353a13754f34e9cb62a9a841ae64e80c64fbe1d8 hiram Fri Sep 9 18:47:21 2022 -0700 protect against empty spam bot activity no redmine diff --git src/hg/gar/gar.cgi.pl src/hg/gar/gar.cgi.pl index 5c4f397..a03b456 100755 --- src/hg/gar/gar.cgi.pl +++ src/hg/gar/gar.cgi.pl @@ -1,47 +1,56 @@ #!/usr/bin/perl ## ## gar -- GenArk Request - receive requests for GenArk assemblies ## use URI::Escape; # use strict; # use warnings; print "Content-type: text/html\n\n"; -print "GenArk Request assembly build\n"; -print "\n"; +print "GenArk Request assembly build\n"; +print "\n"; # QUERY_STRING name=some%20name&email=some@email.com&asmId=GCF_000951035.1_Cang.pa_1.0 my %incoming = ( "name" => "noName", "email" => "noEmail", "asmId" => "noAsmId", "betterName" => "noBetterName", "comment" => "noComment", ); +my $validIncoming = 0; + if (defined($ENV{"QUERY_STRING"})) { my $qString = $ENV{"QUERY_STRING"}; my @idVal = split("&", $qString); foreach $id (@idVal) { my ($tag, $value) = split("=", $id, 2); $incoming{$tag} = uri_unescape( $value ) if (defined($value)); + ++$validIncoming if (defined($value)); + } } + +if ($validIncoming != 5) { + # not a legitimate request from our own business, do nothing. + print "\n"; + exit 0; } printf "\n"; my $DS=`date "+%F %T"`; chomp $DS; open (FH, "|/usr/sbin/sendmail -t -oi"); printf FH "To: hclawson\@ucsc.edu,clayfischer\@ucsc.edu