webAction_pview.cpp

/*******************************************************************
   *	webAction_pview.cpp web请求处理 - 进程浏览
   *    DESCRIPTION:
   *
   *    AUTHOR:yyc
   *
   *    HISTORY:
   *
   *    DATE:
   *	
   *******************************************************************/
#include "rmtsvc.h"
#include "other\wutils.h"
#include "other\stringMatch.h"
#include <tlhelp32.h> //枚举所有进程

DWORD procList_NT(cBuffer &buffer,const char *filter);
DWORD procList_2K(cBuffer &buffer,const char *filter);
DWORD moduleList_NT(cBuffer &buffer,DWORD processID);
DWORD moduleList_2K(cBuffer &buffer,DWORD processID);
//列出本机所有进程
//返回符合条件filter进程的个数,号分割各个过滤条件.过滤条件支持*?通配符号
//buffer - 返回的xml文档,格式:
//<?xml version="1.0" encoding="gb2312" ?>
//<xmlroot>
//<process>
//<id>序号</id>
//<pid>进程ID</pid>
//<ppid>父进程ID</ppid>
//<pname>进程名</pname>
//<priority>优先级</priority>
//<threads>线程个数</threads>
//<ppath>程序路径</ppath>
//</process>
//...
//</xmlroot>
DWORD procList(cBuffer &buffer,const char *filter)
{
	MSOSTYPE ost=Wutils::winOsType();
	if(ost==MSOS_TYPE_NT)
		return procList_NT(buffer,filter);
	return procList_2K(buffer,filter);
}
//列出某进程的所有模块
//buffer - 返回的xml文档,格式:
//<?xml version="1.0" encoding="gb2312" ?>
//<xmlroot>
//<module>
//<id>序号</id>
//<hmdl></hmdl>
//<mbase>基地址</mbase>
//<mname>模块名</mname>
//</module>
//...
//</xmlroot>
DWORD moduleList(cBuffer &buffer,DWORD pid)
{
	MSOSTYPE ost=Wutils::winOsType();
	if(ost==MSOS_TYPE_NT)
		return moduleList_NT(buffer,pid);
	return moduleList_2K(buffer,pid);
}


bool webServer::httprsp_plist(socketTCP *psock,httpResponse &httprsp)
{
	cBuffer buffer(1024);
	procList(buffer,NULL);
	httprsp.NoCache();//CacheControl("No-cache");
	//设置MIME类型，默认为HTML
	httprsp.set_mimetype(MIMETYPE_XML);
	//设置响应内容长度
	httprsp.lContentLength(buffer.len()); 
	httprsp.send_rspH(psock,200,"OK");
	psock->Send(buffer.len(),buffer.str(),-1);
	return true;
}

bool webServer::httprsp_mlist(socketTCP *psock,httpResponse &httprsp,DWORD pid)
{
	cBuffer buffer(1024);
	moduleList(buffer,pid);
	httprsp.NoCache();//CacheControl("No-cache");
	//设置MIME类型，默认为HTML
	httprsp.set_mimetype(MIMETYPE_XML);
	//设置响应内容长度
	httprsp.lContentLength(buffer.len()); 
	httprsp.send_rspH(psock,200,"OK");
	psock->Send(buffer.len(),buffer.str(),-1);
	return true;
}

bool webServer::httprsp_pkill(socketTCP *psock,httpResponse &httprsp,DWORD pid)
{
	char buf[64];
	int buflen=sprintf(buf,"true");
	HANDLE hProcess=::OpenProcess(PROCESS_ALL_ACCESS,TRUE,pid);
	if(hProcess)
	{
		::TerminateProcess(hProcess,0);
		::CloseHandle(hProcess);
	}else buflen=sprintf(buf,"Can not open processID %d",pid);
	httprsp.NoCache();//CacheControl("No-cache");
	//设置MIME类型，默认为HTML
	httprsp.set_mimetype(MIMETYPE_TEXT);
	//设置响应内容长度
	httprsp.lContentLength(buflen); 
	httprsp.send_rspH(psock,200,"OK");
	psock->Send(buflen,buf,-1);
	return true;
}

#include "cInjectDll.h"
//从某个进程中卸载某dll
bool webServer::httprsp_mdattach(socketTCP *psock,httpResponse &httprsp,DWORD pid,HMODULE hmdl,long count)
{
	cInjectDll inject(NULL);
	if(count<=0 || count>100) count=1;
	for(int i=0;i<count;i++) inject.DeattachDLL(pid,hmdl);
	httprsp.NoCache();//CacheControl("No-cache");
	//设置MIME类型，默认为HTML
	httprsp.set_mimetype(MIMETYPE_TEXT);
	//设置响应内容长度
	httprsp.lContentLength(0); 
	httprsp.send_rspH(psock,200,"OK");
	return true;
}
//****************************************************************************
//**********************private function for this file************************
//****************************** start ***************************************
inline bool ifMatch(const char *szProcessName,const char *filter)
{
	bool bMatch=false;
	std::string tmpStr(filter);
	char *pstr=(char *)(tmpStr.c_str());
	char *token = strtok(pstr, ",");
	while( token != NULL )
	{
		bMatch|=MatchingString(szProcessName,token,false);
		token = strtok( NULL, ",");
	}//?while
	return bMatch;
}
//枚举NT系统的进程
//对于NT操作系统可以用PSAPI.DLL枚举进程以及模块信息
DWORD procList_NT(cBuffer &buffer,const char *filter)
{
	typedef BOOL (WINAPI *pfnEnumProcesses_D)(
						DWORD * lpidProcess,  // array to receive the process identifiers
						DWORD cb,             // size of the array
						DWORD * cbNeeded      // receives the number of bytes returned
					);
	typedef BOOL (WINAPI *pfnEnumProcessModules_D)(
					HANDLE hProcess,      // handle to the process
					HMODULE * lphModule,  // array to receive the module handles
					DWORD cb,             // size of the array
					LPDWORD lpcbNeeded    // receives the number of bytes returned
				);
	typedef DWORD (WINAPI *pfnGetModuleBaseName_D)(
					HANDLE hProcess,    // handle to the process
					HMODULE hModule,    // handle to the module
					LPTSTR lpBaseName,  // buffer that receives the base name
					DWORD nSize         // size of the buffer
				);

	HINSTANCE hDll=::LoadLibrary("PSAPI.dll");
	if(hDll==NULL) return 0;
	pfnEnumProcesses_D pfnEnumProcesses=(pfnEnumProcesses_D)::GetProcAddress(hDll,"EnumProcesses");
	pfnEnumProcessModules_D pfnEnumProcessModules=(pfnEnumProcessModules_D)::GetProcAddress(hDll,"EnumProcessModules");
	pfnGetModuleBaseName_D pfnGetModuleBaseName=(pfnGetModuleBaseName_D)::GetProcAddress(hDll,"GetModuleBaseNameA");
	DWORD aProcesses[1024], cbNeeded, cProcesses;

	DWORD dwret=0;
	if(buffer.Space()<256) buffer.Resize(buffer.size()+256);
	buffer.len()+=sprintf(buffer.str()+buffer.len(),"<?xml version=\"1.0\" encoding=\"gb2312\" ?><xmlroot>");

	//枚举系统进程ID列表
	if (pfnEnumProcesses!=NULL && (*pfnEnumProcesses)(aProcesses, sizeof(aProcesses), &cbNeeded ) )
	{
		cProcesses = cbNeeded / sizeof(DWORD);
		HANDLE hProcess;
		char szProcessName[MAX_PATH];
		int filternums=0;//过滤条件个数
		if(filter && filter[0]!=0 )
			filternums=(strchr(filter,','))?2:1;//2代表多个
		for (unsigned int i = 0; i < cProcesses; i++ )
		{
			strcpy(szProcessName,"unknown");
			if((hProcess = ::OpenProcess( PROCESS_QUERY_INFORMATION|PROCESS_VM_READ,FALSE, aProcesses[i])) )
			{
				HMODULE hMod;DWORD cbNeeded;
				if ((*pfnEnumProcessModules)(hProcess, &hMod, sizeof(hMod), &cbNeeded) && pfnGetModuleBaseName)
					(*pfnGetModuleBaseName)( hProcess, hMod, szProcessName,sizeof(szProcessName) );
				::CloseHandle( hProcess );
			}
			bool bMatch=true;
			if(filternums==1) //一个过滤条件
				bMatch=MatchingString(szProcessName,filter,false);
			else if(filternums>1)
				bMatch=ifMatch(szProcessName,filter);
			if(bMatch)
			{
				if(buffer.Space()<256) buffer.Resize(buffer.size()+256);
				buffer.len()+=sprintf(buffer.str()+buffer.len(),
					"<process>"
					"<id>%d</id>"
					"<pid>%04d</pid>"
					"<ppid>%04d</ppid>"
					"<pname>%s</pname>"
					"<priority>%02d</priority>"
					"<threads>%02d</threads>"
					"<ppath></ppath>"
					"</process>",++dwret,aProcesses[i],
					0,szProcessName,0,0);
			}
		}//?for(...
	}//?if (pfnEnumProcesses!=NULL &&
	if(buffer.Space()<16) buffer.Resize(buffer.size()+16);
	buffer.len()+=sprintf(buffer.str()+buffer.len(),"</xmlroot>");

	::FreeLibrary(hDll);
	return dwret;
}

//枚举win9x/2k系统的进程
//对于win9x/2k可以通过toolhelp32函数列举进程及模块信息
//只有2k&&win9x支持CreateToolhelp32Snapshot等函数
DWORD procList_2K(cBuffer &buffer,const char *filter)
{
	HINSTANCE hDll=::LoadLibrary("KERNEL32.dll");
	if(hDll==NULL) return 0;
	typedef HANDLE (WINAPI *pfnCreateToolhelp32Snapshot_D)(DWORD,DWORD);
	typedef BOOL (WINAPI *pfnProcess32Next_D)(HANDLE,LPPROCESSENTRY32);
	typedef BOOL (WINAPI *pfnProcess32First_D)(HANDLE,LPPROCESSENTRY32);
	pfnProcess32First_D pfnProcess32First=(pfnProcess32First_D)::GetProcAddress(hDll,"Process32First");
	pfnCreateToolhelp32Snapshot_D pfnCreateToolhelp32Snapshot=(pfnCreateToolhelp32Snapshot_D)::GetProcAddress(hDll,"CreateToolhelp32Snapshot");
	pfnProcess32Next_D pfnProcess32Next=(pfnProcess32Next_D)::GetProcAddress(hDll,"Process32Next");
	
	HANDLE hSnapShot=(*pfnCreateToolhelp32Snapshot)(TH32CS_SNAPPROCESS,0);
	 PROCESSENTRY32* processInfo=new PROCESSENTRY32;
	 memset((void *)processInfo,0,sizeof(PROCESSENTRY32));
	 processInfo->dwSize=sizeof(PROCESSENTRY32);
	
	 DWORD dwret=0;
	 if(buffer.Space()<256) buffer.Resize(buffer.size()+256);
	 buffer.len()+=sprintf(buffer.str()+buffer.len(),"<?xml version=\"1.0\" encoding=\"gb2312\" ?><xmlroot>");
	 if ((*pfnProcess32First)(hSnapShot, processInfo))
	 {
		const char *ptrFilename=NULL;
		int filternums=0;//过滤条件个数
		if(filter && filter[0]!=0 ) filternums=(strchr(filter,','))?2:1;//2代表多个
		do
		{
			//win9x下显示的是文件路径全名，去掉路径
			//2k下仅仅显示的是文件名（因此可以不要此判断）
			//yyc modify 2003-04-20
			if((ptrFilename=strrchr(processInfo->szExeFile,'\\'))==NULL) 
				ptrFilename=processInfo->szExeFile;
			else
				ptrFilename+=1;//去掉'\'
			
			bool bMatch=true;
			if(filternums==1) //一个过滤条件
				bMatch=MatchingString(ptrFilename,filter,false);
			else if(filternums>1)
				bMatch=ifMatch(ptrFilename,filter);
			if(bMatch)
			{
				if(buffer.Space()<256) buffer.Resize(buffer.size()+256);
				buffer.len()+=sprintf(buffer.str()+buffer.len(),
					"<process>"
					"<id>%d</id>"
					"<pid>%04d</pid>"
					"<ppid>%04d</ppid>"
					"<pname>%s</pname>"
					"<priority>%02d</priority>"
					"<threads>%02d</threads>"
					"<ppath></ppath>"
					"</process>",++dwret,processInfo->th32ProcessID,
					processInfo->th32ParentProcessID,
					ptrFilename,processInfo->pcPriClassBase,
					processInfo->cntThreads);
			}
		}while ((*pfnProcess32Next)(hSnapShot,processInfo));
	}//?if ((*pfnProcess32First)(hSnapShot, processInfo))
	if(buffer.Space()<16) buffer.Resize(buffer.size()+16);
	buffer.len()+=sprintf(buffer.str()+buffer.len(),"</xmlroot>");

	CloseHandle(hSnapShot);
	delete processInfo;
	::FreeLibrary(hDll);
	return dwret;
}

//枚举NT系统的进程
//对于NT操作系统可以用PSAPI.DLL枚举进程以及模块信息
DWORD moduleList_NT(cBuffer &buffer,DWORD processID)
{
	typedef BOOL (WINAPI *pfnEnumProcessModules_D)(
				HANDLE hProcess,      // handle to the process
				HMODULE * lphModule,  // array to receive the module handles
				DWORD cb,             // size of the array
				LPDWORD lpcbNeeded    // receives the number of bytes returned
				);
	typedef DWORD (WINAPI *pfnGetModuleBaseName_D)(
					HANDLE hProcess,    // handle to the process
					HMODULE hModule,    // handle to the module
					LPTSTR lpBaseName,  // buffer that receives the base name
					DWORD nSize         // size of the buffer
				);
	typedef DWORD (WINAPI *pfnGetModuleFileNameEx_D)(
					HANDLE hProcess,    // handle to the process
					HMODULE hModule,    // handle to the module
					LPTSTR lpFilename,  // buffer that receives the path
					DWORD nSize         // size of the buffer
				);
	HINSTANCE hDll=::LoadLibrary("PSAPI.dll");
	if(hDll==NULL) return 0;

	pfnEnumProcessModules_D pfnEnumProcessModules=(pfnEnumProcessModules_D)::GetProcAddress(hDll,"EnumProcessModules");
	pfnGetModuleBaseName_D pfnGetModuleBaseName=(pfnGetModuleBaseName_D)::GetProcAddress(hDll,"GetModuleBaseNameA");
	pfnGetModuleFileNameEx_D pfnGetModuleFileNameEx=(pfnGetModuleFileNameEx_D)::GetProcAddress(hDll,"GetModuleFileNameExA");

	HMODULE aModules[1024];DWORD cbNeeded, cModules;
	HANDLE hProcess = ::OpenProcess( PROCESS_QUERY_INFORMATION|PROCESS_VM_READ,FALSE, processID);
	
	DWORD dwret=0;
	if(buffer.Space()<256) buffer.Resize(buffer.size()+256);
	buffer.len()+=sprintf(buffer.str()+buffer.len(),"<xmlroot>");

	if (hProcess!=NULL && (*pfnEnumProcessModules)(hProcess, aModules,sizeof(aModules), &cbNeeded ) )
	{
		cModules = cbNeeded / sizeof(DWORD);
		char szProcessName[MAX_PATH];
		for (unsigned int i = 0; i < cModules; i++ )
		{
			if(pfnGetModuleFileNameEx)
				(*pfnGetModuleFileNameEx)( hProcess, aModules[i], szProcessName,sizeof(szProcessName) );
			else
				strcpy(szProcessName,"unknown path");

			if(buffer.Space()<256) buffer.Resize(buffer.size()+256);
			buffer.len()+=sprintf(buffer.str()+buffer.len(),
				"<module>"
				"<id>%d</id>"
				"<hmdl>%d</hmdl>"
				"<usage>%d</usage>"
				"<mbase>0x%08X</mbase>"
				"<mname>%s</mname>"
				"</module>",
				++dwret,aModules[i],-1,0,szProcessName);
		}
		::CloseHandle(hProcess);
	}//?if (pfnEnumProcesses!=NULL &&
	if(buffer.Space()<16) buffer.Resize(buffer.size()+16);
	buffer.len()+=sprintf(buffer.str()+buffer.len(),"</xmlroot>");

	::FreeLibrary(hDll);
	return dwret;
}

//枚举win9x/2k系统进程的模块
//对于win9x/2k可以通过toolhelp32函数列举进程及模块信息
//只有2k&&win9x支持CreateToolhelp32Snapshot等函数
DWORD moduleList_2K(cBuffer &buffer,DWORD processID)
{
	HINSTANCE hDll=::LoadLibrary("KERNEL32.dll");
	if(hDll==NULL) return 0;
	typedef HANDLE (WINAPI *pfnCreateToolhelp32Snapshot_D)(DWORD,DWORD);
	typedef BOOL (WINAPI *pfnModule32Next_D)(HANDLE,LPMODULEENTRY32);
	typedef BOOL (WINAPI *pfnModule32First_D)(HANDLE,LPMODULEENTRY32);
	pfnModule32First_D pfnModule32First=(pfnModule32First_D)::GetProcAddress(hDll,"Module32First");
	pfnCreateToolhelp32Snapshot_D pfnCreateToolhelp32Snapshot=(pfnCreateToolhelp32Snapshot_D)::GetProcAddress(hDll,"CreateToolhelp32Snapshot");
	pfnModule32Next_D pfnModule32Next=(pfnModule32Next_D)::GetProcAddress(hDll,"Module32Next");
	
	HANDLE hSnapShot=(*pfnCreateToolhelp32Snapshot)(TH32CS_SNAPMODULE,processID);

	MODULEENTRY32* moduleInfo=new MODULEENTRY32;
	memset((void *)moduleInfo,0,sizeof(MODULEENTRY32));
	moduleInfo->dwSize=sizeof(MODULEENTRY32);
	
	 DWORD dwret=0;
	 if(buffer.Space()<256) buffer.Resize(buffer.size()+256);
	 buffer.len()+=sprintf(buffer.str()+buffer.len(),"<xmlroot>");
	 if ((*pfnModule32First)(hSnapShot, moduleInfo))
	 {
		do
		{
			if(buffer.Space()<256) buffer.Resize(buffer.size()+256);
			buffer.len()+=sprintf(buffer.str()+buffer.len(),
				"<module>"
				"<id>%d</id>"
				"<hmdl>%d</hmdl>"
				"<usage>%d</usage>"
				"<mbase>0x%08X</mbase>"
				"<mname>%s</mname>"
				"</module>",
				++dwret,moduleInfo->hModule,
				moduleInfo->ProccntUsage,
				moduleInfo->modBaseAddr,
				moduleInfo->szExePath);
		}while ((*pfnModule32Next)(hSnapShot,moduleInfo));
	}//?if ((*pfnProcess32First)(hSnapShot, processInfo))
	if(buffer.Space()<16) buffer.Resize(buffer.size()+16);
	buffer.len()+=sprintf(buffer.str()+buffer.len(),"</xmlroot>");

	CloseHandle(hSnapShot);
	delete moduleInfo;
	::FreeLibrary(hDll);
	return dwret;
}

//******************************* end ****************************************
//**********************private function for this file************************
//****************************************************************************