modules/gitolite/include/git.php (64db67e) - webinterface.git

git.php

<?php

/*
This file belongs to the Webinterface of schokokeks.org Hosting

Written by schokokeks.org Hosting, namely
  Bernd Wurst <bernd@schokokeks.org>
  Hanno Böck <hanno@schokokeks.org>

This code is published under a 0BSD license.

Nevertheless, in case you use a significant part of this code, we ask (but not require, see the license) that you keep the authors' names in place and return your changes to the public. We would be especially happy if you tell us what you're going to do with this code.
*/

require_role(ROLE_SYSTEMUSER);

require_once("inc/security.php");

$data_dir = realpath(dirname(__FILE__) . '/../../../../gitolite-data/');
$config_file = $data_dir . '/gitolite-admin/conf/webinterface.conf';
$config_dir = $data_dir . '/gitolite-admin/conf/webinterface';
$key_dir = $data_dir . '/gitolite-admin/keydir';
DEBUG("gitolite-data_dir: " . $data_dir);
$git_wrapper = realpath(dirname(__FILE__) . '/../scripts/git-wrapper.sh');

function validate_name($name)
{
    return (preg_match('/^[[:alnum:]][[:alnum:]._-]*$/', $name));
}

function get_git_url($repo)
{
    $remote = git_wrapper('remote --verbose');
    DEBUG('gitolite-admin repo: ' . $remote[0]);
    $url = preg_replace('#^.*\s+(\S+):gitolite-admin.*#', '$1', $remote[0]);
    DEBUG('URL: ' . $url);
    return $url . ':' . $repo;
}

function git_wrapper($commandline)
{
    global $git_wrapper, $data_dir;

$command = $git_wrapper . ' ' . $commandline;
    $output = [];
    $retval = 0;
    DEBUG($command);
    exec($command, $output, $retval);
    DEBUG($output);
    DEBUG($retval);
    if ($retval > 0) {
        system_failure('Interner Fehler!');
        // FIXME: Hier sollte auf jeden Fall ein Logging angeworfen werden!
    }
    return $output;
}

function refresh_gitolite()
{
    check_env();
    git_wrapper('pull');
}

function list_repos()
{
    global $config_file, $config_dir;
    $username = $_SESSION['userinfo']['username'];
    $userconfig = $config_dir . '/' . $username . '.conf';
    DEBUG("using config file " . $userconfig);
    if (!is_file($userconfig)) {
        DEBUG("user-config does not exist");
        return [];
    }

$repos = [];
    $lines = file($userconfig);
    $current_repo = null;
    $current_repo_users = [];
    foreach ($lines as $line) {
        DEBUG("LINE: " . $line);
        $m = [];
        if (preg_match('/^(\S+) "[^"]+" = "([^"]+)"$/', $line, $m) != 0) {
            if (!array_key_exists($m[1], $repos)) {
                $repos[$m[1]] = ['users' => null, 'description' => ''];
            }
            DEBUG("found description: {$m[1]} = \"{$m[2]}\"");
            $repos[$m[1]]['description'] = $m[2];
        } elseif (preg_match('_^\s*repo (\S+)\s*$_', $line, $m) != 0) {
            if (!array_key_exists($m[1], $repos)) {
                $repos[$m[1]] = ['users' => null, 'description' => ''];
            }
            if ($current_repo) {
                $repos[$current_repo]['users'] = $current_repo_users;
            }
            DEBUG("found repo " . $m[1]);
            $current_repo = chop($m[1]);
            verify_input_identifier($current_repo);
            $current_repo_users = [];
        } elseif (preg_match('/^\s*(R|RW|RW\+)\s*=\s*([[:alnum:]][[:alnum:]._-]*)\s*$/', $line, $m) != 0) {
            DEBUG("found access rule: " . $m[1] . " for " . $m[2]);
            $current_repo_users[chop($m[2])] = chop($m[1]);
        }
    }
    if ($current_repo) {
        $repos[$current_repo]['users'] = $current_repo_users;
    }
    ksort($repos);
    DEBUG($repos);
    return $repos;
}

function list_users()
{
    global $config_file, $config_dir;
    $username = $_SESSION['userinfo']['username'];
    $userconfig = $config_dir . '/' . $username . '.conf';
    DEBUG("using config file " . $userconfig);
    if (!is_file($userconfig)) {
        DEBUG("user-config does not exist");
        return [];
    }

$lines = file($userconfig);
    $users = [];
    foreach ($lines as $line) {
        $m = [];
        if (preg_match('_# user ([^]]+)_', $line, $m) != 0) {
            $currentuser = trim($m[1]);
            verify_input_identifier($currentuser);
            $users[] = $currentuser;
        }
        if (preg_match('_^\s*repo .*_', $line) != 0) {
            break;
        }
    }
    sort($users);
    DEBUG($users);
    return $users;
}

function list_foreign_users()
{
    global $config_file, $config_dir;
    $username = $_SESSION['userinfo']['username'];
    $userconfig = $config_dir . '/' . $username . '.conf';
    DEBUG("using config file " . $userconfig);
    if (!is_file($userconfig)) {
        DEBUG("user-config does not exist");
        return [];
    }

$lines = file($userconfig);
    $users = [];
    foreach ($lines as $line) {
        $m = [];
        if (preg_match('_# foreign user ([^]]+)_', $line, $m) != 0) {
            $users[] = chop($m[1]);
        }
        if (preg_match('_^\s*repo .*_', $line) != 0) {
            break;
        }
    }
    sort($users);
    DEBUG($users);
    return $users;
}

function new_foreign_user($handle)
{
    global $key_dir, $config_dir;
    $username = $_SESSION['userinfo']['username'];

if (!validate_name($handle)) {
        system_failure("Der eingegebene Name enthält ungültige Zeichen. Bitte nur Buchstaben, Zahlen, Unterstrich, Binderstrich und Punkt benutzen.");
    }

if (in_array($handle, list_users())) {
        system_failure('Dieser GIT-Benutzer gehört zu diesem Kundenaccount.');
    }

$keyfile = $key_dir . '/' . $handle . '.pub';
    if (!file_exists($keyfile)) {
        system_failure('Diesen GIT-Benutzer gibt es nicht');
    }

$userconfig = $config_dir . '/' . $username . '.conf';
    DEBUG("using config file " . $userconfig);
    if (!is_file($userconfig)) {
        DEBUG("user-config does not exist, creating new one");
        file_put_contents($userconfig, '# foreign user ' . $handle . "\n");
        set_user_include();
    } elseif (in_array($handle, list_foreign_users())) {
        # user ist schon eingetragen
    } else {
        $content = file_get_contents($userconfig);
        file_put_contents($userconfig, "# foreign user {$handle}\n" . $content);
    }
    git_wrapper('add ' . $userconfig);

git_wrapper('commit --allow-empty -m "added new foreign user for ' . $handle . '"');
    git_wrapper('push');
}

function delete_foreign_user($handle)
{
    global $config_dir;
    $username = $_SESSION['userinfo']['username'];

$userconfig = $config_dir . '/' . $username . '.conf';
    DEBUG("using config file " . $userconfig);
    if (!is_file($userconfig)) {
        DEBUG("user-config does not exist, wtf?");
        system_failure("Es gibt für diesen Benutzer noch keine Konfiguration. Das sollte nicht sein!");
    } else {
        $content = file($userconfig);
        DEBUG("Old file:");
        DEBUG($content);
        $newcontent = [];
        foreach ($content as $line) {
            if (preg_match('/^# foreign user ' . $handle . '$/', $line)) {
                DEBUG("delete1: " . $line);
                continue;
            }
            if (preg_match('/^\s*(R|RW|RW+)\s*=\s*' . $handle . '\s*$/', $line)) {
                DEBUG("delete2: " . $line);
                continue;
            }
            $newcontent[] = $line;
        }
        DEBUG("Modified file:");
        DEBUG($newcontent);
        file_put_contents($userconfig, implode('', $newcontent));
    }
    git_wrapper('add ' . $userconfig);

git_wrapper('commit -m "deleted foreign user ' . $handle . ' for ' . $username . '"');
    git_wrapper('push');
}

function newkey($pubkey, $handle)
{
    global $key_dir, $config_dir;
    $username = $_SESSION['userinfo']['username'];

$handle = $username . '-' . $handle;
    if (!validate_name($handle) || (str_replace(".", "x", $handle) != $handle)) {
        system_failure("Der eingegebene Name enthält ungültige Zeichen. Bitte nur Buchstaben, Zahlen, Unterstrich und Bindestrich benutzen.");
    }

DEBUG("checking public key $keyfile");
    $pubkey = filter_ssh_key($pubkey);

$keyfile = $key_dir . '/' . $handle . '.pub';
    file_put_contents($keyfile, $pubkey);

git_wrapper('add ' . $keyfile);

$userconfig = $config_dir . '/' . $username . '.conf';
    DEBUG("using config file " . $userconfig);
    if (!is_file($userconfig)) {
        DEBUG("user-config does not exist, creating new one");
        file_put_contents($userconfig, '# user ' . $handle . "\n");
        set_user_include();
    } elseif (in_array($handle, list_users())) {
        # user ist schon eingetragen, nur neuer Key
    } else {
        $content = file_get_contents($userconfig);
        file_put_contents($userconfig, "# user {$handle}\n" . $content);
    }
    git_wrapper('add ' . $userconfig);

git_wrapper('commit --allow-empty -m "added new key for ' . $handle . '"');
    git_wrapper('push');
}

function delete_key($handle)
{
    global $key_dir, $config_dir;
    $username = $_SESSION['userinfo']['username'];

if (!validate_name($handle)) {
        system_failure("Der eingegebene Name enthält ungültige Zeichen. Bitte nur Buchstaben, Zahlen, Unterstrich, Binderstrich und Punkt benutzen.");
    }
    if (!in_array($handle, list_users())) {
        DEBUG("key {$handle} not in");
        DEBUG(list_users());
        system_failure("Den angegebenen Key scheint es nicht zu geben");
    }

$keyfile = $key_dir . '/' . $handle . '.pub';
    if (!file_exists($keyfile)) {
        system_failure("Der angegebene Schlüssel scheint nicht mehr vorhanden zu sein. Bitte manuelle Korrektur anfordern!");
    }
    git_wrapper('rm ' . $keyfile);

$userconfig = $config_dir . '/' . $username . '.conf';
    DEBUG("using config file " . $userconfig);
    if (!is_file($userconfig)) {
        DEBUG("user-config does not exist, wtf?");
        system_failure("Es gibt für diesen Benutzer noch keine Konfiguration. Das sollte nicht sein!");
    } else {
        $content = file($userconfig);
        DEBUG("Old file:");
        DEBUG($content);
        $newcontent = [];
        foreach ($content as $line) {
            if (preg_match('/^# user ' . $handle . '$/', $line)) {
                DEBUG("delete1: " . $line);
                continue;
            }
            if (preg_match('/^\s*(R|RW|RW+)\s*=\s*' . $handle . '\s*$/', $line)) {
                DEBUG("delete2: " . $line);
                continue;
            }
            $newcontent[] = $line;
        }
        DEBUG("Modified file:");
        DEBUG($newcontent);
        file_put_contents($userconfig, implode('', $newcontent));
    }
    git_wrapper('add ' . $userconfig);

git_wrapper('commit -m "deleted key for ' . $handle . '"');
    git_wrapper('push');
}

function delete_repo($repo)
{
    $repos = list_repos();
    if (!array_key_exists($repo, $repos)) {
        system_failure("Ein solches Repository existiert nicht!");
    }

global $config_dir;
    $username = $_SESSION['userinfo']['username'];
    $userconfig = $config_dir . '/' . $username . '.conf';
    DEBUG("using config file " . $userconfig);
    $data = file($userconfig);
    $data = remove_repo_from_array($data, $repo);
    file_put_contents($userconfig, implode('', $data));
    git_wrapper('add ' . $userconfig);

git_wrapper('commit --allow-empty -m "deleted repo ' . $repo . '"');
    git_wrapper('push');
}

$repos = list_repos();
    if (array_key_exists($repo, $repos)) {
        $data = remove_repo_from_array($data, $repo);
    }

$data[] = "\n";
    if ($description) {
        $description = preg_replace('/\[\'"\r\n/', '', $description);
        $realname = $_SESSION['userinfo']['name'];
        $data[] = "{$repo} \"{$realname}\" = \"{$description}\"\n";
    }
    $data[] = 'repo ' . $repo . "\n";
    foreach ($permissions as $user => $perm) {
        $data[] = '  ' . $perm . ' = ' . $user . "\n";
    }
    file_put_contents($userconfig, implode('', $data));
    git_wrapper('add ' . $userconfig);

git_wrapper('commit --allow-empty -m "written repo ' . $repo . '"');
    git_wrapper('push');
}

webinterface.git

Einheitlicher, ausführlicher Filter für SSH-Keys