50
|
1
|
|
2 /*
|
|
3 * Copyright (C) Igor Sysoev
|
|
4 */
|
|
5
|
|
6
|
|
7 #include <ngx_config.h>
|
|
8 #include <ngx_core.h>
|
|
9 #include <ngx_http.h>
|
|
10
|
|
11
|
|
12 typedef struct {
|
58
|
13 ngx_str_t name;
|
|
14 ngx_uint_t wildcard;
|
50
|
15 } ngx_http_rewrite_referer_t;
|
|
16
|
|
17
|
|
18 typedef struct {
|
58
|
19 ngx_array_t *codes; /* uintptr_t */
|
|
20 ngx_array_t *referers; /* ngx_http_rewrite_referer_t */
|
50
|
21
|
64
|
22 ngx_uint_t captures;
|
58
|
23 ngx_uint_t stack_size;
|
50
|
24
|
58
|
25 ngx_flag_t log;
|
50
|
26
|
58
|
27 ngx_flag_t no_referer;
|
|
28 ngx_flag_t blocked_referer;
|
50
|
29 } ngx_http_rewrite_loc_conf_t;
|
|
30
|
|
31
|
|
32 static void *ngx_http_rewrite_create_loc_conf(ngx_conf_t *cf);
|
|
33 static char *ngx_http_rewrite_merge_loc_conf(ngx_conf_t *cf,
|
|
34 void *parent, void *child);
|
58
|
35 static ngx_int_t ngx_http_rewrite_init(ngx_cycle_t *cycle);
|
50
|
36 static char *ngx_http_rewrite(ngx_conf_t *cf, ngx_command_t *cmd, void *conf);
|
|
37 static char *ngx_http_rewrite_return(ngx_conf_t *cf, ngx_command_t *cmd,
|
|
38 void *conf);
|
76
|
39 static char *ngx_http_rewrite_break(ngx_conf_t *cf, ngx_command_t *cmd,
|
|
40 void *conf);
|
50
|
41 static char *ngx_http_rewrite_if(ngx_conf_t *cf, ngx_command_t *cmd,
|
|
42 void *conf);
|
|
43 static char * ngx_http_rewrite_if_condition(ngx_conf_t *cf,
|
|
44 ngx_http_rewrite_loc_conf_t *lcf);
|
|
45 static char *ngx_http_rewrite_variable(ngx_conf_t *cf,
|
|
46 ngx_http_rewrite_loc_conf_t *lcf, ngx_str_t *value);
|
|
47 static char *ngx_http_rewrite_valid_referers(ngx_conf_t *cf,
|
|
48 ngx_command_t *cmd, void *conf);
|
58
|
49 static char *ngx_http_rewrite_set(ngx_conf_t *cf, ngx_command_t *cmd,
|
50
|
50 void *conf);
|
|
51
|
|
52
|
|
53 static ngx_command_t ngx_http_rewrite_commands[] = {
|
|
54
|
|
55 { ngx_string("rewrite"),
|
|
56 NGX_HTTP_SRV_CONF|NGX_HTTP_SIF_CONF|NGX_HTTP_LOC_CONF|NGX_HTTP_LIF_CONF
|
|
57 |NGX_CONF_TAKE23,
|
|
58 ngx_http_rewrite,
|
|
59 NGX_HTTP_LOC_CONF_OFFSET,
|
|
60 0,
|
|
61 NULL },
|
|
62
|
|
63 { ngx_string("return"),
|
|
64 NGX_HTTP_SRV_CONF|NGX_HTTP_SIF_CONF|NGX_HTTP_LOC_CONF|NGX_HTTP_LIF_CONF
|
|
65 |NGX_CONF_TAKE1,
|
|
66 ngx_http_rewrite_return,
|
|
67 NGX_HTTP_LOC_CONF_OFFSET,
|
|
68 0,
|
|
69 NULL },
|
|
70
|
76
|
71 { ngx_string("break"),
|
|
72 NGX_HTTP_SRV_CONF|NGX_HTTP_SIF_CONF|NGX_HTTP_LOC_CONF|NGX_HTTP_LIF_CONF
|
|
73 |NGX_CONF_NOARGS,
|
|
74 ngx_http_rewrite_break,
|
|
75 NGX_HTTP_LOC_CONF_OFFSET,
|
|
76 0,
|
|
77 NULL },
|
|
78
|
50
|
79 { ngx_string("if"),
|
|
80 NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_BLOCK|NGX_CONF_1MORE,
|
|
81 ngx_http_rewrite_if,
|
|
82 NGX_HTTP_LOC_CONF_OFFSET,
|
|
83 0,
|
|
84 NULL },
|
|
85
|
|
86 { ngx_string("valid_referers"),
|
|
87 NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_1MORE,
|
|
88 ngx_http_rewrite_valid_referers,
|
|
89 NGX_HTTP_LOC_CONF_OFFSET,
|
|
90 0,
|
|
91 NULL },
|
|
92
|
|
93 { ngx_string("set"),
|
|
94 NGX_HTTP_SRV_CONF|NGX_HTTP_SIF_CONF|NGX_HTTP_LOC_CONF|NGX_HTTP_LIF_CONF
|
|
95 |NGX_CONF_TAKE2,
|
|
96 ngx_http_rewrite_set,
|
|
97 NGX_HTTP_LOC_CONF_OFFSET,
|
|
98 0,
|
|
99 NULL },
|
|
100
|
|
101 { ngx_string("rewrite_log"),
|
|
102 NGX_HTTP_SRV_CONF|NGX_HTTP_SIF_CONF|NGX_HTTP_LOC_CONF|NGX_HTTP_LIF_CONF
|
|
103 |NGX_CONF_TAKE1,
|
|
104 ngx_conf_set_flag_slot,
|
|
105 NGX_HTTP_LOC_CONF_OFFSET,
|
|
106 offsetof(ngx_http_rewrite_loc_conf_t, log),
|
|
107 NULL },
|
|
108
|
|
109 ngx_null_command
|
|
110 };
|
|
111
|
|
112
|
|
113 ngx_http_module_t ngx_http_rewrite_module_ctx = {
|
58
|
114 NULL, /* preconfiguration */
|
|
115 NULL, /* postconfiguration */
|
50
|
116
|
|
117 NULL, /* create main configuration */
|
|
118 NULL, /* init main configuration */
|
|
119
|
|
120 NULL, /* create server configuration */
|
|
121 NULL, /* merge server configuration */
|
|
122
|
|
123 ngx_http_rewrite_create_loc_conf, /* create location configration */
|
|
124 ngx_http_rewrite_merge_loc_conf /* merge location configration */
|
|
125 };
|
|
126
|
|
127
|
|
128 ngx_module_t ngx_http_rewrite_module = {
|
58
|
129 NGX_MODULE_V1,
|
50
|
130 &ngx_http_rewrite_module_ctx, /* module context */
|
|
131 ngx_http_rewrite_commands, /* module directives */
|
|
132 NGX_HTTP_MODULE, /* module type */
|
90
|
133 NULL, /* init master */
|
50
|
134 ngx_http_rewrite_init, /* init module */
|
90
|
135 NULL, /* init process */
|
|
136 NULL, /* init thread */
|
|
137 NULL, /* exit thread */
|
|
138 NULL, /* exit process */
|
|
139 NULL, /* exit master */
|
|
140 NGX_MODULE_V1_PADDING
|
50
|
141 };
|
|
142
|
|
143
|
|
144 static ngx_http_variable_value_t ngx_http_rewrite_null_value =
|
122
|
145 ngx_http_variable("");
|
50
|
146
|
|
147
|
|
148 static ngx_int_t
|
|
149 ngx_http_rewrite_handler(ngx_http_request_t *r)
|
|
150 {
|
58
|
151 ngx_http_script_code_pt code;
|
|
152 ngx_http_script_engine_t *e;
|
50
|
153 ngx_http_rewrite_loc_conf_t *cf;
|
|
154
|
|
155 cf = ngx_http_get_module_loc_conf(r, ngx_http_rewrite_module);
|
|
156
|
|
157 if (cf->codes == NULL) {
|
|
158 return NGX_DECLINED;
|
|
159 }
|
|
160
|
58
|
161 e = ngx_pcalloc(r->pool, sizeof(ngx_http_script_engine_t));
|
50
|
162 if (e == NULL) {
|
|
163 return NGX_HTTP_INTERNAL_SERVER_ERROR;
|
|
164 }
|
|
165
|
58
|
166 e->sp = ngx_pcalloc(r->pool,
|
|
167 cf->stack_size * sizeof(ngx_http_variable_value_t));
|
50
|
168 if (e->sp == NULL) {
|
|
169 return NGX_HTTP_INTERNAL_SERVER_ERROR;
|
|
170 }
|
|
171
|
64
|
172 if (cf->captures) {
|
|
173 e->captures = ngx_palloc(r->pool, cf->captures * sizeof(int));
|
50
|
174 if (e->captures == NULL) {
|
|
175 return NGX_HTTP_INTERNAL_SERVER_ERROR;
|
|
176 }
|
|
177
|
|
178 } else {
|
|
179 e->captures = NULL;
|
|
180 }
|
|
181
|
|
182 e->ip = cf->codes->elts;
|
58
|
183 e->request = r;
|
50
|
184 e->quote = 1;
|
58
|
185 e->log = cf->log;
|
50
|
186 e->status = NGX_DECLINED;
|
|
187
|
|
188 while (*(uintptr_t *) e->ip) {
|
58
|
189 code = *(ngx_http_script_code_pt *) e->ip;
|
50
|
190 code(e);
|
|
191 }
|
|
192
|
|
193 return e->status;
|
|
194 }
|
|
195
|
|
196
|
|
197 static void
|
58
|
198 ngx_http_rewrite_invalid_referer_code(ngx_http_script_engine_t *e)
|
50
|
199 {
|
|
200 u_char *ref;
|
|
201 size_t len;
|
|
202 ngx_uint_t i, n;
|
|
203 ngx_http_request_t *r;
|
|
204 ngx_http_rewrite_referer_t *refs;
|
|
205 ngx_http_rewrite_loc_conf_t *cf;
|
|
206
|
|
207 r = e->request;
|
|
208
|
|
209 ngx_log_debug0(NGX_LOG_DEBUG_HTTP, r->connection->log, 0,
|
|
210 "http rewrite invalid referer");
|
|
211
|
|
212 cf = ngx_http_get_module_loc_conf(r, ngx_http_rewrite_module);
|
|
213
|
|
214 e->ip += sizeof(uintptr_t);
|
|
215
|
|
216 if (cf->referers == NULL) {
|
122
|
217 e->sp->data = (u_char *) "";
|
|
218 e->sp->len = 0;
|
50
|
219 e->sp++;
|
|
220
|
|
221 return;
|
|
222 }
|
|
223
|
|
224 if (r->headers_in.referer == NULL) {
|
|
225 if (cf->no_referer) {
|
122
|
226 e->sp->data = (u_char *) "";
|
|
227 e->sp->len = 0;
|
50
|
228 e->sp++;
|
|
229
|
|
230 return;
|
54
|
231
|
50
|
232 } else {
|
122
|
233 e->sp->data = (u_char *) "1";
|
|
234 e->sp->len = 1;
|
50
|
235 e->sp++;
|
|
236
|
|
237 return;
|
|
238 }
|
|
239 }
|
|
240
|
|
241 len = r->headers_in.referer->value.len;
|
|
242 ref = r->headers_in.referer->value.data;
|
|
243
|
|
244 if (len < sizeof("http://i.ru") - 1
|
|
245 || (ngx_strncasecmp(ref, "http://", 7) != 0))
|
|
246 {
|
54
|
247 if (cf->blocked_referer) {
|
122
|
248 e->sp->data = (u_char *) "";
|
|
249 e->sp->len = 0;
|
54
|
250 e->sp++;
|
|
251
|
|
252 return;
|
50
|
253
|
54
|
254 } else {
|
122
|
255 e->sp->data = (u_char *) "1";
|
|
256 e->sp->len = 1;
|
54
|
257 e->sp++;
|
|
258
|
|
259 return;
|
|
260 }
|
50
|
261 }
|
|
262
|
|
263 len -= 7;
|
|
264 ref += 7;
|
|
265
|
|
266 refs = cf->referers->elts;
|
|
267 for (i = 0; i < cf->referers->nelts; i++ ){
|
|
268
|
|
269 if (refs[i].name.len > len) {
|
|
270 continue;
|
|
271 }
|
|
272
|
|
273 if (refs[i].wildcard) {
|
|
274 for (n = 0; n < len; n++) {
|
|
275 if (ref[n] == '/' || ref[n] == ':') {
|
|
276 break;
|
|
277 }
|
|
278
|
|
279 if (ref[n] != '.') {
|
|
280 continue;
|
|
281 }
|
|
282
|
|
283 if (ngx_strncmp(&ref[n], refs[i].name.data,
|
|
284 refs[i].name.len) == 0)
|
|
285 {
|
122
|
286 e->sp->data = (u_char *) "";
|
|
287 e->sp->len = 0;
|
50
|
288 e->sp++;
|
|
289
|
|
290 return;
|
|
291 }
|
|
292 }
|
|
293
|
|
294 } else {
|
|
295 if (ngx_strncasecmp(refs[i].name.data, ref, refs[i].name.len) == 0)
|
|
296 {
|
122
|
297 e->sp->data = (u_char *) "";
|
|
298 e->sp->len = 0;
|
50
|
299 e->sp++;
|
|
300
|
|
301 return;
|
|
302 }
|
|
303 }
|
|
304 }
|
|
305
|
122
|
306 e->sp->data = (u_char *) "1";
|
|
307 e->sp->len = 1;
|
50
|
308 e->sp++;
|
|
309 }
|
|
310
|
|
311
|
122
|
312 static ngx_int_t
|
|
313 ngx_http_rewrite_var(ngx_http_request_t *r, ngx_http_variable_value_t *v,
|
|
314 uintptr_t data)
|
50
|
315 {
|
|
316 ngx_http_variable_t *var;
|
|
317 ngx_http_core_main_conf_t *cmcf;
|
|
318
|
|
319 cmcf = ngx_http_get_module_main_conf(r, ngx_http_core_module);
|
|
320
|
|
321 var = cmcf->variables.elts;
|
|
322
|
|
323 /*
|
|
324 * the ngx_http_rewrite_module sets variables directly in r->variables,
|
68
|
325 * and they should be handled by ngx_http_get_indexed_variable(),
|
50
|
326 * so the handler is called only if the variable is not initialized
|
|
327 */
|
|
328
|
|
329 ngx_log_error(NGX_LOG_ALERT, r->connection->log, 0,
|
|
330 "using uninitialized \"%V\" variable", &var[data].name);
|
|
331
|
122
|
332 *v = ngx_http_rewrite_null_value;
|
|
333
|
|
334 return NGX_OK;
|
50
|
335 }
|
|
336
|
|
337
|
|
338 static void *
|
|
339 ngx_http_rewrite_create_loc_conf(ngx_conf_t *cf)
|
|
340 {
|
|
341 ngx_http_rewrite_loc_conf_t *conf;
|
|
342
|
|
343 conf = ngx_pcalloc(cf->pool, sizeof(ngx_http_rewrite_loc_conf_t));
|
|
344 if (conf == NULL) {
|
|
345 return NGX_CONF_ERROR;
|
|
346 }
|
|
347
|
|
348 conf->stack_size = NGX_CONF_UNSET_UINT;
|
|
349 conf->log = NGX_CONF_UNSET;
|
|
350 conf->no_referer = NGX_CONF_UNSET;
|
54
|
351 conf->blocked_referer = NGX_CONF_UNSET;
|
50
|
352
|
|
353 return conf;
|
|
354 }
|
|
355
|
|
356
|
|
357 static char *
|
|
358 ngx_http_rewrite_merge_loc_conf(ngx_conf_t *cf, void *parent, void *child)
|
|
359 {
|
|
360 ngx_http_rewrite_loc_conf_t *prev = parent;
|
|
361 ngx_http_rewrite_loc_conf_t *conf = child;
|
|
362
|
58
|
363 uintptr_t *code;
|
50
|
364
|
|
365 ngx_conf_merge_value(conf->log, prev->log, 0);
|
|
366 ngx_conf_merge_unsigned_value(conf->stack_size, prev->stack_size, 10);
|
|
367
|
|
368 if (conf->referers == NULL) {
|
|
369 conf->referers = prev->referers;
|
|
370 ngx_conf_merge_value(conf->no_referer, prev->no_referer, 0);
|
54
|
371 ngx_conf_merge_value(conf->blocked_referer, prev->blocked_referer, 0);
|
50
|
372 }
|
|
373
|
|
374 if (conf->no_referer == NGX_CONF_UNSET) {
|
|
375 conf->no_referer = 0;
|
|
376 }
|
|
377
|
54
|
378 if (conf->blocked_referer == NGX_CONF_UNSET) {
|
|
379 conf->blocked_referer = 0;
|
|
380 }
|
|
381
|
50
|
382 if (conf->codes == NULL) {
|
|
383 return NGX_CONF_OK;
|
|
384 }
|
|
385
|
|
386 if (conf->codes == prev->codes) {
|
|
387 return NGX_CONF_OK;
|
|
388 }
|
|
389
|
|
390 code = ngx_array_push_n(conf->codes, sizeof(uintptr_t));
|
|
391 if (code == NULL) {
|
|
392 return NGX_CONF_ERROR;
|
|
393 }
|
|
394
|
|
395 *code = (uintptr_t) NULL;
|
|
396
|
|
397 return NGX_CONF_OK;
|
|
398 }
|
|
399
|
|
400
|
58
|
401 static ngx_int_t
|
|
402 ngx_http_rewrite_init(ngx_cycle_t *cycle)
|
|
403 {
|
|
404 ngx_http_handler_pt *h;
|
|
405 ngx_http_core_main_conf_t *cmcf;
|
|
406
|
|
407 cmcf = ngx_http_cycle_get_module_main_conf(cycle, ngx_http_core_module);
|
|
408
|
122
|
409 h = ngx_array_push(&cmcf->phases[NGX_HTTP_SERVER_REWRITE_PHASE].handlers);
|
|
410 if (h == NULL) {
|
|
411 return NGX_ERROR;
|
|
412 }
|
|
413
|
|
414 *h = ngx_http_rewrite_handler;
|
|
415
|
58
|
416 h = ngx_array_push(&cmcf->phases[NGX_HTTP_REWRITE_PHASE].handlers);
|
|
417 if (h == NULL) {
|
|
418 return NGX_ERROR;
|
|
419 }
|
|
420
|
|
421 *h = ngx_http_rewrite_handler;
|
|
422
|
|
423 return NGX_OK;
|
|
424 }
|
|
425
|
|
426
|
50
|
427 static char *
|
|
428 ngx_http_rewrite(ngx_conf_t *cf, ngx_command_t *cmd, void *conf)
|
|
429 {
|
|
430 ngx_http_rewrite_loc_conf_t *lcf = conf;
|
|
431
|
58
|
432 ngx_str_t *value, err;
|
|
433 ngx_int_t n;
|
|
434 ngx_uint_t last;
|
|
435 ngx_http_script_code_pt *code;
|
|
436 ngx_http_script_compile_t sc;
|
|
437 ngx_http_script_regex_code_t *regex;
|
|
438 ngx_http_script_regex_end_code_t *regex_end;
|
|
439 u_char errstr[NGX_MAX_CONF_ERRSTR];
|
50
|
440
|
58
|
441 regex = ngx_http_script_start_code(cf->pool, &lcf->codes,
|
|
442 sizeof(ngx_http_script_regex_code_t));
|
50
|
443 if (regex == NULL) {
|
|
444 return NGX_CONF_ERROR;
|
|
445 }
|
|
446
|
58
|
447 ngx_memzero(regex, sizeof(ngx_http_script_regex_code_t));
|
|
448
|
50
|
449 value = cf->args->elts;
|
|
450
|
|
451 err.len = NGX_MAX_CONF_ERRSTR;
|
|
452 err.data = errstr;
|
|
453
|
|
454 /* TODO: NGX_REGEX_CASELESS */
|
|
455
|
|
456 regex->regex = ngx_regex_compile(&value[1], 0, cf->pool, &err);
|
|
457
|
|
458 if (regex->regex == NULL) {
|
|
459 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0, "%s", err.data);
|
|
460 return NGX_CONF_ERROR;
|
|
461 }
|
|
462
|
58
|
463 regex->code = ngx_http_script_regex_start_code;
|
50
|
464 regex->uri = 1;
|
|
465 regex->name = value[1];
|
|
466
|
58
|
467 if (value[2].data[value[2].len - 1] == '?') {
|
|
468
|
|
469 /* the last "?" drops the original arguments */
|
|
470 value[2].len--;
|
|
471
|
|
472 } else {
|
|
473 regex->add_args = 1;
|
|
474 }
|
|
475
|
50
|
476 last = 0;
|
|
477
|
|
478 if (ngx_strncmp(value[2].data, "http://", sizeof("http://") - 1) == 0) {
|
|
479 regex->status = NGX_HTTP_MOVED_TEMPORARILY;
|
|
480 regex->redirect = 1;
|
|
481 last = 1;
|
|
482 }
|
|
483
|
|
484 if (cf->args->nelts == 4) {
|
|
485 if (ngx_strcmp(value[3].data, "last") == 0) {
|
|
486 last = 1;
|
|
487
|
|
488 } else if (ngx_strcmp(value[3].data, "break") == 0) {
|
|
489 regex->break_cycle = 1;
|
|
490 last = 1;
|
|
491
|
|
492 } else if (ngx_strcmp(value[3].data, "redirect") == 0) {
|
|
493 regex->status = NGX_HTTP_MOVED_TEMPORARILY;
|
|
494 regex->redirect = 1;
|
|
495 last = 1;
|
|
496
|
|
497 } else if (ngx_strcmp(value[3].data, "permanent") == 0) {
|
|
498 regex->status = NGX_HTTP_MOVED_PERMANENTLY;
|
|
499 regex->redirect = 1;
|
|
500 last = 1;
|
|
501
|
|
502 } else {
|
|
503 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0,
|
|
504 "invalid parameter \"%V\"", &value[3]);
|
|
505 return NGX_CONF_ERROR;
|
|
506 }
|
|
507 }
|
|
508
|
58
|
509 ngx_memzero(&sc, sizeof(ngx_http_script_compile_t));
|
50
|
510
|
58
|
511 sc.cf = cf;
|
|
512 sc.source = &value[2];
|
|
513 sc.lengths = ®ex->lengths;
|
|
514 sc.values = &lcf->codes;
|
|
515 sc.variables = ngx_http_script_variables_count(&value[2]);
|
|
516 sc.main = regex;
|
|
517 sc.complete_lengths = 1;
|
|
518 sc.compile_args = !regex->redirect;
|
50
|
519
|
58
|
520 if (ngx_http_script_compile(&sc) != NGX_OK) {
|
|
521 return NGX_CONF_ERROR;
|
|
522 }
|
50
|
523
|
58
|
524 regex = sc.main;
|
50
|
525
|
58
|
526 regex->ncaptures = sc.ncaptures;
|
|
527 regex->size = sc.size;
|
|
528 regex->args = sc.args;
|
50
|
529
|
58
|
530 if (sc.variables == 0) {
|
|
531 regex->lengths = NULL;
|
50
|
532 }
|
|
533
|
|
534 n = ngx_regex_capture_count(regex->regex);
|
|
535
|
|
536 if (n < 0) {
|
|
537 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0,
|
|
538 ngx_regex_capture_count_n " failed for "
|
|
539 "pattern \"%V\"", &value[1]);
|
|
540 return NGX_CONF_ERROR;
|
|
541 }
|
|
542
|
|
543 if (regex->ncaptures > (ngx_uint_t) n) {
|
|
544 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0,
|
|
545 "pattern \"%V\" has less captures "
|
|
546 "than referrenced in substitution \"%V\"",
|
|
547 &value[1], &value[2]);
|
|
548 return NGX_CONF_ERROR;
|
|
549 }
|
|
550
|
|
551 if (regex->ncaptures < (ngx_uint_t) n) {
|
|
552 regex->ncaptures = (ngx_uint_t) n;
|
|
553 }
|
|
554
|
|
555 if (regex->ncaptures) {
|
|
556 regex->ncaptures = (regex->ncaptures + 1) * 3;
|
|
557
|
64
|
558 if (lcf->captures < regex->ncaptures) {
|
|
559 lcf->captures = regex->ncaptures;
|
|
560 }
|
58
|
561 }
|
|
562
|
|
563 regex_end = ngx_http_script_add_code(lcf->codes,
|
|
564 sizeof(ngx_http_script_regex_end_code_t),
|
|
565 ®ex);
|
50
|
566 if (regex_end == NULL) {
|
|
567 return NGX_CONF_ERROR;
|
|
568 }
|
|
569
|
58
|
570 regex_end->code = ngx_http_script_regex_end_code;
|
50
|
571 regex_end->uri = regex->uri;
|
|
572 regex_end->args = regex->args;
|
58
|
573 regex_end->add_args = regex->add_args;
|
50
|
574 regex_end->redirect = regex->redirect;
|
|
575
|
|
576 if (last) {
|
66
|
577 code = ngx_http_script_add_code(lcf->codes, sizeof(uintptr_t), ®ex);
|
50
|
578 if (code == NULL) {
|
|
579 return NGX_CONF_ERROR;
|
|
580 }
|
|
581
|
|
582 *code = (uintptr_t) NULL;
|
|
583 }
|
|
584
|
|
585 regex->next = (u_char *) lcf->codes->elts + lcf->codes->nelts
|
|
586 - (u_char *) regex;
|
|
587
|
|
588 return NGX_CONF_OK;
|
|
589 }
|
|
590
|
|
591
|
|
592 static char *
|
|
593 ngx_http_rewrite_return(ngx_conf_t *cf, ngx_command_t *cmd, void *conf)
|
|
594 {
|
|
595 ngx_http_rewrite_loc_conf_t *lcf = conf;
|
|
596
|
58
|
597 ngx_str_t *value;
|
|
598 ngx_http_script_return_code_t *ret;
|
50
|
599
|
58
|
600 ret = ngx_http_script_start_code(cf->pool, &lcf->codes,
|
|
601 sizeof(ngx_http_script_return_code_t));
|
50
|
602 if (ret == NULL) {
|
|
603 return NGX_CONF_ERROR;
|
|
604 }
|
|
605
|
|
606 value = cf->args->elts;
|
|
607
|
58
|
608 ret->code = ngx_http_script_return_code;
|
50
|
609 ret->null = (uintptr_t) NULL;
|
|
610
|
|
611 ret->status = ngx_atoi(value[1].data, value[1].len);
|
|
612
|
|
613 if (ret->status == (uintptr_t) NGX_ERROR) {
|
|
614 return NGX_CONF_ERROR;
|
|
615 }
|
|
616
|
|
617 return NGX_CONF_OK;
|
|
618 }
|
|
619
|
|
620
|
|
621 static char *
|
76
|
622 ngx_http_rewrite_break(ngx_conf_t *cf, ngx_command_t *cmd, void *conf)
|
|
623 {
|
|
624 ngx_http_rewrite_loc_conf_t *lcf = conf;
|
|
625
|
|
626 ngx_http_script_code_pt *code;
|
|
627
|
|
628 code = ngx_http_script_start_code(cf->pool, &lcf->codes, sizeof(uintptr_t));
|
|
629 if (code == NULL) {
|
|
630 return NGX_CONF_ERROR;
|
|
631 }
|
|
632
|
|
633 *code = ngx_http_script_break_code;
|
|
634
|
|
635 return NGX_CONF_OK;
|
|
636 }
|
|
637
|
|
638
|
|
639 static char *
|
50
|
640 ngx_http_rewrite_if(ngx_conf_t *cf, ngx_command_t *cmd, void *conf)
|
|
641 {
|
|
642 ngx_http_rewrite_loc_conf_t *lcf = conf;
|
|
643
|
|
644 void *mconf;
|
|
645 char *rv;
|
|
646 u_char *elts;
|
|
647 ngx_uint_t i;
|
|
648 ngx_conf_t save;
|
|
649 ngx_http_module_t *module;
|
|
650 ngx_http_conf_ctx_t *ctx, *pctx;
|
|
651 ngx_http_core_loc_conf_t *clcf, *pclcf, **clcfp;
|
58
|
652 ngx_http_script_if_code_t *if_code;
|
50
|
653 ngx_http_rewrite_loc_conf_t *nlcf;
|
|
654
|
|
655 ctx = ngx_pcalloc(cf->pool, sizeof(ngx_http_conf_ctx_t));
|
|
656 if (ctx == NULL) {
|
|
657 return NGX_CONF_ERROR;
|
|
658 }
|
|
659
|
|
660 pctx = cf->ctx;
|
|
661 ctx->main_conf = pctx->main_conf;
|
|
662 ctx->srv_conf = pctx->srv_conf;
|
|
663
|
|
664 ctx->loc_conf = ngx_pcalloc(cf->pool, sizeof(void *) * ngx_http_max_module);
|
|
665 if (ctx->loc_conf == NULL) {
|
|
666 return NGX_CONF_ERROR;
|
|
667 }
|
|
668
|
|
669 for (i = 0; ngx_modules[i]; i++) {
|
|
670 if (ngx_modules[i]->type != NGX_HTTP_MODULE) {
|
|
671 continue;
|
|
672 }
|
|
673
|
|
674 module = ngx_modules[i]->ctx;
|
|
675
|
|
676 if (module->create_loc_conf) {
|
|
677
|
|
678 mconf = module->create_loc_conf(cf);
|
|
679 if (mconf == NULL) {
|
|
680 return NGX_CONF_ERROR;
|
|
681 }
|
|
682
|
|
683 ctx->loc_conf[ngx_modules[i]->ctx_index] = mconf;
|
|
684 }
|
|
685 }
|
|
686
|
|
687 pclcf = pctx->loc_conf[ngx_http_core_module.ctx_index];
|
|
688
|
|
689 clcf = ctx->loc_conf[ngx_http_core_module.ctx_index];
|
|
690 clcf->loc_conf = ctx->loc_conf;
|
|
691 clcf->name = pclcf->name;
|
|
692 clcf->noname = 1;
|
|
693
|
|
694 if (pclcf->locations.elts == NULL) {
|
|
695 if (ngx_array_init(&pclcf->locations, cf->pool, 4, sizeof(void *))
|
104
|
696 == NGX_ERROR)
|
50
|
697 {
|
|
698 return NGX_CONF_ERROR;
|
|
699 }
|
|
700 }
|
|
701
|
|
702 clcfp = ngx_array_push(&pclcf->locations);
|
|
703 if (clcfp == NULL) {
|
|
704 return NGX_CONF_ERROR;
|
|
705 }
|
|
706
|
|
707 *clcfp = clcf;
|
|
708
|
|
709
|
|
710 if (ngx_http_rewrite_if_condition(cf, lcf) != NGX_CONF_OK) {
|
|
711 return NGX_CONF_ERROR;
|
|
712 }
|
|
713
|
58
|
714 if_code = ngx_array_push_n(lcf->codes, sizeof(ngx_http_script_if_code_t));
|
50
|
715 if (if_code == NULL) {
|
|
716 return NULL;
|
|
717 }
|
|
718
|
58
|
719 if_code->code = ngx_http_script_if_code;
|
50
|
720
|
|
721 elts = lcf->codes->elts;
|
|
722
|
|
723
|
|
724 /* the inside directives must compile to the same code array */
|
|
725
|
|
726 nlcf = ctx->loc_conf[ngx_http_rewrite_module.ctx_index];
|
|
727 nlcf->codes = lcf->codes;
|
|
728
|
|
729
|
|
730 save = *cf;
|
|
731 cf->ctx = ctx;
|
|
732
|
|
733 if (pclcf->name.len == 0) {
|
|
734 if_code->loc_conf = NULL;
|
|
735 cf->cmd_type = NGX_HTTP_SIF_CONF;
|
|
736
|
|
737 } else {
|
|
738 if_code->loc_conf = ctx->loc_conf;
|
|
739 cf->cmd_type = NGX_HTTP_LIF_CONF;
|
|
740 }
|
|
741
|
|
742 rv = ngx_conf_parse(cf, NULL);
|
|
743
|
|
744 *cf = save;
|
|
745
|
|
746 if (rv != NGX_CONF_OK) {
|
|
747 return rv;
|
|
748 }
|
|
749
|
|
750
|
66
|
751 if (lcf->captures < nlcf->captures) {
|
|
752 lcf->captures = nlcf->captures;
|
|
753 }
|
|
754
|
|
755
|
50
|
756 if (elts != lcf->codes->elts) {
|
58
|
757 if_code = (ngx_http_script_if_code_t *)
|
50
|
758 ((u_char *) if_code + ((u_char *) lcf->codes->elts - elts));
|
|
759 }
|
|
760
|
|
761 if_code->next = (u_char *) lcf->codes->elts + lcf->codes->nelts
|
|
762 - (u_char *) if_code;
|
|
763
|
104
|
764 /* the code array belong to parent block */
|
|
765
|
|
766 nlcf->codes = NULL;
|
|
767
|
50
|
768 return NGX_CONF_OK;
|
|
769 }
|
|
770
|
|
771
|
|
772 static char *
|
|
773 ngx_http_rewrite_if_condition(ngx_conf_t *cf, ngx_http_rewrite_loc_conf_t *lcf)
|
|
774 {
|
58
|
775 ngx_str_t *value, err;
|
64
|
776 ngx_uint_t cur, last, n;
|
58
|
777 ngx_http_script_regex_code_t *regex;
|
|
778 u_char errstr[NGX_MAX_CONF_ERRSTR];
|
50
|
779
|
|
780 value = cf->args->elts;
|
|
781 last = cf->args->nelts - 1;
|
|
782
|
|
783 if (value[1].len < 1 || value[1].data[0] != '(') {
|
|
784 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0,
|
|
785 "invalid condition \"%V\"", &value[1]);
|
|
786 return NGX_CONF_ERROR;
|
|
787 }
|
|
788
|
|
789 if (value[1].len == 1) {
|
|
790 cur = 2;
|
|
791
|
|
792 } else {
|
|
793 cur = 1;
|
|
794 value[1].len--;
|
|
795 value[1].data++;
|
|
796 }
|
|
797
|
|
798 if (value[last].len < 1 || value[last].data[value[last].len - 1] != ')') {
|
|
799 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0,
|
|
800 "invalid condition \"%V\"", &value[last]);
|
|
801 return NGX_CONF_ERROR;
|
|
802 }
|
|
803
|
|
804 if (value[last].len == 1) {
|
|
805 last--;
|
|
806
|
|
807 } else {
|
|
808 value[last].len--;
|
|
809 value[last].data[value[last].len] = '\0';
|
|
810 }
|
|
811
|
|
812 if (value[cur].len > 1 && value[cur].data[0] == '$') {
|
|
813
|
|
814 if (cur != last && cur + 2 != last) {
|
|
815 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0,
|
|
816 "invalid condition \"%V\"", &value[cur]);
|
|
817 return NGX_CONF_ERROR;
|
|
818 }
|
|
819
|
|
820 if (ngx_http_rewrite_variable(cf, lcf, &value[cur])!= NGX_CONF_OK) {
|
|
821 return NGX_CONF_ERROR;
|
|
822 }
|
|
823
|
|
824 if (cur == last) {
|
|
825 return NGX_CONF_OK;
|
|
826 }
|
|
827
|
|
828 cur++;
|
|
829
|
|
830 if ((value[cur].len == 1 && value[cur].data[0] != '~')
|
|
831 || (value[cur].len == 2
|
|
832 && value[cur].data[0] != '~' && value[cur].data[1] != '*'))
|
|
833 {
|
|
834 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0,
|
|
835 "unexpected \"%V\" in condition", &value[cur]);
|
|
836 return NGX_CONF_ERROR;
|
|
837 }
|
|
838
|
58
|
839 regex = ngx_http_script_start_code(cf->pool, &lcf->codes,
|
|
840 sizeof(ngx_http_script_regex_code_t));
|
50
|
841 if (regex == NULL) {
|
|
842 return NGX_CONF_ERROR;
|
|
843 }
|
|
844
|
58
|
845 ngx_memzero(regex, sizeof(ngx_http_script_regex_code_t));
|
|
846
|
50
|
847 err.len = NGX_MAX_CONF_ERRSTR;
|
|
848 err.data = errstr;
|
|
849
|
|
850 regex->regex = ngx_regex_compile(&value[last],
|
|
851 (value[cur].len == 2) ? NGX_REGEX_CASELESS : 0,
|
|
852 cf->pool, &err);
|
|
853
|
|
854 if (regex->regex == NULL) {
|
|
855 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0, "%s", err.data);
|
|
856 return NGX_CONF_ERROR;
|
|
857 }
|
|
858
|
58
|
859 regex->code = ngx_http_script_regex_start_code;
|
|
860 regex->next = sizeof(ngx_http_script_regex_code_t);
|
50
|
861 regex->test = 1;
|
|
862 regex->name = value[last];
|
|
863
|
64
|
864 n = ngx_regex_capture_count(regex->regex);
|
|
865
|
|
866 if (n) {
|
|
867 regex->ncaptures = (n + 1) * 3;
|
|
868
|
|
869 if (lcf->captures < regex->ncaptures) {
|
|
870 lcf->captures = regex->ncaptures;
|
|
871 }
|
|
872 }
|
|
873
|
50
|
874 return NGX_CONF_OK;
|
|
875 }
|
|
876
|
|
877 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0,
|
|
878 "invalid condition \"%V\"", &value[cur]);
|
|
879
|
|
880 return NGX_CONF_ERROR;
|
|
881 }
|
|
882
|
|
883
|
|
884 static char *
|
|
885 ngx_http_rewrite_variable(ngx_conf_t *cf, ngx_http_rewrite_loc_conf_t *lcf,
|
|
886 ngx_str_t *value)
|
|
887 {
|
58
|
888 ngx_int_t index;
|
|
889 ngx_http_script_code_pt *code;
|
|
890 ngx_http_script_var_code_t *var_code;
|
50
|
891
|
|
892 value->len--;
|
|
893 value->data++;
|
|
894
|
|
895 if (value->len == sizeof("invalid_referer") - 1
|
|
896 && ngx_strncmp(value->data, "invalid_referer",
|
|
897 sizeof("invalid_referer") - 1) == 0)
|
|
898 {
|
58
|
899 code = ngx_http_script_start_code(cf->pool, &lcf->codes,
|
|
900 sizeof(ngx_http_script_code_pt));
|
50
|
901 if (code == NULL) {
|
|
902 return NGX_CONF_ERROR;
|
|
903 }
|
|
904
|
|
905 *code = ngx_http_rewrite_invalid_referer_code;
|
|
906
|
|
907 } else {
|
58
|
908 index = ngx_http_get_variable_index(cf, value);
|
50
|
909
|
58
|
910 if (index == NGX_ERROR) {
|
50
|
911 return NGX_CONF_ERROR;
|
|
912 }
|
|
913
|
58
|
914 var_code = ngx_http_script_start_code(cf->pool, &lcf->codes,
|
|
915 sizeof(ngx_http_script_var_code_t));
|
50
|
916 if (var_code == NULL) {
|
|
917 return NGX_CONF_ERROR;
|
|
918 }
|
|
919
|
58
|
920 var_code->code = ngx_http_script_var_code;
|
|
921 var_code->index = index;
|
50
|
922 }
|
|
923
|
|
924 return NGX_CONF_OK;
|
|
925 }
|
|
926
|
|
927
|
|
928 static char *
|
|
929 ngx_http_rewrite_valid_referers(ngx_conf_t *cf, ngx_command_t *cmd, void *conf)
|
|
930 {
|
|
931 ngx_http_rewrite_loc_conf_t *lcf = conf;
|
|
932
|
|
933 ngx_uint_t i, server_names;
|
|
934 ngx_str_t *value;
|
|
935 ngx_http_server_name_t *sn;
|
|
936 ngx_http_core_srv_conf_t *cscf;
|
|
937 ngx_http_rewrite_referer_t *ref;
|
|
938
|
|
939 cscf = ngx_http_conf_get_module_srv_conf(cf, ngx_http_core_module);
|
|
940
|
|
941 if (lcf->referers == NULL) {
|
|
942 lcf->referers = ngx_array_create(cf->pool,
|
|
943 cf->args->nelts + cscf->server_names.nelts,
|
|
944 sizeof(ngx_http_rewrite_referer_t));
|
|
945 if (lcf->referers == NULL) {
|
|
946 return NGX_CONF_ERROR;
|
|
947 }
|
|
948 }
|
|
949
|
|
950 value = cf->args->elts;
|
|
951 server_names = 0;
|
|
952
|
|
953 for (i = 1; i < cf->args->nelts; i++) {
|
|
954 if (value[i].len == 0) {
|
|
955 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0,
|
|
956 "invalid referer \"%V\"", &value[i]);
|
|
957 return NGX_CONF_ERROR;
|
|
958 }
|
|
959
|
|
960 if (ngx_strcmp(value[i].data, "none") == 0) {
|
|
961 lcf->no_referer = 1;
|
|
962 continue;
|
|
963 }
|
|
964
|
54
|
965 if (ngx_strcmp(value[i].data, "blocked") == 0) {
|
|
966 lcf->blocked_referer = 1;
|
|
967 continue;
|
|
968 }
|
|
969
|
50
|
970 if (ngx_strcmp(value[i].data, "server_names") == 0) {
|
|
971 server_names = 1;
|
|
972 continue;
|
|
973 }
|
|
974
|
|
975 ref = ngx_array_push(lcf->referers);
|
|
976 if (ref == NULL) {
|
|
977 return NGX_CONF_ERROR;
|
|
978 }
|
|
979
|
|
980 if (value[i].data[0] != '*') {
|
|
981 ref->name = value[i];
|
|
982 ref->wildcard = 0;
|
|
983 continue;
|
|
984 }
|
|
985
|
|
986 if (value[i].data[1] != '.') {
|
|
987 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0,
|
|
988 "invalid wildcard referer \"%V\"", &value[i]);
|
|
989 return NGX_CONF_ERROR;
|
|
990 }
|
|
991
|
|
992 ref->name.len = value[i].len - 1;
|
|
993 ref->name.data = value[i].data + 1;
|
|
994 ref->wildcard = 1;
|
|
995 }
|
|
996
|
|
997 if (!server_names) {
|
|
998 return NGX_CONF_OK;
|
|
999 }
|
|
1000
|
|
1001 sn = cscf->server_names.elts;
|
|
1002 for (i = 0; i < cscf->server_names.nelts; i++) {
|
|
1003 ref = ngx_array_push(lcf->referers);
|
|
1004 if (ref == NULL) {
|
|
1005 return NGX_CONF_ERROR;
|
|
1006 }
|
|
1007
|
|
1008 ref->name.len = sn[i].name.len + 1;
|
|
1009 ref->name.data = ngx_palloc(cf->pool, ref->name.len);
|
|
1010 if (ref->name.data == NULL) {
|
|
1011 return NGX_CONF_ERROR;
|
|
1012 }
|
|
1013
|
|
1014 ngx_memcpy(ref->name.data, sn[i].name.data, sn[i].name.len);
|
|
1015 ref->name.data[sn[i].name.len] = '/';
|
|
1016 ref->wildcard = sn[i].wildcard;
|
|
1017 }
|
|
1018
|
|
1019 return NGX_CONF_OK;
|
|
1020 }
|
|
1021
|
|
1022
|
|
1023 static char *
|
|
1024 ngx_http_rewrite_set(ngx_conf_t *cf, ngx_command_t *cmd, void *conf)
|
|
1025 {
|
|
1026 ngx_http_rewrite_loc_conf_t *lcf = conf;
|
|
1027
|
64
|
1028 ngx_int_t n, index;
|
|
1029 ngx_str_t *value;
|
|
1030 ngx_http_variable_t *v;
|
|
1031 ngx_http_script_compile_t sc;
|
|
1032 ngx_http_script_var_code_t *var;
|
|
1033 ngx_http_script_value_code_t *val;
|
|
1034 ngx_http_script_complex_value_code_t *complex;
|
50
|
1035
|
|
1036 value = cf->args->elts;
|
|
1037
|
|
1038 if (value[1].data[0] != '$') {
|
|
1039 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0,
|
|
1040 "invalid variable name \"%V\"", &value[1]);
|
|
1041 return NGX_CONF_ERROR;
|
|
1042 }
|
|
1043
|
|
1044 value[1].len--;
|
|
1045 value[1].data++;
|
|
1046
|
58
|
1047 v = ngx_http_add_variable(cf, &value[1], NGX_HTTP_VAR_CHANGABLE);
|
50
|
1048 if (v == NULL) {
|
|
1049 return NGX_CONF_ERROR;
|
|
1050 }
|
|
1051
|
58
|
1052 index = ngx_http_get_variable_index(cf, &value[1]);
|
|
1053 if (index == NGX_ERROR) {
|
|
1054 return NGX_CONF_ERROR;
|
|
1055 }
|
50
|
1056
|
104
|
1057 if (v->handler == NULL) {
|
|
1058 v->handler = ngx_http_rewrite_var;
|
|
1059 v->data = index;
|
|
1060 }
|
58
|
1061
|
64
|
1062 n = ngx_http_script_variables_count(&value[2]);
|
|
1063
|
|
1064 if (n == 0) {
|
|
1065 val = ngx_http_script_start_code(cf->pool, &lcf->codes,
|
|
1066 sizeof(ngx_http_script_value_code_t));
|
|
1067 if (val == NULL) {
|
|
1068 return NGX_CONF_ERROR;
|
|
1069 }
|
50
|
1070
|
64
|
1071 n = ngx_atoi(value[2].data, value[2].len);
|
|
1072
|
|
1073 if (n == NGX_ERROR) {
|
|
1074 n = 0;
|
|
1075 }
|
|
1076
|
|
1077 val->code = ngx_http_script_value_code;
|
|
1078 val->value = (uintptr_t) n;
|
|
1079 val->text_len = (uintptr_t) value[2].len;
|
|
1080 val->text_data = (uintptr_t) value[2].data;
|
50
|
1081
|
64
|
1082 } else {
|
|
1083 complex = ngx_http_script_start_code(cf->pool, &lcf->codes,
|
|
1084 sizeof(ngx_http_script_complex_value_code_t));
|
|
1085 if (complex == NULL) {
|
|
1086 return NGX_CONF_ERROR;
|
|
1087 }
|
|
1088
|
|
1089 complex->code = ngx_http_script_complex_value_code;
|
|
1090 complex->lengths = NULL;
|
|
1091
|
|
1092 ngx_memzero(&sc, sizeof(ngx_http_script_compile_t));
|
50
|
1093
|
64
|
1094 sc.cf = cf;
|
|
1095 sc.source = &value[2];
|
|
1096 sc.lengths = &complex->lengths;
|
|
1097 sc.values = &lcf->codes;
|
|
1098 sc.variables = n;
|
|
1099 sc.complete_lengths = 1;
|
|
1100
|
|
1101 if (ngx_http_script_compile(&sc) != NGX_OK) {
|
|
1102 return NGX_CONF_ERROR;
|
|
1103 }
|
|
1104 }
|
50
|
1105
|
58
|
1106 var = ngx_http_script_start_code(cf->pool, &lcf->codes,
|
|
1107 sizeof(ngx_http_script_var_code_t));
|
50
|
1108 if (var == NULL) {
|
|
1109 return NGX_CONF_ERROR;
|
|
1110 }
|
|
1111
|
58
|
1112 var->code = ngx_http_script_set_var_code;
|
|
1113 var->index = (uintptr_t) index;
|
50
|
1114
|
|
1115 return NGX_CONF_OK;
|
|
1116 }
|