~ubuntu-branches/ubuntu/trusty/websvn/trusty-security

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
<?php
// WebSVN - Subversion repository viewing via the web using PHP
// Copyright (C) 2004-2006 Tim Armes
//
// This program is free software; you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation; either version 2 of the License, or
// (at your option) any later version.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with this program; if not, write to the Free Software
// Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
//
// --
//
// wsvn.php
//
// Glue for MultiViews

// --- CONFIGURE THIS VARIABLE ---

// Location of websvn directory via HTTP
//
// e.g.  For http://servername/websvn use /websvn
//
// Note that wsvn.php need not be in the /websvn directory (and normally isn't).
// If you want to use the root server directory, just use a blank string ('').
//$locwebsvnhttp = "/websvn";
$locwebsvnhttp = '';

// Physical location of websvn directory.  Change this if your wsvn.php is not in the
// same folder as the rest of the distribution
$locwebsvnreal = dirname(__FILE__);

// --- DON'T CHANGE BELOW HERE ---

chdir($locwebsvnreal);

// this tells files that we are in multiviews if they are unable to access
// the $config variable
if (!defined('WSVN_MULTIVIEWS')) {
  define('WSVN_MULTIVIEWS', 1);
}

ini_set("include_path", $locwebsvnreal);

require_once("include/setup.php");
require_once("include/svnlook.php");

if (!isset($_REQUEST["sc"])) {
  $_REQUEST["sc"] = 1;
}

if ($config->multiViews) {
  // If this is a form handling request, deal with it
  if (@$_REQUEST["op"] == "form") {
    include("$locwebsvnreal/form.php");
    exit;
  }

  $origPathInfo = isset($_SERVER['ORIG_PATH_INFO']) ? $_SERVER['ORIG_PATH_INFO'] : '';
  $pathInfo = isset($_SERVER['PATH_INFO']) ? $_SERVER['PATH_INFO'] : '';
  $path = trim(empty($pathInfo) ? $origPathInfo : $pathInfo);

  // Remove initial slash
  $path = substr($path, 1);
  if (empty($path)) {
    include("$locwebsvnreal/index.php");
    exit;
  }

  // Split the path into repository and path elements
  // Note: we have to cope with the repository name
  //       having a slash in it

  $found = false;

  $pos = strpos($path, '/');
  if ($pos === false) {
    $pos = strlen($path);
  }
  $name = substr($path, 0, $pos);

  foreach ($config->getRepositories() as $rep) {
    if (strcasecmp($rep->getDisplayName(), $name) == 0) {
      $found = true;
      $path = substr($path, $pos);
      if ($path == '') {
        $path = '/';
      }
      break;
    }
  }

  if ($found == false) {
    include("$locwebsvnreal/index.php");
    exit;
  }

  createProjectSelectionForm();
  createRevisionSelectionForm();
  $vars["allowdownload"] = $rep->getAllowDownload();

  // find the operation type
  $op = @$_REQUEST["op"];
  switch ($op) {
    case "dir":
      $file = "listing.php";
      break;
    case "revision":
      $file = "revision.php";
      break;
    case "file":
      $file = "filedetails.php";
      break;
    case "log":
      $file = "log.php";
      break;
    case "diff":
      $file = "diff.php";
      break;
    case "blame":
      $file = "blame.php";
      break;
    case "rss":
      $file = "rss.php";
      break;
    case "dl":
      $file = "dl.php";
      break;
    case "comp":
      $file = "comp.php";
      break;
    default:
      if ($path[strlen($path) - 1] == "/") {
        $file = "listing.php";
      } else {
        $file = "filedetails.php";
      }
      break;
  }

  // Now include the file that handles it
  include("$locwebsvnreal/$file");

} else {
  print "<p>MultiViews must be configured in config.php in order to use this file";
  exit;
}