1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
|
--[[ Code for the Alpine Configuration WEB framework
see http://wiki.alpinelinux.org
Copyright (C) 2007 Nathan Angelacos
Licensed under the terms of GPL2
]]--
-- Required global libraries
module(..., package.seeall)
-- This is not in the global namespace, but future
-- require statements shouldn't need to go to the disk lib
require "posix"
-- We use the parent exception handler in a last-case situation
local parent_exception_handler
local function build_menus(self)
--Build the menu
m=require("menubuilder")
roll = require ("roles")
form = require ("format")
sessiondata.menu = {}
sessiondata.menu.mainmenu = m.get_menuitems(self.conf.appdir)
sessiondata.menu.submenu = m.get_submenuitems(self.conf.appdir)
if sessiondata.userinfo == nil then
--we are dealing with an unknown user
p = {"ALL"}
--this will be whatever the "UNKNOWN" role is ... right now it is ALL
--temp should be the
local temp = format.string_to_table(roll.get_roles_perm(self,p),",")
--lets apply permissions
for a,b in pairs(sessiondata.menu.mainmenu) do
for k,v in pairs(temp) do
local control,acti = string.match(v,"(%a+):(%a+)")
if sessiondata.menu.mainmenu[a].controller == control then
if sessiondata.menu.mainmenu[a].action == acti then
sessiondata.menu.mainmenu[a].match = "yes"
break
else
sessiondata.menu.mainmenu[a].match = "no"
end
else
sessiondata.menu.mainmenu[a].match = "no"
end
if sessiondata.menu.mainmenu[a].controller == "menuhints" then
sessiondata.menu.mainmenu[a].match = "yes"
end
end
end
else
--we don't need to figure out what permission have it is in sessiondata
local temp = format.string_to_table(sessiondata.userinfo.perm,",")
for a,b in pairs(sessiondata.menu.mainmenu) do
for e,f in pairs(temp) do
local control,acti = string.match(f,"(%a+):(%a+)")
if sessiondata.menu.mainmenu[a].controller == control then
if sessiondata.menu.mainmenu[a].action == acti then
sessiondata.menu.mainmenu[a].match = "yes"
break
else
sessiondata.menu.mainmenu[a].match = "no"
end
else
sessiondata.menu.mainmenu[a].match = "no"
end
if sessiondata.menu.mainmenu[a].controller == "menuhints" then
sessiondata.menu.mainmenu[a].match = "yes"
end
end
end
end
local temptab = {}
for a,b in pairs(sessiondata.menu.mainmenu) do
if sessiondata.menu.mainmenu[a].match ~= "no" then
temptab[#temptab +1 ] = sessiondata.menu.mainmenu[a]
end
end
sessiondata.menu.mainmenu = temptab
-- Debug: Timestamp on menu creation
sessiondata.menu.timestamp = {tab="Menu_created: " .. os.date(),action="Menu_created: " .. os.date(),}
end
mvc = {}
mvc.on_load = function (self, parent)
-- open the log file
self.conf.logfile = io.open ("/var/log/acf.log", "a+")
-- Make sure we have some kind of sane defaults for libdir and sessiondir
self.conf.libdir = self.conf.libdir or ( self.conf.appdir .. "/lib/" )
self.conf.sessiondir = self.conf.sessiondir or "/tmp/"
self.conf.appuri = "http://" .. ENV.HTTP_HOST .. ENV.SCRIPT_NAME
self.conf.default_controller = "welcome"
self.clientdata = FORM
self.conf.clientip = ENV.REMOTE_ADDR
parent_exception_handler = parent.exception_handler
-- this sets the package path for us and our children
package.path= self.conf.libdir .. "?.lua;" .. package.path
sessionlib=require ("session")
self.sessiondata = {}
local tempid = ""
if self.clientdata.sessionid == nil then
self.sessiondata.id = sessionlib.random_hash(512)
tempid = self.sessiondata.id
if not (self.sessiondata.menu) then
build_menus(self)
end
else
local timestamp
tempid = self.clientdata.sessionid
timestamp, self.sessiondata =
sessionlib.load_session(self.conf.sessiondir,
self.clientdata.sessionid)
build_menus(self)
if timestamp == nil then
self.sessiondata.id = tempid
sessionlib.record_event(self.conf.sessiondir,
sessionlib.hash_ip_addr(self.conf.clientip))
build_menus(self)
else
-- FIXME: This is probably wrong place to generate the menus
local now = os.time()
local minutes_ago = now - (sessionlib.minutes_expired_events * 60)
if timestamp < minutes_ago then
sessionlib.unlink_session(self.conf.sessiondir, self.clientdata.sessionid)
sessiondata.id = sessionlib.random_hash(512)
sessionlib.count_events(self.conf.sessiondir,self.conf.userid or "", sessionlib.hash_ip_addr(self.conf.clientip),sessionlib.limit_count_events)
--[[
FIXME --- need to write this function
if too many bad events for this ip invaidate the session
if (timestamp is > 10 minutes old)
sessionlib.unlink.session (self.conf.sessiondir,
self.sessiondata.id)
self.sessiondata = {}
self.sessiondata.id = sessionlib.random_hash(512)
generate flash message "Inactivity logout"
end
]]--
sessionlib.expired_events(self.conf.sessiondir,sessionlib.minutes_expired_events)
build_menus(self)
end
end
end
end
mvc.post_exec = function (self)
sessionlib=require ("session")
-- sessionlib.serialize("s", sessiondata))
if sessiondata.id then
sessionlib.save_session(conf.sessiondir,
sessiondata.id, sessiondata)
end
-- Close the logfile
conf.logfile:close()
end
-- look for a template
-- ctlr-action-view, then ctlr-view, then action-view, then view
find_template = function ( appdir, prefix, controller, action, viewtype )
local targets = {
appdir .. prefix .. "template-" .. controller .. "-" ..
action .. "-" .. viewtype .. ".lsp",
appdir .. prefix .. "template-" .. controller .. "-" ..
viewtype .. ".lsp",
appdir .. prefix .. "template-" .. action .. "-" ..
viewtype .. ".lsp",
appdir .. prefix .. "template-" .. viewtype .. ".lsp"
}
local file
for k,v in pairs(targets) do
file = io.open (v)
if file then
io.close (file)
return v
end
end
-- not found, so try one level higher
if prefix == "" then -- already at the top level - fail
return false
end
prefix = dirname (prefix)
return find_template ( appdir, prefix, controller, action, viewtype )
end
-- Overload the MVC's view resolver with our own
view_resolver = function(self)
local file
local viewname
local viewtype = self.conf.viewtype or "html"
local names = { self.conf.appdir .. self.conf.prefix .. self.conf.controller ..
"-" .. self.conf.action .. "-" .. viewtype .. ".lsp",
self.conf.appdir .. self.conf.prefix .. self.conf.controller ..
"-" .. viewtype .. ".lsp" }
-- search for template
local template = find_template ( self.conf.appdir, self.conf.prefix,
self.conf.controller, self.conf.action, "html")
-- search for view
for i,filename in ipairs (names) do
file = io.open(filename)
if file then
file:close()
viewname = filename
break
end
end
-- We have a template
if template then
-- ***************************************************
-- This is how to call another controller (APP or self
-- can be used... m will contain worker and model,
-- with conf, and other "missing" parts pointing back
-- to APP or self
-- ***************************************************
local m,worker_loaded,model_loaded = self:new("alpine-baselayout/hostname")
local alpineversion = self:new("alpine-baselayout/alpineversion")
-- FIXME - this is ugly, but it puts the hostname the expected
-- format if the controller doesn't load correctly
local h = {}
-- If the worker and model loaded correctly, then
-- use the sub-controller
if worker_loaded and model_loaded then
h = m.worker.read(m)
else
h.hostname = { value = "unknown" }
end
local pageinfo = { viewfile = viewname,
controller = m.conf.controller,
-- ^^^ see.. m.conf doesnt exist - but it works
-- the inheritance means self.conf is used instead
action = self.conf.action,
hostname = h.hostname.value,
-- alpineversion = alpineversion.worker.read(alpineversion),
prefix = self.conf.prefix,
script = self.conf.appuri,
skin = self.conf.skin or ""
}
-- Fetch the menu's from sessiondata (filter out what's needed)
local menu = self.sessiondata.menu.mainmenu
local submenu = self.sessiondata.menu.submenu[pageinfo.controller]
--[[ -- DEBUG: Next row's is to display when the menu was created (see function build_menus(self) in BOF)
if (submenu) then
submenu[99] = sessiondata.menu.timestamp
end
--]]
return function (viewtable)
local template = haserl.loadfile (template)
return template ( pageinfo, menu, submenu, viewtable, self.sessiondata )
end
end
-- No template, but have a view
if viewname then
return haserl.loadfile (viewname)
else
return function() end
end
end
exception_handler = function (self, message )
local html = require ("html")
mvc.post_exec (self)
if type(message) == "table" then
if message.type == "redir" then
io.write ("Status: 302 Moved\n")
io.write ("Location: " .. ENV["SCRIPT_NAME"] ..
message.prefix .. message.controller ..
"/" .. message.action ..
(message.extra or "" ) .. "\n")
if self.sessiondata.id then
io.write (html.cookie.set("sessionid", self.sessiondata.id))
else
io.write (html.cookie.unset("sessionid"))
end
io.write ( "Content-Type: text/html\n\n" )
elseif message.type == "dispatch" then
parent_exception_handler(self, message)
end
else
parent_exception_handler( self, message)
end
end
-- create a Configuration Framework Entity (cfe)
-- returns a table with at least "value", "type", "option" and "errtxt"
cfe = function ( optiontable )
optiontable = optiontable or {}
me = { value="",
type="text",
option="",
errtxt="",
name="",
label="" }
for key,value in pairs(optiontable) do
me[key] = value
end
return me
end
-- FIXME - need to think more about this..
logevent = function ( message )
conf.logfile:write (string.format("%s: %s\n", os.date(), message))
end
|