moth/packages/00common/src/claim.cgi.c

90 lines
1.9 KiB
C

#include <stdlib.h>
#include <ctype.h>
#include "common.h"
int
main(int argc, char *argv[])
{
char team[TEAM_MAX] = {0};
char token[TOKEN_MAX] = {0};
if (-1 == cgi_init(argv)) {
return 0;
}
ctf_chdir();
/* Read in team and token */
while (1) {
size_t len;
char key[20];
len = cgi_item(key, sizeof(key));
if (0 == len) break;
switch (key[0]) {
case 't':
cgi_item(team, sizeof(team));
break;
case 'k':
cgi_item(token, sizeof(token));
break;
}
}
/* Any weird characters in token name? */
{
char *p;
if ('\0' == token[0]) {
cgi_result(409, "Must supply token", "<p>Your request did not contain a k= parameter.</p>");
}
for (p = token; *p; p += 1) {
if ((! isalnum(*p)) &&
(*p != '-') &&
(*p != ':')) {
cgi_result(409, "Not a token", "<p>This token has untokenlike characteristics.</p>");
}
}
}
/* Award points */
{
char *p = token;
char *q;
char category[40];
char points_s[40];
int points;
int ret;
/* Pull category name out of the token */
for (q = category; *p && (*p != ':'); p += 1) {
*(q++) = *p;
}
*q = '\0';
if (p) p += 1;
/* Now we can check to see if it's valid */
if ((! anchored_search(package_path("%s/tokens.txt", category), token, 0)) &&
(! anchored_search(state_path("tokens.db"), token, 0))) {
cgi_result(409, "No such token", "<p>This token has not been issued.</p>");
}
/* Pull point value out of the token (if it has one) */
for (q = points_s; *p && (*p != ':'); p += 1) {
*(q++) = *p;
}
*q = '\0';
points = atoi(points_s);
if (0 == points) points = 1;
ret = award_points(team, category, points, token);
if (ret < 0) {
cgi_fail(ret);
}
}
cgi_page("Point awarded", "<p>Congratulations.</p>");
return 0;
}