Changeset 223 for branches/acl/cgi-bin/CommonWeb.pm

Timestamp:

04/13/05 17:23:47 (21 years ago)

Author:

Kris Deugau

Message:

/branches/acl

All access to add new records should be ACL-ified. Users without
the "a" ACL option cannot add a new master block, or click the
"Add new assignment" link; the links aren't there to click.
They cannot assign existing free blocks; the link has been
removed. Checks are also done later in the processing to make
sure that a crafted URL can't get around the restrictions.

printHeader() in CommonWeb.pm has been updated to allow replacement
of arbitrary elements in the header.inc file. It is now called
*once* at the beginning of main.cgi to allow the "Add new assignment"
link to be disabled.

A new sub, exitError(), has been added to deal with the (rare)
case where the code must exit with an error before anything (like
HTTP headers, as required for CGI) has been printed.

File:

• branches/acl/cgi-bin/CommonWeb.pm (modified) (1 diff)

branches/acl/cgi-bin/CommonWeb.pm

@@ -53 +53 @@
 }
 
-sub printHeader($) #(cgiurl)
-{
-        my $cgiURL = $_[0];
-        print "Content-type: text/html\n\n";
-        open(FILE, "../header.inc") || die $!;
-        while (<FILE>) 
-        {
-                $_ =~ s/\$\$CGIURL\$\$/$cgiURL/g;
-                print $_;
-        }
-        close(FILE);
+
+sub printHeader {
+  my $title = shift;
+  print "Content-type: text/html\n\n";
+# This doesn't work well.  Must investigate.
+#  my $realm = shift;
+#  print qq(WWW-Authenticate: Basic realm="$realm"\n) if $realm;
+  open FILE, "../header.inc"
+        or carp $!;
+  my $html = join('',<FILE>);
+  close FILE;
+
+  $html =~ s/\$\$TITLE\$\$/$title/;
+# Necessary for mangling arbitrary bits of the header
+  my $i=0;
+  while (defined(my $param = shift)) {
+    $html =~ s/\$\$EXTRA$i\$\$/$param/g;
+    $i++;
+  }
+  print $html;
 }