Coro/myhttpd/httpd.pl

use Coro;
use Coro::Semaphore;
use Coro::Event;
use Coro::Socket;
use Coro::Signal;

use HTTP::Date;
use POSIX ();

no utf8;
use bytes;

# at least on my machine, this thingy serves files
# quite a bit faster than apache, ;)
# and quite a bit slower than thttpd :(

$SIG{PIPE} = 'IGNORE';

our $accesslog;
our $errorlog;

our $NOW;
our $HTTP_NOW;

Event->timer(interval => 1, hard => 1, cb => sub {
   $NOW = time;
   $HTTP_NOW = time2str $NOW;
})->now;

if ($ERROR_LOG) {
   use IO::Handle;
   open $errorlog, ">>$ERROR_LOG"
     or die "$ERROR_LOG: $!";
   $errorlog->autoflush(1);
}

if ($ACCESS_LOG) {
   use IO::Handle;
   open $accesslog, ">>$ACCESS_LOG"
     or die "$ACCESS_LOG: $!";
   $accesslog->autoflush(1);
}

sub slog {
   my $level = shift;
   my $format = shift;
   my $NOW = (POSIX::strftime "%Y-%m-%d %H:%M:%S", gmtime $::NOW);
   printf "$NOW: $format\n", @_;
   printf $errorlog "$NOW: $format\n", @_ if $errorlog;
}

our $connections = new Coro::Semaphore $MAX_CONNECTS || 250;
our $httpevent   = new Coro::Signal;

our $queue_file  = new transferqueue $MAX_TRANSFERS;
our $queue_index = new transferqueue 10;

my @newcons;
my @pool;

# one "execution thread"
sub handler {
   while () {
      if (@newcons) {
         eval {
            conn->new(@{pop @newcons})->handle;
         };
         slog 1, "$@" if $@ && !ref $@;

         $httpevent->broadcast; # only for testing, but doesn't matter much

         $connections->up;
      } else {
         last if @pool >= $MAX_POOL;
         push @pool, $Coro::current;
         schedule;
      }
   }
}

sub listen_on {
   my $listen = $_[0];

   push @listen_sockets, $listen;

   # the "main thread"
   async {
      slog 1, "accepting connections";
      while () {
         $connections->down;
         push @newcons, [$listen->accept];
         #slog 3, "accepted @$connections ".scalar(@pool);
         if (@pool) {
            (pop @pool)->ready;
         } else {
            async \&handler;
         }

      }
   };
}

my $http_port = new Coro::Socket
        LocalAddr => $SERVER_HOST,
        LocalPort => $SERVER_PORT,
        ReuseAddr => 1,
        Listen => 50,
   or die "unable to start server";

listen_on $http_port;

if ($SERVER_PORT2) {
   my $http_port = new Coro::Socket
           LocalAddr => $SERVER_HOST,
           LocalPort => $SERVER_PORT2,
           ReuseAddr => 1,
           Listen => 50,
      or die "unable to start server";

   listen_on $http_port;
}

package conn;

use Socket;
use HTTP::Date;
use Convert::Scalar 'weaken';
use Linux::AIO;

Linux::AIO::min_parallel $::AIO_PARALLEL;

Event->io(fd => Linux::AIO::poll_fileno,
          poll => 'r', async => 1,
          cb => \&Linux::AIO::poll_cb);

our %conn; # $conn{ip}{self} => connobj
our %uri;  # $uri{ip}{uri}{self}
our %blocked;
our %mimetype;

sub read_mimetypes {
   local *M;
   if (open M, "<mime_types") {
      while (<M>) {
         if (/^([^#]\S+)\t+(\S+)$/) {
            $mimetype{lc $1} = $2;
         }
      }
   } else {
      print "cannot open mime_types\n";
   }
}

read_mimetypes;

sub new {
   my $class = shift;
   my $fh = shift;
   my $peername = shift;
   my $self = bless { fh => $fh }, $class;
   my (undef, $iaddr) = unpack_sockaddr_in $peername
      or $self->err(500, "unable to decode peername");

   $self->{remote_addr} =
      $self->{remote_id} = inet_ntoa $iaddr;
   $self->{time} = $::NOW;

   weaken ($Coro::current->{conn} = $self);

   $::conns++;
   $::maxconns = $::conns if $::conns > $::maxconns;

   $self;
}

sub DESTROY {
   #my $self = shift;
   $::conns--;
}

sub slog {
   my $self = shift;
   main::slog($_[0], "$self->{remote_id}> $_[1]");
}

sub response {
   my ($self, $code, $msg, $hdr, $content) = @_;
   my $res = "HTTP/1.1 $code $msg\015\012";

   if (exists $hdr->{Connection}) {
      if ($hdr->{Connection} =~ /close/) {
         $self->{h}{connection} = "close"
      }
   } else {
      if ($self->{version} < 1.1) {
         if ($self->{h}{connection} =~ /keep-alive/i) {
            $hdr->{Connection} = "Keep-Alive";
         } else {
            $self->{h}{connection} = "close"
         }
      }
   }

   $res .= "Date: $HTTP_NOW\015\012";

   while (my ($h, $v) = each %$hdr) {
      $res .= "$h: $v\015\012"
   }
   $res .= "\015\012";

   $res .= $content if defined $content and $self->{method} ne "HEAD";

   my $log = (POSIX::strftime "%Y-%m-%d %H:%M:%S", gmtime $NOW).
             " $self->{remote_id} \"$self->{uri}\" $code ".$hdr->{"Content-Length"}.
             " \"$self->{h}{referer}\"\n";

   print $accesslog $log if $accesslog;
   print STDERR $log;

   $self->{written} +=
      print {$self->{fh}} $res;
}

sub err {
   my $self = shift;
   my ($code, $msg, $hdr, $content) = @_;

   unless (defined $content) {
      $content = "$code $msg\n";
      $hdr->{"Content-Type"} = "text/plain";
      $hdr->{"Content-Length"} = length $content;
   }
   $hdr->{"Connection"} = "close";

   $self->response($code, $msg, $hdr, $content);

   die bless {}, err::;
}

sub handle {
   my $self = shift;
   my $fh = $self->{fh};

   my $host;

   $fh->timeout($::REQ_TIMEOUT);
   while() {
      $self->{reqs}++;

      # read request and parse first line
      my $req = $fh->readline("\015\012\015\012");

      unless (defined $req) {
         if (exists $self->{version}) {
            last;
         } else {
            $self->err(408, "request timeout");
         }
      }

      $self->{h} = {};

      $fh->timeout($::RES_TIMEOUT);

      $req =~ /^(?:\015\012)?
                (GET|HEAD) \040+
                ([^\040]+) \040+
                HTTP\/([0-9]+\.[0-9]+)
                \015\012/gx
         or $self->err(405, "method not allowed", { Allow => "GET,HEAD" });

      $self->{method} = $1;
      $self->{uri} = $2;
      $self->{version} = $3;

      $3 =~ /^1\./
         or $self->err(506, "http protocol version $3 not supported");

      # parse headers
      {
         my (%hdr, $h, $v);

         $hdr{lc $1} .= ",$2"
            while $req =~ /\G
                  ([^:\000-\040]+):
                  [\008\040]*
                  ((?: [^\015\012]+ | \015\012[\008\040] )*)
                  \015\012
               /gxc;

         $req =~ /\G\015\012$/
            or $self->err(400, "bad request");

         $self->{h}{$h} = substr $v, 1
            while ($h, $v) = each %hdr;
      }

      # remote id should be unique per user
      my $id = $self->{remote_addr};

      if (exists $self->{h}{"client-ip"}) {
         $id .= "[".$self->{h}{"client-ip"}."]";
      } elsif (exists $self->{h}{"x-forwarded-for"}) {
         $id .= "[".$self->{h}{"x-forwarded-for"}."]";
      }

      $self->{remote_id} = $id;

      weaken (local $conn{$id}{$self*1} = $self);

      if ($blocked{$id}) {
         $self->err_blocked
            if $blocked{$id}[0] > $::NOW;

         delete $blocked{$id};
      }

      # find out server name and port
      if ($self->{uri} =~ s/^http:\/\/([^\/?#]*)//i) {
         $host = $1;
      } else {
         $host = $self->{h}{host};
      }

      if (defined $host) {
         $self->{server_port} = $host =~ s/:([0-9]+)$// ? $1 : 80;
      } else {
         ($self->{server_port}, $host)
            = unpack_sockaddr_in $self->{fh}->sockname
               or $self->err(500, "unable to get socket name");
         $host = inet_ntoa $host;
      }

      $self->{server_name} = $host;

      weaken (local $uri{$id}{$self->{uri}}{$self*1} = $self);

      eval {
         $self->map_uri;
         $self->respond;
      };

      die if $@ && !ref $@;

      last if $self->{h}{connection} =~ /close/i;

      $httpevent->broadcast;

      $fh->timeout($::PER_TIMEOUT);
   }
}

sub block {
   my $self = shift;

   $blocked{$self->{remote_id}} = [$::NOW + $_[0], $_[1]];
   $self->slog(2, "blocked ip $self->{remote_id}");
   $self->err_blocked;
}

# uri => path mapping
sub map_uri {
   my $self = shift;
   my $host = $self->{server_name};
   my $uri = $self->{uri};

   # some massaging, also makes it more secure
   $uri =~ s/%([0-9a-fA-F][0-9a-fA-F])/chr hex $1/ge;
   $uri =~ s%//+%/%g;
   $uri =~ s%/\.(?=/|$)%%g;
   1 while $uri =~ s%/[^/]+/\.\.(?=/|$)%%;

   $uri =~ m%^/?\.\.(?=/|$)%
      and $self->err(400, "bad request");

   $self->{name} = $uri;

   # now do the path mapping
   $self->{path} = "$::DOCROOT/$host$uri";

   $self->access_check;
}

sub _cgi {
   my $self = shift;
   my $path = shift;
   my $fh;

   # no two-way xxx supported
   if (0 == fork) {
      open STDOUT, ">&".fileno($self->{fh});
      if (chdir $::DOCROOT) {
         $ENV{SERVER_SOFTWARE} = "thttpd-myhttpd"; # we are thttpd-alike
         $ENV{HTTP_HOST}       = $self->{server_name};
         $ENV{HTTP_PORT}       = $self->{server_port};
         $ENV{SCRIPT_NAME}     = $self->{name};
         exec $path;
      }
      Coro::State::_exit(0);
   } else {
      die;
   }
}

sub server_hostport {
   $_[0]{server_port} == 80
      ? $_[0]{server_name}
      : "$_[0]{server_name}:$_[0]{server_port}";
}

sub respond {
   my $self = shift;
   my $path = $self->{path};

   if ($self->{name} =~ s%^/internal/([^/]+)%%) {
      if ($::internal{$1}) {
         $::internal{$1}->($self);
      } else {
         $self->err(404, "not found");
      }
   } else {

      stat $path
         or $self->err(404, "not found");

      $self->{stat} = [stat _];

      # idiotic netscape sends idiotic headers AGAIN
      my $ims = $self->{h}{"if-modified-since"} =~ /^([^;]+)/
                ? str2time $1 : 0;

      if (-d _ && -r _) {
         # directory
         if ($path !~ /\/$/) {
            # create a redirect to get the trailing "/"
            # we don't try to avoid the :80
            $self->err(301, "moved permanently", { Location =>  "http://".$self->server_hostport."$self->{uri}/" });
         } else {
            $ims < $self->{stat}[9]
               or $self->err(304, "not modified");

            if (-r "$path/index.html") {
               # replace directory "size" by index.html filesize
               $self->{stat} = [stat ($self->{path} .= "/index.html")];
               $self->handle_file($queue_index);
            } else {
               $self->handle_dir;
            }
         }
      } elsif (-f _ && -r _) {
         -x _ and $self->err(403, "forbidden");

         if (keys %{$conn{$self->{remote_id}}} > $::MAX_TRANSFERS_IP) {
            my $timeout = $::NOW + 10;
            while (keys %{$conn{$self->{remote_id}}} > $::MAX_TRANSFERS_IP) {
               if ($timeout < $::NOW) {
                  $self->block($::BLOCKTIME, "too many connections");
               } else {
                  $httpevent->wait;
               }
            }
         }

         $self->handle_file($queue_file);
      } else {
         $self->err(404, "not found");
      }
   }
}

sub handle_dir {
   my $self = shift;
   my $idx = $self->diridx;

   $self->response(200, "ok",
         {
            "Content-Type"   => "text/html",
            "Content-Length" => length $idx,
            "Last-Modified"  => time2str ($self->{stat}[9]),
         },
         $idx);
}

sub handle_file {
   my ($self, $queue) = @_;
   my $length = $self->{stat}[7];
   my $hdr = {
      "Last-Modified"  => time2str ((stat _)[9]),
   };

   my @code = (200, "ok");
   my ($l, $h);

   if ($self->{h}{range} =~ /^bytes=(.*)$/) {
      for (split /,/, $1) {
         if (/^-(\d+)$/) {
            ($l, $h) = ($length - $1, $length - 1);
         } elsif (/^(\d+)-(\d*)$/) {
            ($l, $h) = ($1, ($2 ne "" || $2 >= $length) ? $2 : $length - 1);
         } else {
            ($l, $h) = (0, $length - 1);
            goto ignore;
         }
         goto satisfiable if $l >= 0 && $l < $length && $h >= 0 && $h >= $l;
      }
      $hdr->{"Content-Range"} = "bytes */$length";
      $hdr->{"Content-Length"} = $length;
      $self->err(416, "not satisfiable", $hdr, "");

satisfiable:
      # check for segmented downloads
      if ($l && $::NO_SEGMENTED) {
         my $timeout = $::NOW + 15;
         while (keys %{$uri{$self->{remote_id}}{$self->{uri}}} > 1) {
            if ($timeout <= $::NOW) {
               $self->block($::BLOCKTIME, "segmented downloads are forbidden");
               #$self->err_segmented_download;
            } else {
               $httpevent->wait;
            }
         }
      }

      $hdr->{"Content-Range"} = "bytes $l-$h/$length";
      @code = (206, "partial content");
      $length = $h - $l + 1;

ignore:
   } else {
      ($l, $h) = (0, $length - 1);
   }

   $self->{path} =~ /\.([^.]+)$/;
   $hdr->{"Content-Type"} = $mimetype{lc $1} || "application/octet-stream";
   $hdr->{"Content-Length"} = $length;

   $self->response(@code, $hdr, "");

   if ($self->{method} eq "GET") {
      $self->{time} = $::NOW;

      my $current = $Coro::current;

      my ($fh, $buf, $r);

      open $fh, "<", $self->{path}
         or die "$self->{path}: late open failure ($!)";

      $h -= $l - 1;

      if (0) { # !AIO
         if ($l) {
            sysseek $fh, $l, 0;
         }
      }
      
      my $transfer = $queue->start_transfer($h);
      my $locked;
      my $bufsize = $::WAIT_BUFSIZE; # initial buffer size

      while ($h > 0) {
         unless ($locked) {
            if ($locked ||= $transfer->try($::WAIT_INTERVAL)) {
               $bufsize = $::BUFSIZE;
               $self->{time} = $::NOW;
            }
         }

         if ($blocked{$self->{remote_id}}) {
            $self->{h}{connection} = "close";
            die bless {}, err::;
         }

         if (0) { # !AIO
            sysread $fh, $buf, $h > $bufsize ? $bufsize : $h
               or last;
         } else {
            aio_read($fh, $l, ($h > $bufsize ? $bufsize : $h),
                     $buf, 0, sub {
                        $r = $_[0];
                        Coro::ready($current);
                     });
            &Coro::schedule;
            last unless $r;
         }
         my $w = syswrite $self->{fh}, $buf
            or last;
         $::written += $w;
         $self->{written} += $w;
         $l += $r;
      }

      close $fh;
   }
}

1;
Revision:	1.59
Committed:	Wed Dec 5 02:02:23 2001 UTC (22 years, 7 months ago) by root
Content type:	text/plain
Branch:	MAIN
Changes since 1.58:	+1 -1 lines
Log Message:	* empty log message *
#	User	Rev	Content
1	root	1.1	use Coro;
2			use Coro::Semaphore;
3			use Coro::Event;
4			use Coro::Socket;
5	root	1.44	use Coro::Signal;
6	root	1.1
7	root	1.32	use HTTP::Date;
8	root	1.47	use POSIX ();
9	root	1.32
10	root	1.1	no utf8;
11			use bytes;
12
13			# at least on my machine, this thingy serves files
14			# quite a bit faster than apache, ;)
15			# and quite a bit slower than thttpd :(
16
17			$SIG{PIPE} = 'IGNORE';
18	root	1.27
19			our $accesslog;
20	root	1.56	our $errorlog;
21
22			our $NOW;
23			our $HTTP_NOW;
24
25			Event->timer(interval => 1, hard => 1, cb => sub {
26			$NOW = time;
27			$HTTP_NOW = time2str $NOW;
28			})->now;
29
30			if ($ERROR_LOG) {
31			use IO::Handle;
32			open $errorlog, ">>$ERROR_LOG"
33			or die "$ERROR_LOG: $!";
34			$errorlog->autoflush(1);
35			}
36	root	1.27
37			if ($ACCESS_LOG) {
38			use IO::Handle;
39			open $accesslog, ">>$ACCESS_LOG"
40			or die "$ACCESS_LOG: $!";
41			$accesslog->autoflush(1);
42			}
43
44	root	1.1	sub slog {
45			my $level = shift;
46			my $format = shift;
47	root	1.56	my $NOW = (POSIX::strftime "%Y-%m-%d %H:%M:%S", gmtime $::NOW);
48			printf "$NOW: $format\n", @_;
49			printf $errorlog "$NOW: $format\n", @_ if $errorlog;
50	root	1.1	}
51
52	root	1.32	our $connections = new Coro::Semaphore $MAX_CONNECTS \|\| 250;
53	root	1.44	our $httpevent = new Coro::Signal;
54	root	1.34
55	root	1.56	our $queue_file = new transferqueue $MAX_TRANSFERS;
56			our $queue_index = new transferqueue 10;
57	root	1.1
58	root	1.6	my @newcons;
59	root	1.1	my @pool;
60
61	root	1.2	# one "execution thread"
62	root	1.1	sub handler {
63			while () {
64	root	1.38	if (@newcons) {
65	root	1.1	eval {
66	root	1.38	conn->new(@{pop @newcons})->handle;
67	root	1.1	};
68			slog 1, "$@" if $@ && !ref $@;
69	root	1.56
70			$httpevent->broadcast; # only for testing, but doesn't matter much
71
72	root	1.1	$connections->up;
73			} else {
74			last if @pool >= $MAX_POOL;
75			push @pool, $Coro::current;
76			schedule;
77			}
78			}
79			}
80
81	root	1.40	sub listen_on {
82			my $listen = $_[0];
83
84			push @listen_sockets, $listen;
85
86			# the "main thread"
87			async {
88			slog 1, "accepting connections";
89			while () {
90			$connections->down;
91			push @newcons, [$listen->accept];
92			#slog 3, "accepted @$connections ".scalar(@pool);
93			if (@pool) {
94			(pop @pool)->ready;
95			} else {
96			async \&handler;
97			}
98
99			}
100			};
101			}
102
103	root	1.4	my $http_port = new Coro::Socket
104			LocalAddr => $SERVER_HOST,
105			LocalPort => $SERVER_PORT,
106			ReuseAddr => 1,
107	root	1.13	Listen => 50,
108	root	1.4	or die "unable to start server";
109
110	root	1.40	listen_on $http_port;
111
112	root	1.41	if ($SERVER_PORT2) {
113			my $http_port = new Coro::Socket
114			LocalAddr => $SERVER_HOST,
115			LocalPort => $SERVER_PORT2,
116			ReuseAddr => 1,
117			Listen => 50,
118			or die "unable to start server";
119	root	1.40
120	root	1.41	listen_on $http_port;
121			}
122	root	1.4
123	root	1.1	package conn;
124
125			use Socket;
126			use HTTP::Date;
127	root	1.2	use Convert::Scalar 'weaken';
128	root	1.16	use Linux::AIO;
129
130			Linux::AIO::min_parallel $::AIO_PARALLEL;
131
132			Event->io(fd => Linux::AIO::poll_fileno,
133	root	1.17	poll => 'r', async => 1,
134	root	1.21	cb => \&Linux::AIO::poll_cb);
135	root	1.16
136	root	1.26	our %conn; # $conn{ip}{self} => connobj
137			our %uri; # $uri{ip}{uri}{self}
138	root	1.3	our %blocked;
139	root	1.9	our %mimetype;
140
141			sub read_mimetypes {
142			local *M;
143	root	1.10	if (open M, "<mime_types") {
144	root	1.9	while (<M>) {
145			if (/^([^#]\S+)\t+(\S+)$/) {
146			$mimetype{lc $1} = $2;
147			}
148			}
149			} else {
150	root	1.10	print "cannot open mime_types\n";
151	root	1.9	}
152			}
153	root	1.1
154	root	1.10	read_mimetypes;
155
156	root	1.1	sub new {
157			my $class = shift;
158	root	1.42	my $fh = shift;
159	root	1.6	my $peername = shift;
160	root	1.2	my $self = bless { fh => $fh }, $class;
161	root	1.6	my (undef, $iaddr) = unpack_sockaddr_in $peername
162			or $self->err(500, "unable to decode peername");
163	root	1.7
164	root	1.50	$self->{remote_addr} =
165			$self->{remote_id} = inet_ntoa $iaddr;
166	root	1.11	$self->{time} = $::NOW;
167	root	1.2
168	root	1.49	weaken ($Coro::current->{conn} = $self);
169
170	root	1.13	$::conns++;
171	root	1.53	$::maxconns = $::conns if $::conns > $::maxconns;
172	root	1.13
173	root	1.2	$self;
174			}
175
176			sub DESTROY {
177	root	1.56	#my $self = shift;
178	root	1.13	$::conns--;
179	root	1.1	}
180
181			sub slog {
182	root	1.4	my $self = shift;
183	root	1.50	main::slog($_[0], "$self->{remote_id}> $_[1]");
184	root	1.1	}
185
186	root	1.4	sub response {
187	root	1.1	my ($self, $code, $msg, $hdr, $content) = @_;
188	root	1.17	my $res = "HTTP/1.1 $code $msg\015\012";
189	root	1.1
190	root	1.46	if (exists $hdr->{Connection}) {
191			if ($hdr->{Connection} =~ /close/) {
192			$self->{h}{connection} = "close"
193			}
194			} else {
195			if ($self->{version} < 1.1) {
196			if ($self->{h}{connection} =~ /keep-alive/i) {
197			$hdr->{Connection} = "Keep-Alive";
198			} else {
199			$self->{h}{connection} = "close"
200			}
201			}
202			}
203	root	1.28
204	root	1.32	$res .= "Date: $HTTP_NOW\015\012";
205	root	1.1
206			while (my ($h, $v) = each %$hdr) {
207			$res .= "$h: $v\015\012"
208			}
209	root	1.10	$res .= "\015\012";
210	root	1.4
211	root	1.13	$res .= $content if defined $content and $self->{method} ne "HEAD";
212	root	1.1
213	root	1.47	my $log = (POSIX::strftime "%Y-%m-%d %H:%M:%S", gmtime $NOW).
214	root	1.50	" $self->{remote_id} \"$self->{uri}\" $code ".$hdr->{"Content-Length"}.
215			" \"$self->{h}{referer}\"\n";
216	root	1.27
217			print $accesslog $log if $accesslog;
218			print STDERR $log;
219	root	1.2
220	root	1.11	$self->{written} +=
221			print {$self->{fh}} $res;
222	root	1.1	}
223
224			sub err {
225			my $self = shift;
226			my ($code, $msg, $hdr, $content) = @_;
227
228			unless (defined $content) {
229	root	1.35	$content = "$code $msg\n";
230	root	1.1	$hdr->{"Content-Type"} = "text/plain";
231			$hdr->{"Content-Length"} = length $content;
232			}
233	root	1.17	$hdr->{"Connection"} = "close";
234	root	1.1
235	root	1.4	$self->response($code, $msg, $hdr, $content);
236	root	1.1
237			die bless {}, err::;
238			}
239
240			sub handle {
241			my $self = shift;
242			my $fh = $self->{fh};
243
244	root	1.29	my $host;
245
246	root	1.17	$fh->timeout($::REQ_TIMEOUT);
247			while() {
248			$self->{reqs}++;
249	root	1.1
250			# read request and parse first line
251			my $req = $fh->readline("\015\012\015\012");
252
253	root	1.17	unless (defined $req) {
254			if (exists $self->{version}) {
255			last;
256			} else {
257			$self->err(408, "request timeout");
258			}
259			}
260
261			$self->{h} = {};
262	root	1.1
263	root	1.17	$fh->timeout($::RES_TIMEOUT);
264	root	1.3
265	root	1.1	$req =~ /^(?:\015\012)?
266			(GET\|HEAD) \040+
267			([^\040]+) \040+
268			HTTP\/([0-9]+\.[0-9]+)
269			\015\012/gx
270	root	1.14	or $self->err(405, "method not allowed", { Allow => "GET,HEAD" });
271	root	1.1
272			$self->{method} = $1;
273			$self->{uri} = $2;
274	root	1.17	$self->{version} = $3;
275
276	root	1.20	$3 =~ /^1\./
277	root	1.17	or $self->err(506, "http protocol version $3 not supported");
278	root	1.1
279			# parse headers
280			{
281			my (%hdr, $h, $v);
282
283			$hdr{lc $1} .= ",$2"
284			while $req =~ /\G
285			([^:\000-\040]+):
286			[\008\040]*
287			((?: [^\015\012]+ \| \015\012[\008\040] )*)
288			\015\012
289			/gxc;
290
291			$req =~ /\G\015\012$/
292			or $self->err(400, "bad request");
293
294			$self->{h}{$h} = substr $v, 1
295			while ($h, $v) = each %hdr;
296			}
297
298	root	1.36	# remote id should be unique per user
299			my $id = $self->{remote_addr};
300
301			if (exists $self->{h}{"client-ip"}) {
302			$id .= "[".$self->{h}{"client-ip"}."]";
303			} elsif (exists $self->{h}{"x-forwarded-for"}) {
304			$id .= "[".$self->{h}{"x-forwarded-for"}."]";
305			}
306
307			$self->{remote_id} = $id;
308
309	root	1.56	weaken (local $conn{$id}{$self*1} = $self);
310
311	root	1.36	if ($blocked{$id}) {
312	root	1.56	$self->err_blocked
313			if $blocked{$id}[0] > $::NOW;
314	root	1.36
315			delete $blocked{$id};
316			}
317
318	root	1.29	# find out server name and port
319			if ($self->{uri} =~ s/^http:\/\/([^\/?#]*)//i) {
320			$host = $1;
321			} else {
322			$host = $self->{h}{host};
323			}
324
325			if (defined $host) {
326			$self->{server_port} = $host =~ s/:([0-9]+)$// ? $1 : 80;
327			} else {
328			($self->{server_port}, $host)
329	root	1.43	= unpack_sockaddr_in $self->{fh}->sockname
330	root	1.29	or $self->err(500, "unable to get socket name");
331			$host = inet_ntoa $host;
332			}
333
334			$self->{server_name} = $host;
335
336	root	1.56	weaken (local $uri{$id}{$self->{uri}}{$self*1} = $self);
337	root	1.1
338	root	1.24	eval {
339			$self->map_uri;
340			$self->respond;
341			};
342
343			die if $@ && !ref $@;
344	root	1.17
345	root	1.56	last if $self->{h}{connection} =~ /close/i;
346	root	1.17
347	root	1.44	$httpevent->broadcast;
348
349	root	1.17	$fh->timeout($::PER_TIMEOUT);
350			}
351	root	1.1	}
352
353	root	1.56	sub block {
354			my $self = shift;
355
356			$blocked{$self->{remote_id}} = [$::NOW + $_[0], $_[1]];
357			$self->slog(2, "blocked ip $self->{remote_id}");
358			$self->err_blocked;
359			}
360
361	root	1.1	# uri => path mapping
362			sub map_uri {
363			my $self = shift;
364	root	1.29	my $host = $self->{server_name};
365	root	1.1	my $uri = $self->{uri};
366
367			# some massaging, also makes it more secure
368			$uri =~ s/%([0-9a-fA-F][0-9a-fA-F])/chr hex $1/ge;
369			$uri =~ s%//+%/%g;
370			$uri =~ s%/\.(?=/\|$)%%g;
371			1 while $uri =~ s%/[^/]+/\.\.(?=/\|$)%%;
372
373			$uri =~ m%^/?\.\.(?=/\|$)%
374			and $self->err(400, "bad request");
375
376			$self->{name} = $uri;
377
378			# now do the path mapping
379			$self->{path} = "$::DOCROOT/$host$uri";
380	root	1.7
381			$self->access_check;
382	root	1.1	}
383
384			sub _cgi {
385			my $self = shift;
386			my $path = shift;
387			my $fh;
388
389			# no two-way xxx supported
390			if (0 == fork) {
391			open STDOUT, ">&".fileno($self->{fh});
392			if (chdir $::DOCROOT) {
393			$ENV{SERVER_SOFTWARE} = "thttpd-myhttpd"; # we are thttpd-alike
394	root	1.29	$ENV{HTTP_HOST} = $self->{server_name};
395			$ENV{HTTP_PORT} = $self->{server_port};
396	root	1.1	$ENV{SCRIPT_NAME} = $self->{name};
397	root	1.10	exec $path;
398	root	1.1	}
399			Coro::State::_exit(0);
400			} else {
401	root	1.29	die;
402	root	1.1	}
403			}
404
405	root	1.29	sub server_hostport {
406			$_[0]{server_port} == 80
407			? $_[0]{server_name}
408			: "$_[0]{server_name}:$_[0]{server_port}";
409			}
410
411	root	1.1	sub respond {
412			my $self = shift;
413			my $path = $self->{path};
414
415	root	1.49	if ($self->{name} =~ s%^/internal/([^/]+)%%) {
416			if ($::internal{$1}) {
417			$::internal{$1}->($self);
418			} else {
419			$self->err(404, "not found");
420			}
421			} else {
422	root	1.1
423	root	1.49	stat $path
424			or $self->err(404, "not found");
425	root	1.10
426	root	1.49	$self->{stat} = [stat _];
427	root	1.1
428	root	1.49	# idiotic netscape sends idiotic headers AGAIN
429			my $ims = $self->{h}{"if-modified-since"} =~ /^([^;]+)/
430			? str2time $1 : 0;
431
432			if (-d _ && -r _) {
433			# directory
434			if ($path !~ /\/$/) {
435			# create a redirect to get the trailing "/"
436			# we don't try to avoid the :80
437			$self->err(301, "moved permanently", { Location => "http://".$self->server_hostport."$self->{uri}/" });
438	root	1.25	} else {
439	root	1.49	$ims < $self->{stat}[9]
440			or $self->err(304, "not modified");
441
442			if (-r "$path/index.html") {
443			# replace directory "size" by index.html filesize
444	root	1.55	$self->{stat} = [stat ($self->{path} .= "/index.html")];
445	root	1.52	$self->handle_file($queue_index);
446	root	1.49	} else {
447			$self->handle_dir;
448			}
449	root	1.1	}
450	root	1.49	} elsif (-f _ && -r _) {
451			-x _ and $self->err(403, "forbidden");
452	root	1.56
453	root	1.58	if (keys %{$conn{$self->{remote_id}}} > $::MAX_TRANSFERS_IP) {
454	root	1.56	my $timeout = $::NOW + 10;
455	root	1.58	while (keys %{$conn{$self->{remote_id}}} > $::MAX_TRANSFERS_IP) {
456	root	1.56	if ($timeout < $::NOW) {
457			$self->block($::BLOCKTIME, "too many connections");
458			} else {
459			$httpevent->wait;
460			}
461			}
462			}
463
464			$self->handle_file($queue_file);
465	root	1.49	} else {
466			$self->err(404, "not found");
467	root	1.1	}
468			}
469			}
470
471			sub handle_dir {
472			my $self = shift;
473	root	1.10	my $idx = $self->diridx;
474
475			$self->response(200, "ok",
476			{
477			"Content-Type" => "text/html",
478			"Content-Length" => length $idx,
479	root	1.55	"Last-Modified" => time2str ($self->{stat}[9]),
480	root	1.10	},
481			$idx);
482	root	1.1	}
483
484			sub handle_file {
485	root	1.52	my ($self, $queue) = @_;
486	root	1.34	my $length = $self->{stat}[7];
487	root	1.1	my $hdr = {
488			"Last-Modified" => time2str ((stat _)[9]),
489			};
490
491			my @code = (200, "ok");
492			my ($l, $h);
493
494			if ($self->{h}{range} =~ /^bytes=(.*)$/) {
495			for (split /,/, $1) {
496			if (/^-(\d+)$/) {
497			($l, $h) = ($length - $1, $length - 1);
498			} elsif (/^(\d+)-(\d*)$/) {
499			($l, $h) = ($1, ($2 ne "" \|\| $2 >= $length) ? $2 : $length - 1);
500			} else {
501			($l, $h) = (0, $length - 1);
502			goto ignore;
503			}
504	root	1.26	goto satisfiable if $l >= 0 && $l < $length && $h >= 0 && $h >= $l;
505	root	1.1	}
506			$hdr->{"Content-Range"} = "bytes */$length";
507	root	1.24	$hdr->{"Content-Length"} = $length;
508			$self->err(416, "not satisfiable", $hdr, "");
509	root	1.1
510			satisfiable:
511	root	1.4	# check for segmented downloads
512	root	1.10	if ($l && $::NO_SEGMENTED) {
513	root	1.56	my $timeout = $::NOW + 15;
514	root	1.58	while (keys %{$uri{$self->{remote_id}}{$self->{uri}}} > 1) {
515	root	1.56	if ($timeout <= $::NOW) {
516			$self->block($::BLOCKTIME, "segmented downloads are forbidden");
517			#$self->err_segmented_download;
518	root	1.29	} else {
519	root	1.46	$httpevent->wait;
520	root	1.29	}
521	root	1.4	}
522			}
523
524	root	1.1	$hdr->{"Content-Range"} = "bytes $l-$h/$length";
525			@code = (206, "partial content");
526			$length = $h - $l + 1;
527
528			ignore:
529			} else {
530			($l, $h) = (0, $length - 1);
531			}
532
533	root	1.9	$self->{path} =~ /\.([^.]+)$/;
534			$hdr->{"Content-Type"} = $mimetype{lc $1} \|\| "application/octet-stream";
535	root	1.1	$hdr->{"Content-Length"} = $length;
536
537	root	1.4	$self->response(@code, $hdr, "");
538	root	1.1
539			if ($self->{method} eq "GET") {
540	root	1.32	$self->{time} = $::NOW;
541
542	root	1.49	my $current = $Coro::current;
543	root	1.35
544	root	1.49	my ($fh, $buf, $r);
545	root	1.32
546	root	1.1	open $fh, "<", $self->{path}
547			or die "$self->{path}: late open failure ($!)";
548
549			$h -= $l - 1;
550
551	root	1.49	if (0) { # !AIO
552	root	1.19	if ($l) {
553			sysseek $fh, $l, 0;
554			}
555			}
556	root	1.48
557	root	1.56	my $transfer = $queue->start_transfer($h);
558	root	1.51	my $locked;
559	root	1.48	my $bufsize = $::WAIT_BUFSIZE; # initial buffer size
560	root	1.19
561	root	1.1	while ($h > 0) {
562	root	1.51	unless ($locked) {
563			if ($locked \|\|= $transfer->try($::WAIT_INTERVAL)) {
564	root	1.48	$bufsize = $::BUFSIZE;
565			$self->{time} = $::NOW;
566			}
567	root	1.56	}
568
569			if ($blocked{$self->{remote_id}}) {
570			$self->{h}{connection} = "close";
571	root	1.59	die bless {}, err::;
572	root	1.48	}
573
574	root	1.49	if (0) { # !AIO
575	root	1.48	sysread $fh, $buf, $h > $bufsize ? $bufsize : $h
576	root	1.19	or last;
577			} else {
578	root	1.48	aio_read($fh, $l, ($h > $bufsize ? $bufsize : $h),
579	root	1.19	$buf, 0, sub {
580			$r = $_[0];
581	root	1.37	Coro::ready($current);
582	root	1.19	});
583			&Coro::schedule;
584			last unless $r;
585			}
586	root	1.37	my $w = syswrite $self->{fh}, $buf
587	root	1.1	or last;
588	root	1.11	$::written += $w;
589			$self->{written} += $w;
590	root	1.16	$l += $r;
591	root	1.1	}
592	root	1.32
593			close $fh;
594	root	1.1	}
595	root	1.7	}
596
597	root	1.2	1;