X-Git-Url: http://dolda2000.com/gitweb/?p=ashd.git;a=blobdiff_plain;f=src%2Fdirplex%2Fdirplex.c;fp=src%2Fdirplex%2Fdirplex.c;h=ee7f650fb3d1ea1705dca2bebfbc919ace0bebcb;hp=73bb9ccd4d8514a544075a920760502836a48bbf;hb=7aad78636929129e82031dfce9d501f1600ff224;hpb=e5c93010c3bbbd1e04619686bfb5e326205123e5

diff --git a/src/dirplex/dirplex.c b/src/dirplex/dirplex.c
index 73bb9cc..ee7f650 100644
--- a/src/dirplex/dirplex.c
+++ b/src/dirplex/dirplex.c
@@ -25,6 +25,7 @@
 #include <ctype.h>
 #include <dirent.h>
 #include <time.h>
+#include <fnmatch.h>
 #include <sys/wait.h>
 #include <sys/signal.h>
 
@@ -131,6 +132,27 @@ static void handlefile(struct hthead *req, int fd, char *path)
     handle(req, fd, path, pat);
 }
 
+static int checkaccess(char *path, char *name)
+{
+    int i, o;
+    struct config **cfs;
+    
+    if(*name == '.') {
+	cfs = getconfigs(sprintf3("%s/", path));
+	for(i = 0; cfs[i] != NULL; i++) {
+	    if(cfs[i]->dotallow != NULL) {
+		for(o = 0; cfs[i]->dotallow[o] != NULL; o++) {
+		    if(!fnmatch(cfs[i]->dotallow[o], name, 0))
+			return(1);
+		}
+		break;
+	    }
+	}
+	return(0);
+    }
+    return(1);
+}
+
 static char *findfile(char *path, char *name, struct stat *sb)
 {
     DIR *dir;
@@ -155,12 +177,20 @@ static char *findfile(char *path, char *name, struct stat *sb)
 	    continue;
 	if(strncmp(dent->d_name, name, strlen(name)))
 	    continue;
-	fp = sprintf3("%s/%s", path, dent->d_name);
-	if(stat(fp, sb))
+	fp = sprintf2("%s/%s", path, dent->d_name);
+	if(stat(fp, sb)) {
+	    free(fp);
+	    continue;
+	}
+	if(!S_ISREG(sb->st_mode)) {
+	    free(fp);
 	    continue;
-	if(!S_ISREG(sb->st_mode))
+	}
+	if(!checkaccess(path, dent->d_name)) {
+	    free(fp);
 	    continue;
-	ret = sstrdup(fp);
+	}
+	ret = fp;
 	break;
     }
     closedir(dir);
@@ -216,9 +246,9 @@ static int checkentry(struct hthead *req, int fd, char *path, char *rest, char *
     char *newpath;
     int rv;
     
-    if(*el == '.')
-	return(0);
     if(!stat(sprintf3("%s/%s", path, el), &sb)) {
+	if(!checkaccess(path, el))
+	    return(0);
 	if(S_ISDIR(sb.st_mode)) {
 	    if(!*rest) {
 		stdredir(req, fd, 301, sprintf3("%s/", el));