From 3202d55d70f55fba3a0af0efa475cbbe22118658 Mon Sep 17 00:00:00 2001
From: john30 <ebusd@ebusd.eu>
Date: Sun, 6 Oct 2019 13:05:32 +0200
Subject: [PATCH] added config service

---
 contrib/config/index.php | 61 ++++++++++++++++++++++++++++++++++++++++
 1 file changed, 61 insertions(+)
 create mode 100644 contrib/config/index.php

diff --git a/contrib/config/index.php b/contrib/config/index.php
new file mode 100644
index 00000000..b318a033
--- /dev/null
+++ b/contrib/config/index.php
@@ -0,0 +1,61 @@
+<?php
+$agent = $_SERVER['HTTP_USER_AGENT'];
+if (substr($agent, 0, 5)!=='ebusd') {
+  header('HTTP/1.1 404 Not Found');
+  exit;
+}
+$p=@$_REQUEST['p'];
+$e=@$_REQUEST['t'];
+$a=@$_REQUEST['a'];
+if ($p && $p[0]==='/') {
+  $p=substr($p, 1);
+}
+if ($p && $p[strlen($p)-1]==='/') {
+  $p=substr($p, 0, strlen($p)-1);
+}
+if ($p && $p[0]!=='/' && strpos($p, '..')===FALSE && is_file($p)) {
+  header('Content-Type: text/comma-separated-values');
+  header('Cache-Control: Private');
+  $t=@filemtime($p);
+  if ($t) {
+    header('Last-Modified: '.gmdate('D, d M Y H:i:s', $t).' GMT');
+  }
+  ob_start();
+  echo @file_get_contents($p);
+  header('Content-Length: '.ob_get_length());
+  ob_end_flush();
+  exit;
+}
+if (!$e) {
+  header('HTTP/1.1 404 Not Found');
+  exit;
+}
+$e=".$e";
+if (!$p) {
+  $p='.';
+} else if (strpos($p, '/')!==FALSE || strpos($p, '\\')!==FALSE || strpos($p, '..')!==FALSE) {
+  header('HTTP/1.1 400 Bad Request');
+  exit;
+}
+$prefix=$a ? $a==='-' ? $a : substr(dechex(0x100|hexdec($a)), 1).'.' : NULL;
+$dir=@opendir($p);
+if ($dir===FALSE) {
+  header('HTTP/1.1 404 Not Found');
+  exit;
+}
+header('Content-Type: text/comma-separated-values');
+header('Cache-Control: Private');
+ob_start();
+while(($f=@readdir())!==FALSE) {
+  if (!$f || !is_file($p.'/'.$f) || substr($f, -strlen($e))!==$e) {
+    continue;
+  }
+  if ($f!=='_templates'.$e && $prefix && ($prefix==='-' ? strpos($f, '.') === 2 : substr($f, 0, strlen($prefix))!==$prefix)) {
+    continue;
+  }
+  echo "$f\n";
+}
+@closedir($dir);
+header('Content-Length: '.ob_get_length());
+ob_end_flush();
+?>