simple_httpd.c revision 113126
143939Sabial/*-
246493Sabial * Simple_HTTPd v1.1 - a very small, barebones HTTP server
343939Sabial *
443939Sabial * Copyright (c) 1998-1999 Marc Nicholas <marc@netstor.com>
543939Sabial * All rights reserved.
643939Sabial *
746493Sabial * Major rewrite by William Lloyd <wlloyd@slap.net>
846493Sabial *
943939Sabial * Redistribution and use in source and binary forms, with or without
1043939Sabial * modification, are permitted provided that the following conditions
1143939Sabial * are met:
1243939Sabial * 1. Redistributions of source code must retain the above copyright
1343939Sabial *    notice, this list of conditions and the following disclaimer.
1443939Sabial * 2. Redistributions in binary form must reproduce the above copyright
1543939Sabial *    notice, this list of conditions and the following disclaimer in the
1643939Sabial *    documentation and/or other materials provided with the distribution.
1743939Sabial *
1843939Sabial * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
1943939Sabial * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
2043939Sabial * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
2143939Sabial * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
2243939Sabial * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
2343939Sabial * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
2443939Sabial * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
2543939Sabial * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
2643939Sabial * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
2743939Sabial * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
2843939Sabial * SUCH DAMAGE.
2943939Sabial *
3050479Speter * $FreeBSD: head/release/picobsd/tinyware/simple_httpd/simple_httpd.c 113126 2003-04-05 15:27:27Z dwmalone $
3138589Sabial */
3238589Sabial
3338589Sabial#include <sys/stat.h>
3438589Sabial#include <sys/time.h>
3538589Sabial#include <sys/types.h>
3638589Sabial#include <sys/socket.h>
3746493Sabial#include <sys/wait.h>
3838589Sabial#include <netinet/in.h>
3938589Sabial#include <arpa/inet.h>
4046493Sabial
4146493Sabial#include <fcntl.h>
4238589Sabial#include <netdb.h>
4346493Sabial#include <signal.h>
4446493Sabial#include <stdio.h>
4546493Sabial#include <stdlib.h>
4638589Sabial#include <string.h>
4746493Sabial#include <time.h>
4846493Sabial#include <unistd.h>
4938589Sabial
5046493Sabialint             http_port = 80;
5146493Sabialint             daemonize = 1;
5246493Sabialint             verbose = 0;
5338589Sabialint             http_sock, con_sock;
5446493Sabial
55113126Sdwmaloneconst char     *fetch_mode = NULL;
5646493Sabialchar            homedir[100];
5746493Sabialchar            logfile[80];
58113126Sdwmalonechar           *adate(void);
59113126Sdwmalonevoid            init_servconnection(void);
60113126Sdwmalonevoid		http_date(void);
61113126Sdwmalonevoid            http_output(const char *html);
62113126Sdwmalonevoid            http_request(void);
63113126Sdwmalonevoid            log_line(char *req);
64113126Sdwmalonevoid            wait_connection(void);
6546493Sabial
6638589Sabialstruct hostent *hst;
6746493Sabialstruct sockaddr_in source;
6838589Sabial
6946493Sabial/* HTTP basics */
7046493Sabialstatic char httpd_server_ident[] = "Server: FreeBSD/PicoBSD simple_httpd 1.1\r";
7146493Sabial
7246493Sabialstatic char http_200[] = "HTTP/1.0 200 OK\r";
7346493Sabial
7446493Sabial/* Two parts, HTTP Header and then HTML */
75113126Sdwmalonestatic const char *http_404[2] =
7646493Sabial    {"HTTP/1.0 404 Not found\r\n",
7746493Sabial"<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error 404</H1>\
7846493SabialNot found - file doesn't exist or you do not have permission.\n</BODY></HTML>\r\n"
7946493Sabial};
8046493Sabial
81113126Sdwmalonestatic const char *http_405[2] =
8246493Sabial    {"HTTP/1.0 405 Method Not allowed\r\nAllow: GET,HEAD\r\n",
8346493Sabial"<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error 405</H1>\
8446493SabialThis server only supports GET and HEAD requests.\n</BODY></HTML>\r\n"
8546493Sabial};
8646493Sabial
8746493Sabial/*
8846493Sabial * Only called on initial invocation
8946493Sabial */
9038589Sabialvoid
9138589Sabialinit_servconnection(void)
9238589Sabial{
9338589Sabial	struct sockaddr_in server;
9438589Sabial
9538589Sabial	/* Create a socket */
9638589Sabial	http_sock = socket(AF_INET, SOCK_STREAM, 0);
9738589Sabial	if (http_sock < 0) {
9838589Sabial		perror("socket");
9938589Sabial		exit(1);
10038589Sabial	}
10138589Sabial	server.sin_family = AF_INET;
10238589Sabial	server.sin_port = htons(http_port);
10338589Sabial	server.sin_addr.s_addr = INADDR_ANY;
10438589Sabial	if (bind(http_sock, (struct sockaddr *) & server, sizeof(server)) < 0) {
10538589Sabial		perror("bind socket");
10638589Sabial		exit(1);
10738589Sabial	}
10894130Sasmodai        if (verbose) printf("simple_httpd:%d\n",http_port);
10938589Sabial}
11038589Sabial
11146493Sabial/*
11246493Sabial * Wait here until we see an incoming http request
11346493Sabial */
11494134Sasmodaivoid
11546493Sabialwait_connection(void)
11638589Sabial{
117113126Sdwmalone	socklen_t lg;
11838589Sabial
11938589Sabial	lg = sizeof(struct sockaddr_in);
12038589Sabial
12138589Sabial	con_sock = accept(http_sock, (struct sockaddr *) & source, &lg);
12238589Sabial	if (con_sock <= 0) {
12338589Sabial		perror("accept");
12438589Sabial		exit(1);
12538589Sabial	}
12638589Sabial}
12738589Sabial
12846493Sabial/*
12946493Sabial * Print timestamp for HTTP HEAD and GET
13046493Sabial */
13194134Sasmodaivoid
13294134Sasmodaihttp_date(void)
13338589Sabial{
13438589Sabial	time_t	tl;
13538589Sabial	char	buff[50];
13638589Sabial
13738589Sabial	tl = time(NULL);
13838589Sabial	strftime(buff, 50, "Date: %a, %d %h %Y %H:%M:%S %Z\r\n", gmtime(&tl));
13938589Sabial	write(con_sock, buff, strlen(buff));
140113126Sdwmalone	/* return(buff); */
14138589Sabial}
14238589Sabial
14346493Sabial/*
14446493Sabial * Send data to the open socket
14546493Sabial */
14694134Sasmodaivoid
147113126Sdwmalonehttp_output(const char *html)
14846493Sabial{
14946493Sabial        write(con_sock, html, strlen(html));
15046493Sabial        write(con_sock, "\r\n", 2);
15146493Sabial}
15238589Sabial
15338589Sabial
15446493Sabial/*
15546493Sabial * Create and write the log information to file
15646493Sabial * Log file format is one line per entry
15746493Sabial */
15894134Sasmodaivoid
15946493Sabiallog_line(char *req)
16038589Sabial{
16146493Sabial        char            log_buff[256];
16246493Sabial        char            msg[1024];
16346493Sabial	char            env_host[80], env_addr[80];
16446493Sabial	long            addr;
16546493Sabial	FILE           *log;
16638589Sabial
16746493Sabial	strcpy(log_buff,inet_ntoa(source.sin_addr));
16846493Sabial	sprintf(env_addr, "REMOTE_ADDR=%s",log_buff);
16946493Sabial
17046493Sabial        addr=inet_addr(log_buff);
17146493Sabial
17246493Sabial        strcpy(msg,adate());
17346493Sabial        strcat(msg,"    ");
17446493Sabial        hst=gethostbyaddr((char*) &addr, 4, AF_INET);
17546493Sabial
17646493Sabial	/* If DNS hostname exists */
17746493Sabial        if (hst) {
17846493Sabial	  strcat(msg,hst->h_name);
17946493Sabial	  sprintf(env_host, "REMOTE_HOST=%s",hst->h_name);
18038589Sabial	}
18146493Sabial        strcat(msg," (");
18246493Sabial        strcat(msg,log_buff);
18346493Sabial        strcat(msg,")   ");
18446493Sabial        strcat(msg,req);
18546493Sabial
18646493Sabial	if (daemonize) {
18746493Sabial	  log=fopen(logfile,"a");
18846493Sabial	  fprintf(log,"%s\n",msg);
18946493Sabial	  fclose(log);
19046493Sabial	} else
19146493Sabial	  printf("%s\n",msg);
19246493Sabial
19346493Sabial	/* This is for CGI scripts */
19446493Sabial	putenv(env_addr);
19546493Sabial	putenv(env_host);
19638589Sabial}
19738589Sabial
19846493Sabial/*
19946493Sabial * We have a connection.  Identify what type of request GET, HEAD, CGI, etc
20046493Sabial * and do what needs to be done
20146493Sabial */
20294134Sasmodaivoid
20394135Sasmodaihttp_request(void)
20438589Sabial{
20594132Sasmodai	int             fd, lg, i;
20646493Sabial	int             cmd = 0;
20746493Sabial	char           *p, *par;
208113126Sdwmalone	const char     *filename, *c;
20946493Sabial	struct stat     file_status;
21038589Sabial	char            req[1024];
21146493Sabial	char            buff[8192];
21238589Sabial
21338589Sabial	lg = read(con_sock, req, 1024);
21438589Sabial
215113126Sdwmalone        if ((p=strstr(req,"\n"))) *p=0;
216113126Sdwmalone        if ((p=strstr(req,"\r"))) *p=0;
21738589Sabial
21846493Sabial	log_line(req);
21938589Sabial
22046493Sabial	c = strtok(req, " ");
22138589Sabial
22246493Sabial	/* Error msg if request is nothing */
22346493Sabial	if (c == NULL) {
22446493Sabial	  http_output(http_404[0]);
22546493Sabial	  http_output(http_404[1]);
22646493Sabial	  goto end_request;
22746493Sabial	}
22838589Sabial
22946493Sabial	if (strncmp(c, "GET", 3) == 0) cmd = 1;
23046493Sabial	if (strncmp(c, "HEAD", 4) == 0) cmd = 2;
23138589Sabial
23246493Sabial	/* Do error msg for any other type of request */
23346493Sabial	if (cmd == 0) {
23446493Sabial	  http_output(http_405[0]);
23546493Sabial	  http_output(http_405[1]);
23646493Sabial	  goto end_request;
23738589Sabial	}
23838589Sabial
23938589Sabial	filename = strtok(NULL, " ");
24038589Sabial
24138589Sabial	c = strtok(NULL, " ");
242113126Sdwmalone	if (fetch_mode != NULL) filename=fetch_mode;
24338589Sabial	if (filename == NULL ||
24438589Sabial            strlen(filename)==1) filename="/index.html";
24538589Sabial
24646493Sabial	while (filename[0]== '/') filename++;
24746493Sabial
24846493Sabial        /* CGI handling.  Untested */
24938589Sabial        if (!strncmp(filename,"cgi-bin/",8))
25038589Sabial           {
25138589Sabial           par=0;
252113126Sdwmalone           if ((par=strstr(filename,"?")))
25338589Sabial              {
25438589Sabial               *par=0;
25538589Sabial                par++;
25638589Sabial              }
25738589Sabial           if (access(filename,X_OK)) goto conti;
25846493Sabial           stat (filename,&file_status);
259112205Sdwmalone           if (setuid(file_status.st_uid)) return;
260112205Sdwmalone           if (seteuid(file_status.st_uid)) return;
26138589Sabial           if (!fork())
26238589Sabial              {
26338589Sabial               close(1);
26438589Sabial               dup(con_sock);
265113126Sdwmalone               /*printf("HTTP/1.0 200 OK\nContent-type: text/html\n\n\n");*/
26646493Sabial	       printf("HTTP/1.0 200 OK\r\n");
26746493Sabial               /* Plug in environment variable, others in log_line */
26846493Sabial	       putenv("SERVER_SOFTWARE=FreeBSD/PicoBSD");
26946493Sabial
27079452Sbrian	       execlp (filename,filename,par,(char *)0);
27138589Sabial              }
27238589Sabial            wait(&i);
273112205Sdwmalone            return;
27438589Sabial            }
27538589Sabial        conti:
27638589Sabial	if (filename == NULL) {
27746493Sabial	  http_output(http_405[0]);
27846493Sabial	  http_output(http_405[1]);
27946493Sabial	  goto end_request;
28038589Sabial	}
28146493Sabial	/* End of CGI handling */
28246493Sabial
28346493Sabial	/* Reject any request with '..' in it, bad hacker */
28438589Sabial	c = filename;
28538589Sabial	while (*c != '\0')
28646493Sabial	  if (c[0] == '.' && c[1] == '.') {
28746493Sabial	    http_output(http_404[0]);
28846493Sabial	    http_output(http_404[1]);
28946493Sabial	    goto end_request;
29046493Sabial	  } else
29146493Sabial	    c++;
29246493Sabial
29346493Sabial	/* Open filename */
29438589Sabial	fd = open(filename, O_RDONLY);
29538589Sabial	if (fd < 0) {
29646493Sabial	        http_output(http_404[0]);
29746493Sabial	        http_output(http_404[1]);
29846493Sabial		goto end_request;
29938589Sabial	}
30046493Sabial
30146493Sabial	/* Get file status information */
30246493Sabial	if (fstat(fd, &file_status) < 0) {
30346493Sabial	  http_output(http_404[0]);
30446493Sabial	  http_output(http_404[1]);
305113126Sdwmalone	  goto end_request2;
30638589Sabial	}
30746493Sabial
30846493Sabial	/* Is it a regular file? */
30946493Sabial	if (!S_ISREG(file_status.st_mode)) {
31046493Sabial	  http_output(http_404[0]);
31146493Sabial	  http_output(http_404[1]);
312113126Sdwmalone	  goto end_request2;
31346493Sabial	}
31438589Sabial
31546493Sabial	/* Past this point we are serving either a GET or HEAD */
31646493Sabial	/* Print all the header info */
31746493Sabial	http_output(http_200);
31846493Sabial	http_output(httpd_server_ident);
31946493Sabial	http_date();
32038589Sabial
32194133Sasmodai	sprintf(buff, "Content-length: %lld\r\n", file_status.st_size);
32238589Sabial
32346493Sabial	if (strstr(filename,".txt")) {
32446493Sabial	  strcpy(buff,"Content-type: text/plain\r\n");
32546493Sabial	} else if (strstr(filename,".html") || strstr(filename,".htm")) {
32646493Sabial	    strcpy(buff,"Content-type: text/html\r\n");
32746493Sabial	} else if (strstr(filename,".gif")) {
32846493Sabial	  strcpy(buff,"Content-type: image/gif\r\n");
32946493Sabial	} else if (strstr(filename,".jpg")) {
33046493Sabial	  strcpy(buff,"Content-type: image/jpeg\r\n");
33146493Sabial	} else {
33246493Sabial	  /* Take a guess at content if we don't have something already */
33346493Sabial	  strcpy(buff,"Content-type: ");
33446493Sabial	  strcat(buff,strstr(filename,".")+1);
33546493Sabial	  strcat(buff,"\r\n");
33646493Sabial	}
33746493Sabial	write(con_sock, buff, strlen(buff));
33846493Sabial
33946493Sabial	strftime(buff, 50, "Last-Modified: %a, %d %h %Y %H:%M:%S %Z\r\n\r\n", gmtime(&file_status.st_mtime));
34046493Sabial	write(con_sock, buff, strlen(buff));
34138589Sabial
34246493Sabial	/* Send data only if GET request */
34338589Sabial	if (cmd == 1) {
344113126Sdwmalone	  while ((lg = read(fd, buff, 8192)) > 0)
34546493Sabial	    write(con_sock, buff, lg);
34638589Sabial	}
34738589Sabial
348113126Sdwmaloneend_request2:
349113126Sdwmalone	close(fd);
35046493Sabialend_request:
35138589Sabial	close(con_sock);
35238589Sabial
35338589Sabial}
35438589Sabial
35546493Sabial/*
35646493Sabial * Simple httpd server for use in PicoBSD or other embedded application.
35746493Sabial * Should satisfy simple httpd needs.  For more demanding situations
35846493Sabial * apache is probably a better (but much larger) choice.
35946493Sabial */
36094134Sasmodaiint
36146493Sabialmain(int argc, char *argv[])
36238589Sabial{
36394132Sasmodai        int ch, ld;
36446493Sabial	int             httpd_group = 65534;
36546493Sabial        pid_t server_pid;
36646493Sabial
36746493Sabial	/* Default for html directory */
36838589Sabial	strcpy (homedir,getenv("HOME"));
36938589Sabial        if (!geteuid()) strcpy (homedir,"/httphome");
37038589Sabial           else         strcat (homedir,"/httphome");
37138589Sabial
37246493Sabial	/* Defaults for log file */
37346493Sabial	if (geteuid()) {
37446493Sabial	    strcpy(logfile,getenv("HOME"));
37546493Sabial	    strcat(logfile,"/");
37646493Sabial	    strcat(logfile,"jhttp.log");
37746493Sabial	} else
37846493Sabial	  strcpy(logfile,"/var/log/jhttpd.log");
37938589Sabial
38046493Sabial	/* Parse command line arguments */
38146493Sabial	while ((ch = getopt(argc, argv, "d:f:g:l:p:vDh")) != -1)
38246493Sabial	  switch (ch) {
38346493Sabial	  case 'd':
38446493Sabial	    strcpy(homedir,optarg);
38546493Sabial	    break;
38646493Sabial	  case 'f':
38746493Sabial	    daemonize = 0;
38846493Sabial	    verbose = 1;
389113126Sdwmalone	    fetch_mode = optarg;
39046493Sabial	    break;
39146493Sabial	  case 'g':
39246493Sabial	    httpd_group = atoi(optarg);
39346493Sabial	    break;
39446493Sabial	  case 'l':
39546493Sabial	    strcpy(logfile,optarg);
39646493Sabial	    break;
39746493Sabial	  case 'p':
39846493Sabial	    http_port = atoi(optarg);
39946493Sabial	    break;
40046493Sabial	  case 'v':
40146493Sabial	    verbose = 1;
40246493Sabial	    break;
40346493Sabial	  case 'D':
40446493Sabial	    daemonize = 0;
40546493Sabial	    break;
40646493Sabial	  case '?':
40746493Sabial	  case 'h':
40846493Sabial	  default:
40946493Sabial	    printf("usage: simple_httpd [[-d directory][-g grpid][-l logfile][-p port][-vD]]\n");
41046493Sabial	    exit(1);
41146493Sabial	    /* NOTREACHED */
41246493Sabial	  }
41346493Sabial
41446493Sabial	/* Not running as root and no port supplied, assume 1080 */
41546493Sabial        if ((http_port == 80) && geteuid()) {
41646493Sabial	  http_port = 1080;
41746493Sabial	}
41846493Sabial
41946493Sabial	/* Do we really have rights in the html directory? */
420113126Sdwmalone	if (fetch_mode == NULL) {
42146493Sabial	  if (chdir(homedir)) {
42246493Sabial	    perror("chdir");
42346493Sabial	    puts(homedir);
42446493Sabial	    exit(1);
42546493Sabial	  }
42646493Sabial	}
42746493Sabial
42846493Sabial	/* Create log file if it doesn't exit */
42946493Sabial	if ((access(logfile,W_OK)) && daemonize) {
43046493Sabial	  ld = open (logfile,O_WRONLY);
43146493Sabial	  chmod (logfile,00600);
43246493Sabial	  close(ld);
43346493Sabial	}
43446493Sabial
43538589Sabial        init_servconnection();
43638589Sabial
43746493Sabial        if (verbose) {
43846493Sabial	  printf("Server started with options \n");
43946493Sabial	  printf("port: %d\n",http_port);
440113126Sdwmalone	  if (fetch_mode == NULL) printf("html home: %s\n",homedir);
44146493Sabial	  if (daemonize) printf("logfile: %s\n",logfile);
44246493Sabial	}
44338589Sabial
44446493Sabial	/* httpd is spawned */
44546493Sabial        if (daemonize) {
446113126Sdwmalone	  if ((server_pid = fork()) != 0) {
44746493Sabial	    wait3(0,WNOHANG,0);
44846493Sabial	    if (verbose) printf("pid: %d\n",server_pid);
44946493Sabial	    exit(0);
45046493Sabial	  }
45146493Sabial	  wait3(0,WNOHANG,0);
45246493Sabial	}
45338589Sabial
454113126Sdwmalone	if (fetch_mode == NULL) setpgrp(0,httpd_group);
45546493Sabial
45646493Sabial	/* How many connections do you want?
45746493Sabial	 * Keep this lower than the available number of processes
45846493Sabial	 */
45946493Sabial        if (listen(http_sock,15) < 0) exit(1);
46046493Sabial
46138589Sabial        label:
46246493Sabial	wait_connection();
46346493Sabial
46446493Sabial	if (fork()) {
46546493Sabial	  wait3(0,WNOHANG,0);
46646493Sabial	  close(con_sock);
46746493Sabial	  goto label;
46846493Sabial	}
46946493Sabial
47046493Sabial	http_request();
47146493Sabial
47246493Sabial	wait3(0,WNOHANG,0);
47346493Sabial	exit(0);
47438589Sabial}
47538589Sabial
47638589Sabial
477113126Sdwmalonechar *
478113126Sdwmaloneadate(void)
47938589Sabial{
48038589Sabial        static char out[50];
481112205Sdwmalone        time_t now;
48238589Sabial        struct tm *t;
48338589Sabial        time(&now);
48438589Sabial        t = localtime(&now);
48543939Sabial        sprintf(out, "%02d:%02d:%02d %02d/%02d/%02d",
48643939Sabial                     t->tm_hour, t->tm_min, t->tm_sec,
48743939Sabial                     t->tm_mday, t->tm_mon+1, t->tm_year );
48838589Sabial        return out;
48938589Sabial}
490