Fehlerhafte darstellung

#!/usr/bin/perl


#
#        +-----------------------------------------------------------------------------+
#        | Endian Firewall                                                             |
#        +-----------------------------------------------------------------------------+
#        | Copyright (c) 2005-2006 Endian                                              |
#        |         Endian GmbH/Srl                                                     |
#        |         Bergweg 41 Via Monte                                                |
#        |         39057 Eppan/Appiano                                                 |
#        |         ITALIEN/ITALIA                                                      |
#        |         info@endian.it                                                      |
#        |                                                                             |
#        | This program is free software; you can redistribute it and/or               |
#        | modify it under the terms of the GNU General Public License                 |
#        | as published by the Free Software Foundation; either version 2              |
#        | of the License, or (at your option) any later version.                      |
#        |                                                                             |
#        | This program is distributed in the hope that it will be useful,             |
#        | but WITHOUT ANY WARRANTY; without even the implied warranty of              |
#        | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               |
#        | GNU General Public License for more details.                                |
#        |                                                                             |
#        | You should have received a copy of the GNU General Public License           |
#        | along with this program; if not, write to the Free Software                 |
#        | Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA. |
#        | http://www.fsf.org/                                                         |
#        +-----------------------------------------------------------------------------+
#
#
# Dansguardian CGI for Endian Firewall
#




# -------------------------------------------------------------
# some definitions
# -------------------------------------------------------------


require '/var/efw/header.pl';
my $conffile    = "${swroot}/dansguardian/settings";
my $conffile_default    = "${swroot}/dansguardian/default/settings";
my $blackdir    = "/etc/dansguardian/blacklists";
my $phrasedir   = "/etc/dansguardian/phraselists";


my $enabledfile = "/var/efw/dansguardian/enable_local";
my $havpfile = "/var/efw/dansguardian/enable_havp";
my $startingfile = "/var/efw/dansguardian/STARTING";


my $exceptionsitelist_file = "${swroot}/dansguardian/exceptionsitelist";
my $exceptioniplist_file = "${swroot}/dansguardian/exceptioniplist";
my $bannedsitelist_file = "${swroot}/dansguardian/bannedsitelist";
my $bannediplist_file = "${swroot}/dansguardian/bannediplist";


my $name        = _('Content filter');
my %checked     = ( 0 => '', 1 => 'checked', 'on' => 'checked');


my %confhash = ();
my $conf = \%confhash;


my %par;


my %conf_blacklist;
my %conf_phraselist;


my $exceptionsitelist = '';
my $exceptioniplist = '';
my $bannedsitelist = '';
my $bannediplist = '';


my @blacklist;
my @phraselist;


my $expand_png = "/images/expand.gif";
my $collapse_png = "/images/collapse.gif";


my $allow_png = "/images/accept.png";
my $deny_png = "/images/deny.png";
my $partial_png = "/images/partial.png";


sub save_conf() {
    open (OUT, ">$conffile");
    print OUT "ENABLE_DANSGUARDIAN=$conf->{'ENABLE_DANSGUARDIAN'}\n";
    print OUT "HAVP=$conf->{HAVP}\n";
    print OUT "PICS_ENABLE=$conf->{PICS_ENABLE}\n";
    print OUT "PORT=$conf->{PORT}\n";
    print OUT "DANSGUARDIAN_LOGGING=$conf->{DANSGUARDIAN_LOGGING}\n";
    print OUT "NAUGHTYNESSLIMIT=$conf->{NAUGHTYNESSLIMIT}\n";
    print OUT "BLACKLIST=$conf->{BLACKLIST}\n";
    print OUT "PHRASELIST=$conf->{PHRASELIST}\n";
    close OUT;
}


sub load_conf() {
    if (-e $conffile_default) {
        readhash($conffile_default, $conf);
    }
    if (-e $conffile) {
        readhash($conffile, $conf);
    }
    if ( -e $exceptionsitelist_file) {
        $exceptionsitelist = `cat $exceptionsitelist_file 2>/dev/null`;
    }
    if (-e $bannedsitelist_file) {
        $bannedsitelist = `cat $bannedsitelist_file 2>/dev/null`;
    }
    if (-e $havpefile) {
        $conf{'havp'} = "on";
        `rm $havpfile`
    }

    if (-e "$blackdir/categories") {
        readhash("$blackdir/categories", \%blackcategories);
    }
    else {
        %blackcategories = ();
    }

    if (-e "$phrasedir/categories") {
        readhash("$phrasedir/categories", \%phrasecategories);
    }
    else {
        %phrasecategories = ();
    }

    @blacklist  = split(/\n/, `ls $blackdir | grep -v CATEGORIES | grep -v blacklists.info `);
    @phraselist = split(/\n/, `ls $phrasedir`);


    %conf_blacklist = ();
    foreach my $item (split(/;/, $conf->{BLACKLIST})) {
        $conf_blacklist{"BL_$item"} = 'on';
    }

    %conf_phraselist = ();
    foreach my $item (split(/;/, $conf->{PHRASELIST})) {
        $conf_phraselist{"PH_$item"} = 'on';
    }


    &getcgihash(\%par);
}


sub toggle_file($$) {
    my $file = shift;
    my $set = shift;


    if ($set) {
        `touch $file`;
        return 1;
    }
    if (-e $file) {
        unlink($file);
    }
    return 0;
}


showhttpheaders();
load_conf();


# -------------------------------------------------------------
# action to do?
# -------------------------------------------------------------


my $needrestart = 0;


if ($par{ACTION} eq 'save') {


    # TODO: check error return code from restartscripts
    # TODO: check the log to see if this does not take too long!
    #


    my $logid = "$0 [" . scalar(localtime) . "]";

    my $havp = 'off';
    if ($par{'HAVP'} eq 'on') {
        $havp = 'on';
    }

    my $pics_enable = 'off'; 
    if ($par{PICS_ENABLE} eq 'on') {
        $pics_enable = 'on';
    }
    my $logging = 'off'; 
    if ($par{'DANSGUARDIAN_LOGGING'} eq 'on') {
        $logging = 'on';
    }

    if ($par{NAUGHTYNESSLIMIT} < 0) {   
        $par{NAUGHTYNESSLIMIT} = 0;
    }
    elsif ($par{NAUGHTYNESSLIMIT} > 300) {
        $par{NAUGHTYNESSLIMIT} = 300;
    }

    my $save_phraselist="";
    foreach my $item (@phraselist) {
        chomp;
        if ($par{'PH_'.$item} eq "deny") {
            $save_phraselist .= "$item;"; 
        }
    }

    my $save_blacklist="";
    foreach my $item (@blacklist) {
        chomp;
        if ($par{'BL_'.$item} eq "deny") {
            $save_blacklist .= "$item;"; 
        }
    }

    if ( ($conf->{HAVP} ne $havp) ||
         ($conf->{PICS_ENABLE} ne $pics_enable) ||
         ($conf->{PORT} != $par{PORT}) ||
         ($conf->{DANSGUARDIAN_LOGGING} ne $logging) ||
         ($conf->{NAUGHTYNESSLIMIT} != $par{NAUGHTYNESSLIMIT}) ||
         ($conf->{PHRASELIST} ne $save_phraselist) ||
         ($conf->{BLACKLIST} ne $save_blacklist) ||
         ($exceptionsitelist ne $par{EXCEPTIONSITELIST}) ||
         ($bannedsitelist ne $par{BANNEDSITELIST})
     ) {
        print STDERR "$logid: writing new configuration file\n";
        $needrestart = 1;


        $conf->{HAVP} = $havp;
        $conf->{PICS_ENABLE} = $pics_enable;
        $conf->{DANSGUARDIAN_LOGGING} = $logging;
        $conf->{PORT} = $par{PORT};
        $conf->{NAUGHTYNESSLIMIT} = $par{NAUGHTYNESSLIMIT};
        $conf->{PHRASELIST} = $save_phraselist;
        $conf->{BLACKLIST} = $save_blacklist;

        $exceptionsitelist = $par{EXCEPTIONSITELIST};
        $bannedsitelist = $par{BANNEDSITELIST};

        open (OUT, ">$exceptionsitelist_file");
        print OUT $exceptionsitelist;
        close OUT;
        open (OUT, ">$bannedsitelist_file");
        print OUT $bannedsitelist;
        close OUT;

        save_conf();
        load_conf();
    }
}


if ($needrestart eq 1) {
    system("/usr/local/bin/restartsquid --reload");
    print STDERR "$logid: restarting done\n";
}


# -------------------------------------------------------------
# ouput page
# -------------------------------------------------------------


my $phraselist_count = $#phraselist+1;
my $blacklist_count = $#blacklist+1;




&openpage($name, 1, '');
&openbigbox($errormessage, $warnmessage, $notemessage);


if ( -e $startingfile) {
    use POSIX;
    my ($dev,$ino,$mode,$nlink,$uid,$gid,$rdev,$size,$atime,$mtime,$ctime,$blksize,$blocks) = stat($startingfile);
    my $now = time();
    my $minutes = ceil(($now-$ctime)/60);


    openbox('100%', 'left', _('Notice'));
    printf <<END
<div align="center" class="notice">%s</div>
END
,
_('The content filter is currently starting. For the first time this will take up to 4 minutes!'),
;
    closebox();
}


printf <<EOF
<form enctype='multipart/form-data' method='post' action='$ENV{SCRIPT_NAME}'>
<input type='hidden' name='ACTION' value='save' />
EOF
;


openbox('100%', 'left', "$name (Dansguardian)");


if ($conf->{'ENABLE_DANSGUARDIAN'} ne "on") {
    printf <<EOF
    <table width="100%">
        <tr>
            <td colspan="8"><font color="red">%s</font></td>
        </tr>
    </table>
    <hr size="1" color="#cccccc">


EOF
,_("<b>WARNING:</b> The content filter is disabled. Use 'Content filter' as filter type in a rule in order to enable it.")
;
}
printf <<EOF
<!-- NAUGHTYNESSLIMIT, PICS, SAVE  -->
<table width="100%">
    <tr>
        <td width="5%">
            <input type='checkbox' name='HAVP' $checked{$conf->{HAVP}} />
        </td>
        <td width="25%">%s</td>
        <td width="5%">&nbsp;</td>
        <td width="5%">
            <input type='checkbox' name='DANSGUARDIAN_LOGGING' $checked{$conf->{DANSGUARDIAN_LOGGING}} />
        </td>
        <td width="25%">%s</td>
        <td width="5%">
            <input type='checkbox' name='PICS_ENABLE' $checked{$conf->{PICS_ENABLE}} />
        </td>
        <td width="30%">%s</td>
    </tr>
</table>
<hr size="1" color="#cccccc">
<table width="100%">
    <tr>
        <td width="25%">%s</td>
        <td width="5%">
            <input type='text' name='NAUGHTYNESSLIMIT' value='$conf->{NAUGHTYNESSLIMIT}' size='3'/>
        </td>
        <td width="5%">&nbsp;</td>
        <td width="75%" ><font color="#666666">%s</font></td>
    </tr>
</table>
EOF
,
_('Activate antivirus scan'),
_('Enable logging'),
_('<b>P</b>latform for <b>I</b>nternet <b>C</b>ontent <b>S</b>election'),
_('Max. score for phrases (50-300)'),
_('50 for young children, 100 for old children, 160 for young adults'),
;
printf <<EOF
<div class="boxsubmit">
    <input class='submitbutton' type='submit' name='submit' value='%s' />
</div>
EOF
,
_('Save')
;
closebox();


openbox('100%', 'left', _('Content Filter: Filters pages containing phrases of the following categories.'), "phraselist");


printf <<EOF


<div class="boxvalue">
EOF
;


my $uncategorized = "";
foreach my $b (@phraselist) {
    my $found = 0;
    foreach my $c (keys %phrasecategories) {
        foreach my $cb (split(/\|/, $phrasecategories{$c})) {
            if ($b eq $cb) {
                $found = 1;
                last;
            }
        }
        if ($found eq 1) {
            last;
        }
    }
    if ($found eq 0) {
        $uncategorized .= "$b|";
    }
}


$phrasecategories{'uncategorized'} = $uncategorized;


my $catcount = scalar(keys %phrasecategories);
my $count = 0;


for my $item (@phraselist) {
    my $value = "";
    if ($conf_phraselist{"PH_" . $item}) {
        $value = "deny";
    }
    printf <<EOF
    <input type="hidden" name="PH_$item" value="$value" />
EOF
    ;
}


foreach my $cat (sort(keys %phrasecategories)) {
    if ($cat eq "categories" || $phrasecategories{$cat} eq "") {
        next;
    }
    undef %is_in_cat;
    my $countchecked = 0;
    my $countnotchecked = 0;
    for (split(/\|/, $phrasecategories{$cat})) {
        if ($_ eq "categories") {
            next;
        }
        $is_in_cat{$_} = 1;
        if ($conf_phraselist{"PH_" . $_} ne "on") {
            $countnotchecked++;
        }
        else {
            $countchecked++;
        }
    }

    my $allchecked = "none";

    if ($countnotchecked eq 0) {
        $allchecked = "all";
    }
    elsif ($countchecked ne 0) {
        $allchecked = "some";
    }

    my $catname = $cat;
    $catname =~ s/_/ /g;


    if ($count eq 0) {
        print "<table class=\"categorytable\" cellspacing=\"0\" cellpadding=\"0\" width=\"100%\"><tr><td width=\"50%\">";
    }
    if ($catcount % 2 eq 0) {
        if ($count eq (int($catcount / 2) - 1)) {
            print "</table></td><td width=\"50%\">";
        }
        if (($count eq 0) || ($count eq (int($catcount / 2) - 1))) {
            print "<table class=\"categorytable\" cellspacing=\"0\" cellpadding=\"0\" width=\"100%\">";
        }
    }
    else {
        if ($count - 1 eq (int($catcount / 2))) {
            print "</table></td><td width=\"50%\">";
        }
        if (($count eq 0) || ($count - 1 eq (int($catcount / 2)))) {
            print "<table class=\"categorytable\" cellspacing=\"0\" cellpadding=\"0\" width=\"100%\">";
        }
    }
    print "<tr style=\"padding: 0px; margin: 0px;\"><td>";

    my %subcategories = ();

    for my $item (@phraselist) {
        if ($item eq "categories") {
            next;
        }
        if ($is_in_cat{$item} eq 1) {
            $subcategories{"PH_$item"} = _(ucfirst($item));
        }
    }
    get_category("phrase_$cat", _(ucfirst($catname)), $allchecked, \%subcategories, \%conf_phraselist);
    $count++;
}
printf <<END
    </tr></table></td></tr></table>
</div>
<div class="submit">
    <input class='submitbutton' type='submit' name='submit' value='%s' />
</div>
END
,_('Save')
;
closebox();


openbox('100%', 'left', _('URL Blacklist: Filter pages known to have content of the following categories.'), "blacklist");


printf <<EOF


<div class="boxvalue">
EOF
;


my $uncategorized = "";
foreach my $b (@blacklist) {
    my $found = 0;
    foreach my $c (keys %blackcategories) {
        foreach my $cb (split(/\|/, $blackcategories{$c})) {
            if ($b eq $cb) {
                $found = 1;
                last;
            }
        }
        if ($found eq 1) {
            last;
        }
    }
    if ($found eq 0) {
        $uncategorized .= "$b|";
    }
}


$blackcategories{'uncategorized'} = $uncategorized;


my $catcount = scalar(keys %blackcategories);
my $count = 0;


for my $item (@blacklist) {
    my $value = "";
    if ($conf_blacklist{"BL_" . $item}) {
        $value = "deny";
    }
    printf <<EOF
    <input type="hidden" name="BL_$item" value="$value" />
EOF
    ;
}


foreach my $cat (sort(keys %blackcategories)) {
    if ($cat eq "categories" || $blackcategories{$cat} eq "") {
        next;
    }
    undef %is_in_cat;
    my $countchecked = 0;
    my $countnotchecked = 0;
    for (split(/\|/, $blackcategories{$cat})) {
        if ($_ eq "categories") {
            next;
        }
        $is_in_cat{$_} = 1;
        if ($conf_blacklist{"BL_" . $_} ne "on") {
            $countnotchecked++;
        }
        else {
            $countchecked++;
        }
    }

    my $allchecked = "none";

    if ($countnotchecked eq 0) {
        $allchecked = "all";
    }
    elsif ($countchecked ne 0) {
        $allchecked = "some";
    }

    my $catname = $cat;
    $catname =~ s/_/ /g;


    if ($count eq 0) {
        print "<table class=\"categorytable\" cellspacing=\"0\" cellpadding=\"0\" width=\"100%\"><tr><td width=\"50%\">";
    }
    if ($catcount % 2 eq 0) {
        if ($count eq (int($catcount / 2) - 1)) {
            print "</table></td><td width=\"50%\">";
        }
        if (($count eq 0) || ($count eq (int($catcount / 2) - 1))) {
            print "<table class=\"categorytable\" cellspacing=\"0\" cellpadding=\"0\" width=\"100%\">";
        }
    }
    else {
        if ($count - 1 eq (int($catcount / 2))) {
            print "</table></td><td width=\"50%\">";
        }
        if (($count eq 0) || ($count - 1 eq (int($catcount / 2)))) {
            print "<table class=\"categorytable\" cellspacing=\"0\" cellpadding=\"0\" width=\"100%\">";
        }
    }
    print "<tr style=\"padding: 0px; margin: 0px;\"><td>";

    my %subcategories = ();

    for my $item (@blacklist) {
        if ($item eq "categories") {
            next;
        }
        if ($is_in_cat{$item} eq 1) {
            $subcategories{"BL_$item"} = _(ucfirst($item));
        }
    }
    get_category("black_$cat", _(ucfirst($catname)), $allchecked, \%subcategories, \%conf_blacklist);
    $count++;
}
printf <<END
    </tr></table></td></tr></table>
</div>
<div class="submit">
    <input class='submitbutton' type='submit' name='submit' value='%s' />
</div>
END
,_('Save')
;
closebox();


openbox('100%', 'left', _('Custom black- and whitelists'), "customlist");
printf <<EOF


<table width="100%">
    <tr>
        <td width="47.5%">%s</td>
        <td width="5%"></td>
        <td width="47.5%">%s</td>
    </tr>
    <tr>
        <td>
            <textarea cols="37" rows="20" name="EXCEPTIONSITELIST">$exceptionsitelist</textarea>
        </td>
        <td></td>
        <td>
            <textarea cols="37" rows="20" name="BANNEDSITELIST">$bannedsitelist</textarea>
        </td>
    </tr>
</table>
<hr size="1" color="#cccccc">
<!-- ACTION -->
<div class="submit">
    <input class='submitbutton' type='submit' name='submit' value='%s' />
</div>
EOF
,
_('Allow the following sites'),
_('Block the following sites'),
_('Save')
;


closebox();


printf <<EOF
</form>
EOF
;


closebigbox();
closepage();