version 1.10, 2004/05/11 06:49:58
|
version 1.16, 2006/02/07 19:46:26
|
Line 32 use strict;
|
Line 32 use strict;
|
use Apache::Constants qw(:common :remotehost); |
use Apache::Constants qw(:common :remotehost); |
use Apache::lonnet(); |
use Apache::lonnet(); |
use Apache::File(); |
use Apache::File(); |
|
use IO::Socket; |
|
|
sub handler { |
sub handler { |
my $r = shift; |
my $r = shift; |
my $reqhost = $r->get_remote_host(REMOTE_DOUBLE_REV); |
my $reqhost = $r->get_remote_host(REMOTE_NOLOOKUP); |
if (!$reqhost && $r->get_remote_host(REMOTE_NOLOOKUP) eq $r->get_server_name()) { |
my %iphost=&Apache::lonnet::get_iphost(); |
$reqhost = $r->get_server_name(); |
my $hostids=$iphost{$reqhost}; |
} |
if (!$hostids && $reqhost ne '127.0.0.1' ) { |
unless ($reqhost) { |
$r->log_reason("Unable to find a host for ". |
$r->log_reason("Spoof request from ". $reqhost); |
$r->get_remote_host(REMOTE_NOLOOKUP)); |
return FORBIDDEN; |
return FORBIDDEN; |
} |
} |
if ($reqhost eq 'localhost.localdomain') { |
if ($reqhost eq '127.0.0.1') { |
return OK; |
return OK; |
} |
} |
my $readline; |
my $readline; |
Line 56 sub handler {
|
Line 56 sub handler {
|
return FORBIDDEN; |
return FORBIDDEN; |
} |
} |
while ($readline=<$fh>) { |
while ($readline=<$fh>) { |
my ($id,$domain,$role,$name,$ip)=split(/:/,$readline); |
$readline=~s/\s*$//; |
if ($name =~ /$reqhost/i) { |
my ($id,$domain,$role,$name)=split(/:/,$readline); |
return OK; |
foreach my $hostid (@{$hostids}) { |
} |
my $hostname=$Apache::lonnet::hostname{$hostid}; |
|
if ($name =~ /^\Q$hostname\E$/i) { |
|
return OK; |
|
} |
|
} |
} |
} |
|
|
} |
} |
$r->log_reason("Invalid request for user file transfer from $reqhost", |
$r->log_reason("Invalid request for user file transfer from $reqhost (".join(",",@{$hostids}).")", |
$r->filename); |
$r->filename); |
return FORBIDDEN; |
return FORBIDDEN; |
} |
} |
Line 76 sub removefile {
|
Line 80 sub removefile {
|
} else { |
} else { |
&Apache::lonnet::logthis('Failed to transfer '.$r->filename); |
&Apache::lonnet::logthis('Failed to transfer '.$r->filename); |
} |
} |
|
return OK; |
} |
} |
1; |
1; |
__END__ |
__END__ |