*
* This module handles self-service subscription/unsubscription to mail lists.
*
- * Copyright (C) 2002 by Art Cancro and others.
+ * Copyright (C) 2002-2005 by Art Cancro and others.
* This code is released under the terms of the GNU General Public License.
*
*/
#include <limits.h>
#include "citadel.h"
#include "server.h"
-#include "sysdep_decls.h"
#include "citserver.h"
#include "support.h"
#include "config.h"
-#include "dynloader.h"
#include "room_ops.h"
#include "user_ops.h"
#include "policy.h"
#endif
+
+#include "ctdl_module.h"
+
+
/*
* Generate a randomizationalisticized token to use for authentication of
* a subscribe or unsubscribe request.
);
/* Convert it to base64 so it looks cool */
- encode_base64(buf, sourcebuf);
+ CtdlEncodeBase64(buf, sourcebuf, strlen(sourcebuf));
}
* Enter a subscription request
*/
void do_subscribe(char *room, char *email, char *subtype, char *webpage) {
- struct quickroom qrbuf;
+ struct ctdlroom qrbuf;
FILE *ncfp;
- char filename[SIZ];
- char token[SIZ];
- char confirmation_request[SIZ];
- char urlroom[SIZ];
+ char filename[256];
+ char token[256];
+ char confirmation_request[2048];
+ char buf[512];
+ char urlroom[ROOMNAMELEN];
+ char scancmd[64];
+ char scanemail[256];
+ int found_sub = 0;
if (getroom(&qrbuf, room) != 0) {
- cprintf("%d There is no list called '%s'\n", ERROR, room);
+ cprintf("%d There is no list called '%s'\n", ERROR + ROOM_NOT_FOUND, room);
return;
}
if ((qrbuf.QRflags2 & QR2_SELFLIST) == 0) {
cprintf("%d '%s' "
"does not accept subscribe/unsubscribe requests.\n",
- ERROR+HIGHER_ACCESS_REQUIRED, qrbuf.QRname);
+ ERROR + HIGHER_ACCESS_REQUIRED, qrbuf.QRname);
return;
}
listsub_generate_token(token);
+ assoc_file_name(filename, sizeof filename, &qrbuf, ctdl_netcfg_dir);
+
+ /*
+ * Make sure the requested address isn't already subscribed
+ */
+ begin_critical_section(S_NETCONFIGS);
+ ncfp = fopen(filename, "r");
+ if (ncfp != NULL) {
+ while (fgets(buf, sizeof buf, ncfp) != NULL) {
+ buf[strlen(buf)-1] = 0;
+ extract_token(scancmd, buf, 0, '|', sizeof scancmd);
+ extract_token(scanemail, buf, 1, '|', sizeof scanemail);
+ if ((!strcasecmp(scancmd, "listrecp"))
+ || (!strcasecmp(scancmd, "digestrecp"))) {
+ if (!strcasecmp(scanemail, email)) {
+ ++found_sub;
+ }
+ }
+ }
+ fclose(ncfp);
+ }
+ end_critical_section(S_NETCONFIGS);
+
+ if (found_sub != 0) {
+ cprintf("%d '%s' is already subscribed to '%s'.\n",
+ ERROR + ALREADY_EXISTS,
+ email, qrbuf.QRname);
+ return;
+ }
+
+ /*
+ * Now add it to the file
+ */
begin_critical_section(S_NETCONFIGS);
- assoc_file_name(filename, sizeof filename, &qrbuf, "netconfigs");
ncfp = fopen(filename, "a");
if (ncfp != NULL) {
fprintf(ncfp, "subpending|%s|%s|%s|%ld|%s\n",
urlesc(urlroom, qrbuf.QRname);
snprintf(confirmation_request, sizeof confirmation_request,
- "Content-type: text/html\n\n"
- "<HTML><BODY>"
+
+ "MIME-Version: 1.0\n"
+ "Content-Type: multipart/alternative; boundary=\"__ctdlmultipart__\"\n"
+ "\n"
+ "This is a multipart message in MIME format.\n"
+ "\n"
+ "--__ctdlmultipart__\n"
+ "Content-type: text/plain\n"
+ "\n"
+ "Someone (probably you) has submitted a request to subscribe\n"
+ "<%s> to the '%s' mailing list.\n"
+ "\n"
+ "Please go here to confirm this request:\n"
+ " %s?room=%s&token=%s&cmd=confirm \n"
+ "\n"
+ "If this request has been submitted in error and you do not\n"
+ "wish to receive the '%s' mailing list, simply do nothing,\n"
+ "and you will not receive any further mailings.\n"
+ "\n"
+ "--__ctdlmultipart__\n"
+ "Content-type: text/html\n"
+ "\n"
+ "<HTML><BODY>\n"
"Someone (probably you) has submitted a request to subscribe\n"
"<%s> to the <B>%s</B> mailing list.<BR><BR>\n"
- "<A HREF=\"http://%s?room=%s&token=%s&cmd=confirm\">"
- "Please click here to confirm this request.</A><BR><BR>\n"
+ "Please click here to confirm this request:<BR>\n"
+ "<A HREF=\"%s?room=%s&token=%s&cmd=confirm\">"
+ "%s?room=%s&token=%s&cmd=confirm</A><BR><BR>\n"
"If this request has been submitted in error and you do not\n"
"wish to receive the '%s' mailing list, simply do nothing,\n"
"and you will not receive any further mailings.\n"
- "</BODY></HTML>\n",
-
- email, qrbuf.QRname, webpage, urlroom, token, qrbuf.QRname
+ "</BODY></HTML>\n"
+ "\n"
+ "--__ctdlmultipart__--\n",
+
+ email, qrbuf.QRname,
+ webpage, urlroom, token,
+ qrbuf.QRname,
+
+ email, qrbuf.QRname,
+ webpage, urlroom, token,
+ webpage, urlroom, token,
+ qrbuf.QRname
);
quickie_message( /* This delivers the message */
"Citadel",
+ NULL,
email,
NULL,
confirmation_request,
- FMT_RFC822
+ FMT_RFC822,
+ "Please confirm your list subscription"
);
cprintf("%d Subscription entered; confirmation request sent\n", CIT_OK);
* Enter an unsubscription request
*/
void do_unsubscribe(char *room, char *email, char *webpage) {
- struct quickroom qrbuf;
+ struct ctdlroom qrbuf;
FILE *ncfp;
- char filename[SIZ];
- char token[SIZ];
- char buf[SIZ];
- char confirmation_request[SIZ];
- char urlroom[SIZ];
- char scancmd[SIZ];
- char scanemail[SIZ];
+ char filename[256];
+ char token[256];
+ char buf[512];
+ char confirmation_request[2048];
+ char urlroom[ROOMNAMELEN];
+ char scancmd[256];
+ char scanemail[256];
int found_sub = 0;
if (getroom(&qrbuf, room) != 0) {
cprintf("%d There is no list called '%s'\n",
- ERROR+ROOM_NOT_FOUND, room);
+ ERROR + ROOM_NOT_FOUND, room);
return;
}
if ((qrbuf.QRflags2 & QR2_SELFLIST) == 0) {
cprintf("%d '%s' "
"does not accept subscribe/unsubscribe requests.\n",
- ERROR+HIGHER_ACCESS_REQUIRED, qrbuf.QRname);
+ ERROR + HIGHER_ACCESS_REQUIRED, qrbuf.QRname);
return;
}
listsub_generate_token(token);
- assoc_file_name(filename, sizeof filename, &qrbuf, "netconfigs");
+ assoc_file_name(filename, sizeof filename, &qrbuf, ctdl_netcfg_dir);
/*
* Make sure there's actually a subscription there to remove
*/
begin_critical_section(S_NETCONFIGS);
- ncfp = fopen(filename, "a");
+ ncfp = fopen(filename, "r");
if (ncfp != NULL) {
while (fgets(buf, sizeof buf, ncfp) != NULL) {
- extract(scancmd, buf, 0);
- extract(scanemail, buf, 1);
+ buf[strlen(buf)-1] = 0;
+ extract_token(scancmd, buf, 0, '|', sizeof scancmd);
+ extract_token(scanemail, buf, 1, '|', sizeof scanemail);
if ((!strcasecmp(scancmd, "listrecp"))
|| (!strcasecmp(scancmd, "digestrecp"))) {
if (!strcasecmp(scanemail, email)) {
end_critical_section(S_NETCONFIGS);
if (found_sub == 0) {
- cprintf("%d <%s> is not subscribed to '%s'.\n",
- ERROR+NO_SUCH_USER,
+ cprintf("%d '%s' is not subscribed to '%s'.\n",
+ ERROR + NO_SUCH_USER,
email, qrbuf.QRname);
return;
}
urlesc(urlroom, qrbuf.QRname);
snprintf(confirmation_request, sizeof confirmation_request,
- "Content-type: text/html\n\n"
- "<HTML><BODY>"
- "Someone (probably you) has submitted a request "
- "to un subscribe\n"
+
+ "MIME-Version: 1.0\n"
+ "Content-Type: multipart/alternative; boundary=\"__ctdlmultipart__\"\n"
+ "\n"
+ "This is a multipart message in MIME format.\n"
+ "\n"
+ "--__ctdlmultipart__\n"
+ "Content-type: text/plain\n"
+ "\n"
+ "Someone (probably you) has submitted a request to unsubscribe\n"
+ "<%s> from the '%s' mailing list.\n"
+ "\n"
+ "Please go here to confirm this request:\n"
+ " %s?room=%s&token=%s&cmd=confirm \n"
+ "\n"
+ "If this request has been submitted in error and you do not\n"
+ "wish to unsubscribe from the '%s' mailing list, simply do nothing,\n"
+ "and the request will not be processed.\n"
+ "\n"
+ "--__ctdlmultipart__\n"
+ "Content-type: text/html\n"
+ "\n"
+ "<HTML><BODY>\n"
+ "Someone (probably you) has submitted a request to unsubscribe\n"
"<%s> from the <B>%s</B> mailing list.<BR><BR>\n"
- "<A HREF=\"http://%s?room=%s&token=%s&cmd=confirm\">"
- "Please click here to confirm this request.</A><BR><BR>\n"
+ "Please click here to confirm this request:<BR>\n"
+ "<A HREF=\"%s?room=%s&token=%s&cmd=confirm\">"
+ "%s?room=%s&token=%s&cmd=confirm</A><BR><BR>\n"
"If this request has been submitted in error and you do not\n"
- "wish to unsubscribe from the "
- "'%s' mailing list, simply do nothing,\n"
- "and you will remain subscribed to the list.\n"
- "</BODY></HTML>\n",
-
- email, qrbuf.QRname, webpage, urlroom, token, qrbuf.QRname
+ "wish to unsubscribe from the '%s' mailing list, simply do nothing,\n"
+ "and the request will not be processed.\n"
+ "</BODY></HTML>\n"
+ "\n"
+ "--__ctdlmultipart__--\n",
+
+ email, qrbuf.QRname,
+ webpage, urlroom, token,
+ qrbuf.QRname,
+
+ email, qrbuf.QRname,
+ webpage, urlroom, token,
+ webpage, urlroom, token,
+ qrbuf.QRname
);
quickie_message( /* This delivers the message */
"Citadel",
+ NULL,
email,
NULL,
confirmation_request,
- FMT_RFC822
+ FMT_RFC822,
+ "Please confirm your unsubscribe request"
);
cprintf("%d Unubscription noted; confirmation request sent\n", CIT_OK);
* Confirm a subscribe/unsubscribe request.
*/
void do_confirm(char *room, char *token) {
- struct quickroom qrbuf;
+ struct ctdlroom qrbuf;
FILE *ncfp;
- char filename[SIZ];
- char line_token[SIZ];
+ char filename[256];
+ char line_token[256];
long line_offset;
int line_length;
- char buf[SIZ];
- char cmd[SIZ];
- char email[SIZ];
- char subtype[SIZ];
+ char buf[512];
+ char cmd[256];
+ char email[256];
+ char subtype[128];
int success = 0;
+ char address_to_unsubscribe[256];
+ char scancmd[256];
+ char scanemail[256];
+ char *holdbuf = NULL;
+ int linelen = 0;
+ int buflen = 0;
+
+ strcpy(address_to_unsubscribe, "");
if (getroom(&qrbuf, room) != 0) {
cprintf("%d There is no list called '%s'\n",
- ERROR+ROOM_NOT_FOUND, room);
+ ERROR + ROOM_NOT_FOUND, room);
return;
}
if ((qrbuf.QRflags2 & QR2_SELFLIST) == 0) {
cprintf("%d '%s' "
"does not accept subscribe/unsubscribe requests.\n",
- ERROR+HIGHER_ACCESS_REQUIRED, qrbuf.QRname);
+ ERROR + HIGHER_ACCESS_REQUIRED, qrbuf.QRname);
return;
}
+ /*
+ * Now start scanning this room's netconfig file for the
+ * specified token.
+ */
+ assoc_file_name(filename, sizeof filename, &qrbuf, ctdl_netcfg_dir);
begin_critical_section(S_NETCONFIGS);
- assoc_file_name(filename, sizeof filename, &qrbuf, "netconfigs");
ncfp = fopen(filename, "r+");
if (ncfp != NULL) {
while (line_offset = ftell(ncfp),
(fgets(buf, sizeof buf, ncfp) != NULL) ) {
buf[strlen(buf)-1] = 0;
line_length = strlen(buf);
- extract(cmd, buf, 0);
+ extract_token(cmd, buf, 0, '|', sizeof cmd);
if (!strcasecmp(cmd, "subpending")) {
- extract(email, buf, 1);
- extract(subtype, buf, 2);
- extract(line_token, buf, 3);
+ extract_token(email, buf, 1, '|', sizeof email);
+ extract_token(subtype, buf, 2, '|', sizeof subtype);
+ extract_token(line_token, buf, 3, '|', sizeof line_token);
if (!strcasecmp(token, line_token)) {
if (!strcasecmp(subtype, "digest")) {
- strcpy(buf, "digestrecp|");
+ safestrncpy(buf, "digestrecp|", sizeof buf);
}
else {
- strcpy(buf, "listrecp|");
+ safestrncpy(buf, "listrecp|", sizeof buf);
}
strcat(buf, email);
strcat(buf, "|");
++success;
}
}
+ if (!strcasecmp(cmd, "unsubpending")) {
+ extract_token(line_token, buf, 2, '|', sizeof line_token);
+ if (!strcasecmp(token, line_token)) {
+ extract_token(address_to_unsubscribe, buf, 1, '|',
+ sizeof address_to_unsubscribe);
+ }
+ }
}
fclose(ncfp);
}
end_critical_section(S_NETCONFIGS);
+ /*
+ * If "address_to_unsubscribe" contains something, then we have to
+ * make another pass at the file, stripping out lines referring to
+ * that address.
+ */
+ if (strlen(address_to_unsubscribe) > 0) {
+ holdbuf = malloc(SIZ);
+ begin_critical_section(S_NETCONFIGS);
+ ncfp = fopen(filename, "r+");
+ if (ncfp != NULL) {
+ while (line_offset = ftell(ncfp),
+ (fgets(buf, sizeof buf, ncfp) != NULL) ) {
+ buf[strlen(buf)-1]=0;
+ extract_token(scancmd, buf, 0, '|', sizeof scancmd);
+ extract_token(scanemail, buf, 1, '|', sizeof scanemail);
+ if ( (!strcasecmp(scancmd, "listrecp"))
+ && (!strcasecmp(scanemail,
+ address_to_unsubscribe)) ) {
+ ++success;
+ }
+ else if ( (!strcasecmp(scancmd, "digestrecp"))
+ && (!strcasecmp(scanemail,
+ address_to_unsubscribe)) ) {
+ ++success;
+ }
+ else if ( (!strcasecmp(scancmd, "subpending"))
+ && (!strcasecmp(scanemail,
+ address_to_unsubscribe)) ) {
+ ++success;
+ }
+ else if ( (!strcasecmp(scancmd, "unsubpending"))
+ && (!strcasecmp(scanemail,
+ address_to_unsubscribe)) ) {
+ ++success;
+ }
+ else { /* Not relevant, so *keep* it! */
+ linelen = strlen(buf);
+ holdbuf = realloc(holdbuf,
+ (buflen + linelen + 2) );
+ strcpy(&holdbuf[buflen], buf);
+ buflen += linelen;
+ strcpy(&holdbuf[buflen], "\n");
+ buflen += 1;
+ }
+ }
+ fclose(ncfp);
+ }
+ ncfp = fopen(filename, "w");
+ if (ncfp != NULL) {
+ fwrite(holdbuf, buflen+1, 1, ncfp);
+ fclose(ncfp);
+ }
+ end_critical_section(S_NETCONFIGS);
+ free(holdbuf);
+ }
+
+ /*
+ * Did we do anything useful today?
+ */
if (success) {
cprintf("%d %d operation(s) confirmed.\n", CIT_OK, success);
+ lprintf(CTDL_NOTICE, "Mailing list: %s %ssubscribed to %s with token %s\n", email, (strlen(address_to_unsubscribe) > 0) ? "un" : "", room, token);
}
else {
- cprintf("%d Invalid token.\n", ERROR);
+ cprintf("%d Invalid token.\n", ERROR + ILLEGAL_VALUE);
}
}
*/
void cmd_subs(char *cmdbuf) {
- char opr[SIZ];
- char room[SIZ];
- char email[SIZ];
- char subtype[SIZ];
- char token[SIZ];
- char webpage[SIZ];
+ char opr[256];
+ char room[ROOMNAMELEN];
+ char email[256];
+ char subtype[256];
+ char token[256];
+ char webpage[256];
- extract(opr, cmdbuf, 0);
+ extract_token(opr, cmdbuf, 0, '|', sizeof opr);
if (!strcasecmp(opr, "subscribe")) {
- extract(subtype, cmdbuf, 3);
+ extract_token(subtype, cmdbuf, 3, '|', sizeof subtype);
if ( (strcasecmp(subtype, "list"))
&& (strcasecmp(subtype, "digest")) ) {
- cprintf("%d Invalid subscription type.\n", ERROR);
+ cprintf("%d Invalid subscription type '%s'\n",
+ ERROR + ILLEGAL_VALUE, subtype);
}
else {
- extract(room, cmdbuf, 1);
- extract(email, cmdbuf, 2);
- extract(webpage, cmdbuf, 4);
+ extract_token(room, cmdbuf, 1, '|', sizeof room);
+ extract_token(email, cmdbuf, 2, '|', sizeof email);
+ extract_token(webpage, cmdbuf, 4, '|', sizeof webpage);
do_subscribe(room, email, subtype, webpage);
}
}
else if (!strcasecmp(opr, "unsubscribe")) {
- extract(room, cmdbuf, 1);
- extract(email, cmdbuf, 2);
- extract(webpage, cmdbuf, 4);
+ extract_token(room, cmdbuf, 1, '|', sizeof room);
+ extract_token(email, cmdbuf, 2, '|', sizeof email);
+ extract_token(webpage, cmdbuf, 3, '|', sizeof webpage);
do_unsubscribe(room, email, webpage);
}
else if (!strcasecmp(opr, "confirm")) {
- extract(room, cmdbuf, 1);
- extract(token, cmdbuf, 2);
+ extract_token(room, cmdbuf, 1, '|', sizeof room);
+ extract_token(token, cmdbuf, 2, '|', sizeof token);
do_confirm(room, token);
}
else {
- cprintf("%d Invalid command\n", ERROR);
+ cprintf("%d Invalid command\n", ERROR + ILLEGAL_VALUE);
}
}
/*
* Module entry point
*/
-char *Dynamic_Module_Init(void)
+CTDL_MODULE_INIT(listsub)
{
CtdlRegisterProtoHook(cmd_subs, "SUBS", "List subscribe/unsubscribe");
+
+ /* return our Subversion id for the Log */
return "$Id$";
}
projects / citadel.git / blobdiff