modules/gitolite/include/git.php (37795a6) - webinterface.git

git.php

<?php
/*
This file belongs to the Webinterface of schokokeks.org Hosting

Written 2008-2014 by schokokeks.org Hosting, namely
  Bernd Wurst <bernd@schokokeks.org>
  Hanno Böck <hanno@schokokeks.org>

To the extent possible under law, the author(s) have dedicated all copyright and related and neighboring rights to this software to the public domain worldwide. This software is distributed without any warranty.

You should have received a copy of the CC0 Public Domain Dedication along with this software. If not, see 
http://creativecommons.org/publicdomain/zero/1.0/

Nevertheless, in case you use a significant part of this code, we ask (but not require, see the license) that you keep the authors' names in place and return your changes to the public. We would be especially happy if you tell us what you're going to do with this code.
*/

require_role(ROLE_SYSTEMUSER);

$data_dir = realpath( dirname(__FILE__).'/../data/' );
$config_file = $data_dir.'/gitolite-admin/conf/webinterface.conf';
$config_dir = $data_dir.'/gitolite-admin/conf/webinterface';
$key_dir = $data_dir.'/gitolite-admin/keydir';
DEBUG("gitolite-data_dir: ".$data_dir);
$git_wrapper = $data_dir . '/git-wrapper.sh';

function validate_name($name) {
  return (preg_match('/^[[:alnum:]][[:alnum:]._-]*$/', $name));
}

function get_git_url($repo) {
  $remote = git_wrapper('remote --verbose');
  DEBUG('gitolite-admin repo: '.$remote[0]);
  $url = preg_replace('#^.*\s+(\S+):gitolite-admin.*#', '$1', $remote[0]);
  DEBUG('URL: '.$url);
  return $url.':'.$repo;
}

function git_wrapper($commandline)
{
  global $git_wrapper, $data_dir;

$command = $git_wrapper.' '.$commandline;
  $output = array();
  $retval = 0;
  DEBUG($command);
  exec($command, $output, $retval);
  DEBUG($output);
  DEBUG($retval);
  if ($retval > 0) {
    system_failure('Interner Fehler!');
    // FIXME: Hier sollte auf jeden Fall ein Logging angeworfen werden!
  }
  return $output;
}

function refresh_gitolite() 
{
  check_env();
  git_wrapper('pull');
}

function list_repos() 
{
  global $config_file, $config_dir;
  $username = $_SESSION['userinfo']['username'];
  $userconfig = $config_dir . '/' . $username . '.conf';
  DEBUG("using config file ".$userconfig);
  if (! is_file($userconfig)) {
    DEBUG("user-config does not exist");
    return array();
  }

$repos = array();
  $lines = file($userconfig);
  $current_repo = NULL;
  $current_repo_users = array();
  foreach ($lines as $line) {
    DEBUG("LINE: ".$line);
    $m = array();
    if (preg_match('/^(\S+) "[^"]+" = "([^"]+)"$/', $line, $m) != 0) {
      if (!array_key_exists($m[1], $repos)) {
        $repos[$m[1]] = array('users' => NULL, 'description' => '');
      }
      DEBUG("found description: {$m[1]} = \"{$m[2]}\"");
      $repos[$m[1]]['description'] = $m[2];
    } elseif (preg_match('_^\s*repo (\S+)\s*$_', $line, $m) != 0) {
      if (!array_key_exists($m[1], $repos)) {
        $repos[$m[1]] = array('users' => NULL, 'description' => '');
      }
      if ($current_repo) {
        $repos[$current_repo]['users'] = $current_repo_users;
      }
      DEBUG("found repo ".$m[1]);
      $current_repo = chop($m[1]);
      $current_repo_users = array();
    } else if (preg_match('/^\s*(R|RW|RW\+)\s*=\s*([[:alnum:]][[:alnum:]._-]*)\s*$/', $line, $m) != 0) {
      DEBUG("found access rule: ".$m[1]." for ".$m[2]);
      $current_repo_users[chop($m[2])] = chop($m[1]);
    }
  }
  if ($current_repo) {
    $repos[$current_repo]['users'] = $current_repo_users;
  }
  ksort($repos);
  DEBUG($repos);
  return $repos;
}

function new_foreign_user($handle) 
{
  global $key_dir, $config_dir;
  $username = $_SESSION['userinfo']['username'];

if (! validate_name($handle)) {
    system_failure("Der eingegebene Name enthält ungültige Zeichen. Bitte nur Buchstaben, Zahlen, Unterstrich, Binderstrich und Punkt benutzen.");
  }

if (in_array($handle, list_users())) {
    system_failure('Dieser GIT-Benutzer gehört zu diesem Kundenaccount.');
  }

$keyfile = $key_dir.'/'.$handle.'.pub';
  if (! file_exists($keyfile) ) {
    system_failure('Diesen GIT-Benutzer gibt es nicht');
  }

$userconfig = $config_dir . '/' . $username . '.conf';
  DEBUG("using config file ".$userconfig);
  if (! is_file($userconfig)) {
    DEBUG("user-config does not exist, creating new one");
    file_put_contents($userconfig, '# user '.$handle."\n");
    set_user_include();
  } elseif (in_array($handle, list_foreign_users())) {
    # user ist schon eingetragen
  } else {
    $content = file_get_contents($userconfig);
    file_put_contents($userconfig, "# foreign user {$handle}\n".$content);
  }
  git_wrapper('add '.$userconfig);

git_wrapper('commit --allow-empty -m "added new key for '.$handle.'"');
  git_wrapper('push');
}

function delete_foreign_user($handle)
{
  global $config_dir;
  $username = $_SESSION['userinfo']['username'];

$userconfig = $config_dir . '/' . $username . '.conf';
  DEBUG("using config file ".$userconfig);
  if (! is_file($userconfig)) {
    DEBUG("user-config does not exist, wtf?");
    system_failure("Es gibt für diesen Benutzer noch keine Konfiguration. Das sollte nicht sein!");
  } else {
    $content = file($userconfig);
    DEBUG("Old file:");
    DEBUG($content);
    $newcontent = array();
    foreach ($content as $line) {
      if (preg_match('/^# foreign user '.$handle.'$/', $line)) {
        DEBUG("delete1: ".$line);
        continue;
      }
      if (preg_match('/^\s*(R|RW|RW+)\s*=\s*'.$handle.'\s*$/', $line)) {
        DEBUG("delete2: ".$line);
        continue;
      }
      $newcontent[] = $line;
    }
    DEBUG("Modified file:");
    DEBUG($newcontent);
    file_put_contents($userconfig, implode('', $newcontent));
  }
  git_wrapper('add '.$userconfig);

git_wrapper('commit -m "deleted foreign user '.$handle.' for '.$username.'"');
  git_wrapper('push');
  
}

function newkey($pubkey, $handle)
{
  global $key_dir, $config_dir;
  $username = $_SESSION['userinfo']['username'];
  
  $handle = $username.'-'.$handle;
  if (! validate_name($handle) || (str_replace(".", "x", $handle) != $handle)) {
    system_failure("Der eingegebene Name enthält ungültige Zeichen. Bitte nur Buchstaben, Zahlen, Unterstrich und Bindestrich benutzen.");
  }

$keyfile = $key_dir.'/'.$handle.'.pub';
  file_put_contents($keyfile, $pubkey);
  
  DEBUG("checking public key $keyfile");
  $proc = popen("/usr/bin/ssh-keygen -l -f '{$keyfile}' 2>&1", 'r');
  $output = fread($proc, 512);
  DEBUG($output);
  pclose($proc);
  if (preg_match('/.* is not a public key file.*/', $output)) {
    unlink($keyfile);
    system_failure('Der angegebene SSH-Key scheint ungültig zu sein.');
  }

git_wrapper('add '.$keyfile);

$userconfig = $config_dir . '/' . $username . '.conf';
  DEBUG("using config file ".$userconfig);
  if (! is_file($userconfig)) {
    DEBUG("user-config does not exist, creating new one");
    file_put_contents($userconfig, '# user '.$handle."\n");
    set_user_include();
  } elseif (in_array($handle, list_users())) {
    # user ist schon eingetragen, nur neuer Key
  } else {
    $content = file_get_contents($userconfig);
    file_put_contents($userconfig, "# user {$handle}\n".$content);
  }
  git_wrapper('add '.$userconfig);
  
  git_wrapper('commit --allow-empty -m "added new key for '.$handle.'"');
  git_wrapper('push');
}

function delete_key($handle)
{
  global $key_dir, $config_dir;
  $username = $_SESSION['userinfo']['username'];

if (! validate_name($handle)) {
    system_failure("Der eingegebene Name enthält ungültige Zeichen. Bitte nur Buchstaben, Zahlen, Unterstrich, Binderstrich und Punkt benutzen.");
  }
  if (!in_array($handle, list_users())) {
    DEBUG("key {$handle} not in");
    DEBUG(list_users());
    system_failure("Den angegebenen Key scheint es nicht zu geben");
  }

$keyfile = $key_dir.'/'.$handle.'.pub';
  if (! file_exists($keyfile)) {
    system_failure("Der angegebene Schlüssel scheint nicht mehr vorhanden zu sein. Bitte manuelle Korrektur anfordern!");
  } 
  git_wrapper('rm '.$keyfile);

$userconfig = $config_dir . '/' . $username . '.conf';
  DEBUG("using config file ".$userconfig);
  if (! is_file($userconfig)) {
    DEBUG("user-config does not exist, wtf?");
    system_failure("Es gibt für diesen Benutzer noch keine Konfiguration. Das sollte nicht sein!");
  } else {
    $content = file($userconfig);
    DEBUG("Old file:");
    DEBUG($content);
    $newcontent = array();
    foreach ($content as $line) {
      if (preg_match('/^# user '.$handle.'$/', $line)) {
        DEBUG("delete1: ".$line);
        continue;
      }
      if (preg_match('/^\s*(R|RW|RW+)\s*=\s*'.$handle.'\s*$/', $line)) {
        DEBUG("delete2: ".$line);
        continue;
      }
      $newcontent[] = $line;
    }
    DEBUG("Modified file:");
    DEBUG($newcontent);
    file_put_contents($userconfig, implode('', $newcontent));
  }
  git_wrapper('add '.$userconfig);
 
  git_wrapper('commit -m "deleted key for '.$handle.'"');
  git_wrapper('push');

}

function delete_repo($repo) 
{
  $repos = list_repos();
  if (!array_key_exists($repo, $repos)) {
    system_failure("Ein solches Repository existiert nicht!");
  }
  
  global $config_dir;
  $username = $_SESSION['userinfo']['username'];
  $userconfig = $config_dir . '/' . $username . '.conf';
  DEBUG("using config file ".$userconfig);
  $data = file($userconfig);
  $data = remove_repo_from_array($data, $repo);
  file_put_contents($userconfig, implode('', $data));
  git_wrapper('add '.$userconfig);
  
  git_wrapper('commit --allow-empty -m "deleted repo '.$repo.'"');
  git_wrapper('push');
}

$repos = list_repos();
  if (array_key_exists($repo, $repos)) {
    $data = remove_repo_from_array($data, $repo);
  }

$data[] = "\n";
  if ($description) {
    $description = preg_replace('/\[\'"\r\n/', '', $description);
    $realname = $_SESSION['userinfo']['name'];
    $data[] = "{$repo} \"{$realname}\" = \"{$description}\"\n";
  }
  $data[] = 'repo '.$repo."\n";
  foreach ($permissions as $user => $perm) {
    $data[] = '  '.$perm.' = '.$user."\n";
  }
  file_put_contents($userconfig, implode('', $data));
  git_wrapper('add '.$userconfig);
  
  git_wrapper('commit --allow-empty -m "written repo '.$repo.'"');
  git_wrapper('push');
}

webinterface.git

Prüfung des eingegebenen SSH-Key war fehlerhaft, jetzt korrigiert