Mercurial > hg > nginx
annotate src/http/modules/ngx_http_referer_module.c @ 1782:db07cb9d1cbc
regex valid_referers were not inherited
author | Igor Sysoev <igor@sysoev.ru> |
---|---|
date | Thu, 27 Dec 2007 12:13:11 +0000 |
parents | e584e946e198 |
children | 0673b54f34f7 |
rev | line source |
---|---|
577 | 1 |
2 /* | |
3 * Copyright (C) Igor Sysoev | |
4 */ | |
5 | |
6 | |
7 #include <ngx_config.h> | |
8 #include <ngx_core.h> | |
9 #include <ngx_http.h> | |
10 | |
11 | |
595 | 12 #define NGX_HTTP_REFERER_NO_URI_PART ((void *) 4) |
13 | |
1388 | 14 #if (NGX_PCRE) |
15 | |
16 typedef struct { | |
17 ngx_regex_t *regex; | |
18 ngx_str_t name; | |
19 } ngx_http_referer_regex_t; | |
20 | |
21 #else | |
22 | |
23 #define ngx_regex_t void | |
24 | |
25 #endif | |
26 | |
27 | |
577 | 28 typedef struct { |
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
29 ngx_hash_combined_t hash; |
577 | 30 |
1388 | 31 #if (NGX_PCRE) |
32 ngx_array_t *regex; | |
33 #endif | |
34 | |
593 | 35 ngx_flag_t no_referer; |
36 ngx_flag_t blocked_referer; | |
577 | 37 |
593 | 38 ngx_hash_keys_arrays_t *keys; |
577 | 39 } ngx_http_referer_conf_t; |
40 | |
41 | |
42 static void * ngx_http_referer_create_conf(ngx_conf_t *cf); | |
43 static char * ngx_http_referer_merge_conf(ngx_conf_t *cf, void *parent, | |
44 void *child); | |
45 static char *ngx_http_valid_referers(ngx_conf_t *cf, ngx_command_t *cmd, | |
46 void *conf); | |
593 | 47 static char *ngx_http_add_referer(ngx_conf_t *cf, ngx_hash_keys_arrays_t *keys, |
595 | 48 ngx_str_t *value, ngx_str_t *uri); |
1388 | 49 static char *ngx_http_add_regex_referer(ngx_conf_t *cf, |
50 ngx_http_referer_conf_t *rlcf, ngx_str_t *name, ngx_regex_t *regex); | |
593 | 51 static int ngx_libc_cdecl ngx_http_cmp_referer_wildcards(const void *one, |
52 const void *two); | |
577 | 53 |
54 | |
55 static ngx_command_t ngx_http_referer_commands[] = { | |
56 | |
57 { ngx_string("valid_referers"), | |
58 NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_1MORE, | |
59 ngx_http_valid_referers, | |
60 NGX_HTTP_LOC_CONF_OFFSET, | |
61 0, | |
62 NULL }, | |
63 | |
64 ngx_null_command | |
65 }; | |
66 | |
67 | |
68 static ngx_http_module_t ngx_http_referer_module_ctx = { | |
69 NULL, /* preconfiguration */ | |
70 NULL, /* postconfiguration */ | |
71 | |
72 NULL, /* create main configuration */ | |
73 NULL, /* init main configuration */ | |
74 | |
75 NULL, /* create server configuration */ | |
76 NULL, /* merge server configuration */ | |
77 | |
78 ngx_http_referer_create_conf, /* create location configuration */ | |
79 ngx_http_referer_merge_conf /* merge location configuration */ | |
80 }; | |
81 | |
82 | |
83 ngx_module_t ngx_http_referer_module = { | |
84 NGX_MODULE_V1, | |
85 &ngx_http_referer_module_ctx, /* module context */ | |
86 ngx_http_referer_commands, /* module directives */ | |
87 NGX_HTTP_MODULE, /* module type */ | |
88 NULL, /* init master */ | |
89 NULL, /* init module */ | |
90 NULL, /* init process */ | |
91 NULL, /* init thread */ | |
92 NULL, /* exit thread */ | |
93 NULL, /* exit process */ | |
94 NULL, /* exit master */ | |
95 NGX_MODULE_V1_PADDING | |
96 }; | |
97 | |
98 | |
99 static ngx_int_t | |
100 ngx_http_referer_variable(ngx_http_request_t *r, ngx_http_variable_value_t *v, | |
101 uintptr_t data) | |
102 { | |
1388 | 103 u_char *p, *ref, *last; |
104 size_t len; | |
105 ngx_str_t *uri; | |
106 ngx_uint_t i, key; | |
107 ngx_http_referer_conf_t *rlcf; | |
108 u_char buf[256]; | |
577 | 109 |
593 | 110 rlcf = ngx_http_get_module_loc_conf(r, ngx_http_referer_module); |
577 | 111 |
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
112 if (rlcf->hash.hash.buckets == NULL |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
113 && rlcf->hash.wc_head == NULL |
1388 | 114 && rlcf->hash.wc_tail == NULL |
115 #if (NGX_PCRE) | |
116 && rlcf->regex == NULL | |
117 #endif | |
118 ) | |
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
119 { |
595 | 120 goto valid; |
577 | 121 } |
122 | |
123 if (r->headers_in.referer == NULL) { | |
593 | 124 if (rlcf->no_referer) { |
595 | 125 goto valid; |
126 } | |
577 | 127 |
595 | 128 goto invalid; |
577 | 129 } |
130 | |
131 len = r->headers_in.referer->value.len; | |
132 ref = r->headers_in.referer->value.data; | |
133 | |
134 if (len < sizeof("http://i.ru") - 1 | |
1107
db7c468c447d
ngx_strcasecmp()/ngx_strncasecmp()
Igor Sysoev <igor@sysoev.ru>
parents:
637
diff
changeset
|
135 || (ngx_strncasecmp(ref, (u_char *) "http://", 7) != 0)) |
577 | 136 { |
593 | 137 if (rlcf->blocked_referer) { |
595 | 138 goto valid; |
139 } | |
577 | 140 |
595 | 141 goto invalid; |
577 | 142 } |
143 | |
595 | 144 last = ref + len; |
577 | 145 ref += 7; |
595 | 146 i = 0; |
147 key = 0; | |
577 | 148 |
595 | 149 for (p = ref; p < last; p++) { |
593 | 150 if (*p == '/' || *p == ':') { |
151 break; | |
577 | 152 } |
595 | 153 |
154 buf[i] = ngx_tolower(*p); | |
155 key = ngx_hash(key, buf[i++]); | |
156 | |
157 if (i == 256) { | |
158 goto invalid; | |
159 } | |
593 | 160 } |
577 | 161 |
1388 | 162 uri = ngx_hash_find_combined(&rlcf->hash, key, buf, p - ref); |
577 | 163 |
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
164 if (uri) { |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
165 goto uri; |
577 | 166 } |
167 | |
1388 | 168 #if (NGX_PCRE) |
169 | |
170 if (rlcf->regex) { | |
1704
e584e946e198
move condition declarations inside blocks where they are used
Igor Sysoev <igor@sysoev.ru>
parents:
1565
diff
changeset
|
171 ngx_int_t n; |
e584e946e198
move condition declarations inside blocks where they are used
Igor Sysoev <igor@sysoev.ru>
parents:
1565
diff
changeset
|
172 ngx_str_t referer; |
e584e946e198
move condition declarations inside blocks where they are used
Igor Sysoev <igor@sysoev.ru>
parents:
1565
diff
changeset
|
173 ngx_http_referer_regex_t *regex; |
1388 | 174 |
175 referer.len = len - 7; | |
176 referer.data = ref; | |
177 | |
178 regex = rlcf->regex->elts; | |
179 | |
180 for (i = 0; i < rlcf->regex->nelts; i++) { | |
181 n = ngx_regex_exec(regex[i].regex, &referer, NULL, 0); | |
182 | |
183 if (n == NGX_REGEX_NO_MATCHED) { | |
184 continue; | |
185 } | |
186 | |
187 if (n < 0) { | |
188 ngx_log_error(NGX_LOG_ALERT, r->connection->log, 0, | |
189 ngx_regex_exec_n | |
190 " failed: %d on \"%V\" using \"%V\"", | |
191 n, &referer, ®ex[i].name); | |
192 return NGX_ERROR; | |
193 } | |
194 | |
195 /* match */ | |
196 | |
197 goto valid; | |
198 } | |
199 } | |
200 | |
201 #endif | |
202 | |
595 | 203 invalid: |
204 | |
577 | 205 *v = ngx_http_variable_true_value; |
206 | |
207 return NGX_OK; | |
595 | 208 |
209 uri: | |
210 | |
211 for ( /* void */ ; p < last; p++) { | |
212 if (*p == '/') { | |
213 break; | |
214 } | |
215 } | |
216 | |
217 len = last - p; | |
218 | |
219 if (uri == NGX_HTTP_REFERER_NO_URI_PART) { | |
220 goto valid; | |
221 } | |
222 | |
223 if (len < uri->len || ngx_strncmp(uri->data, p, uri->len) != 0) { | |
224 goto invalid; | |
225 } | |
226 | |
227 valid: | |
228 | |
229 *v = ngx_http_variable_null_value; | |
230 | |
231 return NGX_OK; | |
577 | 232 } |
233 | |
234 | |
235 static void * | |
236 ngx_http_referer_create_conf(ngx_conf_t *cf) | |
237 { | |
238 ngx_http_referer_conf_t *conf; | |
239 | |
593 | 240 conf = ngx_pcalloc(cf->pool, sizeof(ngx_http_referer_conf_t)); |
577 | 241 if (conf == NULL) { |
242 return NGX_CONF_ERROR; | |
243 } | |
244 | |
1782
db07cb9d1cbc
regex valid_referers were not inherited
Igor Sysoev <igor@sysoev.ru>
parents:
1704
diff
changeset
|
245 #if (NGX_PCRE) |
db07cb9d1cbc
regex valid_referers were not inherited
Igor Sysoev <igor@sysoev.ru>
parents:
1704
diff
changeset
|
246 conf->regex = NGX_CONF_UNSET_PTR; |
db07cb9d1cbc
regex valid_referers were not inherited
Igor Sysoev <igor@sysoev.ru>
parents:
1704
diff
changeset
|
247 #endif |
db07cb9d1cbc
regex valid_referers were not inherited
Igor Sysoev <igor@sysoev.ru>
parents:
1704
diff
changeset
|
248 |
577 | 249 conf->no_referer = NGX_CONF_UNSET; |
250 conf->blocked_referer = NGX_CONF_UNSET; | |
251 | |
252 return conf; | |
253 } | |
254 | |
255 | |
256 static char * | |
257 ngx_http_referer_merge_conf(ngx_conf_t *cf, void *parent, void *child) | |
258 { | |
259 ngx_http_referer_conf_t *prev = parent; | |
260 ngx_http_referer_conf_t *conf = child; | |
261 | |
593 | 262 ngx_hash_init_t hash; |
263 | |
264 if (conf->keys == NULL) { | |
265 conf->hash = prev->hash; | |
266 | |
1782
db07cb9d1cbc
regex valid_referers were not inherited
Igor Sysoev <igor@sysoev.ru>
parents:
1704
diff
changeset
|
267 ngx_conf_merge_ptr_value(conf->regex, prev->regex, NULL); |
577 | 268 ngx_conf_merge_value(conf->no_referer, prev->no_referer, 0); |
269 ngx_conf_merge_value(conf->blocked_referer, prev->blocked_referer, 0); | |
593 | 270 |
271 return NGX_CONF_OK; | |
272 } | |
273 | |
603 | 274 if ((conf->no_referer == 1 || conf->blocked_referer == 1) |
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
275 && conf->keys->keys.nelts == 0 |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
276 && conf->keys->dns_wc_head.nelts == 0 |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
277 && conf->keys->dns_wc_tail.nelts == 0) |
603 | 278 { |
279 ngx_log_error(NGX_LOG_EMERG, cf->log, 0, | |
280 "the \"none\" or \"blocked\" referers are specified " | |
281 "in the \"valid_referers\" directive " | |
282 "without any valid referer"); | |
283 return NGX_CONF_ERROR; | |
284 } | |
285 | |
593 | 286 hash.key = ngx_hash_key_lc; |
287 hash.max_size = 2048; /* TODO: referer_hash_max_size; */ | |
288 hash.bucket_size = 64; /* TODO: referer_hash_bucket_size; */ | |
289 hash.name = "referers_hash"; | |
290 hash.pool = cf->pool; | |
291 | |
292 if (conf->keys->keys.nelts) { | |
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
293 hash.hash = &conf->hash.hash; |
593 | 294 hash.temp_pool = NULL; |
295 | |
296 if (ngx_hash_init(&hash, conf->keys->keys.elts, conf->keys->keys.nelts) | |
297 != NGX_OK) | |
298 { | |
299 return NGX_CONF_ERROR; | |
300 } | |
301 } | |
302 | |
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
303 if (conf->keys->dns_wc_head.nelts) { |
593 | 304 |
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
305 ngx_qsort(conf->keys->dns_wc_head.elts, |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
306 (size_t) conf->keys->dns_wc_head.nelts, |
593 | 307 sizeof(ngx_hash_key_t), |
308 ngx_http_cmp_referer_wildcards); | |
309 | |
310 hash.hash = NULL; | |
311 hash.temp_pool = cf->temp_pool; | |
312 | |
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
313 if (ngx_hash_wildcard_init(&hash, conf->keys->dns_wc_head.elts, |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
314 conf->keys->dns_wc_head.nelts) |
593 | 315 != NGX_OK) |
316 { | |
317 return NGX_CONF_ERROR; | |
318 } | |
319 | |
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
320 conf->hash.wc_head = (ngx_hash_wildcard_t *) hash.hash; |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
321 } |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
322 |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
323 if (conf->keys->dns_wc_tail.nelts) { |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
324 |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
325 ngx_qsort(conf->keys->dns_wc_tail.elts, |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
326 (size_t) conf->keys->dns_wc_tail.nelts, |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
327 sizeof(ngx_hash_key_t), |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
328 ngx_http_cmp_referer_wildcards); |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
329 |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
330 hash.hash = NULL; |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
331 hash.temp_pool = cf->temp_pool; |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
332 |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
333 if (ngx_hash_wildcard_init(&hash, conf->keys->dns_wc_tail.elts, |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
334 conf->keys->dns_wc_tail.nelts) |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
335 != NGX_OK) |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
336 { |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
337 return NGX_CONF_ERROR; |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
338 } |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
339 |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
340 conf->hash.wc_tail = (ngx_hash_wildcard_t *) hash.hash; |
577 | 341 } |
342 | |
1782
db07cb9d1cbc
regex valid_referers were not inherited
Igor Sysoev <igor@sysoev.ru>
parents:
1704
diff
changeset
|
343 ngx_conf_merge_ptr_value(conf->regex, prev->regex, NULL); |
db07cb9d1cbc
regex valid_referers were not inherited
Igor Sysoev <igor@sysoev.ru>
parents:
1704
diff
changeset
|
344 |
577 | 345 if (conf->no_referer == NGX_CONF_UNSET) { |
346 conf->no_referer = 0; | |
347 } | |
348 | |
349 if (conf->blocked_referer == NGX_CONF_UNSET) { | |
350 conf->blocked_referer = 0; | |
351 } | |
352 | |
611 | 353 conf->keys = NULL; |
354 | |
577 | 355 return NGX_CONF_OK; |
356 } | |
357 | |
358 | |
359 static char * | |
360 ngx_http_valid_referers(ngx_conf_t *cf, ngx_command_t *cmd, void *conf) | |
361 { | |
593 | 362 ngx_http_referer_conf_t *rlcf = conf; |
577 | 363 |
593 | 364 u_char *p; |
595 | 365 ngx_str_t *value, uri, name; |
593 | 366 ngx_uint_t i, n; |
577 | 367 ngx_http_variable_t *var; |
368 ngx_http_server_name_t *sn; | |
369 ngx_http_core_srv_conf_t *cscf; | |
370 | |
371 name.len = sizeof("invalid_referer") - 1; | |
372 name.data = (u_char *) "invalid_referer"; | |
373 | |
583 | 374 var = ngx_http_add_variable(cf, &name, |
1565 | 375 NGX_HTTP_VAR_CHANGEABLE|NGX_HTTP_VAR_NOHASH); |
577 | 376 if (var == NULL) { |
377 return NGX_CONF_ERROR; | |
378 } | |
379 | |
637 | 380 var->get_handler = ngx_http_referer_variable; |
577 | 381 |
593 | 382 if (rlcf->keys == NULL) { |
383 rlcf->keys = ngx_pcalloc(cf->temp_pool, sizeof(ngx_hash_keys_arrays_t)); | |
384 if (rlcf->keys == NULL) { | |
385 return NGX_CONF_ERROR; | |
386 } | |
577 | 387 |
593 | 388 rlcf->keys->pool = cf->pool; |
389 rlcf->keys->temp_pool = cf->pool; | |
390 | |
391 if (ngx_hash_keys_array_init(rlcf->keys, NGX_HASH_SMALL) != NGX_OK) { | |
577 | 392 return NGX_CONF_ERROR; |
393 } | |
394 } | |
395 | |
396 value = cf->args->elts; | |
397 | |
398 for (i = 1; i < cf->args->nelts; i++) { | |
399 if (value[i].len == 0) { | |
400 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0, | |
401 "invalid referer \"%V\"", &value[i]); | |
402 return NGX_CONF_ERROR; | |
403 } | |
404 | |
405 if (ngx_strcmp(value[i].data, "none") == 0) { | |
593 | 406 rlcf->no_referer = 1; |
577 | 407 continue; |
408 } | |
409 | |
410 if (ngx_strcmp(value[i].data, "blocked") == 0) { | |
593 | 411 rlcf->blocked_referer = 1; |
577 | 412 continue; |
413 } | |
414 | |
595 | 415 uri.len = 0; |
613 | 416 uri.data = NULL; |
595 | 417 |
577 | 418 if (ngx_strcmp(value[i].data, "server_names") == 0) { |
593 | 419 |
420 cscf = ngx_http_conf_get_module_srv_conf(cf, ngx_http_core_module); | |
577 | 421 |
593 | 422 sn = cscf->server_names.elts; |
423 for (n = 0; n < cscf->server_names.nelts; n++) { | |
1388 | 424 |
425 #if (NGX_PCRE) | |
426 if (sn[n].regex) { | |
427 | |
428 if (ngx_http_add_regex_referer(cf, rlcf, &sn[n].name, | |
429 sn[n].regex) | |
430 != NGX_OK) | |
431 { | |
432 return NGX_CONF_ERROR; | |
433 } | |
434 | |
435 continue; | |
436 } | |
437 #endif | |
438 | |
595 | 439 if (ngx_http_add_referer(cf, rlcf->keys, &sn[n].name, &uri) |
440 != NGX_OK) | |
441 { | |
593 | 442 return NGX_CONF_ERROR; |
443 } | |
444 } | |
577 | 445 |
446 continue; | |
447 } | |
448 | |
1388 | 449 if (value[i].data[0] == '~') { |
450 if (ngx_http_add_regex_referer(cf, rlcf, &value[i], NULL) != NGX_OK) | |
451 { | |
452 return NGX_CONF_ERROR; | |
453 } | |
454 | |
455 continue; | |
456 } | |
457 | |
1242 | 458 p = (u_char *) ngx_strchr(value[i].data, '/'); |
577 | 459 |
593 | 460 if (p) { |
595 | 461 uri.len = (value[i].data + value[i].len) - p; |
462 uri.data = p; | |
593 | 463 value[i].len = p - value[i].data; |
577 | 464 } |
465 | |
595 | 466 if (ngx_http_add_referer(cf, rlcf->keys, &value[i], &uri) != NGX_OK) { |
577 | 467 return NGX_CONF_ERROR; |
468 } | |
469 } | |
470 | |
471 return NGX_CONF_OK; | |
472 } | |
593 | 473 |
474 | |
475 static char * | |
476 ngx_http_add_referer(ngx_conf_t *cf, ngx_hash_keys_arrays_t *keys, | |
595 | 477 ngx_str_t *value, ngx_str_t *uri) |
593 | 478 { |
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
479 ngx_int_t rc; |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
480 ngx_str_t *u; |
593 | 481 |
595 | 482 if (uri->len == 0) { |
483 u = NGX_HTTP_REFERER_NO_URI_PART; | |
484 | |
485 } else { | |
486 u = ngx_palloc(cf->pool, sizeof(ngx_str_t)); | |
487 if (u == NULL) { | |
488 return NGX_CONF_ERROR; | |
489 } | |
490 | |
491 *u = *uri; | |
492 } | |
493 | |
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
494 rc = ngx_hash_add_key(keys, value, u, NGX_HASH_WILDCARD_KEY); |
593 | 495 |
496 if (rc == NGX_OK) { | |
497 return NGX_CONF_OK; | |
498 } | |
499 | |
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
500 if (rc == NGX_DECLINED) { |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
501 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0, |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
502 "invalid hostname or wildcard \"%V\"", value); |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
503 } |
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
504 |
593 | 505 if (rc == NGX_BUSY) { |
506 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0, | |
507 "conflicting parameter \"%V\"", value); | |
508 } | |
509 | |
510 return NGX_CONF_ERROR; | |
511 } | |
512 | |
513 | |
1388 | 514 static char * |
515 ngx_http_add_regex_referer(ngx_conf_t *cf, ngx_http_referer_conf_t *rlcf, | |
516 ngx_str_t *name, ngx_regex_t *regex) | |
517 { | |
518 #if (NGX_PCRE) | |
519 ngx_str_t err; | |
520 ngx_http_referer_regex_t *rr; | |
521 u_char errstr[NGX_MAX_CONF_ERRSTR]; | |
522 | |
1782
db07cb9d1cbc
regex valid_referers were not inherited
Igor Sysoev <igor@sysoev.ru>
parents:
1704
diff
changeset
|
523 if (rlcf->regex == NGX_CONF_UNSET_PTR) { |
1388 | 524 rlcf->regex = ngx_array_create(cf->pool, 2, |
525 sizeof(ngx_http_referer_regex_t)); | |
526 if (rlcf->regex == NULL) { | |
527 return NGX_CONF_ERROR; | |
528 } | |
529 } | |
530 | |
531 rr = ngx_array_push(rlcf->regex); | |
532 if (rr == NULL) { | |
533 return NGX_CONF_ERROR; | |
534 } | |
535 | |
536 if (regex) { | |
537 rr->regex = regex; | |
538 rr->name = *name; | |
539 | |
540 return NGX_CONF_OK; | |
541 } | |
542 | |
543 err.len = NGX_MAX_CONF_ERRSTR; | |
544 err.data = errstr; | |
545 | |
546 name->len--; | |
547 name->data++; | |
548 | |
549 rr->regex = ngx_regex_compile(name, NGX_REGEX_CASELESS, cf->pool, &err); | |
550 | |
551 if (rr->regex == NULL) { | |
552 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0, "%s", err.data); | |
553 return NGX_CONF_ERROR; | |
554 } | |
555 | |
556 rr->name = *name; | |
557 | |
558 return NGX_CONF_OK; | |
559 | |
560 #else | |
561 | |
562 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0, | |
563 "the using of the regex \"%V\" requires PCRE library", | |
564 name); | |
565 | |
566 return NGX_CONF_ERROR; | |
567 | |
568 #endif | |
569 } | |
570 | |
571 | |
593 | 572 static int ngx_libc_cdecl |
573 ngx_http_cmp_referer_wildcards(const void *one, const void *two) | |
574 { | |
575 ngx_hash_key_t *first, *second; | |
576 | |
577 first = (ngx_hash_key_t *) one; | |
578 second = (ngx_hash_key_t *) two; | |
579 | |
580 return ngx_strcmp(first->key.data, second->key.data); | |
581 } |