os/doc
3
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

When www/en/cgi/sendpr-code.cgi creates a submission code to validate

Browse source 
that the submitter is not a script, the code only gets removed if the
user continues through www/en/cgi/dosendpr.cgi.
This script can be run periodically from cron to ensure that the DBM
doesn't grow without bound.

PR:		www/60375
Submitted by:	Eric Anderson <anderson@centtech.com>
This commit is contained in:
Ceri Davies 2004-01-07 23:25:45 +00:00
parent a67d458b27
commit 055aa3398c
Notes: svn2git 2020-12-08 03:00:23 +00:00 
svn path=/www/; revision=19526
1 changed files with 49 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

49
tools/clean-sendpr-dbm.pl Executable file
View file

@ -0,0 +1,49 @@
#!/usr/bin/perl -T
#
# $FreeBSD$
# Copyright (c) 2003 Eric Anderson
#
# When www/en/cgi/sendpr-code.cgi creates a submission code to validate
# that the submitter is not a script, the code only gets removed if the
# user continues through www/en/cgi/dosendpr.cgi.
# This script can be run periodically from cron to ensure that the DBM
# doesn't grow without bound.
use DB_File;
use Fcntl qw(:DEFAULT :flock);
use strict;
$ENV{"PATH"} = "/bin:/usr/bin";
$ENV{"TMPDIR"} = "/tmp";
my ($fd, $db_obj, %db_hash, $currenttime, $randomcode, $expiretime, $dbpath);
############################################
$dbpath = "/tmp/sendpr-code.db";
$expiretime = 2700; # seconds until code expires
############################################
$currenttime = time();
# DB stuff here
$db_obj = tie(%db_hash, 'DB_File', $dbpath, O_CREAT|O_RDWR, 0644)
or die "dbcreate $dbpath $!";
$fd = $db_obj->fd;
open(DB_FH, "+<&=$fd") or die "fdopen $!";
unless (flock (DB_FH, LOCK_EX | LOCK_NB)) {
unless (flock (DB_FH, LOCK_EX)) { die "flock: $!" }
}
foreach $randomcode (keys %db_hash) {
if ( ($currenttime - $expiretime) <= $db_hash{$randomcode}) {
delete $db_hash{"$randomcode"};
}
}
$db_obj->sync(); # to flush
flock(DB_FH, LOCK_UN);
undef $db_obj;
untie %db_hash or warn "untie: $!";