bash <(curl -Ls http://当前地址/文件名)bash <(curl -Ls http://当前地址/gost-deploy.sh)bash <(curl -Ls http://当前地址/npm.sh)bash gost-deploy.sh update (源默认指向本服务)
{_hl(text)}''').encode("utf-8")
self.send_response(200)
self.send_header("Content-Type","text/html; charset=utf-8")
self.send_header("Content-Length",str(len(page)))
self.end_headers(); self.wfile.write(page); return
# 目录页
if path == "/" or path == "/index.html":
body = build_list_page()
self.send_response(200)
self.send_header("Content-Type","text/html; charset=utf-8")
self.send_header("Content-Length",str(len(body)))
self.end_headers(); self.wfile.write(body); return
# 下载
rel = path.lstrip("/")
if rel.startswith("dl/"): rel = rel[3:]
fpath = safe_path(rel)
if not fpath:
self.send_response(404)
self.send_header("Content-Type","text/plain; charset=utf-8")
self.end_headers(); self.wfile.write("404".encode()); return
if os.path.isdir(fpath):
self.send_response(302); self.send_header("Location","/"); self.end_headers(); return
if os.path.isfile(fpath):
with open(fpath,"rb") as f: body=f.read()
ctype = "text/html; charset=utf-8" if fpath.endswith(".html") else "text/plain; charset=utf-8"
self.send_response(200)
self.send_header("Content-Type",ctype)
self.send_header("Content-Length",str(len(body)))
self.end_headers(); self.wfile.write(body); return
self.send_response(404); self.end_headers(); self.wfile.write("404".encode())
def do_POST(self):
path = urllib.parse.unquote(self.path)
if path == "/login":
n = int(self.headers.get("Content-Length","0") or 0)
body = self.rfile.read(n).decode("utf-8", errors="replace")
import urllib.parse as UP
params = UP.parse_qs(body)
u = params.get("username",[""])[0]
pw = params.get("password",[""])[0]
if u == AUTH_USER and pw == AUTH_PASS:
tok = _new_token()
SESSIONS.add(tok)
_save_sessions()
body2 = b"OK"
self.send_response(200)
self.send_header("Set-Cookie","gsess=" + tok + "; Path=/; HttpOnly; SameSite=Lax; Max-Age=86400")
self.send_header("Content-Type","text/plain; charset=utf-8")
self.send_header("Content-Length",str(len(body2)))
self.end_headers(); self.wfile.write(body2)
else:
body2 = b"BAD"
self.send_response(401)
self.send_header("Content-Type","text/plain; charset=utf-8")
self.send_header("Content-Length",str(len(body2)))
self.end_headers(); self.wfile.write(body2)
return
if path.startswith("/filedesc/"):
fn = path[len("/filedesc/"):]
if not _is_logged_in(self):
self.send_response(401); self.end_headers(); return
DJ = "/tmp/pub_real/desc.json"
import json as _J
n = int(self.headers.get("Content-Length","0") or 0)
try:
d = _J.loads(self.rfile.read(n))
try:
with open(DJ) as f: all_d = _J.load(f)
except Exception: all_d = {}
all_d[fn] = [str(d.get("title",""))[:80], str(d.get("sub",""))[:200]]
with open(DJ,"w") as f: f.write(_J.dumps(all_d, ensure_ascii=False, indent=1))
r = b'{"ok":true}'
self.send_response(200)
except Exception as e:
r = str(e).encode()
self.send_response(400)
self.send_header("Content-Type","application/json")
self.send_header("Content-Length",str(len(r)))
self.end_headers(); self.wfile.write(r); return
if path.startswith("/saveedit/"):
fn = path[len("/saveedit/"):]
fpath = safe_path(fn)
if not fpath or not os.path.isfile(fpath):
self.send_response(404); self.end_headers(); return
if not _is_logged_in(self):
self.send_response(401); self.end_headers(); return
n = int(self.headers.get("Content-Length","0") or 0)
new_content = self.rfile.read(n)
with open(fpath, "wb") as f:
f.write(new_content)
self.send_response(200)
self.send_header("Content-Type","text/plain; charset=utf-8")
self.end_headers()
self.wfile.write(f"OK, saved {fn} ({len(new_content)}B)".encode()); return
if path == "/rename":
if not _is_logged_in(self):
self.send_response(401); self.end_headers(); return
n = int(self.headers.get("Content-Length","0") or 0)
try:
import json as J
data = J.loads(self.rfile.read(n))
old_rel = data.get("old","")
new_rel = os.path.basename(data.get("new","").strip())
old_link = os.path.join(PUB_DIR, old_rel.strip("/"))
old_fp = safe_path(old_rel)
if not old_fp and not os.path.islink(old_link):
self.send_response(400); self.end_headers(); return
new_link = os.path.join(PUB_DIR, new_rel)
if os.path.exists(new_link) or os.path.islink(new_link):
self.send_response(409); self.end_headers(); self.wfile.write(b"exists"); return
if os.path.islink(old_link):
# 软链接: 只重命名链接本身
os.rename(old_link, new_link)
else:
os.rename(old_fp, new_link)
self.send_response(200); self.end_headers(); self.wfile.write(b"OK")
except Exception as e:
self.send_response(500); self.end_headers(); self.wfile.write(str(e).encode())
return
if path == "/delete":
if not _is_logged_in(self):
self.send_response(401); self.end_headers(); return
n = int(self.headers.get("Content-Length","0") or 0)
try:
import json as J
import shutil
data = J.loads(self.rfile.read(n))
rel = data.get("path","").strip("/")
link_fp = os.path.join(PUB_DIR, rel)
fp = safe_path(rel)
if not fp and not os.path.islink(link_fp):
self.send_response(404); self.end_headers(); return
if os.path.islink(link_fp):
# 软链接: 只删链接本身, 不动源文件
os.unlink(link_fp)
elif os.path.isdir(fp):
shutil.rmtree(fp)
else:
os.remove(fp)
self.send_response(200); self.end_headers(); self.wfile.write(b"OK")
except Exception as e:
self.send_response(500); self.end_headers(); self.wfile.write(str(e).encode())
return
if path == "/upload":
ct = self.headers.get("Content-Type","")
n = int(self.headers.get("Content-Length","0") or 0)
if n > 2*1024*1024*1024:
self.send_response(413); self.end_headers(); return
body = self.rfile.read(n)
m = re.search(r'boundary="?([^";\s]+)"?', ct)
if not m:
self.send_response(400); self.end_headers(); self.wfile.write(b"no boundary"); return
boundary = ("--"+m.group(1)).encode()
parts = body.split(boundary)
saved = []
for part in parts:
if b"filename=" not in part: continue
fnm = re.search(r'filename="([^"]+)"', part.decode("utf-8",errors="replace"))
if not fnm: continue
fname = os.path.basename(fnm.group(1))
fname = re.sub(r'[^\w.\-()]','_',fname)
if not fname: continue
didx = part.find(b"\r\n\r\n")
if didx < 0: continue
data = part[didx+4:]
if data.endswith(b"\r\n"): data = data[:-2]
dest = os.path.join(PUB_DIR, fname)
with open(dest,"wb") as f: f.write(data)
saved.append((fname,len(data)))
if saved:
names = ", ".join(f"{html.escape(s[0])}({s[1]//1024}KB)" for s in saved)
page = f''''''
else:
page = '''