citadel/msgbase.c

   1 /*
   2  * Implements the message store.
   3  *
   4  * Copyright (c) 1987-2012 by the citadel.org team
   5  *
   6  * This program is open source software; you can redistribute it and/or modify
   7  * it under the terms of the GNU General Public License version 3.
   8  *
   9  * This program is distributed in the hope that it will be useful,
  10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  12  * GNU General Public License for more details.
  13  */
  14
  15 #include "sysdep.h"
  16 #include <stdlib.h>
  17 #include <unistd.h>
  18 #include <stdio.h>
  19 #include <fcntl.h>
  20
  21 #if TIME_WITH_SYS_TIME
  22 # include <sys/time.h>
  23 # include <time.h>
  24 #else
  25 # if HAVE_SYS_TIME_H
  26 #  include <sys/time.h>
  27 # else
  28 #  include <time.h>
  29 # endif
  30 #endif
  31
  32
  33 #include <ctype.h>
  34 #include <string.h>
  35 #include <limits.h>
  36 #include <errno.h>
  37 #include <stdarg.h>
  38 #include <sys/stat.h>
  39 #include <sys/types.h>
  40 #include <regex.h>
  41 #include <libcitadel.h>
  42 #include "citadel.h"
  43 #include "server.h"
  44 #include "serv_extensions.h"
  45 #include "database.h"
  46 #include "msgbase.h"
  47 #include "support.h"
  48 #include "sysdep_decls.h"
  49 #include "citserver.h"
  50 #include "room_ops.h"
  51 #include "user_ops.h"
  52 #include "file_ops.h"
  53 #include "config.h"
  54 #include "control.h"
  55 #include "genstamp.h"
  56 #include "internet_addressing.h"
  57 #include "euidindex.h"
  58 #include "journaling.h"
  59 #include "citadel_dirs.h"
  60 #include "clientsocket.h"
  61 #include "threads.h"
  62
  63 #include "ctdl_module.h"
  64
  65 long config_msgnum;
  66 struct addresses_to_be_filed *atbf = NULL;
  67
  68 /* This temp file holds the queue of operations for AdjRefCount() */
  69 static FILE *arcfp = NULL;
  70 void AdjRefCountList(long *msgnum, long nmsg, int incr);
  71
  72 int MessageDebugEnabled = 0;
  73
  74 /*
  75  * These are the four-character field headers we use when outputting
  76  * messages in Citadel format (as opposed to RFC822 format).
  77  */
  78 char *msgkeys[] = {
  79         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  80         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  81         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  82         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  83         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  84         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  85         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  86         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  87         NULL,
  88         "from",
  89         NULL, NULL, NULL,
  90         "exti",
  91         "rfca",
  92         NULL,
  93         "hnod",
  94         "msgn",
  95         "jrnl",
  96         "rep2",
  97         "list",
  98         "text",
  99         "node",
 100         "room",
 101         "path",
 102         NULL,
 103         "rcpt",
 104         "spec",
 105         "time",
 106         "subj",
 107         NULL,
 108         "wefw",
 109         NULL,
 110         "cccc",
 111         NULL
 112 };
 113
 114 /*
 115  * This function is self explanatory.
 116  * (What can I say, I'm in a weird mood today...)
 117  */
 118 void remove_any_whitespace_to_the_left_or_right_of_at_symbol(char *name)
 119 {
 120         int i;
 121
 122         for (i = 0; i < strlen(name); ++i) {
 123                 if (name[i] == '@') {
 124                         while (isspace(name[i - 1]) && i > 0) {
 125                                 strcpy(&name[i - 1], &name[i]);
 126                                 --i;
 127                         }
 128                         while (isspace(name[i + 1])) {
 129                                 strcpy(&name[i + 1], &name[i + 2]);
 130                         }
 131                 }
 132         }
 133 }
 134
 135
 136 /*
 137  * Aliasing for network mail.
 138  * (Error messages have been commented out, because this is a server.)
 139  */
 140 int alias(char *name)
 141 {                               /* process alias and routing info for mail */
 142         struct CitContext *CCC = CC;
 143         FILE *fp;
 144         int a, i;
 145         char aaa[SIZ], bbb[SIZ];
 146         char *ignetcfg = NULL;
 147         char *ignetmap = NULL;
 148         int at = 0;
 149         char node[64];
 150         char testnode[64];
 151         char buf[SIZ];
 152
 153         char original_name[256];
 154         safestrncpy(original_name, name, sizeof original_name);
 155
 156         striplt(name);
 157         remove_any_whitespace_to_the_left_or_right_of_at_symbol(name);
 158         stripallbut(name, '<', '>');
 159
 160         fp = fopen(file_mail_aliases, "r");
 161         if (fp == NULL) {
 162                 fp = fopen("/dev/null", "r");
 163         }
 164         if (fp == NULL) {
 165                 return (MES_ERROR);
 166         }
 167         strcpy(aaa, "");
 168         strcpy(bbb, "");
 169         while (fgets(aaa, sizeof aaa, fp) != NULL) {
 170                 while (isspace(name[0]))
 171                         strcpy(name, &name[1]);
 172                 aaa[strlen(aaa) - 1] = 0;
 173                 strcpy(bbb, "");
 174                 for (a = 0; a < strlen(aaa); ++a) {
 175                         if (aaa[a] == ',') {
 176                                 strcpy(bbb, &aaa[a + 1]);
 177                                 aaa[a] = 0;
 178                         }
 179                 }
 180                 if (!strcasecmp(name, aaa))
 181                         strcpy(name, bbb);
 182         }
 183         fclose(fp);
 184
 185         /* Hit the Global Address Book */
 186         if (CtdlDirectoryLookup(aaa, name, sizeof aaa) == 0) {
 187                 strcpy(name, aaa);
 188         }
 189
 190         if (strcasecmp(original_name, name)) {
 191                 MSG_syslog(LOG_INFO, "%s is being forwarded to %s\n", original_name, name);
 192         }
 193
 194         /* Change "user @ xxx" to "user" if xxx is an alias for this host */
 195         for (a=0; a<strlen(name); ++a) {
 196                 if (name[a] == '@') {
 197                         if (CtdlHostAlias(&name[a+1]) == hostalias_localhost) {
 198                                 name[a] = 0;
 199                                 MSG_syslog(LOG_INFO, "Changed to <%s>\n", name);
 200                         }
 201                 }
 202         }
 203
 204         /* determine local or remote type, see citadel.h */
 205         at = haschar(name, '@');
 206         if (at == 0) return(MES_LOCAL);         /* no @'s - local address */
 207         if (at > 1) return(MES_ERROR);          /* >1 @'s - invalid address */
 208         remove_any_whitespace_to_the_left_or_right_of_at_symbol(name);
 209
 210         /* figure out the delivery mode */
 211         extract_token(node, name, 1, '@', sizeof node);
 212
 213         /* If there are one or more dots in the nodename, we assume that it
 214          * is an FQDN and will attempt SMTP delivery to the Internet.
 215          */
 216         if (haschar(node, '.') > 0) {
 217                 return(MES_INTERNET);
 218         }
 219
 220         /* Otherwise we look in the IGnet maps for a valid Citadel node.
 221          * Try directly-connected nodes first...
 222          */
 223         ignetcfg = CtdlGetSysConfig(IGNETCFG);
 224         for (i=0; i<num_tokens(ignetcfg, '\n'); ++i) {
 225                 extract_token(buf, ignetcfg, i, '\n', sizeof buf);
 226                 extract_token(testnode, buf, 0, '|', sizeof testnode);
 227                 if (!strcasecmp(node, testnode)) {
 228                         free(ignetcfg);
 229                         return(MES_IGNET);
 230                 }
 231         }
 232         free(ignetcfg);
 233
 234         /*
 235          * Then try nodes that are two or more hops away.
 236          */
 237         ignetmap = CtdlGetSysConfig(IGNETMAP);
 238         for (i=0; i<num_tokens(ignetmap, '\n'); ++i) {
 239                 extract_token(buf, ignetmap, i, '\n', sizeof buf);
 240                 extract_token(testnode, buf, 0, '|', sizeof testnode);
 241                 if (!strcasecmp(node, testnode)) {
 242                         free(ignetmap);
 243                         return(MES_IGNET);
 244                 }
 245         }
 246         free(ignetmap);
 247
 248         /* If we get to this point it's an invalid node name */
 249         return (MES_ERROR);
 250 }
 251
 252
 253 /*
 254  * Back end for the MSGS command: output message number only.
 255  */
 256 void simple_listing(long msgnum, void *userdata)
 257 {
 258         cprintf("%ld\n", msgnum);
 259 }
 260
 261
 262
 263 /*
 264  * Back end for the MSGS command: output header summary.
 265  */
 266 void headers_listing(long msgnum, void *userdata)
 267 {
 268         struct CtdlMessage *msg;
 269
 270         msg = CtdlFetchMessage(msgnum, 0);
 271         if (msg == NULL) {
 272                 cprintf("%ld|0|||||\n", msgnum);
 273                 return;
 274         }
 275
 276         cprintf("%ld|%s|%s|%s|%s|%s|\n",
 277                 msgnum,
 278                 (msg->cm_fields['T'] ? msg->cm_fields['T'] : "0"),
 279                 (msg->cm_fields['A'] ? msg->cm_fields['A'] : ""),
 280                 (msg->cm_fields['N'] ? msg->cm_fields['N'] : ""),
 281                 (msg->cm_fields['F'] ? msg->cm_fields['F'] : ""),
 282                 (msg->cm_fields['U'] ? msg->cm_fields['U'] : "")
 283         );
 284         CtdlFreeMessage(msg);
 285 }
 286
 287 /*
 288  * Back end for the MSGS command: output EUID header.
 289  */
 290 void headers_euid(long msgnum, void *userdata)
 291 {
 292         struct CtdlMessage *msg;
 293
 294         msg = CtdlFetchMessage(msgnum, 0);
 295         if (msg == NULL) {
 296                 cprintf("%ld||\n", msgnum);
 297                 return;
 298         }
 299
 300         cprintf("%ld|%s|%s\n",
 301                 msgnum,
 302                 (msg->cm_fields['E'] ? msg->cm_fields['E'] : ""),
 303                 (msg->cm_fields['T'] ? msg->cm_fields['T'] : "0"));
 304         CtdlFreeMessage(msg);
 305 }
 306
 307
 308
 309
 310
 311 /* Determine if a given message matches the fields in a message template.
 312  * Return 0 for a successful match.
 313  */
 314 int CtdlMsgCmp(struct CtdlMessage *msg, struct CtdlMessage *template) {
 315         int i;
 316
 317         /* If there aren't any fields in the template, all messages will
 318          * match.
 319          */
 320         if (template == NULL) return(0);
 321
 322         /* Null messages are bogus. */
 323         if (msg == NULL) return(1);
 324
 325         for (i='A'; i<='Z'; ++i) {
 326                 if (template->cm_fields[i] != NULL) {
 327                         if (msg->cm_fields[i] == NULL) {
 328                                 /* Considered equal if temmplate is empty string */
 329                                 if (IsEmptyStr(template->cm_fields[i])) continue;
 330                                 return 1;
 331                         }
 332                         if (strcasecmp(msg->cm_fields[i],
 333                                 template->cm_fields[i])) return 1;
 334                 }
 335         }
 336
 337         /* All compares succeeded: we have a match! */
 338         return 0;
 339 }
 340
 341
 342
 343 /*
 344  * Retrieve the "seen" message list for the current room.
 345  */
 346 void CtdlGetSeen(char *buf, int which_set) {
 347         struct CitContext *CCC = CC;
 348         visit vbuf;
 349
 350         /* Learn about the user and room in question */
 351         CtdlGetRelationship(&vbuf, &CCC->user, &CCC->room);
 352
 353         if (which_set == ctdlsetseen_seen)
 354                 safestrncpy(buf, vbuf.v_seen, SIZ);
 355         if (which_set == ctdlsetseen_answered)
 356                 safestrncpy(buf, vbuf.v_answered, SIZ);
 357 }
 358
 359
 360
 361 /*
 362  * Manipulate the "seen msgs" string (or other message set strings)
 363  */
 364 void CtdlSetSeen(long *target_msgnums, int num_target_msgnums,
 365                 int target_setting, int which_set,
 366                 struct ctdluser *which_user, struct ctdlroom *which_room) {
 367         struct CitContext *CCC = CC;
 368         struct cdbdata *cdbfr;
 369         int i, k;
 370         int is_seen = 0;
 371         int was_seen = 0;
 372         long lo = (-1L);
 373         long hi = (-1L); /// TODO: we just write here. y?
 374         visit vbuf;
 375         long *msglist;
 376         int num_msgs = 0;
 377         StrBuf *vset;
 378         StrBuf *setstr;
 379         StrBuf *lostr;
 380         StrBuf *histr;
 381         const char *pvset;
 382         char *is_set;   /* actually an array of booleans */
 383
 384         /* Don't bother doing *anything* if we were passed a list of zero messages */
 385         if (num_target_msgnums < 1) {
 386                 return;
 387         }
 388
 389         /* If no room was specified, we go with the current room. */
 390         if (!which_room) {
 391                 which_room = &CCC->room;
 392         }
 393
 394         /* If no user was specified, we go with the current user. */
 395         if (!which_user) {
 396                 which_user = &CCC->user;
 397         }
 398
 399         MSG_syslog(LOG_DEBUG, "CtdlSetSeen(%d msgs starting with %ld, %s, %d) in <%s>\n",
 400                    num_target_msgnums, target_msgnums[0],
 401                    (target_setting ? "SET" : "CLEAR"),
 402                    which_set,
 403                    which_room->QRname);
 404
 405         /* Learn about the user and room in question */
 406         CtdlGetRelationship(&vbuf, which_user, which_room);
 407
 408         /* Load the message list */
 409         cdbfr = cdb_fetch(CDB_MSGLISTS, &which_room->QRnumber, sizeof(long));
 410         if (cdbfr != NULL) {
 411                 msglist = (long *) cdbfr->ptr;
 412                 cdbfr->ptr = NULL;      /* CtdlSetSeen() now owns this memory */
 413                 num_msgs = cdbfr->len / sizeof(long);
 414                 cdb_free(cdbfr);
 415         } else {
 416                 return; /* No messages at all?  No further action. */
 417         }
 418
 419         is_set = malloc(num_msgs * sizeof(char));
 420         memset(is_set, 0, (num_msgs * sizeof(char)) );
 421
 422         /* Decide which message set we're manipulating */
 423         switch(which_set) {
 424         case ctdlsetseen_seen:
 425                 vset = NewStrBufPlain(vbuf.v_seen, -1);
 426                 break;
 427         case ctdlsetseen_answered:
 428                 vset = NewStrBufPlain(vbuf.v_answered, -1);
 429                 break;
 430         default:
 431                 vset = NewStrBuf();
 432         }
 433
 434
 435 #if 0   /* This is a special diagnostic section.  Do not allow it to run during normal operation. */
 436         MSG_syslog(LOG_DEBUG, "There are %d messages in the room.\n", num_msgs);
 437         for (i=0; i<num_msgs; ++i) {
 438                 if ((i > 0) && (msglist[i] <= msglist[i-1])) abort();
 439         }
 440         MSG_syslog(LOG_DEBUG, "We are twiddling %d of them.\n", num_target_msgnums);
 441         for (k=0; k<num_target_msgnums; ++k) {
 442                 if ((k > 0) && (target_msgnums[k] <= target_msgnums[k-1])) abort();
 443         }
 444 #endif
 445
 446         MSG_syslog(LOG_DEBUG, "before update: %s\n", ChrPtr(vset));
 447
 448         /* Translate the existing sequence set into an array of booleans */
 449         setstr = NewStrBuf();
 450         lostr = NewStrBuf();
 451         histr = NewStrBuf();
 452         pvset = NULL;
 453         while (StrBufExtract_NextToken(setstr, vset, &pvset, ',') >= 0) {
 454
 455                 StrBufExtract_token(lostr, setstr, 0, ':');
 456                 if (StrBufNum_tokens(setstr, ':') >= 2) {
 457                         StrBufExtract_token(histr, setstr, 1, ':');
 458                 }
 459                 else {
 460                         FlushStrBuf(histr);
 461                         StrBufAppendBuf(histr, lostr, 0);
 462                 }
 463                 lo = StrTol(lostr);
 464                 if (!strcmp(ChrPtr(histr), "*")) {
 465                         hi = LONG_MAX;
 466                 }
 467                 else {
 468                         hi = StrTol(histr);
 469                 }
 470
 471                 for (i = 0; i < num_msgs; ++i) {
 472                         if ((msglist[i] >= lo) && (msglist[i] <= hi)) {
 473                                 is_set[i] = 1;
 474                         }
 475                 }
 476         }
 477         FreeStrBuf(&setstr);
 478         FreeStrBuf(&lostr);
 479         FreeStrBuf(&histr);
 480
 481
 482         /* Now translate the array of booleans back into a sequence set */
 483         FlushStrBuf(vset);
 484         was_seen = 0;
 485         lo = (-1);
 486         hi = (-1);
 487
 488         for (i=0; i<num_msgs; ++i) {
 489                 is_seen = is_set[i];
 490
 491                 /* Apply changes */
 492                 for (k=0; k<num_target_msgnums; ++k) {
 493                         if (msglist[i] == target_msgnums[k]) {
 494                                 is_seen = target_setting;
 495                         }
 496                 }
 497
 498                 if ((was_seen == 0) && (is_seen == 1)) {
 499                         lo = msglist[i];
 500                 }
 501                 else if ((was_seen == 1) && (is_seen == 0)) {
 502                         hi = msglist[i-1];
 503
 504                         if (StrLength(vset) > 0) {
 505                                 StrBufAppendBufPlain(vset, HKEY(","), 0);
 506                         }
 507                         if (lo == hi) {
 508                                 StrBufAppendPrintf(vset, "%ld", hi);
 509                         }
 510                         else {
 511                                 StrBufAppendPrintf(vset, "%ld:%ld", lo, hi);
 512                         }
 513                 }
 514
 515                 if ((is_seen) && (i == num_msgs - 1)) {
 516                         if (StrLength(vset) > 0) {
 517                                 StrBufAppendBufPlain(vset, HKEY(","), 0);
 518                         }
 519                         if ((i==0) || (was_seen == 0)) {
 520                                 StrBufAppendPrintf(vset, "%ld", msglist[i]);
 521                         }
 522                         else {
 523                                 StrBufAppendPrintf(vset, "%ld:%ld", lo, msglist[i]);
 524                         }
 525                 }
 526
 527                 was_seen = is_seen;
 528         }
 529
 530         /*
 531          * We will have to stuff this string back into a 4096 byte buffer, so if it's
 532          * larger than that now, truncate it by removing tokens from the beginning.
 533          * The limit of 100 iterations is there to prevent an infinite loop in case
 534          * something unexpected happens.
 535          */
 536         int number_of_truncations = 0;
 537         while ( (StrLength(vset) > SIZ) && (number_of_truncations < 100) ) {
 538                 StrBufRemove_token(vset, 0, ',');
 539                 ++number_of_truncations;
 540         }
 541
 542         /*
 543          * If we're truncating the sequence set of messages marked with the 'seen' flag,
 544          * we want the earliest messages (the truncated ones) to be marked, not unmarked.
 545          * Otherwise messages at the beginning will suddenly appear to be 'unseen'.
 546          */
 547         if ( (which_set == ctdlsetseen_seen) && (number_of_truncations > 0) ) {
 548                 StrBuf *first_tok;
 549                 first_tok = NewStrBuf();
 550                 StrBufExtract_token(first_tok, vset, 0, ',');
 551                 StrBufRemove_token(vset, 0, ',');
 552
 553                 if (StrBufNum_tokens(first_tok, ':') > 1) {
 554                         StrBufRemove_token(first_tok, 0, ':');
 555                 }
 556
 557                 StrBuf *new_set;
 558                 new_set = NewStrBuf();
 559                 StrBufAppendBufPlain(new_set, HKEY("1:"), 0);
 560                 StrBufAppendBuf(new_set, first_tok, 0);
 561                 StrBufAppendBufPlain(new_set, HKEY(":"), 0);
 562                 StrBufAppendBuf(new_set, vset, 0);
 563
 564                 FreeStrBuf(&vset);
 565                 FreeStrBuf(&first_tok);
 566                 vset = new_set;
 567         }
 568
 569         MSG_syslog(LOG_DEBUG, " after update: %s\n", ChrPtr(vset));
 570
 571         /* Decide which message set we're manipulating */
 572         switch (which_set) {
 573                 case ctdlsetseen_seen:
 574                         safestrncpy(vbuf.v_seen, ChrPtr(vset), sizeof vbuf.v_seen);
 575                         break;
 576                 case ctdlsetseen_answered:
 577                         safestrncpy(vbuf.v_answered, ChrPtr(vset), sizeof vbuf.v_answered);
 578                         break;
 579         }
 580
 581         free(is_set);
 582         free(msglist);
 583         CtdlSetRelationship(&vbuf, which_user, which_room);
 584         FreeStrBuf(&vset);
 585 }
 586
 587
 588 /*
 589  * API function to perform an operation for each qualifying message in the
 590  * current room.  (Returns the number of messages processed.)
 591  */
 592 int CtdlForEachMessage(int mode, long ref, char *search_string,
 593                         char *content_type,
 594                         struct CtdlMessage *compare,
 595                         ForEachMsgCallback CallBack,
 596                         void *userdata)
 597 {
 598         struct CitContext *CCC = CC;
 599         int a, i, j;
 600         visit vbuf;
 601         struct cdbdata *cdbfr;
 602         long *msglist = NULL;
 603         int num_msgs = 0;
 604         int num_processed = 0;
 605         long thismsg;
 606         struct MetaData smi;
 607         struct CtdlMessage *msg = NULL;
 608         int is_seen = 0;
 609         long lastold = 0L;
 610         int printed_lastold = 0;
 611         int num_search_msgs = 0;
 612         long *search_msgs = NULL;
 613         regex_t re;
 614         int need_to_free_re = 0;
 615         regmatch_t pm;
 616
 617         if ((content_type) && (!IsEmptyStr(content_type))) {
 618                 regcomp(&re, content_type, 0);
 619                 need_to_free_re = 1;
 620         }
 621
 622         /* Learn about the user and room in question */
 623         if (server_shutting_down) {
 624                 if (need_to_free_re) regfree(&re);
 625                 return -1;
 626         }
 627         CtdlGetUser(&CCC->user, CCC->curr_user);
 628
 629         if (server_shutting_down) {
 630                 if (need_to_free_re) regfree(&re);
 631                 return -1;
 632         }
 633         CtdlGetRelationship(&vbuf, &CCC->user, &CCC->room);
 634
 635         if (server_shutting_down) {
 636                 if (need_to_free_re) regfree(&re);
 637                 return -1;
 638         }
 639
 640         /* Load the message list */
 641         cdbfr = cdb_fetch(CDB_MSGLISTS, &CCC->room.QRnumber, sizeof(long));
 642         if (cdbfr == NULL) {
 643                 if (need_to_free_re) regfree(&re);
 644                 return 0;       /* No messages at all?  No further action. */
 645         }
 646
 647         msglist = (long *) cdbfr->ptr;
 648         num_msgs = cdbfr->len / sizeof(long);
 649
 650         cdbfr->ptr = NULL;      /* clear this so that cdb_free() doesn't free it */
 651         cdb_free(cdbfr);        /* we own this memory now */
 652
 653         /*
 654          * Now begin the traversal.
 655          */
 656         if (num_msgs > 0) for (a = 0; a < num_msgs; ++a) {
 657
 658                 /* If the caller is looking for a specific MIME type, filter
 659                  * out all messages which are not of the type requested.
 660                  */
 661                 if ((content_type != NULL) && (!IsEmptyStr(content_type))) {
 662
 663                         /* This call to GetMetaData() sits inside this loop
 664                          * so that we only do the extra database read per msg
 665                          * if we need to.  Doing the extra read all the time
 666                          * really kills the server.  If we ever need to use
 667                          * metadata for another search criterion, we need to
 668                          * move the read somewhere else -- but still be smart
 669                          * enough to only do the read if the caller has
 670                          * specified something that will need it.
 671                          */
 672                         if (server_shutting_down) {
 673                                 if (need_to_free_re) regfree(&re);
 674                                 free(msglist);
 675                                 return -1;
 676                         }
 677                         GetMetaData(&smi, msglist[a]);
 678
 679                         /* if (strcasecmp(smi.meta_content_type, content_type)) { old non-regex way */
 680                         if (regexec(&re, smi.meta_content_type, 1, &pm, 0) != 0) {
 681                                 msglist[a] = 0L;
 682                         }
 683                 }
 684         }
 685
 686         num_msgs = sort_msglist(msglist, num_msgs);
 687
 688         /* If a template was supplied, filter out the messages which
 689          * don't match.  (This could induce some delays!)
 690          */
 691         if (num_msgs > 0) {
 692                 if (compare != NULL) {
 693                         for (a = 0; a < num_msgs; ++a) {
 694                                 if (server_shutting_down) {
 695                                         if (need_to_free_re) regfree(&re);
 696                                         free(msglist);
 697                                         return -1;
 698                                 }
 699                                 msg = CtdlFetchMessage(msglist[a], 1);
 700                                 if (msg != NULL) {
 701                                         if (CtdlMsgCmp(msg, compare)) {
 702                                                 msglist[a] = 0L;
 703                                         }
 704                                         CtdlFreeMessage(msg);
 705                                 }
 706                         }
 707                 }
 708         }
 709
 710         /* If a search string was specified, get a message list from
 711          * the full text index and remove messages which aren't on both
 712          * lists.
 713          *
 714          * How this works:
 715          * Since the lists are sorted and strictly ascending, and the
 716          * output list is guaranteed to be shorter than or equal to the
 717          * input list, we overwrite the bottom of the input list.  This
 718          * eliminates the need to memmove big chunks of the list over and
 719          * over again.
 720          */
 721         if ( (num_msgs > 0) && (mode == MSGS_SEARCH) && (search_string) ) {
 722
 723                 /* Call search module via hook mechanism.
 724                  * NULL means use any search function available.
 725                  * otherwise replace with a char * to name of search routine
 726                  */
 727                 CtdlModuleDoSearch(&num_search_msgs, &search_msgs, search_string, "fulltext");
 728
 729                 if (num_search_msgs > 0) {
 730
 731                         int orig_num_msgs;
 732
 733                         orig_num_msgs = num_msgs;
 734                         num_msgs = 0;
 735                         for (i=0; i<orig_num_msgs; ++i) {
 736                                 for (j=0; j<num_search_msgs; ++j) {
 737                                         if (msglist[i] == search_msgs[j]) {
 738                                                 msglist[num_msgs++] = msglist[i];
 739                                         }
 740                                 }
 741                         }
 742                 }
 743                 else {
 744                         num_msgs = 0;   /* No messages qualify */
 745                 }
 746                 if (search_msgs != NULL) free(search_msgs);
 747
 748                 /* Now that we've purged messages which don't contain the search
 749                  * string, treat a MSGS_SEARCH just like a MSGS_ALL from this
 750                  * point on.
 751                  */
 752                 mode = MSGS_ALL;
 753         }
 754
 755         /*
 756          * Now iterate through the message list, according to the
 757          * criteria supplied by the caller.
 758          */
 759         if (num_msgs > 0)
 760                 for (a = 0; a < num_msgs; ++a) {
 761                         if (server_shutting_down) {
 762                                 if (need_to_free_re) regfree(&re);
 763                                 free(msglist);
 764                                 return num_processed;
 765                         }
 766                         thismsg = msglist[a];
 767                         if (mode == MSGS_ALL) {
 768                                 is_seen = 0;
 769                         }
 770                         else {
 771                                 is_seen = is_msg_in_sequence_set(
 772                                                         vbuf.v_seen, thismsg);
 773                                 if (is_seen) lastold = thismsg;
 774                         }
 775                         if ((thismsg > 0L)
 776                             && (
 777
 778                                        (mode == MSGS_ALL)
 779                                        || ((mode == MSGS_OLD) && (is_seen))
 780                                        || ((mode == MSGS_NEW) && (!is_seen))
 781                                        || ((mode == MSGS_LAST) && (a >= (num_msgs - ref)))
 782                                    || ((mode == MSGS_FIRST) && (a < ref))
 783                                 || ((mode == MSGS_GT) && (thismsg > ref))
 784                                 || ((mode == MSGS_LT) && (thismsg < ref))
 785                                 || ((mode == MSGS_EQ) && (thismsg == ref))
 786                             )
 787                             ) {
 788                                 if ((mode == MSGS_NEW) && (CCC->user.flags & US_LASTOLD) && (lastold > 0L) && (printed_lastold == 0) && (!is_seen)) {
 789                                         if (CallBack)
 790                                                 CallBack(lastold, userdata);
 791                                         printed_lastold = 1;
 792                                         ++num_processed;
 793                                 }
 794                                 if (CallBack) CallBack(thismsg, userdata);
 795                                 ++num_processed;
 796                         }
 797                 }
 798         if (need_to_free_re) regfree(&re);
 799
 800         /*
 801          * We cache the most recent msglist in order to do security checks later
 802          */
 803         if (CCC->client_socket > 0) {
 804                 if (CCC->cached_msglist != NULL) {
 805                         free(CCC->cached_msglist);
 806                 }
 807                 CCC->cached_msglist = msglist;
 808                 CCC->cached_num_msgs = num_msgs;
 809         }
 810         else {
 811                 free(msglist);
 812         }
 813
 814         return num_processed;
 815 }
 816
 817
 818
 819 /*
 820  * cmd_msgs()  -  get list of message #'s in this room
 821  *              implements the MSGS server command using CtdlForEachMessage()
 822  */
 823 void cmd_msgs(char *cmdbuf)
 824 {
 825         int mode = 0;
 826         char which[16];
 827         char buf[256];
 828         char tfield[256];
 829         char tvalue[256];
 830         int cm_ref = 0;
 831         int i;
 832         int with_template = 0;
 833         struct CtdlMessage *template = NULL;
 834         char search_string[1024];
 835         ForEachMsgCallback CallBack;
 836
 837         if (CtdlAccessCheck(ac_logged_in_or_guest)) return;
 838
 839         extract_token(which, cmdbuf, 0, '|', sizeof which);
 840         cm_ref = extract_int(cmdbuf, 1);
 841         extract_token(search_string, cmdbuf, 1, '|', sizeof search_string);
 842         with_template = extract_int(cmdbuf, 2);
 843         switch (extract_int(cmdbuf, 3))
 844         {
 845         default:
 846         case MSG_HDRS_BRIEF:
 847                 CallBack = simple_listing;
 848                 break;
 849         case MSG_HDRS_ALL:
 850                 CallBack = headers_listing;
 851                 break;
 852         case MSG_HDRS_EUID:
 853                 CallBack = headers_euid;
 854                 break;
 855         }
 856
 857         strcat(which, "   ");
 858         if (!strncasecmp(which, "OLD", 3))
 859                 mode = MSGS_OLD;
 860         else if (!strncasecmp(which, "NEW", 3))
 861                 mode = MSGS_NEW;
 862         else if (!strncasecmp(which, "FIRST", 5))
 863                 mode = MSGS_FIRST;
 864         else if (!strncasecmp(which, "LAST", 4))
 865                 mode = MSGS_LAST;
 866         else if (!strncasecmp(which, "GT", 2))
 867                 mode = MSGS_GT;
 868         else if (!strncasecmp(which, "LT", 2))
 869                 mode = MSGS_LT;
 870         else if (!strncasecmp(which, "SEARCH", 6))
 871                 mode = MSGS_SEARCH;
 872         else
 873                 mode = MSGS_ALL;
 874
 875         if ( (mode == MSGS_SEARCH) && (!config.c_enable_fulltext) ) {
 876                 cprintf("%d Full text index is not enabled on this server.\n",
 877                         ERROR + CMD_NOT_SUPPORTED);
 878                 return;
 879         }
 880
 881         if (with_template) {
 882                 unbuffer_output();
 883                 cprintf("%d Send template then receive message list\n",
 884                         START_CHAT_MODE);
 885                 template = (struct CtdlMessage *)
 886                         malloc(sizeof(struct CtdlMessage));
 887                 memset(template, 0, sizeof(struct CtdlMessage));
 888                 template->cm_magic = CTDLMESSAGE_MAGIC;
 889                 template->cm_anon_type = MES_NORMAL;
 890
 891                 while(client_getln(buf, sizeof buf) >= 0 && strcmp(buf,"000")) {
 892                         extract_token(tfield, buf, 0, '|', sizeof tfield);
 893                         extract_token(tvalue, buf, 1, '|', sizeof tvalue);
 894                         for (i='A'; i<='Z'; ++i) if (msgkeys[i]!=NULL) {
 895                                 if (!strcasecmp(tfield, msgkeys[i])) {
 896                                         template->cm_fields[i] =
 897                                                 strdup(tvalue);
 898                                 }
 899                         }
 900                 }
 901                 buffer_output();
 902         }
 903         else {
 904                 cprintf("%d  \n", LISTING_FOLLOWS);
 905         }
 906
 907         CtdlForEachMessage(mode,
 908                            ( (mode == MSGS_SEARCH) ? 0 : cm_ref ),
 909                            ( (mode == MSGS_SEARCH) ? search_string : NULL ),
 910                            NULL,
 911                            template,
 912                            CallBack,
 913                            NULL);
 914         if (template != NULL) CtdlFreeMessage(template);
 915         cprintf("000\n");
 916 }
 917
 918
 919
 920
 921 /*
 922  * help_subst()  -  support routine for help file viewer
 923  */
 924 void help_subst(char *strbuf, char *source, char *dest)
 925 {
 926         char workbuf[SIZ];
 927         int p;
 928
 929         while (p = pattern2(strbuf, source), (p >= 0)) {
 930                 strcpy(workbuf, &strbuf[p + strlen(source)]);
 931                 strcpy(&strbuf[p], dest);
 932                 strcat(strbuf, workbuf);
 933         }
 934 }
 935
 936
 937 void do_help_subst(char *buffer)
 938 {
 939         char buf2[16];
 940
 941         help_subst(buffer, "^nodename", config.c_nodename);
 942         help_subst(buffer, "^humannode", config.c_humannode);
 943         help_subst(buffer, "^fqdn", config.c_fqdn);
 944         help_subst(buffer, "^username", CC->user.fullname);
 945         snprintf(buf2, sizeof buf2, "%ld", CC->user.usernum);
 946         help_subst(buffer, "^usernum", buf2);
 947         help_subst(buffer, "^sysadm", config.c_sysadm);
 948         help_subst(buffer, "^variantname", CITADEL);
 949         snprintf(buf2, sizeof buf2, "%d", config.c_maxsessions);
 950         help_subst(buffer, "^maxsessions", buf2);
 951         help_subst(buffer, "^bbsdir", ctdl_message_dir);
 952 }
 953
 954
 955
 956 /*
 957  * memfmout()  -  Citadel text formatter and paginator.
 958  *           Although the original purpose of this routine was to format
 959  *           text to the reader's screen width, all we're really using it
 960  *           for here is to format text out to 80 columns before sending it
 961  *           to the client.  The client software may reformat it again.
 962  */
 963 void memfmout(
 964         char *mptr,             /* where are we going to get our text from? */
 965         const char *nl          /* string to terminate lines with */
 966 ) {
 967         struct CitContext *CCC = CC;
 968         int column = 0;
 969         unsigned char ch = 0;
 970         char outbuf[1024];
 971         int len = 0;
 972         int nllen = 0;
 973
 974         if (!mptr) return;
 975         nllen = strlen(nl);
 976         while (ch=*(mptr++), ch != 0) {
 977
 978                 if (ch == '\n') {
 979                         if (client_write(outbuf, len) == -1)
 980                         {
 981                                 MSGM_syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
 982                                 return;
 983                         }
 984                         len = 0;
 985                         if (client_write(nl, nllen) == -1)
 986                         {
 987                                 MSGM_syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
 988                                 return;
 989                         }
 990                         column = 0;
 991                 }
 992                 else if (ch == '\r') {
 993                         /* Ignore carriage returns.  Newlines are always LF or CRLF but never CR. */
 994                 }
 995                 else if (isspace(ch)) {
 996                         if (column > 72) {              /* Beyond 72 columns, break on the next space */
 997                                 if (client_write(outbuf, len) == -1)
 998                                 {
 999                                         MSGM_syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
1000                                         return;
1001                                 }
1002                                 len = 0;
1003                                 if (client_write(nl, nllen) == -1)
1004                                 {
1005                                         MSGM_syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
1006                                         return;
1007                                 }
1008                                 column = 0;
1009                         }
1010                         else {
1011                                 outbuf[len++] = ch;
1012                                 ++column;
1013                         }
1014                 }
1015                 else {
1016                         outbuf[len++] = ch;
1017                         ++column;
1018                         if (column > 1000) {            /* Beyond 1000 columns, break anywhere */
1019                                 if (client_write(outbuf, len) == -1)
1020                                 {
1021                                         MSGM_syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
1022                                         return;
1023                                 }
1024                                 len = 0;
1025                                 if (client_write(nl, nllen) == -1)
1026                                 {
1027                                         MSGM_syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
1028                                         return;
1029                                 }
1030                                 column = 0;
1031                         }
1032                 }
1033         }
1034         if (len) {
1035                 if (client_write(outbuf, len) == -1)
1036                 {
1037                         MSGM_syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
1038                         return;
1039                 }
1040                 len = 0;
1041                 client_write(nl, nllen);
1042                 column = 0;
1043         }
1044 }
1045
1046
1047
1048 /*
1049  * Callback function for mime parser that simply lists the part
1050  */
1051 void list_this_part(char *name, char *filename, char *partnum, char *disp,
1052                     void *content, char *cbtype, char *cbcharset, size_t length, char *encoding,
1053                     char *cbid, void *cbuserdata)
1054 {
1055         struct ma_info *ma;
1056
1057         ma = (struct ma_info *)cbuserdata;
1058         if (ma->is_ma == 0) {
1059                 cprintf("part=%s|%s|%s|%s|%s|%ld|%s|%s\n",
1060                         name,
1061                         filename,
1062                         partnum,
1063                         disp,
1064                         cbtype,
1065                         (long)length,
1066                         cbid,
1067                         cbcharset);
1068         }
1069 }
1070
1071 /*
1072  * Callback function for multipart prefix
1073  */
1074 void list_this_pref(char *name, char *filename, char *partnum, char *disp,
1075                     void *content, char *cbtype, char *cbcharset, size_t length, char *encoding,
1076                     char *cbid, void *cbuserdata)
1077 {
1078         struct ma_info *ma;
1079
1080         ma = (struct ma_info *)cbuserdata;
1081         if (!strcasecmp(cbtype, "multipart/alternative")) {
1082                 ++ma->is_ma;
1083         }
1084
1085         if (ma->is_ma == 0) {
1086                 cprintf("pref=%s|%s\n", partnum, cbtype);
1087         }
1088 }
1089
1090 /*
1091  * Callback function for multipart sufffix
1092  */
1093 void list_this_suff(char *name, char *filename, char *partnum, char *disp,
1094                     void *content, char *cbtype, char *cbcharset, size_t length, char *encoding,
1095                     char *cbid, void *cbuserdata)
1096 {
1097         struct ma_info *ma;
1098
1099         ma = (struct ma_info *)cbuserdata;
1100         if (ma->is_ma == 0) {
1101                 cprintf("suff=%s|%s\n", partnum, cbtype);
1102         }
1103         if (!strcasecmp(cbtype, "multipart/alternative")) {
1104                 --ma->is_ma;
1105         }
1106 }
1107
1108
1109 /*
1110  * Callback function for mime parser that opens a section for downloading
1111  */
1112 void mime_download(char *name, char *filename, char *partnum, char *disp,
1113                    void *content, char *cbtype, char *cbcharset, size_t length,
1114                    char *encoding, char *cbid, void *cbuserdata)
1115 {
1116         int rv = 0;
1117         CitContext *CCC = MyContext();
1118
1119         /* Silently go away if there's already a download open. */
1120         if (CCC->download_fp != NULL)
1121                 return;
1122
1123         if (
1124                 (!IsEmptyStr(partnum) && (!strcasecmp(CCC->download_desired_section, partnum)))
1125         ||      (!IsEmptyStr(cbid) && (!strcasecmp(CCC->download_desired_section, cbid)))
1126         ) {
1127                 CCC->download_fp = tmpfile();
1128                 if (CCC->download_fp == NULL) {
1129                         MSG_syslog(LOG_EMERG, "mime_download(): Couldn't write: %s\n",
1130                                     strerror(errno));
1131                         cprintf("%d cannot open temporary file: %s\n",
1132                                 ERROR + INTERNAL_ERROR, strerror(errno));
1133                         return;
1134                 }
1135
1136                 rv = fwrite(content, length, 1, CC->download_fp);
1137                 if (rv <= 0) {
1138                         MSG_syslog(LOG_EMERG, "mime_download(): Couldn't write: %s\n",
1139                                    strerror(errno));
1140                         cprintf("%d unable to write tempfile.\n",
1141                                 ERROR + TOO_BIG);
1142                         fclose(CCC->download_fp);
1143                         CCC->download_fp = NULL;
1144                         return;
1145                 }
1146                 fflush(CCC->download_fp);
1147                 rewind(CCC->download_fp);
1148
1149                 OpenCmdResult(filename, cbtype);
1150         }
1151 }
1152
1153
1154
1155 /*
1156  * Callback function for mime parser that outputs a section all at once.
1157  * We can specify the desired section by part number *or* content-id.
1158  */
1159 void mime_spew_section(char *name, char *filename, char *partnum, char *disp,
1160                    void *content, char *cbtype, char *cbcharset, size_t length,
1161                    char *encoding, char *cbid, void *cbuserdata)
1162 {
1163         int *found_it = (int *)cbuserdata;
1164
1165         if (
1166                 (!IsEmptyStr(partnum) && (!strcasecmp(CC->download_desired_section, partnum)))
1167         ||      (!IsEmptyStr(cbid) && (!strcasecmp(CC->download_desired_section, cbid)))
1168         ) {
1169                 *found_it = 1;
1170                 cprintf("%d %d|-1|%s|%s|%s\n",
1171                         BINARY_FOLLOWS,
1172                         (int)length,
1173                         filename,
1174                         cbtype,
1175                         cbcharset
1176                 );
1177                 client_write(content, length);
1178         }
1179 }
1180
1181
1182 /*
1183  * Load a message from disk into memory.
1184  * This is used by CtdlOutputMsg() and other fetch functions.
1185  *
1186  * NOTE: Caller is responsible for freeing the returned CtdlMessage struct
1187  *       using the CtdlMessageFree() function.
1188  */
1189 struct CtdlMessage *CtdlFetchMessage(long msgnum, int with_body)
1190 {
1191         struct CitContext *CCC = CC;
1192         struct cdbdata *dmsgtext;
1193         struct CtdlMessage *ret = NULL;
1194         char *mptr;
1195         char *upper_bound;
1196         cit_uint8_t ch;
1197         cit_uint8_t field_header;
1198
1199         MSG_syslog(LOG_DEBUG, "CtdlFetchMessage(%ld, %d)\n", msgnum, with_body);
1200         dmsgtext = cdb_fetch(CDB_MSGMAIN, &msgnum, sizeof(long));
1201         if (dmsgtext == NULL) {
1202                 return NULL;
1203         }
1204         mptr = dmsgtext->ptr;
1205         upper_bound = mptr + dmsgtext->len;
1206
1207         /* Parse the three bytes that begin EVERY message on disk.
1208          * The first is always 0xFF, the on-disk magic number.
1209          * The second is the anonymous/public type byte.
1210          * The third is the format type byte (vari, fixed, or MIME).
1211          */
1212         ch = *mptr++;
1213         if (ch != 255) {
1214                 MSG_syslog(LOG_ERR, "Message %ld appears to be corrupted.\n", msgnum);
1215                 cdb_free(dmsgtext);
1216                 return NULL;
1217         }
1218         ret = (struct CtdlMessage *) malloc(sizeof(struct CtdlMessage));
1219         memset(ret, 0, sizeof(struct CtdlMessage));
1220
1221         ret->cm_magic = CTDLMESSAGE_MAGIC;
1222         ret->cm_anon_type = *mptr++;    /* Anon type byte */
1223         ret->cm_format_type = *mptr++;  /* Format type byte */
1224
1225         /*
1226          * The rest is zero or more arbitrary fields.  Load them in.
1227          * We're done when we encounter either a zero-length field or
1228          * have just processed the 'M' (message text) field.
1229          */
1230         do {
1231                 if (mptr >= upper_bound) {
1232                         break;
1233                 }
1234                 field_header = *mptr++;
1235                 ret->cm_fields[field_header] = strdup(mptr);
1236
1237                 while (*mptr++ != 0);   /* advance to next field */
1238
1239         } while ((mptr < upper_bound) && (field_header != 'M'));
1240
1241         cdb_free(dmsgtext);
1242
1243         /* Always make sure there's something in the msg text field.  If
1244          * it's NULL, the message text is most likely stored separately,
1245          * so go ahead and fetch that.  Failing that, just set a dummy
1246          * body so other code doesn't barf.
1247          */
1248         if ( (ret->cm_fields['M'] == NULL) && (with_body) ) {
1249                 dmsgtext = cdb_fetch(CDB_BIGMSGS, &msgnum, sizeof(long));
1250                 if (dmsgtext != NULL) {
1251                         ret->cm_fields['M'] = dmsgtext->ptr;
1252                         dmsgtext->ptr = NULL;
1253                         cdb_free(dmsgtext);
1254                 }
1255         }
1256         if (ret->cm_fields['M'] == NULL) {
1257                 ret->cm_fields['M'] = strdup("\r\n\r\n (no text)\r\n");
1258         }
1259
1260         /* Perform "before read" hooks (aborting if any return nonzero) */
1261         if (PerformMessageHooks(ret, EVT_BEFOREREAD) > 0) {
1262                 CtdlFreeMessage(ret);
1263                 return NULL;
1264         }
1265
1266         return (ret);
1267 }
1268
1269
1270 /*
1271  * Returns 1 if the supplied pointer points to a valid Citadel message.
1272  * If the pointer is NULL or the magic number check fails, returns 0.
1273  */
1274 int is_valid_message(struct CtdlMessage *msg) {
1275         if (msg == NULL)
1276                 return 0;
1277         if ((msg->cm_magic) != CTDLMESSAGE_MAGIC) {
1278                 struct CitContext *CCC = CC;
1279                 MSGM_syslog(LOG_WARNING, "is_valid_message() -- self-check failed\n");
1280                 return 0;
1281         }
1282         return 1;
1283 }
1284
1285 void CtdlFreeMessageContents(struct CtdlMessage *msg)
1286 {
1287         int i;
1288
1289         for (i = 0; i < 256; ++i)
1290                 if (msg->cm_fields[i] != NULL) {
1291                         free(msg->cm_fields[i]);
1292                 }
1293
1294         msg->cm_magic = 0;      /* just in case */
1295 }
1296 /*
1297  * 'Destructor' for struct CtdlMessage
1298  */
1299 void CtdlFreeMessage(struct CtdlMessage *msg)
1300 {
1301         if (is_valid_message(msg) == 0)
1302         {
1303                 if (msg != NULL) free (msg);
1304                 return;
1305         }
1306         CtdlFreeMessageContents(msg);
1307         free(msg);
1308 }
1309
1310
1311 /*
1312  * Pre callback function for multipart/alternative
1313  *
1314  * NOTE: this differs from the standard behavior for a reason.  Normally when
1315  *       displaying multipart/alternative you want to show the _last_ usable
1316  *       format in the message.  Here we show the _first_ one, because it's
1317  *       usually text/plain.  Since this set of functions is designed for text
1318  *       output to non-MIME-aware clients, this is the desired behavior.
1319  *
1320  */
1321 void fixed_output_pre(char *name, char *filename, char *partnum, char *disp,
1322                 void *content, char *cbtype, char *cbcharset, size_t length, char *encoding,
1323                 char *cbid, void *cbuserdata)
1324 {
1325         struct CitContext *CCC = CC;
1326         struct ma_info *ma;
1327
1328         ma = (struct ma_info *)cbuserdata;
1329         MSG_syslog(LOG_DEBUG, "fixed_output_pre() type=<%s>\n", cbtype);
1330         if (!strcasecmp(cbtype, "multipart/alternative")) {
1331                 ++ma->is_ma;
1332                 ma->did_print = 0;
1333         }
1334         if (!strcasecmp(cbtype, "message/rfc822")) {
1335                 ++ma->freeze;
1336         }
1337 }
1338
1339 /*
1340  * Post callback function for multipart/alternative
1341  */
1342 void fixed_output_post(char *name, char *filename, char *partnum, char *disp,
1343                 void *content, char *cbtype, char *cbcharset, size_t length,
1344                 char *encoding, char *cbid, void *cbuserdata)
1345 {
1346         struct CitContext *CCC = CC;
1347         struct ma_info *ma;
1348
1349         ma = (struct ma_info *)cbuserdata;
1350         MSG_syslog(LOG_DEBUG, "fixed_output_post() type=<%s>\n", cbtype);
1351         if (!strcasecmp(cbtype, "multipart/alternative")) {
1352                 --ma->is_ma;
1353                 ma->did_print = 0;
1354         }
1355         if (!strcasecmp(cbtype, "message/rfc822")) {
1356                 --ma->freeze;
1357         }
1358 }
1359
1360 /*
1361  * Inline callback function for mime parser that wants to display text
1362  */
1363 void fixed_output(char *name, char *filename, char *partnum, char *disp,
1364                 void *content, char *cbtype, char *cbcharset, size_t length,
1365                 char *encoding, char *cbid, void *cbuserdata)
1366 {
1367         struct CitContext *CCC = CC;
1368         char *ptr;
1369         char *wptr;
1370         size_t wlen;
1371         struct ma_info *ma;
1372
1373         ma = (struct ma_info *)cbuserdata;
1374
1375         MSG_syslog(LOG_DEBUG,
1376                 "fixed_output() part %s: %s (%s) (%ld bytes)\n",
1377                 partnum, filename, cbtype, (long)length);
1378
1379         /*
1380          * If we're in the middle of a multipart/alternative scope and
1381          * we've already printed another section, skip this one.
1382          */
1383         if ( (ma->is_ma) && (ma->did_print) ) {
1384                 MSG_syslog(LOG_DEBUG, "Skipping part %s (%s)\n", partnum, cbtype);
1385                 return;
1386         }
1387         ma->did_print = 1;
1388
1389         if ( (!strcasecmp(cbtype, "text/plain"))
1390            || (IsEmptyStr(cbtype)) ) {
1391                 wptr = content;
1392                 if (length > 0) {
1393                         client_write(wptr, length);
1394                         if (wptr[length-1] != '\n') {
1395                                 cprintf("\n");
1396                         }
1397                 }
1398                 return;
1399         }
1400
1401         if (!strcasecmp(cbtype, "text/html")) {
1402                 ptr = html_to_ascii(content, length, 80, 0);
1403                 wlen = strlen(ptr);
1404                 client_write(ptr, wlen);
1405                 if ((wlen > 0) && (ptr[wlen-1] != '\n')) {
1406                         cprintf("\n");
1407                 }
1408                 free(ptr);
1409                 return;
1410         }
1411
1412         if (ma->use_fo_hooks) {
1413                 if (PerformFixedOutputHooks(cbtype, content, length)) {
1414                 /* above function returns nonzero if it handled the part */
1415                         return;
1416                 }
1417         }
1418
1419         if (strncasecmp(cbtype, "multipart/", 10)) {
1420                 cprintf("Part %s: %s (%s) (%ld bytes)\r\n",
1421                         partnum, filename, cbtype, (long)length);
1422                 return;
1423         }
1424 }
1425
1426 /*
1427  * The client is elegant and sophisticated and wants to be choosy about
1428  * MIME content types, so figure out which multipart/alternative part
1429  * we're going to send.
1430  *
1431  * We use a system of weights.  When we find a part that matches one of the
1432  * MIME types we've declared as preferential, we can store it in ma->chosen_part
1433  * and then set ma->chosen_pref to that MIME type's position in our preference
1434  * list.  If we then hit another match, we only replace the first match if
1435  * the preference value is lower.
1436  */
1437 void choose_preferred(char *name, char *filename, char *partnum, char *disp,
1438                 void *content, char *cbtype, char *cbcharset, size_t length,
1439                 char *encoding, char *cbid, void *cbuserdata)
1440 {
1441         struct CitContext *CCC = CC;
1442         char buf[1024];
1443         int i;
1444         struct ma_info *ma;
1445
1446         ma = (struct ma_info *)cbuserdata;
1447
1448         // NOTE: REMOVING THIS CONDITIONAL FIXES BUG 220
1449         //       http://bugzilla.citadel.org/show_bug.cgi?id=220
1450         // I don't know if there are any side effects!  Please TEST TEST TEST
1451         //if (ma->is_ma > 0) {
1452
1453         for (i=0; i<num_tokens(CCC->preferred_formats, '|'); ++i) {
1454                 extract_token(buf, CCC->preferred_formats, i, '|', sizeof buf);
1455                 if ( (!strcasecmp(buf, cbtype)) && (!ma->freeze) ) {
1456                         if (i < ma->chosen_pref) {
1457                                 MSG_syslog(LOG_DEBUG, "Setting chosen part: <%s>\n", partnum);
1458                                 safestrncpy(ma->chosen_part, partnum, sizeof ma->chosen_part);
1459                                 ma->chosen_pref = i;
1460                         }
1461                 }
1462         }
1463 }
1464
1465 /*
1466  * Now that we've chosen our preferred part, output it.
1467  */
1468 void output_preferred(char *name,
1469                       char *filename,
1470                       char *partnum,
1471                       char *disp,
1472                       void *content,
1473                       char *cbtype,
1474                       char *cbcharset,
1475                       size_t length,
1476                       char *encoding,
1477                       char *cbid,
1478                       void *cbuserdata)
1479 {
1480         struct CitContext *CCC = CC;
1481         int i;
1482         char buf[128];
1483         int add_newline = 0;
1484         char *text_content;
1485         struct ma_info *ma;
1486         char *decoded = NULL;
1487         size_t bytes_decoded;
1488         int rc = 0;
1489
1490         ma = (struct ma_info *)cbuserdata;
1491
1492         /* This is not the MIME part you're looking for... */
1493         if (strcasecmp(partnum, ma->chosen_part)) return;
1494
1495         /* If the content-type of this part is in our preferred formats
1496          * list, we can simply output it verbatim.
1497          */
1498         for (i=0; i<num_tokens(CCC->preferred_formats, '|'); ++i) {
1499                 extract_token(buf, CCC->preferred_formats, i, '|', sizeof buf);
1500                 if (!strcasecmp(buf, cbtype)) {
1501                         /* Yeah!  Go!  W00t!! */
1502                         if (ma->dont_decode == 0)
1503                                 rc = mime_decode_now (content,
1504                                                       length,
1505                                                       encoding,
1506                                                       &decoded,
1507                                                       &bytes_decoded);
1508                         if (rc < 0)
1509                                 break; /* Give us the chance, maybe theres another one. */
1510
1511                         if (rc == 0) text_content = (char *)content;
1512                         else {
1513                                 text_content = decoded;
1514                                 length = bytes_decoded;
1515                         }
1516
1517                         if (text_content[length-1] != '\n') {
1518                                 ++add_newline;
1519                         }
1520                         cprintf("Content-type: %s", cbtype);
1521                         if (!IsEmptyStr(cbcharset)) {
1522                                 cprintf("; charset=%s", cbcharset);
1523                         }
1524                         cprintf("\nContent-length: %d\n",
1525                                 (int)(length + add_newline) );
1526                         if (!IsEmptyStr(encoding)) {
1527                                 cprintf("Content-transfer-encoding: %s\n", encoding);
1528                         }
1529                         else {
1530                                 cprintf("Content-transfer-encoding: 7bit\n");
1531                         }
1532                         cprintf("X-Citadel-MSG4-Partnum: %s\n", partnum);
1533                         cprintf("\n");
1534                         if (client_write(text_content, length) == -1)
1535                         {
1536                                 MSGM_syslog(LOG_ERR, "output_preferred(): aborting due to write failure.\n");
1537                                 return;
1538                         }
1539                         if (add_newline) cprintf("\n");
1540                         if (decoded != NULL) free(decoded);
1541                         return;
1542                 }
1543         }
1544
1545         /* No translations required or possible: output as text/plain */
1546         cprintf("Content-type: text/plain\n\n");
1547         rc = 0;
1548         if (ma->dont_decode == 0)
1549                 rc = mime_decode_now (content,
1550                                       length,
1551                                       encoding,
1552                                       &decoded,
1553                                       &bytes_decoded);
1554         if (rc < 0)
1555                 return; /* Give us the chance, maybe theres another one. */
1556
1557         if (rc == 0) text_content = (char *)content;
1558         else {
1559                 text_content = decoded;
1560                 length = bytes_decoded;
1561         }
1562
1563         fixed_output(name, filename, partnum, disp, text_content, cbtype, cbcharset,
1564                         length, encoding, cbid, cbuserdata);
1565         if (decoded != NULL) free(decoded);
1566 }
1567
1568
1569 struct encapmsg {
1570         char desired_section[64];
1571         char *msg;
1572         size_t msglen;
1573 };
1574
1575
1576 /*
1577  * Callback function for
1578  */
1579 void extract_encapsulated_message(char *name, char *filename, char *partnum, char *disp,
1580                    void *content, char *cbtype, char *cbcharset, size_t length,
1581                    char *encoding, char *cbid, void *cbuserdata)
1582 {
1583         struct encapmsg *encap;
1584
1585         encap = (struct encapmsg *)cbuserdata;
1586
1587         /* Only proceed if this is the desired section... */
1588         if (!strcasecmp(encap->desired_section, partnum)) {
1589                 encap->msglen = length;
1590                 encap->msg = malloc(length + 2);
1591                 memcpy(encap->msg, content, length);
1592                 return;
1593         }
1594 }
1595
1596
1597 /*
1598  * Determine whether the specified message exists in the cached_msglist
1599  * (This is a security check)
1600  */
1601 int check_cached_msglist(long msgnum) {
1602         struct CitContext *CCC = CC;
1603
1604         /* cases in which we skip the check */
1605         if (!CCC) return om_ok;                                         /* not a session */
1606         if (CCC->client_socket <= 0) return om_ok;                      /* not a client session */
1607         if (CCC->cached_msglist == NULL) return om_access_denied;       /* no msglist fetched */
1608         if (CCC->cached_num_msgs == 0) return om_access_denied;         /* nothing to check */
1609
1610
1611         /* Do a binary search within the cached_msglist for the requested msgnum */
1612         int min = 0;
1613         int max = (CC->cached_num_msgs - 1);
1614
1615         while (max >= min) {
1616                 int middle = min + (max-min) / 2 ;
1617                 if (msgnum == CCC->cached_msglist[middle]) {
1618                         return om_ok;
1619                 }
1620                 if (msgnum > CC->cached_msglist[middle]) {
1621                         min = middle + 1;
1622                 }
1623                 else {
1624                         max = middle - 1;
1625                 }
1626         }
1627
1628         return om_access_denied;
1629 }
1630
1631
1632 /*
1633  * Determine whether the currently logged in session has permission to read
1634  * messages in the current room.
1635  */
1636 int CtdlDoIHavePermissionToReadMessagesInThisRoom(void) {
1637         if (    (!(CC->logged_in))
1638                 && (!(CC->internal_pgm))
1639                 && (!config.c_guest_logins)
1640         ) {
1641                 return(om_not_logged_in);
1642         }
1643         return(om_ok);
1644 }
1645
1646
1647 /*
1648  * Get a message off disk.  (returns om_* values found in msgbase.h)
1649  *
1650  */
1651 int CtdlOutputMsg(long msg_num,         /* message number (local) to fetch */
1652                   int mode,             /* how would you like that message? */
1653                   int headers_only,     /* eschew the message body? */
1654                   int do_proto,         /* do Citadel protocol responses? */
1655                   int crlf,             /* Use CRLF newlines instead of LF? */
1656                   char *section,        /* NULL or a message/rfc822 section */
1657                   int flags,            /* various flags; see msgbase.h */
1658                   char **Author,
1659                   char **Address
1660 ) {
1661         struct CitContext *CCC = CC;
1662         struct CtdlMessage *TheMessage = NULL;
1663         int retcode = CIT_OK;
1664         struct encapmsg encap;
1665         int r;
1666
1667         MSG_syslog(LOG_DEBUG, "CtdlOutputMsg(msgnum=%ld, mode=%d, section=%s)\n",
1668                 msg_num, mode,
1669                 (section ? section : "<>")
1670         );
1671
1672         r = CtdlDoIHavePermissionToReadMessagesInThisRoom();
1673         if (r != om_ok) {
1674                 if (do_proto) {
1675                         if (r == om_not_logged_in) {
1676                                 cprintf("%d Not logged in.\n", ERROR + NOT_LOGGED_IN);
1677                         }
1678                         else {
1679                                 cprintf("%d An unknown error has occurred.\n", ERROR);
1680                         }
1681                 }
1682                 return(r);
1683         }
1684
1685         /*
1686          * Check to make sure the message is actually IN this room
1687          */
1688         r = check_cached_msglist(msg_num);
1689         if (r == om_access_denied) {
1690                 /* Not in the cache?  We get ONE shot to check it again. */
1691                 CtdlForEachMessage(MSGS_ALL, 0L, NULL, NULL, NULL, NULL, NULL);
1692                 r = check_cached_msglist(msg_num);
1693         }
1694         if (r != om_ok) {
1695                 MSG_syslog(LOG_DEBUG, "Security check fail: message %ld is not in %s\n",
1696                            msg_num, CCC->room.QRname
1697                 );
1698                 if (do_proto) {
1699                         if (r == om_access_denied) {
1700                                 cprintf("%d message %ld was not found in this room\n",
1701                                         ERROR + HIGHER_ACCESS_REQUIRED,
1702                                         msg_num
1703                                 );
1704                         }
1705                 }
1706                 return(r);
1707         }
1708
1709         /*
1710          * Fetch the message from disk.  If we're in HEADERS_FAST mode,
1711          * request that we don't even bother loading the body into memory.
1712          */
1713         if (headers_only == HEADERS_FAST) {
1714                 TheMessage = CtdlFetchMessage(msg_num, 0);
1715         }
1716         else {
1717                 TheMessage = CtdlFetchMessage(msg_num, 1);
1718         }
1719
1720         if (TheMessage == NULL) {
1721                 if (do_proto) cprintf("%d Can't locate msg %ld on disk\n",
1722                         ERROR + MESSAGE_NOT_FOUND, msg_num);
1723                 return(om_no_such_msg);
1724         }
1725
1726         /* Here is the weird form of this command, to process only an
1727          * encapsulated message/rfc822 section.
1728          */
1729         if (section) if (!IsEmptyStr(section)) if (strcmp(section, "0")) {
1730                 memset(&encap, 0, sizeof encap);
1731                 safestrncpy(encap.desired_section, section, sizeof encap.desired_section);
1732                 mime_parser(TheMessage->cm_fields['M'],
1733                         NULL,
1734                         *extract_encapsulated_message,
1735                         NULL, NULL, (void *)&encap, 0
1736                 );
1737
1738                 if ((Author != NULL) && (*Author == NULL))
1739                 {
1740                         *Author = TheMessage->cm_fields['A'];
1741                         TheMessage->cm_fields['A'] = NULL;
1742                 }
1743                 if ((Address != NULL) && (*Address == NULL))
1744                 {
1745                         *Address = TheMessage->cm_fields['F'];
1746                         TheMessage->cm_fields['F'] = NULL;
1747                 }
1748                 CtdlFreeMessage(TheMessage);
1749                 TheMessage = NULL;
1750
1751                 if (encap.msg) {
1752                         encap.msg[encap.msglen] = 0;
1753                         TheMessage = convert_internet_message(encap.msg);
1754                         encap.msg = NULL;       /* no free() here, TheMessage owns it now */
1755
1756                         /* Now we let it fall through to the bottom of this
1757                          * function, because TheMessage now contains the
1758                          * encapsulated message instead of the top-level
1759                          * message.  Isn't that neat?
1760                          */
1761
1762                 }
1763                 else {
1764                         if (do_proto) {
1765                                 cprintf("%d msg %ld has no part %s\n",
1766                                         ERROR + MESSAGE_NOT_FOUND,
1767                                         msg_num,
1768                                         section);
1769                         }
1770                         retcode = om_no_such_msg;
1771                 }
1772
1773         }
1774
1775         /* Ok, output the message now */
1776         if (retcode == CIT_OK)
1777                 retcode = CtdlOutputPreLoadedMsg(TheMessage, mode, headers_only, do_proto, crlf, flags);
1778         if ((Author != NULL) && (*Author == NULL))
1779         {
1780                 *Author = TheMessage->cm_fields['A'];
1781                 TheMessage->cm_fields['A'] = NULL;
1782         }
1783         if ((Address != NULL) && (*Address == NULL))
1784         {
1785                 *Address = TheMessage->cm_fields['F'];
1786                 TheMessage->cm_fields['F'] = NULL;
1787         }
1788
1789         CtdlFreeMessage(TheMessage);
1790
1791         return(retcode);
1792 }
1793
1794
1795 char *qp_encode_email_addrs(char *source)
1796 {
1797         struct CitContext *CCC = CC;
1798         char *user, *node, *name;
1799         const char headerStr[] = "=?UTF-8?Q?";
1800         char *Encoded;
1801         char *EncodedName;
1802         char *nPtr;
1803         int need_to_encode = 0;
1804         long SourceLen;
1805         long EncodedMaxLen;
1806         long nColons = 0;
1807         long *AddrPtr;
1808         long *AddrUtf8;
1809         long nAddrPtrMax = 50;
1810         long nmax;
1811         int InQuotes = 0;
1812         int i, n;
1813
1814         if (source == NULL) return source;
1815         if (IsEmptyStr(source)) return source;
1816         if (MessageDebugEnabled != 0) cit_backtrace();
1817         MSG_syslog(LOG_DEBUG, "qp_encode_email_addrs: [%s]\n", source);
1818
1819         AddrPtr = malloc (sizeof (long) * nAddrPtrMax);
1820         AddrUtf8 = malloc (sizeof (long) * nAddrPtrMax);
1821         memset(AddrUtf8, 0, sizeof (long) * nAddrPtrMax);
1822         *AddrPtr = 0;
1823         i = 0;
1824         while (!IsEmptyStr (&source[i])) {
1825                 if (nColons >= nAddrPtrMax){
1826                         long *ptr;
1827
1828                         ptr = (long *) malloc(sizeof (long) * nAddrPtrMax * 2);
1829                         memcpy (ptr, AddrPtr, sizeof (long) * nAddrPtrMax);
1830                         free (AddrPtr), AddrPtr = ptr;
1831
1832                         ptr = (long *) malloc(sizeof (long) * nAddrPtrMax * 2);
1833                         memset(&ptr[nAddrPtrMax], 0,
1834                                sizeof (long) * nAddrPtrMax);
1835
1836                         memcpy (ptr, AddrUtf8, sizeof (long) * nAddrPtrMax);
1837                         free (AddrUtf8), AddrUtf8 = ptr;
1838                         nAddrPtrMax *= 2;
1839                 }
1840                 if (((unsigned char) source[i] < 32) ||
1841                     ((unsigned char) source[i] > 126)) {
1842                         need_to_encode = 1;
1843                         AddrUtf8[nColons] = 1;
1844                 }
1845                 if (source[i] == '"')
1846                         InQuotes = !InQuotes;
1847                 if (!InQuotes && source[i] == ',') {
1848                         AddrPtr[nColons] = i;
1849                         nColons++;
1850                 }
1851                 i++;
1852         }
1853         if (need_to_encode == 0) {
1854                 free(AddrPtr);
1855                 free(AddrUtf8);
1856                 return source;
1857         }
1858
1859         SourceLen = i;
1860         EncodedMaxLen = nColons * (sizeof(headerStr) + 3) + SourceLen * 3;
1861         Encoded = (char*) malloc (EncodedMaxLen);
1862
1863         for (i = 0; i < nColons; i++)
1864                 source[AddrPtr[i]++] = '\0';
1865         /* TODO: if libidn, this might get larger*/
1866         user = malloc(SourceLen + 1);
1867         node = malloc(SourceLen + 1);
1868         name = malloc(SourceLen + 1);
1869
1870         nPtr = Encoded;
1871         *nPtr = '\0';
1872         for (i = 0; i < nColons && nPtr != NULL; i++) {
1873                 nmax = EncodedMaxLen - (nPtr - Encoded);
1874                 if (AddrUtf8[i]) {
1875                         process_rfc822_addr(&source[AddrPtr[i]],
1876                                             user,
1877                                             node,
1878                                             name);
1879                         /* TODO: libIDN here ! */
1880                         if (IsEmptyStr(name)) {
1881                                 n = snprintf(nPtr, nmax,
1882                                              (i==0)?"%s@%s" : ",%s@%s",
1883                                              user, node);
1884                         }
1885                         else {
1886                                 EncodedName = rfc2047encode(name, strlen(name));
1887                                 n = snprintf(nPtr, nmax,
1888                                              (i==0)?"%s <%s@%s>" : ",%s <%s@%s>",
1889                                              EncodedName, user, node);
1890                                 free(EncodedName);
1891                         }
1892                 }
1893                 else {
1894                         n = snprintf(nPtr, nmax,
1895                                      (i==0)?"%s" : ",%s",
1896                                      &source[AddrPtr[i]]);
1897                 }
1898                 if (n > 0 )
1899                         nPtr += n;
1900                 else {
1901                         char *ptr, *nnPtr;
1902                         ptr = (char*) malloc(EncodedMaxLen * 2);
1903                         memcpy(ptr, Encoded, EncodedMaxLen);
1904                         nnPtr = ptr + (nPtr - Encoded), nPtr = nnPtr;
1905                         free(Encoded), Encoded = ptr;
1906                         EncodedMaxLen *= 2;
1907                         i--; /* do it once more with properly lengthened buffer */
1908                 }
1909         }
1910         for (i = 0; i < nColons; i++)
1911                 source[--AddrPtr[i]] = ',';
1912
1913         free(user);
1914         free(node);
1915         free(name);
1916         free(AddrUtf8);
1917         free(AddrPtr);
1918         return Encoded;
1919 }
1920
1921
1922 /* If the last item in a list of recipients was truncated to a partial address,
1923  * remove it completely in order to avoid choking libSieve
1924  */
1925 void sanitize_truncated_recipient(char *str)
1926 {
1927         if (!str) return;
1928         if (num_tokens(str, ',') < 2) return;
1929
1930         int len = strlen(str);
1931         if (len < 900) return;
1932         if (len > 998) str[998] = 0;
1933
1934         char *cptr = strrchr(str, ',');
1935         if (!cptr) return;
1936
1937         char *lptr = strchr(cptr, '<');
1938         char *rptr = strchr(cptr, '>');
1939
1940         if ( (lptr) && (rptr) && (rptr > lptr) ) return;
1941
1942         *cptr = 0;
1943 }
1944
1945
1946 void OutputCtdlMsgHeaders(
1947         struct CtdlMessage *TheMessage,
1948         int do_proto)           /* do Citadel protocol responses? */
1949 {
1950         char allkeys[30];
1951         int i, k, n;
1952         int suppress_f = 0;
1953         char buf[SIZ];
1954         char display_name[256];
1955
1956         /* begin header processing loop for Citadel message format */
1957         safestrncpy(display_name, "<unknown>", sizeof display_name);
1958         if (TheMessage->cm_fields['A']) {
1959                 strcpy(buf, TheMessage->cm_fields['A']);
1960                 if (TheMessage->cm_anon_type == MES_ANONONLY) {
1961                         safestrncpy(display_name, "****", sizeof display_name);
1962                 }
1963                 else if (TheMessage->cm_anon_type == MES_ANONOPT) {
1964                         safestrncpy(display_name, "anonymous", sizeof display_name);
1965                 }
1966                 else {
1967                         safestrncpy(display_name, buf, sizeof display_name);
1968                 }
1969                 if ((is_room_aide())
1970                     && ((TheMessage->cm_anon_type == MES_ANONONLY)
1971                         || (TheMessage->cm_anon_type == MES_ANONOPT))) {
1972                         size_t tmp = strlen(display_name);
1973                         snprintf(&display_name[tmp],
1974                                  sizeof display_name - tmp,
1975                                  " [%s]", buf);
1976                 }
1977         }
1978
1979         /* Don't show Internet address for users on the
1980          * local Citadel network.
1981          */
1982         suppress_f = 0;
1983         if (TheMessage->cm_fields['N'] != NULL)
1984                 if (!IsEmptyStr(TheMessage->cm_fields['N']))
1985                         if (haschar(TheMessage->cm_fields['N'], '.') == 0) {
1986                                 suppress_f = 1;
1987                         }
1988
1989         /* Now spew the header fields in the order we like them. */
1990         n = safestrncpy(allkeys, FORDER, sizeof allkeys);
1991         for (i=0; i<n; ++i) {
1992                 k = (int) allkeys[i];
1993                 if (k != 'M') {
1994                         if ( (TheMessage->cm_fields[k] != NULL)
1995                              && (msgkeys[k] != NULL) ) {
1996                                 if ((k == 'V') || (k == 'R') || (k == 'Y')) {
1997                                         sanitize_truncated_recipient(TheMessage->cm_fields[k]);
1998                                 }
1999                                 if (k == 'A') {
2000                                         if (do_proto) cprintf("%s=%s\n",
2001                                                               msgkeys[k],
2002                                                               display_name);
2003                                 }
2004                                 else if ((k == 'F') && (suppress_f)) {
2005                                         /* do nothing */
2006                                 }
2007                                 /* Masquerade display name if needed */
2008                                 else {
2009                                         if (do_proto) cprintf("%s=%s\n",
2010                                                               msgkeys[k],
2011                                                               TheMessage->cm_fields[k]
2012                                                 );
2013                                 }
2014                         }
2015                 }
2016         }
2017
2018 }
2019
2020 void OutputRFC822MsgHeaders(
2021         struct CtdlMessage *TheMessage,
2022         int flags,              /* should the bessage be exported clean */
2023         const char *nl,
2024         char *mid, long sizeof_mid,
2025         char *suser, long sizeof_suser,
2026         char *luser, long sizeof_luser,
2027         char *fuser, long sizeof_fuser,
2028         char *snode, long sizeof_snode)
2029 {
2030         char datestamp[100];
2031         int subject_found = 0;
2032         char buf[SIZ];
2033         int i, j, k;
2034         char *mptr = NULL;
2035         char *mpptr = NULL;
2036         char *hptr;
2037
2038         for (i = 0; i < 256; ++i) {
2039                 if (TheMessage->cm_fields[i]) {
2040                         mptr = mpptr = TheMessage->cm_fields[i];
2041
2042                         if (i == 'A') {
2043                                 safestrncpy(luser, mptr, sizeof_luser);
2044                                 safestrncpy(suser, mptr, sizeof_suser);
2045                         }
2046                         else if (i == 'Y') {
2047                                 if ((flags & QP_EADDR) != 0) {
2048                                         mptr = qp_encode_email_addrs(mptr);
2049                                 }
2050                                 sanitize_truncated_recipient(mptr);
2051                                 cprintf("CC: %s%s", mptr, nl);
2052                         }
2053                         else if (i == 'P') {
2054                                 cprintf("Return-Path: %s%s", mptr, nl);
2055                         }
2056                         else if (i == 'L') {
2057                                 cprintf("List-ID: %s%s", mptr, nl);
2058                         }
2059                         else if (i == 'V') {
2060                                 if ((flags & QP_EADDR) != 0)
2061                                         mptr = qp_encode_email_addrs(mptr);
2062                                 hptr = mptr;
2063                                 while ((*hptr != '\0') && isspace(*hptr))
2064                                         hptr ++;
2065                                 if (!IsEmptyStr(hptr))
2066                                         cprintf("Envelope-To: %s%s", hptr, nl);
2067                         }
2068                         else if (i == 'U') {
2069                                 cprintf("Subject: %s%s", mptr, nl);
2070                                 subject_found = 1;
2071                         }
2072                         else if (i == 'I')
2073                                 safestrncpy(mid, mptr, sizeof_mid); /// TODO: detect @ here and copy @nodename in if not found.
2074                         else if (i == 'F')
2075                                 safestrncpy(fuser, mptr, sizeof_fuser);
2076                         /* else if (i == 'O')
2077                            cprintf("X-Citadel-Room: %s%s",
2078                            mptr, nl); */
2079                         else if (i == 'N')
2080                                 safestrncpy(snode, mptr, sizeof_snode);
2081                         else if (i == 'R')
2082                         {
2083                                 if (haschar(mptr, '@') == 0)
2084                                 {
2085                                         sanitize_truncated_recipient(mptr);
2086                                         cprintf("To: %s@%s", mptr, config.c_fqdn);
2087                                         cprintf("%s", nl);
2088                                 }
2089                                 else
2090                                 {
2091                                         if ((flags & QP_EADDR) != 0) {
2092                                                 mptr = qp_encode_email_addrs(mptr);
2093                                         }
2094                                         sanitize_truncated_recipient(mptr);
2095                                         cprintf("To: %s", mptr);
2096                                         cprintf("%s", nl);
2097                                 }
2098                         }
2099                         else if (i == 'T') {
2100                                 datestring(datestamp, sizeof datestamp,
2101                                            atol(mptr), DATESTRING_RFC822);
2102                                 cprintf("Date: %s%s", datestamp, nl);
2103                         }
2104                         else if (i == 'W') {
2105                                 cprintf("References: ");
2106                                 k = num_tokens(mptr, '|');
2107                                 for (j=0; j<k; ++j) {
2108                                         extract_token(buf, mptr, j, '|', sizeof buf);
2109                                         cprintf("<%s>", buf);
2110                                         if (j == (k-1)) {
2111                                                 cprintf("%s", nl);
2112                                         }
2113                                         else {
2114                                                 cprintf(" ");
2115                                         }
2116                                 }
2117                         }
2118                         else if (i == 'K') {
2119                                 hptr = mptr;
2120                                 while ((*hptr != '\0') && isspace(*hptr))
2121                                         hptr ++;
2122                                 if (!IsEmptyStr(hptr))
2123                                         cprintf("Reply-To: %s%s", mptr, nl);
2124                         }
2125                         if (mptr != mpptr)
2126                                 free (mptr);
2127                 }
2128         }
2129         if (subject_found == 0) {
2130                 cprintf("Subject: (no subject)%s", nl);
2131         }
2132 }
2133
2134
2135 void Dump_RFC822HeadersBody(
2136         struct CtdlMessage *TheMessage,
2137         int headers_only,       /* eschew the message body? */
2138         int flags,              /* should the bessage be exported clean? */
2139
2140         const char *nl)
2141 {
2142         cit_uint8_t prev_ch;
2143         int eoh = 0;
2144         const char *StartOfText = StrBufNOTNULL;
2145         char outbuf[1024];
2146         int outlen = 0;
2147         int nllen = strlen(nl);
2148         char *mptr;
2149
2150         mptr = TheMessage->cm_fields['M'];
2151
2152
2153         prev_ch = '\0';
2154         while (*mptr != '\0') {
2155                 if (*mptr == '\r') {
2156                         /* do nothing */
2157                 }
2158                 else {
2159                         if ((!eoh) &&
2160                             (*mptr == '\n'))
2161                         {
2162                                 eoh = (*(mptr+1) == '\r') && (*(mptr+2) == '\n');
2163                                 if (!eoh)
2164                                         eoh = *(mptr+1) == '\n';
2165                                 if (eoh)
2166                                 {
2167                                         StartOfText = mptr;
2168                                         StartOfText = strchr(StartOfText, '\n');
2169                                         StartOfText = strchr(StartOfText, '\n');
2170                                 }
2171                         }
2172                         if (((headers_only == HEADERS_NONE) && (mptr >= StartOfText)) ||
2173                             ((headers_only == HEADERS_ONLY) && (mptr < StartOfText)) ||
2174                             ((headers_only != HEADERS_NONE) &&
2175                              (headers_only != HEADERS_ONLY))
2176                                 ) {
2177                                 if (*mptr == '\n') {
2178                                         memcpy(&outbuf[outlen], nl, nllen);
2179                                         outlen += nllen;
2180                                         outbuf[outlen] = '\0';
2181                                 }
2182                                 else {
2183                                         outbuf[outlen++] = *mptr;
2184                                 }
2185                         }
2186                 }
2187                 if (flags & ESC_DOT)
2188                 {
2189                         if ((prev_ch == '\n') &&
2190                             (*mptr == '.') &&
2191                             ((*(mptr+1) == '\r') || (*(mptr+1) == '\n')))
2192                         {
2193                                 outbuf[outlen++] = '.';
2194                         }
2195                         prev_ch = *mptr;
2196                 }
2197                 ++mptr;
2198                 if (outlen > 1000) {
2199                         if (client_write(outbuf, outlen) == -1)
2200                         {
2201                                 struct CitContext *CCC = CC;
2202                                 MSGM_syslog(LOG_ERR, "Dump_RFC822HeadersBody(): aborting due to write failure.\n");
2203                                 return;
2204                         }
2205                         outlen = 0;
2206                 }
2207         }
2208         if (outlen > 0) {
2209                 client_write(outbuf, outlen);
2210         }
2211 }
2212
2213
2214
2215 /* If the format type on disk is 1 (fixed-format), then we want
2216  * everything to be output completely literally ... regardless of
2217  * what message transfer format is in use.
2218  */
2219 void DumpFormatFixed(
2220         struct CtdlMessage *TheMessage,
2221         int mode,               /* how would you like that message? */
2222         const char *nl)
2223 {
2224         cit_uint8_t ch;
2225         char buf[SIZ];
2226         int buflen;
2227         int xlline = 0;
2228         int nllen = strlen (nl);
2229         char *mptr;
2230
2231         mptr = TheMessage->cm_fields['M'];
2232
2233         if (mode == MT_MIME) {
2234                 cprintf("Content-type: text/plain\n\n");
2235         }
2236         *buf = '\0';
2237         buflen = 0;
2238         while (ch = *mptr++, ch > 0) {
2239                 if (ch == '\n')
2240                         ch = '\r';
2241
2242                 if ((buflen > 250) && (!xlline)){
2243                         int tbuflen;
2244                         tbuflen = buflen;
2245
2246                         while ((buflen > 0) &&
2247                                (!isspace(buf[buflen])))
2248                                 buflen --;
2249                         if (buflen == 0) {
2250                                 xlline = 1;
2251                         }
2252                         else {
2253                                 mptr -= tbuflen - buflen;
2254                                 buf[buflen] = '\0';
2255                                 ch = '\r';
2256                         }
2257                 }
2258                 /* if we reach the outer bounds of our buffer,
2259                    abort without respect what whe purge. */
2260                 if (xlline &&
2261                     ((isspace(ch)) ||
2262                      (buflen > SIZ - nllen - 2)))
2263                         ch = '\r';
2264
2265                 if (ch == '\r') {
2266                         memcpy (&buf[buflen], nl, nllen);
2267                         buflen += nllen;
2268                         buf[buflen] = '\0';
2269
2270                         if (client_write(buf, buflen) == -1)
2271                         {
2272                                 struct CitContext *CCC = CC;
2273                                 MSGM_syslog(LOG_ERR, "DumpFormatFixed(): aborting due to write failure.\n");
2274                                 return;
2275                         }
2276                         *buf = '\0';
2277                         buflen = 0;
2278                         xlline = 0;
2279                 } else {
2280                         buf[buflen] = ch;
2281                         buflen++;
2282                 }
2283         }
2284         buf[buflen] = '\0';
2285         if (!IsEmptyStr(buf))
2286                 cprintf("%s%s", buf, nl);
2287 }
2288
2289 /*
2290  * Get a message off disk.  (returns om_* values found in msgbase.h)
2291  */
2292 int CtdlOutputPreLoadedMsg(
2293                 struct CtdlMessage *TheMessage,
2294                 int mode,               /* how would you like that message? */
2295                 int headers_only,       /* eschew the message body? */
2296                 int do_proto,           /* do Citadel protocol responses? */
2297                 int crlf,               /* Use CRLF newlines instead of LF? */
2298                 int flags               /* should the bessage be exported clean? */
2299 ) {
2300         struct CitContext *CCC = CC;
2301         int i;
2302         char *mptr = NULL;
2303         const char *nl; /* newline string */
2304         struct ma_info ma;
2305
2306         /* Buffers needed for RFC822 translation.  These are all filled
2307          * using functions that are bounds-checked, and therefore we can
2308          * make them substantially smaller than SIZ.
2309          */
2310         char suser[100];
2311         char luser[100];
2312         char fuser[100];
2313         char snode[100];
2314         char mid[100];
2315
2316         MSG_syslog(LOG_DEBUG, "CtdlOutputPreLoadedMsg(TheMessage=%s, %d, %d, %d, %d\n",
2317                    ((TheMessage == NULL) ? "NULL" : "not null"),
2318                    mode, headers_only, do_proto, crlf);
2319
2320         strcpy(mid, "unknown");
2321         nl = (crlf ? "\r\n" : "\n");
2322
2323         if (!is_valid_message(TheMessage)) {
2324                 MSGM_syslog(LOG_ERR,
2325                             "ERROR: invalid preloaded message for output\n");
2326                 cit_backtrace ();
2327                 return(om_no_such_msg);
2328         }
2329
2330         /* Suppress envelope recipients if required to avoid disclosing BCC addresses.
2331          * Pad it with spaces in order to avoid changing the RFC822 length of the message.
2332          */
2333         if ( (flags & SUPPRESS_ENV_TO) && (TheMessage->cm_fields['V'] != NULL) ) {
2334                 memset(TheMessage->cm_fields['V'], ' ', strlen(TheMessage->cm_fields['V']));
2335         }
2336
2337         /* Are we downloading a MIME component? */
2338         if (mode == MT_DOWNLOAD) {
2339                 if (TheMessage->cm_format_type != FMT_RFC822) {
2340                         if (do_proto)
2341                                 cprintf("%d This is not a MIME message.\n",
2342                                 ERROR + ILLEGAL_VALUE);
2343                 } else if (CCC->download_fp != NULL) {
2344                         if (do_proto) cprintf(
2345                                 "%d You already have a download open.\n",
2346                                 ERROR + RESOURCE_BUSY);
2347                 } else {
2348                         /* Parse the message text component */
2349                         mptr = TheMessage->cm_fields['M'];
2350                         mime_parser(mptr, NULL, *mime_download, NULL, NULL, NULL, 0);
2351                         /* If there's no file open by this time, the requested
2352                          * section wasn't found, so print an error
2353                          */
2354                         if (CCC->download_fp == NULL) {
2355                                 if (do_proto) cprintf(
2356                                         "%d Section %s not found.\n",
2357                                         ERROR + FILE_NOT_FOUND,
2358                                         CCC->download_desired_section);
2359                         }
2360                 }
2361                 return((CCC->download_fp != NULL) ? om_ok : om_mime_error);
2362         }
2363
2364         /* MT_SPEW_SECTION is like MT_DOWNLOAD except it outputs the whole MIME part
2365          * in a single server operation instead of opening a download file.
2366          */
2367         if (mode == MT_SPEW_SECTION) {
2368                 if (TheMessage->cm_format_type != FMT_RFC822) {
2369                         if (do_proto)
2370                                 cprintf("%d This is not a MIME message.\n",
2371                                 ERROR + ILLEGAL_VALUE);
2372                 } else {
2373                         /* Parse the message text component */
2374                         int found_it = 0;
2375
2376                         mptr = TheMessage->cm_fields['M'];
2377                         mime_parser(mptr, NULL, *mime_spew_section, NULL, NULL, (void *)&found_it, 0);
2378                         /* If section wasn't found, print an error
2379                          */
2380                         if (!found_it) {
2381                                 if (do_proto) cprintf(
2382                                         "%d Section %s not found.\n",
2383                                         ERROR + FILE_NOT_FOUND,
2384                                         CCC->download_desired_section);
2385                         }
2386                 }
2387                 return((CCC->download_fp != NULL) ? om_ok : om_mime_error);
2388         }
2389
2390         /* now for the user-mode message reading loops */
2391         if (do_proto) cprintf("%d msg:\n", LISTING_FOLLOWS);
2392
2393         /* Does the caller want to skip the headers? */
2394         if (headers_only == HEADERS_NONE) goto START_TEXT;
2395
2396         /* Tell the client which format type we're using. */
2397         if ( (mode == MT_CITADEL) && (do_proto) ) {
2398                 cprintf("type=%d\n", TheMessage->cm_format_type);
2399         }
2400
2401         /* nhdr=yes means that we're only displaying headers, no body */
2402         if ( (TheMessage->cm_anon_type == MES_ANONONLY)
2403            && ((mode == MT_CITADEL) || (mode == MT_MIME))
2404            && (do_proto)
2405            ) {
2406                 cprintf("nhdr=yes\n");
2407         }
2408
2409         if ((mode == MT_CITADEL) || (mode == MT_MIME))
2410                 OutputCtdlMsgHeaders(TheMessage, do_proto);
2411
2412
2413         /* begin header processing loop for RFC822 transfer format */
2414         strcpy(suser, "");
2415         strcpy(luser, "");
2416         strcpy(fuser, "");
2417         strcpy(snode, NODENAME);
2418         if (mode == MT_RFC822)
2419                 OutputRFC822MsgHeaders(
2420                         TheMessage,
2421                         flags,
2422                         nl,
2423                         mid, sizeof(mid),
2424                         suser, sizeof(suser),
2425                         luser, sizeof(luser),
2426                         fuser, sizeof(fuser),
2427                         snode, sizeof(snode)
2428                         );
2429
2430
2431         for (i=0; !IsEmptyStr(&suser[i]); ++i) {
2432                 suser[i] = tolower(suser[i]);
2433                 if (!isalnum(suser[i])) suser[i]='_';
2434         }
2435
2436         if (mode == MT_RFC822) {
2437                 if (!strcasecmp(snode, NODENAME)) {
2438                         safestrncpy(snode, FQDN, sizeof snode);
2439                 }
2440
2441                 /* Construct a fun message id */
2442                 cprintf("Message-ID: <%s", mid);/// todo: this possibly breaks threadding mails.
2443                 if (strchr(mid, '@')==NULL) {
2444                         cprintf("@%s", snode);
2445                 }
2446                 cprintf(">%s", nl);
2447
2448                 if (!is_room_aide() && (TheMessage->cm_anon_type == MES_ANONONLY)) {
2449                         cprintf("From: \"----\" <x@x.org>%s", nl);
2450                 }
2451                 else if (!is_room_aide() && (TheMessage->cm_anon_type == MES_ANONOPT)) {
2452                         cprintf("From: \"anonymous\" <x@x.org>%s", nl);
2453                 }
2454                 else if (!IsEmptyStr(fuser)) {
2455                         cprintf("From: \"%s\" <%s>%s", luser, fuser, nl);
2456                 }
2457                 else {
2458                         cprintf("From: \"%s\" <%s@%s>%s", luser, suser, snode, nl);
2459                 }
2460
2461                 /* Blank line signifying RFC822 end-of-headers */
2462                 if (TheMessage->cm_format_type != FMT_RFC822) {
2463                         cprintf("%s", nl);
2464                 }
2465         }
2466
2467         /* end header processing loop ... at this point, we're in the text */
2468 START_TEXT:
2469         if (headers_only == HEADERS_FAST) goto DONE;
2470
2471         /* Tell the client about the MIME parts in this message */
2472         if (TheMessage->cm_format_type == FMT_RFC822) {
2473                 if ( (mode == MT_CITADEL) || (mode == MT_MIME) ) {
2474                         mptr = TheMessage->cm_fields['M'];
2475                         memset(&ma, 0, sizeof(struct ma_info));
2476                         mime_parser(mptr, NULL,
2477                                 (do_proto ? *list_this_part : NULL),
2478                                 (do_proto ? *list_this_pref : NULL),
2479                                 (do_proto ? *list_this_suff : NULL),
2480                                 (void *)&ma, 1);
2481                 }
2482                 else if (mode == MT_RFC822) {   /* unparsed RFC822 dump */
2483                         Dump_RFC822HeadersBody(
2484                                 TheMessage,
2485                                 headers_only,
2486                                 flags,
2487                                 nl);
2488                         goto DONE;
2489                 }
2490         }
2491
2492         if (headers_only == HEADERS_ONLY) {
2493                 goto DONE;
2494         }
2495
2496         /* signify start of msg text */
2497         if ( (mode == MT_CITADEL) || (mode == MT_MIME) ) {
2498                 if (do_proto) cprintf("text\n");
2499         }
2500
2501         if (TheMessage->cm_format_type == FMT_FIXED)
2502                 DumpFormatFixed(
2503                         TheMessage,
2504                         mode,           /* how would you like that message? */
2505                         nl);
2506
2507         /* If the message on disk is format 0 (Citadel vari-format), we
2508          * output using the formatter at 80 columns.  This is the final output
2509          * form if the transfer format is RFC822, but if the transfer format
2510          * is Citadel proprietary, it'll still work, because the indentation
2511          * for new paragraphs is correct and the client will reformat the
2512          * message to the reader's screen width.
2513          */
2514         if (TheMessage->cm_format_type == FMT_CITADEL) {
2515                 mptr = TheMessage->cm_fields['M'];
2516
2517                 if (mode == MT_MIME) {
2518                         cprintf("Content-type: text/x-citadel-variformat\n\n");
2519                 }
2520                 memfmout(mptr, nl);
2521         }
2522
2523         /* If the message on disk is format 4 (MIME), we've gotta hand it
2524          * off to the MIME parser.  The client has already been told that
2525          * this message is format 1 (fixed format), so the callback function
2526          * we use will display those parts as-is.
2527          */
2528         if (TheMessage->cm_format_type == FMT_RFC822) {
2529                 memset(&ma, 0, sizeof(struct ma_info));
2530
2531                 if (mode == MT_MIME) {
2532                         ma.use_fo_hooks = 0;
2533                         strcpy(ma.chosen_part, "1");
2534                         ma.chosen_pref = 9999;
2535                         ma.dont_decode = CCC->msg4_dont_decode;
2536                         mime_parser(mptr, NULL,
2537                                 *choose_preferred, *fixed_output_pre,
2538                                 *fixed_output_post, (void *)&ma, 1);
2539                         mime_parser(mptr, NULL,
2540                                 *output_preferred, NULL, NULL, (void *)&ma, 1);
2541                 }
2542                 else {
2543                         ma.use_fo_hooks = 1;
2544                         mime_parser(mptr, NULL,
2545                                 *fixed_output, *fixed_output_pre,
2546                                 *fixed_output_post, (void *)&ma, 0);
2547                 }
2548
2549         }
2550
2551 DONE:   /* now we're done */
2552         if (do_proto) cprintf("000\n");
2553         return(om_ok);
2554 }
2555
2556
2557 /*
2558  * display a message (mode 0 - Citadel proprietary)
2559  */
2560 void cmd_msg0(char *cmdbuf)
2561 {
2562         long msgid;
2563         int headers_only = HEADERS_ALL;
2564
2565         msgid = extract_long(cmdbuf, 0);
2566         headers_only = extract_int(cmdbuf, 1);
2567
2568         CtdlOutputMsg(msgid, MT_CITADEL, headers_only, 1, 0, NULL, 0, NULL, NULL);
2569         return;
2570 }
2571
2572
2573 /*
2574  * display a message (mode 2 - RFC822)
2575  */
2576 void cmd_msg2(char *cmdbuf)
2577 {
2578         long msgid;
2579         int headers_only = HEADERS_ALL;
2580
2581         msgid = extract_long(cmdbuf, 0);
2582         headers_only = extract_int(cmdbuf, 1);
2583
2584         CtdlOutputMsg(msgid, MT_RFC822, headers_only, 1, 1, NULL, 0, NULL, NULL);
2585 }
2586
2587
2588
2589 /*
2590  * display a message (mode 3 - IGnet raw format - internal programs only)
2591  */
2592 void cmd_msg3(char *cmdbuf)
2593 {
2594         long msgnum;
2595         struct CtdlMessage *msg = NULL;
2596         struct ser_ret smr;
2597
2598         if (CC->internal_pgm == 0) {
2599                 cprintf("%d This command is for internal programs only.\n",
2600                         ERROR + HIGHER_ACCESS_REQUIRED);
2601                 return;
2602         }
2603
2604         msgnum = extract_long(cmdbuf, 0);
2605         msg = CtdlFetchMessage(msgnum, 1);
2606         if (msg == NULL) {
2607                 cprintf("%d Message %ld not found.\n",
2608                         ERROR + MESSAGE_NOT_FOUND, msgnum);
2609                 return;
2610         }
2611
2612         serialize_message(&smr, msg);
2613         CtdlFreeMessage(msg);
2614
2615         if (smr.len == 0) {
2616                 cprintf("%d Unable to serialize message\n",
2617                         ERROR + INTERNAL_ERROR);
2618                 return;
2619         }
2620
2621         cprintf("%d %ld\n", BINARY_FOLLOWS, (long)smr.len);
2622         client_write((char *)smr.ser, (int)smr.len);
2623         free(smr.ser);
2624 }
2625
2626
2627
2628 /*
2629  * Display a message using MIME content types
2630  */
2631 void cmd_msg4(char *cmdbuf)
2632 {
2633         long msgid;
2634         char section[64];
2635
2636         msgid = extract_long(cmdbuf, 0);
2637         extract_token(section, cmdbuf, 1, '|', sizeof section);
2638         CtdlOutputMsg(msgid, MT_MIME, 0, 1, 0, (section[0] ? section : NULL) , 0, NULL, NULL);
2639 }
2640
2641
2642
2643 /*
2644  * Client tells us its preferred message format(s)
2645  */
2646 void cmd_msgp(char *cmdbuf)
2647 {
2648         if (!strcasecmp(cmdbuf, "dont_decode")) {
2649                 CC->msg4_dont_decode = 1;
2650                 cprintf("%d MSG4 will not pre-decode messages.\n", CIT_OK);
2651         }
2652         else {
2653                 safestrncpy(CC->preferred_formats, cmdbuf, sizeof(CC->preferred_formats));
2654                 cprintf("%d Preferred MIME formats have been set.\n", CIT_OK);
2655         }
2656 }
2657
2658
2659 /*
2660  * Open a component of a MIME message as a download file
2661  */
2662 void cmd_opna(char *cmdbuf)
2663 {
2664         long msgid;
2665         char desired_section[128];
2666
2667         msgid = extract_long(cmdbuf, 0);
2668         extract_token(desired_section, cmdbuf, 1, '|', sizeof desired_section);
2669         safestrncpy(CC->download_desired_section, desired_section,
2670                 sizeof CC->download_desired_section);
2671         CtdlOutputMsg(msgid, MT_DOWNLOAD, 0, 1, 1, NULL, 0, NULL, NULL);
2672 }
2673
2674
2675 /*
2676  * Open a component of a MIME message and transmit it all at once
2677  */
2678 void cmd_dlat(char *cmdbuf)
2679 {
2680         long msgid;
2681         char desired_section[128];
2682
2683         msgid = extract_long(cmdbuf, 0);
2684         extract_token(desired_section, cmdbuf, 1, '|', sizeof desired_section);
2685         safestrncpy(CC->download_desired_section, desired_section,
2686                 sizeof CC->download_desired_section);
2687         CtdlOutputMsg(msgid, MT_SPEW_SECTION, 0, 1, 1, NULL, 0, NULL, NULL);
2688 }
2689
2690
2691 /*
2692  * Save one or more message pointers into a specified room
2693  * (Returns 0 for success, nonzero for failure)
2694  * roomname may be NULL to use the current room
2695  *
2696  * Note that the 'supplied_msg' field may be set to NULL, in which case
2697  * the message will be fetched from disk, by number, if we need to perform
2698  * replication checks.  This adds an additional database read, so if the
2699  * caller already has the message in memory then it should be supplied.  (Obviously
2700  * this mode of operation only works if we're saving a single message.)
2701  */
2702 int CtdlSaveMsgPointersInRoom(char *roomname, long newmsgidlist[], int num_newmsgs,
2703                         int do_repl_check, struct CtdlMessage *supplied_msg, int suppress_refcount_adj
2704 ) {
2705         struct CitContext *CCC = CC;
2706         int i, j, unique;
2707         char hold_rm[ROOMNAMELEN];
2708         struct cdbdata *cdbfr;
2709         int num_msgs;
2710         long *msglist;
2711         long highest_msg = 0L;
2712
2713         long msgid = 0;
2714         struct CtdlMessage *msg = NULL;
2715
2716         long *msgs_to_be_merged = NULL;
2717         int num_msgs_to_be_merged = 0;
2718
2719         MSG_syslog(LOG_DEBUG,
2720                    "CtdlSaveMsgPointersInRoom(room=%s, num_msgs=%d, repl=%d, suppress_rca=%d)\n",
2721                    roomname, num_newmsgs, do_repl_check, suppress_refcount_adj
2722         );
2723
2724         strcpy(hold_rm, CCC->room.QRname);
2725
2726         /* Sanity checks */
2727         if (newmsgidlist == NULL) return(ERROR + INTERNAL_ERROR);
2728         if (num_newmsgs < 1) return(ERROR + INTERNAL_ERROR);
2729         if (num_newmsgs > 1) supplied_msg = NULL;
2730
2731         /* Now the regular stuff */
2732         if (CtdlGetRoomLock(&CCC->room,
2733            ((roomname != NULL) ? roomname : CCC->room.QRname) )
2734            != 0) {
2735                 MSG_syslog(LOG_ERR, "No such room <%s>\n", roomname);
2736                 return(ERROR + ROOM_NOT_FOUND);
2737         }
2738
2739
2740         msgs_to_be_merged = malloc(sizeof(long) * num_newmsgs);
2741         num_msgs_to_be_merged = 0;
2742
2743
2744         cdbfr = cdb_fetch(CDB_MSGLISTS, &CCC->room.QRnumber, sizeof(long));
2745         if (cdbfr == NULL) {
2746                 msglist = NULL;
2747                 num_msgs = 0;
2748         } else {
2749                 msglist = (long *) cdbfr->ptr;
2750                 cdbfr->ptr = NULL;      /* CtdlSaveMsgPointerInRoom() now owns this memory */
2751                 num_msgs = cdbfr->len / sizeof(long);
2752                 cdb_free(cdbfr);
2753         }
2754
2755
2756         /* Create a list of msgid's which were supplied by the caller, but do
2757          * not already exist in the target room.  It is absolutely taboo to
2758          * have more than one reference to the same message in a room.
2759          */
2760         for (i=0; i<num_newmsgs; ++i) {
2761                 unique = 1;
2762                 if (num_msgs > 0) for (j=0; j<num_msgs; ++j) {
2763                         if (msglist[j] == newmsgidlist[i]) {
2764                                 unique = 0;
2765                         }
2766                 }
2767                 if (unique) {
2768                         msgs_to_be_merged[num_msgs_to_be_merged++] = newmsgidlist[i];
2769                 }
2770         }
2771
2772         MSG_syslog(LOG_DEBUG, "%d unique messages to be merged\n", num_msgs_to_be_merged);
2773
2774         /*
2775          * Now merge the new messages
2776          */
2777         msglist = realloc(msglist, (sizeof(long) * (num_msgs + num_msgs_to_be_merged)) );
2778         if (msglist == NULL) {
2779                 MSGM_syslog(LOG_ALERT, "ERROR: can't realloc message list!\n");
2780                 free(msgs_to_be_merged);
2781                 return (ERROR + INTERNAL_ERROR);
2782         }
2783         memcpy(&msglist[num_msgs], msgs_to_be_merged, (sizeof(long) * num_msgs_to_be_merged) );
2784         num_msgs += num_msgs_to_be_merged;
2785
2786         /* Sort the message list, so all the msgid's are in order */
2787         num_msgs = sort_msglist(msglist, num_msgs);
2788
2789         /* Determine the highest message number */
2790         highest_msg = msglist[num_msgs - 1];
2791
2792         /* Write it back to disk. */
2793         cdb_store(CDB_MSGLISTS, &CCC->room.QRnumber, (int)sizeof(long),
2794                   msglist, (int)(num_msgs * sizeof(long)));
2795
2796         /* Free up the memory we used. */
2797         free(msglist);
2798
2799         /* Update the highest-message pointer and unlock the room. */
2800         CCC->room.QRhighest = highest_msg;
2801         CtdlPutRoomLock(&CCC->room);
2802
2803         /* Perform replication checks if necessary */
2804         if ( (DoesThisRoomNeedEuidIndexing(&CCC->room)) && (do_repl_check) ) {
2805                 MSGM_syslog(LOG_DEBUG, "CtdlSaveMsgPointerInRoom() doing repl checks\n");
2806
2807                 for (i=0; i<num_msgs_to_be_merged; ++i) {
2808                         msgid = msgs_to_be_merged[i];
2809
2810                         if (supplied_msg != NULL) {
2811                                 msg = supplied_msg;
2812                         }
2813                         else {
2814                                 msg = CtdlFetchMessage(msgid, 0);
2815                         }
2816
2817                         if (msg != NULL) {
2818                                 ReplicationChecks(msg);
2819
2820                                 /* If the message has an Exclusive ID, index that... */
2821                                 if (msg->cm_fields['E'] != NULL) {
2822                                         index_message_by_euid(msg->cm_fields['E'], &CCC->room, msgid);
2823                                 }
2824
2825                                 /* Free up the memory we may have allocated */
2826                                 if (msg != supplied_msg) {
2827                                         CtdlFreeMessage(msg);
2828                                 }
2829                         }
2830
2831                 }
2832         }
2833
2834         else {
2835                 MSGM_syslog(LOG_DEBUG, "CtdlSaveMsgPointerInRoom() skips repl checks\n");
2836         }
2837
2838         /* Submit this room for processing by hooks */
2839         PerformRoomHooks(&CCC->room);
2840
2841         /* Go back to the room we were in before we wandered here... */
2842         CtdlGetRoom(&CCC->room, hold_rm);
2843
2844         /* Bump the reference count for all messages which were merged */
2845         if (!suppress_refcount_adj) {
2846                 AdjRefCountList(msgs_to_be_merged, num_msgs_to_be_merged, +1);
2847         }
2848
2849         /* Free up memory... */
2850         if (msgs_to_be_merged != NULL) {
2851                 free(msgs_to_be_merged);
2852         }
2853
2854         /* Return success. */
2855         return (0);
2856 }
2857
2858
2859 /*
2860  * This is the same as CtdlSaveMsgPointersInRoom() but it only accepts
2861  * a single message.
2862  */
2863 int CtdlSaveMsgPointerInRoom(char *roomname, long msgid,
2864                              int do_repl_check, struct CtdlMessage *supplied_msg)
2865 {
2866         return CtdlSaveMsgPointersInRoom(roomname, &msgid, 1, do_repl_check, supplied_msg, 0);
2867 }
2868
2869
2870
2871
2872 /*
2873  * Message base operation to save a new message to the message store
2874  * (returns new message number)
2875  *
2876  * This is the back end for CtdlSubmitMsg() and should not be directly
2877  * called by server-side modules.
2878  *
2879  */
2880 long send_message(struct CtdlMessage *msg) {
2881         struct CitContext *CCC = CC;
2882         long newmsgid;
2883         long retval;
2884         char msgidbuf[256];
2885         struct ser_ret smr;
2886         int is_bigmsg = 0;
2887         char *holdM = NULL;
2888
2889         /* Get a new message number */
2890         newmsgid = get_new_message_number();
2891         snprintf(msgidbuf, sizeof msgidbuf, "%08lX-%08lX@%s",
2892                  (long unsigned int) time(NULL),
2893                  (long unsigned int) newmsgid,
2894                  config.c_fqdn
2895                 );
2896
2897         /* Generate an ID if we don't have one already */
2898         if (msg->cm_fields['I']==NULL) {
2899                 msg->cm_fields['I'] = strdup(msgidbuf);
2900         }
2901
2902         /* If the message is big, set its body aside for storage elsewhere */
2903         if (msg->cm_fields['M'] != NULL) {
2904                 if (strlen(msg->cm_fields['M']) > BIGMSG) {
2905                         is_bigmsg = 1;
2906                         holdM = msg->cm_fields['M'];
2907                         msg->cm_fields['M'] = NULL;
2908                 }
2909         }
2910
2911         /* Serialize our data structure for storage in the database */
2912         serialize_message(&smr, msg);
2913
2914         if (is_bigmsg) {
2915                 msg->cm_fields['M'] = holdM;
2916         }
2917
2918         if (smr.len == 0) {
2919                 cprintf("%d Unable to serialize message\n",
2920                         ERROR + INTERNAL_ERROR);
2921                 return (-1L);
2922         }
2923
2924         /* Write our little bundle of joy into the message base */
2925         if (cdb_store(CDB_MSGMAIN, &newmsgid, (int)sizeof(long),
2926                       smr.ser, smr.len) < 0) {
2927                 MSGM_syslog(LOG_ERR, "Can't store message\n");
2928                 retval = 0L;
2929         } else {
2930                 if (is_bigmsg) {
2931                         cdb_store(CDB_BIGMSGS,
2932                                   &newmsgid,
2933                                   (int)sizeof(long),
2934                                   holdM,
2935                                   (strlen(holdM) + 1)
2936                                 );
2937                 }
2938                 retval = newmsgid;
2939         }
2940
2941         /* Free the memory we used for the serialized message */
2942         free(smr.ser);
2943
2944         /* Return the *local* message ID to the caller
2945          * (even if we're storing an incoming network message)
2946          */
2947         return(retval);
2948 }
2949
2950
2951
2952 /*
2953  * Serialize a struct CtdlMessage into the format used on disk and network.
2954  *
2955  * This function loads up a "struct ser_ret" (defined in server.h) which
2956  * contains the length of the serialized message and a pointer to the
2957  * serialized message in memory.  THE LATTER MUST BE FREED BY THE CALLER.
2958  */
2959 void serialize_message(struct ser_ret *ret,             /* return values */
2960                        struct CtdlMessage *msg) /* unserialized msg */
2961 {
2962         struct CitContext *CCC = CC;
2963         size_t wlen, fieldlen;
2964         int i;
2965         static char *forder = FORDER;
2966
2967         /*
2968          * Check for valid message format
2969          */
2970         if (is_valid_message(msg) == 0) {
2971                 MSGM_syslog(LOG_ERR, "serialize_message() aborting due to invalid message\n");
2972                 ret->len = 0;
2973                 ret->ser = NULL;
2974                 return;
2975         }
2976
2977         ret->len = 3;
2978         for (i=0; i<26; ++i) if (msg->cm_fields[(int)forder[i]] != NULL)
2979                                      ret->len = ret->len +
2980                                              strlen(msg->cm_fields[(int)forder[i]]) + 2;
2981
2982         ret->ser = malloc(ret->len);
2983         if (ret->ser == NULL) {
2984                 MSG_syslog(LOG_ERR, "serialize_message() malloc(%ld) failed: %s\n",
2985                            (long)ret->len, strerror(errno));
2986                 ret->len = 0;
2987                 ret->ser = NULL;
2988                 return;
2989         }
2990
2991         ret->ser[0] = 0xFF;
2992         ret->ser[1] = msg->cm_anon_type;
2993         ret->ser[2] = msg->cm_format_type;
2994         wlen = 3;
2995
2996         for (i=0; i<26; ++i) if (msg->cm_fields[(int)forder[i]] != NULL) {
2997                         fieldlen = strlen(msg->cm_fields[(int)forder[i]]);
2998                         ret->ser[wlen++] = (char)forder[i];
2999                         safestrncpy((char *)&ret->ser[wlen], msg->cm_fields[(int)forder[i]], fieldlen+1);
3000                         wlen = wlen + fieldlen + 1;
3001                 }
3002         if (ret->len != wlen) {
3003                 MSG_syslog(LOG_ERR, "ERROR: len=%ld wlen=%ld\n",
3004                            (long)ret->len, (long)wlen);
3005         }
3006
3007         return;
3008 }
3009
3010
3011 /*
3012  * Check to see if any messages already exist in the current room which
3013  * carry the same Exclusive ID as this one.  If any are found, delete them.
3014  */
3015 void ReplicationChecks(struct CtdlMessage *msg) {
3016         struct CitContext *CCC = CC;
3017         long old_msgnum = (-1L);
3018
3019         if (DoesThisRoomNeedEuidIndexing(&CCC->room) == 0) return;
3020
3021         MSG_syslog(LOG_DEBUG, "Performing replication checks in <%s>\n",
3022                    CCC->room.QRname);
3023
3024         /* No exclusive id?  Don't do anything. */
3025         if (msg == NULL) return;
3026         if (msg->cm_fields['E'] == NULL) return;
3027         if (IsEmptyStr(msg->cm_fields['E'])) return;
3028         /*MSG_syslog(LOG_DEBUG, "Exclusive ID: <%s> for room <%s>\n",
3029           msg->cm_fields['E'], CCC->room.QRname);*/
3030
3031         old_msgnum = CtdlLocateMessageByEuid(msg->cm_fields['E'], &CCC->room);
3032         if (old_msgnum > 0L) {
3033                 MSG_syslog(LOG_DEBUG, "ReplicationChecks() replacing message %ld\n", old_msgnum);
3034                 CtdlDeleteMessages(CCC->room.QRname, &old_msgnum, 1, "");
3035         }
3036 }
3037
3038
3039
3040 /*
3041  * Save a message to disk and submit it into the delivery system.
3042  */
3043 long CtdlSubmitMsg(struct CtdlMessage *msg,     /* message to save */
3044                    struct recptypes *recps,     /* recipients (if mail) */
3045                    const char *force,           /* force a particular room? */
3046                    int flags                    /* should the message be exported clean? */
3047         )
3048 {
3049         char submit_filename[128];
3050         char generated_timestamp[32];
3051         char hold_rm[ROOMNAMELEN];
3052         char actual_rm[ROOMNAMELEN];
3053         char force_room[ROOMNAMELEN];
3054         char content_type[SIZ];                 /* We have to learn this */
3055         char recipient[SIZ];
3056         const char *room;
3057         long newmsgid;
3058         const char *mptr = NULL;
3059         struct ctdluser userbuf;
3060         int a, i;
3061         struct MetaData smi;
3062         FILE *network_fp = NULL;
3063         static int seqnum = 1;
3064         struct CtdlMessage *imsg = NULL;
3065         char *instr = NULL;
3066         size_t instr_alloc = 0;
3067         struct ser_ret smr;
3068         char *hold_R, *hold_D;
3069         char *collected_addresses = NULL;
3070         struct addresses_to_be_filed *aptr = NULL;
3071         StrBuf *saved_rfc822_version = NULL;
3072         int qualified_for_journaling = 0;
3073         CitContext *CCC = MyContext();
3074         char bounce_to[1024] = "";
3075         int rv = 0;
3076
3077         MSGM_syslog(LOG_DEBUG, "CtdlSubmitMsg() called\n");
3078         if (is_valid_message(msg) == 0) return(-1);     /* self check */
3079
3080         /* If this message has no timestamp, we take the liberty of
3081          * giving it one, right now.
3082          */
3083         if (msg->cm_fields['T'] == NULL) {
3084                 snprintf(generated_timestamp, sizeof generated_timestamp, "%ld", (long)time(NULL));
3085                 msg->cm_fields['T'] = strdup(generated_timestamp);
3086         }
3087
3088         /* If this message has no path, we generate one.
3089          */
3090         if (msg->cm_fields['P'] == NULL) {
3091                 if (msg->cm_fields['A'] != NULL) {
3092                         msg->cm_fields['P'] = strdup(msg->cm_fields['A']);
3093                         for (a=0; !IsEmptyStr(&msg->cm_fields['P'][a]); ++a) {
3094                                 if (isspace(msg->cm_fields['P'][a])) {
3095                                         msg->cm_fields['P'][a] = ' ';
3096                                 }
3097                         }
3098                 }
3099                 else {
3100                         msg->cm_fields['P'] = strdup("unknown");
3101                 }
3102         }
3103
3104         if (force == NULL) {
3105                 strcpy(force_room, "");
3106         }
3107         else {
3108                 strcpy(force_room, force);
3109         }
3110
3111         /* Learn about what's inside, because it's what's inside that counts */
3112         if (msg->cm_fields['M'] == NULL) {
3113                 MSGM_syslog(LOG_ERR, "ERROR: attempt to save message with NULL body\n");
3114                 return(-2);
3115         }
3116
3117         switch (msg->cm_format_type) {
3118         case 0:
3119                 strcpy(content_type, "text/x-citadel-variformat");
3120                 break;
3121         case 1:
3122                 strcpy(content_type, "text/plain");
3123                 break;
3124         case 4:
3125                 strcpy(content_type, "text/plain");
3126                 mptr = bmstrcasestr(msg->cm_fields['M'], "Content-type:");
3127                 if (mptr != NULL) {
3128                         char *aptr;
3129                         safestrncpy(content_type, &mptr[13], sizeof content_type);
3130                         striplt(content_type);
3131                         aptr = content_type;
3132                         while (!IsEmptyStr(aptr)) {
3133                                 if ((*aptr == ';')
3134                                     || (*aptr == ' ')
3135                                     || (*aptr == 13)
3136                                     || (*aptr == 10)) {
3137                                         *aptr = 0;
3138                                 }
3139                                 else aptr++;
3140                         }
3141                 }
3142         }
3143
3144         /* Goto the correct room */
3145         room = (recps) ? CCC->room.QRname : SENTITEMS;
3146         MSG_syslog(LOG_DEBUG, "Selected room %s\n", room);
3147         strcpy(hold_rm, CCC->room.QRname);
3148         strcpy(actual_rm, CCC->room.QRname);
3149         if (recps != NULL) {
3150                 strcpy(actual_rm, SENTITEMS);
3151         }
3152
3153         /* If the user is a twit, move to the twit room for posting */
3154         if (TWITDETECT) {
3155                 if (CCC->user.axlevel == AxProbU) {
3156                         strcpy(hold_rm, actual_rm);
3157                         strcpy(actual_rm, config.c_twitroom);
3158                         MSGM_syslog(LOG_DEBUG, "Diverting to twit room\n");
3159                 }
3160         }
3161
3162         /* ...or if this message is destined for Aide> then go there. */
3163         if (!IsEmptyStr(force_room)) {
3164                 strcpy(actual_rm, force_room);
3165         }
3166
3167         MSG_syslog(LOG_INFO, "Final selection: %s (%s)\n", actual_rm, room);
3168         if (strcasecmp(actual_rm, CCC->room.QRname)) {
3169                 /* CtdlGetRoom(&CCC->room, actual_rm); */
3170                 CtdlUserGoto(actual_rm, 0, 1, NULL, NULL);
3171         }
3172
3173         /*
3174          * If this message has no O (room) field, generate one.
3175          */
3176         if (msg->cm_fields['O'] == NULL) {
3177                 msg->cm_fields['O'] = strdup(CCC->room.QRname);
3178         }
3179
3180         /* Perform "before save" hooks (aborting if any return nonzero) */
3181         MSGM_syslog(LOG_DEBUG, "Performing before-save hooks\n");
3182         if (PerformMessageHooks(msg, EVT_BEFORESAVE) > 0) return(-3);
3183
3184         /*
3185          * If this message has an Exclusive ID, and the room is replication
3186          * checking enabled, then do replication checks.
3187          */
3188         if (DoesThisRoomNeedEuidIndexing(&CCC->room)) {
3189                 ReplicationChecks(msg);
3190         }
3191
3192         /* Save it to disk */
3193         MSGM_syslog(LOG_DEBUG, "Saving to disk\n");
3194         newmsgid = send_message(msg);
3195         if (newmsgid <= 0L) return(-5);
3196
3197         /* Write a supplemental message info record.  This doesn't have to
3198          * be a critical section because nobody else knows about this message
3199          * yet.
3200          */
3201         MSGM_syslog(LOG_DEBUG, "Creating MetaData record\n");
3202         memset(&smi, 0, sizeof(struct MetaData));
3203         smi.meta_msgnum = newmsgid;
3204         smi.meta_refcount = 0;
3205         safestrncpy(smi.meta_content_type, content_type,
3206                     sizeof smi.meta_content_type);
3207
3208         /*
3209          * Measure how big this message will be when rendered as RFC822.
3210          * We do this for two reasons:
3211          * 1. We need the RFC822 length for the new metadata record, so the
3212          *    POP and IMAP services don't have to calculate message lengths
3213          *    while the user is waiting (multiplied by potentially hundreds
3214          *    or thousands of messages).
3215          * 2. If journaling is enabled, we will need an RFC822 version of the
3216          *    message to attach to the journalized copy.
3217          */
3218         if (CCC->redirect_buffer != NULL) {
3219                 MSGM_syslog(LOG_ALERT, "CCC->redirect_buffer is not NULL during message submission!\n");
3220                 abort();
3221         }
3222         CCC->redirect_buffer = NewStrBufPlain(NULL, SIZ);
3223         CtdlOutputPreLoadedMsg(msg, MT_RFC822, HEADERS_ALL, 0, 1, QP_EADDR);
3224         smi.meta_rfc822_length = StrLength(CCC->redirect_buffer);
3225         saved_rfc822_version = CCC->redirect_buffer;
3226         CCC->redirect_buffer = NULL;
3227
3228         PutMetaData(&smi);
3229
3230         /* Now figure out where to store the pointers */
3231         MSGM_syslog(LOG_DEBUG, "Storing pointers\n");
3232
3233         /* If this is being done by the networker delivering a private
3234          * message, we want to BYPASS saving the sender's copy (because there
3235          * is no local sender; it would otherwise go to the Trashcan).
3236          */
3237         if ((!CCC->internal_pgm) || (recps == NULL)) {
3238                 if (CtdlSaveMsgPointerInRoom(actual_rm, newmsgid, 1, msg) != 0) {
3239                         MSGM_syslog(LOG_ERR, "ERROR saving message pointer!\n");
3240                         CtdlSaveMsgPointerInRoom(config.c_aideroom, newmsgid, 0, msg);
3241                 }
3242         }
3243
3244         /* For internet mail, drop a copy in the outbound queue room */
3245         if ((recps != NULL) && (recps->num_internet > 0)) {
3246                 CtdlSaveMsgPointerInRoom(SMTP_SPOOLOUT_ROOM, newmsgid, 0, msg);
3247         }
3248
3249         /* If other rooms are specified, drop them there too. */
3250         if ((recps != NULL) && (recps->num_room > 0))
3251                 for (i=0; i<num_tokens(recps->recp_room, '|'); ++i) {
3252                         extract_token(recipient, recps->recp_room, i,
3253                                       '|', sizeof recipient);
3254                         MSG_syslog(LOG_DEBUG, "Delivering to room <%s>\n", recipient);///// xxxx
3255                         CtdlSaveMsgPointerInRoom(recipient, newmsgid, 0, msg);
3256                 }
3257
3258         /* Bump this user's messages posted counter. */
3259         MSGM_syslog(LOG_DEBUG, "Updating user\n");
3260         CtdlGetUserLock(&CCC->user, CCC->curr_user);
3261         CCC->user.posted = CCC->user.posted + 1;
3262         CtdlPutUserLock(&CCC->user);
3263
3264         /* Decide where bounces need to be delivered */
3265         if ((recps != NULL) && (recps->bounce_to != NULL)) {
3266                 safestrncpy(bounce_to, recps->bounce_to, sizeof bounce_to);
3267         }
3268         else if (CCC->logged_in) {
3269                 snprintf(bounce_to, sizeof bounce_to, "%s@%s", CCC->user.fullname, config.c_nodename);
3270         }
3271         else {
3272                 snprintf(bounce_to, sizeof bounce_to, "%s@%s", msg->cm_fields['A'], msg->cm_fields['N']);
3273         }
3274
3275         /* If this is private, local mail, make a copy in the
3276          * recipient's mailbox and bump the reference count.
3277          */
3278         if ((recps != NULL) && (recps->num_local > 0))
3279                 for (i=0; i<num_tokens(recps->recp_local, '|'); ++i) {
3280                         extract_token(recipient, recps->recp_local, i,
3281                                       '|', sizeof recipient);
3282                         MSG_syslog(LOG_DEBUG, "Delivering private local mail to <%s>\n",
3283                                recipient);
3284                         if (CtdlGetUser(&userbuf, recipient) == 0) {
3285                                 CtdlMailboxName(actual_rm, sizeof actual_rm, &userbuf, MAILROOM);
3286                                 CtdlSaveMsgPointerInRoom(actual_rm, newmsgid, 0, msg);
3287                                 CtdlBumpNewMailCounter(userbuf.usernum);
3288                                 if (!IsEmptyStr(config.c_funambol_host) || !IsEmptyStr(config.c_pager_program)) {
3289                                         /* Generate a instruction message for the Funambol notification
3290                                          * server, in the same style as the SMTP queue
3291                                          */
3292                                         instr_alloc = 1024;
3293                                         instr = malloc(instr_alloc);
3294                                         snprintf(instr, instr_alloc,
3295                                                  "Content-type: %s\n\nmsgid|%ld\nsubmitted|%ld\n"
3296                                                  "bounceto|%s\n",
3297                                                  SPOOLMIME, newmsgid, (long)time(NULL),
3298                                                  bounce_to
3299                                                 );
3300
3301                                         imsg = malloc(sizeof(struct CtdlMessage));
3302                                         memset(imsg, 0, sizeof(struct CtdlMessage));
3303                                         imsg->cm_magic = CTDLMESSAGE_MAGIC;
3304                                         imsg->cm_anon_type = MES_NORMAL;
3305                                         imsg->cm_format_type = FMT_RFC822;
3306                                         imsg->cm_fields['U'] = strdup("QMSG");
3307                                         imsg->cm_fields['A'] = strdup("Citadel");
3308                                         imsg->cm_fields['J'] = strdup("do not journal");
3309                                         imsg->cm_fields['M'] = instr;   /* imsg owns this memory now */
3310                                         imsg->cm_fields['2'] = strdup(recipient);
3311                                         CtdlSubmitMsg(imsg, NULL, FNBL_QUEUE_ROOM, 0);
3312                                         CtdlFreeMessage(imsg);
3313                                 }
3314                         }
3315                         else {
3316                                 MSG_syslog(LOG_DEBUG, "No user <%s>\n", recipient);
3317                                 CtdlSaveMsgPointerInRoom(config.c_aideroom, newmsgid, 0, msg);
3318                         }
3319                 }
3320
3321         /* Perform "after save" hooks */
3322         MSGM_syslog(LOG_DEBUG, "Performing after-save hooks\n");
3323         if (msg->cm_fields['3'] != NULL) free(msg->cm_fields['3']);
3324         msg->cm_fields['3'] = malloc(20);
3325         snprintf(msg->cm_fields['3'], 20, "%ld", newmsgid);
3326         PerformMessageHooks(msg, EVT_AFTERSAVE);
3327         free(msg->cm_fields['3']);
3328         msg->cm_fields['3'] = NULL;
3329
3330         /* For IGnet mail, we have to save a new copy into the spooler for
3331          * each recipient, with the R and D fields set to the recipient and
3332          * destination-node.  This has two ugly side effects: all other
3333          * recipients end up being unlisted in this recipient's copy of the
3334          * message, and it has to deliver multiple messages to the same
3335          * node.  We'll revisit this again in a year or so when everyone has
3336          * a network spool receiver that can handle the new style messages.
3337          */
3338         if ((recps != NULL) && (recps->num_ignet > 0))
3339                 for (i=0; i<num_tokens(recps->recp_ignet, '|'); ++i) {
3340                         extract_token(recipient, recps->recp_ignet, i,
3341                                       '|', sizeof recipient);
3342
3343                         hold_R = msg->cm_fields['R'];
3344                         hold_D = msg->cm_fields['D'];
3345                         msg->cm_fields['R'] = malloc(SIZ);
3346                         msg->cm_fields['D'] = malloc(128);
3347                         extract_token(msg->cm_fields['R'], recipient, 0, '@', SIZ);
3348                         extract_token(msg->cm_fields['D'], recipient, 1, '@', 128);
3349
3350                         serialize_message(&smr, msg);
3351                         if (smr.len > 0) {
3352                                 snprintf(submit_filename, sizeof submit_filename,
3353                                          "%s/netmail.%04lx.%04x.%04x",
3354                                          ctdl_netin_dir,
3355                                          (long) getpid(), CCC->cs_pid, ++seqnum);
3356                                 network_fp = fopen(submit_filename, "wb+");
3357                                 if (network_fp != NULL) {
3358                                         rv = fwrite(smr.ser, smr.len, 1, network_fp);
3359                                         if (rv == -1) {
3360                                                 MSG_syslog(LOG_EMERG, "CtdlSubmitMsg(): Couldn't write network spool file: %s\n",
3361                                                            strerror(errno));
3362                                         }
3363                                         fclose(network_fp);
3364                                 }
3365                                 free(smr.ser);
3366                         }
3367
3368                         free(msg->cm_fields['R']);
3369                         free(msg->cm_fields['D']);
3370                         msg->cm_fields['R'] = hold_R;
3371                         msg->cm_fields['D'] = hold_D;
3372                 }
3373
3374         /* Go back to the room we started from */
3375         MSG_syslog(LOG_DEBUG, "Returning to original room %s\n", hold_rm);
3376         if (strcasecmp(hold_rm, CCC->room.QRname))
3377                 CtdlUserGoto(hold_rm, 0, 1, NULL, NULL);
3378
3379         /* For internet mail, generate delivery instructions.
3380          * Yes, this is recursive.  Deal with it.  Infinite recursion does
3381          * not happen because the delivery instructions message does not
3382          * contain a recipient.
3383          */
3384         if ((recps != NULL) && (recps->num_internet > 0)) {
3385                 StrBuf *SpoolMsg = NewStrBuf();
3386                 long nTokens;
3387
3388                 MSGM_syslog(LOG_DEBUG, "Generating delivery instructions\n");
3389
3390                 StrBufPrintf(SpoolMsg,
3391                              "Content-type: "SPOOLMIME"\n"
3392                              "\n"
3393                              "msgid|%ld\n"
3394                              "submitted|%ld\n"
3395                              "bounceto|%s\n",
3396                              newmsgid,
3397                              (long)time(NULL),
3398                              bounce_to);
3399
3400                 if (recps->envelope_from != NULL) {
3401                         StrBufAppendBufPlain(SpoolMsg, HKEY("envelope_from|"), 0);
3402                         StrBufAppendBufPlain(SpoolMsg, recps->envelope_from, -1, 0);
3403                         StrBufAppendBufPlain(SpoolMsg, HKEY("\n"), 0);
3404                 }
3405                 if (recps->sending_room != NULL) {
3406                         StrBufAppendBufPlain(SpoolMsg, HKEY("source_room|"), 0);
3407                         StrBufAppendBufPlain(SpoolMsg, recps->sending_room, -1, 0);
3408                         StrBufAppendBufPlain(SpoolMsg, HKEY("\n"), 0);
3409                 }
3410
3411                 nTokens = num_tokens(recps->recp_internet, '|');
3412                 for (i = 0; i < nTokens; i++) {
3413                         long len;
3414                         len = extract_token(recipient, recps->recp_internet, i, '|', sizeof recipient);
3415                         if (len > 0) {
3416                                 StrBufAppendBufPlain(SpoolMsg, HKEY("remote|"), 0);
3417                                 StrBufAppendBufPlain(SpoolMsg, recipient, len, 0);
3418                                 StrBufAppendBufPlain(SpoolMsg, HKEY("|0||\n"), 0);
3419                         }
3420                 }
3421
3422                 imsg = malloc(sizeof(struct CtdlMessage));
3423                 memset(imsg, 0, sizeof(struct CtdlMessage));
3424                 imsg->cm_magic = CTDLMESSAGE_MAGIC;
3425                 imsg->cm_anon_type = MES_NORMAL;
3426                 imsg->cm_format_type = FMT_RFC822;
3427                 imsg->cm_fields['U'] = strdup("QMSG");
3428                 imsg->cm_fields['A'] = strdup("Citadel");
3429                 imsg->cm_fields['J'] = strdup("do not journal");
3430                 imsg->cm_fields['M'] = SmashStrBuf(&SpoolMsg);  /* imsg owns this memory now */
3431                 CtdlSubmitMsg(imsg, NULL, SMTP_SPOOLOUT_ROOM, QP_EADDR);
3432                 CtdlFreeMessage(imsg);
3433         }
3434
3435         /*
3436          * Any addresses to harvest for someone's address book?
3437          */
3438         if ( (CCC->logged_in) && (recps != NULL) ) {
3439                 collected_addresses = harvest_collected_addresses(msg);
3440         }
3441
3442         if (collected_addresses != NULL) {
3443                 aptr = (struct addresses_to_be_filed *)
3444                         malloc(sizeof(struct addresses_to_be_filed));
3445                 CtdlMailboxName(actual_rm, sizeof actual_rm,
3446                                 &CCC->user, USERCONTACTSROOM);
3447                 aptr->roomname = strdup(actual_rm);
3448                 aptr->collected_addresses = collected_addresses;
3449                 begin_critical_section(S_ATBF);
3450                 aptr->next = atbf;
3451                 atbf = aptr;
3452                 end_critical_section(S_ATBF);
3453         }
3454
3455         /*
3456          * Determine whether this message qualifies for journaling.
3457          */
3458         if (msg->cm_fields['J'] != NULL) {
3459                 qualified_for_journaling = 0;
3460         }
3461         else {
3462                 if (recps == NULL) {
3463                         qualified_for_journaling = config.c_journal_pubmsgs;
3464                 }
3465                 else if (recps->num_local + recps->num_ignet + recps->num_internet > 0) {
3466                         qualified_for_journaling = config.c_journal_email;
3467                 }
3468                 else {
3469                         qualified_for_journaling = config.c_journal_pubmsgs;
3470                 }
3471         }
3472
3473         /*
3474          * Do we have to perform journaling?  If so, hand off the saved
3475          * RFC822 version will be handed off to the journaler for background
3476          * submit.  Otherwise, we have to free the memory ourselves.
3477          */
3478         if (saved_rfc822_version != NULL) {
3479                 if (qualified_for_journaling) {
3480                         JournalBackgroundSubmit(msg, saved_rfc822_version, recps);
3481                 }
3482                 else {
3483                         FreeStrBuf(&saved_rfc822_version);
3484                 }
3485         }
3486
3487         /* Done. */
3488         return(newmsgid);
3489 }
3490
3491
3492
3493 void aide_message (char *text, char *subject)
3494 {
3495         quickie_message("Citadel",NULL,NULL,AIDEROOM,text,FMT_CITADEL,subject);
3496 }
3497
3498
3499 /*
3500  * Convenience function for generating small administrative messages.
3501  */
3502 void quickie_message(const char *from, const char *fromaddr, char *to, char *room, const char *text,
3503                      int format_type, const char *subject)
3504 {
3505         struct CtdlMessage *msg;
3506         struct recptypes *recp = NULL;
3507
3508         msg = malloc(sizeof(struct CtdlMessage));
3509         memset(msg, 0, sizeof(struct CtdlMessage));
3510         msg->cm_magic = CTDLMESSAGE_MAGIC;
3511         msg->cm_anon_type = MES_NORMAL;
3512         msg->cm_format_type = format_type;
3513
3514         if (from != NULL) {
3515                 msg->cm_fields['A'] = strdup(from);
3516         }
3517         else if (fromaddr != NULL) {
3518                 msg->cm_fields['A'] = strdup(fromaddr);
3519                 if (strchr(msg->cm_fields['A'], '@')) {
3520                         *strchr(msg->cm_fields['A'], '@') = 0;
3521                 }
3522         }
3523         else {
3524                 msg->cm_fields['A'] = strdup("Citadel");
3525         }
3526
3527         if (fromaddr != NULL) msg->cm_fields['F'] = strdup(fromaddr);
3528         if (room != NULL) msg->cm_fields['O'] = strdup(room);
3529         msg->cm_fields['N'] = strdup(NODENAME);
3530         if (to != NULL) {
3531                 msg->cm_fields['R'] = strdup(to);
3532                 recp = validate_recipients(to, NULL, 0);
3533         }
3534         if (subject != NULL) {
3535                 msg->cm_fields['U'] = strdup(subject);
3536         }
3537         msg->cm_fields['M'] = strdup(text);
3538
3539         CtdlSubmitMsg(msg, recp, room, 0);
3540         CtdlFreeMessage(msg);
3541         if (recp != NULL) free_recipients(recp);
3542 }
3543
3544
3545
3546 /*
3547  * Back end function used by CtdlMakeMessage() and similar functions
3548  */
3549 StrBuf *CtdlReadMessageBodyBuf(char *terminator,        /* token signalling EOT */
3550                                long tlen,
3551                                size_t maxlen,           /* maximum message length */
3552                                char *exist,             /* if non-null, append to it;
3553                                                            exist is ALWAYS freed  */
3554                                int crlf,                /* CRLF newlines instead of LF */
3555                                int *sock                /* socket handle or 0 for this session's client socket */
3556         )
3557 {
3558         StrBuf *Message;
3559         StrBuf *LineBuf;
3560         int flushing = 0;
3561         int finished = 0;
3562         int dotdot = 0;
3563
3564         LineBuf = NewStrBufPlain(NULL, SIZ);
3565         if (exist == NULL) {
3566                 Message = NewStrBufPlain(NULL, 4 * SIZ);
3567         }
3568         else {
3569                 Message = NewStrBufPlain(exist, -1);
3570                 free(exist);
3571         }
3572
3573         /* Do we need to change leading ".." to "." for SMTP escaping? */
3574         if ((tlen == 1) && (*terminator == '.')) {
3575                 dotdot = 1;
3576         }
3577
3578         /* read in the lines of message text one by one */
3579         do {
3580                 if (sock != NULL) {
3581                         if ((CtdlSockGetLine(sock, LineBuf, 5) < 0) ||
3582                             (*sock == -1))
3583                                 finished = 1;
3584                 }
3585                 else {
3586                         if (CtdlClientGetLine(LineBuf) < 0) finished = 1;
3587                 }
3588                 if ((StrLength(LineBuf) == tlen) &&
3589                     (!strcmp(ChrPtr(LineBuf), terminator)))
3590                         finished = 1;
3591
3592                 if ( (!flushing) && (!finished) ) {
3593                         if (crlf) {
3594                                 StrBufAppendBufPlain(LineBuf, HKEY("\r\n"), 0);
3595                         }
3596                         else {
3597                                 StrBufAppendBufPlain(LineBuf, HKEY("\n"), 0);
3598                         }
3599
3600                         /* Unescape SMTP-style input of two dots at the beginning of the line */
3601                         if ((dotdot) &&
3602                             (StrLength(LineBuf) == 2) &&
3603                             (!strcmp(ChrPtr(LineBuf), "..")))
3604                         {
3605                                 StrBufCutLeft(LineBuf, 1);
3606                         }
3607
3608                         StrBufAppendBuf(Message, LineBuf, 0);
3609                 }
3610
3611                 /* if we've hit the max msg length, flush the rest */
3612                 if (StrLength(Message) >= maxlen) flushing = 1;
3613
3614         } while (!finished);
3615         FreeStrBuf(&LineBuf);
3616         return Message;
3617 }
3618
3619 void DeleteAsyncMsg(ReadAsyncMsg **Msg)
3620 {
3621         if (*Msg == NULL)
3622                 return;
3623         FreeStrBuf(&(*Msg)->MsgBuf);
3624
3625         free(*Msg);
3626         *Msg = NULL;
3627 }
3628
3629 ReadAsyncMsg *NewAsyncMsg(const char *terminator,       /* token signalling EOT */
3630                           long tlen,
3631                           size_t maxlen,                /* maximum message length */
3632                           size_t expectlen,             /* if we expect a message, how long should it be? */
3633                           char *exist,                  /* if non-null, append to it;
3634                                                            exist is ALWAYS freed  */
3635                           long eLen,                    /* length of exist */
3636                           int crlf                      /* CRLF newlines instead of LF */
3637         )
3638 {
3639         ReadAsyncMsg *NewMsg;
3640
3641         NewMsg = (ReadAsyncMsg *)malloc(sizeof(ReadAsyncMsg));
3642         memset(NewMsg, 0, sizeof(ReadAsyncMsg));
3643
3644         if (exist == NULL) {
3645                 long len;
3646
3647                 if (expectlen == 0) {
3648                         len = 4 * SIZ;
3649                 }
3650                 else {
3651                         len = expectlen + 10;
3652                 }
3653                 NewMsg->MsgBuf = NewStrBufPlain(NULL, len);
3654         }
3655         else {
3656                 NewMsg->MsgBuf = NewStrBufPlain(exist, eLen);
3657                 free(exist);
3658         }
3659         /* Do we need to change leading ".." to "." for SMTP escaping? */
3660         if ((tlen == 1) && (*terminator == '.')) {
3661                 NewMsg->dodot = 1;
3662         }
3663
3664         NewMsg->terminator = terminator;
3665         NewMsg->tlen = tlen;
3666
3667         NewMsg->maxlen = maxlen;
3668
3669         NewMsg->crlf = crlf;
3670
3671         return NewMsg;
3672 }
3673
3674 /*
3675  * Back end function used by CtdlMakeMessage() and similar functions
3676  */
3677 eReadState CtdlReadMessageBodyAsync(AsyncIO *IO)
3678 {
3679         ReadAsyncMsg *ReadMsg;
3680         int MsgFinished = 0;
3681         eReadState Finished = eMustReadMore;
3682
3683 #ifdef BIGBAD_IODBG
3684         char fn [SIZ];
3685         FILE *fd;
3686         const char *pch = ChrPtr(IO->SendBuf.Buf);
3687         const char *pchh = IO->SendBuf.ReadWritePointer;
3688         long nbytes;
3689
3690         if (pchh == NULL)
3691                 pchh = pch;
3692
3693         nbytes = StrLength(IO->SendBuf.Buf) - (pchh - pch);
3694         snprintf(fn, SIZ, "/tmp/foolog_ev_%s.%d",
3695                  ((CitContext*)(IO->CitContext))->ServiceName,
3696                  IO->SendBuf.fd);
3697
3698         fd = fopen(fn, "a+");
3699 #endif
3700
3701         ReadMsg = IO->ReadMsg;
3702
3703         /* read in the lines of message text one by one */
3704         do {
3705                 Finished = StrBufChunkSipLine(IO->IOBuf, &IO->RecvBuf);
3706
3707                 switch (Finished) {
3708                 case eMustReadMore: /// read new from socket...
3709 #ifdef BIGBAD_IODBG
3710                         if (IO->RecvBuf.ReadWritePointer != NULL) {
3711                                 nbytes = StrLength(IO->RecvBuf.Buf) - (IO->RecvBuf.ReadWritePointer - ChrPtr(IO->RecvBuf.Buf));
3712                                 fprintf(fd, "Read; Line unfinished: %ld Bytes still in buffer [", nbytes);
3713
3714                                 fwrite(IO->RecvBuf.ReadWritePointer, nbytes, 1, fd);
3715
3716                                 fprintf(fd, "]\n");
3717                         } else {
3718                                 fprintf(fd, "BufferEmpty! \n");
3719                         }
3720                         fclose(fd);
3721 #endif
3722                         return Finished;
3723                     break;
3724                 case eBufferNotEmpty: /* shouldn't happen... */
3725                 case eReadSuccess: /// done for now...
3726                     break;
3727                 case eReadFail: /// WHUT?
3728                     ///todo: shut down!
3729                         break;
3730                 }
3731
3732
3733                 if ((StrLength(IO->IOBuf) == ReadMsg->tlen) &&
3734                     (!strcmp(ChrPtr(IO->IOBuf), ReadMsg->terminator))) {
3735                         MsgFinished = 1;
3736 #ifdef BIGBAD_IODBG
3737                         fprintf(fd, "found Terminator; Message Size: %d\n", StrLength(ReadMsg->MsgBuf));
3738 #endif
3739                 }
3740                 else if (!ReadMsg->flushing) {
3741
3742 #ifdef BIGBAD_IODBG
3743                         fprintf(fd, "Read Line: [%d][%s]\n", StrLength(IO->IOBuf), ChrPtr(IO->IOBuf));
3744 #endif
3745
3746                         /* Unescape SMTP-style input of two dots at the beginning of the line */
3747                         if ((ReadMsg->dodot) &&
3748                             (StrLength(IO->IOBuf) == 2) &&  /* TODO: do we just unescape lines with two dots or any line? */
3749                             (!strcmp(ChrPtr(IO->IOBuf), "..")))
3750                         {
3751 #ifdef BIGBAD_IODBG
3752                                 fprintf(fd, "UnEscaped!\n");
3753 #endif
3754                                 StrBufCutLeft(IO->IOBuf, 1);
3755                         }
3756
3757                         if (ReadMsg->crlf) {
3758                                 StrBufAppendBufPlain(IO->IOBuf, HKEY("\r\n"), 0);
3759                         }
3760                         else {
3761                                 StrBufAppendBufPlain(IO->IOBuf, HKEY("\n"), 0);
3762                         }
3763
3764                         StrBufAppendBuf(ReadMsg->MsgBuf, IO->IOBuf, 0);
3765                 }
3766
3767                 /* if we've hit the max msg length, flush the rest */
3768                 if (StrLength(ReadMsg->MsgBuf) >= ReadMsg->maxlen) ReadMsg->flushing = 1;
3769
3770         } while (!MsgFinished);
3771
3772 #ifdef BIGBAD_IODBG
3773         fprintf(fd, "Done with reading; %s.\n, ",
3774                 (MsgFinished)?"Message Finished": "FAILED");
3775         fclose(fd);
3776 #endif
3777         if (MsgFinished)
3778                 return eReadSuccess;
3779         else
3780                 return eAbort;
3781 }
3782
3783
3784 /*
3785  * Back end function used by CtdlMakeMessage() and similar functions
3786  */
3787 char *CtdlReadMessageBody(char *terminator,     /* token signalling EOT */
3788                           long tlen,
3789                           size_t maxlen,                /* maximum message length */
3790                           char *exist,          /* if non-null, append to it;
3791                                                    exist is ALWAYS freed  */
3792                           int crlf,             /* CRLF newlines instead of LF */
3793                           int *sock             /* socket handle or 0 for this session's client socket */
3794         )
3795 {
3796         StrBuf *Message;
3797
3798         Message = CtdlReadMessageBodyBuf(terminator,
3799                                          tlen,
3800                                          maxlen,
3801                                          exist,
3802                                          crlf,
3803                                          sock);
3804         if (Message == NULL)
3805                 return NULL;
3806         else
3807                 return SmashStrBuf(&Message);
3808 }
3809
3810
3811 /*
3812  * Build a binary message to be saved on disk.
3813  * (NOTE: if you supply 'preformatted_text', the buffer you give it
3814  * will become part of the message.  This means you are no longer
3815  * responsible for managing that memory -- it will be freed along with
3816  * the rest of the fields when CtdlFreeMessage() is called.)
3817  */
3818
3819 struct CtdlMessage *CtdlMakeMessage(
3820         struct ctdluser *author,        /* author's user structure */
3821         char *recipient,                /* NULL if it's not mail */
3822         char *recp_cc,                  /* NULL if it's not mail */
3823         char *room,                     /* room where it's going */
3824         int type,                       /* see MES_ types in header file */
3825         int format_type,                /* variformat, plain text, MIME... */
3826         char *fake_name,                /* who we're masquerading as */
3827         char *my_email,                 /* which of my email addresses to use (empty is ok) */
3828         char *subject,                  /* Subject (optional) */
3829         char *supplied_euid,            /* ...or NULL if this is irrelevant */
3830         char *preformatted_text,        /* ...or NULL to read text from client */
3831         char *references                /* Thread references */
3832         ) {
3833         char dest_node[256];
3834         char buf[1024];
3835         struct CtdlMessage *msg;
3836         StrBuf *FakeAuthor;
3837         StrBuf *FakeEncAuthor = NULL;
3838
3839         msg = malloc(sizeof(struct CtdlMessage));
3840         memset(msg, 0, sizeof(struct CtdlMessage));
3841         msg->cm_magic = CTDLMESSAGE_MAGIC;
3842         msg->cm_anon_type = type;
3843         msg->cm_format_type = format_type;
3844
3845         /* Don't confuse the poor folks if it's not routed mail. */
3846         strcpy(dest_node, "");
3847
3848         if (recipient != NULL) striplt(recipient);
3849         if (recp_cc != NULL) striplt(recp_cc);
3850
3851         /* Path or Return-Path */
3852         if (my_email == NULL) my_email = "";
3853
3854         if (!IsEmptyStr(my_email)) {
3855                 msg->cm_fields['P'] = strdup(my_email);
3856         }
3857         else {
3858                 snprintf(buf, sizeof buf, "%s", author->fullname);
3859                 msg->cm_fields['P'] = strdup(buf);
3860         }
3861         convert_spaces_to_underscores(msg->cm_fields['P']);
3862
3863         snprintf(buf, sizeof buf, "%ld", (long)time(NULL));     /* timestamp */
3864         msg->cm_fields['T'] = strdup(buf);
3865
3866         if ((fake_name != NULL) && (fake_name[0])) {            /* author */
3867                 FakeAuthor = NewStrBufPlain (fake_name, -1);
3868         }
3869         else {
3870                 FakeAuthor = NewStrBufPlain (author->fullname, -1);
3871         }
3872         StrBufRFC2047encode(&FakeEncAuthor, FakeAuthor);
3873         msg->cm_fields['A'] = SmashStrBuf(&FakeEncAuthor);
3874         FreeStrBuf(&FakeAuthor);
3875
3876         if (CC->room.QRflags & QR_MAILBOX) {            /* room */
3877                 msg->cm_fields['O'] = strdup(&CC->room.QRname[11]);
3878         }
3879         else {
3880                 msg->cm_fields['O'] = strdup(CC->room.QRname);
3881         }
3882
3883         msg->cm_fields['N'] = strdup(NODENAME);         /* nodename */
3884         msg->cm_fields['H'] = strdup(HUMANNODE);                /* hnodename */
3885
3886         if ((recipient != NULL) && (recipient[0] != 0)) {
3887                 msg->cm_fields['R'] = strdup(recipient);
3888         }
3889         if ((recp_cc != NULL) && (recp_cc[0] != 0)) {
3890                 msg->cm_fields['Y'] = strdup(recp_cc);
3891         }
3892         if (dest_node[0] != 0) {
3893                 msg->cm_fields['D'] = strdup(dest_node);
3894         }
3895
3896         if (!IsEmptyStr(my_email)) {
3897                 msg->cm_fields['F'] = strdup(my_email);
3898         }
3899         else if ( (author == &CC->user) && (!IsEmptyStr(CC->cs_inet_email)) ) {
3900                 msg->cm_fields['F'] = strdup(CC->cs_inet_email);
3901         }
3902
3903         if (subject != NULL) {
3904                 long length;
3905                 striplt(subject);
3906                 length = strlen(subject);
3907                 if (length > 0) {
3908                         long i;
3909                         long IsAscii;
3910                         IsAscii = -1;
3911                         i = 0;
3912                         while ((subject[i] != '\0') &&
3913                                (IsAscii = isascii(subject[i]) != 0 ))
3914                                 i++;
3915                         if (IsAscii != 0)
3916                                 msg->cm_fields['U'] = strdup(subject);
3917                         else /* ok, we've got utf8 in the string. */
3918                         {
3919                                 msg->cm_fields['U'] = rfc2047encode(subject, length);
3920                         }
3921
3922                 }
3923         }
3924
3925         if (supplied_euid != NULL) {
3926                 msg->cm_fields['E'] = strdup(supplied_euid);
3927         }
3928
3929         if ((references != NULL) && (!IsEmptyStr(references))) {
3930                 if (msg->cm_fields['W'] != NULL)
3931                         free(msg->cm_fields['W']);
3932                 msg->cm_fields['W'] = strdup(references);
3933         }
3934
3935         if (preformatted_text != NULL) {
3936                 msg->cm_fields['M'] = preformatted_text;
3937         }
3938         else {
3939                 msg->cm_fields['M'] = CtdlReadMessageBody(HKEY("000"), config.c_maxmsglen, NULL, 0, 0);
3940         }
3941
3942         return(msg);
3943 }
3944
3945 extern int netconfig_check_roomaccess(
3946         char *errmsgbuf,
3947         size_t n,
3948         const char* RemoteIdentifier); /* TODO: find a smarter way */
3949
3950 /*
3951  * Check to see whether we have permission to post a message in the current
3952  * room.  Returns a *CITADEL ERROR CODE* and puts a message in errmsgbuf, or
3953  * returns 0 on success.
3954  */
3955 int CtdlDoIHavePermissionToPostInThisRoom(
3956         char *errmsgbuf,
3957         size_t n,
3958         const char* RemoteIdentifier,
3959         int PostPublic,
3960         int is_reply
3961         ) {
3962         int ra;
3963
3964         if (!(CC->logged_in) &&
3965             (PostPublic == POST_LOGGED_IN)) {
3966                 snprintf(errmsgbuf, n, "Not logged in.");
3967                 return (ERROR + NOT_LOGGED_IN);
3968         }
3969         else if (PostPublic == CHECK_EXISTANCE) {
3970                 return (0); // We're Evaling whether a recipient exists
3971         }
3972         else if (!(CC->logged_in)) {
3973
3974                 if ((CC->room.QRflags & QR_READONLY)) {
3975                         snprintf(errmsgbuf, n, "Not logged in.");
3976                         return (ERROR + NOT_LOGGED_IN);
3977                 }
3978                 if (CC->room.QRflags2 & QR2_MODERATED) {
3979                         snprintf(errmsgbuf, n, "Not logged in Moderation feature not yet implemented!");
3980                         return (ERROR + NOT_LOGGED_IN);
3981                 }
3982                 if ((PostPublic!=POST_LMTP) &&(CC->room.QRflags2 & QR2_SMTP_PUBLIC) == 0) {
3983
3984                         return netconfig_check_roomaccess(errmsgbuf, n, RemoteIdentifier);
3985                 }
3986                 return (0);
3987
3988         }
3989
3990         if ((CC->user.axlevel < AxProbU)
3991             && ((CC->room.QRflags & QR_MAILBOX) == 0)) {
3992                 snprintf(errmsgbuf, n, "Need to be validated to enter (except in %s> to sysop)", MAILROOM);
3993                 return (ERROR + HIGHER_ACCESS_REQUIRED);
3994         }
3995
3996         CtdlRoomAccess(&CC->room, &CC->user, &ra, NULL);
3997
3998         if (ra & UA_POSTALLOWED) {
3999                 strcpy(errmsgbuf, "OK to post or reply here");
4000                 return(0);
4001         }
4002
4003         if ( (ra & UA_REPLYALLOWED) && (is_reply) ) {
4004                 /*
4005                  * To be thorough, we ought to check to see if the message they are
4006                  * replying to is actually a valid one in this room, but unless this
4007                  * actually becomes a problem we'll go with high performance instead.
4008                  */
4009                 strcpy(errmsgbuf, "OK to reply here");
4010                 return(0);
4011         }
4012
4013         if ( (ra & UA_REPLYALLOWED) && (!is_reply) ) {
4014                 /* Clarify what happened with a better error message */
4015                 snprintf(errmsgbuf, n, "You may only reply to existing messages here.");
4016                 return (ERROR + HIGHER_ACCESS_REQUIRED);
4017         }
4018
4019         snprintf(errmsgbuf, n, "Higher access is required to post in this room.");
4020         return (ERROR + HIGHER_ACCESS_REQUIRED);
4021
4022 }
4023
4024
4025 /*
4026  * Check to see if the specified user has Internet mail permission
4027  * (returns nonzero if permission is granted)
4028  */
4029 int CtdlCheckInternetMailPermission(struct ctdluser *who) {
4030
4031         /* Do not allow twits to send Internet mail */
4032         if (who->axlevel <= AxProbU) return(0);
4033
4034         /* Globally enabled? */
4035         if (config.c_restrict == 0) return(1);
4036
4037         /* User flagged ok? */
4038         if (who->flags & US_INTERNET) return(2);
4039
4040         /* Admin level access? */
4041         if (who->axlevel >= AxAideU) return(3);
4042
4043         /* No mail for you! */
4044         return(0);
4045 }
4046
4047
4048 /*
4049  * Validate recipients, count delivery types and errors, and handle aliasing
4050  * FIXME check for dupes!!!!!
4051  *
4052  * Returns 0 if all addresses are ok, ret->num_error = -1 if no addresses
4053  * were specified, or the number of addresses found invalid.
4054  *
4055  * Caller needs to free the result using free_recipients()
4056  */
4057 struct recptypes *validate_recipients(const char *supplied_recipients,
4058                                       const char *RemoteIdentifier,
4059                                       int Flags) {
4060         struct CitContext *CCC = CC;
4061         struct recptypes *ret;
4062         char *recipients = NULL;
4063         char *org_recp;
4064         char this_recp[256];
4065         char this_recp_cooked[256];
4066         char append[SIZ];
4067         long len;
4068         int num_recps = 0;
4069         int i, j;
4070         int mailtype;
4071         int invalid;
4072         struct ctdluser tempUS;
4073         struct ctdlroom tempQR;
4074         struct ctdlroom tempQR2;
4075         int err = 0;
4076         char errmsg[SIZ];
4077         int in_quotes = 0;
4078
4079         /* Initialize */
4080         ret = (struct recptypes *) malloc(sizeof(struct recptypes));
4081         if (ret == NULL) return(NULL);
4082
4083         /* Set all strings to null and numeric values to zero */
4084         memset(ret, 0, sizeof(struct recptypes));
4085
4086         if (supplied_recipients == NULL) {
4087                 recipients = strdup("");
4088         }
4089         else {
4090                 recipients = strdup(supplied_recipients);
4091         }
4092
4093         /* Allocate some memory.  Yes, this allocates 500% more memory than we will
4094          * actually need, but it's healthier for the heap than doing lots of tiny
4095          * realloc() calls instead.
4096          */
4097         len = strlen(recipients) + 1024;
4098         ret->errormsg = malloc(len);
4099         ret->recp_local = malloc(len);
4100         ret->recp_internet = malloc(len);
4101         ret->recp_ignet = malloc(len);
4102         ret->recp_room = malloc(len);
4103         ret->display_recp = malloc(len);
4104         ret->recp_orgroom = malloc(len);
4105         org_recp = malloc(len);
4106
4107         ret->errormsg[0] = 0;
4108         ret->recp_local[0] = 0;
4109         ret->recp_internet[0] = 0;
4110         ret->recp_ignet[0] = 0;
4111         ret->recp_room[0] = 0;
4112         ret->recp_orgroom[0] = 0;
4113         ret->display_recp[0] = 0;
4114
4115         ret->recptypes_magic = RECPTYPES_MAGIC;
4116
4117         /* Change all valid separator characters to commas */
4118         for (i=0; !IsEmptyStr(&recipients[i]); ++i) {
4119                 if ((recipients[i] == ';') || (recipients[i] == '|')) {
4120                         recipients[i] = ',';
4121                 }
4122         }
4123
4124         /* Now start extracting recipients... */
4125
4126         while (!IsEmptyStr(recipients)) {
4127                 for (i=0; i<=strlen(recipients); ++i) {
4128                         if (recipients[i] == '\"') in_quotes = 1 - in_quotes;
4129                         if ( ( (recipients[i] == ',') && (!in_quotes) ) || (recipients[i] == 0) ) {
4130                                 safestrncpy(this_recp, recipients, i+1);
4131                                 this_recp[i] = 0;
4132                                 if (recipients[i] == ',') {
4133                                         strcpy(recipients, &recipients[i+1]);
4134                                 }
4135                                 else {
4136                                         strcpy(recipients, "");
4137                                 }
4138                                 break;
4139                         }
4140                 }
4141
4142                 striplt(this_recp);
4143                 if (IsEmptyStr(this_recp))
4144                         break;
4145                 MSG_syslog(LOG_DEBUG, "Evaluating recipient #%d: %s\n", num_recps, this_recp);
4146                 ++num_recps;
4147
4148                 strcpy(org_recp, this_recp);
4149                 alias(this_recp);
4150                 alias(this_recp);
4151                 mailtype = alias(this_recp);
4152
4153                 for (j = 0; !IsEmptyStr(&this_recp[j]); ++j) {
4154                         if (this_recp[j]=='_') {
4155                                 this_recp_cooked[j] = ' ';
4156                         }
4157                         else {
4158                                 this_recp_cooked[j] = this_recp[j];
4159                         }
4160                 }
4161                 this_recp_cooked[j] = '\0';
4162                 invalid = 0;
4163                 errmsg[0] = 0;
4164                 switch(mailtype) {
4165                 case MES_LOCAL:
4166                         if (!strcasecmp(this_recp, "sysop")) {
4167                                 ++ret->num_room;
4168                                 strcpy(this_recp, config.c_aideroom);
4169                                 if (!IsEmptyStr(ret->recp_room)) {
4170                                         strcat(ret->recp_room, "|");
4171                                 }
4172                                 strcat(ret->recp_room, this_recp);
4173                         }
4174                         else if ( (!strncasecmp(this_recp, "room_", 5))
4175                                   && (!CtdlGetRoom(&tempQR, &this_recp_cooked[5])) ) {
4176
4177                                 /* Save room so we can restore it later */
4178                                 tempQR2 = CCC->room;
4179                                 CCC->room = tempQR;
4180
4181                                 /* Check permissions to send mail to this room */
4182                                 err = CtdlDoIHavePermissionToPostInThisRoom(
4183                                         errmsg,
4184                                         sizeof errmsg,
4185                                         RemoteIdentifier,
4186                                         Flags,
4187                                         0                       /* 0 = not a reply */
4188                                         );
4189                                 if (err)
4190                                 {
4191                                         ++ret->num_error;
4192                                         invalid = 1;
4193                                 }
4194                                 else {
4195                                         ++ret->num_room;
4196                                         if (!IsEmptyStr(ret->recp_room)) {
4197                                                 strcat(ret->recp_room, "|");
4198                                         }
4199                                         strcat(ret->recp_room, &this_recp_cooked[5]);
4200
4201                                         if (!IsEmptyStr(ret->recp_orgroom)) {
4202                                                 strcat(ret->recp_orgroom, "|");
4203                                         }
4204                                         strcat(ret->recp_orgroom, org_recp);
4205
4206                                 }
4207
4208                                 /* Restore room in case something needs it */
4209                                 CCC->room = tempQR2;
4210
4211                         }
4212                         else if (CtdlGetUser(&tempUS, this_recp) == 0) {
4213                                 ++ret->num_local;
4214                                 strcpy(this_recp, tempUS.fullname);
4215                                 if (!IsEmptyStr(ret->recp_local)) {
4216                                         strcat(ret->recp_local, "|");
4217                                 }
4218                                 strcat(ret->recp_local, this_recp);
4219                         }
4220                         else if (CtdlGetUser(&tempUS, this_recp_cooked) == 0) {
4221                                 ++ret->num_local;
4222                                 strcpy(this_recp, tempUS.fullname);
4223                                 if (!IsEmptyStr(ret->recp_local)) {
4224                                         strcat(ret->recp_local, "|");
4225                                 }
4226                                 strcat(ret->recp_local, this_recp);
4227                         }
4228                         else {
4229                                 ++ret->num_error;
4230                                 invalid = 1;
4231                         }
4232                         break;
4233                 case MES_INTERNET:
4234                         /* Yes, you're reading this correctly: if the target
4235                          * domain points back to the local system or an attached
4236                          * Citadel directory, the address is invalid.  That's
4237                          * because if the address were valid, we would have
4238                          * already translated it to a local address by now.
4239                          */
4240                         if (IsDirectory(this_recp, 0)) {
4241                                 ++ret->num_error;
4242                                 invalid = 1;
4243                         }
4244                         else {
4245                                 ++ret->num_internet;
4246                                 if (!IsEmptyStr(ret->recp_internet)) {
4247                                         strcat(ret->recp_internet, "|");
4248                                 }
4249                                 strcat(ret->recp_internet, this_recp);
4250                         }
4251                         break;
4252                 case MES_IGNET:
4253                         ++ret->num_ignet;
4254                         if (!IsEmptyStr(ret->recp_ignet)) {
4255                                 strcat(ret->recp_ignet, "|");
4256                         }
4257                         strcat(ret->recp_ignet, this_recp);
4258                         break;
4259                 case MES_ERROR:
4260                         ++ret->num_error;
4261                         invalid = 1;
4262                         break;
4263                 }
4264                 if (invalid) {
4265                         if (IsEmptyStr(errmsg)) {
4266                                 snprintf(append, sizeof append, "Invalid recipient: %s", this_recp);
4267                         }
4268                         else {
4269                                 snprintf(append, sizeof append, "%s", errmsg);
4270                         }
4271                         if ( (strlen(ret->errormsg) + strlen(append) + 3) < SIZ) {
4272                                 if (!IsEmptyStr(ret->errormsg)) {
4273                                         strcat(ret->errormsg, "; ");
4274                                 }
4275                                 strcat(ret->errormsg, append);
4276                         }
4277                 }
4278                 else {
4279                         if (IsEmptyStr(ret->display_recp)) {
4280                                 strcpy(append, this_recp);
4281                         }
4282                         else {
4283                                 snprintf(append, sizeof append, ", %s", this_recp);
4284                         }
4285                         if ( (strlen(ret->display_recp)+strlen(append)) < SIZ) {
4286                                 strcat(ret->display_recp, append);
4287                         }
4288                 }
4289         }
4290         free(org_recp);
4291
4292         if ((ret->num_local + ret->num_internet + ret->num_ignet +
4293              ret->num_room + ret->num_error) == 0) {
4294                 ret->num_error = (-1);
4295                 strcpy(ret->errormsg, "No recipients specified.");
4296         }
4297
4298         MSGM_syslog(LOG_DEBUG, "validate_recipients()\n");
4299         MSG_syslog(LOG_DEBUG, " local: %d <%s>\n", ret->num_local, ret->recp_local);
4300         MSG_syslog(LOG_DEBUG, "  room: %d <%s>\n", ret->num_room, ret->recp_room);
4301         MSG_syslog(LOG_DEBUG, "  inet: %d <%s>\n", ret->num_internet, ret->recp_internet);
4302         MSG_syslog(LOG_DEBUG, " ignet: %d <%s>\n", ret->num_ignet, ret->recp_ignet);
4303         MSG_syslog(LOG_DEBUG, " error: %d <%s>\n", ret->num_error, ret->errormsg);
4304
4305         free(recipients);
4306         return(ret);
4307 }
4308
4309
4310 /*
4311  * Destructor for struct recptypes
4312  */
4313 void free_recipients(struct recptypes *valid) {
4314
4315         if (valid == NULL) {
4316                 return;
4317         }
4318
4319         if (valid->recptypes_magic != RECPTYPES_MAGIC) {
4320                 struct CitContext *CCC = CC;
4321                 MSGM_syslog(LOG_EMERG, "Attempt to call free_recipients() on some other data type!\n");
4322                 abort();
4323         }
4324
4325         if (valid->errormsg != NULL)            free(valid->errormsg);
4326         if (valid->recp_local != NULL)          free(valid->recp_local);
4327         if (valid->recp_internet != NULL)       free(valid->recp_internet);
4328         if (valid->recp_ignet != NULL)          free(valid->recp_ignet);
4329         if (valid->recp_room != NULL)           free(valid->recp_room);
4330         if (valid->recp_orgroom != NULL)        free(valid->recp_orgroom);
4331         if (valid->display_recp != NULL)        free(valid->display_recp);
4332         if (valid->bounce_to != NULL)           free(valid->bounce_to);
4333         if (valid->envelope_from != NULL)       free(valid->envelope_from);
4334         if (valid->sending_room != NULL)        free(valid->sending_room);
4335         free(valid);
4336 }
4337
4338
4339
4340 /*
4341  * message entry  -  mode 0 (normal)
4342  */
4343 void cmd_ent0(char *entargs)
4344 {
4345         struct CitContext *CCC = CC;
4346         int post = 0;
4347         char recp[SIZ];
4348         char cc[SIZ];
4349         char bcc[SIZ];
4350         char supplied_euid[128];
4351         int anon_flag = 0;
4352         int format_type = 0;
4353         char newusername[256];
4354         char newuseremail[256];
4355         struct CtdlMessage *msg;
4356         int anonymous = 0;
4357         char errmsg[SIZ];
4358         int err = 0;
4359         struct recptypes *valid = NULL;
4360         struct recptypes *valid_to = NULL;
4361         struct recptypes *valid_cc = NULL;
4362         struct recptypes *valid_bcc = NULL;
4363         char subject[SIZ];
4364         int subject_required = 0;
4365         int do_confirm = 0;
4366         long msgnum;
4367         int i, j;
4368         char buf[256];
4369         int newuseremail_ok = 0;
4370         char references[SIZ];
4371         char *ptr;
4372
4373         unbuffer_output();
4374
4375         post = extract_int(entargs, 0);
4376         extract_token(recp, entargs, 1, '|', sizeof recp);
4377         anon_flag = extract_int(entargs, 2);
4378         format_type = extract_int(entargs, 3);
4379         extract_token(subject, entargs, 4, '|', sizeof subject);
4380         extract_token(newusername, entargs, 5, '|', sizeof newusername);
4381         do_confirm = extract_int(entargs, 6);
4382         extract_token(cc, entargs, 7, '|', sizeof cc);
4383         extract_token(bcc, entargs, 8, '|', sizeof bcc);
4384         switch(CC->room.QRdefaultview) {
4385         case VIEW_NOTES:
4386         case VIEW_WIKI:
4387                 extract_token(supplied_euid, entargs, 9, '|', sizeof supplied_euid);
4388                 break;
4389         default:
4390                 supplied_euid[0] = 0;
4391                 break;
4392         }
4393         extract_token(newuseremail, entargs, 10, '|', sizeof newuseremail);
4394         extract_token(references, entargs, 11, '|', sizeof references);
4395         for (ptr=references; *ptr != 0; ++ptr) {
4396                 if (*ptr == '!') *ptr = '|';
4397         }
4398
4399         /* first check to make sure the request is valid. */
4400
4401         err = CtdlDoIHavePermissionToPostInThisRoom(
4402                 errmsg,
4403                 sizeof errmsg,
4404                 NULL,
4405                 POST_LOGGED_IN,
4406                 (!IsEmptyStr(references))               /* is this a reply?  or a top-level post? */
4407                 );
4408         if (err)
4409         {
4410                 cprintf("%d %s\n", err, errmsg);
4411                 return;
4412         }
4413
4414         /* Check some other permission type things. */
4415
4416         if (IsEmptyStr(newusername)) {
4417                 strcpy(newusername, CCC->user.fullname);
4418         }
4419         if (  (CCC->user.axlevel < AxAideU)
4420               && (strcasecmp(newusername, CCC->user.fullname))
4421               && (strcasecmp(newusername, CCC->cs_inet_fn))
4422                 ) {
4423                 cprintf("%d You don't have permission to author messages as '%s'.\n",
4424                         ERROR + HIGHER_ACCESS_REQUIRED,
4425                         newusername
4426                         );
4427                 return;
4428         }
4429
4430
4431         if (IsEmptyStr(newuseremail)) {
4432                 newuseremail_ok = 1;
4433         }
4434
4435         if (!IsEmptyStr(newuseremail)) {
4436                 if (!strcasecmp(newuseremail, CCC->cs_inet_email)) {
4437                         newuseremail_ok = 1;
4438                 }
4439                 else if (!IsEmptyStr(CCC->cs_inet_other_emails)) {
4440                         j = num_tokens(CCC->cs_inet_other_emails, '|');
4441                         for (i=0; i<j; ++i) {
4442                                 extract_token(buf, CCC->cs_inet_other_emails, i, '|', sizeof buf);
4443                                 if (!strcasecmp(newuseremail, buf)) {
4444                                         newuseremail_ok = 1;
4445                                 }
4446                         }
4447                 }
4448         }
4449
4450         if (!newuseremail_ok) {
4451                 cprintf("%d You don't have permission to author messages as '%s'.\n",
4452                         ERROR + HIGHER_ACCESS_REQUIRED,
4453                         newuseremail
4454                         );
4455                 return;
4456         }
4457
4458         CCC->cs_flags |= CS_POSTING;
4459
4460         /* In mailbox rooms we have to behave a little differently --
4461          * make sure the user has specified at least one recipient.  Then
4462          * validate the recipient(s).  We do this for the Mail> room, as
4463          * well as any room which has the "Mailbox" view set - unless it
4464          * is the DRAFTS room which does not require recipients
4465          */
4466
4467         if ( (  ( (CCC->room.QRflags & QR_MAILBOX) && (!strcasecmp(&CCC->room.QRname[11], MAILROOM)) )
4468                 || ( (CCC->room.QRflags & QR_MAILBOX) && (CCC->curr_view == VIEW_MAILBOX) )
4469                      ) && (strcasecmp(&CCC->room.QRname[11], USERDRAFTROOM)) !=0 ) {
4470                 if (CCC->user.axlevel < AxProbU) {
4471                         strcpy(recp, "sysop");
4472                         strcpy(cc, "");
4473                         strcpy(bcc, "");
4474                 }
4475
4476                 valid_to = validate_recipients(recp, NULL, 0);
4477                 if (valid_to->num_error > 0) {
4478                         cprintf("%d %s\n", ERROR + NO_SUCH_USER, valid_to->errormsg);
4479                         free_recipients(valid_to);
4480                         return;
4481                 }
4482
4483                 valid_cc = validate_recipients(cc, NULL, 0);
4484                 if (valid_cc->num_error > 0) {
4485                         cprintf("%d %s\n", ERROR + NO_SUCH_USER, valid_cc->errormsg);
4486                         free_recipients(valid_to);
4487                         free_recipients(valid_cc);
4488                         return;
4489                 }
4490
4491                 valid_bcc = validate_recipients(bcc, NULL, 0);
4492                 if (valid_bcc->num_error > 0) {
4493                         cprintf("%d %s\n", ERROR + NO_SUCH_USER, valid_bcc->errormsg);
4494                         free_recipients(valid_to);
4495                         free_recipients(valid_cc);
4496                         free_recipients(valid_bcc);
4497                         return;
4498                 }
4499
4500                 /* Recipient required, but none were specified */
4501                 if ( (valid_to->num_error < 0) && (valid_cc->num_error < 0) && (valid_bcc->num_error < 0) ) {
4502                         free_recipients(valid_to);
4503                         free_recipients(valid_cc);
4504                         free_recipients(valid_bcc);
4505                         cprintf("%d At least one recipient is required.\n", ERROR + NO_SUCH_USER);
4506                         return;
4507                 }
4508
4509                 if (valid_to->num_internet + valid_cc->num_internet + valid_bcc->num_internet > 0) {
4510                         if (CtdlCheckInternetMailPermission(&CCC->user)==0) {
4511                                 cprintf("%d You do not have permission "
4512                                         "to send Internet mail.\n",
4513                                         ERROR + HIGHER_ACCESS_REQUIRED);
4514                                 free_recipients(valid_to);
4515                                 free_recipients(valid_cc);
4516                                 free_recipients(valid_bcc);
4517                                 return;
4518                         }
4519                 }
4520
4521                 if ( ( (valid_to->num_internet + valid_to->num_ignet + valid_cc->num_internet + valid_cc->num_ignet + valid_bcc->num_internet + valid_bcc->num_ignet) > 0)
4522                      && (CCC->user.axlevel < AxNetU) ) {
4523                         cprintf("%d Higher access required for network mail.\n",
4524                                 ERROR + HIGHER_ACCESS_REQUIRED);
4525                         free_recipients(valid_to);
4526                         free_recipients(valid_cc);
4527                         free_recipients(valid_bcc);
4528                         return;
4529                 }
4530
4531                 if ((RESTRICT_INTERNET == 1)
4532                     && (valid_to->num_internet + valid_cc->num_internet + valid_bcc->num_internet > 0)
4533                     && ((CCC->user.flags & US_INTERNET) == 0)
4534                     && (!CCC->internal_pgm)) {
4535                         cprintf("%d You don't have access to Internet mail.\n",
4536                                 ERROR + HIGHER_ACCESS_REQUIRED);
4537                         free_recipients(valid_to);
4538                         free_recipients(valid_cc);
4539                         free_recipients(valid_bcc);
4540                         return;
4541                 }
4542
4543         }
4544
4545         /* Is this a room which has anonymous-only or anonymous-option? */
4546         anonymous = MES_NORMAL;
4547         if (CCC->room.QRflags & QR_ANONONLY) {
4548                 anonymous = MES_ANONONLY;
4549         }
4550         if (CCC->room.QRflags & QR_ANONOPT) {
4551                 if (anon_flag == 1) {   /* only if the user requested it */
4552                         anonymous = MES_ANONOPT;
4553                 }
4554         }
4555
4556         if ((CCC->room.QRflags & QR_MAILBOX) == 0) {
4557                 recp[0] = 0;
4558         }
4559
4560         /* Recommend to the client that the use of a message subject is
4561          * strongly recommended in this room, if either the SUBJECTREQ flag
4562          * is set, or if there is one or more Internet email recipients.
4563          */
4564         if (CCC->room.QRflags2 & QR2_SUBJECTREQ) subject_required = 1;
4565         if ((valid_to)  && (valid_to->num_internet > 0))        subject_required = 1;
4566         if ((valid_cc)  && (valid_cc->num_internet > 0))        subject_required = 1;
4567         if ((valid_bcc) && (valid_bcc->num_internet > 0))       subject_required = 1;
4568
4569         /* If we're only checking the validity of the request, return
4570          * success without creating the message.
4571          */
4572         if (post == 0) {
4573                 cprintf("%d %s|%d\n", CIT_OK,
4574                         ((valid_to != NULL) ? valid_to->display_recp : ""),
4575                         subject_required);
4576                 free_recipients(valid_to);
4577                 free_recipients(valid_cc);
4578                 free_recipients(valid_bcc);
4579                 return;
4580         }
4581
4582         /* We don't need these anymore because we'll do it differently below */
4583         free_recipients(valid_to);
4584         free_recipients(valid_cc);
4585         free_recipients(valid_bcc);
4586
4587         /* Read in the message from the client. */
4588         if (do_confirm) {
4589                 cprintf("%d send message\n", START_CHAT_MODE);
4590         } else {
4591                 cprintf("%d send message\n", SEND_LISTING);
4592         }
4593
4594         msg = CtdlMakeMessage(&CCC->user, recp, cc,
4595                               CCC->room.QRname, anonymous, format_type,
4596                               newusername, newuseremail, subject,
4597                               ((!IsEmptyStr(supplied_euid)) ? supplied_euid : NULL),
4598                               NULL, references);
4599
4600         /* Put together one big recipients struct containing to/cc/bcc all in
4601          * one.  This is for the envelope.
4602          */
4603         char *all_recps = malloc(SIZ * 3);
4604         strcpy(all_recps, recp);
4605         if (!IsEmptyStr(cc)) {
4606                 if (!IsEmptyStr(all_recps)) {
4607                         strcat(all_recps, ",");
4608                 }
4609                 strcat(all_recps, cc);
4610         }
4611         if (!IsEmptyStr(bcc)) {
4612                 if (!IsEmptyStr(all_recps)) {
4613                         strcat(all_recps, ",");
4614                 }
4615                 strcat(all_recps, bcc);
4616         }
4617         if (!IsEmptyStr(all_recps)) {
4618                 valid = validate_recipients(all_recps, NULL, 0);
4619         }
4620         else {
4621                 valid = NULL;
4622         }
4623         free(all_recps);
4624
4625         if ((valid != NULL) && (valid->num_room == 1))
4626         {
4627                 /* posting into an ML room? set the envelope from
4628                  * to the actual mail address so others get a valid
4629                  * reply-to-header.
4630                  */
4631                 msg->cm_fields['V'] = strdup(valid->recp_orgroom);
4632         }
4633
4634         if (msg != NULL) {
4635                 msgnum = CtdlSubmitMsg(msg, valid, "", QP_EADDR);
4636                 if (do_confirm) {
4637                         cprintf("%ld\n", msgnum);
4638
4639                         if (StrLength(CCC->StatusMessage) > 0) {
4640                                 cprintf("%s\n", ChrPtr(CCC->StatusMessage));
4641                         }
4642                         else if (msgnum >= 0L) {
4643                                 client_write(HKEY("Message accepted.\n"));
4644                         }
4645                         else {
4646                                 client_write(HKEY("Internal error.\n"));
4647                         }
4648
4649                         if (msg->cm_fields['E'] != NULL) {
4650                                 cprintf("%s\n", msg->cm_fields['E']);
4651                         } else {
4652                                 cprintf("\n");
4653                         }
4654                         cprintf("000\n");
4655                 }
4656
4657                 CtdlFreeMessage(msg);
4658         }
4659         if (valid != NULL) {
4660                 free_recipients(valid);
4661         }
4662         return;
4663 }
4664
4665
4666
4667 /*
4668  * API function to delete messages which match a set of criteria
4669  * (returns the actual number of messages deleted)
4670  */
4671 int CtdlDeleteMessages(char *room_name,         /* which room */
4672                        long *dmsgnums,          /* array of msg numbers to be deleted */
4673                        int num_dmsgnums,        /* number of msgs to be deleted, or 0 for "any" */
4674                        char *content_type       /* or "" for any.  regular expressions expected. */
4675         )
4676 {
4677         struct CitContext *CCC = CC;
4678         struct ctdlroom qrbuf;
4679         struct cdbdata *cdbfr;
4680         long *msglist = NULL;
4681         long *dellist = NULL;
4682         int num_msgs = 0;
4683         int i, j;
4684         int num_deleted = 0;
4685         int delete_this;
4686         struct MetaData smi;
4687         regex_t re;
4688         regmatch_t pm;
4689         int need_to_free_re = 0;
4690
4691         if (content_type) if (!IsEmptyStr(content_type)) {
4692                         regcomp(&re, content_type, 0);
4693                         need_to_free_re = 1;
4694                 }
4695         MSG_syslog(LOG_DEBUG, "CtdlDeleteMessages(%s, %d msgs, %s)\n",
4696                    room_name, num_dmsgnums, content_type);
4697
4698         /* get room record, obtaining a lock... */
4699         if (CtdlGetRoomLock(&qrbuf, room_name) != 0) {
4700                 MSG_syslog(LOG_ERR, "CtdlDeleteMessages(): Room <%s> not found\n",
4701                            room_name);
4702                 if (need_to_free_re) regfree(&re);
4703                 return (0);     /* room not found */
4704         }
4705         cdbfr = cdb_fetch(CDB_MSGLISTS, &qrbuf.QRnumber, sizeof(long));
4706
4707         if (cdbfr != NULL) {
4708                 dellist = malloc(cdbfr->len);
4709                 msglist = (long *) cdbfr->ptr;
4710                 cdbfr->ptr = NULL;      /* CtdlDeleteMessages() now owns this memory */
4711                 num_msgs = cdbfr->len / sizeof(long);
4712                 cdb_free(cdbfr);
4713         }
4714         if (num_msgs > 0) {
4715                 int have_contenttype = (content_type != NULL) && !IsEmptyStr(content_type);
4716                 int have_delmsgs = (num_dmsgnums == 0) || (dmsgnums == NULL);
4717                 int have_more_del = 1;
4718
4719                 num_msgs = sort_msglist(msglist, num_msgs);
4720                 if (num_dmsgnums > 1)
4721                         num_dmsgnums = sort_msglist(dmsgnums, num_dmsgnums);
4722 /*
4723                 {
4724                         StrBuf *dbg = NewStrBuf();
4725                         for (i = 0; i < num_dmsgnums; i++)
4726                                 StrBufAppendPrintf(dbg, ", %ld", dmsgnums[i]);
4727                         MSG_syslog(LOG_DEBUG, "Deleting before: %s", ChrPtr(dbg));
4728                         FreeStrBuf(&dbg);
4729                 }
4730 */
4731                 i = 0; j = 0;
4732                 while ((i < num_msgs) && (have_more_del)) {
4733                         delete_this = 0x00;
4734
4735
4736                         /* Set/clear a bit for each criterion */
4737
4738                         /* 0 messages in the list or a null list means that we are
4739                          * interested in deleting any messages which meet the other criteria.
4740                          */
4741                         if (have_delmsgs) {
4742                                 delete_this |= 0x01;
4743                         }
4744                         else {
4745                                 while ((i < num_msgs) && (msglist[i] < dmsgnums[j])) i++;
4746                                 if (msglist[i] == dmsgnums[j]) {
4747                                         delete_this |= 0x01;
4748                                 }
4749                                 j++;
4750                                 have_more_del = (j < num_dmsgnums);
4751                         }
4752
4753                         if (have_contenttype) {
4754                                 GetMetaData(&smi, msglist[i]);
4755                                 if (regexec(&re, smi.meta_content_type, 1, &pm, 0) == 0) {
4756                                         delete_this |= 0x02;
4757                                 }
4758                         } else {
4759                                 delete_this |= 0x02;
4760                         }
4761
4762                         /* Delete message only if all bits are set */
4763                         if (delete_this == 0x03) {
4764                                 dellist[num_deleted++] = msglist[i];
4765                                 msglist[i] = 0L;
4766                         }
4767                         i++;
4768                 }
4769 /*
4770                 {
4771                         StrBuf *dbg = NewStrBuf();
4772                         for (i = 0; i < num_deleted; i++)
4773                                 StrBufAppendPrintf(dbg, ", %ld", dellist[i]);
4774                         MSG_syslog(LOG_DEBUG, "Deleting: %s", ChrPtr(dbg));
4775                         FreeStrBuf(&dbg);
4776                 }
4777 */
4778                 num_msgs = sort_msglist(msglist, num_msgs);
4779                 cdb_store(CDB_MSGLISTS, &qrbuf.QRnumber, (int)sizeof(long),
4780                           msglist, (int)(num_msgs * sizeof(long)));
4781
4782                 if (num_msgs > 0)
4783                         qrbuf.QRhighest = msglist[num_msgs - 1];
4784                 else
4785                         qrbuf.QRhighest = 0;
4786         }
4787         CtdlPutRoomLock(&qrbuf);
4788
4789         /* Go through the messages we pulled out of the index, and decrement
4790          * their reference counts by 1.  If this is the only room the message
4791          * was in, the reference count will reach zero and the message will
4792          * automatically be deleted from the database.  We do this in a
4793          * separate pass because there might be plug-in hooks getting called,
4794          * and we don't want that happening during an S_ROOMS critical
4795          * section.
4796          */
4797         if (num_deleted) {
4798                 for (i=0; i<num_deleted; ++i) {
4799                         PerformDeleteHooks(qrbuf.QRname, dellist[i]);
4800                 }
4801                 AdjRefCountList(dellist, num_deleted, -1);
4802         }
4803         /* Now free the memory we used, and go away. */
4804         if (msglist != NULL) free(msglist);
4805         if (dellist != NULL) free(dellist);
4806         MSG_syslog(LOG_DEBUG, "%d message(s) deleted.\n", num_deleted);
4807         if (need_to_free_re) regfree(&re);
4808         return (num_deleted);
4809 }
4810
4811
4812
4813 /*
4814  * Check whether the current user has permission to delete messages from
4815  * the current room (returns 1 for yes, 0 for no)
4816  */
4817 int CtdlDoIHavePermissionToDeleteMessagesFromThisRoom(void) {
4818         int ra;
4819         CtdlRoomAccess(&CC->room, &CC->user, &ra, NULL);
4820         if (ra & UA_DELETEALLOWED) return(1);
4821         return(0);
4822 }
4823
4824
4825
4826
4827 /*
4828  * Delete message from current room
4829  */
4830 void cmd_dele(char *args)
4831 {
4832         int num_deleted;
4833         int i;
4834         char msgset[SIZ];
4835         char msgtok[32];
4836         long *msgs;
4837         int num_msgs = 0;
4838
4839         extract_token(msgset, args, 0, '|', sizeof msgset);
4840         num_msgs = num_tokens(msgset, ',');
4841         if (num_msgs < 1) {
4842                 cprintf("%d Nothing to do.\n", CIT_OK);
4843                 return;
4844         }
4845
4846         if (CtdlDoIHavePermissionToDeleteMessagesFromThisRoom() == 0) {
4847                 cprintf("%d Higher access required.\n",
4848                         ERROR + HIGHER_ACCESS_REQUIRED);
4849                 return;
4850         }
4851
4852         /*
4853          * Build our message set to be moved/copied
4854          */
4855         msgs = malloc(num_msgs * sizeof(long));
4856         for (i=0; i<num_msgs; ++i) {
4857                 extract_token(msgtok, msgset, i, ',', sizeof msgtok);
4858                 msgs[i] = atol(msgtok);
4859         }
4860
4861         num_deleted = CtdlDeleteMessages(CC->room.QRname, msgs, num_msgs, "");
4862         free(msgs);
4863
4864         if (num_deleted) {
4865                 cprintf("%d %d message%s deleted.\n", CIT_OK,
4866                         num_deleted, ((num_deleted != 1) ? "s" : ""));
4867         } else {
4868                 cprintf("%d Message not found.\n", ERROR + MESSAGE_NOT_FOUND);
4869         }
4870 }
4871
4872
4873
4874
4875 /*
4876  * move or copy a message to another room
4877  */
4878 void cmd_move(char *args)
4879 {
4880         char msgset[SIZ];
4881         char msgtok[32];
4882         long *msgs;
4883         int num_msgs = 0;
4884
4885         char targ[ROOMNAMELEN];
4886         struct ctdlroom qtemp;
4887         int err;
4888         int is_copy = 0;
4889         int ra;
4890         int permit = 0;
4891         int i;
4892
4893         extract_token(msgset, args, 0, '|', sizeof msgset);
4894         num_msgs = num_tokens(msgset, ',');
4895         if (num_msgs < 1) {
4896                 cprintf("%d Nothing to do.\n", CIT_OK);
4897                 return;
4898         }
4899
4900         extract_token(targ, args, 1, '|', sizeof targ);
4901         convert_room_name_macros(targ, sizeof targ);
4902         targ[ROOMNAMELEN - 1] = 0;
4903         is_copy = extract_int(args, 2);
4904
4905         if (CtdlGetRoom(&qtemp, targ) != 0) {
4906                 cprintf("%d '%s' does not exist.\n", ERROR + ROOM_NOT_FOUND, targ);
4907                 return;
4908         }
4909
4910         if (!strcasecmp(qtemp.QRname, CC->room.QRname)) {
4911                 cprintf("%d Source and target rooms are the same.\n", ERROR + ALREADY_EXISTS);
4912                 return;
4913         }
4914
4915         CtdlGetUser(&CC->user, CC->curr_user);
4916         CtdlRoomAccess(&qtemp, &CC->user, &ra, NULL);
4917
4918         /* Check for permission to perform this operation.
4919          * Remember: "CC->room" is source, "qtemp" is target.
4920          */
4921         permit = 0;
4922
4923         /* Admins can move/copy */
4924         if (CC->user.axlevel >= AxAideU) permit = 1;
4925
4926         /* Room aides can move/copy */
4927         if (CC->user.usernum == CC->room.QRroomaide) permit = 1;
4928
4929         /* Permit move/copy from personal rooms */
4930         if ((CC->room.QRflags & QR_MAILBOX)
4931             && (qtemp.QRflags & QR_MAILBOX)) permit = 1;
4932
4933         /* Permit only copy from public to personal room */
4934         if ( (is_copy)
4935              && (!(CC->room.QRflags & QR_MAILBOX))
4936              && (qtemp.QRflags & QR_MAILBOX)) permit = 1;
4937
4938         /* Permit message removal from collaborative delete rooms */
4939         if (CC->room.QRflags2 & QR2_COLLABDEL) permit = 1;
4940
4941         /* Users allowed to post into the target room may move into it too. */
4942         if ((CC->room.QRflags & QR_MAILBOX) &&
4943             (qtemp.QRflags & UA_POSTALLOWED))  permit = 1;
4944
4945         /* User must have access to target room */
4946         if (!(ra & UA_KNOWN))  permit = 0;
4947
4948         if (!permit) {
4949                 cprintf("%d Higher access required.\n",
4950                         ERROR + HIGHER_ACCESS_REQUIRED);
4951                 return;
4952         }
4953
4954         /*
4955          * Build our message set to be moved/copied
4956          */
4957         msgs = malloc(num_msgs * sizeof(long));
4958         for (i=0; i<num_msgs; ++i) {
4959                 extract_token(msgtok, msgset, i, ',', sizeof msgtok);
4960                 msgs[i] = atol(msgtok);
4961         }
4962
4963         /*
4964          * Do the copy
4965          */
4966         err = CtdlSaveMsgPointersInRoom(targ, msgs, num_msgs, 1, NULL, 0);
4967         if (err != 0) {
4968                 cprintf("%d Cannot store message(s) in %s: error %d\n",
4969                         err, targ, err);
4970                 free(msgs);
4971                 return;
4972         }
4973
4974         /* Now delete the message from the source room,
4975          * if this is a 'move' rather than a 'copy' operation.
4976          */
4977         if (is_copy == 0) {
4978                 CtdlDeleteMessages(CC->room.QRname, msgs, num_msgs, "");
4979         }
4980         free(msgs);
4981
4982         cprintf("%d Message(s) %s.\n", CIT_OK, (is_copy ? "copied" : "moved") );
4983 }
4984
4985
4986
4987 /*
4988  * GetMetaData()  -  Get the supplementary record for a message
4989  */
4990 void GetMetaData(struct MetaData *smibuf, long msgnum)
4991 {
4992
4993         struct cdbdata *cdbsmi;
4994         long TheIndex;
4995
4996         memset(smibuf, 0, sizeof(struct MetaData));
4997         smibuf->meta_msgnum = msgnum;
4998         smibuf->meta_refcount = 1;      /* Default reference count is 1 */
4999
5000         /* Use the negative of the message number for its supp record index */
5001         TheIndex = (0L - msgnum);
5002
5003         cdbsmi = cdb_fetch(CDB_MSGMAIN, &TheIndex, sizeof(long));
5004         if (cdbsmi == NULL) {
5005                 return;         /* record not found; go with defaults */
5006         }
5007         memcpy(smibuf, cdbsmi->ptr,
5008                ((cdbsmi->len > sizeof(struct MetaData)) ?
5009                 sizeof(struct MetaData) : cdbsmi->len));
5010         cdb_free(cdbsmi);
5011         return;
5012 }
5013
5014
5015 /*
5016  * PutMetaData()  -  (re)write supplementary record for a message
5017  */
5018 void PutMetaData(struct MetaData *smibuf)
5019 {
5020         long TheIndex;
5021
5022         /* Use the negative of the message number for the metadata db index */
5023         TheIndex = (0L - smibuf->meta_msgnum);
5024
5025         cdb_store(CDB_MSGMAIN,
5026                   &TheIndex, (int)sizeof(long),
5027                   smibuf, (int)sizeof(struct MetaData));
5028
5029 }
5030
5031 /*
5032  * AdjRefCount  -  submit an adjustment to the reference count for a message.
5033  *                 (These are just queued -- we actually process them later.)
5034  */
5035 void AdjRefCount(long msgnum, int incr)
5036 {
5037         struct CitContext *CCC = CC;
5038         struct arcq new_arcq;
5039         int rv = 0;
5040
5041         MSG_syslog(LOG_DEBUG, "AdjRefCount() msg %ld ref count delta %+d\n", msgnum, incr);
5042
5043         begin_critical_section(S_SUPPMSGMAIN);
5044         if (arcfp == NULL) {
5045                 arcfp = fopen(file_arcq, "ab+");
5046                 chown(file_arcq, CTDLUID, (-1));
5047                 chmod(file_arcq, 0600);
5048         }
5049         end_critical_section(S_SUPPMSGMAIN);
5050
5051         /* msgnum < 0 means that we're trying to close the file */
5052         if (msgnum < 0) {
5053                 MSGM_syslog(LOG_DEBUG, "Closing the AdjRefCount queue file\n");
5054                 begin_critical_section(S_SUPPMSGMAIN);
5055                 if (arcfp != NULL) {
5056                         fclose(arcfp);
5057                         arcfp = NULL;
5058                 }
5059                 end_critical_section(S_SUPPMSGMAIN);
5060                 return;
5061         }
5062
5063         /*
5064          * If we can't open the queue, perform the operation synchronously.
5065          */
5066         if (arcfp == NULL) {
5067                 TDAP_AdjRefCount(msgnum, incr);
5068                 return;
5069         }
5070
5071         new_arcq.arcq_msgnum = msgnum;
5072         new_arcq.arcq_delta = incr;
5073         rv = fwrite(&new_arcq, sizeof(struct arcq), 1, arcfp);
5074         if (rv == -1) {
5075                 MSG_syslog(LOG_EMERG, "Couldn't write Refcount Queue File %s: %s\n",
5076                            file_arcq,
5077                            strerror(errno));
5078         }
5079         fflush(arcfp);
5080
5081         return;
5082 }
5083
5084 void AdjRefCountList(long *msgnum, long nmsg, int incr)
5085 {
5086         struct CitContext *CCC = CC;
5087         long i, the_size, offset;
5088         struct arcq *new_arcq;
5089         int rv = 0;
5090
5091         MSG_syslog(LOG_DEBUG, "AdjRefCountList() msg %ld ref count delta %+d\n", nmsg, incr);
5092
5093         begin_critical_section(S_SUPPMSGMAIN);
5094         if (arcfp == NULL) {
5095                 arcfp = fopen(file_arcq, "ab+");
5096                 chown(file_arcq, CTDLUID, (-1));
5097                 chmod(file_arcq, 0600);
5098         }
5099         end_critical_section(S_SUPPMSGMAIN);
5100
5101         /*
5102          * If we can't open the queue, perform the operation synchronously.
5103          */
5104         if (arcfp == NULL) {
5105                 for (i = 0; i < nmsg; i++)
5106                         TDAP_AdjRefCount(msgnum[i], incr);
5107                 return;
5108         }
5109
5110         the_size = sizeof(struct arcq) * nmsg;
5111         new_arcq = malloc(the_size);
5112         for (i = 0; i < nmsg; i++) {
5113                 new_arcq[i].arcq_msgnum = msgnum[i];
5114                 new_arcq[i].arcq_delta = incr;
5115         }
5116         rv = 0;
5117         offset = 0;
5118         while ((rv >= 0) && (offset < the_size))
5119         {
5120                 rv = fwrite(new_arcq + offset, 1, the_size - offset, arcfp);
5121                 if (rv == -1) {
5122                         MSG_syslog(LOG_EMERG, "Couldn't write Refcount Queue File %s: %s\n",
5123                                    file_arcq,
5124                                    strerror(errno));
5125                 }
5126                 else {
5127                         offset += rv;
5128                 }
5129         }
5130         free(new_arcq);
5131         fflush(arcfp);
5132
5133         return;
5134 }
5135
5136
5137 /*
5138  * TDAP_ProcessAdjRefCountQueue()
5139  *
5140  * Process the queue of message count adjustments that was created by calls
5141  * to AdjRefCount() ... by reading the queue and calling TDAP_AdjRefCount()
5142  * for each one.  This should be an "off hours" operation.
5143  */
5144 int TDAP_ProcessAdjRefCountQueue(void)
5145 {
5146         struct CitContext *CCC = CC;
5147         char file_arcq_temp[PATH_MAX];
5148         int r;
5149         FILE *fp;
5150         struct arcq arcq_rec;
5151         int num_records_processed = 0;
5152
5153         snprintf(file_arcq_temp, sizeof file_arcq_temp, "%s.%04x", file_arcq, rand());
5154
5155         begin_critical_section(S_SUPPMSGMAIN);
5156         if (arcfp != NULL) {
5157                 fclose(arcfp);
5158                 arcfp = NULL;
5159         }
5160
5161         r = link(file_arcq, file_arcq_temp);
5162         if (r != 0) {
5163                 MSG_syslog(LOG_CRIT, "%s: %s\n", file_arcq_temp, strerror(errno));
5164                 end_critical_section(S_SUPPMSGMAIN);
5165                 return(num_records_processed);
5166         }
5167
5168         unlink(file_arcq);
5169         end_critical_section(S_SUPPMSGMAIN);
5170
5171         fp = fopen(file_arcq_temp, "rb");
5172         if (fp == NULL) {
5173                 MSG_syslog(LOG_CRIT, "%s: %s\n", file_arcq_temp, strerror(errno));
5174                 return(num_records_processed);
5175         }
5176
5177         while (fread(&arcq_rec, sizeof(struct arcq), 1, fp) == 1) {
5178                 TDAP_AdjRefCount(arcq_rec.arcq_msgnum, arcq_rec.arcq_delta);
5179                 ++num_records_processed;
5180         }
5181
5182         fclose(fp);
5183         r = unlink(file_arcq_temp);
5184         if (r != 0) {
5185                 MSG_syslog(LOG_CRIT, "%s: %s\n", file_arcq_temp, strerror(errno));
5186         }
5187
5188         return(num_records_processed);
5189 }
5190
5191
5192
5193 /*
5194  * TDAP_AdjRefCount  -  adjust the reference count for a message.
5195  *                      This one does it "for real" because it's called by
5196  *                      the autopurger function that processes the queue
5197  *                      created by AdjRefCount().   If a message's reference
5198  *                      count becomes zero, we also delete the message from
5199  *                      disk and de-index it.
5200  */
5201 void TDAP_AdjRefCount(long msgnum, int incr)
5202 {
5203         struct CitContext *CCC = CC;
5204
5205         struct MetaData smi;
5206         long delnum;
5207
5208         /* This is a *tight* critical section; please keep it that way, as
5209          * it may get called while nested in other critical sections.
5210          * Complicating this any further will surely cause deadlock!
5211          */
5212         begin_critical_section(S_SUPPMSGMAIN);
5213         GetMetaData(&smi, msgnum);
5214         smi.meta_refcount += incr;
5215         PutMetaData(&smi);
5216         end_critical_section(S_SUPPMSGMAIN);
5217         MSG_syslog(LOG_DEBUG, "TDAP_AdjRefCount() msg %ld ref count delta %+d, is now %d\n",
5218                    msgnum, incr, smi.meta_refcount
5219                 );
5220
5221         /* If the reference count is now zero, delete the message
5222          * (and its supplementary record as well).
5223          */
5224         if (smi.meta_refcount == 0) {
5225                 MSG_syslog(LOG_DEBUG, "Deleting message <%ld>\n", msgnum);
5226
5227                 /* Call delete hooks with NULL room to show it has gone altogether */
5228                 PerformDeleteHooks(NULL, msgnum);
5229
5230                 /* Remove from message base */
5231                 delnum = msgnum;
5232                 cdb_delete(CDB_MSGMAIN, &delnum, (int)sizeof(long));
5233                 cdb_delete(CDB_BIGMSGS, &delnum, (int)sizeof(long));
5234
5235                 /* Remove metadata record */
5236                 delnum = (0L - msgnum);
5237                 cdb_delete(CDB_MSGMAIN, &delnum, (int)sizeof(long));
5238         }
5239
5240 }
5241
5242 /*
5243  * Write a generic object to this room
5244  *
5245  * Note: this could be much more efficient.  Right now we use two temporary
5246  * files, and still pull the message into memory as with all others.
5247  */
5248 void CtdlWriteObject(char *req_room,                    /* Room to stuff it in */
5249                      char *content_type,                /* MIME type of this object */
5250                      char *raw_message,         /* Data to be written */
5251                      off_t raw_length,          /* Size of raw_message */
5252                      struct ctdluser *is_mailbox,       /* Mailbox room? */
5253                      int is_binary,                     /* Is encoding necessary? */
5254                      int is_unique,                     /* Del others of this type? */
5255                      unsigned int flags         /* Internal save flags */
5256         )
5257 {
5258         struct CitContext *CCC = CC;
5259         struct ctdlroom qrbuf;
5260         char roomname[ROOMNAMELEN];
5261         struct CtdlMessage *msg;
5262         char *encoded_message = NULL;
5263
5264         if (is_mailbox != NULL) {
5265                 CtdlMailboxName(roomname, sizeof roomname, is_mailbox, req_room);
5266         }
5267         else {
5268                 safestrncpy(roomname, req_room, sizeof(roomname));
5269         }
5270
5271         MSG_syslog(LOG_DEBUG, "Raw length is %ld\n", (long)raw_length);
5272
5273         if (is_binary) {
5274                 encoded_message = malloc((size_t) (((raw_length * 134) / 100) + 4096 ) );
5275         }
5276         else {
5277                 encoded_message = malloc((size_t)(raw_length + 4096));
5278         }
5279
5280         sprintf(encoded_message, "Content-type: %s\n", content_type);
5281
5282         if (is_binary) {
5283                 sprintf(&encoded_message[strlen(encoded_message)],
5284                         "Content-transfer-encoding: base64\n\n"
5285                         );
5286         }
5287         else {
5288                 sprintf(&encoded_message[strlen(encoded_message)],
5289                         "Content-transfer-encoding: 7bit\n\n"
5290                         );
5291         }
5292
5293         if (is_binary) {
5294                 CtdlEncodeBase64(
5295                         &encoded_message[strlen(encoded_message)],
5296                         raw_message,
5297                         (int)raw_length,
5298                         0
5299                         );
5300         }
5301         else {
5302                 memcpy(
5303                         &encoded_message[strlen(encoded_message)],
5304                         raw_message,
5305                         (int)(raw_length+1)
5306                         );
5307         }
5308
5309         MSGM_syslog(LOG_DEBUG, "Allocating\n");
5310         msg = malloc(sizeof(struct CtdlMessage));
5311         memset(msg, 0, sizeof(struct CtdlMessage));
5312         msg->cm_magic = CTDLMESSAGE_MAGIC;
5313         msg->cm_anon_type = MES_NORMAL;
5314         msg->cm_format_type = 4;
5315         msg->cm_fields['A'] = strdup(CCC->user.fullname);
5316         msg->cm_fields['O'] = strdup(req_room);
5317         msg->cm_fields['N'] = strdup(config.c_nodename);
5318         msg->cm_fields['H'] = strdup(config.c_humannode);
5319         msg->cm_flags = flags;
5320
5321         msg->cm_fields['M'] = encoded_message;
5322
5323         /* Create the requested room if we have to. */
5324         if (CtdlGetRoom(&qrbuf, roomname) != 0) {
5325                 CtdlCreateRoom(roomname,
5326                                ( (is_mailbox != NULL) ? 5 : 3 ),
5327                                "", 0, 1, 0, VIEW_BBS);
5328         }
5329         /* If the caller specified this object as unique, delete all
5330          * other objects of this type that are currently in the room.
5331          */
5332         if (is_unique) {
5333                 MSG_syslog(LOG_DEBUG, "Deleted %d other msgs of this type\n",
5334                            CtdlDeleteMessages(roomname, NULL, 0, content_type)
5335                         );
5336         }
5337         /* Now write the data */
5338         CtdlSubmitMsg(msg, NULL, roomname, 0);
5339         CtdlFreeMessage(msg);
5340 }
5341
5342
5343
5344
5345
5346
5347 void CtdlGetSysConfigBackend(long msgnum, void *userdata) {
5348         config_msgnum = msgnum;
5349 }
5350
5351
5352 char *CtdlGetSysConfig(char *sysconfname) {
5353         char hold_rm[ROOMNAMELEN];
5354         long msgnum;
5355         char *conf;
5356         struct CtdlMessage *msg;
5357         char buf[SIZ];
5358
5359         strcpy(hold_rm, CC->room.QRname);
5360         if (CtdlGetRoom(&CC->room, SYSCONFIGROOM) != 0) {
5361                 CtdlGetRoom(&CC->room, hold_rm);
5362                 return NULL;
5363         }
5364
5365
5366         /* We want the last (and probably only) config in this room */
5367         begin_critical_section(S_CONFIG);
5368         config_msgnum = (-1L);
5369         CtdlForEachMessage(MSGS_LAST, 1, NULL, sysconfname, NULL,
5370                            CtdlGetSysConfigBackend, NULL);
5371         msgnum = config_msgnum;
5372         end_critical_section(S_CONFIG);
5373
5374         if (msgnum < 0L) {
5375                 conf = NULL;
5376         }
5377         else {
5378                 msg = CtdlFetchMessage(msgnum, 1);
5379                 if (msg != NULL) {
5380                         conf = strdup(msg->cm_fields['M']);
5381                         CtdlFreeMessage(msg);
5382                 }
5383                 else {
5384                         conf = NULL;
5385                 }
5386         }
5387
5388         CtdlGetRoom(&CC->room, hold_rm);
5389
5390         if (conf != NULL) do {
5391                         extract_token(buf, conf, 0, '\n', sizeof buf);
5392                         strcpy(conf, &conf[strlen(buf)+1]);
5393                 } while ( (!IsEmptyStr(conf)) && (!IsEmptyStr(buf)) );
5394
5395         return(conf);
5396 }
5397
5398
5399 void CtdlPutSysConfig(char *sysconfname, char *sysconfdata) {
5400         CtdlWriteObject(SYSCONFIGROOM, sysconfname, sysconfdata, (strlen(sysconfdata)+1), NULL, 0, 1, 0);
5401 }
5402
5403
5404 /*
5405  * Determine whether a given Internet address belongs to the current user
5406  */
5407 int CtdlIsMe(char *addr, int addr_buf_len)
5408 {
5409         struct recptypes *recp;
5410         int i;
5411
5412         recp = validate_recipients(addr, NULL, 0);
5413         if (recp == NULL) return(0);
5414
5415         if (recp->num_local == 0) {
5416                 free_recipients(recp);
5417                 return(0);
5418         }
5419
5420         for (i=0; i<recp->num_local; ++i) {
5421                 extract_token(addr, recp->recp_local, i, '|', addr_buf_len);
5422                 if (!strcasecmp(addr, CC->user.fullname)) {
5423                         free_recipients(recp);
5424                         return(1);
5425                 }
5426         }
5427
5428         free_recipients(recp);
5429         return(0);
5430 }
5431
5432
5433 /*
5434  * Citadel protocol command to do the same
5435  */
5436 void cmd_isme(char *argbuf) {
5437         char addr[256];
5438
5439         if (CtdlAccessCheck(ac_logged_in)) return;
5440         extract_token(addr, argbuf, 0, '|', sizeof addr);
5441
5442         if (CtdlIsMe(addr, sizeof addr)) {
5443                 cprintf("%d %s\n", CIT_OK, addr);
5444         }
5445         else {
5446                 cprintf("%d Not you.\n", ERROR + ILLEGAL_VALUE);
5447         }
5448
5449 }
5450
5451
5452 /*****************************************************************************/
5453 /*                      MODULE INITIALIZATION STUFF                          */
5454 /*****************************************************************************/
5455 void SetMessageDebugEnabled(const int n)
5456 {
5457         MessageDebugEnabled = n;
5458 }
5459 CTDL_MODULE_INIT(msgbase)
5460 {
5461         if (!threading) {
5462                 CtdlRegisterDebugFlagHook(HKEY("messages"), SetMessageDebugEnabled, &MessageDebugEnabled);
5463
5464                 CtdlRegisterProtoHook(cmd_msgs, "MSGS", "Output a list of messages in the current room");
5465                 CtdlRegisterProtoHook(cmd_msg0, "MSG0", "Output a message in plain text format");
5466                 CtdlRegisterProtoHook(cmd_msg2, "MSG2", "Output a message in RFC822 format");
5467                 CtdlRegisterProtoHook(cmd_msg3, "MSG3", "Output a message in raw format (deprecated)");
5468                 CtdlRegisterProtoHook(cmd_msg4, "MSG4", "Output a message in the client's preferred format");
5469                 CtdlRegisterProtoHook(cmd_msgp, "MSGP", "Select preferred format for MSG4 output");
5470                 CtdlRegisterProtoHook(cmd_opna, "OPNA", "Open an attachment for download");
5471                 CtdlRegisterProtoHook(cmd_dlat, "DLAT", "Download an attachment");
5472                 CtdlRegisterProtoHook(cmd_ent0, "ENT0", "Enter a message");
5473                 CtdlRegisterProtoHook(cmd_dele, "DELE", "Delete a message");
5474                 CtdlRegisterProtoHook(cmd_move, "MOVE", "Move or copy a message to another room");
5475                 CtdlRegisterProtoHook(cmd_isme, "ISME", "Determine whether an email address belongs to a user");
5476         }
5477
5478         /* return our Subversion id for the Log */
5479         return "msgbase";
5480 }