my ($query) = new CGI;
-my ($doci) = ($query->param('doc') =~ /^\s*(.*?\.txt)\s*$/);
-my ($doc) = "../documentation/$doci";
+my ($doc) = ($query->param('doc') =~ /^\s*(.*?\.txt)\s*$/);
+$doc = "../documentation/".$doc;
-print "content-type: text/html\n\n";
+print "Content-type: text/html\n\n";
print <<"END";
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
docs.cgi
Web-based text file viewer and formatter.
Created by pjm2 19/10/2000
- Last modified 19/10/2000
+ Last modified 02/11/2000
-->
<html>
<td valign="top">
END
-&print_file($left);
+&print_html($left);
print <<"END";
<td valign="top">
END
-&print_file($title);
-
-print "<PRE>\n";
+&print_html($title);
&print_file($doc);
-print "</PRE>\n";
-
-&print_file($bottom);
+&print_html($bottom);
print <<"END";
exit 0;
+# Print a file, whilst escaping HTML: -
sub print_file ($) {
- my ($filename) = @_;
- print `cat $filename`;
-}
-
-sub print_file_old ($) {
my ($filename) = @_;
open(FILE, $filename) or die "Cannot open $filename: $!\n";
- while (my ($line) = <FILE>) {
- print $line;
+ print "<pre>\n";
+ # Use $_ implicitly throughout.
+ while (<FILE>) {
+ # Must do the next line first!
+ s/&/&/g;
+ s/</</g;
+ s/>/>/g;
+ s/"/"/g;
+ print;
}
+ print "</pre>";
}
+# Print a file without escaping HTML: -
+sub print_html ($) {
+ my ($filename) = @_;
+ print `cat $filename`;
+}