1 | from django.core.exceptions import Http404, ImproperlyConfigured |
---|
2 | from django.utils.httpwrappers import HttpResponse |
---|
3 | from django.conf import settings |
---|
4 | import os |
---|
5 | import posixpath |
---|
6 | import urllib |
---|
7 | import mimetypes |
---|
8 | |
---|
9 | def list_directory(path, fullpath): |
---|
10 | files = os.listdir(fullpath) |
---|
11 | response = """ |
---|
12 | <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"> |
---|
13 | <html> |
---|
14 | <head> |
---|
15 | <title>Index of %s/</title> |
---|
16 | </head> |
---|
17 | <body> |
---|
18 | <h1>Index of %s/</h1> |
---|
19 | <pre> |
---|
20 | """ % (path, path) |
---|
21 | for f in files: |
---|
22 | if os.path.isdir(os.path.join(fullpath, f)): |
---|
23 | f += '/' |
---|
24 | response += '<a href="%s">%s</a>\n' % (f, f) |
---|
25 | |
---|
26 | response += """ |
---|
27 | </pre> |
---|
28 | </body> |
---|
29 | </html> |
---|
30 | """ |
---|
31 | return response |
---|
32 | |
---|
33 | |
---|
34 | def serve(request, path): |
---|
35 | if not hasattr(settings, 'DOCUMENT_ROOT'): |
---|
36 | raise ImproperlyConfigured, "DOCUMENT_ROOT not set in settings file" |
---|
37 | |
---|
38 | # Clean up path given in URL. |
---|
39 | # Algorithm taken from SimpleHTTPServer.translate_path() |
---|
40 | # Should only allow files below DOCUMENT_ROOT to be accessed. |
---|
41 | path = posixpath.normpath(urllib.unquote(path)) |
---|
42 | parts = path.split('/') |
---|
43 | parts = filter(None, parts) |
---|
44 | path = "" |
---|
45 | for part in parts: |
---|
46 | drive, part = os.path.splitdrive(part) |
---|
47 | head, part = os.path.split(part) |
---|
48 | if part in (os.curdir, os.pardir): continue # Strip off . and .. |
---|
49 | path = os.path.join(path, part) |
---|
50 | |
---|
51 | fullpath = os.path.join(settings.DOCUMENT_ROOT, path) |
---|
52 | try: |
---|
53 | if os.path.isdir(fullpath): |
---|
54 | response = HttpResponse(list_directory(path, fullpath), |
---|
55 | mimetype="text/html") |
---|
56 | else: |
---|
57 | mimetype = mimetypes.guess_type(fullpath)[0] |
---|
58 | f = open(fullpath) |
---|
59 | response = HttpResponse(f.read(), mimetype=mimetype) |
---|
60 | f.close() |
---|
61 | |
---|
62 | return response |
---|
63 | except IOError: |
---|
64 | raise Http404 |
---|