#!/usr/local/bin/python # -*- coding: euc-jp -*- # """「くっつきブログ」このCGIを設置するだけであなたのサイトがブログになります。どのページから呼び出されたかをリファラを使って管理し、そのページへのコメントやトラックバックを受け付けます。設置手順: このスクリプトの設定項目を変更する。 CGIをサーバに設置する。 data_pathで指定したディレクトリに書き込めるようにする。各HTMLからCGIにリンクを張る。管理者モード(パスワードは空)で新しいパスワードを設定する。 """ # # Copyright (c) 2005 Satoshi Fukutomi . # All rights reserved. # # Redistribution and use in source and binary forms, with or without # modification, are permitted provided that the following conditions # are met: # 1. Redistributions of source code must retain the above copyright # notice, this list of conditions and the following disclaimer. # 2. Redistributions in binary form must reproduce the above copyright # notice, this list of conditions and the following disclaimer in the # documentation and/or other materials provided with the distribution. # # THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND # ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE # IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE # ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE # FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL # DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS # OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) # HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT # LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY # OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF # SUCH DAMAGE. # import re import os import cgi import md5 from Cookie import SimpleCookie from time import time, localtime, gmtime, strftime from urllib import quote, unquote from urlparse import urljoin try: import fcntl except ImportError: fcntl = None # # 設定 # your_site = "http://localhost:8000/" # あなたのサイト self_url = "/blog/" # このCGIのパス your_css = "/common.css" # "" なら使わない your_rss = "/rss.rdf" # "" なら使わない data_dir = "/tmp/data" # データを保存する場所 def header(title="", url="", cookie=None): """ヘッダを出力。 titleとurlのどちらかを指定。 """ print 'Content-Type: text/html; charset=euc-jp' if cookie: print cookie print print '' print '' print '' print '' if title: print '%s' % title elif url: print '%s へのコメント' % url else: print 'くっつきブログ' print ' ' % your_site print ' ' % your_site print ' ' if your_css: print ' ' % \ your_css if your_rss: print ' ' % your_rss print '' print '' if title: print '

%s

' % title elif url: print '

%s へのコメント

' % (url, url) else: print '

くっつきブログ

' def footer(cookie=None, url=""): if not cookie: cookie = readcookie() sid = cookie.get("sid", "") if sid: passwd = Password() sid_ok = passwd.check(sid=sid) else: sid_ok = False print '' if url: print '' print '

' print '' print '' def jump(url): header("jump") next = "%s?%s" % (self_url, url) print '

Click and jump to %s

' % (next, next) print '' % next footer() def xmlresponce(ok): print 'Content-Type: text/xml; encoding=utf-8' print print '', print ''; if ok: print ' 0' else: print ' 1' print ' Error' print '' class Lock: def __init__(self): self.fp = None if fcntl: self.fp = file(os.path.join(data_dir, "lock"), "w") fcntl.lockf(self.fp, fcntl.LOCK_EX) def unlock(self): if self.fp: fcntl.lockf(self.fp, fcntl.LOCK_UN) self.fp.close() self.fp = None class Comment: """コメントを保存してあるファイル。""" def __init__(self, id="", url=""): """コンストラクタ。 idとurlの一方を指定する。 idならファイルを読み込む。 """ if id: self.id = id self.path = os.path.join(data_dir, self.id) self.read() elif url: self.id = md5.new(url).hexdigest() self.path = os.path.join(data_dir, self.id) if os.path.exists(self.path): self.read() else: self.url = url self.data = [url+"\n"] def read(self): try: f = file(self.path) self.data = f.readlines() f.close() self.url = self.data[0].strip() except IOError, IndexError: self.data = [] self.url = "" def sync(self): """データの保存。""" lock = Lock() f = file(self.path, "wb") for line in self.data: f.write(line) f.close() lock.unlock() def remove(self): try: os.remove(self.path) except OSError: pass class Password: """パスワード。""" def __init__(self, passwd=""): self.path = os.path.join(data_dir, "passwd") if passwd: self.hash = md5.new(passwd).hexdigest() else: self.read() def read(self): try: f = file(self.path) self.hash = f.readline().strip() except IOError: self.hash = None def sync(self): try: lock = Lock() f = file(self.path, "w") f.write(self.hash + "\n") f.close() lock.unlock() except IOError: pass def sid(self): """セッションID。パスワードのハッシュと日付けから作る。 """ date = strftime('%Y-%m-%d', localtime(time())) return md5.new("%s %s" % (time, self.hash)).hexdigest() def check(self, passwd="", sid=""): """パスワードとセッションIDのどちらがが合っていればOK。""" if not self.hash: return True elif passwd: newpasswd = Password(passwd) return newpasswd.hash == self.hash elif sid: return sid == self.sid() else: return False def html_format(plain): """テキスト→HTML変換。""" buf = plain.replace("
", "
\n") buf = re.sub(r"https?://[^\x00-\x20\"'()<>\[\]\x7F-\xFF]{2,}", r'\g<0>', buf) return buf def readcookie(): buf = os.environ.get("HTTP_COOKIE", "") cookie = {} for pair in buf.split(";"): try: key, val = pair.split("=") cookie[key.strip()] = unquote(val.strip()) except ValueError: pass return cookie def view(url): """コメントを読む画面。""" url = cgi.escape(url, True) comment = Comment(url=url) header(url=url) for line in comment.data[1:]: try: date, message = line.strip().split("<>") print '

%s

' % \ strftime('%Y-%m-%d %H:%M', localtime(int(date))) print "

" % html_format(message) except ValueError: pass print '' print '

トラックバックURL: %s?tb=%s

' % \ (urljoin(your_site, self_url), quote(url)) print '

' % self_url footer(url=url) def post(url, form): """コメントを受け付ける。""" url = cgi.escape(url, True) comment = Comment(url=url) message = form.getfirst("message", "") message = cgi.escape(message, True) message = message.replace("\r", "").replace("\n", "
") if message: comment.data.append("%d<>%s\n" % (time(), message)) comment.sync() jump(url) def trackback(url, form): """トラックバックを受け付ける。""" url = cgi.escape(url, True) comment = Comment(url=url) blog_title = form.getfirst("title", "") blog_name = form.getfirst("blog_name", "") blog_url = form.getfirst("url", "") blog_excerpt = form.getfirst("excerpt", "") blog_charset = form.getfirst("charset", "utf-8") message = "%s - %s\n%s\n%s" % \ (blog_title, blog_name, blog_url , blog_excerpt) message = unicode(message, blog_charset).encode("euc-jp") message = cgi.escape(message, True) message = message.replace("\r", "").replace("\n", "
") if blog_url: comment.data.append("%d<>%s\n" % (time(), message)) comment.sync() xmlresponce(True) else: xmlresponce(False) def listcomment(): """掲示板の一覧。""" comment = [] for i in os.listdir(data_dir): if len(i) == 32: try: f = file(os.path.join(data_dir, i)) url = f.readline().strip() import sys; sys.stderr.write(url+"\n") comment.append(url) except IOError: pass comment.sort() print '

' def editcomment(url): """掲示板の編集画面。""" url = cgi.escape(url) comment = Comment(url=url) print '

' % self_url print '' for line in comment.data[1:]: print cgi.escape(line), print '
' print '' print '' % url print '

' def updatecomment(url, form): """コメントの更新。""" url = cgi.escape(url) comment = Comment(url=url) message = form.getfirst("message", "") message = message.replace("&", "&") if message: comment.data = [comment.data[0]] + [message] comment.sync() else: comment.remove() jump(url) def editpasswd(): """パスワード更新画面。""" print '' def updatepasswd(newpasswd): """パスワードの更新。""" passwd = Password(newpasswd) passwd.sync() header("パスワードの更新が成功しました。") print '

さっそく新しいパスワードで管理者モードになってください。

' footer() def admin(form): """管理者モード。""" cookie = readcookie() testpasswd = form.getfirst("passwd", "") newpasswd1 = form.getfirst("newpasswd1", "") newpasswd2 = form.getfirst("newpasswd1", "") sid = cookie.get("sid", "") passwd = Password() passwd_ok = passwd.check(passwd=testpasswd) sid_ok = passwd.check(sid=sid) if not (passwd_ok or sid_ok): header("パスワードが違います。") print '

よく確かめてください。

' footer() return elif sid_ok: newcookie = None else: newcookie = SimpleCookie() expires = strftime("%a, %d %b %Y %H:%M:%S GMT", gmtime(time() + 12*60*60)) newcookie["sid"] = passwd.sid() newcookie["sid"]["expires"] = expires mode = form.getfirst("mode", "page") url = form.getfirst("url", "") edit = form.getfirst("edit", "") if edit: updatecomment(edit, form) elif url: header(url=url) print "

管理者モード

" editcomment(url) footer() elif newpasswd1 and (newpasswd1 == newpasswd2): if passwd_ok: updatepasswd(newpasswd1) else: header("パスワードが違います。") print '

よく確かめてください。

' footer() else: header(title="管理者モード", cookie=newcookie) listcomment() editpasswd() footer(cookie=cookie) def main(): cmd = os.environ.get("QUERY_STRING", "") referer = os.environ.get("HTTP_REFERER", "") form = cgi.FieldStorage() comment = form.getfirst("comment", "") adminmode = form.getfirst("admin", "") form2 = cgi.parse_qs(cmd) tb = form2.get("tb", [""])[0] if adminmode: admin(form) elif re.search(r"^[a-z]+://", cmd): view(cmd) elif comment: post(comment, form) elif tb: trackback(tb, form) elif referer: view(referer) else: header() print "

リファラを送るように設定してください。

" footer() if __name__ == "__main__": main()