Check-in by ben on 2025-08-01 07:00:15

Wait to block clients until CGI input has been parsed.

 INSERTED    DELETED
       21         20 src/cgi.awk
       21         20 TOTAL over 1 changed file

Index: src/cgi.awk
==================================================================
--- src/cgi.awk
+++ src/cgi.awk
@@ -16,30 +16,10 @@
    return
}

function cgi_init(    ip) {
    ip = ENVIRON["REMOTE_ADDR"]
-    if (pass_enabled) {
-        # default deny access except client IP addresses in pass list
-        blocked = 1
-        FS = "\t"
-        while ((getline < pass_list) > 0) {
-            if (match(/^#/, $0)) {
-                # ignore comments
-                continue
-            }
-            if (ip == $1) {
-                blocked = 0
-                break
-            }
-        }
-        close(pass_list)
-        if (blocked) {
-            block_msg(ip)
-            exit(0)
-        }
-    }

    search = ARGV[1]
    arguments = ARGV[2]
    traversal = ARGV[5]
    selector = ARGV[6]
@@ -87,10 +67,31 @@
        path = substr(path, 1, RSTART - 1)
    }

    split(path, parts, "/")
    topdir = parts[2]
+
+    if (pass_enabled) {
+        # default deny access except client IP addresses in pass list
+        blocked = 1
+        FS = "\t"
+        while ((getline < pass_list) > 0) {
+            if (match(/^#/, $0)) {
+                # ignore comments
+                continue
+            }
+            if (ip == $1) {
+                blocked = 0
+                break
+            }
+        }
+        close(pass_list)
+        if (blocked) {
+            block_msg(ip)
+            exit(0)
+        }
+    }

    return
}

function gph_encode(str,     retval) {

You are viewing proxied material from tilde.pink. The copyright of proxied material belongs to its original authors. Any comments or complaints in relation to proxied material should be directed to the original authors of the content concerned. Please see the disclaimer for more details.