#!/usr/bin/perl
# This file is part of lainsafe.

# lainsafe is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.

# lainsafe is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.

# You should have received a copy of the GNU General Public License
# along with lainsafe.  If not, see <https://www.gnu.org/licenses/>.

use CGI;
use CGI::Carp qw(fatalsToBrowser);
use Time::HiRes qw(gettimeofday);
my $q = CGI->new;

my $filename = $q->param('file');

my $upload_dir = "files/";
print $q->header();

$size    = $ENV{CONTENT_LENGTH};

# Configuration

our $MAX_SIZE = 1024*1024*100;		    # Change for your size
our $MAX_SIZE_MB = $MAX_SIZE / 1024 / 1024; # Don't change this
our @not_allowed_extensions = qw(sh out exe);

if ($filename eq "" || $ENV{REQUEST_METHOD} eq "GET") {
  print("What are you looking for?");
  exit;
}

if ($size > $MAX_SIZE) {
  print("Max size for a file is $MAX_SIZE_MB MBs");
  exit;
}


my @chars = ("A"..."z","a"..."z");
my $dirname;
my $extension = $filename;

$dirname .= $chars[rand @chars] for 1..8;
$extension =~ s/.*\.//;
$filename .= ".notcgi" if $extension eq "cgi";

mkdir("$upload_dir/$dirname");
my $upload_filehandle = $q->upload("file");

# onion urls will be http
my $prot = length $ENV{HTTPS} ? "https" : "http";

my $allowed_extension = 1;

foreach (@not_allowed_extensions) {
  if ($filename =~ /\.$_$/i) {
    $allowed_extension = 0;
    last;
  }

}

if ($allowed_extension) {

  open(FILE,">$upload_dir/$dirname/$filename");
  binmode(FILE);
  
  while (<$upload_filehandle>) {
    print FILE;
  }
  
  close FILE;
  $filename =~ s/ /%20/g;
  print $prot. "://" . $ENV{HTTP_HOST} . "/$upload_dir$dirname/$filename";
} else {
  print "The file extension .$extension is not allowed in this instance.";
}