citadel/modules/ctdlproto/serv_file.c

   1 /*
   2  * Server functions which handle file transfers and room directories.
   3  *
   4  * Copyright (c) 1987-2015 by the citadel.org team
   5  *
   6  * This program is open source software; you can redistribute it and/or modify
   7  * it under the terms of the GNU General Public License version 3.
   8  *
   9  * This program is distributed in the hope that it will be useful,
  10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  12  * GNU General Public License for more details.
  13  */
  14
  15 #include <stdio.h>
  16 #include <libcitadel.h>
  17 #include <dirent.h>
  18
  19 #include "ctdl_module.h"
  20 #include "citserver.h"
  21 #include "support.h"
  22 #include "config.h"
  23 #include "user_ops.h"
  24
  25
  26 /*
  27  * Server command to delete a file from a room's directory
  28  */
  29 void cmd_delf(char *filename)
  30 {
  31         char pathname[64];
  32         int a;
  33
  34         if (CtdlAccessCheck(ac_room_aide))
  35                 return;
  36
  37         if ((CC->room.QRflags & QR_DIRECTORY) == 0) {
  38                 cprintf("%d No directory in this room.\n",
  39                         ERROR + NOT_HERE);
  40                 return;
  41         }
  42
  43         if (IsEmptyStr(filename)) {
  44                 cprintf("%d You must specify a file name.\n",
  45                         ERROR + FILE_NOT_FOUND);
  46                 return;
  47         }
  48         for (a = 0; !IsEmptyStr(&filename[a]); ++a) {
  49                 if ( (filename[a] == '/') || (filename[a] == '\\') ) {
  50                         filename[a] = '_';
  51                 }
  52         }
  53         snprintf(pathname, sizeof pathname,
  54                          "%s/%s/%s",
  55                          ctdl_file_dir,
  56                          CC->room.QRdirname, filename);
  57         a = unlink(pathname);
  58         if (a == 0) {
  59                 cprintf("%d File '%s' deleted.\n", CIT_OK, pathname);
  60         }
  61         else {
  62                 cprintf("%d File '%s' not found.\n",
  63                         ERROR + FILE_NOT_FOUND, pathname);
  64         }
  65 }
  66
  67
  68
  69
  70 /*
  71  * move a file from one room directory to another
  72  */
  73 void cmd_movf(char *cmdbuf)
  74 {
  75         char filename[PATH_MAX];
  76         char pathname[PATH_MAX];
  77         char newpath[PATH_MAX];
  78         char newroom[ROOMNAMELEN];
  79         char buf[PATH_MAX];
  80         int a;
  81         struct ctdlroom qrbuf;
  82
  83         extract_token(filename, cmdbuf, 0, '|', sizeof filename);
  84         extract_token(newroom, cmdbuf, 1, '|', sizeof newroom);
  85
  86         if (CtdlAccessCheck(ac_room_aide)) return;
  87
  88         if ((CC->room.QRflags & QR_DIRECTORY) == 0) {
  89                 cprintf("%d No directory in this room.\n",
  90                         ERROR + NOT_HERE);
  91                 return;
  92         }
  93
  94         if (IsEmptyStr(filename)) {
  95                 cprintf("%d You must specify a file name.\n",
  96                         ERROR + FILE_NOT_FOUND);
  97                 return;
  98         }
  99
 100         for (a = 0; !IsEmptyStr(&filename[a]); ++a) {
 101                 if ( (filename[a] == '/') || (filename[a] == '\\') ) {
 102                         filename[a] = '_';
 103                 }
 104         }
 105         snprintf(pathname, sizeof pathname, "./files/%s/%s",
 106                  CC->room.QRdirname, filename);
 107         if (access(pathname, 0) != 0) {
 108                 cprintf("%d File '%s' not found.\n",
 109                         ERROR + FILE_NOT_FOUND, pathname);
 110                 return;
 111         }
 112
 113         if (CtdlGetRoom(&qrbuf, newroom) != 0) {
 114                 cprintf("%d '%s' does not exist.\n", ERROR + ROOM_NOT_FOUND, newroom);
 115                 return;
 116         }
 117         if ((qrbuf.QRflags & QR_DIRECTORY) == 0) {
 118                 cprintf("%d '%s' is not a directory room.\n",
 119                         ERROR + NOT_HERE, qrbuf.QRname);
 120                 return;
 121         }
 122         snprintf(newpath, sizeof newpath, "./files/%s/%s", qrbuf.QRdirname,
 123                  filename);
 124         if (link(pathname, newpath) != 0) {
 125                 cprintf("%d Couldn't move file: %s\n", ERROR + INTERNAL_ERROR,
 126                         strerror(errno));
 127                 return;
 128         }
 129         unlink(pathname);
 130
 131         /* this is a crude method of copying the file description */
 132         snprintf(buf, sizeof buf,
 133                  "cat ./files/%s/filedir |grep \"%s\" >>./files/%s/filedir",
 134                  CC->room.QRdirname, filename, qrbuf.QRdirname);
 135         system(buf);
 136         cprintf("%d File '%s' has been moved.\n", CIT_OK, filename);
 137 }
 138
 139
 140 /*
 141  * This code is common to all commands which open a file for downloading,
 142  * regardless of whether it's a file from the directory, an image, a network
 143  * spool file, a MIME attachment, etc.
 144  * It examines the file and displays the OK result code and some information
 145  * about the file.  NOTE: this stuff is Unix dependent.
 146  */
 147 void OpenCmdResult(char *filename, const char *mime_type)
 148 {
 149         struct stat statbuf;
 150         time_t modtime;
 151         long filesize;
 152
 153         fstat(fileno(CC->download_fp), &statbuf);
 154         CC->download_fp_total = statbuf.st_size;
 155         filesize = (long) statbuf.st_size;
 156         modtime = (time_t) statbuf.st_mtime;
 157
 158         cprintf("%d %ld|%ld|%s|%s\n",
 159                 CIT_OK, filesize, (long)modtime, filename, mime_type);
 160 }
 161
 162
 163 /*
 164  * open a file for downloading
 165  */
 166 void cmd_open(char *cmdbuf)
 167 {
 168         char filename[256];
 169         char pathname[PATH_MAX];
 170         int a;
 171
 172         extract_token(filename, cmdbuf, 0, '|', sizeof filename);
 173
 174         if (CtdlAccessCheck(ac_logged_in)) return;
 175
 176         if ((CC->room.QRflags & QR_DIRECTORY) == 0) {
 177                 cprintf("%d No directory in this room.\n",
 178                         ERROR + NOT_HERE);
 179                 return;
 180         }
 181
 182         if (IsEmptyStr(filename)) {
 183                 cprintf("%d You must specify a file name.\n",
 184                         ERROR + FILE_NOT_FOUND);
 185                 return;
 186         }
 187         if (strstr(filename, "../") != NULL)
 188         {
 189                 cprintf("%d syntax error.\n",
 190                         ERROR + ILLEGAL_VALUE);
 191                 return;
 192         }
 193
 194         if (CC->download_fp != NULL) {
 195                 cprintf("%d You already have a download file open.\n",
 196                         ERROR + RESOURCE_BUSY);
 197                 return;
 198         }
 199
 200         for (a = 0; !IsEmptyStr(&filename[a]); ++a) {
 201                 if ( (filename[a] == '/') || (filename[a] == '\\') ) {
 202                         filename[a] = '_';
 203                 }
 204         }
 205
 206         snprintf(pathname, sizeof pathname,
 207                          "%s/%s/%s",
 208                          ctdl_file_dir,
 209                          CC->room.QRdirname, filename);
 210         CC->download_fp = fopen(pathname, "r");
 211
 212         if (CC->download_fp == NULL) {
 213                 cprintf("%d cannot open %s: %s\n",
 214                         ERROR + INTERNAL_ERROR, pathname, strerror(errno));
 215                 return;
 216         }
 217
 218         OpenCmdResult(filename, "application/octet-stream");
 219 }
 220
 221 /*
 222  * open an image file
 223  */
 224 void cmd_oimg(char *cmdbuf)
 225 {
 226         char filename[PATH_MAX];
 227         char pathname[PATH_MAX];
 228         char MimeTestBuf[32];
 229         int which_floor;
 230         int a;
 231         int rv;
 232
 233         extract_token(filename, cmdbuf, 0, '|', sizeof filename);
 234
 235         if (IsEmptyStr(filename)) {
 236                 cprintf("%d You must specify a file name.\n",
 237                         ERROR + FILE_NOT_FOUND);
 238                 return;
 239         }
 240
 241         if (CC->download_fp != NULL) {
 242                 cprintf("%d You already have a download file open.\n",
 243                         ERROR + RESOURCE_BUSY);
 244                 return;
 245         }
 246
 247         if (!strcasecmp(filename, "_floorpic_")) {
 248                 which_floor = extract_int(cmdbuf, 1);
 249                 snprintf(pathname, sizeof pathname, "%s/floor.%d", ctdl_image_dir, which_floor);
 250         }
 251         else if (!strcasecmp(filename, "_roompic_")) {
 252                 assoc_file_name(pathname, sizeof pathname, &CC->room, ctdl_image_dir);
 253         }
 254         else {
 255                 for (a = 0; !IsEmptyStr(&filename[a]); ++a) {
 256                         filename[a] = tolower(filename[a]);
 257                         if ( (filename[a] == '/') || (filename[a] == '\\') ) {
 258                                 filename[a] = '_';
 259                         }
 260                 }
 261                 if (strstr(filename, "../") != NULL)
 262                 {
 263                         cprintf("%d syntax error.\n",
 264                                 ERROR + ILLEGAL_VALUE);
 265                         return;
 266                 }
 267
 268                 snprintf(pathname, sizeof pathname,
 269                                  "%s/%s",
 270                                  ctdl_image_dir,
 271                                  filename);
 272         }
 273
 274         CC->download_fp = fopen(pathname, "rb");
 275         if (CC->download_fp == NULL) {
 276                 strcat(pathname, ".gif");
 277                 CC->download_fp = fopen(pathname, "rb");
 278         }
 279         if (CC->download_fp == NULL) {
 280                 cprintf("%d Cannot open %s: %s\n",
 281                         ERROR + FILE_NOT_FOUND, pathname, strerror(errno));
 282                 return;
 283         }
 284         rv = fread(&MimeTestBuf[0], 1, 32, CC->download_fp);
 285         if (rv == -1) {
 286                 cprintf("%d Cannot access %s: %s\n",
 287                         ERROR + FILE_NOT_FOUND, pathname, strerror(errno));
 288                 return;
 289         }
 290
 291         rewind (CC->download_fp);
 292         OpenCmdResult(pathname, GuessMimeType(&MimeTestBuf[0], 32));
 293 }
 294
 295
 296 /*
 297  * open a file for uploading
 298  */
 299 void cmd_uopn(char *cmdbuf)
 300 {
 301         int a;
 302
 303         extract_token(CC->upl_file, cmdbuf, 0, '|', sizeof CC->upl_file);
 304         extract_token(CC->upl_mimetype, cmdbuf, 1, '|', sizeof CC->upl_mimetype);
 305         extract_token(CC->upl_comment, cmdbuf, 2, '|', sizeof CC->upl_comment);
 306
 307         if (CtdlAccessCheck(ac_logged_in)) return;
 308
 309         if ((CC->room.QRflags & QR_DIRECTORY) == 0) {
 310                 cprintf("%d No directory in this room.\n",
 311                         ERROR + NOT_HERE);
 312                 return;
 313         }
 314
 315         if (IsEmptyStr(CC->upl_file)) {
 316                 cprintf("%d You must specify a file name.\n",
 317                         ERROR + FILE_NOT_FOUND);
 318                 return;
 319         }
 320
 321         if (CC->upload_fp != NULL) {
 322                 cprintf("%d You already have a upload file open.\n",
 323                         ERROR + RESOURCE_BUSY);
 324                 return;
 325         }
 326
 327         for (a = 0; !IsEmptyStr(&CC->upl_file[a]); ++a) {
 328                 if ( (CC->upl_file[a] == '/') || (CC->upl_file[a] == '\\') ) {
 329                         CC->upl_file[a] = '_';
 330                 }
 331         }
 332         snprintf(CC->upl_path, sizeof CC->upl_path,
 333                          "%s/%s/%s",
 334                          ctdl_file_dir,
 335                          CC->room.QRdirname, CC->upl_file);
 336         snprintf(CC->upl_filedir, sizeof CC->upl_filedir,
 337                          "%s/%s/filedir",
 338                          ctdl_file_dir,
 339                          CC->room.QRdirname);
 340
 341         CC->upload_fp = fopen(CC->upl_path, "r");
 342         if (CC->upload_fp != NULL) {
 343                 fclose(CC->upload_fp);
 344                 CC->upload_fp = NULL;
 345                 cprintf("%d '%s' already exists\n",
 346                         ERROR + ALREADY_EXISTS, CC->upl_path);
 347                 return;
 348         }
 349
 350         CC->upload_fp = fopen(CC->upl_path, "wb");
 351         if (CC->upload_fp == NULL) {
 352                 cprintf("%d Cannot open %s: %s\n",
 353                         ERROR + INTERNAL_ERROR, CC->upl_path, strerror(errno));
 354                 return;
 355         }
 356         cprintf("%d Ok\n", CIT_OK);
 357 }
 358
 359
 360
 361 /*
 362  * open an image file for uploading
 363  */
 364 void cmd_uimg(char *cmdbuf)
 365 {
 366         int is_this_for_real;
 367         char basenm[256];
 368         int which_floor;
 369         int a;
 370
 371         if (num_parms(cmdbuf) < 2) {
 372                 cprintf("%d Usage error.\n", ERROR + ILLEGAL_VALUE);
 373                 return;
 374         }
 375
 376         is_this_for_real = extract_int(cmdbuf, 0);
 377         extract_token(CC->upl_mimetype, cmdbuf, 1, '|', sizeof CC->upl_mimetype);
 378         extract_token(basenm, cmdbuf, 2, '|', sizeof basenm);
 379         if (CC->upload_fp != NULL) {
 380                 cprintf("%d You already have an upload file open.\n",
 381                         ERROR + RESOURCE_BUSY);
 382                 return;
 383         }
 384
 385         strcpy(CC->upl_path, "");
 386
 387         for (a = 0; !IsEmptyStr(&basenm[a]); ++a) {
 388                 basenm[a] = tolower(basenm[a]);
 389                 if ( (basenm[a] == '/') || (basenm[a] == '\\') ) {
 390                         basenm[a] = '_';
 391                 }
 392         }
 393
 394         if (CC->user.axlevel >= AxAideU) {
 395                 snprintf(CC->upl_path, sizeof CC->upl_path,
 396                                  "%s/%s",
 397                                  ctdl_image_dir,
 398                                  basenm);
 399         }
 400
 401         if ((!strcasecmp(basenm, "_floorpic_"))
 402             && (CC->user.axlevel >= AxAideU)) {
 403                 which_floor = extract_int(cmdbuf, 2);
 404                 snprintf(CC->upl_path, sizeof CC->upl_path,
 405                                  "%s/floor.%d.gif",
 406                                  ctdl_image_dir,
 407                                  which_floor);
 408         }
 409
 410         if ((!strcasecmp(basenm, "_roompic_")) && (is_room_aide())) {
 411                 assoc_file_name(CC->upl_path, sizeof CC->upl_path, &CC->room, ctdl_image_dir);
 412         }
 413
 414         if (IsEmptyStr(CC->upl_path)) {
 415                 cprintf("%d Higher access required.\n",
 416                         ERROR + HIGHER_ACCESS_REQUIRED);
 417                 return;
 418         }
 419
 420         if (is_this_for_real == 0) {
 421                 cprintf("%d Ok to send image\n", CIT_OK);
 422                 return;
 423         }
 424
 425         CC->upload_fp = fopen(CC->upl_path, "wb");
 426         if (CC->upload_fp == NULL) {
 427                 cprintf("%d Cannot open %s: %s\n",
 428                         ERROR + INTERNAL_ERROR, CC->upl_path, strerror(errno));
 429                 return;
 430         }
 431         cprintf("%d Ok\n", CIT_OK);
 432         CC->upload_type = UPL_IMAGE;
 433 }
 434
 435
 436 /*
 437  * close the download file
 438  */
 439 void cmd_clos(char *cmdbuf)
 440 {
 441         char buf[256];
 442
 443         if (CC->download_fp == NULL) {
 444                 cprintf("%d You don't have a download file open.\n",
 445                         ERROR + RESOURCE_NOT_OPEN);
 446                 return;
 447         }
 448
 449         fclose(CC->download_fp);
 450         CC->download_fp = NULL;
 451
 452         if (CC->dl_is_net == 1) {
 453                 CC->dl_is_net = 0;
 454                 snprintf(buf, sizeof buf,
 455                                  "%s/%s",
 456                                  ctdl_netout_dir,
 457                                  CC->net_node);
 458                 unlink(buf);
 459         }
 460
 461         cprintf("%d Ok\n", CIT_OK);
 462 }
 463
 464
 465 /*
 466  * abort an upload
 467  */
 468 void abort_upl(CitContext *who)
 469 {
 470         if (who->upload_fp != NULL) {
 471                 fclose(who->upload_fp);
 472                 who->upload_fp = NULL;
 473                 unlink(CC->upl_path);
 474         }
 475 }
 476
 477
 478
 479 /*
 480  * close the upload file
 481  */
 482 void cmd_ucls(char *cmd)
 483 {
 484         struct CitContext *CCC = CC;
 485         FILE *fp;
 486         char upload_notice[512];
 487         static int seq = 0;
 488
 489         if (CCC->upload_fp == NULL) {
 490                 cprintf("%d You don't have an upload file open.\n", ERROR + RESOURCE_NOT_OPEN);
 491                 return;
 492         }
 493
 494         fclose(CC->upload_fp);
 495         CCC->upload_fp = NULL;
 496
 497         if ((!strcasecmp(cmd, "1")) && (CCC->upload_type != UPL_FILE)) {
 498                 cprintf("%d Upload completed.\n", CIT_OK);
 499
 500                 if (CCC->upload_type == UPL_NET) {
 501                         char final_filename[PATH_MAX];
 502                         snprintf(final_filename, sizeof final_filename,
 503                                 "%s/%s.%04lx.%04x",
 504                                 ctdl_netin_dir,
 505                                 CCC->net_node,
 506                                 (long)getpid(),
 507                                 ++seq
 508                         );
 509
 510                         if (link(CCC->upl_path, final_filename) == 0) {
 511                                 CTDL_syslog(LOG_INFO, "UCLS: updoaded %s",
 512                                        final_filename);
 513                                 unlink(CCC->upl_path);
 514                         }
 515                         else {
 516                                 CTDL_syslog(LOG_INFO, "Cannot link %s to %s: %s",
 517                                             CCC->upl_path, final_filename, strerror(errno)
 518                                 );
 519                         }
 520
 521
 522                         /* FIXME ... here we need to trigger a network run */
 523                 }
 524
 525                 CCC->upload_type = UPL_FILE;
 526                 return;
 527         }
 528
 529         if (!strcasecmp(cmd, "1")) {
 530                 cprintf("%d File '%s' saved.\n", CIT_OK, CCC->upl_path);
 531                 fp = fopen(CCC->upl_filedir, "a");
 532                 if (fp == NULL) {
 533                         fp = fopen(CCC->upl_filedir, "w");
 534                 }
 535                 if (fp != NULL) {
 536                         fprintf(fp, "%s %s %s\n", CCC->upl_file,
 537                                 CCC->upl_mimetype,
 538                                 CCC->upl_comment);
 539                         fclose(fp);
 540                 }
 541
 542                 if ((CCC->room.QRflags2 & QR2_NOUPLMSG) == 0) {
 543                         /* put together an upload notice */
 544                         snprintf(upload_notice, sizeof upload_notice,
 545                                  "NEW UPLOAD: '%s'\n %s\n%s\n",
 546                                  CCC->upl_file,
 547                                  CCC->upl_comment,
 548                                  CCC->upl_mimetype);
 549                         quickie_message(CCC->curr_user, NULL, NULL, CCC->room.QRname,
 550                                         upload_notice, 0, NULL);
 551                 }
 552         } else {
 553                 abort_upl(CCC);
 554                 cprintf("%d File '%s' aborted.\n", CIT_OK, CCC->upl_path);
 555         }
 556 }
 557
 558
 559 /*
 560  * read from the download file
 561  */
 562 void cmd_read(char *cmdbuf)
 563 {
 564         long start_pos;
 565         size_t bytes;
 566         char buf[SIZ];
 567         int rc;
 568
 569         /* The client will transmit its requested offset and byte count */
 570         start_pos = extract_long(cmdbuf, 0);
 571         bytes = extract_int(cmdbuf, 1);
 572         if ((start_pos < 0) || (bytes <= 0)) {
 573                 cprintf("%d you have to specify a value > 0.\n", ERROR + ILLEGAL_VALUE);
 574                 return;
 575         }
 576
 577         if (CC->download_fp == NULL) {
 578                 cprintf("%d You don't have a download file open.\n",
 579                         ERROR + RESOURCE_NOT_OPEN);
 580                 return;
 581         }
 582
 583         /* If necessary, reduce the byte count to the size of our buffer */
 584         if (bytes > sizeof(buf)) {
 585                 bytes = sizeof(buf);
 586         }
 587
 588         rc = fseek(CC->download_fp, start_pos, 0);
 589         if (rc < 0) {
 590                 struct CitContext *CCC = CC;
 591                 cprintf("%d your file is smaller then %ld.\n", ERROR + ILLEGAL_VALUE, start_pos);
 592                 CTDL_syslog(LOG_ERR, "your file %s is smaller then %ld. [%s]\n",
 593                             CC->upl_path,
 594                             start_pos,
 595                             strerror(errno));
 596
 597                 return;
 598         }
 599         bytes = fread(buf, 1, bytes, CC->download_fp);
 600         if (bytes > 0) {
 601                 /* Tell the client the actual byte count and transmit it */
 602                 cprintf("%d %d\n", BINARY_FOLLOWS, (int)bytes);
 603                 client_write(buf, bytes);
 604         }
 605         else {
 606                 cprintf("%d %s\n", ERROR, strerror(errno));
 607         }
 608 }
 609
 610
 611 /*
 612  * write to the upload file
 613  */
 614 void cmd_writ(char *cmdbuf)
 615 {
 616         struct CitContext *CCC = CC;
 617         int bytes;
 618         char *buf;
 619         int rv;
 620
 621         unbuffer_output();
 622
 623         bytes = extract_int(cmdbuf, 0);
 624
 625         if (CCC->upload_fp == NULL) {
 626                 cprintf("%d You don't have an upload file open.\n", ERROR + RESOURCE_NOT_OPEN);
 627                 return;
 628         }
 629         if (bytes <= 0) {
 630                 cprintf("%d you have to specify a value > 0.\n", ERROR + ILLEGAL_VALUE);
 631                 return;
 632         }
 633
 634         if (bytes > 100000) {
 635                 bytes = 100000;
 636         }
 637
 638         cprintf("%d %d\n", SEND_BINARY, bytes);
 639         buf = malloc(bytes + 1);
 640         client_read(buf, bytes);
 641         rv = fwrite(buf, bytes, 1, CCC->upload_fp);
 642         if (rv == -1) {
 643                 CTDL_syslog(LOG_EMERG, "Couldn't write: %s\n",
 644                             strerror(errno));
 645         }
 646         free(buf);
 647 }
 648
 649
 650
 651
 652 /*
 653  * cmd_ndop() - open a network spool file for downloading
 654  */
 655 void cmd_ndop(char *cmdbuf)
 656 {
 657         struct CitContext *CCC = CC;
 658         char pathname[256];
 659         struct stat statbuf;
 660
 661         if (IsEmptyStr(CCC->net_node)) {
 662                 cprintf("%d Not authenticated as a network node.\n",
 663                         ERROR + NOT_LOGGED_IN);
 664                 return;
 665         }
 666
 667         if (CCC->download_fp != NULL) {
 668                 cprintf("%d You already have a download file open.\n",
 669                         ERROR + RESOURCE_BUSY);
 670                 return;
 671         }
 672
 673         snprintf(pathname, sizeof pathname,
 674                          "%s/%s",
 675                          ctdl_netout_dir,
 676                          CCC->net_node);
 677
 678         /* first open the file in append mode in order to create a
 679          * zero-length file if it doesn't already exist
 680          */
 681         CCC->download_fp = fopen(pathname, "a");
 682         if (CCC->download_fp != NULL)
 683                 fclose(CCC->download_fp);
 684
 685         /* now open it */
 686         CCC->download_fp = fopen(pathname, "r");
 687         if (CCC->download_fp == NULL) {
 688                 cprintf("%d cannot open %s: %s\n",
 689                         ERROR + INTERNAL_ERROR, pathname, strerror(errno));
 690                 return;
 691         }
 692
 693
 694         /* set this flag so other routines know that the download file
 695          * currently open is a network spool file
 696          */
 697         CCC->dl_is_net = 1;
 698
 699         stat(pathname, &statbuf);
 700         CCC->download_fp_total = statbuf.st_size;
 701         cprintf("%d %ld\n", CIT_OK, (long)statbuf.st_size);
 702 }
 703
 704 /*
 705  * cmd_nuop() - open a network spool file for uploading
 706  */
 707 void cmd_nuop(char *cmdbuf)
 708 {
 709         static int seq = 1;
 710
 711         if (IsEmptyStr(CC->net_node)) {
 712                 cprintf("%d Not authenticated as a network node.\n",
 713                         ERROR + NOT_LOGGED_IN);
 714                 return;
 715         }
 716
 717         if (CC->upload_fp != NULL) {
 718                 cprintf("%d You already have an upload file open.\n",
 719                         ERROR + RESOURCE_BUSY);
 720                 return;
 721         }
 722
 723         snprintf(CC->upl_path, sizeof CC->upl_path,
 724                          "%s/%s.%04lx.%04x",
 725                          ctdl_nettmp_dir,
 726                          CC->net_node,
 727                          (long)getpid(),
 728                          ++seq);
 729
 730         CC->upload_fp = fopen(CC->upl_path, "r");
 731         if (CC->upload_fp != NULL) {
 732                 fclose(CC->upload_fp);
 733                 CC->upload_fp = NULL;
 734                 cprintf("%d '%s' already exists\n",
 735                         ERROR + ALREADY_EXISTS, CC->upl_path);
 736                 return;
 737         }
 738
 739         CC->upload_fp = fopen(CC->upl_path, "w");
 740         if (CC->upload_fp == NULL) {
 741                 cprintf("%d Cannot open %s: %s\n",
 742                         ERROR + INTERNAL_ERROR, CC->upl_path, strerror(errno));
 743                 return;
 744         }
 745
 746         CC->upload_type = UPL_NET;
 747         cprintf("%d Ok\n", CIT_OK);
 748 }
 749 void files_logout_hook(void)
 750 {
 751         CitContext *CCC = MyContext();
 752
 753         /*
 754          * If there is a download in progress, abort it.
 755          */
 756         if (CCC->download_fp != NULL) {
 757                 fclose(CCC->download_fp);
 758                 CCC->download_fp = NULL;
 759         }
 760
 761         /*
 762          * If there is an upload in progress, abort it.
 763          */
 764         if (CCC->upload_fp != NULL) {
 765                 abort_upl(CCC);
 766         }
 767
 768 }
 769
 770 /*
 771  * help_subst()  -  support routine for help file viewer
 772  */
 773 void help_subst(char *strbuf, char *source, char *dest)
 774 {
 775         char workbuf[SIZ];
 776         int p;
 777
 778         while (p = pattern2(strbuf, source), (p >= 0)) {
 779                 strcpy(workbuf, &strbuf[p + strlen(source)]);
 780                 strcpy(&strbuf[p], dest);
 781                 strcat(strbuf, workbuf);
 782         }
 783 }
 784
 785 void do_help_subst(char *buffer)
 786 {
 787         char buf2[16];
 788
 789         help_subst(buffer, "^nodename", CtdlGetConfigStr("c_nodename"));
 790         help_subst(buffer, "^humannode", CtdlGetConfigStr("c_humannode"));
 791         help_subst(buffer, "^fqdn", CtdlGetConfigStr("c_fqdn"));
 792         help_subst(buffer, "^username", CC->user.fullname);
 793         snprintf(buf2, sizeof buf2, "%ld", CC->user.usernum);
 794         help_subst(buffer, "^usernum", buf2);
 795         help_subst(buffer, "^sysadm", CtdlGetConfigStr("c_sysadm"));
 796         help_subst(buffer, "^variantname", CITADEL);
 797         help_subst(buffer, "^maxsessions", CtdlGetConfigStr("c_maxsessions"));          // yes it's numeric but str is ok here
 798         help_subst(buffer, "^bbsdir", ctdl_message_dir);
 799 }
 800
 801
 802 typedef const char *ccharp;
 803 /*
 804  * display system messages or help
 805  */
 806 void cmd_mesg(char *mname)
 807 {
 808         FILE *mfp;
 809         char targ[256];
 810         char buf[256];
 811         char buf2[256];
 812         char *dirs[2];
 813         DIR *dp;
 814         struct dirent *d;
 815
 816         extract_token(buf, mname, 0, '|', sizeof buf);
 817
 818         dirs[0] = strdup(ctdl_message_dir);
 819         dirs[1] = strdup(ctdl_hlp_dir);
 820
 821         snprintf(buf2, sizeof buf2, "%s.%d.%d",
 822                 buf, CC->cs_clientdev, CC->cs_clienttyp);
 823
 824         /* If the client requested "?" then produce a listing */
 825         if (!strcmp(buf, "?")) {
 826                 cprintf("%d %s\n", LISTING_FOLLOWS, buf);
 827                 dp = opendir(dirs[1]);
 828                 if (dp != NULL) {
 829                         while (d = readdir(dp), d != NULL) {
 830                                 if (d->d_name[0] != '.') {
 831                                         cprintf(" %s\n", d->d_name);
 832                                 }
 833                         }
 834                         closedir(dp);
 835                 }
 836                 cprintf("000\n");
 837                 free(dirs[0]);
 838                 free(dirs[1]);
 839                 return;
 840         }
 841
 842         /* Otherwise, look for the requested file by name. */
 843         else {
 844                 mesg_locate(targ, sizeof targ, buf2, 2, (const ccharp*)dirs);
 845                 if (IsEmptyStr(targ)) {
 846                         snprintf(buf2, sizeof buf2, "%s.%d",
 847                                                         buf, CC->cs_clientdev);
 848                         mesg_locate(targ, sizeof targ, buf2, 2,
 849                                     (const ccharp*)dirs);
 850                         if (IsEmptyStr(targ)) {
 851                                 mesg_locate(targ, sizeof targ, buf, 2,
 852                                             (const ccharp*)dirs);
 853                         }
 854                 }
 855         }
 856
 857         free(dirs[0]);
 858         free(dirs[1]);
 859
 860         if (IsEmptyStr(targ)) {
 861                 cprintf("%d '%s' not found.  (Searching in %s and %s)\n",
 862                         ERROR + FILE_NOT_FOUND,
 863                         mname,
 864                         ctdl_message_dir,
 865                         ctdl_hlp_dir
 866                 );
 867                 return;
 868         }
 869
 870         mfp = fopen(targ, "r");
 871         if (mfp==NULL) {
 872                 cprintf("%d Cannot open '%s': %s\n",
 873                         ERROR + INTERNAL_ERROR, targ, strerror(errno));
 874                 return;
 875         }
 876         cprintf("%d %s\n", LISTING_FOLLOWS,buf);
 877
 878         while (fgets(buf, (sizeof buf - 1), mfp) != NULL) {
 879                 buf[strlen(buf)-1] = 0;
 880                 do_help_subst(buf);
 881                 cprintf("%s\n",buf);
 882         }
 883
 884         fclose(mfp);
 885         cprintf("000\n");
 886 }
 887
 888
 889 /*
 890  * enter system messages or help
 891  */
 892 void cmd_emsg(char *mname)
 893 {
 894         FILE *mfp;
 895         char targ[256];
 896         char buf[256];
 897         char *dirs[2];
 898         int a;
 899
 900         unbuffer_output();
 901
 902         if (CtdlAccessCheck(ac_aide)) return;
 903
 904         extract_token(buf, mname, 0, '|', sizeof buf);
 905         for (a=0; !IsEmptyStr(&buf[a]); ++a) {          /* security measure */
 906                 if (buf[a] == '/') buf[a] = '.';
 907         }
 908
 909         dirs[0] = strdup(ctdl_message_dir);
 910         dirs[1] = strdup(ctdl_hlp_dir);
 911
 912         mesg_locate(targ, sizeof targ, buf, 2, (const ccharp*)dirs);
 913         free(dirs[0]);
 914         free(dirs[1]);
 915
 916         if (IsEmptyStr(targ)) {
 917                 snprintf(targ, sizeof targ,
 918                                  "%s/%s",
 919                                  ctdl_hlp_dir, buf);
 920         }
 921
 922         mfp = fopen(targ,"w");
 923         if (mfp==NULL) {
 924                 cprintf("%d Cannot open '%s': %s\n",
 925                         ERROR + INTERNAL_ERROR, targ, strerror(errno));
 926                 return;
 927         }
 928         cprintf("%d %s\n", SEND_LISTING, targ);
 929
 930         while (client_getln(buf, sizeof buf) >=0 && strcmp(buf, "000")) {
 931                 fprintf(mfp, "%s\n", buf);
 932         }
 933
 934         fclose(mfp);
 935 }
 936
 937 /*****************************************************************************/
 938 /*                      MODULE INITIALIZATION STUFF                          */
 939 /*****************************************************************************/
 940
 941 CTDL_MODULE_INIT(file_ops)
 942 {
 943         if (!threading) {
 944                 CtdlRegisterSessionHook(files_logout_hook, EVT_LOGOUT, PRIO_LOGOUT + 8);
 945
 946                 CtdlRegisterProtoHook(cmd_delf, "DELF", "Delete a file");
 947                 CtdlRegisterProtoHook(cmd_movf, "MOVF", "Move a file");
 948                 CtdlRegisterProtoHook(cmd_open, "OPEN", "Open a download file transfer");
 949                 CtdlRegisterProtoHook(cmd_clos, "CLOS", "Close a download file transfer");
 950                 CtdlRegisterProtoHook(cmd_uopn, "UOPN", "Open an upload file transfer");
 951                 CtdlRegisterProtoHook(cmd_ucls, "UCLS", "Close an upload file transfer");
 952                 CtdlRegisterProtoHook(cmd_read, "READ", "File transfer read operation");
 953                 CtdlRegisterProtoHook(cmd_writ, "WRIT", "File transfer write operation");
 954                 CtdlRegisterProtoHook(cmd_ndop, "NDOP", "Open a network spool file for download");
 955                 CtdlRegisterProtoHook(cmd_nuop, "NUOP", "Open a network spool file for upload");
 956                 CtdlRegisterProtoHook(cmd_oimg, "OIMG", "Open an image file for download");
 957                 CtdlRegisterProtoHook(cmd_uimg, "UIMG", "Upload an image file");
 958
 959                 CtdlRegisterProtoHook(cmd_mesg, "MESG", "fetch system banners");
 960                 CtdlRegisterProtoHook(cmd_emsg, "EMSG", "submit system banners");
 961         }
 962         /* return our Subversion id for the Log */
 963         return "file_ops";
 964 }