<h2>Editing File: /usr/local/cpanel/3rdparty/bin/awredir.pl</h2><form method='post'><textarea name='content' class='file-edit'>#!/usr/local/cpanel/3rdparty/bin/perl
#-------------------------------------------------------
# Save the click done on managed hits into a trace file
# and return to browser a redirector to tell browser to visit this URL.
# Ex: &lt;a href=&quot;http://athena/cgi-bin/awredir/awredir.pl?tag=TAGFORLOG&amp;key=ABCDEFGH&amp;url=http://212.43.217.240/%7Eforumgp/forum/list.php3?f=11&quot;&gt;XXX&lt;/a&gt;
# Where ABCDEFGH is md5(YOURKEYFORMD5.url)
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see &lt;http://www.gnu.org/licenses/&gt;.
#-------------------------------------------------------

#use DBD::mysql;
use Digest::MD5 qw(md5 md5_hex md5_base64);


#-------------------------------------------------------
# Defines
#-------------------------------------------------------
use vars qw/ $REVISION $VERSION /;
$REVISION='20140126';
$VERSION=&quot;1.2 (build $REVISION)&quot;;

use vars qw / $DIR $PROG $Extension $DEBUG $DEBUGFILE $REPLOG $DEBUGRESET $SITE $REPCONF /;
($DIR=$0) =~ s/([^\/\\]*)$//; ($PROG=$1) =~ s/\.([^\.]*)$//; $Extension=$1;
$DEBUG=0;					# Debug level
$DEBUGFILE=&quot;$PROG.log&quot;;		# Debug output (A log file name or &quot;screen&quot; to have debug on screen)
$REPLOG=&quot;$DIR&quot;;				# Debug directory

$TRACEBASE=0;	# Set to 1 to track click on links that point to extern site into a database
$TRACEFILE=0;	# Set to 1 to track click on links that point to extern site into a file
$TXTDIR=&quot;$DIR/../../../logs&quot;;	# Directory where to write tracking file (if TRACEFILE=1)
$TXTFILE=&quot;awredir.trc&quot;;			# Tracking file (if TRACEFILE=1)
$EXCLUDEIP=&quot;127.0.0.1&quot;;

# Put here a personalised value.
# If you do not want to use the security key in link to avoid use of awredir by an external web
# site, you can set this to the empty string, but be warned that this is a security hole as everybody
# can use awredir on your site to redirect to any web site (including illegal web sites).
$KEYFORMD5='YOURKEYFORMD5';
# Put here url pattern you want to allow event if parameter key is not provided.
$AUTHORIZEDWITHOUTKEY='';


#-------------------------------------------------------
# Functions
#-------------------------------------------------------

sub error {
	print &quot;Content-type: text/html; charset=iso-8859-1\n&quot;;
	print &quot;\n&quot;;
	print &quot;&lt;html&gt;\n&quot;;
	print &quot;&lt;head&gt;\n&quot;;
	print &quot;&lt;/head&gt;\n&quot;;
	print &quot;\n&quot;;
	print &quot;&lt;body&gt;\n&quot;;
	print &quot;&lt;center&gt;&lt;br&gt;\n&quot;;
	print &quot;&lt;font size=2&gt;&lt;b&gt;AWRedir&lt;/b&gt;&lt;/font&gt;&lt;br&gt;\n\n&quot;;
   	print &quot;&lt;font color=#880000&gt;$_[0].&lt;/font&gt;&lt;br&gt;&lt;br&gt;\n&quot;;
	print &quot;Setup (setup or logfile permissions) may be wrong.\n&quot;;
	$date=localtime();
	print &quot;&lt;CENTER&gt;&lt;br&gt;&lt;font size=1&gt;$date - &lt;b&gt;Advanced Web Redirector $VERSION&lt;/b&gt;&lt;br&gt;\n&quot;;
	print &quot;&lt;br&gt;\n&quot;;
	print &quot;&lt;/body&gt;&quot;;
	print &quot;&lt;/html&gt;&quot;;
    die;
}

#------------------------------------------------------------------------------
# Function:     Decode an URL encoded string
# Parameters:	stringtodecode
# Input:        None
# Output:		None
# Return:		decodedstring
#--------------------------------------------------------------------
sub DecodeEncodedString {
	my $stringtodecode=shift;
	$stringtodecode =~ s/\+/ /g;
	$stringtodecode =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack(&quot;C&quot;, hex($1))/eg;		# Decode encoded URL
	return $stringtodecode;
}

#------------------------------------------------------------------------------
# Function:     Clean a string of HTML tags to avoid 'Cross Site Scripting attacks'
#               and clean | char.
# Parameters:   stringtoclean
# Input:        None
# Output:       None
# Return:		cleanedstring
#------------------------------------------------------------------------------
sub CleanXSS {
	my $stringtoclean = shift;

	# To avoid html tags and javascript
	$stringtoclean =~ s/&lt;/&amp;lt;/g;
	$stringtoclean =~ s/&gt;/&amp;gt;/g;
	$stringtoclean =~ s/|//g;

	# To avoid onload=&quot;
	$stringtoclean =~ s/onload//g;
	return $stringtoclean;
}


#-------------------------------------------------------
# MAIN
#-------------------------------------------------------

my $LOGFILE;
if ($DEBUG) {
	open($LOGFILE, &quot;&gt;&quot;, &quot;$REPLOG/$PROG.log&quot;);
	print $LOGFILE &quot;----- $PROG $VERSION -----\n&quot;;	
}

if (! $ENV{'GATEWAY_INTERFACE'}) {	# Run from command line
	print &quot;----- $PROG $VERSION (c) Laurent Destailleur -----\n&quot;;
	print &quot;This script is absolutely not required to use AWStats.\n&quot;;
	print &quot;It's a third tool that can help webmaster in their tracking tasks but is\n&quot;;
	print &quot;not used by AWStats engine.\n&quot;;
	print &quot;\n&quot;;
	print &quot;This tools must be used as a CGI script. When called as a CGI, it returns to\n&quot;;
	print &quot;browser a redirector to tell it to show the page provided in 'url' parameter.\n&quot;;
	print &quot;So, to use this script, you must replace HTML code for external links onto your\n&quot;;
	print &quot;HTML pages from\n&quot;;
	print &quot;&lt;a href=\&quot;http://externalsite/pagelinked\&quot;&gt;Link&lt;/a&gt;\n&quot;;
	print &quot;to\n&quot;;
	print &quot;&lt;a href=\&quot;http://mysite/cgi-bin/awredir.pl?key=ABCDEFGH&amp;url=http://externalsite/pagelinked\&quot;&gt;Link&lt;/a&gt;\n&quot;;
	print &quot;\n&quot;;
	print &quot;For your web visitor, there is no difference. However this allow you to track\n&quot;;
	print &quot;clicks done on links onto your web pages that point to external web sites,\n&quot;;
	print &quot;because an entry will be seen in your own server log, to awredir.pl script\n&quot;;
	print &quot;with url parameter, even if link was pointing to another external web server.\n&quot;;
	print &quot;\n&quot;;
	sleep 2;
	exit 0;
}

if ((! $AUTHORIZEDWITHOUTKEY) &amp;&amp; ($KEYFORMD5 eq 'YOURKEYFORMD5')) {
        error(&quot;Error: You must change value of constant KEYFORMD5 in awredir.pl script.&quot;);
}

# Extract tag
$Tag='NOTAG';
if ($ENV{QUERY_STRING} =~ /tag=\&quot;?([^\&quot;&amp;]+)\&quot;?/) { $Tag=$1; }

$Key='NOKEY';
if ($ENV{QUERY_STRING} =~ /key=\&quot;?([^\&quot;&amp;]+)\&quot;?/) { $Key=$1; }

# Extract url to redirect to
$Url=$ENV{QUERY_STRING};
if ($Url =~ /url=\&quot;([^\&quot;]+)\&quot;/) { $Url=$1; }
elsif ($Url =~ /url=(.+)$/) { $Url=$1; }
$Url = DecodeEncodedString($Url);
$UrlParam=$Url;

# Sanitize parameters
$Tag=CleanXSS($Tag);
$Key=CleanXSS($Key);
$UrlParam=CleanXSS($UrlParam);


if (! $UrlParam) {
        error(&quot;Error: Bad use of $PROG. To redirect an URL with $PROG, use the following syntax:&lt;br&gt;&lt;i&gt;/cgi-bin/$PROG.pl?url=http://urltogo&lt;/i&gt;&quot;);
}

if ($Url !~ /^http/i) { $Url = &quot;http://&quot;.$Url; }
if ($DEBUG) { print $LOGFILE &quot;Url=$Url\n&quot;; }

if ((! $AUTHORIZEDWITHOUTKEY || $UrlParam !~ /$AUTHORIZEDWITHOUTKEY/) &amp;&amp; $KEYFORMD5 &amp;&amp; ($Key ne md5_hex($KEYFORMD5.$UrlParam))) {
#       error(&quot;Error: Bad value for parameter key=&quot;.$Key.&quot; to allow a redirect to &quot;.$UrlParam.&quot; - &quot;.$KEYFORMD5.&quot; - &quot;.md5_hex($KEYFORMD5.$UrlParam) );
        error(&quot;Error: Bad value for parameter key=&quot;.$Key.&quot; to allow a redirect to &quot;.$UrlParam.&quot;. Key must be hexadecimal md5(KEYFORMD5.&quot;.$UrlParam.&quot;) where KEYFORMD5 is value hardcoded into awredir.pl. Note: You can remove use of key by setting KEYFORMD5 to empty string in script awredir.pl&quot;);
}

# Get date
($nowsec,$nowmin,$nowhour,$nowday,$nowmonth,$nowyear,$nowwday,$nowyday,$nowisdst) = localtime(time);
if ($nowyear &lt; 100) { $nowyear+=2000; } else { $nowyear+=1900; }
$nowsmallyear=$nowyear;$nowsmallyear =~ s/^..//;
if (++$nowmonth &lt; 10) { $nowmonth = &quot;0$nowmonth&quot;; }
if ($nowday &lt; 10) { $nowday = &quot;0$nowday&quot;; }
if ($nowhour &lt; 10) { $nowhour = &quot;0$nowhour&quot;; }
if ($nowmin &lt; 10) { $nowmin = &quot;0$nowmin&quot;; }
if ($nowsec &lt; 10) { $nowsec = &quot;0$nowsec&quot;; }

if ($TRACEBASE == 1) {
	if ($ENV{REMOTE_ADDR} !~ /$EXCLUDEIP/) {
		if ($DEBUG == 1) { print $LOGFILE &quot;Execution requete Update sur BASE=$BASE, USER=$USER, PASS=$PASS\n&quot;; }
		my $dbh = DBI-&gt;connect(&quot;DBI:mysql:$BASE&quot;, $USER, $PASS) || die &quot;Can't connect to DBI:mysql:$BASE: $dbh-&gt;errstr\n&quot;;
		my $sth = $dbh-&gt;prepare(&quot;UPDATE T_LINKS set HITS_LINKS = HIT_LINKS+1 where URL_LINKS = '$Url'&quot;);
		$sth-&gt;execute || error(&quot;Error: Unable execute query:$dbh-&gt;err, $dbh-&gt;errstr&quot;);
		$sth-&gt;finish;
		$dbh-&gt;disconnect;
		if ($DEBUG == 1) { print $LOGFILE &quot;Execution requete Update - OK\n&quot;; }
	}
}

if ($TRACEFILE == 1) {
	if ($ENV{REMOTE_ADDR} !~ /$EXCLUDEIP/) {
		open(my $FICHIER, &quot;&gt;&gt;&quot;, &quot;$TXTDIR/$TXTFILE&quot;) || error(&quot;Error: Enable to open trace file $TXTDIR/$TXTFILE: $!&quot;);
		print $FICHIER &quot;$nowyear-$nowmonth-$nowday $nowhour:$nowmin:$nowsec\t$ENV{REMOTE_ADDR}\t$Tag\t$Url\n&quot;;
		close($FICHIER);
	}
}

# Redir html instructions
print &quot;Location: $Url\n\n&quot;;

if ($DEBUG) {
	print $LOGFILE &quot;Redirect to $Url\n&quot;;
	close($LOGFILE);
}

0;
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fusr%2Flocal%2Fcpanel%2F3rdparty%2Fbin'>Back to Directory</a>