citadel/msgbase.c

   1 /*
   2  * Implements the message store.
   3  *
   4  * Copyright (c) 1987-2012 by the citadel.org team
   5  *
   6  * This program is open source software; you can redistribute it and/or modify
   7  * it under the terms of the GNU General Public License version 3.
   8  *
   9  * This program is distributed in the hope that it will be useful,
  10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  12  * GNU General Public License for more details.
  13  */
  14
  15 #include "sysdep.h"
  16 #include <stdlib.h>
  17 #include <unistd.h>
  18 #include <stdio.h>
  19 #include <fcntl.h>
  20
  21 #if TIME_WITH_SYS_TIME
  22 # include <sys/time.h>
  23 # include <time.h>
  24 #else
  25 # if HAVE_SYS_TIME_H
  26 #  include <sys/time.h>
  27 # else
  28 #  include <time.h>
  29 # endif
  30 #endif
  31
  32
  33 #include <ctype.h>
  34 #include <string.h>
  35 #include <limits.h>
  36 #include <errno.h>
  37 #include <stdarg.h>
  38 #include <sys/stat.h>
  39 #include <sys/types.h>
  40 #include <regex.h>
  41 #include <libcitadel.h>
  42 #include "citadel.h"
  43 #include "server.h"
  44 #include "serv_extensions.h"
  45 #include "database.h"
  46 #include "msgbase.h"
  47 #include "support.h"
  48 #include "sysdep_decls.h"
  49 #include "citserver.h"
  50 #include "room_ops.h"
  51 #include "user_ops.h"
  52 #include "file_ops.h"
  53 #include "config.h"
  54 #include "control.h"
  55 #include "genstamp.h"
  56 #include "internet_addressing.h"
  57 #include "euidindex.h"
  58 #include "journaling.h"
  59 #include "citadel_dirs.h"
  60 #include "clientsocket.h"
  61 #include "threads.h"
  62
  63 #include "ctdl_module.h"
  64
  65 long config_msgnum;
  66 struct addresses_to_be_filed *atbf = NULL;
  67
  68 /* This temp file holds the queue of operations for AdjRefCount() */
  69 static FILE *arcfp = NULL;
  70
  71 /*
  72  * These are the four-character field headers we use when outputting
  73  * messages in Citadel format (as opposed to RFC822 format).
  74  */
  75 char *msgkeys[] = {
  76         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  77         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  78         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  79         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  80         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  81         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  82         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  83         NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
  84         NULL,
  85         "from",
  86         NULL, NULL, NULL,
  87         "exti",
  88         "rfca",
  89         NULL,
  90         "hnod",
  91         "msgn",
  92         "jrnl",
  93         NULL,
  94         "list",
  95         "text",
  96         "node",
  97         "room",
  98         "path",
  99         NULL,
 100         "rcpt",
 101         "spec",
 102         "time",
 103         "subj",
 104         NULL,
 105         "wefw",
 106         NULL,
 107         "cccc",
 108         NULL
 109 };
 110
 111 /*
 112  * This function is self explanatory.
 113  * (What can I say, I'm in a weird mood today...)
 114  */
 115 void remove_any_whitespace_to_the_left_or_right_of_at_symbol(char *name)
 116 {
 117         int i;
 118
 119         for (i = 0; i < strlen(name); ++i) {
 120                 if (name[i] == '@') {
 121                         while (isspace(name[i - 1]) && i > 0) {
 122                                 strcpy(&name[i - 1], &name[i]);
 123                                 --i;
 124                         }
 125                         while (isspace(name[i + 1])) {
 126                                 strcpy(&name[i + 1], &name[i + 2]);
 127                         }
 128                 }
 129         }
 130 }
 131
 132
 133 /*
 134  * Aliasing for network mail.
 135  * (Error messages have been commented out, because this is a server.)
 136  */
 137 int alias(char *name)
 138 {                               /* process alias and routing info for mail */
 139         FILE *fp;
 140         int a, i;
 141         char aaa[SIZ], bbb[SIZ];
 142         char *ignetcfg = NULL;
 143         char *ignetmap = NULL;
 144         int at = 0;
 145         char node[64];
 146         char testnode[64];
 147         char buf[SIZ];
 148
 149         char original_name[256];
 150         safestrncpy(original_name, name, sizeof original_name);
 151
 152         striplt(name);
 153         remove_any_whitespace_to_the_left_or_right_of_at_symbol(name);
 154         stripallbut(name, '<', '>');
 155
 156         fp = fopen(file_mail_aliases, "r");
 157         if (fp == NULL) {
 158                 fp = fopen("/dev/null", "r");
 159         }
 160         if (fp == NULL) {
 161                 return (MES_ERROR);
 162         }
 163         strcpy(aaa, "");
 164         strcpy(bbb, "");
 165         while (fgets(aaa, sizeof aaa, fp) != NULL) {
 166                 while (isspace(name[0]))
 167                         strcpy(name, &name[1]);
 168                 aaa[strlen(aaa) - 1] = 0;
 169                 strcpy(bbb, "");
 170                 for (a = 0; a < strlen(aaa); ++a) {
 171                         if (aaa[a] == ',') {
 172                                 strcpy(bbb, &aaa[a + 1]);
 173                                 aaa[a] = 0;
 174                         }
 175                 }
 176                 if (!strcasecmp(name, aaa))
 177                         strcpy(name, bbb);
 178         }
 179         fclose(fp);
 180
 181         /* Hit the Global Address Book */
 182         if (CtdlDirectoryLookup(aaa, name, sizeof aaa) == 0) {
 183                 strcpy(name, aaa);
 184         }
 185
 186         if (strcasecmp(original_name, name)) {
 187                 syslog(LOG_INFO, "%s is being forwarded to %s\n", original_name, name);
 188         }
 189
 190         /* Change "user @ xxx" to "user" if xxx is an alias for this host */
 191         for (a=0; a<strlen(name); ++a) {
 192                 if (name[a] == '@') {
 193                         if (CtdlHostAlias(&name[a+1]) == hostalias_localhost) {
 194                                 name[a] = 0;
 195                                 syslog(LOG_INFO, "Changed to <%s>\n", name);
 196                         }
 197                 }
 198         }
 199
 200         /* determine local or remote type, see citadel.h */
 201         at = haschar(name, '@');
 202         if (at == 0) return(MES_LOCAL);         /* no @'s - local address */
 203         if (at > 1) return(MES_ERROR);          /* >1 @'s - invalid address */
 204         remove_any_whitespace_to_the_left_or_right_of_at_symbol(name);
 205
 206         /* figure out the delivery mode */
 207         extract_token(node, name, 1, '@', sizeof node);
 208
 209         /* If there are one or more dots in the nodename, we assume that it
 210          * is an FQDN and will attempt SMTP delivery to the Internet.
 211          */
 212         if (haschar(node, '.') > 0) {
 213                 return(MES_INTERNET);
 214         }
 215
 216         /* Otherwise we look in the IGnet maps for a valid Citadel node.
 217          * Try directly-connected nodes first...
 218          */
 219         ignetcfg = CtdlGetSysConfig(IGNETCFG);
 220         for (i=0; i<num_tokens(ignetcfg, '\n'); ++i) {
 221                 extract_token(buf, ignetcfg, i, '\n', sizeof buf);
 222                 extract_token(testnode, buf, 0, '|', sizeof testnode);
 223                 if (!strcasecmp(node, testnode)) {
 224                         free(ignetcfg);
 225                         return(MES_IGNET);
 226                 }
 227         }
 228         free(ignetcfg);
 229
 230         /*
 231          * Then try nodes that are two or more hops away.
 232          */
 233         ignetmap = CtdlGetSysConfig(IGNETMAP);
 234         for (i=0; i<num_tokens(ignetmap, '\n'); ++i) {
 235                 extract_token(buf, ignetmap, i, '\n', sizeof buf);
 236                 extract_token(testnode, buf, 0, '|', sizeof testnode);
 237                 if (!strcasecmp(node, testnode)) {
 238                         free(ignetmap);
 239                         return(MES_IGNET);
 240                 }
 241         }
 242         free(ignetmap);
 243
 244         /* If we get to this point it's an invalid node name */
 245         return (MES_ERROR);
 246 }
 247
 248
 249 /*
 250  * Back end for the MSGS command: output message number only.
 251  */
 252 void simple_listing(long msgnum, void *userdata)
 253 {
 254         cprintf("%ld\n", msgnum);
 255 }
 256
 257
 258
 259 /*
 260  * Back end for the MSGS command: output header summary.
 261  */
 262 void headers_listing(long msgnum, void *userdata)
 263 {
 264         struct CtdlMessage *msg;
 265
 266         msg = CtdlFetchMessage(msgnum, 0);
 267         if (msg == NULL) {
 268                 cprintf("%ld|0|||||\n", msgnum);
 269                 return;
 270         }
 271
 272         cprintf("%ld|%s|%s|%s|%s|%s|\n",
 273                 msgnum,
 274                 (msg->cm_fields['T'] ? msg->cm_fields['T'] : "0"),
 275                 (msg->cm_fields['A'] ? msg->cm_fields['A'] : ""),
 276                 (msg->cm_fields['N'] ? msg->cm_fields['N'] : ""),
 277                 (msg->cm_fields['F'] ? msg->cm_fields['F'] : ""),
 278                 (msg->cm_fields['U'] ? msg->cm_fields['U'] : "")
 279         );
 280         CtdlFreeMessage(msg);
 281 }
 282
 283 /*
 284  * Back end for the MSGS command: output EUID header.
 285  */
 286 void headers_euid(long msgnum, void *userdata)
 287 {
 288         struct CtdlMessage *msg;
 289
 290         msg = CtdlFetchMessage(msgnum, 0);
 291         if (msg == NULL) {
 292                 cprintf("%ld||\n", msgnum);
 293                 return;
 294         }
 295
 296         cprintf("%ld|%s|%s\n",
 297                 msgnum,
 298                 (msg->cm_fields['E'] ? msg->cm_fields['E'] : ""),
 299                 (msg->cm_fields['T'] ? msg->cm_fields['T'] : "0"));
 300         CtdlFreeMessage(msg);
 301 }
 302
 303
 304
 305
 306
 307 /* Determine if a given message matches the fields in a message template.
 308  * Return 0 for a successful match.
 309  */
 310 int CtdlMsgCmp(struct CtdlMessage *msg, struct CtdlMessage *template) {
 311         int i;
 312
 313         /* If there aren't any fields in the template, all messages will
 314          * match.
 315          */
 316         if (template == NULL) return(0);
 317
 318         /* Null messages are bogus. */
 319         if (msg == NULL) return(1);
 320
 321         for (i='A'; i<='Z'; ++i) {
 322                 if (template->cm_fields[i] != NULL) {
 323                         if (msg->cm_fields[i] == NULL) {
 324                                 /* Considered equal if temmplate is empty string */
 325                                 if (IsEmptyStr(template->cm_fields[i])) continue;
 326                                 return 1;
 327                         }
 328                         if (strcasecmp(msg->cm_fields[i],
 329                                 template->cm_fields[i])) return 1;
 330                 }
 331         }
 332
 333         /* All compares succeeded: we have a match! */
 334         return 0;
 335 }
 336
 337
 338
 339 /*
 340  * Retrieve the "seen" message list for the current room.
 341  */
 342 void CtdlGetSeen(char *buf, int which_set) {
 343         visit vbuf;
 344
 345         /* Learn about the user and room in question */
 346         CtdlGetRelationship(&vbuf, &CC->user, &CC->room);
 347
 348         if (which_set == ctdlsetseen_seen)
 349                 safestrncpy(buf, vbuf.v_seen, SIZ);
 350         if (which_set == ctdlsetseen_answered)
 351                 safestrncpy(buf, vbuf.v_answered, SIZ);
 352 }
 353
 354
 355
 356 /*
 357  * Manipulate the "seen msgs" string (or other message set strings)
 358  */
 359 void CtdlSetSeen(long *target_msgnums, int num_target_msgnums,
 360                 int target_setting, int which_set,
 361                 struct ctdluser *which_user, struct ctdlroom *which_room) {
 362         struct cdbdata *cdbfr;
 363         int i, k;
 364         int is_seen = 0;
 365         int was_seen = 0;
 366         long lo = (-1L);
 367         long hi = (-1L);
 368         visit vbuf;
 369         long *msglist;
 370         int num_msgs = 0;
 371         StrBuf *vset;
 372         StrBuf *setstr;
 373         StrBuf *lostr;
 374         StrBuf *histr;
 375         const char *pvset;
 376         char *is_set;   /* actually an array of booleans */
 377
 378         /* Don't bother doing *anything* if we were passed a list of zero messages */
 379         if (num_target_msgnums < 1) {
 380                 return;
 381         }
 382
 383         /* If no room was specified, we go with the current room. */
 384         if (!which_room) {
 385                 which_room = &CC->room;
 386         }
 387
 388         /* If no user was specified, we go with the current user. */
 389         if (!which_user) {
 390                 which_user = &CC->user;
 391         }
 392
 393         syslog(LOG_DEBUG, "CtdlSetSeen(%d msgs starting with %ld, %s, %d) in <%s>\n",
 394                 num_target_msgnums, target_msgnums[0],
 395                 (target_setting ? "SET" : "CLEAR"),
 396                 which_set,
 397                 which_room->QRname);
 398
 399         /* Learn about the user and room in question */
 400         CtdlGetRelationship(&vbuf, which_user, which_room);
 401
 402         /* Load the message list */
 403         cdbfr = cdb_fetch(CDB_MSGLISTS, &which_room->QRnumber, sizeof(long));
 404         if (cdbfr != NULL) {
 405                 msglist = (long *) cdbfr->ptr;
 406                 cdbfr->ptr = NULL;      /* CtdlSetSeen() now owns this memory */
 407                 num_msgs = cdbfr->len / sizeof(long);
 408                 cdb_free(cdbfr);
 409         } else {
 410                 return; /* No messages at all?  No further action. */
 411         }
 412
 413         is_set = malloc(num_msgs * sizeof(char));
 414         memset(is_set, 0, (num_msgs * sizeof(char)) );
 415
 416         /* Decide which message set we're manipulating */
 417         switch(which_set) {
 418         case ctdlsetseen_seen:
 419                 vset = NewStrBufPlain(vbuf.v_seen, -1);
 420                 break;
 421         case ctdlsetseen_answered:
 422                 vset = NewStrBufPlain(vbuf.v_answered, -1);
 423                 break;
 424         default:
 425                 vset = NewStrBuf();
 426         }
 427
 428
 429 #if 0   /* This is a special diagnostic section.  Do not allow it to run during normal operation. */
 430         syslog(LOG_DEBUG, "There are %d messages in the room.\n", num_msgs);
 431         for (i=0; i<num_msgs; ++i) {
 432                 if ((i > 0) && (msglist[i] <= msglist[i-1])) abort();
 433         }
 434         syslog(LOG_DEBUG, "We are twiddling %d of them.\n", num_target_msgnums);
 435         for (k=0; k<num_target_msgnums; ++k) {
 436                 if ((k > 0) && (target_msgnums[k] <= target_msgnums[k-1])) abort();
 437         }
 438 #endif
 439
 440         syslog(LOG_DEBUG, "before update: %s\n", ChrPtr(vset));
 441
 442         /* Translate the existing sequence set into an array of booleans */
 443         setstr = NewStrBuf();
 444         lostr = NewStrBuf();
 445         histr = NewStrBuf();
 446         pvset = NULL;
 447         while (StrBufExtract_NextToken(setstr, vset, &pvset, ',') >= 0) {
 448
 449                 StrBufExtract_token(lostr, setstr, 0, ':');
 450                 if (StrBufNum_tokens(setstr, ':') >= 2) {
 451                         StrBufExtract_token(histr, setstr, 1, ':');
 452                 }
 453                 else {
 454                         FlushStrBuf(histr);
 455                         StrBufAppendBuf(histr, lostr, 0);
 456                 }
 457                 lo = StrTol(lostr);
 458                 if (!strcmp(ChrPtr(histr), "*")) {
 459                         hi = LONG_MAX;
 460                 }
 461                 else {
 462                         hi = StrTol(histr);
 463                 }
 464
 465                 for (i = 0; i < num_msgs; ++i) {
 466                         if ((msglist[i] >= lo) && (msglist[i] <= hi)) {
 467                                 is_set[i] = 1;
 468                         }
 469                 }
 470         }
 471         FreeStrBuf(&setstr);
 472         FreeStrBuf(&lostr);
 473         FreeStrBuf(&histr);
 474
 475
 476         /* Now translate the array of booleans back into a sequence set */
 477         FlushStrBuf(vset);
 478         was_seen = 0;
 479         lo = (-1);
 480         hi = (-1);
 481
 482         for (i=0; i<num_msgs; ++i) {
 483                 is_seen = is_set[i];
 484
 485                 /* Apply changes */
 486                 for (k=0; k<num_target_msgnums; ++k) {
 487                         if (msglist[i] == target_msgnums[k]) {
 488                                 is_seen = target_setting;
 489                         }
 490                 }
 491
 492                 if ((was_seen == 0) && (is_seen == 1)) {
 493                         lo = msglist[i];
 494                 }
 495                 else if ((was_seen == 1) && (is_seen == 0)) {
 496                         hi = msglist[i-1];
 497
 498                         if (StrLength(vset) > 0) {
 499                                 StrBufAppendBufPlain(vset, HKEY(","), 0);
 500                         }
 501                         if (lo == hi) {
 502                                 StrBufAppendPrintf(vset, "%ld", hi);
 503                         }
 504                         else {
 505                                 StrBufAppendPrintf(vset, "%ld:%ld", lo, hi);
 506                         }
 507                 }
 508
 509                 if ((is_seen) && (i == num_msgs - 1)) {
 510                         if (StrLength(vset) > 0) {
 511                                 StrBufAppendBufPlain(vset, HKEY(","), 0);
 512                         }
 513                         if ((i==0) || (was_seen == 0)) {
 514                                 StrBufAppendPrintf(vset, "%ld", msglist[i]);
 515                         }
 516                         else {
 517                                 StrBufAppendPrintf(vset, "%ld:%ld", lo, msglist[i]);
 518                         }
 519                 }
 520
 521                 was_seen = is_seen;
 522         }
 523
 524         /*
 525          * We will have to stuff this string back into a 4096 byte buffer, so if it's
 526          * larger than that now, truncate it by removing tokens from the beginning.
 527          * The limit of 100 iterations is there to prevent an infinite loop in case
 528          * something unexpected happens.
 529          */
 530         int number_of_truncations = 0;
 531         while ( (StrLength(vset) > SIZ) && (number_of_truncations < 100) ) {
 532                 StrBufRemove_token(vset, 0, ',');
 533                 ++number_of_truncations;
 534         }
 535
 536         /*
 537          * If we're truncating the sequence set of messages marked with the 'seen' flag,
 538          * we want the earliest messages (the truncated ones) to be marked, not unmarked.
 539          * Otherwise messages at the beginning will suddenly appear to be 'unseen'.
 540          */
 541         if ( (which_set == ctdlsetseen_seen) && (number_of_truncations > 0) ) {
 542                 StrBuf *first_tok;
 543                 first_tok = NewStrBuf();
 544                 StrBufExtract_token(first_tok, vset, 0, ',');
 545                 StrBufRemove_token(vset, 0, ',');
 546
 547                 if (StrBufNum_tokens(first_tok, ':') > 1) {
 548                         StrBufRemove_token(first_tok, 0, ':');
 549                 }
 550
 551                 StrBuf *new_set;
 552                 new_set = NewStrBuf();
 553                 StrBufAppendBufPlain(new_set, HKEY("1:"), 0);
 554                 StrBufAppendBuf(new_set, first_tok, 0);
 555                 StrBufAppendBufPlain(new_set, HKEY(":"), 0);
 556                 StrBufAppendBuf(new_set, vset, 0);
 557
 558                 FreeStrBuf(&vset);
 559                 FreeStrBuf(&first_tok);
 560                 vset = new_set;
 561         }
 562
 563         syslog(LOG_DEBUG, " after update: %s\n", ChrPtr(vset));
 564
 565         /* Decide which message set we're manipulating */
 566         switch (which_set) {
 567                 case ctdlsetseen_seen:
 568                         safestrncpy(vbuf.v_seen, ChrPtr(vset), sizeof vbuf.v_seen);
 569                         break;
 570                 case ctdlsetseen_answered:
 571                         safestrncpy(vbuf.v_answered, ChrPtr(vset), sizeof vbuf.v_answered);
 572                         break;
 573         }
 574
 575         free(is_set);
 576         free(msglist);
 577         CtdlSetRelationship(&vbuf, which_user, which_room);
 578         FreeStrBuf(&vset);
 579 }
 580
 581
 582 /*
 583  * API function to perform an operation for each qualifying message in the
 584  * current room.  (Returns the number of messages processed.)
 585  */
 586 int CtdlForEachMessage(int mode, long ref, char *search_string,
 587                         char *content_type,
 588                         struct CtdlMessage *compare,
 589                         ForEachMsgCallback CallBack,
 590                         void *userdata)
 591 {
 592
 593         int a, i, j;
 594         visit vbuf;
 595         struct cdbdata *cdbfr;
 596         long *msglist = NULL;
 597         int num_msgs = 0;
 598         int num_processed = 0;
 599         long thismsg;
 600         struct MetaData smi;
 601         struct CtdlMessage *msg = NULL;
 602         int is_seen = 0;
 603         long lastold = 0L;
 604         int printed_lastold = 0;
 605         int num_search_msgs = 0;
 606         long *search_msgs = NULL;
 607         regex_t re;
 608         int need_to_free_re = 0;
 609         regmatch_t pm;
 610
 611         if ((content_type) && (!IsEmptyStr(content_type))) {
 612                 regcomp(&re, content_type, 0);
 613                 need_to_free_re = 1;
 614         }
 615
 616         /* Learn about the user and room in question */
 617         if (server_shutting_down) {
 618                 if (need_to_free_re) regfree(&re);
 619                 return -1;
 620         }
 621         CtdlGetUser(&CC->user, CC->curr_user);
 622
 623         if (server_shutting_down) {
 624                 if (need_to_free_re) regfree(&re);
 625                 return -1;
 626         }
 627         CtdlGetRelationship(&vbuf, &CC->user, &CC->room);
 628
 629         if (server_shutting_down) {
 630                 if (need_to_free_re) regfree(&re);
 631                 return -1;
 632         }
 633
 634         /* Load the message list */
 635         cdbfr = cdb_fetch(CDB_MSGLISTS, &CC->room.QRnumber, sizeof(long));
 636         if (cdbfr == NULL) {
 637                 if (need_to_free_re) regfree(&re);
 638                 return 0;       /* No messages at all?  No further action. */
 639         }
 640
 641         msglist = (long *) cdbfr->ptr;
 642         num_msgs = cdbfr->len / sizeof(long);
 643
 644         cdbfr->ptr = NULL;      /* clear this so that cdb_free() doesn't free it */
 645         cdb_free(cdbfr);        /* we own this memory now */
 646
 647         /*
 648          * Now begin the traversal.
 649          */
 650         if (num_msgs > 0) for (a = 0; a < num_msgs; ++a) {
 651
 652                 /* If the caller is looking for a specific MIME type, filter
 653                  * out all messages which are not of the type requested.
 654                  */
 655                 if ((content_type != NULL) && (!IsEmptyStr(content_type))) {
 656
 657                         /* This call to GetMetaData() sits inside this loop
 658                          * so that we only do the extra database read per msg
 659                          * if we need to.  Doing the extra read all the time
 660                          * really kills the server.  If we ever need to use
 661                          * metadata for another search criterion, we need to
 662                          * move the read somewhere else -- but still be smart
 663                          * enough to only do the read if the caller has
 664                          * specified something that will need it.
 665                          */
 666                         if (server_shutting_down) {
 667                                 if (need_to_free_re) regfree(&re);
 668                                 free(msglist);
 669                                 return -1;
 670                         }
 671                         GetMetaData(&smi, msglist[a]);
 672
 673                         /* if (strcasecmp(smi.meta_content_type, content_type)) { old non-regex way */
 674                         if (regexec(&re, smi.meta_content_type, 1, &pm, 0) != 0) {
 675                                 msglist[a] = 0L;
 676                         }
 677                 }
 678         }
 679
 680         num_msgs = sort_msglist(msglist, num_msgs);
 681
 682         /* If a template was supplied, filter out the messages which
 683          * don't match.  (This could induce some delays!)
 684          */
 685         if (num_msgs > 0) {
 686                 if (compare != NULL) {
 687                         for (a = 0; a < num_msgs; ++a) {
 688                                 if (server_shutting_down) {
 689                                         if (need_to_free_re) regfree(&re);
 690                                         free(msglist);
 691                                         return -1;
 692                                 }
 693                                 msg = CtdlFetchMessage(msglist[a], 1);
 694                                 if (msg != NULL) {
 695                                         if (CtdlMsgCmp(msg, compare)) {
 696                                                 msglist[a] = 0L;
 697                                         }
 698                                         CtdlFreeMessage(msg);
 699                                 }
 700                         }
 701                 }
 702         }
 703
 704         /* If a search string was specified, get a message list from
 705          * the full text index and remove messages which aren't on both
 706          * lists.
 707          *
 708          * How this works:
 709          * Since the lists are sorted and strictly ascending, and the
 710          * output list is guaranteed to be shorter than or equal to the
 711          * input list, we overwrite the bottom of the input list.  This
 712          * eliminates the need to memmove big chunks of the list over and
 713          * over again.
 714          */
 715         if ( (num_msgs > 0) && (mode == MSGS_SEARCH) && (search_string) ) {
 716
 717                 /* Call search module via hook mechanism.
 718                  * NULL means use any search function available.
 719                  * otherwise replace with a char * to name of search routine
 720                  */
 721                 CtdlModuleDoSearch(&num_search_msgs, &search_msgs, search_string, "fulltext");
 722
 723                 if (num_search_msgs > 0) {
 724
 725                         int orig_num_msgs;
 726
 727                         orig_num_msgs = num_msgs;
 728                         num_msgs = 0;
 729                         for (i=0; i<orig_num_msgs; ++i) {
 730                                 for (j=0; j<num_search_msgs; ++j) {
 731                                         if (msglist[i] == search_msgs[j]) {
 732                                                 msglist[num_msgs++] = msglist[i];
 733                                         }
 734                                 }
 735                         }
 736                 }
 737                 else {
 738                         num_msgs = 0;   /* No messages qualify */
 739                 }
 740                 if (search_msgs != NULL) free(search_msgs);
 741
 742                 /* Now that we've purged messages which don't contain the search
 743                  * string, treat a MSGS_SEARCH just like a MSGS_ALL from this
 744                  * point on.
 745                  */
 746                 mode = MSGS_ALL;
 747         }
 748
 749         /*
 750          * Now iterate through the message list, according to the
 751          * criteria supplied by the caller.
 752          */
 753         if (num_msgs > 0)
 754                 for (a = 0; a < num_msgs; ++a) {
 755                         if (server_shutting_down) {
 756                                 if (need_to_free_re) regfree(&re);
 757                                 free(msglist);
 758                                 return num_processed;
 759                         }
 760                         thismsg = msglist[a];
 761                         if (mode == MSGS_ALL) {
 762                                 is_seen = 0;
 763                         }
 764                         else {
 765                                 is_seen = is_msg_in_sequence_set(
 766                                                         vbuf.v_seen, thismsg);
 767                                 if (is_seen) lastold = thismsg;
 768                         }
 769                         if ((thismsg > 0L)
 770                             && (
 771
 772                                        (mode == MSGS_ALL)
 773                                        || ((mode == MSGS_OLD) && (is_seen))
 774                                        || ((mode == MSGS_NEW) && (!is_seen))
 775                                        || ((mode == MSGS_LAST) && (a >= (num_msgs - ref)))
 776                                    || ((mode == MSGS_FIRST) && (a < ref))
 777                                 || ((mode == MSGS_GT) && (thismsg > ref))
 778                                 || ((mode == MSGS_LT) && (thismsg < ref))
 779                                 || ((mode == MSGS_EQ) && (thismsg == ref))
 780                             )
 781                             ) {
 782                                 if ((mode == MSGS_NEW) && (CC->user.flags & US_LASTOLD) && (lastold > 0L) && (printed_lastold == 0) && (!is_seen)) {
 783                                         if (CallBack)
 784                                                 CallBack(lastold, userdata);
 785                                         printed_lastold = 1;
 786                                         ++num_processed;
 787                                 }
 788                                 if (CallBack) CallBack(thismsg, userdata);
 789                                 ++num_processed;
 790                         }
 791                 }
 792         if (need_to_free_re) regfree(&re);
 793
 794         /*
 795          * We cache the most recent msglist in order to do security checks later
 796          */
 797         if (CC->client_socket > 0) {
 798                 if (CC->cached_msglist != NULL) {
 799                         free(CC->cached_msglist);
 800                 }
 801                 CC->cached_msglist = msglist;
 802                 CC->cached_num_msgs = num_msgs;
 803         }
 804         else {
 805                 free(msglist);
 806         }
 807
 808         return num_processed;
 809 }
 810
 811
 812
 813 /*
 814  * cmd_msgs()  -  get list of message #'s in this room
 815  *              implements the MSGS server command using CtdlForEachMessage()
 816  */
 817 void cmd_msgs(char *cmdbuf)
 818 {
 819         int mode = 0;
 820         char which[16];
 821         char buf[256];
 822         char tfield[256];
 823         char tvalue[256];
 824         int cm_ref = 0;
 825         int i;
 826         int with_template = 0;
 827         struct CtdlMessage *template = NULL;
 828         char search_string[1024];
 829         ForEachMsgCallback CallBack;
 830
 831         if (CtdlAccessCheck(ac_logged_in_or_guest)) return;
 832
 833         extract_token(which, cmdbuf, 0, '|', sizeof which);
 834         cm_ref = extract_int(cmdbuf, 1);
 835         extract_token(search_string, cmdbuf, 1, '|', sizeof search_string);
 836         with_template = extract_int(cmdbuf, 2);
 837         switch (extract_int(cmdbuf, 3))
 838         {
 839         default:
 840         case MSG_HDRS_BRIEF:
 841                 CallBack = simple_listing;
 842                 break;
 843         case MSG_HDRS_ALL:
 844                 CallBack = headers_listing;
 845                 break;
 846         case MSG_HDRS_EUID:
 847                 CallBack = headers_euid;
 848                 break;
 849         }
 850
 851         strcat(which, "   ");
 852         if (!strncasecmp(which, "OLD", 3))
 853                 mode = MSGS_OLD;
 854         else if (!strncasecmp(which, "NEW", 3))
 855                 mode = MSGS_NEW;
 856         else if (!strncasecmp(which, "FIRST", 5))
 857                 mode = MSGS_FIRST;
 858         else if (!strncasecmp(which, "LAST", 4))
 859                 mode = MSGS_LAST;
 860         else if (!strncasecmp(which, "GT", 2))
 861                 mode = MSGS_GT;
 862         else if (!strncasecmp(which, "LT", 2))
 863                 mode = MSGS_LT;
 864         else if (!strncasecmp(which, "SEARCH", 6))
 865                 mode = MSGS_SEARCH;
 866         else
 867                 mode = MSGS_ALL;
 868
 869         if ( (mode == MSGS_SEARCH) && (!config.c_enable_fulltext) ) {
 870                 cprintf("%d Full text index is not enabled on this server.\n",
 871                         ERROR + CMD_NOT_SUPPORTED);
 872                 return;
 873         }
 874
 875         if (with_template) {
 876                 unbuffer_output();
 877                 cprintf("%d Send template then receive message list\n",
 878                         START_CHAT_MODE);
 879                 template = (struct CtdlMessage *)
 880                         malloc(sizeof(struct CtdlMessage));
 881                 memset(template, 0, sizeof(struct CtdlMessage));
 882                 template->cm_magic = CTDLMESSAGE_MAGIC;
 883                 template->cm_anon_type = MES_NORMAL;
 884
 885                 while(client_getln(buf, sizeof buf) >= 0 && strcmp(buf,"000")) {
 886                         extract_token(tfield, buf, 0, '|', sizeof tfield);
 887                         extract_token(tvalue, buf, 1, '|', sizeof tvalue);
 888                         for (i='A'; i<='Z'; ++i) if (msgkeys[i]!=NULL) {
 889                                 if (!strcasecmp(tfield, msgkeys[i])) {
 890                                         template->cm_fields[i] =
 891                                                 strdup(tvalue);
 892                                 }
 893                         }
 894                 }
 895                 buffer_output();
 896         }
 897         else {
 898                 cprintf("%d  \n", LISTING_FOLLOWS);
 899         }
 900
 901         CtdlForEachMessage(mode,
 902                            ( (mode == MSGS_SEARCH) ? 0 : cm_ref ),
 903                            ( (mode == MSGS_SEARCH) ? search_string : NULL ),
 904                            NULL,
 905                            template,
 906                            CallBack,
 907                            NULL);
 908         if (template != NULL) CtdlFreeMessage(template);
 909         cprintf("000\n");
 910 }
 911
 912
 913
 914
 915 /*
 916  * help_subst()  -  support routine for help file viewer
 917  */
 918 void help_subst(char *strbuf, char *source, char *dest)
 919 {
 920         char workbuf[SIZ];
 921         int p;
 922
 923         while (p = pattern2(strbuf, source), (p >= 0)) {
 924                 strcpy(workbuf, &strbuf[p + strlen(source)]);
 925                 strcpy(&strbuf[p], dest);
 926                 strcat(strbuf, workbuf);
 927         }
 928 }
 929
 930
 931 void do_help_subst(char *buffer)
 932 {
 933         char buf2[16];
 934
 935         help_subst(buffer, "^nodename", config.c_nodename);
 936         help_subst(buffer, "^humannode", config.c_humannode);
 937         help_subst(buffer, "^fqdn", config.c_fqdn);
 938         help_subst(buffer, "^username", CC->user.fullname);
 939         snprintf(buf2, sizeof buf2, "%ld", CC->user.usernum);
 940         help_subst(buffer, "^usernum", buf2);
 941         help_subst(buffer, "^sysadm", config.c_sysadm);
 942         help_subst(buffer, "^variantname", CITADEL);
 943         snprintf(buf2, sizeof buf2, "%d", config.c_maxsessions);
 944         help_subst(buffer, "^maxsessions", buf2);
 945         help_subst(buffer, "^bbsdir", ctdl_message_dir);
 946 }
 947
 948
 949
 950 /*
 951  * memfmout()  -  Citadel text formatter and paginator.
 952  *           Although the original purpose of this routine was to format
 953  *           text to the reader's screen width, all we're really using it
 954  *           for here is to format text out to 80 columns before sending it
 955  *           to the client.  The client software may reformat it again.
 956  */
 957 void memfmout(
 958         char *mptr,             /* where are we going to get our text from? */
 959         const char *nl          /* string to terminate lines with */
 960 ) {
 961         int column = 0;
 962         unsigned char ch = 0;
 963         char outbuf[1024];
 964         int len = 0;
 965         int nllen = 0;
 966
 967         if (!mptr) return;
 968         nllen = strlen(nl);
 969         while (ch=*(mptr++), ch != 0) {
 970
 971                 if (ch == '\n') {
 972                         if (client_write(outbuf, len) == -1)
 973                         {
 974                                 syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
 975                                 return;
 976                         }
 977                         len = 0;
 978                         if (client_write(nl, nllen) == -1)
 979                         {
 980                                 syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
 981                                 return;
 982                         }
 983                         column = 0;
 984                 }
 985                 else if (ch == '\r') {
 986                         /* Ignore carriage returns.  Newlines are always LF or CRLF but never CR. */
 987                 }
 988                 else if (isspace(ch)) {
 989                         if (column > 72) {              /* Beyond 72 columns, break on the next space */
 990                                 if (client_write(outbuf, len) == -1)
 991                                 {
 992                                         syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
 993                                         return;
 994                                 }
 995                                 len = 0;
 996                                 if (client_write(nl, nllen) == -1)
 997                                 {
 998                                         syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
 999                                         return;
1000                                 }
1001                                 column = 0;
1002                         }
1003                         else {
1004                                 outbuf[len++] = ch;
1005                                 ++column;
1006                         }
1007                 }
1008                 else {
1009                         outbuf[len++] = ch;
1010                         ++column;
1011                         if (column > 1000) {            /* Beyond 1000 columns, break anywhere */
1012                                 if (client_write(outbuf, len) == -1)
1013                                 {
1014                                         syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
1015                                         return;
1016                                 }
1017                                 len = 0;
1018                                 if (client_write(nl, nllen) == -1)
1019                                 {
1020                                         syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
1021                                         return;
1022                                 }
1023                                 column = 0;
1024                         }
1025                 }
1026         }
1027         if (len) {
1028                 if (client_write(outbuf, len) == -1)
1029                 {
1030                         syslog(LOG_ERR, "memfmout(): aborting due to write failure.\n");
1031                         return;
1032                 }
1033                 len = 0;
1034                 client_write(nl, nllen);
1035                 column = 0;
1036         }
1037 }
1038
1039
1040
1041 /*
1042  * Callback function for mime parser that simply lists the part
1043  */
1044 void list_this_part(char *name, char *filename, char *partnum, char *disp,
1045                     void *content, char *cbtype, char *cbcharset, size_t length, char *encoding,
1046                     char *cbid, void *cbuserdata)
1047 {
1048         struct ma_info *ma;
1049
1050         ma = (struct ma_info *)cbuserdata;
1051         if (ma->is_ma == 0) {
1052                 cprintf("part=%s|%s|%s|%s|%s|%ld|%s|%s\n",
1053                         name,
1054                         filename,
1055                         partnum,
1056                         disp,
1057                         cbtype,
1058                         (long)length,
1059                         cbid,
1060                         cbcharset);
1061         }
1062 }
1063
1064 /*
1065  * Callback function for multipart prefix
1066  */
1067 void list_this_pref(char *name, char *filename, char *partnum, char *disp,
1068                     void *content, char *cbtype, char *cbcharset, size_t length, char *encoding,
1069                     char *cbid, void *cbuserdata)
1070 {
1071         struct ma_info *ma;
1072
1073         ma = (struct ma_info *)cbuserdata;
1074         if (!strcasecmp(cbtype, "multipart/alternative")) {
1075                 ++ma->is_ma;
1076         }
1077
1078         if (ma->is_ma == 0) {
1079                 cprintf("pref=%s|%s\n", partnum, cbtype);
1080         }
1081 }
1082
1083 /*
1084  * Callback function for multipart sufffix
1085  */
1086 void list_this_suff(char *name, char *filename, char *partnum, char *disp,
1087                     void *content, char *cbtype, char *cbcharset, size_t length, char *encoding,
1088                     char *cbid, void *cbuserdata)
1089 {
1090         struct ma_info *ma;
1091
1092         ma = (struct ma_info *)cbuserdata;
1093         if (ma->is_ma == 0) {
1094                 cprintf("suff=%s|%s\n", partnum, cbtype);
1095         }
1096         if (!strcasecmp(cbtype, "multipart/alternative")) {
1097                 --ma->is_ma;
1098         }
1099 }
1100
1101
1102 /*
1103  * Callback function for mime parser that opens a section for downloading
1104  */
1105 void mime_download(char *name, char *filename, char *partnum, char *disp,
1106                    void *content, char *cbtype, char *cbcharset, size_t length,
1107                    char *encoding, char *cbid, void *cbuserdata)
1108 {
1109         int rv = 0;
1110         CitContext *CCC = MyContext();
1111
1112         /* Silently go away if there's already a download open. */
1113         if (CCC->download_fp != NULL)
1114                 return;
1115
1116         if (
1117                 (!IsEmptyStr(partnum) && (!strcasecmp(CCC->download_desired_section, partnum)))
1118         ||      (!IsEmptyStr(cbid) && (!strcasecmp(CCC->download_desired_section, cbid)))
1119         ) {
1120                 CCC->download_fp = tmpfile();
1121                 if (CCC->download_fp == NULL) {
1122                         syslog(LOG_EMERG, "mime_download(): Couldn't write: %s\n",
1123                                strerror(errno));
1124                         cprintf("%d cannot open temporary file: %s\n",
1125                                 ERROR + INTERNAL_ERROR, strerror(errno));
1126                         return;
1127                 }
1128
1129                 rv = fwrite(content, length, 1, CC->download_fp);
1130                 if (rv <= 0) {
1131                         syslog(LOG_EMERG, "mime_download(): Couldn't write: %s\n",
1132                                strerror(errno));
1133                         cprintf("%d unable to write tempfile.\n",
1134                                 ERROR + TOO_BIG);
1135                         fclose(CCC->download_fp);
1136                         CCC->download_fp = NULL;
1137                         return;
1138                 }
1139                 fflush(CCC->download_fp);
1140                 rewind(CCC->download_fp);
1141
1142                 OpenCmdResult(filename, cbtype);
1143         }
1144 }
1145
1146
1147
1148 /*
1149  * Callback function for mime parser that outputs a section all at once.
1150  * We can specify the desired section by part number *or* content-id.
1151  */
1152 void mime_spew_section(char *name, char *filename, char *partnum, char *disp,
1153                    void *content, char *cbtype, char *cbcharset, size_t length,
1154                    char *encoding, char *cbid, void *cbuserdata)
1155 {
1156         int *found_it = (int *)cbuserdata;
1157
1158         if (
1159                 (!IsEmptyStr(partnum) && (!strcasecmp(CC->download_desired_section, partnum)))
1160         ||      (!IsEmptyStr(cbid) && (!strcasecmp(CC->download_desired_section, cbid)))
1161         ) {
1162                 *found_it = 1;
1163                 cprintf("%d %d|-1|%s|%s|%s\n",
1164                         BINARY_FOLLOWS,
1165                         (int)length,
1166                         filename,
1167                         cbtype,
1168                         cbcharset
1169                 );
1170                 client_write(content, length);
1171         }
1172 }
1173
1174
1175 /*
1176  * Load a message from disk into memory.
1177  * This is used by CtdlOutputMsg() and other fetch functions.
1178  *
1179  * NOTE: Caller is responsible for freeing the returned CtdlMessage struct
1180  *       using the CtdlMessageFree() function.
1181  */
1182 struct CtdlMessage *CtdlFetchMessage(long msgnum, int with_body)
1183 {
1184         struct cdbdata *dmsgtext;
1185         struct CtdlMessage *ret = NULL;
1186         char *mptr;
1187         char *upper_bound;
1188         cit_uint8_t ch;
1189         cit_uint8_t field_header;
1190
1191         syslog(LOG_DEBUG, "CtdlFetchMessage(%ld, %d)\n", msgnum, with_body);
1192         dmsgtext = cdb_fetch(CDB_MSGMAIN, &msgnum, sizeof(long));
1193         if (dmsgtext == NULL) {
1194                 return NULL;
1195         }
1196         mptr = dmsgtext->ptr;
1197         upper_bound = mptr + dmsgtext->len;
1198
1199         /* Parse the three bytes that begin EVERY message on disk.
1200          * The first is always 0xFF, the on-disk magic number.
1201          * The second is the anonymous/public type byte.
1202          * The third is the format type byte (vari, fixed, or MIME).
1203          */
1204         ch = *mptr++;
1205         if (ch != 255) {
1206                 syslog(LOG_ERR, "Message %ld appears to be corrupted.\n", msgnum);
1207                 cdb_free(dmsgtext);
1208                 return NULL;
1209         }
1210         ret = (struct CtdlMessage *) malloc(sizeof(struct CtdlMessage));
1211         memset(ret, 0, sizeof(struct CtdlMessage));
1212
1213         ret->cm_magic = CTDLMESSAGE_MAGIC;
1214         ret->cm_anon_type = *mptr++;    /* Anon type byte */
1215         ret->cm_format_type = *mptr++;  /* Format type byte */
1216
1217         /*
1218          * The rest is zero or more arbitrary fields.  Load them in.
1219          * We're done when we encounter either a zero-length field or
1220          * have just processed the 'M' (message text) field.
1221          */
1222         do {
1223                 if (mptr >= upper_bound) {
1224                         break;
1225                 }
1226                 field_header = *mptr++;
1227                 ret->cm_fields[field_header] = strdup(mptr);
1228
1229                 while (*mptr++ != 0);   /* advance to next field */
1230
1231         } while ((mptr < upper_bound) && (field_header != 'M'));
1232
1233         cdb_free(dmsgtext);
1234
1235         /* Always make sure there's something in the msg text field.  If
1236          * it's NULL, the message text is most likely stored separately,
1237          * so go ahead and fetch that.  Failing that, just set a dummy
1238          * body so other code doesn't barf.
1239          */
1240         if ( (ret->cm_fields['M'] == NULL) && (with_body) ) {
1241                 dmsgtext = cdb_fetch(CDB_BIGMSGS, &msgnum, sizeof(long));
1242                 if (dmsgtext != NULL) {
1243                         ret->cm_fields['M'] = dmsgtext->ptr;
1244                         dmsgtext->ptr = NULL;
1245                         cdb_free(dmsgtext);
1246                 }
1247         }
1248         if (ret->cm_fields['M'] == NULL) {
1249                 ret->cm_fields['M'] = strdup("\r\n\r\n (no text)\r\n");
1250         }
1251
1252         /* Perform "before read" hooks (aborting if any return nonzero) */
1253         if (PerformMessageHooks(ret, EVT_BEFOREREAD) > 0) {
1254                 CtdlFreeMessage(ret);
1255                 return NULL;
1256         }
1257
1258         return (ret);
1259 }
1260
1261
1262 /*
1263  * Returns 1 if the supplied pointer points to a valid Citadel message.
1264  * If the pointer is NULL or the magic number check fails, returns 0.
1265  */
1266 int is_valid_message(struct CtdlMessage *msg) {
1267         if (msg == NULL)
1268                 return 0;
1269         if ((msg->cm_magic) != CTDLMESSAGE_MAGIC) {
1270                 syslog(LOG_WARNING, "is_valid_message() -- self-check failed\n");
1271                 return 0;
1272         }
1273         return 1;
1274 }
1275
1276 void CtdlFreeMessageContents(struct CtdlMessage *msg)
1277 {
1278         int i;
1279
1280         for (i = 0; i < 256; ++i)
1281                 if (msg->cm_fields[i] != NULL) {
1282                         free(msg->cm_fields[i]);
1283                 }
1284
1285         msg->cm_magic = 0;      /* just in case */
1286 }
1287 /*
1288  * 'Destructor' for struct CtdlMessage
1289  */
1290 void CtdlFreeMessage(struct CtdlMessage *msg)
1291 {
1292         if (is_valid_message(msg) == 0)
1293         {
1294                 if (msg != NULL) free (msg);
1295                 return;
1296         }
1297         CtdlFreeMessageContents(msg);
1298         free(msg);
1299 }
1300
1301
1302 /*
1303  * Pre callback function for multipart/alternative
1304  *
1305  * NOTE: this differs from the standard behavior for a reason.  Normally when
1306  *       displaying multipart/alternative you want to show the _last_ usable
1307  *       format in the message.  Here we show the _first_ one, because it's
1308  *       usually text/plain.  Since this set of functions is designed for text
1309  *       output to non-MIME-aware clients, this is the desired behavior.
1310  *
1311  */
1312 void fixed_output_pre(char *name, char *filename, char *partnum, char *disp,
1313                 void *content, char *cbtype, char *cbcharset, size_t length, char *encoding,
1314                 char *cbid, void *cbuserdata)
1315 {
1316         struct ma_info *ma;
1317
1318         ma = (struct ma_info *)cbuserdata;
1319         syslog(LOG_DEBUG, "fixed_output_pre() type=<%s>\n", cbtype);
1320         if (!strcasecmp(cbtype, "multipart/alternative")) {
1321                 ++ma->is_ma;
1322                 ma->did_print = 0;
1323         }
1324         if (!strcasecmp(cbtype, "message/rfc822")) {
1325                 ++ma->freeze;
1326         }
1327 }
1328
1329 /*
1330  * Post callback function for multipart/alternative
1331  */
1332 void fixed_output_post(char *name, char *filename, char *partnum, char *disp,
1333                 void *content, char *cbtype, char *cbcharset, size_t length,
1334                 char *encoding, char *cbid, void *cbuserdata)
1335 {
1336         struct ma_info *ma;
1337
1338         ma = (struct ma_info *)cbuserdata;
1339         syslog(LOG_DEBUG, "fixed_output_post() type=<%s>\n", cbtype);
1340         if (!strcasecmp(cbtype, "multipart/alternative")) {
1341                 --ma->is_ma;
1342                 ma->did_print = 0;
1343         }
1344         if (!strcasecmp(cbtype, "message/rfc822")) {
1345                 --ma->freeze;
1346         }
1347 }
1348
1349 /*
1350  * Inline callback function for mime parser that wants to display text
1351  */
1352 void fixed_output(char *name, char *filename, char *partnum, char *disp,
1353                 void *content, char *cbtype, char *cbcharset, size_t length,
1354                 char *encoding, char *cbid, void *cbuserdata)
1355 {
1356         char *ptr;
1357         char *wptr;
1358         size_t wlen;
1359         struct ma_info *ma;
1360
1361         ma = (struct ma_info *)cbuserdata;
1362
1363         syslog(LOG_DEBUG,
1364                 "fixed_output() part %s: %s (%s) (%ld bytes)\n",
1365                 partnum, filename, cbtype, (long)length);
1366
1367         /*
1368          * If we're in the middle of a multipart/alternative scope and
1369          * we've already printed another section, skip this one.
1370          */
1371         if ( (ma->is_ma) && (ma->did_print) ) {
1372                 syslog(LOG_DEBUG, "Skipping part %s (%s)\n", partnum, cbtype);
1373                 return;
1374         }
1375         ma->did_print = 1;
1376
1377         if ( (!strcasecmp(cbtype, "text/plain"))
1378            || (IsEmptyStr(cbtype)) ) {
1379                 wptr = content;
1380                 if (length > 0) {
1381                         client_write(wptr, length);
1382                         if (wptr[length-1] != '\n') {
1383                                 cprintf("\n");
1384                         }
1385                 }
1386                 return;
1387         }
1388
1389         if (!strcasecmp(cbtype, "text/html")) {
1390                 ptr = html_to_ascii(content, length, 80, 0);
1391                 wlen = strlen(ptr);
1392                 client_write(ptr, wlen);
1393                 if ((wlen > 0) && (ptr[wlen-1] != '\n')) {
1394                         cprintf("\n");
1395                 }
1396                 free(ptr);
1397                 return;
1398         }
1399
1400         if (ma->use_fo_hooks) {
1401                 if (PerformFixedOutputHooks(cbtype, content, length)) {
1402                 /* above function returns nonzero if it handled the part */
1403                         return;
1404                 }
1405         }
1406
1407         if (strncasecmp(cbtype, "multipart/", 10)) {
1408                 cprintf("Part %s: %s (%s) (%ld bytes)\r\n",
1409                         partnum, filename, cbtype, (long)length);
1410                 return;
1411         }
1412 }
1413
1414 /*
1415  * The client is elegant and sophisticated and wants to be choosy about
1416  * MIME content types, so figure out which multipart/alternative part
1417  * we're going to send.
1418  *
1419  * We use a system of weights.  When we find a part that matches one of the
1420  * MIME types we've declared as preferential, we can store it in ma->chosen_part
1421  * and then set ma->chosen_pref to that MIME type's position in our preference
1422  * list.  If we then hit another match, we only replace the first match if
1423  * the preference value is lower.
1424  */
1425 void choose_preferred(char *name, char *filename, char *partnum, char *disp,
1426                 void *content, char *cbtype, char *cbcharset, size_t length,
1427                 char *encoding, char *cbid, void *cbuserdata)
1428 {
1429         char buf[1024];
1430         int i;
1431         struct ma_info *ma;
1432
1433         ma = (struct ma_info *)cbuserdata;
1434
1435         // NOTE: REMOVING THIS CONDITIONAL FIXES BUG 220
1436         //       http://bugzilla.citadel.org/show_bug.cgi?id=220
1437         // I don't know if there are any side effects!  Please TEST TEST TEST
1438         //if (ma->is_ma > 0) {
1439
1440         for (i=0; i<num_tokens(CC->preferred_formats, '|'); ++i) {
1441                 extract_token(buf, CC->preferred_formats, i, '|', sizeof buf);
1442                 if ( (!strcasecmp(buf, cbtype)) && (!ma->freeze) ) {
1443                         if (i < ma->chosen_pref) {
1444                                 syslog(LOG_DEBUG, "Setting chosen part: <%s>\n", partnum);
1445                                 safestrncpy(ma->chosen_part, partnum, sizeof ma->chosen_part);
1446                                 ma->chosen_pref = i;
1447                         }
1448                 }
1449         }
1450 }
1451
1452 /*
1453  * Now that we've chosen our preferred part, output it.
1454  */
1455 void output_preferred(char *name,
1456                       char *filename,
1457                       char *partnum,
1458                       char *disp,
1459                       void *content,
1460                       char *cbtype,
1461                       char *cbcharset,
1462                       size_t length,
1463                       char *encoding,
1464                       char *cbid,
1465                       void *cbuserdata)
1466 {
1467         int i;
1468         char buf[128];
1469         int add_newline = 0;
1470         char *text_content;
1471         struct ma_info *ma;
1472         char *decoded = NULL;
1473         size_t bytes_decoded;
1474         int rc = 0;
1475
1476         ma = (struct ma_info *)cbuserdata;
1477
1478         /* This is not the MIME part you're looking for... */
1479         if (strcasecmp(partnum, ma->chosen_part)) return;
1480
1481         /* If the content-type of this part is in our preferred formats
1482          * list, we can simply output it verbatim.
1483          */
1484         for (i=0; i<num_tokens(CC->preferred_formats, '|'); ++i) {
1485                 extract_token(buf, CC->preferred_formats, i, '|', sizeof buf);
1486                 if (!strcasecmp(buf, cbtype)) {
1487                         /* Yeah!  Go!  W00t!! */
1488                         if (ma->dont_decode == 0)
1489                                 rc = mime_decode_now (content,
1490                                                       length,
1491                                                       encoding,
1492                                                       &decoded,
1493                                                       &bytes_decoded);
1494                         if (rc < 0)
1495                                 break; /* Give us the chance, maybe theres another one. */
1496
1497                         if (rc == 0) text_content = (char *)content;
1498                         else {
1499                                 text_content = decoded;
1500                                 length = bytes_decoded;
1501                         }
1502
1503                         if (text_content[length-1] != '\n') {
1504                                 ++add_newline;
1505                         }
1506                         cprintf("Content-type: %s", cbtype);
1507                         if (!IsEmptyStr(cbcharset)) {
1508                                 cprintf("; charset=%s", cbcharset);
1509                         }
1510                         cprintf("\nContent-length: %d\n",
1511                                 (int)(length + add_newline) );
1512                         if (!IsEmptyStr(encoding)) {
1513                                 cprintf("Content-transfer-encoding: %s\n", encoding);
1514                         }
1515                         else {
1516                                 cprintf("Content-transfer-encoding: 7bit\n");
1517                         }
1518                         cprintf("X-Citadel-MSG4-Partnum: %s\n", partnum);
1519                         cprintf("\n");
1520                         if (client_write(text_content, length) == -1)
1521                         {
1522                                 syslog(LOG_ERR, "output_preferred(): aborting due to write failure.\n");
1523                                 return;
1524                         }
1525                         if (add_newline) cprintf("\n");
1526                         if (decoded != NULL) free(decoded);
1527                         return;
1528                 }
1529         }
1530
1531         /* No translations required or possible: output as text/plain */
1532         cprintf("Content-type: text/plain\n\n");
1533         rc = 0;
1534         if (ma->dont_decode == 0)
1535                 rc = mime_decode_now (content,
1536                                       length,
1537                                       encoding,
1538                                       &decoded,
1539                                       &bytes_decoded);
1540         if (rc < 0)
1541                 return; /* Give us the chance, maybe theres another one. */
1542
1543         if (rc == 0) text_content = (char *)content;
1544         else {
1545                 text_content = decoded;
1546                 length = bytes_decoded;
1547         }
1548
1549         fixed_output(name, filename, partnum, disp, text_content, cbtype, cbcharset,
1550                         length, encoding, cbid, cbuserdata);
1551         if (decoded != NULL) free(decoded);
1552 }
1553
1554
1555 struct encapmsg {
1556         char desired_section[64];
1557         char *msg;
1558         size_t msglen;
1559 };
1560
1561
1562 /*
1563  * Callback function for
1564  */
1565 void extract_encapsulated_message(char *name, char *filename, char *partnum, char *disp,
1566                    void *content, char *cbtype, char *cbcharset, size_t length,
1567                    char *encoding, char *cbid, void *cbuserdata)
1568 {
1569         struct encapmsg *encap;
1570
1571         encap = (struct encapmsg *)cbuserdata;
1572
1573         /* Only proceed if this is the desired section... */
1574         if (!strcasecmp(encap->desired_section, partnum)) {
1575                 encap->msglen = length;
1576                 encap->msg = malloc(length + 2);
1577                 memcpy(encap->msg, content, length);
1578                 return;
1579         }
1580 }
1581
1582
1583 /*
1584  * Determine whether the specified message exists in the cached_msglist
1585  * (This is a security check)
1586  */
1587 int check_cached_msglist(long msgnum) {
1588
1589         /* cases in which we skip the check */
1590         if (!CC) return om_ok;                                          /* not a session */
1591         if (CC->client_socket <= 0) return om_ok;                       /* not a client session */
1592         if (CC->cached_msglist == NULL) return om_access_denied;        /* no msglist fetched */
1593         if (CC->cached_num_msgs == 0) return om_access_denied;          /* nothing to check */
1594
1595
1596         /* Do a binary search within the cached_msglist for the requested msgnum */
1597         int min = 0;
1598         int max = (CC->cached_num_msgs - 1);
1599
1600         while (max >= min) {
1601                 int middle = min + (max-min) / 2 ;
1602                 if (msgnum == CC->cached_msglist[middle]) {
1603                         return om_ok;
1604                 }
1605                 if (msgnum > CC->cached_msglist[middle]) {
1606                         min = middle + 1;
1607                 }
1608                 else {
1609                         max = middle - 1;
1610                 }
1611         }
1612
1613         return om_access_denied;
1614 }
1615
1616
1617 /*
1618  * Determine whether the currently logged in session has permission to read
1619  * messages in the current room.
1620  */
1621 int CtdlDoIHavePermissionToReadMessagesInThisRoom(void) {
1622         if (    (!(CC->logged_in))
1623                 && (!(CC->internal_pgm))
1624                 && (!config.c_guest_logins)
1625         ) {
1626                 return(om_not_logged_in);
1627         }
1628         return(om_ok);
1629 }
1630
1631
1632 /*
1633  * Get a message off disk.  (returns om_* values found in msgbase.h)
1634  *
1635  */
1636 int CtdlOutputMsg(long msg_num,         /* message number (local) to fetch */
1637                   int mode,             /* how would you like that message? */
1638                   int headers_only,     /* eschew the message body? */
1639                   int do_proto,         /* do Citadel protocol responses? */
1640                   int crlf,             /* Use CRLF newlines instead of LF? */
1641                   char *section,        /* NULL or a message/rfc822 section */
1642                   int flags             /* various flags; see msgbase.h */
1643 ) {
1644         struct CtdlMessage *TheMessage = NULL;
1645         int retcode = om_no_such_msg;
1646         struct encapmsg encap;
1647         int r;
1648
1649         syslog(LOG_DEBUG, "CtdlOutputMsg(msgnum=%ld, mode=%d, section=%s)\n",
1650                 msg_num, mode,
1651                 (section ? section : "<>")
1652         );
1653
1654         r = CtdlDoIHavePermissionToReadMessagesInThisRoom();
1655         if (r != om_ok) {
1656                 if (do_proto) {
1657                         if (r == om_not_logged_in) {
1658                                 cprintf("%d Not logged in.\n", ERROR + NOT_LOGGED_IN);
1659                         }
1660                         else {
1661                                 cprintf("%d An unknown error has occurred.\n", ERROR);
1662                         }
1663                 }
1664                 return(r);
1665         }
1666
1667         /*
1668          * Check to make sure the message is actually IN this room
1669          */
1670         r = check_cached_msglist(msg_num);
1671         if (r == om_access_denied) {
1672                 /* Not in the cache?  We get ONE shot to check it again. */
1673                 CtdlForEachMessage(MSGS_ALL, 0L, NULL, NULL, NULL, NULL, NULL);
1674                 r = check_cached_msglist(msg_num);
1675         }
1676         if (r != om_ok) {
1677                 syslog(LOG_DEBUG, "Security check fail: message %ld is not in %s\n",
1678                         msg_num, CC->room.QRname
1679                 );
1680                 if (do_proto) {
1681                         if (r == om_access_denied) {
1682                                 cprintf("%d message %ld was not found in this room\n",
1683                                         ERROR + HIGHER_ACCESS_REQUIRED,
1684                                         msg_num
1685                                 );
1686                         }
1687                 }
1688                 return(r);
1689         }
1690
1691         /*
1692          * Fetch the message from disk.  If we're in HEADERS_FAST mode,
1693          * request that we don't even bother loading the body into memory.
1694          */
1695         if (headers_only == HEADERS_FAST) {
1696                 TheMessage = CtdlFetchMessage(msg_num, 0);
1697         }
1698         else {
1699                 TheMessage = CtdlFetchMessage(msg_num, 1);
1700         }
1701
1702         if (TheMessage == NULL) {
1703                 if (do_proto) cprintf("%d Can't locate msg %ld on disk\n",
1704                         ERROR + MESSAGE_NOT_FOUND, msg_num);
1705                 return(om_no_such_msg);
1706         }
1707
1708         /* Here is the weird form of this command, to process only an
1709          * encapsulated message/rfc822 section.
1710          */
1711         if (section) if (!IsEmptyStr(section)) if (strcmp(section, "0")) {
1712                 memset(&encap, 0, sizeof encap);
1713                 safestrncpy(encap.desired_section, section, sizeof encap.desired_section);
1714                 mime_parser(TheMessage->cm_fields['M'],
1715                         NULL,
1716                         *extract_encapsulated_message,
1717                         NULL, NULL, (void *)&encap, 0
1718                 );
1719                 CtdlFreeMessage(TheMessage);
1720                 TheMessage = NULL;
1721
1722                 if (encap.msg) {
1723                         encap.msg[encap.msglen] = 0;
1724                         TheMessage = convert_internet_message(encap.msg);
1725                         encap.msg = NULL;       /* no free() here, TheMessage owns it now */
1726
1727                         /* Now we let it fall through to the bottom of this
1728                          * function, because TheMessage now contains the
1729                          * encapsulated message instead of the top-level
1730                          * message.  Isn't that neat?
1731                          */
1732
1733                 }
1734                 else {
1735                         if (do_proto) cprintf("%d msg %ld has no part %s\n",
1736                                 ERROR + MESSAGE_NOT_FOUND, msg_num, section);
1737                         retcode = om_no_such_msg;
1738                 }
1739
1740         }
1741
1742         /* Ok, output the message now */
1743         retcode = CtdlOutputPreLoadedMsg(TheMessage, mode, headers_only, do_proto, crlf, flags);
1744         CtdlFreeMessage(TheMessage);
1745
1746         return(retcode);
1747 }
1748
1749
1750 char *qp_encode_email_addrs(char *source)
1751 {
1752         char *user, *node, *name;
1753         const char headerStr[] = "=?UTF-8?Q?";
1754         char *Encoded;
1755         char *EncodedName;
1756         char *nPtr;
1757         int need_to_encode = 0;
1758         long SourceLen;
1759         long EncodedMaxLen;
1760         long nColons = 0;
1761         long *AddrPtr;
1762         long *AddrUtf8;
1763         long nAddrPtrMax = 50;
1764         long nmax;
1765         int InQuotes = 0;
1766         int i, n;
1767
1768         if (source == NULL) return source;
1769         if (IsEmptyStr(source)) return source;
1770         cit_backtrace();
1771         syslog(LOG_DEBUG, "qp_encode_email_addrs: [%s]\n", source);
1772
1773         AddrPtr = malloc (sizeof (long) * nAddrPtrMax);
1774         AddrUtf8 = malloc (sizeof (long) * nAddrPtrMax);
1775         memset(AddrUtf8, 0, sizeof (long) * nAddrPtrMax);
1776         *AddrPtr = 0;
1777         i = 0;
1778         while (!IsEmptyStr (&source[i])) {
1779                 if (nColons >= nAddrPtrMax){
1780                         long *ptr;
1781
1782                         ptr = (long *) malloc(sizeof (long) * nAddrPtrMax * 2);
1783                         memcpy (ptr, AddrPtr, sizeof (long) * nAddrPtrMax);
1784                         free (AddrPtr), AddrPtr = ptr;
1785
1786                         ptr = (long *) malloc(sizeof (long) * nAddrPtrMax * 2);
1787                         memset(&ptr[nAddrPtrMax], 0,
1788                                sizeof (long) * nAddrPtrMax);
1789
1790                         memcpy (ptr, AddrUtf8, sizeof (long) * nAddrPtrMax);
1791                         free (AddrUtf8), AddrUtf8 = ptr;
1792                         nAddrPtrMax *= 2;
1793                 }
1794                 if (((unsigned char) source[i] < 32) ||
1795                     ((unsigned char) source[i] > 126)) {
1796                         need_to_encode = 1;
1797                         AddrUtf8[nColons] = 1;
1798                 }
1799                 if (source[i] == '"')
1800                         InQuotes = !InQuotes;
1801                 if (!InQuotes && source[i] == ',') {
1802                         AddrPtr[nColons] = i;
1803                         nColons++;
1804                 }
1805                 i++;
1806         }
1807         if (need_to_encode == 0) {
1808                 free(AddrPtr);
1809                 free(AddrUtf8);
1810                 return source;
1811         }
1812
1813         SourceLen = i;
1814         EncodedMaxLen = nColons * (sizeof(headerStr) + 3) + SourceLen * 3;
1815         Encoded = (char*) malloc (EncodedMaxLen);
1816
1817         for (i = 0; i < nColons; i++)
1818                 source[AddrPtr[i]++] = '\0';
1819         /* TODO: if libidn, this might get larger*/
1820         user = malloc(SourceLen + 1);
1821         node = malloc(SourceLen + 1);
1822         name = malloc(SourceLen + 1);
1823
1824         nPtr = Encoded;
1825         *nPtr = '\0';
1826         for (i = 0; i < nColons && nPtr != NULL; i++) {
1827                 nmax = EncodedMaxLen - (nPtr - Encoded);
1828                 if (AddrUtf8[i]) {
1829                         process_rfc822_addr(&source[AddrPtr[i]],
1830                                             user,
1831                                             node,
1832                                             name);
1833                         /* TODO: libIDN here ! */
1834                         if (IsEmptyStr(name)) {
1835                                 n = snprintf(nPtr, nmax,
1836                                              (i==0)?"%s@%s" : ",%s@%s",
1837                                              user, node);
1838                         }
1839                         else {
1840                                 EncodedName = rfc2047encode(name, strlen(name));
1841                                 n = snprintf(nPtr, nmax,
1842                                              (i==0)?"%s <%s@%s>" : ",%s <%s@%s>",
1843                                              EncodedName, user, node);
1844                                 free(EncodedName);
1845                         }
1846                 }
1847                 else {
1848                         n = snprintf(nPtr, nmax,
1849                                      (i==0)?"%s" : ",%s",
1850                                      &source[AddrPtr[i]]);
1851                 }
1852                 if (n > 0 )
1853                         nPtr += n;
1854                 else {
1855                         char *ptr, *nnPtr;
1856                         ptr = (char*) malloc(EncodedMaxLen * 2);
1857                         memcpy(ptr, Encoded, EncodedMaxLen);
1858                         nnPtr = ptr + (nPtr - Encoded), nPtr = nnPtr;
1859                         free(Encoded), Encoded = ptr;
1860                         EncodedMaxLen *= 2;
1861                         i--; /* do it once more with properly lengthened buffer */
1862                 }
1863         }
1864         for (i = 0; i < nColons; i++)
1865                 source[--AddrPtr[i]] = ',';
1866
1867         free(user);
1868         free(node);
1869         free(name);
1870         free(AddrUtf8);
1871         free(AddrPtr);
1872         return Encoded;
1873 }
1874
1875
1876 /* If the last item in a list of recipients was truncated to a partial address,
1877  * remove it completely in order to avoid choking libSieve
1878  */
1879 void sanitize_truncated_recipient(char *str)
1880 {
1881         if (!str) return;
1882         if (num_tokens(str, ',') < 2) return;
1883
1884         int len = strlen(str);
1885         if (len < 900) return;
1886         if (len > 998) str[998] = 0;
1887
1888         char *cptr = strrchr(str, ',');
1889         if (!cptr) return;
1890
1891         char *lptr = strchr(cptr, '<');
1892         char *rptr = strchr(cptr, '>');
1893
1894         if ( (lptr) && (rptr) && (rptr > lptr) ) return;
1895
1896         *cptr = 0;
1897 }
1898
1899
1900 void OutputCtdlMsgHeaders(
1901         struct CtdlMessage *TheMessage,
1902         int do_proto)           /* do Citadel protocol responses? */
1903 {
1904         char allkeys[30];
1905         int i, k, n;
1906         int suppress_f = 0;
1907         char buf[SIZ];
1908         char display_name[256];
1909
1910         /* begin header processing loop for Citadel message format */
1911         safestrncpy(display_name, "<unknown>", sizeof display_name);
1912         if (TheMessage->cm_fields['A']) {
1913                 strcpy(buf, TheMessage->cm_fields['A']);
1914                 if (TheMessage->cm_anon_type == MES_ANONONLY) {
1915                         safestrncpy(display_name, "****", sizeof display_name);
1916                 }
1917                 else if (TheMessage->cm_anon_type == MES_ANONOPT) {
1918                         safestrncpy(display_name, "anonymous", sizeof display_name);
1919                 }
1920                 else {
1921                         safestrncpy(display_name, buf, sizeof display_name);
1922                 }
1923                 if ((is_room_aide())
1924                     && ((TheMessage->cm_anon_type == MES_ANONONLY)
1925                         || (TheMessage->cm_anon_type == MES_ANONOPT))) {
1926                         size_t tmp = strlen(display_name);
1927                         snprintf(&display_name[tmp],
1928                                  sizeof display_name - tmp,
1929                                  " [%s]", buf);
1930                 }
1931         }
1932
1933         /* Don't show Internet address for users on the
1934          * local Citadel network.
1935          */
1936         suppress_f = 0;
1937         if (TheMessage->cm_fields['N'] != NULL)
1938                 if (!IsEmptyStr(TheMessage->cm_fields['N']))
1939                         if (haschar(TheMessage->cm_fields['N'], '.') == 0) {
1940                                 suppress_f = 1;
1941                         }
1942
1943         /* Now spew the header fields in the order we like them. */
1944         n = safestrncpy(allkeys, FORDER, sizeof allkeys);
1945         for (i=0; i<n; ++i) {
1946                 k = (int) allkeys[i];
1947                 if (k != 'M') {
1948                         if ( (TheMessage->cm_fields[k] != NULL)
1949                              && (msgkeys[k] != NULL) ) {
1950                                 if ((k == 'V') || (k == 'R') || (k == 'Y')) {
1951                                         sanitize_truncated_recipient(TheMessage->cm_fields[k]);
1952                                 }
1953                                 if (k == 'A') {
1954                                         if (do_proto) cprintf("%s=%s\n",
1955                                                               msgkeys[k],
1956                                                               display_name);
1957                                 }
1958                                 else if ((k == 'F') && (suppress_f)) {
1959                                         /* do nothing */
1960                                 }
1961                                 /* Masquerade display name if needed */
1962                                 else {
1963                                         if (do_proto) cprintf("%s=%s\n",
1964                                                               msgkeys[k],
1965                                                               TheMessage->cm_fields[k]
1966                                                 );
1967                                 }
1968                         }
1969                 }
1970         }
1971
1972 }
1973
1974 void OutputRFC822MsgHeaders(
1975         struct CtdlMessage *TheMessage,
1976         int flags,              /* should the bessage be exported clean */
1977         const char *nl,
1978         char *mid, long sizeof_mid,
1979         char *suser, long sizeof_suser,
1980         char *luser, long sizeof_luser,
1981         char *fuser, long sizeof_fuser,
1982         char *snode, long sizeof_snode)
1983 {
1984         char datestamp[100];
1985         int subject_found = 0;
1986         char buf[SIZ];
1987         int i, j, k;
1988         char *mptr = NULL;
1989         char *mpptr = NULL;
1990         char *hptr;
1991
1992         for (i = 0; i < 256; ++i) {
1993                 if (TheMessage->cm_fields[i]) {
1994                         mptr = mpptr = TheMessage->cm_fields[i];
1995
1996                         if (i == 'A') {
1997                                 safestrncpy(luser, mptr, sizeof_luser);
1998                                 safestrncpy(suser, mptr, sizeof_suser);
1999                         }
2000                         else if (i == 'Y') {
2001                                 if ((flags & QP_EADDR) != 0) {
2002                                         mptr = qp_encode_email_addrs(mptr);
2003                                 }
2004                                 sanitize_truncated_recipient(mptr);
2005                                 cprintf("CC: %s%s", mptr, nl);
2006                         }
2007                         else if (i == 'P') {
2008                                 cprintf("Return-Path: %s%s", mptr, nl);
2009                         }
2010                         else if (i == 'L') {
2011                                 cprintf("List-ID: %s%s", mptr, nl);
2012                         }
2013                         else if (i == 'V') {
2014                                 if ((flags & QP_EADDR) != 0)
2015                                         mptr = qp_encode_email_addrs(mptr);
2016                                 hptr = mptr;
2017                                 while ((*hptr != '\0') && isspace(*hptr))
2018                                         hptr ++;
2019                                 if (!IsEmptyStr(hptr))
2020                                         cprintf("Envelope-To: %s%s", hptr, nl);
2021                         }
2022                         else if (i == 'U') {
2023                                 cprintf("Subject: %s%s", mptr, nl);
2024                                 subject_found = 1;
2025                         }
2026                         else if (i == 'I')
2027                                 safestrncpy(mid, mptr, sizeof_mid); /// TODO: detect @ here and copy @nodename in if not found.
2028                         else if (i == 'F')
2029                                 safestrncpy(fuser, mptr, sizeof_fuser);
2030                         /* else if (i == 'O')
2031                            cprintf("X-Citadel-Room: %s%s",
2032                            mptr, nl); */
2033                         else if (i == 'N')
2034                                 safestrncpy(snode, mptr, sizeof_snode);
2035                         else if (i == 'R')
2036                         {
2037                                 if (haschar(mptr, '@') == 0)
2038                                 {
2039                                         sanitize_truncated_recipient(mptr);
2040                                         cprintf("To: %s@%s", mptr, config.c_fqdn);
2041                                         cprintf("%s", nl);
2042                                 }
2043                                 else
2044                                 {
2045                                         if ((flags & QP_EADDR) != 0) {
2046                                                 mptr = qp_encode_email_addrs(mptr);
2047                                         }
2048                                         sanitize_truncated_recipient(mptr);
2049                                         cprintf("To: %s", mptr);
2050                                         cprintf("%s", nl);
2051                                 }
2052                         }
2053                         else if (i == 'T') {
2054                                 datestring(datestamp, sizeof datestamp,
2055                                            atol(mptr), DATESTRING_RFC822);
2056                                 cprintf("Date: %s%s", datestamp, nl);
2057                         }
2058                         else if (i == 'W') {
2059                                 cprintf("References: ");
2060                                 k = num_tokens(mptr, '|');
2061                                 for (j=0; j<k; ++j) {
2062                                         extract_token(buf, mptr, j, '|', sizeof buf);
2063                                         cprintf("<%s>", buf);
2064                                         if (j == (k-1)) {
2065                                                 cprintf("%s", nl);
2066                                         }
2067                                         else {
2068                                                 cprintf(" ");
2069                                         }
2070                                 }
2071                         }
2072                         else if (i == 'K') {
2073                                 hptr = mptr;
2074                                 while ((*hptr != '\0') && isspace(*hptr))
2075                                         hptr ++;
2076                                 if (!IsEmptyStr(hptr))
2077                                         cprintf("Reply-To: %s%s", mptr, nl);
2078                         }
2079                         if (mptr != mpptr)
2080                                 free (mptr);
2081                 }
2082         }
2083         if (subject_found == 0) {
2084                 cprintf("Subject: (no subject)%s", nl);
2085         }
2086 }
2087
2088
2089 void Dump_RFC822HeadersBody(
2090         struct CtdlMessage *TheMessage,
2091         int headers_only,       /* eschew the message body? */
2092         int flags,              /* should the bessage be exported clean? */
2093
2094         const char *nl)
2095 {
2096         cit_uint8_t prev_ch;
2097         int eoh = 0;
2098         const char *StartOfText = StrBufNOTNULL;
2099         char outbuf[1024];
2100         int outlen = 0;
2101         int nllen = strlen(nl);
2102         char *mptr;
2103
2104         mptr = TheMessage->cm_fields['M'];
2105
2106
2107         prev_ch = '\0';
2108         while (*mptr != '\0') {
2109                 if (*mptr == '\r') {
2110                         /* do nothing */
2111                 }
2112                 else {
2113                         if ((!eoh) &&
2114                             (*mptr == '\n'))
2115                         {
2116                                 eoh = (*(mptr+1) == '\r') && (*(mptr+2) == '\n');
2117                                 if (!eoh)
2118                                         eoh = *(mptr+1) == '\n';
2119                                 if (eoh)
2120                                 {
2121                                         StartOfText = mptr;
2122                                         StartOfText = strchr(StartOfText, '\n');
2123                                         StartOfText = strchr(StartOfText, '\n');
2124                                 }
2125                         }
2126                         if (((headers_only == HEADERS_NONE) && (mptr >= StartOfText)) ||
2127                             ((headers_only == HEADERS_ONLY) && (mptr < StartOfText)) ||
2128                             ((headers_only != HEADERS_NONE) &&
2129                              (headers_only != HEADERS_ONLY))
2130                                 ) {
2131                                 if (*mptr == '\n') {
2132                                         memcpy(&outbuf[outlen], nl, nllen);
2133                                         outlen += nllen;
2134                                         outbuf[outlen] = '\0';
2135                                 }
2136                                 else {
2137                                         outbuf[outlen++] = *mptr;
2138                                 }
2139                         }
2140                 }
2141                 if (flags & ESC_DOT)
2142                 {
2143                         if ((prev_ch == '\n') &&
2144                             (*mptr == '.') &&
2145                             ((*(mptr+1) == '\r') || (*(mptr+1) == '\n')))
2146                         {
2147                                 outbuf[outlen++] = '.';
2148                         }
2149                         prev_ch = *mptr;
2150                 }
2151                 ++mptr;
2152                 if (outlen > 1000) {
2153                         if (client_write(outbuf, outlen) == -1)
2154                         {
2155                                 syslog(LOG_ERR, "Dump_RFC822HeadersBody(): aborting due to write failure.\n");
2156                                 return;
2157                         }
2158                         outlen = 0;
2159                 }
2160         }
2161         if (outlen > 0) {
2162                 client_write(outbuf, outlen);
2163                 outlen = 0;
2164         }
2165 }
2166
2167
2168
2169 /* If the format type on disk is 1 (fixed-format), then we want
2170  * everything to be output completely literally ... regardless of
2171  * what message transfer format is in use.
2172  */
2173 void DumpFormatFixed(
2174         struct CtdlMessage *TheMessage,
2175         int mode,               /* how would you like that message? */
2176         const char *nl)
2177 {
2178         cit_uint8_t ch;
2179         char buf[SIZ];
2180         int buflen;
2181         int xlline = 0;
2182         int nllen = strlen (nl);
2183         char *mptr;
2184
2185         mptr = TheMessage->cm_fields['M'];
2186
2187         if (mode == MT_MIME) {
2188                 cprintf("Content-type: text/plain\n\n");
2189         }
2190         *buf = '\0';
2191         buflen = 0;
2192         while (ch = *mptr++, ch > 0) {
2193                 if (ch == '\n')
2194                         ch = '\r';
2195
2196                 if ((buflen > 250) && (!xlline)){
2197                         int tbuflen;
2198                         tbuflen = buflen;
2199
2200                         while ((buflen > 0) &&
2201                                (!isspace(buf[buflen])))
2202                                 buflen --;
2203                         if (buflen == 0) {
2204                                 xlline = 1;
2205                         }
2206                         else {
2207                                 mptr -= tbuflen - buflen;
2208                                 buf[buflen] = '\0';
2209                                 ch = '\r';
2210                         }
2211                 }
2212                 /* if we reach the outer bounds of our buffer,
2213                    abort without respect what whe purge. */
2214                 if (xlline &&
2215                     ((isspace(ch)) ||
2216                      (buflen > SIZ - nllen - 2)))
2217                         ch = '\r';
2218
2219                 if (ch == '\r') {
2220                         memcpy (&buf[buflen], nl, nllen);
2221                         buflen += nllen;
2222                         buf[buflen] = '\0';
2223
2224                         if (client_write(buf, buflen) == -1)
2225                         {
2226                                 syslog(LOG_ERR, "DumpFormatFixed(): aborting due to write failure.\n");
2227                                 return;
2228                         }
2229                         *buf = '\0';
2230                         buflen = 0;
2231                         xlline = 0;
2232                 } else {
2233                         buf[buflen] = ch;
2234                         buflen++;
2235                 }
2236         }
2237         buf[buflen] = '\0';
2238         if (!IsEmptyStr(buf))
2239                 cprintf("%s%s", buf, nl);
2240 }
2241
2242 /*
2243  * Get a message off disk.  (returns om_* values found in msgbase.h)
2244  */
2245 int CtdlOutputPreLoadedMsg(
2246                 struct CtdlMessage *TheMessage,
2247                 int mode,               /* how would you like that message? */
2248                 int headers_only,       /* eschew the message body? */
2249                 int do_proto,           /* do Citadel protocol responses? */
2250                 int crlf,               /* Use CRLF newlines instead of LF? */
2251                 int flags               /* should the bessage be exported clean? */
2252 ) {
2253         int i;
2254         char *mptr = NULL;
2255         const char *nl; /* newline string */
2256         struct ma_info ma;
2257
2258         /* Buffers needed for RFC822 translation.  These are all filled
2259          * using functions that are bounds-checked, and therefore we can
2260          * make them substantially smaller than SIZ.
2261          */
2262         char suser[100];
2263         char luser[100];
2264         char fuser[100];
2265         char snode[100];
2266         char mid[100];
2267
2268         syslog(LOG_DEBUG, "CtdlOutputPreLoadedMsg(TheMessage=%s, %d, %d, %d, %d\n",
2269                 ((TheMessage == NULL) ? "NULL" : "not null"),
2270                 mode, headers_only, do_proto, crlf);
2271
2272         strcpy(mid, "unknown");
2273         nl = (crlf ? "\r\n" : "\n");
2274
2275         if (!is_valid_message(TheMessage)) {
2276                 syslog(LOG_ERR,
2277                         "ERROR: invalid preloaded message for output\n");
2278                 cit_backtrace ();
2279                 return(om_no_such_msg);
2280         }
2281
2282         /* Suppress envelope recipients if required to avoid disclosing BCC addresses.
2283          * Pad it with spaces in order to avoid changing the RFC822 length of the message.
2284          */
2285         if ( (flags & SUPPRESS_ENV_TO) && (TheMessage->cm_fields['V'] != NULL) ) {
2286                 memset(TheMessage->cm_fields['V'], ' ', strlen(TheMessage->cm_fields['V']));
2287         }
2288
2289         /* Are we downloading a MIME component? */
2290         if (mode == MT_DOWNLOAD) {
2291                 if (TheMessage->cm_format_type != FMT_RFC822) {
2292                         if (do_proto)
2293                                 cprintf("%d This is not a MIME message.\n",
2294                                 ERROR + ILLEGAL_VALUE);
2295                 } else if (CC->download_fp != NULL) {
2296                         if (do_proto) cprintf(
2297                                 "%d You already have a download open.\n",
2298                                 ERROR + RESOURCE_BUSY);
2299                 } else {
2300                         /* Parse the message text component */
2301                         mptr = TheMessage->cm_fields['M'];
2302                         mime_parser(mptr, NULL, *mime_download, NULL, NULL, NULL, 0);
2303                         /* If there's no file open by this time, the requested
2304                          * section wasn't found, so print an error
2305                          */
2306                         if (CC->download_fp == NULL) {
2307                                 if (do_proto) cprintf(
2308                                         "%d Section %s not found.\n",
2309                                         ERROR + FILE_NOT_FOUND,
2310                                         CC->download_desired_section);
2311                         }
2312                 }
2313                 return((CC->download_fp != NULL) ? om_ok : om_mime_error);
2314         }
2315
2316         /* MT_SPEW_SECTION is like MT_DOWNLOAD except it outputs the whole MIME part
2317          * in a single server operation instead of opening a download file.
2318          */
2319         if (mode == MT_SPEW_SECTION) {
2320                 if (TheMessage->cm_format_type != FMT_RFC822) {
2321                         if (do_proto)
2322                                 cprintf("%d This is not a MIME message.\n",
2323                                 ERROR + ILLEGAL_VALUE);
2324                 } else {
2325                         /* Parse the message text component */
2326                         int found_it = 0;
2327
2328                         mptr = TheMessage->cm_fields['M'];
2329                         mime_parser(mptr, NULL, *mime_spew_section, NULL, NULL, (void *)&found_it, 0);
2330                         /* If section wasn't found, print an error
2331                          */
2332                         if (!found_it) {
2333                                 if (do_proto) cprintf(
2334                                         "%d Section %s not found.\n",
2335                                         ERROR + FILE_NOT_FOUND,
2336                                         CC->download_desired_section);
2337                         }
2338                 }
2339                 return((CC->download_fp != NULL) ? om_ok : om_mime_error);
2340         }
2341
2342         /* now for the user-mode message reading loops */
2343         if (do_proto) cprintf("%d msg:\n", LISTING_FOLLOWS);
2344
2345         /* Does the caller want to skip the headers? */
2346         if (headers_only == HEADERS_NONE) goto START_TEXT;
2347
2348         /* Tell the client which format type we're using. */
2349         if ( (mode == MT_CITADEL) && (do_proto) ) {
2350                 cprintf("type=%d\n", TheMessage->cm_format_type);
2351         }
2352
2353         /* nhdr=yes means that we're only displaying headers, no body */
2354         if ( (TheMessage->cm_anon_type == MES_ANONONLY)
2355            && ((mode == MT_CITADEL) || (mode == MT_MIME))
2356            && (do_proto)
2357            ) {
2358                 cprintf("nhdr=yes\n");
2359         }
2360
2361         if ((mode == MT_CITADEL) || (mode == MT_MIME))
2362                 OutputCtdlMsgHeaders(TheMessage, do_proto);
2363
2364
2365         /* begin header processing loop for RFC822 transfer format */
2366         strcpy(suser, "");
2367         strcpy(luser, "");
2368         strcpy(fuser, "");
2369         strcpy(snode, NODENAME);
2370         if (mode == MT_RFC822)
2371                 OutputRFC822MsgHeaders(
2372                         TheMessage,
2373                         flags,
2374                         nl,
2375                         mid, sizeof(mid),
2376                         suser, sizeof(suser),
2377                         luser, sizeof(luser),
2378                         fuser, sizeof(fuser),
2379                         snode, sizeof(snode)
2380                         );
2381
2382
2383         for (i=0; !IsEmptyStr(&suser[i]); ++i) {
2384                 suser[i] = tolower(suser[i]);
2385                 if (!isalnum(suser[i])) suser[i]='_';
2386         }
2387
2388         if (mode == MT_RFC822) {
2389                 if (!strcasecmp(snode, NODENAME)) {
2390                         safestrncpy(snode, FQDN, sizeof snode);
2391                 }
2392
2393                 /* Construct a fun message id */
2394                 cprintf("Message-ID: <%s", mid);/// todo: this possibly breaks threadding mails.
2395                 if (strchr(mid, '@')==NULL) {
2396                         cprintf("@%s", snode);
2397                 }
2398                 cprintf(">%s", nl);
2399
2400                 if (!is_room_aide() && (TheMessage->cm_anon_type == MES_ANONONLY)) {
2401                         cprintf("From: \"----\" <x@x.org>%s", nl);
2402                 }
2403                 else if (!is_room_aide() && (TheMessage->cm_anon_type == MES_ANONOPT)) {
2404                         cprintf("From: \"anonymous\" <x@x.org>%s", nl);
2405                 }
2406                 else if (!IsEmptyStr(fuser)) {
2407                         cprintf("From: \"%s\" <%s>%s", luser, fuser, nl);
2408                 }
2409                 else {
2410                         cprintf("From: \"%s\" <%s@%s>%s", luser, suser, snode, nl);
2411                 }
2412
2413                 /* Blank line signifying RFC822 end-of-headers */
2414                 if (TheMessage->cm_format_type != FMT_RFC822) {
2415                         cprintf("%s", nl);
2416                 }
2417         }
2418
2419         /* end header processing loop ... at this point, we're in the text */
2420 START_TEXT:
2421         if (headers_only == HEADERS_FAST) goto DONE;
2422
2423         /* Tell the client about the MIME parts in this message */
2424         if (TheMessage->cm_format_type == FMT_RFC822) {
2425                 if ( (mode == MT_CITADEL) || (mode == MT_MIME) ) {
2426                         mptr = TheMessage->cm_fields['M'];
2427                         memset(&ma, 0, sizeof(struct ma_info));
2428                         mime_parser(mptr, NULL,
2429                                 (do_proto ? *list_this_part : NULL),
2430                                 (do_proto ? *list_this_pref : NULL),
2431                                 (do_proto ? *list_this_suff : NULL),
2432                                 (void *)&ma, 1);
2433                 }
2434                 else if (mode == MT_RFC822) {   /* unparsed RFC822 dump */
2435                         Dump_RFC822HeadersBody(
2436                                 TheMessage,
2437                                 headers_only,
2438                                 flags,
2439                                 nl);
2440                         goto DONE;
2441                 }
2442         }
2443
2444         if (headers_only == HEADERS_ONLY) {
2445                 goto DONE;
2446         }
2447
2448         /* signify start of msg text */
2449         if ( (mode == MT_CITADEL) || (mode == MT_MIME) ) {
2450                 if (do_proto) cprintf("text\n");
2451         }
2452
2453         if (TheMessage->cm_format_type == FMT_FIXED)
2454                 DumpFormatFixed(
2455                         TheMessage,
2456                         mode,           /* how would you like that message? */
2457                         nl);
2458
2459         /* If the message on disk is format 0 (Citadel vari-format), we
2460          * output using the formatter at 80 columns.  This is the final output
2461          * form if the transfer format is RFC822, but if the transfer format
2462          * is Citadel proprietary, it'll still work, because the indentation
2463          * for new paragraphs is correct and the client will reformat the
2464          * message to the reader's screen width.
2465          */
2466         if (TheMessage->cm_format_type == FMT_CITADEL) {
2467                 mptr = TheMessage->cm_fields['M'];
2468
2469                 if (mode == MT_MIME) {
2470                         cprintf("Content-type: text/x-citadel-variformat\n\n");
2471                 }
2472                 memfmout(mptr, nl);
2473         }
2474
2475         /* If the message on disk is format 4 (MIME), we've gotta hand it
2476          * off to the MIME parser.  The client has already been told that
2477          * this message is format 1 (fixed format), so the callback function
2478          * we use will display those parts as-is.
2479          */
2480         if (TheMessage->cm_format_type == FMT_RFC822) {
2481                 memset(&ma, 0, sizeof(struct ma_info));
2482
2483                 if (mode == MT_MIME) {
2484                         ma.use_fo_hooks = 0;
2485                         strcpy(ma.chosen_part, "1");
2486                         ma.chosen_pref = 9999;
2487                         ma.dont_decode = CC->msg4_dont_decode;
2488                         mime_parser(mptr, NULL,
2489                                 *choose_preferred, *fixed_output_pre,
2490                                 *fixed_output_post, (void *)&ma, 1);
2491                         mime_parser(mptr, NULL,
2492                                 *output_preferred, NULL, NULL, (void *)&ma, 1);
2493                 }
2494                 else {
2495                         ma.use_fo_hooks = 1;
2496                         mime_parser(mptr, NULL,
2497                                 *fixed_output, *fixed_output_pre,
2498                                 *fixed_output_post, (void *)&ma, 0);
2499                 }
2500
2501         }
2502
2503 DONE:   /* now we're done */
2504         if (do_proto) cprintf("000\n");
2505         return(om_ok);
2506 }
2507
2508
2509 /*
2510  * display a message (mode 0 - Citadel proprietary)
2511  */
2512 void cmd_msg0(char *cmdbuf)
2513 {
2514         long msgid;
2515         int headers_only = HEADERS_ALL;
2516
2517         msgid = extract_long(cmdbuf, 0);
2518         headers_only = extract_int(cmdbuf, 1);
2519
2520         CtdlOutputMsg(msgid, MT_CITADEL, headers_only, 1, 0, NULL, 0);
2521         return;
2522 }
2523
2524
2525 /*
2526  * display a message (mode 2 - RFC822)
2527  */
2528 void cmd_msg2(char *cmdbuf)
2529 {
2530         long msgid;
2531         int headers_only = HEADERS_ALL;
2532
2533         msgid = extract_long(cmdbuf, 0);
2534         headers_only = extract_int(cmdbuf, 1);
2535
2536         CtdlOutputMsg(msgid, MT_RFC822, headers_only, 1, 1, NULL, 0);
2537 }
2538
2539
2540
2541 /*
2542  * display a message (mode 3 - IGnet raw format - internal programs only)
2543  */
2544 void cmd_msg3(char *cmdbuf)
2545 {
2546         long msgnum;
2547         struct CtdlMessage *msg = NULL;
2548         struct ser_ret smr;
2549
2550         if (CC->internal_pgm == 0) {
2551                 cprintf("%d This command is for internal programs only.\n",
2552                         ERROR + HIGHER_ACCESS_REQUIRED);
2553                 return;
2554         }
2555
2556         msgnum = extract_long(cmdbuf, 0);
2557         msg = CtdlFetchMessage(msgnum, 1);
2558         if (msg == NULL) {
2559                 cprintf("%d Message %ld not found.\n",
2560                         ERROR + MESSAGE_NOT_FOUND, msgnum);
2561                 return;
2562         }
2563
2564         serialize_message(&smr, msg);
2565         CtdlFreeMessage(msg);
2566
2567         if (smr.len == 0) {
2568                 cprintf("%d Unable to serialize message\n",
2569                         ERROR + INTERNAL_ERROR);
2570                 return;
2571         }
2572
2573         cprintf("%d %ld\n", BINARY_FOLLOWS, (long)smr.len);
2574         client_write((char *)smr.ser, (int)smr.len);
2575         free(smr.ser);
2576 }
2577
2578
2579
2580 /*
2581  * Display a message using MIME content types
2582  */
2583 void cmd_msg4(char *cmdbuf)
2584 {
2585         long msgid;
2586         char section[64];
2587
2588         msgid = extract_long(cmdbuf, 0);
2589         extract_token(section, cmdbuf, 1, '|', sizeof section);
2590         CtdlOutputMsg(msgid, MT_MIME, 0, 1, 0, (section[0] ? section : NULL) , 0);
2591 }
2592
2593
2594
2595 /*
2596  * Client tells us its preferred message format(s)
2597  */
2598 void cmd_msgp(char *cmdbuf)
2599 {
2600         if (!strcasecmp(cmdbuf, "dont_decode")) {
2601                 CC->msg4_dont_decode = 1;
2602                 cprintf("%d MSG4 will not pre-decode messages.\n", CIT_OK);
2603         }
2604         else {
2605                 safestrncpy(CC->preferred_formats, cmdbuf, sizeof(CC->preferred_formats));
2606                 cprintf("%d Preferred MIME formats have been set.\n", CIT_OK);
2607         }
2608 }
2609
2610
2611 /*
2612  * Open a component of a MIME message as a download file
2613  */
2614 void cmd_opna(char *cmdbuf)
2615 {
2616         long msgid;
2617         char desired_section[128];
2618
2619         msgid = extract_long(cmdbuf, 0);
2620         extract_token(desired_section, cmdbuf, 1, '|', sizeof desired_section);
2621         safestrncpy(CC->download_desired_section, desired_section,
2622                 sizeof CC->download_desired_section);
2623         CtdlOutputMsg(msgid, MT_DOWNLOAD, 0, 1, 1, NULL, 0);
2624 }
2625
2626
2627 /*
2628  * Open a component of a MIME message and transmit it all at once
2629  */
2630 void cmd_dlat(char *cmdbuf)
2631 {
2632         long msgid;
2633         char desired_section[128];
2634
2635         msgid = extract_long(cmdbuf, 0);
2636         extract_token(desired_section, cmdbuf, 1, '|', sizeof desired_section);
2637         safestrncpy(CC->download_desired_section, desired_section,
2638                 sizeof CC->download_desired_section);
2639         CtdlOutputMsg(msgid, MT_SPEW_SECTION, 0, 1, 1, NULL, 0);
2640 }
2641
2642
2643 /*
2644  * Save one or more message pointers into a specified room
2645  * (Returns 0 for success, nonzero for failure)
2646  * roomname may be NULL to use the current room
2647  *
2648  * Note that the 'supplied_msg' field may be set to NULL, in which case
2649  * the message will be fetched from disk, by number, if we need to perform
2650  * replication checks.  This adds an additional database read, so if the
2651  * caller already has the message in memory then it should be supplied.  (Obviously
2652  * this mode of operation only works if we're saving a single message.)
2653  */
2654 int CtdlSaveMsgPointersInRoom(char *roomname, long newmsgidlist[], int num_newmsgs,
2655                         int do_repl_check, struct CtdlMessage *supplied_msg, int suppress_refcount_adj
2656 ) {
2657         int i, j, unique;
2658         char hold_rm[ROOMNAMELEN];
2659         struct cdbdata *cdbfr;
2660         int num_msgs;
2661         long *msglist;
2662         long highest_msg = 0L;
2663
2664         long msgid = 0;
2665         struct CtdlMessage *msg = NULL;
2666
2667         long *msgs_to_be_merged = NULL;
2668         int num_msgs_to_be_merged = 0;
2669
2670         syslog(LOG_DEBUG,
2671                 "CtdlSaveMsgPointersInRoom(room=%s, num_msgs=%d, repl=%d, suppress_rca=%d)\n",
2672                 roomname, num_newmsgs, do_repl_check, suppress_refcount_adj
2673         );
2674
2675         strcpy(hold_rm, CC->room.QRname);
2676
2677         /* Sanity checks */
2678         if (newmsgidlist == NULL) return(ERROR + INTERNAL_ERROR);
2679         if (num_newmsgs < 1) return(ERROR + INTERNAL_ERROR);
2680         if (num_newmsgs > 1) supplied_msg = NULL;
2681
2682         /* Now the regular stuff */
2683         if (CtdlGetRoomLock(&CC->room,
2684            ((roomname != NULL) ? roomname : CC->room.QRname) )
2685            != 0) {
2686                 syslog(LOG_ERR, "No such room <%s>\n", roomname);
2687                 return(ERROR + ROOM_NOT_FOUND);
2688         }
2689
2690
2691         msgs_to_be_merged = malloc(sizeof(long) * num_newmsgs);
2692         num_msgs_to_be_merged = 0;
2693
2694
2695         cdbfr = cdb_fetch(CDB_MSGLISTS, &CC->room.QRnumber, sizeof(long));
2696         if (cdbfr == NULL) {
2697                 msglist = NULL;
2698                 num_msgs = 0;
2699         } else {
2700                 msglist = (long *) cdbfr->ptr;
2701                 cdbfr->ptr = NULL;      /* CtdlSaveMsgPointerInRoom() now owns this memory */
2702                 num_msgs = cdbfr->len / sizeof(long);
2703                 cdb_free(cdbfr);
2704         }
2705
2706
2707         /* Create a list of msgid's which were supplied by the caller, but do
2708          * not already exist in the target room.  It is absolutely taboo to
2709          * have more than one reference to the same message in a room.
2710          */
2711         for (i=0; i<num_newmsgs; ++i) {
2712                 unique = 1;
2713                 if (num_msgs > 0) for (j=0; j<num_msgs; ++j) {
2714                         if (msglist[j] == newmsgidlist[i]) {
2715                                 unique = 0;
2716                         }
2717                 }
2718                 if (unique) {
2719                         msgs_to_be_merged[num_msgs_to_be_merged++] = newmsgidlist[i];
2720                 }
2721         }
2722
2723         syslog(LOG_DEBUG, "%d unique messages to be merged\n", num_msgs_to_be_merged);
2724
2725         /*
2726          * Now merge the new messages
2727          */
2728         msglist = realloc(msglist, (sizeof(long) * (num_msgs + num_msgs_to_be_merged)) );
2729         if (msglist == NULL) {
2730                 syslog(LOG_ALERT, "ERROR: can't realloc message list!\n");
2731         }
2732         memcpy(&msglist[num_msgs], msgs_to_be_merged, (sizeof(long) * num_msgs_to_be_merged) );
2733         num_msgs += num_msgs_to_be_merged;
2734
2735         /* Sort the message list, so all the msgid's are in order */
2736         num_msgs = sort_msglist(msglist, num_msgs);
2737
2738         /* Determine the highest message number */
2739         highest_msg = msglist[num_msgs - 1];
2740
2741         /* Write it back to disk. */
2742         cdb_store(CDB_MSGLISTS, &CC->room.QRnumber, (int)sizeof(long),
2743                   msglist, (int)(num_msgs * sizeof(long)));
2744
2745         /* Free up the memory we used. */
2746         free(msglist);
2747
2748         /* Update the highest-message pointer and unlock the room. */
2749         CC->room.QRhighest = highest_msg;
2750         CtdlPutRoomLock(&CC->room);
2751
2752         /* Perform replication checks if necessary */
2753         if ( (DoesThisRoomNeedEuidIndexing(&CC->room)) && (do_repl_check) ) {
2754                 syslog(LOG_DEBUG, "CtdlSaveMsgPointerInRoom() doing repl checks\n");
2755
2756                 for (i=0; i<num_msgs_to_be_merged; ++i) {
2757                         msgid = msgs_to_be_merged[i];
2758
2759                         if (supplied_msg != NULL) {
2760                                 msg = supplied_msg;
2761                         }
2762                         else {
2763                                 msg = CtdlFetchMessage(msgid, 0);
2764                         }
2765
2766                         if (msg != NULL) {
2767                                 ReplicationChecks(msg);
2768
2769                                 /* If the message has an Exclusive ID, index that... */
2770                                 if (msg->cm_fields['E'] != NULL) {
2771                                         index_message_by_euid(msg->cm_fields['E'], &CC->room, msgid);
2772                                 }
2773
2774                                 /* Free up the memory we may have allocated */
2775                                 if (msg != supplied_msg) {
2776                                         CtdlFreeMessage(msg);
2777                                 }
2778                         }
2779
2780                 }
2781         }
2782
2783         else {
2784                 syslog(LOG_DEBUG, "CtdlSaveMsgPointerInRoom() skips repl checks\n");
2785         }
2786
2787         /* Submit this room for processing by hooks */
2788         PerformRoomHooks(&CC->room);
2789
2790         /* Go back to the room we were in before we wandered here... */
2791         CtdlGetRoom(&CC->room, hold_rm);
2792
2793         /* Bump the reference count for all messages which were merged */
2794         if (!suppress_refcount_adj) {
2795                 for (i=0; i<num_msgs_to_be_merged; ++i) {
2796                         AdjRefCount(msgs_to_be_merged[i], +1);
2797                 }
2798         }
2799
2800         /* Free up memory... */
2801         if (msgs_to_be_merged != NULL) {
2802                 free(msgs_to_be_merged);
2803         }
2804
2805         /* Return success. */
2806         return (0);
2807 }
2808
2809
2810 /*
2811  * This is the same as CtdlSaveMsgPointersInRoom() but it only accepts
2812  * a single message.
2813  */
2814 int CtdlSaveMsgPointerInRoom(char *roomname, long msgid,
2815                              int do_repl_check, struct CtdlMessage *supplied_msg)
2816 {
2817         return CtdlSaveMsgPointersInRoom(roomname, &msgid, 1, do_repl_check, supplied_msg, 0);
2818 }
2819
2820
2821
2822
2823 /*
2824  * Message base operation to save a new message to the message store
2825  * (returns new message number)
2826  *
2827  * This is the back end for CtdlSubmitMsg() and should not be directly
2828  * called by server-side modules.
2829  *
2830  */
2831 long send_message(struct CtdlMessage *msg) {
2832         long newmsgid;
2833         long retval;
2834         char msgidbuf[256];
2835         struct ser_ret smr;
2836         int is_bigmsg = 0;
2837         char *holdM = NULL;
2838
2839         /* Get a new message number */
2840         newmsgid = get_new_message_number();
2841         snprintf(msgidbuf, sizeof msgidbuf, "%08lX-%08lX@%s",
2842                  (long unsigned int) time(NULL),
2843                  (long unsigned int) newmsgid,
2844                  config.c_fqdn
2845                 );
2846
2847         /* Generate an ID if we don't have one already */
2848         if (msg->cm_fields['I']==NULL) {
2849                 msg->cm_fields['I'] = strdup(msgidbuf);
2850         }
2851
2852         /* If the message is big, set its body aside for storage elsewhere */
2853         if (msg->cm_fields['M'] != NULL) {
2854                 if (strlen(msg->cm_fields['M']) > BIGMSG) {
2855                         is_bigmsg = 1;
2856                         holdM = msg->cm_fields['M'];
2857                         msg->cm_fields['M'] = NULL;
2858                 }
2859         }
2860
2861         /* Serialize our data structure for storage in the database */
2862         serialize_message(&smr, msg);
2863
2864         if (is_bigmsg) {
2865                 msg->cm_fields['M'] = holdM;
2866         }
2867
2868         if (smr.len == 0) {
2869                 cprintf("%d Unable to serialize message\n",
2870                         ERROR + INTERNAL_ERROR);
2871                 return (-1L);
2872         }
2873
2874         /* Write our little bundle of joy into the message base */
2875         if (cdb_store(CDB_MSGMAIN, &newmsgid, (int)sizeof(long),
2876                       smr.ser, smr.len) < 0) {
2877                 syslog(LOG_ERR, "Can't store message\n");
2878                 retval = 0L;
2879         } else {
2880                 if (is_bigmsg) {
2881                         cdb_store(CDB_BIGMSGS,
2882                                   &newmsgid,
2883                                   (int)sizeof(long),
2884                                   holdM,
2885                                   (strlen(holdM) + 1)
2886                                 );
2887                 }
2888                 retval = newmsgid;
2889         }
2890
2891         /* Free the memory we used for the serialized message */
2892         free(smr.ser);
2893
2894         /* Return the *local* message ID to the caller
2895          * (even if we're storing an incoming network message)
2896          */
2897         return(retval);
2898 }
2899
2900
2901
2902 /*
2903  * Serialize a struct CtdlMessage into the format used on disk and network.
2904  *
2905  * This function loads up a "struct ser_ret" (defined in server.h) which
2906  * contains the length of the serialized message and a pointer to the
2907  * serialized message in memory.  THE LATTER MUST BE FREED BY THE CALLER.
2908  */
2909 void serialize_message(struct ser_ret *ret,             /* return values */
2910                        struct CtdlMessage *msg) /* unserialized msg */
2911 {
2912         size_t wlen, fieldlen;
2913         int i;
2914         static char *forder = FORDER;
2915
2916         /*
2917          * Check for valid message format
2918          */
2919         if (is_valid_message(msg) == 0) {
2920                 syslog(LOG_ERR, "serialize_message() aborting due to invalid message\n");
2921                 ret->len = 0;
2922                 ret->ser = NULL;
2923                 return;
2924         }
2925
2926         ret->len = 3;
2927         for (i=0; i<26; ++i) if (msg->cm_fields[(int)forder[i]] != NULL)
2928                                      ret->len = ret->len +
2929                                              strlen(msg->cm_fields[(int)forder[i]]) + 2;
2930
2931         ret->ser = malloc(ret->len);
2932         if (ret->ser == NULL) {
2933                 syslog(LOG_ERR, "serialize_message() malloc(%ld) failed: %s\n",
2934                        (long)ret->len, strerror(errno));
2935                 ret->len = 0;
2936                 ret->ser = NULL;
2937                 return;
2938         }
2939
2940         ret->ser[0] = 0xFF;
2941         ret->ser[1] = msg->cm_anon_type;
2942         ret->ser[2] = msg->cm_format_type;
2943         wlen = 3;
2944
2945         for (i=0; i<26; ++i) if (msg->cm_fields[(int)forder[i]] != NULL) {
2946                         fieldlen = strlen(msg->cm_fields[(int)forder[i]]);
2947                         ret->ser[wlen++] = (char)forder[i];
2948                         safestrncpy((char *)&ret->ser[wlen], msg->cm_fields[(int)forder[i]], fieldlen+1);
2949                         wlen = wlen + fieldlen + 1;
2950                 }
2951         if (ret->len != wlen) syslog(LOG_ERR, "ERROR: len=%ld wlen=%ld\n",
2952                                      (long)ret->len, (long)wlen);
2953
2954         return;
2955 }
2956
2957
2958 /*
2959  * Serialize a struct CtdlMessage into the format used on disk and network.
2960  *
2961  * This function loads up a "struct ser_ret" (defined in server.h) which
2962  * contains the length of the serialized message and a pointer to the
2963  * serialized message in memory.  THE LATTER MUST BE FREED BY THE CALLER.
2964  */
2965 void dump_message(struct CtdlMessage *msg,      /* unserialized msg */
2966                   long Siz)                     /* how many chars ? */
2967 {
2968         int i;
2969         static char *forder = FORDER;
2970         char *buf;
2971
2972         /*
2973          * Check for valid message format
2974          */
2975         if (is_valid_message(msg) == 0) {
2976                 syslog(LOG_ERR, "dump_message() aborting due to invalid message\n");
2977                 return;
2978         }
2979
2980         buf = (char*) malloc (Siz + 1);
2981
2982         for (i=0; i<26; ++i) if (msg->cm_fields[(int)forder[i]] != NULL) {
2983                         snprintf (buf, Siz, " msg[%c] = %s ...\n", (char) forder[i],
2984                                    msg->cm_fields[(int)forder[i]]);
2985                         if (client_write (buf, strlen(buf)) == -1)
2986                         {
2987                                 syslog(LOG_ERR, "dump_message(): aborting due to write failure.\n");
2988                                 return;
2989                         }
2990                 }
2991
2992         return;
2993 }
2994
2995
2996
2997 /*
2998  * Check to see if any messages already exist in the current room which
2999  * carry the same Exclusive ID as this one.  If any are found, delete them.
3000  */
3001 void ReplicationChecks(struct CtdlMessage *msg) {
3002         long old_msgnum = (-1L);
3003
3004         if (DoesThisRoomNeedEuidIndexing(&CC->room) == 0) return;
3005
3006         syslog(LOG_DEBUG, "Performing replication checks in <%s>\n",
3007                CC->room.QRname);
3008
3009         /* No exclusive id?  Don't do anything. */
3010         if (msg == NULL) return;
3011         if (msg->cm_fields['E'] == NULL) return;
3012         if (IsEmptyStr(msg->cm_fields['E'])) return;
3013         /*syslog(LOG_DEBUG, "Exclusive ID: <%s> for room <%s>\n",
3014           msg->cm_fields['E'], CC->room.QRname);*/
3015
3016         old_msgnum = CtdlLocateMessageByEuid(msg->cm_fields['E'], &CC->room);
3017         if (old_msgnum > 0L) {
3018                 syslog(LOG_DEBUG, "ReplicationChecks() replacing message %ld\n", old_msgnum);
3019                 CtdlDeleteMessages(CC->room.QRname, &old_msgnum, 1, "");
3020         }
3021 }
3022
3023
3024
3025 /*
3026  * Save a message to disk and submit it into the delivery system.
3027  */
3028 long CtdlSubmitMsg(struct CtdlMessage *msg,     /* message to save */
3029                    struct recptypes *recps,     /* recipients (if mail) */
3030                    const char *force,           /* force a particular room? */
3031                    int flags                    /* should the message be exported clean? */
3032         )
3033 {
3034         char submit_filename[128];
3035         char generated_timestamp[32];
3036         char hold_rm[ROOMNAMELEN];
3037         char actual_rm[ROOMNAMELEN];
3038         char force_room[ROOMNAMELEN];
3039         char content_type[SIZ];                 /* We have to learn this */
3040         char recipient[SIZ];
3041         long newmsgid;
3042         const char *mptr = NULL;
3043         struct ctdluser userbuf;
3044         int a, i;
3045         struct MetaData smi;
3046         FILE *network_fp = NULL;
3047         static int seqnum = 1;
3048         struct CtdlMessage *imsg = NULL;
3049         char *instr = NULL;
3050         size_t instr_alloc = 0;
3051         struct ser_ret smr;
3052         char *hold_R, *hold_D;
3053         char *collected_addresses = NULL;
3054         struct addresses_to_be_filed *aptr = NULL;
3055         StrBuf *saved_rfc822_version = NULL;
3056         int qualified_for_journaling = 0;
3057         CitContext *CCC = MyContext();
3058         char bounce_to[1024] = "";
3059         int rv = 0;
3060
3061         syslog(LOG_DEBUG, "CtdlSubmitMsg() called\n");
3062         if (is_valid_message(msg) == 0) return(-1);     /* self check */
3063
3064         /* If this message has no timestamp, we take the liberty of
3065          * giving it one, right now.
3066          */
3067         if (msg->cm_fields['T'] == NULL) {
3068                 snprintf(generated_timestamp, sizeof generated_timestamp, "%ld", (long)time(NULL));
3069                 msg->cm_fields['T'] = strdup(generated_timestamp);
3070         }
3071
3072         /* If this message has no path, we generate one.
3073          */
3074         if (msg->cm_fields['P'] == NULL) {
3075                 if (msg->cm_fields['A'] != NULL) {
3076                         msg->cm_fields['P'] = strdup(msg->cm_fields['A']);
3077                         for (a=0; !IsEmptyStr(&msg->cm_fields['P'][a]); ++a) {
3078                                 if (isspace(msg->cm_fields['P'][a])) {
3079                                         msg->cm_fields['P'][a] = ' ';
3080                                 }
3081                         }
3082                 }
3083                 else {
3084                         msg->cm_fields['P'] = strdup("unknown");
3085                 }
3086         }
3087
3088         if (force == NULL) {
3089                 strcpy(force_room, "");
3090         }
3091         else {
3092                 strcpy(force_room, force);
3093         }
3094
3095         /* Learn about what's inside, because it's what's inside that counts */
3096         if (msg->cm_fields['M'] == NULL) {
3097                 syslog(LOG_ERR, "ERROR: attempt to save message with NULL body\n");
3098                 return(-2);
3099         }
3100
3101         switch (msg->cm_format_type) {
3102         case 0:
3103                 strcpy(content_type, "text/x-citadel-variformat");
3104                 break;
3105         case 1:
3106                 strcpy(content_type, "text/plain");
3107                 break;
3108         case 4:
3109                 strcpy(content_type, "text/plain");
3110                 mptr = bmstrcasestr(msg->cm_fields['M'], "Content-type:");
3111                 if (mptr != NULL) {
3112                         char *aptr;
3113                         safestrncpy(content_type, &mptr[13], sizeof content_type);
3114                         striplt(content_type);
3115                         aptr = content_type;
3116                         while (!IsEmptyStr(aptr)) {
3117                                 if ((*aptr == ';')
3118                                     || (*aptr == ' ')
3119                                     || (*aptr == 13)
3120                                     || (*aptr == 10)) {
3121                                         *aptr = 0;
3122                                 }
3123                                 else aptr++;
3124                         }
3125                 }
3126         }
3127
3128         /* Goto the correct room */
3129         syslog(LOG_DEBUG, "Selected room %s\n", (recps) ? CCC->room.QRname : SENTITEMS);
3130         strcpy(hold_rm, CCC->room.QRname);
3131         strcpy(actual_rm, CCC->room.QRname);
3132         if (recps != NULL) {
3133                 strcpy(actual_rm, SENTITEMS);
3134         }
3135
3136         /* If the user is a twit, move to the twit room for posting */
3137         if (TWITDETECT) {
3138                 if (CCC->user.axlevel == AxProbU) {
3139                         strcpy(hold_rm, actual_rm);
3140                         strcpy(actual_rm, config.c_twitroom);
3141                         syslog(LOG_DEBUG, "Diverting to twit room\n");
3142                 }
3143         }
3144
3145         /* ...or if this message is destined for Aide> then go there. */
3146         if (!IsEmptyStr(force_room)) {
3147                 strcpy(actual_rm, force_room);
3148         }
3149
3150         syslog(LOG_DEBUG, "Final selection: %s\n", actual_rm);
3151         if (strcasecmp(actual_rm, CCC->room.QRname)) {
3152                 /* CtdlGetRoom(&CCC->room, actual_rm); */
3153                 CtdlUserGoto(actual_rm, 0, 1, NULL, NULL);
3154         }
3155
3156         /*
3157          * If this message has no O (room) field, generate one.
3158          */
3159         if (msg->cm_fields['O'] == NULL) {
3160                 msg->cm_fields['O'] = strdup(CCC->room.QRname);
3161         }
3162
3163         /* Perform "before save" hooks (aborting if any return nonzero) */
3164         syslog(LOG_DEBUG, "Performing before-save hooks\n");
3165         if (PerformMessageHooks(msg, EVT_BEFORESAVE) > 0) return(-3);
3166
3167         /*
3168          * If this message has an Exclusive ID, and the room is replication
3169          * checking enabled, then do replication checks.
3170          */
3171         if (DoesThisRoomNeedEuidIndexing(&CCC->room)) {
3172                 ReplicationChecks(msg);
3173         }
3174
3175         /* Save it to disk */
3176         syslog(LOG_DEBUG, "Saving to disk\n");
3177         newmsgid = send_message(msg);
3178         if (newmsgid <= 0L) return(-5);
3179
3180         /* Write a supplemental message info record.  This doesn't have to
3181          * be a critical section because nobody else knows about this message
3182          * yet.
3183          */
3184         syslog(LOG_DEBUG, "Creating MetaData record\n");
3185         memset(&smi, 0, sizeof(struct MetaData));
3186         smi.meta_msgnum = newmsgid;
3187         smi.meta_refcount = 0;
3188         safestrncpy(smi.meta_content_type, content_type,
3189                     sizeof smi.meta_content_type);
3190
3191         /*
3192          * Measure how big this message will be when rendered as RFC822.
3193          * We do this for two reasons:
3194          * 1. We need the RFC822 length for the new metadata record, so the
3195          *    POP and IMAP services don't have to calculate message lengths
3196          *    while the user is waiting (multiplied by potentially hundreds
3197          *    or thousands of messages).
3198          * 2. If journaling is enabled, we will need an RFC822 version of the
3199          *    message to attach to the journalized copy.
3200          */
3201         if (CCC->redirect_buffer != NULL) {
3202                 syslog(LOG_ALERT, "CCC->redirect_buffer is not NULL during message submission!\n");
3203                 abort();
3204         }
3205         CCC->redirect_buffer = NewStrBufPlain(NULL, SIZ);
3206         CtdlOutputPreLoadedMsg(msg, MT_RFC822, HEADERS_ALL, 0, 1, QP_EADDR);
3207         smi.meta_rfc822_length = StrLength(CCC->redirect_buffer);
3208         saved_rfc822_version = CCC->redirect_buffer;
3209         CCC->redirect_buffer = NULL;
3210
3211         PutMetaData(&smi);
3212
3213         /* Now figure out where to store the pointers */
3214         syslog(LOG_DEBUG, "Storing pointers\n");
3215
3216         /* If this is being done by the networker delivering a private
3217          * message, we want to BYPASS saving the sender's copy (because there
3218          * is no local sender; it would otherwise go to the Trashcan).
3219          */
3220         if ((!CCC->internal_pgm) || (recps == NULL)) {
3221                 if (CtdlSaveMsgPointerInRoom(actual_rm, newmsgid, 1, msg) != 0) {
3222                         syslog(LOG_ERR, "ERROR saving message pointer!\n");
3223                         CtdlSaveMsgPointerInRoom(config.c_aideroom, newmsgid, 0, msg);
3224                 }
3225         }
3226
3227         /* For internet mail, drop a copy in the outbound queue room */
3228         if ((recps != NULL) && (recps->num_internet > 0)) {
3229                 CtdlSaveMsgPointerInRoom(SMTP_SPOOLOUT_ROOM, newmsgid, 0, msg);
3230         }
3231
3232         /* If other rooms are specified, drop them there too. */
3233         if ((recps != NULL) && (recps->num_room > 0))
3234                 for (i=0; i<num_tokens(recps->recp_room, '|'); ++i) {
3235                         extract_token(recipient, recps->recp_room, i,
3236                                       '|', sizeof recipient);
3237                         syslog(LOG_DEBUG, "Delivering to room <%s>\n", recipient);///// xxxx
3238                         CtdlSaveMsgPointerInRoom(recipient, newmsgid, 0, msg);
3239                 }
3240
3241         /* Bump this user's messages posted counter. */
3242         syslog(LOG_DEBUG, "Updating user\n");
3243         CtdlGetUserLock(&CCC->user, CCC->curr_user);
3244         CCC->user.posted = CCC->user.posted + 1;
3245         CtdlPutUserLock(&CCC->user);
3246
3247         /* Decide where bounces need to be delivered */
3248         if ((recps != NULL) && (recps->bounce_to != NULL)) {
3249                 safestrncpy(bounce_to, recps->bounce_to, sizeof bounce_to);
3250         }
3251         else if (CCC->logged_in) {
3252                 snprintf(bounce_to, sizeof bounce_to, "%s@%s", CCC->user.fullname, config.c_nodename);
3253         }
3254         else {
3255                 snprintf(bounce_to, sizeof bounce_to, "%s@%s", msg->cm_fields['A'], msg->cm_fields['N']);
3256         }
3257
3258         /* If this is private, local mail, make a copy in the
3259          * recipient's mailbox and bump the reference count.
3260          */
3261         if ((recps != NULL) && (recps->num_local > 0))
3262                 for (i=0; i<num_tokens(recps->recp_local, '|'); ++i) {
3263                         extract_token(recipient, recps->recp_local, i,
3264                                       '|', sizeof recipient);
3265                         syslog(LOG_DEBUG, "Delivering private local mail to <%s>\n",
3266                                recipient);
3267                         if (CtdlGetUser(&userbuf, recipient) == 0) {
3268                                 CtdlMailboxName(actual_rm, sizeof actual_rm, &userbuf, MAILROOM);
3269                                 CtdlSaveMsgPointerInRoom(actual_rm, newmsgid, 0, msg);
3270                                 CtdlBumpNewMailCounter(userbuf.usernum);
3271                                 if (!IsEmptyStr(config.c_funambol_host) || !IsEmptyStr(config.c_pager_program)) {
3272                                         /* Generate a instruction message for the Funambol notification
3273                                          * server, in the same style as the SMTP queue
3274                                          */
3275                                         instr_alloc = 1024;
3276                                         instr = malloc(instr_alloc);
3277                                         snprintf(instr, instr_alloc,
3278                                                  "Content-type: %s\n\nmsgid|%ld\nsubmitted|%ld\n"
3279                                                  "bounceto|%s\n",
3280                                                  SPOOLMIME, newmsgid, (long)time(NULL),
3281                                                  bounce_to
3282                                                 );
3283
3284                                         imsg = malloc(sizeof(struct CtdlMessage));
3285                                         memset(imsg, 0, sizeof(struct CtdlMessage));
3286                                         imsg->cm_magic = CTDLMESSAGE_MAGIC;
3287                                         imsg->cm_anon_type = MES_NORMAL;
3288                                         imsg->cm_format_type = FMT_RFC822;
3289                                         imsg->cm_fields['U'] = strdup("QMSG");
3290                                         imsg->cm_fields['A'] = strdup("Citadel");
3291                                         imsg->cm_fields['J'] = strdup("do not journal");
3292                                         imsg->cm_fields['M'] = instr;   /* imsg owns this memory now */
3293                                         imsg->cm_fields['2'] = strdup(recipient);
3294                                         CtdlSubmitMsg(imsg, NULL, FNBL_QUEUE_ROOM, 0);
3295                                         CtdlFreeMessage(imsg);
3296                                 }
3297                         }
3298                         else {
3299                                 syslog(LOG_DEBUG, "No user <%s>\n", recipient);
3300                                 CtdlSaveMsgPointerInRoom(config.c_aideroom, newmsgid, 0, msg);
3301                         }
3302                 }
3303
3304         /* Perform "after save" hooks */
3305         syslog(LOG_DEBUG, "Performing after-save hooks\n");
3306         if (msg->cm_fields['3'] != NULL) free(msg->cm_fields['3']);
3307         msg->cm_fields['3'] = malloc(20);
3308         snprintf(msg->cm_fields['3'], 20, "%ld", newmsgid);
3309         PerformMessageHooks(msg, EVT_AFTERSAVE);
3310         free(msg->cm_fields['3']);
3311         msg->cm_fields['3'] = NULL;
3312
3313         /* For IGnet mail, we have to save a new copy into the spooler for
3314          * each recipient, with the R and D fields set to the recipient and
3315          * destination-node.  This has two ugly side effects: all other
3316          * recipients end up being unlisted in this recipient's copy of the
3317          * message, and it has to deliver multiple messages to the same
3318          * node.  We'll revisit this again in a year or so when everyone has
3319          * a network spool receiver that can handle the new style messages.
3320          */
3321         if ((recps != NULL) && (recps->num_ignet > 0))
3322                 for (i=0; i<num_tokens(recps->recp_ignet, '|'); ++i) {
3323                         extract_token(recipient, recps->recp_ignet, i,
3324                                       '|', sizeof recipient);
3325
3326                         hold_R = msg->cm_fields['R'];
3327                         hold_D = msg->cm_fields['D'];
3328                         msg->cm_fields['R'] = malloc(SIZ);
3329                         msg->cm_fields['D'] = malloc(128);
3330                         extract_token(msg->cm_fields['R'], recipient, 0, '@', SIZ);
3331                         extract_token(msg->cm_fields['D'], recipient, 1, '@', 128);
3332
3333                         serialize_message(&smr, msg);
3334                         if (smr.len > 0) {
3335                                 snprintf(submit_filename, sizeof submit_filename,
3336                                          "%s/netmail.%04lx.%04x.%04x",
3337                                          ctdl_netin_dir,
3338                                          (long) getpid(), CCC->cs_pid, ++seqnum);
3339                                 network_fp = fopen(submit_filename, "wb+");
3340                                 if (network_fp != NULL) {
3341                                         rv = fwrite(smr.ser, smr.len, 1, network_fp);
3342                                         if (rv == -1) {
3343                                                 syslog(LOG_EMERG, "CtdlSubmitMsg(): Couldn't write network spool file: %s\n",
3344                                                        strerror(errno));
3345                                         }
3346                                         fclose(network_fp);
3347                                 }
3348                                 free(smr.ser);
3349                         }
3350
3351                         free(msg->cm_fields['R']);
3352                         free(msg->cm_fields['D']);
3353                         msg->cm_fields['R'] = hold_R;
3354                         msg->cm_fields['D'] = hold_D;
3355                 }
3356
3357         /* Go back to the room we started from */
3358         syslog(LOG_DEBUG, "Returning to original room %s\n", hold_rm);
3359         if (strcasecmp(hold_rm, CCC->room.QRname))
3360                 CtdlUserGoto(hold_rm, 0, 1, NULL, NULL);
3361
3362         /* For internet mail, generate delivery instructions.
3363          * Yes, this is recursive.  Deal with it.  Infinite recursion does
3364          * not happen because the delivery instructions message does not
3365          * contain a recipient.
3366          */
3367         if ((recps != NULL) && (recps->num_internet > 0)) {
3368                 StrBuf *SpoolMsg = NewStrBuf();
3369                 long nTokens;
3370
3371                 syslog(LOG_DEBUG, "Generating delivery instructions\n");
3372
3373                 StrBufPrintf(SpoolMsg,
3374                              "Content-type: "SPOOLMIME"\n"
3375                              "\n"
3376                              "msgid|%ld\n"
3377                              "submitted|%ld\n"
3378                              "bounceto|%s\n",
3379                              newmsgid,
3380                              (long)time(NULL),
3381                              bounce_to);
3382
3383                 if (recps->envelope_from != NULL) {
3384                         StrBufAppendBufPlain(SpoolMsg, HKEY("envelope_from|"), 0);
3385                         StrBufAppendBufPlain(SpoolMsg, recps->envelope_from, -1, 0);
3386                         StrBufAppendBufPlain(SpoolMsg, HKEY("\n"), 0);
3387                 }
3388                 if (recps->sending_room != NULL) {
3389                         StrBufAppendBufPlain(SpoolMsg, HKEY("source_room|"), 0);
3390                         StrBufAppendBufPlain(SpoolMsg, recps->sending_room, -1, 0);
3391                         StrBufAppendBufPlain(SpoolMsg, HKEY("\n"), 0);
3392                 }
3393
3394                 nTokens = num_tokens(recps->recp_internet, '|');
3395                 for (i = 0; i < nTokens; i++) {
3396                         long len;
3397                         len = extract_token(recipient, recps->recp_internet, i, '|', sizeof recipient);
3398                         if (len > 0) {
3399                                 StrBufAppendBufPlain(SpoolMsg, HKEY("remote|"), 0);
3400                                 StrBufAppendBufPlain(SpoolMsg, recipient, len, 0);
3401                                 StrBufAppendBufPlain(SpoolMsg, HKEY("|0||\n"), 0);
3402                         }
3403                 }
3404
3405                 imsg = malloc(sizeof(struct CtdlMessage));
3406                 memset(imsg, 0, sizeof(struct CtdlMessage));
3407                 imsg->cm_magic = CTDLMESSAGE_MAGIC;
3408                 imsg->cm_anon_type = MES_NORMAL;
3409                 imsg->cm_format_type = FMT_RFC822;
3410                 imsg->cm_fields['U'] = strdup("QMSG");
3411                 imsg->cm_fields['A'] = strdup("Citadel");
3412                 imsg->cm_fields['J'] = strdup("do not journal");
3413                 imsg->cm_fields['M'] = SmashStrBuf(&SpoolMsg);  /* imsg owns this memory now */
3414                 CtdlSubmitMsg(imsg, NULL, SMTP_SPOOLOUT_ROOM, QP_EADDR);
3415                 CtdlFreeMessage(imsg);
3416         }
3417
3418         /*
3419          * Any addresses to harvest for someone's address book?
3420          */
3421         if ( (CCC->logged_in) && (recps != NULL) ) {
3422                 collected_addresses = harvest_collected_addresses(msg);
3423         }
3424
3425         if (collected_addresses != NULL) {
3426                 aptr = (struct addresses_to_be_filed *)
3427                         malloc(sizeof(struct addresses_to_be_filed));
3428                 CtdlMailboxName(actual_rm, sizeof actual_rm,
3429                                 &CCC->user, USERCONTACTSROOM);
3430                 aptr->roomname = strdup(actual_rm);
3431                 aptr->collected_addresses = collected_addresses;
3432                 begin_critical_section(S_ATBF);
3433                 aptr->next = atbf;
3434                 atbf = aptr;
3435                 end_critical_section(S_ATBF);
3436         }
3437
3438         /*
3439          * Determine whether this message qualifies for journaling.
3440          */
3441         if (msg->cm_fields['J'] != NULL) {
3442                 qualified_for_journaling = 0;
3443         }
3444         else {
3445                 if (recps == NULL) {
3446                         qualified_for_journaling = config.c_journal_pubmsgs;
3447                 }
3448                 else if (recps->num_local + recps->num_ignet + recps->num_internet > 0) {
3449                         qualified_for_journaling = config.c_journal_email;
3450                 }
3451                 else {
3452                         qualified_for_journaling = config.c_journal_pubmsgs;
3453                 }
3454         }
3455
3456         /*
3457          * Do we have to perform journaling?  If so, hand off the saved
3458          * RFC822 version will be handed off to the journaler for background
3459          * submit.  Otherwise, we have to free the memory ourselves.
3460          */
3461         if (saved_rfc822_version != NULL) {
3462                 if (qualified_for_journaling) {
3463                         JournalBackgroundSubmit(msg, saved_rfc822_version, recps);
3464                 }
3465                 else {
3466                         FreeStrBuf(&saved_rfc822_version);
3467                 }
3468         }
3469
3470         /* Done. */
3471         return(newmsgid);
3472 }
3473
3474
3475
3476 void aide_message (char *text, char *subject)
3477 {
3478         quickie_message("Citadel",NULL,NULL,AIDEROOM,text,FMT_CITADEL,subject);
3479 }
3480
3481
3482 /*
3483  * Convenience function for generating small administrative messages.
3484  */
3485 void quickie_message(const char *from, const char *fromaddr, char *to, char *room, const char *text,
3486                      int format_type, const char *subject)
3487 {
3488         struct CtdlMessage *msg;
3489         struct recptypes *recp = NULL;
3490
3491         msg = malloc(sizeof(struct CtdlMessage));
3492         memset(msg, 0, sizeof(struct CtdlMessage));
3493         msg->cm_magic = CTDLMESSAGE_MAGIC;
3494         msg->cm_anon_type = MES_NORMAL;
3495         msg->cm_format_type = format_type;
3496
3497         if (from != NULL) {
3498                 msg->cm_fields['A'] = strdup(from);
3499         }
3500         else if (fromaddr != NULL) {
3501                 msg->cm_fields['A'] = strdup(fromaddr);
3502                 if (strchr(msg->cm_fields['A'], '@')) {
3503                         *strchr(msg->cm_fields['A'], '@') = 0;
3504                 }
3505         }
3506         else {
3507                 msg->cm_fields['A'] = strdup("Citadel");
3508         }
3509
3510         if (fromaddr != NULL) msg->cm_fields['F'] = strdup(fromaddr);
3511         if (room != NULL) msg->cm_fields['O'] = strdup(room);
3512         msg->cm_fields['N'] = strdup(NODENAME);
3513         if (to != NULL) {
3514                 msg->cm_fields['R'] = strdup(to);
3515                 recp = validate_recipients(to, NULL, 0);
3516         }
3517         if (subject != NULL) {
3518                 msg->cm_fields['U'] = strdup(subject);
3519         }
3520         msg->cm_fields['M'] = strdup(text);
3521
3522         CtdlSubmitMsg(msg, recp, room, 0);
3523         CtdlFreeMessage(msg);
3524         if (recp != NULL) free_recipients(recp);
3525 }
3526
3527
3528
3529 /*
3530  * Back end function used by CtdlMakeMessage() and similar functions
3531  */
3532 StrBuf *CtdlReadMessageBodyBuf(char *terminator,        /* token signalling EOT */
3533                                long tlen,
3534                                size_t maxlen,           /* maximum message length */
3535                                char *exist,             /* if non-null, append to it;
3536                                                            exist is ALWAYS freed  */
3537                                int crlf,                /* CRLF newlines instead of LF */
3538                                int *sock                /* socket handle or 0 for this session's client socket */
3539         )
3540 {
3541         StrBuf *Message;
3542         StrBuf *LineBuf;
3543         int flushing = 0;
3544         int finished = 0;
3545         int dotdot = 0;
3546
3547         LineBuf = NewStrBufPlain(NULL, SIZ);
3548         if (exist == NULL) {
3549                 Message = NewStrBufPlain(NULL, 4 * SIZ);
3550         }
3551         else {
3552                 Message = NewStrBufPlain(exist, -1);
3553                 free(exist);
3554         }
3555
3556         /* Do we need to change leading ".." to "." for SMTP escaping? */
3557         if ((tlen == 1) && (*terminator == '.')) {
3558                 dotdot = 1;
3559         }
3560
3561         /* read in the lines of message text one by one */
3562         do {
3563                 if (sock != NULL) {
3564                         if ((CtdlSockGetLine(sock, LineBuf, 5) < 0) ||
3565                             (*sock == -1))
3566                                 finished = 1;
3567                 }
3568                 else {
3569                         if (CtdlClientGetLine(LineBuf) < 0) finished = 1;
3570                 }
3571                 if ((StrLength(LineBuf) == tlen) &&
3572                     (!strcmp(ChrPtr(LineBuf), terminator)))
3573                         finished = 1;
3574
3575                 if ( (!flushing) && (!finished) ) {
3576                         if (crlf) {
3577                                 StrBufAppendBufPlain(LineBuf, HKEY("\r\n"), 0);
3578                         }
3579                         else {
3580                                 StrBufAppendBufPlain(LineBuf, HKEY("\n"), 0);
3581                         }
3582
3583                         /* Unescape SMTP-style input of two dots at the beginning of the line */
3584                         if ((dotdot) &&
3585                             (StrLength(LineBuf) == 2) &&
3586                             (!strcmp(ChrPtr(LineBuf), "..")))
3587                         {
3588                                 StrBufCutLeft(LineBuf, 1);
3589                         }
3590
3591                         StrBufAppendBuf(Message, LineBuf, 0);
3592                 }
3593
3594                 /* if we've hit the max msg length, flush the rest */
3595                 if (StrLength(Message) >= maxlen) flushing = 1;
3596
3597         } while (!finished);
3598         FreeStrBuf(&LineBuf);
3599         return Message;
3600 }
3601
3602 void DeleteAsyncMsg(ReadAsyncMsg **Msg)
3603 {
3604         if (*Msg == NULL)
3605                 return;
3606         FreeStrBuf(&(*Msg)->MsgBuf);
3607
3608         free(*Msg);
3609         *Msg = NULL;
3610 }
3611
3612 ReadAsyncMsg *NewAsyncMsg(const char *terminator,       /* token signalling EOT */
3613                           long tlen,
3614                           size_t maxlen,                /* maximum message length */
3615                           size_t expectlen,             /* if we expect a message, how long should it be? */
3616                           char *exist,                  /* if non-null, append to it;
3617                                                            exist is ALWAYS freed  */
3618                           long eLen,                    /* length of exist */
3619                           int crlf                      /* CRLF newlines instead of LF */
3620         )
3621 {
3622         ReadAsyncMsg *NewMsg;
3623
3624         NewMsg = (ReadAsyncMsg *)malloc(sizeof(ReadAsyncMsg));
3625         memset(NewMsg, 0, sizeof(ReadAsyncMsg));
3626
3627         if (exist == NULL) {
3628                 long len;
3629
3630                 if (expectlen == 0) {
3631                         len = 4 * SIZ;
3632                 }
3633                 else {
3634                         len = expectlen + 10;
3635                 }
3636                 NewMsg->MsgBuf = NewStrBufPlain(NULL, len);
3637         }
3638         else {
3639                 NewMsg->MsgBuf = NewStrBufPlain(exist, eLen);
3640                 free(exist);
3641         }
3642         /* Do we need to change leading ".." to "." for SMTP escaping? */
3643         if ((tlen == 1) && (*terminator == '.')) {
3644                 NewMsg->dodot = 1;
3645         }
3646
3647         NewMsg->terminator = terminator;
3648         NewMsg->tlen = tlen;
3649
3650         NewMsg->maxlen = maxlen;
3651
3652         NewMsg->crlf = crlf;
3653
3654         return NewMsg;
3655 }
3656
3657 /*
3658  * Back end function used by CtdlMakeMessage() and similar functions
3659  */
3660 eReadState CtdlReadMessageBodyAsync(AsyncIO *IO)
3661 {
3662         ReadAsyncMsg *ReadMsg;
3663         int MsgFinished = 0;
3664         eReadState Finished = eMustReadMore;
3665
3666 #ifdef BIGBAD_IODBG
3667         char fn [SIZ];
3668         FILE *fd;
3669         const char *pch = ChrPtr(IO->SendBuf.Buf);
3670         const char *pchh = IO->SendBuf.ReadWritePointer;
3671         long nbytes;
3672
3673         if (pchh == NULL)
3674                 pchh = pch;
3675
3676         nbytes = StrLength(IO->SendBuf.Buf) - (pchh - pch);
3677         snprintf(fn, SIZ, "/tmp/foolog_ev_%s.%d",
3678                  ((CitContext*)(IO->CitContext))->ServiceName,
3679                  IO->SendBuf.fd);
3680
3681         fd = fopen(fn, "a+");
3682 #endif
3683
3684         ReadMsg = IO->ReadMsg;
3685
3686         /* read in the lines of message text one by one */
3687         do {
3688                 Finished = StrBufChunkSipLine(IO->IOBuf, &IO->RecvBuf);
3689
3690                 switch (Finished) {
3691                 case eMustReadMore: /// read new from socket...
3692 #ifdef BIGBAD_IODBG
3693                         if (IO->RecvBuf.ReadWritePointer != NULL) {
3694                                 nbytes = StrLength(IO->RecvBuf.Buf) - (IO->RecvBuf.ReadWritePointer - ChrPtr(IO->RecvBuf.Buf));
3695                                 fprintf(fd, "Read; Line unfinished: %ld Bytes still in buffer [", nbytes);
3696
3697                                 fwrite(IO->RecvBuf.ReadWritePointer, nbytes, 1, fd);
3698
3699                                 fprintf(fd, "]\n");
3700                         } else {
3701                                 fprintf(fd, "BufferEmpty! \n");
3702                         }
3703                         fclose(fd);
3704 #endif
3705                         return Finished;
3706                     break;
3707                 case eBufferNotEmpty: /* shouldn't happen... */
3708                 case eReadSuccess: /// done for now...
3709                     break;
3710                 case eReadFail: /// WHUT?
3711                     ///todo: shut down!
3712                         break;
3713                 }
3714
3715
3716                 if ((StrLength(IO->IOBuf) == ReadMsg->tlen) &&
3717                     (!strcmp(ChrPtr(IO->IOBuf), ReadMsg->terminator))) {
3718                         MsgFinished = 1;
3719 #ifdef BIGBAD_IODBG
3720                         fprintf(fd, "found Terminator; Message Size: %d\n", StrLength(ReadMsg->MsgBuf));
3721 #endif
3722                 }
3723                 else if (!ReadMsg->flushing) {
3724
3725 #ifdef BIGBAD_IODBG
3726                         fprintf(fd, "Read Line: [%d][%s]\n", StrLength(IO->IOBuf), ChrPtr(IO->IOBuf));
3727 #endif
3728
3729                         /* Unescape SMTP-style input of two dots at the beginning of the line */
3730                         if ((ReadMsg->dodot) &&
3731                             (StrLength(IO->IOBuf) == 2) &&  /* TODO: do we just unescape lines with two dots or any line? */
3732                             (!strcmp(ChrPtr(IO->IOBuf), "..")))
3733                         {
3734 #ifdef BIGBAD_IODBG
3735                                 fprintf(fd, "UnEscaped!\n");
3736 #endif
3737                                 StrBufCutLeft(IO->IOBuf, 1);
3738                         }
3739
3740                         if (ReadMsg->crlf) {
3741                                 StrBufAppendBufPlain(IO->IOBuf, HKEY("\r\n"), 0);
3742                         }
3743                         else {
3744                                 StrBufAppendBufPlain(IO->IOBuf, HKEY("\n"), 0);
3745                         }
3746
3747                         StrBufAppendBuf(ReadMsg->MsgBuf, IO->IOBuf, 0);
3748                 }
3749
3750                 /* if we've hit the max msg length, flush the rest */
3751                 if (StrLength(ReadMsg->MsgBuf) >= ReadMsg->maxlen) ReadMsg->flushing = 1;
3752
3753         } while (!MsgFinished);
3754
3755 #ifdef BIGBAD_IODBG
3756         fprintf(fd, "Done with reading; %s.\n, ",
3757                 (MsgFinished)?"Message Finished": "FAILED");
3758         fclose(fd);
3759 #endif
3760         if (MsgFinished)
3761                 return eReadSuccess;
3762         else
3763                 return eAbort;
3764 }
3765
3766
3767 /*
3768  * Back end function used by CtdlMakeMessage() and similar functions
3769  */
3770 char *CtdlReadMessageBody(char *terminator,     /* token signalling EOT */
3771                           long tlen,
3772                           size_t maxlen,                /* maximum message length */
3773                           char *exist,          /* if non-null, append to it;
3774                                                    exist is ALWAYS freed  */
3775                           int crlf,             /* CRLF newlines instead of LF */
3776                           int *sock             /* socket handle or 0 for this session's client socket */
3777         )
3778 {
3779         StrBuf *Message;
3780
3781         Message = CtdlReadMessageBodyBuf(terminator,
3782                                          tlen,
3783                                          maxlen,
3784                                          exist,
3785                                          crlf,
3786                                          sock);
3787         if (Message == NULL)
3788                 return NULL;
3789         else
3790                 return SmashStrBuf(&Message);
3791 }
3792
3793
3794 /*
3795  * Build a binary message to be saved on disk.
3796  * (NOTE: if you supply 'preformatted_text', the buffer you give it
3797  * will become part of the message.  This means you are no longer
3798  * responsible for managing that memory -- it will be freed along with
3799  * the rest of the fields when CtdlFreeMessage() is called.)
3800  */
3801
3802 struct CtdlMessage *CtdlMakeMessage(
3803         struct ctdluser *author,        /* author's user structure */
3804         char *recipient,                /* NULL if it's not mail */
3805         char *recp_cc,                  /* NULL if it's not mail */
3806         char *room,                     /* room where it's going */
3807         int type,                       /* see MES_ types in header file */
3808         int format_type,                /* variformat, plain text, MIME... */
3809         char *fake_name,                /* who we're masquerading as */
3810         char *my_email,                 /* which of my email addresses to use (empty is ok) */
3811         char *subject,                  /* Subject (optional) */
3812         char *supplied_euid,            /* ...or NULL if this is irrelevant */
3813         char *preformatted_text,        /* ...or NULL to read text from client */
3814         char *references                /* Thread references */
3815         ) {
3816         char dest_node[256];
3817         char buf[1024];
3818         struct CtdlMessage *msg;
3819         StrBuf *FakeAuthor;
3820         StrBuf *FakeEncAuthor = NULL;
3821
3822         msg = malloc(sizeof(struct CtdlMessage));
3823         memset(msg, 0, sizeof(struct CtdlMessage));
3824         msg->cm_magic = CTDLMESSAGE_MAGIC;
3825         msg->cm_anon_type = type;
3826         msg->cm_format_type = format_type;
3827
3828         /* Don't confuse the poor folks if it's not routed mail. */
3829         strcpy(dest_node, "");
3830
3831         if (recipient != NULL) striplt(recipient);
3832         if (recp_cc != NULL) striplt(recp_cc);
3833
3834         /* Path or Return-Path */
3835         if (my_email == NULL) my_email = "";
3836
3837         if (!IsEmptyStr(my_email)) {
3838                 msg->cm_fields['P'] = strdup(my_email);
3839         }
3840         else {
3841                 snprintf(buf, sizeof buf, "%s", author->fullname);
3842                 msg->cm_fields['P'] = strdup(buf);
3843         }
3844         convert_spaces_to_underscores(msg->cm_fields['P']);
3845
3846         snprintf(buf, sizeof buf, "%ld", (long)time(NULL));     /* timestamp */
3847         msg->cm_fields['T'] = strdup(buf);
3848
3849         if ((fake_name != NULL) && (fake_name[0])) {            /* author */
3850                 FakeAuthor = NewStrBufPlain (fake_name, -1);
3851         }
3852         else {
3853                 FakeAuthor = NewStrBufPlain (author->fullname, -1);
3854         }
3855         StrBufRFC2047encode(&FakeEncAuthor, FakeAuthor);
3856         msg->cm_fields['A'] = SmashStrBuf(&FakeEncAuthor);
3857         FreeStrBuf(&FakeAuthor);
3858
3859         if (CC->room.QRflags & QR_MAILBOX) {            /* room */
3860                 msg->cm_fields['O'] = strdup(&CC->room.QRname[11]);
3861         }
3862         else {
3863                 msg->cm_fields['O'] = strdup(CC->room.QRname);
3864         }
3865
3866         msg->cm_fields['N'] = strdup(NODENAME);         /* nodename */
3867         msg->cm_fields['H'] = strdup(HUMANNODE);                /* hnodename */
3868
3869         if ((recipient != NULL) && (recipient[0] != 0)) {
3870                 msg->cm_fields['R'] = strdup(recipient);
3871         }
3872         if ((recp_cc != NULL) && (recp_cc[0] != 0)) {
3873                 msg->cm_fields['Y'] = strdup(recp_cc);
3874         }
3875         if (dest_node[0] != 0) {
3876                 msg->cm_fields['D'] = strdup(dest_node);
3877         }
3878
3879         if (!IsEmptyStr(my_email)) {
3880                 msg->cm_fields['F'] = strdup(my_email);
3881         }
3882         else if ( (author == &CC->user) && (!IsEmptyStr(CC->cs_inet_email)) ) {
3883                 msg->cm_fields['F'] = strdup(CC->cs_inet_email);
3884         }
3885
3886         if (subject != NULL) {
3887                 long length;
3888                 striplt(subject);
3889                 length = strlen(subject);
3890                 if (length > 0) {
3891                         long i;
3892                         long IsAscii;
3893                         IsAscii = -1;
3894                         i = 0;
3895                         while ((subject[i] != '\0') &&
3896                                (IsAscii = isascii(subject[i]) != 0 ))
3897                                 i++;
3898                         if (IsAscii != 0)
3899                                 msg->cm_fields['U'] = strdup(subject);
3900                         else /* ok, we've got utf8 in the string. */
3901                         {
3902                                 msg->cm_fields['U'] = rfc2047encode(subject, length);
3903                         }
3904
3905                 }
3906         }
3907
3908         if (supplied_euid != NULL) {
3909                 msg->cm_fields['E'] = strdup(supplied_euid);
3910         }
3911
3912         if ((references != NULL) && (!IsEmptyStr(references))) {
3913                 if (msg->cm_fields['W'] != NULL)
3914                         free(msg->cm_fields['W']);
3915                 msg->cm_fields['W'] = strdup(references);
3916         }
3917
3918         if (preformatted_text != NULL) {
3919                 msg->cm_fields['M'] = preformatted_text;
3920         }
3921         else {
3922                 msg->cm_fields['M'] = CtdlReadMessageBody(HKEY("000"), config.c_maxmsglen, NULL, 0, 0);
3923         }
3924
3925         return(msg);
3926 }
3927
3928 extern int netconfig_check_roomaccess(
3929         char *errmsgbuf,
3930         size_t n,
3931         const char* RemoteIdentifier); /* TODO: find a smarter way */
3932
3933 /*
3934  * Check to see whether we have permission to post a message in the current
3935  * room.  Returns a *CITADEL ERROR CODE* and puts a message in errmsgbuf, or
3936  * returns 0 on success.
3937  */
3938 int CtdlDoIHavePermissionToPostInThisRoom(
3939         char *errmsgbuf,
3940         size_t n,
3941         const char* RemoteIdentifier,
3942         int PostPublic,
3943         int is_reply
3944         ) {
3945         int ra;
3946
3947         if (!(CC->logged_in) &&
3948             (PostPublic == POST_LOGGED_IN)) {
3949                 snprintf(errmsgbuf, n, "Not logged in.");
3950                 return (ERROR + NOT_LOGGED_IN);
3951         }
3952         else if (PostPublic == CHECK_EXISTANCE) {
3953                 return (0); // We're Evaling whether a recipient exists
3954         }
3955         else if (!(CC->logged_in)) {
3956
3957                 if ((CC->room.QRflags & QR_READONLY)) {
3958                         snprintf(errmsgbuf, n, "Not logged in.");
3959                         return (ERROR + NOT_LOGGED_IN);
3960                 }
3961                 if (CC->room.QRflags2 & QR2_MODERATED) {
3962                         snprintf(errmsgbuf, n, "Not logged in Moderation feature not yet implemented!");
3963                         return (ERROR + NOT_LOGGED_IN);
3964                 }
3965                 if ((PostPublic!=POST_LMTP) &&(CC->room.QRflags2 & QR2_SMTP_PUBLIC) == 0) {
3966
3967                         return netconfig_check_roomaccess(errmsgbuf, n, RemoteIdentifier);
3968                 }
3969                 return (0);
3970
3971         }
3972
3973         if ((CC->user.axlevel < AxProbU)
3974             && ((CC->room.QRflags & QR_MAILBOX) == 0)) {
3975                 snprintf(errmsgbuf, n, "Need to be validated to enter (except in %s> to sysop)", MAILROOM);
3976                 return (ERROR + HIGHER_ACCESS_REQUIRED);
3977         }
3978
3979         CtdlRoomAccess(&CC->room, &CC->user, &ra, NULL);
3980
3981         if (ra & UA_POSTALLOWED) {
3982                 strcpy(errmsgbuf, "OK to post or reply here");
3983                 return(0);
3984         }
3985
3986         if ( (ra & UA_REPLYALLOWED) && (is_reply) ) {
3987                 /*
3988                  * To be thorough, we ought to check to see if the message they are
3989                  * replying to is actually a valid one in this room, but unless this
3990                  * actually becomes a problem we'll go with high performance instead.
3991                  */
3992                 strcpy(errmsgbuf, "OK to reply here");
3993                 return(0);
3994         }
3995
3996         if ( (ra & UA_REPLYALLOWED) && (!is_reply) ) {
3997                 /* Clarify what happened with a better error message */
3998                 snprintf(errmsgbuf, n, "You may only reply to existing messages here.");
3999                 return (ERROR + HIGHER_ACCESS_REQUIRED);
4000         }
4001
4002         snprintf(errmsgbuf, n, "Higher access is required to post in this room.");
4003         return (ERROR + HIGHER_ACCESS_REQUIRED);
4004
4005 }
4006
4007
4008 /*
4009  * Check to see if the specified user has Internet mail permission
4010  * (returns nonzero if permission is granted)
4011  */
4012 int CtdlCheckInternetMailPermission(struct ctdluser *who) {
4013
4014         /* Do not allow twits to send Internet mail */
4015         if (who->axlevel <= AxProbU) return(0);
4016
4017         /* Globally enabled? */
4018         if (config.c_restrict == 0) return(1);
4019
4020         /* User flagged ok? */
4021         if (who->flags & US_INTERNET) return(2);
4022
4023         /* Aide level access? */
4024         if (who->axlevel >= AxAideU) return(3);
4025
4026         /* No mail for you! */
4027         return(0);
4028 }
4029
4030
4031 /*
4032  * Validate recipients, count delivery types and errors, and handle aliasing
4033  * FIXME check for dupes!!!!!
4034  *
4035  * Returns 0 if all addresses are ok, ret->num_error = -1 if no addresses
4036  * were specified, or the number of addresses found invalid.
4037  *
4038  * Caller needs to free the result using free_recipients()
4039  */
4040 struct recptypes *validate_recipients(const char *supplied_recipients,
4041                                       const char *RemoteIdentifier,
4042                                       int Flags) {
4043         struct recptypes *ret;
4044         char *recipients = NULL;
4045         char *org_recp;
4046         char this_recp[256];
4047         char this_recp_cooked[256];
4048         char append[SIZ];
4049         long len;
4050         int num_recps = 0;
4051         int i, j;
4052         int mailtype;
4053         int invalid;
4054         struct ctdluser tempUS;
4055         struct ctdlroom tempQR;
4056         struct ctdlroom tempQR2;
4057         int err = 0;
4058         char errmsg[SIZ];
4059         int in_quotes = 0;
4060
4061         /* Initialize */
4062         ret = (struct recptypes *) malloc(sizeof(struct recptypes));
4063         if (ret == NULL) return(NULL);
4064
4065         /* Set all strings to null and numeric values to zero */
4066         memset(ret, 0, sizeof(struct recptypes));
4067
4068         if (supplied_recipients == NULL) {
4069                 recipients = strdup("");
4070         }
4071         else {
4072                 recipients = strdup(supplied_recipients);
4073         }
4074
4075         /* Allocate some memory.  Yes, this allocates 500% more memory than we will
4076          * actually need, but it's healthier for the heap than doing lots of tiny
4077          * realloc() calls instead.
4078          */
4079         len = strlen(recipients) + 1024;
4080         ret->errormsg = malloc(len);
4081         ret->recp_local = malloc(len);
4082         ret->recp_internet = malloc(len);
4083         ret->recp_ignet = malloc(len);
4084         ret->recp_room = malloc(len);
4085         ret->display_recp = malloc(len);
4086         ret->recp_orgroom = malloc(len);
4087         org_recp = malloc(len);
4088
4089         ret->errormsg[0] = 0;
4090         ret->recp_local[0] = 0;
4091         ret->recp_internet[0] = 0;
4092         ret->recp_ignet[0] = 0;
4093         ret->recp_room[0] = 0;
4094         ret->recp_orgroom[0] = 0;
4095         ret->display_recp[0] = 0;
4096
4097         ret->recptypes_magic = RECPTYPES_MAGIC;
4098
4099         /* Change all valid separator characters to commas */
4100         for (i=0; !IsEmptyStr(&recipients[i]); ++i) {
4101                 if ((recipients[i] == ';') || (recipients[i] == '|')) {
4102                         recipients[i] = ',';
4103                 }
4104         }
4105
4106         /* Now start extracting recipients... */
4107
4108         while (!IsEmptyStr(recipients)) {
4109                 for (i=0; i<=strlen(recipients); ++i) {
4110                         if (recipients[i] == '\"') in_quotes = 1 - in_quotes;
4111                         if ( ( (recipients[i] == ',') && (!in_quotes) ) || (recipients[i] == 0) ) {
4112                                 safestrncpy(this_recp, recipients, i+1);
4113                                 this_recp[i] = 0;
4114                                 if (recipients[i] == ',') {
4115                                         strcpy(recipients, &recipients[i+1]);
4116                                 }
4117                                 else {
4118                                         strcpy(recipients, "");
4119                                 }
4120                                 break;
4121                         }
4122                 }
4123
4124                 striplt(this_recp);
4125                 if (IsEmptyStr(this_recp))
4126                         break;
4127                 syslog(LOG_DEBUG, "Evaluating recipient #%d: %s\n", num_recps, this_recp);
4128                 ++num_recps;
4129
4130                 strcpy(org_recp, this_recp);
4131                 mailtype = alias(this_recp);
4132                 mailtype = alias(this_recp);
4133                 mailtype = alias(this_recp);
4134                 j = 0;
4135                 for (j=0; !IsEmptyStr(&this_recp[j]); ++j) {
4136                         if (this_recp[j]=='_') {
4137                                 this_recp_cooked[j] = ' ';
4138                         }
4139                         else {
4140                                 this_recp_cooked[j] = this_recp[j];
4141                         }
4142                 }
4143                 this_recp_cooked[j] = '\0';
4144                 invalid = 0;
4145                 errmsg[0] = 0;
4146                 switch(mailtype) {
4147                 case MES_LOCAL:
4148                         if (!strcasecmp(this_recp, "sysop")) {
4149                                 ++ret->num_room;
4150                                 strcpy(this_recp, config.c_aideroom);
4151                                 if (!IsEmptyStr(ret->recp_room)) {
4152                                         strcat(ret->recp_room, "|");
4153                                 }
4154                                 strcat(ret->recp_room, this_recp);
4155                         }
4156                         else if ( (!strncasecmp(this_recp, "room_", 5))
4157                                   && (!CtdlGetRoom(&tempQR, &this_recp_cooked[5])) ) {
4158
4159                                 /* Save room so we can restore it later */
4160                                 tempQR2 = CC->room;
4161                                 CC->room = tempQR;
4162
4163                                 /* Check permissions to send mail to this room */
4164                                 err = CtdlDoIHavePermissionToPostInThisRoom(
4165                                         errmsg,
4166                                         sizeof errmsg,
4167                                         RemoteIdentifier,
4168                                         Flags,
4169                                         0                       /* 0 = not a reply */
4170                                         );
4171                                 if (err)
4172                                 {
4173                                         ++ret->num_error;
4174                                         invalid = 1;
4175                                 }
4176                                 else {
4177                                         ++ret->num_room;
4178                                         if (!IsEmptyStr(ret->recp_room)) {
4179                                                 strcat(ret->recp_room, "|");
4180                                         }
4181                                         strcat(ret->recp_room, &this_recp_cooked[5]);
4182
4183                                         if (!IsEmptyStr(ret->recp_orgroom)) {
4184                                                 strcat(ret->recp_orgroom, "|");
4185                                         }
4186                                         strcat(ret->recp_orgroom, org_recp);
4187
4188                                 }
4189
4190                                 /* Restore room in case something needs it */
4191                                 CC->room = tempQR2;
4192
4193                         }
4194                         else if (CtdlGetUser(&tempUS, this_recp) == 0) {
4195                                 ++ret->num_local;
4196                                 strcpy(this_recp, tempUS.fullname);
4197                                 if (!IsEmptyStr(ret->recp_local)) {
4198                                         strcat(ret->recp_local, "|");
4199                                 }
4200                                 strcat(ret->recp_local, this_recp);
4201                         }
4202                         else if (CtdlGetUser(&tempUS, this_recp_cooked) == 0) {
4203                                 ++ret->num_local;
4204                                 strcpy(this_recp, tempUS.fullname);
4205                                 if (!IsEmptyStr(ret->recp_local)) {
4206                                         strcat(ret->recp_local, "|");
4207                                 }
4208                                 strcat(ret->recp_local, this_recp);
4209                         }
4210                         else {
4211                                 ++ret->num_error;
4212                                 invalid = 1;
4213                         }
4214                         break;
4215                 case MES_INTERNET:
4216                         /* Yes, you're reading this correctly: if the target
4217                          * domain points back to the local system or an attached
4218                          * Citadel directory, the address is invalid.  That's
4219                          * because if the address were valid, we would have
4220                          * already translated it to a local address by now.
4221                          */
4222                         if (IsDirectory(this_recp, 0)) {
4223                                 ++ret->num_error;
4224                                 invalid = 1;
4225                         }
4226                         else {
4227                                 ++ret->num_internet;
4228                                 if (!IsEmptyStr(ret->recp_internet)) {
4229                                         strcat(ret->recp_internet, "|");
4230                                 }
4231                                 strcat(ret->recp_internet, this_recp);
4232                         }
4233                         break;
4234                 case MES_IGNET:
4235                         ++ret->num_ignet;
4236                         if (!IsEmptyStr(ret->recp_ignet)) {
4237                                 strcat(ret->recp_ignet, "|");
4238                         }
4239                         strcat(ret->recp_ignet, this_recp);
4240                         break;
4241                 case MES_ERROR:
4242                         ++ret->num_error;
4243                         invalid = 1;
4244                         break;
4245                 }
4246                 if (invalid) {
4247                         if (IsEmptyStr(errmsg)) {
4248                                 snprintf(append, sizeof append, "Invalid recipient: %s", this_recp);
4249                         }
4250                         else {
4251                                 snprintf(append, sizeof append, "%s", errmsg);
4252                         }
4253                         if ( (strlen(ret->errormsg) + strlen(append) + 3) < SIZ) {
4254                                 if (!IsEmptyStr(ret->errormsg)) {
4255                                         strcat(ret->errormsg, "; ");
4256                                 }
4257                                 strcat(ret->errormsg, append);
4258                         }
4259                 }
4260                 else {
4261                         if (IsEmptyStr(ret->display_recp)) {
4262                                 strcpy(append, this_recp);
4263                         }
4264                         else {
4265                                 snprintf(append, sizeof append, ", %s", this_recp);
4266                         }
4267                         if ( (strlen(ret->display_recp)+strlen(append)) < SIZ) {
4268                                 strcat(ret->display_recp, append);
4269                         }
4270                 }
4271         }
4272         free(org_recp);
4273
4274         if ((ret->num_local + ret->num_internet + ret->num_ignet +
4275              ret->num_room + ret->num_error) == 0) {
4276                 ret->num_error = (-1);
4277                 strcpy(ret->errormsg, "No recipients specified.");
4278         }
4279
4280         syslog(LOG_DEBUG, "validate_recipients()\n");
4281         syslog(LOG_DEBUG, " local: %d <%s>\n", ret->num_local, ret->recp_local);
4282         syslog(LOG_DEBUG, "  room: %d <%s>\n", ret->num_room, ret->recp_room);
4283         syslog(LOG_DEBUG, "  inet: %d <%s>\n", ret->num_internet, ret->recp_internet);
4284         syslog(LOG_DEBUG, " ignet: %d <%s>\n", ret->num_ignet, ret->recp_ignet);
4285         syslog(LOG_DEBUG, " error: %d <%s>\n", ret->num_error, ret->errormsg);
4286
4287         free(recipients);
4288         return(ret);
4289 }
4290
4291
4292 /*
4293  * Destructor for struct recptypes
4294  */
4295 void free_recipients(struct recptypes *valid) {
4296
4297         if (valid == NULL) {
4298                 return;
4299         }
4300
4301         if (valid->recptypes_magic != RECPTYPES_MAGIC) {
4302                 syslog(LOG_EMERG, "Attempt to call free_recipients() on some other data type!\n");
4303                 abort();
4304         }
4305
4306         if (valid->errormsg != NULL)            free(valid->errormsg);
4307         if (valid->recp_local != NULL)          free(valid->recp_local);
4308         if (valid->recp_internet != NULL)       free(valid->recp_internet);
4309         if (valid->recp_ignet != NULL)          free(valid->recp_ignet);
4310         if (valid->recp_room != NULL)           free(valid->recp_room);
4311         if (valid->recp_orgroom != NULL)        free(valid->recp_orgroom);
4312         if (valid->display_recp != NULL)        free(valid->display_recp);
4313         if (valid->bounce_to != NULL)           free(valid->bounce_to);
4314         if (valid->envelope_from != NULL)       free(valid->envelope_from);
4315         free(valid);
4316 }
4317
4318
4319
4320 /*
4321  * message entry  -  mode 0 (normal)
4322  */
4323 void cmd_ent0(char *entargs)
4324 {
4325         struct CitContext *CCC = CC;
4326         int post = 0;
4327         char recp[SIZ];
4328         char cc[SIZ];
4329         char bcc[SIZ];
4330         char supplied_euid[128];
4331         int anon_flag = 0;
4332         int format_type = 0;
4333         char newusername[256];
4334         char newuseremail[256];
4335         struct CtdlMessage *msg;
4336         int anonymous = 0;
4337         char errmsg[SIZ];
4338         int err = 0;
4339         struct recptypes *valid = NULL;
4340         struct recptypes *valid_to = NULL;
4341         struct recptypes *valid_cc = NULL;
4342         struct recptypes *valid_bcc = NULL;
4343         char subject[SIZ];
4344         int subject_required = 0;
4345         int do_confirm = 0;
4346         int verbose_reply = 0;
4347         long msgnum;
4348         int i, j;
4349         char buf[256];
4350         int newuseremail_ok = 0;
4351         char references[SIZ];
4352         char *ptr;
4353
4354         unbuffer_output();
4355
4356         post = extract_int(entargs, 0);
4357         extract_token(recp, entargs, 1, '|', sizeof recp);
4358         anon_flag = extract_int(entargs, 2);
4359         format_type = extract_int(entargs, 3);
4360         extract_token(subject, entargs, 4, '|', sizeof subject);
4361         extract_token(newusername, entargs, 5, '|', sizeof newusername);
4362         do_confirm = extract_int(entargs, 6);
4363         extract_token(cc, entargs, 7, '|', sizeof cc);
4364         extract_token(bcc, entargs, 8, '|', sizeof bcc);
4365         verbose_reply = extract_int(entargs, 9);
4366         switch(CC->room.QRdefaultview) {
4367         case VIEW_NOTES:
4368         case VIEW_WIKI:
4369                 extract_token(supplied_euid, entargs, 9, '|', sizeof supplied_euid);
4370                 break;
4371         default:
4372                 supplied_euid[0] = 0;
4373                 break;
4374         }
4375         extract_token(newuseremail, entargs, 10, '|', sizeof newuseremail);
4376         extract_token(references, entargs, 11, '|', sizeof references);
4377         for (ptr=references; *ptr != 0; ++ptr) {
4378                 if (*ptr == '!') *ptr = '|';
4379         }
4380
4381         /* first check to make sure the request is valid. */
4382
4383         err = CtdlDoIHavePermissionToPostInThisRoom(
4384                 errmsg,
4385                 sizeof errmsg,
4386                 NULL,
4387                 POST_LOGGED_IN,
4388                 (!IsEmptyStr(references))               /* is this a reply?  or a top-level post? */
4389                 );
4390         if (err)
4391         {
4392                 cprintf("%d %s\n", err, errmsg);
4393                 return;
4394         }
4395
4396         /* Check some other permission type things. */
4397
4398         if (IsEmptyStr(newusername)) {
4399                 strcpy(newusername, CCC->user.fullname);
4400         }
4401         if (  (CCC->user.axlevel < AxAideU)
4402               && (strcasecmp(newusername, CCC->user.fullname))
4403               && (strcasecmp(newusername, CCC->cs_inet_fn))
4404                 ) {
4405                 cprintf("%d You don't have permission to author messages as '%s'.\n",
4406                         ERROR + HIGHER_ACCESS_REQUIRED,
4407                         newusername
4408                         );
4409                 return;
4410         }
4411
4412
4413         if (IsEmptyStr(newuseremail)) {
4414                 newuseremail_ok = 1;
4415         }
4416
4417         if (!IsEmptyStr(newuseremail)) {
4418                 if (!strcasecmp(newuseremail, CCC->cs_inet_email)) {
4419                         newuseremail_ok = 1;
4420                 }
4421                 else if (!IsEmptyStr(CCC->cs_inet_other_emails)) {
4422                         j = num_tokens(CCC->cs_inet_other_emails, '|');
4423                         for (i=0; i<j; ++i) {
4424                                 extract_token(buf, CCC->cs_inet_other_emails, i, '|', sizeof buf);
4425                                 if (!strcasecmp(newuseremail, buf)) {
4426                                         newuseremail_ok = 1;
4427                                 }
4428                         }
4429                 }
4430         }
4431
4432         if (!newuseremail_ok) {
4433                 cprintf("%d You don't have permission to author messages as '%s'.\n",
4434                         ERROR + HIGHER_ACCESS_REQUIRED,
4435                         newuseremail
4436                         );
4437                 return;
4438         }
4439
4440         CCC->cs_flags |= CS_POSTING;
4441
4442         /* In mailbox rooms we have to behave a little differently --
4443          * make sure the user has specified at least one recipient.  Then
4444          * validate the recipient(s).  We do this for the Mail> room, as
4445          * well as any room which has the "Mailbox" view set - unless it
4446          * is the DRAFTS room which does not require recipients
4447          */
4448
4449         if ( (  ( (CCC->room.QRflags & QR_MAILBOX) && (!strcasecmp(&CCC->room.QRname[11], MAILROOM)) )
4450                 || ( (CCC->room.QRflags & QR_MAILBOX) && (CCC->curr_view == VIEW_MAILBOX) )
4451                      ) && (strcasecmp(&CCC->room.QRname[11], USERDRAFTROOM)) !=0 ) {
4452                 if (CCC->user.axlevel < AxProbU) {
4453                         strcpy(recp, "sysop");
4454                         strcpy(cc, "");
4455                         strcpy(bcc, "");
4456                 }
4457
4458                 valid_to = validate_recipients(recp, NULL, 0);
4459                 if (valid_to->num_error > 0) {
4460                         cprintf("%d %s\n", ERROR + NO_SUCH_USER, valid_to->errormsg);
4461                         free_recipients(valid_to);
4462                         return;
4463                 }
4464
4465                 valid_cc = validate_recipients(cc, NULL, 0);
4466                 if (valid_cc->num_error > 0) {
4467                         cprintf("%d %s\n", ERROR + NO_SUCH_USER, valid_cc->errormsg);
4468                         free_recipients(valid_to);
4469                         free_recipients(valid_cc);
4470                         return;
4471                 }
4472
4473                 valid_bcc = validate_recipients(bcc, NULL, 0);
4474                 if (valid_bcc->num_error > 0) {
4475                         cprintf("%d %s\n", ERROR + NO_SUCH_USER, valid_bcc->errormsg);
4476                         free_recipients(valid_to);
4477                         free_recipients(valid_cc);
4478                         free_recipients(valid_bcc);
4479                         return;
4480                 }
4481
4482                 /* Recipient required, but none were specified */
4483                 if ( (valid_to->num_error < 0) && (valid_cc->num_error < 0) && (valid_bcc->num_error < 0) ) {
4484                         free_recipients(valid_to);
4485                         free_recipients(valid_cc);
4486                         free_recipients(valid_bcc);
4487                         cprintf("%d At least one recipient is required.\n", ERROR + NO_SUCH_USER);
4488                         return;
4489                 }
4490
4491                 if (valid_to->num_internet + valid_cc->num_internet + valid_bcc->num_internet > 0) {
4492                         if (CtdlCheckInternetMailPermission(&CCC->user)==0) {
4493                                 cprintf("%d You do not have permission "
4494                                         "to send Internet mail.\n",
4495                                         ERROR + HIGHER_ACCESS_REQUIRED);
4496                                 free_recipients(valid_to);
4497                                 free_recipients(valid_cc);
4498                                 free_recipients(valid_bcc);
4499                                 return;
4500                         }
4501                 }
4502
4503                 if ( ( (valid_to->num_internet + valid_to->num_ignet + valid_cc->num_internet + valid_cc->num_ignet + valid_bcc->num_internet + valid_bcc->num_ignet) > 0)
4504                      && (CCC->user.axlevel < AxNetU) ) {
4505                         cprintf("%d Higher access required for network mail.\n",
4506                                 ERROR + HIGHER_ACCESS_REQUIRED);
4507                         free_recipients(valid_to);
4508                         free_recipients(valid_cc);
4509                         free_recipients(valid_bcc);
4510                         return;
4511                 }
4512
4513                 if ((RESTRICT_INTERNET == 1)
4514                     && (valid_to->num_internet + valid_cc->num_internet + valid_bcc->num_internet > 0)
4515                     && ((CCC->user.flags & US_INTERNET) == 0)
4516                     && (!CCC->internal_pgm)) {
4517                         cprintf("%d You don't have access to Internet mail.\n",
4518                                 ERROR + HIGHER_ACCESS_REQUIRED);
4519                         free_recipients(valid_to);
4520                         free_recipients(valid_cc);
4521                         free_recipients(valid_bcc);
4522                         return;
4523                 }
4524
4525         }
4526
4527         /* Is this a room which has anonymous-only or anonymous-option? */
4528         anonymous = MES_NORMAL;
4529         if (CCC->room.QRflags & QR_ANONONLY) {
4530                 anonymous = MES_ANONONLY;
4531         }
4532         if (CCC->room.QRflags & QR_ANONOPT) {
4533                 if (anon_flag == 1) {   /* only if the user requested it */
4534                         anonymous = MES_ANONOPT;
4535                 }
4536         }
4537
4538         if ((CCC->room.QRflags & QR_MAILBOX) == 0) {
4539                 recp[0] = 0;
4540         }
4541
4542         /* Recommend to the client that the use of a message subject is
4543          * strongly recommended in this room, if either the SUBJECTREQ flag
4544          * is set, or if there is one or more Internet email recipients.
4545          */
4546         if (CCC->room.QRflags2 & QR2_SUBJECTREQ) subject_required = 1;
4547         if ((valid_to)  && (valid_to->num_internet > 0))        subject_required = 1;
4548         if ((valid_cc)  && (valid_cc->num_internet > 0))        subject_required = 1;
4549         if ((valid_bcc) && (valid_bcc->num_internet > 0))       subject_required = 1;
4550
4551         /* If we're only checking the validity of the request, return
4552          * success without creating the message.
4553          */
4554         if (post == 0) {
4555                 cprintf("%d %s|%d\n", CIT_OK,
4556                         ((valid_to != NULL) ? valid_to->display_recp : ""),
4557                         subject_required);
4558                 free_recipients(valid_to);
4559                 free_recipients(valid_cc);
4560                 free_recipients(valid_bcc);
4561                 return;
4562         }
4563
4564         /* We don't need these anymore because we'll do it differently below */
4565         free_recipients(valid_to);
4566         free_recipients(valid_cc);
4567         free_recipients(valid_bcc);
4568
4569         /* Read in the message from the client. */
4570         if (do_confirm) {
4571                 cprintf("%d send message\n", START_CHAT_MODE);
4572         } else {
4573                 cprintf("%d send message\n", SEND_LISTING);
4574         }
4575
4576         msg = CtdlMakeMessage(&CCC->user, recp, cc,
4577                               CCC->room.QRname, anonymous, format_type,
4578                               newusername, newuseremail, subject,
4579                               ((!IsEmptyStr(supplied_euid)) ? supplied_euid : NULL),
4580                               NULL, references);
4581
4582         /* Put together one big recipients struct containing to/cc/bcc all in
4583          * one.  This is for the envelope.
4584          */
4585         char *all_recps = malloc(SIZ * 3);
4586         strcpy(all_recps, recp);
4587         if (!IsEmptyStr(cc)) {
4588                 if (!IsEmptyStr(all_recps)) {
4589                         strcat(all_recps, ",");
4590                 }
4591                 strcat(all_recps, cc);
4592         }
4593         if (!IsEmptyStr(bcc)) {
4594                 if (!IsEmptyStr(all_recps)) {
4595                         strcat(all_recps, ",");
4596                 }
4597                 strcat(all_recps, bcc);
4598         }
4599         if (!IsEmptyStr(all_recps)) {
4600                 valid = validate_recipients(all_recps, NULL, 0);
4601         }
4602         else {
4603                 valid = NULL;
4604         }
4605         free(all_recps);
4606
4607         if ((valid != NULL) && (valid->num_room == 1))
4608         {
4609                 /* posting into an ML room? set the envelope from
4610                  * to the actual mail address so others get a valid
4611                  * reply-to-header.
4612                  */
4613                 msg->cm_fields['V'] = strdup(valid->recp_orgroom);
4614         }
4615
4616         if (msg != NULL) {
4617                 msgnum = CtdlSubmitMsg(msg, valid, "", QP_EADDR);
4618                 if (verbose_reply)
4619                 {
4620                         if (StrLength(CCC->StatusMessage)>0)
4621                         {
4622                                 StrBufAppendBufPlain(CCC->StatusMessage, HKEY("\n000\n"), 0);
4623                                 cputbuf(CCC->StatusMessage);
4624                         }
4625                         else
4626                                 client_write(HKEY("\n000\n"));
4627                 }
4628
4629                 if (do_confirm) {
4630                         cprintf("%ld\n", msgnum);
4631                         if (msgnum >= 0L) {
4632                                 client_write(HKEY("Message accepted.\n"));
4633                         }
4634                         else {
4635                                 client_write(HKEY("Internal error.\n"));
4636                         }
4637                         if (msg->cm_fields['E'] != NULL) {
4638                                 cprintf("%s\n", msg->cm_fields['E']);
4639                         } else {
4640                                 cprintf("\n");
4641                         }
4642                         cprintf("000\n");
4643                 }
4644
4645                 CtdlFreeMessage(msg);
4646         }
4647         if (valid != NULL) {
4648                 free_recipients(valid);
4649         }
4650         return;
4651 }
4652
4653
4654
4655 /*
4656  * API function to delete messages which match a set of criteria
4657  * (returns the actual number of messages deleted)
4658  */
4659 int CtdlDeleteMessages(char *room_name,         /* which room */
4660                        long *dmsgnums,          /* array of msg numbers to be deleted */
4661                        int num_dmsgnums,        /* number of msgs to be deleted, or 0 for "any" */
4662                        char *content_type       /* or "" for any.  regular expressions expected. */
4663         )
4664 {
4665         struct ctdlroom qrbuf;
4666         struct cdbdata *cdbfr;
4667         long *msglist = NULL;
4668         long *dellist = NULL;
4669         int num_msgs = 0;
4670         int i, j;
4671         int num_deleted = 0;
4672         int delete_this;
4673         struct MetaData smi;
4674         regex_t re;
4675         regmatch_t pm;
4676         int need_to_free_re = 0;
4677
4678         if (content_type) if (!IsEmptyStr(content_type)) {
4679                         regcomp(&re, content_type, 0);
4680                         need_to_free_re = 1;
4681                 }
4682         syslog(LOG_DEBUG, "CtdlDeleteMessages(%s, %d msgs, %s)\n",
4683                room_name, num_dmsgnums, content_type);
4684
4685         /* get room record, obtaining a lock... */
4686         if (CtdlGetRoomLock(&qrbuf, room_name) != 0) {
4687                 syslog(LOG_ERR, "CtdlDeleteMessages(): Room <%s> not found\n",
4688                        room_name);
4689                 if (need_to_free_re) regfree(&re);
4690                 return (0);     /* room not found */
4691         }
4692         cdbfr = cdb_fetch(CDB_MSGLISTS, &qrbuf.QRnumber, sizeof(long));
4693
4694         if (cdbfr != NULL) {
4695                 dellist = malloc(cdbfr->len);
4696                 msglist = (long *) cdbfr->ptr;
4697                 cdbfr->ptr = NULL;      /* CtdlDeleteMessages() now owns this memory */
4698                 num_msgs = cdbfr->len / sizeof(long);
4699                 cdb_free(cdbfr);
4700         }
4701         if (num_msgs > 0) {
4702                 int have_contenttype = !IsEmptyStr(content_type);
4703                 int have_delmsgs = (num_dmsgnums == 0) || (dmsgnums == NULL);
4704                 int have_more_del = 1;
4705
4706                 num_msgs = sort_msglist(msglist, num_msgs);
4707                 if (num_dmsgnums > 1)
4708                         num_dmsgnums = sort_msglist(dmsgnums, num_dmsgnums);
4709 /*
4710                 {
4711                         StrBuf *dbg = NewStrBuf();
4712                         for (i = 0; i < num_dmsgnums; i++)
4713                                 StrBufAppendPrintf(dbg, ", %ld", dmsgnums[i]);
4714                         syslog(LOG_DEBUG, "Deleting before: %s", ChrPtr(dbg));
4715                         FreeStrBuf(&dbg);
4716                 }
4717 */
4718                 i = 0; j = 0;
4719                 while ((i < num_msgs) && (have_more_del)) {
4720                         delete_this = 0x00;
4721
4722
4723                         /* Set/clear a bit for each criterion */
4724
4725                         /* 0 messages in the list or a null list means that we are
4726                          * interested in deleting any messages which meet the other criteria.
4727                          */
4728                         if (have_delmsgs) {
4729                                 delete_this |= 0x01;
4730                         }
4731                         else {
4732                                 while ((i < num_msgs) && (msglist[i] < dmsgnums[j])) i++;
4733                                 if (msglist[i] == dmsgnums[j]) {
4734                                         delete_this |= 0x01;
4735                                 }
4736                                 j++;
4737                                 have_more_del = (j < num_dmsgnums);
4738                         }
4739
4740                         if (have_contenttype) {
4741                                 GetMetaData(&smi, msglist[i]);
4742                                 if (regexec(&re, smi.meta_content_type, 1, &pm, 0) == 0) {
4743                                         delete_this |= 0x02;
4744                                 }
4745                         } else {
4746                                 delete_this |= 0x02;
4747                         }
4748
4749                         /* Delete message only if all bits are set */
4750                         if (delete_this == 0x03) {
4751                                 dellist[num_deleted++] = msglist[i];
4752                                 msglist[i] = 0L;
4753                         }
4754                         i++;
4755                 }
4756 /*
4757                 {
4758                         StrBuf *dbg = NewStrBuf();
4759                         for (i = 0; i < num_deleted; i++)
4760                                 StrBufAppendPrintf(dbg, ", %ld", dellist[i]);
4761                         syslog(LOG_DEBUG, "Deleting: %s", ChrPtr(dbg));
4762                         FreeStrBuf(&dbg);
4763                 }
4764 */
4765                 num_msgs = sort_msglist(msglist, num_msgs);
4766                 cdb_store(CDB_MSGLISTS, &qrbuf.QRnumber, (int)sizeof(long),
4767                           msglist, (int)(num_msgs * sizeof(long)));
4768
4769                 if (num_msgs > 0)
4770                         qrbuf.QRhighest = msglist[num_msgs - 1];
4771                 else
4772                         qrbuf.QRhighest = 0;
4773         }
4774         CtdlPutRoomLock(&qrbuf);
4775
4776         /* Go through the messages we pulled out of the index, and decrement
4777          * their reference counts by 1.  If this is the only room the message
4778          * was in, the reference count will reach zero and the message will
4779          * automatically be deleted from the database.  We do this in a
4780          * separate pass because there might be plug-in hooks getting called,
4781          * and we don't want that happening during an S_ROOMS critical
4782          * section.
4783          */
4784         if (num_deleted) for (i=0; i<num_deleted; ++i) {
4785                         PerformDeleteHooks(qrbuf.QRname, dellist[i]);
4786                         AdjRefCount(dellist[i], -1);
4787                 }
4788
4789         /* Now free the memory we used, and go away. */
4790         if (msglist != NULL) free(msglist);
4791         if (dellist != NULL) free(dellist);
4792         syslog(LOG_DEBUG, "%d message(s) deleted.\n", num_deleted);
4793         if (need_to_free_re) regfree(&re);
4794         return (num_deleted);
4795 }
4796
4797
4798
4799 /*
4800  * Check whether the current user has permission to delete messages from
4801  * the current room (returns 1 for yes, 0 for no)
4802  */
4803 int CtdlDoIHavePermissionToDeleteMessagesFromThisRoom(void) {
4804         int ra;
4805         CtdlRoomAccess(&CC->room, &CC->user, &ra, NULL);
4806         if (ra & UA_DELETEALLOWED) return(1);
4807         return(0);
4808 }
4809
4810
4811
4812
4813 /*
4814  * Delete message from current room
4815  */
4816 void cmd_dele(char *args)
4817 {
4818         int num_deleted;
4819         int i;
4820         char msgset[SIZ];
4821         char msgtok[32];
4822         long *msgs;
4823         int num_msgs = 0;
4824
4825         extract_token(msgset, args, 0, '|', sizeof msgset);
4826         num_msgs = num_tokens(msgset, ',');
4827         if (num_msgs < 1) {
4828                 cprintf("%d Nothing to do.\n", CIT_OK);
4829                 return;
4830         }
4831
4832         if (CtdlDoIHavePermissionToDeleteMessagesFromThisRoom() == 0) {
4833                 cprintf("%d Higher access required.\n",
4834                         ERROR + HIGHER_ACCESS_REQUIRED);
4835                 return;
4836         }
4837
4838         /*
4839          * Build our message set to be moved/copied
4840          */
4841         msgs = malloc(num_msgs * sizeof(long));
4842         for (i=0; i<num_msgs; ++i) {
4843                 extract_token(msgtok, msgset, i, ',', sizeof msgtok);
4844                 msgs[i] = atol(msgtok);
4845         }
4846
4847         num_deleted = CtdlDeleteMessages(CC->room.QRname, msgs, num_msgs, "");
4848         free(msgs);
4849
4850         if (num_deleted) {
4851                 cprintf("%d %d message%s deleted.\n", CIT_OK,
4852                         num_deleted, ((num_deleted != 1) ? "s" : ""));
4853         } else {
4854                 cprintf("%d Message not found.\n", ERROR + MESSAGE_NOT_FOUND);
4855         }
4856 }
4857
4858
4859
4860
4861 /*
4862  * move or copy a message to another room
4863  */
4864 void cmd_move(char *args)
4865 {
4866         char msgset[SIZ];
4867         char msgtok[32];
4868         long *msgs;
4869         int num_msgs = 0;
4870
4871         char targ[ROOMNAMELEN];
4872         struct ctdlroom qtemp;
4873         int err;
4874         int is_copy = 0;
4875         int ra;
4876         int permit = 0;
4877         int i;
4878
4879         extract_token(msgset, args, 0, '|', sizeof msgset);
4880         num_msgs = num_tokens(msgset, ',');
4881         if (num_msgs < 1) {
4882                 cprintf("%d Nothing to do.\n", CIT_OK);
4883                 return;
4884         }
4885
4886         extract_token(targ, args, 1, '|', sizeof targ);
4887         convert_room_name_macros(targ, sizeof targ);
4888         targ[ROOMNAMELEN - 1] = 0;
4889         is_copy = extract_int(args, 2);
4890
4891         if (CtdlGetRoom(&qtemp, targ) != 0) {
4892                 cprintf("%d '%s' does not exist.\n", ERROR + ROOM_NOT_FOUND, targ);
4893                 return;
4894         }
4895
4896         if (!strcasecmp(qtemp.QRname, CC->room.QRname)) {
4897                 cprintf("%d Source and target rooms are the same.\n", ERROR + ALREADY_EXISTS);
4898                 return;
4899         }
4900
4901         CtdlGetUser(&CC->user, CC->curr_user);
4902         CtdlRoomAccess(&qtemp, &CC->user, &ra, NULL);
4903
4904         /* Check for permission to perform this operation.
4905          * Remember: "CC->room" is source, "qtemp" is target.
4906          */
4907         permit = 0;
4908
4909         /* Aides can move/copy */
4910         if (CC->user.axlevel >= AxAideU) permit = 1;
4911
4912         /* Room aides can move/copy */
4913         if (CC->user.usernum == CC->room.QRroomaide) permit = 1;
4914
4915         /* Permit move/copy from personal rooms */
4916         if ((CC->room.QRflags & QR_MAILBOX)
4917             && (qtemp.QRflags & QR_MAILBOX)) permit = 1;
4918
4919         /* Permit only copy from public to personal room */
4920         if ( (is_copy)
4921              && (!(CC->room.QRflags & QR_MAILBOX))
4922              && (qtemp.QRflags & QR_MAILBOX)) permit = 1;
4923
4924         /* Permit message removal from collaborative delete rooms */
4925         if (CC->room.QRflags2 & QR2_COLLABDEL) permit = 1;
4926
4927         /* Users allowed to post into the target room may move into it too. */
4928         if ((CC->room.QRflags & QR_MAILBOX) &&
4929             (qtemp.QRflags & UA_POSTALLOWED))  permit = 1;
4930
4931         /* User must have access to target room */
4932         if (!(ra & UA_KNOWN))  permit = 0;
4933
4934         if (!permit) {
4935                 cprintf("%d Higher access required.\n",
4936                         ERROR + HIGHER_ACCESS_REQUIRED);
4937                 return;
4938         }
4939
4940         /*
4941          * Build our message set to be moved/copied
4942          */
4943         msgs = malloc(num_msgs * sizeof(long));
4944         for (i=0; i<num_msgs; ++i) {
4945                 extract_token(msgtok, msgset, i, ',', sizeof msgtok);
4946                 msgs[i] = atol(msgtok);
4947         }
4948
4949         /*
4950          * Do the copy
4951          */
4952         err = CtdlSaveMsgPointersInRoom(targ, msgs, num_msgs, 1, NULL, 0);
4953         if (err != 0) {
4954                 cprintf("%d Cannot store message(s) in %s: error %d\n",
4955                         err, targ, err);
4956                 free(msgs);
4957                 return;
4958         }
4959
4960         /* Now delete the message from the source room,
4961          * if this is a 'move' rather than a 'copy' operation.
4962          */
4963         if (is_copy == 0) {
4964                 CtdlDeleteMessages(CC->room.QRname, msgs, num_msgs, "");
4965         }
4966         free(msgs);
4967
4968         cprintf("%d Message(s) %s.\n", CIT_OK, (is_copy ? "copied" : "moved") );
4969 }
4970
4971
4972
4973 /*
4974  * GetMetaData()  -  Get the supplementary record for a message
4975  */
4976 void GetMetaData(struct MetaData *smibuf, long msgnum)
4977 {
4978
4979         struct cdbdata *cdbsmi;
4980         long TheIndex;
4981
4982         memset(smibuf, 0, sizeof(struct MetaData));
4983         smibuf->meta_msgnum = msgnum;
4984         smibuf->meta_refcount = 1;      /* Default reference count is 1 */
4985
4986         /* Use the negative of the message number for its supp record index */
4987         TheIndex = (0L - msgnum);
4988
4989         cdbsmi = cdb_fetch(CDB_MSGMAIN, &TheIndex, sizeof(long));
4990         if (cdbsmi == NULL) {
4991                 return;         /* record not found; go with defaults */
4992         }
4993         memcpy(smibuf, cdbsmi->ptr,
4994                ((cdbsmi->len > sizeof(struct MetaData)) ?
4995                 sizeof(struct MetaData) : cdbsmi->len));
4996         cdb_free(cdbsmi);
4997         return;
4998 }
4999
5000
5001 /*
5002  * PutMetaData()  -  (re)write supplementary record for a message
5003  */
5004 void PutMetaData(struct MetaData *smibuf)
5005 {
5006         long TheIndex;
5007
5008         /* Use the negative of the message number for the metadata db index */
5009         TheIndex = (0L - smibuf->meta_msgnum);
5010
5011         cdb_store(CDB_MSGMAIN,
5012                   &TheIndex, (int)sizeof(long),
5013                   smibuf, (int)sizeof(struct MetaData));
5014
5015 }
5016
5017 /*
5018  * AdjRefCount  -  submit an adjustment to the reference count for a message.
5019  *                 (These are just queued -- we actually process them later.)
5020  */
5021 void AdjRefCount(long msgnum, int incr)
5022 {
5023         struct arcq new_arcq;
5024         int rv = 0;
5025
5026         syslog(LOG_DEBUG, "AdjRefCount() msg %ld ref count delta %+d\n", msgnum, incr);
5027
5028         begin_critical_section(S_SUPPMSGMAIN);
5029         if (arcfp == NULL) {
5030                 arcfp = fopen(file_arcq, "ab+");
5031                 chown(file_arcq, CTDLUID, (-1));
5032                 chmod(file_arcq, 0600);
5033         }
5034         end_critical_section(S_SUPPMSGMAIN);
5035
5036         /* msgnum < 0 means that we're trying to close the file */
5037         if (msgnum < 0) {
5038                 syslog(LOG_DEBUG, "Closing the AdjRefCount queue file\n");
5039                 begin_critical_section(S_SUPPMSGMAIN);
5040                 if (arcfp != NULL) {
5041                         fclose(arcfp);
5042                         arcfp = NULL;
5043                 }
5044                 end_critical_section(S_SUPPMSGMAIN);
5045                 return;
5046         }
5047
5048         /*
5049          * If we can't open the queue, perform the operation synchronously.
5050          */
5051         if (arcfp == NULL) {
5052                 TDAP_AdjRefCount(msgnum, incr);
5053                 return;
5054         }
5055
5056         new_arcq.arcq_msgnum = msgnum;
5057         new_arcq.arcq_delta = incr;
5058         rv = fwrite(&new_arcq, sizeof(struct arcq), 1, arcfp);
5059         if (rv == -1) {
5060                 syslog(LOG_EMERG, "Couldn't write Refcount Queue File %s: %s\n",
5061                        file_arcq,
5062                        strerror(errno));
5063         }
5064         fflush(arcfp);
5065
5066         return;
5067 }
5068
5069
5070 /*
5071  * TDAP_ProcessAdjRefCountQueue()
5072  *
5073  * Process the queue of message count adjustments that was created by calls
5074  * to AdjRefCount() ... by reading the queue and calling TDAP_AdjRefCount()
5075  * for each one.  This should be an "off hours" operation.
5076  */
5077 int TDAP_ProcessAdjRefCountQueue(void)
5078 {
5079         char file_arcq_temp[PATH_MAX];
5080         int r;
5081         FILE *fp;
5082         struct arcq arcq_rec;
5083         int num_records_processed = 0;
5084
5085         snprintf(file_arcq_temp, sizeof file_arcq_temp, "%s.%04x", file_arcq, rand());
5086
5087         begin_critical_section(S_SUPPMSGMAIN);
5088         if (arcfp != NULL) {
5089                 fclose(arcfp);
5090                 arcfp = NULL;
5091         }
5092
5093         r = link(file_arcq, file_arcq_temp);
5094         if (r != 0) {
5095                 syslog(LOG_CRIT, "%s: %s\n", file_arcq_temp, strerror(errno));
5096                 end_critical_section(S_SUPPMSGMAIN);
5097                 return(num_records_processed);
5098         }
5099
5100         unlink(file_arcq);
5101         end_critical_section(S_SUPPMSGMAIN);
5102
5103         fp = fopen(file_arcq_temp, "rb");
5104         if (fp == NULL) {
5105                 syslog(LOG_CRIT, "%s: %s\n", file_arcq_temp, strerror(errno));
5106                 return(num_records_processed);
5107         }
5108
5109         while (fread(&arcq_rec, sizeof(struct arcq), 1, fp) == 1) {
5110                 TDAP_AdjRefCount(arcq_rec.arcq_msgnum, arcq_rec.arcq_delta);
5111                 ++num_records_processed;
5112         }
5113
5114         fclose(fp);
5115         r = unlink(file_arcq_temp);
5116         if (r != 0) {
5117                 syslog(LOG_CRIT, "%s: %s\n", file_arcq_temp, strerror(errno));
5118         }
5119
5120         return(num_records_processed);
5121 }
5122
5123
5124
5125 /*
5126  * TDAP_AdjRefCount  -  adjust the reference count for a message.
5127  *                      This one does it "for real" because it's called by
5128  *                      the autopurger function that processes the queue
5129  *                      created by AdjRefCount().   If a message's reference
5130  *                      count becomes zero, we also delete the message from
5131  *                      disk and de-index it.
5132  */
5133 void TDAP_AdjRefCount(long msgnum, int incr)
5134 {
5135
5136         struct MetaData smi;
5137         long delnum;
5138
5139         /* This is a *tight* critical section; please keep it that way, as
5140          * it may get called while nested in other critical sections.
5141          * Complicating this any further will surely cause deadlock!
5142          */
5143         begin_critical_section(S_SUPPMSGMAIN);
5144         GetMetaData(&smi, msgnum);
5145         smi.meta_refcount += incr;
5146         PutMetaData(&smi);
5147         end_critical_section(S_SUPPMSGMAIN);
5148         syslog(LOG_DEBUG, "TDAP_AdjRefCount() msg %ld ref count delta %+d, is now %d\n",
5149                msgnum, incr, smi.meta_refcount
5150                 );
5151
5152         /* If the reference count is now zero, delete the message
5153          * (and its supplementary record as well).
5154          */
5155         if (smi.meta_refcount == 0) {
5156                 syslog(LOG_DEBUG, "Deleting message <%ld>\n", msgnum);
5157
5158                 /* Call delete hooks with NULL room to show it has gone altogether */
5159                 PerformDeleteHooks(NULL, msgnum);
5160
5161                 /* Remove from message base */
5162                 delnum = msgnum;
5163                 cdb_delete(CDB_MSGMAIN, &delnum, (int)sizeof(long));
5164                 cdb_delete(CDB_BIGMSGS, &delnum, (int)sizeof(long));
5165
5166                 /* Remove metadata record */
5167                 delnum = (0L - msgnum);
5168                 cdb_delete(CDB_MSGMAIN, &delnum, (int)sizeof(long));
5169         }
5170
5171 }
5172
5173 /*
5174  * Write a generic object to this room
5175  *
5176  * Note: this could be much more efficient.  Right now we use two temporary
5177  * files, and still pull the message into memory as with all others.
5178  */
5179 void CtdlWriteObject(char *req_room,                    /* Room to stuff it in */
5180                      char *content_type,                /* MIME type of this object */
5181                      char *raw_message,         /* Data to be written */
5182                      off_t raw_length,          /* Size of raw_message */
5183                      struct ctdluser *is_mailbox,       /* Mailbox room? */
5184                      int is_binary,                     /* Is encoding necessary? */
5185                      int is_unique,                     /* Del others of this type? */
5186                      unsigned int flags         /* Internal save flags */
5187         )
5188 {
5189
5190         struct ctdlroom qrbuf;
5191         char roomname[ROOMNAMELEN];
5192         struct CtdlMessage *msg;
5193         char *encoded_message = NULL;
5194
5195         if (is_mailbox != NULL) {
5196                 CtdlMailboxName(roomname, sizeof roomname, is_mailbox, req_room);
5197         }
5198         else {
5199                 safestrncpy(roomname, req_room, sizeof(roomname));
5200         }
5201
5202         syslog(LOG_DEBUG, "Raw length is %ld\n", (long)raw_length);
5203
5204         if (is_binary) {
5205                 encoded_message = malloc((size_t) (((raw_length * 134) / 100) + 4096 ) );
5206         }
5207         else {
5208                 encoded_message = malloc((size_t)(raw_length + 4096));
5209         }
5210
5211         sprintf(encoded_message, "Content-type: %s\n", content_type);
5212
5213         if (is_binary) {
5214                 sprintf(&encoded_message[strlen(encoded_message)],
5215                         "Content-transfer-encoding: base64\n\n"
5216                         );
5217         }
5218         else {
5219                 sprintf(&encoded_message[strlen(encoded_message)],
5220                         "Content-transfer-encoding: 7bit\n\n"
5221                         );
5222         }
5223
5224         if (is_binary) {
5225                 CtdlEncodeBase64(
5226                         &encoded_message[strlen(encoded_message)],
5227                         raw_message,
5228                         (int)raw_length,
5229                         0
5230                         );
5231         }
5232         else {
5233                 memcpy(
5234                         &encoded_message[strlen(encoded_message)],
5235                         raw_message,
5236                         (int)(raw_length+1)
5237                         );
5238         }
5239
5240         syslog(LOG_DEBUG, "Allocating\n");
5241         msg = malloc(sizeof(struct CtdlMessage));
5242         memset(msg, 0, sizeof(struct CtdlMessage));
5243         msg->cm_magic = CTDLMESSAGE_MAGIC;
5244         msg->cm_anon_type = MES_NORMAL;
5245         msg->cm_format_type = 4;
5246         msg->cm_fields['A'] = strdup(CC->user.fullname);
5247         msg->cm_fields['O'] = strdup(req_room);
5248         msg->cm_fields['N'] = strdup(config.c_nodename);
5249         msg->cm_fields['H'] = strdup(config.c_humannode);
5250         msg->cm_flags = flags;
5251
5252         msg->cm_fields['M'] = encoded_message;
5253
5254         /* Create the requested room if we have to. */
5255         if (CtdlGetRoom(&qrbuf, roomname) != 0) {
5256                 CtdlCreateRoom(roomname,
5257                                ( (is_mailbox != NULL) ? 5 : 3 ),
5258                                "", 0, 1, 0, VIEW_BBS);
5259         }
5260         /* If the caller specified this object as unique, delete all
5261          * other objects of this type that are currently in the room.
5262          */
5263         if (is_unique) {
5264                 syslog(LOG_DEBUG, "Deleted %d other msgs of this type\n",
5265                        CtdlDeleteMessages(roomname, NULL, 0, content_type)
5266                         );
5267         }
5268         /* Now write the data */
5269         CtdlSubmitMsg(msg, NULL, roomname, 0);
5270         CtdlFreeMessage(msg);
5271 }
5272
5273
5274
5275
5276
5277
5278 void CtdlGetSysConfigBackend(long msgnum, void *userdata) {
5279         config_msgnum = msgnum;
5280 }
5281
5282
5283 char *CtdlGetSysConfig(char *sysconfname) {
5284         char hold_rm[ROOMNAMELEN];
5285         long msgnum;
5286         char *conf;
5287         struct CtdlMessage *msg;
5288         char buf[SIZ];
5289
5290         strcpy(hold_rm, CC->room.QRname);
5291         if (CtdlGetRoom(&CC->room, SYSCONFIGROOM) != 0) {
5292                 CtdlGetRoom(&CC->room, hold_rm);
5293                 return NULL;
5294         }
5295
5296
5297         /* We want the last (and probably only) config in this room */
5298         begin_critical_section(S_CONFIG);
5299         config_msgnum = (-1L);
5300         CtdlForEachMessage(MSGS_LAST, 1, NULL, sysconfname, NULL,
5301                            CtdlGetSysConfigBackend, NULL);
5302         msgnum = config_msgnum;
5303         end_critical_section(S_CONFIG);
5304
5305         if (msgnum < 0L) {
5306                 conf = NULL;
5307         }
5308         else {
5309                 msg = CtdlFetchMessage(msgnum, 1);
5310                 if (msg != NULL) {
5311                         conf = strdup(msg->cm_fields['M']);
5312                         CtdlFreeMessage(msg);
5313                 }
5314                 else {
5315                         conf = NULL;
5316                 }
5317         }
5318
5319         CtdlGetRoom(&CC->room, hold_rm);
5320
5321         if (conf != NULL) do {
5322                         extract_token(buf, conf, 0, '\n', sizeof buf);
5323                         strcpy(conf, &conf[strlen(buf)+1]);
5324                 } while ( (!IsEmptyStr(conf)) && (!IsEmptyStr(buf)) );
5325
5326         return(conf);
5327 }
5328
5329
5330 void CtdlPutSysConfig(char *sysconfname, char *sysconfdata) {
5331         CtdlWriteObject(SYSCONFIGROOM, sysconfname, sysconfdata, (strlen(sysconfdata)+1), NULL, 0, 1, 0);
5332 }
5333
5334
5335 /*
5336  * Determine whether a given Internet address belongs to the current user
5337  */
5338 int CtdlIsMe(char *addr, int addr_buf_len)
5339 {
5340         struct recptypes *recp;
5341         int i;
5342
5343         recp = validate_recipients(addr, NULL, 0);
5344         if (recp == NULL) return(0);
5345
5346         if (recp->num_local == 0) {
5347                 free_recipients(recp);
5348                 return(0);
5349         }
5350
5351         for (i=0; i<recp->num_local; ++i) {
5352                 extract_token(addr, recp->recp_local, i, '|', addr_buf_len);
5353                 if (!strcasecmp(addr, CC->user.fullname)) {
5354                         free_recipients(recp);
5355                         return(1);
5356                 }
5357         }
5358
5359         free_recipients(recp);
5360         return(0);
5361 }
5362
5363
5364 /*
5365  * Citadel protocol command to do the same
5366  */
5367 void cmd_isme(char *argbuf) {
5368         char addr[256];
5369
5370         if (CtdlAccessCheck(ac_logged_in)) return;
5371         extract_token(addr, argbuf, 0, '|', sizeof addr);
5372
5373         if (CtdlIsMe(addr, sizeof addr)) {
5374                 cprintf("%d %s\n", CIT_OK, addr);
5375         }
5376         else {
5377                 cprintf("%d Not you.\n", ERROR + ILLEGAL_VALUE);
5378         }
5379
5380 }
5381
5382
5383 /*****************************************************************************/
5384 /*                      MODULE INITIALIZATION STUFF                          */
5385 /*****************************************************************************/
5386
5387 CTDL_MODULE_INIT(msgbase)
5388 {
5389         if (!threading) {
5390                 CtdlRegisterProtoHook(cmd_msgs, "MSGS", "Output a list of messages in the current room");
5391                 CtdlRegisterProtoHook(cmd_msg0, "MSG0", "Output a message in plain text format");
5392                 CtdlRegisterProtoHook(cmd_msg2, "MSG2", "Output a message in RFC822 format");
5393                 CtdlRegisterProtoHook(cmd_msg3, "MSG3", "Output a message in raw format (deprecated)");
5394                 CtdlRegisterProtoHook(cmd_msg4, "MSG4", "Output a message in the client's preferred format");
5395                 CtdlRegisterProtoHook(cmd_msgp, "MSGP", "Select preferred format for MSG4 output");
5396                 CtdlRegisterProtoHook(cmd_opna, "OPNA", "Open an attachment for download");
5397                 CtdlRegisterProtoHook(cmd_dlat, "DLAT", "Download an attachment");
5398                 CtdlRegisterProtoHook(cmd_ent0, "ENT0", "Enter a message");
5399                 CtdlRegisterProtoHook(cmd_dele, "DELE", "Delete a message");
5400                 CtdlRegisterProtoHook(cmd_move, "MOVE", "Move or copy a message to another room");
5401                 CtdlRegisterProtoHook(cmd_isme, "ISME", "Determine whether an email address belongs to a user");
5402         }
5403
5404         /* return our Subversion id for the Log */
5405         return "msgbase";
5406 }