Directory Listing v1.9 RC1 (Update: 07-08-07)

[sandman]

Why are they .cgi pages? This is AutoIt, no?

[floker]

Why are they .cgi pages? This is AutoIt, no?

I've downloaded the zip file on the first page of this topic.

When I unzip it I get two directories : cgi-bin and data...

In the directory cgi-bin there is a file called list.cgi

That's all I get, can someone help me please

[Dhilip89]

Hi,

I'm a new user of AutoIt, I have to use it for my work and I have to say it's pretty cool.

This script seems to be cool to, but can someone please tell me how I can use it? I've downloaded the zip, there is a cgi file in it. What do I have to do with it?

I'm running XAMPP on my computer, so Apache is already running...now what?

thx

I'm using XAMPP too

Well, you need to do somethings to let this script work properly on your server.

Edit the blue color text:

First line of the script:

#!D:/inetpub/AutoIt3/AutoIt3.exe /ErrorStdOut

For Example:

#!C:/Program Files/AutoIt3/AutoIt3.exe /ErrorStdOut

Depend on where the AutoIt interpreter executable placed.

Variables:

Global $_SCRIPT_NAME = EnvGet('SCRIPT_NAME')

Global $_HTTP_HOST = EnvGet('HTTP_HOST')

Global $Interpreter_Version = FileGetVersion(@AutoItExe)

Global $Mask = '*'

Global $Encoding = 'unicode'

Global $ScriptVersion = '1.7'

Global $Parent_Directory

Global $Query = 'dir'

Global $RootDir = 'D:\inetpub\htdocs'

Global $URLEncodeMode = 2 ; 0 = Practical Encoding, 1 = Encode Everything, 2 = RFC 1738 Encoding (Recommended)

The blue colored text D:\inetpub\htdocs is the http root for your server.

just change it to your http root directory, for example:

C:\xampp\htdocs

Put list.cgi to your cgi-bin folder.

Copy folder named data to your http root directory.

Then try it on your web browser to see it worked or not.

Edited May 10, 2007 by Dhilip

[Dhilip89]

You should provide protection from people snooping around the hard drive, even if they can't download the stuff it is still a security risk. This is what I mean.

Thanks for your feedback, I fixed that hole.

[Dhilip89]

Why are they .cgi pages? This is AutoIt, no?

Ofcourse this is AutoIt v3 script.

It just used .cgi extension and added the first line for locating AutoIt v3 interpreter to work with Apache CGI.

Edited May 10, 2007 by Dhilip

[Dhilip89]

Download the updated list.cgi (Version 1.7b) to fix current security problem.

See first post.

Edited May 10, 2007 by Dhilip

[Dhilip89]

Version 1.8 released!

See first post

[Dhilip89]

Version 1.8 R2 released!

See first post

[Gif]

Version 1.8 R2 released!

See first post

Great script

[sandman]

It's great to see that this is actually being put to a good use on some sites for an actual utility. Great job, Dhilip!

[Dhilip89]

Thanks for positive feedback!

Anyone who interested can improve the code then post to here.

[AutoItKing]

@Dhilip: I see that you're using AutoIt with Apache. I have tried setting it up, but fail everytime. How did you do it?

Edited May 22, 2007 by AutoItKing

[theguy0000]

agreed, I would definitely like to know that.

[Dhilip89]

@Dhilip: I see that you're using AutoIt with Apache. I have tried setting it up, but fail everytime. How did you do it?

What type of error do you received when using AutoIt with Apache ?

[AutoItKing]

It says "Object Not Found."

What did you add to the httpd.conf file? Or any other config files?

[AutoItKing]

A suggestion:

Add a black list feature. To hide files and directories. That would be really cool.

[AutoItKing]

Actually, just add this to lines 272 and 295:

And Not StringInStr($Attribute, "H")

And then any files or directories you want hidden, just use Explorer to apply it.

[Dhilip89]

It says "Object Not Found."

What did you add to the httpd.conf file? Or any other config files?

404 Object Not Found ?

Maybe you missed somethings.

My httpd.conf

<IfModule alias_module>

#

# Redirect: Allows you to tell clients about documents that used to

# exist in your server's namespace, but do not anymore. The client

# will make a new request for the document at its new location.

# Example:

# Redirect permanent /foo http://www.example.com/bar

#

# Alias: Maps web paths into filesystem paths and is used to

# access content that does not live under the DocumentRoot.

# Example:

# Alias /webpath /full/filesystem/path

#

# If you include a trailing / on /webpath then the server will

# require it to be present in the URL. You will also likely

# need to provide a <Directory> section to allow access to

# the filesystem path.

#

# ScriptAlias: This controls which directories contain server scripts.

# ScriptAliases are essentially the same as Aliases, except that

# documents in the target directory are treated as applications and

# run by the server when requested rather than as documents sent to the

# client. The same rules about trailing "/" apply to ScriptAlias

# directives as to Alias.

#

ScriptAlias /cgi-bin/ "D:/inetpub/cgi-bin/"

</IfModule>

#

# "D:/inetpub/cgi-bin" should be changed to whatever your ScriptAliased

# CGI directory exists, if you have that configured.

#

<Directory "D:/inetpub/cgi-bin">

AllowOverride None

Options None

Order allow,deny

Allow from all

</Directory>

My list.cgi script is put inside D:/inetpub/cgi-bin

A suggestion:

Add a black list feature. To hide files and directories. That would be really cool.

Actually, just add this to lines 272 and 295:

And Not StringInStr($Attribute, "H")

And then any files or directories you want hidden, just use Explorer to apply it.

Thanks for the tips, I'll do that when I have time to update my code. Edited May 23, 2007 by Dhilip

[AutoItKing]

I want to run it just like it would run on Abyss. Putting all the scripts in cgi-bin is just to tedius. And it's not flexible enough.

It would be great if someone could make a mod for Apache to do this. Someone with intimate Apache modding know-how.

[theguy0000]

I've tried multiple times, but the dumb apache config file, not to mention the docs, just give me a headache.