֦ir d Z dZddlmZmZmZ ddlmZ ddlZddl Z ddl
Z ddl m
Z
ddlmZ ddlZddlZddlZddlZg dZ ej* ed
d adad Zd
Zd Zd Z ea da de j> dddfdZ d"dZ!d Z"d Z# G d d Z$ G d d Z%e j> fdZ&d#dZ'e j> fdZ(d Z)d Z*d Z+d Z,d Z-ed!k( r e& yy)$a Support module for CGI (Common Gateway Interface) scripts.
This module defines a number of utilities for use by CGI scripts
written in Python.
The global variable maxlen can be set to an integer indicating the maximum size
of a POST request. POST requests larger than this size will result in a
ValueError being raised during parsing. The default value of this variable is 0,
meaning the request size is unlimited.
z2.6 )StringIOBytesIO
TextIOWrapper)MappingN)
FeedParser)Message) MiniFieldStorage FieldStorageparseparse_multipart parse_headertestprint_exception
print_environ
print_formprint_directoryprint_argumentsprint_environ_usage)
)remove c t j dt d t rt s t t dd at st ant at | y# t $ r Y 'w xY w)a Write a log message, if there is a log file.
Even though this function is called initlog(), you should always
use log(); log is a variable that is set either to initlog
(initially), to dolog (once the log file has been opened), or to
nolog (when logging is disabled).
The first argument is a format string; the remaining arguments (if
any) are arguments to the % operator, so e.g.
log("%s: %s", "a", "b")
will write "a: b" to the log file, followed by a newline.
If the global logfp is not None, it should be a file object to
which log data is written.
If the global logfp is None, the global logfile may be a string
giving a filename to open, in append mode. This file should be
world writable!!! If the file can't be opened, logging is
silently disabled (since there is no safe place where we could
send an error message).
z7cgi.log() is deprecated as of 3.10. Use logging instead )
stacklevelalocale)encodingN)
warningswarnDeprecationWarninglogfilelogfpopenOSErrornologlogdologallargss /usr/lib64/python3.12/cgi.pyinitlogr, A sZ 0
MMK$4u #9E M
s A A$#A$c : t j | |z dz y)z=Write a log message to the log file. See initlog() for docs.
N)r# write)fmtargss r+ r( r( f s KKD4 c y)z9Dummy function, assigned to log when logging is disabled.N r) s r+ r& r& j s r2 c L da t rt j dat ay)zClose the log file.r N)r" r# closer, r' r4 r2 r+ closelogr7 n s G
Cr2 &c | t j } t | d r
| j }nd}t | t
r | j } d|vrd|d< |d dk( rt |d \ }}|dk( rt | || S |d
k( rIt |d }t r|t kD r t d | j | j | } nd
} d|v r| r| dz } | |d z } n0t j dd r | r| dz } | t j d z } | |d< n8d|v r|d } n.t j dd rt j d } nd
} | |d< t j j# | |||| S )a Parse a query in the environment or from a file (default stdin)
Arguments, all optional:
fp : file pointer; default: sys.stdin.buffer
environ : environment dictionary; default: os.environ
keep_blank_values: flag indicating whether blank values in
percent-encoded forms should be treated as blank strings.
A true value indicates that blanks should be retained as
blank strings. The default false value indicates that
blank values are to be ignored and treated as if they were
not included.
strict_parsing: flag indicating what to do with parsing errors.
If false (the default), errors are silently ignored.
If true, errors raise a ValueError exception.
separator: str. The symbol to use for separating the query arguments.
Defaults to &.
Nr zlatin-1REQUEST_METHODGETPOST CONTENT_TYPEzmultipart/form-data) separator!application/x-www-form-urlencodedCONTENT_LENGTH Maximum content length exceededr QUERY_STRINGr8 )r r> )sysstdinhasattrr
isinstancer bufferr
r intmaxlen
ValueErrorreaddecodeargvurllibr parse_qs)
fpenvironkeep_blank_valuesstrict_parsingr> r ctypepdictclengthqss
r+ r r s 0
z
YY r* ;; "m$
YY w &$) ! F*#GN$;< u ) )"2u B B
9
9'"234G'F* !BCC!((2BB W $S2gn--B
XXab\S2chhqk!B"$ 7 "
^
$ 88AB<!BB"$ << %6*2i ! I Ir2 c " |d j d }dj | }t }|j | |d |d< t | |||ddi| }|D ci c] } | |j
| c} S # t $ r Y >w xY wc c} w ) a Parse multipart input.
Arguments:
fp : input file
pdict: dictionary containing other parameters of content-type header
encoding, errors: request encoding and error handler, passed to
FieldStorage
Returns a dictionary just like parse_qs(): keys are the field names, each
value is a list of values for that field. For non-file fields, the value
is a list of strings.
boundaryasciiz multipart/form-data; boundary={}zCONTENT-LENGTHzContent-Lengthr: r< )headersr errorsrR r> )rM formatr set_typeKeyErrorr
getlist)
rQ rV r r] r> rZ rU r\ fsks
r+ r r s Z ''0H . 5 5h ?EiG U
$)*:$; !
b'HV!6*i
AB&( )bArzz!} b ))
*s A= !B = B B c # K | d d dk( r| dd } | j d }|dkD ro| j dd| | j dd| z
dz rE| j d|dz }|dkD r+| j dd| | j dd| z
dz rE|dk r t | }| d | }|j | |d } | d d dk( ry y w)NrC ;r "\"r )findcountlenstrip)sendfs r+ _parseparamro s
BQ%3,
abEffSkAg17733/!''%C2HHAM&&cAg&C Ag17733/!''%C2HHAM 7a&C
dsGggi
cdG BQ%3,s BC 4C
C c t d| z }|j }i }|D ] }|j d }|dk\ s|d| j j }||dz d j }t | dk\ r;|d |d cxk( rdk( r*n n'|dd }|j
d d
j
d d }|||< ||fS ) zfParse a Content-type like header.
Return the main content-type and a dictionary of options.
re =r NrC r rf z\\\rg )ro __next__rh rk lowerrj replace)linepartskeyrV pinamevalues r+ r
r
s
d
#E
..
C E
FF3K 6Ra5;;=&&(DacdGMMOE5zQ58uRy#?C#? a
fd3;;E3G E$K :r2 c < e Zd ZdZdZdZdZdZi ZdZ i Z
i Z d Z d Z
y)r z=Like FieldStorage, for use when no file uploads are possible.Nc || _ || _ y)z&Constructor from field name and value.Nr| r} selfr| r} s r+ __init__zMiniFieldStorage.__init__ s
r2 c < d| j d| j dS )z Return printable representation.zMiniFieldStorage(, )r r s r+ __repr__zMiniFieldStorage.__repr__ s -1YY
CCr2 )__name__
__module__ __qualname____doc__filenamelisttypefile type_options dispositiondisposition_optionsr\ r r r4 r2 r+ r r s; G H D D DLK G Dr2 r c e Zd ZdZdddej
dddddddf dZd Zd
Zd Z d Z
d
Z d Z d Z
d"dZd"dZd Zd Zd Zd Zd Zd ZdZd Zd ZdZd Zd Zd Z d Z d Z d Z d! Z y)#r
a Store a sequence of fields, reading multipart/form-data.
This class provides naming, typing, files stored on disk, and
more. At the top level, it is accessible like a dictionary, whose
keys are the field names. (Note: None can occur as a field name.)
The items are either a Python list (if there's multiple values) or
another FieldStorage or MiniFieldStorage object. If it's a single
object, it has the following attributes:
name: the field name, if specified; otherwise None
filename: the filename, if specified; otherwise None; this is the
client side filename, *not* the file name on which it is
stored (that's a temporary file you don't deal with)
value: the value as a *string*; for file uploads, this
transparently reads the file every time you request the value
and returns *bytes*
file: the file(-like) object from which you can read the data *as
bytes* ; None if the data is stored a simple string
type: the content-type, or None if not specified
type_options: dictionary of options specified on the content-type
line
disposition: content-disposition, or None if not specified
disposition_options: dictionary of corresponding options
headers: a dictionary(-like) object (sometimes email.message.Message or a
subclass thereof) containing *all* headers
The class is subclassable, mostly for the purpose of overriding
the make_file() method, which is called internally to come up with
a file open for reading and writing. This makes it possible to
override the default choice of storing all files in a temporary
directory and unlinking them as soon as they have been opened.
Nr2 r utf-8rv r8 c 6 d} || _ || _ |
| _ | | _ d|v r|d j } d| _ | dk( s| dk( rhd|v r|d }
n)t j dd rt j d }
nd}
|
j t j d }
t |
}|d d
i}|3i }| d k( rd
|d < d |v r|d |d < d|v r
|d | _ d
|v r*|d
|d< n!t |t t f s t d || _ | t j" j$ | _ nLt |t( r|j$ | _ n*t+ |d r t+ |d s t d || _ || _ | | _ t |t0 s!t dt3 | j4 z || _ d| _ || _ di }}d| j v rt= | j d \ }}|| _ || _ d| _! d|v r
|d | _! d| _" d|v r
|d | _" | jD du| _# d | j v r t= | j d \ }}n| j6 s| d k7 rdi }}nd
i }}|| _ || _$ d|v r/|d j | j, | j. | _% nd| _% d}d| j v r3 tM | j d }tP r|tP kD r tO d || _) | j: |dk\ r|| _ dx| _* | _+ d| _, |d
k( r| j[ y|dd d k( r| j] ||| y| j_ y# tN $ r Y w xY w) a$ Constructor. Read multipart/* until last part.
Arguments, all optional:
fp : file pointer; default: sys.stdin.buffer
(not used when the request method is GET)
Can be :
1. a TextIOWrapper object
2. an object whose read() and readline() methods return bytes
headers : header dictionary-like object; default:
taken from environ as per CGI spec
outerboundary : terminating multipart boundary
(for internal use only)
environ : environment dictionary; default: os.environ
keep_blank_values: flag indicating whether blank values in
percent-encoded forms should be treated as blank strings.
A true value indicates that blanks should be retained as
blank strings. The default false value indicates that
blank values are to be ignored and treated as if they were
not included.
strict_parsing: flag indicating what to do with parsing errors.
If false (the default), errors are silently ignored.
If true, errors raise a ValueError exception.
limit : used internally to read parts of multipart/form-data forms,
to exit from the reading loop when reached. It is the difference
between the form content-length and the number of bytes already
read
encoding, errors : the encoding and error handler used to decode the
binary stream to strings. Must be the same as the charset defined
for the page sending the form (content-type : meta http-equiv or
header)
max_num_fields: int. If set, then __init__ throws a ValueError
if there are more than n fields read by parse_qsl().
r; r: NHEADrB rC r surrogateescapez content-typer? r< r= r@ content-lengthz?headers must be mapping or an instance of email.message.MessagerL readlinezfp must be file pointerz#outerboundary must be bytes, not %sr zcontent-dispositionr| r z
text/plainrZ r2 rr rA
z
multipart/)0rS rT max_num_fieldsr> upper
qs_on_postrD rN encoder getpreferredencodingr rG r r TypeErrorr\ rE rH rQ r rF r r] bytesr r
outerboundary
bytes_readlimitr
r r r| r _binary_filer
innerboundaryrI rK rJ lengthr r doneread_urlencoded
read_multi read_single)r rQ r\ r rR rS rT r r r] r r> methodrX cdisprV rU clens r+ r zFieldStorage.__init__J s ^ !2 , ," w & -.446F U?f . ( ^,!" XXa[6668:KLBB)>@ ?G *M' (*1.*A' (")."9 7*,34D,E() w'(:; !8 9 9
:ii&&DG
M
*iiDGB'GB
,C 9::DG
-/ A "= 1 : : ; <
< *
2u DLL 0' 5J(KLLE5 #( U? f
DI
!* -DM MM 5 T\\ )' ^(DELE5
6V#3'5E>5E ! !&z!2!9!9$--:>++"GD "%D t|| +
4<<(89: $- !BCC :: $!) DJ $$ DI 7 7 "
3BZ<
' OOG%6 G
s #N NNc X | j j y # t $ r Y y w xY wN)r r6 AttributeErrorr s r+ __del__zFieldStorage.__del__ s' IIOO s ))c | S r r4 r s r+ __enter__zFieldStorage.__enter__ s r2 c 8 | j j y r )r r6 )r r1 s r+ __exit__zFieldStorage.__exit__ s r2 c V d| j d| j d| j dS )z"Return a printable representation.z
FieldStorage(r r )r| r r} r s r+ r zFieldStorage.__repr__ s! 4==$**6 6r2 c 4 t | j S r )iterkeysr s r+ __iter__zFieldStorage.__iter__ s DIIK r2 c |dk7 r t | | j rR| j j d | j j }| j j d |S | j | j }|S d }|S )Nr} r )r r seekrL r r s r+ __getattr__zFieldStorage.__getattr__ sz 7? & & 99 IINN1 IINN$E IINN1
YY
"IIE E r2 c | j t d g }| j D ]# }|j |k( s|j | % |s t | t | dk( r|d S |S )zDictionary style indexing.
not indexablerC r )r r r| appendr` rj )r ry founditems r+ __getitem__zFieldStorage.__getitem__ sg 99 O, ,IIDyyC d!3 3- u:?8OLr2 c || v r;| | }t |t r|D cg c] }|j c}S |j S |S c c}w )z8Dictionary style get() method, including 'value' lookup.rG r r} )r ry defaultr} xs r+ getvaluezFieldStorage.getvalue sI $;IE%&)./A// {{"N 0s Ac n || v r0| | }t |t r|d j S |j S |S )z! Return the first value received.r r )r ry r r} s r+ getfirstzFieldStorage.getfirst) s9 $;IE%& Qx~~% {{"Nr2 c || v r<| | }t |t r|D cg c] }|j c}S |j gS g S c c}w )z Return list of received values.r )r ry r} r s r+ ra zFieldStorage.getlist4 sK $;IE%&)./A// }$I 0s Ac z | j t d t t d | j D S )z Dictionary style keys() method.r c 3 4 K | ] }|j y wr r| ).0r s r+