init

cgi-bin/fw-editor.cgi

@@ -0,0 +1,52 @@
+#!/usr/bin/haserl
+<%in p/common.cgi %>
+<%
+page_title="Text Editor"
+
+if [ "$REQUEST_METHOD" = "POST" ]; then
+	editor_file="$POST_editor_file"
+	editor_text="$POST_editor_text"
+
+	# strip carriage return (\u000D) characters
+	editor_text=$(echo "$editor_text" | sed s/\\r//g)
+
+	case "$POST_action" in
+		save)
+			if [ -z "$editor_text" ]; then
+				log_create "warning" "Empty payload. File not saved!"
+			else
+				[ -f "${editor_file}.backup" ] && rm "${editor_file}.backup"
+				echo "$editor_text" > "$editor_file"
+				redirect_to "${SCRIPT_NAME}?f=${editor_file}" "success" "File saved."
+			fi
+			;;
+
+		*)
+			log_create "danger" "UNKNOWN ACTION: $POST_action"
+			;;
+	esac
+else
+	editor_file="$GET_f"
+	if [ ! -f "$editor_file" ]; then
+		log_create "danger" "File not found!"
+	elif [ -n "$editor_file" ]; then
+		if [ "b" = "$( (cat -v "$editor_file" | grep -q "\^@") && echo "b" )" ]; then
+			log_create "danger" "Not a text file!"
+		elif [ "$(stat -c%s $editor_file)" -gt "102400" ]; then
+			log_create "danger" "Uploaded file is too large!"
+		else
+			editor_text="$(cat $editor_file)"
+		fi
+	fi
+fi
+%>
+
+<%in p/header.cgi %>
+<form action="<%= $SCRIPT_NAME %>" method="post">
+	<% field_hidden "action" "save" %>
+	<% field_hidden "editor_file" "$editor_file" %>
+	<% field_textedit "editor_text" "File content" "$editor_file" %>
+	<% button_submit %>
+</form>
+
+<%in p/footer.cgi %>