gwvpmini/gwvpmini_gitbackend.php

   1 <?php
   2
   3 $CALL_ME_FUNCTIONS["gitcontrol"] = "gwvpmini_gitControlCallMe";
   4
   5 //$MENU_ITEMS["20repos"]["text"] = "Repo Admin";
   6 //$MENU_ITEMS["20repos"]["link"] = "$BASE_URL/admin/repos";
   7
   8 // TODO: we could actually change backend interface such that is
   9 // will respond to any url's that contain "repo.git" rather then
  10 // having to be $BASE_URL/git/repo.git
  11 function gwvpmini_gitControlCallMe()
  12 {
  13         if(isset($_REQUEST["q"])) {
  14                 $query = $_REQUEST["q"];
  15                 $qspl = explode("/", $query);
  16                 if(isset($qspl[0])) {
  17                         if($qspl[0] == "git") {
  18                                 return "gwvpmini_gitBackendInterface";
  19                         }
  20                 }
  21                 else return false;
  22         }
  23
  24         return false;
  25
  26 }
  27
  28
  29 function gwvpmini_CreateRepoHooks($repopath, $cmdpath, $reponame)
  30 {
  31         $fp = fopen("$repopath/hooks/pre-receive", "w");
  32
  33         if(!$fp) error_log("could not create pre-receive hook");
  34
  35         // TODO: think about this one
  36         //$script = '#!/bin/bash'."\n\n".'DCOMMIT=`cat`'."\n".'START=`echo $DCOMMIT|cut -d " " -f 1`'."\n".'END=`echo $DCOMMIT|cut -d " " -f 2`'."\n".'REF=`echo $DCOMMIT|cut -d " " -f 3`'."\n\n";
  37         $script = "#!/bin/bash\n\nDCOMMIT=".'`cat`'."\n\nphp $cmdpath $reponame \$REMOTE_USER pre-receive \$DCOMMIT\n\n";
  38         fwrite($fp, $script);
  39
  40         fclose($fp);
  41
  42         chmod("$repopath/hooks/pre-receive", 0755);
  43
  44
  45         $fp = fopen("$repopath/hooks/update", "w");
  46
  47         if(!$fp) error_log("could not create update hook");
  48
  49         // TODO: think about this one
  50         unset($script);
  51         $script = "#!/bin/bash\n\nphp $cmdpath $reponame \$REMOTE_USER update \$1 \$2 \$3\n\n";
  52         fwrite($fp, $script);
  53
  54         fclose($fp);
  55
  56         chmod("$repopath/hooks/update", 0755);
  57 }
  58
  59 function gwvpmini_gitBackendInterface()
  60 {
  61         // and this is where i re-code the git backend interface from scratch
  62         global $BASE_URL, $cmd_line_tool, $git_cli_cmd;
  63
  64         header_remove("Pragma");\r
  65         header_remove("Cache-Control");\r
  66         header_remove("Set-Cookie");\r
  67         header_remove("Expires");\r
  68         header_remove("X-Powered-By");\r
  69         header_remove("Vary");
  70         //header("Content-Encoding: none");\r
  71
  72
  73         $repo_base = gwvpmini_getConfigVal("repodir");
  74
  75         // TODO: we need to stop passing the repo name around as "repo.git", it needs to be just "repo"
  76
  77
  78         /* bizare git problem that ignores 403's or continues on with a push despite them
  79         // error_log("FLAP for ".$_SERVER["REQUEST_URI"]);
  80         if(isset($_REQUEST)) {
  81                 $dump = print_r($_REQUEST, true);
  82                 // error_log("FLAP, $dump");
  83         }
  84         if(isset($_SERVER["PHP_AUTH_USER"])) {
  85                 // error_log("FLAP: donut hole");
  86         }*/
  87
  88         error_log("REQUESTINBACKEND: ".print_r($_REQUEST, true));
  89
  90         $repo = "";
  91         $repoid = false;
  92         $newloc = "/";
  93         if(isset($_REQUEST["q"])) {
  94                 $query = $_REQUEST["q"];
  95                 $qspl = explode("/", $query);
  96                 // TODO do this with
  97                 $repo = preg_replace("/\.git$/", "", $qspl[1]);
  98                 $repoid = gwvpmini_GetRepoId($repo);
  99                 for($i=2; $i < count($qspl); $i++) {
 100                         $newloc .= "/".$qspl[$i];
 101                 }
 102         }
 103
 104         if($repoid == false) {
 105                 gwvpmini_fourZeroFour();
 106                 return;
 107         }
 108
 109         // we do an update server cause its weird and i cant figure out when it actually needs to happen
 110         chdir("$repo_base/$repo.git");
 111         // dont believe i have to do this
 112         //exec("/usr/bin/git update-server-info");
 113
 114         if(!file_exists("$repo_base/$repo.git/hooks/pre-receive") || !file_exists("$repo_base/$repo.git/hooks/update")) {
 115                 // error_log("WRITING HOOKS");
 116                 gwvpmini_CreateRepoHooks("$repo_base/$repo.git", $cmd_line_tool, $repo);
 117         }
 118
 119
 120         // so now we have the repo
 121         // next we determine if this is a read or a write
 122
 123         // TODO: WE NEED TO FIX THIS, IT DOESNT ALWAYS DETECT a "WRITE"
 124         $write = false;
 125         if(isset($_REQUEST["service"])) {
 126                 if($_REQUEST["service"] == "git-receive-pack") {
 127                         // error_log("got write as receivepack in post");
 128                         $write = true;
 129                 }
 130         }
 131         if(preg_match("/.*git-receive-pack$/", $_REQUEST["q"])) $write = true;
 132         //$write = true;
 133         // THIS MAY CAUSE ISSUES LATER ON but we do it cause the git client ignores our 403 when it uses git-receive-pack after an auth
 134         // no, this isnt a solution cause auth'd read attempts will come up as writes...
 135         //if(isset($_SERVER["PHP_AUTH_USER"])) {
 136                 //$write = true;
 137         //}
 138
 139
 140         $person = gwvpmini_checkBasicAuthLogin();
 141         //$write = true;
 142         // next, figure out permissions for repo
 143         $rid = gwvpmini_GetRepoId($repo);
 144         $uid = -1;
 145         // error_log("AT THIS POINT WE HAVE $uid, $rid, $repo $person");
 146
 147         if(!$person) {
 148                 if($write) {
 149                         // error_log("ASK FOR BASIC AUTH");
 150                         gwvpmini_AskForBasicAuth();
 151                         return;
 152                 } else {
 153                         $perm = gwvpmini_GetRepoPerm($rid, "a");
 154                         if($perm < 1) {
 155                                 // error_log("ASK FOR BASIC AUTH 2");
 156                                 gwvpmini_AskForBasicAuth();
 157                                 return;
 158                         }
 159                 }
 160         } else {
 161                 $uid = gwvpmini_GetUserId($person);
 162                 $perm = gwvpmini_GetRepoPerm($rid, $uid);
 163                 if($write) {
 164                         if($perm < 2) {
 165                                 // error_log("SEND FOFF");
 166                                 gwvpmini_fourZeroThree();
 167                                 return;
 168                         }
 169                 } else {
 170                         if($perm < 1) {
 171                                 gwvpmini_fourZeroThree();
 172                                 return;
 173                         }
 174                 }
 175         }
 176
 177         // if its a write, we push for authentication
 178
 179         //if($write) {
 180         if(!$person) {
 181                 $person = "anonymous";
 182         }
 183
 184         // if its a write, we check (before and after) the branch/tag info to see if they were updated
 185         if($write) {
 186                 error_log("REQUESTINBACKEND: processed as write");
 187         } else {
 188                 error_log("REQUESTINBACKEND: processed as read");
 189         }
 190
 191         gwvpmini_callGitBackend($person, $repo);
 192
 193         //if($write) {
 194                 //}
 195         return;
 196         //}
 197
 198         // if we made it this far, we a read and we have permissions to do so, just search the file from the repo
 199         /*if(file_exists("$repo_base/$repo.git/$newloc")) {
 200                 // error_log("would ask $repo for $repo.git/$newloc from $repo_base/$repo.git/$newloc");
 201                 $fh = fopen("$repo_base/$repo.git/$newloc", "rb");
 202
 203                 // error_log("pushing file");
 204                 while(!feof($fh)) {
 205                         echo fread($fh, 8192);
 206                 }
 207         } else {
 208                 // error_log("would ask $repo for $repo/$newloc from $repo_base/$repo/$newloc, NE");
 209                 gwvpmini_fourZeroFour();
 210                 return;
 211         }*/
 212
 213 }
 214
 215 function gwvpmini_canManageRepo($userid, $repoid)
 216 {
 217         // only the owner or an admin can do these tasks
 218         // error_log("Checking repoid, $repoid against userid $userid");
 219
 220         if(gwvpmini_IsUserAdmin(null, null, $userid)) return true;
 221         if(gwvpmini_IsRepoOwner($userid, $repoid)) return true;
 222         return false;
 223 }
 224
 225
 226 // TODO: this whole bit needs a re-write - seriously, like totally!
 227 function gwvpmini_callGitBackend($username, $repo)
 228 {
 229
 230         global $git_backend_cmd, $git_cli_cmd, $php_cli_cmd, $data_directory, $cmd_line_tool;\r
 231
 232         // this is where things become a nightmare
 233                 $fh   = fopen('php://input', "r");
 234
 235                 $repo_base = gwvpmini_getConfigVal("repodir");\r
 236
 237
 238                 $ruri = $_SERVER["REQUEST_URI"];
 239                 $strrem = "git/$repo.git";
 240                 $euri = str_replace($strrem, "", $_REQUEST["q"]);
 241                 //$euri = preg_replace("/^git\/$repo\.git/", "", $_REQUEST["q"]);
 242
 243
 244
 245                 $rmeth = $_SERVER["REQUEST_METHOD"];
 246
 247                 $qs = "";
 248                 foreach($_REQUEST as $key => $var) {
 249                         if($key != "q") {
 250                                 //// error_log("adding, $var from $key");
 251                                 if($qs == "") $qs.="$key=$var";
 252                                 else $qs.="&$key=$var";
 253                         }
 254                 }
 255
 256                 //sleep(2);
 257
 258                 $userdets = gwvpmini_getUser($username);
 259
 260                 // this is where the fun, it ends.
 261                 $myoutput = "";
 262                 unset($myoutput);
 263
 264                 // this be nasty!
 265
 266                 // setup env
 267                 if(isset($procenv))     unset($procenv);
 268                 $procenv["GATEWAY_INTERFACE"] = "CGI/1.1";
 269                 $procenv["PATH_TRANSLATED"] = "/$repo_base/$repo.git/$euri";
 270                 $procenv["REQUEST_METHOD"] = "$rmeth";
 271                 $procenv["GIT_COMMITTER_NAME"] = $userdets["fullname"];
 272                 $procenv["GIT_COMMITTER_EMAIL"] = $userdets["email"];
 273                 $procenv["GIT_HTTP_EXPORT_ALL"] = "1";
 274                 $procenv["QUERY_STRING"] = "$qs";
 275                 $procenv["HTTP_USER_AGENT"] = "git/1.7.1";
 276                 $procenv["REMOTE_USER"] = "$username";
 277                 $procenv["REMOTE_ADDR"] = $_SERVER["REMOTE_ADDR"];
 278                 $procenv["AUTH_TYPE"] = "Basic";
 279
 280                 //// error_log("PROCENV: ".print_r($procenv,true));
 281
 282                 if(isset($_SERVER["CONTENT_TYPE"])) {
 283                         $procenv["CONTENT_TYPE"] = $_SERVER["CONTENT_TYPE"];
 284                 } else {
 285                         //$procenv["CONTENT_TYPE"] = "";
 286                 }
 287                 if(isset($_SERVER["CONTENT_LENGTH"])) {
 288                         $procenv["CONTENT_LENGTH"] = $_SERVER["CONTENT_LENGTH"];
 289                 }
 290
 291                 $headers = getallheaders();
 292
 293                 //error_log("path trans'd is /$repo_base/$repo.git/$euri from $ruri with ".$_REQUEST["q"]." $strrem pre is ".print_r($_REQUEST,true)." and foff ".print_r($headers, true));
 294
 295                 $pwd = "/$repo_base/";
 296
 297                 $proc = proc_open("$git_backend_cmd", array(array("pipe","rb"),array("pipe","wb"),array("file","/tmp/err", "a")), $pipes, $pwd, $procenv);
 298
 299                 $untilblank = false;
 300                 while(!$untilblank&&!feof($pipes[1])) {
 301                         $lines_t = fgets($pipes[1]);
 302                         $lines = trim($lines_t);
 303                         // error_log("got line: $lines");
 304                         if($lines_t == "\r\n") {
 305                                 $untilblank = true;
 306                                 // error_log("now blank");
 307                         } else header($lines);
 308                         if($lines === false) {
 309                                 // error_log("got an unexpexted exit...");
 310                                 exit(0);
 311                         }
 312
 313                 }
 314
 315
 316                 $firstline = true;
 317                 $continue = true;
 318
 319                 if(!stream_set_blocking($fh,0)) {
 320                         // error_log("cant set input non-blocking");
 321                 }
 322
 323                 if(!stream_set_blocking($pipes[1],0)) {
 324                         // error_log("cant set pipe1 non-blocking");
 325                 }
 326
 327
 328                 $stlimit = 0;
 329                 //$fp = fopen("/tmp/gitup.".rand(0,4000000), "w");
 330                 $from_client_data = "";
 331                 // i was going to use stream_select, but i feel this works better like this
 332                 while($continue) {
 333                         // do client
 334
 335                         // lets start again....
 336
 337                         if(!feof($fh)) {
 338                                 if(isset($headers["Content-Length"])) {
 339                                         $cl = $headers["Content-Length"];
 340                                         while(strlen($from_client_data) < $cl) {
 341                                                 error_log("re-read ".strlen($from_client_data)." of $cl");
 342                                                 $from_client_data .= fread($fh, $cl);
 343                                         }
 344                                 } else  $from_client_data = fread($fh,8192);
 345
 346                                 // TODO: BIG TODO: must rewrite this bit. its ugly as sin, it works, but it probably shouldnt.
 347
 348                                 if(isset($headers["Content-Encoding"])) {
 349                                         if($headers["Content-Encoding"] == "gzip") {
 350                                                 //error_log("DAM YOU GIT CLIENT and your retarded gzip encoding");
 351                                                 $from_client_data = gzinflate(substr($from_client_data, 10));
 352                                                 //$from_client_data = gzdecode($from_client_data);
 353                                         }
 354                                 }
 355                                 if($from_client_data !== false) {
 356
 357                                         // push the data from the client straight to backend
 358                                         fwrite($pipes[0], $from_client_data);
 359                                         //fwrite($fp, $from_client_data);
 360                                 }
 361                                 fflush($pipes[0]);
 362                                 //fwrite($fl, $from_client_data);
 363                                 $client_len = strlen($from_client_data);
 364                         } else {
 365                                 //error_log("client end");
 366                                 $client_len = 0;
 367                                 //$continue = false;
 368                         }
 369
 370
 371
 372
 373                         // do cgi
 374                         // sometimes, we get a \r\n from the cgi, i do not know why she swallowed the fly,
 375                         // but i do know that the fgets for the headers above should have comsued that
 376                         if(!feof($pipes[1])) {
 377                                 $from_cgi_data_t = fread($pipes[1],8192);
 378                                 $from_cgi_data = $from_cgi_data_t;
 379
 380                                 // i dont know if this will solve it... it coudl cause some serious issues elsewhere
 381                                 // TODO: this is a hack, i need to know why the fgets above doesn consume the \r\n even tho it reads it
 382                                 // i.e. why the pointer doesnt increment over it, cause the freads above then get them again.
 383                                 if($firstline) {
 384                                         if(strlen($from_cgi_data_t)>0) {
 385                                                 // i dont get why this happens, and its very frustrating.. im not sure if its a bug in php
 386                                                 // or something the git-http-backend thing is doing..
 387                                                 // TODO: find out why this happens
 388                                                 $from_cgi_data = preg_replace("/^\r\n/", "", $from_cgi_data_t);
 389                                                 /*
 390                                                 if(strlen($from_cgi_data)!=strlen($from_cgi_data_t)) {
 391                                                         error_log("MOOOKS - we did trunc");
 392                                                 } else {
 393                                                         error_log("MOOOKS - we did not trunc");
 394                                                 }*/
 395                                                 $firstline = false;
 396                                         }
 397                                 }
 398
 399                                 if($from_cgi_data !== false && $from_cgi_data != "") {
 400                                         //error_log("send to client of size ".strlen($from_cgi_data));
 401                                         echo $from_cgi_data;
 402                                         ob_flush();
 403                                         flush();
 404                                 }
 405                                 $cgi_len = strlen($from_cgi_data);
 406                         } else {
 407                                 // error_log("cgi end");
 408                                 $cgi_len = 0;
 409                         }
 410
 411                         flush();
 412
 413                         if(feof($pipes[1])) $continue = false;
 414                         else {
 415                                 if($client_len == 0 && $cgi_len == 0) {
 416                                         usleep(200000);
 417                                         //error_log("sleep tick");
 418                                         $stlimit++;
 419                                         if($stlimit > 300) $continue = false; // if we get no output from git backend after 1 minute, we close..... something went wrong
 420                                 } else {
 421                                         $stlimit = 0;
 422                                         //error_log("sizes: $client_len, $cgi_len");
 423                                         if($cgi_len > 0) {
 424                                                 //error_log("from cgi: \"$from_cgi_data\"");
 425                                         }
 426                                 }
 427                         }
 428                 }
 429
 430
 431                 flush();
 432                 error_log("and im done...");
 433
 434                 //fclose($fl);
 435                 fclose($fh);
 436                 fclose($pipes[1]);
 437                 fclose($pipes[0]);
 438
 439                 exit(0);
 440 }
 441
 442
 443
 444 function gwvpmini_repoExists($name)
 445 {
 446         $repo_base = gwvpmini_getConfigVal("repodir");
 447
 448         if(file_exists("$repo_base/$name.git")) return true;
 449         else return false;
 450 }
 451
 452 // default perms:
 453 // 0 - anyone can clone/read, only owner can write
 454 // 1 - noone can clone/read, repo is visible (i.e. name), only owner can read/write repo
 455 // 2 - only owner can see anything
 456 function gwvpmini_createGitRepo($name, $ownerid, $desc, $defperms, $clonefrom, $isremoteclone)
 457 {
 458         global $cmd_line_tool,$git_cli_cmd,$php_cli_cmd;
 459
 460         $repo_base = gwvpmini_getConfigVal("repodir");
 461
 462         if($clonefrom !== false) {
 463                 error_log("how did i end up in clonefrom? $clonefrom");
 464                 if(!$isremoteclone) {
 465                         exec("$git_cli_cmd clone --bare $repo_base/$clonefrom.git $repo_base/$name.git >> /tmp/gitlog 2>&1");
 466                         gwvpmini_AddRepo($name, $desc, $ownerid, $defperms, $clonefrom);
 467                 } else {
 468                         // we do this from an outside call in the background
 469                         $cmd = "$php_cli_cmd $cmd_line_tool $clonefrom $name backgroundclone >> /tmp/gitlog 2>&1 &";
 470                         error_log("cmd called as $cmd");
 471                         exec($cmd);
 472                         gwvpmini_AddRepo($name, $desc, $ownerid, $defperms, $clonefrom);
 473                         $rn = gwvpmini_getRepo(null, $name, null);
 474                         $rid = $rn["id"];
 475                         gwvpmini_SetRepoCloning($rid);
 476                         gwvpmini_SendMessageByDb("info", "Background clone initiated for $name ($rid) from $clonefrom... your repo will be available once the background clone is finished", $ownerid);
 477                         return false;
 478                 }
 479         } else {
 480
 481         // phew, this works, but i tell you this - bundles arent quite as nice as they should be
 482         // error_log("would create $repo_base/$name.git");
 483                 exec("$git_cli_cmd init $repo_base/$name.git --bare >> /tmp/gitlog 2>&1");
 484                 chdir("$repo_base/$name.git");
 485                 exec("$git_cli_cmd update-server-info");
 486
 487                 // gwvpmini_AddRepo($reponame, $repodesc, $repoowner, $defaultperms = 0)
 488                 gwvpmini_AddRepo($name, $desc, $ownerid, $defperms, $clonefrom);
 489         }
 490
 491         return true;
 492 }
 493
 494
 495 ?>