From 3178c9711821f693f10baf2620d18095f15ce734 Mon Sep 17 00:00:00 2001
From: James French <frenchie@frenchie.id.au>
Date: Mon, 4 Mar 2013 15:30:52 +0800
Subject: [PATCH] New CGI Script

- Script is for parse of facebook calendars only due to input sanitisation
- May or may not contain dragons
---
 .htaccess | 13 +++++++++++++
 fbcal.py  | 48 ++++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 61 insertions(+)
 create mode 100644 .htaccess
 create mode 100755 fbcal.py

diff --git a/.htaccess b/.htaccess
new file mode 100644
index 0000000..53afb60
--- /dev/null
+++ b/.htaccess
@@ -0,0 +1,13 @@
+AddHandler cgi-script .pl .py .cgi
+Options ExecCgi
+Options -Indexes
+
+<Files icalparse.py>
+	order allow,deny
+	deny from all
+</Files>
+
+<Files parserrules.py>
+	order allow,deny
+	deny from all
+</Files>
diff --git a/fbcal.py b/fbcal.py
new file mode 100755
index 0000000..ff0dc09
--- /dev/null
+++ b/fbcal.py
@@ -0,0 +1,48 @@
+#!/usr/bin/python
+#
+# Copyright (c) 2011 James French <frenchie@frenchie.id.au>
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy
+# of this software and associated documentation files (the "Software"), to deal
+# in the Software without restriction, including without limitation the rights
+# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+# copies of the Software, and to permit persons to whom the Software is
+# furnished to do so, subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in
+# all copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+# THE SOFTWARE.
+
+import sys
+import cgi
+import icalparse
+#import cgitb; cgitb.enable()
+
+form = cgi.FieldStorage()
+
+if __name__ == '__main__':
+	if "uid" not in form or "key" not in form:
+		print('Content-Type: text/html\n')
+		sys.exit(0)
+	try:
+		uid = int(form['uid'].value)
+		key = int(form['key'].value)
+	except:
+		print('Content-Type: text/html\n')
+		sys.exit(0)
+
+	url = 'http://www.facebook.com/ical/u.php?uid=%s&key=%s'%(uid,key)
+	(content, encoding) = icalparse.getHTTPContent(url)
+
+	cal = vobject.readOne(unicode(content, encoding))
+	cal = icalparse.applyRules(cal, icalparse.generateRules(), False)
+
+	print('Content-Type: text/calendar; charset=%s\n'%encoding)
+	icalparse.writeOutput(cal)
-- 
2.20.1