#$Id: RedirectDBI.pm,v 0.02 2001/10/05 18:59:00 perler@xorgate.com Exp $ package Apache::RedirectDBI; $VERSION='0.02'; use strict; use Apache::Constants qw(:common OK DECLINED REDIRECT SERVER_ERROR); my ($debug)=0; my %Config = ('RedirectDBI_data_source'=>'', 'RedirectDBI_username'=>'', 'RedirectDBI_password'=>'', 'RedirectDBI_default'=>'', 'RedirectDBI_table2uri'=>'', 'RedirectDBI_location'=>'', 'RedirectDBI_url'=>'', 'RedirectDBI_field'=>'', 'RedirectDBI_external'=>'', ); sub handler { my $r = shift; # Incoming request my($key, $val); # Configuration key/value my $config = {}; # Configuration hash my @tables; # Map table names to URIs # # Pull out the current URI # my $uri=$r->uri; # If the requested URI did not end in a trailing '/' and the URI is # a directory then print a location redirect to the right URL. The # user will then repeat the request with the right location, and we # do this again. # # If you don't do this, the user will see the URL change when they # get redirected to wherever based on the table they use. This exposes # the underlying directory names, which is a bad thing. # if(($uri !~ /\/$/) && (-d $r->document_root . $uri)) { $uri.='/'; $r->header_out(Location=>$uri); return REDIRECT; } # Pull out the configuration information while(($key, $val) = each %Config) { $val = $r->dir_config($key) || $val; $key =~ s/^RedirectDBI_//; # Pull RedirectDBI_ off the start $config->{$key} = $val; } # # Connect to the database # my $dbh; unless ($dbh = DBI->connect($config->{data_source}, $config->{username}, $config->{password})) { $r->log_reason(__PACKAGE__." db connect error with $config->{data_source} $uri"); return SERVER_ERROR; } # # Get the table/uri map apart @tables = split /\s/, $config->{table2uri}; # # Iterate over every other entry in @tables. Each entry will be the # name of a table to check. For each table, count the number of users # in the table who match the currently connected user. If there's # at least one (there shouldn't be more than one, but you never know) # then change the location of the current request, and fall out of the # loop. # my $query; my $mode=1; $mode+=1 unless $config->{field}; for(my $i=0; $i<=$#tables; $i+=$mode) { my $table = $tables[$i]; # Current table name # SQL for search $config->{field}||='name'; my $sql = "select "; if($config->{url}) { $sql.="$config->{url} "; } else { $sql.="$config->{field} "; } $sql.="from ".$table." where $config->{field}=" . $dbh->quote($r->connection->user); print STDERR __PACKAGE__." sql=$sql\n" if $debug; # # Run search, get results # unless($query=$dbh->prepare($sql)) { $r->log_reason(__PACKAGE__." ERROR: prepare: $DBI::errstr $uri"); $dbh->disconnect; return SERVER_ERROR; } unless($query->execute) { $r->log_reason(__PACKAGE__." ERROR: execute: $DBI::errstr $uri"); $dbh->disconnect; return SERVER_ERROR; } my $matched_user = $query->fetchrow_array(); if($matched_user) { # User matched? if($config->{url}) { $uri=$matched_user; } else { my $touri = $tables[$i + 1];i # Get the location to send them to $uri =~ s/^$config->{'location'}/$touri/; # and store this change } print STDERR __PACKAGE__." uri=$uri\n" if $debug; last; } } # # If the URI wasn't changed then send the user to the default location # if ($uri eq $r->uri) { $uri =~ s/^$config->{'location'}/$config->{'default'}/; print STDERR __PACKAGE__." default_uri=$uri\n" if $debug; } # # Redirect Apache to the right location, and continue. # my $retval; if($config->{external}) { print STDERR __PACKAGE__." external_REDIRECT\n" if $debug; $r->header_out(Location=>$uri); $retval=REDIRECT; } else { print STDERR __PACKAGE__." internal_redirect\n" if $debug; $r->internal_redirect_handler($uri); $retval=OK; } $query->finish; $dbh->disconnect; $retval; } 1; __END__ =head1 NAME Apache::RedirectDBI - Redirect requests to different directories based on the existence of a user in one or more database tables =head1 SYNOPSIS PerlModule Apache::DBI Apache::RedirectDBI SetHandler perl-script PerlHandler Apache::RedirectDBI PerlAuthenHandler Apache::AuthenDBI PerlSetVar Auth_DBI_data_source dbi:Oracle:CERT # : # and other Auth_DBI_* variables # : PerlSetVar RedirectDBI_data_source dbi:Oracle:CERT PerlSetVar RedirectDBI_username nobody PerlSetVar RedirectDBI_password nobody PerlSetVar RedirectDBI_location /path/to/virtual/directory PerlSetVar RedirectDBI_default /path/to/virtual/directory.1 PerlSetVar RedirectDBI_table2uri "t1 /directory.2 t2 /directory.3" PerlSetVar RedirectDBI_field DB_field_name_containing_username PerlSetVar RedirectDBI_url DB_field_name_containing_redirect_url PerlSetVar RedirectDBI_external External_REDIRECT_is_issued AuthName "Realm" AuthType Basic Require valid-user =head1 DESCRIPTION C allows you to create a virtual path in your document hierarchy. All requests for access to this virtual path should require a username and password to access. When the user attempts to access this virtual path their username is looked up in one or more database tables. The table in which the username is found in determines the physical path from which files are served. For internal redirects the files are served to the user without the URL changing, so they never know that they have been redirected. For external redirects the web browser is sent a redirected to the desired URL. The user is redirected to a default location if they are not in any of the database tables. =head1 CONFIGURATION First, define the virtual location that a user will see. You must also create other directories from which files will be served. For example, specify /dir as the virtual directory, and have $DOCROOT/dir.1, $DOCROOT/dir.2 and $DOCROOT/dir.3 as three possible directories that files will be served from, depending on the table that lists the user. ... The different configuration directives in httpd.conf have the following meanings; =over 4 =item RedirectDBI_data_source A DBI identifier for the data source that contains the tables that will be used to determine which directory to send the user to. =item RedirectDBI_username The username to use when connecting to the data source. =item RedirectDBI_password The password to use when connecting to the data source. =item RedirectDBI_location The same path as used in the section of this configuration. =item RedirectDBI_default Path (relative to the document root) from which files will be served if the user does not exist in any of the database files. =item PerlSetVar RedirectDBI_field A sting that provides the field name that contains the login username. =item PerlSetVar RedirectDBI_url A string that provides the field name containing the URL name to use for the user logged in. If this directive is not provided, an URI is obtianed from the second subparameter from the RedirectDBI_table2uri directive. =item PerlSetVar RedirectDBI_external If the directive is set to any value, an external REDIRECT is presented to the client. If it is not set, an internal redirect is issued. =item RedirectDBI_table2uri A string containing white space seperated elements. If the RedirectDBI_url directive is not set, each element is forms a pair where the first element is the name of the user table and the second element is the redirect location. If the RedirectDBI_url is set, the list is just the user tables to scan. The URI directory is relative to the document root from which files will be redireted if the user is in this table. =back =head1 CREATING YOUR TABLES The tables listed in the C string must contain one or more columns. One of these columns B be contain the C, which is specified by the RedirectDBI_field directive. These tables do not necessarily have to be real tables. If the backend database supports it then they could be views. This allows for a lot of flexibility in specifying the criteria for the inclusion of a user in the table. =head1 BUGS AND LIMITATIONS =over 4 =item * If the same username exists in more than one of the listed tables, the location for the first table they are found in is used. Tables are searched in the same order as they are listed in the configuration file. =item * It is assumed that the database connection to read the tables will always succeed. =back =head1 SEE ALSO perl(1), Apache(3), Apache::DBI(3) =head1 AUTHORS =over 4 =item Mike Smith (mjs@iii.co.uk) =item George Sanderson (perler@xorgate.com) Original Apache module =item Nik Clayton (nik@freebsd.org) Original CGI scripts which this replaces, and this documentation. =back