Wii Web Server

From WiiBrew
Jump to: navigation, search

Template:Infobox homebrewapp

Dev time: 75 Hours


Icon Designer
WiiWeb.png Twilt
Icon WebServer.png Vibestar
Lines WiiWebServer.png Lines

meta.xml Example

File:Wiiwebserver.zip - ZIP containing the meta.xml for alpha v0.73 and an icon.png


Boot using normal methods *cough* HBC *cough*. Once running, will run itself. To quit, press home on the wiimote. If no wiiweb.xml is found then the old method of using the wiimote can still be used.

Place your html files in /data/web/ on the root of your sd card, must be inserted before the app is loaded. Use data.zip for demo files.

In verions alpha v0.81 onwards, in the xml (link below) a custom error page can be specified by

<?xml version="1.0"?>

If no file is needed just put "nofile" in the place of the file path

There is no directory listing and your homepage must be called "index.html"


I am in need of help in order to advance the wii web server to alpha v1.0
A list of things that i need help with are below :

  • Fixing undone things in the bugs section
  • A decent graphical front-end
  • A decent index-page that is automatically generated if no index.html or index.htm can be found
  • More file type support

How to submit

Because i use windblows, i am unable to use .patch files, so instead, a source file like below should be sent to me at the address listed in the bugs section, or by posting it here. It MUST be in C

Name (to be put in the credits)
What lines the fix applies to
Any notes

// Start line number

Fixed code

// End line number


When included in the source you will be credited on your user talk page (if exists) and the /** **/ section will be included in the source file

Features to be added

  • Adding update support (5% completed)
  • Adding auto index page generation (0% completed)


Version Changes
alpha v0.9

wiiweb.xml v rc1

Recompiled for HBC 9 beta

Now has a sane download name

alpha v0.82

wiiweb.xml v rc1

New stipped down wiiweb.xml

Removed buggy //quit (might return later)
Now use the same method of quitting as ftpii and wiihttpd
using a threaded home button detection routine
Small code improvements and removed unused code

alpha v0.81

wiiweb.xml v b3

Uses new wiiweb.xml which causes less crashes

and //quit?password works 99% of the time.
Various bug fixes from the table below

alpha v0.8

wiiweb.xml v b2

Added threading support and management

SD code tweaks

alpha v0.77

wiiweb.xml v b2

Added custom 404 error page

Added custom 500 error page
Added custom denied error page
More //quit security checks
Solved two stability issues Uses the new wiiweb.xml

alpha v0.76

wiiweb.xml v b1

Added the option of a custom password to shut

the server remotely using //quit?password (see README)
Removed /img (old)

alpha v0.75 Removed /tux and /yak.jpg (old and deprecated)

Minor speed improvements
Date and time in the header

alpha v0.74 When //quit is requested it has to be approved by pressing A or B

Slightly shortened the time it takes to be ready after each request

alpha v0.73 Security bugfixes

Added "HEAD" method support
Added space in file name support
Fixed disallowance of ../ or ./ for security
Added .bin file support
Sends server version in header

alpha v0.72 Bugfixes
alpha v0.71 Adds .wmv support

Added error 500 for server errors

alpha v0.7 Doesn't exception out when a file or page cannot be found

Will now serve a "404 Page not found" page

alpha v0.62 Fixed the infinite recursion
alpha v0.61 Removed the /a and the old testpages since they are no longer needed.

Smaller code.

alpha v0.6 Can now send any file size (thanks to joedj's ftpii write_exact function)

Ditched GRRLib to make the server smaller in size
Cleaned up the sources

alpha v0.5 Can now load any file type (those listed below) from FrontSD
alpha v0.4 Front SD html only, loading support XD (finally !!)
alpha v0.31 Favicon added
alpha v0.3 Added wiimote support

Added image support
Added /img image test link

alpha v0.24b Bug fixes for 0.24a

//a is now back to /a, but //quit is still there for other reasons

alpha v0.24a Fixed the main page hyperlink to //a
alpha v0.24 Changed /a to //a and /quit to //quit to avoid conflicts

Request parser rewritten, now quicker and more streamlined

alpha v0.23 Now doesn't have to restart the server to serve more than one page
(i.e pressing B then A)

Quitting the server is from a server path of "/quit"

alpha v0.22 Handles links
alpha v0.21 Now detects the HTTP/1.x version as requested by the browser
alpha v0.2 Now serves a built in test page

No longer needs telnet
Forced use of HTTP/1.1

alpha v0.11 Serves html to telnet (lack of http headers)

Can accept multiple connections (not at once)

alpha v0.1 Added Gamecube control menu control

Added GRRLIB logo
Added return to loader
Opens port 80
Opens a socket and allows for connection
Accepts connection on open socket at port 80

Version Changes
Beta 3 Only use on alpha v0.81 +

Reduces errors

Beta 2 First uploaded version

Added custom error pages paths

Bug fixing

Please post new bugs on the talk page instead of here :-)

For anymore bugs, they should only be posted if :-

  • They are security related
  • They affect usage

If anyone has an idea or a fix then a patch (not in a .patch file) could be submitted to me by any means !!!
Preferebly @ luke dot bridges at gmail dot com

Bug Status How Fixed Priority
Directory traversal vulnerabilities allows people to

sneak out of the web root. Ops, now people can "borrow"
all those "borrowed" games you also happen to have on the
sd-card. (evidence needed)

Done Now blocks all ./ and ../ in path names High
Fixing of folders to index.html is hardcoded and not

heuristic and will fail for sub-directories.

Waiting Low
500 pages uses 404 lengths Done Changed _404_html_size to _500_html_size Medium
Indention issues, try just writing it like "else if"

and don't add any extra indention, it keeps the indention
level sane when having a lot of conditions.

Done Changed to else if Low
Directories without an ending / is not redirected to

the same url, but with a slash

Waiting Medium
Request specific info is stored in globals

(not safe for multi threading in the future)

Done used same idea as wiihttpd High
Exact server version is not in the http reply headers Done Made the server version a variable and attatched it Low
Date header is hardcoded to the past. Done Added time.h and worked out the date Low
'?'s in URLs are not used properly as argument passers

(eg http://wiihostedexamplesite.com/index.html?a=b gives a 404
when it should pass the a=b paramater onto the page)

Done strtok(path, "?"); Medium
If it gets a reading error (ie you remove the SD card) it should display error 500, rather than displaying an error only on the Wii itself then dumping back to HBC, causing the PC to timeout and the server to go down. Although that could be a problem since it might need to read error 500 off the SD card with the new custom error feature, it could be avoided by loading that error into RAM at the start as long as it isn't too big (in which case it should error at start and refuse to run). Done instead of exiting will show the built-in error 500 page

having issues with loading it into ram for long times


File types

The following file types have proper mime types associated with them.

URL of the header file containing the file extensions supported : [1]


This is almost community based !! :-)

Cboomf - Main code
Felix123 - SD card code
Teknecal - Threading basis, %20 handling, HEAD method routine, time in headers
Joedj - the write_exact function from ftpii
Muzer - pre-release testing
Henke37 - advise and help

Twiizers - starting the ball rolling