- dump_message() isn't used anymore; remove it.
[citadel.git] / citadel / msgbase.c
1 /*
2  * Implements the message store.
3  *
4  * Copyright (c) 1987-2012 by the citadel.org team
5  *
6  * This program is open source software; you can redistribute it and/or modify
7  * it under the terms of the GNU General Public License version 3.
8  *
9  * This program is distributed in the hope that it will be useful,
10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
12  * GNU General Public License for more details.
13  */
14
15 #include "sysdep.h"
16 #include <stdlib.h>
17 #include <unistd.h>
18 #include <stdio.h>
19 #include <fcntl.h>
20
21 #if TIME_WITH_SYS_TIME
22 # include <sys/time.h>
23 # include <time.h>
24 #else
25 # if HAVE_SYS_TIME_H
26 #  include <sys/time.h>
27 # else
28 #  include <time.h>
29 # endif
30 #endif
31
32
33 #include <ctype.h>
34 #include <string.h>
35 #include <limits.h>
36 #include <errno.h>
37 #include <stdarg.h>
38 #include <sys/stat.h>
39 #include <sys/types.h>
40 #include <regex.h>
41 #include <libcitadel.h>
42 #include "citadel.h"
43 #include "server.h"
44 #include "serv_extensions.h"
45 #include "database.h"
46 #include "msgbase.h"
47 #include "support.h"
48 #include "sysdep_decls.h"
49 #include "citserver.h"
50 #include "room_ops.h"
51 #include "user_ops.h"
52 #include "file_ops.h"
53 #include "config.h"
54 #include "control.h"
55 #include "genstamp.h"
56 #include "internet_addressing.h"
57 #include "euidindex.h"
58 #include "journaling.h"
59 #include "citadel_dirs.h"
60 #include "clientsocket.h"
61 #include "threads.h"
62
63 #include "ctdl_module.h"
64
65 long config_msgnum;
66 struct addresses_to_be_filed *atbf = NULL;
67
68 /* This temp file holds the queue of operations for AdjRefCount() */
69 static FILE *arcfp = NULL;
70 void AdjRefCountList(long *msgnum, long nmsg, int incr);
71
72 int MessageDebugEnabled = 0;
73
74 /*
75  * These are the four-character field headers we use when outputting
76  * messages in Citadel format (as opposed to RFC822 format).
77  */
78 char *msgkeys[] = {
79         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 
80         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 
81         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 
82         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 
83         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 
84         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 
85         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 
86         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, 
87         NULL, 
88         "from",
89         NULL, NULL, NULL,
90         "exti",
91         "rfca",
92         NULL, 
93         "hnod",
94         "msgn",
95         "jrnl",
96         NULL,
97         "list",
98         "text",
99         "node",
100         "room",
101         "path",
102         NULL,
103         "rcpt",
104         "spec",
105         "time",
106         "subj",
107         NULL,
108         "wefw",
109         NULL,
110         "cccc",
111         NULL
112 };
113
114 /*
115  * This function is self explanatory.
116  * (What can I say, I'm in a weird mood today...)
117  */
118 void remove_any_whitespace_to_the_left_or_right_of_at_symbol(char *name)
119 {
120         int i;
121
122         for (i = 0; i < strlen(name); ++i) {
123                 if (name[i] == '@') {
124                         while (isspace(name[i - 1]) && i > 0) {
125                                 strcpy(&name[i - 1], &name[i]);
126                                 --i;
127                         }
128                         while (isspace(name[i + 1])) {
129                                 strcpy(&name[i + 1], &name[i + 2]);
130                         }
131                 }
132         }
133 }
134
135
136 /*
137  * Aliasing for network mail.
138  * (Error messages have been commented out, because this is a server.)
139  */
140 int alias(char *name)
141 {                               /* process alias and routing info for mail */
142         struct CitContext *CCC = CC;
143         FILE *fp;
144         int a, i;
145         char aaa[SIZ], bbb[SIZ];
146         char *ignetcfg = NULL;
147         char *ignetmap = NULL;
148         int at = 0;
149         char node[64];
150         char testnode[64];
151         char buf[SIZ];
152
153         char original_name[256];
154         safestrncpy(original_name, name, sizeof original_name);
155
156         striplt(name);
157         remove_any_whitespace_to_the_left_or_right_of_at_symbol(name);
158         stripallbut(name, '<', '>');
159
160         fp = fopen(file_mail_aliases, "r");
161         if (fp == NULL) {
162                 fp = fopen("/dev/null", "r");
163         }
164         if (fp == NULL) {
165                 return (MES_ERROR);
166         }
167         strcpy(aaa, "");
168         strcpy(bbb, "");
169         while (fgets(aaa, sizeof aaa, fp) != NULL) {
170                 while (isspace(name[0]))
171                         strcpy(name, &name[1]);
172                 aaa[strlen(aaa) - 1] = 0;
173                 strcpy(bbb, "");
174                 for (a = 0; a < strlen(aaa); ++a) {
175                         if (aaa[a] == ',') {
176                                 strcpy(bbb, &aaa[a + 1]);
177                                 aaa[a] = 0;
178                         }
179                 }
180                 if (!strcasecmp(name, aaa))
181                         strcpy(name, bbb);
182         }
183         fclose(fp);
184
185         /* Hit the Global Address Book */
186         if (CtdlDirectoryLookup(aaa, name, sizeof aaa) == 0) {
187                 strcpy(name, aaa);
188         }
189
190         if (strcasecmp(original_name, name)) {
191                 MSG_syslog(LOG_INFO, "%s is being forwarded to %s\n", original_name, name);
192         }
193
194         /* Change "user @ xxx" to "user" if xxx is an alias for this host */
195         for (a=0; a<strlen(name); ++a) {
196                 if (name[a] == '@') {
197                         if (CtdlHostAlias(&name[a+1]) == hostalias_localhost) {
198                                 name[a] = 0;
199                                 MSG_syslog(LOG_INFO, "Changed to <%s>\n", name);
200                         }
201                 }
202         }
203
204         /* determine local or remote type, see citadel.h */
205         at = haschar(name, '@');
206         if (at == 0) return(MES_LOCAL);         /* no @'s - local address */
207         if (at > 1) return(MES_ERROR);          /* >1 @'s - invalid address */
208         remove_any_whitespace_to_the_left_or_right_of_at_symbol(name);
209
210         /* figure out the delivery mode */
211         extract_token(node, name, 1, '@', sizeof node);
212
213         /* If there are one or more dots in the nodename, we assume that it
214          * is an FQDN and will attempt SMTP delivery to the Internet.
215          */
216         if (haschar(node, '.') > 0) {
217                 return(MES_INTERNET);
218         }
219
220         /* Otherwise we look in the IGnet maps for a valid Citadel node.
221          * Try directly-connected nodes first...
222          */
223         ignetcfg = CtdlGetSysConfig(IGNETCFG);
224         for (i=0; i<num_tokens(ignetcfg, '\n'); ++i) {
225                 extract_token(buf, ignetcfg, i, '\n', sizeof buf);
226                 extract_token(testnode, buf, 0, '|', sizeof testnode);
227                 if (!strcasecmp(node, testnode)) {
228                         free(ignetcfg);
229                         return(MES_IGNET);
230                 }
231         }
232         free(ignetcfg);
233
234         /*
235          * Then try nodes that are two or more hops away.
236          */
237         ignetmap = CtdlGetSysConfig(IGNETMAP);
238         for (i=0; i<num_tokens(ignetmap, '\n'); ++i) {
239                 extract_token(buf, ignetmap, i, '\n', sizeof buf);
240                 extract_token(testnode, buf, 0, '|', sizeof testnode);
241                 if (!strcasecmp(node, testnode)) {
242                         free(ignetmap);
243                         return(MES_IGNET);
244                 }
245         }
246         free(ignetmap);
247
248         /* If we get to this point it's an invalid node name */
249         return (MES_ERROR);
250 }
251
252
253 /*
254  * Back end for the MSGS command: output message number only.
255  */
256 void simple_listing(long msgnum, void *userdata)
257 {
258         cprintf("%ld\n", msgnum);
259 }
260
261
262
263 /*
264  * Back end for the MSGS command: output header summary.
265  */
266 void headers_listing(long msgnum, void *userdata)
267 {
268         struct CtdlMessage *msg;
269
270         msg = CtdlFetchMessage(msgnum, 0);
271         if (msg == NULL) {
272                 cprintf("%ld|0|||||\n", msgnum);
273                 return;
274         }
275
276         cprintf("%ld|%s|%s|%s|%s|%s|\n",
277                 msgnum,
278                 (msg->cm_fields['T'] ? msg->cm_fields['T'] : "0"),
279                 (msg->cm_fields['A'] ? msg->cm_fields['A'] : ""),
280                 (msg->cm_fields['N'] ? msg->cm_fields['N'] : ""),
281                 (msg->cm_fields['F'] ? msg->cm_fields['F'] : ""),
282                 (msg->cm_fields['U'] ? msg->cm_fields['U'] : "")
283         );
284         CtdlFreeMessage(msg);
285 }
286
287 /*
288  * Back end for the MSGS command: output EUID header.
289  */
290 void headers_euid(long msgnum, void *userdata)
291 {
292         struct CtdlMessage *msg;
293
294         msg = CtdlFetchMessage(msgnum, 0);
295         if (msg == NULL) {
296                 cprintf("%ld||\n", msgnum);
297                 return;
298         }
299
300         cprintf("%ld|%s|%s\n", 
301                 msgnum, 
302                 (msg->cm_fields['E'] ? msg->cm_fields['E'] : ""),
303                 (msg->cm_fields['T'] ? msg->cm_fields['T'] : "0"));
304         CtdlFreeMessage(msg);
305 }
306
307
308
309
310
311 /* Determine if a given message matches the fields in a message template.
312  * Return 0 for a successful match.
313  */
314 int CtdlMsgCmp(struct CtdlMessage *msg, struct CtdlMessage *template) {
315         int i;
316
317         /* If there aren't any fields in the template, all messages will
318          * match.
319          */
320         if (template == NULL) return(0);
321
322         /* Null messages are bogus. */
323         if (msg == NULL) return(1);
324
325         for (i='A'; i<='Z'; ++i) {
326                 if (template->cm_fields[i] != NULL) {
327                         if (msg->cm_fields[i] == NULL) {
328                                 /* Considered equal if temmplate is empty string */
329                                 if (IsEmptyStr(template->cm_fields[i])) continue;
330                                 return 1;
331                         }
332                         if (strcasecmp(msg->cm_fields[i],
333                                 template->cm_fields[i])) return 1;
334                 }
335         }
336
337         /* All compares succeeded: we have a match! */
338         return 0;
339 }
340
341
342
343 /*
344  * Retrieve the "seen" message list for the current room.
345  */
346 void CtdlGetSeen(char *buf, int which_set) {
347         struct CitContext *CCC = CC;
348         visit vbuf;
349
350         /* Learn about the user and room in question */
351         CtdlGetRelationship(&vbuf, &CCC->user, &CCC->room);
352
353         if (which_set == ctdlsetseen_seen)
354                 safestrncpy(buf, vbuf.v_seen, SIZ);
355         if (which_set == ctdlsetseen_answered)
356                 safestrncpy(buf, vbuf.v_answered, SIZ);
357 }
358
359
360
361 /*
362  * Manipulate the "seen msgs" string (or other message set strings)
363  */
364 void CtdlSetSeen(long *target_msgnums, int num_target_msgnums,
365                 int target_setting, int which_set,
366                 struct ctdluser *which_user, struct ctdlroom *which_room) {
367         struct CitContext *CCC = CC;
368         struct cdbdata *cdbfr;
369         int i, k;
370         int is_seen = 0;
371         int was_seen = 0;
372         long lo = (-1L);
373         long hi = (-1L); /// TODO: we just write here. y?
374         visit vbuf;
375         long *msglist;
376         int num_msgs = 0;
377         StrBuf *vset;
378         StrBuf *setstr;
379         StrBuf *lostr;
380         StrBuf *histr;
381         const char *pvset;
382         char *is_set;   /* actually an array of booleans */
383
384         /* Don't bother doing *anything* if we were passed a list of zero messages */
385         if (num_target_msgnums < 1) {
386                 return;
387         }
388
389         /* If no room was specified, we go with the current room. */
390         if (!which_room) {
391                 which_room = &CCC->room;
392         }
393
394         /* If no user was specified, we go with the current user. */
395         if (!which_user) {
396                 which_user = &CCC->user;
397         }
398
399         MSG_syslog(LOG_DEBUG, "CtdlSetSeen(%d msgs starting with %ld, %s, %d) in <%s>\n",
400                    num_target_msgnums, target_msgnums[0],
401                    (target_setting ? "SET" : "CLEAR"),
402                    which_set,
403                    which_room->QRname);
404
405         /* Learn about the user and room in question */
406         CtdlGetRelationship(&vbuf, which_user, which_room);
407
408         /* Load the message list */
409         cdbfr = cdb_fetch(CDB_MSGLISTS, &which_room->QRnumber, sizeof(long));
410         if (cdbfr != NULL) {
411                 msglist = (long *) cdbfr->ptr;
412                 cdbfr->ptr = NULL;      /* CtdlSetSeen() now owns this memory */
413                 num_msgs = cdbfr->len / sizeof(long);
414                 cdb_free(cdbfr);
415         } else {
416                 return; /* No messages at all?  No further action. */
417         }
418
419         is_set = malloc(num_msgs * sizeof(char));
420         memset(is_set, 0, (num_msgs * sizeof(char)) );
421
422         /* Decide which message set we're manipulating */
423         switch(which_set) {
424         case ctdlsetseen_seen:
425                 vset = NewStrBufPlain(vbuf.v_seen, -1);
426                 break;
427         case ctdlsetseen_answered:
428                 vset = NewStrBufPlain(vbuf.v_answered, -1);
429                 break;
430         default:
431                 vset = NewStrBuf();
432         }
433
434
435 #if 0   /* This is a special diagnostic section.  Do not allow it to run during normal operation. */
436         MSG_syslog(LOG_DEBUG, "There are %d messages in the room.\n", num_msgs);
437         for (i=0; i<num_msgs; ++i) {
438                 if ((i > 0) && (msglist[i] <= msglist[i-1])) abort();
439         }
440         MSG_syslog(LOG_DEBUG, "We are twiddling %d of them.\n", num_target_msgnums);
441         for (k=0; k<num_target_msgnums; ++k) {
442                 if ((k > 0) && (target_msgnums[k] <= target_msgnums[k-1])) abort();
443         }
444 #endif
445
446         MSG_syslog(LOG_DEBUG, "before update: %s\n", ChrPtr(vset));
447
448         /* Translate the existing sequence set into an array of booleans */
449         setstr = NewStrBuf();
450         lostr = NewStrBuf();
451         histr = NewStrBuf();
452         pvset = NULL;
453         while (StrBufExtract_NextToken(setstr, vset, &pvset, ',') >= 0) {
454
455                 StrBufExtract_token(lostr, setstr, 0, ':');
456                 if (StrBufNum_tokens(setstr, ':') >= 2) {
457                         StrBufExtract_token(histr, setstr, 1, ':');
458                 }
459                 else {
460                         FlushStrBuf(histr);
461                         StrBufAppendBuf(histr, lostr, 0);
462                 }
463                 lo = StrTol(lostr);
464                 if (!strcmp(ChrPtr(histr), "*")) {
465                         hi = LONG_MAX;
466                 }
467                 else {
468                         hi = StrTol(histr);
469                 }
470
471                 for (i = 0; i < num_msgs; ++i) {
472                         if ((msglist[i] >= lo) && (msglist[i] <= hi)) {
473                                 is_set[i] = 1;
474                         }
475                 }
476         }
477         FreeStrBuf(&setstr);
478         FreeStrBuf(&lostr);
479         FreeStrBuf(&histr);
480
481
482         /* Now translate the array of booleans back into a sequence set */
483         FlushStrBuf(vset);
484         was_seen = 0;
485         lo = (-1);
486         hi = (-1);
487
488         for (i=0; i<num_msgs; ++i) {
489                 is_seen = is_set[i];
490
491                 /* Apply changes */
492                 for (k=0; k<num_target_msgnums; ++k) {
493                         if (msglist[i] == target_msgnums[k]) {
494                                 is_seen = target_setting;
495                         }
496                 }
497
498                 if ((was_seen == 0) && (is_seen == 1)) {
499                         lo = msglist[i];
500                 }
501                 else if ((was_seen == 1) && (is_seen == 0)) {
502                         hi = msglist[i-1];
503
504                         if (StrLength(vset) > 0) {
505                                 StrBufAppendBufPlain(vset, HKEY(","), 0);
506                         }
507                         if (lo == hi) {
508                                 StrBufAppendPrintf(vset, "%ld", hi);
509                         }
510                         else {
511                                 StrBufAppendPrintf(vset, "%ld:%ld", lo, hi);
512                         }
513                 }
514
515                 if ((is_seen) && (i == num_msgs - 1)) {
516                         if (StrLength(vset) > 0) {
517                                 StrBufAppendBufPlain(vset, HKEY(","), 0);
518                         }
519                         if ((i==0) || (was_seen == 0)) {
520                                 StrBufAppendPrintf(vset, "%ld", msglist[i]);
521                         }
522                         else {
523                                 StrBufAppendPrintf(vset, "%ld:%ld", lo, msglist[i]);
524                         }
525                 }
526
527                 was_seen = is_seen;
528         }
529
530         /*
531          * We will have to stuff this string back into a 4096 byte buffer, so if it's
532          * larger than that now, truncate it by removing tokens from the beginning.
533          * The limit of 100 iterations is there to prevent an infinite loop in case
534          * something unexpected happens.
535          */
536         int number_of_truncations = 0;
537         while ( (StrLength(vset) > SIZ) && (number_of_truncations < 100) ) {
538                 StrBufRemove_token(vset, 0, ',');
539                 ++number_of_truncations;
540         }
541
542         /*
543          * If we're truncating the sequence set of messages marked with the 'seen' flag,
544          * we want the earliest messages (the truncated ones) to be marked, not unmarked.
545          * Otherwise messages at the beginning will suddenly appear to be 'unseen'.
546          */
547         if ( (which_set == ctdlsetseen_seen) && (number_of_truncations > 0) ) {
548                 StrBuf *first_tok;
549                 first_tok = NewStrBuf();
550                 StrBufExtract_token(first_tok, vset, 0, ',');
551                 StrBufRemove_token(vset, 0, ',');
552
553                 if (StrBufNum_tokens(first_tok, ':') > 1) {
554                         StrBufRemove_token(first_tok, 0, ':');
555                 }
556                 
557                 StrBuf *new_set;
558                 new_set = NewStrBuf();
559                 StrBufAppendBufPlain(new_set, HKEY("1:"), 0);
560                 StrBufAppendBuf(new_set, first_tok, 0);
561                 StrBufAppendBufPlain(new_set, HKEY(":"), 0);
562                 StrBufAppendBuf(new_set, vset, 0);
563
564                 FreeStrBuf(&vset);
565                 FreeStrBuf(&first_tok);
566                 vset = new_set;
567         }
568
569         MSG_syslog(LOG_DEBUG, " after update: %s\n", ChrPtr(vset));
570
571         /* Decide which message set we're manipulating */
572         switch (which_set) {
573                 case ctdlsetseen_seen:
574                         safestrncpy(vbuf.v_seen, ChrPtr(vset), sizeof vbuf.v_seen);
575                         break;
576                 case ctdlsetseen_answered:
577                         safestrncpy(vbuf.v_answered, ChrPtr(vset), sizeof vbuf.v_answered);
578                         break;
579         }
580
581         free(is_set);
582         free(msglist);
583         CtdlSetRelationship(&vbuf, which_user, which_room);
584         FreeStrBuf(&vset);
585 }
586
587
588 /*
589  * API function to perform an operation for each qualifying message in the
590  * current room.  (Returns the number of messages processed.)
591  */
592 int CtdlForEachMessage(int mode, long ref, char *search_string,
593                         char *content_type,
594                         struct CtdlMessage *compare,
595                         ForEachMsgCallback CallBack,
596                         void *userdata)
597 {
598         struct CitContext *CCC = CC;
599         int a, i, j;
600         visit vbuf;
601         struct cdbdata *cdbfr;
602         long *msglist = NULL;
603         int num_msgs = 0;
604         int num_processed = 0;
605         long thismsg;
606         struct MetaData smi;
607         struct CtdlMessage *msg = NULL;
608         int is_seen = 0;
609         long lastold = 0L;
610         int printed_lastold = 0;
611         int num_search_msgs = 0;
612         long *search_msgs = NULL;
613         regex_t re;
614         int need_to_free_re = 0;
615         regmatch_t pm;
616
617         if ((content_type) && (!IsEmptyStr(content_type))) {
618                 regcomp(&re, content_type, 0);
619                 need_to_free_re = 1;
620         }
621
622         /* Learn about the user and room in question */
623         if (server_shutting_down) {
624                 if (need_to_free_re) regfree(&re);
625                 return -1;
626         }
627         CtdlGetUser(&CCC->user, CCC->curr_user);
628
629         if (server_shutting_down) {
630                 if (need_to_free_re) regfree(&re);
631                 return -1;
632         }
633         CtdlGetRelationship(&vbuf, &CCC->user, &CCC->room);
634
635         if (server_shutting_down) {
636                 if (need_to_free_re) regfree(&re);
637                 return -1;
638         }
639
640         /* Load the message list */
641         cdbfr = cdb_fetch(CDB_MSGLISTS, &CCC->room.QRnumber, sizeof(long));
642         if (cdbfr == NULL) {
643                 if (need_to_free_re) regfree(&re);
644                 return 0;       /* No messages at all?  No further action. */
645         }
646
647         msglist = (long *) cdbfr->ptr;
648         num_msgs = cdbfr->len / sizeof(long);
649
650         cdbfr->ptr = NULL;      /* clear this so that cdb_free() doesn't free it */
651         cdb_free(cdbfr);        /* we own this memory now */
652
653         /*
654          * Now begin the traversal.
655          */
656         if (num_msgs > 0) for (a = 0; a < num_msgs; ++a) {
657
658                 /* If the caller is looking for a specific MIME type, filter
659                  * out all messages which are not of the type requested.
660                  */
661                 if ((content_type != NULL) && (!IsEmptyStr(content_type))) {
662
663                         /* This call to GetMetaData() sits inside this loop
664                          * so that we only do the extra database read per msg
665                          * if we need to.  Doing the extra read all the time
666                          * really kills the server.  If we ever need to use
667                          * metadata for another search criterion, we need to
668                          * move the read somewhere else -- but still be smart
669                          * enough to only do the read if the caller has
670                          * specified something that will need it.
671                          */
672                         if (server_shutting_down) {
673                                 if (need_to_free_re) regfree(&re);
674                                 free(msglist);
675                                 return -1;
676                         }
677                         GetMetaData(&smi, msglist[a]);
678
679                         /* if (strcasecmp(smi.meta_content_type, content_type)) { old non-regex way */
680                         if (regexec(&re, smi.meta_content_type, 1, &pm, 0) != 0) {
681                                 msglist[a] = 0L;
682                         }
683                 }
684         }
685
686         num_msgs = sort_msglist(msglist, num_msgs);
687
688         /* If a template was supplied, filter out the messages which
689          * don't match.  (This could induce some delays!)
690          */
691         if (num_msgs > 0) {
692                 if (compare != NULL) {
693                         for (a = 0; a < num_msgs; ++a) {
694                                 if (server_shutting_down) {
695                                         if (need_to_free_re) regfree(&re);
696                                         free(msglist);
697                                         return -1;
698                                 }
699                                 msg = CtdlFetchMessage(msglist[a], 1);
700                                 if (msg != NULL) {
701                                         if (CtdlMsgCmp(msg, compare)) {
702                                                 msglist[a] = 0L;
703                                         }
704                                         CtdlFreeMessage(msg);
705                                 }
706                         }
707                 }
708         }
709
710         /* If a search string was specified, get a message list from
711          * the full text index and remove messages which aren't on both
712          * lists.
713          *
714          * How this works:
715          * Since the lists are sorted and strictly ascending, and the
716          * output list is guaranteed to be shorter than or equal to the
717          * input list, we overwrite the bottom of the input list.  This
718          * eliminates the need to memmove big chunks of the list over and
719          * over again.
720          */
721         if ( (num_msgs > 0) && (mode == MSGS_SEARCH) && (search_string) ) {
722
723                 /* Call search module via hook mechanism.
724                  * NULL means use any search function available.
725                  * otherwise replace with a char * to name of search routine
726                  */
727                 CtdlModuleDoSearch(&num_search_msgs, &search_msgs, search_string, "fulltext");
728
729                 if (num_search_msgs > 0) {
730         
731                         int orig_num_msgs;
732
733                         orig_num_msgs = num_msgs;
734                         num_msgs = 0;
735                         for (i=0; i<orig_num_msgs; ++i) {
736                                 for (j=0; j<num_search_msgs; ++j) {
737                                         if (msglist[i] == search_msgs[j]) {
738                                                 msglist[num_msgs++] = msglist[i];
739                                         }
740                                 }
741                         }
742                 }
743                 else {
744                         num_msgs = 0;   /* No messages qualify */
745                 }
746                 if (search_msgs != NULL) free(search_msgs);
747
748                 /* Now that we've purged messages which don't contain the search
749                  * string, treat a MSGS_SEARCH just like a MSGS_ALL from this
750                  * point on.
751                  */
752                 mode = MSGS_ALL;
753         }
754
755         /*
756          * Now iterate through the message list, according to the
757          * criteria supplied by the caller.
758          */
759         if (num_msgs > 0)
760                 for (a = 0; a < num_msgs; ++a) {
761                         if (server_shutting_down) {
762                                 if (need_to_free_re) regfree(&re);
763                                 free(msglist);
764                                 return num_processed;
765                         }
766                         thismsg = msglist[a];
767                         if (mode == MSGS_ALL) {
768                                 is_seen = 0;
769                         }
770                         else {
771                                 is_seen = is_msg_in_sequence_set(
772                                                         vbuf.v_seen, thismsg);
773                                 if (is_seen) lastold = thismsg;
774                         }
775                         if ((thismsg > 0L)
776                             && (
777
778                                        (mode == MSGS_ALL)
779                                        || ((mode == MSGS_OLD) && (is_seen))
780                                        || ((mode == MSGS_NEW) && (!is_seen))
781                                        || ((mode == MSGS_LAST) && (a >= (num_msgs - ref)))
782                                    || ((mode == MSGS_FIRST) && (a < ref))
783                                 || ((mode == MSGS_GT) && (thismsg > ref))
784                                 || ((mode == MSGS_LT) && (thismsg < ref))
785                                 || ((mode == MSGS_EQ) && (thismsg == ref))
786                             )
787                             ) {
788                                 if ((mode == MSGS_NEW) && (CCC->user.flags & US_LASTOLD) && (lastold > 0L) && (printed_lastold == 0) && (!is_seen)) {
789                                         if (CallBack)
790                                                 CallBack(lastold, userdata);
791                                         printed_lastold = 1;
792                                         ++num_processed;
793                                 }
794                                 if (CallBack) CallBack(thismsg, userdata);
795                                 ++num_processed;
796                         }
797                 }
798         if (need_to_free_re) regfree(&re);
799
800         /*
801          * We cache the most recent msglist in order to do security checks later
802          */
803         if (CCC->client_socket > 0) {
804                 if (CCC->cached_msglist != NULL) {
805                         free(CCC->cached_msglist);
806                 }
807                 CCC->cached_msglist = msglist;
808                 CCC->cached_num_msgs = num_msgs;
809         }
810         else {
811                 free(msglist);
812         }
813
814         return num_processed;
815 }
816
817
818
819 /*
820  * cmd_msgs()  -  get list of message #'s in this room
821  *              implements the MSGS server command using CtdlForEachMessage()
822  */
823 void cmd_msgs(char *cmdbuf)
824 {
825         int mode = 0;
826         char which[16];
827         char buf[256];
828         char tfield[256];
829         char tvalue[256];
830         int cm_ref = 0;
831         int i;
832         int with_template = 0;
833         struct CtdlMessage *template = NULL;
834         char search_string[1024];
835         ForEachMsgCallback CallBack;
836
837         if (CtdlAccessCheck(ac_logged_in_or_guest)) return;
838
839         extract_token(which, cmdbuf, 0, '|', sizeof which);
840         cm_ref = extract_int(cmdbuf, 1);
841         extract_token(search_string, cmdbuf, 1, '|', sizeof search_string);
842         with_template = extract_int(cmdbuf, 2);
843         switch (extract_int(cmdbuf, 3))
844         {
845         default:
846         case MSG_HDRS_BRIEF:
847                 CallBack = simple_listing;
848                 break;
849         case MSG_HDRS_ALL:
850                 CallBack = headers_listing;
851                 break;
852         case MSG_HDRS_EUID:
853                 CallBack = headers_euid;
854                 break;
855         }
856
857         strcat(which, "   ");
858         if (!strncasecmp(which, "OLD", 3))
859                 mode = MSGS_OLD;
860         else if (!strncasecmp(which, "NEW", 3))
861                 mode = MSGS_NEW;
862         else if (!strncasecmp(which, "FIRST", 5))
863                 mode = MSGS_FIRST;
864         else if (!strncasecmp(which, "LAST", 4))
865                 mode = MSGS_LAST;
866         else if (!strncasecmp(which, "GT", 2))
867                 mode = MSGS_GT;
868         else if (!strncasecmp(which, "LT", 2))
869                 mode = MSGS_LT;
870         else if (!strncasecmp(which, "SEARCH", 6))
871                 mode = MSGS_SEARCH;
872         else
873                 mode = MSGS_ALL;
874
875         if ( (mode == MSGS_SEARCH) && (!config.c_enable_fulltext) ) {
876                 cprintf("%d Full text index is not enabled on this server.\n",
877                         ERROR + CMD_NOT_SUPPORTED);
878                 return;
879         }
880
881         if (with_template) {
882                 unbuffer_output();
883                 cprintf("%d Send template then receive message list\n",
884                         START_CHAT_MODE);
885                 template = (struct CtdlMessage *)
886                         malloc(sizeof(struct CtdlMessage));
887                 memset(template, 0, sizeof(struct CtdlMessage));
888                 template->cm_magic = CTDLMESSAGE_MAGIC;
889                 template->cm_anon_type = MES_NORMAL;
890
891                 while(client_getln(buf, sizeof buf) >= 0 && strcmp(buf,"000")) {
892                         extract_token(tfield, buf, 0, '|', sizeof tfield);
893                         extract_token(tvalue, buf, 1, '|', sizeof tvalue);
894                         for (i='A'; i<='Z'; ++i) if (msgkeys[i]!=NULL) {
895                                 if (!strcasecmp(tfield, msgkeys[i])) {
896                                         template->cm_fields[i] =
897                                                 strdup(tvalue);
898                                 }
899                         }
900                 }
901                 buffer_output();
902         }
903         else {
904                 cprintf("%d  \n", LISTING_FOLLOWS);
905         }
906
907         CtdlForEachMessage(mode,
908                            ( (mode == MSGS_SEARCH) ? 0 : cm_ref ),
909                            ( (mode == MSGS_SEARCH) ? search_string : NULL ),
910                            NULL,
911                            template,
912                            CallBack,
913                            NULL);
914         if (template != NULL) CtdlFreeMessage(template);
915         cprintf("000\n");
916 }
917
918
919
920
921 /* 
922  * help_subst()  -  support routine for help file viewer
923  */
924 void help_subst(char *strbuf, char *source, char *dest)
925 {
926         char workbuf[SIZ];
927         int p;
928
929         while (p = pattern2(strbuf, source), (p >= 0)) {
930                 strcpy(workbuf, &strbuf[p + strlen(source)]);
931                 strcpy(&strbuf[p], dest);
932                 strcat(strbuf, workbuf);
933         }
934 }
935
936
937 void do_help_subst(char *buffer)
938 {
939         char buf2[16];
940
941         help_subst(buffer, "^nodename", config.c_nodename);
942         help_subst(buffer, "^humannode", config.c_humannode);
943         help_subst(buffer, "^fqdn", config.c_fqdn);
944         help_subst(buffer, "^username", CC->user.fullname);
945         snprintf(buf2, sizeof buf2, "%ld", CC->user.usernum);
946         help_subst(buffer, "^usernum", buf2);
947         help_subst(buffer, "^sysadm", config.c_sysadm);
948         help_subst(buffer, "^variantname", CITADEL);
949         snprintf(buf2, sizeof buf2, "%d", config.c_maxsessions);
950         help_subst(buffer, "^maxsessions", buf2);
951         help_subst(buffer, "^bbsdir", ctdl_message_dir);
952 }
953
954
955
956 /*
957  * memfmout()  -  Citadel text formatter and paginator.
958  *           Although the original purpose of this routine was to format
959  *           text to the reader's screen width, all we're really using it
960  *           for here is to format text out to 80 columns before sending it
961  *           to the client.  The client software may reformat it again.
962  */
963 void memfmout(
964         char *mptr,             /* where are we going to get our text from? */
965         const char *nl          /* string to terminate lines with */
966 ) {
967         struct CitContext *CCC = CC;
968         int column = 0;
969         unsigned char ch = 0;
970         char outbuf[1024];
971         int len = 0;
972         int nllen = 0;
973
974         if (!mptr) return;
975         nllen = strlen(nl);
976         while (ch=*(mptr++), ch != 0) {
977
978                 if (ch == '\n') {
979                         if (client_write(outbuf, len) == -1)
980                         {
981                                 MSGM_syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
982                                 return;
983                         }
984                         len = 0;
985                         if (client_write(nl, nllen) == -1)
986                         {
987                                 MSGM_syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
988                                 return;
989                         }
990                         column = 0;
991                 }
992                 else if (ch == '\r') {
993                         /* Ignore carriage returns.  Newlines are always LF or CRLF but never CR. */
994                 }
995                 else if (isspace(ch)) {
996                         if (column > 72) {              /* Beyond 72 columns, break on the next space */
997                                 if (client_write(outbuf, len) == -1)
998                                 {
999                                         MSGM_syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
1000                                         return;
1001                                 }
1002                                 len = 0;
1003                                 if (client_write(nl, nllen) == -1)
1004                                 {
1005                                         MSGM_syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
1006                                         return;
1007                                 }
1008                                 column = 0;
1009                         }
1010                         else {
1011                                 outbuf[len++] = ch;
1012                                 ++column;
1013                         }
1014                 }
1015                 else {
1016                         outbuf[len++] = ch;
1017                         ++column;
1018                         if (column > 1000) {            /* Beyond 1000 columns, break anywhere */
1019                                 if (client_write(outbuf, len) == -1)
1020                                 {
1021                                         MSGM_syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
1022                                         return;
1023                                 }
1024                                 len = 0;
1025                                 if (client_write(nl, nllen) == -1)
1026                                 {
1027                                         MSGM_syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
1028                                         return;
1029                                 }
1030                                 column = 0;
1031                         }
1032                 }
1033         }
1034         if (len) {
1035                 if (client_write(outbuf, len) == -1)
1036                 {
1037                         MSGM_syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
1038                         return;
1039                 }
1040                 len = 0;
1041                 client_write(nl, nllen);
1042                 column = 0;
1043         }
1044 }
1045
1046
1047
1048 /*
1049  * Callback function for mime parser that simply lists the part
1050  */
1051 void list_this_part(char *name, char *filename, char *partnum, char *disp,
1052                     void *content, char *cbtype, char *cbcharset, size_t length, char *encoding,
1053                     char *cbid, void *cbuserdata)
1054 {
1055         struct ma_info *ma;
1056         
1057         ma = (struct ma_info *)cbuserdata;
1058         if (ma->is_ma == 0) {
1059                 cprintf("part=%s|%s|%s|%s|%s|%ld|%s|%s\n",
1060                         name, 
1061                         filename, 
1062                         partnum, 
1063                         disp, 
1064                         cbtype, 
1065                         (long)length, 
1066                         cbid, 
1067                         cbcharset);
1068         }
1069 }
1070
1071 /* 
1072  * Callback function for multipart prefix
1073  */
1074 void list_this_pref(char *name, char *filename, char *partnum, char *disp,
1075                     void *content, char *cbtype, char *cbcharset, size_t length, char *encoding,
1076                     char *cbid, void *cbuserdata)
1077 {
1078         struct ma_info *ma;
1079         
1080         ma = (struct ma_info *)cbuserdata;
1081         if (!strcasecmp(cbtype, "multipart/alternative")) {
1082                 ++ma->is_ma;
1083         }
1084
1085         if (ma->is_ma == 0) {
1086                 cprintf("pref=%s|%s\n", partnum, cbtype);
1087         }
1088 }
1089
1090 /* 
1091  * Callback function for multipart sufffix
1092  */
1093 void list_this_suff(char *name, char *filename, char *partnum, char *disp,
1094                     void *content, char *cbtype, char *cbcharset, size_t length, char *encoding,
1095                     char *cbid, void *cbuserdata)
1096 {
1097         struct ma_info *ma;
1098         
1099         ma = (struct ma_info *)cbuserdata;
1100         if (ma->is_ma == 0) {
1101                 cprintf("suff=%s|%s\n", partnum, cbtype);
1102         }
1103         if (!strcasecmp(cbtype, "multipart/alternative")) {
1104                 --ma->is_ma;
1105         }
1106 }
1107
1108
1109 /*
1110  * Callback function for mime parser that opens a section for downloading
1111  */
1112 void mime_download(char *name, char *filename, char *partnum, char *disp,
1113                    void *content, char *cbtype, char *cbcharset, size_t length,
1114                    char *encoding, char *cbid, void *cbuserdata)
1115 {
1116         int rv = 0;
1117         CitContext *CCC = MyContext();
1118
1119         /* Silently go away if there's already a download open. */
1120         if (CCC->download_fp != NULL)
1121                 return;
1122
1123         if (
1124                 (!IsEmptyStr(partnum) && (!strcasecmp(CCC->download_desired_section, partnum)))
1125         ||      (!IsEmptyStr(cbid) && (!strcasecmp(CCC->download_desired_section, cbid)))
1126         ) {
1127                 CCC->download_fp = tmpfile();
1128                 if (CCC->download_fp == NULL) {
1129                         MSG_syslog(LOG_EMERG, "mime_download(): Couldn't write: %s\n",
1130                                     strerror(errno));
1131                         cprintf("%d cannot open temporary file: %s\n",
1132                                 ERROR + INTERNAL_ERROR, strerror(errno));
1133                         return;
1134                 }
1135         
1136                 rv = fwrite(content, length, 1, CC->download_fp);
1137                 if (rv <= 0) {
1138                         MSG_syslog(LOG_EMERG, "mime_download(): Couldn't write: %s\n",
1139                                    strerror(errno));
1140                         cprintf("%d unable to write tempfile.\n",
1141                                 ERROR + TOO_BIG);
1142                         fclose(CCC->download_fp);
1143                         CCC->download_fp = NULL;
1144                         return;
1145                 }
1146                 fflush(CCC->download_fp);
1147                 rewind(CCC->download_fp);
1148         
1149                 OpenCmdResult(filename, cbtype);
1150         }
1151 }
1152
1153
1154
1155 /*
1156  * Callback function for mime parser that outputs a section all at once.
1157  * We can specify the desired section by part number *or* content-id.
1158  */
1159 void mime_spew_section(char *name, char *filename, char *partnum, char *disp,
1160                    void *content, char *cbtype, char *cbcharset, size_t length,
1161                    char *encoding, char *cbid, void *cbuserdata)
1162 {
1163         int *found_it = (int *)cbuserdata;
1164
1165         if (
1166                 (!IsEmptyStr(partnum) && (!strcasecmp(CC->download_desired_section, partnum)))
1167         ||      (!IsEmptyStr(cbid) && (!strcasecmp(CC->download_desired_section, cbid)))
1168         ) {
1169                 *found_it = 1;
1170                 cprintf("%d %d|-1|%s|%s|%s\n",
1171                         BINARY_FOLLOWS,
1172                         (int)length,
1173                         filename,
1174                         cbtype,
1175                         cbcharset
1176                 );
1177                 client_write(content, length);
1178         }
1179 }
1180
1181
1182 /*
1183  * Load a message from disk into memory.
1184  * This is used by CtdlOutputMsg() and other fetch functions.
1185  *
1186  * NOTE: Caller is responsible for freeing the returned CtdlMessage struct
1187  *       using the CtdlMessageFree() function.
1188  */
1189 struct CtdlMessage *CtdlFetchMessage(long msgnum, int with_body)
1190 {
1191         struct CitContext *CCC = CC;
1192         struct cdbdata *dmsgtext;
1193         struct CtdlMessage *ret = NULL;
1194         char *mptr;
1195         char *upper_bound;
1196         cit_uint8_t ch;
1197         cit_uint8_t field_header;
1198
1199         MSG_syslog(LOG_DEBUG, "CtdlFetchMessage(%ld, %d)\n", msgnum, with_body);
1200         dmsgtext = cdb_fetch(CDB_MSGMAIN, &msgnum, sizeof(long));
1201         if (dmsgtext == NULL) {
1202                 return NULL;
1203         }
1204         mptr = dmsgtext->ptr;
1205         upper_bound = mptr + dmsgtext->len;
1206
1207         /* Parse the three bytes that begin EVERY message on disk.
1208          * The first is always 0xFF, the on-disk magic number.
1209          * The second is the anonymous/public type byte.
1210          * The third is the format type byte (vari, fixed, or MIME).
1211          */
1212         ch = *mptr++;
1213         if (ch != 255) {
1214                 MSG_syslog(LOG_ERR, "Message %ld appears to be corrupted.\n", msgnum);
1215                 cdb_free(dmsgtext);
1216                 return NULL;
1217         }
1218         ret = (struct CtdlMessage *) malloc(sizeof(struct CtdlMessage));
1219         memset(ret, 0, sizeof(struct CtdlMessage));
1220
1221         ret->cm_magic = CTDLMESSAGE_MAGIC;
1222         ret->cm_anon_type = *mptr++;    /* Anon type byte */
1223         ret->cm_format_type = *mptr++;  /* Format type byte */
1224
1225         /*
1226          * The rest is zero or more arbitrary fields.  Load them in.
1227          * We're done when we encounter either a zero-length field or
1228          * have just processed the 'M' (message text) field.
1229          */
1230         do {
1231                 if (mptr >= upper_bound) {
1232                         break;
1233                 }
1234                 field_header = *mptr++;
1235                 ret->cm_fields[field_header] = strdup(mptr);
1236
1237                 while (*mptr++ != 0);   /* advance to next field */
1238
1239         } while ((mptr < upper_bound) && (field_header != 'M'));
1240
1241         cdb_free(dmsgtext);
1242
1243         /* Always make sure there's something in the msg text field.  If
1244          * it's NULL, the message text is most likely stored separately,
1245          * so go ahead and fetch that.  Failing that, just set a dummy
1246          * body so other code doesn't barf.
1247          */
1248         if ( (ret->cm_fields['M'] == NULL) && (with_body) ) {
1249                 dmsgtext = cdb_fetch(CDB_BIGMSGS, &msgnum, sizeof(long));
1250                 if (dmsgtext != NULL) {
1251                         ret->cm_fields['M'] = dmsgtext->ptr;
1252                         dmsgtext->ptr = NULL;
1253                         cdb_free(dmsgtext);
1254                 }
1255         }
1256         if (ret->cm_fields['M'] == NULL) {
1257                 ret->cm_fields['M'] = strdup("\r\n\r\n (no text)\r\n");
1258         }
1259
1260         /* Perform "before read" hooks (aborting if any return nonzero) */
1261         if (PerformMessageHooks(ret, EVT_BEFOREREAD) > 0) {
1262                 CtdlFreeMessage(ret);
1263                 return NULL;
1264         }
1265
1266         return (ret);
1267 }
1268
1269
1270 /*
1271  * Returns 1 if the supplied pointer points to a valid Citadel message.
1272  * If the pointer is NULL or the magic number check fails, returns 0.
1273  */
1274 int is_valid_message(struct CtdlMessage *msg) {
1275         if (msg == NULL)
1276                 return 0;
1277         if ((msg->cm_magic) != CTDLMESSAGE_MAGIC) {
1278                 struct CitContext *CCC = CC;
1279                 MSGM_syslog(LOG_WARNING, "is_valid_message() -- self-check failed\n");
1280                 return 0;
1281         }
1282         return 1;
1283 }
1284
1285 void CtdlFreeMessageContents(struct CtdlMessage *msg)
1286 {
1287         int i;
1288
1289         for (i = 0; i < 256; ++i)
1290                 if (msg->cm_fields[i] != NULL) {
1291                         free(msg->cm_fields[i]);
1292                 }
1293
1294         msg->cm_magic = 0;      /* just in case */
1295 }
1296 /*
1297  * 'Destructor' for struct CtdlMessage
1298  */
1299 void CtdlFreeMessage(struct CtdlMessage *msg)
1300 {
1301         if (is_valid_message(msg) == 0) 
1302         {
1303                 if (msg != NULL) free (msg);
1304                 return;
1305         }
1306         CtdlFreeMessageContents(msg);
1307         free(msg);
1308 }
1309
1310
1311 /*
1312  * Pre callback function for multipart/alternative
1313  *
1314  * NOTE: this differs from the standard behavior for a reason.  Normally when
1315  *       displaying multipart/alternative you want to show the _last_ usable
1316  *       format in the message.  Here we show the _first_ one, because it's
1317  *       usually text/plain.  Since this set of functions is designed for text
1318  *       output to non-MIME-aware clients, this is the desired behavior.
1319  *
1320  */
1321 void fixed_output_pre(char *name, char *filename, char *partnum, char *disp,
1322                 void *content, char *cbtype, char *cbcharset, size_t length, char *encoding,
1323                 char *cbid, void *cbuserdata)
1324 {
1325         struct CitContext *CCC = CC;
1326         struct ma_info *ma;
1327         
1328         ma = (struct ma_info *)cbuserdata;
1329         MSG_syslog(LOG_DEBUG, "fixed_output_pre() type=<%s>\n", cbtype);        
1330         if (!strcasecmp(cbtype, "multipart/alternative")) {
1331                 ++ma->is_ma;
1332                 ma->did_print = 0;
1333         }
1334         if (!strcasecmp(cbtype, "message/rfc822")) {
1335                 ++ma->freeze;
1336         }
1337 }
1338
1339 /*
1340  * Post callback function for multipart/alternative
1341  */
1342 void fixed_output_post(char *name, char *filename, char *partnum, char *disp,
1343                 void *content, char *cbtype, char *cbcharset, size_t length,
1344                 char *encoding, char *cbid, void *cbuserdata)
1345 {
1346         struct CitContext *CCC = CC;
1347         struct ma_info *ma;
1348         
1349         ma = (struct ma_info *)cbuserdata;
1350         MSG_syslog(LOG_DEBUG, "fixed_output_post() type=<%s>\n", cbtype);       
1351         if (!strcasecmp(cbtype, "multipart/alternative")) {
1352                 --ma->is_ma;
1353                 ma->did_print = 0;
1354         }
1355         if (!strcasecmp(cbtype, "message/rfc822")) {
1356                 --ma->freeze;
1357         }
1358 }
1359
1360 /*
1361  * Inline callback function for mime parser that wants to display text
1362  */
1363 void fixed_output(char *name, char *filename, char *partnum, char *disp,
1364                 void *content, char *cbtype, char *cbcharset, size_t length,
1365                 char *encoding, char *cbid, void *cbuserdata)
1366 {
1367         struct CitContext *CCC = CC;
1368         char *ptr;
1369         char *wptr;
1370         size_t wlen;
1371         struct ma_info *ma;
1372
1373         ma = (struct ma_info *)cbuserdata;
1374
1375         MSG_syslog(LOG_DEBUG,
1376                 "fixed_output() part %s: %s (%s) (%ld bytes)\n",
1377                 partnum, filename, cbtype, (long)length);
1378
1379         /*
1380          * If we're in the middle of a multipart/alternative scope and
1381          * we've already printed another section, skip this one.
1382          */     
1383         if ( (ma->is_ma) && (ma->did_print) ) {
1384                 MSG_syslog(LOG_DEBUG, "Skipping part %s (%s)\n", partnum, cbtype);
1385                 return;
1386         }
1387         ma->did_print = 1;
1388
1389         if ( (!strcasecmp(cbtype, "text/plain")) 
1390            || (IsEmptyStr(cbtype)) ) {
1391                 wptr = content;
1392                 if (length > 0) {
1393                         client_write(wptr, length);
1394                         if (wptr[length-1] != '\n') {
1395                                 cprintf("\n");
1396                         }
1397                 }
1398                 return;
1399         }
1400
1401         if (!strcasecmp(cbtype, "text/html")) {
1402                 ptr = html_to_ascii(content, length, 80, 0);
1403                 wlen = strlen(ptr);
1404                 client_write(ptr, wlen);
1405                 if ((wlen > 0) && (ptr[wlen-1] != '\n')) {
1406                         cprintf("\n");
1407                 }
1408                 free(ptr);
1409                 return;
1410         }
1411
1412         if (ma->use_fo_hooks) {
1413                 if (PerformFixedOutputHooks(cbtype, content, length)) {
1414                 /* above function returns nonzero if it handled the part */
1415                         return;
1416                 }
1417         }
1418
1419         if (strncasecmp(cbtype, "multipart/", 10)) {
1420                 cprintf("Part %s: %s (%s) (%ld bytes)\r\n",
1421                         partnum, filename, cbtype, (long)length);
1422                 return;
1423         }
1424 }
1425
1426 /*
1427  * The client is elegant and sophisticated and wants to be choosy about
1428  * MIME content types, so figure out which multipart/alternative part
1429  * we're going to send.
1430  *
1431  * We use a system of weights.  When we find a part that matches one of the
1432  * MIME types we've declared as preferential, we can store it in ma->chosen_part
1433  * and then set ma->chosen_pref to that MIME type's position in our preference
1434  * list.  If we then hit another match, we only replace the first match if
1435  * the preference value is lower.
1436  */
1437 void choose_preferred(char *name, char *filename, char *partnum, char *disp,
1438                 void *content, char *cbtype, char *cbcharset, size_t length,
1439                 char *encoding, char *cbid, void *cbuserdata)
1440 {
1441         struct CitContext *CCC = CC;
1442         char buf[1024];
1443         int i;
1444         struct ma_info *ma;
1445         
1446         ma = (struct ma_info *)cbuserdata;
1447
1448         // NOTE: REMOVING THIS CONDITIONAL FIXES BUG 220
1449         //       http://bugzilla.citadel.org/show_bug.cgi?id=220
1450         // I don't know if there are any side effects!  Please TEST TEST TEST
1451         //if (ma->is_ma > 0) {
1452
1453         for (i=0; i<num_tokens(CCC->preferred_formats, '|'); ++i) {
1454                 extract_token(buf, CCC->preferred_formats, i, '|', sizeof buf);
1455                 if ( (!strcasecmp(buf, cbtype)) && (!ma->freeze) ) {
1456                         if (i < ma->chosen_pref) {
1457                                 MSG_syslog(LOG_DEBUG, "Setting chosen part: <%s>\n", partnum);
1458                                 safestrncpy(ma->chosen_part, partnum, sizeof ma->chosen_part);
1459                                 ma->chosen_pref = i;
1460                         }
1461                 }
1462         }
1463 }
1464
1465 /*
1466  * Now that we've chosen our preferred part, output it.
1467  */
1468 void output_preferred(char *name, 
1469                       char *filename, 
1470                       char *partnum, 
1471                       char *disp,
1472                       void *content, 
1473                       char *cbtype, 
1474                       char *cbcharset, 
1475                       size_t length,
1476                       char *encoding, 
1477                       char *cbid, 
1478                       void *cbuserdata)
1479 {
1480         struct CitContext *CCC = CC;
1481         int i;
1482         char buf[128];
1483         int add_newline = 0;
1484         char *text_content;
1485         struct ma_info *ma;
1486         char *decoded = NULL;
1487         size_t bytes_decoded;
1488         int rc = 0;
1489
1490         ma = (struct ma_info *)cbuserdata;
1491
1492         /* This is not the MIME part you're looking for... */
1493         if (strcasecmp(partnum, ma->chosen_part)) return;
1494
1495         /* If the content-type of this part is in our preferred formats
1496          * list, we can simply output it verbatim.
1497          */
1498         for (i=0; i<num_tokens(CCC->preferred_formats, '|'); ++i) {
1499                 extract_token(buf, CCC->preferred_formats, i, '|', sizeof buf);
1500                 if (!strcasecmp(buf, cbtype)) {
1501                         /* Yeah!  Go!  W00t!! */
1502                         if (ma->dont_decode == 0) 
1503                                 rc = mime_decode_now (content, 
1504                                                       length,
1505                                                       encoding,
1506                                                       &decoded,
1507                                                       &bytes_decoded);
1508                         if (rc < 0)
1509                                 break; /* Give us the chance, maybe theres another one. */
1510
1511                         if (rc == 0) text_content = (char *)content;
1512                         else {
1513                                 text_content = decoded;
1514                                 length = bytes_decoded;
1515                         }
1516
1517                         if (text_content[length-1] != '\n') {
1518                                 ++add_newline;
1519                         }
1520                         cprintf("Content-type: %s", cbtype);
1521                         if (!IsEmptyStr(cbcharset)) {
1522                                 cprintf("; charset=%s", cbcharset);
1523                         }
1524                         cprintf("\nContent-length: %d\n",
1525                                 (int)(length + add_newline) );
1526                         if (!IsEmptyStr(encoding)) {
1527                                 cprintf("Content-transfer-encoding: %s\n", encoding);
1528                         }
1529                         else {
1530                                 cprintf("Content-transfer-encoding: 7bit\n");
1531                         }
1532                         cprintf("X-Citadel-MSG4-Partnum: %s\n", partnum);
1533                         cprintf("\n");
1534                         if (client_write(text_content, length) == -1)
1535                         {
1536                                 MSGM_syslog(LOG_ERR, "output_preferred(): aborting due to write failure.\n");
1537                                 return;
1538                         }
1539                         if (add_newline) cprintf("\n");
1540                         if (decoded != NULL) free(decoded);
1541                         return;
1542                 }
1543         }
1544
1545         /* No translations required or possible: output as text/plain */
1546         cprintf("Content-type: text/plain\n\n");
1547         rc = 0;
1548         if (ma->dont_decode == 0)
1549                 rc = mime_decode_now (content, 
1550                                       length,
1551                                       encoding,
1552                                       &decoded,
1553                                       &bytes_decoded);
1554         if (rc < 0)
1555                 return; /* Give us the chance, maybe theres another one. */
1556         
1557         if (rc == 0) text_content = (char *)content;
1558         else {
1559                 text_content = decoded;
1560                 length = bytes_decoded;
1561         }
1562
1563         fixed_output(name, filename, partnum, disp, text_content, cbtype, cbcharset,
1564                         length, encoding, cbid, cbuserdata);
1565         if (decoded != NULL) free(decoded);
1566 }
1567
1568
1569 struct encapmsg {
1570         char desired_section[64];
1571         char *msg;
1572         size_t msglen;
1573 };
1574
1575
1576 /*
1577  * Callback function for
1578  */
1579 void extract_encapsulated_message(char *name, char *filename, char *partnum, char *disp,
1580                    void *content, char *cbtype, char *cbcharset, size_t length,
1581                    char *encoding, char *cbid, void *cbuserdata)
1582 {
1583         struct encapmsg *encap;
1584
1585         encap = (struct encapmsg *)cbuserdata;
1586
1587         /* Only proceed if this is the desired section... */
1588         if (!strcasecmp(encap->desired_section, partnum)) {
1589                 encap->msglen = length;
1590                 encap->msg = malloc(length + 2);
1591                 memcpy(encap->msg, content, length);
1592                 return;
1593         }
1594 }
1595
1596
1597 /*
1598  * Determine whether the specified message exists in the cached_msglist
1599  * (This is a security check)
1600  */
1601 int check_cached_msglist(long msgnum) {
1602         struct CitContext *CCC = CC;
1603
1604         /* cases in which we skip the check */
1605         if (!CCC) return om_ok;                                         /* not a session */
1606         if (CCC->client_socket <= 0) return om_ok;                      /* not a client session */
1607         if (CCC->cached_msglist == NULL) return om_access_denied;       /* no msglist fetched */
1608         if (CCC->cached_num_msgs == 0) return om_access_denied;         /* nothing to check */
1609
1610
1611         /* Do a binary search within the cached_msglist for the requested msgnum */
1612         int min = 0;
1613         int max = (CC->cached_num_msgs - 1);
1614
1615         while (max >= min) {
1616                 int middle = min + (max-min) / 2 ;
1617                 if (msgnum == CCC->cached_msglist[middle]) {
1618                         return om_ok;
1619                 }
1620                 if (msgnum > CC->cached_msglist[middle]) {
1621                         min = middle + 1;
1622                 }
1623                 else {
1624                         max = middle - 1;
1625                 }
1626         }
1627
1628         return om_access_denied;
1629 }
1630
1631
1632 /* 
1633  * Determine whether the currently logged in session has permission to read
1634  * messages in the current room.
1635  */
1636 int CtdlDoIHavePermissionToReadMessagesInThisRoom(void) {
1637         if (    (!(CC->logged_in))
1638                 && (!(CC->internal_pgm))
1639                 && (!config.c_guest_logins)
1640         ) {
1641                 return(om_not_logged_in);
1642         }
1643         return(om_ok);
1644 }
1645
1646
1647 /*
1648  * Get a message off disk.  (returns om_* values found in msgbase.h)
1649  * 
1650  */
1651 int CtdlOutputMsg(long msg_num,         /* message number (local) to fetch */
1652                   int mode,             /* how would you like that message? */
1653                   int headers_only,     /* eschew the message body? */
1654                   int do_proto,         /* do Citadel protocol responses? */
1655                   int crlf,             /* Use CRLF newlines instead of LF? */
1656                   char *section,        /* NULL or a message/rfc822 section */
1657                   int flags             /* various flags; see msgbase.h */
1658 ) {
1659         struct CitContext *CCC = CC;
1660         struct CtdlMessage *TheMessage = NULL;
1661         int retcode = CIT_OK;
1662         struct encapmsg encap;
1663         int r;
1664
1665         MSG_syslog(LOG_DEBUG, "CtdlOutputMsg(msgnum=%ld, mode=%d, section=%s)\n", 
1666                 msg_num, mode,
1667                 (section ? section : "<>")
1668         );
1669
1670         r = CtdlDoIHavePermissionToReadMessagesInThisRoom();
1671         if (r != om_ok) {
1672                 if (do_proto) {
1673                         if (r == om_not_logged_in) {
1674                                 cprintf("%d Not logged in.\n", ERROR + NOT_LOGGED_IN);
1675                         }
1676                         else {
1677                                 cprintf("%d An unknown error has occurred.\n", ERROR);
1678                         }
1679                 }
1680                 return(r);
1681         }
1682
1683         /*
1684          * Check to make sure the message is actually IN this room
1685          */
1686         r = check_cached_msglist(msg_num);
1687         if (r == om_access_denied) {
1688                 /* Not in the cache?  We get ONE shot to check it again. */
1689                 CtdlForEachMessage(MSGS_ALL, 0L, NULL, NULL, NULL, NULL, NULL);
1690                 r = check_cached_msglist(msg_num);
1691         }
1692         if (r != om_ok) {
1693                 MSG_syslog(LOG_DEBUG, "Security check fail: message %ld is not in %s\n",
1694                            msg_num, CCC->room.QRname
1695                 );
1696                 if (do_proto) {
1697                         if (r == om_access_denied) {
1698                                 cprintf("%d message %ld was not found in this room\n",
1699                                         ERROR + HIGHER_ACCESS_REQUIRED,
1700                                         msg_num
1701                                 );
1702                         }
1703                 }
1704                 return(r);
1705         }
1706
1707         /*
1708          * Fetch the message from disk.  If we're in HEADERS_FAST mode,
1709          * request that we don't even bother loading the body into memory.
1710          */
1711         if (headers_only == HEADERS_FAST) {
1712                 TheMessage = CtdlFetchMessage(msg_num, 0);
1713         }
1714         else {
1715                 TheMessage = CtdlFetchMessage(msg_num, 1);
1716         }
1717
1718         if (TheMessage == NULL) {
1719                 if (do_proto) cprintf("%d Can't locate msg %ld on disk\n",
1720                         ERROR + MESSAGE_NOT_FOUND, msg_num);
1721                 return(om_no_such_msg);
1722         }
1723
1724         /* Here is the weird form of this command, to process only an
1725          * encapsulated message/rfc822 section.
1726          */
1727         if (section) if (!IsEmptyStr(section)) if (strcmp(section, "0")) {
1728                 memset(&encap, 0, sizeof encap);
1729                 safestrncpy(encap.desired_section, section, sizeof encap.desired_section);
1730                 mime_parser(TheMessage->cm_fields['M'],
1731                         NULL,
1732                         *extract_encapsulated_message,
1733                         NULL, NULL, (void *)&encap, 0
1734                 );
1735                 CtdlFreeMessage(TheMessage);
1736                 TheMessage = NULL;
1737
1738                 if (encap.msg) {
1739                         encap.msg[encap.msglen] = 0;
1740                         TheMessage = convert_internet_message(encap.msg);
1741                         encap.msg = NULL;       /* no free() here, TheMessage owns it now */
1742
1743                         /* Now we let it fall through to the bottom of this
1744                          * function, because TheMessage now contains the
1745                          * encapsulated message instead of the top-level
1746                          * message.  Isn't that neat?
1747                          */
1748
1749                 }
1750                 else {
1751                         if (do_proto) {
1752                                 cprintf("%d msg %ld has no part %s\n",
1753                                         ERROR + MESSAGE_NOT_FOUND,
1754                                         msg_num,
1755                                         section);
1756                         }
1757                         retcode = om_no_such_msg;
1758                 }
1759
1760         }
1761
1762         /* Ok, output the message now */
1763         if (retcode == CIT_OK)
1764                 retcode = CtdlOutputPreLoadedMsg(TheMessage, mode, headers_only, do_proto, crlf, flags);
1765         CtdlFreeMessage(TheMessage);
1766
1767         return(retcode);
1768 }
1769
1770
1771 char *qp_encode_email_addrs(char *source)
1772 {
1773         struct CitContext *CCC = CC;
1774         char *user, *node, *name;
1775         const char headerStr[] = "=?UTF-8?Q?";
1776         char *Encoded;
1777         char *EncodedName;
1778         char *nPtr;
1779         int need_to_encode = 0;
1780         long SourceLen;
1781         long EncodedMaxLen;
1782         long nColons = 0;
1783         long *AddrPtr;
1784         long *AddrUtf8;
1785         long nAddrPtrMax = 50;
1786         long nmax;
1787         int InQuotes = 0;
1788         int i, n;
1789
1790         if (source == NULL) return source;
1791         if (IsEmptyStr(source)) return source;
1792         cit_backtrace();
1793         MSG_syslog(LOG_DEBUG, "qp_encode_email_addrs: [%s]\n", source);
1794
1795         AddrPtr = malloc (sizeof (long) * nAddrPtrMax);
1796         AddrUtf8 = malloc (sizeof (long) * nAddrPtrMax);
1797         memset(AddrUtf8, 0, sizeof (long) * nAddrPtrMax);
1798         *AddrPtr = 0;
1799         i = 0;
1800         while (!IsEmptyStr (&source[i])) {
1801                 if (nColons >= nAddrPtrMax){
1802                         long *ptr;
1803
1804                         ptr = (long *) malloc(sizeof (long) * nAddrPtrMax * 2);
1805                         memcpy (ptr, AddrPtr, sizeof (long) * nAddrPtrMax);
1806                         free (AddrPtr), AddrPtr = ptr;
1807
1808                         ptr = (long *) malloc(sizeof (long) * nAddrPtrMax * 2);
1809                         memset(&ptr[nAddrPtrMax], 0, 
1810                                sizeof (long) * nAddrPtrMax);
1811
1812                         memcpy (ptr, AddrUtf8, sizeof (long) * nAddrPtrMax);
1813                         free (AddrUtf8), AddrUtf8 = ptr;
1814                         nAddrPtrMax *= 2;                               
1815                 }
1816                 if (((unsigned char) source[i] < 32) || 
1817                     ((unsigned char) source[i] > 126)) {
1818                         need_to_encode = 1;
1819                         AddrUtf8[nColons] = 1;
1820                 }
1821                 if (source[i] == '"')
1822                         InQuotes = !InQuotes;
1823                 if (!InQuotes && source[i] == ',') {
1824                         AddrPtr[nColons] = i;
1825                         nColons++;
1826                 }
1827                 i++;
1828         }
1829         if (need_to_encode == 0) {
1830                 free(AddrPtr);
1831                 free(AddrUtf8);
1832                 return source;
1833         }
1834
1835         SourceLen = i;
1836         EncodedMaxLen = nColons * (sizeof(headerStr) + 3) + SourceLen * 3;
1837         Encoded = (char*) malloc (EncodedMaxLen);
1838
1839         for (i = 0; i < nColons; i++)
1840                 source[AddrPtr[i]++] = '\0';
1841         /* TODO: if libidn, this might get larger*/
1842         user = malloc(SourceLen + 1);
1843         node = malloc(SourceLen + 1);
1844         name = malloc(SourceLen + 1);
1845
1846         nPtr = Encoded;
1847         *nPtr = '\0';
1848         for (i = 0; i < nColons && nPtr != NULL; i++) {
1849                 nmax = EncodedMaxLen - (nPtr - Encoded);
1850                 if (AddrUtf8[i]) {
1851                         process_rfc822_addr(&source[AddrPtr[i]], 
1852                                             user,
1853                                             node,
1854                                             name);
1855                         /* TODO: libIDN here ! */
1856                         if (IsEmptyStr(name)) {
1857                                 n = snprintf(nPtr, nmax, 
1858                                              (i==0)?"%s@%s" : ",%s@%s",
1859                                              user, node);
1860                         }
1861                         else {
1862                                 EncodedName = rfc2047encode(name, strlen(name));                        
1863                                 n = snprintf(nPtr, nmax, 
1864                                              (i==0)?"%s <%s@%s>" : ",%s <%s@%s>",
1865                                              EncodedName, user, node);
1866                                 free(EncodedName);
1867                         }
1868                 }
1869                 else { 
1870                         n = snprintf(nPtr, nmax, 
1871                                      (i==0)?"%s" : ",%s",
1872                                      &source[AddrPtr[i]]);
1873                 }
1874                 if (n > 0 )
1875                         nPtr += n;
1876                 else { 
1877                         char *ptr, *nnPtr;
1878                         ptr = (char*) malloc(EncodedMaxLen * 2);
1879                         memcpy(ptr, Encoded, EncodedMaxLen);
1880                         nnPtr = ptr + (nPtr - Encoded), nPtr = nnPtr;
1881                         free(Encoded), Encoded = ptr;
1882                         EncodedMaxLen *= 2;
1883                         i--; /* do it once more with properly lengthened buffer */
1884                 }
1885         }
1886         for (i = 0; i < nColons; i++)
1887                 source[--AddrPtr[i]] = ',';
1888
1889         free(user);
1890         free(node);
1891         free(name);
1892         free(AddrUtf8);
1893         free(AddrPtr);
1894         return Encoded;
1895 }
1896
1897
1898 /* If the last item in a list of recipients was truncated to a partial address,
1899  * remove it completely in order to avoid choking libSieve
1900  */
1901 void sanitize_truncated_recipient(char *str)
1902 {
1903         if (!str) return;
1904         if (num_tokens(str, ',') < 2) return;
1905
1906         int len = strlen(str);
1907         if (len < 900) return;
1908         if (len > 998) str[998] = 0;
1909
1910         char *cptr = strrchr(str, ',');
1911         if (!cptr) return;
1912
1913         char *lptr = strchr(cptr, '<');
1914         char *rptr = strchr(cptr, '>');
1915
1916         if ( (lptr) && (rptr) && (rptr > lptr) ) return;
1917
1918         *cptr = 0;
1919 }
1920
1921
1922 void OutputCtdlMsgHeaders(
1923         struct CtdlMessage *TheMessage,
1924         int do_proto)           /* do Citadel protocol responses? */
1925 {
1926         char allkeys[30];
1927         int i, k, n;
1928         int suppress_f = 0;
1929         char buf[SIZ];
1930         char display_name[256];
1931
1932         /* begin header processing loop for Citadel message format */
1933         safestrncpy(display_name, "<unknown>", sizeof display_name);
1934         if (TheMessage->cm_fields['A']) {
1935                 strcpy(buf, TheMessage->cm_fields['A']);
1936                 if (TheMessage->cm_anon_type == MES_ANONONLY) {
1937                         safestrncpy(display_name, "****", sizeof display_name);
1938                 }
1939                 else if (TheMessage->cm_anon_type == MES_ANONOPT) {
1940                         safestrncpy(display_name, "anonymous", sizeof display_name);
1941                 }
1942                 else {
1943                         safestrncpy(display_name, buf, sizeof display_name);
1944                 }
1945                 if ((is_room_aide())
1946                     && ((TheMessage->cm_anon_type == MES_ANONONLY)
1947                         || (TheMessage->cm_anon_type == MES_ANONOPT))) {
1948                         size_t tmp = strlen(display_name);
1949                         snprintf(&display_name[tmp],
1950                                  sizeof display_name - tmp,
1951                                  " [%s]", buf);
1952                 }
1953         }
1954
1955         /* Don't show Internet address for users on the
1956          * local Citadel network.
1957          */
1958         suppress_f = 0;
1959         if (TheMessage->cm_fields['N'] != NULL)
1960                 if (!IsEmptyStr(TheMessage->cm_fields['N']))
1961                         if (haschar(TheMessage->cm_fields['N'], '.') == 0) {
1962                                 suppress_f = 1;
1963                         }
1964
1965         /* Now spew the header fields in the order we like them. */
1966         n = safestrncpy(allkeys, FORDER, sizeof allkeys);
1967         for (i=0; i<n; ++i) {
1968                 k = (int) allkeys[i];
1969                 if (k != 'M') {
1970                         if ( (TheMessage->cm_fields[k] != NULL)
1971                              && (msgkeys[k] != NULL) ) {
1972                                 if ((k == 'V') || (k == 'R') || (k == 'Y')) {
1973                                         sanitize_truncated_recipient(TheMessage->cm_fields[k]);
1974                                 }
1975                                 if (k == 'A') {
1976                                         if (do_proto) cprintf("%s=%s\n",
1977                                                               msgkeys[k],
1978                                                               display_name);
1979                                 }
1980                                 else if ((k == 'F') && (suppress_f)) {
1981                                         /* do nothing */
1982                                 }
1983                                 /* Masquerade display name if needed */
1984                                 else {
1985                                         if (do_proto) cprintf("%s=%s\n",
1986                                                               msgkeys[k],
1987                                                               TheMessage->cm_fields[k]
1988                                                 );
1989                                 }
1990                         }
1991                 }
1992         }
1993
1994 }
1995
1996 void OutputRFC822MsgHeaders(
1997         struct CtdlMessage *TheMessage,
1998         int flags,              /* should the bessage be exported clean */
1999         const char *nl,
2000         char *mid, long sizeof_mid,
2001         char *suser, long sizeof_suser,
2002         char *luser, long sizeof_luser,
2003         char *fuser, long sizeof_fuser,
2004         char *snode, long sizeof_snode)
2005 {
2006         char datestamp[100];
2007         int subject_found = 0;
2008         char buf[SIZ];
2009         int i, j, k;
2010         char *mptr = NULL;
2011         char *mpptr = NULL;
2012         char *hptr;
2013
2014         for (i = 0; i < 256; ++i) {
2015                 if (TheMessage->cm_fields[i]) {
2016                         mptr = mpptr = TheMessage->cm_fields[i];
2017                                 
2018                         if (i == 'A') {
2019                                 safestrncpy(luser, mptr, sizeof_luser);
2020                                 safestrncpy(suser, mptr, sizeof_suser);
2021                         }
2022                         else if (i == 'Y') {
2023                                 if ((flags & QP_EADDR) != 0) {
2024                                         mptr = qp_encode_email_addrs(mptr);
2025                                 }
2026                                 sanitize_truncated_recipient(mptr);
2027                                 cprintf("CC: %s%s", mptr, nl);
2028                         }
2029                         else if (i == 'P') {
2030                                 cprintf("Return-Path: %s%s", mptr, nl);
2031                         }
2032                         else if (i == 'L') {
2033                                 cprintf("List-ID: %s%s", mptr, nl);
2034                         }
2035                         else if (i == 'V') {
2036                                 if ((flags & QP_EADDR) != 0) 
2037                                         mptr = qp_encode_email_addrs(mptr);
2038                                 hptr = mptr;
2039                                 while ((*hptr != '\0') && isspace(*hptr))
2040                                         hptr ++;
2041                                 if (!IsEmptyStr(hptr))
2042                                         cprintf("Envelope-To: %s%s", hptr, nl);
2043                         }
2044                         else if (i == 'U') {
2045                                 cprintf("Subject: %s%s", mptr, nl);
2046                                 subject_found = 1;
2047                         }
2048                         else if (i == 'I')
2049                                 safestrncpy(mid, mptr, sizeof_mid); /// TODO: detect @ here and copy @nodename in if not found.
2050                         else if (i == 'F')
2051                                 safestrncpy(fuser, mptr, sizeof_fuser);
2052                         /* else if (i == 'O')
2053                            cprintf("X-Citadel-Room: %s%s",
2054                            mptr, nl); */
2055                         else if (i == 'N')
2056                                 safestrncpy(snode, mptr, sizeof_snode);
2057                         else if (i == 'R')
2058                         {
2059                                 if (haschar(mptr, '@') == 0)
2060                                 {
2061                                         sanitize_truncated_recipient(mptr);
2062                                         cprintf("To: %s@%s", mptr, config.c_fqdn);
2063                                         cprintf("%s", nl);
2064                                 }
2065                                 else
2066                                 {
2067                                         if ((flags & QP_EADDR) != 0) {
2068                                                 mptr = qp_encode_email_addrs(mptr);
2069                                         }
2070                                         sanitize_truncated_recipient(mptr);
2071                                         cprintf("To: %s", mptr);
2072                                         cprintf("%s", nl);
2073                                 }
2074                         }
2075                         else if (i == 'T') {
2076                                 datestring(datestamp, sizeof datestamp,
2077                                            atol(mptr), DATESTRING_RFC822);
2078                                 cprintf("Date: %s%s", datestamp, nl);
2079                         }
2080                         else if (i == 'W') {
2081                                 cprintf("References: ");
2082                                 k = num_tokens(mptr, '|');
2083                                 for (j=0; j<k; ++j) {
2084                                         extract_token(buf, mptr, j, '|', sizeof buf);
2085                                         cprintf("<%s>", buf);
2086                                         if (j == (k-1)) {
2087                                                 cprintf("%s", nl);
2088                                         }
2089                                         else {
2090                                                 cprintf(" ");
2091                                         }
2092                                 }
2093                         }
2094                         else if (i == 'K') {
2095                                 hptr = mptr;
2096                                 while ((*hptr != '\0') && isspace(*hptr))
2097                                         hptr ++;
2098                                 if (!IsEmptyStr(hptr))
2099                                         cprintf("Reply-To: %s%s", mptr, nl);
2100                         }
2101                         if (mptr != mpptr)
2102                                 free (mptr);
2103                 }
2104         }
2105         if (subject_found == 0) {
2106                 cprintf("Subject: (no subject)%s", nl);
2107         }
2108 }
2109
2110
2111 void Dump_RFC822HeadersBody(
2112         struct CtdlMessage *TheMessage,
2113         int headers_only,       /* eschew the message body? */
2114         int flags,              /* should the bessage be exported clean? */
2115
2116         const char *nl)
2117 {
2118         cit_uint8_t prev_ch;
2119         int eoh = 0;
2120         const char *StartOfText = StrBufNOTNULL;
2121         char outbuf[1024];
2122         int outlen = 0;
2123         int nllen = strlen(nl);
2124         char *mptr;
2125
2126         mptr = TheMessage->cm_fields['M'];
2127
2128
2129         prev_ch = '\0';
2130         while (*mptr != '\0') {
2131                 if (*mptr == '\r') {
2132                         /* do nothing */
2133                 }
2134                 else {
2135                         if ((!eoh) &&
2136                             (*mptr == '\n'))
2137                         {
2138                                 eoh = (*(mptr+1) == '\r') && (*(mptr+2) == '\n');
2139                                 if (!eoh)
2140                                         eoh = *(mptr+1) == '\n';
2141                                 if (eoh)
2142                                 {
2143                                         StartOfText = mptr;
2144                                         StartOfText = strchr(StartOfText, '\n');
2145                                         StartOfText = strchr(StartOfText, '\n');
2146                                 }
2147                         }
2148                         if (((headers_only == HEADERS_NONE) && (mptr >= StartOfText)) ||
2149                             ((headers_only == HEADERS_ONLY) && (mptr < StartOfText)) ||
2150                             ((headers_only != HEADERS_NONE) && 
2151                              (headers_only != HEADERS_ONLY))
2152                                 ) {
2153                                 if (*mptr == '\n') {
2154                                         memcpy(&outbuf[outlen], nl, nllen);
2155                                         outlen += nllen;
2156                                         outbuf[outlen] = '\0';
2157                                 }
2158                                 else {
2159                                         outbuf[outlen++] = *mptr;
2160                                 }
2161                         }
2162                 }
2163                 if (flags & ESC_DOT)
2164                 {
2165                         if ((prev_ch == '\n') && 
2166                             (*mptr == '.') && 
2167                             ((*(mptr+1) == '\r') || (*(mptr+1) == '\n')))
2168                         {
2169                                 outbuf[outlen++] = '.';
2170                         }
2171                         prev_ch = *mptr;
2172                 }
2173                 ++mptr;
2174                 if (outlen > 1000) {
2175                         if (client_write(outbuf, outlen) == -1)
2176                         {
2177                                 struct CitContext *CCC = CC;
2178                                 MSGM_syslog(LOG_ERR, "Dump_RFC822HeadersBody(): aborting due to write failure.\n");
2179                                 return;
2180                         }
2181                         outlen = 0;
2182                 }
2183         }
2184         if (outlen > 0) {
2185                 client_write(outbuf, outlen);
2186         }
2187 }
2188
2189
2190
2191 /* If the format type on disk is 1 (fixed-format), then we want
2192  * everything to be output completely literally ... regardless of
2193  * what message transfer format is in use.
2194  */
2195 void DumpFormatFixed(
2196         struct CtdlMessage *TheMessage,
2197         int mode,               /* how would you like that message? */
2198         const char *nl)
2199 {
2200         cit_uint8_t ch;
2201         char buf[SIZ];
2202         int buflen;
2203         int xlline = 0;
2204         int nllen = strlen (nl);
2205         char *mptr;
2206
2207         mptr = TheMessage->cm_fields['M'];
2208         
2209         if (mode == MT_MIME) {
2210                 cprintf("Content-type: text/plain\n\n");
2211         }
2212         *buf = '\0';
2213         buflen = 0;
2214         while (ch = *mptr++, ch > 0) {
2215                 if (ch == '\n')
2216                         ch = '\r';
2217
2218                 if ((buflen > 250) && (!xlline)){
2219                         int tbuflen;
2220                         tbuflen = buflen;
2221
2222                         while ((buflen > 0) && 
2223                                (!isspace(buf[buflen])))
2224                                 buflen --;
2225                         if (buflen == 0) {
2226                                 xlline = 1;
2227                         }
2228                         else {
2229                                 mptr -= tbuflen - buflen;
2230                                 buf[buflen] = '\0';
2231                                 ch = '\r';
2232                         }
2233                 }
2234                 /* if we reach the outer bounds of our buffer, 
2235                    abort without respect what whe purge. */
2236                 if (xlline && 
2237                     ((isspace(ch)) || 
2238                      (buflen > SIZ - nllen - 2)))
2239                         ch = '\r';
2240
2241                 if (ch == '\r') {
2242                         memcpy (&buf[buflen], nl, nllen);
2243                         buflen += nllen;
2244                         buf[buflen] = '\0';
2245
2246                         if (client_write(buf, buflen) == -1)
2247                         {
2248                                 struct CitContext *CCC = CC;
2249                                 MSGM_syslog(LOG_ERR, "DumpFormatFixed(): aborting due to write failure.\n");
2250                                 return;
2251                         }
2252                         *buf = '\0';
2253                         buflen = 0;
2254                         xlline = 0;
2255                 } else {
2256                         buf[buflen] = ch;
2257                         buflen++;
2258                 }
2259         }
2260         buf[buflen] = '\0';
2261         if (!IsEmptyStr(buf))
2262                 cprintf("%s%s", buf, nl);
2263 }
2264
2265 /*
2266  * Get a message off disk.  (returns om_* values found in msgbase.h)
2267  */
2268 int CtdlOutputPreLoadedMsg(
2269                 struct CtdlMessage *TheMessage,
2270                 int mode,               /* how would you like that message? */
2271                 int headers_only,       /* eschew the message body? */
2272                 int do_proto,           /* do Citadel protocol responses? */
2273                 int crlf,               /* Use CRLF newlines instead of LF? */
2274                 int flags               /* should the bessage be exported clean? */
2275 ) {
2276         struct CitContext *CCC = CC;
2277         int i;
2278         char *mptr = NULL;
2279         const char *nl; /* newline string */
2280         struct ma_info ma;
2281
2282         /* Buffers needed for RFC822 translation.  These are all filled
2283          * using functions that are bounds-checked, and therefore we can
2284          * make them substantially smaller than SIZ.
2285          */
2286         char suser[100];
2287         char luser[100];
2288         char fuser[100];
2289         char snode[100];
2290         char mid[100];
2291
2292         MSG_syslog(LOG_DEBUG, "CtdlOutputPreLoadedMsg(TheMessage=%s, %d, %d, %d, %d\n",
2293                    ((TheMessage == NULL) ? "NULL" : "not null"),
2294                    mode, headers_only, do_proto, crlf);
2295
2296         strcpy(mid, "unknown");
2297         nl = (crlf ? "\r\n" : "\n");
2298
2299         if (!is_valid_message(TheMessage)) {
2300                 MSGM_syslog(LOG_ERR,
2301                             "ERROR: invalid preloaded message for output\n");
2302                 cit_backtrace ();
2303                 return(om_no_such_msg);
2304         }
2305
2306         /* Suppress envelope recipients if required to avoid disclosing BCC addresses.
2307          * Pad it with spaces in order to avoid changing the RFC822 length of the message.
2308          */
2309         if ( (flags & SUPPRESS_ENV_TO) && (TheMessage->cm_fields['V'] != NULL) ) {
2310                 memset(TheMessage->cm_fields['V'], ' ', strlen(TheMessage->cm_fields['V']));
2311         }
2312                 
2313         /* Are we downloading a MIME component? */
2314         if (mode == MT_DOWNLOAD) {
2315                 if (TheMessage->cm_format_type != FMT_RFC822) {
2316                         if (do_proto)
2317                                 cprintf("%d This is not a MIME message.\n",
2318                                 ERROR + ILLEGAL_VALUE);
2319                 } else if (CCC->download_fp != NULL) {
2320                         if (do_proto) cprintf(
2321                                 "%d You already have a download open.\n",
2322                                 ERROR + RESOURCE_BUSY);
2323                 } else {
2324                         /* Parse the message text component */
2325                         mptr = TheMessage->cm_fields['M'];
2326                         mime_parser(mptr, NULL, *mime_download, NULL, NULL, NULL, 0);
2327                         /* If there's no file open by this time, the requested
2328                          * section wasn't found, so print an error
2329                          */
2330                         if (CCC->download_fp == NULL) {
2331                                 if (do_proto) cprintf(
2332                                         "%d Section %s not found.\n",
2333                                         ERROR + FILE_NOT_FOUND,
2334                                         CCC->download_desired_section);
2335                         }
2336                 }
2337                 return((CCC->download_fp != NULL) ? om_ok : om_mime_error);
2338         }
2339
2340         /* MT_SPEW_SECTION is like MT_DOWNLOAD except it outputs the whole MIME part
2341          * in a single server operation instead of opening a download file.
2342          */
2343         if (mode == MT_SPEW_SECTION) {
2344                 if (TheMessage->cm_format_type != FMT_RFC822) {
2345                         if (do_proto)
2346                                 cprintf("%d This is not a MIME message.\n",
2347                                 ERROR + ILLEGAL_VALUE);
2348                 } else {
2349                         /* Parse the message text component */
2350                         int found_it = 0;
2351
2352                         mptr = TheMessage->cm_fields['M'];
2353                         mime_parser(mptr, NULL, *mime_spew_section, NULL, NULL, (void *)&found_it, 0);
2354                         /* If section wasn't found, print an error
2355                          */
2356                         if (!found_it) {
2357                                 if (do_proto) cprintf(
2358                                         "%d Section %s not found.\n",
2359                                         ERROR + FILE_NOT_FOUND,
2360                                         CCC->download_desired_section);
2361                         }
2362                 }
2363                 return((CCC->download_fp != NULL) ? om_ok : om_mime_error);
2364         }
2365
2366         /* now for the user-mode message reading loops */
2367         if (do_proto) cprintf("%d msg:\n", LISTING_FOLLOWS);
2368
2369         /* Does the caller want to skip the headers? */
2370         if (headers_only == HEADERS_NONE) goto START_TEXT;
2371
2372         /* Tell the client which format type we're using. */
2373         if ( (mode == MT_CITADEL) && (do_proto) ) {
2374                 cprintf("type=%d\n", TheMessage->cm_format_type);
2375         }
2376
2377         /* nhdr=yes means that we're only displaying headers, no body */
2378         if ( (TheMessage->cm_anon_type == MES_ANONONLY)
2379            && ((mode == MT_CITADEL) || (mode == MT_MIME))
2380            && (do_proto)
2381            ) {
2382                 cprintf("nhdr=yes\n");
2383         }
2384
2385         if ((mode == MT_CITADEL) || (mode == MT_MIME)) 
2386                 OutputCtdlMsgHeaders(TheMessage, do_proto);
2387
2388
2389         /* begin header processing loop for RFC822 transfer format */
2390         strcpy(suser, "");
2391         strcpy(luser, "");
2392         strcpy(fuser, "");
2393         strcpy(snode, NODENAME);
2394         if (mode == MT_RFC822) 
2395                 OutputRFC822MsgHeaders(
2396                         TheMessage,
2397                         flags,
2398                         nl,
2399                         mid, sizeof(mid),
2400                         suser, sizeof(suser),
2401                         luser, sizeof(luser),
2402                         fuser, sizeof(fuser),
2403                         snode, sizeof(snode)
2404                         );
2405
2406
2407         for (i=0; !IsEmptyStr(&suser[i]); ++i) {
2408                 suser[i] = tolower(suser[i]);
2409                 if (!isalnum(suser[i])) suser[i]='_';
2410         }
2411
2412         if (mode == MT_RFC822) {
2413                 if (!strcasecmp(snode, NODENAME)) {
2414                         safestrncpy(snode, FQDN, sizeof snode);
2415                 }
2416
2417                 /* Construct a fun message id */
2418                 cprintf("Message-ID: <%s", mid);/// todo: this possibly breaks threadding mails.
2419                 if (strchr(mid, '@')==NULL) {
2420                         cprintf("@%s", snode);
2421                 }
2422                 cprintf(">%s", nl);
2423
2424                 if (!is_room_aide() && (TheMessage->cm_anon_type == MES_ANONONLY)) {
2425                         cprintf("From: \"----\" <x@x.org>%s", nl);
2426                 }
2427                 else if (!is_room_aide() && (TheMessage->cm_anon_type == MES_ANONOPT)) {
2428                         cprintf("From: \"anonymous\" <x@x.org>%s", nl);
2429                 }
2430                 else if (!IsEmptyStr(fuser)) {
2431                         cprintf("From: \"%s\" <%s>%s", luser, fuser, nl);
2432                 }
2433                 else {
2434                         cprintf("From: \"%s\" <%s@%s>%s", luser, suser, snode, nl);
2435                 }
2436
2437                 /* Blank line signifying RFC822 end-of-headers */
2438                 if (TheMessage->cm_format_type != FMT_RFC822) {
2439                         cprintf("%s", nl);
2440                 }
2441         }
2442
2443         /* end header processing loop ... at this point, we're in the text */
2444 START_TEXT:
2445         if (headers_only == HEADERS_FAST) goto DONE;
2446
2447         /* Tell the client about the MIME parts in this message */
2448         if (TheMessage->cm_format_type == FMT_RFC822) {
2449                 if ( (mode == MT_CITADEL) || (mode == MT_MIME) ) {
2450                         mptr = TheMessage->cm_fields['M'];
2451                         memset(&ma, 0, sizeof(struct ma_info));
2452                         mime_parser(mptr, NULL,
2453                                 (do_proto ? *list_this_part : NULL),
2454                                 (do_proto ? *list_this_pref : NULL),
2455                                 (do_proto ? *list_this_suff : NULL),
2456                                 (void *)&ma, 1);
2457                 }
2458                 else if (mode == MT_RFC822) {   /* unparsed RFC822 dump */
2459                         Dump_RFC822HeadersBody(
2460                                 TheMessage,
2461                                 headers_only,
2462                                 flags,
2463                                 nl);
2464                         goto DONE;
2465                 }
2466         }
2467
2468         if (headers_only == HEADERS_ONLY) {
2469                 goto DONE;
2470         }
2471
2472         /* signify start of msg text */
2473         if ( (mode == MT_CITADEL) || (mode == MT_MIME) ) {
2474                 if (do_proto) cprintf("text\n");
2475         }
2476
2477         if (TheMessage->cm_format_type == FMT_FIXED) 
2478                 DumpFormatFixed(
2479                         TheMessage,
2480                         mode,           /* how would you like that message? */
2481                         nl);
2482
2483         /* If the message on disk is format 0 (Citadel vari-format), we
2484          * output using the formatter at 80 columns.  This is the final output
2485          * form if the transfer format is RFC822, but if the transfer format
2486          * is Citadel proprietary, it'll still work, because the indentation
2487          * for new paragraphs is correct and the client will reformat the
2488          * message to the reader's screen width.
2489          */
2490         if (TheMessage->cm_format_type == FMT_CITADEL) {
2491                 mptr = TheMessage->cm_fields['M'];
2492
2493                 if (mode == MT_MIME) {
2494                         cprintf("Content-type: text/x-citadel-variformat\n\n");
2495                 }
2496                 memfmout(mptr, nl);
2497         }
2498
2499         /* If the message on disk is format 4 (MIME), we've gotta hand it
2500          * off to the MIME parser.  The client has already been told that
2501          * this message is format 1 (fixed format), so the callback function
2502          * we use will display those parts as-is.
2503          */
2504         if (TheMessage->cm_format_type == FMT_RFC822) {
2505                 memset(&ma, 0, sizeof(struct ma_info));
2506
2507                 if (mode == MT_MIME) {
2508                         ma.use_fo_hooks = 0;
2509                         strcpy(ma.chosen_part, "1");
2510                         ma.chosen_pref = 9999;
2511                         ma.dont_decode = CCC->msg4_dont_decode;
2512                         mime_parser(mptr, NULL,
2513                                 *choose_preferred, *fixed_output_pre,
2514                                 *fixed_output_post, (void *)&ma, 1);
2515                         mime_parser(mptr, NULL,
2516                                 *output_preferred, NULL, NULL, (void *)&ma, 1);
2517                 }
2518                 else {
2519                         ma.use_fo_hooks = 1;
2520                         mime_parser(mptr, NULL,
2521                                 *fixed_output, *fixed_output_pre,
2522                                 *fixed_output_post, (void *)&ma, 0);
2523                 }
2524
2525         }
2526
2527 DONE:   /* now we're done */
2528         if (do_proto) cprintf("000\n");
2529         return(om_ok);
2530 }
2531
2532
2533 /*
2534  * display a message (mode 0 - Citadel proprietary)
2535  */
2536 void cmd_msg0(char *cmdbuf)
2537 {
2538         long msgid;
2539         int headers_only = HEADERS_ALL;
2540
2541         msgid = extract_long(cmdbuf, 0);
2542         headers_only = extract_int(cmdbuf, 1);
2543
2544         CtdlOutputMsg(msgid, MT_CITADEL, headers_only, 1, 0, NULL, 0);
2545         return;
2546 }
2547
2548
2549 /*
2550  * display a message (mode 2 - RFC822)
2551  */
2552 void cmd_msg2(char *cmdbuf)
2553 {
2554         long msgid;
2555         int headers_only = HEADERS_ALL;
2556
2557         msgid = extract_long(cmdbuf, 0);
2558         headers_only = extract_int(cmdbuf, 1);
2559
2560         CtdlOutputMsg(msgid, MT_RFC822, headers_only, 1, 1, NULL, 0);
2561 }
2562
2563
2564
2565 /* 
2566  * display a message (mode 3 - IGnet raw format - internal programs only)
2567  */
2568 void cmd_msg3(char *cmdbuf)
2569 {
2570         long msgnum;
2571         struct CtdlMessage *msg = NULL;
2572         struct ser_ret smr;
2573
2574         if (CC->internal_pgm == 0) {
2575                 cprintf("%d This command is for internal programs only.\n",
2576                         ERROR + HIGHER_ACCESS_REQUIRED);
2577                 return;
2578         }
2579
2580         msgnum = extract_long(cmdbuf, 0);
2581         msg = CtdlFetchMessage(msgnum, 1);
2582         if (msg == NULL) {
2583                 cprintf("%d Message %ld not found.\n", 
2584                         ERROR + MESSAGE_NOT_FOUND, msgnum);
2585                 return;
2586         }
2587
2588         serialize_message(&smr, msg);
2589         CtdlFreeMessage(msg);
2590
2591         if (smr.len == 0) {
2592                 cprintf("%d Unable to serialize message\n",
2593                         ERROR + INTERNAL_ERROR);
2594                 return;
2595         }
2596
2597         cprintf("%d %ld\n", BINARY_FOLLOWS, (long)smr.len);
2598         client_write((char *)smr.ser, (int)smr.len);
2599         free(smr.ser);
2600 }
2601
2602
2603
2604 /* 
2605  * Display a message using MIME content types
2606  */
2607 void cmd_msg4(char *cmdbuf)
2608 {
2609         long msgid;
2610         char section[64];
2611
2612         msgid = extract_long(cmdbuf, 0);
2613         extract_token(section, cmdbuf, 1, '|', sizeof section);
2614         CtdlOutputMsg(msgid, MT_MIME, 0, 1, 0, (section[0] ? section : NULL) , 0);
2615 }
2616
2617
2618
2619 /* 
2620  * Client tells us its preferred message format(s)
2621  */
2622 void cmd_msgp(char *cmdbuf)
2623 {
2624         if (!strcasecmp(cmdbuf, "dont_decode")) {
2625                 CC->msg4_dont_decode = 1;
2626                 cprintf("%d MSG4 will not pre-decode messages.\n", CIT_OK);
2627         }
2628         else {
2629                 safestrncpy(CC->preferred_formats, cmdbuf, sizeof(CC->preferred_formats));
2630                 cprintf("%d Preferred MIME formats have been set.\n", CIT_OK);
2631         }
2632 }
2633
2634
2635 /*
2636  * Open a component of a MIME message as a download file 
2637  */
2638 void cmd_opna(char *cmdbuf)
2639 {
2640         long msgid;
2641         char desired_section[128];
2642
2643         msgid = extract_long(cmdbuf, 0);
2644         extract_token(desired_section, cmdbuf, 1, '|', sizeof desired_section);
2645         safestrncpy(CC->download_desired_section, desired_section,
2646                 sizeof CC->download_desired_section);
2647         CtdlOutputMsg(msgid, MT_DOWNLOAD, 0, 1, 1, NULL, 0);
2648 }                       
2649
2650
2651 /*
2652  * Open a component of a MIME message and transmit it all at once
2653  */
2654 void cmd_dlat(char *cmdbuf)
2655 {
2656         long msgid;
2657         char desired_section[128];
2658
2659         msgid = extract_long(cmdbuf, 0);
2660         extract_token(desired_section, cmdbuf, 1, '|', sizeof desired_section);
2661         safestrncpy(CC->download_desired_section, desired_section,
2662                 sizeof CC->download_desired_section);
2663         CtdlOutputMsg(msgid, MT_SPEW_SECTION, 0, 1, 1, NULL, 0);
2664 }                       
2665
2666
2667 /*
2668  * Save one or more message pointers into a specified room
2669  * (Returns 0 for success, nonzero for failure)
2670  * roomname may be NULL to use the current room
2671  *
2672  * Note that the 'supplied_msg' field may be set to NULL, in which case
2673  * the message will be fetched from disk, by number, if we need to perform
2674  * replication checks.  This adds an additional database read, so if the
2675  * caller already has the message in memory then it should be supplied.  (Obviously
2676  * this mode of operation only works if we're saving a single message.)
2677  */
2678 int CtdlSaveMsgPointersInRoom(char *roomname, long newmsgidlist[], int num_newmsgs,
2679                         int do_repl_check, struct CtdlMessage *supplied_msg, int suppress_refcount_adj
2680 ) {
2681         struct CitContext *CCC = CC;
2682         int i, j, unique;
2683         char hold_rm[ROOMNAMELEN];
2684         struct cdbdata *cdbfr;
2685         int num_msgs;
2686         long *msglist;
2687         long highest_msg = 0L;
2688
2689         long msgid = 0;
2690         struct CtdlMessage *msg = NULL;
2691
2692         long *msgs_to_be_merged = NULL;
2693         int num_msgs_to_be_merged = 0;
2694
2695         MSG_syslog(LOG_DEBUG,
2696                    "CtdlSaveMsgPointersInRoom(room=%s, num_msgs=%d, repl=%d, suppress_rca=%d)\n",
2697                    roomname, num_newmsgs, do_repl_check, suppress_refcount_adj
2698         );
2699
2700         strcpy(hold_rm, CCC->room.QRname);
2701
2702         /* Sanity checks */
2703         if (newmsgidlist == NULL) return(ERROR + INTERNAL_ERROR);
2704         if (num_newmsgs < 1) return(ERROR + INTERNAL_ERROR);
2705         if (num_newmsgs > 1) supplied_msg = NULL;
2706
2707         /* Now the regular stuff */
2708         if (CtdlGetRoomLock(&CCC->room,
2709            ((roomname != NULL) ? roomname : CCC->room.QRname) )
2710            != 0) {
2711                 MSG_syslog(LOG_ERR, "No such room <%s>\n", roomname);
2712                 return(ERROR + ROOM_NOT_FOUND);
2713         }
2714
2715
2716         msgs_to_be_merged = malloc(sizeof(long) * num_newmsgs);
2717         num_msgs_to_be_merged = 0;
2718
2719
2720         cdbfr = cdb_fetch(CDB_MSGLISTS, &CCC->room.QRnumber, sizeof(long));
2721         if (cdbfr == NULL) {
2722                 msglist = NULL;
2723                 num_msgs = 0;
2724         } else {
2725                 msglist = (long *) cdbfr->ptr;
2726                 cdbfr->ptr = NULL;      /* CtdlSaveMsgPointerInRoom() now owns this memory */
2727                 num_msgs = cdbfr->len / sizeof(long);
2728                 cdb_free(cdbfr);
2729         }
2730
2731
2732         /* Create a list of msgid's which were supplied by the caller, but do
2733          * not already exist in the target room.  It is absolutely taboo to
2734          * have more than one reference to the same message in a room.
2735          */
2736         for (i=0; i<num_newmsgs; ++i) {
2737                 unique = 1;
2738                 if (num_msgs > 0) for (j=0; j<num_msgs; ++j) {
2739                         if (msglist[j] == newmsgidlist[i]) {
2740                                 unique = 0;
2741                         }
2742                 }
2743                 if (unique) {
2744                         msgs_to_be_merged[num_msgs_to_be_merged++] = newmsgidlist[i];
2745                 }
2746         }
2747
2748         MSG_syslog(LOG_DEBUG, "%d unique messages to be merged\n", num_msgs_to_be_merged);
2749
2750         /*
2751          * Now merge the new messages
2752          */
2753         msglist = realloc(msglist, (sizeof(long) * (num_msgs + num_msgs_to_be_merged)) );
2754         if (msglist == NULL) {
2755                 MSGM_syslog(LOG_ALERT, "ERROR: can't realloc message list!\n");
2756                 return (ERROR + INTERNAL_ERROR);
2757         }
2758         memcpy(&msglist[num_msgs], msgs_to_be_merged, (sizeof(long) * num_msgs_to_be_merged) );
2759         num_msgs += num_msgs_to_be_merged;
2760
2761         /* Sort the message list, so all the msgid's are in order */
2762         num_msgs = sort_msglist(msglist, num_msgs);
2763
2764         /* Determine the highest message number */
2765         highest_msg = msglist[num_msgs - 1];
2766
2767         /* Write it back to disk. */
2768         cdb_store(CDB_MSGLISTS, &CCC->room.QRnumber, (int)sizeof(long),
2769                   msglist, (int)(num_msgs * sizeof(long)));
2770
2771         /* Free up the memory we used. */
2772         free(msglist);
2773
2774         /* Update the highest-message pointer and unlock the room. */
2775         CCC->room.QRhighest = highest_msg;
2776         CtdlPutRoomLock(&CCC->room);
2777
2778         /* Perform replication checks if necessary */
2779         if ( (DoesThisRoomNeedEuidIndexing(&CCC->room)) && (do_repl_check) ) {
2780                 MSGM_syslog(LOG_DEBUG, "CtdlSaveMsgPointerInRoom() doing repl checks\n");
2781
2782                 for (i=0; i<num_msgs_to_be_merged; ++i) {
2783                         msgid = msgs_to_be_merged[i];
2784         
2785                         if (supplied_msg != NULL) {
2786                                 msg = supplied_msg;
2787                         }
2788                         else {
2789                                 msg = CtdlFetchMessage(msgid, 0);
2790                         }
2791         
2792                         if (msg != NULL) {
2793                                 ReplicationChecks(msg);
2794                 
2795                                 /* If the message has an Exclusive ID, index that... */
2796                                 if (msg->cm_fields['E'] != NULL) {
2797                                         index_message_by_euid(msg->cm_fields['E'], &CCC->room, msgid);
2798                                 }
2799
2800                                 /* Free up the memory we may have allocated */
2801                                 if (msg != supplied_msg) {
2802                                         CtdlFreeMessage(msg);
2803                                 }
2804                         }
2805         
2806                 }
2807         }
2808
2809         else {
2810                 MSGM_syslog(LOG_DEBUG, "CtdlSaveMsgPointerInRoom() skips repl checks\n");
2811         }
2812
2813         /* Submit this room for processing by hooks */
2814         PerformRoomHooks(&CCC->room);
2815
2816         /* Go back to the room we were in before we wandered here... */
2817         CtdlGetRoom(&CCC->room, hold_rm);
2818
2819         /* Bump the reference count for all messages which were merged */
2820         if (!suppress_refcount_adj) {
2821                 AdjRefCountList(msgs_to_be_merged, num_msgs_to_be_merged, +1);
2822         }
2823
2824         /* Free up memory... */
2825         if (msgs_to_be_merged != NULL) {
2826                 free(msgs_to_be_merged);
2827         }
2828
2829         /* Return success. */
2830         return (0);
2831 }
2832
2833
2834 /*
2835  * This is the same as CtdlSaveMsgPointersInRoom() but it only accepts
2836  * a single message.
2837  */
2838 int CtdlSaveMsgPointerInRoom(char *roomname, long msgid,
2839                              int do_repl_check, struct CtdlMessage *supplied_msg)
2840 {
2841         return CtdlSaveMsgPointersInRoom(roomname, &msgid, 1, do_repl_check, supplied_msg, 0);
2842 }
2843
2844
2845
2846
2847 /*
2848  * Message base operation to save a new message to the message store
2849  * (returns new message number)
2850  *
2851  * This is the back end for CtdlSubmitMsg() and should not be directly
2852  * called by server-side modules.
2853  *
2854  */
2855 long send_message(struct CtdlMessage *msg) {
2856         struct CitContext *CCC = CC;
2857         long newmsgid;
2858         long retval;
2859         char msgidbuf[256];
2860         struct ser_ret smr;
2861         int is_bigmsg = 0;
2862         char *holdM = NULL;
2863
2864         /* Get a new message number */
2865         newmsgid = get_new_message_number();
2866         snprintf(msgidbuf, sizeof msgidbuf, "%08lX-%08lX@%s",
2867                  (long unsigned int) time(NULL),
2868                  (long unsigned int) newmsgid,
2869                  config.c_fqdn
2870                 );
2871
2872         /* Generate an ID if we don't have one already */
2873         if (msg->cm_fields['I']==NULL) {
2874                 msg->cm_fields['I'] = strdup(msgidbuf);
2875         }
2876
2877         /* If the message is big, set its body aside for storage elsewhere */
2878         if (msg->cm_fields['M'] != NULL) {
2879                 if (strlen(msg->cm_fields['M']) > BIGMSG) {
2880                         is_bigmsg = 1;
2881                         holdM = msg->cm_fields['M'];
2882                         msg->cm_fields['M'] = NULL;
2883                 }
2884         }
2885
2886         /* Serialize our data structure for storage in the database */  
2887         serialize_message(&smr, msg);
2888
2889         if (is_bigmsg) {
2890                 msg->cm_fields['M'] = holdM;
2891         }
2892
2893         if (smr.len == 0) {
2894                 cprintf("%d Unable to serialize message\n",
2895                         ERROR + INTERNAL_ERROR);
2896                 return (-1L);
2897         }
2898
2899         /* Write our little bundle of joy into the message base */
2900         if (cdb_store(CDB_MSGMAIN, &newmsgid, (int)sizeof(long),
2901                       smr.ser, smr.len) < 0) {
2902                 MSGM_syslog(LOG_ERR, "Can't store message\n");
2903                 retval = 0L;
2904         } else {
2905                 if (is_bigmsg) {
2906                         cdb_store(CDB_BIGMSGS,
2907                                   &newmsgid,
2908                                   (int)sizeof(long),
2909                                   holdM,
2910                                   (strlen(holdM) + 1)
2911                                 );
2912                 }
2913                 retval = newmsgid;
2914         }
2915
2916         /* Free the memory we used for the serialized message */
2917         free(smr.ser);
2918
2919         /* Return the *local* message ID to the caller
2920          * (even if we're storing an incoming network message)
2921          */
2922         return(retval);
2923 }
2924
2925
2926
2927 /*
2928  * Serialize a struct CtdlMessage into the format used on disk and network.
2929  * 
2930  * This function loads up a "struct ser_ret" (defined in server.h) which
2931  * contains the length of the serialized message and a pointer to the
2932  * serialized message in memory.  THE LATTER MUST BE FREED BY THE CALLER.
2933  */
2934 void serialize_message(struct ser_ret *ret,             /* return values */
2935                        struct CtdlMessage *msg) /* unserialized msg */
2936 {
2937         struct CitContext *CCC = CC;
2938         size_t wlen, fieldlen;
2939         int i;
2940         static char *forder = FORDER;
2941
2942         /*
2943          * Check for valid message format
2944          */
2945         if (is_valid_message(msg) == 0) {
2946                 MSGM_syslog(LOG_ERR, "serialize_message() aborting due to invalid message\n");
2947                 ret->len = 0;
2948                 ret->ser = NULL;
2949                 return;
2950         }
2951
2952         ret->len = 3;
2953         for (i=0; i<26; ++i) if (msg->cm_fields[(int)forder[i]] != NULL)
2954                                      ret->len = ret->len +
2955                                              strlen(msg->cm_fields[(int)forder[i]]) + 2;
2956
2957         ret->ser = malloc(ret->len);
2958         if (ret->ser == NULL) {
2959                 MSG_syslog(LOG_ERR, "serialize_message() malloc(%ld) failed: %s\n",
2960                            (long)ret->len, strerror(errno));
2961                 ret->len = 0;
2962                 ret->ser = NULL;
2963                 return;
2964         }
2965
2966         ret->ser[0] = 0xFF;
2967         ret->ser[1] = msg->cm_anon_type;
2968         ret->ser[2] = msg->cm_format_type;
2969         wlen = 3;
2970
2971         for (i=0; i<26; ++i) if (msg->cm_fields[(int)forder[i]] != NULL) {
2972                         fieldlen = strlen(msg->cm_fields[(int)forder[i]]);
2973                         ret->ser[wlen++] = (char)forder[i];
2974                         safestrncpy((char *)&ret->ser[wlen], msg->cm_fields[(int)forder[i]], fieldlen+1);
2975                         wlen = wlen + fieldlen + 1;
2976                 }
2977         if (ret->len != wlen) {
2978                 MSG_syslog(LOG_ERR, "ERROR: len=%ld wlen=%ld\n",
2979                            (long)ret->len, (long)wlen);
2980         }
2981
2982         return;
2983 }
2984
2985
2986 /*
2987  * Check to see if any messages already exist in the current room which
2988  * carry the same Exclusive ID as this one.  If any are found, delete them.
2989  */
2990 void ReplicationChecks(struct CtdlMessage *msg) {
2991         struct CitContext *CCC = CC;
2992         long old_msgnum = (-1L);
2993
2994         if (DoesThisRoomNeedEuidIndexing(&CCC->room) == 0) return;
2995
2996         MSG_syslog(LOG_DEBUG, "Performing replication checks in <%s>\n",
2997                    CCC->room.QRname);
2998
2999         /* No exclusive id?  Don't do anything. */
3000         if (msg == NULL) return;
3001         if (msg->cm_fields['E'] == NULL) return;
3002         if (IsEmptyStr(msg->cm_fields['E'])) return;
3003         /*MSG_syslog(LOG_DEBUG, "Exclusive ID: <%s> for room <%s>\n",
3004           msg->cm_fields['E'], CCC->room.QRname);*/
3005
3006         old_msgnum = CtdlLocateMessageByEuid(msg->cm_fields['E'], &CCC->room);
3007         if (old_msgnum > 0L) {
3008                 MSG_syslog(LOG_DEBUG, "ReplicationChecks() replacing message %ld\n", old_msgnum);
3009                 CtdlDeleteMessages(CCC->room.QRname, &old_msgnum, 1, "");
3010         }
3011 }
3012
3013
3014
3015 /*
3016  * Save a message to disk and submit it into the delivery system.
3017  */
3018 long CtdlSubmitMsg(struct CtdlMessage *msg,     /* message to save */
3019                    struct recptypes *recps,     /* recipients (if mail) */
3020                    const char *force,           /* force a particular room? */
3021                    int flags                    /* should the message be exported clean? */
3022         )
3023 {
3024         char submit_filename[128];
3025         char generated_timestamp[32];
3026         char hold_rm[ROOMNAMELEN];
3027         char actual_rm[ROOMNAMELEN];
3028         char force_room[ROOMNAMELEN];
3029         char content_type[SIZ];                 /* We have to learn this */
3030         char recipient[SIZ];
3031         const char *room;
3032         long newmsgid;
3033         const char *mptr = NULL;
3034         struct ctdluser userbuf;
3035         int a, i;
3036         struct MetaData smi;
3037         FILE *network_fp = NULL;
3038         static int seqnum = 1;
3039         struct CtdlMessage *imsg = NULL;
3040         char *instr = NULL;
3041         size_t instr_alloc = 0;
3042         struct ser_ret smr;
3043         char *hold_R, *hold_D;
3044         char *collected_addresses = NULL;
3045         struct addresses_to_be_filed *aptr = NULL;
3046         StrBuf *saved_rfc822_version = NULL;
3047         int qualified_for_journaling = 0;
3048         CitContext *CCC = MyContext();
3049         char bounce_to[1024] = "";
3050         int rv = 0;
3051
3052         MSGM_syslog(LOG_DEBUG, "CtdlSubmitMsg() called\n");
3053         if (is_valid_message(msg) == 0) return(-1);     /* self check */
3054
3055         /* If this message has no timestamp, we take the liberty of
3056          * giving it one, right now.
3057          */
3058         if (msg->cm_fields['T'] == NULL) {
3059                 snprintf(generated_timestamp, sizeof generated_timestamp, "%ld", (long)time(NULL));
3060                 msg->cm_fields['T'] = strdup(generated_timestamp);
3061         }
3062
3063         /* If this message has no path, we generate one.
3064          */
3065         if (msg->cm_fields['P'] == NULL) {
3066                 if (msg->cm_fields['A'] != NULL) {
3067                         msg->cm_fields['P'] = strdup(msg->cm_fields['A']);
3068                         for (a=0; !IsEmptyStr(&msg->cm_fields['P'][a]); ++a) {
3069                                 if (isspace(msg->cm_fields['P'][a])) {
3070                                         msg->cm_fields['P'][a] = ' ';
3071                                 }
3072                         }
3073                 }
3074                 else {
3075                         msg->cm_fields['P'] = strdup("unknown");
3076                 }
3077         }
3078
3079         if (force == NULL) {
3080                 strcpy(force_room, "");
3081         }
3082         else {
3083                 strcpy(force_room, force);
3084         }
3085
3086         /* Learn about what's inside, because it's what's inside that counts */
3087         if (msg->cm_fields['M'] == NULL) {
3088                 MSGM_syslog(LOG_ERR, "ERROR: attempt to save message with NULL body\n");
3089                 return(-2);
3090         }
3091
3092         switch (msg->cm_format_type) {
3093         case 0:
3094                 strcpy(content_type, "text/x-citadel-variformat");
3095                 break;
3096         case 1:
3097                 strcpy(content_type, "text/plain");
3098                 break;
3099         case 4:
3100                 strcpy(content_type, "text/plain");
3101                 mptr = bmstrcasestr(msg->cm_fields['M'], "Content-type:");
3102                 if (mptr != NULL) {
3103                         char *aptr;
3104                         safestrncpy(content_type, &mptr[13], sizeof content_type);
3105                         striplt(content_type);
3106                         aptr = content_type;
3107                         while (!IsEmptyStr(aptr)) {
3108                                 if ((*aptr == ';')
3109                                     || (*aptr == ' ')
3110                                     || (*aptr == 13)
3111                                     || (*aptr == 10)) {
3112                                         *aptr = 0;
3113                                 }
3114                                 else aptr++;
3115                         }
3116                 }
3117         }
3118
3119         /* Goto the correct room */
3120         room = (recps) ? CCC->room.QRname : SENTITEMS;
3121         MSG_syslog(LOG_DEBUG, "Selected room %s\n", room);
3122         strcpy(hold_rm, CCC->room.QRname);
3123         strcpy(actual_rm, CCC->room.QRname);
3124         if (recps != NULL) {
3125                 strcpy(actual_rm, SENTITEMS);
3126         }
3127
3128         /* If the user is a twit, move to the twit room for posting */
3129         if (TWITDETECT) {
3130                 if (CCC->user.axlevel == AxProbU) {
3131                         strcpy(hold_rm, actual_rm);
3132                         strcpy(actual_rm, config.c_twitroom);
3133                         MSGM_syslog(LOG_DEBUG, "Diverting to twit room\n");
3134                 }
3135         }
3136
3137         /* ...or if this message is destined for Aide> then go there. */
3138         if (!IsEmptyStr(force_room)) {
3139                 strcpy(actual_rm, force_room);
3140         }
3141
3142         MSG_syslog(LOG_INFO, "Final selection: %s (%s)\n", actual_rm, room);
3143         if (strcasecmp(actual_rm, CCC->room.QRname)) {
3144                 /* CtdlGetRoom(&CCC->room, actual_rm); */
3145                 CtdlUserGoto(actual_rm, 0, 1, NULL, NULL);
3146         }
3147
3148         /*
3149          * If this message has no O (room) field, generate one.
3150          */
3151         if (msg->cm_fields['O'] == NULL) {
3152                 msg->cm_fields['O'] = strdup(CCC->room.QRname);
3153         }
3154
3155         /* Perform "before save" hooks (aborting if any return nonzero) */
3156         MSGM_syslog(LOG_DEBUG, "Performing before-save hooks\n");
3157         if (PerformMessageHooks(msg, EVT_BEFORESAVE) > 0) return(-3);
3158
3159         /*
3160          * If this message has an Exclusive ID, and the room is replication
3161          * checking enabled, then do replication checks.
3162          */
3163         if (DoesThisRoomNeedEuidIndexing(&CCC->room)) {
3164                 ReplicationChecks(msg);
3165         }
3166
3167         /* Save it to disk */
3168         MSGM_syslog(LOG_DEBUG, "Saving to disk\n");
3169         newmsgid = send_message(msg);
3170         if (newmsgid <= 0L) return(-5);
3171
3172         /* Write a supplemental message info record.  This doesn't have to
3173          * be a critical section because nobody else knows about this message
3174          * yet.
3175          */
3176         MSGM_syslog(LOG_DEBUG, "Creating MetaData record\n");
3177         memset(&smi, 0, sizeof(struct MetaData));
3178         smi.meta_msgnum = newmsgid;
3179         smi.meta_refcount = 0;
3180         safestrncpy(smi.meta_content_type, content_type,
3181                     sizeof smi.meta_content_type);
3182
3183         /*
3184          * Measure how big this message will be when rendered as RFC822.
3185          * We do this for two reasons:
3186          * 1. We need the RFC822 length for the new metadata record, so the
3187          *    POP and IMAP services don't have to calculate message lengths
3188          *    while the user is waiting (multiplied by potentially hundreds
3189          *    or thousands of messages).
3190          * 2. If journaling is enabled, we will need an RFC822 version of the
3191          *    message to attach to the journalized copy.
3192          */
3193         if (CCC->redirect_buffer != NULL) {
3194                 MSGM_syslog(LOG_ALERT, "CCC->redirect_buffer is not NULL during message submission!\n");
3195                 abort();
3196         }
3197         CCC->redirect_buffer = NewStrBufPlain(NULL, SIZ);
3198         CtdlOutputPreLoadedMsg(msg, MT_RFC822, HEADERS_ALL, 0, 1, QP_EADDR);
3199         smi.meta_rfc822_length = StrLength(CCC->redirect_buffer);
3200         saved_rfc822_version = CCC->redirect_buffer;
3201         CCC->redirect_buffer = NULL;
3202
3203         PutMetaData(&smi);
3204
3205         /* Now figure out where to store the pointers */
3206         MSGM_syslog(LOG_DEBUG, "Storing pointers\n");
3207
3208         /* If this is being done by the networker delivering a private
3209          * message, we want to BYPASS saving the sender's copy (because there
3210          * is no local sender; it would otherwise go to the Trashcan).
3211          */
3212         if ((!CCC->internal_pgm) || (recps == NULL)) {
3213                 if (CtdlSaveMsgPointerInRoom(actual_rm, newmsgid, 1, msg) != 0) {
3214                         MSGM_syslog(LOG_ERR, "ERROR saving message pointer!\n");
3215                         CtdlSaveMsgPointerInRoom(config.c_aideroom, newmsgid, 0, msg);
3216                 }
3217         }
3218
3219         /* For internet mail, drop a copy in the outbound queue room */
3220         if ((recps != NULL) && (recps->num_internet > 0)) {
3221                 CtdlSaveMsgPointerInRoom(SMTP_SPOOLOUT_ROOM, newmsgid, 0, msg);
3222         }
3223
3224         /* If other rooms are specified, drop them there too. */
3225         if ((recps != NULL) && (recps->num_room > 0))
3226                 for (i=0; i<num_tokens(recps->recp_room, '|'); ++i) {
3227                         extract_token(recipient, recps->recp_room, i,
3228                                       '|', sizeof recipient);
3229                         MSG_syslog(LOG_DEBUG, "Delivering to room <%s>\n", recipient);///// xxxx
3230                         CtdlSaveMsgPointerInRoom(recipient, newmsgid, 0, msg);
3231                 }
3232
3233         /* Bump this user's messages posted counter. */
3234         MSGM_syslog(LOG_DEBUG, "Updating user\n");
3235         CtdlGetUserLock(&CCC->user, CCC->curr_user);
3236         CCC->user.posted = CCC->user.posted + 1;
3237         CtdlPutUserLock(&CCC->user);
3238
3239         /* Decide where bounces need to be delivered */
3240         if ((recps != NULL) && (recps->bounce_to != NULL)) {
3241                 safestrncpy(bounce_to, recps->bounce_to, sizeof bounce_to);
3242         }
3243         else if (CCC->logged_in) {
3244                 snprintf(bounce_to, sizeof bounce_to, "%s@%s", CCC->user.fullname, config.c_nodename);
3245         }
3246         else {
3247                 snprintf(bounce_to, sizeof bounce_to, "%s@%s", msg->cm_fields['A'], msg->cm_fields['N']);
3248         }
3249
3250         /* If this is private, local mail, make a copy in the
3251          * recipient's mailbox and bump the reference count.
3252          */
3253         if ((recps != NULL) && (recps->num_local > 0))
3254                 for (i=0; i<num_tokens(recps->recp_local, '|'); ++i) {
3255                         extract_token(recipient, recps->recp_local, i,
3256                                       '|', sizeof recipient);
3257                         MSG_syslog(LOG_DEBUG, "Delivering private local mail to <%s>\n",
3258                                recipient);
3259                         if (CtdlGetUser(&userbuf, recipient) == 0) {
3260                                 CtdlMailboxName(actual_rm, sizeof actual_rm, &userbuf, MAILROOM);
3261                                 CtdlSaveMsgPointerInRoom(actual_rm, newmsgid, 0, msg);
3262                                 CtdlBumpNewMailCounter(userbuf.usernum);
3263                                 if (!IsEmptyStr(config.c_funambol_host) || !IsEmptyStr(config.c_pager_program)) {
3264                                         /* Generate a instruction message for the Funambol notification
3265                                          * server, in the same style as the SMTP queue
3266                                          */
3267                                         instr_alloc = 1024;
3268                                         instr = malloc(instr_alloc);
3269                                         snprintf(instr, instr_alloc,
3270                                                  "Content-type: %s\n\nmsgid|%ld\nsubmitted|%ld\n"
3271                                                  "bounceto|%s\n",
3272                                                  SPOOLMIME, newmsgid, (long)time(NULL),
3273                                                  bounce_to
3274                                                 );
3275                                 
3276                                         imsg = malloc(sizeof(struct CtdlMessage));
3277                                         memset(imsg, 0, sizeof(struct CtdlMessage));
3278                                         imsg->cm_magic = CTDLMESSAGE_MAGIC;
3279                                         imsg->cm_anon_type = MES_NORMAL;
3280                                         imsg->cm_format_type = FMT_RFC822;
3281                                         imsg->cm_fields['U'] = strdup("QMSG");
3282                                         imsg->cm_fields['A'] = strdup("Citadel");
3283                                         imsg->cm_fields['J'] = strdup("do not journal");
3284                                         imsg->cm_fields['M'] = instr;   /* imsg owns this memory now */
3285                                         imsg->cm_fields['2'] = strdup(recipient);
3286                                         CtdlSubmitMsg(imsg, NULL, FNBL_QUEUE_ROOM, 0);
3287                                         CtdlFreeMessage(imsg);
3288                                 }
3289                         }
3290                         else {
3291                                 MSG_syslog(LOG_DEBUG, "No user <%s>\n", recipient);
3292                                 CtdlSaveMsgPointerInRoom(config.c_aideroom, newmsgid, 0, msg);
3293                         }
3294                 }
3295
3296         /* Perform "after save" hooks */
3297         MSGM_syslog(LOG_DEBUG, "Performing after-save hooks\n");
3298         if (msg->cm_fields['3'] != NULL) free(msg->cm_fields['3']);
3299         msg->cm_fields['3'] = malloc(20);
3300         snprintf(msg->cm_fields['3'], 20, "%ld", newmsgid);
3301         PerformMessageHooks(msg, EVT_AFTERSAVE);
3302         free(msg->cm_fields['3']);
3303         msg->cm_fields['3'] = NULL;
3304
3305         /* For IGnet mail, we have to save a new copy into the spooler for
3306          * each recipient, with the R and D fields set to the recipient and
3307          * destination-node.  This has two ugly side effects: all other
3308          * recipients end up being unlisted in this recipient's copy of the
3309          * message, and it has to deliver multiple messages to the same
3310          * node.  We'll revisit this again in a year or so when everyone has
3311          * a network spool receiver that can handle the new style messages.
3312          */
3313         if ((recps != NULL) && (recps->num_ignet > 0))
3314                 for (i=0; i<num_tokens(recps->recp_ignet, '|'); ++i) {
3315                         extract_token(recipient, recps->recp_ignet, i,
3316                                       '|', sizeof recipient);
3317
3318                         hold_R = msg->cm_fields['R'];
3319                         hold_D = msg->cm_fields['D'];
3320                         msg->cm_fields['R'] = malloc(SIZ);
3321                         msg->cm_fields['D'] = malloc(128);
3322                         extract_token(msg->cm_fields['R'], recipient, 0, '@', SIZ);
3323                         extract_token(msg->cm_fields['D'], recipient, 1, '@', 128);
3324                 
3325                         serialize_message(&smr, msg);
3326                         if (smr.len > 0) {
3327                                 snprintf(submit_filename, sizeof submit_filename,
3328                                          "%s/netmail.%04lx.%04x.%04x",
3329                                          ctdl_netin_dir,
3330                                          (long) getpid(), CCC->cs_pid, ++seqnum);
3331                                 network_fp = fopen(submit_filename, "wb+");
3332                                 if (network_fp != NULL) {
3333                                         rv = fwrite(smr.ser, smr.len, 1, network_fp);
3334                                         if (rv == -1) {
3335                                                 MSG_syslog(LOG_EMERG, "CtdlSubmitMsg(): Couldn't write network spool file: %s\n",
3336                                                            strerror(errno));
3337                                         }
3338                                         fclose(network_fp);
3339                                 }
3340                                 free(smr.ser);
3341                         }
3342
3343                         free(msg->cm_fields['R']);
3344                         free(msg->cm_fields['D']);
3345                         msg->cm_fields['R'] = hold_R;
3346                         msg->cm_fields['D'] = hold_D;
3347                 }
3348
3349         /* Go back to the room we started from */
3350         MSG_syslog(LOG_DEBUG, "Returning to original room %s\n", hold_rm);
3351         if (strcasecmp(hold_rm, CCC->room.QRname))
3352                 CtdlUserGoto(hold_rm, 0, 1, NULL, NULL);
3353
3354         /* For internet mail, generate delivery instructions.
3355          * Yes, this is recursive.  Deal with it.  Infinite recursion does
3356          * not happen because the delivery instructions message does not
3357          * contain a recipient.
3358          */
3359         if ((recps != NULL) && (recps->num_internet > 0)) {
3360                 StrBuf *SpoolMsg = NewStrBuf();
3361                 long nTokens;
3362
3363                 MSGM_syslog(LOG_DEBUG, "Generating delivery instructions\n");
3364
3365                 StrBufPrintf(SpoolMsg,
3366                              "Content-type: "SPOOLMIME"\n"
3367                              "\n"
3368                              "msgid|%ld\n"
3369                              "submitted|%ld\n"
3370                              "bounceto|%s\n",
3371                              newmsgid,
3372                              (long)time(NULL),
3373                              bounce_to);
3374
3375                 if (recps->envelope_from != NULL) {
3376                         StrBufAppendBufPlain(SpoolMsg, HKEY("envelope_from|"), 0);
3377                         StrBufAppendBufPlain(SpoolMsg, recps->envelope_from, -1, 0);
3378                         StrBufAppendBufPlain(SpoolMsg, HKEY("\n"), 0);
3379                 }
3380                 if (recps->sending_room != NULL) {
3381                         StrBufAppendBufPlain(SpoolMsg, HKEY("source_room|"), 0);
3382                         StrBufAppendBufPlain(SpoolMsg, recps->sending_room, -1, 0);
3383                         StrBufAppendBufPlain(SpoolMsg, HKEY("\n"), 0);
3384                 }
3385
3386                 nTokens = num_tokens(recps->recp_internet, '|');
3387                 for (i = 0; i < nTokens; i++) {
3388                         long len;
3389                         len = extract_token(recipient, recps->recp_internet, i, '|', sizeof recipient);
3390                         if (len > 0) {
3391                                 StrBufAppendBufPlain(SpoolMsg, HKEY("remote|"), 0);
3392                                 StrBufAppendBufPlain(SpoolMsg, recipient, len, 0);
3393                                 StrBufAppendBufPlain(SpoolMsg, HKEY("|0||\n"), 0);
3394                         }
3395                 }
3396
3397                 imsg = malloc(sizeof(struct CtdlMessage));
3398                 memset(imsg, 0, sizeof(struct CtdlMessage));
3399                 imsg->cm_magic = CTDLMESSAGE_MAGIC;
3400                 imsg->cm_anon_type = MES_NORMAL;
3401                 imsg->cm_format_type = FMT_RFC822;
3402                 imsg->cm_fields['U'] = strdup("QMSG");
3403                 imsg->cm_fields['A'] = strdup("Citadel");
3404                 imsg->cm_fields['J'] = strdup("do not journal");
3405                 imsg->cm_fields['M'] = SmashStrBuf(&SpoolMsg);  /* imsg owns this memory now */
3406                 CtdlSubmitMsg(imsg, NULL, SMTP_SPOOLOUT_ROOM, QP_EADDR);
3407                 CtdlFreeMessage(imsg);
3408         }
3409
3410         /*
3411          * Any addresses to harvest for someone's address book?
3412          */
3413         if ( (CCC->logged_in) && (recps != NULL) ) {
3414                 collected_addresses = harvest_collected_addresses(msg);
3415         }
3416
3417         if (collected_addresses != NULL) {
3418                 aptr = (struct addresses_to_be_filed *)
3419                         malloc(sizeof(struct addresses_to_be_filed));
3420                 CtdlMailboxName(actual_rm, sizeof actual_rm,
3421                                 &CCC->user, USERCONTACTSROOM);
3422                 aptr->roomname = strdup(actual_rm);
3423                 aptr->collected_addresses = collected_addresses;
3424                 begin_critical_section(S_ATBF);
3425                 aptr->next = atbf;
3426                 atbf = aptr;
3427                 end_critical_section(S_ATBF);
3428         }
3429
3430         /*
3431          * Determine whether this message qualifies for journaling.
3432          */
3433         if (msg->cm_fields['J'] != NULL) {
3434                 qualified_for_journaling = 0;
3435         }
3436         else {
3437                 if (recps == NULL) {
3438                         qualified_for_journaling = config.c_journal_pubmsgs;
3439                 }
3440                 else if (recps->num_local + recps->num_ignet + recps->num_internet > 0) {
3441                         qualified_for_journaling = config.c_journal_email;
3442                 }
3443                 else {
3444                         qualified_for_journaling = config.c_journal_pubmsgs;
3445                 }
3446         }
3447
3448         /*
3449          * Do we have to perform journaling?  If so, hand off the saved
3450          * RFC822 version will be handed off to the journaler for background
3451          * submit.  Otherwise, we have to free the memory ourselves.
3452          */
3453         if (saved_rfc822_version != NULL) {
3454                 if (qualified_for_journaling) {
3455                         JournalBackgroundSubmit(msg, saved_rfc822_version, recps);
3456                 }
3457                 else {
3458                         FreeStrBuf(&saved_rfc822_version);
3459                 }
3460         }
3461
3462         /* Done. */
3463         return(newmsgid);
3464 }
3465
3466
3467
3468 void aide_message (char *text, char *subject)
3469 {
3470         quickie_message("Citadel",NULL,NULL,AIDEROOM,text,FMT_CITADEL,subject);
3471 }
3472
3473
3474 /*
3475  * Convenience function for generating small administrative messages.
3476  */
3477 void quickie_message(const char *from, const char *fromaddr, char *to, char *room, const char *text, 
3478                      int format_type, const char *subject)
3479 {
3480         struct CtdlMessage *msg;
3481         struct recptypes *recp = NULL;
3482
3483         msg = malloc(sizeof(struct CtdlMessage));
3484         memset(msg, 0, sizeof(struct CtdlMessage));
3485         msg->cm_magic = CTDLMESSAGE_MAGIC;
3486         msg->cm_anon_type = MES_NORMAL;
3487         msg->cm_format_type = format_type;
3488
3489         if (from != NULL) {
3490                 msg->cm_fields['A'] = strdup(from);
3491         }
3492         else if (fromaddr != NULL) {
3493                 msg->cm_fields['A'] = strdup(fromaddr);
3494                 if (strchr(msg->cm_fields['A'], '@')) {
3495                         *strchr(msg->cm_fields['A'], '@') = 0;
3496                 }
3497         }
3498         else {
3499                 msg->cm_fields['A'] = strdup("Citadel");
3500         }
3501
3502         if (fromaddr != NULL) msg->cm_fields['F'] = strdup(fromaddr);
3503         if (room != NULL) msg->cm_fields['O'] = strdup(room);
3504         msg->cm_fields['N'] = strdup(NODENAME);
3505         if (to != NULL) {
3506                 msg->cm_fields['R'] = strdup(to);
3507                 recp = validate_recipients(to, NULL, 0);
3508         }
3509         if (subject != NULL) {
3510                 msg->cm_fields['U'] = strdup(subject);
3511         }
3512         msg->cm_fields['M'] = strdup(text);
3513
3514         CtdlSubmitMsg(msg, recp, room, 0);
3515         CtdlFreeMessage(msg);
3516         if (recp != NULL) free_recipients(recp);
3517 }
3518
3519
3520
3521 /*
3522  * Back end function used by CtdlMakeMessage() and similar functions
3523  */
3524 StrBuf *CtdlReadMessageBodyBuf(char *terminator,        /* token signalling EOT */
3525                                long tlen,
3526                                size_t maxlen,           /* maximum message length */
3527                                char *exist,             /* if non-null, append to it;
3528                                                            exist is ALWAYS freed  */
3529                                int crlf,                /* CRLF newlines instead of LF */
3530                                int *sock                /* socket handle or 0 for this session's client socket */
3531         ) 
3532 {
3533         StrBuf *Message;
3534         StrBuf *LineBuf;
3535         int flushing = 0;
3536         int finished = 0;
3537         int dotdot = 0;
3538
3539         LineBuf = NewStrBufPlain(NULL, SIZ);
3540         if (exist == NULL) {
3541                 Message = NewStrBufPlain(NULL, 4 * SIZ);
3542         }
3543         else {
3544                 Message = NewStrBufPlain(exist, -1);
3545                 free(exist);
3546         }
3547
3548         /* Do we need to change leading ".." to "." for SMTP escaping? */
3549         if ((tlen == 1) && (*terminator == '.')) {
3550                 dotdot = 1;
3551         }
3552
3553         /* read in the lines of message text one by one */
3554         do {
3555                 if (sock != NULL) {
3556                         if ((CtdlSockGetLine(sock, LineBuf, 5) < 0) ||
3557                             (*sock == -1))
3558                                 finished = 1;
3559                 }
3560                 else {
3561                         if (CtdlClientGetLine(LineBuf) < 0) finished = 1;
3562                 }
3563                 if ((StrLength(LineBuf) == tlen) && 
3564                     (!strcmp(ChrPtr(LineBuf), terminator)))
3565                         finished = 1;
3566
3567                 if ( (!flushing) && (!finished) ) {
3568                         if (crlf) {
3569                                 StrBufAppendBufPlain(LineBuf, HKEY("\r\n"), 0);
3570                         }
3571                         else {
3572                                 StrBufAppendBufPlain(LineBuf, HKEY("\n"), 0);
3573                         }
3574                         
3575                         /* Unescape SMTP-style input of two dots at the beginning of the line */
3576                         if ((dotdot) &&
3577                             (StrLength(LineBuf) == 2) && 
3578                             (!strcmp(ChrPtr(LineBuf), "..")))
3579                         {
3580                                 StrBufCutLeft(LineBuf, 1);
3581                         }
3582                         
3583                         StrBufAppendBuf(Message, LineBuf, 0);
3584                 }
3585
3586                 /* if we've hit the max msg length, flush the rest */
3587                 if (StrLength(Message) >= maxlen) flushing = 1;
3588
3589         } while (!finished);
3590         FreeStrBuf(&LineBuf);
3591         return Message;
3592 }
3593
3594 void DeleteAsyncMsg(ReadAsyncMsg **Msg)
3595 {
3596         if (*Msg == NULL)
3597                 return;
3598         FreeStrBuf(&(*Msg)->MsgBuf);
3599
3600         free(*Msg);
3601         *Msg = NULL;
3602 }
3603
3604 ReadAsyncMsg *NewAsyncMsg(const char *terminator,       /* token signalling EOT */
3605                           long tlen,
3606                           size_t maxlen,                /* maximum message length */
3607                           size_t expectlen,             /* if we expect a message, how long should it be? */
3608                           char *exist,                  /* if non-null, append to it;
3609                                                            exist is ALWAYS freed  */
3610                           long eLen,                    /* length of exist */
3611                           int crlf                      /* CRLF newlines instead of LF */
3612         )
3613 {
3614         ReadAsyncMsg *NewMsg;
3615
3616         NewMsg = (ReadAsyncMsg *)malloc(sizeof(ReadAsyncMsg));
3617         memset(NewMsg, 0, sizeof(ReadAsyncMsg));
3618
3619         if (exist == NULL) {
3620                 long len;
3621
3622                 if (expectlen == 0) {
3623                         len = 4 * SIZ;
3624                 }
3625                 else {
3626                         len = expectlen + 10;
3627                 }
3628                 NewMsg->MsgBuf = NewStrBufPlain(NULL, len);
3629         }
3630         else {
3631                 NewMsg->MsgBuf = NewStrBufPlain(exist, eLen);
3632                 free(exist);
3633         }
3634         /* Do we need to change leading ".." to "." for SMTP escaping? */
3635         if ((tlen == 1) && (*terminator == '.')) {
3636                 NewMsg->dodot = 1;
3637         }
3638
3639         NewMsg->terminator = terminator;
3640         NewMsg->tlen = tlen;
3641
3642         NewMsg->maxlen = maxlen;
3643
3644         NewMsg->crlf = crlf;
3645
3646         return NewMsg;
3647 }
3648
3649 /*
3650  * Back end function used by CtdlMakeMessage() and similar functions
3651  */
3652 eReadState CtdlReadMessageBodyAsync(AsyncIO *IO)
3653 {
3654         ReadAsyncMsg *ReadMsg;
3655         int MsgFinished = 0;
3656         eReadState Finished = eMustReadMore;
3657
3658 #ifdef BIGBAD_IODBG
3659         char fn [SIZ];
3660         FILE *fd;
3661         const char *pch = ChrPtr(IO->SendBuf.Buf);
3662         const char *pchh = IO->SendBuf.ReadWritePointer;
3663         long nbytes;
3664         
3665         if (pchh == NULL)
3666                 pchh = pch;
3667         
3668         nbytes = StrLength(IO->SendBuf.Buf) - (pchh - pch);
3669         snprintf(fn, SIZ, "/tmp/foolog_ev_%s.%d",
3670                  ((CitContext*)(IO->CitContext))->ServiceName,
3671                  IO->SendBuf.fd);
3672         
3673         fd = fopen(fn, "a+");
3674 #endif
3675
3676         ReadMsg = IO->ReadMsg;
3677
3678         /* read in the lines of message text one by one */
3679         do {
3680                 Finished = StrBufChunkSipLine(IO->IOBuf, &IO->RecvBuf);
3681                 
3682                 switch (Finished) {
3683                 case eMustReadMore: /// read new from socket... 
3684 #ifdef BIGBAD_IODBG
3685                         if (IO->RecvBuf.ReadWritePointer != NULL) {
3686                                 nbytes = StrLength(IO->RecvBuf.Buf) - (IO->RecvBuf.ReadWritePointer - ChrPtr(IO->RecvBuf.Buf));
3687                                 fprintf(fd, "Read; Line unfinished: %ld Bytes still in buffer [", nbytes);
3688                                 
3689                                 fwrite(IO->RecvBuf.ReadWritePointer, nbytes, 1, fd);
3690                         
3691                                 fprintf(fd, "]\n");
3692                         } else {
3693                                 fprintf(fd, "BufferEmpty! \n");
3694                         }
3695                         fclose(fd);
3696 #endif
3697                         return Finished;
3698                     break;
3699                 case eBufferNotEmpty: /* shouldn't happen... */
3700                 case eReadSuccess: /// done for now...
3701                     break;
3702                 case eReadFail: /// WHUT?
3703                     ///todo: shut down! 
3704                         break;
3705                 }
3706             
3707
3708                 if ((StrLength(IO->IOBuf) == ReadMsg->tlen) && 
3709                     (!strcmp(ChrPtr(IO->IOBuf), ReadMsg->terminator))) {
3710                         MsgFinished = 1;
3711 #ifdef BIGBAD_IODBG
3712                         fprintf(fd, "found Terminator; Message Size: %d\n", StrLength(ReadMsg->MsgBuf));
3713 #endif
3714                 }
3715                 else if (!ReadMsg->flushing) {
3716
3717 #ifdef BIGBAD_IODBG
3718                         fprintf(fd, "Read Line: [%d][%s]\n", StrLength(IO->IOBuf), ChrPtr(IO->IOBuf));
3719 #endif
3720
3721                         /* Unescape SMTP-style input of two dots at the beginning of the line */
3722                         if ((ReadMsg->dodot) &&
3723                             (StrLength(IO->IOBuf) == 2) &&  /* TODO: do we just unescape lines with two dots or any line? */
3724                             (!strcmp(ChrPtr(IO->IOBuf), "..")))
3725                         {
3726 #ifdef BIGBAD_IODBG
3727                                 fprintf(fd, "UnEscaped!\n");
3728 #endif
3729                                 StrBufCutLeft(IO->IOBuf, 1);
3730                         }
3731
3732                         if (ReadMsg->crlf) {
3733                                 StrBufAppendBufPlain(IO->IOBuf, HKEY("\r\n"), 0);
3734                         }
3735                         else {
3736                                 StrBufAppendBufPlain(IO->IOBuf, HKEY("\n"), 0);
3737                         }
3738
3739                         StrBufAppendBuf(ReadMsg->MsgBuf, IO->IOBuf, 0);
3740                 }
3741
3742                 /* if we've hit the max msg length, flush the rest */
3743                 if (StrLength(ReadMsg->MsgBuf) >= ReadMsg->maxlen) ReadMsg->flushing = 1;
3744
3745         } while (!MsgFinished);
3746
3747 #ifdef BIGBAD_IODBG
3748         fprintf(fd, "Done with reading; %s.\n, ",
3749                 (MsgFinished)?"Message Finished": "FAILED");
3750         fclose(fd);
3751 #endif
3752         if (MsgFinished)
3753                 return eReadSuccess;
3754         else 
3755                 return eAbort;
3756 }
3757
3758
3759 /*
3760  * Back end function used by CtdlMakeMessage() and similar functions
3761  */
3762 char *CtdlReadMessageBody(char *terminator,     /* token signalling EOT */
3763                           long tlen,
3764                           size_t maxlen,                /* maximum message length */
3765                           char *exist,          /* if non-null, append to it;
3766                                                    exist is ALWAYS freed  */
3767                           int crlf,             /* CRLF newlines instead of LF */
3768                           int *sock             /* socket handle or 0 for this session's client socket */
3769         ) 
3770 {
3771         StrBuf *Message;
3772
3773         Message = CtdlReadMessageBodyBuf(terminator,
3774                                          tlen,
3775                                          maxlen,
3776                                          exist,
3777                                          crlf,
3778                                          sock);
3779         if (Message == NULL)
3780                 return NULL;
3781         else
3782                 return SmashStrBuf(&Message);
3783 }
3784
3785
3786 /*
3787  * Build a binary message to be saved on disk.
3788  * (NOTE: if you supply 'preformatted_text', the buffer you give it
3789  * will become part of the message.  This means you are no longer
3790  * responsible for managing that memory -- it will be freed along with
3791  * the rest of the fields when CtdlFreeMessage() is called.)
3792  */
3793
3794 struct CtdlMessage *CtdlMakeMessage(
3795         struct ctdluser *author,        /* author's user structure */
3796         char *recipient,                /* NULL if it's not mail */
3797         char *recp_cc,                  /* NULL if it's not mail */
3798         char *room,                     /* room where it's going */
3799         int type,                       /* see MES_ types in header file */
3800         int format_type,                /* variformat, plain text, MIME... */
3801         char *fake_name,                /* who we're masquerading as */
3802         char *my_email,                 /* which of my email addresses to use (empty is ok) */
3803         char *subject,                  /* Subject (optional) */
3804         char *supplied_euid,            /* ...or NULL if this is irrelevant */
3805         char *preformatted_text,        /* ...or NULL to read text from client */
3806         char *references                /* Thread references */
3807         ) {
3808         char dest_node[256];
3809         char buf[1024];
3810         struct CtdlMessage *msg;
3811         StrBuf *FakeAuthor;
3812         StrBuf *FakeEncAuthor = NULL;
3813
3814         msg = malloc(sizeof(struct CtdlMessage));
3815         memset(msg, 0, sizeof(struct CtdlMessage));
3816         msg->cm_magic = CTDLMESSAGE_MAGIC;
3817         msg->cm_anon_type = type;
3818         msg->cm_format_type = format_type;
3819
3820         /* Don't confuse the poor folks if it's not routed mail. */
3821         strcpy(dest_node, "");
3822
3823         if (recipient != NULL) striplt(recipient);
3824         if (recp_cc != NULL) striplt(recp_cc);
3825
3826         /* Path or Return-Path */
3827         if (my_email == NULL) my_email = "";
3828
3829         if (!IsEmptyStr(my_email)) {
3830                 msg->cm_fields['P'] = strdup(my_email);
3831         }
3832         else {
3833                 snprintf(buf, sizeof buf, "%s", author->fullname);
3834                 msg->cm_fields['P'] = strdup(buf);
3835         }
3836         convert_spaces_to_underscores(msg->cm_fields['P']);
3837
3838         snprintf(buf, sizeof buf, "%ld", (long)time(NULL));     /* timestamp */
3839         msg->cm_fields['T'] = strdup(buf);
3840
3841         if ((fake_name != NULL) && (fake_name[0])) {            /* author */
3842                 FakeAuthor = NewStrBufPlain (fake_name, -1);
3843         }
3844         else {
3845                 FakeAuthor = NewStrBufPlain (author->fullname, -1);
3846         }
3847         StrBufRFC2047encode(&FakeEncAuthor, FakeAuthor);
3848         msg->cm_fields['A'] = SmashStrBuf(&FakeEncAuthor);
3849         FreeStrBuf(&FakeAuthor);
3850
3851         if (CC->room.QRflags & QR_MAILBOX) {            /* room */
3852                 msg->cm_fields['O'] = strdup(&CC->room.QRname[11]);
3853         }
3854         else {
3855                 msg->cm_fields['O'] = strdup(CC->room.QRname);
3856         }
3857
3858         msg->cm_fields['N'] = strdup(NODENAME);         /* nodename */
3859         msg->cm_fields['H'] = strdup(HUMANNODE);                /* hnodename */
3860
3861         if ((recipient != NULL) && (recipient[0] != 0)) {
3862                 msg->cm_fields['R'] = strdup(recipient);
3863         }
3864         if ((recp_cc != NULL) && (recp_cc[0] != 0)) {
3865                 msg->cm_fields['Y'] = strdup(recp_cc);
3866         }
3867         if (dest_node[0] != 0) {
3868                 msg->cm_fields['D'] = strdup(dest_node);
3869         }
3870
3871         if (!IsEmptyStr(my_email)) {
3872                 msg->cm_fields['F'] = strdup(my_email);
3873         }
3874         else if ( (author == &CC->user) && (!IsEmptyStr(CC->cs_inet_email)) ) {
3875                 msg->cm_fields['F'] = strdup(CC->cs_inet_email);
3876         }
3877
3878         if (subject != NULL) {
3879                 long length;
3880                 striplt(subject);
3881                 length = strlen(subject);
3882                 if (length > 0) {
3883                         long i;
3884                         long IsAscii;
3885                         IsAscii = -1;
3886                         i = 0;
3887                         while ((subject[i] != '\0') &&
3888                                (IsAscii = isascii(subject[i]) != 0 ))
3889                                 i++;
3890                         if (IsAscii != 0)
3891                                 msg->cm_fields['U'] = strdup(subject);
3892                         else /* ok, we've got utf8 in the string. */
3893                         {
3894                                 msg->cm_fields['U'] = rfc2047encode(subject, length);
3895                         }
3896
3897                 }
3898         }
3899
3900         if (supplied_euid != NULL) {
3901                 msg->cm_fields['E'] = strdup(supplied_euid);
3902         }
3903
3904         if ((references != NULL) && (!IsEmptyStr(references))) {
3905                 if (msg->cm_fields['W'] != NULL)
3906                         free(msg->cm_fields['W']);
3907                 msg->cm_fields['W'] = strdup(references);
3908         }
3909
3910         if (preformatted_text != NULL) {
3911                 msg->cm_fields['M'] = preformatted_text;
3912         }
3913         else {
3914                 msg->cm_fields['M'] = CtdlReadMessageBody(HKEY("000"), config.c_maxmsglen, NULL, 0, 0);
3915         }
3916
3917         return(msg);
3918 }
3919
3920 extern int netconfig_check_roomaccess(
3921         char *errmsgbuf, 
3922         size_t n,
3923         const char* RemoteIdentifier); /* TODO: find a smarter way */
3924
3925 /*
3926  * Check to see whether we have permission to post a message in the current
3927  * room.  Returns a *CITADEL ERROR CODE* and puts a message in errmsgbuf, or
3928  * returns 0 on success.
3929  */
3930 int CtdlDoIHavePermissionToPostInThisRoom(
3931         char *errmsgbuf, 
3932         size_t n, 
3933         const char* RemoteIdentifier,
3934         int PostPublic,
3935         int is_reply
3936         ) {
3937         int ra;
3938
3939         if (!(CC->logged_in) && 
3940             (PostPublic == POST_LOGGED_IN)) {
3941                 snprintf(errmsgbuf, n, "Not logged in.");
3942                 return (ERROR + NOT_LOGGED_IN);
3943         }
3944         else if (PostPublic == CHECK_EXISTANCE) {
3945                 return (0); // We're Evaling whether a recipient exists
3946         }
3947         else if (!(CC->logged_in)) {
3948                 
3949                 if ((CC->room.QRflags & QR_READONLY)) {
3950                         snprintf(errmsgbuf, n, "Not logged in.");
3951                         return (ERROR + NOT_LOGGED_IN);
3952                 }
3953                 if (CC->room.QRflags2 & QR2_MODERATED) {
3954                         snprintf(errmsgbuf, n, "Not logged in Moderation feature not yet implemented!");
3955                         return (ERROR + NOT_LOGGED_IN);
3956                 }
3957                 if ((PostPublic!=POST_LMTP) &&(CC->room.QRflags2 & QR2_SMTP_PUBLIC) == 0) {
3958
3959                         return netconfig_check_roomaccess(errmsgbuf, n, RemoteIdentifier);
3960                 }
3961                 return (0);
3962
3963         }
3964
3965         if ((CC->user.axlevel < AxProbU)
3966             && ((CC->room.QRflags & QR_MAILBOX) == 0)) {
3967                 snprintf(errmsgbuf, n, "Need to be validated to enter (except in %s> to sysop)", MAILROOM);
3968                 return (ERROR + HIGHER_ACCESS_REQUIRED);
3969         }
3970
3971         CtdlRoomAccess(&CC->room, &CC->user, &ra, NULL);
3972
3973         if (ra & UA_POSTALLOWED) {
3974                 strcpy(errmsgbuf, "OK to post or reply here");
3975                 return(0);
3976         }
3977
3978         if ( (ra & UA_REPLYALLOWED) && (is_reply) ) {
3979                 /*
3980                  * To be thorough, we ought to check to see if the message they are
3981                  * replying to is actually a valid one in this room, but unless this
3982                  * actually becomes a problem we'll go with high performance instead.
3983                  */
3984                 strcpy(errmsgbuf, "OK to reply here");
3985                 return(0);
3986         }
3987
3988         if ( (ra & UA_REPLYALLOWED) && (!is_reply) ) {
3989                 /* Clarify what happened with a better error message */
3990                 snprintf(errmsgbuf, n, "You may only reply to existing messages here.");
3991                 return (ERROR + HIGHER_ACCESS_REQUIRED);
3992         }
3993
3994         snprintf(errmsgbuf, n, "Higher access is required to post in this room.");
3995         return (ERROR + HIGHER_ACCESS_REQUIRED);
3996
3997 }
3998
3999
4000 /*
4001  * Check to see if the specified user has Internet mail permission
4002  * (returns nonzero if permission is granted)
4003  */
4004 int CtdlCheckInternetMailPermission(struct ctdluser *who) {
4005
4006         /* Do not allow twits to send Internet mail */
4007         if (who->axlevel <= AxProbU) return(0);
4008
4009         /* Globally enabled? */
4010         if (config.c_restrict == 0) return(1);
4011
4012         /* User flagged ok? */
4013         if (who->flags & US_INTERNET) return(2);
4014
4015         /* Aide level access? */
4016         if (who->axlevel >= AxAideU) return(3);
4017
4018         /* No mail for you! */
4019         return(0);
4020 }
4021
4022
4023 /*
4024  * Validate recipients, count delivery types and errors, and handle aliasing
4025  * FIXME check for dupes!!!!!
4026  *
4027  * Returns 0 if all addresses are ok, ret->num_error = -1 if no addresses 
4028  * were specified, or the number of addresses found invalid.
4029  *
4030  * Caller needs to free the result using free_recipients()
4031  */
4032 struct recptypes *validate_recipients(const char *supplied_recipients, 
4033                                       const char *RemoteIdentifier, 
4034                                       int Flags) {
4035         struct CitContext *CCC = CC;
4036         struct recptypes *ret;
4037         char *recipients = NULL;
4038         char *org_recp;
4039         char this_recp[256];
4040         char this_recp_cooked[256];
4041         char append[SIZ];
4042         long len;
4043         int num_recps = 0;
4044         int i, j;
4045         int mailtype;
4046         int invalid;
4047         struct ctdluser tempUS;
4048         struct ctdlroom tempQR;
4049         struct ctdlroom tempQR2;
4050         int err = 0;
4051         char errmsg[SIZ];
4052         int in_quotes = 0;
4053
4054         /* Initialize */
4055         ret = (struct recptypes *) malloc(sizeof(struct recptypes));
4056         if (ret == NULL) return(NULL);
4057
4058         /* Set all strings to null and numeric values to zero */
4059         memset(ret, 0, sizeof(struct recptypes));
4060
4061         if (supplied_recipients == NULL) {
4062                 recipients = strdup("");
4063         }
4064         else {
4065                 recipients = strdup(supplied_recipients);
4066         }
4067
4068         /* Allocate some memory.  Yes, this allocates 500% more memory than we will
4069          * actually need, but it's healthier for the heap than doing lots of tiny
4070          * realloc() calls instead.
4071          */
4072         len = strlen(recipients) + 1024;
4073         ret->errormsg = malloc(len);
4074         ret->recp_local = malloc(len);
4075         ret->recp_internet = malloc(len);
4076         ret->recp_ignet = malloc(len);
4077         ret->recp_room = malloc(len);
4078         ret->display_recp = malloc(len);
4079         ret->recp_orgroom = malloc(len);
4080         org_recp = malloc(len);
4081
4082         ret->errormsg[0] = 0;
4083         ret->recp_local[0] = 0;
4084         ret->recp_internet[0] = 0;
4085         ret->recp_ignet[0] = 0;
4086         ret->recp_room[0] = 0;
4087         ret->recp_orgroom[0] = 0;
4088         ret->display_recp[0] = 0;
4089
4090         ret->recptypes_magic = RECPTYPES_MAGIC;
4091
4092         /* Change all valid separator characters to commas */
4093         for (i=0; !IsEmptyStr(&recipients[i]); ++i) {
4094                 if ((recipients[i] == ';') || (recipients[i] == '|')) {
4095                         recipients[i] = ',';
4096                 }
4097         }
4098
4099         /* Now start extracting recipients... */
4100
4101         while (!IsEmptyStr(recipients)) {
4102                 for (i=0; i<=strlen(recipients); ++i) {
4103                         if (recipients[i] == '\"') in_quotes = 1 - in_quotes;
4104                         if ( ( (recipients[i] == ',') && (!in_quotes) ) || (recipients[i] == 0) ) {
4105                                 safestrncpy(this_recp, recipients, i+1);
4106                                 this_recp[i] = 0;
4107                                 if (recipients[i] == ',') {
4108                                         strcpy(recipients, &recipients[i+1]);
4109                                 }
4110                                 else {
4111                                         strcpy(recipients, "");
4112                                 }
4113                                 break;
4114                         }
4115                 }
4116
4117                 striplt(this_recp);
4118                 if (IsEmptyStr(this_recp))
4119                         break;
4120                 MSG_syslog(LOG_DEBUG, "Evaluating recipient #%d: %s\n", num_recps, this_recp);
4121                 ++num_recps;
4122
4123                 strcpy(org_recp, this_recp);
4124                 alias(this_recp);
4125                 alias(this_recp);
4126                 mailtype = alias(this_recp);
4127
4128                 for (j = 0; !IsEmptyStr(&this_recp[j]); ++j) {
4129                         if (this_recp[j]=='_') {
4130                                 this_recp_cooked[j] = ' ';
4131                         }
4132                         else {
4133                                 this_recp_cooked[j] = this_recp[j];
4134                         }
4135                 }
4136                 this_recp_cooked[j] = '\0';
4137                 invalid = 0;
4138                 errmsg[0] = 0;
4139                 switch(mailtype) {
4140                 case MES_LOCAL:
4141                         if (!strcasecmp(this_recp, "sysop")) {
4142                                 ++ret->num_room;
4143                                 strcpy(this_recp, config.c_aideroom);
4144                                 if (!IsEmptyStr(ret->recp_room)) {
4145                                         strcat(ret->recp_room, "|");
4146                                 }
4147                                 strcat(ret->recp_room, this_recp);
4148                         }
4149                         else if ( (!strncasecmp(this_recp, "room_", 5))
4150                                   && (!CtdlGetRoom(&tempQR, &this_recp_cooked[5])) ) {
4151
4152                                 /* Save room so we can restore it later */
4153                                 tempQR2 = CCC->room;
4154                                 CCC->room = tempQR;
4155                                         
4156                                 /* Check permissions to send mail to this room */
4157                                 err = CtdlDoIHavePermissionToPostInThisRoom(
4158                                         errmsg, 
4159                                         sizeof errmsg, 
4160                                         RemoteIdentifier,
4161                                         Flags,
4162                                         0                       /* 0 = not a reply */
4163                                         );
4164                                 if (err)
4165                                 {
4166                                         ++ret->num_error;
4167                                         invalid = 1;
4168                                 } 
4169                                 else {
4170                                         ++ret->num_room;
4171                                         if (!IsEmptyStr(ret->recp_room)) {
4172                                                 strcat(ret->recp_room, "|");
4173                                         }
4174                                         strcat(ret->recp_room, &this_recp_cooked[5]);
4175
4176                                         if (!IsEmptyStr(ret->recp_orgroom)) {
4177                                                 strcat(ret->recp_orgroom, "|");
4178                                         }
4179                                         strcat(ret->recp_orgroom, org_recp);
4180
4181                                 }
4182                                         
4183                                 /* Restore room in case something needs it */
4184                                 CCC->room = tempQR2;
4185
4186                         }
4187                         else if (CtdlGetUser(&tempUS, this_recp) == 0) {
4188                                 ++ret->num_local;
4189                                 strcpy(this_recp, tempUS.fullname);
4190                                 if (!IsEmptyStr(ret->recp_local)) {
4191                                         strcat(ret->recp_local, "|");
4192                                 }
4193                                 strcat(ret->recp_local, this_recp);
4194                         }
4195                         else if (CtdlGetUser(&tempUS, this_recp_cooked) == 0) {
4196                                 ++ret->num_local;
4197                                 strcpy(this_recp, tempUS.fullname);
4198                                 if (!IsEmptyStr(ret->recp_local)) {
4199                                         strcat(ret->recp_local, "|");
4200                                 }
4201                                 strcat(ret->recp_local, this_recp);
4202                         }
4203                         else {
4204                                 ++ret->num_error;
4205                                 invalid = 1;
4206                         }
4207                         break;
4208                 case MES_INTERNET:
4209                         /* Yes, you're reading this correctly: if the target
4210                          * domain points back to the local system or an attached
4211                          * Citadel directory, the address is invalid.  That's
4212                          * because if the address were valid, we would have
4213                          * already translated it to a local address by now.
4214                          */
4215                         if (IsDirectory(this_recp, 0)) {
4216                                 ++ret->num_error;
4217                                 invalid = 1;
4218                         }
4219                         else {
4220                                 ++ret->num_internet;
4221                                 if (!IsEmptyStr(ret->recp_internet)) {
4222                                         strcat(ret->recp_internet, "|");
4223                                 }
4224                                 strcat(ret->recp_internet, this_recp);
4225                         }
4226                         break;
4227                 case MES_IGNET:
4228                         ++ret->num_ignet;
4229                         if (!IsEmptyStr(ret->recp_ignet)) {
4230                                 strcat(ret->recp_ignet, "|");
4231                         }
4232                         strcat(ret->recp_ignet, this_recp);
4233                         break;
4234                 case MES_ERROR:
4235                         ++ret->num_error;
4236                         invalid = 1;
4237                         break;
4238                 }
4239                 if (invalid) {
4240                         if (IsEmptyStr(errmsg)) {
4241                                 snprintf(append, sizeof append, "Invalid recipient: %s", this_recp);
4242                         }
4243                         else {
4244                                 snprintf(append, sizeof append, "%s", errmsg);
4245                         }
4246                         if ( (strlen(ret->errormsg) + strlen(append) + 3) < SIZ) {
4247                                 if (!IsEmptyStr(ret->errormsg)) {
4248                                         strcat(ret->errormsg, "; ");
4249                                 }
4250                                 strcat(ret->errormsg, append);
4251                         }
4252                 }
4253                 else {
4254                         if (IsEmptyStr(ret->display_recp)) {
4255                                 strcpy(append, this_recp);
4256                         }
4257                         else {
4258                                 snprintf(append, sizeof append, ", %s", this_recp);
4259                         }
4260                         if ( (strlen(ret->display_recp)+strlen(append)) < SIZ) {
4261                                 strcat(ret->display_recp, append);
4262                         }
4263                 }
4264         }
4265         free(org_recp);
4266
4267         if ((ret->num_local + ret->num_internet + ret->num_ignet +
4268              ret->num_room + ret->num_error) == 0) {
4269                 ret->num_error = (-1);
4270                 strcpy(ret->errormsg, "No recipients specified.");
4271         }
4272
4273         MSGM_syslog(LOG_DEBUG, "validate_recipients()\n");
4274         MSG_syslog(LOG_DEBUG, " local: %d <%s>\n", ret->num_local, ret->recp_local);
4275         MSG_syslog(LOG_DEBUG, "  room: %d <%s>\n", ret->num_room, ret->recp_room);
4276         MSG_syslog(LOG_DEBUG, "  inet: %d <%s>\n", ret->num_internet, ret->recp_internet);
4277         MSG_syslog(LOG_DEBUG, " ignet: %d <%s>\n", ret->num_ignet, ret->recp_ignet);
4278         MSG_syslog(LOG_DEBUG, " error: %d <%s>\n", ret->num_error, ret->errormsg);
4279
4280         free(recipients);
4281         return(ret);
4282 }
4283
4284
4285 /*
4286  * Destructor for struct recptypes
4287  */
4288 void free_recipients(struct recptypes *valid) {
4289
4290         if (valid == NULL) {
4291                 return;
4292         }
4293
4294         if (valid->recptypes_magic != RECPTYPES_MAGIC) {
4295                 struct CitContext *CCC = CC;
4296                 MSGM_syslog(LOG_EMERG, "Attempt to call free_recipients() on some other data type!\n");
4297                 abort();
4298         }
4299
4300         if (valid->errormsg != NULL)            free(valid->errormsg);
4301         if (valid->recp_local != NULL)          free(valid->recp_local);
4302         if (valid->recp_internet != NULL)       free(valid->recp_internet);
4303         if (valid->recp_ignet != NULL)          free(valid->recp_ignet);
4304         if (valid->recp_room != NULL)           free(valid->recp_room);
4305         if (valid->recp_orgroom != NULL)        free(valid->recp_orgroom);
4306         if (valid->display_recp != NULL)        free(valid->display_recp);
4307         if (valid->bounce_to != NULL)           free(valid->bounce_to);
4308         if (valid->envelope_from != NULL)       free(valid->envelope_from);
4309         if (valid->sending_room != NULL)        free(valid->sending_room);
4310         free(valid);
4311 }
4312
4313
4314
4315 /*
4316  * message entry  -  mode 0 (normal)
4317  */
4318 void cmd_ent0(char *entargs)
4319 {
4320         struct CitContext *CCC = CC;
4321         int post = 0;
4322         char recp[SIZ];
4323         char cc[SIZ];
4324         char bcc[SIZ];
4325         char supplied_euid[128];
4326         int anon_flag = 0;
4327         int format_type = 0;
4328         char newusername[256];
4329         char newuseremail[256];
4330         struct CtdlMessage *msg;
4331         int anonymous = 0;
4332         char errmsg[SIZ];
4333         int err = 0;
4334         struct recptypes *valid = NULL;
4335         struct recptypes *valid_to = NULL;
4336         struct recptypes *valid_cc = NULL;
4337         struct recptypes *valid_bcc = NULL;
4338         char subject[SIZ];
4339         int subject_required = 0;
4340         int do_confirm = 0;
4341         long msgnum;
4342         int i, j;
4343         char buf[256];
4344         int newuseremail_ok = 0;
4345         char references[SIZ];
4346         char *ptr;
4347
4348         unbuffer_output();
4349
4350         post = extract_int(entargs, 0);
4351         extract_token(recp, entargs, 1, '|', sizeof recp);
4352         anon_flag = extract_int(entargs, 2);
4353         format_type = extract_int(entargs, 3);
4354         extract_token(subject, entargs, 4, '|', sizeof subject);
4355         extract_token(newusername, entargs, 5, '|', sizeof newusername);
4356         do_confirm = extract_int(entargs, 6);
4357         extract_token(cc, entargs, 7, '|', sizeof cc);
4358         extract_token(bcc, entargs, 8, '|', sizeof bcc);
4359         switch(CC->room.QRdefaultview) {
4360         case VIEW_NOTES:
4361         case VIEW_WIKI:
4362                 extract_token(supplied_euid, entargs, 9, '|', sizeof supplied_euid);
4363                 break;
4364         default:
4365                 supplied_euid[0] = 0;
4366                 break;
4367         }
4368         extract_token(newuseremail, entargs, 10, '|', sizeof newuseremail);
4369         extract_token(references, entargs, 11, '|', sizeof references);
4370         for (ptr=references; *ptr != 0; ++ptr) {
4371                 if (*ptr == '!') *ptr = '|';
4372         }
4373
4374         /* first check to make sure the request is valid. */
4375
4376         err = CtdlDoIHavePermissionToPostInThisRoom(
4377                 errmsg,
4378                 sizeof errmsg,
4379                 NULL,
4380                 POST_LOGGED_IN,
4381                 (!IsEmptyStr(references))               /* is this a reply?  or a top-level post? */
4382                 );
4383         if (err)
4384         {
4385                 cprintf("%d %s\n", err, errmsg);
4386                 return;
4387         }
4388
4389         /* Check some other permission type things. */
4390
4391         if (IsEmptyStr(newusername)) {
4392                 strcpy(newusername, CCC->user.fullname);
4393         }
4394         if (  (CCC->user.axlevel < AxAideU)
4395               && (strcasecmp(newusername, CCC->user.fullname))
4396               && (strcasecmp(newusername, CCC->cs_inet_fn))
4397                 ) {     
4398                 cprintf("%d You don't have permission to author messages as '%s'.\n",
4399                         ERROR + HIGHER_ACCESS_REQUIRED,
4400                         newusername
4401                         );
4402                 return;
4403         }
4404
4405
4406         if (IsEmptyStr(newuseremail)) {
4407                 newuseremail_ok = 1;
4408         }
4409
4410         if (!IsEmptyStr(newuseremail)) {
4411                 if (!strcasecmp(newuseremail, CCC->cs_inet_email)) {
4412                         newuseremail_ok = 1;
4413                 }
4414                 else if (!IsEmptyStr(CCC->cs_inet_other_emails)) {
4415                         j = num_tokens(CCC->cs_inet_other_emails, '|');
4416                         for (i=0; i<j; ++i) {
4417                                 extract_token(buf, CCC->cs_inet_other_emails, i, '|', sizeof buf);
4418                                 if (!strcasecmp(newuseremail, buf)) {
4419                                         newuseremail_ok = 1;
4420                                 }
4421                         }
4422                 }
4423         }
4424
4425         if (!newuseremail_ok) {
4426                 cprintf("%d You don't have permission to author messages as '%s'.\n",
4427                         ERROR + HIGHER_ACCESS_REQUIRED,
4428                         newuseremail
4429                         );
4430                 return;
4431         }
4432
4433         CCC->cs_flags |= CS_POSTING;
4434
4435         /* In mailbox rooms we have to behave a little differently --
4436          * make sure the user has specified at least one recipient.  Then
4437          * validate the recipient(s).  We do this for the Mail> room, as
4438          * well as any room which has the "Mailbox" view set - unless it
4439          * is the DRAFTS room which does not require recipients
4440          */
4441
4442         if ( (  ( (CCC->room.QRflags & QR_MAILBOX) && (!strcasecmp(&CCC->room.QRname[11], MAILROOM)) )
4443                 || ( (CCC->room.QRflags & QR_MAILBOX) && (CCC->curr_view == VIEW_MAILBOX) )
4444                      ) && (strcasecmp(&CCC->room.QRname[11], USERDRAFTROOM)) !=0 ) {
4445                 if (CCC->user.axlevel < AxProbU) {
4446                         strcpy(recp, "sysop");
4447                         strcpy(cc, "");
4448                         strcpy(bcc, "");
4449                 }
4450
4451                 valid_to = validate_recipients(recp, NULL, 0);
4452                 if (valid_to->num_error > 0) {
4453                         cprintf("%d %s\n", ERROR + NO_SUCH_USER, valid_to->errormsg);
4454                         free_recipients(valid_to);
4455                         return;
4456                 }
4457
4458                 valid_cc = validate_recipients(cc, NULL, 0);
4459                 if (valid_cc->num_error > 0) {
4460                         cprintf("%d %s\n", ERROR + NO_SUCH_USER, valid_cc->errormsg);
4461                         free_recipients(valid_to);
4462                         free_recipients(valid_cc);
4463                         return;
4464                 }
4465
4466                 valid_bcc = validate_recipients(bcc, NULL, 0);
4467                 if (valid_bcc->num_error > 0) {
4468                         cprintf("%d %s\n", ERROR + NO_SUCH_USER, valid_bcc->errormsg);
4469                         free_recipients(valid_to);
4470                         free_recipients(valid_cc);
4471                         free_recipients(valid_bcc);
4472                         return;
4473                 }
4474
4475                 /* Recipient required, but none were specified */
4476                 if ( (valid_to->num_error < 0) && (valid_cc->num_error < 0) && (valid_bcc->num_error < 0) ) {
4477                         free_recipients(valid_to);
4478                         free_recipients(valid_cc);
4479                         free_recipients(valid_bcc);
4480                         cprintf("%d At least one recipient is required.\n", ERROR + NO_SUCH_USER);
4481                         return;
4482                 }
4483
4484                 if (valid_to->num_internet + valid_cc->num_internet + valid_bcc->num_internet > 0) {
4485                         if (CtdlCheckInternetMailPermission(&CCC->user)==0) {
4486                                 cprintf("%d You do not have permission "
4487                                         "to send Internet mail.\n",
4488                                         ERROR + HIGHER_ACCESS_REQUIRED);
4489                                 free_recipients(valid_to);
4490                                 free_recipients(valid_cc);
4491                                 free_recipients(valid_bcc);
4492                                 return;
4493                         }
4494                 }
4495
4496                 if ( ( (valid_to->num_internet + valid_to->num_ignet + valid_cc->num_internet + valid_cc->num_ignet + valid_bcc->num_internet + valid_bcc->num_ignet) > 0)
4497                      && (CCC->user.axlevel < AxNetU) ) {
4498                         cprintf("%d Higher access required for network mail.\n",
4499                                 ERROR + HIGHER_ACCESS_REQUIRED);
4500                         free_recipients(valid_to);
4501                         free_recipients(valid_cc);
4502                         free_recipients(valid_bcc);
4503                         return;
4504                 }
4505         
4506                 if ((RESTRICT_INTERNET == 1)
4507                     && (valid_to->num_internet + valid_cc->num_internet + valid_bcc->num_internet > 0)
4508                     && ((CCC->user.flags & US_INTERNET) == 0)
4509                     && (!CCC->internal_pgm)) {
4510                         cprintf("%d You don't have access to Internet mail.\n",
4511                                 ERROR + HIGHER_ACCESS_REQUIRED);
4512                         free_recipients(valid_to);
4513                         free_recipients(valid_cc);
4514                         free_recipients(valid_bcc);
4515                         return;
4516                 }
4517
4518         }
4519
4520         /* Is this a room which has anonymous-only or anonymous-option? */
4521         anonymous = MES_NORMAL;
4522         if (CCC->room.QRflags & QR_ANONONLY) {
4523                 anonymous = MES_ANONONLY;
4524         }
4525         if (CCC->room.QRflags & QR_ANONOPT) {
4526                 if (anon_flag == 1) {   /* only if the user requested it */
4527                         anonymous = MES_ANONOPT;
4528                 }
4529         }
4530
4531         if ((CCC->room.QRflags & QR_MAILBOX) == 0) {
4532                 recp[0] = 0;
4533         }
4534
4535         /* Recommend to the client that the use of a message subject is
4536          * strongly recommended in this room, if either the SUBJECTREQ flag
4537          * is set, or if there is one or more Internet email recipients.
4538          */
4539         if (CCC->room.QRflags2 & QR2_SUBJECTREQ) subject_required = 1;
4540         if ((valid_to)  && (valid_to->num_internet > 0))        subject_required = 1;
4541         if ((valid_cc)  && (valid_cc->num_internet > 0))        subject_required = 1;
4542         if ((valid_bcc) && (valid_bcc->num_internet > 0))       subject_required = 1;
4543
4544         /* If we're only checking the validity of the request, return
4545          * success without creating the message.
4546          */
4547         if (post == 0) {
4548                 cprintf("%d %s|%d\n", CIT_OK,
4549                         ((valid_to != NULL) ? valid_to->display_recp : ""), 
4550                         subject_required);
4551                 free_recipients(valid_to);
4552                 free_recipients(valid_cc);
4553                 free_recipients(valid_bcc);
4554                 return;
4555         }
4556
4557         /* We don't need these anymore because we'll do it differently below */
4558         free_recipients(valid_to);
4559         free_recipients(valid_cc);
4560         free_recipients(valid_bcc);
4561
4562         /* Read in the message from the client. */
4563         if (do_confirm) {
4564                 cprintf("%d send message\n", START_CHAT_MODE);
4565         } else {
4566                 cprintf("%d send message\n", SEND_LISTING);
4567         }
4568
4569         msg = CtdlMakeMessage(&CCC->user, recp, cc,
4570                               CCC->room.QRname, anonymous, format_type,
4571                               newusername, newuseremail, subject,
4572                               ((!IsEmptyStr(supplied_euid)) ? supplied_euid : NULL),
4573                               NULL, references);
4574
4575         /* Put together one big recipients struct containing to/cc/bcc all in
4576          * one.  This is for the envelope.
4577          */
4578         char *all_recps = malloc(SIZ * 3);
4579         strcpy(all_recps, recp);
4580         if (!IsEmptyStr(cc)) {
4581                 if (!IsEmptyStr(all_recps)) {
4582                         strcat(all_recps, ",");
4583                 }
4584                 strcat(all_recps, cc);
4585         }
4586         if (!IsEmptyStr(bcc)) {
4587                 if (!IsEmptyStr(all_recps)) {
4588                         strcat(all_recps, ",");
4589                 }
4590                 strcat(all_recps, bcc);
4591         }
4592         if (!IsEmptyStr(all_recps)) {
4593                 valid = validate_recipients(all_recps, NULL, 0);
4594         }
4595         else {
4596                 valid = NULL;
4597         }
4598         free(all_recps);
4599
4600         if ((valid != NULL) && (valid->num_room == 1))
4601         {
4602                 /* posting into an ML room? set the envelope from 
4603                  * to the actual mail address so others get a valid
4604                  * reply-to-header.
4605                  */
4606                 msg->cm_fields['V'] = strdup(valid->recp_orgroom);
4607         }
4608
4609         if (msg != NULL) {
4610                 msgnum = CtdlSubmitMsg(msg, valid, "", QP_EADDR);
4611                 if (do_confirm) {
4612                         cprintf("%ld\n", msgnum);
4613
4614                         if (StrLength(CCC->StatusMessage) > 0) {
4615                                 cprintf("%s\n", ChrPtr(CCC->StatusMessage));
4616                         }
4617                         else if (msgnum >= 0L) {
4618                                 client_write(HKEY("Message accepted.\n"));
4619                         }
4620                         else {
4621                                 client_write(HKEY("Internal error.\n"));
4622                         }
4623
4624                         if (msg->cm_fields['E'] != NULL) {
4625                                 cprintf("%s\n", msg->cm_fields['E']);
4626                         } else {
4627                                 cprintf("\n");
4628                         }
4629                         cprintf("000\n");
4630                 }
4631
4632                 CtdlFreeMessage(msg);
4633         }
4634         if (valid != NULL) {
4635                 free_recipients(valid);
4636         }
4637         return;
4638 }
4639
4640
4641
4642 /*
4643  * API function to delete messages which match a set of criteria
4644  * (returns the actual number of messages deleted)
4645  */
4646 int CtdlDeleteMessages(char *room_name,         /* which room */
4647                        long *dmsgnums,          /* array of msg numbers to be deleted */
4648                        int num_dmsgnums,        /* number of msgs to be deleted, or 0 for "any" */
4649                        char *content_type       /* or "" for any.  regular expressions expected. */
4650         )
4651 {
4652         struct CitContext *CCC = CC;
4653         struct ctdlroom qrbuf;
4654         struct cdbdata *cdbfr;
4655         long *msglist = NULL;
4656         long *dellist = NULL;
4657         int num_msgs = 0;
4658         int i, j;
4659         int num_deleted = 0;
4660         int delete_this;
4661         struct MetaData smi;
4662         regex_t re;
4663         regmatch_t pm;
4664         int need_to_free_re = 0;
4665
4666         if (content_type) if (!IsEmptyStr(content_type)) {
4667                         regcomp(&re, content_type, 0);
4668                         need_to_free_re = 1;
4669                 }
4670         MSG_syslog(LOG_DEBUG, "CtdlDeleteMessages(%s, %d msgs, %s)\n",
4671                    room_name, num_dmsgnums, content_type);
4672
4673         /* get room record, obtaining a lock... */
4674         if (CtdlGetRoomLock(&qrbuf, room_name) != 0) {
4675                 MSG_syslog(LOG_ERR, "CtdlDeleteMessages(): Room <%s> not found\n",
4676                            room_name);
4677                 if (need_to_free_re) regfree(&re);
4678                 return (0);     /* room not found */
4679         }
4680         cdbfr = cdb_fetch(CDB_MSGLISTS, &qrbuf.QRnumber, sizeof(long));
4681
4682         if (cdbfr != NULL) {
4683                 dellist = malloc(cdbfr->len);
4684                 msglist = (long *) cdbfr->ptr;
4685                 cdbfr->ptr = NULL;      /* CtdlDeleteMessages() now owns this memory */
4686                 num_msgs = cdbfr->len / sizeof(long);
4687                 cdb_free(cdbfr);
4688         }
4689         if (num_msgs > 0) {
4690                 int have_contenttype = (content_type != NULL) && !IsEmptyStr(content_type);
4691                 int have_delmsgs = (num_dmsgnums == 0) || (dmsgnums == NULL);
4692                 int have_more_del = 1;
4693
4694                 num_msgs = sort_msglist(msglist, num_msgs);
4695                 if (num_dmsgnums > 1)
4696                         num_dmsgnums = sort_msglist(dmsgnums, num_dmsgnums);
4697 /*
4698                 {
4699                         StrBuf *dbg = NewStrBuf();
4700                         for (i = 0; i < num_dmsgnums; i++)
4701                                 StrBufAppendPrintf(dbg, ", %ld", dmsgnums[i]);
4702                         MSG_syslog(LOG_DEBUG, "Deleting before: %s", ChrPtr(dbg));
4703                         FreeStrBuf(&dbg);
4704                 }
4705 */
4706                 i = 0; j = 0;
4707                 while ((i < num_msgs) && (have_more_del)) {
4708                         delete_this = 0x00;
4709
4710
4711                         /* Set/clear a bit for each criterion */
4712
4713                         /* 0 messages in the list or a null list means that we are
4714                          * interested in deleting any messages which meet the other criteria.
4715                          */
4716                         if (have_delmsgs) {
4717                                 delete_this |= 0x01;
4718                         }
4719                         else {
4720                                 while ((i < num_msgs) && (msglist[i] < dmsgnums[j])) i++;
4721                                 if (msglist[i] == dmsgnums[j]) {
4722                                         delete_this |= 0x01;
4723                                 }
4724                                 j++;
4725                                 have_more_del = (j < num_dmsgnums);
4726                         }
4727
4728                         if (have_contenttype) {
4729                                 GetMetaData(&smi, msglist[i]);
4730                                 if (regexec(&re, smi.meta_content_type, 1, &pm, 0) == 0) {
4731                                         delete_this |= 0x02;
4732                                 }
4733                         } else {
4734                                 delete_this |= 0x02;
4735                         }
4736
4737                         /* Delete message only if all bits are set */
4738                         if (delete_this == 0x03) {
4739                                 dellist[num_deleted++] = msglist[i];
4740                                 msglist[i] = 0L;
4741                         }
4742                         i++;
4743                 }
4744 /*
4745                 {
4746                         StrBuf *dbg = NewStrBuf();
4747                         for (i = 0; i < num_deleted; i++)
4748                                 StrBufAppendPrintf(dbg, ", %ld", dellist[i]);
4749                         MSG_syslog(LOG_DEBUG, "Deleting: %s", ChrPtr(dbg));
4750                         FreeStrBuf(&dbg);
4751                 }
4752 */
4753                 num_msgs = sort_msglist(msglist, num_msgs);
4754                 cdb_store(CDB_MSGLISTS, &qrbuf.QRnumber, (int)sizeof(long),
4755                           msglist, (int)(num_msgs * sizeof(long)));
4756
4757                 if (num_msgs > 0)
4758                         qrbuf.QRhighest = msglist[num_msgs - 1];
4759                 else
4760                         qrbuf.QRhighest = 0;
4761         }
4762         CtdlPutRoomLock(&qrbuf);
4763
4764         /* Go through the messages we pulled out of the index, and decrement
4765          * their reference counts by 1.  If this is the only room the message
4766          * was in, the reference count will reach zero and the message will
4767          * automatically be deleted from the database.  We do this in a
4768          * separate pass because there might be plug-in hooks getting called,
4769          * and we don't want that happening during an S_ROOMS critical
4770          * section.
4771          */
4772         if (num_deleted) {
4773                 for (i=0; i<num_deleted; ++i) {
4774                         PerformDeleteHooks(qrbuf.QRname, dellist[i]);
4775                 }
4776                 AdjRefCountList(dellist, num_deleted, -1);
4777         }
4778         /* Now free the memory we used, and go away. */
4779         if (msglist != NULL) free(msglist);
4780         if (dellist != NULL) free(dellist);
4781         MSG_syslog(LOG_DEBUG, "%d message(s) deleted.\n", num_deleted);
4782         if (need_to_free_re) regfree(&re);
4783         return (num_deleted);
4784 }
4785
4786
4787
4788 /*
4789  * Check whether the current user has permission to delete messages from
4790  * the current room (returns 1 for yes, 0 for no)
4791  */
4792 int CtdlDoIHavePermissionToDeleteMessagesFromThisRoom(void) {
4793         int ra;
4794         CtdlRoomAccess(&CC->room, &CC->user, &ra, NULL);
4795         if (ra & UA_DELETEALLOWED) return(1);
4796         return(0);
4797 }
4798
4799
4800
4801
4802 /*
4803  * Delete message from current room
4804  */
4805 void cmd_dele(char *args)
4806 {
4807         int num_deleted;
4808         int i;
4809         char msgset[SIZ];
4810         char msgtok[32];
4811         long *msgs;
4812         int num_msgs = 0;
4813
4814         extract_token(msgset, args, 0, '|', sizeof msgset);
4815         num_msgs = num_tokens(msgset, ',');
4816         if (num_msgs < 1) {
4817                 cprintf("%d Nothing to do.\n", CIT_OK);
4818                 return;
4819         }
4820
4821         if (CtdlDoIHavePermissionToDeleteMessagesFromThisRoom() == 0) {
4822                 cprintf("%d Higher access required.\n",
4823                         ERROR + HIGHER_ACCESS_REQUIRED);
4824                 return;
4825         }
4826
4827         /*
4828          * Build our message set to be moved/copied
4829          */
4830         msgs = malloc(num_msgs * sizeof(long));
4831         for (i=0; i<num_msgs; ++i) {
4832                 extract_token(msgtok, msgset, i, ',', sizeof msgtok);
4833                 msgs[i] = atol(msgtok);
4834         }
4835
4836         num_deleted = CtdlDeleteMessages(CC->room.QRname, msgs, num_msgs, "");
4837         free(msgs);
4838
4839         if (num_deleted) {
4840                 cprintf("%d %d message%s deleted.\n", CIT_OK,
4841                         num_deleted, ((num_deleted != 1) ? "s" : ""));
4842         } else {
4843                 cprintf("%d Message not found.\n", ERROR + MESSAGE_NOT_FOUND);
4844         }
4845 }
4846
4847
4848
4849
4850 /*
4851  * move or copy a message to another room
4852  */
4853 void cmd_move(char *args)
4854 {
4855         char msgset[SIZ];
4856         char msgtok[32];
4857         long *msgs;
4858         int num_msgs = 0;
4859
4860         char targ[ROOMNAMELEN];
4861         struct ctdlroom qtemp;
4862         int err;
4863         int is_copy = 0;
4864         int ra;
4865         int permit = 0;
4866         int i;
4867
4868         extract_token(msgset, args, 0, '|', sizeof msgset);
4869         num_msgs = num_tokens(msgset, ',');
4870         if (num_msgs < 1) {
4871                 cprintf("%d Nothing to do.\n", CIT_OK);
4872                 return;
4873         }
4874
4875         extract_token(targ, args, 1, '|', sizeof targ);
4876         convert_room_name_macros(targ, sizeof targ);
4877         targ[ROOMNAMELEN - 1] = 0;
4878         is_copy = extract_int(args, 2);
4879
4880         if (CtdlGetRoom(&qtemp, targ) != 0) {
4881                 cprintf("%d '%s' does not exist.\n", ERROR + ROOM_NOT_FOUND, targ);
4882                 return;
4883         }
4884
4885         if (!strcasecmp(qtemp.QRname, CC->room.QRname)) {
4886                 cprintf("%d Source and target rooms are the same.\n", ERROR + ALREADY_EXISTS);
4887                 return;
4888         }
4889
4890         CtdlGetUser(&CC->user, CC->curr_user);
4891         CtdlRoomAccess(&qtemp, &CC->user, &ra, NULL);
4892
4893         /* Check for permission to perform this operation.
4894          * Remember: "CC->room" is source, "qtemp" is target.
4895          */
4896         permit = 0;
4897
4898         /* Aides can move/copy */
4899         if (CC->user.axlevel >= AxAideU) permit = 1;
4900
4901         /* Room aides can move/copy */
4902         if (CC->user.usernum == CC->room.QRroomaide) permit = 1;
4903
4904         /* Permit move/copy from personal rooms */
4905         if ((CC->room.QRflags & QR_MAILBOX)
4906             && (qtemp.QRflags & QR_MAILBOX)) permit = 1;
4907
4908         /* Permit only copy from public to personal room */
4909         if ( (is_copy)
4910              && (!(CC->room.QRflags & QR_MAILBOX))
4911              && (qtemp.QRflags & QR_MAILBOX)) permit = 1;
4912
4913         /* Permit message removal from collaborative delete rooms */
4914         if (CC->room.QRflags2 & QR2_COLLABDEL) permit = 1;
4915
4916         /* Users allowed to post into the target room may move into it too. */
4917         if ((CC->room.QRflags & QR_MAILBOX) && 
4918             (qtemp.QRflags & UA_POSTALLOWED))  permit = 1;
4919
4920         /* User must have access to target room */
4921         if (!(ra & UA_KNOWN))  permit = 0;
4922
4923         if (!permit) {
4924                 cprintf("%d Higher access required.\n",
4925                         ERROR + HIGHER_ACCESS_REQUIRED);
4926                 return;
4927         }
4928
4929         /*
4930          * Build our message set to be moved/copied
4931          */
4932         msgs = malloc(num_msgs * sizeof(long));
4933         for (i=0; i<num_msgs; ++i) {
4934                 extract_token(msgtok, msgset, i, ',', sizeof msgtok);
4935                 msgs[i] = atol(msgtok);
4936         }
4937
4938         /*
4939          * Do the copy
4940          */
4941         err = CtdlSaveMsgPointersInRoom(targ, msgs, num_msgs, 1, NULL, 0);
4942         if (err != 0) {
4943                 cprintf("%d Cannot store message(s) in %s: error %d\n",
4944                         err, targ, err);
4945                 free(msgs);
4946                 return;
4947         }
4948
4949         /* Now delete the message from the source room,
4950          * if this is a 'move' rather than a 'copy' operation.
4951          */
4952         if (is_copy == 0) {
4953                 CtdlDeleteMessages(CC->room.QRname, msgs, num_msgs, "");
4954         }
4955         free(msgs);
4956
4957         cprintf("%d Message(s) %s.\n", CIT_OK, (is_copy ? "copied" : "moved") );
4958 }
4959
4960
4961
4962 /*
4963  * GetMetaData()  -  Get the supplementary record for a message
4964  */
4965 void GetMetaData(struct MetaData *smibuf, long msgnum)
4966 {
4967
4968         struct cdbdata *cdbsmi;
4969         long TheIndex;
4970
4971         memset(smibuf, 0, sizeof(struct MetaData));
4972         smibuf->meta_msgnum = msgnum;
4973         smibuf->meta_refcount = 1;      /* Default reference count is 1 */
4974
4975         /* Use the negative of the message number for its supp record index */
4976         TheIndex = (0L - msgnum);
4977
4978         cdbsmi = cdb_fetch(CDB_MSGMAIN, &TheIndex, sizeof(long));
4979         if (cdbsmi == NULL) {
4980                 return;         /* record not found; go with defaults */
4981         }
4982         memcpy(smibuf, cdbsmi->ptr,
4983                ((cdbsmi->len > sizeof(struct MetaData)) ?
4984                 sizeof(struct MetaData) : cdbsmi->len));
4985         cdb_free(cdbsmi);
4986         return;
4987 }
4988
4989
4990 /*
4991  * PutMetaData()  -  (re)write supplementary record for a message
4992  */
4993 void PutMetaData(struct MetaData *smibuf)
4994 {
4995         long TheIndex;
4996
4997         /* Use the negative of the message number for the metadata db index */
4998         TheIndex = (0L - smibuf->meta_msgnum);
4999
5000         cdb_store(CDB_MSGMAIN,
5001                   &TheIndex, (int)sizeof(long),
5002                   smibuf, (int)sizeof(struct MetaData));
5003
5004 }
5005
5006 /*
5007  * AdjRefCount  -  submit an adjustment to the reference count for a message.
5008  *                 (These are just queued -- we actually process them later.)
5009  */
5010 void AdjRefCount(long msgnum, int incr)
5011 {
5012         struct CitContext *CCC = CC;
5013         struct arcq new_arcq;
5014         int rv = 0;
5015
5016         MSG_syslog(LOG_DEBUG, "AdjRefCount() msg %ld ref count delta %+d\n", msgnum, incr);
5017
5018         begin_critical_section(S_SUPPMSGMAIN);
5019         if (arcfp == NULL) {
5020                 arcfp = fopen(file_arcq, "ab+");
5021                 chown(file_arcq, CTDLUID, (-1));
5022                 chmod(file_arcq, 0600);
5023         }
5024         end_critical_section(S_SUPPMSGMAIN);
5025
5026         /* msgnum < 0 means that we're trying to close the file */
5027         if (msgnum < 0) {
5028                 MSGM_syslog(LOG_DEBUG, "Closing the AdjRefCount queue file\n");
5029                 begin_critical_section(S_SUPPMSGMAIN);
5030                 if (arcfp != NULL) {
5031                         fclose(arcfp);
5032                         arcfp = NULL;
5033                 }
5034                 end_critical_section(S_SUPPMSGMAIN);
5035                 return;
5036         }
5037
5038         /*
5039          * If we can't open the queue, perform the operation synchronously.
5040          */
5041         if (arcfp == NULL) {
5042                 TDAP_AdjRefCount(msgnum, incr);
5043                 return;
5044         }
5045
5046         new_arcq.arcq_msgnum = msgnum;
5047         new_arcq.arcq_delta = incr;
5048         rv = fwrite(&new_arcq, sizeof(struct arcq), 1, arcfp);
5049         if (rv == -1) {
5050                 MSG_syslog(LOG_EMERG, "Couldn't write Refcount Queue File %s: %s\n",
5051                            file_arcq,
5052                            strerror(errno));
5053         }
5054         fflush(arcfp);
5055
5056         return;
5057 }
5058
5059 void AdjRefCountList(long *msgnum, long nmsg, int incr)
5060 {
5061         struct CitContext *CCC = CC;
5062         long i, the_size, offset;
5063         struct arcq *new_arcq;
5064         int rv = 0;
5065
5066         MSG_syslog(LOG_DEBUG, "AdjRefCountList() msg %ld ref count delta %+d\n", nmsg, incr);
5067
5068         begin_critical_section(S_SUPPMSGMAIN);
5069         if (arcfp == NULL) {
5070                 arcfp = fopen(file_arcq, "ab+");
5071                 chown(file_arcq, CTDLUID, (-1));
5072                 chmod(file_arcq, 0600);
5073         }
5074         end_critical_section(S_SUPPMSGMAIN);
5075
5076         /*
5077          * If we can't open the queue, perform the operation synchronously.
5078          */
5079         if (arcfp == NULL) {
5080                 for (i = 0; i < nmsg; i++)
5081                         TDAP_AdjRefCount(msgnum[i], incr);
5082                 return;
5083         }
5084
5085         the_size = sizeof(struct arcq) * nmsg;
5086         new_arcq = malloc(the_size);
5087         for (i = 0; i < nmsg; i++) {
5088                 new_arcq[i].arcq_msgnum = msgnum[i];
5089                 new_arcq[i].arcq_delta = incr;
5090         }
5091         rv = 0;
5092         offset = 0;
5093         while ((rv >= 0) && (offset < the_size))
5094         {
5095                 rv = fwrite(new_arcq + offset, 1, the_size - offset, arcfp);
5096                 if (rv == -1) {
5097                         MSG_syslog(LOG_EMERG, "Couldn't write Refcount Queue File %s: %s\n",
5098                                    file_arcq,
5099                                    strerror(errno));
5100                 }
5101                 else {
5102                         offset += rv;
5103                 }
5104         }
5105         free(new_arcq);
5106         fflush(arcfp);
5107
5108         return;
5109 }
5110
5111
5112 /*
5113  * TDAP_ProcessAdjRefCountQueue()
5114  *
5115  * Process the queue of message count adjustments that was created by calls
5116  * to AdjRefCount() ... by reading the queue and calling TDAP_AdjRefCount()
5117  * for each one.  This should be an "off hours" operation.
5118  */
5119 int TDAP_ProcessAdjRefCountQueue(void)
5120 {
5121         struct CitContext *CCC = CC;
5122         char file_arcq_temp[PATH_MAX];
5123         int r;
5124         FILE *fp;
5125         struct arcq arcq_rec;
5126         int num_records_processed = 0;
5127
5128         snprintf(file_arcq_temp, sizeof file_arcq_temp, "%s.%04x", file_arcq, rand());
5129
5130         begin_critical_section(S_SUPPMSGMAIN);
5131         if (arcfp != NULL) {
5132                 fclose(arcfp);
5133                 arcfp = NULL;
5134         }
5135
5136         r = link(file_arcq, file_arcq_temp);
5137         if (r != 0) {
5138                 MSG_syslog(LOG_CRIT, "%s: %s\n", file_arcq_temp, strerror(errno));
5139                 end_critical_section(S_SUPPMSGMAIN);
5140                 return(num_records_processed);
5141         }
5142
5143         unlink(file_arcq);
5144         end_critical_section(S_SUPPMSGMAIN);
5145
5146         fp = fopen(file_arcq_temp, "rb");
5147         if (fp == NULL) {
5148                 MSG_syslog(LOG_CRIT, "%s: %s\n", file_arcq_temp, strerror(errno));
5149                 return(num_records_processed);
5150         }
5151
5152         while (fread(&arcq_rec, sizeof(struct arcq), 1, fp) == 1) {
5153                 TDAP_AdjRefCount(arcq_rec.arcq_msgnum, arcq_rec.arcq_delta);
5154                 ++num_records_processed;
5155         }
5156
5157         fclose(fp);
5158         r = unlink(file_arcq_temp);
5159         if (r != 0) {
5160                 MSG_syslog(LOG_CRIT, "%s: %s\n", file_arcq_temp, strerror(errno));
5161         }
5162
5163         return(num_records_processed);
5164 }
5165
5166
5167
5168 /*
5169  * TDAP_AdjRefCount  -  adjust the reference count for a message.
5170  *                      This one does it "for real" because it's called by
5171  *                      the autopurger function that processes the queue
5172  *                      created by AdjRefCount().   If a message's reference
5173  *                      count becomes zero, we also delete the message from
5174  *                      disk and de-index it.
5175  */
5176 void TDAP_AdjRefCount(long msgnum, int incr)
5177 {
5178         struct CitContext *CCC = CC;
5179
5180         struct MetaData smi;
5181         long delnum;
5182
5183         /* This is a *tight* critical section; please keep it that way, as
5184          * it may get called while nested in other critical sections.  
5185          * Complicating this any further will surely cause deadlock!
5186          */
5187         begin_critical_section(S_SUPPMSGMAIN);
5188         GetMetaData(&smi, msgnum);
5189         smi.meta_refcount += incr;
5190         PutMetaData(&smi);
5191         end_critical_section(S_SUPPMSGMAIN);
5192         MSG_syslog(LOG_DEBUG, "TDAP_AdjRefCount() msg %ld ref count delta %+d, is now %d\n",
5193                    msgnum, incr, smi.meta_refcount
5194                 );
5195
5196         /* If the reference count is now zero, delete the message
5197          * (and its supplementary record as well).
5198          */
5199         if (smi.meta_refcount == 0) {
5200                 MSG_syslog(LOG_DEBUG, "Deleting message <%ld>\n", msgnum);
5201                 
5202                 /* Call delete hooks with NULL room to show it has gone altogether */
5203                 PerformDeleteHooks(NULL, msgnum);
5204
5205                 /* Remove from message base */
5206                 delnum = msgnum;
5207                 cdb_delete(CDB_MSGMAIN, &delnum, (int)sizeof(long));
5208                 cdb_delete(CDB_BIGMSGS, &delnum, (int)sizeof(long));
5209
5210                 /* Remove metadata record */
5211                 delnum = (0L - msgnum);
5212                 cdb_delete(CDB_MSGMAIN, &delnum, (int)sizeof(long));
5213         }
5214
5215 }
5216
5217 /*
5218  * Write a generic object to this room
5219  *
5220  * Note: this could be much more efficient.  Right now we use two temporary
5221  * files, and still pull the message into memory as with all others.
5222  */
5223 void CtdlWriteObject(char *req_room,                    /* Room to stuff it in */
5224                      char *content_type,                /* MIME type of this object */
5225                      char *raw_message,         /* Data to be written */
5226                      off_t raw_length,          /* Size of raw_message */
5227                      struct ctdluser *is_mailbox,       /* Mailbox room? */
5228                      int is_binary,                     /* Is encoding necessary? */
5229                      int is_unique,                     /* Del others of this type? */
5230                      unsigned int flags         /* Internal save flags */
5231         )
5232 {
5233         struct CitContext *CCC = CC;
5234         struct ctdlroom qrbuf;
5235         char roomname[ROOMNAMELEN];
5236         struct CtdlMessage *msg;
5237         char *encoded_message = NULL;
5238
5239         if (is_mailbox != NULL) {
5240                 CtdlMailboxName(roomname, sizeof roomname, is_mailbox, req_room);
5241         }
5242         else {
5243                 safestrncpy(roomname, req_room, sizeof(roomname));
5244         }
5245
5246         MSG_syslog(LOG_DEBUG, "Raw length is %ld\n", (long)raw_length);
5247
5248         if (is_binary) {
5249                 encoded_message = malloc((size_t) (((raw_length * 134) / 100) + 4096 ) );
5250         }
5251         else {
5252                 encoded_message = malloc((size_t)(raw_length + 4096));
5253         }
5254
5255         sprintf(encoded_message, "Content-type: %s\n", content_type);
5256
5257         if (is_binary) {
5258                 sprintf(&encoded_message[strlen(encoded_message)],
5259                         "Content-transfer-encoding: base64\n\n"
5260                         );
5261         }
5262         else {
5263                 sprintf(&encoded_message[strlen(encoded_message)],
5264                         "Content-transfer-encoding: 7bit\n\n"
5265                         );
5266         }
5267
5268         if (is_binary) {
5269                 CtdlEncodeBase64(
5270                         &encoded_message[strlen(encoded_message)],
5271                         raw_message,
5272                         (int)raw_length,
5273                         0
5274                         );
5275         }
5276         else {
5277                 memcpy(
5278                         &encoded_message[strlen(encoded_message)],
5279                         raw_message,
5280                         (int)(raw_length+1)
5281                         );
5282         }
5283
5284         MSGM_syslog(LOG_DEBUG, "Allocating\n");
5285         msg = malloc(sizeof(struct CtdlMessage));
5286         memset(msg, 0, sizeof(struct CtdlMessage));
5287         msg->cm_magic = CTDLMESSAGE_MAGIC;
5288         msg->cm_anon_type = MES_NORMAL;
5289         msg->cm_format_type = 4;
5290         msg->cm_fields['A'] = strdup(CCC->user.fullname);
5291         msg->cm_fields['O'] = strdup(req_room);
5292         msg->cm_fields['N'] = strdup(config.c_nodename);
5293         msg->cm_fields['H'] = strdup(config.c_humannode);
5294         msg->cm_flags = flags;
5295         
5296         msg->cm_fields['M'] = encoded_message;
5297
5298         /* Create the requested room if we have to. */
5299         if (CtdlGetRoom(&qrbuf, roomname) != 0) {
5300                 CtdlCreateRoom(roomname, 
5301                                ( (is_mailbox != NULL) ? 5 : 3 ),
5302                                "", 0, 1, 0, VIEW_BBS);
5303         }
5304         /* If the caller specified this object as unique, delete all
5305          * other objects of this type that are currently in the room.
5306          */
5307         if (is_unique) {
5308                 MSG_syslog(LOG_DEBUG, "Deleted %d other msgs of this type\n",
5309                            CtdlDeleteMessages(roomname, NULL, 0, content_type)
5310                         );
5311         }
5312         /* Now write the data */
5313         CtdlSubmitMsg(msg, NULL, roomname, 0);
5314         CtdlFreeMessage(msg);
5315 }
5316
5317
5318
5319
5320
5321
5322 void CtdlGetSysConfigBackend(long msgnum, void *userdata) {
5323         config_msgnum = msgnum;
5324 }
5325
5326
5327 char *CtdlGetSysConfig(char *sysconfname) {
5328         char hold_rm[ROOMNAMELEN];
5329         long msgnum;
5330         char *conf;
5331         struct CtdlMessage *msg;
5332         char buf[SIZ];
5333         
5334         strcpy(hold_rm, CC->room.QRname);
5335         if (CtdlGetRoom(&CC->room, SYSCONFIGROOM) != 0) {
5336                 CtdlGetRoom(&CC->room, hold_rm);
5337                 return NULL;
5338         }
5339
5340
5341         /* We want the last (and probably only) config in this room */
5342         begin_critical_section(S_CONFIG);
5343         config_msgnum = (-1L);
5344         CtdlForEachMessage(MSGS_LAST, 1, NULL, sysconfname, NULL,
5345                            CtdlGetSysConfigBackend, NULL);
5346         msgnum = config_msgnum;
5347         end_critical_section(S_CONFIG);
5348
5349         if (msgnum < 0L) {
5350                 conf = NULL;
5351         }
5352         else {
5353                 msg = CtdlFetchMessage(msgnum, 1);
5354                 if (msg != NULL) {
5355                         conf = strdup(msg->cm_fields['M']);
5356                         CtdlFreeMessage(msg);
5357                 }
5358                 else {
5359                         conf = NULL;
5360                 }
5361         }
5362
5363         CtdlGetRoom(&CC->room, hold_rm);
5364
5365         if (conf != NULL) do {
5366                         extract_token(buf, conf, 0, '\n', sizeof buf);
5367                         strcpy(conf, &conf[strlen(buf)+1]);
5368                 } while ( (!IsEmptyStr(conf)) && (!IsEmptyStr(buf)) );
5369
5370         return(conf);
5371 }
5372
5373
5374 void CtdlPutSysConfig(char *sysconfname, char *sysconfdata) {
5375         CtdlWriteObject(SYSCONFIGROOM, sysconfname, sysconfdata, (strlen(sysconfdata)+1), NULL, 0, 1, 0);
5376 }
5377
5378
5379 /*
5380  * Determine whether a given Internet address belongs to the current user
5381  */
5382 int CtdlIsMe(char *addr, int addr_buf_len)
5383 {
5384         struct recptypes *recp;
5385         int i;
5386
5387         recp = validate_recipients(addr, NULL, 0);
5388         if (recp == NULL) return(0);
5389
5390         if (recp->num_local == 0) {
5391                 free_recipients(recp);
5392                 return(0);
5393         }
5394
5395         for (i=0; i<recp->num_local; ++i) {
5396                 extract_token(addr, recp->recp_local, i, '|', addr_buf_len);
5397                 if (!strcasecmp(addr, CC->user.fullname)) {
5398                         free_recipients(recp);
5399                         return(1);
5400                 }
5401         }
5402
5403         free_recipients(recp);
5404         return(0);
5405 }
5406
5407
5408 /*
5409  * Citadel protocol command to do the same
5410  */
5411 void cmd_isme(char *argbuf) {
5412         char addr[256];
5413
5414         if (CtdlAccessCheck(ac_logged_in)) return;
5415         extract_token(addr, argbuf, 0, '|', sizeof addr);
5416
5417         if (CtdlIsMe(addr, sizeof addr)) {
5418                 cprintf("%d %s\n", CIT_OK, addr);
5419         }
5420         else {
5421                 cprintf("%d Not you.\n", ERROR + ILLEGAL_VALUE);
5422         }
5423
5424 }
5425
5426
5427 /*****************************************************************************/
5428 /*                      MODULE INITIALIZATION STUFF                          */
5429 /*****************************************************************************/
5430 void SetMessageDebugEnabled(const int n)
5431 {
5432         MessageDebugEnabled = n;
5433 }
5434 CTDL_MODULE_INIT(msgbase)
5435 {
5436         if (!threading) {
5437                 CtdlRegisterDebugFlagHook(HKEY("messages"), SetMessageDebugEnabled, &MessageDebugEnabled);
5438
5439                 CtdlRegisterProtoHook(cmd_msgs, "MSGS", "Output a list of messages in the current room");
5440                 CtdlRegisterProtoHook(cmd_msg0, "MSG0", "Output a message in plain text format");
5441                 CtdlRegisterProtoHook(cmd_msg2, "MSG2", "Output a message in RFC822 format");
5442                 CtdlRegisterProtoHook(cmd_msg3, "MSG3", "Output a message in raw format (deprecated)");
5443                 CtdlRegisterProtoHook(cmd_msg4, "MSG4", "Output a message in the client's preferred format");
5444                 CtdlRegisterProtoHook(cmd_msgp, "MSGP", "Select preferred format for MSG4 output");
5445                 CtdlRegisterProtoHook(cmd_opna, "OPNA", "Open an attachment for download");
5446                 CtdlRegisterProtoHook(cmd_dlat, "DLAT", "Download an attachment");
5447                 CtdlRegisterProtoHook(cmd_ent0, "ENT0", "Enter a message");
5448                 CtdlRegisterProtoHook(cmd_dele, "DELE", "Delete a message");
5449                 CtdlRegisterProtoHook(cmd_move, "MOVE", "Move or copy a message to another room");
5450                 CtdlRegisterProtoHook(cmd_isme, "ISME", "Determine whether an email address belongs to a user");
5451         }
5452
5453         /* return our Subversion id for the Log */
5454         return "msgbase";
5455 }