should always use log(); log is a variable that is set either to initlog (initially), to dolog (once the log file has been opened), or to nolog (when logging is disabled). The first argument is a format string; the remaining arguments (if any) are arguments to the % operator, so e.g. log("%s: %s", "a", "b") will write "a: b" to the log file, followed by a newline. If the global logfp is not None, it should be a file object to which log data is written. If the global logfp is None, the global logfile may be a string giving a filename to open, in append mode. This file should be world writable!!! If the file can't be opened, logging is silently disabled (since there is no safe place where we could send an error message). taN(tlogfiletlogfptopentIOErrortnologtlogtdolog(tallargs((s/usr/lib64/python2.7/cgi.pytinitlogGs   cGstj||ddS(s=Write a log message to the log file. See initlog() for docs.s N(Rtwrite(tfmttargs((s/usr/lib64/python2.7/cgi.pyR jscGsdS(s9Dummy function, assigned to log when logging is disabled.N((R!((s/usr/lib64/python2.7/cgi.pyRnsic Cs|dkrtj}nd|kr1d|dR9R:R-((s/usr/lib64/python2.7/cgi.pyR s cCs,tdtdtj||||d|S(s)Parse a query given as a string argument.s;cgi.parse_qsl is deprecated, use urlparse.parse_qsl insteadiR-(RR?R6R(R>R9R:tmax_num_fieldsR-((s/usr/lib64/python2.7/cgi.pyRs cCsd}d|kr|d}nt|s>td|fnd|}d|d}i}d}x'||krd}d}|rtj|} | jd} | ryt| }Wqtk rqXn|dkr tr|tkrtdn|j|}qd}ng} xb|j } | s8|}Pn| d dkrm| j }|||fkrmPqmn| j | qW|dkrqen|dkr| r| d} | d d kr| d } n| dd kr| d } n| | dtcdispR<R;tclen((s/usr/lib64/python2.7/cgi.pyRhs!                                    cCsd|j|j|jfS(s"Return a printable representation.sFieldStorage(%r, %r, %r)(RBRmRf(Rg((s/usr/lib64/python2.7/cgi.pyRi scCst|jS(N(titertkeys(Rg((s/usr/lib64/python2.7/cgi.pyt__iter__scCsx|dkrt|n|jrS|jjd|jj}|jjdn!|jdk rn|j}nd}|S(NRfi(tAttributeErrorRptseekR4RnR.(RgRBRf((s/usr/lib64/python2.7/cgi.pyt __getattr__s    cCs|jdkrtdng}x0|jD]%}|j|kr+|j|q+q+W|sft|nt|dkr|dS|SdS(sDictionary style indexing.s not indexableiiN(RnR.t TypeErrorRBRItKeyErrorRZ(RgRTtfoundtitem((s/usr/lib64/python2.7/cgi.pyt __getitem__s  cCsS||krK||}t|tgkrAttd|S|jSn|SdS(s8Dictionary style get() method, including 'value' lookup.RfN(RotmapRRf(RgRTtdefaultRf((s/usr/lib64/python2.7/cgi.pytgetvalue,s    cCsK||krC||}t|tgkr9|djS|jSn|SdS(s! Return the first value received.iN(RoRf(RgRTRRf((s/usr/lib64/python2.7/cgi.pytgetfirst7s     cCsV||krN||}t|tgkrAttd|S|jgSngSdS(s Return list of received values.RfN(RoRRRf(RgRTRf((s/usr/lib64/python2.7/cgi.pytgetlistBs    cCs8|jdkrtdnttd|jDS(sDictionary style keys() method.s not indexablecss|]}|jVqdS(N(RB(t.0R((s/usr/lib64/python2.7/cgi.pys QsN(RnR.Rtset(Rg((s/usr/lib64/python2.7/cgi.pyRMs cs8|jdkrtdntfd|jDS(s"Dictionary style has_key() method.s not indexablec3s|]}|jkVqdS(N(RB(RR(RT(s/usr/lib64/python2.7/cgi.pys WsN(RnR.Rtany(RgRT((RTs/usr/lib64/python2.7/cgi.pythas_keySs cs8|jdkrtdntfd|jDS(s%Dictionary style __contains__ method.s not indexablec3s|]}|jkVqdS(N(RB(RR(RT(s/usr/lib64/python2.7/cgi.pys ]sN(RnR.RR(RgRT((RTs/usr/lib64/python2.7/cgi.pyt __contains__Ys cCst|jS(s Dictionary style len(x) support.(RZR(Rg((s/usr/lib64/python2.7/cgi.pyt__len___scCs t|jS(N(tboolRn(Rg((s/usr/lib64/python2.7/cgi.pyt __nonzero__cscCs|jj|j}|jr2|d|j7}ntj||j|j|j|j }g|D]\}}t ||^q`|_ |j dS(s+Internal: read data in query string format.R,N( R7R4RyRvR6RR9R:R@R-RRnt skip_lines(RgR>tqueryRTRf((s/usr/lib64/python2.7/cgi.pyR{fs   +c Cs|j}t|s(td|fng|_|jrtj|j|j|j|j |j }|jj d|Dd}n|j }|dk r|t |j8}n|jp|j}||ji|||||} x| jstj|j} ||j| |||||d|j } |dk r|d8}| jrb|t | j8}n|dkrtdqn|jj| qW|jdS(s/Internal: read a part that is itself multipart.s&Invalid boundary in multipart form: %rcss$|]\}}t||VqdS(N(R(RRTRf((s/usr/lib64/python2.7/cgi.pys sR-iisMax number of fields exceededN(RxRCR3RnRvR6RR9R:R@R-textendR.RZtFieldStorageClasst __class__R7Rztrfc822RERIR( RgR8R9R:tibRRR@tklasstpartRQ((s/usr/lib64/python2.7/cgi.pyR|ssD                   cCsD|jdkr&|j|jn |j|jjddS(sInternal: read an atomic part.iN(Ryt read_binaryRt read_linesRpR(Rg((s/usr/lib64/python2.7/cgi.pyR}s    iicCs|jd|_|j}|dkrxd|dkr|jjt||j}|sgd|_Pn|jj||t |}q*WndS(sInternal: read binary data.tbiiN( t make_fileRpRyR7R4tmintbufsizeRzR#RZ(RgttodoRP((s/usr/lib64/python2.7/cgi.pyRs   cCs7t|_|_|jr)|jn |jdS(s0Internal: read lines until EOF or outerboundary.N(RRpt_FieldStorage__fileRwtread_lines_to_outerboundarytread_lines_to_eof(Rg((s/usr/lib64/python2.7/cgi.pyRs  cCs||jdk rh|jjt|dkrh|jd|_|jj|jjd|_qhn|jj|dS(NiR(RR.ttellRZRRpR#R(RgRS((s/usr/lib64/python2.7/cgi.pyt__writes cCs=x6|jjd}|s(d|_Pn|j|qWdS(sInternal: read lines until EOF.iiiNi(R7RGRzt_FieldStorage__write(RgRS((s/usr/lib64/python2.7/cgi.pyRs  cCs^d|j}|d}d}t}x4|jjd }|sKd|_Pn|dkrj||}d}n|d dkr|r|j}||krPn||krd|_Pqn|}|dd krd }|d }t}n^|dd krd }|d }t}n5|ddkr9d}|d }t}n d}t}|j||q&Wd S( s)Internal: read lines until outerboundary.s--Riiis iis s Ni(RwtTrueR7RGRzRHtFalseR(RgR`tlasttdelimtlast_line_lfendRSt strippedlinetodelim((s/usr/lib64/python2.7/cgi.pyRsF                cCs|j s|jrdSd|j}|d}t}x|jjd}|s\d|_Pn|d dkr|r|j}||krPn||krd|_Pqn|jd}q7WdS( s5Internal: skip lines until outer boundary if defined.Ns--iiiis i(RwRzRR7RGRHtendswith(RgR`RRRSR((s/usr/lib64/python2.7/cgi.pyRs$       cCsddl}|jdS(sOverridable: return a readable & writable file. The file will be used as follows: - data is written to it - seek(0) - data is read from it The 'binary' argument is unused -- the file is always opened in binary mode. This version opens a temporary file for reading and writing, and immediately deletes (unlinks) it. The trick (on Unix!) is that the file can still be used, but it can't be opened by another process, and it will automatically be deleted when it is closed or when the current process terminates. If you want a more permanent file, you derive a class which overrides this method. If you want a visible temporary file that is nevertheless automatically deleted when the script terminates, try defining a __del__ method in a derived class which unlinks the temporary files you have created. iNsw+b(ttempfilet TemporaryFile(RgtbinaryR((s/usr/lib64/python2.7/cgi.pyRs Ni (RjRkRlR.tosR8RhRiRRRRRRRRRRRR{RR|R}RRRRRRRR(((s/usr/lib64/python2.7/cgi.pyRds8)  x          ,    ) cBs&eZdZejddddZRS(sxForm content as dictionary with a list of values per field. form = FormContentDict() form[key] -> [value, value, ...] key in form -> Boolean form.keys() -> [key, key, ...] form.values() -> [[val, val, ...], [val, val, ...], ...] form.items() -> [(key, [val, val, ...]), (key, [val, val, ...]), ...] form.dict == {key: [val, val, ...], ...} ic Cs<td|d|d|d||_|_|d|_dS(NR8R9R:R-R+(R tdictRPt query_string(RgR8R9R:R-((s/usr/lib64/python2.7/cgi.pyRh;s  N(RjRkRlRR8R.Rh(((s/usr/lib64/python2.7/cgi.pyR.s cBs2eZdZdZdZdZdZRS(sForm content as dictionary expecting a single value per field. If you only expect a single value for each field, then form[key] will return that single value. It will raise an IndexError if that expectation is not true. If you expect a field to have possible multiple values, than you can use form.getlist(key) to get all of the values. values() and items() are a compromise: they return single strings where there is a single value, and lists of strings otherwise. cCs4t|j|dkr%tdn|j|dS(Nisexpecting a single valuei(RZRt IndexError(RgRT((s/usr/lib64/python2.7/cgi.pyROs cCs |j|S(N(R(RgRT((s/usr/lib64/python2.7/cgi.pyRSscCsWg}xJ|jjD]9}t|dkrB|j|dq|j|qW|S(Nii(RtvaluesRZRI(RgtresultRf((s/usr/lib64/python2.7/cgi.pyRUs cCsig}x\|jjD]K\}}t|dkrN|j||dfq|j||fqW|S(Nii(RtitemsRZRI(RgRRTRf((s/usr/lib64/python2.7/cgi.pyR\s (RjRkRlRRRR(((s/usr/lib64/python2.7/cgi.pyR Cs     cBs)eZdZdZdZdZRS(s7This class is present for backwards compatibility only.cCsstj||}|ddkriyt|SWqitk reyt|SWqftk raqfXqiXn|jS(Nis 0123456789+-.(R RR1R3tfloatRH(RgRTtv((s/usr/lib64/python2.7/cgi.pyRgs  cCs^g}xQ|jD]C}y|j||Wqtk rU|j|j|qXqW|S(N(RRIRR(RgRRT((s/usr/lib64/python2.7/cgi.pyRos cCsjg}x]|jD]O}y|j|||fWqtk ra|j||j|fqXqW|S(N(RRIRR(RgRRT((s/usr/lib64/python2.7/cgi.pyRws "(RjRkRlRRR(((s/usr/lib64/python2.7/cgi.pyR es  cBsDeZdZdZdZdZdZdZdZRS(s7This class is present for backwards compatibility only.cCs"||jkr|j|SdSdS(N(RR.(RgRT((s/usr/lib64/python2.7/cgi.pyRs cCsF||jkr>t|j||kr7|j||SdSndSdS(N(RRZR.(RgRTtlocation((s/usr/lib64/python2.7/cgi.pyt indexed_values cCs&||jkr|j|dSdSdS(Ni(RR.(RgRT((s/usr/lib64/python2.7/cgi.pyRfscCst|j|S(N(RZR(RgRT((s/usr/lib64/python2.7/cgi.pyRyscCs,||jkr$|j|djSdSdS(Ni(RRHR.(RgRT((s/usr/lib64/python2.7/cgi.pytstrippedscCs|jS(N(R(Rg((s/usr/lib64/python2.7/cgi.pytparss( RjRkRlRRRfRyRR(((s/usr/lib64/python2.7/cgi.pyR s     cCsdGHHtjt_yWt}ttt|t|td}|d}dGH|Wnt nXdGHda y/t}ttt|t|Wnt nXdS(sRobust test CGI script, usable as main program. Write minimal HTTP headers and dump all information provided to the script in HTML form. sContent-type: text/htmlcRs ddUdS(Ns,testing print_exception() -- italics?((((s/usr/lib64/python2.7/cgi.pyR]scSs |dS(N((R]((s/usr/lib64/python2.7/cgi.pytgss9

What follows is a test, not an actual exception:

s*

Second try with a small maxlen...

i2N( R/tstdouttstderrRRRRRRRR2(R8tformR]R((s/usr/lib64/python2.7/cgi.pyttests4          cCs|dkr$tj\}}}nddl}HdGH|j|||j||}dtdj|d t|dfGH~dS(Nis+

Traceback (most recent call last):

s
%s%s
R(R.R/texc_infot tracebackt format_tbtformat_exception_onlyRRJ(RoRfttbtlimitRRn((s/usr/lib64/python2.7/cgi.pyRs  cCs]|j}|jHdGHdGHx/|D]'}dGt|GdGt||GHq(WdGHHdS(s#Dump the shell environment as HTML.s

Shell Environment:

s
s
s
s
N(RtsortR(R8RRT((s/usr/lib64/python2.7/cgi.pyRs   %cCs|j}|jHdGH|s*dGHndGHx^|D]V}dt|dG||}dttt|dGHdtt|GHq6Wd GHHd S( s$Dump the contents of a form as HTML.s

Form Contents:

s

No form fields.s

s
t:sss
s
N(RRRtreprRo(RRRTRf((s/usr/lib64/python2.7/cgi.pyRs    cCsTHdGHytj}Wn+tjk rC}dGtt|GHn Xt|GHHdS(s#Dump the current directory as HTML.s#

Current Working Directory:

s os.error:N(RtgetcwdterrorRtstr(tpwdtmsg((s/usr/lib64/python2.7/cgi.pyRs cCsHdGHHtjGHHdS(Ns

Command Line Arguments:

(R/R5(((s/usr/lib64/python2.7/cgi.pyRs cCs dGHdS(s9Dump a list of environment variables used by CGI as HTML.s

These environment variables could have been set:

  • AUTH_TYPE
  • CONTENT_LENGTH
  • CONTENT_TYPE
  • DATE_GMT
  • DATE_LOCAL
  • DOCUMENT_NAME
  • DOCUMENT_ROOT
  • DOCUMENT_URI
  • GATEWAY_INTERFACE
  • LAST_MODIFIED
  • PATH
  • PATH_INFO
  • PATH_TRANSLATED
  • QUERY_STRING
  • REMOTE_ADDR
  • REMOTE_HOST
  • REMOTE_IDENT
  • REMOTE_USER
  • REQUEST_METHOD
  • SCRIPT_NAME
  • SERVER_NAME
  • SERVER_PORT
  • SERVER_PROTOCOL
  • SERVER_ROOT
  • SERVER_SOFTWARE
In addition, HTTP headers sent by the server may be passed in the environment as well. Here are some common variable names:
  • HTTP_ACCEPT
  • HTTP_CONNECTION
  • HTTP_HOST
  • HTTP_PRAGMA
  • HTTP_REFERER
  • HTTP_USER_AGENT
N((((s/usr/lib64/python2.7/cgi.pyRs)cCsU|jdd}|jdd}|jdd}|rQ|jdd}n|S( sReplace special characters "&", "<" and ">" to HTML-safe sequences. If the optional flag quote is true, the quotation mark character (") is also translated.R,s&ts>RWs"(Rb(R[tquote((s/usr/lib64/python2.7/cgi.pyR/s s^[ -~]{0,200}[!-~]$cCsddl}|j||S(Ni(tretmatch(R[t _vb_patternR((s/usr/lib64/python2.7/cgi.pyRC:s t__main__(3Rlt __version__toperatorRR/RtUserDictR6twarningsRRRt py3kwarningtDeprecationWarningRDRt cStringIORt ImportErrort__all__RR.RR"R RRR2R8R R RRR^RRRRR R R RRRRRRRRRCRj(((s/usr/lib64/python2.7/cgi.pytsr                  #   : a "'   /