*/
void listsub_generate_token(char *buf) {
char sourcebuf[SIZ];
+ static int seq = 0;
/* Theo, please sit down and shut up. This key doesn't have to be
- * tinfoil-hat secure, it just needs to be reasonably unguessable.
+ * tinfoil-hat secure, it just needs to be reasonably unguessable
+ * and unique.
*/
- sprintf(sourcebuf, "%d%d%ld",
- rand,
- getpid(),
- time(NULL)
+ sprintf(sourcebuf, "%lx",
+ (long) (++seq + getpid() + time(NULL))
);
/* Convert it to base64 so it looks cool */
}
+/*
+ * Enter a subscription request
+ */
+void do_subscribe(char *room, char *email, char *subtype, char *webpage) {
+ struct quickroom qrbuf;
+ FILE *ncfp;
+ char filename[SIZ];
+ char token[SIZ];
+ char confirmation_request[SIZ];
+ char urlroom[SIZ];
+
+ if (getroom(&qrbuf, room) != 0) {
+ cprintf("%d There is no list called '%s'\n", ERROR, room);
+ return;
+ }
+
+ if ((qrbuf.QRflags2 & QR2_SELFLIST) == 0) {
+ cprintf("%d '%s' "
+ "does not accept subscribe/unsubscribe requests.\n",
+ ERROR+HIGHER_ACCESS_REQUIRED, qrbuf.QRname);
+ return;
+ }
+
+ listsub_generate_token(token);
+
+ begin_critical_section(S_NETCONFIGS);
+ assoc_file_name(filename, sizeof filename, &qrbuf, "netconfigs");
+ ncfp = fopen(filename, "a");
+ if (ncfp != NULL) {
+ fprintf(ncfp, "subpending|%s|%s|%s|%ld|%s\n",
+ email,
+ subtype,
+ token,
+ time(NULL),
+ webpage
+ );
+ fclose(ncfp);
+ }
+ end_critical_section(S_NETCONFIGS);
+
+ /* Generate and send the confirmation request */
+
+ urlesc(urlroom, qrbuf.QRname);
+
+ snprintf(confirmation_request, sizeof confirmation_request,
+ "Content-type: text/html\n\n"
+ "<HTML><BODY>"
+ "Someone (probably you) has submitted a request to subscribe\n"
+ "<%s> to the <B>%s</B> mailing list.<BR><BR>\n"
+ "<A HREF=\"http://%s?room=%s&token=%s&cmd=confirm\">"
+ "Please click here to confirm this request.</A><BR><BR>\n"
+ "If this request has been submitted in error and you do not\n"
+ "wish to receive the '%s' mailing list, simply do nothing,\n"
+ "and you will not receive any further mailings.\n"
+ "</BODY></HTML>\n",
+
+ email, qrbuf.QRname, webpage, urlroom, token, qrbuf.QRname
+ );
+
+ quickie_message( /* This delivers the message */
+ "Citadel",
+ email,
+ NULL,
+ confirmation_request,
+ FMT_RFC822
+ );
+
+ cprintf("%d Subscription entered; confirmation request sent\n", CIT_OK);
+}
+
+/*
+ * Confirm a subscribe/unsubscribe request.
+ */
+void do_confirm(char *room, char *token) {
+ struct quickroom qrbuf;
+ FILE *ncfp;
+ char filename[SIZ];
+ char line_token[SIZ];
+ long line_offset;
+ int line_length;
+ char buf[SIZ];
+ char cmd[SIZ];
+ char email[SIZ];
+ char subtype[SIZ];
+ int success = 0;
+
+ if (getroom(&qrbuf, room) != 0) {
+ cprintf("%d There is no list called '%s'\n", ERROR, room);
+ return;
+ }
+
+ if ((qrbuf.QRflags2 & QR2_SELFLIST) == 0) {
+ cprintf("%d '%s' "
+ "does not accept subscribe/unsubscribe requests.\n",
+ ERROR+HIGHER_ACCESS_REQUIRED, qrbuf.QRname);
+ return;
+ }
+
+ begin_critical_section(S_NETCONFIGS);
+ assoc_file_name(filename, sizeof filename, &qrbuf, "netconfigs");
+ ncfp = fopen(filename, "r+");
+ if (ncfp != NULL) {
+ while (line_offset = ftell(ncfp),
+ (fgets(buf, sizeof buf, ncfp) != NULL) ) {
+ buf[strlen(buf)-1] = 0;
+ line_length = strlen(buf);
+ extract(cmd, buf, 0);
+ if (!strcasecmp(cmd, "subpending")) {
+ extract(email, buf, 1);
+ extract(subtype, buf, 2);
+ extract(line_token, buf, 3);
+ if (!strcasecmp(token, line_token)) {
+ if (!strcasecmp(subtype, "digest")) {
+ strcpy(buf, "digestrecp|");
+ }
+ else {
+ strcpy(buf, "listrecp|");
+ }
+ strcat(buf, email);
+ strcat(buf, "|");
+ /* SLEAZY HACK: pad the line out so
+ * it's the same length as the line
+ * we're replacing.
+ */
+ while (strlen(buf) < line_length) {
+ strcat(buf, " ");
+ }
+ fseek(ncfp, line_offset, SEEK_SET);
+ fprintf(ncfp, "%s\n", buf);
+ ++success;
+ }
+ }
+ }
+ fclose(ncfp);
+ }
+ end_critical_section(S_NETCONFIGS);
+
+ if (success) {
+ cprintf("%d %d operation(s) confirmed.\n", CIT_OK, success);
+ }
+ else {
+ cprintf("%d Invalid token.\n", ERROR);
+ }
+
+}
+
+
+
+/*
+ * process subscribe/unsubscribe requests and confirmations
+ */
void cmd_subs(char *cmdbuf) {
- cprintf("%d not yet implemented, dumbass...\n", ERROR);
+
+ char opr[SIZ];
+ char room[SIZ];
+ char email[SIZ];
+ char subtype[SIZ];
+ char token[SIZ];
+ char webpage[SIZ];
+
+ extract(opr, cmdbuf, 0);
+ if (!strcasecmp(opr, "subscribe")) {
+ extract(subtype, cmdbuf, 3);
+ if ( (strcasecmp(subtype, "list"))
+ && (strcasecmp(subtype, "digest")) ) {
+ cprintf("%d Invalid subscription type.\n", ERROR);
+ }
+ else {
+ extract(room, cmdbuf, 1);
+ extract(email, cmdbuf, 2);
+ extract(webpage, cmdbuf, 4);
+ do_subscribe(room, email, subtype, webpage);
+ }
+ }
+ else if (!strcasecmp(opr, "unsubscribe")) {
+ cprintf("%d not yet implemented\n", ERROR);
+ }
+ else if (!strcasecmp(opr, "confirm")) {
+ extract(room, cmdbuf, 1);
+ extract(token, cmdbuf, 2);
+ do_confirm(room, token);
+ }
+ else {
+ cprintf("%d Invalid command\n", ERROR);
+ }
}
projects / citadel.git / blobdiff