From 1a3e5a5bb861f59cbcdede94a82f0984e97ea002 Mon Sep 17 00:00:00 2001
From: Guillaume Mazoyer <respawneral@gmail.com>
Date: Thu, 29 May 2014 14:28:48 +0200
Subject: Apache 2.4 configuration to avoid to access the config.php file.
 First import of the whole source code (quite monolithic for now). Update
 configuration example.

---
 execute.php | 99 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 99 insertions(+)
 create mode 100644 execute.php

(limited to 'execute.php')

diff --git a/execute.php b/execute.php
new file mode 100644
index 0000000..e3774f0
--- /dev/null
+++ b/execute.php
@@ -0,0 +1,99 @@
+<?php
+
+require_once 'config.php';
+require_once 'router.php';
+require_once 'utils.php';
+
+if (isset($_POST['query']) && !empty($_POST['query']) &&
+    isset($_POST['routers']) && !empty($_POST['routers']) &&
+    isset($_POST['parameters']) && !empty($_POST['parameters'])) {
+  $query = htmlspecialchars($_POST['query']);
+  $hostname = htmlspecialchars($_POST['routers']);
+  $parameters = htmlspecialchars($_POST['parameters']);
+  $valid_request = false;
+
+  switch ($query) {
+    case 'bgp':
+      if (match_ipv4($parameters) || match_ipv6($parameters)) {
+        $valid_request = true;
+      } else {
+        $error = 'The parameter is not an IPv4/IPv6 address.';
+      }
+      break;
+
+    case 'as-path-regex':
+      if (match_aspath_regex($parameters)) {
+        $valid_request = true;
+      } else {
+        $error = 'The parameter is not an AS-Path regular expression.';
+      }
+      break;
+
+    case 'as':
+      if (match_as($parameters)) {
+        $valid_request = true;
+      } else {
+        $error = 'The parameter is not an AS number.';
+      }
+      break;
+
+    case 'ping':
+    case 'traceroute':
+      if (match_ipv4($parameters) || match_ipv6($parameters) ||
+          match_fqdn($parameters)) {
+        $valid_request = true;
+      } else {
+        $error = 'The parameter is not an IPv4/IPv6 address or a FQDN.';
+      }
+      break;
+
+    default:
+      $error = 'Unknown request: '.$query;
+      break;
+  }
+
+  if (!$valid_request && isset($error)) {
+    // Unknown query or invalid parameters
+    echo $error;
+  } else {
+    // Do the processing
+    // Router connection, command execution, disconnection
+    $router = new Router($hostname, $_SERVER['REMOTE_ADDR']);
+    $router->connect();
+    $data = $router->send_command($query, $parameters);
+    $router->disconnect();
+
+    // Process the output line by line
+    foreach (preg_split("/((\r?\n)|(\r\n?))/", $data) as $line) {
+      // Get rid of empty lines
+      if (empty($line)) {
+        continue;
+      }
+
+      $valid = true;
+
+      foreach ($config['filters'] as $filter) {
+        // Line has been marked as invalid
+        if (!$valid) {
+          break;
+        }
+
+        // Filter line based on the configuration
+        if (preg_match($filter, $line) === 1) {
+          $valid = false;
+          break;
+        }
+      }
+
+      // The line is valid, print it
+      if ($valid) {
+        $return .= $line."\n";
+      }
+    }
+
+    // Display the result of the command
+    echo $return;
+  }
+}
+
+// End of execute.php
-- 
cgit v1.2.3