cscg ist super

2026/cscg/web/innovation-at-work/www/get.cgi

@@ -0,0 +1,58 @@
+#!/bin/bash
+
+echo "Content-Type: text/plain"
+
+if [[ "$REQUEST_METHOD" != "GET" ]]; then
+    echo "Status: 405 Method Not Allowed"
+    echo ""
+    exit 0
+fi
+
+apiversion=""
+name=""
+password=""
+
+readarray -d '&' -t params < <(printf "%s" "$QUERY_STRING")
+for kv in "${params[@]}"; do
+    key="${kv%%=*}"
+    value="${kv##*=}"
+    dvalue="$(printf '%b' "${value//%/\\x}")"
+
+    case ${key} in
+        name)
+            name="$dvalue"
+            ;;
+        password)
+            password="$dvalue"
+            ;;
+        apiversion)
+            apiversion="$dvalue"
+            ;;
+        *)
+            echo "Status: 400 Bad Request"
+            echo ""
+            exit 0
+            ;;
+    esac
+done
+
+
+if [[ "${apiversion}" -ne 1 ]]; then
+    echo "Status: 400 Bad Request"
+    echo ""
+    echo "unsupported API version: $apiversion"
+    exit 0
+fi
+
+password_hash="$(echo "$password" | shasum -a 256 | cut -d' ' -f1)"
+name_hash="$(echo "$name" | shasum -a 256 | cut -d' ' -f1)"
+
+# poor man's database
+if [[ -f "/db/$name_hash:$password_hash" ]]; then
+    echo ""
+    cat "/db/$name_hash:$password_hash"
+else
+    echo "Status: 404 Not Found"
+    echo ""
+fi
+