Code-Schnipsel QUERY STRING eval fff - Versionsgeschichte

Fries43: /* Code */ besser!

2007-07-27T11:33:04Z

Code: besser!

2007-07-26T16:52:56Z

Code_alt (haesslich,aber tricky!)

2007-07-26T14:00:22Z

Code: alter code

2007-07-26T11:58:36Z

Code: besser

2007-07-21T10:22:24Z

Code: noch besser

2007-07-21T10:20:03Z

Code

2007-07-21T10:19:38Z

Code: layout

2007-07-21T10:19:18Z

Code: +einfache version

2007-07-21T10:10:31Z

Erklaerung: +email weg

2007-07-21T10:07:00Z

+code

@@ Zeile 2: / Zeile 2: @@
 <pre>
 fkt_eval_query_string () {
-        local SANITIZED="$(echo $QUERY_STRING | sed -e 's/[^%&=+-:@-_a-z~]//g')"
+        local INPUT="$QUERY_STRING"
-        eval $ESCAPED
+       test -z "$INPUT" && return
+}
 </pre>

@@ Zeile 10: / Zeile 10: @@
 =Code_alt (haesslich,aber tricky!)=
 fkt_decode_url () {                                     # SENS: convert encoded URL to normal (e.g. %20 = space , %40 = @-Symbol )
          s=$(echo "$1" | sed -e "s/+/%20/g")             # ARG1: (maybe) dirty string
@@ Zeile 49: / Zeile 50: @@
          eval "$VARS"
+}
 =Erklaerung=

@@ Zeile 8: / Zeile 8: @@
+}
 </pre>
 =Erklaerung=

@@ Zeile 1: / Zeile 1: @@
 =Code=
 <pre>
-fkt_read_browsers_query_string () {     # SENS: read and sanitize/convert query-string to useable vars
+fkt_eval_query_string () {
-                                        #       (e.g. ?A=1&B=2 changes to correct setted vars A and B)
+       local SANITIZED="$(echo $QUERY_STRING | sed -e 's/[^%&=+-:@-_a-z~]//g')"
-                                        # ARG1: string, query string
+       local ESCAPED="$(httpd -d $SANITIZED | sed -e 's/=/="/g' -e 's/&/";/g ' -e 's/$/"/g')"
-* Einfach:
+       eval $ESCAPED
+}
 </pre>

@@ Zeile 22: / Zeile 22: @@
 <pre>
 fkt_eval_query_string () {
-         set ${QUERY_STRING%%[^%&=+-:@-_a-z~]*}
+         eval $(httpd -d "$QUERY_STRING" | sed -e 's/[^%&=+-:@-_a-z~]//g' -e 's/=/="/g' -e 's/&/"; /g ' -e 's/$/"/g')
+}
 </pre>

@@ Zeile 20: / Zeile 20: @@
 =Erklaerung=
 * aus dieser URL (POST/GET egal)
-** <tt> NODE=512&HOST=silber2&LOCA=Steinbr&GPSX=11.3313&GPSY=50.9934&MAIL=bittorf%40bluebottle.com&PHON=0179%2F24223419&MENU=expert&GOGO=%DCbernehmen"</tt>
+** <tt> NODE=512&HOST=silber2&LOCA=Steinbr&GPSX=11.3313&GPSY=50.9934&MAIL=bla%40blub.org&PHON=0110%2F123456&MENU=expert&GOGO=%DCbernehmen"</tt>
 * wird ein
-** <tt>NODE="512"; HOST="silber2"; LOCA="Steinbr"; GPSX="11.3313"; GPSY="50.9934"; MAIL="bittorf@bluebottle.com"; PHON="0179/24223419"; MENU="expert"; GOGO="Übernehmen"</tt>
+** <tt>NODE="512"; HOST="silber2"; LOCA="Steinbr"; GPSX="11.3313"; GPSY="50.9934"; MAIL="bla@blub.org"; PHON="0110/123456"; MENU="expert"; GOGO="Übernehmen"</tt>
 * mit eval wird das ganze dann uebernommen und steht zur Verfuegung