mirror of
https://codeberg.org/Codeberg/pages-server.git
synced 2025-02-24 05:03:56 +00:00
112 lines
3.9 KiB
PHP
112 lines
3.9 KiB
PHP
<?php
|
|
|
|
function send_response($code, $message) {
|
|
http_response_code($code);
|
|
echo $message;
|
|
exit();
|
|
}
|
|
|
|
$request_url = filter_var($_SERVER["PHP_SELF"], FILTER_SANITIZE_URL);
|
|
|
|
if ($request_url === "/") {
|
|
send_response(200, "
|
|
<meta name='viewport' content='width=device-width, initial-scale=1.0'>
|
|
<html>
|
|
<head>
|
|
<title>Codeberg Pages</title>
|
|
</head>
|
|
<body>
|
|
<div style='height: 100%; display: flex; align-items: center; justify-content: center;'>
|
|
<center>
|
|
<h1>Codeberg Pages. Static Pages for your Projects.</h1>
|
|
<p>Create a repo named 'pages' in your user account or org, push static content, HTML, style, fonts, images.</p>
|
|
<p>Share your rendered content via: <pre>https://" . $_SERVER["HTTP_HOST"] . "/<username>/</pre></p>
|
|
<p>Welcome to <a href='https://codeberg.org'>Codeberg.org</a>!</p>
|
|
</center>
|
|
</div>
|
|
</body>
|
|
</html>
|
|
");
|
|
}
|
|
|
|
# Restrict allowed characters in request URI:
|
|
if (preg_match("/^\/[a-zA-Z0-9_ +\-\/\.]+\$/", $request_url) != 1) {
|
|
send_response(404, "invalid request URL");
|
|
}
|
|
|
|
$git_prefix = "/data/git/gitea-repositories";
|
|
$parts = explode("/", $request_url);
|
|
$parts = array_diff($parts, array("")); # Remove empty parts in URL
|
|
$owner = strtolower(array_shift($parts));
|
|
$git_root = realpath("$git_prefix/$owner/pages.git");
|
|
$file_url = implode("/", $parts);
|
|
|
|
# Ensure that only files within the user's pages repository are accessed:
|
|
if (substr($git_root, 0, strlen($git_prefix)) !== $git_prefix) {
|
|
send_response(404, "this user/organization does not have codeberg pages");
|
|
}
|
|
|
|
# If this is a folder, we explicitly redirect to folder URL, otherwise browsers will construct invalid relative links:
|
|
$command = "sh -c \"cd '$git_root' && /usr/bin/git ls-tree 'master:$file_url' > /dev/null\"";
|
|
exec($command, $output, $retval);
|
|
if ($retval === 0) {
|
|
if (substr($request_url, -1) !== "/") {
|
|
$h = "Location: " . $request_url . "/";
|
|
if ($_SERVER['QUERY_STRING'] !== "")
|
|
$h .= "?" . $_SERVER['QUERY_STRING'];
|
|
header($h);
|
|
exit();
|
|
}
|
|
if ($file_url !== "")
|
|
$file_url .= "/";
|
|
$file_url .= "index.html";
|
|
}
|
|
|
|
$ext = pathinfo($file_url, PATHINFO_EXTENSION);
|
|
$ext = strtolower($ext);
|
|
|
|
$mime_types = array(
|
|
"css" => "text/css",
|
|
"csv" => "text/csv",
|
|
"gif" => "image/gif",
|
|
"html" => "text/html",
|
|
"ico" => "image/x-icon",
|
|
"ics" => "text/calendar",
|
|
"jpg" => "image/jpeg",
|
|
"jpeg" => "image/jpeg",
|
|
"js" => "application/javascript",
|
|
"json" => "application/json",
|
|
"pdf" => "application/pdf",
|
|
"png" => "image/png",
|
|
"svg" => "image/svg+xml",
|
|
"ttf" => "font/ttf",
|
|
"txt" => "text/plain",
|
|
"woff" => "font/woff",
|
|
"woff2" => "font/woff2",
|
|
"xml" => "text/xml"
|
|
);
|
|
|
|
if (array_key_exists($ext, $mime_types)) {
|
|
header("Content-Type: " . $mime_types[$ext]);
|
|
} else {
|
|
header("Content-Type: application/octet-stream");
|
|
}
|
|
|
|
## We are executing command twice (first for send_response-checking, then for actual raw output to stream),
|
|
## which seems wasteful, but it seems exec+echo cannot do raw binary output? Is this true?
|
|
$command = "sh -c \"cd '$git_root' && /usr/bin/git show 'master:$file_url'\"";
|
|
exec($command . " > /dev/null", $output, $retval);
|
|
if ($retval != 0) {
|
|
# Render user-provided 404.html if exists, generic 404 message if not:
|
|
http_response_code(404);
|
|
header("Content-Type: text/html");
|
|
$command = "sh -c \"cd '$git_root' && /usr/bin/git show 'master:404.html'\"";
|
|
exec($command . " > /dev/null", $output, $retval);
|
|
if ($retval != 0)
|
|
send_response(404 , "no such file in repo: '" . htmlspecialchars($file_url) . "'");
|
|
}
|
|
|
|
## If we could directly exec+echo raw output from above, we wouldn't need to execute command twice:
|
|
passthru($command);
|
|
|