Differences From Artifact [3fb9ffbe5f]:

• File src/zip.c — part of check-in [fa6e993017] at 2008-08-12 03:27:54 on branch trunk — New <b>Zip</b> permission. This permission allow someone to download a zipped artifact via the wiki's <tt>/zip</tt> URL. It can given the user <tt>nobody</tt> to allow automatic package builder to download the sources they know from <tt>fossil-scm.org</tt> or other servers without any intervening login necessary. As the <tt>/zip</tt> page do not expose anything, a spider should have a hard time to crawl thru the project using this URL. So IMO it does not open a break-in hole for spiders. (user: cle size: 9519)

To Artifact [7a8370c8ce]:

• File src/zip.c — part of check-in [417dd898ab] at 2008-08-13 11:57:17 on branch trunk — Allow an alternative URL syntax for downloading artifacts via the <tt>/zip</tt> page. The original way is: <verbatim> http://localhost:8080/zip/fa6e9930177e84ce089b30ad768c454a012364f7.zip </verbatim> which will store the artifact in the file <tt>a6e9930177e84ce089b30ad768c454a012364f7.zip</tt>. Alternatively it is now possible to download the artifact in e.g. the file <tt>fossil.zip</tt> via the URL: <verbatim> http://localhost:8080/zip/fossil.zip?rid=fa6e9930177e84ce089b30ad768c454a012364f7 </verbatim> (user: hintze size: 9630)

349
350
351
352
353
354
355
356
357
358
359
360
361
362
363


364
365
366
367
368
369
370
371
372
373
374
375
376
377

378
379
380
381

** URL: /zip/RID.zip
**
** Generate a ZIP archive for the baseline.
** Return that ZIP archive as the HTTP reply content.
*/
void baseline_zip_page(void){
  int rid;
  char *zName;
  int nName;
  Blob zip;

  login_check_credentials();
  if( !g.okZip && (!g.okRead || !g.okHistory) ){ login_needed(); return; }
  zName = mprintf("%s", PD("name",""));
  nName = strlen(zName);


  for(nName=strlen(zName)-1; nName>5; nName--){
    if( zName[nName]=='.' ){
      zName[nName] = 0;
      break;
    }
  }
  rid = name_to_rid(zName);
  if( rid==0 ){
    @ Not found
    return;
  }
  if( nName>10 ) zName[10] = 0;
  zip_of_baseline(rid, &zip, zName);
  free( zName );

  cgi_set_content(&zip);
  cgi_set_content_type("application/zip");
  cgi_reply();
}

|
|






>
>






|




|


>

349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384

** URL: /zip/RID.zip
**
** Generate a ZIP archive for the baseline.
** Return that ZIP archive as the HTTP reply content.
*/
void baseline_zip_page(void){
  int rid;
  char *zName, *zRid;
  int nName, nRid;
  Blob zip;

  login_check_credentials();
  if( !g.okZip && (!g.okRead || !g.okHistory) ){ login_needed(); return; }
  zName = mprintf("%s", PD("name",""));
  nName = strlen(zName);
  zRid = mprintf("%s", PD("rid",""));
  nRid = strlen(zRid);
  for(nName=strlen(zName)-1; nName>5; nName--){
    if( zName[nName]=='.' ){
      zName[nName] = 0;
      break;
    }
  }
  rid = name_to_rid(nRid?zRid:zName);
  if( rid==0 ){
    @ Not found
    return;
  }
  if( nRid==0 && nName>10 ) zName[10] = 0;
  zip_of_baseline(rid, &zip, zName);
  free( zName );
  free( zRid );
  cgi_set_content(&zip);
  cgi_set_content_type("application/zip");
  cgi_reply();
}