2 uploader -- simplest form file uploader
3 Copyright (C) 2018-2021 Sergey Matveev <stargrave@stargrave.org>
5 This program is free software: you can redistribute it and/or modify
6 it under the terms of the GNU General Public License as published by
7 the Free Software Foundation, version 3 of the License.
9 This program is distributed in the hope that it will be useful,
10 but WITHOUT ANY WARRANTY; without even the implied warranty of
11 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 GNU General Public License for more details.
14 You should have received a copy of the GNU General Public License
15 along with this program. If not, see <http://www.gnu.org/licenses/>.
41 "go.cypherpunks.ru/recfile"
42 "go.cypherpunks.ru/tai64n/v2"
43 "golang.org/x/crypto/blake2b"
44 "golang.org/x/net/netutil"
48 WriteBufSize = 1 << 20
49 FileFieldName = "file"
50 CommentFieldName = "comment"
52 SendmailCmd = "/usr/sbin/sendmail"
56 Index = template.Must(template.New("index").Parse(`<html>
57 <head><title>Upload</title></head><body>
58 Example command line usage:
60 $ curl -F file=@somedata.tar.gpg [-F comment="optional comment"] http://.../upload/
61 $ b2sum somedata.tar.gpg # to verify BLAKE2b-512 checksum
63 <form enctype="multipart/form-data" action="/upload/" method="post">
64 <label for="file">File to upload:</label><br/>
65 <input name="file" type="file" name="{{.}}" /><br/>
66 <label for="comment">Optional comment:</label></br>
67 <textarea name="comment" cols="80" rows="25" name="comment"></textarea><br/>
68 <input type="submit" />
69 </form></body></html>`))
70 NotifyFromAddr *string
75 func notify(tai, filename string, size int64, comment string) {
77 if *NotifyToAddr == "" {
81 w := recfile.NewWriter(&rec)
83 recfile.Field{Name: "TAI64N", Value: tai},
84 recfile.Field{Name: "Size", Value: strconv.FormatInt(size, 10)},
85 recfile.Field{Name: "Filename", Value: filename},
87 w.WriteFieldMultiline("Comment", strings.Split(comment, "\n"))
88 cmd := exec.Command(SendmailCmd, *NotifyToAddr)
89 cmd.Stdin = io.MultiReader(
90 strings.NewReader(fmt.Sprintf(
95 Content-Type: text/plain; charset=utf-8
96 Content-Transfer-Encoding: base64
101 mime.BEncoding.Encode("UTF-8", fmt.Sprintf("%s (%d KiB)", filename, size/1024)),
103 strings.NewReader(base64.StdEncoding.EncodeToString(rec.Bytes())),
108 func upload(w http.ResponseWriter, r *http.Request) {
109 log.Println(r.RemoteAddr, "connected")
110 if r.Method == http.MethodGet {
111 if err := Index.Execute(w, FileFieldName); err != nil {
112 log.Println(r.RemoteAddr, err)
116 mr, err := r.MultipartReader()
118 log.Println(r.RemoteAddr, err)
121 p, err := mr.NextPart()
123 log.Println(r.RemoteAddr, err)
126 if p.FormName() != FileFieldName {
127 log.Println(r.RemoteAddr, "non file form field")
130 h, err := blake2b.New512(nil)
135 ts := new(tai64n.TAI64N)
137 tai := tai64n.Encode(ts[:])[1:]
138 fnOrig := p.FileName()
139 fd, err := os.OpenFile(tai+".part", os.O_WRONLY|os.O_CREATE|os.O_EXCL, 0666)
141 log.Println(r.RemoteAddr, tai, fnOrig, err)
144 fdBuf := bufio.NewWriterSize(fd, WriteBufSize)
145 mw := io.MultiWriter(fdBuf, h)
146 n, err := io.Copy(mw, p)
148 log.Println(r.RemoteAddr, tai, fnOrig, err)
153 log.Println(r.RemoteAddr, tai, fnOrig, "empty")
154 os.Remove(tai + ".part")
156 fmt.Fprintf(w, "Empty file")
159 if err = fdBuf.Flush(); err != nil {
160 log.Println(r.RemoteAddr, tai, fnOrig, err)
164 if err = fd.Sync(); err != nil {
165 log.Println(r.RemoteAddr, tai, fnOrig, err)
170 sum := hex.EncodeToString(h.Sum(nil))
171 if err = os.Rename(tai+".part", tai); err != nil {
172 log.Println(r.RemoteAddr, tai, fnOrig, n, sum, err)
176 wr := recfile.NewWriter(&rec)
177 if _, err = wr.WriteFields(
178 recfile.Field{Name: "TAI64N", Value: tai},
179 recfile.Field{Name: "Size", Value: strconv.FormatInt(n, 10)},
180 recfile.Field{Name: "Checksum", Value: sum},
182 log.Println(r.RemoteAddr, tai, fnOrig, n, sum, err)
186 log.Println(r.RemoteAddr, tai, fnOrig, n, sum)
189 wr = recfile.NewWriter(&rec)
190 if _, err = wr.WriteFields(
191 recfile.Field{Name: "Filename", Value: fnOrig},
193 log.Println(r.RemoteAddr, tai, fnOrig, n, sum, err)
198 p, err = mr.NextPart()
199 if err != nil || p.FormName() != CommentFieldName {
202 comment, err = ioutil.ReadAll(p)
203 if err != nil || len(comment) == 0 {
206 wr.WriteFieldMultiline("Comment", strings.Split(string(comment), "\n"))
210 go notify(tai, fnOrig, n, string(comment))
211 ioutil.WriteFile(tai+".rec", rec.Bytes(), os.FileMode(0666))
215 doUCSPI := flag.Bool("ucspi", false, "Work as UCSPI-TCP service")
216 bind := flag.String("bind", "[::]:8086", "Address to bind to")
217 conns := flag.Int("conns", 2, "Maximal number of connections")
218 NotifyFromAddr = flag.String("notify-from", "uploader@example.com", "Address notifications are sent to")
219 NotifyToAddr = flag.String("notify-to", "", "Address notifications are sent from")
221 log.SetFlags(log.Lshortfile)
223 log.SetOutput(os.Stdout)
225 if len(*NotifyFromAddr) == 0 && len(*NotifyToAddr) > 0 {
226 log.Fatalln("notify-from address can not be empty, if notify-to is set")
229 ReadHeaderTimeout: 10 * time.Second,
230 MaxHeaderBytes: 10 * (1 << 10),
232 s.SetKeepAlivesEnabled(false)
233 http.HandleFunc("/upload/", upload)
236 s.ConnState = connStater
238 if _, ok := err.(UCSPIAlreadyAccepted); !ok {
243 ln, err := net.Listen("tcp", *bind)
247 log.Println("listening", *bind)
248 ln = netutil.LimitListener(ln, *conns)
249 if err = s.Serve(ln); err != nil {