#! /usr/bin/lua local cgi = require "cgi" local koth = require "koth" local team = cgi.fields['t'] or "" local category = cgi.fields['c'] or "" local points = cgi.fields['p'] or "" local answer = cgi.fields['a'] or "" -- Defang category name; prevent directory traversal category = category:gsub("[^A-Za-z0-9]", "-") -- Check answer local needle = points .. " " .. answer local haystack = "../puzzles/" .. category .. "/answers.txt" local found = koth.anchored_search(haystack, needle) if (not found) then koth.page("Wrong answer") end local ok, err = koth.award_points(team, category, points) if (not ok) then koth.page("Error awarding points", "
You got the right answer, but something blew up trying to give you points.
" .. "" .. err .. "
") end koth.page("Points awarded", "" .. points .. " points for " .. team .. "!
" .. "")