dongdigua/demo.lua
1
0
Fork 0
mirror of https://github.com/dongdigua/demo.lua.git synced 2024-11-23 22:43:09 +08:00
Code Issues Packages Projects Releases Wiki Activity

Compare commits

base: dongdigua:acbfcc8bdc1258787b55f8526b3354f16c5a8372
Branches Tags
dongdigua:main
..
compare: dongdigua:9031c011473e618754a06ec9c55cd9ab1fce3d40
Branches Tags
dongdigua:main

No commits in common. "acbfcc8bdc1258787b55f8526b3354f16c5a8372" and "9031c011473e618754a06ec9c55cd9ab1fce3d40" have entirely different histories.
acbfcc8bdc ... 9031c01147

2 changed files with 17 additions and 181 deletions
Show Stats Expand all files Collapse all files

34
demo.lua
View File

@ -37,10 +37,10 @@ or
choose one of the demo programs below.
<DIV CLASS="menubar">
<A HREF="./demo.lua?hello">hello</A>
<A HREF="/demo.lua?hello">hello</A>
</DIV>
<FORM ACTION="./demo.lua" METHOD="POST">
<FORM ACTION="/demo.lua" METHOD="POST">
<TEXTAREA ROWS="16" COLS="72" NAME="input" maxlength="2000">]]
-- demo.lua
@ -49,6 +49,20 @@ choose one of the demo programs below.
local T=""
local E,I
-- convert input to plain text
if os.getenv("REQUEST_METHOD") == "POST" then
T=io.read"*a"
T=string.match(T,"=(.-)$") or ""
T=string.gsub(T,"+"," ")
T=string.gsub(T,"%%(%x%x)",function (x) return string.char(tonumber(x,16)) end)
T=string.gsub(T,"^%s*=%s*","return ")
if T ~= "" then
log=io.open("/logs/lua.log", "a")
log:write("-- ", os.date(), "\n", T, "\n\n")
log:close()
end
end
-- save functions needed at the end
local _G=_G
local collectgarbage=collectgarbage
@ -67,20 +81,6 @@ if query ~= "" then
T=demos[query] or ""
end
-- convert input to plain text
if os.getenv("REQUEST_METHOD") == "POST" then
T=io.read"*a"
T=string.match(T,"=(.-)$") or ""
T=string.gsub(T,"+"," ")
T=string.gsub(T,"%%(%x%x)",function (x) return string.char(tonumber(x,16)) end)
T=string.gsub(T,"^%s*=%s*","return ")
if T ~= "" then
log=io.open("/logs/lua.log", "a")
log:write("-- ", os.date(), "\n", T, "\n\n")
log:close()
end
end
-- continue HTML began in shell script
write(T)
write[[</TEXTAREA>
@ -88,7 +88,7 @@ write[[</TEXTAREA>
<INPUT TYPE="submit" VALUE="run">
<INPUT TYPE="button" VALUE="clear" onclick="this.form.elements['input'].value=''">
<INPUT TYPE="reset" VALUE="restore">
<INPUT TYPE="button" VALUE="restart" onclick="window.location.href='./demo.lua'">
<INPUT TYPE="button" VALUE="restart" onclick="window.location.href='/demo.lua'">
</FORM>
]]
io.flush()

164
demo.ngx.lua
View File

@ -1,164 +0,0 @@
#! /lua/lua
-- vi: set noexpandtab :vi
ngx.header.content_type = "text.html"
print=ngx.say
print[[
<!DOCTYPE html>
<HTML>
<HEAD>
<TITLE>Lua: demo</TITLE>
<LINK REL="stylesheet" TYPE="text/css" HREF="https://lua.org/lua.css">
<META HTTP-EQUIV="content-type" CONTENT="text/html; charset=utf-8">
<STYLE TYPE="text/css">
textarea {
font-family: monospace ;
}
input {
margin-right: 1em ;
}
</STYLE>
</HEAD>
<BODY>
<H1>
<A HREF="https://lua.org/home.html"><IMG SRC="https://lua.org/images/logo.gif" ALT="Lua"></A>
Demo
</H1>
<P>
Try Lua before
<A HREF="https://lua.org/download.html">downloading</A> it.
Enter your Lua program
or
choose one of the demo programs below.
<DIV CLASS="menubar">
<A HREF="./demo.lua?hello">hello</A>
</DIV>
<FORM ACTION="./demo.lua" METHOD="POST">
<TEXTAREA ROWS="16" COLS="72" NAME="input" maxlength="2000">]]
-- demo.lua
-- run user programs in constrained environment
local T=""
local E,I
-- save functions needed at the end
local _G=_G
local collectgarbage=collectgarbage
local pack=table.pack
local tostring=tostring
local unpack=table.unpack
local write=ngx.print
-- snippets
local demos = {}
demos["hello"] = "setmetatable({}, {__gc = function() print[[hello shenjack]] end})"
local query=ngx.req.get_uri_args(1)
if query ~= nil then
for k,_ in pairs(query) do
T=demos[k] or ""
end
end
-- convert input to plain text
if ngx.req.get_method() == "POST" then
ngx.req.read_body()
T=ngx.req.get_body_data()
T=string.match(T,"=(.-)$") or ""
T=string.gsub(T,"+"," ")
T=string.gsub(T,"%%(%x%x)",function (x) return string.char(tonumber(x,16)) end)
T=string.gsub(T,"^%s*=%s*","return ")
-- if T ~= "" then
-- log=io.open("/logs/lua.log", "a")
-- log:write("-- ", os.date(), "\n", T, "\n\n")
-- log:close()
-- end
end
-- continue HTML began in shell script
write(T)
write[[</TEXTAREA>
<P>
<INPUT TYPE="submit" VALUE="run">
<INPUT TYPE="button" VALUE="clear" onclick="this.form.elements['input'].value=''">
<INPUT TYPE="reset" VALUE="restore">
<INPUT TYPE="button" VALUE="restart" onclick="window.location.href='./demo.lua'">
</FORM>
]]
ngx.flush()
-- the serious thing begins
if ngx.req.get_method() == "POST" then
-- limit resource
--local steplimit = 1000
--local memlimit = 1000
--
--local count = 0
--local function step ()
-- count = count + 1
-- if collectgarbage("count") > memlimit then
-- error("DoSer uses too much memory")
-- end
-- if count > steplimit then
-- error("DoSer uses too much CPU")
-- end
--end
--
--debug.sethook(step, "", 100)
-- delete unsafe functions
arg=nil
debug.debug=nil
debug.getfenv=getfenv
debug.getregistry=nil
dofile=nil
io={write=io.write}
loadfile=nil
os.execute=nil
os.getenv=nil
os.remove=nil
os.rename=nil
os.tmpname=nil
package.loaded.io=io
package.loaded.package=nil
--package=nil
require=nil
-- run program in global environment
write[[<H2>Output</H2>
<TEXTAREA ROWS="8" COLS="72">]]
T,E=load(T,"=input","t")
if not T then
print(E) E="failed to compile" I="alert"
else
T=pack(pcall(T))
_G.tostring=tostring
if not T[1] then
print(T[2]) E="failed to run" I="alert"
else
print(unpack(T,2,T.n)) E="ran successfully" I="ok"
end
collectgarbage()
end
write("\n-- steps/100:\t", count, "\n")
write("-- memory:\t", string.format("%.2f",collectgarbage("count")), "\n")
-- continue HTML
write('</TEXTAREA><P><IMG SRC="https://lua.org/images/',I,'.png" ALIGN="absbottom">\n')
write('Your program ',E,'.\n')
ngx.flush()
end